Function at 0x466238
Capabilities:
Encrypt data using speck

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4a95a9
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x1148
call fcn.004a52e0
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 0x18]
test eax, eax
je 0x46d990
lea eax, [ebp + 0x20]
mov dword [ebp - 0x930], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0xa04], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0xb88], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xb90], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0xb80], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0xb78], eax
mov eax, dword [ebp - 0x930]
movzx eax, byte [eax]
test eax, eax
je 0x4662dd
mov eax, dword [ebp - 0xa04]
mov dword [ebp - 0xa0c], eax
mov eax, dword [ebp - 0xa0c]
mov dword [ebp - 0x550], eax
mov eax, dword [ebp - 0x550]
mov ecx, dword [ebp - 0x550]
mov ecx, dword [ecx]
mov dword [eax], ecx
jmp 0x46d98e
mov eax, dword [ebp - 0xb78]
mov dword [ebp - 0x9a8], eax
mov eax, dword [ebp - 0xb80]
mov dword [ebp - 0x934], eax
mov eax, dword [ebp - 0xb88]
mov dword [ebp - 0x848], eax
mov eax, dword [ebp - 0xb90]
mov dword [ebp - 0x338], eax
push 0x1a8
push 0x1920
push 0x7d55
push 1
push 0x1e81
push 0x606f
push 0x28dd
push 0x606c
push 0
push 0x2425
call fcn.0045ce03
add esp, 0x28
mov dword [ebp - 0xbc0], 0x9a924c00
mov dword [ebp - 0xc1c], 0xfffffffe
mov dword [ebp - 0xc18], 0xfffffffe
mov dword [ebp - 0xc14], 0xfffffffe
mov dword [ebp - 0xc10], 0xfffffffe
mov dword [ebp - 0x624], 0
mov dword [ebp - 0xef8], 0xa065c2dd
mov dword [ebp - 0xe6c], 0
mov dword [ebp - 0x104], 0xfb66febf
mov dword [ebp - 0x868], 0xfffffff6
mov dword [ebp - 0x9fc], 0xc77509cb
mov dword [ebp - 0xfbc], 0x11bbb4f5
mov dword [ebp - 0xe74], 0xc1dfe936
mov dword [ebp - 0x2ec], 0xfffffffe
mov dword [ebp - 0xf1c], 0xa5308633
mov dword [ebp - 0x394], 3
mov dword [ebp - 0xbb0], 0xdaa08bbd
mov dword [ebp - 0x2e4], 0
mov dword [ebp - 0x378], 7
mov dword [ebp - 0xe7c], 0xfffffffc
mov dword [ebp - 0xf90], 0xffffffff
mov dword [ebp - 0x33c], 1
push 3
lea ecx, [ebp - 0xc34]
call fcn.0042c8fc
mov dword [ebp - 0xbb8], 7
mov dword [ebp - 0xc0c], 4
mov dword [ebp - 0xbc8], 3
mov dword [ebp - 0x928], 0xd8b12acf
mov dword [ebp - 0x858], 0x1f44
mov dword [ebp - 0xb98], 0xaa4b78
cmp dword [ebp - 0x858], 0x2073
jle 0x4664fb
and dword [ebp - 0x200], 0
jmp 0x46648c
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 0x73ea
jge 0x4664f0
and dword [ebp - 0x130], 0
jmp 0x4664ae
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0x6fb1
jge 0x4664ee
mov eax, dword [ebp - 0x200]
cdq
idiv dword [ebp - 0x130]
mov eax, edx
cdq
mov dword [ebp - 0xa18], eax
mov dword [ebp - 0xa14], edx
push dword [ebp - 0xa14]
push dword [ebp - 0xa18]
mov ecx, 0xab6b98
call fcn.0042c6d4
jmp 0x4664a1
jmp 0x46647f
push 0x1b6b
call dword [0xaba378]
and dword [ebp - 4], 0
cmp dword [ebp - 0x858], 0x1b89
jge 0x46651b
mov edx, dword [ebp - 0xb98]
mov ecx, 0xab6b98
call fcn.0042ef5a
jmp 0x466537
or dword [ebp - 4], 0xffffffff
jmp 0x466541
mov dword [ebp - 0x18], 0
jmp 0x466551
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jge 0x466567
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x101c], 0x450bb101
jmp 0x46654a
mov dword [ebp - 0x18], 0
jmp 0x466577
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x46658d
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1090], 0x7e4ddbb7
jmp 0x466570
mov dword [ebp - 0x18], 0
jmp 0x46659d
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x4665b9
push dword [ebp - 0x18]
lea ecx, [ebp - 0xc34]
call fcn.0042c9ea
mov dword [eax], 0x4eca
jmp 0x466596
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc1c]
mov dword [ebp - 0xba0], eax
mov eax, dword [ebp - 0x2e4]
mov dword [ebp - 0xba8], eax
mov eax, dword [ebp - 0x2e4]
dec eax
mov dword [ebp - 0x2e4], eax
mov eax, dword [ebp - 0xba0]
cmp eax, dword [ebp - 0xba8]
jne 0x4665ff
mov dword [ebp - 0x384], 1
jmp 0x466606
and dword [ebp - 0x384], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc1c], 0
je 0x46662b
mov eax, 0x93a50eb6
test eax, eax
je 0x46662b
mov dword [ebp - 0x860], 1
jmp 0x466632
and dword [ebp - 0x860], 0
mov eax, dword [ebp - 0x624]
add eax, dword [ebp - 0x860]
cmp eax, dword [ebp - 0x868]
jne 0x466652
mov dword [ebp - 0x614], 1
jmp 0x466659
and dword [ebp - 0x614], 0
mov eax, dword [ebp - 0x868]
cmp dword [ebp - 0x614], eax
jne 0x466673
mov dword [ebp - 0x850], 1
jmp 0x46667a
and dword [ebp - 0x850], 0
mov eax, dword [ebp - 0x33c]
inc eax
mov dword [ebp - 0x33c], eax
mov eax, dword [ebp - 0x33c]
imul eax, dword [ebp - 0x850]
imul eax, dword [ebp - 0x378]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0xc1c]
jge 0x4666b6
mov dword [ebp - 0x37c], 1
jmp 0x4666bd
and dword [ebp - 0x37c], 0
mov eax, dword [ebp - 0x378]
imul eax, dword [ebp - 0x37c]
cmp eax, dword [ebp - 0x2ec]
jle 0x4666de
mov dword [ebp - 0x764], 1
jmp 0x4666e5
and dword [ebp - 0x764], 0
push 2
lea ecx, [ebp - 0xc34]
call fcn.0042c9ea
mov ecx, dword [ebp - 0x764]
cmp ecx, dword [eax]
jne 0x466708
mov dword [ebp - 0x61c], 1
jmp 0x46670f
and dword [ebp - 0x61c], 0
cmp dword [ebp - 0xbb0], 0
je 0x46672d
cmp dword [ebp - 0x394], 0
je 0x46672d
mov dword [ebp - 0x38c], 1
jmp 0x466734
and dword [ebp - 0x38c], 0
mov eax, dword [ebp - 0xbb8]
cmp dword [ebp - 0x38c], eax
jne 0x46674e
mov dword [ebp - 0x80c], 1
jmp 0x466755
and dword [ebp - 0x80c], 0
mov eax, dword [ebp - 0xbc0]
imul eax, dword [ebp - 0x80c]
mov dword [ebp - 0x2ec], eax
mov eax, dword [ebp - 0x2ec]
add eax, dword [ebp - 0x104]
mov dword [ebp - 0xc04], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xc04]
mov dword [ebp + eax - 0x101c], ecx
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0xe84], eax
mov eax, dword [ebp - 0x394]
mov dword [ebp - 0xf2c], eax
push 2
lea ecx, [ebp - 0xc34]
call fcn.0042c9ea
mov eax, dword [eax]
mov dword [ebp - 0x104], eax
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0xc0c], eax
lea eax, [ebp - 0xbc8]
push eax
lea eax, [ebp - 0x9fc]
push eax
push 0x664c
push 1
lea eax, [ebp - 0x624]
push eax
push 0x9df
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0x928]
push eax
push 0
call fcn.004655f5
add esp, 0x24
lea ecx, [ebp - 0xc34]
call fcn.0042c9ce
mov dword [ebp - 0x2c], 0x7c203980
mov dword [ebp - 0x14], 0xfffffff7
mov dword [ebp - 0x138], 0x7ea4c57
mov dword [ebp - 0xcac], 0x2faa9634
mov dword [ebp - 0xca8], 0x2faa9634
mov dword [ebp - 0xca4], 0x2faa9634
mov dword [ebp - 0xca0], 0x2faa9634
lea ecx, [ebp - 0x345]
call fcn.0042c9f9
push eax
lea eax, [ebp - 0xc9c]
push eax
lea eax, [ebp - 0xcac]
push eax
lea ecx, [ebp - 0x1004]
call fcn.0042c9fc
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x8ec]
call fcn.0042c9a8
mov dword [ebp - 0x324], 0
mov dword [ebp - 0x91c], 0x905f4d0c
mov dword [ebp - 0x38], 0
jmp 0x4668a3
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 3
jge 0x4668b9
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x128], 1
jmp 0x46689c
mov dword [ebp - 0x38], 0
jmp 0x4668c9
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 3
jge 0x4668df
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0xffc], 0
jmp 0x4668c2
mov dword [ebp - 0x14], 0
jmp 0x4668ef
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jg 0x466b60
mov dword [ebp - 0x2a0], 0
jmp 0x466912
mov eax, dword [ebp - 0x2a0]
inc eax
mov dword [ebp - 0x2a0], eax
cmp dword [ebp - 0x2a0], 3
jge 0x46692e
mov eax, dword [ebp - 0x2a0]
mov dword [ebp + eax*4 - 0xfe4], 0x4ca77904
jmp 0x466905
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x128]
mov dword [ebp - 0x39c], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x39c]
mov dword [ebp + eax - 0xfe4], ecx
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x128]
imul eax, dword [ebp - 0x39c]
test eax, eax
je 0x466978
push 6
pop eax
test eax, eax
je 0x466978
mov dword [ebp - 0x76c], 1
jmp 0x46697f
and dword [ebp - 0x76c], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x128]
add eax, dword [ebp - 0x76c]
mov ecx, dword [ebp - 0x14]
cmp eax, dword [ebp + ecx*4 - 0x128]
jne 0x4669a7
mov dword [ebp - 0x3a4], 1
jmp 0x4669ae
and dword [ebp - 0x3a4], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x128]
cmp dword [ebp - 0x3a4], eax
jne 0x4669cc
mov dword [ebp - 0x62c], 1
jmp 0x4669d3
and dword [ebp - 0x62c], 0
mov eax, dword [ebp - 0x62c]
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0xffffffff
jne 0x4669f4
mov dword [ebp - 0xb04], 1
jmp 0x4669fb
and dword [ebp - 0xb04], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x128]
mov dword [ebp - 0xe8c], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x128], 0
jge 0x466a26
mov dword [ebp - 0x3ac], 1
jmp 0x466a2d
and dword [ebp - 0x3ac], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x128]
cmp dword [ebp - 0x3ac], eax
jne 0x466a4b
mov dword [ebp - 0x880], 1
jmp 0x466a52
and dword [ebp - 0x880], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x128]
cmp dword [ebp - 0x880], eax
jge 0x466a79
cmp dword [ebp - 0x14], 0
je 0x466a79
mov dword [ebp - 0x3b4], 1
jmp 0x466a80
and dword [ebp - 0x3b4], 0
cmp dword [ebp - 0x3b4], 0xffff
jb 0x466a98
mov dword [ebp - 0x634], 1
jmp 0x466a9f
and dword [ebp - 0x634], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x128]
mov ecx, dword [ebp - 0x634]
lea eax, [ecx + eax + 0xfe64]
mov ecx, dword [ebp - 0x14]
cmp eax, dword [ebp + ecx*4 - 0x128]
jle 0x466ad2
xor eax, eax
jne 0x466ad2
and dword [ebp - 0x3bc], 0
jmp 0x466adc
mov dword [ebp - 0x3bc], 1
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x3bc]
sub ecx, dword [ebp + eax*4 - 0x128]
mov eax, dword [ebp - 0x14]
cmp ecx, dword [ebp + eax*4 - 0x128]
jg 0x466b04
mov dword [ebp - 0x774], 1
jmp 0x466b0b
and dword [ebp - 0x774], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x774], eax
je 0x466b22
mov dword [ebp - 0x3c4], 1
jmp 0x466b29
and dword [ebp - 0x3c4], 0
mov eax, dword [ebp - 0x3c4]
sub eax, 0xffa898cb
mov dword [ebp - 0x63c], eax
push 1
lea ecx, [ebp - 0x8ec]
call fcn.0042c9ea
mov ecx, dword [ebp - 0x63c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x63c]
mov dword [ebp - 0x324], eax
jmp 0x4668e8
mov eax, dword [ebp - 0x91c]
mov dword [ebp - 0xfb0], eax
xor eax, eax
jne 0x466bdd
push 3
lea ecx, [ebp - 0x8ec]
call fcn.0042c9ea
cmp dword [eax], 0
jne 0x466b9c
cmp dword [ebp - 0x138], 0
jne 0x466b9c
or eax, 0xffffffff
je 0x466b9c
mov dword [ebp - 0xad8], 1
jmp 0x466ba3
and dword [ebp - 0xad8], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x128]
mov dword [ebp - 0xe94], eax
push 0
lea ecx, [ebp - 0x8ec]
call fcn.0042c9ea
push 1
lea ecx, [ebp - 0x8ec]
call fcn.0042c9ea
cmp dword [eax], 0
jne 0x466bdd
and dword [ebp - 0x3cc], 0
jmp 0x466be7
mov dword [ebp - 0x3cc], 1
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x3cc]
cmp dword [ebp - 0x14], eax
jl 0x466c02
mov dword [ebp - 0x814], 1
jmp 0x466c09
and dword [ebp - 0x814], 0
mov dword [ebp - 0x324], 0xfffffffe
mov eax, dword [ebp - 0x324]
add eax, dword [ebp - 0x814]
cmp eax, dword [ebp - 0x138]
jle 0x466c42
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xffc], 0
je 0x466c42
mov dword [ebp - 0x3d4], 1
jmp 0x466c49
and dword [ebp - 0x3d4], 0
push 1
lea ecx, [ebp - 0x8ec]
call fcn.0042c9ea
mov ecx, dword [ebp - 0x3d4]
mov dword [eax], ecx
lea ecx, [ebp - 0x8ec]
call fcn.0042c9ce
mov dword [ebp - 0x6e4], 0xfffffff9
mov dword [ebp - 0x4c], 6
mov dword [ebp - 0x3ec], 0x48b1647c
mov dword [ebp - 0x48], 0x18e50348
mov dword [ebp - 0x6c], 0x1d84
mov dword [ebp - 0xd44], 0x3895
mov dword [ebp - 0xd40], 0x3895
mov dword [ebp - 0xd3c], 0x3895
mov dword [ebp - 0xd38], 0x3895
mov dword [ebp - 0xf3c], 0x7bc6200d
mov dword [ebp - 0xe9c], 8
mov dword [ebp - 0xf98], 0x8e65dd4d
mov dword [ebp - 0xea4], 1
mov dword [ebp - 0x4c], 0
jmp 0x466cf2
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 6
jle 0x466dc7
push 2
lea ecx, [ebp - 0xbec]
call fcn.0042c8fc
mov dword [ebp - 0x208], 0
jmp 0x466d22
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 2
jge 0x466d44
push dword [ebp - 0x208]
lea ecx, [ebp - 0xbec]
call fcn.0042c9ea
mov dword [eax], 0x31e42a43
jmp 0x466d15
push 0
lea ecx, [ebp - 0xbec]
call fcn.0042c9ea
and dword [eax], 0
jmp 0x466d7a
push 0
lea ecx, [ebp - 0xbec]
call fcn.0042c9ea
mov dword [ebp - 0x644], eax
mov eax, dword [ebp - 0x644]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x644]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0xbec]
call fcn.0042c9ea
cmp dword [eax], 1
je 0x466db7
mov byte [ebp - 0x9c], 0
push 0
lea eax, [ebp - 0x9c]
push eax
push 0
push 0x171f
push 0x3fc5
push 0x2eea
call fcn.004560d5
add esp, 0x18
jmp 0x466d56
lea ecx, [ebp - 0xbec]
call fcn.0042c9ce
jmp 0x466ceb
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0xf4c], eax
imul eax, dword [ebp - 0x48], 0
cmp eax, dword [ebp - 0x48]
jne 0x466de5
mov dword [ebp - 0x3dc], 1
jmp 0x466dec
and dword [ebp - 0x3dc], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x3dc], eax
jl 0x466e03
mov dword [ebp - 0x77c], 1
jmp 0x466e0a
and dword [ebp - 0x77c], 0
cmp dword [ebp - 0x77c], 0xc8953526
je 0x466e22
mov dword [ebp - 0x3e4], 1
jmp 0x466e29
and dword [ebp - 0x3e4], 0
mov eax, dword [ebp - 0x3e4]
sub eax, 0x3f08
xor ecx, ecx
sub ecx, eax
cmp ecx, 0xfffffffe
jbe 0x466e49
mov dword [ebp - 0x64c], 1
jmp 0x466e50
and dword [ebp - 0x64c], 0
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x64c], eax
jge 0x466e67
mov dword [ebp - 0x864], 1
jmp 0x466e6e
and dword [ebp - 0x864], 0
mov dword [ebp - 0x3ec], 0x7b79
mov eax, dword [ebp - 0x3ec]
cmp eax, dword [ebp - 0x864]
jl 0x466e92
mov dword [ebp - 0x3f4], 1
jmp 0x466e99
and dword [ebp - 0x3f4], 0
mov eax, dword [ebp - 0x3f4]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x4c], eax
jge 0x466eb6
mov dword [ebp - 0x654], 1
jmp 0x466ebd
and dword [ebp - 0x654], 0
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x654], eax
jl 0x466ed4
mov dword [ebp - 0x3fc], 1
jmp 0x466edb
and dword [ebp - 0x3fc], 0
cmp dword [ebp - 0x3fc], 0x61ac
jl 0x466ef3
mov dword [ebp - 0x784], 1
jmp 0x466efa
and dword [ebp - 0x784], 0
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x784], eax
jg 0x466f4e
cmp dword [ebp - 0x4c], 0
je 0x466f4e
mov dword [ebp - 0x48], 0
jmp 0x466f1b
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0x2a
jle 0x466f49
mov dword [ebp - 0x6c], 0
jmp 0x466f31
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 4
jge 0x466f47
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0xd44], 0xcc86
jmp 0x466f2a
jmp 0x466f14
jmp 0x466fd4
mov dword [ebp - 0xd5c], 6
mov dword [ebp - 0x404], 0xdc4b
push 3
lea ecx, [ebp - 0xcf8]
call fcn.0042c8fc
mov dword [ebp - 0x140], 0
jmp 0x466f88
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 3
jge 0x466faa
push dword [ebp - 0x140]
lea ecx, [ebp - 0xcf8]
call fcn.0042c9ea
mov dword [eax], 0xfffffffd
jmp 0x466f7b
mov eax, dword [ebp - 0x404]
inc eax
mov dword [ebp - 0x404], eax
mov esi, dword [ebp - 0x6c]
push 0
lea ecx, [ebp - 0xcf8]
call fcn.0042c9ea
mov dword [eax], esi
lea ecx, [ebp - 0xcf8]
call fcn.0042c9ce
mov dword [ebp - 0x9a0], 4
mov dword [ebp - 0x270], 0xffffffff
mov dword [ebp - 0xd0], 0
push 3
lea ecx, [ebp - 0xd28]
call fcn.0042c8fc
mov dword [ebp - 0xb8c], 0x53f3ac9d
push 0x5e0
push 0x6736
push 1
push 0x2314
lea eax, [ebp - 0xd28]
push eax
push 0x4152
push 0x38
push 0
push 1
lea eax, [ebp - 0xd60]
push eax
call fcn.00464c10
add esp, 0x28
mov dword [ebp - 0x270], 0xb
jmp 0x467054
mov eax, dword [ebp - 0x270]
dec eax
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 0xffffffe5
jg 0x4672e4
mov dword [ebp - 0xa4], 0xfffffffe
mov dword [ebp - 0xd68], 0xffffffff
push 3
lea ecx, [ebp - 0xd04]
call fcn.0042c8fc
mov dword [ebp - 0x948], 0x177c
mov dword [ebp - 0x148], 0
jmp 0x4670a5
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 3
jge 0x4670c7
push dword [ebp - 0x148]
lea ecx, [ebp - 0xd04]
call fcn.0042c9ea
mov dword [eax], 0xfffffffd
jmp 0x467098
mov dword [ebp - 0x65c], 0x2ac6
mov dword [ebp - 0x938], 0xaa4be0
cmp dword [ebp - 0x65c], 0x2bd5
jle 0x46715e
and dword [ebp - 0x210], 0
jmp 0x4670fd
mov eax, dword [ebp - 0x210]
inc eax
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 0x55dc
jge 0x46715e
and dword [ebp - 0x150], 0
jmp 0x46711f
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0x244e
jge 0x46715c
mov eax, dword [ebp - 0x210]
or eax, dword [ebp - 0x150]
cdq
mov dword [ebp - 0xa24], eax
mov dword [ebp - 0xa20], edx
push dword [ebp - 0xa20]
push dword [ebp - 0xa24]
mov ecx, 0xab6b98
call fcn.0042c6d4
jmp 0x467112
jmp 0x4670f0
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0xd0]
push eax
push 0x40de
push 0xf54
push 0
push 0
push 0x67a9
call fcn.00465cb5
add esp, 0x1c
mov dword [ebp - 4], 2
cmp dword [ebp - 0x65c], 0x292c
jge 0x4671aa
mov edx, dword [ebp - 0x938]
mov ecx, 0xab6b98
call fcn.0042ef5a
jmp 0x4671c6
or dword [ebp - 4], 0xffffffff
jmp 0x4671d0
mov dword [ebp - 0xd0], 0
jmp 0x4671e9
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 2
jg 0x4672d4
mov dword [ebp - 0xbf0], 0xaf03fa9a
mov dword [ebp - 0xae0], 1
mov dword [ebp - 0xa4], 2
jmp 0x467223
mov eax, dword [ebp - 0xa4]
dec eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0
jl 0x4672cf
mov dword [ebp - 0x950], 0x43ac46dd
mov dword [ebp - 0xd70], 0
mov dword [ebp - 0xae8], 0xae9a07b3
mov dword [ebp - 0x940], 0x20b50f6b
lea eax, [ebp - 0xb8c]
push eax
push 0x7935
push 0x3365
lea eax, [ebp - 0xd28]
push eax
push 0x70f4
push 0
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0x940]
push eax
push 0
lea eax, [ebp - 0xae0]
push eax
lea eax, [ebp - 0x948]
push eax
lea eax, [ebp - 0xbf0]
push eax
push 0x717d
lea eax, [ebp - 0x950]
push eax
lea eax, [ebp - 0xae8]
push eax
push 0x19f2
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0xd04]
push eax
call fcn.00462a27
add esp, 0x48
jmp 0x467216
jmp 0x4671dc
lea ecx, [ebp - 0xd04]
call fcn.0042c9ce
jmp 0x467047
lea ecx, [ebp - 0xd28]
call fcn.0042c9ce
mov dword [ebp - 0x260], 4
mov dword [ebp - 0x918], 1
mov dword [ebp - 0x914], 1
mov dword [ebp - 0x910], 1
mov dword [ebp - 0x90c], 1
mov dword [ebp - 0x664], 0x7213ec75
mov dword [ebp - 0x424], 1
mov dword [ebp - 0xb94], 0xffffffff
mov byte [ebp - 0x88], 0
movzx eax, byte [ebp - 0x88]
test eax, eax
je 0x467376
push 0x605
push 1
push 0x60b0
push 0
push 0x2afb
push 0xf24
push 0x19c8
call fcn.004633d6
add esp, 0x1c
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x918]
mov dword [ebp - 0xd78], eax
push 4
pop eax
imul eax, eax, 3
imul eax, dword [ebp + eax - 0x918], 0x8084
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x664]
cmp dword [ebp + eax - 0x918], ecx
jg 0x4673bb
mov dword [ebp - 0x40c], 1
jmp 0x4673c2
and dword [ebp - 0x40c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x918]
cmp dword [ebp - 0x40c], eax
jle 0x4673e3
mov dword [ebp - 0x81c], 1
jmp 0x4673ea
and dword [ebp - 0x81c], 0
mov eax, dword [ebp - 0x424]
cmp dword [ebp - 0x81c], eax
jle 0x467404
mov dword [ebp - 0x414], 1
jmp 0x46740b
and dword [ebp - 0x414], 0
cmp dword [ebp - 0x414], 0xfffffff8
jbe 0x467420
mov dword [ebp - 0x41c], 1
jmp 0x467427
and dword [ebp - 0x41c], 0
mov eax, dword [ebp - 0x664]
cmp dword [ebp - 0x41c], eax
jne 0x467441
mov dword [ebp - 0x958], 1
jmp 0x467448
and dword [ebp - 0x958], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x918]
mov dword [ebp - 0xd80], eax
cmp dword [ebp - 0xb94], 0x466b
je 0x467473
mov dword [ebp - 0x78c], 1
jmp 0x46747a
and dword [ebp - 0x78c], 0
mov eax, dword [ebp - 0x78c]
mov dword [ebp - 0x424], eax
mov dword [ebp - 0x6d4], 0xa08bbd18
mov dword [ebp - 0x4fc], 1
mov dword [ebp - 0x888], 0x5e21
mov dword [ebp - 0xaf0], 0xaa4c38
cmp dword [ebp - 0x888], 0x5fd7
jle 0x4675bd
and dword [ebp - 0x218], 0
jmp 0x4674d4
mov eax, dword [ebp - 0x218]
inc eax
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 0x761f
jge 0x4675bd
and dword [ebp - 0x2c8], 0
jmp 0x4674fa
mov eax, dword [ebp - 0x2c8]
inc eax
mov dword [ebp - 0x2c8], eax
cmp dword [ebp - 0x2c8], 0x6bdc
jge 0x4675b8
and dword [ebp - 0x158], 0
jmp 0x467520
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 0x6f7c
jge 0x4675b3
and dword [ebp - 0x160], 0
jmp 0x467546
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 0x7e86
jge 0x4675ae
mov eax, dword [ebp - 0x2c8]
cdq
idiv dword [ebp - 0x158]
or edx, dword [ebp - 0x218]
or edx, dword [ebp - 0x160]
mov eax, edx
cdq
mov dword [ebp - 0xa30], eax
mov dword [ebp - 0xa2c], edx
push dword [ebp - 0xa2c]
push dword [ebp - 0xa30]
lea ecx, [ebp - 0x1054]
call fcn.00401988
pop ecx
pop ecx
mov ecx, eax
call fcn.0042c6c9
push eax
call fcn.00493197
pop ecx
lea ecx, [ebp - 0x1054]
call fcn.0042c6bf
jmp 0x467539
jmp 0x467513
jmp 0x4674ed
jmp 0x4674c7
push 3
lea ecx, [ebp - 0xce0]
call fcn.0042c8fc
mov dword [ebp - 0x110], 0xe19d29be
mov dword [ebp - 0x960], 0x4dc9ed9b
mov dword [ebp - 0xd88], 0x2d9e
mov dword [ebp - 0xd90], 0
mov dword [ebp - 0xd98], 8
push 2
lea ecx, [ebp - 0xf08]
call fcn.0042c8fc
mov dword [ebp - 0x66c], 0xcb6a7f4e
mov dword [ebp - 0xda0], 1
mov dword [ebp - 0xda8], 1
mov dword [ebp - 0x50], 0
jmp 0x467637
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 3
jge 0x467653
push dword [ebp - 0x50]
lea ecx, [ebp - 0xce0]
call fcn.0042c9ea
mov dword [eax], 0x648
jmp 0x467630
mov dword [ebp - 0x50], 0
jmp 0x467663
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 2
jge 0x46767f
push dword [ebp - 0x50]
lea ecx, [ebp - 0xf08]
call fcn.0042c9ea
mov dword [eax], 0xc8959310
jmp 0x46765c
mov dword [ebp - 0x110], 0
jmp 0x467698
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 2
jg 0x467711
mov dword [ebp - 0xdb0], 0x6d4f2887
mov dword [ebp - 0xe30], 0xc2285faa
mov dword [ebp - 0xe38], 0x7d8cf4c5
mov dword [ebp - 0xe40], 0xffffffff
mov dword [ebp - 0xe48], 0
mov dword [ebp - 0xe50], 0xccd2466e
mov dword [ebp - 0xe58], 0x3b4709ba
push dword [ebp - 0x110]
lea ecx, [ebp - 0xce0]
call fcn.0042c9ea
cmp dword [eax], 0
je 0x4676ff
jmp 0x467711
mov eax, dword [ebp - 0x66c]
inc eax
mov dword [ebp - 0x66c], eax
jmp 0x46768b
cmp dword [ebp - 0x960], 0
je 0x46773d
mov dword [ebp - 0xe60], 7
mov dword [ebp - 0x42c], 0xffffffff
mov eax, dword [ebp - 0x42c]
dec eax
mov dword [ebp - 0x42c], eax
jmp 0x467772
mov byte [ebp - 0x94], 0
push 0x5fe6
lea eax, [ebp - 0x94]
push eax
push 0x6f5
push 0x6011
push 0
push 0x45d
push 0x6b5
push 1
push 0
call fcn.00463612
add esp, 0x24
lea ecx, [ebp - 0xf08]
call fcn.0042c9ce
lea ecx, [ebp - 0xce0]
call fcn.0042c9ce
mov dword [ebp - 4], 4
cmp dword [ebp - 0x888], 0x5a75
jge 0x4677a7
push dword [ebp - 0xaf0]
call fcn.00493197
pop ecx
jmp 0x4677c3
or dword [ebp - 4], 0xffffffff
jmp 0x4677cd
mov dword [ebp - 0x50c], 0xfda6
push 3
lea ecx, [ebp - 0x8d4]
call fcn.0042c8fc
lea eax, [ebp - 0xe68]
push eax
push 0
push 1
lea eax, [ebp - 0x8d4]
push eax
push 0x4695
call fcn.00456185
add esp, 0x14
push 1
lea ecx, [ebp - 0x8d4]
call fcn.0042c9ea
and dword [eax], 0
jmp 0x467839
push 1
lea ecx, [ebp - 0x8d4]
call fcn.0042c9ea
mov dword [ebp - 0x434], eax
mov eax, dword [ebp - 0x434]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x434]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x8d4]
call fcn.0042c9ea
cmp dword [eax], 0xfffffff8
jge 0x467d0b
mov dword [ebp - 0x674], 0x694a
mov dword [ebp - 0x968], 0xaa4cb0
cmp dword [ebp - 0x674], 0x6ab4
jle 0x467951
and dword [ebp - 0x278], 0
jmp 0x467889
mov eax, dword [ebp - 0x278]
inc eax
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x278], 0x4e56
jge 0x467951
and dword [ebp - 0x168], 0
jmp 0x4678af
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 0x247f
jge 0x46794c
and dword [ebp - 0x220], 0
jmp 0x4678d5
mov eax, dword [ebp - 0x220]
inc eax
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 0xcf6
jge 0x467947
and dword [ebp - 0x170], 0
jmp 0x4678f7
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 0x2e31
jge 0x467945
mov eax, dword [ebp - 0x278]
cdq
idiv dword [ebp - 0x168]
mov eax, dword [ebp - 0x220]
mov ecx, dword [ebp - 0x170]
sar eax, cl
xor eax, edx
cdq
mov dword [ebp - 0xa3c], eax
mov dword [ebp - 0xa38], edx
push dword [ebp - 0xa38]
push dword [ebp - 0xa3c]
mov ecx, 0xab6b98
call fcn.0042c6d4
jmp 0x4678ea
jmp 0x4678c8
jmp 0x4678a2
jmp 0x46787c
mov dword [ebp - 4], 6
cmp dword [ebp - 0x674], 0x66ea
jge 0x467974
mov edx, dword [ebp - 0x968]
mov ecx, 0xab6b98
call fcn.0042ef5a
jmp 0x467990
or dword [ebp - 4], 0xffffffff
jmp 0x46799a
mov dword [ebp - 0x188], 0
mov dword [ebp - 0x2a8], 0
jmp 0x4679bd
mov eax, dword [ebp - 0x2a8]
inc eax
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2a8], 1
jge 0x4679d9
mov eax, dword [ebp - 0x2a8]
mov dword [ebp + eax*4 - 0x970], 1
jmp 0x4679b0
mov dword [ebp - 0x794], 0x5770
mov dword [ebp - 0xaf8], 0xaa4d30
cmp dword [ebp - 0x794], 0x5856
jle 0x467ae2
and dword [ebp - 0x178], 0
jmp 0x467a13
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 0x2b21
jge 0x467ada
and dword [ebp - 0x228], 0
jmp 0x467a39
mov eax, dword [ebp - 0x228]
inc eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 0x6669
jge 0x467ad5
and dword [ebp - 0x180], 0
jmp 0x467a5f
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 0x445b
jge 0x467ad0
and dword [ebp - 0x280], 0
jmp 0x467a81
mov eax, dword [ebp - 0x280]
inc eax
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 0x7e95
jge 0x467ace
mov eax, dword [ebp - 0x178]
and eax, dword [ebp - 0x228]
mov edx, dword [ebp - 0x180]
mov ecx, dword [ebp - 0x280]
shl edx, cl
or eax, edx
cdq
mov dword [ebp - 0xa48], eax
mov dword [ebp - 0xa44], edx
push dword [ebp - 0xa44]
push dword [ebp - 0xa48]
mov ecx, 0xab6b98
call fcn.0042c6d4
jmp 0x467a74
jmp 0x467a52
jmp 0x467a2c
jmp 0x467a06
push 0
call dword [0xaba11c]
mov dword [ebp - 0x188], 0
jmp 0x467afb
mov eax, dword [ebp - 0x188]
dec eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 0
jl 0x467ca9
mov dword [ebp - 0x43c], 0x6d15
mov dword [ebp - 0xbd8], 0xaa4d80
cmp dword [ebp - 0x43c], 0x6da3
jle 0x467bfe
push 0
call dword [0xaba0e4]
and dword [ebp - 0x230], 0
jmp 0x467b4a
mov eax, dword [ebp - 0x230]
inc eax
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0x491
jge 0x467bfe
and dword [ebp - 0x190], 0
jmp 0x467b70
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 0x194d
jge 0x467bf9
and dword [ebp - 0x114], 0
jmp 0x467b92
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0x45e2
jge 0x467bf4
mov eax, dword [ebp - 0x230]
cdq
idiv dword [ebp - 0x190]
sub edx, dword [ebp - 0x114]
mov eax, edx
cdq
mov dword [ebp - 0xa54], eax
mov dword [ebp - 0xa50], edx
push dword [ebp - 0xa50]
push dword [ebp - 0xa54]
lea ecx, [ebp - 0x10c0]
call fcn.00401988
pop ecx
pop ecx
mov ecx, eax
call fcn.0042c6c9
push eax
call fcn.00493197
pop ecx
lea ecx, [ebp - 0x10c0]
call fcn.0042c6bf
jmp 0x467b85
jmp 0x467b63
jmp 0x467b3d
mov dword [ebp - 0xdc], 0xfffffffc
mov dword [ebp - 4], 8
cmp dword [ebp - 0x43c], 0x6bfc
jge 0x467c27
push dword [ebp - 0xbd8]
call fcn.00493197
pop ecx
jmp 0x467c43
or dword [ebp - 4], 0xffffffff
jmp 0x467c4d
mov dword [ebp - 0xdc], 0
jmp 0x467c66
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0
jg 0x467ca4
mov byte [ebp - 0x8a], 0
movzx eax, byte [ebp - 0x8a]
test eax, eax
je 0x467c90
push 0x160d
push 0
push 0
call dword [0xaba2bc]
mov eax, dword [ebp - 0xdc]
cmp dword [ebp + eax*4 - 0x970], 0
je 0x467ca2
jmp 0x467ca4
jmp 0x467c59
jmp 0x467aee
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x794], 0x5522
jge 0x467ccc
mov edx, dword [ebp - 0xaf8]
mov ecx, 0xab6b98
call fcn.0042ef5a
jmp 0x467ce8
or dword [ebp - 4], 0xffffffff
jmp 0x467cf2
push 2
lea ecx, [ebp - 0x8d4]
call fcn.0042c9ea
cmp dword [eax], 0
je 0x467d06
jmp 0x467d0b
jmp 0x467815
lea ecx, [ebp - 0x8d4]
call fcn.0042c9ce
mov dword [ebp - 0x514], 0xf8169c14
mov dword [ebp - 0x35c], 0x2e08
mov dword [ebp - 0x358], 0x2e08
mov dword [ebp - 0x354], 0x2e08
mov dword [ebp - 0x350], 0x2e08
mov dword [ebp - 0x980], 6
mov dword [ebp - 0x2c0], 0
jmp 0x467d6b
mov eax, dword [ebp - 0x2c0]
inc eax
mov dword [ebp - 0x2c0], eax
cmp dword [ebp - 0x2c0], 4
jge 0x467d87
mov eax, dword [ebp - 0x2c0]
mov dword [ebp + eax*4 - 0x1034], 0x79ebef9f
jmp 0x467d5e
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x35c]
mov dword [ebp - 0xe70], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x35c]
mov dword [ebp - 0xe78], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x35c], 0
jne 0x467dd4
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x35c], 0
jne 0x467dd4
and dword [ebp - 0x444], 0
jmp 0x467dde
mov dword [ebp - 0x444], 1
cmp dword [ebp - 0x444], 0x1e3ff14e
jle 0x467df6
mov dword [ebp - 0x67c], 1
jmp 0x467dfd
and dword [ebp - 0x67c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x35c]
cmp dword [ebp - 0x67c], eax
jle 0x467e29
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x35c], 0
jne 0x467e29
and dword [ebp - 0x44c], 0
jmp 0x467e33
mov dword [ebp - 0x44c], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x35c]
cmp eax, dword [ebp - 0x44c]
je 0x467e62
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x35c], 0
je 0x467e62
mov dword [ebp - 0x824], 1
jmp 0x467e69
and dword [ebp - 0x824], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x824]
sub ecx, dword [ebp + eax - 0x35c]
cmp ecx, 0xffffffff
jl 0x467ea2
mov dword [ebp - 0x978], 2
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x35c]
mov dword [ebp - 0x978], eax
jmp 0x468139
mov dword [ebp - 0xb0], 1
mov dword [ebp - 0x454], 0x7ff8
mov dword [ebp - 0xb9c], 0xaa4dc0
cmp dword [ebp - 0x454], 0x8061
jle 0x467fa9
and dword [ebp - 0x198], 0
jmp 0x467ee6
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 0x439c
jge 0x467fa9
and dword [ebp - 0x238], 0
jmp 0x467f0c
mov eax, dword [ebp - 0x238]
inc eax
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 0x31b6
jge 0x467fa4
and dword [ebp - 0x1a0], 0
jmp 0x467f32
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 0x3bb3
jge 0x467f9f
and dword [ebp - 0x288], 0
jmp 0x467f54
mov eax, dword [ebp - 0x288]
inc eax
mov dword [ebp - 0x288], eax
cmp dword [ebp - 0x288], 0x464d
jge 0x467f9d
mov eax, dword [ebp - 0x198]
add eax, dword [ebp - 0x238]
sub eax, dword [ebp - 0x1a0]
and eax, dword [ebp - 0x288]
cdq
mov dword [ebp - 0xa60], eax
mov dword [ebp - 0xa5c], edx
push dword [ebp - 0xa5c]
push dword [ebp - 0xa60]
mov ecx, 0xab6b98
call fcn.0042c6d4
jmp 0x467f47
jmp 0x467f25
jmp 0x467eff
jmp 0x467ed9
mov dword [ebp - 0x2f4], 0x83800955
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0x454], 0x7d24
jge 0x467fd6
mov edx, dword [ebp - 0xb9c]
mov ecx, 0xab6b98
call fcn.0042ef5a
jmp 0x467ff2
or dword [ebp - 4], 0xffffffff
jmp 0x467ffc
mov dword [ebp - 0x46c], 0x487972e7
mov dword [ebp - 0xb0], 3
jmp 0x46801f
mov eax, dword [ebp - 0xb0]
dec eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0
jl 0x468122
mov dword [ebp - 0xb00], 0x7f285f40
mov eax, dword [ebp - 0x2f4]
cmp dword [ebp - 0x2f4], eax
jne 0x468050
mov dword [ebp - 0x684], 1
jmp 0x468057
and dword [ebp - 0x684], 0
cmp dword [ebp - 0x684], 0x67a7bf74
je 0x46806f
mov dword [ebp - 0x45c], 1
jmp 0x468076
and dword [ebp - 0x45c], 0
mov eax, dword [ebp - 0x45c]
sub eax, 0x1d94a303
cmp eax, 0x4d07ddbf
jg 0x468094
mov dword [ebp - 0x79c], 1
jmp 0x46809b
and dword [ebp - 0x79c], 0
mov eax, dword [ebp - 0xb0]
mov ecx, dword [ebp - 0xb0]
mov ecx, dword [ebp + ecx*4 - 0x35c]
mov edx, dword [ebp - 0x79c]
neg edx
add edx, 8
imul ecx, edx
cmp dword [ebp + eax*4 - 0x35c], ecx
jl 0x4680d1
mov dword [ebp - 0x464], 1
jmp 0x4680d8
and dword [ebp - 0x464], 0
mov eax, dword [ebp - 0x464]
neg eax
sub eax, dword [ebp - 0x980]
mov dword [ebp - 0x68c], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x68c]
mov dword [ebp + eax - 0x1034], ecx
mov eax, dword [ebp - 0x68c]
mov dword [ebp - 0x46c], eax
mov eax, dword [ebp - 0x46c]
sub eax, dword [ebp - 0x2f4]
mov dword [ebp - 0xb00], eax
jmp 0x468012
mov byte [ebp - 0x9a], 0
push 0
lea eax, [ebp - 0x9a]
push eax
call fcn.0046db26
pop ecx
pop ecx
mov byte [ebp - 0x8c], 0
movzx eax, byte [ebp - 0x8c]
test eax, eax
je 0x468163
push 1
push 0x4f3e
push 0
push 0
push 0x759
call fcn.0046f6fb
add esp, 0x14
mov dword [ebp - 0xcd4], 0x9c79ebef
mov dword [ebp - 0xcd0], 0x9c79ebef
mov dword [ebp - 0xccc], 0x9c79ebef
mov dword [ebp - 0xcc8], 0x9c79ebef
lea ecx, [ebp - 0x2d5]
call fcn.0042c9f9
push eax
lea eax, [ebp - 0xcc4]
push eax
lea eax, [ebp - 0xcd4]
push eax
lea ecx, [ebp - 0x100c]
call fcn.0042c9fc
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xf28]
call fcn.0042c9a8
mov dword [ebp - 0x74], 0x10c93b4e
mov dword [ebp - 0xd4], 1
mov dword [ebp - 0x1a8], 0
jmp 0x4681ea
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 1
jge 0x468203
mov eax, dword [ebp - 0x1a8]
mov dword [ebp + eax*4 - 0x60], 2
jmp 0x4681dd
mov dword [ebp - 0x74], 0xffffffe4
jmp 0x468213
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0xfffffffd
jge 0x46869b
mov dword [ebp - 0xc0], 0xd3c1
mov dword [ebp - 0x34c], 0xfffffffa
mov dword [ebp - 0xb8], 1
mov dword [ebp - 0x890], 0xfffffffb
mov dword [ebp - 0x2b0], 0x41b8
mov dword [ebp - 0x49c], 0x5a8a
mov dword [ebp - 0x988], 0xaa4e0c
cmp dword [ebp - 0x49c], 0x5bb9
jle 0x468309
and dword [ebp - 0x240], 0
jmp 0x468289
mov eax, dword [ebp - 0x240]
inc eax
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 0x2f63
jge 0x468309
and dword [ebp - 0x1b0], 0
jmp 0x4682ab
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 0x64cd
jge 0x468304
mov eax, dword [ebp - 0x240]
xor eax, dword [ebp - 0x1b0]
cdq
mov dword [ebp - 0xa6c], eax
mov dword [ebp - 0xa68], edx
push dword [ebp - 0xa68]
push dword [ebp - 0xa6c]
lea ecx, [ebp - 0x10f0]
call fcn.00401988
pop ecx
pop ecx
mov ecx, eax
call fcn.0042c6c9
push eax
call fcn.00493197
pop ecx
lea ecx, [ebp - 0x10f0]
call fcn.0042c6bf
jmp 0x46829e
jmp 0x46827c
cmp dword [ebp - 0xc0], 0
jne 0x468455
cmp dword [ebp - 0xc0], 0
jne 0x468331
mov eax, 0x92ed
test eax, eax
jne 0x468331
and dword [ebp - 0x7a4], 0
jmp 0x46833b
mov dword [ebp - 0x7a4], 1
imul eax, dword [ebp - 0xd4], 0xf213
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0
je 0x468376
cmp dword [ebp - 0xb8], 0
je 0x468376
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x60], 0
je 0x468376
mov dword [ebp - 0x86c], 1
jmp 0x46837d
and dword [ebp - 0x86c], 0
mov eax, dword [ebp - 0x2b0]
inc eax
mov dword [ebp - 0x2b0], eax
mov eax, dword [ebp - 0x2b0]
cmp eax, dword [ebp - 0x86c]
jl 0x4683a4
mov dword [ebp - 0x474], 1
jmp 0x4683ab
and dword [ebp - 0x474], 0
mov eax, dword [ebp - 0x34c]
cmp dword [ebp - 0x474], eax
jne 0x4683c5
mov dword [ebp - 0x694], 1
jmp 0x4683cc
and dword [ebp - 0x694], 0
cmp dword [ebp - 0x694], 0x3c3fa3c
jle 0x4683e5
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x60], 0
je 0x4683ee
cmp dword [ebp - 0x34c], 0
jne 0x4683f4
cmp dword [ebp - 0x74], 0
je 0x468409
mov eax, 0x1361
test eax, eax
je 0x468409
mov dword [ebp - 0x47c], 1
jmp 0x468410
and dword [ebp - 0x47c], 0
mov eax, dword [ebp - 0x47c]
mov ecx, dword [ebp - 0x7a4]
lea eax, [ecx + eax + 0xe34f]
sub eax, dword [ebp - 0xc0]
mov dword [ebp - 0xd4], eax
jne 0x46843a
mov eax, 0x84a0
test eax, eax
je 0x468443
cmp dword [ebp - 0xb8], 0
jne 0x468448
or eax, 0xffffffff
je 0x46844c
xor eax, eax
jne 0x468455
and dword [ebp - 0x484], 0
jmp 0x46845f
mov dword [ebp - 0x484], 1
mov eax, dword [ebp - 0xc0]
cmp dword [ebp - 0x484], eax
jle 0x468479
mov dword [ebp - 0x69c], 1
jmp 0x468480
and dword [ebp - 0x69c], 0
mov eax, dword [ebp - 0xc0]
cmp dword [ebp - 0x69c], eax
jg 0x4684a3
cmp dword [ebp - 0xc0], 0
je 0x4684a3
mov dword [ebp - 0x48c], 1
jmp 0x4684aa
and dword [ebp - 0x48c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x60]
add eax, dword [ebp - 0x48c]
jne 0x4684ce
cmp dword [ebp - 0x890], 0
jne 0x4684ce
and dword [ebp - 0x82c], 0
jmp 0x4684d8
mov dword [ebp - 0x82c], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x60]
cmp dword [ebp - 0x82c], eax
jge 0x4684f6
mov dword [ebp - 0x494], 1
jmp 0x4684fd
and dword [ebp - 0x494], 0
cmp dword [ebp - 0x494], 0x9c3
jg 0x468515
mov dword [ebp - 0x6a4], 1
jmp 0x46851c
and dword [ebp - 0x6a4], 0
mov eax, dword [ebp - 0x6a4]
add eax, 0x2a5b4d63
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x60], eax
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0x49c], 0x59d3
jge 0x468550
push dword [ebp - 0x988]
call fcn.00493197
pop ecx
jmp 0x46856c
or dword [ebp - 4], 0xffffffff
jmp 0x468576
cmp dword [ebp - 0xb8], 0xce24
je 0x46858e
mov dword [ebp - 0x7ac], 1
jmp 0x468595
and dword [ebp - 0x7ac], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x7ac]
mov dword [ebp + eax - 0x60], ecx
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x60], 0x5e2
jle 0x4685c1
mov dword [ebp - 0x4a4], 1
jmp 0x4685c8
and dword [ebp - 0x4a4], 0
mov eax, dword [ebp - 0x4a4]
neg eax
cmp eax, dword [ebp - 0xd4]
jg 0x4685e4
mov dword [ebp - 0x6ac], 1
jmp 0x4685eb
and dword [ebp - 0x6ac], 0
cmp dword [ebp - 0x6ac], 0
je 0x468600
mov dword [ebp - 0x4ac], 1
jmp 0x468607
and dword [ebp - 0x4ac], 0
cmp dword [ebp - 0x4ac], 0xfe78de61
ja 0x46861f
mov dword [ebp - 0xc08], 1
jmp 0x468626
and dword [ebp - 0xc08], 0
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0xe80], eax
mov eax, dword [ebp - 0x890]
mov dword [ebp - 0xe88], eax
mov eax, dword [ebp - 0x34c]
cmp dword [ebp - 0x2b0], eax
jl 0x468655
mov dword [ebp - 0x990], 1
jmp 0x46865c
and dword [ebp - 0x990], 0
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0xe90], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x74]
cmp dword [ebp + eax - 0x60], ecx
jl 0x468683
mov dword [ebp - 0x4b4], 1
jmp 0x46868a
and dword [ebp - 0x4b4], 0
mov eax, dword [ebp - 0x4b4]
mov dword [ebp - 0xd4], eax
jmp 0x46820c
mov byte [ebp - 0x96], 0
push 0x39e0
push 0
push 0
lea eax, [ebp - 0x96]
push eax
push 1
call fcn.00460cc8
add esp, 0x14
mov dword [ebp - 0xb14], 0x7eb6652f
mov dword [ebp - 0xcc0], 0xca4f
mov dword [ebp - 0xcbc], 0xca4f
mov dword [ebp - 0xcb8], 0xca4f
mov dword [ebp - 0xcb4], 0xca4f
lea ecx, [ebp - 0x319]
call fcn.0042c9f9
push eax
lea eax, [ebp - 0xcb0]
push eax
lea eax, [ebp - 0xcc0]
push eax
lea ecx, [ebp - 0x1024]
call fcn.0042c9fc
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xf18]
call fcn.0042c9a8
mov dword [ebp - 0xe98], 7
mov dword [ebp - 0x6b4], 0x381
mov dword [ebp - 0xb08], 0xaa4e28
cmp dword [ebp - 0x6b4], 0x5b8
jle 0x46881b
and dword [ebp - 0x1b8], 0
jmp 0x468767
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 0x4f73
jge 0x46881b
and dword [ebp - 0x248], 0
jmp 0x46878d
mov eax, dword [ebp - 0x248]
inc eax
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 0x4f8a
jge 0x468816
and dword [ebp - 0x1c0], 0
jmp 0x4687af
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 0x3ce0
jge 0x468811
mov eax, dword [ebp - 0x1b8]
cdq
idiv dword [ebp - 0x248]
or edx, dword [ebp - 0x1c0]
mov eax, edx
cdq
mov dword [ebp - 0xa78], eax
mov dword [ebp - 0xa74], edx
push dword [ebp - 0xa74]
push dword [ebp - 0xa78]
lea ecx, [ebp - 0x106c]
call fcn.00401988
pop ecx
pop ecx
mov ecx, eax
call fcn.0042c6c9
push eax
call fcn.00493197
pop ecx
lea ecx, [ebp - 0x106c]
call fcn.0042c6bf
jmp 0x4687a2
jmp 0x468780
jmp 0x46875a
mov dword [ebp - 0xea0], 0x68876942
mov dword [ebp - 4], 0x10
cmp dword [ebp - 0x6b4], 0xffffffaf
jge 0x468841
push dword [ebp - 0xb08]
call fcn.00493197
pop ecx
jmp 0x46885d
or dword [ebp - 4], 0xffffffff
jmp 0x468867
mov dword [ebp - 0xea8], 0x708ef6b8
mov dword [ebp - 0x4bc], 0x471dfd94
mov dword [ebp - 0xeb0], 0
mov dword [ebp - 0x290], 0
jmp 0x46889e
mov eax, dword [ebp - 0x290]
inc eax
mov dword [ebp - 0x290], eax
cmp dword [ebp - 0x290], 1
jge 0x4688ba
mov eax, dword [ebp - 0x290]
mov dword [ebp + eax*4 - 0xeb8], 3
jmp 0x468891
push 3
lea ecx, [ebp - 0xf18]
call fcn.0042c9ea
mov dword [eax], 1
mov eax, dword [ebp - 0x4bc]
dec eax
mov dword [ebp - 0x4bc], eax
lea ecx, [ebp - 0xf18]
call fcn.0042c9ce
mov dword [ebp - 0xec0], 0x3556
mov byte [ebp - 0x8e], 0
movzx eax, byte [ebp - 0x8e]
test eax, eax
je 0x468913
push 0
push 0xa28
push 0x1088
call dword [0xaba298]
mov byte [ebp - 0x9e], 0
movzx eax, byte [ebp - 0x9e]
test eax, eax
je 0x468930
push 1
push 0
call fcn.0045b95d
pop ecx
pop ecx
mov dword [ebp - 0x2c], 0x41e55969
mov dword [ebp - 0x6bc], 0x75c96dd1
mov dword [ebp - 0x1e8], 0xdf2f4a8b
push 1
lea ecx, [ebp - 0x8a4]
call fcn.0042c8fc
mov dword [ebp - 0x7b4], 0x5d96
mov dword [ebp - 0x998], 0xaa4e64
cmp dword [ebp - 0x7b4], 0x5e26
jle 0x468a57
and dword [ebp - 0x2d0], 0
jmp 0x468992
mov eax, dword [ebp - 0x2d0]
inc eax
mov dword [ebp - 0x2d0], eax
cmp dword [ebp - 0x2d0], 0x26ef
jge 0x468a57
and dword [ebp - 0x1d0], 0
jmp 0x4689b8
mov eax, dword [ebp - 0x1d0]
inc eax
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 0x10fa
jge 0x468a52
and dword [ebp - 0x1c8], 0
jmp 0x4689de
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 0x1417
jge 0x468a4d
and dword [ebp - 0x250], 0
jmp 0x468a00
mov eax, dword [ebp - 0x250]
inc eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0x24f5
jge 0x468a4b
mov ecx, dword [ebp - 0x1c8]
sub ecx, dword [ebp - 0x250]
mov eax, dword [ebp - 0x1d0]
sar eax, cl
and eax, dword [ebp - 0x2d0]
cdq
mov dword [ebp - 0xa84], eax
mov dword [ebp - 0xa80], edx
push dword [ebp - 0xa80]
push dword [ebp - 0xa84]
mov ecx, 0xab6b98
call fcn.0042c6d4
jmp 0x4689f3
jmp 0x4689d1
jmp 0x4689ab
jmp 0x468985
mov dword [ebp - 0xc98], 1
mov dword [ebp - 0xc94], 1
mov dword [ebp - 0xc90], 1
mov dword [ebp - 0xc8c], 1
lea ecx, [ebp - 0x33d]
call fcn.0042c9f9
push eax
lea eax, [ebp - 0xc88]
push eax
lea eax, [ebp - 0xc98]
push eax
lea ecx, [ebp - 0x103c]
call fcn.0042c9fc
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xcec]
call fcn.0042c9a8
mov dword [ebp - 4], 0x12
cmp dword [ebp - 0x7b4], 0x5c71
jge 0x468ad7
mov edx, dword [ebp - 0x998]
mov ecx, 0xab6b98
call fcn.0042ef5a
jmp 0x468af3
or dword [ebp - 4], 0xffffffff
jmp 0x468afd
mov dword [ebp - 0x4d4], 0x145714ff
mov dword [ebp - 0x6c4], 0xffffffff
mov dword [ebp - 0x4c4], 0x62dc
mov dword [ebp - 0xba4], 0xaa4e88
cmp dword [ebp - 0x4c4], 0x6488
jle 0x468c11
and dword [ebp - 0x1d8], 0
jmp 0x468b4b
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 0x6894
jge 0x468c11
and dword [ebp - 0x258], 0
jmp 0x468b71
mov eax, dword [ebp - 0x258]
inc eax
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 0x2efb
jge 0x468c0c
and dword [ebp - 0x1e0], 0
jmp 0x468b97
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 0x7873
jge 0x468c07
and dword [ebp - 0x298], 0
jmp 0x468bb9
mov eax, dword [ebp - 0x298]
inc eax
mov dword [ebp - 0x298], eax
cmp dword [ebp - 0x298], 0x472f
jge 0x468c05
mov eax, dword [ebp - 0x1d8]
cdq
idiv dword [ebp - 0x258]
mov eax, dword [ebp - 0x1e0]
add eax, dword [ebp - 0x298]
and eax, edx
cdq
mov dword [ebp - 0xa90], eax
mov dword [ebp - 0xa8c], edx
push dword [ebp - 0xa8c]
push dword [ebp - 0xa90]
mov ecx, 0xab6b98
call fcn.0042c6d4
jmp 0x468bac
jmp 0x468b8a
jmp 0x468b64
jmp 0x468b3e
mov dword [ebp - 0xd54], 0xffffffff
mov dword [ebp - 0xd50], 0xffffffff
mov dword [ebp - 0xd4c], 0xffffffff
mov dword [ebp - 0xd48], 0xffffffff
mov dword [ebp - 4], 0x14
cmp dword [ebp - 0x4c4], 0x6142
jge 0x468c5c
mov edx, dword [ebp - 0xba4]
mov ecx, 0xab6b98
call fcn.0042ef5a
jmp 0x468c78
or dword [ebp - 4], 0xffffffff
jmp 0x468c82
push 0
push 0x6b90
push 0
push 0x6e6e
push 1
push 0x6ea5
lea eax, [ebp - 0x8a4]
push eax
lea eax, [ebp - 0xec8]
push eax
call fcn.0047e3e6
add esp, 0x20
mov eax, dword [ebp - 0x6bc]
mov dword [ebp - 0x1e8], eax
push 0
lea ecx, [ebp - 0x8a4]
call fcn.0042c9ea
push 0
lea ecx, [ebp - 0x8a4]
call fcn.0042c9ea
mov eax, dword [ebp - 0x1e8]
add eax, dword [ebp - 0x6bc]
je 0x468cff
push 0
lea ecx, [ebp - 0x8a4]
call fcn.0042c9ea
cmp dword [eax], 0
je 0x468cff
mov dword [ebp - 0x4cc], 1
jmp 0x468d06
and dword [ebp - 0x4cc], 0
push 0
lea ecx, [ebp - 0x8a4]
call fcn.0042c9ea
mov eax, dword [eax]
cmp eax, dword [ebp - 0x4cc]
jl 0x468d29
mov dword [ebp - 0x834], 1
jmp 0x468d30
and dword [ebp - 0x834], 0
mov eax, dword [ebp - 0x834]
mov dword [ebp - 0x1e8], eax
mov eax, dword [ebp - 0x1e8]
mov dword [ebp - 0x4d4], eax
mov esi, dword [ebp - 0x4d4]
push 0
lea ecx, [ebp - 0x8a4]
call fcn.0042c9ea
add esi, dword [eax]
mov dword [ebp - 0x6c4], esi
mov esi, dword [ebp - 0x6c4]
push 3
lea ecx, [ebp - 0xcec]
call fcn.0042c9ea
imul esi, dword [eax]
push 3
lea ecx, [ebp - 0xcec]
call fcn.0042c9ea
cmp esi, dword [eax]
jne 0x468d96
mov dword [ebp - 0x4dc], 1
jmp 0x468d9d
and dword [ebp - 0x4dc], 0
cmp dword [ebp - 0x4dc], 0x4b5e4957
jle 0x468db5
mov dword [ebp - 0x7bc], 1
jmp 0x468dbc
and dword [ebp - 0x7bc], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x7bc]
mov dword [ebp + eax - 0xd54], ecx
lea ecx, [ebp - 0xcec]
call fcn.0042c9ce
lea ecx, [ebp - 0x8a4]
call fcn.0042c9ce
cmp dword [ebp - 0x2c], 0
jne 0x468df6
mov dword [ebp - 0x51c], 1
jmp 0x468dfd
and dword [ebp - 0x51c], 0
cmp dword [ebp - 0x2c], 0
jne 0x468e0f
mov dword [ebp - 0x83c], 1
jmp 0x468e16
and dword [ebp - 0x83c], 0
mov dword [ebp - 0x9a0], 7
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], eax
jle 0x468e34
mov dword [ebp - 0x4e4], 1
jmp 0x468e3b
and dword [ebp - 0x4e4], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x4e4], eax
jl 0x468e52
mov dword [ebp - 0x6cc], 1
jmp 0x468e59
and dword [ebp - 0x6cc], 0
mov eax, dword [ebp - 0x6cc]
sub eax, 0x4d07
je 0x468e7b
cmp dword [ebp - 0x260], 0
je 0x468e7b
mov dword [ebp - 0x4ec], 1
jmp 0x468e82
and dword [ebp - 0x4ec], 0
mov eax, dword [ebp - 0x260]
cmp dword [ebp - 0x4ec], eax
jl 0x468e9c
mov dword [ebp - 0x87c], 1
jmp 0x468ea3
and dword [ebp - 0x87c], 0
cmp dword [ebp - 0x87c], 0x8fbf
jg 0x468ebb
mov dword [ebp - 0x4f4], 1
jmp 0x468ec2
and dword [ebp - 0x4f4], 0
mov eax, dword [ebp - 0x4f4]
mov dword [ebp - 0x6d4], eax
mov eax, dword [ebp - 0x6d4]
mov dword [ebp - 0x4fc], eax
cmp dword [ebp - 0x4fc], 0
je 0x468ef6
push 0xfffffffffffffffc
pop eax
test eax, eax
je 0x468ef6
mov dword [ebp - 0x7c4], 1
jmp 0x468efd
and dword [ebp - 0x7c4], 0
mov eax, dword [ebp - 0x260]
cmp dword [ebp - 0x7c4], eax
jl 0x468f17
mov dword [ebp - 0x504], 1
jmp 0x468f1e
and dword [ebp - 0x504], 0
mov eax, dword [ebp - 0x260]
imul eax, dword [ebp - 0x504]
cmp eax, 0xffff
ja 0x468f3e
mov dword [ebp - 0x6dc], 1
jmp 0x468f45
and dword [ebp - 0x6dc], 0
mov eax, dword [ebp - 0x6dc]
mov dword [ebp - 0x50c], eax
cmp dword [ebp - 0x50c], 0
je 0x468f5e
cmp dword [ebp - 0x2c], 0
mov eax, dword [ebp - 0x83c]
mov dword [ebp - 0x6e4], eax
mov dword [ebp - 0x514], 0x3829
mov eax, dword [ebp - 0x514]
cmp dword [ebp - 0x6e4], eax
je 0x468f8e
mov dword [ebp - 0x7cc], 1
jmp 0x468f95
and dword [ebp - 0x7cc], 0
mov eax, dword [ebp - 0x51c]
cmp eax, dword [ebp - 0x7cc]
jl 0x468faf
mov dword [ebp - 0x2fc], 1
jmp 0x468fb6
and dword [ebp - 0x2fc], 0
push 1
lea ecx, [ebp - 0xf28]
call fcn.0042c9ea
mov ecx, dword [ebp - 0x2fc]
mov dword [eax], ecx
mov eax, dword [ebp - 0x2c]
imul eax, dword [ebp - 0x2fc]
cmp eax, dword [ebp - 0x2c]
jle 0x468fec
cmp dword [ebp - 0x2c], 0
je 0x468fec
mov dword [ebp - 0x524], 1
jmp 0x468ff3
and dword [ebp - 0x524], 0
mov eax, dword [ebp - 0x524]
mov dword [ebp - 0xb14], eax
lea ecx, [ebp - 0xf28]
call fcn.0042c9ce
push 0x58d7
push 1
push 0
call fcn.0045764d
add esp, 0xc
mov eax, dword [ebp - 0x9a8]
mov eax, dword [eax + 0x38]
mov dword [ebp - 0x330], eax
push 0x4b1e
push 0x45bd
push 0x7fec
push 0
push 0x1dfa
push 1
call fcn.0045fb8e
add esp, 0x18
push 2
lea ecx, [ebp - 0xd10]
call fcn.0042c8fc
mov dword [ebp - 0xbe0], 7
push 0
lea eax, [ebp - 0xed0]
push eax
push 0x1c63
push 0x4f86
lea eax, [ebp - 0xd10]
push eax
push 0
call fcn.00455ed7
add esp, 0x18
lea eax, [ebp - 0xd10]
push eax
lea eax, [ebp - 0xbe0]
push eax
push 0
push 1
call fcn.0045850a
add esp, 0x10
lea ecx, [ebp - 0xd10]
call fcn.0042c9ce
mov dword [ebp - 0xec], 0x315362d
mov dword [ebp - 0x32c], 0x52a26f3f
mov dword [ebp - 0xfc], 0xffffffff
mov dword [ebp - 0x12c], 0xcf4a4163
push 4
lea ecx, [ebp - 0x878]
call fcn.0042c8fc
mov dword [ebp - 0x6ec], 0x7c5b
mov dword [ebp - 0x9b0], 0xaa4ed0
cmp dword [ebp - 0x6ec], 0x7ef9
jle 0x46920c
and dword [ebp - 0x268], 0
jmp 0x469119
mov eax, dword [ebp - 0x268]
inc eax
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 0x3d3e
jge 0x4691ff
and dword [ebp - 0x1f0], 0
jmp 0x46913f
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 0x3fdd
jge 0x4691fa
and dword [ebp - 0x2b8], 0
jmp 0x469165
mov eax, dword [ebp - 0x2b8]
inc eax
mov dword [ebp - 0x2b8], eax
cmp dword [ebp - 0x2b8], 0x42ef
jge 0x4691f5
and dword [ebp - 0x1f8], 0
jmp 0x46918b
mov eax, dword [ebp - 0x1f8]
inc eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 0x7316
jge 0x4691f0
mov eax, dword [ebp - 0x1f0]
sub eax, dword [ebp - 0x2b8]
sub eax, dword [ebp - 0x1f8]
xor eax, dword [ebp - 0x268]
cdq
mov dword [ebp - 0xa9c], eax
mov dword [ebp - 0xa98], edx
push dword [ebp - 0xa98]
push dword [ebp - 0xa9c]
lea ecx, [ebp - 0x1084]
call fcn.00401988
pop ecx
pop ecx
mov ecx, eax
call fcn.0042c6c9
push eax
call fcn.00493197
pop ecx
lea ecx, [ebp - 0x1084]
call fcn.0042c6bf
jmp 0x46917e
jmp 0x469158
jmp 0x469132
jmp 0x46910c
push 0
push 0x1a26
call dword [0xaba354]
mov dword [ebp - 0x11c], 0xffffffff
mov dword [ebp - 4], 0x16
cmp dword [ebp - 0x6ec], 0x7bfd
jge 0x469235
push dword [ebp - 0x9b0]
call fcn.00493197
pop ecx
jmp 0x469251
or dword [ebp - 4], 0xffffffff
jmp 0x46925b
mov dword [ebp - 0xe4], 0x2401dbda
mov dword [ebp - 0xed8], 0xffffffff
push 0x4a81
lea eax, [ebp - 0xee0]
push eax
push 0x4d20
push 0x218a
push 0x4ca7
push 0x72b1
push 1
push 1
push 0
lea eax, [ebp - 0x878]
push eax
push 0x3ac4
call fcn.00460b42
add esp, 0x2c
mov eax, dword [ebp - 0xec]
mov ecx, dword [ebp - 0xec]
inc ecx
mov dword [ebp - 0xec], ecx
test eax, eax
jne 0x4692ea
mov eax, dword [ebp - 0x11c]
dec eax
mov dword [ebp - 0x11c], eax
je 0x4692e1
push 3
lea ecx, [ebp - 0x878]
call fcn.0042c9ea
cmp dword [eax], 0
jne 0x4692ea
and dword [ebp - 0xb20], 0
jmp 0x4692f4
mov dword [ebp - 0xb20], 1
cmp dword [ebp - 0xe4], 0xf9db
jge 0x46930c
mov dword [ebp - 0x52c], 1
jmp 0x469313
and dword [ebp - 0x52c], 0
mov eax, dword [ebp - 0xfc]
add eax, dword [ebp - 0x52c]
cmp eax, 0xdf860956
je 0x469341
cmp dword [ebp - 0xe4], 0
jne 0x469341
cmp dword [ebp - 0x32c], 0
jne 0x469341
and dword [ebp - 0x898], 0
jmp 0x46934b
mov dword [ebp - 0x898], 1
push 3
lea ecx, [ebp - 0x878]
call fcn.0042c9ea
mov ecx, dword [ebp - 0x898]
cmp ecx, dword [eax]
jne 0x46936e
mov dword [ebp - 0x9b8], 1
jmp 0x469375
and dword [ebp - 0x9b8], 0
cmp dword [ebp - 0xe4], 0
jl 0x46938a
mov dword [ebp - 0x534], 1
jmp 0x469391
and dword [ebp - 0x534], 0
mov eax, dword [ebp - 0xfc]
cmp dword [ebp - 0x534], eax
je 0x4693ab
mov dword [ebp - 0x6f4], 1
jmp 0x4693b2
and dword [ebp - 0x6f4], 0
mov eax, dword [ebp - 0x32c]
imul eax, dword [ebp - 0x6f4]
test eax, eax
jne 0x4693d5
jmp 0x46d99e
push 1
push 0x2c4
call fcn.00455b4f
pop ecx
pop ecx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret