Function at 0x47f906
Capabilities:
Contain obfuscated stackstrings
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x48c
mov dword [ebp - 0x19c], 0x7ba1
mov dword [ebp - 0x2dc], 0xac52d0
cmp dword [ebp - 0x19c], 0x7e57
jle 0x47f9c9
and dword [ebp - 0x174], 0
jmp 0x47f949
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 0x57e0
jge 0x47f9c9
and dword [ebp - 0x178], 0
jmp 0x47f96b
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 0x4b58
jge 0x47f9c4
mov eax, dword [ebp - 0x174]
or eax, dword [ebp - 0x178]
cdq
mov dword [ebp - 0x2a0], eax
mov dword [ebp - 0x29c], edx
push dword [ebp - 0x29c]
push dword [ebp - 0x2a0]
lea ecx, [ebp - 0x3e4]
call fcn.00402035
pop ecx
pop ecx
mov ecx, eax
call fcn.0042cb3e
push eax
call fcn.004f967e
pop ecx
lea ecx, [ebp - 0x3e4]
call fcn.004014ef
jmp 0x47f95e
jmp 0x47f93c
cmp dword [ebp + 0x10], 0
jbe 0x47f9eb
movzx eax, byte [ebp + 0x14]
test eax, eax
je 0x47f9eb
movzx eax, word [ebp + 0x10]
push eax
push dword [ebp + 8]
call fcn.0047ea47
pop ecx
pop ecx
jmp 0x48164f
cmp dword [ebp - 0x19c], 0x7a59
jge 0x47fa03
push dword [ebp - 0x2dc]
call fcn.004f967e
pop ecx
cmp dword [ebp + 0x10], 0
jne 0x4804d4
mov dword [ebp - 0x1e0], 0x5b81
mov dword [ebp - 0x2f8], 0xac5330
cmp dword [ebp - 0x1e0], 0x5ba9
jle 0x47faa5
and dword [ebp - 0x180], 0
jmp 0x47fa43
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 0x1da
jge 0x47faa5
and dword [ebp - 0x16c], 0
jmp 0x47fa65
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 0x69b0
jge 0x47faa3
mov eax, dword [ebp - 0x180]
imul eax, dword [ebp - 0x16c]
cdq
mov dword [ebp - 0x300], eax
mov dword [ebp - 0x2fc], edx
push dword [ebp - 0x2fc]
push dword [ebp - 0x300]
mov ecx, 0xad3d78
call fcn.0042cb49
jmp 0x47fa58
jmp 0x47fa36
mov edx, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
call fcn.00448907
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x1e0], 0x59d0
jge 0x47fad2
mov edx, dword [ebp - 0x2f8]
mov ecx, 0xad3d78
call fcn.0042f475
mov dword [ebp - 0x1ec], 0x6717
mov dword [ebp - 0x304], 0xac5378
cmp dword [ebp - 0x1ec], 0x6a5b
jle 0x47fb69
and dword [ebp - 0x168], 0
jmp 0x47fb08
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 0x4373
jge 0x47fb69
and dword [ebp - 0x8c], 0
jmp 0x47fb2a
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0x8bc
jge 0x47fb67
mov eax, dword [ebp - 0x168]
and eax, dword [ebp - 0x8c]
cdq
mov dword [ebp - 0x2ac], eax
mov dword [ebp - 0x2a8], edx
push dword [ebp - 0x2a8]
push dword [ebp - 0x2ac]
mov ecx, 0xad3d78
call fcn.0042cb49
jmp 0x47fb1d
jmp 0x47fafb
cmp dword [ebp - 0x1ec], 0x6467
jge 0x47fb85
mov edx, dword [ebp - 0x304]
mov ecx, 0xad3d78
call fcn.0042f475
mov dword [ebp - 0x194], 0x3231
mov dword [ebp - 0x30c], 0xac53c0
cmp dword [ebp - 0x194], 0x335e
jle 0x47fc1c
and dword [ebp - 0x10c], 0
jmp 0x47fbbb
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0x23f1
jge 0x47fc1c
and dword [ebp - 0x94], 0
jmp 0x47fbdd
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0x3d78
jge 0x47fc1a
mov eax, dword [ebp - 0x10c]
xor eax, dword [ebp - 0x94]
cdq
mov dword [ebp - 0x2e4], eax
mov dword [ebp - 0x2e0], edx
push dword [ebp - 0x2e0]
push dword [ebp - 0x2e4]
mov ecx, 0xad3d78
call fcn.0042cb49
jmp 0x47fbd0
jmp 0x47fbae
cmp dword [ebp - 0x194], 0x30a9
jge 0x47fc38
mov edx, dword [ebp - 0x30c]
mov ecx, 0xad3d78
call fcn.0042f475
cmp dword [0x1efb108], 0
jne 0x4804a2
mov dword [ebp - 0x318], 0xee66
lea eax, [ebp - 0x318]
push eax
call fcn.0047e7dd
pop ecx
mov dword [ebp - 0x1e4], eax
mov byte [ebp - 0x60], 1
mov byte [ebp - 0x5f], 0x70
mov byte [ebp - 0x5e], 0xb
mov byte [ebp - 0x5d], 0x1d
mov byte [ebp - 0x5c], 2
mov byte [ebp - 0x5b], 0xe
mov byte [ebp - 0x5a], 0x22
mov byte [ebp - 0x59], 0xc
mov byte [ebp - 0x58], 0x2f
mov byte [ebp - 0x57], 0xa
mov byte [ebp - 0x56], 0x12
mov byte [ebp - 0x55], 9
mov byte [ebp - 0x54], 0x2b
mov byte [ebp - 0x53], 6
mov byte [ebp - 0x52], 0x1d
mov byte [ebp - 0x51], 3
mov byte [ebp - 0x50], 0x25
mov byte [ebp - 0x4f], 2
mov byte [ebp - 0x4e], 0x22
mov byte [ebp - 0x4d], 4
mov byte [ebp - 0x4c], 0x11
mov byte [ebp - 0x4b], 0
mov byte [ebp - 0x4a], 0x22
mov byte [ebp - 0x49], 8
mov byte [ebp - 0x48], 0x28
mov byte [ebp - 0x47], 5
mov byte [ebp - 0x46], 0x1d
mov byte [ebp - 0x45], 7
mov byte [ebp - 0x44], 0x1b
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x60]
or eax, 0x15
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x60]
and ecx, 0x15
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x60]
mov byte [ebp + ecx - 0x200], al
mov dword [ebp - 4], 2
and dword [ebp - 0x40], 0
jmp 0x47fd1b
mov eax, dword [ebp - 4]
inc eax
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0x1d
jae 0x47fef9
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x60]
lea eax, [eax + eax + 2]
cmp dword [ebp - 4], eax
jne 0x47fe86
mov eax, dword [ebp - 4]
movzx eax, byte [ebp + eax - 0x60]
inc eax
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x1d8], 0x6c14
mov dword [ebp - 0x2d8], 0xac5410
cmp dword [ebp - 0x1d8], 0x6c9c
jle 0x47fe53
and dword [ebp - 0x14c], 0
jmp 0x47fd83
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 0x431c
jge 0x47fe4b
and dword [ebp - 0x9c], 0
jmp 0x47fda9
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0x69b
jge 0x47fe46
and dword [ebp - 0x114], 0
jmp 0x47fdcf
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0x2e4a
jge 0x47fe41
and dword [ebp - 0xa4], 0
jmp 0x47fdf1
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0x186d
jge 0x47fe3f
mov eax, dword [ebp - 0x14c]
mov ecx, dword [ebp - 0x9c]
sar eax, cl
mov ecx, dword [ebp - 0x114]
imul ecx, dword [ebp - 0xa4]
or eax, ecx
cdq
mov dword [ebp - 0x2b8], eax
mov dword [ebp - 0x2b4], edx
push dword [ebp - 0x2b4]
push dword [ebp - 0x2b8]
mov ecx, 0xad3d78
call fcn.0042cb49
jmp 0x47fde4
jmp 0x47fdc2
jmp 0x47fd9c
jmp 0x47fd76
push 0
call dword [0x1efd264]
mov eax, dword [ebp - 4]
movzx eax, byte [ebp + eax - 0x60]
mov ecx, dword [ebp - 4]
lea eax, [ecx + eax - 1]
mov dword [ebp - 4], eax
cmp dword [ebp - 0x1d8], 0x6b95
jge 0x47fe81
mov edx, dword [ebp - 0x2d8]
mov ecx, 0xad3d78
call fcn.0042f475
jmp 0x47fd13
mov eax, dword [ebp - 4]
movzx eax, byte [ebp + eax - 0x5f]
mov ecx, dword [ebp - 4]
sub ecx, dword [ebp - 0x40]
movzx ecx, byte [ebp + ecx - 0x62]
movsx ecx, byte [ebp + ecx - 0x200]
add eax, ecx
mov ecx, dword [ebp - 4]
movzx ecx, byte [ebp + ecx - 0x5f]
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 0x40]
movzx edx, byte [ebp + edx - 0x62]
movsx edx, byte [ebp + edx - 0x200]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 4]
movzx ecx, byte [ebp + ecx - 0x5f]
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 0x40]
movzx edx, byte [ebp + edx - 0x62]
movsx edx, byte [ebp + edx - 0x200]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 4]
movzx ecx, byte [ebp + ecx - 0x60]
mov byte [ebp + ecx - 0x200], al
and dword [ebp - 0x40], 0
jmp 0x47fd13
xor eax, eax
inc eax
imul eax, eax, 0xd
mov byte [ebp + eax - 0x200], 0
mov dword [ebp - 0x1f0], 0x315a
mov dword [ebp - 0x308], 0xac5470
cmp dword [ebp - 0x1f0], 0x34bb
jle 0x47fff2
and dword [ebp - 0x170], 0
jmp 0x47ff41
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 0x27cb
jge 0x47fff2
and dword [ebp - 0xac], 0
jmp 0x47ff67
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0x4ef0
jge 0x47ffed
and dword [ebp - 0x11c], 0
jmp 0x47ff89
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0x2e56
jge 0x47ffe8
mov eax, dword [ebp - 0x170]
add eax, dword [ebp - 0xac]
and eax, dword [ebp - 0x11c]
cdq
mov dword [ebp - 0x314], eax
mov dword [ebp - 0x310], edx
push dword [ebp - 0x310]
push dword [ebp - 0x314]
lea ecx, [ebp - 0x45c]
call fcn.00402035
pop ecx
pop ecx
mov ecx, eax
call fcn.0042cb3e
push eax
call fcn.004f967e
pop ecx
lea ecx, [ebp - 0x45c]
call fcn.004014ef
jmp 0x47ff7c
jmp 0x47ff5a
jmp 0x47ff34
lea eax, [ebp - 0x200]
push eax
lea ecx, [ebp - 0x48c]
call fcn.00489ef1
mov edx, dword [ebp - 0x1e4]
mov ecx, eax
call fcn.00448907
mov dword [0x1efb108], eax
lea ecx, [ebp - 0x48c]
call fcn.0042cdfa
cmp dword [ebp - 0x1f0], 0x30d9
jge 0x480039
push dword [ebp - 0x308]
call fcn.004f967e
pop ecx
mov dword [ebp - 0x18c], 0x6420
mov dword [ebp - 0x228], 0xac54b8
cmp dword [ebp - 0x18c], 0x64fd
jle 0x4800d0
and dword [ebp - 0xb4], 0
jmp 0x48006f
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0x3743
jge 0x4800d0
and dword [ebp - 0x154], 0
jmp 0x480091
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 0x3b9a
jge 0x4800ce
mov eax, dword [ebp - 0xb4]
sub eax, dword [ebp - 0x154]
cdq
mov dword [ebp - 0x2c4], eax
mov dword [ebp - 0x2c0], edx
push dword [ebp - 0x2c0]
push dword [ebp - 0x2c4]
mov ecx, 0xad3d78
call fcn.0042cb49
jmp 0x480084
jmp 0x480062
and dword [ebp - 0xbc], 0
jmp 0x4800e6
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0xe
jae 0x4800ff
mov eax, dword [ebp - 0xbc]
mov byte [ebp + eax - 0x200], 0
jmp 0x4800d9
cmp dword [ebp - 0x18c], 0x637c
jge 0x48011b
mov edx, dword [ebp - 0x228]
mov ecx, 0xad3d78
call fcn.0042f475
mov dword [ebp - 0x1a4], 0x4cf8
mov dword [ebp - 0x234], 0xac54e8
cmp dword [ebp - 0x1a4], 0x4ec8
jle 0x4801c4
and dword [ebp - 0x124], 0
jmp 0x480155
mov eax, dword [ebp - 0x124]
inc eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0x15b6
jge 0x4801b6
and dword [ebp - 0xc4], 0
jmp 0x480177
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0x6351
jge 0x4801b4
mov eax, dword [ebp - 0x124]
and eax, dword [ebp - 0xc4]
cdq
mov dword [ebp - 0x2f4], eax
mov dword [ebp - 0x2f0], edx
push dword [ebp - 0x2f0]
push dword [ebp - 0x2f4]
mov ecx, 0xad3d78
call fcn.0042cb49
jmp 0x48016a
jmp 0x480148
push 0
push 0
push 0
push 0
call dword [0x1efd424]
mov byte [ebp - 0x7c], 6
mov byte [ebp - 0x7b], 0xde
mov byte [ebp - 0x7a], 0xb
mov byte [ebp - 0x79], 0x23
mov byte [ebp - 0x78], 0xa
mov byte [ebp - 0x77], 0x16
mov byte [ebp - 0x76], 7
mov byte [ebp - 0x75], 0x17
mov byte [ebp - 0x74], 8
mov byte [ebp - 0x73], 0x1d
mov byte [ebp - 0x72], 1
mov byte [ebp - 0x71], 0x1d
mov byte [ebp - 0x70], 9
mov byte [ebp - 0x6f], 0x11
mov byte [ebp - 0x6e], 3
mov byte [ebp - 0x6d], 2
mov byte [ebp - 0x6c], 4
mov byte [ebp - 0x6b], 0x15
mov byte [ebp - 0x6a], 0xd
mov byte [ebp - 0x69], 0x23
mov byte [ebp - 0x68], 2
mov byte [ebp - 0x67], 0x32
mov byte [ebp - 0x66], 0xc
mov byte [ebp - 0x65], 0x16
mov byte [ebp - 0x64], 5
mov byte [ebp - 0x63], 0x16
mov byte [ebp - 0x62], 0
mov byte [ebp - 0x61], 0x26
mov dword [ebp - 0x1cc], 0x55a2
mov dword [ebp - 0x294], 0xac5530
cmp dword [ebp - 0x1cc], 0x5740
jle 0x480333
and dword [ebp - 0xd4], 0
jmp 0x48026e
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0x2e92
jge 0x480333
and dword [ebp - 0x12c], 0
jmp 0x480294
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0x656e
jge 0x48032e
and dword [ebp - 0x17c], 0
jmp 0x4802ba
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 0x373
jge 0x480329
and dword [ebp - 0xcc], 0
jmp 0x4802dc
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0x444a
jge 0x480327
mov eax, dword [ebp - 0x17c]
mov ecx, dword [ebp - 0xcc]
sar eax, cl
and eax, dword [ebp - 0x12c]
or eax, dword [ebp - 0xd4]
cdq
mov dword [ebp - 0x2d0], eax
mov dword [ebp - 0x2cc], edx
push dword [ebp - 0x2cc]
push dword [ebp - 0x2d0]
mov ecx, 0xad3d78
call fcn.0042cb49
jmp 0x4802cf
jmp 0x4802ad
jmp 0x480287
jmp 0x480261
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x7c]
or eax, 0x8e
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x7c]
and ecx, 0x8e
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x7c]
mov byte [ebp + ecx - 0x210], al
cmp dword [ebp - 0x1cc], 0x5222
jge 0x480384
mov edx, dword [ebp - 0x294]
mov ecx, 0xad3d78
call fcn.0042f475
mov dword [ebp - 0xc], 2
and dword [ebp - 0x184], 0
jmp 0x48039c
mov eax, dword [ebp - 0xc]
inc eax
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0x1c
jae 0x48041a
mov eax, dword [ebp - 0xc]
movzx eax, byte [ebp + eax - 0x7b]
mov ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 0x184]
movzx ecx, byte [ebp + ecx - 0x7e]
movsx ecx, byte [ebp + ecx - 0x210]
add eax, ecx
mov ecx, dword [ebp - 0xc]
movzx ecx, byte [ebp + ecx - 0x7b]
mov edx, dword [ebp - 0xc]
sub edx, dword [ebp - 0x184]
movzx edx, byte [ebp + edx - 0x7e]
movsx edx, byte [ebp + edx - 0x210]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0xc]
movzx ecx, byte [ebp + ecx - 0x7b]
mov edx, dword [ebp - 0xc]
sub edx, dword [ebp - 0x184]
movzx edx, byte [ebp + edx - 0x7e]
movsx edx, byte [ebp + edx - 0x210]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0xc]
movzx ecx, byte [ebp + ecx - 0x7c]
mov byte [ebp + ecx - 0x210], al
jmp 0x480394
xor eax, eax
inc eax
imul eax, eax, 0xe
mov byte [ebp + eax - 0x210], 0
cmp dword [ebp - 0x1a4], 0x4970
jge 0x480444
mov edx, dword [ebp - 0x234]
mov ecx, 0xad3d78
call fcn.0042f475
lea eax, [ebp - 0x210]
push eax
lea ecx, [ebp - 0x474]
call fcn.00489ef1
mov edx, dword [ebp - 0x1e4]
mov ecx, eax
call fcn.00448907
mov dword [0x1efb2b0], eax
lea ecx, [ebp - 0x474]
call fcn.0042cdfa
and dword [ebp - 0x15c], 0
jmp 0x480489
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 0xf
jae 0x4804a2
mov eax, dword [ebp - 0x15c]
mov byte [ebp + eax - 0x210], 0
jmp 0x48047c
mov eax, dword [0x1efb108]
cmp eax, dword [ebp - 0x90]
je 0x4804bc
mov eax, dword [0x1efb2b0]
cmp eax, dword [ebp - 0x90]
jne 0x4804d4
mov ecx, dword [ebp + 0xc]
call fcn.0042cb3e
push eax
push dword [ebp + 8]
call fcn.0047ea47
pop ecx
pop ecx
jmp 0x48164f
mov eax, dword [ebp + 8]
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0x1d0], 0x2682
mov dword [ebp - 0x288], 0xac5590
cmp dword [ebp - 0x1d0], 0x26c7
jle 0x480599
and dword [ebp - 0xdc], 0
jmp 0x480517
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0x6594
jge 0x480599
and dword [ebp - 0x134], 0
jmp 0x480539
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0x7bbd
jge 0x480594
mov eax, dword [ebp - 0xdc]
mov ecx, dword [ebp - 0x134]
shl eax, cl
cdq
mov dword [ebp - 0x21c], eax
mov dword [ebp - 0x218], edx
push dword [ebp - 0x218]
push dword [ebp - 0x21c]
lea ecx, [ebp - 0x39c]
call fcn.00402035
pop ecx
pop ecx
mov ecx, eax
call fcn.0042cb3e
push eax
call fcn.004f967e
pop ecx
lea ecx, [ebp - 0x39c]
call fcn.004014ef
jmp 0x48052c
jmp 0x48050a
cmp dword [ebp - 0xe4], 0
je 0x481635
mov eax, dword [ebp - 0xe4]
movzx eax, word [eax]
cmp eax, 0x5a4d
jne 0x481635
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0xe4]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0x3c], ecx
mov eax, dword [ebp - 0x3c]
cmp dword [eax], 0x4550
jne 0x481635
mov eax, dword [ebp - 0x3c]
cmp dword [eax + 0x74], 0
jbe 0x481635
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3c]
cmp dword [ecx + eax + 0x78], 0
je 0x481635
mov eax, dword [ebp + 8]
mov dword [ebp - 0x38], eax
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x38]
add edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x18], edx
mov eax, 0xffff
mov word [ebp - 0x10], ax
or dword [ebp - 0x34], 0xffffffff
cmp dword [ebp + 0x10], 0
jbe 0x480640
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp + 0x10]
cmp ecx, dword [eax + 0x14]
ja 0x48063b
mov eax, dword [ebp + 0x10]
dec eax
mov word [ebp - 0x10], ax
jmp 0x480af4
mov eax, dword [0x1efb2ac]
and eax, 1
jne 0x48066c
mov eax, dword [0x1efb2ac]
or eax, 1
mov dword [0x1efb2ac], eax
mov ecx, 0x1efb288
call fcn.0042d024
push 0x514630
call fcn.004f932f
pop ecx
mov dword [ebp - 0x1d4], 0x3b6c
mov dword [ebp - 0x298], 0xac55b8
cmp dword [ebp - 0x1d4], 0x3ce1
jle 0x48071a
and dword [ebp - 0x80], 0
jmp 0x48069d
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0x60ee
jge 0x48071a
and dword [ebp - 0xec], 0
jmp 0x4806bc
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0x7519
jge 0x480715
mov eax, dword [ebp - 0x80]
cdq
idiv dword [ebp - 0xec]
mov eax, edx
cdq
mov dword [ebp - 0x224], eax
mov dword [ebp - 0x220], edx
push dword [ebp - 0x220]
push dword [ebp - 0x224]
lea ecx, [ebp - 0x444]
call fcn.00402035
pop ecx
pop ecx
mov ecx, eax
call fcn.0042cb3e
push eax
call fcn.004f967e
pop ecx
lea ecx, [ebp - 0x444]
call fcn.004014ef
jmp 0x4806af
jmp 0x480696
movzx eax, byte [0x1efb115]
test eax, eax
je 0x480783
mov ecx, 0x1efb288
call fcn.00489f7d
movzx eax, al
test eax, eax
jne 0x480783
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x1ac]
push eax
mov ecx, 0x1efb288
call fcn.0042cffc
lea eax, [ebp - 0x320]
push eax
mov ecx, 0x1efb288
call fcn.0042cfee
push eax
lea ecx, [ebp - 0x1ac]
call fcn.0042d011
movzx eax, al
test eax, eax
je 0x480783
lea ecx, [ebp - 0x1ac]
call fcn.00489f86
mov eax, dword [eax + 4]
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x1d4], 0x3b39
jge 0x48079b
push dword [ebp - 0x298]
call fcn.004f967e
pop ecx
cmp dword [ebp - 0x34], 0xffffffff
jne 0x480af4
mov ecx, 0x1efb288
call fcn.00442de6
mov ecx, dword [ebp - 0x18]
add eax, dword [ecx + 0x18]
push eax
mov ecx, 0x1efb288
call fcn.00489fca
and dword [ebp - 0x2c], 0
jmp 0x4807cd
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x2c]
cmp ecx, dword [eax + 0x18]
jae 0x480af4
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x38]
add ecx, dword [eax + 0x20]
mov eax, dword [ebp - 0x2c]
lea eax, [ecx + eax*4]
mov dword [ebp - 0x1b4], eax
mov dword [ebp - 0x1dc], 0x1051
mov dword [ebp - 0x2a4], 0xac5608
cmp dword [ebp - 0x1dc], 0x13cb
jle 0x48091c
and dword [ebp - 0xfc], 0
jmp 0x48082b
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0x2b9e
jge 0x480912
and dword [ebp - 0x13c], 0
jmp 0x480851
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0x6d34
jge 0x48090d
and dword [ebp - 0xf4], 0
jmp 0x480877
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0x4e50
jge 0x480908
and dword [ebp - 0x164], 0
jmp 0x48089d
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 0x6054
jge 0x480903
mov eax, dword [ebp - 0x13c]
imul eax, dword [ebp - 0xf4]
add eax, dword [ebp - 0x164]
and eax, dword [ebp - 0xfc]
cdq
mov dword [ebp - 0x230], eax
mov dword [ebp - 0x22c], edx
push dword [ebp - 0x22c]
push dword [ebp - 0x230]
lea ecx, [ebp - 0x414]
call fcn.00402035
pop ecx
pop ecx
mov ecx, eax
call fcn.0042cb3e
push eax
call fcn.004f967e
pop ecx
lea ecx, [ebp - 0x414]
call fcn.004014ef
jmp 0x480890
jmp 0x48086a
jmp 0x480844
jmp 0x48081e
push 0
push 0
call dword [0x1efd130]
cmp dword [ebp - 0x1b4], 0
je 0x480ad7
mov eax, dword [ebp - 0x1b4]
mov ecx, dword [ebp - 0x38]
add ecx, dword [eax]
push ecx
lea ecx, [ebp - 0x36c]
call fcn.00489ef1
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x36c]
call fcn.00448907
mov dword [ebp - 0x1bc], eax
mov dword [ebp - 0x1e8], 0x4037
mov dword [ebp - 0x240], 0xac5670
cmp dword [ebp - 0x1e8], 0x4072
jle 0x480a5d
and dword [ebp - 0x144], 0
jmp 0x48098e
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 0x3a12
jge 0x480a55
and dword [ebp - 0x104], 0
jmp 0x4809b4
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0x26a9
jge 0x480a50
and dword [ebp - 0x84], 0
jmp 0x4809da
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0x1c6
jge 0x480a4b
and dword [ebp - 0x88], 0
jmp 0x4809fc
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0x7bb5
jge 0x480a49
mov eax, dword [ebp - 0x144]
or eax, dword [ebp - 0x104]
mov edx, dword [ebp - 0x84]
mov ecx, dword [ebp - 0x88]
shl edx, cl
or eax, edx
cdq
mov dword [ebp - 0x23c], eax
mov dword [ebp - 0x238], edx
push dword [ebp - 0x238]
push dword [ebp - 0x23c]
mov ecx, 0xad3d78
call fcn.0042cb49
jmp 0x4809ef
jmp 0x4809cd
jmp 0x4809a7
jmp 0x480981
push 0
call dword [0x1efd36c]
movzx eax, byte [0x1efb115]
test eax, eax
je 0x480a79
mov ecx, 0x1efb288
call fcn.00489f7d
movzx eax, al
test eax, eax
jne 0x480a96
lea eax, [ebp - 0x1bc]
push eax
mov ecx, 0x1efb288
call fcn.00489f8c
mov ecx, dword [ebp - 0x2c]
mov dword [eax], ecx
mov byte [0x1efb115], 1
cmp dword [ebp - 0x1e8], 0x3db1
jge 0x480ab2
mov edx, dword [ebp - 0x240]
mov ecx, 0xad3d78
call fcn.0042f475
cmp dword [ebp - 0x34], 0xffffffff
jne 0x480acc
mov eax, dword [ebp - 0x1bc]
cmp eax, dword [ebp - 0x90]
jne 0x480acc
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x34], eax
lea ecx, [ebp - 0x36c]
call fcn.0042cdfa
cmp dword [ebp - 0x1dc], 0xd27
jge 0x480aef
push dword [ebp - 0x2a4]
call fcn.004f967e
pop ecx
jmp 0x4807c6
cmp dword [ebp + 0x10], 0
jne 0x480b14
cmp dword [ebp - 0x34], 0xffffffff
je 0x480b14
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x38]
add ecx, dword [eax + 0x24]
mov eax, dword [ebp - 0x34]
mov ax, word [ecx + eax*2]
mov word [ebp - 0x10], ax
mov dword [ebp - 0x1c8], 0x76d9
mov dword [ebp - 0x214], 0xac56b8
cmp dword [ebp - 0x1c8], 0x7971
jle 0x480be2
and dword [ebp - 0xa8], 0
jmp 0x480b4e
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0x1e20
jge 0x480be2
and dword [ebp - 0x98], 0
jmp 0x480b74
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0x7d9b
jge 0x480bdd
and dword [ebp - 0xa0], 0
jmp 0x480b96
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0x5be5
jge 0x480bdb
mov ecx, dword [ebp - 0x98]
add ecx, dword [ebp - 0xa0]
mov eax, dword [ebp - 0xa8]
sar eax, cl
cdq
mov dword [ebp - 0x248], eax
mov dword [ebp - 0x244], edx
push dword [ebp - 0x244]
push dword [ebp - 0x248]
mov ecx, 0xad3d78
call fcn.0042cb49
jmp 0x480b89
jmp 0x480b67
jmp 0x480b41
movzx eax, word [ebp - 0x10]
cmp eax, 0xffff
je 0x481619
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x38]
add ecx, dword [eax + 0x1c]
movzx eax, word [ebp - 0x10]
lea eax, [ecx + eax*4]
mov dword [ebp - 0x24c], eax
mov eax, dword [ebp - 0x24c]
mov ecx, dword [ebp - 0x38]
add ecx, dword [eax]
mov dword [ebp - 0x14], ecx
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x18]
jbe 0x4814f9
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x18]
add edx, dword [ecx + eax + 0x7c]
cmp dword [ebp - 0x14], edx
jae 0x4814f9
mov dword [ebp - 0x1c4], 0xa85
mov dword [ebp - 0x2b0], 0xac5720
cmp dword [ebp - 0x1c4], 0xd8b
jle 0x480ce2
and dword [ebp - 0xb0], 0
jmp 0x480c74
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0x21d9
jge 0x480cd8
and dword [ebp - 0xb8], 0
jmp 0x480c96
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0x7cc9
jge 0x480cd6
mov eax, dword [ebp - 0xb0]
cdq
idiv dword [ebp - 0xb8]
mov eax, edx
cdq
mov dword [ebp - 0x254], eax
mov dword [ebp - 0x250], edx
push dword [ebp - 0x250]
push dword [ebp - 0x254]
mov ecx, 0xad3d78
call fcn.0042cb49
jmp 0x480c89
jmp 0x480c67
push 0
push 0
call dword [0x1efd3a8]
mov eax, dword [0x1efb2ac]
and eax, 2
jne 0x480d09
mov eax, dword [0x1efb2ac]
or eax, 2
mov dword [0x1efb2ac], eax
push 0x10a6e
call fcn.0040de4f
pop ecx
mov byte [0x1efb2a8], al
cmp dword [ebp - 0x1c4], 0x6af
jge 0x480d25
mov edx, dword [ebp - 0x2b0]
mov ecx, 0xad3d78
call fcn.0042f475
mov byte [ebp - 0x28], 0
mov byte [ebp - 0x27], 0xd5
mov byte [ebp - 0x26], 4
mov byte [ebp - 0x25], 0x21
mov byte [ebp - 0x24], 0x6e
mov byte [ebp - 0x23], 0x71
mov byte [ebp - 0x22], 0x1b
mov byte [ebp - 0x21], 2
mov byte [ebp - 0x20], 8
mov byte [ebp - 0x1f], 1
mov byte [ebp - 0x1e], 0
mov dword [ebp - 0x190], 0x7b18
mov dword [ebp - 0x258], 0xac5770
cmp dword [ebp - 0x190], 0x7efc
jle 0x480e71
and dword [ebp - 0xd0], 0
jmp 0x480d8b
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0x2269
jge 0x480e71
and dword [ebp - 0xc0], 0
jmp 0x480db1
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0x18ce
jge 0x480e6c
and dword [ebp - 0xc8], 0
jmp 0x480dd7
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0x2592
jge 0x480e67
and dword [ebp - 0xd8], 0
jmp 0x480dfd
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0x2e5d
jge 0x480e62
mov eax, dword [ebp - 0xc0]
sub eax, dword [ebp - 0xc8]
and eax, dword [ebp - 0xd0]
xor eax, dword [ebp - 0xd8]
cdq
mov dword [ebp - 0x260], eax
mov dword [ebp - 0x25c], edx
push dword [ebp - 0x25c]
push dword [ebp - 0x260]
lea ecx, [ebp - 0x3b4]
call fcn.00402035
pop ecx
pop ecx
mov ecx, eax
call fcn.0042cb3e
push eax
call fcn.004f967e
pop ecx
lea ecx, [ebp - 0x3b4]
call fcn.004014ef
jmp 0x480df0
jmp 0x480dca
jmp 0x480da4
jmp 0x480d7e
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x28]
or eax, 0xb1
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x28]
and ecx, 0xb1
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x28]
mov byte [ebp + ecx - 0x30], al
cmp dword [ebp - 0x190], 0x773a
jge 0x480ebb
push dword [ebp - 0x258]
call fcn.004f967e
pop ecx
mov dword [ebp - 8], 2
and dword [ebp - 0x128], 0
jmp 0x480ed3
mov eax, dword [ebp - 8]
inc eax
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0xb
jae 0x48125f
mov dword [ebp - 0x1a0], 0x7216
mov dword [ebp - 0x264], 0xac57c8
cmp dword [ebp - 0x1a0], 0x74cd
jle 0x480fdd
and dword [ebp - 0xe0], 0
jmp 0x480f17
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0x5cf8
jge 0x480fdd
and dword [ebp - 0xe8], 0
jmp 0x480f3d
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0x6746
jge 0x480fd8
and dword [ebp - 0xf0], 0
jmp 0x480f63
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0x3ad0
jge 0x480fd3
and dword [ebp - 0xf8], 0
jmp 0x480f85
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0x3b84
jge 0x480fd1
mov eax, dword [ebp - 0xe0]
cdq
idiv dword [ebp - 0xe8]
mov eax, dword [ebp - 0xf0]
and eax, dword [ebp - 0xf8]
or eax, edx
cdq
mov dword [ebp - 0x26c], eax
mov dword [ebp - 0x268], edx
push dword [ebp - 0x268]
push dword [ebp - 0x26c]
mov ecx, 0xad3d78
call fcn.0042cb49
jmp 0x480f78
jmp 0x480f56
jmp 0x480f30
jmp 0x480f0a
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x28]
lea eax, [eax + eax + 2]
cmp dword [ebp - 8], eax
jne 0x4810ea
mov dword [ebp - 0x198], 0x389
mov dword [ebp - 0x2bc], 0xac57e8
cmp dword [ebp - 0x198], 0x3b0
jle 0x4810af
and dword [ebp - 0x100], 0
jmp 0x48102f
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0x7ed
jge 0x4810af
and dword [ebp - 0x108], 0
jmp 0x481051
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0x7d7b
jge 0x4810aa
mov eax, dword [ebp - 0x100]
xor eax, dword [ebp - 0x108]
cdq
mov dword [ebp - 0x278], eax
mov dword [ebp - 0x274], edx
push dword [ebp - 0x274]
push dword [ebp - 0x278]
lea ecx, [ebp - 0x3cc]
call fcn.00402035
pop ecx
pop ecx
mov ecx, eax
call fcn.0042cb3e
push eax
call fcn.004f967e
pop ecx
lea ecx, [ebp - 0x3cc]
call fcn.004014ef
jmp 0x481044
jmp 0x481022
mov eax, dword [ebp - 8]
movzx eax, byte [ebp + eax - 0x28]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x198], 0x64
jge 0x4810d3
push dword [ebp - 0x2bc]
call fcn.004f967e
pop ecx
mov eax, dword [ebp - 8]
movzx eax, byte [ebp + eax - 0x28]
mov ecx, dword [ebp - 8]
lea eax, [ecx + eax - 1]
mov dword [ebp - 8], eax
jmp 0x480ecb
cmp dword [ebp - 0x1a0], 0x701f
jge 0x481106
mov edx, dword [ebp - 0x264]
mov ecx, 0xad3d78
call fcn.0042f475
mov dword [ebp - 0x1a8], 0x301d
mov dword [ebp - 0x2c8], 0xac5830
cmp dword [ebp - 0x1a8], 0x3055
jle 0x4811f3
and dword [ebp - 0x120], 0
jmp 0x481140
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0x293a
jge 0x4811f3
and dword [ebp - 0x110], 0
jmp 0x481166
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0x70ea
jge 0x4811ee
and dword [ebp - 0x118], 0
jmp 0x481188
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0x5100
jge 0x4811e9
mov ecx, dword [ebp - 0x110]
sub ecx, dword [ebp - 0x118]
mov eax, dword [ebp - 0x120]
shl eax, cl
cdq
mov dword [ebp - 0x284], eax
mov dword [ebp - 0x280], edx
push dword [ebp - 0x280]
push dword [ebp - 0x284]
lea ecx, [ebp - 0x3fc]
call fcn.00402035
pop ecx
pop ecx
mov ecx, eax
call fcn.0042cb3e
push eax
call fcn.004f967e
pop ecx
lea ecx, [ebp - 0x3fc]
call fcn.004014ef
jmp 0x48117b
jmp 0x481159
jmp 0x481133
mov eax, dword [ebp - 8]
movzx eax, byte [ebp + eax - 0x27]
mov ecx, dword [ebp - 8]
sub ecx, dword [ebp - 0x128]
movzx ecx, byte [ebp + ecx - 0x2a]
movsx ecx, byte [ebp + ecx - 0x30]
or eax, ecx
mov ecx, dword [ebp - 8]
movzx ecx, byte [ebp + ecx - 0x27]
mov edx, dword [ebp - 8]
sub edx, dword [ebp - 0x128]
movzx edx, byte [ebp + edx - 0x2a]
movsx edx, byte [ebp + edx - 0x30]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 8]
movzx ecx, byte [ebp + ecx - 0x28]
mov byte [ebp + ecx - 0x30], al
cmp dword [ebp - 0x1a8], 0x2c8f
jge 0x481253
push dword [ebp - 0x2c8]
call fcn.004f967e
pop ecx
and dword [ebp - 0x128], 0
jmp 0x480ecb
xor eax, eax
inc eax
imul eax, eax, 3
mov byte [ebp + eax - 0x30], 0
mov eax, dword [0x1efb2ac]
and eax, 4
jne 0x48129a
mov eax, dword [0x1efb2ac]
or eax, 4
mov dword [0x1efb2ac], eax
lea eax, [ebp - 0x30]
push eax
mov ecx, 0x1efb200
call fcn.00489ef1
push 0x514621
call fcn.004f932f
pop ecx
and dword [ebp - 0x140], 0
jmp 0x4812b0
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 4
jae 0x4813ad
mov dword [ebp - 0x1b0], 0x1cc0
mov dword [ebp - 0x270], 0xac5878
cmp dword [ebp - 0x1b0], 0x1f33
jle 0x481385
and dword [ebp - 0x130], 0
jmp 0x4812f7
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0x5f1b
jge 0x481377
and dword [ebp - 0x138], 0
jmp 0x481319
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0x4b05
jge 0x481372
mov eax, dword [ebp - 0x130]
and eax, dword [ebp - 0x138]
cdq
mov dword [ebp - 0x290], eax
mov dword [ebp - 0x28c], edx
push dword [ebp - 0x28c]
push dword [ebp - 0x290]
lea ecx, [ebp - 0x42c]
call fcn.00402035
pop ecx
pop ecx
mov ecx, eax
call fcn.0042cb3e
push eax
call fcn.004f967e
pop ecx
lea ecx, [ebp - 0x42c]
call fcn.004014ef
jmp 0x48130c
jmp 0x4812ea
push 0
push 0
push 0
push 0
call dword [0x1efd374]
mov eax, dword [ebp - 0x140]
mov byte [ebp + eax - 0x30], 0
cmp dword [ebp - 0x1b0], 0x1b90
jge 0x4813a8
push dword [ebp - 0x270]
call fcn.004f967e
pop ecx
jmp 0x4812a3
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
movsx eax, byte [eax]
movsx ecx, byte [0x1efb2a8]
cmp eax, ecx
je 0x4813cd
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
jmp 0x4813b3
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
push dword [ebp - 0x1c]
push dword [ebp - 0x14]
lea ecx, [ebp - 0x33c]
call fcn.0048a31d
push 0x1efb200
lea ecx, [ebp - 0x33c]
call fcn.00489f20
lea eax, [ebp - 0x31c]
push eax
lea ecx, [ebp - 0x33c]
call fcn.0042d66c
push dword [eax]
lea eax, [ebp - 0x324]
push eax
lea ecx, [ebp - 0x33c]
call fcn.0042d658
push dword [eax]
lea ecx, [ebp - 0x384]
call fcn.0048a346
lea eax, [ebp - 0x384]
push eax
call fcn.0044a525
pop ecx
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 0
je 0x4814b0
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x354]
call fcn.00489ef1
lea edx, [ebp - 0x2d4]
lea ecx, [ebp - 0x354]
call fcn.00448c92
movzx eax, al
test eax, eax
je 0x481487
push 0
push dword [ebp - 0x2d4]
push 0
push dword [ebp - 0x188]
call fcn.0047f906
add esp, 0x10
mov dword [ebp - 0x14], eax
jmp 0x4814a3
push 1
push 0
lea eax, [ebp - 0x354]
push eax
push dword [ebp - 0x188]
call fcn.0047f906
add esp, 0x10
mov dword [ebp - 0x14], eax
lea ecx, [ebp - 0x354]
call fcn.0042cdfa
jmp 0x4814e3
cmp dword [ebp + 0x10], 0
jne 0x4814c6
mov ecx, dword [ebp + 0xc]
call fcn.0042cb3e
mov dword [ebp - 0x1b8], eax
jmp 0x4814d0
movzx eax, word [ebp + 0x10]
mov dword [ebp - 0x1b8], eax
push dword [ebp - 0x1b8]
push dword [ebp + 8]
call fcn.0047ea47
pop ecx
pop ecx
mov dword [ebp - 0x14], eax
lea ecx, [ebp - 0x384]
call fcn.0042cce3
lea ecx, [ebp - 0x33c]
call fcn.0042cdfa
mov dword [ebp - 0x1c0], 0x1913
mov dword [ebp - 0x27c], 0xac58d0
cmp dword [ebp - 0x1c0], 0x19b9
jle 0x4815f8
and dword [ebp - 0x160], 0
jmp 0x481533
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 0x801
jge 0x4815f8
and dword [ebp - 0x148], 0
jmp 0x481559
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 0xca9
jge 0x4815f3
and dword [ebp - 0x150], 0
jmp 0x48157f
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0x2586
jge 0x4815ee
and dword [ebp - 0x158], 0
jmp 0x4815a1
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 0x7fa0
jge 0x4815ec
mov eax, dword [ebp - 0x148]
mov ecx, dword [ebp - 0x150]
sar eax, cl
and eax, dword [ebp - 0x158]
or eax, dword [ebp - 0x160]
cdq
mov dword [ebp - 0x2ec], eax
mov dword [ebp - 0x2e8], edx
push dword [ebp - 0x2e8]
push dword [ebp - 0x2ec]
mov ecx, 0xad3d78
call fcn.0042cb49
jmp 0x481594
jmp 0x481572
jmp 0x48154c
jmp 0x481526
mov eax, dword [ebp - 0x14]
jmp 0x48164f
cmp dword [ebp - 0x1c8], 0x747f
jge 0x481635
mov edx, dword [ebp - 0x214]
mov ecx, 0xad3d78
call fcn.0042f475
cmp dword [ebp - 0x1d0], 0x2613
jge 0x48164d
push dword [ebp - 0x288]
call fcn.004f967e
pop ecx
xor eax, eax
mov esp, ebp
pop ebp
ret