Function at 0x477638
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x668
push esi
mov dword [ebp - 0x18c], 0x643cdf98
mov dword [ebp - 0x284], 0xe63e3155
push 2
lea ecx, [ebp - 0x4dc]
call fcn.0041cf5c
mov dword [ebp - 0x428], 0x14a12652
push 2
lea ecx, [ebp - 0x4d0]
call fcn.0041cf5c
lea eax, [ebp - 0x4dc]
push eax
lea eax, [ebp - 0x3b4]
push eax
call fcn.004224c0
pop ecx
pop ecx
lea eax, [ebp - 0x4d0]
push eax
lea eax, [ebp - 0x3b4]
push eax
call fcn.0042ae3b
pop ecx
pop ecx
push 8
pop eax
test eax, eax
je 0x4776bb
cmp dword [ebp - 0x18c], 0
je 0x4776bb
call fcn.0047754c
jmp 0x477726
mov dword [ebp - 0x410], 1
mov dword [ebp - 0x424], 1
mov dword [ebp - 0x408], 0xe815f842
mov dword [ebp - 0x464], 0x7f59ec13
mov byte [ebp - 0x56], 0
movzx eax, byte [ebp - 0x56]
test eax, eax
je 0x4776f4
call fcn.00422693
lea eax, [ebp - 0x408]
push eax
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0x410]
push eax
lea eax, [ebp - 0x424]
push eax
lea eax, [ebp - 0x284]
push eax
lea eax, [ebp - 0x464]
push eax
call fcn.0042c12b
add esp, 0x18
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0x284]
push eax
lea eax, [ebp - 0x428]
push eax
lea eax, [ebp - 0x4dc]
push eax
lea eax, [ebp - 0x4d0]
push eax
call fcn.0042254b
add esp, 0x14
lea ecx, [ebp - 0x4d0]
call fcn.0041cff8
lea ecx, [ebp - 0x4dc]
call fcn.0041cff8
mov byte [ebp - 0x188], 2
mov byte [ebp - 0x187], 0xfa
mov byte [ebp - 0x186], 4
mov byte [ebp - 0x185], 6
mov byte [ebp - 0x184], 0x19
mov byte [ebp - 0x183], 0x1f
mov byte [ebp - 0x182], 0x62
mov byte [ebp - 0x181], 0x4e
mov byte [ebp - 0x180], 0xbc
mov byte [ebp - 0x17f], 0xe9
mov byte [ebp - 0x17e], 0x68
mov byte [ebp - 0x17d], 0x54
mov byte [ebp - 0x17c], 0xb0
mov byte [ebp - 0x17b], 0x6b
mov byte [ebp - 0x17a], 0x80
mov byte [ebp - 0x179], 0x96
mov byte [ebp - 0x178], 0x31
mov byte [ebp - 0x177], 0x76
mov byte [ebp - 0x176], 0x8b
mov byte [ebp - 0x175], 0xd8
mov byte [ebp - 0x174], 0xd4
mov byte [ebp - 0x173], 0xdf
mov byte [ebp - 0x172], 0x96
mov byte [ebp - 0x171], 0x33
mov byte [ebp - 0x170], 0x7e
mov byte [ebp - 0x16f], 0xc0
mov byte [ebp - 0x16e], 0x40
mov byte [ebp - 0x16d], 0xac
mov byte [ebp - 0x16c], 0x99
mov byte [ebp - 0x16b], 0x97
mov byte [ebp - 0x16a], 0x7d
mov byte [ebp - 0x169], 0x5e
mov byte [ebp - 0x168], 0x3a
mov byte [ebp - 0x167], 0x4a
mov byte [ebp - 0x166], 0x19
mov byte [ebp - 0x165], 0x32
mov byte [ebp - 0x164], 0xfc
mov byte [ebp - 0x163], 0xaf
mov byte [ebp - 0x162], 0xa7
mov byte [ebp - 0x161], 0x64
mov byte [ebp - 0x160], 6
mov byte [ebp - 0x15f], 0x8a
mov byte [ebp - 0x15e], 0x25
mov byte [ebp - 0x15d], 0xec
mov byte [ebp - 0x15c], 0xe5
mov byte [ebp - 0x15b], 0x93
mov byte [ebp - 0x15a], 0x6c
mov byte [ebp - 0x159], 0x73
mov byte [ebp - 0x158], 0x35
mov byte [ebp - 0x157], 0x76
mov byte [ebp - 0x156], 0xc6
mov byte [ebp - 0x155], 0x73
mov byte [ebp - 0x154], 0x55
mov byte [ebp - 0x153], 0xee
mov byte [ebp - 0x152], 0x2d
mov byte [ebp - 0x151], 0xb2
mov byte [ebp - 0x150], 0x80
mov byte [ebp - 0x14f], 0xdb
mov byte [ebp - 0x14e], 0x1e
mov byte [ebp - 0x14d], 0xaf
mov byte [ebp - 0x14c], 0x27
mov byte [ebp - 0x14b], 0x78
mov byte [ebp - 0x14a], 3
mov byte [ebp - 0x149], 0xa9
mov byte [ebp - 0x148], 0xcd
mov byte [ebp - 0x147], 0x14
mov byte [ebp - 0x146], 0x89
mov byte [ebp - 0x145], 0xeb
mov byte [ebp - 0x144], 0x59
mov byte [ebp - 0x143], 0xfe
mov byte [ebp - 0x142], 0x86
mov byte [ebp - 0x141], 0x77
mov byte [ebp - 0x140], 7
mov byte [ebp - 0x13f], 0x78
mov byte [ebp - 0x13e], 0xa7
mov byte [ebp - 0x13d], 0xb7
mov byte [ebp - 0x13c], 0xf3
mov byte [ebp - 0x13b], 0x54
mov byte [ebp - 0x13a], 0x9c
mov byte [ebp - 0x139], 0x60
mov byte [ebp - 0x138], 2
mov byte [ebp - 0x137], 0xb3
mov byte [ebp - 0x136], 0x76
mov byte [ebp - 0x135], 0x98
mov byte [ebp - 0x134], pe_nt_image_headers32
mov byte [ebp - 0x133], 0x7c
mov byte [ebp - 0x132], 0xde
mov byte [ebp - 0x131], 0xa0
mov byte [ebp - 0x130], 0x75
mov byte [ebp - 0x12f], 0x60
mov byte [ebp - 0x12e], 0x7c
mov byte [ebp - 0x12d], 5
mov byte [ebp - 0x12c], 0xba
mov byte [ebp - 0x12b], 0x37
mov byte [ebp - 0x12a], 0x8a
mov byte [ebp - 0x129], 0x18
mov byte [ebp - 0x128], 0xfd
mov byte [ebp - 0x127], 0x6e
mov byte [ebp - 0x126], 0x87
mov byte [ebp - 0x125], 0xba
mov byte [ebp - 0x124], 0xbf
mov byte [ebp - 0x123], 0x50
mov byte [ebp - 0x122], 0x83
mov byte [ebp - 0x121], 0x40
mov byte [ebp - 0x120], 0xb7
mov byte [ebp - 0x11f], 6
mov byte [ebp - 0x11e], 0x1d
mov byte [ebp - 0x11d], 0x12
mov byte [ebp - 0x11c], 0x14
mov byte [ebp - 0x11b], 7
mov byte [ebp - 0x11a], 0x1b
mov byte [ebp - 0x119], 0x10
mov byte [ebp - 0x118], 0x19
mov byte [ebp - 0x117], 0x15
mov byte [ebp - 0x116], 7
mov byte [ebp - 0x115], 0xa
mov byte [ebp - 0x114], 0x1d
mov byte [ebp - 0x113], 0x11
mov byte [ebp - 0x112], 0x19
mov byte [ebp - 0x111], 0x13
mov byte [ebp - 0x110], 6
mov byte [ebp - 0x10f], 3
mov byte [ebp - 0x10e], 0x10
mov byte [ebp - 0x10d], 0xd
mov byte [ebp - 0x10c], 0xa
mov byte [ebp - 0x10b], 0x17
mov byte [ebp - 0x10a], 0x16
mov byte [ebp - 0x109], 5
mov byte [ebp - 0x108], 0x1e
mov byte [ebp - 0x107], 0x16
mov byte [ebp - 0x106], 0x11
mov byte [ebp - 0x105], 1
mov byte [ebp - 0x104], 0x15
mov byte [ebp - 0x103], 8
mov byte [ebp - 0x102], 0xb
mov byte [ebp - 0x101], 0x18
mov byte [ebp - 0x100], 0x10
mov byte [ebp - 0xff], 0xe
mov byte [ebp - 0xfe], 0x16
mov byte [ebp - 0xfd], 0x14
mov byte [ebp - 0xfc], 0x1a
mov byte [ebp - 0xfb], 9
mov byte [ebp - 0xfa], 0x1f
mov byte [ebp - 0xf9], 0xc
mov byte [ebp - 0xf8], 7
mov byte [ebp - 0xf7], 0xb
mov byte [ebp - 0xf6], 1
mov byte [ebp - 0xf5], 0
mov byte [ebp - 0xf4], 0xd
mov byte [ebp - 0xf3], 0xf
mov byte [ebp - 0xf2], 0x11
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xa0], 7
mov dword [ebp - 0x37c], 0x356a0b34
mov dword [ebp - 0x2b0], 0
mov dword [ebp - 0x1b0], 0xfffffff6
mov dword [ebp - 0x94], 0x9a31c0a9
mov dword [ebp - 0x1f8], 0x663c10b4
mov dword [ebp - 0xc8], 0
jmp 0x477be7
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 2
jge 0x477c03
mov eax, dword [ebp - 0xc8]
mov dword [ebp + eax*4 - 0x550], 0x6d8f9c32
jmp 0x477bda
mov dword [ebp - 0x37c], 0
cmp dword [ebp - 0x37c], 0x6a47
jne 0x477c25
mov dword [ebp - 0x390], 1
jmp 0x477c2c
and dword [ebp - 0x390], 0
mov eax, dword [ebp - 0x390]
mov dword [ebp - 0x2b0], eax
mov eax, dword [ebp - 0x2b0]
mov dword [ebp - 0x1b0], eax
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x62c], eax
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x534], eax
cmp dword [ebp - 0xa0], 1
jl 0x477c71
mov dword [ebp - 0x400], 1
jmp 0x477c78
and dword [ebp - 0x400], 0
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x53c], eax
cmp dword [ebp - 0xa0], 0xffff
jbe 0x477ca2
cmp dword [ebp - 0x1b0], 0
jne 0x477ca2
and dword [ebp - 0x374], 0
jmp 0x477cac
mov dword [ebp - 0x374], 1
mov eax, dword [ebp - 0xa8]
cmp dword [ebp - 0x374], eax
jle 0x477cc6
mov dword [ebp - 0x1d0], 1
jmp 0x477ccd
and dword [ebp - 0x1d0], 0
mov eax, dword [ebp - 0x94]
cmp dword [ebp - 0x1d0], eax
jne 0x477ce7
mov dword [ebp - 0x378], 1
jmp 0x477cee
and dword [ebp - 0x378], 0
mov eax, dword [ebp - 0x94]
cmp dword [ebp - 0x378], eax
jne 0x477d08
mov dword [ebp - 0x1b8], 1
jmp 0x477d0f
and dword [ebp - 0x1b8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1b8]
mov dword [ebp + eax - 0x550], ecx
cmp dword [ebp - 0x1b8], 0xea3d8810
jbe 0x477d43
mov eax, 0xedf47f28
test eax, eax
je 0x477d43
mov dword [ebp - 0x1d8], 1
jmp 0x477d4a
and dword [ebp - 0x1d8], 0
mov eax, dword [ebp - 0xa8]
sub eax, dword [ebp - 0x1d8]
jne 0x477d68
push 0xfffffffffffffffc
pop eax
test eax, eax
jne 0x477d68
and dword [ebp - 0x2b8], 0
jmp 0x477d72
mov dword [ebp - 0x2b8], 1
cmp dword [ebp - 0x2b8], 0x91
jl 0x477d8a
mov dword [ebp - 0x1e0], 1
jmp 0x477d91
and dword [ebp - 0x1e0], 0
mov eax, dword [ebp - 0x94]
cmp dword [ebp - 0x1e0], eax
jg 0x477dab
mov dword [ebp - 0x328], 1
jmp 0x477db2
and dword [ebp - 0x328], 0
mov eax, dword [ebp - 0x328]
lea eax, [eax*4 + 0x75b2f514]
test eax, eax
jne 0x477dcf
mov dword [ebp - 0x1e8], 1
jmp 0x477dd6
and dword [ebp - 0x1e8], 0
mov eax, dword [ebp - 0x94]
cmp dword [ebp - 0x1e8], eax
jle 0x477df0
mov dword [ebp - 0x2c0], 1
jmp 0x477df7
and dword [ebp - 0x2c0], 0
cmp dword [ebp - 0x2c0], 0xf947f9f4
ja 0x477e0f
mov dword [ebp - 0x1f0], 1
jmp 0x477e16
and dword [ebp - 0x1f0], 0
cmp dword [ebp - 0x1f0], 1
je 0x477e2b
mov dword [ebp - 0x360], 1
jmp 0x477e32
and dword [ebp - 0x360], 0
mov eax, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0xa0]
add ecx, dword [ebp - 0x360]
imul eax, ecx
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 0
je 0x477e65
lea eax, [ebp - 0x94]
push eax
call fcn.00422c9e
pop ecx
jmp 0x477e6a
call fcn.00477061
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x188]
or eax, 0x99
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x188]
and ecx, 0x99
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x188]
mov byte [ebp + ecx - 0x520], al
mov dword [ebp - 0xdc], 0x3ae35568
mov dword [ebp - 0xdc], 0
jmp 0x477ecb
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0x16
je 0x477f22
mov dword [ebp - 0xe4], 0
jmp 0x477eed
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 2
jge 0x477f09
mov eax, dword [ebp - 0xe4]
mov dword [ebp + eax*4 - 0x55c], 0xffffffff
jmp 0x477ee0
call fcn.00477083
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x55c], 0
je 0x477f20
jmp 0x477f22
jmp 0x477ebe
mov dword [ebp - 8], 2
and dword [ebp - 0x80], 0
jmp 0x477f37
mov eax, dword [ebp - 8]
inc eax
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0x97
jae 0x4787aa
mov dword [ebp - 0xc], 2
mov dword [ebp - 0x38c], 0xfffffff6
push 4
lea ecx, [ebp - 0x47c]
call fcn.0041cf5c
mov dword [ebp - 0x210], 2
mov dword [ebp - 0x544], 0x1372625a
mov dword [ebp - 0x90], 0
jmp 0x477f8f
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 2
jge 0x477fa8
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0x68], 0x75dcec3d
jmp 0x477f82
lea eax, [ebp - 0x47c]
push eax
lea eax, [ebp - 0x90]
push eax
call fcn.004226c6
pop ecx
pop ecx
mov dword [ebp - 0xc], 0
jmp 0x477fcd
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 1
jg 0x4781d5
mov dword [ebp - 0x194], 0xfffffffa
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x68]
mov dword [ebp - 0x570], eax
mov eax, dword [ebp - 0xc]
cmp dword [ebp + eax*4 - 0x68], 0xfffffff9
jbe 0x478004
mov dword [ebp - 0x2c8], 1
jmp 0x47800b
and dword [ebp - 0x2c8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x68]
cmp dword [ebp - 0x2c8], eax
jge 0x478029
mov dword [ebp - 0x200], 1
jmp 0x478030
and dword [ebp - 0x200], 0
mov eax, dword [ebp - 0xc]
imul eax, dword [ebp - 0x200]
mov ecx, dword [ebp - 0xc]
cmp eax, dword [ebp + ecx*4 - 0x68]
jge 0x47804f
mov dword [ebp - 0x330], 1
jmp 0x478056
and dword [ebp - 0x330], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x68]
cmp dword [ebp - 0x330], eax
jge 0x478074
mov dword [ebp - 0x208], 1
jmp 0x47807b
and dword [ebp - 0x208], 0
cmp dword [ebp - 0x208], 0
jb 0x478090
mov dword [ebp - 0x3a8], 1
jmp 0x478097
and dword [ebp - 0x3a8], 0
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x578], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x68], 1
jl 0x4780b9
mov dword [ebp - 0x2d0], 1
jmp 0x4780c0
and dword [ebp - 0x2d0], 0
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x68]
mov dword [ebp - 0x38c], eax
mov eax, dword [ebp - 0xc]
mov esi, dword [ebp + eax*4 - 0x68]
add esi, dword [ebp - 0x2d0]
push 3
lea ecx, [ebp - 0x47c]
call fcn.0041cffd
add esi, dword [eax]
mov dword [ebp - 0x210], esi
mov eax, dword [ebp - 0x210]
cmp dword [ebp - 0x38c], eax
jl 0x478109
mov dword [ebp - 0x218], 1
jmp 0x478110
and dword [ebp - 0x218], 0
mov eax, dword [ebp - 0xc]
imul ecx, dword [ebp - 0x218], 3
mov edx, dword [ebp - 0xc]
add ecx, dword [ebp + edx*4 - 0x68]
cmp dword [ebp + eax*4 - 0x68], ecx
je 0x478133
mov dword [ebp - 0x1c0], 1
jmp 0x47813a
and dword [ebp - 0x1c0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1c0]
mov dword [ebp + eax - 0x68], ecx
cmp dword [ebp - 0x1c0], 0x6e83
jle 0x478162
mov dword [ebp - 0x2d8], 1
jmp 0x478169
and dword [ebp - 0x2d8], 0
push 3
lea ecx, [ebp - 0x47c]
call fcn.0041cffd
mov ecx, dword [ebp - 0x2d8]
add ecx, dword [eax]
cmp ecx, dword [ebp - 0x194]
jle 0x478192
mov dword [ebp - 0x220], 1
jmp 0x478199
and dword [ebp - 0x220], 0
mov eax, dword [ebp - 0x194]
cmp dword [ebp - 0x220], eax
je 0x4781ba
mov eax, dword [ebp - 0xc]
cmp dword [ebp + eax*4 - 0x68], 0
jne 0x4781ba
and dword [ebp - 0x338], 0
jmp 0x4781c4
mov dword [ebp - 0x338], 1
mov eax, dword [ebp - 0x338]
mov dword [ebp - 0x194], eax
jmp 0x477fc6
lea ecx, [ebp - 0x47c]
call fcn.0041cff8
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x188]
lea eax, [eax + eax + 2]
cmp dword [ebp - 8], eax
jne 0x478630
call fcn.004770a6
mov eax, dword [ebp - 8]
movzx eax, byte [ebp + eax - 0x188]
inc eax
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x78], 0xffffffff
mov dword [ebp - 0x580], 8
mov dword [ebp - 0x588], 0x414b58e1
mov dword [ebp - 0x590], 0x245c8100
mov dword [ebp - 0x470], 0xa90611bc
mov dword [ebp - 0x598], 0x3d0bb94d
mov dword [ebp - 0x5a0], 0
push 1
lea ecx, [ebp - 0x5f0]
call fcn.0041cf5c
mov dword [ebp - 0x5a8], 0xaae0
mov dword [ebp - 0x460], 0xbebf3b8c
mov dword [ebp - 0x8c], 0
jmp 0x47828c
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 2
jge 0x4782a8
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0x388], 0xfffffffb
jmp 0x47827f
lea eax, [ebp - 0x5f0]
push eax
lea eax, [ebp - 0x8c]
push eax
call fcn.00429a80
pop ecx
pop ecx
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x388], 0
je 0x4785e1
mov dword [ebp - 0x28], 0xb0647dc4
mov dword [ebp - 0x3c], 0xab3921de
mov dword [ebp - 0x368], 0x39f3faa3
mov dword [ebp - 0xac], 0
jmp 0x478302
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 3
jge 0x47831e
mov eax, dword [ebp - 0xac]
mov dword [ebp + eax*4 - 0x5e0], 0xfffffffb
jmp 0x4782f5
mov dword [ebp - 0x28], 1
jmp 0x47832e
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jl 0x478480
mov dword [ebp - 0x5b0], 0
mov dword [ebp - 0x438], 0x39bf5bf8
mov dword [ebp - 0xb0], 0
jmp 0x478365
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 3
jge 0x478381
mov eax, dword [ebp - 0xb0]
mov dword [ebp + eax*4 - 0x4b8], 0xfe64fd9e
jmp 0x478358
lea eax, [ebp - 0x460]
push eax
call fcn.0042231a
pop ecx
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x4b8]
cmp dword [ebp + eax - 0x4b8], ecx
jne 0x4783b6
mov dword [ebp - 0x228], 1
jmp 0x4783bd
and dword [ebp - 0x228], 0
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0x388]
cmp eax, dword [ebp - 0x228]
je 0x4783db
mov dword [ebp - 0x3bc], 1
jmp 0x4783e2
and dword [ebp - 0x3bc], 0
mov eax, dword [ebp - 0x438]
mov dword [ebp - 0x5b8], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x5c0], eax
mov eax, dword [ebp - 0x28]
cmp dword [ebp + eax*4 - 0x388], 0
je 0x478416
cmp dword [ebp - 0x3c], 0
je 0x478416
mov dword [ebp - 0x2e0], 1
jmp 0x47841d
and dword [ebp - 0x2e0], 0
cmp dword [ebp - 0x2e0], 0x2811
jg 0x478435
mov dword [ebp - 0x3c4], 1
jmp 0x47843c
and dword [ebp - 0x3c4], 0
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x5c8], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x388], 0
jb 0x478461
mov dword [ebp - 0x230], 1
jmp 0x478468
and dword [ebp - 0x230], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x230]
mov dword [ebp + eax - 0x4b8], ecx
jmp 0x478327
mov dword [ebp - 0x3c], 1
jmp 0x478490
mov eax, dword [ebp - 0x3c]
dec eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
jl 0x4785df
mov dword [ebp - 0x468], 0xb54
mov dword [ebp - 0x78], 0
jmp 0x4784b4
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 2
jg 0x4785da
mov dword [ebp - 0x3cc], 0xfffffff7
call fcn.00477562
mov dword [ebp - 0x368], 4
cmp dword [ebp - 0x368], 0x42fafece
je 0x4784f8
mov eax, 0xffff
test eax, eax
je 0x4784f8
mov dword [ebp - 0x238], 1
jmp 0x4784ff
and dword [ebp - 0x238], 0
mov eax, dword [ebp - 0x238]
mov dword [ebp - 0x28], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x5e0]
cmp eax, dword [ebp - 0x28]
jle 0x478526
mov dword [ebp - 0x2e8], 1
jmp 0x47852d
and dword [ebp - 0x2e8], 0
mov eax, dword [ebp - 0x468]
cmp dword [ebp - 0x2e8], eax
jg 0x47854d
cmp dword [ebp - 0x3cc], 0
jne 0x47854d
and dword [ebp - 0x240], 0
jmp 0x478557
mov dword [ebp - 0x240], 1
mov eax, dword [ebp - 0x470]
cmp dword [ebp - 0x240], eax
jne 0x478571
mov dword [ebp - 0x340], 1
jmp 0x478578
and dword [ebp - 0x340], 0
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x340]
add ecx, 0xfffa
cmp dword [ebp + eax*4 - 0x388], ecx
jl 0x47859c
mov dword [ebp - 0x248], 1
jmp 0x4785a3
and dword [ebp - 0x248], 0
cmp dword [ebp - 0x248], 0xd5dd
jne 0x4785bb
mov dword [ebp - 0x2f0], 1
jmp 0x4785c2
and dword [ebp - 0x2f0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2f0]
mov dword [ebp + eax - 0x5e0], ecx
jmp 0x4784ad
jmp 0x478489
jmp 0x4785f4
mov dword [ebp - 0x3d4], 0x8336
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x3d4], eax
lea ecx, [ebp - 0x5f0]
call fcn.0041cff8
mov eax, dword [ebp - 8]
movzx eax, byte [ebp + eax - 0x188]
mov ecx, dword [ebp - 8]
lea eax, [ecx + eax - 1]
mov dword [ebp - 8], eax
mov dword [ebp - 0x444], 0xb26bdde0
lea eax, [ebp - 0x444]
push eax
call fcn.00477354
pop ecx
jmp 0x477f2f
mov dword [ebp - 0xd8], 8
mov dword [ebp - 0xd8], 0
jmp 0x478653
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 5
jg 0x47871c
push 1
lea ecx, [ebp - 0x4e8]
call fcn.0041cf5c
mov dword [ebp - 0x88], 0x914d2edc
lea eax, [ebp - 0x4e8]
push eax
lea eax, [ebp - 0x5d0]
push eax
call fcn.0042270e
pop ecx
pop ecx
mov dword [ebp - 0x88], 0
jmp 0x4786a5
mov eax, dword [ebp - 0x88]
dec eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
jl 0x4786fe
mov dword [ebp - 0x3e4], 0x196a162c
mov dword [ebp - 0x3dc], 0xffffffff
mov dword [ebp - 0x45c], 0xb5f0b101
lea eax, [ebp - 0x3dc]
push eax
lea eax, [ebp - 0x45c]
push eax
lea eax, [ebp - 0x88]
push eax
lea eax, [ebp - 0x4e8]
push eax
lea eax, [ebp - 0x3e4]
push eax
call fcn.00477578
add esp, 0x14
call fcn.00469bf7
jmp 0x478698
mov byte [ebp - 0x45], 0
lea eax, [ebp - 0x45]
push eax
call fcn.0042bcd2
pop ecx
lea ecx, [ebp - 0x4e8]
call fcn.0041cff8
jmp 0x478646
mov eax, dword [ebp - 8]
movzx eax, byte [ebp + eax - 0x187]
mov ecx, dword [ebp - 8]
sub ecx, dword [ebp - 0x80]
movzx ecx, byte [ebp + ecx - 0x18a]
movsx ecx, byte [ebp + ecx - 0x520]
add eax, ecx
mov ecx, dword [ebp - 8]
movzx ecx, byte [ebp + ecx - 0x187]
mov edx, dword [ebp - 8]
sub edx, dword [ebp - 0x80]
movzx edx, byte [ebp + edx - 0x18a]
movsx edx, byte [ebp + edx - 0x520]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 8]
movzx ecx, byte [ebp + ecx - 0x187]
mov edx, dword [ebp - 8]
sub edx, dword [ebp - 0x80]
movzx edx, byte [ebp + edx - 0x18a]
movsx edx, byte [ebp + edx - 0x520]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 8]
movzx ecx, byte [ebp + ecx - 0x188]
mov byte [ebp + ecx - 0x520], al
lea eax, [ebp - 0x80]
push eax
call fcn.0042c32c
pop ecx
jmp 0x477f2f
xor eax, eax
inc eax
imul eax, eax, 0x1a
mov byte [ebp + eax - 0x520], 0
lea eax, [ebp - 0x520]
push eax
lea ecx, [ebp - 0x668]
call fcn.00440a64
push 3
lea ecx, [ebp - 0x4a0]
call fcn.0041cf5c
mov dword [ebp - 0x74], 0x42b9
mov dword [ebp - 0x70], 0x43b8a277
mov dword [ebp - 0x618], 0xf4b3f4b1
mov dword [ebp - 0x620], 0xce1a812c
lea eax, [ebp - 0x4a0]
push eax
lea eax, [ebp - 0x638]
push eax
call fcn.00422aaf
pop ecx
pop ecx
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x4a0]
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.004220fa
add esp, 0xc
mov dword [ebp - 0x70], 0xffffffe2
jmp 0x478835
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 6
jge 0x4788ac
mov dword [ebp - 0x3ec], 0x785734cb
mov dword [ebp - 0x524], 0xffffffff
mov dword [ebp - 0x5ac], 0x42c512dc
mov dword [ebp - 0x46c], 0xb9ba5e0b
mov dword [ebp - 0x74], 0
jmp 0x478873
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0x13
jg 0x47889c
mov dword [ebp - 0x530], 0xe0cd
mov dword [ebp - 0x44c], 0
lea eax, [ebp - 0x44c]
push eax
call fcn.0042231a
pop ecx
jmp 0x47886c
xor eax, eax
sub eax, dword [ebp - 0x3ec]
mov dword [ebp - 0x46c], eax
jmp 0x47882e
lea ecx, [ebp - 0x4a0]
call fcn.0041cff8
and dword [ebp - 0xb8], 0
jmp 0x4788cd
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0x1b
jae 0x478aee
mov dword [ebp - 0x19c], 0xe21a
mov dword [ebp - 0x2c], 0
jmp 0x4788f4
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jge 0x478907
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x7c], 0xffff
jmp 0x4788ed
mov dword [ebp - 0x2c], 0
jmp 0x478917
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 4
jge 0x47892d
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x3a4], 0xffffffff
jmp 0x478910
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x3a4], 0
jmp 0x47895b
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3a4]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x3a4], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x3a4], 0
jl 0x478ad6
mov dword [ebp - 0x1ac], 0x4edf6b3e
mov dword [ebp - 0x258], 0xbf90350d
mov dword [ebp - 0x454], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3a4]
mov eax, dword [ebp + eax*4 - 0x7c]
mov dword [ebp - 0x624], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3a4]
mov eax, dword [ebp + eax*4 - 0x7c]
mov dword [ebp - 0x538], eax
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x5b4], eax
cmp dword [ebp - 0x1ac], 0xfffffffd
ja 0x4789f0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3a4]
cmp dword [ebp + eax*4 - 0x7c], 0
je 0x4789f0
mov dword [ebp - 0x250], 1
jmp 0x4789f7
and dword [ebp - 0x250], 0
mov dword [ebp - 0x19c], 1
mov eax, dword [ebp - 0x19c]
cmp eax, dword [ebp - 0x250]
jne 0x478a1b
mov dword [ebp - 0x380], 1
jmp 0x478a22
and dword [ebp - 0x380], 0
mov eax, dword [ebp - 0x1ac]
add eax, dword [ebp - 0x380]
mov dword [ebp - 0x258], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3a4]
cmp dword [ebp - 0x258], eax
jne 0x478a55
mov dword [ebp - 0x2f8], 1
jmp 0x478a5c
and dword [ebp - 0x2f8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3a4]
push 4
pop ecx
shl ecx, 0
mov edx, dword [ebp - 0x2f8]
sub edx, dword [ebp + ecx - 0x3a4]
cmp dword [ebp + eax*4 - 0x7c], edx
jle 0x478a8e
mov dword [ebp - 0x3f4], 1
jmp 0x478a95
and dword [ebp - 0x3f4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3a4]
cmp dword [ebp + eax*4 - 0x7c], 1
jl 0x478abb
cmp dword [ebp - 0x19c], 0
jne 0x478abb
and dword [ebp - 0x260], 0
jmp 0x478ac5
mov dword [ebp - 0x260], 1
mov eax, dword [ebp - 0x260]
mov dword [ebp - 0x454], eax
jmp 0x478940
call fcn.00477483
mov eax, dword [ebp - 0xb8]
mov byte [ebp + eax - 0x520], 0
jmp 0x4788c0
mov dword [ebp - 0x10], 0xbac64a68
mov dword [ebp - 0x44], 1
mov dword [ebp - 0x3ac], 7
mov dword [ebp - 0x540], 0xcf62392e
push 2
lea ecx, [ebp - 0x488]
call fcn.0041cf5c
mov dword [ebp - 0x450], 0x9219
mov dword [ebp - 0x288], 1
mov dword [ebp - 0x458], 0xaa88d180
lea eax, [ebp - 0x488]
push eax
lea eax, [ebp - 0x604]
push eax
call fcn.0042228a
pop ecx
pop ecx
mov dword [ebp - 0x10], 0
jmp 0x478b60
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 1
je 0x478b9a
mov dword [ebp - 0x43c], 0xe58bfc4f
mov dword [ebp - 0x3fc], 0x88586fd5
lea eax, [ebp - 0x3fc]
push eax
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x43c]
push eax
lea eax, [ebp - 0x44]
push eax
call fcn.00422af7
add esp, 0x10
jmp 0x478b59
mov dword [ebp - 0x10], 0
jmp 0x478baa
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0x1d
jg 0x478fce
mov dword [ebp - 0x440], 0xffffffff
push 2
lea ecx, [ebp - 0x434]
call fcn.0041cf5c
mov dword [ebp - 0x1bc], 0x453d1dd1
lea eax, [ebp - 0x434]
push eax
lea eax, [ebp - 0x548]
push eax
call fcn.00422bac
pop ecx
pop ecx
mov dword [ebp - 0x44], 0
jmp 0x478bfa
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 7
jge 0x478ea6
mov dword [ebp - 0x84], 0xffffffff
mov dword [ebp - 0x5bc], 0x4085efbe
mov dword [ebp - 0x554], 0x6066fa41
mov dword [ebp - 0x628], 0xd2125954
mov dword [ebp - 0x560], 0xfffffff9
push 2
lea ecx, [ebp - 0x600]
call fcn.0041cf5c
lea eax, [ebp - 0x600]
push eax
lea eax, [ebp - 0x5c4]
push eax
call fcn.004222d2
pop ecx
pop ecx
mov dword [ebp - 0x84], 0
jmp 0x478c71
mov eax, dword [ebp - 0x84]
dec eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0xffffffec
jne 0x478e89
mov dword [ebp - 0xc0], 0x2a284868
mov dword [ebp - 0xd0], 0
jmp 0x478ca1
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 1
jge 0x478cba
mov eax, dword [ebp - 0xd0]
mov dword [ebp + eax*4 - 0x6c], 0xb780
jmp 0x478c94
mov dword [ebp - 0xc0], 0
jmp 0x478cd3
mov eax, dword [ebp - 0xc0]
dec eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0
jl 0x478e84
mov dword [ebp - 0x34], 0x938f738f
mov dword [ebp - 0x448], 0xfffffff7
mov dword [ebp - 0x34], 0
jmp 0x478d01
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jl 0x478e7f
mov dword [ebp - 0x404], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp + eax*4 - 0x6c], 0
je 0x478e1b
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x6c], 0
je 0x478e1b
mov eax, dword [ebp - 0x404]
mov dword [ebp - 0x56c], eax
mov eax, 0x879a2734
inc eax
cmp dword [ebp - 0x34], eax
jg 0x478d57
mov dword [ebp - 0x348], 1
jmp 0x478d5e
and dword [ebp - 0x348], 0
mov eax, dword [ebp - 0x440]
cmp dword [ebp - 0x348], eax
je 0x478d78
mov dword [ebp - 0x268], 1
jmp 0x478d7f
and dword [ebp - 0x268], 0
cmp dword [ebp - 0x268], 0xffffffff
je 0x478d94
mov dword [ebp - 0x300], 1
jmp 0x478d9b
and dword [ebp - 0x300], 0
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp + eax*4 - 0x6c]
cmp dword [ebp - 0x300], eax
je 0x478dba
push 0xfffffffffffffff7
pop eax
test eax, eax
jne 0x478dba
and dword [ebp - 0x270], 0
jmp 0x478dc4
mov dword [ebp - 0x270], 1
push 1
lea ecx, [ebp - 0x434]
call fcn.0041cffd
mov ecx, dword [ebp - 0x270]
mov dword [eax], ecx
cmp dword [ebp - 0x44], 0
je 0x478df2
push 0xfffffffffffffffe
pop eax
test eax, eax
je 0x478df2
mov dword [ebp - 0x40c], 1
jmp 0x478df9
and dword [ebp - 0x40c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6c]
mov dword [ebp - 0x614], eax
cmp dword [ebp - 0x10], 0
je 0x478e1b
mov dword [ebp - 0x370], 1
jmp 0x478e22
and dword [ebp - 0x370], 0
mov eax, dword [ebp - 0x84]
cmp dword [ebp - 0x370], eax
jg 0x478e3c
mov dword [ebp - 0x278], 1
jmp 0x478e43
and dword [ebp - 0x278], 0
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp + eax*4 - 0x6c]
cmp eax, dword [ebp - 0x278]
jl 0x478e67
mov eax, 0x9069002f
test eax, eax
je 0x478e67
mov dword [ebp - 0x308], 1
jmp 0x478e6e
and dword [ebp - 0x308], 0
mov eax, dword [ebp - 0x308]
mov dword [ebp - 0x448], eax
jmp 0x478cfa
jmp 0x478cc6
jmp 0x478c64
lea eax, [ebp - 0x1bc]
push eax
call fcn.0042231a
pop ecx
lea ecx, [ebp - 0x600]
call fcn.0041cff8
jmp 0x478bf3
mov eax, dword [ebp - 0x288]
mov dword [ebp - 0x574], eax
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x44]
cmp dword [ebp - 0x1bc], eax
jne 0x478ecd
mov dword [ebp - 0x414], 1
jmp 0x478ed4
and dword [ebp - 0x414], 0
mov eax, dword [ebp - 0x450]
mov dword [ebp - 0x5cc], eax
cmp dword [ebp - 0x1bc], 0x54c1
jl 0x478ef8
mov dword [ebp - 0x280], 1
jmp 0x478eff
and dword [ebp - 0x280], 0
cmp dword [ebp - 0x280], 1
je 0x478f14
mov dword [ebp - 0x350], 1
jmp 0x478f1b
and dword [ebp - 0x350], 0
push 1
lea ecx, [ebp - 0x488]
call fcn.0041cffd
mov ecx, dword [ebp - 0x350]
cmp ecx, dword [eax]
jl 0x478f3e
mov dword [ebp - 0x420], 1
jmp 0x478f45
and dword [ebp - 0x420], 0
push 0
lea ecx, [ebp - 0x434]
call fcn.0041cffd
mov eax, dword [ebp - 0x458]
mov dword [ebp - 0x57c], eax
push 1
lea ecx, [ebp - 0x434]
call fcn.0041cffd
mov ecx, dword [ebp - 0x288]
cmp dword [eax], ecx
jne 0x478f81
mov dword [ebp - 0x310], 1
jmp 0x478f88
and dword [ebp - 0x310], 0
push 1
lea ecx, [ebp - 0x488]
call fcn.0041cffd
mov ecx, dword [ebp - 0x310]
cmp ecx, dword [eax]
jg 0x478fab
mov dword [ebp - 0x290], 1
jmp 0x478fb2
and dword [ebp - 0x290], 0
mov eax, dword [ebp - 0x290]
mov dword [ebp - 0x3ac], eax
lea ecx, [ebp - 0x434]
call fcn.0041cff8
jmp 0x478ba3
lea ecx, [ebp - 0x488]
call fcn.0041cff8
push 0xab64ac
lea ecx, [ebp - 0x650]
call fcn.00440a64
push 1
lea ecx, [ebp - 0x494]
call fcn.0041cf5c
push 4
lea ecx, [ebp - 0x4ac]
call fcn.0041cf5c
mov dword [ebp - 0x318], 0
push 3
lea ecx, [ebp - 0x4f4]
call fcn.0041cf5c
mov dword [ebp - 0x5c], 0
jmp 0x47902a
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 1
jge 0x479043
push dword [ebp - 0x5c]
lea ecx, [ebp - 0x494]
call fcn.0041cffd
and dword [eax], 0
jmp 0x479023
lea eax, [ebp - 0x4ac]
push eax
lea eax, [ebp - 0x5c]
push eax
call fcn.00422e08
pop ecx
pop ecx
lea eax, [ebp - 0x4f4]
push eax
lea eax, [ebp - 0x5c]
push eax
call fcn.0042aa3c
pop ecx
pop ecx
push 3
lea ecx, [ebp - 0x4ac]
call fcn.0041cffd
mov dword [ebp - 0x394], eax
push 0
lea ecx, [ebp - 0x494]
call fcn.0041cffd
mov ecx, dword [ebp - 0x394]
mov eax, dword [eax]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x494]
call fcn.0041cffd
mov ecx, dword [ebp - 0x394]
mov eax, dword [eax]
cmp eax, dword [ecx]
jg 0x4790b6
mov dword [ebp - 0x298], 1
jmp 0x4790bd
and dword [ebp - 0x298], 0
mov eax, dword [ebp - 0x298]
mov dword [ebp - 0x318], eax
mov esi, dword [ebp - 0x318]
push 1
lea ecx, [ebp - 0x4f4]
call fcn.0041cffd
mov dword [eax], esi
lea ecx, [ebp - 0x4f4]
call fcn.0041cff8
lea ecx, [ebp - 0x4ac]
call fcn.0041cff8
lea ecx, [ebp - 0x494]
call fcn.0041cff8
mov dword [ebp - 0xa4], 0
mov dword [ebp - 0x98], 7
mov dword [ebp - 0x2a0], 0x356a0b34
mov dword [ebp - 0x2a8], 0
mov dword [ebp - 0x1a4], 0xfffffff6
mov dword [ebp - 0x30], 0x9a31c0a9
mov dword [ebp - 0x214], 0x663c10b4
mov dword [ebp - 0xe0], 0
jmp 0x47915b
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 2
jge 0x479177
mov eax, dword [ebp - 0xe0]
mov dword [ebp + eax*4 - 0x568], 0x6d8f9c32
jmp 0x47914e
mov dword [ebp - 0x2a0], 0
cmp dword [ebp - 0x2a0], 0x6a47
jne 0x479199
mov dword [ebp - 0x358], 1
jmp 0x4791a0
and dword [ebp - 0x358], 0
mov eax, dword [ebp - 0x358]
mov dword [ebp - 0x2a8], eax
mov eax, dword [ebp - 0x2a8]
mov dword [ebp - 0x1a4], eax
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0x630], eax
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x584], eax
cmp dword [ebp - 0x98], 1
jl 0x4791e5
mov dword [ebp - 0x3b0], 1
jmp 0x4791ec
and dword [ebp - 0x3b0], 0
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x5d4], eax
cmp dword [ebp - 0x98], 0xffff
jbe 0x479216
cmp dword [ebp - 0x1a4], 0
jne 0x479216
and dword [ebp - 0x320], 0
jmp 0x479220
mov dword [ebp - 0x320], 1
mov eax, dword [ebp - 0xa4]
cmp dword [ebp - 0x320], eax
jle 0x47923a
mov dword [ebp - 0x1c8], 1
jmp 0x479241
and dword [ebp - 0x1c8], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x1c8], eax
jne 0x479258
mov dword [ebp - 0x1cc], 1
jmp 0x47925f
and dword [ebp - 0x1cc], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x1cc], eax
jne 0x479276
mov dword [ebp - 0x1b4], 1
jmp 0x47927d
and dword [ebp - 0x1b4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1b4]
mov dword [ebp + eax - 0x568], ecx
cmp dword [ebp - 0x1b4], 0xea3d8810
jbe 0x4792b1
mov eax, 0xedf47f28
test eax, eax
je 0x4792b1
mov dword [ebp - 0x1d4], 1
jmp 0x4792b8
and dword [ebp - 0x1d4], 0
mov eax, dword [ebp - 0xa4]
sub eax, dword [ebp - 0x1d4]
jne 0x4792d6
push 0xfffffffffffffffc
pop eax
test eax, eax
jne 0x4792d6
and dword [ebp - 0x1dc], 0
jmp 0x4792e0
mov dword [ebp - 0x1dc], 1
cmp dword [ebp - 0x1dc], 0x91
jl 0x4792f8
mov dword [ebp - 0x1e4], 1
jmp 0x4792ff
and dword [ebp - 0x1e4], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x1e4], eax
jg 0x479316
mov dword [ebp - 0x1ec], 1
jmp 0x47931d
and dword [ebp - 0x1ec], 0
mov eax, dword [ebp - 0x1ec]
lea eax, [eax*4 + 0x75b2f514]
test eax, eax
jne 0x47933a
mov dword [ebp - 0x1f4], 1
jmp 0x479341
and dword [ebp - 0x1f4], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x1f4], eax
jle 0x479358
mov dword [ebp - 0x1fc], 1
jmp 0x47935f
and dword [ebp - 0x1fc], 0
cmp dword [ebp - 0x1fc], 0xf947f9f4
ja 0x479377
mov dword [ebp - 0x204], 1
jmp 0x47937e
and dword [ebp - 0x204], 0
cmp dword [ebp - 0x204], 1
je 0x479393
mov dword [ebp - 0x20c], 1
jmp 0x47939a
and dword [ebp - 0x20c], 0
mov eax, dword [ebp - 0xa4]
mov ecx, dword [ebp - 0x98]
add ecx, dword [ebp - 0x20c]
imul eax, ecx
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 0
je 0x4793e6
mov dword [ebp - 0x30], 0
jmp 0x4793ce
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 1
jg 0x4793e4
mov byte [ebp - 0x35], 0
lea eax, [ebp - 0x35]
push eax
call fcn.004775e1
pop ecx
jmp 0x4793c7
jmp 0x4793f4
mov byte [ebp - 0x57], 0
lea eax, [ebp - 0x57]
push eax
call fcn.004775fe
pop ecx
lea ecx, [ebp - 0x650]
call fcn.0041d130
cmp eax, dword [ebp + 0xc]
je 0x479b6a
mov dword [ebp - 0xb4], 9
mov dword [ebp - 0xb4], 0
jmp 0x47942b
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0x19
je 0x47947a
mov dword [ebp - 0xbc], 0xffffffff
mov byte [ebp - 0x3d], 0
movzx eax, byte [ebp - 0x3d]
test eax, eax
je 0x47944f
call fcn.004774a2
mov dword [ebp - 0xbc], 0xffffffec
jmp 0x479468
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0xb
jle 0x479478
call fcn.004774af
jmp 0x47945b
jmp 0x47941e
lea eax, [ebp - 0x668]
push eax
lea eax, [ebp - 0x3b8]
push eax
call fcn.004774ce
pop ecx
pop ecx
push 0x7339
lea eax, [ebp - 0x650]
push eax
push 0xf27
lea eax, [ebp - 0x3b8]
push eax
lea eax, [ebp - 0x668]
push eax
push 0x25df
push 0
call fcn.0047b470
add esp, 0x1c
mov dword [ebp - 4], 0x151c
mov dword [ebp - 0x14], 6
mov dword [ebp - 0x18], 0x4d07ddbf
mov dword [ebp - 0x4c], 1
mov dword [ebp - 0xc4], 0
jmp 0x4794f2
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 3
jge 0x47950e
mov eax, dword [ebp - 0xc4]
mov dword [ebp + eax*4 - 0xf0], 0x87972e7e
jmp 0x4794e5
mov eax, dword [ebp - 4]
mov dword [ebp - 0x58c], eax
cmp dword [ebp - 4], 0xffffffff
jl 0x479529
mov dword [ebp - 0x21c], 1
jmp 0x479530
and dword [ebp - 0x21c], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x21c], eax
jle 0x479547
mov dword [ebp - 0x224], 1
jmp 0x47954e
and dword [ebp - 0x224], 0
cmp dword [ebp - 4], 1
jbe 0x479566
cmp dword [ebp - 4], 0
je 0x479566
mov dword [ebp - 0x22c], 1
jmp 0x47956d
and dword [ebp - 0x22c], 0
mov eax, dword [ebp - 0x224]
imul eax, dword [ebp - 0x22c]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
sub eax, 0xffff
cmp eax, dword [ebp - 4]
jl 0x47959c
mov eax, 0x96a5
test eax, eax
jne 0x47959c
and dword [ebp - 0x234], 0
jmp 0x4795a6
mov dword [ebp - 0x234], 1
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x234], eax
jg 0x4795bd
mov dword [ebp - 0x23c], 1
jmp 0x4795c4
and dword [ebp - 0x23c], 0
mov eax, dword [ebp - 0x23c]
sub eax, 5
cmp eax, dword [ebp - 0x18]
jle 0x4795de
mov dword [ebp - 0x244], 1
jmp 0x4795e5
and dword [ebp - 0x244], 0
mov eax, dword [ebp - 0x244]
sub eax, 4
jne 0x4795ff
cmp dword [ebp - 4], 0
jne 0x4795ff
and dword [ebp - 0x24c], 0
jmp 0x479609
mov dword [ebp - 0x24c], 1
mov eax, dword [ebp - 0x24c]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x4c], eax
je 0x479626
mov dword [ebp - 0x254], 1
jmp 0x47962d
and dword [ebp - 0x254], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x254], eax
jg 0x479644
mov dword [ebp - 0x25c], 1
jmp 0x47964b
and dword [ebp - 0x25c], 0
imul eax, dword [ebp - 0x25c], 0xd188
sub eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 4]
je 0x479669
mov dword [ebp - 0x3c0], 1
jmp 0x479670
and dword [ebp - 0x3c0], 0
cmp dword [ebp - 4], 0x26b5
jne 0x479685
mov dword [ebp - 0x264], 1
jmp 0x47968c
and dword [ebp - 0x264], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x264], eax
je 0x4796e1
mov dword [ebp - 0x504], 2
mov dword [ebp - 0x500], 2
mov dword [ebp - 0x4fc], 2
mov dword [ebp - 0x4f8], 2
mov dword [ebp - 0x3c8], 0x3b06d9e9
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x504]
mov dword [ebp - 0x3c8], eax
jmp 0x479b65
mov dword [ebp - 0x1c], 1
mov dword [ebp - 0x54], 0x9588dfef
mov dword [ebp - 4], 0
jmp 0x4796ff
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 2
jg 0x479b65
mov dword [ebp - 0xd4], 0xfffc
mov dword [ebp - 0x14], 2
jmp 0x479723
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jl 0x479b58
mov dword [ebp - 0x20], 0x5d01
mov dword [ebp - 0x18], 2
jmp 0x479744
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jl 0x47990e
mov eax, dword [ebp - 4]
cmp dword [ebp + eax*4 - 0xf0], 0
jb 0x4797c4
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0x61c], eax
cmp dword [ebp - 0x1c], 0
je 0x47977f
cmp dword [ebp - 0x4c], 0
je 0x47977f
mov dword [ebp - 0x26c], 1
jmp 0x479786
and dword [ebp - 0x26c], 0
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x26c]
jne 0x4797a3
cmp dword [ebp - 0xd4], 0
jne 0x4797a3
and dword [ebp - 0x274], 0
jmp 0x4797ad
mov dword [ebp - 0x274], 1
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x274]
jne 0x4797c4
mov dword [ebp - 0x27c], 1
jmp 0x4797cb
and dword [ebp - 0x27c], 0
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x27c]
sub ecx, dword [ebp + eax*4 - 0xf0]
cmp ecx, 0x997ec53a
ja 0x4797ef
mov dword [ebp - 0x1c4], 1
jmp 0x4797f6
and dword [ebp - 0x1c4], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x1c4], eax
jl 0x479816
mov eax, 0xb1460dee
test eax, eax
je 0x479816
mov dword [ebp - 0x190], 1
jmp 0x47981d
and dword [ebp - 0x190], 0
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x190]
mov dword [ebp + eax*4 - 0xf0], ecx
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0xf0]
cmp dword [ebp - 0x1c], eax
jge 0x479851
mov dword [ebp - 0x28c], 1
jmp 0x479858
and dword [ebp - 0x28c], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0xf0]
cmp eax, dword [ebp - 0x28c]
je 0x479879
cmp dword [ebp - 0x20], 0
jne 0x479879
and dword [ebp - 0x294], 0
jmp 0x479883
mov dword [ebp - 0x294], 1
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0xf0]
add eax, dword [ebp - 0x294]
cmp eax, 0xfffffffb
jb 0x4798a4
mov dword [ebp - 0x29c], 1
jmp 0x4798ab
and dword [ebp - 0x29c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xf0]
add eax, dword [ebp - 0x29c]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x54], eax
jne 0x4798d4
mov dword [ebp - 0x2a4], 1
jmp 0x4798db
and dword [ebp - 0x2a4], 0
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0xf0]
cmp eax, dword [ebp - 0x2a4]
jle 0x4798f9
mov dword [ebp - 0x2ac], 1
jmp 0x479900
and dword [ebp - 0x2ac], 0
mov eax, dword [ebp - 0x2ac]
mov dword [ebp - 0x4c], eax
jmp 0x47973d
mov dword [ebp - 0x20], 0
jmp 0x47991e
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jg 0x479b53
mov dword [ebp - 0xcc], 0
jmp 0x479941
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 3
jge 0x47995d
mov eax, dword [ebp - 0xcc]
mov dword [ebp + eax*4 - 0x610], 0xc8b8afe
jmp 0x479934
mov dword [ebp - 0x54], 0
jmp 0x47996d
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 2
jg 0x479983
mov byte [ebp - 0x55], 0
lea eax, [ebp - 0x55]
push eax
call fcn.0047761b
pop ecx
jmp 0x479966
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x594], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0xf0]
mov dword [ebp - 0x5e4], eax
mov eax, dword [ebp - 0xd4]
cmp dword [ebp - 0x14], eax
jle 0x4799b5
or eax, 0xffffffff
jne 0x4799b5
and dword [ebp - 0x3d0], 0
jmp 0x4799bf
mov dword [ebp - 0x3d0], 1
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0x59c], eax
mov eax, dword [ebp - 0x20]
sub eax, 0x6125f897
cmp eax, 0x5ac3
jle 0x4799e6
mov dword [ebp - 0x2b4], 1
jmp 0x4799ed
and dword [ebp - 0x2b4], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x2b4], eax
jne 0x479a04
mov dword [ebp - 0x2bc], 1
jmp 0x479a0b
and dword [ebp - 0x2bc], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xf0]
cmp eax, dword [ebp - 0x2bc]
jle 0x479a2b
mov dword [ebp - 0x2c4], 1
jmp 0x479a32
and dword [ebp - 0x2c4], 0
cmp dword [ebp - 0x2c4], 0
je 0x479a4d
cmp dword [ebp - 0x4c], 0
je 0x479a4d
mov dword [ebp - 0x2cc], 1
jmp 0x479a54
and dword [ebp - 0x2cc], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0xf0]
cmp dword [ebp - 0x2cc], eax
jge 0x479a7b
mov eax, 0xee0b
test eax, eax
je 0x479a7b
mov dword [ebp - 0x2d4], 1
jmp 0x479a82
and dword [ebp - 0x2d4], 0
mov eax, dword [ebp - 0x2d4]
sub eax, dword [ebp - 0x1c]
je 0x479a9f
cmp dword [ebp - 0x18], 0
je 0x479a9f
mov dword [ebp - 0x2dc], 1
jmp 0x479aa6
and dword [ebp - 0x2dc], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0xf0]
cmp eax, dword [ebp - 0x2dc]
jle 0x479ac4
mov dword [ebp - 0x2e4], 1
jmp 0x479acb
and dword [ebp - 0x2e4], 0
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x2e4]
mov dword [ebp + eax*4 - 0xf0], ecx
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x634], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x5a4], eax
mov eax, dword [ebp - 0x20]
add eax, 0x97cf
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x610]
je 0x479b10
mov dword [ebp - 0x2ec], 1
jmp 0x479b17
and dword [ebp - 0x2ec], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x2ec], eax
jne 0x479b3e
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x610], 0
je 0x479b3e
mov dword [ebp - 0x2f4], 1
jmp 0x479b45
and dword [ebp - 0x2f4], 0
mov eax, dword [ebp - 0x2f4]
mov dword [ebp - 0x54], eax
jmp 0x479917
jmp 0x47971c
cmp dword [ebp - 0x1c], 0
je 0x479b60
jmp 0x479b65
jmp 0x4796f8
jmp 0x4793f4
mov dword [ebp - 0x3d8], 0x1865425a
mov dword [ebp - 0x3f0], 0x80d416db
mov dword [ebp - 0x9c], 0x4c7af5af
mov dword [ebp - 0x60], 0xd8b9dbea
mov dword [ebp - 0x198], 0x9583e358
mov dword [ebp - 0x1a8], 0
mov dword [ebp - 0x3e8], 4
mov dword [ebp - 0x354], 0
mov dword [ebp - 0x5f4], 0xb5bc6833
call fcn.00477501
mov eax, dword [ebp - 0x60]
dec eax
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x3d8]
mov dword [ebp - 0x528], eax
cmp dword [ebp - 0x9c], 1
je 0x479bee
mov dword [ebp - 0x2fc], 1
jmp 0x479bf5
and dword [ebp - 0x2fc], 0
cmp dword [ebp - 0x2fc], 7
jb 0x479c13
cmp dword [ebp - 0x9c], 0
je 0x479c13
mov dword [ebp - 0x3e0], 1
jmp 0x479c1a
and dword [ebp - 0x3e0], 0
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0x60], eax
jne 0x479c2e
mov dword [ebp - 0x304], 1
jmp 0x479c35
and dword [ebp - 0x304], 0
mov eax, dword [ebp - 0x1a8]
cmp dword [ebp - 0x304], eax
jl 0x479c4f
mov dword [ebp - 0x30c], 1
jmp 0x479c56
and dword [ebp - 0x30c], 0
cmp dword [ebp - 0x30c], 0x14325367
je 0x479c6e
mov dword [ebp - 0x314], 1
jmp 0x479c75
and dword [ebp - 0x314], 0
cmp dword [ebp - 0x314], 0
je 0x479c85
cmp dword [ebp - 0x198], 0
mov eax, dword [ebp - 0x198]
add eax, 0xae7b
test eax, eax
jg 0x479ca0
mov dword [ebp - 0x31c], 1
jmp 0x479ca7
and dword [ebp - 0x31c], 0
mov eax, dword [ebp - 0x198]
cmp dword [ebp - 0x31c], eax
jg 0x479cc1
mov dword [ebp - 0x324], 1
jmp 0x479cc8
and dword [ebp - 0x324], 0
mov eax, dword [ebp - 0x324]
sub eax, dword [ebp - 0x9c]
cmp eax, 0x5f87
jne 0x479ce7
mov dword [ebp - 0x32c], 1
jmp 0x479cee
and dword [ebp - 0x32c], 0
mov eax, dword [ebp - 0x1a8]
cmp dword [ebp - 0x32c], eax
jle 0x479d0c
push 0xfffffffffffffff6
pop eax
test eax, eax
jne 0x479d0c
mov eax, 0xa429
test eax, eax
je 0x479d1f
mov byte [ebp - 0x4d], 0
lea eax, [ebp - 0x4d]
push eax
call fcn.00477527
pop ecx
jmp 0x479eeb
push 2
lea ecx, [ebp - 0x4c4]
call fcn.0041cf5c
mov dword [ebp - 0x344], 0xfffffff8
mov dword [ebp - 0x35c], 0xffffffff
mov dword [ebp - 0x3f8], 0x207e8793
mov dword [ebp - 0x24], 0
jmp 0x479d5a
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jge 0x479d70
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x41c], 0x45d487c7
jmp 0x479d53
mov dword [ebp - 0x24], 0
jmp 0x479d80
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jge 0x479d9c
push dword [ebp - 0x24]
lea ecx, [ebp - 0x4c4]
call fcn.0041cffd
mov dword [eax], 9
jmp 0x479d79
lea eax, [ebp - 0x3e8]
push eax
lea eax, [ebp - 0x354]
push eax
lea eax, [ebp - 0x3f0]
push eax
call fcn.00422490
add esp, 0xc
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x52c], eax
cmp dword [ebp - 0x60], 0
jne 0x479e0b
cmp dword [ebp - 0x60], 0
jne 0x479ddd
mov dword [ebp - 0x1a0], 1
jmp 0x479de4
and dword [ebp - 0x1a0], 0
push 0
lea ecx, [ebp - 0x4c4]
call fcn.0041cffd
mov ecx, dword [ebp - 0x1a0]
mov dword [eax], ecx
cmp dword [ebp - 0x1a0], 0
jne 0x479e0b
and dword [ebp - 0x334], 0
jmp 0x479e15
mov dword [ebp - 0x334], 1
cmp dword [ebp - 0x334], 0x42575e7e
je 0x479e2d
mov dword [ebp - 0x33c], 1
jmp 0x479e34
and dword [ebp - 0x33c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x33c]
sub ecx, dword [ebp + eax - 0x41c]
mov dword [ebp - 0x344], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x41c]
cmp eax, dword [ebp - 0x344]
jg 0x479e6e
mov dword [ebp - 0x34c], 1
jmp 0x479e75
and dword [ebp - 0x34c], 0
mov eax, dword [ebp - 0x34c]
sub eax, dword [ebp - 0x354]
add eax, dword [ebp - 0x1a8]
mov dword [ebp - 0x35c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x41c]
cmp dword [ebp - 0x35c], eax
jne 0x479eae
mov dword [ebp - 0x364], 1
jmp 0x479eb5
and dword [ebp - 0x364], 0
cmp dword [ebp - 0x364], 0x2f5726b0
jg 0x479ecd
mov dword [ebp - 0x36c], 1
jmp 0x479ed4
and dword [ebp - 0x36c], 0
mov eax, dword [ebp - 0x36c]
mov dword [ebp - 0x3f8], eax
lea ecx, [ebp - 0x4c4]
call fcn.0041cff8
lea eax, [ebp - 0x650]
push eax
mov ecx, dword [ebp + 8]
call fcn.0046cb5a
lea ecx, [ebp - 0x650]
call fcn.00440a93
lea ecx, [ebp - 0x668]
call fcn.00440a93
mov eax, dword [ebp + 8]
pop esi
mov esp, ebp
pop ebp
ret