Function at 0x47f83f
Capabilities:
Encrypt data using speck

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4ca8c7
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x3638
call fcn.004b9f00
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
push 1
lea ecx, [ebp - 0x3118]
call fcn.0043a535
mov dword [ebp - 0x5c8], 0xfffffffe
mov dword [ebp - 0x5c0], 0
jmp 0x47f898
mov eax, dword [ebp - 0x5c0]
inc eax
mov dword [ebp - 0x5c0], eax
cmp dword [ebp - 0x5c0], 1
jge 0x47f8ba
push dword [ebp - 0x5c0]
lea ecx, [ebp - 0x3118]
call fcn.0043a623
mov dword [eax], 0x64a6
jmp 0x47f88b
mov dword [ebp - 0x5c8], 0
jmp 0x47f8d3
mov eax, dword [ebp - 0x5c8]
inc eax
mov dword [ebp - 0x5c8], eax
cmp dword [ebp - 0x5c8], 0
jg 0x47f8fd
mov byte [ebp - 0x36a], 0
movzx eax, byte [ebp - 0x36a]
test eax, eax
je 0x47f8fb
call dword [0xacd408]
push eax
call dword [0xacd3c8]
jmp 0x47f8c6
mov byte [ebp - 0x354], 0
movzx eax, byte [ebp - 0x354]
test eax, eax
je 0x47f917
push 1
call dword [0xacd3f0]
lea ecx, [ebp - 0x3118]
call fcn.0043a607
push 3
lea ecx, [ebp - 0xb88]
call fcn.0043a535
push 1
lea ecx, [ebp - 0x202c]
call fcn.0043a535
mov dword [ebp - 0x2a0], 0xbbe56890
mov dword [ebp - 0x374], 0xee76373a
mov dword [ebp - 0x98c], 7
mov dword [ebp - 0x484], 0x46b5
mov dword [ebp - 0x1c0], 0
jmp 0x47f97d
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 3
jge 0x47f99f
push dword [ebp - 0x1c0]
lea ecx, [ebp - 0xb88]
call fcn.0043a623
mov dword [eax], 7
jmp 0x47f970
mov dword [ebp - 0x1c0], 0
jmp 0x47f9b8
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 1
jge 0x47f9da
push dword [ebp - 0x1c0]
lea ecx, [ebp - 0x202c]
call fcn.0043a623
mov dword [eax], 1
jmp 0x47f9ab
push 0
lea ecx, [ebp - 0x202c]
call fcn.0043a623
mov dword [ebp - 0x1b18], eax
push 0
lea ecx, [ebp - 0x202c]
call fcn.0043a623
mov ecx, dword [ebp - 0x1b18]
mov eax, dword [eax]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0xb88]
call fcn.0043a623
mov ecx, dword [ebp - 0x1b18]
mov eax, dword [eax]
imul eax, dword [ecx]
mov dword [ebp - 0x2a0], eax
cmp dword [ebp - 0x2a0], 0
je 0x47faa7
push 1
lea ecx, [ebp - 0xb88]
call fcn.0043a623
mov eax, dword [eax]
mov dword [ebp - 0x374], eax
cmp dword [ebp - 0x374], 0
jg 0x47fa55
mov dword [ebp - 0x1e38], 1
jmp 0x47fa5c
and dword [ebp - 0x1e38], 0
mov eax, dword [ebp - 0x2a0]
cmp dword [ebp - 0x1e38], eax
jl 0x47fa76
mov dword [ebp - 0xa54], 1
jmp 0x47fa7d
and dword [ebp - 0xa54], 0
push 0
lea ecx, [ebp - 0x202c]
call fcn.0043a623
mov ecx, dword [ebp - 0xa54]
mov dword [eax], ecx
cmp dword [ebp - 0xa54], 0
je 0x47faa7
mov dword [ebp - 0x1e40], 1
jmp 0x47faae
and dword [ebp - 0x1e40], 0
cmp dword [ebp - 0x1e40], 0xe360
jle 0x47fac6
mov dword [ebp - 0x1e48], 1
jmp 0x47facd
and dword [ebp - 0x1e48], 0
push 1
lea ecx, [ebp - 0xb88]
call fcn.0043a623
mov esi, eax
push 1
lea ecx, [ebp - 0xb88]
call fcn.0043a623
mov ecx, dword [ebp - 0x1e48]
sub ecx, dword [eax]
imul ecx, dword [esi]
mov dword [ebp - 0x98c], ecx
mov esi, dword [ebp - 0x98c]
push 1
lea ecx, [ebp - 0xb88]
call fcn.0043a623
cmp esi, dword [eax]
jne 0x47fb1d
mov dword [ebp - 0x1e50], 1
jmp 0x47fb24
and dword [ebp - 0x1e50], 0
push 2
lea ecx, [ebp - 0xb88]
call fcn.0043a623
mov ecx, dword [ebp - 0x1e50]
cmp ecx, dword [eax]
jg 0x47fb47
mov dword [ebp - 0x1e58], 1
jmp 0x47fb4e
and dword [ebp - 0x1e58], 0
push 2
lea ecx, [ebp - 0xb88]
call fcn.0043a623
mov ecx, dword [ebp - 0x1e58]
cmp ecx, dword [eax]
jg 0x47fb71
mov dword [ebp - 0x1e60], 1
jmp 0x47fb78
and dword [ebp - 0x1e60], 0
cmp dword [ebp - 0x1e60], 0xfff6
jbe 0x47fb91
cmp dword [ebp - 0x98c], 0
je 0x47fd3a
mov dword [ebp - 0x3cc], 0
mov dword [ebp - 0x2274], 0xffffffff
mov dword [ebp - 0x227c], 0xcc114ff6
mov dword [ebp - 0x374], 0
jmp 0x47fbc8
mov eax, dword [ebp - 0x374]
inc eax
mov dword [ebp - 0x374], eax
cmp dword [ebp - 0x374], 2
jg 0x47fbef
mov byte [ebp - 0x356], 0
movzx eax, byte [ebp - 0x356]
test eax, eax
je 0x47fbed
push 0
push 0
call dword [0xacd210]
jmp 0x47fbbb
mov eax, dword [ebp - 0x484]
mov dword [ebp - 0x32f0], eax
cmp dword [ebp - 0x3cc], 0xc12d
jge 0x47fc13
mov dword [ebp - 0x212c], 1
jmp 0x47fc1a
and dword [ebp - 0x212c], 0
cmp dword [ebp - 0x3cc], 0
jne 0x47fc35
mov eax, 0x5180
test eax, eax
jne 0x47fc35
and dword [ebp - 0x1e68], 0
jmp 0x47fc3f
mov dword [ebp - 0x1e68], 1
mov eax, dword [ebp - 0x3cc]
cmp dword [ebp - 0x1e68], eax
jne 0x47fc54
cmp dword [ebp - 0x3cc], 0
imul eax, dword [ebp - 0x3cc], 0xa52b
dec eax
dec eax
je 0x47fc77
cmp dword [ebp - 0x374], 0
je 0x47fc77
mov dword [ebp - 0x1e70], 1
jmp 0x47fc7e
and dword [ebp - 0x1e70], 0
cmp dword [ebp - 0x1e70], 1
jl 0x47fc93
mov dword [ebp - 0x1e78], 1
jmp 0x47fc9a
and dword [ebp - 0x1e78], 0
mov eax, dword [ebp - 0x3cc]
cmp dword [ebp - 0x1e78], eax
je 0x47fcb4
mov dword [ebp - 0x1ebc], 1
jmp 0x47fcbb
and dword [ebp - 0x1ebc], 0
cmp dword [ebp - 0x1ebc], 0x49cf
je 0x47fcd3
mov dword [ebp - 0x1ec4], 1
jmp 0x47fcda
and dword [ebp - 0x1ec4], 0
push 0
lea ecx, [ebp - 0x202c]
call fcn.0043a623
mov ecx, dword [ebp - 0x1ec4]
cmp ecx, dword [eax]
jge 0x47fcfd
mov dword [ebp - 0x226c], 1
jmp 0x47fd04
and dword [ebp - 0x226c], 0
mov eax, dword [ebp - 0x2a0]
mov dword [ebp - 0x2f3c], eax
cmp dword [ebp - 0x2274], 0xfffffffe
jle 0x47fd25
mov dword [ebp - 0x1ecc], 1
jmp 0x47fd2c
and dword [ebp - 0x1ecc], 0
mov eax, dword [ebp - 0x1ecc]
mov dword [ebp - 0x227c], eax
jmp 0x47fd7f
mov dword [ebp - 0x2a0], 0
jmp 0x47fd53
mov eax, dword [ebp - 0x2a0]
inc eax
mov dword [ebp - 0x2a0], eax
cmp dword [ebp - 0x2a0], 2
jg 0x47fd7f
mov byte [ebp - 0x358], 0
movzx eax, byte [ebp - 0x358]
test eax, eax
je 0x47fd7d
push 0
call dword [0xacd408]
push eax
call dword [0xacd424]
jmp 0x47fd46
mov dword [ebp - 0x484], 0
jmp 0x47fd98
mov eax, dword [ebp - 0x484]
inc eax
mov dword [ebp - 0x484], eax
cmp dword [ebp - 0x484], 1
jge 0x47fdba
push dword [ebp - 0x484]
lea ecx, [ebp - 0x202c]
call fcn.0043a623
mov dword [eax], 0xfffffffb
jmp 0x47fd8b
lea ecx, [ebp - 0x202c]
call fcn.0043a607
lea ecx, [ebp - 0xb88]
call fcn.0043a607
push 1
lea ecx, [ebp - 0x3128]
call fcn.0043a535
mov dword [ebp - 0x84c], 0xfffffffe
push 2
lea ecx, [ebp - 0x2c9c]
call fcn.0043a535
mov dword [ebp - 0x49c], 1
mov dword [ebp - 0x158], 0
jmp 0x47fe17
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 2
jge 0x47fe36
push dword [ebp - 0x158]
lea ecx, [ebp - 0x2c9c]
call fcn.0043a623
or dword [eax], 0xffffffff
jmp 0x47fe0a
mov dword [ebp - 0x158], 0
jmp 0x47fe4f
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 4
jge 0x47fe6b
mov eax, dword [ebp - 0x158]
mov dword [ebp + eax*4 - 0x3454], 0x3099
jmp 0x47fe42
mov dword [ebp - 0x49c], 1
jmp 0x47fe84
mov eax, dword [ebp - 0x49c]
dec eax
mov dword [ebp - 0x49c], eax
cmp dword [ebp - 0x49c], 0
jl 0x47fec2
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3454]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x3454], eax
push dword [ebp - 0x49c]
lea ecx, [ebp - 0x2c9c]
call fcn.0043a623
cmp dword [eax], 0
je 0x47fec0
jmp 0x47fe77
jmp 0x47fe77
mov byte [ebp - 0x35a], 0
movzx eax, byte [ebp - 0x35a]
test eax, eax
je 0x47fee0
push 0
push 0
push 0
call dword [0xacd254]
lea ecx, [ebp - 0x2c9c]
call fcn.0043a607
mov dword [ebp - 0x5cc], 0
jmp 0x47ff04
mov eax, dword [ebp - 0x5cc]
inc eax
mov dword [ebp - 0x5cc], eax
cmp dword [ebp - 0x5cc], 1
jge 0x47ff26
push dword [ebp - 0x5cc]
lea ecx, [ebp - 0x3128]
call fcn.0043a623
mov dword [eax], 0x64a6
jmp 0x47fef7
mov dword [ebp - 0x84c], 0
jmp 0x47ff3f
mov eax, dword [ebp - 0x84c]
inc eax
mov dword [ebp - 0x84c], eax
cmp dword [ebp - 0x84c], 0
jg 0x480409
mov dword [ebp - 0x335c], 0x24039b64
mov dword [ebp - 0x2f44], 0
mov dword [ebp - 0x31bc], 0
mov dword [ebp - 0x1ed4], 0xffffffff
mov dword [ebp - 0x5d4], 0
jmp 0x47ff8d
mov eax, dword [ebp - 0x5d4]
inc eax
mov dword [ebp - 0x5d4], eax
cmp dword [ebp - 0x5d4], 3
jge 0x47ffa9
mov eax, dword [ebp - 0x5d4]
mov dword [ebp + eax*4 - 0x35d4], 0x1d976ff5
jmp 0x47ff80
mov eax, dword [ebp - 0x1ed4]
inc eax
mov dword [ebp - 0x1ed4], eax
mov byte [ebp - 0x35c], 0
movzx eax, byte [ebp - 0x35c]
test eax, eax
je 0x47ffd7
push 0x72d
push 0
push 0
call dword [0xacd01c]
mov dword [ebp - 0x77c], 0x1824a8c6
mov dword [ebp - 0x2284], 0x44198d72
mov dword [ebp - 0x994], 0xffffffff
mov dword [ebp - 0x228c], 0x6b7be2d3
mov dword [ebp - 0x77c], 0
jmp 0x480018
mov eax, dword [ebp - 0x77c]
dec eax
mov dword [ebp - 0x77c], eax
cmp dword [ebp - 0x77c], 0xffffffeb
jl 0x480155
mov dword [ebp - 0xb08], 0xffffffff
mov byte [ebp - 0x35e], 0
movzx eax, byte [ebp - 0x35e]
test eax, eax
je 0x480057
push 0
call dword [0xacd408]
push eax
call dword [0xacd3e8]
push eax
call dword [0xacd0b0]
xor eax, eax
cmp eax, 4
jge 0x480073
cmp dword [ebp - 0x994], 0
je 0x480073
mov dword [ebp - 0x1edc], 1
jmp 0x48007a
and dword [ebp - 0x1edc], 0
mov eax, dword [ebp - 0xb08]
cmp eax, dword [ebp - 0x1edc]
jle 0x48009d
cmp dword [ebp - 0xb08], 0
je 0x48009d
mov dword [ebp - 0x1ee4], 1
jmp 0x4800a4
and dword [ebp - 0x1ee4], 0
cmp dword [ebp - 0x1ee4], 0xfff6
ja 0x4800bc
mov dword [ebp - 0x1eec], 1
jmp 0x4800c3
and dword [ebp - 0x1eec], 0
cmp dword [ebp - 0x1eec], 0xdfe4
je 0x4800db
mov dword [ebp - 0x1ef4], 1
jmp 0x4800e2
and dword [ebp - 0x1ef4], 0
mov eax, dword [ebp - 0xb08]
cmp dword [ebp - 0x1ef4], eax
jge 0x4800fc
mov dword [ebp - 0x1efc], 1
jmp 0x480103
and dword [ebp - 0x1efc], 0
cmp dword [ebp - 0x1efc], 6
je 0x480118
mov dword [ebp - 0x1f04], 1
jmp 0x48011f
and dword [ebp - 0x1f04], 0
cmp dword [ebp - 0x1f04], 0xfa1a
jle 0x480137
mov dword [ebp - 0x1f0c], 1
jmp 0x48013e
and dword [ebp - 0x1f0c], 0
mov eax, dword [ebp - 0x2284]
add eax, dword [ebp - 0x1f0c]
mov dword [ebp - 0x228c], eax
jmp 0x48000b
xor eax, eax
inc eax
je 0x48016f
cmp dword [ebp - 0x994], 0
je 0x48016f
mov dword [ebp - 0x1f14], 1
jmp 0x480176
and dword [ebp - 0x1f14], 0
mov eax, dword [ebp - 0x1f14]
mov dword [ebp - 0x994], eax
mov byte [ebp - 0x360], 0
movzx eax, byte [ebp - 0x360]
test eax, eax
je 0x480404
mov dword [ebp - 0x270], 0x7e2799ac
push 1
lea ecx, [ebp - 0x2bac]
call fcn.0043a535
mov dword [ebp - 0xa5c], 0x8f59172d
mov dword [ebp - 0x1f8c], 5
mov dword [ebp - 0x2f4c], 0xb948
mov dword [ebp - 0x5dc], 0
jmp 0x4801e6
mov eax, dword [ebp - 0x5dc]
inc eax
mov dword [ebp - 0x5dc], eax
cmp dword [ebp - 0x5dc], 1
jge 0x480208
push dword [ebp - 0x5dc]
lea ecx, [ebp - 0x2bac]
call fcn.0043a623
mov dword [eax], 0xde283bc1
jmp 0x4801d9
mov dword [ebp - 0x270], 0xffffffe6
jmp 0x480221
mov eax, dword [ebp - 0x270]
inc eax
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 0x17
jne 0x4803ec
mov dword [ebp - 0x3d4], 0x4b9a
mov dword [ebp - 0x8ec], 0
jmp 0x480251
mov eax, dword [ebp - 0x8ec]
inc eax
mov dword [ebp - 0x8ec], eax
cmp dword [ebp - 0x8ec], 3
jge 0x48026d
mov eax, dword [ebp - 0x8ec]
mov dword [ebp + eax*4 - 0x34a0], 2
jmp 0x480244
mov eax, dword [ebp - 0x3d4]
add eax, 0x38efbd8e
cmp dword [ebp - 0x270], eax
je 0x48028c
mov dword [ebp - 0x1f1c], 1
jmp 0x480293
and dword [ebp - 0x1f1c], 0
cmp dword [ebp - 0x3d4], 0
je 0x4802a8
mov dword [ebp - 0x1f24], 1
jmp 0x4802af
and dword [ebp - 0x1f24], 0
mov eax, dword [ebp - 0x1f1c]
imul eax, dword [ebp - 0x1f24]
cmp dword [ebp - 0x3d4], eax
jg 0x4802d0
mov dword [ebp - 0x1f2c], 1
jmp 0x4802d7
and dword [ebp - 0x1f2c], 0
mov eax, dword [ebp - 0x270]
imul eax, dword [ebp - 0x1f2c]
imul eax, dword [ebp - 0x3d4]
cmp eax, 0xffffffff
jne 0x4802fc
mov dword [ebp - 0x1f34], 1
jmp 0x480303
and dword [ebp - 0x1f34], 0
cmp dword [ebp - 0x1f34], 0xdca1
jne 0x48031b
mov dword [ebp - 0x2294], 1
jmp 0x480322
and dword [ebp - 0x2294], 0
push 0
lea ecx, [ebp - 0x2bac]
call fcn.0043a623
mov eax, dword [eax]
sub eax, dword [ebp - 0x3d4]
cmp eax, dword [ebp - 0x270]
je 0x48034b
mov dword [ebp - 0x1f3c], 1
jmp 0x480352
and dword [ebp - 0x1f3c], 0
mov eax, dword [ebp - 0x1f3c]
mov dword [ebp - 0xa5c], eax
cmp dword [ebp - 0xa5c], 0xa71a
jl 0x480376
mov dword [ebp - 0x1f44], 1
jmp 0x48037d
and dword [ebp - 0x1f44], 0
mov eax, dword [ebp - 0x1f44]
mov dword [ebp - 0x1f8c], eax
cmp dword [ebp - 0x270], 0
je 0x4803cd
mov eax, dword [ebp - 0x1f8c]
cmp dword [ebp - 0xa5c], eax
jle 0x4803ac
mov dword [ebp - 0x1f94], 1
jmp 0x4803b3
and dword [ebp - 0x1f94], 0
mov eax, dword [ebp - 0x3d4]
cmp dword [ebp - 0x1f94], eax
jne 0x4803cd
mov dword [ebp - 0x1dac], 1
jmp 0x4803d4
and dword [ebp - 0x1dac], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1dac]
mov dword [ebp + eax - 0x34a0], ecx
jmp 0x480214
lea ecx, [ebp - 0x2bac]
call fcn.0043a607
call dword [0xacd408]
push eax
call dword [0xacd3c8]
jmp 0x47ff32
mov dword [ebp - 0x4b4], 0
push 4
lea ecx, [ebp - 0x2710]
call fcn.0043a535
mov dword [ebp - 0x1974], 0x7c57f39c
mov dword [ebp - 0x33dc], 1
mov dword [ebp - 0x1c8], 0
jmp 0x48044d
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 4
jge 0x48046f
push dword [ebp - 0x1c8]
lea ecx, [ebp - 0x2710]
call fcn.0043a623
mov dword [eax], 0x8f8256a9
jmp 0x480440
mov dword [ebp - 0x1c8], 0
jmp 0x480488
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 1
jge 0x4804a4
mov eax, dword [ebp - 0x1c8]
mov dword [ebp + eax*4 - 0x196c], 0xffffffff
jmp 0x48047b
mov dword [ebp - 0x4b4], 0x17
jmp 0x4804bd
mov eax, dword [ebp - 0x4b4]
inc eax
mov dword [ebp - 0x4b4], eax
cmp dword [ebp - 0x4b4], 0x1a
je 0x48078c
push 4
lea ecx, [ebp - 0x1ffc]
call fcn.0043a535
push 2
lea ecx, [ebp - 0x20e0]
call fcn.0043a535
mov dword [ebp - 0xbb4], 0xab227d3
mov dword [ebp - 0x195c], 1
mov dword [ebp - 0x2130], 0xd485
mov dword [ebp - 0x1964], 0x398963ec
mov dword [ebp - 0x160], 0
jmp 0x480525
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 4
jge 0x480544
push dword [ebp - 0x160]
lea ecx, [ebp - 0x1ffc]
call fcn.0043a623
and dword [eax], 0
jmp 0x480518
mov dword [ebp - 0x160], 0
jmp 0x48055d
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 2
jge 0x48057f
push dword [ebp - 0x160]
lea ecx, [ebp - 0x20e0]
call fcn.0043a623
mov dword [eax], 0xac488899
jmp 0x480550
push 2
lea ecx, [ebp - 0x1ffc]
call fcn.0043a623
mov dword [ebp - 0xbac], eax
mov eax, dword [ebp - 0xbac]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xbac]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x20e0]
call fcn.0043a623
and dword [eax], 0
jmp 0x4805d9
push 1
lea ecx, [ebp - 0x20e0]
call fcn.0043a623
mov dword [ebp - 0x1944], eax
mov eax, dword [ebp - 0x1944]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x1944]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x20e0]
call fcn.0043a623
cmp dword [eax], 3
jg 0x480771
mov dword [ebp - 0x194c], 0x4ffd8143
mov byte [ebp - 0x362], 0
movzx eax, byte [ebp - 0x362]
test eax, eax
je 0x480632
push 0x14ce
push 0
push 0xd3f
push 0x144
push 0
call dword [0xacd408]
push eax
call dword [0xacd3e8]
push eax
call dword [0xacd08c]
push 2
lea ecx, [ebp - 0x1ffc]
call fcn.0043a623
mov eax, dword [eax]
mov dword [ebp - 0xbb4], eax
cmp dword [ebp - 0xbb4], 0
je 0x48067c
mov dword [ebp - 0x194c], 0xc924b541
push 3
lea ecx, [ebp - 0x1ffc]
call fcn.0043a623
cmp dword [ebp - 0x194c], 0
je 0x48067c
mov dword [ebp - 0xbbc], 1
jmp 0x480683
and dword [ebp - 0xbbc], 0
push 3
lea ecx, [ebp - 0x1ffc]
call fcn.0043a623
mov ecx, dword [ebp - 0xbbc]
cmp ecx, dword [eax]
jne 0x4806a6
mov dword [ebp - 0x1954], 1
jmp 0x4806ad
and dword [ebp - 0x1954], 0
push 1
lea ecx, [ebp - 0x20e0]
call fcn.0043a623
push dword [eax]
lea ecx, [ebp - 0x1ffc]
call fcn.0043a623
mov eax, dword [eax]
cmp eax, dword [ebp - 0x1954]
jne 0x4806dd
mov dword [ebp - 0xbc4], 1
jmp 0x4806e4
and dword [ebp - 0xbc4], 0
push 1
lea ecx, [ebp - 0x2710]
call fcn.0043a623
mov ecx, dword [ebp - 0xbc4]
cmp ecx, dword [eax]
jge 0x480707
mov dword [ebp - 0x99c], 1
jmp 0x48070e
and dword [ebp - 0x99c], 0
push 1
lea ecx, [ebp - 0x2710]
call fcn.0043a623
mov ecx, dword [ebp - 0x99c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x99c]
mov dword [ebp - 0x195c], eax
cmp dword [ebp - 0x195c], 0
jne 0x48074a
cmp dword [ebp - 0x2130], 0
jne 0x48074a
and dword [ebp - 0xbcc], 0
jmp 0x480754
mov dword [ebp - 0xbcc], 1
mov eax, dword [ebp - 0xbcc]
mov dword [ebp - 0x1964], eax
mov eax, dword [ebp - 0x1964]
mov dword [ebp - 0x1974], eax
jmp 0x4805b5
lea ecx, [ebp - 0x20e0]
call fcn.0043a607
lea ecx, [ebp - 0x1ffc]
call fcn.0043a607
jmp 0x4804b0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x196c], 1
jle 0x4807a8
mov dword [ebp - 0xbd4], 1
jmp 0x4807af
and dword [ebp - 0xbd4], 0
mov eax, dword [ebp - 0x4b4]
cmp dword [ebp - 0xbd4], eax
jge 0x4807c9
mov dword [ebp - 0xbdc], 1
jmp 0x4807d0
and dword [ebp - 0xbdc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x196c]
imul eax, dword [ebp - 0xbdc]
mov dword [ebp - 0x1974], eax
lea ecx, [ebp - 0x2710]
call fcn.0043a607
mov byte [ebp - 0x368], 0
push 1
lea ecx, [ebp - 0x27f4]
call fcn.0043a535
mov dword [ebp - 0x494], 0
mov dword [ebp - 0x5e4], 0xa335c22c
mov dword [ebp - 0x215c], 1
mov dword [ebp - 0x1d0], 0
jmp 0x480840
mov eax, dword [ebp - 0x1d0]
inc eax
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 1
jge 0x480862
push dword [ebp - 0x1d0]
lea ecx, [ebp - 0x27f4]
call fcn.0043a623
mov dword [eax], 0x9102071b
jmp 0x480833
mov dword [ebp - 0x1d0], 0
jmp 0x48087b
mov eax, dword [ebp - 0x1d0]
inc eax
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 1
jge 0x480897
mov eax, dword [ebp - 0x1d0]
mov dword [ebp + eax*4 - 0x213c], 0xc5abfede
jmp 0x48086e
mov byte [ebp - 0x364], 0
movzx eax, byte [ebp - 0x364]
test eax, eax
je 0x4808b8
push 0
push 0
push 0x12e4
call dword [0xacd018]
mov dword [ebp - 0x494], 0
jmp 0x4808d1
mov eax, dword [ebp - 0x494]
inc eax
mov dword [ebp - 0x494], eax
cmp dword [ebp - 0x494], 0
jg 0x480dc1
mov dword [ebp - 0x100], 0x8462751c
mov dword [ebp - 0x434], 0x69376522
mov dword [ebp - 0x214c], 0xf5738f5e
mov byte [ebp - 0x2d9], 0
movzx eax, byte [ebp - 0x2d9]
test eax, eax
je 0x48092e
push 0
push 0x228b
push 0
push 0x2219
push 0x1927
push 0
push 0x12da
call dword [0xacd244]
mov dword [ebp - 0x100], 0
jmp 0x480947
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0
jg 0x480dbc
push 1
lea ecx, [ebp - 0x24e0]
call fcn.0043a535
mov dword [ebp - 0x198c], 1
mov dword [ebp - 0x168], 0
jmp 0x480984
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 4
jge 0x4809a0
mov eax, dword [ebp - 0x168]
mov dword [ebp + eax*4 - 0x290c], 0x8651162f
jmp 0x480977
mov dword [ebp - 0x168], 0
jmp 0x4809b9
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 1
jge 0x4809db
push dword [ebp - 0x168]
lea ecx, [ebp - 0x24e0]
call fcn.0043a623
mov dword [eax], 0x28464d91
jmp 0x4809ac
push 0
lea ecx, [ebp - 0x27f4]
call fcn.0043a623
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x2f54], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x290c], 0
jne 0x480a16
cmp dword [ebp - 0x100], 0
jne 0x480a16
and dword [ebp - 0xbe4], 0
jmp 0x480a20
mov dword [ebp - 0xbe4], 1
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x290c]
add eax, dword [ebp - 0xbe4]
jne 0x480a47
cmp dword [ebp - 0x494], 0
jne 0x480a47
and dword [ebp - 0x197c], 0
jmp 0x480a51
mov dword [ebp - 0x197c], 1
mov eax, dword [ebp - 0x5e4]
cmp dword [ebp - 0x197c], eax
jle 0x480a6b
mov dword [ebp - 0xbec], 1
jmp 0x480a72
and dword [ebp - 0xbec], 0
mov eax, dword [ebp - 0x5e4]
cmp dword [ebp - 0xbec], eax
jg 0x480a8c
mov dword [ebp - 0x1984], 1
jmp 0x480a93
and dword [ebp - 0x1984], 0
mov eax, dword [ebp - 0x1984]
neg eax
add eax, 0x2ba8d7d2
cmp eax, dword [ebp - 0x100]
jle 0x480abd
cmp dword [ebp - 0x100], 0
je 0x480abd
mov dword [ebp - 0xbf4], 1
jmp 0x480ac4
and dword [ebp - 0xbf4], 0
cmp dword [ebp - 0xbf4], 0
jle 0x480ad9
mov dword [ebp - 0x2134], 1
jmp 0x480ae0
and dword [ebp - 0x2134], 0
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x31cc], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x290c]
sub eax, 9
mov dword [ebp - 0x434], eax
push 0
lea ecx, [ebp - 0x24e0]
call fcn.0043a623
mov eax, dword [eax]
mov dword [ebp - 0x198c], eax
cmp dword [ebp - 0x198c], 0
je 0x480cdc
mov dword [ebp - 0x4bc], 0x7503ae56
cmp dword [ebp - 0x4bc], 0
jne 0x480b6e
mov eax, dword [ebp - 0x5e4]
mov dword [ebp - 0xbfc], eax
push dword [ebp - 0x100]
lea ecx, [ebp - 0x27f4]
call fcn.0043a623
mov ecx, dword [ebp - 0xbfc]
mov dword [eax], ecx
cmp dword [ebp - 0xbfc], 0
je 0x480b6e
and dword [ebp - 0x1994], 0
jmp 0x480b78
mov dword [ebp - 0x1994], 1
mov eax, dword [ebp - 0x4bc]
cmp dword [ebp - 0x1994], eax
jle 0x480b92
mov dword [ebp - 0xc14], 1
jmp 0x480b99
and dword [ebp - 0xc14], 0
cmp dword [ebp - 0x5e4], 0x24acdff9
je 0x480bb1
mov dword [ebp - 0xc04], 1
jmp 0x480bb8
and dword [ebp - 0xc04], 0
mov eax, dword [ebp - 0x434]
cmp dword [ebp - 0xc04], eax
jg 0x480bd2
mov dword [ebp - 0x199c], 1
jmp 0x480bd9
and dword [ebp - 0x199c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x290c]
cmp dword [ebp - 0x199c], eax
je 0x480bfa
mov dword [ebp - 0xc0c], 1
jmp 0x480c01
and dword [ebp - 0xc0c], 0
mov esi, dword [ebp - 0x4bc]
sub esi, dword [ebp - 0xc0c]
push 0
lea ecx, [ebp - 0x24e0]
call fcn.0043a623
cmp esi, dword [eax]
jge 0x480c2a
mov dword [ebp - 0x19a4], 1
jmp 0x480c31
and dword [ebp - 0x19a4], 0
cmp dword [ebp - 0x19a4], 0x82bc92ce
je 0x480c49
mov dword [ebp - 0x19ac], 1
jmp 0x480c50
and dword [ebp - 0x19ac], 0
mov eax, dword [ebp - 0xc14]
cmp eax, dword [ebp - 0x19ac]
jne 0x480c6a
mov dword [ebp - 0xc1c], 1
jmp 0x480c71
and dword [ebp - 0xc1c], 0
mov eax, dword [ebp - 0xc1c]
sub eax, dword [ebp - 0x4bc]
mov dword [ebp - 0x434], eax
mov eax, dword [ebp - 0x4bc]
cmp dword [ebp - 0x434], eax
jne 0x480c9d
mov dword [ebp - 0x19b4], 1
jmp 0x480ca4
and dword [ebp - 0x19b4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x19b4]
mov dword [ebp + eax - 0x213c], ecx
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x290c], 0
je 0x480cd7
lea ecx, [ebp - 0x24e0]
call fcn.0043a607
jmp 0x48093a
jmp 0x480dac
mov dword [ebp - 0xc24], 0xfffc
cmp dword [ebp - 0xc24], 0
jne 0x480cfb
mov dword [ebp - 0x2144], 1
jmp 0x480d02
and dword [ebp - 0x2144], 0
mov eax, dword [ebp - 0x214c]
imul eax, dword [ebp - 0x434]
test eax, eax
jne 0x480d25
cmp dword [ebp - 0xc24], 0
jne 0x480d25
and dword [ebp - 0x2154], 0
jmp 0x480d2f
mov dword [ebp - 0x2154], 1
cmp dword [ebp - 0x215c], 1
jbe 0x480d44
mov dword [ebp - 0x19bc], 1
jmp 0x480d4b
and dword [ebp - 0x19bc], 0
cmp dword [ebp - 0x19bc], 0xfffffff9
jle 0x480d60
mov dword [ebp - 0xc2c], 1
jmp 0x480d67
and dword [ebp - 0xc2c], 0
mov eax, dword [ebp - 0xc2c]
mov dword [ebp - 0x434], eax
mov byte [ebp - 0x366], 0
movzx eax, byte [ebp - 0x366]
test eax, eax
je 0x480dac
push 0x14ce
push 0
push 0xd3f
push 0x144
push 0
call dword [0xacd408]
push eax
call dword [0xacd3e8]
push eax
call dword [0xacd08c]
lea ecx, [ebp - 0x24e0]
call fcn.0043a607
jmp 0x48093a
jmp 0x4808c4
lea ecx, [ebp - 0x27f4]
call fcn.0043a607
movzx eax, byte [ebp - 0x368]
test eax, eax
je 0x480f42
mov dword [ebp - 0x568], 1
mov dword [ebp - 0x2f5c], 0xf1813f1a
mov dword [ebp - 0x3364], 0xb2006887
push 1
lea ecx, [ebp - 0x2c3c]
call fcn.0043a535
mov dword [ebp - 0x784], 0
jmp 0x480e1f
mov eax, dword [ebp - 0x784]
inc eax
mov dword [ebp - 0x784], eax
cmp dword [ebp - 0x784], 1
jge 0x480e41
push dword [ebp - 0x784]
lea ecx, [ebp - 0x2c3c]
call fcn.0043a623
mov dword [eax], 0x5aa96141
jmp 0x480e12
mov dword [ebp - 0x568], 0
jmp 0x480e5a
mov eax, dword [ebp - 0x568]
dec eax
mov dword [ebp - 0x568], eax
cmp dword [ebp - 0x568], 0xfffffff7
je 0x480f2f
mov dword [ebp - 0x5ec], 1
mov dword [ebp - 0x2f64], 0x6507e673
mov dword [ebp - 0x5ec], 0
jmp 0x480e94
mov eax, dword [ebp - 0x5ec]
inc eax
mov dword [ebp - 0x5ec], eax
cmp dword [ebp - 0x5ec], 0x16
jg 0x480f06
mov dword [ebp - 0x854], 0
jmp 0x480eb6
mov eax, dword [ebp - 0x854]
inc eax
mov dword [ebp - 0x854], eax
cmp dword [ebp - 0x854], 2
jge 0x480ed2
mov eax, dword [ebp - 0x854]
mov dword [ebp + eax*4 - 0x2fd8], 0xffffffff
jmp 0x480ea9
mov byte [ebp - 0x36c], 0
movzx eax, byte [ebp - 0x36c]
test eax, eax
je 0x480ef1
push 0x1c0b
push 0
call dword [0xacd21c]
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x568]
mov dword [ebp + eax - 0x2fd8], ecx
jmp 0x480e87
push 0
lea ecx, [ebp - 0x2c3c]
call fcn.0043a623
mov dword [ebp - 0x19c4], eax
mov eax, dword [ebp - 0x19c4]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x19c4]
mov dword [ecx], eax
jmp 0x480e4d
lea ecx, [ebp - 0x2c3c]
call fcn.0043a607
push 1
call dword [0xacd3f0]
lea ecx, [ebp - 0x3128]
call fcn.0043a607
mov dword [ebp - 0x2c8], 0x5b9b55bb
push 1
lea ecx, [ebp - 0x2cb4]
call fcn.0043a535
mov dword [ebp - 0x5f4], 0
jmp 0x480f7d
mov eax, dword [ebp - 0x5f4]
inc eax
mov dword [ebp - 0x5f4], eax
cmp dword [ebp - 0x5f4], 1
jge 0x480f9f
push dword [ebp - 0x5f4]
lea ecx, [ebp - 0x2cb4]
call fcn.0043a623
mov dword [eax], 0x72a8358b
jmp 0x480f70
mov dword [ebp - 0x2c8], 0xffffffe2
jmp 0x480fb8
mov eax, dword [ebp - 0x2c8]
inc eax
mov dword [ebp - 0x2c8], eax
cmp dword [ebp - 0x2c8], 0xfffffffc
jl 0x481184
mov dword [ebp - 0x4b8], 0xffff
push 1
lea ecx, [ebp - 0x2bc4]
call fcn.0043a535
mov dword [ebp - 0x19d4], 0x162c
mov dword [ebp - 0x1d8], 0
jmp 0x480fff
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 1
jge 0x48101e
push dword [ebp - 0x1d8]
lea ecx, [ebp - 0x2bc4]
call fcn.0043a623
and dword [eax], 0
jmp 0x480ff2
mov dword [ebp - 0x1d8], 0
jmp 0x481037
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 1
jge 0x481053
mov eax, dword [ebp - 0x1d8]
mov dword [ebp + eax*4 - 0x2174], 0
jmp 0x48102a
mov eax, dword [ebp - 0x4b8]
add eax, dword [ebp - 0x2c8]
cmp eax, 0x7528
jne 0x481072
mov dword [ebp - 0xc34], 1
jmp 0x481079
and dword [ebp - 0xc34], 0
mov eax, dword [ebp - 0xc34]
add eax, 0x52715a0d
cmp eax, 0x2f88
jge 0x481097
mov dword [ebp - 0x2164], 1
jmp 0x48109e
and dword [ebp - 0x2164], 0
mov eax, dword [ebp - 0x4b8]
mov dword [ebp - 0x31dc], eax
mov eax, dword [ebp - 0x4b8]
cmp dword [ebp - 0x4b8], eax
je 0x4810c4
mov dword [ebp - 0x19cc], 1
jmp 0x4810cb
and dword [ebp - 0x19cc], 0
mov esi, dword [ebp - 0x19cc]
sub esi, 0x5165f84d
push 0
lea ecx, [ebp - 0x2bc4]
call fcn.0043a623
cmp esi, dword [eax]
je 0x4810f4
mov dword [ebp - 0xc3c], 1
jmp 0x4810fb
and dword [ebp - 0xc3c], 0
mov eax, dword [ebp - 0xc3c]
mov dword [ebp - 0x19d4], eax
mov eax, dword [ebp - 0x19d4]
mov dword [ebp - 0x2f6c], eax
mov eax, dword [ebp - 0x2c8]
mov dword [ebp - 0x3438], eax
mov eax, dword [ebp - 0x4b8]
mov dword [ebp - 0xc44], eax
push 0
lea ecx, [ebp - 0x2cb4]
call fcn.0043a623
mov ecx, dword [ebp - 0xc44]
mov dword [eax], ecx
mov eax, dword [ebp - 0x2c8]
cmp dword [ebp - 0xc44], eax
jge 0x48115a
mov dword [ebp - 0x216c], 1
jmp 0x481161
and dword [ebp - 0x216c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2c8]
mov dword [ebp + eax - 0x2174], ecx
lea ecx, [ebp - 0x2bc4]
call fcn.0043a607
jmp 0x480fab
lea ecx, [ebp - 0x2cb4]
call fcn.0043a607
mov dword [ebp - 0xc28], 0x2ef6
mov dword [ebp - 0x3dc], 0x7ddc85f7
push 4
lea ecx, [ebp - 0x280c]
call fcn.0043a535
mov dword [ebp - 0xc64], 0x40c18ab9
mov dword [ebp - 0x217c], 0xcbedfa90
mov dword [ebp - 0x2f74], 0xcc01
mov dword [ebp - 0x78c], 0
jmp 0x4811e7
mov eax, dword [ebp - 0x78c]
inc eax
mov dword [ebp - 0x78c], eax
cmp dword [ebp - 0x78c], 4
jge 0x481209
push dword [ebp - 0x78c]
lea ecx, [ebp - 0x280c]
call fcn.0043a623
mov dword [eax], 0x546158d3
jmp 0x4811da
mov dword [ebp - 0x3dc], 0
jmp 0x481222
mov eax, dword [ebp - 0x3dc]
inc eax
mov dword [ebp - 0x3dc], eax
cmp dword [ebp - 0x3dc], 0x10
je 0x4814c5
mov dword [ebp - 0x3e4], 1
mov dword [ebp - 0x19fc], 0xdc6f79b3
mov dword [ebp - 0x3e4], 0
jmp 0x48125c
mov eax, dword [ebp - 0x3e4]
inc eax
mov dword [ebp - 0x3e4], eax
cmp dword [ebp - 0x3e4], 3
jg 0x4814c0
mov dword [ebp - 0x464], 0xfffffff9
mov dword [ebp - 0x19dc], 0x3631e19e
mov dword [ebp - 0x464], 0
jmp 0x481296
mov eax, dword [ebp - 0x464]
inc eax
mov dword [ebp - 0x464], eax
cmp dword [ebp - 0x464], 3
jg 0x481493
mov dword [ebp - 0x5fc], 0
mov byte [ebp - 0x36e], 0
movzx eax, byte [ebp - 0x36e]
test eax, eax
je 0x4812ce
push 0
call dword [0xacd408]
push eax
call dword [0xacd3c4]
mov dword [ebp - 0x5fc], 3
jmp 0x4812e7
mov eax, dword [ebp - 0x5fc]
dec eax
mov dword [ebp - 0x5fc], eax
cmp dword [ebp - 0x5fc], 0
jl 0x48148e
mov dword [ebp - 0x8bc], 0xb5c6eff3
mov dword [ebp - 0x8bc], 3
jmp 0x481317
mov eax, dword [ebp - 0x8bc]
dec eax
mov dword [ebp - 0x8bc], eax
cmp dword [ebp - 0x8bc], 0
jl 0x481489
mov dword [ebp - 0xc54], 0xffffffff
mov dword [ebp - 0xc6c], 0xee1d459
mov dword [ebp - 0x19dc], 1
mov eax, dword [ebp - 0x464]
cmp dword [ebp - 0x19dc], eax
jge 0x48135c
mov dword [ebp - 0xc4c], 1
jmp 0x481363
and dword [ebp - 0xc4c], 0
cmp dword [ebp - 0xc6c], 0
je 0x48137d
xor eax, eax
inc eax
je 0x48137d
mov dword [ebp - 0x19e4], 1
jmp 0x481384
and dword [ebp - 0x19e4], 0
mov eax, dword [ebp - 0xc4c]
mov dword [ebp - 0xc54], eax
mov eax, dword [ebp - 0x3dc]
add eax, dword [ebp - 0x19e4]
neg eax
cmp dword [ebp - 0xc54], eax
jle 0x4813b2
mov dword [ebp - 0x19ec], 1
jmp 0x4813b9
and dword [ebp - 0x19ec], 0
mov eax, dword [ebp - 0x19ec]
sub eax, dword [ebp - 0x3dc]
add eax, dword [ebp - 0x464]
cmp eax, 6
jg 0x4813dc
mov dword [ebp - 0x19f4], 1
jmp 0x4813e3
and dword [ebp - 0x19f4], 0
push dword [ebp - 0x3e4]
lea ecx, [ebp - 0x280c]
call fcn.0043a623
mov dword [ebp - 0xc5c], eax
push dword [ebp - 0x3e4]
lea ecx, [ebp - 0x280c]
call fcn.0043a623
mov ecx, dword [ebp - 0xc5c]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0xc5c]
mov eax, dword [eax]
mov dword [ebp - 0xc64], eax
mov eax, dword [ebp - 0x19f4]
mov dword [ebp - 0x19fc], eax
mov eax, dword [ebp - 0xc64]
imul eax, dword [ebp - 0x19fc]
sub eax, dword [ebp - 0xc6c]
cmp eax, 0xb8b7
jle 0x481455
mov dword [ebp - 0x1a04], 1
jmp 0x48145c
and dword [ebp - 0x1a04], 0
cmp dword [ebp - 0x1a04], 0
jle 0x481471
mov dword [ebp - 0xc74], 1
jmp 0x481478
and dword [ebp - 0xc74], 0
mov eax, dword [ebp - 0xc74]
mov dword [ebp - 0x217c], eax
jmp 0x48130a
jmp 0x4812da
jmp 0x481289
mov byte [ebp - 0x2d7], 0
movzx eax, byte [ebp - 0x2d7]
test eax, eax
je 0x4814bb
push 0
push 0
push 0x50a
call dword [0xacd408]
push eax
call dword [0xacd3d0]
jmp 0x48124f
jmp 0x481215
lea ecx, [ebp - 0x280c]
call fcn.0043a607
mov dword [ebp - 0x30], 0x76820624
mov dword [ebp - 0xc8c], 0x9c7279c9
mov dword [ebp - 0x30], 0
jmp 0x4814f1
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0x11
jg 0x48152f
mov dword [ebp - 0x604], 0xffffffff
mov dword [ebp - 0x604], 0
jmp 0x48151a
mov eax, dword [ebp - 0x604]
inc eax
mov dword [ebp - 0x604], eax
cmp dword [ebp - 0x604], 3
je 0x48152d
cmp dword [ebp - 0x30], 0
je 0x48152b
jmp 0x48152d
jmp 0x48150d
jmp 0x4814ea
cmp dword [ebp - 0x30], 1
jne 0x481541
mov dword [ebp - 0x1a0c], 1
jmp 0x481548
and dword [ebp - 0x1a0c], 0
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x1a0c]
jle 0x48155f
mov dword [ebp - 0xc7c], 1
jmp 0x481566
and dword [ebp - 0xc7c], 0
mov eax, dword [ebp - 0xc7c]
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
je 0x48160b
push 2
lea ecx, [ebp - 0x2824]
call fcn.0043a535
mov dword [ebp - 0x794], 0
jmp 0x48159f
mov eax, dword [ebp - 0x794]
inc eax
mov dword [ebp - 0x794], eax
cmp dword [ebp - 0x794], 2
jge 0x4815c1
push dword [ebp - 0x794]
lea ecx, [ebp - 0x2824]
call fcn.0043a623
mov dword [eax], 1
jmp 0x481592
mov dword [ebp - 0x30], 0
jmp 0x4815d1
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 1
jg 0x4815fb
push dword [ebp - 0x30]
lea ecx, [ebp - 0x2824]
call fcn.0043a623
mov esi, eax
push dword [ebp - 0x30]
lea ecx, [ebp - 0x2824]
call fcn.0043a623
mov ecx, dword [esi]
mov dword [eax], ecx
jmp 0x4815ca
lea ecx, [ebp - 0x2824]
call fcn.0043a607
jmp 0x4818a6
mov dword [ebp - 0x2364], 0x9c7c6f1f
push 1
lea ecx, [ebp - 0x283c]
call fcn.0043a535
mov dword [ebp - 0x31ec], 0xe1a8
mov dword [ebp - 0xae4], 0x3c47
mov dword [ebp - 0x6c], 0
jmp 0x481646
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 1
jge 0x48165c
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0x43c], 8
jmp 0x48163f
mov dword [ebp - 0x6c], 0
jmp 0x48166c
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 1
jge 0x481688
push dword [ebp - 0x6c]
lea ecx, [ebp - 0x283c]
call fcn.0043a623
mov dword [eax], 0x5f4b3f4b
jmp 0x481665
mov dword [ebp - 0x6c], 0
jmp 0x481698
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 2
jge 0x4816ae
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0x2190], 0x1c2a9118
jmp 0x481691
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x43c]
mov dword [ebp - 0x2f7c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x43c]
mov dword [ebp - 0x336c], eax
mov eax, dword [ebp - 0xae4]
dec eax
mov dword [ebp - 0xae4], eax
imul eax, dword [ebp - 0xae4], 0xffffffff
mov dword [ebp - 0x1a14], eax
push 0
lea ecx, [ebp - 0x283c]
call fcn.0043a623
mov ecx, dword [ebp - 0x1a14]
mov dword [eax], ecx
cmp dword [ebp - 0x1a14], 0
jne 0x481727
push 0
lea ecx, [ebp - 0x283c]
call fcn.0043a623
cmp dword [eax], 0
jne 0x481727
and dword [ebp - 0xc84], 0
jmp 0x481731
mov dword [ebp - 0xc84], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2190]
cmp dword [ebp - 0xc84], eax
je 0x481752
mov dword [ebp - 0x1a1c], 1
jmp 0x481759
and dword [ebp - 0x1a1c], 0
mov eax, dword [ebp - 0x1a1c]
mov dword [ebp - 0xc8c], eax
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0xc8c], eax
jl 0x48177c
mov dword [ebp - 0x1a24], 1
jmp 0x481783
and dword [ebp - 0x1a24], 0
cmp dword [ebp - 0x1a24], 0x3a5d8d34
je 0x48179b
mov dword [ebp - 0xc94], 1
jmp 0x4817a2
and dword [ebp - 0xc94], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2190]
imul eax, dword [ebp - 0xc94]
cmp eax, 3
jl 0x4817c7
mov dword [ebp - 0x2184], 1
jmp 0x4817ce
and dword [ebp - 0x2184], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x43c]
mov dword [ebp - 0x2f84], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x43c]
cmp dword [ebp + eax - 0x43c], ecx
jge 0x481809
mov dword [ebp - 0x1a2c], 1
jmp 0x481810
and dword [ebp - 0x1a2c], 0
mov eax, dword [ebp - 0x2364]
cmp eax, dword [ebp - 0x1a2c]
jge 0x48182a
mov dword [ebp - 0xc9c], 1
jmp 0x481831
and dword [ebp - 0xc9c], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0xc9c], eax
je 0x481848
mov dword [ebp - 0x1a34], 1
jmp 0x48184f
and dword [ebp - 0x1a34], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x1a34], eax
jg 0x481868
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x43c], 0
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x2190], 0xffffffff
mov byte [ebp - 0x2d5], 0
movzx eax, byte [ebp - 0x2d5]
test eax, eax
je 0x48189b
push 0x11a9
push 0x2412
call dword [0xacd430]
lea ecx, [ebp - 0x283c]
call fcn.0043a607
push 2
lea ecx, [ebp - 0x2008]
call fcn.0043a535
mov dword [ebp - 0x170], 9
mov dword [ebp - 0x60c], 0
jmp 0x4818d6
mov eax, dword [ebp - 0x60c]
inc eax
mov dword [ebp - 0x60c], eax
cmp dword [ebp - 0x60c], 2
jge 0x4818f8
push dword [ebp - 0x60c]
lea ecx, [ebp - 0x2008]
call fcn.0043a623
mov dword [eax], 2
jmp 0x4818c9
mov dword [ebp - 0x170], 0
jmp 0x481911
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 1
jg 0x481a0e
mov dword [ebp - 0x237c], 0x6d210ec3
push dword [ebp - 0x170]
lea ecx, [ebp - 0x2008]
call fcn.0043a623
cmp dword [eax], 0
jne 0x48195d
push dword [ebp - 0x170]
lea ecx, [ebp - 0x2008]
call fcn.0043a623
cmp dword [eax], 0
jne 0x48195d
and dword [ebp - 0x236c], 0
jmp 0x481967
mov dword [ebp - 0x236c], 1
push 0
lea ecx, [ebp - 0x2008]
call fcn.0043a623
push dword [ebp - 0x170]
lea ecx, [ebp - 0x2008]
call fcn.0043a623
cmp dword [eax], 1
jne 0x481996
mov dword [ebp - 0xca4], 1
jmp 0x48199d
and dword [ebp - 0xca4], 0
push dword [ebp - 0x170]
lea ecx, [ebp - 0x2008]
call fcn.0043a623
mov ecx, dword [ebp - 0xca4]
cmp ecx, dword [eax]
jle 0x4819c4
mov dword [ebp - 0x2374], 1
jmp 0x4819cb
and dword [ebp - 0x2374], 0
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0x31fc], eax
mov dword [ebp - 0x237c], 0x63ab1943
mov byte [ebp - 0x32f], 0
movzx eax, byte [ebp - 0x32f]
test eax, eax
je 0x481a09
push 0
push 0
push 0x5e4
call dword [0xacd408]
push eax
call dword [0xacd434]
jmp 0x481904
mov byte [ebp - 0x32d], 0
movzx eax, byte [ebp - 0x32d]
test eax, eax
je 0x481a2d
push 0
push 0x16b2
call dword [0xacd230]
lea ecx, [ebp - 0x2008]
call fcn.0043a607
mov dword [ebp - 0x2a8], 0x5b9b55bb
push 1
lea ecx, [ebp - 0x594]
call fcn.0043a535
mov dword [ebp - 0x44], 0x80a7
push 2
lea ecx, [ebp - 0xb34]
call fcn.0043a535
mov dword [ebp - 0x9a4], 0xc84060a3
mov dword [ebp - 0x2394], 1
push 4
lea ecx, [ebp - 0x20f8]
call fcn.0043a535
push 1
lea ecx, [ebp - 0x2854]
call fcn.0043a535
mov dword [ebp - 0x1a8c], 0x155d2618
mov dword [ebp - 0x28], 0
jmp 0x481aab
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 1
jge 0x481ac7
push dword [ebp - 0x28]
lea ecx, [ebp - 0x594]
call fcn.0043a623
mov dword [eax], 0xb3e90a62
jmp 0x481aa4
mov dword [ebp - 0x28], 0
jmp 0x481ad7
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jge 0x481af3
push dword [ebp - 0x28]
lea ecx, [ebp - 0xb34]
call fcn.0043a623
mov dword [eax], 3
jmp 0x481ad0
mov dword [ebp - 0x28], 0
jmp 0x481b03
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 4
jge 0x481b1f
push dword [ebp - 0x28]
lea ecx, [ebp - 0x20f8]
call fcn.0043a623
mov dword [eax], 0xd942a26b
jmp 0x481afc
mov dword [ebp - 0x28], 0
jmp 0x481b2f
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 1
jge 0x481b4b
push dword [ebp - 0x28]
lea ecx, [ebp - 0x2854]
call fcn.0043a623
mov dword [eax], 0x6e035d6d
jmp 0x481b28
push 0
lea ecx, [ebp - 0x594]
call fcn.0043a623
mov dword [eax], 2
push 2
pop eax
test eax, eax
je 0x481d50
push 0
lea ecx, [ebp - 0x594]
call fcn.0043a623
cmp dword [eax], 0
je 0x481d50
push 0
lea ecx, [ebp - 0x594]
call fcn.0043a623
push 0
lea ecx, [ebp - 0x594]
call fcn.0043a623
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x2f8c], eax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x33e4], eax
push 0
lea ecx, [ebp - 0x594]
call fcn.0043a623
push 0
lea ecx, [ebp - 0x594]
call fcn.0043a623
mov esi, eax
push 0
lea ecx, [ebp - 0x594]
call fcn.0043a623
mov esi, dword [esi]
add esi, dword [eax]
push 0
lea ecx, [ebp - 0x594]
call fcn.0043a623
sub esi, dword [eax]
mov dword [ebp - 0x1a3c], esi
push 0
lea ecx, [ebp - 0xb34]
call fcn.0043a623
mov ecx, dword [ebp - 0x1a3c]
mov dword [eax], ecx
push 0
lea ecx, [ebp - 0x594]
call fcn.0043a623
mov ecx, dword [ebp - 0x1a3c]
mov dword [eax], ecx
push 0
lea ecx, [ebp - 0x594]
call fcn.0043a623
mov ecx, dword [ebp - 0x44]
cmp dword [eax], ecx
jge 0x481c46
push 0
lea ecx, [ebp - 0x594]
call fcn.0043a623
cmp dword [eax], 0
jne 0x481c46
and dword [ebp - 0xcac], 0
jmp 0x481c50
mov dword [ebp - 0xcac], 1
mov eax, dword [ebp - 0x44]
imul eax, dword [ebp - 0xcac]
cmp eax, dword [ebp - 0x44]
jg 0x481c6b
mov dword [ebp - 0x1a44], 1
jmp 0x481c72
and dword [ebp - 0x1a44], 0
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x1a44], eax
jne 0x481c89
mov dword [ebp - 0xcb4], 1
jmp 0x481c90
and dword [ebp - 0xcb4], 0
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0xcb4], eax
jge 0x481ca7
mov dword [ebp - 0x2384], 1
jmp 0x481cae
and dword [ebp - 0x2384], 0
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x2f94], eax
cmp dword [ebp - 0x44], 3
jbe 0x481cc9
mov dword [ebp - 0x1a4c], 1
jmp 0x481cd0
and dword [ebp - 0x1a4c], 0
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x1a4c], eax
je 0x481ce7
mov dword [ebp - 0x238c], 1
jmp 0x481cee
and dword [ebp - 0x238c], 0
mov eax, 0xfff8
cmp eax, 0x7e65
jae 0x481d06
mov dword [ebp - 0xcbc], 1
jmp 0x481d0d
and dword [ebp - 0xcbc], 0
cmp dword [ebp - 0xcbc], 0xed76
jle 0x481d25
mov dword [ebp - 0x1a54], 1
jmp 0x481d2c
and dword [ebp - 0x1a54], 0
mov eax, dword [ebp - 0x44]
imul eax, dword [ebp - 0x1a54]
test eax, eax
jle 0x481d46
mov dword [ebp - 0xcc4], 1
jmp 0x481d4d
and dword [ebp - 0xcc4], 0
mov eax, dword [ebp - 0x44]
push 1
lea ecx, [ebp - 0xb34]
call fcn.0043a623
mov ecx, dword [ebp - 0x44]
cmp dword [eax], ecx
jne 0x481d70
mov dword [ebp - 0x1a5c], 1
jmp 0x481d77
and dword [ebp - 0x1a5c], 0
mov eax, dword [ebp - 0x1a5c]
mov dword [ebp - 0x9a4], eax
mov esi, dword [ebp - 0x44]
push 0
lea ecx, [ebp - 0x594]
call fcn.0043a623
cmp esi, dword [eax]
je 0x481da3
mov dword [ebp - 0xccc], 1
jmp 0x481daa
and dword [ebp - 0xccc], 0
mov eax, dword [ebp - 0x9a4]
cmp dword [ebp - 0xccc], eax
jge 0x481dc5
push 0
lea ecx, [ebp - 0x594]
call fcn.0043a623
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x1a64], eax
push 0
lea ecx, [ebp - 0x594]
call fcn.0043a623
mov ecx, dword [ebp - 0x1a64]
mov dword [eax], ecx
mov eax, dword [ebp - 0x1a64]
mov dword [ebp - 0x9a4], eax
mov eax, dword [ebp - 0x2394]
mov dword [ebp - 0x320c], eax
push 1
lea ecx, [ebp - 0xb34]
call fcn.0043a623
push 1
lea ecx, [ebp - 0xb34]
call fcn.0043a623
cmp dword [eax], 1
jge 0x481e26
mov dword [ebp - 0xcd4], 1
jmp 0x481e2d
and dword [ebp - 0xcd4], 0
cmp dword [ebp - 0xcd4], 0xcec8
jge 0x481e45
mov dword [ebp - 0x1a6c], 1
jmp 0x481e4c
and dword [ebp - 0x1a6c], 0
push 0
lea ecx, [ebp - 0xb34]
call fcn.0043a623
mov eax, dword [eax]
cmp eax, dword [ebp - 0x1a6c]
jg 0x481e6f
mov dword [ebp - 0xcdc], 1
jmp 0x481e76
and dword [ebp - 0xcdc], 0
mov eax, dword [ebp - 0xcdc]
sub eax, dword [ebp - 0x44]
mov dword [ebp - 0x1a74], eax
push 2
lea ecx, [ebp - 0x20f8]
call fcn.0043a623
mov ecx, dword [ebp - 0x1a74]
mov dword [eax], ecx
push 1
lea ecx, [ebp - 0xb34]
call fcn.0043a623
mov ecx, dword [ebp - 0x1a74]
cmp ecx, dword [eax]
jl 0x481ebd
mov dword [ebp - 0xce4], 1
jmp 0x481ec4
and dword [ebp - 0xce4], 0
push 0
lea ecx, [ebp - 0xb34]
call fcn.0043a623
mov esi, eax
push 0
lea ecx, [ebp - 0xb34]
call fcn.0043a623
mov ecx, dword [ebp - 0xce4]
sub ecx, dword [eax]
cmp dword [esi], ecx
jne 0x481ef8
mov dword [ebp - 0x1a7c], 1
jmp 0x481eff
and dword [ebp - 0x1a7c], 0
push 0
lea ecx, [ebp - 0x2854]
call fcn.0043a623
mov ecx, dword [ebp - 0x1a7c]
cmp ecx, dword [eax]
jl 0x481f22
mov dword [ebp - 0xcec], 1
jmp 0x481f29
and dword [ebp - 0xcec], 0
push 0
lea ecx, [ebp - 0x2854]
call fcn.0043a623
mov ecx, dword [ebp - 0xcec]
cmp ecx, dword [eax]
jg 0x482064
mov dword [ebp - 0x85c], 0
jmp 0x481f5d
mov eax, dword [ebp - 0x85c]
inc eax
mov dword [ebp - 0x85c], eax
cmp dword [ebp - 0x85c], 1
jge 0x481f79
mov eax, dword [ebp - 0x85c]
mov dword [ebp + eax*4 - 0x614], 0xfffffff9
jmp 0x481f50
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x614], 0xffffffff
je 0x481f95
mov dword [ebp - 0x1a84], 1
jmp 0x481f9c
and dword [ebp - 0x1a84], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x614]
neg eax
cmp dword [ebp - 0x1a84], eax
je 0x481fbf
mov dword [ebp - 0xcf4], 1
jmp 0x481fc6
and dword [ebp - 0xcf4], 0
mov eax, dword [ebp - 0xcf4]
mov dword [ebp - 0x1a8c], eax
mov eax, dword [ebp - 0x1a8c]
neg eax
cmp eax, 0x8949
je 0x482015
push 3
lea ecx, [ebp - 0x20f8]
call fcn.0043a623
push 4
pop eax
imul eax, eax, 0
mov esi, dword [ebp + eax - 0x614]
push 1
lea ecx, [ebp - 0x20f8]
call fcn.0043a623
cmp esi, dword [eax]
je 0x482015
and dword [ebp - 0xcfc], 0
jmp 0x48201f
mov dword [ebp - 0xcfc], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x614]
cmp dword [ebp - 0xcfc], eax
jge 0x482046
cmp dword [ebp - 0x44], 0
je 0x482046
mov dword [ebp - 0x1a94], 1
jmp 0x48204d
and dword [ebp - 0x1a94], 0
push 2
lea ecx, [ebp - 0x20f8]
call fcn.0043a623
mov ecx, dword [ebp - 0x1a94]
mov dword [eax], ecx
jmp 0x48208f
mov byte [ebp - 0x36d], 0
movzx eax, byte [ebp - 0x36d]
test eax, eax
je 0x48208f
push 0x946
call dword [0xacd408]
push eax
call dword [0xacd3e8]
push eax
call dword [0xacd0b8]
lea ecx, [ebp - 0x2854]
call fcn.0043a607
lea ecx, [ebp - 0x20f8]
call fcn.0043a607
lea ecx, [ebp - 0xb34]
call fcn.0043a607
lea ecx, [ebp - 0x594]
call fcn.0043a607
push 1
lea ecx, [ebp - 0x2c6c]
call fcn.0043a535
mov dword [ebp - 0x79c], 0
jmp 0x4820e1
mov eax, dword [ebp - 0x79c]
inc eax
mov dword [ebp - 0x79c], eax
cmp dword [ebp - 0x79c], 1
jge 0x482103
push dword [ebp - 0x79c]
lea ecx, [ebp - 0x2c6c]
call fcn.0043a623
mov dword [eax], 0x72a8358b
jmp 0x4820d4
mov dword [ebp - 0x96c], 0x29a3df60
mov dword [ebp - 0x968], 0x29a3df60
mov dword [ebp - 0x964], 0x29a3df60
mov dword [ebp - 0x960], 0x29a3df60
mov dword [ebp - 0x9ac], 2
mov dword [ebp - 0x23a4], 0xfffffffe
mov dword [ebp - 0x61c], 0
jmp 0x482158
mov eax, dword [ebp - 0x61c]
inc eax
mov dword [ebp - 0x61c], eax
cmp dword [ebp - 0x61c], 1
jge 0x482174
mov eax, dword [ebp - 0x61c]
mov dword [ebp + eax*4 - 0x3ec], 0xf1124f01
jmp 0x48214b
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x96c], 0
jmp 0x4821a2
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x96c]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x96c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x96c], 0
jg 0x4824c9
mov dword [ebp - 0x47c], 0xfffffff9
push 3
lea ecx, [ebp - 0x24f0]
call fcn.0043a535
mov dword [ebp - 0x914], 0
jmp 0x4821e6
mov eax, dword [ebp - 0x914]
inc eax
mov dword [ebp - 0x914], eax
cmp dword [ebp - 0x914], 3
jge 0x482208
push dword [ebp - 0x914]
lea ecx, [ebp - 0x24f0]
call fcn.0043a623
mov dword [eax], 2
jmp 0x4821d9
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x96c]
cmp dword [ebp + eax*4 - 0x3ec], 0
je 0x48248d
mov dword [ebp - 0xa64], 0x969a22db
mov dword [ebp - 0xd2c], 0xadf890ba
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x96c]
cmp dword [ebp + eax*4 - 0x3ec], 0
jne 0x48243b
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x96c]
cmp dword [ebp + eax*4 - 0x3ec], 0
je 0x4823cb
cmp dword [ebp - 0xa64], 0
je 0x4822bf
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x96c]
mov eax, dword [ebp + eax*4 - 0x3ec]
mov dword [ebp - 0xd04], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x96c]
mov ecx, dword [ebp - 0xd04]
mov dword [ebp + eax*4 - 0x3ec], ecx
cmp dword [ebp - 0xd04], 0
je 0x4822bf
mov dword [ebp - 0x1aa4], 1
jmp 0x4822c6
and dword [ebp - 0x1aa4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x96c]
mov dword [ebp - 0x2f9c], eax
mov eax, dword [ebp - 0xa64]
mov dword [ebp - 0x3374], eax
mov eax, dword [ebp - 0xa64]
mov dword [ebp - 0x2fa4], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x96c]
mov dword [ebp - 0x321c], eax
mov eax, dword [ebp - 0x47c]
cmp dword [ebp - 0x9ac], eax
je 0x482323
cmp dword [ebp - 0x47c], 0
jne 0x482323
and dword [ebp - 0x1a9c], 0
jmp 0x48232d
mov dword [ebp - 0x1a9c], 1
mov eax, dword [ebp - 0x1a9c]
add eax, 4
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x96c]
jle 0x482365
cmp dword [ebp - 0x47c], 0
jne 0x482365
or eax, 0xffffffff
jne 0x482365
mov eax, 0xa74d4b4b
test eax, eax
jne 0x482365
and dword [ebp - 0xd0c], 0
jmp 0x48236f
mov dword [ebp - 0xd0c], 1
cmp dword [ebp - 0xd0c], 0x129ec6ea
je 0x482387
mov dword [ebp - 0xd14], 1
jmp 0x48238e
and dword [ebp - 0xd14], 0
mov eax, dword [ebp - 0x1aa4]
cmp eax, dword [ebp - 0xd14]
jle 0x4823a8
mov dword [ebp - 0x239c], 1
jmp 0x4823af
and dword [ebp - 0x239c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x96c]
mov eax, dword [ebp + eax*4 - 0x3ec]
add eax, dword [ebp - 0x23a4]
jne 0x4823dd
mov eax, 0x6293
test eax, eax
jne 0x4823dd
and dword [ebp - 0x1aac], 0
jmp 0x4823e7
mov dword [ebp - 0x1aac], 1
cmp dword [ebp - 0x1aac], 0
jne 0x4823fc
mov dword [ebp - 0xd1c], 1
jmp 0x482403
and dword [ebp - 0xd1c], 0
mov eax, dword [ebp - 0x47c]
cmp dword [ebp - 0xd1c], eax
jl 0x48241d
mov dword [ebp - 0x1ab4], 1
jmp 0x482424
and dword [ebp - 0x1ab4], 0
mov eax, dword [ebp - 0x9ac]
cmp dword [ebp - 0x1ab4], eax
jg 0x48243b
and dword [ebp - 0xd24], 0
jmp 0x482445
mov dword [ebp - 0xd24], 1
cmp dword [ebp - 0xd24], 0xc6eb81f9
ja 0x48245d
mov dword [ebp - 0x1abc], 1
jmp 0x482464
and dword [ebp - 0x1abc], 0
mov eax, dword [ebp - 0x1abc]
mov dword [ebp - 0xd2c], eax
mov esi, dword [ebp - 0xd2c]
sub esi, dword [ebp - 0x47c]
push 2
lea ecx, [ebp - 0x24f0]
call fcn.0043a623
mov dword [eax], esi
jmp 0x4824a3
cmp dword [ebp - 0x9ac], 0
je 0x4824a3
lea ecx, [ebp - 0x24f0]
call fcn.0043a607
jmp 0x4824c9
cmp dword [ebp - 0x47c], 0
je 0x4824b9
lea ecx, [ebp - 0x24f0]
call fcn.0043a607
jmp 0x4824c9
lea ecx, [ebp - 0x24f0]
call fcn.0043a607
jmp 0x482187
mov dword [ebp - 0x2a8], 0xffffffe2
jmp 0x4824e2
cmp dword [ebp - 0x2a8], 0xfffffffc
jl 0x484044
push 1
lea ecx, [ebp - 0x286c]
call fcn.0043a535
mov dword [ebp - 0x178], 0xfffffffa
push 3
lea ecx, [ebp - 0x2c0c]
call fcn.0043a535
mov dword [ebp - 0x1e0], 0
jmp 0x48252c
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 1
jge 0x48254e
push dword [ebp - 0x1e0]
lea ecx, [ebp - 0x286c]
call fcn.0043a623
mov dword [eax], 1
jmp 0x48251f
mov dword [ebp - 0x1e0], 0
jmp 0x482567
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 3
jge 0x482589
push dword [ebp - 0x1e0]
lea ecx, [ebp - 0x2c0c]
call fcn.0043a623
mov dword [eax], 0x52570e81
jmp 0x48255a
mov dword [ebp - 0x178], 0
jmp 0x4825a2
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 0
jg 0x4825d8
mov byte [ebp - 0x2db], 0
movzx eax, byte [ebp - 0x2db]
test eax, eax
je 0x4825d6
push 0x1074
call dword [0xacd408]
push eax
call dword [0xacd3e8]
push eax
call dword [0xacd090]
jmp 0x482595
mov dword [ebp - 0x178], 0
jmp 0x4825f1
cmp dword [ebp - 0x178], 0
jg 0x482982
mov dword [ebp - 0xf0], 0xd8cb4c23
mov dword [ebp - 0x3f4], 0xfb07d0d1
push 1
lea ecx, [ebp - 0x3138]
call fcn.0043a535
mov dword [ebp - 0x624], 0
jmp 0x482638
cmp dword [ebp - 0x624], 1
jge 0x48265a
push dword [ebp - 0x624]
lea ecx, [ebp - 0x3138]
call fcn.0043a623
mov dword [eax], 0x54ba4fda
jmp 0x48262b
mov byte [ebp - 0x2dd], 0
movzx eax, byte [ebp - 0x2dd]
test eax, eax
je 0x482674
lea ecx, [ebp - 0x2c0c]
call fcn.0043a607
lea ecx, [ebp - 0x286c]
call fcn.0043a607
mov dword [ebp - 0x548], 0xffff
mov dword [ebp - 0xc4], 1
mov dword [ebp - 0x518], 0
mov dword [ebp - 0x1af4], 0xffffffff
mov eax, 0xce1e2c0d
test eax, eax
je 0x482aab
mov eax, dword [ebp - 0xc4]
cmp dword [ebp - 0xc4], eax
je 0x4829e7
mov dword [ebp - 0xd54], 1
jmp 0x4829ee
and dword [ebp - 0xd54], 0
mov eax, dword [ebp - 0xd54]
mov dword [ebp - 0x518], eax
cmp dword [ebp - 0x518], 0
je 0x482a18
and dword [ebp - 0xd64], 0
cmp dword [ebp - 0xd64], 0x7f08e229
jge 0x482aca
mov dword [ebp - 0x1afc], 1
jmp 0x482ad1
and dword [ebp - 0x1afc], 0
cmp dword [ebp - 0x1afc], 0x489f7a9d
jg 0x482ae9
lea ecx, [ebp - 0x2c6c]
call fcn.0043a607
mov dword [ebp - 0x4c8], 0xd3df75dc
mov dword [ebp - 0x1cc8], 0xcdf5ef88
mov dword [ebp - 0x63c], 0xcf1d65f4
mov dword [ebp - 0x1cf0], 0xfff8
mov dword [ebp - 0x2d00], 0xd4bca925
mov dword [ebp - 0x2cfc], 0xd4bca925
mov dword [ebp - 0x2cf8], 0xd4bca925
mov dword [ebp - 0x2cf4], 0xd4bca925
mov dword [ebp - 0x1cf8], 0xffffffff
mov dword [ebp - 0x4c8], 0xffffffe6
jmp 0x4840c2
cmp dword [ebp - 0x4c8], 0xfffffff9
je 0x484299
mov dword [ebp - 0xa78], 0xfc257a10
mov dword [ebp - 0xee4], 0xc64f6b90
mov byte [ebp - 0x2e3], 0
movzx eax, byte [ebp - 0x2e3]
test eax, eax
je 0x48410b
push 0
call dword [0xacd408]
push eax
call dword [0xacd3e8]
push eax
call dword [0xacd0b0]
mov eax, dword [ebp - 0x1cc8]
cmp dword [ebp - 0x1cc8], eax
jne 0x484125
mov dword [ebp - 0x1cd8], 1
jmp 0x48412c
and dword [ebp - 0x1cd8], 0
cmp dword [ebp - 0x63c], 0x6c12a7b0
jge 0x484144
mov dword [ebp - 0x1cd0], 1
jmp 0x48414b
and dword [ebp - 0x1cd0], 0
mov eax, dword [ebp - 0x1cf0]
cmp dword [ebp - 0xa78], eax
jl 0x484165
mov dword [ebp - 0xeb4], 1
jmp 0x48416c
and dword [ebp - 0xeb4], 0
cmp dword [ebp - 0xeb4], 0xffffffff
jne 0x484181
mov dword [ebp - 0xebc], 1
jmp 0x484188
and dword [ebp - 0xebc], 0
mov eax, dword [ebp - 0x1cd0]
cmp eax, dword [ebp - 0xebc]
je 0x4841a2
mov dword [ebp - 0xec4], 1
jmp 0x4841a9
and dword [ebp - 0xec4], 0
mov eax, dword [ebp - 0x1cd8]
imul eax, dword [ebp - 0xec4]
test eax, eax
jne 0x4841c3
cmp dword [ebp - 0x4c8], 0
je 0x4841d8
mov eax, 0xacae7bf1
test eax, eax
je 0x4841d8
mov dword [ebp - 0x1ce0], 1
jmp 0x4841df
and dword [ebp - 0x1ce0], 0
mov eax, dword [ebp - 0x63c]
cmp dword [ebp - 0x1ce0], eax
jg 0x4841ff
mov dword [ebp - 0x1b50], 0x360f
mov dword [ebp - 0x32b4], 0
mov dword [ebp - 0x3034], 0
push 3
lea ecx, [ebp - 0x3168]
call fcn.0043a535
mov dword [ebp - 0x32e0], 0xfffffffe
mov dword [ebp - 0x1d00], 0x50bb
mov dword [ebp - 0x303c], 0x55c0c8fb
mov dword [ebp - 0x74], 0
jmp 0x4842f2
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 4
jge 0x484308
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0x3638], 0xfffffffd
jmp 0x4842eb
mov dword [ebp - 0x74], 0
jmp 0x484318
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 3
jge 0x484334
push dword [ebp - 0x74]
lea ecx, [ebp - 0x3168]
call fcn.0043a623
mov dword [eax], 0xf5ed
jmp 0x484311
mov dword [ebp - 0x74], 0
jmp 0x484344
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 3
jge 0x48435a
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0x3158], 0xb146
jmp 0x48433d
mov eax, dword [ebp - 0x1d00]
dec eax
mov dword [ebp - 0x1d00], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x3158]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x3158], eax
lea ecx, [ebp - 0x3168]
call fcn.0043a607
push 3
lea ecx, [ebp - 0x2884]
call fcn.0043a535
push 2
lea ecx, [ebp - 0x1f54]
call fcn.0043a535
mov dword [ebp - 0xef4], 1
mov dword [ebp - 0x188], 0
jmp 0x4843c8
cmp dword [ebp - 0x188], 3
jge 0x4843ea
push dword [ebp - 0x188]
lea ecx, [ebp - 0x2884]
call fcn.0043a623
mov dword [eax], 0x8261f9c2
jmp 0x4843bb
mov dword [ebp - 0x188], 0
jmp 0x484403