Function at 0x457a3c
Capabilities:
Inspect section memory permissions

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4c58ed
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x4e0
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 0x24]
test eax, eax
je 0x459d2b
mov eax, dword [ebp + 0x34]
mov dword [ebp - 0x2d4], eax
mov eax, dword [ebp + 0x30]
mov dword [ebp - 0x2d8], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x220], eax
lea eax, [ebp + 0x28]
mov dword [ebp - 0x2fc], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x2dc], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x284], eax
lea eax, [ebp + 0x2c]
mov dword [ebp - 0x2e8], eax
lea eax, [ebp + 8]
mov dword [ebp - 0x27c], eax
lea eax, [ebp + 0x10]
mov dword [ebp - 0x28c], eax
mov eax, dword [ebp - 0x2fc]
movzx eax, byte [eax]
test eax, eax
je 0x4590b9
mov eax, dword [ebp - 0x2d4]
mov dword [ebp - 0x2c0], eax
mov eax, dword [ebp - 0x2dc]
mov dword [ebp - 0x2b0], eax
mov eax, dword [ebp - 0x2e8]
mov dword [ebp - 0x2e4], eax
mov eax, dword [ebp - 0x2e4]
movzx eax, byte [eax]
test eax, eax
je 0x457b2e
mov eax, dword [ebp - 0x2c0]
mov dword [ebp - 0x22c], eax
mov eax, dword [ebp - 0x22c]
mov dword [ebp - 0x1f4], eax
mov eax, dword [ebp - 0x1f4]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x1f4]
mov dword [ecx], eax
jmp 0x4590b4
mov eax, dword [ebp - 0x2b0]
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0x24], 0x185299da
mov dword [ebp - 0xac], 0xbeb0647d
mov dword [ebp - 0x20c], 5
mov dword [ebp - 0x108], 0xee39f3fa
push 3
lea ecx, [ebp - 0x3e8]
call fcn.0040b279
mov dword [ebp - 0x2ac], 0xffffffff
mov dword [ebp - 0x3c0], 0xc5ad058b
mov dword [ebp - 0xa4], 0
jmp 0x457b99
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 3
jge 0x457bbb
push dword [ebp - 0xa4]
lea ecx, [ebp - 0x3e8]
call fcn.0040b367
mov dword [eax], 0xf3b8cff2
jmp 0x457b8c
push 0x6e6f
lea eax, [ebp - 0x24]
push eax
push 0x49f1
push 1
push 1
push 1
push 0x2708
lea eax, [ebp - 0xac]
push eax
push 0
call fcn.004391ee
add esp, 0x24
mov dword [ebp - 0x204], 0x3418
mov dword [ebp - 0x234], str.ousxoesqn_ybrnaw_dfk_bomnpaysv_iiij_nrwacibj_yuxvmgvv
cmp dword [ebp - 0x204], 0x34d0
jle 0x457cb7
and dword [ebp - 0x7c], 0
jmp 0x457c16
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0x2f12
jge 0x457cb7
and dword [ebp - 0x74], 0
jmp 0x457c30
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0x356a
jge 0x457cb2
and dword [ebp - 0xb8], 0
jmp 0x457c4f
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0x3647
jge 0x457cad
mov eax, dword [ebp - 0x74]
imul eax, dword [ebp - 0xb8]
mov ecx, dword [ebp - 0x7c]
sub ecx, eax
mov eax, ecx
cdq
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2c8], edx
push dword [ebp - 0x2c8]
push dword [ebp - 0x2cc]
lea ecx, [ebp - 0x4d0]
call fcn.00401a48
pop ecx
pop ecx
mov ecx, eax
call fcn.0040b047
push eax
call fcn.004af8e7
pop ecx
lea ecx, [ebp - 0x4d0]
call fcn.0040b03d
jmp 0x457c42
jmp 0x457c29
jmp 0x457c0f
and dword [ebp - 4], 0
cmp dword [ebp - 0x204], 0x30a9
jge 0x457cd3
push dword [ebp - 0x234]
call fcn.004af8e7
pop ecx
jmp 0x457cef
or dword [ebp - 4], 0xffffffff
jmp 0x457cf9
mov dword [ebp - 0xac], 0x14b5
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0x20c], eax
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x20c]
jge 0x457d26
mov dword [ebp - 0x100], 1
jmp 0x457d2d
and dword [ebp - 0x100], 0
cmp dword [ebp - 0x24], 0
jne 0x457d42
cmp dword [ebp - 0x24], 0
jne 0x457d42
and dword [ebp - 0x1fc], 0
jmp 0x457d4c
mov dword [ebp - 0x1fc], 1
mov eax, dword [ebp - 0x24]
imul eax, dword [ebp - 0x100]
cmp eax, dword [ebp - 0x1fc]
jl 0x457d6a
mov dword [ebp - 0x1d0], 1
jmp 0x457d71
and dword [ebp - 0x1d0], 0
mov eax, dword [ebp - 0x1d0]
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0
je 0x457d8c
cmp dword [ebp - 0x24], 0
jne 0x457d9b
cmp dword [ebp - 0x24], 0
jne 0x457d9b
and dword [ebp - 0x190], 0
jmp 0x457da5
mov dword [ebp - 0x190], 1
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x190], eax
jne 0x457dbc
mov dword [ebp - 0x110], 1
jmp 0x457dc3
and dword [ebp - 0x110], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x110], eax
jne 0x457dda
mov dword [ebp - 0x210], 1
jmp 0x457de1
and dword [ebp - 0x210], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x210], eax
jne 0x457df8
mov dword [ebp - 0x118], 1
jmp 0x457dff
and dword [ebp - 0x118], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x118], eax
jge 0x457e11
push 3
pop eax
test eax, eax
je 0x457e41
push 1
push 0x1998
push 1
push 0x7ff9
push 0x6418
push 0x60ff
lea eax, [ebp - 0xac]
push eax
push 1
push 1
call fcn.0041bb04
add esp, 0x24
jmp 0x457ee1
mov dword [ebp - 0x3ec], 9
mov dword [ebp - 0x388], 0x814b11f3
mov dword [ebp - 0x390], 0x40c3
mov dword [ebp - 0x84], 0
jmp 0x457e78
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 4
jge 0x457e94
mov eax, dword [ebp - 0x84]
mov dword [ebp + eax*4 - 0x4f0], 0xfffffffc
jmp 0x457e6b
push 1
push 0
push 0x4b6a
push 1
push 0x4d5a
push 0x1660
push 0x55ff
push 0
push 0x2719
push 0x7a38
push 0x5308
call fcn.00453a5d
add esp, 0x2c
push 1
push 0x505c
push 1
push 1
lea eax, [ebp - 0x2ac]
push eax
call fcn.004187f5
add esp, 0x14
lea ecx, [ebp - 0x3e8]
call fcn.0040b34b
mov eax, dword [ebp - 0xb0]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xb0]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 0x14]
lea eax, [eax + ecx + 0x18]
mov dword [ebp - 0x20], eax
and dword [ebp - 0xbc], 0
jmp 0x457f26
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0x20]
add eax, 0x28
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0xb0]
mov eax, dword [eax]
movzx eax, word [eax + 6]
cmp dword [ebp - 0xbc], eax
jge 0x4590b4
push 0x6221
push 0x2cfe
push 0x1a5
push 0x3835
push 1
push 0x190b
push 0x6127
push 1
push 0
push 1
push 1
call fcn.00439a8f
add esp, 0x2c
mov dword [ebp - 0xe8], 0xffffffff
mov dword [ebp - 0xe4], 0xffffffff
mov dword [ebp - 0xe0], 0xffffffff
mov dword [ebp - 0xdc], 0xffffffff
mov dword [ebp - 0x23c], 0
mov dword [ebp - 0xb4], 0
jmp 0x457fb9
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 3
jge 0x457fd5
mov eax, dword [ebp - 0xb4]
mov dword [ebp + eax*4 - 0x32c], 0xffffffff
jmp 0x457fac
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0xe8], 2
jmp 0x458003
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xe8]
dec eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0xe8], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0xe8], 0
jl 0x4581be
push 3
lea ecx, [ebp - 0x368]
call fcn.0040b279
mov dword [ebp - 0x120], 0xb9dbea52
mov dword [ebp - 0x1a0], 0x8382bdb9
mov dword [ebp - 0x130], 0
push 0x57
push 0x6285
push 0x4883
push 1
push 0x5ef3
push 0x18ff
push 0x66f1
lea eax, [ebp - 0x398]
push eax
push 0x40e7
push 0x1d8a
push 1
push 0x7b26
lea eax, [ebp - 0x368]
push eax
push 0x46f3
push 0x1ec8
push 1
push 0xd6a
push 0
push 0x4f46
call fcn.0042b426
add esp, 0x4c
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xe8]
mov eax, dword [ebp + eax*4 - 0x32c]
mov dword [ebp - 0x3a0], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xe8]
mov dword [ebp - 0x198], eax
push 2
lea ecx, [ebp - 0x368]
call fcn.0040b367
mov ecx, dword [ebp - 0x198]
mov dword [eax], ecx
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0
je 0x458158
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0xe8], 0
jne 0x458126
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe8]
mov dword [ebp - 0x3a8], eax
xor eax, eax
inc eax
jne 0x458126
and dword [ebp - 0x1d8], 0
jmp 0x458130
mov dword [ebp - 0x1d8], 1
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xe8]
mov eax, dword [ebp + eax*4 - 0x32c]
cmp dword [ebp - 0x1d8], eax
jge 0x458158
mov dword [ebp - 0x128], 1
jmp 0x45815f
and dword [ebp - 0x128], 0
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0x1a0], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xe8]
mov ecx, dword [ebp - 0x1a0]
sub ecx, dword [ebp + eax*4 - 0x32c]
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xe8]
mov eax, dword [ebp + eax*4 - 0x32c]
imul eax, ecx
mov dword [ebp - 0x130], eax
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x23c], eax
lea ecx, [ebp - 0x368]
call fcn.0040b34b
jmp 0x457fe8
push 0x3447
push 0x1430
push 0x6817
push 0x51d7
push 1
push 1
push 0
push 1
push 0x585f
push 0x7044
push 0x41e
push 0x4ed2
push 0x5f8f
push 1
push 0x36f7
call fcn.00455c4c
add esp, 0x3c
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x24]
and eax, 0x20000000
je 0x45821b
mov dword [ebp - 0x1f8], 1
jmp 0x458222
and dword [ebp - 0x1f8], 0
mov eax, dword [ebp - 0x1f8]
mov dword [ebp - 0x26c], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x24]
and eax, 0x40000000
je 0x458247
mov dword [ebp - 0x138], 1
jmp 0x45824e
and dword [ebp - 0x138], 0
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x2c4], eax
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x3b0], 0x5761be36
mov dword [ebp - 0xc0], 0x41311e2d
mov dword [ebp - 0x1c], 0xbd4856cd
mov dword [ebp - 0x38], 2
cmp dword [ebp - 0x50], 0xf72d4ea6
jbe 0x4582fd
cmp dword [ebp - 0x50], 0xd94b
jle 0x4582a1
mov dword [ebp - 0x1a8], 1
jmp 0x4582a8
and dword [ebp - 0x1a8], 0
cmp dword [ebp - 0x1a8], 0x81d21f1e
ja 0x4582c0
mov dword [ebp - 0x140], 1
jmp 0x4582c7
and dword [ebp - 0x140], 0
cmp dword [ebp - 0x140], 0xa831d26e
ja 0x4582df
mov dword [ebp - 0x1e0], 1
jmp 0x4582e6
and dword [ebp - 0x1e0], 0
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x1e0], eax
jle 0x4582fd
mov dword [ebp - 0x148], 1
jmp 0x458304
and dword [ebp - 0x148], 0
mov eax, dword [ebp - 0x50]
add eax, dword [ebp - 0x148]
je 0x4583c5
mov dword [ebp - 0x24c], 0xfffa
mov dword [ebp - 0x2b4], 0x799333c7
mov dword [ebp - 0x2e0], 0x58f5537c
mov dword [ebp - 0x3b8], 4
mov dword [ebp - 0x384], 0xf7bdd484
mov dword [ebp - 0x244], 1
push 0x5585
push 1
push 0x45a8
push 1
push 1
call fcn.00418d33
add esp, 0x14
push 0x5d9a
lea eax, [ebp - 0x2e0]
push eax
lea eax, [ebp - 0x244]
push eax
push 1
push 0x1b5c
push 1
lea eax, [ebp - 0xc0]
push eax
push 1
lea eax, [ebp - 0x2b4]
push eax
push 0x3089
push 1
push 0x500b
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x1c]
push eax
push 0x4120
lea eax, [ebp - 0x24c]
push eax
push 0x2808
call fcn.00419086
add esp, 0x44
jmp 0x458702
push 4
lea ecx, [ebp - 0xcc]
call fcn.0040b279
mov dword [ebp - 0x3c8], 0xc1dc0ac7
lea eax, [ebp - 0x60]
push eax
push 1
push 0
push 0x6158
push 0x1b38
push 0x1cbe
push 1
push 1
push 0x2991
push 0x7e6d
push 0x1aeb
push 0
push 0x5cc9
lea eax, [ebp - 0xcc]
push eax
push 1
push 0x215a
call fcn.0045686c
add esp, 0x40
mov dword [ebp - 0x60], 0
jmp 0x458433
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 2
jge 0x458449
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x474], 0x9c36de1f
jmp 0x45842c
mov dword [ebp - 0x38], 0
jmp 0x458459
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 3
jg 0x4586f7
mov dword [ebp - 0x348], 0x21a1
mov dword [ebp - 0x344], 0x21a1
mov dword [ebp - 0x340], 0x21a1
mov dword [ebp - 0x33c], 0x21a1
mov dword [ebp - 0xd4], 0x3e67b33d
push 0x1db0
push 0x6ecb
push 0x3a4b
push 0x5a5f
push 0x1700
push 0x5d42
push 1
push 0x11d2
push 1
push 1
push 0
push 0x17fc
push 1
push 0x4e7c
call fcn.0043bec1
add esp, 0x38
mov byte [ebp - 0x39], 0
movzx eax, byte [ebp - 0x39]
test eax, eax
je 0x458502
push 1
push 0
push 0x675d
push 0x70bb
push 1
push 0xb86
push 0x7297
call fcn.0042cc6e
add esp, 0x1c
mov dword [ebp - 0x1c], 3
jmp 0x458512
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jl 0x4586f2
cmp dword [ebp - 0xd4], 1
jl 0x458531
mov dword [ebp - 0x1b0], 1
jmp 0x458538
and dword [ebp - 0x1b0], 0
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xcc]
call fcn.0040b367
mov ecx, dword [ebp - 0x1b0]
cmp ecx, dword [eax]
je 0x45855c
mov dword [ebp - 0x150], 1
jmp 0x458563
and dword [ebp - 0x150], 0
mov eax, dword [ebp - 0xc0]
cmp dword [ebp - 0x150], eax
jl 0x45857d
mov dword [ebp - 0x208], 1
jmp 0x458584
and dword [ebp - 0x208], 0
push dword [ebp - 0x38]
lea ecx, [ebp - 0xcc]
call fcn.0040b367
mov ecx, dword [ebp - 0x208]
cmp ecx, dword [eax]
jl 0x4585a8
mov dword [ebp - 0x158], 1
jmp 0x4585af
and dword [ebp - 0x158], 0
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0xd4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x348]
cmp dword [ebp - 0xd4], eax
jne 0x4585dc
mov dword [ebp - 0x1b8], 1
jmp 0x4585e3
and dword [ebp - 0x1b8], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x348]
cmp dword [ebp - 0x1b8], eax
jle 0x458604
mov dword [ebp - 0x160], 1
jmp 0x45860b
and dword [ebp - 0x160], 0
push 3
lea ecx, [ebp - 0xcc]
call fcn.0040b367
mov ecx, dword [ebp - 0x160]
cmp ecx, dword [eax]
je 0x458631
cmp dword [ebp - 0x1c], 0
jne 0x458631
and dword [ebp - 0x1e8], 0
jmp 0x45863b
mov dword [ebp - 0x1e8], 1
push dword [ebp - 0x38]
lea ecx, [ebp - 0xcc]
call fcn.0040b367
mov ecx, dword [ebp - 0x1e8]
cmp ecx, dword [eax]
jl 0x45865f
mov dword [ebp - 0x30c], 1
jmp 0x458666
and dword [ebp - 0x30c], 0
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xcc]
call fcn.0040b367
push dword [ebp - 0x38]
lea ecx, [ebp - 0xcc]
call fcn.0040b367
push dword [ebp - 0x38]
lea ecx, [ebp - 0xcc]
call fcn.0040b367
mov esi, eax
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xcc]
call fcn.0040b367
mov ecx, dword [esi]
cmp ecx, dword [eax]
jl 0x4586b2
mov dword [ebp - 0x8c], 1
jmp 0x4586b9
and dword [ebp - 0x8c], 0
push 3
lea ecx, [ebp - 0xcc]
call fcn.0040b367
mov ecx, dword [ebp - 0x8c]
mov dword [eax], ecx
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x8c]
mov dword [ebp + eax - 0x474], ecx
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0xc0], eax
jmp 0x45850b
jmp 0x458452
lea ecx, [ebp - 0xcc]
call fcn.0040b34b
mov dword [ebp - 0x1c], 0xffffffed
jmp 0x458712
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0xf
jl 0x458746
push 0x5d99
push 0x14db
push 1
push 0
push 1
push 0x59f2
push 0x8d5
push 0x74dd
push 0x28b7
call fcn.0043307f
add esp, 0x24
jmp 0x45870b
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x24]
and eax, 0x80000000
je 0x45875f
mov dword [ebp - 0x168], 1
jmp 0x458766
and dword [ebp - 0x168], 0
mov eax, dword [ebp - 0x168]
mov dword [ebp - 0x320], eax
mov dword [ebp - 0x2bc], 0x60477862
mov dword [ebp - 0x254], 0xdfc9b996
mov dword [ebp - 0x3d0], 1
mov dword [ebp - 0x3d8], 0xf4df7b14
mov dword [ebp - 0x444], 0xfffffff6
mov dword [ebp - 0x44c], 0xfffffff9
mov dword [ebp - 0x478], 0xfffffffd
mov dword [ebp - 0x38c], 0xfffffffe
mov dword [ebp - 0x410], 5
push 2
lea ecx, [ebp - 0x3f8]
call fcn.0040b279
mov dword [ebp - 0x394], 2
mov dword [ebp - 0x47c], 0xbb5fb49a
mov dword [ebp - 0x25c], 0xffff
push 1
lea eax, [ebp - 0x39c]
push eax
push 1
push 1
push 0x689a
lea eax, [ebp - 0x3f8]
push eax
push 0x7d4b
push 0xcdd
push 1
push 0x76a9
call fcn.0041a038
add esp, 0x28
push 0x6ee0
lea eax, [ebp - 0x254]
push eax
push 1
push 0x7682
push 0x6935
lea eax, [ebp - 0x2bc]
push eax
push 0x5d3c
push 1
push 0x9af
push 0x18d3
push 1
push 1
call fcn.0041c493
add esp, 0x30
lea eax, [ebp - 0x25c]
push eax
push 0x3da0
push 1
push 0x52f
push 1
push 0x3d03
push 0
push 1
call fcn.0041b487
add esp, 0x20
lea ecx, [ebp - 0x3f8]
call fcn.0040b34b
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x24]
and eax, 0x2000000
je 0x4588cc
push 0x4000
mov eax, dword [ebp - 0x20]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x20]
push dword [eax + 8]
push 0x2c69
push 0x1bc5
call fcn.0040a7ca
pop ecx
pop ecx
call eax
jmp 0x457f10
push 1
lea ecx, [ebp - 0x42c]
call fcn.0040b279
mov dword [ebp - 0x68], 0xffffffff
mov dword [ebp - 0x420], 0xfffffff8
mov dword [ebp - 0x460], 8
mov dword [ebp - 0x45c], 8
mov dword [ebp - 0x458], 8
mov dword [ebp - 0x454], 8
mov dword [ebp - 0x3a4], 0
mov dword [ebp - 0x264], 0xffff
mov dword [ebp - 0x94], 0
jmp 0x45893f
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 1
jge 0x458961
push dword [ebp - 0x94]
lea ecx, [ebp - 0x42c]
call fcn.0040b367
mov dword [eax], 0x1713b910
jmp 0x458932
mov dword [ebp - 0x68], 0
jmp 0x458971
mov eax, dword [ebp - 0x68]
dec eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
jl 0x458a93
push 2
lea ecx, [ebp - 0x41c]
call fcn.0040b279
mov dword [ebp - 0x46c], 0x4678dc2a
mov dword [ebp - 0x3ac], 9
push 3
lea ecx, [ebp - 0x40c]
call fcn.0040b279
mov dword [ebp - 0x430], 0xd9827359
push 1
push 0x6b26
lea eax, [ebp - 0x41c]
push eax
push 1
push 0x2725
push 0x56d2
push 0
push 0x68de
lea eax, [ebp - 0x2ec]
push eax
call fcn.0041a952
add esp, 0x24
push 0x3859
push 0
push 0x334d
lea eax, [ebp - 0x40c]
push eax
push 1
push 0x11ef
push 1
push 0xb3f
lea eax, [ebp - 0x2ec]
push eax
push 1
push 1
push 0x2e24
call fcn.0044865a
add esp, 0x30
lea eax, [ebp - 0x264]
push eax
push 0x1002
push 0x1874
push 0
push 0x4644
push 0
push 0x3c9c
push 1
push 0x4ecd
push 1
call fcn.0043d844
add esp, 0x28
mov byte [ebp - 0x3d], 0
lea eax, [ebp - 0x3d]
push eax
push 0x624b
push 1
push 0
push 1
push 0x5be9
push 0x3eea
push 0x4dd5
push 1
call fcn.00447424
add esp, 0x24
lea ecx, [ebp - 0x40c]
call fcn.0040b34b
lea ecx, [ebp - 0x41c]
call fcn.0040b34b
jmp 0x45896a
lea ecx, [ebp - 0x42c]
call fcn.0040b34b
push 1
lea eax, [ebp - 0x2c4]
push eax
push 1
lea eax, [ebp - 0x2d0]
push eax
push 0x2242
push 0x16a4
push 0
lea eax, [ebp - 0x26c]
push eax
lea eax, [ebp - 0x320]
push eax
push 0x4cac
push 0x739e
push 0x45d3
lea eax, [ebp - 0x20]
push eax
call fcn.0043c2e7
add esp, 0x34
mov dword [ebp - 0x114], 0x8748
mov dword [ebp - 0x18], 7
push 2
lea ecx, [ebp - 0x380]
call fcn.0040b279
mov dword [ebp - 0x9c], 0xfffffff6
mov dword [ebp - 0x134], 0xfffffffd
mov dword [ebp - 0x2c], 0
jmp 0x458b27
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x458b3d
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x2f8], 0xfffffffe
jmp 0x458b20
mov dword [ebp - 0x2c], 0
jmp 0x458b4d
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jge 0x458b69
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x380]
call fcn.0040b367
mov dword [eax], 0xa2e712c5
jmp 0x458b46
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x3b4], eax
cmp dword [ebp - 0x18], 0x1a78e
jl 0x458b87
mov dword [ebp - 0x1c0], 1
jmp 0x458b8e
and dword [ebp - 0x1c0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2f8]
cmp dword [ebp - 0x1c0], eax
jne 0x458baf
mov dword [ebp - 0x170], 1
jmp 0x458bb6
and dword [ebp - 0x170], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2f8]
cmp dword [ebp - 0x170], eax
jge 0x458bdd
mov eax, 0x15a8df04
test eax, eax
jne 0x458bdd
and dword [ebp - 0x200], 0
jmp 0x458be7
mov dword [ebp - 0x200], 1
mov eax, dword [ebp - 0x200]
sub eax, 0x1914
jne 0x458c03
cmp dword [ebp - 0x18], 0
jne 0x458c03
and dword [ebp - 0x98], 0
jmp 0x458c0d
mov dword [ebp - 0x98], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x98]
mov dword [ebp + eax - 0x2f8], ecx
push 0
lea ecx, [ebp - 0x380]
call fcn.0040b367
mov ecx, dword [ebp - 0x98]
mov dword [eax], ecx
cmp dword [ebp - 0x98], 1
jl 0x458c4a
mov dword [ebp - 0x178], 1
jmp 0x458c51
and dword [ebp - 0x178], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x178], eax
jl 0x458c68
mov dword [ebp - 0x1c8], 1
jmp 0x458c6f
and dword [ebp - 0x1c8], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x1c8], eax
jge 0x458c86
mov dword [ebp - 0x180], 1
jmp 0x458c8d
and dword [ebp - 0x180], 0
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x180]
sub eax, 0x1210
cmp eax, 0x90ef874a
jb 0x458caf
mov dword [ebp - 0x1f0], 1
jmp 0x458cb6
and dword [ebp - 0x1f0], 0
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x1f0]
cmp eax, 0xffffffff
je 0x458cd0
mov dword [ebp - 0x188], 1
jmp 0x458cd7
and dword [ebp - 0x188], 0
cmp dword [ebp - 0x188], 0xffffffff
jb 0x458cec
mov dword [ebp - 0xfc], 1
jmp 0x458cf3
and dword [ebp - 0xfc], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0xfc], eax
jge 0x458d0a
mov dword [ebp - 0x104], 1
jmp 0x458d11
and dword [ebp - 0x104], 0
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x9c]
cmp dword [ebp - 0x18], eax
jge 0x458d31
mov dword [ebp - 0x10c], 1
jmp 0x458d38
and dword [ebp - 0x10c], 0
cmp dword [ebp - 0x10c], 1
je 0x458d4d
mov dword [ebp - 0x11c], 1
jmp 0x458d54
and dword [ebp - 0x11c], 0
mov dword [ebp - 0x114], 0x52c58fb7
mov eax, dword [ebp - 0x114]
cmp eax, dword [ebp - 0x11c]
je 0x458d78
mov dword [ebp - 0x124], 1
jmp 0x458d7f
and dword [ebp - 0x124], 0
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0
jne 0x458da2
push 6
pop eax
test eax, eax
jne 0x458da2
cmp dword [ebp - 0x9c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2f8]
mov dword [ebp - 0x480], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x134]
cmp dword [ebp + eax - 0x2f8], ecx
jl 0x458dd6
mov dword [ebp - 0x12c], 1
jmp 0x458ddd
and dword [ebp - 0x12c], 0
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0x134], eax
mov dword [ebp - 0x18], 0x11
jmp 0x458df9
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0x1c
jl 0x458e28
mov byte [ebp - 0x3b], 0
push 0x1ca0
lea eax, [ebp - 0x3b]
push eax
push 0x5459
push 1
push 1
push 1
push 0x6c7c
push 0
call fcn.00434aa9
add esp, 0x20
jmp 0x458df2
lea ecx, [ebp - 0x380]
call fcn.0040b34b
push 1
push 0x7d78
push 1
lea eax, [ebp - 0x20]
push eax
push 1
push 0x12e3
lea eax, [ebp - 0x144]
push eax
push 0x4c3
push 0x2b38
lea eax, [ebp - 0xb0]
push eax
call fcn.0041ae82
add esp, 0x28
mov dword [ebp - 0x6c], 0xae355683
mov dword [ebp - 0x6c], 0
jmp 0x458e7e
mov eax, dword [ebp - 0x6c]
dec eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0xffffffeb
jle 0x459021
mov dword [ebp - 0x58], 0xffffffff
mov dword [ebp - 0x58], 0xfffffff9
mov dword [ebp - 0x58], 0xffffffff
jmp 0x458ea6
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0xffffffff
jg 0x45901c
mov dword [ebp - 0x30], 0x26d2e858
mov dword [ebp - 0x70], 0
jmp 0x458ec7
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 4
jge 0x458edd
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0x4b8], 3
jmp 0x458ec0
mov dword [ebp - 0x30], 0
jmp 0x458eed
mov eax, dword [ebp - 0x30]
dec eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0xffffffe7
jne 0x458fc4
push 1
lea ecx, [ebp - 0x308]
call fcn.0040b279
lea eax, [ebp - 0x308]
push eax
push 0x7123
push 1
push 0x10
push 0x6ae2
push 1
push 1
push 1
push 0xab2
push 1
lea eax, [ebp - 0x3bc]
push eax
push 0
call fcn.00445d15
add esp, 0x30
push 0
lea ecx, [ebp - 0x308]
call fcn.0040b367
and dword [eax], 0
jmp 0x458f6d
push 0
lea ecx, [ebp - 0x308]
call fcn.0040b367
mov dword [ebp - 0x13c], eax
mov eax, dword [ebp - 0x13c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x13c]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x308]
call fcn.0040b367
cmp dword [eax], 3
jg 0x458fb4
push 0x60b1
push 0x31aa
push 1
push 0x57e0
push 0
push 0x588f
push 0x4cb5
push 0
push 0x3d6c
push 1
push 0xb5a
call fcn.0044122f
add esp, 0x2c
jmp 0x458f49
lea ecx, [ebp - 0x308]
call fcn.0040b34b
jmp 0x458ee6
mov dword [ebp - 0x30], 3
jmp 0x458fd4
mov eax, dword [ebp - 0x30]
dec eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
jl 0x459017
mov byte [ebp - 0x3f], 0
lea eax, [ebp - 0x3f]
push eax
push 0
push 1
push 0x400f
push 1
push 1
push 0x5a90
push 0x5c9d
push 0x5af0
call fcn.00453e5f
add esp, 0x24
mov eax, dword [ebp - 0x30]
cmp dword [ebp + eax*4 - 0x4b8], 0
je 0x459015
jmp 0x458fcd
jmp 0x458fcd
jmp 0x458e9f
jmp 0x458e77
cmp dword [ebp - 0x144], 0
jbe 0x4590af
mov dword [ebp - 0x274], 0x60477862
mov dword [ebp - 0x440], 7
lea eax, [ebp - 0x274]
push eax
push 0
push 0x1a58
push 0x5b52
push 1
push 0x215
push 1
call fcn.004468f5
add esp, 0x1c
push 0
push 0x90e
push 1
push 0x48d6
push 1
push 0x1b5d
call fcn.00456110
add esp, 0x18
lea eax, [ebp - 0x3c4]
push eax
push dword [ebp - 0x2d0]
push dword [ebp - 0x144]
mov eax, dword [ebp - 0x20]
push dword [eax + 8]
push 0x2c69
push 0x2f2f
call fcn.0040a7ca
pop ecx
pop ecx
call eax
jmp 0x457f10
jmp 0x459d29
mov eax, dword [ebp - 0x27c]
mov dword [ebp - 0x2a4], eax
mov eax, dword [ebp - 0x220]
mov dword [ebp - 0x280], eax
mov eax, dword [ebp - 0x284]
mov dword [ebp - 0x29c], eax
mov eax, dword [ebp - 0x2d8]
mov dword [ebp - 0x294], eax
mov eax, dword [ebp - 0x28c]
mov dword [ebp - 0x31c], eax
mov eax, dword [ebp - 0x31c]
movzx eax, byte [eax]
test eax, eax
je 0x459cd7
mov eax, dword [ebp - 0x294]
mov dword [ebp - 0x2a8], eax
mov eax, dword [ebp - 0x2a4]
mov dword [ebp - 0x278], eax
mov eax, dword [ebp - 0x29c]
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 0xa8]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x2a8]
add ecx, dword [eax]
mov dword [ebp - 0x260], ecx
mov eax, dword [ebp - 0xa8]
mov eax, dword [eax]
add eax, 8
mov dword [ebp - 0x88], eax
and dword [ebp - 0xd0], 0
jmp 0x459175
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0x88]
inc eax
inc eax
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0xa8]
mov eax, dword [eax]
mov eax, dword [eax + 4]
sub eax, 8
shr eax, 1
cmp dword [ebp - 0xd0], eax
jae 0x459bd9
mov dword [ebp - 0x224], 1
push 3
lea ecx, [ebp - 0x43c]
call fcn.0040b279
mov dword [ebp - 0x464], 0xffffffff
mov dword [ebp - 0x228], 0x2ba7b7e8
mov dword [ebp - 0x28], 0
jmp 0x4591cc
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jge 0x4591e2
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x400], 0xffffffff
jmp 0x4591c5
lea eax, [ebp - 0x28]
push eax
push 0xc
push 1
push 0
push 0x12fe
push 1
lea eax, [ebp - 0x43c]
push eax
call fcn.004419b6
add esp, 0x1c
mov dword [ebp - 0x28], 0
jmp 0x459212
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 4
jge 0x459228
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x4e0], 0xfffffff9
jmp 0x45920b
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x400]
mov dword [ebp - 0x224], eax
push 0x3ea5
push 1
push 0x2feb
push 1
push 0x763
push 0x2d9e
push 0x7c57
lea eax, [ebp - 0x228]
push eax
push 1
push 1
push 0x28fd
push 0x6a2a
call fcn.0041f1b5
add esp, 0x30
lea ecx, [ebp - 0x43c]
call fcn.0040b34b
push 4
lea ecx, [ebp - 0x318]
call fcn.0040b279
push 0x7359
push 0x3e99
push 1
push 0x5252
lea eax, [ebp - 0x318]
push eax
push 1
lea eax, [ebp - 0x4c]
push eax
push 1
call fcn.0042b26d
add esp, 0x20
mov dword [ebp - 0x4c], 0
jmp 0x4592c5
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 4
jge 0x4592db
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x4a8], 1
jmp 0x4592be
push 3
lea ecx, [ebp - 0x318]
call fcn.0040b367
push 3
lea ecx, [ebp - 0x318]
call fcn.0040b367
push 0
lea ecx, [ebp - 0x318]
call fcn.0040b367
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x4a8]
cmp dword [eax], ecx
je 0x45931e
mov dword [ebp - 0x14c], 1
jmp 0x459325
and dword [ebp - 0x14c], 0
xor eax, eax
inc eax
sub eax, dword [ebp - 0x14c]
je 0x4593c8
mov byte [ebp - 0x3e], 0
push 0x760a
push 0x6c46
push 0x7ed5
push 1
push 0x2e34
push 0x5906
push 0x53c0
push 0xad9
push 0x6594
push 0x6ae1
push 1
push 0x2346
push 0x6273
push 0x5adf
push 0x1383
push 1
lea eax, [ebp - 0x3e]
push eax
push 1
push 0x78b7
call fcn.0042b426
add esp, 0x4c
mov byte [ebp - 0x3c], 0
push 0xa9c
push 0x78cc
push 1
push 0x1a12
push 0x16e5
push 1
lea eax, [ebp - 0x3c]
push eax
push 0x178f
push 1
push 0x3f76
call fcn.0042b99f
add esp, 0x28
jmp 0x4593e9
push 1
push 0x5b97
push 0
push 0x20ae
push 1
push 1
push 1
push 0x3703
call fcn.0043bc29
add esp, 0x20
lea ecx, [ebp - 0x318]
call fcn.0040b34b
push 2
lea ecx, [ebp - 0xf4]
call fcn.0040b279
mov dword [ebp - 0x35c], 0x6d8d3833
mov dword [ebp - 0x358], 0x6d8d3833
mov dword [ebp - 0x354], 0x6d8d3833
mov dword [ebp - 0x350], 0x6d8d3833
lea ecx, [ebp - 0xd5]
call fcn.0040b376
push eax
lea eax, [ebp - 0x34c]
push eax
lea eax, [ebp - 0x35c]
push eax
lea ecx, [ebp - 0x498]
call fcn.0040b379
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x338]
call fcn.0040b325
mov dword [ebp - 0x34], 0xb785b647
mov dword [ebp - 0x1b4], 0xe2caeaba
mov dword [ebp - 0x5c], 0
push 0
lea eax, [ebp - 0xf4]
push eax
push 1
push 1
lea eax, [ebp - 0x54]
push eax
push 0x4099
push 1
call fcn.00444dae
add esp, 0x1c
mov dword [ebp - 0x54], 0
jmp 0x4594a6
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 3
jge 0x4594bc
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x21c], 0
jmp 0x45949f
push 1
lea ecx, [ebp - 0xf4]
call fcn.0040b367
cmp dword [eax], 0
jne 0x4594e0
mov eax, 0xffff
test eax, eax
jne 0x4594e0
and dword [ebp - 0x154], 0
jmp 0x4594ea
mov dword [ebp - 0x154], 1
push 1
lea ecx, [ebp - 0xf4]
call fcn.0040b367
mov esi, eax
push 0
lea ecx, [ebp - 0xf4]
call fcn.0040b367
mov ecx, dword [esi]
cmp ecx, dword [eax]
jl 0x459518
mov dword [ebp - 0x230], 1
jmp 0x45951f
and dword [ebp - 0x230], 0
push 1
lea ecx, [ebp - 0xf4]
call fcn.0040b367
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x21c]
mov dword [ebp - 0x3cc], eax
push 2
lea ecx, [ebp - 0x338]
call fcn.0040b367
cmp dword [eax], 0x98cafa32
jne 0x459560
mov dword [ebp - 0x15c], 1
jmp 0x459567
and dword [ebp - 0x15c], 0
mov eax, dword [ebp - 0x154]
cmp eax, dword [ebp - 0x15c]
jl 0x459593
push 2
lea ecx, [ebp - 0x338]
call fcn.0040b367
cmp dword [eax], 0
je 0x459593
mov dword [ebp - 0x164], 1
jmp 0x45959a
and dword [ebp - 0x164], 0
push 1
lea ecx, [ebp - 0xf4]
call fcn.0040b367
mov ecx, dword [ebp - 0x164]
mov dword [eax], ecx
mov dword [ebp - 0x34], 0xffffffea
jmp 0x4595bf
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0x15
jge 0x459a00
mov dword [ebp - 0x14], 1
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x21c], 0
ja 0x4595ec
mov dword [ebp - 0x194], 1
jmp 0x4595f3
and dword [ebp - 0x194], 0
cmp dword [ebp - 0x14], 0x4b26
jge 0x459608
mov dword [ebp - 0x16c], 1
jmp 0x45960f
and dword [ebp - 0x16c], 0
cmp dword [ebp - 0x16c], 0x8101aedf
jb 0x459627
mov dword [ebp - 0x174], 1
jmp 0x45962e
and dword [ebp - 0x174], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x174], eax
je 0x459645
mov dword [ebp - 0x17c], 1
jmp 0x45964c
and dword [ebp - 0x17c], 0
mov eax, dword [ebp - 0x17c]
neg eax
mov dword [ebp - 0x184], eax
push 1
lea ecx, [ebp - 0xf4]
call fcn.0040b367
mov ecx, dword [ebp - 0x184]
mov dword [eax], ecx
cmp dword [ebp - 0x184], 0
jne 0x459684
mov dword [ebp - 0x18c], 1
jmp 0x45968b
and dword [ebp - 0x18c], 0
push 2
lea ecx, [ebp - 0x338]
call fcn.0040b367
mov ecx, dword [ebp - 0x18c]
cmp ecx, dword [eax]
jle 0x4596ae
mov dword [ebp - 0x19c], 1
jmp 0x4596b5
and dword [ebp - 0x19c], 0
mov eax, dword [ebp - 0x194]
cmp eax, dword [ebp - 0x19c]
jge 0x4596df
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x21c], 0
je 0x4596df
mov dword [ebp - 0x1a4], 1
jmp 0x4596e6
and dword [ebp - 0x1a4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x21c]
cmp dword [ebp - 0x1a4], eax
jge 0x459707
mov dword [ebp - 0x1ac], 1
jmp 0x45970e
and dword [ebp - 0x1ac], 0
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x1b4], eax
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x1b4], eax
jge 0x459731
mov dword [ebp - 0x1bc], 1
jmp 0x459738
and dword [ebp - 0x1bc], 0
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x1bc]
jl 0x45974f
mov dword [ebp - 0x1c4], 1
jmp 0x459756
and dword [ebp - 0x1c4], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x1c4], eax
jg 0x45976d
mov dword [ebp - 0x1cc], 1
jmp 0x459774
and dword [ebp - 0x1cc], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x1cc], eax
jge 0x45978b
mov dword [ebp - 0x238], 1
jmp 0x459792
and dword [ebp - 0x238], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x448], eax
cmp dword [ebp - 0x34], 0
jne 0x4597a7
cmp dword [ebp - 0x14], 0
je 0x459821
push 1
push 0x473b
push 0x1cba
push 0x252a
push 1
push 0x1612
push 1
push 0
push 0x800
push 0x7222
push 1
call fcn.0043e355
add esp, 0x2c
mov dword [ebp - 0x14], 0
jmp 0x4597e7
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0xfffffff2
jge 0x45981c
push 1
push 0x3c83
push 0x50e9
push 1
push 0x430c
push 1
lea eax, [ebp - 0x5c]
push eax
push 1
push 0x473d
push 0x4393
call fcn.0041d7fd
add esp, 0x28
jmp 0x4597e0
jmp 0x4599bf
mov dword [ebp - 0x78], 3
mov byte [ebp - 0x40], 0
push 0x7f48
lea eax, [ebp - 0x40]
push eax
push 0x3a11
push 0
push 0x4ed0
push 0x5670
push 0x5a7
push 0x7a03
push 0x7760
push 1
push 1
push 1
push 0x6984
push 0x6c3e
push 0x2cfd
call fcn.004332a0
add esp, 0x3c
mov dword [ebp - 0x5c], 0xfffffffa
jmp 0x459882
mov eax, dword [ebp - 0x5c]
dec eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0xffffffe8
jg 0x4599bf
mov dword [ebp - 0x64], 0x5a40a7b4
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x3d4], eax
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x468], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x21c]
mov dword [ebp - 0x3dc], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x64]
cmp dword [ebp + eax - 0x21c], ecx
je 0x4598d6
mov dword [ebp - 0x240], 1
jmp 0x4598dd
and dword [ebp - 0x240], 0
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x450], eax
mov eax, dword [ebp - 0x78]
add eax, dword [ebp - 0x64]
imul eax, dword [ebp - 0x78]
cmp eax, dword [ebp - 0x64]
jle 0x459901
mov dword [ebp - 0x1d4], 1
jmp 0x459908
and dword [ebp - 0x1d4], 0
cmp dword [ebp - 0x1d4], 5
je 0x45991d
mov dword [ebp - 0x1dc], 1
jmp 0x459924
and dword [ebp - 0x1dc], 0
cmp dword [ebp - 0x1dc], 0
jle 0x459939
mov dword [ebp - 0x1e4], 1
jmp 0x459940
and dword [ebp - 0x1e4], 0
mov eax, dword [ebp - 0x78]
imul eax, dword [ebp - 0x1e4]
push 4
pop ecx
shl ecx, 0
imul eax, dword [ebp + ecx - 0x21c]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x21c]
jl 0x459973
mov dword [ebp - 0x1ec], 1
jmp 0x45997a
and dword [ebp - 0x1ec], 0
cmp dword [ebp - 0x1ec], 0
je 0x459995
cmp dword [ebp - 0x14], 0
je 0x459995
mov dword [ebp - 0xf8], 1
jmp 0x45999c
and dword [ebp - 0xf8], 0
mov eax, dword [ebp - 0xf8]
sub eax, dword [ebp - 0x64]
mov dword [ebp - 0x14], eax
mov esi, dword [ebp - 0x14]
push 1
lea ecx, [ebp - 0xf4]
call fcn.0040b367
mov dword [eax], esi
jmp 0x45987b
push 0x404e
push 1
push 0x3c2f
push 0x513b
push 0x7aa2
push 0x480c
lea eax, [ebp - 0x14]
push eax
push 0x25db
push 1
push 0
push 0x670f
push 0x531a
push 1
call fcn.0042f6f4
add esp, 0x34
jmp 0x4595b8
lea ecx, [ebp - 0x338]
call fcn.0040b34b
lea ecx, [ebp - 0xf4]
call fcn.0040b34b
push 0x7003
push 0x9be
push 0x17f9
push 0
push 1
push 1
push 0x57da
lea eax, [ebp - 0x88]
push eax
lea eax, [ebp - 0x250]
push eax
call fcn.0042be13
add esp, 0x24
push 1
lea ecx, [ebp - 0x374]
call fcn.0040b279
mov dword [ebp - 0x80], 0
jmp 0x459a63
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 1
jge 0x459a7f
push dword [ebp - 0x80]
lea ecx, [ebp - 0x374]
call fcn.0040b367
mov dword [eax], 0x1928c176
jmp 0x459a5c
push 0x66d7
push 0x487c
push 0x1f89
push 1
push 1
push 0x3146
push 0x55c
push 0x87a
push 1
push 1
push 0x7edf
lea eax, [ebp - 0x374]
push eax
push 0x2c4e
call fcn.0042c6cc
add esp, 0x34
push 1
push 0x2244
push 1
push 0x24cb
push 0xee2
push 0x4bad
push 0x588e
push 0
call fcn.0043c9ba
add esp, 0x20
lea ecx, [ebp - 0x374]
call fcn.0040b34b
push 1
push 1
push 0xaf5
lea eax, [ebp - 0x268]
push eax
push 1
lea eax, [ebp - 0x88]
push eax
push 0x479a
push 1
call fcn.0041e547
add esp, 0x20
mov dword [ebp - 0x248], 0x9b55bb2c
push 0x5d6d
lea eax, [ebp - 0x248]
push eax
push 0
push 0x28df
push 0x685e
push 1
push 0x213c
push 1
call fcn.0042b26d
add esp, 0x20
mov byte [ebp - 0x3a], 0
push 1
push 0x1fd5
push 1
push 1
lea eax, [ebp - 0x3a]
push eax
push 0x1f0f
call fcn.0042ca46
add esp, 0x18
mov eax, dword [ebp - 0x250]
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 3
je 0x459b84
jmp 0x459bd4
mov eax, dword [ebp - 0x260]
add eax, dword [ebp - 0x268]
mov dword [ebp - 0x270], eax
push 0x4ef8
push 1
lea eax, [ebp - 0x270]
push eax
push dword [ebp - 0x278]
push 0x4601
push 0x3e5b
push 1
push 0x6377
push 0x428a
push 1
push 0xee8
push 0x5a1e
call fcn.0041ec0d
add esp, 0x30
jmp 0x45915a
mov dword [ebp - 0x90], 0xc75b57fd
mov dword [ebp - 0x90], 0xffffffee
jmp 0x459bfc
mov eax, dword [ebp - 0x90]
dec eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0xffffffec
jge 0x459cb6
mov dword [ebp - 0x44], 0x1bf2
mov dword [ebp - 0xa0], 0
jmp 0x459c29
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 4
jge 0x459c45
mov eax, dword [ebp - 0xa0]
mov dword [ebp + eax*4 - 0x490], 0xffffffff
jmp 0x459c1c
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x490]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x44], 0
jmp 0x459c64
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 3
jg 0x459cb1
mov dword [ebp - 0x48], 0xef9d7865
mov dword [ebp - 0x48], 3
jmp 0x459c81
mov eax, dword [ebp - 0x48]
dec eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
jl 0x459ca7
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp + eax - 0x490]
mov dword [ebp + ecx*4 - 0x490], eax
cmp dword [ebp - 0x44], 0
je 0x459ca5
jmp 0x459c7a
jmp 0x459c7a
cmp dword [ebp - 0x48], 0
je 0x459caf
jmp 0x459c5d
jmp 0x459c5d
jmp 0x459bef
push 0x5529
push 1
push 0
push 0
lea eax, [ebp - 0xa8]
push eax
push 0x2884
call fcn.00457073
add esp, 0x18
jmp 0x459d29
mov eax, dword [ebp - 0x280]
mov dword [ebp - 0x288], eax
mov eax, dword [ebp - 0x288]
mov dword [ebp - 0x290], eax
mov eax, dword [ebp - 0x290]
movzx eax, byte [eax]
test eax, eax
je 0x459d29
push 0x1370
push 0
push 0x20dc
push 0xa1d
push 0x173e
push 0
push 0x23f7
push 0x47a
push 0xb51
call dword [sym.imp.USER32.dll_DrawIconEx]
jmp 0x459d7a
lea eax, [ebp + 0x38]
mov dword [ebp - 0x2b8], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x298], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x2a0], eax
push 1
push 0x6af3
push 0xe53
push dword [ebp - 0x298]
push 0x60ec
push dword [ebp - 0x2a0]
push 0x1ed1
mov eax, dword [ebp - 0x2b8]
movzx eax, byte [eax]
push eax
call fcn.0041d98c
add esp, 0x20
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret