Function at 0x47160e
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4ce0f9
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x500
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
push 2
lea ecx, [ebp - 0x2b4]
call fcn.0040bdd2
mov dword [ebp - 0x100], 0xffffffff
mov dword [ebp - 0xfc], 0xffffffff
mov dword [ebp - 0xf8], 0xffffffff
mov dword [ebp - 0xf4], 0xffffffff
mov dword [ebp - 0x2b8], 0x57a67d92
push 0x798d
push 0x2da6
push 1
push 0x2c8e
push 0x568e
push 1
push 0x696e
push 0x68f6
push 1
push 1
push 0x32d2
push 0x443
lea eax, [ebp - 0x48c]
push eax
push 0x3c83
lea eax, [ebp - 0x2b4]
push eax
push 0x7eb9
push 0x6ffa
push 0x7820
push 1
call fcn.0045be4b
add esp, 0x4c
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x100], 1
jmp 0x4716fc
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x100]
dec eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x100], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x100], 0
jl 0x47184b
mov dword [ebp - 0x3f4], 0xa83d
mov dword [ebp - 0x3f0], 0xa83d
mov dword [ebp - 0x3ec], 0xa83d
mov dword [ebp - 0x3e8], 0xa83d
mov dword [ebp - 0x338], 6
push 4
pop eax
imul eax, eax, 3
push dword [ebp + eax - 0x100]
lea ecx, [ebp - 0x2b4]
call fcn.0040bec0
cmp dword [eax], 0
je 0x471764
jmp 0x47184b
push 4
pop eax
imul eax, eax, 3
push dword [ebp + eax - 0x100]
lea ecx, [ebp - 0x2b4]
call fcn.0040bec0
cmp dword [eax], 9
jne 0x47178d
mov dword [ebp - 0x190], 1
jmp 0x471794
and dword [ebp - 0x190], 0
push 4
pop eax
imul eax, eax, 3
mov esi, dword [ebp + eax - 0x100]
push 4
pop eax
imul eax, eax, 3
push dword [ebp + eax - 0x100]
lea ecx, [ebp - 0x2b4]
call fcn.0040bec0
sub esi, dword [eax]
push 4
pop eax
imul eax, eax, 3
push dword [ebp + eax - 0x100]
lea ecx, [ebp - 0x2b4]
call fcn.0040bec0
imul esi, dword [eax]
imul esi, dword [ebp - 0x190]
cmp esi, 0x62d
jg 0x4717f1
mov dword [ebp - 0x330], 1
jmp 0x4717f8
and dword [ebp - 0x330], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x100]
mov dword [ebp - 0x414], eax
mov eax, dword [ebp - 0x2b8]
mov dword [ebp - 0x490], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x3f4]
mov dword [ebp - 0x41c], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x100]
mov dword [ebp - 0x448], eax
mov dword [ebp - 0x338], 1
jmp 0x4716e1
lea ecx, [ebp - 0x2b4]
call fcn.0040bea4
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
mov dword [ebp - 0xd8], eax
push 1
push 1
push 0x5dd0
push 1
push 0x1a66
push 1
call fcn.0046d11f
add esp, 0x18
mov eax, dword [ebp + 8]
mov eax, dword [eax]
push 8
pop ecx
imul ecx, ecx, 0
lea eax, [eax + ecx + 0x78]
mov dword [ebp - 0x26c], eax
push 3
lea ecx, [ebp - 0x10c]
call fcn.0040bdd2
mov dword [ebp - 0x3c], 0xcb457102
lea eax, [ebp - 0x424]
push eax
push 1
push 0x22af
lea eax, [ebp - 0x10c]
push eax
push 0x4d2c
push 0x6678
push 1
push 0x2673
push 0x7e59
push 1
push 1
push 0x7bde
push 1
push 0x6757
push 0x983
push 0x3029
push 0x5eda
push 0x6eb9
push 0x6143
call fcn.0045ef7f
add esp, 0x4c
mov dword [ebp - 0x3c], 0
jmp 0x471911
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 2
jg 0x471deb
mov dword [ebp - 0x20], 0x1e814b73
mov dword [ebp - 0xf0], 0
mov dword [ebp - 0x20], 0
jmp 0x47193c
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jg 0x471db2
mov dword [ebp - 0x38], 0x2eaa29c1
mov dword [ebp - 0x38], 0
jmp 0x47195d
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 2
jg 0x471d78
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x268], 0xfffffff6
mov dword [ebp - 0x3a4], 7
mov dword [ebp - 0x3a0], 7
mov dword [ebp - 0x39c], 7
mov dword [ebp - 0x398], 7
lea ecx, [ebp - 0xe5]
call fcn.0040becf
push eax
lea eax, [ebp - 0x394]
push eax
lea eax, [ebp - 0x3a4]
push eax
lea ecx, [ebp - 0x4c0]
call fcn.0040bed2
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x3c8]
call fcn.0040be7e
mov dword [ebp - 0x48], 2
jmp 0x4719e5
mov eax, dword [ebp - 0x48]
dec eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
jl 0x471d68
push dword [ebp - 0x20]
lea ecx, [ebp - 0x10c]
call fcn.0040bec0
mov dword [ebp - 0x270], eax
push dword [ebp - 0x20]
lea ecx, [ebp - 0x10c]
call fcn.0040bec0
mov ecx, dword [ebp - 0x270]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x270]
mov eax, dword [eax]
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0
jne 0x471a3f
mov eax, 0x145c1747
test eax, eax
je 0x471b38
cmp dword [ebp - 0x20], 0
je 0x471b38
push 1
lea ecx, [ebp - 0x3c8]
call fcn.0040bec0
mov ecx, dword [ebp - 0x20]
cmp dword [eax], ecx
jge 0x471a69
mov dword [ebp - 0x278], 1
jmp 0x471a70
and dword [ebp - 0x278], 0
cmp dword [ebp - 0x278], 2
je 0x471a85
mov dword [ebp - 0x280], 1
jmp 0x471a8c
and dword [ebp - 0x280], 0
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x280], eax
jne 0x471aa3
mov dword [ebp - 0x28c], 1
jmp 0x471aaa
and dword [ebp - 0x28c], 0
push 1
lea ecx, [ebp - 0x10c]
call fcn.0040bec0
mov ecx, dword [ebp - 0x28c]
cmp ecx, dword [eax]
jge 0x471acd
mov dword [ebp - 0x11c], 1
jmp 0x471ad4
and dword [ebp - 0x11c], 0
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x268], eax
mov eax, dword [ebp - 0x268]
push dword [ebp - 0x20]
lea ecx, [ebp - 0x10c]
call fcn.0040bec0
imul eax, dword [eax], 0xffffffff
test eax, eax
jne 0x471b17
xor eax, eax
jne 0x471b17
push 1
lea ecx, [ebp - 0x3c8]
call fcn.0040bec0
cmp dword [eax], 0
jne 0x471b17
and dword [ebp - 0x1dc], 0
jmp 0x471b21
mov dword [ebp - 0x1dc], 1
imul eax, dword [ebp - 0x1dc], 5
test eax, eax
je 0x471b38
mov dword [ebp - 0x124], 1
jmp 0x471b3f
and dword [ebp - 0x124], 0
cmp dword [ebp - 0x124], 0x24b6
jg 0x471d08
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0xf0]
push eax
call fcn.00404c4d
pop ecx
pop ecx
mov dword [ebp - 0x23c], 0x7956
mov dword [ebp - 0x340], str.miq_kxy_rktmhov
cmp dword [ebp - 0x23c], 0x7bed
jle 0x471c65
and dword [ebp - 0xa0], 0
jmp 0x471b9b
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0x178c
jge 0x471c65
and dword [ebp - 0x60], 0
jmp 0x471bb8
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0x7481
jge 0x471c60
and dword [ebp - 0x94], 0
jmp 0x471bdb
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0x75d0
jge 0x471c5b
and dword [ebp - 0x74], 0
jmp 0x471bf4
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0x158b
jge 0x471c56
mov eax, dword [ebp - 0xa0]
mov ecx, dword [ebp - 0x60]
sar eax, cl
mov ecx, dword [ebp - 0x94]
shl eax, cl
mov ecx, dword [ebp - 0x74]
shl eax, cl
cdq
mov dword [ebp - 0x2ec], eax
mov dword [ebp - 0x2e8], edx
push dword [ebp - 0x2e8]
push dword [ebp - 0x2ec]
lea ecx, [ebp - 0x4e0]
call fcn.004019d8
pop ecx
pop ecx
mov ecx, eax
call fcn.0040bba0
push eax
call fcn.004b7f67
pop ecx
lea ecx, [ebp - 0x4e0]
call fcn.0040bb96
jmp 0x471bed
jmp 0x471bce
jmp 0x471bb1
jmp 0x471b8e
push 0x702d
push 0x2cc4
push 0x46fe
push 1
push 0x6c21
push 1
push 1
push 1
push 0xff2
push 1
push 1
push 0x464a
push 0x733c
push 0x43a9
push 0x1c5b
push 0x34c8
push 0x1aa6
push 0x2085
push 0x66b
push 0xe62
push 0x7e6
call fcn.004680b6
add esp, 0x54
and dword [ebp - 4], 0
cmp dword [ebp - 0x23c], 0x7860
jge 0x471ce0
push dword [ebp - 0x340]
call fcn.004b7f67
pop ecx
jmp 0x471cfc
or dword [ebp - 4], 0xffffffff
jmp 0x471d06
jmp 0x471d63
push 1
push 0x58f1
push 0x2a14
push 1
push 0x1c67
push 1
push 0x3a45
push 0x14b0
push 1
push 1
push 0x552c
push 0x50b
lea eax, [ebp - 0x20]
push eax
push 0x6e18
lea eax, [ebp - 0x10c]
push eax
push 0x74ba
push 0x19cf
push 0x49a1
push 0x78d4
push 1
call fcn.0046db91
add esp, 0x50
jmp 0x4719de
lea ecx, [ebp - 0x3c8]
call fcn.0040bea4
jmp 0x471956
lea eax, [ebp - 0x20]
push eax
push 0x221c
push 0x363a
push 1
push 1
lea eax, [ebp - 0x3c]
push eax
push 1
push 1
push 0x4760
push 0x42b6
push 1
lea eax, [ebp - 0x10c]
push eax
call fcn.00468a98
add esp, 0x30
jmp 0x471935
push 1
push 0xde2
lea eax, [ebp - 0x3c]
push eax
push 0x9e9
lea eax, [ebp - 0x10c]
push eax
push 0x3c5a
push 1
push 0x71fa
push 1
push 0x38c4
push 1
call fcn.0046e34d
add esp, 0x2c
jmp 0x47190a
lea ecx, [ebp - 0x10c]
call fcn.0040bea4
mov eax, dword [ebp - 0x26c]
cmp dword [eax + 4], 0
jne 0x471e20
mov dword [ebp - 0x348], 0x3ae35568
lea eax, [ebp - 0x348]
push eax
call fcn.0047157f
pop ecx
xor eax, eax
jmp 0x4738a2
mov dword [ebp - 0x2bc], 1
mov dword [ebp - 0x350], 0xfffffff7
mov dword [ebp - 0x2c4], 0x5fe46c2e
mov dword [ebp - 0x134], 9
mov dword [ebp - 0x368], 0xf9a0
mov dword [ebp - 0x1e4], 0x9da9
mov dword [ebp - 0x12c], 0xbbfad0d7
mov dword [ebp - 0x2e0], 0x800f
push 0x3a6
lea eax, [ebp - 0x350]
push eax
lea eax, [ebp - 0x368]
push eax
push 1
lea eax, [ebp - 0x12c]
push eax
push 1
lea eax, [ebp - 0x2c4]
push eax
push 0x3f95
push 0x7fe8
lea eax, [ebp - 0x134]
push eax
push 0x38a6
push 1
push 1
push 1
lea eax, [ebp - 0x2bc]
push eax
lea eax, [ebp - 0x1e4]
push eax
call fcn.00469268
add esp, 0x40
push 0x3676
lea eax, [ebp - 0x2e0]
push eax
push 1
push 0x6eb7
push 0x5ac1
push 1
push 0x1c13
push 1
push 0x7d48
push 0x767f
push 0x20a
lea eax, [ebp - 0x12c]
push eax
push 1
lea eax, [ebp - 0x1e4]
push eax
push 0x7fb
lea eax, [ebp - 0x134]
push eax
push 0x71eb
push 0x4d62
call fcn.00469903
add esp, 0x48
push 0x43b
push 0x3846
push 0x137d
push 1
push 0x215c
push 0x711a
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0x26c]
push eax
push 1
push 0x6280
push 1
push 0x7215
push 1
push 0x2ca1
push 1
push 1
lea eax, [ebp - 0xd8]
push eax
call fcn.0046f616
add esp, 0x44
push 0x4c63
push 1
push 0x3942
push 1
push 0x5928
push 0x2d63
push 1
push 0x2b7f
push 0x3183
push 0x1c2b
push 1
push 0x3c99
push 0x4d14
push 0x29bd
call fcn.0046fb51
add esp, 0x38
mov eax, dword [ebp - 0xd0]
cmp dword [eax + 0x14], 0
jne 0x472a6e
mov dword [ebp - 0x264], 0x642e
mov dword [ebp - 0x2e4], str.polf_abm_aocyn_ijxzovfg_pmujub_kvfjvznb
cmp dword [ebp - 0x264], 0x6599
jle 0x47207b
and dword [ebp - 0x8c], 0
jmp 0x472002
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0x2de3
jge 0x472070
and dword [ebp - 0x7c], 0
jmp 0x47201b
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0x56f1
jge 0x47206e
mov eax, dword [ebp - 0x8c]
add eax, dword [ebp - 0x7c]
cdq
mov dword [ebp - 0x2f8], eax
mov dword [ebp - 0x2f4], edx
push dword [ebp - 0x2f4]
push dword [ebp - 0x2f8]
lea ecx, [ebp - 0x4f8]
call fcn.004019d8
pop ecx
pop ecx
mov ecx, eax
call fcn.0040bba0
push eax
call fcn.004b7f67
pop ecx
lea ecx, [ebp - 0x4f8]
call fcn.0040bb96
jmp 0x472014
jmp 0x471ff5
push 0x1a9c
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0x13c], 0x398f
mov dword [ebp - 0x364], str.wfp_wwat_gaayzuzbc_adoj_nju_zxqdzjawd_imjhvefun_awyqqtcz_yxpvpfq_ynpvbzujt_gjdetrtui_uxcs_ikylh
cmp dword [ebp - 0x13c], 0x3caa
jle 0x47213b
and dword [ebp - 0x50], 0
jmp 0x4720b3
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0x600b
jge 0x47213b
and dword [ebp - 0x9c], 0
jmp 0x4720d2
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0x7ebb
jge 0x472136
and dword [ebp - 0x84], 0
jmp 0x4720f4
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0x16f
jge 0x472134
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0x84]
xor eax, dword [ebp - 0x50]
cdq
mov dword [ebp - 0x304], eax
mov dword [ebp - 0x300], edx
push dword [ebp - 0x300]
push dword [ebp - 0x304]
mov ecx, 0xaa47f8
call fcn.0040bbab
jmp 0x4720e7
jmp 0x4720c5
jmp 0x4720ac
mov dword [ebp - 0x1c], 0x8ace4b0a
mov dword [ebp - 4], 2
cmp dword [ebp - 0x13c], 0x3832
jge 0x472165
mov edx, dword [ebp - 0x364]
mov ecx, 0xaa47f8
call fcn.0040e430
jmp 0x472181
or dword [ebp - 4], 0xffffffff
jmp 0x47218b
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x44c], 0x59e2267c
mov dword [ebp - 0xec], 8
mov dword [ebp - 0x450], 6
mov dword [ebp - 0x224], 0x766aa6f6
mov dword [ebp - 0x4ac], 0xee08268a
mov dword [ebp - 0x460], 0xc6106a47
mov dword [ebp - 0x32c], 0x72581ee2
mov dword [ebp - 0x488], 0xe97b5c16
mov dword [ebp - 0x3fc], 0xd8c04388
mov dword [ebp - 0x400], 1
mov dword [ebp - 0xbc], 0
mov dword [ebp - 0x1ec], 0x34f9
mov dword [ebp - 0x2cc], str.dpyw_zdky_ipllqkdb_wgqocx_fvn
cmp dword [ebp - 0x1ec], 0x3653
jle 0x4722b7
and dword [ebp - 0x5c], 0
jmp 0x472231
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0x77f6
jge 0x4722b7
and dword [ebp - 0x70], 0
jmp 0x472247
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0x574a
jge 0x4722b2
and dword [ebp - 0x78], 0
jmp 0x47225d
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0x6920
jge 0x4722b0
mov eax, dword [ebp - 0x5c]
add eax, dword [ebp - 0x70]
add eax, dword [ebp - 0x78]
cdq
mov dword [ebp - 0x310], eax
mov dword [ebp - 0x30c], edx
push dword [ebp - 0x30c]
push dword [ebp - 0x310]
lea ecx, [ebp - 0x510]
call fcn.004019d8
pop ecx
pop ecx
mov ecx, eax
call fcn.0040bba0
push eax
call fcn.004b7f67
pop ecx
lea ecx, [ebp - 0x510]
call fcn.0040bb96
jmp 0x472256
jmp 0x472240
jmp 0x47222a
mov dword [ebp - 0x80], 0
jmp 0x4722c7
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 3
jge 0x4722dd
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0xac], 0xcd95ff79
jmp 0x4722c0
mov dword [ebp - 4], 4
cmp dword [ebp - 0x1ec], 0x31f1
jge 0x4722fc
push dword [ebp - 0x2cc]
call fcn.004b7f67
pop ecx
jmp 0x472318
or dword [ebp - 4], 0xffffffff
jmp 0x472322
cmp dword [ebp - 0x14], 0
jne 0x472370
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x14], eax
jne 0x47233c
mov dword [ebp - 0x144], 1
jmp 0x472343
and dword [ebp - 0x144], 0
mov eax, dword [ebp - 0x144]
sub eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x1c]
test eax, eax
jne 0x472358
cmp dword [ebp - 0x14], 0
mov eax, dword [ebp - 0x14]
mov ecx, 0x8d96
sub ecx, dword [ebp - 0x1c]
sub eax, ecx
jne 0x472370
and dword [ebp - 0x244], 0
jmp 0x47237a
mov dword [ebp - 0x244], 1
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x244]
test eax, eax
je 0x47239a
cmp dword [ebp - 0x14], 0
je 0x47239a
mov dword [ebp - 0x14c], 1
jmp 0x4723a1
and dword [ebp - 0x14c], 0
cmp dword [ebp - 0x14c], 0xffffffff
ja 0x4723b6
mov dword [ebp - 0x1f4], 1
jmp 0x4723bd
and dword [ebp - 0x1f4], 0
cmp dword [ebp - 0x1f4], 0
jbe 0x4723d2
mov dword [ebp - 0x154], 1
jmp 0x4723d9
and dword [ebp - 0x154], 0
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x154]
je 0x4723f0
mov dword [ebp - 0x284], 1
jmp 0x4723f7
and dword [ebp - 0x284], 0
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x284]
je 0x472414
cmp dword [ebp - 0x14], 0
je 0x472414
mov dword [ebp - 0x15c], 1
jmp 0x47241b
and dword [ebp - 0x15c], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x15c], eax
jle 0x472432
mov dword [ebp - 0x1fc], 1
jmp 0x472439
and dword [ebp - 0x1fc], 0
mov eax, dword [ebp - 0x1fc]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x18], 0
jmp 0x472452
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jg 0x472a22
mov dword [ebp - 0xc4], 0xa1ee319
push 1
lea ecx, [ebp - 0x3b0]
call fcn.0040bdd2
mov dword [ebp - 0x408], 0x697c72f7
mov dword [ebp - 0x2dc], 1
push 3
lea ecx, [ebp - 0x444]
call fcn.0040bdd2
mov dword [ebp - 0x3e4], 0xffffffff
mov dword [ebp - 0x3e0], 0xffffffff
mov dword [ebp - 0x3dc], 0xffffffff
mov dword [ebp - 0x3d8], 0xffffffff
push 1
lea eax, [ebp - 0x2c]
push eax
push 1
push 0x58d1
push 0x43ae
push 1
push 1
push 0x5df9
lea eax, [ebp - 0x3b0]
push eax
call fcn.0046a7b9
add esp, 0x24
mov dword [ebp - 0x2c], 0
jmp 0x4724f6
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jge 0x47250c
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x438], 0
jmp 0x4724ef
mov dword [ebp - 0x2c], 0
jmp 0x47251c
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x472538
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x444]
call fcn.0040bec0
mov dword [eax], 4
jmp 0x472515
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x18]
mov ecx, dword [ebp + ecx*4 - 0xac]
mov edx, dword [ebp - 0x18]
imul ecx, dword [ebp + edx*4 - 0xac]
cmp dword [ebp + eax*4 - 0xac], ecx
jg 0x472572
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0xac], 0
je 0x472572
mov dword [ebp - 0x164], 1
jmp 0x472579
and dword [ebp - 0x164], 0
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 1
je 0x47259a
mov dword [ebp - 0x24c], 1
jmp 0x4725a1
and dword [ebp - 0x24c], 0
push 0
lea ecx, [ebp - 0x3b0]
call fcn.0040bec0
mov ecx, dword [ebp - 0x24c]
cmp ecx, dword [eax]
jg 0x4725c4
mov dword [ebp - 0x16c], 1
jmp 0x4725cb
and dword [ebp - 0x16c], 0
cmp dword [ebp - 0x16c], 0
jge 0x4725e0
mov dword [ebp - 0x204], 1
jmp 0x4725e7
and dword [ebp - 0x204], 0
cmp dword [ebp - 0x204], 0x76492a41
jge 0x4725ff
mov dword [ebp - 0x174], 1
jmp 0x472606
and dword [ebp - 0x174], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0xac]
imul eax, dword [ebp - 0x174]
sub eax, 0xc745
imul eax, eax, 0xa165
cmp eax, dword [ebp - 0x1c]
jne 0x472633
mov dword [ebp - 0x274], 1
jmp 0x47263a
and dword [ebp - 0x274], 0
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x274]
mov dword [ebp + eax*4 - 0xac], ecx
mov dword [ebp - 0x1c], 0xe
jmp 0x47265a
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x12
jle 0x472a07
mov dword [ebp - 0xdc], 9
mov dword [ebp - 0x410], 0xffffffff
mov dword [ebp - 0x88], 0
jmp 0x472691
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 3
jge 0x4726ad
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0x430], 3
jmp 0x472684
mov dword [ebp - 0x14], 0
jmp 0x4726bd
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jg 0x472831
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0xac], 8
jbe 0x4726e0
mov dword [ebp - 0x17c], 1
jmp 0x4726e7
and dword [ebp - 0x17c], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0xac]
cmp eax, dword [ebp - 0x17c]
jge 0x472705
mov dword [ebp - 0x20c], 1
jmp 0x47270c
and dword [ebp - 0x20c], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0xac]
cmp dword [ebp - 0x20c], eax
jge 0x47272a
mov dword [ebp - 0x184], 1
jmp 0x472731
and dword [ebp - 0x184], 0
cmp dword [ebp - 0x184], 0x3f0d
jle 0x472749
mov dword [ebp - 0x254], 1
jmp 0x472750
and dword [ebp - 0x254], 0
mov eax, dword [ebp - 0xdc]
cmp eax, dword [ebp - 0x254]
jle 0x47276c
xor eax, eax
inc eax
jne 0x47276c
and dword [ebp - 0x18c], 0
jmp 0x472776
mov dword [ebp - 0x18c], 1
mov eax, dword [ebp - 0x18c]
sub eax, 0x8336
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0xac]
jg 0x47279c
mov dword [ebp - 0x214], 1
jmp 0x4727a3
and dword [ebp - 0x214], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0xac]
cmp eax, dword [ebp - 0x214]
jge 0x4727c1
mov dword [ebp - 0x194], 1
jmp 0x4727c8
and dword [ebp - 0x194], 0
cmp dword [ebp - 0x194], 1
jne 0x4727e6
mov eax, 0xfffe
test eax, eax
je 0x4727e6
mov dword [ebp - 0x288], 1
jmp 0x4727ed
and dword [ebp - 0x288], 0
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x288]
cmp eax, 0x6fcb
jne 0x47280a
mov dword [ebp - 0x19c], 1
jmp 0x472811
and dword [ebp - 0x19c], 0
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x19c]
mov dword [ebp + eax*4 - 0xac], ecx
cmp dword [ebp - 0x1c], 0
je 0x47282c
jmp 0x4726b6
jmp 0x4726b6
cmp dword [ebp - 0x18], 0
jne 0x4729b5
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3e4]
cmp dword [ebp - 0xec], eax
jne 0x47285c
mov dword [ebp - 0x21c], 1
jmp 0x472863
and dword [ebp - 0x21c], 0
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0x320], eax
mov eax, dword [ebp - 0x21c]
mov dword [ebp - 0x2d4], eax
mov eax, dword [ebp - 0xbc]
dec eax
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0x320]
cmp eax, dword [ebp - 0x2d4]
jne 0x4728a2
mov dword [ebp - 0x1a4], 1
jmp 0x4728a9
and dword [ebp - 0x1a4], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x1a4], eax
je 0x4728c0
mov dword [ebp - 0x25c], 1
jmp 0x4728c7
and dword [ebp - 0x25c], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x25c], eax
jl 0x4728de
mov dword [ebp - 0x1ac], 1
jmp 0x4728e5
and dword [ebp - 0x1ac], 0
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x224], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xac]
cmp eax, dword [ebp - 0x224]
jg 0x472912
mov dword [ebp - 0x1b4], 1
jmp 0x472919
and dword [ebp - 0x1b4], 0
cmp dword [ebp - 0x1b4], 0
je 0x47292e
mov dword [ebp - 0x27c], 1
jmp 0x472935
and dword [ebp - 0x27c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x438]
cmp dword [ebp - 0x27c], eax
je 0x472956
mov dword [ebp - 0x344], 1
jmp 0x47295d
and dword [ebp - 0x344], 0
mov eax, dword [ebp - 0x2dc]
mov dword [ebp - 0x418], eax
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x420], eax
push 4
pop eax
shl eax, 0
imul eax, dword [ebp + eax - 0x430], 0xffffffff
cmp dword [ebp - 0xdc], eax
jl 0x472997
mov dword [ebp - 0x1bc], 1
jmp 0x47299e
and dword [ebp - 0x1bc], 0
mov eax, dword [ebp - 0x32c]
cmp dword [ebp - 0x1bc], eax
jle 0x4729b5
and dword [ebp - 0x22c], 0
jmp 0x4729bf
mov dword [ebp - 0x22c], 1
mov eax, dword [ebp - 0x22c]
mov dword [ebp - 0xec], eax
mov eax, dword [ebp - 0xc4]
cmp dword [ebp - 0xec], eax
jl 0x4729e5
mov dword [ebp - 0x1c4], 1
jmp 0x4729ec
and dword [ebp - 0x1c4], 0
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x1c4]
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x430], eax
jmp 0x472653
lea ecx, [ebp - 0x444]
call fcn.0040bea4
lea ecx, [ebp - 0x3b0]
call fcn.0040bea4
jmp 0x47244b
mov dword [ebp - 4], 6
cmp dword [ebp - 0x264], 0x61b9
jge 0x472a41
push dword [ebp - 0x2e4]
call fcn.004b7f67
pop ecx
jmp 0x472a5d
or dword [ebp - 4], 0xffffffff
jmp 0x472a67
xor eax, eax
jmp 0x4738a2
push 3
lea ecx, [ebp - 0x6c]
call fcn.0040bdd2
mov dword [ebp - 0x40], 0xffffffff
mov dword [ebp - 0x354], 0
mov dword [ebp - 0x2fc], 0x3222
mov dword [ebp - 0x2f0], 0xffffffff
mov dword [ebp - 0xcc], 0xffffffff
mov dword [ebp - 0x390], 0xb150
mov dword [ebp - 0x38c], 0xb150
mov dword [ebp - 0x388], 0xb150
mov dword [ebp - 0x384], 0xb150
lea ecx, [ebp - 0xad]
call fcn.0040becf
push eax
lea eax, [ebp - 0x380]
push eax
lea eax, [ebp - 0x390]
push eax
lea ecx, [ebp - 0x4b8]
call fcn.0040bed2
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x46c]
call fcn.0040be7e
push 1
push 1
push 0x5c71
push 1
push 0x3607
push 0x2266
lea eax, [ebp - 0x28]
push eax
push 0x27dd
push 1
push 0x712
push 0x235f
push 0x36cd
push 0xb51
lea eax, [ebp - 0x6c]
push eax
push 0x40e8
call fcn.0047039c
add esp, 0x3c
mov dword [ebp - 0x28], 0
jmp 0x472b59
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 1
jge 0x472b6f
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x180], 0x5c6a81d6
jmp 0x472b52
mov dword [ebp - 0x28], 0
jmp 0x472b7f
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 1
jge 0x472b95
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0xe4], 0xffffffff
jmp 0x472b78
push 0
lea ecx, [ebp - 0x6c]
call fcn.0040bec0
cmp dword [eax], 0xfffa
jae 0x472bb3
mov dword [ebp - 0x1cc], 1
jmp 0x472bba
and dword [ebp - 0x1cc], 0
push 1
lea ecx, [ebp - 0x6c]
call fcn.0040bec0
mov eax, dword [eax]
cmp eax, dword [ebp - 0x1cc]
jne 0x472bda
mov dword [ebp - 0x118], 1
jmp 0x472be1
and dword [ebp - 0x118], 0
push 1
lea ecx, [ebp - 0x6c]
call fcn.0040bec0
cmp dword [eax], 0
jne 0x472bfd
xor eax, eax
jne 0x472bfd
and dword [ebp - 0x234], 0
jmp 0x472c07
mov dword [ebp - 0x234], 1
mov eax, dword [ebp - 0x234]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x474], eax
push 2
lea ecx, [ebp - 0x6c]
call fcn.0040bec0
mov esi, eax
push 0
lea ecx, [ebp - 0x6c]
call fcn.0040bec0
mov ecx, dword [esi]
cmp ecx, dword [eax]
jl 0x472c41
mov dword [ebp - 0x1d4], 1
jmp 0x472c48
and dword [ebp - 0x1d4], 0
push 1
lea ecx, [ebp - 0x6c]
call fcn.0040bec0
mov esi, dword [eax]
imul esi, dword [ebp - 0x1d4]
push 2
lea ecx, [ebp - 0x6c]
call fcn.0040bec0
cmp esi, dword [eax]
jne 0x472c75
mov dword [ebp - 0x114], 1
jmp 0x472c7c
and dword [ebp - 0x114], 0
mov eax, dword [ebp - 0x114]
add eax, 9
je 0x472c9c
mov eax, 0xd6b5
test eax, eax
je 0x472c9c
mov dword [ebp - 0x120], 1
jmp 0x472ca3
and dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x118]
cmp eax, dword [ebp - 0x120]
je 0x472cbd
mov dword [ebp - 0x128], 1
jmp 0x472cc4
and dword [ebp - 0x128], 0
push 2
lea ecx, [ebp - 0x6c]
call fcn.0040bec0
mov ecx, dword [ebp - 0x128]
cmp ecx, dword [eax]
jl 0x472ce4
mov dword [ebp - 0x130], 1
jmp 0x472ceb
and dword [ebp - 0x130], 0
mov eax, dword [ebp - 0x354]
imul eax, dword [ebp - 0x130]
cmp eax, 0x3e5ec352
jle 0x472d0b
mov dword [ebp - 0x138], 1
jmp 0x472d12
and dword [ebp - 0x138], 0
push 0
lea ecx, [ebp - 0x6c]
call fcn.0040bec0
mov esi, dword [ebp - 0x138]
sub esi, dword [eax]
push 1
lea ecx, [ebp - 0x6c]
call fcn.0040bec0
cmp esi, dword [eax]
jne 0x472d3e
mov dword [ebp - 0x140], 1
jmp 0x472d45
and dword [ebp - 0x140], 0
push 0
lea ecx, [ebp - 0x6c]
call fcn.0040bec0
mov ecx, dword [ebp - 0x140]
cmp ecx, dword [eax]
jle 0x472d65
mov dword [ebp - 0x148], 1
jmp 0x472d6c
and dword [ebp - 0x148], 0
cmp dword [ebp - 0x148], 0x9ca
jge 0x472d84
mov dword [ebp - 0x150], 1
jmp 0x472d8b
and dword [ebp - 0x150], 0
push 1
lea ecx, [ebp - 0x6c]
call fcn.0040bec0
mov ecx, dword [ebp - 0x150]
cmp ecx, dword [eax]
jge 0x472dab
mov dword [ebp - 0x158], 1
jmp 0x472db2
and dword [ebp - 0x158], 0
mov eax, dword [ebp - 0x158]
sub eax, 0x37b187b3
je 0x472e8d
mov dword [ebp - 0x47c], 0xc786c7a8
mov dword [ebp - 0x484], 0xd050b7f4
mov dword [ebp - 0x3f8], 0xe5fef407
mov dword [ebp - 0x4a8], 0xbec767db
mov dword [ebp - 0x4a0], 0xf2c67a95
mov dword [ebp - 0x49c], 0xf2c67a95
mov dword [ebp - 0x498], 0xf2c67a95
mov dword [ebp - 0x494], 0xf2c67a95
mov byte [ebp - 0x31], 0
push 0x5eda
lea eax, [ebp - 0x31]
push eax
push 0x392c
push 0x6ef1
push 1
push 0x26e9
push 0x2138
push 1
push 1
push 1
push 0x1e93
push 0x3f8c
push 0x7723
push 0x5305
push 0x6489
push 1
push 0x3f02
push 0xb05
call fcn.0046aecc
add esp, 0x48
push 1
push 1
push 0x26dd
lea eax, [ebp - 0x2f0]
push eax
push 1
push 0x2ef2
call fcn.0046b807
add esp, 0x18
jmp 0x472f7b
mov dword [ebp - 0x37c], 1
mov dword [ebp - 0x378], 1
mov dword [ebp - 0x374], 1
mov dword [ebp - 0x370], 1
lea ecx, [ebp - 0xdd]
call fcn.0040becf
push eax
lea eax, [ebp - 0x36c]
push eax
lea eax, [ebp - 0x37c]
push eax
lea ecx, [ebp - 0x4c8]
call fcn.0040bed2
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x45c]
call fcn.0040be7e
mov dword [ebp - 0x90], 0
jmp 0x472f03
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 1
jge 0x472f1f
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0x334], 0x494d85d5
jmp 0x472ef6
push 1
lea ecx, [ebp - 0x45c]
call fcn.0040bec0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0xe4]
imul ecx, dword [eax]
cmp ecx, 0x8cbf
jl 0x472f50
mov dword [ebp - 0x160], 1
jmp 0x472f57
and dword [ebp - 0x160], 0
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x40], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x40]
mov dword [ebp + eax - 0x334], ecx
lea ecx, [ebp - 0x45c]
call fcn.0040bea4
cmp dword [ebp - 0xcc], 0
je 0x472fe5
mov eax, dword [ebp - 0x2fc]
mov dword [ebp - 0x4b0], eax
mov eax, 0xfff7
test eax, eax
je 0x472fb5
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xe4], 0
je 0x472fb5
mov dword [ebp - 0x168], 1
jmp 0x472fbc
and dword [ebp - 0x168], 0
mov eax, dword [ebp - 0xcc]
sub eax, dword [ebp - 0x168]
je 0x472fe5
cmp dword [ebp - 0xcc], 0
je 0x472fe5
cmp dword [ebp - 0x40], 0
je 0x472fe5
mov dword [ebp - 0x34c], 1
jmp 0x472fec
and dword [ebp - 0x34c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe4]
mov dword [ebp - 0x480], eax
push 0
lea ecx, [ebp - 0x46c]
call fcn.0040bec0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x180]
add eax, 0x7a5e
cmp eax, 1
jae 0x47302f
mov dword [ebp - 0x170], 1
jmp 0x473036
and dword [ebp - 0x170], 0
cmp dword [ebp - 0x170], 1
ja 0x47304b
mov dword [ebp - 0x178], 1
jmp 0x473052
and dword [ebp - 0x178], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x178]
mov dword [ebp + eax - 0x180], ecx
lea ecx, [ebp - 0x46c]
call fcn.0040bea4
lea ecx, [ebp - 0x6c]
call fcn.0040bea4
mov eax, dword [ebp - 0xd0]
mov ecx, dword [ebp + 0xc]
cmp ecx, dword [eax + 0x14]
jbe 0x473643
mov dword [ebp - 0x30], 1
mov dword [ebp - 0x29c], 0x688cdf2
mov dword [ebp - 0x298], 0x688cdf2
mov dword [ebp - 0x294], 0x688cdf2
mov dword [ebp - 0x290], 0x688cdf2
mov dword [ebp - 0xb8], 0xea4087b3
mov dword [ebp - 0xb4], 0x280563ad
mov dword [ebp - 0x1b8], 0x72c2e8b5
push 2
lea ecx, [ebp - 0x3bc]
call fcn.0040bdd2
mov dword [ebp - 0x314], 0xca2cdf2
mov dword [ebp - 0x24], 0
jmp 0x4730fe
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x473114
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x2a8], 0xd464
jmp 0x4730f7
mov dword [ebp - 0x24], 0
jmp 0x473124
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jge 0x47313a
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x31c], 0xfffffff9
jmp 0x47311d
push 1
push 0x3a0
push 1
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x3bc]
push eax
push 1
push 0x2e2e
call fcn.00470ade
add esp, 0x1c
mov eax, 0xffff
test eax, eax
je 0x473277
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x470], eax
cmp dword [ebp - 0x30], 0
jne 0x473188
cmp dword [ebp - 0x30], 0
jne 0x473188
and dword [ebp - 0x188], 0
jmp 0x473192
mov dword [ebp - 0x188], 1
imul eax, dword [ebp - 0x188], 0x82b3
cmp eax, 0xd362
jne 0x4731af
mov dword [ebp - 0x110], 1
jmp 0x4731b6
and dword [ebp - 0x110], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x110], eax
je 0x4731cd
mov dword [ebp - 0x308], 1
jmp 0x4731d4
and dword [ebp - 0x308], 0
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x404], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x29c]
mov dword [ebp - 0x4a4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x29c]
sub eax, 4
cmp eax, 4
jne 0x473211
mov dword [ebp - 0x198], 1
jmp 0x473218
and dword [ebp - 0x198], 0
cmp dword [ebp - 0x198], 0xbd6c
jl 0x473230
mov dword [ebp - 0x1a0], 1
jmp 0x473237
and dword [ebp - 0x1a0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2a8]
cmp dword [ebp - 0x1a0], eax
jle 0x473258
mov dword [ebp - 0x1a8], 1
jmp 0x47325f
and dword [ebp - 0x1a8], 0
cmp dword [ebp - 0x1a8], 0x96bc712b
jae 0x473277
mov dword [ebp - 0x1b0], 1
jmp 0x47327e
and dword [ebp - 0x1b0], 0
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0xb8], eax
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0x1b8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2a8]
cmp dword [ebp - 0x1b8], eax
jne 0x4732cf
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x2a8], 0
jne 0x4732cf
and dword [ebp - 0x1c0], 0
jmp 0x4732d9
mov dword [ebp - 0x1c0], 1
mov eax, dword [ebp - 0x1c0]
dec eax
cmp eax, 0xfffffff8
je 0x4732f1
mov dword [ebp - 0x1c8], 1
jmp 0x4732f8
and dword [ebp - 0x1c8], 0
cmp dword [ebp - 0x1c8], 0xfffffff8
jl 0x47330d
mov dword [ebp - 0x1d0], 1
jmp 0x473314
and dword [ebp - 0x1d0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2a8]
cmp dword [ebp - 0x1d0], eax
jl 0x473335
mov dword [ebp - 0x1d8], 1
jmp 0x47333c
and dword [ebp - 0x1d8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x31c]
cmp dword [ebp - 0x1d8], eax
jge 0x47335d
mov dword [ebp - 0x1e0], 1
jmp 0x473364
and dword [ebp - 0x1e0], 0
cmp dword [ebp - 0x1e0], 0xe00b46f9
jbe 0x47337c
mov dword [ebp - 0x1e8], 1
jmp 0x473383
and dword [ebp - 0x1e8], 0
cmp dword [ebp - 0x1e8], 1
je 0x47339e
cmp dword [ebp - 0x30], 0
je 0x47339e
mov dword [ebp - 0x1f0], 1
jmp 0x4733a5
and dword [ebp - 0x1f0], 0
imul eax, dword [ebp - 0x1f0], 0x1dea
mov dword [ebp - 0x1f8], eax
push 0
lea ecx, [ebp - 0x3bc]
call fcn.0040bec0
mov ecx, dword [ebp - 0x1f8]
mov dword [eax], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x29c]
cmp dword [ebp - 0x1f8], eax
jne 0x4733eb
mov dword [ebp - 0x200], 1
jmp 0x4733f2
and dword [ebp - 0x200], 0
cmp dword [ebp - 0x200], 0x3a1b
jge 0x47340a
mov dword [ebp - 0xd4], 1
jmp 0x473411
and dword [ebp - 0xd4], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xd4]
mov dword [ebp + eax - 0x31c], ecx
cmp dword [ebp - 0xd4], 0
jne 0x47343f
cmp dword [ebp - 0xb4], 0
jne 0x47343f
and dword [ebp - 0x208], 0
jmp 0x473449
mov dword [ebp - 0x208], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2a8]
cmp dword [ebp - 0x208], eax
jge 0x473465
cmp dword [ebp - 0xb8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x31c]
sub eax, dword [ebp - 0x30]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x29c]
jg 0x473490
mov dword [ebp - 0x33c], 1
jmp 0x473497
and dword [ebp - 0x33c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x29c]
mov dword [ebp - 0x40c], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2a8]
mov dword [ebp - 0x478], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x29c], 0xf056e99f
je 0x4734dc
mov dword [ebp - 0x210], 1
jmp 0x4734e3
and dword [ebp - 0x210], 0
mov eax, dword [ebp - 0x30]
imul eax, dword [ebp - 0x210]
test eax, eax
jne 0x4734fd
mov dword [ebp - 0x218], 1
jmp 0x473504
and dword [ebp - 0x218], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x218]
sub ecx, dword [ebp + eax - 0x2a8]
push 4
pop eax
imul eax, eax, 3
add ecx, dword [ebp + eax - 0x29c]
add ecx, dword [ebp - 0x30]
mov dword [ebp - 0x314], ecx
lea ecx, [ebp - 0x3bc]
call fcn.0040bea4
mov dword [ebp - 0x220], 0x6551
mov dword [ebp - 0x2c0], str.mismf_lhpkhll_gfybjye_bmak_kskqztrm_dmedhljg_payxgr_xaco_kqfq_xvqlqtzl_rzvam
cmp dword [ebp - 0x220], 0x6607
jle 0x4735f3
push 0x129c
push 0xde9
push 0
call dword [sym.imp.GDI32.dll_OffsetRgn]
and dword [ebp - 0x98], 0
jmp 0x473583
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0x69d8
jge 0x4735f3
and dword [ebp - 0x54], 0
jmp 0x47359c
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0x3be7
jge 0x4735f1
and dword [ebp - 0x58], 0
jmp 0x4735b2
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0x4b56
jge 0x4735ef
mov eax, dword [ebp - 0x98]
imul eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x58]
shl eax, cl
cdq
mov dword [ebp - 0x328], eax
mov dword [ebp - 0x324], edx
push dword [ebp - 0x324]
push dword [ebp - 0x328]
mov ecx, 0xaa47f8
call fcn.0040bbab
jmp 0x4735ab
jmp 0x473595
jmp 0x473576
xor eax, eax
jmp 0x4738a2
mov dword [ebp - 0x44], 8
push 2
lea ecx, [ebp - 0x3d4]
call fcn.0040bdd2
push 1
lea ecx, [ebp - 0x360]
call fcn.0040bdd2
mov dword [ebp - 0xc0], 0xfffffff8
mov dword [ebp - 0x4c], 0x14af12a8
mov dword [ebp - 0x2d0], 0x58b3
lea eax, [ebp - 0x2c8]
push eax
push 0x7629
push 0x67d2
lea eax, [ebp - 0x3d4]
push eax
push 1
push 1
push 1
push 0x7c7f
call fcn.00471483
add esp, 0x20
push 1
push 1
push 0x5ce1
push 0x3765
lea eax, [ebp - 0x360]
push eax
push 0x1f37
push 0x2971
push 0x7f57
push 1
push 1
lea eax, [ebp - 0x2c8]
push eax
push 0x10f1
push 0x3458
call fcn.0046c585
add esp, 0x34
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x44], eax
jg 0x4736ff
mov dword [ebp - 0xc8], 1
jmp 0x473706
and dword [ebp - 0xc8], 0
push 0
lea ecx, [ebp - 0x360]
call fcn.0040bec0
mov dword [ebp - 0x228], eax
push 0
lea ecx, [ebp - 0x360]
call fcn.0040bec0
mov ecx, dword [ebp - 0x228]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x228]
cmp dword [eax], 0xd621
jg 0x47374a
mov dword [ebp - 0x230], 1
jmp 0x473751
and dword [ebp - 0x230], 0
mov eax, dword [ebp - 0x230]
neg eax
mov dword [ebp - 0xc0], eax
je 0x473776
mov eax, 0xb81e
test eax, eax
je 0x473776
mov dword [ebp - 0x238], 1
jmp 0x47377d
and dword [ebp - 0x238], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x238], eax
jl 0x47379a
cmp dword [ebp - 0xc0], 0
jne 0x47379a
and dword [ebp - 0x240], 0
jmp 0x4737a4
mov dword [ebp - 0x240], 1
push 1
lea ecx, [ebp - 0x3d4]
call fcn.0040bec0
mov ecx, dword [ebp - 0xc8]
mov dword [eax], ecx
mov eax, dword [ebp - 0x44]
imul eax, dword [ebp - 0xc8]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
cmp eax, dword [ebp - 0x240]
jl 0x4737dd
mov dword [ebp - 0x248], 1
jmp 0x4737e4
and dword [ebp - 0x248], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x248], eax
jne 0x4737fb
mov dword [ebp - 0x250], 1
jmp 0x473802
and dword [ebp - 0x250], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x250], eax
jle 0x473828
push 0
lea ecx, [ebp - 0x360]
call fcn.0040bec0
cmp dword [eax], 0
jne 0x473828
and dword [ebp - 0x258], 0
jmp 0x473832
mov dword [ebp - 0x258], 1
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x258], eax
jg 0x473849
mov dword [ebp - 0x260], 1
jmp 0x473850
and dword [ebp - 0x260], 0
mov eax, dword [ebp - 0x4c]
imul eax, dword [ebp - 0x260]
mov dword [ebp - 0x2d0], eax
lea ecx, [ebp - 0x360]
call fcn.0040bea4
lea ecx, [ebp - 0x3d4]
call fcn.0040bea4
mov eax, dword [ebp - 0xd0]
mov eax, dword [eax + 0x1c]
mov ecx, dword [ebp + 0xc]
lea eax, [eax + ecx*4 - 4]
mov dword [ebp - 0x2d8], eax
mov eax, dword [ebp - 0xd8]
add eax, dword [ebp - 0x2d8]
mov ecx, dword [ebp - 0xd8]
add ecx, dword [eax]
mov eax, ecx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret