Function at 0x497df1
Capabilities:
Authenticate hmac
Contain obfuscated stackstrings
Encrypt data using speck

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4c5e95
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x2c1c
call fcn.004c18e0
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 0x24]
test eax, eax
je 0x4ac011
lea eax, [ebp + 0x20]
mov dword [ebp - 0x1cf4], eax
mov dword [ebp - 0x14fc], 0x3415
mov dword [ebp - 0x17ac], 0xac8034
cmp dword [ebp - 0x14fc], 0x34c7
jle 0x497f1c
and dword [ebp - 0x308], 0
jmp 0x497e69
mov eax, dword [ebp - 0x308]
inc eax
mov dword [ebp - 0x308], eax
cmp dword [ebp - 0x308], 0x6a73
jge 0x497f1c
and dword [ebp - 0x6b8], 0
jmp 0x497e8f
mov eax, dword [ebp - 0x6b8]
inc eax
mov dword [ebp - 0x6b8], eax
cmp dword [ebp - 0x6b8], 0x3046
jge 0x497f17
and dword [ebp - 0x310], 0
jmp 0x497eb1
mov eax, dword [ebp - 0x310]
inc eax
mov dword [ebp - 0x310], eax
cmp dword [ebp - 0x310], 0x2edd
jge 0x497f12
mov eax, dword [ebp - 0x308]
sub eax, dword [ebp - 0x6b8]
mov ecx, dword [ebp - 0x310]
shl eax, cl
cdq
mov dword [ebp - 0x1868], eax
mov dword [ebp - 0x1864], edx
push dword [ebp - 0x1864]
push dword [ebp - 0x1868]
lea ecx, [ebp - 0x2a88]
call fcn.004018f3
pop ecx
pop ecx
mov ecx, eax
call fcn.00434873
push eax
call fcn.004af787
pop ecx
lea ecx, [ebp - 0x2a88]
call fcn.00434869
jmp 0x497ea4
jmp 0x497e82
jmp 0x497e5c
mov eax, dword [ebp - 0x1cf4]
movzx eax, byte [eax]
test eax, eax
je 0x4abfb8
mov dword [ebp - 0x20f8], 0x5e48d327
mov dword [ebp - 0x20f4], 0x5e48d327
mov dword [ebp - 0x20f0], 0x5e48d327
mov dword [ebp - 0x20ec], 0x5e48d327
lea ecx, [ebp - 0x935]
call fcn.00434a90
push eax
lea eax, [ebp - 0x20e8]
push eax
lea eax, [ebp - 0x20f8]
push eax
lea ecx, [ebp - 0x2760]
call fcn.00434a93
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x2678]
call fcn.00434a3f
mov byte [ebp - 0x125], 0
push 0x2bba
lea eax, [ebp - 0x125]
push eax
push 0x27fc
push 0x1179
push 0x6396
push 0
push 0x47c8
push 0x685b
push 1
call fcn.00490bfc
add esp, 0x24
mov byte [ebp - 0x1c2], 0
push 0x1263
push 0x66e9
push 1
push 0x314a
lea eax, [ebp - 0x1c2]
push eax
push 0x3535
push 0
push 0
push 0x4709
call fcn.0048d79a
add esp, 0x24
lea ecx, [ebp - 0x2678]
call fcn.00434a65
mov dword [ebp - 0x8c], 1
mov dword [ebp - 0xbbc], 8
mov dword [ebp - 0x9c4], 0xd3ed23c5
mov dword [ebp - 0x588], 0
jmp 0x498039
mov eax, dword [ebp - 0x588]
inc eax
mov dword [ebp - 0x588], eax
cmp dword [ebp - 0x588], 3
jge 0x498055
mov eax, dword [ebp - 0x588]
mov dword [ebp + eax*4 - 0x26fc], 0x55e0ecf5
jmp 0x49802c
mov dword [ebp - 0x8c], 0
jmp 0x49806e
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0x15
jne 0x498213
mov dword [ebp - 0x878], 0xa5273358
mov dword [ebp - 0x318], 0xff26af90
mov dword [ebp - 0x2258], 0x7e94
mov dword [ebp - 0x2254], 0x7e94
mov dword [ebp - 0x2250], 0x7e94
mov dword [ebp - 0x224c], 0x7e94
mov dword [ebp - 0x17f4], 0xfffffff6
push 1
push 0
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 0x878]
push eax
push 0xcd1
lea eax, [ebp - 0x9c4]
push eax
lea eax, [ebp - 0xbbc]
push eax
lea eax, [ebp - 0x318]
push eax
call fcn.004923cf
add esp, 0x20
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x2448], eax
mov eax, dword [ebp - 0xbbc]
mov dword [ebp - 0x22cc], eax
cmp dword [ebp - 0x878], 0x761e
je 0x498125
mov dword [ebp - 0x150c], 1
jmp 0x49812c
and dword [ebp - 0x150c], 0
cmp dword [ebp - 0x150c], 0x65fb
jle 0x498141
cmp dword [ebp - 0x878], 0
je 0x498156
cmp dword [ebp - 0x8c], 0
je 0x498156
mov dword [ebp - 0x17ec], 1
jmp 0x49815d
and dword [ebp - 0x17ec], 0
mov eax, dword [ebp - 0x318]
mov dword [ebp - 0x22d4], eax
mov eax, dword [ebp - 0x318]
mov dword [ebp - 0x22dc], eax
cmp dword [ebp - 0x8c], 0xc5f6b4ab
jne 0x49818d
mov dword [ebp - 0x1514], 1
jmp 0x498194
and dword [ebp - 0x1514], 0
mov eax, dword [ebp - 0x8c]
imul eax, dword [ebp - 0x1514]
cmp eax, dword [ebp - 0x8c]
jge 0x4981b5
mov dword [ebp - 0x151c], 1
jmp 0x4981bc
and dword [ebp - 0x151c], 0
mov eax, dword [ebp - 0x151c]
mov dword [ebp - 0x9c4], eax
mov eax, dword [ebp - 0x9c4]
cmp dword [ebp - 0x318], eax
je 0x4981e2
mov dword [ebp - 0x1524], 1
jmp 0x4981e9
and dword [ebp - 0x1524], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x1524]
mov dword [ebp + eax - 0x26fc], ecx
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x2258]
mov dword [ebp - 0x17f4], eax
jmp 0x498061
mov dword [ebp - 0x152c], 0x2989
mov dword [ebp - 0x17fc], 0xac8050
cmp dword [ebp - 0x152c], 0x2d23
jle 0x498313
and dword [ebp - 0x328], 0
jmp 0x49824d
mov eax, dword [ebp - 0x328]
inc eax
mov dword [ebp - 0x328], eax
cmp dword [ebp - 0x328], 0x17d8
jge 0x498313
and dword [ebp - 0x7a0], 0
jmp 0x498273
mov eax, dword [ebp - 0x7a0]
inc eax
mov dword [ebp - 0x7a0], eax
cmp dword [ebp - 0x7a0], 0x6381
jge 0x49830e
and dword [ebp - 0x320], 0
jmp 0x498299
mov eax, dword [ebp - 0x320]
inc eax
mov dword [ebp - 0x320], eax
cmp dword [ebp - 0x320], 0x6b9c
jge 0x498309
and dword [ebp - 0x590], 0
jmp 0x4982bb
mov eax, dword [ebp - 0x590]
inc eax
mov dword [ebp - 0x590], eax
cmp dword [ebp - 0x590], 0x7478
jge 0x498307
mov eax, dword [ebp - 0x7a0]
cdq
idiv dword [ebp - 0x320]
and edx, dword [ebp - 0x590]
or edx, dword [ebp - 0x328]
mov eax, edx
cdq
mov dword [ebp - 0x1874], eax
mov dword [ebp - 0x1870], edx
push dword [ebp - 0x1870]
push dword [ebp - 0x1874]
mov ecx, 0xad77b8
call fcn.0043487e
jmp 0x4982ae
jmp 0x49828c
jmp 0x498266
jmp 0x498240
and dword [ebp - 4], 0
cmp dword [ebp - 0x152c], 0x26c4
jge 0x498333
mov edx, dword [ebp - 0x17fc]
mov ecx, 0xad77b8
call fcn.00436224
jmp 0x49834f
or dword [ebp - 4], 0xffffffff
jmp 0x498359
mov dword [ebp - 0x154], 4
mov dword [ebp - 0x1534], 0xfef
mov dword [ebp - 0x1804], 0xac80a0
cmp dword [ebp - 0x1534], 0x10f6
jle 0x49841f
and dword [ebp - 0x6c0], 0
jmp 0x49839d
mov eax, dword [ebp - 0x6c0]
inc eax
mov dword [ebp - 0x6c0], eax
cmp dword [ebp - 0x6c0], 0x156
jge 0x49841f
and dword [ebp - 0x330], 0
jmp 0x4983bf
mov eax, dword [ebp - 0x330]
inc eax
mov dword [ebp - 0x330], eax
cmp dword [ebp - 0x330], 0x5ce5
jge 0x49841a
mov eax, dword [ebp - 0x6c0]
mov ecx, dword [ebp - 0x330]
shl eax, cl
cdq
mov dword [ebp - 0x1880], eax
mov dword [ebp - 0x187c], edx
push dword [ebp - 0x187c]
push dword [ebp - 0x1880]
lea ecx, [ebp - 0x28d8]
call fcn.004018f3
pop ecx
pop ecx
mov ecx, eax
call fcn.00434873
push eax
call fcn.004af787
pop ecx
lea ecx, [ebp - 0x28d8]
call fcn.00434869
jmp 0x4983b2
jmp 0x498390
push 4
lea ecx, [ebp - 0x16fc]
call fcn.00434993
mov dword [ebp - 4], 2
cmp dword [ebp - 0x1534], 0xf2a
jge 0x49844b
push dword [ebp - 0x1804]
call fcn.004af787
pop ecx
jmp 0x498467
or dword [ebp - 4], 0xffffffff
jmp 0x498471
mov dword [ebp - 0x2a4], 0x168f928d
mov dword [ebp - 0x2058], 0x97b0
mov dword [ebp - 0x2054], 0x97b0
mov dword [ebp - 0x2050], 0x97b0
mov dword [ebp - 0x204c], 0x97b0
lea ecx, [ebp - 0x855]
call fcn.00434a90
push eax
lea eax, [ebp - 0x2048]
push eax
lea eax, [ebp - 0x2058]
push eax
lea ecx, [ebp - 0x2758]
call fcn.00434a93
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x26b4]
call fcn.00434a3f
lea eax, [ebp - 0x22e4]
push eax
push 0
lea eax, [ebp - 0x16fc]
push eax
push 0
call fcn.0048cc3e
add esp, 0x10
mov esi, dword [ebp - 0x154]
push 1
lea ecx, [ebp - 0x16fc]
call fcn.00434a81
cmp esi, dword [eax]
jle 0x498515
mov dword [ebp - 0x180c], 1
jmp 0x49851c
and dword [ebp - 0x180c], 0
cmp dword [ebp - 0x154], 0
je 0x49853a
mov eax, 0xc902dafb
test eax, eax
je 0x49853a
mov dword [ebp - 0x1814], 1
jmp 0x498541
and dword [ebp - 0x1814], 0
mov esi, dword [ebp - 0x154]
push 1
lea ecx, [ebp - 0x16fc]
call fcn.00434a81
cmp esi, dword [eax]
je 0x498564
mov dword [ebp - 0x181c], 1
jmp 0x49856b
and dword [ebp - 0x181c], 0
push 0
lea ecx, [ebp - 0x16fc]
call fcn.00434a81
mov esi, eax
push 1
lea ecx, [ebp - 0x16fc]
call fcn.00434a81
mov ecx, dword [esi]
add ecx, dword [eax]
cmp ecx, 0x8e99
jg 0x49859f
mov dword [ebp - 0x1824], 1
jmp 0x4985a6
and dword [ebp - 0x1824], 0
mov eax, 0xffff
test eax, eax
jne 0x4985c1
mov eax, 0xe80d
test eax, eax
jne 0x4985c1
and dword [ebp - 0x182c], 0
jmp 0x4985cb
mov dword [ebp - 0x182c], 1
mov dword [ebp - 0x2a4], 0x7c7ab89b
mov dword [ebp - 0x154], 0
jmp 0x4985ee
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 3
jg 0x49864f
mov dword [ebp - 0x2a4], 3
jmp 0x498610
mov eax, dword [ebp - 0x2a4]
dec eax
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 0
jl 0x49864d
mov byte [ebp - 0x12d], 0
movzx eax, byte [ebp - 0x12d]
test eax, eax
je 0x49864b
push 0
push 0x27a1
push 0x6d08
push 0x2b35
push 0x58a2
push 0
call fcn.0048d51a
add esp, 0x18
jmp 0x498603
jmp 0x4985e1
lea ecx, [ebp - 0x26b4]
call fcn.00434a65
lea ecx, [ebp - 0x16fc]
call fcn.00434a65
mov dword [ebp - 0x20d0], 0x5e48d327
mov dword [ebp - 0x20cc], 0x5e48d327
mov dword [ebp - 0x20c8], 0x5e48d327
mov dword [ebp - 0x20c4], 0x5e48d327
lea ecx, [ebp - 0x961]
call fcn.00434a90
push eax
lea eax, [ebp - 0x20c0]
push eax
lea eax, [ebp - 0x20d0]
push eax
lea ecx, [ebp - 0x2768]
call fcn.00434a93
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x26cc]
call fcn.00434a3f
mov dword [ebp - 0x153c], 0x4ff1
mov dword [ebp - 0x1834], 0xac80d8
cmp dword [ebp - 0x153c], 0x5132
jle 0x4987cb
and dword [ebp - 0x758], 0
jmp 0x4986fc
mov eax, dword [ebp - 0x758]
inc eax
mov dword [ebp - 0x758], eax
cmp dword [ebp - 0x758], 0x66b4
jge 0x4987af
and dword [ebp - 0x598], 0
jmp 0x498722
mov eax, dword [ebp - 0x598]
inc eax
mov dword [ebp - 0x598], eax
cmp dword [ebp - 0x598], 0x4436
jge 0x4987aa
and dword [ebp - 0x338], 0
jmp 0x498744
mov eax, dword [ebp - 0x338]
inc eax
mov dword [ebp - 0x338], eax
cmp dword [ebp - 0x338], 0x141e
jge 0x4987a5
mov ecx, dword [ebp - 0x598]
sub ecx, dword [ebp - 0x338]
mov eax, dword [ebp - 0x758]
shl eax, cl
cdq
mov dword [ebp - 0x188c], eax
mov dword [ebp - 0x1888], edx
push dword [ebp - 0x1888]
push dword [ebp - 0x188c]
lea ecx, [ebp - 0x2b78]
call fcn.004018f3
pop ecx
pop ecx
mov ecx, eax
call fcn.00434873
push eax
call fcn.004af787
pop ecx
lea ecx, [ebp - 0x2b78]
call fcn.00434869
jmp 0x498737
jmp 0x498715
jmp 0x4986ef
push 0x1a32
push 0xbb9
push 0x1f92
push 0x1af1
push 0
call dword [0xada198]
mov byte [ebp - 0x1c4], 0
mov dword [ebp - 4], 4
cmp dword [ebp - 0x153c], 0x4ee3
jge 0x4987f1
push dword [ebp - 0x1834]
call fcn.004af787
pop ecx
jmp 0x49880d
or dword [ebp - 4], 0xffffffff
jmp 0x498817
movzx eax, byte [ebp - 0x1c4]
test eax, eax
je 0x498be8
mov dword [ebp - 0xd0], 1
mov dword [ebp - 0x348], 0xf2e5664d
mov dword [ebp - 0x15ac], 0x274c
mov dword [ebp - 0x183c], 0xac80f0
cmp dword [ebp - 0x15ac], 0x29c2
jle 0x4988f4
and dword [ebp - 0x340], 0
jmp 0x498874
mov eax, dword [ebp - 0x340]
inc eax
mov dword [ebp - 0x340], eax
cmp dword [ebp - 0x340], 0x55cc
jge 0x4988f4
and dword [ebp - 0x5a0], 0
jmp 0x498896
mov eax, dword [ebp - 0x5a0]
inc eax
mov dword [ebp - 0x5a0], eax
cmp dword [ebp - 0x5a0], 0x616a
jge 0x4988ef
mov eax, dword [ebp - 0x340]
xor eax, dword [ebp - 0x5a0]
cdq
mov dword [ebp - 0x1898], eax
mov dword [ebp - 0x1894], edx
push dword [ebp - 0x1894]
push dword [ebp - 0x1898]
lea ecx, [ebp - 0x2908]
call fcn.004018f3
pop ecx
pop ecx
mov ecx, eax
call fcn.00434873
push eax
call fcn.004af787
pop ecx
lea ecx, [ebp - 0x2908]
call fcn.00434869
jmp 0x498889
jmp 0x498867
mov dword [ebp - 0x880], 0xffffffff
mov dword [ebp - 4], 6
cmp dword [ebp - 0x15ac], 0x2533
jge 0x49891d
push dword [ebp - 0x183c]
call fcn.004af787
pop ecx
jmp 0x498939
or dword [ebp - 4], 0xffffffff
jmp 0x498943
mov dword [ebp - 0xd0], 0
jmp 0x49895c
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0x18
jg 0x498be0
mov dword [ebp - 0x2080], 7
mov dword [ebp - 0x207c], 7
mov dword [ebp - 0x2078], 7
mov dword [ebp - 0x2074], 7
lea ecx, [ebp - 0x9c5]
call fcn.00434a90
push eax
lea eax, [ebp - 0x2070]
push eax
lea eax, [ebp - 0x2080]
push eax
lea ecx, [ebp - 0x27c8]
call fcn.00434a93
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x97c]
call fcn.00434a3f
mov dword [ebp - 0x184c], 0x737ae9f9
push 0x7b43
push 0x4391
push 0x4974
push 0x7979
push 0
push 0x2a67
lea eax, [ebp - 0x348]
push eax
push 1
push 0x3b0b
lea eax, [ebp - 0x97c]
push eax
push 0
push 0x49f2
push 0x696b
call fcn.00494d7c
add esp, 0x34
push 0
lea ecx, [ebp - 0x97c]
call fcn.00434a81
push 0
lea ecx, [ebp - 0x97c]
call fcn.00434a81
cmp dword [ebp - 0xd0], 0
je 0x498a64
mov eax, dword [ebp - 0x348]
mov dword [ebp - 0x348], eax
mov eax, dword [ebp - 0x348]
mov dword [ebp - 0x880], eax
cmp dword [ebp - 0x880], 0
je 0x498a64
mov dword [ebp - 0x15b4], 1
jmp 0x498a6b
and dword [ebp - 0x15b4], 0
push 0
lea ecx, [ebp - 0x97c]
call fcn.00434a81
mov eax, dword [eax]
sub eax, dword [ebp - 0x15b4]
jne 0x498a8e
mov dword [ebp - 0x15bc], 1
jmp 0x498a95
and dword [ebp - 0x15bc], 0
push 0
lea ecx, [ebp - 0x97c]
call fcn.00434a81
mov ecx, dword [ebp - 0x15bc]
cmp ecx, dword [eax]
jg 0x498ab8
mov dword [ebp - 0x15c4], 1
jmp 0x498abf
and dword [ebp - 0x15c4], 0
mov eax, dword [ebp - 0xd0]
cmp dword [ebp - 0x15c4], eax
je 0x498ad9
mov dword [ebp - 0x15cc], 1
jmp 0x498ae0
and dword [ebp - 0x15cc], 0
push 0
lea ecx, [ebp - 0x97c]
call fcn.00434a81
mov ecx, dword [ebp - 0x15cc]
imul ecx, dword [eax]
cmp ecx, dword [ebp - 0xd0]
jge 0x498b13
mov eax, 0xa14c5530
test eax, eax
je 0x498b13
mov dword [ebp - 0x1844], 1
jmp 0x498b1a
and dword [ebp - 0x1844], 0
push 0
lea ecx, [ebp - 0x97c]
call fcn.00434a81
mov eax, dword [ebp - 0x880]
mov dword [ebp - 0x22ec], eax
push 2
lea ecx, [ebp - 0x97c]
call fcn.00434a81
push 0
lea ecx, [ebp - 0x97c]
call fcn.00434a81
mov eax, dword [eax]
shl eax, 2
test eax, eax
jne 0x498b5f
mov eax, 0xa9f
test eax, eax
je 0x498b72
push 8
pop eax
test eax, eax
je 0x498b72
mov dword [ebp - 0x15d4], 1
jmp 0x498b79
and dword [ebp - 0x15d4], 0
push 3
lea ecx, [ebp - 0x97c]
call fcn.00434a81
mov ecx, dword [ebp - 0x15d4]
cmp ecx, dword [eax]
jge 0x498b9c
mov dword [ebp - 0x15dc], 1
jmp 0x498ba3
and dword [ebp - 0x15dc], 0
mov eax, dword [ebp - 0xd0]
cmp dword [ebp - 0x15dc], eax
je 0x498bbd
mov dword [ebp - 0x15e4], 1
jmp 0x498bc4
and dword [ebp - 0x15e4], 0
mov eax, dword [ebp - 0x15e4]
mov dword [ebp - 0x184c], eax
lea ecx, [ebp - 0x97c]
call fcn.00434a65
jmp 0x49894f
push 0
call dword [0xada2d4]
push 2
lea ecx, [ebp - 0x1db4]
call fcn.00434993
mov dword [ebp - 0x284], 0
push 0x6a0a
push 1
push 0x37c4
push 0xbfc
lea eax, [ebp - 0x1db4]
push eax
push 0x65d6
push 0x2a7f
push 1
push 0x6d85
lea eax, [ebp - 0x22f4]
push eax
push 0x59aa
push 0x74b5
push 0x2116
push 0
push 0x35a
push 0x71ee
push 0x5a0b
push 0x2183
call fcn.004947ff
add esp, 0x48
mov dword [ebp - 0x284], 0
jmp 0x498c75
mov eax, dword [ebp - 0x284]
inc eax
mov dword [ebp - 0x284], eax
cmp dword [ebp - 0x284], 1
jg 0x498eea
mov dword [ebp - 0x888], 0x7cce
mov dword [ebp - 0x185c], 0xcc321a0
mov eax, 0xfffff9fa
test eax, eax
je 0x498ea3
mov dword [ebp - 0x1cc], 0xdf7cd95d
mov dword [ebp - 0x924], 0xffffffff
mov dword [ebp - 0x1854], 8
cmp dword [ebp - 0x1cc], 0
jne 0x498cd6
mov dword [ebp - 0x15ec], 1
jmp 0x498cdd
and dword [ebp - 0x15ec], 0
cmp dword [ebp - 0x15ec], 0xfffffff6
jb 0x498cf2
mov dword [ebp - 0x1644], 1
jmp 0x498cf9
and dword [ebp - 0x1644], 0
mov esi, dword [ebp - 0x1cc]
push 0
lea ecx, [ebp - 0x1db4]
call fcn.00434a81
cmp esi, dword [eax]
jge 0x498d1c
mov dword [ebp - 0x15f4], 1
jmp 0x498d23
and dword [ebp - 0x15f4], 0
mov eax, dword [ebp - 0x1cc]
cmp eax, dword [ebp - 0x15f4]
jl 0x498d3d
mov dword [ebp - 0x15fc], 1
jmp 0x498d44
and dword [ebp - 0x15fc], 0
mov eax, dword [ebp - 0x1cc]
cmp dword [ebp - 0x15fc], eax
jl 0x498d5e
mov dword [ebp - 0x1604], 1
jmp 0x498d65
and dword [ebp - 0x1604], 0
mov eax, dword [ebp - 0x1604]
sub eax, dword [ebp - 0x1cc]
mov dword [ebp - 0x924], eax
mov eax, dword [ebp - 0x1cc]
cmp dword [ebp - 0x924], eax
jle 0x498d91
mov dword [ebp - 0x160c], 1
jmp 0x498d98
and dword [ebp - 0x160c], 0
mov eax, dword [ebp - 0x888]
cmp dword [ebp - 0x160c], eax
jg 0x498db2
mov dword [ebp - 0x1614], 1
jmp 0x498db9
and dword [ebp - 0x1614], 0
mov eax, dword [ebp - 0x888]
cmp dword [ebp - 0x1614], eax
je 0x498dd3
mov dword [ebp - 0x161c], 1
jmp 0x498dda
and dword [ebp - 0x161c], 0
cmp dword [ebp - 0x161c], 2
jne 0x498def
mov dword [ebp - 0xa50], 1
jmp 0x498df6
and dword [ebp - 0xa50], 0
mov eax, dword [ebp - 0x1644]
add eax, dword [ebp - 0xa50]
jne 0x498e16
cmp dword [ebp - 0x924], 0
jne 0x498e16
and dword [ebp - 0x1504], 0
jmp 0x498e20
mov dword [ebp - 0x1504], 1
push 0
lea ecx, [ebp - 0x1db4]
call fcn.00434a81
mov eax, dword [eax]
cmp eax, dword [ebp - 0x1504]
je 0x498e43
mov dword [ebp - 0x1068], 1
jmp 0x498e4a
and dword [ebp - 0x1068], 0
mov eax, dword [ebp - 0x284]
cmp dword [ebp - 0x1068], eax
jge 0x498e64
mov dword [ebp - 0xa58], 1
jmp 0x498e6b
and dword [ebp - 0xa58], 0
push 1
lea ecx, [ebp - 0x1db4]
call fcn.00434a81
mov ecx, dword [ebp - 0xa58]
cmp ecx, dword [eax]
jl 0x498e8e
mov dword [ebp - 0x14f8], 1
jmp 0x498e95
and dword [ebp - 0x14f8], 0
mov eax, dword [ebp - 0x14f8]
mov dword [ebp - 0x1854], eax
jmp 0x498ee5
push 0xfaf
push 0x45bc
push 0
push 0
push 0x327b
lea eax, [ebp - 0x888]
push eax
push 0x51f5
push 0x1063
push 0x1e07
push 0x3545
lea eax, [ebp - 0x185c]
push eax
push 0x102
call fcn.00492762
add esp, 0x30
jmp 0x498c68
lea ecx, [ebp - 0x1db4]
call fcn.00434a65
mov dword [ebp - 0x28], 0
mov dword [ebp - 0xa68], 0xffffffff
mov dword [ebp - 0x1cc4], 0xffffffff
mov dword [ebp - 0x350], 0
mov dword [ebp - 0x1ccc], 0xce96f8f
mov dword [ebp - 0x6c8], 0
jmp 0x498f3d
mov eax, dword [ebp - 0x6c8]
inc eax
mov dword [ebp - 0x6c8], eax
cmp dword [ebp - 0x6c8], 3
jge 0x498f59
mov eax, dword [ebp - 0x6c8]
mov dword [ebp + eax*4 - 0x272c], 0xa6f
jmp 0x498f30
cmp dword [ebp - 0x28], 0
je 0x498f73
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x28]
je 0x498f73
mov dword [ebp - 0xa60], 1
jmp 0x498f7a
and dword [ebp - 0xa60], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0xa60], eax
jle 0x498f97
cmp dword [ebp - 0x28], 0
je 0x498f97
mov dword [ebp - 0x1070], 1
jmp 0x498f9e
and dword [ebp - 0x1070], 0
mov eax, dword [ebp - 0x1070]
mov dword [ebp - 0xa68], eax
mov eax, dword [ebp - 0xa68]
sub eax, dword [ebp - 0x28]
mov dword [ebp - 0x1cc4], eax
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x28]
imul eax, eax, 0x52ea
cmp eax, dword [ebp - 0x28]
jge 0x498fd6
mov dword [ebp - 0x1378], 1
jmp 0x498fdd
and dword [ebp - 0x1378], 0
mov eax, dword [ebp - 0x1378]
mov dword [ebp - 0x350], eax
cmp dword [ebp - 0x350], 0
je 0x499007
cmp dword [ebp - 0x350], 0
je 0x499007
mov dword [ebp - 0xa70], 1
jmp 0x49900e
and dword [ebp - 0xa70], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xa70]
mov dword [ebp + eax - 0x272c], ecx
mov eax, dword [ebp - 0x28]
imul eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x350]
jne 0x49903c
mov dword [ebp - 0x1078], 1
jmp 0x499043
and dword [ebp - 0x1078], 0
mov eax, dword [ebp - 0x1078]
mov dword [ebp - 0x1ccc], eax
mov dword [ebp - 0x28], 0xfffffffc
jmp 0x49905f
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xfffffff8
jge 0x4991f0
mov dword [ebp - 0x1ce4], 1
mov dword [ebp - 0xa78], 0x32db
mov dword [ebp - 0x1cd4], 0xac8140
cmp dword [ebp - 0xa78], 0x355f
jle 0x49915e
and dword [ebp - 0x5a8], 0
jmp 0x4990ad
mov eax, dword [ebp - 0x5a8]
inc eax
mov dword [ebp - 0x5a8], eax
cmp dword [ebp - 0x5a8], 0x5987
jge 0x49915e
and dword [ebp - 0x358], 0
jmp 0x4990d3
mov eax, dword [ebp - 0x358]
inc eax
mov dword [ebp - 0x358], eax
cmp dword [ebp - 0x358], 0x7132
jge 0x499159
and dword [ebp - 0x7c8], 0
jmp 0x4990f5
mov eax, dword [ebp - 0x7c8]
inc eax
mov dword [ebp - 0x7c8], eax
cmp dword [ebp - 0x7c8], 0x134f
jge 0x499154
mov eax, dword [ebp - 0x5a8]
add eax, dword [ebp - 0x358]
and eax, dword [ebp - 0x7c8]
cdq
mov dword [ebp - 0x18a4], eax
mov dword [ebp - 0x18a0], edx
push dword [ebp - 0x18a0]
push dword [ebp - 0x18a4]
lea ecx, [ebp - 0x2ab8]
call fcn.004018f3
pop ecx
pop ecx
mov ecx, eax
call fcn.00434873
push eax
call fcn.004af787
pop ecx
lea ecx, [ebp - 0x2ab8]
call fcn.00434869
jmp 0x4990e8
jmp 0x4990c6
jmp 0x4990a0
mov dword [ebp - 0x360], 0
jmp 0x499177
mov eax, dword [ebp - 0x360]
inc eax
mov dword [ebp - 0x360], eax
cmp dword [ebp - 0x360], 1
jge 0x499193
mov eax, dword [ebp - 0x360]
mov dword [ebp + eax*4 - 0x1cdc], 0xdd5d
jmp 0x49916a
mov dword [ebp - 4], 8
cmp dword [ebp - 0xa78], 0x3267
jge 0x4991b2
push dword [ebp - 0x1cd4]
call fcn.004af787
pop ecx
jmp 0x4991ce
or dword [ebp - 4], 0xffffffff
jmp 0x4991d8
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1cdc]
mov dword [ebp - 0x1ce4], eax
jmp 0x499058
mov byte [ebp - 0x135], 0
movzx eax, byte [ebp - 0x135]
test eax, eax
je 0x4993f2
mov dword [ebp - 0x5b0], 0x8a1f
push 1
lea ecx, [ebp - 0x21c4]
call fcn.00434993
push 3
lea ecx, [ebp - 0x16f0]
call fcn.00434993
mov dword [ebp - 0xa88], 0x57e3b6f9
mov dword [ebp - 0x1728], 0
mov dword [ebp - 0x1cfc], 0x2f5a260d
push 0x4a30
lea eax, [ebp - 0x21c4]
push eax
push 0
push 0x1842
lea eax, [ebp - 0x1cec]
push eax
push 1
call fcn.0048b114
add esp, 0x18
lea eax, [ebp - 0x1cec]
push eax
push 0xab9
lea eax, [ebp - 0x16f0]
push eax
push 0
push 0x7d9d
push 0
call fcn.0048bb7a
add esp, 0x18
mov eax, dword [ebp - 0x5b0]
mov dword [ebp - 0x22fc], eax
cmp dword [ebp - 0x5b0], 0
jne 0x4992c7
push 0
lea ecx, [ebp - 0x16f0]
call fcn.00434a81
cmp dword [eax], 0
jne 0x4992c7
push 7
pop eax
test eax, eax
jne 0x4992c7
and dword [ebp - 0x15c8], 0
jmp 0x4992d1
mov dword [ebp - 0x15c8], 1
push 0
lea ecx, [ebp - 0x16f0]
call fcn.00434a81
mov ecx, dword [ebp - 0x15c8]
cmp ecx, dword [eax]
je 0x4992f4
mov dword [ebp - 0xa80], 1
jmp 0x4992fb
and dword [ebp - 0xa80], 0
mov eax, dword [ebp - 0xa80]
neg eax
cmp eax, 0x5154
jge 0x499316
mov dword [ebp - 0x1080], 1
jmp 0x49931d
and dword [ebp - 0x1080], 0
mov eax, dword [ebp - 0x5b0]
mov dword [ebp - 0x1380], eax
push 0
lea ecx, [ebp - 0x21c4]
call fcn.00434a81
mov ecx, dword [ebp - 0x1380]
mov dword [eax], ecx
mov eax, dword [ebp - 0x1080]
mov dword [ebp - 0xa88], eax
mov esi, dword [ebp - 0xa88]
sub esi, 0x6e854926
push 0
lea ecx, [ebp - 0x16f0]
call fcn.00434a81
sub esi, dword [eax]
cmp dword [ebp - 0x1380], esi
je 0x499379
mov dword [ebp - 0xa90], 1
jmp 0x499380
and dword [ebp - 0xa90], 0
mov esi, dword [ebp - 0x5b0]
push 0
lea ecx, [ebp - 0x16f0]
call fcn.00434a81
mov ecx, dword [ebp - 0xa90]
imul ecx, dword [eax]
sub esi, ecx
mov dword [ebp - 0x1728], esi
push 0
push 1
lea eax, [ebp - 0x1cfc]
push eax
push 0x641
call fcn.00491f85
add esp, 0x10
lea ecx, [ebp - 0x16f0]
call fcn.00434a65
lea ecx, [ebp - 0x21c4]
call fcn.00434a65
push 0x4366
push 0x4d6b
push 0x78fd
push 1
push 0x146c
push 0
call fcn.0048bb7a
add esp, 0x18
lea ecx, [ebp - 0x26cc]
call fcn.00434a65
mov dword [ebp - 0x224], 1
mov dword [ebp - 0xf0], 0x1bab5934
mov dword [ebp - 0x210], 0xfffffff9
mov dword [ebp - 0x15c], 0x1b1b552b
mov dword [ebp - 0x9a0], 0x7582ba8d
mov dword [ebp - 0x2304], 0x5b627429
mov dword [ebp - 0x22a8], 0xfffffffa
mov dword [ebp - 0x22a4], 0xfffffffa
mov dword [ebp - 0x22a0], 0xfffffffa
mov dword [ebp - 0x229c], 0xfffffffa
mov dword [ebp - 0x368], 0
jmp 0x49947a
mov eax, dword [ebp - 0x368]
inc eax
mov dword [ebp - 0x368], eax
cmp dword [ebp - 0x368], 2
jge 0x499496
mov eax, dword [ebp - 0x368]
mov dword [ebp + eax*4 - 0x1688], 0xfffffff6
jmp 0x49946d
cmp dword [ebp - 0x9a0], 0
jbe 0x4994ab
mov dword [ebp - 0x1088], 1
jmp 0x4994b2
and dword [ebp - 0x1088], 0
mov eax, dword [ebp - 0x9a0]
cmp dword [ebp - 0x1088], eax
je 0x4994c7
cmp dword [ebp - 0x224], 0
mov eax, dword [ebp - 0x224]
mov dword [ebp - 0x230c], eax
cmp dword [ebp - 0xf0], 0
je 0x4994ef
push 6
pop eax
test eax, eax
je 0x4994ef
mov dword [ebp - 0xa98], 1
jmp 0x4994f6
and dword [ebp - 0xa98], 0
mov eax, dword [ebp - 0xa98]
neg eax
cmp eax, 0xfd47030f
jae 0x499511
mov dword [ebp - 0x1500], 1
jmp 0x499518
and dword [ebp - 0x1500], 0
mov eax, dword [ebp - 0x210]
cmp eax, dword [ebp - 0x1500]
jg 0x499532
mov dword [ebp - 0xaa0], 1
jmp 0x499539
and dword [ebp - 0xaa0], 0
mov eax, dword [ebp - 0xf0]
cmp dword [ebp - 0xaa0], eax
je 0x499559
cmp dword [ebp - 0x224], 0
jne 0x499559
and dword [ebp - 0x1090], 0
jmp 0x499563
mov dword [ebp - 0x1090], 1
mov eax, dword [ebp - 0x210]
cmp dword [ebp - 0x1090], eax
jle 0x49957d
mov dword [ebp - 0xaa8], 1
jmp 0x499584
and dword [ebp - 0xaa8], 0
mov eax, dword [ebp - 0x210]
imul eax, dword [ebp - 0xaa8]
dec eax
dec eax
mov dword [ebp - 0xf0], eax
je 0x4995b0
cmp dword [ebp - 0xf0], 0
je 0x4995b0
mov dword [ebp - 0xab0], 1
jmp 0x4995b7
and dword [ebp - 0xab0], 0
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x1388], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1388]
mov dword [ebp + eax - 0x1688], ecx
mov eax, dword [ebp - 0x1388]
cmp eax, dword [ebp - 0xab0]
jle 0x4995fd
mov dword [ebp - 0x1098], 1
jmp 0x499604
and dword [ebp - 0x1098], 0
cmp dword [ebp - 0x1098], 0x98737a30
jbe 0x49961c
mov dword [ebp - 0xab8], 1
jmp 0x499623
and dword [ebp - 0xab8], 0
mov eax, dword [ebp - 0x224]
imul eax, dword [ebp - 0xab8]
cmp eax, dword [ebp - 0x210]
je 0x499644
mov dword [ebp - 0x1640], 1
jmp 0x49964b
and dword [ebp - 0x1640], 0
mov eax, dword [ebp - 0x9a0]
cmp dword [ebp - 0x1640], eax
jne 0x499665
mov dword [ebp - 0xac0], 1
jmp 0x49966c
and dword [ebp - 0xac0], 0
cmp dword [ebp - 0xac0], 1
jb 0x499887
mov dword [ebp - 0x1d04], 0x685e
mov dword [ebp - 0x2314], 9
mov dword [ebp - 0x1d14], 0x16fefd52
mov dword [ebp - 0x231c], 0xfffffffa
mov dword [ebp - 0x253c], 0x903adfe1
mov dword [ebp - 0x2544], 1
mov dword [ebp - 0x254c], 0xffffffff
push 1
lea ecx, [ebp - 0x232c]
call fcn.00434993
lea eax, [ebp - 0x2554]
push eax
push 0xb83
push 0
push 0x77dc
push 0x1094
lea eax, [ebp - 0x232c]
push eax
push 1
push 0x6d52
call fcn.0048fd76
add esp, 0x20
mov dword [ebp - 0xac8], 0x564e
mov dword [ebp - 0x1d0c], 0xac818c
cmp dword [ebp - 0xac8], 0x5813
jle 0x4997c9
and dword [ebp - 0x5b8], 0
jmp 0x499734
mov eax, dword [ebp - 0x5b8]
inc eax
mov dword [ebp - 0x5b8], eax
cmp dword [ebp - 0x5b8], 0x3655
jge 0x4997c9
and dword [ebp - 0x6d0], 0
jmp 0x49975a
mov eax, dword [ebp - 0x6d0]
inc eax
mov dword [ebp - 0x6d0], eax
cmp dword [ebp - 0x6d0], 0x1a1a
jge 0x4997c4
and dword [ebp - 0x370], 0
jmp 0x49977c
mov eax, dword [ebp - 0x370]
inc eax
mov dword [ebp - 0x370], eax
cmp dword [ebp - 0x370], 0x2a7e
jge 0x4997c2
mov eax, dword [ebp - 0x6d0]
cdq
idiv dword [ebp - 0x370]
mov eax, dword [ebp - 0x5b8]
sub eax, edx
cdq
mov dword [ebp - 0x18b0], eax
mov dword [ebp - 0x18ac], edx
push dword [ebp - 0x18ac]
push dword [ebp - 0x18b0]
mov ecx, 0xad77b8
call fcn.0043487e
jmp 0x49976f
jmp 0x49974d
jmp 0x499727
cmp dword [ebp - 0x1d04], 0
je 0x4997e7
cmp dword [ebp - 0x210], 0
je 0x4997e7
mov dword [ebp - 0x10a0], 1
jmp 0x4997ee
and dword [ebp - 0x10a0], 0
mov eax, dword [ebp - 0x10a0]
mov dword [ebp - 0xf0], eax
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0xac8], 0x5525
jge 0x49981d
mov edx, dword [ebp - 0x1d0c]
mov ecx, 0xad77b8
call fcn.00436224
jmp 0x499839
or dword [ebp - 4], 0xffffffff
jmp 0x499843
mov eax, dword [ebp - 0x1d14]
cmp dword [ebp - 0x224], eax
jne 0x49985d
mov dword [ebp - 0x1390], 1
jmp 0x499864
and dword [ebp - 0x1390], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1390]
mov dword [ebp + eax - 0x1688], ecx
lea ecx, [ebp - 0x232c]
call fcn.00434a65
jmp 0x499ba4
push 4
lea ecx, [ebp - 0x1f50]
call fcn.00434993
push 4
lea ecx, [ebp - 0x233c]
call fcn.00434993
mov dword [ebp - 0xa0], 0
jmp 0x4998ba
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 4
jge 0x4998d9
push dword [ebp - 0xa0]
lea ecx, [ebp - 0x1f50]
call fcn.00434a81
or dword [eax], 0xffffffff
jmp 0x4998ad
mov dword [ebp - 0xa0], 0
jmp 0x4998f2
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 4
jge 0x499914
push dword [ebp - 0xa0]
lea ecx, [ebp - 0x233c]
call fcn.00434a81
mov dword [eax], 0xfffffffd
jmp 0x4998e5
mov dword [ebp - 0x15c], 0
jmp 0x49992d
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 0x2e
je 0x499b60
mov dword [ebp - 0x378], 0
jmp 0x499953
mov eax, dword [ebp - 0x378]
inc eax
mov dword [ebp - 0x378], eax
cmp dword [ebp - 0x378], 2
jge 0x49996f
mov eax, dword [ebp - 0x378]
mov dword [ebp + eax*4 - 0x1fe8], 0xfffa
jmp 0x499946
mov byte [ebp - 0x1c6], 0
mov dword [ebp - 0xad0], 0x676c
mov dword [ebp - 0x1d1c], 0xac81b8
cmp dword [ebp - 0xad0], 0x6a3c
jle 0x499a0d
and dword [ebp - 0x760], 0
jmp 0x4999ac
mov eax, dword [ebp - 0x760]
inc eax
mov dword [ebp - 0x760], eax
cmp dword [ebp - 0x760], 0x65b4
jge 0x499a0d
and dword [ebp - 0x380], 0
jmp 0x4999ce
mov eax, dword [ebp - 0x380]
inc eax
mov dword [ebp - 0x380], eax
cmp dword [ebp - 0x380], 0x4946
jge 0x499a0b
mov eax, dword [ebp - 0x760]
and eax, dword [ebp - 0x380]
cdq
mov dword [ebp - 0x18bc], eax
mov dword [ebp - 0x18b8], edx
push dword [ebp - 0x18b8]
push dword [ebp - 0x18bc]
mov ecx, 0xad77b8
call fcn.0043487e
jmp 0x4999c1
jmp 0x49999f
movzx eax, byte [ebp - 0x1c6]
test eax, eax
je 0x499a2a
push 0
push 0x155e
push 0x945
call dword [0xada4b0]
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0xad0], 0x64c4
jge 0x499a4d
mov edx, dword [ebp - 0x1d1c]
mov ecx, 0xad77b8
call fcn.00436224
jmp 0x499a69
or dword [ebp - 4], 0xffffffff
jmp 0x499a73
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1fe8], 0xea955042
jae 0x499a92
mov dword [ebp - 0x10a8], 1
jmp 0x499a99
and dword [ebp - 0x10a8], 0
push 4
pop eax
imul eax, eax, 0
mov esi, dword [ebp + eax - 0x1688]
add esi, dword [ebp - 0x10a8]
push 1
lea ecx, [ebp - 0x1f50]
call fcn.00434a81
cmp esi, dword [eax]
je 0x499ac9
mov dword [ebp - 0xad8], 1
jmp 0x499ad0
and dword [ebp - 0xad8], 0
push 4
pop eax
imul eax, eax, 0
imul ecx, dword [ebp - 0xad8], 0x3ef4
cmp dword [ebp + eax - 0x1fe8], ecx
jg 0x499af5
mov dword [ebp - 0x1508], 1
jmp 0x499afc
and dword [ebp - 0x1508], 0
push 1
lea ecx, [ebp - 0x1f50]
call fcn.00434a81
mov ecx, dword [ebp - 0x1508]
sub ecx, dword [eax]
cmp ecx, dword [ebp - 0x210]
jl 0x499b25
mov dword [ebp - 0xae0], 1
jmp 0x499b2c
and dword [ebp - 0xae0], 0
cmp dword [ebp - 0xae0], 9
je 0x499b41
mov dword [ebp - 0x10b0], 1
jmp 0x499b48
and dword [ebp - 0x10b0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x10b0]
mov dword [ebp + eax - 0x1688], ecx
jmp 0x499920
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x22a8], 1
jle 0x499b7b
mov dword [ebp - 0xae8], 1
jmp 0x499b82
and dword [ebp - 0xae8], 0
mov eax, dword [ebp - 0xae8]
mov dword [ebp - 0xf0], eax
lea ecx, [ebp - 0x233c]
call fcn.00434a65
lea ecx, [ebp - 0x1f50]
call fcn.00434a65
mov byte [ebp - 0x29], 0
push 1
lea ecx, [ebp - 0x9f0]
call fcn.00434993
mov dword [ebp - 0x390], 0xfff8
mov dword [ebp - 0x890], 0xbf90a23
mov dword [ebp - 0x10b8], 0xffffffff
mov dword [ebp - 0x10c0], 1
mov dword [ebp - 0x1398], 0x5dc9
mov dword [ebp - 0x1d24], 0xac8220
cmp dword [ebp - 0x1398], 0x6038
jle 0x499c76
and dword [ebp - 0x5c0], 0
jmp 0x499c13
mov eax, dword [ebp - 0x5c0]
inc eax
mov dword [ebp - 0x5c0], eax
cmp dword [ebp - 0x5c0], 0x6be0
jge 0x499c76
and dword [ebp - 0x388], 0
jmp 0x499c35
mov eax, dword [ebp - 0x388]
inc eax
mov dword [ebp - 0x388], eax
cmp dword [ebp - 0x388], 0x2a66
jge 0x499c74
mov eax, dword [ebp - 0x5c0]
mov ecx, dword [ebp - 0x388]
sar eax, cl
cdq
mov dword [ebp - 0x18c8], eax
mov dword [ebp - 0x18c4], edx
push dword [ebp - 0x18c4]
push dword [ebp - 0x18c8]
mov ecx, 0xad77b8
call fcn.0043487e
jmp 0x499c28
jmp 0x499c06
mov dword [ebp - 0xb00], 0x3147f59e
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0x1398], 0x5ba9
jge 0x499ca3
mov edx, dword [ebp - 0x1d24]
mov ecx, 0xad77b8
call fcn.00436224
jmp 0x499cbf
or dword [ebp - 4], 0xffffffff
jmp 0x499cc9
mov dword [ebp - 0x1d3c], 0x5d580090
mov dword [ebp - 0x201c], 0xcecce005
mov dword [ebp - 0x2018], 0xcecce005
mov dword [ebp - 0x2014], 0xcecce005
mov dword [ebp - 0x2010], 0xcecce005
lea ecx, [ebp - 0x85d]
call fcn.00434a90
push eax
lea eax, [ebp - 0x200c]
push eax
lea eax, [ebp - 0x201c]
push eax
lea ecx, [ebp - 0x27e0]
call fcn.00434a93
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x234c]
call fcn.00434a3f
mov dword [ebp - 0x6d8], 0
jmp 0x499d49
mov eax, dword [ebp - 0x6d8]
inc eax
mov dword [ebp - 0x6d8], eax
cmp dword [ebp - 0x6d8], 1
jge 0x499d6b
push dword [ebp - 0x6d8]
lea ecx, [ebp - 0x9f0]
call fcn.00434a81
mov dword [eax], 0x3fbb4ebb
jmp 0x499d3c
mov eax, 0xefc07e17
test eax, eax
je 0x499d92
push 0
lea ecx, [ebp - 0x9f0]
call fcn.00434a81
cmp dword [eax], 0
je 0x499d92
mov dword [ebp - 0x15d0], 1
jmp 0x499d99
and dword [ebp - 0x15d0], 0
push 0
lea ecx, [ebp - 0x9f0]
call fcn.00434a81
mov esi, eax
push 0
lea ecx, [ebp - 0x9f0]
call fcn.00434a81
mov ecx, dword [esi]
cmp ecx, dword [eax]
je 0x499dc7
mov dword [ebp - 0xaf0], 1
jmp 0x499dce
and dword [ebp - 0xaf0], 0
mov eax, dword [ebp - 0xaf0]
mov dword [ebp - 0x10b8], eax
mov esi, dword [ebp - 0x10b8]
push 0
lea ecx, [ebp - 0x9f0]
call fcn.00434a81
cmp esi, dword [eax]
jge 0x499e0f
push 0
lea ecx, [ebp - 0x9f0]
call fcn.00434a81
cmp dword [eax], 0
je 0x499e0f
mov dword [ebp - 0x1d2c], 1
jmp 0x499e16
and dword [ebp - 0x1d2c], 0
cmp dword [ebp - 0x10c0], 0
jae 0x499e2b
mov dword [ebp - 0xaf8], 1
jmp 0x499e32
and dword [ebp - 0xaf8], 0
push 0
lea ecx, [ebp - 0x9f0]
call fcn.00434a81
mov eax, dword [eax]
mov dword [ebp - 0x390], eax
mov eax, dword [ebp - 0x390]
mov dword [ebp - 0x890], eax
mov eax, dword [ebp - 0x890]
imul eax, dword [ebp - 0xaf8]
cmp dword [ebp - 0x15d0], eax
jle 0x499e74
mov dword [ebp - 0x1d34], 1
jmp 0x499e7b
and dword [ebp - 0x1d34], 0
push 0
lea ecx, [ebp - 0x9f0]
call fcn.00434a81
cmp dword [ebp - 0x390], 0
je 0x499eb6
mov byte [ebp - 0x1c8], 0
movzx eax, byte [ebp - 0x1c8]
test eax, eax
je 0x499eb1
push 0
push 0
push 0
push 0
call dword [0xada308]
jmp 0x499f43
mov dword [ebp - 0xb08], 0x225189d9
mov dword [ebp - 0x1d44], 0xe28ab82
push 0x6776
lea eax, [ebp - 0x1d3c]
push eax
push 1
lea eax, [ebp - 0x9f0]
push eax
lea eax, [ebp - 0x390]
push eax
push 0
push 0x1d33
lea eax, [ebp - 0xb08]
push eax
lea eax, [ebp - 0xb00]
push eax
lea eax, [ebp - 0x234c]
push eax
call fcn.0048b4f0
add esp, 0x28
lea eax, [ebp - 0x890]
push eax
push 1
lea eax, [ebp - 0xb00]
push eax
lea eax, [ebp - 0x1d44]
push eax
push 0x164
lea eax, [ebp - 0x10c0]
push eax
push 0x3254
lea eax, [ebp - 0xb08]
push eax
push 0
call fcn.00494252
add esp, 0x24
lea ecx, [ebp - 0x234c]
call fcn.00434a65
lea ecx, [ebp - 0x9f0]
call fcn.00434a65
mov dword [ebp - 0x24c], 1
mov dword [ebp - 0x194], 0x1bab5934
mov dword [ebp - 0x208], 0xfffffff9
mov dword [ebp - 0x2dc], 0xf251d69f
mov dword [ebp - 0x5c8], 0
jmp 0x499f9a
mov eax, dword [ebp - 0x5c8]
inc eax
mov dword [ebp - 0x5c8], eax
cmp dword [ebp - 0x5c8], 3
jge 0x499fb6
mov eax, dword [ebp - 0x5c8]
mov dword [ebp + eax*4 - 0x2714], 3
jmp 0x499f8d
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2714]
mov dword [ebp - 0x2dc], eax
mov dword [ebp - 0x2dc], 0
jmp 0x499fe2
mov eax, dword [ebp - 0x2dc]
inc eax
mov dword [ebp - 0x2dc], eax
cmp dword [ebp - 0x2dc], 0x23
je 0x49a159
mov dword [ebp - 0x398], 0x629aa810
mov dword [ebp - 0x398], 0
jmp 0x49a012
mov eax, dword [ebp - 0x398]
inc eax
mov dword [ebp - 0x398], eax
cmp dword [ebp - 0x398], 2
jg 0x49a154
mov byte [ebp - 0x1b7], 0
mov dword [ebp - 0x13a0], 0x3bd4
mov dword [ebp - 0x1d4c], 0xac8270
cmp dword [ebp - 0x13a0], 0x3de5
jle 0x49a0ee
and dword [ebp - 0x7a8], 0
jmp 0x49a060
mov eax, dword [ebp - 0x7a8]
inc eax
mov dword [ebp - 0x7a8], eax
cmp dword [ebp - 0x7a8], 0x6c1d
jge 0x49a0e1
and dword [ebp - 0x3a0], 0
jmp 0x49a082
mov eax, dword [ebp - 0x3a0]
inc eax
mov dword [ebp - 0x3a0], eax
cmp dword [ebp - 0x3a0], 0x7d00
jge 0x49a0dc
mov eax, dword [ebp - 0x7a8]
imul eax, dword [ebp - 0x3a0]
cdq
mov dword [ebp - 0x18d4], eax
mov dword [ebp - 0x18d0], edx
push dword [ebp - 0x18d0]
push dword [ebp - 0x18d4]
lea ecx, [ebp - 0x2938]
call fcn.004018f3
pop ecx
pop ecx
mov ecx, eax
call fcn.00434873
push eax
call fcn.004af787
pop ecx
lea ecx, [ebp - 0x2938]
call fcn.00434869
jmp 0x49a075
jmp 0x49a053
push 0
push 0xa5f
call dword [0xada3d4]
movzx eax, byte [ebp - 0x1b7]
test eax, eax
je 0x49a10a
push 1
push 0
push 0x4a05
call fcn.0048a06c
add esp, 0xc
mov dword [ebp - 4], 0x10
cmp dword [ebp - 0x13a0], 0x3892
jge 0x49a129
push dword [ebp - 0x1d4c]
call fcn.004af787
pop ecx
jmp 0x49a145
or dword [ebp - 4], 0xffffffff
jmp 0x49a14f
jmp 0x49a005
jmp 0x499fd5
mov dword [ebp - 0x184], 0x1b1b552b
mov dword [ebp - 0xb10], 0x30bf
mov dword [ebp - 0x1d54], 0xac82d8
cmp dword [ebp - 0xb10], 0x3172
jle 0x49a24e
and dword [ebp - 0x5d0], 0
jmp 0x49a19d
mov eax, dword [ebp - 0x5d0]
inc eax
mov dword [ebp - 0x5d0], eax
cmp dword [ebp - 0x5d0], 0x166c
jge 0x49a24e
and dword [ebp - 0x3a8], 0
jmp 0x49a1c3
mov eax, dword [ebp - 0x3a8]
inc eax
mov dword [ebp - 0x3a8], eax
cmp dword [ebp - 0x3a8], 0x3f4f
jge 0x49a249
and dword [ebp - 0x6e0], 0
jmp 0x49a1e5
mov eax, dword [ebp - 0x6e0]
inc eax
mov dword [ebp - 0x6e0], eax
cmp dword [ebp - 0x6e0], 0x6c85
jge 0x49a244
mov eax, dword [ebp - 0x5d0]
sub eax, dword [ebp - 0x3a8]
and eax, dword [ebp - 0x6e0]
cdq
mov dword [ebp - 0x18e0], eax
mov dword [ebp - 0x18dc], edx
push dword [ebp - 0x18dc]
push dword [ebp - 0x18e0]
lea ecx, [ebp - 0x2860]
call fcn.004018f3
pop ecx
pop ecx
mov ecx, eax
call fcn.00434873
push eax
call fcn.004af787
pop ecx
lea ecx, [ebp - 0x2860]
call fcn.00434869
jmp 0x49a1d8
jmp 0x49a1b6
jmp 0x49a190
push 4
lea ecx, [ebp - 0x1dd4]
call fcn.00434993
mov dword [ebp - 4], 0x12
cmp dword [ebp - 0xb10], 0x2f52
jge 0x49a27a
push dword [ebp - 0x1d54]
call fcn.004af787
pop ecx
jmp 0x49a296
or dword [ebp - 4], 0xffffffff
jmp 0x49a2a0
mov dword [ebp - 0x10c8], 0x19b3
mov dword [ebp - 0x1d5c], 0xac8338
cmp dword [ebp - 0x10c8], 0x1d0a
jle 0x49a35b
and dword [ebp - 0x3b0], 0
jmp 0x49a2da
mov eax, dword [ebp - 0x3b0]
inc eax
mov dword [ebp - 0x3b0], eax
cmp dword [ebp - 0x3b0], 0x63f6
jge 0x49a35b
and dword [ebp - 0x5d8], 0
jmp 0x49a2fc
mov eax, dword [ebp - 0x5d8]
inc eax
mov dword [ebp - 0x5d8], eax
cmp dword [ebp - 0x5d8], 0x79b0
jge 0x49a356
mov eax, dword [ebp - 0x3b0]
imul eax, dword [ebp - 0x5d8]
cdq
mov dword [ebp - 0x18ec], eax
mov dword [ebp - 0x18e8], edx
push dword [ebp - 0x18e8]
push dword [ebp - 0x18ec]
lea ecx, [ebp - 0x2968]
call fcn.004018f3
pop ecx
pop ecx
mov ecx, eax
call fcn.00434873
push eax
call fcn.004af787
pop ecx
lea ecx, [ebp - 0x2968]
call fcn.00434869
jmp 0x49a2ef
jmp 0x49a2cd
push 0
push 1
lea eax, [ebp - 0x1dd4]
push eax
push 0x254b
push 0x4ad7
push 0x1b46
push 0x311b
push 0x2f7c
push 0x2e21
push 0x1ccc
push 1
lea eax, [ebp - 0x255c]
push eax
push 0x39b6
call fcn.00490047
add esp, 0x34
mov dword [ebp - 4], 0x14
cmp dword [ebp - 0x10c8], 0x169e
jge 0x49a3be
push dword [ebp - 0x1d5c]
call fcn.004af787
pop ecx
jmp 0x49a3da
or dword [ebp - 4], 0xffffffff
jmp 0x49a3e4
push 2
lea ecx, [ebp - 0x1dd4]
call fcn.00434a81
and dword [eax], 0
jmp 0x49a41a
push 2
lea ecx, [ebp - 0x1dd4]
call fcn.00434a81
mov dword [ebp - 0xb18], eax
mov eax, dword [ebp - 0xb18]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0xb18]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0x1dd4]
call fcn.00434a81
cmp dword [eax], 0xfffffffc
jg 0x49a560
push 2
lea ecx, [ebp - 0x1dc4]
call fcn.00434993
push 0x1f7
push 0x6b66
push 1
push 0x15ab
push 0x2b3a
lea eax, [ebp - 0x1dc4]
push eax
push 0
push 1
lea eax, [ebp - 0x2564]
push eax
call fcn.0048d79a
add esp, 0x24
push 1
lea ecx, [ebp - 0x1dc4]
call fcn.00434a81
and dword [eax], 0
jmp 0x49a4a3
push 1
lea ecx, [ebp - 0x1dc4]
call fcn.00434a81
mov dword [ebp - 0x1510], eax
mov eax, dword [ebp - 0x1510]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x1510]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x1dc4]
call fcn.00434a81
cmp dword [eax], 0x1d
jg 0x49a550
mov dword [ebp - 0x1d64], 0xffffffff
mov dword [ebp - 0x3b8], 0
jmp 0x49a4dc
mov eax, dword [ebp - 0x3b8]
inc eax
mov dword [ebp - 0x3b8], eax
cmp dword [ebp - 0x3b8], 1
jge 0x49a4f8
mov eax, dword [ebp - 0x3b8]
mov dword [ebp + eax*4 - 0x22c], 0xff82ff40
jmp 0x49a4cf
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x22c], 0
jmp 0x49a526
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x22c]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x22c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x22c], 0xffffffe8
jne 0x49a54b
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x22c]
mov dword [ebp - 0x1d64], eax
jmp 0x49a50b
jmp 0x49a47f
lea ecx, [ebp - 0x1dc4]
call fcn.00434a65
jmp 0x49a3f6
lea ecx, [ebp - 0x1dd4]
call fcn.00434a65
mov dword [ebp - 0x9cc], 0x7582ba8d
mov dword [ebp - 0x256c], 0x5b627429
mov dword [ebp - 0x164], 0x6a9e
mov dword [ebp - 0x1d8], 0
mov dword [ebp - 0x16c], 0xa55f07c7
mov dword [ebp - 0x92c], 0xbe360de5
mov dword [ebp - 0x1d74], 1
mov dword [ebp - 0xb38], 0xec58f553
mov dword [ebp - 0xb20], 0x4227
mov dword [ebp - 0x1d6c], 0xac8388
cmp dword [ebp - 0xb20], 0x457b
jle 0x49a689
and dword [ebp - 0x768], 0
jmp 0x49a5f5
mov eax, dword [ebp - 0x768]
inc eax
mov dword [ebp - 0x768], eax
cmp dword [ebp - 0x768], 0x4009
jge 0x49a689
and dword [ebp - 0x3c0], 0
jmp 0x49a61b
mov eax, dword [ebp - 0x3c0]
inc eax
mov dword [ebp - 0x3c0], eax
cmp dword [ebp - 0x3c0], 0x3463
jge 0x49a684
and dword [ebp - 0x5e0], 0
jmp 0x49a63d
mov eax, dword [ebp - 0x5e0]
inc eax
mov dword [ebp - 0x5e0], eax
cmp dword [ebp - 0x5e0], 0x42e6
jge 0x49a682
mov eax, dword [ebp - 0x768]
mov ecx, dword [ebp - 0x3c0]
sar eax, cl
xor eax, dword [ebp - 0x5e0]
cdq
mov dword [ebp - 0x18f8], eax
mov dword [ebp - 0x18f4], edx
push dword [ebp - 0x18f4]
push dword [ebp - 0x18f8]
mov ecx, 0xad77b8
call fcn.0043487e
jmp 0x49a630
jmp 0x49a60e
jmp 0x49a5e8
mov dword [ebp - 0xb40], 0x9b4
mov dword [ebp - 4], 0x16
cmp dword [ebp - 0xb20], 0x4152
jge 0x49a6b6
mov edx, dword [ebp - 0x1d6c]
mov ecx, 0xad77b8
call fcn.00436224
jmp 0x49a6d2
or dword [ebp - 4], 0xffffffff
jmp 0x49a6dc
mov dword [ebp - 0xb48], 0x52b3395c
mov dword [ebp - 0x3c8], 0
jmp 0x49a6ff
mov eax, dword [ebp - 0x3c8]
inc eax
mov dword [ebp - 0x3c8], eax
cmp dword [ebp - 0x3c8], 2
jge 0x49a71b
mov eax, dword [ebp - 0x3c8]
mov dword [ebp + eax*4 - 0x27f0], 0xffff
jmp 0x49a6f2
mov dword [ebp - 0x1d8], 0x801fc3ee
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0x2574], eax
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0x257c], eax
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0x2584], eax
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 0x258c], eax
cmp dword [ebp - 0x164], 0xfffffffb
jl 0x49a76a
mov dword [ebp - 0x10d0], 1
jmp 0x49a771
and dword [ebp - 0x10d0], 0
mov eax, dword [ebp - 0x10d0]
mov dword [ebp - 0x1d8], eax
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 0x16c], eax
mov eax, dword [ebp - 0x16c]
imul eax, dword [ebp - 0x164]
cmp eax, dword [ebp - 0x164]
jl 0x49a7aa
mov dword [ebp - 0xb28], 1
jmp 0x49a7b1
and dword [ebp - 0xb28], 0
mov eax, dword [ebp - 0xb28]
mov dword [ebp - 0x92c], eax
cmp dword [ebp - 0x92c], 0x1e2d
jg 0x49a7d5
mov dword [ebp - 0x13a8], 1
jmp 0x49a7dc
and dword [ebp - 0x13a8], 0
mov eax, dword [ebp - 0x1d74]
cmp dword [ebp - 0x13a8], eax
jle 0x49a7f6
mov dword [ebp - 0xb30], 1
jmp 0x49a7fd
and dword [ebp - 0xb30], 0
mov eax, dword [ebp - 0x164]
cmp eax, dword [ebp - 0xb30]
je 0x49a817
mov dword [ebp - 0x10d8], 1
jmp 0x49a81e
and dword [ebp - 0x10d8], 0
mov eax, dword [ebp - 0x10d8]
mov dword [ebp - 0xb38], eax
mov eax, dword [ebp - 0xb38]
imul eax, dword [ebp - 0xb40]
add eax, dword [ebp - 0x164]
je 0x49a9b5
mov byte [ebp - 0x139], 0
movzx eax, byte [ebp - 0x139]
test eax, eax
je 0x49a87a
push 0
push 0x1b13
push 0
push 0
push 0x8e
push 0x10d9
push 0xf9f
push 0x9eb
call dword [0xada088]
mov byte [ebp - 0x17d], 0
mov dword [ebp - 0x1610], 0x23d4
mov dword [ebp - 0x1d7c], 0xac83e8
cmp dword [ebp - 0x1610], 0x26a0
jle 0x49a93b
and dword [ebp - 0x6e8], 0
jmp 0x49a8bb
mov eax, dword [ebp - 0x6e8]
inc eax
mov dword [ebp - 0x6e8], eax
cmp dword [ebp - 0x6e8], 0x59d7
jge 0x49a93b
and dword [ebp - 0x3d0], 0
jmp 0x49a8dd
mov eax, dword [ebp - 0x3d0]
inc eax
mov dword [ebp - 0x3d0], eax
cmp dword [ebp - 0x3d0], 0x40f8
jge 0x49a936
mov eax, dword [ebp - 0x6e8]
sub eax, dword [ebp - 0x3d0]
cdq
mov dword [ebp - 0x1904], eax
mov dword [ebp - 0x1900], edx
push dword [ebp - 0x1900]
push dword [ebp - 0x1904]
lea ecx, [ebp - 0x2ae8]
call fcn.004018f3
pop ecx
pop ecx
mov ecx, eax
call fcn.00434873
push eax
call fcn.004af787
pop ecx
lea ecx, [ebp - 0x2ae8]
call fcn.00434869
jmp 0x49a8d0
jmp 0x49a8ae
push 0x6f0b
push 0x7d00
push 0x41f9
push 1
push 0x2d45
push 0
push 0x5f45
push 0x7084
lea eax, [ebp - 0x17d]
push eax
push 0
call fcn.0048ce64
add esp, 0x28
mov dword [ebp - 4], 0x18
cmp dword [ebp - 0x1610], 0x2263
jge 0x49a98d
push dword [ebp - 0x1d7c]
call fcn.004af787
pop ecx
jmp 0x49a9a9
or dword [ebp - 4], 0xffffffff
jmp 0x49a9b3
jmp 0x49a9f8
mov byte [ebp - 0x13b], 0
movzx eax, byte [ebp - 0x13b]
test eax, eax
je 0x49a9f8
push 0
push 0x625a
push 0
push 0x79df
push 0x57b7
push 0x64b5
push 0x2971
push 0x551a
push 0x2631
push 1
call fcn.0049298f
add esp, 0x28
mov dword [ebp - 0x16c], 0
jmp 0x49aa11
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 1
jg 0x49aab8
mov dword [ebp - 0x1d84], 1
mov dword [ebp - 0x10e0], 0xa91a76a4
lea eax, [ebp - 0xb40]
push eax
lea eax, [ebp - 0x10e0]
push eax
lea eax, [ebp - 0x1d8]
push eax
push 0
lea eax, [ebp - 0x92c]
push eax
push 1
lea eax, [ebp - 0xb48]
push eax
lea eax, [ebp - 0x1d84]
push eax
push 0x39f4
push 1
call fcn.0048ce64
add esp, 0x28
push 0x5af2
lea eax, [ebp - 0x1d8]
push eax
push 0
push 1
push 0x7081
push 0xfeb
push 0x7ad9
push 0x3032
push 0x6665
lea eax, [ebp - 0x10e0]
push eax
push 0x74de
lea eax, [ebp - 0xb48]
push eax
call fcn.00492762
add esp, 0x30
jmp 0x49aa04
mov dword [ebp - 0x2298], 0xfffffffa
mov dword [ebp - 0x2294], 0xfffffffa
mov dword [ebp - 0x2290], 0xfffffffa
mov dword [ebp - 0x228c], 0xfffffffa
mov dword [ebp - 0x3e0], 1
mov dword [ebp - 0x174], 0x15d3e997
mov dword [ebp - 0x34], 8
mov dword [ebp - 0x28c], 1
mov dword [ebp - 0x234], 0xc3a3b2b4
mov dword [ebp - 0x898], 0xffffffff
mov dword [ebp - 0x13c8], 0x5ee192ef
mov dword [ebp - 0xc8], 0
jmp 0x49ab3c
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 1
jge 0x49ab55
mov eax, dword [ebp - 0xc8]
mov dword [ebp + eax*4 - 0x24], 0xd3f7bf4
jmp 0x49ab2f
mov dword [ebp - 0xc8], 0
jmp 0x49ab6e
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 3
jge 0x49ab8a
mov eax, dword [ebp - 0xc8]
mov dword [ebp + eax*4 - 0x26e4], 0xf4d75db0
jmp 0x49ab61
cmp dword [ebp - 0x3e0], 0
mov eax, dword [ebp - 0x3e0]
mov dword [ebp - 0x2594], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x24], 0
jne 0x49abba
push 0xfffffffffffffffb
pop eax
test eax, eax
jne 0x49abba
and dword [ebp - 0x13b0], 0
jmp 0x49abc4
mov dword [ebp - 0x13b0], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x24]
cmp dword [ebp - 0x13b0], eax
jl 0x49aea3
or eax, 0xffffffff
je 0x49aea3
mov dword [ebp - 0x5e8], 0x7631
mov dword [ebp - 0x7e8], 0xfffffffc
mov dword [ebp - 0x3d8], 5
mov dword [ebp - 0x1d94], 0xd786
mov dword [ebp - 0x1d9c], 5
mov eax, dword [ebp - 0x5e8]
mov dword [ebp - 0x259c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x24]
cmp dword [ebp - 0x5e8], eax
je 0x49ac3f
mov dword [ebp - 0xb50], 1
jmp 0x49ac46
and dword [ebp - 0xb50], 0
cmp dword [ebp - 0xb50], 0x198ab79
jge 0x49ac5e
mov dword [ebp - 0x1d8c], 1
jmp 0x49ac65
and dword [ebp - 0x1d8c], 0
mov eax, dword [ebp - 0x3e0]
mov dword [ebp - 0x25a4], eax
cmp dword [ebp - 0x5e8], 0
jge 0x49ac86
mov dword [ebp - 0x10e8], 1
jmp 0x49ac8d
and dword [ebp - 0x10e8], 0
mov dword [ebp - 0x7e8], 0
mov eax, dword [ebp - 0x7e8]
mov dword [ebp - 0x3d8], eax
mov eax, dword [ebp - 0x3d8]
add eax, dword [ebp - 0x10e8]
imul eax, eax, 0x2130
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x24]
je 0x49accd
mov dword [ebp - 0xb58], 1
jmp 0x49acd4
and dword [ebp - 0xb58], 0
cmp dword [ebp - 0xb58], 5
jle 0x49ace9
mov dword [ebp - 0x1518], 1
jmp 0x49acf0
and dword [ebp - 0x1518], 0
mov eax, dword [ebp - 0x1518]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x174], 0xf
jmp 0x49ad15
mov eax, dword [ebp - 0x174]
dec eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 0xffffffe4
jge 0x49aea1
mov dword [ebp - 0xb60], 0xa83acdd7
mov dword [ebp - 0x10f0], 0xffffffff
lea eax, [ebp - 0x10f0]
push eax
lea eax, [ebp - 0x5e8]
push eax
lea eax, [ebp - 0x1d94]
push eax
push 1
push 0
lea eax, [ebp - 0x28c]
push eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0xb60]
push eax
call fcn.00493d06
add esp, 0x20
mov dword [ebp - 0x34], 0
jmp 0x49ad79
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jg 0x49ae9c
cmp dword [ebp - 0x1d9c], 0
je 0x49adb6
mov eax, dword [ebp - 0xb60]
mov ecx, dword [ebp - 0x10f0]
imul ecx, dword [ebp - 0x3d8]
imul eax, ecx
cmp eax, dword [ebp - 0x3d8]
jne 0x49adb6
mov dword [ebp - 0xb68], 1
jmp 0x49adbd
and dword [ebp - 0xb68], 0
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp + eax*4 - 0x24]
cmp eax, dword [ebp - 0xb68]
jge 0x49add8
mov dword [ebp - 0x13b8], 1
jmp 0x49addf
and dword [ebp - 0x13b8], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x13b8], eax
jne 0x49adf6
mov dword [ebp - 0xb70], 1
jmp 0x49adfd
and dword [ebp - 0xb70], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x24]
cmp dword [ebp - 0xb70], eax
je 0x49ae1b
mov dword [ebp - 0x10f8], 1
jmp 0x49ae22
and dword [ebp - 0x10f8], 0
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp + eax*4 - 0x24]
mov ecx, dword [ebp - 0x10f8]
lea eax, [ecx + eax + 0x355901a7]
cmp eax, dword [ebp - 0x7e8]
jle 0x49ae4a
mov dword [ebp - 0xb78], 1
jmp 0x49ae51
and dword [ebp - 0xb78], 0
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x34]
mov ecx, dword [ebp + ecx*4 - 0x24]
imul ecx, dword [ebp - 0xb78]
cmp dword [ebp + eax*4 - 0x24], ecx
jge 0x49ae74
mov dword [ebp - 0x1da4], 1
jmp 0x49ae7b
and dword [ebp - 0x1da4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x24]
mov dword [ebp - 0x25ac], eax
mov eax, dword [ebp - 0x7e8]
mov dword [ebp - 0x28c], eax
jmp 0x49ad72
jmp 0x49ad08
jmp 0x49aeee
mov dword [ebp - 0x1ee8], 0xffffffff
push 0x6b7
push 0
lea eax, [ebp - 0x174]
push eax
push 0x132f
push 0x419c
push 0
call fcn.0048fc7f
add esp, 0x18
lea eax, [ebp - 0x1ee8]
push eax
push 0
lea eax, [ebp - 0x234]
push eax
push 0
push 0x5906
call fcn.0048d053
add esp, 0x14
mov eax, dword [ebp - 0x898]
mov dword [ebp - 0x25dc], eax
cmp dword [ebp - 0x34], 0
jne 0x49af0c
mov dword [ebp - 0x15d8], 1
jmp 0x49af13
and dword [ebp - 0x15d8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x24]
mov dword [ebp - 0x898], eax
mov eax, dword [ebp - 0x898]
cmp eax, dword [ebp - 0x15d8]
jle 0x49af3d
mov dword [ebp - 0xb80], 1
jmp 0x49af44
and dword [ebp - 0xb80], 0
cmp dword [ebp - 0xb80], 0xffffffff
jge 0x49af59
mov dword [ebp - 0x1100], 1
jmp 0x49af60
and dword [ebp - 0x1100], 0
mov eax, dword [ebp - 0x1100]
mov dword [ebp - 0x28c], eax
cmp dword [ebp - 0x28c], 0x8303
je 0x49af84
mov dword [ebp - 0xb88], 1
jmp 0x49af8b
and dword [ebp - 0xb88], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x24]
add eax, dword [ebp - 0xb88]
cmp eax, dword [ebp - 0x34]
jg 0x49afac
mov dword [ebp - 0x13c0], 1
jmp 0x49afb3
and dword [ebp - 0x13c0], 0
cmp dword [ebp - 0x13c0], 0xa3ae4374
je 0x49afcb
mov dword [ebp - 0xb90], 1
jmp 0x49afd2
and dword [ebp - 0xb90], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x24]
cmp eax, dword [ebp - 0xb90]
jg 0x49aff0
mov dword [ebp - 0x1108], 1
jmp 0x49aff7
and dword [ebp - 0x1108], 0
mov eax, dword [ebp - 0x3e0]
cmp dword [ebp - 0x1108], eax
je 0x49b011
mov dword [ebp - 0x1ef0], 1
jmp 0x49b018
and dword [ebp - 0x1ef0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x24]
mov dword [ebp - 0x25e4], eax
mov eax, 0x40870e26
cmp eax, 1
jg 0x49b03e
mov dword [ebp - 0xb98], 1
jmp 0x49b045
and dword [ebp - 0xb98], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0xb98], eax
jl 0x49b05c
mov dword [ebp - 0x1ef8], 1
jmp 0x49b063
and dword [ebp - 0x1ef8], 0
mov eax, dword [ebp - 0x234]
mov dword [ebp - 0x25ec], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x24]
cmp dword [ebp - 0x234], eax
jne 0x49b08d
mov dword [ebp - 0x1520], 1
jmp 0x49b094
and dword [ebp - 0x1520], 0
mov eax, dword [ebp - 0x1520]
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x28c], 1
ja 0x49b0b5
mov dword [ebp - 0xba0], 1
jmp 0x49b0bc
and dword [ebp - 0xba0], 0
mov eax, dword [ebp - 0xba0]
sub eax, 5
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 0x6281
jge 0x49b0e3
mov dword [ebp - 0x1110], 1
jmp 0x49b0ea
and dword [ebp - 0x1110], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x1110], eax
jle 0x49b101
mov dword [ebp - 0xba8], 1
jmp 0x49b108
and dword [ebp - 0xba8], 0
mov eax, dword [ebp - 0xba8]
mov dword [ebp - 0x13c8], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x13c8]
mov dword [ebp + eax - 0x26e4], ecx
push 2
lea ecx, [ebp - 0x235c]
call fcn.00434993
mov dword [ebp - 0x5f8], 0
mov dword [ebp - 0x17e4], 0x96c7979b
mov dword [ebp - 0xbb0], 0x6411
mov dword [ebp - 0x1730], 0xac843c
cmp dword [ebp - 0xbb0], 0x6784
jle 0x49b26a
and dword [ebp - 0x6f0], 0
jmp 0x49b181
mov eax, dword [ebp - 0x6f0]
inc eax
mov dword [ebp - 0x6f0], eax
cmp dword [ebp - 0x6f0], 0x53ca
jge 0x49b26a
and dword [ebp - 0x5f0], 0
jmp 0x49b1a7
cmp dword [ebp - 0x5f0], 0x185b
jge 0x49b265
and dword [ebp - 0x3e8], 0
jmp 0x49b1cd
cmp dword [ebp - 0x3e8], 0x38dc
jge 0x49b260
jmp 0x49b174
mov dword [ebp - 4], 0x1a
cmp dword [ebp - 0xbb0], 0x6244
jge 0x49b289
push dword [ebp - 0x1730]
call fcn.004af787
pop ecx
jmp 0x49b2a5
or dword [ebp - 4], 0xffffffff
jmp 0x49b2af
push 0x4429
lea eax, [ebp - 0x25f4]
push eax
push 0x1647
push 0x3542
push 1
push 0x5191
push 0x7874
push 0
lea eax, [ebp - 0x235c]
push eax
push 0x2ef3
push 1
push 0x2a5
push 0x962
call fcn.00494d7c
add esp, 0x34
mov dword [ebp - 0x5f8], 0
jmp 0x49b30c
cmp dword [ebp - 0x5f8], 1
jg 0x49b373
mov dword [ebp - 0x25fc], 0xcce1e2c0
mov dword [ebp - 0x2604], 3
mov dword [ebp - 0x3f8], 0
jmp 0x49b342
lea ecx, [ebp - 0x235c]
call fcn.00434a65
mov dword [ebp - 0x770], 0
jmp 0x49b397
push 0
push 0x155e
push 0x945
call dword [0xada4b0]
mov dword [ebp - 4], 0x8e
cmp dword [ebp - 0x14fc], 0x30dc
jge 0x4abfe9
push dword [ebp - 0x17ac]
call fcn.004af787
pop ecx
jmp 0x4ac005
or dword [ebp - 4], 0xffffffff
jmp 0x4ac00f
jmp 0x4ac084
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x17c4], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x17d4], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x17cc], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x17bc], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x17b4], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x17dc], eax
push dword [ebp - 0x17b4]
push dword [ebp - 0x17bc]
push 0x4068
push dword [ebp - 0x17c4]
push dword [ebp - 0x17cc]
push 0
push 0x6899
push dword [ebp - 0x17d4]
push dword [ebp - 0x17dc]
push 0x209a
call fcn.00493958
add esp, 0x28
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret