Function at 0x442470
Capabilities:
Parse pe header

Disassembly:
push ebp
lea ebp, [esp - 0x68]
sub esp, 0x820
push esi
mov eax, 2
imul ecx, eax, 0x89
mov edx, 0xffff8919
mov word [ecx + 0x48ed48], dx
mov eax, 2
imul ecx, eax, 0x319
mov edx, 4
imul eax, edx, 0x3b
mov edx, dword [eax + 0x48d680]
sub edx, 0x415f2989
movsx eax, word [ecx + 0x48ed48]
sub eax, edx
mov ecx, 2
imul edx, ecx, 0x319
mov word [edx + 0x48ed48], ax
mov eax, 4
imul ecx, eax, 0x3b
mov edx, dword [ecx + 0x48d680]
sub edx, 1
mov eax, 4
imul ecx, eax, 0x3b
mov dword [ecx + 0x48d680], edx
mov edx, 2
imul eax, edx, 0x54d
mov ecx, 4
imul edx, ecx, 0x33e
mov ecx, dword [edx + 0x48d680]
shl ecx, 2
movsx edx, word [eax + 0x48ed48]
or edx, ecx
mov eax, 2
imul ecx, eax, 0x54d
mov word [ecx + 0x48ed48], dx
mov edx, 4
imul eax, edx, 0x327
mov ecx, dword [eax + 0x48d680]
or ecx, 0x7e7d6712
mov edx, 4
imul eax, edx, 0x327
mov dword [eax + 0x48d680], ecx
mov ecx, 4
imul edx, ecx, 0xc4
mov eax, dword [edx + 0x48d680]
sar eax, 8
cmp eax, 0x1b57b8ea
jne 0x4425aa
mov ecx, 4
imul edx, ecx, 0x295
mov eax, 4
imul ecx, eax, 0x27f
mov eax, dword [ecx + 0x48d680]
shl eax, 4
imul ecx, eax, 0x221f7638
mov edx, dword [edx + 0x48d680]
imul edx, ecx
mov eax, 4
imul ecx, eax, 0x295
mov dword [ecx + 0x48d680], edx
jmp 0x4425bc
mov edx, 4
imul eax, edx, 0x7c
mov dword [eax + 0x48d680], 0xb413d04c
mov ecx, 4
imul edx, ecx, 0x276
mov eax, dword [edx + 0x48d680]
sub eax, 1
mov dword [ebp + 0x10], eax
mov ecx, 4
imul edx, ecx, 0x276
mov eax, dword [ebp + 0x10]
mov dword [edx + 0x48d680], eax
mov ecx, dword [ebp + 0x10]
or ecx, 0xad4267c7
cmp ecx, 0xc0078500
jl 0x442619
mov edx, 4
shl edx, 4
mov eax, dword [edx + 0x48d680]
add eax, 0x7ee0d4a5
mov ecx, 4
shl ecx, 4
mov dword [ecx + 0x48d680], eax
lea ecx, [ebp + 0x24]
call fcn.00424390
mov edx, 4
imul eax, edx, 0x3a9
mov ecx, dword [eax + 0x48d680]
sub ecx, 1
mov dword [ebp - 0x3c], ecx
mov edx, 4
imul eax, edx, 0x3a9
mov ecx, dword [ebp - 0x3c]
mov dword [eax + 0x48d680], ecx
mov edx, 4
imul eax, edx, 0x456
mov ecx, dword [eax + 0x48d680]
imul ecx, dword [ebp - 0x3c]
mov edx, 4
imul eax, edx, 0x456
mov dword [eax + 0x48d680], ecx
mov ecx, 2
imul edx, ecx, 0x342
mov eax, 2
imul ecx, eax, 0x7a
movsx eax, word [ecx + 0x48ed48]
or eax, 0xbe2d520a
movsx ecx, word [edx + 0x48ed48]
and ecx, eax
mov edx, 2
imul eax, edx, 0x342
mov word [eax + 0x48ed48], cx
mov ecx, 4
imul edx, ecx, 0x45f
mov eax, 4
imul ecx, eax, 0x548
mov eax, dword [ecx + 0x48d680]
or eax, 0x63088c09
mov ecx, dword [edx + 0x48d680]
add ecx, eax
mov edx, 4
imul eax, edx, 0x45f
mov dword [eax + 0x48d680], ecx
mov ecx, 2
imul edx, ecx, 0x2bd
mov ax, word [edx + 0x48ed48]
add ax, 1
mov word [ebp + 0x42], ax
mov ecx, 2
imul edx, ecx, 0x2bd
mov ax, word [ebp + 0x42]
mov word [edx + 0x48ed48], ax
movsx ecx, word [ebp + 0x42]
add ecx, 0x19b086d1
mov edx, 2
imul eax, edx, 0x62
movsx edx, word [eax + 0x48ed48]
sub edx, ecx
mov eax, 2
imul ecx, eax, 0x62
mov word [ecx + 0x48ed48], dx
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0
mov edx, 2
imul eax, edx, 0x5ae
mov cx, word [eax + 0x48ed48]
add cx, 1
mov word [ebp + 0x40], cx
mov edx, 2
imul eax, edx, 0x5ae
mov cx, word [ebp + 0x40]
mov word [eax + 0x48ed48], cx
mov edx, 4
imul eax, edx, 0x465
movsx ecx, word [ebp + 0x40]
add ecx, dword [eax + 0x48d680]
xor ecx, 0xef3580c7
mov edx, 4
imul eax, edx, 0x4e4
mov edx, dword [eax + 0x48d680]
add edx, ecx
mov eax, 4
imul ecx, eax, 0x4e4
mov dword [ecx + 0x48d680], edx
mov edx, 2
imul eax, edx, 0x3d0
movsx ecx, word [eax + 0x48ed48]
not ecx
mov edx, 4
imul eax, edx, 0x2ba
imul ecx, dword [eax + 0x48d680]
mov edx, 0xad4ec5d4
sub edx, ecx
cmp edx, 0x50012a9
jl 0x44281b
mov eax, 4
imul ecx, eax, 0xb1
imul edx, dword [ecx + 0x48d680], 0x357672c1
mov eax, 2
imul ecx, eax, 0x2c2
mov word [ecx + 0x48ed48], dx
jmp 0x442830
mov edx, 4
imul eax, edx, 0x3a7
mov dword [eax + 0x48d680], 0xcb2bd41e
push 0
call fcn.0045f7a0
add esp, 4
add eax, 0x258
adc edx, 0
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x48], edx
mov ecx, 4
imul edx, ecx, 0x532
mov eax, dword [edx + 0x48d680]
or eax, 0xa879fe8f
mov ecx, 4
imul edx, ecx, 0x532
mov dword [edx + 0x48d680], eax
mov eax, 1
imul ecx, eax, 0
mov byte [ebp + ecx - 0x3b8], 0
mov edx, 4
imul eax, edx, 0xa9
mov ecx, 4
imul edx, ecx, 0x4b6
mov eax, dword [eax + 0x48d680]
imul eax, dword [edx + 0x48d680]
mov ecx, 4
imul edx, ecx, 0xa9
mov dword [edx + 0x48d680], eax
mov eax, 4
imul ecx, eax, 0x4b6
mov edx, dword [ecx + 0x48d680]
add edx, 1
mov eax, 4
imul ecx, eax, 0x4b6
mov dword [ecx + 0x48d680], edx
mov edx, dword [ebp + 0x70]
push edx
call fcn.00463240
add esp, 4
mov dword [ebp + 0x38], eax
mov eax, 4
imul ecx, eax, 0x240
mov edx, dword [ecx + 0x48d680]
sub edx, 1
mov dword [ebp - 0x40], edx
mov eax, 4
imul ecx, eax, 0x240
mov edx, dword [ebp - 0x40]
mov dword [ecx + 0x48d680], edx
mov eax, 0x9cd0efb6
sub eax, dword [ebp - 0x40]
mov ecx, 4
imul edx, ecx, 0x8a
mov ecx, dword [edx + 0x48d680]
sar ecx, 8
xor eax, ecx
cmp eax, 0x6161cdec
jg 0x44294c
mov edx, 4
imul eax, edx, 0x3fd
mov dword [eax + 0x48d680], 0x2e839ff9
cmp dword [ebp + 0x38], 0x7f
jle 0x44295f
lea ecx, [ebp + 0x24]
call fcn.00413c20
jmp 0x444a89
mov ecx, 4
imul edx, ecx, 0x321
mov eax, dword [edx + 0x48d680]
mov dword [ebp - 0x50], eax
mov ecx, 4
imul edx, ecx, 0x321
mov eax, dword [edx + 0x48d680]
sub eax, 1
mov ecx, 4
imul edx, ecx, 0x321
mov dword [edx + 0x48d680], eax
cmp dword [ebp - 0x50], 0xba36ba36
jl 0x4429fb
mov eax, 4
imul ecx, eax, 0x141
mov edx, dword [ecx + 0x48d680]
sub edx, 1
mov dword [ebp + 0x14], edx
mov eax, 4
imul ecx, eax, 0x141
mov edx, dword [ebp + 0x14]
mov dword [ecx + 0x48d680], edx
mov eax, 2
imul ecx, eax, 0x2b4
movsx edx, word [ecx + 0x48ed48]
mov eax, dword [ebp + 0x14]
sub eax, edx
xor eax, 0x67696ba
mov ecx, 4
imul edx, ecx, 0xbf
mov dword [edx + 0x48d680], eax
jmp 0x442a36
mov eax, 4
imul ecx, eax, 0x5a
mov edx, dword [ecx + 0x48d680]
sub edx, 1
mov dword [ebp - 0x1c], edx
mov eax, 4
imul ecx, eax, 0x5a
mov edx, dword [ebp - 0x1c]
mov dword [ecx + 0x48d680], edx
mov eax, dword [ebp - 0x1c]
or eax, 0x1fa7985d
mov ecx, 4
imul edx, ecx, 0x4c
mov dword [edx + 0x48d680], eax
mov dword [ebp + 0x64], 0
jmp 0x442a48
mov eax, dword [ebp + 0x64]
add eax, 1
mov dword [ebp + 0x64], eax
mov ecx, dword [ebp + 0x64]
cmp ecx, dword [ebp + 0x38]
jg 0x442c99
mov edx, 4
imul eax, edx, 0x499
mov ecx, dword [eax + 0x48d680]
and ecx, 0xd169ad30
mov edx, 4
imul eax, edx, 0x499
mov dword [eax + 0x48d680], ecx
mov ecx, dword [ebp + 0x70]
add ecx, dword [ebp + 0x64]
mov edx, dword [ebp + 0x64]
mov al, byte [ecx]
mov byte [ebp + edx - 0x1b8], al
mov ecx, 4
imul edx, ecx, 0x13
mov eax, dword [edx + 0x48d680]
add eax, 0x73623f45
mov ecx, 4
imul edx, ecx, 0x13
mov dword [edx + 0x48d680], eax
mov eax, dword [ebp + 0x64]
movsx ecx, byte [ebp + eax - 0x1b8]
cmp ecx, 0x2f
jne 0x442c4d
mov edx, 4
imul eax, edx, 0x19f
mov ecx, dword [eax + 0x48d680]
or ecx, 0x4e2079d
mov edx, 4
imul eax, edx, 0x19f
mov dword [eax + 0x48d680], ecx
mov ecx, dword [ebp + 0x64]
mov byte [ebp + ecx - 0x1b8], 0
mov edx, 4
imul eax, edx, 0x119
mov dword [eax + 0x48d680], 0xafb8faf8
mov ecx, dword [ebp + 0x64]
mov dword [ebp + 0x60], ecx
jmp 0x442b1c
mov edx, dword [ebp + 0x60]
add edx, 1
mov dword [ebp + 0x60], edx
mov eax, dword [ebp + 0x60]
cmp eax, dword [ebp + 0x38]
jg 0x442bfb
mov ecx, 4
imul edx, ecx, 0x216
mov eax, dword [edx + 0x48d680]
sub eax, 1
mov dword [ebp + 0xc], eax
mov ecx, 4
imul edx, ecx, 0x216
mov eax, dword [ebp + 0xc]
mov dword [edx + 0x48d680], eax
mov ecx, 4
imul edx, ecx, 0x45a
mov eax, dword [edx + 0x48d680]
mov ecx, dword [ebp + 0xc]
lea edx, [eax + ecx - 0x3d492e79]
mov eax, 4
imul ecx, eax, 0x253
mov dword [ecx + 0x48d680], edx
mov edx, 4
imul eax, edx, 0x45a
mov ecx, dword [eax + 0x48d680]
add ecx, 1
mov edx, 4
imul eax, edx, 0x45a
mov dword [eax + 0x48d680], ecx
mov ecx, dword [ebp + 0x60]
sub ecx, dword [ebp + 0x64]
mov edx, dword [ebp + 0x70]
add edx, dword [ebp + 0x60]
mov al, byte [edx]
mov byte [ebp + ecx - 0x3b8], al
mov ecx, 4
imul edx, ecx, 0x230
cmp dword [edx + 0x48d680], 0xa4610211
je 0x442bf6
mov eax, 2
imul ecx, eax, 0x3ee
movsx edx, word [ecx + 0x48ed48]
and edx, 0x48b89c9e
mov eax, 4
imul ecx, eax, 0x5f
mov dword [ecx + 0x48d680], edx
jmp 0x442b13
mov edx, 4
imul eax, edx, 0x50c
mov ecx, dword [eax + 0x48d680]
add ecx, 1
mov dword [ebp - 0x34], ecx
mov edx, 4
imul eax, edx, 0x50c
mov ecx, dword [ebp - 0x34]
mov dword [eax + 0x48d680], ecx
mov edx, 4
imul eax, edx, 0x350
mov ecx, dword [eax + 0x48d680]
add ecx, dword [ebp - 0x34]
mov edx, 4
imul eax, edx, 0x350
mov dword [eax + 0x48d680], ecx
jmp 0x442c99
mov ecx, 4
imul edx, ecx, 0x331
mov eax, dword [edx + 0x48d680]
shl eax, 2
or eax, 0x6210b952
cmp eax, 0x190115
jg 0x442c94
mov ecx, 4
imul edx, ecx, 0x183
mov eax, dword [edx + 0x48d680]
or eax, 0xb1b8a7c6
mov ecx, 4
imul edx, ecx, 0x183
mov dword [edx + 0x48d680], eax
jmp 0x442a3f
mov eax, 2
imul ecx, eax, 0x45
mov dx, word [ecx + 0x48ed48]
sub dx, 1
mov word [ebp + 0x50], dx
mov eax, 2
imul ecx, eax, 0x45
mov dx, word [ebp + 0x50]
mov word [ecx + 0x48ed48], dx
movsx eax, word [ebp + 0x50]
or eax, 0x9255b176
or eax, 0x21db1ba4
cmp eax, 0x3240c3cc
jge 0x442ced
mov ecx, 4
imul edx, ecx, 0xc5
mov dword [edx + 0x48d680], 0xdff7ffef
lea eax, [ebp - 0x3b8]
push eax
call fcn.00463240
add esp, 4
mov esi, eax
mov ecx, dword [ebp + 0x74]
push ecx
call fcn.00463240
add esp, 4
add esi, eax
cmp esi, 0x1ff
jbe 0x442d21
lea ecx, [ebp + 0x24]
call fcn.00413c20
jmp 0x444a89
mov edx, 2
imul eax, edx, 0x309
movsx ecx, word [eax + 0x48ed48]
and ecx, 0x42908008
mov edx, 2
imul eax, edx, 0x309
mov word [eax + 0x48ed48], cx
mov ecx, dword [ebp + 0x74]
push ecx
lea edx, [ebp - 0x3b8]
push edx
call fcn.004630c0
add esp, 8
mov eax, 4
imul ecx, eax, 0x512
mov edx, dword [ecx + 0x48d680]
not edx
and edx, 0x7a4aa2cb
cmp edx, 0xa6699f6
jne 0x442dd6
mov eax, 4
imul ecx, eax, 0x26e
mov edx, dword [ecx + 0x48d680]
sub edx, 1
mov dword [ebp + 4], edx
mov eax, 4
imul ecx, eax, 0x26e
mov edx, dword [ebp + 4]
mov dword [ecx + 0x48d680], edx
mov eax, dword [ebp + 4]
xor eax, 0xf8fb8c5c
mov ecx, 4
imul edx, ecx, 0x335
mov ecx, dword [edx + 0x48d680]
xor ecx, eax
mov edx, 4
imul eax, edx, 0x335
mov dword [eax + 0x48d680], ecx
mov dword [ebp + 0x60], 0
mov ecx, 2
imul edx, ecx, 0x4f
mov eax, 4
imul ecx, eax, 0x3ed
mov eax, dword [ecx + 0x48d680]
shl eax, 1
movsx ecx, word [edx + 0x48ed48]
sub ecx, eax
mov edx, 2
imul eax, edx, 0x4f
mov word [eax + 0x48ed48], cx
push 5
push 0x3068
call fcn.00452760
add esp, 8
mov dword [ebp - 4], eax
mov ecx, 2
imul edx, ecx, 0x1c8
movsx eax, word [edx + 0x48ed48]
add eax, 0x37b2ec6f
mov ecx, 4
imul edx, ecx, 0x1ee
mov ecx, dword [edx + 0x48d680]
shl ecx, 7
sub ecx, 0x347d8e3e
cmp eax, ecx
jge 0x442e97
mov edx, 4
imul eax, edx, 0x1b7
mov ecx, 4
imul edx, ecx, 0x263
mov ecx, dword [edx + 0x48d680]
shl ecx, 5
imul edx, ecx, 0x52a3880
mov eax, dword [eax + 0x48d680]
add eax, edx
mov ecx, 4
imul edx, ecx, 0x1b7
mov dword [edx + 0x48d680], eax
jmp 0x442edb
mov eax, 4
imul ecx, eax, 0x208
mov edx, dword [ecx + 0x48d680]
sar edx, 5
and edx, 0x38425c9c
cmp edx, 0x4aee40b
jne 0x442edb
mov eax, 4
imul ecx, eax, 0x65
mov edx, dword [ecx + 0x48d680]
or edx, 0x8bbed06a
mov eax, 4
imul ecx, eax, 0x65
mov dword [ecx + 0x48d680], edx
mov edx, dword [ebp - 4]
push edx
lea ecx, [ebp + 0x24]
call fcn.0042e2f0
mov eax, 4
imul ecx, eax, 0x33f
mov edx, dword [ecx + 0x48d680]
sub edx, 1
mov dword [ebp - 0x24], edx
mov eax, 4
imul ecx, eax, 0x33f
mov edx, dword [ebp - 0x24]
mov dword [ecx + 0x48d680], edx
mov eax, dword [ebp - 0x24]
and eax, 0xf0ddb81d
xor eax, 0x18fdd53d
cmp eax, 0xf60ce06a
jne 0x442f4f
mov ecx, 2
imul edx, ecx, 0x47e
movsx eax, word [edx + 0x48ed48]
or eax, 0x9d066634
mov ecx, 2
imul edx, ecx, 0x47e
mov word [edx + 0x48ed48], ax
mov eax, dword [ebp - 4]
push eax
push 5
call fcn.00413560
add esp, 8
mov ecx, 4
imul edx, ecx, 0x300
mov eax, dword [edx + 0x48d680]
xor eax, 0xa7d180cd
mov ecx, 4
imul edx, ecx, 0x300
mov dword [edx + 0x48d680], eax
mov ecx, dword [ebp + 0x78]
call fcn.00412370
test eax, eax
je 0x44332c
mov eax, 4
imul ecx, eax, 0x500
mov edx, dword [ecx + 0x48d680]
sub edx, 0x7e6fc000
mov eax, 4
imul ecx, eax, 0x500
mov dword [ecx + 0x48d680], edx
push 0xc
push 0x38e5
call fcn.00452760
add esp, 8
mov dword [ebp - 0x44], eax
mov edx, 4
imul eax, edx, 0xac
mov ecx, dword [eax + 0x48d680]
add ecx, 0x1be02ec2
mov edx, 4
imul eax, edx, 0xac
mov dword [eax + 0x48d680], ecx
mov ecx, dword [ebp - 0x44]
push ecx
lea ecx, [ebp - 0x98]
call fcn.0043a410
push 0
lea edx, [ebp - 0x98]
push edx
mov ecx, dword [ebp + 0x78]
call fcn.0043ca10
mov dword [ebp + 0x64], eax
lea ecx, [ebp - 0x98]
call fcn.0042e2d0
mov eax, 4
imul ecx, eax, 0x246
imul edx, dword [ecx + 0x48d680], 0xe7cc5d01
mov eax, 4
imul ecx, eax, 0x246
mov dword [ecx + 0x48d680], edx
mov edx, dword [ebp - 0x44]
push edx
push 0xc
call fcn.00413560
add esp, 8
mov eax, 4
imul ecx, eax, 0x1ed
imul edx, dword [ecx + 0x48d680], 0x890072da
mov eax, 4
imul ecx, eax, 0x1ed
mov dword [ecx + 0x48d680], edx
cmp dword [ebp + 0x64], 0
jne 0x4432d4
mov edx, 4
imul eax, edx, 0x147
mov ecx, dword [eax + 0x48d680]
mov dword [ebp - 0x68], ecx
mov edx, 4
imul eax, edx, 0x147
mov ecx, dword [eax + 0x48d680]
add ecx, 1
mov edx, 4
imul eax, edx, 0x147
mov dword [eax + 0x48d680], ecx
cmp dword [ebp - 0x68], 0x5958e683
jg 0x4430fb
mov ecx, 2
imul edx, ecx, 0x486
movsx eax, word [edx + 0x48ed48]
imul ecx, eax, 0x9f251d76
cmp ecx, 0x4f975846
jl 0x4430fb
mov edx, 4
imul eax, edx, 0x3ad
mov ecx, dword [eax + 0x48d680]
mov dword [ebp + 0x60], 1
mov edx, 4
imul eax, edx, 0x47f
mov ecx, dword [eax + 0x48d680]
add ecx, 1
mov dword [ebp - 0xc], ecx
mov edx, 4
imul eax, edx, 0x47f
mov ecx, dword [ebp - 0xc]
mov dword [eax + 0x48d680], ecx
mov edx, dword [ebp - 0xc]
xor edx, 0x57887478
mov eax, 4
imul ecx, eax, 0x35f
mov eax, dword [ecx + 0x48d680]
add eax, edx
mov ecx, 4
imul edx, ecx, 0x35f
mov dword [edx + 0x48d680], eax
push 0xb
push 0
mov ecx, dword [ebp + 0x78]
call fcn.0044da00
push eax
mov ecx, dword [ebp + 0x78]
call fcn.0044da20
mov eax, 2
imul ecx, eax, 0x2d0
movsx edx, word [ecx + 0x48ed48]
cmp edx, 0xf461b412
jle 0x4431c7
mov eax, 4
imul ecx, eax, 0x1ec
mov edx, 4
imul eax, edx, 0x309
mov edx, dword [eax + 0x48d680]
shl edx, 5
or edx, 0xbe368c6a
mov eax, dword [ecx + 0x48d680]
sub eax, edx
mov ecx, 4
imul edx, ecx, 0x1ec
mov dword [edx + 0x48d680], eax
push 6
push 0x1a47
call fcn.00452760
add esp, 8
mov dword [ebp - 0x2c], eax
mov eax, 2
imul ecx, eax, 0x354
movsx edx, word [ecx + 0x48ed48]
xor edx, 0x4af2afa6
mov eax, 2
imul ecx, eax, 0x354
mov word [ecx + 0x48ed48], dx
mov edx, dword [ebp - 0x2c]
push edx
lea ecx, [ebp + 0x24]
call fcn.0042e2f0
mov eax, 4
imul ecx, eax, 0x146
mov edx, 4
imul eax, edx, 0x585
mov edx, dword [eax + 0x48d680]
sar edx, 5
sub edx, 0x676c49cc
mov eax, dword [ecx + 0x48d680]
imul eax, edx
mov ecx, 4
imul edx, ecx, 0x146
mov dword [edx + 0x48d680], eax
mov eax, dword [ebp - 0x2c]
push eax
push 6
call fcn.00413560
add esp, 8
mov ecx, 4
imul edx, ecx, 0x5f
mov eax, dword [edx + 0x48d680]
sub eax, 0x28d64738
mov dword [ebp - 0x70], eax
mov ecx, 4
imul edx, ecx, 0xc2
mov eax, dword [edx + 0x48d680]
mov dword [ebp - 0x74], eax
mov ecx, 4
imul edx, ecx, 0x5f
mov eax, dword [edx + 0x48d680]
add eax, 1
mov ecx, 4
imul edx, ecx, 0x5f
mov dword [edx + 0x48d680], eax
mov eax, dword [ebp - 0x70]
cmp eax, dword [ebp - 0x74]
je 0x4432d4
mov ecx, 4
imul edx, ecx, 0x3bb
mov eax, dword [edx + 0x48d680]
and eax, 0xbad080b7
mov ecx, 4
imul edx, ecx, 0x3bb
mov dword [edx + 0x48d680], eax
mov eax, 4
imul ecx, eax, 0x5a8
mov edx, 4
imul eax, edx, 0x290
mov ecx, dword [ecx + 0x48d680]
add ecx, dword [eax + 0x48d680]
and ecx, 0xad91f47d
cmp ecx, 0xdb82317d
jl 0x44332c
mov edx, 4
imul eax, edx, 0x472
mov ecx, dword [eax + 0x48d680]
and ecx, 0x2e3dd92e
mov edx, 4
imul eax, edx, 0x472
mov dword [eax + 0x48d680], ecx
mov ecx, 4
imul edx, ecx, 0x135
mov eax, dword [edx + 0x48d680]
xor eax, 0x32
mov ecx, 4
imul edx, ecx, 0x135
mov dword [edx + 0x48d680], eax
lea eax, [ebp - 0x3b8]
push eax
lea ecx, [ebp - 0xc0]
call fcn.00457f60
lea ecx, [ebp - 0xc0]
push ecx
lea ecx, [ebp + 0x24]
call fcn.0043c460
lea ecx, [ebp - 0xc0]
call fcn.00413c20
mov edx, 4
imul eax, edx, 0x2ce
mov ecx, dword [eax + 0x48d680]
sar ecx, 1
add ecx, 0x327e9226
or ecx, 0x663fca20
mov edx, 2
imul eax, edx, 0x278
movsx edx, word [eax + 0x48ed48]
and edx, 0x14ebe03b
cmp ecx, edx
jge 0x4433e0
mov eax, 4
imul ecx, eax, 0x539
mov edx, dword [ecx + 0x48d680]
or edx, 0x7fb9695f
mov eax, 4
imul ecx, eax, 0x539
mov dword [ecx + 0x48d680], edx
push 0x32
push 0xfbc
call fcn.00452760
add esp, 8
mov dword [ebp - 0x14], eax
mov edx, 4
imul eax, edx, 0x401
mov ecx, dword [eax + 0x48d680]
add ecx, 0x24705044
mov edx, 4
imul eax, edx, 0x401
mov dword [eax + 0x48d680], ecx
mov ecx, dword [ebp - 0x14]
push ecx
lea ecx, [ebp - 0x138]
call fcn.00457f60
lea edx, [ebp - 0x138]
push edx
lea ecx, [ebp + 0x24]
call fcn.0043c460
lea ecx, [ebp - 0x138]
call fcn.00413c20
mov eax, 4
imul ecx, eax, 0x2ab
mov edx, 2
imul eax, edx, 0x23d
movsx edx, word [eax + 0x48ed48]
not edx
mov eax, dword [ecx + 0x48d680]
or eax, edx
mov ecx, 4
imul edx, ecx, 0x2ab
mov dword [edx + 0x48d680], eax
mov eax, dword [ebp - 0x14]
push eax
push 0x32
call fcn.00413560
add esp, 8
mov ecx, 4
imul edx, ecx, 0x457
mov eax, 4
imul ecx, eax, 0x507
mov eax, 2
imul eax, eax, 0xd0
movsx eax, word [eax + 0x48ed48]
mov ecx, dword [ecx + 0x48d680]
sub ecx, eax
mov eax, 4
imul eax, eax, 0x43c
add ecx, dword [eax + 0x48d680]
mov edx, dword [edx + 0x48d680]
add edx, ecx
mov eax, 4
imul ecx, eax, 0x457
mov dword [ecx + 0x48d680], edx
mov edx, 4
imul eax, edx, 0x507
mov ecx, dword [eax + 0x48d680]
add ecx, 1
mov edx, 4
imul eax, edx, 0x507
mov dword [eax + 0x48d680], ecx
lea ecx, [ebp - 0x1b8]
push ecx
lea ecx, [ebp - 0xe8]
call fcn.00457f60
lea edx, [ebp - 0xe8]
push edx
lea ecx, [ebp + 0x24]
call fcn.0043c460
lea ecx, [ebp - 0xe8]
call fcn.00413c20
mov eax, 4
imul ecx, eax, 0x302
mov edx, 4
imul eax, edx, 0x13c
mov edx, dword [eax + 0x48d680]
and edx, 0x70102c9d
mov eax, 4
imul eax, eax, 0x506
xor edx, dword [eax + 0x48d680]
mov ecx, dword [ecx + 0x48d680]
xor ecx, edx
mov edx, 4
imul eax, edx, 0x302
mov dword [eax + 0x48d680], ecx
cmp dword [ebp + 0x60], 0
je 0x443896
mov ecx, 4
imul edx, ecx, 0x2c9
mov eax, dword [edx + 0x48d680]
and eax, 0x81166164
mov ecx, 4
imul edx, ecx, 0x2c9
mov dword [edx + 0x48d680], eax
push 0x44
push 0xaa4
call fcn.00452760
add esp, 8
mov dword [ebp + 0x20], eax
mov eax, 4
imul ecx, eax, 0x15
mov edx, dword [ecx + 0x48d680]
add edx, 1
mov dword [ebp + 0x1c], edx
mov eax, 4
imul ecx, eax, 0x15
mov edx, dword [ebp + 0x1c]
mov dword [ecx + 0x48d680], edx
mov eax, 4
imul ecx, eax, 0x490
mov edx, dword [ecx + 0x48d680]
imul edx, dword [ebp + 0x1c]
and edx, 0xb51a13b8
mov eax, 2
imul ecx, eax, 0x276
movsx eax, word [ecx + 0x48ed48]
imul eax, edx
mov ecx, 2
imul edx, ecx, 0x276
mov word [edx + 0x48ed48], ax
mov eax, dword [ebp + 0x20]
push eax
lea ecx, [ebp - 0x124]
call fcn.00457f60
lea ecx, [ebp - 0x124]
push ecx
lea ecx, [ebp + 0x24]
call fcn.0043c460
lea ecx, [ebp - 0x124]
call fcn.00413c20
mov edx, 4
imul eax, edx, 0x11b
mov ecx, dword [eax + 0x48d680]
add ecx, 1
mov dword [ebp + 0x18], ecx
mov edx, 4
imul eax, edx, 0x11b
mov ecx, dword [ebp + 0x18]
mov dword [eax + 0x48d680], ecx
cmp dword [ebp + 0x18], 0x7b48ec61
je 0x4436f1
mov edx, 4
imul eax, edx, 0x1b2
mov ecx, 2
imul edx, ecx, 0x266
movsx ecx, word [edx + 0x48ed48]
sub ecx, 0x1f4c2d8c
or ecx, 0x773df758
mov edx, dword [eax + 0x48d680]
add edx, ecx
mov eax, 4
imul ecx, eax, 0x1b2
mov dword [ecx + 0x48d680], edx
mov edx, 2
imul eax, edx, 0x266
mov cx, word [eax + 0x48ed48]
add cx, 1
mov edx, 2
imul eax, edx, 0x266
mov word [eax + 0x48ed48], cx
push 3
push 0x2a77
call fcn.00452760
add esp, 8
mov dword [ebp + 8], eax
mov ecx, 2
imul edx, ecx, 0x476
movsx eax, word [edx + 0x48ed48]
mov ecx, 4
imul edx, ecx, 0x321
mov ecx, dword [edx + 0x48d680]
shl ecx, 3
imul edx, ecx, 0x519db268
xor eax, edx
mov ecx, 2
imul edx, ecx, 0x272
mov word [edx + 0x48ed48], ax
mov eax, 2
imul ecx, eax, 0x476
mov dx, word [ecx + 0x48ed48]
add dx, 1
mov eax, 2
imul ecx, eax, 0x476
mov word [ecx + 0x48ed48], dx
mov edx, dword [ebp + 0x20]
push edx
push 0x44
call fcn.00413560
add esp, 8
mov eax, 4
imul ecx, eax, 0x4bb
mov edx, dword [ecx + 0x48d680]
sub edx, 0x79562f1
mov eax, 4
imul ecx, eax, 0x4bb
mov dword [ecx + 0x48d680], edx
mov ecx, dword [ebp + 0x78]
call fcn.00412370
push eax
mov edx, dword [ebp + 8]
push edx
lea eax, [ebp - 0x7b8]
push eax
call fcn.00464520
add esp, 0xc
mov ecx, 4
imul edx, ecx, 0x4d1
mov eax, dword [edx + 0x48d680]
and eax, 0xe6aa6182
mov ecx, 4
imul edx, ecx, 0x4d1
mov dword [edx + 0x48d680], eax
mov eax, dword [ebp + 8]
push eax
push 3
call fcn.00413560
add esp, 8
mov ecx, 2
imul edx, ecx, 0x343
movsx eax, word [edx + 0x48ed48]
sub eax, 0x71daf96e
mov ecx, 2
imul edx, ecx, 0x343
mov word [edx + 0x48ed48], ax
lea eax, [ebp - 0x7b8]
push eax
lea ecx, [ebp - 0x110]
call fcn.00457f60
lea ecx, [ebp - 0x110]
push ecx
lea ecx, [ebp + 0x24]
call fcn.0043c460
lea ecx, [ebp - 0x110]
call fcn.00413c20
mov edx, 4
imul eax, edx, 0xf7
mov ecx, 4
imul edx, ecx, 0x28
mov eax, dword [eax + 0x48d680]
and eax, dword [edx + 0x48d680]
mov ecx, 4
imul edx, ecx, 0xf7
mov dword [edx + 0x48d680], eax
mov eax, 4
imul ecx, eax, 0x28
mov edx, dword [ecx + 0x48d680]
add edx, 1
mov eax, 4
imul ecx, eax, 0x28
mov dword [ecx + 0x48d680], edx
mov edx, 4
imul eax, edx, 0x259
mov ecx, dword [eax + 0x48d680]
sub ecx, 1
mov dword [ebp], ecx
mov edx, 4
imul eax, edx, 0x259
mov ecx, dword [ebp]
mov dword [eax + 0x48d680], ecx
mov edx, 2
imul eax, edx, 0xab
mov cx, word [eax + 0x48ed48]
add cx, 1
mov word [ebp + 0x4e], cx
mov edx, 2
imul eax, edx, 0xab
mov cx, word [ebp + 0x4e]
mov word [eax + 0x48ed48], cx
movsx edx, word [ebp + 0x4e]
imul eax, edx, 0x1aaf2a2
xor eax, dword [ebp]
mov ecx, 4
imul edx, ecx, 0x37f
mov dword [edx + 0x48d680], eax
push 5
push 0x304e
call fcn.00452760
add esp, 8
mov dword [ebp - 8], eax
mov eax, 4
imul ecx, eax, 0x4bb
imul edx, dword [ecx + 0x48d680], 0x97f8c55b
mov eax, 4
imul ecx, eax, 0x4bb
mov dword [ecx + 0x48d680], edx
mov edx, dword [ebp - 8]
push edx
lea ecx, [ebp - 0xac]
call fcn.00457f60
lea eax, [ebp - 0xac]
push eax
lea ecx, [ebp + 0x24]
call fcn.0043c460
lea ecx, [ebp - 0xac]
call fcn.00413c20
mov ecx, 4
imul edx, ecx, 0x11e
mov eax, 4
imul ecx, eax, 0x46e
mov eax, dword [ecx + 0x48d680]
shl eax, 4
imul ecx, eax, 0x73e86aed
add ecx, 0x5027608d
mov edx, dword [edx + 0x48d680]
imul edx, ecx
mov eax, 4
imul ecx, eax, 0x11e
mov dword [ecx + 0x48d680], edx
mov edx, dword [ebp - 8]
push edx
push 5
call fcn.00413560
add esp, 8
mov eax, 4
imul ecx, eax, 0x531
mov edx, 4
imul eax, edx, 0x26f
mov edx, 4
imul edx, edx, 0x203
mov eax, dword [eax + 0x48d680]
or eax, dword [edx + 0x48d680]
or eax, 0xc16b6e6f
mov ecx, dword [ecx + 0x48d680]
or ecx, eax
mov edx, 4
imul eax, edx, 0x531
mov dword [eax + 0x48d680], ecx
cmp dword [ebp + 0x60], 0
je 0x443a20
mov ecx, dword [ebp + 0x78]
push ecx
lea ecx, [ebp + 0x24]
call fcn.0043c460
mov edx, 4
imul eax, edx, 0x107
mov ecx, 4
imul edx, ecx, 0x31f
mov ecx, 0x760443e3
sub ecx, dword [edx + 0x48d680]
mov edx, dword [eax + 0x48d680]
sub edx, ecx
mov eax, 4
imul ecx, eax, 0x107
mov dword [ecx + 0x48d680], edx
mov edx, 4
imul eax, edx, 0x31f
mov ecx, dword [eax + 0x48d680]
add ecx, 1
mov edx, 4
imul eax, edx, 0x31f
mov dword [eax + 0x48d680], ecx
push 6
push 1
push 2
call dword [0x48d4e0]
mov dword [ebp + 0x54], eax
mov ecx, 4
imul edx, ecx, 0x105
mov eax, dword [edx + 0x48d680]
not eax
xor eax, 0x5afa8696
cmp eax, 0xd1ccb113
jg 0x443ae3
mov ecx, 4
imul edx, ecx, 0x1b6
mov eax, dword [edx + 0x48d680]
sar eax, 0xa
add eax, 0x327d509a
xor eax, 0x651f4458
cmp eax, 0x32041096
jge 0x443ae3
mov ecx, 4
imul edx, ecx, 0x2ed
mov eax, dword [edx + 0x48d680]
cmp dword [ebp + 0x54], 0xffffffff
jne 0x443b1d
mov ecx, 4
imul edx, ecx, 0x2c6
mov eax, dword [edx + 0x48d680]
or eax, 0x67075691
mov ecx, 4
imul edx, ecx, 0x2c6
mov dword [edx + 0x48d680], eax
lea ecx, [ebp + 0x24]
call fcn.00413c20
jmp 0x444a89
mov eax, 4
imul ecx, eax, 0x436
mov edx, dword [ecx + 0x48d680]
xor edx, 0x3c39fd56
mov eax, 4
imul ecx, eax, 0x436
mov dword [ecx + 0x48d680], edx
cmp dword [ebp + 0x7c], 0
je 0x443ba2
mov edx, 4
imul eax, edx, 0x467
mov ecx, dword [eax + 0x48d680]
or ecx, 0xe0418200
mov edx, 4
imul eax, edx, 0x467
mov dword [eax + 0x48d680], ecx
push 4
lea ecx, [ebp + 0x7c]
push ecx
push 0x1006
push 0xffff
mov edx, dword [ebp + 0x54]
push edx
call dword [0x48d4dc]
mov eax, 4
imul ecx, eax, 0x3a2
mov dword [ecx + 0x48d680], 0xe44b24e9
mov edx, 4
imul eax, edx, 0x34d
mov ecx, dword [eax + 0x48d680]
or ecx, 0x35e58e5e
mov edx, 4
imul eax, edx, 0x30c
or ecx, dword [eax + 0x48d680]
mov dword [ebp - 0x5c], ecx
mov ecx, 2
imul edx, ecx, 0x2b2
movsx eax, word [edx + 0x48ed48]
add eax, 0x70ee9bc1
and eax, 0xed7d4bdc
mov dword [ebp - 0x6c], eax
mov ecx, 2
imul edx, ecx, 0x2b2
mov ax, word [edx + 0x48ed48]
add ax, 1
mov ecx, 2
imul edx, ecx, 0x2b2
mov word [edx + 0x48ed48], ax
mov eax, dword [ebp - 0x5c]
cmp eax, dword [ebp - 0x6c]
jg 0x443c42
mov ecx, 4
imul edx, ecx, 0x39b
imul eax, dword [edx + 0x48d680], 0x2abf7dfd
mov ecx, 4
imul edx, ecx, 0x216
mov dword [edx + 0x48d680], eax
lea eax, [ebp - 0x1b8]
push eax
call dword [0x48d4bc]
mov dword [ebp - 0x10], eax
mov ecx, 4
imul edx, ecx, 0x2da
mov eax, dword [edx + 0x48d680]
add eax, 0x4bb29a03
mov ecx, 4
imul edx, ecx, 0x58f
mov dword [edx + 0x48d680], eax
mov eax, 4
imul ecx, eax, 0x2da
mov edx, dword [ecx + 0x48d680]
add edx, 1
mov eax, 4
imul ecx, eax, 0x2da
mov dword [ecx + 0x48d680], edx
cmp dword [ebp - 0x10], 0
jne 0x443cb1
lea ecx, [ebp + 0x24]
call fcn.00413c20
jmp 0x444a89
mov edx, 4
imul eax, edx, 0x569
mov ecx, 4
imul edx, ecx, 0x2b8
mov eax, dword [eax + 0x48d680]
or eax, dword [edx + 0x48d680]
mov ecx, 4
imul edx, ecx, 0x569
mov dword [edx + 0x48d680], eax
mov eax, 2
mov word [ebp - 0x84], ax
mov ecx, 4
imul edx, ecx, 0x76
mov eax, dword [edx + 0x48d680]
or eax, 0x40330
mov ecx, 4
imul edx, ecx, 0x76
mov dword [edx + 0x48d680], eax
mov eax, 4
imul ecx, eax, 0
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 0xc]
mov ecx, dword [ecx + eax]
mov edx, dword [ecx]
push edx
call dword [0x48d4c8]
push eax
call dword [0x48d4c4]
mov dword [ebp - 0x80], eax
mov eax, 4
imul ecx, eax, 0x14c
mov edx, dword [ecx + 0x48d680]
sub edx, 0x371b8ac7
mov eax, 4
imul ecx, eax, 0x14c
mov dword [ecx + 0x48d680], edx
push 0x50
call dword [0x48d4c0]
mov word [ebp - 0x82], ax
mov edx, 2
imul eax, edx, 0x50
mov cx, word [eax + 0x48ed48]
sub cx, 1
mov word [ebp + 0x4a], cx
mov edx, 2
imul eax, edx, 0x50
mov cx, word [ebp + 0x4a]
mov word [eax + 0x48ed48], cx
mov edx, 4
imul eax, edx, 0x278
movsx ecx, word [ebp + 0x4a]
imul edx, ecx, 0xa17cd86c
xor edx, dword [eax + 0x48d680]
mov eax, 4
imul ecx, eax, 0x15
mov eax, dword [ecx + 0x48d680]
and eax, edx
mov ecx, 4
imul edx, ecx, 0x15
mov dword [edx + 0x48d680], eax
push 0x10
lea eax, [ebp - 0x84]
push eax
mov ecx, dword [ebp + 0x54]
push ecx
call dword [0x48d4b8]
cmp eax, 0xffffffff
jne 0x443e1e
mov edx, 2
imul eax, edx, 0x1eb
movsx ecx, word [eax + 0x48ed48]
sub ecx, 0x16de452
mov edx, 2
imul eax, edx, 0x1eb
mov word [eax + 0x48ed48], cx
lea ecx, [ebp + 0x24]
call fcn.00413c20
jmp 0x444a89
mov ecx, 4
imul edx, ecx, 0x2d6
mov eax, dword [edx + 0x48d680]
sar eax, 9
imul ecx, eax, 0x763fca6
xor ecx, 0x36b720eb
cmp ecx, 0xf8d6b7a3
jle 0x443e87
mov edx, 4
imul eax, edx, 0x4a5
mov ecx, 4
imul edx, ecx, 0x309
mov ecx, dword [edx + 0x48d680]
sub ecx, 0xad9616c
or ecx, 0xa3f6765d
mov edx, dword [eax + 0x48d680]
or edx, ecx
mov eax, 4
imul ecx, eax, 0x4a5
mov dword [ecx + 0x48d680], edx
push 0
lea ecx, [ebp + 0x24]
call fcn.00412370
push eax
lea ecx, [ebp + 0x24]
call fcn.00439470
push eax
mov edx, dword [ebp + 0x54]
push edx
call dword [0x48d4d8]
mov dword [ebp + 0x58], eax
mov eax, 4
imul ecx, eax, 0x235
mov edx, dword [ecx + 0x48d680]
mov dword [ebp - 0x64], edx
mov eax, 4
imul ecx, eax, 0x235
mov edx, dword [ecx + 0x48d680]
sub edx, 1
mov eax, 4
imul ecx, eax, 0x235
mov dword [ecx + 0x48d680], edx
cmp dword [ebp - 0x64], 0xf39d7ddf
jg 0x443f14
mov edx, 2
imul eax, edx, 0x4eb
movsx ecx, word [eax + 0x48ed48]
add ecx, 0x571581fd
mov edx, 2
imul eax, edx, 0x4eb
mov word [eax + 0x48ed48], cx
lea ecx, [ebp + 0x24]
call fcn.00412370
cmp dword [ebp + 0x58], eax
jae 0x443f57
mov ecx, 2
imul edx, ecx, 0x3a4
movsx eax, word [edx + 0x48ed48]
and eax, 0xd7ef7f1c
mov ecx, 2
imul edx, ecx, 0x3a4
mov word [edx + 0x48ed48], ax
lea ecx, [ebp + 0x24]
call fcn.00413c20
jmp 0x444a89
mov eax, 4
imul ecx, eax, 0x52a
mov edx, dword [ecx + 0x48d680]
or edx, 0x15c50bf8
mov eax, 4
imul ecx, eax, 0x52a
mov dword [ecx + 0x48d680], edx
mov ecx, dword [ebp + 0x78]
call fcn.0045e850
mov edx, 4
imul eax, edx, 0x359
mov ecx, dword [eax + 0x48d680]
add ecx, 0x7feffea9
mov edx, 4
imul eax, edx, 0x359
mov dword [eax + 0x48d680], ecx
mov dword [ebp + 0x5c], 0xffffffff
mov dword [ebp + 0x3c], 0xffffffff
mov ecx, 2
imul edx, ecx, 0x225
movsx eax, word [edx + 0x48ed48]
not eax
imul ecx, eax, 0x9dfde2c0
mov dword [ebp - 0x54], ecx
mov edx, 4
imul eax, edx, 0x372
mov ecx, 0xe3cf5dbf
sub ecx, dword [eax + 0x48d680]
add ecx, 0x31711e00
mov dword [ebp - 0x58], ecx
mov edx, 4
imul eax, edx, 0x372
mov ecx, dword [eax + 0x48d680]
sub ecx, 1
mov edx, 4
imul eax, edx, 0x372
mov dword [eax + 0x48d680], ecx
mov ecx, dword [ebp - 0x54]
cmp ecx, dword [ebp - 0x58]
jge 0x444050
mov edx, 2
imul eax, edx, 0x18e
movsx ecx, word [eax + 0x48ed48]
xor ecx, 0x7b684155
mov edx, 2
imul eax, edx, 0x18e
mov word [eax + 0x48ed48], cx
mov ecx, 4
imul edx, ecx, 0x309
mov eax, dword [edx + 0x48d680]
and eax, 0xebffefdf
mov ecx, 4
imul edx, ecx, 0x309
mov dword [edx + 0x48d680], eax
push 0
push 0x400
lea eax, [ebp - 0x7b8]
push eax
mov ecx, dword [ebp + 0x54]
push ecx
call dword [0x48d4d0]
mov dword [ebp + 0x58], eax
mov edx, 2
imul eax, edx, 0x41e
movsx ecx, word [eax + 0x48ed48]
imul edx, ecx, 0x60face2f
mov eax, 2
imul ecx, eax, 0x41e
mov word [ecx + 0x48ed48], dx
cmp dword [ebp + 0x58], 0
jle 0x4440d6
mov edx, dword [ebp - 0x48]
push edx
mov eax, dword [ebp - 0x4c]
push eax
call fcn.0043a620
add esp, 8
test eax, eax
je 0x4440db
jmp 0x4448a8
mov ecx, 2
imul edx, ecx, 0x232
movsx eax, word [edx + 0x48ed48]
sub eax, 0x10002105
mov ecx, 2
imul edx, ecx, 0x232
mov word [edx + 0x48ed48], ax
push 0
mov ecx, dword [ebp + 0x78]
call fcn.00412370
add eax, dword [ebp + 0x58]
push eax
mov ecx, dword [ebp + 0x78]
call fcn.00445ad0
mov eax, 4
imul ecx, eax, 0xd4
mov edx, dword [ecx + 0x48d680]
or edx, 0xf7867e01
mov eax, 4
imul ecx, eax, 0xd4
mov dword [ecx + 0x48d680], edx
mov ecx, dword [ebp + 0x78]
call fcn.004015a0
test eax, eax
jne 0x444153
jmp 0x4448a8
mov edx, 4
imul eax, edx, 0x4f1
mov ecx, dword [eax + 0x48d680]
or ecx, 0x18cb8e18
mov edx, 4
imul eax, edx, 0x4f1
mov dword [eax + 0x48d680], ecx
mov ecx, dword [ebp + 0x58]
push ecx
lea edx, [ebp - 0x7b8]
push edx
mov ecx, dword [ebp + 0x78]
call fcn.00404e30
mov eax, 4
imul ecx, eax, 0x3f5
mov edx, dword [ecx + 0x48d680]
or edx, 0xd0811acf
mov eax, 4
imul ecx, eax, 0x3f5
mov dword [ecx + 0x48d680], edx
cmp dword [ebp + 0x5c], 0
jge 0x44474f
mov edx, 4
imul eax, edx, 0x3f0
mov ecx, dword [eax + 0x48d680]
and ecx, 0x26f83ef1
mov edx, 4
imul eax, edx, 0x3f0
mov dword [eax + 0x48d680], ecx
push 5
push 0x304e
call fcn.00452760
add esp, 8
mov dword [ebp - 0x18], eax
mov ecx, 4
imul edx, ecx, 0x6e
imul eax, dword [edx + 0x48d680], 0x50722ddb
mov ecx, 4
imul edx, ecx, 0x6e
mov dword [edx + 0x48d680], eax
mov eax, dword [ebp - 0x18]
push eax
lea ecx, [ebp - 0xd4]
call fcn.0043a410
push 0
lea ecx, [ebp - 0xd4]
push ecx
mov ecx, dword [ebp + 0x78]
call fcn.0043ca10
mov dword [ebp + 0x5c], eax
lea ecx, [ebp - 0xd4]
call fcn.0042e2d0
mov edx, 4
imul eax, edx, 0x18b
mov ecx, 4
imul edx, ecx, 0x50c
mov ecx, dword [edx + 0x48d680]
not ecx
imul edx, ecx, 0xf157cd0e
mov eax, dword [eax + 0x48d680]
add eax, edx
cmp eax, 0x68b2bea0
jne 0x444320
mov ecx, 4
imul edx, ecx, 0x446
mov eax, 2
imul ecx, eax, 0x18a
movsx eax, word [ecx + 0x48ed48]
mov ecx, dword [edx + 0x48d680]
imul ecx, eax
add ecx, 0x5311baa7
cmp ecx, 0xe089d8d8
je 0x4442c6
mov edx, 4
imul eax, edx, 0xdf
mov ecx, dword [eax + 0x48d680]
jmp 0x444320
mov edx, 2
imul eax, edx, 0x2be
mov cx, word [eax + 0x48ed48]
add cx, 1
mov word [ebp + 0x46], cx
mov edx, 2
imul eax, edx, 0x2be
mov cx, word [ebp + 0x46]
mov word [eax + 0x48ed48], cx
movsx edx, word [ebp + 0x46]
mov eax, 2
imul ecx, eax, 0x4ed
movsx eax, word [ecx + 0x48ed48]
and eax, edx
mov ecx, 2
imul edx, ecx, 0x4ed
mov word [edx + 0x48ed48], ax
mov eax, dword [ebp - 0x18]
push eax
push 5
call fcn.00413560
add esp, 8
mov ecx, 4
imul edx, ecx, 0x234
mov eax, dword [edx + 0x48d680]
or eax, 0x46761e3b
mov ecx, 4
imul edx, ecx, 0x234
mov dword [edx + 0x48d680], eax
cmp dword [ebp + 0x5c], 0
jl 0x4446c4
mov eax, 4
imul ecx, eax, 0x2d4
mov edx, dword [ecx + 0x48d680]
sub edx, 0x13c9ba6b
mov eax, 4
imul ecx, eax, 0x2d4
mov dword [ecx + 0x48d680], edx
mov edx, dword [ebp + 0x5c]
add edx, 4
mov dword [ebp + 0x5c], edx
mov eax, 4
imul ecx, eax, 0x79
mov edx, 4
imul eax, edx, 0x241
mov edx, dword [eax + 0x48d680]
sub edx, 0x1364da40
mov eax, dword [ecx + 0x48d680]
sub eax, edx
mov ecx, 4
imul edx, ecx, 0x79
mov dword [edx + 0x48d680], eax
mov eax, 4
imul ecx, eax, 0x241
mov edx, dword [ecx + 0x48d680]
add edx, 1
mov eax, 4
imul ecx, eax, 0x241
mov dword [ecx + 0x48d680], edx
mov edx, dword [ebp + 0x78]
push edx
call fcn.004138e0
add esp, 4
mov dword [ebp + 0x3c], eax
mov eax, 4
imul ecx, eax, 0x17
mov edx, dword [ecx + 0x48d680]
xor edx, 0x6de6533e
mov eax, 4
imul ecx, eax, 0x17
mov dword [ecx + 0x48d680], edx
cmp dword [ebp + 0x3c], 0
jge 0x44460c
mov edx, 2
imul eax, edx, 0x36c
movsx ecx, word [eax + 0x48ed48]
or ecx, 0x7e7be0e5
mov edx, 2
imul eax, edx, 0x36c
mov word [eax + 0x48ed48], cx
push 0xb
push 0x2326
call fcn.00452760
add esp, 8
mov dword [ebp - 0x20], eax
mov ecx, 4
imul edx, ecx, 0x251
mov eax, 2
imul ecx, eax, 0x22
movsx eax, word [ecx + 0x48ed48]
add eax, 0xa396c7c
mov ecx, dword [edx + 0x48d680]
sub ecx, eax
mov edx, 4
imul eax, edx, 0x251
mov dword [eax + 0x48d680], ecx
mov ecx, 2
imul edx, ecx, 0x22
mov ax, word [edx + 0x48ed48]
sub ax, 1
mov ecx, 2
imul edx, ecx, 0x22
mov word [edx + 0x48ed48], ax
mov eax, dword [ebp - 0x20]
push eax
lea ecx, [ebp - 0xfc]
call fcn.0043a410
push 0
lea ecx, [ebp - 0xfc]
push ecx
mov ecx, dword [ebp + 0x78]
call fcn.0043ca10
mov dword [ebp + 0x58], eax
lea ecx, [ebp - 0xfc]
call fcn.0042e2d0
mov edx, 2
shl edx, 5
mov eax, 0xffffda8f
mov word [edx + 0x48ed48], ax
mov ecx, dword [ebp - 0x20]
push ecx
push 0xb
call fcn.00413560
add esp, 8
mov edx, 2
imul eax, edx, 0x32b
mov cx, word [eax + 0x48ed48]
add cx, 1
mov word [ebp + 0x44], cx
mov edx, 2
imul eax, edx, 0x32b
mov cx, word [ebp + 0x44]
mov word [eax + 0x48ed48], cx
movsx edx, word [ebp + 0x44]
and edx, 0x2a134ae3
cmp edx, 0x55e374ae
jne 0x444577
mov eax, 4
imul ecx, eax, 0x224
mov edx, dword [ecx + 0x48d680]
or edx, 0xfffff7ef
mov eax, 4
imul ecx, eax, 0x224
mov dword [ecx + 0x48d680], edx
jmp 0x4445ea
mov edx, 4
imul eax, edx, 0x357
mov ecx, dword [eax + 0x48d680]
add ecx, 1
mov dword [ebp - 0x28], ecx
mov edx, 4
imul eax, edx, 0x357
mov ecx, dword [ebp - 0x28]
mov dword [eax + 0x48d680], ecx
mov edx, 4
imul eax, edx, 0x443
mov ecx, dword [eax + 0x48d680]
add ecx, dword [ebp - 0x28]
xor ecx, 0x3fe96524
cmp ecx, 0x86807204
jge 0x4445ea
mov edx, 4
imul eax, edx, 0x4e9
imul ecx, dword [eax + 0x48d680], 0xd7eb7bf1
mov edx, 4
imul eax, edx, 0x4e9
mov dword [eax + 0x48d680], ecx
cmp dword [ebp + 0x58], 0
jl 0x4445f5
jmp 0x4448a8
mov ecx, 2
imul edx, ecx, 0x399
mov eax, 0xffffda20
mov word [edx + 0x48ed48], ax
mov ecx, 4
imul edx, ecx, 0x129
mov eax, 4
imul ecx, eax, 0x386
mov eax, dword [ecx + 0x48d680]
shl eax, 5
mov ecx, dword [edx + 0x48d680]
xor ecx, eax
cmp ecx, 0x3c300010
jl 0x4446c4
mov edx, 2
imul eax, edx, 0x407
mov cx, word [eax + 0x48ed48]
sub cx, 1
mov word [ebp + 0x4c], cx
mov edx, 2
imul eax, edx, 0x407
mov cx, word [ebp + 0x4c]
mov word [eax + 0x48ed48], cx
movsx edx, word [ebp + 0x4c]
cmp edx, 0xc96148ad
jl 0x4446c4
mov eax, 2
imul ecx, eax, 0x342
movsx edx, word [ecx + 0x48ed48]
or edx, 0xd7c7c924
or edx, 0x162ffff8
mov dword [ebp - 0x60], edx
mov eax, 2
imul ecx, eax, 0x342
mov dx, word [ecx + 0x48ed48]
add dx, 1
mov eax, 2
imul ecx, eax, 0x342
mov word [ecx + 0x48ed48], dx
mov edx, 2
imul eax, edx, 0x2c7
mov cx, word [eax + 0x48ed48]
sub cx, 1
mov word [ebp + 0x52], cx
mov edx, 2
imul eax, edx, 0x2c7
mov cx, word [ebp + 0x52]
mov word [eax + 0x48ed48], cx
movsx edx, word [ebp + 0x52]
mov eax, 4
imul ecx, eax, 0x11e
mov eax, dword [ecx + 0x48d680]
add eax, edx
mov ecx, 4
imul edx, ecx, 0x1c
mov ecx, dword [edx + 0x48d680]
imul ecx, eax
mov edx, 4
imul eax, edx, 0x1c
mov dword [eax + 0x48d680], ecx
mov ecx, 4
imul edx, ecx, 0x11e
mov eax, dword [edx + 0x48d680]
sub eax, 1
mov ecx, 4
imul edx, ecx, 0x11e
mov dword [edx + 0x48d680], eax
mov eax, 4
imul ecx, eax, 0x33d
mov edx, dword [ecx + 0x48d680]
sub edx, 0x4145f1db
mov eax, 4
imul ecx, eax, 0x33d
mov dword [ecx + 0x48d680], edx
cmp dword [ebp + 0x3c], 0
jl 0x444792
mov ecx, dword [ebp + 0x78]
call fcn.00412370
sub eax, dword [ebp + 0x5c]
cmp eax, dword [ebp + 0x3c]
jb 0x444792
jmp 0x4448a8
mov edx, 4
imul eax, edx, 0x86
mov ecx, dword [eax + 0x48d680]
sub ecx, 0x141fcfbe
mov edx, 4
imul eax, edx, 0x86
mov dword [eax + 0x48d680], ecx
cmp dword [ebp + 0x7c], 0x3aa6
jne 0x44486c
mov ecx, 4
imul edx, ecx, 0x5d
mov eax, dword [edx + 0x48d680]
sub eax, 1
mov dword [ebp - 0x30], eax
mov ecx, 4
imul edx, ecx, 0x5d
mov eax, dword [ebp - 0x30]
mov dword [edx + 0x48d680], eax
mov ecx, 4
imul edx, ecx, 0x25
mov eax, dword [edx + 0x48d680]
sub eax, dword [ebp - 0x30]
mov ecx, 4
imul edx, ecx, 0x25
mov dword [edx + 0x48d680], eax
mov ecx, dword [ebp + 0x78]
call fcn.00412370
cmp eax, 0x500000
jbe 0x444844
mov eax, 4
imul ecx, eax, 0x2bf
mov edx, dword [ecx + 0x48d680]
or edx, 0x27284c07
mov eax, 4
imul ecx, eax, 0x2bf
mov dword [ecx + 0x48d680], edx
jmp 0x4448a8
mov edx, 4
imul eax, edx, 0x171
mov ecx, dword [eax + 0x48d680]
add ecx, 0x28388396
mov edx, 4
imul eax, edx, 0x171
mov dword [eax + 0x48d680], ecx
mov ecx, 4
imul edx, ecx, 0x4d
mov eax, 4
imul ecx, eax, 0x3ee
mov eax, dword [ecx + 0x48d680]
shl eax, 7
xor eax, 0x522528c2
mov ecx, dword [edx + 0x48d680]
sub ecx, eax
mov edx, 4
imul eax, edx, 0x4d
mov dword [eax + 0x48d680], ecx
jmp 0x444050
mov ecx, 2
imul edx, ecx, 0x5a2
mov ax, word [edx + 0x48ed48]
add ax, 1
mov word [ebp + 0x48], ax
mov ecx, 2
imul edx, ecx, 0x5a2
mov ax, word [ebp + 0x48]
mov word [edx + 0x48ed48], ax
movsx ecx, word [ebp + 0x48]
mov edx, 4
imul eax, edx, 0x538
mov edx, dword [eax + 0x48d680]
shl edx, 9
mov eax, 0xc61631a6
sub eax, edx
xor eax, ecx
mov ecx, 4
imul edx, ecx, 0x298
mov ecx, dword [edx + 0x48d680]
sub ecx, eax
mov edx, 4
imul eax, edx, 0x298
mov dword [eax + 0x48d680], ecx
mov ecx, dword [ebp + 0x54]
push ecx
call dword [0x48d4b4]
mov edx, 4
imul eax, edx, 0xf
mov ecx, dword [eax + 0x48d680]
xor ecx, 0x626a02e
mov edx, 4
imul eax, edx, 0xf
mov dword [eax + 0x48d680], ecx
cmp dword [ebp + 0x5c], 0
jl 0x4449e6
mov ecx, 4
imul edx, ecx, 0xf5
mov eax, dword [edx + 0x48d680]
xor eax, 0x19dfb514
mov ecx, 4
imul edx, ecx, 0xf5
mov dword [edx + 0x48d680], eax
mov eax, dword [ebp + 0x5c]
push eax
push 0
mov ecx, dword [ebp + 0x78]
call fcn.0044da00
push eax
mov ecx, dword [ebp + 0x78]
call fcn.0044da20
mov ecx, 4
imul edx, ecx, 0x299
mov eax, 4
shl eax, 0
imul ecx, dword [eax + 0x48d680], 0x566d1202
mov edx, dword [edx + 0x48d680]
sub edx, ecx
mov eax, 4
imul ecx, eax, 0x299
mov dword [ecx + 0x48d680], edx
mov edx, 4
shl edx, 0
mov eax, dword [edx + 0x48d680]
sub eax, 1
mov ecx, 4
shl ecx, 0
mov dword [ecx + 0x48d680], eax
mov edx, 4
imul eax, edx, 0x4bd
mov ecx, dword [eax + 0x48d680]
sub ecx, 1
mov dword [ebp - 0x38], ecx
mov edx, 4
imul eax, edx, 0x4bd
mov ecx, dword [ebp - 0x38]
mov dword [eax + 0x48d680], ecx
mov edx, dword [ebp - 0x38]
xor edx, 0xb3158600
mov eax, 4
imul ecx, eax, 0x509
imul eax, dword [ecx + 0x48d680], 0x7a3956e6
cmp edx, eax
jle 0x444a81
mov ecx, 2
imul edx, ecx, 0x59b
mov eax, 4
imul ecx, eax, 0x2af
mov eax, 4
imul eax, eax, 0x12f
imul eax, dword [eax + 0x48d680], 0xfefb076f
mov ecx, dword [ecx + 0x48d680]
sub ecx, eax
movsx edx, word [edx + 0x48ed48]
xor edx, ecx
mov eax, 2
imul ecx, eax, 0x59b
mov word [ecx + 0x48ed48], dx
lea ecx, [ebp + 0x24]
call fcn.00413c20
pop esi
add ebp, 0x68
mov esp, ebp
pop ebp
ret