Function at 0x48194e
Capabilities:
Authenticate hmac
Contain obfuscated stackstrings
Encrypt data using speck

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b9979
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x2f1c
call fcn.004b5360
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 0x10]
test eax, eax
je 0x496f12
lea eax, [ebp + 8]
mov dword [ebp - 0x1d48], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x1734], eax
mov eax, dword [ebp - 0x1d48]
movzx eax, byte [eax]
test eax, eax
je 0x496ec9
push 0x62fc
push 0x5a46
push 0xb03
push 0x1d90
push 0x1f9e
push 0
push 1
push 0x1b0e
push 0x33eb
push 0x5e06
push 0x5375
push 0x573e
call fcn.0047167c
add esp, 0x30
mov dword [ebp - 0x23d4], 5
mov dword [ebp - 0x2378], 3
mov dword [ebp - 0x26ac], 0xffffffff
mov dword [ebp - 0x2380], 0xade2167
mov dword [ebp - 0x2834], 0
mov dword [ebp - 0x2388], 0x6a3367f5
mov dword [ebp - 0x175c], 1
mov dword [ebp - 0x1754], 9
push 0x5bfb
push 0x4659
push 0x2c38
push 1
push 1
push 0x1e59
push 0x1fe2
push 1
lea eax, [ebp - 0x1754]
push eax
push 0x1c21
call fcn.0046fb25
add esp, 0x28
push 1
push 1
lea eax, [ebp - 0x175c]
push eax
push 0x244f
call fcn.0046fd6a
add esp, 0x10
mov dword [ebp - 0x26bc], 0xaabecba2
mov dword [ebp - 0x2390], 0xd97a888a
mov dword [ebp - 0x27d4], 0xffffffff
push 3
lea ecx, [ebp - 0x249c]
call fcn.004091ed
mov dword [ebp - 0x2398], 0xeda58528
mov dword [ebp - 0xf44], 0xd5fe
mov dword [ebp - 0x268], 0
jmp 0x481ad7
mov eax, dword [ebp - 0x268]
inc eax
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 3
jge 0x481af3
mov eax, dword [ebp - 0x268]
mov dword [ebp + eax*4 - 0x2a90], 0xffffffff
jmp 0x481aca
lea eax, [ebp - 0x268]
push eax
lea eax, [ebp - 0x249c]
push eax
push 1
push 0
push 0x2694
call fcn.0046c249
add esp, 0x14
mov eax, dword [ebp - 0xf44]
inc eax
mov dword [ebp - 0xf44], eax
lea ecx, [ebp - 0x249c]
call fcn.004092bf
mov dword [ebp - 0xd0], 0
mov dword [ebp - 0x8e4], 0x2d5e48d3
mov dword [ebp - 0x8e0], 0x2d5e48d3
mov dword [ebp - 0x8dc], 0x2d5e48d3
mov dword [ebp - 0x8d8], 0x2d5e48d3
mov dword [ebp - 0x18], 1
mov dword [ebp - 0x1ea0], 0xfffffff9
mov dword [ebp - 0x1e9c], 0xfffffff9
mov dword [ebp - 0x1e98], 0xfffffff9
mov dword [ebp - 0x1e94], 0xfffffff9
mov dword [ebp - 0xa20], 0xc9a7b2e0
mov dword [ebp - 0x14c4], 2
mov dword [ebp - 0x9a0], 1
mov dword [ebp - 0x1764], 0xd30a9375
mov dword [ebp - 0x26cc], 0x971a050d
mov dword [ebp - 0x2bc], 0
jmp 0x481bd6
mov eax, dword [ebp - 0x2bc]
inc eax
mov dword [ebp - 0x2bc], eax
cmp dword [ebp - 0x2bc], 1
jge 0x481bf2
mov eax, dword [ebp - 0x2bc]
mov dword [ebp + eax*4 - 0x176c], 1
jmp 0x481bc9
mov dword [ebp - 0x18], 3
jmp 0x481c02
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jl 0x482039
mov dword [ebp - 0x5e4], 1
mov dword [ebp - 0x998], 0x5b042041
mov dword [ebp - 0x1450], 0
mov dword [ebp - 0x2c4], 0x9db3fa3c
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x8e4]
mov dword [ebp - 0x23a0], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x8e4]
add eax, dword [ebp - 0x18]
je 0x481c6e
mov eax, 0x21342f3d
test eax, eax
je 0x481c6e
cmp dword [ebp - 0x18], 0
je 0x481c6e
mov dword [ebp - 0x13dc], 1
jmp 0x481c75
and dword [ebp - 0x13dc], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x8e4]
cmp dword [ebp - 0x13dc], eax
je 0x481c96
mov dword [ebp - 0x13e4], 1
jmp 0x481c9d
and dword [ebp - 0x13e4], 0
cmp dword [ebp - 0x13e4], 0
jbe 0x481cb2
mov dword [ebp - 0x13ec], 1
jmp 0x481cb9
and dword [ebp - 0x13ec], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x8e4]
cmp dword [ebp - 0x13ec], eax
je 0x481cd7
mov dword [ebp - 0x13f4], 1
jmp 0x481cde
and dword [ebp - 0x13f4], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x8e4]
cmp eax, dword [ebp - 0x13f4]
jge 0x481cfc
mov dword [ebp - 0x13fc], 1
jmp 0x481d03
and dword [ebp - 0x13fc], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x8e4]
imul eax, dword [ebp - 0x13fc]
sub eax, 0x268d3bf7
mov dword [ebp - 0x5e4], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x8e4]
mov dword [ebp - 0x2874], eax
mov eax, dword [ebp - 0x5e4]
mov dword [ebp - 0x23a8], eax
mov eax, dword [ebp - 0x5e4]
mov dword [ebp - 0x26dc], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x23b0], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x8e4], 0xd955a619
jbe 0x481d6f
mov dword [ebp - 0x1404], 1
jmp 0x481d76
and dword [ebp - 0x1404], 0
mov eax, dword [ebp - 0x1404]
mov dword [ebp - 0x998], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x8e4]
cmp eax, dword [ebp - 0x998]
jle 0x481da0
mov dword [ebp - 0x140c], 1
jmp 0x481da7
and dword [ebp - 0x140c], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x140c]
sub ecx, dword [ebp + eax - 0x8e4]
cmp ecx, dword [ebp - 0x1450]
jle 0x481dce
mov dword [ebp - 0x1448], 1
jmp 0x481dd5
and dword [ebp - 0x1448], 0
mov eax, dword [ebp - 0x1448]
add eax, 3
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x8e4], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x8e4], 1
cmp dword [ebp - 0x18], 1
jge 0x481e0b
mov dword [ebp - 0x14e8], 1
jmp 0x481e12
and dword [ebp - 0x14e8], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x27dc], eax
cmp dword [ebp - 0x18], 0
jg 0x481e2d
mov dword [ebp - 0x1458], 1
jmp 0x481e34
and dword [ebp - 0x1458], 0
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1450]
add ecx, dword [ebp - 0x1458]
imul eax, ecx
cmp eax, dword [ebp - 0x18]
jge 0x481e57
mov dword [ebp - 0x1460], 1
jmp 0x481e5e
and dword [ebp - 0x1460], 0
mov eax, dword [ebp - 0x1460]
add eax, 9
cmp eax, dword [ebp - 0x2c4]
jl 0x481e7b
mov dword [ebp - 0x1468], 1
jmp 0x481e82
and dword [ebp - 0x1468], 0
cmp dword [ebp - 0x1468], 0
je 0x481e97
mov dword [ebp - 0x1470], 1
jmp 0x481e9e
and dword [ebp - 0x1470], 0
mov eax, dword [ebp - 0x2c4]
cmp dword [ebp - 0x1470], eax
jge 0x481eb8
mov dword [ebp - 0x1478], 1
jmp 0x481ebf
and dword [ebp - 0x1478], 0
mov eax, dword [ebp - 0x1478]
sub eax, dword [ebp - 0x18]
cmp dword [ebp - 0x14e8], eax
jne 0x481ee5
cmp dword [ebp - 0x2c4], 0
je 0x481ee5
mov dword [ebp - 0x14f0], 1
jmp 0x481eec
and dword [ebp - 0x14f0], 0
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x14f0]
cmp eax, 0xaee
je 0x481f08
mov dword [ebp - 0xa08], 1
jmp 0x481f0f
and dword [ebp - 0xa08], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xa08]
mov dword [ebp + eax - 0x1ea0], ecx
mov eax, dword [ebp - 0xa08]
mov dword [ebp - 0xa20], eax
mov eax, dword [ebp - 0xa20]
mov dword [ebp - 0x14c4], eax
mov eax, dword [ebp - 0x14c4]
mov dword [ebp - 0x23b8], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x26ec], eax
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x8e4], 0
jne 0x481f72
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x8e4], 0
jne 0x481f72
and dword [ebp - 0x1424], 0
jmp 0x481f7c
mov dword [ebp - 0x1424], 1
cmp dword [ebp - 0x1424], 0
jl 0x481f91
mov dword [ebp - 0xac0], 1
jmp 0x481f98
and dword [ebp - 0xac0], 0
mov eax, dword [ebp - 0xac0]
mov dword [ebp - 0x9a0], eax
xor eax, eax
cmp eax, 0x562e
je 0x481fb9
mov dword [ebp - 0x13d4], 1
jmp 0x481fc0
and dword [ebp - 0x13d4], 0
cmp dword [ebp - 0x13d4], 0x32af72da
jne 0x481fd8
mov dword [ebp - 0xfe8], 1
jmp 0x481fdf
and dword [ebp - 0xfe8], 0
mov eax, dword [ebp - 0x5e4]
cmp dword [ebp - 0xfe8], eax
je 0x481ff9
mov dword [ebp - 0xac8], 1
jmp 0x482000
and dword [ebp - 0xac8], 0
mov eax, dword [ebp - 0x998]
add eax, dword [ebp - 0xac8]
je 0x482021
push 0xfffffffffffffffb
pop eax
test eax, eax
je 0x482021
mov dword [ebp - 0x146c], 1
jmp 0x482028
and dword [ebp - 0x146c], 0
mov eax, dword [ebp - 0x146c]
mov dword [ebp - 0x2c4], eax
jmp 0x481bfb
cmp dword [ebp - 0x1764], 0
jne 0x48205b
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x8e4], 0
jne 0x48205b
and dword [ebp - 0xad0], 0
jmp 0x482065
mov dword [ebp - 0xad0], 1
cmp dword [ebp - 0xad0], 0
jg 0x48207a
mov dword [ebp - 0xff0], 1
jmp 0x482081
and dword [ebp - 0xff0], 0
cmp dword [ebp - 0xff0], 0xffffffff
jne 0x482096
mov dword [ebp - 0xad8], 1
jmp 0x48209d
and dword [ebp - 0xad8], 0
mov eax, dword [ebp - 0xad8]
mov dword [ebp - 0xa20], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1ea0]
mov dword [ebp - 0x23c0], eax
mov eax, dword [ebp - 0x9a0]
mov dword [ebp - 0x2750], eax
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x176c], 0
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x1ea0], 0x90d92204
jl 0x4820f8
mov dword [ebp - 0x1280], 1
jmp 0x4820ff
and dword [ebp - 0x1280], 0
cmp dword [ebp - 0x1280], 1
jge 0x482114
mov dword [ebp - 0xae0], 1
jmp 0x48211b
and dword [ebp - 0xae0], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1ea0]
cmp eax, dword [ebp - 0xae0]
jge 0x48213b
mov dword [ebp - 0xff8], 1
jmp 0x482142
and dword [ebp - 0xff8], 0
imul eax, dword [ebp - 0xff8], 0x9c4b
mov dword [ebp - 0x9a0], eax
mov dword [ebp - 0x1068], 0
mov dword [ebp - 0x34], 0x53606de7
mov dword [ebp - 0xb08], 0x3eb905d0
mov dword [ebp - 0x2cc], 1
mov dword [ebp - 0x1000], 1
mov dword [ebp - 0x1784], 0x504ed09e
mov dword [ebp - 0x750], 0
jmp 0x4821a4
mov eax, dword [ebp - 0x750]
inc eax
mov dword [ebp - 0x750], eax
cmp dword [ebp - 0x750], 1
jge 0x4821c0
mov eax, dword [ebp - 0x750]
mov dword [ebp + eax*4 - 0x177c], 0
jmp 0x482197
cmp dword [ebp - 0x34], 0
jne 0x482272
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x34], eax
jle 0x4821de
mov dword [ebp - 0xae8], 1
jmp 0x4821e5
and dword [ebp - 0xae8], 0
mov eax, dword [ebp - 0xae8]
mov dword [ebp - 0x2cc], eax
mov eax, dword [ebp - 0x2cc]
mov dword [ebp - 0x23c8], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x26fc], eax
mov eax, 0xdbc1c234
sub eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x34]
jne 0x48221f
mov dword [ebp - 0x13c8], 1
jmp 0x482226
and dword [ebp - 0x13c8], 0
mov eax, dword [ebp - 0x13c8]
sub eax, dword [ebp - 0x34]
sub eax, 0x2a30
je 0x48224b
cmp dword [ebp - 0x2cc], 0
je 0x48224b
mov dword [ebp - 0xaf0], 1
jmp 0x482252
and dword [ebp - 0xaf0], 0
mov eax, dword [ebp - 0xaf0]
mov dword [ebp - 0x1000], eax
mov eax, dword [ebp - 0x1000]
add eax, dword [ebp - 0x34]
jne 0x482272
and dword [ebp - 0xaf8], 0
jmp 0x48227c
mov dword [ebp - 0xaf8], 1
cmp dword [ebp - 0xaf8], 0xfffffffd
jne 0x482291
mov dword [ebp - 0x1774], 1
jmp 0x482298
and dword [ebp - 0x1774], 0
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x23d0], eax
cmp dword [ebp - 0x34], 0
jne 0x4822b9
cmp dword [ebp - 0x2cc], 0
jne 0x4822b9
and dword [ebp - 0x1288], 0
jmp 0x4822c3
mov dword [ebp - 0x1288], 1
cmp dword [ebp - 0x1288], 0
jb 0x4822d8
mov dword [ebp - 0xb00], 1
jmp 0x4822df
and dword [ebp - 0xb00], 0
cmp dword [ebp - 0xb00], 0x7bf4
jle 0x4822f7
mov dword [ebp - 0xa10], 1
jmp 0x4822fe
and dword [ebp - 0xa10], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xa10]
mov dword [ebp + eax - 0x177c], ecx
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0xa10], eax
jle 0x482328
mov dword [ebp - 0x1008], 1
jmp 0x48232f
and dword [ebp - 0x1008], 0
mov eax, dword [ebp - 0x1008]
sub eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x34]
jl 0x482349
mov dword [ebp - 0x14ec], 1
jmp 0x482350
and dword [ebp - 0x14ec], 0
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0xb08], eax
mov eax, dword [ebp - 0xb08]
cmp eax, dword [ebp - 0x14ec]
jle 0x482373
mov dword [ebp - 0xb10], 1
jmp 0x48237a
and dword [ebp - 0xb10], 0
mov eax, dword [ebp - 0xb10]
mov dword [ebp - 0x1784], eax
mov eax, dword [ebp - 0xd0]
cmp dword [ebp - 0xd0], eax
jle 0x4829ee
mov dword [ebp - 0x5e0], 0x48261f9c
mov dword [ebp - 0x5e0], 0
jmp 0x4823bb
mov eax, dword [ebp - 0x5e0]
dec eax
mov dword [ebp - 0x5e0], eax
cmp dword [ebp - 0x5e0], 0xffffffe6
jle 0x48245b
mov dword [ebp - 0x278], 0xfffffffa
push 0x63c6
push 0x6631
push 0x41a5
push 0x3589
push 1
push 1
push 0x3f63
lea eax, [ebp - 0x278]
push eax
push 0x2c35
call fcn.004706e5
add esp, 0x24
mov dword [ebp - 0x278], 0
jmp 0x48241c
mov eax, dword [ebp - 0x278]
dec eax
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x278], 0xffffffe8
jle 0x482456
push 0x81f
push 0x1900
push 0x7e24
push 0
push 0x39d3
push 0x4b36
push 0x2dc
push 0
push 0x7b63
call fcn.0047f156
add esp, 0x24
jmp 0x48240f
jmp 0x4823ae
mov dword [ebp - 0xd0], 0
jmp 0x482474
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0x37
jne 0x4829e9
push 1
push 1
push 1
call fcn.004707ca
add esp, 0xc
mov dword [ebp - 0x1d04], 0xffffffff
mov dword [ebp - 0x1d0c], 0xefa20bd0
push 2
lea ecx, [ebp - 0x1488]
call fcn.004091ed
mov dword [ebp - 0xbc], 0xdf2f4a8b
mov dword [ebp - 0x2758], 0
push 1
lea eax, [ebp - 0x1488]
push eax
push 1
lea eax, [ebp - 0x23d8]
push eax
push 0x7b60
call fcn.00470c5c
add esp, 0x14
mov dword [ebp - 0xbc], 1
jmp 0x4824fc
mov eax, dword [ebp - 0xbc]
dec eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0
jl 0x4829ae
mov dword [ebp - 0x2d4], 0
jmp 0x482522
mov eax, dword [ebp - 0x2d4]
inc eax
mov dword [ebp - 0x2d4], eax
cmp dword [ebp - 0x2d4], 3
jge 0x48253e
mov eax, dword [ebp - 0x2d4]
mov dword [ebp + eax*4 - 0x14fc], 0xffffffff
jmp 0x482515
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x14fc], 1
jmp 0x48256c
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14fc]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x14fc], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x14fc], 0
jl 0x4829a9
mov dword [ebp - 0x13c], 8
mov dword [ebp - 0x1794], 0xb2e809b4
mov dword [ebp - 0x13c], 1
jmp 0x4825ad
mov eax, dword [ebp - 0x13c]
dec eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0
jl 0x4829a4
mov dword [ebp - 0x1a8], 0x7d373ee7
push dword [ebp - 0xbc]
lea ecx, [ebp - 0x1488]
call fcn.004092db
mov eax, dword [eax]
mov dword [ebp - 0x1a8], eax
mov esi, dword [ebp - 0x1a8]
push dword [ebp - 0x13c]
lea ecx, [ebp - 0x1488]
call fcn.004092db
add esi, dword [eax]
je 0x482623
mov eax, 0xffffa8ec
test eax, eax
je 0x482623
push 4
pop eax
imul eax, eax, 0
mov esi, dword [ebp + eax - 0x14fc]
push dword [ebp - 0xbc]
lea ecx, [ebp - 0x1488]
call fcn.004092db
cmp esi, dword [eax]
jge 0x482635
cmp dword [ebp - 0xbc], 0
jne 0x482635
and dword [ebp - 0x178c], 0
jmp 0x48263f
mov dword [ebp - 0x178c], 1
push dword [ebp - 0xbc]
lea ecx, [ebp - 0x1488]
call fcn.004092db
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x270c], eax
cmp dword [ebp - 0xbc], 0
jne 0x48267e
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x14fc], 0
jne 0x48267e
and dword [ebp - 0x1010], 0
jmp 0x482688
mov dword [ebp - 0x1010], 1
mov eax, dword [ebp - 0x1010]
mov dword [ebp - 0x1794], eax
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x14fc]
lea ecx, [ebp - 0x1488]
call fcn.004092db
cmp dword [eax], 0xdd484073
jae 0x4826c0
mov dword [ebp - 0xb18], 1
jmp 0x4826c7
and dword [ebp - 0xb18], 0
push dword [ebp - 0x13c]
lea ecx, [ebp - 0x1488]
call fcn.004092db
mov ecx, dword [ebp - 0xb18]
mov dword [eax], ecx
mov dword [ebp - 0x1a8], 0xffffffe6
jmp 0x4826f9
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 0xffffffe6
je 0x48299f
push 3
lea ecx, [ebp - 0x1f1c]
call fcn.004091ed
mov dword [ebp - 0x1290], 0x3756
mov dword [ebp - 0x179c], 0xaab6d8
cmp dword [ebp - 0x1290], 0x3a2a
jle 0x482806
and dword [ebp - 0x5e8], 0
jmp 0x48274d
mov eax, dword [ebp - 0x5e8]
inc eax
mov dword [ebp - 0x5e8], eax
cmp dword [ebp - 0x5e8], 0x2645
jge 0x482800
and dword [ebp - 0x868], 0
jmp 0x482773
mov eax, dword [ebp - 0x868]
inc eax
mov dword [ebp - 0x868], eax
cmp dword [ebp - 0x868], 0x6cc
jge 0x4827fb
and dword [ebp - 0x2dc], 0
jmp 0x482795
mov eax, dword [ebp - 0x2dc]
inc eax
mov dword [ebp - 0x2dc], eax
cmp dword [ebp - 0x2dc], 0x2a1
jge 0x4827f6
mov ecx, dword [ebp - 0x868]
sub ecx, dword [ebp - 0x2dc]
mov eax, dword [ebp - 0x5e8]
sar eax, cl
cdq
mov dword [ebp - 0x17a8], eax
mov dword [ebp - 0x17a4], edx
push dword [ebp - 0x17a4]
push dword [ebp - 0x17a8]
lea ecx, [ebp - 0x2d18]
call fcn.00401a21
pop ecx
pop ecx
mov ecx, eax
call fcn.00408e8d
push eax
call fcn.004a3217
pop ecx
lea ecx, [ebp - 0x2d18]
call fcn.00408e83
jmp 0x482788
jmp 0x482766
jmp 0x482740
call dword [0xac31a8]
and dword [ebp - 4], 0
cmp dword [ebp - 0x1290], 0x35ba
jge 0x482822
push dword [ebp - 0x179c]
call fcn.004a3217
pop ecx
jmp 0x48283e
or dword [ebp - 4], 0xffffffff
jmp 0x482848
push 0
push 0x5b5f
push 0x7ea2
push 1
push 1
push 0x277e
lea eax, [ebp - 0x23e0]
push eax
lea eax, [ebp - 0x1f1c]
push eax
push 0x3c10
call fcn.00479d3a
add esp, 0x24
mov dword [ebp - 0xb20], 0x55f7
mov dword [ebp - 0x1cfc], 0xaab71c
cmp dword [ebp - 0xb20], 0x574e
jle 0x482927
push 0x7b9
push 0
push 0x1fd4
call dword [0xac33ec]
and dword [ebp - 0x2e4], 0
jmp 0x4828c4
mov eax, dword [ebp - 0x2e4]
inc eax
mov dword [ebp - 0x2e4], eax
cmp dword [ebp - 0x2e4], 0x6378
jge 0x482927
and dword [ebp - 0x758], 0
jmp 0x4828e6
mov eax, dword [ebp - 0x758]
inc eax
mov dword [ebp - 0x758], eax
cmp dword [ebp - 0x758], 0x76b5
jge 0x482925
mov eax, dword [ebp - 0x2e4]
mov ecx, dword [ebp - 0x758]
sar eax, cl
cdq
mov dword [ebp - 0x17b4], eax
mov dword [ebp - 0x17b0], edx
push dword [ebp - 0x17b0]
push dword [ebp - 0x17b4]
mov ecx, 0xac0918
call fcn.00408e98
jmp 0x4828d9
jmp 0x4828b7
mov dword [ebp - 4], 2
cmp dword [ebp - 0xb20], 0x55a9
jge 0x48294a
mov edx, dword [ebp - 0x1cfc]
mov ecx, 0xac0918
call fcn.0040bb10
jmp 0x482966
or dword [ebp - 4], 0xffffffff
jmp 0x482970
push 1
lea ecx, [ebp - 0x1f1c]
call fcn.004092db
cmp dword [eax], 0
je 0x48298f
lea ecx, [ebp - 0x1f1c]
call fcn.004092bf
jmp 0x48299f
lea ecx, [ebp - 0x1f1c]
call fcn.004092bf
jmp 0x4826ec
jmp 0x4825a0
jmp 0x482551
jmp 0x4824ef
lea ecx, [ebp - 0x1488]
call fcn.004092bf
lea eax, [ebp - 0x1d04]
push eax
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0x1d0c]
push eax
push 0
push 0
push 0x3088
push 0x3ca2
call fcn.0047fae2
add esp, 0x1c
jmp 0x482467
jmp 0x483f78
push 1
lea ecx, [ebp - 0x1520]
call fcn.004091ed
mov dword [ebp - 0x78], 0xb0b02971
mov dword [ebp - 0xb50], 0x732adaa2
push 4
lea ecx, [ebp - 0x1dbc]
call fcn.004091ed
mov dword [ebp - 0xb40], 0xfffffff8
mov dword [ebp - 0x1d2c], 0xffffffff
mov dword [ebp - 0x1d34], 0x97911697
mov dword [ebp - 0x1d3c], 0xe785
mov dword [ebp - 0x12a0], 0xfffffffd
push 0
push 0x3097
lea eax, [ebp - 0x1520]
push eax
push 0
lea eax, [ebp - 0x70]
push eax
call fcn.0047b026
add esp, 0x14
mov dword [ebp - 0x70], 0
jmp 0x482a77
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 2
jge 0x482a8d
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0x1558], 0xfffffff7
jmp 0x482a70
push 0
push 1
push 0x51ed
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x1dbc]
push eax
call fcn.0047cec3
add esp, 0x14
mov dword [ebp - 0x70], 0
jmp 0x482ab9
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 3
jge 0x482acf
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0x2cdc], 1
jmp 0x482ab2
mov dword [ebp - 0x78], 0
jmp 0x482adf
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0
jg 0x482ec3
mov dword [ebp - 0x2fc], 0x6411d7fe
mov dword [ebp - 0x1018], 0x7521
mov dword [ebp - 0x1d14], 0xaab730
cmp dword [ebp - 0x1018], 0x7631
jle 0x482c16
and dword [ebp - 0x810], 0
jmp 0x482b2d
mov eax, dword [ebp - 0x810]
inc eax
mov dword [ebp - 0x810], eax
cmp dword [ebp - 0x810], 0x63ff
jge 0x482c16
and dword [ebp - 0x2f4], 0
jmp 0x482b53
mov eax, dword [ebp - 0x2f4]
inc eax
mov dword [ebp - 0x2f4], eax
cmp dword [ebp - 0x2f4], 0x352e
jge 0x482c11
and dword [ebp - 0x2ec], 0
jmp 0x482b79
mov eax, dword [ebp - 0x2ec]
inc eax
mov dword [ebp - 0x2ec], eax
cmp dword [ebp - 0x2ec], 0x7138
jge 0x482c0c
and dword [ebp - 0x5f0], 0
jmp 0x482b9f
mov eax, dword [ebp - 0x5f0]
inc eax
mov dword [ebp - 0x5f0], eax
cmp dword [ebp - 0x5f0], 0x5c88
jge 0x482c07
mov eax, dword [ebp - 0x2ec]
cdq
idiv dword [ebp - 0x5f0]
mov eax, dword [ebp - 0x2f4]
sub eax, edx
xor eax, dword [ebp - 0x810]
cdq
mov dword [ebp - 0x17c0], eax
mov dword [ebp - 0x17bc], edx
push dword [ebp - 0x17bc]
push dword [ebp - 0x17c0]
lea ecx, [ebp - 0x2b08]
call fcn.00401a21
pop ecx
pop ecx
mov ecx, eax
call fcn.00408e8d
push eax
call fcn.004a3217
pop ecx
lea ecx, [ebp - 0x2b08]
call fcn.00408e83
jmp 0x482b92
jmp 0x482b6c
jmp 0x482b46
jmp 0x482b20
mov dword [ebp - 0x1d44], 0x1a6f3221
mov dword [ebp - 4], 4
cmp dword [ebp - 0x1018], 0x71ce
jge 0x482c3f
push dword [ebp - 0x1d14]
call fcn.004a3217
pop ecx
jmp 0x482c5b
or dword [ebp - 4], 0xffffffff
jmp 0x482c65
push dword [ebp - 0x78]
lea ecx, [ebp - 0x1520]
call fcn.004092db
cmp dword [eax], 0
jne 0x482e78
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x2760], eax
push dword [ebp - 0x78]
lea ecx, [ebp - 0x1520]
call fcn.004092db
cmp dword [eax], 0xfa97
jne 0x482ca7
mov dword [ebp - 0x1d1c], 1
jmp 0x482cae
and dword [ebp - 0x1d1c], 0
push dword [ebp - 0x78]
lea ecx, [ebp - 0x1520]
call fcn.004092db
push dword [ebp - 0x78]
lea ecx, [ebp - 0x1520]
call fcn.004092db
mov ecx, dword [ebp - 0x2fc]
cmp dword [eax], ecx
jge 0x482ce0
mov dword [ebp - 0xb28], 1
jmp 0x482ce7
and dword [ebp - 0xb28], 0
mov eax, dword [ebp - 0xb50]
cmp dword [ebp - 0xb28], eax
jg 0x482d01
mov dword [ebp - 0x13d0], 1
jmp 0x482d08
and dword [ebp - 0x13d0], 0
mov eax, dword [ebp - 0x13d0]
sub eax, 6
cmp eax, 0xd2ae857b
jne 0x482d24
mov dword [ebp - 0x9a8], 1
jmp 0x482d2b
and dword [ebp - 0x9a8], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x9a8]
mov dword [ebp + eax - 0x1558], ecx
mov esi, dword [ebp - 0x9a8]
add esi, 6
push 3
lea ecx, [ebp - 0x1dbc]
call fcn.004092db
cmp esi, dword [eax]
jl 0x482d64
mov dword [ebp - 0xb30], 1
jmp 0x482d6b
and dword [ebp - 0xb30], 0
mov eax, dword [ebp - 0xb30]
mov dword [ebp - 0xb40], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1558], 9
jne 0x482d9c
cmp dword [ebp - 0x2fc], 0
je 0x482d9c
mov dword [ebp - 0x1020], 1
jmp 0x482da3
and dword [ebp - 0x1020], 0
push 0
lea ecx, [ebp - 0x1520]
call fcn.004092db
mov ecx, dword [ebp - 0x1020]
cmp ecx, dword [eax]
jge 0x482dc6
mov dword [ebp - 0xb38], 1
jmp 0x482dcd
and dword [ebp - 0xb38], 0
push 3
lea ecx, [ebp - 0x1dbc]
call fcn.004092db
mov ecx, dword [ebp - 0xb38]
cmp ecx, dword [eax]
jg 0x482df0
mov dword [ebp - 0x1298], 1
jmp 0x482df7
and dword [ebp - 0x1298], 0
mov eax, dword [ebp - 0x78]
cmp eax, dword [ebp - 0x1298]
jl 0x482e0e
mov dword [ebp - 0x1d24], 1
jmp 0x482e15
and dword [ebp - 0x1d24], 0
mov eax, dword [ebp - 0x1d2c]
mov dword [ebp - 0x23e8], eax
cmp dword [ebp - 0x1d34], 0
je 0x482e48
cmp dword [ebp - 0x1d3c], 0
je 0x482e48
cmp dword [ebp - 0xb40], 0
je 0x482e48
mov dword [ebp - 0x1028], 1
jmp 0x482e4f
and dword [ebp - 0x1028], 0
mov eax, dword [ebp - 0x2fc]
cmp dword [ebp - 0x1028], eax
jle 0x482e78
push 3
lea ecx, [ebp - 0x1dbc]
call fcn.004092db
cmp dword [eax], 0
jne 0x482e78
and dword [ebp - 0xb48], 0
jmp 0x482e82
mov dword [ebp - 0xb48], 1
cmp dword [ebp - 0xb48], 0xf75d
jge 0x482e9a
mov dword [ebp - 0x1474], 1
jmp 0x482ea1
and dword [ebp - 0x1474], 0
mov eax, dword [ebp - 0x1474]
sub eax, dword [ebp - 0x2fc]
mov dword [ebp - 0x12a0], eax
cmp dword [ebp - 0x1d44], 0
je 0x482ebe
jmp 0x482ec3
jmp 0x482ad8
cmp dword [ebp - 0xb50], 0xb6910c33
jne 0x482edb
mov dword [ebp - 0x1030], 1
jmp 0x482ee2
and dword [ebp - 0x1030], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1558]
cmp dword [ebp - 0x1030], eax
jl 0x482f03
mov dword [ebp - 0xb58], 1
jmp 0x482f0a
and dword [ebp - 0xb58], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xb58]
mov dword [ebp + eax - 0x1558], ecx
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x271c], eax
mov dword [ebp - 0x12a0], 0x8af80453
lea ecx, [ebp - 0x1dbc]
call fcn.004092bf
lea ecx, [ebp - 0x1520]
call fcn.004092bf
mov dword [ebp - 0x1f8], 0x5fb5
push 0
push 0x4cb2
push 0x1705
push 1
push 0x74cb
push 0x35ed
push 0x2bd
push 0x2861
push 0x4964
push 0x1da0
call fcn.00468500
add esp, 0x28
mov dword [ebp - 0xbc8], 0xfffffff9
lea eax, [ebp - 0x1068]
push eax
push 1
lea eax, [ebp - 0xbc8]
push eax
lea eax, [ebp - 0x1f8]
push eax
push 0x3639
lea eax, [ebp - 0xd0]
push eax
push 1
push 0
call fcn.0047fe26
add esp, 0x20
mov dword [ebp - 0xb60], 0x12ac
mov dword [ebp - 0x1d4c], 0xaab778
cmp dword [ebp - 0xb60], 0x1671
jle 0x4830df
and dword [ebp - 0x760], 0
jmp 0x482ff7
mov eax, dword [ebp - 0x760]
inc eax
mov dword [ebp - 0x760], eax
cmp dword [ebp - 0x760], 0x5b00
jge 0x4830df
and dword [ebp - 0x5f8], 0
jmp 0x48301d
mov eax, dword [ebp - 0x5f8]
inc eax
mov dword [ebp - 0x5f8], eax
cmp dword [ebp - 0x5f8], 0x6d7b
jge 0x4830da
and dword [ebp - 0x304], 0
jmp 0x483043
mov eax, dword [ebp - 0x304]
inc eax
mov dword [ebp - 0x304], eax
cmp dword [ebp - 0x304], 0x59fa
jge 0x4830d5
and dword [ebp - 0x30c], 0
jmp 0x483069
mov eax, dword [ebp - 0x30c]
inc eax
mov dword [ebp - 0x30c], eax
cmp dword [ebp - 0x30c], 0x7099
jge 0x4830d0
mov ecx, dword [ebp - 0x5f8]
add ecx, dword [ebp - 0x304]
mov eax, dword [ebp - 0x760]
shl eax, cl
xor eax, dword [ebp - 0x30c]
cdq
mov dword [ebp - 0x17cc], eax
mov dword [ebp - 0x17c8], edx
push dword [ebp - 0x17c8]
push dword [ebp - 0x17cc]
lea ecx, [ebp - 0x2e2c]
call fcn.00401a21
pop ecx
pop ecx
mov ecx, eax
call fcn.00408e8d
push eax
call fcn.004a3217
pop ecx
lea ecx, [ebp - 0x2e2c]
call fcn.00408e83
jmp 0x48305c
jmp 0x483036
jmp 0x483010
jmp 0x482fea
mov dword [ebp - 0x1d54], 0xfffffffc
mov dword [ebp - 4], 6
cmp dword [ebp - 0xb60], 0x120c
jge 0x483108
push dword [ebp - 0x1d4c]
call fcn.004a3217
pop ecx
jmp 0x483124
or dword [ebp - 4], 0xffffffff
jmp 0x48312e
mov dword [ebp - 0x1038], 0xce9d05ba
and dword [ebp - 0x2000], 0
and dword [ebp - 0x1ffc], 0
and dword [ebp - 0x1ff8], 0
and dword [ebp - 0x1ff4], 0
lea ecx, [ebp - 0xa49]
call fcn.004092ea
push eax
lea eax, [ebp - 0x1ff0]
push eax
lea eax, [ebp - 0x2000]
push eax
lea ecx, [ebp - 0x2960]
call fcn.004092ed
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x28a4]
call fcn.00409299
push 0x2f9
lea eax, [ebp - 0x1d54]
push eax
push 0x669e
push 0x3826
push 0xc1e
push 0
push 0xead
push 0
push 0x6be6
lea eax, [ebp - 0x1038]
push eax
push 0x2331
call fcn.0046e0b1
add esp, 0x2c
push 0
push 0x7b73
push 1
lea eax, [ebp - 0x1038]
push eax
push 1
call fcn.0046dc46
add esp, 0x14
lea ecx, [ebp - 0x28a4]
call fcn.004092bf
mov dword [ebp - 0x1f8], 0x17
jmp 0x483204
mov eax, dword [ebp - 0x1f8]
dec eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 0xffffffee
jge 0x483f78
push 1
push 0
push 0
call fcn.004707ca
add esp, 0xc
mov dword [ebp - 0xb68], 0x238a
mov dword [ebp - 0x1d5c], 0xaab7c0
cmp dword [ebp - 0xb68], 0x26e8
jle 0x4832d9
and dword [ebp - 0x600], 0
jmp 0x483259
mov eax, dword [ebp - 0x600]
inc eax
mov dword [ebp - 0x600], eax
cmp dword [ebp - 0x600], 0x532b
jge 0x4832d9
and dword [ebp - 0x314], 0
jmp 0x48327b
mov eax, dword [ebp - 0x314]
inc eax
mov dword [ebp - 0x314], eax
cmp dword [ebp - 0x314], 0x1c2a
jge 0x4832d4
mov eax, dword [ebp - 0x600]
and eax, dword [ebp - 0x314]
cdq
mov dword [ebp - 0x17d8], eax
mov dword [ebp - 0x17d4], edx
push dword [ebp - 0x17d4]
push dword [ebp - 0x17d8]
lea ecx, [ebp - 0x2b38]
call fcn.00401a21
pop ecx
pop ecx
mov ecx, eax
call fcn.00408e8d
push eax
call fcn.004a3217
pop ecx
lea ecx, [ebp - 0x2b38]
call fcn.00408e83
jmp 0x48326e
jmp 0x48324c
push 1
lea ecx, [ebp - 0x2130]
call fcn.004091ed
mov dword [ebp - 4], 8
cmp dword [ebp - 0xb68], 0x207d
jge 0x483305
push dword [ebp - 0x1d5c]
call fcn.004a3217
pop ecx
jmp 0x483321
or dword [ebp - 4], 0xffffffff
jmp 0x48332b
mov dword [ebp - 0x144], 0xf70ad6f2
push 3
lea ecx, [ebp - 0x1ebc]
call fcn.004091ed
push 4
lea ecx, [ebp - 0x21d8]
call fcn.004091ed
mov dword [ebp - 0x1d74], 1
push 0x3866
push 0x7824
push 1
push 1
lea eax, [ebp - 0x1ebc]
push eax
lea eax, [ebp - 0x1d64]
push eax
call fcn.00471014
add esp, 0x18
push 0
lea eax, [ebp - 0x21d8]
push eax
lea eax, [ebp - 0x1d64]
push eax
push 1
push 0x7612
call fcn.004789f2
add esp, 0x14
push 0x66d1
push 1
push 0x7960
push 0x5251
lea eax, [ebp - 0x144]
push eax
push 0x495c
push 1
push 0x445b
push 0
call fcn.00474b11
add esp, 0x24
mov dword [ebp - 0x144], 0
jmp 0x4833e3
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 2
jg 0x4836cc
mov dword [ebp - 0x250], 0x7c8748af
mov dword [ebp - 0x23f0], 1
mov dword [ebp - 0x1d7c], 0xfffffffe
push 2
lea ecx, [ebp - 0x24ac]
call fcn.004091ed
mov dword [ebp - 0x1d94], 0x2c51978e
push 0
push 0x6580
lea eax, [ebp - 0x2768]
push eax
push 0
push 1
lea eax, [ebp - 0x24ac]
push eax
push 0x5b03
push 0x2dd7
push 0x2f0c
call fcn.00479d3a
add esp, 0x24
mov dword [ebp - 0x13d8], 0x44f8
mov dword [ebp - 0x1d6c], 0xaab800
cmp dword [ebp - 0x13d8], 0x4864
jle 0x483556
and dword [ebp - 0x898], 0
jmp 0x48348f
mov eax, dword [ebp - 0x898]
inc eax
mov dword [ebp - 0x898], eax
cmp dword [ebp - 0x898], 0x3c46
jge 0x483556
and dword [ebp - 0x31c], 0
jmp 0x4834b5
mov eax, dword [ebp - 0x31c]
inc eax
mov dword [ebp - 0x31c], eax
cmp dword [ebp - 0x31c], 0x2892
jge 0x483551
and dword [ebp - 0x608], 0
jmp 0x4834db
mov eax, dword [ebp - 0x608]
inc eax
mov dword [ebp - 0x608], eax
cmp dword [ebp - 0x608], 0xcd4
jge 0x48354c
and dword [ebp - 0x324], 0
jmp 0x4834fd
mov eax, dword [ebp - 0x324]
inc eax
mov dword [ebp - 0x324], eax
cmp dword [ebp - 0x324], 0x290a
jge 0x48354a
mov eax, dword [ebp - 0x898]
cdq
idiv dword [ebp - 0x31c]
imul edx, dword [ebp - 0x608]
xor edx, dword [ebp - 0x324]
mov eax, edx
cdq
mov dword [ebp - 0x17e4], eax
mov dword [ebp - 0x17e0], edx
push dword [ebp - 0x17e0]
push dword [ebp - 0x17e4]
mov ecx, 0xac0918
call fcn.00408e98
jmp 0x4834f0
jmp 0x4834ce
jmp 0x4834a8
jmp 0x483482
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x13d8], 0x417f
jge 0x483579
mov edx, dword [ebp - 0x1d6c]
mov ecx, 0xac0918
call fcn.0040bb10
jmp 0x483595
or dword [ebp - 4], 0xffffffff
jmp 0x48359f
push 0x6c4c
lea eax, [ebp - 0x1ebc]
push eax
push 1
lea eax, [ebp - 0x144]
push eax
push 0x1d28
push 0xa2d
push 1
call fcn.004711bf
add esp, 0x1c
mov dword [ebp - 0x250], 0
jmp 0x4835e1
mov eax, dword [ebp - 0x250]
inc eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 2
jg 0x4836bc
mov dword [ebp - 0x23f8], 0x5c6eff3d
mov dword [ebp - 0x272c], 5
mov dword [ebp - 0x1d84], 0x9e843631
mov dword [ebp - 0x2400], 0x8b78acc4
mov dword [ebp - 0x2770], 0xffffffff
mov dword [ebp - 0x2408], 0
mov dword [ebp - 0x1d8c], 0x4309642e
push 0x1dad
lea eax, [ebp - 0x1d74]
push eax
push 0x7d2d
push 0x3493
push 0
push 0x39e1
push 0
push 0x73f2
push 1
call fcn.0046dd43
add esp, 0x24
push 1
lea eax, [ebp - 0x144]
push eax
push 0x15db
push 0x3c08
push 0x609c
push 1
lea eax, [ebp - 0x1ebc]
push eax
lea eax, [ebp - 0x21d8]
push eax
lea eax, [ebp - 0x1d7c]
push eax
lea eax, [ebp - 0x250]
push eax
lea eax, [ebp - 0x1d84]
push eax
lea eax, [ebp - 0x1d8c]
push eax
lea eax, [ebp - 0x1d94]
push eax
push 0
call fcn.00476dad
add esp, 0x38
jmp 0x4835d4
lea ecx, [ebp - 0x24ac]
call fcn.004092bf
jmp 0x4833d6
lea ecx, [ebp - 0x21d8]
call fcn.004092bf
lea ecx, [ebp - 0x1ebc]
call fcn.004092bf
mov dword [ebp - 0x1e6c], 0x245e3460
mov dword [ebp - 0x28], 9
mov dword [ebp - 0xb90], 0x34a938f7
mov dword [ebp - 0x768], 0
jmp 0x483716
mov eax, dword [ebp - 0x768]
inc eax
mov dword [ebp - 0x768], eax
cmp dword [ebp - 0x768], 1
jge 0x483732
mov eax, dword [ebp - 0x768]
mov dword [ebp + eax*4 - 0x1d9c], 0xffffffff
jmp 0x483709
mov dword [ebp - 0x28], 0
jmp 0x483742
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jl 0x483772
mov byte [ebp - 0x128], 0
movzx eax, byte [ebp - 0x128]
test eax, eax
je 0x483770
push 0x4c9d
push 0
push 0x4d65
push 0
call fcn.00469c34
add esp, 0x10
jmp 0x48373b
mov dword [ebp - 0x12b0], 0x4a2a
mov dword [ebp - 0x1da4], 0xaab870
cmp dword [ebp - 0x12b0], 0x4b39
jle 0x48380b
and dword [ebp - 0x32c], 0
jmp 0x4837a8
mov eax, dword [ebp - 0x32c]
inc eax
mov dword [ebp - 0x32c], eax
cmp dword [ebp - 0x32c], 0x706c
jge 0x48380b
and dword [ebp - 0x610], 0
jmp 0x4837ca
mov eax, dword [ebp - 0x610]
inc eax
mov dword [ebp - 0x610], eax
cmp dword [ebp - 0x610], 0x4901
jge 0x483809
mov eax, dword [ebp - 0x32c]
mov ecx, dword [ebp - 0x610]
sar eax, cl
cdq
mov dword [ebp - 0x17f0], eax
mov dword [ebp - 0x17ec], edx
push dword [ebp - 0x17ec]
push dword [ebp - 0x17f0]
mov ecx, 0xac0918
call fcn.00408e98
jmp 0x4837bd
jmp 0x48379b
mov dword [ebp - 0x28], 0x19
jmp 0x48381b
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xf
je 0x4839ed
mov dword [ebp - 0xa24], 0x27d2
mov dword [ebp - 0x1040], 0x906d8bc0
mov dword [ebp - 0xb78], 5
mov dword [ebp - 0x334], 0
jmp 0x48385c
mov eax, dword [ebp - 0x334]
inc eax
mov dword [ebp - 0x334], eax
cmp dword [ebp - 0x334], 4
jge 0x483878
mov eax, dword [ebp - 0x334]
mov dword [ebp + eax*4 - 0x2888], 0xfffffffd
jmp 0x48384f
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0xa24], eax
cmp dword [ebp - 0xa24], 0
je 0x48397f
cmp dword [ebp - 0x28], 0
jne 0x483954
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x1d9c], 0xa4cc
mov eax, 0xa4cc
dec eax
je 0x4838c3
cmp dword [ebp - 0x28], 0
je 0x4838c3
mov dword [ebp - 0xb70], 1
jmp 0x4838ca
and dword [ebp - 0xb70], 0
mov eax, dword [ebp - 0xb70]
mov dword [ebp - 0x1040], eax
mov eax, dword [ebp - 0x1040]
mov dword [ebp - 0xb78], eax
cmp dword [ebp - 0xb78], 0x7d0b0a35
jg 0x4838fa
mov dword [ebp - 0x12a8], 1
jmp 0x483901
and dword [ebp - 0x12a8], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x12a8], eax
je 0x483918
mov dword [ebp - 0xb80], 1
jmp 0x48391f
and dword [ebp - 0xb80], 0
mov eax, dword [ebp - 0xa24]
cmp dword [ebp - 0xb80], eax
je 0x483939
mov dword [ebp - 0x1048], 1
jmp 0x483940
and dword [ebp - 0x1048], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x1048], eax
jl 0x483954
and dword [ebp - 0xb88], 0
jmp 0x48395e
mov dword [ebp - 0xb88], 1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0xb88]
lea eax, [ecx + eax + 0x2a284868]
sub eax, dword [ebp - 0x28]
jne 0x48397f
mov dword [ebp - 0x14d4], 1
jmp 0x483986
and dword [ebp - 0x14d4], 0
mov eax, dword [ebp - 0x14d4]
mov dword [ebp - 0xb90], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2888]
cmp dword [ebp - 0xb90], eax
jge 0x4839b2
mov dword [ebp - 0x1050], 1
jmp 0x4839b9
and dword [ebp - 0x1050], 0
cmp dword [ebp - 0x1050], 6
jg 0x4839ce
mov dword [ebp - 0xb98], 1
jmp 0x4839d5
and dword [ebp - 0xb98], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xb98]
mov dword [ebp + eax - 0x2888], ecx
jmp 0x483814
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0x12b0], 0x46ac
jge 0x483a10
mov edx, dword [ebp - 0x1da4]
mov ecx, 0xac0918
call fcn.0040bb10
jmp 0x483a2c
or dword [ebp - 4], 0xffffffff
jmp 0x483a36
mov dword [ebp - 0x1e74], 0x36fe0855
mov dword [ebp - 0x200], 0xffffffff
mov dword [ebp - 0xba0], 0x4aa3
mov dword [ebp - 0x1dac], 0xaab8d0
cmp dword [ebp - 0xba0], 0x4df9
jle 0x483b47
and dword [ebp - 0x618], 0
jmp 0x483a84
mov eax, dword [ebp - 0x618]
inc eax
mov dword [ebp - 0x618], eax
cmp dword [ebp - 0x618], 0x5b8c
jge 0x483b47
and dword [ebp - 0x818], 0
jmp 0x483aaa
mov eax, dword [ebp - 0x818]
inc eax
mov dword [ebp - 0x818], eax
cmp dword [ebp - 0x818], 0x7b9b
jge 0x483b42
and dword [ebp - 0x33c], 0
jmp 0x483ad0
mov eax, dword [ebp - 0x33c]
inc eax
mov dword [ebp - 0x33c], eax
cmp dword [ebp - 0x33c], 0x6414
jge 0x483b3d
and dword [ebp - 0x344], 0
jmp 0x483af2
mov eax, dword [ebp - 0x344]
inc eax
mov dword [ebp - 0x344], eax
cmp dword [ebp - 0x344], 0x4967
jge 0x483b3b
mov eax, dword [ebp - 0x818]
sub eax, dword [ebp - 0x33c]
and eax, dword [ebp - 0x618]
and eax, dword [ebp - 0x344]
cdq
mov dword [ebp - 0x17fc], eax
mov dword [ebp - 0x17f8], edx
push dword [ebp - 0x17f8]
push dword [ebp - 0x17fc]
mov ecx, 0xac0918
call fcn.00408e98
jmp 0x483ae5
jmp 0x483ac3
jmp 0x483a9d
jmp 0x483a77
push 2
lea ecx, [ebp - 0x1538]
call fcn.004091ed
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0xba0], 0x4a94
jge 0x483b77
mov edx, dword [ebp - 0x1dac]
mov ecx, 0xac0918
call fcn.0040bb10
jmp 0x483b93
or dword [ebp - 4], 0xffffffff
jmp 0x483b9d
mov dword [ebp - 0x770], 0
jmp 0x483bb6
mov eax, dword [ebp - 0x770]
inc eax
mov dword [ebp - 0x770], eax
cmp dword [ebp - 0x770], 2
jge 0x483bd8
push dword [ebp - 0x770]
lea ecx, [ebp - 0x1538]
call fcn.004092db
mov dword [eax], 0xfffffffb
jmp 0x483ba9
mov dword [ebp - 0x200], 0x16
jmp 0x483bf1
mov eax, dword [ebp - 0x200]
dec eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 0xfffffffc
jge 0x483eb4
mov dword [ebp - 0x6c], 0xcbad86e5
mov dword [ebp - 0x34c], 0
jmp 0x483c1e
mov eax, dword [ebp - 0x34c]
inc eax
mov dword [ebp - 0x34c], eax
cmp dword [ebp - 0x34c], 2
jge 0x483c3a
mov eax, dword [ebp - 0x34c]
mov dword [ebp + eax*4 - 0x2594], 0x16aac895
jmp 0x483c11
mov dword [ebp - 0xbc0], 0x62e7
mov dword [ebp - 0x1e64], 0xaab918
cmp dword [ebp - 0xbc0], 0x646d
jle 0x483d14
and dword [ebp - 0x620], 0
jmp 0x483c74
mov eax, dword [ebp - 0x620]
inc eax
mov dword [ebp - 0x620], eax
cmp dword [ebp - 0x620], 0x3533
jge 0x483d0a
and dword [ebp - 0x354], 0
jmp 0x483c9a
mov eax, dword [ebp - 0x354]
inc eax
mov dword [ebp - 0x354], eax
cmp dword [ebp - 0x354], 0x5135
jge 0x483d05
and dword [ebp - 0x870], 0
jmp 0x483cbc
mov eax, dword [ebp - 0x870]
inc eax
mov dword [ebp - 0x870], eax
cmp dword [ebp - 0x870], 0x104f
jge 0x483d03
mov eax, dword [ebp - 0x620]
imul eax, dword [ebp - 0x354]
cdq
idiv dword [ebp - 0x870]
mov eax, edx
cdq
mov dword [ebp - 0x1808], eax
mov dword [ebp - 0x1804], edx
push dword [ebp - 0x1804]
push dword [ebp - 0x1808]
mov ecx, 0xac0918
call fcn.00408e98
jmp 0x483caf
jmp 0x483c8d
jmp 0x483c67
push 0
push 0
call dword [0xac313c]
mov dword [ebp - 0x6c], 1
jmp 0x483d24
mov eax, dword [ebp - 0x6c]
dec eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
jl 0x483e66
cmp dword [ebp - 0x6c], 0x3b37
jge 0x483d7e
push dword [ebp - 0x6c]
lea ecx, [ebp - 0x1538]
call fcn.004092db
cmp dword [eax], 0
jne 0x483d56
mov dword [ebp - 0x1058], 1
jmp 0x483d5d
and dword [ebp - 0x1058], 0
mov eax, dword [ebp - 0x200]
cmp dword [ebp - 0x1058], eax
jne 0x483d77
mov dword [ebp - 0xba8], 1
jmp 0x483d7e
and dword [ebp - 0xba8], 0
cmp dword [ebp - 0x6c], 0xf746
je 0x483d93
mov dword [ebp - 0x13e0], 1
jmp 0x483d9a
and dword [ebp - 0x13e0], 0
mov esi, dword [ebp - 0x13e0]
sub esi, dword [ebp - 0x6c]
push dword [ebp - 0x6c]
lea ecx, [ebp - 0x1538]
call fcn.004092db
cmp esi, dword [eax]
jl 0x483dc1
mov dword [ebp - 0xbb0], 1
jmp 0x483dc8
and dword [ebp - 0xbb0], 0
mov eax, dword [ebp - 0xbb0]
neg eax
cmp eax, 0xfffffff9
jne 0x483de1
mov dword [ebp - 0x1060], 1
jmp 0x483de8
and dword [ebp - 0x1060], 0
push dword [ebp - 0x6c]
lea ecx, [ebp - 0x1538]
call fcn.004092db
mov eax, dword [eax]
cmp eax, dword [ebp - 0x1060]
jne 0x483e0c
mov dword [ebp - 0xbb8], 1
jmp 0x483e13
and dword [ebp - 0xbb8], 0
push dword [ebp - 0x6c]
lea ecx, [ebp - 0x1538]
call fcn.004092db
mov esi, dword [ebp - 0xbb8]
add esi, dword [eax]
push dword [ebp - 0x6c]
lea ecx, [ebp - 0x1538]
call fcn.004092db
cmp esi, dword [eax]
jge 0x483e47
mov dword [ebp - 0x12b8], 1
jmp 0x483e4e
and dword [ebp - 0x12b8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x12b8]
mov dword [ebp + eax - 0x2594], ecx
jmp 0x483d1d
mov dword [ebp - 4], 0x10
cmp dword [ebp - 0xbc0], 0x615c
jge 0x483e89
mov edx, dword [ebp - 0x1e64]
mov ecx, 0xac0918
call fcn.0040bb10
jmp 0x483ea5
or dword [ebp - 4], 0xffffffff
jmp 0x483eaf
jmp 0x483be4
push 0x5407
push 0x6b7b
push 0x6bc9
push 0x7de7
push 0x1896
push 1
push 0x3d03
push 1
call fcn.004712f7
add esp, 0x20
lea ecx, [ebp - 0x1538]
call fcn.004092bf
push 0x1535
lea eax, [ebp - 0x273c]
push eax
push 0x7b7d
push 0
push 1
push 0x7a04
lea eax, [ebp - 0x2130]
push eax
push 0x7e82
push 1
push 0x19fb
push 0x2463
call fcn.00478e61
add esp, 0x2c
lea eax, [ebp - 0x2130]
push eax
push 0x560
lea eax, [ebp - 0x1e6c]
push eax
lea eax, [ebp - 0x1068]
push eax
lea eax, [ebp - 0xbc8]
push eax
push 1
push 0xba9
push 0
lea eax, [ebp - 0x1e74]
push eax
push 0x7661
lea eax, [ebp - 0xd0]
push eax
call fcn.0046e0b1
add esp, 0x2c
lea ecx, [ebp - 0x2130]
call fcn.004092bf
jmp 0x4831f7
mov byte [ebp - 0x29], 0
mov dword [ebp - 0x2410], 1
mov dword [ebp - 0x2778], 0xfffffffe
mov dword [ebp - 0x2418], 0x9a3df603
mov dword [ebp - 0x274c], 4
push 3
lea ecx, [ebp - 0x24bc]
call fcn.004091ed
mov dword [ebp - 0x1e7c], 0xfbb6
lea eax, [ebp - 0x2420]
push eax
push 0
lea eax, [ebp - 0x24bc]
push eax
push 0x184e
push 0
call fcn.00468a76
add esp, 0x14
push 0x49d2
lea eax, [ebp - 0x1e7c]
push eax
push 1
push 0x67fe
push 0
push 1
call fcn.00479a8b
add esp, 0x18
lea ecx, [ebp - 0x24bc]
call fcn.004092bf
mov dword [ebp - 0x1c], 0xffff
mov dword [ebp - 0x174c], 0xf8ba7967
mov dword [ebp - 0x1e84], 0xffffffff
push 2
lea ecx, [ebp - 0x21a8]
call fcn.004091ed
push 0x4cad
push 0
push 0x4c63
lea eax, [ebp - 0x21a8]
push eax
lea eax, [ebp - 0x2780]
push eax
push 0
push 0x8d
call fcn.00477043
add esp, 0x1c
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x2428], eax
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x1c]
jne 0x484075
mov dword [ebp - 0x147c], 1
jmp 0x48407c
and dword [ebp - 0x147c], 0
cmp dword [ebp - 0x147c], 0xe1c5
je 0x484094
mov dword [ebp - 0xbd0], 1
jmp 0x48409b
and dword [ebp - 0xbd0], 0
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0xbd0]
cmp eax, 0x266d210e
jl 0x4840b8
mov dword [ebp - 0x1070], 1
jmp 0x4840bf
and dword [ebp - 0x1070], 0
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x1070]
je 0x4840d6
mov dword [ebp - 0xbd8], 1
jmp 0x4840dd
and dword [ebp - 0xbd8], 0
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0xbd8]
jg 0x4840f4
mov dword [ebp - 0x12c0], 1
jmp 0x4840fb
and dword [ebp - 0x12c0], 0
imul eax, dword [ebp - 0x12c0], 0xa9b
test eax, eax
jne 0x484118
cmp dword [ebp - 0x1c], 0
jne 0x484118
and dword [ebp - 0xbe0], 0
jmp 0x484122
mov dword [ebp - 0xbe0], 1
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0xbe0], eax
jle 0x484139
mov dword [ebp - 0x1078], 1
jmp 0x484140
and dword [ebp - 0x1078], 0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x2788], eax
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x1c]
jne 0x484163
mov dword [ebp - 0xbe8], 1
jmp 0x48416a
and dword [ebp - 0xbe8], 0
mov eax, dword [ebp - 0xbe8]
neg eax
cmp eax, 0xfffffff8
jge 0x484183
mov dword [ebp - 0x13e8], 1
jmp 0x48418a
and dword [ebp - 0x13e8], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x13e8], eax
jge 0x4842c2
mov dword [ebp - 0x1080], 0xfffffff7
mov dword [ebp - 0x1adc], 7
mov dword [ebp - 0x1e8c], 0
mov dword [ebp - 0x1c], 0xc
jmp 0x4841c7
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x13
jl 0x484292
mov dword [ebp - 0x290], 0
mov dword [ebp - 0xbf0], 0
mov dword [ebp - 0x290], 0
jmp 0x4841fe
mov eax, dword [ebp - 0x290]
dec eax
mov dword [ebp - 0x290], eax
cmp dword [ebp - 0x290], 0xffffffe2
je 0x484242
push 0
push 0
call fcn.0046c4df
pop ecx
pop ecx
push 0
push 1
push 0x2981
push 1
lea eax, [ebp - 0xbf0]
push eax
push 0x7708
push 0x6ada
push 0x6996
push 0x3643
call fcn.0047d50a
add esp, 0x24
jmp 0x4841f1
lea eax, [ebp - 0x1e84]
push eax
lea eax, [ebp - 0x1080]
push eax
lea eax, [ebp - 0x290]
push eax
lea eax, [ebp - 0x1e8c]
push eax
lea eax, [ebp - 0x1adc]
push eax
push 1
push 1
lea eax, [ebp - 0x174c]
push eax
lea eax, [ebp - 0x1c]
push eax
push 0x281e
push 0x532
lea eax, [ebp - 0xbf0]
push eax
call fcn.0047167c
add esp, 0x30
jmp 0x4841c0
push 0x468b
push 0x5d13
push 0x6f1d
push 0
lea eax, [ebp - 0x21a8]
push eax
lea eax, [ebp - 0x1080]
push eax
push 0x2f88
push 0
call fcn.00470e18
add esp, 0x20
jmp 0x4842d3
push 0
push 0
push 0x4a4e
call fcn.00480fd6
add esp, 0xc
lea ecx, [ebp - 0x21a8]
call fcn.004092bf
mov dword [ebp - 0xbf8], 0x6f1b
mov dword [ebp - 0x15c0], 0xaab960
cmp dword [ebp - 0xbf8], 0x6ff0
jle 0x4843cc
and dword [ebp - 0x364], 0
jmp 0x484318
mov eax, dword [ebp - 0x364]
inc eax
mov dword [ebp - 0x364], eax
cmp dword [ebp - 0x364], 0x7d62
jge 0x4843cc
and dword [ebp - 0x35c], 0
jmp 0x48433e
mov eax, dword [ebp - 0x35c]
inc eax
mov dword [ebp - 0x35c], eax
cmp dword [ebp - 0x35c], 0x5af5
jge 0x4843c7
and dword [ebp - 0x628], 0
jmp 0x484360
mov eax, dword [ebp - 0x628]
inc eax
mov dword [ebp - 0x628], eax
cmp dword [ebp - 0x628], 0x3086
jge 0x4843c2
mov eax, dword [ebp - 0x35c]
cdq
idiv dword [ebp - 0x628]
xor edx, dword [ebp - 0x364]
mov eax, edx
cdq
mov dword [ebp - 0x1814], eax
mov dword [ebp - 0x1810], edx
push dword [ebp - 0x1810]
push dword [ebp - 0x1814]
lea ecx, [ebp - 0x2d48]
call fcn.00401a21
pop ecx
pop ecx
mov ecx, eax
call fcn.00408e8d
push eax
call fcn.004a3217
pop ecx
lea ecx, [ebp - 0x2d48]
call fcn.00408e83
jmp 0x484353
jmp 0x484331
jmp 0x48430b
mov dword [ebp - 4], 0x12
cmp dword [ebp - 0xbf8], 0x6d69
jge 0x4843eb
push dword [ebp - 0x15c0]
call fcn.004a3217
pop ecx
jmp 0x484407
or dword [ebp - 4], 0xffffffff
jmp 0x484411
mov dword [ebp - 0x1c44], 1
mov dword [ebp - 0x778], 0x47a6deec
mov dword [ebp - 0xa1c], 0x328f6c74
mov dword [ebp - 0x1eb0], 0x2276b87d
mov dword [ebp - 0x1eac], 0x2276b87d
mov dword [ebp - 0x1ea8], 0x2276b87d
mov dword [ebp - 0x1ea4], 0x2276b87d
mov dword [ebp - 0x2430], 9
push 4
lea ecx, [ebp - 0x2208]
call fcn.004091ed
push 3
lea ecx, [ebp - 0x2148]
call fcn.004091ed
mov dword [ebp - 0x1090], 0x407293cc
mov dword [ebp - 0x208], 0
jmp 0x48449e
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 4
jge 0x4844c0
push dword [ebp - 0x208]
lea ecx, [ebp - 0x2208]
call fcn.004092db
mov dword [eax], 0x401d
jmp 0x484491
push 0x1af6
push 0
push 0x3421
push 1
push 0x7614
lea eax, [ebp - 0x2148]
push eax
push 0x5d0f
lea eax, [ebp - 0x208]
push eax
call fcn.0046d659
add esp, 0x20
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1eb0]
mov dword [ebp - 0x283c], eax
cmp dword [ebp - 0x778], 0
jne 0x48451a
push 5
pop eax
test eax, eax
jne 0x48451a
and dword [ebp - 0x12c8], 0
jmp 0x484524
mov dword [ebp - 0x12c8], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1eb0]
cmp dword [ebp - 0x12c8], eax
jne 0x484545
mov dword [ebp - 0xc00], 1
jmp 0x48454c
and dword [ebp - 0xc00], 0
mov eax, dword [ebp - 0x778]
add eax, dword [ebp - 0xc00]
mov dword [ebp - 0x778], eax
mov eax, dword [ebp - 0x778]
mov dword [ebp - 0x2438], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x1eb0]
dec eax
cmp eax, 8
je 0x484589
mov dword [ebp - 0x1088], 1
jmp 0x484590
and dword [ebp - 0x1088], 0
push 0
lea ecx, [ebp - 0x2148]
call fcn.004092db
mov dword [ebp - 0x9b0], eax
mov eax, dword [ebp - 0x9b0]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x9b0]
mov dword [ecx], eax
mov eax, dword [ebp - 0x9b0]
mov eax, dword [eax]
mov dword [ebp - 0xa1c], eax
mov eax, dword [ebp - 0xa1c]
cmp eax, dword [ebp - 0x1088]
jl 0x4845dc
mov dword [ebp - 0xc08], 1
jmp 0x4845e3
and dword [ebp - 0xc08], 0
mov eax, dword [ebp - 0x1c44]
cmp eax, dword [ebp - 0xc08]
jl 0x4845fd
mov dword [ebp - 0x14e4], 1
jmp 0x484604
and dword [ebp - 0x14e4], 0
mov eax, dword [ebp - 0x14e4]
add eax, 4
je 0x484680
mov dword [ebp - 0x1ae8], 1
mov dword [ebp - 0x15c8], 1
mov dword [ebp - 0x15d0], 0xffffffff
push 0x6556
push 0x5a7b
push 0x205f
lea eax, [ebp - 0x15c8]
push eax
push 0
lea eax, [ebp - 0x1ae8]
push eax
lea eax, [ebp - 0x2208]
push eax
lea eax, [ebp - 0x1090]
push eax
lea eax, [ebp - 0xa1c]
push eax
push 0
push 0x5632
push 1
lea eax, [ebp - 0x15d0]
push eax
push 0x2568
call fcn.0047f557
add esp, 0x38
jmp 0x4846e4
mov dword [ebp - 0x36c], 0
jmp 0x484699
mov eax, dword [ebp - 0x36c]
inc eax
mov dword [ebp - 0x36c], eax
cmp dword [ebp - 0x36c], 1
jge 0x4846b5
mov eax, dword [ebp - 0x36c]
mov dword [ebp + eax*4 - 0x1c4c], 0xfd39ef5b
jmp 0x48468c
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1c4c], 0
jae 0x4846d1
mov dword [ebp - 0xc10], 1
jmp 0x4846d8
and dword [ebp - 0xc10], 0
mov eax, dword [ebp - 0xc10]
mov dword [ebp - 0x1090], eax
push 1
push 0x7d85
push 0
push 0x4efe
call fcn.0046c041
add esp, 0x10
lea ecx, [ebp - 0x2148]
call fcn.004092bf
lea ecx, [ebp - 0x2208]
call fcn.004092bf
mov dword [ebp - 0x275c], 1
mov dword [ebp - 0x14c], 0xf70ad6f2
push 3
lea ecx, [ebp - 0x1ec8]
call fcn.004091ed
push 4
lea ecx, [ebp - 0x207c]
call fcn.004091ed
mov dword [ebp - 0x1c54], 1
push 0x3ba7
push 0x4be8
push 0x6c04
push 0x72c8
push 0
push 0x2f3a
push 0x6bea
lea eax, [ebp - 0x1ec8]
push eax
push 0x2798
push 0x6a18
push 0x7eda
push 0x60a5
lea eax, [ebp - 0x15d8]
push eax
push 0
call fcn.004752ef
add esp, 0x38
push 0x5eb4
push 0
lea eax, [ebp - 0x207c]
push eax
push 0xda0
push 0x4d41
push 1
push 0x51ad
push 0x4e3
push 0x382e
lea eax, [ebp - 0x15d8]
push eax
call fcn.00474f62
add esp, 0x28
push 0x1c6
lea eax, [ebp - 0x14c]
push eax
push 0
push 1
push 0x45b4
push 0xa56
push 0x7b4a
push 0x30e4
push 0x622f
push 0x4d84
push 0
push 0x40f8
call fcn.0046d979
add esp, 0x30
mov dword [ebp - 0x14c], 0
jmp 0x484822
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 2
jg 0x484a8c
mov dword [ebp - 0x1b00], 0x7c8748af
mov dword [ebp - 0x2440], 1
mov dword [ebp - 0x15e8], 0xfffffffe
push 2
lea ecx, [ebp - 0x24cc]
call fcn.004091ed
mov dword [ebp - 0x15e0], 0x2c51978e
mov dword [ebp - 0xc18], 0x2c16
mov dword [ebp - 0x1af4], 0xaab980
cmp dword [ebp - 0xc18], 0x2ca7
jle 0x484953
and dword [ebp - 0x630], 0
jmp 0x48489e
mov eax, dword [ebp - 0x630]
inc eax
mov dword [ebp - 0x630], eax
cmp dword [ebp - 0x630], 0x31eb
jge 0x484953
and dword [ebp - 0x374], 0
jmp 0x4848c4
mov eax, dword [ebp - 0x374]
inc eax
mov dword [ebp - 0x374], eax
cmp dword [ebp - 0x374], 0x81
jge 0x48494e
and dword [ebp - 0x820], 0
jmp 0x4848e6
mov eax, dword [ebp - 0x820]
inc eax
mov dword [ebp - 0x820], eax
cmp dword [ebp - 0x820], 0x5f7d
jge 0x484949
mov eax, dword [ebp - 0x630]
mov ecx, dword [ebp - 0x374]
sar eax, cl
mov ecx, dword [ebp - 0x820]
sar eax, cl
cdq
mov dword [ebp - 0x1820], eax
mov dword [ebp - 0x181c], edx
push dword [ebp - 0x181c]
push dword [ebp - 0x1820]
lea ecx, [ebp - 0x2b68]
call fcn.00401a21
pop ecx
pop ecx
mov ecx, eax
call fcn.00408e8d
push eax
call fcn.004a3217
pop ecx
lea ecx, [ebp - 0x2b68]
call fcn.00408e83
jmp 0x4848d9
jmp 0x4848b7
jmp 0x484891
mov dword [ebp - 0x37c], 0
jmp 0x48496c
mov eax, dword [ebp - 0x37c]
inc eax
mov dword [ebp - 0x37c], eax
cmp dword [ebp - 0x37c], 2
jge 0x48498e
push dword [ebp - 0x37c]
lea ecx, [ebp - 0x24cc]
call fcn.004092db
mov dword [eax], 0xd1c58bdf
jmp 0x48495f
mov dword [ebp - 4], 0x14
cmp dword [ebp - 0xc18], 0x29c8
jge 0x4849ad
push dword [ebp - 0x1af4]
call fcn.004a3217
pop ecx
jmp 0x4849c9
or dword [ebp - 4], 0xffffffff
jmp 0x4849d3
lea eax, [ebp - 0x1ec8]
push eax
push 1
push 0x2c8c
push 0x4a86
lea eax, [ebp - 0x14c]
push eax
push 1
push 1
push 0x14b6
push 0x2520
push 0x6771
call fcn.00471da7
add esp, 0x28
lea eax, [ebp - 0x15e0]
push eax
push 1
lea eax, [ebp - 0x1c54]
push eax
push 0x22f6
push 0x1b5e
push 0x79da
push 0xb77
push 1
push 0x7df0
lea eax, [ebp - 0x14c]
push eax
push 0x5e37
push 0x1d6b
lea eax, [ebp - 0x207c]
push eax
lea eax, [ebp - 0x15e8]
push eax
push 0x7e69
push 0x25c6
push 0x79e6
lea eax, [ebp - 0x1ec8]
push eax
push 0x6f24
lea eax, [ebp - 0x1b00]
push eax
call fcn.0047267b
add esp, 0x50
lea ecx, [ebp - 0x24cc]
call fcn.004092bf
jmp 0x484815
lea ecx, [ebp - 0x207c]
call fcn.004092bf
lea ecx, [ebp - 0x1ec8]
call fcn.004092bf
mov dword [ebp - 0x27e4], 0xfffffffe
mov dword [ebp - 0x394], 0xe87df2f4
mov dword [ebp - 0x12d0], 0x791d
mov dword [ebp - 0x15f0], 0xaab9b0
cmp dword [ebp - 0x12d0], 0x7945
jle 0x484bc7
and dword [ebp - 0x638], 0
jmp 0x484af0
mov eax, dword [ebp - 0x638]
inc eax
mov dword [ebp - 0x638], eax
cmp dword [ebp - 0x638], 0x7d9c
jge 0x484bb3
and dword [ebp - 0x384], 0
jmp 0x484b16
mov eax, dword [ebp - 0x384]
inc eax
mov dword [ebp - 0x384], eax
cmp dword [ebp - 0x384], 0x4825
jge 0x484bae
and dword [ebp - 0x780], 0
jmp 0x484b3c
mov eax, dword [ebp - 0x780]
inc eax
mov dword [ebp - 0x780], eax
cmp dword [ebp - 0x780], 0x341b
jge 0x484ba9
and dword [ebp - 0x38c], 0
jmp 0x484b5e
mov eax, dword [ebp - 0x38c]
inc eax
mov dword [ebp - 0x38c], eax
cmp dword [ebp - 0x38c], 0xef4
jge 0x484ba7
mov eax, dword [ebp - 0x638]
sub eax, dword [ebp - 0x384]
sub eax, dword [ebp - 0x780]
or eax, dword [ebp - 0x38c]
cdq
mov dword [ebp - 0x182c], eax
mov dword [ebp - 0x1828], edx
push dword [ebp - 0x1828]
push dword [ebp - 0x182c]
mov ecx, 0xac0918
call fcn.00408e98
jmp 0x484b51
jmp 0x484b2f
jmp 0x484b09
jmp 0x484ae3
push 0
push 0
push 0x2576
push 0x25e4
call dword [0xac33f8]
mov dword [ebp - 0x1b0c], 1
mov dword [ebp - 4], 0x16
cmp dword [ebp - 0x12d0], 0x77da
jge 0x484bf4
mov edx, dword [ebp - 0x15f0]
mov ecx, 0xac0918
call fcn.0040bb10
jmp 0x484c10
or dword [ebp - 4], 0xffffffff
jmp 0x484c1a
mov dword [ebp - 0x1c64], 0x440874b2
mov dword [ebp - 0x640], 0
jmp 0x484c3d
mov eax, dword [ebp - 0x640]
inc eax
mov dword [ebp - 0x640], eax
cmp dword [ebp - 0x640], 2
jge 0x484c59
mov eax, dword [ebp - 0x640]
mov dword [ebp + eax*4 - 0x2690], 0xcff0ea75
jmp 0x484c30
mov dword [ebp - 0x394], 0
jmp 0x484c72
mov eax, dword [ebp - 0x394]
inc eax
mov dword [ebp - 0x394], eax
cmp dword [ebp - 0x394], 1
jg 0x484fd7
mov dword [ebp - 0x15f8], 1
mov dword [ebp - 0xc20], 0x33d6
mov dword [ebp - 0x1c5c], 0xaaba08
cmp dword [ebp - 0xc20], 0x3562
jle 0x484d8a
and dword [ebp - 0x8b0], 0
jmp 0x484cc3
mov eax, dword [ebp - 0x8b0]
inc eax
mov dword [ebp - 0x8b0], eax
cmp dword [ebp - 0x8b0], 0x771b
jge 0x484d8a
and dword [ebp - 0x39c], 0
jmp 0x484ce9
mov eax, dword [ebp - 0x39c]
inc eax
mov dword [ebp - 0x39c], eax
cmp dword [ebp - 0x39c], 0x323e
jge 0x484d85
and dword [ebp - 0x648], 0
jmp 0x484d0f
mov eax, dword [ebp - 0x648]
inc eax
mov dword [ebp - 0x648], eax
cmp dword [ebp - 0x648], 0x5c51
jge 0x484d80
and dword [ebp - 0x3a4], 0
jmp 0x484d31
mov eax, dword [ebp - 0x3a4]
inc eax
mov dword [ebp - 0x3a4], eax
cmp dword [ebp - 0x3a4], 0x2414
jge 0x484d7e
mov eax, dword [ebp - 0x8b0]
sub eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x648]
sar eax, cl
mov ecx, dword [ebp - 0x3a4]
shl eax, cl
cdq
mov dword [ebp - 0x1838], eax
mov dword [ebp - 0x1834], edx
push dword [ebp - 0x1834]
push dword [ebp - 0x1838]
mov ecx, 0xac0918
call fcn.00408e98
jmp 0x484d24
jmp 0x484d02
jmp 0x484cdc
jmp 0x484cb6
or dword [ebp - 0x1fb0], 0xffffffff
or dword [ebp - 0x1fac], 0xffffffff
or dword [ebp - 0x1fa8], 0xffffffff
or dword [ebp - 0x1fa4], 0xffffffff
lea ecx, [ebp - 0x98d]
call fcn.004092ea
push eax
lea eax, [ebp - 0x1fa0]
push eax
lea eax, [ebp - 0x1fb0]
push eax
lea ecx, [ebp - 0x2948]
call fcn.004092ed
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x2910]
call fcn.00409299
mov dword [ebp - 4], 0x18
cmp dword [ebp - 0xc20], 0x3336
jge 0x484dfe
mov edx, dword [ebp - 0x1c5c]
mov ecx, 0xac0918
call fcn.0040bb10
jmp 0x484e1a
or dword [ebp - 4], 0xffffffff
jmp 0x484e24
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x15f8]
mov dword [ebp + eax - 0x2690], ecx
mov dword [ebp - 0x1098], 0x7c3a
mov dword [ebp - 0x1600], 0xaaba68
cmp dword [ebp - 0x1098], 0x7f20
jle 0x484f5b
and dword [ebp - 0x788], 0
jmp 0x484e71
mov eax, dword [ebp - 0x788]
inc eax
mov dword [ebp - 0x788], eax
cmp dword [ebp - 0x788], 0x2afe
jge 0x484f5b
and dword [ebp - 0x3ac], 0
jmp 0x484e97
mov eax, dword [ebp - 0x3ac]
inc eax
mov dword [ebp - 0x3ac], eax
cmp dword [ebp - 0x3ac], 0x1113
jge 0x484f56
and dword [ebp - 0x650], 0
jmp 0x484ebd
mov eax, dword [ebp - 0x650]
inc eax
mov dword [ebp - 0x650], eax
cmp dword [ebp - 0x650], 0x5d47
jge 0x484f51
and dword [ebp - 0x3b4], 0
jmp 0x484ee3
mov eax, dword [ebp - 0x3b4]
inc eax
mov dword [ebp - 0x3b4], eax
cmp dword [ebp - 0x3b4], 0x6205
jge 0x484f4c
mov eax, dword [ebp - 0x788]
and eax, dword [ebp - 0x3ac]
mov edx, dword [ebp - 0x650]
mov ecx, dword [ebp - 0x3b4]
sar edx, cl
or eax, edx
cdq
mov dword [ebp - 0x1844], eax
mov dword [ebp - 0x1840], edx
push dword [ebp - 0x1840]
push dword [ebp - 0x1844]
lea ecx, [ebp - 0x2eb0]
call fcn.00401a21
pop ecx
pop ecx
mov ecx, eax
call fcn.00408e8d
push eax
call fcn.004a3217
pop ecx
lea ecx, [ebp - 0x2eb0]
call fcn.00408e83
jmp 0x484ed6
jmp 0x484eb0
jmp 0x484e8a
jmp 0x484e64
push 0x356d
push 0
push 0x20be
push 0x7a02
push 0x68a1
push 1
lea eax, [ebp - 0x1b0c]
push eax
call fcn.00477043
add esp, 0x1c
mov dword [ebp - 4], 0x1a
cmp dword [ebp - 0x1098], 0x7af4
jge 0x484fa1
push dword [ebp - 0x1600]
call fcn.004a3217
pop ecx
jmp 0x484fbd
or dword [ebp - 4], 0xffffffff
jmp 0x484fc7
lea ecx, [ebp - 0x2910]
call fcn.004092bf
jmp 0x484c65
push 0x18dc
push 0x5d57
push 1
lea eax, [ebp - 0x1c64]
push eax
push 1
push 0
call fcn.00479a8b
add esp, 0x18
mov dword [ebp - 0x2448], 0x9a3df603
mov dword [ebp - 0xc28], 0x27e1
mov dword [ebp - 0x1608], 0xaabaa4
cmp dword [ebp - 0xc28], 0x293f
jle 0x4850ba
and dword [ebp - 0x828], 0
jmp 0x48503a
mov eax, dword [ebp - 0x828]
inc eax
mov dword [ebp - 0x828], eax
cmp dword [ebp - 0x828], 0x36c8
jge 0x4850ba
and dword [ebp - 0x3bc], 0
jmp 0x48505c
mov eax, dword [ebp - 0x3bc]
inc eax
mov dword [ebp - 0x3bc], eax
cmp dword [ebp - 0x3bc], 0x9a4
jge 0x4850b5
mov eax, dword [ebp - 0x828]
add eax, dword [ebp - 0x3bc]
cdq
mov dword [ebp - 0x1850], eax
mov dword [ebp - 0x184c], edx
push dword [ebp - 0x184c]
push dword [ebp - 0x1850]
lea ecx, [ebp - 0x2b98]
call fcn.00401a21
pop ecx
pop ecx
mov ecx, eax
call fcn.00408e8d
push eax
call fcn.004a3217
pop ecx
lea ecx, [ebp - 0x2b98]
call fcn.00408e83
jmp 0x48504f
jmp 0x48502d
mov dword [ebp - 4], 0x1c
cmp dword [ebp - 0xc28], 0x24af
jge 0x4850d9
push dword [ebp - 0x1608]
call fcn.004a3217
pop ecx
jmp 0x4850f5
or dword [ebp - 4], 0xffffffff
jmp 0x4850ff
mov dword [ebp - 0x13f0], 0x49fe387f
mov dword [ebp - 0x1618], 0xf1a9
mov dword [ebp - 0x1c6c], 7
mov dword [ebp - 0x2764], 0xd8131dda
mov dword [ebp - 0x2450], 0x9942796a
mov dword [ebp - 0x658], 0
jmp 0x48514a
mov eax, dword [ebp - 0x658]
inc eax
mov dword [ebp - 0x658], eax
cmp dword [ebp - 0x658], 2
jge 0x485166
mov eax, dword [ebp - 0x658]
mov dword [ebp + eax*4 - 0x2a10], 2
jmp 0x48513d
cmp dword [ebp - 0x13f0], 0
je 0x48520d
mov dword [ebp - 0x1b18], 0xfc88
mov dword [ebp - 0x1610], 0
lea eax, [ebp - 0x1b18]
push eax
push 0x27bd
push 0x776e
push 0x7276
push 0
push 0x2a68
push 0x4d59
push 0x662a
push 0x11ad
lea eax, [ebp - 0x13f0]
push eax
push 0x6f0
push 0x6234
push 0x311b
lea eax, [ebp - 0x1610]
push eax
push 0x59ec
lea eax, [ebp - 0x1c6c]
push eax
push 0x4f54
push 1
lea eax, [ebp - 0x1618]
push eax
push 0xfb8
call fcn.0046bb31
add esp, 0x50
push 1
push 0
push 0x5bb9
call fcn.00476540
add esp, 0xc
jmp 0x485600
mov dword [ebp - 0x285c], 0xfffffffa
mov dword [ebp - 0xc30], 0x6f48
mov dword [ebp - 0x1b24], 0xaabad8
cmp dword [ebp - 0xc30], 0x71bd
jle 0x4852e3
and dword [ebp - 0x3c4], 0
jmp 0x485251
mov eax, dword [ebp - 0x3c4]
inc eax
mov dword [ebp - 0x3c4], eax
cmp dword [ebp - 0x3c4], 0x603c
jge 0x4852e3
and dword [ebp - 0x790], 0
jmp 0x485277
mov eax, dword [ebp - 0x790]
inc eax
mov dword [ebp - 0x790], eax
cmp dword [ebp - 0x790], 0x193d
jge 0x4852de
and dword [ebp - 0x3cc], 0
jmp 0x485299
mov eax, dword [ebp - 0x3cc]
inc eax
mov dword [ebp - 0x3cc], eax
cmp dword [ebp - 0x3cc], 0x5530
jge 0x4852dc
mov eax, dword [ebp - 0x3c4]
add eax, dword [ebp - 0x790]
sub eax, dword [ebp - 0x3cc]
cdq
mov dword [ebp - 0x185c], eax
mov dword [ebp - 0x1858], edx
push dword [ebp - 0x1858]
push dword [ebp - 0x185c]
mov ecx, 0xac0918
call fcn.00408e98
jmp 0x48528c
jmp 0x48526a
jmp 0x485244
mov dword [ebp - 0x2458], 0x857b1a09
mov dword [ebp - 4], 0x1e
cmp dword [ebp - 0xc30], 0x6e64
jge 0x485310
mov edx, dword [ebp - 0x1b24]
mov ecx, 0xac0918
call fcn.0040bb10
jmp 0x48532c
or dword [ebp - 4], 0xffffffff
jmp 0x485336
mov dword [ebp - 0x276c], 0x2d50c857
mov dword [ebp - 0x10a0], 0x6b62
mov dword [ebp - 0x1620], 0xaabb0c
cmp dword [ebp - 0x10a0], 0x6bbe
jle 0x485441
and dword [ebp - 0x660], 0
jmp 0x48537a
mov eax, dword [ebp - 0x660]
inc eax
mov dword [ebp - 0x660], eax
cmp dword [ebp - 0x660], 0x145
jge 0x485441
and dword [ebp - 0x3d4], 0
jmp 0x4853a0
mov eax, dword [ebp - 0x3d4]
inc eax
mov dword [ebp - 0x3d4], eax
cmp dword [ebp - 0x3d4], 0x41e8
jge 0x48543c
and dword [ebp - 0x878], 0
jmp 0x4853c6
mov eax, dword [ebp - 0x878]
inc eax
mov dword [ebp - 0x878], eax
cmp dword [ebp - 0x878], 0x2629
jge 0x485437
and dword [ebp - 0x3dc], 0
jmp 0x4853e8
mov eax, dword [ebp - 0x3dc]
inc eax
mov dword [ebp - 0x3dc], eax
cmp dword [ebp - 0x3dc], 0x1219
jge 0x485435
mov eax, dword [ebp - 0x660]
sub eax, dword [ebp - 0x3d4]
mov ecx, dword [ebp - 0x878]
sar eax, cl
mov ecx, dword [ebp - 0x3dc]
sar eax, cl
cdq
mov dword [ebp - 0x1868], eax
mov dword [ebp - 0x1864], edx
push dword [ebp - 0x1864]
push dword [ebp - 0x1868]
mov ecx, 0xac0918
call fcn.00408e98
jmp 0x4853db
jmp 0x4853b9
jmp 0x485393
jmp 0x48536d
mov dword [ebp - 0x2460], 0xfffffff6
mov dword [ebp - 4], 0x20
cmp dword [ebp - 0x10a0], 0x6b01
jge 0x48546e
mov edx, dword [ebp - 0x1620]
mov ecx, 0xac0918
call fcn.0040bb10
jmp 0x48548a
or dword [ebp - 4], 0xffffffff
jmp 0x485494
mov dword [ebp - 0xc38], 0x5940
mov dword [ebp - 0x1c74], 0xaabb58
cmp dword [ebp - 0xc38], 0x5ad9
jle 0x48554e
and dword [ebp - 0x668], 0
jmp 0x4854ce
mov eax, dword [ebp - 0x668]
inc eax
mov dword [ebp - 0x668], eax
cmp dword [ebp - 0x668], 0x2f2c
jge 0x48554e
and dword [ebp - 0x3e4], 0
jmp 0x4854f0
mov eax, dword [ebp - 0x3e4]
inc eax
mov dword [ebp - 0x3e4], eax
cmp dword [ebp - 0x3e4], 0x588a
jge 0x485549
mov eax, dword [ebp - 0x668]
add eax, dword [ebp - 0x3e4]
cdq
mov dword [ebp - 0x1874], eax
mov dword [ebp - 0x1870], edx
push dword [ebp - 0x1870]
push dword [ebp - 0x1874]
lea ecx, [ebp - 0x2d78]
call fcn.00401a21
pop ecx
pop ecx
mov ecx, eax
call fcn.00408e8d
push eax
call fcn.004a3217
pop ecx
lea ecx, [ebp - 0x2d78]
call fcn.00408e83
jmp 0x4854e3
jmp 0x4854c1
push 2
lea ecx, [ebp - 0x24dc]
call fcn.004091ed
mov dword [ebp - 4], 0x22
cmp dword [ebp - 0xc38], 0x57a0
jge 0x48557a
push dword [ebp - 0x1c74]
call fcn.004a3217
pop ecx
jmp 0x485596
or dword [ebp - 4], 0xffffffff
jmp 0x4855a0
mov dword [ebp - 0x1628], 0x674643a6
push 0
lea eax, [ebp - 0x25e0]
push eax
push 0
push 0x238d
push 0x3f98
lea eax, [ebp - 0x24dc]
push eax
call fcn.00477f9f
add esp, 0x18
push 0x7240
push 0x39d9
push 0x7331
push 0
push 1
lea eax, [ebp - 0x1628]
push eax
push 0x42de
call fcn.0046d7f4
add esp, 0x1c
lea ecx, [ebp - 0x24dc]
call fcn.004092bf
mov dword [ebp - 0x2468], 4
mov dword [ebp - 0x798], 0
mov dword [ebp - 0x798], 0xffffffea
jmp 0x48562d
mov eax, dword [ebp - 0x798]
inc eax
mov dword [ebp - 0x798], eax
cmp dword [ebp - 0x798], 0xffffffef
jl 0x48572a
mov dword [ebp - 0xc4], 0
jmp 0x485653
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 4
jge 0x48566f
mov eax, dword [ebp - 0xc4]
mov dword [ebp + eax*4 - 0x27fc], 0xffffffff
jmp 0x485646
mov dword [ebp - 0xc4], 0
jmp 0x485688
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 2
jge 0x4856a4
mov eax, dword [ebp - 0xc4]
mov dword [ebp + eax*4 - 0xa18], 0x4768c0aa
jmp 0x48567b
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xa18], 3
jmp 0x4856d2
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa18]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xa18], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xa18], 0
jl 0x485725
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa18]
cmp dword [ebp + eax*4 - 0x27fc], 0
je 0x4856fb
jmp 0x485725
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa18]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0xa18]
mov eax, dword [ebp + eax*4 - 0x27fc]
mov dword [ebp + ecx*4 - 0x27fc], eax
jmp 0x4856b7
jmp 0x485620
push 3
lea ecx, [ebp - 0x24ec]
call fcn.004091ed
mov dword [ebp - 0x1638], 0x4039b642
mov dword [ebp - 0xc70], 0x43d837bc
mov dword [ebp - 0xc40], 0x871d976f
mov dword [ebp - 0x1b30], 0
mov dword [ebp - 0x1640], 1
mov dword [ebp - 0x25e4], 0x9c4185a1
push 4
lea ecx, [ebp - 0x2094]
call fcn.004091ed
mov dword [ebp - 0x2050], 0xcd953295
mov dword [ebp - 0x204c], 0xcd953295
mov dword [ebp - 0x2048], 0xcd953295
mov dword [ebp - 0x2044], 0xcd953295
lea ecx, [ebp - 0xa01]
call fcn.004092ea
push eax
lea eax, [ebp - 0x2040]
push eax
lea eax, [ebp - 0x2050]
push eax
lea ecx, [ebp - 0x29b0]
call fcn.004092ed
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x2928]
call fcn.00409299
mov dword [ebp - 0x2470], 0xffffffff
mov dword [ebp - 0x25ec], 1
mov dword [ebp - 0x10c0], 0
mov dword [ebp - 0x258], 0
jmp 0x485814
mov eax, dword [ebp - 0x258]
inc eax
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 1
jge 0x485830
mov eax, dword [ebp - 0x258]
mov dword [ebp + eax*4 - 0x9b8], 9
jmp 0x485807
push 1
push 0x644c
lea eax, [ebp - 0x258]
push eax
lea eax, [ebp - 0x2094]
push eax
push 0x13c1
push 0
push 0x438d
push 0x593b
push 0x44e5
push 0x71ff
push 0x2aa6
push 0x33b2
push 0x146f
push 0
call fcn.00476dad
add esp, 0x38
lea eax, [ebp - 0x10c0]
push eax
push 1
push 0x698c
push 0
call fcn.00469c34
add esp, 0x10
mov eax, dword [ebp - 0x1b30]
cmp dword [ebp - 0xc70], eax
jl 0x485bd0
mov dword [ebp - 0x104], 0xfffffffd
mov dword [ebp - 0x154], 0x2c22b60d
mov dword [ebp - 0x1fd8], 0x35bd
mov dword [ebp - 0x1fd4], 0x35bd
mov dword [ebp - 0x1fd0], 0x35bd
mov dword [ebp - 0x1fcc], 0x35bd
lea ecx, [ebp - 0xa09]
call fcn.004092ea
push eax
lea eax, [ebp - 0x1fc8]
push eax
lea eax, [ebp - 0x1fd8]
push eax
lea ecx, [ebp - 0x2a18]
call fcn.004092ed
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xa64]
call fcn.00409299
mov eax, dword [ebp - 0x104]
add eax, dword [ebp - 0x104]
je 0x48597a
cmp dword [ebp - 0x104], 0
jne 0x48594f
push 3
lea ecx, [ebp - 0x2094]
call fcn.004092db
cmp dword [eax], 0
jne 0x48594f
cmp dword [ebp - 0xc40], 0
jne 0x48594f
and dword [ebp - 0x12d8], 0
jmp 0x485959
mov dword [ebp - 0x12d8], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x12d8]
sub ecx, dword [ebp + eax - 0x9b8]
je 0x48597a
mov dword [ebp - 0x10a8], 1
jmp 0x485981
and dword [ebp - 0x10a8], 0
mov eax, dword [ebp - 0xc40]
cmp dword [ebp - 0x10a8], eax
jl 0x48599b
mov dword [ebp - 0xc48], 1
jmp 0x4859a2
and dword [ebp - 0xc48], 0
mov eax, dword [ebp - 0xc48]
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 0
jne 0x4859c3
mov dword [ebp - 0x1630], 1
jmp 0x4859ca
and dword [ebp - 0x1630], 0
cmp dword [ebp - 0x104], 6
jne 0x4859df
mov dword [ebp - 0x148c], 1
jmp 0x4859e6
and dword [ebp - 0x148c], 0
cmp dword [ebp - 0x148c], 0xfffffffe
jne 0x4859fb
mov dword [ebp - 0xc50], 1
jmp 0x485a02
and dword [ebp - 0xc50], 0
push 0
lea ecx, [ebp - 0xa64]
call fcn.004092db
push 0
lea ecx, [ebp - 0xa64]
call fcn.004092db
cmp dword [eax], 0
je 0x485a36
cmp dword [ebp - 0x104], 0
je 0x485a36
mov dword [ebp - 0x10b0], 1
jmp 0x485a3d
and dword [ebp - 0x10b0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x10b0]
mov dword [ebp + eax - 0x9b8], ecx
mov esi, dword [ebp - 0x154]
push 0
lea ecx, [ebp - 0xa64]
call fcn.004092db
cmp esi, dword [eax]
jge 0x485a73
mov dword [ebp - 0xc58], 1
jmp 0x485a7a
and dword [ebp - 0xc58], 0
mov esi, dword [ebp - 0xc58]
sub esi, dword [ebp - 0x154]
push 0
lea ecx, [ebp - 0xa64]
call fcn.004092db
add esi, dword [eax]
jne 0x485ab2
push 0
lea ecx, [ebp - 0xa64]
call fcn.004092db
cmp dword [eax], 0
jne 0x485ab2
and dword [ebp - 0x12e0], 0
jmp 0x485abc
mov dword [ebp - 0x12e0], 1
push 2
lea ecx, [ebp - 0xa64]
call fcn.004092db
mov ecx, dword [ebp - 0x12e0]
cmp ecx, dword [eax]
jl 0x485adf
mov dword [ebp - 0xc60], 1
jmp 0x485ae6
and dword [ebp - 0xc60], 0
mov esi, dword [ebp - 0x104]
push 2
lea ecx, [ebp - 0xa64]
call fcn.004092db
add esi, dword [eax]
mov eax, dword [ebp - 0x104]
add eax, dword [ebp - 0xc60]
cmp esi, eax
jg 0x485b17
mov dword [ebp - 0x10b8], 1
jmp 0x485b1e
and dword [ebp - 0x10b8], 0
cmp dword [ebp - 0x10b8], 0xe108
jle 0x485b36
mov dword [ebp - 0xc68], 1
jmp 0x485b3d
and dword [ebp - 0xc68], 0
mov eax, dword [ebp - 0x154]
cmp dword [ebp - 0xc68], eax
jle 0x485b58
push 0
lea ecx, [ebp - 0xa64]
call fcn.004092db
push 4
pop eax
imul eax, eax, 0
lea eax, [ebp + eax - 0x9b8]
mov dword [ebp - 0x1c7c], eax
push 0
lea ecx, [ebp - 0xa64]
call fcn.004092db
mov ecx, dword [ebp - 0x1c7c]
mov eax, dword [eax]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0xa64]
call fcn.004092db
mov eax, dword [ebp - 0x154]
mov dword [ebp - 0x2478], eax
cmp dword [ebp - 0x154], 1
jge 0x485bb0
mov dword [ebp - 0x13f8], 1
jmp 0x485bb7
and dword [ebp - 0x13f8], 0
mov eax, dword [ebp - 0x13f8]
mov dword [ebp - 0x1638], eax
lea ecx, [ebp - 0xa64]
call fcn.004092bf
jmp 0x485c3d
mov dword [ebp - 0x1b3c], 0x732e7ce9
mov dword [ebp - 0x1c84], 3
push 0x26f9
lea eax, [ebp - 0x1b3c]
push eax
push 0x1372
push 0
push 0x74b
push 0x63ec
lea eax, [ebp - 0xc70]
push eax
push 0x139d
lea eax, [ebp - 0x1640]
push eax
lea eax, [ebp - 0x10c0]
push eax
push 0x2278
push 1
push 1
push 0x47e
push 0x3d21
lea eax, [ebp - 0x1c84]
push eax
call fcn.0047b667
add esp, 0x40
lea ecx, [ebp - 0x2928]
call fcn.004092bf
lea ecx, [ebp - 0x2094]
call fcn.004092bf
mov dword [ebp - 0x1b60], 0xfbb6
mov dword [ebp - 0x1cc], 0xfffffffc
mov dword [ebp - 0x1668], 0xffffffff
mov dword [ebp - 0x1c8c], 0xd5d70512
mov dword [ebp - 0x25f4], 2
mov dword [ebp - 0x1b54], 0xffffffff
mov dword [ebp - 0x1b48], 0xbb2f1448
mov dword [ebp - 0x2480], 0xf906d8bc
mov dword [ebp - 0x1650], 0xfffffffc
push 4
lea ecx, [ebp - 0x20ac]
call fcn.004091ed
mov dword [ebp - 0x25fc], 0x738f
mov dword [ebp - 0x1658], 8
mov dword [ebp - 0x1c94], 0xfffffffc
mov dword [ebp - 0x1648], 1
mov dword [ebp - 0x1660], 0x273426ae
mov dword [ebp - 0x210], 0
jmp 0x485d05
mov eax, dword [ebp - 0x210]
inc eax
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 3
jge 0x485d21
mov eax, dword [ebp - 0x210]
mov dword [ebp + eax*4 - 0x2940], 8
jmp 0x485cf8
push 0x21b5
push 0
push 0x79da
push 0x5c05
push 0x4ec1
push 0
push 1
lea eax, [ebp - 0x20ac]
push eax
push 0x7786
lea eax, [ebp - 0x210]
push eax
call fcn.00471da7
add esp, 0x28
mov dword [ebp - 0x1cc], 0
jmp 0x485d6f
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 3
jge 0x485d8b
mov eax, dword [ebp - 0x1cc]
mov dword [ebp + eax*4 - 0x2940], 0xb4ffb87
jmp 0x485d62
lea eax, [ebp - 0x1648]
push eax
lea eax, [ebp - 0x1cc]
push eax
lea eax, [ebp - 0x20ac]
push eax
lea eax, [ebp - 0x1b48]
push eax
push 0x1d68
lea eax, [ebp - 0x1650]
push eax
push 0x61c1
lea eax, [ebp - 0x1c8c]
push eax
push 0xe34
lea eax, [ebp - 0x1658]
push eax
push 0
lea eax, [ebp - 0x1b54]
push eax
push 0x6a8c
push 0x68d5
push 0x4c49
push 0
push 0x5e07
lea eax, [ebp - 0x1660]
push eax
lea eax, [ebp - 0x1c94]
push eax
lea eax, [ebp - 0x1668]
push eax
push 0x784b
call fcn.00472141
add esp, 0x54
lea ecx, [ebp - 0x20ac]
call fcn.004092bf
mov dword [ebp - 0x3ec], 0
jmp 0x485e30
mov eax, dword [ebp - 0x3ec]
inc eax
mov dword [ebp - 0x3ec], eax
cmp dword [ebp - 0x3ec], 3
jge 0x485e52
push dword [ebp - 0x3ec]
lea ecx, [ebp - 0x24ec]
call fcn.004092db
mov dword [eax], 1
jmp 0x485e23
push 0
push 0x1b3
push 0x7146
push 0x59c
lea eax, [ebp - 0x1b60]
push eax
push 1
push 0x455b
push 0x3458
push 0xf08
push 0x4cbf
push 0x48a0
push 0x2fe4
push 0x54e8
push 1
call fcn.00476dad
add esp, 0x38
lea ecx, [ebp - 0x24ec]
call fcn.004092bf
mov dword [ebp - 0xe4], 0xffffffff
mov dword [ebp - 0x1678], 1
mov dword [ebp - 0xc78], 0x257b
mov dword [ebp - 0x1670], 0xaabbc0
cmp dword [ebp - 0xc78], 0x266d
jle 0x485f93
and dword [ebp - 0x670], 0
jmp 0x485ef2
mov eax, dword [ebp - 0x670]
inc eax
mov dword [ebp - 0x670], eax
cmp dword [ebp - 0x670], 0x69ba
jge 0x485f86
and dword [ebp - 0x3f4], 0
jmp 0x485f18
mov eax, dword [ebp - 0x3f4]
inc eax
mov dword [ebp - 0x3f4], eax
cmp dword [ebp - 0x3f4], 0x54d3
jge 0x485f81
and dword [ebp - 0x830], 0
jmp 0x485f3a
mov eax, dword [ebp - 0x830]
inc eax
mov dword [ebp - 0x830], eax
cmp dword [ebp - 0x830], 0x69e
jge 0x485f7f
mov eax, dword [ebp - 0x670]
mov ecx, dword [ebp - 0x3f4]
sar eax, cl
or eax, dword [ebp - 0x830]
cdq
mov dword [ebp - 0x1880], eax
mov dword [ebp - 0x187c], edx
push dword [ebp - 0x187c]
push dword [ebp - 0x1880]
mov ecx, 0xac0918
call fcn.00408e98
jmp 0x485f2d
jmp 0x485f0b
jmp 0x485ee5
push 0
push 0x8d7
call dword [0xac3438]
mov dword [ebp - 0xc88], 0x5d5f8d9a
mov dword [ebp - 4], 0x24
cmp dword [ebp - 0xc78], 0x250a
jge 0x485fc0
mov edx, dword [ebp - 0x1670]
mov ecx, 0xac0918
call fcn.0040bb10
jmp 0x485fdc
or dword [ebp - 4], 0xffffffff
jmp 0x485fe6
cmp dword [ebp - 0xe4], 0
ja 0x485ffb
mov dword [ebp - 0x12e8], 1
jmp 0x486002
and dword [ebp - 0x12e8], 0
mov eax, dword [ebp - 0xe4]
inc eax
cmp eax, 9
jae 0x486020
cmp dword [ebp - 0xe4], 0
jne 0x486020
and dword [ebp - 0xc80], 0
jmp 0x48602a
mov dword [ebp - 0xc80], 1
mov eax, dword [ebp - 0xe4]
add eax, dword [ebp - 0x12e8]
imul eax, dword [ebp - 0xc80]
sub eax, dword [ebp - 0xe4]
js 0x486051
mov dword [ebp - 0x10c8], 1
jmp 0x486058
and dword [ebp - 0x10c8], 0
mov eax, dword [ebp - 0xe4]
add eax, dword [ebp - 0x10c8]
cmp eax, 3
ja 0x48607e
cmp dword [ebp - 0xe4], 0
je 0x48607e
mov dword [ebp - 0x1c9c], 1
jmp 0x486085
and dword [ebp - 0x1c9c], 0
imul eax, dword [ebp - 0x1678], 0xb3a0
mov dword [ebp - 0xc88], eax
mov dword [ebp - 0x14c0], 0x2efd
mov dword [ebp - 0x1b6c], 0xaabc28
cmp dword [ebp - 0x14c0], 0x2f99
jle 0x4861b8
and dword [ebp - 0x7a0], 0
jmp 0x4860cf
mov eax, dword [ebp - 0x7a0]
inc eax
mov dword [ebp - 0x7a0], eax
cmp dword [ebp - 0x7a0], 0x6927
jge 0x4861b8
and dword [ebp - 0x404], 0
jmp 0x4860f5
mov eax, dword [ebp - 0x404]
inc eax
mov dword [ebp - 0x404], eax
cmp dword [ebp - 0x404], 0x3f38
jge 0x4861b3
and dword [ebp - 0x3fc], 0
jmp 0x48611b
mov eax, dword [ebp - 0x3fc]
inc eax
mov dword [ebp - 0x3fc], eax
cmp dword [ebp - 0x3fc], 0x4558
jge 0x4861ae
and dword [ebp - 0x678], 0
jmp 0x486141
mov eax, dword [ebp - 0x678]
inc eax
mov dword [ebp - 0x678], eax
cmp dword [ebp - 0x678], 0x4d2f
jge 0x4861a9
mov eax, dword [ebp - 0x3fc]
cdq
idiv dword [ebp - 0x678]
and edx, dword [ebp - 0x404]
or edx, dword [ebp - 0x7a0]
mov eax, edx
cdq
mov dword [ebp - 0x188c], eax
mov dword [ebp - 0x1888], edx
push dword [ebp - 0x1888]
push dword [ebp - 0x188c]
lea ecx, [ebp - 0x2bc8]
call fcn.00401a21
pop ecx
pop ecx
mov ecx, eax
call fcn.00408e8d
push eax
call fcn.004a3217
pop ecx
lea ecx, [ebp - 0x2bc8]
call fcn.00408e83
jmp 0x486134
jmp 0x48610e
jmp 0x4860e8
jmp 0x4860c2
push 0x27f3
push 0x639e
push 0x169c
push 0x4d6e
push 1
lea eax, [ebp - 0xc88]
push eax
push 0x109d
push 0x6921
push 0x43c
push 1
lea eax, [ebp - 0xe4]
push eax
push 1
push 0x2151
call fcn.00472e68
add esp, 0x34
mov dword [ebp - 4], 0x26
cmp dword [ebp - 0x14c0], 0x2eba
jge 0x48621b
push dword [ebp - 0x1b6c]
call fcn.004a3217
pop ecx
jmp 0x486237
or dword [ebp - 4], 0xffffffff
jmp 0x486241
lea eax, [ebp - 0x12d4]
push eax
call dword [0xac3178]
push eax
call dword [0xac33dc]
mov dword [ebp - 0x12dc], eax
mov dword [ebp - 0xc90], 0x49fe387f
mov dword [ebp - 0x1688], 0xf1a9
mov dword [ebp - 0x1ca4], 7
mov dword [ebp - 0x2488], 0xd8131dda
mov dword [ebp - 0x2604], 0x9942796a
mov dword [ebp - 0x40c], 0
jmp 0x4862a6
mov eax, dword [ebp - 0x40c]
inc eax
mov dword [ebp - 0x40c], eax
cmp dword [ebp - 0x40c], 2
jge 0x4862c2
mov eax, dword [ebp - 0x40c]
mov dword [ebp + eax*4 - 0x2978], 2
jmp 0x486299
cmp dword [ebp - 0xc90], 0
je 0x486333
mov dword [ebp - 0x1b78], 0xfc88
mov dword [ebp - 0x1680], 0
lea eax, [ebp - 0xc90]
push eax
lea eax, [ebp - 0x1680]
push eax
push 1
lea eax, [ebp - 0x1ca4]
push eax
push 0
lea eax, [ebp - 0x1688]
push eax
push 0x7863
lea eax, [ebp - 0x1b78]
push eax
call fcn.0047acbd
add esp, 0x20
push 0x33cf
push 0
push 1
push 0x4d8f
push 0x6a92
call fcn.00475ac7
add esp, 0x14
jmp 0x4864c9
mov dword [ebp - 0x2490], 0xfffffffa
mov dword [ebp - 0x260c], 0x857b1a09
mov dword [ebp - 0x24a0], 0x2d50c857
mov dword [ebp - 0x2614], 0xfffffff6
push 2
lea ecx, [ebp - 0x24fc]
call fcn.004091ed
mov dword [ebp - 0x1cac], 0x674643a6
mov dword [ebp - 0x10d0], 0x7070
mov dword [ebp - 0x1690], 0xaabca8
cmp dword [ebp - 0x10d0], 0x70d8
jle 0x486409
and dword [ebp - 0x680], 0
jmp 0x4863a8
mov eax, dword [ebp - 0x680]
inc eax
mov dword [ebp - 0x680], eax
cmp dword [ebp - 0x680], 0x2d2c
jge 0x486409
and dword [ebp - 0x414], 0
jmp 0x4863ca
mov eax, dword [ebp - 0x414]
inc eax
mov dword [ebp - 0x414], eax
cmp dword [ebp - 0x414], 0x3020
jge 0x486407
mov eax, dword [ebp - 0x680]
sub eax, dword [ebp - 0x414]
cdq
mov dword [ebp - 0x1898], eax
mov dword [ebp - 0x1894], edx
push dword [ebp - 0x1894]
push dword [ebp - 0x1898]
mov ecx, 0xac0918
call fcn.00408e98
jmp 0x4863bd
jmp 0x48639b
mov dword [ebp - 0x8a0], 0
jmp 0x486422
mov eax, dword [ebp - 0x8a0]
inc eax
mov dword [ebp - 0x8a0], eax
cmp dword [ebp - 0x8a0], 2
jge 0x486444
push dword [ebp - 0x8a0]
lea ecx, [ebp - 0x24fc]
call fcn.004092db
mov dword [eax], 0x9ab83eb
jmp 0x486415
mov dword [ebp - 4], 0x28
cmp dword [ebp - 0x10d0], 0x6d38
jge 0x486467
mov edx, dword [ebp - 0x1690]
mov ecx, 0xac0918
call fcn.0040bb10
jmp 0x486483
or dword [ebp - 4], 0xffffffff
jmp 0x48648d
push 0x7fbf
lea eax, [ebp - 0x1cac]
push eax
push 0x1ea6
push 0
push 1
push 0x74da
push 0x7886
push 0x26c6
push 0x1528
call fcn.004810d1
add esp, 0x24
lea ecx, [ebp - 0x24fc]
call fcn.004092bf
mov dword [ebp - 0x20], 0xffff
push 2
lea ecx, [ebp - 0x5d8]
call fcn.004091ed
mov dword [ebp - 0xcb8], 0x612d29ed
mov dword [ebp - 0x1cb4], 0xf82966b9
mov dword [ebp - 0x44], 0
jmp 0x486501
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 2
jge 0x48651d
push dword [ebp - 0x44]
lea ecx, [ebp - 0x5d8]
call fcn.004092db
mov dword [eax], 1
jmp 0x4864fa
mov dword [ebp - 0xc98], 0x50f8
mov dword [ebp - 0x1698], 0xaabd08
cmp dword [ebp - 0xc98], 0x5243
jle 0x486660
push 0x1c16
push 0xa0d
push 0x1f96
push 0
call dword [0xac345c]
and dword [ebp - 0x41c], 0
jmp 0x48656e
mov dword [ebp - 0x44], 0
jmp 0x486670
mov eax, dword [ebp - 0x1734]
mov dword [ebp - 0x173c], eax
mov eax, dword [ebp - 0x173c]
mov dword [ebp - 0x1744], eax
mov eax, dword [ebp - 0x1744]
movzx eax, byte [eax]
test eax, eax
je 0x496f10
push 0x511b
push 0
push 0x5558
push 1
push 0x1b2
push 0x6d2
push 1
call fcn.0046d2a0
add esp, 0x1c
jmp 0x496f30
push 0x56cb
push 0
push 0x241f
push 0x544b
push 0x2696
call fcn.00469052
add esp, 0x14
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret