Function at 0x47a610
Capabilities:
Check os version
Encrypt data using speck
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4bf745
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x1b14
call fcn.004bb2d0
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 0x4c]
test eax, eax
je 0x47a66e
mov eax, dword [ebp + 0x3c]
mov dword [ebp - 0xed0], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x1144], eax
push dword [ebp - 0x1144]
push 1
push dword [ebp - 0xed0]
call fcn.0048679c
add esp, 0xc
jmp 0x48678b
lea eax, [ebp + 8]
mov dword [ebp - 0xd34], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x10fc], eax
mov eax, dword [ebp + 0x38]
mov dword [ebp - 0xee8], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0xef0], eax
lea eax, [ebp + 0x10]
mov dword [ebp - 0xed8], eax
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0x10d8], eax
mov eax, dword [ebp + 0x30]
mov dword [ebp - 0x10c8], eax
mov eax, dword [ebp + 0x34]
mov dword [ebp - 0xf08], eax
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 0xd3c], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xee0], eax
mov eax, dword [ebp + 0x44]
mov dword [ebp - 0x1004], eax
lea eax, [ebp + 0x20]
mov dword [ebp - 0xf00], eax
mov eax, dword [ebp + 0x48]
mov dword [ebp - 0xd44], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0xef8], eax
mov eax, dword [ebp + 0x40]
mov dword [ebp - 0x10d0], eax
mov eax, dword [ebp - 0xed8]
movzx eax, byte [eax]
test eax, eax
je 0x47a9d6
mov eax, dword [ebp - 0xee0]
mov dword [ebp - 0x1100], eax
mov eax, dword [ebp - 0xee8]
mov dword [ebp - 0x1128], eax
mov eax, dword [ebp - 0xef0]
mov dword [ebp - 0x1108], eax
mov eax, dword [ebp - 0xef8]
mov dword [ebp - 0x10f8], eax
mov eax, dword [ebp - 0xf00]
mov dword [ebp - 0x10e0], eax
mov eax, dword [ebp - 0xf08]
mov dword [ebp - 0x1110], eax
mov eax, dword [ebp - 0x10c8]
mov dword [ebp - 0x1120], eax
mov eax, dword [ebp - 0x10d0]
mov dword [ebp - 0x1118], eax
mov eax, dword [ebp - 0x10d8]
mov dword [ebp - 0x10e8], eax
mov eax, dword [ebp - 0x10e0]
movzx eax, byte [eax]
test eax, eax
je 0x47a7ac
mov eax, dword [ebp - 0x10e8]
mov dword [ebp - 0x10f0], eax
mov eax, dword [ebp - 0x10f0]
mov dword [ebp - 0x97c], eax
mov eax, dword [ebp - 0x97c]
mov ecx, dword [ebp - 0x97c]
mov ecx, dword [ecx]
mov dword [eax], ecx
jmp 0x47a9d1
mov eax, dword [ebp - 0x10f8]
mov dword [ebp - 0x1130], eax
mov eax, dword [ebp - 0x1100]
mov dword [ebp - 0x11d8], eax
mov eax, dword [ebp - 0x1108]
mov dword [ebp - 0x11e0], eax
mov eax, dword [ebp - 0x1110]
mov dword [ebp - 0x11e8], eax
mov eax, dword [ebp - 0x1118]
mov dword [ebp - 0x11fc], eax
mov eax, dword [ebp - 0x1120]
mov dword [ebp - 0xec8], eax
mov eax, dword [ebp - 0x1128]
mov dword [ebp - 0xd1c], eax
mov eax, dword [ebp - 0x1130]
mov dword [ebp - 0xffc], eax
mov eax, dword [ebp - 0x11d8]
mov dword [ebp - 0xd2c], eax
mov eax, dword [ebp - 0x11e0]
mov dword [ebp - 0x1008], eax
mov eax, dword [ebp - 0x11e8]
mov dword [ebp - 0xd24], eax
mov eax, dword [ebp - 0x11fc]
mov dword [ebp - 0x128], eax
mov eax, dword [ebp - 0xec8]
mov dword [ebp - 0x1090], eax
mov eax, dword [ebp - 0xd1c]
mov dword [ebp - 0x478], eax
mov eax, dword [ebp - 0x128]
mov eax, dword [eax]
shl eax, 2
mov ecx, dword [ebp - 0x128]
cmp eax, dword [ecx]
jge 0x47a875
mov dword [ebp - 0xc04], 1
jmp 0x47a87c
and dword [ebp - 0xc04], 0
mov eax, dword [ebp - 0x128]
mov eax, dword [eax]
imul eax, dword [ebp - 0xc04]
xor ecx, ecx
inc ecx
sub ecx, eax
mov eax, dword [ebp - 0x128]
cmp ecx, dword [eax]
jne 0x47a8a6
mov dword [ebp - 0xc0c], 1
jmp 0x47a8ad
and dword [ebp - 0xc0c], 0
cmp dword [ebp - 0xc0c], 7
jne 0x47a8c2
mov dword [ebp - 0x470], 1
jmp 0x47a8c9
and dword [ebp - 0x470], 0
mov eax, dword [ebp - 0x1090]
mov ecx, dword [ebp - 0x470]
mov dword [eax], ecx
mov eax, dword [ebp - 0x128]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x470]
jg 0x47a8f3
mov dword [ebp - 0xc14], 1
jmp 0x47a8fa
and dword [ebp - 0xc14], 0
mov eax, dword [ebp - 0x128]
mov eax, dword [eax]
cmp eax, dword [ebp - 0xc14]
jl 0x47a916
mov dword [ebp - 0x1e4], 1
jmp 0x47a91d
and dword [ebp - 0x1e4], 0
push 0
mov ecx, dword [ebp - 0xd24]
call fcn.0043566b
mov ecx, dword [ebp - 0x1e4]
mov dword [eax], ecx
mov eax, dword [ebp - 0x1008]
mov ecx, dword [ebp - 0x1e4]
mov dword [eax], ecx
mov eax, dword [ebp - 0x478]
mov eax, dword [eax]
cmp dword [ebp - 0x1e4], eax
jl 0x47a965
mov eax, 0xe623b470
test eax, eax
je 0x47a965
mov dword [ebp - 0xc1c], 1
jmp 0x47a96c
and dword [ebp - 0xc1c], 0
mov eax, dword [ebp - 0x478]
mov eax, dword [eax]
cmp dword [ebp - 0xc1c], eax
jne 0x47a988
mov dword [ebp - 0x518], 1
jmp 0x47a98f
and dword [ebp - 0x518], 0
mov eax, dword [ebp - 0xd2c]
mov ecx, dword [ebp - 0x518]
mov dword [eax], ecx
mov eax, dword [ebp - 0x518]
sub eax, 9
mov ecx, dword [ebp - 0x478]
cmp eax, dword [ecx]
jge 0x47a9bc
mov dword [ebp - 0xc24], 1
jmp 0x47a9c3
and dword [ebp - 0xc24], 0
mov eax, dword [ebp - 0xffc]
mov ecx, dword [ebp - 0xc24]
mov dword [eax], ecx
jmp 0x48678b
mov eax, dword [ebp - 0xd34]
mov dword [ebp - 0x11d0], eax
mov eax, dword [ebp - 0x10fc]
mov dword [ebp - 0xd4c], eax
mov eax, dword [ebp - 0xd3c]
mov dword [ebp - 0x1014], eax
mov eax, dword [ebp - 0x1004]
mov dword [ebp - 0xd5c], eax
mov eax, dword [ebp - 0xd44]
mov dword [ebp - 0x1104], eax
mov eax, dword [ebp - 0x11d0]
movzx eax, byte [eax]
test eax, eax
je 0x47aa55
mov eax, dword [ebp - 0xd4c]
mov dword [ebp - 0x100c], eax
mov eax, dword [ebp - 0x100c]
mov dword [ebp - 0xd54], eax
mov eax, dword [ebp - 0xd54]
movzx eax, byte [eax]
test eax, eax
je 0x47aa50
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
jmp 0x48678b
mov eax, dword [ebp - 0x1104]
mov dword [ebp - 0xea0], eax
mov eax, dword [ebp - 0xd5c]
mov dword [ebp - 0xfc0], eax
mov eax, dword [ebp - 0x1014]
mov dword [ebp - 0x388], eax
push 0x1fae
push 1
push 0x7c7b
push 0x4d27
push 0x226e
push 0x3532
push 0
push 0x2731
push 0x35d0
push 0x7ded
push 0x6400
push 0
call fcn.004541a8
add esp, 0x30
mov eax, dword [ebp - 0x388]
mov eax, dword [eax + 4]
mov dword [ebp - 0xb2c], eax
mov dword [ebp - 0xbb8], 0xc03
mov dword [ebp - 0xd6c], str.yulpyq_zerhnskp_ejonhbenu_kvktbovjv_cmq
cmp dword [ebp - 0xbb8], 0xd8a
jle 0x47abea
and dword [ebp - 0x3e8], 0
jmp 0x47aafd
mov eax, dword [ebp - 0x3e8]
inc eax
mov dword [ebp - 0x3e8], eax
cmp dword [ebp - 0x3e8], 0x3641
jge 0x47abea
and dword [ebp - 0x30c], 0
jmp 0x47ab23
mov eax, dword [ebp - 0x30c]
inc eax
mov dword [ebp - 0x30c], eax
cmp dword [ebp - 0x30c], 0x48ea
jge 0x47abe5
and dword [ebp - 0x1ec], 0
jmp 0x47ab49
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 0x7c7f
jge 0x47abe0
and dword [ebp - 0x1f4], 0
jmp 0x47ab6f
mov eax, dword [ebp - 0x1f4]
inc eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 0x3542
jge 0x47abdb
mov eax, dword [ebp - 0x30c]
imul eax, dword [ebp - 0x1ec]
mov edx, dword [ebp - 0x3e8]
sub edx, eax
mov ecx, dword [ebp - 0x1f4]
sar edx, cl
mov eax, edx
cdq
mov dword [ebp - 0xf14], eax
mov dword [ebp - 0xf10], edx
push dword [ebp - 0xf10]
push dword [ebp - 0xf14]
lea ecx, [ebp - 0x1a38]
call fcn.00401a1e
pop ecx
pop ecx
mov ecx, eax
call fcn.0043542e
push eax
call fcn.004a9457
pop ecx
lea ecx, [ebp - 0x1a38]
call fcn.00435424
jmp 0x47ab62
jmp 0x47ab3c
jmp 0x47ab16
jmp 0x47aaf0
mov dword [ebp - 0x100], 0
mov dword [ebp - 0xc3c], 0x392715ee
mov dword [ebp - 0x314], 0
jmp 0x47ac17
mov eax, dword [ebp - 0x314]
inc eax
mov dword [ebp - 0x314], eax
cmp dword [ebp - 0x314], 4
jge 0x47ac33
mov eax, dword [ebp - 0x314]
mov dword [ebp + eax*4 - 0x18cc], 0x6df251d6
jmp 0x47ac0a
lea eax, [ebp - 0x100]
push eax
push 0
push 0x7d3
push 0x3b55
push 1
push 0x6644
push 0x5563
push 1
push 0x3182
push 0x23f6
call fcn.0046e816
add esp, 0x28
mov dword [ebp - 0xc2c], 0xd7b
mov dword [ebp - 0xd64], str.bpbzyfq_bxihzsik_oyc_xcg_gut_wkthrapg_sfpapu_kbexxsigp_sqlccui_masuoeuk_ynzsp
cmp dword [ebp - 0xc2c], 0xf40
jle 0x47ad64
and dword [ebp - 0x31c], 0
jmp 0x47aca0
mov eax, dword [ebp - 0x31c]
inc eax
mov dword [ebp - 0x31c], eax
cmp dword [ebp - 0x31c], 0x40b8
jge 0x47ad64
and dword [ebp - 0x1fc], 0
jmp 0x47acc6
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 0x2ee9
jge 0x47ad5f
and dword [ebp - 0x3a8], 0
jmp 0x47acec
mov eax, dword [ebp - 0x3a8]
inc eax
mov dword [ebp - 0x3a8], eax
cmp dword [ebp - 0x3a8], 0x426b
jge 0x47ad5a
and dword [ebp - 0x204], 0
jmp 0x47ad0e
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 0x2395
jge 0x47ad58
mov eax, dword [ebp - 0x1fc]
imul eax, dword [ebp - 0x3a8]
sub eax, dword [ebp - 0x204]
and eax, dword [ebp - 0x31c]
cdq
mov dword [ebp - 0xf20], eax
mov dword [ebp - 0xf1c], edx
push dword [ebp - 0xf1c]
push dword [ebp - 0xf20]
mov ecx, 0xab56b8
call fcn.00435439
jmp 0x47ad01
jmp 0x47acdf
jmp 0x47acb9
jmp 0x47ac93
and dword [ebp - 4], 0
cmp dword [ebp - 0xc2c], 0x9a8
jge 0x47ad84
mov edx, dword [ebp - 0xd64]
mov ecx, 0xab56b8
call fcn.004371ef
jmp 0x47ada0
or dword [ebp - 4], 0xffffffff
jmp 0x47adaa
mov dword [ebp - 0x100], 0
jmp 0x47adc3
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 3
jg 0x47b1c4
mov dword [ebp - 0x130], 0xccb03629
mov dword [ebp - 0x214], 0xcea2ff3e
mov dword [ebp - 0x11b0], 0xb1b9b96
mov dword [ebp - 0x130], 0
jmp 0x47ae07
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 3
jg 0x47b17a
mov dword [ebp - 0xb8], 0x3066c93e
mov dword [ebp - 0x428], 0xd72a67f8
mov dword [ebp - 0x598], 0xffffffff
mov byte [ebp - 0x119], 0
movzx eax, byte [ebp - 0x119]
test eax, eax
je 0x47ae5f
push 0x3f85
push 0x7bc3
push 0
push 0
push 0xe21
call fcn.004870b8
add esp, 0x14
mov dword [ebp - 0xb8], 0
jmp 0x47ae78
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 3
jg 0x47b175
mov dword [ebp - 0x180], 0xfffffffb
mov dword [ebp - 0x188], 0xe2e4ed3
mov dword [ebp - 0x588], 0xfffffffb
mov dword [ebp - 0x180], 3
jmp 0x47aebc
mov eax, dword [ebp - 0x180]
dec eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 0
jl 0x47b04f
mov dword [ebp - 0x20c], 0xffffffff
push 4
lea ecx, [ebp - 0x13c4]
call fcn.0043557d
lea eax, [ebp - 0x1744]
push eax
push 0
push 0x3922
lea eax, [ebp - 0x13c4]
push eax
call fcn.004785ad
add esp, 0x10
mov dword [ebp - 0x20c], 3
jmp 0x47af16
mov eax, dword [ebp - 0x20c]
dec eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 0
jl 0x47af3b
mov byte [ebp - 0xd5], 0
movzx eax, byte [ebp - 0xd5]
test eax, eax
je 0x47af39
push 0
call fcn.0049ca61
pop ecx
jmp 0x47af09
cmp dword [ebp - 0xb8], 0x82e58099
jbe 0x47af53
mov dword [ebp - 0xc34], 1
jmp 0x47af5a
and dword [ebp - 0xc34], 0
mov eax, dword [ebp - 0xc34]
mov dword [ebp - 0xc3c], eax
cmp dword [ebp - 0xc3c], 0
je 0x47af84
cmp dword [ebp - 0xb8], 0
je 0x47af84
mov dword [ebp - 0xc44], 1
jmp 0x47af8b
and dword [ebp - 0xc44], 0
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x16b8], eax
mov dword [ebp - 0x428], 0xd34c
mov eax, dword [ebp - 0x428]
mov dword [ebp - 0x182c], eax
mov eax, dword [ebp - 0xc44]
mov dword [ebp - 0x188], eax
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x16c0], eax
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x18a4], eax
push 3
lea ecx, [ebp - 0x13c4]
call fcn.0043566b
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x18cc]
cmp dword [eax], ecx
jle 0x47affb
mov dword [ebp - 0xc60], 1
jmp 0x47b002
and dword [ebp - 0xc60], 0
cmp dword [ebp - 0xc60], 1
jge 0x47b017
mov dword [ebp - 0xbc0], 1
jmp 0x47b01e
and dword [ebp - 0xbc0], 0
mov eax, dword [ebp - 0xb8]
mov eax, dword [ebp + eax*4 - 0x18cc]
mov ecx, dword [ebp - 0xb8]
add ecx, dword [ebp - 0xbc0]
add eax, ecx
mov dword [ebp - 0x214], eax
lea ecx, [ebp - 0x13c4]
call fcn.0043564f
jmp 0x47aeaf
mov eax, dword [ebp - 0x588]
mov dword [ebp - 0x16c8], eax
cmp dword [ebp - 0x188], 0
jae 0x47b070
mov dword [ebp - 0xbfc], 1
jmp 0x47b077
and dword [ebp - 0xbfc], 0
mov eax, dword [ebp - 0x214]
cmp dword [ebp - 0xbfc], eax
jne 0x47b091
mov dword [ebp - 0x580], 1
jmp 0x47b098
and dword [ebp - 0x580], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x18cc]
cmp eax, dword [ebp - 0x580]
jl 0x47b0b8
mov dword [ebp - 0x910], 1
jmp 0x47b0bf
and dword [ebp - 0x910], 0
cmp dword [ebp - 0x910], 0
je 0x47b0dd
cmp dword [ebp - 0x180], 0
je 0x47b0dd
mov dword [ebp - 0xad8], 1
jmp 0x47b0e4
and dword [ebp - 0xad8], 0
mov eax, dword [ebp - 0x588]
add eax, dword [ebp - 0xad8]
jne 0x47b104
cmp dword [ebp - 0x100], 0
jne 0x47b104
and dword [ebp - 0x590], 0
jmp 0x47b10e
mov dword [ebp - 0x590], 1
cmp dword [ebp - 0x590], 0x7bde5156
jge 0x47b126
mov dword [ebp - 0x918], 1
jmp 0x47b12d
and dword [ebp - 0x918], 0
mov eax, dword [ebp - 0x918]
mov dword [ebp - 0x428], eax
mov eax, dword [ebp - 0x130]
imul eax, dword [ebp - 0x428]
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
mov dword [ebp - 0x188], eax
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x598], eax
mov eax, dword [ebp - 0x598]
mov dword [ebp - 0x11b0], eax
jmp 0x47ae6b
jmp 0x47adfa
mov byte [ebp - 0xfa], 0
push 0x2568
push 1
push 0x4c18
push 1
push 0x333d
push 0x4b40
lea eax, [ebp - 0xfa]
push eax
push 1
push 0x63cc
push 1
push 0
push 0xfef
push 0
push 0x73be
call fcn.0046e84c
add esp, 0x38
jmp 0x47adb6
mov dword [ebp - 4], 2
cmp dword [ebp - 0xbb8], 0x8e0
jge 0x47b1e3
push dword [ebp - 0xd6c]
call fcn.004a9457
pop ecx
jmp 0x47b1ff
or dword [ebp - 4], 0xffffffff
jmp 0x47b209
push 1
lea ecx, [ebp - 0xc78]
call fcn.0043557d
mov dword [ebp - 0x20], 0xfffffffe
push 0x6473
push 0
push 1
push 1
lea eax, [ebp - 0x1c8]
push eax
push 1
lea eax, [ebp - 0xc78]
push eax
call fcn.00455b68
add esp, 0x1c
mov dword [ebp - 0x1c8], 0
jmp 0x47b259
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 1
jge 0x47b275
mov eax, dword [ebp - 0x1c8]
mov dword [ebp + eax*4 - 0xd74], 0x6ae69ed9
jmp 0x47b24c
push 0xf45
push 1
push 0
push 0
push 0x5bc1
lea eax, [ebp - 0x20]
push eax
push 0x34c4
call fcn.0046cb92
add esp, 0x1c
mov eax, 0x9503
test eax, eax
je 0x47b338
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x20], eax
jle 0x47b2b7
mov dword [ebp - 0x5a0], 1
jmp 0x47b2be
and dword [ebp - 0x5a0], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x5a0], eax
jl 0x47b2d5
mov dword [ebp - 0x920], 1
jmp 0x47b2dc
and dword [ebp - 0x920], 0
push 0
lea ecx, [ebp - 0xc78]
call fcn.0043566b
mov esi, eax
push 0
lea ecx, [ebp - 0xc78]
call fcn.0043566b
mov ecx, dword [ebp - 0x920]
add ecx, dword [eax]
mov eax, 0x9d44c039
sub eax, ecx
cmp dword [esi], eax
je 0x47b317
mov dword [ebp - 0x5a8], 1
jmp 0x47b31e
and dword [ebp - 0x5a8], 0
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x5a8]
test eax, eax
je 0x47b338
mov dword [ebp - 0xae0], 1
jmp 0x47b33f
and dword [ebp - 0xae0], 0
cmp dword [ebp - 0xae0], 0xc4a87fce
ja 0x47b357
mov dword [ebp - 0x5b0], 1
jmp 0x47b35e
and dword [ebp - 0x5b0], 0
cmp dword [ebp - 0x5b0], 0x4811
jg 0x47b376
mov dword [ebp - 0x101c], 1
jmp 0x47b37d
and dword [ebp - 0x101c], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x1834], eax
mov esi, dword [ebp - 0x20]
push 0
lea ecx, [ebp - 0xc78]
call fcn.0043566b
cmp esi, dword [eax]
jg 0x47b3cb
mov dword [ebp - 0x20], 0
jmp 0x47b3aa
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jl 0x47b3c6
push 0
lea ecx, [ebp - 0xc78]
call fcn.0043566b
cmp dword [eax], 0
je 0x47b3c4
jmp 0x47b3c6
jmp 0x47b3a3
jmp 0x47b4c7
mov dword [ebp - 0x324], 0x491d0b6b
mov dword [ebp - 0x5c8], 0xfffffffe
cmp dword [ebp - 0x324], 0
jbe 0x47b424
cmp dword [ebp - 0x20], 0xfffffffb
jl 0x47b403
cmp dword [ebp - 0x324], 0
je 0x47b403
mov dword [ebp - 0x928], 1
jmp 0x47b40a
and dword [ebp - 0x928], 0
mov eax, dword [ebp - 0x324]
add eax, dword [ebp - 0x928]
je 0x47b424
mov dword [ebp - 0x5b8], 1
jmp 0x47b42b
and dword [ebp - 0x5b8], 0
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x5b8]
cmp eax, dword [ebp - 0x324]
je 0x47b448
mov dword [ebp - 0xbdc], 1
jmp 0x47b44f
and dword [ebp - 0xbdc], 0
push 0
lea ecx, [ebp - 0xc78]
call fcn.0043566b
mov ecx, dword [ebp - 0xbdc]
cmp ecx, dword [eax]
jge 0x47b472
mov dword [ebp - 0x5c0], 1
jmp 0x47b479
and dword [ebp - 0x5c0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd74]
cmp dword [ebp - 0x5c0], eax
jle 0x47b49a
mov dword [ebp - 0x930], 1
jmp 0x47b4a1
and dword [ebp - 0x930], 0
mov eax, dword [ebp - 0x930]
mov dword [ebp - 0x5c8], eax
lea eax, [ebp - 0x5c8]
push eax
lea eax, [ebp - 0x20]
push eax
push 0x239c
push 0
call fcn.0049451f
add esp, 0x10
lea ecx, [ebp - 0xc78]
call fcn.0043564f
mov dword [ebp - 0x2c], 0xe87df2f4
mov dword [ebp - 0x224], 0
mov dword [ebp - 0x50], 0xb054dbbe
mov dword [ebp - 0x4e0], 0x1e3c1dc0
mov dword [ebp - 0x16d0], 2
mov dword [ebp - 0x21c], 0
jmp 0x47b517
mov eax, dword [ebp - 0x21c]
inc eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 2
jge 0x47b533
mov eax, dword [ebp - 0x21c]
mov dword [ebp + eax*4 - 0x444], 0xcff0ea75
jmp 0x47b50a
mov dword [ebp - 0x2c], 0
jmp 0x47b543
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jg 0x47b786
push 2
lea ecx, [ebp - 0x1228]
call fcn.0043557d
mov dword [ebp - 0x110c], 9
push 0x4d12
lea eax, [ebp - 0x1228]
push eax
push 0x1cc9
push 0x5896
lea eax, [ebp - 0x1928]
push eax
push 1
push 0xea9
push 0
push 0
push 1
push 0x48a3
push 0x4c36
push 0x4a6b
push 0x4d47
push 0x2861
call fcn.0045868e
add esp, 0x3c
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x444]
mov dword [ebp - 0x16d8], eax
xor eax, eax
inc eax
jne 0x47b651
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x444]
mov dword [ebp - 0x183c], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x444]
mov dword [ebp - 0x16e0], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x444]
cmp eax, dword [ebp - 0x50]
jge 0x47b609
mov dword [ebp - 0xae8], 1
jmp 0x47b610
and dword [ebp - 0xae8], 0
cmp dword [ebp - 0xae8], 0x4408
jne 0x47b628
mov dword [ebp - 0x5d0], 1
jmp 0x47b62f
and dword [ebp - 0x5d0], 0
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x444]
mov dword [ebp - 0x224], eax
mov eax, dword [ebp - 0x224]
cmp eax, dword [ebp - 0x5d0]
jg 0x47b6df
mov dword [ebp - 0x50], 1
jmp 0x47b661
mov eax, dword [ebp - 0x50]
dec eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
jl 0x47b6ad
mov eax, dword [ebp - 0x50]
cmp dword [ebp + eax*4 - 0x444], 0
je 0x47b676
jmp 0x47b6ad
mov byte [ebp - 0xe4], 0
lea eax, [ebp - 0xe4]
push eax
push 0x13e2
push 1
push 0x61f1
push 0x436d
push 0x7cd5
push 0
push 0
push 0x4a3d
call fcn.00476a01
add esp, 0x24
jmp 0x47b65a
lea eax, [ebp - 0x224]
push eax
push 0x53d3
push 0x1d8
lea eax, [ebp - 0x50]
push eax
push 0
push 0x22c3
push 0x4c33
push 0
push 0x177d
call fcn.004718ba
add esp, 0x24
jmp 0x47b74c
mov dword [ebp - 0x3b0], 0
jmp 0x47b6f8
mov eax, dword [ebp - 0x3b0]
inc eax
mov dword [ebp - 0x3b0], eax
cmp dword [ebp - 0x3b0], 4
jge 0x47b714
mov eax, dword [ebp - 0x3b0]
mov dword [ebp + eax*4 - 0x18e0], 1
jmp 0x47b6eb
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x18e0]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x18e0], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x18e0], 0
je 0x47b74c
lea ecx, [ebp - 0x1228]
call fcn.0043564f
jmp 0x47b786
lea eax, [ebp - 0x50]
push eax
push 0
lea eax, [ebp - 0x110c]
push eax
push 0x5575
push 0x482a
lea eax, [ebp - 0x1228]
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.00470e2d
add esp, 0x1c
lea ecx, [ebp - 0x1228]
call fcn.0043564f
jmp 0x47b53c
mov eax, 0xd863
test eax, eax
je 0x47b7c5
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x224], 0
jne 0x47b7a2
cmp dword [ebp - 0x2c], 0
push 4
pop eax
shl eax, 0
xor ecx, ecx
sub ecx, dword [ebp + eax - 0x444]
cmp ecx, dword [ebp - 0x4e0]
jle 0x47b7c5
mov dword [ebp - 0x938], 1
jmp 0x47b7cc
and dword [ebp - 0x938], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x444]
cmp dword [ebp - 0x938], eax
je 0x47b7ed
mov dword [ebp - 0x5d8], 1
jmp 0x47b7f4
and dword [ebp - 0x5d8], 0
cmp dword [ebp - 0x5d8], 0x8f302d78
je 0x47b80f
cmp dword [ebp - 0x2c], 0
jne 0x47b80f
and dword [ebp - 0xc48], 0
jmp 0x47b819
mov dword [ebp - 0xc48], 1
mov eax, dword [ebp - 0x4e0]
cmp dword [ebp - 0xc48], eax
jg 0x47b833
mov dword [ebp - 0xd7c], 1
jmp 0x47b83a
and dword [ebp - 0xd7c], 0
mov eax, 0xffff
cmp eax, 5
jne 0x47b850
mov dword [ebp - 0x5e0], 1
jmp 0x47b857
and dword [ebp - 0x5e0], 0
mov eax, dword [ebp - 0x4e0]
cmp dword [ebp - 0x5e0], eax
jge 0x47b871
mov dword [ebp - 0x940], 1
jmp 0x47b878
and dword [ebp - 0x940], 0
mov eax, dword [ebp - 0x940]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x24], 0x7b18
mov dword [ebp - 0x138], 0xffffffff
mov dword [ebp - 0xd84], 0xffffffff
mov dword [ebp - 0x1024], 0x1600d549
push 2
lea ecx, [ebp - 0x1424]
call fcn.0043557d
push 0x1e34
push 0x3c14
push 0x56b7
push 0x18a2
push 0x370b
push 0
lea eax, [ebp - 0x18ac]
push eax
lea eax, [ebp - 0x1424]
push eax
push 0x4674
push 1
push 1
call fcn.0045cd63
add esp, 0x2c
mov byte [ebp - 0xe6], 0
push 0
push 0x22ad
push 0x5681
lea eax, [ebp - 0xe6]
push eax
push 0
push 1
push 0x2e3d
push 1
push 0xf88
push 0x63ec
push 0x777d
push 0x536c
push 0x31db
push 0x4cc8
call fcn.00458cfa
add esp, 0x38
lea eax, [ebp - 0x1024]
push eax
push 0x35e3
push 0x6304
push 1
push 0
lea eax, [ebp - 0x1424]
push eax
push 0
lea eax, [ebp - 0xd84]
push eax
push 0x6406
push 0x49ad
push 0x3567
push 1
push 1
call fcn.004758dc
add esp, 0x34
lea ecx, [ebp - 0x1424]
call fcn.0043564f
xor eax, eax
jne 0x47b993
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x24], eax
jl 0x47c2d8
mov dword [ebp - 0x16e8], 1
mov dword [ebp - 0x1844], 0x6915a136
mov dword [ebp - 0x16f0], 9
mov dword [ebp - 0x11b4], 0xffff
push 0
push 0x4c06
push 0x644f
push 0xe86
push 0x4e1
push 0x19c6
push 0x4504
push 0x4bbf
push 0x2780
push 0x5655
push 1
push 0
push 0x51cc
push 0x3584
push 1
call fcn.00487289
add esp, 0x3c
push 1
push 1
push 1
push 0x7d0
push 0x24e1
push 0
lea eax, [ebp - 0x11b4]
push eax
call fcn.0047a20d
add esp, 0x1c
mov dword [ebp - 0x1034], 2
mov dword [ebp - 0xa0], 1
mov dword [ebp - 0x22c], 0
mov dword [ebp - 0xa0], 0x19
jmp 0x47ba5a
mov eax, dword [ebp - 0xa0]
dec eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0x17
jl 0x47bcec
mov dword [ebp - 0x3f0], 0xd1456b86
mov dword [ebp - 0x480], 0xfffffffc
mov dword [ebp - 0x558], 0xffffffff
mov dword [ebp - 0x102c], 0xffffffff
mov dword [ebp - 0x32c], 0
jmp 0x47baa8
mov eax, dword [ebp - 0x32c]
inc eax
mov dword [ebp - 0x32c], eax
cmp dword [ebp - 0x32c], 3
jge 0x47bac4
mov eax, dword [ebp - 0x32c]
mov dword [ebp + eax*4 - 0x13dc], 1
jmp 0x47ba9b
cmp dword [ebp - 0xa0], 0
je 0x47bbd0
cmp dword [ebp - 0xa0], 0
jne 0x47bb89
mov eax, dword [ebp - 0x22c]
mov dword [ebp - 0x5e8], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x5e8]
mov dword [ebp + eax - 0x13dc], ecx
cmp dword [ebp - 0x5e8], 0
jne 0x47bb0e
mov eax, 0x992d
test eax, eax
je 0x47bb23
cmp dword [ebp - 0x22c], 0
je 0x47bb23
mov dword [ebp - 0xaf0], 1
jmp 0x47bb2a
and dword [ebp - 0xaf0], 0
mov eax, dword [ebp - 0x22c]
imul eax, dword [ebp - 0xaf0]
neg eax
je 0x47bb47
mov dword [ebp - 0xd8c], 1
jmp 0x47bb4e
and dword [ebp - 0xd8c], 0
mov eax, dword [ebp - 0x22c]
add eax, dword [ebp - 0x3f0]
cmp eax, 1
jne 0x47bb6b
mov dword [ebp - 0x5f0], 1
jmp 0x47bb72
and dword [ebp - 0x5f0], 0
mov eax, dword [ebp - 0x480]
cmp dword [ebp - 0x5f0], eax
jle 0x47bb89
and dword [ebp - 0x948], 0
jmp 0x47bb93
mov dword [ebp - 0x948], 1
imul eax, dword [ebp - 0x948], 0x3b5b
imul eax, eax, 0xfffa
cmp eax, dword [ebp - 0xa0]
jne 0x47bbb7
mov dword [ebp - 0x5f8], 1
jmp 0x47bbbe
and dword [ebp - 0x5f8], 0
mov eax, dword [ebp - 0xa0]
add eax, dword [ebp - 0x5f8]
sub eax, dword [ebp - 0x3f0]
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x13dc]
mov dword [ebp - 0x3f0], eax
mov eax, dword [ebp - 0x3f0]
mov dword [ebp - 0x480], eax
cmp dword [ebp - 0x480], 0xacc5
jne 0x47bc07
mov dword [ebp - 0xbc8], 1
jmp 0x47bc0e
and dword [ebp - 0xbc8], 0
mov eax, dword [ebp - 0x558]
cmp dword [ebp - 0xbc8], eax
jne 0x47bc28
mov dword [ebp - 0x600], 1
jmp 0x47bc2f
and dword [ebp - 0x600], 0
mov eax, dword [ebp - 0x600]
mov dword [ebp - 0x558], eax
mov eax, dword [ebp - 0x558]
cmp dword [ebp - 0xa0], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x13dc]
neg eax
cmp eax, 0xfffffff6
je 0x47bc67
mov dword [ebp - 0x950], 1
jmp 0x47bc6e
and dword [ebp - 0x950], 0
cmp dword [ebp - 0x950], 0x8361cd5c
jae 0x47bc86
mov dword [ebp - 0x608], 1
jmp 0x47bc8d
and dword [ebp - 0x608], 0
mov eax, dword [ebp - 0x608]
mov dword [ebp - 0x102c], eax
mov byte [ebp - 0xe8], 0
push 0xff5
push 1
push 0x3cd6
push 0x7caa
push 0x7b31
push 0x4711
push 0
push 0x61df
push 0x13cb
push 0
push 0x3881
push 0x262c
push 0x70f1
lea eax, [ebp - 0xe8]
push eax
call fcn.004764fa
add esp, 0x38
jmp 0x47ba4d
mov dword [ebp - 0x24], 0x17
jmp 0x47bcfc
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0x25
jl 0x47c294
push 4
lea ecx, [ebp - 0x1454]
call fcn.0043557d
mov dword [ebp - 0x1324], 0x2cb51dba
mov dword [ebp - 0x1320], 0x2cb51dba
mov dword [ebp - 0x131c], 0x2cb51dba
mov dword [ebp - 0x1318], 0x2cb51dba
lea ecx, [ebp - 0x455]
call fcn.0043567a
push eax
lea eax, [ebp - 0x1314]
push eax
lea eax, [ebp - 0x1324]
push eax
lea ecx, [ebp - 0x19c8]
call fcn.0043567d
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1288]
call fcn.00435629
mov dword [ebp - 0xaf8], 0x6a37
mov dword [ebp - 0xd94], str.ynrvdv_hyorhe_yhgtyp_oyclrnhzg_tzdf_uxhdd_uowqpl_kxsfy_txjb_ecolpanbc_mztuyu
cmp dword [ebp - 0xaf8], 0x6be1
jle 0x47be92
and dword [ebp - 0x23c], 0
jmp 0x47bdaa
mov eax, dword [ebp - 0x23c]
inc eax
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 0x56e4
jge 0x47be92
and dword [ebp - 0x234], 0
jmp 0x47bdd0
mov eax, dword [ebp - 0x234]
inc eax
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 0x3f80
jge 0x47be8d
and dword [ebp - 0x334], 0
jmp 0x47bdf6
mov eax, dword [ebp - 0x334]
inc eax
mov dword [ebp - 0x334], eax
cmp dword [ebp - 0x334], 0x4356
jge 0x47be88
and dword [ebp - 0x3b8], 0
jmp 0x47be1c
mov eax, dword [ebp - 0x3b8]
inc eax
mov dword [ebp - 0x3b8], eax
cmp dword [ebp - 0x3b8], 0x4c9
jge 0x47be83
mov eax, dword [ebp - 0x234]
mov ecx, dword [ebp - 0x334]
sar eax, cl
xor eax, dword [ebp - 0x23c]
or eax, dword [ebp - 0x3b8]
cdq
mov dword [ebp - 0xf2c], eax
mov dword [ebp - 0xf28], edx
push dword [ebp - 0xf28]
push dword [ebp - 0xf2c]
lea ecx, [ebp - 0x1a98]
call fcn.00401a1e
pop ecx
pop ecx
mov ecx, eax
call fcn.0043542e
push eax
call fcn.004a9457
pop ecx
lea ecx, [ebp - 0x1a98]
call fcn.00435424
jmp 0x47be0f
jmp 0x47bde9
jmp 0x47bdc3
jmp 0x47bd9d
mov dword [ebp - 0x958], 0x4f27d270
mov dword [ebp - 4], 4
cmp dword [ebp - 0xaf8], 0x68e3
jge 0x47bebb
push dword [ebp - 0xd94]
call fcn.004a9457
pop ecx
jmp 0x47bed7
or dword [ebp - 4], 0xffffffff
jmp 0x47bee1
push 0x3751
push 1
push 0xf4d
push 0x6631
push 0
lea eax, [ebp - 0x1908]
push eax
push 0x1c62
push 1
push 0x8de
lea eax, [ebp - 0x1454]
push eax
call fcn.00478642
add esp, 0x28
push 3
lea ecx, [ebp - 0x1454]
call fcn.0043566b
mov dword [eax], 0xc64a6847
push 1
lea ecx, [ebp - 0x1288]
call fcn.0043566b
mov dword [eax], 0x1b
jmp 0x47bf62
push 1
lea ecx, [ebp - 0x1288]
call fcn.0043566b
mov dword [ebp - 0x610], eax
mov eax, dword [ebp - 0x610]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x610]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x1288]
call fcn.0043566b
cmp dword [eax], 0xffffffe6
jge 0x47c01f
mov dword [ebp - 0x244], 0
jmp 0x47bf91
mov eax, dword [ebp - 0x244]
inc eax
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 3
jge 0x47bfad
mov eax, dword [ebp - 0x244]
mov dword [ebp + eax*4 - 0x1960], 0x5362
jmp 0x47bf84
mov dword [ebp - 0x958], 0x85c9e53
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x958]
mov dword [ebp + eax - 0x1960], ecx
mov byte [ebp - 0xea], 0
movzx eax, byte [ebp - 0xea]
test eax, eax
je 0x47c01a
push 0x663b
push 0x2b2e
push 0x3bc6
push 0x7879
push 0
push 0x1fb7
push 0x5119
push 0x47b5
push 0
push 0x3292
push 0x917
push 0x7c52
call fcn.004929d3
add esp, 0x30
jmp 0x47bf3e
lea ecx, [ebp - 0x1288]
call fcn.0043564f
lea ecx, [ebp - 0x1454]
call fcn.0043564f
mov byte [ebp - 0xec], 0
mov dword [ebp - 0x618], 0x53d0
mov dword [ebp - 0xd9c], str.nuzkpgx_emavzliev_awcbwogk_wmwalisk_loajpsb_qvwf_dzujhx_wgeanfzg_iwmts_elk_roxpgmafg_flzfqyof
cmp dword [ebp - 0x618], 0x5758
jle 0x47c160
and dword [ebp - 0x254], 0
jmp 0x47c076
mov eax, dword [ebp - 0x254]
inc eax
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 0xe02
jge 0x47c160
and dword [ebp - 0x33c], 0
jmp 0x47c09c
mov eax, dword [ebp - 0x33c]
inc eax
mov dword [ebp - 0x33c], eax
cmp dword [ebp - 0x33c], 0x3534
jge 0x47c15b
and dword [ebp - 0x24c], 0
jmp 0x47c0c2
mov eax, dword [ebp - 0x24c]
inc eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 0xd18
jge 0x47c156
and dword [ebp - 0x410], 0
jmp 0x47c0e8
mov eax, dword [ebp - 0x410]
inc eax
mov dword [ebp - 0x410], eax
cmp dword [ebp - 0x410], 0x72af
jge 0x47c151
mov eax, dword [ebp - 0x33c]
mov ecx, dword [ebp - 0x24c]
sar eax, cl
mov ecx, dword [ebp - 0x410]
sar eax, cl
xor eax, dword [ebp - 0x254]
cdq
mov dword [ebp - 0xf38], eax
mov dword [ebp - 0xf34], edx
push dword [ebp - 0xf34]
push dword [ebp - 0xf38]
lea ecx, [ebp - 0x1aec]
call fcn.00401a1e
pop ecx
pop ecx
mov ecx, eax
call fcn.0043542e
push eax
call fcn.004a9457
pop ecx
lea ecx, [ebp - 0x1aec]
call fcn.00435424
jmp 0x47c0db
jmp 0x47c0b5
jmp 0x47c08f
jmp 0x47c069
mov dword [ebp - 0x1114], 3
push 2
lea ecx, [ebp - 0x13f4]
call fcn.0043557d
push 0x37ac
push 1
lea eax, [ebp - 0x16f8]
push eax
push 0x3dee
lea eax, [ebp - 0x13f4]
push eax
push 0
push 0
call fcn.0045bfb9
add esp, 0x1c
push 0x9c2
push 0x525a
push 0
push 0x7c24
push 0x72de
push 1
push 1
call fcn.00477c54
add esp, 0x1c
push 0x5011
push 0
push 0x2810
push 0x6a11
push 0x6764
push 0x63a1
lea eax, [ebp - 0x13f4]
push eax
push 0x4172
push 1
push 0x21f1
push 0xf1f
push 1
push 0x5498
push 0x5ab3
push 0x3fbf
push 1
push 0x34f2
push 0x49c7
lea eax, [ebp - 0x1114]
push eax
push 0x47e5
call fcn.00456ffa
add esp, 0x50
lea ecx, [ebp - 0x13f4]
call fcn.0043564f
mov dword [ebp - 4], 6
cmp dword [ebp - 0x618], 0x518f
jge 0x47c24d
push dword [ebp - 0xd9c]
call fcn.004a9457
pop ecx
jmp 0x47c269
or dword [ebp - 4], 0xffffffff
jmp 0x47c273
push 0
push 0x58a2
push 1
push 1
push 0
lea eax, [ebp - 0xec]
push eax
call fcn.0046e093
add esp, 0x18
jmp 0x47bcf5
push 0
push 0x6888
lea eax, [ebp - 0x1034]
push eax
push 1
push 0x2ba
lea eax, [ebp - 0x138]
push eax
push 0x1b3
push 0x6ba2
push 0x2624
push 1
push 0x2b5e
push 0x588d
call fcn.00471ac4
add esp, 0x30
jmp 0x47ec80
push 2
lea ecx, [ebp - 0x1394]
call fcn.0043557d
mov dword [ebp - 0x1d0], 0
jmp 0x47c2fe
mov eax, dword [ebp - 0x1d0]
inc eax
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 2
jge 0x47c320
push dword [ebp - 0x1d0]
lea ecx, [ebp - 0x1394]
call fcn.0043566b
mov dword [eax], 0xe0a8eac8
jmp 0x47c2f1
push 0
push 0x63aa
push 0x464d
push 0x2e3e
call fcn.0049b1c8
add esp, 0x10
lea eax, [ebp - 0x1394]
push eax
push 0x7241
push 0
push 0x3773
call fcn.0046da76
add esp, 0x10
lea ecx, [ebp - 0x1394]
call fcn.0043564f
mov dword [ebp - 0x12d4], 0
mov dword [ebp - 0x12d0], 0
mov dword [ebp - 0x12cc], 0
mov dword [ebp - 0x12c8], 0
push 2
lea ecx, [ebp - 0x13a0]
call fcn.0043557d
push 4
lea ecx, [ebp - 0x140c]
call fcn.0043557d
mov dword [ebp - 0x184c], 0xfffffffe
mov dword [ebp - 0xc20], 0x3f1f
mov dword [ebp - 0xda4], str.row_iargaqbh_xavksog_hwo_vrwjtwdji_hoeus_lmdcpmptj_kwnla_hqoourf_rkaqfyex_abiqhfif_cbbukw_nhpgrbdh_hcwk
cmp dword [ebp - 0xc20], 0x427a
jle 0x47c4aa
and dword [ebp - 0x3c0], 0
jmp 0x47c3e5
mov eax, dword [ebp - 0x3c0]
inc eax
mov dword [ebp - 0x3c0], eax
cmp dword [ebp - 0x3c0], 0x2ebb
jge 0x47c4aa
and dword [ebp - 0x264], 0
jmp 0x47c40b
mov eax, dword [ebp - 0x264]
inc eax
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 0x52e1
jge 0x47c4a5
and dword [ebp - 0x25c], 0
jmp 0x47c431
mov eax, dword [ebp - 0x25c]
inc eax
mov dword [ebp - 0x25c], eax
cmp dword [ebp - 0x25c], 0x1ed2
jge 0x47c4a0
and dword [ebp - 0x344], 0
jmp 0x47c453
mov eax, dword [ebp - 0x344]
inc eax
mov dword [ebp - 0x344], eax
cmp dword [ebp - 0x344], 0x3e84
jge 0x47c49e
mov ecx, dword [ebp - 0x25c]
sub ecx, dword [ebp - 0x344]
mov eax, dword [ebp - 0x264]
shl eax, cl
and eax, dword [ebp - 0x3c0]
cdq
mov dword [ebp - 0xf44], eax
mov dword [ebp - 0xf40], edx
push dword [ebp - 0xf40]
push dword [ebp - 0xf44]
mov ecx, 0xab56b8
call fcn.00435439
jmp 0x47c446
jmp 0x47c424
jmp 0x47c3fe
jmp 0x47c3d8
mov dword [ebp - 0x1700], 0x164caf14
mov dword [ebp - 4], 8
cmp dword [ebp - 0xc20], 0x3cac
jge 0x47c4d7
mov edx, dword [ebp - 0xda4]
mov ecx, 0xab56b8
call fcn.004371ef
jmp 0x47c4f3
or dword [ebp - 4], 0xffffffff
jmp 0x47c4fd
push 3
lea ecx, [ebp - 0x1764]
call fcn.0043557d
mov dword [ebp - 0x14], 0
jmp 0x47c51a
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x47c536
push dword [ebp - 0x14]
lea ecx, [ebp - 0x13a0]
call fcn.0043566b
mov dword [eax], 0xeac8
jmp 0x47c513
mov dword [ebp - 0x14], 0
jmp 0x47c546
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 4
jge 0x47c562
push dword [ebp - 0x14]
lea ecx, [ebp - 0x140c]
call fcn.0043566b
mov dword [eax], 0x833fcb50
jmp 0x47c53f
push 1
push 0x6284
push 0
push 0x7dab
push 0x3f7b
lea eax, [ebp - 0x1764]
push eax
lea eax, [ebp - 0x14]
push eax
push 0x391d
push 0
call fcn.00486df9
add esp, 0x24
mov dword [ebp - 0x620], 0x78b3
mov dword [ebp - 0x11d4], str.wcicobfuz_luipgzm_osc_zcz_qulhwwnu_xuomqpiyy_rcyr_lyc_kpw_fxcetc_tjcursih_etmdp_spqkmztyb
cmp dword [ebp - 0x620], 0x7c23
jle 0x47c65c
and dword [ebp - 0x26c], 0
jmp 0x47c5c9
mov eax, dword [ebp - 0x26c]
inc eax
mov dword [ebp - 0x26c], eax
cmp dword [ebp - 0x26c], 0x69ec
jge 0x47c65c
and dword [ebp - 0x358], 0
jmp 0x47c5ef
mov eax, dword [ebp - 0x358]
inc eax
mov dword [ebp - 0x358], eax
cmp dword [ebp - 0x358], 0x5bc0
jge 0x47c657
and dword [ebp - 0x274], 0
jmp 0x47c611
mov eax, dword [ebp - 0x274]
inc eax
mov dword [ebp - 0x274], eax
cmp dword [ebp - 0x274], 0x707c
jge 0x47c655
mov eax, dword [ebp - 0x26c]
imul eax, dword [ebp - 0x358]
sub eax, dword [ebp - 0x274]
cdq
mov dword [ebp - 0xf50], eax
mov dword [ebp - 0xf4c], edx
push dword [ebp - 0xf4c]
push dword [ebp - 0xf50]
mov ecx, 0xab56b8
call fcn.00435439
jmp 0x47c604
jmp 0x47c5e2
jmp 0x47c5bc
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x620], 0x7866
jge 0x47c67f
mov edx, dword [ebp - 0x11d4]
mov ecx, 0xab56b8
call fcn.004371ef
jmp 0x47c69b
or dword [ebp - 4], 0xffffffff
jmp 0x47c6a5
mov dword [ebp - 0x14], 0
jmp 0x47c6b5
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jge 0x47c6cb
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x18b4], 5
jmp 0x47c6ae
mov byte [ebp - 0xf0], 0
lea eax, [ebp - 0xf0]
push eax
push 0x3d8a
push 1
push 0x289e
push 1
push 1
push 0x10bd
push 0x6108
push 1
push 0x6a22
push 0x79bb
call fcn.00454ba3
add esp, 0x2c
push 0
push 0x7d53
push 0x77e6
lea eax, [ebp - 0x13a0]
push eax
lea eax, [ebp - 0x140c]
push eax
call fcn.00469fc0
add esp, 0x14
lea ecx, [ebp - 0x1764]
call fcn.0043564f
lea ecx, [ebp - 0x140c]
call fcn.0043564f
lea ecx, [ebp - 0x13a0]
call fcn.0043564f
mov dword [ebp - 0x10a0], 8
mov dword [ebp - 0x108], 9
mov dword [ebp - 0x488], 4
mov dword [ebp - 0xc8], 0xfffffffa
mov dword [ebp - 0x103c], 0xced66e5d
mov dword [ebp - 0x4e8], 8
mov dword [ebp - 0xdb4], 0xffffffff
mov dword [ebp - 0x640], 0x3cbaa6f4
mov dword [ebp - 0x638], 0xe3f5
mov dword [ebp - 0x1498], 8
mov dword [ebp - 0x1494], 8
mov dword [ebp - 0x1490], 8
mov dword [ebp - 0x148c], 8
mov dword [ebp - 0x648], 0xfffffffd
mov dword [ebp - 0xdbc], 0xa87187d
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0x488], eax
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0x1708], eax
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0x488], eax
mov eax, dword [ebp - 0xc8]
cmp dword [ebp - 0xc8], eax
jg 0x47c81e
mov dword [ebp - 0x960], 1
jmp 0x47c825
and dword [ebp - 0x960], 0
cmp dword [ebp - 0x960], 0x2eb2
jge 0x47c83d
mov dword [ebp - 0xdac], 1
jmp 0x47c844
and dword [ebp - 0xdac], 0
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0x1854], eax
mov eax, dword [ebp - 0x488]
mov dword [ebp - 0x103c], eax
mov eax, dword [ebp - 0xc8]
cmp dword [ebp - 0x108], eax
jg 0x47c87f
cmp dword [ebp - 0x108], 0
je 0x47c87f
mov dword [ebp - 0x628], 1
jmp 0x47c886
and dword [ebp - 0x628], 0
imul eax, dword [ebp - 0x628], 0x5f32
cmp eax, dword [ebp - 0xc8]
jg 0x47c8a4
mov dword [ebp - 0xb00], 1
jmp 0x47c8ab
and dword [ebp - 0xb00], 0
mov eax, dword [ebp - 0x108]
imul eax, dword [ebp - 0xb00]
cmp eax, 0x95d7
jle 0x47c8cb
mov dword [ebp - 0x630], 1
jmp 0x47c8d2
and dword [ebp - 0x630], 0
mov eax, dword [ebp - 0x630]
mov dword [ebp - 0x4e8], eax
mov eax, dword [ebp - 0x4e8]
mov dword [ebp - 0x1710], eax
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0x14e0], eax
mov eax, dword [ebp - 0x4e8]
mov dword [ebp - 0x14e4], eax
mov eax, 0xabaf
sub eax, dword [ebp - 0x108]
add eax, dword [ebp - 0xdb4]
cmp eax, 0xfffffff6
je 0x47c92b
push 7
pop eax
test eax, eax
je 0x47c92b
mov dword [ebp - 0x111c], 1
jmp 0x47c932
and dword [ebp - 0x111c], 0
mov eax, dword [ebp - 0x640]
mov dword [ebp - 0x14ec], eax
xor eax, eax
inc eax
cmp eax, 0xfffffff9
jl 0x47c952
mov dword [ebp - 0x968], 1
jmp 0x47c959
and dword [ebp - 0x968], 0
mov eax, dword [ebp - 0x968]
mov dword [ebp - 0x638], eax
cmp dword [ebp - 0x638], 0x16ffa942
jge 0x47c97d
mov dword [ebp - 0xbd0], 1
jmp 0x47c984
and dword [ebp - 0xbd0], 0
mov eax, dword [ebp - 0xbd0]
imul eax, dword [ebp - 0x640]
mov dword [ebp - 0x970], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x970]
mov dword [ebp + eax - 0x1498], ecx
mov eax, dword [ebp - 0x108]
sub eax, dword [ebp - 0x970]
mov dword [ebp - 0x648], eax
je 0x47c9d2
cmp dword [ebp - 0xc8], 0
je 0x47c9d2
mov dword [ebp - 0xb08], 1
jmp 0x47c9d9
and dword [ebp - 0xb08], 0
mov eax, dword [ebp - 0xb08]
mov dword [ebp - 0xdbc], eax
mov dword [ebp - 0xdc4], 0xe446df37
push 3
lea ecx, [ebp - 0x13b8]
call fcn.0043557d
mov dword [ebp - 0x11bc], 0x5fe46c2e
mov dword [ebp - 0x1044], 0xfffffffd
mov dword [ebp - 0xdcc], 0xfffffffb
mov dword [ebp - 0x1374], 0x9725245f
mov dword [ebp - 0x1370], 0x9725245f
mov dword [ebp - 0x136c], 0x9725245f
mov dword [ebp - 0x1368], 0x9725245f
lea ecx, [ebp - 0x465]
call fcn.0043567a
push eax
lea eax, [ebp - 0x1364]
push eax
lea eax, [ebp - 0x1374]
push eax
lea ecx, [ebp - 0x19f8]
call fcn.0043567d
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1774]
call fcn.00435629
mov dword [ebp - 0x14f4], 0x9ba
mov dword [ebp - 0x14fc], 0xffffffff
mov dword [ebp - 0x104c], 0xcaea0a9f
mov dword [ebp - 0x3f8], 0
jmp 0x47caae
mov eax, dword [ebp - 0x3f8]
inc eax
mov dword [ebp - 0x3f8], eax
cmp dword [ebp - 0x3f8], 3
jge 0x47cad0
push dword [ebp - 0x3f8]
lea ecx, [ebp - 0x13b8]
call fcn.0043566b
mov dword [eax], 0x64dc
jmp 0x47caa1
push 0x6c45
push 0
lea eax, [ebp - 0x1044]
push eax
lea eax, [ebp - 0x1774]
push eax
push 0
push 0x51c5
lea eax, [ebp - 0x13b8]
push eax
lea eax, [ebp - 0xdc4]
push eax
lea eax, [ebp - 0x11bc]
push eax
push 1
lea eax, [ebp - 0xdcc]
push eax
call fcn.0045f314
add esp, 0x2c
push 0x6717
push 0x2432
push 0x1ada
push 0x77e4
push 0x19ff
push 0
lea eax, [ebp - 0x104c]
push eax
push 0x42f9
push 1
push 0
call fcn.00467685
add esp, 0x28
lea ecx, [ebp - 0x1774]
call fcn.0043564f
lea ecx, [ebp - 0x13b8]
call fcn.0043564f
mov dword [ebp - 0x138], 0
jmp 0x47cb74
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 3
jg 0x47e782
mov dword [ebp - 0xddc], 0xb110c93b
mov dword [ebp - 0x1054], 0xd658edf
mov dword [ebp - 0xdd4], 0xe77e815f
mov dword [ebp - 0x1124], 1
push 0x532c
push 1
lea eax, [ebp - 0xdd4]
push eax
push 0x4288
lea eax, [ebp - 0x1124]
push eax
push 0
push 0x31ee
push 1
lea eax, [ebp - 0xddc]
push eax
lea eax, [ebp - 0x1054]
push eax
push 1
push 0x6209
call fcn.0045bb2a
add esp, 0x30
mov dword [ebp - 0xc30], 1
mov dword [ebp - 0x60], 0xfffffff9
mov dword [ebp - 0x17c], 0xf5f40e13
mov dword [ebp - 0x524], 0xffffffff
push 2
lea ecx, [ebp - 0x1234]
call fcn.0043557d
push 3
lea ecx, [ebp - 0x1140]
call fcn.0043557d
mov dword [ebp - 0x11e4], 2
mov dword [ebp - 0x680], 7
mov dword [ebp - 0xdec], 9
mov dword [ebp - 0x1504], 0xde30ea3b
mov dword [ebp - 0x112c], 0xfffffff6
lea eax, [ebp - 0xde4]
push eax
push 0x2833
push 0x136f
push 0x29d2
lea eax, [ebp - 0x1234]
push eax
push 0x2146
push 0
push 1
push 1
call fcn.0045d98b
add esp, 0x24
push 0x6919
push 0x5f72
push 0x45c8
lea eax, [ebp - 0xde4]
push eax
push 0x7de
push 1
push 0x76a7
push 0x62e2
push 0x6331
lea eax, [ebp - 0x1140]
push eax
push 0x674d
push 1
push 1
push 0
push 1
push 1
push 0x775c
push 0x3873
call fcn.0046c40f
add esp, 0x48
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x150c], eax
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x1514], eax
cmp dword [ebp - 0x60], 0
je 0x47cdb7
mov eax, dword [ebp - 0x17c]
cmp dword [ebp - 0x60], eax
je 0x47cd11
mov dword [ebp - 0x650], 1
jmp 0x47cd18
and dword [ebp - 0x650], 0
cmp dword [ebp - 0x650], 0xffffffff
jne 0x47cd2d
mov dword [ebp - 0x978], 1
jmp 0x47cd34
and dword [ebp - 0x978], 0
cmp dword [ebp - 0x978], 0xffffffff
jne 0x47cd49
mov dword [ebp - 0x658], 1
jmp 0x47cd50
and dword [ebp - 0x658], 0
mov eax, dword [ebp - 0x60]
imul eax, dword [ebp - 0x658]
cmp eax, dword [ebp - 0x17c]
jne 0x47cd6e
mov dword [ebp - 0xc5c], 1
jmp 0x47cd75
and dword [ebp - 0xc5c], 0
cmp dword [ebp - 0xc5c], 0xfffffffc
ja 0x47cd8a
mov dword [ebp - 0x660], 1
jmp 0x47cd91
and dword [ebp - 0x660], 0
mov eax, dword [ebp - 0x17c]
add eax, dword [ebp - 0x660]
cmp eax, 0xffffffff
jl 0x47cdb7
mov eax, 0xae9f
test eax, eax
je 0x47cdb7
mov dword [ebp - 0x980], 1
jmp 0x47cdbe
and dword [ebp - 0x980], 0
mov eax, dword [ebp - 0x60]
cmp eax, dword [ebp - 0x980]
jne 0x47cddb
cmp dword [ebp - 0x60], 0
je 0x47cddb
mov dword [ebp - 0x668], 1
jmp 0x47cde2
and dword [ebp - 0x668], 0
mov eax, dword [ebp - 0x668]
add eax, 0xffff
cmp eax, dword [ebp - 0x60]
jl 0x47ce00
xor eax, eax
inc eax
jne 0x47ce00
and dword [ebp - 0xb10], 0
jmp 0x47ce0a
mov dword [ebp - 0xb10], 1
mov eax, dword [ebp - 0xb10]
mov dword [ebp - 0x524], eax
cmp dword [ebp - 0x524], 0xfffffffc
jg 0x47ce2b
mov dword [ebp - 0x490], 1
jmp 0x47ce32
and dword [ebp - 0x490], 0
push 1
lea ecx, [ebp - 0x1234]
call fcn.0043566b
mov ecx, dword [ebp - 0x490]
mov dword [eax], ecx
mov eax, dword [ebp - 0x490]
add eax, 0x5fedd280
cmp eax, 0x4d4e
jne 0x47ce65
mov dword [ebp - 0x670], 1
jmp 0x47ce6c
and dword [ebp - 0x670], 0
cmp dword [ebp - 0x670], 0x76ac116e
jl 0x47ce84
mov dword [ebp - 0x988], 1
jmp 0x47ce8b
and dword [ebp - 0x988], 0
mov eax, dword [ebp - 0x988]
sub eax, dword [ebp - 0x60]
jne 0x47ce9d
cmp dword [ebp - 0x524], 0
cmp dword [ebp - 0x17c], 0xaa4f
jne 0x47cec4
push 0
lea ecx, [ebp - 0x1234]
call fcn.0043566b
cmp dword [eax], 0
jne 0x47cec4
and dword [ebp - 0x678], 0
jmp 0x47cece
mov dword [ebp - 0x678], 1
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0x678], eax
jle 0x47cee5
mov dword [ebp - 0xbd8], 1
jmp 0x47ceec
and dword [ebp - 0xbd8], 0
mov eax, dword [ebp - 0x17c]
cmp dword [ebp - 0xbd8], eax
jl 0x47cf06
mov dword [ebp - 0x498], 1
jmp 0x47cf0d
and dword [ebp - 0x498], 0
push 1
lea ecx, [ebp - 0x1140]
call fcn.0043566b
mov ecx, dword [ebp - 0x498]
mov dword [eax], ecx
cmp dword [ebp - 0x498], 0
jne 0x47cf32
cmp dword [ebp - 0x11e4], 0
mov eax, dword [ebp - 0x680]
mov dword [ebp - 0x151c], eax
cmp dword [ebp - 0xdec], 0
je 0x47d148
mov dword [ebp - 0x105c], 1
mov dword [ebp - 0x27c], 0
jmp 0x47cf6e
mov eax, dword [ebp - 0x27c]
inc eax
mov dword [ebp - 0x27c], eax
cmp dword [ebp - 0x27c], 4
jge 0x47cf8a
mov eax, dword [ebp - 0x27c]
mov dword [ebp + eax*4 - 0x1488], 0xc25
jmp 0x47cf61
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x1488]
cmp dword [ebp - 0x680], eax
jg 0x47cfde
push 0x1b85
push 0x4a24
push 0x100a
push 1
push 1
push 0x176c
push 0
push 0x7d0d
push 0x1802
push 0x3a86
push 0x5353
push 1
push 1
call fcn.004758dc
add esp, 0x34
jmp 0x47d146
mov dword [ebp - 0x4f0], 0xfffffff6
mov dword [ebp - 0x360], 0
jmp 0x47d001
mov eax, dword [ebp - 0x360]
inc eax
mov dword [ebp - 0x360], eax
cmp dword [ebp - 0x360], 2
jge 0x47d01d
mov eax, dword [ebp - 0x360]
mov dword [ebp + eax*4 - 0xcbc], 0
jmp 0x47cff4
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xcbc]
mov dword [ebp - 0x1524], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xcbc], 0
jne 0x47d0ac
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x1488]
mov dword [ebp - 0x4f0], eax
cmp dword [ebp - 0x4f0], 0
jne 0x47d075
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1488], 0
jne 0x47d075
and dword [ebp - 0x990], 0
jmp 0x47d07f
mov dword [ebp - 0x990], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xcbc]
add eax, dword [ebp - 0x990]
cmp eax, dword [ebp - 0x17c]
jne 0x47d0a3
cmp dword [ebp - 0x4f0], 0
jne 0x47d0ac
and dword [ebp - 0x688], 0
jmp 0x47d0b6
mov dword [ebp - 0x688], 1
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x1488]
cmp dword [ebp - 0x688], eax
jge 0x47d0d7
mov dword [ebp - 0x4a0], 1
jmp 0x47d0de
and dword [ebp - 0x4a0], 0
push 0
lea ecx, [ebp - 0x1140]
call fcn.0043566b
mov ecx, dword [ebp - 0x4a0]
mov dword [eax], ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xcbc]
cmp eax, dword [ebp - 0x4a0]
je 0x47d114
mov dword [ebp - 0xb18], 1
jmp 0x47d11b
and dword [ebp - 0xb18], 0
cmp dword [ebp - 0xb18], 0xf9f01020
je 0x47d133
mov dword [ebp - 0x690], 1
jmp 0x47d13a
and dword [ebp - 0x690], 0
mov eax, dword [ebp - 0x690]
mov dword [ebp - 0x105c], eax
jmp 0x47d18e
mov dword [ebp - 0xdf4], 0xffffffff
push 0
push 0x828
lea eax, [ebp - 0xdf4]
push eax
push 0x39c6
push 1
push 0x78ac
push 0x2d79
push 0x46fd
push 0x1706
push 1
lea eax, [ebp - 0x1140]
push eax
push 1
call fcn.0045951b
add esp, 0x30
push 0x2c05
push 0x184d
push 0
push 0x50b9
push 0x558
push 0
lea eax, [ebp - 0x112c]
push eax
call fcn.00470f17
add esp, 0x1c
lea ecx, [ebp - 0x1140]
call fcn.0043564f
lea ecx, [ebp - 0x1234]
call fcn.0043564f
push 3
lea ecx, [ebp - 0x538]
call fcn.0043557d
mov dword [ebp - 0x54c], 1
mov dword [ebp - 0xc0], 0x86524f20
mov dword [ebp - 0x28c], 0xec80f219
mov dword [ebp - 0x6a0], 0xfffffffa
mov dword [ebp - 0xe04], 0x5da4005d
mov dword [ebp - 0x284], 0
jmp 0x47d223
mov eax, dword [ebp - 0x284]
inc eax
mov dword [ebp - 0x284], eax
cmp dword [ebp - 0x284], 3
jge 0x47d245
push dword [ebp - 0x284]
lea ecx, [ebp - 0x538]
call fcn.0043566b
mov dword [eax], 4
jmp 0x47d216
push 0
lea ecx, [ebp - 0x538]
call fcn.0043566b
cmp dword [eax], 1
jl 0x47d263
mov dword [ebp - 0x698], 1
jmp 0x47d26a
and dword [ebp - 0x698], 0
push 0
lea ecx, [ebp - 0x538]
call fcn.0043566b
mov dword [ebp - 0xc0], 0
mov esi, dword [ebp - 0xc0]
push 1
lea ecx, [ebp - 0x538]
call fcn.0043566b
cmp esi, dword [eax]
jge 0x47d2a4
mov dword [ebp - 0x998], 1
jmp 0x47d2ab
and dword [ebp - 0x998], 0
cmp dword [ebp - 0x998], 6
jge 0x47d2c0
mov dword [ebp - 0xdfc], 1
jmp 0x47d2c7
and dword [ebp - 0xdfc], 0
push 1
lea ecx, [ebp - 0x538]
call fcn.0043566b
push 0
lea ecx, [ebp - 0x538]
call fcn.0043566b
push 2
lea ecx, [ebp - 0x538]
call fcn.0043566b
mov eax, dword [ebp - 0x54c]
add eax, 0x74ad
mov dword [ebp - 0x28c], eax
mov eax, dword [ebp - 0x698]
sub eax, dword [ebp - 0x28c]
cmp eax, 0xfdd8fb8c
je 0x47d31e
mov dword [ebp - 0xc28], 1
jmp 0x47d325
and dword [ebp - 0xc28], 0
push 2
lea ecx, [ebp - 0x538]
call fcn.0043566b
mov esi, dword [ebp - 0xc28]
add esi, dword [eax]
neg esi
neg esi
push 0
lea ecx, [ebp - 0x538]
call fcn.0043566b
add esi, dword [eax]
je 0x47d47d
push 2
lea ecx, [ebp - 0x124c]
call fcn.0043557d
mov dword [ebp - 0x9a0], 0xfffffffb
mov dword [ebp - 0x1064], 0x67b260ec
mov dword [ebp - 0x3c8], 0
jmp 0x47d38d
mov eax, dword [ebp - 0x3c8]
inc eax
mov dword [ebp - 0x3c8], eax
cmp dword [ebp - 0x3c8], 2
jge 0x47d3af
push dword [ebp - 0x3c8]
lea ecx, [ebp - 0x124c]
call fcn.0043566b
mov dword [eax], 0xec1b16eb
jmp 0x47d380
lea eax, [ebp - 0xc0]
push eax
lea eax, [ebp - 0x124c]
push eax
lea eax, [ebp - 0x54c]
push eax
push 1
lea eax, [ebp - 0x9a0]
push eax
lea eax, [ebp - 0x6a0]
push eax
push 1
push 0
lea eax, [ebp - 0x28c]
push eax
call fcn.00459df2
add esp, 0x24
push 0x5899
lea eax, [ebp - 0x54c]
push eax
lea eax, [ebp - 0x1064]
push eax
push 0
push 0x3a4e
push 0x2f94
push 0x5cf2
lea eax, [ebp - 0x28c]
push eax
lea eax, [ebp - 0x538]
push eax
push 0x32e6
push 0x77fa
push 0x6eaf
lea eax, [ebp - 0x124c]
push eax
push 0x5163
push 0
lea eax, [ebp - 0x6a0]
push eax
push 1
lea eax, [ebp - 0xc0]
push eax
push 0x475b
push 0x1d16
lea eax, [ebp - 0x9a0]
push eax
push 0x77c8
lea eax, [ebp - 0xe04]
push eax
push 0x5be2
call fcn.004688ae
add esp, 0x60
lea ecx, [ebp - 0x124c]
call fcn.0043564f
jmp 0x47d4e0
mov dword [ebp - 0xc0], 0xffffffed
jmp 0x47d496
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 8
jne 0x47d4e0
mov byte [ebp - 0xf2], 0
push 0x1166
push 0x1c4f
push 0x7517
push 0x8d
push 1
push 0x30f3
push 1
push 1
push 0x2fe2
lea eax, [ebp - 0xf2]
push eax
push 0x28d1
call fcn.0045503b
add esp, 0x2c
jmp 0x47d489
lea ecx, [ebp - 0x538]
call fcn.0043564f
mov byte [ebp - 0xf4], 0
push 3
lea ecx, [ebp - 0x143c]
call fcn.0043557d
mov dword [ebp - 0x190], 0xe2236432
mov dword [ebp - 0x11c4], 0xfffffffb
mov dword [ebp - 0xe0c], 0x34bdac84
mov dword [ebp - 0x106c], 0xd73df2ef
mov dword [ebp - 0x88], 0
jmp 0x47d540
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 3
jge 0x47d562
push dword [ebp - 0x88]
lea ecx, [ebp - 0x143c]
call fcn.0043566b
mov dword [eax], 0xb9b55bb2
jmp 0x47d533
mov dword [ebp - 0x88], 0
jmp 0x47d57b
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 4
jge 0x47d597
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0x1b24], 4
jmp 0x47d56e
mov dword [ebp - 0x190], 2
jmp 0x47d5b0
mov eax, dword [ebp - 0x190]
dec eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 0
jl 0x47d68a
mov dword [ebp - 0xe14], 2
mov dword [ebp - 0x152c], 0x8cd3bed1
mov dword [ebp - 0x1534], 0xce45d764
mov dword [ebp - 0x1134], 8
mov dword [ebp - 0x368], 0
jmp 0x47d5fe
mov eax, dword [ebp - 0x368]
inc eax
mov dword [ebp - 0x368], eax
cmp dword [ebp - 0x368], 4
jge 0x47d61a
mov eax, dword [ebp - 0x368]
mov dword [ebp + eax*4 - 0x1b14], 0x9facd4a7
jmp 0x47d5f1
lea eax, [ebp - 0x11c4]
push eax
lea eax, [ebp - 0x190]
push eax
push 0x6e70
lea eax, [ebp - 0xe0c]
push eax
push 1
lea eax, [ebp - 0x143c]
push eax
push 1
push 0
lea eax, [ebp - 0x106c]
push eax
push 0x7eb2
lea eax, [ebp - 0xe14]
push eax
call fcn.0045503b
add esp, 0x2c
push 0x4331
push 1
push 0x66b2
push 1
push 0x53b2
push 0x57de
push 1
lea eax, [ebp - 0x1134]
push eax
call fcn.004552c6
add esp, 0x20
jmp 0x47d5a3
lea ecx, [ebp - 0x143c]
call fcn.0043564f
movzx eax, byte [ebp - 0xf4]
test eax, eax
je 0x47d6b1
push 0
push 0
push 0
push 0x8ac
call dword [sym.imp.USER32.dll_SetWindowsHookExA]
mov dword [ebp - 0x24], 0
jmp 0x47d6c1
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jg 0x47d88f
mov byte [ebp - 0xf6], 0
mov dword [ebp - 0xb0], 1
mov dword [ebp - 0x4a8], 6
mov dword [ebp - 0x6a8], 0xec326874
mov dword [ebp - 0x1074], 0x876a47cd
push 0x3a42
push 0x38a9
push 0x74ae
push 0
push 0
push 1
call fcn.00495934
add esp, 0x18
mov dword [ebp - 0xb0], 5
jmp 0x47d730
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0x1b
je 0x47d873
mov dword [ebp - 0x9a8], 0x1e29ea41
mov dword [ebp - 0xd0c], 0x14f98caf
mov dword [ebp - 0xd08], 0x14f98caf
mov dword [ebp - 0xd04], 0x14f98caf
mov dword [ebp - 0xd00], 0x14f98caf
mov dword [ebp - 0x6b8], 0xcd54
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0x6a8], eax
cmp dword [ebp - 0x6a8], 0
jne 0x47d7a7
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xd0c], 0
jne 0x47d7a7
and dword [ebp - 0xb20], 0
jmp 0x47d7b1
mov dword [ebp - 0xb20], 1
mov eax, dword [ebp - 0xb0]
sub eax, dword [ebp - 0x4a8]
push 4
pop ecx
shl ecx, 0
add eax, dword [ebp + ecx - 0xd0c]
sub eax, dword [ebp - 0xb20]
add eax, 0x8e48
cmp eax, dword [ebp - 0x4a8]
jl 0x47d7f6
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xd0c], 0
jne 0x47d7f6
and dword [ebp - 0x6b0], 0
jmp 0x47d800
mov dword [ebp - 0x6b0], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xd0c]
cmp dword [ebp - 0x6b0], eax
jg 0x47d820
mov dword [ebp - 0xe1c], 1
jmp 0x47d827
and dword [ebp - 0xe1c], 0
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0x9a8], eax
mov eax, dword [ebp - 0x9a8]
mov dword [ebp - 0x15c4], eax
mov eax, dword [ebp - 0x4a8]
mov dword [ebp - 0x6b8], eax
mov eax, dword [ebp - 0x6b8]
sub eax, dword [ebp - 0xb0]
mov dword [ebp - 0x1074], eax
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xd0c], 0x8ce6fc2e
jmp 0x47d723
movzx eax, byte [ebp - 0xf6]
test eax, eax
je 0x47d88a
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
jmp 0x47d6ba
mov dword [ebp - 0x110], 0xdf99ff60
push 0
push 1
push 0x6c57
push 0x67fc
push 0x1e59
push 0x58d2
lea eax, [ebp - 0x110]
push eax
push 0x4216
push 1
push 1
push 0xca6
push 0x1bf1
push 0x5cb9
push 1
push 0x48c
push 0x7595
push 0x262b
push 0x2762
call fcn.004714b4
add esp, 0x48
cmp dword [ebp - 0x110], 1
je 0x47d903
mov dword [ebp - 0xbe0], 1
jmp 0x47d90a
and dword [ebp - 0xbe0], 0
imul eax, dword [ebp - 0x110], 0x734f
cmp eax, dword [ebp - 0xbe0]
jl 0x47d928
mov dword [ebp - 0x6c0], 1
jmp 0x47d92f
and dword [ebp - 0x6c0], 0
mov eax, dword [ebp - 0x110]
cmp dword [ebp - 0x6c0], eax
jge 0x47d949
mov dword [ebp - 0x9b0], 1
jmp 0x47d950
and dword [ebp - 0x9b0], 0
mov eax, dword [ebp - 0x9b0]
neg eax
cmp eax, dword [ebp - 0x110]
jne 0x47d96c
mov dword [ebp - 0xe24], 1
jmp 0x47d973
and dword [ebp - 0xe24], 0
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0x15cc], eax
mov dword [ebp - 0x110], 0x1d91e66
mov dword [ebp - 0x24], 0
jmp 0x47d999
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jg 0x47e77d
push 4
lea ecx, [ebp - 0x13e8]
call fcn.0043557d
mov dword [ebp - 0x12fc], 0x2cb51dba
mov dword [ebp - 0x12f8], 0x2cb51dba
mov dword [ebp - 0x12f4], 0x2cb51dba
mov dword [ebp - 0x12f0], 0x2cb51dba
lea ecx, [ebp - 0x551]
call fcn.0043567a
push eax
lea eax, [ebp - 0x12ec]
push eax
lea eax, [ebp - 0x12fc]
push eax
lea ecx, [ebp - 0x1a08]
call fcn.0043567d
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1264]
call fcn.00435629
mov dword [ebp - 0x6d0], 0x4f27d270
push 0
push 1
push 0x734
lea eax, [ebp - 0x15d4]
push eax
lea eax, [ebp - 0x13e8]
push eax
push 0
push 0x7120
push 0x213
push 0x7e87
call fcn.0046daf6
add esp, 0x24
push 0
push 0x106
push 1
push 0
push 0x3a9b
push 0x6018
lea eax, [ebp - 0x13e8]
push eax
push 0x69a9
call fcn.00494273
add esp, 0x20
push 1
lea ecx, [ebp - 0x1264]
call fcn.0043566b
mov dword [eax], 0x1b
jmp 0x47daa9
push 1
lea ecx, [ebp - 0x1264]
call fcn.0043566b
mov dword [ebp - 0x6c8], eax
mov eax, dword [ebp - 0x6c8]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x6c8]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x1264]
call fcn.0043566b
cmp dword [eax], 0xffffffe6
jge 0x47dc15
mov dword [ebp - 0xb28], 0x335d
mov dword [ebp - 0x11dc], str.qfeukwpb_yqc_dvyxbp_zjn_znag_whzeddcp_ixa_tgdamlxcb_idyes_kefhslqs_vaejx
cmp dword [ebp - 0xb28], 0x35c5
jle 0x47db56
and dword [ebp - 0x294], 0
jmp 0x47daf5
mov eax, dword [ebp - 0x294]
inc eax
mov dword [ebp - 0x294], eax
cmp dword [ebp - 0x294], 0x7487
jge 0x47db56
and dword [ebp - 0x420], 0
jmp 0x47db17
mov eax, dword [ebp - 0x420]
inc eax
mov dword [ebp - 0x420], eax
cmp dword [ebp - 0x420], 0x7d7b
jge 0x47db54
mov eax, dword [ebp - 0x294]
sub eax, dword [ebp - 0x420]
cdq
mov dword [ebp - 0xf5c], eax
mov dword [ebp - 0xf58], edx
push dword [ebp - 0xf58]
push dword [ebp - 0xf5c]
mov ecx, 0xab56b8
call fcn.00435439
jmp 0x47db0a
jmp 0x47dae8
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0xb28], 0x308c
jge 0x47db79
mov edx, dword [ebp - 0x11dc]
mov ecx, 0xab56b8
call fcn.004371ef
jmp 0x47db95
or dword [ebp - 4], 0xffffffff
jmp 0x47db9f
mov dword [ebp - 0x29c], 0
jmp 0x47dbb8
mov eax, dword [ebp - 0x29c]
inc eax
mov dword [ebp - 0x29c], eax
cmp dword [ebp - 0x29c], 3
jge 0x47dbd4
mov eax, dword [ebp - 0x29c]
mov dword [ebp + eax*4 - 0x1978], 0x5362
jmp 0x47dbab
mov dword [ebp - 0x6d0], 0x85c9e53
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x6d0]
mov dword [ebp + eax - 0x1978], ecx
push 0x6284
push 1
push 0xd2e
push 0
push 1
push 0
push 0x29c3
call fcn.00463adc
add esp, 0x1c
jmp 0x47da85
lea ecx, [ebp - 0x1264]
call fcn.0043564f
lea ecx, [ebp - 0x13e8]
call fcn.0043564f
mov dword [ebp - 0xe6c], 7
mov dword [ebp - 0x1310], 0x3df75dce
mov dword [ebp - 0x130c], 0x3df75dce
mov dword [ebp - 0x1308], 0x3df75dce
mov dword [ebp - 0x1304], 0x3df75dce
lea ecx, [ebp - 0x45d]
call fcn.0043567a
push eax
lea eax, [ebp - 0x1300]
push eax
lea eax, [ebp - 0x1310]
push eax
lea ecx, [ebp - 0x1a18]
call fcn.0043567d
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1990]
call fcn.00435629
mov dword [ebp - 0xe2c], 0xe5ccc90a
push 0x273b
push 0x59ad
push 0
lea eax, [ebp - 0xe2c]
push eax
push 0x1f4d
push 1
push 1
call fcn.0049648b
add esp, 0x1c
lea ecx, [ebp - 0x1990]
call fcn.0043564f
mov dword [ebp - 0x11ac], 0xe56e31bb
mov dword [ebp - 0x15dc], 0xffffffff
mov dword [ebp - 0x15e4], 0
mov dword [ebp - 0x9b8], 0x32fc
mov dword [ebp - 0x107c], str.rgy_sxlyem_jwadpe_ely
cmp dword [ebp - 0x9b8], 0x343a
jle 0x47dd92
and dword [ebp - 0x370], 0
jmp 0x47dd23
mov eax, dword [ebp - 0x370]
inc eax
mov dword [ebp - 0x370], eax
cmp dword [ebp - 0x370], 0x10c0
jge 0x47dd84
and dword [ebp - 0x2a4], 0
jmp 0x47dd45
mov eax, dword [ebp - 0x2a4]
inc eax
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 0x849
jge 0x47dd82
mov eax, dword [ebp - 0x370]
add eax, dword [ebp - 0x2a4]
cdq
mov dword [ebp - 0xf68], eax
mov dword [ebp - 0xf64], edx
push dword [ebp - 0xf64]
push dword [ebp - 0xf68]
mov ecx, 0xab56b8
call fcn.00435439
jmp 0x47dd38
jmp 0x47dd16
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [ebp - 0x6e8], 0x978d8ef0
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0x9b8], 0x31c0
jge 0x47ddbf
mov edx, dword [ebp - 0x107c]
mov ecx, 0xab56b8
call fcn.004371ef
jmp 0x47dddb
or dword [ebp - 4], 0xffffffff
jmp 0x47dde5
mov dword [ebp - 0x15ec], 0
mov dword [ebp - 0x15f4], 0xfffffffe
mov dword [ebp - 0x15fc], 0x9fa553fc
mov dword [ebp - 0x1604], 0x39200279
mov dword [ebp - 0x52c], 0xf68993dd
mov dword [ebp - 0x160c], 0x4d4b4b26
mov dword [ebp - 0xe34], 0xfffffffc
push 3
lea ecx, [ebp - 0x1400]
call fcn.0043557d
mov dword [ebp - 0x1b0], 0
jmp 0x47de51
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 3
jge 0x47de6d
mov eax, dword [ebp - 0x1b0]
mov dword [ebp + eax*4 - 0x1150], 5
jmp 0x47de44
push 0
lea eax, [ebp - 0x1400]
push eax
push 0
push 0x58a8
lea eax, [ebp - 0x1b0]
push eax
call fcn.0048eef4
add esp, 0x14
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x1150], 0
jmp 0x47deb7
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1150]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x1150], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1150], 0xc
jle 0x47e282
push 4
lea ecx, [ebp - 0x564]
call fcn.0043557d
mov dword [ebp - 0x28], 0x654fddd3
mov dword [ebp - 0x11cc], 0xfffffff6
mov dword [ebp - 0xe4c], 0xb515
push 1
push 0x7904
push 0x4bc5
push 0x26ee
push 0
push 0x3baa
push 0x4d44
push 0x7a60
push 0x40f9
lea eax, [ebp - 0x1614]
push eax
push 0x2093
lea eax, [ebp - 0x564]
push eax
push 0x63b8
push 0
call fcn.00462b07
add esp, 0x38
mov dword [ebp - 0x28], 3
jmp 0x47df4b
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jl 0x47e259
push 1
lea ecx, [ebp - 0x127c]
call fcn.0043557d
mov dword [ebp - 0xe44], 1
mov dword [ebp - 0xc58], 0
mov dword [ebp - 0x4f8], 0xe5de2cae
mov dword [ebp - 0x3d0], 0
jmp 0x47df99
mov eax, dword [ebp - 0x3d0]
inc eax
mov dword [ebp - 0x3d0], eax
cmp dword [ebp - 0x3d0], 1
jge 0x47dfbb
push dword [ebp - 0x3d0]
lea ecx, [ebp - 0x127c]
call fcn.0043566b
mov dword [eax], 0xfffffff9
jmp 0x47df8c
push dword [ebp - 0x28]
lea ecx, [ebp - 0x564]
call fcn.0043566b
cmp dword [eax], 0
jne 0x47e1c6
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x6d8], eax
push 0
lea ecx, [ebp - 0x127c]
call fcn.0043566b
mov ecx, dword [ebp - 0x6d8]
mov dword [eax], ecx
mov eax, dword [ebp - 0x6d8]
mov dword [ebp - 0xc58], eax
cmp dword [ebp - 0xc58], 0
jne 0x47e067
mov eax, 0xe8b7
test eax, eax
je 0x47e012
cmp dword [ebp - 0x28], 0
imul eax, dword [ebp - 0xe34], 0x6070
sub eax, dword [ebp - 0x28]
jne 0x47e03d
push dword [ebp - 0x28]
lea ecx, [ebp - 0x564]
call fcn.0043566b
cmp dword [eax], 0
jne 0x47e03d
and dword [ebp - 0x6e0], 0
jmp 0x47e047
mov dword [ebp - 0x6e0], 1
push 1
lea ecx, [ebp - 0x564]
call fcn.0043566b
mov ecx, dword [ebp - 0x6e0]
add ecx, dword [eax]
jne 0x47e067
and dword [ebp - 0x9c0], 0
jmp 0x47e071
mov dword [ebp - 0x9c0], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1150]
imul eax, dword [ebp - 0x9c0]
imul eax, dword [ebp - 0x28]
cmp dword [ebp - 0x6e8], eax
jge 0x47e09d
mov dword [ebp - 0xd10], 1
jmp 0x47e0a4
and dword [ebp - 0xd10], 0
mov eax, dword [ebp - 0x52c]
mov dword [ebp - 0x161c], eax
push dword [ebp - 0x28]
lea ecx, [ebp - 0x564]
call fcn.0043566b
mov esi, eax
mov edi, 0x604c38db
sub edi, dword [ebp - 0x6e8]
push 0
lea ecx, [ebp - 0x1400]
call fcn.0043566b
sub edi, dword [eax]
cmp dword [esi], edi
jge 0x47e0ea
mov dword [ebp - 0xb30], 1
jmp 0x47e0f1
and dword [ebp - 0xb30], 0
mov eax, dword [ebp - 0x4f8]
add eax, dword [ebp - 0xb30]
imul eax, dword [ebp - 0x52c]
mov dword [ebp - 0xe3c], eax
mov eax, dword [ebp - 0x4f8]
inc eax
mov dword [ebp - 0x4f8], eax
cmp dword [ebp - 0xe3c], 0x9e604731
jae 0x47e12f
mov dword [ebp - 0x6f0], 1
jmp 0x47e136
and dword [ebp - 0x6f0], 0
push dword [ebp - 0x28]
lea ecx, [ebp - 0x564]
call fcn.0043566b
mov ecx, dword [ebp - 0x6f0]
cmp ecx, dword [eax]
jge 0x47e15a
mov dword [ebp - 0x1084], 1
jmp 0x47e161
and dword [ebp - 0x1084], 0
cmp dword [ebp - 0xe44], 0xdf115cd6
jb 0x47e179
mov dword [ebp - 0x9c8], 1
jmp 0x47e180
and dword [ebp - 0x9c8], 0
cmp dword [ebp - 0x9c8], 1
jge 0x47e195
mov dword [ebp - 0x6f8], 1
jmp 0x47e19c
and dword [ebp - 0x6f8], 0
push dword [ebp - 0x28]
lea ecx, [ebp - 0x564]
call fcn.0043566b
mov ecx, dword [ebp - 0x6f8]
cmp ecx, dword [eax]
jge 0x47e1bd
mov eax, 0x113d7aff
test eax, eax
jne 0x47e1c6
and dword [ebp - 0x4b0], 0
jmp 0x47e1d0
mov dword [ebp - 0x4b0], 1
push 1
lea ecx, [ebp - 0x564]
call fcn.0043566b
mov ecx, dword [ebp - 0x4b0]
mov dword [eax], ecx
mov eax, dword [ebp - 0x4b0]
sub eax, dword [ebp - 0x28]
cmp eax, 0xc370
jge 0x47e201
mov dword [ebp - 0xbe8], 1
jmp 0x47e208
and dword [ebp - 0xbe8], 0
cmp dword [ebp - 0xbe8], 0xa002b50d
jne 0x47e220
mov dword [ebp - 0x700], 1
jmp 0x47e227
and dword [ebp - 0x700], 0
mov eax, dword [ebp - 0x700]
mov dword [ebp - 0x11cc], eax
cmp dword [ebp - 0x52c], 0
je 0x47e249
lea ecx, [ebp - 0x127c]
call fcn.0043564f
jmp 0x47e259
lea ecx, [ebp - 0x127c]
call fcn.0043564f
jmp 0x47df44
cmp dword [ebp - 0xe4c], 0
je 0x47e272
lea ecx, [ebp - 0x564]
call fcn.0043564f
jmp 0x47de9e
lea ecx, [ebp - 0x564]
call fcn.0043564f
jmp 0x47de9e
lea ecx, [ebp - 0x1400]
call fcn.0043564f
mov dword [ebp - 0x1624], 0xfffffff6
mov dword [ebp - 0x162c], 6
mov dword [ebp - 0x1634], 2
mov dword [ebp - 0x163c], 0x60f951fe
mov dword [ebp - 0x108c], 0xffff
mov dword [ebp - 0x1644], 0xfffffffc
mov dword [ebp - 0x164c], 0x90d29729
mov dword [ebp - 0x1654], 0x16b471df
push 3
lea ecx, [ebp - 0x1794]
call fcn.0043557d
or dword [ebp - 0x1338], 0xffffffff
or dword [ebp - 0x1334], 0xffffffff
or dword [ebp - 0x1330], 0xffffffff
or dword [ebp - 0x132c], 0xffffffff
lea ecx, [ebp - 0x4d5]
call fcn.0043567a
push eax
lea eax, [ebp - 0x1328]
push eax
lea eax, [ebp - 0x1338]
push eax
lea ecx, [ebp - 0x1a00]
call fcn.0043567d
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1784]
call fcn.00435629
mov dword [ebp - 0x2ac], 0
jmp 0x47e354
mov eax, dword [ebp - 0x2ac]
inc eax
mov dword [ebp - 0x2ac], eax
cmp dword [ebp - 0x2ac], 3
jge 0x47e376
push dword [ebp - 0x2ac]
lea ecx, [ebp - 0x1794]
call fcn.0043566b
mov dword [eax], 1
jmp 0x47e347
lea eax, [ebp - 0x108c]
push eax
push 0
call fcn.00478f46
pop ecx
pop ecx
push 1
push 0x68b4
push 0x31ac
push 1
push 0x1b29
push 0x2a9c
lea eax, [ebp - 0x1784]
push eax
push 0
push 0x569e
call fcn.004524c3
add esp, 0x24
lea ecx, [ebp - 0x1784]
call fcn.0043564f
lea ecx, [ebp - 0x1794]
call fcn.0043564f
mov byte [ebp - 0xdd], 0
mov dword [ebp - 0x1154], 1
mov dword [ebp - 0xe54], 4
push 3
lea ecx, [ebp - 0x17a4]
call fcn.0043557d
push 0x64de
push 0x6546
lea eax, [ebp - 0x17a4]
push eax
push 0xedb
push 0x5d3
push 0
lea eax, [ebp - 0x165c]
push eax
push 0xcfc
call fcn.00468856
add esp, 0x20
push 0x4d5f
push 1
push 0x7131
push 0x6a71
push 0x6593
push 0x55cc
push 1
push 0x78a3
lea eax, [ebp - 0xe54]
push eax
push 0
push 0x796c
push 0x4f56
lea eax, [ebp - 0x1154]
push eax
push 0x7f27
call fcn.004764fa
add esp, 0x38
mov byte [ebp - 0xf8], 0
push 1
push 0
push 1
lea eax, [ebp - 0xf8]
push eax
push 0x41b7
call fcn.0049d07c
add esp, 0x14
lea ecx, [ebp - 0x17a4]
call fcn.0043564f
push 0
lea eax, [ebp - 0xdd]
push eax
push 0x1dd
push 0x609d
push 0x28d1
push 0x6325
push 1
push 1
push 0
call fcn.00463be7
add esp, 0x24
mov dword [ebp - 0x2b4], 0
mov dword [ebp - 0x378], 0
jmp 0x47e4e6
mov eax, dword [ebp - 0x378]
inc eax
mov dword [ebp - 0x378], eax
cmp dword [ebp - 0x378], 1
jge 0x47e502
mov eax, dword [ebp - 0x378]
mov dword [ebp + eax*4 - 0xe5c], 0x3cdf
jmp 0x47e4d9
mov dword [ebp - 0x2b4], 0
jmp 0x47e51b
mov eax, dword [ebp - 0x2b4]
inc eax
mov dword [ebp - 0x2b4], eax
cmp dword [ebp - 0x2b4], 0x16
jne 0x47e6f8
mov dword [ebp - 0x58], 8
mov dword [ebp - 0x9d8], 0xffffffff
mov dword [ebp - 0xe64], 2
mov dword [ebp - 0x400], 0
jmp 0x47e55c
mov eax, dword [ebp - 0x400]
inc eax
mov dword [ebp - 0x400], eax
cmp dword [ebp - 0x400], 1
jge 0x47e578
mov eax, dword [ebp - 0x400]
mov dword [ebp + eax*4 - 0x1094], 0xe92eda8e
jmp 0x47e54f
mov dword [ebp - 0x58], 0
jmp 0x47e588
mov eax, dword [ebp - 0x58]
dec eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0
jl 0x47e694
mov dword [ebp - 0x4b8], 0xd2c8
push 0x5e31
push 1
push 0
push 0x127e
push 0
push 0x7e2f
call fcn.0045e922
add esp, 0x18
mov eax, dword [ebp - 0x4b8]
sub eax, 0x7525
jne 0x47e5d2
mov dword [ebp - 0x9d0], 1
jmp 0x47e5d9
and dword [ebp - 0x9d0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe5c]
cmp dword [ebp - 0x9d0], eax
jge 0x47e600
cmp dword [ebp - 0x58], 0
je 0x47e600
mov dword [ebp - 0x708], 1
jmp 0x47e607
and dword [ebp - 0x708], 0
mov eax, dword [ebp - 0x4b8]
mov dword [ebp - 0x1664], eax
mov eax, dword [ebp - 0x4b8]
imul eax, dword [ebp - 0x708]
cmp eax, dword [ebp - 0x58]
jg 0x47e631
mov dword [ebp - 0xb38], 1
jmp 0x47e638
and dword [ebp - 0xb38], 0
cmp dword [ebp - 0xb38], 0
jne 0x47e64d
mov dword [ebp - 0x710], 1
jmp 0x47e654
and dword [ebp - 0x710], 0
mov eax, dword [ebp - 0x710]
mov dword [ebp - 0x9d8], eax
mov eax, dword [ebp - 0x9d8]
mov dword [ebp - 0x718], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x718]
mov dword [ebp + eax - 0x1094], ecx
imul eax, dword [ebp - 0x718], 0x1874
mov dword [ebp - 0xe64], eax
jmp 0x47e581
mov dword [ebp - 0x58], 0
jmp 0x47e6a4
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0
jg 0x47e6f3
mov byte [ebp - 0x122], 0
push 0x2f8b
push 0x41d3
push 0x6f13
lea eax, [ebp - 0x122]
push eax
push 0
push 0x1d8d
push 0x4c2f
push 0x2db0
push 1
push 0x122d
push 0x4818
push 0x36df
call fcn.004929d3
add esp, 0x30
jmp 0x47e69d
jmp 0x47e50e
mov eax, dword [ebp - 0x138]
mov eax, dword [ebp + eax*4 - 0x12d4]
mov dword [ebp - 0x166c], eax
mov eax, dword [ebp - 0xc30]
mov dword [ebp - 0x1674], eax
mov eax, dword [ebp - 0x11ac]
mov dword [ebp - 0x167c], eax
cmp dword [ebp - 0xc30], 5
jl 0x47e738
mov dword [ebp - 0x720], 1
jmp 0x47e73f
and dword [ebp - 0x720], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x720]
sub ecx, dword [ebp + eax - 0x12d4]
cmp ecx, dword [ebp - 0xe6c]
jl 0x47e765
mov dword [ebp - 0x9e0], 1
jmp 0x47e76c
and dword [ebp - 0x9e0], 0
mov eax, dword [ebp - 0x9e0]
mov dword [ebp - 0x10a0], eax
jmp 0x47d992
jmp 0x47cb67
mov dword [ebp - 0x4c], 0xd4e06482
mov dword [ebp - 0x198], 0xfff12f3c
push 4
lea ecx, [ebp - 0x1160]
call fcn.0043557d
mov dword [ebp - 0x500], 0xc8fa1b44
mov dword [ebp - 0x178], 1
mov dword [ebp - 0x2bc], 0
jmp 0x47e7cd
mov eax, dword [ebp - 0x2bc]
inc eax
mov dword [ebp - 0x2bc], eax
cmp dword [ebp - 0x2bc], 4
jge 0x47e7ef
push dword [ebp - 0x2bc]
lea ecx, [ebp - 0x1160]
call fcn.0043566b
mov dword [eax], 1
jmp 0x47e7c0
mov dword [ebp - 0x4c], 0
jmp 0x47e7ff
mov eax, dword [ebp - 0x4c]
dec eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0xfffffff7
jl 0x47e85e
mov dword [ebp - 0xe74], 1
mov dword [ebp - 0x1164], 0x3fe6
lea eax, [ebp - 0xe74]
push eax
push 0
lea eax, [ebp - 0x4c]
push eax
push 0x51de
lea eax, [ebp - 0x1164]
push eax
lea eax, [ebp - 0x198]
push eax
call fcn.00464423
add esp, 0x18
push 0x2a06
push 0x2b88
push 1
push 0
push 0x5bf6
call fcn.004870b8
add esp, 0x14
jmp 0x47e7f8
cmp dword [ebp - 0x198], 0
mov eax, dword [ebp - 0x4c]
imul eax, dword [ebp - 0x198]
imul eax, eax, 0x6658
mov dword [ebp - 0x198], eax
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0x728], eax
push 1
lea ecx, [ebp - 0x1160]
call fcn.0043566b
mov ecx, dword [ebp - 0x728]
mov dword [eax], ecx
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x728], eax
jg 0x47e8b3
mov dword [ebp - 0xb40], 1
jmp 0x47e8ba
and dword [ebp - 0xb40], 0
mov eax, dword [ebp - 0xb40]
mov dword [ebp - 0x500], eax
mov eax, dword [ebp - 0x500]
mov dword [ebp - 0x1684], eax
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x168c], eax
mov eax, dword [ebp - 0x178]
cmp dword [ebp - 0x4c], eax
jg 0x47e8f5
mov dword [ebp - 0x730], 1
jmp 0x47e8fc
and dword [ebp - 0x730], 0
cmp dword [ebp - 0x730], 0x167d3d8e
je 0x47e914
mov dword [ebp - 0xe7c], 1
jmp 0x47e91b
and dword [ebp - 0xe7c], 0
xor eax, eax
jne 0x47e92f
push 0xfffffffffffffff8
pop eax
test eax, eax
jne 0x47e92f
and dword [ebp - 0x10ac], 0
jmp 0x47e939
mov dword [ebp - 0x10ac], 1
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x1694], eax
push 1
lea ecx, [ebp - 0x1160]
call fcn.0043566b
mov ecx, dword [ebp - 0x178]
cmp dword [eax], ecx
jl 0x47e968
mov dword [ebp - 0x9e8], 1
jmp 0x47e96f
and dword [ebp - 0x9e8], 0
cmp dword [ebp - 0x9e8], 1
jne 0x47e984
mov dword [ebp - 0x738], 1
jmp 0x47e98b
and dword [ebp - 0x738], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x738], eax
jg 0x47e9a2
mov dword [ebp - 0xbf0], 1
jmp 0x47e9a9
and dword [ebp - 0xbf0], 0
mov eax, dword [ebp - 0x4c]
imul ecx, dword [ebp - 0xbf0], 0xf9a0
add eax, ecx
je 0x47e9d8
push 1
lea ecx, [ebp - 0x1160]
call fcn.0043566b
cmp dword [eax], 0
je 0x47e9d8
mov dword [ebp - 0x740], 1
jmp 0x47e9df
and dword [ebp - 0x740], 0
mov eax, dword [ebp - 0x178]
cmp dword [ebp - 0x740], eax
jle 0x47e9f9
mov dword [ebp - 0xe84], 1
jmp 0x47ea00
and dword [ebp - 0xe84], 0
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x169c], eax
cmp dword [ebp - 0x500], 0
jne 0x47ea21
mov dword [ebp - 0x9f0], 1
jmp 0x47ea28
and dword [ebp - 0x9f0], 0
cmp dword [ebp - 0x9f0], 9
jge 0x47ea72
mov dword [ebp - 0xe8c], 0xffffffff
mov dword [ebp - 0x11a8], 6
push 0x4b8f
push 0
push 0xeb7
push 1
lea eax, [ebp - 0x11a8]
push eax
lea eax, [ebp - 0xe8c]
push eax
push 1
push 0x4985
call fcn.004552c6
add esp, 0x20
jmp 0x47ea85
mov dword [ebp - 0x10b8], 0
mov eax, dword [ebp - 0x10b8]
mov dword [ebp - 0x4c], eax
lea ecx, [ebp - 0x1160]
call fcn.0043564f
push 2
lea ecx, [ebp - 0x1418]
call fcn.0043557d
mov dword [ebp - 0x1c0], 0x13532fe2
mov dword [ebp - 0x748], 0x7079
mov dword [ebp - 0xe94], str.gapsntfcm_wcmuskgrb_dnbtlqr_wlbsa
cmp dword [ebp - 0x748], 0x735f
jle 0x47eb3e
and dword [ebp - 0x380], 0
jmp 0x47eadd
mov eax, dword [ebp - 0x380]
inc eax
mov dword [ebp - 0x380], eax
cmp dword [ebp - 0x380], 0x5f1e
jge 0x47eb3e
and dword [ebp - 0x2c4], 0
jmp 0x47eaff
mov eax, dword [ebp - 0x2c4]
inc eax
mov dword [ebp - 0x2c4], eax
cmp dword [ebp - 0x2c4], 0x29f1
jge 0x47eb3c
mov eax, dword [ebp - 0x380]
or eax, dword [ebp - 0x2c4]
cdq
mov dword [ebp - 0xf74], eax
mov dword [ebp - 0xf70], edx
push dword [ebp - 0xf70]
push dword [ebp - 0xf74]
mov ecx, 0xab56b8
call fcn.00435439
jmp 0x47eaf2
jmp 0x47ead0
mov dword [ebp - 0x3d8], 0
jmp 0x47eb57
mov eax, dword [ebp - 0x3d8]
inc eax
mov dword [ebp - 0x3d8], eax
cmp dword [ebp - 0x3d8], 2
jge 0x47eb79
push dword [ebp - 0x3d8]
lea ecx, [ebp - 0x1418]
call fcn.0043566b
mov dword [eax], 7
jmp 0x47eb4a
mov dword [ebp - 4], 0x10
cmp dword [ebp - 0x748], 0x6d4d
jge 0x47eb9c
mov edx, dword [ebp - 0xe94]
mov ecx, 0xab56b8
call fcn.004371ef
jmp 0x47ebb8
or dword [ebp - 4], 0xffffffff
jmp 0x47ebc2
mov dword [ebp - 0x1c0], 0
jmp 0x47ebdb
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 1
jg 0x47ec34
push 0x3818
push 0x22d6
push 0x65a2
push 0x2f4a
push 0
push 1
push 0x60be
push 0x460a
lea eax, [ebp - 0x1c0]
push eax
push 0xa19
push 0x37f5
push 1
push 0x1e0f
push 0x5952
lea eax, [ebp - 0x1418]
push eax
call fcn.0045d517
add esp, 0x3c
jmp 0x47ebce
lea ecx, [ebp - 0x1418]
call fcn.0043564f
mov byte [ebp - 0xdf], 0
push 0x3b1d
lea eax, [ebp - 0xdf]
push eax
push 0
push 0x1010
push 0x588a
push 1
push 1
push 0x4811
push 0x583e
push 0
push 0xb72
push 0x71cf
call fcn.0048f1af
add esp, 0x30
mov byte [ebp - 0xf3], 0
mov dword [ebp - 0x16a4], 9
mov dword [ebp - 0x1174], 9
mov dword [ebp - 0x1360], 0xbc75286e
mov dword [ebp - 0x135c], 0xbc75286e
mov dword [ebp - 0x1358], 0xbc75286e
mov dword [ebp - 0x1354], 0xbc75286e
lea ecx, [ebp - 0x4f9]
call fcn.0043567a
push eax
lea eax, [ebp - 0x1350]
push eax
lea eax, [ebp - 0x1360]
push eax
lea ecx, [ebp - 0x1a10]
call fcn.0043567d
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x19a8]
call fcn.00435629
mov dword [ebp - 0x2cc], 0
jmp 0x47ed11
mov eax, dword [ebp - 0x2cc]
inc eax
mov dword [ebp - 0x2cc], eax
cmp dword [ebp - 0x2cc], 2
jge 0x47ed2d
mov eax, dword [ebp - 0x2cc]
mov dword [ebp + eax*4 - 0x12ac], 0xeb59008c
jmp 0x47ed04
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x12ac]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x12ac], eax
push 0x118d
push 1
push 1
push 0
lea eax, [ebp - 0x1174]
push eax
push 0x5ee
push 0xcbe
call fcn.0046cb92
add esp, 0x1c
lea ecx, [ebp - 0x19a8]
call fcn.0043564f
movzx eax, byte [ebp - 0xf3]
test eax, eax
je 0x47edf9
mov dword [ebp - 0xe9c], 1
mov dword [ebp - 0x16ac], 0
push 0
push 1
push 0x63af
push 0x1a9f
push 0x498f
push 1
push 0x4f6b
push 0x5943
lea eax, [ebp - 0xe9c]
push eax
call fcn.0046daf6
add esp, 0x24
push 0x436e
push 1
push 1
push 1
push 0x883
push 1
push 0x3e01
call fcn.00455b68
add esp, 0x1c
push 1
push 0x3c11
push 0
push 0x5c29
call fcn.0046c757
add esp, 0x10
mov eax, dword [ebp - 0x388]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x388]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 0x14]
lea eax, [eax + ecx + 0x18]
mov dword [ebp - 0x80], eax
push 0x4cac
push 0
call fcn.00475682
pop ecx
pop ecx
and dword [ebp - 0x4c0], 0
jmp 0x47ee41
mov eax, dword [ebp - 0x388]
mov eax, dword [eax]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x4c0], eax
jge 0x48678b
mov dword [ebp - 0x68], 0xfffffff9
mov dword [ebp - 0x140], 0xf5f40e13
mov dword [ebp - 0x4c8], 0xffffffff
push 2
lea ecx, [ebp - 0x1294]
call fcn.0043557d
push 3
lea ecx, [ebp - 0x1170]
call fcn.0043557d
mov dword [ebp - 0xea4], 2
mov dword [ebp - 0xbf8], 7
mov dword [ebp - 0x11b8], 9
mov dword [ebp - 0x16b4], 0xde30ea3b
mov dword [ebp - 0x790], 0xfffffff6
push 0x4783
push 0x62b0
lea eax, [ebp - 0x1294]
push eax
push 0
lea eax, [ebp - 0x10c4]
push eax
call fcn.004869ea
add esp, 0x14
lea eax, [ebp - 0x1170]
push eax
lea eax, [ebp - 0x10c4]
push eax
push 0
call fcn.00474333
add esp, 0xc
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x16bc], eax
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x16c4], eax
cmp dword [ebp - 0x68], 0
je 0x47efd3
mov eax, dword [ebp - 0x140]
cmp dword [ebp - 0x68], eax
je 0x47ef2d
mov dword [ebp - 0xb48], 1
jmp 0x47ef34
and dword [ebp - 0xb48], 0
cmp dword [ebp - 0xb48], 0xffffffff
jne 0x47ef49
mov dword [ebp - 0x750], 1
jmp 0x47ef50
and dword [ebp - 0x750], 0
cmp dword [ebp - 0x750], 0xffffffff
jne 0x47ef65
mov dword [ebp - 0x9f8], 1
jmp 0x47ef6c
and dword [ebp - 0x9f8], 0
mov eax, dword [ebp - 0x68]
imul eax, dword [ebp - 0x9f8]
cmp eax, dword [ebp - 0x140]
jne 0x47ef8a
mov dword [ebp - 0x758], 1
jmp 0x47ef91
and dword [ebp - 0x758], 0
cmp dword [ebp - 0x758], 0xfffffffc
ja 0x47efa6
mov dword [ebp - 0xc64], 1
jmp 0x47efad
and dword [ebp - 0xc64], 0
mov eax, dword [ebp - 0x140]
add eax, dword [ebp - 0xc64]
cmp eax, 0xffffffff
jl 0x47efd3
mov eax, 0xae9f
test eax, eax
je 0x47efd3
mov dword [ebp - 0x760], 1
jmp 0x47efda
and dword [ebp - 0x760], 0
mov eax, dword [ebp - 0x68]
cmp eax, dword [ebp - 0x760]
jne 0x47eff7
cmp dword [ebp - 0x68], 0
je 0x47eff7
mov dword [ebp - 0xa00], 1
jmp 0x47effe
and dword [ebp - 0xa00], 0
mov eax, dword [ebp - 0xa00]
add eax, 0xffff
cmp eax, dword [ebp - 0x68]
jl 0x47f01c
xor eax, eax
inc eax
jne 0x47f01c
and dword [ebp - 0x768], 0
jmp 0x47f026
mov dword [ebp - 0x768], 1
mov eax, dword [ebp - 0x768]
mov dword [ebp - 0x4c8], eax
cmp dword [ebp - 0x4c8], 0xfffffffc
jg 0x47f047
mov dword [ebp - 0x550], 1
jmp 0x47f04e
and dword [ebp - 0x550], 0
push 1
lea ecx, [ebp - 0x1294]
call fcn.0043566b
mov ecx, dword [ebp - 0x550]
mov dword [eax], ecx
mov eax, dword [ebp - 0x550]
add eax, 0x5fedd280
cmp eax, 0x4d4e
jne 0x47f081
mov dword [ebp - 0xb50], 1
jmp 0x47f088
and dword [ebp - 0xb50], 0
cmp dword [ebp - 0xb50], 0x76ac116e
jl 0x47f0a0
mov dword [ebp - 0x770], 1
jmp 0x47f0a7
and dword [ebp - 0x770], 0
mov eax, dword [ebp - 0x770]
sub eax, dword [ebp - 0x68]
jne 0x47f0b9
cmp dword [ebp - 0x4c8], 0
cmp dword [ebp - 0x140], 0xaa4f
jne 0x47f0e0
push 0
lea ecx, [ebp - 0x1294]
call fcn.0043566b
cmp dword [eax], 0
jne 0x47f0e0
and dword [ebp - 0xa08], 0
jmp 0x47f0ea
mov dword [ebp - 0xa08], 1
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0xa08], eax
jle 0x47f101
mov dword [ebp - 0x778], 1
jmp 0x47f108
and dword [ebp - 0x778], 0
mov eax, dword [ebp - 0x140]
cmp dword [ebp - 0x778], eax
jl 0x47f122
mov dword [ebp - 0x50c], 1
jmp 0x47f129
and dword [ebp - 0x50c], 0
push 1
lea ecx, [ebp - 0x1170]
call fcn.0043566b
mov ecx, dword [ebp - 0x50c]
mov dword [eax], ecx
cmp dword [ebp - 0x50c], 0
jne 0x47f14e
cmp dword [ebp - 0xea4], 0
mov eax, dword [ebp - 0xbf8]
mov dword [ebp - 0x16cc], eax
cmp dword [ebp - 0x11b8], 0
je 0x47f38f
mov dword [ebp - 0xeac], 1
mov dword [ebp - 0x2d4], 0
jmp 0x47f18a
mov eax, dword [ebp - 0x2d4]
inc eax
mov dword [ebp - 0x2d4], eax
cmp dword [ebp - 0x2d4], 4
jge 0x47f1a6
mov eax, dword [ebp - 0x2d4]
mov dword [ebp + eax*4 - 0x14b8], 0xc25
jmp 0x47f17d
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x14b8]
cmp dword [ebp - 0xbf8], eax
jg 0x47f225
mov byte [ebp - 0xe1], 0
movzx eax, byte [ebp - 0xe1]
test eax, eax
je 0x47f220
push 0x1acf
push 0x746a
push 0x3793
push 0x686e
push 0x6572
push 0x2265
push 1
push 0x379f
push 1
push 1
push 0x244d
push 1
push 0x4a0e
push 0
push 0x6c01
push 0xae3
push 0x571d
push 0x45eb
call fcn.00452bb6
add esp, 0x48
jmp 0x47f38d
mov dword [ebp - 0x4d0], 0xfffffff6
mov dword [ebp - 0x418], 0
jmp 0x47f248
mov eax, dword [ebp - 0x418]
inc eax
mov dword [ebp - 0x418], eax
cmp dword [ebp - 0x418], 2
jge 0x47f264
mov eax, dword [ebp - 0x418]
mov dword [ebp + eax*4 - 0xcb4], 0
jmp 0x47f23b
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xcb4]
mov dword [ebp - 0x16d4], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xcb4], 0
jne 0x47f2f3
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x14b8]
mov dword [ebp - 0x4d0], eax
cmp dword [ebp - 0x4d0], 0
jne 0x47f2bc
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x14b8], 0
jne 0x47f2bc
and dword [ebp - 0x780], 0
jmp 0x47f2c6
mov dword [ebp - 0x780], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xcb4]
add eax, dword [ebp - 0x780]
cmp eax, dword [ebp - 0x140]
jne 0x47f2ea
cmp dword [ebp - 0x4d0], 0
jne 0x47f2f3
and dword [ebp - 0xa10], 0
jmp 0x47f2fd
mov dword [ebp - 0xa10], 1
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x14b8]
cmp dword [ebp - 0xa10], eax
jge 0x47f31e
mov dword [ebp - 0x45c], 1
jmp 0x47f325
and dword [ebp - 0x45c], 0
push 0
lea ecx, [ebp - 0x1170]
call fcn.0043566b
mov ecx, dword [ebp - 0x45c]
mov dword [eax], ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xcb4]
cmp eax, dword [ebp - 0x45c]
je 0x47f35b
mov dword [ebp - 0x788], 1
jmp 0x47f362
and dword [ebp - 0x788], 0
cmp dword [ebp - 0x788], 0xf9f01020
je 0x47f37a
mov dword [ebp - 0xb58], 1
jmp 0x47f381
and dword [ebp - 0xb58], 0
mov eax, dword [ebp - 0xb58]
mov dword [ebp - 0xeac], eax
jmp 0x47f3bb
mov dword [ebp - 0x10cc], 0xffffffff
push 0
push 0x5c45
lea eax, [ebp - 0x1170]
push eax
lea eax, [ebp - 0x10cc]
push eax
push 0x701b
call fcn.0048ec16
add esp, 0x14
mov eax, dword [ebp - 0x790]
dec eax
mov dword [ebp - 0x790], eax
lea ecx, [ebp - 0x1170]
call fcn.0043564f
lea ecx, [ebp - 0x1294]
call fcn.0043564f
mov dword [ebp - 0xb4], 1
mov dword [ebp - 0x118], 0x811fc80a
mov dword [ebp - 0x1a0], 0x59653e3f
mov dword [ebp - 0x47c], 0xbf79
mov dword [ebp - 0x464], 1
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x484], 0x826fbc79
mov dword [ebp - 0x10d4], 0x53d0c964
push 3
lea ecx, [ebp - 0x1240]
call fcn.0043557d
mov dword [ebp - 0x46c], 0xffffffff
mov dword [ebp - 0x1c], 0
jmp 0x47f455
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 4
jge 0x47f46b
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x14d8], 0xfffe
jmp 0x47f44e
mov dword [ebp - 0x1c], 0
jmp 0x47f47b
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jge 0x47f491
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x160], 0xfffffffc
jmp 0x47f474
push 0
push 1
lea eax, [ebp - 0x1240]
push eax
push 0x4ef2
push 0x2066
push 0x7a18
push 1
lea eax, [ebp - 0x1c]
push eax
call fcn.00457b1c
add esp, 0x20
mov dword [ebp - 0xa18], 0x5344
mov dword [ebp - 0xeb4], str.jld_iogaeht_txdkv_yydytstil_imdehxwbr_euqcnj_jttzogtl_ttu_tjrorwb_xxaddn_cxflgsvm
cmp dword [ebp - 0xa18], 0x5500
jle 0x47f5ba
and dword [ebp - 0x2dc], 0
jmp 0x47f4f3
mov eax, dword [ebp - 0x2dc]
inc eax
mov dword [ebp - 0x2dc], eax
cmp dword [ebp - 0x2dc], 0x4dec
jge 0x47f5ba
and dword [ebp - 0x390], 0
jmp 0x47f519
mov eax, dword [ebp - 0x390]
inc eax
mov dword [ebp - 0x390], eax
cmp dword [ebp - 0x390], 0x549a
jge 0x47f5b5
and dword [ebp - 0x2e4], 0
jmp 0x47f53f
mov eax, dword [ebp - 0x2e4]
inc eax
mov dword [ebp - 0x2e4], eax
cmp dword [ebp - 0x2e4], 0x6d14
jge 0x47f5b0
and dword [ebp - 0x3e0], 0
jmp 0x47f561
mov eax, dword [ebp - 0x3e0]
inc eax
mov dword [ebp - 0x3e0], eax
cmp dword [ebp - 0x3e0], 0x458c
jge 0x47f5ae
mov eax, dword [ebp - 0x2dc]
mov ecx, dword [ebp - 0x390]
shl eax, cl
mov ecx, dword [ebp - 0x2e4]
add ecx, dword [ebp - 0x3e0]
sar eax, cl
cdq
mov dword [ebp - 0xf80], eax
mov dword [ebp - 0xf7c], edx
push dword [ebp - 0xf7c]
push dword [ebp - 0xf80]
mov ecx, 0xab56b8
call fcn.00435439
jmp 0x47f554
jmp 0x47f532
jmp 0x47f50c
jmp 0x47f4e6
mov dword [ebp - 4], 0x12
cmp dword [ebp - 0xa18], 0x5129
jge 0x47f5dd
mov edx, dword [ebp - 0xeb4]
mov ecx, 0xab56b8
call fcn.004371ef
jmp 0x47f5f9
or dword [ebp - 4], 0xffffffff
jmp 0x47f603
mov dword [ebp - 0x1c], 0
jmp 0x47f613
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 4
jge 0x47f629
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x19e8], 0
jmp 0x47f60c
xor eax, eax
inc eax
je 0x47f715
cmp dword [ebp - 0xb4], 4
ja 0x47f647
mov dword [ebp - 0x798], 1
jmp 0x47f64e
and dword [ebp - 0x798], 0
mov eax, dword [ebp - 0xb4]
cmp dword [ebp - 0x798], eax
jle 0x47f668
mov dword [ebp - 0xc38], 1
jmp 0x47f66f
and dword [ebp - 0xc38], 0
mov eax, dword [ebp - 0x1a0]
cmp dword [ebp - 0xc38], eax
jle 0x47f689
mov dword [ebp - 0x7a0], 1
jmp 0x47f690
and dword [ebp - 0x7a0], 0
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0x118], eax
mov eax, dword [ebp - 0x118]
cmp eax, dword [ebp - 0x7a0]
jl 0x47f6b6
mov dword [ebp - 0xa20], 1
jmp 0x47f6bd
and dword [ebp - 0xa20], 0
cmp dword [ebp - 0xa20], 0xcf0a
jge 0x47f6d6
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x14d8], 0
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x16dc], eax
cmp dword [ebp - 0x47c], 0
je 0x47f6f2
cmp dword [ebp - 0x1a0], 0
mov eax, dword [ebp - 0x1a0]
sub eax, dword [ebp - 0xb4]
je 0x47f715
cmp dword [ebp - 0x464], 0
je 0x47f715
mov dword [ebp - 0x7a8], 1
jmp 0x47f71c
and dword [ebp - 0x7a8], 0
mov eax, dword [ebp - 0xb4]
cmp dword [ebp - 0x7a8], eax
jg 0x47f736
mov dword [ebp - 0x1184], 1
jmp 0x47f73d
and dword [ebp - 0x1184], 0
mov eax, dword [ebp - 0x47c]
cmp dword [ebp - 0x464], eax
jge 0x47f757
mov dword [ebp - 0xb60], 1
jmp 0x47f75e
and dword [ebp - 0xb60], 0
cmp dword [ebp - 0xb60], 0xd6b22149
jae 0x47f776
mov dword [ebp - 0x7b0], 1
jmp 0x47f77d
and dword [ebp - 0x7b0], 0
mov eax, dword [ebp - 0x7b0]
neg eax
cmp eax, dword [ebp - 0x1a0]
jge 0x47f799
mov dword [ebp - 0xa28], 1
jmp 0x47f7a0
and dword [ebp - 0xa28], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x160]
cmp dword [ebp - 0xa28], eax
jl 0x47f7c1
mov dword [ebp - 0x7b8], 1
jmp 0x47f7c8
and dword [ebp - 0x7b8], 0
mov eax, dword [ebp - 0x7b8]
shl eax, 1
je 0x47f7e7
cmp dword [ebp - 0xb4], 0
je 0x47f7e7
mov dword [ebp - 0xc00], 1
jmp 0x47f7ee
and dword [ebp - 0xc00], 0
mov eax, dword [ebp - 0xc00]
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0
jne 0x47f815
cmp dword [ebp - 0x118], 0
jne 0x47f815
and dword [ebp - 0xebc], 0
jmp 0x47f81f
mov dword [ebp - 0xebc], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x160]
mov dword [ebp - 0x16e4], eax
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0x16ec], eax
cmp dword [ebp - 0x98], 0
je 0x47f85c
cmp dword [ebp - 0x1a0], 0
je 0x47f85c
mov dword [ebp - 0x7c0], 1
jmp 0x47f863
and dword [ebp - 0x7c0], 0
mov eax, dword [ebp - 0xb4]
sub eax, dword [ebp - 0x7c0]
cmp eax, 0xffff
ja 0x47f882
mov dword [ebp - 0xa30], 1
jmp 0x47f889
and dword [ebp - 0xa30], 0
mov eax, dword [ebp - 0x484]
imul eax, dword [ebp - 0xa30]
test eax, eax
je 0x47f9eb
mov dword [ebp - 0x2ec], 0xfec7
mov dword [ebp - 0x7c8], 0xffffffff
mov eax, dword [ebp - 0x2ec]
cmp dword [ebp - 0x98], eax
jg 0x47f8cc
mov dword [ebp - 0xb68], 1
jmp 0x47f8d3
and dword [ebp - 0xb68], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x160]
mov dword [ebp - 0x16f4], eax
mov eax, dword [ebp - 0x2ec]
mov dword [ebp - 0x16fc], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x14d8]
mov dword [ebp - 0x7c8], eax
mov eax, dword [ebp - 0x7c8]
cmp dword [ebp - 0x464], eax
je 0x47f91e
mov dword [ebp - 0x7d0], 1
jmp 0x47f925
and dword [ebp - 0x7d0], 0
mov eax, dword [ebp - 0xb68]
cmp eax, dword [ebp - 0x7d0]
jg 0x47f93f
mov dword [ebp - 0xa38], 1
jmp 0x47f946
and dword [ebp - 0xa38], 0
mov eax, dword [ebp - 0x2ec]
cmp dword [ebp - 0xa38], eax
jle 0x47f960
mov dword [ebp - 0x7d8], 1
jmp 0x47f967
and dword [ebp - 0x7d8], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x14d8]
cmp dword [ebp - 0x7d8], eax
jge 0x47f990
mov eax, 0xf32651ef
test eax, eax
je 0x47f990
mov dword [ebp - 0xc6c], 1
jmp 0x47f997
and dword [ebp - 0xc6c], 0
cmp dword [ebp - 0xc6c], 0x7aeb8f83
jge 0x47f9af
mov dword [ebp - 0x7e0], 1
jmp 0x47f9b6
and dword [ebp - 0x7e0], 0
mov eax, dword [ebp - 0x7e0]
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x98]
sub eax, dword [ebp - 0x10d4]
mov esi, dword [ebp - 0x2ec]
imul esi, eax
push 0
lea ecx, [ebp - 0x1240]
call fcn.0043566b
mov dword [eax], esi
jmp 0x47fd00
mov dword [ebp - 0x120], 0x6db78960
mov dword [ebp - 0x11c0], 0xd48012cf
mov dword [ebp - 0xa50], 0
mov dword [ebp - 0x474], 0xf806eb76
cmp dword [ebp - 0x120], 0
jne 0x47fbc2
mov eax, dword [ebp - 0x484]
mov dword [ebp - 0x1704], eax
mov eax, dword [ebp - 0x120]
cmp dword [ebp - 0x120], eax
jg 0x47fa46
mov dword [ebp - 0xa40], 1
jmp 0x47fa4d
and dword [ebp - 0xa40], 0
mov eax, dword [ebp - 0x46c]
dec eax
mov dword [ebp - 0x46c], eax
mov eax, dword [ebp - 0x46c]
cmp eax, dword [ebp - 0xa40]
jle 0x47fa74
mov dword [ebp - 0x7e8], 1
jmp 0x47fa7b
and dword [ebp - 0x7e8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x160]
cmp dword [ebp - 0x7e8], eax
je 0x47fa9c
mov dword [ebp - 0xb70], 1
jmp 0x47faa3
and dword [ebp - 0xb70], 0
cmp dword [ebp - 0xb70], 0
jle 0x47fab8
mov dword [ebp - 0x7f0], 1
jmp 0x47fabf
and dword [ebp - 0x7f0], 0
mov eax, dword [ebp - 0x98]
cmp dword [ebp - 0x7f0], eax
jne 0x47fad9
mov dword [ebp - 0xa48], 1
jmp 0x47fae0
and dword [ebp - 0xa48], 0
mov eax, dword [ebp - 0xa48]
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x474]
cmp dword [ebp - 0x120], eax
jge 0x47fb0c
mov eax, 0x733a7aa5
test eax, eax
jne 0x47fb0c
and dword [ebp - 0x7f8], 0
jmp 0x47fb16
mov dword [ebp - 0x7f8], 1
mov eax, dword [ebp - 0x7f8]
sub eax, 0x94d
cmp eax, dword [ebp - 0x120]
jle 0x47fb35
mov dword [ebp - 0xc08], 1
jmp 0x47fb3c
and dword [ebp - 0xc08], 0
cmp dword [ebp - 0xc08], 0xffff
jbe 0x47fb54
mov dword [ebp - 0x800], 1
jmp 0x47fb5b
and dword [ebp - 0x800], 0
mov eax, dword [ebp - 0x800]
mov dword [ebp - 0xa50], eax
cmp dword [ebp - 0xa50], 0
jne 0x47fb82
cmp dword [ebp - 0x98], 0
jne 0x47fb82
and dword [ebp - 0x808], 0
jmp 0x47fb8c
mov dword [ebp - 0x808], 1
cmp dword [ebp - 0x808], 0xd489
jg 0x47fba4
mov dword [ebp - 0xb78], 1
jmp 0x47fbab
and dword [ebp - 0xb78], 0
mov eax, dword [ebp - 0x474]
cmp dword [ebp - 0xb78], eax
je 0x47fbc2
and dword [ebp - 0x810], 0
jmp 0x47fbcc
mov dword [ebp - 0x810], 1
mov eax, dword [ebp - 0x118]
cmp eax, dword [ebp - 0x810]
jne 0x47fbe6
mov dword [ebp - 0xa58], 1
jmp 0x47fbed
and dword [ebp - 0xa58], 0
push 0
lea ecx, [ebp - 0x1240]
call fcn.0043566b
mov ecx, dword [ebp - 0xa58]
add ecx, dword [eax]
je 0x47fc19
mov eax, 0xf817ea5c
test eax, eax
je 0x47fc19
mov dword [ebp - 0x818], 1
jmp 0x47fc20
and dword [ebp - 0x818], 0
mov eax, dword [ebp - 0x474]
cmp dword [ebp - 0x818], eax
jle 0x47fc3e
xor eax, eax
je 0x47fc3e
mov dword [ebp - 0xc40], 1
jmp 0x47fc45
and dword [ebp - 0xc40], 0
mov eax, dword [ebp - 0xc40]
mov dword [ebp - 0x118], eax
mov eax, dword [ebp - 0x120]
cmp dword [ebp - 0x118], eax
jge 0x47fc6b
mov dword [ebp - 0xec4], 1
jmp 0x47fc72
and dword [ebp - 0xec4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x160]
mov dword [ebp - 0x170c], eax
mov eax, dword [ebp - 0x11c0]
mov dword [ebp - 0x1714], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x14d8]
cmp dword [ebp + eax - 0x160], ecx
jl 0x47fcbe
cmp dword [ebp - 0x47c], 0
jne 0x47fcbe
and dword [ebp - 0x820], 0
jmp 0x47fcc8
mov dword [ebp - 0x820], 1
cmp dword [ebp - 0x820], 0xbda1
jl 0x47fce0
mov dword [ebp - 0xa60], 1
jmp 0x47fce7
and dword [ebp - 0xa60], 0
mov eax, dword [ebp - 0x120]
add eax, dword [ebp - 0xa60]
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x19e8], eax
mov dword [ebp - 0x828], 0x24e3
mov dword [ebp - 0xecc], str.erwbaekiv_mgqq_hnedmvx_ytvzicko_gxncvw_chfgvswj_mpljotpji_miviqzy_pdbyhc
cmp dword [ebp - 0x828], 0x2705
jle 0x47fdbd
and dword [ebp - 0x398], 0
jmp 0x47fd3a
mov eax, dword [ebp - 0x398]
inc eax
mov dword [ebp - 0x398], eax
cmp dword [ebp - 0x398], 0x7f20
jge 0x47fdbd
and dword [ebp - 0x2f4], 0
jmp 0x47fd5c
mov eax, dword [ebp - 0x2f4]
inc eax
mov dword [ebp - 0x2f4], eax
cmp dword [ebp - 0x2f4], 0x3b5c
jge 0x47fdb8
mov eax, dword [ebp - 0x398]
cdq
idiv dword [ebp - 0x2f4]
mov eax, edx
cdq
mov dword [ebp - 0xf8c], eax
mov dword [ebp - 0xf88], edx
push dword [ebp - 0xf88]
push dword [ebp - 0xf8c]
lea ecx, [ebp - 0x1a50]
call fcn.00401a1e
pop ecx
pop ecx
mov ecx, eax
call fcn.0043542e
push eax
call fcn.004a9457
pop ecx
lea ecx, [ebp - 0x1a50]
call fcn.00435424
jmp 0x47fd4f
jmp 0x47fd2d
push 0x7f7f
lea eax, [ebp - 0x484]
push eax
push 0
call fcn.0046a7a3
add esp, 0xc
mov dword [ebp - 4], 0x14
cmp dword [ebp - 0x828], 0x2116
jge 0x47fdf2
push dword [ebp - 0xecc]
call fcn.004a9457
pop ecx
jmp 0x47fe0e
or dword [ebp - 4], 0xffffffff
jmp 0x47fe18
lea ecx, [ebp - 0x1240]
call fcn.0043564f
mov dword [ebp - 0xa90], 0xfff6
mov dword [ebp - 0xa8], 0xd386cce5
mov dword [ebp - 0x48c], 0xfffd
mov dword [ebp - 0xc10], 0xfffffffa
mov dword [ebp - 0x148], 0x1b6eab3c
mov dword [ebp - 0x408], 0
jmp 0x47fe6e
mov eax, dword [ebp - 0x408]
inc eax
mov dword [ebp - 0x408], eax
cmp dword [ebp - 0x408], 2
jge 0x47fe8a
mov eax, dword [ebp - 0x408]
mov dword [ebp + eax*4 - 0x1540], 1
jmp 0x47fe61
cmp dword [ebp - 0xa8], 0x5306
jne 0x47fea2
mov dword [ebp - 0xb80], 1
jmp 0x47fea9
and dword [ebp - 0xb80], 0
mov eax, dword [ebp - 0xb80]
add eax, 0xa
sub eax, dword [ebp - 0xa8]
mov dword [ebp - 0x48c], eax
cmp dword [ebp - 0x48c], 0
cmp dword [ebp - 0x48c], 0
je 0x47fedf
xor eax, eax
inc eax
je 0x47fedf
mov dword [ebp - 0x830], 1
jmp 0x47fee6
and dword [ebp - 0x830], 0
imul eax, dword [ebp - 0xa8], 0xfffc
cmp eax, dword [ebp - 0x830]
jne 0x47ff04
mov dword [ebp - 0xa68], 1
jmp 0x47ff0b
and dword [ebp - 0xa68], 0
cmp dword [ebp - 0xa68], 1
jle 0x47ff20
mov dword [ebp - 0x838], 1
jmp 0x47ff27
and dword [ebp - 0x838], 0
mov eax, dword [ebp - 0x838]
mov dword [ebp - 0xc10], eax
mov eax, dword [ebp - 0xa8]
add eax, dword [ebp - 0xc10]
sub eax, dword [ebp - 0xa8]
cmp dword [ebp - 0xa8], eax
jle 0x47ff59
mov dword [ebp - 0x840], 1
jmp 0x47ff60
and dword [ebp - 0x840], 0
mov eax, dword [ebp - 0x840]
mov dword [ebp - 0xa8], eax
imul eax, dword [ebp - 0xa8], 7
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x148], 0
jmp 0x47ff92
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 2
jge 0x47ffae
mov eax, dword [ebp - 0x148]
mov dword [ebp + eax*4 - 0x1540], 0x5943e2f7
jmp 0x47ff85
mov dword [ebp - 0xa70], 0x6a9c
mov dword [ebp - 0x10dc], str.dnicewx_snfvb_tbu_zvd_iufd_ltodtrzr_gwhfzaz_ospnrf_pulxykp_uikzfw_cidmu
cmp dword [ebp - 0xa70], 0x6ddf
jle 0x480045
and dword [ebp - 0x2fc], 0
jmp 0x47ffe4
mov eax, dword [ebp - 0x2fc]
inc eax
mov dword [ebp - 0x2fc], eax
cmp dword [ebp - 0x2fc], 0x1451
jge 0x480045
and dword [ebp - 0x3a0], 0
jmp 0x480006
mov eax, dword [ebp - 0x3a0]
inc eax
mov dword [ebp - 0x3a0], eax
cmp dword [ebp - 0x3a0], 0x3fe2
jge 0x480043
mov eax, dword [ebp - 0x2fc]
and eax, dword [ebp - 0x3a0]
cdq
mov dword [ebp - 0xf98], eax
mov dword [ebp - 0xf94], edx
push dword [ebp - 0xf94]
push dword [ebp - 0xf98]
mov ecx, 0xab56b8
call fcn.00435439
jmp 0x47fff9
jmp 0x47ffd7
mov dword [ebp - 0xeec], 0xecf4a416
mov dword [ebp - 4], 0x16
cmp dword [ebp - 0xa70], 0x67b6
jge 0x480072
mov edx, dword [ebp - 0x10dc]
mov ecx, 0xab56b8
call fcn.004371ef
jmp 0x48008e
or dword [ebp - 4], 0xffffffff
jmp 0x480098
mov dword [ebp - 0x170], 0xfffffffa
mov dword [ebp - 0x304], 0
jmp 0x4800bb
mov eax, dword [ebp - 0x304]
inc eax
mov dword [ebp - 0x304], eax
cmp dword [ebp - 0x304], 4
jge 0x4800d7
mov eax, dword [ebp - 0x304]
mov dword [ebp + eax*4 - 0x1944], 7
jmp 0x4800ae
mov dword [ebp - 0x170], 0
jmp 0x4800f0
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 3
jg 0x480132
mov eax, dword [ebp - 0x170]
mov ecx, dword [ebp - 0x170]
mov eax, dword [ebp + eax*4 - 0x1944]
mov dword [ebp + ecx*4 - 0x1944], eax
mov byte [ebp - 0x101], 0
push 0
lea eax, [ebp - 0x101]
push eax
push 0x25b6
call fcn.0046c3a2
add esp, 0xc
jmp 0x4800e3
push 3
lea ecx, [ebp - 0x1430]
call fcn.0043557d
mov dword [ebp - 0x848], 0x2c95
mov dword [ebp - 0xed4], str.dzwra_ddxibea_cknn_pfo_gcvlnb_wel_yoerlz_cwjmrhhl_tod
cmp dword [ebp - 0x848], 0x3027
jle 0x48021e
and dword [ebp - 0x1e8], 0
jmp 0x480179
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 0x6b35
jge 0x480210
and dword [ebp - 0x1dc], 0
jmp 0x48019f
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 0x5baf
jge 0x48020b
and dword [ebp - 0x1e0], 0
jmp 0x4801c1
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 0x787f
jge 0x480209
mov eax, dword [ebp - 0x1dc]
cdq
idiv dword [ebp - 0x1e0]
mov eax, dword [ebp - 0x1e8]
mov ecx, edx
sar eax, cl
cdq
mov dword [ebp - 0xfa4], eax
mov dword [ebp - 0xfa0], edx
push dword [ebp - 0xfa0]
push dword [ebp - 0xfa4]
mov ecx, 0xab56b8
call fcn.00435439
jmp 0x4801b4
jmp 0x480192
jmp 0x48016c
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [ebp - 0x10ec], 1
mov dword [ebp - 4], 0x18
cmp dword [ebp - 0x848], 0x28fb
jge 0x48024b
mov edx, dword [ebp - 0xed4]
mov ecx, 0xab56b8
call fcn.004371ef
jmp 0x480267
or dword [ebp - 4], 0xffffffff
jmp 0x480271
mov dword [ebp - 0xef4], 0
mov dword [ebp - 0x18], 0x4e67
mov dword [ebp - 0x1f0], 0x83a0f0f5
mov dword [ebp - 0x494], 0xfffffffa
mov dword [ebp - 0xedc], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x18], eax
jge 0x480322
cmp dword [ebp - 0x18], 0xffffffff
jne 0x4802ba
mov dword [ebp - 0xb88], 1
jmp 0x4802c1
and dword [ebp - 0xb88], 0
mov eax, dword [ebp - 0xb88]
mov dword [ebp - 0x1f0], eax
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x1f0], eax
jne 0x4802e7
cmp dword [ebp - 0x18], 0
jne 0x4802e7
and dword [ebp - 0x850], 0
jmp 0x4802f1
mov dword [ebp - 0x850], 1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x850]
sub ecx, 0x992f
sub ecx, dword [ebp - 0x18]
imul ecx, dword [ebp - 0x18]
imul eax, ecx
mov dword [ebp - 0x494], eax
cmp dword [ebp - 0x494], 0
jne 0x480322
and dword [ebp - 0xa78], 0
jmp 0x48032c
mov dword [ebp - 0xa78], 1
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0xa78], eax
jl 0x480349
cmp dword [ebp - 0x494], 0
jne 0x480349
and dword [ebp - 0x858], 0
jmp 0x480353
mov dword [ebp - 0x858], 1
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x858]
je 0x480373
mov eax, 0xd20578cc
test eax, eax
je 0x480373
mov dword [ebp - 0x1194], 1
jmp 0x48037a
and dword [ebp - 0x1194], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x171c], eax
mov eax, dword [ebp - 0x1f0]
mov dword [ebp - 0x1724], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x172c], eax
cmp dword [ebp - 0x1f0], 0
je 0x4803b4
push 9
pop eax
test eax, eax
je 0x4803b4
mov dword [ebp - 0xc68], 1
jmp 0x4803bb
and dword [ebp - 0xc68], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0xc68], eax
jle 0x4803d2
mov dword [ebp - 0x860], 1
jmp 0x4803d9
and dword [ebp - 0x860], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x860], eax
jg 0x4803f0
mov dword [ebp - 0xa80], 1
jmp 0x4803f7
and dword [ebp - 0xa80], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0xa80], eax
je 0x48040e
mov dword [ebp - 0x868], 1
jmp 0x480415
and dword [ebp - 0x868], 0
mov eax, dword [ebp - 0x868]
mov dword [ebp - 0xedc], eax
mov byte [ebp - 0xe3], 0
push 1
lea eax, [ebp - 0xe3]
push eax
push 1
push 1
push 0
push 0x91c
call fcn.0046e093
add esp, 0x18
mov dword [ebp - 0x1f8], 0
jmp 0x48045d
mov eax, dword [ebp - 0x1f8]
inc eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 3
jge 0x48047f
push dword [ebp - 0x1f8]
lea ecx, [ebp - 0x1430]
call fcn.0043566b
mov dword [eax], 5
jmp 0x480450
mov dword [ebp - 0xa90], 1
mov dword [ebp - 0x880], 0x2f2e
mov dword [ebp - 0x11c8], str.ffde_wzcwmauda_btq_wxby_ejmaknz_cbfvk_tlxdt_ofe_rfvclk_bidzdc_nzygkcy
cmp dword [ebp - 0x880], 0x2fed
jle 0x480523
and dword [ebp - 0x200], 0
jmp 0x4804bf
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 0x2ba5
jge 0x480523
and dword [ebp - 0x208], 0
jmp 0x4804e1
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 0x8da
jge 0x480521
mov eax, dword [ebp - 0x200]
cdq
idiv dword [ebp - 0x208]
mov eax, edx
cdq
mov dword [ebp - 0xfb0], eax
mov dword [ebp - 0xfac], edx
push dword [ebp - 0xfac]
push dword [ebp - 0xfb0]
mov ecx, 0xab56b8
call fcn.00435439
jmp 0x4804d4
jmp 0x4804b2
mov dword [ebp - 0x90], 0
mov dword [ebp - 0xee4], 3
mov dword [ebp - 0x210], 0
jmp 0x480550
mov eax, dword [ebp - 0x210]
inc eax
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 3
jge 0x48056c
mov eax, dword [ebp - 0x210]
mov dword [ebp + eax*4 - 0x19c0], 0x185299da
jmp 0x480543
mov dword [ebp - 0x90], 0
jmp 0x480585
cmp dword [ebp - 0x90], 2
jg 0x480698
mov dword [ebp - 0x150], 0x8d3a18e4
mov dword [ebp - 0x10e4], 0x4d0f4f23
mov eax, dword [ebp - 0x90]
cmp dword [ebp - 0x150], eax
jl 0x4805c0
mov dword [ebp - 0xb90], 1
jmp 0x4805c7
and dword [ebp - 0xb90], 0
mov eax, dword [ebp - 0x90]
cmp eax, dword [ebp - 0xb90]
jl 0x4805e1
mov dword [ebp - 0x870], 1
jmp 0x4805e8
and dword [ebp - 0x870], 0
mov eax, dword [ebp - 0x870]
neg eax
imul eax, dword [ebp - 0x150]
test eax, eax
jne 0x480659
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0xa88], eax
mov eax, dword [ebp - 0x90]
mov ecx, dword [ebp - 0xa88]
mov dword [ebp + eax*4 - 0x19c0], ecx
mov eax, dword [ebp - 0x150]
cmp dword [ebp - 0x90], eax
jl 0x480634
mov dword [ebp - 0xc18], 1
mov eax, dword [ebp - 0x150]
imul eax, dword [ebp - 0xc18]
mov dword [ebp - 0x10e4], eax
push 0x7a3d
lea eax, [ebp - 0xee4]
push eax
push 1
push 0
push 0x51f8
call fcn.00469eb5
add esp, 0x14
jmp 0x480578
push 1
push 0x1201
lea eax, [ebp - 0x90]
push eax
push 0x868
push 0
push 0x5eb3
push 1
push 0xe32
push 0x225
push 0x2d5b
push 1
call fcn.00453518
add esp, 0x2c
mov dword [ebp - 4], 0x1a
cmp dword [ebp - 0x880], 0x2e5b
jge 0x4806f0
mov edx, dword [ebp - 0x11c8]
mov ecx, 0xab56b8
call fcn.004371ef
jmp 0x48070c
or dword [ebp - 4], 0xffffffff
jmp 0x480716
lea eax, [ebp - 0xa90]
push eax
push 1
push 0
push 0x2b37
push 0x549c
lea eax, [ebp - 0xeec]
push eax
push 0x32d5
push 0
lea eax, [ebp - 0x1430]
push eax
lea eax, [ebp - 0x10ec]
push eax
push 0
lea eax, [ebp - 0xef4]
push eax
push 0x385d
push 0x4f0f
call fcn.0046b6fc
add esp, 0x38
lea ecx, [ebp - 0x1430]
call fcn.0043564f
mov dword [ebp - 0x1b8], 0
mov dword [ebp - 0x11a4], 7
mov dword [ebp - 0x1b8], 0xfffffff1
jmp 0x48079a
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret