Function at 0x4630c7
Capabilities:
Contain obfuscated stackstrings
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b9587
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x4d8
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
and dword [ebp - 0x1c], 0
movzx eax, byte [ebp + 0xc]
test eax, eax
je 0x464ee9
mov eax, dword [ebp + 0x4c]
mov dword [ebp - 0x250], eax
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 0x32c], eax
lea eax, [ebp + 0x10]
mov dword [ebp - 0x348], eax
mov eax, dword [ebp + 0x34]
mov dword [ebp - 0x26c], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x304], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x340], eax
mov eax, dword [ebp + 0x3c]
mov dword [ebp - 0x248], eax
mov eax, dword [ebp - 0x348]
movzx eax, byte [eax]
test eax, eax
je 0x464bfe
mov dword [ebp - 0x1f4], 0x2317
mov dword [ebp - 0x2ec], 0xaa95ec
cmp dword [ebp - 0x1f4], 0x26a6
jle 0x463206
and dword [ebp - 0x118], 0
jmp 0x463186
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0x4365
jge 0x463206
and dword [ebp - 0xfc], 0
jmp 0x4631a8
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0x5988
jge 0x463201
mov eax, dword [ebp - 0x118]
or eax, dword [ebp - 0xfc]
cdq
mov dword [ebp - 0x278], eax
mov dword [ebp - 0x274], edx
push dword [ebp - 0x274]
push dword [ebp - 0x278]
lea ecx, [ebp - 0x4e8]
call fcn.00401a21
pop ecx
pop ecx
mov ecx, eax
call fcn.00408e8d
push eax
call fcn.004a3217
pop ecx
lea ecx, [ebp - 0x4e8]
call fcn.00408e83
jmp 0x46319b
jmp 0x463179
mov eax, dword [ebp - 0x26c]
mov dword [ebp - 0x24], eax
and dword [ebp - 4], 0
cmp dword [ebp - 0x1f4], 0x212b
jge 0x46322b
push dword [ebp - 0x2ec]
call fcn.004a3217
pop ecx
jmp 0x463247
or dword [ebp - 4], 0xffffffff
jmp 0x463251
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x20c], eax
mov eax, dword [ebp - 0x20c]
movzx eax, word [eax]
cmp eax, 0x5a4d
je 0x46326f
jmp 0x4651bd
mov eax, dword [ebp - 0x20c]
mov ecx, dword [ebp - 0x24]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0x38], ecx
mov eax, dword [ebp - 0x38]
cmp dword [eax], 0x4550
je 0x46328e
jmp 0x4651bd
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x38]
lea eax, [ecx + eax + 0x78]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
cmp dword [eax + 4], 0
jne 0x4632ac
jmp 0x4651bd
and dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x38]
movzx eax, word [eax + 0x14]
mov ecx, dword [ebp - 0x38]
lea eax, [ecx + eax + 0x18]
mov dword [ebp - 0x1c0], eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x34]
push eax
push 0x2b7b
push 0
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x1c0]
push eax
push 0x375d
push 1
push 0x3f29
call fcn.00462c13
add esp, 0x24
cmp dword [ebp - 0x20], 0
jne 0x4632fd
jmp 0x4651bd
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x20]
add ecx, dword [eax]
add ecx, dword [ebp - 0x24]
mov dword [ebp - 0x14], ecx
xor ecx, ecx
call fcn.00450fde
push eax
call fcn.004a380e
pop ecx
mov byte [ebp - 0x15c], 6
mov byte [ebp - 0x15b], 0x94
mov byte [ebp - 0x15a], 3
mov byte [ebp - 0x159], 6
mov byte [ebp - 0x158], 5
mov byte [ebp - 0x157], 6
mov byte [ebp - 0x156], 8
mov byte [ebp - 0x155], 1
mov byte [ebp - 0x154], 2
mov byte [ebp - 0x153], 7
mov byte [ebp - 0x152], 9
mov byte [ebp - 0x151], 7
mov byte [ebp - 0x150], 1
mov byte [ebp - 0x14f], 5
mov byte [ebp - 0x14e], 0x2d
mov byte [ebp - 0x14d], 0xd1
mov byte [ebp - 0x14c], 0xa4
mov byte [ebp - 0x14b], 0x12
mov byte [ebp - 0x14a], 0x2c
mov byte [ebp - 0x149], 0x43
mov byte [ebp - 0x148], 0x55
mov byte [ebp - 0x147], 0xb9
mov byte [ebp - 0x146], 0xb4
mov byte [ebp - 0x145], 0xa5
mov byte [ebp - 0x144], 0x57
mov byte [ebp - 0x143], 0x6f
mov byte [ebp - 0x142], 0xae
mov byte [ebp - 0x141], 0xee
mov byte [ebp - 0x140], 0x36
mov byte [ebp - 0x13f], 0x91
mov byte [ebp - 0x13e], 0xbd
mov byte [ebp - 0x13d], 0xc1
mov byte [ebp - 0x13c], 0x17
mov byte [ebp - 0x13b], 0xc6
mov byte [ebp - 0x13a], 0xf2
mov byte [ebp - 0x139], 0x9b
mov byte [ebp - 0x138], 0xc6
mov byte [ebp - 0x137], 0x99
mov byte [ebp - 0x136], 0x91
mov byte [ebp - 0x135], 0xbd
mov byte [ebp - 0x134], 6
mov byte [ebp - 0x133], 0x6b
mov byte [ebp - 0x132], 0x4a
mov byte [ebp - 0x131], 0x66
mov byte [ebp - 0x130], 0xfe
mov byte [ebp - 0x12f], 0x68
mov byte [ebp - 0x12e], 0x66
mov byte [ebp - 0x12d], 0xb
mov byte [ebp - 0x12c], 0x12
mov byte [ebp - 0x12b], pe_nt_image_headers32
mov byte [ebp - 0x12a], 0xcc
mov byte [ebp - 0x129], 0xa8
mov byte [ebp - 0x128], 0x7e
mov byte [ebp - 0x127], 0x33
mov byte [ebp - 0x126], pe_nt_image_headers32
mov byte [ebp - 0x125], 0xe6
mov byte [ebp - 0x124], 0xa
mov byte [ebp - 0x123], 0x94
mov byte [ebp - 0x122], 0x24
mov byte [ebp - 0x121], 0x91
mov byte [ebp - 0x120], 7
mov byte [ebp - 0x11f], 3
mov byte [ebp - 0x11e], 0
mov byte [ebp - 0x11d], 7
mov byte [ebp - 0x11c], 4
mov byte [ebp - 0x11b], 9
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x15c]
or eax, 0xa5
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x15c]
and ecx, 0xa5
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x15c]
mov byte [ebp + ecx - 0x218], al
mov dword [ebp - 0x28], 2
and dword [ebp - 0x8c], 0
jmp 0x46353d
mov eax, dword [ebp - 0x28]
inc eax
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0x42
jae 0x463775
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x15c]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x28], eax
jne 0x463587
mov eax, dword [ebp - 0x28]
movzx eax, byte [ebp + eax - 0x15c]
inc eax
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x28]
movzx eax, byte [ebp + eax - 0x15c]
mov ecx, dword [ebp - 0x28]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x28], eax
jmp 0x463535
mov dword [ebp - 0x200], 0xe17
mov dword [ebp - 0x2f4], 0xaa9608
cmp dword [ebp - 0x200], 0x1091
jle 0x463690
push 1
push 0x1054
push 0x2153
push 0x110b
call dword [0xac3430]
and dword [ebp - 0xa4], 0
jmp 0x4635d8
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0x304b
jge 0x46368a
and dword [ebp - 0x84], 0
jmp 0x4635fe
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0x5a64
jge 0x463685
and dword [ebp - 0xf0], 0
jmp 0x463620
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0x7cbe
jge 0x463680
mov eax, dword [ebp - 0xa4]
imul eax, dword [ebp - 0x84]
and eax, dword [ebp - 0xf0]
cdq
mov dword [ebp - 0x284], eax
mov dword [ebp - 0x280], edx
push dword [ebp - 0x280]
push dword [ebp - 0x284]
lea ecx, [ebp - 0x440]
call fcn.00401a21
pop ecx
pop ecx
mov ecx, eax
call fcn.00408e8d
push eax
call fcn.004a3217
pop ecx
lea ecx, [ebp - 0x440]
call fcn.00408e83
jmp 0x463613
jmp 0x4635f1
jmp 0x4635cb
call dword [0xac34b4]
mov eax, dword [ebp - 0x28]
movzx eax, byte [ebp + eax - 0x15b]
mov ecx, dword [ebp - 0x28]
sub ecx, dword [ebp - 0x8c]
movzx ecx, byte [ebp + ecx - 0x15e]
movsx ecx, byte [ebp + ecx - 0x218]
or eax, ecx
mov ecx, dword [ebp - 0x28]
movzx ecx, byte [ebp + ecx - 0x15b]
mov edx, dword [ebp - 0x28]
sub edx, dword [ebp - 0x8c]
movzx edx, byte [ebp + edx - 0x15e]
movsx edx, byte [ebp + edx - 0x218]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x28]
movzx ecx, byte [ebp + ecx - 0x15c]
mov byte [ebp + ecx - 0x218], al
mov dword [ebp - 4], 2
cmp dword [ebp - 0x200], 0xb2e
jge 0x46370f
push dword [ebp - 0x2f4]
call fcn.004a3217
pop ecx
jmp 0x46372b
or dword [ebp - 4], 0xffffffff
jmp 0x463735
push 0x6fd9
lea eax, [ebp - 0x8c]
push eax
push 1
push 1
push 0x34d2
push 0x73d0
push 0x2dde
push 0x5e36
push 0x5306
push 0x2994
push 0x6fa0
call fcn.004621cb
add esp, 0x2c
jmp 0x463535
xor eax, eax
inc eax
imul eax, eax, 0xa
mov byte [ebp + eax - 0x218], 0
push 0xa
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x488]
call fcn.00467b48
xor edx, edx
mov ecx, eax
call fcn.00450fa3
pop ecx
mov dword [ebp - 0x350], eax
lea ecx, [ebp - 0x488]
call fcn.0040915a
and dword [ebp - 0xf8], 0
jmp 0x4637c8
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0xb
jae 0x4637e1
mov eax, dword [ebp - 0xf8]
mov byte [ebp + eax - 0x218], 0
jmp 0x4637bb
mov byte [ebp - 0x78], 8
mov byte [ebp - 0x77], 0x50
mov byte [ebp - 0x76], 0
mov byte [ebp - 0x75], 1
mov byte [ebp - 0x74], 3
mov byte [ebp - 0x73], 3
mov byte [ebp - 0x72], 2
mov byte [ebp - 0x71], 5
mov byte [ebp - 0x70], 5
mov byte [ebp - 0x6f], 6
mov byte [ebp - 0x6e], 1
mov byte [ebp - 0x6d], 7
mov byte [ebp - 0x6c], 6
mov byte [ebp - 0x6b], 0xf
mov byte [ebp - 0x6a], 7
mov byte [ebp - 0x69], 0xf
mov byte [ebp - 0x68], 9
mov byte [ebp - 0x67], 6
mov byte [ebp - 0x66], 0xc
mov byte [ebp - 0x65], 0x80
mov byte [ebp - 0x64], 0xf6
mov byte [ebp - 0x63], 0xc9
mov byte [ebp - 0x62], 0x3f
mov byte [ebp - 0x61], 0xab
mov byte [ebp - 0x60], 0x7b
mov byte [ebp - 0x5f], 0x32
mov byte [ebp - 0x5e], 0xb0
mov byte [ebp - 0x5d], 0x41
mov byte [ebp - 0x5c], 0xbf
mov byte [ebp - 0x5b], 0xef
mov byte [ebp - 0x5a], 0x70
mov byte [ebp - 0x59], 4
mov byte [ebp - 0x58], 4
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x78]
or eax, 0x60
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x78]
and ecx, 0x60
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x78]
mov byte [ebp + ecx - 0x224], al
mov dword [ebp - 0x2c], 2
and dword [ebp - 0x94], 0
jmp 0x4638ad
mov eax, dword [ebp - 0x2c]
inc eax
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0x21
jae 0x463981
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x78]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x2c], eax
jne 0x4638ee
mov eax, dword [ebp - 0x2c]
movzx eax, byte [ebp + eax - 0x78]
inc eax
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x2c]
movzx eax, byte [ebp + eax - 0x78]
mov ecx, dword [ebp - 0x2c]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x2c], eax
jmp 0x4638a5
mov eax, dword [ebp - 0x2c]
movzx eax, byte [ebp + eax - 0x77]
mov ecx, dword [ebp - 0x2c]
sub ecx, dword [ebp - 0x94]
movzx ecx, byte [ebp + ecx - 0x7a]
movsx ecx, byte [ebp + ecx - 0x224]
or eax, ecx
mov ecx, dword [ebp - 0x2c]
movzx ecx, byte [ebp + ecx - 0x77]
mov edx, dword [ebp - 0x2c]
sub edx, dword [ebp - 0x94]
movzx edx, byte [ebp + edx - 0x7a]
movsx edx, byte [ebp + edx - 0x224]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x2c]
movzx ecx, byte [ebp + ecx - 0x78]
mov byte [ebp + ecx - 0x224], al
push 0x6248
push 0x7dea
push 0x320f
lea eax, [ebp - 0x94]
push eax
push 0x7dab
push 0
push 1
push 0x7282
push 0
push 0x66dd
push 0x4c94
push 0x63ad
call fcn.00462749
add esp, 0x30
jmp 0x4638a5
xor eax, eax
inc eax
imul eax, eax, 0xa
mov byte [ebp + eax - 0x224], 0
push 0xa
lea eax, [ebp - 0x224]
push eax
lea ecx, [ebp - 0x4b8]
call fcn.00467b48
xor edx, edx
mov ecx, eax
call fcn.00450fa3
pop ecx
mov dword [ebp - 0x228], eax
lea ecx, [ebp - 0x4b8]
call fcn.0040915a
and dword [ebp - 0x100], 0
jmp 0x4639d4
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0xb
jae 0x4639ed
mov eax, dword [ebp - 0x100]
mov byte [ebp + eax - 0x224], 0
jmp 0x4639c7
push dword [ebp - 0x228]
push dword [ebp - 0x350]
call fcn.0045efc8
pop ecx
pop ecx
mov dword [ebp - 0x1ec], eax
push 0x520a
push 0x4bfb
push 0x7ed5
push 0x518a
push 0x10ec
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x1ec]
push eax
push 1
push 1
push 0
push 0x3c7
push 0x5449
push 0x3404
push 0x5db4
push 0x69aa
call fcn.00462f39
add esp, 0x3c
mov dword [ebp - 0x1e8], 0x4ab6
mov dword [ebp - 0x33c], 0xaa9654
cmp dword [ebp - 0x1e8], 0x4c84
jle 0x463b8e
call dword [0xac333c]
and dword [ebp - 0x9c], 0
jmp 0x463a91
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0x7b1d
jge 0x463b78
and dword [ebp - 0x108], 0
jmp 0x463ab7
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0x2bfc
jge 0x463b73
and dword [ebp - 0x110], 0
jmp 0x463add
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0x7d6b
jge 0x463b6e
and dword [ebp - 0xa8], 0
jmp 0x463b03
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0x36e7
jge 0x463b69
mov eax, dword [ebp - 0x9c]
imul eax, dword [ebp - 0x108]
add eax, dword [ebp - 0x110]
and eax, dword [ebp - 0xa8]
cdq
mov dword [ebp - 0x290], eax
mov dword [ebp - 0x28c], edx
push dword [ebp - 0x28c]
push dword [ebp - 0x290]
lea ecx, [ebp - 0x3e0]
call fcn.00401a21
pop ecx
pop ecx
mov ecx, eax
call fcn.00408e8d
push eax
call fcn.004a3217
pop ecx
lea ecx, [ebp - 0x3e0]
call fcn.00408e83
jmp 0x463af6
jmp 0x463ad0
jmp 0x463aaa
jmp 0x463a84
push 0
push 0
push 0x18c4
push 0x1276
push 0
call dword [0xac3520]
mov dword [ebp - 4], 4
cmp dword [ebp - 0x1e8], 0x4770
jge 0x463bad
push dword [ebp - 0x33c]
call fcn.004a3217
pop ecx
jmp 0x463bc9
or dword [ebp - 4], 0xffffffff
jmp 0x463bd3
push 0xf
push 5
call fcn.0045efc8
pop ecx
pop ecx
add eax, dword [ebp - 0x1ec]
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 4], eax
and dword [ebp - 0x40], 0
push 1
push 0x7430
lea eax, [ebp - 0x14]
push eax
push 0x65fc
push 0x27ff
push 1
push 0x8da
lea eax, [ebp - 0x40]
push eax
push 0x1891
push 0x4043
push 0x3656
push 0x5777
call fcn.004623f7
add esp, 0x30
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 0x1c]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 0x14]
sub eax, dword [ebp - 0x40]
mov dword [ebp - 0x3c], eax
and dword [ebp - 0x48], 0
jmp 0x463c4c
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
cmp eax, dword [ebp - 0x3c]
jge 0x463d27
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
mov eax, dword [eax + 0x14]
sub eax, dword [ecx + 0x18]
cmp dword [ebp - 0x48], eax
jae 0x463ca7
push 0
lea eax, [ebp - 0x24]
push eax
push 0x19a2
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push eax
push 1
push 0x39ca
push 0x47f
lea eax, [ebp - 0x204]
push eax
push 0xaff
push 0x5bfc
lea eax, [ebp - 0x48]
push eax
call fcn.004623f7
add esp, 0x30
jmp 0x463ce6
push 0x27ba
push 0x103f
lea eax, [ebp - 0x1c0]
push eax
push 0x32a9
push 0x87b
push 1
push 1
lea eax, [ebp - 0x204]
push eax
push 1
push 0x2e7f
push 0x26a8
push 0x1a62
call fcn.00462749
add esp, 0x30
lea eax, [ebp - 0x204]
push eax
push 0x7ad9
push 0
push 0
lea eax, [ebp - 0x18]
push eax
push 0x43a8
push 0x2236
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x20]
push eax
push 0x50b3
call fcn.00461e73
add esp, 0x28
mov eax, dword [ebp - 0x18]
add eax, 4
mov dword [ebp - 0x18], eax
jmp 0x463c45
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 0x14]
sub eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 0x14], eax
push 0x2cb6
lea eax, [ebp - 0x3c]
push eax
push 0xf79
lea eax, [ebp - 0x40]
push eax
push 0x73c8
push 0x613a
push 0x7e01
push 0
push 1
push 0
push 0x2614
lea eax, [ebp - 0x14]
push eax
push 0x72bc
push 0x62be
push 0x5a86
call fcn.00462f39
add esp, 0x3c
and dword [ebp - 0x1b0], 0
jmp 0x463d93
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
mov eax, dword [ebp - 0x1b0]
cmp eax, dword [ebp - 0x3c]
jge 0x463dcc
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x24]
and dword [ecx + eax], 0
push 0x7510
push 1
push 0x73a0
lea eax, [ebp - 0x18]
push eax
push 1
push 0x70a6
call fcn.00461a26
add esp, 0x18
jmp 0x463d86
push 0x5fd8
push 0xfc5
push 0
push 0
lea eax, [ebp - 0x14]
push eax
push 0x599f
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x3c]
push eax
call fcn.00462a3c
add esp, 0x20
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 0x18]
sub eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 0x18], eax
and dword [ebp - 0xac], 0
jmp 0x463e18
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
mov eax, dword [ebp - 0xac]
cmp eax, dword [ebp - 0x3c]
jge 0x463e8f
lea eax, [ebp - 0xac]
push eax
lea eax, [ebp - 0x24]
push eax
push 0x3523
push 0x2836
push 0x1747
push 1
push 0
push 0x5105
push 1
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.00462749
add esp, 0x30
push 0x7201
push 0x5a76
push 0x73f
push 0x74af
push 1
push 1
push 0x4828
lea eax, [ebp - 0x18]
push eax
push 0x6b9d
call fcn.00462890
add esp, 0x24
jmp 0x463e0b
lea eax, [ebp - 0x14]
push eax
push 0x2576
lea eax, [ebp - 0x3c]
push eax
push 0x6605
push 1
push 0
push 0x6a7c
push 0x562
lea eax, [ebp - 0x18]
push eax
call fcn.00462890
add esp, 0x24
mov dword [ebp - 0x1c8], 0x4c60
mov dword [ebp - 0x230], 0xaa96ac
cmp dword [ebp - 0x1c8], 0x4eb4
jle 0x463fe8
and dword [ebp - 0x10c], 0
jmp 0x463ef5
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0x7d83
jge 0x463fbb
and dword [ebp - 0xe4], 0
jmp 0x463f1b
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0x4f5c
jge 0x463fb6
and dword [ebp - 0xb4], 0
jmp 0x463f41
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0x1524
jge 0x463fb1
and dword [ebp - 0xbc], 0
jmp 0x463f63
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0x2588
jge 0x463faf
mov ecx, dword [ebp - 0xe4]
imul ecx, dword [ebp - 0xb4]
mov eax, dword [ebp - 0x10c]
shl eax, cl
or eax, dword [ebp - 0xbc]
cdq
mov dword [ebp - 0x29c], eax
mov dword [ebp - 0x298], edx
push dword [ebp - 0x298]
push dword [ebp - 0x29c]
mov ecx, 0xac0918
call fcn.00408e98
jmp 0x463f56
jmp 0x463f34
jmp 0x463f0e
jmp 0x463ee8
push 0xc51
push 0
push 0xca1
push 0x1ff4
push 0x2365
push 0
push 0x23e7
push 0x2469
push 0x193f
call dword [0xac3428]
mov dword [ebp - 4], 6
cmp dword [ebp - 0x1c8], 0x48cb
jge 0x46400b
mov edx, dword [ebp - 0x230]
mov ecx, 0xac0918
call fcn.0040bb10
jmp 0x464027
or dword [ebp - 4], 0xffffffff
jmp 0x464031
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x20]
add ecx, dword [eax + 0xc]
add ecx, dword [ebp - 0x24]
push ecx
lea ecx, [ebp - 0x380]
call fcn.00467b48
lea ecx, [ebp - 0x380]
call fcn.0040ab83
mov dword [ebp - 0x1f0], eax
push dword [ebp - 0x1f0]
mov eax, dword [ebp - 0x1f0]
shr eax, 1
push eax
call fcn.0045efc8
pop ecx
pop ecx
mov dword [ebp - 0x4c], eax
mov byte [ebp - 0x1ac], 2
mov byte [ebp - 0x1ab], 0x60
mov byte [ebp - 0x1aa], 1
mov byte [ebp - 0x1a9], 8
mov byte [ebp - 0x1a8], 0
mov byte [ebp - 0x1a7], 0x4a
mov byte [ebp - 0x1a6], 0x45
mov byte [ebp - 0x1a5], 0x53
mov byte [ebp - 0x1a4], 0x23
mov byte [ebp - 0x1a3], 0xfe
mov byte [ebp - 0x1a2], 0x8b
mov byte [ebp - 0x1a1], 0x42
mov byte [ebp - 0x1a0], 0x9a
mov byte [ebp - 0x19f], 0x97
mov byte [ebp - 0x19e], 0x58
mov byte [ebp - 0x19d], 0xdb
mov byte [ebp - 0x19c], 0xf4
mov byte [ebp - 0x19b], 0xa7
mov byte [ebp - 0x19a], 0xc
mov byte [ebp - 0x199], 0xc1
mov byte [ebp - 0x198], 0x3a
mov byte [ebp - 0x197], 0x13
mov byte [ebp - 0x196], 0x5b
mov byte [ebp - 0x195], 0xf4
mov byte [ebp - 0x194], 0xca
mov byte [ebp - 0x193], 0x3a
mov byte [ebp - 0x192], 0x43
mov byte [ebp - 0x191], 0x54
mov byte [ebp - 0x190], 0x3b
mov byte [ebp - 0x18f], 0x14
mov byte [ebp - 0x18e], 0x94
mov byte [ebp - 0x18d], 0x1f
mov byte [ebp - 0x18c], 0x9f
mov byte [ebp - 0x18b], 0x49
mov byte [ebp - 0x18a], 0xea
mov byte [ebp - 0x189], 0x7e
mov byte [ebp - 0x188], 0x22
mov byte [ebp - 0x187], 0x82
mov byte [ebp - 0x186], 0xd
mov byte [ebp - 0x185], 0x8f
mov byte [ebp - 0x184], 0x5e
mov byte [ebp - 0x183], 0xe6
mov byte [ebp - 0x182], 0x4c
mov byte [ebp - 0x181], 0xd0
mov byte [ebp - 0x180], 0x4d
mov byte [ebp - 0x17f], 0xf4
mov byte [ebp - 0x17e], 0xc3
mov byte [ebp - 0x17d], 0xed
mov byte [ebp - 0x17c], 0x34
mov byte [ebp - 0x17b], 0x31
mov byte [ebp - 0x17a], 0x21
mov byte [ebp - 0x179], 0xee
mov byte [ebp - 0x178], 0x76
mov byte [ebp - 0x177], 0xd0
mov byte [ebp - 0x176], 0x67
mov byte [ebp - 0x175], 0x1a
mov byte [ebp - 0x174], 0x30
mov byte [ebp - 0x173], 0x71
mov byte [ebp - 0x172], 0x2d
mov byte [ebp - 0x171], 0x25
mov byte [ebp - 0x170], 0x76
mov byte [ebp - 0x16f], 0x6a
mov byte [ebp - 0x16e], 0x66
mov byte [ebp - 0x16d], 9
mov byte [ebp - 0x16c], 0x31
mov byte [ebp - 0x16b], 0x4d
mov byte [ebp - 0x16a], 0x37
mov byte [ebp - 0x169], 4
mov byte [ebp - 0x168], 0x5b
mov byte [ebp - 0x167], 0xbb
mov byte [ebp - 0x166], 0x4b
mov byte [ebp - 0x165], 0xad
mov byte [ebp - 0x164], 0x2a
mov byte [ebp - 0x163], 0
mov byte [ebp - 0x162], 0xce
mov byte [ebp - 0x161], 0x19
mov byte [ebp - 0x160], 3
mov byte [ebp - 0x15f], 0x42
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x1ac]
or eax, 0xc
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x1ac]
and ecx, 0xc
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x1ac]
mov byte [ebp + ecx - 0x54], al
mov dword [ebp - 0x30], 2
and dword [ebp - 0xec], 0
jmp 0x4642e3
mov eax, dword [ebp - 0x30]
inc eax
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0x4e
jae 0x464390
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x1ac]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x30], eax
jne 0x46432d
mov eax, dword [ebp - 0x30]
movzx eax, byte [ebp + eax - 0x1ac]
inc eax
mov dword [ebp - 0xec], eax
mov eax, dword [ebp - 0x30]
movzx eax, byte [ebp + eax - 0x1ac]
mov ecx, dword [ebp - 0x30]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x30], eax
jmp 0x4642db
mov eax, dword [ebp - 0x30]
movzx eax, byte [ebp + eax - 0x1ab]
mov ecx, dword [ebp - 0x30]
sub ecx, dword [ebp - 0xec]
movzx ecx, byte [ebp + ecx - 0x1ae]
movsx ecx, byte [ebp + ecx - 0x54]
or eax, ecx
mov ecx, dword [ebp - 0x30]
movzx ecx, byte [ebp + ecx - 0x1ab]
mov edx, dword [ebp - 0x30]
sub edx, dword [ebp - 0xec]
movzx edx, byte [ebp + edx - 0x1ae]
movsx edx, byte [ebp + edx - 0x54]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x30]
movzx ecx, byte [ebp + ecx - 0x1ac]
mov byte [ebp + ecx - 0x54], al
and dword [ebp - 0xec], 0
jmp 0x4642db
xor eax, eax
inc eax
shl eax, 2
mov byte [ebp + eax - 0x54], 0
mov dword [ebp - 0x208], 0x6499
mov dword [ebp - 0x238], 0xaa96e0
cmp dword [ebp - 0x208], 0x660c
jle 0x4644be
and dword [ebp - 0xf4], 0
jmp 0x4643d5
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0x6bfe
jge 0x4644be
and dword [ebp - 0xc4], 0
jmp 0x4643fb
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0x4002
jge 0x4644b9
and dword [ebp - 0x104], 0
jmp 0x464421
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0x189d
jge 0x4644b4
and dword [ebp - 0xcc], 0
jmp 0x464447
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0x3dc7
jge 0x4644af
mov eax, dword [ebp - 0xc4]
cdq
idiv dword [ebp - 0x104]
xor edx, dword [ebp - 0xcc]
or edx, dword [ebp - 0xf4]
mov eax, edx
cdq
mov dword [ebp - 0x2a8], eax
mov dword [ebp - 0x2a4], edx
push dword [ebp - 0x2a4]
push dword [ebp - 0x2a8]
lea ecx, [ebp - 0x470]
call fcn.00401a21
pop ecx
pop ecx
mov ecx, eax
call fcn.00408e8d
push eax
call fcn.004a3217
pop ecx
lea ecx, [ebp - 0x470]
call fcn.00408e83
jmp 0x46443a
jmp 0x464414
jmp 0x4643ee
jmp 0x4643c8
cmp dword [ebp - 0x4c], 4
jle 0x46450b
or dword [ebp - 0x1c], 1
or dword [ebp - 0x1c], 2
or dword [ebp - 0x1c], 4
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x4a0]
call fcn.00467b48
push eax
mov eax, dword [ebp - 0x4c]
sub eax, 4
push eax
lea eax, [ebp - 0x3b0]
push eax
call fcn.0045f443
pop ecx
pop ecx
mov edx, eax
lea ecx, [ebp - 0x4d0]
call fcn.00468023
pop ecx
mov dword [ebp - 0x1d0], eax
jmp 0x464526
or dword [ebp - 0x1c], 8
push dword [ebp - 0x4c]
lea eax, [ebp - 0x410]
push eax
call fcn.0045f443
pop ecx
pop ecx
mov dword [ebp - 0x1d0], eax
mov eax, dword [ebp - 0x1d0]
mov dword [ebp - 0x2f8], eax
push dword [ebp - 0x2f8]
lea ecx, [ebp - 0x398]
call fcn.00409101
mov eax, dword [ebp - 0x1c]
and eax, 8
je 0x46455a
and dword [ebp - 0x1c], 0xfffffff7
lea ecx, [ebp - 0x410]
call fcn.0040915a
mov eax, dword [ebp - 0x1c]
and eax, 4
je 0x464571
and dword [ebp - 0x1c], 0xfffffffb
lea ecx, [ebp - 0x4d0]
call fcn.0040915a
mov eax, dword [ebp - 0x1c]
and eax, 2
je 0x464588
and dword [ebp - 0x1c], 0xfffffffd
lea ecx, [ebp - 0x3b0]
call fcn.0040915a
mov eax, dword [ebp - 0x1c]
and eax, 1
je 0x46459f
and dword [ebp - 0x1c], 0xfffffffe
lea ecx, [ebp - 0x4a0]
call fcn.0040915a
mov dword [ebp - 4], 8
cmp dword [ebp - 0x208], 0x61aa
jge 0x4645be
push dword [ebp - 0x238]
call fcn.004a3217
pop ecx
jmp 0x4645da
or dword [ebp - 4], 0xffffffff
jmp 0x4645e4
and dword [ebp - 0xd4], 0
jmp 0x4645fa
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 5
jae 0x464610
mov eax, dword [ebp - 0xd4]
mov byte [ebp + eax - 0x54], 0
jmp 0x4645ed
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov dword [eax + 0xc], ecx
push 0x2f4f
lea eax, [ebp - 0x4c]
push eax
push 0x6556
push 0x604
push 0x3838
push 0x7aa3
push 0x7d14
lea eax, [ebp - 0x14]
push eax
push 0x4db7
lea eax, [ebp - 0x398]
push eax
lea eax, [ebp - 0x20]
push eax
push 0x6172
push 0x1b52
push 1
lea eax, [ebp - 0x24]
push eax
push 1
push 0
push 0x44b0
call fcn.004630c7
add esp, 0x48
push 0x4925
push 0xd5e
lea eax, [ebp - 0x18]
push eax
push 1
push 0x56b6
push 0xe35
push 0x5782
push 1
lea eax, [ebp - 0x4c]
push eax
call fcn.00462c13
add esp, 0x24
mov dword [ebp - 0x1d8], 0x655a
mov dword [ebp - 0x338], 0xaa9734
cmp dword [ebp - 0x1d8], 0x678b
jle 0x464790
push 0
call dword [0xac3048]
and dword [ebp - 0xa0], 0
jmp 0x4646df
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0x4e5e
jge 0x464790
and dword [ebp - 0x114], 0
jmp 0x464705
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0xfe6
jge 0x46478b
and dword [ebp - 0xdc], 0
jmp 0x464727
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0x1f97
jge 0x464786
mov eax, dword [ebp - 0x114]
add eax, dword [ebp - 0xdc]
or eax, dword [ebp - 0xa0]
cdq
mov dword [ebp - 0x2b4], eax
mov dword [ebp - 0x2b0], edx
push dword [ebp - 0x2b0]
push dword [ebp - 0x2b4]
lea ecx, [ebp - 0x3c8]
call fcn.00401a21
pop ecx
pop ecx
mov ecx, eax
call fcn.00408e8d
push eax
call fcn.004a3217
pop ecx
lea ecx, [ebp - 0x3c8]
call fcn.00408e83
jmp 0x46471a
jmp 0x4646f8
jmp 0x4646d2
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x1d8], 0x61df
jge 0x4647af
push dword [ebp - 0x338]
call fcn.004a3217
pop ecx
jmp 0x4647cb
or dword [ebp - 4], 0xffffffff
jmp 0x4647d5
push 0x4ffc
lea eax, [ebp - 0x20]
push eax
push 1
push 0
push 0x4ae0
push 0x75e0
lea eax, [ebp - 0x18]
push eax
push 0x1ad3
push 0x2002
lea eax, [ebp - 0x24]
push eax
call fcn.00461e73
add esp, 0x28
push 0x4542
push 0x2db7
push 1
push 0
push 0x46a7
lea eax, [ebp - 0x18]
push eax
push 0x5399
push 0x5d54
call fcn.00462a3c
add esp, 0x20
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x18], 0
jbe 0x46488d
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x18]
sub ecx, dword [eax]
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + 4]
sub eax, ecx
mov ecx, dword [ebp - 0x14]
xor edx, edx
div dword [ecx + 0x18]
cmp eax, 0xc
jbe 0x464861
mov dword [ebp - 0x1f8], 0xc
jmp 0x46487f
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x18]
sub ecx, dword [eax]
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + 4]
sub eax, ecx
mov ecx, dword [ebp - 0x14]
xor edx, edx
div dword [ecx + 0x18]
mov dword [ebp - 0x1f8], eax
mov eax, dword [ebp - 0x1f8]
mov dword [ebp - 0x1e0], eax
jmp 0x464894
and dword [ebp - 0x1e0], 0
mov eax, dword [ebp - 0x1e0]
mov dword [ebp - 0x1fc], eax
and dword [ebp - 0xc8], 0
jmp 0x4648b6
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0xc8]
cmp ecx, dword [eax + 0x18]
jae 0x464ba0
push dword [ebp - 0x1fc]
mov eax, dword [ebp - 0x1fc]
cdq
sub eax, edx
sar eax, 1
push eax
call fcn.0045efc8
pop ecx
pop ecx
mov dword [ebp - 0x1b4], eax
push dword [ebp - 0x1b4]
lea eax, [ebp - 0x368]
push eax
call fcn.0045f443
pop ecx
pop ecx
mov dword [ebp - 0x1b8], 0x4534
mov dword [ebp - 0x240], 0xaa977c
cmp dword [ebp - 0x1b8], 0x4745
jle 0x464a17
and dword [ebp - 0xc0], 0
jmp 0x464935
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0x4ca9
jge 0x464a0f
and dword [ebp - 0x7c], 0
jmp 0x464952
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0x5034
jge 0x464a0a
and dword [ebp - 0xb0], 0
jmp 0x464975
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0x583b
jge 0x464a05
and dword [ebp - 0xb8], 0
jmp 0x46499b
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0x59dd
jge 0x464a00
mov eax, dword [ebp - 0x7c]
cdq
idiv dword [ebp - 0xb0]
add edx, dword [ebp - 0xb8]
xor edx, dword [ebp - 0xc0]
mov eax, edx
cdq
mov dword [ebp - 0x2c0], eax
mov dword [ebp - 0x2bc], edx
push dword [ebp - 0x2bc]
push dword [ebp - 0x2c0]
lea ecx, [ebp - 0x3f8]
call fcn.00401a21
pop ecx
pop ecx
mov ecx, eax
call fcn.00408e8d
push eax
call fcn.004a3217
pop ecx
lea ecx, [ebp - 0x3f8]
call fcn.00408e83
jmp 0x46498e
jmp 0x464968
jmp 0x46494b
jmp 0x464928
push 0
call dword [0xac3164]
lea eax, [ebp - 0x14]
push eax
push 0x535
lea eax, [ebp - 0xc8]
push eax
push 0x6429
push 0x2103
push 0x64e
push 0x30ca
push 1
push 1
push 1
lea eax, [ebp - 0x18]
push eax
push 0x5281
push 0x7df6
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x24]
push eax
call fcn.00462f39
add esp, 0x3c
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0x1b8], 0x44ae
jge 0x464a7e
push dword [ebp - 0x240]
call fcn.004a3217
pop ecx
jmp 0x464a9a
or dword [ebp - 4], 0xffffffff
jmp 0x464aa4
lea eax, [ebp - 0x18]
push eax
push 0x618b
push 0x4b9a
push 0x590d
lea eax, [ebp - 0x24]
push eax
push 0x2de1
push 0x1695
push 0x2bcf
lea eax, [ebp - 0x1b4]
push eax
push 0x17f8
push 0x7ac9
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x368]
push eax
push 1
push 0x490d
push 0
push 1
push 0x20f5
call fcn.004630c7
add esp, 0x48
push 0x6497
push 0x72e8
push 0x2c28
push 0x250d
lea eax, [ebp - 0x18]
push eax
push 0x238c
push 0x7394
push 1
push 0
push 1
push 0x68e8
push 0x485c
lea eax, [ebp - 0x1b4]
push eax
push 0x6dc8
push 0x1407
call fcn.00462f39
add esp, 0x3c
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x24]
mov byte [ecx + eax], 0
push 0x195
push 0x563c
push 0x3aac
push 0x33fe
lea eax, [ebp - 0x18]
push eax
push 1
push 1
push 0x1260
push 0
push 0x44ac
push 0x13e
push 0x235f
call fcn.00462749
add esp, 0x30
lea ecx, [ebp - 0x368]
call fcn.0040915a
jmp 0x4648a9
and dword [ebp - 0x44], 0
jmp 0x464bad
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x18]
sub ecx, dword [eax]
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + 4]
sub eax, ecx
cmp dword [ebp - 0x44], eax
jae 0x464bd4
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x24]
mov byte [ecx + eax], 0
jmp 0x464ba6
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + 4]
sub eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x34]
mov dword [ecx + 4], eax
lea ecx, [ebp - 0x398]
call fcn.0040915a
lea ecx, [ebp - 0x380]
call fcn.0040915a
jmp 0x464ee4
mov eax, dword [ebp - 0x340]
mov dword [ebp - 0x258], eax
mov eax, dword [ebp - 0x248]
mov dword [ebp - 0x260], eax
mov eax, dword [ebp - 0x304]
mov dword [ebp - 0x268], eax
mov eax, dword [ebp - 0x250]
mov dword [ebp - 0x314], eax
mov eax, dword [ebp - 0x32c]
mov dword [ebp - 0x270], eax
mov dword [ebp - 0x1bc], 0x7f0
mov dword [ebp - 0x30c], 0xaa97a8
cmp dword [ebp - 0x1bc], 0xbac
jle 0x464d00
and dword [ebp - 0xd0], 0
jmp 0x464c74
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0x185f
jge 0x464cf5
and dword [ebp - 0xd8], 0
jmp 0x464c96
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0x2848
jge 0x464cf0
mov eax, dword [ebp - 0xd0]
imul eax, dword [ebp - 0xd8]
cdq
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2c8], edx
push dword [ebp - 0x2c8]
push dword [ebp - 0x2cc]
lea ecx, [ebp - 0x428]
call fcn.00401a21
pop ecx
pop ecx
mov ecx, eax
call fcn.00408e8d
push eax
call fcn.004a3217
pop ecx
lea ecx, [ebp - 0x428]
call fcn.00408e83
jmp 0x464c89
jmp 0x464c67
push 0xbc4
call dword [0xac30bc]
mov eax, dword [ebp - 0x258]
mov dword [ebp - 0x344], eax
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0x1bc], 0x5eb
jge 0x464d2b
push dword [ebp - 0x30c]
call fcn.004a3217
pop ecx
jmp 0x464d47
or dword [ebp - 4], 0xffffffff
jmp 0x464d51
mov dword [ebp - 0x1c4], 0x28a0
mov dword [ebp - 0x34c], 0xaa9808
cmp dword [ebp - 0x1c4], 0x2929
jle 0x464e3b
and dword [ebp - 0xe0], 0
jmp 0x464d8b
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0x2e37
jge 0x464e3b
and dword [ebp - 0xe8], 0
jmp 0x464db1
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0x72e9
jge 0x464e36
and dword [ebp - 0x80], 0
jmp 0x464dca
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0x1f07
jge 0x464e31
and dword [ebp - 0x88], 0
jmp 0x464de9
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0x69c1
jge 0x464e2f
mov eax, dword [ebp - 0xe0]
add eax, dword [ebp - 0xe8]
add eax, dword [ebp - 0x80]
and eax, dword [ebp - 0x88]
cdq
mov dword [ebp - 0x2d8], eax
mov dword [ebp - 0x2d4], edx
push dword [ebp - 0x2d4]
push dword [ebp - 0x2d8]
mov ecx, 0xac0918
call fcn.00408e98
jmp 0x464ddc
jmp 0x464dc3
jmp 0x464da4
jmp 0x464d7e
mov eax, dword [ebp - 0x260]
mov dword [ebp - 0x288], eax
mov dword [ebp - 4], 0x10
cmp dword [ebp - 0x1c4], 0x275e
jge 0x464e6a
mov edx, dword [ebp - 0x34c]
mov ecx, 0xac0918
call fcn.0040bb10
jmp 0x464e86
or dword [ebp - 4], 0xffffffff
jmp 0x464e90
mov eax, dword [ebp - 0x268]
mov dword [ebp - 0x27c], eax
mov eax, dword [ebp - 0x314]
mov dword [ebp - 0x31c], eax
mov eax, dword [ebp - 0x270]
mov dword [ebp - 0x334], eax
push 0
mov eax, dword [ebp - 0x334]
push dword [eax]
mov eax, dword [ebp - 0x27c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x31c]
add eax, dword [ecx]
mov ecx, dword [ebp - 0x288]
mov ecx, dword [ecx]
add ecx, eax
push ecx
mov ecx, dword [ebp - 0x344]
call fcn.00467b88
jmp 0x4651bd
mov eax, dword [ebp + 0x48]
mov dword [ebp - 0x2b8], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x2ac], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x2fc], eax
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0x2a0], eax
lea eax, [ebp + 0x18]
mov dword [ebp - 0x324], eax
mov eax, dword [ebp + 0x44]
mov dword [ebp - 0x234], eax
mov eax, dword [ebp + 0x40]
mov dword [ebp - 0x22c], eax
mov dword [ebp - 0x1cc], 0x5036
mov dword [ebp - 0x294], 0xaa9870
cmp dword [ebp - 0x1cc], 0x540e
jle 0x464fe2
and dword [ebp - 0x90], 0
jmp 0x464f62
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0x2e63
jge 0x464fe2
and dword [ebp - 0x98], 0
jmp 0x464f84
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0x7c59
jge 0x464fdd
mov eax, dword [ebp - 0x90]
or eax, dword [ebp - 0x98]
cdq
mov dword [ebp - 0x2e4], eax
mov dword [ebp - 0x2e0], edx
push dword [ebp - 0x2e0]
push dword [ebp - 0x2e4]
lea ecx, [ebp - 0x458]
call fcn.00401a21
pop ecx
pop ecx
mov ecx, eax
call fcn.00408e8d
push eax
call fcn.004a3217
pop ecx
lea ecx, [ebp - 0x458]
call fcn.00408e83
jmp 0x464f77
jmp 0x464f55
mov eax, dword [ebp + 0x38]
mov dword [ebp - 0x330], eax
mov dword [ebp - 4], 0x12
cmp dword [ebp - 0x1cc], 0x4f33
jge 0x46500a
push dword [ebp - 0x294]
call fcn.004a3217
pop ecx
jmp 0x465026
or dword [ebp - 4], 0xffffffff
jmp 0x465030
mov eax, dword [ebp + 0x30]
mov dword [ebp - 0x300], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x23c], eax
mov eax, dword [ebp - 0x324]
movzx eax, byte [eax]
test eax, eax
je 0x465103
mov eax, dword [ebp - 0x2a0]
mov dword [ebp - 0x308], eax
mov eax, dword [ebp - 0x2fc]
mov dword [ebp - 0x2c4], eax
mov eax, dword [ebp - 0x2ac]
mov dword [ebp - 0x310], eax
mov eax, dword [ebp - 0x300]
mov dword [ebp - 0x2d0], eax
mov eax, dword [ebp - 0x2b8]
mov dword [ebp - 0x318], eax
mov eax, dword [ebp - 0x308]
mov dword [ebp - 0x2f0], eax
mov eax, dword [ebp - 0x2c4]
mov dword [ebp - 0x328], eax
mov eax, dword [ebp - 0x310]
mov dword [ebp - 0x2e8], eax
mov eax, dword [ebp - 0x2d0]
mov dword [ebp - 0x320], eax
mov eax, dword [ebp - 0x318]
mov dword [ebp - 0x2dc], eax
push 0
mov eax, dword [ebp - 0x2dc]
push dword [eax]
mov eax, dword [ebp - 0x320]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x2e8]
mov ecx, dword [ecx]
add ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x328]
mov eax, dword [eax]
add eax, ecx
push eax
mov ecx, dword [ebp - 0x2f0]
call fcn.00467b88
jmp 0x4651bd
mov eax, dword [ebp - 0x330]
mov dword [ebp - 0x244], eax
mov eax, dword [ebp - 0x22c]
mov dword [ebp - 0x24c], eax
mov eax, dword [ebp - 0x234]
mov dword [ebp - 0x254], eax
mov eax, dword [ebp - 0x23c]
mov dword [ebp - 0x25c], eax
mov eax, dword [ebp - 0x244]
mov dword [ebp - 0x1d4], eax
mov eax, dword [ebp - 0x24c]
mov dword [ebp - 0x264], eax
mov eax, dword [ebp - 0x254]
mov dword [ebp - 0x1e4], eax
mov eax, dword [ebp - 0x25c]
mov dword [ebp - 0x1dc], eax
mov ecx, dword [ebp - 0x1d4]
call fcn.0040ab83
mov ecx, dword [ebp - 0x264]
cmp eax, dword [ecx]
je 0x4651bd
push 0x5243
push 0
push dword [ebp - 0x1dc]
push 0x3326
push 1
push dword [ebp - 0x1e4]
call fcn.00461a26
add esp, 0x18
push dword [ebp - 0x1d4]
push dword [ebp - 0x1dc]
push 0
push dword [ebp - 0x1e4]
push 0x5124
call fcn.00462194
add esp, 0x14
jmp 0x465163
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret