Function at 0x465810
Capabilities:
Encrypt data using speck

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4a8433
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x25a0
call fcn.00497bf0
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x91c], 0x5a7d
mov dword [ebp - 0x1860], 0xaa4628
cmp dword [ebp - 0x91c], 0x5cab
jle 0x4662ce
and dword [ebp - 0x404], 0
jmp 0x465873
mov eax, dword [ebp - 0x404]
inc eax
mov dword [ebp - 0x404], eax
cmp dword [ebp - 0x404], 0x4de7
jge 0x4662ce
mov dword [ebp - 0x140], 0x8cff0ea7
mov dword [ebp - 0x1b8], 0xffffffff
mov dword [ebp - 0x140], 0xfffffffa
jmp 0x4658b0
mov eax, dword [ebp - 0x140]
dec eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 0xffffffef
jle 0x465b4a
push 1
lea ecx, [ebp - 0x1600]
call fcn.00428948
mov dword [ebp - 0x1508], 0xfffffff8
mov dword [ebp - 0x3ec], 0
jmp 0x4658ed
mov eax, dword [ebp - 0x3ec]
inc eax
mov dword [ebp - 0x3ec], eax
cmp dword [ebp - 0x3ec], 1
jge 0x46590c
push dword [ebp - 0x3ec]
lea ecx, [ebp - 0x1600]
call fcn.00428a36
and dword [eax], 0
jmp 0x4658e0
push 0
lea ecx, [ebp - 0x1600]
call fcn.00428a36
mov dword [eax], 0xffffffe7
jmp 0x465945
push 0
lea ecx, [ebp - 0x1600]
call fcn.00428a36
mov dword [ebp - 0x12e4], eax
mov eax, dword [ebp - 0x12e4]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x12e4]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x1600]
call fcn.00428a36
cmp dword [eax], 8
jge 0x465aee
mov dword [ebp - 0x94], 1
cmp dword [ebp - 0x94], 0
je 0x4659bb
mov dword [ebp - 0x94], 0xfffffffb
jmp 0x465987
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0xfffffffc
jg 0x4659b6
mov dword [ebp - 0x1508], 0
mov byte [ebp - 0x1ad], 0
movzx eax, byte [ebp - 0x1ad]
test eax, eax
je 0x4659b4
push 0
call dword [0xab2278]
jmp 0x46597a
jmp 0x465ae9
mov dword [ebp - 0x1588], 0xffffffff
cmp dword [ebp - 0x140], 1
jl 0x4659da
mov dword [ebp - 0x1540], 1
jmp 0x4659e1
and dword [ebp - 0x1540], 0
push 0
lea ecx, [ebp - 0x1600]
call fcn.00428a36
imul eax, dword [eax], 0x9896
cmp eax, 7
jne 0x465a05
mov dword [ebp - 0x17cc], 1
jmp 0x465a0c
and dword [ebp - 0x17cc], 0
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x228c], eax
mov eax, dword [ebp - 0x1508]
mov dword [ebp - 0x1fd8], eax
cmp dword [ebp - 0x94], 8
je 0x465a39
mov dword [ebp - 0x1510], 1
jmp 0x465a40
and dword [ebp - 0x1510], 0
mov eax, dword [ebp - 0x140]
cmp dword [ebp - 0x1510], eax
jle 0x465a63
cmp dword [ebp - 0x140], 0
je 0x465a63
mov dword [ebp - 0x1548], 1
jmp 0x465a6a
and dword [ebp - 0x1548], 0
mov eax, dword [ebp - 0x1540]
add eax, dword [ebp - 0x1548]
cmp eax, 0x881dda8d
jbe 0x465a89
mov dword [ebp - 0x1580], 1
jmp 0x465a90
and dword [ebp - 0x1580], 0
mov eax, dword [ebp - 0x140]
imul eax, dword [ebp - 0x1580]
sub eax, dword [ebp - 0x94]
mov dword [ebp - 0x1588], eax
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x2318], eax
cmp dword [ebp - 0x1588], 0
je 0x465ad3
cmp dword [ebp - 0x140], 0
je 0x465ad3
mov dword [ebp - 0x1590], 1
jmp 0x465ada
and dword [ebp - 0x1590], 0
mov eax, dword [ebp - 0x1590]
add eax, 6
mov dword [ebp - 0x1b8], eax
jmp 0x465921
mov dword [ebp - 0x1b8], 0
jmp 0x465b07
mov eax, dword [ebp - 0x1b8]
dec eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 0
jl 0x465b3a
push dword [ebp - 0x1b8]
lea ecx, [ebp - 0x1600]
call fcn.00428a36
mov esi, eax
push dword [ebp - 0x1b8]
lea ecx, [ebp - 0x1600]
call fcn.00428a36
mov ecx, dword [esi]
mov dword [eax], ecx
jmp 0x465afa
lea ecx, [ebp - 0x1600]
call fcn.00428a1a
jmp 0x4658a3
and dword [ebp - 0x630], 0
jmp 0x465b60
mov eax, dword [ebp - 0x630]
inc eax
mov dword [ebp - 0x630], eax
cmp dword [ebp - 0x630], 0x3f0c
jge 0x4662c9
mov dword [ebp - 0x1810], 0x76b0f738
mov dword [ebp - 0x1c0], 0x964a53aa
mov dword [ebp - 0x34c], 0xc3099cfe
push 3
lea ecx, [ebp - 0x1c58]
call fcn.00428948
mov dword [ebp - 0x2b8], 1
mov dword [ebp - 0x858], 0x7c422d5f
mov dword [ebp - 0x15c0], 1
mov dword [ebp - 0x1820], 0x1153aa9b
mov dword [ebp - 0x714], 0
jmp 0x465bdc
mov eax, dword [ebp - 0x714]
inc eax
mov dword [ebp - 0x714], eax
cmp dword [ebp - 0x714], 3
jge 0x465bfe
push dword [ebp - 0x714]
lea ecx, [ebp - 0x1c58]
call fcn.00428a36
mov dword [eax], 0x16f93bd5
jmp 0x465bcf
mov eax, dword [ebp - 0x1810]
mov dword [ebp - 0x1c0], eax
mov eax, dword [ebp - 0x1c0]
mov dword [ebp - 0x34c], eax
mov dword [ebp - 0x34c], 0
jmp 0x465c2f
mov eax, dword [ebp - 0x34c]
dec eax
mov dword [ebp - 0x34c], eax
cmp dword [ebp - 0x34c], 0xffffffed
jg 0x465fb9
push 3
lea ecx, [ebp - 0x73c]
call fcn.00428948
mov dword [ebp - 0x1c8], 0xffffffff
mov dword [ebp - 0x3f4], 0
jmp 0x465c6c
mov eax, dword [ebp - 0x3f4]
inc eax
mov dword [ebp - 0x3f4], eax
cmp dword [ebp - 0x3f4], 3
jge 0x465c8e
push dword [ebp - 0x3f4]
lea ecx, [ebp - 0x73c]
call fcn.00428a36
mov dword [eax], 4
jmp 0x465c5f
mov esi, dword [ebp - 0x1c0]
push 1
lea ecx, [ebp - 0x73c]
call fcn.00428a36
cmp esi, dword [eax]
jne 0x465cb1
mov dword [ebp - 0x1598], 1
jmp 0x465cb8
and dword [ebp - 0x1598], 0
push 0
lea ecx, [ebp - 0x1c58]
call fcn.00428a36
mov esi, eax
push 0
lea ecx, [ebp - 0x73c]
call fcn.00428a36
mov ecx, dword [esi]
cmp ecx, dword [eax]
jl 0x465ce6
mov dword [ebp - 0x778], 1
jmp 0x465ced
and dword [ebp - 0x778], 0
push 0
lea ecx, [ebp - 0x1c58]
call fcn.00428a36
mov ecx, dword [ebp - 0x778]
mov dword [eax], ecx
mov eax, dword [ebp - 0x778]
mov dword [ebp - 0x2b8], eax
mov eax, dword [ebp - 0x2b8]
mov dword [ebp - 0x1c8], eax
imul eax, dword [ebp - 0x1c8], 0xfffe
cmp eax, 0x7627
je 0x465d37
mov dword [ebp - 0x15a0], 1
jmp 0x465d3e
and dword [ebp - 0x15a0], 0
mov esi, dword [ebp - 0x1598]
imul esi, dword [ebp - 0x15a0]
push 0
lea ecx, [ebp - 0x73c]
call fcn.00428a36
cmp esi, dword [eax]
jne 0x465d6a
xor eax, eax
inc eax
jne 0x465d6a
and dword [ebp - 0x15a8], 0
jmp 0x465d74
mov dword [ebp - 0x15a8], 1
mov eax, dword [ebp - 0x15a8]
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 0
jne 0x465da4
push 1
lea ecx, [ebp - 0x73c]
call fcn.00428a36
cmp dword [eax], 0
jne 0x465da4
and dword [ebp - 0x15b0], 0
jmp 0x465dae
mov dword [ebp - 0x15b0], 1
push 2
lea ecx, [ebp - 0x73c]
call fcn.00428a36
mov ecx, dword [ebp - 0x15b0]
imul ecx, dword [eax]
test ecx, ecx
je 0x465ddb
push 0xfffffffffffffffb
pop eax
test eax, eax
je 0x465ddb
mov dword [ebp - 0x1818], 1
jmp 0x465de2
and dword [ebp - 0x1818], 0
push 1
lea ecx, [ebp - 0x73c]
call fcn.00428a36
mov eax, dword [ebp - 0x858]
mov dword [ebp - 0x858], eax
mov eax, dword [ebp - 0x858]
mov dword [ebp - 0x15c0], eax
mov dword [ebp - 0x2b8], 0
jmp 0x465e20
mov eax, dword [ebp - 0x2b8]
inc eax
mov dword [ebp - 0x2b8], eax
cmp dword [ebp - 0x2b8], 9
je 0x465fa9
mov dword [ebp - 0x15d8], 3
mov eax, dword [ebp - 0x1c8]
mov dword [ebp - 0x1fe0], eax
push 1
lea ecx, [ebp - 0x73c]
call fcn.00428a36
mov ecx, dword [ebp - 0x15c0]
cmp dword [eax], ecx
jge 0x465e66
mov dword [ebp - 0x15e0], 1
jmp 0x465e6d
and dword [ebp - 0x15e0], 0
mov eax, dword [ebp - 0x1c8]
mov dword [ebp - 0x2178], eax
mov eax, dword [ebp - 0x1c0]
mov dword [ebp - 0x1fe8], eax
cmp dword [ebp - 0x1c8], 0
je 0x465e97
cmp dword [ebp - 0x1c0], 0
jne 0x465ea9
cmp dword [ebp - 0x15d8], 0
jne 0x465ea9
and dword [ebp - 0x15c8], 0
jmp 0x465eb3
mov dword [ebp - 0x15c8], 1
push 1
lea ecx, [ebp - 0x73c]
call fcn.00428a36
mov ecx, dword [ebp - 0x15c8]
cmp ecx, dword [eax]
jl 0x465ed6
mov dword [ebp - 0x15d0], 1
jmp 0x465edd
and dword [ebp - 0x15d0], 0
mov eax, dword [ebp - 0x15d0]
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 0
je 0x465f07
cmp dword [ebp - 0x15d8], 0
je 0x465f07
mov dword [ebp - 0x15e8], 1
jmp 0x465f0e
and dword [ebp - 0x15e8], 0
mov eax, dword [ebp - 0x15e0]
cmp eax, dword [ebp - 0x15e8]
jl 0x465f28
mov dword [ebp - 0x15f0], 1
jmp 0x465f2f
and dword [ebp - 0x15f0], 0
push 1
lea ecx, [ebp - 0x73c]
call fcn.00428a36
mov ecx, dword [ebp - 0x15f0]
add ecx, dword [eax]
imul esi, ecx, 0xc7b2
add esi, 0xd3fd
push 2
lea ecx, [ebp - 0x73c]
call fcn.00428a36
cmp esi, dword [eax]
je 0x465f6d
mov dword [ebp - 0x8f4], 1
jmp 0x465f74
and dword [ebp - 0x8f4], 0
push 2
lea ecx, [ebp - 0x73c]
call fcn.00428a36
mov ecx, dword [ebp - 0x1820]
imul ecx, dword [ebp - 0x8f4]
mov esi, ecx
imul esi, dword [eax]
neg esi
push 1
lea ecx, [ebp - 0x73c]
call fcn.00428a36
mov dword [eax], esi
jmp 0x465e13
lea ecx, [ebp - 0x73c]
call fcn.00428a1a
jmp 0x465c22
lea ecx, [ebp - 0x1c58]
call fcn.00428a1a
and dword [ebp - 0x3fc], 0
jmp 0x465fda
mov eax, dword [ebp - 0x3fc]
inc eax
mov dword [ebp - 0x3fc], eax
cmp dword [ebp - 0x3fc], 0xe3e
jge 0x4662c4
mov dword [ebp - 0x11c0], 1
mov dword [ebp - 0x1828], 0xf72d4ea6
mov dword [ebp - 0x1ea4], 0xeee2fde2
mov dword [ebp - 0x1ea0], 0xeee2fde2
mov dword [ebp - 0x1e9c], 0xeee2fde2
mov dword [ebp - 0x1e98], 0xeee2fde2
mov byte [ebp - 0x269], 0
movzx eax, byte [ebp - 0x269]
test eax, eax
je 0x466042
push 0
push 0
call dword [0xab22c0]
mov eax, dword [ebp - 0x11c0]
mov dword [ebp - 0x2270], eax
mov eax, dword [ebp - 0x11c0]
mov dword [ebp - 0x1ff0], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1828]
mov dword [ebp + eax - 0x1ea4], ecx
and dword [ebp - 0x6b8], 0
jmp 0x466083
mov eax, dword [ebp - 0x6b8]
inc eax
mov dword [ebp - 0x6b8], eax
cmp dword [ebp - 0x6b8], 0x2172
jge 0x4662bf
mov ecx, dword [ebp - 0x630]
sub ecx, dword [ebp - 0x3fc]
add ecx, dword [ebp - 0x6b8]
mov eax, dword [ebp - 0x404]
shl eax, cl
cdq
mov dword [ebp - 0x1884], eax
mov dword [ebp - 0x1880], edx
push 1
lea ecx, [ebp - 0x1610]
call fcn.00428948
mov dword [ebp - 0x860], 0
mov dword [ebp - 0x868], 0xffffffff
push 1
lea ecx, [ebp - 0x1d8c]
call fcn.00428948
mov dword [ebp - 0x11c8], 0xfffffffa
mov dword [ebp - 0x1840], 0x8d7cbae8
mov dword [ebp - 0x9c], 0
jmp 0x466115
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 1
jge 0x466137
push dword [ebp - 0x9c]
lea ecx, [ebp - 0x1610]
call fcn.00428a36
mov dword [eax], 0xfffffff9
jmp 0x466108
mov dword [ebp - 0x9c], 0
jmp 0x466150
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 1
jge 0x466172
push dword [ebp - 0x9c]
lea ecx, [ebp - 0x1d8c]
call fcn.00428a36
mov dword [eax], 0xfffffff6
jmp 0x466143
push 0
lea ecx, [ebp - 0x1610]
call fcn.00428a36
push 0
lea ecx, [ebp - 0x1610]
call fcn.00428a36
mov eax, dword [ebp - 0x860]
mov dword [ebp - 0x2180], eax
push 0
lea ecx, [ebp - 0x1610]
call fcn.00428a36
cmp dword [eax], 0xc17c7747
jbe 0x4661cb
push 0
lea ecx, [ebp - 0x1610]
call fcn.00428a36
cmp dword [eax], 0
je 0x4661cb
mov dword [ebp - 0x1830], 1
jmp 0x4661d2
and dword [ebp - 0x1830], 0
mov eax, dword [ebp - 0x860]
mov dword [ebp - 0x868], eax
cmp dword [ebp - 0x868], 0
jne 0x4661f3
mov dword [ebp - 0x1838], 1
jmp 0x4661fa
and dword [ebp - 0x1838], 0
mov eax, dword [ebp - 0x860]
mov dword [ebp - 0x1ff8], eax
cmp dword [ebp - 0x868], 0xfffffffc
jb 0x46621b
mov dword [ebp - 0x8fc], 1
jmp 0x466222
and dword [ebp - 0x8fc], 0
push 0
lea ecx, [ebp - 0x1d8c]
call fcn.00428a36
mov ecx, dword [ebp - 0x8fc]
mov dword [eax], ecx
mov dword [ebp - 0x11c8], 0
mov esi, dword [ebp - 0x11c8]
push 0
lea ecx, [ebp - 0x1610]
call fcn.00428a36
imul esi, dword [eax]
test esi, esi
jne 0x466268
push 0
lea ecx, [ebp - 0x1610]
call fcn.00428a36
mov dword [ebp - 0x1840], 0xc0198ab7
lea ecx, [ebp - 0x1d8c]
call fcn.00428a1a
lea ecx, [ebp - 0x1610]
call fcn.00428a1a
push dword [ebp - 0x1880]
push dword [ebp - 0x1884]
lea ecx, [ebp - 0x2424]
call fcn.00454cb5
pop ecx
pop ecx
mov ecx, eax
call fcn.00402a8a
push eax
call fcn.0047c2f5
pop ecx
lea ecx, [ebp - 0x2424]
call fcn.00402877
jmp 0x466076
jmp 0x465fcd
jmp 0x465b53
jmp 0x465866
mov dword [ebp - 0x22b0], 0xffff
mov byte [ebp - 0x195], 0
movzx eax, byte [ebp - 0x195]
test eax, eax
je 0x466300
push 0
push 0
push 0x2110
push 0x48a
push 0
call dword [0xab2384]
mov byte [ebp - 0x2a8], 0
movzx eax, byte [ebp - 0x2a8]
test eax, eax
je 0x46631c
push 0
push 0
call dword [0xab2020]
mov dword [ebp - 0x2000], 0xffff
mov byte [ebp - 0x197], 0
movzx eax, byte [ebp - 0x197]
test eax, eax
je 0x46634e
push 0
push 0
push 0x2110
push 0x48a
push 0
call dword [0xab2384]
mov byte [ebp - 0x271], 0
movzx eax, byte [ebp - 0x271]
test eax, eax
je 0x46636a
push 0
push 0
call dword [0xab2020]
xor ecx, ecx
call fcn.00428cb3
push eax
call fcn.0047c023
pop ecx
mov dword [ebp - 0x390], 0xffffffff
mov dword [ebp - 0x390], 0
jmp 0x46639b
mov eax, dword [ebp - 0x390]
inc eax
mov dword [ebp - 0x390], eax
cmp dword [ebp - 0x390], 0x16
jne 0x466448
mov dword [ebp - 0x350], 0
mov dword [ebp - 0x638], 0
jmp 0x4663cb
mov eax, dword [ebp - 0x638]
inc eax
mov dword [ebp - 0x638], eax
cmp dword [ebp - 0x638], 1
jge 0x4663e7
mov eax, dword [ebp - 0x638]
mov dword [ebp + eax*4 - 0x1848], 0xd925
jmp 0x4663be
mov dword [ebp - 0x350], 0
jmp 0x466400
mov eax, dword [ebp - 0x350]
inc eax
mov dword [ebp - 0x350], eax
cmp dword [ebp - 0x350], 1
jge 0x46641c
mov eax, dword [ebp - 0x350]
mov dword [ebp + eax*4 - 0x1848], 0xd45d
jmp 0x4663f3
mov byte [ebp - 0x199], 0
movzx eax, byte [ebp - 0x199]
test eax, eax
je 0x466443
push 0
push 0
push 0x2421
push 0
push 0
push 0
call dword [0xab2018]
jmp 0x46638e
mov dword [ebp - 0x390], 4
and dword [ebp - 4], 0
mov dword [ebp - 0x2c0], 0x831713b9
mov dword [ebp - 0x11d0], 0xfffffffa
mov dword [ebp - 0x1858], 0x2e428464
mov dword [ebp - 0x2c0], 0
jmp 0x46648d
mov eax, dword [ebp - 0x2c0]
dec eax
mov dword [ebp - 0x2c0], eax
cmp dword [ebp - 0x2c0], 0xfffffff6
jle 0x4666f3
mov dword [ebp - 0x114], 1
mov dword [ebp - 0x11d8], 0x7582ba8d
mov dword [ebp - 0x114], 0
jmp 0x4664c7
mov eax, dword [ebp - 0x114]
dec eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0xffffffeb
jg 0x4666ee
mov dword [ebp - 0x15c], 5
mov dword [ebp - 0x15c], 0xffffffe5
jmp 0x4664f7
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 0
jg 0x4666ba
push 3
lea ecx, [ebp - 0x1da4]
call fcn.00428948
mov dword [ebp - 0x358], 0xffffffff
mov dword [ebp - 0x40c], 0
jmp 0x466534
mov eax, dword [ebp - 0x40c]
inc eax
mov dword [ebp - 0x40c], eax
cmp dword [ebp - 0x40c], 3
jge 0x466556
push dword [ebp - 0x40c]
lea ecx, [ebp - 0x1da4]
call fcn.00428a36
mov dword [eax], 0x5934215e
jmp 0x466527
mov dword [ebp - 0x358], 2
jmp 0x46656f
mov eax, dword [ebp - 0x358]
dec eax
mov dword [ebp - 0x358], eax
cmp dword [ebp - 0x358], 0
jl 0x466594
mov byte [ebp - 0x2aa], 0
movzx eax, byte [ebp - 0x2aa]
test eax, eax
je 0x466592
push 0
call dword [0xab2284]
jmp 0x466562
cmp dword [ebp - 0x114], 0
je 0x46666c
xor eax, eax
inc eax
je 0x4665f1
cmp dword [ebp - 0x15c], 0
jne 0x4665c1
cmp dword [ebp - 0x2c0], 0
jne 0x4665c1
and dword [ebp - 0x904], 0
jmp 0x4665cb
mov dword [ebp - 0x904], 1
mov eax, dword [ebp - 0x904]
mov dword [ebp - 0x11d0], eax
mov eax, dword [ebp - 0x11d0]
sub eax, dword [ebp - 0x2c0]
je 0x4665f1
mov dword [ebp - 0x90c], 1
jmp 0x4665f8
and dword [ebp - 0x90c], 0
mov eax, dword [ebp - 0x90c]
mov dword [ebp - 0x11d8], eax
mov eax, dword [ebp - 0x114]
cmp dword [ebp - 0x11d8], eax
je 0x466619
cmp dword [ebp - 0x15c], 0
mov eax, dword [ebp - 0x114]
cmp dword [ebp - 0x15c], eax
jle 0x466633
mov dword [ebp - 0x914], 1
jmp 0x46663a
and dword [ebp - 0x914], 0
mov esi, dword [ebp - 0x914]
sub esi, dword [ebp - 0x15c]
push 1
lea ecx, [ebp - 0x1da4]
call fcn.00428a36
cmp esi, dword [eax]
jg 0x46666c
cmp dword [ebp - 0x358], 0
je 0x46666c
mov dword [ebp - 0x1850], 1
jmp 0x466673
and dword [ebp - 0x1850], 0
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x2190], eax
cmp dword [ebp - 0x114], 0x76522452
jle 0x466697
mov dword [ebp - 0x11e0], 1
jmp 0x46669e
and dword [ebp - 0x11e0], 0
mov eax, dword [ebp - 0x11e0]
mov dword [ebp - 0x1858], eax
lea ecx, [ebp - 0x1da4]
call fcn.00428a1a
jmp 0x4664ea
mov byte [ebp - 0x19b], 0
movzx eax, byte [ebp - 0x19b]
test eax, eax
je 0x4666e9
push 0
push 0x145b
push 0
call dword [0xab23a4]
push eax
call dword [0xab238c]
push eax
call dword [0xab2044]
jmp 0x4664ba
jmp 0x466480
cmp dword [ebp - 0x91c], 0x57df
jge 0x466793
mov dword [ebp - 0x6f8], 0
mov dword [ebp - 0x2008], 0xfffffff6
mov byte [ebp - 0x279], 0
movzx eax, byte [ebp - 0x279]
test eax, eax
je 0x466731
push 0
call dword [0xab22d0]
mov dword [ebp - 0x6f8], 7
jmp 0x46674a
mov eax, dword [ebp - 0x6f8]
dec eax
mov dword [ebp - 0x6f8], eax
cmp dword [ebp - 0x6f8], 0xfffffff5
je 0x466787
mov byte [ebp - 0x19d], 0
movzx eax, byte [ebp - 0x19d]
test eax, eax
je 0x466785
push 0
push 0x20ab
push 0x2629
call dword [0xab23a4]
push eax
call dword [0xab238c]
push eax
call dword [0xab205c]
jmp 0x46673d
push dword [ebp - 0x1860]
call fcn.0047c2f5
pop ecx
jmp 0x466805
or dword [ebp - 4], 0xffffffff
jmp 0x46680f
mov dword [ebp - 0x2010], 6
mov byte [ebp - 0x281], 0
movzx eax, byte [ebp - 0x281]
test eax, eax
je 0x46683d
push 0xf1e
push 0x1c5c
push 0
call dword [0xab22b4]
mov byte [ebp - 0x1a1], 0
movzx eax, byte [ebp - 0x1a1]
test eax, eax
je 0x466865
push 0
push 0
push 0x24df
call dword [0xab23a4]
push eax
call dword [0xab2374]
mov dword [ebp - 0x360], 0xffffffff
mov dword [ebp - 0x360], 0
jmp 0x466888
mov eax, dword [ebp - 0x360]
inc eax
mov dword [ebp - 0x360], eax
cmp dword [ebp - 0x360], 0x16
jne 0x466935
mov dword [ebp - 0x3b0], 0
mov dword [ebp - 0x414], 0
jmp 0x4668b8
mov eax, dword [ebp - 0x414]
inc eax
mov dword [ebp - 0x414], eax
cmp dword [ebp - 0x414], 1
jge 0x4668d4
mov eax, dword [ebp - 0x414]
mov dword [ebp + eax*4 - 0x1868], 0xd925
jmp 0x4668ab
mov dword [ebp - 0x3b0], 0
jmp 0x4668ed
mov eax, dword [ebp - 0x3b0]
inc eax
mov dword [ebp - 0x3b0], eax
cmp dword [ebp - 0x3b0], 1
jge 0x466909
mov eax, dword [ebp - 0x3b0]
mov dword [ebp + eax*4 - 0x1868], 0xd45d
jmp 0x4668e0
mov byte [ebp - 0x2ae], 0
movzx eax, byte [ebp - 0x2ae]
test eax, eax
je 0x466930
push 0
push 0
push 0x2421
push 0
push 0
push 0
call dword [0xab2018]
jmp 0x46687b
mov dword [ebp - 0x360], 4
mov dword [ebp - 0x14], 0xfcb50bf3
mov dword [ebp - 0x94c], 0x8790
mov dword [ebp - 0x944], 0
mov dword [ebp - 0x1200], 0x28ec7dff
mov dword [ebp - 0x1a1c], 1
mov dword [ebp - 0x640], 0
jmp 0x466987
mov eax, dword [ebp - 0x640]
inc eax
mov dword [ebp - 0x640], eax
cmp dword [ebp - 0x640], 3
jge 0x4669a3
mov eax, dword [ebp - 0x640]
mov dword [ebp + eax*4 - 0x890], 0xa8eac8b1
jmp 0x46697a
mov dword [ebp - 0x14], 2
jmp 0x4669b3
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jl 0x466c84
mov dword [ebp - 0x1878], 0x459f451d
mov dword [ebp - 0x92c], 0xffffffff
push 3
lea ecx, [ebp - 0x1dbc]
call fcn.00428948
mov dword [ebp - 0x1a14], 0xb786ae2a
mov dword [ebp - 0xa4], 0
jmp 0x466a01
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 2
jge 0x466a1d
mov eax, dword [ebp - 0xa4]
mov dword [ebp + eax*4 - 0x1554], 0xfffffffd
jmp 0x4669f4
mov dword [ebp - 0xa4], 0
jmp 0x466a36
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 3
jge 0x466a55
push dword [ebp - 0xa4]
lea ecx, [ebp - 0x1dbc]
call fcn.00428a36
and dword [eax], 0
jmp 0x466a29
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x1554], 2
jmp 0x466a83
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1554]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x1554], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1554], 0
jl 0x466ab6
mov byte [ebp - 0x1a3], 0
movzx eax, byte [ebp - 0x1a3]
test eax, eax
je 0x466ab4
push 0x21bd
push 0
push 0
call dword [0xab22c8]
jmp 0x466a68
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x890]
mov dword [ebp - 0x21a0], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x890]
mov dword [ebp - 0x2018], eax
mov eax, dword [ebp - 0x14]
shl eax, 1
mov ecx, dword [ebp - 0x14]
cmp eax, dword [ebp + ecx*4 - 0x890]
jne 0x466af6
mov dword [ebp - 0x11e8], 1
jmp 0x466afd
and dword [ebp - 0x11e8], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x890]
cmp dword [ebp - 0x11e8], eax
jl 0x466b1d
mov dword [ebp - 0x17d0], 1
jmp 0x466b24
and dword [ebp - 0x17d0], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x890]
mov dword [ebp - 0x22e8], eax
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x1554], 0xfffffff8
cmp dword [ebp - 0x1878], 0xfffffff8
jne 0x466b64
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x890], 0
jne 0x466b64
and dword [ebp - 0x1a0c], 0
jmp 0x466b6e
mov dword [ebp - 0x1a0c], 1
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x2020], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x890]
mov dword [ebp - 0x21b0], eax
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x890], 0xffffffff
jne 0x466ba3
mov dword [ebp - 0x924], 1
jmp 0x466baa
and dword [ebp - 0x924], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x890]
imul eax, dword [ebp - 0x924]
cmp eax, 1
jne 0x466bcc
mov dword [ebp - 0x11f0], 1
jmp 0x466bd3
and dword [ebp - 0x11f0], 0
mov eax, dword [ebp - 0x11f0]
mov dword [ebp - 0x92c], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x890]
sub eax, dword [ebp - 0x92c]
cmp eax, dword [ebp - 0x14]
je 0x466c00
mov dword [ebp - 0x11f8], 1
jmp 0x466c07
and dword [ebp - 0x11f8], 0
imul eax, dword [ebp - 0x11f8], 0
cmp eax, 0xacb2d505
jb 0x466c21
mov dword [ebp - 0x870], 1
jmp 0x466c28
and dword [ebp - 0x870], 0
push 1
lea ecx, [ebp - 0x1dbc]
call fcn.00428a36
mov ecx, dword [ebp - 0x870]
mov dword [eax], ecx
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x870]
cmp eax, dword [ebp - 0x14]
jg 0x466c58
mov dword [ebp - 0x934], 1
jmp 0x466c5f
and dword [ebp - 0x934], 0
mov eax, dword [ebp - 0x934]
sub eax, dword [ebp - 0x94c]
add eax, dword [ebp - 0x14]
mov dword [ebp - 0x1a14], eax
lea ecx, [ebp - 0x1dbc]
call fcn.00428a1a
jmp 0x4669ac
cmp dword [ebp - 0x1200], 1
jl 0x466c99
mov dword [ebp - 0x93c], 1
jmp 0x466ca0
and dword [ebp - 0x93c], 0
mov eax, dword [ebp - 0x1200]
imul eax, dword [ebp - 0x93c]
test eax, eax
je 0x466ccd
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x890], 0
je 0x466ccd
mov dword [ebp - 0x1208], 1
jmp 0x466cd4
and dword [ebp - 0x1208], 0
mov dword [ebp - 0x944], 0
mov eax, dword [ebp - 0x1208]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x944], eax
jl 0x466cfe
mov dword [ebp - 0x1210], 1
jmp 0x466d05
and dword [ebp - 0x1210], 0
cmp dword [ebp - 0x1210], 0x81c3
jge 0x466d1d
mov dword [ebp - 0x1218], 1
jmp 0x466d24
and dword [ebp - 0x1218], 0
mov eax, dword [ebp - 0x94c]
add eax, dword [ebp - 0x1218]
mov dword [ebp - 0x1a1c], eax
mov dword [ebp - 0x398], 7
mov dword [ebp - 0x878], 1
mov dword [ebp - 0x814], 0x1362
mov dword [ebp - 0x6c0], 0xffffffff
mov dword [ebp - 0x95c], 0x2891ba8
mov dword [ebp - 0x880], 0
mov dword [ebp - 0x1a24], 0xfffffffe
mov dword [ebp - 0x1240], 5
push 3
lea ecx, [ebp - 0x1dd4]
call fcn.00428948
mov dword [ebp - 0x41c], 0
jmp 0x466dac
mov eax, dword [ebp - 0x41c]
inc eax
mov dword [ebp - 0x41c], eax
cmp dword [ebp - 0x41c], 3
jge 0x466dce
push dword [ebp - 0x41c]
lea ecx, [ebp - 0x1dd4]
call fcn.00428a36
mov dword [eax], 0xfffffff9
jmp 0x466d9f
mov eax, dword [ebp - 0x398]
mov dword [ebp - 0x2028], eax
mov eax, dword [ebp - 0x398]
cmp dword [ebp - 0x398], eax
jne 0x466df4
mov dword [ebp - 0x1230], 1
jmp 0x466dfb
and dword [ebp - 0x1230], 0
mov eax, dword [ebp - 0x878]
mov dword [ebp - 0x2280], eax
mov eax, dword [ebp - 0x878]
add eax, 0x378f1e0c
sub eax, dword [ebp - 0x814]
cmp eax, dword [ebp - 0x6c0]
jge 0x466e2c
mov dword [ebp - 0x954], 1
jmp 0x466e33
and dword [ebp - 0x954], 0
mov eax, dword [ebp - 0x6c0]
add eax, dword [ebp - 0x954]
add eax, dword [ebp - 0x878]
cmp eax, dword [ebp - 0x814]
jle 0x466e59
mov dword [ebp - 0x1220], 1
jmp 0x466e60
and dword [ebp - 0x1220], 0
mov eax, dword [ebp - 0x1220]
mov dword [ebp - 0x95c], eax
mov eax, dword [ebp - 0x398]
cmp dword [ebp - 0x95c], eax
jne 0x466e86
mov dword [ebp - 0x1228], 1
jmp 0x466e8d
and dword [ebp - 0x1228], 0
mov eax, dword [ebp - 0x1228]
mov dword [ebp - 0x880], eax
mov eax, dword [ebp - 0x6c0]
cmp dword [ebp - 0x880], eax
jg 0x466eb0
cmp dword [ebp - 0x880], 0
jne 0x466ec2
cmp dword [ebp - 0x814], 0
jne 0x466ec2
and dword [ebp - 0x964], 0
jmp 0x466ecc
mov dword [ebp - 0x964], 1
mov eax, dword [ebp - 0x964]
add eax, 0x9e5a
cmp eax, 0xffff
je 0x466eea
mov dword [ebp - 0x96c], 1
jmp 0x466ef1
and dword [ebp - 0x96c], 0
mov eax, dword [ebp - 0x1230]
cmp eax, dword [ebp - 0x96c]
je 0x466f0b
mov dword [ebp - 0x1238], 1
jmp 0x466f12
and dword [ebp - 0x1238], 0
mov eax, dword [ebp - 0x6c0]
cmp dword [ebp - 0x1238], eax
jl 0x466f32
cmp dword [ebp - 0x1a24], 0
jne 0x466f32
and dword [ebp - 0x974], 0
jmp 0x466f3c
mov dword [ebp - 0x974], 1
mov eax, dword [ebp - 0x974]
mov dword [ebp - 0x1240], eax
mov eax, dword [ebp - 0x1240]
mov ecx, dword [ebp - 0x398]
lea esi, [eax + ecx - 0xe2c]
push 1
lea ecx, [ebp - 0x1dd4]
call fcn.00428a36
mov dword [eax], esi
lea ecx, [ebp - 0x1dd4]
call fcn.00428a1a
mov dword [ebp - 0x2030], 6
mov byte [ebp - 0x289], 0
movzx eax, byte [ebp - 0x289]
test eax, eax
je 0x466fa3
push 0xf1e
push 0x1c5c
push 0
call dword [0xab22b4]
mov byte [ebp - 0x1a5], 0
movzx eax, byte [ebp - 0x1a5]
test eax, eax
je 0x466fcb
push 0
push 0
push 0x24df
call dword [0xab23a4]
push eax
call dword [0xab2374]
mov dword [ebp - 0x2c], 0x38ecf54c
mov dword [ebp - 0x7c], 0x17b722ba
mov dword [ebp - 0x424], 0
jmp 0x466ff2
mov eax, dword [ebp - 0x424]
inc eax
mov dword [ebp - 0x424], eax
cmp dword [ebp - 0x424], 2
jge 0x46700e
mov eax, dword [ebp - 0x424]
mov dword [ebp + eax*4 - 0x3dc], 0x8f985589
jmp 0x466fe5
mov dword [ebp - 0x7c], 0x9934b0b4
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x1a2c], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1a2c]
mov dword [ebp + eax - 0x3dc], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3dc]
push 4
pop ecx
shl ecx, 0
imul eax, dword [ebp + ecx - 0x3dc]
test eax, eax
je 0x467062
cmp dword [ebp - 0x2c], 0
je 0x467062
mov dword [ebp - 0x97c], 1
jmp 0x467069
and dword [ebp - 0x97c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3dc]
cmp dword [ebp - 0x97c], eax
jle 0x46708a
mov dword [ebp - 0x1248], 1
jmp 0x467091
and dword [ebp - 0x1248], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1248]
sub ecx, dword [ebp + eax - 0x3dc]
push 4
pop eax
shl eax, 0
cmp ecx, dword [ebp + eax - 0x3dc]
jg 0x4670bf
mov dword [ebp - 0x984], 1
jmp 0x4670c6
and dword [ebp - 0x984], 0
cmp dword [ebp - 0x984], 0xd069
jge 0x4670de
mov dword [ebp - 0x1250], 1
jmp 0x4670e5
and dword [ebp - 0x1250], 0
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x1250]
imul eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x2c]
jg 0x467103
mov dword [ebp - 0x98c], 1
jmp 0x46710a
and dword [ebp - 0x98c], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x98c], eax
jl 0x467131
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x3dc], 0
je 0x467131
mov dword [ebp - 0x1258], 1
jmp 0x467138
and dword [ebp - 0x1258], 0
mov eax, dword [ebp - 0x1258]
sub eax, 0x37b3
cmp eax, 4
jne 0x467154
mov dword [ebp - 0x994], 1
jmp 0x46715b
and dword [ebp - 0x994], 0
mov eax, dword [ebp - 0x994]
sub eax, 0x18b9628e
cmp eax, dword [ebp - 0x2c]
jle 0x467177
mov dword [ebp - 0x1260], 1
jmp 0x46717e
and dword [ebp - 0x1260], 0
cmp dword [ebp - 0x1260], 0xffffffff
ja 0x467193
mov dword [ebp - 0x99c], 1
jmp 0x46719a
and dword [ebp - 0x99c], 0
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x99c]
jle 0x4671ae
mov eax, 0x65ab4d25
test eax, eax
je 0x4671d2
mov byte [ebp - 0x2b0], 0
movzx eax, byte [ebp - 0x2b0]
test eax, eax
je 0x4671d0
push 0
push 0
push 0
push 0
push 0
call dword [0xab226c]
jmp 0x467234
mov dword [ebp - 0x1a3c], 0x1bb30b13
mov dword [ebp - 0x2c], 2
jmp 0x4671ec
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 8
jg 0x467234
mov dword [ebp - 0x1a34], 0xffffffff
mov dword [ebp - 0x7c], 0xb
jmp 0x46720c
mov eax, dword [ebp - 0x7c]
dec eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 7
jge 0x46721f
cmp dword [ebp - 0x1a34], 0
je 0x46721d
jmp 0x46721f
jmp 0x467205
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1a3c]
mov dword [ebp + eax - 0x3dc], ecx
jmp 0x4671e5
mov dword [ebp - 0x2c], 1
jmp 0x467244
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jl 0x4672a3
mov dword [ebp - 0x7c], 1
jmp 0x46725a
mov eax, dword [ebp - 0x7c]
dec eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0
jl 0x4672a1
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x3dc]
mov dword [ebp - 0x21c0], eax
mov eax, 0xfffd
cmp eax, 0xfffb
ja 0x467288
mov dword [ebp - 0x1268], 1
jmp 0x46728f
and dword [ebp - 0x1268], 0
mov eax, dword [ebp - 0x7c]
mov ecx, dword [ebp - 0x1268]
mov dword [ebp + eax*4 - 0x3dc], ecx
jmp 0x467253
jmp 0x46723d
mov dword [ebp - 0x1490], 0x31d4
mov dword [ebp - 0x174], 0xc64a6847
mov dword [ebp - 0x300], 4
mov dword [ebp - 0x784], 4
mov dword [ebp - 0x1288], 0xfffffffb
mov dword [ebp - 0x9c4], 0x63abefa0
push 2
lea ecx, [ebp - 0x1dec]
call fcn.00428948
mov dword [ebp - 0x648], 0
jmp 0x467305
mov eax, dword [ebp - 0x648]
inc eax
mov dword [ebp - 0x648], eax
cmp dword [ebp - 0x648], 2
jge 0x467327
push dword [ebp - 0x648]
lea ecx, [ebp - 0x1dec]
call fcn.00428a36
mov dword [eax], 0x5b01d976
jmp 0x4672f8
mov dword [ebp - 0x174], 0
jmp 0x467340
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 0x1d
jge 0x46736c
mov byte [ebp - 0x1a7], 0
movzx eax, byte [ebp - 0x1a7]
test eax, eax
je 0x46736a
push 0
push 0xf9c
push 0
call dword [0xab2048]
jmp 0x467333
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0x2038], eax
cmp dword [ebp - 0x300], 1
jb 0x46739c
mov eax, 0xbc0d133f
test eax, eax
jne 0x46739c
cmp dword [ebp - 0x300], 0
jne 0x46739c
and dword [ebp - 0x9a4], 0
jmp 0x4673a6
mov dword [ebp - 0x9a4], 1
cmp dword [ebp - 0x9a4], 0xfff8
jb 0x4673be
mov dword [ebp - 0x1270], 1
jmp 0x4673c5
and dword [ebp - 0x1270], 0
cmp dword [ebp - 0x1270], 0xdbda
jne 0x4673dd
mov dword [ebp - 0x9ac], 1
jmp 0x4673e4
and dword [ebp - 0x9ac], 0
cmp dword [ebp - 0x9ac], 0xf9db
jle 0x4673fc
mov dword [ebp - 0x1278], 1
jmp 0x467403
and dword [ebp - 0x1278], 0
mov eax, dword [ebp - 0x300]
mov dword [ebp - 0x174], eax
mov eax, dword [ebp - 0x174]
cmp eax, dword [ebp - 0x1278]
jge 0x467429
mov dword [ebp - 0x9b4], 1
jmp 0x467430
and dword [ebp - 0x9b4], 0
mov eax, dword [ebp - 0x300]
cmp dword [ebp - 0x9b4], eax
je 0x46744a
mov dword [ebp - 0x1280], 1
jmp 0x467451
and dword [ebp - 0x1280], 0
mov eax, dword [ebp - 0x300]
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0x784], eax
mov eax, dword [ebp - 0x300]
cmp dword [ebp - 0x784], eax
jl 0x467486
cmp dword [ebp - 0x784], 0
je 0x467486
mov dword [ebp - 0x9bc], 1
jmp 0x46748d
and dword [ebp - 0x9bc], 0
mov eax, dword [ebp - 0x9bc]
neg eax
mov dword [ebp - 0x1288], eax
mov eax, dword [ebp - 0x1288]
mov dword [ebp - 0x9c4], eax
cmp dword [ebp - 0x9c4], 0
je 0x4674c5
mov eax, 0x4491d0b6
test eax, eax
je 0x4674c5
mov dword [ebp - 0x1290], 1
jmp 0x4674cc
and dword [ebp - 0x1290], 0
mov esi, dword [ebp - 0x1290]
sub esi, 9
push 1
lea ecx, [ebp - 0x1dec]
call fcn.00428a36
mov dword [eax], esi
lea ecx, [ebp - 0x1dec]
call fcn.00428a1a
mov dword [ebp - 0x18], 0xfcb50bf3
mov dword [ebp - 0x12c0], 0x8790
mov dword [ebp - 0x12b8], 0
mov dword [ebp - 0x9e4], 0x28ec7dff
mov dword [ebp - 0x1a64], 1
mov dword [ebp - 0x42c], 0
jmp 0x467537
mov eax, dword [ebp - 0x42c]
inc eax
mov dword [ebp - 0x42c], eax
cmp dword [ebp - 0x42c], 3
jge 0x467553
mov eax, dword [ebp - 0x42c]
mov dword [ebp + eax*4 - 0x8a0], 0xa8eac8b1
jmp 0x46752a
mov dword [ebp - 0x18], 2
jmp 0x467563
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jl 0x467834
mov dword [ebp - 0x1a4c], 0x459f451d
mov dword [ebp - 0x12a0], 0xffffffff
push 3
lea ecx, [ebp - 0x1e04]
call fcn.00428948
mov dword [ebp - 0x1a5c], 0xb786ae2a
mov dword [ebp - 0x134], 0
jmp 0x4675b1
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 2
jge 0x4675cd
mov eax, dword [ebp - 0x134]
mov dword [ebp + eax*4 - 0x1560], 0xfffffffd
jmp 0x4675a4
mov dword [ebp - 0x134], 0
jmp 0x4675e6
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 3
jge 0x467605
push dword [ebp - 0x134]
lea ecx, [ebp - 0x1e04]
call fcn.00428a36
and dword [eax], 0
jmp 0x4675d9
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x1560], 2
jmp 0x467633
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1560]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x1560], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1560], 0
jl 0x467666
mov byte [ebp - 0x291], 0
movzx eax, byte [ebp - 0x291]
test eax, eax
je 0x467664
push 0x21bd
push 0
push 0
call dword [0xab22c8]
jmp 0x467618
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x8a0]
mov dword [ebp - 0x22b8], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x8a0]
mov dword [ebp - 0x2040], eax
mov eax, dword [ebp - 0x18]
shl eax, 1
mov ecx, dword [ebp - 0x18]
cmp eax, dword [ebp + ecx*4 - 0x8a0]
jne 0x4676a6
mov dword [ebp - 0x9cc], 1
jmp 0x4676ad
and dword [ebp - 0x9cc], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x8a0]
cmp dword [ebp - 0x9cc], eax
jl 0x4676cd
mov dword [ebp - 0x1a44], 1
jmp 0x4676d4
and dword [ebp - 0x1a44], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x8a0]
mov dword [ebp - 0x20a4], eax
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x1560], 0xfffffff8
cmp dword [ebp - 0x1a4c], 0xfffffff8
jne 0x467714
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x8a0], 0
jne 0x467714
and dword [ebp - 0x1a54], 0
jmp 0x46771e
mov dword [ebp - 0x1a54], 1
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x2048], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x8a0]
mov dword [ebp - 0x20a8], eax
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x8a0], 0xffffffff
jne 0x467753
mov dword [ebp - 0x1298], 1
jmp 0x46775a
and dword [ebp - 0x1298], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x8a0]
imul eax, dword [ebp - 0x1298]
cmp eax, 1
jne 0x46777c
mov dword [ebp - 0x9d4], 1
jmp 0x467783
and dword [ebp - 0x9d4], 0
mov eax, dword [ebp - 0x9d4]
mov dword [ebp - 0x12a0], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x8a0]
sub eax, dword [ebp - 0x12a0]
cmp eax, dword [ebp - 0x18]
je 0x4677b0
mov dword [ebp - 0x9dc], 1
jmp 0x4677b7
and dword [ebp - 0x9dc], 0
imul eax, dword [ebp - 0x9dc], 0
cmp eax, 0xacb2d505
jb 0x4677d1
mov dword [ebp - 0x8c4], 1
jmp 0x4677d8
and dword [ebp - 0x8c4], 0
push 1
lea ecx, [ebp - 0x1e04]
call fcn.00428a36
mov ecx, dword [ebp - 0x8c4]
mov dword [eax], ecx
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x8c4]
cmp eax, dword [ebp - 0x18]
jg 0x467808
mov dword [ebp - 0x12a8], 1
jmp 0x46780f
and dword [ebp - 0x12a8], 0
mov eax, dword [ebp - 0x12a8]
sub eax, dword [ebp - 0x12c0]
add eax, dword [ebp - 0x18]
mov dword [ebp - 0x1a5c], eax
lea ecx, [ebp - 0x1e04]
call fcn.00428a1a
jmp 0x46755c
cmp dword [ebp - 0x9e4], 1
jl 0x467849
mov dword [ebp - 0x12b0], 1
jmp 0x467850
and dword [ebp - 0x12b0], 0
mov eax, dword [ebp - 0x9e4]
imul eax, dword [ebp - 0x12b0]
test eax, eax
je 0x46787d
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x8a0], 0
je 0x46787d
mov dword [ebp - 0x9ec], 1
jmp 0x467884
and dword [ebp - 0x9ec], 0
mov dword [ebp - 0x12b8], 0
mov eax, dword [ebp - 0x9ec]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x12b8], eax
jl 0x4678ae
mov dword [ebp - 0x9f4], 1
jmp 0x4678b5
and dword [ebp - 0x9f4], 0
cmp dword [ebp - 0x9f4], 0x81c3
jge 0x4678cd
mov dword [ebp - 0x9fc], 1
jmp 0x4678d4
and dword [ebp - 0x9fc], 0
mov eax, dword [ebp - 0x12c0]
add eax, dword [ebp - 0x9fc]
mov dword [ebp - 0x1a64], eax
push 1
lea ecx, [ebp - 0x17c8]
call fcn.00428948
mov dword [ebp - 0x724], 0
jmp 0x46790c
mov eax, dword [ebp - 0x724]
inc eax
mov dword [ebp - 0x724], eax
cmp dword [ebp - 0x724], 1
jge 0x46792e
push dword [ebp - 0x724]
lea ecx, [ebp - 0x17c8]
call fcn.00428a36
mov dword [eax], 0xac8b13ec
jmp 0x4678ff
mov byte [ebp - 0x1a9], 0
movzx eax, byte [ebp - 0x1a9]
test eax, eax
je 0x46795d
push 0
push 0x220b
push 0
call dword [0xab23a4]
push eax
call dword [0xab238c]
push eax
call dword [0xab2054]
push 0
lea ecx, [ebp - 0x17c8]
call fcn.00428a36
mov dword [eax], 0xfffffffd
jmp 0x467996
push 0
lea ecx, [ebp - 0x17c8]
call fcn.00428a36
mov dword [ebp - 0x12c8], eax
mov eax, dword [ebp - 0x12c8]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x12c8]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x17c8]
call fcn.00428a36
cmp dword [eax], 0x11
jle 0x4679df
push 0
lea ecx, [ebp - 0x17c8]
call fcn.00428a36
cmp dword [eax], 0
je 0x4679bc
jmp 0x4679df
mov byte [ebp - 0x1c9], 0
movzx eax, byte [ebp - 0x1c9]
test eax, eax
je 0x4679dd
push 0
push 0x9b2
push 0
call dword [0xab2050]
jmp 0x467972
lea ecx, [ebp - 0x17c8]
call fcn.00428a1a
mov dword [ebp - 0x1af4], 0xaa4688
mov dword [ebp - 0x650], 0x4e2db58e
mov dword [ebp - 0x368], 0
mov dword [ebp - 0x43c], 0xe17ca002
mov dword [ebp - 0x434], 0xffffffff
push 3
lea ecx, [ebp - 0x218c]
call fcn.00428948
mov dword [ebp - 0xac], 0
jmp 0x467a42
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 3
jge 0x467a64
push dword [ebp - 0xac]
lea ecx, [ebp - 0x218c]
call fcn.00428a36
mov dword [eax], 0xbe4438b
jmp 0x467a35
mov dword [ebp - 0xac], 0
jmp 0x467a7d
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 4
jge 0x467a99
mov eax, dword [ebp - 0xac]
mov dword [ebp + eax*4 - 0x22d0], 1
jmp 0x467a70
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x22d0]
dec eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x22d0], eax
mov dword [ebp - 0x434], 0
jmp 0x467acd
mov eax, dword [ebp - 0x434]
inc eax
mov dword [ebp - 0x434], eax
cmp dword [ebp - 0x434], 0x1b
jl 0x467bd7
mov dword [ebp - 0xa04], 1
mov dword [ebp - 0x650], 0xffffffe9
jmp 0x467afd
mov eax, dword [ebp - 0x650]
inc eax
mov dword [ebp - 0x650], eax
cmp dword [ebp - 0x650], 0
je 0x467bc5
mov dword [ebp - 0x368], 0
jmp 0x467b23
mov eax, dword [ebp - 0x368]
inc eax
mov dword [ebp - 0x368], eax
cmp dword [ebp - 0x368], 3
jg 0x467bc0
mov eax, dword [ebp - 0x368]
cmp dword [ebp + eax*4 - 0x22d0], 0
je 0x467b7d
mov byte [ebp - 0x2b2], 0
movzx eax, byte [ebp - 0x2b2]
test eax, eax
je 0x467b63
push 0
push 0x15de
push 0
push 0
call dword [0xab22dc]
mov byte [ebp - 0x1ab], 0
movzx eax, byte [ebp - 0x1ab]
test eax, eax
je 0x467b7b
call dword [0xab225c]
jmp 0x467bbb
mov dword [ebp - 0x43c], 0
jmp 0x467b96
mov eax, dword [ebp - 0x43c]
inc eax
mov dword [ebp - 0x43c], eax
cmp dword [ebp - 0x43c], 2
jg 0x467bbb
mov byte [ebp - 0x293], 0
movzx eax, byte [ebp - 0x293]
test eax, eax
je 0x467bb9
push 0
call dword [0xab2258]
jmp 0x467b89
jmp 0x467b16
jmp 0x467af0
mov eax, dword [ebp - 0xa04]
inc eax
mov dword [ebp - 0xa04], eax
jmp 0x467ac0
lea ecx, [ebp - 0x218c]
call fcn.00428a1a
mov dword [ebp - 0x3c0], 7
mov dword [ebp - 0x78c], 1
mov dword [ebp - 0x794], 0x1362
mov dword [ebp - 0x444], 0xffffffff
mov dword [ebp - 0x12d8], 0x2891ba8
mov dword [ebp - 0x81c], 0
mov dword [ebp - 0x1a6c], 0xfffffffe
mov dword [ebp - 0xa2c], 5
push 3
lea ecx, [ebp - 0x1e34]
call fcn.00428948
mov dword [ebp - 0x6c8], 0
jmp 0x467c58
mov eax, dword [ebp - 0x6c8]
inc eax
mov dword [ebp - 0x6c8], eax
cmp dword [ebp - 0x6c8], 3
jge 0x467c7a
push dword [ebp - 0x6c8]
lea ecx, [ebp - 0x1e34]
call fcn.00428a36
mov dword [eax], 0xfffffff9
jmp 0x467c4b
mov eax, dword [ebp - 0x3c0]
mov dword [ebp - 0x2050], eax
mov eax, dword [ebp - 0x3c0]
cmp dword [ebp - 0x3c0], eax
jne 0x467ca0
mov dword [ebp - 0xa1c], 1
jmp 0x467ca7
and dword [ebp - 0xa1c], 0
mov eax, dword [ebp - 0x78c]
mov dword [ebp - 0x20b0], eax
mov eax, dword [ebp - 0x78c]
add eax, 0x378f1e0c
sub eax, dword [ebp - 0x794]
cmp eax, dword [ebp - 0x444]
jge 0x467cd8
mov dword [ebp - 0x12d0], 1
jmp 0x467cdf
and dword [ebp - 0x12d0], 0
mov eax, dword [ebp - 0x444]
add eax, dword [ebp - 0x12d0]
add eax, dword [ebp - 0x78c]
cmp eax, dword [ebp - 0x794]
jle 0x467d05
mov dword [ebp - 0xa0c], 1
jmp 0x467d0c
and dword [ebp - 0xa0c], 0
mov eax, dword [ebp - 0xa0c]
mov dword [ebp - 0x12d8], eax
mov eax, dword [ebp - 0x3c0]
cmp dword [ebp - 0x12d8], eax
jne 0x467d32
mov dword [ebp - 0xa14], 1
jmp 0x467d39
and dword [ebp - 0xa14], 0
mov eax, dword [ebp - 0xa14]
mov dword [ebp - 0x81c], eax
mov eax, dword [ebp - 0x444]
cmp dword [ebp - 0x81c], eax
jg 0x467d5c
cmp dword [ebp - 0x81c], 0
jne 0x467d6e
cmp dword [ebp - 0x794], 0
jne 0x467d6e
and dword [ebp - 0x12e0], 0
jmp 0x467d78
mov dword [ebp - 0x12e0], 1
mov eax, dword [ebp - 0x12e0]
add eax, 0x9e5a
cmp eax, 0xffff
je 0x467d96
mov dword [ebp - 0x12e8], 1
jmp 0x467d9d
and dword [ebp - 0x12e8], 0
mov eax, dword [ebp - 0xa1c]
cmp eax, dword [ebp - 0x12e8]
je 0x467db7
mov dword [ebp - 0xa24], 1
jmp 0x467dbe
and dword [ebp - 0xa24], 0
mov eax, dword [ebp - 0x444]
cmp dword [ebp - 0xa24], eax
jl 0x467dde
cmp dword [ebp - 0x1a6c], 0
jne 0x467dde
and dword [ebp - 0x12f0], 0
jmp 0x467de8
mov dword [ebp - 0x12f0], 1
mov eax, dword [ebp - 0x12f0]
mov dword [ebp - 0xa2c], eax
mov eax, dword [ebp - 0xa2c]
mov ecx, dword [ebp - 0x3c0]
lea esi, [eax + ecx - 0xe2c]
push 1
lea ecx, [ebp - 0x1e34]
call fcn.00428a36
mov dword [eax], esi
lea ecx, [ebp - 0x1e34]
call fcn.00428a1a
cmp dword [ebp - 0x1490], 0x3311
jle 0x468564
mov dword [ebp - 0x44], 1
mov dword [ebp - 0x44], 0
jmp 0x467e48
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0x11
jg 0x46804c
mov dword [ebp - 0x370], 0x4cacff8e
mov dword [ebp - 0x12f8], 0
mov dword [ebp - 0x658], 0x12e7
mov dword [ebp - 0x1a7c], 4
mov byte [ebp - 0x2a3], 0
movzx eax, byte [ebp - 0x2a3]
test eax, eax
je 0x467e9b
push 0
call dword [0xab23a4]
push eax
call dword [0xab2370]
cmp dword [ebp - 0x44], 0
je 0x467f94
mov eax, dword [ebp - 0x370]
inc eax
mov dword [ebp - 0x370], eax
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x370], eax
je 0x467ec9
mov dword [ebp - 0xa34], 1
jmp 0x467ed0
and dword [ebp - 0xa34], 0
cmp dword [ebp - 0x44], 0
jne 0x467eef
mov eax, dword [ebp - 0x44]
sub eax, 0x421d
mov dword [ebp - 0x12f8], eax
jne 0x467eef
and dword [ebp - 0x1300], 0
jmp 0x467ef9
mov dword [ebp - 0x1300], 1
mov eax, dword [ebp - 0xa34]
cmp eax, dword [ebp - 0x1300]
je 0x467f13
mov dword [ebp - 0xa3c], 1
jmp 0x467f1a
and dword [ebp - 0xa3c], 0
mov eax, dword [ebp - 0x658]
imul eax, dword [ebp - 0xa3c]
test eax, eax
jne 0x467f3d
cmp dword [ebp - 0x370], 0
jne 0x467f3d
and dword [ebp - 0x1308], 0
jmp 0x467f47
mov dword [ebp - 0x1308], 1
mov eax, dword [ebp - 0x370]
add eax, dword [ebp - 0x1308]
cmp eax, dword [ebp - 0x44]
je 0x467f6a
cmp dword [ebp - 0x658], 0
jne 0x467f6a
and dword [ebp - 0xa44], 0
jmp 0x467f74
mov dword [ebp - 0xa44], 1
mov eax, dword [ebp - 0x44]
imul eax, dword [ebp - 0xa44]
imul eax, eax, 0x14e7
test eax, eax
je 0x467f94
mov dword [ebp - 0x1310], 1
jmp 0x467f9b
and dword [ebp - 0x1310], 0
mov eax, dword [ebp - 0x658]
cmp dword [ebp - 0x1310], eax
jl 0x467fb5
mov dword [ebp - 0x1a74], 1
jmp 0x467fbc
and dword [ebp - 0x1a74], 0
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x2058], eax
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x44], eax
jg 0x467fd9
mov dword [ebp - 0xa4c], 1
jmp 0x467fe0
and dword [ebp - 0xa4c], 0
cmp dword [ebp - 0xa4c], 0xffffffff
ja 0x467ff5
mov dword [ebp - 0x1318], 1
jmp 0x467ffc
and dword [ebp - 0x1318], 0
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x1318], eax
jne 0x468013
mov dword [ebp - 0xa54], 1
jmp 0x46801a
and dword [ebp - 0xa54], 0
mov eax, dword [ebp - 0x658]
cmp dword [ebp - 0xa54], eax
jl 0x468034
mov dword [ebp - 0x1320], 1
jmp 0x46803b
and dword [ebp - 0x1320], 0
mov eax, dword [ebp - 0x1320]
mov dword [ebp - 0x1a7c], eax
jmp 0x467e41
and dword [ebp - 0x44c], 0
jmp 0x468062
mov eax, dword [ebp - 0x44c]
inc eax
mov dword [ebp - 0x44c], eax
cmp dword [ebp - 0x44c], 0x16d3
jge 0x468564
and dword [ebp - 0x700], 0
jmp 0x468088
mov eax, dword [ebp - 0x700]
inc eax
mov dword [ebp - 0x700], eax
cmp dword [ebp - 0x700], 0x7a0b
jge 0x46855f
push 2
lea ecx, [ebp - 0x1e7c]
call fcn.00428948
mov dword [ebp - 0x11c], 0
jmp 0x4680be
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 2
jge 0x4680e0
push dword [ebp - 0x11c]
lea ecx, [ebp - 0x1e7c]
call fcn.00428a36
mov dword [eax], 0x57fd5464
jmp 0x4680b1
mov dword [ebp - 0x11c], 0
jmp 0x4680f9
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 2
jge 0x468115
mov eax, dword [ebp - 0x11c]
mov dword [ebp + eax*4 - 0x156c], 0
jmp 0x4680ec
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x156c], 0
jmp 0x468143
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x156c]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x156c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x156c], 1
jg 0x468174
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x156c]
lea ecx, [ebp - 0x1e7c]
call fcn.00428a36
cmp dword [eax], 0
je 0x468172
jmp 0x468174
jmp 0x468128
lea ecx, [ebp - 0x1e7c]
call fcn.00428a1a
and dword [ebp - 0x454], 0
jmp 0x468195
mov eax, dword [ebp - 0x454]
inc eax
mov dword [ebp - 0x454], eax
cmp dword [ebp - 0x454], 0x216a
jge 0x46855a
and dword [ebp - 0x660], 0
jmp 0x4681bb
mov eax, dword [ebp - 0x660]
inc eax
mov dword [ebp - 0x660], eax
cmp dword [ebp - 0x660], 0x4b25
jge 0x468555
mov eax, dword [ebp - 0x44c]
imul eax, dword [ebp - 0x700]
mov ecx, dword [ebp - 0x454]
add ecx, dword [ebp - 0x660]
sar eax, cl
cdq
mov dword [ebp - 0x1890], eax
mov dword [ebp - 0x188c], edx
mov dword [ebp - 0x86c], 0xdf37d45d
mov dword [ebp - 0x4c], 1
mov dword [ebp - 0xa74], 8
mov dword [ebp - 0x1348], 0xa4f69a75
mov dword [ebp - 0x1a8c], 0x767c8fa1
mov dword [ebp - 0x45c], 0
jmp 0x46823b
mov eax, dword [ebp - 0x45c]
inc eax
mov dword [ebp - 0x45c], eax
cmp dword [ebp - 0x45c], 2
jge 0x468257
mov eax, dword [ebp - 0x45c]
mov dword [ebp + eax*4 - 0x754], 0xfffffffa
jmp 0x46822e
cmp dword [ebp - 0x86c], 0xfffffff7
jge 0x468270
xor eax, eax
je 0x468270
mov dword [ebp - 0xa5c], 1
jmp 0x468277
and dword [ebp - 0xa5c], 0
cmp dword [ebp - 0xa5c], 0x7cf2e566
jge 0x468291
mov eax, dword [ebp - 0x86c]
mov dword [ebp - 0x4c], eax
jmp 0x468501
mov dword [ebp - 0x464], 0xfffffffd
mov dword [ebp - 0x1340], 0
mov dword [ebp - 0x4c], 1
jmp 0x4682b5
mov eax, dword [ebp - 0x4c]
dec eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jl 0x468501
push 3
lea ecx, [ebp - 0x1774]
call fcn.00428948
mov dword [ebp - 0x6d0], 0
jmp 0x4682e5
mov eax, dword [ebp - 0x6d0]
inc eax
mov dword [ebp - 0x6d0], eax
cmp dword [ebp - 0x6d0], 3
jge 0x468304
push dword [ebp - 0x6d0]
lea ecx, [ebp - 0x1774]
call fcn.00428a36
or dword [eax], 0xffffffff
jmp 0x4682d8
mov eax, dword [ebp - 0x4c]
cmp dword [ebp + eax*4 - 0x754], 0
jne 0x468327
mov eax, dword [ebp - 0x4c]
cmp dword [ebp + eax*4 - 0x754], 0
jne 0x468327
and dword [ebp - 0x1328], 0
jmp 0x468331
mov dword [ebp - 0x1328], 1
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x1328]
mov dword [ebp + eax*4 - 0x754], ecx
mov eax, 0x4709ba87
test eax, eax
je 0x468435
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x464]
cmp dword [ebp + eax*4 - 0x754], ecx
jne 0x46836c
mov dword [ebp - 0xa64], 1
jmp 0x468373
and dword [ebp - 0xa64], 0
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp + eax*4 - 0x754]
sub eax, dword [ebp - 0xa64]
mov dword [ebp - 0x1330], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1330]
mov dword [ebp + eax - 0x754], ecx
push 0
lea ecx, [ebp - 0x1774]
call fcn.00428a36
mov ecx, dword [ebp - 0x1330]
cmp ecx, dword [eax]
jle 0x4683bf
mov dword [ebp - 0xa6c], 1
jmp 0x4683c6
and dword [ebp - 0xa6c], 0
mov esi, dword [ebp - 0x4c]
add esi, dword [ebp - 0xa6c]
push 0
lea ecx, [ebp - 0x1774]
call fcn.00428a36
cmp esi, dword [eax]
jne 0x4683ec
mov dword [ebp - 0x1338], 1
jmp 0x4683f3
and dword [ebp - 0x1338], 0
mov eax, dword [ebp - 0x1338]
mov dword [ebp - 0x1340], eax
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp + eax*4 - 0x754]
mov dword [ebp - 0xa74], eax
mov eax, dword [ebp - 0xa74]
sub eax, 5
mov ecx, dword [ebp - 0x464]
imul ecx, eax
cmp ecx, dword [ebp - 0x86c]
jge 0x468435
mov dword [ebp - 0x1a84], 1
jmp 0x46843c
and dword [ebp - 0x1a84], 0
push 0
lea ecx, [ebp - 0x1774]
call fcn.00428a36
push 0
lea ecx, [ebp - 0x1774]
call fcn.00428a36
cmp dword [ebp - 0x1340], 0
jne 0x46846b
mov dword [ebp - 0xa7c], 1
jmp 0x468472
and dword [ebp - 0xa7c], 0
mov eax, dword [ebp - 0xa7c]
mov dword [ebp - 0x1348], eax
imul eax, dword [ebp - 0x1348], 0xa272
imul eax, eax, 0x336
test eax, eax
je 0x4684ab
mov eax, dword [ebp - 0x4c]
cmp dword [ebp + eax*4 - 0x754], 0
je 0x4684ab
mov dword [ebp - 0xa84], 1
jmp 0x4684b2
and dword [ebp - 0xa84], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0xa84], eax
jne 0x4684d4
cmp dword [ebp - 0x464], 0
jne 0x4684d4
xor eax, eax
inc eax
jne 0x4684d4
and dword [ebp - 0x1350], 0
jmp 0x4684de
mov dword [ebp - 0x1350], 1
mov eax, dword [ebp - 0x464]
imul eax, dword [ebp - 0x1350]
mov dword [ebp - 0x1a8c], eax
lea ecx, [ebp - 0x1774]
call fcn.00428a1a
jmp 0x4682ae
mov byte [ebp - 0x1af], 0
movzx eax, byte [ebp - 0x1af]
test eax, eax
je 0x46851e
push 0x1c6f
call dword [0xab22c4]
push dword [ebp - 0x188c]
push dword [ebp - 0x1890]
lea ecx, [ebp - 0x24e4]
call fcn.00454cb5
pop ecx
pop ecx
mov ecx, eax
call fcn.00402a8a
push eax
call fcn.0047c2f5
pop ecx
lea ecx, [ebp - 0x24e4]
call fcn.00402877
jmp 0x4681ae
jmp 0x468188
jmp 0x46807b
jmp 0x468055
mov dword [ebp - 0x34], 0x38ecf54c
mov dword [ebp - 0x70], 0x17b722ba
mov dword [ebp - 0x668], 0
jmp 0x46858b
mov eax, dword [ebp - 0x668]
inc eax
mov dword [ebp - 0x668], eax
cmp dword [ebp - 0x668], 2
jge 0x4685a7
mov eax, dword [ebp - 0x668]
mov dword [ebp + eax*4 - 0x3d4], 0x8f985589
jmp 0x46857e
mov dword [ebp - 0x70], 0x9934b0b4
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x1a94], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1a94]
mov dword [ebp + eax - 0x3d4], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3d4]
push 4
pop ecx
shl ecx, 0
imul eax, dword [ebp + ecx - 0x3d4]
test eax, eax
je 0x4685fb
cmp dword [ebp - 0x34], 0
je 0x4685fb
mov dword [ebp - 0xa8c], 1
jmp 0x468602
and dword [ebp - 0xa8c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3d4]
cmp dword [ebp - 0xa8c], eax
jle 0x468623
mov dword [ebp - 0x1358], 1
jmp 0x46862a
and dword [ebp - 0x1358], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1358]
sub ecx, dword [ebp + eax - 0x3d4]
push 4
pop eax
shl eax, 0
cmp ecx, dword [ebp + eax - 0x3d4]
jg 0x468658
mov dword [ebp - 0xa94], 1
jmp 0x46865f
and dword [ebp - 0xa94], 0
cmp dword [ebp - 0xa94], 0xd069
jge 0x468677
mov dword [ebp - 0x1360], 1
jmp 0x46867e
and dword [ebp - 0x1360], 0
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x1360]
imul eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x34]
jg 0x46869c
mov dword [ebp - 0xa9c], 1
jmp 0x4686a3
and dword [ebp - 0xa9c], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0xa9c], eax
jl 0x4686ca
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x3d4], 0
je 0x4686ca
mov dword [ebp - 0x1368], 1
jmp 0x4686d1
and dword [ebp - 0x1368], 0
mov eax, dword [ebp - 0x1368]
sub eax, 0x37b3
cmp eax, 4
jne 0x4686ed
mov dword [ebp - 0xaa4], 1
jmp 0x4686f4
and dword [ebp - 0xaa4], 0
mov eax, dword [ebp - 0xaa4]
sub eax, 0x18b9628e
cmp eax, dword [ebp - 0x34]
jle 0x468710
mov dword [ebp - 0x1370], 1
jmp 0x468717
and dword [ebp - 0x1370], 0
cmp dword [ebp - 0x1370], 0xffffffff
ja 0x46872c
mov dword [ebp - 0xaac], 1
jmp 0x468733
and dword [ebp - 0xaac], 0
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0xaac]
jle 0x468747
mov eax, 0x65ab4d25
test eax, eax
je 0x46876b
mov byte [ebp - 0x189], 0
movzx eax, byte [ebp - 0x189]
test eax, eax
je 0x468769
push 0
push 0
push 0
push 0
push 0
call dword [0xab226c]
jmp 0x4687cd
mov dword [ebp - 0x1aa4], 0x1bb30b13
mov dword [ebp - 0x34], 2
jmp 0x468785
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 8
jg 0x4687cd
mov dword [ebp - 0x1a9c], 0xffffffff
mov dword [ebp - 0x70], 0xb
jmp 0x4687a5
mov eax, dword [ebp - 0x70]
dec eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 7
jge 0x4687b8
cmp dword [ebp - 0x1a9c], 0
je 0x4687b6
jmp 0x4687b8
jmp 0x46879e
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1aa4]
mov dword [ebp + eax - 0x3d4], ecx
jmp 0x46877e
mov dword [ebp - 0x34], 1
jmp 0x4687dd
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jl 0x46883c
mov dword [ebp - 0x70], 1
jmp 0x4687f3
mov eax, dword [ebp - 0x70]
dec eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
jl 0x46883a
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp + eax*4 - 0x3d4]
mov dword [ebp - 0x20b8], eax
mov eax, 0xfffd
cmp eax, 0xfffb
ja 0x468821
mov dword [ebp - 0x1378], 1
jmp 0x468828
and dword [ebp - 0x1378], 0
mov eax, dword [ebp - 0x70]
mov ecx, dword [ebp - 0x1378]
mov dword [ebp + eax*4 - 0x3d4], ecx
jmp 0x4687ec
jmp 0x4687d6
mov dword [ebp - 0x1d0], 0x82eac453
mov dword [ebp - 0x2c8], 0xffffffff
mov dword [ebp - 0x3a0], 0xffffffff
mov dword [ebp - 0x824], 0x2fd17ba7
mov dword [ebp - 0x474], 1
mov dword [ebp - 0x13a0], 0xfffa
mov dword [ebp - 0x1d8], 0x47de68bd
mov dword [ebp - 0xb0c], 0x99d02bd4
mov eax, 0xd069
test eax, eax
je 0x4688aa
cmp dword [ebp - 0x1d0], 0
je 0x4688aa
mov dword [ebp - 0xab4], 1
jmp 0x4688b1
and dword [ebp - 0xab4], 0
mov eax, dword [ebp - 0xab4]
mov dword [ebp - 0x2c8], eax
imul eax, dword [ebp - 0x2c8], 0xffffffe4
cmp dword [ebp - 0x1d0], eax
jne 0x4688d8
mov dword [ebp - 0x1380], 1
jmp 0x4688df
and dword [ebp - 0x1380], 0
mov eax, dword [ebp - 0x1380]
mov dword [ebp - 0x3a0], eax
mov eax, dword [ebp - 0x2c8]
sub eax, 0xb0b4
jne 0x468905
xor eax, eax
jne 0x468905
and dword [ebp - 0xabc], 0
jmp 0x46890f
mov dword [ebp - 0xabc], 1
cmp dword [ebp - 0xabc], 0xb722
jge 0x468927
mov dword [ebp - 0x1388], 1
jmp 0x46892e
and dword [ebp - 0x1388], 0
mov eax, dword [ebp - 0x1d0]
imul eax, dword [ebp - 0x1388]
test eax, eax
je 0x468954
cmp dword [ebp - 0x2c8], 0
je 0x468954
mov dword [ebp - 0xac4], 1
jmp 0x46895b
and dword [ebp - 0xac4], 0
mov eax, dword [ebp - 0x1d0]
cmp dword [ebp - 0xac4], eax
jl 0x468975
mov dword [ebp - 0x1390], 1
jmp 0x46897c
and dword [ebp - 0x1390], 0
mov eax, dword [ebp - 0x1390]
neg eax
cmp eax, dword [ebp - 0x1d0]
jg 0x468dfb
push 3
lea ecx, [ebp - 0x1b74]
call fcn.00428948
mov dword [ebp - 0x2060], 0
mov dword [ebp - 0x1ab4], 0x206f6ec3
mov dword [ebp - 0xb4], 0
jmp 0x4689ca
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 3
jge 0x4689ec
push dword [ebp - 0xb4]
lea ecx, [ebp - 0x1b74]
call fcn.00428a36
mov dword [eax], 0x82f
jmp 0x4689bd
mov dword [ebp - 0xb4], 0
jmp 0x468a05
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 2
jge 0x468a21
mov eax, dword [ebp - 0xb4]
mov dword [ebp + eax*4 - 0x1768], 0xa97a8d1d
jmp 0x4689f8
mov dword [ebp - 0x3a0], 0x12
jmp 0x468a3a
cmp dword [ebp - 0x3a0], 0x19
jge 0x468deb
mov dword [ebp - 0x13c0], 0xce7aebb
mov dword [ebp - 0x46c], 0x964071c1
mov dword [ebp - 0x740], 0xffffffff
mov dword [ebp - 0x79c], 0x94a22835
mov dword [ebp - 0x13b8], 4
push 2
lea ecx, [ebp - 0x1b74]
call fcn.00428a36
mov esi, dword [ebp - 0x46c]
push 4
pop eax
shl eax, 0
add esi, dword [ebp + eax - 0x1768]
push 1
lea ecx, [ebp - 0x1b74]
call fcn.00428a36
cmp esi, dword [eax]
jne 0x468ab6
mov dword [ebp - 0x1aac], 1
jmp 0x468abd
and dword [ebp - 0x1aac], 0
mov eax, dword [ebp - 0x2c8]
mov dword [ebp - 0x20c0], eax
cmp dword [ebp - 0x1ab4], 0
je 0x468ae7
mov eax, 0xcf2e
test eax, eax
je 0x468ae7
mov dword [ebp - 0xacc], 1
jmp 0x468aee
and dword [ebp - 0xacc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1768]
cmp dword [ebp - 0xacc], eax
jge 0x468b0f
mov dword [ebp - 0x1398], 1
jmp 0x468b16
and dword [ebp - 0x1398], 0
cmp dword [ebp - 0x1398], 0xfffffffa
ja 0x468b2b
lea ecx, [ebp - 0x1b74]
call fcn.00428a1a
jmp 0x468e99
mov dword [ebp - 0x1adc], 0xaac79e06
cmp dword [ebp - 0x474], 0
je 0x468e8d
mov byte [ebp - 0x29b], 0
movzx eax, byte [ebp - 0x29b]
test eax, eax
je 0x468e2b
push 0xf25
call dword [0xab22e4]
mov dword [ebp - 0x1d8], 0x16
jmp 0x468e44
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 0x1f
jl 0x468e8b
mov byte [ebp - 0x295], 0
movzx eax, byte [ebp - 0x295]
test eax, eax
je 0x468e65
call dword [0xab2274]
mov byte [ebp - 0x1b1], 0
movzx eax, byte [ebp - 0x1b1]
test eax, eax
je 0x468e89
push 0xf1e
push 0x1c5c
push 0
call dword [0xab22b4]
jmp 0x468e37
jmp 0x468e99
mov eax, dword [ebp - 0x824]
mov dword [ebp - 0x1adc], eax
mov dword [ebp - 0xdec], 0x3e80
mov dword [ebp - 0x20], 0xcd795364
mov dword [ebp - 0x1e0], 0xfffffffb
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x20e8], eax
cmp dword [ebp - 0x20], 0x3cc9
jle 0x468ed8
cmp dword [ebp - 0x20], 0
je 0x468ed8
mov dword [ebp - 0x13d8], 1
jmp 0x468edf
and dword [ebp - 0x13d8], 0
cmp dword [ebp - 0x13d8], 0xce028f4e
jb 0x468efa
cmp dword [ebp - 0x20], 0
jne 0x468efa
and dword [ebp - 0xb14], 0
jmp 0x468f04
mov dword [ebp - 0xb14], 1
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0xb14], eax
je 0x468f1b
mov dword [ebp - 0x13e0], 1
jmp 0x468f22
and dword [ebp - 0x13e0], 0
cmp dword [ebp - 0x13e0], 0xfffffff6
jne 0x468f37
mov dword [ebp - 0xb1c], 1
jmp 0x468f3e
and dword [ebp - 0xb1c], 0
cmp dword [ebp - 0xb1c], 0x737e0d1b
je 0x468f56
mov dword [ebp - 0x1ae4], 1
jmp 0x468f5d
and dword [ebp - 0x1ae4], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x2090], eax
cmp dword [ebp - 0x20], 0
jne 0x468f7b
cmp dword [ebp - 0x20], 0
jne 0x468f7b
and dword [ebp - 0x13e8], 0
jmp 0x468f85
mov dword [ebp - 0x13e8], 1
imul eax, dword [ebp - 0x13e8], 0xfffc
test eax, eax
je 0x468fa4
xor eax, eax
inc eax
je 0x468fa4
mov dword [ebp - 0xb24], 1
jmp 0x468fab
and dword [ebp - 0xb24], 0
mov eax, dword [ebp - 0xb24]
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 0
je 0x468fd5
cmp dword [ebp - 0x1e0], 0
je 0x468fd5
and dword [ebp - 0x13f0], 0
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x13f0]
jg 0x468ff3