Function at 0x46da30
Capabilities:
Inspect section memory permissions

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
lea eax, [ebp - 0x52c]
lea edi, [ebp - 0xa8]
mov esi, 0x5b44e0
push ebx
sub esp, 0x55c
mov dword [ebp - 0x50c], ebp
mov dword [esp], eax
mov dword [ebp - 0x514], 0x595d20
mov dword [ebp - 0x510], 0x5984dc
mov dword [ebp - 0x508], 0x471244
mov dword [ebp - 0x504], esp
call fcn.0057d6b0
mov ecx, 0x24
mov dword [ebp - 0x4ed], 0x2d504f54
rep movsd dword es:[edi], dword [esi]
mov byte [ebp - 0x4e5], 0
mov dword [ebp - 0x4e9], 0x4750534e
cmp byte [ebp - 0xa6], 0
jg 0x46dab1
mov byte [ebp - 0xa6], 6
movsx eax, byte [ebp - 0x9c]
cmp al, 5
je 0x46dad7
mov dword [esp], eax
lea ecx, [ebp - 0xa8]
mov dword [ebp - 0x528], 0xffffffff
call fcn.004221f0
sub esp, 4
mov dword [esp], 0xa
lea ecx, [ebp - 0x4e4]
mov dword [ebp - 0x528], 0xffffffff
call fcn.0041cdf0
mov dword [ebp - 0x530], 0
sub esp, 4
mov edi, dword [ebp - 0x530]
lea ecx, [ebp - 0x4e4]
mov dword [ebp - 0x528], 1
mov dword [esp], edi
call fcn.0041d070
mov edi, dword [ebp - 0x530]
mov ecx, eax
mov eax, 0xcccccccd
sub esp, 4
mov dword [esp + 0x20], 0
mul edi
mov eax, edi
movsx ebx, byte [edi + 0x59eb28]
mov dword [esp + 0x1c], 0
mov dword [esp + 0x10], 0x46d8a0
mov dword [esp + 0x18], ebx
shr edx, 2
lea esi, [edx + 1]
lea edx, [edx + edx*4]
sub eax, edx
shl esi, 5
lea edx, [ebp - 0x4e4]
add eax, 1
mov dword [esp + 0x14], edx
lea edx, [esi + 0xcc]
add esi, 0xad
imul eax, eax, 0x4e
mov dword [esp + 0xc], edx
mov dword [esp + 4], esi
lea edx, [eax + 0xdd]
add eax, 0x90
mov dword [esp + 8], edx
mov dword [esp], eax
call fcn.0041cc20
add dword [ebp - 0x530], 1
mov eax, dword [ebp - 0x530]
sub esp, 0x24
cmp eax, 0xa
jne 0x46db00
mov dword [esp], 7
lea ecx, [ebp - 0x4d8]
call fcn.0041cdf0
mov dword [ebp - 0x534], 0xc3
sub esp, 4
mov dword [ebp - 0x530], 0
mov eax, dword [ebp - 0x530]
lea ecx, [ebp - 0x4d8]
mov dword [ebp - 0x528], 2
mov dword [esp], eax
call fcn.0041d070
mov ebx, dword [ebp - 0x534]
add dword [ebp - 0x530], 1
mov ecx, eax
sub esp, 4
mov eax, dword [ebp - 0x530]
lea edx, [ebp - 0x4d8]
mov dword [esp + 0x20], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], eax
lea eax, [ebx + 0x22]
mov dword [esp + 0x14], edx
mov dword [esp + 0x10], 0x46d8a0
mov dword [esp + 0xc], 0x13e
mov dword [esp + 8], eax
mov dword [esp + 4], 0x11f
mov dword [esp], ebx
call fcn.0041cc20
add dword [ebp - 0x534], 0x23
sub esp, 0x24
cmp dword [ebp - 0x530], 7
jne 0x46dbe0
lea ecx, [ebp - 0x400]
call fcn.0041cc00
lea ecx, [ebp - 0x3dc]
call fcn.0041cc00
mov dword [esp + 0x20], 0
lea ecx, [ebp - 0x400]
mov dword [esp + 0x1c], 1
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 1
mov dword [esp + 0x10], 0x46d8a0
mov dword [esp + 0xc], 0x13e
mov dword [esp + 8], 0x275
mov dword [esp + 4], 0x11f
mov dword [esp], 0x253
call fcn.0041cc20
sub esp, 0x24
lea ecx, [ebp - 0x3dc]
mov dword [esp + 0x20], 0
mov dword [esp + 0x1c], 1
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0xffffffff
mov dword [esp + 0x10], 0x46d8a0
mov dword [esp + 0xc], 0x13e
mov dword [esp + 8], 0x298
mov dword [esp + 4], 0x11f
mov dword [esp], 0x276
call fcn.0041cc20
sub esp, 0x24
lea ecx, [ebp - 0x4cc]
mov dword [esp], 6
call fcn.0041cdf0
mov dword [ebp - 0x534], 0xcd
sub esp, 4
mov dword [ebp - 0x530], 0
lea esi, [esi]
nop
mov eax, dword [ebp - 0x530]
lea ecx, [ebp - 0x4cc]
mov dword [ebp - 0x528], 3
mov dword [esp], eax
call fcn.0041d070
mov ebx, dword [ebp - 0x530]
mov esi, dword [ebp - 0x534]
sub esp, 4
mov ecx, eax
lea edx, [ebp - 0x4cc]
mov dword [esp + 0x20], 0
mov eax, ebx
mov dword [esp + 0x14], edx
add ebx, 1
mov dword [esp + 0x18], eax
lea eax, [esi + 0x4d]
mov dword [esp + 0x1c], 0
mov dword [esp + 0x10], 0x46d8a0
mov dword [esp + 0xc], 0x16e
mov dword [esp + 8], eax
mov dword [esp + 4], 0x14f
mov dword [esp], esi
mov dword [ebp - 0x530], ebx
call fcn.0041cc20
add dword [ebp - 0x534], 0x4e
sub esp, 0x24
cmp dword [ebp - 0x530], 6
jne 0x46dd60
mov dword [esp], 3
lea ecx, [ebp - 0x4c0]
call fcn.0041cdf0
mov dword [ebp - 0x534], 0xa8
sub esp, 4
mov dword [ebp - 0x530], 0
mov eax, dword [ebp - 0x530]
lea ecx, [ebp - 0x4c0]
mov dword [ebp - 0x528], 4
mov dword [esp], eax
call fcn.0041d070
sub esp, 4
lea edi, [ebp - 0x4c0]
add dword [ebp - 0x530], 1
mov ecx, eax
mov dword [esp + 0x14], edi
mov eax, dword [ebp - 0x530]
mov edi, dword [ebp - 0x534]
mov dword [esp + 0x20], 0
mov dword [esp + 0x18], eax
lea eax, [edi + 0x4d]
mov dword [esp + 0x1c], 0
mov dword [esp + 0x10], 0x46d8a0
mov dword [esp + 0xc], 0x1ae
mov dword [esp + 8], eax
mov dword [esp + 4], 0x18f
mov dword [esp], edi
call fcn.0041cc20
add dword [ebp - 0x534], 0x4e
sub esp, 0x24
cmp dword [ebp - 0x530], 3
jne 0x46de1f
mov dword [esp], 3
lea ecx, [ebp - 0x4b4]
call fcn.0041cdf0
mov dword [ebp - 0x534], 0x1b7
sub esp, 4
mov dword [ebp - 0x530], 0
mov eax, dword [ebp - 0x530]
lea ecx, [ebp - 0x4b4]
mov dword [ebp - 0x528], 5
mov dword [esp], eax
call fcn.0041d070
sub esp, 4
lea edx, [ebp - 0x4b4]
add dword [ebp - 0x530], 1
mov ecx, eax
mov dword [esp + 0x14], edx
mov eax, dword [ebp - 0x530]
mov edx, dword [ebp - 0x534]
mov dword [esp + 0x20], 0
mov dword [esp + 0x18], eax
lea eax, [edx + 0x4d]
mov dword [esp + 0x1c], 0
mov dword [esp + 0x10], 0x46d8a0
mov dword [esp + 0xc], 0x1ae
mov dword [esp + 8], eax
mov dword [esp + 4], 0x18f
mov dword [esp], edx
call fcn.0041cc20
add dword [ebp - 0x534], 0x4e
sub esp, 0x24
cmp dword [ebp - 0x530], 3
jne 0x46deda
lea ecx, [ebp - 0x178]
call fcn.00474c30
lea eax, [ebp - 0x6c]
mov dword [esp + 0x20], 0
lea ecx, [ebp - 0x178]
mov dword [esp + 0x1c], 1
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0x5b7d00
mov dword [esp + 0x10], 0x14
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x2b2
mov dword [esp + 4], 0x1be
mov dword [esp], 0x13e
mov dword [ebp - 0x528], 6
call fcn.00474ca0
sub esp, 0x24
mov ecx, 0x5b4640
mov dword [esp], 0
call fcn.00493010
mov eax, dword [0x5b4668]
sub esp, 4
mov dword [esp + 4], 0x59ea6b
mov dword [esp + 8], eax
lea eax, [ebp - 0x40c]
mov dword [esp], eax
call fcn.00584db0
lea ecx, [ebp - 0x144]
call fcn.00474c30
lea eax, [ebp - 0x40c]
mov dword [esp + 0x20], 0
lea ecx, [ebp - 0x144]
mov dword [esp + 0x1c], 1
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0x5b7ec0
mov dword [esp + 0x10], 0xb
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x2bc
mov dword [esp + 4], 0xec
mov dword [esp], 0x234
mov dword [ebp - 0x528], 7
call fcn.00474ca0
sub esp, 0x24
lea ecx, [ebp - 0x4a8]
mov dword [esp], 2
call fcn.0041cdf0
sub esp, 4
lea ecx, [ebp - 0x4a8]
mov dword [ebp - 0x528], 8
mov dword [esp], 0
call fcn.0041d070
sub esp, 4
mov ecx, eax
lea eax, [ebp - 0x4a8]
mov dword [esp + 0x20], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 1
mov dword [esp + 0x10], 0x46d8a0
mov dword [esp + 0xc], 0x102
mov dword [esp + 8], 0x19c
mov dword [esp + 4], 0xe3
mov dword [esp], 0x14f
call fcn.0041cc20
sub esp, 0x24
lea ecx, [ebp - 0x4a8]
mov dword [esp], 1
call fcn.0041d070
sub esp, 4
mov ecx, eax
lea eax, [ebp - 0x4a8]
mov dword [esp + 0x20], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 0
mov dword [esp + 0x10], 0x46d8a0
mov dword [esp + 0xc], 0x102
mov dword [esp + 8], 0x1ea
mov dword [esp + 4], 0xe3
mov dword [esp], 0x19d
call fcn.0041cc20
sub esp, 0x24
lea ecx, [ebp - 0x49c]
mov dword [esp], 2
call fcn.0041cdf0
sub esp, 4
lea ecx, [ebp - 0x49c]
mov dword [ebp - 0x528], 9
mov dword [esp], 0
call fcn.0041d070
sub esp, 4
mov ecx, eax
lea eax, [ebp - 0x49c]
mov dword [esp + 0x20], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 1
mov dword [esp + 0x10], 0x46d8a0
mov dword [esp + 0xc], 0x122
mov dword [esp + 8], 0x19c
mov dword [esp + 4], 0x103
mov dword [esp], 0x14f
call fcn.0041cc20
sub esp, 0x24
lea ecx, [ebp - 0x49c]
mov dword [esp], 1
call fcn.0041d070
sub esp, 4
mov ecx, eax
lea eax, [ebp - 0x49c]
mov dword [esp + 0x20], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 0
mov dword [esp + 0x10], 0x46d8a0
mov dword [esp + 0xc], 0x122
mov dword [esp + 8], 0x1ea
mov dword [esp + 4], 0x103
mov dword [esp], 0x19d
call fcn.0041cc20
sub esp, 0x24
lea ecx, [ebp - 0x490]
mov dword [esp], 4
call fcn.0041cdf0
mov dword [ebp - 0x534], 0x14f
sub esp, 4
mov dword [ebp - 0x530], 0
mov eax, dword [ebp - 0x530]
lea ecx, [ebp - 0x490]
mov dword [ebp - 0x528], 0xa
mov dword [esp], eax
call fcn.0041d070
mov esi, dword [ebp - 0x534]
add dword [ebp - 0x530], 1
mov ecx, eax
sub esp, 4
mov eax, dword [ebp - 0x530]
lea edi, [ebp - 0x490]
mov dword [esp + 0x20], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], eax
lea eax, [esi + 0x4d]
mov dword [esp + 0x14], edi
mov dword [esp + 0x10], 0x46d8a0
mov dword [esp + 0xc], 0x142
mov dword [esp + 8], eax
mov dword [esp + 4], 0x123
mov dword [esp], esi
call fcn.0041cc20
add dword [ebp - 0x534], 0x4e
sub esp, 0x24
cmp dword [ebp - 0x530], 4
jne 0x46e27b
mov dword [esp], 4
lea ecx, [ebp - 0x484]
call fcn.0041cdf0
mov dword [ebp - 0x534], 0x14f
sub esp, 4
mov dword [ebp - 0x530], 0
mov eax, dword [ebp - 0x530]
lea ecx, [ebp - 0x484]
mov dword [ebp - 0x528], 0xb
mov dword [esp], eax
call fcn.0041d070
mov ebx, dword [ebp - 0x534]
add dword [ebp - 0x530], 1
mov ecx, eax
sub esp, 4
mov eax, dword [ebp - 0x530]
lea edx, [ebp - 0x484]
mov dword [esp + 0x20], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], eax
lea eax, [ebx + 0x4d]
mov dword [esp + 0x14], edx
mov dword [esp + 0x10], 0x46d8a0
mov dword [esp + 0xc], 0x162
mov dword [esp + 8], eax
mov dword [esp + 4], 0x143
mov dword [esp], ebx
call fcn.0041cc20
add dword [ebp - 0x534], 0x4e
sub esp, 0x24
cmp dword [ebp - 0x530], 4
jne 0x46e336
mov dword [esp], 4
lea ecx, [ebp - 0x478]
call fcn.0041cdf0
mov dword [ebp - 0x534], 0x14f
sub esp, 4
mov dword [ebp - 0x530], 0
mov eax, dword [ebp - 0x530]
lea ecx, [ebp - 0x478]
mov dword [ebp - 0x528], 0xc
mov dword [esp], eax
call fcn.0041d070
mov edx, dword [ebp - 0x534]
add dword [ebp - 0x530], 1
mov ecx, eax
sub esp, 4
mov eax, dword [ebp - 0x530]
lea esi, [ebp - 0x478]
mov dword [esp + 0x20], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], eax
lea eax, [edx + 0x4d]
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], 0x46d8a0
mov dword [esp + 0xc], 0x182
mov dword [esp + 8], eax
mov dword [esp + 4], 0x163
mov dword [esp], edx
call fcn.0041cc20
add dword [ebp - 0x534], 0x4e
sub esp, 0x24
cmp dword [ebp - 0x530], 4
jne 0x46e3f1
mov dword [esp], 3
lea ecx, [ebp - 0x46c]
call fcn.0041cdf0
mov dword [ebp - 0x534], 0x14f
sub esp, 4
mov dword [ebp - 0x530], 0
mov eax, dword [ebp - 0x530]
lea ecx, [ebp - 0x46c]
mov dword [ebp - 0x528], 0xd
mov dword [esp], eax
call fcn.0041d070
sub esp, 4
mov edi, dword [ebp - 0x530]
lea esi, [ebp - 0x46c]
mov ecx, eax
mov dword [esp + 0x14], esi
mov esi, dword [ebp - 0x534]
mov eax, edi
mov dword [esp + 0x20], 0
add edi, 1
mov dword [esp + 0x18], eax
lea eax, [esi + 0x4d]
mov dword [esp + 0x1c], 0
mov dword [esp + 0x10], 0x46d8a0
mov dword [esp + 0xc], 0x1a2
mov dword [esp + 8], eax
mov dword [esp + 4], 0x183
mov dword [esp], esi
mov dword [ebp - 0x530], edi
call fcn.0041cc20
add dword [ebp - 0x534], 0x4e
sub esp, 0x24
cmp dword [ebp - 0x530], 3
jne 0x46e4ac
mov dword [esp], 2
lea ecx, [ebp - 0x460]
call fcn.0041cdf0
sub esp, 4
lea ecx, [ebp - 0x460]
mov dword [ebp - 0x528], 0xe
mov dword [esp], 0
call fcn.0041d070
sub esp, 4
mov ecx, eax
lea eax, [ebp - 0x460]
mov dword [esp + 0x20], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 1
mov dword [esp + 0x10], 0x46d8a0
mov dword [esp + 0xc], 0x1c2
mov dword [esp + 8], 0x19c
mov dword [esp + 4], 0x1a3
mov dword [esp], 0x14f
call fcn.0041cc20
sub esp, 0x24
lea ecx, [ebp - 0x460]
mov dword [esp], 1
call fcn.0041d070
sub esp, 4
mov ecx, eax
lea eax, [ebp - 0x460]
mov dword [esp + 0x20], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 0
mov dword [esp + 0x10], 0x46d8a0
mov dword [esp + 0xc], 0x1c2
mov dword [esp + 8], 0x1ea
mov dword [esp + 4], 0x1a3
mov dword [esp], 0x19d
call fcn.0041cc20
sub esp, 0x24
lea ecx, [ebp - 0x3b8]
call fcn.0041cc00
lea ecx, [ebp - 0x394]
call fcn.0041cc00
mov dword [esp + 0x20], 0
lea ecx, [ebp - 0x3b8]
mov dword [esp + 0x1c], 1
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x10], 0x46d8a0
mov dword [esp + 0xc], 0xff
mov dword [esp + 8], 0x192
mov dword [esp + 4], 0xe0
mov dword [esp], 0x170
call fcn.0041cc20
sub esp, 0x24
lea ecx, [ebp - 0x394]
mov dword [esp + 0x20], 0
mov dword [esp + 0x1c], 1
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x10], 0x46d8a0
mov dword [esp + 0xc], 0xff
mov dword [esp + 8], 0x1b5
mov dword [esp + 4], 0xe0
mov dword [esp], 0x193
call fcn.0041cc20
sub esp, 0x24
lea ecx, [ebp - 0x454]
mov dword [esp], 2
call fcn.0041cdf0
sub esp, 4
lea ecx, [ebp - 0x454]
mov dword [ebp - 0x528], 0xf
mov dword [esp], 0
call fcn.0041d070
sub esp, 4
mov ecx, eax
lea eax, [ebp - 0x454]
mov dword [esp + 0x20], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 1
mov dword [esp + 0x10], 0x46d8a0
mov dword [esp + 0xc], 0x11f
mov dword [esp + 8], 0x199
mov dword [esp + 4], 0x100
mov dword [esp], 0x14c
call fcn.0041cc20
sub esp, 0x24
lea ecx, [ebp - 0x454]
mov dword [esp], 1
call fcn.0041d070
sub esp, 4
mov ecx, eax
lea eax, [ebp - 0x454]
mov dword [esp + 0x20], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 0
mov dword [esp + 0x10], 0x46d8a0
mov dword [esp + 0xc], 0x11f
mov dword [esp + 8], 0x1e7
mov dword [esp + 4], 0x100
mov dword [esp], 0x19a
call fcn.0041cc20
sub esp, 0x24
lea ecx, [ebp - 0x448]
mov dword [esp], 3
call fcn.0041cdf0
mov dword [ebp - 0x534], 0x14c
sub esp, 4
mov dword [ebp - 0x530], 0
mov ebx, dword [ebp - 0x530]
lea ecx, [ebp - 0x448]
mov dword [ebp - 0x528], 0x10
mov dword [esp], ebx
call fcn.0041d070
mov ebx, dword [ebp - 0x530]
sub esp, 4
lea edi, [ebp - 0x448]
mov ecx, eax
mov dword [esp + 0x14], edi
mov edi, dword [ebp - 0x534]
movsx eax, word [ebx + ebx + 0x59eb14]
mov dword [esp + 0x20], 0
add ebx, 1
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], eax
lea eax, [edi + 0x4d]
mov dword [esp + 0x10], 0x46d8a0
mov dword [esp + 0xc], 0x13f
mov dword [esp + 8], eax
mov dword [esp + 4], 0x120
mov dword [esp], edi
mov dword [ebp - 0x530], ebx
call fcn.0041cc20
add dword [ebp - 0x534], 0x4e
sub esp, 0x24
cmp dword [ebp - 0x530], 3
jne 0x46e809
mov dword [esp], 3
lea ecx, [ebp - 0x43c]
call fcn.0041cdf0
mov dword [ebp - 0x534], 0x14c
sub esp, 4
mov dword [ebp - 0x530], 0
mov eax, dword [ebp - 0x530]
lea ecx, [ebp - 0x43c]
mov dword [ebp - 0x528], 0x11
mov dword [esp], eax
call fcn.0041d070
sub esp, 4
lea ebx, [ebp - 0x43c]
add dword [ebp - 0x530], 1
mov ecx, eax
mov dword [esp + 0x14], ebx
mov eax, dword [ebp - 0x530]
mov ebx, dword [ebp - 0x534]
mov dword [esp + 0x20], 0
mov dword [esp + 0x18], eax
lea eax, [ebx + 0x4d]
mov dword [esp + 0x1c], 0
mov dword [esp + 0x10], 0x46d8a0
mov dword [esp + 0xc], 0x15f
mov dword [esp + 8], eax
mov dword [esp + 4], 0x140
mov dword [esp], ebx
call fcn.0041cc20
add dword [ebp - 0x534], 0x4e
sub esp, 0x24
cmp dword [ebp - 0x530], 3
jne 0x46e8ce
mov dword [esp], 2
lea ecx, [ebp - 0x430]
call fcn.0041cdf0
sub esp, 4
lea ecx, [ebp - 0x430]
mov dword [ebp - 0x528], 0x12
mov dword [esp], 0
call fcn.0041d070
sub esp, 4
mov ecx, eax
lea eax, [ebp - 0x430]
mov dword [esp + 0x20], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 1
mov dword [esp + 0x10], 0x46d8a0
mov dword [esp + 0xc], 0x17f
mov dword [esp + 8], 0x199
mov dword [esp + 4], 0x160
mov dword [esp], 0x14c
call fcn.0041cc20
sub esp, 0x24
lea ecx, [ebp - 0x430]
mov dword [esp], 1
call fcn.0041d070
sub esp, 4
mov ecx, eax
lea eax, [ebp - 0x430]
mov dword [esp + 0x20], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 0
mov dword [esp + 0x10], 0x46d8a0
mov dword [esp + 0xc], 0x17f
mov dword [esp + 8], 0x1e7
mov dword [esp + 4], 0x160
mov dword [esp], 0x19a
call fcn.0041cc20
sub esp, 0x24
lea ecx, [ebp - 0x424]
mov dword [esp], 2
call fcn.0041cdf0
sub esp, 4
lea ecx, [ebp - 0x424]
mov dword [ebp - 0x528], 0x13
mov dword [esp], 0
call fcn.0041d070
sub esp, 4
mov ecx, eax
lea eax, [ebp - 0x424]
mov dword [esp + 0x20], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 1
mov dword [esp + 0x10], 0x46d8a0
mov dword [esp + 0xc], 0x19f
mov dword [esp + 8], 0x199
mov dword [esp + 4], 0x180
mov dword [esp], 0x14c
call fcn.0041cc20
sub esp, 0x24
lea ecx, [ebp - 0x424]
mov dword [esp], 1
call fcn.0041d070
sub esp, 4
mov ecx, eax
lea eax, [ebp - 0x424]
mov dword [esp + 0x20], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 0
mov dword [esp + 0x10], 0x46d8a0
mov dword [esp + 0xc], 0x19f
mov dword [esp + 8], 0x1e7
mov dword [esp + 4], 0x180
mov dword [esp], 0x19a
call fcn.0041cc20
sub esp, 0x24
lea ecx, [ebp - 0x418]
mov dword [esp], 4
call fcn.0041cdf0
mov dword [ebp - 0x534], 0x14c
sub esp, 4
mov dword [ebp - 0x530], 0
mov eax, dword [ebp - 0x530]
lea ecx, [ebp - 0x418]
mov dword [ebp - 0x528], 0x14
mov dword [esp], eax
call fcn.0041d070
mov edi, dword [ebp - 0x530]
mov esi, dword [ebp - 0x534]
sub esp, 4
mov ecx, eax
lea ebx, [ebp - 0x418]
mov dword [esp + 0x20], 0
mov eax, edi
mov dword [esp + 0x14], ebx
add edi, 1
mov dword [esp + 0x18], eax
lea eax, [esi + 0x4d]
mov dword [esp + 0x1c], 0
mov dword [esp + 0x10], 0x46d8a0
mov dword [esp + 0xc], 0x1bf
mov dword [esp + 8], eax
mov dword [esp + 4], 0x1a0
mov dword [esp], esi
mov dword [ebp - 0x530], edi
call fcn.0041cc20
add dword [ebp - 0x534], 0x4e
sub esp, 0x24
cmp dword [ebp - 0x530], 4
jne 0x46eb67
lea ecx, [ebp - 0x370]
call fcn.0041cc00
lea ecx, [ebp - 0x34c]
call fcn.0041cc00
lea ecx, [ebp - 0x328]
call fcn.0041cc00
lea ecx, [ebp - 0x304]
call fcn.0041cc00
lea ecx, [ebp - 0x2e0]
call fcn.0041cc00
lea ecx, [ebp - 0x2bc]
call fcn.0041cc00
lea ecx, [ebp - 0x298]
call fcn.0041cc00
lea ecx, [ebp - 0x274]
call fcn.0041cc00
lea ecx, [ebp - 0x250]
call fcn.0041cc00
lea ecx, [ebp - 0x22c]
call fcn.0041cc00
lea ecx, [ebp - 0x208]
call fcn.0041cc00
lea ecx, [ebp - 0x1e4]
call fcn.0041cc00
lea ecx, [ebp - 0x1c0]
call fcn.0041cc00
lea ecx, [ebp - 0x19c]
call fcn.0041cc00
mov dword [esp + 0x20], 1
lea ecx, [ebp - 0x370]
mov dword [esp + 0x1c], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x10], 0x46d7c0
mov dword [esp + 0xc], 0x120
mov dword [esp + 8], 0xe9
mov dword [esp + 4], 0x10d
mov dword [esp], 0xd6
call fcn.0041cc20
movsx eax, byte [ebp - 0x8c]
sub esp, 0x24
lea ecx, [ebp - 0x34c]
mov byte [ebp - 0x365], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], eax
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x10], 0x46d7c0
mov dword [esp + 0xc], 0x141
mov dword [esp + 8], 0xe9
mov dword [esp + 4], 0x12e
mov dword [esp], 0xd6
call fcn.0041cc20
movsx eax, byte [ebp - 0x8b]
sub esp, 0x24
lea ecx, [ebp - 0x328]
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], eax
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x10], 0x46d7c0
mov dword [esp + 0xc], 0x162
mov dword [esp + 8], 0xe9
mov dword [esp + 4], 0x14f
mov dword [esp], 0xd6
call fcn.0041cc20
movsx eax, byte [ebp - 0x8a]
sub esp, 0x24
lea ecx, [ebp - 0x304]
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], eax
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x10], 0x46d7c0
mov dword [esp + 0xc], 0x183
mov dword [esp + 8], 0xe9
mov dword [esp + 4], 0x170
mov dword [esp], 0xd6
call fcn.0041cc20
movsx eax, byte [ebp - 0x89]
sub esp, 0x24
lea ecx, [ebp - 0x2e0]
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], eax
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x10], 0x46d7c0
mov dword [esp + 0xc], 0x1a4
mov dword [esp + 8], 0xe9
mov dword [esp + 4], 0x191
mov dword [esp], 0xd6
call fcn.0041cc20
movsx eax, byte [ebp - 0x88]
sub esp, 0x24
lea ecx, [ebp - 0x2bc]
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], eax
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x10], 0x46d7c0
mov dword [esp + 0xc], 0x1c4
mov dword [esp + 8], 0xe9
mov dword [esp + 4], 0x1b1
mov dword [esp], 0xd6
call fcn.0041cc20
sub esp, 0x24
lea ecx, [ebp - 0x298]
mov dword [esp + 0x20], 0
mov dword [esp + 0x1c], 1
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x10], 0x46d8a0
mov dword [esp + 0xc], 0x169
mov dword [esp + 8], 0x233
mov dword [esp + 4], 0x14a
mov dword [esp], 0x211
call fcn.0041cc20
sub esp, 0x24
lea ecx, [ebp - 0x274]
mov dword [esp + 0x20], 0
mov dword [esp + 0x1c], 1
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x10], 0x46d8a0
mov dword [esp + 0xc], 0x169
mov dword [esp + 8], 0x256
mov dword [esp + 4], 0x14a
mov dword [esp], 0x234
call fcn.0041cc20
sub esp, 0x24
lea ecx, [ebp - 0x250]
mov dword [esp + 0x20], 0
mov dword [esp + 0x1c], 1
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x10], 0x46d8a0
mov dword [esp + 0xc], 0x189
mov dword [esp + 8], 0x233
mov dword [esp + 4], 0x16a
mov dword [esp], 0x211
call fcn.0041cc20
sub esp, 0x24
lea ecx, [ebp - 0x22c]
mov dword [esp + 0x20], 0
mov dword [esp + 0x1c], 1
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x10], 0x46d8a0
mov dword [esp + 0xc], 0x189
mov dword [esp + 8], 0x256
mov dword [esp + 4], 0x16a
mov dword [esp], 0x234
call fcn.0041cc20
sub esp, 0x24
lea ecx, [ebp - 0x208]
mov dword [esp + 0x20], 0
mov dword [esp + 0x1c], 1
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x10], 0x46d8a0
mov dword [esp + 0xc], 0x1a9
mov dword [esp + 8], 0x233
mov dword [esp + 4], 0x18a
mov dword [esp], 0x211
call fcn.0041cc20
sub esp, 0x24
lea ecx, [ebp - 0x1e4]
mov dword [esp + 0x20], 0
mov dword [esp + 0x1c], 1
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x10], 0x46d8a0
mov dword [esp + 0xc], 0x1a9
mov dword [esp + 8], 0x256
mov dword [esp + 4], 0x18a
mov dword [esp], 0x234
call fcn.0041cc20
sub esp, 0x24
lea ecx, [ebp - 0x1c0]
mov dword [esp + 0x20], 0
mov dword [esp + 0x1c], 1
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x10], 0x46d8a0
mov dword [esp + 0xc], 0x1c9
mov dword [esp + 8], 0x233
mov dword [esp + 4], 0x1aa
mov dword [esp], 0x211
call fcn.0041cc20
sub esp, 0x24
lea ecx, [ebp - 0x19c]
mov dword [esp + 0x20], 0
mov dword [esp + 0x1c], 1
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x10], 0x46d8a0
mov dword [esp + 0xc], 0x1c9
mov dword [esp + 8], 0x256
mov dword [esp + 4], 0x1aa
mov dword [esp], 0x234
call fcn.0041cc20
sub esp, 0x24
lea ecx, [ebp - 0x110]
call fcn.0041c2f0
lea ecx, [ebp - 0xdc]
call fcn.0041c2f0
mov dword [esp + 0x14], 0
lea ecx, [ebp - 0x110]
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 0x59ea6e
mov dword [esp + 8], 0x59ea76
mov dword [esp + 4], 0x21a
mov dword [esp], 0xc2
call fcn.0041c420
sub esp, 0x18
lea ecx, [ebp - 0xdc]
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 0x59ea7e
mov dword [esp + 8], 0x59ea87
mov dword [esp + 4], 0x21a
mov dword [esp], 0x1b8
call fcn.0041c420
sub esp, 0x18
mov ecx, 0x5b9d7c
call fcn.005461e0
mov dword [ebp - 0x530], 0x7fffffff
mov byte [ebp - 0x534], 0
jmp 0x46f3af
mov dword [esp], 1
mov ecx, 0x5b9bb8
mov dword [ebp - 0x528], 0x14
call fcn.004a34b0
sub esp, 4
test eax, eax
jne 0x46f25b
xor eax, eax
mov ecx, 0x5b9bb8
cmp byte [0x5b90b8], 0
mov dword [esp], 1
mov dword [ebp - 0x528], 0x14
setne al
shl eax, 2
mov dword [esp + 4], eax
call fcn.004a33f0
sub esp, 8
movzx eax, byte [ebp - 0x534]
test al, al
je 0x46f4e7
mov dword [ebp - 0x530], 0
cmp al, 1
je 0x46f9c0
cmp byte [ebp - 0x534], 2
je 0x46f948
cmp byte [ebp - 0x534], 3
jne 0x46f2d1
mov dword [esp + 0xc], 0
lea ecx, [ebp - 0x370]
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
mov dword [ebp - 0x528], 0x14
call fcn.0041cca0
sub esp, 0x10
test eax, eax
je 0x46fa40
mov dword [esp + 0x10], 0
mov ecx, 0x5bb0a0
mov dword [esp + 0xc], 0xb2
mov dword [esp + 8], 0xda
mov dword [esp + 4], 0x88
mov dword [esp], 0x60
mov dword [ebp - 0x528], 0x14
call fcn.0049b8b0
sub esp, 0x14
test eax, eax
je 0x46f6b0
cmp byte [ebp - 0x534], 0
je 0x46f331
mov dword [ebp - 0x530], 0x7fffffff
mov byte [ebp - 0x534], 0
mov dword [esp + 0xc], 0
lea ecx, [ebp - 0x110]
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
mov dword [ebp - 0x528], 0x14
call fcn.0041c580
sub esp, 0x10
test eax, eax
jne 0x470810
mov dword [esp + 0xc], 0
lea ecx, [ebp - 0xdc]
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call fcn.0041c580
sub esp, 0x10
test eax, eax
jne 0x470488
mov ecx, 0x5b9d7c
call fcn.005461e0
cmp byte [0x5b9064], 0
je 0x46f3c9
mov byte [0x5b9064], 0
mov dword [ebp - 0x530], 0x7fffffff
mov dword [ebp - 0x528], 0x14
mov ecx, 0x5b9d7c
call fcn.005461d0
mov ecx, 0x5b9060
call fcn.004e8950
mov ecx, 0x5bb0a0
call fcn.0049d150
cmp byte [0x5b9063], 1
je 0x470488
mov ebx, dword [ebp - 0x530]
test ebx, ebx
je 0x46f4a3
movzx eax, byte [ebp - 0x534]
test al, al
jne 0x46f530
test dword [ebp - 0x530], 0x40000000
jne 0x46fc40
test byte [ebp - 0x530], 1
jne 0x46fc10
test byte [ebp - 0x530], 2
jne 0x46fbe0
test byte [ebp - 0x530], 4
jne 0x46fb40
test byte [ebp - 0x530], 8
jne 0x46fb18
test byte [ebp - 0x530], 0x10
jne 0x46fae8
test byte [ebp - 0x530], 0x20
jne 0x46fab8
test byte [ebp - 0x530], 0x40
jne 0x46fa90
test byte [ebp - 0x530], 8
jne 0x46f5fb
test dword [ebp - 0x530], 0x40000000
jne 0x46f670
mov dword [ebp - 0x528], 0x14
mov ecx, 0x5b9060
call fcn.004e95b0
cmp byte [0x5b453e], 0
jne 0x46f208
mov dword [ebp - 0x528], 0x14
mov ecx, 0x5b9bb8
call fcn.004a30a0
movzx eax, byte [ebp - 0x534]
test al, al
jne 0x46f26a
mov dword [ebp - 0x528], 0x14
lea ecx, [ebp - 0x4e4]
call fcn.0041cf00
test eax, eax
js 0x46f9f0
mov eax, dword [ebp - 0x4e0]
lea ecx, [ebp - 0x4e4]
mov dword [esp], eax
call fcn.0041d070
mov dword [ebp - 0x530], 0
mov eax, dword [eax + 0x20]
sub esp, 4
mov byte [ebp - 0x6d], al
jmp 0x46f2d1
cmp al, 1
jne 0x46f720
test dword [ebp - 0x530], 0x40000000
jne 0x4703f8
test byte [ebp - 0x530], 0x80
jne 0x4703d0
test dword [ebp - 0x530], 0x100
jne 0x4703a0
test dword [ebp - 0x530], 0x200
jne 0x470368
test dword [ebp - 0x530], 0x400
jne 0x470338
test dword [ebp - 0x530], 0x800
jne 0x470308
test dword [ebp - 0x530], 0x1000
jne 0x4702d8
test dword [ebp - 0x530], 0x2000
jne 0x46fd60
test dword [ebp - 0x530], 0x4000
je 0x46f486
movsx edx, byte [ebp - 0x8d]
mov eax, 1
lea ecx, [ebp - 0x460]
mov dword [ebp - 0x528], 0x14
sub eax, edx
mov dword [esp], eax
call fcn.0041cea0
sub esp, 4
test byte [ebp - 0x530], 8
je 0x46f493
mov dword [ebp - 0x528], 0x14
lea ecx, [ebp - 0xa8]
call fcn.00422110
mov dword [esp + 4], 1
mov ecx, 0x5ba360
mov dword [esp], eax
call fcn.00499860
sub esp, 8
mov ecx, 0x5b7ec0
mov dword [esp + 0x14], 1
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0xe8
mov dword [esp + 8], 0x30c
mov dword [esp + 4], 0xc6
mov dword [esp], 0x2ce
call fcn.0043a340
sub esp, 0x18
test dword [ebp - 0x530], 0x40000000
je 0x46f4a3
mov dword [esp], 0xffffffff
lea ecx, [ebp - 0x110]
mov dword [ebp - 0x528], 0x14
call fcn.0041c560
sub esp, 4
lea ecx, [ebp - 0xdc]
mov dword [esp], 0xffffffff
call fcn.0041c560
sub esp, 4
jmp 0x46f4a3
mov dword [esp + 0x10], 0
mov ecx, 0x5bb0a0
mov dword [esp + 0xc], 0xb2
mov dword [esp + 8], 0x16b
mov dword [esp + 4], 0x88
mov dword [esp], 0xec
mov dword [ebp - 0x528], 0x14
call fcn.0049b8b0
sub esp, 0x14
test eax, eax
je 0x46fcf0
cmp byte [ebp - 0x534], 1
je 0x46f331
mov dword [ebp - 0x530], 0x7fffffff
mov byte [ebp - 0x534], 1
jmp 0x46f331
cmp byte [ebp - 0x534], 2
jne 0x46f808
test dword [ebp - 0x530], 0x40000000
jne 0x470160
test dword [ebp - 0x530], 0x10000
jne 0x4701f8
test dword [ebp - 0x530], 0x20000
jne 0x4702a3
test dword [ebp - 0x530], 0x40000
je 0x46f79f
movzx edx, word [ebp - 0xa0]
mov eax, 2
cmp dx, 0x1d
jg 0x46f784
xor eax, eax
cmp dx, 7
setg al
mov dword [esp], eax
lea ecx, [ebp - 0x448]
mov dword [ebp - 0x528], 0x14
call fcn.0041cea0
sub esp, 4
test dword [ebp - 0x530], 0x80000
jne 0x470130
test dword [ebp - 0x530], 0x100000
jne 0x4700c0
test dword [ebp - 0x530], 0x200000
jne 0x4700f9
test dword [ebp - 0x530], 0x400000
je 0x46f486
movsx eax, byte [ebp - 0x91]
lea ecx, [ebp - 0x418]
mov dword [ebp - 0x528], 0x14
mov dword [esp], eax
call fcn.0041cea0
jmp 0x46f5eb
cmp byte [ebp - 0x534], 3
jne 0x46f486
test dword [ebp - 0x530], 0x40000000
jne 0x470030
test dword [ebp - 0x530], 0x1000000
jne 0x470000
test dword [ebp - 0x530], 0x2000000
jne 0x46ffd0
test dword [ebp - 0x530], 0x4000000
jne 0x46ff10
test dword [ebp - 0x530], 0x8000000
jne 0x46fe50
test dword [ebp - 0x530], 0x10000000
jne 0x46fd90
test dword [ebp - 0x530], 0x20000000
je 0x46f486
movsx eax, byte [ebp - 0x88]
lea ecx, [ebp - 0x2bc]
mov dword [esp + 4], 1
mov dword [ebp - 0x528], 0x14
mov dword [esp], eax
call fcn.0041cc70
mov eax, dword [ebp - 0x7b]
sub esp, 8
mov ecx, 0x5ba360
mov dword [esp + 4], 1
mov dword [esp], eax
call fcn.00499860
sub esp, 8
mov ecx, 0x5b7ec0
mov dword [esp + 0x14], 1
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x1c4
mov dword [esp + 8], 0x1e9
mov dword [esp + 4], 0x1af
mov dword [esp], 0x1c8
call fcn.0043a340
sub esp, 0x18
lea ecx, [ebp - 0x1c0]
mov dword [esp + 4], 1
mov dword [esp], 0xffffffff
call fcn.0041cc70
sub esp, 8
lea ecx, [ebp - 0x19c]
mov dword [esp + 4], 1
mov dword [esp], 0xffffffff
call fcn.0041cc70
sub esp, 8
jmp 0x46f486
mov dword [esp + 0xc], 0
lea ecx, [ebp - 0x3b8]
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
mov dword [ebp - 0x528], 0x14
call fcn.0041cca0
sub esp, 0x10
test eax, eax
je 0x4705f8
add word [ebp - 0x9e], 1
mov edx, 0xa
movzx eax, word [ebp - 0x9e]
mov byte [ebp - 0x9c], 5
mov dword [ebp - 0x530], 0x10008
cmp ax, dx
cmovg eax, edx
mov word [ebp - 0x9e], ax
jmp 0x46f2d1
mov dword [ebp - 0x528], 0x14
lea ecx, [ebp - 0x144]
call fcn.00475890
test eax, eax
je 0x4705a0
mov dword [ebp - 0x530], pe_nt_image_headers32
jmp 0x46f2d1
mov dword [ebp - 0x528], 0x14
lea ecx, [ebp - 0x4d8]
call fcn.0041cf00
test eax, eax
js 0x470670
mov eax, dword [ebp - 0x4d4]
lea ecx, [ebp - 0x4d8]
mov dword [esp], eax
call fcn.0041d070
mov dword [ebp - 0x530], 0
mov eax, dword [eax + 0x20]
sub esp, 4
mov byte [ebp - 0x57], al
jmp 0x46f2d1
mov dword [esp + 0xc], 0
lea ecx, [ebp - 0x34c]
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call fcn.0041cca0
sub esp, 0x10
test eax, eax
je 0x4707b8
movzx eax, byte [ebp - 0x342]
mov byte [ebp - 0x8c], al
jmp 0x46f2d1
mov dword [esp], 1
lea ecx, [ebp - 0x178]
mov dword [ebp - 0x528], 0x14
call fcn.00474dd0
jmp 0x46f5eb
movsx eax, byte [ebp - 0x94]
lea ecx, [ebp - 0x4b4]
mov dword [ebp - 0x528], 0x14
sub eax, 1
mov dword [esp], eax
call fcn.0041cea0
sub esp, 4
jmp 0x46f479
movsx eax, word [ebp - 0x99]
lea ecx, [ebp - 0x4c0]
mov dword [ebp - 0x528], 0x14
sub eax, 1
mov dword [esp], eax
call fcn.0041cea0
sub esp, 4
jmp 0x46f46c
movsx eax, byte [ebp - 0x9c]
lea ecx, [ebp - 0x4cc]
mov dword [ebp - 0x528], 0x14
mov dword [esp], eax
call fcn.0041cea0
sub esp, 4
jmp 0x46f45f
movsx eax, byte [ebp - 0xa6]
mov ecx, 0x5ba360
mov dword [esp + 4], 1
mov dword [ebp - 0x528], 0x14
mov dword [esp], eax
call fcn.00499860
sub esp, 8
mov ecx, 0x5b7ec0
mov dword [esp + 0x14], 1
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x139
mov dword [esp + 8], 0x24d
mov dword [esp + 4], 0x124
mov dword [esp], 0x234
call fcn.0043a340
sub esp, 0x18
lea ecx, [ebp - 0x400]
mov dword [esp + 4], 1
mov dword [esp], 0xffffffff
call fcn.0041cc70
sub esp, 8
lea ecx, [ebp - 0x3dc]
mov dword [esp + 4], 1
mov dword [esp], 0xffffffff
call fcn.0041cc70
sub esp, 8
jmp 0x46f452
movsx eax, byte [ebp - 0x57]
lea ecx, [ebp - 0x4d8]
mov dword [ebp - 0x528], 0x14
sub eax, 1
mov dword [esp], eax
call fcn.0041cea0
sub esp, 4
jmp 0x46f445
movsx eax, byte [ebp - 0x6d]
lea ecx, [ebp - 0x4e4]
mov dword [ebp - 0x528], 0x14
movsx eax, byte [eax + 0x59eb1b]
mov dword [esp], eax
call fcn.0041cea0
sub esp, 4
jmp 0x46f438
mov dword [esp + 4], str.SPG_BSC
mov ecx, 0x5b7920
mov dword [esp], 0x5b9d6c
mov dword [ebp - 0x528], 0x14
call fcn.00492980
sub esp, 8
mov ecx, dword [0x59b050]
mov dword [esp + 4], str.SPG_BSC
mov dword [esp], 0x5b9d6c
call fcn.00492980
sub esp, 8
lea eax, [ebp - 0x4ed]
mov ecx, 0x5b7920
mov dword [esp + 0xc], 0
mov dword [esp + 8], eax
mov dword [esp + 4], 0xf
mov dword [esp], 0xea
call fcn.004926b0
sub esp, 0x10
mov ecx, 0x5b9d8c
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x257
mov dword [esp + 8], 0x31f
mov dword [esp + 4], 0
mov dword [esp], 0
call fcn.0055c8f0
sub esp, 0x14
jmp 0x46f42b
mov dword [esp + 0x10], 0
mov ecx, 0x5bb0a0
mov dword [esp + 0xc], 0xb2
mov dword [esp + 8], 0x1fa
mov dword [esp + 4], 0x88
mov dword [esp], 0x17c
mov dword [ebp - 0x528], 0x14
call fcn.0049b8b0
sub esp, 0x14
test eax, eax
je 0x4708a0
cmp byte [ebp - 0x534], 2
je 0x46f331
mov dword [ebp - 0x530], 0x7fffffff
mov byte [ebp - 0x534], 2
jmp 0x46f331
movsx eax, byte [ebp - 0x8f]
lea ecx, [ebp - 0x46c]
mov dword [ebp - 0x528], 0x14
mov dword [esp], eax
call fcn.0041cea0
sub esp, 4
jmp 0x46f5b5
movsx eax, byte [ebp - 0x89]
lea ecx, [ebp - 0x2e0]
mov dword [esp + 4], 1
mov dword [ebp - 0x528], 0x14
mov dword [esp], eax
call fcn.0041cc70
mov eax, dword [ebp - 0x7f]
sub esp, 8
mov ecx, 0x5ba360
mov dword [esp + 4], 1
mov dword [esp], eax
call fcn.00499860
sub esp, 8
mov ecx, 0x5b7ec0
mov dword [esp + 0x14], 1
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x1a4
mov dword [esp + 8], 0x20b
mov dword [esp + 4], 0x18f
mov dword [esp], 0x1c8
call fcn.0043a340
sub esp, 0x18
lea ecx, [ebp - 0x208]
mov dword [esp + 4], 1
mov dword [esp], 0xffffffff
call fcn.0041cc70
sub esp, 8
lea ecx, [ebp - 0x1e4]
mov dword [esp + 4], 1
mov dword [esp], 0xffffffff
call fcn.0041cc70
sub esp, 8
jmp 0x46f875
movsx eax, byte [ebp - 0x8a]
lea ecx, [ebp - 0x304]
mov dword [esp + 4], 1
mov dword [ebp - 0x528], 0x14
mov dword [esp], eax
call fcn.0041cc70
mov eax, dword [ebp - 0x83]
sub esp, 8
mov ecx, 0x5ba360
mov dword [esp + 4], 1
mov dword [esp], eax
call fcn.00499860
sub esp, 8
mov ecx, 0x5b7ec0
mov dword [esp + 0x14], 1
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x184
mov dword [esp + 8], 0x20b
mov dword [esp + 4], 0x16f
mov dword [esp], 0x1c8
call fcn.0043a340
sub esp, 0x18
lea ecx, [ebp - 0x250]
mov dword [esp + 4], 1
mov dword [esp], 0xffffffff
call fcn.0041cc70
sub esp, 8
lea ecx, [ebp - 0x22c]
mov dword [esp + 4], 1
mov dword [esp], 0xffffffff
call fcn.0041cc70
sub esp, 8
jmp 0x46f865
movsx eax, byte [ebp - 0x8b]
lea ecx, [ebp - 0x328]
mov dword [esp + 4], 1
mov dword [ebp - 0x528], 0x14
mov dword [esp], eax
call fcn.0041cc70
mov eax, dword [ebp - 0x87]
sub esp, 8
mov ecx, 0x5ba360
mov dword [esp + 4], 1
mov dword [esp], eax
call fcn.00499860
sub esp, 8
mov ecx, 0x5b7ec0
mov dword [esp + 0x14], 1
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x164
mov dword [esp + 8], 0x20b
mov dword [esp + 4], 0x14f
mov dword [esp], 0x1c8
call fcn.0043a340
sub esp, 0x18
lea ecx, [ebp - 0x298]
mov dword [esp + 4], 1
mov dword [esp], 0xffffffff
call fcn.0041cc70
sub esp, 8
lea ecx, [ebp - 0x274]
mov dword [esp + 4], 1
mov dword [esp], 0xffffffff
call fcn.0041cc70
sub esp, 8
jmp 0x46f855
movsx eax, byte [ebp - 0x8c]
lea ecx, [ebp - 0x34c]
mov dword [esp + 4], 1
mov dword [ebp - 0x528], 0x14
mov dword [esp], eax
call fcn.0041cc70
sub esp, 8
jmp 0x46f845
mov dword [esp + 4], 1
lea ecx, [ebp - 0x370]
mov dword [esp], 0xffffffff
mov dword [ebp - 0x528], 0x14
call fcn.0041cc70
sub esp, 8
jmp 0x46f835
mov dword [esp + 4], str.SPG_GOAL
mov ecx, 0x5b7920
mov dword [esp], 0x5b9d6c
mov dword [ebp - 0x528], 0x14
call fcn.00492980
sub esp, 8
lea eax, [ebp - 0x4ed]
mov ecx, 0x5b7920
mov dword [esp + 0xc], 0
mov dword [esp + 8], eax
mov dword [esp + 4], 0xf
mov dword [esp], 0xea
call fcn.004926b0
sub esp, 0x10
mov ecx, 0x5b9d8c
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x257
mov dword [esp + 8], 0x31f
mov dword [esp + 4], 0
mov dword [esp], 0
call fcn.0055c8f0
sub esp, 0x14
jmp 0x46f825
movsx edx, byte [ebp - 0x93]
mov eax, 1
lea ecx, [ebp - 0x430]
mov dword [ebp - 0x528], 0x14
sub eax, edx
mov dword [esp], eax
call fcn.0041cea0
sub esp, 4
test dword [ebp - 0x530], 0x200000
je 0x46f7cf
movsx edx, byte [ebp - 0x90]
mov eax, 1
lea ecx, [ebp - 0x424]
mov dword [ebp - 0x528], 0x14
sub eax, edx
mov dword [esp], eax
call fcn.0041cea0
sub esp, 4
jmp 0x46f7cf
movsx eax, byte [ebp - 0x92]
lea ecx, [ebp - 0x43c]
mov dword [ebp - 0x528], 0x14
sub eax, 1
mov dword [esp], eax
call fcn.0041cea0
sub esp, 4
jmp 0x46f7af
mov dword [esp + 4], str.SPG_O2
mov ecx, 0x5b7920
mov dword [esp], 0x5b9d6c
mov dword [ebp - 0x528], 0x14
call fcn.00492980
sub esp, 8
lea eax, [ebp - 0x4ed]
mov ecx, 0x5b7920
mov dword [esp + 0xc], 0
mov dword [esp + 8], eax
mov dword [esp + 4], 0xf
mov dword [esp], 0xea
call fcn.004926b0
sub esp, 0x10
mov ecx, 0x5b9d8c
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x257
mov dword [esp + 8], 0x31f
mov dword [esp + 4], 0
mov dword [esp], 0
call fcn.0055c8f0
sub esp, 0x14
test dword [ebp - 0x530], 0x10000
je 0x46f74d
movsx eax, word [ebp - 0x9e]
mov ecx, 0x5ba360
mov dword [esp + 4], 1
mov dword [ebp - 0x528], 0x14
mov dword [esp], eax
call fcn.00499860
sub esp, 8
mov ecx, 0x5b7ec0
mov dword [esp + 0x14], 1
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0xfa
mov dword [esp + 8], 0x16a
mov dword [esp + 4], 0xe5
mov dword [esp], 0x151
call fcn.0043a340
sub esp, 0x18
lea ecx, [ebp - 0x3b8]
mov dword [esp + 4], 1
mov dword [esp], 0xffffffff
call fcn.0041cc70
sub esp, 8
lea ecx, [ebp - 0x394]
mov dword [esp + 4], 1
mov dword [esp], 0xffffffff
call fcn.0041cc70
sub esp, 8
test dword [ebp - 0x530], 0x20000
je 0x46f75d
movsx edx, byte [ebp - 0x8e]
mov eax, 1
lea ecx, [ebp - 0x454]
mov dword [ebp - 0x528], 0x14
sub eax, edx
mov dword [esp], eax
call fcn.0041cea0
sub esp, 4
jmp 0x46f75d
movsx eax, byte [ebp - 0xa1]
lea ecx, [ebp - 0x478]
mov dword [ebp - 0x528], 0x14
sub eax, 1
mov dword [esp], eax
call fcn.0041cea0
sub esp, 4
jmp 0x46f5a5
movsx eax, word [ebp - 0xa3]
lea ecx, [ebp - 0x484]
mov dword [ebp - 0x528], 0x14
sub eax, 1
mov dword [esp], eax
call fcn.0041cea0
sub esp, 4
jmp 0x46f595
movsx eax, word [ebp - 0xa5]
lea ecx, [ebp - 0x490]
mov dword [ebp - 0x528], 0x14
sub eax, 1
mov dword [esp], eax
call fcn.0041cea0
sub esp, 4
jmp 0x46f585
movsx edx, byte [ebp - 0x9a]
mov eax, 1
lea ecx, [ebp - 0x49c]
mov dword [ebp - 0x528], 0x14
sub eax, edx
mov dword [esp], eax
call fcn.0041cea0
sub esp, 4
jmp 0x46f575
movsx edx, byte [ebp - 0x9b]
mov eax, 1
lea ecx, [ebp - 0x4a8]
mov dword [ebp - 0x528], 0x14
sub eax, edx
mov dword [esp], eax
call fcn.0041cea0
sub esp, 4
jmp 0x46f565
mov dword [esp], 1
lea ecx, [ebp - 0x144]
mov dword [ebp - 0x528], 0x14
call fcn.00474dd0
sub esp, 4
jmp 0x46f555
mov dword [esp + 4], str.SPG_O1
mov ecx, 0x5b7920
mov dword [esp], 0x5b9d6c
mov dword [ebp - 0x528], 0x14
call fcn.00492980
sub esp, 8
lea eax, [ebp - 0x4ed]
mov ecx, 0x5b7920
mov dword [esp + 0xc], 0
mov dword [esp + 8], eax
mov dword [esp + 4], 0xf
mov dword [esp], 0xea
call fcn.004926b0
sub esp, 0x10
mov ecx, 0x5b9d8c
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x257
mov dword [esp + 8], 0x31f
mov dword [esp + 4], 0
mov dword [esp], 0
call fcn.0055c8f0
sub esp, 0x14
jmp 0x46f548
mov eax, dword [0x5b9d84]
test eax, eax
je 0x470740
mov dword [ebp - 0x530], 0
lea ecx, [ebp - 0x418]
call fcn.0041ce70
lea ecx, [ebp - 0x424]
call fcn.0041ce70
lea ecx, [ebp - 0x430]
call fcn.0041ce70
lea ecx, [ebp - 0x43c]
call fcn.0041ce70
lea ecx, [ebp - 0x448]
call fcn.0041ce70
lea ecx, [ebp - 0x454]
call fcn.0041ce70
lea ecx, [ebp - 0x460]
call fcn.0041ce70
lea ecx, [ebp - 0x46c]
call fcn.0041ce70
lea ecx, [ebp - 0x478]
call fcn.0041ce70
lea ecx, [ebp - 0x484]
call fcn.0041ce70
lea ecx, [ebp - 0x490]
call fcn.0041ce70
lea ecx, [ebp - 0x49c]
call fcn.0041ce70
lea ecx, [ebp - 0x4a8]
call fcn.0041ce70
lea ecx, [ebp - 0x144]
call fcn.00474c70
lea ecx, [ebp - 0x178]
call fcn.00474c70
lea ecx, [ebp - 0x4b4]
call fcn.0041ce70
lea ecx, [ebp - 0x4c0]
call fcn.0041ce70
lea ecx, [ebp - 0x4cc]
call fcn.0041ce70
lea ecx, [ebp - 0x4d8]
call fcn.0041ce70
lea ecx, [ebp - 0x4e4]
call fcn.0041ce70
lea eax, [ebp - 0x52c]
mov dword [esp], eax
call fcn.0057d740
mov eax, dword [ebp - 0x530]
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
mov dword [ebp - 0x528], 0x14
lea ecx, [ebp - 0x4a8]
call fcn.0041cf00
test eax, eax
js 0x4706e8
mov eax, dword [ebp - 0x4a4]
lea ecx, [ebp - 0x4a8]
mov dword [esp], eax
call fcn.0041d070
mov eax, dword [eax + 0x20]
mov byte [ebp - 0x9c], 5
sub esp, 4
mov dword [ebp - 0x530], 8
mov byte [ebp - 0x9b], al
jmp 0x46f2d1
mov dword [esp + 0xc], 0
lea ecx, [ebp - 0x394]
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
mov dword [ebp - 0x528], 0x14
call fcn.0041cca0
sub esp, 0x10
test eax, eax
je 0x470760
sub word [ebp - 0x9e], 1
mov edx, 1
movzx eax, word [ebp - 0x9e]
mov byte [ebp - 0x9c], 5
mov dword [ebp - 0x530], 0x10008
test ax, ax
cmovle eax, edx
mov word [ebp - 0x9e], ax
jmp 0x46f2d1
mov dword [esp + 0xc], 0
lea ecx, [ebp - 0x400]
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
mov dword [ebp - 0x528], 0x14
call fcn.0041cca0
sub esp, 0x10
test eax, eax
je 0x470910
add byte [ebp - 0xa6], 1
mov edx, 6
movzx eax, byte [ebp - 0xa6]
mov byte [ebp - 0x9c], 5
mov dword [ebp - 0x530], 0xc
cmp al, dl
cmovg eax, edx
mov byte [ebp - 0xa6], al
jmp 0x46f2d1
mov dword [ebp - 0x528], 0x14
lea ecx, [ebp - 0x49c]
call fcn.0041cf00
test eax, eax
js 0x470989
mov eax, dword [ebp - 0x498]
lea ecx, [ebp - 0x49c]
mov dword [esp], eax
call fcn.0041d070
mov eax, dword [eax + 0x20]
mov byte [ebp - 0x9c], 5
sub esp, 4
mov dword [ebp - 0x530], 8
mov byte [ebp - 0x9a], al
jmp 0x46f2d1
mov dword [ebp - 0x528], 0x14
mov ecx, 0x5b9d7c
call fcn.005461d0
jmp 0x470495
mov dword [ebp - 0x528], 0x14
lea ecx, [ebp - 0x454]
call fcn.0041cf00
test eax, eax
js 0x4709dd
mov eax, dword [ebp - 0x450]
lea ecx, [ebp - 0x454]
mov dword [esp], eax
call fcn.0041d070
mov eax, dword [eax + 0x20]
mov byte [ebp - 0x9c], 5
sub esp, 4
mov dword [ebp - 0x530], 8
mov byte [ebp - 0x8e], al
jmp 0x46f2d1
mov dword [esp + 0xc], 0
lea ecx, [ebp - 0x328]
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
mov dword [ebp - 0x528], 0x14
call fcn.0041cca0
sub esp, 0x10
test eax, eax
je 0x470a38
movzx eax, byte [ebp - 0x31e]
mov byte [ebp - 0x8b], al
jmp 0x46f2d1
mov edx, dword [0x5b9d84]
test edx, edx
je 0x470a89
lea eax, [ebp - 0x40c]
mov dword [esp], eax
call sub.msvcrt.dll_atol
mov ecx, 0x5b4640
mov dword [ebp - 0x528], 0x14
mov dword [esp], eax
call fcn.00493010
sub esp, 4
lea ecx, [ebp - 0xa8]
call fcn.00422110
mov edi, 0x5b44e4
mov word [ebp - 0xa8], ax
mov eax, dword [ebp - 0xa8]
mov ecx, 0x5b44e0
and edi, 0xfffffffc
lea esi, [ebp - 0xa8]
sub ecx, edi
mov dword [0x5b44e0], eax
mov eax, dword [ebp - 0x1c]
sub esi, ecx
add ecx, 0x90
mov dword [0x5b456c], eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x530], 1
jmp 0x47049f
mov dword [esp + 0x10], 0
mov ecx, 0x5bb0a0
mov dword [esp + 0xc], 0xb2
mov dword [esp + 8], 0x289
mov dword [esp + 4], 0x88
mov dword [esp], 0x20b
mov dword [ebp - 0x528], 0x14
call fcn.0049b8b0
sub esp, 0x14
test eax, eax
je 0x46f331
cmp byte [ebp - 0x534], 3
je 0x46f331
mov dword [ebp - 0x530], 0x7fffffff
mov byte [ebp - 0x534], 3
jmp 0x46f331
mov dword [esp + 0xc], 0
lea ecx, [ebp - 0x3dc]
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
mov dword [ebp - 0x528], 0x14
call fcn.0041cca0
mov dword [ebp - 0x530], eax
sub esp, 0x10
test eax, eax
je 0x470aa2
sub byte [ebp - 0xa6], 1
mov edx, 1
movzx eax, byte [ebp - 0xa6]
mov byte [ebp - 0x9c], 5
mov dword [ebp - 0x530], 0xc
test al, al
cmovle eax, edx
mov byte [ebp - 0xa6], al
jmp 0x46f2d1
mov dword [ebp - 0x528], 0x14
lea ecx, [ebp - 0x490]
call fcn.0041cf00
test eax, eax
js 0x470bc0
mov eax, dword [ebp - 0x48c]
lea ecx, [ebp - 0x490]
mov dword [esp], eax
call fcn.0041d070
mov eax, dword [eax + 0x20]
mov byte [ebp - 0x9c], 5
sub esp, 4
mov dword [ebp - 0x530], 8
mov word [ebp - 0xa5], ax
jmp 0x46f2d1
mov dword [ebp - 0x528], 0x14
lea ecx, [ebp - 0x448]
call fcn.0041cf00
test eax, eax
js 0x470b1a
mov eax, dword [ebp - 0x444]
lea ecx, [ebp - 0x448]
mov dword [esp], eax
call fcn.0041d070
mov eax, dword [eax + 0x20]
mov byte [ebp - 0x9c], 5
sub esp, 4
mov dword [ebp - 0x530], 8
mov word [ebp - 0xa0], ax
jmp 0x46f2d1
mov dword [esp + 0xc], 0
lea ecx, [ebp - 0x304]
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
mov dword [ebp - 0x528], 0x14
call fcn.0041cca0
sub esp, 0x10
test eax, eax
je 0x470c14
movzx eax, byte [ebp - 0x2fa]
mov byte [ebp - 0x8a], al
jmp 0x46f2d1
mov dword [ebp - 0x528], 0x14
mov ecx, 0x5b9d7c
call fcn.005461d0
jmp 0x47081e
mov dword [ebp - 0x528], 0x14
lea ecx, [ebp - 0x4cc]
call fcn.0041cf00
test eax, eax
js 0x470b6d
mov eax, dword [ebp - 0x4c8]
lea ecx, [ebp - 0x4cc]
mov dword [esp], eax
call fcn.0041d070
sub esp, 4
cmp dword [eax + 0x20], 5
je 0x46f2d1
mov eax, dword [ebp - 0x4c8]
lea ecx, [ebp - 0x4cc]
mov dword [esp], eax
call fcn.0041d070
mov eax, dword [eax + 0x20]
sub esp, 4
lea ecx, [ebp - 0xa8]
mov dword [esp], eax
call fcn.004221f0
mov dword [ebp - 0x530], 0x3fffffff
sub esp, 4
jmp 0x46f2d1
mov dword [ebp - 0x528], 0x14
lea ecx, [ebp - 0x43c]
call fcn.0041cf00
test eax, eax
js 0x470cb8
mov eax, dword [ebp - 0x438]
lea ecx, [ebp - 0x43c]
mov dword [esp], eax
call fcn.0041d070
mov eax, dword [eax + 0x20]
mov byte [ebp - 0x9c], 5
sub esp, 4
mov dword [ebp - 0x530], 8
mov byte [ebp - 0x92], al
jmp 0x46f2d1
mov dword [ebp - 0x528], 0x14
lea ecx, [ebp - 0x4c0]
call fcn.0041cf00
test eax, eax
js 0x470d5c
mov eax, dword [ebp - 0x4bc]
lea ecx, [ebp - 0x4c0]
mov dword [esp], eax
call fcn.0041d070
mov eax, dword [eax + 0x20]
sub esp, 4
mov word [ebp - 0x99], ax
cwde
movzx eax, word [eax + eax + 0x59eb0a]
mov word [ebp - 0x97], ax
jmp 0x46f2d1
mov dword [ebp - 0x528], 0x14
lea ecx, [ebp - 0x484]
call fcn.0041cf00
test eax, eax
js 0x470c65
mov eax, dword [ebp - 0x480]
lea ecx, [ebp - 0x484]
mov dword [esp], eax
call fcn.0041d070
mov eax, dword [eax + 0x20]
mov byte [ebp - 0x9c], 5
sub esp, 4
mov dword [ebp - 0x530], 8
mov word [ebp - 0xa3], ax
jmp 0x46f2d1
mov dword [esp + 0xc], 0
lea ecx, [ebp - 0x2e0]
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
mov dword [ebp - 0x528], 0x14
call fcn.0041cca0
sub esp, 0x10
test eax, eax
je 0x470d0b
movzx eax, byte [ebp - 0x2d6]
mov byte [ebp - 0x89], al
jmp 0x46f2d1
mov dword [ebp - 0x528], 0x14
lea ecx, [ebp - 0x478]
call fcn.0041cf00
test eax, eax
js 0x470d9e
mov eax, dword [ebp - 0x474]
lea ecx, [ebp - 0x478]
mov dword [esp], eax
call fcn.0041d070
mov eax, dword [eax + 0x20]
mov byte [ebp - 0x9c], 5
sub esp, 4
mov dword [ebp - 0x530], 8
mov byte [ebp - 0xa1], al
jmp 0x46f2d1
mov dword [ebp - 0x528], 0x14
lea ecx, [ebp - 0x430]
call fcn.0041cf00
test eax, eax
js 0x470df1
mov eax, dword [ebp - 0x42c]
lea ecx, [ebp - 0x430]
mov dword [esp], eax
call fcn.0041d070
mov eax, dword [eax + 0x20]
mov byte [ebp - 0x9c], 5
sub esp, 4
mov dword [ebp - 0x530], 8
mov byte [ebp - 0x93], al
jmp 0x46f2d1
mov dword [esp + 0xc], 0
lea ecx, [ebp - 0x2bc]
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
mov dword [ebp - 0x528], 0x14
call fcn.0041cca0
sub esp, 0x10
test eax, eax
je 0x470e44
movzx eax, byte [ebp - 0x2b2]
mov byte [ebp - 0x88], al
jmp 0x46f2d1
mov dword [ebp - 0x528], 0x14
lea ecx, [ebp - 0x4b4]
call fcn.0041cf00
test eax, eax
js 0x470eaf
mov eax, dword [ebp - 0x4b0]
lea ecx, [ebp - 0x4b4]
mov dword [esp], eax
call fcn.0041d070
mov eax, dword [eax + 0x20]
sub esp, 4
mov byte [ebp - 0x94], al
jmp 0x46f2d1
mov dword [ebp - 0x528], 0x14
lea ecx, [ebp - 0x46c]
call fcn.0041cf00
test eax, eax
js 0x470eda
mov eax, dword [ebp - 0x468]
lea ecx, [ebp - 0x46c]
mov dword [esp], eax
call fcn.0041d070
mov eax, dword [eax + 0x20]
mov byte [ebp - 0x9c], 5
sub esp, 4
mov dword [ebp - 0x530], 8
mov byte [ebp - 0x8f], al
jmp 0x46f2d1
mov dword [ebp - 0x528], 0x14
lea ecx, [ebp - 0x424]
call fcn.0041cf00
test eax, eax
js 0x470f2d
mov eax, dword [ebp - 0x420]
lea ecx, [ebp - 0x424]
mov dword [esp], eax
call fcn.0041d070
mov eax, dword [eax + 0x20]
mov byte [ebp - 0x9c], 5
sub esp, 4
mov dword [ebp - 0x530], 8
mov byte [ebp - 0x90], al
jmp 0x46f2d1
mov dword [esp + 0xc], 0
lea ecx, [ebp - 0x298]
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
mov dword [ebp - 0x528], 0x14
call fcn.0041cca0
sub esp, 0x10
test eax, eax
je 0x470f7e
add dword [ebp - 0x87], 0x64
mov eax, dword [ebp - 0x87]
mov edx, 0x1388
mov dword [ebp - 0x530], 0x4000000
cmp eax, edx
cmovg eax, edx
mov dword [ebp - 0x87], eax
jmp 0x46f2d1
mov dword [ebp - 0x528], 0x14
lea ecx, [ebp - 0x178]
call fcn.00475890
test eax, eax
setne al
movzx eax, al
shl eax, 6
mov dword [ebp - 0x530], eax
jmp 0x46f2d1
mov dword [ebp - 0x528], 0x14
lea ecx, [ebp - 0x460]
call fcn.0041cf00
test eax, eax
js 0x46f2d1
mov eax, dword [ebp - 0x45c]
lea ecx, [ebp - 0x460]
mov dword [esp], eax
call fcn.0041d070
mov eax, dword [eax + 0x20]
mov byte [ebp - 0x9c], 5
sub esp, 4
mov dword [ebp - 0x530], 8
mov byte [ebp - 0x8d], al
jmp 0x46f2d1
mov dword [ebp - 0x528], 0x14
lea ecx, [ebp - 0x418]
call fcn.0041cf00
test eax, eax
js 0x46f2d1
mov eax, dword [ebp - 0x414]
lea ecx, [ebp - 0x418]
mov dword [esp], eax
call fcn.0041d070
push ecx
mov eax, dword [eax + 0x20]
mov byte [ebp - 0x9c], 5
mov byte [ebp - 0x91], al
mov dword [ebp - 0x530], 8
jmp 0x46f2d1
mov dword [esp + 0xc], 0
lea ecx, [ebp - 0x274]
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
mov dword [ebp - 0x528], 0x14
call fcn.0041cca0
sub esp, 0x10
test eax, eax
je 0x470fe5
sub dword [ebp - 0x87], 0x64
mov eax, dword [ebp - 0x87]
mov edx, 0x64
mov dword [ebp - 0x530], 0x4000000
cmp eax, edx
cmovl eax, edx
mov dword [ebp - 0x87], eax
jmp 0x46f2d1
mov dword [esp + 0xc], 0
lea ecx, [ebp - 0x250]
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
mov dword [ebp - 0x528], 0x14
call fcn.0041cca0
sub esp, 0x10
test eax, eax
je 0x47104c
add dword [ebp - 0x83], 0x64
mov eax, dword [ebp - 0x83]
mov edx, 0x1388
mov dword [ebp - 0x530], 0x8000000
cmp eax, edx
cmovg eax, edx
mov dword [ebp - 0x83], eax
jmp 0x46f2d1
mov dword [esp + 0xc], 0
lea ecx, [ebp - 0x22c]
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
mov dword [ebp - 0x528], 0x14
call fcn.0041cca0
sub esp, 0x10
test eax, eax
je 0x4710b3
sub dword [ebp - 0x83], 0x64
mov eax, dword [ebp - 0x83]
mov edx, 0x64
mov dword [ebp - 0x530], 0x8000000
cmp eax, edx
cmovl eax, edx
mov dword [ebp - 0x83], eax
jmp 0x46f2d1
mov dword [esp + 0xc], 0
lea ecx, [ebp - 0x208]
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
mov dword [ebp - 0x528], 0x14
call fcn.0041cca0
sub esp, 0x10
test eax, eax
je 0x47111a
mov eax, dword [ebp - 0x7f]
cmp eax, 0x7cf
jle 0x471169
add eax, 0x1f4
cmp eax, 0x2710
jle 0x471164
mov dword [ebp - 0x7f], 0x2710
mov dword [ebp - 0x530], 0x10000000
jmp 0x46f2d1
mov dword [esp + 0xc], 0
lea ecx, [ebp - 0x1e4]
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
mov dword [ebp - 0x528], 0x14
call fcn.0041cca0
sub esp, 0x10
test eax, eax
je 0x47117f
mov eax, dword [ebp - 0x7f]
cmp eax, 0x7d0
jle 0x47116e
sub eax, 0x1f4
mov dword [ebp - 0x7f], eax
jmp 0x47110b
add eax, 0x64
jmp 0x471164
sub eax, 0x64
cmp eax, 0x63
jg 0x471164
mov dword [ebp - 0x7f], 0x64
jmp 0x47110b
mov dword [esp + 0xc], 0
lea ecx, [ebp - 0x1c0]
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
mov dword [ebp - 0x528], 0x14
call fcn.0041cca0
sub esp, 0x10
test eax, eax
je 0x4711e0
mov eax, dword [ebp - 0x7b]
cmp eax, 0x13
jle 0x47122f
add eax, 5
cmp eax, 0x64
jle 0x47122a
mov dword [ebp - 0x7b], 0x64
mov dword [ebp - 0x530], 0x20000000
jmp 0x46f2d1
mov dword [esp + 0xc], 0
lea ecx, [ebp - 0x19c]
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
mov dword [ebp - 0x528], 0x14
call fcn.0041cca0
sub esp, 0x10
test eax, eax
je 0x46f2d1
mov eax, dword [ebp - 0x7b]
cmp eax, 0x14
jle 0x471234
sub eax, 5
mov dword [ebp - 0x7b], eax
jmp 0x4711d1
add eax, 1
jmp 0x47122a
sub eax, 1
test eax, eax
jg 0x47122a
mov dword [ebp - 0x7b], 1
jmp 0x4711d1