Function at 0x46833b
Capabilities:
Authenticate hmac
Contain obfuscated stackstrings
Encrypt data using speck

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4c7775
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x2b98
call fcn.004c3490
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 8]
test eax, eax
je 0x47c7e1
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x17f8], eax
lea eax, [ebp + 0xc]
mov dword [ebp - 0x16f4], eax
mov eax, dword [ebp - 0x16f4]
movzx eax, byte [eax]
test eax, eax
je 0x47c787
mov dword [ebp - 0x348], 0x91a049fe
mov dword [ebp - 0x1820], 0xf1a969ac
mov byte [ebp - 0x22d], 0
movzx eax, byte [ebp - 0x22d]
test eax, eax
je 0x4683c4
push 0x11d7
call dword [0xade0ac]
mov dword [ebp - 0x348], 0xffffffe6
jmp 0x4683dd
mov eax, dword [ebp - 0x348]
inc eax
mov dword [ebp - 0x348], eax
cmp dword [ebp - 0x348], 0x11
jl 0x46843a
mov dword [ebp - 0x1818], 0
mov dword [ebp - 0x1828], 0x5d870a32
lea eax, [ebp - 0x348]
push eax
lea eax, [ebp - 0x1818]
push eax
push 0x5c07
push 0x41b5
push 1
push 0
push 0x699a
lea eax, [ebp - 0x1820]
push eax
lea eax, [ebp - 0x1828]
push eax
push 0x378a
push 0
call fcn.0046555c
add esp, 0x2c
jmp 0x4683d0
push 0
push 0
call fcn.0046426e
pop ecx
pop ecx
mov dword [ebp - 0x180], 0x6923607a
mov dword [ebp - 0xc38], 0x7b6c
mov dword [ebp - 0x1830], 0xac5cf4
cmp dword [ebp - 0xc38], 0x7bb1
jle 0x468509
and dword [ebp - 0x3dc], 0
jmp 0x468489
mov eax, dword [ebp - 0x3dc]
inc eax
mov dword [ebp - 0x3dc], eax
cmp dword [ebp - 0x3dc], 0x23fd
jge 0x468509
and dword [ebp - 0x654], 0
jmp 0x4684ab
mov eax, dword [ebp - 0x654]
inc eax
mov dword [ebp - 0x654], eax
cmp dword [ebp - 0x654], 0x6451
jge 0x468504
mov eax, dword [ebp - 0x3dc]
and eax, dword [ebp - 0x654]
cdq
mov dword [ebp - 0x1864], eax
mov dword [ebp - 0x1860], edx
push dword [ebp - 0x1860]
push dword [ebp - 0x1864]
lea ecx, [ebp - 0x2ad0]
call fcn.00401988
pop ecx
pop ecx
mov ecx, eax
call fcn.004382f5
push eax
call fcn.004b1347
pop ecx
lea ecx, [ebp - 0x2ad0]
call fcn.004382eb
jmp 0x46849e
jmp 0x46847c
mov dword [ebp - 0xe8], 0xe3869393
and dword [ebp - 4], 0
cmp dword [ebp - 0xc38], 0x7788
jge 0x46852f
push dword [ebp - 0x1830]
call fcn.004b1347
pop ecx
jmp 0x46854b
or dword [ebp - 4], 0xffffffff
jmp 0x468555
mov dword [ebp - 0x1580], 0xffffffff
mov dword [ebp - 0x3e4], 0
jmp 0x468578
mov eax, dword [ebp - 0x3e4]
inc eax
mov dword [ebp - 0x3e4], eax
cmp dword [ebp - 0x3e4], 2
jge 0x468594
mov eax, dword [ebp - 0x3e4]
mov dword [ebp + eax*4 - 0x1620], 0xffffffff
jmp 0x46856b
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1620]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x1620], eax
mov eax, dword [ebp - 0x180]
cmp dword [ebp - 0x180], eax
jge 0x4685c9
mov dword [ebp - 0x1528], 1
jmp 0x4685d0
and dword [ebp - 0x1528], 0
mov eax, dword [ebp - 0x1528]
sub eax, 0xa
cmp eax, dword [ebp - 0x180]
jle 0x4685ed
mov dword [ebp - 0x1530], 1
jmp 0x4685f4
and dword [ebp - 0x1530], 0
mov eax, dword [ebp - 0xe8]
cmp dword [ebp - 0x180], eax
jg 0x46860e
mov dword [ebp - 0x1538], 1
jmp 0x468615
and dword [ebp - 0x1538], 0
mov eax, dword [ebp - 0x1530]
add eax, dword [ebp - 0x1538]
cmp eax, dword [ebp - 0xe8]
jl 0x468635
mov dword [ebp - 0x1540], 1
jmp 0x46863c
and dword [ebp - 0x1540], 0
mov eax, dword [ebp - 0x1540]
sub eax, dword [ebp - 0xe8]
je 0x468684
mov dword [ebp - 0xe8], 0
jmp 0x468663
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 2
jge 0x46867f
mov eax, dword [ebp - 0xe8]
mov dword [ebp + eax*4 - 0x1620], 1
jmp 0x468656
jmp 0x4687e5
mov dword [ebp - 0x904], 0xffffffff
mov dword [ebp - 0x1840], 0x69d1fe90
cmp dword [ebp - 0xe8], 1
jle 0x4686ad
mov dword [ebp - 0x1838], 1
jmp 0x4686b4
and dword [ebp - 0x1838], 0
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x23d4], eax
mov eax, 0xfff9
test eax, eax
ja 0x4686d5
mov dword [ebp - 0x1588], 1
jmp 0x4686dc
and dword [ebp - 0x1588], 0
mov dword [ebp - 0x1580], 1
mov eax, dword [ebp - 0x1580]
cmp eax, dword [ebp - 0x1588]
jl 0x468700
mov dword [ebp - 0x1590], 1
jmp 0x468707
and dword [ebp - 0x1590], 0
mov eax, dword [ebp - 0x904]
cmp eax, dword [ebp - 0x1590]
jne 0x468721
mov dword [ebp - 0x1598], 1
jmp 0x468728
and dword [ebp - 0x1598], 0
mov eax, dword [ebp - 0x1598]
sub eax, dword [ebp - 0x180]
cmp eax, dword [ebp - 0x180]
jg 0x468748
mov dword [ebp - 0x15bc], 1
jmp 0x46874f
and dword [ebp - 0x15bc], 0
cmp dword [ebp - 0x15bc], 0
jne 0x468764
mov dword [ebp - 0x15c4], 1
jmp 0x46876b
and dword [ebp - 0x15c4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1620]
add eax, dword [ebp - 0x15c4]
cmp eax, dword [ebp - 0x904]
jl 0x468792
mov dword [ebp - 0x15cc], 1
jmp 0x468799
and dword [ebp - 0x15cc], 0
cmp dword [ebp - 0x15cc], 0x6bd76df3
jg 0x4687b1
mov dword [ebp - 0x101c], 1
jmp 0x4687b8
and dword [ebp - 0x101c], 0
mov eax, dword [ebp - 0x904]
cmp dword [ebp - 0x101c], eax
jle 0x4687d2
mov dword [ebp - 0x1520], 1
jmp 0x4687d9
and dword [ebp - 0x1520], 0
mov eax, dword [ebp - 0x1520]
mov dword [ebp - 0x1840], eax
mov dword [ebp - 0x320], 0x91a049fe
mov dword [ebp - 0x16b4], 0xf1a969ac
mov dword [ebp - 0x13c], 0xfffffff6
mov dword [ebp - 0x794], 0
mov dword [ebp - 0x1544], 1
mov dword [ebp - 0x244], 0xab89bdd7
mov dword [ebp - 0x22f8], 5
mov dword [ebp - 0x2610], 0xfffffffe
mov dword [ebp - 0x1c48], 0x83a09977
mov dword [ebp - 0x2300], 0x1771b705
mov dword [ebp - 0xa6c], 6
mov dword [ebp - 0x3fc], 0x9a97a8d1
mov dword [ebp - 0x24a8], 0x96f77d90
mov dword [ebp - 0x2308], 0xfffffff9
mov dword [ebp - 0x2634], 0xde2fd17b
mov dword [ebp - 0x664], 5
mov dword [ebp - 0x2310], 0x3dcdcbd5
mov dword [ebp - 0x1034], 1
mov dword [ebp - 0x1c38], 0xfffb
mov dword [ebp - 0xa3c], 0x4f74
mov dword [ebp - 0x1848], 0xac5d24
cmp dword [ebp - 0xa3c], 0x525a
jle 0x468948
and dword [ebp - 0x660], 0
jmp 0x4688dd
mov eax, dword [ebp - 0x660]
inc eax
mov dword [ebp - 0x660], eax
cmp dword [ebp - 0x660], 0x2cb3
jge 0x46893e
and dword [ebp - 0x3ec], 0
jmp 0x4688ff
mov eax, dword [ebp - 0x3ec]
inc eax
mov dword [ebp - 0x3ec], eax
cmp dword [ebp - 0x3ec], 0x115e
jge 0x46893c
mov eax, dword [ebp - 0x660]
sub eax, dword [ebp - 0x3ec]
cdq
mov dword [ebp - 0x1870], eax
mov dword [ebp - 0x186c], edx
push dword [ebp - 0x186c]
push dword [ebp - 0x1870]
mov ecx, 0xadaa58
call fcn.00438300
jmp 0x4688f2
jmp 0x4688d0
push 0
push 0
call dword [0xade008]
mov dword [ebp - 0x874], 0
jmp 0x468961
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
cmp dword [ebp - 0x874], 1
jge 0x46897d
mov eax, dword [ebp - 0x874]
mov dword [ebp + eax*4 - 0x1c50], 0xfffffffc
jmp 0x468954
mov dword [ebp - 4], 2
cmp dword [ebp - 0xa3c], 0x4d47
jge 0x4689a0
mov edx, dword [ebp - 0x1848]
mov ecx, 0xadaa58
call fcn.0043ab89
jmp 0x4689bc
or dword [ebp - 4], 0xffffffff
jmp 0x4689c6
cmp dword [ebp - 0x13c], 0
je 0x4689e7
cmp dword [ebp - 0x244], 0xb16
jle 0x4689e7
mov dword [ebp - 0xa44], 1
jmp 0x4689ee
and dword [ebp - 0xa44], 0
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x794], eax
mov eax, dword [ebp - 0x794]
mov dword [ebp - 0x1544], eax
mov eax, dword [ebp - 0x1544]
cmp eax, dword [ebp - 0xa44]
jle 0x468a20
mov dword [ebp - 0x1024], 1
jmp 0x468a27
and dword [ebp - 0x1024], 0
mov eax, dword [ebp - 0x13c]
add eax, dword [ebp - 0x1024]
jne 0x468a47
mov eax, 0x928d
test eax, eax
jne 0x468a47
and dword [ebp - 0xa4c], 0
jmp 0x468a51
mov dword [ebp - 0xa4c], 1
mov eax, dword [ebp - 0x244]
cmp dword [ebp - 0xa4c], eax
jne 0x468a6b
mov dword [ebp - 0x1314], 1
jmp 0x468a72
and dword [ebp - 0x1314], 0
cmp dword [ebp - 0x1314], 0xa412
jne 0x468a8a
mov dword [ebp - 0xa54], 1
jmp 0x468a91
and dword [ebp - 0xa54], 0
mov eax, dword [ebp - 0x244]
cmp dword [ebp - 0xa54], eax
jge 0x468abd
cmp dword [ebp - 0x13c], 0
je 0x468abd
cmp dword [ebp - 0x13c], 0
je 0x468abd
mov dword [ebp - 0x102c], 1
jmp 0x468ac4
and dword [ebp - 0x102c], 0
mov eax, dword [ebp - 0x102c]
sub eax, 0x1c77
cmp eax, 0xffff
ja 0x468ae2
mov dword [ebp - 0xa5c], 1
jmp 0x468ae9
and dword [ebp - 0xa5c], 0
mov eax, dword [ebp - 0x13c]
add eax, dword [ebp - 0xa5c]
cmp eax, 1
je 0x468b06
mov dword [ebp - 0x148c], 1
jmp 0x468b0d
and dword [ebp - 0x148c], 0
mov eax, dword [ebp - 0x244]
cmp dword [ebp - 0x148c], eax
jge 0x468b27
mov dword [ebp - 0xa64], 1
jmp 0x468b2e
and dword [ebp - 0xa64], 0
mov eax, dword [ebp - 0x13c]
cmp dword [ebp - 0xa64], eax
jle 0x468b48
mov dword [ebp - 0x1850], 1
jmp 0x468b4f
and dword [ebp - 0x1850], 0
mov eax, dword [ebp - 0x244]
mov dword [ebp - 0x24b0], eax
push 0xfffffffffffffff7
pop eax
cmp eax, 0x23637b30
jne 0x468b71
mov dword [ebp - 0x1858], 1
jmp 0x468b78
and dword [ebp - 0x1858], 0
mov eax, dword [ebp - 0x244]
add eax, dword [ebp - 0x13c]
je 0x468ca4
mov dword [ebp - 0x2318], 1
mov dword [ebp - 0x2620], 0x6d065835
mov dword [ebp - 0x2320], 0xffffffff
mov dword [ebp - 0x1f58], 0x40c8e82
mov dword [ebp - 0x1f54], 0x40c8e82
mov dword [ebp - 0x1f50], 0x40c8e82
mov dword [ebp - 0x1f4c], 0x40c8e82
lea ecx, [ebp - 0x9bd]
call fcn.00438628
push eax
lea eax, [ebp - 0x1f48]
push eax
lea eax, [ebp - 0x1f58]
push eax
lea ecx, [ebp - 0x278c]
call fcn.0043862b
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x2708]
call fcn.004385d7
mov dword [ebp - 0x24b8], 0xd02c9aa6
mov dword [ebp - 0x2328], 0xffffffff
mov dword [ebp - 0x263c], 0xf771
mov dword [ebp - 0x2330], 0x4c67
mov dword [ebp - 0x3f4], 0
jmp 0x468c46
mov eax, dword [ebp - 0x3f4]
inc eax
mov dword [ebp - 0x3f4], eax
cmp dword [ebp - 0x3f4], 2
jge 0x468c62
mov eax, dword [ebp - 0x3f4]
mov dword [ebp + eax*4 - 0x27a4], 0xfffffff8
jmp 0x468c39
mov eax, dword [ebp - 0x1034]
inc eax
mov dword [ebp - 0x1034], eax
mov byte [ebp - 0x1b1], 0
movzx eax, byte [ebp - 0x1b1]
test eax, eax
je 0x468c97
push 0
push 0x1a47
push 0x3d1
push 1
call fcn.00467226
add esp, 0x10
lea ecx, [ebp - 0x2708]
call fcn.004385fd
jmp 0x468cba
mov dword [ebp - 0x1c40], 1
mov eax, dword [ebp - 0x1c38]
mov dword [ebp - 0x1c40], eax
mov dword [ebp - 0x664], 0xc
jmp 0x468cd3
mov eax, dword [ebp - 0x664]
dec eax
mov dword [ebp - 0x664], eax
cmp dword [ebp - 0x664], 0xffffffe7
jl 0x468eef
mov dword [ebp - 0x9f4], 0xf543
mov dword [ebp - 0x404], 0xffffffff
mov eax, dword [ebp - 0x9f4]
mov dword [ebp - 0x404], eax
mov dword [ebp - 0x3fc], 0x1b
jmp 0x468d19
mov eax, dword [ebp - 0x3fc]
dec eax
mov dword [ebp - 0x3fc], eax
cmp dword [ebp - 0x3fc], 9
jg 0x468eea
mov dword [ebp - 0x298], 0xffff
mov dword [ebp - 0x1c58], 0x1463d90b
cmp dword [ebp - 0x298], 0
jne 0x468d6d
mov eax, dword [ebp - 0x404]
mov dword [ebp - 0x794], eax
mov eax, dword [ebp - 0x794]
mov dword [ebp - 0xa6c], eax
cmp dword [ebp - 0xa6c], 0
jne 0x468d6d
and dword [ebp - 0x131c], 0
jmp 0x468d77
mov dword [ebp - 0x131c], 1
mov eax, dword [ebp - 0x131c]
mov dword [ebp - 0x1c48], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1c50], 0xfffffff6
jge 0x468d9f
mov dword [ebp - 0xa74], 1
jmp 0x468da6
and dword [ebp - 0xa74], 0
mov eax, dword [ebp - 0x404]
cmp dword [ebp - 0xa74], eax
jle 0x468dc0
mov dword [ebp - 0x103c], 1
jmp 0x468dc7
and dword [ebp - 0x103c], 0
cmp dword [ebp - 0x103c], 0x14d5
jle 0x468ddf
mov dword [ebp - 0xa7c], 1
jmp 0x468de6
and dword [ebp - 0xa7c], 0
mov eax, dword [ebp - 0x298]
cmp dword [ebp - 0xa7c], eax
jge 0x468e00
mov dword [ebp - 0x1568], 1
jmp 0x468e07
and dword [ebp - 0x1568], 0
cmp dword [ebp - 0x1568], 1
jne 0x468e1c
mov dword [ebp - 0xa84], 1
jmp 0x468e23
and dword [ebp - 0xa84], 0
mov eax, dword [ebp - 0x298]
cmp dword [ebp - 0xa84], eax
jl 0x468e3d
mov dword [ebp - 0x1044], 1
jmp 0x468e44
and dword [ebp - 0x1044], 0
cmp dword [ebp - 0x1044], 0x4dcb
jl 0x468e5c
mov dword [ebp - 0xa8c], 1
jmp 0x468e63
and dword [ebp - 0xa8c], 0
mov eax, dword [ebp - 0x9f4]
cmp dword [ebp - 0xa8c], eax
jg 0x468e83
cmp dword [ebp - 0x298], 0
jne 0x468e83
and dword [ebp - 0x1324], 0
jmp 0x468e8d
mov dword [ebp - 0x1324], 1
mov eax, dword [ebp - 0x1324]
mov dword [ebp - 0x1c58], eax
cmp dword [ebp - 0x9f4], 0xb87b
je 0x468eb1
mov dword [ebp - 0xa94], 1
jmp 0x468eb8
and dword [ebp - 0xa94], 0
mov eax, dword [ebp - 0x298]
cmp eax, dword [ebp - 0xa94]
jge 0x468ed2
mov dword [ebp - 0x104c], 1
jmp 0x468ed9
and dword [ebp - 0x104c], 0
mov eax, dword [ebp - 0x104c]
mov dword [ebp - 0x404], eax
jmp 0x468d0c
jmp 0x468cc6
mov dword [ebp - 0x48], 0xf2ee
mov dword [ebp - 0x4c], 0x7e780ca9
mov dword [ebp - 0x80], 0xb7c7
push 4
lea ecx, [ebp - 0x1df8]
call fcn.0043852b
mov dword [ebp - 0x1c60], 0x6802
mov dword [ebp - 0x66c], 0
jmp 0x468f34
mov eax, dword [ebp - 0x66c]
inc eax
mov dword [ebp - 0x66c], eax
cmp dword [ebp - 0x66c], 4
jge 0x468f56
push dword [ebp - 0x66c]
lea ecx, [ebp - 0x1df8]
call fcn.00438619
mov dword [eax], 3
jmp 0x468f27
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x24c0], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x2338], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x2644], eax
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x48], eax
je 0x468f85
mov dword [ebp - 0xa9c], 1
jmp 0x468f8c
and dword [ebp - 0xa9c], 0
mov eax, dword [ebp - 0xa9c]
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0xe9e84363
je 0x468faa
mov dword [ebp - 0x1494], 1
jmp 0x468fb1
and dword [ebp - 0x1494], 0
mov eax, dword [ebp - 0x1494]
sub eax, dword [ebp - 0x48]
cmp dword [ebp - 0x48], eax
jle 0x468fcb
mov dword [ebp - 0xaa4], 1
jmp 0x468fd2
and dword [ebp - 0xaa4], 0
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0xaa4], eax
jl 0x468fe9
mov dword [ebp - 0x1054], 1
jmp 0x468ff0
and dword [ebp - 0x1054], 0
cmp dword [ebp - 0x1054], 0xfadf6285
jbe 0x469008
mov dword [ebp - 0xaac], 1
jmp 0x46900f
and dword [ebp - 0xaac], 0
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0xaac], eax
jg 0x469026
mov dword [ebp - 0x132c], 1
jmp 0x46902d
and dword [ebp - 0x132c], 0
mov eax, dword [ebp - 0x132c]
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0
je 0x4691b9
mov dword [ebp - 0x90c], 1
mov dword [ebp - 0x4c], 0
jmp 0x46905a
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 3
jg 0x4691b4
mov dword [ebp - 0x40c], 0xfffffff7
cmp dword [ebp - 0x90c], 1
jl 0x469083
mov dword [ebp - 0xab4], 1
jmp 0x46908a
and dword [ebp - 0xab4], 0
cmp dword [ebp - 0xab4], 0
jne 0x46909f
mov dword [ebp - 0x105c], 1
jmp 0x4690a6
and dword [ebp - 0x105c], 0
mov eax, dword [ebp - 0x90c]
cmp dword [ebp - 0x105c], eax
je 0x4690c0
mov dword [ebp - 0xabc], 1
jmp 0x4690c7
and dword [ebp - 0xabc], 0
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0xabc], eax
jne 0x4690de
mov dword [ebp - 0x1550], 1
jmp 0x4690e5
and dword [ebp - 0x1550], 0
mov eax, dword [ebp - 0x40c]
cmp dword [ebp - 0x1550], eax
jg 0x4690ff
mov dword [ebp - 0xac4], 1
jmp 0x469106
and dword [ebp - 0xac4], 0
mov eax, dword [ebp - 0x90c]
mov eax, dword [ebp - 0x40c]
cmp dword [ebp - 0x80], eax
jg 0x469123
mov dword [ebp - 0x1064], 1
jmp 0x46912a
and dword [ebp - 0x1064], 0
imul eax, dword [ebp - 0x1064], 0xfffffffa
cmp eax, dword [ebp - 0x4c]
jle 0x469142
mov dword [ebp - 0xacc], 1
jmp 0x469149
and dword [ebp - 0xacc], 0
mov eax, dword [ebp - 0x4c]
add eax, dword [ebp - 0xacc]
neg eax
cmp dword [ebp - 0x40c], eax
jg 0x469169
cmp dword [ebp - 0x40c], 0
je 0x469167
jmp 0x4691b4
jmp 0x469183
mov byte [ebp - 0x22f], 0
push 0
lea eax, [ebp - 0x22f]
push eax
push 0
call fcn.00467532
add esp, 0xc
mov dword [ebp - 0x80], 0
jmp 0x469193
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 4
jge 0x4691af
push dword [ebp - 0x80]
lea ecx, [ebp - 0x1df8]
call fcn.00438619
mov dword [eax], 0x56fe
jmp 0x46918c
jmp 0x469053
jmp 0x4692df
push 3
lea ecx, [ebp - 0x2074]
call fcn.0043852b
mov dword [ebp - 0x1c70], 0xd55faf23
mov dword [ebp - 0x1c68], 0x9b34
push 0x38d0
push 1
push 0
lea eax, [ebp - 0x2340]
push eax
lea eax, [ebp - 0x2074]
push eax
push 0x1d2d
push 0x3ac3
call fcn.0045f2a2
add esp, 0x1c
mov dword [ebp - 0x48], 0x10
jmp 0x469213
mov eax, dword [ebp - 0x48]
dec eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0xffffffee
jne 0x469285
mov dword [ebp - 0x4c], 3
jmp 0x469229
mov eax, dword [ebp - 0x4c]
dec eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jl 0x469283
mov byte [ebp - 0x1b9], 0
movzx eax, byte [ebp - 0x1b9]
test eax, eax
je 0x469281
push 1
push 0x1ee4
push 0x5fe6
push 0x87a
push 0x41b3
push 0x792
push 0
push 0x7f19
push 0x7dfe
push 1
push 0x6e65
push 0x4458
push 0x2cd3
call fcn.0045a928
add esp, 0x34
jmp 0x469222
jmp 0x46920c
lea eax, [ebp - 0x80]
push eax
push 1
lea eax, [ebp - 0x1c60]
push eax
lea eax, [ebp - 0x1df8]
push eax
push 0
lea eax, [ebp - 0x2074]
push eax
push 0x31dd
push 0x6a07
lea eax, [ebp - 0x1c68]
push eax
push 0x2173
lea eax, [ebp - 0x48]
push eax
push 0x76b0
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x1c70]
push eax
call fcn.00462b32
add esp, 0x38
lea ecx, [ebp - 0x2074]
call fcn.004385fd
push 1
lea eax, [ebp - 0x4c]
push eax
push 0
push 0x306e
call fcn.0046023e
add esp, 0x10
lea ecx, [ebp - 0x1df8]
call fcn.004385fd
mov byte [ebp - 0x231], 0
mov dword [ebp - 0x288], 0x399841b3
mov dword [ebp - 0x98c], 0
mov dword [ebp - 0x394], 8
mov dword [ebp - 0x1c90], 0x12bad479
push 3
lea ecx, [ebp - 0x1eb8]
call fcn.0043852b
mov dword [ebp - 0x107c], 0x227283a3
mov dword [ebp - 0x1084], 0x51abe719
mov dword [ebp - 0xac], 0
jmp 0x469368
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 3
jge 0x469384
mov eax, dword [ebp - 0xac]
mov dword [ebp + eax*4 - 0x1d38], 0x9ed02e88
jmp 0x46935b
mov dword [ebp - 0xac], 0
jmp 0x46939d
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 3
jge 0x4693bf
push dword [ebp - 0xac]
lea ecx, [ebp - 0x1eb8]
call fcn.00438619
mov dword [eax], 0x411e69d0
jmp 0x469390
mov dword [ebp - 0x288], 0xffffffec
jmp 0x4693d8
mov eax, dword [ebp - 0x288]
inc eax
mov dword [ebp - 0x288], eax
cmp dword [ebp - 0x288], 0xb
jle 0x4698eb
mov dword [ebp - 0x12c], 0x57102d14
mov dword [ebp - 0x41c], 0x3cc47d1a
mov dword [ebp - 0x12c], 0
jmp 0x469412
mov eax, dword [ebp - 0x12c]
dec eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0xffffffed
jne 0x4698e6
mov dword [ebp - 0xb1c], 0xd5a5
mov dword [ebp - 0x1c80], 0x79b69b2e
mov dword [ebp - 0x108c], 0x17473468
mov dword [ebp - 0xad4], 0x829ed890
mov dword [ebp - 0xb14], 0xffff
mov dword [ebp - 0xafc], 0xd24
mov dword [ebp - 0x1c98], 0xac5d7c
cmp dword [ebp - 0xafc], 0xd60
jle 0x469548
push 0x11bc
call dword [0xade3c4]
and dword [ebp - 0x82c], 0
jmp 0x469496
mov eax, dword [ebp - 0x82c]
inc eax
mov dword [ebp - 0x82c], eax
cmp dword [ebp - 0x82c], 0x6f14
jge 0x469548
and dword [ebp - 0x414], 0
jmp 0x4694bc
mov eax, dword [ebp - 0x414]
inc eax
mov dword [ebp - 0x414], eax
cmp dword [ebp - 0x414], 0x5a53
jge 0x469543
and dword [ebp - 0x674], 0
jmp 0x4694de
mov eax, dword [ebp - 0x674]
inc eax
mov dword [ebp - 0x674], eax
cmp dword [ebp - 0x674], 0x72a8
jge 0x46953e
mov eax, dword [ebp - 0x82c]
imul eax, dword [ebp - 0x414]
and eax, dword [ebp - 0x674]
cdq
mov dword [ebp - 0x187c], eax
mov dword [ebp - 0x1878], edx
push dword [ebp - 0x1878]
push dword [ebp - 0x187c]
lea ecx, [ebp - 0x2884]
call fcn.00401988
pop ecx
pop ecx
mov ecx, eax
call fcn.004382f5
push eax
call fcn.004b1347
pop ecx
lea ecx, [ebp - 0x2884]
call fcn.004382eb
jmp 0x4694d1
jmp 0x4694af
jmp 0x469489
mov eax, dword [ebp - 0x394]
dec eax
mov dword [ebp - 0x394], eax
mov eax, dword [ebp - 0x98c]
cmp dword [ebp - 0x394], eax
je 0x46956f
mov dword [ebp - 0xaec], 1
jmp 0x469576
and dword [ebp - 0xaec], 0
mov eax, dword [ebp - 0x288]
mov dword [ebp - 0x1334], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1334]
mov dword [ebp + eax - 0x1d38], ecx
cmp dword [ebp - 0x1334], 0
jne 0x46966c
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1d38], 0
jne 0x46966c
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1d38]
mov dword [ebp - 0xad4], eax
cmp dword [ebp - 0xad4], 0
jne 0x4695e4
mov eax, 0xfff9
test eax, eax
jne 0x4695e4
and dword [ebp - 0x106c], 0
jmp 0x4695ee
mov dword [ebp - 0x106c], 1
mov eax, dword [ebp - 0x288]
cmp dword [ebp - 0x106c], eax
jle 0x469608
mov dword [ebp - 0xadc], 1
jmp 0x46960f
and dword [ebp - 0xadc], 0
cmp dword [ebp - 0xadc], 0xffffffff
jae 0x469624
mov dword [ebp - 0x149c], 1
jmp 0x46962b
and dword [ebp - 0x149c], 0
mov eax, dword [ebp - 0x149c]
add eax, 0xdedc87a9
mov dword [ebp - 0xae4], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xae4]
mov dword [ebp + eax - 0x1d38], ecx
mov eax, dword [ebp - 0x41c]
cmp dword [ebp - 0xae4], eax
je 0x46966c
push 3
pop eax
test eax, eax
jne 0x46966c
and dword [ebp - 0x1074], 0
jmp 0x469676
mov dword [ebp - 0x1074], 1
mov eax, dword [ebp - 0x12c]
cmp dword [ebp - 0x1074], eax
jne 0x469690
mov dword [ebp - 0x1c78], 1
jmp 0x469697
and dword [ebp - 0x1c78], 0
mov eax, dword [ebp - 0xaec]
mov dword [ebp - 0x98c], eax
mov eax, dword [ebp - 0x98c]
mov dword [ebp - 0x24c8], eax
cmp dword [ebp - 0x1c80], 0xb38b4b72
ja 0x4696c7
mov dword [ebp - 0x133c], 1
jmp 0x4696ce
and dword [ebp - 0x133c], 0
mov eax, dword [ebp - 0x12c]
cmp dword [ebp - 0x133c], eax
jl 0x4696e8
mov dword [ebp - 0xaf4], 1
jmp 0x4696ef
and dword [ebp - 0xaf4], 0
cmp dword [ebp - 0xaf4], 0
jne 0x46970a
cmp dword [ebp - 0x394], 0
jne 0x46970a
and dword [ebp - 0x1c88], 0
jmp 0x469714
mov dword [ebp - 0x1c88], 1
mov eax, dword [ebp - 0x1c90]
mov dword [ebp - 0x2348], eax
cmp dword [ebp - 0x41c], 0
jne 0x469741
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1d38], 0
jne 0x469741
and dword [ebp - 0x914], 0
jmp 0x46974b
mov dword [ebp - 0x914], 1
push 0
lea ecx, [ebp - 0x1eb8]
call fcn.00438619
mov ecx, dword [ebp - 0x914]
mov dword [eax], ecx
mov eax, dword [ebp - 0x914]
mov dword [ebp - 0x107c], eax
mov eax, dword [ebp - 0x107c]
mov dword [ebp - 0x1084], eax
mov dword [ebp - 4], 4
cmp dword [ebp - 0xafc], 0xc70
jge 0x469797
push dword [ebp - 0x1c98]
call fcn.004b1347
pop ecx
jmp 0x4697b3
or dword [ebp - 4], 0xffffffff
jmp 0x4697bd
cmp dword [ebp - 0x12c], 0
jne 0x4698c4
push 1
lea ecx, [ebp - 0x1eb8]
call fcn.00438619
mov ecx, dword [ebp - 0x12c]
cmp dword [eax], ecx
jl 0x4697ed
mov dword [ebp - 0x1570], 1
jmp 0x4697f4
and dword [ebp - 0x1570], 0
mov eax, dword [ebp - 0xb14]
cmp dword [ebp - 0x1570], eax
jle 0x46980e
mov dword [ebp - 0xb04], 1
jmp 0x469815
and dword [ebp - 0xb04], 0
imul eax, dword [ebp - 0xb04], 0x56e
test eax, eax
jne 0x469835
cmp dword [ebp - 0x1084], 0
jne 0x469835
and dword [ebp - 0xb0c], 0
jmp 0x46983f
mov dword [ebp - 0xb0c], 1
mov eax, dword [ebp - 0xb0c]
neg eax
cmp eax, 0x9cc53a0d
jbe 0x46985a
mov dword [ebp - 0x1344], 1
jmp 0x469861
and dword [ebp - 0x1344], 0
mov eax, dword [ebp - 0x41c]
cmp eax, dword [ebp - 0x1344]
jl 0x46987b
mov dword [ebp - 0x1ca0], 1
jmp 0x469882
and dword [ebp - 0x1ca0], 0
mov eax, dword [ebp - 0xb14]
mov dword [ebp - 0x108c], eax
mov eax, dword [ebp - 0x108c]
mov dword [ebp - 0x26a0], eax
mov eax, dword [ebp - 0xb1c]
mov dword [ebp - 0x2350], eax
xor eax, eax
inc eax
je 0x4698b2
cmp dword [ebp - 0x12c], 0
cmp dword [ebp - 0xb1c], 0
jne 0x4698c4
and dword [ebp - 0x14a4], 0
jmp 0x4698ce
mov dword [ebp - 0x14a4], 1
mov eax, dword [ebp - 0x394]
imul eax, dword [ebp - 0x14a4]
mov dword [ebp - 0x41c], eax
jmp 0x469405
jmp 0x4693cb
lea ecx, [ebp - 0x1eb8]
call fcn.004385fd
movzx eax, byte [ebp - 0x231]
test eax, eax
je 0x469b48
mov dword [ebp - 0x24d0], 0xaa84cbed
mov dword [ebp - 0x2358], 0
mov dword [ebp - 0xb24], 0xffffffff
mov dword [ebp - 0xb2c], 0x6cd04cd0
mov dword [ebp - 0x1d08], 0xfe57b6a6
mov dword [ebp - 0x79c], 0
jmp 0x469950
mov eax, dword [ebp - 0x79c]
inc eax
mov dword [ebp - 0x79c], eax
cmp dword [ebp - 0x79c], 3
jge 0x46996c
mov eax, dword [ebp - 0x79c]
mov dword [ebp + eax*4 - 0xa08], 0
jmp 0x469943
mov eax, 0x8d40
test eax, eax
je 0x469983
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xa08], 0
mov dword [ebp - 0xb24], 0x20859496
cmp dword [ebp - 0xb24], 0x82ba
jg 0x4699a5
mov dword [ebp - 0x1094], 1
jmp 0x4699ac
and dword [ebp - 0x1094], 0
mov eax, dword [ebp - 0x1094]
add eax, 0x7d2a7e9f
mov dword [ebp - 0xb2c], eax
jne 0x4699cf
push 2
pop eax
test eax, eax
jne 0x4699cf
and dword [ebp - 0x134c], 0
jmp 0x4699d9
mov dword [ebp - 0x134c], 1
mov eax, dword [ebp - 0x134c]
neg eax
add eax, 3
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0xa08]
jge 0x4699ff
mov dword [ebp - 0xb34], 1
jmp 0x469a06
and dword [ebp - 0xb34], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa08]
add eax, dword [ebp - 0xb34]
push 4
pop ecx
shl ecx, 0
sub eax, dword [ebp + ecx - 0xa08]
cmp eax, 0x218f0ed6
je 0x469a39
mov dword [ebp - 0x109c], 1
jmp 0x469a40
and dword [ebp - 0x109c], 0
cmp dword [ebp - 0x109c], 7
jge 0x469a55
mov dword [ebp - 0xb3c], 1
jmp 0x469a5c
and dword [ebp - 0xb3c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa08]
cmp dword [ebp - 0xb3c], eax
jl 0x469a7d
mov dword [ebp - 0x1578], 1
jmp 0x469a84
and dword [ebp - 0x1578], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa08]
add eax, dword [ebp - 0x1578]
push 4
pop ecx
shl ecx, 0
sub eax, dword [ebp + ecx - 0xa08]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0xa08]
jl 0x469abf
mov dword [ebp - 0xb44], 1
jmp 0x469ac6
and dword [ebp - 0xb44], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa08]
cmp dword [ebp - 0xb44], eax
jl 0x469ae7
mov dword [ebp - 0x10a4], 1
jmp 0x469aee
and dword [ebp - 0x10a4], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xa08]
cmp dword [ebp - 0x10a4], eax
je 0x469b0e
mov dword [ebp - 0xb4c], 1
jmp 0x469b15
and dword [ebp - 0xb4c], 0
cmp dword [ebp - 0xb4c], 0xfffffffb
jl 0x469b2a
mov dword [ebp - 0x1354], 1
jmp 0x469b31
and dword [ebp - 0x1354], 0
mov eax, dword [ebp - 0x1354]
mov dword [ebp - 0x1d08], eax
push 0x11d7
call dword [0xade0ac]
push 3
lea ecx, [ebp - 0x15dc]
call fcn.0043852b
push 2
lea ecx, [ebp - 0x160c]
call fcn.0043852b
mov dword [ebp - 0x10bc], 1
mov dword [ebp - 0xb7c], 0x6b43d271
mov dword [ebp - 0xb54], 0x1e3d
mov dword [ebp - 0x1d10], 0xac5dd8
cmp dword [ebp - 0xb54], 0x2201
jle 0x469c73
and dword [ebp - 0x42c], 0
jmp 0x469bb0
mov eax, dword [ebp - 0x42c]
inc eax
mov dword [ebp - 0x42c], eax
cmp dword [ebp - 0x42c], 0x56cc
jge 0x469c73
and dword [ebp - 0x424], 0
jmp 0x469bd6
mov eax, dword [ebp - 0x424]
inc eax
mov dword [ebp - 0x424], eax
cmp dword [ebp - 0x424], 0x1bb5
jge 0x469c6e
and dword [ebp - 0x67c], 0
jmp 0x469bfc
mov eax, dword [ebp - 0x67c]
inc eax
mov dword [ebp - 0x67c], eax
cmp dword [ebp - 0x67c], 0x48b
jge 0x469c69
and dword [ebp - 0x89c], 0
jmp 0x469c1e
mov eax, dword [ebp - 0x89c]
inc eax
mov dword [ebp - 0x89c], eax
cmp dword [ebp - 0x89c], 0x2c6
jge 0x469c67
mov eax, dword [ebp - 0x424]
and eax, dword [ebp - 0x67c]
xor eax, dword [ebp - 0x42c]
or eax, dword [ebp - 0x89c]
cdq
mov dword [ebp - 0x1888], eax
mov dword [ebp - 0x1884], edx
push dword [ebp - 0x1884]
push dword [ebp - 0x1888]
mov ecx, 0xadaa58
call fcn.00438300
jmp 0x469c11
jmp 0x469bef
jmp 0x469bc9
jmp 0x469ba3
mov dword [ebp - 0x1d20], 0xfffffffc
mov dword [ebp - 4], 6
cmp dword [ebp - 0xb54], 0x1a6a
jge 0x469ca0
mov edx, dword [ebp - 0x1d10]
mov ecx, 0xadaa58
call fcn.0043ab89
jmp 0x469cbc
or dword [ebp - 4], 0xffffffff
jmp 0x469cc6
push 0x728f
push 0x3bd5
lea eax, [ebp - 0x1d18]
push eax
push 0
push 1
push 1
push 0x7fe8
push 0x7238
lea eax, [ebp - 0x15dc]
push eax
push 0x3e4b
call fcn.0045da8c
add esp, 0x28
lea eax, [ebp - 0x1d18]
push eax
push 0
push 0x5f79
push 0
push 0x2e3b
push 1
push 0x709
lea eax, [ebp - 0x160c]
push eax
push 0x53fc
call fcn.0045b471
add esp, 0x24
mov dword [ebp - 0x155c], 0x3bb1
mov dword [ebp - 0x1ae4], 0xac5e08
cmp dword [ebp - 0x155c], 0x3f2a
jle 0x469de7
and dword [ebp - 0x434], 0
jmp 0x469d65
mov eax, dword [ebp - 0x434]
inc eax
mov dword [ebp - 0x434], eax
cmp dword [ebp - 0x434], 0x63b
jge 0x469de7
and dword [ebp - 0x684], 0
jmp 0x469d87
mov eax, dword [ebp - 0x684]
inc eax
mov dword [ebp - 0x684], eax
cmp dword [ebp - 0x684], 0x587c
jge 0x469de2
mov eax, dword [ebp - 0x434]
mov ecx, dword [ebp - 0x684]
sar eax, cl
cdq
mov dword [ebp - 0x1894], eax
mov dword [ebp - 0x1890], edx
push dword [ebp - 0x1890]
push dword [ebp - 0x1894]
lea ecx, [ebp - 0x2a40]
call fcn.00401988
pop ecx
pop ecx
mov ecx, eax
call fcn.004382f5
push eax
call fcn.004b1347
pop ecx
lea ecx, [ebp - 0x2a40]
call fcn.004382eb
jmp 0x469d7a
jmp 0x469d58
push 1
lea ecx, [ebp - 0x15dc]
call fcn.00438619
push 1
lea ecx, [ebp - 0x15dc]
call fcn.00438619
push 1
lea ecx, [ebp - 0x15dc]
call fcn.00438619
push 1
lea ecx, [ebp - 0x160c]
call fcn.00438619
mov dword [ebp - 0x10ac], eax
push 0
lea ecx, [ebp - 0x15dc]
call fcn.00438619
mov ecx, dword [ebp - 0x10ac]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x10ac]
cmp dword [eax], 0
je 0x46a06f
mov dword [ebp - 0x43c], 1
mov dword [ebp - 0x1f94], 0xefa1e1c5
mov dword [ebp - 0x1f90], 0xefa1e1c5
mov dword [ebp - 0x1f8c], 0xefa1e1c5
mov dword [ebp - 0x1f88], 0xefa1e1c5
lea ecx, [ebp - 0x9d1]
call fcn.00438628
push eax
lea eax, [ebp - 0x1f84]
push eax
lea eax, [ebp - 0x1f94]
push eax
lea ecx, [ebp - 0x27bc]
call fcn.0043862b
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x2050]
call fcn.004385d7
mov dword [ebp - 0xb74], 0xffffffff
cmp dword [ebp - 0x43c], 0
je 0x469ed6
cmp dword [ebp - 0x43c], 0
je 0x469ed6
mov dword [ebp - 0x14ac], 1
jmp 0x469edd
and dword [ebp - 0x14ac], 0
mov eax, 0xd495
test eax, eax
je 0x469efb
cmp dword [ebp - 0x10bc], 0
je 0x469efb
mov dword [ebp - 0xb5c], 1
jmp 0x469f02
and dword [ebp - 0xb5c], 0
push 1
lea ecx, [ebp - 0x2050]
call fcn.00438619
mov ecx, dword [ebp - 0xb5c]
cmp ecx, dword [eax]
je 0x469f25
mov dword [ebp - 0xb64], 1
jmp 0x469f2c
and dword [ebp - 0xb64], 0
mov eax, dword [ebp - 0x14ac]
mov dword [ebp - 0x43c], eax
mov eax, dword [ebp - 0x43c]
cmp eax, dword [ebp - 0xb64]
je 0x469f52
mov dword [ebp - 0x10b4], 1
jmp 0x469f59
and dword [ebp - 0x10b4], 0
mov eax, dword [ebp - 0xb7c]
cmp dword [ebp - 0x10b4], eax
jg 0x469f73
mov dword [ebp - 0xb6c], 1
jmp 0x469f7a
and dword [ebp - 0xb6c], 0
push 1
lea ecx, [ebp - 0x15dc]
call fcn.00438619
mov ecx, dword [ebp - 0xb6c]
cmp ecx, dword [eax]
jge 0x469f9d
mov dword [ebp - 0x9c4], 1
jmp 0x469fa4
and dword [ebp - 0x9c4], 0
push 3
lea ecx, [ebp - 0x2050]
call fcn.00438619
mov ecx, dword [ebp - 0x9c4]
mov dword [eax], ecx
cmp dword [ebp - 0x9c4], 0
jne 0x469fd4
mov eax, 0xfffb
test eax, eax
jne 0x469fd4
and dword [ebp - 0x135c], 0
jmp 0x469fde
mov dword [ebp - 0x135c], 1
push 1
lea ecx, [ebp - 0x160c]
call fcn.00438619
mov eax, dword [eax]
add eax, dword [ebp - 0x135c]
mov dword [ebp - 0xb74], eax
mov esi, dword [ebp - 0xb74]
imul esi, dword [ebp - 0x10bc]
push 1
lea ecx, [ebp - 0x160c]
call fcn.00438619
mov dword [eax], esi
push 0x658b
push 1
lea eax, [ebp - 0x1d20]
push eax
push 0x71d
push 0x2dde
lea eax, [ebp - 0x15dc]
push eax
push 0x6ab3
push 0
push 0x5b7a
push 0x3d18
lea eax, [ebp - 0xb7c]
push eax
lea eax, [ebp - 0x160c]
push eax
push 0x69c5
push 0
call fcn.00466c98
add esp, 0x38
lea ecx, [ebp - 0x2050]
call fcn.004385fd
jmp 0x46a0a9
mov dword [ebp - 0x1d28], 1
push 0x4bf7
push 1
lea eax, [ebp - 0x1d28]
push eax
push 0
push 0x6676
push 1
lea eax, [ebp - 0x160c]
push eax
push 0x57bd
push 0x5008
call fcn.0045b471
add esp, 0x24
mov dword [ebp - 4], 8
cmp dword [ebp - 0x155c], 0x387d
jge 0x46a0c8
push dword [ebp - 0x1ae4]
call fcn.004b1347
pop ecx
jmp 0x46a0e4
or dword [ebp - 4], 0xffffffff
jmp 0x46a0ee
mov byte [ebp - 0x1c1], 0
push 1
lea eax, [ebp - 0x1c1]
push eax
push 0x4e15
push 1
push 0x6797
push 0
call fcn.00462520
add esp, 0x18
lea ecx, [ebp - 0x160c]
call fcn.004385fd
lea ecx, [ebp - 0x15dc]
call fcn.004385fd
mov dword [ebp - 0x320], 0xffffffe6
jmp 0x46a143
mov eax, dword [ebp - 0x320]
inc eax
mov dword [ebp - 0x320], eax
cmp dword [ebp - 0x320], 0x11
jl 0x46ab02
mov dword [ebp - 0x2630], 0xd41e5596
push 3
lea ecx, [ebp - 0x24fc]
call fcn.0043852b
mov dword [ebp - 0xb84], 0x11be
mov dword [ebp - 0x1810], 0xac5e40
cmp dword [ebp - 0xb84], 0x153c
jle 0x46a223
and dword [ebp - 0x7a4], 0
jmp 0x46a1a1
mov eax, dword [ebp - 0x7a4]
inc eax
mov dword [ebp - 0x7a4], eax
cmp dword [ebp - 0x7a4], 0x6a5d
jge 0x46a223
and dword [ebp - 0x444], 0
jmp 0x46a1c3
mov eax, dword [ebp - 0x444]
inc eax
mov dword [ebp - 0x444], eax
cmp dword [ebp - 0x444], 0x45e5
jge 0x46a21e
mov eax, dword [ebp - 0x7a4]
mov ecx, dword [ebp - 0x444]
shl eax, cl
cdq
mov dword [ebp - 0x18a0], eax
mov dword [ebp - 0x189c], edx
push dword [ebp - 0x189c]
push dword [ebp - 0x18a0]
lea ecx, [ebp - 0x292c]
call fcn.00401988
pop ecx
pop ecx
mov ecx, eax
call fcn.004382f5
push eax
call fcn.004b1347
pop ecx
lea ecx, [ebp - 0x292c]
call fcn.004382eb
jmp 0x46a1b6
jmp 0x46a194
mov dword [ebp - 0x168c], 0x897
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0xb84], 0xe52
jge 0x46a24c
push dword [ebp - 0x1810]
call fcn.004b1347
pop ecx
jmp 0x46a268
or dword [ebp - 4], 0xffffffff
jmp 0x46a272
push 1
lea ecx, [ebp - 0x24ec]
call fcn.0043852b
mov dword [ebp - 0x10c4], 0x59f2
mov dword [ebp - 0x1684], 0xac5e7c
cmp dword [ebp - 0x10c4], 0x5cd9
jle 0x46a38f
and dword [ebp - 0x454], 0
jmp 0x46a2b9
mov eax, dword [ebp - 0x454]
inc eax
mov dword [ebp - 0x454], eax
cmp dword [ebp - 0x454], 0x5d9e
jge 0x46a380
and dword [ebp - 0x68c], 0
jmp 0x46a2df
mov eax, dword [ebp - 0x68c]
inc eax
mov dword [ebp - 0x68c], eax
cmp dword [ebp - 0x68c], 0x10e3
jge 0x46a37b
and dword [ebp - 0x44c], 0
jmp 0x46a305
mov eax, dword [ebp - 0x44c]
inc eax
mov dword [ebp - 0x44c], eax
cmp dword [ebp - 0x44c], 0x34d6
jge 0x46a376
and dword [ebp - 0x834], 0
jmp 0x46a327
mov eax, dword [ebp - 0x834]
inc eax
mov dword [ebp - 0x834], eax
cmp dword [ebp - 0x834], 0x3c2b
jge 0x46a374
mov eax, dword [ebp - 0x68c]
mov ecx, dword [ebp - 0x44c]
shl eax, cl
mov ecx, dword [ebp - 0x834]
sar eax, cl
or eax, dword [ebp - 0x454]
cdq
mov dword [ebp - 0x18ac], eax
mov dword [ebp - 0x18a8], edx
push dword [ebp - 0x18a8]
push dword [ebp - 0x18ac]
mov ecx, 0xadaa58
call fcn.00438300
jmp 0x46a31a
jmp 0x46a2f8
jmp 0x46a2d2
jmp 0x46a2ac
push 0x182f
push 0
push 0
call dword [0xade240]
mov dword [ebp - 0x1af0], 0xb4c8f0d0
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0x10c4], 0x58f2
jge 0x46a3bc
mov edx, dword [ebp - 0x1684]
mov ecx, 0xadaa58
call fcn.0043ab89
jmp 0x46a3d8
or dword [ebp - 4], 0xffffffff
jmp 0x46a3e2
lea eax, [ebp - 0x24fc]
push eax
push 0x38f5
push 0x392d
lea eax, [ebp - 0x1bd0]
push eax
push 0
push 0x17c3
push 0
push 0x35b7
call fcn.00461023
add esp, 0x20
lea eax, [ebp - 0x1bd0]
push eax
push 0
push 0x1221
push 0x69bc
lea eax, [ebp - 0x24ec]
push eax
push 1
call fcn.004630d7
add esp, 0x18
push 1
push 0x338e
push 0
push 0x6baf
lea eax, [ebp - 0x168c]
push eax
call fcn.0045adea
add esp, 0x14
push 0
push 0xae3
lea eax, [ebp - 0x1af0]
push eax
push 0x628d
push 0x6388
push 0x6508
push 1
push 0x2e3d
push 0x2447
push 0
push 0x75c9
push 0x5ca0
push 0x7864
call fcn.0045a928
add esp, 0x34
lea ecx, [ebp - 0x24ec]
call fcn.004385fd
lea ecx, [ebp - 0x24fc]
call fcn.004385fd
mov dword [ebp - 0x1b08], 0
mov dword [ebp - 0x136c], 0x4ff5
mov dword [ebp - 0x16a4], 0xac5e9c
cmp dword [ebp - 0x136c], 0x539f
jle 0x46a55e
and dword [ebp - 0x694], 0
jmp 0x46a4ed
mov eax, dword [ebp - 0x694]
inc eax
mov dword [ebp - 0x694], eax
cmp dword [ebp - 0x694], 0x3079
jge 0x46a54e
and dword [ebp - 0x45c], 0
jmp 0x46a50f
mov eax, dword [ebp - 0x45c]
inc eax
mov dword [ebp - 0x45c], eax
cmp dword [ebp - 0x45c], 0x3cef
jge 0x46a54c
mov eax, dword [ebp - 0x694]
add eax, dword [ebp - 0x45c]
cdq
mov dword [ebp - 0x18b8], eax
mov dword [ebp - 0x18b4], edx
push dword [ebp - 0x18b4]
push dword [ebp - 0x18b8]
mov ecx, 0xadaa58
call fcn.00438300
jmp 0x46a502
jmp 0x46a4e0
push 0x18f8
push 0x18d2
call dword [0xade0c4]
mov dword [ebp - 0x30], 0xc3099cf
push 2
lea ecx, [ebp - 0x1e88]
call fcn.0043852b
mov dword [ebp - 0x2a0], 0xfffffff7
mov dword [ebp - 0xb4], 0
jmp 0x46a595
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 1
jge 0x46a5ae
mov eax, dword [ebp - 0xb4]
mov dword [ebp + eax*4 - 0x24], 1
jmp 0x46a588
mov dword [ebp - 0xb4], 0
jmp 0x46a5c7
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 2
jge 0x46a5e9
push dword [ebp - 0xb4]
lea ecx, [ebp - 0x1e88]
call fcn.00438619
mov dword [eax], 0x1f7d9671
jmp 0x46a5ba
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x24], 0xffffffec
jmp 0x46a60e
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x24]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x24], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x24], 0xffffffed
jne 0x46a641
mov byte [ebp - 0x233], 0
push 0x6ce
lea eax, [ebp - 0x233]
push eax
push 0
push 0x14db
push 1
call fcn.00463be7
add esp, 0x14
jmp 0x46a5f9
mov dword [ebp - 0x30], 0
jmp 0x46a651
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
jg 0x46a911
push 4
lea ecx, [ebp - 0x1e10]
call fcn.0043852b
mov dword [ebp - 0x7ac], 0
jmp 0x46a681
mov eax, dword [ebp - 0x7ac]
inc eax
mov dword [ebp - 0x7ac], eax
cmp dword [ebp - 0x7ac], 4
jge 0x46a6a0
push dword [ebp - 0x7ac]
lea ecx, [ebp - 0x1e10]
call fcn.00438619
and dword [eax], 0
jmp 0x46a674
mov eax, dword [ebp - 0x30]
cmp dword [ebp + eax*4 - 0x24], 9
jle 0x46a6b6
mov dword [ebp - 0xb8c], 1
jmp 0x46a6bd
and dword [ebp - 0xb8c], 0
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0x24]
cmp dword [ebp - 0xb8c], eax
jl 0x46a6e1
mov eax, 0x3bd5
test eax, eax
je 0x46a6e1
mov dword [ebp - 0x1364], 1
jmp 0x46a6e8
and dword [ebp - 0x1364], 0
cmp dword [ebp - 0x1364], 0xfc657863
jne 0x46a700
mov dword [ebp - 0x1694], 1
jmp 0x46a707
and dword [ebp - 0x1694], 0
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0x24]
mov dword [ebp - 0x2360], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x24], 9
je 0x46a72d
mov dword [ebp - 0x1bd8], 1
jmp 0x46a734
and dword [ebp - 0x1bd8], 0
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0x24]
mov dword [ebp - 0x24d8], eax
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x24], 3
push 3
pop eax
test eax, eax
je 0x46a768
cmp dword [ebp - 0x30], 0
je 0x46a768
mov dword [ebp - 0xb94], 1
jmp 0x46a76f
and dword [ebp - 0xb94], 0
push 2
pop eax
sub eax, dword [ebp - 0xb94]
mov dword [ebp - 0x10cc], eax
push 0
lea ecx, [ebp - 0x1e88]
call fcn.00438619
mov ecx, dword [ebp - 0x10cc]
mov dword [eax], ecx
cmp dword [ebp - 0x10cc], 0xfffffffb
jle 0x46a7a8
mov dword [ebp - 0xb9c], 1
jmp 0x46a7af
and dword [ebp - 0xb9c], 0
cmp dword [ebp - 0xb9c], 8
jbe 0x46a7c4
mov dword [ebp - 0x169c], 1
jmp 0x46a7cb
and dword [ebp - 0x169c], 0
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0x24]
mov dword [ebp - 0x2368], eax
push 0
lea ecx, [ebp - 0x1e88]
call fcn.00438619
mov esi, eax
push 2
lea ecx, [ebp - 0x1e10]
call fcn.00438619
mov ecx, dword [esi]
imul ecx, dword [eax]
mov dword [ebp - 0x2a0], ecx
mov dword [ebp - 0x2a0], 0
jmp 0x46a818
mov eax, dword [ebp - 0x2a0]
dec eax
mov dword [ebp - 0x2a0], eax
cmp dword [ebp - 0x2a0], 0xffffffe3
jle 0x46a901
mov dword [ebp - 0x464], 0x20f30385
mov eax, dword [ebp - 0x464]
mov dword [ebp - 0x14b4], eax
push 1
lea ecx, [ebp - 0x1e10]
call fcn.00438619
mov ecx, dword [ebp - 0x14b4]
mov dword [eax], ecx
mov eax, dword [ebp - 0x464]
imul eax, dword [ebp - 0x14b4]
cmp eax, dword [ebp - 0x464]
jne 0x46a871
mov dword [ebp - 0x10d4], 1
jmp 0x46a878
and dword [ebp - 0x10d4], 0
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0x24]
mov ecx, dword [ebp - 0x30]
add eax, dword [ebp + ecx*4 - 0x24]
cmp eax, dword [ebp - 0x464]
jne 0x46a89a
mov dword [ebp - 0xba4], 1
jmp 0x46a8a1
and dword [ebp - 0xba4], 0
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0x24]
cmp dword [ebp - 0xba4], eax
je 0x46a8bc
mov dword [ebp - 0xbac], 1
jmp 0x46a8c3
and dword [ebp - 0xbac], 0
mov eax, dword [ebp - 0x10d4]
cmp eax, dword [ebp - 0xbac]
jle 0x46a8dd
mov dword [ebp - 0x1afc], 1
jmp 0x46a8e4
and dword [ebp - 0x1afc], 0
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0x24]
mov dword [ebp - 0x26a4], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x24], 0x67f5d1cc
jmp 0x46a80b
lea ecx, [ebp - 0x1e10]
call fcn.004385fd
jmp 0x46a64a
lea ecx, [ebp - 0x1e88]
call fcn.004385fd
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0x136c], 0x4df1
jge 0x46a93f
mov edx, dword [ebp - 0x16a4]
mov ecx, 0xadaa58
call fcn.0043ab89
jmp 0x46a95b
or dword [ebp - 4], 0xffffffff
jmp 0x46a965
mov dword [ebp - 0x16ac], 0x5d870a32
mov dword [ebp - 0x474], 0
mov dword [ebp - 0xbb4], 0x7363
mov dword [ebp - 0x1be0], 0xac5eb8
cmp dword [ebp - 0xbb4], 0x7429
jle 0x46aa11
and dword [ebp - 0x69c], 0
jmp 0x46a9af
mov eax, dword [ebp - 0x69c]
inc eax
mov dword [ebp - 0x69c], eax
cmp dword [ebp - 0x69c], 0x32cd
jge 0x46aa11
and dword [ebp - 0x46c], 0
jmp 0x46a9d1
mov eax, dword [ebp - 0x46c]
inc eax
mov dword [ebp - 0x46c], eax
cmp dword [ebp - 0x46c], 0x1e96
jge 0x46aa0f
mov eax, dword [ebp - 0x69c]
imul eax, dword [ebp - 0x46c]
cdq
mov dword [ebp - 0x18c4], eax
mov dword [ebp - 0x18c0], edx
push dword [ebp - 0x18c0]
push dword [ebp - 0x18c4]
mov ecx, 0xadaa58
call fcn.00438300
jmp 0x46a9c4
jmp 0x46a9a2
mov dword [ebp - 4], 0x10
cmp dword [ebp - 0xbb4], 0x7236
jge 0x46aa34
mov edx, dword [ebp - 0x1be0]
mov ecx, 0xadaa58
call fcn.0043ab89
jmp 0x46aa50
or dword [ebp - 4], 0xffffffff
jmp 0x46aa5a
mov dword [ebp - 0x87c], 0
jmp 0x46aa73
mov eax, dword [ebp - 0x87c]
inc eax
mov dword [ebp - 0x87c], eax
cmp dword [ebp - 0x87c], 4
jge 0x46aa8f
mov eax, dword [ebp - 0x87c]
mov dword [ebp + eax*4 - 0x2b88], 0xdf99
jmp 0x46aa66
mov dword [ebp - 0x474], 3
jmp 0x46aaa8
mov eax, dword [ebp - 0x474]
dec eax
mov dword [ebp - 0x474], eax
cmp dword [ebp - 0x474], 0
jl 0x46aac4
push 0
push 0x5441
push 1
call fcn.00467532
add esp, 0xc
jmp 0x46aa9b
lea eax, [ebp - 0x16ac]
push eax
push 1
push 0x3079
lea eax, [ebp - 0x1b08]
push eax
push 0
push 0x3af5
lea eax, [ebp - 0x320]
push eax
lea eax, [ebp - 0x16b4]
push eax
push 0
push 0x103e
call fcn.00463462
add esp, 0x28
jmp 0x46a136
mov byte [ebp - 0x39], 0
mov dword [ebp - 0x6a4], 0
mov dword [ebp - 0x2370], 0xcd16652d
mov dword [ebp - 0x24e0], 0xedad94e8
mov dword [ebp - 0x2378], 0xfffffff6
mov dword [ebp - 0x2638], 0xba7c
mov dword [ebp - 0x2380], 0xe99e855c
mov dword [ebp - 0xf4], 0
jmp 0x46ab5b
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 3
jge 0x46ab77
mov eax, dword [ebp - 0xf4]
mov dword [ebp + eax*4 - 0x28fc], 0xdf7cd95d
jmp 0x46ab4e
mov dword [ebp - 0xf4], 0
jmp 0x46ab90
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 2
jge 0x46abac
mov eax, dword [ebp - 0xf4]
mov dword [ebp + eax*4 - 0x1efc], 8
jmp 0x46ab83
mov dword [ebp - 0x6a4], 0xfffffff7
jmp 0x46abc5
mov eax, dword [ebp - 0x6a4]
dec eax
mov dword [ebp - 0x6a4], eax
cmp dword [ebp - 0x6a4], 0xfffffff1
jl 0x46af54
mov dword [ebp - 0x2a8], 0xfffffff9
mov dword [ebp - 0x24f0], 0x7b7f609b
mov dword [ebp - 0x2388], 9
mov dword [ebp - 0x26a8], 0xfffffffe
mov dword [ebp - 0x2390], 0xfffffff9
mov dword [ebp - 0x10dc], 0x8d5
mov dword [ebp - 0x1be8], 0xac5ee8
cmp dword [ebp - 0x10dc], 0xbd4
jle 0x46acfc
and dword [ebp - 0x47c], 0
jmp 0x46ac3e
mov eax, dword [ebp - 0x47c]
inc eax
mov dword [ebp - 0x47c], eax
cmp dword [ebp - 0x47c], 0x7f6c
jge 0x46acef
and dword [ebp - 0x3c8], 0
jmp 0x46ac64
mov eax, dword [ebp - 0x3c8]
inc eax
mov dword [ebp - 0x3c8], eax
cmp dword [ebp - 0x3c8], 0x3c34
jge 0x46acea
and dword [ebp - 0x7b4], 0
jmp 0x46ac86
mov eax, dword [ebp - 0x7b4]
inc eax
mov dword [ebp - 0x7b4], eax
cmp dword [ebp - 0x7b4], 0x6b6f
jge 0x46ace5
mov eax, dword [ebp - 0x47c]
and eax, dword [ebp - 0x3c8]
xor eax, dword [ebp - 0x7b4]
cdq
mov dword [ebp - 0x18d0], eax
mov dword [ebp - 0x18cc], edx
push dword [ebp - 0x18cc]
push dword [ebp - 0x18d0]
lea ecx, [ebp - 0x2b30]
call fcn.00401988
pop ecx
pop ecx
mov ecx, eax
call fcn.004382f5
push eax
call fcn.004b1347
pop ecx
lea ecx, [ebp - 0x2b30]
call fcn.004382eb
jmp 0x46ac79
jmp 0x46ac57
jmp 0x46ac31
push 0
push 0x1d5
call dword [0xade13c]
mov dword [ebp - 0x2500], 0
mov dword [ebp - 4], 0x12
cmp dword [ebp - 0x10dc], 0x6ac
jge 0x46ad25
push dword [ebp - 0x1be8]
call fcn.004b1347
pop ecx
jmp 0x46ad41
or dword [ebp - 4], 0xffffffff
jmp 0x46ad4b
mov dword [ebp - 0x2398], 0x8cd3bed1
push 1
lea ecx, [ebp - 0x250c]
call fcn.0043852b
mov dword [ebp - 0x2640], 0xdc9fe9a5
mov dword [ebp - 0x23a0], 0xffffffff
mov dword [ebp - 0x2510], 6
mov dword [ebp - 0x484], 0
jmp 0x46ad99
mov eax, dword [ebp - 0x484]
inc eax
mov dword [ebp - 0x484], eax
cmp dword [ebp - 0x484], 1
jge 0x46adb8
push dword [ebp - 0x484]
lea ecx, [ebp - 0x250c]
call fcn.00438619
or dword [eax], 0xffffffff
jmp 0x46ad8c
push 0
push 0x7b6e
push 0x1271
push 0x7ba6
push 0x78d7
push 0x76c4
push 1
push 0x320e
push 0x5c65
push 1
push 0x4f54
push 0x2d23
push 0x1880
call fcn.0045a928
add esp, 0x34
mov dword [ebp - 0x2a8], 0xfffffff0
jmp 0x46ae11
mov eax, dword [ebp - 0x2a8]
inc eax
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2a8], 0xfffffffc
jg 0x46af44
mov dword [ebp - 0x1b14], 0xffffffff
mov dword [ebp - 0x23a8], 9
mov dword [ebp - 0x26e8], 0xfffffff9
mov dword [ebp - 0x23b0], 0xffffffff
mov dword [ebp - 0xbc], 0
jmp 0x46ae5f
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 1
jge 0x46ae7b
mov eax, dword [ebp - 0xbc]
mov dword [ebp + eax*4 - 0x16bc], 0xe5e81a7e
jmp 0x46ae52
mov dword [ebp - 0xbc], 0
jmp 0x46ae94
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 4
jge 0x46aeb0
mov eax, dword [ebp - 0xbc]
mov dword [ebp + eax*4 - 0x27b4], 0x51ae9a07
jmp 0x46ae87
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1efc]
dec eax
mov dword [ebp - 0xbbc], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xbbc]
mov dword [ebp + eax - 0x1efc], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x16bc]
sub eax, dword [ebp - 0xbbc]
cmp dword [ebp - 0x2a8], eax
jl 0x46aefe
mov dword [ebp - 0x91c], 1
jmp 0x46af05
and dword [ebp - 0x91c], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x91c]
mov dword [ebp + eax - 0x27b4], ecx
cmp dword [ebp - 0x91c], 0
jge 0x46af2c
mov dword [ebp - 0x15b4], 1
jmp 0x46af33
and dword [ebp - 0x15b4], 0
mov eax, dword [ebp - 0x15b4]
mov dword [ebp - 0x1b14], eax
jmp 0x46ae04
lea ecx, [ebp - 0x250c]
call fcn.004385fd
jmp 0x46abb8
mov dword [ebp - 0x78], 0xffffffff
mov dword [ebp - 0xbfc], 0x1a76a447
push 1
lea ecx, [ebp - 0x2080]
call fcn.0043852b
mov dword [ebp - 0x360], 0
jmp 0x46af8b
mov eax, dword [ebp - 0x360]
inc eax
mov dword [ebp - 0x360], eax
cmp dword [ebp - 0x360], 2
jge 0x46afa7
mov eax, dword [ebp - 0x360]
mov dword [ebp + eax*4 - 0x8d4], 0xea75
jmp 0x46af7e
push 0x5007
push 0x56a
lea eax, [ebp - 0x360]
push eax
lea eax, [ebp - 0x2080]
push eax
push 1
push 1
push 0x3f3c
push 0x52d9
push 0x47ef
push 0x18af
push 0
call fcn.0046555c
add esp, 0x2c
mov byte [ebp - 0x1c9], 0
movzx eax, byte [ebp - 0x1c9]
test eax, eax
je 0x46b004
push 0
push 0
push 0x2665
call fcn.00466213
add esp, 0xc
mov dword [ebp - 0x78], 1
jmp 0x46b014
mov eax, dword [ebp - 0x78]
dec eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0
jl 0x46b462
mov dword [ebp - 0x2b0], 0xd4ea6801
mov dword [ebp - 0x994], 0
push 4
lea ecx, [ebp - 0x2068]
call fcn.0043852b
mov dword [ebp - 0x14bc], 0xfffffff8
mov dword [ebp - 0xbec], 0xffff
mov dword [ebp - 0x6ac], 0
jmp 0x46b06c
mov eax, dword [ebp - 0x6ac]
inc eax
mov dword [ebp - 0x6ac], eax
cmp dword [ebp - 0x6ac], 4
jge 0x46b08e
push dword [ebp - 0x6ac]
lea ecx, [ebp - 0x2068]
call fcn.00438619
mov dword [eax], 0xfffe
jmp 0x46b05f
mov dword [ebp - 0x2b0], 1
jmp 0x46b0a7
mov eax, dword [ebp - 0x2b0]
dec eax
mov dword [ebp - 0x2b0], eax
cmp dword [ebp - 0x2b0], 0
jl 0x46b34f
mov dword [ebp - 0x188], 0xffffffff
mov dword [ebp - 0x16c4], 0x32a831d2
mov dword [ebp - 0xbcc], 0x7216709e
mov dword [ebp - 0x188], 1
jmp 0x46b0eb
mov eax, dword [ebp - 0x188]
dec eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 0
jl 0x46b34a
mov dword [ebp - 0x10f4], 0xfffffff8
push 1
lea ecx, [ebp - 0x1e28]
call fcn.0043852b
mov dword [ebp - 0x48c], 0
jmp 0x46b128
mov eax, dword [ebp - 0x48c]
inc eax
mov dword [ebp - 0x48c], eax
cmp dword [ebp - 0x48c], 1
jge 0x46b14a
push dword [ebp - 0x48c]
lea ecx, [ebp - 0x1e28]
call fcn.00438619
mov dword [eax], 3
jmp 0x46b11b
mov dword [ebp - 0x16c4], 0xffffffff
mov eax, dword [ebp - 0x188]
cmp dword [ebp + eax*4 - 0x8d4], 0
jne 0x46b170
mov dword [ebp - 0xbc4], 1
jmp 0x46b177
and dword [ebp - 0xbc4], 0
mov eax, dword [ebp - 0x78]
cmp dword [ebp - 0xbc4], eax
jge 0x46b18e
mov dword [ebp - 0x1bf0], 1
jmp 0x46b195
and dword [ebp - 0x1bf0], 0
mov eax, dword [ebp - 0x188]
cmp dword [ebp - 0x2b0], eax
je 0x46b1af
mov dword [ebp - 0x10e4], 1
jmp 0x46b1b6
and dword [ebp - 0x10e4], 0
mov eax, dword [ebp - 0x10e4]
dec eax
mov dword [ebp - 0xbcc], eax
mov eax, dword [ebp - 0xbcc]
sub eax, dword [ebp - 0x78]
neg eax
mov dword [ebp - 0x994], eax
mov eax, dword [ebp - 0x994]
mov dword [ebp - 0x14bc], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x8d4]
cmp dword [ebp - 0x994], eax
jne 0x46b201
mov dword [ebp - 0x1374], 1
jmp 0x46b208
and dword [ebp - 0x1374], 0
push 0
lea ecx, [ebp - 0x1e28]
call fcn.00438619
mov eax, dword [eax]
neg eax
cmp eax, dword [ebp - 0x1374]
jne 0x46b22d
mov dword [ebp - 0x16cc], 1
jmp 0x46b234
and dword [ebp - 0x16cc], 0
mov eax, dword [ebp - 0x10f4]
mov dword [ebp - 0x2520], eax
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x23b8], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x8d4], 0x7d77fc7d
jge 0x46b26b
mov dword [ebp - 0xbd4], 1
jmp 0x46b272
and dword [ebp - 0xbd4], 0
cmp dword [ebp - 0xbd4], 0xf3c5
jg 0x46b28a
mov dword [ebp - 0x10ec], 1
jmp 0x46b291
and dword [ebp - 0x10ec], 0
cmp dword [ebp - 0x10ec], 0xffff
jbe 0x46b2af
cmp dword [ebp - 0x78], 0
je 0x46b2af
mov dword [ebp - 0xbdc], 1
jmp 0x46b2b6
and dword [ebp - 0xbdc], 0
push 1
lea ecx, [ebp - 0x2068]
call fcn.00438619
mov dword [ebp - 0x924], eax
mov eax, dword [ebp - 0x924]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x924]
mov dword [ecx], eax
mov eax, dword [ebp - 0x924]
mov eax, dword [eax]
cmp eax, dword [ebp - 0xbdc]
je 0x46b2f6
mov dword [ebp - 0x1b20], 1
jmp 0x46b2fd
and dword [ebp - 0x1b20], 0
mov eax, dword [ebp - 0x14bc]
mov dword [ebp - 0x2648], eax
push 0
lea ecx, [ebp - 0x1e28]
call fcn.00438619
cmp dword [eax], 1
je 0x46b327
mov dword [ebp - 0xbe4], 1
jmp 0x46b32e
and dword [ebp - 0xbe4], 0
mov eax, dword [ebp - 0xbe4]
mov dword [ebp - 0x10f4], eax
lea ecx, [ebp - 0x1e28]
call fcn.004385fd
jmp 0x46b0de
jmp 0x46b09a
mov eax, dword [ebp - 0x78]
cmp dword [ebp + eax*4 - 0x8d4], 0
jne 0x46b369
xor eax, eax
jne 0x46b369
and dword [ebp - 0x1564], 0
jmp 0x46b373
mov dword [ebp - 0x1564], 1
mov eax, dword [ebp - 0x78]
mov eax, dword [ebp + eax*4 - 0x8d4]
mov dword [ebp - 0x23c0], eax
mov eax, dword [ebp - 0xbec]
mov dword [ebp - 0x2530], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x8d4]
mov dword [ebp - 0x23c8], eax
cmp dword [ebp - 0xbec], 0xaf8e
je 0x46b3ba
mov dword [ebp - 0x137c], 1
jmp 0x46b3c1
and dword [ebp - 0x137c], 0
cmp dword [ebp - 0x137c], 3
jle 0x46b3d6
mov dword [ebp - 0xbf4], 1
jmp 0x46b3dd
and dword [ebp - 0xbf4], 0
mov eax, dword [ebp - 0x78]
mov eax, dword [ebp + eax*4 - 0x8d4]
cmp eax, dword [ebp - 0xbf4]
jle 0x46b3fb
mov dword [ebp - 0x10fc], 1
jmp 0x46b402
and dword [ebp - 0x10fc], 0
mov eax, dword [ebp - 0x10fc]
mov dword [ebp - 0xbfc], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x8d4]
cmp dword [ebp - 0xbfc], eax
je 0x46b42f
mov dword [ebp - 0xc04], 1
jmp 0x46b436
and dword [ebp - 0xc04], 0
mov esi, dword [ebp - 0x1564]
imul esi, dword [ebp - 0xc04]
push 0
lea ecx, [ebp - 0x2080]
call fcn.00438619
mov dword [eax], esi
lea ecx, [ebp - 0x2068]
call fcn.004385fd
jmp 0x46b00d
lea ecx, [ebp - 0x2080]
call fcn.004385fd
mov dword [ebp - 0x328], 0x256915a
mov dword [ebp - 0x83c], 0
jmp 0x46b490
mov eax, dword [ebp - 0x83c]
inc eax
mov dword [ebp - 0x83c], eax
cmp dword [ebp - 0x83c], 1
jge 0x46b4ac
mov eax, dword [ebp - 0x83c]
mov dword [ebp + eax*4 - 0x1384], 0
jmp 0x46b483
mov byte [ebp - 0x235], 0
movzx eax, byte [ebp - 0x235]
test eax, eax
je 0x46b4c8
push 0
push 0
call dword [0xade314]
mov dword [ebp - 0x328], 0
jmp 0x46b4e1
mov eax, dword [ebp - 0x328]
dec eax
mov dword [ebp - 0x328], eax
cmp dword [ebp - 0x328], 0
jl 0x46b84d
mov dword [ebp - 0x1104], 0x685c
mov dword [ebp - 0x16d4], 0xac5f5c
cmp dword [ebp - 0x1104], 0x6922
jle 0x46b5e1
and dword [ebp - 0x49c], 0
jmp 0x46b528
mov eax, dword [ebp - 0x49c]
inc eax
mov dword [ebp - 0x49c], eax
cmp dword [ebp - 0x49c], 0x1745
jge 0x46b5db
and dword [ebp - 0x494], 0
jmp 0x46b54e
mov eax, dword [ebp - 0x494]
inc eax
mov dword [ebp - 0x494], eax
cmp dword [ebp - 0x494], 0x186a
jge 0x46b5d6
and dword [ebp - 0x6b4], 0
jmp 0x46b570
mov eax, dword [ebp - 0x6b4]
inc eax
mov dword [ebp - 0x6b4], eax
cmp dword [ebp - 0x6b4], 0x349f
jge 0x46b5d1
mov ecx, dword [ebp - 0x494]
add ecx, dword [ebp - 0x6b4]
mov eax, dword [ebp - 0x49c]
sar eax, cl
cdq
mov dword [ebp - 0x18dc], eax
mov dword [ebp - 0x18d8], edx
push dword [ebp - 0x18d8]
push dword [ebp - 0x18dc]
lea ecx, [ebp - 0x295c]
call fcn.00401988
pop ecx
pop ecx
mov ecx, eax
call fcn.004382f5
push eax
call fcn.004b1347
pop ecx
lea ecx, [ebp - 0x295c]
call fcn.004382eb
jmp 0x46b563
jmp 0x46b541
jmp 0x46b51b
call dword [0xade308]
mov dword [ebp - 0x114], 1
mov dword [ebp - 4], 0x14
cmp dword [ebp - 0x1104], 0x66bc
jge 0x46b60a
push dword [ebp - 0x16d4]
call fcn.004b1347
pop ecx
jmp 0x46b626
or dword [ebp - 4], 0xffffffff
jmp 0x46b630
mov dword [ebp - 0x114], 0
jmp 0x46b649
mov eax, dword [ebp - 0x114]
dec eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0
jl 0x46b7b8
mov dword [ebp - 0xc0c], 0x5bf5
mov dword [ebp - 0x1bf8], 0xac5f78
cmp dword [ebp - 0xc0c], 0x5e5f
jle 0x46b758
and dword [ebp - 0x6bc], 0
jmp 0x46b690
mov eax, dword [ebp - 0x6bc]
inc eax
mov dword [ebp - 0x6bc], eax
cmp dword [ebp - 0x6bc], 0x26cf
jge 0x46b758
and dword [ebp - 0x7bc], 0
jmp 0x46b6b6
mov eax, dword [ebp - 0x7bc]
inc eax
mov dword [ebp - 0x7bc], eax
cmp dword [ebp - 0x7bc], 0x4318
jge 0x46b753
and dword [ebp - 0x4a4], 0
jmp 0x46b6dc
mov eax, dword [ebp - 0x4a4]
inc eax
mov dword [ebp - 0x4a4], eax
cmp dword [ebp - 0x4a4], 0x6315
jge 0x46b74e
and dword [ebp - 0x4ac], 0
jmp 0x46b6fe
mov eax, dword [ebp - 0x4ac]
inc eax
mov dword [ebp - 0x4ac], eax
cmp dword [ebp - 0x4ac], 0x5841
jge 0x46b74c
mov ecx, dword [ebp - 0x7bc]
imul ecx, dword [ebp - 0x4a4]
mov eax, dword [ebp - 0x6bc]
sar eax, cl
mov ecx, dword [ebp - 0x4ac]
sar eax, cl
cdq
mov dword [ebp - 0x18e8], eax
mov dword [ebp - 0x18e4], edx
push dword [ebp - 0x18e4]
push dword [ebp - 0x18e8]
mov ecx, 0xadaa58
call fcn.00438300
jmp 0x46b6f1
jmp 0x46b6cf
jmp 0x46b6a9
jmp 0x46b683
mov eax, dword [ebp - 0x114]
cmp dword [ebp + eax*4 - 0x1384], 0
je 0x46b76a
jmp 0x46b7b8
mov dword [ebp - 4], 0x16
cmp dword [ebp - 0xc0c], 0x58eb
jge 0x46b78d
mov edx, dword [ebp - 0x1bf8]
mov ecx, 0xadaa58
call fcn.0043ab89
jmp 0x46b7a9
or dword [ebp - 4], 0xffffffff
jmp 0x46b7b3
jmp 0x46b63c
mov dword [ebp - 0x114], 0
jmp 0x46b7d1
mov eax, dword [ebp - 0x114]
dec eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0
jl 0x46b848
mov dword [ebp - 0x8bc], 0xfffffffa
mov dword [ebp - 0x8bc], 0
jmp 0x46b7fd
mov eax, dword [ebp - 0x8bc]
dec eax
mov dword [ebp - 0x8bc], eax
cmp dword [ebp - 0x8bc], 0
jl 0x46b81a
mov eax, dword [ebp - 0x328]
cmp dword [ebp + eax*4 - 0x1384], 0
je 0x46b818
jmp 0x46b81a
jmp 0x46b7f0
mov byte [ebp - 0x1d1], 0
push 0
push 0
push 0x4938
lea eax, [ebp - 0x1d1]
push eax
push 0x2f52
push 0x21a6
call fcn.004647d2
add esp, 0x18
jmp 0x46b7c4
jmp 0x46b4d4
mov dword [ebp - 0x51c], 0
mov dword [ebp - 0x2b8], 0x256915a
mov dword [ebp - 0xc14], 0x607e
mov dword [ebp - 0x16dc], 0xac5fa0
cmp dword [ebp - 0xc14], 0x608a
jle 0x46b93b
push 0
push 0x20fe
call dword [0xade3f0]
and dword [ebp - 0x4bc], 0
jmp 0x46b8a8
mov eax, dword [ebp - 0x4bc]
inc eax
mov dword [ebp - 0x4bc], eax
cmp dword [ebp - 0x4bc], 0x1ac7
jge 0x46b93b
and dword [ebp - 0x4b4], 0
jmp 0x46b8ce
mov eax, dword [ebp - 0x4b4]
inc eax
mov dword [ebp - 0x4b4], eax
cmp dword [ebp - 0x4b4], 0x2184
jge 0x46b936
and dword [ebp - 0x6c4], 0
jmp 0x46b8f0
mov eax, dword [ebp - 0x6c4]
inc eax
mov dword [ebp - 0x6c4], eax
cmp dword [ebp - 0x6c4], 0x5af
jge 0x46b934
mov eax, dword [ebp - 0x4b4]
imul eax, dword [ebp - 0x6c4]
and eax, dword [ebp - 0x4bc]
cdq
mov dword [ebp - 0x18f4], eax
mov dword [ebp - 0x18f0], edx
push dword [ebp - 0x18f0]
push dword [ebp - 0x18f4]
mov ecx, 0xadaa58
call fcn.00438300
jmp 0x46b8e3
jmp 0x46b8c1
jmp 0x46b89b
mov dword [ebp - 0x7c4], 0
jmp 0x46b954
mov eax, dword [ebp - 0x7c4]
inc eax
mov dword [ebp - 0x7c4], eax
cmp dword [ebp - 0x7c4], 1
jge 0x46b970
mov eax, dword [ebp - 0x7c4]
mov dword [ebp + eax*4 - 0x110c], 0
jmp 0x46b947
mov dword [ebp - 4], 0x18
cmp dword [ebp - 0xc14], 0x6012
jge 0x46b993
mov edx, dword [ebp - 0x16dc]
mov ecx, 0xadaa58
call fcn.0043ab89
jmp 0x46b9af
or dword [ebp - 4], 0xffffffff
jmp 0x46b9b9
mov byte [ebp - 0x237], 0
movzx eax, byte [ebp - 0x237]
test eax, eax
je 0x46b9fa
push 0x6b32
push 0x4650
push 0x1fb2
push 0x1ba6
push 0
push 0x4c9c
push 1
push 0x1f62
push 0x7c5f
call fcn.004633d4
add esp, 0x24
mov dword [ebp - 0x2b8], 0
jmp 0x46ba13
mov eax, dword [ebp - 0x2b8]
dec eax
mov dword [ebp - 0x2b8], eax
cmp dword [ebp - 0x2b8], 0
jl 0x46baf5
mov dword [ebp - 0xc4], 1
mov dword [ebp - 0xc4], 0
jmp 0x46ba43
mov eax, dword [ebp - 0xc4]
dec eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0
jl 0x46ba60
mov eax, dword [ebp - 0xc4]
cmp dword [ebp + eax*4 - 0x110c], 0
je 0x46ba5e
jmp 0x46ba60
jmp 0x46ba36
mov dword [ebp - 0xc4], 0
jmp 0x46ba79
mov eax, dword [ebp - 0xc4]
dec eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0
jl 0x46baf0
mov dword [ebp - 0x4c4], 0xfffffffa
mov dword [ebp - 0x4c4], 0
jmp 0x46baa5
mov eax, dword [ebp - 0x4c4]
dec eax
mov dword [ebp - 0x4c4], eax
cmp dword [ebp - 0x4c4], 0
jl 0x46bac2
mov eax, dword [ebp - 0x2b8]
cmp dword [ebp + eax*4 - 0x110c], 0
je 0x46bac0
jmp 0x46bac2
jmp 0x46ba98
mov byte [ebp - 0x1d9], 0
lea eax, [ebp - 0x1d9]
push eax
push 0
push 1
push 0x6aa5
push 0x1148
push 0x665d
call fcn.00466ae5
add esp, 0x18
jmp 0x46ba6c
jmp 0x46ba06
mov dword [ebp - 0x26b0], 0xcd16652d
mov dword [ebp - 0x6cc], 0x4c405b40
push 3
lea ecx, [ebp - 0x1e40]
call fcn.0043852b
push 2
lea ecx, [ebp - 0x1ee8]
call fcn.0043852b
push 2
lea ecx, [ebp - 0x251c]
call fcn.0043852b
mov dword [ebp - 0x28], 0
jmp 0x46bb40
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 1
jge 0x46bb56
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x92c], 0x7b8f5f49
jmp 0x46bb39
mov dword [ebp - 0x28], 0
jmp 0x46bb66
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jge 0x46bb7c
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x2714], 4
jmp 0x46bb5f
mov dword [ebp - 0x28], 0
jmp 0x46bb8c
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jge 0x46bba8
push dword [ebp - 0x28]
lea ecx, [ebp - 0x1e40]
call fcn.00438619
mov dword [eax], 0xc1d10227
jmp 0x46bb85
push 0x4136
push 0
push 0x572
push 0x7766
push 0x4847
push 0x3ba7
push 0x6d5f
push 1
lea eax, [ebp - 0x28]
push eax
push 0x45c1
push 0x5d94
push 0x380d
lea eax, [ebp - 0x1ee8]
push eax
push 1
call fcn.00466c98
add esp, 0x38
lea eax, [ebp - 0x28]
push eax
push 0x6fd3
lea eax, [ebp - 0x251c]
push eax
push 0
push 0
push 0x3679
call fcn.00468156
add esp, 0x18
mov eax, dword [ebp - 0x6cc]
mov dword [ebp - 0x23d0], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x92c], 0
jne 0x46bcb1
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x2714], 0xaee5a986
mov eax, 0xaee5a986
test eax, eax
ja 0x46bc54
mov dword [ebp - 0x9f0], 1
jmp 0x46bc5b
and dword [ebp - 0x9f0], 0
push 2
lea ecx, [ebp - 0x1e40]
call fcn.00438619
mov ecx, dword [ebp - 0x9f0]
mov dword [eax], ecx
cmp dword [ebp - 0x9f0], 0
jne 0x46bc86
push 2
lea ecx, [ebp - 0x1e40]
call fcn.00438619
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x92c], 0
jg 0x46bcb1
push 0
lea ecx, [ebp - 0x1ee8]
call fcn.00438619
cmp dword [eax], 0
jne 0x46bcb1
and dword [ebp - 0xc1c], 0
jmp 0x46bcbb
mov dword [ebp - 0xc1c], 1
mov eax, dword [ebp - 0x6cc]
mov dword [ebp - 0x6cc], eax
mov esi, dword [ebp - 0x6cc]
sub esi, dword [ebp - 0xc1c]
push 0
lea ecx, [ebp - 0x1ee8]
call fcn.00438619
imul esi, dword [eax]
cmp esi, 0x47941ce3
jle 0x46bcf7
mov dword [ebp - 0x14c4], 1
jmp 0x46bcfe
and dword [ebp - 0x14c4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x14c4]
mov dword [ebp + eax - 0x92c], ecx
lea ecx, [ebp - 0x251c]
call fcn.004385fd
lea ecx, [ebp - 0x1ee8]
call fcn.004385fd
lea ecx, [ebp - 0x1e40]
call fcn.004385fd
mov dword [ebp - 0x2540], 0xedad94e8
mov dword [ebp - 0xfc], 1
mov dword [ebp - 0x4e4], 0x7ba96689
mov dword [ebp - 0x16e4], 0xffffffff
mov dword [ebp - 0xfc], 0
jmp 0x46bd73
mov eax, dword [ebp - 0xfc]
dec eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0xfffffff5
je 0x46c276
mov dword [ebp - 0x144], 0x2c7c
mov dword [ebp - 0x111c], 0x9dba5c12
mov dword [ebp - 0x4cc], 0
jmp 0x46bdad
mov eax, dword [ebp - 0x4cc]
inc eax
mov dword [ebp - 0x4cc], eax
cmp dword [ebp - 0x4cc], 1
jge 0x46bdc9
mov eax, dword [ebp - 0x4cc]
mov dword [ebp + eax*4 - 0x7cc], 8
jmp 0x46bda0
cmp dword [ebp - 0xfc], 0
jne 0x46be16
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x7cc]
cmp dword [ebp + eax - 0x7cc], ecx
jl 0x46bdfa
mov dword [ebp - 0xc24], 1
jmp 0x46be01
and dword [ebp - 0xc24], 0
cmp dword [ebp - 0xc24], 1
jl 0x46be16
mov dword [ebp - 0x1114], 1
jmp 0x46be1d
and dword [ebp - 0x1114], 0
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
mov eax, dword [ebp - 0x144]
cmp eax, dword [ebp - 0x1114]
jne 0x46c07a
mov dword [ebp - 0x144], 0xffffffec
jmp 0x46be55
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 0x1a
jge 0x46c075
mov dword [ebp - 0xc2c], 0x5abf
mov dword [ebp - 0x1b2c], 0xac6010
cmp dword [ebp - 0xc2c], 0x5e6b
jle 0x46bf89
and dword [ebp - 0x844], 0
jmp 0x46be9c
mov eax, dword [ebp - 0x844]
inc eax
mov dword [ebp - 0x844], eax
cmp dword [ebp - 0x844], 0x34a5
jge 0x46bf89
and dword [ebp - 0x4d4], 0
jmp 0x46bec2
mov eax, dword [ebp - 0x4d4]
inc eax
mov dword [ebp - 0x4d4], eax
cmp dword [ebp - 0x4d4], 0x56a6
jge 0x46bf84
and dword [ebp - 0x6d4], 0
jmp 0x46bee8
mov eax, dword [ebp - 0x6d4]
inc eax
mov dword [ebp - 0x6d4], eax
cmp dword [ebp - 0x6d4], 0x6589
jge 0x46bf7f
and dword [ebp - 0x4dc], 0
jmp 0x46bf0e
mov eax, dword [ebp - 0x4dc]
inc eax
mov dword [ebp - 0x4dc], eax
cmp dword [ebp - 0x4dc], 0x7c9e
jge 0x46bf7a
mov eax, dword [ebp - 0x844]
cdq
idiv dword [ebp - 0x4d4]
mov ecx, dword [ebp - 0x6d4]
sar edx, cl
mov ecx, dword [ebp - 0x4dc]
shl edx, cl
mov eax, edx
cdq
mov dword [ebp - 0x1900], eax
mov dword [ebp - 0x18fc], edx
push dword [ebp - 0x18fc]
push dword [ebp - 0x1900]
lea ecx, [ebp - 0x2a70]
call fcn.00401988
pop ecx
pop ecx
mov ecx, eax
call fcn.004382f5
push eax
call fcn.004b1347
pop ecx
lea ecx, [ebp - 0x2a70]
call fcn.004382eb
jmp 0x46bf01
jmp 0x46bedb
jmp 0x46beb5
jmp 0x46be8f
mov dword [ebp - 0x15c], 0x7cc42477
mov dword [ebp - 4], 0x1a
cmp dword [ebp - 0xc2c], 0x5a92
jge 0x46bfb2
push dword [ebp - 0x1b2c]
call fcn.004b1347
pop ecx
jmp 0x46bfce
or dword [ebp - 4], 0xffffffff
jmp 0x46bfd8
mov dword [ebp - 0x15c], 0
jmp 0x46bff1
mov eax, dword [ebp - 0x15c]
dec eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 0
jl 0x46c00d
push 0
push 0x418
push 0
call fcn.0045f96f
add esp, 0xc
jmp 0x46bfe4
mov dword [ebp - 0x15c], 0
jmp 0x46c026
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 0
jg 0x46c070
mov dword [ebp - 0x380], 0
mov dword [ebp - 0x380], 0
jmp 0x46c052
mov eax, dword [ebp - 0x380]
inc eax
mov dword [ebp - 0x380], eax
cmp dword [ebp - 0x380], 1
jge 0x46c06e
mov eax, dword [ebp - 0x380]
mov dword [ebp + eax*4 - 0x7cc], 0x24f20479
jmp 0x46c045
jmp 0x46c019
jmp 0x46be48
jmp 0x46c271
mov dword [ebp - 0xc34], 2
mov dword [ebp - 0x16ec], 0x21ca7bc4
cmp dword [ebp - 0xfc], 0
jne 0x46c141
cmp dword [ebp - 0x144], 0
je 0x46c116
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x7cc], 0x8d92
mov eax, 0x8d92
test eax, eax
jne 0x46c116
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x4e4], eax
mov eax, dword [ebp - 0x4e4]
sub eax, dword [ebp - 0xc34]
cmp eax, dword [ebp - 0xfc]
je 0x46c0ea
mov dword [ebp - 0x138c], 1
jmp 0x46c0f1
and dword [ebp - 0x138c], 0
cmp dword [ebp - 0x138c], 0xb7be
jl 0x46c106
cmp dword [ebp - 0x4e4], 0
jne 0x46c10f
cmp dword [ebp - 0xc34], 0
je 0x46c116
cmp dword [ebp - 0x16e4], 0
mov dword [ebp - 0x111c], 0xfffc
imul eax, dword [ebp - 0x111c], 6
cmp eax, dword [ebp - 0xfc]
je 0x46c141
mov eax, 0xac92d14b
test eax, eax
jne 0x46c141
and dword [ebp - 0x1c00], 0
jmp 0x46c14b
mov dword [ebp - 0x1c00], 1
mov dword [ebp - 0x16ec], 0xffffffff
push 0x51f
lea eax, [ebp - 0x4e4]
push eax
push 0
push 1
push 0x7de
call fcn.004601bc
add esp, 0x14
mov dword [ebp - 0xc3c], 0x68ba
mov dword [ebp - 0x1b38], 0xac6048
cmp dword [ebp - 0xc3c], 0x6a4b
jle 0x46c22c
and dword [ebp - 0x6dc], 0
jmp 0x46c1ac
mov eax, dword [ebp - 0x6dc]
inc eax
mov dword [ebp - 0x6dc], eax
cmp dword [ebp - 0x6dc], 0x1fde
jge 0x46c22c
and dword [ebp - 0x4ec], 0
jmp 0x46c1ce
mov eax, dword [ebp - 0x4ec]
inc eax
mov dword [ebp - 0x4ec], eax
cmp dword [ebp - 0x4ec], 0x6b16
jge 0x46c227
mov eax, dword [ebp - 0x6dc]
sub eax, dword [ebp - 0x4ec]
cdq
mov dword [ebp - 0x190c], eax
mov dword [ebp - 0x1908], edx
push dword [ebp - 0x1908]
push dword [ebp - 0x190c]
lea ecx, [ebp - 0x298c]
call fcn.00401988
pop ecx
pop ecx
mov ecx, eax
call fcn.004382f5
push eax
call fcn.004b1347
pop ecx
lea ecx, [ebp - 0x298c]
call fcn.004382eb
jmp 0x46c1c1
jmp 0x46c19f
mov dword [ebp - 4], 0x1c
cmp dword [ebp - 0xc3c], 0x671d
jge 0x46c24b
push dword [ebp - 0x1b38]
call fcn.004b1347
pop ecx
jmp 0x46c267
or dword [ebp - 4], 0xffffffff
jmp 0x46c271
jmp 0x46bd66
mov dword [ebp - 0x23d8], 0xfffffff6
mov dword [ebp - 0x2c0], 0x2ba39464
mov dword [ebp - 0xcc], 0
jmp 0x46c2a3
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 1
jge 0x46c2bf
mov eax, dword [ebp - 0xcc]
mov dword [ebp + eax*4 - 0x124], 0xffffffff
jmp 0x46c296
mov dword [ebp - 0xcc], 0
jmp 0x46c2d8
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 1
jge 0x46c2f4
mov eax, dword [ebp - 0xcc]
mov dword [ebp + eax*4 - 0x2650], 0x46c8c5ce
jmp 0x46c2cb
mov dword [ebp - 0x2c0], 0
jmp 0x46c30d
mov eax, dword [ebp - 0x2c0]
dec eax
mov dword [ebp - 0x2c0], eax
cmp dword [ebp - 0x2c0], 0
jl 0x46c6b4
mov dword [ebp - 0x88], 1
mov dword [ebp - 0x88], 0
jmp 0x46c33d
mov eax, dword [ebp - 0x88]
dec eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
jl 0x46c673
mov dword [ebp - 0x884], 0xffffffff
mov dword [ebp - 0xc44], 0x5189d9e6
mov dword [ebp - 0x1394], 0
mov dword [ebp - 0xc74], 9
mov dword [ebp - 0x884], 0
jmp 0x46c38b
mov eax, dword [ebp - 0x884]
dec eax
mov dword [ebp - 0x884], eax
cmp dword [ebp - 0x884], 0
jl 0x46c66e
mov dword [ebp - 0x4f4], 0x622a149c
mov byte [ebp - 0x239], 0
movzx eax, byte [ebp - 0x239]
test eax, eax
je 0x46c3d6
push 0x656
push 1
push 0
push 1
push 0x5d52
push 0x60f0
push 0x4f90
call fcn.0045f86d
add esp, 0x1c
mov dword [ebp - 0x4f4], 0
jmp 0x46c3ef
mov eax, dword [ebp - 0x4f4]
inc eax
mov dword [ebp - 0x4f4], eax
cmp dword [ebp - 0x4f4], 0
jg 0x46c669
mov dword [ebp - 0x16c], 0x371247ad
mov dword [ebp - 0xc4c], 0x5dbc2a41
mov dword [ebp - 0x16c], 0
jmp 0x46c429
cmp dword [ebp - 0x16c], 0
jg 0x46c648
mov dword [ebp - 0xc6c], 0
mov eax, dword [ebp - 0x88]
cmp dword [ebp + eax*4 - 0x124], 0
je 0x46c455
jmp 0x46c648
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x124]
cmp dword [ebp - 0x88], eax
jne 0x46c476
mov dword [ebp - 0xc64], 1
jmp 0x46c47d
and dword [ebp - 0xc64], 0
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0x23e0], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x124], 0x8862
jge 0x46c4ae
cmp dword [ebp - 0x16c], 0
jne 0x46c4ae
and dword [ebp - 0x15c0], 0
jmp 0x46c4b8
mov dword [ebp - 0x15c0], 1
mov eax, dword [ebp - 0x15c0]
mov dword [ebp - 0xc44], eax
cmp dword [ebp - 0xc44], 0xfff8
jbe 0x46c4dc
mov dword [ebp - 0x1124], 1
jmp 0x46c4e3
and dword [ebp - 0x1124], 0
mov eax, dword [ebp - 0x1124]
mov dword [ebp - 0xc4c], eax
mov eax, dword [ebp - 0xc4c]
mov dword [ebp - 0x1394], eax
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0x1394], eax
jge 0x46c515
mov byte [ebp - 0x1e1], 0
movzx eax, byte [ebp - 0x1e1]
test eax, eax
je 0x46c664
push 0
push 0
call dword [0xade37c]
jmp 0x46c3e2
jmp 0x46c37e
jmp 0x46c330
mov byte [ebp - 0x23b], 0
movzx eax, byte [ebp - 0x23b]
test eax, eax
je 0x46c6af
push 0x6e89
push 0
push 0x3344
push 0x4765
push 0x6bb2
push 0
push 0x3713
push 0x1a3b
call fcn.004626f3
add esp, 0x20
jmp 0x46c300
mov dword [ebp - 0x2550], 0xba7c
mov dword [ebp - 0x330], 0x9b546158
mov dword [ebp - 0xc7c], 0xd3b3
mov dword [ebp - 0x190], 0xffffffff
mov eax, dword [ebp - 0xc7c]
mov dword [ebp - 0x23e8], eax
mov eax, dword [ebp - 0x330]
mov dword [ebp - 0x26d0], eax
mov eax, dword [ebp - 0x190]
add eax, dword [ebp - 0x330]
mov dword [ebp - 0x190], eax
mov eax, dword [ebp - 0x330]
mov ecx, dword [ebp - 0xc7c]
add ecx, dword [ebp - 0x330]
add eax, ecx
cmp eax, 1
jl 0x46c7ad
mov dword [ebp - 0x190], 0
jmp 0x46c73c
mov eax, dword [ebp - 0x190]
dec eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 0xfffffff3
je 0x46c7ab
mov dword [ebp - 0x1678], 1
mov byte [ebp - 0x1e9], 0
movzx eax, byte [ebp - 0x1e9]
test eax, eax
je 0x46c77e
push 1
push 0
push 0x3d
push 0x4e11
push 0x784b
push 0x3509
call fcn.00464a01
add esp, 0x18
push 0x4801
lea eax, [ebp - 0x1678]
push eax
lea eax, [ebp - 0x330]
push eax
push 0
push 0x1343
push 0
push 1
push 0x5bc5
call fcn.0045fa15
add esp, 0x20
jmp 0x46c72f
jmp 0x46c7f9
mov byte [ebp - 0x23d], 0
movzx eax, byte [ebp - 0x23d]
test eax, eax
je 0x46c7e6
push 1
push 0x47cd
push 1
push 0x316a
push 0x7065
push 0xe3d
push 0x38e5
push 0
call fcn.00465ebe
add esp, 0x20
push 0
push 1
lea eax, [ebp - 0x190]
push eax
call fcn.0045a1f8
add esp, 0xc
mov dword [ebp - 0x156c], 0x69de
mov dword [ebp - 0x1c08], 0xac6090
cmp dword [ebp - 0x156c], 0x6b28
jle 0x46c91d
and dword [ebp - 0x6e4], 0
jmp 0x46c833
mov eax, dword [ebp - 0x6e4]
inc eax
mov dword [ebp - 0x6e4], eax
cmp dword [ebp - 0x6e4], 0x5ae1
jge 0x46c91d
and dword [ebp - 0x4fc], 0
jmp 0x46c859
mov eax, dword [ebp - 0x4fc]
inc eax
mov dword [ebp - 0x4fc], eax
cmp dword [ebp - 0x4fc], 0x67fa
jge 0x46c918
and dword [ebp - 0x7d4], 0
jmp 0x46c87f
mov eax, dword [ebp - 0x7d4]
inc eax
mov dword [ebp - 0x7d4], eax
cmp dword [ebp - 0x7d4], 0x7475
jge 0x46c913
and dword [ebp - 0x504], 0
jmp 0x46c8a5
mov eax, dword [ebp - 0x504]
inc eax
mov dword [ebp - 0x504], eax
cmp dword [ebp - 0x504], 0x1a1f
jge 0x46c90e
mov eax, dword [ebp - 0x6e4]
mov ecx, dword [ebp - 0x4fc]
sar eax, cl
mov ecx, dword [ebp - 0x7d4]
sub ecx, dword [ebp - 0x504]
shl eax, cl
cdq
mov dword [ebp - 0x1918], eax
mov dword [ebp - 0x1914], edx
push dword [ebp - 0x1914]
push dword [ebp - 0x1918]
lea ecx, [ebp - 0x2b00]
call fcn.00401988
pop ecx
pop ecx
mov ecx, eax
call fcn.004382f5
push eax
call fcn.004b1347
pop ecx
lea ecx, [ebp - 0x2b00]
call fcn.004382eb
jmp 0x46c898
jmp 0x46c872
jmp 0x46c84c
jmp 0x46c826
mov dword [ebp - 0x23f0], 0xe99e855c
mov dword [ebp - 4], 0x1e
cmp dword [ebp - 0x156c], 0x699b
jge 0x46c946
push dword [ebp - 0x1c08]
call fcn.004b1347
pop ecx
jmp 0x46c962
or dword [ebp - 4], 0xffffffff
jmp 0x46c96c
mov dword [ebp - 0x6ec], 0x48bbca63
mov byte [ebp - 0x23f], 0
movzx eax, byte [ebp - 0x23f]
test eax, eax
je 0x46c9aa
push 0x70ca
push 0
push 1
push 0
push 0x1431
push 0x2354
push 0x79b0
call fcn.0045f86d
add esp, 0x1c
mov dword [ebp - 0x6ec], 0
jmp 0x46c9c3
mov eax, dword [ebp - 0x6ec]
dec eax
mov dword [ebp - 0x6ec], eax
cmp dword [ebp - 0x6ec], 0xffffffe6
jl 0x46ca32
mov byte [ebp - 0x1ec], 0
movzx eax, byte [ebp - 0x1ec]
test eax, eax
je 0x46c9ed
push 0x1381
push 0
push 0
call dword [0xade33c]
mov byte [ebp - 0x216], 0
movzx eax, byte [ebp - 0x216]
test eax, eax
je 0x46ca30
push 0x20f8
push 0
push 1
push 0x485c
push 0
push 0x64de
push 0x78eb
push 0x5961
push 0x46e8
push 0x33ca
call fcn.00461f6d
add esp, 0x28
jmp 0x46c9b6
mov dword [ebp - 0x1a0], 0
mov dword [ebp - 0x50c], 0
jmp 0x46ca55
mov eax, dword [ebp - 0x50c]
inc eax
mov dword [ebp - 0x50c], eax
cmp dword [ebp - 0x50c], 3
jge 0x46ca71
mov eax, dword [ebp - 0x50c]
mov dword [ebp + eax*4 - 0x272c], 0xfffffffe
jmp 0x46ca48
mov dword [ebp - 0x1a0], 0
jmp 0x46ca8a
cmp dword [ebp - 0x1a0], 0x14
jne 0x46cc35
mov dword [ebp - 0x198], 0
mov dword [ebp - 0x1704], 0xae4f9dbc
mov dword [ebp - 0x198], 2
jmp 0x46cac4
push 0
push 0
lea eax, [ebp - 0x1a0]
push eax
call fcn.004645df
add esp, 0xc
mov dword [ebp - 0xc84], 0x7332
mov dword [ebp - 0x1c10], 0xac60d8
cmp dword [ebp - 0xc84], 0x76d4
jle 0x46cd03
mov eax, dword [ebp - 0x17f8]
mov dword [ebp - 0x1800], eax
mov eax, dword [ebp - 0x1800]
mov dword [ebp - 0x65c], eax
mov eax, dword [ebp - 0x65c]
mov dword [eax], 2
jmp 0x47c7be
mov eax, dword [ebp - 0x65c]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x65c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x65c]
cmp dword [eax], 0
jl 0x47c7df
mov dword [ebp - 0x1808], 0xec5e
mov dword [ebp - 0x1808], 0
jmp 0x47c7ad
jmp 0x47c7ef
push 0x5d11
push 0
call fcn.00465e93
pop ecx
pop ecx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret