Function at 0x47c61b
Capabilities:
Accept command line arguments
Authenticate hmac
Encrypt data using speck
Get disk information

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4bcd09
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x22d0
call fcn.004b8740
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 0x20]
test eax, eax
je 0x48da3d
lea eax, [ebp + 0x14]
mov dword [ebp - 0x1380], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x1348], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x1388], eax
lea eax, [ebp + 0xc]
mov dword [ebp - 0x1350], eax
lea eax, [ebp + 0x18]
mov dword [ebp - 0x12bc], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1390], eax
mov eax, dword [ebp - 0x12bc]
movzx eax, byte [eax]
test eax, eax
je 0x48d9ce
mov eax, dword [ebp - 0x1380]
mov dword [ebp - 0x1398], eax
mov eax, dword [ebp - 0x1388]
mov dword [ebp - 0x1320], eax
mov eax, dword [ebp - 0x1390]
mov dword [ebp - 0x1328], eax
mov eax, dword [ebp - 0x1398]
movzx eax, byte [eax]
test eax, eax
je 0x48d957
mov byte [ebp - 0x21], 0
mov dword [ebp - 0x4a4], 0x283d1f0d
mov dword [ebp - 0xb98], 0x3288
mov dword [ebp - 0x13a0], str.jxkimcb_mjicindbr_sdn_jhmgems_lcyjy
cmp dword [ebp - 0xb98], 0x3476
jle 0x47c7a6
and dword [ebp - 0x5e4], 0
jmp 0x47c714
mov eax, dword [ebp - 0x5e4]
inc eax
mov dword [ebp - 0x5e4], eax
cmp dword [ebp - 0x5e4], 0x3b30
jge 0x47c7a6
and dword [ebp - 0x448], 0
jmp 0x47c73a
mov eax, dword [ebp - 0x448]
inc eax
mov dword [ebp - 0x448], eax
cmp dword [ebp - 0x448], 0x7408
jge 0x47c7a1
and dword [ebp - 0x2f0], 0
jmp 0x47c75c
mov eax, dword [ebp - 0x2f0]
inc eax
mov dword [ebp - 0x2f0], eax
cmp dword [ebp - 0x2f0], 0x58c2
jge 0x47c79f
mov eax, dword [ebp - 0x448]
sub eax, dword [ebp - 0x2f0]
or eax, dword [ebp - 0x5e4]
cdq
mov dword [ebp - 0x13bc], eax
mov dword [ebp - 0x13b8], edx
push dword [ebp - 0x13b8]
push dword [ebp - 0x13bc]
mov ecx, 0xace058
call fcn.004063d1
jmp 0x47c74f
jmp 0x47c72d
jmp 0x47c707
mov dword [ebp - 0x2b0], 0xe2ad21dd
and dword [ebp - 4], 0
cmp dword [ebp - 0xb98], 0x3246
jge 0x47c7d0
mov edx, dword [ebp - 0x13a0]
mov ecx, 0xace058
call fcn.00409042
jmp 0x47c7ec
or dword [ebp - 4], 0xffffffff
jmp 0x47c7f6
mov dword [ebp - 0x794], 0x2130bec3
mov dword [ebp - 0x68], 0
jmp 0x47c810
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 3
jge 0x47c826
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x7d4], 0xa8eac8b1
jmp 0x47c809
mov dword [ebp - 0x68], 0
jmp 0x47c836
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 2
jge 0x47c849
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x50], 0xffffffff
jmp 0x47c82f
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x50], 0
jmp 0x47c86e
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x50]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x50], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x50], 2
jg 0x47ca8a
mov dword [ebp - 0x1f4], 0xfffffffa
mov dword [ebp - 0x2f4], 0
jmp 0x47c8a2
mov eax, dword [ebp - 0x2f4]
inc eax
mov dword [ebp - 0x2f4], eax
cmp dword [ebp - 0x2f4], 1
jge 0x47c8be
mov eax, dword [ebp - 0x2f4]
mov dword [ebp + eax*4 - 0x7bc], 0xfffffffb
jmp 0x47c895
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x50]
cmp dword [ebp + eax*4 - 0x7d4], 0xb8f3d421
jne 0x47c8e1
mov dword [ebp - 0x13a8], 1
jmp 0x47c8e8
and dword [ebp - 0x13a8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x50]
mov eax, dword [ebp + eax*4 - 0x7d4]
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x50]
sub eax, dword [ebp + ecx*4 - 0x7d4]
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x50]
cmp eax, dword [ebp + ecx*4 - 0x7d4]
je 0x47c929
mov dword [ebp - 0x1000], 1
jmp 0x47c930
and dword [ebp - 0x1000], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x50]
cmp dword [ebp - 0x1000], eax
jne 0x47c94e
mov dword [ebp - 0x1008], 1
jmp 0x47c955
and dword [ebp - 0x1008], 0
mov eax, dword [ebp - 0x1008]
mov dword [ebp - 0x1f4], eax
mov eax, dword [ebp - 0x1f4]
mov dword [ebp - 0x1f94], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x50]
mov eax, dword [ebp + eax*4 - 0x7d4]
mov dword [ebp - 0x1fcc], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp + eax - 0x7bc], ecx
push 4
pop eax
shl eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x7bc]
cmp dword [ebp + eax - 0x50], ecx
jg 0x47c9bc
mov dword [ebp - 0x13b0], 1
jmp 0x47c9c3
and dword [ebp - 0x13b0], 0
mov eax, dword [ebp - 0x1f4]
mov dword [ebp - 0x1c2c], eax
mov eax, dword [ebp - 0x4a4]
mov dword [ebp - 0x1dc4], eax
mov eax, dword [ebp - 0x4a4]
mov dword [ebp - 0x1c34], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x50]
mov eax, dword [ebp + eax*4 - 0x7d4]
mov dword [ebp - 0x1f34], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x50]
mov eax, dword [ebp + eax*4 - 0x7d4]
mov dword [ebp - 0x1c3c], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x50]
mov eax, dword [ebp + eax*4 - 0x7d4]
mov dword [ebp - 0x1dd4], eax
cmp dword [ebp - 0x1f4], 0x9a48
jg 0x47ca44
mov dword [ebp - 0x1010], 1
jmp 0x47ca4b
and dword [ebp - 0x1010], 0
mov eax, dword [ebp - 0x1010]
sub eax, 0x60bae246
je 0x47ca74
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x7bc], 0
je 0x47ca74
mov dword [ebp - 0x158c], 1
jmp 0x47ca7b
and dword [ebp - 0x158c], 0
mov dword [ebp - 0x1f4], 0xf22a1efe
jmp 0x47c859
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x50], 0
je 0x47cc26
cmp dword [ebp - 0x2b0], 0
jne 0x47cbd9
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x7d4], 0
je 0x47cacd
mov eax, 0x6367
test eax, eax
je 0x47cacd
mov dword [ebp - 0x1018], 1
jmp 0x47cad4
and dword [ebp - 0x1018], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x50]
cmp dword [ebp - 0x1018], eax
jne 0x47caf6
xor eax, eax
je 0x47caf6
mov dword [ebp - 0x1020], 1
jmp 0x47cafd
and dword [ebp - 0x1020], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x7d4]
cmp dword [ebp - 0x1020], eax
jg 0x47cb1d
mov dword [ebp - 0x1028], 1
jmp 0x47cb24
and dword [ebp - 0x1028], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x50]
cmp dword [ebp - 0x1028], eax
je 0x47cb42
mov dword [ebp - 0x103c], 1
jmp 0x47cb49
and dword [ebp - 0x103c], 0
mov eax, dword [ebp - 0x4a4]
imul eax, dword [ebp - 0x103c]
cmp eax, 0xda79815c
jb 0x47cb69
mov dword [ebp - 0x1594], 1
jmp 0x47cb70
and dword [ebp - 0x1594], 0
mov eax, dword [ebp - 0x2b0]
mov dword [ebp - 0x1c44], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x50]
mov dword [ebp - 0x1f58], eax
xor eax, eax
inc eax
imul eax, eax, 0xffff
test eax, eax
jb 0x47cbbb
cmp dword [ebp - 0x2b0], 0
je 0x47cbbb
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x50], 0
je 0x47cbbb
mov dword [ebp - 0x1044], 1
jmp 0x47cbc2
and dword [ebp - 0x1044], 0
imul eax, dword [ebp - 0x1044], 0xc16
test eax, eax
jne 0x47cbd9
and dword [ebp - 0x104c], 0
jmp 0x47cbe3
mov dword [ebp - 0x104c], 1
cmp dword [ebp - 0x104c], 0x8e87
jle 0x47cbfb
mov dword [ebp - 0x1054], 1
jmp 0x47cc02
and dword [ebp - 0x1054], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x50]
add eax, dword [ebp - 0x1054]
cmp dword [ebp - 0x4a4], eax
jg 0x47cc26
mov dword [ebp - 0x7c4], 1
jmp 0x47cc2d
and dword [ebp - 0x7c4], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x7c4]
mov dword [ebp + eax - 0x50], ecx
mov eax, dword [ebp - 0x7c4]
mov dword [ebp - 0x794], eax
mov eax, dword [ebp - 0x2b0]
cmp dword [ebp - 0x794], eax
jl 0x47cc6d
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x50], 0
jne 0x47cc6d
and dword [ebp - 0x105c], 0
jmp 0x47cc77
mov dword [ebp - 0x105c], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7d4]
imul eax, dword [ebp - 0x105c]
test eax, eax
je 0x47ccb9
push 1
push 0
push 1
lea eax, [ebp - 0x794]
push eax
push 1
push 0x5213
push 0x25f1
lea eax, [ebp - 0x2b0]
push eax
call fcn.00476526
add esp, 0x20
jmp 0x47cccc
push 0
push 0x6b19
push 0
push 0
call fcn.0045c039
add esp, 0x10
mov dword [ebp - 0xa4], 4
mov dword [ebp - 0x15a4], 0xb27fa3df
mov dword [ebp - 0xa4], 2
jmp 0x47ccf9
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 7
jl 0x47ce89
push 1
lea ecx, [ebp - 0x1158]
call fcn.00406726
mov dword [ebp - 0x107c], 0x6b42be19
mov dword [ebp - 0x15ac], 0x4ab653b1
mov dword [ebp - 0x9c], 0
jmp 0x47cd40
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 1
jge 0x47cd5f
push dword [ebp - 0x9c]
lea ecx, [ebp - 0x1158]
call fcn.00406814
or dword [eax], 0xffffffff
jmp 0x47cd33
mov dword [ebp - 0x9c], 0
jmp 0x47cd78
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 1
jge 0x47cd94
mov eax, dword [ebp - 0x9c]
mov dword [ebp + eax*4 - 0x1074], 0xfffffffb
jmp 0x47cd6b
push 0
lea ecx, [ebp - 0x1158]
call fcn.00406814
cmp dword [eax], 0
jne 0x47cdb2
mov dword [ebp - 0x1064], 1
jmp 0x47cdb9
and dword [ebp - 0x1064], 0
mov eax, dword [ebp - 0xa4]
inc eax
imul eax, dword [ebp - 0x1064]
cmp eax, dword [ebp - 0xa4]
je 0x47cddb
mov dword [ebp - 0x159c], 1
jmp 0x47cde2
and dword [ebp - 0x159c], 0
push 0
lea ecx, [ebp - 0x1158]
call fcn.00406814
push 0
lea ecx, [ebp - 0x1158]
call fcn.00406814
mov eax, dword [eax]
sub eax, dword [ebp - 0xa4]
jne 0x47ce18
cmp dword [ebp - 0xa4], 0
jne 0x47ce18
and dword [ebp - 0x106c], 0
jmp 0x47ce22
mov dword [ebp - 0x106c], 1
mov eax, dword [ebp - 0x106c]
mov dword [ebp - 0x15a4], eax
push 0
lea ecx, [ebp - 0x1158]
call fcn.00406814
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1074]
mov dword [ebp - 0x1c4c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1074]
mov dword [ebp - 0x1de4], eax
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x107c], eax
mov eax, dword [ebp - 0x107c]
mov dword [ebp - 0x15ac], eax
lea ecx, [ebp - 0x1158]
call fcn.004067f8
jmp 0x47ccec
mov dword [ebp - 0x1c54], 0x624039b6
mov byte [ebp - 0xf1], 0
push 0x477f
push 0x751c
push 0x2980
push 0x50dd
push 0x7f01
push 0
push 1
push 0x5847
push 0
lea eax, [ebp - 0xf1]
push eax
push 0x5734
push 1
call fcn.0046fe98
add esp, 0x30
push 0
push 1
push 0x5b7c
push 0x78cc
push 1
push 0
push 0x5ac3
push 0x15fc
push 0x17fb
push 0x185e
push 1
push 0x372a
call fcn.0046c018
add esp, 0x30
push 3
lea ecx, [ebp - 0x17fc]
call fcn.00406726
mov dword [ebp - 0x2a4], 1
push 1
lea ecx, [ebp - 0x18dc]
call fcn.00406726
push 0x7a7b
push 1
push 0x769f
push 0
lea eax, [ebp - 0x17c]
push eax
push 0x1d2c
push 1
push 0
push 0x7f43
push 0x2d80
lea eax, [ebp - 0x17fc]
push eax
call fcn.00466d38
add esp, 0x2c
mov dword [ebp - 0x17c], 0
jmp 0x47cf7d
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 2
jge 0x47cf99
mov eax, dword [ebp - 0x17c]
mov dword [ebp + eax*4 - 0x1a08], 0x53072226
jmp 0x47cf70
push 1
push 0x49cb
push 0x2528
lea eax, [ebp - 0x18dc]
push eax
push 0
push 0x6396
push 1
lea eax, [ebp - 0x17c]
push eax
push 0x295f
push 1
call fcn.00459b2a
add esp, 0x28
mov dword [ebp - 0x2a4], 2
jmp 0x47cfe4
mov eax, dword [ebp - 0x2a4]
dec eax
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 0
jl 0x47d275
mov dword [ebp - 0x1fc], 0x1a9565e0
mov dword [ebp - 0x108c], 0x218e9934
mov dword [ebp - 0x15b4], 0x8d7c584e
mov dword [ebp - 0x15c4], 0xffffffff
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x1a08], 0xfffffff7
mov dword [ebp - 0x1fc], 0
jmp 0x47d043
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 2
jg 0x47d270
push 3
lea ecx, [ebp - 0x1164]
call fcn.00406726
mov dword [ebp - 0x1f44], 0x3997b09b
mov dword [ebp - 0x15bc], 0x8f62c4df
mov dword [ebp - 0x2fc], 0
jmp 0x47d08a
mov eax, dword [ebp - 0x2fc]
inc eax
mov dword [ebp - 0x2fc], eax
cmp dword [ebp - 0x2fc], 3
jge 0x47d0ac
push dword [ebp - 0x2fc]
lea ecx, [ebp - 0x1164]
call fcn.00406814
mov dword [eax], 0x76c51653
jmp 0x47d07d
push 2
lea ecx, [ebp - 0x1164]
call fcn.00406814
mov dword [eax], 2
jmp 0x47d0e5
push 2
lea ecx, [ebp - 0x1164]
call fcn.00406814
mov dword [ebp - 0x1084], eax
mov eax, dword [ebp - 0x1084]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x1084]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0x1164]
call fcn.00406814
cmp dword [eax], 0
jl 0x47d260
or dword [ebp - 0x18b0], 0xffffffff
or dword [ebp - 0x18ac], 0xffffffff
or dword [ebp - 0x18a8], 0xffffffff
or dword [ebp - 0x18a4], 0xffffffff
lea ecx, [ebp - 0x7a9]
call fcn.00406823
push eax
lea eax, [ebp - 0x18a0]
push eax
lea eax, [ebp - 0x18b0]
push eax
lea ecx, [ebp - 0x204c]
call fcn.00406826
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1d80]
call fcn.004067d2
push 1
lea ecx, [ebp - 0x1724]
call fcn.00406726
mov dword [ebp - 0x57c], 0
jmp 0x47d172
mov eax, dword [ebp - 0x57c]
inc eax
mov dword [ebp - 0x57c], eax
cmp dword [ebp - 0x57c], 1
jge 0x47d194
push dword [ebp - 0x57c]
lea ecx, [ebp - 0x1724]
call fcn.00406814
mov dword [eax], 0x58331c58
jmp 0x47d165
push 0
push 1
push 0x3b85
lea eax, [ebp - 0x108c]
push eax
lea eax, [ebp - 0x1d80]
push eax
lea eax, [ebp - 0x1724]
push eax
push 1
push 0x780e
lea eax, [ebp - 0x17fc]
push eax
push 0x3ca2
push 0x57cb
push 1
push 1
push 0xf33
lea eax, [ebp - 0x1fc]
push eax
call fcn.0045f48e
add esp, 0x3c
lea eax, [ebp - 0x17fc]
push eax
push 0x391a
lea eax, [ebp - 0x15b4]
push eax
lea eax, [ebp - 0x18dc]
push eax
lea eax, [ebp - 0x15bc]
push eax
lea eax, [ebp - 0x15c4]
push eax
push 0x7dd1
lea eax, [ebp - 0x1164]
push eax
push 1
lea eax, [ebp - 0x108c]
push eax
lea eax, [ebp - 0x1724]
push eax
push 1
lea eax, [ebp - 0x2a4]
push eax
push 0
lea eax, [ebp - 0x1fc]
push eax
push 0x2a17
call fcn.00469915
add esp, 0x40
lea ecx, [ebp - 0x1724]
call fcn.004067f8
lea ecx, [ebp - 0x1d80]
call fcn.004067f8
jmp 0x47d0c1
lea ecx, [ebp - 0x1164]
call fcn.004067f8
jmp 0x47d036
jmp 0x47cfd7
lea ecx, [ebp - 0x18dc]
call fcn.004067f8
lea ecx, [ebp - 0x17fc]
call fcn.004067f8
mov dword [ebp - 0x304], 0x5540d7f8
mov dword [ebp - 0x1c5c], 1
mov dword [ebp - 0x1df4], 0
mov dword [ebp - 0x61c], 0x21324561
push 1
lea ecx, [ebp - 0x1d90]
call fcn.00406726
mov dword [ebp - 0x1c64], 0
mov dword [ebp - 0x15cc], 1
push 1
lea eax, [ebp - 0x1d90]
push eax
push 0x32a5
push 0x247d
push 0x54cd
push 0
push 1
push 0x987
push 1
lea eax, [ebp - 0x1f5c]
push eax
call fcn.004793ec
add esp, 0x28
mov dword [ebp - 0x304], 0
jmp 0x47d31f
mov eax, dword [ebp - 0x304]
dec eax
mov dword [ebp - 0x304], eax
cmp dword [ebp - 0x304], 0xffffffe3
jne 0x47d4a5
mov dword [ebp - 0x30c], 0x13dce9d0
mov dword [ebp - 0x1c6c], 1
mov dword [ebp - 0x1e04], 0
mov dword [ebp - 0x4ac], 0
jmp 0x47d363
mov eax, dword [ebp - 0x4ac]
inc eax
mov dword [ebp - 0x4ac], eax
cmp dword [ebp - 0x4ac], 2
jge 0x47d37f
mov eax, dword [ebp - 0x4ac]
mov dword [ebp + eax*4 - 0x1a10], 0x21ec2184
jmp 0x47d356
mov dword [ebp - 0x30c], 0
jmp 0x47d398
mov eax, dword [ebp - 0x30c]
inc eax
mov dword [ebp - 0x30c], eax
cmp dword [ebp - 0x30c], 0x1d
jge 0x47d4a0
mov dword [ebp - 0x1c74], 1
mov dword [ebp - 0x1f54], 0xfffffffd
mov dword [ebp - 0x1c7c], 0x1ea66e58
mov dword [ebp - 0x1e14], 0
mov dword [ebp - 0x1c84], 0x69161d59
mov dword [ebp - 0x1f64], 0x4c3f4f88
mov dword [ebp - 0x1c8c], 0xfffffff8
mov dword [ebp - 0x1e24], 1
push 3
lea ecx, [ebp - 0x18e8]
call fcn.00406726
lea eax, [ebp - 0x18e8]
push eax
push 0
push 0x5f02
push 1
push 1
push 1
push 0xb19
push 0x7ab
push 0x5d5
push 0x6787
push 1
push 0x4a86
lea eax, [ebp - 0x1c94]
push eax
call fcn.0046f99f
add esp, 0x34
push 0x2d00
push 0x3008
push 0x4d64
push 0x34c4
push 1
lea eax, [ebp - 0x15cc]
push eax
push 0
push 0
push 0xd21
push 0x1810
call fcn.004790f5
add esp, 0x28
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1a10], 0
je 0x47d490
lea ecx, [ebp - 0x18e8]
call fcn.004067f8
jmp 0x47d4a0
lea ecx, [ebp - 0x18e8]
call fcn.004067f8
jmp 0x47d38b
jmp 0x47d312
mov dword [ebp - 0x61c], 0
jmp 0x47d4be
mov eax, dword [ebp - 0x61c]
dec eax
mov dword [ebp - 0x61c], eax
cmp dword [ebp - 0x61c], 0xfffffffa
jle 0x47d503
push 1
push 0x5f11
push 0x21df
push 0xdb3
push 0
push 0
push 1
push 0x14c2
push 0x4e64
push 0x5e09
push 1
push 0x368b
push 0x6c66
call fcn.00471bb3
add esp, 0x34
jmp 0x47d4b1
lea ecx, [ebp - 0x1d90]
call fcn.004067f8
mov dword [ebp - 0x33c], 0x283d1f0d
mov dword [ebp - 0x15d4], 0xfe0a8eac
push 0x2958
push 1
push 0
push 1
lea eax, [ebp - 0x15d4]
push eax
push 0x7b05
push 0x1215
push 0x2eb9
push 0
call fcn.00468dce
add esp, 0x24
mov byte [ebp - 0x119], 0
push 0x38a9
lea eax, [ebp - 0x119]
push eax
push 0x703a
push 1
push 0x33f8
push 0x1542
push 0x60b5
push 1
push 0xee5
push 1
push 0
push 0x6518
call fcn.00462884
add esp, 0x30
mov dword [ebp - 0x210], 0xe2ad21dd
push 1
lea ecx, [ebp - 0x1da0]
call fcn.00406726
mov dword [ebp - 0x314], 0x4a12b57e
push 0
push 0
lea eax, [ebp - 0x1da0]
push eax
push 0
lea eax, [ebp - 0x1f6c]
push eax
push 0x3b91
push 0x32b8
call fcn.00474dcc
add esp, 0x1c
mov dword [ebp - 0x314], 0
jmp 0x47d5ee
mov eax, dword [ebp - 0x314]
dec eax
mov dword [ebp - 0x314], eax
cmp dword [ebp - 0x314], 0
jl 0x47d635
mov byte [ebp - 0xf3], 0
push 0x4047
push 1
push 0x7b28
push 0x36df
push 0
push 0xe12
push 1
push 1
lea eax, [ebp - 0xf3]
push eax
push 0x6e31
push 0x5ffd
call fcn.0046c7e5
add esp, 0x2c
jmp 0x47d5e1
mov byte [ebp - 0x171], 0
movzx eax, byte [ebp - 0x171]
test eax, eax
je 0x47d666
push 0x7eff
push 4
push 0x3710
push 1
push 0
push 0x3bcf
push 1
call fcn.0046bb6e
add esp, 0x1c
lea ecx, [ebp - 0x1da0]
call fcn.004067f8
mov dword [ebp - 0x1ec], 0x2130bec3
mov dword [ebp - 0xc94], 0xfff7
mov dword [ebp - 0x1c9c], 0x15747814
mov dword [ebp - 0x15dc], 0x76715f0e
mov dword [ebp - 0x31c], 0x7a4bedcc
mov dword [ebp - 0x1e34], 0x23498e64
mov dword [ebp - 0x1ca4], 0xffffffff
mov dword [ebp - 0x10a4], 0
mov dword [ebp - 0x684], 1
mov dword [ebp - 0x734], 0
mov dword [ebp - 0x4b4], 0
jmp 0x47d6ee
mov eax, dword [ebp - 0x4b4]
inc eax
mov dword [ebp - 0x4b4], eax
cmp dword [ebp - 0x4b4], 1
jge 0x47d70a
mov eax, dword [ebp - 0x4b4]
mov dword [ebp + eax*4 - 0x864], 0xff44cacf
jmp 0x47d6e1
mov eax, dword [ebp - 0x10a4]
mov dword [ebp - 0x1f60], eax
mov eax, dword [ebp - 0x31c]
mov dword [ebp - 0x1cac], eax
cmp dword [ebp - 0x684], 0
jne 0x47d73d
mov eax, 0x1fe3
test eax, eax
jne 0x47d73d
and dword [ebp - 0x1094], 0
jmp 0x47d747
mov dword [ebp - 0x1094], 1
mov eax, dword [ebp - 0x1094]
imul eax, dword [ebp - 0x31c]
mov dword [ebp - 0x109c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x109c]
mov dword [ebp + eax - 0x864], ecx
mov eax, dword [ebp - 0x684]
add eax, dword [ebp - 0x109c]
cmp eax, dword [ebp - 0x10a4]
jg 0x47d78d
mov dword [ebp - 0x10ac], 1
jmp 0x47d794
and dword [ebp - 0x10ac], 0
mov eax, dword [ebp - 0x15dc]
cmp dword [ebp - 0x10ac], eax
jne 0x47d7ae
mov dword [ebp - 0x10b4], 1
jmp 0x47d7b5
and dword [ebp - 0x10b4], 0
mov eax, dword [ebp - 0xc94]
cmp dword [ebp - 0x10b4], eax
jne 0x47d7d5
cmp dword [ebp - 0x684], 0
jne 0x47d7d5
and dword [ebp - 0xff8], 0
jmp 0x47d7df
mov dword [ebp - 0xff8], 1
cmp dword [ebp - 0xff8], 0x36fc75df
jl 0x47d7f7
mov dword [ebp - 0x878], 1
jmp 0x47d7fe
and dword [ebp - 0x878], 0
imul eax, dword [ebp - 0x878], 0x71d6
cmp eax, 0x4087
jl 0x47d821
cmp dword [ebp - 0x31c], 0
jne 0x47d821
and dword [ebp - 0x860], 0
jmp 0x47d82b
mov dword [ebp - 0x860], 1
mov eax, dword [ebp - 0x734]
mov ecx, dword [ebp - 0x860]
lea eax, [eax + ecx - 1]
mov ecx, dword [ebp - 0xc94]
mov edx, dword [ebp - 0x734]
inc edx
mov dword [ebp - 0x734], edx
cmp ecx, eax
jg 0x47d86e
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x864], 0
je 0x47d86e
mov dword [ebp - 0xfbc], 1
jmp 0x47d875
and dword [ebp - 0xfbc], 0
mov eax, dword [ebp - 0xfbc]
mov dword [ebp - 0x31c], eax
mov dword [ebp - 0x70], 0
jmp 0x47d891
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 3
jge 0x47d8a7
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0x768], 0xa8eac8b1
jmp 0x47d88a
push 1
lea ecx, [ebp - 0x81c]
call fcn.00406726
mov dword [ebp - 0x2bc], 0xd45b0e82
mov dword [ebp - 0x694], 0x413e458c
push 0x5d9a
push 0x710f
push 0
push 1
push 0x596a
lea eax, [ebp - 0x2b8]
push eax
push 0x7ca7
push 0xd33
push 0x2dfe
push 0x23
push 1
lea eax, [ebp - 0x81c]
push eax
push 0x1813
push 0x7178
push 0x6342
push 1
push 0
push 0x53a
call fcn.00462e1f
add esp, 0x48
mov dword [ebp - 0x2b8], 0
jmp 0x47d935
mov eax, dword [ebp - 0x2b8]
inc eax
mov dword [ebp - 0x2b8], eax
cmp dword [ebp - 0x2b8], 3
jge 0x47d951
mov eax, dword [ebp - 0x2b8]
mov dword [ebp + eax*4 - 0x17f0], 0xc6f1bf50
jmp 0x47d928
push 4
pop eax
shl eax, 1
lea eax, [ebp + eax - 0x17f0]
mov dword [ebp - 0x86c], eax
push 0
lea ecx, [ebp - 0x81c]
call fcn.00406814
mov ecx, dword [ebp - 0x86c]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x86c]
cmp dword [eax], 0
je 0x47dc7e
push 4
pop eax
shl eax, 1
mov esi, dword [ebp + eax - 0x17f0]
push 0
lea ecx, [ebp - 0x81c]
call fcn.00406814
sub esi, dword [eax]
jne 0x47d9fd
push 0
lea ecx, [ebp - 0x81c]
call fcn.00406814
mov eax, dword [eax]
add eax, 3
mov dword [ebp - 0x2bc], eax
cmp dword [ebp - 0x2bc], 0x8364
jne 0x47d9d6
mov dword [ebp - 0x15e4], 1
jmp 0x47d9dd
and dword [ebp - 0x15e4], 0
mov esi, dword [ebp - 0x2bc]
push 0
lea ecx, [ebp - 0x81c]
call fcn.00406814
cmp esi, dword [eax]
jne 0x47d9fd
and dword [ebp - 0xc9c], 0
jmp 0x47da07
mov dword [ebp - 0xc9c], 1
cmp dword [ebp - 0xc9c], 0x34d0
jne 0x47da1f
mov dword [ebp - 0x68c], 1
jmp 0x47da26
and dword [ebp - 0x68c], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x68c]
mov dword [ebp + eax - 0x17f0], ecx
push 0
lea ecx, [ebp - 0x81c]
call fcn.00406814
mov ecx, dword [ebp - 0x68c]
cmp ecx, dword [eax]
jle 0x47dc7e
mov dword [ebp - 0x5ec], 0xed99ea7e
push 1
lea ecx, [ebp - 0x1db0]
call fcn.00406726
mov dword [ebp - 0x584], 0
jmp 0x47da83
mov eax, dword [ebp - 0x584]
inc eax
mov dword [ebp - 0x584], eax
cmp dword [ebp - 0x584], 1
jge 0x47daa5
push dword [ebp - 0x584]
lea ecx, [ebp - 0x1db0]
call fcn.00406814
mov dword [eax], 1
jmp 0x47da76
push 0x6c52
push 0
lea eax, [ebp - 0x694]
push eax
push 0x1b90
push 0x58c3
push 0xb5
push 0
push 0
push 0x7193
push 0x37b1
call fcn.0046cf52
add esp, 0x28
mov dword [ebp - 0x874], 0x6e9
mov dword [ebp - 0x15ec], str.gxlkhvcm_etolpzmz_uks_ntvifbrb_pnf_ralyhrw_qgmulue_wublx_crb_wqb
cmp dword [ebp - 0x874], 0xa26
jle 0x47dbc5
and dword [ebp - 0x324], 0
jmp 0x47db12
mov eax, dword [ebp - 0x324]
inc eax
mov dword [ebp - 0x324], eax
cmp dword [ebp - 0x324], 0x2ea9
jge 0x47dbc5
and dword [ebp - 0x4bc], 0
jmp 0x47db38
mov eax, dword [ebp - 0x4bc]
inc eax
mov dword [ebp - 0x4bc], eax
cmp dword [ebp - 0x4bc], 0x1a6c
jge 0x47dbc0
and dword [ebp - 0x32c], 0
jmp 0x47db5a
mov eax, dword [ebp - 0x32c]
inc eax
mov dword [ebp - 0x32c], eax
cmp dword [ebp - 0x32c], 0x7151
jge 0x47dbbb
mov eax, dword [ebp - 0x324]
mov ecx, dword [ebp - 0x4bc]
shl eax, cl
and eax, dword [ebp - 0x32c]
cdq
mov dword [ebp - 0x13c8], eax
mov dword [ebp - 0x13c4], edx
push dword [ebp - 0x13c4]
push dword [ebp - 0x13c8]
lea ecx, [ebp - 0x2250]
call fcn.00401a01
pop ecx
pop ecx
mov ecx, eax
call fcn.004063c6
push eax
call fcn.004a68c7
pop ecx
lea ecx, [ebp - 0x2250]
call fcn.004063bc
jmp 0x47db4d
jmp 0x47db2b
jmp 0x47db05
mov dword [ebp - 4], 2
cmp dword [ebp - 0x874], 0x676
jge 0x47dbe4
push dword [ebp - 0x15ec]
call fcn.004a68c7
pop ecx
jmp 0x47dc00
or dword [ebp - 4], 0xffffffff
jmp 0x47dc0a
mov dword [ebp - 0x5ec], 0
jmp 0x47dc23
mov eax, dword [ebp - 0x5ec]
dec eax
mov dword [ebp - 0x5ec], eax
cmp dword [ebp - 0x5ec], 0xfffffff0
jge 0x47dc6e
push 0x1cfc
push 0x5296
push 0x6958
push 0x7fcd
push 0x2c94
push 1
push 0x1bb
push 0x1781
push 0x46d5
push 0x4dc7
push 0xafa
push 1
push 0
call fcn.00478946
add esp, 0x34
jmp 0x47dc16
lea ecx, [ebp - 0x1db0]
call fcn.004067f8
jmp 0x47df5b
mov dword [ebp - 0x7c0], 1
mov dword [ebp - 0xcb4], 0xaf47dfb0
mov dword [ebp - 0x8ac], 0x86b464bb
mov dword [ebp - 0x334], 0
jmp 0x47dcb5
mov eax, dword [ebp - 0x334]
inc eax
mov dword [ebp - 0x334], eax
cmp dword [ebp - 0x334], 1
jge 0x47dcd1
mov eax, dword [ebp - 0x334]
mov dword [ebp + eax*4 - 0xb8], 0x2a4f2a6c
jmp 0x47dca8
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb8]
mov dword [ebp - 0x1e44], eax
push 0
lea ecx, [ebp - 0x81c]
call fcn.00406814
cmp dword [eax], 0xfffffffc
jne 0x47dd02
mov dword [ebp - 0xeb4], 1
jmp 0x47dd09
and dword [ebp - 0xeb4], 0
mov eax, dword [ebp - 0x694]
imul eax, dword [ebp - 0xeb4]
test eax, eax
je 0x47dd28
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xb8], 0
push 0xfffffffffffffffc
pop eax
sub eax, 4
cmp dword [ebp - 0x2bc], eax
jge 0x47dd42
mov dword [ebp - 0x87c], 1
jmp 0x47dd49
and dword [ebp - 0x87c], 0
push 0
lea ecx, [ebp - 0x81c]
call fcn.00406814
mov ecx, dword [ebp - 0x87c]
cmp ecx, dword [eax]
jg 0x47dd6c
mov dword [ebp - 0xca4], 1
jmp 0x47dd73
and dword [ebp - 0xca4], 0
push 0
lea ecx, [ebp - 0x81c]
call fcn.00406814
mov ecx, dword [ebp - 0xca4]
cmp ecx, dword [eax]
jge 0x47dd96
mov dword [ebp - 0x884], 1
jmp 0x47dd9d
and dword [ebp - 0x884], 0
imul eax, dword [ebp - 0x884], 0xfffb
test eax, eax
je 0x47ddc7
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xb8], 0
je 0x47ddc7
mov dword [ebp - 0x1048], 1
jmp 0x47ddce
and dword [ebp - 0x1048], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb8]
cmp dword [ebp - 0x1048], eax
jg 0x47ddef
mov dword [ebp - 0x88c], 1
jmp 0x47ddf6
and dword [ebp - 0x88c], 0
mov eax, dword [ebp - 0x88c]
mov dword [ebp - 0x7c0], eax
mov eax, dword [ebp - 0x7c0]
push 4
pop ecx
shl ecx, 1
add eax, dword [ebp + ecx - 0x17f0]
cmp eax, 0x257b06f8
jle 0x47de27
mov dword [ebp - 0xcac], 1
jmp 0x47de2e
and dword [ebp - 0xcac], 0
cmp dword [ebp - 0xcac], 0x6691cfe0
jl 0x47de4c
cmp dword [ebp - 0x7c0], 0
jne 0x47de4c
and dword [ebp - 0x894], 0
jmp 0x47de56
mov dword [ebp - 0x894], 1
mov eax, dword [ebp - 0x694]
cmp dword [ebp - 0x894], eax
jle 0x47de70
mov dword [ebp - 0xebc], 1
jmp 0x47de77
and dword [ebp - 0xebc], 0
cmp dword [ebp - 0xebc], 4
jbe 0x47de8c
mov dword [ebp - 0x89c], 1
jmp 0x47de93
and dword [ebp - 0x89c], 0
mov eax, dword [ebp - 0x89c]
mov dword [ebp - 0xcb4], eax
cmp dword [ebp - 0xcb4], 0
jne 0x47deb8
push 3
pop eax
test eax, eax
jne 0x47deb8
and dword [ebp - 0x8a4], 0
jmp 0x47dec2
mov dword [ebp - 0x8a4], 1
mov eax, dword [ebp - 0x8a4]
inc eax
cmp eax, dword [ebp - 0x2bc]
jne 0x47dedd
mov dword [ebp - 0xfc4], 1
jmp 0x47dee4
and dword [ebp - 0xfc4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb8]
mov dword [ebp - 0x1cb4], eax
mov eax, dword [ebp - 0xfc4]
mov dword [ebp - 0x8ac], eax
mov eax, dword [ebp - 0x8ac]
mov dword [ebp - 0x1fdc], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb8]
mov dword [ebp - 0x1cbc], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xb8], 0xffff
ja 0x47df41
mov dword [ebp - 0xcbc], 1
jmp 0x47df48
and dword [ebp - 0xcbc], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xcbc]
mov dword [ebp + eax - 0xb8], ecx
lea ecx, [ebp - 0x81c]
call fcn.004067f8
mov dword [ebp - 0x70], 0
jmp 0x47df76
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 2
jge 0x47df89
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0x58], 0xffffffff
jmp 0x47df6f
mov dword [ebp - 0x15f4], 7
mov dword [ebp - 0x98], 0
jmp 0x47dfac
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 2
jge 0x47dfc8
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0x790], 0xcb457102
jmp 0x47df9f
mov dword [ebp - 0x98], 0
jmp 0x47dfe1
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 2
jge 0x47dffd
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0x1824], 0xbc00eadd
jmp 0x47dfd4
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x790], 0
je 0x47e0e0
mov eax, dword [ebp - 0x15f4]
mov dword [ebp - 0x1e54], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x790]
mov dword [ebp - 0x1a78], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x790], 5
jae 0x47e04c
mov dword [ebp - 0x8b4], 1
jmp 0x47e053
and dword [ebp - 0x8b4], 0
cmp dword [ebp - 0x8b4], 0
jb 0x47e068
mov dword [ebp - 0xec4], 1
jmp 0x47e06f
and dword [ebp - 0xec4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x790]
cmp eax, dword [ebp - 0xec4]
jl 0x47e090
mov dword [ebp - 0x8bc], 1
jmp 0x47e097
and dword [ebp - 0x8bc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x790]
cmp dword [ebp - 0x8bc], eax
je 0x47e0b8
mov dword [ebp - 0xcc4], 1
jmp 0x47e0bf
and dword [ebp - 0xcc4], 0
mov eax, dword [ebp - 0xcc4]
sub eax, 0x7d612770
imul eax, eax, 0xc8d
test eax, eax
je 0x47e0e0
mov dword [ebp - 0x8c4], 1
jmp 0x47e0e7
and dword [ebp - 0x8c4], 0
push 4
pop eax
shl eax, 0
imul ecx, dword [ebp - 0x8c4], 0xffffffff
cmp dword [ebp + eax - 0x790], ecx
je 0x47e109
mov dword [ebp - 0x10d8], 1
jmp 0x47e110
and dword [ebp - 0x10d8], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x10d8]
mov dword [ebp + eax - 0x790], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1824]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x1824], eax
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x58], 0
jmp 0x47e163
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x58]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x58], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x58], 2
jg 0x47e64e
mov dword [ebp - 0x15fc], 0x67e307b5
push 3
lea ecx, [ebp - 0x1900]
call fcn.00406726
mov dword [ebp - 0x1604], 9
push 0x2f48
push 0x38e7
push 1
lea eax, [ebp - 0x1a80]
push eax
push 0x65cb
push 1
push 1
push 1
push 0
push 0x248c
lea eax, [ebp - 0x1900]
push eax
call fcn.0046b405
add esp, 0x2c
lea eax, [ebp - 0x1900]
push eax
lea eax, [ebp - 0x15fc]
push eax
push 1
push 0
lea eax, [ebp - 0x1604]
push eax
push 0x699b
push 0x25fd
push 0
push 0x2457
push 0
push 1
call fcn.0047a97c
add esp, 0x2c
mov byte [ebp - 0xf5], 0
push 1
push 1
push 0x3260
push 1
push 1
push 0x3334
push 0xb00
lea eax, [ebp - 0xf5]
push eax
push 1
push 0x7324
push 0x6792
push 0x178
push 0x5392
push 0x5e56
push 0x6214
push 0x3b93
push 0x25b5
call fcn.0046017b
add esp, 0x44
lea ecx, [ebp - 0x1900]
call fcn.004067f8
mov dword [ebp - 0x1c0], 0xfffffffa
mov dword [ebp - 0x1a88], 0x4aa0d722
mov dword [ebp - 0x1a90], 0
mov dword [ebp - 0x1a98], 0x28abf8b2
mov dword [ebp - 0x8cc], 0x509c
push 1
lea ecx, [ebp - 0x1748]
call fcn.00406726
mov dword [ebp - 0x78], 0
jmp 0x47e2b0
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 1
jge 0x47e2c6
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0x1aa0], 9
jmp 0x47e2a9
mov dword [ebp - 0x78], 0
jmp 0x47e2d6
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 1
jge 0x47e2f2
push dword [ebp - 0x78]
lea ecx, [ebp - 0x1748]
call fcn.00406814
mov dword [eax], 0x2e63372
jmp 0x47e2cf
mov dword [ebp - 0x8cc], 1
mov esi, dword [ebp - 0x8cc]
push 0
lea ecx, [ebp - 0x1748]
call fcn.00406814
mov dword [eax], esi
push 0x7d36
push 0x6737
push 0x65d
push 0xde4
push 1
push 0
push 0
push 0
push 0x4a90
push 1
push 0x1673
push 0x513a
lea eax, [ebp - 0x1748]
push eax
call fcn.0046e34a
add esp, 0x34
lea ecx, [ebp - 0x1748]
call fcn.004067f8
mov dword [ebp - 0x4c4], 0
jmp 0x47e371
mov eax, dword [ebp - 0x4c4]
inc eax
mov dword [ebp - 0x4c4], eax
cmp dword [ebp - 0x4c4], 1
jge 0x47e38d
mov eax, dword [ebp - 0x4c4]
mov dword [ebp + eax*4 - 0x73c], 0xfffffffb
jmp 0x47e364
mov dword [ebp - 0x208], 0xfffffff6
mov dword [ebp - 0x160c], 0xffffffff
mov dword [ebp - 0x1614], 0xfffffff6
push 1
lea ecx, [ebp - 0x1dc0]
call fcn.00406726
push 0
lea eax, [ebp - 0x1aa8]
push eax
push 0xfbb
push 1
push 1
push 0x46a3
lea eax, [ebp - 0x1dc0]
push eax
push 0
call fcn.0046ec69
add esp, 0x20
lea eax, [ebp - 0x160c]
push eax
push 0x57d4
push 0x1a44
push 1
lea eax, [ebp - 0x1614]
push eax
push 0
push 1
lea eax, [ebp - 0x208]
push eax
call fcn.0047599a
add esp, 0x20
mov dword [ebp - 0x208], 0
jmp 0x47e426
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 0
jg 0x47e477
mov byte [ebp - 0x121], 0
push 0
push 0x47d3
push 0x784c
push 0x2d91
push 0x2b58
push 0
push 0x66cc
lea eax, [ebp - 0x121]
push eax
push 0x5c93
push 0x5b32
push 1
push 1
push 0x55aa
call fcn.0046a3f0
add esp, 0x34
jmp 0x47e419
lea ecx, [ebp - 0x1dc0]
call fcn.004067f8
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x58]
cmp dword [ebp + eax*4 - 0x768], 0xb8f3d421
jne 0x47e4a5
mov dword [ebp - 0x161c], 1
jmp 0x47e4ac
and dword [ebp - 0x161c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x58]
mov eax, dword [ebp + eax*4 - 0x768]
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x58]
sub eax, dword [ebp + ecx*4 - 0x768]
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x58]
cmp eax, dword [ebp + ecx*4 - 0x768]
je 0x47e4ed
mov dword [ebp - 0xccc], 1
jmp 0x47e4f4
and dword [ebp - 0xccc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x58]
cmp dword [ebp - 0xccc], eax
jne 0x47e512
mov dword [ebp - 0x8d4], 1
jmp 0x47e519
and dword [ebp - 0x8d4], 0
mov eax, dword [ebp - 0x8d4]
mov dword [ebp - 0x1c0], eax
mov eax, dword [ebp - 0x1c0]
mov dword [ebp - 0x1ab0], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x58]
mov eax, dword [ebp + eax*4 - 0x768]
mov dword [ebp - 0x1ab8], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1c0]
mov dword [ebp + eax - 0x73c], ecx
push 4
pop eax
shl eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x73c]
cmp dword [ebp + eax - 0x58], ecx
jg 0x47e580
mov dword [ebp - 0x1624], 1
jmp 0x47e587
and dword [ebp - 0x1624], 0
mov eax, dword [ebp - 0x1c0]
mov dword [ebp - 0x1ac0], eax
mov eax, dword [ebp - 0x33c]
mov dword [ebp - 0x1b20], eax
mov eax, dword [ebp - 0x33c]
mov dword [ebp - 0x1b28], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x58]
mov eax, dword [ebp + eax*4 - 0x768]
mov dword [ebp - 0x1b30], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x58]
mov eax, dword [ebp + eax*4 - 0x768]
mov dword [ebp - 0x1b38], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x58]
mov eax, dword [ebp + eax*4 - 0x768]
mov dword [ebp - 0x1b40], eax
cmp dword [ebp - 0x1c0], 0x9a48
jg 0x47e608
mov dword [ebp - 0xecc], 1
jmp 0x47e60f
and dword [ebp - 0xecc], 0
mov eax, dword [ebp - 0xecc]
sub eax, 0x60bae246
je 0x47e638
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x73c], 0
je 0x47e638
mov dword [ebp - 0x162c], 1
jmp 0x47e63f
and dword [ebp - 0x162c], 0
mov dword [ebp - 0x1c0], 0xf22a1efe
jmp 0x47e14e
mov dword [ebp - 0x268], 0xfffffff6
mov dword [ebp - 0x1634], 0xffffffff
mov dword [ebp - 0x163c], 0xfffffff6
push 1
lea ecx, [ebp - 0x1dd0]
call fcn.00406726
push 0x1ab4
push 0x639b
push 0
push 1
push 0x2b90
lea eax, [ebp - 0x1b48]
push eax
push 0x4f2a
push 1
lea eax, [ebp - 0x1dd0]
push eax
push 1
push 0
call fcn.0047a97c
add esp, 0x2c
lea eax, [ebp - 0x268]
push eax
lea eax, [ebp - 0x1634]
push eax
push 0x3f67
push 0x1f2
push 0
push 1
push 1
push 1
push 0x4bc6
push 1
lea eax, [ebp - 0x163c]
push eax
push 0x49a4
push 0x6359
call fcn.0046e34a
add esp, 0x34
mov dword [ebp - 0x268], 0
jmp 0x47e706
mov eax, dword [ebp - 0x268]
inc eax
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 0
jg 0x47e73a
push 1
push 0
push 1
push 0x64d8
push 0x2e04
push 0x46da
push 0
push 0x61be
push 0x7ce0
call fcn.00471713
add esp, 0x24
jmp 0x47e6f9
lea ecx, [ebp - 0x1dd0]
call fcn.004067f8
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x58], 0
je 0x47e8e1
cmp dword [ebp - 0x210], 0
jne 0x47e894
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x768], 0
je 0x47e788
mov eax, 0x6367
test eax, eax
je 0x47e788
mov dword [ebp - 0x8dc], 1
jmp 0x47e78f
and dword [ebp - 0x8dc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x58]
cmp dword [ebp - 0x8dc], eax
jne 0x47e7b1
xor eax, eax
je 0x47e7b1
mov dword [ebp - 0xcd4], 1
jmp 0x47e7b8
and dword [ebp - 0xcd4], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x768]
cmp dword [ebp - 0xcd4], eax
jg 0x47e7d8
mov dword [ebp - 0x8e4], 1
jmp 0x47e7df
and dword [ebp - 0x8e4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x58]
cmp dword [ebp - 0x8e4], eax
je 0x47e7fd
mov dword [ebp - 0xfcc], 1
jmp 0x47e804
and dword [ebp - 0xfcc], 0
mov eax, dword [ebp - 0x33c]
imul eax, dword [ebp - 0xfcc]
cmp eax, 0xda79815c
jb 0x47e824
mov dword [ebp - 0x1644], 1
jmp 0x47e82b
and dword [ebp - 0x1644], 0
mov eax, dword [ebp - 0x210]
mov dword [ebp - 0x1b50], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x58]
mov dword [ebp - 0x1b58], eax
xor eax, eax
inc eax
imul eax, eax, 0xffff
test eax, eax
jb 0x47e876
cmp dword [ebp - 0x210], 0
je 0x47e876
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x58], 0
je 0x47e876
mov dword [ebp - 0x8ec], 1
jmp 0x47e87d
and dword [ebp - 0x8ec], 0
imul eax, dword [ebp - 0x8ec], 0xc16
test eax, eax
jne 0x47e894
and dword [ebp - 0xcdc], 0
jmp 0x47e89e
mov dword [ebp - 0xcdc], 1
cmp dword [ebp - 0xcdc], 0x8e87
jle 0x47e8b6
mov dword [ebp - 0x8f4], 1
jmp 0x47e8bd
and dword [ebp - 0x8f4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x58]
add eax, dword [ebp - 0x8f4]
cmp dword [ebp - 0x33c], eax
jg 0x47e8e1
mov dword [ebp - 0x69c], 1
jmp 0x47e8e8
and dword [ebp - 0x69c], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x69c]
mov dword [ebp + eax - 0x58], ecx
mov eax, dword [ebp - 0x69c]
mov dword [ebp - 0x1ec], eax
mov eax, dword [ebp - 0x210]
cmp dword [ebp - 0x1ec], eax
jl 0x47e928
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x58], 0
jne 0x47e928
and dword [ebp - 0xed4], 0
jmp 0x47e932
mov dword [ebp - 0xed4], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x768]
imul eax, dword [ebp - 0xed4]
test eax, eax
je 0x47e9f1
mov dword [ebp - 0x1ec], 0
jmp 0x47e967
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 0xf
jle 0x47e9ec
mov dword [ebp - 0x1b60], 0x624039b6
mov byte [ebp - 0xf7], 0
push 0
push 0x58f7
push 1
lea eax, [ebp - 0xf7]
push eax
push 1
push 0xb60
push 0
push 0x3a18
push 0x288
push 1
push 0x4996
push 0x17c
call fcn.00479e07
add esp, 0x30
push 1
push 0x5186
push 0x23f1
push 1
push 1
push 0x2916
push 0x7ddc
push 0
call fcn.004678c6
add esp, 0x20
cmp dword [ebp - 0x210], 0
je 0x47e9e7
jmp 0x47e9ec
jmp 0x47e95a
jmp 0x47f0fd
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x1200], 0xfffffffe
mov dword [ebp - 0x165c], 0x1b6b
push 2
lea ecx, [ebp - 0x19a8]
call fcn.00406726
mov dword [ebp - 0x1664], 0xac6914f0
mov dword [ebp - 0x1378], 0xfff9
mov dword [ebp - 0x16b8], 0x361ae7d5
mov dword [ebp - 0x16f4], 7
lea eax, [ebp - 0x1b68]
push eax
lea eax, [ebp - 0x19a8]
push eax
push 0
push 0x3fdc
push 1
push 1
push 0x1f76
push 0x63d7
push 1
push 0
push 0x4f1c
push 0x73fa
call fcn.0046c2c1
add esp, 0x30
mov dword [ebp - 0x38], 0xfffffffe
jmp 0x47ea8a
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0x1a
jne 0x47ec54
mov dword [ebp - 0x298], 0xd21dfe4b
mov dword [ebp - 0x218], 0xfffffffe
mov dword [ebp - 0x1b70], 0xffffffff
push 3
lea ecx, [ebp - 0x1de0]
call fcn.00406726
mov dword [ebp - 0x1fb0], 0xbb32
mov dword [ebp - 0x1fac], 0xbb32
mov dword [ebp - 0x1fa8], 0xbb32
mov dword [ebp - 0x1fa4], 0xbb32
mov dword [ebp - 0x1654], 0xaa9c1c73
mov dword [ebp - 0x58c], 0
jmp 0x47eb0a
mov eax, dword [ebp - 0x58c]
inc eax
mov dword [ebp - 0x58c], eax
cmp dword [ebp - 0x58c], 3
jge 0x47eb2c
push dword [ebp - 0x58c]
lea ecx, [ebp - 0x1de0]
call fcn.00406814
mov dword [eax], 0xbe2d3d47
jmp 0x47eafd
cmp dword [ebp - 0x298], 0x836ccb03
ja 0x47ebe5
cmp dword [ebp - 0x38], 0
je 0x47eb5f
cmp dword [ebp - 0x298], 0
je 0x47eb5f
mov eax, dword [ebp - 0x38]
add eax, 4
je 0x47eb5f
mov dword [ebp - 0x164c], 1
jmp 0x47eb66
and dword [ebp - 0x164c], 0
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x1b78], eax
mov dword [ebp - 0x298], 1
cmp dword [ebp - 0x298], 0
jne 0x47eb89
cmp dword [ebp - 0x298], 0
mov eax, dword [ebp - 0x38]
add eax, dword [ebp - 0x218]
cmp eax, dword [ebp - 0x38]
jg 0x47eba6
cmp dword [ebp - 0x38], 0
jne 0x47eba6
and dword [ebp - 0x8fc], 0
jmp 0x47ebb0
mov dword [ebp - 0x8fc], 1
mov eax, dword [ebp - 0x8fc]
sub eax, dword [ebp - 0x38]
je 0x47ebd0
cmp dword [ebp - 0x218], 0
je 0x47ebd0
mov dword [ebp - 0xce4], 1
jmp 0x47ebd7
and dword [ebp - 0xce4], 0
mov eax, dword [ebp - 0x218]
cmp dword [ebp - 0xce4], eax
jge 0x47ebfa
mov eax, 0x7408
test eax, eax
je 0x47ebfa
mov dword [ebp - 0x904], 1
jmp 0x47ec01
and dword [ebp - 0x904], 0
mov eax, dword [ebp - 0x904]
mov dword [ebp - 0x218], eax
push 0x366f
push 1
push 0x5caf
push 0
push 0x7d5e
push 0x7c0d
push 1
push 1
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x1654]
push eax
push 0x1a51
call fcn.00466d38
add esp, 0x2c
lea ecx, [ebp - 0x1de0]
call fcn.004067f8
jmp 0x47ea83
lea eax, [ebp - 0x165c]
push eax
lea eax, [ebp - 0x1664]
push eax
push 1
push 0
lea eax, [ebp - 0x16f4]
push eax
lea eax, [ebp - 0x16b8]
push eax
push 0x3c9a
push 0x1589
lea eax, [ebp - 0x19a8]
push eax
lea eax, [ebp - 0x38]
push eax
push 1
lea eax, [ebp - 0x1378]
push eax
lea eax, [ebp - 0x1200]
push eax
call fcn.0046dcbe
add esp, 0x34
lea ecx, [ebp - 0x19a8]
call fcn.004067f8
mov dword [ebp - 0x270], 0x53b26bdd
push 1
lea ecx, [ebp - 0x1760]
call fcn.00406726
mov dword [ebp - 0x117c], 0xd1456b86
push 1
push 0x4e97
push 1
push 0
lea eax, [ebp - 0x1b80]
push eax
lea eax, [ebp - 0x1760]
push eax
push 1
push 0
push 0x3688
call fcn.00469694
add esp, 0x24
mov dword [ebp - 0x270], 0xfffffffa
jmp 0x47ed10
mov eax, dword [ebp - 0x270]
dec eax
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 0xffffffe5
jle 0x47ee08
push 2
lea ecx, [ebp - 0x17a8]
call fcn.00406726
mov dword [ebp - 0x1180], 0xffffffff
lea eax, [ebp - 0x1b88]
push eax
push 0x70da
push 0x4060
push 0
push 0x7ed1
push 1
push 1
lea eax, [ebp - 0x17a8]
push eax
call fcn.0045ee4a
add esp, 0x20
push 0
push 0x1294
push 0x2d3
push 0x227b
lea eax, [ebp - 0x17a8]
push eax
push 0x4286
push 1
lea eax, [ebp - 0x1760]
push eax
push 1
call fcn.0045dde3
add esp, 0x24
push 0x638b
push 0x41fc
lea eax, [ebp - 0x17a8]
push eax
push 0x6a6c
lea eax, [ebp - 0x270]
push eax
push 0x52c3
push 0x7623
lea eax, [ebp - 0x1180]
push eax
push 0x3bc9
push 1
push 0xd05
push 1
push 0x11ba
lea eax, [ebp - 0x117c]
push eax
push 0x187b
push 1
push 0x14c8
push 1
push 1
lea eax, [ebp - 0x1760]
push eax
push 0
call fcn.00470fa3
add esp, 0x54
lea ecx, [ebp - 0x17a8]
call fcn.004067f8
jmp 0x47ed03
lea ecx, [ebp - 0x1760]
call fcn.004067f8
mov byte [ebp - 0x159], 0
mov dword [ebp - 0x1050], 0x6016
mov dword [ebp - 0x15f0], str.xjnubemo_gumhhyqx_pcc_vgqvuab
cmp dword [ebp - 0x1050], 0x636a
jle 0x47eef4
and dword [ebp - 0x344], 0
jmp 0x47ee54
mov eax, dword [ebp - 0x344]
inc eax
mov dword [ebp - 0x344], eax
cmp dword [ebp - 0x344], 0x148e
jge 0x47eee6
and dword [ebp - 0x4cc], 0
jmp 0x47ee7a
mov eax, dword [ebp - 0x4cc]
inc eax
mov dword [ebp - 0x4cc], eax
cmp dword [ebp - 0x4cc], 0x5c83
jge 0x47eee1
and dword [ebp - 0x34c], 0
jmp 0x47ee9c
mov eax, dword [ebp - 0x34c]
inc eax
mov dword [ebp - 0x34c], eax
cmp dword [ebp - 0x34c], 0x38d3
jge 0x47eedf
mov eax, dword [ebp - 0x344]
add eax, dword [ebp - 0x4cc]
xor eax, dword [ebp - 0x34c]
cdq
mov dword [ebp - 0x13d4], eax
mov dword [ebp - 0x13d0], edx
push dword [ebp - 0x13d0]
push dword [ebp - 0x13d4]
mov ecx, 0xace058
call fcn.004063d1
jmp 0x47ee8f
jmp 0x47ee6d
jmp 0x47ee47
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SignalObjectAndWait]
mov dword [ebp - 0x1888], 1
mov dword [ebp - 0x1884], 1
mov dword [ebp - 0x1880], 1
mov dword [ebp - 0x187c], 1
lea ecx, [ebp - 0x7b1]
call fcn.00406823
push eax
lea eax, [ebp - 0x1878]
push eax
lea eax, [ebp - 0x1888]
push eax
lea ecx, [ebp - 0x206c]
call fcn.00406826
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1df0]
call fcn.004067d2
mov dword [ebp - 0x1438], 0xd4081c29
mov dword [ebp - 0x1184], 0
push 0x3b0a
lea eax, [ebp - 0x1438]
push eax
lea eax, [ebp - 0x1184]
push eax
push 0x38d7
lea eax, [ebp - 0x1df0]
push eax
push 0x7428
push 1
push 0x6115
push 0
push 0x3e28
push 0x2138
push 1
push 0x2293
push 1
push 0x3321
call fcn.00461d27
add esp, 0x3c
lea ecx, [ebp - 0x1df0]
call fcn.004067f8
mov dword [ebp - 4], 4
cmp dword [ebp - 0x1050], 0x5ea6
jge 0x47efe0
mov edx, dword [ebp - 0x15f0]
mov ecx, 0xace058
call fcn.00409042
jmp 0x47effc
or dword [ebp - 4], 0xffffffff
jmp 0x47f006
movzx eax, byte [ebp - 0x159]
test eax, eax
je 0x47f0fd
push 2
lea ecx, [ebp - 0x1954]
call fcn.00406726
push 0x37bf
push 0x6dae
push 0x5eab
push 0x2a64
push 0x4c37
push 0x4989
push 0x5d5c
push 0x3aca
lea eax, [ebp - 0x1b90]
push eax
push 1
push 0x6f0a
push 0
lea eax, [ebp - 0x1954]
push eax
push 0x689a
push 0x7f34
push 1
push 0x503c
push 1
push 0
push 0x1099
push 1
call fcn.00470fa3
add esp, 0x54
push 0x5dc5
push 1
push 0x188f
push 0x864
push 1
push 0
push 0x25ba
push 0x14cf
push 0x5766
push 1
push 0x47c9
push 0x3167
push 0x51d4
push 0x432b
push 1
call fcn.0046d93b
add esp, 0x3c
push 0
push 0x724e
push 0
push 0
lea eax, [ebp - 0x1954]
push eax
call fcn.0046a8e1
add esp, 0x14
lea ecx, [ebp - 0x1954]
call fcn.004067f8
push 0
push 0
push 0xa60
call dword [sym.imp.USER32.dll_SetPropA]
mov dword [ebp - 0x1e0], 0x62e08974
mov dword [ebp - 0x118c], 0x66fe
mov dword [ebp - 0x188], 0xcb0b
push 1
lea ecx, [ebp - 0x1134]
call fcn.00406726
mov dword [ebp - 0x90c], 0xffffffff
mov dword [ebp - 0x644], 0
jmp 0x47f14b
mov eax, dword [ebp - 0x644]
inc eax
mov dword [ebp - 0x644], eax
cmp dword [ebp - 0x644], 1
jge 0x47f16d
push dword [ebp - 0x644]
lea ecx, [ebp - 0x1134]
call fcn.00406814
mov dword [eax], 0xfffffff7
jmp 0x47f13e
push 0x4910
push 0x3a01
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0x1134]
push eax
push 0x391b
push 1
push 0
push 1
push 0x714a
push 1
lea eax, [ebp - 0x118c]
push eax
push 0x2779
push 0x2251
lea eax, [ebp - 0x1e0]
push eax
push 0x3231
push 0x527c
push 0x731c
call fcn.0047b518
add esp, 0x44
cmp dword [ebp - 0x188], 0
je 0x47f328
mov dword [ebp - 0x1194], 0x3a21b78c
mov dword [ebp - 0x1444], 0x32da3bb1
mov dword [ebp - 0x188], 0
jmp 0x47f200
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 0
jg 0x47f326
mov dword [ebp - 0x1708], 0xa2e255bb
mov dword [ebp - 0x1e0], 0
jmp 0x47f230
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 0
jg 0x47f2fb
push 4
lea ecx, [ebp - 0x17d8]
call fcn.00406726
push 1
push 0xf6a
push 0
push 0x49ab
push 1
lea eax, [ebp - 0x17d8]
push eax
push 1
push 0x71af
lea eax, [ebp - 0x1b98]
push eax
push 1
push 0x2816
push 0x7c9b
call fcn.00479e07
add esp, 0x30
push 0
lea eax, [ebp - 0x90c]
push eax
lea eax, [ebp - 0x1444]
push eax
lea eax, [ebp - 0x1134]
push eax
push 0
lea eax, [ebp - 0x1194]
push eax
push 0x39ef
push 0x6cd5
lea eax, [ebp - 0x17d8]
push eax
push 1
lea eax, [ebp - 0x1e0]
push eax
lea eax, [ebp - 0x1708]
push eax
call fcn.0045d432
add esp, 0x30
push 0
lea ecx, [ebp - 0x1134]
call fcn.00406814
cmp dword [eax], 0
je 0x47f2eb
lea ecx, [ebp - 0x17d8]
call fcn.004067f8
jmp 0x47f2fb
lea ecx, [ebp - 0x17d8]
call fcn.004067f8
jmp 0x47f223
push 1
push 1
push 0x5b51
push 1
push 1
push 1
push 0x3f0b
push 0x1e07
push 0xfd5
call fcn.004608fa
add esp, 0x24
jmp 0x47f1f3
jmp 0x47f35f
lea eax, [ebp - 0x1134]
push eax
push 0x24db
push 0x3364
lea eax, [ebp - 0x90c]
push eax
push 0x5542
push 1
push 0x974
push 1
push 1
push 1
push 0x5d98
call fcn.00460c2d
add esp, 0x2c
lea ecx, [ebp - 0x1134]
call fcn.004067f8
mov dword [ebp - 0x75c], 0
mov dword [ebp - 0xcec], 0x657689a
mov dword [ebp - 0x220], 0xa519d814
mov dword [ebp - 0x944], 0x145c1747
mov dword [ebp - 0x744], 0x688
mov dword [ebp - 0x1ba0], 1
mov dword [ebp - 0x354], 0
jmp 0x47f3bf
mov eax, dword [ebp - 0x354]
inc eax
mov dword [ebp - 0x354], eax
cmp dword [ebp - 0x354], 3
jge 0x47f3db
mov eax, dword [ebp - 0x354]
mov dword [ebp + eax*4 - 0x1e00], 0xafd061a6
jmp 0x47f3b2
mov eax, dword [ebp - 0x75c]
mov dword [ebp - 0x1ba8], eax
cmp dword [ebp - 0x75c], 0
jne 0x47f410
mov dword [ebp - 0xcec], 1
mov eax, 0xaa29
sub eax, dword [ebp - 0xcec]
jne 0x47f410
and dword [ebp - 0x914], 0
jmp 0x47f41a
mov dword [ebp - 0x914], 1
mov eax, dword [ebp - 0x220]
cmp dword [ebp - 0x914], eax
jne 0x47f434
mov dword [ebp - 0xedc], 1
jmp 0x47f43b
and dword [ebp - 0xedc], 0
mov eax, dword [ebp - 0x944]
cmp dword [ebp - 0xedc], eax
jl 0x47f455
mov dword [ebp - 0x91c], 1
jmp 0x47f45c
and dword [ebp - 0x91c], 0
imul eax, dword [ebp - 0x91c], 0xfffa
test eax, eax
jne 0x47f47c
cmp dword [ebp - 0x75c], 0
jne 0x47f47c
and dword [ebp - 0x6a4], 0
jmp 0x47f486
mov dword [ebp - 0x6a4], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x6a4]
mov dword [ebp + eax - 0x1e00], ecx
cmp dword [ebp - 0x6a4], 0
je 0x47f625
mov dword [ebp - 0x92c], 8
mov dword [ebp - 0x924], 0x6982b35
mov dword [ebp - 0xd04], 0x416c28cb
mov dword [ebp - 0x220], 0x14
jmp 0x47f4dd
mov eax, dword [ebp - 0x220]
inc eax
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 0x26
jne 0x47f623
mov dword [ebp - 0xcf4], 0xfffffffe
mov dword [ebp - 0x93c], 0x11ca4b38
mov dword [ebp - 0x4d4], 0
jmp 0x47f517
mov eax, dword [ebp - 0x4d4]
inc eax
mov dword [ebp - 0x4d4], eax
cmp dword [ebp - 0x4d4], 2
jge 0x47f533
mov eax, dword [ebp - 0x4d4]
mov dword [ebp + eax*4 - 0x1a1c], 0x8770ce40
jmp 0x47f50a
mov eax, dword [ebp - 0x92c]
mov dword [ebp - 0x1bb0], eax
mov eax, dword [ebp - 0xcf4]
mov dword [ebp - 0x1bb8], eax
mov eax, dword [ebp - 0xcf4]
mov dword [ebp - 0x924], eax
cmp dword [ebp - 0x924], 0
je 0x47f575
mov eax, 0x39d3cd36
test eax, eax
je 0x47f575
mov dword [ebp - 0xfd4], 1
jmp 0x47f57c
and dword [ebp - 0xfd4], 0
imul eax, dword [ebp - 0xfd4], 0
test eax, eax
jne 0x47f599
cmp dword [ebp - 0x92c], 0
jne 0x47f599
and dword [ebp - 0xcfc], 0
jmp 0x47f5a3
mov dword [ebp - 0xcfc], 1
cmp dword [ebp - 0xcfc], 0xfffffffb
jae 0x47f5b8
mov dword [ebp - 0x934], 1
jmp 0x47f5bf
and dword [ebp - 0x934], 0
mov eax, dword [ebp - 0x934]
mov dword [ebp - 0x744], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1e00]
cmp dword [ebp - 0x744], eax
jne 0x47f5ec
mov dword [ebp - 0xee4], 1
jmp 0x47f5f3
and dword [ebp - 0xee4], 0
mov eax, dword [ebp - 0xee4]
mov dword [ebp - 0x93c], eax
mov eax, dword [ebp - 0x93c]
mov dword [ebp - 0xd04], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xd04]
mov dword [ebp + eax - 0x1a1c], ecx
jmp 0x47f4d0
jmp 0x47f65c
mov dword [ebp - 0x119c], 0xfffd
push 0
lea eax, [ebp - 0x944]
push eax
push 0x7b63
push 1
lea eax, [ebp - 0x744]
push eax
push 0x538c
push 1
lea eax, [ebp - 0x119c]
push eax
call fcn.00474962
add esp, 0x20
mov dword [ebp - 0xc8], 2
mov dword [ebp - 0x6ac], 0xe3e7631
mov dword [ebp - 0x95c], 1
mov dword [ebp - 0x11a4], 0xfc53d8b3
push 3
lea ecx, [ebp - 0x196c]
call fcn.00406726
push 0x4b68
lea eax, [ebp - 0x1bc0]
push eax
push 0x138e
push 0
push 1
lea eax, [ebp - 0x196c]
push eax
push 0x368d
push 1
call fcn.0046cdc2
add esp, 0x20
push 0x183a
push 0
push 0x251d
push 0x2f92
push 1
push 0x30d5
push 1
push 1
push 0x3c7a
push 0x5a32
push 0xbe4
call fcn.0046c7e5
add esp, 0x2c
mov eax, 0x693009c
test eax, eax
je 0x47f70e
mov eax, dword [ebp - 0xc8]
neg eax
je 0x47f70e
mov dword [ebp - 0x1450], 1
jmp 0x47f715
and dword [ebp - 0x1450], 0
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0x1bc8], eax
cmp dword [ebp - 0xc8], 0xffffffff
jne 0x47f737
xor eax, eax
jne 0x47f737
and dword [ebp - 0x1090], 0
jmp 0x47f741
mov dword [ebp - 0x1090], 1
mov eax, dword [ebp - 0x6ac]
imul eax, dword [ebp - 0x1090]
cmp eax, 0xa9da
jle 0x47f761
mov dword [ebp - 0x94c], 1
jmp 0x47f768
and dword [ebp - 0x94c], 0
mov eax, dword [ebp - 0x6ac]
cmp dword [ebp - 0x94c], eax
jle 0x47f782
mov dword [ebp - 0xd0c], 1
jmp 0x47f789
and dword [ebp - 0xd0c], 0
mov eax, dword [ebp - 0xc8]
add eax, dword [ebp - 0xd0c]
je 0x47f7ac
cmp dword [ebp - 0xc8], 0
je 0x47f7ac
mov dword [ebp - 0x954], 1
jmp 0x47f7b3
and dword [ebp - 0x954], 0
mov eax, dword [ebp - 0xc8]
cmp eax, dword [ebp - 0x954]
jl 0x47f7cd
mov dword [ebp - 0xeec], 1
jmp 0x47f7d4
and dword [ebp - 0xeec], 0
mov eax, dword [ebp - 0xc8]
add eax, dword [ebp - 0xeec]
je 0x47f7fa
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0x1bd0], eax
mov dword [ebp - 0x95c], 0x6986d6
jmp 0x47f869
mov dword [ebp - 0x11ac], 0xfffffff6
mov dword [ebp - 0x15f8], 0x9b4ccc41
push 0x529
push 0x2f84
lea eax, [ebp - 0x11a4]
push eax
push 0x6308
push 1
lea eax, [ebp - 0x6ac]
push eax
push 1
lea eax, [ebp - 0x15f8]
push eax
push 0x22e4
push 0
push 0x2518
lea eax, [ebp - 0x196c]
push eax
push 0xf8f
lea eax, [ebp - 0x95c]
push eax
push 0xc22
lea eax, [ebp - 0x11ac]
push eax
call fcn.0045b024
add esp, 0x40
lea ecx, [ebp - 0x196c]
call fcn.004067f8
mov dword [ebp - 0x278], 0x62e08974
mov dword [ebp - 0x35c], 0
jmp 0x47f897
mov eax, dword [ebp - 0x35c]
inc eax
mov dword [ebp - 0x35c], eax
cmp dword [ebp - 0x35c], 3
jge 0x47f8b3
mov eax, dword [ebp - 0x35c]
mov dword [ebp + eax*4 - 0x1778], 0xe1757117
jmp 0x47f88a
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x1778], 0
jmp 0x47f8de
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1778]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x1778], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1778], 0xffffffef
je 0x47face
mov dword [ebp - 0x594], 9
mov dword [ebp - 0x594], 0xffffffe3
jmp 0x47f914
mov eax, dword [ebp - 0x594]
inc eax
mov dword [ebp - 0x594], eax
cmp dword [ebp - 0x594], 0xffffffe9
jge 0x47fac9
mov dword [ebp - 0x145c], 0
mov dword [ebp - 0xd14], 0x6911
mov dword [ebp - 0x11b4], str.xefcuw_mqix_grqy_iqy_eubnrm_bpzktykam_infnkeesf_qxojn_ztr_wgxzqpqmg_mcsfva_rugnbjx
cmp dword [ebp - 0xd14], 0x6ac9
jle 0x47fa16
and dword [ebp - 0x364], 0
jmp 0x47f965
mov eax, dword [ebp - 0x364]
inc eax
mov dword [ebp - 0x364], eax
cmp dword [ebp - 0x364], 0x65c2
jge 0x47fa16
and dword [ebp - 0x4dc], 0
jmp 0x47f98b
mov eax, dword [ebp - 0x4dc]
inc eax
mov dword [ebp - 0x4dc], eax
cmp dword [ebp - 0x4dc], 0x54a5
jge 0x47fa11
and dword [ebp - 0x36c], 0
jmp 0x47f9ad
mov eax, dword [ebp - 0x36c]
inc eax
mov dword [ebp - 0x36c], eax
cmp dword [ebp - 0x36c], 0x536a
jge 0x47fa0c
mov eax, dword [ebp - 0x364]
sub eax, dword [ebp - 0x4dc]
add eax, dword [ebp - 0x36c]
cdq
mov dword [ebp - 0x13e0], eax
mov dword [ebp - 0x13dc], edx
push dword [ebp - 0x13dc]
push dword [ebp - 0x13e0]
lea ecx, [ebp - 0x21d8]
call fcn.00401a01
pop ecx
pop ecx
mov ecx, eax
call fcn.004063c6
push eax
call fcn.004a68c7
pop ecx
lea ecx, [ebp - 0x21d8]
call fcn.004063bc
jmp 0x47f9a0
jmp 0x47f97e
jmp 0x47f958
push 0x7d61
push 0x141d
push 1
push 0x790e
push 0x7548
push 1
push 1
push 0
push 0x80a
push 0x3af3
lea eax, [ebp - 0x145c]
push eax
call fcn.004680e0
add esp, 0x2c
mov dword [ebp - 4], 6
cmp dword [ebp - 0xd14], 0x661c
jge 0x47fa6a
push dword [ebp - 0x11b4]
call fcn.004a68c7
pop ecx
jmp 0x47fa86
or dword [ebp - 4], 0xffffffff
jmp 0x47fa90
mov byte [ebp - 0xf9], 0
lea eax, [ebp - 0xf9]
push eax
push 0
push 1
push 0x7ba1
push 0x5449
push 0x43e9
push 0
push 0x1376
push 1
push 0
call fcn.00463f82
add esp, 0x28
jmp 0x47f907
jmp 0x47f8c5
mov dword [ebp - 0x11fc], 0x66fe
mov dword [ebp - 0xd4], 3
mov dword [ebp - 0x1058], 0x70d2
mov dword [ebp - 0x98c], 0xffffffff
mov dword [ebp - 0x1710], 0x22525a52
mov dword [ebp - 0x11dc], 0
mov dword [ebp - 0x964], 0x33d1
mov dword [ebp - 0x16c8], str.muyyvgl_hiwgcjtt_fcpukhxh
cmp dword [ebp - 0x964], 0x3551
jle 0x47fbc4
and dword [ebp - 0x5f4], 0
jmp 0x47fb44
mov eax, dword [ebp - 0x5f4]
inc eax
mov dword [ebp - 0x5f4], eax
cmp dword [ebp - 0x5f4], 0x7f38
jge 0x47fbc4
and dword [ebp - 0x374], 0
jmp 0x47fb66
mov eax, dword [ebp - 0x374]
inc eax
mov dword [ebp - 0x374], eax
cmp dword [ebp - 0x374], 0x167c
jge 0x47fbbf
mov eax, dword [ebp - 0x5f4]
or eax, dword [ebp - 0x374]
cdq
mov dword [ebp - 0x13ec], eax
mov dword [ebp - 0x13e8], edx
push dword [ebp - 0x13e8]
push dword [ebp - 0x13ec]
lea ecx, [ebp - 0x22a4]
call fcn.00401a01
pop ecx
pop ecx
mov ecx, eax
call fcn.004063c6
push eax
call fcn.004a68c7
pop ecx
lea ecx, [ebp - 0x22a4]
call fcn.004063bc
jmp 0x47fb59
jmp 0x47fb37
mov dword [ebp - 0x11d4], 1
mov dword [ebp - 4], 8
cmp dword [ebp - 0x964], 0x3279
jge 0x47fbed
push dword [ebp - 0x16c8]
call fcn.004a68c7
pop ecx
jmp 0x47fc09
or dword [ebp - 4], 0xffffffff
jmp 0x47fc13
mov dword [ebp - 0x1474], 1
mov dword [ebp - 0xd4], 0
jmp 0x47fc36
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0xa
jg 0x47ffb0
mov dword [ebp - 0xc0], 1
mov dword [ebp - 0x11bc], 0x951e
mov dword [ebp - 0x200], 0
mov dword [ebp - 0x1bd8], 0xb39d2057
mov dword [ebp - 0x11c4], 2
mov dword [ebp - 0xc0], 0
jmp 0x47fc8e
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0xe
jg 0x47ff87
mov dword [ebp - 0x76c], 0xffffffff
mov dword [ebp - 0xfdc], 1
mov dword [ebp - 0x11cc], 1
mov dword [ebp - 0x4e4], 0
jmp 0x47fcd2
mov eax, dword [ebp - 0x4e4]
inc eax
mov dword [ebp - 0x4e4], eax
cmp dword [ebp - 0x4e4], 3
jge 0x47fcee
mov eax, dword [ebp - 0x4e4]
mov dword [ebp + eax*4 - 0x1e10], 0xfffffffd
jmp 0x47fcc5
cmp dword [ebp - 0x11bc], 0x6e58d020
jge 0x47fd06
mov dword [ebp - 0x974], 1
jmp 0x47fd0d
and dword [ebp - 0x974], 0
mov eax, dword [ebp - 0x200]
mov dword [ebp - 0x76c], eax
mov eax, dword [ebp - 0x76c]
mov dword [ebp - 0xfdc], eax
cmp dword [ebp - 0xfdc], 0
jne 0x47fd40
mov eax, 0x8d303f02
test eax, eax
jne 0x47fd40
and dword [ebp - 0x96c], 0
jmp 0x47fd4a
mov dword [ebp - 0x96c], 1
cmp dword [ebp - 0x96c], 0xb9c2
jle 0x47fd62
mov dword [ebp - 0xd1c], 1
jmp 0x47fd69
and dword [ebp - 0xd1c], 0
mov eax, dword [ebp - 0xc0]
add eax, dword [ebp - 0xd1c]
imul eax, dword [ebp - 0xd4]
sub eax, dword [ebp - 0xc0]
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x1e10]
cmp dword [ebp - 0x974], eax
je 0x47fda3
mov dword [ebp - 0xef4], 1
jmp 0x47fdaa
and dword [ebp - 0xef4], 0
mov eax, dword [ebp - 0xd4]
add eax, dword [ebp - 0xef4]
je 0x47fdf6
mov dword [ebp - 0x200], 0
jmp 0x47fdd1
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 0x10
je 0x47fdf1
mov dword [ebp - 0x1468], 0
cmp dword [ebp - 0x1468], 0
je 0x47fdef
jmp 0x47fdf1
jmp 0x47fdc4
jmp 0x47ff5f
mov dword [ebp - 0x37c], 0
jmp 0x47fe0f
mov eax, dword [ebp - 0x37c]
inc eax
mov dword [ebp - 0x37c], eax
cmp dword [ebp - 0x37c], 3
jge 0x47fe2b
mov eax, dword [ebp - 0x37c]
mov dword [ebp + eax*4 - 0x1e20], 1
jmp 0x47fe02
push 0
push 1
push 0xa41
push 0x2b8b
push 0x7b07
push 0x7f96
push 0
push 0x481c
push 0x189c
lea eax, [ebp - 0x11c4]
push eax
lea eax, [ebp - 0x76c]
push eax
push 1
push 1
push 0x5554
push 0x7c49
call fcn.0045f48e
add esp, 0x3c
mov eax, 0xd860
test eax, eax
je 0x47fe91
cmp dword [ebp - 0x1058], 0
je 0x47fe91
mov dword [ebp - 0x97c], 1
jmp 0x47fe98
and dword [ebp - 0x97c], 0
mov eax, dword [ebp - 0xc0]
cmp dword [ebp - 0x97c], eax
jg 0x47feb2
mov dword [ebp - 0x1600], 1
jmp 0x47feb9
and dword [ebp - 0x1600], 0
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0x1be0], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1e20], 0
je 0x47feea
cmp dword [ebp - 0xc0], 0
je 0x47feea
mov dword [ebp - 0x6b4], 1
jmp 0x47fef1
and dword [ebp - 0x6b4], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x6b4]
mov dword [ebp + eax - 0x1e10], ecx
cmp dword [ebp - 0x6b4], 0xa60c437f
jbe 0x47ff1c
mov dword [ebp - 0xd24], 1
jmp 0x47ff23
and dword [ebp - 0xd24], 0
cmp dword [ebp - 0xd24], 0xc8e4
jle 0x47ff48
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1e20], 0
jne 0x47ff48
and dword [ebp - 0x984], 0
jmp 0x47ff52
mov dword [ebp - 0x984], 1
imul eax, dword [ebp - 0x984], 0xffffffff
mov dword [ebp - 0x11cc], eax
mov byte [ebp - 0x129], 0
lea eax, [ebp - 0x129]
push eax
push 1
push 0x68d7
push 0x44
push 1
push 1
call fcn.0046122b
add esp, 0x18
jmp 0x47fc81
push 0
lea eax, [ebp - 0x98c]
push eax
push 1
push 0x7394
push 0x69a7
push 0x4e73
push 1
call fcn.0046af92
add esp, 0x1c
jmp 0x47fc29
lea eax, [ebp - 0x1058]
push eax
push 0
push 1
lea eax, [ebp - 0x1474]
push eax
push 0x4312
push 0x3933
lea eax, [ebp - 0x11d4]
push eax
push 0xb8f
lea eax, [ebp - 0x98c]
push eax
push 0x490
lea eax, [ebp - 0xd4]
push eax
lea eax, [ebp - 0x1710]
push eax
push 0x781
push 0x770b
push 1
push 0x5369
push 0x41ef
push 0x29a5
push 0x77cd
push 0x206f
lea eax, [ebp - 0x11dc]
push eax
push 0x2b94
push 1
call fcn.0046d2e4
add esp, 0x5c
mov dword [ebp - 0x1c8], 0xcb0b
push 1
lea ecx, [ebp - 0x1674]
call fcn.00406726
mov dword [ebp - 0x190], 0xd313dd33
mov dword [ebp - 0x774], 0x85f1871d
mov dword [ebp - 0x9bc], 0x177c4186
mov dword [ebp - 0x6bc], 0xfffffffb
mov dword [ebp - 0x180c], 0
mov dword [ebp - 0x1808], 0
mov dword [ebp - 0x1804], 0
mov dword [ebp - 0x1800], 0
mov dword [ebp - 0x190], 0x1a
jmp 0x4800ad
mov eax, dword [ebp - 0x190]
dec eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 0xffffffe8
jl 0x48085a
mov dword [ebp - 0x30], 0xfe01bd97
mov dword [ebp - 0x394], 1
mov dword [ebp - 0x11ec], 9
mov dword [ebp - 0x1be8], 0x8c37f2e4
mov dword [ebp - 0xd2c], 0x3de8
mov dword [ebp - 0x1480], str.kdtixz_immh_qfvmc_vleslxjif_doqsnboue_fwg_kohf_raij
cmp dword [ebp - 0xd2c], 0x3e22
jle 0x4801b8
and dword [ebp - 0x4ec], 0
jmp 0x480119
mov eax, dword [ebp - 0x4ec]
inc eax
mov dword [ebp - 0x4ec], eax
cmp dword [ebp - 0x4ec], 0x6617
jge 0x4801ad
and dword [ebp - 0x59c], 0
jmp 0x48013f
mov eax, dword [ebp - 0x59c]
inc eax
mov dword [ebp - 0x59c], eax
cmp dword [ebp - 0x59c], 0x7c7c
jge 0x4801a8
and dword [ebp - 0x384], 0
jmp 0x480161
mov eax, dword [ebp - 0x384]
inc eax
mov dword [ebp - 0x384], eax
cmp dword [ebp - 0x384], 0x29c2
jge 0x4801a6
mov eax, dword [ebp - 0x59c]
mov ecx, dword [ebp - 0x384]
shl eax, cl
xor eax, dword [ebp - 0x4ec]
cdq
mov dword [ebp - 0x13f8], eax
mov dword [ebp - 0x13f4], edx
push dword [ebp - 0x13f4]
push dword [ebp - 0x13f8]
mov ecx, 0xace058
call fcn.004063d1
jmp 0x480154
jmp 0x480132
jmp 0x48010c
push 0x2534
call dword [sym.imp.USER32.dll_GetParent]
mov dword [ebp - 0x1bf0], 1
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0xd2c], 0x3b95
jge 0x4801e5
mov edx, dword [ebp - 0x1480]
mov ecx, 0xace058
call fcn.00409042
jmp 0x480201
or dword [ebp - 4], 0xffffffff
jmp 0x48020b
mov dword [ebp - 0x38c], 0
jmp 0x480224
mov eax, dword [ebp - 0x38c]
inc eax
mov dword [ebp - 0x38c], eax
cmp dword [ebp - 0x38c], 2
jge 0x480240
mov eax, dword [ebp - 0x38c]
mov dword [ebp + eax*4 - 0x181c], 0xfb361f3d
jmp 0x480217
mov dword [ebp - 0x30], 0
jmp 0x480250
cmp dword [ebp - 0x30], 0x1a
jle 0x480855
push 4
lea ecx, [ebp - 0x804]
call fcn.00406726
mov dword [ebp - 0x754], 0x7bbda73a
mov dword [ebp - 0x1bf8], 0x2f400034
push 0x15a9
push 1
push 1
push 1
push 0x7c72
lea eax, [ebp - 0x804]
push eax
push 0x7f84
lea eax, [ebp - 0x1c00]
push eax
push 0
call fcn.00468dce
add esp, 0x24
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x1c08], eax
cmp dword [ebp - 0x30], 0
je 0x4803d8
push 3
lea ecx, [ebp - 0x804]
call fcn.00406814
mov eax, dword [eax]
sub eax, 0x77f17245
cmp eax, dword [ebp - 0x30]
jle 0x4802e0
mov dword [ebp - 0x994], 1
jmp 0x4802e7
and dword [ebp - 0x994], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x994], eax
jle 0x4802fe
mov dword [ebp - 0xefc], 1
jmp 0x480305
and dword [ebp - 0xefc], 0
cmp dword [ebp - 0xefc], 0xa66fa4bc
ja 0x48031d
mov dword [ebp - 0x99c], 1
jmp 0x480324
and dword [ebp - 0x99c], 0
cmp dword [ebp - 0x99c], 3
jge 0x480339
mov dword [ebp - 0xd34], 1
jmp 0x480340
and dword [ebp - 0xd34], 0
mov eax, dword [ebp - 0x190]
cmp dword [ebp - 0xd34], eax
jle 0x48035a
mov dword [ebp - 0x9a4], 1
jmp 0x480361
and dword [ebp - 0x9a4], 0
push 3
lea ecx, [ebp - 0x804]
call fcn.00406814
mov ecx, dword [ebp - 0x9a4]
cmp ecx, dword [eax]
jne 0x480384
mov dword [ebp - 0x74c], 1
jmp 0x48038b
and dword [ebp - 0x74c], 0
push 3
lea ecx, [ebp - 0x804]
call fcn.00406814
mov ecx, dword [ebp - 0x74c]
mov dword [eax], ecx
mov eax, 0xbd9
imul eax, eax, 0xba92
cmp eax, 0xffffffff
jb 0x4803bc
mov dword [ebp - 0xfe4], 1
jmp 0x4803c3
and dword [ebp - 0xfe4], 0
cmp dword [ebp - 0xfe4], 0xfffffff8
je 0x4803d8
and dword [ebp - 0x11e4], 0
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x1c10], eax
mov eax, dword [ebp - 0x754]
cmp dword [ebp - 0x30], eax
jge 0x4803ff
mov dword [ebp - 0x9ac], 1
jmp 0x480406
and dword [ebp - 0x9ac], 0
mov eax, dword [ebp - 0x754]
cmp dword [ebp - 0x9ac], eax
jle 0x480420
mov dword [ebp - 0xd3c], 1
jmp 0x480427
and dword [ebp - 0xd3c], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0xd3c], eax
je 0x48043e
mov dword [ebp - 0x9b4], 1
jmp 0x480445
and dword [ebp - 0x9b4], 0
cmp dword [ebp - 0x9b4], 0
je 0x480463
cmp dword [ebp - 0x774], 0
je 0x480463
mov dword [ebp - 0xf04], 1
jmp 0x48046a
and dword [ebp - 0xf04], 0
cmp dword [ebp - 0xf04], 0x7390
jl 0x480482
mov dword [ebp - 0x1608], 1
jmp 0x480489
and dword [ebp - 0x1608], 0
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x1c18], eax
push 0xfffffffffffffff8
pop eax
cmp eax, 1
jb 0x4804d4
push 0x271e
lea eax, [ebp - 0x394]
push eax
push 0
push 1
push 0x3de3
push 0x6f1c
push 1
lea eax, [ebp - 0x774]
push eax
push 1
push 0x59d5
call fcn.00472c46
add esp, 0x28
jmp 0x48082a
mov dword [ebp - 0x6cc], 0x3c57
mov dword [ebp - 0x624], 0
jmp 0x4804f7
cmp dword [ebp - 0x624], 3
jge 0x480513
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x181c]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x181c], eax
lea ecx, [ebp - 0x804]
call fcn.004067f8
jmp 0x480249
jmp 0x4800a0
mov dword [ebp - 0x238], 0xffffffff
mov dword [ebp - 0x39c], 0x7f6af112
mov dword [ebp - 0x1c20], 0xea41449c
mov dword [ebp - 0x39c], 0
jmp 0x480891
mov eax, dword [ebp - 0x39c]
dec eax
mov dword [ebp - 0x39c], eax
cmp dword [ebp - 0x39c], 0xffffffed
jge 0x48098e
push 3
lea ecx, [ebp - 0x199c]
call fcn.00406726
push 3
lea ecx, [ebp - 0x1984]
call fcn.00406726
lea eax, [ebp - 0x148c]
push eax
push 0x1aeb
push 0x66b9
push 0x4ff8
push 1
push 0
push 1
lea eax, [ebp - 0x199c]
push eax
push 0x6f68
call fcn.0046c5fd
add esp, 0x24
push 0x5f6b
push 0
push 0x1920
push 0x4f7f
push 0x236
lea eax, [ebp - 0x148c]
push eax
push 1
push 0
push 0x6d81
lea eax, [ebp - 0x1984]
push eax
call fcn.0046f1f5
add esp, 0x28
push 1
push 1
push 0x7fb5
push 0x24f4
push 1
push 0x55e
call fcn.00461841
add esp, 0x18
push 1
push 0x14e5
push 1
push 0x1ba3
push 1
push 0x43b1
push 0
lea eax, [ebp - 0x199c]
push eax
push 0x7f39
push 1
push 0x4cfd
lea eax, [ebp - 0x1984]
push eax
call fcn.00479e07
add esp, 0x30
lea ecx, [ebp - 0x1984]
call fcn.004067f8
lea ecx, [ebp - 0x199c]
call fcn.004067f8
jmp 0x480884
mov dword [ebp - 0x184c], 1
mov dword [ebp - 0x1848], 1
mov dword [ebp - 0x1844], 1
mov dword [ebp - 0x1840], 1
lea ecx, [ebp - 0x675]
call fcn.00406823
push eax
lea eax, [ebp - 0x183c]
push eax
lea eax, [ebp - 0x184c]
push eax
lea ecx, [ebp - 0x207c]
call fcn.00406826
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1e30]
call fcn.004067d2
mov dword [ebp - 0x11f4], 0xd4081c29
mov dword [ebp - 0x1718], 0
push 0x46c7
push 0x235f
push 0x2e2e
push 0x37ee
push 0x3819
push 0x6fd1
push 1
lea eax, [ebp - 0x11f4]
push eax
push 1
lea eax, [ebp - 0x1718]
push eax
push 0x44ef
push 1
push 0x7124
push 1
lea eax, [ebp - 0x1e30]
push eax
call fcn.00461d27
add esp, 0x3c
lea ecx, [ebp - 0x1e30]
call fcn.004067f8
push 1
lea eax, [ebp - 0x1674]
push eax
push 0
lea eax, [ebp - 0x1c28]
push eax
push 1
push 0x467f
call fcn.0046a1e1
add esp, 0x18
push 1
push 1
lea eax, [ebp - 0x1c8]
push eax
lea eax, [ebp - 0x1674]
push eax
push 1
push 0
push 0x69a7
lea eax, [ebp - 0x11fc]
push eax
lea eax, [ebp - 0x278]
push eax
push 0x70cf
push 1
push 0x4bb2
call fcn.0046c018
add esp, 0x30
cmp dword [ebp - 0x1c8], 0
je 0x481179
mov dword [ebp - 0x6d4], 0x3a21b78c
mov dword [ebp - 0x14a4], 0x32da3bb1
mov dword [ebp - 0x1c8], 0
jmp 0x480aef
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 0
jg 0x481174
mov dword [ebp - 0x1c30], 0xa2e255bb
mov dword [ebp - 0x1498], 0xfffffffd
mov dword [ebp - 0x1204], 0xffffffff
mov dword [ebp - 0x1c38], 1
mov dword [ebp - 0x1c40], 0x58bac04e
mov dword [ebp - 0x1c48], 0xfffffffb
mov dword [ebp - 0x1c50], 0x3707822e
mov dword [ebp - 0x1c58], 0xffffffff
mov dword [ebp - 0x1c60], 0xf5f49900
mov dword [ebp - 0x1c68], 0xfdcba86b
mov dword [ebp - 0x1c70], 4
push 2
lea ecx, [ebp - 0x1e40]
call fcn.00406726
mov dword [ebp - 0x1c78], 0xffffffff
mov dword [ebp - 0x1c80], 0x41022496
mov dword [ebp - 0x1610], 0x2e5f58cd
mov dword [ebp - 0x228], 0
jmp 0x480bae
mov eax, dword [ebp - 0x228]
inc eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 3
jge 0x480bca
mov eax, dword [ebp - 0x228]
mov dword [ebp + eax*4 - 0x22c8], 0xffffffff
jmp 0x480ba1
push 0x76bd
push 1
push 1
lea eax, [ebp - 0x1e40]
push eax
push 0x7c04
push 0x7127
push 0
lea eax, [ebp - 0x228]
push eax
push 1
push 0
call fcn.00463f82
add esp, 0x28
mov eax, dword [ebp - 0x1498]
mov dword [ebp - 0x1204], eax
push 0x72c2
push 0
push 0x197a
lea eax, [ebp - 0x1610]
push eax
push 0x6969
push 0x6cdd
push 0x6321
push 0x6a95
push 0x11ff
push 0x36d7
push 0x7562
push 0x314b
push 0
push 0x95c
push 0x3af3
push 1
call fcn.004784a2
add esp, 0x40
lea ecx, [ebp - 0x1e40]
call fcn.004067f8
mov dword [ebp - 0x278], 0
jmp 0x480c7a
cmp dword [ebp - 0x278], 0
jg 0x480f47
push 4
lea ecx, [ebp - 0x19b4]
call fcn.00406726
mov dword [ebp - 0x230], 1
mov dword [ebp - 0x5a4], 0
jmp 0x480cb7
mov eax, dword [ebp - 0x5a4]
inc eax
mov dword [ebp - 0x5a4], eax
cmp dword [ebp - 0x5a4], 2
jge 0x480cd3
mov eax, dword [ebp - 0x5a4]
mov dword [ebp + eax*4 - 0x1a28], 0xfffffff8
jmp 0x480caa
mov dword [ebp - 0x230], 0
jmp 0x480cec
mov eax, dword [ebp - 0x230]
inc eax
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 2
jge 0x480d08
mov eax, dword [ebp - 0x230]
mov dword [ebp + eax*4 - 0x1a28], 1
jmp 0x480cdf
mov byte [ebp - 0x175], 0
push 0
push 0x5153
push 0x2d2c
push 0x3a6a
lea eax, [ebp - 0x175]
push eax
push 1
push 0x54c9
push 0x5984
push 0x4413
push 0x58e3
push 1
push 1
push 0x7994
call fcn.0046a3f0
add esp, 0x34
mov dword [ebp - 0x2a0], 1
mov dword [ebp - 0x3a4], 0
jmp 0x480d71
mov eax, dword [ebp - 0x3a4]
inc eax
mov dword [ebp - 0x3a4], eax
cmp dword [ebp - 0x3a4], 1
jge 0x480d8d
mov eax, dword [ebp - 0x3a4]
mov dword [ebp + eax*4 - 0x120c], 0xfffc
jmp 0x480d64
mov dword [ebp - 0x2a0], 0
jmp 0x480da6
cmp dword [ebp - 0x2a0], 0
jg 0x480e42
mov byte [ebp - 0xff], 0
push 3
lea ecx, [ebp - 0x1e60]
call fcn.00406726
mov dword [ebp - 0x5fc], 0
mov dword [ebp - 0x1c90], 0xb1891f78
mov dword [ebp - 0x1c98], 0xfffffff9
push 1
lea ecx, [ebp - 0x1e50]
call fcn.00406726
mov dword [ebp - 0x1ca0], 0x439cb61d
push 4
lea ecx, [ebp - 0x19cc]
call fcn.00406726
lea eax, [ebp - 0x1e60]
push eax
lea eax, [ebp - 0x198]
push eax
push 1
push 1
push 0
push 0x2439
call fcn.0047a236
add esp, 0x18
push 0x42df
push 0x496c
push 0x1794
push 0x335d
push 0x5d06
push 1
push 1
lea eax, [ebp - 0x1e50]
push eax
push 0
push 0x4893
lea eax, [ebp - 0x198]
push eax
push 1
call fcn.0046fe98
add esp, 0x30
mov dword [ebp - 0x198], 0
jmp 0x481013
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 4
jge 0x481032
push dword [ebp - 0x198]
lea ecx, [ebp - 0x19cc]
call fcn.00406814
and dword [eax], 0
jmp 0x481006
mov byte [ebp - 0x131], 0
push 0x5b85
push 0x4640
lea eax, [ebp - 0x131]
push eax
push 0x44ee
push 0x32fc
push 1
push 0x34e7
push 0x1ad1
push 0
push 0x6a05
push 1
call fcn.004718f8
add esp, 0x2c
mov dword [ebp - 0x5fc], 2
jmp 0x48108a
mov eax, dword [ebp - 0x5fc]
dec eax
mov dword [ebp - 0x5fc], eax
cmp dword [ebp - 0x5fc], 0
jl 0x48110d
mov dword [ebp - 0x1214], 0xffffffff
lea eax, [ebp - 0x19cc]
push eax
push 0x261f
push 0x100f
push 0x772e
push 0x599b
push 0x631e
push 0x5a6b
push 0x5fe0
push 0x195
push 1
push 0x75e3
push 1
push 0x4707
push 0xd01
push 0x63a0
push 1
push 0x1a3
push 1
push 0
push 0x76ef
push 1
call fcn.00470fa3
add esp, 0x54
mov dword [ebp - 0x1214], 0xffffffff
jmp 0x48107d
lea ecx, [ebp - 0x19cc]
call fcn.004067f8
lea ecx, [ebp - 0x1e50]
call fcn.004067f8
lea ecx, [ebp - 0x1e60]
call fcn.004067f8
movzx eax, byte [ebp - 0xff]
test eax, eax
je 0x48116f
push 1
push 0x2e46
push 1
push 0xe5
push 1
push 0x44ff
push 0x70a8
push 0x20d5
call fcn.004634a5
add esp, 0x20
push 0
push 0x19b8
push 0
call dword [sym.imp.GDI32.dll_GetMetaFileBitsEx]
jmp 0x480ae2
jmp 0x481433
push 0x76e7
push 1
push 1
push 0x51d6
push 0x2199
push 0x38b4
push 1
push 0x50c3
push 1
push 1
call fcn.00463f82
add esp, 0x28
mov dword [ebp - 0x238], 0
jmp 0x4811bd
cmp dword [ebp - 0x238], 1
jge 0x481433
mov dword [ebp - 0x784], 1
mov dword [ebp - 0x20], 1
mov dword [ebp - 0x9fc], 1
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x1ca8], eax
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x20], eax
jge 0x481202
mov dword [ebp - 0x9f4], 1
jmp 0x481209
and dword [ebp - 0x9f4], 0
cmp dword [ebp - 0x9f4], 0x9ae4f78d
ja 0x481221
mov dword [ebp - 0xf14], 1
jmp 0x481228
and dword [ebp - 0xf14], 0
mov eax, dword [ebp - 0xf14]
mov dword [ebp - 0x9fc], eax
imul eax, dword [ebp - 0x9fc], 0x72c0
cmp eax, dword [ebp - 0x20]
jg 0x48124f
mov dword [ebp - 0xd64], 1
jmp 0x481256
and dword [ebp - 0xd64], 0
cmp dword [ebp - 0xd64], 0x31615e82
je 0x48126e
mov dword [ebp - 0xa04], 1
jmp 0x481275
and dword [ebp - 0xa04], 0
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0xa04]
cmp eax, 0xfaf07207
jb 0x481291
mov dword [ebp - 0x1060], 1
jmp 0x481298
and dword [ebp - 0x1060], 0
mov eax, dword [ebp - 0x1060]
neg eax
sub eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x20]
je 0x4812b4
mov dword [ebp - 0xa0c], 1
jmp 0x4812bb
and dword [ebp - 0xa0c], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0xa0c], eax
jne 0x4812d2
mov dword [ebp - 0xd6c], 1
jmp 0x4812d9
and dword [ebp - 0xd6c], 0
imul eax, dword [ebp - 0xd6c], 5
test eax, eax
je 0x4812f6
cmp dword [ebp - 0x20], 0
je 0x4812f6
mov dword [ebp - 0xa14], 1
jmp 0x4812fd
and dword [ebp - 0xa14], 0
cmp dword [ebp - 0xa14], 3
jbe 0x481312
mov dword [ebp - 0xf1c], 1
jmp 0x481319
and dword [ebp - 0xf1c], 0
cmp dword [ebp - 0xf1c], 0
jne 0x48132e
mov dword [ebp - 0xa1c], 1
jmp 0x481335
and dword [ebp - 0xa1c], 0
mov eax, dword [ebp - 0x784]
dec eax
mov dword [ebp - 0x784], eax
mov eax, dword [ebp - 0x784]
sub eax, dword [ebp - 0xa1c]
dec eax
cmp eax, dword [ebp - 0x20]
jle 0x481360
mov dword [ebp - 0xd74], 1
jmp 0x481367
and dword [ebp - 0xd74], 0
mov eax, dword [ebp - 0xd74]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x20], 0
jmp 0x481380
lea ecx, [ebp - 0x1674]
call fcn.004067f8
push 2
lea ecx, [ebp - 0x1e70]
call fcn.00406726
mov dword [ebp - 0x3b4], 0x506d4441
push 0x2b
push 0x6a0b
push 0x2eae
push 0x200d
push 0x462f
push 0x153
push 0x40ac
push 0x5366
push 0x3172
lea eax, [ebp - 0x1e70]
push eax
push 0
push 0x127f
push 0x54db
push 1
push 1
lea eax, [ebp - 0x1cb0]
push eax
push 1
push 0x3557
push 1
push 1
push 0x6344
call fcn.0047ba9e
add esp, 0x54
mov dword [ebp - 0x3b4], 1
jmp 0x4814ce
mov eax, dword [ebp - 0x3b4]
dec eax
mov dword [ebp - 0x3b4], eax
cmp dword [ebp - 0x3b4], 0
jl 0x481515
mov dword [ebp - 0x16d4], 0xfffffffb
push 1
push 0x4ca6
push 1
push 0
push 0
push 0x6f11
push 0x1a00
lea eax, [ebp - 0x16d4]
push eax
push 1
push 0x2d80
push 0x74d
call fcn.00479622
add esp, 0x2c
jmp 0x4814c1
lea ecx, [ebp - 0x1e70]
call fcn.004067f8
lea eax, [ebp - 0xf80]
push eax
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov dword [ebp - 0xf88], eax
push 3
lea ecx, [ebp - 0x668]
call fcn.00406726
mov dword [ebp - 0x1f0], 1
push 0x1d61
push 1
push 0x60b0
push 1
push 0
push 0
push 0x4373
lea eax, [ebp - 0x668]
push eax
lea eax, [ebp - 0x280]
push eax
push 0x3614
push 1
push 0x76
push 0x5597
call fcn.0046f99f
add esp, 0x34
mov dword [ebp - 0x280], 0
jmp 0x4815a5
mov eax, dword [ebp - 0x280]
inc eax
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 4
jge 0x4815c1
mov eax, dword [ebp - 0x280]
mov dword [ebp + eax*4 - 0x2094], 0x5d5f8d9a
jmp 0x481598
xor eax, eax
jne 0x481602
push 0
lea ecx, [ebp - 0x668]
call fcn.00406814
cmp dword [eax], 0
jne 0x481602
push 2
lea ecx, [ebp - 0x668]
call fcn.00406814
mov esi, eax
push 0
lea ecx, [ebp - 0x668]
call fcn.00406814
mov ecx, dword [esi]
cmp ecx, dword [eax]
jg 0x481602
and dword [ebp - 0xa24], 0
jmp 0x48160c
mov dword [ebp - 0xa24], 1
push 0
lea ecx, [ebp - 0x668]
call fcn.00406814
mov ecx, dword [ebp - 0xa24]
cmp ecx, dword [eax]
je 0x48163e
push 1
lea ecx, [ebp - 0x668]
call fcn.00406814
cmp dword [eax], 0
jne 0x48163e
and dword [ebp - 0xff4], 0
jmp 0x481648
mov dword [ebp - 0xff4], 1
push 0
lea ecx, [ebp - 0x668]
call fcn.00406814
mov ecx, dword [ebp - 0xff4]
cmp ecx, dword [eax]
jg 0x48166b
mov dword [ebp - 0xa2c], 1
jmp 0x481672
and dword [ebp - 0xa2c], 0
push 0
lea ecx, [ebp - 0x668]
call fcn.00406814
mov ecx, dword [ebp - 0xa2c]
cmp ecx, dword [eax]
jge 0x481695
mov dword [ebp - 0xd7c], 1
jmp 0x48169c
and dword [ebp - 0xd7c], 0
push 0
lea ecx, [ebp - 0x668]
call fcn.00406814
mov eax, dword [eax]
cmp eax, dword [ebp - 0xd7c]
jg 0x4816bf
mov dword [ebp - 0xa34], 1
jmp 0x4816c6
and dword [ebp - 0xa34], 0
cmp dword [ebp - 0xa34], 0xffff
je 0x4816ed
push 1
lea ecx, [ebp - 0x668]
call fcn.00406814
cmp dword [eax], 0
jne 0x4816ed
and dword [ebp - 0xf24], 0
jmp 0x4816f7
mov dword [ebp - 0xf24], 1
imul eax, dword [ebp - 0xf24], 0xb979
mov dword [ebp - 0x1f0], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1f0]
mov dword [ebp + eax - 0x2094], ecx
mov dword [ebp - 0x1f0], 0
jmp 0x481733
cmp dword [ebp - 0x1f0], 0xffffffe9
jl 0x481830
mov eax, dword [ebp - 0x1320]
mov dword [ebp - 0x1330], eax
mov eax, dword [ebp - 0x1328]
mov dword [ebp - 0x1338], eax
mov eax, dword [ebp - 0x1330]
mov dword [ebp - 0x29c], eax
mov eax, dword [ebp - 0x1338]
mov dword [ebp - 0x1340], eax
mov eax, dword [ebp - 0x29c]
mov dword [eax], 0
jmp 0x48d9a6
mov eax, dword [ebp - 0x29c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x29c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x29c]
cmp dword [eax], 2
jge 0x48d9cc
mov eax, dword [ebp - 0x29c]
push dword [eax]
mov ecx, dword [ebp - 0x1340]
call fcn.00406814
mov dword [eax], 1
jmp 0x48d995
jmp 0x48da3b
mov eax, dword [ebp - 0x1348]
mov dword [ebp - 0x1360], eax
mov eax, dword [ebp - 0x1350]
mov dword [ebp - 0x1358], eax
mov eax, dword [ebp - 0x1358]
movzx eax, byte [eax]
test eax, eax
je 0x48da17
mov byte [ebp - 0x151], 0
movzx eax, byte [ebp - 0x151]
test eax, eax
je 0x48da15
push 0x6f0
push 0x1eef
call dword [sym.imp.USER32.dll_ReleaseDC]
jmp 0x48da3b
mov eax, dword [ebp - 0x1360]
mov dword [ebp - 0x1368], eax
mov eax, dword [ebp - 0x1368]
mov dword [ebp - 0x1370], eax
mov eax, dword [ebp - 0x1370]
mov dword [eax], 0x9efec1a2
jmp 0x48da4b
push 0x3dfc
push 0
call fcn.00459d2c
pop ecx
pop ecx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret