Function at 0x4701d7
Capabilities:
Authenticate hmac
Contain obfuscated stackstrings
Encrypt data using speck

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4c22c5
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x3340
call fcn.004bdb60
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 0x1c]
test eax, eax
je 0x4870ea
lea eax, [ebp + 0x18]
mov dword [ebp - 0x1958], eax
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0x184c], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x1844], eax
mov eax, dword [ebp + 0x34]
mov dword [ebp - 0x1854], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x185c], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x1834], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x1824], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x182c], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x183c], eax
mov eax, dword [ebp + 0x30]
mov dword [ebp - 0x181c], eax
mov eax, dword [ebp - 0x1958]
movzx eax, byte [eax]
test eax, eax
je 0x486d78
mov dword [ebp - 0x94], 3
mov dword [ebp - 0x1528], 0x5a63a74a
mov dword [ebp - 0x10b8], 0x1597
mov dword [ebp - 0x18fc], 0xa9b420
cmp dword [ebp - 0x10b8], 0x1792
jle 0x470377
and dword [ebp - 0x668], 0
jmp 0x4702c5
mov eax, dword [ebp - 0x668]
inc eax
mov dword [ebp - 0x668], eax
cmp dword [ebp - 0x668], 0xac3
jge 0x470377
and dword [ebp - 0x38c], 0
jmp 0x4702eb
mov eax, dword [ebp - 0x38c]
inc eax
mov dword [ebp - 0x38c], eax
cmp dword [ebp - 0x38c], 0x17e7
jge 0x470372
and dword [ebp - 0x390], 0
jmp 0x47030d
mov eax, dword [ebp - 0x390]
inc eax
mov dword [ebp - 0x390], eax
cmp dword [ebp - 0x390], 0x4ed1
jge 0x47036d
mov eax, dword [ebp - 0x38c]
imul eax, dword [ebp - 0x390]
add eax, dword [ebp - 0x668]
cdq
mov dword [ebp - 0x1948], eax
mov dword [ebp - 0x1944], edx
push dword [ebp - 0x1944]
push dword [ebp - 0x1948]
lea ecx, [ebp - 0x315c]
call fcn.00401a48
pop ecx
pop ecx
mov ecx, eax
call fcn.00408fc8
push eax
call fcn.004aba17
pop ecx
lea ecx, [ebp - 0x315c]
call fcn.00408fbe
jmp 0x470300
jmp 0x4702de
jmp 0x4702b8
mov dword [ebp - 0x1538], 0xc80f219a
and dword [ebp - 4], 0
cmp dword [ebp - 0x10b8], 0x1319
jge 0x47039d
push dword [ebp - 0x18fc]
call fcn.004aba17
pop ecx
jmp 0x4703b9
or dword [ebp - 4], 0xffffffff
jmp 0x4703c3
mov dword [ebp - 0x1548], 0xfb8ceffb
push 1
lea ecx, [ebp - 0x258c]
call fcn.004091fb
push 3
lea ecx, [ebp - 0x201c]
call fcn.004091fb
mov dword [ebp - 0x15a0], 0xe318b474
lea eax, [ebp - 0x1f4]
push eax
push 1
push 0x4b1f
push 0
lea eax, [ebp - 0x258c]
push eax
push 0x260d
push 1
call fcn.004663fb
add esp, 0x1c
push 0x2d9c
push 0x4b59
push 0x1804
push 0x57a4
push 0xb9d
push 0
push 0x64ac
lea eax, [ebp - 0x1f4]
push eax
push 0x3605
push 0x7a6e
push 0x5a80
push 0x2994
push 0x1292
push 0x3f52
push 0x5d87
push 0x6982
push 1
push 0x1344
push 0x2d76
push 0
lea eax, [ebp - 0x201c]
push eax
push 0x3738
call fcn.0046bcfe
add esp, 0x58
mov dword [ebp - 0x1f4], 0
jmp 0x4704a1
mov eax, dword [ebp - 0x1f4]
inc eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 3
jge 0x4704bd
mov eax, dword [ebp - 0x1f4]
mov dword [ebp + eax*4 - 0x2d18], 0x6b5a7dd9
jmp 0x470494
mov eax, dword [ebp - 0x94]
cmp dword [ebp - 0x94], eax
je 0x4704d7
mov dword [ebp - 0x1904], 1
jmp 0x4704de
and dword [ebp - 0x1904], 0
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x2cc0], eax
mov eax, dword [ebp - 0x94]
imul eax, dword [ebp - 0x94]
cmp eax, dword [ebp - 0x94]
jle 0x470514
cmp dword [ebp - 0x94], 0
je 0x470514
mov dword [ebp - 0x1520], 1
jmp 0x47051b
and dword [ebp - 0x1520], 0
mov eax, dword [ebp - 0x1520]
mov dword [ebp - 0x1528], eax
cmp dword [ebp - 0x1528], 0
jne 0x470540
push 0xfffffffffffffff7
pop eax
test eax, eax
jne 0x470540
and dword [ebp - 0x1530], 0
jmp 0x47054a
mov dword [ebp - 0x1530], 1
mov eax, dword [ebp - 0x1530]
mov dword [ebp - 0x1538], eax
mov eax, dword [ebp - 0x1538]
cmp dword [ebp - 0x94], eax
jge 0x470570
mov dword [ebp - 0x1540], 1
jmp 0x470577
and dword [ebp - 0x1540], 0
mov eax, dword [ebp - 0x1540]
mov dword [ebp - 0x1548], eax
mov eax, dword [ebp - 0x1548]
mov dword [ebp - 0x1550], eax
push 0
lea ecx, [ebp - 0x258c]
call fcn.004092e9
mov ecx, dword [ebp - 0x1550]
mov dword [eax], ecx
mov eax, dword [ebp - 0x94]
cmp dword [ebp - 0x1550], eax
jg 0x4705be
mov dword [ebp - 0x190c], 1
jmp 0x4705c5
and dword [ebp - 0x190c], 0
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x2ca8], eax
push 0
lea ecx, [ebp - 0x201c]
call fcn.004092e9
mov esi, eax
push 1
lea ecx, [ebp - 0x201c]
call fcn.004092e9
mov ecx, dword [esi]
cmp ecx, dword [eax]
je 0x4705ff
mov dword [ebp - 0x1588], 1
jmp 0x470606
and dword [ebp - 0x1588], 0
push 0
lea ecx, [ebp - 0x201c]
call fcn.004092e9
mov ecx, dword [ebp - 0x1588]
cmp ecx, dword [eax]
jle 0x470629
mov dword [ebp - 0x1590], 1
jmp 0x470630
and dword [ebp - 0x1590], 0
mov eax, dword [ebp - 0x94]
cmp eax, dword [ebp - 0x1590]
jl 0x47064a
mov dword [ebp - 0x1598], 1
jmp 0x470651
and dword [ebp - 0x1598], 0
mov eax, dword [ebp - 0x1598]
mov dword [ebp - 0x15a0], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x15a0]
mov dword [ebp + eax - 0x2d18], ecx
lea ecx, [ebp - 0x201c]
call fcn.004092cd
lea ecx, [ebp - 0x258c]
call fcn.004092cd
push 1
lea ecx, [ebp - 0x2694]
call fcn.004091fb
mov dword [ebp - 0x1914], 2
push 0x1085
push 1
push 0x513f
lea eax, [ebp - 0x2694]
push eax
push 0
push 0x128c
lea eax, [ebp - 0x27b4]
push eax
call fcn.004578db
add esp, 0x1c
mov dword [ebp - 0x15a8], 0x231b
mov dword [ebp - 0x191c], 0xa9b480
cmp dword [ebp - 0x15a8], 0x25b2
jle 0x47075d
and dword [ebp - 0x398], 0
jmp 0x4706fc
mov eax, dword [ebp - 0x398]
inc eax
mov dword [ebp - 0x398], eax
cmp dword [ebp - 0x398], 0x38ef
jge 0x47075d
and dword [ebp - 0x888], 0
jmp 0x47071e
mov eax, dword [ebp - 0x888]
inc eax
mov dword [ebp - 0x888], eax
cmp dword [ebp - 0x888], 0x2f0f
jge 0x47075b
mov eax, dword [ebp - 0x398]
or eax, dword [ebp - 0x888]
cdq
mov dword [ebp - 0x1954], eax
mov dword [ebp - 0x1950], edx
push dword [ebp - 0x1950]
push dword [ebp - 0x1954]
mov ecx, 0xab2098
call fcn.00408fd3
jmp 0x470711
jmp 0x4706ef
push 0
lea eax, [ebp - 0x2694]
push eax
push 0
push 1
lea eax, [ebp - 0x1914]
push eax
call fcn.00463737
add esp, 0x14
mov dword [ebp - 4], 2
cmp dword [ebp - 0x15a8], 0x223e
jge 0x47079c
mov edx, dword [ebp - 0x191c]
mov ecx, 0xab2098
call fcn.0040b859
jmp 0x4707b8
or dword [ebp - 4], 0xffffffff
jmp 0x4707c2
mov dword [ebp - 0x15b0], 0x2f60
mov dword [ebp - 0x1924], 0xa9b4d8
cmp dword [ebp - 0x15b0], 0x301f
jle 0x47085c
and dword [ebp - 0x3a0], 0
jmp 0x4707f8
mov eax, dword [ebp - 0x3a0]
inc eax
mov dword [ebp - 0x3a0], eax
cmp dword [ebp - 0x3a0], 0x791c
jge 0x47085c
and dword [ebp - 0x670], 0
jmp 0x47081a
mov eax, dword [ebp - 0x670]
inc eax
mov dword [ebp - 0x670], eax
cmp dword [ebp - 0x670], 0x2d9e
jge 0x47085a
mov eax, dword [ebp - 0x3a0]
cdq
idiv dword [ebp - 0x670]
mov eax, edx
cdq
mov dword [ebp - 0x1960], eax
mov dword [ebp - 0x195c], edx
push dword [ebp - 0x195c]
push dword [ebp - 0x1960]
mov ecx, 0xab2098
call fcn.00408fd3
jmp 0x47080d
jmp 0x4707eb
mov dword [ebp - 4], 4
cmp dword [ebp - 0x15b0], 0x2e76
jge 0x47087f
mov edx, dword [ebp - 0x1924]
mov ecx, 0xab2098
call fcn.0040b859
jmp 0x47089b
or dword [ebp - 4], 0xffffffff
jmp 0x4708a5
mov byte [ebp - 0x157], 0
push 0x3a7f
lea eax, [ebp - 0x157]
push eax
push 0
push 0
call fcn.0045f510
add esp, 0x10
lea ecx, [ebp - 0x2694]
call fcn.004092cd
mov dword [ebp - 0x3a8], 0
jmp 0x4708e8
mov eax, dword [ebp - 0x3a8]
inc eax
mov dword [ebp - 0x3a8], eax
cmp dword [ebp - 0x3a8], 1
jge 0x470904
mov eax, dword [ebp - 0x3a8]
mov dword [ebp + eax*4 - 0x32c], 0xc75b57fd
jmp 0x4708db
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x32c], 0
jmp 0x470932
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x32c]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x32c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x32c], 0xffffffeb
je 0x4709a1
mov dword [ebp - 0x192c], 0x2c7c
mov dword [ebp - 0x26f8], 0
mov dword [ebp - 0x26f4], 0
mov dword [ebp - 0x26f0], 0
mov dword [ebp - 0x26ec], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x192c]
mov dword [ebp + eax - 0x26f8], ecx
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x32c], 0
je 0x47099c
jmp 0x470917
jmp 0x470917
mov dword [ebp - 0x90], 3
mov dword [ebp - 0x15b8], 0x368e
mov dword [ebp - 0x1934], 0xa9b580
cmp dword [ebp - 0x15b8], 0x3a29
jle 0x470acf
and dword [ebp - 0x7d8], 0
jmp 0x4709e5
mov eax, dword [ebp - 0x7d8]
inc eax
mov dword [ebp - 0x7d8], eax
cmp dword [ebp - 0x7d8], 0x3a2d
jge 0x470acf
and dword [ebp - 0x3b0], 0
jmp 0x470a0b
mov eax, dword [ebp - 0x3b0]
inc eax
mov dword [ebp - 0x3b0], eax
cmp dword [ebp - 0x3b0], 0x4f89
jge 0x470aca
and dword [ebp - 0x678], 0
jmp 0x470a31
mov eax, dword [ebp - 0x678]
inc eax
mov dword [ebp - 0x678], eax
cmp dword [ebp - 0x678], 0x24ab
jge 0x470ac5
and dword [ebp - 0x3b8], 0
jmp 0x470a57
mov eax, dword [ebp - 0x3b8]
inc eax
mov dword [ebp - 0x3b8], eax
cmp dword [ebp - 0x3b8], 0x6f19
jge 0x470ac0
mov eax, dword [ebp - 0x7d8]
and eax, dword [ebp - 0x3b0]
mov edx, dword [ebp - 0x678]
mov ecx, dword [ebp - 0x3b8]
sar edx, cl
or eax, edx
cdq
mov dword [ebp - 0x196c], eax
mov dword [ebp - 0x1968], edx
push dword [ebp - 0x1968]
push dword [ebp - 0x196c]
lea ecx, [ebp - 0x2f94]
call fcn.00401a48
pop ecx
pop ecx
mov ecx, eax
call fcn.00408fc8
push eax
call fcn.004aba17
pop ecx
lea ecx, [ebp - 0x2f94]
call fcn.00408fbe
jmp 0x470a4a
jmp 0x470a24
jmp 0x4709fe
jmp 0x4709d8
mov dword [ebp - 0x3c0], 0xfffffffe
mov dword [ebp - 4], 6
cmp dword [ebp - 0x15b8], 0x34fc
jge 0x470af8
push dword [ebp - 0x1934]
call fcn.004aba17
pop ecx
jmp 0x470b14
or dword [ebp - 4], 0xffffffff
jmp 0x470b1e
mov dword [ebp - 0x910], 0
jmp 0x470b37
mov eax, dword [ebp - 0x910]
inc eax
mov dword [ebp - 0x910], eax
cmp dword [ebp - 0x910], 3
jge 0x470b53
mov eax, dword [ebp - 0x910]
mov dword [ebp + eax*4 - 0x2938], 0x960f57a7
jmp 0x470b2a
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2938]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x2938], eax
mov dword [ebp - 0x3c0], 0
jmp 0x470b87
mov eax, dword [ebp - 0x3c0]
inc eax
mov dword [ebp - 0x3c0], eax
cmp dword [ebp - 0x3c0], 2
jg 0x470ccf
mov dword [ebp - 0x15c8], 0x46e8
mov dword [ebp - 0x193c], 0xa9b5ec
cmp dword [ebp - 0x15c8], 0x487c
jle 0x470c6a
and dword [ebp - 0x680], 0
jmp 0x470bce
mov eax, dword [ebp - 0x680]
inc eax
mov dword [ebp - 0x680], eax
cmp dword [ebp - 0x680], 0x2db3
jge 0x470c60
and dword [ebp - 0x3c8], 0
jmp 0x470bf4
mov eax, dword [ebp - 0x3c8]
inc eax
mov dword [ebp - 0x3c8], eax
cmp dword [ebp - 0x3c8], 0x7fda
jge 0x470c5b
and dword [ebp - 0x7e0], 0
jmp 0x470c16
mov eax, dword [ebp - 0x7e0]
inc eax
mov dword [ebp - 0x7e0], eax
cmp dword [ebp - 0x7e0], 0x4bf4
jge 0x470c59
mov eax, dword [ebp - 0x680]
and eax, dword [ebp - 0x3c8]
xor eax, dword [ebp - 0x7e0]
cdq
mov dword [ebp - 0x1978], eax
mov dword [ebp - 0x1974], edx
push dword [ebp - 0x1974]
push dword [ebp - 0x1978]
mov ecx, 0xab2098
call fcn.00408fd3
jmp 0x470c09
jmp 0x470be7
jmp 0x470bc1
push 0
push 0
call dword [0xab53f4]
mov byte [ebp - 0x159], 0
lea eax, [ebp - 0x159]
push eax
push 1
call fcn.0045ccb6
pop ecx
pop ecx
mov dword [ebp - 4], 8
cmp dword [ebp - 0x15c8], 0x4327
jge 0x470ca4
mov edx, dword [ebp - 0x193c]
mov ecx, 0xab2098
call fcn.0040b859
jmp 0x470cc0
or dword [ebp - 4], 0xffffffff
jmp 0x470cca
jmp 0x470b7a
mov dword [ebp - 0x14ac], 0x5a63a74a
mov dword [ebp - 0x1f8c], 0xfffffff6
mov dword [ebp - 0x1f84], 0xa1bf2b29
mov dword [ebp - 0x1f94], 7
lea eax, [ebp - 0x1f84]
push eax
push 0x1da0
push 0x41f2
push 0xfa5
push 0
push 0x4a0e
push 0x24fd
lea eax, [ebp - 0x1f8c]
push eax
push 0x7113
push 1
push 0x74ef
push 0x1730
push 0x2a2a
lea eax, [ebp - 0x1f94]
push eax
call fcn.0046a617
add esp, 0x38
mov dword [ebp - 0x10e4], 0xc80f219a
mov dword [ebp - 0x2f8], 0x76820624
mov dword [ebp - 0x2ae4], 0xde9ab5c2
mov dword [ebp - 0x27bc], 0xffffffff
mov dword [ebp - 0x1fa4], 0x796a0b59
mov dword [ebp - 0x1fc4], 0x91e6e404
mov dword [ebp - 0x23b0], 0x6d0f065f
mov dword [ebp - 0x23ac], 0x6d0f065f
mov dword [ebp - 0x23a8], 0x6d0f065f
mov dword [ebp - 0x23a4], 0x6d0f065f
lea ecx, [ebp - 0xa82]
call fcn.004092f8
push eax
lea eax, [ebp - 0x23a0]
push eax
lea eax, [ebp - 0x23b0]
push eax
lea ecx, [ebp - 0x2da4]
call fcn.004092fb
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x2d78]
call fcn.004092a7
mov dword [ebp - 0x2c24], 0x97d
mov dword [ebp - 0x1fb4], 0xffffffff
mov dword [ebp - 0x1fbc], 0x8f9f0ac7
mov dword [ebp - 0x3d0], 0
jmp 0x470e15
mov eax, dword [ebp - 0x3d0]
inc eax
mov dword [ebp - 0x3d0], eax
cmp dword [ebp - 0x3d0], 1
jge 0x470e31
mov eax, dword [ebp - 0x3d0]
mov dword [ebp + eax*4 - 0x1344], 0
jmp 0x470e08
mov dword [ebp - 0x2f8], 0xffffffe5
jmp 0x470e4a
mov eax, dword [ebp - 0x2f8]
inc eax
mov dword [ebp - 0x2f8], eax
cmp dword [ebp - 0x2f8], 0x13
jl 0x47119b
mov dword [ebp - 0x27c4], 0xfffffff9
mov dword [ebp - 0xb2c], 0x5d2f
mov dword [ebp - 0x1f9c], 0xa9b628
cmp dword [ebp - 0xb2c], 0x5eb1
jle 0x470f89
and dword [ebp - 0x688], 0
jmp 0x470e9b
mov eax, dword [ebp - 0x688]
inc eax
mov dword [ebp - 0x688], eax
cmp dword [ebp - 0x688], 0x72b2
jge 0x470f89
and dword [ebp - 0x3d8], 0
jmp 0x470ec1
mov eax, dword [ebp - 0x3d8]
inc eax
mov dword [ebp - 0x3d8], eax
cmp dword [ebp - 0x3d8], 0x421f
jge 0x470f84
and dword [ebp - 0x890], 0
jmp 0x470ee7
mov eax, dword [ebp - 0x890]
inc eax
mov dword [ebp - 0x890], eax
cmp dword [ebp - 0x890], 0x323d
jge 0x470f7f
and dword [ebp - 0x3e0], 0
jmp 0x470f0d
mov eax, dword [ebp - 0x3e0]
inc eax
mov dword [ebp - 0x3e0], eax
cmp dword [ebp - 0x3e0], 0x6921
jge 0x470f7a
mov eax, dword [ebp - 0x688]
cdq
idiv dword [ebp - 0x3d8]
mov ecx, edx
mov eax, dword [ebp - 0x890]
cdq
idiv dword [ebp - 0x3e0]
xor ecx, edx
mov eax, ecx
cdq
mov dword [ebp - 0x1984], eax
mov dword [ebp - 0x1980], edx
push dword [ebp - 0x1980]
push dword [ebp - 0x1984]
lea ecx, [ebp - 0x32c4]
call fcn.00401a48
pop ecx
pop ecx
mov ecx, eax
call fcn.00408fc8
push eax
call fcn.004aba17
pop ecx
lea ecx, [ebp - 0x32c4]
call fcn.00408fbe
jmp 0x470f00
jmp 0x470eda
jmp 0x470eb4
jmp 0x470e8e
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0xb2c], 0x5b18
jge 0x470fa8
push dword [ebp - 0x1f9c]
call fcn.004aba17
pop ecx
jmp 0x470fc4
or dword [ebp - 4], 0xffffffff
jmp 0x470fce
mov dword [ebp - 0x2af4], 0xa5c25cce
mov dword [ebp - 0x48], 0
jmp 0x470fe8
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 2
jge 0x470ffe
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x1990], 0xfffffffc
jmp 0x470fe1
mov dword [ebp - 0x48], 0
jmp 0x47100e
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 3
jge 0x471024
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x2ed4], 2
jmp 0x471007
mov dword [ebp - 0x48], 0
jmp 0x471034
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 1
jge 0x47104a
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x1fac], 4
jmp 0x47102d
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1990], 0
je 0x4710ae
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1990]
mov dword [ebp - 0x27cc], eax
xor eax, eax
inc eax
cmp eax, 0x2777
jge 0x471083
mov dword [ebp - 0x1518], 1
jmp 0x47108a
and dword [ebp - 0x1518], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1344]
imul eax, dword [ebp - 0x1518]
test eax, eax
je 0x4710ae
mov dword [ebp - 0x1544], 1
jmp 0x4710b5
and dword [ebp - 0x1544], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1990]
cmp dword [ebp - 0x1544], eax
je 0x4710d6
mov dword [ebp - 0xb34], 1
jmp 0x4710dd
and dword [ebp - 0xb34], 0
mov eax, dword [ebp - 0x1fa4]
cmp dword [ebp - 0xb34], eax
jne 0x4710f7
mov dword [ebp - 0x1094], 1
jmp 0x4710fe
and dword [ebp - 0x1094], 0
cmp dword [ebp - 0x1094], 8
jne 0x471120
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1fac], 0
jne 0x471120
and dword [ebp - 0xb3c], 0
jmp 0x47112a
mov dword [ebp - 0xb3c], 1
cmp dword [ebp - 0xb3c], 3
je 0x47113f
mov dword [ebp - 0xb44], 1
jmp 0x471146
and dword [ebp - 0xb44], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1344]
cmp dword [ebp - 0xb44], eax
je 0x471167
mov dword [ebp - 0x109c], 1
jmp 0x47116e
and dword [ebp - 0x109c], 0
cmp dword [ebp - 0x109c], 0
ja 0x471183
mov dword [ebp - 0xb4c], 1
jmp 0x47118a
and dword [ebp - 0xb4c], 0
mov eax, dword [ebp - 0xb4c]
mov dword [ebp - 0x1fb4], eax
jmp 0x470e3d
lea eax, [ebp - 0x2f8]
push eax
push 1
push 0
push 0x674
lea eax, [ebp - 0x1fbc]
push eax
lea eax, [ebp - 0x1fc4]
push eax
push 0x7706
push 0x5ab6
push 1
call fcn.00463fa2
add esp, 0x24
lea ecx, [ebp - 0x2d78]
call fcn.004092cd
mov dword [ebp - 0x136c], 0xfb8ceffb
mov dword [ebp - 0x228], 1
mov dword [ebp - 0x1fcc], 0xffffffff
mov dword [ebp - 0x228], 0xd
jmp 0x47120f
mov eax, dword [ebp - 0x228]
dec eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 0xffffffe5
jle 0x47124b
cmp dword [ebp - 0x228], 0
je 0x471223
jmp 0x47124b
push 0
push 0x7f9a
push 0x715f
push 1
lea eax, [ebp - 0x228]
push eax
lea eax, [ebp - 0x1fcc]
push eax
push 1
call fcn.0046e7fd
add esp, 0x1c
jmp 0x471202
mov byte [ebp - 0x15b], 0
push 0x7ba2
push 0x34f7
push 0
push 0x5f16
lea eax, [ebp - 0x15b]
push eax
push 0x44c1
push 0x783b
push 0x25fc
push 1
push 0x21d4
push 0
call fcn.00462c8b
add esp, 0x2c
push 1
lea ecx, [ebp - 0x25bc]
call fcn.004091fb
mov dword [ebp - 0x58], 9
mov dword [ebp - 0xb64], 1
push 0x56d8
push 0xd45
push 0
push 0x2c14
push 0
lea eax, [ebp - 0x58]
push eax
push 0x6d0f
call fcn.0046f429
add esp, 0x1c
mov dword [ebp - 0x58], 0
jmp 0x4712dc
mov eax, dword [ebp - 0x58]
dec eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0xfffffff2
jne 0x471863
mov dword [ebp - 0x2338], 1
mov dword [ebp - 0x2334], 1
mov dword [ebp - 0x2330], 1
mov dword [ebp - 0x232c], 1
lea ecx, [ebp - 0xa25]
call fcn.004092f8
push eax
lea eax, [ebp - 0x2328]
push eax
lea eax, [ebp - 0x2338]
push eax
lea ecx, [ebp - 0x2dac]
call fcn.004092fb
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x15d8]
call fcn.004092a7
mov dword [ebp - 0xa38], 0
mov dword [ebp - 0x1fe4], 5
cmp dword [ebp - 0x58], 0
je 0x47136d
lea ecx, [ebp - 0x15d8]
call fcn.004092cd
jmp 0x471863
mov dword [ebp - 0xb7c], 0x2617
mov dword [ebp - 0x1ffc], 0xa9b65c
cmp dword [ebp - 0xb7c], 0x28a8
jle 0x47143c
and dword [ebp - 0x690], 0
jmp 0x4713a7
mov eax, dword [ebp - 0x690]
inc eax
mov dword [ebp - 0x690], eax
cmp dword [ebp - 0x690], 0x64d8
jge 0x47143c
and dword [ebp - 0x3e8], 0
jmp 0x4713cd
mov eax, dword [ebp - 0x3e8]
inc eax
mov dword [ebp - 0x3e8], eax
cmp dword [ebp - 0x3e8], 0x7430
jge 0x471437
and dword [ebp - 0x7e8], 0
jmp 0x4713ef
mov eax, dword [ebp - 0x7e8]
inc eax
mov dword [ebp - 0x7e8], eax
cmp dword [ebp - 0x7e8], 0x2a0b
jge 0x471435
mov eax, dword [ebp - 0x690]
cdq
idiv dword [ebp - 0x3e8]
add edx, dword [ebp - 0x7e8]
mov eax, edx
cdq
mov dword [ebp - 0x199c], eax
mov dword [ebp - 0x1998], edx
push dword [ebp - 0x1998]
push dword [ebp - 0x199c]
mov ecx, 0xab2098
call fcn.00408fd3
jmp 0x4713e2
jmp 0x4713c0
jmp 0x47139a
push 0
lea ecx, [ebp - 0x15d8]
call fcn.004092e9
and dword [eax], 0
jmp 0x471472
push 0
lea ecx, [ebp - 0x15d8]
call fcn.004092e9
mov dword [ebp - 0x149c], eax
mov eax, dword [ebp - 0x149c]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x149c]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x15d8]
call fcn.004092e9
cmp dword [eax], 0xffffffe6
jg 0x47180a
mov dword [ebp - 0x3f0], 0
jmp 0x4714a1
mov eax, dword [ebp - 0x3f0]
inc eax
mov dword [ebp - 0x3f0], eax
cmp dword [ebp - 0x3f0], 4
jge 0x4714bd
mov eax, dword [ebp - 0x3f0]
mov dword [ebp + eax*4 - 0x2170], 0
jmp 0x471494
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x2170], 0
jmp 0x4714eb
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2170]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x2170], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2170], 0xfffffffb
jg 0x471805
mov dword [ebp - 0x238], 0x7563ffaf
mov dword [ebp - 0xb74], 0x20a2e71c
mov dword [ebp - 0x238], 0xfffffff5
jmp 0x47152c
mov eax, dword [ebp - 0x238]
dec eax
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 0xfffffff4
jne 0x471800
push 3
lea ecx, [ebp - 0x163c]
call fcn.004091fb
mov dword [ebp - 0x980], 0xffffffff
mov dword [ebp - 0x1ff4], 0xc8c580b0
push 0x6054
lea eax, [ebp - 0x2d00]
push eax
lea eax, [ebp - 0x163c]
push eax
push 0
push 0x443b
push 0
call fcn.0045de6a
add esp, 0x18
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x27d4], eax
or eax, 0xffffffff
je 0x471654
mov eax, dword [ebp - 0x58]
imul eax, dword [ebp - 0x58]
imul eax, dword [ebp - 0x238]
cmp eax, dword [ebp - 0x58]
jl 0x4715af
mov dword [ebp - 0xb54], 1
jmp 0x4715b6
and dword [ebp - 0xb54], 0
mov eax, dword [ebp - 0xb54]
mov dword [ebp - 0xa38], eax
cmp dword [ebp - 0xa38], 0
jne 0x4715da
cmp dword [ebp - 0x58], 0
jne 0x4715da
and dword [ebp - 0x10a4], 0
jmp 0x4715e4
mov dword [ebp - 0x10a4], 1
mov eax, dword [ebp - 0x58]
imul eax, dword [ebp - 0x10a4]
test eax, eax
jg 0x4715fe
mov dword [ebp - 0xb5c], 1
jmp 0x471605
and dword [ebp - 0xb5c], 0
push 1
lea ecx, [ebp - 0x163c]
call fcn.004092e9
mov ecx, dword [ebp - 0xb5c]
cmp ecx, dword [eax]
jg 0x471628
mov dword [ebp - 0x134c], 1
jmp 0x47162f
and dword [ebp - 0x134c], 0
push 1
lea ecx, [ebp - 0x163c]
call fcn.004092e9
mov ecx, dword [ebp - 0x134c]
imul ecx, dword [eax]
inc ecx
je 0x471654
mov dword [ebp - 0x1fd4], 1
jmp 0x47165b
and dword [ebp - 0x1fd4], 0
push 0
lea ecx, [ebp - 0x15d8]
call fcn.004092e9
cmp dword [ebp - 0x58], 0
je 0x471684
push 0x7c1f
push 1
push 0
call fcn.0045a55b
add esp, 0xc
jmp 0x4717f0
mov dword [ebp - 0xb6c], 0
mov byte [ebp - 0x1b2], 0
push 0x14f0
push 1
push 0x38e4
push 0x7628
push 0
lea eax, [ebp - 0x1b2]
push eax
call fcn.0045f12b
add esp, 0x18
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2170]
mov dword [ebp - 0x980], eax
mov eax, dword [ebp - 0x980]
mov dword [ebp - 0xb64], eax
mov eax, dword [ebp - 0xb64]
mov dword [ebp - 0xb74], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x2170], 0
je 0x4717c1
push 0
lea ecx, [ebp - 0x15d8]
call fcn.004092e9
cmp dword [eax], 0
jne 0x471791
push 0
lea ecx, [ebp - 0x15d8]
call fcn.004092e9
mov esi, dword [ebp - 0xb6c]
add esi, 0x30e92f9e
push 2
lea ecx, [ebp - 0x163c]
call fcn.004092e9
cmp esi, dword [eax]
jge 0x471742
mov dword [ebp - 0x10ac], 1
jmp 0x471749
and dword [ebp - 0x10ac], 0
mov esi, dword [ebp - 0x980]
imul esi, dword [ebp - 0x10ac]
push 1
lea ecx, [ebp - 0x163c]
call fcn.004092e9
cmp esi, dword [eax]
jg 0x471773
mov dword [ebp - 0x1564], 1
jmp 0x47177a
and dword [ebp - 0x1564], 0
mov eax, dword [ebp - 0xb6c]
cmp dword [ebp - 0x1564], eax
jge 0x471791
and dword [ebp - 0x1fdc], 0
jmp 0x47179b
mov dword [ebp - 0x1fdc], 1
mov eax, dword [ebp - 0xa38]
mov dword [ebp - 0x2b04], eax
cmp dword [ebp - 0x1fe4], 0
jne 0x4717c1
or eax, 0xffffffff
je 0x4717c1
mov dword [ebp - 0x1fec], 1
jmp 0x4717c8
and dword [ebp - 0x1fec], 0
cmp dword [ebp - 0xb74], 0xfffffff6
jg 0x4717dd
mov dword [ebp - 0x10b4], 1
jmp 0x4717e4
and dword [ebp - 0x10b4], 0
mov eax, dword [ebp - 0x10b4]
mov dword [ebp - 0x1ff4], eax
lea ecx, [ebp - 0x163c]
call fcn.004092cd
jmp 0x47151f
jmp 0x4714d0
jmp 0x47144e
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0xb7c], 0x22ba
jge 0x47182d
mov edx, dword [ebp - 0x1ffc]
mov ecx, 0xab2098
call fcn.0040b859
jmp 0x471849
or dword [ebp - 4], 0xffffffff
jmp 0x471853
lea ecx, [ebp - 0x15d8]
call fcn.004092cd
jmp 0x4712d5
mov dword [ebp - 0x1354], 0x700
mov dword [ebp - 0x2004], 0xa9b6b8
cmp dword [ebp - 0x1354], 0xa7d
jle 0x47197b
push 0x1771
push 0x14e3
push 0x7bb
call dword [0xab50d0]
and dword [ebp - 0x400], 0
jmp 0x4718b2
mov eax, dword [ebp - 0x400]
inc eax
mov dword [ebp - 0x400], eax
cmp dword [ebp - 0x400], 0x5e41
jge 0x47197b
and dword [ebp - 0x698], 0
jmp 0x4718d8
mov eax, dword [ebp - 0x698]
inc eax
mov dword [ebp - 0x698], eax
cmp dword [ebp - 0x698], 0x3437
jge 0x471976
and dword [ebp - 0x3f8], 0
jmp 0x4718fe
mov eax, dword [ebp - 0x3f8]
inc eax
mov dword [ebp - 0x3f8], eax
cmp dword [ebp - 0x3f8], 0x40a7
jge 0x471971
and dword [ebp - 0x8e8], 0
jmp 0x471920
mov eax, dword [ebp - 0x8e8]
inc eax
mov dword [ebp - 0x8e8], eax
cmp dword [ebp - 0x8e8], 0x6cf
jge 0x47196f
mov eax, dword [ebp - 0x698]
imul eax, dword [ebp - 0x3f8]
cdq
idiv dword [ebp - 0x8e8]
mov eax, dword [ebp - 0x400]
mov ecx, edx
shl eax, cl
cdq
mov dword [ebp - 0x19a8], eax
mov dword [ebp - 0x19a4], edx
push dword [ebp - 0x19a4]
push dword [ebp - 0x19a8]
mov ecx, 0xab2098
call fcn.00408fd3
jmp 0x471913
jmp 0x4718f1
jmp 0x4718cb
jmp 0x4718a5
push 3
lea ecx, [ebp - 0x202c]
call fcn.004091fb
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0x1354], 0x650
jge 0x4719ab
mov edx, dword [ebp - 0x2004]
mov ecx, 0xab2098
call fcn.0040b859
jmp 0x4719c7
or dword [ebp - 4], 0xffffffff
jmp 0x4719d1
push 0x2d0d
push 0
push 0x5b4c
push 0x26fc
push 1
push 1
call fcn.00469344
add esp, 0x18
mov dword [ebp - 0xbf4], 0xe318b474
mov dword [ebp - 0x200c], 0xffffffff
mov dword [ebp - 0x1cc4], 0xec93cc25
mov dword [ebp - 0x27dc], 0x356a0b34
mov dword [ebp - 0x2c2c], 0xa47cdedf
push 4
lea ecx, [ebp - 0x25a4]
call fcn.004091fb
push 0
lea eax, [ebp - 0x27e4]
push eax
push 0x114f
lea eax, [ebp - 0x25a4]
push eax
push 1
push 1
call fcn.004611c5
add esp, 0x18
push 0
lea eax, [ebp - 0x200c]
push eax
lea eax, [ebp - 0x25a4]
push eax
push 0x4155
lea eax, [ebp - 0x1cc4]
push eax
push 1
call fcn.0046dea1
add esp, 0x18
lea ecx, [ebp - 0x25a4]
call fcn.004092cd
mov dword [ebp - 0x2c0], 9
mov dword [ebp - 0x18f4], 0
mov dword [ebp - 0x1edc], 0xd66b
mov dword [ebp - 0x6a0], 0
jmp 0x471ab6
mov eax, dword [ebp - 0x6a0]
inc eax
mov dword [ebp - 0x6a0], eax
cmp dword [ebp - 0x6a0], 4
jge 0x471ad2
mov eax, dword [ebp - 0x6a0]
mov dword [ebp + eax*4 - 0x2130], 0xffffffff
jmp 0x471aa9
mov dword [ebp - 0x2c0], 0
jmp 0x471aeb
mov eax, dword [ebp - 0x2c0]
inc eax
mov dword [ebp - 0x2c0], eax
cmp dword [ebp - 0x2c0], 0xf
je 0x471f1c
mov dword [ebp - 0xa4], 0xccce1e2c
mov dword [ebp - 0xbac], 0xe9843c6b
mov dword [ebp - 0x1660], 1
push 0
push 0
push 0xa8a
call fcn.0045f685
add esp, 0xc
mov dword [ebp - 0xbbc], 0x4eb
mov dword [ebp - 0x1cd0], 0xa9b704
cmp dword [ebp - 0xbbc], 0x7a6
jle 0x471c36
push 0x1db2
push 0x16dd
push 0
call dword [0xab5594]
and dword [ebp - 0x408], 0
jmp 0x471b73
mov eax, dword [ebp - 0x408]
inc eax
mov dword [ebp - 0x408], eax
cmp dword [ebp - 0x408], 0x8005
jge 0x471c36
and dword [ebp - 0x7f0], 0
jmp 0x471b99
mov eax, dword [ebp - 0x7f0]
inc eax
mov dword [ebp - 0x7f0], eax
cmp dword [ebp - 0x7f0], 0x1812
jge 0x471c31
and dword [ebp - 0x410], 0
jmp 0x471bbf
mov eax, dword [ebp - 0x410]
inc eax
mov dword [ebp - 0x410], eax
cmp dword [ebp - 0x410], 0x2a82
jge 0x471c2c
and dword [ebp - 0x6a8], 0
jmp 0x471be1
mov eax, dword [ebp - 0x6a8]
inc eax
mov dword [ebp - 0x6a8], eax
cmp dword [ebp - 0x6a8], 0x365b
jge 0x471c2a
mov eax, dword [ebp - 0x408]
sub eax, dword [ebp - 0x7f0]
sub eax, dword [ebp - 0x410]
xor eax, dword [ebp - 0x6a8]
cdq
mov dword [ebp - 0x19b4], eax
mov dword [ebp - 0x19b0], edx
push dword [ebp - 0x19b0]
push dword [ebp - 0x19b4]
mov ecx, 0xab2098
call fcn.00408fd3
jmp 0x471bd4
jmp 0x471bb2
jmp 0x471b8c
jmp 0x471b66
mov dword [ebp - 0xa4], 3
jmp 0x471c4f
mov eax, dword [ebp - 0xa4]
dec eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0
jl 0x471ece
mov dword [ebp - 0x78], 0xe64f1479
mov dword [ebp - 0x78], 3
jmp 0x471c73
mov eax, dword [ebp - 0x78]
dec eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0
jl 0x471ec9
mov dword [ebp - 0x10c4], 0xffffffff
mov eax, dword [ebp - 0xa4]
mov eax, dword [ebp + eax*4 - 0x2130]
mov dword [ebp - 0x2b14], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2130]
mov dword [ebp - 0x27ec], eax
mov eax, dword [ebp - 0x78]
cmp dword [ebp - 0x18f4], eax
jne 0x471ccd
cmp dword [ebp - 0xa4], 0
je 0x471ccd
mov dword [ebp - 0xb84], 1
jmp 0x471cd4
and dword [ebp - 0xb84], 0
cmp dword [ebp - 0xb84], 1
jle 0x471cf9
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x2130], 0
je 0x471cf9
mov dword [ebp - 0x10bc], 1
jmp 0x471d00
and dword [ebp - 0x10bc], 0
mov eax, dword [ebp - 0xa4]
mov eax, dword [ebp + eax*4 - 0x2130]
cmp dword [ebp - 0x10bc], eax
jne 0x471d21
mov dword [ebp - 0xb8c], 1
jmp 0x471d28
and dword [ebp - 0xb8c], 0
mov eax, dword [ebp - 0xb8c]
add eax, 4
jne 0x471d42
cmp dword [ebp - 0x78], 0
jne 0x471d42
and dword [ebp - 0x14a4], 0
jmp 0x471d4c
mov dword [ebp - 0x14a4], 1
mov eax, dword [ebp - 0x2c0]
cmp dword [ebp - 0x14a4], eax
jge 0x471d66
mov dword [ebp - 0x1658], 1
jmp 0x471d6d
and dword [ebp - 0x1658], 0
mov eax, dword [ebp - 0xa4]
mov eax, dword [ebp + eax*4 - 0x2130]
mov dword [ebp - 0x2cb0], eax
cmp dword [ebp - 0x78], 0x9e6b
jg 0x471d95
mov dword [ebp - 0xb94], 1
jmp 0x471d9c
and dword [ebp - 0xb94], 0
mov eax, dword [ebp - 0xb94]
mov dword [ebp - 0x10c4], eax
mov eax, dword [ebp - 0x10c4]
mov dword [ebp - 0x27f4], eax
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x2b24], eax
mov eax, 0xcb51
imul eax, eax, 6
add eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0xa4]
cmp eax, dword [ebp + ecx*4 - 0x2130]
jl 0x471de6
mov dword [ebp - 0xb9c], 1
jmp 0x471ded
and dword [ebp - 0xb9c], 0
mov eax, dword [ebp - 0x78]
cmp dword [ebp - 0xb9c], eax
jle 0x471e04
mov dword [ebp - 0x135c], 1
jmp 0x471e0b
and dword [ebp - 0x135c], 0
cmp dword [ebp - 0x135c], 7
jae 0x471e20
mov dword [ebp - 0xba4], 1
jmp 0x471e27
and dword [ebp - 0xba4], 0
mov eax, dword [ebp - 0x78]
mov eax, dword [ebp + eax*4 - 0x2130]
cmp eax, dword [ebp - 0xba4]
jne 0x471e45
mov dword [ebp - 0x10cc], 1
jmp 0x471e4c
and dword [ebp - 0x10cc], 0
mov eax, dword [ebp - 0x10cc]
mov dword [ebp - 0xbac], eax
cmp dword [ebp - 0xbac], 0x6d4c
jg 0x471e70
mov dword [ebp - 0x154c], 1
jmp 0x471e77
and dword [ebp - 0x154c], 0
mov eax, dword [ebp - 0x78]
cmp dword [ebp - 0x154c], eax
jg 0x471e8e
mov dword [ebp - 0xbb4], 1
jmp 0x471e95
and dword [ebp - 0xbb4], 0
cmp dword [ebp - 0xbb4], 3
jne 0x471eaa
mov dword [ebp - 0x10d4], 1
jmp 0x471eb1
and dword [ebp - 0x10d4], 0
mov eax, dword [ebp - 0x1edc]
imul eax, dword [ebp - 0x10d4]
mov dword [ebp - 0x1660], eax
jmp 0x471c6c
jmp 0x471c42
mov dword [ebp - 4], 0x10
cmp dword [ebp - 0xbbc], 0x413
jge 0x471ef1
mov edx, dword [ebp - 0x1cd0]
mov ecx, 0xab2098
call fcn.0040b859
jmp 0x471f0d
or dword [ebp - 4], 0xffffffff
jmp 0x471f17
jmp 0x471ade
push 1
push 0x4fd7
push 0x2160
push 0x6ff0
push 0x1971
lea eax, [ebp - 0x1c4]
push eax
lea eax, [ebp - 0x25bc]
push eax
push 0x54a9
push 0
push 0x5a84
push 0x2cd
call fcn.0045c5d6
add esp, 0x2c
mov dword [ebp - 0x1364], 0x527b
mov dword [ebp - 0x1668], 0xa9b72c
cmp dword [ebp - 0x1364], 0x52a8
jle 0x47207d
and dword [ebp - 0x418], 0
jmp 0x471f93
mov eax, dword [ebp - 0x418]
inc eax
mov dword [ebp - 0x418], eax
cmp dword [ebp - 0x418], 0xc79
jge 0x47207d
and dword [ebp - 0x898], 0
jmp 0x471fb9
mov eax, dword [ebp - 0x898]
inc eax
mov dword [ebp - 0x898], eax
cmp dword [ebp - 0x898], 0x1ce4
jge 0x472078
and dword [ebp - 0x420], 0
jmp 0x471fdf
mov eax, dword [ebp - 0x420]
inc eax
mov dword [ebp - 0x420], eax
cmp dword [ebp - 0x420], 0x7235
jge 0x472073
and dword [ebp - 0x6b0], 0
jmp 0x472005
mov eax, dword [ebp - 0x6b0]
inc eax
mov dword [ebp - 0x6b0], eax
cmp dword [ebp - 0x6b0], 0x1eba
jge 0x47206e
mov eax, dword [ebp - 0x418]
mov ecx, dword [ebp - 0x898]
sar eax, cl
mov ecx, dword [ebp - 0x420]
add ecx, dword [ebp - 0x6b0]
or eax, ecx
cdq
mov dword [ebp - 0x19c0], eax
mov dword [ebp - 0x19bc], edx
push dword [ebp - 0x19bc]
push dword [ebp - 0x19c0]
lea ecx, [ebp - 0x2fc4]
call fcn.00401a48
pop ecx
pop ecx
mov ecx, eax
call fcn.00408fc8
push eax
call fcn.004aba17
pop ecx
lea ecx, [ebp - 0x2fc4]
call fcn.00408fbe
jmp 0x471ff8
jmp 0x471fd2
jmp 0x471fac
jmp 0x471f86
mov dword [ebp - 4], 0x12
cmp dword [ebp - 0x1364], 0x4ffa
jge 0x47209c
push dword [ebp - 0x1668]
call fcn.004aba17
pop ecx
jmp 0x4720b8
or dword [ebp - 4], 0xffffffff
jmp 0x4720c2
push 0x3565
push 0x36c2
push 1
lea eax, [ebp - 0x202c]
push eax
push 0
push 0x2f0e
lea eax, [ebp - 0x1c4]
push eax
call fcn.0046f429
add esp, 0x1c
push 0xf06
push 0x2733
push 0x7d5b
push 0x6459
push 0x154b
push 0x4976
push 0x526e
push 1
push 0x6942
push 0x5f33
push 0
push 0x747
call fcn.0046ed21
add esp, 0x30
mov dword [ebp - 0x1c4], 0
jmp 0x472142
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 3
jge 0x47215e
mov eax, dword [ebp - 0x1c4]
mov dword [ebp + eax*4 - 0x2d60], 0x6b5a7dd9
jmp 0x472135
mov dword [ebp - 0x428], 0xe0a8eac8
mov dword [ebp - 0x27fc], 0xef6b8f3d
mov dword [ebp - 0x2b78], 0x90d29729
mov dword [ebp - 0x2804], 0xffffffff
push 1
lea ecx, [ebp - 0x264c]
call fcn.004091fb
mov dword [ebp - 0x240], 0
jmp 0x4721ac
mov eax, dword [ebp - 0x240]
inc eax
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 3
jge 0x4721c8
mov eax, dword [ebp - 0x240]
mov dword [ebp + eax*4 - 0x2f64], 0
jmp 0x47219f
push 0x602b
push 0x51e9
push 0x14af
lea eax, [ebp - 0x264c]
push eax
push 1
push 1
lea eax, [ebp - 0x240]
push eax
call fcn.0045d1e1
add esp, 0x1c
mov dword [ebp - 0x428], 0
jmp 0x47220a
mov eax, dword [ebp - 0x428]
dec eax
mov dword [ebp - 0x428], eax
cmp dword [ebp - 0x428], 0xfffffff7
je 0x472264
mov dword [ebp - 0x7f8], 0xffffffff
mov dword [ebp - 0x2b34], 1
mov dword [ebp - 0x7f8], 0xffffffe3
jmp 0x472240
mov eax, dword [ebp - 0x7f8]
inc eax
mov dword [ebp - 0x7f8], eax
cmp dword [ebp - 0x7f8], 0xfffffffd
jge 0x472262
mov dword [ebp - 0xbc4], 0x47597a61
mov eax, dword [ebp - 0xbc4]
inc eax
mov dword [ebp - 0xbc4], eax
jmp 0x472233
jmp 0x4721fd
push 0
lea ecx, [ebp - 0x264c]
call fcn.004092e9
mov dword [ebp - 0x10dc], eax
mov eax, dword [ebp - 0x10dc]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x10dc]
mov dword [ecx], eax
lea ecx, [ebp - 0x264c]
call fcn.004092cd
mov eax, dword [ebp - 0x90]
cmp dword [ebp - 0x90], eax
je 0x4722ad
mov dword [ebp - 0x1ee4], 1
jmp 0x4722b4
and dword [ebp - 0x1ee4], 0
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x280c], eax
mov eax, dword [ebp - 0x90]
imul eax, dword [ebp - 0x90]
cmp eax, dword [ebp - 0x90]
jle 0x4722ea
cmp dword [ebp - 0x90], 0
je 0x4722ea
mov dword [ebp - 0xbcc], 1
jmp 0x4722f1
and dword [ebp - 0xbcc], 0
mov eax, dword [ebp - 0xbcc]
mov dword [ebp - 0x14ac], eax
cmp dword [ebp - 0x14ac], 0
jne 0x472316
push 0xfffffffffffffff7
pop eax
test eax, eax
jne 0x472316
and dword [ebp - 0xbd4], 0
jmp 0x472320
mov dword [ebp - 0xbd4], 1
mov eax, dword [ebp - 0xbd4]
mov dword [ebp - 0x10e4], eax
mov eax, dword [ebp - 0x10e4]
cmp dword [ebp - 0x90], eax
jge 0x472346
mov dword [ebp - 0xbdc], 1
jmp 0x47234d
and dword [ebp - 0xbdc], 0
mov eax, dword [ebp - 0xbdc]
mov dword [ebp - 0x136c], eax
mov eax, dword [ebp - 0x136c]
mov dword [ebp - 0xbe4], eax
push 0
lea ecx, [ebp - 0x25bc]
call fcn.004092e9
mov ecx, dword [ebp - 0xbe4]
mov dword [eax], ecx
mov eax, dword [ebp - 0x90]
cmp dword [ebp - 0xbe4], eax
jg 0x472394
mov dword [ebp - 0x1670], 1
jmp 0x47239b
and dword [ebp - 0x1670], 0
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x2b80], eax
push 0
lea ecx, [ebp - 0x202c]
call fcn.004092e9
mov esi, eax
push 1
lea ecx, [ebp - 0x202c]
call fcn.004092e9
mov ecx, dword [esi]
cmp ecx, dword [eax]
je 0x4723d5
mov dword [ebp - 0x10ec], 1
jmp 0x4723dc
and dword [ebp - 0x10ec], 0
push 0
lea ecx, [ebp - 0x202c]
call fcn.004092e9
mov ecx, dword [ebp - 0x10ec]
cmp ecx, dword [eax]
jle 0x4723ff
mov dword [ebp - 0xbec], 1
jmp 0x472406
and dword [ebp - 0xbec], 0
mov eax, dword [ebp - 0x90]
cmp eax, dword [ebp - 0xbec]
jl 0x472420
mov dword [ebp - 0x1568], 1
jmp 0x472427
and dword [ebp - 0x1568], 0
mov eax, dword [ebp - 0x1568]
mov dword [ebp - 0xbf4], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xbf4]
mov dword [ebp + eax - 0x2d60], ecx
lea ecx, [ebp - 0x202c]
call fcn.004092cd
lea ecx, [ebp - 0x25bc]
call fcn.004092cd
mov dword [ebp - 0x318], 0
mov dword [ebp - 0x438], 0x315362da
mov dword [ebp - 0x248], 0x1637c1d6
push 2
lea ecx, [ebp - 0x203c]
call fcn.004091fb
mov dword [ebp - 0x988], 0x66c4a87f
mov dword [ebp - 0x990], 0x112def90
mov dword [ebp - 0x2c8], 0xe619
mov dword [ebp - 0x430], 0
jmp 0x4724be
mov eax, dword [ebp - 0x430]
inc eax
mov dword [ebp - 0x430], eax
cmp dword [ebp - 0x430], 2
jge 0x4724e0
push dword [ebp - 0x430]
lea ecx, [ebp - 0x203c]
call fcn.004092e9
mov dword [eax], 0x7d0b0a35
jmp 0x4724b1
cmp dword [ebp - 0x318], 0x1dba
jl 0x4724f8
mov dword [ebp - 0x10f4], 1
jmp 0x4724ff
and dword [ebp - 0x10f4], 0
cmp dword [ebp - 0x10f4], 0x99244325
jne 0x472517
mov dword [ebp - 0x1374], 1
jmp 0x47251e
and dword [ebp - 0x1374], 0
mov eax, dword [ebp - 0x318]
mov dword [ebp - 0x438], eax
mov eax, dword [ebp - 0x318]
add eax, dword [ebp - 0x438]
add eax, dword [ebp - 0x248]
mov dword [ebp - 0xbfc], eax
push 0
lea ecx, [ebp - 0x203c]
call fcn.004092e9
mov ecx, dword [ebp - 0xbfc]
mov dword [eax], ecx
mov eax, dword [ebp - 0x248]
cmp dword [ebp - 0xbfc], eax
jg 0x472571
mov dword [ebp - 0x1cdc], 1
jmp 0x472578
and dword [ebp - 0x1cdc], 0
mov eax, dword [ebp - 0x988]
cmp dword [ebp - 0x988], eax
jne 0x472592
mov dword [ebp - 0xc04], 1
jmp 0x472599
and dword [ebp - 0xc04], 0
mov eax, dword [ebp - 0x1374]
cmp eax, dword [ebp - 0xc04]
je 0x4725b3
mov dword [ebp - 0x10fc], 1
jmp 0x4725ba
and dword [ebp - 0x10fc], 0
mov eax, dword [ebp - 0x10fc]
mov dword [ebp - 0x990], eax
cmp dword [ebp - 0x988], 0
jne 0x4725e1
cmp dword [ebp - 0x248], 0
jne 0x4725e1
and dword [ebp - 0xac4], 0
jmp 0x4725eb
mov dword [ebp - 0xac4], 1
push 0
lea ecx, [ebp - 0x203c]
call fcn.004092e9
mov ecx, dword [ebp - 0xac4]
mov dword [eax], ecx
cmp dword [ebp - 0xac4], 0xbd0d
je 0x472618
mov dword [ebp - 0xc0c], 1
jmp 0x47261f
and dword [ebp - 0xc0c], 0
mov eax, dword [ebp - 0x248]
cmp dword [ebp - 0xc0c], eax
je 0x472639
mov dword [ebp - 0x14b4], 1
jmp 0x472640
and dword [ebp - 0x14b4], 0
cmp dword [ebp - 0x14b4], 1
jae 0x472655
mov dword [ebp - 0xc14], 1
jmp 0x47265c
and dword [ebp - 0xc14], 0
mov eax, dword [ebp - 0x318]
cmp dword [ebp - 0xc14], eax
jne 0x472676
mov dword [ebp - 0x1104], 1
jmp 0x47267d
and dword [ebp - 0x1104], 0
imul eax, dword [ebp - 0x1104], 6
mov dword [ebp - 0x438], eax
mov eax, 0x39e22401
cmp eax, 0xfffffffa
jle 0x4726a0
mov dword [ebp - 0x1678], 1
jmp 0x4726a7
and dword [ebp - 0x1678], 0
mov eax, 0x42506ed5
test eax, eax
je 0x472901
mov dword [ebp - 0x1680], 7
mov dword [ebp - 0x1eec], 0
mov dword [ebp - 0x1ce8], 0x8991cd3c
mov dword [ebp - 0x1688], 1
push 3
lea ecx, [ebp - 0x2454]
call fcn.004091fb
mov dword [ebp - 0x6b8], 0
jmp 0x472702
mov eax, dword [ebp - 0x6b8]
inc eax
mov dword [ebp - 0x6b8], eax
cmp dword [ebp - 0x6b8], 3
jge 0x472724
push dword [ebp - 0x6b8]
lea ecx, [ebp - 0x2454]
call fcn.004092e9
mov dword [eax], 1
jmp 0x4726f5
push 0x4c2a
lea eax, [ebp - 0x1eec]
push eax
push 0
lea eax, [ebp - 0x438]
push eax
lea eax, [ebp - 0x1680]
push eax
lea eax, [ebp - 0x1ce8]
push eax
push 0x15a2
lea eax, [ebp - 0x2c8]
push eax
lea eax, [ebp - 0x2454]
push eax
lea eax, [ebp - 0x203c]
push eax
push 0
lea eax, [ebp - 0x318]
push eax
push 1
push 0x7b8d
lea eax, [ebp - 0x1688]
push eax
lea eax, [ebp - 0x248]
push eax
lea eax, [ebp - 0x990]
push eax
call fcn.00468d20
add esp, 0x44
mov dword [ebp - 0xc1c], 0x264b
mov dword [ebp - 0x1ef4], 0xa9b770
cmp dword [ebp - 0xc1c], 0x2930
jle 0x47288d
and dword [ebp - 0x448], 0
jmp 0x4727c8
mov eax, dword [ebp - 0x448]
inc eax
mov dword [ebp - 0x448], eax
cmp dword [ebp - 0x448], 0x6759
jge 0x47288d
and dword [ebp - 0x928], 0
jmp 0x4727ee
mov eax, dword [ebp - 0x928]
inc eax
mov dword [ebp - 0x928], eax
cmp dword [ebp - 0x928], 0x10c2
jge 0x472888
and dword [ebp - 0x440], 0
jmp 0x472814
mov eax, dword [ebp - 0x440]
inc eax
mov dword [ebp - 0x440], eax
cmp dword [ebp - 0x440], 0x576c
jge 0x472883
and dword [ebp - 0x6c0], 0
jmp 0x472836
mov eax, dword [ebp - 0x6c0]
inc eax
mov dword [ebp - 0x6c0], eax
cmp dword [ebp - 0x6c0], 0x1b0
jge 0x472881
mov eax, dword [ebp - 0x928]
sub eax, dword [ebp - 0x440]
mov ecx, dword [ebp - 0x6c0]
sar eax, cl
and eax, dword [ebp - 0x448]
cdq
mov dword [ebp - 0x19cc], eax
mov dword [ebp - 0x19c8], edx
push dword [ebp - 0x19c8]
push dword [ebp - 0x19cc]
mov ecx, 0xab2098
call fcn.00408fd3
jmp 0x472829
jmp 0x472807
jmp 0x4727e1
jmp 0x4727bb
push 0x69e5
push 1
push 0x70c0
push 0x74c9
push 1
call fcn.0045d5f6
add esp, 0x14
mov dword [ebp - 4], 0x14
cmp dword [ebp - 0xc1c], 0x2343
jge 0x4728cb
mov edx, dword [ebp - 0x1ef4]
mov ecx, 0xab2098
call fcn.0040b859
jmp 0x4728e7
or dword [ebp - 4], 0xffffffff
jmp 0x4728f1
lea ecx, [ebp - 0x2454]
call fcn.004092cd
jmp 0x472add
mov dword [ebp - 0x1cf4], 0xffffffff
mov dword [ebp - 0x2c8], 0x13
jmp 0x472924
mov eax, dword [ebp - 0x2c8]
inc eax
mov dword [ebp - 0x2c8], eax
cmp dword [ebp - 0x2c8], 0x1f
jl 0x472a9f
mov dword [ebp - 0x1690], 0xfffffffe
push 0x11f9
push 0x4c10
lea eax, [ebp - 0x1690]
push eax
push 0x4da1
push 0
push 0x5ae8
lea eax, [ebp - 0x990]
push eax
push 0
call fcn.00466589
add esp, 0x20
mov dword [ebp - 0x137c], 0x207f
mov dword [ebp - 0x1698], 0xa9b7d4
cmp dword [ebp - 0x137c], 0x2181
jle 0x472a39
and dword [ebp - 0x800], 0
jmp 0x4729a3
mov eax, dword [ebp - 0x800]
inc eax
mov dword [ebp - 0x800], eax
cmp dword [ebp - 0x800], 0x62f0
jge 0x472a39
and dword [ebp - 0x450], 0
jmp 0x4729c9
mov eax, dword [ebp - 0x450]
inc eax
mov dword [ebp - 0x450], eax
cmp dword [ebp - 0x450], 0xa98
jge 0x472a34
and dword [ebp - 0x6c8], 0
jmp 0x4729eb
mov eax, dword [ebp - 0x6c8]
inc eax
mov dword [ebp - 0x6c8], eax
cmp dword [ebp - 0x6c8], 0x6507
jge 0x472a32
mov eax, dword [ebp - 0x800]
mov ecx, dword [ebp - 0x450]
shl eax, cl
mov ecx, dword [ebp - 0x6c8]
shl eax, cl
cdq
mov dword [ebp - 0x19d8], eax
mov dword [ebp - 0x19d4], edx
push dword [ebp - 0x19d4]
push dword [ebp - 0x19d8]
mov ecx, 0xab2098
call fcn.00408fd3
jmp 0x4729de
jmp 0x4729bc
jmp 0x472996
push 0
push 0x6a12
lea eax, [ebp - 0x1cf4]
push eax
push 0
call fcn.0045db8e
add esp, 0x10
mov dword [ebp - 4], 0x16
cmp dword [ebp - 0x137c], 0x1fe3
jge 0x472a74
mov edx, dword [ebp - 0x1698]
mov ecx, 0xab2098
call fcn.0040b859
jmp 0x472a90
or dword [ebp - 4], 0xffffffff
jmp 0x472a9a
jmp 0x472917
mov byte [ebp - 0x150], 0
movzx eax, byte [ebp - 0x150]
test eax, eax
je 0x472add
push 0x30b0
push 0x1167
push 0x4f5f
push 0x4f47
push 1
push 0
push 0x64d
push 1
push 0x3c4b
call fcn.00466076
add esp, 0x24
lea ecx, [ebp - 0x203c]
call fcn.004092cd
mov byte [ebp - 0x35], 0
mov dword [ebp - 0x1efc], 0x3905
mov dword [ebp - 0x1d00], 0xfffffffc
push 4
lea ecx, [ebp - 0x2948]
call fcn.004091fb
mov dword [ebp - 0x250], 0
jmp 0x472b26
mov eax, dword [ebp - 0x250]
inc eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 1
jge 0x472b42
mov eax, dword [ebp - 0x250]
mov dword [ebp + eax*4 - 0x16a0], 7
jmp 0x472b19
push 0x7c97
lea eax, [ebp - 0x2948]
push eax
lea eax, [ebp - 0x250]
push eax
push 0x3e57
push 0xf6c
push 1
push 0x75b2
push 0xa31
push 0x7a21
push 0x5ac4
push 0x5bd0
push 1
push 0x265e
call fcn.0045d774
add esp, 0x34
mov eax, dword [ebp - 0x1efc]
mov dword [ebp - 0xc24], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xc24]
mov dword [ebp + eax - 0x16a0], ecx
mov eax, dword [ebp - 0xc24]
mov dword [ebp - 0x1d00], eax
lea ecx, [ebp - 0x2948]
call fcn.004092cd
mov dword [ebp - 0x50], 0xfffffffa
push 1
lea ecx, [ebp - 0x204c]
call fcn.004091fb
mov dword [ebp - 0xc34], 0x31cd1ac8
push 1
lea ecx, [ebp - 0x21d8]
call fcn.004091fb
mov dword [ebp - 0xa8c], 0x7d239f94
mov dword [ebp - 0x22b0], 0x6042c8cd
mov dword [ebp - 0x22ac], 0x6042c8cd
mov dword [ebp - 0x22a8], 0x6042c8cd
mov dword [ebp - 0x22a4], 0x6042c8cd
push 0x3b1c
lea eax, [ebp - 0x21c]
push eax
push 0x1048
push 0
push 1
push 0
lea eax, [ebp - 0x204c]
push eax
push 0x4396
call fcn.00468760
add esp, 0x20
push 0x7e6d
push 0x6534
lea eax, [ebp - 0x21d8]
push eax
push 0x7fef
push 0
lea eax, [ebp - 0x21c]
push eax
push 1
call fcn.0046b127
add esp, 0x1c
mov dword [ebp - 0x21c], 0
jmp 0x472c89
mov eax, dword [ebp - 0x21c]
inc eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 3
jge 0x472ca5
mov eax, dword [ebp - 0x21c]
mov dword [ebp + eax*4 - 0x2d24], 1
jmp 0x472c7c
mov dword [ebp - 0x50], 0
jmp 0x472cb5
mov eax, dword [ebp - 0x50]
dec eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0xffffffee
jne 0x473023
mov dword [ebp - 0x460], 0x6173
mov dword [ebp - 0xa40], 0xe6b93388
mov dword [ebp - 0x110c], 0x6947
mov dword [ebp - 0x16a8], 0xa9b820
cmp dword [ebp - 0x110c], 0x6ad3
jle 0x472d6a
and dword [ebp - 0x458], 0
jmp 0x472d09
mov eax, dword [ebp - 0x458]
inc eax
mov dword [ebp - 0x458], eax
cmp dword [ebp - 0x458], 0x6b99
jge 0x472d6a
and dword [ebp - 0x8a0], 0
jmp 0x472d2b
mov eax, dword [ebp - 0x8a0]
inc eax
mov dword [ebp - 0x8a0], eax
cmp dword [ebp - 0x8a0], 0x5cd1
jge 0x472d68
mov eax, dword [ebp - 0x458]
or eax, dword [ebp - 0x8a0]
cdq
mov dword [ebp - 0x19e4], eax
mov dword [ebp - 0x19e0], edx
push dword [ebp - 0x19e0]
push dword [ebp - 0x19e4]
mov ecx, 0xab2098
call fcn.00408fd3
jmp 0x472d1e
jmp 0x472cfc
mov dword [ebp - 0x2400], 5
mov dword [ebp - 0x23fc], 5
mov dword [ebp - 0x23f8], 5
mov dword [ebp - 0x23f4], 5
lea ecx, [ebp - 0x965]
call fcn.004092f8
push eax
lea eax, [ebp - 0x23f0]
push eax
lea eax, [ebp - 0x2400]
push eax
lea ecx, [ebp - 0x2dfc]
call fcn.004092fb
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x228c]
call fcn.004092a7
mov dword [ebp - 4], 0x18
cmp dword [ebp - 0x110c], 0x6676
jge 0x472dea
mov edx, dword [ebp - 0x16a8]
mov ecx, 0xab2098
call fcn.0040b859
jmp 0x472e06
or dword [ebp - 4], 0xffffffff
jmp 0x472e10
mov dword [ebp - 0x998], 1
mov dword [ebp - 0xc3c], 0x360abed9
push 0x1d04
push 0
push 1
call fcn.0045e7d9
add esp, 0xc
cmp dword [ebp - 0x50], 0
jne 0x472f48
mov eax, dword [ebp - 0x460]
mov dword [ebp - 0x2814], eax
mov eax, dword [ebp - 0x460]
mov dword [ebp - 0x2b44], eax
mov eax, 0x3cf68729
sub eax, dword [ebp - 0xa40]
mov dword [ebp - 0xc2c], eax
push 1
lea ecx, [ebp - 0x228c]
call fcn.004092e9
mov ecx, dword [ebp - 0xc2c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0xc2c], eax
jl 0x472e94
mov dword [ebp - 0x1f04], 1
jmp 0x472e9b
and dword [ebp - 0x1f04], 0
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x281c], eax
mov esi, dword [ebp - 0x50]
push 0
lea ecx, [ebp - 0x204c]
call fcn.004092e9
mov dword [eax], esi
push 1
lea ecx, [ebp - 0x228c]
call fcn.004092e9
mov eax, dword [eax]
neg eax
cmp eax, dword [ebp - 0xa40]
jg 0x472edb
mov dword [ebp - 0x16b0], 1
jmp 0x472ee2
and dword [ebp - 0x16b0], 0
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x2b88], eax
push 0
lea ecx, [ebp - 0x204c]
call fcn.004092e9
cmp dword [eax], 0
je 0x472f01
cmp dword [ebp - 0x50], 0
mov eax, dword [ebp - 0x998]
cmp dword [ebp - 0x50], eax
jne 0x472f1b
cmp dword [ebp - 0x50], 0
jne 0x472f1b
and dword [ebp - 0x1554], 0
jmp 0x472f25
mov dword [ebp - 0x1554], 1
mov eax, dword [ebp - 0x1554]
mov dword [ebp - 0xc34], eax
mov eax, dword [ebp - 0x460]
cmp dword [ebp - 0xc34], eax
jle 0x472f48
and dword [ebp - 0x1d0c], 0
jmp 0x472f52
mov dword [ebp - 0x1d0c], 1
mov eax, dword [ebp - 0x460]
mov dword [ebp - 0x2824], eax
mov eax, dword [ebp - 0xa40]
mov dword [ebp - 0x2b54], eax
mov eax, dword [ebp - 0x998]
mov dword [ebp - 0x282c], eax
push 1
lea ecx, [ebp - 0x228c]
call fcn.004092e9
mov esi, eax
push 0
lea ecx, [ebp - 0x21d8]
call fcn.004092e9
mov ecx, dword [esi]
cmp ecx, dword [eax]
jge 0x472fa4
mov dword [ebp - 0x1114], 1
jmp 0x472fab
and dword [ebp - 0x1114], 0
mov eax, dword [ebp - 0x998]
add eax, dword [ebp - 0x1114]
mov dword [ebp - 0xc3c], eax
mov eax, dword [ebp - 0xc3c]
mov dword [ebp - 0xa8c], eax
mov eax, dword [ebp - 0xa8c]
sub eax, 0x75f07c6d
cmp eax, 0xf390197f
jbe 0x472ff9
push 0
lea ecx, [ebp - 0x204c]
call fcn.004092e9
cmp dword [eax], 0
je 0x472ff9
mov dword [ebp - 0x1384], 1
jmp 0x473000
and dword [ebp - 0x1384], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1384]
mov dword [ebp + eax - 0x22b0], ecx
lea ecx, [ebp - 0x228c]
call fcn.004092cd
jmp 0x472cae
cmp dword [ebp - 0x50], 0
jne 0x473038
cmp dword [ebp - 0x50], 0
jne 0x473038
and dword [ebp - 0xc4c], 0
jmp 0x473042
mov dword [ebp - 0xc4c], 1
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x22b0], 0
jne 0x47305e
mov dword [ebp - 0xc44], 1
jmp 0x473065
and dword [ebp - 0xc44], 0
push 0
lea ecx, [ebp - 0x21d8]
call fcn.004092e9
mov eax, dword [eax]
cmp eax, dword [ebp - 0xc44]
jne 0x473088
mov dword [ebp - 0x111c], 1
jmp 0x47308f
and dword [ebp - 0x111c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2d24]
cmp dword [ebp - 0x111c], eax
jg 0x4730b0
mov dword [ebp - 0x14bc], 1
jmp 0x4730b7
and dword [ebp - 0x14bc], 0
mov eax, dword [ebp - 0xc4c]
cmp eax, dword [ebp - 0x14bc]
jle 0x4730d1
mov dword [ebp - 0xc54], 1
jmp 0x4730d8
and dword [ebp - 0xc54], 0
mov eax, dword [ebp - 0xc54]
mov dword [ebp - 0xa8c], eax
lea ecx, [ebp - 0x21d8]
call fcn.004092cd
lea ecx, [ebp - 0x204c]
call fcn.004092cd
mov dword [ebp - 0x9c8], 0
mov dword [ebp - 0x1570], 0x23a0
mov dword [ebp - 0x16c8], 0xa9b888
cmp dword [ebp - 0x1570], 0x2687
jle 0x47319b
and dword [ebp - 0x6d0], 0
jmp 0x47313a
mov eax, dword [ebp - 0x6d0]
inc eax
mov dword [ebp - 0x6d0], eax
cmp dword [ebp - 0x6d0], 0x4d6d
jge 0x47319b
and dword [ebp - 0x468], 0
jmp 0x47315c
mov eax, dword [ebp - 0x468]
inc eax
mov dword [ebp - 0x468], eax
cmp dword [ebp - 0x468], 0x482e
jge 0x473199
mov eax, dword [ebp - 0x6d0]
add eax, dword [ebp - 0x468]
cdq
mov dword [ebp - 0x19f0], eax
mov dword [ebp - 0x19ec], edx
push dword [ebp - 0x19ec]
push dword [ebp - 0x19f0]
mov ecx, 0xab2098
call fcn.00408fd3
jmp 0x47314f
jmp 0x47312d
mov dword [ebp - 0x16b8], 5
mov dword [ebp - 0x1d18], 0x50dfa014
mov dword [ebp - 0x808], 0
jmp 0x4731c8
mov eax, dword [ebp - 0x808]
inc eax
mov dword [ebp - 0x808], eax
cmp dword [ebp - 0x808], 3
jge 0x4731e4
mov eax, dword [ebp - 0x808]
mov dword [ebp + eax*4 - 0xb14], 0x75b57fd5
jmp 0x4731bb
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xb14], 0
jmp 0x473212
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb14]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xb14], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xb14], 0xffffffeb
jle 0x473395
mov dword [ebp - 0x1f0c], 0x98ab5457
mov dword [ebp - 0x9a0], 0x86524f20
mov dword [ebp - 0xa48], 0x49a2f381
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xb14]
mov dword [ebp - 0x2b90], eax
mov eax, dword [ebp - 0xa48]
mov dword [ebp - 0x2834], eax
mov eax, dword [ebp - 0x16b8]
cmp dword [ebp - 0x9a0], eax
je 0x47327c
mov dword [ebp - 0x1124], 1
jmp 0x473283
and dword [ebp - 0x1124], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb14]
add eax, dword [ebp - 0x1124]
cmp dword [ebp - 0x1f0c], eax
jg 0x4732b7
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xb14], 0
jne 0x4732b7
and dword [ebp - 0x16c0], 0
jmp 0x4732c1
mov dword [ebp - 0x16c0], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb14]
cmp dword [ebp - 0xa48], eax
je 0x4732e2
mov dword [ebp - 0xc5c], 1
jmp 0x4732e9
and dword [ebp - 0xc5c], 0
mov eax, dword [ebp - 0xc5c]
sub eax, 3
imul eax, eax, 0x660d
cmp eax, dword [ebp - 0x9a0]
jle 0x47330c
mov dword [ebp - 0x138c], 1
jmp 0x473313
and dword [ebp - 0x138c], 0
mov eax, dword [ebp - 0x9a0]
cmp dword [ebp - 0x138c], eax
jge 0x47332d
mov dword [ebp - 0xc64], 1
jmp 0x473334
and dword [ebp - 0xc64], 0
cmp dword [ebp - 0xc64], 0xdfcf
jne 0x47335c
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xb14], 0
je 0x47335c
mov dword [ebp - 0x112c], 1
jmp 0x473363
and dword [ebp - 0x112c], 0
mov eax, dword [ebp - 0xa48]
cmp dword [ebp - 0x112c], eax
je 0x47337d
mov dword [ebp - 0xc6c], 1
jmp 0x473384
and dword [ebp - 0xc6c], 0
mov eax, dword [ebp - 0xc6c]
mov dword [ebp - 0x1d18], eax
jmp 0x4731f7
mov dword [ebp - 4], 0x1a
cmp dword [ebp - 0x1570], 0x2086
jge 0x4733b8
mov edx, dword [ebp - 0x16c8]
mov ecx, 0xab2098
call fcn.0040b859
jmp 0x4733d4
or dword [ebp - 4], 0xffffffff
jmp 0x4733de
mov dword [ebp - 0xad4], 0x315362da
mov dword [ebp - 0x1f14], 8
mov dword [ebp - 0x2b64], 0xfffffffd
mov dword [ebp - 0x1cc], 0xca9869ec
mov dword [ebp - 0x283c], 1
mov dword [ebp - 0x2b98], 0xe3cf9575
push 4
lea ecx, [ebp - 0x2274]
call fcn.004091fb
mov dword [ebp - 0x16d0], 0x8cb667f5
push 0x2727
lea eax, [ebp - 0x2844]
push eax
push 0
lea eax, [ebp - 0x2274]
push eax
push 1
push 0x7c06
call fcn.0045e99a
add esp, 0x18
lea eax, [ebp - 0x1f14]
push eax
push 1
push 0
push 0x3fc6
push 0xfd3
push 0x2ce7
call fcn.0045bbb4
add esp, 0x18
mov dword [ebp - 0x1cc], 3
jmp 0x473490
mov eax, dword [ebp - 0x1cc]
dec eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 0
jl 0x47352e
mov dword [ebp - 0xc74], 0xfffc
lea eax, [ebp - 0x1cc]
push eax
lea eax, [ebp - 0x2274]
push eax
lea eax, [ebp - 0xc74]
push eax
push 0
push 0
lea eax, [ebp - 0x16d0]
push eax
push 1
call fcn.00469d60
add esp, 0x1c
lea eax, [ebp - 0xc74]
push eax
push 0
push 0x113b
push 0x830
push 0x434
push 0x2da7
push 0x2eef
push 0xf6d
push 0x4b53
push 0x5066
lea eax, [ebp - 0x2274]
push eax
lea eax, [ebp - 0x1cc]
push eax
push 1
push 0x77b4
push 0x3ae5
push 0x6d21
call fcn.0046ba4c
add esp, 0x40
jmp 0x473483
lea ecx, [ebp - 0x2274]
call fcn.004092cd
mov dword [ebp - 0x528], 0x1637c1d6
push 1
lea ecx, [ebp - 0x2460]
call fcn.004091fb
lea eax, [ebp - 0x2b74]
push eax
push 0x6fef
push 1
push 0x571d
push 0x261c
push 0
push 0x20ad
push 0
push 0x60d0
push 0x35d2
lea eax, [ebp - 0x2460]
push eax
push 0x4a7c
push 0x3dca
push 0x64de
call fcn.0046248f
add esp, 0x38
push 0x139f
push 0
lea eax, [ebp - 0x2460]
push eax
push 1
push 0x7e03
call fcn.0045a2b4
add esp, 0x14
mov byte [ebp - 0x12c], 0
lea eax, [ebp - 0x12c]
push eax
push 1
push 0x60cb
push 0x783b
push 0
push 1
call fcn.00469344
add esp, 0x18
lea ecx, [ebp - 0x2460]
call fcn.004092cd
push 2
lea ecx, [ebp - 0x209c]
call fcn.004091fb
mov dword [ebp - 0x1d24], 0xffff
push 1
lea ecx, [ebp - 0x2544]
call fcn.004091fb
mov dword [ebp - 0x1d30], 0xdd972c40
mov dword [ebp - 0x16d8], 7
push 2
lea ecx, [ebp - 0x24a8]
call fcn.004091fb
mov dword [ebp - 0x284c], 0
mov dword [ebp - 0x16e0], 0xba5b
push 3
lea ecx, [ebp - 0x2490]
call fcn.004091fb
mov dword [ebp - 0x16e8], 6
push 2
lea ecx, [ebp - 0x2478]
call fcn.004091fb
mov dword [ebp - 0x1134], 0
mov dword [ebp - 0x1f1c], 0xf4aca62e
push 0x2621
lea eax, [ebp - 0x2544]
push eax
push 0
push 0x4ede
push 0x7569
lea eax, [ebp - 0x80]
push eax
push 0
call fcn.0045b8f4
add esp, 0x1c
mov dword [ebp - 0x80], 0
jmp 0x4736ae
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 2
jge 0x4736ca
push dword [ebp - 0x80]
lea ecx, [ebp - 0x24a8]
call fcn.004092e9
mov dword [eax], 0x32e26595
jmp 0x4736a7
lea eax, [ebp - 0x80]
push eax
push 1
push 0x5eb1
lea eax, [ebp - 0x2490]
push eax
push 0
call fcn.0045d5f6
add esp, 0x14
mov dword [ebp - 0x80], 0
jmp 0x4736f6
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 2
jge 0x473712
push dword [ebp - 0x80]
lea ecx, [ebp - 0x2478]
call fcn.004092e9
mov dword [eax], 0x5dbd55ad
jmp 0x4736ef
lea eax, [ebp - 0x2490]
push eax
push 0x60c8
lea eax, [ebp - 0x1d24]
push eax
push 1
push 0x347b
lea eax, [ebp - 0x16d8]
push eax
lea eax, [ebp - 0x2544]
push eax
lea eax, [ebp - 0x1f1c]
push eax
lea eax, [ebp - 0x24a8]
push eax
lea eax, [ebp - 0x2478]
push eax
push 0
lea eax, [ebp - 0x16e0]
push eax
lea eax, [ebp - 0x1134]
push eax
lea eax, [ebp - 0x1d30]
push eax
lea eax, [ebp - 0x16e8]
push eax
push 0x3764
call fcn.0045eac1
add esp, 0x40
mov dword [ebp - 0xc7c], 0x6115
mov dword [ebp - 0x1f24], 0xa9b8c8
cmp dword [ebp - 0xc7c], 0x6220
jle 0x473834
and dword [ebp - 0x470], 0
jmp 0x4737b4
mov eax, dword [ebp - 0x470]
inc eax
mov dword [ebp - 0x470], eax
cmp dword [ebp - 0x470], 0x7ade
jge 0x473834
and dword [ebp - 0x6d8], 0
jmp 0x4737d6
mov eax, dword [ebp - 0x6d8]
inc eax
mov dword [ebp - 0x6d8], eax
cmp dword [ebp - 0x6d8], 0x66fe
jge 0x47382f
mov eax, dword [ebp - 0x470]
and eax, dword [ebp - 0x6d8]
cdq
mov dword [ebp - 0x19fc], eax
mov dword [ebp - 0x19f8], edx
push dword [ebp - 0x19f8]
push dword [ebp - 0x19fc]
lea ecx, [ebp - 0x318c]
call fcn.00401a48
pop ecx
pop ecx
mov ecx, eax
call fcn.00408fc8
push eax
call fcn.004aba17
pop ecx
lea ecx, [ebp - 0x318c]
call fcn.00408fbe
jmp 0x4737c9
jmp 0x4737a7
push 1
push 1
push 0x7c2c
lea eax, [ebp - 0x1134]
push eax
push 0x3cb1
call fcn.0045daef
add esp, 0x14
mov dword [ebp - 4], 0x1c
cmp dword [ebp - 0xc7c], 0x5dc0
jge 0x473870
push dword [ebp - 0x1f24]
call fcn.004aba17
pop ecx
jmp 0x47388c
or dword [ebp - 4], 0xffffffff
jmp 0x473896
lea ecx, [ebp - 0x2478]
call fcn.004092cd
lea ecx, [ebp - 0x2490]
call fcn.004092cd
lea ecx, [ebp - 0x24a8]
call fcn.004092cd
lea ecx, [ebp - 0x2544]
call fcn.004092cd
mov dword [ebp - 0x13ac], 0x66c4a87f
mov dword [ebp - 0x64], 0xffffffff
mov dword [ebp - 0x9a8], 0xb821342f
mov dword [ebp - 0xec], 0
jmp 0x4738f6
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 3
jge 0x473912
mov eax, dword [ebp - 0xec]
mov dword [ebp + eax*4 - 0x2d3c], 0xffffffff
jmp 0x4738e9
mov dword [ebp - 0xec], 0
jmp 0x47392b
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 3
jge 0x473947
mov eax, dword [ebp - 0xec]
mov dword [ebp + eax*4 - 0x2958], 0
jmp 0x47391e
mov dword [ebp - 0x1394], 0x2bcd
mov dword [ebp - 0x16f0], 0xa9b928
cmp dword [ebp - 0x1394], 0x2c87
jle 0x473a5b
push 0x59f
push 0x167a
push 0x19f6
call dword [0xab551c]
and dword [ebp - 0x480], 0
jmp 0x473996
mov eax, dword [ebp - 0x480]
inc eax
mov dword [ebp - 0x480], eax
cmp dword [ebp - 0x480], 0x52b8
jge 0x473a5b
and dword [ebp - 0x478], 0
jmp 0x4739bc
mov eax, dword [ebp - 0x478]
inc eax
mov dword [ebp - 0x478], eax
cmp dword [ebp - 0x478], 0x2bb2
jge 0x473a56
and dword [ebp - 0x8f0], 0
jmp 0x4739e2
cmp dword [ebp - 0x8f0], 0x2764
jge 0x473a51
and dword [ebp - 0x6e0], 0
jmp 0x473a04
cmp dword [ebp - 0x6e0], 0x479f
jge 0x473a4f
jmp 0x4739af
jmp 0x473989
push 0x3291
push 0
push 0x3d4c
push 0
lea eax, [ebp - 0x64]
push eax
call fcn.0045bfc5
add esp, 0x14
mov dword [ebp - 4], 0x1e
cmp dword [ebp - 0x1394], 0x2aa8
jge 0x473a98
mov edx, dword [ebp - 0x16f0]
mov ecx, 0xab2098
call fcn.0040b859
jmp 0x473ab4
or dword [ebp - 4], 0xffffffff
jmp 0x473abe
mov dword [ebp - 0xc94], 0x2bdc
mov dword [ebp - 0x1d3c], 0xa9b960
cmp dword [ebp - 0xc94], 0x2c8f
jle 0x473bdf
and dword [ebp - 0x6e8], 0
jmp 0x473af8
cmp dword [ebp - 0x6e8], 0x72a1
jge 0x473bdf
and dword [ebp - 0x488], 0
jmp 0x473b1e
cmp dword [ebp - 0x488], 0x1b56
jge 0x473bda
cmp dword [ebp - 0x64], 0
jne 0x473c97
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x2ba0], eax
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x9a8], eax
mov eax, dword [ebp - 0x9a8]
mov dword [ebp - 0x2854], eax
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x2ba8], eax
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x9a8], eax
jne 0x473c27
mov dword [ebp - 0xadc], 1
jmp 0x473c2e
and dword [ebp - 0xadc], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xadc]
mov dword [ebp + eax - 0x2d3c], ecx
mov eax, dword [ebp - 0xadc]
sub eax, dword [ebp - 0x64]
cmp eax, dword [ebp - 0x64]
jl 0x473c5b
mov dword [ebp - 0xc84], 1
jmp 0x473c62
and dword [ebp - 0xc84], 0
mov eax, dword [ebp - 0x64]
add eax, dword [ebp - 0xc84]
cmp dword [ebp - 0x64], eax
je 0x473c7c
mov dword [ebp - 0xc8c], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2958]
cmp dword [ebp - 0xc8c], eax
jg 0x473cc2
mov dword [ebp - 0x14c4], 1
jmp 0x473cc9
and dword [ebp - 0x14c4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2958]
mov ecx, dword [ebp - 0x14c4]
lea eax, [ecx + eax + 0xfffa]
mov dword [ebp - 0x64], eax
mov dword [ebp - 4], 0x20
cmp dword [ebp - 0xc94], 0x28e9
jge 0x473d05
push dword [ebp - 0x1d3c]
call fcn.004aba17
pop ecx
jmp 0x473d21
mov eax, dword [ebp - 0x181c]
mov dword [ebp - 0x1864], eax
mov eax, dword [ebp - 0x1824]
mov dword [ebp - 0x186c], eax
mov eax, dword [ebp - 0x182c]
mov dword [ebp - 0x1874], eax
mov eax, dword [ebp - 0x1834]
mov dword [ebp - 0x187c], eax
mov eax, dword [ebp - 0x183c]
mov dword [ebp - 0x1884], eax
mov eax, dword [ebp - 0x1844]
mov dword [ebp - 0x188c], eax
mov eax, dword [ebp - 0x184c]
mov dword [ebp - 0x189c], eax
mov eax, dword [ebp - 0x1854]
mov dword [ebp - 0x18a4], eax
mov eax, dword [ebp - 0x185c]
mov dword [ebp - 0x18ac], eax
mov eax, dword [ebp - 0x1864]
mov dword [ebp - 0x18dc], eax
mov eax, dword [ebp - 0x186c]
mov dword [ebp - 0x14f8], eax
mov eax, dword [ebp - 0x1874]
mov dword [ebp - 0x18cc], eax
mov eax, dword [ebp - 0x187c]
mov dword [ebp - 0xa64], eax
mov eax, dword [ebp - 0x1884]
mov dword [ebp - 0x14f0], eax
mov dword [ebp - 0x14e8], 0x3ff
mov dword [ebp - 0x1894], 0xa9cbac
cmp dword [ebp - 0x14e8], 0x79c
jle 0x486f4f
push 0
push 0
call dword [0xab53f0]
and dword [ebp - 0x914], 0
jmp 0x486e64
mov eax, dword [ebp - 0x914]
inc eax
mov dword [ebp - 0x914], eax
cmp dword [ebp - 0x914], 0x661f
jge 0x486f4f
and dword [ebp - 0x91c], 0
jmp 0x486e8a
mov eax, dword [ebp - 0x91c]
inc eax
mov dword [ebp - 0x91c], eax
cmp dword [ebp - 0x91c], 0x6392
jge 0x486f4a
and dword [ebp - 0x924], 0
jmp 0x486eb0
mov eax, dword [ebp - 0x924]
inc eax
mov dword [ebp - 0x924], eax
cmp dword [ebp - 0x924], 0x3324
jge 0x486f45
and dword [ebp - 0x92c], 0
jmp 0x486ed6
mov eax, dword [ebp - 0x92c]
inc eax
mov dword [ebp - 0x92c], eax
cmp dword [ebp - 0x92c], 0x6d64
jge 0x486f40
mov eax, dword [ebp - 0x914]
cdq
idiv dword [ebp - 0x91c]
add edx, dword [ebp - 0x924]
mov ecx, dword [ebp - 0x92c]
sar edx, cl
mov eax, edx
cdq
mov dword [ebp - 0x1d98], eax
mov dword [ebp - 0x1d94], edx
push dword [ebp - 0x1d94]
push dword [ebp - 0x1d98]
lea ecx, [ebp - 0x3330]
call fcn.00401a48
pop ecx
pop ecx
mov ecx, eax
call fcn.00408fc8
push eax
call fcn.004aba17
pop ecx
lea ecx, [ebp - 0x3330]
call fcn.00408fbe
jmp 0x486ec9
jmp 0x486ea3
jmp 0x486e7d
jmp 0x486e57
mov eax, dword [ebp - 0x188c]
mov dword [ebp - 0x934], eax
mov dword [ebp - 4], 0xae
cmp dword [ebp - 0x14e8], 0x1cc
jge 0x486f7a
push dword [ebp - 0x1894]
call fcn.004aba17
pop ecx
jmp 0x486f96
or dword [ebp - 4], 0xffffffff
jmp 0x486fa0
mov eax, dword [ebp - 0x189c]
mov dword [ebp - 0x18b4], eax
mov eax, dword [ebp - 0x18a4]
mov dword [ebp - 0x18c4], eax
mov eax, dword [ebp - 0x18ac]
mov dword [ebp - 0x18d4], eax
mov eax, dword [ebp - 0xa64]
mov eax, dword [eax]
mov dword [ebp - 0x2c1c], eax
mov eax, dword [ebp - 0x14f0]
mov ecx, dword [ebp - 0x14f8]
mov ecx, dword [ecx]
mov dword [eax], ecx
mov eax, dword [ebp - 0x14f0]
mov eax, dword [eax]
sub eax, 0x868bb4a
mov ecx, dword [ebp - 0xa64]
mov dword [ecx], eax
mov eax, dword [ebp - 0xa64]
mov eax, dword [eax]
mov dword [ebp - 0x27a4], eax
mov eax, dword [ebp - 0x934]
mov eax, dword [eax]
mov dword [ebp - 0x2ad4], eax
mov eax, dword [ebp - 0x934]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x934]
mov dword [ecx], eax
mov eax, dword [ebp - 0x934]
mov eax, dword [eax]
mov dword [ebp - 0x18bc], eax
push 2
mov ecx, dword [ebp - 0x18b4]
call fcn.004092e9
mov ecx, dword [ebp - 0x18bc]
mov dword [eax], ecx
mov eax, dword [ebp - 0x18c4]
mov eax, dword [eax]
mov dword [ebp - 0x27ac], eax
mov eax, 0x86a37bd5
cmp eax, 0xa3205f5a
jae 0x487073
mov eax, 0x13e458c4
test eax, eax
jne 0x487073
and dword [ebp - 0xa6c], 0
jmp 0x48707d
mov dword [ebp - 0xa6c], 1
mov eax, dword [ebp - 0x18cc]
mov ecx, dword [ebp - 0xa6c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x18d4]
mov eax, dword [eax]
imul eax, dword [ebp - 0xa6c]
cmp eax, 0x74bdbaf9
jle 0x4870ad
mov dword [ebp - 0x1500], 1
jmp 0x4870b4
and dword [ebp - 0x1500], 0
mov eax, dword [ebp - 0x14f8]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x1500]
jl 0x4870d0
mov dword [ebp - 0x1508], 1
jmp 0x4870d7
and dword [ebp - 0x1508], 0
mov eax, dword [ebp - 0x18dc]
mov ecx, dword [ebp - 0x1508]
mov dword [eax], ecx
jmp 0x4871e2
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 0x18e4], eax
mov dword [ebp - 0x1510], 0x1aaf
mov dword [ebp - 0x18ec], 0xa9cc10
cmp dword [ebp - 0x1510], 0x1b04
jle 0x48718a
and dword [ebp - 0x93c], 0
jmp 0x487129
mov eax, dword [ebp - 0x93c]
inc eax
mov dword [ebp - 0x93c], eax
cmp dword [ebp - 0x93c], 0x4f47
jge 0x48718a
and dword [ebp - 0x7d0], 0
jmp 0x48714b
mov eax, dword [ebp - 0x7d0]
inc eax
mov dword [ebp - 0x7d0], eax
cmp dword [ebp - 0x7d0], 0x8054
jge 0x487188
mov eax, dword [ebp - 0x93c]
sub eax, dword [ebp - 0x7d0]
cdq
mov dword [ebp - 0x1da4], eax
mov dword [ebp - 0x1da0], edx
push dword [ebp - 0x1da0]
push dword [ebp - 0x1da4]
mov ecx, 0xab2098
call fcn.00408fd3
jmp 0x48713e
jmp 0x48711c
push dword [ebp - 0x18e4]
push 0
call fcn.0045816d
pop ecx
pop ecx
mov dword [ebp - 4], 0xb0
cmp dword [ebp - 0x1510], 0x1965
jge 0x4871bc
mov edx, dword [ebp - 0x18ec]
mov ecx, 0xab2098
call fcn.0040b859
jmp 0x4871d8
or dword [ebp - 4], 0xffffffff
jmp 0x4871e2
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret