Function at 0x46e3b7
Capabilities:
Contain obfuscated stackstrings
Encrypt data using speck

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b13ad
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x26d4
call fcn.004a0a70
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x2160], 0x3266
mov dword [ebp - 0x32c], 0xbacd7953
mov dword [ebp - 0x5a8], 0
push 1
lea ecx, [ebp - 0x1c2c]
call fcn.00429dda
mov dword [ebp - 0x2014], 1
mov dword [ebp - 0x390], 5
mov dword [ebp - 0xf60], 0x95e2de4b
mov dword [ebp - 0x3b4], 0
jmp 0x46e442
mov eax, dword [ebp - 0x3b4]
inc eax
mov dword [ebp - 0x3b4], eax
cmp dword [ebp - 0x3b4], 1
jge 0x46e464
push dword [ebp - 0x3b4]
lea ecx, [ebp - 0x1c2c]
call fcn.00429ec8
mov dword [eax], 3
jmp 0x46e435
mov eax, dword [ebp - 0xf60]
inc eax
mov dword [ebp - 0xf60], eax
mov dword [ebp - 0x32c], 0
jmp 0x46e48a
mov eax, dword [ebp - 0x32c]
inc eax
mov dword [ebp - 0x32c], eax
cmp dword [ebp - 0x32c], 0
jg 0x46e692
push 2
lea ecx, [ebp - 0x2170]
call fcn.00429dda
mov dword [ebp - 0x2214], 0xffffffff
mov dword [ebp - 0x3b0], 0
jmp 0x46e4c7
mov eax, dword [ebp - 0x3b0]
inc eax
mov dword [ebp - 0x3b0], eax
cmp dword [ebp - 0x3b0], 2
jge 0x46e4e9
push dword [ebp - 0x3b0]
lea ecx, [ebp - 0x2170]
call fcn.00429ec8
mov dword [eax], 7
jmp 0x46e4ba
mov dword [ebp - 0x390], 0
jmp 0x46e502
mov eax, dword [ebp - 0x390]
inc eax
mov dword [ebp - 0x390], eax
cmp dword [ebp - 0x390], 0
jg 0x46e682
mov dword [ebp - 0x1678], 0xfffffff9
mov byte [ebp - 0x225], 0
movzx eax, byte [ebp - 0x225]
test eax, eax
je 0x46e53a
push 0
push 0x538
push 0
call dword [0xabf084]
push dword [ebp - 0x32c]
lea ecx, [ebp - 0x1c2c]
call fcn.00429ec8
cmp dword [eax], 0
je 0x46e666
mov dword [ebp - 0x17a4], 1
mov dword [ebp - 0x17ac], 0xd3610cb4
mov dword [ebp - 0x5a8], 0
jmp 0x46e581
mov eax, dword [ebp - 0x5a8]
dec eax
mov dword [ebp - 0x5a8], eax
cmp dword [ebp - 0x5a8], 0
jl 0x46e664
mov dword [ebp - 0x7fc], 0x7716e311
mov byte [ebp - 0x20e], 0
movzx eax, byte [ebp - 0x20e]
test eax, eax
je 0x46e5b0
call dword [0xabf41c]
mov eax, dword [ebp - 0x1678]
mov dword [ebp - 0x201c], eax
cmp dword [ebp - 0x17a4], 0xbd43
jne 0x46e5d4
mov dword [ebp - 0x1438], 1
jmp 0x46e5db
and dword [ebp - 0x1438], 0
mov eax, dword [ebp - 0x7fc]
dec eax
mov dword [ebp - 0x7fc], eax
mov eax, dword [ebp - 0x7fc]
cmp eax, dword [ebp - 0x1438]
jl 0x46e602
mov dword [ebp - 0x1440], 1
jmp 0x46e609
and dword [ebp - 0x1440], 0
cmp dword [ebp - 0x1440], 0
je 0x46e61e
mov dword [ebp - 0x14ac], 1
jmp 0x46e625
and dword [ebp - 0x14ac], 0
push dword [ebp - 0x390]
lea ecx, [ebp - 0x1c2c]
call fcn.00429ec8
mov ecx, dword [ebp - 0x14ac]
cmp ecx, dword [eax]
jle 0x46e64c
mov dword [ebp - 0x14b4], 1
jmp 0x46e653
and dword [ebp - 0x14b4], 0
mov eax, dword [ebp - 0x14b4]
mov dword [ebp - 0x17ac], eax
jmp 0x46e574
jmp 0x46e67d
mov dword [ebp - 0x14bc], 0xba8d
mov eax, dword [ebp - 0x14bc]
dec eax
mov dword [ebp - 0x14bc], eax
jmp 0x46e4f5
lea ecx, [ebp - 0x2170]
call fcn.00429eac
jmp 0x46e47d
lea ecx, [ebp - 0x1c2c]
call fcn.00429eac
mov dword [ebp - 0x22fc], 0x3266
mov dword [ebp - 0x398], 0xbacd7953
mov dword [ebp - 0x3c0], 0
push 1
lea ecx, [ebp - 0x1c5c]
call fcn.00429dda
mov dword [ebp - 0x2024], 1
mov dword [ebp - 0x324], 5
mov dword [ebp - 0x14c4], 0x95e2de4b
mov dword [ebp - 0x3b8], 0
jmp 0x46e6ff
mov eax, dword [ebp - 0x3b8]
inc eax
mov dword [ebp - 0x3b8], eax
cmp dword [ebp - 0x3b8], 1
jge 0x46e721
push dword [ebp - 0x3b8]
lea ecx, [ebp - 0x1c5c]
call fcn.00429ec8
mov dword [eax], 3
jmp 0x46e6f2
mov eax, dword [ebp - 0x14c4]
inc eax
mov dword [ebp - 0x14c4], eax
mov dword [ebp - 0x398], 0
jmp 0x46e747
mov eax, dword [ebp - 0x398]
inc eax
mov dword [ebp - 0x398], eax
cmp dword [ebp - 0x398], 0
jg 0x46e94f
push 2
lea ecx, [ebp - 0x2180]
call fcn.00429dda
mov dword [ebp - 0x2224], 0xffffffff
mov dword [ebp - 0x6a4], 0
jmp 0x46e784
mov eax, dword [ebp - 0x6a4]
inc eax
mov dword [ebp - 0x6a4], eax
cmp dword [ebp - 0x6a4], 2
jge 0x46e7a6
push dword [ebp - 0x6a4]
lea ecx, [ebp - 0x2180]
call fcn.00429ec8
mov dword [eax], 7
jmp 0x46e777
mov dword [ebp - 0x324], 0
jmp 0x46e7bf
mov eax, dword [ebp - 0x324]
inc eax
mov dword [ebp - 0x324], eax
cmp dword [ebp - 0x324], 0
jg 0x46e93f
mov dword [ebp - 0x17b4], 0xfffffff9
mov byte [ebp - 0x1b9], 0
movzx eax, byte [ebp - 0x1b9]
test eax, eax
je 0x46e7f7
push 0
push 0x538
push 0
call dword [0xabf084]
push dword [ebp - 0x398]
lea ecx, [ebp - 0x1c5c]
call fcn.00429ec8
cmp dword [eax], 0
je 0x46e923
mov dword [ebp - 0x17bc], 1
mov dword [ebp - 0x17c4], 0xd3610cb4
mov dword [ebp - 0x3c0], 0
jmp 0x46e83e
mov eax, dword [ebp - 0x3c0]
dec eax
mov dword [ebp - 0x3c0], eax
cmp dword [ebp - 0x3c0], 0
jl 0x46e921
mov dword [ebp - 0x8ac], 0x7716e311
mov byte [ebp - 0x210], 0
movzx eax, byte [ebp - 0x210]
test eax, eax
je 0x46e86d
call dword [0xabf41c]
mov eax, dword [ebp - 0x17b4]
mov dword [ebp - 0x202c], eax
cmp dword [ebp - 0x17bc], 0xbd43
jne 0x46e891
mov dword [ebp - 0x14cc], 1
jmp 0x46e898
and dword [ebp - 0x14cc], 0
mov eax, dword [ebp - 0x8ac]
dec eax
mov dword [ebp - 0x8ac], eax
mov eax, dword [ebp - 0x8ac]
cmp eax, dword [ebp - 0x14cc]
jl 0x46e8bf
mov dword [ebp - 0x14d4], 1
jmp 0x46e8c6
and dword [ebp - 0x14d4], 0
cmp dword [ebp - 0x14d4], 0
je 0x46e8db
mov dword [ebp - 0x14dc], 1
jmp 0x46e8e2
and dword [ebp - 0x14dc], 0
push dword [ebp - 0x324]
lea ecx, [ebp - 0x1c5c]
call fcn.00429ec8
mov ecx, dword [ebp - 0x14dc]
cmp ecx, dword [eax]
jle 0x46e909
mov dword [ebp - 0x14e4], 1
jmp 0x46e910
and dword [ebp - 0x14e4], 0
mov eax, dword [ebp - 0x14e4]
mov dword [ebp - 0x17c4], eax
jmp 0x46e831
jmp 0x46e93a
mov dword [ebp - 0x14ec], 0xba8d
mov eax, dword [ebp - 0x14ec]
dec eax
mov dword [ebp - 0x14ec], eax
jmp 0x46e7b2
lea ecx, [ebp - 0x2180]
call fcn.00429eac
jmp 0x46e73a
lea ecx, [ebp - 0x1c5c]
call fcn.00429eac
mov dword [ebp - 0xd4], 0
jmp 0x46e973
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 1
jge 0x46e98f
mov eax, dword [ebp - 0xd4]
mov dword [ebp + eax*4 - 0x14f4], 0x99ff
jmp 0x46e966
mov dword [ebp - 0xd4], 0
jmp 0x46e9a8
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 3
jge 0x46e9c4
mov eax, dword [ebp - 0xd4]
mov dword [ebp + eax*4 - 0x1ab8], 0x632667a8
jmp 0x46e99b
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x1ab8], 0
jmp 0x46e9f2
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1ab8]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x1ab8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1ab8], 0
jg 0x46ea60
mov dword [ebp - 0x320], 0
mov dword [ebp - 0x320], 0
jmp 0x46ea25
mov eax, dword [ebp - 0x320]
inc eax
mov dword [ebp - 0x320], eax
cmp dword [ebp - 0x320], 1
jge 0x46ea41
mov eax, dword [ebp - 0x320]
mov dword [ebp + eax*4 - 0x14f4], 0xcbd9
jmp 0x46ea18
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1ab8]
mov eax, dword [ebp + eax*4 - 0x14f4]
mov dword [ebp - 0x320], eax
jmp 0x46e9d7
mov dword [ebp - 0x1394], 0x64fe
push 1
lea ecx, [ebp - 0x1ac8]
call fcn.00429dda
mov dword [ebp - 0x5b0], 0
jmp 0x46ea90
mov eax, dword [ebp - 0x5b0]
inc eax
mov dword [ebp - 0x5b0], eax
cmp dword [ebp - 0x5b0], 1
jge 0x46eab2
push dword [ebp - 0x5b0]
lea ecx, [ebp - 0x1ac8]
call fcn.00429ec8
mov dword [eax], 0xfffffff8
jmp 0x46ea83
push 0
lea ecx, [ebp - 0x1ac8]
call fcn.00429ec8
mov dword [eax], 0x1d
jmp 0x46eaeb
push 0
lea ecx, [ebp - 0x1ac8]
call fcn.00429ec8
mov dword [ebp - 0x14fc], eax
mov eax, dword [ebp - 0x14fc]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x14fc]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x1ac8]
call fcn.00429ec8
cmp dword [eax], 0xfffffff6
je 0x46eb8a
mov dword [ebp - 0x6a8], 0xf5a9c4c8
mov dword [ebp - 0x3c8], 0
jmp 0x46eb24
mov eax, dword [ebp - 0x3c8]
inc eax
mov dword [ebp - 0x3c8], eax
cmp dword [ebp - 0x3c8], 4
jge 0x46eb40
mov eax, dword [ebp - 0x3c8]
mov dword [ebp + eax*4 - 0x26b8], 0xb4074dd
jmp 0x46eb17
mov dword [ebp - 0x6a8], 3
jmp 0x46eb59
mov eax, dword [ebp - 0x6a8]
dec eax
mov dword [ebp - 0x6a8], eax
cmp dword [ebp - 0x6a8], 0
jl 0x46eb85
mov byte [ebp - 0x1bb], 0
movzx eax, byte [ebp - 0x1bb]
test eax, eax
je 0x46eb83
push 0
call dword [0xabf3fc]
push eax
call dword [0xabf3b8]
jmp 0x46eb4c
jmp 0x46eac7
lea ecx, [ebp - 0x1ac8]
call fcn.00429eac
mov dword [ebp - 0x128], 0
jmp 0x46ebae
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 1
jge 0x46ebca
mov eax, dword [ebp - 0x128]
mov dword [ebp + eax*4 - 0x1504], 0x99ff
jmp 0x46eba1
mov dword [ebp - 0x128], 0
jmp 0x46ebe3
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 3
jge 0x46ebff
mov eax, dword [ebp - 0x128]
mov dword [ebp + eax*4 - 0x1ad8], 0x632667a8
jmp 0x46ebd6
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x1ad8], 0
jmp 0x46ec2d
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1ad8]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x1ad8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1ad8], 0
jg 0x46ec9b
mov dword [ebp - 0x318], 0
mov dword [ebp - 0x318], 0
jmp 0x46ec60
mov eax, dword [ebp - 0x318]
inc eax
mov dword [ebp - 0x318], eax
cmp dword [ebp - 0x318], 1
jge 0x46ec7c
mov eax, dword [ebp - 0x318]
mov dword [ebp + eax*4 - 0x1504], 0xcbd9
jmp 0x46ec53
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1ad8]
mov eax, dword [ebp + eax*4 - 0x1504]
mov dword [ebp - 0x318], eax
jmp 0x46ec12
mov dword [ebp - 0x19c8], 0xab0308
push 1
lea ecx, [ebp - 0x1ae8]
call fcn.00429dda
mov dword [ebp - 0x3d0], 0
jmp 0x46eccb
mov eax, dword [ebp - 0x3d0]
inc eax
mov dword [ebp - 0x3d0], eax
cmp dword [ebp - 0x3d0], 1
jge 0x46eced
push dword [ebp - 0x3d0]
lea ecx, [ebp - 0x1ae8]
call fcn.00429ec8
mov dword [eax], 0xfffffff8
jmp 0x46ecbe
push 0
lea ecx, [ebp - 0x1ae8]
call fcn.00429ec8
mov dword [eax], 0x1d
jmp 0x46ed26
push 0
lea ecx, [ebp - 0x1ae8]
call fcn.00429ec8
mov dword [ebp - 0x150c], eax
mov eax, dword [ebp - 0x150c]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x150c]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x1ae8]
call fcn.00429ec8
cmp dword [eax], 0xfffffff6
je 0x46edc5
mov dword [ebp - 0x3d8], 0xf5a9c4c8
mov dword [ebp - 0x5b8], 0
jmp 0x46ed5f
mov eax, dword [ebp - 0x5b8]
inc eax
mov dword [ebp - 0x5b8], eax
cmp dword [ebp - 0x5b8], 4
jge 0x46ed7b
mov eax, dword [ebp - 0x5b8]
mov dword [ebp + eax*4 - 0x2698], 0xb4074dd
jmp 0x46ed52
mov dword [ebp - 0x3d8], 3
jmp 0x46ed94
mov eax, dword [ebp - 0x3d8]
dec eax
mov dword [ebp - 0x3d8], eax
cmp dword [ebp - 0x3d8], 0
jl 0x46edc0
mov byte [ebp - 0x212], 0
movzx eax, byte [ebp - 0x212]
test eax, eax
je 0x46edbe
push 0
call dword [0xabf3fc]
push eax
call dword [0xabf3b8]
jmp 0x46ed87
jmp 0x46ed02
lea ecx, [ebp - 0x1ae8]
call fcn.00429eac
mov dword [ebp - 0x8fc], 0xb6182eac
mov dword [ebp - 0x8b4], 0
mov dword [ebp - 0x1514], 0xfffffffe
mov dword [ebp - 0x908], 1
mov dword [ebp - 0x814], 5
mov dword [ebp - 0x2344], 3
mov dword [ebp - 0x2034], 0x8f6c218e
mov dword [ebp - 0x80c], 0xfffffffe
mov dword [ebp - 0x1d8], 0
push 4
lea ecx, [ebp - 0x1634]
call fcn.00429dda
mov dword [ebp - 0x804], 2
mov dword [ebp - 0x19b0], 1
push 3
lea ecx, [ebp - 0x1dfc]
call fcn.00429dda
mov dword [ebp - 0x19b8], 0xfffffff6
mov dword [ebp - 0x19c0], 1
mov dword [ebp - 0xdc], 0
jmp 0x46ee85
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 4
jge 0x46eea7
push dword [ebp - 0xdc]
lea ecx, [ebp - 0x1634]
call fcn.00429ec8
mov dword [eax], 8
jmp 0x46ee78
mov dword [ebp - 0xdc], 0
jmp 0x46eec0
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 3
jge 0x46eee2
push dword [ebp - 0xdc]
lea ecx, [ebp - 0x1dfc]
call fcn.00429ec8
mov dword [eax], 0x4a9ff1db
jmp 0x46eeb3
mov eax, dword [ebp - 0x8b4]
mov dword [ebp - 0x2234], eax
mov eax, dword [ebp - 0x8b4]
mov dword [ebp - 0x203c], eax
mov eax, dword [ebp - 0x814]
mov dword [ebp - 0x1514], eax
mov eax, dword [ebp - 0x804]
mov dword [ebp - 0x2304], eax
mov eax, dword [ebp - 0x1514]
mov dword [ebp - 0x2044], eax
mov eax, dword [ebp - 0x804]
inc eax
mov dword [ebp - 0x804], eax
push 1
lea ecx, [ebp - 0x1634]
call fcn.00429ec8
mov esi, eax
push 1
lea ecx, [ebp - 0x1634]
call fcn.00429ec8
mov ecx, dword [esi]
cmp ecx, dword [eax]
jge 0x46ef59
mov dword [ebp - 0x998], 1
jmp 0x46ef60
and dword [ebp - 0x998], 0
push 3
lea ecx, [ebp - 0x1634]
call fcn.00429ec8
mov ecx, dword [ebp - 0x998]
cmp ecx, dword [eax]
jge 0x46ef83
mov dword [ebp - 0x1374], 1
jmp 0x46ef8a
and dword [ebp - 0x1374], 0
mov eax, dword [ebp - 0x8fc]
add eax, 6
mov dword [ebp - 0x8fc], eax
mov eax, dword [ebp - 0x1d8]
add eax, dword [ebp - 0x1374]
mov dword [ebp - 0x80c], eax
mov eax, dword [ebp - 0x80c]
cmp dword [ebp - 0x8fc], eax
jge 0x46efc5
mov dword [ebp - 0x9a0], 1
jmp 0x46efcc
and dword [ebp - 0x9a0], 0
mov eax, dword [ebp - 0x1d8]
add eax, dword [ebp - 0x9a0]
je 0x46f013
mov byte [ebp - 0x1bd], 0
movzx eax, byte [ebp - 0x1bd]
test eax, eax
je 0x46eff4
push 0
call dword [0xabf2b0]
mov byte [ebp - 0x214], 0
movzx eax, byte [ebp - 0x214]
test eax, eax
je 0x46f00e
push 0
call dword [0xabf2ec]
jmp 0x46f20d
push 3
lea ecx, [ebp - 0x15f8]
call fcn.00429dda
mov dword [ebp - 0x17cc], 8
mov dword [ebp - 0x9a8], 0x2c9aa6f5
mov dword [ebp - 0x720], 0
jmp 0x46f04d
mov eax, dword [ebp - 0x720]
inc eax
mov dword [ebp - 0x720], eax
cmp dword [ebp - 0x720], 3
jge 0x46f06f
push dword [ebp - 0x720]
lea ecx, [ebp - 0x15f8]
call fcn.00429ec8
mov dword [eax], 0xc19cd890
jmp 0x46f040
mov dword [ebp - 0x1d8], 3
jmp 0x46f088
mov eax, dword [ebp - 0x1d8]
dec eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 0
jl 0x46f1ed
mov dword [ebp - 0x19a0], 1
cmp dword [ebp - 0x17cc], 0
jne 0x46f15a
mov eax, dword [ebp - 0x9a8]
mov dword [ebp - 0x2244], eax
mov eax, dword [ebp - 0x19a0]
mov dword [ebp - 0x204c], eax
push dword [ebp - 0x1d8]
lea ecx, [ebp - 0x1634]
call fcn.00429ec8
mov dword [ebp - 0x137c], eax
push 1
lea ecx, [ebp - 0x15f8]
call fcn.00429ec8
mov ecx, dword [ebp - 0x137c]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x137c]
cmp dword [eax], 1
jae 0x46f109
mov dword [ebp - 0x19a8], 1
jmp 0x46f110
and dword [ebp - 0x19a8], 0
mov eax, dword [ebp - 0x80c]
mov dword [ebp - 0x2364], eax
mov esi, dword [ebp - 0x9a8]
push 0
lea ecx, [ebp - 0x15f8]
call fcn.00429ec8
cmp esi, dword [eax]
jne 0x46f13f
mov dword [ebp - 0x1384], 1
jmp 0x46f146
and dword [ebp - 0x1384], 0
mov eax, dword [ebp - 0x1384]
add eax, 9
jne 0x46f15a
and dword [ebp - 0x9b0], 0
jmp 0x46f164
mov dword [ebp - 0x9b0], 1
cmp dword [ebp - 0x9b0], 0x5270
jl 0x46f17c
mov dword [ebp - 0x138c], 1
jmp 0x46f183
and dword [ebp - 0x138c], 0
mov eax, dword [ebp - 0x19b0]
imul eax, dword [ebp - 0x138c]
test eax, eax
je 0x46f1a9
cmp dword [ebp - 0x8b4], 0
je 0x46f1a9
mov dword [ebp - 0x9b8], 1
jmp 0x46f1b0
and dword [ebp - 0x9b8], 0
push 0
lea ecx, [ebp - 0x15f8]
call fcn.00429ec8
mov eax, dword [ebp - 0x9b8]
mov dword [ebp - 0x814], eax
mov eax, dword [ebp - 0x814]
mov dword [ebp - 0x2054], eax
push 0
lea ecx, [ebp - 0x1dfc]
call fcn.00429ec8
mov dword [eax], 0x5e5ab8bf
jmp 0x46f07b
mov esi, dword [ebp - 0x908]
push 0
lea ecx, [ebp - 0x15f8]
call fcn.00429ec8
mov dword [eax], esi
lea ecx, [ebp - 0x15f8]
call fcn.00429eac
mov eax, dword [ebp - 0x19b8]
mov dword [ebp - 0x908], eax
mov eax, dword [ebp - 0x908]
mov dword [ebp - 0x19c0], eax
lea ecx, [ebp - 0x1dfc]
call fcn.00429eac
lea ecx, [ebp - 0x1634]
call fcn.00429eac
cmp dword [ebp - 0x1394], 0x66f4
jle 0x46f32d
and dword [ebp - 0x3e8], 0
jmp 0x46f261
mov eax, dword [ebp - 0x3e8]
inc eax
mov dword [ebp - 0x3e8], eax
cmp dword [ebp - 0x3e8], 0x1fa7
jge 0x46f325
and dword [ebp - 0x3e0], 0
jmp 0x46f287
mov eax, dword [ebp - 0x3e0]
inc eax
mov dword [ebp - 0x3e0], eax
cmp dword [ebp - 0x3e0], 0x1f16
jge 0x46f320
and dword [ebp - 0x5c0], 0
jmp 0x46f2ad
mov eax, dword [ebp - 0x5c0]
inc eax
mov dword [ebp - 0x5c0], eax
cmp dword [ebp - 0x5c0], 0x5cb6
jge 0x46f31b
and dword [ebp - 0x6b0], 0
jmp 0x46f2cf
mov eax, dword [ebp - 0x6b0]
inc eax
mov dword [ebp - 0x6b0], eax
cmp dword [ebp - 0x6b0], 0x5efb
jge 0x46f319
mov eax, dword [ebp - 0x3e0]
imul eax, dword [ebp - 0x5c0]
add eax, dword [ebp - 0x3e8]
add eax, dword [ebp - 0x6b0]
cdq
mov dword [ebp - 0x17d8], eax
mov dword [ebp - 0x17d4], edx
push dword [ebp - 0x17d4]
push dword [ebp - 0x17d8]
mov ecx, 0xaba220
call fcn.004805c1
jmp 0x46f2c2
jmp 0x46f2a0
jmp 0x46f27a
jmp 0x46f254
push 0
call dword [0xabf0b4]
mov dword [ebp - 0x5c8], 1
push 1
lea ecx, [ebp - 0x1ebc]
call fcn.00429dda
mov dword [ebp - 0x3f0], 0
jmp 0x46f35d
mov eax, dword [ebp - 0x3f0]
inc eax
mov dword [ebp - 0x3f0], eax
cmp dword [ebp - 0x3f0], 1
jge 0x46f37f
push dword [ebp - 0x3f0]
lea ecx, [ebp - 0x1ebc]
call fcn.00429ec8
mov dword [eax], 0xfffffffd
jmp 0x46f350
mov dword [ebp - 0x5c8], 0xffffffe4
jmp 0x46f398
mov eax, dword [ebp - 0x5c8]
inc eax
mov dword [ebp - 0x5c8], eax
cmp dword [ebp - 0x5c8], 0xffffffea
jle 0x46f3b7
push 0
lea ecx, [ebp - 0x1ebc]
call fcn.00429ec8
cmp dword [eax], 0
je 0x46f3b5
jmp 0x46f3b7
jmp 0x46f38b
lea ecx, [ebp - 0x1ebc]
call fcn.00429eac
mov dword [ebp - 0x10e8], 0x58e7
and dword [ebp - 4], 0
cmp dword [ebp - 0x1394], 0x6480
jge 0x46f3ec
mov edx, dword [ebp - 0x19c8]
mov ecx, 0xaba220
call fcn.00481a6f
jmp 0x46f408
or dword [ebp - 4], 0xffffffff
jmp 0x46f412
mov dword [ebp - 0x39c], 0x67a876e6
mov dword [ebp - 0x314], 0x4f094650
push 2
lea ecx, [ebp - 0x1d9c]
call fcn.00429dda
mov dword [ebp - 0x130], 0
jmp 0x46f44c
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 2
jge 0x46f46e
push dword [ebp - 0x130]
lea ecx, [ebp - 0x1d9c]
call fcn.00429ec8
mov dword [eax], 0xfffffff7
jmp 0x46f43f
mov dword [ebp - 0x130], 0
jmp 0x46f487
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 3
jge 0x46f4a3
mov eax, dword [ebp - 0x130]
mov dword [ebp + eax*4 - 0x2190], 0xfffffffe
jmp 0x46f47a
mov eax, dword [ebp - 0x39c]
cmp dword [ebp - 0x39c], eax
jg 0x46f4bd
mov dword [ebp - 0x9c0], 1
jmp 0x46f4c4
and dword [ebp - 0x9c0], 0
cmp dword [ebp - 0x9c0], 0
jae 0x46f4d9
mov dword [ebp - 0x81c], 1
jmp 0x46f4e0
and dword [ebp - 0x81c], 0
mov dword [ebp - 0x314], 1
push 0
lea ecx, [ebp - 0x1d9c]
call fcn.00429ec8
mov ecx, dword [ebp - 0x81c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x314]
cmp eax, dword [ebp - 0x81c]
jne 0x46f519
mov dword [ebp - 0x139c], 1
jmp 0x46f520
and dword [ebp - 0x139c], 0
mov eax, dword [ebp - 0x39c]
cmp dword [ebp - 0x139c], eax
jg 0x46f541
push 0xfffffffffffffffa
pop eax
test eax, eax
je 0x46f541
mov dword [ebp - 0x9c8], 1
jmp 0x46f548
and dword [ebp - 0x9c8], 0
cmp dword [ebp - 0x9c8], 1
jg 0x46f55d
mov dword [ebp - 0x8bc], 1
jmp 0x46f564
and dword [ebp - 0x8bc], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x8bc]
mov dword [ebp + eax - 0x2190], ecx
mov eax, dword [ebp - 0x39c]
cmp eax, dword [ebp - 0x8bc]
jne 0x46f5a4
mov dword [ebp - 0x19d0], 0xfffffff9
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x19d0]
mov dword [ebp + eax - 0x2190], ecx
jmp 0x46f5f4
mov dword [ebp - 0x19d8], 0
mov dword [ebp - 0x314], 0
jmp 0x46f5c7
mov eax, dword [ebp - 0x314]
inc eax
mov dword [ebp - 0x314], eax
cmp dword [ebp - 0x314], 0
je 0x46f5f4
mov dword [ebp - 0x13a4], 0xe0d1b713
mov eax, dword [ebp - 0x13a4]
dec eax
mov dword [ebp - 0x13a4], eax
cmp dword [ebp - 0x19d8], 0
je 0x46f5f2
jmp 0x46f5f4
jmp 0x46f5ba
lea ecx, [ebp - 0x1d9c]
call fcn.00429eac
mov dword [ebp - 0x904], 0xb6182eac
mov dword [ebp - 0x8c4], 0
mov dword [ebp - 0x9d0], 0xfffffffe
mov dword [ebp - 0x920], 1
mov dword [ebp - 0x834], 5
mov dword [ebp - 0x2254], 3
mov dword [ebp - 0x205c], 0x8f6c218e
mov dword [ebp - 0x82c], 0xfffffffe
mov dword [ebp - 0x1e0], 0
push 4
lea ecx, [ebp - 0x1628]
call fcn.00429dda
mov dword [ebp - 0x824], 2
mov dword [ebp - 0x19f8], 1
push 3
lea ecx, [ebp - 0x1e74]
call fcn.00429dda
mov dword [ebp - 0x1a00], 0xfffffff6
mov dword [ebp - 0x1a08], 1
mov dword [ebp - 0xe4], 0
jmp 0x46f6b4
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 4
jge 0x46f6d6
push dword [ebp - 0xe4]
lea ecx, [ebp - 0x1628]
call fcn.00429ec8
mov dword [eax], 8
jmp 0x46f6a7
mov dword [ebp - 0xe4], 0
jmp 0x46f6ef
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 3
jge 0x46f711
push dword [ebp - 0xe4]
lea ecx, [ebp - 0x1e74]
call fcn.00429ec8
mov dword [eax], 0x4a9ff1db
jmp 0x46f6e2
mov eax, dword [ebp - 0x8c4]
mov dword [ebp - 0x230c], eax
mov eax, dword [ebp - 0x8c4]
mov dword [ebp - 0x2064], eax
mov eax, dword [ebp - 0x834]
mov dword [ebp - 0x9d0], eax
mov eax, dword [ebp - 0x824]
mov dword [ebp - 0x2264], eax
mov eax, dword [ebp - 0x9d0]
mov dword [ebp - 0x206c], eax
mov eax, dword [ebp - 0x824]
inc eax
mov dword [ebp - 0x824], eax
push 1
lea ecx, [ebp - 0x1628]
call fcn.00429ec8
mov esi, eax
push 1
lea ecx, [ebp - 0x1628]
call fcn.00429ec8
mov ecx, dword [esi]
cmp ecx, dword [eax]
jge 0x46f788
mov dword [ebp - 0x13ac], 1
jmp 0x46f78f
and dword [ebp - 0x13ac], 0
push 3
lea ecx, [ebp - 0x1628]
call fcn.00429ec8
mov ecx, dword [ebp - 0x13ac]
cmp ecx, dword [eax]
jge 0x46f7b2
mov dword [ebp - 0x9d8], 1
jmp 0x46f7b9
and dword [ebp - 0x9d8], 0
mov eax, dword [ebp - 0x904]
add eax, 6
mov dword [ebp - 0x904], eax
mov eax, dword [ebp - 0x1e0]
add eax, dword [ebp - 0x9d8]
mov dword [ebp - 0x82c], eax
mov eax, dword [ebp - 0x82c]
cmp dword [ebp - 0x904], eax
jge 0x46f7f4
mov dword [ebp - 0x13b4], 1
jmp 0x46f7fb
and dword [ebp - 0x13b4], 0
mov eax, dword [ebp - 0x1e0]
add eax, dword [ebp - 0x13b4]
je 0x46f842
mov byte [ebp - 0x1bf], 0
movzx eax, byte [ebp - 0x1bf]
test eax, eax
je 0x46f823
push 0
call dword [0xabf2b0]
mov byte [ebp - 0x216], 0
movzx eax, byte [ebp - 0x216]
test eax, eax
je 0x46f83d
push 0
call dword [0xabf2ec]
jmp 0x46fa3c
push 3
lea ecx, [ebp - 0x15c8]
call fcn.00429dda
mov dword [ebp - 0x19e0], 8
mov dword [ebp - 0x13bc], 0x2c9aa6f5
mov dword [ebp - 0x3f8], 0
jmp 0x46f87c
mov eax, dword [ebp - 0x3f8]
inc eax
mov dword [ebp - 0x3f8], eax
cmp dword [ebp - 0x3f8], 3
jge 0x46f89e
push dword [ebp - 0x3f8]
lea ecx, [ebp - 0x15c8]
call fcn.00429ec8
mov dword [eax], 0xc19cd890
jmp 0x46f86f
mov dword [ebp - 0x1e0], 3
jmp 0x46f8b7
mov eax, dword [ebp - 0x1e0]
dec eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 0
jl 0x46fa1c
mov dword [ebp - 0x19e8], 1
cmp dword [ebp - 0x19e0], 0
jne 0x46f989
mov eax, dword [ebp - 0x13bc]
mov dword [ebp - 0x234c], eax
mov eax, dword [ebp - 0x19e8]
mov dword [ebp - 0x2074], eax
push dword [ebp - 0x1e0]
lea ecx, [ebp - 0x1628]
call fcn.00429ec8
mov dword [ebp - 0x9e0], eax
push 1
lea ecx, [ebp - 0x15c8]
call fcn.00429ec8
mov ecx, dword [ebp - 0x9e0]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x9e0]
cmp dword [eax], 1
jae 0x46f938
mov dword [ebp - 0x19f0], 1
jmp 0x46f93f
and dword [ebp - 0x19f0], 0
mov eax, dword [ebp - 0x82c]
mov dword [ebp - 0x20d8], eax
mov esi, dword [ebp - 0x13bc]
push 0
lea ecx, [ebp - 0x15c8]
call fcn.00429ec8
cmp esi, dword [eax]
jne 0x46f96e
mov dword [ebp - 0x9e8], 1
jmp 0x46f975
and dword [ebp - 0x9e8], 0
mov eax, dword [ebp - 0x9e8]
add eax, 9
jne 0x46f989
and dword [ebp - 0x13c4], 0
jmp 0x46f993
mov dword [ebp - 0x13c4], 1
cmp dword [ebp - 0x13c4], 0x5270
jl 0x46f9ab
mov dword [ebp - 0x9f0], 1
jmp 0x46f9b2
and dword [ebp - 0x9f0], 0
mov eax, dword [ebp - 0x19f8]
imul eax, dword [ebp - 0x9f0]
test eax, eax
je 0x46f9d8
cmp dword [ebp - 0x8c4], 0
je 0x46f9d8
mov dword [ebp - 0x13cc], 1
jmp 0x46f9df
and dword [ebp - 0x13cc], 0
push 0
lea ecx, [ebp - 0x15c8]
call fcn.00429ec8
mov eax, dword [ebp - 0x13cc]
mov dword [ebp - 0x834], eax
mov eax, dword [ebp - 0x834]
mov dword [ebp - 0x207c], eax
push 0
lea ecx, [ebp - 0x1e74]
call fcn.00429ec8
mov dword [eax], 0x5e5ab8bf
jmp 0x46f8aa
mov esi, dword [ebp - 0x920]
push 0
lea ecx, [ebp - 0x15c8]
call fcn.00429ec8
mov dword [eax], esi
lea ecx, [ebp - 0x15c8]
call fcn.00429eac
mov eax, dword [ebp - 0x1a00]
mov dword [ebp - 0x920], eax
mov eax, dword [ebp - 0x920]
mov dword [ebp - 0x1a08], eax
lea ecx, [ebp - 0x1e74]
call fcn.00429eac
lea ecx, [ebp - 0x1628]
call fcn.00429eac
mov dword [ebp - 0x778], 0x51d69f42
push 2
lea ecx, [ebp - 0x1610]
call fcn.00429dda
mov dword [ebp - 0x13d4], 2
push 3
lea ecx, [ebp - 0x15e0]
call fcn.00429dda
mov dword [ebp - 0xa00], 0xfffa
mov dword [ebp - 0x138], 0
jmp 0x46fabb
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 2
jge 0x46fadd
push dword [ebp - 0x138]
lea ecx, [ebp - 0x1610]
call fcn.00429ec8
mov dword [eax], 0xfffffffd
jmp 0x46faae
mov dword [ebp - 0x138], 0
jmp 0x46faf6
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 3
jge 0x46fb18
push dword [ebp - 0x138]
lea ecx, [ebp - 0x15e0]
call fcn.00429ec8
mov dword [eax], 0xffff
jmp 0x46fae9
mov esi, dword [ebp - 0x778]
add esi, dword [ebp - 0x778]
push 1
lea ecx, [ebp - 0x1610]
call fcn.00429ec8
mov dword [eax], esi
xor eax, eax
inc eax
je 0x46fb4d
cmp dword [ebp - 0x13d4], 0
je 0x46fb4d
mov dword [ebp - 0x9f8], 1
jmp 0x46fb54
and dword [ebp - 0x9f8], 0
push 1
lea ecx, [ebp - 0x1610]
call fcn.00429ec8
mov ecx, dword [ebp - 0x9f8]
sub ecx, dword [eax]
je 0x46fb74
cmp dword [ebp - 0x778], 0
jne 0x46fb8f
push 1
lea ecx, [ebp - 0x1610]
call fcn.00429ec8
cmp dword [eax], 0
jne 0x46fb8f
and dword [ebp - 0x1a10], 0
jmp 0x46fb99
mov dword [ebp - 0x1a10], 1
mov eax, dword [ebp - 0x13d4]
mov dword [ebp - 0x20dc], eax
push 2
lea ecx, [ebp - 0x15e0]
call fcn.00429ec8
push 2
lea ecx, [ebp - 0x15e0]
call fcn.00429ec8
push 1
lea ecx, [ebp - 0x1610]
call fcn.00429ec8
mov esi, eax
push 2
lea ecx, [ebp - 0x15e0]
call fcn.00429ec8
mov ecx, dword [esi]
imul ecx, dword [eax]
neg ecx
mov dword [ebp - 0xa00], ecx
mov eax, dword [ebp - 0xa00]
cmp dword [ebp - 0x778], eax
jl 0x46fc08
push 2
lea ecx, [ebp - 0x15e0]
call fcn.00429ec8
cmp dword [eax], 0
je 0x46fc2d
mov byte [ebp - 0x1c1], 0
movzx eax, byte [ebp - 0x1c1]
test eax, eax
je 0x46fc2b
push 0x2519
push 0
push 0
push 0
call dword [0xabf2e4]
jmp 0x46fc90
mov byte [ebp - 0x218], 0
movzx eax, byte [ebp - 0x218]
test eax, eax
je 0x46fc90
push 0x23d5
push 0x201b
push 0x2627
push 0
push 0x26a7
push 0x1dca
call dword [0xabf3fc]
push eax
call dword [0xabf3d8]
push eax
push 0x122a
push 0x1707
push 0x67a
push 0x1c11
call dword [0xabf3fc]
push eax
call dword [0xabf3d8]
push eax
call dword [0xabf058]
lea ecx, [ebp - 0x15e0]
call fcn.00429eac
lea ecx, [ebp - 0x1610]
call fcn.00429eac
mov dword [ebp - 0x1008], 0x35ac
mov dword [ebp - 0x5d0], 1
push 1
lea ecx, [ebp - 0x1e2c]
call fcn.00429dda
mov dword [ebp - 0x400], 0
jmp 0x46fce0
mov eax, dword [ebp - 0x400]
inc eax
mov dword [ebp - 0x400], eax
cmp dword [ebp - 0x400], 1
jge 0x46fd02
push dword [ebp - 0x400]
lea ecx, [ebp - 0x1e2c]
call fcn.00429ec8
mov dword [eax], 0xfffffffd
jmp 0x46fcd3
mov dword [ebp - 0x5d0], 0xffffffe4
jmp 0x46fd1b
mov eax, dword [ebp - 0x5d0]
inc eax
mov dword [ebp - 0x5d0], eax
cmp dword [ebp - 0x5d0], 0xffffffea
jle 0x46fd3a
push 0
lea ecx, [ebp - 0x1e2c]
call fcn.00429ec8
cmp dword [eax], 0
je 0x46fd38
jmp 0x46fd3a
jmp 0x46fd0e
lea ecx, [ebp - 0x1e2c]
call fcn.00429eac
mov dword [ebp - 0x408], 6
mov dword [ebp - 0x408], 0
jmp 0x46fd68
mov eax, dword [ebp - 0x408]
inc eax
mov dword [ebp - 0x408], eax
cmp dword [ebp - 0x408], 0x16
jge 0x46fd8d
mov byte [ebp - 0x1c3], 0
movzx eax, byte [ebp - 0x1c3]
test eax, eax
je 0x46fd8b
push 0
call dword [0xabf2cc]
jmp 0x46fd5b
mov byte [ebp - 0x21a], 0
movzx eax, byte [ebp - 0x21a]
test eax, eax
je 0x46fdbc
push 0
push 9
push 0x1353
call dword [0xabf3fc]
push eax
call dword [0xabf3d8]
push eax
call dword [0xabf054]
mov dword [ebp - 0x1a70], 0xab0364
mov dword [ebp - 0xec], 0x3d06
mov dword [ebp - 0x83c], 0xd16df251
mov dword [ebp - 0x1a18], 0xfffffffa
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x83c], eax
mov dword [ebp - 0xec], 0
jmp 0x46fe09
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0x30
jge 0x46ffb8
mov dword [ebp - 0x13dc], 0xfffffff8
push 1
lea ecx, [ebp - 0x1ea4]
call fcn.00429dda
mov dword [ebp - 0x13fc], 0xfffffffc
mov dword [ebp - 0x6b8], 0
jmp 0x46fe50
mov eax, dword [ebp - 0x6b8]
inc eax
mov dword [ebp - 0x6b8], eax
cmp dword [ebp - 0x6b8], 1
jge 0x46fe72
push dword [ebp - 0x6b8]
lea ecx, [ebp - 0x1ea4]
call fcn.00429ec8
mov dword [eax], 0x3f91
jmp 0x46fe43
cmp dword [ebp - 0xec], 0
je 0x46ff7d
cmp dword [ebp - 0x13dc], 0
je 0x46ff34
mov eax, dword [ebp - 0x13dc]
add eax, 0x1870
cmp eax, 0x6b6c
jg 0x46feaa
mov dword [ebp - 0xa08], 1
jmp 0x46feb1
and dword [ebp - 0xa08], 0
mov eax, dword [ebp - 0xa08]
dec eax
je 0x46fecf
cmp dword [ebp - 0xec], 0
je 0x46fecf
mov dword [ebp - 0x13e4], 1
jmp 0x46fed6
and dword [ebp - 0x13e4], 0
cmp dword [ebp - 0x13e4], 0xffff
ja 0x46feee
mov dword [ebp - 0xa10], 1
jmp 0x46fef5
and dword [ebp - 0xa10], 0
mov eax, dword [ebp - 0xec]
cmp dword [ebp - 0xa10], eax
je 0x46ff0f
mov dword [ebp - 0x13ec], 1
jmp 0x46ff16
and dword [ebp - 0x13ec], 0
mov eax, dword [ebp - 0xec]
imul eax, dword [ebp - 0x13ec]
cmp eax, 0xfffffff7
jge 0x46ff34
mov dword [ebp - 0xa18], 1
jmp 0x46ff3b
and dword [ebp - 0xa18], 0
push 0
lea ecx, [ebp - 0x1ea4]
call fcn.00429ec8
mov ecx, dword [ebp - 0xa18]
cmp ecx, dword [eax]
jl 0x46ff5e
mov dword [ebp - 0x13f4], 1
jmp 0x46ff65
and dword [ebp - 0x13f4], 0
cmp dword [ebp - 0x13f4], 0xe580
jl 0x46ff7d
mov dword [ebp - 0xa20], 1
jmp 0x46ff84
and dword [ebp - 0xa20], 0
mov eax, dword [ebp - 0xa20]
mov dword [ebp - 0x13fc], eax
mov eax, dword [ebp - 0x13fc]
mov dword [ebp - 0x83c], eax
mov eax, dword [ebp - 0x83c]
mov dword [ebp - 0x1a18], eax
lea ecx, [ebp - 0x1ea4]
call fcn.00429eac
jmp 0x46fdfc
cmp dword [ebp - 0x1008], 0x36a3
jle 0x4700c7
and dword [ebp - 0x728], 0
jmp 0x46ffde
mov eax, dword [ebp - 0x728]
inc eax
mov dword [ebp - 0x728], eax
cmp dword [ebp - 0x728], 0x696a
jge 0x4700c7
and dword [ebp - 0x410], 0
jmp 0x470004
mov eax, dword [ebp - 0x410]
inc eax
mov dword [ebp - 0x410], eax
cmp dword [ebp - 0x410], 0x7df
jge 0x4700c2
and dword [ebp - 0x5d8], 0
jmp 0x47002a
mov eax, dword [ebp - 0x5d8]
inc eax
mov dword [ebp - 0x5d8], eax
cmp dword [ebp - 0x5d8], 0x885
jge 0x4700bd
and dword [ebp - 0x418], 0
jmp 0x470050
mov eax, dword [ebp - 0x418]
inc eax
mov dword [ebp - 0x418], eax
cmp dword [ebp - 0x418], 0x7ff3
jge 0x4700b8
mov eax, dword [ebp - 0x410]
cdq
idiv dword [ebp - 0x5d8]
and edx, dword [ebp - 0x418]
xor edx, dword [ebp - 0x728]
mov eax, edx
cdq
mov dword [ebp - 0x17e4], eax
mov dword [ebp - 0x17e0], edx
push dword [ebp - 0x17e0]
push dword [ebp - 0x17e4]
lea ecx, [ebp - 0x2478]
call fcn.004570e3
pop ecx
pop ecx
mov ecx, eax
call fcn.00402b29
push eax
call fcn.00485265
pop ecx
lea ecx, [ebp - 0x2478]
call fcn.00402916
jmp 0x470043
jmp 0x47001d
jmp 0x46fff7
jmp 0x46ffd1
mov dword [ebp - 0xa40], 0xffab8c3a
mov dword [ebp - 0x2c4], 0
mov dword [ebp - 0x1428], 0x8acc4b7c
mov dword [ebp - 0x1a28], 0xc6d21cd
mov dword [ebp - 0x2084], 0xd64ea33a
mov dword [ebp - 0x20e4], 8
mov dword [ebp - 0x1a30], 0x6d402da3
mov dword [ebp - 0x208c], 0xffffffff
mov dword [ebp - 0x20ec], 0x44653ff
mov dword [ebp - 0x8cc], 0xfff8
mov dword [ebp - 0x420], 0
jmp 0x470144
mov eax, dword [ebp - 0x420]
inc eax
mov dword [ebp - 0x420], eax
cmp dword [ebp - 0x420], 1
jge 0x470160
mov eax, dword [ebp - 0x420]
mov dword [ebp + eax*4 - 0x2094], 7
jmp 0x470137
mov eax, dword [ebp - 0x2c4]
cmp dword [ebp - 0x2c4], eax
jge 0x47017a
mov dword [ebp - 0xa28], 1
jmp 0x470181
and dword [ebp - 0xa28], 0
mov eax, dword [ebp - 0x2c4]
cmp dword [ebp - 0x2c4], eax
jg 0x47019b
mov dword [ebp - 0x1404], 1
jmp 0x4701a2
and dword [ebp - 0x1404], 0
mov eax, dword [ebp - 0xa28]
cmp eax, dword [ebp - 0x1404]
jg 0x4701bc
mov dword [ebp - 0xa30], 1
jmp 0x4701c3
and dword [ebp - 0xa30], 0
mov eax, dword [ebp - 0x2c4]
cmp dword [ebp - 0xa30], eax
jge 0x4701dd
mov dword [ebp - 0x1418], 1
jmp 0x4701e4
and dword [ebp - 0x1418], 0
mov eax, dword [ebp - 0x1418]
dec eax
cmp eax, 0xfffffff7
jg 0x4701fc
mov dword [ebp - 0xa38], 1
jmp 0x470203
and dword [ebp - 0xa38], 0
cmp dword [ebp - 0xa38], 0x95d1c58b
jbe 0x47021b
mov dword [ebp - 0x1420], 1
jmp 0x470222
and dword [ebp - 0x1420], 0
mov eax, dword [ebp - 0xa40]
cmp dword [ebp - 0x1420], eax
jle 0x47023c
mov dword [ebp - 0x1a20], 1
jmp 0x470243
and dword [ebp - 0x1a20], 0
mov eax, dword [ebp - 0xa40]
mov dword [ebp - 0x20f4], eax
mov dword [ebp - 0x1428], 7
mov eax, dword [ebp - 0x2c4]
cmp dword [ebp - 0x1428], eax
jne 0x470273
mov dword [ebp - 0x1430], 1
jmp 0x47027a
and dword [ebp - 0x1430], 0
mov eax, dword [ebp - 0x1430]
mov dword [ebp - 0x1a28], eax
mov eax, dword [ebp - 0x8cc]
inc eax
mov dword [ebp - 0x8cc], eax
mov eax, dword [ebp - 0x8cc]
mov dword [ebp - 0x1a30], eax
mov dword [ebp - 0x5e0], 0x67a876e6
mov dword [ebp - 0x2f4], 0x4f094650
push 2
lea ecx, [ebp - 0x1e14]
call fcn.00429dda
mov dword [ebp - 0x140], 0
jmp 0x4702d9
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 2
jge 0x4702fb
push dword [ebp - 0x140]
lea ecx, [ebp - 0x1e14]
call fcn.00429ec8
mov dword [eax], 0xfffffff7
jmp 0x4702cc
mov dword [ebp - 0x140], 0
jmp 0x470314
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 3
jge 0x470330
mov eax, dword [ebp - 0x140]
mov dword [ebp + eax*4 - 0x21a0], 0xfffffffe
jmp 0x470307
mov eax, dword [ebp - 0x5e0]
cmp dword [ebp - 0x5e0], eax
jg 0x47034a
mov dword [ebp - 0xa54], 1
jmp 0x470351
and dword [ebp - 0xa54], 0
cmp dword [ebp - 0xa54], 0
jae 0x470366
mov dword [ebp - 0x844], 1
jmp 0x47036d
and dword [ebp - 0x844], 0
mov dword [ebp - 0x2f4], 1
push 0
lea ecx, [ebp - 0x1e14]
call fcn.00429ec8
mov ecx, dword [ebp - 0x844]
mov dword [eax], ecx
mov eax, dword [ebp - 0x2f4]
cmp eax, dword [ebp - 0x844]
jne 0x4703a6
mov dword [ebp - 0xa50], 1
jmp 0x4703ad
and dword [ebp - 0xa50], 0
mov eax, dword [ebp - 0x5e0]
cmp dword [ebp - 0xa50], eax
jg 0x4703ce
push 0xfffffffffffffffa
pop eax
test eax, eax
je 0x4703ce
mov dword [ebp - 0xfe0], 1
jmp 0x4703d5
and dword [ebp - 0xfe0], 0
cmp dword [ebp - 0xfe0], 1
jg 0x4703ea
mov dword [ebp - 0x928], 1
jmp 0x4703f1
and dword [ebp - 0x928], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x928]
mov dword [ebp + eax - 0x21a0], ecx
mov eax, dword [ebp - 0x5e0]
cmp eax, dword [ebp - 0x928]
jne 0x470431
mov dword [ebp - 0x1a38], 0xfffffff9
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1a38]
mov dword [ebp + eax - 0x21a0], ecx
jmp 0x470481
mov dword [ebp - 0x1a40], 0
mov dword [ebp - 0x2f4], 0
jmp 0x470454
mov eax, dword [ebp - 0x2f4]
inc eax
mov dword [ebp - 0x2f4], eax
cmp dword [ebp - 0x2f4], 0
je 0x470481
mov dword [ebp - 0xa58], 0xe0d1b713
mov eax, dword [ebp - 0xa58]
dec eax
mov dword [ebp - 0xa58], eax
cmp dword [ebp - 0x1a40], 0
je 0x47047f
jmp 0x470481
jmp 0x470447
lea ecx, [ebp - 0x1e14]
call fcn.00429eac
mov dword [ebp - 0x364], 0xffffffff
mov dword [ebp - 0x1e8], 0xc9d5fac1
mov dword [ebp - 0xa68], 1
mov dword [ebp - 0x209c], 0xf9a8551b
mov byte [ebp - 0x1c5], 0
movzx eax, byte [ebp - 0x1c5]
test eax, eax
je 0x4704cc
call dword [0xabf2dc]
mov eax, dword [ebp - 0x364]
mov dword [ebp - 0x20fc], eax
mov eax, dword [ebp - 0x364]
mov dword [ebp - 0xa68], eax
mov eax, dword [ebp - 0x364]
sub eax, dword [ebp - 0x1e8]
add eax, 8
cmp eax, 0x8b35edad
ja 0x470506
mov dword [ebp - 0x12a8], 1
jmp 0x47050d
and dword [ebp - 0x12a8], 0
mov eax, dword [ebp - 0x1e8]
cmp dword [ebp - 0x12a8], eax
je 0x470527
mov dword [ebp - 0xa60], 1
jmp 0x47052e
and dword [ebp - 0xa60], 0
mov eax, dword [ebp - 0x1e8]
cmp eax, dword [ebp - 0xa60]
jl 0x470548
mov dword [ebp - 0x1a48], 1
jmp 0x47054f
and dword [ebp - 0x1a48], 0
mov eax, 0xe3cb
sub eax, dword [ebp - 0x1e8]
imul eax, dword [ebp - 0x1e8]
cmp eax, dword [ebp - 0x1e8]
je 0x470575
mov dword [ebp - 0xfe8], 1
jmp 0x47057c
and dword [ebp - 0xfe8], 0
mov eax, dword [ebp - 0x364]
cmp dword [ebp - 0xfe8], eax
jl 0x47058e
xor eax, eax
je 0x4705a3
cmp dword [ebp - 0xa68], 0
je 0x4705a3
mov dword [ebp - 0x1518], 1
jmp 0x4705aa
and dword [ebp - 0x1518], 0
mov eax, dword [ebp - 0x1518]
sub eax, dword [ebp - 0x364]
mov dword [ebp - 0x1e8], eax
mov dword [ebp - 0x16b8], 0xab0390
mov dword [ebp - 0x428], 0x51d69f42
push 2
lea ecx, [ebp - 0x15bc]
call fcn.00429dda
mov dword [ebp - 0xff0], 2
push 3
lea ecx, [ebp - 0x15b0]
call fcn.00429dda
mov dword [ebp - 0xa78], 0xfffa
mov dword [ebp - 0xf4], 0
jmp 0x470617
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 2
jge 0x470639
push dword [ebp - 0xf4]
lea ecx, [ebp - 0x15bc]
call fcn.00429ec8
mov dword [eax], 0xfffffffd
jmp 0x47060a
mov dword [ebp - 0xf4], 0
jmp 0x470652
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 3
jge 0x470674
push dword [ebp - 0xf4]
lea ecx, [ebp - 0x15b0]
call fcn.00429ec8
mov dword [eax], 0xffff
jmp 0x470645
mov esi, dword [ebp - 0x428]
add esi, dword [ebp - 0x428]
push 1
lea ecx, [ebp - 0x15bc]
call fcn.00429ec8
mov dword [eax], esi
xor eax, eax
inc eax
je 0x4706a9
cmp dword [ebp - 0xff0], 0
je 0x4706a9
mov dword [ebp - 0xa70], 1
jmp 0x4706b0
and dword [ebp - 0xa70], 0
push 1
lea ecx, [ebp - 0x15bc]
call fcn.00429ec8
mov ecx, dword [ebp - 0xa70]
sub ecx, dword [eax]
je 0x4706d0
cmp dword [ebp - 0x428], 0
jne 0x4706eb
push 1
lea ecx, [ebp - 0x15bc]
call fcn.00429ec8
cmp dword [eax], 0
jne 0x4706eb
and dword [ebp - 0x1a50], 0
jmp 0x4706f5
mov dword [ebp - 0x1a50], 1
mov eax, dword [ebp - 0xff0]
mov dword [ebp - 0x20a4], eax
push 2
lea ecx, [ebp - 0x15b0]
call fcn.00429ec8
push 2
lea ecx, [ebp - 0x15b0]
call fcn.00429ec8
push 1
lea ecx, [ebp - 0x15bc]
call fcn.00429ec8
mov esi, eax
push 2
lea ecx, [ebp - 0x15b0]
call fcn.00429ec8
mov ecx, dword [esi]
imul ecx, dword [eax]
neg ecx
mov dword [ebp - 0xa78], ecx
mov eax, dword [ebp - 0xa78]
cmp dword [ebp - 0x428], eax
jl 0x470764