Function at 0x47e5d3
Capabilities:
Authenticate hmac
Encrypt data using speck

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b9dc5
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x3330
call fcn.004b57c0
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 0xc]
test eax, eax
je 0x4956a4
lea eax, [ebp + 8]
mov dword [ebp - 0x1a8c], eax
mov eax, dword [ebp - 0x1a8c]
movzx eax, byte [eax]
test eax, eax
je 0x49567a
push 2
lea ecx, [ebp - 0x2164]
call fcn.0040a8cd
mov dword [ebp - 0x1054], 0xd0a
mov dword [ebp - 0x1c78], 0xa89f84
cmp dword [ebp - 0x1054], 0xe52
jle 0x47e735
and dword [ebp - 0x38c], 0
jmp 0x47e669
mov eax, dword [ebp - 0x38c]
inc eax
mov dword [ebp - 0x38c], eax
cmp dword [ebp - 0x38c], 0x4eb7
jge 0x47e72f
and dword [ebp - 0x394], 0
jmp 0x47e68f
mov eax, dword [ebp - 0x394]
inc eax
mov dword [ebp - 0x394], eax
cmp dword [ebp - 0x394], 0x3dc4
jge 0x47e72a
and dword [ebp - 0x398], 0
jmp 0x47e6b5
mov eax, dword [ebp - 0x398]
inc eax
mov dword [ebp - 0x398], eax
cmp dword [ebp - 0x398], 0x5d92
jge 0x47e725
and dword [ebp - 0x7d0], 0
jmp 0x47e6d7
mov eax, dword [ebp - 0x7d0]
inc eax
mov dword [ebp - 0x7d0], eax
cmp dword [ebp - 0x7d0], 0x2434
jge 0x47e723
mov eax, dword [ebp - 0x38c]
imul eax, dword [ebp - 0x394]
imul eax, dword [ebp - 0x398]
imul eax, dword [ebp - 0x7d0]
cdq
mov dword [ebp - 0x1cc4], eax
mov dword [ebp - 0x1cc0], edx
push dword [ebp - 0x1cc0]
push dword [ebp - 0x1cc4]
mov ecx, 0xa9cbd8
call fcn.0040a6a5
jmp 0x47e6ca
jmp 0x47e6a8
jmp 0x47e682
jmp 0x47e65c
call dword [0xaa04b8]
and dword [ebp - 4], 0
cmp dword [ebp - 0x1054], 0xc44
jge 0x47e755
mov edx, dword [ebp - 0x1c78]
mov ecx, 0xa9cbd8
call fcn.0040cf2b
jmp 0x47e771
or dword [ebp - 4], 0xffffffff
jmp 0x47e77b
mov dword [ebp - 0x2cf4], 0x25b054db
mov dword [ebp - 0x2944], 0xffffffff
push 0x2edb
push 1
lea eax, [ebp - 0x2164]
push eax
push 0
push 0x52a2
lea eax, [ebp - 0x2c0]
push eax
push 0x4fb1
push 0x325f
push 1
call fcn.00472fe9
add esp, 0x24
mov dword [ebp - 0x2c0], 0
jmp 0x47e7d8
mov eax, dword [ebp - 0x2c0]
inc eax
mov dword [ebp - 0x2c0], eax
cmp dword [ebp - 0x2c0], 3
jge 0x47e7f4
mov eax, dword [ebp - 0x2c0]
mov dword [ebp + eax*4 - 0x2f90], 0xef7d6512
jmp 0x47e7cb
push 0
lea ecx, [ebp - 0x2164]
call fcn.0040a9bb
and dword [eax], 0
jmp 0x47e82a
push 0
lea ecx, [ebp - 0x2164]
call fcn.0040a9bb
mov dword [ebp - 0x182c], eax
mov eax, dword [ebp - 0x182c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x182c]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x2164]
call fcn.0040a9bb
cmp dword [eax], 4
jge 0x47e91c
mov dword [ebp - 0x3a0], 0x56a9ef72
mov dword [ebp - 0x2b24], 1
mov dword [ebp - 0x294c], 0xc544087
mov dword [ebp - 0x2d6c], 0x761be360
mov dword [ebp - 0x3a0], 0x16
jmp 0x47e881
mov eax, dword [ebp - 0x3a0]
dec eax
mov dword [ebp - 0x3a0], eax
cmp dword [ebp - 0x3a0], 0xfffffffc
jge 0x47e917
mov dword [ebp - 0x670], 0x9d94b4b1
mov dword [ebp - 0x2954], 0xffffffff
mov dword [ebp - 0x2b2c], 0x9333c7d2
mov dword [ebp - 0x295c], 0x311e2db8
mov dword [ebp - 0x1c80], 7
mov dword [ebp - 0x670], 2
jmp 0x47e8d9
mov eax, dword [ebp - 0x670]
dec eax
mov dword [ebp - 0x670], eax
cmp dword [ebp - 0x670], 0
jl 0x47e912
mov dword [ebp - 0x1c88], 0
push 0x7e09
push 1
push 0x5565
lea eax, [ebp - 0x1c80]
push eax
lea eax, [ebp - 0x1c88]
push eax
push 0
call fcn.00478ac2
add esp, 0x18
jmp 0x47e8cc
jmp 0x47e874
jmp 0x47e806
lea ecx, [ebp - 0x2164]
call fcn.0040a99f
push 2
lea ecx, [ebp - 0xad0]
call fcn.0040a8cd
mov dword [ebp - 0xa7c], 0x1af7f3e7
mov dword [ebp - 0x183c], 0
mov dword [ebp - 0x96c], 2
mov dword [ebp - 0x187c], 0xffffffff
mov dword [ebp - 0x908], 0xe6ba9994
mov dword [ebp - 0x1c98], 0xfffffff8
mov dword [ebp - 0x1ca0], 3
mov dword [ebp - 0x3a8], 0
jmp 0x47e993
mov eax, dword [ebp - 0x3a8]
inc eax
mov dword [ebp - 0x3a8], eax
cmp dword [ebp - 0x3a8], 2
jge 0x47e9b5
push dword [ebp - 0x3a8]
lea ecx, [ebp - 0xad0]
call fcn.0040a9bb
mov dword [eax], 0xfffffff6
jmp 0x47e986
push 0x7650
push 1
lea eax, [ebp - 0x183c]
push eax
push 0x7e76
push 0x34d4
push 0x4cfa
push 0x5ed9
lea eax, [ebp - 0xad0]
push eax
push 0
lea eax, [ebp - 0xa7c]
push eax
call fcn.0047382c
add esp, 0x28
mov eax, dword [ebp - 0xa7c]
mov dword [ebp - 0x2cc8], eax
push 1
lea ecx, [ebp - 0xad0]
call fcn.0040a9bb
mov esi, eax
push 1
lea ecx, [ebp - 0xad0]
call fcn.0040a9bb
mov ecx, dword [esi]
cmp ecx, dword [eax]
jl 0x47ea29
mov dword [ebp - 0x18c4], 1
jmp 0x47ea30
and dword [ebp - 0x18c4], 0
push 1
lea ecx, [ebp - 0xad0]
call fcn.0040a9bb
cmp dword [eax], 0xfffffff8
jle 0x47ea54
mov eax, 0x97de2e51
test eax, eax
jne 0x47ea54
and dword [ebp - 0x1834], 0
jmp 0x47ea5e
mov dword [ebp - 0x1834], 1
mov eax, dword [ebp - 0x1834]
mov dword [ebp - 0xa7c], eax
cmp dword [ebp - 0x183c], 0xffffffff
jne 0x47ea88
mov eax, 0x38315eac
test eax, eax
je 0x47ea88
mov dword [ebp - 0x1844], 1
jmp 0x47ea8f
and dword [ebp - 0x1844], 0
push 0
lea ecx, [ebp - 0xad0]
call fcn.0040a9bb
mov ecx, dword [ebp - 0x1844]
cmp ecx, dword [eax]
jle 0x47eab2
mov dword [ebp - 0x184c], 1
jmp 0x47eab9
and dword [ebp - 0x184c], 0
cmp dword [ebp - 0x184c], 0
jne 0x47ead4
mov eax, 0xce65
test eax, eax
jne 0x47ead4
and dword [ebp - 0x186c], 0
jmp 0x47eade
mov dword [ebp - 0x186c], 1
mov eax, dword [ebp - 0x186c]
mov dword [ebp - 0x96c], eax
cmp dword [ebp - 0x96c], 0
je 0x47eb08
mov eax, 0x8eeb
test eax, eax
je 0x47eb08
mov dword [ebp - 0x1874], 1
jmp 0x47eb0f
and dword [ebp - 0x1874], 0
mov eax, dword [ebp - 0x1874]
mov dword [ebp - 0x187c], eax
cmp dword [ebp - 0x187c], 0xffffffff
je 0x47eb30
mov dword [ebp - 0x1884], 1
jmp 0x47eb37
and dword [ebp - 0x1884], 0
cmp dword [ebp - 0x1884], 7
jb 0x47eb4c
mov dword [ebp - 0x1c90], 1
jmp 0x47eb53
and dword [ebp - 0x1c90], 0
push 1
lea ecx, [ebp - 0xad0]
call fcn.0040a9bb
cmp dword [ebp - 0x908], 0
jne 0x47eb70
cmp dword [ebp - 0x908], 0
push 1
lea ecx, [ebp - 0xad0]
call fcn.0040a9bb
cmp dword [eax], 0
jge 0x47eb8e
mov dword [ebp - 0x188c], 1
jmp 0x47eb95
and dword [ebp - 0x188c], 0
imul esi, dword [ebp - 0x188c], 0xffff
push 0
lea ecx, [ebp - 0xad0]
call fcn.0040a9bb
cmp esi, dword [eax]
jl 0x47ebbc
mov dword [ebp - 0x1894], 1
jmp 0x47ebc3
and dword [ebp - 0x1894], 0
mov eax, dword [ebp - 0x908]
imul eax, dword [ebp - 0x1894]
cmp eax, 0x5eb13e27
jge 0x47ebe3
mov dword [ebp - 0x189c], 1
jmp 0x47ebea
and dword [ebp - 0x189c], 0
mov eax, dword [ebp - 0x189c]
sub eax, dword [ebp - 0x908]
je 0x47ec12
cmp dword [ebp - 0x96c], 0
je 0x47ec12
xor eax, eax
inc eax
je 0x47ec12
mov dword [ebp - 0x11e0], 1
jmp 0x47ec19
and dword [ebp - 0x11e0], 0
mov eax, dword [ebp - 0x18c4]
sub eax, dword [ebp - 0x11e0]
cmp eax, dword [ebp - 0x1c98]
jne 0x47ec39
mov dword [ebp - 0x1824], 1
jmp 0x47ec40
and dword [ebp - 0x1824], 0
push 0
lea ecx, [ebp - 0xad0]
call fcn.0040a9bb
mov ecx, dword [ebp - 0x1824]
cmp ecx, dword [eax]
jge 0x47ec63
mov dword [ebp - 0xb08], 1
jmp 0x47ec6a
and dword [ebp - 0xb08], 0
mov eax, dword [ebp - 0xb08]
mov dword [ebp - 0x1ca0], eax
lea ecx, [ebp - 0xad0]
call fcn.0040a99f
mov dword [ebp - 0x7d8], 1
mov dword [ebp - 0x3b0], 0
jmp 0x47eca4
mov eax, dword [ebp - 0x3b0]
inc eax
mov dword [ebp - 0x3b0], eax
cmp dword [ebp - 0x3b0], 3
jge 0x47ecc0
mov eax, dword [ebp - 0x3b0]
mov dword [ebp + eax*4 - 0x3170], 7
jmp 0x47ec97
mov dword [ebp - 0xb34], 0x1848
mov dword [ebp - 0x1ca8], 0xa89fbc
cmp dword [ebp - 0xb34], 0x1c2c
jle 0x47ed84
and dword [ebp - 0x678], 0
jmp 0x47ecfa
mov eax, dword [ebp - 0x678]
inc eax
mov dword [ebp - 0x678], eax
cmp dword [ebp - 0x678], 0x4493
jge 0x47ed7a
and dword [ebp - 0x3b8], 0
jmp 0x47ed1c
mov eax, dword [ebp - 0x3b8]
inc eax
mov dword [ebp - 0x3b8], eax
cmp dword [ebp - 0x3b8], 0x3143
jge 0x47ed75
mov eax, dword [ebp - 0x678]
xor eax, dword [ebp - 0x3b8]
cdq
mov dword [ebp - 0x1cd0], eax
mov dword [ebp - 0x1ccc], edx
push dword [ebp - 0x1ccc]
push dword [ebp - 0x1cd0]
lea ecx, [ebp - 0x2fe4]
call fcn.004019f8
pop ecx
pop ecx
mov ecx, eax
call fcn.0040a69a
push eax
call fcn.004a3677
pop ecx
lea ecx, [ebp - 0x2fe4]
call fcn.0040a690
jmp 0x47ed0f
jmp 0x47eced
push 0
push 0
call dword [0xaa00ac]
mov dword [ebp - 0x7d8], 0
jmp 0x47ed9d
mov eax, dword [ebp - 0x7d8]
inc eax
mov dword [ebp - 0x7d8], eax
cmp dword [ebp - 0x7d8], 2
jg 0x47edd1
mov byte [ebp - 0x1bd], 0
push 1
lea eax, [ebp - 0x1bd]
push eax
push 0x735e
push 0x828
push 0x305b
push 0
call fcn.0046eb81
add esp, 0x18
jmp 0x47ed90
mov dword [ebp - 4], 2
cmp dword [ebp - 0xb34], 0x1716
jge 0x47edf0
push dword [ebp - 0x1ca8]
call fcn.004a3677
pop ecx
jmp 0x47ee0c
or dword [ebp - 4], 0xffffffff
jmp 0x47ee16
mov byte [ebp - 0x17c], 0
push 0
push 0x680
push 0x2909
lea eax, [ebp - 0x17c]
push eax
push 0
push 0x35e2
push 0x5cdc
call fcn.0046d686
add esp, 0x1c
push 2
lea ecx, [ebp - 0x2184]
call fcn.0040a8cd
mov dword [ebp - 0x350], 0x38be
mov dword [ebp - 0xb1c], 0xe3e45bbb
mov dword [ebp - 0xb18], 0
mov dword [ebp - 0x1cb8], 0xae7b1b0c
mov dword [ebp - 0x44], 0
jmp 0x47ee89
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 2
jge 0x47ee9f
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0xae4], 0
jmp 0x47ee82
mov dword [ebp - 0x44], 0
jmp 0x47eeaf
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 2
jge 0x47eec5
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x2740], 0x5bc42206
jmp 0x47eea8
mov dword [ebp - 0x44], 0
jmp 0x47eed5
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 4
jge 0x47eeeb
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x2e18], 0xa2ef703c
jmp 0x47eece
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xae4]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xae4], eax
xor eax, eax
sub eax, dword [ebp - 0x350]
je 0x47f011
cmp dword [ebp - 0x350], 0x952f3411
jae 0x47ef2c
mov dword [ebp - 0x1cb0], 1
jmp 0x47ef33
and dword [ebp - 0x1cb0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xae4]
mov dword [ebp - 0x2964], eax
mov eax, dword [ebp - 0x350]
mov dword [ebp - 0x2b34], eax
mov dword [ebp - 0xb1c], 0xfffffff7
mov eax, dword [ebp - 0xb1c]
cmp dword [ebp - 0x350], eax
jge 0x47ef83
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xae4], 0
jne 0x47ef83
and dword [ebp - 0x3c0], 0
jmp 0x47ef8d
mov dword [ebp - 0x3c0], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3c0]
mov dword [ebp + eax - 0x2740], ecx
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x3c0]
mov dword [ebp + eax - 0x2e18], ecx
mov eax, dword [ebp - 0x3c0]
mov dword [ebp - 0xb18], eax
mov eax, dword [ebp - 0xb18]
sub eax, dword [ebp - 0x350]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0xae4]
je 0x47efe6
mov dword [ebp - 0x1548], 1
jmp 0x47efed
and dword [ebp - 0x1548], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xae4]
imul eax, dword [ebp - 0x1548]
test eax, eax
je 0x47f011
mov dword [ebp - 0xb20], 1
jmp 0x47f018
and dword [ebp - 0xb20], 0
mov eax, dword [ebp - 0xb20]
mov dword [ebp - 0x1cb8], eax
mov byte [ebp - 0x1e5], 0
push 0
push 0x5fb4
push 0
lea eax, [ebp - 0x1e5]
push eax
push 0x6f7a
call fcn.0047bcf1
add esp, 0x14
mov dword [ebp - 0x11e8], 0x4ea2
mov dword [ebp - 0x20e4], 0xa8a010
cmp dword [ebp - 0x11e8], 0x524c
jle 0x47f148
and dword [ebp - 0x680], 0
jmp 0x47f082
mov eax, dword [ebp - 0x680]
inc eax
mov dword [ebp - 0x680], eax
cmp dword [ebp - 0x680], 0x7782
jge 0x47f148
and dword [ebp - 0x3c8], 0
jmp 0x47f0a8
mov eax, dword [ebp - 0x3c8]
inc eax
mov dword [ebp - 0x3c8], eax
cmp dword [ebp - 0x3c8], 0x5f56
jge 0x47f143
and dword [ebp - 0x888], 0
jmp 0x47f0ce
mov eax, dword [ebp - 0x888]
inc eax
mov dword [ebp - 0x888], eax
cmp dword [ebp - 0x888], 0x655e
jge 0x47f13e
and dword [ebp - 0x3d0], 0
jmp 0x47f0f0
mov eax, dword [ebp - 0x3d0]
inc eax
mov dword [ebp - 0x3d0], eax
cmp dword [ebp - 0x3d0], 0x62a
jge 0x47f13c
mov eax, dword [ebp - 0x680]
xor eax, dword [ebp - 0x3c8]
mov ecx, dword [ebp - 0x888]
imul ecx, dword [ebp - 0x3d0]
xor eax, ecx
cdq
mov dword [ebp - 0x1cdc], eax
mov dword [ebp - 0x1cd8], edx
push dword [ebp - 0x1cd8]
push dword [ebp - 0x1cdc]
mov ecx, 0xa9cbd8
call fcn.0040a6a5
jmp 0x47f0e3
jmp 0x47f0c1
jmp 0x47f09b
jmp 0x47f075
mov dword [ebp - 0x296c], 0xd1bc
mov dword [ebp - 4], 4
cmp dword [ebp - 0x11e8], 0x4e7b
jge 0x47f175
mov edx, dword [ebp - 0x20e4]
mov ecx, 0xa9cbd8
call fcn.0040cf2b
jmp 0x47f191
or dword [ebp - 4], 0xffffffff
jmp 0x47f19b
mov dword [ebp - 0x248], 5
mov dword [ebp - 0xb40], 0xfffffff7
mov dword [ebp - 0x2d30], 0xfffffffa
push 3
lea ecx, [ebp - 0x245c]
call fcn.0040a8cd
mov dword [ebp - 0xa24], 0x8693
mov dword [ebp - 0xb30], 0
mov dword [ebp - 0x688], 0x36dc
mov dword [ebp - 0x20f4], 0xffffffff
mov dword [ebp - 0x10c], 0
jmp 0x47f207
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 3
jge 0x47f229
push dword [ebp - 0x10c]
lea ecx, [ebp - 0x245c]
call fcn.0040a9bb
mov dword [eax], 0xa29822cb
jmp 0x47f1fa
mov dword [ebp - 0x10c], 0
jmp 0x47f242
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 2
jge 0x47f25e
mov eax, dword [ebp - 0x10c]
mov dword [ebp + eax*4 - 0x191c], 0xffffffff
jmp 0x47f235
cmp dword [ebp - 0xb40], 0xffffffff
jle 0x47f273
mov dword [ebp - 0xb48], 1
jmp 0x47f27a
and dword [ebp - 0xb48], 0
mov eax, dword [ebp - 0xb30]
mov dword [ebp - 0x2974], eax
cmp dword [ebp - 0xa24], 0xffffffff
jb 0x47f29b
mov dword [ebp - 0xb28], 1
jmp 0x47f2a2
and dword [ebp - 0xb28], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x191c]
cmp dword [ebp - 0xb28], eax
jle 0x47f2c3
mov dword [ebp - 0x1840], 1
jmp 0x47f2ca
and dword [ebp - 0x1840], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x191c]
cmp dword [ebp - 0x1840], eax
je 0x47f2eb
mov dword [ebp - 0x11f0], 1
jmp 0x47f2f2
and dword [ebp - 0x11f0], 0
mov eax, dword [ebp - 0xb30]
cmp dword [ebp - 0x11f0], eax
jl 0x47f30c
mov dword [ebp - 0xb38], 1
jmp 0x47f313
and dword [ebp - 0xb38], 0
mov eax, dword [ebp - 0xb38]
sub eax, 0xd925
cmp dword [ebp - 0xa24], 0
jne 0x47f330
and dword [ebp - 0x1550], 0
jmp 0x47f33a
mov dword [ebp - 0x1550], 1
cmp dword [ebp - 0x1550], 0x16658069
jne 0x47f358
cmp dword [ebp - 0xb40], 0
jne 0x47f358
and dword [ebp - 0x11f8], 0
jmp 0x47f362
mov dword [ebp - 0x11f8], 1
mov eax, dword [ebp - 0x688]
mov dword [ebp - 0x2b3c], eax
mov eax, dword [ebp - 0x11f8]
sub eax, 0x8b2f
mov ecx, dword [ebp - 0xb48]
add ecx, eax
mov dword [ebp - 0x20ec], ecx
push 2
lea ecx, [ebp - 0x245c]
call fcn.0040a9bb
mov ecx, dword [ebp - 0x20ec]
mov dword [eax], ecx
mov eax, dword [ebp - 0xa24]
mov dword [ebp - 0x297c], eax
mov eax, dword [ebp - 0x688]
dec eax
mov dword [ebp - 0x688], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x191c], 0x85f
jg 0x47f3d4
mov dword [ebp - 0x1700], 1
jmp 0x47f3db
and dword [ebp - 0x1700], 0
imul eax, dword [ebp - 0x1700], 0x506e
test eax, eax
je 0x47f3fe
cmp dword [ebp - 0x688], 0
je 0x47f3fe
mov dword [ebp - 0xb50], 1
jmp 0x47f405
and dword [ebp - 0xb50], 0
mov eax, dword [ebp - 0xb50]
dec eax
cmp eax, dword [ebp - 0x20f4]
jl 0x47f438
push 0x308e
push 0
push 1
push 0x51c0
push 0x110c
lea eax, [ebp - 0x248]
push eax
call fcn.0046c844
add esp, 0x18
jmp 0x47f492
mov dword [ebp - 0x248], 0
jmp 0x47f451
mov eax, dword [ebp - 0x248]
inc eax
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 2
jge 0x47f46d
mov eax, dword [ebp - 0x248]
mov dword [ebp + eax*4 - 0x191c], 0x32ca
jmp 0x47f444
push 0x1764
push 0x1a0c
push 0x1c7a
push 0
push 1
push 0x6af
push 0x6900
call fcn.0047ac99
add esp, 0x1c
lea ecx, [ebp - 0x245c]
call fcn.0040a99f
mov dword [ebp - 0x2cd0], 0x25b054db
mov dword [ebp - 0x2984], 6
mov byte [ebp - 0x159], 0
push 0x6eff
lea eax, [ebp - 0x159]
push eax
push 0x1a05
push 1
push 0x73be
push 0x7c6a
push 0x6b98
push 0x4363
push 0
call fcn.00473c1c
add esp, 0x24
mov dword [ebp - 0x1200], 0x7f0a
mov dword [ebp - 0x20fc], 0xa8a060
cmp dword [ebp - 0x1200], 0x8132
jle 0x47f5b2
push 0
push 0
push 0
call dword [0xaa018c]
and dword [ebp - 0x3d8], 0
jmp 0x47f52f
mov eax, dword [ebp - 0x3d8]
inc eax
mov dword [ebp - 0x3d8], eax
cmp dword [ebp - 0x3d8], 0x1ae0
jge 0x47f5b2
and dword [ebp - 0x7e0], 0
jmp 0x47f551
mov eax, dword [ebp - 0x7e0]
inc eax
mov dword [ebp - 0x7e0], eax
cmp dword [ebp - 0x7e0], 0x21ee
jge 0x47f5ad
mov eax, dword [ebp - 0x3d8]
cdq
idiv dword [ebp - 0x7e0]
mov eax, edx
cdq
mov dword [ebp - 0x1ce8], eax
mov dword [ebp - 0x1ce4], edx
push dword [ebp - 0x1ce4]
push dword [ebp - 0x1ce8]
lea ecx, [ebp - 0x31a0]
call fcn.004019f8
pop ecx
pop ecx
mov ecx, eax
call fcn.0040a69a
push eax
call fcn.004a3677
pop ecx
lea ecx, [ebp - 0x31a0]
call fcn.0040a690
jmp 0x47f544
jmp 0x47f522
mov byte [ebp - 0x15b], 0
mov dword [ebp - 4], 6
cmp dword [ebp - 0x1200], 0x7c5b
jge 0x47f5d8
push dword [ebp - 0x20fc]
call fcn.004a3677
pop ecx
jmp 0x47f5f4
or dword [ebp - 4], 0xffffffff
jmp 0x47f5fe
movzx eax, byte [ebp - 0x15b]
test eax, eax
je 0x47f638
push 0x2a57
push 0x7637
push 0x4ac3
push 0
push 0x2130
push 0x11a6
push 0x7107
push 0x7746
push 0
call fcn.00473c1c
add esp, 0x24
mov dword [ebp - 0x2b44], 0xffffffff
mov dword [ebp - 0x120], 0xfffc
mov dword [ebp - 0x4c], 1
mov dword [ebp - 0x974], 0xf5452fa8
mov dword [ebp - 0x212c], 0
mov dword [ebp - 0x2124], 0x4a0f
mov dword [ebp - 0x3e0], 0
jmp 0x47f68a
mov eax, dword [ebp - 0x3e0]
inc eax
mov dword [ebp - 0x3e0], eax
cmp dword [ebp - 0x3e0], 4
jge 0x47f6a6
mov eax, dword [ebp - 0x3e0]
mov dword [ebp + eax*4 - 0x2264], 0xa624cdb
jmp 0x47f67d
mov eax, 0x72c5e71c
test eax, eax
je 0x47f757
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je 0x47f6fe
mov eax, dword [ebp - 0x4c]
sub eax, dword [ebp - 0x120]
imul eax, dword [ebp - 0x4c]
cmp eax, 1
je 0x47f6e0
mov dword [ebp - 0x2104], 1
jmp 0x47f6e7
and dword [ebp - 0x2104], 0
imul eax, dword [ebp - 0x4c], 0xca77
test eax, eax
je 0x47f6fe
mov dword [ebp - 0xb58], 1
jmp 0x47f705
and dword [ebp - 0xb58], 0
mov eax, dword [ebp - 0xb58]
mov dword [ebp - 0x974], eax
cmp dword [ebp - 0x974], 0
je 0x47f72f
cmp dword [ebp - 0x120], 0
je 0x47f72f
mov dword [ebp - 0x1558], 1
jmp 0x47f736
and dword [ebp - 0x1558], 0
mov eax, dword [ebp - 0x120]
imul eax, dword [ebp - 0x1558]
cmp eax, dword [ebp - 0x120]
jl 0x47f757
mov dword [ebp - 0xb60], 1
jmp 0x47f75e
and dword [ebp - 0xb60], 0
cmp dword [ebp - 0xb60], 0xb3799040
jb 0x47f776
mov dword [ebp - 0x1208], 1
jmp 0x47f77d
and dword [ebp - 0x1208], 0
cmp dword [ebp - 0x1208], 1
jle 0x47f78a
cmp dword [ebp - 0x4c], 0
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x210c], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x210c]
mov dword [ebp + eax - 0x2264], ecx
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x298c], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x2264], 0
je 0x47f7df
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x2264], 0
je 0x47f7df
mov dword [ebp - 0xb68], 1
jmp 0x47f7e6
and dword [ebp - 0xb68], 0
mov eax, dword [ebp - 0x120]
imul eax, dword [ebp - 0xb68]
test eax, eax
je 0x47f8b6
mov dword [ebp - 0x1210], 0
mov dword [ebp - 0x2114], 1
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x2264], 0
jne 0x47f838
cmp dword [ebp - 0x1210], 0
jle 0x47f82f
push 0xfffffffffffffff7
pop eax
test eax, eax
je 0x47f838
and dword [ebp - 0x17d8], 0
jmp 0x47f842
mov dword [ebp - 0x17d8], 1
cmp dword [ebp - 0x17d8], 0x8160
jg 0x47f85a
mov dword [ebp - 0xb70], 1
jmp 0x47f861
and dword [ebp - 0xb70], 0
mov eax, dword [ebp - 0x4c]
imul eax, dword [ebp - 0xb70]
cmp eax, dword [ebp - 0x1210]
jg 0x47f87f
mov dword [ebp - 0xb78], 1
jmp 0x47f886
and dword [ebp - 0xb78], 0
cmp dword [ebp - 0xb78], 0x9690b281
jae 0x47f89e
mov dword [ebp - 0x1560], 1
jmp 0x47f8a5
and dword [ebp - 0x1560], 0
mov eax, dword [ebp - 0x1560]
mov dword [ebp - 0x2114], eax
jmp 0x47fa1b
mov dword [ebp - 0x211c], 2
mov dword [ebp - 0x2134], 0xffffffff
mov dword [ebp - 0x2d70], 0xffffffff
mov dword [ebp - 0x2994], 0
mov dword [ebp - 0x2b54], 0x520a048c
mov dword [ebp - 0x299c], 0xffffffff
mov dword [ebp - 0x2cd8], 6
mov dword [ebp - 0x29a4], 1
mov dword [ebp - 0x690], 0
jmp 0x47f91f
mov eax, dword [ebp - 0x690]
inc eax
mov dword [ebp - 0x690], eax
cmp dword [ebp - 0x690], 2
jge 0x47f93b
mov eax, dword [ebp - 0x690]
mov dword [ebp + eax*4 - 0x2e08], 0x4122e7df
jmp 0x47f912
cmp dword [ebp - 0x211c], 0
je 0x47f9f5
mov dword [ebp - 0x2b64], 0x2097
push 2
lea ecx, [ebp - 0x2b50]
call fcn.0040a8cd
mov dword [ebp - 0x3e8], 0
jmp 0x47f978
mov eax, dword [ebp - 0x3e8]
inc eax
mov dword [ebp - 0x3e8], eax
cmp dword [ebp - 0x3e8], 2
jge 0x47f99a
push dword [ebp - 0x3e8]
lea ecx, [ebp - 0x2b50]
call fcn.0040a9bb
mov dword [eax], 0x1d4c3f1
jmp 0x47f96b
push 1
push 0x6238
push 0x55a0
push 0
push 0xc0e
lea eax, [ebp - 0x2124]
push eax
call fcn.0046ed91
add esp, 0x18
mov dword [ebp - 0x4c], 0
jmp 0x47f9cc
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 3
jg 0x47f9e8
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x4c]
mov eax, dword [ebp + eax*4 - 0x2264]
mov dword [ebp + ecx*4 - 0x2264], eax
jmp 0x47f9c5
lea ecx, [ebp - 0x2b50]
call fcn.0040a99f
jmp 0x47fa1b
push 1
push 0x43b0
lea eax, [ebp - 0x974]
push eax
lea eax, [ebp - 0x212c]
push eax
lea eax, [ebp - 0x2134]
push eax
push 1
call fcn.0046eb81
add esp, 0x18
mov dword [ebp - 0xfc], 0x42c70bb7
mov dword [ebp - 0x29ac], 0xe00f
mov dword [ebp - 0x2d38], 0xfffffff7
push 1
lea ecx, [ebp - 0x2b60]
call fcn.0040a8cd
mov dword [ebp - 0xbc], 0
jmp 0x47fa5f
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 3
jge 0x47fa7b
mov eax, dword [ebp - 0xbc]
mov dword [ebp + eax*4 - 0x2dd0], 0xfffffff8
jmp 0x47fa52
mov dword [ebp - 0xbc], 0
jmp 0x47fa94
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 1
jge 0x47fab6
push dword [ebp - 0xbc]
lea ecx, [ebp - 0x2b60]
call fcn.0040a9bb
mov dword [eax], 0xa1fa147b
jmp 0x47fa87
mov dword [ebp - 0xfc], 0
jmp 0x47facf
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 2
jg 0x47fb84
mov dword [ebp - 0x23ec], 1
mov dword [ebp - 0x23e8], 1
mov dword [ebp - 0x23e4], 1
mov dword [ebp - 0x23e0], 1
lea ecx, [ebp - 0xabd]
call fcn.0040a9ca
push eax
lea eax, [ebp - 0x23dc]
push eax
lea eax, [ebp - 0x23ec]
push eax
lea ecx, [ebp - 0x2e98]
call fcn.0040a9cd
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x2db8]
call fcn.0040a979
mov dword [ebp - 0x29b4], 1
mov dword [ebp - 0x213c], 0xfffffffb
push 0x5d23
push 0x64d6
push 0xedf
lea eax, [ebp - 0x213c]
push eax
push 0
push 0x7420
push 1
call fcn.00476efe
add esp, 0x1c
lea ecx, [ebp - 0x2db8]
call fcn.0040a99f
jmp 0x47fac2
mov dword [ebp - 0xfc], 0
jmp 0x47fb9d
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 3
jge 0x47fbb9
mov eax, dword [ebp - 0xfc]
mov dword [ebp + eax*4 - 0x2dd0], 0xe6e2bfbd
jmp 0x47fb90
lea ecx, [ebp - 0x2b60]
call fcn.0040a99f
mov dword [ebp - 0xc4], 0
jmp 0x47fbdd
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 2
jge 0x47fbff
push dword [ebp - 0xc4]
lea ecx, [ebp - 0x2184]
call fcn.0040a9bb
mov dword [eax], 0xf0ea75c9
jmp 0x47fbd0
mov dword [ebp - 0x2144], 0
push 0
lea eax, [ebp - 0x2144]
push eax
push 0xac6
push 1
call fcn.00477fc3
add esp, 0x10
mov dword [ebp - 0xc4], 0
jmp 0x47fc3a
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 3
jge 0x47fc56
mov eax, dword [ebp - 0xc4]
mov dword [ebp + eax*4 - 0x2fb4], 0xef7d6512
jmp 0x47fc2d
push 1
lea ecx, [ebp - 0x2b70]
call fcn.0040a8cd
mov dword [ebp - 0x2b74], 0xbf34fda
mov dword [ebp - 0x29bc], 0x1fe77dd6
mov dword [ebp - 0x21ec], 0xe948
push 0
lea eax, [ebp - 0x2b70]
push eax
push 0x34c1
lea eax, [ebp - 0x2ce0]
push eax
push 1
push 0x4b8a
call fcn.0046cae3
add esp, 0x18
mov dword [ebp - 0x1218], 0x4476
mov dword [ebp - 0x2154], 0xa8a0c8
cmp dword [ebp - 0x1218], 0x46e3
jle 0x47fd3c
and dword [ebp - 0x8e0], 0
jmp 0x47fcdb
mov eax, dword [ebp - 0x8e0]
inc eax
mov dword [ebp - 0x8e0], eax
cmp dword [ebp - 0x8e0], 0x5f58
jge 0x47fd3c
and dword [ebp - 0x3f0], 0
jmp 0x47fcfd
mov eax, dword [ebp - 0x3f0]
inc eax
mov dword [ebp - 0x3f0], eax
cmp dword [ebp - 0x3f0], 0x6296
jge 0x47fd3a
mov eax, dword [ebp - 0x8e0]
xor eax, dword [ebp - 0x3f0]
cdq
mov dword [ebp - 0x1cf4], eax
mov dword [ebp - 0x1cf0], edx
push dword [ebp - 0x1cf0]
push dword [ebp - 0x1cf4]
mov ecx, 0xa9cbd8
call fcn.0040a6a5
jmp 0x47fcf0
jmp 0x47fcce
mov byte [ebp - 0x15d], 0
mov dword [ebp - 0xb80], 0x4d1f
mov dword [ebp - 0x214c], 0xa8a118
cmp dword [ebp - 0xb80], 0x4d33
jle 0x47fe0d
and dword [ebp - 0x698], 0
jmp 0x47fd7d
mov eax, dword [ebp - 0x698]
inc eax
mov dword [ebp - 0x698], eax
cmp dword [ebp - 0x698], 0x26bc
jge 0x47fdfd
and dword [ebp - 0x3f8], 0
jmp 0x47fd9f
mov eax, dword [ebp - 0x3f8]
inc eax
mov dword [ebp - 0x3f8], eax
cmp dword [ebp - 0x3f8], 0x2e75
jge 0x47fdf8
mov eax, dword [ebp - 0x698]
sub eax, dword [ebp - 0x3f8]
cdq
mov dword [ebp - 0x1d00], eax
mov dword [ebp - 0x1cfc], edx
push dword [ebp - 0x1cfc]
push dword [ebp - 0x1d00]
lea ecx, [ebp - 0x3014]
call fcn.004019f8
pop ecx
pop ecx
mov ecx, eax
call fcn.0040a69a
push eax
call fcn.004a3677
pop ecx
lea ecx, [ebp - 0x3014]
call fcn.0040a690
jmp 0x47fd92
jmp 0x47fd70
push 0x1fa7
push 0x1e43
call dword [0xaa0094]
push 0x170b
lea eax, [ebp - 0x15d]
push eax
push 1
push 0x4486
push 0
push 0x624a
push 1
call fcn.0047508d
add esp, 0x1c
mov dword [ebp - 4], 8
cmp dword [ebp - 0xb80], 0x4b69
jge 0x47fe50
push dword [ebp - 0x214c]
call fcn.004a3677
pop ecx
jmp 0x47fe6c
or dword [ebp - 4], 0xffffffff
jmp 0x47fe76
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x1218], 0x42c3
jge 0x47fe99
mov edx, dword [ebp - 0x2154]
mov ecx, 0xa9cbd8
call fcn.0040cf2b
jmp 0x47feb5
or dword [ebp - 4], 0xffffffff
jmp 0x47febf
push 0x13e6
push 0
push 1
push 0x31dc
lea eax, [ebp - 0x21ec]
push eax
push 0x7b99
push 0x3b61
push 0x138a
push 0x7e10
call fcn.0046d189
add esp, 0x24
lea ecx, [ebp - 0x2b70]
call fcn.0040a99f
push 0
lea ecx, [ebp - 0x2184]
call fcn.0040a9bb
and dword [eax], 0
jmp 0x47ff31
push 0
lea ecx, [ebp - 0x2184]
call fcn.0040a9bb
mov dword [ebp - 0xb88], eax
mov eax, dword [ebp - 0xb88]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xb88]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x2184]
call fcn.0040a9bb
cmp dword [eax], 4
jge 0x482afe
mov dword [ebp - 0x418], 0x56a9ef72
mov dword [ebp - 0xab4], 0x891c5534
mov dword [ebp - 0x184], 1
mov dword [ebp - 0xb98], 0x132d38ca
mov dword [ebp - 0x7e8], 0
jmp 0x47ff88
mov eax, dword [ebp - 0x7e8]
inc eax
mov dword [ebp - 0x7e8], eax
cmp dword [ebp - 0x7e8], 1
jge 0x47ffa4
mov eax, dword [ebp - 0x7e8]
mov dword [ebp + eax*4 - 0x890], 0x844a7543
jmp 0x47ff7b
mov eax, dword [ebp - 0xab4]
mov dword [ebp - 0x1708], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1708]
mov dword [ebp + eax - 0x890], ecx
mov eax, 0x1f90ef30
sub eax, dword [ebp - 0x1708]
add eax, dword [ebp - 0xab4]
mov ecx, dword [ebp - 0xab4]
imul ecx, eax
dec ecx
mov dword [ebp - 0x184], ecx
js 0x480028
mov dword [ebp - 0x97c], 0
mov dword [ebp - 0x21f4], 3
mov dword [ebp - 0x97c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x97c]
mov dword [ebp + eax - 0x890], ecx
mov eax, dword [ebp - 0x97c]
mov dword [ebp - 0x21f4], eax
jmp 0x48021c
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x890], 0
je 0x4801ff
mov dword [ebp - 0xb90], 0x70
mov dword [ebp - 0x21fc], 0xa8a178
cmp dword [ebp - 0xb90], 0x358
jle 0x480117
and dword [ebp - 0x408], 0
jmp 0x480076
mov eax, dword [ebp - 0x408]
inc eax
mov dword [ebp - 0x408], eax
cmp dword [ebp - 0x408], 0x3784
jge 0x48010b
and dword [ebp - 0x400], 0
jmp 0x48009c
mov eax, dword [ebp - 0x400]
inc eax
mov dword [ebp - 0x400], eax
cmp dword [ebp - 0x400], 0x4041
jge 0x480106
and dword [ebp - 0x6a0], 0
jmp 0x4800be
mov eax, dword [ebp - 0x6a0]
inc eax
mov dword [ebp - 0x6a0], eax
cmp dword [ebp - 0x6a0], 0x7891
jge 0x480104
mov eax, dword [ebp - 0x400]
cdq
idiv dword [ebp - 0x6a0]
add edx, dword [ebp - 0x408]
mov eax, edx
cdq
mov dword [ebp - 0x1d0c], eax
mov dword [ebp - 0x1d08], edx
push dword [ebp - 0x1d08]
push dword [ebp - 0x1d0c]
mov ecx, 0xa9cbd8
call fcn.0040a6a5
jmp 0x4800b1
jmp 0x48008f
jmp 0x480069
push 1
push 0
push 0
call dword [0xaa04a8]
mov dword [ebp - 0x2204], 0xfffffffb
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0xb90], 0xfffffd6c
jge 0x480144
mov edx, dword [ebp - 0x21fc]
mov ecx, 0xa9cbd8
call fcn.0040cf2b
jmp 0x480160
or dword [ebp - 4], 0xffffffff
jmp 0x48016a
mov dword [ebp - 0x184], 0
jmp 0x480183
mov eax, dword [ebp - 0x184]
dec eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 0
jl 0x4801fd
mov dword [ebp - 0x220c], 0x74fa72d5
mov eax, dword [ebp - 0x184]
mov dword [ebp + eax*4 - 0x890], 1
cmp dword [ebp - 0x2204], 1
jge 0x4801bc
mov dword [ebp - 0x1220], 1
jmp 0x4801c3
and dword [ebp - 0x1220], 0
mov eax, dword [ebp - 0x1220]
mov dword [ebp - 0xb98], eax
cmp dword [ebp - 0xb98], 0
jne 0x4801e4
mov dword [ebp - 0x1568], 1
jmp 0x4801eb
and dword [ebp - 0x1568], 0
mov eax, dword [ebp - 0x1568]
inc eax
mov dword [ebp - 0x220c], eax
jmp 0x480176
jmp 0x48021c
mov byte [ebp - 0x15a], 0
movzx eax, byte [ebp - 0x15a]
test eax, eax
je 0x48021c
push 0xa01
call dword [fcn.00aa0064]
mov dword [ebp - 0x29c4], 1
mov dword [ebp - 0x114], 0
push 1
lea ecx, [ebp - 0x25e8]
call fcn.0040a8cd
mov dword [ebp - 0x1c70], 0
mov dword [ebp - 0x1a50], 8
mov dword [ebp - 0x2b84], 0x6240c41a
mov dword [ebp - 0x29cc], 0xef27779e
push 1
lea ecx, [ebp - 0x2b90]
call fcn.0040a8cd
mov dword [ebp - 0x284], 0
jmp 0x48028b
mov eax, dword [ebp - 0x284]
inc eax
mov dword [ebp - 0x284], eax
cmp dword [ebp - 0x284], 3
jge 0x4802a7
mov eax, dword [ebp - 0x284]
mov dword [ebp + eax*4 - 0x2b80], 0xfffffff8
jmp 0x48027e
push 1
lea eax, [ebp - 0x25e8]
push eax
lea eax, [ebp - 0x284]
push eax
push 1
push 0x1d31
push 0xa00
call fcn.0046ed91
add esp, 0x18
push 1
lea eax, [ebp - 0x284]
push eax
push 0x169e
push 1
lea eax, [ebp - 0x2b90]
push eax
push 0
push 0x1439
push 0x635d
call fcn.00479597
add esp, 0x20
mov dword [ebp - 0x114], 0
jmp 0x48030f
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 2
jg 0x480374
mov dword [ebp - 0x410], 0xffffffff
mov dword [ebp - 0x410], 2
jmp 0x48033b
mov eax, dword [ebp - 0x410]
dec eax
mov dword [ebp - 0x410], eax
cmp dword [ebp - 0x410], 0
jl 0x480372
push 0x69fc
push 1
push 0x1a30
push 1
push 0x2a5b
push 0x4ca0
push 0x4a82
push 0x618d
push 0
call fcn.00472fe9
add esp, 0x24
jmp 0x48032e
jmp 0x480302
mov dword [ebp - 0x114], 0
jmp 0x48038d
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0xe
jne 0x4806ca
mov dword [ebp - 0x8c], 0x1e6e2bf
mov dword [ebp - 0x1230], 3
mov dword [ebp - 0x1228], 0x9532955f
mov dword [ebp - 0x1570], 0x94bf7d6
mov dword [ebp - 0x1238], 0xbe86
mov dword [ebp - 0x1240], 0x5cceb8a0
mov dword [ebp - 0x2d88], 1
mov dword [ebp - 0x29d4], 0x7beba6e3
mov dword [ebp - 0x2b94], 1
mov dword [ebp - 0x29dc], 0x2c22b60d
mov dword [ebp - 0x2ce8], 0x11abd849
mov dword [ebp - 0x29e4], 0
mov dword [ebp - 0x2ba4], 0xbd639b6a
mov dword [ebp - 0x29ec], 0x55d89f82
mov dword [ebp - 0x2d40], 1
mov dword [ebp - 0x29f4], 0xf201f9d9
mov dword [ebp - 0x2bb4], 1
mov dword [ebp - 0x29fc], 0
mov dword [ebp - 0x1990], 0x2ed5aec2
mov dword [ebp - 0x6a8], 0
jmp 0x480471
mov eax, dword [ebp - 0x6a8]
inc eax
mov dword [ebp - 0x6a8], eax
cmp dword [ebp - 0x6a8], 3
jge 0x48048d
mov eax, dword [ebp - 0x6a8]
mov dword [ebp + eax*4 - 0x314c], 0x2f548f9f
jmp 0x480464
mov eax, dword [ebp - 0x8c]
imul eax, dword [ebp - 0x8c]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x2b80]
jne 0x4804b4
mov dword [ebp - 0xba0], 1
jmp 0x4804bb
and dword [ebp - 0xba0], 0
mov eax, dword [ebp - 0xba0]
mov dword [ebp - 0x1228], eax
mov eax, dword [ebp - 0x1228]
mov dword [ebp - 0x2cf0], eax
xor eax, eax
cmp eax, 0xffff
ja 0x4804e8
mov dword [ebp - 0xa2c], 1
jmp 0x4804ef
and dword [ebp - 0xa2c], 0
push 0
lea ecx, [ebp - 0x25e8]
call fcn.0040a9bb
mov ecx, dword [ebp - 0xa2c]
mov dword [eax], ecx
cmp dword [ebp - 0xa2c], 0x10b4
jg 0x48051c
mov dword [ebp - 0xba8], 1
jmp 0x480523
and dword [ebp - 0xba8], 0
mov eax, dword [ebp - 0x8c]
cmp dword [ebp - 0xba8], eax
jle 0x48053d
mov dword [ebp - 0x1880], 1
jmp 0x480544
and dword [ebp - 0x1880], 0
cmp dword [ebp - 0x1880], 1
jbe 0x480559
mov dword [ebp - 0xbb0], 1
jmp 0x480560
and dword [ebp - 0xbb0], 0
mov eax, dword [ebp - 0x8c]
cmp eax, dword [ebp - 0xbb0]
je 0x48057a
mov dword [ebp - 0x2214], 1
jmp 0x480581
and dword [ebp - 0x2214], 0
mov dword [ebp - 0x1230], 0x2280643b
mov eax, dword [ebp - 0x1230]
mov dword [ebp - 0x2a04], eax
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x2bc4], eax
cmp dword [ebp - 0x1c70], 0x7d93
jg 0x4805bb
mov dword [ebp - 0xbb8], 1
jmp 0x4805c2
and dword [ebp - 0xbb8], 0
mov eax, dword [ebp - 0xbb8]
neg eax
mov dword [ebp - 0x1570], eax
mov eax, dword [ebp - 0x1238]
cmp dword [ebp - 0x1570], eax
jle 0x4805ea
mov dword [ebp - 0xbc0], 1
jmp 0x4805f1
and dword [ebp - 0xbc0], 0
mov eax, dword [ebp - 0xbc0]
sub eax, dword [ebp - 0x1238]
add eax, dword [ebp - 0x8c]
imul eax, dword [ebp - 0x8c]
push 4
pop ecx
shl ecx, 0
add eax, dword [ebp + ecx - 0x2b80]
cmp dword [ebp - 0x8c], eax
jg 0x48062b
mov dword [ebp - 0xbc8], 1
jmp 0x480632
and dword [ebp - 0xbc8], 0
mov eax, dword [ebp - 0x8c]
add eax, dword [ebp - 0xbc8]
jmp 0x48064c
and dword [ebp - 0x1710], 0
mov eax, dword [ebp - 0x8c]
cmp dword [ebp - 0x1710], eax
jl 0x48066d
mov dword [ebp - 0xbd0], 1
jmp 0x480674
and dword [ebp - 0xbd0], 0
mov eax, dword [ebp - 0xbd0]
mov dword [ebp - 0x1240], eax
mov eax, dword [ebp - 0x8c]
cmp dword [ebp - 0x1240], eax
je 0x48069a
mov dword [ebp - 0xbd8], 1
jmp 0x4806a1
and dword [ebp - 0xbd8], 0
mov eax, dword [ebp - 0xbd8]
mov dword [ebp - 0x1a50], eax
push 0
push 0
push 0x6a2d
lea eax, [ebp - 0x1990]
push eax
call fcn.0046dc2a
add esp, 0x10
jmp 0x480380
lea ecx, [ebp - 0x2b90]
call fcn.0040a99f
lea ecx, [ebp - 0x25e8]
call fcn.0040a99f
mov dword [ebp - 0x2a0c], 0xc544087
mov dword [ebp - 0x2d78], 0x761be360
mov dword [ebp - 0x418], 0x16
jmp 0x48070d
cmp dword [ebp - 0x418], 0xfffffffc
jge 0x482af9
mov dword [ebp - 0x210], 0x91a049fe
mov dword [ebp - 0x2a14], 0xb398ef54
mov dword [ebp - 0x2bd4], 0x6f32215f
mov dword [ebp - 0x20f8], 0xd5376e30
mov dword [ebp - 0x243c], 0xfffffff6
mov dword [ebp - 0x2438], 0xfffffff6
mov dword [ebp - 0x2434], 0xfffffff6
mov dword [ebp - 0x2430], 0xfffffff6
lea ecx, [ebp - 0xaad]
call fcn.0040a9ca
push eax
lea eax, [ebp - 0x242c]
push eax
lea eax, [ebp - 0x243c]
push eax
lea ecx, [ebp - 0x2e58]
call fcn.0040a9cd
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x25b8]
call fcn.0040a979
mov dword [ebp - 0x1578], 0x1413
mov dword [ebp - 0x1974], 0xa8a1c0
cmp dword [ebp - 0x1578], 0x1434
jle 0x4808c4
and dword [ebp - 0x6b0], 0
jmp 0x4807d9
mov eax, dword [ebp - 0x6b0]
inc eax
mov dword [ebp - 0x6b0], eax
cmp dword [ebp - 0x6b0], 0x6783
jge 0x4808c4
and dword [ebp - 0x7f0], 0
jmp 0x4807ff
mov eax, dword [ebp - 0x7f0]
inc eax
mov dword [ebp - 0x7f0], eax
cmp dword [ebp - 0x7f0], 0x72c
jge 0x4808bf
and dword [ebp - 0x420], 0
jmp 0x480825
mov eax, dword [ebp - 0x420]
inc eax
mov dword [ebp - 0x420], eax
cmp dword [ebp - 0x420], 0x1d35
jge 0x4808ba
and dword [ebp - 0x428], 0
jmp 0x48084b
mov eax, dword [ebp - 0x428]
inc eax
mov dword [ebp - 0x428], eax
cmp dword [ebp - 0x428], 0xbff
jge 0x4808b5
mov eax, dword [ebp - 0x7f0]
cdq
idiv dword [ebp - 0x420]
mov eax, dword [ebp - 0x6b0]
mov ecx, edx
sar eax, cl
and eax, dword [ebp - 0x428]
cdq
mov dword [ebp - 0x1d18], eax
mov dword [ebp - 0x1d14], edx
push dword [ebp - 0x1d14]
push dword [ebp - 0x1d18]
lea ecx, [ebp - 0x3308]
call fcn.004019f8
pop ecx
pop ecx
mov ecx, eax
call fcn.0040a69a
push eax
call fcn.004a3677
pop ecx
lea ecx, [ebp - 0x3308]
call fcn.0040a690
jmp 0x48083e
jmp 0x480818
jmp 0x4807f2
jmp 0x4807cc
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0x1578], 0x134f
jge 0x4808e3
push dword [ebp - 0x1974]
call fcn.004a3677
pop ecx
jmp 0x4808ff
or dword [ebp - 4], 0xffffffff
jmp 0x480909
mov dword [ebp - 0x210], 0
jmp 0x480922
cmp dword [ebp - 0x210], 0xfffffffa
je 0x480e4f
mov dword [ebp - 0x438], 0x70cd5099
mov dword [ebp - 0x440], 0xffffffff
mov dword [ebp - 0x268], 0x97515801
mov dword [ebp - 0x2a1c], 0xffffffff
mov dword [ebp - 0x2cf8], 0xfffffffb
mov dword [ebp - 0x2a24], 9
mov dword [ebp - 0xbf8], 0xffff
mov dword [ebp - 0xec], 0
jmp 0x48098e
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 3
jge 0x4809aa
mov eax, dword [ebp - 0xec]
mov dword [ebp + eax*4 - 0x2534], 0xfff8
jmp 0x480981
mov dword [ebp - 0xec], 0
jmp 0x4809c3
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 1
jge 0x4809df
mov eax, dword [ebp - 0xec]
mov dword [ebp + eax*4 - 0x1984], 0x857617c0
jmp 0x4809b6
mov dword [ebp - 0x440], 0x365653d4
mov eax, dword [ebp - 0x210]
add eax, dword [ebp - 0x440]
mov ecx, dword [ebp - 0x438]
add ecx, eax
je 0x480a24
cmp dword [ebp - 0x438], 0
je 0x480a1d
mov eax, 0xfffb
test eax, eax
je 0x480a1d
mov dword [ebp - 0xbe0], 1
jmp 0x480a24
and dword [ebp - 0xbe0], 0
mov eax, dword [ebp - 0x438]
mov dword [ebp - 0x2be4], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2534], 0
je 0x480bd1
mov dword [ebp - 0x1248], 0x2836
mov dword [ebp - 0x1dac], 0xa8a220
cmp dword [ebp - 0x1248], 0x2a32
jle 0x480b31
and dword [ebp - 0x6b8], 0
jmp 0x480a7e
cmp dword [ebp - 0x6b8], 0x3056
jge 0x480b31
and dword [ebp - 0x920], 0
jmp 0x480aa4
cmp dword [ebp - 0x920], 0x7ed5
jge 0x480b2c
mov dword [ebp - 0x197c], 0xdf0ebf90
mov dword [ebp - 4], 0x10
cmp dword [ebp - 0x1248], 0x24a1
jge 0x480b5a
push dword [ebp - 0x1dac]
call fcn.004a3677
pop ecx
jmp 0x480b76
or dword [ebp - 4], 0xffffffff
jmp 0x480b80
mov byte [ebp - 0x1fe], 0
lea eax, [ebp - 0x1fe]
push eax
push 0
push 1
push 1
call fcn.004766a2
add esp, 0x10
lea eax, [ebp - 0x268]
push eax
lea eax, [ebp - 0x197c]
push eax
push 0x78ea
push 0x4a96
push 1
push 0x393e
lea eax, [ebp - 0x438]
push eax
push 1
call fcn.0046ef3d
add esp, 0x20
jmp 0x480e4a
mov dword [ebp - 0x294], 0xffff
mov dword [ebp - 0xbf0], 0x243b9c30
mov dword [ebp - 0x1580], 0x8d8131dd
mov dword [ebp - 0x7f8], 0
jmp 0x480c08
mov eax, dword [ebp - 0x7f8]
inc eax
mov dword [ebp - 0x7f8], eax
cmp dword [ebp - 0x7f8], 3
jge 0x480c24
mov eax, dword [ebp - 0x7f8]
mov dword [ebp + eax*4 - 0x2ba0], 0xffffffff
jmp 0x480bfb
mov dword [ebp - 0x268], 0
jmp 0x480c3d
cmp dword [ebp - 0x268], 0xffffffea
jge 0x480cf4
mov dword [ebp - 0x1d60], 1
mov dword [ebp - 0x1250], 0xeb61943e
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x294]
cmp dword [ebp + eax - 0x2534], ecx
jne 0x480c7f
cmp dword [ebp - 0x294], 0
je 0x480e0d
lea ecx, [ebp - 0x25b8]
call fcn.0040a99f
mov dword [ebp - 0x1588], 0x714f
mov dword [ebp - 0x198c], 0xa8a280
cmp dword [ebp - 0x1588], 0x7475
jle 0x480f7c
and dword [ebp - 0x6c0], 0
jmp 0x480e94
mov eax, dword [ebp - 0x6c0]
inc eax
mov dword [ebp - 0x6c0], eax
cmp dword [ebp - 0x6c0], 0x3f88
jge 0x480f7c
and dword [ebp - 0x448], 0
jmp 0x480eba
mov eax, dword [ebp - 0x448]
inc eax
mov dword [ebp - 0x448], eax
cmp dword [ebp - 0x448], 0x338b
jge 0x480f77
and dword [ebp - 0x898], 0
jmp 0x480ee0
mov eax, dword [ebp - 0x898]
inc eax
mov dword [ebp - 0x898], eax
cmp dword [ebp - 0x898], 0x4a68
jge 0x480f72
and dword [ebp - 0x450], 0
jmp 0x480f06
mov eax, dword [ebp - 0x450]
inc eax
mov dword [ebp - 0x450], eax
cmp dword [ebp - 0x450], 0x7e91
jge 0x480f6d
mov eax, dword [ebp - 0x6c0]
add eax, dword [ebp - 0x448]
mov ecx, dword [ebp - 0x898]
add ecx, dword [ebp - 0x450]
and eax, ecx
cdq
mov dword [ebp - 0x1d30], eax
mov dword [ebp - 0x1d2c], edx
push dword [ebp - 0x1d2c]
push dword [ebp - 0x1d30]
lea ecx, [ebp - 0x2ee8]
call fcn.004019f8
pop ecx
pop ecx
mov ecx, eax
call fcn.0040a69a
push eax
call fcn.004a3677
pop ecx
lea ecx, [ebp - 0x2ee8]
call fcn.0040a690
jmp 0x480ef9
jmp 0x480ed3
jmp 0x480ead
jmp 0x480e87
mov dword [ebp - 0x6e0], 0x9d94b4b1
mov dword [ebp - 4], 0x12
cmp dword [ebp - 0x1588], 0x6eac
jge 0x480fa5
push dword [ebp - 0x198c]
call fcn.004a3677
pop ecx
jmp 0x480fc1
or dword [ebp - 4], 0xffffffff
jmp 0x480fcb
mov dword [ebp - 0xc20], 0x7e9c
mov dword [ebp - 0x1d68], 0xa8a2c0
cmp dword [ebp - 0xc20], 0x80ea
jle 0x4810c8
and dword [ebp - 0x6c8], 0
jmp 0x481005
mov eax, dword [ebp - 0x6c8]
inc eax
mov dword [ebp - 0x6c8], eax
cmp dword [ebp - 0x6c8], 0x3992
jge 0x4810ba
and dword [ebp - 0x458], 0
jmp 0x48102b
cmp dword [ebp - 0x458], 0x6a1
jge 0x4810b5
and dword [ebp - 0x800], 0
jmp 0x48104d
cmp dword [ebp - 0x800], 0x2150
jge 0x4810b0
jmp 0x480ff8
push 0
push 0
push 0
push 0
call dword [0xaa0154]
mov dword [ebp - 4], 0x14
cmp dword [ebp - 0xc20], 0x7b8f
jge 0x4810e7
push dword [ebp - 0x1d68]
call fcn.004a3677
pop ecx
jmp 0x481103
or dword [ebp - 4], 0xffffffff
jmp 0x48110d
mov dword [ebp - 0x70], 1
mov dword [ebp - 0x984], 0x78f4f823
mov dword [ebp - 0xc40], 0
mov dword [ebp - 0x1270], 0xfffffffb
mov dword [ebp - 0x460], 0
mov dword [ebp - 0x6d0], 0xea3c
push 4
lea ecx, [ebp - 0x22f8]
call fcn.0040a8cd
mov dword [ebp - 0x34], 0
jmp 0x481163
cmp dword [ebp - 0x34], 3
jge 0x481179
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x2bb0], 0x56dfc9b9
jmp 0x48115c
mov dword [ebp - 0x34], 0
jmp 0x481189
jmp 0x47ff0d
lea ecx, [ebp - 0x2184]
call fcn.0040a99f
mov byte [ebp - 0x35], 0
mov dword [ebp - 0x94], 0xa8eac8b
mov dword [ebp - 0x270c], 1
push 1
push 1
push 0x7818
call fcn.0046f510
add esp, 0xc
mov dword [ebp - 0x94], 0
jmp 0x482b4b
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0x11
jne 0x482d64
mov dword [ebp - 0x1310], 0x63d18804
mov dword [ebp - 0x29c], 0xfe57f6cc
mov dword [ebp - 0xd4], 0
jmp 0x482b85
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 2
jge 0x482ba1
mov eax, dword [ebp - 0xd4]
mov dword [ebp + eax*4 - 0x238c], 0xffffffff
jmp 0x482b78
mov dword [ebp - 0xd4], 0
jmp 0x482bba
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 2
jge 0x482bd6
mov eax, dword [ebp - 0xd4]
mov dword [ebp + eax*4 - 0x2758], 0x9d940313
jmp 0x482bad
imul eax, dword [ebp - 0x94], 0xc556
add eax, dword [ebp - 0x94]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x238c]
jle 0x482c01
mov dword [ebp - 0x17f8], 1
jmp 0x482c08
and dword [ebp - 0x17f8], 0
mov eax, dword [ebp - 0x29c]
cmp eax, dword [ebp - 0x17f8]
jg 0x482c2b
mov eax, 0xf1e283d1
test eax, eax
je 0x482c2b
mov dword [ebp - 0xd70], 1
jmp 0x482c32
and dword [ebp - 0xd70], 0
mov eax, dword [ebp - 0xd70]
sub eax, dword [ebp - 0x94]
jne 0x482c4c
mov dword [ebp - 0xd78], 1
jmp 0x482c53
and dword [ebp - 0xd78], 0
mov dword [ebp - 0x1310], 0xe864896e
mov eax, dword [ebp - 0x1310]
cmp eax, dword [ebp - 0xd78]
jl 0x482c80
cmp dword [ebp - 0x94], 0
je 0x482c80
mov dword [ebp - 0x15e0], 1
jmp 0x482c87
and dword [ebp - 0x15e0], 0
mov eax, dword [ebp - 0x94]
cmp dword [ebp - 0x15e0], eax
jle 0x482ca1
mov dword [ebp - 0xa34], 1
jmp 0x482ca8
and dword [ebp - 0xa34], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xa34]
mov dword [ebp + eax - 0x238c], ecx
mov eax, dword [ebp - 0x94]
imul eax, dword [ebp - 0xa34]
cmp dword [ebp - 0x94], eax
jle 0x482cdc
mov dword [ebp - 0xd80], 1
jmp 0x482ce3
and dword [ebp - 0xd80], 0
mov eax, dword [ebp - 0x29c]
cmp dword [ebp - 0xd80], eax
jne 0x482cfd
mov dword [ebp - 0x1318], 1
jmp 0x482d04
and dword [ebp - 0x1318], 0
mov eax, dword [ebp - 0x1318]
sub eax, dword [ebp - 0x29c]
cmp eax, dword [ebp - 0x29c]
jge 0x482d24
mov dword [ebp - 0xd88], 1
jmp 0x482d2b
and dword [ebp - 0xd88], 0
mov eax, dword [ebp - 0x29c]
cmp dword [ebp - 0xd88], eax
jne 0x482d45
mov dword [ebp - 0x1748], 1
jmp 0x482d4c
and dword [ebp - 0x1748], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1748]
mov dword [ebp + eax - 0x2758], ecx
jmp 0x482b3e
lea eax, [ebp - 0x1624]
push eax
call dword [0xaa0150]
push eax
call dword [0xaa03b4]
mov dword [ebp - 0x162c], eax
mov dword [ebp - 0x19dc], 1
mov dword [ebp - 0x2714], 0xe8b72fd4
mov dword [ebp - 0x271c], 0
mov dword [ebp - 0x2724], 0xfffffffc
mov dword [ebp - 0x272c], 0x44d0289a
mov dword [ebp - 0x2734], 0
mov dword [ebp - 0x28d0], 0xbefa5f9c
mov dword [ebp - 0x4a0], 0
jmp 0x482ddd
mov eax, dword [ebp - 0x4a0]
inc eax
mov dword [ebp - 0x4a0], eax
cmp dword [ebp - 0x4a0], 1
jge 0x482df9
mov eax, dword [ebp - 0x4a0]
mov dword [ebp + eax*4 - 0x28d8], 0x2ba75a59
jmp 0x482dd0
lea eax, [ebp - 0x19dc]
push eax
push 1
push 1
call fcn.0046f586
add esp, 0xc
mov dword [ebp - 0x1320], 0x53fd
mov dword [ebp - 0x19ec], 0xa8a3a8
cmp dword [ebp - 0x1320], 0x5442
jle 0x482f52
and dword [ebp - 0x910], 0
jmp 0x482e46
mov eax, dword [ebp - 0x910]
inc eax
mov dword [ebp - 0x910], eax
cmp dword [ebp - 0x910], 0x1515
jge 0x482f2f
and dword [ebp - 0x6f0], 0
jmp 0x482e6c
mov eax, dword [ebp - 0x6f0]
inc eax
mov dword [ebp - 0x6f0], eax
cmp dword [ebp - 0x6f0], 0xf98
jge 0x482f2a
and dword [ebp - 0x4a8], 0
jmp 0x482e92
mov eax, dword [ebp - 0x4a8]
inc eax
mov dword [ebp - 0x4a8], eax
cmp dword [ebp - 0x4a8], 0x2970
jge 0x482f25
and dword [ebp - 0x4b0], 0
jmp 0x482eb8
mov eax, dword [ebp - 0x4b0]
inc eax
mov dword [ebp - 0x4b0], eax
cmp dword [ebp - 0x4b0], 0x6c36
jge 0x482f20
mov eax, dword [ebp - 0x6f0]
cdq
idiv dword [ebp - 0x4a8]
xor edx, dword [ebp - 0x910]
xor edx, dword [ebp - 0x4b0]
mov eax, edx
cdq
mov dword [ebp - 0x1dc4], eax
mov dword [ebp - 0x1dc0], edx
push dword [ebp - 0x1dc0]
push dword [ebp - 0x1dc4]
lea ecx, [ebp - 0x3200]
call fcn.004019f8
pop ecx
pop ecx
mov ecx, eax
call fcn.0040a69a
push eax
call fcn.004a3677
pop ecx
lea ecx, [ebp - 0x3200]
call fcn.0040a690
jmp 0x482eab
jmp 0x482e85
jmp 0x482e5f
jmp 0x482e39
push 0
push 0x18dd
push 0x1108
push 0x5ac
push 0xad7
push 0x18a4
push 0
call dword [0xaa03d0]
mov dword [ebp - 0xd90], 0x5ea3
mov dword [ebp - 0x1d90], 0xa8a3c0
cmp dword [ebp - 0xd90], 0x5fc0
jle 0x483072
and dword [ebp - 0x6f8], 0
jmp 0x482f8c
mov eax, dword [ebp - 0x6f8]
inc eax
mov dword [ebp - 0x6f8], eax
cmp dword [ebp - 0x6f8], 0x66d9
jge 0x483072
and dword [ebp - 0x4b8], 0
jmp 0x482fb2
mov eax, dword [ebp - 0x4b8]
inc eax
mov dword [ebp - 0x4b8], eax
cmp dword [ebp - 0x4b8], 0x7c44
jge 0x48306d
and dword [ebp - 0x818], 0
jmp 0x482fd8
mov eax, dword [ebp - 0x818]
inc eax
mov dword [ebp - 0x818], eax
cmp dword [ebp - 0x818], 0x328c
jge 0x483068
and dword [ebp - 0x4c0], 0
jmp 0x482ffe
mov eax, dword [ebp - 0x4c0]
inc eax
mov dword [ebp - 0x4c0], eax
cmp dword [ebp - 0x4c0], 0x444a
jge 0x483063
mov eax, dword [ebp - 0x6f8]
sub eax, dword [ebp - 0x4b8]
sub eax, dword [ebp - 0x818]
and eax, dword [ebp - 0x4c0]
cdq
mov dword [ebp - 0x1dd0], eax
mov dword [ebp - 0x1dcc], edx
push dword [ebp - 0x1dcc]
push dword [ebp - 0x1dd0]
lea ecx, [ebp - 0x30d4]
call fcn.004019f8
pop ecx
pop ecx
mov ecx, eax
call fcn.0040a69a
push eax
call fcn.004a3677
pop ecx
lea ecx, [ebp - 0x30d4]
call fcn.0040a690
jmp 0x482ff1
jmp 0x482fcb
jmp 0x482fa5
jmp 0x482f7f
mov dword [ebp - 0x148], 0xfffffff8
mov dword [ebp - 4], 0x1c
cmp dword [ebp - 0xd90], 0x5e6c
jge 0x48309b
push dword [ebp - 0x1d90]
call fcn.004a3677
pop ecx
jmp 0x4830b7
or dword [ebp - 4], 0xffffffff
jmp 0x4830c1
mov dword [ebp - 0x148], 0
jmp 0x4830da
mov eax, dword [ebp - 0x148]
dec eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 0xffffffff
je 0x4830fd
push 0x1aa1
push 1
push 0
push 0x5364
push 1
call fcn.004788e4
add esp, 0x14
jmp 0x4830cd
mov dword [ebp - 0x148], 0
jmp 0x483116
mov eax, dword [ebp - 0x148]
dec eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 0xffffffec
jl 0x4831a3
mov dword [ebp - 0x19e4], 0xc34eea2a
mov dword [ebp - 0x2178], 1
push 4
lea ecx, [ebp - 0x2480]
call fcn.0040a8cd
push 0
push 1
lea eax, [ebp - 0x2480]
push eax
push 0x370a
lea eax, [ebp - 0x28e0]
push eax
call fcn.00470b98
add esp, 0x14
lea eax, [ebp - 0x2480]
push eax
push 1
lea eax, [ebp - 0x19e4]
push eax
push 0
push 0x4671
push 0x5cf5
push 0x7f21
lea eax, [ebp - 0x2178]
push eax
call fcn.0047450b
add esp, 0x20
lea ecx, [ebp - 0x2480]
call fcn.0040a99f
jmp 0x483109
mov dword [ebp - 4], 0x1e
cmp dword [ebp - 0x1320], 0x53a8
jge 0x4831c2
push dword [ebp - 0x19ec]
call fcn.004a3677
pop ecx
jmp 0x4831de
or dword [ebp - 4], 0xffffffff
jmp 0x4831e8
mov dword [ebp - 0xd98], 0x28bd
mov dword [ebp - 0x1d98], 0xa8a420
cmp dword [ebp - 0xd98], 0x29eb
jle 0x4832d5
and dword [ebp - 0x8a8], 0
jmp 0x483222
mov eax, dword [ebp - 0x8a8]
inc eax
mov dword [ebp - 0x8a8], eax
cmp dword [ebp - 0x8a8], 0x7ec1
jge 0x4832d5
and dword [ebp - 0x700], 0
jmp 0x483248
mov eax, dword [ebp - 0x700]
inc eax
mov dword [ebp - 0x700], eax
cmp dword [ebp - 0x700], 0x5f6f
jge 0x4832d0
and dword [ebp - 0x4c8], 0
jmp 0x48326a
mov eax, dword [ebp - 0x4c8]
inc eax
mov dword [ebp - 0x4c8], eax
cmp dword [ebp - 0x4c8], 0xdd
jge 0x4832cb
mov eax, dword [ebp - 0x700]
mov ecx, dword [ebp - 0x4c8]
sar eax, cl
or eax, dword [ebp - 0x8a8]
cdq
mov dword [ebp - 0x1ddc], eax
mov dword [ebp - 0x1dd8], edx
push dword [ebp - 0x1dd8]
push dword [ebp - 0x1ddc]
lea ecx, [ebp - 0x32d8]
call fcn.004019f8
pop ecx
pop ecx
mov ecx, eax
call fcn.0040a69a
push eax
call fcn.004a3677
pop ecx
lea ecx, [ebp - 0x32d8]
call fcn.0040a690
jmp 0x48325d
jmp 0x48323b
jmp 0x483215
mov dword [ebp - 0x330], 0xfffffff8
mov dword [ebp - 4], 0x20
cmp dword [ebp - 0xd98], 0x2541
jge 0x4832fe
push dword [ebp - 0x1d98]
call fcn.004a3677
pop ecx
jmp 0x48331a
or dword [ebp - 4], 0xffffffff
jmp 0x483324
push 0x517e
push 0x4a52
push 0x1a7d
push 0x14f4
push 0xc88
push 0
push 0xd82
lea eax, [ebp - 0x330]
push eax
push 0x6370
push 1
push 0x2013
push 0x1ec2
push 1
call fcn.0047b661
add esp, 0x34
mov dword [ebp - 0x330], 0
jmp 0x48337f
mov eax, dword [ebp - 0x330]
dec eax
mov dword [ebp - 0x330], eax
cmp dword [ebp - 0x330], 0xffffffec
jl 0x483565
mov dword [ebp - 0x19fc], 0xc34eea2a
mov dword [ebp - 0x1ff0], 1
push 4
lea ecx, [ebp - 0x2498]
call fcn.0040a8cd
mov dword [ebp - 0x15e8], 0x5ea5
mov dword [ebp - 0x19f4], 0xa8a4a4
cmp dword [ebp - 0x15e8], 0x6046
jle 0x4834d0
and dword [ebp - 0x4d0], 0
jmp 0x4833e7
mov eax, dword [ebp - 0x4d0]
inc eax
mov dword [ebp - 0x4d0], eax
cmp dword [ebp - 0x4d0], 0x6b2
jge 0x4834d0
and dword [ebp - 0x708], 0
jmp 0x48340d
cmp dword [ebp - 0x708], 0x67d0
jge 0x4834cb
and dword [ebp - 0x4d8], 0
jmp 0x483433
cmp dword [ebp - 0x4d8], 0x3797
jge 0x4834c6
and dword [ebp - 0x820], 0
jmp 0x483459
jmp 0x483400
jmp 0x4833da
mov dword [ebp - 4], 0x22
cmp dword [ebp - 0x15e8], 0x5b8e
jge 0x4834ef
push dword [ebp - 0x19f4]
call fcn.004a3677
pop ecx
jmp 0x48350b
or dword [ebp - 4], 0xffffffff
jmp 0x483515
lea eax, [ebp - 0x2498]
push eax
push 1
push 0x57d
push 1
lea eax, [ebp - 0x28e8]
push eax
call fcn.0046b426
add esp, 0x14
push 1
lea eax, [ebp - 0x1ff0]
push eax
push 1
lea eax, [ebp - 0x19fc]
push eax
lea eax, [ebp - 0x2498]
push eax
call fcn.0046f915
add esp, 0x14
lea ecx, [ebp - 0x2498]
call fcn.0040a99f
jmp 0x483372
mov dword [ebp - 0x88], 0xa8eac8b
mov dword [ebp - 0x2a4], 0xfffffff8
push 1
push 1
push 0x6b67
push 0x6c20
push 0x2221
lea eax, [ebp - 0x2a4]
push eax
push 0x3a3
push 0x6e24
push 0
call fcn.00474ec0
add esp, 0x24
mov dword [ebp - 0x2a4], 0
jmp 0x4835c0
mov eax, dword [ebp - 0x2a4]
dec eax
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 0xffffffec
jl 0x48365c
mov dword [ebp - 0x1da0], 0xc34eea2a
mov dword [ebp - 0x1a04], 1
push 4
lea ecx, [ebp - 0x24b0]
call fcn.0040a8cd
push 1
push 0x78c6
lea eax, [ebp - 0x24b0]
push eax
push 0
push 0x1ca7
push 0x5803
push 0x2dba
lea eax, [ebp - 0x28f0]
push eax
call fcn.0047569c
add esp, 0x20
push 0
push 1
lea eax, [ebp - 0x1da0]
push eax
lea eax, [ebp - 0x1a04]
push eax
push 0x6946
push 0x2b9f
push 0x2fe5
lea eax, [ebp - 0x24b0]
push eax
call fcn.00478ed5
add esp, 0x20
lea ecx, [ebp - 0x24b0]
call fcn.0040a99f
jmp 0x4835b3
mov dword [ebp - 0x28f8], 1
mov dword [ebp - 0x710], 0xfffffff6
mov dword [ebp - 0x4e0], 0
jmp 0x483689
mov eax, dword [ebp - 0x4e0]
inc eax
mov dword [ebp - 0x4e0], eax
cmp dword [ebp - 0x4e0], 3
jge 0x4836a5
mov eax, dword [ebp - 0x4e0]
mov dword [ebp + eax*4 - 0x2e00], 0
jmp 0x48367c
push 0
push 0x5e66
push 1
push 0x60e8
call fcn.0047e0d8
add esp, 0x10
mov dword [ebp - 0x710], 0
jmp 0x4836d4
cmp dword [ebp - 0x710], 6
jle 0x4838a3
mov dword [ebp - 0xda0], 0x4785
mov dword [ebp - 0x2108], 0xa8a4d0
cmp dword [ebp - 0xda0], 0x47c8
jle 0x4837e8
and dword [ebp - 0x4f0], 0
jmp 0x48371b
mov dword [ebp - 0x4f8], 0xffffffff
mov dword [ebp - 4], 0x24
cmp dword [ebp - 0xda0], 0x4667
jge 0x483815
mov dword [ebp - 0xda8], 1
mov dword [ebp - 0x1328], 0xffffffff
mov dword [ebp - 0x2900], 0x3925
push 0x40df
push 0
lea eax, [ebp - 0xda8]
push eax
push 0x1427
push 0
push 1
lea eax, [ebp - 0x1328]
push eax
call fcn.00477b89
add esp, 0x1c
mov dword [ebp - 0x1888], 0x4728
mov dword [ebp - 0x1a0c], 0xa8a500
cmp dword [ebp - 0x1888], 0x4752
jle 0x4839b9
call dword [0xaa02e0]
and dword [ebp - 0x720], 0
jmp 0x483927
push 0x71f1
push 0x2607
push 1
lea eax, [ebp - 0x1328]
push eax
push 0x7c0
push 0x3d06
lea eax, [ebp - 0xda8]
push eax
push 1
call fcn.0046fa5d
add esp, 0x20
mov dword [ebp - 4], 0x26
cmp dword [ebp - 0x1888], 0x4555
jge 0x483a0a
mov byte [ebp - 0x17a], 0
movzx eax, byte [ebp - 0x17a]
test eax, eax
je 0x4956a2
push 0x2c0f
push 1
push 0
push 0x77e
call fcn.004755f2
add esp, 0x10
jmp 0x4956c2
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x1c68], eax
push dword [ebp - 0x1c68]
push 0x73de
push 1
call fcn.004769af
add esp, 0xc
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret