Function at 0x460f96
Capabilities:
Contain obfuscated stackstrings
Enumerate pe sections
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1a7c
call fcn.004a9d20
push esi
push edi
and dword [ebp - 0x10], 0
movzx eax, byte [ebp + 0x30]
test eax, eax
je 0x46e4d5
mov eax, dword [ebp + 8]
mov dword [ebp - 0xf2c], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xf94], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0xf24], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0xf1c], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0xf3c], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0xf34], eax
lea eax, [ebp + 0xc]
mov dword [ebp - 0xf8c], eax
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0xf14], eax
lea eax, [ebp + 0x1c]
mov dword [ebp - 0xde8], eax
mov eax, dword [ebp - 0xde8]
movzx eax, byte [eax]
test eax, eax
je 0x46e45b
mov eax, dword [ebp - 0xf8c]
mov dword [ebp - 0xf9c], eax
mov eax, dword [ebp - 0xf94]
mov dword [ebp - 0xfa4], eax
mov eax, dword [ebp - 0xf9c]
movzx eax, byte [eax]
test eax, eax
je 0x46e43c
mov eax, dword [ebp - 0xfa4]
mov dword [ebp - 0x1c], eax
push 0x431
push 0x762e
push 1
push 1
push 0x4934
push 1
push 0x4b5d
push 1
push 0
push 1
push 0x4bb9
push 0x2e67
call fcn.00459e32
add esp, 0x30
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0xc94], eax
mov dword [ebp - 0x3b4], 0
mov dword [ebp - 0x3ac], 0
jmp 0x4610a7
mov eax, dword [ebp - 0x3ac]
inc eax
mov dword [ebp - 0x3ac], eax
cmp dword [ebp - 0x3ac], 3
jge 0x4610c3
mov eax, dword [ebp - 0x3ac]
mov dword [ebp + eax*4 - 0x1a6c], 0xeac8b13e
jmp 0x46109a
mov dword [ebp - 0x3b4], 0
jmp 0x4610dc
mov eax, dword [ebp - 0x3b4]
inc eax
mov dword [ebp - 0x3b4], eax
cmp dword [ebp - 0x3b4], 2
jg 0x46114d
mov dword [ebp - 0x3bc], 0xffffffff
mov dword [ebp - 0x3bc], 0
jmp 0x461108
mov eax, dword [ebp - 0x3bc]
inc eax
mov dword [ebp - 0x3bc], eax
cmp dword [ebp - 0x3bc], 2
jg 0x46114b
push 1
push 0x379
push 0x3dec
push 1
push 0x7b02
push 0x5293
push 0x524d
push 0x27a6
push 0
push 0x666b
push 0x5402
push 1
call fcn.004452b0
add esp, 0x30
jmp 0x4610fb
jmp 0x4610cf
push 0
push 0x1dc9
push 1
push 0x121b
push 0x511e
push 0x6118
push 0x4e40
push 1
push 0xa15
push 0x152b
push 0x71b6
push 0x50c8
push 0x4f44
push 0x2864
push 0x479f
push 1
push 0x3871
push 0x3c55
call fcn.00442105
add esp, 0x48
mov eax, dword [ebp - 0xc94]
movzx eax, word [eax]
cmp eax, 0x5a4d
je 0x461259
mov dword [ebp - 0xfb4], 0x7ddc85f7
mov dword [ebp - 0xfac], 0xfffffff7
push 1
lea ecx, [ebp - 0x16e8]
call fcn.0043486b
push 1
push 0x1df9
push 0x57a1
push 0x7d2d
push 1
push 0x4469
push 0x31a2
push 0x668c
push 0
push 0x2913
push 0x73d6
lea eax, [ebp - 0x16e8]
push eax
push 0x6aab
push 0
lea eax, [ebp - 0x163c]
push eax
push 0x5c05
call fcn.00459575
add esp, 0x40
lea eax, [ebp - 0xfac]
push eax
push 1
lea eax, [ebp - 0xfb4]
push eax
push 0x2c34
push 0
push 0
call fcn.00444804
add esp, 0x18
lea ecx, [ebp - 0x16e8]
call fcn.0043493d
jmp 0x46e4fd
mov dword [ebp - 0x1638], 1
mov dword [ebp - 0x17e8], 0xac9d73df
mov dword [ebp - 0x1640], 0
mov dword [ebp - 0x924], 0xd0e72ee7
mov dword [ebp - 0x1094], 0xcbb24adc
mov dword [ebp - 0x270], 0
jmp 0x4612a4
mov eax, dword [ebp - 0x270]
inc eax
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 2
jge 0x4612c0
mov eax, dword [ebp - 0x270]
mov dword [ebp + eax*4 - 0x1978], 0x72a8
jmp 0x461297
mov dword [ebp - 0x924], 1
mov eax, dword [ebp - 0x924]
mov dword [ebp - 0x1094], eax
mov eax, dword [ebp - 0xc94]
mov ecx, dword [ebp - 0x1c]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0x104], ecx
mov dword [ebp - 0xb8], 0xd133f29
mov dword [ebp - 0x148], 5
mov dword [ebp - 0x204], 2
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x10ac], 0xfffffffb
mov dword [ebp - 0x10bc], 0xc8d2
mov dword [ebp - 0x260], 0
jmp 0x46133a
mov eax, dword [ebp - 0x260]
inc eax
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 1
jge 0x461353
mov eax, dword [ebp - 0x260]
mov dword [ebp + eax*4 - 0xc], 0x1c7bf0b9
jmp 0x46132d
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc]
mov dword [ebp - 0x17bc], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc], 0xa17d0b0a
jbe 0x46137e
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc], 0
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0xc]
cmp dword [ebp + eax - 0xc], ecx
jl 0x4613a0
mov dword [ebp - 0xc9c], 1
jmp 0x4613a7
and dword [ebp - 0xc9c], 0
mov eax, dword [ebp - 0xc9c]
add eax, 0x302993b6
jne 0x4613c2
or eax, 0xffffffff
jne 0x4613c2
and dword [ebp - 0xca4], 0
jmp 0x4613cc
mov dword [ebp - 0xca4], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xca4]
sub ecx, dword [ebp + eax - 0xc]
mov dword [ebp - 0xb8], ecx
cmp dword [ebp - 0xb8], 8
jg 0x4613f7
mov dword [ebp - 0xcac], 1
jmp 0x4613fe
and dword [ebp - 0xcac], 0
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov edx, dword [ebp - 0xcac]
sub edx, dword [ebp + ecx - 0xc]
cmp dword [ebp + eax - 0xc], edx
jge 0x461433
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc], 0
je 0x461433
mov dword [ebp - 0xcb4], 1
jmp 0x46143a
and dword [ebp - 0xcb4], 0
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0xc]
add ecx, dword [ebp - 0xcb4]
cmp dword [ebp + eax - 0xc], ecx
jne 0x461462
mov dword [ebp - 0xce4], 1
jmp 0x461469
and dword [ebp - 0xce4], 0
cmp dword [ebp - 0xce4], 0x8fdadf86
ja 0x461481
mov dword [ebp - 0xcec], 1
jmp 0x461488
and dword [ebp - 0xcec], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc]
cmp dword [ebp - 0xcec], eax
jg 0x4614a6
mov dword [ebp - 0xcf4], 1
jmp 0x4614ad
and dword [ebp - 0xcf4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xcf4]
sub ecx, dword [ebp + eax - 0xc]
cmp ecx, dword [ebp - 0x148]
jl 0x46174f
mov dword [ebp - 0x10a4], 0xffffffff
mov dword [ebp - 0x34c], 1
mov dword [ebp - 0xb8], 0x18
jmp 0x4614f6
mov eax, dword [ebp - 0xb8]
dec eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 6
je 0x461704
mov dword [ebp - 0x109c], 0xb06a83cd
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc], 0
je 0x46151f
jmp 0x461704
mov dword [ebp - 0x148], 0x1c
jmp 0x461538
mov eax, dword [ebp - 0x148]
dec eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 9
jl 0x4616ff
mov dword [ebp - 0x530], 0xfffffffa
mov dword [ebp - 0x538], 0x43ad33dc
mov eax, dword [ebp - 0xb8]
cmp dword [ebp - 0x109c], eax
jne 0x461573
mov dword [ebp - 0xcfc], 1
jmp 0x46157a
and dword [ebp - 0xcfc], 0
cmp dword [ebp - 0xcfc], 0xfffffffe
jg 0x46158f
mov dword [ebp - 0xd04], 1
jmp 0x461596
and dword [ebp - 0xd04], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc]
cmp eax, dword [ebp - 0xd04]
jne 0x4615b4
mov dword [ebp - 0xd0c], 1
jmp 0x4615bb
and dword [ebp - 0xd0c], 0
cmp dword [ebp - 0xd0c], 0xe85d
je 0x4615d3
mov dword [ebp - 0xd14], 1
jmp 0x4615da
and dword [ebp - 0xd14], 0
mov eax, dword [ebp - 0x530]
imul ecx, dword [ebp - 0xd14], 0x2c75
imul eax, ecx
test eax, eax
jne 0x4615fd
mov dword [ebp - 0xd58], 1
jmp 0x461604
and dword [ebp - 0xd58], 0
mov eax, dword [ebp - 0xd58]
add eax, 0xaea1
cmp eax, 0xfffffff8
jge 0x461620
mov dword [ebp - 0xd54], 1
jmp 0x461627
and dword [ebp - 0xd54], 0
mov eax, dword [ebp - 0x10a4]
mov dword [ebp - 0x34c], eax
mov eax, dword [ebp - 0x34c]
cmp eax, dword [ebp - 0xd54]
jg 0x46164d
mov dword [ebp - 0xcc0], 1
jmp 0x461654
and dword [ebp - 0xcc0], 0
mov eax, dword [ebp - 0xcc0]
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 0
je 0x46167e
cmp dword [ebp - 0x530], 0
je 0x46167e
mov dword [ebp - 0xc8c], 1
jmp 0x461685
and dword [ebp - 0xc8c], 0
mov eax, dword [ebp - 0xc8c]
shl eax, 1
imul eax, eax, 0xac8e
add eax, 0x32a3f0b1
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x80], 0
jmp 0x4616ab
mov eax, dword [ebp - 0x80]
dec eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0
jl 0x4616fa
mov eax, dword [ebp - 0x80]
mov eax, dword [ebp + eax*4 - 0xc]
mov dword [ebp - 0x34c], eax
mov eax, dword [ebp - 0x80]
mov eax, dword [ebp + eax*4 - 0xc]
cmp eax, dword [ebp - 0x34c]
jl 0x4616d9
mov dword [ebp - 0xb58], 1
jmp 0x4616e0
and dword [ebp - 0xb58], 0
mov eax, dword [ebp - 0xb58]
mov dword [ebp - 0x538], eax
mov eax, dword [ebp - 0x538]
mov dword [ebp - 0x204], eax
jmp 0x4616a4
jmp 0x46152b
jmp 0x4614e9
mov byte [ebp - 0xe5], 0
push 0
push 0x6e30
push 0x64bc
push 0x5c99
push 0x52c4
push 0x518d
push 0x4b60
push 1
push 0x3b42
push 0x5329
push 1
lea eax, [ebp - 0xe5]
push eax
push 0x1a40
call fcn.004427ea
add esp, 0x34
jmp 0x461797
push 1
push 0
push 1
push 0x4bbf
push 1
push 0x661f
lea eax, [ebp - 0x204]
push eax
push 0x1820
push 0x6403
push 0x494f
push 0x757f
push 0x5e6a
push 0x74e5
push 1
push 1
push 0x66e6
call fcn.00445777
add esp, 0x40
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc]
add eax, dword [ebp - 0x10ac]
jne 0x46185f
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc], 0xfffffffe
je 0x4617c6
mov dword [ebp - 0xc60], 1
jmp 0x4617cd
and dword [ebp - 0xc60], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc], 0xffffffff
je 0x4617e6
mov dword [ebp - 0x950], 1
jmp 0x4617ed
and dword [ebp - 0x950], 0
mov eax, dword [ebp - 0x950]
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0
je 0x461813
xor eax, eax
inc eax
je 0x461813
mov dword [ebp - 0x540], 1
jmp 0x46181a
and dword [ebp - 0x540], 0
mov eax, dword [ebp - 0x540]
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0xc60], eax
jle 0x46183a
mov dword [ebp - 0x10b4], 1
jmp 0x461841
and dword [ebp - 0x10b4], 0
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0x1648], eax
cmp dword [ebp - 0x10bc], 0
jne 0x46185f
and dword [ebp - 0x548], 0
jmp 0x461869
mov dword [ebp - 0x548], 1
mov eax, dword [ebp - 0x548]
mov dword [ebp - 0x204], eax
mov eax, dword [ebp - 0x104]
cmp dword [eax], 0x4550
je 0x461ad1
mov dword [ebp - 0x6c], 0xb3ae3556
push 2
lea ecx, [ebp - 0x1200]
call fcn.0043486b
push 1
lea ecx, [ebp - 0x1464]
call fcn.0043486b
mov dword [ebp - 0x10e4], 0x3ae4
push 0
push 0x5fa5
lea eax, [ebp - 0x10c4]
push eax
lea eax, [ebp - 0x1200]
push eax
push 1
push 0x1f6e
push 0x251c
push 0x428a
push 1
push 0x6ed7
push 1
call fcn.00441a00
add esp, 0x2c
push 0x4d6f
push 0x431f
lea eax, [ebp - 0x1464]
push eax
push 0x5329
push 0x273e
push 0x41f5
push 0x535a
push 0x364d
lea eax, [ebp - 0x10c4]
push eax
push 0x164f
push 1
push 0x5ad3
push 0x82e
push 1
push 1
push 1
push 1
push 0x1aef
push 0x1762
push 0x18e2
call fcn.0044d6e0
add esp, 0x50
mov dword [ebp - 0x6c], 0x11
jmp 0x46195a
mov eax, dword [ebp - 0x6c]
dec eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0xfffffff6
jl 0x461a58
mov dword [ebp - 0x10dc], 0xffffffff
mov dword [ebp - 0x10cc], 0x3eb6
mov dword [ebp - 0x10d4], 0xd6dbc1c2
mov dword [ebp - 0x26c], 0
jmp 0x46199b
mov eax, dword [ebp - 0x26c]
inc eax
mov dword [ebp - 0x26c], eax
cmp dword [ebp - 0x26c], 3
jge 0x4619b7
mov eax, dword [ebp - 0x26c]
mov dword [ebp + eax*4 - 0x1a3c], 0x72c02a3
jmp 0x46198e
push 0
push 1
push 0x6069
push 0x7080
lea eax, [ebp - 0x10cc]
push eax
lea eax, [ebp - 0x10d4]
push eax
push 1
push 1
push 0x4383
lea eax, [ebp - 0x10dc]
push eax
push 0x6739
push 0xa74
lea eax, [ebp - 0x1464]
push eax
push 0x4871
push 0x3948
lea eax, [ebp - 0x1200]
push eax
lea eax, [ebp - 0x6c]
push eax
push 0x5ced
push 0x2020
push 0x11c8
push 0x57e2
call fcn.0044aa5f
add esp, 0x54
push 0x2b13
push 1
push 1
lea eax, [ebp - 0x10e4]
push eax
push 0x4123
push 0x3af5
push 1
push 0x63da
push 0x2e3b
call fcn.0044dcab
add esp, 0x24
jmp 0x461953
mov dword [ebp - 0x6c], 0
jmp 0x461a68
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 2
jge 0x461ab6
push 0x1d28
push 0x4e6e
push 1
push 0x6660
push 0x52d
lea eax, [ebp - 0x1200]
push eax
push 0x1b15
push 0x4519
push 0
push 1
lea eax, [ebp - 0x6c]
push eax
push 0x24d2
push 0x4cb9
push 0x4bf6
call fcn.0044cb9d
add esp, 0x38
jmp 0x461a61
lea ecx, [ebp - 0x1464]
call fcn.0043493d
lea ecx, [ebp - 0x1200]
call fcn.0043493d
jmp 0x46e4fd
mov dword [ebp - 0x318], 0
jmp 0x461aea
mov eax, dword [ebp - 0x318]
inc eax
mov dword [ebp - 0x318], eax
cmp dword [ebp - 0x318], 2
jge 0x461b06
mov eax, dword [ebp - 0x318]
mov dword [ebp + eax*4 - 0xd6c], 0
jmp 0x461add
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xd6c], 0
jmp 0x461b34
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd6c]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xd6c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xd6c], 0xffffffef
jg 0x461bb3
push 1
push 0x17ad
push 1
push 0x51ec
push 1
push 0x17de
push 0x4c9c
push 0x25ed
push 0x3dc5
push 1
call fcn.0043d4d1
add esp, 0x28
mov byte [ebp - 0xec], 0
push 0x168c
lea eax, [ebp - 0xec]
push eax
push 1
push 0x5470
push 1
push 0
push 1
push 0x334c
push 0x6487
push 0x38fb
push 0x351f
call fcn.004467f2
add esp, 0x2c
jmp 0x461b19
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x104]
lea eax, [ecx + eax + 0x78]
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x278], 1
mov dword [ebp - 0x278], 0
jmp 0x461be9
mov eax, dword [ebp - 0x278]
dec eax
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x278], 0xfffffffd
jle 0x461c84
mov dword [ebp - 0x10f4], 0xffffffff
mov dword [ebp - 0x10ec], 0x7fe64fd9
push 1
push 0x29c8
push 0xa21
push 1
push 0x5bb9
push 0x48de
push 0x7ee1
push 1
push 0x6a10
push 0x6732
call fcn.0044e13e
add esp, 0x28
push 0x4f53
push 1
push 1
lea eax, [ebp - 0x10ec]
push eax
push 0xdf6
push 0x325a
push 0x6c1c
push 0x5c70
push 0x391e
push 0x332c
push 0
push 0x9c7
lea eax, [ebp - 0x10f4]
push eax
call fcn.004541af
add esp, 0x34
jmp 0x461bdc
mov eax, dword [ebp - 0x70]
cmp dword [eax + 4], 0
jne 0x461cbd
push 1
push 0x6977
push 0x29
push 1
push 0
push 0x4374
push 0x1828
push 0x2e87
push 1
push 0x7c5a
call fcn.0045c941
add esp, 0x28
jmp 0x46e4fd
mov dword [ebp - 0x958], 1
mov dword [ebp - 0xa0], 1
mov dword [ebp - 0x1114], 0x28d9ba5f
push 1
lea ecx, [ebp - 0x112c]
call fcn.0043486b
mov dword [ebp - 0xb60], 0
mov dword [ebp - 0x17f0], 0xffffffff
lea eax, [ebp - 0x112c]
push eax
push 0x391c
push 0x84c
push 1
push 1
push 0x5bc0
push 1
push 0x4d00
push 0x49ae
push 1
lea eax, [ebp - 0x1650]
push eax
push 0x4046
push 0x4107
call fcn.0044e5ff
add esp, 0x34
mov eax, dword [ebp - 0x958]
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0
je 0x461e5c
mov dword [ebp - 0x550], 0xbd0a7084
mov dword [ebp - 0x1104], 0xfffffffb
mov dword [ebp - 0x111c], 9
mov dword [ebp - 0x11f4], 0xc295
mov dword [ebp - 0xa0], 0xfffffff9
jmp 0x461d97
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0x1a
jge 0x461e17
mov dword [ebp - 0x110c], 0
mov dword [ebp - 0x10fc], 0
push 0
lea eax, [ebp - 0x958]
push eax
push 0
lea eax, [ebp - 0x10fc]
push eax
push 1
lea eax, [ebp - 0x550]
push eax
lea eax, [ebp - 0xb60]
push eax
lea eax, [ebp - 0x1104]
push eax
lea eax, [ebp - 0xa0]
push eax
push 0x67bc
push 0x3e3d
lea eax, [ebp - 0x110c]
push eax
lea eax, [ebp - 0x1114]
push eax
lea eax, [ebp - 0x111c]
push eax
lea eax, [ebp - 0x112c]
push eax
call fcn.00460468
add esp, 0x3c
jmp 0x461d8a
lea eax, [ebp - 0xa0]
push eax
push 0x4197
push 0x2a7f
push 1
push 0x33ca
lea eax, [ebp - 0x550]
push eax
lea eax, [ebp - 0x112c]
push eax
lea eax, [ebp - 0x11f4]
push eax
push 1
push 0x7ac2
push 1
push 1
call fcn.0044e9cf
add esp, 0x30
jmp 0x461f2b
mov dword [ebp - 0xfd8], 0xfffffffe
mov dword [ebp - 0x11d4], 0x40c8e82
mov dword [ebp - 0x11c8], 0xdc4d7e3c
push 2
lea ecx, [ebp - 0x1374]
call fcn.0043486b
push 0
push 0x63fe
push 0x6d44
lea eax, [ebp - 0x1374]
push eax
push 1
lea eax, [ebp - 0x167c]
push eax
push 0x1039
push 0
push 0x4d00
call fcn.0045a640
add esp, 0x24
lea eax, [ebp - 0xb60]
push eax
push 0
lea eax, [ebp - 0x11c8]
push eax
push 0x3b50
push 0x70e
push 1
push 0x52cf
push 1
push 0x2121
lea eax, [ebp - 0xfd8]
push eax
push 0x7915
push 0x6895
lea eax, [ebp - 0x112c]
push eax
push 0x61bb
lea eax, [ebp - 0x11d4]
push eax
lea eax, [ebp - 0xa0]
push eax
push 0x6814
lea eax, [ebp - 0x1374]
push eax
push 1
call fcn.00442c4f
add esp, 0x4c
lea ecx, [ebp - 0x1374]
call fcn.0043493d
lea ecx, [ebp - 0x112c]
call fcn.0043493d
and dword [ebp - 0x2c], 0
mov dword [ebp - 0x16c], 7
mov dword [ebp - 0x3a8], 0
jmp 0x461f5d
mov eax, dword [ebp - 0x3a8]
inc eax
mov dword [ebp - 0x3a8], eax
cmp dword [ebp - 0x3a8], 3
jge 0x461f79
mov eax, dword [ebp - 0x3a8]
mov dword [ebp + eax*4 - 0x18a4], 0x3b91
jmp 0x461f50
mov dword [ebp - 0x16c], 0
jmp 0x461f92
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 3
jge 0x461fae
mov eax, dword [ebp - 0x16c]
mov dword [ebp + eax*4 - 0x18a4], 0xfffb
jmp 0x461f85
push 0x4ea5
push 0x47ca
push 0x51fb
push 0x531e
lea eax, [ebp - 0x16c]
push eax
push 0x7ad7
push 0x7a7f
push 0x6d4
push 0x60b0
push 0x15d0
push 0x506
push 0x28db
push 0xcbe
push 0
push 0x4463
push 0x592c
push 0x4529
push 1
push 0x20bb
push 1
push 1
push 0x16f8
push 0x39b3
call fcn.0045229b
add esp, 0x5c
mov eax, dword [ebp - 0x104]
movzx eax, word [eax + 0x14]
mov ecx, dword [ebp - 0x104]
lea eax, [ecx + eax + 0x18]
mov dword [ebp - 0x12c], eax
push 3
lea ecx, [ebp - 0x21c]
call fcn.0043486b
push 3
lea ecx, [ebp - 0x228]
call fcn.0043486b
mov dword [ebp - 0xdd8], 6
mov dword [ebp - 0xdc4], 0
mov dword [ebp - 0x1100], 0xf576
mov dword [ebp - 0x1038], 0x83dcdcbd
push 0x7d8c
lea eax, [ebp - 0x21c]
push eax
push 0x30b7
lea eax, [ebp - 0xf84]
push eax
push 1
push 0x7531
push 0
push 0
call fcn.00458a28
add esp, 0x20
push 1
push 0x5637
lea eax, [ebp - 0xf84]
push eax
lea eax, [ebp - 0x228]
push eax
push 0x3485
push 0x5220
push 0x6d03
push 0x2498
push 0x23d8
push 0
push 0x5d19
push 0x2e34
push 0
call fcn.0043cd2e
add esp, 0x34
push 2
lea ecx, [ebp - 0x228]
call fcn.00434959
and dword [eax], 0
jmp 0x462120
push 2
lea ecx, [ebp - 0x228]
call fcn.00434959
mov dword [ebp - 0x558], eax
mov eax, dword [ebp - 0x558]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x558]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0x228]
call fcn.00434959
cmp dword [eax], 2
jg 0x4626e6
mov dword [ebp - 0x88], 0x182eac45
mov dword [ebp - 0xb0], 0xffffffff
mov dword [ebp - 0x280], 0
jmp 0x462163
mov eax, dword [ebp - 0x280]
inc eax
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 3
jge 0x46217f
mov eax, dword [ebp - 0x280]
mov dword [ebp + eax*4 - 0x13f8], 1
jmp 0x462156
mov dword [ebp - 0x88], 0
jmp 0x462198
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 2
jg 0x462423
mov dword [ebp - 0x128], 0x565e08cc
mov dword [ebp - 0x128], 0
jmp 0x4621c8
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 2
jg 0x46241e
mov dword [ebp - 0x320], 0
jmp 0x4621ee
mov eax, dword [ebp - 0x320]
inc eax
mov dword [ebp - 0x320], eax
cmp dword [ebp - 0x320], 3
jge 0x46220a
mov eax, dword [ebp - 0x320]
mov dword [ebp + eax*4 - 0x113c], 0x6a205b29
jmp 0x4621e1
lea eax, [ebp - 0x88]
push eax
push 0x3dcc
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x228]
push eax
push 0x71b6
push 0x2336
push 0
push 1
push 0
push 0x54fc
push 0x770e
push 0x2072
push 0x3674
push 0x5987
push 0x6c4b
push 1
call fcn.00440695
add esp, 0x40
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x113c], 2
jmp 0x46228a
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x113c]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x113c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x113c], 0
jl 0x462419
mov dword [ebp - 0xdd0], 1
push 2
lea ecx, [ebp - 0x13e0]
call fcn.0043486b
push 0x2fff
lea eax, [ebp - 0x1658]
push eax
push 1
push 0
push 0x6e9
push 0x529e
lea eax, [ebp - 0x13e0]
push eax
push 0x103f
push 0x185d
push 0x7858
push 0
push 1
push 0x68e
push 0x3cca
push 0x3618
push 0x577e
push 1
call fcn.00453647
add esp, 0x44
push dword [ebp - 0x128]
lea ecx, [ebp - 0x21c]
call fcn.00434959
mov esi, eax
push 2
lea ecx, [ebp - 0x21c]
call fcn.00434959
mov ecx, dword [esi]
cmp ecx, dword [eax]
jle 0x46239f
mov eax, dword [ebp - 0xdd0]
mov dword [ebp - 0xb0], eax
push 0
lea ecx, [ebp - 0x13e0]
call fcn.00434959
mov dword [ebp - 0x960], eax
push dword [ebp - 0x88]
lea ecx, [ebp - 0x21c]
call fcn.00434959
mov ecx, dword [ebp - 0x960]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x960]
cmp dword [eax], 0
je 0x46238a
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x113c]
lea ecx, [ebp - 0x21c]
call fcn.00434959
cmp dword [ebp - 0xb0], 0
je 0x46239f
mov dword [ebp - 0x1030], 1
jmp 0x4623a6
and dword [ebp - 0x1030], 0
push dword [ebp - 0x88]
lea ecx, [ebp - 0x21c]
call fcn.00434959
push 2
lea ecx, [ebp - 0x228]
call fcn.00434959
push dword [ebp - 0x128]
lea ecx, [ebp - 0x21c]
call fcn.00434959
mov esi, eax
push 2
lea ecx, [ebp - 0x228]
call fcn.00434959
mov ecx, dword [esi]
cmp ecx, dword [eax]
jl 0x4623f6
mov dword [ebp - 0x560], 1
jmp 0x4623fd
and dword [ebp - 0x560], 0
mov eax, dword [ebp - 0x560]
mov dword [ebp - 0xdd8], eax
lea ecx, [ebp - 0x13e0]
call fcn.0043493d
jmp 0x46226f
jmp 0x4621bb
jmp 0x46218b
push 2
lea ecx, [ebp - 0x228]
call fcn.00434959
push dword [eax]
lea ecx, [ebp - 0x21c]
call fcn.00434959
cmp dword [eax], 0xe548
jge 0x462451
mov dword [ebp - 0xb68], 1
jmp 0x462458
and dword [ebp - 0xb68], 0
push 2
lea ecx, [ebp - 0x228]
call fcn.00434959
push dword [eax]
lea ecx, [ebp - 0x21c]
call fcn.00434959
mov esi, eax
push 2
lea ecx, [ebp - 0x21c]
call fcn.00434959
mov ecx, dword [esi]
cmp ecx, dword [eax]
jge 0x46249c
cmp dword [ebp - 0x88], 0
je 0x46249c
mov dword [ebp - 0xd50], 1
jmp 0x4624a3
and dword [ebp - 0xd50], 0
push 2
lea ecx, [ebp - 0x228]
call fcn.00434959
mov ecx, dword [ebp - 0xd50]
cmp ecx, dword [eax]
jle 0x4624c6
mov dword [ebp - 0x568], 1
jmp 0x4624cd
and dword [ebp - 0x568], 0
push 0
lea ecx, [ebp - 0x21c]
call fcn.00434959
mov ecx, dword [ebp - 0x568]
cmp ecx, dword [eax]
jle 0x4624f9
cmp dword [ebp - 0xb0], 0
je 0x4624f9
mov dword [ebp - 0x968], 1
jmp 0x462500
and dword [ebp - 0x968], 0
mov eax, dword [ebp - 0x968]
sub eax, dword [ebp - 0xb0]
cmp eax, 0xa828c040
jne 0x46251f
mov dword [ebp - 0x570], 1
jmp 0x462526
and dword [ebp - 0x570], 0
mov eax, dword [ebp - 0x570]
sub eax, dword [ebp - 0xb0]
cmp dword [ebp - 0xb68], eax
jne 0x462546
mov dword [ebp - 0x578], 1
jmp 0x46254d
and dword [ebp - 0x578], 0
mov eax, dword [ebp - 0x578]
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0
jne 0x462574
push 2
lea ecx, [ebp - 0x228]
call fcn.00434959
cmp dword [eax], 0
je 0x46259f
push 2
lea ecx, [ebp - 0x228]
call fcn.00434959
push dword [eax]
lea ecx, [ebp - 0x21c]
call fcn.00434959
cmp dword [eax], 0
je 0x46259f
mov dword [ebp - 0x970], 1
jmp 0x4625a6
and dword [ebp - 0x970], 0
push 0
lea ecx, [ebp - 0x21c]
call fcn.00434959
mov ecx, dword [ebp - 0x970]
cmp ecx, dword [eax]
je 0x4625c9
mov dword [ebp - 0x580], 1
jmp 0x4625d0
and dword [ebp - 0x580], 0
push 2
lea ecx, [ebp - 0x228]
call fcn.00434959
mov ecx, dword [ebp - 0x580]
cmp ecx, dword [eax]
jg 0x4625fc
cmp dword [ebp - 0x1100], 0
je 0x4625fc
mov dword [ebp - 0xc68], 1
jmp 0x462603
and dword [ebp - 0xc68], 0
push 0
lea ecx, [ebp - 0x228]
call fcn.00434959
mov ecx, dword [ebp - 0xc68]
cmp ecx, dword [eax]
jge 0x462626
mov dword [ebp - 0x588], 1
jmp 0x46262d
and dword [ebp - 0x588], 0
cmp dword [ebp - 0x588], 8
jl 0x462642
mov dword [ebp - 0x978], 1
jmp 0x462649
and dword [ebp - 0x978], 0
mov eax, dword [ebp - 0x978]
add eax, 0xfff8
jne 0x462663
xor eax, eax
jne 0x462663
and dword [ebp - 0xde0], 0
jmp 0x46266d
mov dword [ebp - 0xde0], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x13f8]
mov dword [ebp - 0x1680], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x13f8]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x13f8], eax
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0x1038], eax
lea eax, [ebp - 0x21c]
push eax
push 0
push 0
push 1
lea eax, [ebp - 0xdc4]
push eax
push 1
lea eax, [ebp - 0x228]
push eax
lea eax, [ebp - 0x88]
push eax
push 0x6066
lea eax, [ebp - 0xb0]
push eax
push 0x7035
call fcn.0045a3db
add esp, 0x2c
jmp 0x4620fc
lea ecx, [ebp - 0x228]
call fcn.0043493d
lea ecx, [ebp - 0x21c]
call fcn.0043493d
and dword [ebp - 0x4e0], 0
jmp 0x462721
mov eax, dword [ebp - 0x4e0]
inc eax
mov dword [ebp - 0x4e0], eax
mov eax, dword [ebp - 0x12c]
add eax, 0x28
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x104]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x4e0], eax
jge 0x462b5c
push 0
push 1
push 1
push 0x5844
push 1
push 0x3fd1
push 0xffc
push 0x7e03
push 0x2300
push 0x53b1
push 0x4d0e
push 0x4d99
push 0x6e65
push 1
push 1
push 0x1d01
call fcn.00445777
add esp, 0x40
mov eax, dword [ebp - 0x12c]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x988], eax
mov dword [ebp - 0x590], 6
mov dword [ebp - 0x288], 0
jmp 0x4627af
mov eax, dword [ebp - 0x288]
inc eax
mov dword [ebp - 0x288], eax
cmp dword [ebp - 0x288], 2
jge 0x4627cb
mov eax, dword [ebp - 0x288]
mov dword [ebp + eax*4 - 0xfc0], 0xe125
jmp 0x4627a2
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xfc0], 0x1d69f428
jl 0x4627f3
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xfc0]
mov dword [ebp - 0x590], eax
jmp 0x46286e
push 1
push 1
push 1
push 0
push 0x5a68
push 0x52a4
push 1
push 1
push 0x36a0
push 0x121a
push 0x40fe
push 0x2820
push 0x16ce
push 0x4f2c
push 0x54d6
push 0
push 0x72a8
push 0x4c68
push 0x209
push 0x59f7
call fcn.0045ac2f
add esp, 0x50
push 0x6905
push 0x301e
push 0x5b82
push 1
push 1
push 1
push 0x72e6
push 1
call fcn.0044ec25
add esp, 0x20
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xfc0]
mov dword [ebp - 0x590], eax
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x988]
jb 0x462b57
mov dword [ebp - 0x58], 0x469ad59e
mov dword [ebp - 0xb70], 0xba22e974
mov dword [ebp - 0x11b0], 0x719d8726
mov dword [ebp - 0x370], 0
jmp 0x4628c6
mov eax, dword [ebp - 0x370]
inc eax
mov dword [ebp - 0x370], eax
cmp dword [ebp - 0x370], 3
jge 0x4628e2
mov eax, dword [ebp - 0x370]
mov dword [ebp + eax*4 - 0xd90], 0xffff
jmp 0x4628b9
mov dword [ebp - 0x58], 2
jmp 0x4628f2
mov eax, dword [ebp - 0x58]
dec eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0
jl 0x462a00
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xd90], 0
je 0x46291f
mov dword [ebp - 0xb70], 0xfffffffb
cmp dword [ebp - 0xb70], 0
jne 0x46293b
cmp dword [ebp - 0x58], 0
jne 0x46293b
mov eax, dword [ebp - 0x58]
cmp dword [ebp + eax*4 - 0xd90], 0
jne 0x46293b
and dword [ebp - 0x598], 0
jmp 0x462945
mov dword [ebp - 0x598], 1
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x598], eax
je 0x46295c
mov dword [ebp - 0x980], 1
jmp 0x462963
and dword [ebp - 0x980], 0
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp + eax*4 - 0xd90]
imul eax, dword [ebp - 0x980]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0xd90]
jle 0x46298f
mov dword [ebp - 0x5a0], 1
jmp 0x462996
and dword [ebp - 0x5a0], 0
imul eax, dword [ebp - 0x5a0], 0
mov ecx, dword [ebp - 0x58]
sub eax, dword [ebp + ecx*4 - 0xd90]
cmp eax, 0x576c
jg 0x4629c0
mov eax, 0x2ef703c5
test eax, eax
jne 0x4629c0
and dword [ebp - 0xce8], 0
jmp 0x4629ca
mov dword [ebp - 0xce8], 1
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp + eax*4 - 0xd90]
cmp dword [ebp - 0xce8], eax
jl 0x4629e8
mov dword [ebp - 0x5a8], 1
jmp 0x4629ef
and dword [ebp - 0x5a8], 0
mov eax, dword [ebp - 0x5a8]
mov dword [ebp - 0x11b0], eax
jmp 0x4628eb
push 1
push 1
push 1
push 0x1eba
push 1
push 0x5f6c
push 0x59d0
push 0xa6e
push 0x60d6
push 0x3d03
push 0x4f9
push 0x11b3
push 0x5fcc
push 0
push 1
push 0x521
call fcn.00445777
add esp, 0x40
mov eax, dword [ebp - 0x104]
push dword [eax + 0x38]
mov eax, dword [ebp - 0x12c]
push dword [eax + 8]
call fcn.0043847c
pop ecx
pop ecx
add eax, dword [ebp - 0x988]
mov dword [ebp - 0x1108], eax
mov dword [ebp - 0xdf0], 0x571177e8
mov dword [ebp - 0xdf8], 0x6985ba56
mov dword [ebp - 0x1040], 0xffffffff
lea eax, [ebp - 0xdf0]
push eax
push 0x7ca0
push 0x7608
push 0
push 1
push 0x7c19
push 1
push 0x6e1e
push 0x3a43
lea eax, [ebp - 0x1040]
push eax
lea eax, [ebp - 0xdf8]
push eax
call fcn.0045e6a5
add esp, 0x2c
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x1108]
jae 0x462b57
push 0x2d19
push 0x6971
push 1
push 1
push 0x251b
lea eax, [ebp - 0x2c]
push eax
push 0x4d2a
push 0x5ec5
push 0x22c2
lea eax, [ebp - 0x12c]
push eax
push 1
push 0
push 0x3062
push 0x39ec
push 0xaf1
push 0x71fc
push 1
call fcn.00453647
add esp, 0x44
push 0x2d9b
push 1
push 0x3c00
push 0x1f3d
push 1
push 0x4091
push 1
push 0x239c
push 1
push 1
push 0x3c5d
call fcn.0044f000
add esp, 0x2c
jmp 0x462b5c
jmp 0x462705
mov dword [ebp - 0x328], 1
mov dword [ebp - 0x1660], 0x32a27689
mov dword [ebp - 0x1048], 0xffffffff
mov dword [ebp - 0xe00], 0xfffffffc
mov dword [ebp - 0x5b0], 0xffff
mov dword [ebp - 0x290], 0
jmp 0x462ba7
mov eax, dword [ebp - 0x290]
inc eax
mov dword [ebp - 0x290], eax
cmp dword [ebp - 0x290], 1
jge 0x462bc3
mov eax, dword [ebp - 0x290]
mov dword [ebp + eax*4 - 0x1688], 0xd6c3f0bc
jmp 0x462b9a
mov dword [ebp - 0x328], 0
jmp 0x462bdc
mov eax, dword [ebp - 0x328]
inc eax
mov dword [ebp - 0x328], eax
cmp dword [ebp - 0x328], 0xb
jg 0x462cfc
mov dword [ebp - 0x1668], 1
push 2
lea ecx, [ebp - 0x16f8]
call fcn.0043486b
mov dword [ebp - 0x1cc], 0
jmp 0x462c19
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 3
jge 0x462c35
mov eax, dword [ebp - 0x1cc]
mov dword [ebp + eax*4 - 0x1a48], 0x7a73d2d6
jmp 0x462c0c
push 1
push 0x5830
push 0
lea eax, [ebp - 0x16f8]
push eax
push 0
push 0x7127
push 0x90b
push 0x1b69
lea eax, [ebp - 0x1cc]
push eax
push 1
call fcn.0043d4d1
add esp, 0x28
push 0x43db
push 0x12a7
push 1
push 0x342e
push 0x3381
push 1
push 0
push 1
push 0x250c
lea eax, [ebp - 0x5b0]
push eax
push 0x1099
push 0x6956
push 0x6344
push 0x692f
push 0x5801
push 0x6153
push 0x61c9
call fcn.00443252
add esp, 0x44
push 0x5104
lea eax, [ebp - 0xe00]
push eax
lea eax, [ebp - 0x1048]
push eax
push 0x20a3
lea eax, [ebp - 0x5b0]
push eax
push 1
push 0
push 0x6d5d
push 1
call fcn.00438c38
add esp, 0x24
lea ecx, [ebp - 0x16f8]
call fcn.0043493d
jmp 0x462bcf
cmp dword [ebp - 0x2c], 0
jne 0x46302f
mov dword [ebp - 0x28], 0xf0b96ca2
mov dword [ebp - 0x17c], 0xffffffff
mov dword [ebp - 0x5c8], 1
mov dword [ebp - 0x4e8], 1
mov dword [ebp - 0xd18], 2
mov dword [ebp - 0x1050], 0
mov dword [ebp - 0xe18], 0xffffffff
mov dword [ebp - 0x1110], 0x4ad4db1d
mov dword [ebp - 0x298], 0
jmp 0x462d6c
mov eax, dword [ebp - 0x298]
inc eax
mov dword [ebp - 0x298], eax
cmp dword [ebp - 0x298], 1
jge 0x462d88
mov eax, dword [ebp - 0x298]
mov dword [ebp + eax*4 - 0x9a0], 7
jmp 0x462d5f
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x1690], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 0
jne 0x462dbe
cmp dword [ebp - 0x17c], 0
jne 0x462dbe
mov eax, 0xf860
test eax, eax
jne 0x462dbe
and dword [ebp - 0xb78], 0
jmp 0x462dc8
mov dword [ebp - 0xb78], 1
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0xb78], eax
je 0x462ddf
mov dword [ebp - 0x5b8], 1
jmp 0x462de6
and dword [ebp - 0x5b8], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x5b8], eax
je 0x462dfd
mov dword [ebp - 0xe08], 1
jmp 0x462e04
and dword [ebp - 0xe08], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x17c], eax
jle 0x462e21
mov eax, 0x3abefa02
test eax, eax
jne 0x462e21
and dword [ebp - 0x990], 0
jmp 0x462e2b
mov dword [ebp - 0x990], 1
cmp dword [ebp - 0x990], 0xc5604491
jne 0x462e43
mov dword [ebp - 0x5c0], 1
jmp 0x462e4a
and dword [ebp - 0x5c0], 0
mov eax, dword [ebp - 0x5c0]
sub eax, dword [ebp - 0x28]
cmp dword [ebp - 0x28], eax
jg 0x462e64
mov dword [ebp - 0xc70], 1
jmp 0x462e6b
and dword [ebp - 0xc70], 0
mov eax, dword [ebp - 0xc70]
neg eax
mov dword [ebp - 0x5c8], eax
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x5c8], eax
jne 0x462e90
mov dword [ebp - 0x11dc], 1
jmp 0x462e97
and dword [ebp - 0x11dc], 0
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x1684], eax
mov dword [ebp - 0x4e8], 0x5744
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x4e8], eax
je 0x462ec1
mov dword [ebp - 0x998], 1
jmp 0x462ec8
and dword [ebp - 0x998], 0
mov eax, dword [ebp - 0xd18]
cmp dword [ebp - 0x998], eax
jne 0x462ee2
mov dword [ebp - 0x5d0], 1
jmp 0x462ee9
and dword [ebp - 0x5d0], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x5d0], eax
jne 0x462f00
mov dword [ebp - 0xe10], 1
jmp 0x462f07
and dword [ebp - 0xe10], 0
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x17f8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x9a0]
mov dword [ebp - 0x168c], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x14c8], eax
mov eax, dword [ebp - 0x1050]
cmp dword [ebp - 0x17c], eax
jge 0x462f46
mov dword [ebp - 0xb80], 1
jmp 0x462f4d
and dword [ebp - 0xb80], 0
cmp dword [ebp - 0xb80], 0
je 0x462f68
cmp dword [ebp - 0x4e8], 0
jne 0x462f68
and dword [ebp - 0x5d8], 0
jmp 0x462f72
mov dword [ebp - 0x5d8], 1
cmp dword [ebp - 0x5d8], 0
jg 0x462f87
mov dword [ebp - 0x5e0], 1
jmp 0x462f8e
and dword [ebp - 0x5e0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x9a0]
cmp dword [ebp - 0x5e0], eax
jne 0x462fb8
cmp dword [ebp - 0xd18], 0
je 0x462fb8
mov dword [ebp - 0x5e8], 1
jmp 0x462fbf
and dword [ebp - 0x5e8], 0
mov eax, dword [ebp - 0xe18]
cmp dword [ebp - 0x5e8], eax
jl 0x462fd9
mov dword [ebp - 0x9a8], 1
jmp 0x462fe0
and dword [ebp - 0x9a8], 0
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x9a8]
cmp eax, 4
jae 0x462ffa
mov dword [ebp - 0x5f0], 1
jmp 0x463001
and dword [ebp - 0x5f0], 0
mov eax, dword [ebp - 0x5f0]
mov dword [ebp - 0x1110], eax
push 0x16a0
push 1
push 0x77db
push 0x4440
push 1
push 0
call fcn.00444804
add esp, 0x18
jmp 0x46e4fd
mov eax, dword [ebp - 0x70]
mov ecx, dword [ebp - 0x2c]
add ecx, dword [eax]
add ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0xf4], 0xfffffff6
mov dword [ebp - 0x168], 0x4456e348
mov dword [ebp - 0x64], 0x6836
push 2
lea ecx, [ebp - 0xda8]
call fcn.0043486b
mov dword [ebp - 0x648], 0xffffffff
mov dword [ebp - 0xcf0], 1
mov dword [ebp - 0x4f8], 0x72bf
mov dword [ebp - 0xe28], 0xb67c402
mov dword [ebp - 0x1480], 0
mov dword [ebp - 0x147c], 0
mov dword [ebp - 0x1478], 0
mov dword [ebp - 0x1474], 0
mov dword [ebp - 0x398], 0
jmp 0x4630ce
mov eax, dword [ebp - 0x398]
inc eax
mov dword [ebp - 0x398], eax
cmp dword [ebp - 0x398], 2
jge 0x4630f0
push dword [ebp - 0x398]
lea ecx, [ebp - 0xda8]
call fcn.00434959
mov dword [eax], 0xeb8e136d
jmp 0x4630c1
mov eax, 0x3d1b
test eax, eax
je 0x46318e
push 6
pop eax
test eax, eax
je 0x463119
cmp dword [ebp - 0xf4], 0
je 0x463119
mov dword [ebp - 0xb88], 1
jmp 0x463120
and dword [ebp - 0xb88], 0
mov eax, dword [ebp - 0xf4]
cmp dword [ebp - 0xb88], eax
jle 0x46313a
mov dword [ebp - 0x5f8], 1
jmp 0x463141
and dword [ebp - 0x5f8], 0
mov eax, dword [ebp - 0xf4]
cmp eax, dword [ebp - 0x5f8]
jl 0x46315b
mov dword [ebp - 0x9b0], 1
jmp 0x463162
and dword [ebp - 0x9b0], 0
mov eax, dword [ebp - 0x9b0]
mov dword [ebp - 0x168], eax
mov eax, dword [ebp - 0xf4]
cmp dword [ebp - 0x168], eax
jle 0x46318e
cmp dword [ebp - 0x64], 0
je 0x46318e
mov dword [ebp - 0x600], 1
jmp 0x463195
and dword [ebp - 0x600], 0
mov eax, dword [ebp - 0x64]
imul eax, dword [ebp - 0x600]
mov ecx, dword [ebp - 0x64]
lea eax, [eax + ecx + 0x1d7219c9]
test eax, eax
je 0x4631c2
cmp dword [ebp - 0xf4], 0
je 0x4631c2
mov dword [ebp - 0xc78], 1
jmp 0x4631c9
and dword [ebp - 0xc78], 0
cmp dword [ebp - 0xc78], 0xffffffff
jne 0x4631de
mov dword [ebp - 0x608], 1
jmp 0x4631e5
and dword [ebp - 0x608], 0
mov eax, dword [ebp - 0x608]
add eax, 0x5c8
jne 0x4631fb
mov eax, 0x8470
test eax, eax
je 0x46326a
mov dword [ebp - 0xe20], 0x2bbd4aa4
push 0x6d77
lea eax, [ebp - 0xe20]
push eax
lea eax, [ebp - 0x64]
push eax
push 0x3035
push 0
push 1
push 0x1211
lea eax, [ebp - 0xda8]
push eax
push 0x7397
push 0x30ed
push 0x23be
push 0x3d54
push 0
push 0x5cb2
push 0x7f61
push 0x4867
lea eax, [ebp - 0xf4]
push eax
push 0x3011
push 1
call fcn.0044c566
add esp, 0x4c
jmp 0x46362c
mov dword [ebp - 0x330], 0x4fe874d4
mov dword [ebp - 0xba0], 0x5ffff323
mov dword [ebp - 0x638], 0x24175c8f
mov dword [ebp - 0x11c0], 0
mov dword [ebp - 0x630], 0xf7b6068b
mov dword [ebp - 0x14cc], 0x916dc91e
mov dword [ebp - 0x2a0], 0
jmp 0x4632bf
mov eax, dword [ebp - 0x2a0]
inc eax
mov dword [ebp - 0x2a0], eax
cmp dword [ebp - 0x2a0], 4
jge 0x4632db
mov eax, dword [ebp - 0x2a0]
mov dword [ebp + eax*4 - 0x184c], 0xffffffff
jmp 0x4632b2
mov dword [ebp - 0x64], 0
jmp 0x4632eb
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0x38
jl 0x4633b4
mov dword [ebp - 0x9b8], 0x275cf8b8
push 0x5961
push 0x32b0
push 0x7446
push 0x2d2a
lea eax, [ebp - 0x330]
push eax
push 0x3607
push 0
push 1
push 0x41f0
lea eax, [ebp - 0x9b8]
push eax
push 0x3954
push 0x5ae0
lea eax, [ebp - 0xba0]
push eax
lea eax, [ebp - 0x168]
push eax
push 0x28cc
push 0x73cc
push 0x7f62
push 0x674
push 0x379a
push 1
push 0x6d90
lea eax, [ebp - 0xda8]
push eax
call fcn.00456ff9
add esp, 0x58
lea eax, [ebp - 0xf4]
push eax
push 0x34b9
push 0x395e
push 0x1663
push 1
push 0x3737
lea eax, [ebp - 0x9b8]
push eax
push 1
push 1
push 1
push 0
push 0x286e
call fcn.00450b8a
add esp, 0x30
jmp 0x4632e4
push 0
lea ecx, [ebp - 0xda8]
call fcn.00434959
cmp dword [eax], 0
je 0x463551
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x184c], 0x299d621d
jne 0x4633e9
mov dword [ebp - 0x4f0], 1
jmp 0x4633f0
and dword [ebp - 0x4f0], 0
push 1
lea ecx, [ebp - 0xda8]
call fcn.00434959
mov ecx, dword [ebp - 0x4f0]
mov dword [eax], ecx
imul eax, dword [ebp - 0x4f8], 0x8187
sub eax, dword [ebp - 0x4f0]
mov dword [ebp - 0x1058], eax
mov eax, dword [ebp - 0x4f8]
inc eax
mov dword [ebp - 0x4f8], eax
cmp dword [ebp - 0x1058], 1
ja 0x46343d
mov dword [ebp - 0x610], 1
jmp 0x463444
and dword [ebp - 0x610], 0
mov eax, dword [ebp - 0x330]
imul eax, dword [ebp - 0x610]
cmp eax, dword [ebp - 0x168]
je 0x463465
mov dword [ebp - 0xb90], 1
jmp 0x46346c
and dword [ebp - 0xb90], 0
mov eax, dword [ebp - 0xb90]
mov dword [ebp - 0xe28], eax
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x14d4], eax
mov eax, dword [ebp - 0x168]
mov dword [ebp - 0x14dc], eax
mov eax, dword [ebp - 0x630]
mov dword [ebp - 0x618], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x618]
mov dword [ebp + eax - 0x1480], ecx
mov eax, dword [ebp - 0xcf0]
add eax, dword [ebp - 0x618]
cmp eax, dword [ebp - 0x64]
jle 0x4634c9
mov dword [ebp - 0x9c0], 1
jmp 0x4634d0
and dword [ebp - 0x9c0], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x184c]
imul eax, dword [ebp - 0x9c0]
cmp eax, dword [ebp - 0x330]
je 0x4634f7
mov dword [ebp - 0x620], 1
jmp 0x4634fe
and dword [ebp - 0x620], 0
mov eax, dword [ebp - 0x620]
mov dword [ebp - 0x11c0], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x184c]
add eax, dword [ebp - 0xcf0]
cmp eax, dword [ebp - 0x648]
jge 0x463530
mov dword [ebp - 0x628], 1
jmp 0x463537
and dword [ebp - 0x628], 0
mov eax, dword [ebp - 0x638]
cmp dword [ebp - 0x628], eax
jge 0x463551
mov dword [ebp - 0x9c8], 1
jmp 0x463558
and dword [ebp - 0x9c8], 0
cmp dword [ebp - 0x9c8], 0xcd0122bf
jb 0x463570
mov dword [ebp - 0xb98], 1
jmp 0x463577
and dword [ebp - 0xb98], 0
mov eax, dword [ebp - 0x630]
cmp dword [ebp - 0xb98], eax
je 0x463591
mov dword [ebp - 0x9d0], 1
jmp 0x463598
and dword [ebp - 0x9d0], 0
mov eax, dword [ebp - 0x638]
cmp dword [ebp - 0x9d0], eax
jne 0x4635b2
mov dword [ebp - 0x640], 1
jmp 0x4635b9
and dword [ebp - 0x640], 0
cmp dword [ebp - 0x640], 0xb01f
jne 0x4635d1
mov dword [ebp - 0xc80], 1
jmp 0x4635d8
and dword [ebp - 0xc80], 0
mov eax, dword [ebp - 0x330]
sub eax, dword [ebp - 0xc80]
cmp eax, dword [ebp - 0x648]
jl 0x4635f8
mov dword [ebp - 0x9d8], 1
jmp 0x4635ff
and dword [ebp - 0x9d8], 0
mov eax, dword [ebp - 0x168]
cmp dword [ebp - 0x9d8], eax
jne 0x463619
mov dword [ebp - 0x650], 1
jmp 0x463620
and dword [ebp - 0x650], 0
mov eax, dword [ebp - 0x650]
mov dword [ebp - 0xba0], eax
lea ecx, [ebp - 0xda8]
call fcn.0043493d
xor ecx, ecx
call fcn.00434bd6
push eax
call fcn.0048e4a3
pop ecx
push 3
lea ecx, [ebp - 0x50c]
call fcn.0043486b
push 0x252c
push 1
push 0x634d
push 0x3276
push 1
lea eax, [ebp - 0x50c]
push eax
push 0
push 0x2c18
push 1
push 1
lea eax, [ebp - 0x1f8]
push eax
call fcn.0044f000
add esp, 0x2c
mov dword [ebp - 0x1f8], 0
jmp 0x46369f
mov eax, dword [ebp - 0x1f8]
inc eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 2
jge 0x4636bb
mov eax, dword [ebp - 0x1f8]
mov dword [ebp + eax*4 - 0x1d8], 0xfffffffb
jmp 0x463692
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x1d8], 0
jmp 0x4636e9
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1d8]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x1d8], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1d8], 2
jg 0x46372e
push 1
push 0x19ed
push 0x7044
push 0x199d
push 0
push 0x798
push 0xc7
push 0x5b20
push 1
push 1
push 0xec2
call fcn.00444c86
add esp, 0x2c
jmp 0x4636ce
push 2
lea ecx, [ebp - 0x50c]
call fcn.00434959
cmp dword [eax], 0
jne 0x463769
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1d8], 0
jne 0x463769
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1d8], 0
jne 0x463769
and dword [ebp - 0x658], 0
jmp 0x463773
mov dword [ebp - 0x658], 1
push 0
lea ecx, [ebp - 0x50c]
call fcn.00434959
mov ecx, dword [ebp - 0x658]
cmp ecx, dword [eax]
jne 0x463796
mov dword [ebp - 0x9e0], 1
jmp 0x46379d
and dword [ebp - 0x9e0], 0
push 1
lea ecx, [ebp - 0x50c]
call fcn.00434959
mov ecx, dword [ebp - 0x9e0]
cmp ecx, dword [eax]
jl 0x4637c0
mov dword [ebp - 0x660], 1
jmp 0x4637c7
and dword [ebp - 0x660], 0
cmp dword [ebp - 0x660], 0x7b722ba7
jle 0x4637df
mov dword [ebp - 0xd48], 1
jmp 0x4637e6
and dword [ebp - 0xd48], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xd48]
mov dword [ebp + eax - 0x1d8], ecx
push 3
pop eax
cmp eax, 9
jb 0x46380d
mov dword [ebp - 0x668], 1
jmp 0x463814
and dword [ebp - 0x668], 0
push 1
lea ecx, [ebp - 0x50c]
call fcn.00434959
mov esi, dword [ebp - 0x668]
sub esi, dword [eax]
push 1
lea ecx, [ebp - 0x50c]
call fcn.00434959
cmp esi, dword [eax]
jl 0x463846
mov dword [ebp - 0x9e8], 1
jmp 0x46384d
and dword [ebp - 0x9e8], 0
push 2
lea ecx, [ebp - 0x50c]
call fcn.00434959
mov ecx, dword [ebp - 0x9e8]
cmp ecx, dword [eax]
jle 0x463870
mov dword [ebp - 0xe30], 1
jmp 0x463877
and dword [ebp - 0xe30], 0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1d8], 0
jne 0x4638a0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1d8], 0
jne 0x4638a0
and dword [ebp - 0x670], 0
jmp 0x4638aa
mov dword [ebp - 0x670], 1
push 1
lea ecx, [ebp - 0x50c]
call fcn.00434959
mov ecx, dword [ebp - 0x670]
sub ecx, dword [eax]
je 0x4638fd
mov dword [ebp - 0x1060], 0x7209
mov dword [ebp - 0xe38], 0xf62c4df8
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1d8]
mov dword [ebp - 0x1060], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1d8]
mov dword [ebp - 0xe38], eax
jmp 0x46395c
mov dword [ebp - 0xe40], 6
mov dword [ebp - 0x1118], 5
push 0x5c38
push 0x5a82
push 1
lea eax, [ebp - 0x1118]
push eax
push 0x4bc2
lea eax, [ebp - 0xe40]
push eax
push 0xba2
push 1
push 0x41ba
push 0x3ca4
push 0x1d06
push 0
push 0x3d33
push 0x33d0
push 1
call fcn.0044f3da
add esp, 0x3c
lea ecx, [ebp - 0x50c]
call fcn.0043493d
push 0x11e0
push 1
push 1
push 0x54a2
push 0x7946
push 1
push 0x726e
push 0x6d9a
push 1
push 0x60e
push 0x22d0
push 0x4c19
push 0x6ada
push 0x4031
push 0xc31
push 0x34b8
call fcn.0043f08b
add esp, 0x40
mov dword [ebp - 0x4dc], 0x3c77
push 3
lea ecx, [ebp - 0xdc0]
call fcn.0043486b
push 0x4363
push 0x1e79
push 0x1e45
push 0x4206
push 0x69e2
push 0
lea eax, [ebp - 0x14e4]
push eax
push 0x1e92
push 0x7e2c
lea eax, [ebp - 0xdc0]
push eax
push 1
push 0x59a6
push 0x140f
push 0x4794
push 0x746a
push 0x964
push 1
push 0x6a2b
push 1
push 0x4f59
push 0x2be4
call fcn.004587fe
add esp, 0x54
cmp dword [ebp - 0x4dc], 1
jg 0x463a48
mov dword [ebp - 0xba8], 1
jmp 0x463a4f
and dword [ebp - 0xba8], 0
push 2
lea ecx, [ebp - 0xdc0]
call fcn.00434959
mov ecx, dword [ebp - 0xba8]
mov dword [eax], ecx
push 2
lea ecx, [ebp - 0xdc0]
call fcn.00434959
cmp dword [eax], 1
jge 0x463a82
mov dword [ebp - 0x678], 1
jmp 0x463a89
and dword [ebp - 0x678], 0
cmp dword [ebp - 0x678], 0xbea5
jg 0x463aa1
mov dword [ebp - 0x9f0], 1
jmp 0x463aa8
and dword [ebp - 0x9f0], 0
cmp dword [ebp - 0x9f0], 0x5425
jl 0x463ac0
mov dword [ebp - 0x680], 1
jmp 0x463ac7
and dword [ebp - 0x680], 0
push 2
lea ecx, [ebp - 0xdc0]
call fcn.00434959
mov ecx, dword [ebp - 0x680]
add ecx, dword [eax]
je 0x463b65
mov dword [ebp - 0xe48], 0
mov dword [ebp - 0x1068], 0xfffffffe
mov dword [ebp - 0x11e4], 9
lea eax, [ebp - 0x1068]
push eax
push 0x39de
push 0
lea eax, [ebp - 0xe48]
push eax
push 1
push 1
push 1
lea eax, [ebp - 0xdc0]
push eax
lea eax, [ebp - 0x4dc]
push eax
lea eax, [ebp - 0x11e4]
push eax
push 0x16ab
call fcn.004467f2
add esp, 0x2c
mov byte [ebp - 0xe7], 0
push 1
push 0x4f67
push 0x34e5
lea eax, [ebp - 0xe7]
push eax
push 1
push 1
call fcn.0044f5e3
add esp, 0x18
jmp 0x463bb5
push 0x1197
push 0x25a3
push 1
push 1
push 0x105c
push 0x36f8
push 1
push 0x6edd
lea eax, [ebp - 0x4dc]
push eax
push 0xeb6
push 0x822
push 0x72a5
push 0x236b
push 0x4398
push 0x55c3
push 1
push 0
call fcn.00460a11
add esp, 0x44
lea ecx, [ebp - 0xdc0]
call fcn.0043493d
mov byte [ebp - 0x42c], 9
mov byte [ebp - 0x42b], 0x31
mov byte [ebp - 0x42a], 6
mov byte [ebp - 0x429], 0x34
mov byte [ebp - 0x428], 1
mov byte [ebp - 0x427], 0x3a
mov byte [ebp - 0x426], 7
mov byte [ebp - 0x425], 0x3d
mov byte [ebp - 0x424], 0
mov byte [ebp - 0x423], 0x3a
mov byte [ebp - 0x422], 5
mov byte [ebp - 0x421], 0x3c
mov byte [ebp - 0x420], 3
mov byte [ebp - 0x41f], 0x44
mov byte [ebp - 0x41e], 4
mov byte [ebp - 0x41d], 0x47
mov byte [ebp - 0x41c], 2
mov byte [ebp - 0x41b], 0x48
mov byte [ebp - 0x41a], 8
mov byte [ebp - 0x419], 0x43
mov byte [ebp - 0x418], 0x13
mov byte [ebp - 0x417], 0x70
mov byte [ebp - 0x416], 0x6d
mov byte [ebp - 0x415], 0xba
mov byte [ebp - 0x414], 0x77
mov byte [ebp - 0x413], 8
mov byte [ebp - 0x412], 0xe7
mov byte [ebp - 0x411], 0xc0
mov byte [ebp - 0x410], 0x45
mov byte [ebp - 0x40f], 0x37
mov byte [ebp - 0x40e], 0xd1
mov byte [ebp - 0x40d], 0xe6
mov byte [ebp - 0x40c], 0x70
mov byte [ebp - 0x40b], 0x23
mov byte [ebp - 0x40a], 3
mov byte [ebp - 0x409], 0xae
mov byte [ebp - 0x408], 0x3c
mov byte [ebp - 0x407], 0x92
mov byte [ebp - 0x406], 0x7c
mov dword [ebp - 0x150], 0
mov dword [ebp - 0x49c], 0xb2fc257a
mov dword [ebp - 0x130], 0x912e
mov dword [ebp - 0x6a8], 0xcfcb8f1f
mov dword [ebp - 0xe50], 0xffffffff
mov dword [ebp - 0x1070], 0x4d9faba
mov dword [ebp - 0x14ec], 0x625aa9c4
mov dword [ebp - 0x2a8], 0
jmp 0x463d30
mov eax, dword [ebp - 0x2a8]
inc eax
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2a8], 3
jge 0x463d4c
mov eax, dword [ebp - 0x2a8]
mov dword [ebp + eax*4 - 0x18d4], 1
jmp 0x463d23
mov eax, dword [ebp - 0x150]
cmp dword [ebp - 0x150], eax
jge 0x463d66
mov dword [ebp - 0x690], 1
jmp 0x463d6d
and dword [ebp - 0x690], 0
cmp dword [ebp - 0x150], 0
jbe 0x463d82
mov dword [ebp - 0xc88], 1
jmp 0x463d89
and dword [ebp - 0xc88], 0
mov eax, dword [ebp - 0xc88]
mov dword [ebp - 0x49c], eax
mov eax, dword [ebp - 0x130]
cmp dword [ebp - 0x49c], eax
je 0x463db5
mov eax, 0x5073
test eax, eax
jne 0x463db5
and dword [ebp - 0x688], 0
jmp 0x463dbf
mov dword [ebp - 0x688], 1
mov eax, dword [ebp - 0x688]
neg eax
jne 0x463ddb
cmp dword [ebp - 0x49c], 0
jne 0x463ddb
and dword [ebp - 0x9f8], 0
jmp 0x463de5
mov dword [ebp - 0x9f8], 1
mov eax, dword [ebp - 0x9f8]
sub eax, dword [ebp - 0x130]
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x18d4], eax
cmp dword [ebp - 0x690], 1
jle 0x463e13
mov dword [ebp - 0xbb0], 1
jmp 0x463e1a
and dword [ebp - 0xbb0], 0
mov eax, dword [ebp - 0xbb0]
sub eax, dword [ebp - 0x150]
cmp eax, dword [ebp - 0x130]
jge 0x463e3a
mov dword [ebp - 0x698], 1
jmp 0x463e41
and dword [ebp - 0x698], 0
mov eax, dword [ebp - 0x130]
cmp dword [ebp - 0x698], eax
jl 0x463e5b
mov dword [ebp - 0xa00], 1
jmp 0x463e62
and dword [ebp - 0xa00], 0
imul eax, dword [ebp - 0xa00], 0xbed8
cmp eax, 0xffff
jbe 0x463e7f
mov dword [ebp - 0x6a0], 1
jmp 0x463e86
and dword [ebp - 0x6a0], 0
mov eax, dword [ebp - 0x150]
cmp dword [ebp - 0x6a0], eax
je 0x463ea6
cmp dword [ebp - 0x130], 0
jne 0x463ea6
and dword [ebp - 0xcf8], 0
jmp 0x463eb0
mov dword [ebp - 0xcf8], 1
mov eax, dword [ebp - 0xcf8]
mov dword [ebp - 0x6a8], eax
mov eax, dword [ebp - 0x130]
cmp dword [ebp - 0x6a8], eax
je 0x463edf
mov eax, 0xe01e
test eax, eax
jne 0x463edf
mov dword [ebp - 0xa08], 1
jmp 0x463ee6
and dword [ebp - 0xa08], 0
mov eax, dword [ebp - 0xe50]
cmp dword [ebp - 0xa08], eax
jg 0x463f00
mov dword [ebp - 0x6b0], 1
jmp 0x463f07
and dword [ebp - 0x6b0], 0
mov eax, dword [ebp - 0x150]
cmp dword [ebp - 0x6b0], eax
jl 0x463f21
mov dword [ebp - 0xbb8], 1
jmp 0x463f28
and dword [ebp - 0xbb8], 0
cmp dword [ebp - 0xbb8], 1
ja 0x463f3d
mov dword [ebp - 0x6b8], 1
jmp 0x463f44
and dword [ebp - 0x6b8], 0
mov eax, dword [ebp - 0x6b8]
mov dword [ebp - 0x1070], eax
and dword [ebp - 0xd0], 0
and dword [ebp - 0xa10], 0
jmp 0x463f6e
mov eax, dword [ebp - 0xd0]
inc eax
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0x27
jae 0x464cd0
push 1
push 0x2d5b
push 0
push 0x2619
push 0
push 0x4c30
call fcn.0043e390
add esp, 0x18
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x42c]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0xd0], eax
jne 0x4641ee
push 1
push 1
lea eax, [ebp - 0xa10]
push eax
push 0x5ee7
push 0x37e2
push 1
push 0
push 0x4016
call fcn.0043fae6
add esp, 0x20
push 4
lea ecx, [ebp - 0x1708]
call fcn.0043486b
mov dword [ebp - 0x74], 0
jmp 0x463ff9
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 4
jge 0x464012
push dword [ebp - 0x74]
lea ecx, [ebp - 0x1708]
call fcn.00434959
and dword [eax], 0
jmp 0x463ff2
mov dword [ebp - 0x74], 0
jmp 0x464022
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 4
jge 0x464038
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0x14b0], 0x7632667a
jmp 0x46401b
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x14b0], 0
jmp 0x464063
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x14b0]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x14b0], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x14b0], 3
jg 0x4640ce
mov byte [ebp - 0x115], 0
push 0x1a99
push 0xf1e
push 1
push 0x823
lea eax, [ebp - 0x115]
push eax
push 1
push 0x1425
push 1
push 0x22a5
push 0x4f4b
push 0x463b
push 0x1ebd
push 0x79f0
push 1
push 1
push 0x5bff
push 0x8da
call fcn.0043f5a2
add esp, 0x44
jmp 0x46404a
lea ecx, [ebp - 0x1708]
call fcn.0043493d
push 0x7ea0
push 0x7c95
lea eax, [ebp - 0xd0]
push eax
push 1
push 1
push 0x2137
push 0x1eb9
push 1
push 1
call fcn.0044fa5d
add esp, 0x24
mov dword [ebp - 0x184], 0xbac64a68
push 3
lea ecx, [ebp - 0x1718]
call fcn.0043486b
push 1
push 0x621c
lea eax, [ebp - 0x1718]
push eax
push 0x4573
lea eax, [ebp - 0x14f4]
push eax
push 1
push 0x651f
push 0
push 0
call fcn.0045f73b
add esp, 0x24
mov dword [ebp - 0x184], 0
jmp 0x464161
mov eax, dword [ebp - 0x184]
dec eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 0xfffffff5
jl 0x4641ba
push 1
push 0x668d
push 0x186
push 1
push 1
push 0x621e
push 0x2fee
push 0x5a66
push 0x3295
push 0x7a9d
push 0x74c
push 0x7656
push 1
push 1
push 0x501b
push 0x305a
push 0x2941
call fcn.0044fd7b
add esp, 0x44
jmp 0x464154
push 0x3209
push 1
push 1
lea eax, [ebp - 0x184]
push eax
push 0x1ce2
push 0x2c77
push 1
call fcn.0043f884
add esp, 0x1c
lea ecx, [ebp - 0x1718]
call fcn.0043493d
jmp 0x463f60
mov dword [ebp - 0xe58], 0xc4b4e126
mov dword [ebp - 0x12c8], 0x83c67ee3
mov dword [ebp - 0x12c4], 0x83c67ee3
mov dword [ebp - 0x12c0], 0x83c67ee3
mov dword [ebp - 0x12bc], 0x83c67ee3
lea ecx, [ebp - 0x4a1]
call fcn.00434968
push eax
lea eax, [ebp - 0x12b8]
push eax
lea eax, [ebp - 0x12c8]
push eax
lea ecx, [ebp - 0x1918]
call fcn.0043496b
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1218]
call fcn.00434917
mov dword [ebp - 0x160], 0x30dfddae
mov dword [ebp - 0x1a4], 0x77904128
mov dword [ebp - 0x138], 0x4b11f381
mov dword [ebp - 0x1120], 0xfffa
mov dword [ebp - 0x14fc], 2
mov dword [ebp - 0x1504], 1
mov dword [ebp - 0x150c], 0
mov dword [ebp - 0x1514], 0xffffffff
mov dword [ebp - 0x151c], 0x526954eb
mov dword [ebp - 0x1524], 6
push 2
lea ecx, [ebp - 0x1410]
call fcn.0043486b
mov dword [ebp - 0xa8], 0
jmp 0x4642df
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 4
jge 0x4642fb
mov eax, dword [ebp - 0xa8]
mov dword [ebp + eax*4 - 0x1a7c], 0xd0bb265d
jmp 0x4642d2
mov dword [ebp - 0xa8], 0
jmp 0x464314
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 2
jge 0x464333
push dword [ebp - 0xa8]
lea ecx, [ebp - 0x1410]
call fcn.00434959
and dword [eax], 0
jmp 0x464307
push 0x73c8
lea eax, [ebp - 0x138]
push eax
lea eax, [ebp - 0x160]
push eax
push 0x53a2
push 0x2511
lea eax, [ebp - 0x1a4]
push eax
lea eax, [ebp - 0xe58]
push eax
lea eax, [ebp - 0x1120]
push eax
push 0x62b9
push 0x2d80
push 0x71d
push 1
push 0x5285
push 0x3c2b
lea eax, [ebp - 0x1218]
push eax
push 1
push 0x17a3
push 0
push 0
push 0x3235
push 0x6cc2
push 0
call fcn.00449534
add esp, 0x58
mov dword [ebp - 0x138], 3
jmp 0x4643bf
mov eax, dword [ebp - 0x138]
dec eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0
jl 0x4646fc
push 2
lea ecx, [ebp - 0x126c]
call fcn.0043486b
push 4
lea ecx, [ebp - 0x1254]
call fcn.0043486b
push 1
push 0x6c4d
lea eax, [ebp - 0x126c]
push eax
push 0x420d
push 0x7c35
push 0x41e1
lea eax, [ebp - 0xe60]
push eax
push 1
push 0x3eb
push 0x4fa4
push 0x11f6
push 0x66e7
push 0x517
push 0xd36
push 1
push 0x565f
call fcn.00450422
add esp, 0x40
push 1
push 1
push 0x3984
push 0x3f54
push 0x2d14
push 0x4c77
push 0
lea eax, [ebp - 0xe60]
push eax
push 0
push 1
push 0x1283
lea eax, [ebp - 0x1254]
push eax
push 0x4e66
push 0x439
push 0x957
push 0x1fa4
push 0x2d4f
push 0x1cc0
push 0x1d1a
push 0x798
push 1
push 0x4698
push 0x3bd0
call fcn.004545e7
add esp, 0x5c
push dword [ebp - 0x138]
lea ecx, [ebp - 0x1218]
call fcn.00434959
cmp dword [eax], 0
je 0x4644d7
lea ecx, [ebp - 0x1254]
call fcn.0043493d
lea ecx, [ebp - 0x126c]
call fcn.0043493d
jmp 0x4646fc
mov dword [ebp - 0x1a4], 0
jmp 0x4644f0
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 3
jg 0x4646e1
mov dword [ebp - 0xe68], 0xff93f8de
or dword [ebp - 0x132c], 0xffffffff
or dword [ebp - 0x1328], 0xffffffff
or dword [ebp - 0x1324], 0xffffffff
or dword [ebp - 0x1320], 0xffffffff
lea ecx, [ebp - 0x4a9]
call fcn.00434968
push eax
lea eax, [ebp - 0x131c]
push eax
lea eax, [ebp - 0x132c]
push eax
lea ecx, [ebp - 0x1998]
call fcn.0043496b
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1728]
call fcn.00434917
mov dword [ebp - 0x152c], 1
mov dword [ebp - 0x11ec], 0x6ca3
mov dword [ebp - 0x160], 3
jmp 0x464585
mov eax, dword [ebp - 0x160]
dec eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 0
jl 0x4646d1
mov dword [ebp - 0x1078], 0xfffffffc
mov dword [ebp - 0x1534], 0xffffffff
mov dword [ebp - 0x153c], 0x4b54c5f6
mov dword [ebp - 0x1544], 0xe98d7e94
mov dword [ebp - 0x154c], 5
and dword [ebp - 0x12f0], 0
and dword [ebp - 0x12ec], 0
and dword [ebp - 0x12e8], 0
and dword [ebp - 0x12e4], 0
lea ecx, [ebp - 0x4b1]
call fcn.00434968
push eax
lea eax, [ebp - 0x12e0]
push eax
lea eax, [ebp - 0x12f0]
push eax
lea ecx, [ebp - 0x1988]
call fcn.0043496b
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1904]
call fcn.00434917
push 0x3862
push 0x5b9a
lea eax, [ebp - 0x160]
push eax
push 0x8d8
lea eax, [ebp - 0x1728]
push eax
push 0x1026
push 0x5117
push 1
push 0x2b49
lea eax, [ebp - 0x1410]
push eax
push 0x160b
lea eax, [ebp - 0x1078]
push eax
push 0x2062
lea eax, [ebp - 0x126c]
push eax
push 0
lea eax, [ebp - 0xe68]
push eax
push 0x9f8
lea eax, [ebp - 0x1254]
push eax
lea eax, [ebp - 0x11ec]
push eax
lea eax, [ebp - 0x1218]
push eax
push 0x6d2f
push 1
push 1
push 0x1ad5
call fcn.00451838
add esp, 0x60
push 0x4cf8
push 1
push 1
push 1
push 0x7b29
push 0x7d86
push 0x5591
push 1
push 1
call fcn.004509c2
add esp, 0x24
lea ecx, [ebp - 0x1904]
call fcn.0043493d
jmp 0x464578
lea ecx, [ebp - 0x1728]
call fcn.0043493d
jmp 0x4644e3
lea ecx, [ebp - 0x1254]
call fcn.0043493d
lea ecx, [ebp - 0x126c]
call fcn.0043493d
jmp 0x4643b2
lea ecx, [ebp - 0x1410]
call fcn.0043493d
lea ecx, [ebp - 0x1218]
call fcn.0043493d
mov eax, dword [ebp - 0xd0]
movzx eax, byte [ebp + eax - 0x42b]
sub eax, dword [ebp - 0xd0]
mov ecx, dword [ebp - 0xa10]
lea eax, [eax + ecx - 1]
mov dword [ebp - 0x700], eax
mov dword [ebp - 0x20], 0xf572
mov dword [ebp - 0x18c], 0xfffffffc
push 4
lea ecx, [ebp - 0xd84]
call fcn.0043486b
mov dword [ebp - 0x4a0], 0
mov dword [ebp - 0x1088], 0xedd6
mov dword [ebp - 0xe88], 4
push 2
lea ecx, [ebp - 0x1440]
call fcn.0043486b
push 0x3071
push 1
push 1
push 0
lea eax, [ebp - 0xe70]
push eax
push 0x257d
lea eax, [ebp - 0xd84]
push eax
push 1
push 1
call fcn.004509c2
add esp, 0x24
push 0x2f2d
push 0x17dc
push 0x2b6c
push 0x319
push 0
push 0x78e1
push 0x375e
push 0x7dba
push 0x6436
push 0
push 0x513a
push 0x1e1a
lea eax, [ebp - 0xe70]
push eax
lea eax, [ebp - 0x1440]
push eax
push 1
push 1
push 0x4c09
call fcn.0044b6aa
add esp, 0x44
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x1554], eax
imul eax, dword [ebp - 0x20], 0xa80e
cmp eax, 0xfffffffa
jge 0x46481f
mov dword [ebp - 0x6d0], 1
jmp 0x464826
and dword [ebp - 0x6d0], 0
imul eax, dword [ebp - 0x20], 0xa715
cmp eax, dword [ebp - 0x20]
jl 0x46483e
mov dword [ebp - 0x6c0], 1
jmp 0x464845
and dword [ebp - 0x6c0], 0
cmp dword [ebp - 0x6c0], 1
je 0x46485a
mov dword [ebp - 0xc90], 1
jmp 0x464861
and dword [ebp - 0xc90], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0xc90], eax
jg 0x464878
mov dword [ebp - 0x6c8], 1
jmp 0x46487f
and dword [ebp - 0x6c8], 0
cmp dword [ebp - 0x6c8], 0xbdb9
jge 0x464897
mov dword [ebp - 0xa18], 1
jmp 0x46489e
and dword [ebp - 0xa18], 0
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0xa18]
neg eax
add eax, dword [ebp - 0x6d0]
imul eax, eax, 0xd0e7
cmp eax, dword [ebp - 0x20]
jle 0x4648c6
mov dword [ebp - 0xbc0], 1
jmp 0x4648cd
and dword [ebp - 0xbc0], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0xbc0], eax
jle 0x46491e
mov dword [ebp - 0x1080], 0xffffffff
push 0x2069
push 0x58d0
push 0x4f76
push 0xaea
push 1
lea eax, [ebp - 0x1080]
push eax
push 0x16f1
push 1
push 1
push 1
push 1
push 0x2ca8
call fcn.00450b8a
add esp, 0x30
jmp 0x464b7f
mov dword [ebp - 0x6f0], 0
mov dword [ebp - 0xa20], 0
mov dword [ebp - 0xe78], 0x5395f87b
mov dword [ebp - 0xa30], 0x69c17f72
mov dword [ebp - 0x18c], 0xffffffe8
jmp 0x46495f
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0xfffffff9
jg 0x464b60
mov dword [ebp - 0xc4], 0xffffffff
mov dword [ebp - 0x378], 0
jmp 0x46498f
mov eax, dword [ebp - 0x378]
inc eax
mov dword [ebp - 0x378], eax
cmp dword [ebp - 0x378], 1
jge 0x4649ab
mov eax, dword [ebp - 0x378]
mov dword [ebp + eax*4 - 0xe80], 0x87c7592e
jmp 0x464982
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x155c], eax
mov eax, dword [ebp - 0x6f0]
imul eax, dword [ebp - 0xc4]
add eax, dword [ebp - 0x4a0]
sub eax, dword [ebp - 0xc4]
cmp eax, dword [ebp - 0xc4]
jle 0x4649e4
mov dword [ebp - 0x6d8], 1
jmp 0x4649eb
and dword [ebp - 0x6d8], 0
mov eax, dword [ebp - 0x6d8]
mov dword [ebp - 0xa20], eax
cmp dword [ebp - 0xa20], 0xae26e165
ja 0x464a0f
mov dword [ebp - 0x6e0], 1
jmp 0x464a16
and dword [ebp - 0x6e0], 0
mov eax, dword [ebp - 0x6e0]
mov dword [ebp - 0xe78], eax
cmp dword [ebp - 0xc4], 0
je 0x464a3d
cmp dword [ebp - 0x20], 0
je 0x464a3d
mov dword [ebp - 0xd28], 1
jmp 0x464a44
and dword [ebp - 0xd28], 0
cmp dword [ebp - 0xd28], 0xadbd
jge 0x464a5c
mov dword [ebp - 0x6e8], 1
jmp 0x464a63
and dword [ebp - 0x6e8], 0
mov eax, dword [ebp - 0x18c]
cmp dword [ebp - 0x6e8], eax
jle 0x464a7d
mov dword [ebp - 0xa28], 1
jmp 0x464a84
and dword [ebp - 0xa28], 0
push 3
lea ecx, [ebp - 0xd84]
call fcn.00434959
mov ecx, dword [ebp - 0xa28]
cmp ecx, dword [eax]
je 0x464aa7
mov dword [ebp - 0xbc8], 1
jmp 0x464aae
and dword [ebp - 0xbc8], 0
mov eax, dword [ebp - 0x6f0]
cmp eax, dword [ebp - 0xbc8]
jge 0x464ac8
mov dword [ebp - 0x6f8], 1
jmp 0x464acf
and dword [ebp - 0x6f8], 0
mov eax, dword [ebp - 0x4a0]
cmp dword [ebp - 0x6f8], eax
je 0x464ae9
mov dword [ebp - 0x1130], 1
jmp 0x464af0
and dword [ebp - 0x1130], 0
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x1564], eax
mov eax, 0x2629
test eax, eax
je 0x464b1a
cmp dword [ebp - 0xc4], 0
je 0x464b1a
mov dword [ebp - 0x4e4], 1
jmp 0x464b21
and dword [ebp - 0x4e4], 0
push 2
lea ecx, [ebp - 0xd84]
call fcn.00434959
mov ecx, dword [ebp - 0x4e4]
mov dword [eax], ecx
mov eax, dword [ebp - 0xc4]
sub eax, dword [ebp - 0x4e4]
mov dword [ebp - 0xa30], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xa30]
mov dword [ebp + eax - 0xe80], ecx
jmp 0x464952
push 1
push 0x2c07
push 1
lea eax, [ebp - 0xd84]
push eax
push 0x2c4f
push 1
call fcn.0043fd43
add esp, 0x18
mov dword [ebp - 0x20], 0x1d
jmp 0x464b8f
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 9
jle 0x464c7e
push 3
lea ecx, [ebp - 0x1428]
call fcn.0043486b
mov dword [ebp - 0xe90], 1
mov dword [ebp - 0x11e0], 0x5ddb3f0f
push 0x7818
push 1
push 1
lea eax, [ebp - 0x1428]
push eax
push 1
push 0x52ce
push 0x70bc
push 0x3dc0
push 0x4c97
push 1
push 0x1fa9
push 0
push 0x2f30
push 0x1a56
lea eax, [ebp - 0x156c]
push eax
push 0x1b85
push 1
push 0x7b61
push 0x3f02
push 0x4c0c
call fcn.004555a0
add esp, 0x50
lea eax, [ebp - 0x1088]
push eax
push 0
lea eax, [ebp - 0x1440]
push eax
push 1
push 0x50d6
push 1
lea eax, [ebp - 0x4a0]
push eax
lea eax, [ebp - 0xe88]
push eax
push 0x2078
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x11e0]
push eax
push 1
lea eax, [ebp - 0x1428]
push eax
lea eax, [ebp - 0xd84]
push eax
lea eax, [ebp - 0xe90]
push eax
call fcn.0043d7c5
add esp, 0x3c
lea ecx, [ebp - 0x1428]
call fcn.0043493d
jmp 0x464b88
lea ecx, [ebp - 0x1440]
call fcn.0043493d
lea ecx, [ebp - 0xd84]
call fcn.0043493d
push 1
push 1
lea eax, [ebp - 0x700]
push eax
push 1
push 0x23b2
push 1
call fcn.0043fea0
add esp, 0x18
mov eax, dword [ebp - 0xd0]
movzx eax, byte [ebp + eax - 0x42c]
mov cl, byte [ebp - 0x700]
mov byte [ebp + eax - 0x12b4], cl
jmp 0x463f60
mov dword [ebp - 0x44], 0x98a8f939
mov dword [ebp - 0x1a8], 0xd1bca9d6
mov dword [ebp - 0x2b0], 0
jmp 0x464cfa
mov eax, dword [ebp - 0x2b0]
inc eax
mov dword [ebp - 0x2b0], eax
cmp dword [ebp - 0x2b0], 2
jge 0x464d16
mov eax, dword [ebp - 0x2b0]
mov dword [ebp + eax*4 - 0x1274], 0
jmp 0x464ced
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x1574], eax
cmp dword [ebp - 0x44], 0xffff
ja 0x464d34
mov dword [ebp - 0x1090], 1
jmp 0x464d3b
and dword [ebp - 0x1090], 0
cmp dword [ebp - 0x44], 0xde63
jge 0x464d52
xor eax, eax
inc eax
jne 0x464d52
and dword [ebp - 0xc98], 0
jmp 0x464d5c
mov dword [ebp - 0xc98], 1
mov dword [ebp - 0x1a8], 0x693
mov eax, dword [ebp - 0x1a8]
cmp eax, dword [ebp - 0xc98]
jl 0x464d80
mov dword [ebp - 0x708], 1
jmp 0x464d87
and dword [ebp - 0x708], 0
mov eax, dword [ebp - 0x44]
cmp eax, dword [ebp - 0x708]
jl 0x464d9e
mov dword [ebp - 0xa38], 1
jmp 0x464da5
and dword [ebp - 0xa38], 0
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0xa38], eax
jl 0x464dbf
cmp dword [ebp - 0x44], 0
jne 0x464dbf
and dword [ebp - 0x710], 0
jmp 0x464dc9
mov dword [ebp - 0x710], 1
imul eax, dword [ebp - 0x710], 0x9220
test eax, eax
je 0x464dfb
push 1
push 1
push 0
push 0x5e39
push 0
push 0x5199
push 0x32d9
call fcn.00451da0
add esp, 0x1c
jmp 0x464fb4
mov dword [ebp - 0x2b8], 1
mov dword [ebp - 0x718], 0xa4f2a6ca
mov dword [ebp - 0x720], 0xfffffff7
mov dword [ebp - 0xd00], 0xffffffff
mov dword [ebp - 0xe98], 0
mov dword [ebp - 0x338], 0
jmp 0x464e46
mov eax, dword [ebp - 0x338]
inc eax
mov dword [ebp - 0x338], eax
cmp dword [ebp - 0x338], 1
jge 0x464e62
mov eax, dword [ebp - 0x338]
mov dword [ebp + eax*4 - 0x728], 0xfffffff7
jmp 0x464e39
mov eax, dword [ebp - 0x2b8]
mov dword [ebp - 0x157c], eax
mov eax, dword [ebp - 0x2b8]
cmp dword [ebp - 0x44], eax
jl 0x464e85
mov dword [ebp - 0xbd0], 1
jmp 0x464e8c
and dword [ebp - 0xbd0], 0
mov eax, dword [ebp - 0xbd0]
mov dword [ebp - 0x718], eax
mov eax, dword [ebp - 0x718]
mov dword [ebp - 0x1a8], eax
mov eax, dword [ebp - 0x2b8]
cmp dword [ebp - 0x1a8], eax
jle 0x464ebe
mov dword [ebp - 0xa40], 1
jmp 0x464ec5
and dword [ebp - 0xa40], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x728]
add eax, dword [ebp - 0xa40]
imul eax, eax, 0xa922
mov dword [ebp - 0x720], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x720]
sub ecx, dword [ebp + eax - 0x1274]
mov eax, dword [ebp - 0x44]
add eax, ecx
mov dword [ebp - 0xd00], eax
mov eax, dword [ebp - 0xd00]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x728]
cmp eax, 1
jae 0x464f27
mov dword [ebp - 0xa48], 1
jmp 0x464f2e
and dword [ebp - 0xa48], 0
mov eax, dword [ebp - 0xa48]
mov dword [ebp - 0xe98], eax
mov dword [ebp - 0x44], 0
jmp 0x464f4a
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0x35
je 0x464fb4
mov eax, dword [ebp - 0x2b8]
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x1274]
cmp eax, 1
je 0x464f74
mov dword [ebp - 0x730], 1
jmp 0x464f7b
and dword [ebp - 0x730], 0
cmp dword [ebp - 0x730], 0x4d2c643d
jl 0x464f98
or eax, 0xffffffff
je 0x464f98
mov dword [ebp - 0xbd8], 1
jmp 0x464f9f
and dword [ebp - 0xbd8], 0
imul eax, dword [ebp - 0xbd8], 0xe6c1
imul eax, eax, 0
mov dword [ebp - 0x1a8], eax
jmp 0x464f43
xor eax, eax
inc eax
imul eax, eax, 0xa
mov byte [ebp + eax - 0x12b4], 0
mov dword [ebp - 0x3b8], 0xc68ec0ae
mov dword [ebp - 0x1584], 0x166941fc
mov byte [ebp - 0xe9], 0
movzx eax, byte [ebp - 0xe9]
test eax, eax
je 0x465042
push 0
push 1
push 0x3311
push 0x38b3
push 1
push 0x2628
push 0x5483
push 0xc42
push 1
push 1
push 0x371f
push 0x7324
push 0x453d
push 0x7d74
push 0x43a
push 1
push 0x5dba
push 0x49d2
push 0x15b9
push 0x6cf1
call fcn.00456184
add esp, 0x50
mov dword [ebp - 0x3b8], 0
jmp 0x46505b
mov eax, dword [ebp - 0x3b8]
dec eax
mov dword [ebp - 0x3b8], eax
cmp dword [ebp - 0x3b8], 0xfffffff9
je 0x465190
push 3
lea ecx, [ebp - 0x114c]
call fcn.0043486b
push 1
push 1
push 0x5814
push 0x5814
push 0x3258
push 0x7fac
push 0x5e29
push 0
push 1
lea eax, [ebp - 0x114c]
push eax
lea eax, [ebp - 0x158c]
push eax
push 0x4d85
call fcn.00458661
add esp, 0x30
push 0
lea ecx, [ebp - 0x114c]
call fcn.00434959
and dword [eax], 0
jmp 0x4650e7
push 0
lea ecx, [ebp - 0x114c]
call fcn.00434959
mov dword [ebp - 0x738], eax
mov eax, dword [ebp - 0x738]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x738]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x114c]
call fcn.00434959
cmp dword [eax], 0xb
jge 0x465180
mov dword [ebp - 0x2c0], 0x54165132
mov dword [ebp - 0x2c0], 0
jmp 0x465120
mov eax, dword [ebp - 0x2c0]
inc eax
mov dword [ebp - 0x2c0], eax
cmp dword [ebp - 0x2c0], 0x1d
jne 0x46517b
mov dword [ebp - 0x340], 0
jmp 0x465142
mov eax, dword [ebp - 0x340]
inc eax
mov dword [ebp - 0x340], eax
cmp dword [ebp - 0x340], 2
jge 0x46515e
mov eax, dword [ebp - 0x340]
mov dword [ebp + eax*4 - 0x128c], 0xfffffffd
jmp 0x465135
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x128c]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x128c], eax
jmp 0x465113
jmp 0x4650c3
lea ecx, [ebp - 0x114c]
call fcn.0043493d
jmp 0x46504e
push 0xa
lea eax, [ebp - 0x12b4]
push eax
lea ecx, [ebp - 0x19d0]
call fcn.004076c3
xor edx, edx
mov ecx, eax
call fcn.00434b9b
pop ecx
mov dword [ebp - 0x1004], eax
lea ecx, [ebp - 0x19d0]
call fcn.00402a4a
mov dword [ebp - 0xe0], 0x469ad59e
mov dword [ebp - 0x1140], 0
mov dword [ebp - 0x1594], 0xffffffff
mov dword [ebp - 0x2c8], 0
jmp 0x4651f6
mov eax, dword [ebp - 0x2c8]
inc eax
mov dword [ebp - 0x2c8], eax
cmp dword [ebp - 0x2c8], 1
jge 0x465212
mov eax, dword [ebp - 0x2c8]
mov dword [ebp + eax*4 - 0x1b0], 0xfffffffc
jmp 0x4651e9
mov dword [ebp - 0xe0], 0
jmp 0x46522b
mov eax, dword [ebp - 0xe0]
dec eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0
jl 0x465275
mov dword [ebp - 0x194], 0x390197f0
mov dword [ebp - 0x194], 0
jmp 0x465257
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 1
jge 0x465273
mov eax, dword [ebp - 0x194]
mov dword [ebp + eax*4 - 0x1b0], 0xfffffffa
jmp 0x46524a
jmp 0x46521e
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0x159c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1b0], 0
je 0x46532f
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0xe0], eax
mov eax, 0xd018
sub eax, dword [ebp - 0xe0]
inc eax
cmp eax, 0x90f9986e
jb 0x4652c0
mov dword [ebp - 0xa50], 1
jmp 0x4652c7
and dword [ebp - 0xa50], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1b0]
cmp dword [ebp - 0xa50], eax
jg 0x4652e8
mov dword [ebp - 0x740], 1
jmp 0x4652ef
and dword [ebp - 0x740], 0
cmp dword [ebp - 0x740], 0xf889
jne 0x465307
mov dword [ebp - 0xca0], 1
jmp 0x46530e
and dword [ebp - 0xca0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1b0]
cmp dword [ebp - 0xca0], eax
jg 0x46532f
mov dword [ebp - 0x748], 1
jmp 0x465336
and dword [ebp - 0x748], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1b0]
cmp dword [ebp - 0x748], eax
jl 0x465357
mov dword [ebp - 0xa58], 1
jmp 0x46535e
and dword [ebp - 0xa58], 0
mov eax, dword [ebp - 0xa58]
mov dword [ebp - 0x1140], eax
and dword [ebp - 0x2d0], 0
jmp 0x465380
cmp dword [ebp - 0x2d0], 0xb
jae 0x4657c9
push 3
lea ecx, [ebp - 0xd24]
call fcn.0043486b
mov dword [ebp - 0x158], 0x6fe6d39c
push 4
lea ecx, [ebp - 0x115c]
call fcn.0043486b
mov dword [ebp - 0x380], 3
mov dword [ebp - 0xea8], 0x69cd17cd
mov dword [ebp - 0x11d0], 1
mov dword [ebp - 0x140], 0
jmp 0x4653e8
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 2
jge 0x465404
mov eax, dword [ebp - 0x140]
mov dword [ebp + eax*4 - 0x254], 0
jmp 0x4653db
lea eax, [ebp - 0x140]
push eax
push 0x3bac
push 0x4f8f
push 0x292a
push 0x18ef
push 0x2e3c
push 1
push 1
push 1
push 1
push 0x1828
push 0x1f5
push 0x6307
lea eax, [ebp - 0xd24]
push eax
push 0x1976
push 0
push 0
push 0x5370
push 0x1ab1
call fcn.00450d3d
add esp, 0x4c
push 0xb3d
push 1
lea eax, [ebp - 0x115c]
push eax
push 0
lea eax, [ebp - 0x140]
push eax
push 1
push 1
push 0x1bc0
call fcn.0043c229
add esp, 0x20
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x254]
mov dword [ebp - 0x15a4], eax
push 2
lea ecx, [ebp - 0xd24]
call fcn.00434959
mov dword [ebp - 0x43c], eax
mov eax, dword [ebp - 0x43c]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x43c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x43c]
mov eax, dword [eax]
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 0
jne 0x4654ee
push 0
lea ecx, [ebp - 0xd24]
call fcn.00434959
cmp dword [eax], 0
je 0x4654ee
and dword [ebp - 0x750], 0
jmp 0x4654f8
mov dword [ebp - 0x750], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x254]
cmp eax, dword [ebp - 0x750]
jl 0x46554d
push 4
pop eax
imul eax, eax, 0
mov esi, dword [ebp + eax - 0x254]
push 0
lea ecx, [ebp - 0xd24]
call fcn.00434959
sub esi, dword [eax]
mov dword [ebp - 0x158], esi
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x254]
cmp dword [ebp - 0x158], eax
jg 0x46554d
and dword [ebp - 0xbe0], 0
jmp 0x465557
mov dword [ebp - 0xbe0], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x254]
cmp dword [ebp - 0xbe0], eax
je 0x465578
mov dword [ebp - 0x4d4], 1
jmp 0x46557f
and dword [ebp - 0x4d4], 0
push 2
lea ecx, [ebp - 0x115c]
call fcn.00434959
mov ecx, dword [ebp - 0x4d4]
mov dword [eax], ecx
cmp dword [ebp - 0x4d4], 0
je 0x4655b0
push 5
pop eax
test eax, eax
je 0x4655b0
mov dword [ebp - 0xea0], 1
jmp 0x4655b7
and dword [ebp - 0xea0], 0
mov eax, dword [ebp - 0x380]
mov dword [ebp - 0x15ac], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x254], 0
jne 0x4655e8
cmp dword [ebp - 0x158], 0
jne 0x4655e8
mov dword [ebp - 0x758], 1
jmp 0x4655ef
and dword [ebp - 0x758], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x758]
sub ecx, dword [ebp + eax - 0x254]
push 4
pop eax
imul eax, eax, 0
cmp ecx, dword [ebp + eax - 0x254]
jg 0x46561d
mov dword [ebp - 0x1098], 1
jmp 0x465624
and dword [ebp - 0x1098], 0
push 1
lea ecx, [ebp - 0x115c]
call fcn.00434959
push 2
lea ecx, [ebp - 0xd24]
call fcn.00434959
mov eax, dword [eax]
mov dword [ebp - 0xea8], eax
push 2
lea ecx, [ebp - 0x115c]
call fcn.00434959
mov eax, 0xb820
sub eax, dword [ebp - 0x380]
cmp dword [ebp - 0x380], eax
jl 0x465672
mov dword [ebp - 0xa60], 1
jmp 0x465679
and dword [ebp - 0xa60], 0
mov eax, dword [ebp - 0x11d0]
cmp dword [ebp - 0xa60], eax
je 0x4656a2
push 1
lea ecx, [ebp - 0xd24]
call fcn.00434959
cmp dword [eax], 0
jne 0x4656a2
and dword [ebp - 0x760], 0
jmp 0x4656ac
mov dword [ebp - 0x760], 1
cmp dword [ebp - 0x760], 0x25f8
jge 0x4656c4
mov dword [ebp - 0xcbc], 1
jmp 0x4656cb
and dword [ebp - 0xcbc], 0
mov eax, dword [ebp - 0x380]
cmp dword [ebp - 0xcbc], eax
jge 0x4656e5
mov dword [ebp - 0x768], 1
jmp 0x4656ec
and dword [ebp - 0x768], 0
cmp dword [ebp - 0x768], 0x4108fa7a
jge 0x465704
mov dword [ebp - 0xa68], 1
jmp 0x46570b
and dword [ebp - 0xa68], 0
push 2
lea ecx, [ebp - 0xd24]
call fcn.00434959
mov ecx, dword [ebp - 0xa68]
cmp ecx, dword [eax]
je 0x46572e
mov dword [ebp - 0xeb0], 1
jmp 0x465735
and dword [ebp - 0xeb0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x254]
mov dword [ebp - 0x15b4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x254]
mov dword [ebp - 0x15bc], eax
push 0xfffffffffffffffd
pop eax
test eax, eax
jae 0x46576e
mov dword [ebp - 0x770], 1
jmp 0x465775
and dword [ebp - 0x770], 0
cmp dword [ebp - 0x770], 0xceb8
jl 0x46578d
mov dword [ebp - 0xbe8], 1
jmp 0x465794
and dword [ebp - 0xbe8], 0
mov eax, dword [ebp - 0xbe8]
mov dword [ebp - 0x158], eax
lea ecx, [ebp - 0x115c]
call fcn.0043493d
lea ecx, [ebp - 0xd24]
call fcn.0043493d
mov eax, dword [ebp - 0x2d0]
mov byte [ebp + eax - 0x12b4], 0
jmp 0x465373
mov dword [ebp - 0xeb8], 0xfffffffa
mov dword [ebp - 0xc8], 0xbb7
mov dword [ebp - 0x444], 0
mov dword [ebp - 0x790], 1
mov dword [ebp - 0x348], 0
jmp 0x46580a
mov eax, dword [ebp - 0x348]
inc eax
mov dword [ebp - 0x348], eax
cmp dword [ebp - 0x348], 3
jge 0x465826
mov eax, dword [ebp - 0x348]
mov dword [ebp + eax*4 - 0x18b0], 0xaee0cd97
jmp 0x4657fd
mov eax, dword [ebp - 0xc8]
dec eax
mov dword [ebp - 0xc8], eax
mov eax, dword [ebp - 0x444]
mov dword [ebp - 0x15c4], eax
cmp dword [ebp - 0xc8], 0
je 0x46585d
cmp dword [ebp - 0x790], 0
je 0x46585d
mov dword [ebp - 0x778], 1
jmp 0x465864
and dword [ebp - 0x778], 0
mov eax, dword [ebp - 0x778]
mov dword [ebp - 0x444], eax
mov eax, dword [ebp - 0x444]
add eax, dword [ebp - 0xc8]
jne 0x46588c
or eax, 0xffffffff
jne 0x46588c
and dword [ebp - 0xa70], 0
jmp 0x465896
mov dword [ebp - 0xa70], 1
cmp dword [ebp - 0xa70], 0
je 0x4658ab
mov dword [ebp - 0x780], 1
jmp 0x4658b2
and dword [ebp - 0x780], 0
mov eax, dword [ebp - 0xc8]
cmp dword [ebp - 0x780], eax
je 0x4658cc
mov dword [ebp - 0xca8], 1
jmp 0x4658d3
and dword [ebp - 0xca8], 0
cmp dword [ebp - 0xca8], 0x8064
jg 0x4658eb
mov dword [ebp - 0x788], 1
jmp 0x4658f2
and dword [ebp - 0x788], 0
cmp dword [ebp - 0x788], 0
jbe 0x465907
mov dword [ebp - 0xa78], 1
jmp 0x46590e
and dword [ebp - 0xa78], 0
cmp dword [ebp - 0xa78], 0x185a
jl 0x465926
mov dword [ebp - 0x10a0], 1
jmp 0x46592d
and dword [ebp - 0x10a0], 0
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0x15cc], eax
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0x15d4], eax
mov eax, dword [ebp - 0x790]
cmp dword [ebp - 0xc8], eax
jl 0x46595f
mov dword [ebp - 0xbf0], 1
jmp 0x465966
and dword [ebp - 0xbf0], 0
mov eax, dword [ebp - 0xeb8]
cmp dword [ebp - 0xbf0], eax
jg 0x465980
mov dword [ebp - 0x798], 1
jmp 0x465987
and dword [ebp - 0x798], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x798]
mov dword [ebp + eax - 0x18b0], ecx
mov dword [ebp - 0xfc], 2
mov dword [ebp - 0xec0], 0xfffffffb
mov dword [ebp - 0xfc], 0
jmp 0x4659c6
cmp dword [ebp - 0xfc], 0xffffffed
jl 0x465a84
mov dword [ebp - 0x1150], 4
mov dword [ebp - 0x2d8], 0
jmp 0x4659f6
mov eax, dword [ebp - 0x2d8]
inc eax
mov dword [ebp - 0x2d8], eax
cmp dword [ebp - 0x2d8], 3
jge 0x465a12
mov eax, dword [ebp - 0x2d8]
mov dword [ebp + eax*4 - 0x1738], 0xffffffff
jmp 0x4659e9
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1738]
cmp dword [ebp - 0xfc], eax
jle 0x465a33
mov dword [ebp - 0xa80], 1
jmp 0x465a3a
and dword [ebp - 0xa80], 0
mov eax, dword [ebp - 0xa80]
add eax, 0x85c9e53
push 4
pop ecx
shl ecx, 0
imul eax, dword [ebp + ecx - 0x1738]
cmp eax, 0x43c
jle 0x465a66
push 0
lea eax, [ebp - 0xec0]
push eax
push 1
push 0xc6e
push 1
push 0x5540
push 0x1e01
push 0x2459
push 0x31d2
push 0
lea eax, [ebp - 0xfc]
push eax
call fcn.0043e059
add esp, 0x2c
mov dword [ebp - 4], 0x78948018
mov dword [ebp - 0x98], 0xfffffffe
mov dword [ebp - 0xd4], 0xfffffff6
mov dword [ebp - 0x800], 0xb387e8d
mov eax, dword [ebp - 4]
mov dword [ebp - 0x15dc], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x15e4], eax
xor eax, eax
inc eax
sub eax, dword [ebp - 4]
imul eax, dword [ebp - 4]
cmp eax, dword [ebp - 4]
jge 0x465b0d
mov dword [ebp - 0xcc4], 1
jmp 0x465b14
and dword [ebp - 0xcc4], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0xcc4], eax
je 0x465b2b
mov dword [ebp - 0x7a8], 1
jmp 0x465b32
and dword [ebp - 0x7a8], 0
cmp dword [ebp - 0x7a8], 3
je 0x465b47
mov dword [ebp - 0xa88], 1
jmp 0x465b4e
and dword [ebp - 0xa88], 0
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0xa88]
cmp eax, dword [ebp - 4]
jne 0x465b75
push 0
push 0xc53
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetTextExtentPointA]
jmp 0x46e4d3
mov eax, dword [ebp - 0xf14]
mov dword [ebp - 0xf5c], eax
mov eax, dword [ebp - 0xf1c]
mov dword [ebp - 0xf44], eax
mov eax, dword [ebp - 0xf24]
mov dword [ebp - 0xf54], eax
mov eax, dword [ebp - 0xf2c]
mov dword [ebp - 0xf64], eax
mov eax, dword [ebp - 0xf34]
mov dword [ebp - 0xf6c], eax
mov eax, dword [ebp - 0xf3c]
mov dword [ebp - 0xf4c], eax
push dword [ebp - 0xf44]
push dword [ebp - 0xf4c]
push dword [ebp - 0xf54]
push 0
push dword [ebp - 0xf5c]
push dword [ebp - 0xf64]
push 0
push dword [ebp - 0xf6c]
call fcn.00451736
add esp, 0x20
jmp 0x46e4fd
mov eax, dword [ebp + 0x34]
mov dword [ebp - 0xf74], eax
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 0xf7c], eax
push dword [ebp - 0xf74]
push dword [ebp - 0xf7c]
push 1
call fcn.0043a53e
add esp, 0xc
pop edi
pop esi
mov esp, ebp
pop ebp
ret