Function at 0x4861ba
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b1a0d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x724
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
push 1
lea ecx, [ebp - 0x38c]
call fcn.0040ac30
mov dword [ebp - 0x24], 1
mov dword [ebp - 0x58], 1
mov dword [ebp - 0x660], 0x63718bd8
mov dword [ebp - 0x1c], 0x9e3d3b0c
mov dword [ebp - 0x248], 0x45
mov dword [ebp - 0x3ec], 0xaa6f08
cmp dword [ebp - 0x248], 0x55
jle 0x486308
and dword [ebp - 0x74], 0
jmp 0x486239
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0x62e3
jge 0x486308
and dword [ebp - 0x114], 0
jmp 0x48625c
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0x38b4
jge 0x486303
and dword [ebp - 0x7c], 0
jmp 0x486279
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0x3333
jge 0x4862fe
and dword [ebp - 0xfc], 0
jmp 0x486298
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0x498e
jge 0x4862f9
mov eax, dword [ebp - 0x74]
sub eax, dword [ebp - 0x114]
mov ecx, dword [ebp - 0x7c]
sar eax, cl
or eax, dword [ebp - 0xfc]
cdq
mov dword [ebp - 0x43c], eax
mov dword [ebp - 0x438], edx
push dword [ebp - 0x438]
push dword [ebp - 0x43c]
lea ecx, [ebp - 0x734]
call fcn.00401a01
pop ecx
pop ecx
mov ecx, eax
call fcn.0040a8d0
push eax
call fcn.0049b1a7
pop ecx
lea ecx, [ebp - 0x734]
call fcn.0040a8c6
jmp 0x48628b
jmp 0x486272
jmp 0x48624f
jmp 0x486232
mov dword [ebp - 0x5c4], 0xffffffff
and dword [ebp - 4], 0
cmp dword [ebp - 0x248], 0xffffff49
jge 0x48632e
push dword [ebp - 0x3ec]
call fcn.0049b1a7
pop ecx
jmp 0x48634a
or dword [ebp - 4], 0xffffffff
jmp 0x486354
mov dword [ebp - 0x188], 0x68dacb31
mov dword [ebp - 0x1a0], 0x3b10
mov dword [ebp - 0x4cc], 0xa01d
lea eax, [ebp - 0x38c]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.00485886
pop ecx
pop ecx
mov dword [ebp - 0x20], 0
jmp 0x486394
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x4863aa
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x5f0], 0xffffffff
jmp 0x48638d
mov dword [ebp - 0x20], 0
jmp 0x4863ba
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x4863d0
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x600], 0xdec995f7
jmp 0x4863b3
mov dword [ebp - 0x24], 0
jmp 0x4863e0
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jg 0x4864d0
mov dword [ebp - 0x84], 0
jmp 0x486403
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 2
jge 0x48641f
mov eax, dword [ebp - 0x84]
mov dword [ebp + eax*4 - 0x608], 0xf7921e12
jmp 0x4863f6
push dword [ebp - 0x24]
lea ecx, [ebp - 0x38c]
call fcn.0040ad1e
cmp dword [eax], 0
je 0x48648a
push dword [ebp - 0x24]
lea ecx, [ebp - 0x38c]
call fcn.0040ad1e
cmp dword [eax], 0
jne 0x48645c
mov eax, dword [ebp - 0x58]
sub eax, dword [ebp - 0x58]
sub eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x58]
jg 0x48645c
and dword [ebp - 0x37c], 0
jmp 0x486466
mov dword [ebp - 0x37c], 1
push dword [ebp - 0x24]
lea ecx, [ebp - 0x38c]
call fcn.0040ad1e
mov eax, dword [eax]
sub eax, dword [ebp - 0x37c]
je 0x48648a
mov dword [ebp - 0x2b4], 1
jmp 0x486491
and dword [ebp - 0x2b4], 0
mov eax, 0xffff
sub eax, dword [ebp - 0x2b4]
je 0x4864b1
push 0xfffffffffffffffe
pop eax
test eax, eax
je 0x4864b1
mov dword [ebp - 0x360], 1
jmp 0x4864b8
and dword [ebp - 0x360], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x360]
mov dword [ebp + eax - 0x608], ecx
jmp 0x4863d9
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x1d4], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1d4]
mov dword [ebp + eax - 0x5f0], ecx
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x430], eax
mov eax, dword [ebp - 0x1d4]
mov dword [ebp - 0x4bc], eax
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
mov eax, dword [ebp - 0x430]
cmp eax, dword [ebp - 0x4bc]
jg 0x48652b
mov dword [ebp - 0x36c], 1
jmp 0x486532
and dword [ebp - 0x36c], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x668], eax
mov esi, dword [ebp - 0x1c]
push 0
lea ecx, [ebp - 0x38c]
call fcn.0040ad1e
cmp esi, dword [eax]
jne 0x48655b
mov dword [ebp - 0x1dc], 1
jmp 0x486562
and dword [ebp - 0x1dc], 0
mov eax, dword [ebp - 0x36c]
neg eax
add eax, dword [ebp - 0x1dc]
je 0x486582
xor eax, eax
je 0x486582
mov dword [ebp - 0x2bc], 1
jmp 0x486589
and dword [ebp - 0x2bc], 0
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
mov eax, dword [ebp - 0x188]
mov ecx, dword [ebp - 0x1c]
imul ecx, dword [ebp - 0x2bc]
sub ecx, dword [ebp - 0x58]
sub eax, ecx
cmp eax, 0x54120977
jl 0x4865c7
mov eax, 0xfffb
test eax, eax
je 0x4865c7
mov dword [ebp - 0x1e4], 1
jmp 0x4865ce
and dword [ebp - 0x1e4], 0
mov eax, dword [ebp - 0x58]
cmp eax, dword [ebp - 0x1e4]
jl 0x4865e5
mov dword [ebp - 0x32c], 1
jmp 0x4865ec
and dword [ebp - 0x32c], 0
mov eax, dword [ebp - 0x32c]
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0x486731
mov dword [ebp - 0x1ec], 0x4e83
mov dword [ebp - 0x4c4], 0xaa6f70
cmp dword [ebp - 0x1ec], 0x4ec0
jle 0x4866c1
push 0
call dword [0xabd19c]
and dword [ebp - 0x124], 0
jmp 0x486641
mov eax, dword [ebp - 0x124]
inc eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0x4163
jge 0x4866c1
and dword [ebp - 0x8c], 0
jmp 0x486663
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0x6d6
jge 0x4866bc
mov eax, dword [ebp - 0x124]
add eax, dword [ebp - 0x8c]
cdq
mov dword [ebp - 0x448], eax
mov dword [ebp - 0x444], edx
push dword [ebp - 0x444]
push dword [ebp - 0x448]
lea ecx, [ebp - 0x71c]
call fcn.00401a01
pop ecx
pop ecx
mov ecx, eax
call fcn.0040a8d0
push eax
call fcn.0049b1a7
pop ecx
lea ecx, [ebp - 0x71c]
call fcn.0040a8c6
jmp 0x486656
jmp 0x486634
mov dword [ebp - 0x1c], 0xffffffe3
jmp 0x4866d1
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0xffffffe9
jle 0x4866e7
mov byte [ebp - 0x3e], 0
lea eax, [ebp - 0x3e]
push eax
call fcn.004858ce
pop ecx
jmp 0x4866ca
mov dword [ebp - 4], 2
cmp dword [ebp - 0x1ec], 0x4e61
jge 0x486706
push dword [ebp - 0x4c4]
call fcn.0049b1a7
pop ecx
jmp 0x486722
or dword [ebp - 4], 0xffffffff
jmp 0x48672c
jmp 0x4868af
mov dword [ebp - 0x44], 6
mov dword [ebp - 0x524], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x5f0]
mov dword [ebp - 0x5cc], eax
mov eax, dword [ebp - 0x44]
sub eax, 0x577f1e4c
cmp eax, dword [ebp - 0x1c]
je 0x48676e
mov dword [ebp - 0x2c4], 1
jmp 0x486775
and dword [ebp - 0x2c4], 0
cmp dword [ebp - 0x2c4], 0x4d09d52f
jle 0x48678d
mov dword [ebp - 0x1f4], 1
jmp 0x486794
and dword [ebp - 0x1f4], 0
mov esi, dword [ebp - 0x44]
push 0
lea ecx, [ebp - 0x38c]
call fcn.0040ad1e
mov ecx, dword [ebp - 0x1f4]
sub ecx, dword [eax]
cmp esi, ecx
jg 0x4867bc
mov dword [ebp - 0x364], 1
jmp 0x4867c3
and dword [ebp - 0x364], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x600]
cmp eax, dword [ebp - 0x364]
jge 0x4867e3
mov dword [ebp - 0x1fc], 1
jmp 0x4867ea
and dword [ebp - 0x1fc], 0
imul eax, dword [ebp - 0x1fc], 0
imul eax, eax, 9
test eax, eax
je 0x486808
xor eax, eax
je 0x486808
mov dword [ebp - 0x2cc], 1
jmp 0x48680f
and dword [ebp - 0x2cc], 0
mov eax, dword [ebp - 0x4cc]
add eax, dword [ebp - 0x2cc]
je 0x486832
mov eax, 0xbf28
test eax, eax
je 0x486832
mov dword [ebp - 0x204], 1
jmp 0x486839
and dword [ebp - 0x204], 0
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x204], eax
jg 0x486850
mov dword [ebp - 0x4d4], 1
jmp 0x486857
and dword [ebp - 0x4d4], 0
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x650], eax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x5d4], eax
mov eax, dword [ebp - 0x524]
sub eax, 0xf573
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x600]
jge 0x48688e
mov dword [ebp - 0x334], 1
jmp 0x486895
and dword [ebp - 0x334], 0
mov eax, dword [ebp - 0x334]
mov dword [ebp - 0x44], eax
mov byte [ebp - 0x3f], 0
movzx eax, byte [ebp - 0x3f]
test eax, eax
je 0x4868af
call fcn.004858f0
lea ecx, [ebp - 0x38c]
call fcn.0040ad02
mov byte [ebp - 0x178], 9
mov byte [ebp - 0x177], 0xfc
mov byte [ebp - 0x176], 0x19
mov byte [ebp - 0x175], 0x10
mov byte [ebp - 0x174], 0xa
mov byte [ebp - 0x173], 0x11
mov byte [ebp - 0x172], 0x14
mov byte [ebp - 0x171], 0x1e
mov byte [ebp - 0x170], 0x18
mov byte [ebp - 0x16f], 0xc
mov byte [ebp - 0x16e], 0
mov byte [ebp - 0x16d], 0x18
mov byte [ebp - 0x16c], 3
mov byte [ebp - 0x16b], 5
mov byte [ebp - 0x16a], 0xf
mov byte [ebp - 0x169], 0x14
mov byte [ebp - 0x168], 0xc
mov byte [ebp - 0x167], 0x1d
mov byte [ebp - 0x166], 1
mov byte [ebp - 0x165], 0xf
mov byte [ebp - 0x164], 0x11
mov byte [ebp - 0x163], 0x39
mov byte [ebp - 0x162], 0xcf
mov byte [ebp - 0x161], 0xd5
mov byte [ebp - 0x160], 0x57
mov byte [ebp - 0x15f], 0x74
mov byte [ebp - 0x15e], 0x51
mov byte [ebp - 0x15d], 0x9d
mov byte [ebp - 0x15c], 0xda
mov byte [ebp - 0x15b], 0xb2
mov byte [ebp - 0x15a], 0x53
mov byte [ebp - 0x159], 0x20
mov byte [ebp - 0x158], 0x74
mov byte [ebp - 0x157], 0x43
mov byte [ebp - 0x156], 0x45
mov byte [ebp - 0x155], 0x32
mov byte [ebp - 0x154], 5
mov byte [ebp - 0x153], 0xab
mov byte [ebp - 0x152], 0x12
mov byte [ebp - 0x151], 0x11
mov byte [ebp - 0x150], 6
mov byte [ebp - 0x14f], 0x14
mov byte [ebp - 0x14e], 0x15
mov byte [ebp - 0x14d], 0x11
mov byte [ebp - 0x14c], 2
mov byte [ebp - 0x14b], 0x15
mov byte [ebp - 0x14a], 5
mov byte [ebp - 0x149], 5
mov byte [ebp - 0x148], 7
mov byte [ebp - 0x147], 0xe
mov byte [ebp - 0x146], 8
mov byte [ebp - 0x145], 1
mov byte [ebp - 0x144], 0x10
mov byte [ebp - 0x143], 0x18
mov byte [ebp - 0x142], 0x16
mov byte [ebp - 0x141], 6
mov byte [ebp - 0x140], 0xe
mov byte [ebp - 0x13f], 0x18
mov byte [ebp - 0x13e], 0xd
mov byte [ebp - 0x13d], 1
mov byte [ebp - 0x13c], 0xb
mov byte [ebp - 0x13b], 2
mov byte [ebp - 0x13a], 0x11
mov byte [ebp - 0x139], 0x1e
mov byte [ebp - 0x138], 0x13
mov byte [ebp - 0x137], 6
mov byte [ebp - 0x136], 0x17
mov byte [ebp - 0x135], 0xc
mov byte [ebp - 0x134], 4
mov byte [ebp - 0x133], 0x1d
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x178]
or eax, 0x96
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x178]
and ecx, 0x96
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x178]
mov byte [ebp + ecx - 0x5a4], al
mov dword [ebp - 0x2c], 3
mov dword [ebp - 0x214], 0x8591b68d
mov dword [ebp - 0x2dc], 0xffffffff
cmp dword [ebp - 0x2c], 0
je 0x486b0f
mov dword [ebp - 0x520], 1
jmp 0x486b16
and dword [ebp - 0x520], 0
mov eax, dword [ebp - 0x2dc]
cmp dword [ebp - 0x2c], eax
je 0x486b2d
mov dword [ebp - 0x20c], 1
jmp 0x486b34
and dword [ebp - 0x20c], 0
cmp dword [ebp - 0x20c], 0xfffffff7
jle 0x486b49
mov dword [ebp - 0x2d4], 1
jmp 0x486b50
and dword [ebp - 0x2d4], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x2d4], eax
jne 0x486b67
mov dword [ebp - 0x374], 1
jmp 0x486b6e
and dword [ebp - 0x374], 0
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
cmp eax, dword [ebp - 0x374]
jg 0x486b91
mov dword [ebp - 0x21c], 1
jmp 0x486b98
and dword [ebp - 0x21c], 0
cmp dword [ebp - 0x21c], 4
ja 0x486bad
mov dword [ebp - 0x4f8], 1
jmp 0x486bb4
and dword [ebp - 0x4f8], 0
cmp dword [ebp - 0x2c], 6
jne 0x486bc6
mov dword [ebp - 0x224], 1
jmp 0x486bcd
and dword [ebp - 0x224], 0
mov eax, dword [ebp - 0x2dc]
cmp dword [ebp - 0x224], eax
jl 0x486be7
mov dword [ebp - 0x33c], 1
jmp 0x486bee
and dword [ebp - 0x33c], 0
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x33c]
jg 0x486c05
mov dword [ebp - 0x22c], 1
jmp 0x486c0c
and dword [ebp - 0x22c], 0
cmp dword [ebp - 0x22c], 0x58efa97f
je 0x486c24
mov dword [ebp - 0x2e4], 1
jmp 0x486c2b
and dword [ebp - 0x2e4], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x2e4], eax
jle 0x486c42
mov dword [ebp - 0x234], 1
jmp 0x486c49
and dword [ebp - 0x234], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x234], eax
jge 0x486c6d
mov dword [ebp - 0x428], 0x9ff4caa5
lea eax, [ebp - 0x428]
push eax
call fcn.0048590e
pop ecx
jmp 0x486c88
mov byte [ebp - 0x38], 0
movzx eax, byte [ebp - 0x38]
test eax, eax
je 0x486c88
push 0
push 0x4bd
push 0
call dword [0xabd060]
mov dword [ebp - 0x14], 2
and dword [ebp - 0x118], 0
jmp 0x486ca0
mov eax, dword [ebp - 0x14]
inc eax
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x46
jae 0x487a5b
mov dword [ebp - 0x3cc], 0xf7e2799a
mov dword [ebp - 0x3c8], 0xf7e2799a
mov dword [ebp - 0x3c4], 0xf7e2799a
mov dword [ebp - 0x3c0], 0xf7e2799a
mov dword [ebp - 0x28c], 0
mov dword [ebp - 0x23c], 0xfffffff6
mov dword [ebp - 0x67c], 0xae0fc36f
mov dword [ebp - 0x3f4], 0xfffffffe
mov dword [ebp - 0x2fc], 1
mov dword [ebp - 0x48], 0xcefbde28
mov dword [ebp - 0x3e4], 0xe74a6e8f
mov dword [ebp - 0x494], 0xfffffff8
mov dword [ebp - 0x2f4], 0xfffffffe
mov dword [ebp - 0x68], 0xffffffff
mov dword [ebp - 0x104], 0
jmp 0x486d49
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 3
jge 0x486d65
mov eax, dword [ebp - 0x104]
mov dword [ebp + eax*4 - 0x614], 1
jmp 0x486d3c
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x3cc], 0
jmp 0x486d90
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x3cc]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x3cc], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x3cc], 0xffffffec
jl 0x48747a
mov dword [ebp - 0x370], 0x89a6
mov dword [ebp - 0x1b0], 0x6f8b8ae5
mov dword [ebp - 0x380], 0x7df0
mov dword [ebp - 0x3dc], 0xaa6fb8
cmp dword [ebp - 0x380], 0x809d
jle 0x486eb9
and dword [ebp - 0x9c], 0
jmp 0x486df1
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0x65e
jge 0x486eb9
and dword [ebp - 0x94], 0
jmp 0x486e17
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0x5ec6
jge 0x486eb4
and dword [ebp - 0x11c], 0
jmp 0x486e3d
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0x5b59
jge 0x486eaf
and dword [ebp - 0x10c], 0
jmp 0x486e5f
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0x1e6a
jge 0x486ead
mov ecx, dword [ebp - 0x94]
imul ecx, dword [ebp - 0x11c]
mov eax, dword [ebp - 0x9c]
shl eax, cl
mov ecx, dword [ebp - 0x10c]
shl eax, cl
cdq
mov dword [ebp - 0x454], eax
mov dword [ebp - 0x450], edx
push dword [ebp - 0x450]
push dword [ebp - 0x454]
mov ecx, 0xaba118
call fcn.0040a8db
jmp 0x486e52
jmp 0x486e30
jmp 0x486e0a
jmp 0x486de4
mov dword [ebp - 0x54c], 0xfffffffa
mov dword [ebp - 0x548], 0xfffffffa
mov dword [ebp - 0x544], 0xfffffffa
mov dword [ebp - 0x540], 0xfffffffa
lea ecx, [ebp - 0x1b1]
call fcn.0040ad2d
push eax
lea eax, [ebp - 0x53c]
push eax
lea eax, [ebp - 0x54c]
push eax
lea ecx, [ebp - 0x6b4]
call fcn.0040ad30
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x3bc]
call fcn.0040acdc
mov dword [ebp - 4], 4
cmp dword [ebp - 0x380], 0x7a84
jge 0x486f39
mov edx, dword [ebp - 0x3dc]
mov ecx, 0xaba118
call fcn.0040d553
jmp 0x486f55
or dword [ebp - 4], 0xffffffff
jmp 0x486f5f
mov dword [ebp - 0x514], 0xffffffff
mov dword [ebp - 0x34], 3
mov eax, dword [ebp - 0x34]
imul eax, dword [ebp - 0x68]
mov dword [ebp - 0x23c], eax
mov eax, dword [ebp - 0x23c]
mov ecx, dword [ebp - 0x68]
inc ecx
mov dword [ebp - 0x68], ecx
mov ecx, dword [ebp - 0x34]
dec ecx
mov dword [ebp - 0x34], ecx
test eax, eax
jne 0x486fa4
cmp dword [ebp - 0x34], 0
jne 0x486fa4
and dword [ebp - 0x2ec], 0
jmp 0x486fae
mov dword [ebp - 0x2ec], 1
mov eax, dword [ebp - 0x370]
cmp eax, dword [ebp - 0x2ec]
jl 0x486fc8
mov dword [ebp - 0x34c], 1
jmp 0x486fcf
and dword [ebp - 0x34c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x614]
mov dword [ebp - 0x5dc], eax
mov eax, dword [ebp - 0x494]
cmp dword [ebp - 0x3e4], eax
jle 0x486ffb
mov dword [ebp - 0x244], 1
jmp 0x487002
and dword [ebp - 0x244], 0
mov eax, dword [ebp - 0x2f4]
cmp dword [ebp - 0x244], eax
jne 0x487022
mov eax, 0xd45e
test eax, eax
jne 0x487022
and dword [ebp - 0x344], 0
jmp 0x48702c
mov dword [ebp - 0x344], 1
cmp dword [ebp - 0x344], 0xffffffff
jle 0x487041
mov dword [ebp - 0x24c], 1
jmp 0x487048
and dword [ebp - 0x24c], 0
mov eax, dword [ebp - 0x28c]
cmp dword [ebp - 0x24c], eax
jne 0x487068
cmp dword [ebp - 0x2f4], 0
jne 0x487068
and dword [ebp - 0x254], 0
jmp 0x487072
mov dword [ebp - 0x254], 1
mov eax, dword [ebp - 0x514]
imul eax, dword [ebp - 0x254]
cmp eax, dword [ebp - 0x370]
jne 0x487093
mov dword [ebp - 0x25c], 1
jmp 0x48709a
and dword [ebp - 0x25c], 0
mov eax, dword [ebp - 0x25c]
mov dword [ebp - 0x2fc], eax
mov eax, dword [ebp - 0x2fc]
mov dword [ebp - 0x264], eax
push 0
lea ecx, [ebp - 0x3bc]
call fcn.0040ad1e
mov ecx, dword [ebp - 0x264]
mov dword [eax], ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3cc]
cmp dword [ebp - 0x264], eax
jle 0x4870e8
mov dword [ebp - 0x3d0], 1
jmp 0x4870ef
and dword [ebp - 0x3d0], 0
cmp dword [ebp - 0x1b0], 0
jne 0x487104
mov dword [ebp - 0x26c], 1
jmp 0x48710b
and dword [ebp - 0x26c], 0
mov eax, dword [ebp - 0x34c]
cmp eax, dword [ebp - 0x26c]
je 0x487125
mov dword [ebp - 0x304], 1
jmp 0x48712c
and dword [ebp - 0x304], 0
cmp dword [ebp - 0x304], 0x76c132d4
jge 0x48713c
cmp dword [ebp - 0x48], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x614]
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 0
je 0x48716f
push 3
lea ecx, [ebp - 0x3bc]
call fcn.0040ad1e
mov dword [eax], 0x29bb2d3
jmp 0x48746a
mov dword [ebp - 0x190], 0xfa0179e4
mov dword [ebp - 0xa4], 0
jmp 0x487192
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 1
jge 0x4871ae
mov eax, dword [ebp - 0xa4]
mov dword [ebp + eax*4 - 0x1a8], 0
jmp 0x487185
mov dword [ebp - 0x48], 0
jmp 0x4871be
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 3
jg 0x48734b
mov dword [ebp - 0x34], 0
jmp 0x4871d8
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 3
jg 0x487346
mov byte [ebp - 0x3c], 0
movzx eax, byte [ebp - 0x3c]
test eax, eax
je 0x487341
mov dword [ebp - 0x274], 0x50cc
mov dword [ebp - 0x4a0], 0xaa7000
cmp dword [ebp - 0x274], 0x5238
jle 0x4872f3
and dword [ebp - 0x12c], 0
jmp 0x48722c
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0x7547
jge 0x4872f3
and dword [ebp - 0xac], 0
jmp 0x487252
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0x48b4
jge 0x4872ee
and dword [ebp - 0xf4], 0
jmp 0x487278
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0x2e94
jge 0x4872e9
and dword [ebp - 0xb4], 0
jmp 0x48729a
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0x52ae
jge 0x4872e7
mov eax, dword [ebp - 0x12c]
mov ecx, dword [ebp - 0xac]
shl eax, cl
mov ecx, dword [ebp - 0xf4]
add ecx, dword [ebp - 0xb4]
sar eax, cl
cdq
mov dword [ebp - 0x460], eax
mov dword [ebp - 0x45c], edx
push dword [ebp - 0x45c]
push dword [ebp - 0x460]
mov ecx, 0xaba118
call fcn.0040a8db
jmp 0x48728d
jmp 0x48726b
jmp 0x487245
jmp 0x48721f
call fcn.00485926
mov dword [ebp - 4], 6
cmp dword [ebp - 0x274], 0x4f4a
jge 0x48731b
mov edx, dword [ebp - 0x4a0]
mov ecx, 0xaba118
call fcn.0040d553
jmp 0x487337
or dword [ebp - 4], 0xffffffff
jmp 0x487341
jmp 0x4871d1
jmp 0x4871b7
push 0
lea ecx, [ebp - 0x3bc]
call fcn.0040ad1e
cmp dword [ebp - 0x190], 0
je 0x48737f
push 0
lea ecx, [ebp - 0x3bc]
call fcn.0040ad1e
cmp dword [eax], 0
je 0x48737f
mov dword [ebp - 0x378], 1
jmp 0x487386
and dword [ebp - 0x378], 0
push 0
lea ecx, [ebp - 0x3bc]
call fcn.0040ad1e
mov eax, dword [eax]
cmp eax, dword [ebp - 0x378]
jg 0x4873a9
mov dword [ebp - 0x27c], 1
jmp 0x4873b0
and dword [ebp - 0x27c], 0
mov eax, dword [ebp - 0x3f4]
cmp eax, dword [ebp - 0x27c]
jne 0x4873ca
mov dword [ebp - 0x284], 1
jmp 0x4873d1
and dword [ebp - 0x284], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1a8]
mov dword [ebp - 0x30c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x30c]
mov dword [ebp + eax - 0x1a8], ecx
mov eax, dword [ebp - 0x30c]
sub eax, dword [ebp - 0x284]
jne 0x487415
push 7
pop eax
test eax, eax
jne 0x487415
and dword [ebp - 0x354], 0
jmp 0x48741f
mov dword [ebp - 0x354], 1
imul eax, dword [ebp - 0x354], 0
cmp eax, dword [ebp - 0x190]
jle 0x48743a
mov dword [ebp - 0x51c], 1
jmp 0x487441
and dword [ebp - 0x51c], 0
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x658], eax
cmp dword [ebp - 0x48], 0
jne 0x487457
cmp dword [ebp - 0x190], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1a8]
mov dword [ebp - 0x28c], eax
lea ecx, [ebp - 0x3bc]
call fcn.0040ad02
jmp 0x486d77
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x178]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x14], eax
jne 0x4874bd
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0x178]
inc eax
mov dword [ebp - 0x118], eax
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0x178]
mov ecx, dword [ebp - 0x14]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x14], eax
jmp 0x486c98
mov dword [ebp - 0x314], 0xce6
mov dword [ebp - 0x3fc], 0xaa704c
cmp dword [ebp - 0x314], 0x102d
jle 0x48759f
push 0xe06
push 0x2694
push 0
call dword [0xabd0b0]
and dword [ebp - 0xbc], 0
jmp 0x487509
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0x5b76
jge 0x48759f
and dword [ebp - 0x100], 0
jmp 0x48752f
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0xbe6
jge 0x48759a
and dword [ebp - 0xc4], 0
jmp 0x487551
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0x2841
jge 0x487598
mov eax, dword [ebp - 0xbc]
cdq
idiv dword [ebp - 0x100]
imul edx, dword [ebp - 0xc4]
mov eax, edx
cdq
mov dword [ebp - 0x46c], eax
mov dword [ebp - 0x468], edx
push dword [ebp - 0x468]
push dword [ebp - 0x46c]
mov ecx, 0xaba118
call fcn.0040a8db
jmp 0x487544
jmp 0x487522
jmp 0x4874fc
mov dword [ebp - 4], 8
cmp dword [ebp - 0x314], 0xbb9
jge 0x4875c2
mov edx, dword [ebp - 0x3fc]
mov ecx, 0xaba118
call fcn.0040d553
jmp 0x4875de
or dword [ebp - 4], 0xffffffff
jmp 0x4875e8
mov dword [ebp - 0x18], 4
mov dword [ebp - 0x40c], 0
mov dword [ebp - 0x5e4], 0x3c1de6fc
mov dword [ebp - 0x294], 0x3616
mov dword [ebp - 0x4ac], 0xaa7060
cmp dword [ebp - 0x294], 0x384e
jle 0x4876d3
and dword [ebp - 0x108], 0
jmp 0x48763d
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0x7b28
jge 0x4876d3
and dword [ebp - 0xcc], 0
jmp 0x487663
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0x63b
jge 0x4876ce
and dword [ebp - 0x110], 0
jmp 0x487685
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0x457c
jge 0x4876cc
mov eax, dword [ebp - 0x108]
cdq
idiv dword [ebp - 0xcc]
imul edx, dword [ebp - 0x110]
mov eax, edx
cdq
mov dword [ebp - 0x478], eax
mov dword [ebp - 0x474], edx
push dword [ebp - 0x474]
push dword [ebp - 0x478]
mov ecx, 0xaba118
call fcn.0040a8db
jmp 0x487678
jmp 0x487656
jmp 0x487630
mov dword [ebp - 0xd4], 0
jmp 0x4876ec
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 1
jge 0x487708
mov eax, dword [ebp - 0xd4]
mov dword [ebp + eax*4 - 0x198], 0
jmp 0x4876df
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x294], 0x328e
jge 0x48772b
mov edx, dword [ebp - 0x4ac]
mov ecx, 0xaba118
call fcn.0040d553
jmp 0x487747
or dword [ebp - 4], 0xffffffff
jmp 0x487751
mov dword [ebp - 0x18], 0
jmp 0x487761
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jl 0x48777b
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x198], 0
je 0x487779
jmp 0x48777b
jmp 0x48775a
mov dword [ebp - 0x18], 0
jmp 0x48778b
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0xffffffed
jge 0x487850
mov dword [ebp - 0x31c], 0xffff
mov dword [ebp - 0x368], 2
mov dword [ebp - 0x504], 0xdbd0176d
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x198]
neg eax
mov dword [ebp - 0x368], eax
mov eax, dword [ebp - 0x31c]
imul eax, dword [ebp - 0x368]
cmp dword [ebp - 0x18], eax
jne 0x4877e6
mov dword [ebp - 0x29c], 1
jmp 0x4877ed
and dword [ebp - 0x29c], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x29c], eax
jle 0x487804
mov dword [ebp - 0x2a4], 1
jmp 0x48780b
and dword [ebp - 0x2a4], 0
mov eax, dword [ebp - 0x31c]
cmp dword [ebp - 0x2a4], eax
jl 0x487825
mov dword [ebp - 0x404], 1
jmp 0x48782c
and dword [ebp - 0x404], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x198]
mov dword [ebp - 0x618], eax
mov eax, dword [ebp - 0x504]
mov dword [ebp - 0x40c], eax
jmp 0x487784
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0x177]
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x118]
movzx ecx, byte [ebp + ecx - 0x17a]
movsx ecx, byte [ebp + ecx - 0x5a4]
or eax, ecx
mov ecx, dword [ebp - 0x14]
movzx ecx, byte [ebp + ecx - 0x177]
mov edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0x118]
movzx edx, byte [ebp + edx - 0x17a]
movsx edx, byte [ebp + edx - 0x5a4]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x14]
movzx ecx, byte [ebp + ecx - 0x178]
mov byte [ebp + ecx - 0x5a4], al
lea eax, [ebp - 0x118]
push eax
push 0
push 0x4a1e
call fcn.00489c85
add esp, 0xc
mov dword [ebp - 0x30], 3
mov dword [ebp - 0x324], 0x8591b68d
mov dword [ebp - 0x1d8], 0xffffffff
cmp dword [ebp - 0x30], 0
je 0x4878f3
mov dword [ebp - 0x4b8], 1
jmp 0x4878fa
and dword [ebp - 0x4b8], 0
mov eax, dword [ebp - 0x1d8]
cmp dword [ebp - 0x30], eax
je 0x487911
mov dword [ebp - 0x35c], 1
jmp 0x487918
and dword [ebp - 0x35c], 0
cmp dword [ebp - 0x35c], 0xfffffff7
jle 0x48792d
mov dword [ebp - 0x2ac], 1
jmp 0x487934
and dword [ebp - 0x2ac], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x2ac], eax
jne 0x48794b
mov dword [ebp - 0x1cc], 1
jmp 0x487952
and dword [ebp - 0x1cc], 0
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x324], eax
mov eax, dword [ebp - 0x324]
cmp eax, dword [ebp - 0x1cc]
jg 0x487975
mov dword [ebp - 0x1d0], 1
jmp 0x48797c
and dword [ebp - 0x1d0], 0
cmp dword [ebp - 0x1d0], 4
ja 0x487991
mov dword [ebp - 0x414], 1
jmp 0x487998
and dword [ebp - 0x414], 0
cmp dword [ebp - 0x30], 6
jne 0x4879aa
mov dword [ebp - 0x1e0], 1
jmp 0x4879b1
and dword [ebp - 0x1e0], 0
mov eax, dword [ebp - 0x1d8]
cmp dword [ebp - 0x1e0], eax
jl 0x4879cb
mov dword [ebp - 0x1e8], 1
jmp 0x4879d2
and dword [ebp - 0x1e8], 0
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x1e8]
jg 0x4879e9
mov dword [ebp - 0x1f0], 1
jmp 0x4879f0
and dword [ebp - 0x1f0], 0
cmp dword [ebp - 0x1f0], 0x58efa97f
je 0x487a08
mov dword [ebp - 0x1f8], 1
jmp 0x487a0f
and dword [ebp - 0x1f8], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x1f8], eax
jle 0x487a26
mov dword [ebp - 0x200], 1
jmp 0x487a2d
and dword [ebp - 0x200], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x200], eax
jge 0x487a51
mov dword [ebp - 0x508], 0x9ff4caa5
lea eax, [ebp - 0x508]
push eax
call fcn.0048590e
pop ecx
jmp 0x487a56
call fcn.00485935
jmp 0x486c98
mov dword [ebp - 0xdc], 0
jmp 0x487a74
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 2
jge 0x487a90
mov eax, dword [ebp - 0xdc]
mov dword [ebp + eax*4 - 0x394], 1
jmp 0x487a67
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x394], 0
jmp 0x487abe
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x394]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x394], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x394], 0x11
jge 0x487ae1
mov byte [ebp - 0x3a], 0
movzx eax, byte [ebp - 0x3a]
test eax, eax
je 0x487adf
call fcn.00407cd0
jmp 0x487aa3
xor eax, eax
inc eax
imul eax, eax, 0x1a
mov byte [ebp + eax - 0x5a4], 0
mov dword [ebp - 0x208], 0x6c4d
mov dword [ebp - 0x41c], 0xaa70b8
cmp dword [ebp - 0x208], 0x6cb9
jle 0x487bda
and dword [ebp - 0x128], 0
jmp 0x487b29
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0x31c3
jge 0x487bda
and dword [ebp - 0x120], 0
jmp 0x487b4f
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0x2be9
jge 0x487bd5
and dword [ebp - 0xe4], 0
jmp 0x487b71
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0x50c2
jge 0x487bd0
mov eax, dword [ebp - 0x120]
sub eax, dword [ebp - 0xe4]
or eax, dword [ebp - 0x128]
cdq
mov dword [ebp - 0x484], eax
mov dword [ebp - 0x480], edx
push dword [ebp - 0x480]
push dword [ebp - 0x484]
lea ecx, [ebp - 0x704]
call fcn.00401a01
pop ecx
pop ecx
mov ecx, eax
call fcn.0040a8d0
push eax
call fcn.0049b1a7
pop ecx
lea ecx, [ebp - 0x704]
call fcn.0040a8c6
jmp 0x487b64
jmp 0x487b42
jmp 0x487b1c
lea eax, [ebp - 0x5a4]
push eax
lea ecx, [ebp - 0x6ac]
call fcn.0048f145
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0x208], 0x6a56
jge 0x487c0b
push dword [ebp - 0x41c]
call fcn.0049b1a7
pop ecx
jmp 0x487c27
or dword [ebp - 4], 0xffffffff
jmp 0x487c31
mov dword [ebp - 0x50], 0x7e2799ac
mov dword [ebp - 0x424], 0xffffffff
mov dword [ebp - 0x50], 0
jmp 0x487c52
mov eax, dword [ebp - 0x50]
dec eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0xfffffff6
jl 0x487ca0
mov dword [ebp - 0x518], 1
mov dword [ebp - 0x4c0], 5
lea eax, [ebp - 0x4c0]
push eax
lea eax, [ebp - 0x424]
push eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x518]
push eax
call fcn.00485a4e
add esp, 0x10
mov byte [ebp - 0x39], 0
movzx eax, byte [ebp - 0x39]
test eax, eax
je 0x487c9e
call fcn.00485bcf
jmp 0x487c4b
and dword [ebp - 0x70], 0
jmp 0x487cad
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0x1b
jae 0x488047
mov dword [ebp - 0x60], 0x9b55bb2c
mov dword [ebp - 0x5f4], 0x1a7ecc24
mov dword [ebp - 0x620], 7
mov dword [ebp - 0x670], 0x2d0da0bd
mov dword [ebp - 0x624], 0xffffffff
push 2
lea ecx, [ebp - 0x64c]
call fcn.0040ac30
lea eax, [ebp - 0x64c]
push eax
lea eax, [ebp - 0x5a8]
push eax
call fcn.0040883f
pop ecx
pop ecx
mov dword [ebp - 0x60], 7
jmp 0x487d18
mov eax, dword [ebp - 0x60]
dec eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0xffffffed
jg 0x488018
push 3
lea ecx, [ebp - 0x4e4]
call fcn.0040ac30
mov dword [ebp - 0x4c8], 1
mov dword [ebp - 0x5ac], 0xffffffff
mov dword [ebp - 0x538], 0x842f88d9
mov dword [ebp - 0x534], 0x842f88d9
mov dword [ebp - 0x530], 0x842f88d9
mov dword [ebp - 0x52c], 0x842f88d9
lea ecx, [ebp - 0x179]
call fcn.0040ad2d
push eax
lea eax, [ebp - 0x528]
push eax
lea eax, [ebp - 0x538]
push eax
lea ecx, [ebp - 0x6bc]
call fcn.0040ad30
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x63c]
call fcn.0040acdc
mov dword [ebp - 0x5b0], 9
mov dword [ebp - 0x1b8], 0xa70a1ee3
mov dword [ebp - 0x210], 0x5eab
mov dword [ebp - 0x42c], 0xaa70e8
cmp dword [ebp - 0x210], 0x611f
jle 0x487eb3
push 0
push 0
call dword [0xabd334]
and dword [ebp - 0xec], 0
jmp 0x487df8
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0x37e0
jge 0x487e9c
and dword [ebp - 0x130], 0
jmp 0x487e1e
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0x5712
jge 0x487e97
and dword [ebp - 0x6c], 0
jmp 0x487e37
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0x2678
jge 0x487e92
mov eax, dword [ebp - 0xec]
mov ecx, dword [ebp - 0x130]
shl eax, cl
and eax, dword [ebp - 0x6c]
cdq
mov dword [ebp - 0x490], eax
mov dword [ebp - 0x48c], edx
push dword [ebp - 0x48c]
push dword [ebp - 0x490]
lea ecx, [ebp - 0x6d4]
call fcn.00401a01
pop ecx
pop ecx
mov ecx, eax
call fcn.0040a8d0
push eax
call fcn.0049b1a7
pop ecx
lea ecx, [ebp - 0x6d4]
call fcn.0040a8c6
jmp 0x487e30
jmp 0x487e11
jmp 0x487deb
push 0
push 0x650
push 0x1366
push 0x8b6
call dword [0xabd078]
lea eax, [ebp - 0x4e4]
push eax
lea eax, [ebp - 0x5b8]
push eax
call fcn.00485bdc
pop ecx
pop ecx
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0x210], 0x5cd3
jge 0x487ee7
push dword [ebp - 0x42c]
call fcn.0049b1a7
pop ecx
jmp 0x487f03
or dword [ebp - 4], 0xffffffff
jmp 0x487f0d
push 2
lea ecx, [ebp - 0x4e4]
call fcn.0040ad1e
and dword [eax], 0
jmp 0x487f43
push 2
lea ecx, [ebp - 0x4e4]
call fcn.0040ad1e
mov dword [ebp - 0x218], eax
mov eax, dword [ebp - 0x218]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x218]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0x4e4]
call fcn.0040ad1e
cmp dword [eax], 0xfffffffe
jl 0x487ffd
mov dword [ebp - 0x5c0], 0
push 4
lea ecx, [ebp - 0x558]
call fcn.0040ac30
lea eax, [ebp - 0x558]
push eax
lea eax, [ebp - 0x5c8]
push eax
call fcn.00485d10
pop ecx
pop ecx
mov eax, dword [ebp - 0x1b8]
dec eax
mov dword [ebp - 0x1b8], eax
mov eax, dword [ebp - 0x1b8]
mov dword [ebp - 0x220], eax
push 2
lea ecx, [ebp - 0x63c]
call fcn.0040ad1e
mov ecx, dword [ebp - 0x220]
mov dword [eax], ecx
mov eax, dword [ebp - 0x60]
imul eax, dword [ebp - 0x4c8]
cmp eax, dword [ebp - 0x220]
jl 0x487fd1
mov dword [ebp - 0x228], 1
jmp 0x487fd8
and dword [ebp - 0x228], 0
push 2
lea ecx, [ebp - 0x558]
call fcn.0040ad1e
mov ecx, dword [ebp - 0x228]
mov dword [eax], ecx
lea ecx, [ebp - 0x558]
call fcn.0040ad02
jmp 0x487f1f
lea ecx, [ebp - 0x63c]
call fcn.0040ad02
lea ecx, [ebp - 0x4e4]
call fcn.0040ad02
jmp 0x487d11
mov byte [ebp - 0x35], 0
movzx eax, byte [ebp - 0x35]
test eax, eax
je 0x48802c
push 0
call dword [0xabd380]
lea ecx, [ebp - 0x64c]
call fcn.0040ad02
mov eax, dword [ebp - 0x70]
mov byte [ebp + eax - 0x5a4], 0
jmp 0x487ca6
mov dword [ebp - 0x510], 1
push 4
lea ecx, [ebp - 0x588]
call fcn.0040ac30
mov dword [ebp - 0x440], 0x1d91
mov dword [ebp - 0x4d0], 0xa4df6f97
mov dword [ebp - 0x434], 0xfffffff7
push 1
lea ecx, [ebp - 0x570]
call fcn.0040ac30
lea eax, [ebp - 0x588]
push eax
lea eax, [ebp - 0x54]
push eax
call fcn.00485d58
pop ecx
pop ecx
mov dword [ebp - 0x54], 0
jmp 0x4880ab
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 1
jge 0x4880c4
push dword [ebp - 0x54]
lea ecx, [ebp - 0x570]
call fcn.0040ad1e
and dword [eax], 0
jmp 0x4880a4
lea eax, [ebp - 0x434]
push eax
lea eax, [ebp - 0x510]
push eax
lea eax, [ebp - 0x440]
push eax
lea eax, [ebp - 0x588]
push eax
lea eax, [ebp - 0x4d0]
push eax
lea eax, [ebp - 0x570]
push eax
call fcn.00485da0
add esp, 0x18
lea ecx, [ebp - 0x570]
call fcn.0040ad02
lea ecx, [ebp - 0x588]
call fcn.0040ad02
push 0xa95979
lea ecx, [ebp - 0x694]
call fcn.0048f145
mov dword [ebp - 0x80], 0x80c1
mov dword [ebp - 0x180], 0x1afa9b64
mov dword [ebp - 0x44c], 0
mov dword [ebp - 0x458], 0xfffffffa
mov dword [ebp - 0x5d0], 2
mov dword [ebp - 0x78], 0
jmp 0x48815b
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 2
jge 0x488171
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0x62c], 0xffffffff
jmp 0x488154
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x5d8], eax
mov dword [ebp - 0x180], 0xffffffff
cmp dword [ebp - 0x180], 6
jbe 0x488199
mov dword [ebp - 0x230], 1
jmp 0x4881a0
and dword [ebp - 0x230], 0
cmp dword [ebp - 0x230], 0xfffffffd
jb 0x4881b5
mov dword [ebp - 0x238], 1
jmp 0x4881bc
and dword [ebp - 0x238], 0
mov eax, dword [ebp - 0x238]
sub eax, dword [ebp - 0x80]
mov dword [ebp - 0x44c], eax
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0x180], eax
jle 0x4881e2
mov dword [ebp - 0x500], 1
jmp 0x4881e9
and dword [ebp - 0x500], 0
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x5e0], eax
mov eax, dword [ebp - 0x458]
mov dword [ebp - 0x654], eax
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x62c], 0xb3e713e1
mov byte [ebp - 0x3b], 0
movzx eax, byte [ebp - 0x3b]
test eax, eax
je 0x488220
call fcn.00485f2d
lea ecx, [ebp - 0x694]
call fcn.0040c5c6
cmp eax, dword [ebp + 0xc]
je 0x488c71
push 2
lea ecx, [ebp - 0x564]
call fcn.0040ac30
mov dword [ebp - 0x88], 0
lea eax, [ebp - 0x564]
push eax
lea eax, [ebp - 0x65c]
push eax
call fcn.004088dc
pop ecx
pop ecx
mov dword [ebp - 0x88], 1
jmp 0x488279
mov eax, dword [ebp - 0x88]
dec eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
jl 0x4882d8
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x5c], 0
jmp 0x488299
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 1
jg 0x4882d6
mov dword [ebp - 0x4d8], 1
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x564]
push eax
lea eax, [ebp - 0x4d8]
push eax
call fcn.00408924
add esp, 0xc
mov byte [ebp - 0x3d], 0
movzx eax, byte [ebp - 0x3d]
test eax, eax
je 0x4882d4
call fcn.00485f42
jmp 0x488292
jmp 0x48826c
lea ecx, [ebp - 0x564]
call fcn.0040ad02
push 0x6abf
push 0x1aa6
push 0x59c
push 0x25d7
lea eax, [ebp - 0x488]
push eax
push 0x3676
push 0
lea eax, [ebp - 0x6ac]
push eax
call fcn.004896ed
add esp, 0x20
mov dword [ebp - 0x1c8], 0x3d06
mov dword [ebp - 0x18c], 0x6df251d6
mov dword [ebp - 0x664], 0xfffffffe
mov dword [ebp - 0x4fc], 0xfffffff9
mov dword [ebp - 0x4e8], 0xffffffff
mov dword [ebp - 0x2a8], 0xd9d75405
mov dword [ebp - 0x470], 1
mov dword [ebp - 0x66c], 0xfc1da7bc
mov dword [ebp - 0x240], 0x7fc2
mov dword [ebp - 0x464], 0xaa7158
cmp dword [ebp - 0x240], 0x801a
jle 0x488452
and dword [ebp - 0xa0], 0
jmp 0x48839e
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0x6ae7
jge 0x488452
and dword [ebp - 0x90], 0
jmp 0x4883c4
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0x824
jge 0x48844d
and dword [ebp - 0x98], 0
jmp 0x4883e6
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0x575a
jge 0x488448
mov ecx, dword [ebp - 0x90]
imul ecx, dword [ebp - 0x98]
mov eax, dword [ebp - 0xa0]
shl eax, cl
cdq
mov dword [ebp - 0x49c], eax
mov dword [ebp - 0x498], edx
push dword [ebp - 0x498]
push dword [ebp - 0x49c]
lea ecx, [ebp - 0x6ec]
call fcn.00401a01
pop ecx
pop ecx
mov ecx, eax
call fcn.0040a8d0
push eax
call fcn.0049b1a7
pop ecx
lea ecx, [ebp - 0x6ec]
call fcn.0040a8c6
jmp 0x4883d9
jmp 0x4883b7
jmp 0x488391
push 2
lea ecx, [ebp - 0x3b0]
call fcn.0040ac30
mov dword [ebp - 4], 0x10
cmp dword [ebp - 0x240], 0x7bef
jge 0x48847e
push dword [ebp - 0x464]
call fcn.0049b1a7
pop ecx
jmp 0x48849a
or dword [ebp - 4], 0xffffffff
jmp 0x4884a4
mov dword [ebp - 0x184], 0xe6b6cd3
lea eax, [ebp - 0x3b0]
push eax
lea eax, [ebp - 0x678]
push eax
call fcn.00485f5a
pop ecx
pop ecx
mov eax, dword [ebp - 0x1c8]
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x1c8], 0
jne 0x4884e6
or eax, 0xffffffff
jne 0x4884e6
and dword [ebp - 0x250], 0
jmp 0x4884f0
mov dword [ebp - 0x250], 1
mov eax, dword [ebp - 0x18c]
cmp dword [ebp - 0x250], eax
jge 0x48850a
mov dword [ebp - 0x298], 1
jmp 0x488511
and dword [ebp - 0x298], 0
mov eax, 0xca1b64d8
test eax, eax
je 0x48852f
cmp dword [ebp - 0x4fc], 0
je 0x48852f
mov dword [ebp - 0x258], 1
jmp 0x488536
and dword [ebp - 0x258], 0
mov eax, dword [ebp - 0x470]
cmp dword [ebp - 0x258], eax
jle 0x488550
mov dword [ebp - 0x260], 1
jmp 0x488557
and dword [ebp - 0x260], 0
mov eax, dword [ebp - 0x4e8]
cmp dword [ebp - 0x260], eax
jg 0x488571
mov dword [ebp - 0x268], 1
jmp 0x488578
and dword [ebp - 0x268], 0
cmp dword [ebp - 0x268], 0x54981c58
jle 0x488590
mov dword [ebp - 0x270], 1
jmp 0x488597
and dword [ebp - 0x270], 0
mov esi, dword [ebp - 0x2a8]
imul esi, dword [ebp - 0x270]
push 1
lea ecx, [ebp - 0x3b0]
call fcn.0040ad1e
cmp esi, dword [eax]
jge 0x4885c1
mov dword [ebp - 0x278], 1
jmp 0x4885c8
and dword [ebp - 0x278], 0
cmp dword [ebp - 0x278], 0xb6f
jl 0x4885ef
push 1
lea ecx, [ebp - 0x3b0]
call fcn.0040ad1e
cmp dword [eax], 0
jne 0x4885ef
and dword [ebp - 0x280], 0
jmp 0x4885f9
mov dword [ebp - 0x280], 1
push 1
lea ecx, [ebp - 0x3b0]
call fcn.0040ad1e
mov ecx, dword [ebp - 0x280]
cmp ecx, dword [eax]
je 0x48861c
mov dword [ebp - 0x288], 1
jmp 0x488623
and dword [ebp - 0x288], 0
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x47c], eax
mov eax, dword [ebp - 0x288]
mov dword [ebp - 0x50c], eax
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
mov eax, dword [ebp - 0x47c]
cmp eax, dword [ebp - 0x50c]
jle 0x488662
mov dword [ebp - 0x290], 1
jmp 0x488669
and dword [ebp - 0x290], 0
push 1
lea ecx, [ebp - 0x3b0]
call fcn.0040ad1e
mov ecx, dword [ebp - 0x290]
cmp ecx, dword [eax]
je 0x48868c
mov dword [ebp - 0x2a0], 1
jmp 0x488693
and dword [ebp - 0x2a0], 0
mov eax, dword [ebp - 0x298]
cmp eax, dword [ebp - 0x2a0]
jge 0x4886ad
mov dword [ebp - 0x2b0], 1
jmp 0x4886b4
and dword [ebp - 0x2b0], 0
mov eax, dword [ebp - 0x2a8]
cmp dword [ebp - 0x2b0], eax
jle 0x4886ce
mov dword [ebp - 0x2b8], 1
jmp 0x4886d5
and dword [ebp - 0x2b8], 0
cmp dword [ebp - 0x2b8], 0xc443
jl 0x4886ed
mov dword [ebp - 0x2c0], 1
jmp 0x4886f4
and dword [ebp - 0x2c0], 0
mov eax, dword [ebp - 0x2c0]
mov dword [ebp - 0x18c], eax
lea ecx, [ebp - 0x3b0]
call fcn.0040ad02
lea eax, [ebp - 0x488]
push eax
lea eax, [ebp - 0x694]
push eax
push 0
push 0x211a
lea eax, [ebp - 0x6ac]
push eax
call fcn.004892bc
add esp, 0x14
mov dword [ebp - 0x19c], 0xfffffff9
mov dword [ebp - 0x61c], 0xd47941ce
mov dword [ebp - 0xc8], 0x23edb395
mov dword [ebp - 0x3e8], 7
mov dword [ebp - 0x3f0], 0x3fa3
mov dword [ebp - 0x2c8], 0x4d9
mov dword [ebp - 0x3d4], 0xaa71a4
cmp dword [ebp - 0x2c8], 0x56d
jle 0x488863
and dword [ebp - 0xa8], 0
jmp 0x48879b
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0x7348
jge 0x488863
and dword [ebp - 0xb0], 0
jmp 0x4887c1
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0x7e80
jge 0x48885e
and dword [ebp - 0xb8], 0
jmp 0x4887e7
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0x64d5
jge 0x488859
and dword [ebp - 0xc0], 0
jmp 0x488809
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0x33cb
jge 0x488857
mov eax, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0xb0]
sar eax, cl
mov ecx, dword [ebp - 0xb8]
imul ecx, dword [ebp - 0xc0]
xor eax, ecx
cdq
mov dword [ebp - 0x4a8], eax
mov dword [ebp - 0x4a4], edx
push dword [ebp - 0x4a4]
push dword [ebp - 0x4a8]
mov ecx, 0xaba118
call fcn.0040a8db
jmp 0x4887fc
jmp 0x4887da
jmp 0x4887b4
jmp 0x48878e
mov dword [ebp - 4], 0x12
cmp dword [ebp - 0x2c8], 0x2ee
jge 0x488886
mov edx, dword [ebp - 0x3d4]
mov ecx, 0xaba118
call fcn.0040d553
jmp 0x4888a2
or dword [ebp - 4], 0xffffffff
jmp 0x4888ac
mov dword [ebp - 0x28], 0
jmp 0x4888bc
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 1
jge 0x4888d2
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x400], 0xfff7
jmp 0x4888b5
mov dword [ebp - 0x28], 0
jmp 0x4888e2
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 4
jge 0x4888f8
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x3a4], 9
jmp 0x4888db
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x3a4], 0
jmp 0x488926
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3a4]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x3a4], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x3a4], 0
jg 0x488959
mov byte [ebp - 0x36], 0
movzx eax, byte [ebp - 0x36]
test eax, eax
je 0x488957
push 0xdc2
push 0
push 0
push 0
push 0
push 0
call dword [0xabd394]
jmp 0x48890b
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x3a4], 0
jne 0x48897b
cmp dword [ebp - 0xc8], 0
jne 0x48897b
and dword [ebp - 0x2d0], 0
jmp 0x488985
mov dword [ebp - 0x2d0], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3a4]
cmp dword [ebp - 0x2d0], eax
je 0x4889b6
mov dword [ebp - 0x3d8], 0xb32e
lea eax, [ebp - 0x3d8]
push eax
call fcn.0040899c
pop ecx
jmp 0x488c6c
push 4
lea ecx, [ebp - 0x1c4]
call fcn.0040ac30
mov dword [ebp - 0x194], 0x9c2b2e5f
mov dword [ebp - 0x1a4], 0x18b01197
mov dword [ebp - 0x3e0], 4
mov dword [ebp - 0x310], 6
mov dword [ebp - 0x328], 0xe0aee481
lea eax, [ebp - 0x1c4]
push eax
lea eax, [ebp - 0x630]
push eax
call fcn.004089b5
pop ecx
pop ecx
push 3
lea ecx, [ebp - 0x1c4]
call fcn.0040ad1e
mov ecx, dword [ebp - 0x19c]
cmp dword [eax], ecx
jge 0x488a2d
mov dword [ebp - 0x2d8], 1
jmp 0x488a34
and dword [ebp - 0x2d8], 0
mov eax, dword [ebp - 0x2d8]
mov dword [ebp - 0x1a4], eax
mov esi, dword [ebp - 0x1a4]
push 3
lea ecx, [ebp - 0x1c4]
call fcn.0040ad1e
cmp esi, dword [eax]
jg 0x488a63
mov dword [ebp - 0x2e0], 1
jmp 0x488a6a
and dword [ebp - 0x2e0], 0
push 3
lea ecx, [ebp - 0x1c4]
call fcn.0040ad1e
mov ecx, dword [ebp - 0x2e0]
cmp ecx, dword [eax]
jne 0x488a8d
mov dword [ebp - 0x2e8], 1
jmp 0x488a94
and dword [ebp - 0x2e8], 0
push 3
lea ecx, [ebp - 0x1c4]
call fcn.0040ad1e
mov ecx, dword [ebp - 0x2e8]
cmp ecx, dword [eax]
jge 0x488ab7
mov dword [ebp - 0x2f0], 1
jmp 0x488abe
and dword [ebp - 0x2f0], 0
push 0
lea ecx, [ebp - 0x1c4]
call fcn.0040ad1e
mov ecx, dword [ebp - 0x2f0]
cmp ecx, dword [eax]
jge 0x488ae1
mov dword [ebp - 0x2f8], 1
jmp 0x488ae8
and dword [ebp - 0x2f8], 0
mov eax, dword [ebp - 0x19c]
cmp dword [ebp - 0x2f8], eax
jl 0x488b02
mov dword [ebp - 0x300], 1
jmp 0x488b09
and dword [ebp - 0x300], 0
cmp dword [ebp - 0x300], 0xaca62e26
jb 0x488b27
cmp dword [ebp - 0x3e0], 0
jne 0x488b27
and dword [ebp - 0x308], 0
jmp 0x488b31
mov dword [ebp - 0x308], 1
mov eax, dword [ebp - 0x308]
mov dword [ebp - 0x310], eax
mov eax, dword [ebp - 0x310]
mov dword [ebp - 0x5b4], eax
push 1
lea ecx, [ebp - 0x1c4]
call fcn.0040ad1e
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x3a4], 0xbff7
jg 0x488b74
mov dword [ebp - 0x318], 1
jmp 0x488b7b
and dword [ebp - 0x318], 0
mov eax, dword [ebp - 0x3e8]
cmp dword [ebp - 0x318], eax
jge 0x488b90
cmp dword [ebp - 0x3f0], 0
push 3
lea ecx, [ebp - 0x1c4]
call fcn.0040ad1e
mov eax, dword [eax]
mov dword [ebp - 0xc8], eax
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0x194], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3a4]
cmp dword [ebp - 0x194], eax
jge 0x488bdb
cmp dword [ebp - 0x194], 0
je 0x488bdb
mov dword [ebp - 0x320], 1
jmp 0x488be2
and dword [ebp - 0x320], 0
push 3
lea ecx, [ebp - 0x1c4]
call fcn.0040ad1e
mov esi, dword [eax]
sub esi, dword [ebp - 0x320]
push 3
lea ecx, [ebp - 0x1c4]
call fcn.0040ad1e
imul esi, dword [eax]
add esi, dword [ebp - 0x328]
push 4
pop eax
imul eax, eax, 0
cmp esi, dword [ebp + eax - 0x3a4]
jg 0x488c2e
cmp dword [ebp - 0x328], 0
jne 0x488c2e
and dword [ebp - 0x3f8], 0
jmp 0x488c38
mov dword [ebp - 0x3f8], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x400]
mov dword [ebp - 0x674], eax
mov dword [ebp - 0x19c], 0xffffffff
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0x1a4], eax
lea ecx, [ebp - 0x1c4]
call fcn.0040ad02
jmp 0x488220
push 2
lea ecx, [ebp - 0x57c]
call fcn.0040ac30
mov dword [ebp - 0x64], 0x8c45cdbe
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0x5bc], 1
mov dword [ebp - 0x338], 0x3cfce294
mov dword [ebp - 0x410], 0xfffc
mov dword [ebp - 0x420], 0xffff
mov dword [ebp - 0xd0], 0
jmp 0x488cd0
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 2
jge 0x488cf2
push dword [ebp - 0xd0]
lea ecx, [ebp - 0x57c]
call fcn.0040ad1e
mov dword [eax], 1
jmp 0x488cc3
mov dword [ebp - 0x64], 0
jmp 0x488d02
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 1
jg 0x488fb0
mov dword [ebp - 0x4c], 0x816210b9
mov dword [ebp - 0x330], 0x3a5a
mov dword [ebp - 0x408], 0xaa71cc
cmp dword [ebp - 0x330], 0x3de0
jle 0x488db9
push 0
call dword [0xabd2ac]
and dword [ebp - 0xd8], 0
jmp 0x488d55
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0x333c
jge 0x488db9
and dword [ebp - 0xe0], 0
jmp 0x488d77
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0x1937
jge 0x488db7
mov eax, dword [ebp - 0xd8]
cdq
idiv dword [ebp - 0xe0]
mov eax, edx
cdq
mov dword [ebp - 0x4b4], eax
mov dword [ebp - 0x4b0], edx
push dword [ebp - 0x4b0]
push dword [ebp - 0x4b4]
mov ecx, 0xaba118
call fcn.0040a8db
jmp 0x488d6a
jmp 0x488d48
push 2
lea ecx, [ebp - 0x4f4]
call fcn.0040ac30
mov dword [ebp - 4], 0x14
cmp dword [ebp - 0x330], 0x36d6
jge 0x488de9
mov edx, dword [ebp - 0x408]
mov ecx, 0xaba118
call fcn.0040d553
jmp 0x488e05
or dword [ebp - 4], 0xffffffff
jmp 0x488e0f
mov dword [ebp - 0x1ac], 0x5ea2
mov dword [ebp - 0x418], 1
mov dword [ebp - 0xe8], 0
jmp 0x488e3c
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 2
jge 0x488e5e
push dword [ebp - 0xe8]
lea ecx, [ebp - 0x4f4]
call fcn.0040ad1e
mov dword [eax], 0xead9bacc
jmp 0x488e2f
mov dword [ebp - 0x4c], 0
jmp 0x488e6e
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 1
jg 0x488ec9
mov dword [ebp - 0xf0], 0xfffffff7
mov dword [ebp - 0x640], 0x8fdeb772
mov dword [ebp - 0xf0], 0
jmp 0x488ea1
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 1
jg 0x488eba
mov byte [ebp - 0x37], 0
lea eax, [ebp - 0x37]
push eax
call fcn.00485fa2
pop ecx
jmp 0x488e94
mov eax, dword [ebp - 0x338]
inc eax
mov dword [ebp - 0x338], eax
jmp 0x488e67
mov eax, dword [ebp - 0x410]
cmp dword [ebp - 0x4c], eax
jne 0x488ee0
mov dword [ebp - 0x340], 1
jmp 0x488ee7
and dword [ebp - 0x340], 0
push 1
lea ecx, [ebp - 0x57c]
call fcn.0040ad1e
mov ecx, 0xbc24
sub ecx, dword [eax]
cmp ecx, dword [ebp - 0x340]
jge 0x488f0f
mov dword [ebp - 0x348], 1
jmp 0x488f16
and dword [ebp - 0x348], 0
push 0
lea ecx, [ebp - 0x4f4]
call fcn.0040ad1e
mov eax, dword [eax]
cmp eax, dword [ebp - 0x348]
jl 0x488f36
cmp dword [ebp - 0x1ac], 0
je 0x488f4b
cmp dword [ebp - 0x1ac], 0
je 0x488f4b
mov dword [ebp - 0x350], 1
jmp 0x488f52
and dword [ebp - 0x350], 0
push 0
lea ecx, [ebp - 0x4f4]
call fcn.0040ad1e
mov esi, dword [eax]
add esi, dword [ebp - 0x350]
add esi, dword [ebp - 0x418]
push 1
lea ecx, [ebp - 0x4f4]
call fcn.0040ad1e
cmp esi, dword [eax]
jne 0x488f8a
mov dword [ebp - 0x358], 1
jmp 0x488f91
and dword [ebp - 0x358], 0
mov eax, dword [ebp - 0x358]
sub eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x4c], eax
lea ecx, [ebp - 0x4f4]
call fcn.0040ad02
jmp 0x488cfb
mov dword [ebp - 0xf8], 0
jmp 0x488fc9
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0xc
je 0x488fe6
lea eax, [ebp - 0x420]
push eax
lea eax, [ebp - 0x64]
push eax
call fcn.00485fc9
pop ecx
pop ecx
jmp 0x488fbc
lea ecx, [ebp - 0x57c]
call fcn.0040ad02
lea eax, [ebp - 0x694]
push eax
mov ecx, dword [ebp + 8]
call fcn.0040ab44
lea ecx, [ebp - 0x694]
call fcn.0040ab9d
lea ecx, [ebp - 0x6ac]
call fcn.0040ab9d
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret