Function at 0x46dbf0
Capabilities:
Authenticate hmac
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b1945
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x30dc
call fcn.004ad2f0
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 0xc]
test eax, eax
je 0x483ac7
lea eax, [ebp + 0x14]
mov dword [ebp - 0x196c], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1980], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x1978], eax
mov eax, dword [ebp - 0x196c]
movzx eax, byte [eax]
test eax, eax
je 0x483a50
push 0x441
push 0x1235
push 0x1b27
push 1
push 0x5dac
push 1
push 0x3766
call fcn.0045bd87
add esp, 0x1c
push 0
push 1
push 0x5b42
push 0xa6b
push 1
call fcn.004695de
add esp, 0x14
push 0x4377
push 0
push 1
push 0x496f
push 0x7bee
call fcn.0045edf7
add esp, 0x14
mov dword [ebp - 0x2500], 0x36f6dd8d
mov dword [ebp - 0x24fc], 0x36f6dd8d
mov dword [ebp - 0x24f8], 0x36f6dd8d
mov dword [ebp - 0x24f4], 0x36f6dd8d
push 2
lea ecx, [ebp - 0x23c0]
call fcn.0040ac30
mov dword [ebp - 0x2ac], 0x8c45cdbe
mov dword [ebp - 0x19d0], 0
mov dword [ebp - 0x2760], 1
mov dword [ebp - 0x14ec], 0x3cfce294
mov dword [ebp - 0x19b0], 0xfffc
mov dword [ebp - 0x19c8], 0xffff
push 0x53f0
push 1
push 0x6595
push 0x6437
push 0x5b4a
push 0
push 0x16eb
lea eax, [ebp - 0x23c0]
push eax
push 0x282d
lea eax, [ebp - 0x291c]
push eax
call fcn.0046094b
add esp, 0x28
mov dword [ebp - 0x2ac], 0
jmp 0x46dd6b
mov eax, dword [ebp - 0x2ac]
inc eax
mov dword [ebp - 0x2ac], eax
cmp dword [ebp - 0x2ac], 1
jg 0x46df9a
mov dword [ebp - 0x2a4], 0x816210b9
push 2
lea ecx, [ebp - 0x2390]
call fcn.0040ac30
mov dword [ebp - 0x19c0], 0x5ea2
mov dword [ebp - 0x19b8], 1
mov dword [ebp - 0x103c], 0x7af3
mov dword [ebp - 0x19a8], 0xaa2f2c
cmp dword [ebp - 0x103c], 0x7da8
jle 0x46de3a
and dword [ebp - 0x2dc], 0
jmp 0x46ddd9
mov eax, dword [ebp - 0x2dc]
inc eax
mov dword [ebp - 0x2dc], eax
cmp dword [ebp - 0x2dc], 0x146
jge 0x46de3a
and dword [ebp - 0x2e4], 0
jmp 0x46ddfb
mov eax, dword [ebp - 0x2e4]
inc eax
mov dword [ebp - 0x2e4], eax
cmp dword [ebp - 0x2e4], 0x364f
jge 0x46de38
mov eax, dword [ebp - 0x2dc]
sub eax, dword [ebp - 0x2e4]
cdq
mov dword [ebp - 0x1a0c], eax
mov dword [ebp - 0x1a08], edx
push dword [ebp - 0x1a08]
push dword [ebp - 0x1a0c]
mov ecx, 0xaba118
call fcn.0040a8db
jmp 0x46ddee
jmp 0x46ddcc
and dword [ebp - 4], 0
cmp dword [ebp - 0x103c], 0x78c4
jge 0x46de5a
mov edx, dword [ebp - 0x19a8]
mov ecx, 0xaba118
call fcn.0040d553
jmp 0x46de76
or dword [ebp - 4], 0xffffffff
jmp 0x46de80
push 0x4a1b
push 0x2e40
lea eax, [ebp - 0x2390]
push eax
push 1
push 0
push 1
lea eax, [ebp - 0x26e4]
push eax
call fcn.0046cee6
add esp, 0x1c
mov dword [ebp - 0x2a4], 0
jmp 0x46debf
mov eax, dword [ebp - 0x2a4]
inc eax
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 1
jg 0x46df45
mov dword [ebp - 0x59c], 0xfffffff7
mov dword [ebp - 0x2ba8], 0x8fdeb772
mov dword [ebp - 0x59c], 0
jmp 0x46def5
mov eax, dword [ebp - 0x59c]
inc eax
mov dword [ebp - 0x59c], eax
cmp dword [ebp - 0x59c], 1
jg 0x46df33
mov byte [ebp - 0x138], 0
lea eax, [ebp - 0x138]
push eax
push 0x5bb2
push 0x602d
push 0x4d7c
push 0x127b
push 1
push 0x3e36
push 0
call fcn.00465eae
add esp, 0x20
jmp 0x46dee8
mov eax, dword [ebp - 0x14ec]
inc eax
mov dword [ebp - 0x14ec], eax
jmp 0x46deb2
push 0x57bd
lea eax, [ebp - 0x19b0]
push eax
lea eax, [ebp - 0x2390]
push eax
push 1
push 0x2cb9
push 0x4658
lea eax, [ebp - 0x2a4]
push eax
push 1
lea eax, [ebp - 0x23c0]
push eax
lea eax, [ebp - 0x19b8]
push eax
lea eax, [ebp - 0x19c0]
push eax
call fcn.0045c159
add esp, 0x2c
lea ecx, [ebp - 0x2390]
call fcn.0040ad02
jmp 0x46dd5e
push 0x7ec9
lea eax, [ebp - 0x2ac]
push eax
lea eax, [ebp - 0x19c8]
push eax
lea eax, [ebp - 0x19d0]
push eax
push 1
push 0x6f54
push 0x7ae1
push 0x66ac
push 0
call fcn.00458658
add esp, 0x24
lea ecx, [ebp - 0x23c0]
call fcn.0040ad02
mov dword [ebp - 0x26ec], 0xb1ab4456
push 1
push 1
push 0x6ffd
push 0
push 0x727e
call fcn.004653e1
add esp, 0x14
mov dword [ebp - 0xc00], 0xfffffff6
mov dword [ebp - 0x292c], 6
mov dword [ebp - 0x2ec], 0
jmp 0x46e029
mov eax, dword [ebp - 0x2ec]
inc eax
mov dword [ebp - 0x2ec], eax
cmp dword [ebp - 0x2ec], 2
jge 0x46e045
mov eax, dword [ebp - 0x2ec]
mov dword [ebp + eax*4 - 0x1668], 1
jmp 0x46e01c
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x1668], 0
jmp 0x46e073
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1668]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x1668], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1668], 0x11
jge 0x46e0aa
mov byte [ebp - 0x17e], 0
movzx eax, byte [ebp - 0x17e]
test eax, eax
je 0x46e0a8
push 1
push 0
push 0x2c5a
push 0
call fcn.00458f93
add esp, 0x10
jmp 0x46e058
mov dword [ebp - 0x26f4], 0xfffffffe
mov dword [ebp - 0x1e84], 0xfffffffe
mov dword [ebp - 0x1718], 0xf7e2799a
mov dword [ebp - 0x1714], 0xf7e2799a
mov dword [ebp - 0x1710], 0xf7e2799a
mov dword [ebp - 0x170c], 0xf7e2799a
mov dword [ebp - 0x1088], 0
mov dword [ebp - 0x14f4], 0x1d41
mov dword [ebp - 0x19d8], 0xaa2f58
cmp dword [ebp - 0x14f4], 0x1f2a
jle 0x46e187
and dword [ebp - 0x7a4], 0
jmp 0x46e126
mov eax, dword [ebp - 0x7a4]
inc eax
mov dword [ebp - 0x7a4], eax
cmp dword [ebp - 0x7a4], 0x595e
jge 0x46e187
and dword [ebp - 0x2f4], 0
jmp 0x46e148
mov eax, dword [ebp - 0x2f4]
inc eax
mov dword [ebp - 0x2f4], eax
cmp dword [ebp - 0x2f4], 0x543e
jge 0x46e185
mov eax, dword [ebp - 0x7a4]
add eax, dword [ebp - 0x2f4]
cdq
mov dword [ebp - 0x1a18], eax
mov dword [ebp - 0x1a14], edx
push dword [ebp - 0x1a14]
push dword [ebp - 0x1a18]
mov ecx, 0xaba118
call fcn.0040a8db
jmp 0x46e13b
jmp 0x46e119
mov dword [ebp - 0x1504], 0xfffffff6
mov dword [ebp - 4], 2
cmp dword [ebp - 0x14f4], 0x1b54
jge 0x46e1b4
mov edx, dword [ebp - 0x19d8]
mov ecx, 0xaba118
call fcn.0040d553
jmp 0x46e1d0
or dword [ebp - 4], 0xffffffff
jmp 0x46e1da
mov dword [ebp - 0x2ac8], 0xae0fc36f
mov dword [ebp - 0x1f34], 0xfffffffe
mov dword [ebp - 0x15b0], 1
mov dword [ebp - 0x1e8], 0xcefbde28
mov dword [ebp - 0x19f0], 0xe74a6e8f
mov dword [ebp - 0x19e8], 0xfffffff8
mov dword [ebp - 0x1590], 0xfffffffe
mov dword [ebp - 0x314], 0xffffffff
mov dword [ebp - 0x5a4], 0
jmp 0x46e243
mov eax, dword [ebp - 0x5a4]
inc eax
mov dword [ebp - 0x5a4], eax
cmp dword [ebp - 0x5a4], 3
jge 0x46e25f
mov eax, dword [ebp - 0x5a4]
mov dword [ebp + eax*4 - 0x28c8], 1
jmp 0x46e236
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x1718], 0
jmp 0x46e28a
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1718]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x1718], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1718], 0xffffffec
jl 0x46e946
mov dword [ebp - 0x15a0], 0x89a6
mov dword [ebp - 0x8d4], 0x6f8b8ae5
mov dword [ebp - 0x2334], 0xfffffffa
mov dword [ebp - 0x2330], 0xfffffffa
mov dword [ebp - 0x232c], 0xfffffffa
mov dword [ebp - 0x2328], 0xfffffffa
lea ecx, [ebp - 0x9bd]
call fcn.0040ad2d
push eax
lea eax, [ebp - 0x2324]
push eax
lea eax, [ebp - 0x2334]
push eax
lea ecx, [ebp - 0x2cf8]
call fcn.0040ad30
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x16fc]
call fcn.0040acdc
mov dword [ebp - 0x19f8], 0xffffffff
mov dword [ebp - 0xfc], 3
mov dword [ebp - 0x14fc], 0x4442
mov dword [ebp - 0x19e0], 0xaa2f90
cmp dword [ebp - 0x14fc], 0x481c
jle 0x46e3dc
and dword [ebp - 0x2fc], 0
jmp 0x46e35c
mov eax, dword [ebp - 0x2fc]
inc eax
mov dword [ebp - 0x2fc], eax
cmp dword [ebp - 0x2fc], 0x5fae
jge 0x46e3dc
and dword [ebp - 0x6fc], 0
jmp 0x46e37e
mov eax, dword [ebp - 0x6fc]
inc eax
mov dword [ebp - 0x6fc], eax
cmp dword [ebp - 0x6fc], 0x2d39
jge 0x46e3d7
mov eax, dword [ebp - 0x2fc]
sub eax, dword [ebp - 0x6fc]
cdq
mov dword [ebp - 0x1a24], eax
mov dword [ebp - 0x1a20], edx
push dword [ebp - 0x1a20]
push dword [ebp - 0x1a24]
lea ecx, [ebp - 0x3084]
call fcn.00401a01
pop ecx
pop ecx
mov ecx, eax
call fcn.0040a8d0
push eax
call fcn.0049b1a7
pop ecx
lea ecx, [ebp - 0x3084]
call fcn.0040a8c6
jmp 0x46e371
jmp 0x46e34f
mov dword [ebp - 4], 4
cmp dword [ebp - 0x14fc], 0x43fa
jge 0x46e3fb
push dword [ebp - 0x19e0]
call fcn.0049b1a7
pop ecx
jmp 0x46e417
or dword [ebp - 4], 0xffffffff
jmp 0x46e421
mov eax, dword [ebp - 0xfc]
imul eax, dword [ebp - 0x314]
mov dword [ebp - 0x1504], eax
mov eax, dword [ebp - 0x1504]
mov ecx, dword [ebp - 0x314]
inc ecx
mov dword [ebp - 0x314], ecx
mov ecx, dword [ebp - 0xfc]
dec ecx
mov dword [ebp - 0xfc], ecx
test eax, eax
jne 0x46e46a
cmp dword [ebp - 0xfc], 0
jne 0x46e46a
and dword [ebp - 0x150c], 0
jmp 0x46e474
mov dword [ebp - 0x150c], 1
mov eax, dword [ebp - 0x15a0]
cmp eax, dword [ebp - 0x150c]
jl 0x46e48e
mov dword [ebp - 0x1604], 1
jmp 0x46e495
and dword [ebp - 0x1604], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x28c8]
mov dword [ebp - 0x26fc], eax
mov eax, dword [ebp - 0x19e8]
cmp dword [ebp - 0x19f0], eax
jle 0x46e4c1
mov dword [ebp - 0x1578], 1
jmp 0x46e4c8
and dword [ebp - 0x1578], 0
mov eax, dword [ebp - 0x1590]
cmp dword [ebp - 0x1578], eax
jne 0x46e4e8
mov eax, 0xd45e
test eax, eax
jne 0x46e4e8
and dword [ebp - 0x1580], 0
jmp 0x46e4f2
mov dword [ebp - 0x1580], 1
cmp dword [ebp - 0x1580], 0xffffffff
jle 0x46e507
mov dword [ebp - 0x1588], 1
jmp 0x46e50e
and dword [ebp - 0x1588], 0
mov eax, dword [ebp - 0x1088]
cmp dword [ebp - 0x1588], eax
jne 0x46e52e
cmp dword [ebp - 0x1590], 0
jne 0x46e52e
and dword [ebp - 0x1598], 0
jmp 0x46e538
mov dword [ebp - 0x1598], 1
mov eax, dword [ebp - 0x19f8]
imul eax, dword [ebp - 0x1598]
cmp eax, dword [ebp - 0x15a0]
jne 0x46e559
mov dword [ebp - 0x15a8], 1
jmp 0x46e560
and dword [ebp - 0x15a8], 0
mov eax, dword [ebp - 0x15a8]
mov dword [ebp - 0x15b0], eax
mov eax, dword [ebp - 0x15b0]
mov dword [ebp - 0x15b8], eax
push 0
lea ecx, [ebp - 0x16fc]
call fcn.0040ad1e
mov ecx, dword [ebp - 0x15b8]
mov dword [eax], ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1718]
cmp dword [ebp - 0x15b8], eax
jle 0x46e5ae
mov dword [ebp - 0x1a00], 1
jmp 0x46e5b5
and dword [ebp - 0x1a00], 0
cmp dword [ebp - 0x8d4], 0
jne 0x46e5ca
mov dword [ebp - 0x1524], 1
jmp 0x46e5d1
and dword [ebp - 0x1524], 0
mov eax, dword [ebp - 0x1604]
cmp eax, dword [ebp - 0x1524]
je 0x46e5eb
mov dword [ebp - 0x1530], 1
jmp 0x46e5f2
and dword [ebp - 0x1530], 0
cmp dword [ebp - 0x1530], 0x76c132d4
jge 0x46e605
cmp dword [ebp - 0x1e8], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x28c8]
mov dword [ebp - 0x8d4], eax
cmp dword [ebp - 0x8d4], 0
je 0x46e642
push 0x5f47
push 0x5add
push 0
push 1
lea eax, [ebp - 0x16fc]
push eax
call fcn.0045ed7b
add esp, 0x14
jmp 0x46e936
mov dword [ebp - 0x98c], 0xfa0179e4
mov dword [ebp - 0x304], 0
jmp 0x46e665
mov eax, dword [ebp - 0x304]
inc eax
mov dword [ebp - 0x304], eax
cmp dword [ebp - 0x304], 1
jge 0x46e681
mov eax, dword [ebp - 0x304]
mov dword [ebp + eax*4 - 0x8dc], 0
jmp 0x46e658
mov dword [ebp - 0x14e4], 0x5272
mov dword [ebp - 0x1f2c], 0xaa2fd4
cmp dword [ebp - 0x14e4], 0x5341
jle 0x46e757
and dword [ebp - 0x5ac], 0
jmp 0x46e6bb
mov eax, dword [ebp - 0x5ac]
inc eax
mov dword [ebp - 0x5ac], eax
cmp dword [ebp - 0x5ac], 0x12a3
jge 0x46e74d
and dword [ebp - 0x30c], 0
jmp 0x46e6e1
mov eax, dword [ebp - 0x30c]
inc eax
mov dword [ebp - 0x30c], eax
cmp dword [ebp - 0x30c], 0x1a10
jge 0x46e748
and dword [ebp - 0x7fc], 0
jmp 0x46e703
mov eax, dword [ebp - 0x7fc]
inc eax
mov dword [ebp - 0x7fc], eax
cmp dword [ebp - 0x7fc], 0x642d
jge 0x46e746
mov eax, dword [ebp - 0x5ac]
sub eax, dword [ebp - 0x30c]
or eax, dword [ebp - 0x7fc]
cdq
mov dword [ebp - 0x1a30], eax
mov dword [ebp - 0x1a2c], edx
push dword [ebp - 0x1a2c]
push dword [ebp - 0x1a30]
mov ecx, 0xaba118
call fcn.0040a8db
jmp 0x46e6f6
jmp 0x46e6d4
jmp 0x46e6ae
push 0
push 0
call dword [0xabd418]
mov dword [ebp - 0x1e8], 0
jmp 0x46e770
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 3
jg 0x46e7c8
mov dword [ebp - 0xfc], 0
jmp 0x46e792
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 3
jg 0x46e7c6
mov byte [ebp - 0x13a], 0
push 0x5022
push 0x4793
lea eax, [ebp - 0x13a]
push eax
push 1
push 0x20ea
push 0
call fcn.004686e6
add esp, 0x18
jmp 0x46e785
jmp 0x46e763
mov dword [ebp - 4], 6
cmp dword [ebp - 0x14e4], 0x51aa
jge 0x46e7eb
mov edx, dword [ebp - 0x1f2c]
mov ecx, 0xaba118
call fcn.0040d553
jmp 0x46e807
or dword [ebp - 4], 0xffffffff
jmp 0x46e811
push 0
lea ecx, [ebp - 0x16fc]
call fcn.0040ad1e
cmp dword [ebp - 0x98c], 0
je 0x46e845
push 0
lea ecx, [ebp - 0x16fc]
call fcn.0040ad1e
cmp dword [eax], 0
je 0x46e845
mov dword [ebp - 0xaa0], 1
jmp 0x46e84c
and dword [ebp - 0xaa0], 0
push 0
lea ecx, [ebp - 0x16fc]
call fcn.0040ad1e
mov eax, dword [eax]
cmp eax, dword [ebp - 0xaa0]
jg 0x46e86f
mov dword [ebp - 0x1080], 1
jmp 0x46e876
and dword [ebp - 0x1080], 0
mov eax, dword [ebp - 0x1f34]
cmp eax, dword [ebp - 0x1080]
jne 0x46e890
mov dword [ebp - 0x1370], 1
jmp 0x46e897
and dword [ebp - 0x1370], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x8dc]
mov dword [ebp - 0xaa8], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xaa8]
mov dword [ebp + eax - 0x8dc], ecx
mov eax, dword [ebp - 0xaa8]
sub eax, dword [ebp - 0x1370]
jne 0x46e8db
push 7
pop eax
test eax, eax
jne 0x46e8db
and dword [ebp - 0xab0], 0
jmp 0x46e8e5
mov dword [ebp - 0xab0], 1
imul eax, dword [ebp - 0xab0], 0
cmp eax, dword [ebp - 0x98c]
jle 0x46e900
mov dword [ebp - 0x1f3c], 1
jmp 0x46e907
and dword [ebp - 0x1f3c], 0
mov eax, dword [ebp - 0x314]
mov dword [ebp - 0x293c], eax
cmp dword [ebp - 0x1e8], 0
jne 0x46e923
cmp dword [ebp - 0x98c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x8dc]
mov dword [ebp - 0x1088], eax
lea ecx, [ebp - 0x16fc]
call fcn.0040ad02
jmp 0x46e271
mov dword [ebp - 0x2704], 0xfffffffa
mov dword [ebp - 0x4c], 4
mov dword [ebp - 0x1f54], 0
mov dword [ebp - 0x2b4c], 0x3c1de6fc
mov dword [ebp - 0x5b4], 0
jmp 0x46e984
mov eax, dword [ebp - 0x5b4]
inc eax
mov dword [ebp - 0x5b4], eax
cmp dword [ebp - 0x5b4], 1
jge 0x46e9a0
mov eax, dword [ebp - 0x5b4]
mov dword [ebp + eax*4 - 0x9e4], 0
jmp 0x46e977
mov dword [ebp - 0x4c], 0
jmp 0x46e9b0
mov eax, dword [ebp - 0x4c]
dec eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jl 0x46e9ca
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x9e4], 0
je 0x46e9c8
jmp 0x46e9ca
jmp 0x46e9a9
mov dword [ebp - 0x4c], 0
jmp 0x46e9da
mov eax, dword [ebp - 0x4c]
dec eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0xffffffed
jge 0x46ea9f
mov dword [ebp - 0xac0], 0xffff
mov dword [ebp - 0xab8], 2
mov dword [ebp - 0x1f4c], 0xdbd0176d
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x9e4]
neg eax
mov dword [ebp - 0xab8], eax
mov eax, dword [ebp - 0xac0]
imul eax, dword [ebp - 0xab8]
cmp dword [ebp - 0x4c], eax
jne 0x46ea35
mov dword [ebp - 0x14e8], 1
jmp 0x46ea3c
and dword [ebp - 0x14e8], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x14e8], eax
jle 0x46ea53
mov dword [ebp - 0x1090], 1
jmp 0x46ea5a
and dword [ebp - 0x1090], 0
mov eax, dword [ebp - 0xac0]
cmp dword [ebp - 0x1090], eax
jl 0x46ea74
mov dword [ebp - 0x1f44], 1
jmp 0x46ea7b
and dword [ebp - 0x1f44], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x9e4]
mov dword [ebp - 0x270c], eax
mov eax, dword [ebp - 0x1f4c]
mov dword [ebp - 0x1f54], eax
jmp 0x46e9d3
mov dword [ebp - 0x1138], 0
mov dword [ebp - 0x114], 3
mov dword [ebp - 0xad0], 0x8591b68d
mov dword [ebp - 0x1538], 0xffffffff
cmp dword [ebp - 0x114], 0
je 0x46eadc
mov dword [ebp - 0x1f5c], 1
jmp 0x46eae3
and dword [ebp - 0x1f5c], 0
mov eax, dword [ebp - 0x1538]
cmp dword [ebp - 0x114], eax
je 0x46eafd
mov dword [ebp - 0xac8], 1
jmp 0x46eb04
and dword [ebp - 0xac8], 0
cmp dword [ebp - 0xac8], 0xfffffff7
jle 0x46eb19
mov dword [ebp - 0x1378], 1
jmp 0x46eb20
and dword [ebp - 0x1378], 0
mov eax, dword [ebp - 0x114]
cmp dword [ebp - 0x1378], eax
jne 0x46eb3a
mov dword [ebp - 0x1098], 1
jmp 0x46eb41
and dword [ebp - 0x1098], 0
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0xad0], eax
mov eax, dword [ebp - 0xad0]
cmp eax, dword [ebp - 0x1098]
jg 0x46eb67
mov dword [ebp - 0xad8], 1
jmp 0x46eb6e
and dword [ebp - 0xad8], 0
cmp dword [ebp - 0xad8], 4
ja 0x46eb83
mov dword [ebp - 0x1f64], 1
jmp 0x46eb8a
and dword [ebp - 0x1f64], 0
cmp dword [ebp - 0x114], 6
jne 0x46eb9f
mov dword [ebp - 0xae0], 1
jmp 0x46eba6
and dword [ebp - 0xae0], 0
mov eax, dword [ebp - 0x1538]
cmp dword [ebp - 0xae0], eax
jl 0x46ebc0
mov dword [ebp - 0x10a0], 1
jmp 0x46ebc7
and dword [ebp - 0x10a0], 0
mov eax, dword [ebp - 0x114]
cmp eax, dword [ebp - 0x10a0]
jg 0x46ebe1
mov dword [ebp - 0xae8], 1
jmp 0x46ebe8
and dword [ebp - 0xae8], 0
cmp dword [ebp - 0xae8], 0x58efa97f
je 0x46ec00
mov dword [ebp - 0x1380], 1
jmp 0x46ec07
and dword [ebp - 0x1380], 0
mov eax, dword [ebp - 0x114]
cmp dword [ebp - 0x1380], eax
jle 0x46ec21
mov dword [ebp - 0xaf0], 1
jmp 0x46ec28
and dword [ebp - 0xaf0], 0
mov eax, dword [ebp - 0x114]
cmp dword [ebp - 0xaf0], eax
jge 0x46ec70
mov dword [ebp - 0x1f6c], 0x9ff4caa5
lea eax, [ebp - 0x1f6c]
push eax
push 0x5683
push 0x6e29
push 0x4097
push 1
push 0x595e
push 0x10c
push 0
push 0
call fcn.0046384b
add esp, 0x24
jmp 0x46ec86
push 0x3dcd
push 1
push 0x6dcb
push 0
call fcn.00463d00
add esp, 0x10
mov dword [ebp - 0x17b4], 1
mov dword [ebp - 0x10a8], 0x4c1b
mov dword [ebp - 0x1f74], 0xaa3008
cmp dword [ebp - 0x10a8], 0x4ea5
jle 0x46ed46
and dword [ebp - 0x31c], 0
jmp 0x46ecca
mov eax, dword [ebp - 0x31c]
inc eax
mov dword [ebp - 0x31c], eax
cmp dword [ebp - 0x31c], 0x7c02
jge 0x46ed2d
and dword [ebp - 0x704], 0
jmp 0x46ecec
mov eax, dword [ebp - 0x704]
inc eax
mov dword [ebp - 0x704], eax
cmp dword [ebp - 0x704], 0x6d43
jge 0x46ed2b
mov eax, dword [ebp - 0x31c]
mov ecx, dword [ebp - 0x704]
shl eax, cl
cdq
mov dword [ebp - 0x1a3c], eax
mov dword [ebp - 0x1a38], edx
push dword [ebp - 0x1a38]
push dword [ebp - 0x1a3c]
mov ecx, 0xaba118
call fcn.0040a8db
jmp 0x46ecdf
jmp 0x46ecbd
push 0
push 0
push 0x9d
push 0x1af
push 0x60b
call dword [0xabd4d0]
mov dword [ebp - 0x2b4], 0x9b55bb2c
mov dword [ebp - 4], 8
cmp dword [ebp - 0x10a8], 0x4b8b
jge 0x46ed73
mov edx, dword [ebp - 0x1f74]
mov ecx, 0xaba118
call fcn.0040d553
jmp 0x46ed8f
or dword [ebp - 4], 0xffffffff
jmp 0x46ed99
mov dword [ebp - 0x294c], 0x1a7ecc24
mov dword [ebp - 0x2714], 7
mov dword [ebp - 0x2ad0], 0x2d0da0bd
mov dword [ebp - 0x271c], 0xffffffff
push 2
lea ecx, [ebp - 0x28e8]
call fcn.0040ac30
push 1
push 0
lea eax, [ebp - 0x28e8]
push eax
push 0x1dd2
lea eax, [ebp - 0x295c]
push eax
push 0x5f5c
push 0x50df
call fcn.00464da2
add esp, 0x1c
mov dword [ebp - 0x2b4], 7
jmp 0x46ee10
mov eax, dword [ebp - 0x2b4]
dec eax
mov dword [ebp - 0x2b4], eax
cmp dword [ebp - 0x2b4], 0xffffffed
jg 0x46f0eb
push 3
lea ecx, [ebp - 0x1ffc]
call fcn.0040ac30
mov dword [ebp - 0x1f7c], 1
mov dword [ebp - 0x2724], 0xffffffff
mov dword [ebp - 0x2280], 0x842f88d9
mov dword [ebp - 0x227c], 0x842f88d9
mov dword [ebp - 0x2278], 0x842f88d9
mov dword [ebp - 0x2274], 0x842f88d9
lea ecx, [ebp - 0x9c5]
call fcn.0040ad2d
push eax
lea eax, [ebp - 0x2270]
push eax
lea eax, [ebp - 0x2280]
push eax
lea ecx, [ebp - 0x2c70]
call fcn.0040ad30
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x28d8]
call fcn.0040acdc
mov dword [ebp - 0x2bd0], 9
mov dword [ebp - 0x1f84], 0xa70a1ee3
push 0
lea eax, [ebp - 0x1ffc]
push eax
push 0x144a
push 1
lea eax, [ebp - 0x272c]
push eax
call fcn.0045de6a
add esp, 0x14
mov dword [ebp - 0x14f0], 0x3fe6
mov dword [ebp - 0x1f8c], 0xaa3050
cmp dword [ebp - 0x14f0], 0x4393
jle 0x46efc9
and dword [ebp - 0x32c], 0
jmp 0x46ef08
mov eax, dword [ebp - 0x32c]
inc eax
mov dword [ebp - 0x32c], eax
cmp dword [ebp - 0x32c], 0x1c9e
jge 0x46efbb
and dword [ebp - 0x324], 0
jmp 0x46ef2e
mov eax, dword [ebp - 0x324]
inc eax
mov dword [ebp - 0x324], eax
cmp dword [ebp - 0x324], 0x176e
jge 0x46efb6
and dword [ebp - 0x5bc], 0
jmp 0x46ef50
mov eax, dword [ebp - 0x5bc]
inc eax
mov dword [ebp - 0x5bc], eax
cmp dword [ebp - 0x5bc], 0x3814
jge 0x46efb1
mov eax, dword [ebp - 0x324]
mov ecx, dword [ebp - 0x5bc]
shl eax, cl
and eax, dword [ebp - 0x32c]
cdq
mov dword [ebp - 0x1a48], eax
mov dword [ebp - 0x1a44], edx
push dword [ebp - 0x1a44]
push dword [ebp - 0x1a48]
lea ecx, [ebp - 0x2dcc]
call fcn.00401a01
pop ecx
pop ecx
mov ecx, eax
call fcn.0040a8d0
push eax
call fcn.0049b1a7
pop ecx
lea ecx, [ebp - 0x2dcc]
call fcn.0040a8c6
jmp 0x46ef43
jmp 0x46ef21
jmp 0x46eefb
push 0
push 0
push 0
push 0
call dword [0xabd270]
push 2
lea ecx, [ebp - 0x1ffc]
call fcn.0040ad1e
and dword [eax], 0
jmp 0x46efff
push 2
lea ecx, [ebp - 0x1ffc]
call fcn.0040ad1e
mov dword [ebp - 0xaf8], eax
mov eax, dword [ebp - 0xaf8]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0xaf8]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0x1ffc]
call fcn.0040ad1e
cmp dword [eax], 0xfffffffe
jl 0x46f08b
mov dword [ebp - 0x296c], 0
push 4
lea ecx, [ebp - 0x23a8]
call fcn.0040ac30
push 1
lea eax, [ebp - 0x2734]
push eax
push 0x1548
push 0
lea eax, [ebp - 0x23a8]
push eax
push 0xbe8
call fcn.0045a590
add esp, 0x18
lea eax, [ebp - 0x23a8]
push eax
lea eax, [ebp - 0x1f7c]
push eax
push 0
push 0
lea eax, [ebp - 0x2b4]
push eax
lea eax, [ebp - 0x28d8]
push eax
lea eax, [ebp - 0x1f84]
push eax
call fcn.0045a96b
add esp, 0x1c
lea ecx, [ebp - 0x23a8]
call fcn.0040ad02
jmp 0x46efdb
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x14f0], 0x3e60
jge 0x46f0aa
push dword [ebp - 0x1f8c]
call fcn.0049b1a7
pop ecx
jmp 0x46f0c6
or dword [ebp - 4], 0xffffffff
jmp 0x46f0d0
lea ecx, [ebp - 0x28d8]
call fcn.0040ad02
lea ecx, [ebp - 0x1ffc]
call fcn.0040ad02
jmp 0x46ee03
mov byte [ebp - 0x13c], 0
push 0x29cc
push 0
push 0xad5
lea eax, [ebp - 0x13c]
push eax
push 0x719f
push 0x22cc
push 0x52b0
push 0x64f7
push 0x1c26
push 0
push 0x792
call fcn.0045bbe6
add esp, 0x2c
lea ecx, [ebp - 0x28e8]
call fcn.0040ad02
mov dword [ebp - 0x17bc], 0xffffffff
push 2
lea ecx, [ebp - 0x23d8]
call fcn.0040ac30
mov dword [ebp - 0x7ac], 0
push 0
push 0
lea eax, [ebp - 0x23d8]
push eax
push 0x36c2
lea eax, [ebp - 0x2ad8]
push eax
push 0x3574
call fcn.004612e5
add esp, 0x18
mov dword [ebp - 0x7ac], 1
jmp 0x46f196
mov eax, dword [ebp - 0x7ac]
dec eax
mov dword [ebp - 0x7ac], eax
cmp dword [ebp - 0x7ac], 0
jl 0x46f227
mov dword [ebp - 0x25c], 0
mov dword [ebp - 0x25c], 0
jmp 0x46f1c6
mov eax, dword [ebp - 0x25c]
inc eax
mov dword [ebp - 0x25c], eax
cmp dword [ebp - 0x25c], 1
jg 0x46f222
mov dword [ebp - 0x1f94], 1
lea eax, [ebp - 0x1f94]
push eax
push 1
push 1
lea eax, [ebp - 0x25c]
push eax
push 0
push 0x7078
push 0x4149
lea eax, [ebp - 0x23d8]
push eax
call fcn.0046be1c
add esp, 0x20
mov byte [ebp - 0x13e], 0
lea eax, [ebp - 0x13e]
push eax
push 0
push 0
call fcn.00469422
add esp, 0xc
jmp 0x46f1b9
jmp 0x46f189
lea ecx, [ebp - 0x23d8]
call fcn.0040ad02
push 3
lea ecx, [ebp - 0x24a4]
call fcn.0040ac30
mov dword [ebp - 0x1d28], 0xfd52a42b
mov dword [ebp - 0x10b0], 0x3d06
mov dword [ebp - 0xb08], 0x6df251d6
mov dword [ebp - 0x273c], 0xfffffffe
mov dword [ebp - 0x1fa4], 0xfffffff9
mov dword [ebp - 0x1fac], 0xffffffff
mov dword [ebp - 0x1fc4], 0xd9d75405
mov dword [ebp - 0x1fb4], 1
mov dword [ebp - 0x297c], 0xfc1da7bc
push 2
lea ecx, [ebp - 0x23f0]
call fcn.0040ac30
mov dword [ebp - 0x1fbc], 0xe6b6cd3
mov dword [ebp - 0xb00], 0x181b
mov dword [ebp - 0x1f9c], 0xaa307c
cmp dword [ebp - 0xb00], 0x1892
jle 0x46f37e
and dword [ebp - 0x334], 0
jmp 0x46f2ea
mov eax, dword [ebp - 0x334]
inc eax
mov dword [ebp - 0x334], eax
cmp dword [ebp - 0x334], 0x1863
jge 0x46f37e
and dword [ebp - 0x5c4], 0
jmp 0x46f310
mov eax, dword [ebp - 0x5c4]
inc eax
mov dword [ebp - 0x5c4], eax
cmp dword [ebp - 0x5c4], 0x6500
jge 0x46f379
and dword [ebp - 0x33c], 0
jmp 0x46f332
mov eax, dword [ebp - 0x33c]
inc eax
mov dword [ebp - 0x33c], eax
cmp dword [ebp - 0x33c], 0x410c
jge 0x46f377
mov eax, dword [ebp - 0x334]
sub eax, dword [ebp - 0x5c4]
mov ecx, dword [ebp - 0x33c]
sar eax, cl
cdq
mov dword [ebp - 0x1a54], eax
mov dword [ebp - 0x1a50], edx
push dword [ebp - 0x1a50]
push dword [ebp - 0x1a54]
mov ecx, 0xaba118
call fcn.0040a8db
jmp 0x46f325
jmp 0x46f303
jmp 0x46f2dd
lea eax, [ebp - 0x2744]
push eax
push 0
lea eax, [ebp - 0x23f0]
push eax
push 0
push 0xa5c
push 0x729c
call fcn.0046a381
add esp, 0x18
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0xb00], 0x1740
jge 0x46f3c5
mov edx, dword [ebp - 0x1f9c]
mov ecx, 0xaba118
call fcn.0040d553
jmp 0x46f3e1
or dword [ebp - 4], 0xffffffff
jmp 0x46f3eb
push 0
push 0
lea eax, [ebp - 0xb08]
push eax
lea eax, [ebp - 0x10b0]
push eax
push 1
call fcn.0045b1da
add esp, 0x14
push 1
lea eax, [ebp - 0x10b0]
push eax
lea eax, [ebp - 0x1fa4]
push eax
push 1
lea eax, [ebp - 0xb08]
push eax
push 0x5fde
lea eax, [ebp - 0x23f0]
push eax
push 1
lea eax, [ebp - 0x1fac]
push eax
lea eax, [ebp - 0x1fb4]
push eax
lea eax, [ebp - 0x1fbc]
push eax
lea eax, [ebp - 0x1fc4]
push eax
call fcn.0045c6a0
add esp, 0x30
lea ecx, [ebp - 0x23f0]
call fcn.0040ad02
mov dword [ebp - 0x2b60], 1
mov dword [ebp - 0x994], 0xfffffff9
mov dword [ebp - 0x274c], 0xd47941ce
mov dword [ebp - 0x5cc], 0x23edb395
mov dword [ebp - 0x1388], 0x3614
mov dword [ebp - 0x1fcc], 0xaa30b8
cmp dword [ebp - 0x1388], 0x388c
jle 0x46f51d
and dword [ebp - 0x70c], 0
jmp 0x46f4bb
mov eax, dword [ebp - 0x70c]
inc eax
mov dword [ebp - 0x70c], eax
cmp dword [ebp - 0x70c], 0x1be5
jge 0x46f51d
and dword [ebp - 0x344], 0
jmp 0x46f4dd
mov eax, dword [ebp - 0x344]
inc eax
mov dword [ebp - 0x344], eax
cmp dword [ebp - 0x344], 0x67ae
jge 0x46f51b
mov eax, dword [ebp - 0x70c]
imul eax, dword [ebp - 0x344]
cdq
mov dword [ebp - 0x1a60], eax
mov dword [ebp - 0x1a5c], edx
push dword [ebp - 0x1a5c]
push dword [ebp - 0x1a60]
mov ecx, 0xaba118
call fcn.0040a8db
jmp 0x46f4d0
jmp 0x46f4ae
mov dword [ebp - 0x1fe4], 7
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0x1388], 0x3296
jge 0x46f54a
mov edx, dword [ebp - 0x1fcc]
mov ecx, 0xaba118
call fcn.0040d553
jmp 0x46f566
or dword [ebp - 4], 0xffffffff
jmp 0x46f570
mov dword [ebp - 0x1fec], 0x3fa3
mov dword [ebp - 0x98], 0
jmp 0x46f593
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 1
jge 0x46f5af
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0x20f8], 0xfff7
jmp 0x46f586
mov dword [ebp - 0x98], 0
jmp 0x46f5c8
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 4
jge 0x46f5e4
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0x1698], 9
jmp 0x46f5bb
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x1698], 0
jmp 0x46f612
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1698]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x1698], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1698], 0
jg 0x46f64c
mov byte [ebp - 0x140], 0
movzx eax, byte [ebp - 0x140]
test eax, eax
je 0x46f64a
push 0
push 0
push 0x4d93
push 0x1c1f
call fcn.0045b5fa
add esp, 0x10
jmp 0x46f5f7
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x1698], 0
jne 0x46f66e
cmp dword [ebp - 0x5cc], 0
jne 0x46f66e
and dword [ebp - 0xb10], 0
jmp 0x46f678
mov dword [ebp - 0xb10], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1698]
cmp dword [ebp - 0xb10], eax
je 0x46f6b9
mov dword [ebp - 0x1fd4], 0xb32e
push 0x16b8
lea eax, [ebp - 0x1fd4]
push eax
push 0
push 0
push 0x3e31
call fcn.0046a78b
add esp, 0x14
jmp 0x46f9b6
push 4
lea ecx, [ebp - 0xa18]
call fcn.0040ac30
mov dword [ebp - 0x8e4], 0x9c2b2e5f
mov dword [ebp - 0x8ec], 0x18b01197
mov dword [ebp - 0x1fdc], 4
mov dword [ebp - 0xb30], 6
mov dword [ebp - 0x14f8], 0xe0aee481
push 0x6fbc
push 1
push 0x287d
push 0x19b3
push 1
push 0x391e
push 0
push 0x3c40
push 0x7f7c
push 0x600a
lea eax, [ebp - 0xa18]
push eax
lea eax, [ebp - 0x298c]
push eax
push 0x46f9
call fcn.00468d15
add esp, 0x34
push 3
lea ecx, [ebp - 0xa18]
call fcn.0040ad1e
mov ecx, dword [ebp - 0x994]
cmp dword [eax], ecx
jge 0x46f75f
mov dword [ebp - 0x10b8], 1
jmp 0x46f766
and dword [ebp - 0x10b8], 0
mov eax, dword [ebp - 0x10b8]
mov dword [ebp - 0x8ec], eax
mov esi, dword [ebp - 0x8ec]
push 3
lea ecx, [ebp - 0xa18]
call fcn.0040ad1e
cmp esi, dword [eax]
jg 0x46f795
mov dword [ebp - 0xb18], 1
jmp 0x46f79c
and dword [ebp - 0xb18], 0
push 3
lea ecx, [ebp - 0xa18]
call fcn.0040ad1e
mov ecx, dword [ebp - 0xb18]
cmp ecx, dword [eax]
jne 0x46f7bf
mov dword [ebp - 0x1540], 1
jmp 0x46f7c6
and dword [ebp - 0x1540], 0
push 3
lea ecx, [ebp - 0xa18]
call fcn.0040ad1e
mov ecx, dword [ebp - 0x1540]
cmp ecx, dword [eax]
jge 0x46f7e9
mov dword [ebp - 0xb20], 1
jmp 0x46f7f0
and dword [ebp - 0xb20], 0
push 0
lea ecx, [ebp - 0xa18]
call fcn.0040ad1e
mov ecx, dword [ebp - 0xb20]
cmp ecx, dword [eax]
jge 0x46f813
mov dword [ebp - 0x10c0], 1
jmp 0x46f81a
and dword [ebp - 0x10c0], 0
mov eax, dword [ebp - 0x994]
cmp dword [ebp - 0x10c0], eax
jl 0x46f834
mov dword [ebp - 0xb28], 1
jmp 0x46f83b
and dword [ebp - 0xb28], 0
cmp dword [ebp - 0xb28], 0xaca62e26
jb 0x46f859
cmp dword [ebp - 0x1fdc], 0
jne 0x46f859
and dword [ebp - 0x1390], 0
jmp 0x46f863
mov dword [ebp - 0x1390], 1
mov eax, dword [ebp - 0x1390]
mov dword [ebp - 0xb30], eax
mov eax, dword [ebp - 0xb30]
mov dword [ebp - 0x2754], eax
push 1
lea ecx, [ebp - 0xa18]
call fcn.0040ad1e
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1698], 0xbff7
jg 0x46f8a6
mov dword [ebp - 0x10c8], 1
jmp 0x46f8ad
and dword [ebp - 0x10c8], 0
mov eax, dword [ebp - 0x1fe4]
cmp dword [ebp - 0x10c8], eax
jge 0x46f8c2
cmp dword [ebp - 0x1fec], 0
push 3
lea ecx, [ebp - 0xa18]
call fcn.0040ad1e
mov eax, dword [eax]
mov dword [ebp - 0x5cc], eax
mov eax, dword [ebp - 0x5cc]
mov dword [ebp - 0x8e4], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1698]
cmp dword [ebp - 0x8e4], eax
jge 0x46f90d
cmp dword [ebp - 0x8e4], 0
je 0x46f90d
mov dword [ebp - 0xb38], 1
jmp 0x46f914
and dword [ebp - 0xb38], 0
push 3
lea ecx, [ebp - 0xa18]
call fcn.0040ad1e
mov esi, dword [eax]
sub esi, dword [ebp - 0xb38]
push 3
lea ecx, [ebp - 0xa18]
call fcn.0040ad1e
imul esi, dword [eax]
add esi, dword [ebp - 0x14f8]
push 4
pop eax
imul eax, eax, 0
cmp esi, dword [ebp + eax - 0x1698]
jg 0x46f960
cmp dword [ebp - 0x14f8], 0
jne 0x46f960
and dword [ebp - 0x20f0], 0
jmp 0x46f96a
mov dword [ebp - 0x20f0], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20f8]
mov dword [ebp - 0x2ae0], eax
mov dword [ebp - 0x994], 0xffffffff
lea eax, [ebp - 0x5cc]
push eax
push 1
push 0x1b96
push 0x5807
lea eax, [ebp - 0x8ec]
push eax
push 1
call fcn.0045c9de
add esp, 0x18
lea ecx, [ebp - 0xa18]
call fcn.0040ad02
mov dword [ebp - 0x275c], 0xc458a922
mov dword [ebp - 0xb40], 0x665a
mov dword [ebp - 0x2100], 0xaa3110
cmp dword [ebp - 0xb40], 0x6794
jle 0x46fab1
and dword [ebp - 0x34c], 0
jmp 0x46f9fa
mov eax, dword [ebp - 0x34c]
inc eax
mov dword [ebp - 0x34c], eax
cmp dword [ebp - 0x34c], 0x6762
jge 0x46faab
and dword [ebp - 0x83c], 0
jmp 0x46fa20
mov eax, dword [ebp - 0x83c]
inc eax
mov dword [ebp - 0x83c], eax
cmp dword [ebp - 0x83c], 0x53cb
jge 0x46faa6
and dword [ebp - 0x354], 0
jmp 0x46fa42
mov eax, dword [ebp - 0x354]
inc eax
mov dword [ebp - 0x354], eax
cmp dword [ebp - 0x354], 0x3e6
jge 0x46faa1
mov eax, dword [ebp - 0x34c]
xor eax, dword [ebp - 0x83c]
xor eax, dword [ebp - 0x354]
cdq
mov dword [ebp - 0x1a6c], eax
mov dword [ebp - 0x1a68], edx
push dword [ebp - 0x1a68]
push dword [ebp - 0x1a6c]
lea ecx, [ebp - 0x2f4c]
call fcn.00401a01
pop ecx
pop ecx
mov ecx, eax
call fcn.0040a8d0
push eax
call fcn.0049b1a7
pop ecx
lea ecx, [ebp - 0x2f4c]
call fcn.0040a8c6
jmp 0x46fa35
jmp 0x46fa13
jmp 0x46f9ed
call dword [0xabd160]
mov dword [ebp - 0x1e8c], 0x8069d1fe
mov dword [ebp - 4], 0x10
cmp dword [ebp - 0xb40], 0x6308
jge 0x46fada
push dword [ebp - 0x2100]
call fcn.0049b1a7
pop ecx
jmp 0x46faf6
or dword [ebp - 4], 0xffffffff
jmp 0x46fb00
mov dword [ebp - 0x90c], 9
mov dword [ebp - 0x2108], 3
mov dword [ebp - 0xb50], 0xddca2728
mov dword [ebp - 0x15c], 1
mov dword [ebp - 0x164], 0xd5493e62
lea eax, [ebp - 0x164]
push eax
push 0
push 0x396d
lea eax, [ebp - 0x15c]
push eax
push 1
push 0x18d2
lea eax, [ebp - 0xb50]
push eax
lea eax, [ebp - 0x2108]
push eax
call fcn.00457667
add esp, 0x20
mov dword [ebp - 0x164], 0
jmp 0x46fb7d
mov eax, dword [ebp - 0x164]
dec eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 0xffffffe7
jg 0x46fdfa
mov dword [ebp - 0xb58], 0x3acb6d64
mov dword [ebp - 0x9f8], 0xc0a10336
mov dword [ebp - 0x24f0], 0xd3d8e1ce
mov dword [ebp - 0x24ec], 0xd3d8e1ce
mov dword [ebp - 0x24e8], 0xd3d8e1ce
mov dword [ebp - 0x24e4], 0xd3d8e1ce
mov dword [ebp - 0xd8], 0
jmp 0x46fbdf
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 4
jge 0x46fbfb
mov eax, dword [ebp - 0xd8]
mov dword [ebp + eax*4 - 0x1748], 0xf4ea14c5
jmp 0x46fbd2
mov dword [ebp - 0xd8], 0
jmp 0x46fc14
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 4
jge 0x46fc30
mov eax, dword [ebp - 0xd8]
mov dword [ebp + eax*4 - 0x2c98], 0x5379a1d1
jmp 0x46fc07
mov dword [ebp - 0x15c], 0
jmp 0x46fc49
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 4
jge 0x46fc65
mov eax, dword [ebp - 0x15c]
mov dword [ebp + eax*4 - 0x1748], 0xbf5f40e1
jmp 0x46fc3c
cmp dword [ebp - 0x164], 0
jne 0x46fcb7
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1748]
mov dword [ebp - 0x9f8], eax
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x299c], eax
mov eax, dword [ebp - 0x9f8]
mov dword [ebp - 0x2764], eax
or eax, 0xffffffff
jne 0x46fcb7
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x1748], 0
jne 0x46fcb7
and dword [ebp - 0x10d0], 0
jmp 0x46fcc1
mov dword [ebp - 0x10d0], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1748]
cmp dword [ebp - 0x10d0], eax
jge 0x46fce8
cmp dword [ebp - 0x9f8], 0
jne 0x46fce8
and dword [ebp - 0xb48], 0
jmp 0x46fcf2
mov dword [ebp - 0xb48], 1
mov eax, 0x1f9e
sub eax, dword [ebp - 0xb48]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x1748]
jg 0x46fd18
mov dword [ebp - 0x1398], 1
jmp 0x46fd1f
and dword [ebp - 0x1398], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x1748]
add eax, dword [ebp - 0x1398]
je 0x46fd49
cmp dword [ebp - 0x164], 0
je 0x46fd49
mov dword [ebp - 0x10d8], 1
jmp 0x46fd50
and dword [ebp - 0x10d8], 0
mov eax, dword [ebp - 0xb50]
add eax, dword [ebp - 0x10d8]
je 0x46fd7a
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x1748], 0
je 0x46fd7a
mov dword [ebp - 0x8f4], 1
jmp 0x46fd81
and dword [ebp - 0x8f4], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x8f4]
mov dword [ebp + eax - 0x2c98], ecx
cmp dword [ebp - 0x8f4], 0
jne 0x46fda8
mov dword [ebp - 0x1548], 1
jmp 0x46fdaf
and dword [ebp - 0x1548], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1748]
mov dword [ebp - 0xb58], eax
mov eax, dword [ebp - 0xb58]
cmp eax, dword [ebp - 0x1548]
je 0x46fddb
mov dword [ebp - 0xb60], 1
jmp 0x46fde2
and dword [ebp - 0xb60], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0xb60]
mov dword [ebp + eax - 0x24f0], ecx
jmp 0x46fb70
mov dword [ebp - 0xbe8], 9
mov dword [ebp - 0x16c], 1
mov dword [ebp - 0x2118], 0
mov dword [ebp - 0x5d4], 0
jmp 0x46fe31
mov eax, dword [ebp - 0x5d4]
inc eax
mov dword [ebp - 0x5d4], eax
cmp dword [ebp - 0x5d4], 3
jge 0x46fe4d
mov eax, dword [ebp - 0x5d4]
mov dword [ebp + eax*4 - 0x200c], 0
jmp 0x46fe24
mov eax, dword [ebp - 0x16c]
cmp dword [ebp - 0x16c], eax
jge 0x46fe67
mov dword [ebp - 0x10e0], 1
jmp 0x46fe6e
and dword [ebp - 0x10e0], 0
mov eax, dword [ebp - 0x16c]
sub eax, dword [ebp - 0x10e0]
cmp eax, dword [ebp - 0x16c]
jge 0x46fe8e
mov dword [ebp - 0x99c], 1
jmp 0x46fe95
and dword [ebp - 0x99c], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x99c]
mov dword [ebp + eax - 0x200c], ecx
cmp dword [ebp - 0x99c], 0
je 0x46ff45
push 4
pop eax
shl eax, 1
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x200c]
cmp dword [ebp + eax - 0x200c], ecx
jl 0x46fee2
mov eax, 0x59c4
test eax, eax
jne 0x46fee2
and dword [ebp - 0x2110], 0
jmp 0x46feec
mov dword [ebp - 0x2110], 1
mov eax, 0xf72b
cmp eax, 0x5d36
jle 0x46ff04
mov dword [ebp - 0xb68], 1
jmp 0x46ff0b
and dword [ebp - 0xb68], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x200c]
cmp dword [ebp - 0xb68], eax
je 0x46ff2b
mov dword [ebp - 0x8fc], 1
jmp 0x46ff32
and dword [ebp - 0x8fc], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x8fc]
mov dword [ebp + eax - 0x200c], ecx
mov eax, dword [ebp - 0x16c]
cmp dword [ebp - 0x16c], eax
jl 0x46ff5f
mov dword [ebp - 0x13a0], 1
jmp 0x46ff66
and dword [ebp - 0x13a0], 0
mov eax, dword [ebp - 0x16c]
cmp dword [ebp - 0x13a0], eax
jg 0x46ff84
xor eax, eax
je 0x46ff84
mov dword [ebp - 0xb70], 1
jmp 0x46ff8b
and dword [ebp - 0xb70], 0
mov eax, dword [ebp - 0xb70]
mov dword [ebp - 0x2118], eax
push 0x3149
push 0x627d
push 0x3738
push 0x676f
push 0x20f
push 0x679b
push 1
push 0x643
push 0x20be
push 0x3a57
push 0x4f40
push 0
push 1
push 0x522f
push 0xe9e
push 0x5bf0
push 0x171c
push 0x4a30
push 0x1c0
call fcn.00461845
add esp, 0x4c
push 3
lea ecx, [ebp - 0x16cc]
call fcn.0040ac30
mov dword [ebp - 0x1a8], 0xf57a7c2
push 2
lea ecx, [ebp - 0x23cc]
call fcn.0040ac30
mov dword [ebp - 0x204], 0
jmp 0x470032
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 3
jge 0x470054
push dword [ebp - 0x204]
lea ecx, [ebp - 0x16cc]
call fcn.0040ad1e
mov dword [eax], 0x77862fd4
jmp 0x470025
push 0xdc
push 0x7346
push 0
push 0
lea eax, [ebp - 0x204]
push eax
lea eax, [ebp - 0x23cc]
push eax
push 0x44d9
call fcn.00457422
add esp, 0x1c
mov dword [ebp - 0x1a8], 0
jmp 0x470096
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 2
jg 0x4703b7
mov dword [ebp - 0x1e0], 0xfffffffe
mov dword [ebp - 0x1e0], 0
jmp 0x4700c6
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 2
jg 0x4703a6
mov dword [ebp - 0xb78], 0x8dc5336d
mov dword [ebp - 0x35c], 0
jmp 0x4700f6
mov eax, dword [ebp - 0x35c]
inc eax
mov dword [ebp - 0x35c], eax
cmp dword [ebp - 0x35c], 1
jge 0x470112
mov eax, dword [ebp - 0x35c]
mov dword [ebp + eax*4 - 0x104], 0x7f5ed9a9
jmp 0x4700e9
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x104], 2
jmp 0x470140
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x104]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x104], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x104], 0
jl 0x4703a1
mov dword [ebp - 0x2130], 9
mov dword [ebp - 0x2138], 0
mov byte [ebp - 0x142], 0
mov dword [ebp - 0x10e8], 0x38c3
mov dword [ebp - 0x2120], 0xaa3184
cmp dword [ebp - 0x10e8], 0x3a40
jle 0x470272
and dword [ebp - 0x714], 0
jmp 0x4701a9
mov eax, dword [ebp - 0x714]
inc eax
mov dword [ebp - 0x714], eax
cmp dword [ebp - 0x714], 0x77cb
jge 0x470272
and dword [ebp - 0x364], 0
jmp 0x4701cf
mov eax, dword [ebp - 0x364]
inc eax
mov dword [ebp - 0x364], eax
cmp dword [ebp - 0x364], 0x6ee2
jge 0x47026d
and dword [ebp - 0x5dc], 0
jmp 0x4701f5
mov eax, dword [ebp - 0x5dc]
inc eax
mov dword [ebp - 0x5dc], eax
cmp dword [ebp - 0x5dc], 0xca
jge 0x470268
and dword [ebp - 0x36c], 0
jmp 0x470217
mov eax, dword [ebp - 0x36c]
inc eax
mov dword [ebp - 0x36c], eax
cmp dword [ebp - 0x36c], 0x63fa
jge 0x470266
mov eax, dword [ebp - 0x714]
mov ecx, dword [ebp - 0x364]
sar eax, cl
mov ecx, dword [ebp - 0x5dc]
sar eax, cl
mov ecx, dword [ebp - 0x36c]
shl eax, cl
cdq
mov dword [ebp - 0x1a78], eax
mov dword [ebp - 0x1a74], edx
push dword [ebp - 0x1a74]
push dword [ebp - 0x1a78]
mov ecx, 0xaba118
call fcn.0040a8db
jmp 0x47020a
jmp 0x4701e8
jmp 0x4701c2
jmp 0x47019c
push 1
push 0
lea eax, [ebp - 0x142]
push eax
call fcn.004572ce
add esp, 0xc
mov dword [ebp - 4], 0x12
cmp dword [ebp - 0x10e8], 0x36a6
jge 0x4702a8
mov edx, dword [ebp - 0x2120]
mov ecx, 0xaba118
call fcn.0040d553
jmp 0x4702c4
or dword [ebp - 4], 0xffffffff
jmp 0x4702ce
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x104]
lea ecx, [ebp - 0x16cc]
call fcn.0040ad1e
cmp dword [eax], 9
jbe 0x4702f7
mov dword [ebp - 0x1500], 1
jmp 0x4702fe
and dword [ebp - 0x1500], 0
push 1
lea ecx, [ebp - 0x16cc]
call fcn.0040ad1e
push 4
pop eax
imul eax, eax, 0
push 0xfffffffffffffffb
pop ecx
sub ecx, dword [ebp - 0x1e0]
cmp dword [ebp + eax - 0x104], ecx
jge 0x47032f
mov dword [ebp - 0x2128], 1
jmp 0x470336
and dword [ebp - 0x2128], 0
mov eax, dword [ebp - 0x2130]
mov dword [ebp - 0x2bb0], eax
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x104]
lea ecx, [ebp - 0x16cc]
call fcn.0040ad1e
mov eax, dword [eax]
mov dword [ebp - 0xb78], eax
mov eax, dword [ebp - 0xb78]
add eax, dword [ebp - 0x1500]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x104]
jne 0x470389
mov dword [ebp - 0xb80], 1
jmp 0x470390
and dword [ebp - 0xb80], 0
mov eax, dword [ebp - 0xb80]
mov dword [ebp - 0x2138], eax
jmp 0x470125
jmp 0x4700b9
mov eax, dword [ebp - 0x1a8]
mov dword [ebp - 0x1e0], eax
jmp 0x470089
push 0x1f20
push 0x231b
lea eax, [ebp - 0x23cc]
push eax
lea eax, [ebp - 0x1a8]
push eax
push 0x7343
lea eax, [ebp - 0x16cc]
push eax
push 1
push 0
call fcn.004660b5
add esp, 0x20
lea ecx, [ebp - 0x23cc]
call fcn.0040ad02
lea ecx, [ebp - 0x16cc]
call fcn.0040ad02
mov dword [ebp - 0x7b4], 0xffffffff
mov dword [ebp - 0x7b4], 0xfffffff2
jmp 0x470420
mov eax, dword [ebp - 0x7b4]
dec eax
mov dword [ebp - 0x7b4], eax
cmp dword [ebp - 0x7b4], 0xffffffe6
je 0x470480
mov dword [ebp - 0x374], 0x22124f84
mov dword [ebp - 0x374], 0xa
jmp 0x47044c
mov eax, dword [ebp - 0x374]
inc eax
mov dword [ebp - 0x374], eax
cmp dword [ebp - 0x374], 0xf
jg 0x47047e
mov dword [ebp - 0x1764], 7
push 0x2862
push 0x7195
push 0
push 1
lea eax, [ebp - 0x1764]
push eax
call fcn.0046a78b
add esp, 0x14
jmp 0x47043f
jmp 0x470413
mov dword [ebp - 0x54], 0
jmp 0x470490
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 2
jge 0x4704a6
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x1680], 0xfffa
jmp 0x470489
mov dword [ebp - 0x1108], 0x7717
mov dword [ebp - 0x177c], 0xaa31cc
cmp dword [ebp - 0x1108], 0x7802
jle 0x47059c
and dword [ebp - 0x71c], 0
jmp 0x4704e0
mov eax, dword [ebp - 0x71c]
inc eax
mov dword [ebp - 0x71c], eax
cmp dword [ebp - 0x71c], 0x3c24
jge 0x470592
and dword [ebp - 0x5e4], 0
jmp 0x470506
mov eax, dword [ebp - 0x5e4]
inc eax
mov dword [ebp - 0x5e4], eax
cmp dword [ebp - 0x5e4], 0x222f
jge 0x47058d
and dword [ebp - 0x37c], 0
jmp 0x470528
mov eax, dword [ebp - 0x37c]
inc eax
mov dword [ebp - 0x37c], eax
cmp dword [ebp - 0x37c], 0x4895
jge 0x470588
mov eax, dword [ebp - 0x5e4]
imul eax, dword [ebp - 0x37c]
xor eax, dword [ebp - 0x71c]
cdq
mov dword [ebp - 0x1a84], eax
mov dword [ebp - 0x1a80], edx
push dword [ebp - 0x1a80]
push dword [ebp - 0x1a84]
lea ecx, [ebp - 0x2dfc]
call fcn.00401a01
pop ecx
pop ecx
mov ecx, eax
call fcn.0040a8d0
push eax
call fcn.0049b1a7
pop ecx
lea ecx, [ebp - 0x2dfc]
call fcn.0040a8c6
jmp 0x47051b
jmp 0x4704f9
jmp 0x4704d3
push 0
push 0
call dword [0xabd418]
mov dword [ebp - 0x904], 0xfffffff9
mov dword [ebp - 0x276c], 0xd47941ce
mov dword [ebp - 0x384], 0x23edb395
mov dword [ebp - 0x176c], 7
mov dword [ebp - 0x1cf8], 0x3fa3
mov dword [ebp - 0xa0], 0
jmp 0x4705e7
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 1
jge 0x470603
mov eax, dword [ebp - 0xa0]
mov dword [ebp + eax*4 - 0x1e6c], 0xfff7
jmp 0x4705da
mov dword [ebp - 0xa0], 0
jmp 0x47061c
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 4
jge 0x470638
mov eax, dword [ebp - 0xa0]
mov dword [ebp + eax*4 - 0x16c0], 9
jmp 0x47060f
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x16c0], 0
jmp 0x470666
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x16c0]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x16c0], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x16c0], 0
jg 0x47069c
mov byte [ebp - 0x144], 0
push 0
push 1
push 0x75cd
lea eax, [ebp - 0x144]
push eax
push 0x257
call fcn.00466b4c
add esp, 0x14
jmp 0x47064b
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x16c0], 0
jne 0x4706be
cmp dword [ebp - 0x384], 0
jne 0x4706be
and dword [ebp - 0x10f0], 0
jmp 0x4706c8
mov dword [ebp - 0x10f0], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x16c0]
cmp dword [ebp - 0x10f0], eax
je 0x470709
mov dword [ebp - 0x19a0], 0xb32e
push 1
push 0x4860
push 0
lea eax, [ebp - 0x19a0]
push eax
push 0x5798
call fcn.0045e4f8
add esp, 0x14
jmp 0x470a09
push 4
lea ecx, [ebp - 0xa28]
call fcn.0040ac30
mov dword [ebp - 0xa2c], 0x9c2b2e5f
mov dword [ebp - 0x9a4], 0x18b01197
mov dword [ebp - 0x1e64], 4
mov dword [ebp - 0x1100], 6
mov dword [ebp - 0xbb0], 0xe0aee481
push 0x4ba0
push 1
lea eax, [ebp - 0xa28]
push eax
push 0x6ceb
push 0x1fbf
push 0x759e
push 0x4300
push 0
lea eax, [ebp - 0x29ac]
push eax
push 0x11d6
push 0x2fd4
push 0x600a
call fcn.0045f128
add esp, 0x30
push 3
lea ecx, [ebp - 0xa28]
call fcn.0040ad1e
mov ecx, dword [ebp - 0x904]
cmp dword [eax], ecx
jge 0x4707ad
mov dword [ebp - 0xb88], 1
jmp 0x4707b4
and dword [ebp - 0xb88], 0
mov eax, dword [ebp - 0xb88]
mov dword [ebp - 0x9a4], eax
mov esi, dword [ebp - 0x9a4]
push 3
lea ecx, [ebp - 0xa28]
call fcn.0040ad1e
cmp esi, dword [eax]
jg 0x4707e3
mov dword [ebp - 0x13a8], 1
jmp 0x4707ea
and dword [ebp - 0x13a8], 0
push 3
lea ecx, [ebp - 0xa28]
call fcn.0040ad1e
mov ecx, dword [ebp - 0x13a8]
cmp ecx, dword [eax]
jne 0x47080d
mov dword [ebp - 0xb90], 1
jmp 0x470814
and dword [ebp - 0xb90], 0
push 3
lea ecx, [ebp - 0xa28]
call fcn.0040ad1e
mov ecx, dword [ebp - 0xb90]
cmp ecx, dword [eax]
jge 0x470837
mov dword [ebp - 0x10f8], 1
jmp 0x47083e
and dword [ebp - 0x10f8], 0
push 0
lea ecx, [ebp - 0xa28]
call fcn.0040ad1e
mov ecx, dword [ebp - 0x10f8]
cmp ecx, dword [eax]
jge 0x470861
mov dword [ebp - 0xb98], 1
jmp 0x470868
and dword [ebp - 0xb98], 0
mov eax, dword [ebp - 0x904]
cmp dword [ebp - 0xb98], eax
jl 0x470882
mov dword [ebp - 0x1550], 1
jmp 0x470889
and dword [ebp - 0x1550], 0
cmp dword [ebp - 0x1550], 0xaca62e26
jb 0x4708a7
cmp dword [ebp - 0x1e64], 0
jne 0x4708a7
and dword [ebp - 0xba0], 0
jmp 0x4708b1
mov dword [ebp - 0xba0], 1
mov eax, dword [ebp - 0xba0]
mov dword [ebp - 0x1100], eax
mov eax, dword [ebp - 0x1100]
mov dword [ebp - 0x2774], eax
push 1
lea ecx, [ebp - 0xa28]
call fcn.0040ad1e
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x16c0], 0xbff7
jg 0x4708f4
mov dword [ebp - 0xba8], 1
jmp 0x4708fb
and dword [ebp - 0xba8], 0
mov eax, dword [ebp - 0x176c]
cmp dword [ebp - 0xba8], eax
jge 0x470910
cmp dword [ebp - 0x1cf8], 0
push 3
lea ecx, [ebp - 0xa28]
call fcn.0040ad1e
mov eax, dword [eax]
mov dword [ebp - 0x384], eax
mov eax, dword [ebp - 0x384]
mov dword [ebp - 0xa2c], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x16c0]
cmp dword [ebp - 0xa2c], eax
jge 0x47095b
cmp dword [ebp - 0xa2c], 0
je 0x47095b
mov dword [ebp - 0x13b0], 1
jmp 0x470962
and dword [ebp - 0x13b0], 0
push 3
lea ecx, [ebp - 0xa28]
call fcn.0040ad1e
mov esi, dword [eax]
sub esi, dword [ebp - 0x13b0]
push 3
lea ecx, [ebp - 0xa28]
call fcn.0040ad1e
imul esi, dword [eax]
add esi, dword [ebp - 0xbb0]
push 4
pop eax
imul eax, eax, 0
cmp esi, dword [ebp + eax - 0x16c0]
jg 0x4709ae
cmp dword [ebp - 0xbb0], 0
jne 0x4709ae
and dword [ebp - 0x1774], 0
jmp 0x4709b8
mov dword [ebp - 0x1774], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1e6c]
mov dword [ebp - 0x2ae8], eax
mov dword [ebp - 0x904], 0xffffffff
push 0x494b
lea eax, [ebp - 0x9a4]
push eax
push 0
push 1
push 0x5ca4
lea eax, [ebp - 0x384]
push eax
push 0x1dab
call fcn.00462426
add esp, 0x1c
lea ecx, [ebp - 0xa28]
call fcn.0040ad02
mov dword [ebp - 4], 0x14
cmp dword [ebp - 0x1108], 0x76a4
jge 0x470a28
push dword [ebp - 0x177c]
call fcn.0049b1a7
pop ecx
jmp 0x470a44
or dword [ebp - 4], 0xffffffff
jmp 0x470a4e
push 0x76d5
push 0
push 0x5d87
push 0x44ca
push 0x2da5
push 0x4bd6
push 0x392
lea eax, [ebp - 0x24a4]
push eax
push 0x6521
push 0x3613
lea eax, [ebp - 0x54]
push eax
push 0x7b94
push 0x7c6f
push 0
push 0x548e
call fcn.00459298
add esp, 0x3c
mov dword [ebp - 0x2c], 5
mov dword [ebp - 0x38c], 1
mov dword [ebp - 0x277c], 0xf5b872a
mov dword [ebp - 0x29bc], 0xffffffff
mov dword [ebp - 0x1d1c], 0xffffffff
mov dword [ebp - 0x2784], 0xffffffff
mov dword [ebp - 0x1d10], 0
push 1
lea ecx, [ebp - 0x2354]
call fcn.0040ac30
mov dword [ebp - 0x1e74], 0x212c
mov dword [ebp - 0x2b74], 0xfffffff6
push 2
lea ecx, [ebp - 0x245c]
call fcn.0040ac30
mov dword [ebp - 0x278c], 0x7fbc07b3
push 1
push 0x5b3a
push 0x2c0f
lea eax, [ebp - 0x2354]
push eax
lea eax, [ebp - 0x1d04]
push eax
push 0x826
push 0
push 0x7605
push 0x584f
push 0x49d7
push 0
push 0x9fc
call fcn.0046b346
add esp, 0x30
push 0x7699
lea eax, [ebp - 0x1d04]
push eax
push 0x6395
push 0
push 0x71a5
lea eax, [ebp - 0x245c]
push eax
push 1
push 0x4afd
push 0x66b4
push 0xe82
push 0x519a
call fcn.00468540
add esp, 0x2c
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x29cc], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x2794], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x2af0], eax
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], eax
jne 0x470bc2
mov dword [ebp - 0xbb8], 1
jmp 0x470bc9
and dword [ebp - 0xbb8], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0xbb8], eax
jne 0x470be6
cmp dword [ebp - 0x38c], 0
jne 0x470be6
and dword [ebp - 0x1508], 0
jmp 0x470bf0
mov dword [ebp - 0x1508], 1
cmp dword [ebp - 0x1508], 1
jb 0x470c05
mov dword [ebp - 0xbc0], 1
jmp 0x470c0c
and dword [ebp - 0xbc0], 0
cmp dword [ebp - 0xbc0], 0xa4ba
jge 0x470c24
mov dword [ebp - 0x1110], 1
jmp 0x470c2b
and dword [ebp - 0x1110], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x1110], eax
jg 0x470c42
mov dword [ebp - 0xbc8], 1
jmp 0x470c49
and dword [ebp - 0xbc8], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0xbc8], eax
jl 0x470c60
mov dword [ebp - 0x13b8], 1
jmp 0x470c67
and dword [ebp - 0x13b8], 0
mov eax, dword [ebp - 0x38c]
add eax, dword [ebp - 0x13b8]
cmp dword [ebp - 0x2c], eax
jl 0x470c84
mov dword [ebp - 0xbd0], 1
jmp 0x470c8b
and dword [ebp - 0xbd0], 0
cmp dword [ebp - 0xbd0], 0
jae 0x470ce1
mov dword [ebp - 0x1784], 0xfffffff6
push 1
push 0x1cc9
push 0x1bfb
push 1
call fcn.0045ce26
add esp, 0x10
push 0x6008
push 0x1dbe
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x1784]
push eax
push 1
push 1
lea eax, [ebp - 0x38c]
push eax
call fcn.0045ceaf
add esp, 0x1c
jmp 0x470f50
mov dword [ebp - 0x230c], 0x951b
mov dword [ebp - 0x2308], 0x951b
mov dword [ebp - 0x2304], 0x951b
mov dword [ebp - 0x2300], 0x951b
lea ecx, [ebp - 0x9cd]
call fcn.0040ad2d
push eax
lea eax, [ebp - 0x22fc]
push eax
lea eax, [ebp - 0x230c]
push eax
lea ecx, [ebp - 0x2cd8]
call fcn.0040ad30
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x2190]
call fcn.0040acdc
mov dword [ebp - 0xbe0], 0xffffffff
mov dword [ebp - 0x279c], 0xfffffffa
mov dword [ebp - 0x29dc], 0x23024a1
mov dword [ebp - 0x27a4], 0xfffffff6
mov dword [ebp - 0x17a4], 0x7638ff43
mov dword [ebp - 0x2bc8], 0xfffffffc
mov dword [ebp - 0x27ac], 0x85ca7db
mov dword [ebp - 0x179c], 0x4911ccfe
mov dword [ebp - 0x29ec], 0xfffffff9
mov dword [ebp - 0x1e7c], 1
mov dword [ebp - 0x27b4], 0xa65d3384
mov dword [ebp - 0x178c], 0xffffffff
mov dword [ebp - 0x2af8], 4
mov dword [ebp - 0x27bc], 0xffffffff
mov dword [ebp - 0x29fc], 0xfffffff8
mov dword [ebp - 0x27c4], 0xc043ca38
mov dword [ebp - 0x2b88], 7
mov dword [ebp - 0x1794], 0x4c
mov dword [ebp - 0x5ec], 0
jmp 0x470e0b
mov eax, dword [ebp - 0x5ec]
inc eax
mov dword [ebp - 0x5ec], eax
cmp dword [ebp - 0x5ec], 3
jge 0x470e27
mov eax, dword [ebp - 0x5ec]
mov dword [ebp + eax*4 - 0x2ff4], 1
jmp 0x470dfe
push 3
lea ecx, [ebp - 0x2190]
call fcn.0040ad1e
mov eax, dword [eax]
inc eax
jne 0x470e54
push 1
lea ecx, [ebp - 0x2190]
call fcn.0040ad1e
cmp dword [eax], 0
jne 0x470e54
and dword [ebp - 0x1118], 0
jmp 0x470e5e
mov dword [ebp - 0x1118], 1
cmp dword [ebp - 0x1118], 0x9e6b
jge 0x470e76
mov dword [ebp - 0xbd8], 1
jmp 0x470e7d
and dword [ebp - 0xbd8], 0
mov eax, dword [ebp - 0x38c]
cmp eax, dword [ebp - 0xbd8]
jne 0x470e97
mov dword [ebp - 0x1558], 1
jmp 0x470e9e
and dword [ebp - 0x1558], 0
mov eax, dword [ebp - 0x1558]
mov dword [ebp - 0xbe0], eax
cmp dword [ebp - 0xbe0], 0
ja 0x470ebf
mov dword [ebp - 0x1120], 1
jmp 0x470ec6
and dword [ebp - 0x1120], 0
push 0
lea ecx, [ebp - 0x2190]
call fcn.0040ad1e
mov eax, dword [eax]
mov ecx, dword [ebp - 0x1120]
lea eax, [eax + ecx - 0x7b9c5c93]
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x1e74]
push eax
push 1
lea eax, [ebp - 0x245c]
push eax
lea eax, [ebp - 0x2354]
push eax
lea eax, [ebp - 0x178c]
push eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x1d10]
push eax
push 0x4381
lea eax, [ebp - 0x1794]
push eax
lea eax, [ebp - 0x1e7c]
push eax
push 0x5b65
lea eax, [ebp - 0x179c]
push eax
lea eax, [ebp - 0x1d1c]
push eax
push 0
lea eax, [ebp - 0x17a4]
push eax
call fcn.00459298
add esp, 0x3c
lea ecx, [ebp - 0x2190]
call fcn.0040ad02
lea ecx, [ebp - 0x245c]
call fcn.0040ad02
lea ecx, [ebp - 0x2354]
call fcn.0040ad02
mov dword [ebp - 0x54], 0
jmp 0x470f76
cmp dword [ebp - 0x54], 1
jge 0x470f8c
mov eax, dword [ebp - 0x1978]
mov dword [ebp - 0x1988], eax
mov eax, dword [ebp - 0x1980]
mov dword [ebp - 0x1990], eax
mov eax, dword [ebp - 0x1988]
mov dword [ebp - 0x29c], eax
mov eax, dword [ebp - 0x1990]
mov dword [ebp - 0x1998], eax
mov eax, dword [ebp - 0x29c]
mov dword [eax], 0
jmp 0x483a9f
mov eax, dword [ebp - 0x29c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x29c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x29c]
cmp dword [eax], 3
jge 0x483ac5
mov eax, dword [ebp - 0x29c]
push dword [eax]
mov ecx, dword [ebp - 0x1998]
call fcn.0040ad1e
mov dword [eax], 0x4a8c
jmp 0x483a8e
jmp 0x483ad5
push 0
push 0x7588
call fcn.00460401
pop ecx
pop ecx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret