Function at 0x468180
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x4340
call fcn.004a3670
push esi
push edi
push 4
lea ecx, [ebp - 0x2f98]
call fcn.00432821
push 3
lea ecx, [ebp - 0x354c]
call fcn.00432821
mov dword [ebp - 0x98], 0
jmp 0x4681c2
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 4
jge 0x4681e4
push dword [ebp - 0x98]
lea ecx, [ebp - 0x2f98]
call fcn.0043290f
mov dword [eax], 0xf94
jmp 0x4681b5
mov dword [ebp - 0x98], 0
jmp 0x4681fd
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 3
jge 0x46821f
push dword [ebp - 0x98]
lea ecx, [ebp - 0x354c]
call fcn.0043290f
mov dword [eax], 0x1accbad8
jmp 0x4681f0
mov dword [ebp - 0x98], 0
jmp 0x468238
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 2
jge 0x468254
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0x24d0], 0
jmp 0x46822b
push 3
lea ecx, [ebp - 0x2f98]
call fcn.0043290f
cmp dword [eax], 0x42a43d95
je 0x468275
mov dword [ebp - 0x1290], 1
jmp 0x46827c
and dword [ebp - 0x1290], 0
push 1
lea ecx, [ebp - 0x354c]
call fcn.0043290f
mov ecx, dword [ebp - 0x1290]
mov dword [eax], ecx
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x24d0], 0
jmp 0x4682bf
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x24d0]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x24d0], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x24d0], 3
jg 0x4682f0
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x24d0]
lea ecx, [ebp - 0x2f98]
call fcn.0043290f
cmp dword [eax], 0
je 0x4682ee
jmp 0x4682f0
jmp 0x4682a4
lea ecx, [ebp - 0x354c]
call fcn.004328f3
lea ecx, [ebp - 0x2f98]
call fcn.004328f3
mov dword [ebp - 0x578], 8
mov dword [ebp - 0x27f0], 1
mov dword [ebp - 0x578], 0
jmp 0x468333
mov eax, dword [ebp - 0x578]
inc eax
mov dword [ebp - 0x578], eax
cmp dword [ebp - 0x578], 0xb
jl 0x4685e7
mov dword [ebp - 0x2c0], 0x97eede0b
mov dword [ebp - 0x5e8], 0
mov dword [ebp - 0x2c0], 0
jmp 0x46836d
mov eax, dword [ebp - 0x2c0]
inc eax
mov dword [ebp - 0x2c0], eax
cmp dword [ebp - 0x2c0], 0xa
jg 0x4685e2
mov dword [ebp - 0x570], 0xc4c8d3c8
mov dword [ebp - 0x570], 3
jmp 0x46839d
mov eax, dword [ebp - 0x570]
dec eax
mov dword [ebp - 0x570], eax
cmp dword [ebp - 0x570], 0xfffffffa
jg 0x4685dd
mov dword [ebp - 0x6a0], 0
jmp 0x4683c3
mov eax, dword [ebp - 0x6a0]
inc eax
mov dword [ebp - 0x6a0], eax
cmp dword [ebp - 0x6a0], 4
jge 0x4683df
mov eax, dword [ebp - 0x6a0]
mov dword [ebp + eax*4 - 0x3630], 0xe32cf415
jmp 0x4683b6
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x3630], 0xed6b
jge 0x4683fe
mov dword [ebp - 0x2514], 1
jmp 0x468405
and dword [ebp - 0x2514], 0
cmp dword [ebp - 0x2c0], 0
jne 0x468420
cmp dword [ebp - 0x2c0], 0
jne 0x468420
and dword [ebp - 0x24a4], 0
jmp 0x46842a
mov dword [ebp - 0x24a4], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x24a4]
sub ecx, dword [ebp + eax - 0x3630]
sub ecx, dword [ebp - 0x2c0]
sub ecx, 0xb43d
cmp ecx, 0xfffffffb
jg 0x46845e
xor eax, eax
je 0x46845e
mov dword [ebp - 0x24ac], 1
jmp 0x468465
and dword [ebp - 0x24ac], 0
mov eax, dword [ebp - 0x570]
cmp dword [ebp - 0x24ac], eax
jg 0x46847f
mov dword [ebp - 0x24b4], 1
jmp 0x468486
and dword [ebp - 0x24b4], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x3630]
cmp dword [ebp - 0x24b4], eax
je 0x4684a6
mov dword [ebp - 0x24bc], 1
jmp 0x4684ad
and dword [ebp - 0x24bc], 0
mov eax, dword [ebp - 0x2c0]
cmp dword [ebp - 0x24bc], eax
jl 0x4684c7
mov dword [ebp - 0x24c4], 1
jmp 0x4684ce
and dword [ebp - 0x24c4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3630]
cmp dword [ebp - 0x24c4], eax
je 0x4684ef
mov dword [ebp - 0x251c], 1
jmp 0x4684f6
and dword [ebp - 0x251c], 0
mov eax, dword [ebp - 0x2514]
sub eax, dword [ebp - 0x251c]
mov dword [ebp - 0x5e8], eax
mov dword [ebp - 0x5e8], 0
jmp 0x468521
mov eax, dword [ebp - 0x5e8]
inc eax
mov dword [ebp - 0x5e8], eax
cmp dword [ebp - 0x5e8], 0x16
jne 0x4685d8
mov dword [ebp - 0x888], 8
mov byte [ebp - 0x3e9], 0
movzx eax, byte [ebp - 0x3e9]
test eax, eax
je 0x468552
push 0
call dword [0xaa9240]
mov dword [ebp - 0x888], 0
jmp 0x46856b
mov eax, dword [ebp - 0x888]
inc eax
mov dword [ebp - 0x888], eax
cmp dword [ebp - 0x888], 3
jg 0x4685d3
mov dword [ebp - 0x6a8], 5
mov dword [ebp - 0x6a8], 0
jmp 0x468597
mov eax, dword [ebp - 0x6a8]
inc eax
mov dword [ebp - 0x6a8], eax
cmp dword [ebp - 0x6a8], 3
jg 0x4685d1
mov byte [ebp - 0x352], 0
movzx eax, byte [ebp - 0x352]
test eax, eax
je 0x4685cf
push 0
push 0x23a1
push 0
call dword [0xaa93e0]
push eax
call dword [0xaa93d4]
push eax
call dword [0xaa9070]
jmp 0x46858a
jmp 0x46855e
jmp 0x468514
jmp 0x468390
jmp 0x468360
jmp 0x468326
mov eax, dword [ebp - 0x578]
mov dword [ebp - 0x27f0], eax
push 4
lea ecx, [ebp - 0x2fd4]
call fcn.00432821
push 2
lea ecx, [ebp - 0x33cc]
call fcn.00432821
mov dword [ebp - 0x368], 0xfffffffe
mov dword [ebp - 0x376c], 0xe6d
mov dword [ebp - 0x97c], 0
jmp 0x46863a
mov eax, dword [ebp - 0x97c]
inc eax
mov dword [ebp - 0x97c], eax
cmp dword [ebp - 0x97c], 2
jge 0x46865c
push dword [ebp - 0x97c]
lea ecx, [ebp - 0x33cc]
call fcn.0043290f
mov dword [eax], 0xac64a684
jmp 0x46862d
mov dword [ebp - 0x368], 0
jmp 0x468675
mov eax, dword [ebp - 0x368]
inc eax
mov dword [ebp - 0x368], eax
cmp dword [ebp - 0x368], 2
jge 0x468697
push dword [ebp - 0x368]
lea ecx, [ebp - 0x33cc]
call fcn.0043290f
mov dword [eax], 0xb871c7bf
jmp 0x468668
mov eax, dword [ebp - 0x368]
mov dword [ebp - 0x368], eax
lea ecx, [ebp - 0x33cc]
call fcn.004328f3
push 3
lea ecx, [ebp - 0x33e4]
call fcn.00432821
mov dword [ebp - 0x6b0], 0
jmp 0x4686d4
mov eax, dword [ebp - 0x6b0]
inc eax
mov dword [ebp - 0x6b0], eax
cmp dword [ebp - 0x6b0], 2
jge 0x4686f0
mov eax, dword [ebp - 0x6b0]
mov dword [ebp + eax*4 - 0x4108], 7
jmp 0x4686c7
mov byte [ebp - 0x459], 0
movzx eax, byte [ebp - 0x459]
test eax, eax
je 0x46870c
push 0
push 0
call dword [0xaa921c]
mov byte [ebp - 0x354], 0
movzx eax, byte [ebp - 0x354]
test eax, eax
je 0x468732
push 0x19ac
push 0
push 0x13ce
push 0
call dword [0xaa93c8]
mov dword [ebp - 0x370], 0xffffffff
mov dword [ebp - 0x5ec], 1
mov dword [ebp - 0x2554], 0xc6548aa
mov dword [ebp - 0x2b24], 0
mov dword [ebp - 0x890], 0
jmp 0x468773
mov eax, dword [ebp - 0x890]
inc eax
mov dword [ebp - 0x890], eax
cmp dword [ebp - 0x890], 1
jge 0x46878f
mov eax, dword [ebp - 0x890]
mov dword [ebp + eax*4 - 0xc30], 0xffffffff
jmp 0x468766
mov dword [ebp - 0x370], 0
jmp 0x4687a8
mov eax, dword [ebp - 0x370]
dec eax
mov dword [ebp - 0x370], eax
cmp dword [ebp - 0x370], 0
jl 0x4687bd
mov dword [ebp - 0x5ec], 0xffffffff
jmp 0x46879b
cmp dword [ebp - 0x5ec], 0xedf6
je 0x4687d5
mov dword [ebp - 0x2524], 1
jmp 0x4687dc
and dword [ebp - 0x2524], 0
imul eax, dword [ebp - 0x2524], 0
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0xc30]
jge 0x4687fe
mov dword [ebp - 0x252c], 1
jmp 0x468805
and dword [ebp - 0x252c], 0
cmp dword [ebp - 0x252c], 0xe6aa1654
jbe 0x46881d
mov dword [ebp - 0x2534], 1
jmp 0x468824
and dword [ebp - 0x2534], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc30]
imul eax, dword [ebp - 0x2534]
cmp eax, 1
jbe 0x468849
mov dword [ebp - 0x253c], 1
jmp 0x468850
and dword [ebp - 0x253c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc30]
add eax, dword [ebp - 0x253c]
cmp eax, 0x47d2
jl 0x468876
mov dword [ebp - 0x2544], 1
jmp 0x46887d
and dword [ebp - 0x2544], 0
mov eax, dword [ebp - 0x370]
add eax, dword [ebp - 0x2544]
neg eax
cmp eax, dword [ebp - 0x5ec]
jge 0x46889f
mov dword [ebp - 0x254c], 1
jmp 0x4688a6
and dword [ebp - 0x254c], 0
mov eax, dword [ebp - 0x254c]
sub eax, dword [ebp - 0x2554]
mov dword [ebp - 0x370], eax
mov eax, dword [ebp - 0x2554]
cmp dword [ebp - 0x370], eax
jle 0x4688d2
mov dword [ebp - 0x255c], 1
jmp 0x4688d9
and dword [ebp - 0x255c], 0
cmp dword [ebp - 0x255c], 0xa5d7
jg 0x4688f1
mov dword [ebp - 0x2564], 1
jmp 0x4688f8
and dword [ebp - 0x2564], 0
mov eax, dword [ebp - 0x2564]
mov dword [ebp - 0x5ec], eax
mov eax, dword [ebp - 0x5ec]
mov dword [ebp - 0x2b24], eax
mov dword [ebp - 0x4c], 0
jmp 0x468920
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 4
jge 0x46893c
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x2fd4]
call fcn.0043290f
mov dword [eax], 0xf94
jmp 0x468919
push 1
lea ecx, [ebp - 0x26cc]
call fcn.00432821
mov dword [ebp - 0x2b2c], 1
mov dword [ebp - 0x2b34], 0
mov dword [ebp - 0x6b8], 0
jmp 0x468976
mov eax, dword [ebp - 0x6b8]
inc eax
mov dword [ebp - 0x6b8], eax
cmp dword [ebp - 0x6b8], 1
jge 0x468998
push dword [ebp - 0x6b8]
lea ecx, [ebp - 0x26cc]
call fcn.0043290f
mov dword [eax], 0x3ae35568
jmp 0x468969
push 0
lea ecx, [ebp - 0x26cc]
call fcn.0043290f
mov dword [eax], 0xfffffffa
jmp 0x4689d1
push 0
lea ecx, [ebp - 0x26cc]
call fcn.0043290f
mov dword [ebp - 0x256c], eax
mov eax, dword [ebp - 0x256c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x256c]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x26cc]
call fcn.0043290f
cmp dword [eax], 3
jne 0x468a79
mov dword [ebp - 0x980], 0xd2e8588d
mov eax, dword [ebp - 0x980]
cmp dword [ebp - 0x980], eax
jl 0x468a4d
cmp dword [ebp - 0x980], 0
jne 0x468a23
push 0
lea ecx, [ebp - 0x26cc]
call fcn.0043290f
cmp dword [eax], 0
jne 0x468a23
and dword [ebp - 0x2574], 0
jmp 0x468a2d
mov dword [ebp - 0x2574], 1
push 0
lea ecx, [ebp - 0x26cc]
call fcn.0043290f
mov eax, dword [eax]
cmp eax, dword [ebp - 0x2574]
jne 0x468a4d
and dword [ebp - 0x257c], 0
jmp 0x468a57
mov dword [ebp - 0x257c], 1
mov eax, dword [ebp - 0x257c]
sub eax, dword [ebp - 0x2b2c]
mov dword [ebp - 0x2b34], eax
cmp dword [ebp - 0x980], 0
je 0x468a74
jmp 0x468a79
jmp 0x4689ad
lea ecx, [ebp - 0x26cc]
call fcn.004328f3
mov dword [ebp - 0x4c], 0
jmp 0x468a94
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 3
jge 0x468ab0
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x33e4]
call fcn.0043290f
mov dword [eax], 0x1accbad8
jmp 0x468a8d
mov dword [ebp - 0x4c], 0
jmp 0x468ac0
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 2
jge 0x468ad6
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x24e8], 0
jmp 0x468ab9
mov dword [ebp - 0x378], 0xed15
mov dword [ebp - 0x25ac], 0xfffffffc
mov dword [ebp - 0x2b3c], 0xffffffff
mov dword [ebp - 0x3b60], 0x329ef4a0
mov eax, dword [ebp - 0x378]
mov dword [ebp - 0x3e1c], eax
cmp dword [ebp - 0x378], 0
je 0x468b28
cmp dword [ebp - 0x378], 0
je 0x468b28
mov dword [ebp - 0x2584], 1
jmp 0x468b2f
and dword [ebp - 0x2584], 0
mov eax, dword [ebp - 0x378]
cmp dword [ebp - 0x378], eax
jne 0x468b52
cmp dword [ebp - 0x378], 0
je 0x468b52
mov dword [ebp - 0x258c], 1
jmp 0x468b59
and dword [ebp - 0x258c], 0
mov eax, dword [ebp - 0x2584]
cmp eax, dword [ebp - 0x258c]
je 0x468b73
mov dword [ebp - 0x2594], 1
jmp 0x468b7a
and dword [ebp - 0x2594], 0
mov eax, dword [ebp - 0x2594]
add eax, 7
cmp eax, dword [ebp - 0x378]
jne 0x468b97
mov dword [ebp - 0x259c], 1
jmp 0x468b9e
and dword [ebp - 0x259c], 0
mov eax, dword [ebp - 0x259c]
dec eax
cmp eax, 0xfffd
jae 0x468bb8
mov dword [ebp - 0x25a4], 1
jmp 0x468bbf
and dword [ebp - 0x25a4], 0
mov eax, dword [ebp - 0x25a4]
mov dword [ebp - 0x25ac], eax
cmp dword [ebp - 0x25ac], 0x7341
je 0x468be3
mov dword [ebp - 0x25b4], 1
jmp 0x468bea
and dword [ebp - 0x25b4], 0
cmp dword [ebp - 0x25b4], 0xfffffffd
jl 0x468bff
mov dword [ebp - 0x25bc], 1
jmp 0x468c06
and dword [ebp - 0x25bc], 0
mov eax, dword [ebp - 0x25bc]
mov dword [ebp - 0x2b3c], eax
mov byte [ebp - 0x3d9], 0
movzx eax, byte [ebp - 0x3d9]
test eax, eax
je 0x468c2c
push 0
call dword [0xaa9224]
push 3
lea ecx, [ebp - 0x2fd4]
call fcn.0043290f
cmp dword [eax], 0x42a43d95
je 0x468c4d
mov dword [ebp - 0x25c4], 1
jmp 0x468c54
and dword [ebp - 0x25c4], 0
push 1
lea ecx, [ebp - 0x33e4]
call fcn.0043290f
mov ecx, dword [ebp - 0x25c4]
mov dword [eax], ecx
mov dword [ebp - 0x25f0], 0x4e1265ab
mov dword [ebp - 0x2b44], 0
mov dword [ebp - 0x3b68], 0xe4d9
mov dword [ebp - 0x6c0], 0
jmp 0x468ca0
mov eax, dword [ebp - 0x6c0]
inc eax
mov dword [ebp - 0x6c0], eax
cmp dword [ebp - 0x6c0], 1
jge 0x468cbc
mov eax, dword [ebp - 0x6c0]
mov dword [ebp + eax*4 - 0x25cc], 0
jmp 0x468c93
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x25cc]
mov dword [ebp - 0x25f0], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x25cc]
cmp dword [ebp - 0x25f0], eax
jge 0x468d2e
mov dword [ebp - 0x898], 0
jmp 0x468cfd
mov eax, dword [ebp - 0x898]
inc eax
mov dword [ebp - 0x898], eax
cmp dword [ebp - 0x898], 1
jge 0x468d19
mov eax, dword [ebp - 0x898]
mov dword [ebp + eax*4 - 0x2b4c], 1
jmp 0x468cf0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2b44]
mov dword [ebp + eax - 0x2b4c], ecx
jmp 0x468d4c
mov byte [ebp - 0x356], 0
movzx eax, byte [ebp - 0x356]
test eax, eax
je 0x468d4c
push 0
push 0
push 0
call dword [0xaa9024]
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x24e8], 0
jmp 0x468d7a
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x24e8]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x24e8], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x24e8], 3
jg 0x469413
mov dword [ebp - 0x144], 0x91a049fe
mov dword [ebp - 0x2680], 0xea1b1489
mov dword [ebp - 0x380], 0x6fe54384
mov dword [ebp - 0x144], 0
jmp 0x468dc5
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 0x1a
jl 0x469166
push 1
lea ecx, [ebp - 0xa64]
call fcn.00432821
mov dword [ebp - 0xe00], 0x19791169
push 1
lea ecx, [ebp - 0x2fa4]
call fcn.00432821
mov dword [ebp - 0x208], 0
jmp 0x468e0f
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 1
jge 0x468e31
push dword [ebp - 0x208]
lea ecx, [ebp - 0xa64]
call fcn.0043290f
mov dword [eax], 0x22124f84
jmp 0x468e02
mov dword [ebp - 0x208], 0
jmp 0x468e4a
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 1
jge 0x468e6c
push dword [ebp - 0x208]
lea ecx, [ebp - 0x2fa4]
call fcn.0043290f
mov dword [eax], 0xf75df156
jmp 0x468e3d
push 0
lea ecx, [ebp - 0xa64]
call fcn.0043290f
and dword [eax], 0
jmp 0x468ea2
push 0
lea ecx, [ebp - 0xa64]
call fcn.0043290f
mov dword [ebp - 0x25f8], eax
mov eax, dword [ebp - 0x25f8]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x25f8]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0xa64]
call fcn.0043290f
cmp dword [eax], 0x19
jne 0x46914b
mov dword [ebp - 0xe08], 0
mov dword [ebp - 0x580], 0xfffffffa
mov dword [ebp - 0xaf8], 0xffffffff
mov dword [ebp - 0x2b6c], 0xaabdc9a8
push 0
lea ecx, [ebp - 0xa64]
call fcn.0043290f
cmp dword [eax], 0
je 0x468f10
push 0
lea ecx, [ebp - 0xa64]
call fcn.0043290f
cmp dword [eax], 0
je 0x468f10
mov dword [ebp - 0x2660], 1
jmp 0x468f17
and dword [ebp - 0x2660], 0
mov eax, dword [ebp - 0x580]
cmp dword [ebp - 0x2660], eax
jne 0x468f31
mov dword [ebp - 0x2b54], 1
jmp 0x468f38
and dword [ebp - 0x2b54], 0
push 0
lea ecx, [ebp - 0xa64]
call fcn.0043290f
mov esi, dword [ebp - 0x580]
push 0
lea ecx, [ebp - 0xa64]
call fcn.0043290f
imul esi, dword [eax]
mov dword [ebp - 0xaf8], esi
cmp dword [ebp - 0xaf8], 0
jne 0x468f76
mov dword [ebp - 0x2668], 1
jmp 0x468f7d
and dword [ebp - 0x2668], 0
push 0
lea ecx, [ebp - 0xa64]
call fcn.0043290f
mov eax, dword [eax]
cmp eax, dword [ebp - 0x2668]
jge 0x468fa0
mov dword [ebp - 0x2670], 1
jmp 0x468fa7
and dword [ebp - 0x2670], 0
cmp dword [ebp - 0x2670], 0
jb 0x468fbe
or eax, 0xffffffff
jne 0x468fbe
and dword [ebp - 0x2678], 0
jmp 0x468fc8
mov dword [ebp - 0x2678], 1
mov eax, dword [ebp - 0x2678]
sub eax, dword [ebp - 0x144]
mov dword [ebp - 0x2680], eax
mov esi, dword [ebp - 0x2680]
push 0
lea ecx, [ebp - 0xa64]
call fcn.0043290f
cmp esi, dword [eax]
je 0x468ffd
mov dword [ebp - 0x25d4], 1
jmp 0x469004
and dword [ebp - 0x25d4], 0
cmp dword [ebp - 0x25d4], 1
jle 0x469019
mov dword [ebp - 0x2088], 1
jmp 0x469020
and dword [ebp - 0x2088], 0
mov eax, dword [ebp - 0x2088]
mov dword [ebp - 0xe00], eax
mov esi, dword [ebp - 0x144]
mov edi, dword [ebp - 0xe00]
push 0
lea ecx, [ebp - 0xa64]
call fcn.0043290f
sub edi, dword [eax]
push 0
lea ecx, [ebp - 0xa64]
call fcn.0043290f
imul edi, dword [eax]
cmp edi, esi
jne 0x469067
mov dword [ebp - 0x2090], 1
jmp 0x46906e
and dword [ebp - 0x2090], 0
cmp dword [ebp - 0x2090], 0x85c2f4fe
je 0x469086
mov dword [ebp - 0x2b5c], 1
jmp 0x46908d
and dword [ebp - 0x2b5c], 0
push 0
lea ecx, [ebp - 0x2fa4]
call fcn.0043290f
mov eax, dword [ebp - 0x580]
cmp dword [ebp - 0xaf8], eax
jge 0x4690b4
mov dword [ebp - 0x2b64], 1
jmp 0x4690bb
and dword [ebp - 0x2b64], 0
mov eax, dword [ebp - 0x580]
mov dword [ebp - 0x3f24], eax
mov dword [ebp - 0xe08], 0x591b68de
push 0
lea ecx, [ebp - 0x2fa4]
call fcn.0043290f
mov eax, dword [eax]
mov dword [ebp - 0x380], eax
mov eax, dword [ebp - 0x380]
cmp dword [ebp - 0xe08], eax
jl 0x469109
cmp dword [ebp - 0x380], 0
je 0x469109
mov dword [ebp - 0x2098], 1
jmp 0x469110
and dword [ebp - 0x2098], 0
cmp dword [ebp - 0x2098], 0x53d42374
jge 0x469128
mov dword [ebp - 0xe10], 1
jmp 0x46912f
and dword [ebp - 0xe10], 0
mov eax, dword [ebp - 0xe10]
sub eax, 0x518db068
sub eax, dword [ebp - 0x580]
mov dword [ebp - 0x2b6c], eax
jmp 0x468e7e
lea ecx, [ebp - 0x2fa4]
call fcn.004328f3
lea ecx, [ebp - 0xa64]
call fcn.004328f3
jmp 0x468db8
mov dword [ebp - 0x144], 0
jmp 0x46917f
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 0x13
jle 0x469278
mov dword [ebp - 0x6c8], 0
jmp 0x4691a5
mov eax, dword [ebp - 0x6c8]
inc eax
mov dword [ebp - 0x6c8], eax
cmp dword [ebp - 0x6c8], 2
jge 0x4691c1
mov eax, dword [ebp - 0x6c8]
mov dword [ebp + eax*4 - 0x3780], 1
jmp 0x469198
mov dword [ebp - 0x380], 0
jmp 0x4691da
mov eax, dword [ebp - 0x380]
dec eax
mov dword [ebp - 0x380], eax
cmp dword [ebp - 0x380], 0xfffffff5
jl 0x469273
mov dword [ebp - 0xa18], 0
jmp 0x469200
mov eax, dword [ebp - 0xa18]
inc eax
mov dword [ebp - 0xa18], eax
cmp dword [ebp - 0xa18], 2
jge 0x46921c
mov eax, dword [ebp - 0xa18]
mov dword [ebp + eax*4 - 0x3774], 0
jmp 0x4691f3
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x3774], 0
ja 0x469238
mov dword [ebp - 0x20a0], 1
jmp 0x46923f
and dword [ebp - 0x20a0], 0
cmp dword [ebp - 0x20a0], 0xfffffff7
jne 0x469254
mov dword [ebp - 0xe18], 1
jmp 0x46925b
and dword [ebp - 0xe18], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xe18]
mov dword [ebp + eax - 0x3780], ecx
jmp 0x4691cd
jmp 0x469172
push 4
lea ecx, [ebp - 0x2fbc]
call fcn.00432821
push 3
lea ecx, [ebp - 0x34d4]
call fcn.00432821
mov dword [ebp - 0xa0], 0
jmp 0x4692ab
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 4
jge 0x4692cd
push dword [ebp - 0xa0]
lea ecx, [ebp - 0x2fbc]
call fcn.0043290f
mov dword [eax], 0xf94
jmp 0x46929e
mov dword [ebp - 0xa0], 0
jmp 0x4692e6
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 3
jge 0x469308
push dword [ebp - 0xa0]
lea ecx, [ebp - 0x34d4]
call fcn.0043290f
mov dword [eax], 0x1accbad8
jmp 0x4692d9
mov dword [ebp - 0xa0], 0
jmp 0x469321
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 2
jge 0x46933d
mov eax, dword [ebp - 0xa0]
mov dword [ebp + eax*4 - 0x24dc], 0
jmp 0x469314
push 3
lea ecx, [ebp - 0x2fbc]
call fcn.0043290f
cmp dword [eax], 0x42a43d95
je 0x46935e
mov dword [ebp - 0x20a8], 1
jmp 0x469365
and dword [ebp - 0x20a8], 0
push 1
lea ecx, [ebp - 0x34d4]
call fcn.0043290f
mov ecx, dword [ebp - 0x20a8]
mov dword [eax], ecx
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x24dc], 0
jmp 0x4693a8
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x24dc]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x24dc], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x24dc], 3
jg 0x4693d9
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x24dc]
lea ecx, [ebp - 0x2fbc]
call fcn.0043290f
cmp dword [eax], 0
je 0x4693d7
jmp 0x4693d9
jmp 0x46938d
lea ecx, [ebp - 0x34d4]
call fcn.004328f3
lea ecx, [ebp - 0x2fbc]
call fcn.004328f3
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x24e8]
lea ecx, [ebp - 0x2fd4]
call fcn.0043290f
cmp dword [eax], 0
je 0x46940e
jmp 0x469413
jmp 0x468d5f
lea ecx, [ebp - 0x33e4]
call fcn.004328f3
lea ecx, [ebp - 0x2fd4]
call fcn.004328f3
push 1
lea ecx, [ebp - 0x3594]
call fcn.00432821
mov dword [ebp - 0x114], 0x3838a1f9
mov dword [ebp - 0xce0], 0x845d811f
mov dword [ebp - 0x5f4], 0xfffffffe
mov dword [ebp - 0x36f8], 0
push 2
lea ecx, [ebp - 0x2714]
call fcn.00432821
mov dword [ebp - 0x20d0], 4
mov dword [ebp - 0x2b74], 0xb2933530
mov dword [ebp - 0x2b9c], 0xffff
mov dword [ebp - 0x204], 0
jmp 0x4694a2
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 1
jge 0x4694c1
push dword [ebp - 0x204]
lea ecx, [ebp - 0x3594]
call fcn.0043290f
and dword [eax], 0
jmp 0x469495
mov dword [ebp - 0x204], 0
jmp 0x4694da
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 2
jge 0x4694fc
push dword [ebp - 0x204]
lea ecx, [ebp - 0x2714]
call fcn.0043290f
mov dword [eax], 1
jmp 0x4694cd
mov dword [ebp - 0x114], 0
jmp 0x469515
mov eax, dword [ebp - 0x114]
dec eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0
jl 0x4695fc
mov dword [ebp - 0x3700], 0x4822b165
mov dword [ebp - 0x3708], 0xfffffff8
mov dword [ebp - 0x3710], 0xbededb5c
mov dword [ebp - 0x3718], 0xffffffff
mov dword [ebp - 0x3720], 1
mov dword [ebp - 0x3728], 0x82baef6e
mov dword [ebp - 0x3730], 6
mov dword [ebp - 0x3738], 0xd0890515
mov dword [ebp - 0x3740], 1
mov dword [ebp - 0x3748], 6
push 2
lea ecx, [ebp - 0x3d14]
call fcn.00432821
mov dword [ebp - 0x3750], 0xfffffffb
mov dword [ebp - 0xe20], 3
mov dword [ebp - 0x6d0], 0
jmp 0x4695c0
mov eax, dword [ebp - 0x6d0]
inc eax
mov dword [ebp - 0x6d0], eax
cmp dword [ebp - 0x6d0], 2
jge 0x4695df
push dword [ebp - 0x6d0]
lea ecx, [ebp - 0x3d14]
call fcn.0043290f
or dword [eax], 0xffffffff
jmp 0x4695b3
mov eax, dword [ebp - 0xe20]
inc eax
mov dword [ebp - 0xe20], eax
lea ecx, [ebp - 0x3d14]
call fcn.004328f3
jmp 0x469508
push 0
lea ecx, [ebp - 0x3594]
call fcn.0043290f
mov eax, dword [ebp - 0x5f4]
mov dword [ebp - 0x3758], eax
imul eax, dword [ebp - 0x114], 0xb3e1
test eax, eax
jne 0x46962f
mov dword [ebp - 0x20b0], 1
jmp 0x469636
and dword [ebp - 0x20b0], 0
mov eax, dword [ebp - 0x114]
cmp dword [ebp - 0x20b0], eax
jge 0x469662
push 0
lea ecx, [ebp - 0x2714]
call fcn.0043290f
cmp dword [eax], 0
je 0x469662
mov dword [ebp - 0xe28], 1
jmp 0x469669
and dword [ebp - 0xe28], 0
mov eax, dword [ebp - 0x5f4]
cmp dword [ebp - 0xe28], eax
jge 0x469683
mov dword [ebp - 0x20b8], 1
jmp 0x46968a
and dword [ebp - 0x20b8], 0
mov eax, dword [ebp - 0x20b8]
mov dword [ebp - 0x5f4], eax
mov eax, dword [ebp - 0x5f4]
imul eax, dword [ebp - 0x114]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x2b74]
cmp dword [ebp - 0x114], eax
jl 0x4696c3
mov dword [ebp - 0x2b94], 1
jmp 0x4696ca
and dword [ebp - 0x2b94], 0
push 0
lea ecx, [ebp - 0x2714]
call fcn.0043290f
cmp dword [eax], 0
jne 0x4696ee
mov eax, 0xffff
test eax, eax
jne 0x4696ee
and dword [ebp - 0xe30], 0
jmp 0x4696f8
mov dword [ebp - 0xe30], 1
push 0
lea ecx, [ebp - 0x2714]
call fcn.0043290f
mov ecx, dword [ebp - 0xe30]
imul ecx, dword [eax]
cmp ecx, 0x30732bab
jle 0x469722
mov dword [ebp - 0x20c0], 1
jmp 0x469729
and dword [ebp - 0x20c0], 0
mov eax, dword [ebp - 0x2b9c]
cmp dword [ebp - 0x20c0], eax
jl 0x469743
mov dword [ebp - 0xe38], 1
jmp 0x46974a
and dword [ebp - 0xe38], 0
mov eax, dword [ebp - 0xce0]
cmp dword [ebp - 0xe38], eax
jne 0x469764
mov dword [ebp - 0x20c8], 1
jmp 0x46976b
and dword [ebp - 0x20c8], 0
mov eax, dword [ebp - 0x20c8]
mov dword [ebp - 0xce0], eax
cmp dword [ebp - 0xce0], 0x544a95a4
jg 0x469795
cmp dword [ebp - 0x20d0], 0
jne 0x469795
and dword [ebp - 0xe40], 0
jmp 0x46979f
mov dword [ebp - 0xe40], 1
mov eax, dword [ebp - 0xe40]
add eax, 0x2e4b
cmp dword [ebp - 0x20d0], eax
jge 0x4697b9
push 8
pop eax
test eax, eax
jne 0x4697c2
cmp dword [ebp - 0x114], 0
je 0x4697d4
cmp dword [ebp - 0x5f4], 0
je 0x4697d4
and dword [ebp - 0xe48], 0
jmp 0x4697de
mov dword [ebp - 0xe48], 1
push 0
lea ecx, [ebp - 0x2714]
call fcn.0043290f
mov ecx, dword [ebp - 0xe48]
mov dword [eax], ecx
lea ecx, [ebp - 0x2714]
call fcn.004328f3
lea ecx, [ebp - 0x3594]
call fcn.004328f3
xor ecx, ecx
call fcn.00432b8c
push eax
call fcn.00487d93
pop ecx
push 4
lea ecx, [ebp - 0x2720]
call fcn.00432821
mov dword [ebp - 0x3760], 0x31551da6
mov dword [ebp - 0x3768], 0x87a7525d
mov dword [ebp - 0x37f4], 0xd49fcfbc
mov dword [ebp - 0x37fc], 0xffffffff
mov dword [ebp - 0x3804], 0xb870004d
mov dword [ebp - 0x54], 0
jmp 0x469866
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 3
jge 0x46987c
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x4088], 0x93b4e1a3
jmp 0x46985f
mov dword [ebp - 0x54], 0
jmp 0x46988c
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 4
jge 0x4698a8
push dword [ebp - 0x54]
lea ecx, [ebp - 0x2720]
call fcn.0043290f
mov dword [eax], 6
jmp 0x469885
mov dword [ebp - 0x54], 0
jmp 0x4698b8
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 2
jge 0x4698ce
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x4148], 0xfffffff7
jmp 0x4698b1
mov byte [ebp - 0x431], 0
movzx eax, byte [ebp - 0x431]
test eax, eax
je 0x4698e8
push 0
call dword [0xaa9268]
push 2
lea ecx, [ebp - 0x2720]
call fcn.0043290f
mov dword [eax], 2
jmp 0x469921
push 2
lea ecx, [ebp - 0x2720]
call fcn.0043290f
mov dword [ebp - 0x20d8], eax
mov eax, dword [ebp - 0x20d8]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x20d8]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0x2720]
call fcn.0043290f
cmp dword [eax], 0
jl 0x469a73
mov dword [ebp - 0x380c], 0xb4ebb0cb
mov dword [ebp - 0x3814], 0xec79e672
mov dword [ebp - 0x381c], 0xa2337124
mov dword [ebp - 0x3824], 0xdb2bc40e
mov dword [ebp - 0x382c], 0xd658edfe
push 2
lea ecx, [ebp - 0x33fc]
call fcn.00432821
mov dword [ebp - 0x3834], 0x656540f2
push 1
lea ecx, [ebp - 0x2fec]
call fcn.00432821
mov dword [ebp - 0x194], 0
jmp 0x4699a6
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 2
jge 0x4699c8
push dword [ebp - 0x194]
lea ecx, [ebp - 0x33fc]
call fcn.0043290f
mov dword [eax], 1
jmp 0x469999
mov dword [ebp - 0x194], 0
jmp 0x4699e1
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 1
jge 0x469a03
push dword [ebp - 0x194]
lea ecx, [ebp - 0x2fec]
call fcn.0043290f
mov dword [eax], 1
jmp 0x4699d4
push 0
lea ecx, [ebp - 0x2fec]
call fcn.0043290f
mov dword [ebp - 0xe50], eax
mov eax, dword [ebp - 0xe50]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0xe50]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0x2720]
call fcn.0043290f
mov eax, dword [eax]
cmp dword [ebp + eax*4 - 0x4088], 0
je 0x469a58
lea ecx, [ebp - 0x2fec]
call fcn.004328f3
lea ecx, [ebp - 0x33fc]
call fcn.004328f3
jmp 0x469a73
lea ecx, [ebp - 0x2fec]
call fcn.004328f3
lea ecx, [ebp - 0x33fc]
call fcn.004328f3
jmp 0x4698fd
lea ecx, [ebp - 0x2720]
call fcn.004328f3
mov dword [ebp - 0x8a0], 0xfffffff8
mov dword [ebp - 0x8a0], 0
jmp 0x469aa1
mov eax, dword [ebp - 0x8a0]
inc eax
mov dword [ebp - 0x8a0], eax
cmp dword [ebp - 0x8a0], 0x18
jge 0x469b1e
push 3
lea ecx, [ebp - 0x3004]
call fcn.00432821
mov dword [ebp - 0x6d8], 0
jmp 0x469ad0
mov eax, dword [ebp - 0x6d8]
inc eax
mov dword [ebp - 0x6d8], eax
cmp dword [ebp - 0x6d8], 3
jge 0x469aef
push dword [ebp - 0x6d8]
lea ecx, [ebp - 0x3004]
call fcn.0043290f
or dword [eax], 0xffffffff
jmp 0x469ac3
push 2
lea ecx, [ebp - 0x3004]
call fcn.0043290f
cmp dword [eax], 0
je 0x469b0e
lea ecx, [ebp - 0x3004]
call fcn.004328f3
jmp 0x469b1e
lea ecx, [ebp - 0x3004]
call fcn.004328f3
jmp 0x469a94
mov byte [ebp - 0x358], 0
movzx eax, byte [ebp - 0x358]
test eax, eax
je 0x469b54
push 0
push 0x22c
push 0
push 0x582
push 0
call dword [0xaa93e0]
push eax
call dword [0xaa93d4]
push eax
call dword [0xaa93d0]
push 1
lea ecx, [ebp - 0x342c]
call fcn.00432821
mov dword [ebp - 0x550], 0xfa72c2
mov dword [ebp - 0x20e8], 0xec3d
mov dword [ebp - 0x20f8], 0
mov dword [ebp - 0xe78], 0xfffffff8
mov dword [ebp - 0x2ba4], 0x785b6478
mov byte [ebp - 0x3e1], 0
movzx eax, byte [ebp - 0x3e1]
test eax, eax
je 0x469bc2
push 0
call dword [0xaa93e0]
push eax
call dword [0xaa93d4]
push eax
push 0
push 0xddd
call dword [0xaa908c]
mov eax, dword [ebp - 0x550]
neg eax
jne 0x469c3a
mov eax, dword [ebp - 0x550]
mov dword [ebp - 0x383c], eax
mov eax, dword [ebp - 0x550]
cmp dword [ebp - 0x550], eax
jl 0x469bf2
mov dword [ebp - 0x20e0], 1
jmp 0x469bf9
and dword [ebp - 0x20e0], 0
mov eax, dword [ebp - 0x550]
neg eax
cmp eax, dword [ebp - 0x20e0]
jge 0x469c15
mov dword [ebp - 0xe58], 1
jmp 0x469c1c
and dword [ebp - 0xe58], 0
mov eax, dword [ebp - 0xe58]
mov dword [ebp - 0x20e8], eax
cmp dword [ebp - 0x20e8], 0
jne 0x469c3a
and dword [ebp - 0xe60], 0
jmp 0x469c44
mov dword [ebp - 0xe60], 1
mov eax, dword [ebp - 0x550]
cmp dword [ebp - 0xe60], eax
jne 0x469c5e
mov dword [ebp - 0x20f0], 1
jmp 0x469c65
and dword [ebp - 0x20f0], 0
cmp dword [ebp - 0x20f0], 0xffff
jbe 0x469c7d
mov dword [ebp - 0xe68], 1
jmp 0x469c84
and dword [ebp - 0xe68], 0
mov eax, dword [ebp - 0xe68]
sub eax, dword [ebp - 0x20f8]
cmp eax, dword [ebp - 0x20f8]
jl 0x469ca4
mov dword [ebp - 0xe70], 1
jmp 0x469cab
and dword [ebp - 0xe70], 0
cmp dword [ebp - 0xe70], 1
jle 0x469cc0
mov dword [ebp - 0x2100], 1
jmp 0x469cc7
and dword [ebp - 0x2100], 0
mov eax, dword [ebp - 0x2100]
add eax, 0x2d1a
mov dword [ebp - 0xe78], eax
mov eax, dword [ebp - 0xe78]
mov dword [ebp - 0x2ba4], eax
mov dword [ebp - 0x164], 0x3838a1f9
mov dword [ebp - 0x16c], 5
mov dword [ebp - 0xe88], 0xffffffff
mov dword [ebp - 0x2bcc], 0
mov dword [ebp - 0x3844], 0xffffffff
mov dword [ebp - 0x384c], 6
mov dword [ebp - 0xe98], 0
mov dword [ebp - 0x25c], 0
jmp 0x469d43
mov eax, dword [ebp - 0x25c]
inc eax
mov dword [ebp - 0x25c], eax
cmp dword [ebp - 0x25c], 4
jge 0x469d5f
mov eax, dword [ebp - 0x25c]
mov dword [ebp + eax*4 - 0x2708], 0x82062403
jmp 0x469d36
mov dword [ebp - 0x25c], 0
jmp 0x469d78
mov eax, dword [ebp - 0x25c]
inc eax
mov dword [ebp - 0x25c], eax
cmp dword [ebp - 0x25c], 1
jge 0x469d94
mov eax, dword [ebp - 0x25c]
mov dword [ebp + eax*4 - 0x3854], 0xd9c7279c
jmp 0x469d6b
mov dword [ebp - 0x16c], 3
jmp 0x469dad
mov eax, dword [ebp - 0x16c]
dec eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 0
jl 0x469fe9
push 2
lea ecx, [ebp - 0x301c]
call fcn.00432821
mov dword [ebp - 0x2bc4], 0x12dc
mov dword [ebp - 0x988], 0
jmp 0x469dea
mov eax, dword [ebp - 0x988]
inc eax
mov dword [ebp - 0x988], eax
cmp dword [ebp - 0x988], 2
jge 0x469e0c
push dword [ebp - 0x988]
lea ecx, [ebp - 0x301c]
call fcn.0043290f
mov dword [eax], 1
jmp 0x469ddd
mov eax, dword [ebp - 0x16c]
cmp dword [ebp + eax*4 - 0x2708], 0
jne 0x469e28
mov dword [ebp - 0x2bac], 1
jmp 0x469e2f
and dword [ebp - 0x2bac], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x2708]
mov dword [ebp - 0x385c], eax
mov eax, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x16c]
cmp dword [ebp + eax*4 - 0x2708], ecx
jne 0x469e63
mov dword [ebp - 0xb00], 1
jmp 0x469e6a
and dword [ebp - 0xb00], 0
push 0
lea ecx, [ebp - 0x301c]
call fcn.0043290f
mov ecx, dword [ebp - 0xb00]
mov dword [eax], ecx
cmp dword [ebp - 0xb00], 0
jne 0x469ea1
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2708], 0
jne 0x469ea1
and dword [ebp - 0x2108], 0
jmp 0x469eab
mov dword [ebp - 0x2108], 1
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x2708]
cmp eax, dword [ebp - 0x2108]
jge 0x469ecc
mov dword [ebp - 0xe80], 1
jmp 0x469ed3
and dword [ebp - 0xe80], 0
cmp dword [ebp - 0xe80], 0x4d
jl 0x469ee8
mov dword [ebp - 0x2110], 1
jmp 0x469eef
and dword [ebp - 0x2110], 0
mov eax, dword [ebp - 0x2110]
mov dword [ebp - 0xe88], eax
mov eax, dword [ebp - 0x16c]
mov eax, dword [ebp + eax*4 - 0x2708]
cmp eax, dword [ebp - 0xe88]
jle 0x469f1c
mov dword [ebp - 0x2bb4], 1
jmp 0x469f23
and dword [ebp - 0x2bb4], 0
mov eax, dword [ebp - 0x16c]
mov eax, dword [ebp + eax*4 - 0x2708]
mov dword [ebp - 0x3864], eax
push 0
lea ecx, [ebp - 0x301c]
call fcn.0043290f
mov ecx, dword [ebp - 0x16c]
mov ecx, dword [ebp + ecx*4 - 0x2708]
cmp dword [eax], ecx
jle 0x469f60
mov dword [ebp - 0x2118], 1
jmp 0x469f67
and dword [ebp - 0x2118], 0
cmp dword [ebp - 0x2118], 0x185a
je 0x469f7f
mov dword [ebp - 0x2bbc], 1
jmp 0x469f86
and dword [ebp - 0x2bbc], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2708], 0x5734cb44
jg 0x469fa5
mov dword [ebp - 0xe90], 1
jmp 0x469fac
and dword [ebp - 0xe90], 0
mov eax, dword [ebp - 0x2bc4]
cmp dword [ebp - 0xe90], eax
jne 0x469fc6
mov dword [ebp - 0x2120], 1
jmp 0x469fcd
and dword [ebp - 0x2120], 0
mov eax, dword [ebp - 0x2120]
mov dword [ebp - 0x2bcc], eax
lea ecx, [ebp - 0x301c]
call fcn.004328f3
jmp 0x469da0
mov eax, dword [ebp - 0xe98]
dec eax
mov dword [ebp - 0xe98], eax
mov dword [ebp - 0xc58], 0x845d811f
mov dword [ebp - 0x19c], 0xfffffff9
mov dword [ebp - 0x288], 0xccd20446
mov dword [ebp - 0x2150], 0xef874ac
mov dword [ebp - 0xed0], 0xcc167df2
mov dword [ebp - 0x2bdc], 0xe1289ed5
mov dword [ebp - 0x2be4], 0xfa08552a
mov dword [ebp - 0x6e0], 0
jmp 0x46a055
mov eax, dword [ebp - 0x6e0]
inc eax
mov dword [ebp - 0x6e0], eax
cmp dword [ebp - 0x6e0], 1
jge 0x46a071
mov eax, dword [ebp - 0x6e0]
mov dword [ebp + eax*4 - 0x2bd4], 0xfffffffc
jmp 0x46a048
cmp dword [ebp - 0x288], 0xffffffff
jl 0x46a086
mov dword [ebp - 0x2128], 1
jmp 0x46a08d
and dword [ebp - 0x2128], 0
mov eax, dword [ebp - 0x288]
cmp dword [ebp - 0x2128], eax
jg 0x46a0a7
mov dword [ebp - 0xea0], 1
jmp 0x46a0ae
and dword [ebp - 0xea0], 0
mov eax, dword [ebp - 0x288]
cmp dword [ebp - 0xea0], eax
jne 0x46a0c5
cmp dword [ebp - 0x19c], 0
jne 0x46a0d7
cmp dword [ebp - 0x19c], 0
jne 0x46a0d7
and dword [ebp - 0x2130], 0
jmp 0x46a0e1
mov dword [ebp - 0x2130], 1
mov eax, dword [ebp - 0x2130]
add eax, 0x2e71
cmp eax, 0x64a90c6d
jle 0x46a108
mov eax, 0xfff6
test eax, eax
je 0x46a108
mov dword [ebp - 0xea8], 1
jmp 0x46a10f
and dword [ebp - 0xea8], 0
mov eax, dword [ebp - 0x288]
cmp dword [ebp - 0xea8], eax
jne 0x46a129
mov dword [ebp - 0x2138], 1
jmp 0x46a130
and dword [ebp - 0x2138], 0
mov eax, dword [ebp - 0x288]
cmp dword [ebp - 0x2138], eax
jle 0x46a153
mov eax, 0x17a6
test eax, eax
je 0x46a153
mov dword [ebp - 0xeb0], 1
jmp 0x46a15a
and dword [ebp - 0xeb0], 0
cmp dword [ebp - 0xeb0], 7
jne 0x46a16f
mov dword [ebp - 0x2140], 1
jmp 0x46a176
and dword [ebp - 0x2140], 0
mov eax, dword [ebp - 0x19c]
cmp dword [ebp - 0x2140], eax
jg 0x46a190
mov dword [ebp - 0xeb8], 1
jmp 0x46a197
and dword [ebp - 0xeb8], 0
mov eax, dword [ebp - 0xeb8]
mov dword [ebp - 0x288], eax
mov eax, dword [ebp - 0x19c]
cmp dword [ebp - 0x288], eax
jg 0x46a1bd
mov dword [ebp - 0x2148], 1
jmp 0x46a1c4
and dword [ebp - 0x2148], 0
mov eax, dword [ebp - 0x19c]
cmp eax, dword [ebp - 0x2148]
je 0x46a1de
mov dword [ebp - 0xec0], 1
jmp 0x46a1e5
and dword [ebp - 0xec0], 0
mov eax, dword [ebp - 0xec0]
mov dword [ebp - 0x2150], eax
mov eax, dword [ebp - 0x2150]
mov dword [ebp - 0x386c], eax
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x3874], eax
mov eax, 0xe8f7cf8
cmp eax, 0xf85a06c0
jb 0x46a221
mov dword [ebp - 0xec8], 1
jmp 0x46a228
and dword [ebp - 0xec8], 0
mov eax, dword [ebp - 0x19c]
add eax, dword [ebp - 0xec8]
cmp eax, 6
jl 0x46a24e
cmp dword [ebp - 0x288], 0
je 0x46a24e
mov dword [ebp - 0x2158], 1
jmp 0x46a255
and dword [ebp - 0x2158], 0
mov eax, dword [ebp - 0x2158]
mov dword [ebp - 0xed0], eax
mov eax, dword [ebp - 0x19c]
cmp dword [ebp - 0xed0], eax
jle 0x46a27b
mov dword [ebp - 0xc38], 1
jmp 0x46a282
and dword [ebp - 0xc38], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xc38]
mov dword [ebp + eax - 0x2bd4], ecx
cmp dword [ebp - 0xc38], 0
je 0x46a2b3
cmp dword [ebp - 0x2bdc], 0
je 0x46a2b3
mov dword [ebp - 0x2160], 1
jmp 0x46a2ba
and dword [ebp - 0x2160], 0
mov eax, dword [ebp - 0x19c]
imul eax, dword [ebp - 0x2160]
neg eax
mov dword [ebp - 0x2be4], eax
mov byte [ebp - 0x35a], 0
movzx eax, byte [ebp - 0x35a]
test eax, eax
je 0x46a301
push 0
push 0xcd2
push 0x192b
call dword [0xaa93e0]
push eax
call dword [0xaa93d4]
push eax
call dword [0xaa9074]
mov dword [ebp - 0x630], 0xfffffffe
mov dword [ebp - 0x387c], 0
push 2
lea ecx, [ebp - 0xaa4]
call fcn.00432821
mov dword [ebp - 0xe0], 0x5c8094a
mov dword [ebp - 0xf08], 0x11c3fc02
mov dword [ebp - 0xef0], 0x2bbd4aa4
mov dword [ebp - 0x3884], 0xffffffff
mov dword [ebp - 0x8a8], 0
jmp 0x46a363
mov eax, dword [ebp - 0x8a8]
inc eax
mov dword [ebp - 0x8a8], eax
cmp dword [ebp - 0x8a8], 2
jge 0x46a385
push dword [ebp - 0x8a8]
lea ecx, [ebp - 0xaa4]
call fcn.0043290f
mov dword [eax], 0x9f9b
jmp 0x46a356
mov dword [ebp - 0xe0], 0
jmp 0x46a39e
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 1
jg 0x46a74c
mov dword [ebp - 0xa00], 0xb0ceafd9
push 3
lea ecx, [ebp - 0x3034]
call fcn.00432821
mov dword [ebp - 0x6e8], 0
jmp 0x46a3db
mov eax, dword [ebp - 0x6e8]
inc eax
mov dword [ebp - 0x6e8], eax
cmp dword [ebp - 0x6e8], 3
jge 0x46a3fd
push dword [ebp - 0x6e8]
lea ecx, [ebp - 0x3034]
call fcn.0043290f
mov dword [eax], 0x22a19820
jmp 0x46a3ce
mov dword [ebp - 0xa00], 0
jmp 0x46a416
cmp dword [ebp - 0xa00], 1
jg 0x46a73c
mov dword [ebp - 0xd10], 0x48bd921b
mov dword [ebp - 0xb10], 0x8c537847
mov dword [ebp - 0x588], 0x205f
mov dword [ebp - 0x2bec], 2
mov dword [ebp - 0x2bf4], 0x4bdbaf9e
push dword [ebp - 0xe0]
lea ecx, [ebp - 0xaa4]
call fcn.0043290f
push 0
lea ecx, [ebp - 0xaa4]
call fcn.0043290f
cmp dword [eax], 0
jne 0x46a4be
mov eax, dword [ebp - 0xd10]
mov dword [ebp - 0x388c], eax
cmp dword [ebp - 0xd10], 0
je 0x46a499
mov dword [ebp - 0xed8], 1
jmp 0x46a4a0
and dword [ebp - 0xed8], 0
mov eax, dword [ebp - 0xed8]
mov dword [ebp - 0xb10], eax
cmp dword [ebp - 0xb10], 0
jne 0x46a4be
and dword [ebp - 0x2168], 0
jmp 0x46a4c8
mov dword [ebp - 0x2168], 1
push dword [ebp - 0xe0]
lea ecx, [ebp - 0xaa4]
call fcn.0043290f
mov eax, dword [eax]
cmp eax, dword [ebp - 0x2168]
jg 0x46a4ef
mov dword [ebp - 0xee0], 1
jmp 0x46a4f6
and dword [ebp - 0xee0], 0
push 1
lea ecx, [ebp - 0xaa4]
call fcn.0043290f
mov ecx, dword [ebp - 0xee0]
cmp ecx, dword [eax]
jg 0x46a519
mov dword [ebp - 0x21c4], 1
jmp 0x46a520
and dword [ebp - 0x21c4], 0
push dword [ebp - 0xe0]
lea ecx, [ebp - 0xaa4]
call fcn.0043290f
mov ecx, dword [ebp - 0x21c4]
cmp ecx, dword [eax]
jne 0x46a54e
push 0xfffffffffffffffb
pop eax
test eax, eax
je 0x46a54e
mov dword [ebp - 0xee8], 1
jmp 0x46a555
and dword [ebp - 0xee8], 0
mov eax, dword [ebp - 0xf08]
cmp dword [ebp - 0xee8], eax
jne 0x46a56f
mov dword [ebp - 0x21cc], 1
jmp 0x46a576
and dword [ebp - 0x21cc], 0
mov eax, dword [ebp - 0x21cc]
mov dword [ebp - 0xef0], eax
mov esi, dword [ebp - 0xef0]
push 0
lea ecx, [ebp - 0xaa4]
call fcn.0043290f
cmp dword [eax], esi
jge 0x46a5a5
lea ecx, [ebp - 0x3034]
call fcn.004328f3
jmp 0x46a391
lea ecx, [ebp - 0xaa4]
call fcn.004328f3
push 2
lea ecx, [ebp - 0x2768]
call fcn.00432821
push 3
lea ecx, [ebp - 0x560]
call fcn.00432821
mov dword [ebp - 0x1a4], 0xffffffff
mov dword [ebp - 0x20c], 0
jmp 0x46a794
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 3
jge 0x46a7b6
push dword [ebp - 0x20c]
lea ecx, [ebp - 0x560]
call fcn.0043290f
mov dword [eax], 0xd7953644
jmp 0x46a787
mov dword [ebp - 0x20c], 0
jmp 0x46a7cf
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 1
jge 0x46a7eb
mov eax, dword [ebp - 0x20c]
mov dword [ebp + eax*4 - 0xb18], 0xffffffff
jmp 0x46a7c2
push 2
lea ecx, [ebp - 0x560]
call fcn.0043290f
cmp dword [eax], 0x2891
jne 0x46a80c
mov dword [ebp - 0xf10], 1
jmp 0x46a813
and dword [ebp - 0xf10], 0
cmp dword [ebp - 0xf10], 0x8027
jl 0x46a82b
mov dword [ebp - 0xc40], 1
jmp 0x46a832
and dword [ebp - 0xc40], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xc40]
mov dword [ebp + eax - 0xb18], ecx
mov eax, dword [ebp - 0xc40]
mov dword [ebp - 0x1a4], eax
mov esi, dword [ebp - 0x1a4]
push 0
lea ecx, [ebp - 0x560]
call fcn.0043290f
cmp esi, dword [eax]
jl 0x46a87a
cmp dword [ebp - 0x1a4], 0
jne 0x46a87a
and dword [ebp - 0x21f4], 0
jmp 0x46a884
mov dword [ebp - 0x21f4], 1
cmp dword [ebp - 0x21f4], 0xffffffff
jg 0x46a899
mov dword [ebp - 0x2c04], 1
jmp 0x46a8a0
and dword [ebp - 0x2c04], 0
push 2
lea ecx, [ebp - 0x560]
call fcn.0043290f
push 2
lea ecx, [ebp - 0x560]
call fcn.0043290f
push 1
lea ecx, [ebp - 0x560]
call fcn.0043290f
mov ecx, dword [ebp - 0x1a4]
cmp dword [eax], ecx
je 0x46a8dd
mov dword [ebp - 0xf18], 1
jmp 0x46a8e4
and dword [ebp - 0xf18], 0
push 0
lea ecx, [ebp - 0x560]
call fcn.0043290f
mov ecx, dword [ebp - 0xf18]
cmp ecx, dword [eax]
jg 0x46a907