Function at 0x49714a
Capabilities:
Accept command line arguments
Authenticate hmac
Encrypt data using speck
Identify system language via api
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4ce4e1
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x27d8
call fcn.004c9de0
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 0x14]
test eax, eax
je 0x4a9e01
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x1578], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x1588], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x1560], eax
lea eax, [ebp + 8]
mov dword [ebp - 0x148c], eax
lea eax, [ebp + 0x1c]
mov dword [ebp - 0x1580], eax
mov eax, dword [ebp - 0x148c]
movzx eax, byte [eax]
test eax, eax
je 0x4a9dd7
mov eax, dword [ebp - 0x1578]
mov dword [ebp - 0x1538], eax
mov eax, dword [ebp - 0x1580]
mov dword [ebp - 0x1590], eax
mov eax, dword [ebp - 0x1588]
mov dword [ebp - 0x1540], eax
mov eax, dword [ebp - 0x1590]
movzx eax, byte [eax]
test eax, eax
je 0x4a9d60
push 1
push 1
push 0x12cd
push 0x5202
push 0x62ca
push 0x6f32
push 1
call fcn.004791a2
add esp, 0x1c
mov dword [ebp - 0x340], 0
push 2
lea ecx, [ebp - 0x634]
call fcn.0040bdd2
mov dword [ebp - 0x24], 0x2ee76f50
mov dword [ebp - 0xd0], 1
mov dword [ebp - 0x23b8], 0x6ef6f0c3
lea eax, [ebp - 0x634]
push eax
push 1
push 0x61d7
push 0x6222
push 1
push 1
lea eax, [ebp - 0x2e8]
push eax
push 0x5a6c
push 1
push 0x5b8c
push 0x648d
push 0x46b7
push 0x1917
push 0x37a4
push 0x34eb
push 0
push 1
push 0x6a75
call fcn.00490603
add esp, 0x48
mov dword [ebp - 0x2e8], 0
jmp 0x4972b3
mov eax, dword [ebp - 0x2e8]
inc eax
mov dword [ebp - 0x2e8], eax
cmp dword [ebp - 0x2e8], 4
jge 0x4972cf
mov eax, dword [ebp - 0x2e8]
mov dword [ebp + eax*4 - 0x25e8], 0
jmp 0x4972a6
mov dword [ebp - 0x24], 0
jmp 0x4972df
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jg 0x497734
mov dword [ebp - 0x124], 8
push dword [ebp - 0x24]
lea ecx, [ebp - 0x634]
call fcn.0040bec0
mov eax, dword [eax]
mov dword [ebp - 0xd0], eax
push dword [ebp - 0x24]
lea ecx, [ebp - 0x634]
call fcn.0040bec0
push dword [ebp - 0x24]
lea ecx, [ebp - 0x634]
call fcn.0040bec0
mov esi, eax
push 1
lea ecx, [ebp - 0x634]
call fcn.0040bec0
mov ecx, dword [esi]
cmp ecx, dword [eax]
je 0x497346
mov dword [ebp - 0xc28], 1
jmp 0x49734d
and dword [ebp - 0xc28], 0
cmp dword [ebp - 0xc28], 0xffffffff
jne 0x49736b
mov eax, 0xb28
test eax, eax
je 0x49736b
mov dword [ebp - 0x1240], 1
jmp 0x497372
and dword [ebp - 0x1240], 0
push dword [ebp - 0x24]
lea ecx, [ebp - 0x634]
call fcn.0040bec0
mov ecx, dword [ebp - 0x1240]
cmp ecx, dword [eax]
jne 0x497396
mov dword [ebp - 0x1248], 1
jmp 0x49739d
and dword [ebp - 0x1248], 0
mov esi, dword [ebp - 0x1248]
sub esi, dword [ebp - 0xd0]
push 1
lea ecx, [ebp - 0x634]
call fcn.0040bec0
cmp esi, dword [eax]
jge 0x4973cc
mov eax, 0x11a796d4
test eax, eax
jne 0x4973cc
and dword [ebp - 0x1250], 0
jmp 0x4973d6
mov dword [ebp - 0x1250], 1
push dword [ebp - 0x24]
lea ecx, [ebp - 0x634]
call fcn.0040bec0
mov eax, dword [eax]
cmp eax, dword [ebp - 0x1250]
jle 0x4973fd
cmp dword [ebp - 0x24], 0
jne 0x4973fd
and dword [ebp - 0x1258], 0
jmp 0x497407
mov dword [ebp - 0x1258], 1
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x1258]
jne 0x49741e
mov dword [ebp - 0x1598], 1
jmp 0x497425
and dword [ebp - 0x1598], 0
push dword [ebp - 0x24]
lea ecx, [ebp - 0x634]
call fcn.0040bec0
cmp dword [eax], 0x5a8d
jge 0x497447
mov dword [ebp - 0x1848], 1
jmp 0x49744e
and dword [ebp - 0x1848], 0
push dword [ebp - 0x24]
lea ecx, [ebp - 0x634]
call fcn.0040bec0
cmp dword [ebp - 0xd0], 1
je 0x497481
push dword [ebp - 0x24]
lea ecx, [ebp - 0x634]
call fcn.0040bec0
cmp dword [eax], 0
jne 0x497481
and dword [ebp - 0x12ac], 0
jmp 0x49748b
mov dword [ebp - 0x12ac], 1
mov eax, dword [ebp - 0x12ac]
mov dword [ebp - 0x124], eax
mov esi, dword [ebp - 0x124]
push dword [ebp - 0x24]
lea ecx, [ebp - 0x634]
call fcn.0040bec0
cmp dword [eax], esi
jne 0x497643
mov dword [ebp - 0x186c], 0xbfa08552
mov dword [ebp - 0x1c4c], 0xce695ef
mov dword [ebp - 0x1c48], 0xce695ef
mov dword [ebp - 0x1c44], 0xce695ef
mov dword [ebp - 0x1c40], 0xce695ef
lea ecx, [ebp - 0x79d]
call fcn.0040becf
push eax
lea eax, [ebp - 0x1c3c]
push eax
lea eax, [ebp - 0x1c4c]
push eax
lea ecx, [ebp - 0x25c0]
call fcn.0040bed2
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x2054]
call fcn.0040be7e
mov dword [ebp - 0xd0], 0
jmp 0x497533
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0x16
jl 0x497633
mov dword [ebp - 0x12b4], 1
mov dword [ebp - 0x1864], 0xfffffffe
mov dword [ebp - 0x124], 0
jmp 0x49756d
mov eax, dword [ebp - 0x124]
dec eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0xfffffff1
jg 0x4975e9
mov dword [ebp - 0x185c], 1
push 0x14e4
push 0x2422
push 0x2a19
push 0x2036
push 0
push 0xbe8
push 0x735c
push 0x3083
push 0x1a70
push 0xfb5
lea eax, [ebp - 0x185c]
push eax
lea eax, [ebp - 0x12b4]
push eax
push 0x1648
push 0x74a0
push 1
push 0
push 0x6df1
push 0x4e96
push 1
push 0xff4
call fcn.0048ef35
add esp, 0x50
jmp 0x497560
lea eax, [ebp - 0x12b4]
push eax
lea eax, [ebp - 0x1864]
push eax
lea eax, [ebp - 0x186c]
push eax
push 0x7f6b
lea eax, [ebp - 0x634]
push eax
push 0x1792
push 0
push 0x3ead
push 0x522
lea eax, [ebp - 0x2054]
push eax
push 1
push 1
call fcn.0047cf52
add esp, 0x30
jmp 0x497526
lea ecx, [ebp - 0x2054]
call fcn.0040bea4
jmp 0x49772f
mov dword [ebp - 0x12d8], 1
mov dword [ebp - 0x12bc], 0xffff
mov eax, dword [ebp - 0x12d8]
mov dword [ebp - 0x1fa8], eax
cmp dword [ebp - 0x12bc], 0
je 0x497724
mov dword [ebp - 0x12f0], 0
cmp dword [ebp - 0x12bc], 0
ja 0x49768f
mov dword [ebp - 0x12e0], 1
jmp 0x497696
and dword [ebp - 0x12e0], 0
push 0xfffffffffffffffa
pop eax
sub eax, dword [ebp - 0x12d8]
mov ecx, dword [ebp - 0x12e0]
sub ecx, eax
imul ecx, dword [ebp - 0xd0]
cmp ecx, 0x2efaadad
jle 0x4976c2
mov dword [ebp - 0x12e8], 1
jmp 0x4976c9
and dword [ebp - 0x12e8], 0
mov eax, dword [ebp - 0x12e8]
inc eax
jne 0x4976e4
cmp dword [ebp - 0x12f0], 0
jne 0x4976e4
and dword [ebp - 0x12f8], 0
jmp 0x4976ee
mov dword [ebp - 0x12f8], 1
mov eax, dword [ebp - 0x12f0]
cmp dword [ebp - 0x12f8], eax
jl 0x497708
mov dword [ebp - 0x1300], 1
jmp 0x49770f
and dword [ebp - 0x1300], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1300]
mov dword [ebp + eax - 0x25e8], ecx
jmp 0x49772f
cmp dword [ebp - 0x124], 0
je 0x49772f
jmp 0x497734
jmp 0x4972d8
lea ecx, [ebp - 0x634]
call fcn.0040bea4
push 2
lea ecx, [ebp - 0x207c]
call fcn.0040bdd2
push 2
lea ecx, [ebp - 0x1a74]
call fcn.0040bdd2
mov dword [ebp - 0x844], 0xd0714ad3
push 1
lea ecx, [ebp - 0x1a5c]
call fcn.0040bdd2
mov dword [ebp - 0x12c4], 0x6febfb2c
mov dword [ebp - 0x1308], 0
mov dword [ebp - 0x1884], 1
mov dword [ebp - 0x187c], 0x7ec53a21
mov dword [ebp - 0x188c], 0x8fbdedb
push 0x33f7
push 0
push 0x5b28
push 1
push 0x953
push 0x78a7
push 1
push 0x4db6
lea eax, [ebp - 0x1a74]
push eax
push 0x8a7
lea eax, [ebp - 0x1874]
push eax
push 0x60b8
push 0x7787
push 0x20
push 0x5ebd
push 1
push 1
push 1
call fcn.004879e5
add esp, 0x48
push 1
lea eax, [ebp - 0x1a5c]
push eax
push 1
push 0x75d2
push 0x7e6d
push 0xc55
push 0x29b7
push 1
lea eax, [ebp - 0x1874]
push eax
push 1
push 0x26ba
push 0x7d4
push 0
push 0x37a5
push 0x3463
push 1
push 0x436c
call fcn.00496542
add esp, 0x44
push 0x5aa1
lea eax, [ebp - 0x1a5c]
push eax
push 0x453e
push 1
push 1
push 0
push 0
lea eax, [ebp - 0x1308]
push eax
lea eax, [ebp - 0x844]
push eax
lea eax, [ebp - 0x12c4]
push eax
lea eax, [ebp - 0x1a74]
push eax
call fcn.004759c3
add esp, 0x2c
lea eax, [ebp - 0x187c]
push eax
lea eax, [ebp - 0x1a5c]
push eax
lea eax, [ebp - 0x1884]
push eax
lea eax, [ebp - 0x1a74]
push eax
lea eax, [ebp - 0x1308]
push eax
lea eax, [ebp - 0x12c4]
push eax
push 1
push 1
lea eax, [ebp - 0x844]
push eax
lea eax, [ebp - 0x188c]
push eax
push 1
call fcn.0047975d
add esp, 0x2c
lea ecx, [ebp - 0x1a5c]
call fcn.0040bea4
lea ecx, [ebp - 0x1a74]
call fcn.0040bea4
push 0x7435
push 0x72ba
push 0x6832
push 0x505f
push 0x2101
push 0x3dc3
lea eax, [ebp - 0x22f8]
push eax
push 0
push 0x5694
push 0
push 1
push 1
push 1
push 0x81f
lea eax, [ebp - 0x207c]
push eax
push 0x4c32
push 0x1dc4
call fcn.0048c3e0
add esp, 0x44
push 0x4d54
push 0x5db0
push 0x7289
push 1
push 0x5ea6
push 0
push 0x1237
lea eax, [ebp - 0x340]
push eax
push 0x300e
push 0
call fcn.0047be4e
add esp, 0x28
mov dword [ebp - 0x234], 0x8901f2c
push 1
lea ecx, [ebp - 0x2068]
call fcn.0040bdd2
mov dword [ebp - 0x2bc], 0
jmp 0x497990
mov eax, dword [ebp - 0x2bc]
inc eax
mov dword [ebp - 0x2bc], eax
cmp dword [ebp - 0x2bc], 3
jge 0x4979ac
mov eax, dword [ebp - 0x2bc]
mov dword [ebp + eax*4 - 0x24b0], 0x6af1
jmp 0x497983
lea eax, [ebp - 0x2bc]
push eax
push 0x6003
push 0x6e7d
push 0x6528
push 0xe8c
push 1
push 1
push 1
push 0x6015
push 1
push 0x2bad
lea eax, [ebp - 0x2068]
push eax
call fcn.00479b3a
add esp, 0x30
mov byte [ebp - 0xfa], 0
push 0x338a
push 0x80
push 0
push 1
push 1
push 0
push 0x2f9f
push 0
lea eax, [ebp - 0xfa]
push eax
push 0x1255
push 1
push 0x7792
call fcn.0047edcd
add esp, 0x30
mov dword [ebp - 0x234], 0
jmp 0x497a3c
mov eax, dword [ebp - 0x234]
inc eax
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 3
jge 0x497a58
mov eax, dword [ebp - 0x234]
mov dword [ebp + eax*4 - 0x24b0], 0xa3df
jmp 0x497a2f
lea ecx, [ebp - 0x2068]
call fcn.0040bea4
mov dword [ebp - 0x340], 0
jmp 0x497a7c
mov eax, dword [ebp - 0x340]
inc eax
mov dword [ebp - 0x340], eax
cmp dword [ebp - 0x340], 1
jg 0x497f9c
mov dword [ebp - 0x2c4], 1
push 3
lea ecx, [ebp - 0x191c]
call fcn.0040bdd2
mov dword [ebp - 0x189c], 1
push 0
push 1
lea eax, [ebp - 0x191c]
push eax
push 1
push 0x10a3
push 0x5e5b
lea eax, [ebp - 0x23c]
push eax
push 0x5749
push 0x263f
call fcn.0047bfd8
add esp, 0x24
mov dword [ebp - 0x23c], 0
jmp 0x497af3
mov eax, dword [ebp - 0x23c]
inc eax
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 1
jge 0x497b0f
mov eax, dword [ebp - 0x23c]
mov dword [ebp + eax*4 - 0x7a4], 0xfffffffc
jmp 0x497ae6
cmp dword [ebp - 0x2c4], 0
je 0x497b7a
cmp dword [ebp - 0x2c4], 0
jne 0x497b56
cmp dword [ebp - 0x2c4], 0x4ad744d0
jg 0x497b39
mov dword [ebp - 0x1238], 1
jmp 0x497b40
and dword [ebp - 0x1238], 0
mov eax, dword [ebp - 0x1238]
sub eax, 0x6a8977e7
jne 0x497b56
and dword [ebp - 0xdd4], 0
jmp 0x497b60
mov dword [ebp - 0xdd4], 1
mov eax, dword [ebp - 0x2c4]
cmp dword [ebp - 0xdd4], eax
jg 0x497b7a
mov dword [ebp - 0x84c], 1
jmp 0x497b81
and dword [ebp - 0x84c], 0
mov esi, dword [ebp - 0x2c4]
imul esi, dword [ebp - 0x84c]
push 1
lea ecx, [ebp - 0x191c]
call fcn.0040bec0
mov dword [eax], esi
push 1
lea ecx, [ebp - 0x191c]
call fcn.0040bec0
mov dword [ebp - 0x109c], eax
push 2
lea ecx, [ebp - 0x191c]
call fcn.0040bec0
mov ecx, dword [ebp - 0x109c]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x109c]
cmp dword [eax], 0xe12aa53f
jb 0x497be1
mov dword [ebp - 0x854], 1
jmp 0x497be8
and dword [ebp - 0x854], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7a4]
cmp dword [ebp - 0x854], eax
je 0x497c09
mov dword [ebp - 0x1894], 1
jmp 0x497c10
and dword [ebp - 0x1894], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x7a4], 0xb44adca1
jae 0x497c2f
mov dword [ebp - 0xddc], 1
jmp 0x497c36
and dword [ebp - 0xddc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7a4]
cmp dword [ebp - 0xddc], eax
jle 0x497c57
mov dword [ebp - 0x85c], 1
jmp 0x497c5e
and dword [ebp - 0x85c], 0
mov eax, dword [ebp - 0x85c]
mov dword [ebp - 0x189c], eax
lea ecx, [ebp - 0x191c]
call fcn.0040bea4
mov dword [ebp - 0x1fb0], 0x6847dfa8
mov byte [ebp - 0x1a6], 0
push 0x1113
push 0x5382
push 1
push 1
push 0x22f2
push 0
push 1
push 0x3a38
push 0x2d8c
push 0x1c18
push 0
lea eax, [ebp - 0x1a6]
push eax
push 0x59d4
call fcn.00484e36
add esp, 0x34
mov byte [ebp - 0x11e], 0
lea eax, [ebp - 0x11e]
push eax
push 0x72ee
push 1
push 0x2a29
push 1
push 1
push 0x56bb
push 0
call fcn.00486e72
add esp, 0x20
mov byte [ebp - 0xfc], 0
mov dword [ebp - 0x208], 1
mov dword [ebp - 0x754], 0x3b9da4d0
mov dword [ebp - 0x6b4], 0xfff7
push 3
lea ecx, [ebp - 0x1368]
call fcn.0040bdd2
mov dword [ebp - 0x244], 0xc62bb2c5
mov dword [ebp - 0xb0], 0
jmp 0x497d44
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 3
jge 0x497d66
push dword [ebp - 0xb0]
lea ecx, [ebp - 0x1368]
call fcn.0040bec0
mov dword [eax], 0x9d6b9c2d
jmp 0x497d37
mov dword [ebp - 0xb0], 0
jmp 0x497d7f
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 2
jge 0x497d9b
mov eax, dword [ebp - 0xb0]
mov dword [ebp + eax*4 - 0x1b3c], 0xfffffff6
jmp 0x497d72
mov eax, dword [ebp - 0x208]
mov dword [ebp - 0x754], eax
cmp dword [ebp - 0x6b4], 0
je 0x497de8
cmp dword [ebp - 0x754], 0
je 0x497dce
cmp dword [ebp - 0x208], 0
je 0x497dce
mov dword [ebp - 0x12b0], 1
jmp 0x497dd5
and dword [ebp - 0x12b0], 0
imul eax, dword [ebp - 0x6b4], 0xfffffff8
sub eax, dword [ebp - 0x12b0]
cmp eax, dword [ebp - 0x208]
push 0
lea ecx, [ebp - 0x1368]
call fcn.0040bec0
push 0
lea ecx, [ebp - 0x1368]
call fcn.0040bec0
mov eax, dword [ebp - 0x208]
mov dword [ebp - 0x2360], eax
mov eax, 0xffff
test eax, eax
je 0x497e28
xor eax, eax
inc eax
je 0x497e28
mov dword [ebp - 0x864], 1
jmp 0x497e2f
and dword [ebp - 0x864], 0
mov eax, dword [ebp - 0x864]
mov dword [ebp - 0x244], eax
mov eax, dword [ebp - 0x6b4]
cmp dword [ebp - 0x244], eax
jle 0x497e55
mov dword [ebp - 0xde4], 1
jmp 0x497e5c
and dword [ebp - 0xde4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xde4]
mov dword [ebp + eax - 0x1b3c], ecx
or eax, 0xffffffff
je 0x497f37
xor eax, eax
jne 0x497f0c
mov eax, dword [ebp - 0x244]
mov dword [ebp - 0x1fb8], eax
push 0
lea ecx, [ebp - 0x1368]
call fcn.0040bec0
mov ecx, 0x913e29f9
sub ecx, dword [eax]
cmp ecx, 1
jne 0x497eb1
mov dword [ebp - 0x86c], 1
jmp 0x497eb8
and dword [ebp - 0x86c], 0
mov eax, dword [ebp - 0x208]
imul eax, dword [ebp - 0x86c]
test eax, eax
je 0x497ede
mov eax, 0x49ef
test eax, eax
je 0x497ede
mov dword [ebp - 0x18a4], 1
jmp 0x497ee5
and dword [ebp - 0x18a4], 0
mov eax, dword [ebp - 0x244]
mov dword [ebp - 0x2308], eax
push 1
lea ecx, [ebp - 0x1368]
call fcn.0040bec0
cmp dword [eax], 0
jne 0x497f0c
and dword [ebp - 0x18ac], 0
jmp 0x497f16
mov dword [ebp - 0x18ac], 1
mov eax, dword [ebp - 0x754]
mov dword [ebp - 0x1fc0], eax
cmp dword [ebp - 0x208], 0
je 0x497f37
mov dword [ebp - 0x10a4], 1
jmp 0x497f3e
and dword [ebp - 0x10a4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1b3c]
add eax, dword [ebp - 0x10a4]
mov dword [ebp - 0x244], eax
lea ecx, [ebp - 0x1368]
call fcn.0040bea4
push 1
push 0x364c
push 0
lea eax, [ebp - 0xfc]
push eax
push 0x3ec4
push 1
push 0x6738
push 0x74e4
push 0x1949
push 0x39e2
push 0
call fcn.00476e98
add esp, 0x2c
jmp 0x497a6f
lea ecx, [ebp - 0x207c]
call fcn.0040bea4
mov dword [ebp - 0x60], 1
mov dword [ebp - 0x884], 0xfffffff7
mov dword [ebp - 0xdf4], 0x5fe46c2e
mov dword [ebp - 0x364], 9
mov dword [ebp - 0x18b4], 0xf9a0
mov dword [ebp - 0x308], 0x9da9
mov dword [ebp - 0xe04], 0xbbfad0d7
mov dword [ebp - 0x18bc], 0x800f
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x2368], eax
cmp dword [ebp - 0x60], 0
jne 0x49805d
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0x60], eax
jne 0x498017
mov dword [ebp - 0x874], 1
jmp 0x49801e
and dword [ebp - 0x874], 0
mov eax, dword [ebp - 0x874]
add eax, 6
cmp eax, dword [ebp - 0x60]
je 0x498038
mov dword [ebp - 0xdec], 1
jmp 0x49803f
and dword [ebp - 0xdec], 0
mov eax, dword [ebp - 0xdec]
mov dword [ebp - 0x364], eax
cmp dword [ebp - 0x364], 0
jne 0x49805d
and dword [ebp - 0x87c], 0
jmp 0x498067
mov dword [ebp - 0x87c], 1
cmp dword [ebp - 0x87c], 0x7a5e
jl 0x49807f
mov dword [ebp - 0x1204], 1
jmp 0x498086
and dword [ebp - 0x1204], 0
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0x1204], eax
jle 0x498098
cmp dword [ebp - 0x364], 0
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0x60], eax
jle 0x4980ac
mov dword [ebp - 0x88c], 1
jmp 0x4980b3
and dword [ebp - 0x88c], 0
mov dword [ebp - 0x884], 5
mov eax, dword [ebp - 0x884]
mov dword [ebp - 0xdf4], eax
mov eax, dword [ebp - 0xdf4]
imul eax, dword [ebp - 0x88c]
cmp eax, dword [ebp - 0x60]
jl 0x4980e7
mov dword [ebp - 0x10ac], 1
jmp 0x4980ee
and dword [ebp - 0x10ac], 0
imul eax, dword [ebp - 0x10ac], 3
cmp eax, 0xffffffff
jae 0x498106
mov dword [ebp - 0x894], 1
jmp 0x49810d
and dword [ebp - 0x894], 0
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0x894], eax
je 0x498124
mov dword [ebp - 0xdfc], 1
jmp 0x49812b
and dword [ebp - 0xdfc], 0
mov eax, dword [ebp - 0x18b4]
imul eax, dword [ebp - 0xdfc]
cmp eax, dword [ebp - 0x308]
je 0x498155
cmp dword [ebp - 0x308], 0
je 0x498155
mov dword [ebp - 0x89c], 1
jmp 0x49815c
and dword [ebp - 0x89c], 0
mov eax, dword [ebp - 0x308]
cmp dword [ebp - 0x89c], eax
jge 0x498176
mov dword [ebp - 0x12c0], 1
jmp 0x49817d
and dword [ebp - 0x12c0], 0
mov eax, dword [ebp - 0x60]
cmp eax, dword [ebp - 0x12c0]
je 0x498194
mov dword [ebp - 0x8a4], 1
jmp 0x49819b
and dword [ebp - 0x8a4], 0
mov eax, dword [ebp - 0x308]
imul eax, dword [ebp - 0x8a4]
mov dword [ebp - 0xe04], eax
push 0x5d31
push 0
push 0x7214
push 0x743b
push 0x6351
push 0x6b1d
push 0x6015
push 0x1e79
push 0x5d39
push 0x17cf
push 0
push 1
push 0x5112
lea eax, [ebp - 0x308]
push eax
lea eax, [ebp - 0x364]
push eax
lea eax, [ebp - 0x18bc]
push eax
lea eax, [ebp - 0xe04]
push eax
push 1
call fcn.0047d602
add esp, 0x48
mov byte [ebp - 0x25], 0
mov dword [ebp - 0x24c], 0
mov dword [ebp - 0x8bc], 0x3eb60693
mov dword [ebp - 0x1fc8], 1
mov dword [ebp - 0x120c], 1
mov dword [ebp - 0x4c8], 0
jmp 0x498251
mov eax, dword [ebp - 0x4c8]
inc eax
mov dword [ebp - 0x4c8], eax
cmp dword [ebp - 0x4c8], 3
jge 0x49826d
mov eax, dword [ebp - 0x4c8]
mov dword [ebp + eax*4 - 0x26ec], 0xa167c28c
jmp 0x498244
cmp dword [ebp - 0x24c], 1
jae 0x498282
mov dword [ebp - 0x8ac], 1
jmp 0x498289
and dword [ebp - 0x8ac], 0
mov eax, dword [ebp - 0x24c]
cmp dword [ebp - 0x8ac], eax
je 0x4982a3
mov dword [ebp - 0x10b4], 1
jmp 0x4982aa
and dword [ebp - 0x10b4], 0
mov eax, dword [ebp - 0x10b4]
sub eax, dword [ebp - 0x8bc]
cmp dword [ebp - 0x24c], eax
jle 0x4982ca
mov dword [ebp - 0x8b4], 1
jmp 0x4982d1
and dword [ebp - 0x8b4], 0
cmp dword [ebp - 0x8b4], 0xcd45
jg 0x4982e9
mov dword [ebp - 0xe0c], 1
jmp 0x4982f0
and dword [ebp - 0xe0c], 0
mov eax, dword [ebp - 0x24c]
cmp dword [ebp - 0xe0c], eax
jle 0x498339
mov byte [ebp - 0x165], 0
movzx eax, byte [ebp - 0x165]
test eax, eax
je 0x498334
push 0x104c
push 1
push 1
push 0x7d80
push 0x5444
push 0
push 0x7bfc
push 0
call fcn.0047f266
add esp, 0x20
jmp 0x498447
mov dword [ebp - 0x18c4], 0xfffe
push 3
lea ecx, [ebp - 0x2090]
call fcn.0040bdd2
or dword [ebp - 0x1bd4], 0xffffffff
or dword [ebp - 0x1bd0], 0xffffffff
or dword [ebp - 0x1bcc], 0xffffffff
or dword [ebp - 0x1bc8], 0xffffffff
lea ecx, [ebp - 0x691]
call fcn.0040becf
push eax
lea eax, [ebp - 0x1bc4]
push eax
lea eax, [ebp - 0x1bd4]
push eax
lea ecx, [ebp - 0x2590]
call fcn.0040bed2
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x24ec]
call fcn.0040be7e
push 0x3f83
lea eax, [ebp - 0x2090]
push eax
push 1
push 1
push 0x1fc6
push 0x30ae
lea eax, [ebp - 0x2318]
push eax
push 0
push 1
call fcn.00477732
add esp, 0x24
push 0x6de9
push 1
push 0x80
push 0
push 0x33a5
lea eax, [ebp - 0x8bc]
push eax
push 1
push 0x51a5
push 0x38f0
lea eax, [ebp - 0x18c4]
push eax
push 0x6524
push 0xb1a
push 0x4958
lea eax, [ebp - 0x24c]
push eax
push 0x5227
push 0
push 0
push 1
call fcn.004879e5
add esp, 0x48
mov eax, dword [ebp - 0x120c]
dec eax
mov dword [ebp - 0x120c], eax
lea ecx, [ebp - 0x24ec]
call fcn.0040bea4
lea ecx, [ebp - 0x2090]
call fcn.0040bea4
mov dword [ebp - 0x13e4], 0xfffffff9
mov dword [ebp - 0x13e0], 0xfffffff9
mov dword [ebp - 0x13dc], 0xfffffff9
mov dword [ebp - 0x13d8], 0xfffffff9
mov dword [ebp - 0x10bc], 0xfffffff9
mov dword [ebp - 0xe14], 0xffffffff
mov dword [ebp - 0x8c4], 0x6791
mov dword [ebp - 0x18cc], str.hmo_sucseinv_qwuxhc_eiuug_dudmtql_fskrjk_djggu_fmgylyx_nchsdif_fpya
cmp dword [ebp - 0x8c4], 0x684f
jle 0x49858e
and dword [ebp - 0x36c], 0
jmp 0x4984bd
mov eax, dword [ebp - 0x36c]
inc eax
mov dword [ebp - 0x36c], eax
cmp dword [ebp - 0x36c], 0x43f7
jge 0x498584
and dword [ebp - 0x350], 0
jmp 0x4984e3
mov eax, dword [ebp - 0x350]
inc eax
mov dword [ebp - 0x350], eax
cmp dword [ebp - 0x350], 0x53bd
jge 0x49857f
and dword [ebp - 0x374], 0
jmp 0x498509
mov eax, dword [ebp - 0x374]
inc eax
mov dword [ebp - 0x374], eax
cmp dword [ebp - 0x374], 0x63d8
jge 0x49857a
and dword [ebp - 0x4cc], 0
jmp 0x49852b
mov eax, dword [ebp - 0x4cc]
inc eax
mov dword [ebp - 0x4cc], eax
cmp dword [ebp - 0x4cc], 0x3cb5
jge 0x498578
mov eax, dword [ebp - 0x36c]
sub eax, dword [ebp - 0x350]
mov edx, dword [ebp - 0x374]
mov ecx, dword [ebp - 0x4cc]
sar edx, cl
and eax, edx
cdq
mov dword [ebp - 0x15a4], eax
mov dword [ebp - 0x15a0], edx
push dword [ebp - 0x15a0]
push dword [ebp - 0x15a4]
mov ecx, 0xaa47f8
call fcn.0040bbab
jmp 0x49851e
jmp 0x4984fc
jmp 0x4984d6
jmp 0x4984b0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
mov dword [ebp - 0xe24], 0xffff
and dword [ebp - 4], 0
cmp dword [ebp - 0x8c4], 0x658f
jge 0x4985b8
mov edx, dword [ebp - 0x18cc]
mov ecx, 0xaa47f8
call fcn.0040e430
jmp 0x4985d4
or dword [ebp - 4], 0xffffffff
jmp 0x4985de
mov dword [ebp - 0x8dc], 0xfffffffb
mov dword [ebp - 0x12b8], 0x627e80a7
mov dword [ebp - 0x37c], 0
jmp 0x49860b
mov eax, dword [ebp - 0x37c]
inc eax
mov dword [ebp - 0x37c], eax
cmp dword [ebp - 0x37c], 2
jge 0x498627
mov eax, dword [ebp - 0x37c]
mov dword [ebp + eax*4 - 0x2480], 5
jmp 0x4985fe
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x13e4], 0x8bbca631
xor eax, eax
inc eax
je 0x498698
mov dword [ebp - 0x580], 1
mov dword [ebp - 0x580], 0
jmp 0x498660
mov eax, dword [ebp - 0x580]
inc eax
mov dword [ebp - 0x580], eax
cmp dword [ebp - 0x580], 9
jl 0x498693
push 0x1d03
push 0x1ba
push 0
push 1
push 0
push 1
lea eax, [ebp - 0x10bc]
push eax
push 1
push 0x416f
call fcn.004920e7
add esp, 0x24
jmp 0x498653
jmp 0x4988a4
mov dword [ebp - 0x2cc], 0xaae0
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x13e4], 0
je 0x4987c5
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x13e4]
mov dword [ebp - 0xe14], eax
cmp dword [ebp - 0xe14], 1
jne 0x4986de
mov dword [ebp - 0x8cc], 1
jmp 0x4986e5
and dword [ebp - 0x8cc], 0
mov eax, dword [ebp - 0x8cc]
sub eax, dword [ebp - 0x10bc]
push 4
pop ecx
imul ecx, ecx, 3
mov ecx, dword [ebp + ecx - 0x13e4]
sub ecx, dword [ebp - 0x2cc]
cmp eax, ecx
jge 0x498721
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x13e4], 0
jne 0x498721
and dword [ebp - 0x8d4], 0
jmp 0x49872b
mov dword [ebp - 0x8d4], 1
mov eax, dword [ebp - 0x8d4]
sub eax, dword [ebp - 0x2cc]
mov dword [ebp - 0x18d4], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x18d4]
mov dword [ebp + eax - 0x2480], ecx
imul eax, dword [ebp - 0xe24], 5
test eax, eax
jne 0x498768
xor eax, eax
jne 0x498768
and dword [ebp - 0xe1c], 0
jmp 0x498772
mov dword [ebp - 0xe1c], 1
mov eax, dword [ebp - 0xe1c]
mov dword [ebp - 0x8dc], eax
mov eax, dword [ebp - 0x8dc]
mov dword [ebp - 0x12b8], eax
mov eax, dword [ebp - 0x2cc]
cmp dword [ebp - 0x12b8], eax
jne 0x4987a4
mov dword [ebp - 0x8e4], 1
jmp 0x4987ab
and dword [ebp - 0x8e4], 0
mov eax, dword [ebp - 0x8e4]
sub eax, dword [ebp - 0xe24]
je 0x4987c5
mov dword [ebp - 0x8ec], 1
jmp 0x4987cc
and dword [ebp - 0x8ec], 0
mov eax, dword [ebp - 0x2cc]
add eax, dword [ebp - 0x8ec]
cmp eax, dword [ebp - 0x2cc]
jg 0x4987ec
mov dword [ebp - 0x10c4], 1
jmp 0x4987f3
and dword [ebp - 0x10c4], 0
cmp dword [ebp - 0x10c4], 0xffffffff
jge 0x498808
mov dword [ebp - 0x8f4], 1
jmp 0x49880f
and dword [ebp - 0x8f4], 0
mov eax, dword [ebp - 0x8f4]
neg eax
je 0x49887c
mov byte [ebp - 0xfe], 0
push 0x5264
push 0x414f
lea eax, [ebp - 0xfe]
push eax
push 0x3883
push 1
push 1
push 0x731b
push 0x3f0
push 0x3a42
push 0
push 0x63df
push 0x432f
push 0x6a27
push 0x315b
push 0x6fe
push 0x1d16
push 0x466c
push 1
push 1
call fcn.00488763
add esp, 0x4c
jmp 0x4988a4
mov byte [ebp - 0x125], 0
push 0
push 1
push 0x60b1
push 0x5c7b
lea eax, [ebp - 0x125]
push eax
push 1
push 1
call fcn.00491e79
add esp, 0x1c
mov dword [ebp - 0x17d4], 1
mov dword [ebp - 0x80], 0xac204e2d
mov dword [ebp - 0x18f4], 0xffffffff
mov dword [ebp - 0x1fd0], 0xfffffff9
mov dword [ebp - 0x18fc], 0xcf687292
mov dword [ebp - 0x384], 0
jmp 0x4988ec
mov eax, dword [ebp - 0x384]
inc eax
mov dword [ebp - 0x384], eax
cmp dword [ebp - 0x384], 1
jge 0x498908
mov eax, dword [ebp - 0x384]
mov dword [ebp + eax*4 - 0x90c], 4
jmp 0x4988df
mov dword [ebp - 0x80], 0
jmp 0x498918
mov eax, dword [ebp - 0x80]
dec eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0xfffffff3
jne 0x498bf7
mov dword [ebp - 0x6bc], 0x3888
mov dword [ebp - 0x1904], 0x2ef703c5
mov dword [ebp - 0x91c], 0x11fc80ae
mov dword [ebp - 0x2370], 0xe3f36a5b
push 3
lea ecx, [ebp - 0x1dec]
call fcn.0040bdd2
mov dword [ebp - 0x10cc], 0xbab1f356
mov dword [ebp - 0x74], 0
jmp 0x498971
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 2
jge 0x498987
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0x15b0], 0xcadfb1af
jmp 0x49896a
mov dword [ebp - 0x74], 0
jmp 0x498997
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 2
jge 0x4989ad
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0x1b74], 0
jmp 0x498990
push 0x52dd
push 0x5b76
push 0
push 0x73bd
push 0x55a0
push 0x72bc
push 1
push 1
lea eax, [ebp - 0x74]
push eax
push 0x5f24
push 0x6bf9
push 0
push 0x234c
push 0x635f
push 0x6529
push 0x33b5
push 0x51b3
push 0x3527
push 0x56ec
push 1
push 0x5925
push 0x4dc2
push 0x7201
push 0x31cf
lea eax, [ebp - 0x1dec]
push eax
call fcn.0048610f
add esp, 0x64
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x1fd8], eax
mov eax, dword [ebp - 0x6bc]
cmp dword [ebp - 0x80], eax
jle 0x498a44
mov dword [ebp - 0x18dc], 1
jmp 0x498a4b
and dword [ebp - 0x18dc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1b74]
inc eax
mov dword [ebp - 0xe2c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xe2c]
mov dword [ebp + eax - 0x1b74], ecx
cmp dword [ebp - 0xe2c], 0
jne 0x498a87
mov dword [ebp - 0x8fc], 1
jmp 0x498a8e
and dword [ebp - 0x8fc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x15b0]
cmp dword [ebp - 0x8fc], eax
jg 0x498aaf
mov dword [ebp - 0x18e4], 1
jmp 0x498ab6
and dword [ebp - 0x18e4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x15b0]
mov dword [ebp - 0x2328], eax
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x1fe0], eax
mov eax, dword [ebp - 0x6bc]
cmp dword [ebp - 0x80], eax
jle 0x498ae9
mov dword [ebp - 0x1214], 1
jmp 0x498af0
and dword [ebp - 0x1214], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1214]
sub ecx, dword [ebp + eax - 0x90c]
je 0x498b1a
cmp dword [ebp - 0x91c], 0
je 0x498b1a
mov dword [ebp - 0x904], 1
jmp 0x498b21
and dword [ebp - 0x904], 0
cmp dword [ebp - 0x904], 3
je 0x498b36
mov dword [ebp - 0xe34], 1
jmp 0x498b3d
and dword [ebp - 0xe34], 0
mov eax, dword [ebp - 0x6bc]
imul eax, dword [ebp - 0xe34]
mov dword [ebp - 0x18ec], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x18ec]
mov dword [ebp + eax - 0x90c], ecx
push 0
lea ecx, [ebp - 0x1dec]
call fcn.0040bec0
mov eax, dword [eax]
add eax, 0x4fb389fa
sub eax, dword [ebp - 0x80]
sub eax, dword [ebp - 0x80]
mov dword [ebp - 0x10cc], eax
je 0x498bb3
cmp dword [ebp - 0x18f4], 0
je 0x498bb3
cmp dword [ebp - 0x18fc], 0
je 0x498bb3
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x15b0], 0
je 0x498bb3
mov dword [ebp - 0x914], 1
jmp 0x498bba
and dword [ebp - 0x914], 0
mov eax, dword [ebp - 0x1904]
cmp dword [ebp - 0x914], eax
jne 0x498bd4
mov dword [ebp - 0xe3c], 1
jmp 0x498bdb
and dword [ebp - 0xe3c], 0
mov eax, dword [ebp - 0xe3c]
mov dword [ebp - 0x91c], eax
lea ecx, [ebp - 0x1dec]
call fcn.0040bea4
jmp 0x498911
mov byte [ebp - 0x100], 0
movzx eax, byte [ebp - 0x100]
test eax, eax
je 0x498c1c
push 0
push 1
push 0
push 0xec5
call fcn.00490b53
add esp, 0x10
mov dword [ebp - 0x1444], 0xfffffff7
mov dword [ebp - 0x144c], 0x5fe46c2e
mov dword [ebp - 0x4e0], 0x53b26bdd
push 3
lea ecx, [ebp - 0x20a4]
call fcn.0040bdd2
mov dword [ebp - 0x190c], 0xee28fdeb
lea eax, [ebp - 0x20a4]
push eax
push 0x23a0
push 1
push 1
push 0
push 1
lea eax, [ebp - 0x2378]
push eax
push 1
push 0x2b3
push 0x7237
push 1
push 0x45e
call fcn.0047edcd
add esp, 0x30
mov dword [ebp - 0x4e0], 0
jmp 0x498ca0
mov eax, dword [ebp - 0x4e0]
inc eax
mov dword [ebp - 0x4e0], eax
cmp dword [ebp - 0x4e0], 2
jg 0x498d48
mov dword [ebp - 0x1fe8], 0xed15
mov dword [ebp - 0x2338], 0x85b7f37c
mov dword [ebp - 0x38c], 0
jmp 0x498cda
mov eax, dword [ebp - 0x38c]
inc eax
mov dword [ebp - 0x38c], eax
cmp dword [ebp - 0x38c], 3
jge 0x498cf6
mov eax, dword [ebp - 0x38c]
mov dword [ebp + eax*4 - 0x27ac], 0x1b88146c
jmp 0x498ccd
push 0x55a7
push 0x17a2
push 1
lea eax, [ebp - 0x190c]
push eax
push 1
push 0
push 1
push 0x9ba
push 0x7738
call fcn.00490df4
add esp, 0x24
push 1
push 0x69f5
push 0x148d
push 0
push 0x56a6
push 0x7341
push 1
call fcn.0047d289
add esp, 0x1c
jmp 0x498c93
lea ecx, [ebp - 0x20a4]
call fcn.0040bea4
mov dword [ebp - 0x954], 9
mov dword [ebp - 0x19e4], 8
mov dword [ebp - 0x19d4], 0x5872
mov dword [ebp - 0x19f4], 0xdca27289
mov dword [ebp - 0x19fc], 0xfffffff6
push 1
lea ecx, [ebp - 0x1d74]
call fcn.0040bdd2
mov dword [ebp - 0x19dc], 0
mov dword [ebp - 0x19ec], 0x15e0c0a1
push 0x2a6f
push 0x1798
lea eax, [ebp - 0x1ff0]
push eax
push 0x1c8d
push 0x1fc4
push 0x64d3
push 0x3934
push 1
push 0x7f22
push 1
push 1
push 1
push 0
lea eax, [ebp - 0x1d74]
push eax
push 0xab9
push 0x322d
push 0x17d0
call fcn.0048c3e0
add esp, 0x44
push 1
push 0x7852
push 0x5e76
push 0x5d2a
lea eax, [ebp - 0x19d4]
push eax
push 0x2a61
push 0x1407
push 0
lea eax, [ebp - 0x19dc]
push eax
lea eax, [ebp - 0x19e4]
push eax
push 0x5db7
push 1
push 0x666e
push 0
push 0x639a
push 0x56a1
push 0xf1c
push 0x166c
lea eax, [ebp - 0x19ec]
push eax
lea eax, [ebp - 0x1d74]
push eax
lea eax, [ebp - 0x19f4]
push eax
push 0x5049
push 0x7479
push 0x213d
lea eax, [ebp - 0x19fc]
push eax
call fcn.00488ede
add esp, 0x64
mov byte [ebp - 0x1a5], 0
push 0x76f9
push 0x19cb
push 1
push 1
push 0x5d95
push 0
push 1
push 0x133c
push 0x4922
lea eax, [ebp - 0x1a5]
push eax
push 1
push 0x77c0
push 0x484f
call fcn.00484e36
add esp, 0x34
lea ecx, [ebp - 0x1d74]
call fcn.0040bea4
mov dword [ebp - 0x18c8], 0xf9a0
mov dword [ebp - 0x4c], 0xb064
push 4
lea ecx, [ebp - 0x1e4c]
call fcn.0040bdd2
mov dword [ebp - 0xe44], 1
mov dword [ebp - 0x1a0c], 7
push 2
lea ecx, [ebp - 0x1a8c]
call fcn.0040bdd2
mov dword [ebp - 0xe4c], 0x440271db
mov dword [ebp - 0x93c], 0
mov dword [ebp - 0x18c0], 0xfffffff9
mov dword [ebp - 0x17cc], 0xffffffff
mov dword [ebp - 0xa0], 0
jmp 0x498f4d
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 4
jge 0x498f6f
push dword [ebp - 0xa0]
lea ecx, [ebp - 0x1e4c]
call fcn.0040bec0
mov dword [eax], 0x7c10
jmp 0x498f40
mov dword [ebp - 0xa0], 0
jmp 0x498f88
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 2
jge 0x498faa
push dword [ebp - 0xa0]
lea ecx, [ebp - 0x1a8c]
call fcn.0040bec0
mov dword [eax], 0xfffffffd
jmp 0x498f7b
cmp dword [ebp - 0x4c], 0x90a624cd
ja 0x498fbf
mov dword [ebp - 0x12c8], 1
jmp 0x498fc6
and dword [ebp - 0x12c8], 0
mov eax, dword [ebp - 0x4c]
cmp eax, dword [ebp - 0x12c8]
jg 0x498fdd
mov dword [ebp - 0x92c], 1
jmp 0x498fe4
and dword [ebp - 0x92c], 0
cmp dword [ebp - 0x4c], 0
jne 0x498ff9
cmp dword [ebp - 0x4c], 0
jne 0x498ff9
and dword [ebp - 0x7c8], 0
jmp 0x499003
mov dword [ebp - 0x7c8], 1
push 1
lea ecx, [ebp - 0x1e4c]
call fcn.0040bec0
mov ecx, dword [ebp - 0x7c8]
mov dword [eax], ecx
cmp dword [ebp - 0x7c8], 0xfffffff6
jle 0x49902d
mov dword [ebp - 0x924], 1
jmp 0x499034
and dword [ebp - 0x924], 0
mov eax, dword [ebp - 0x4c]
cmp eax, dword [ebp - 0x924]
jne 0x49904b
mov dword [ebp - 0x1a04], 1
jmp 0x499052
and dword [ebp - 0x1a04], 0
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x2380], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x1ff8], eax
mov eax, dword [ebp - 0xe44]
imul eax, dword [ebp - 0x4c]
cmp eax, dword [ebp - 0xe44]
je 0x499082
mov dword [ebp - 0x10d4], 1
jmp 0x499089
and dword [ebp - 0x10d4], 0
mov eax, dword [ebp - 0x92c]
cmp eax, dword [ebp - 0x10d4]
jge 0x499134
mov dword [ebp - 0x1570], 0xfffffffb
mov dword [ebp - 0x1434], 0xb379
push 1
lea ecx, [ebp - 0x1a8c]
call fcn.0040bec0
mov dword [ebp - 0x934], eax
mov eax, dword [ebp - 0x934]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x934]
mov dword [ecx], eax
lea eax, [ebp - 0x1a8c]
push eax
lea eax, [ebp - 0x1a0c]
push eax
push 0x15d5
lea eax, [ebp - 0x93c]
push eax
lea eax, [ebp - 0x18c0]
push eax
lea eax, [ebp - 0xe4c]
push eax
push 1
push 1
push 0x3c32
lea eax, [ebp - 0x1570]
push eax
push 0x579f
lea eax, [ebp - 0x1434]
push eax
push 0
push 0x2d29
push 1
push 1
push 0x255d
call fcn.0047a8d6
add esp, 0x44
jmp 0x499273
mov dword [ebp - 0x143c], 0x6a75
mov dword [ebp - 0x1c9c], 0x8c84060a
mov dword [ebp - 0x1c98], 0x8c84060a
mov dword [ebp - 0x1c94], 0x8c84060a
mov dword [ebp - 0x1c90], 0x8c84060a
lea ecx, [ebp - 0x741]
call fcn.0040becf
push eax
lea eax, [ebp - 0x1c8c]
push eax
lea eax, [ebp - 0x1c9c]
push eax
lea ecx, [ebp - 0x2620]
call fcn.0040bed2
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x20b8]
call fcn.0040be7e
mov dword [ebp - 0x4c], 8
jmp 0x4991ab
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0xe
je 0x499211
mov dword [ebp - 0x1960], 0
push 0x4eb0
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0xe4c]
push eax
lea eax, [ebp - 0x20b8]
push eax
push 1
lea eax, [ebp - 0x93c]
push eax
push 0x2b9c
push 1
push 0x8cb
push 0x63b7
lea eax, [ebp - 0x17cc]
push eax
push 1
lea eax, [ebp - 0x143c]
push eax
push 0
push 1
lea eax, [ebp - 0x1960]
push eax
call fcn.004851eb
add esp, 0x40
jmp 0x4991a4
mov byte [ebp - 0x102], 0
push 0x20d
push 0x16eb
lea eax, [ebp - 0x102]
push eax
push 0x789f
push 0x1c7
push 0xe2b
push 1
push 1
push 0x581c
push 0x67ee
push 0x60ad
push 0x6dff
push 1
push 0x53ee
push 1
push 1
push 0x5923
call fcn.0047a8d6
add esp, 0x44
lea ecx, [ebp - 0x20b8]
call fcn.0040bea4
lea ecx, [ebp - 0x1a8c]
call fcn.0040bea4
lea ecx, [ebp - 0x1e4c]
call fcn.0040bea4
mov dword [ebp - 0xe54], 0x9da9
mov dword [ebp - 0x121c], 0xbbfad0d7
push 4
lea ecx, [ebp - 0x1d8c]
call fcn.0040bdd2
mov dword [ebp - 0x254], 0x2a43d953
mov dword [ebp - 0x618], 0
jmp 0x4992cd
mov eax, dword [ebp - 0x618]
inc eax
mov dword [ebp - 0x618], eax
cmp dword [ebp - 0x618], 4
jge 0x4992ef
push dword [ebp - 0x618]
lea ecx, [ebp - 0x1d8c]
call fcn.0040bec0
mov dword [eax], 0xe83c773
jmp 0x4992c0
push 0x67a3
push 1
push 1
lea eax, [ebp - 0x1d8c]
push eax
lea eax, [ebp - 0x254]
push eax
push 1
push 0x73da
call fcn.0047ae12
add esp, 0x1c
mov dword [ebp - 0x254], 3
jmp 0x49932e
mov eax, dword [ebp - 0x254]
dec eax
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 0
jl 0x4993d0
mov byte [ebp - 0x12d], 0
push 0
push 0x5006
push 0x6d96
push 1
push 1
lea eax, [ebp - 0x12d]
push eax
push 1
push 0x7a91
push 0
push 0x5ce9
push 0xc39
push 1
push 0x5983
call fcn.0047c5a9
add esp, 0x34
mov byte [ebp - 0x104], 0
push 1
lea eax, [ebp - 0x104]
push eax
push 0x2800
push 0x6eab
push 0x4df
push 0x50cb
push 0x72cd
push 0x7d44
push 0x1726
push 0x42b3
push 0
push 1
push 0x7aff
push 0x354e
push 1
call fcn.0047b463
add esp, 0x3c
jmp 0x499321
lea ecx, [ebp - 0x1d8c]
call fcn.0040bea4
mov dword [ebp - 0x1454], 0x800f
push 1
push 0x757e
push 0
lea eax, [ebp - 0x1444]
push eax
lea eax, [ebp - 0x17d4]
push eax
push 0x4ef9
lea eax, [ebp - 0x144c]
push eax
push 0x7c6f
lea eax, [ebp - 0x954]
push eax
push 1
push 0
lea eax, [ebp - 0x121c]
push eax
lea eax, [ebp - 0x18c8]
push eax
push 0
push 0x1757
lea eax, [ebp - 0xe54]
push eax
call fcn.00495059
add esp, 0x40
mov dword [ebp - 0x1b98], 0x3a4a
mov dword [ebp - 0x1b94], 0x3a4a
mov dword [ebp - 0x1b90], 0x3a4a
mov dword [ebp - 0x1b8c], 0x3a4a
lea ecx, [ebp - 0x699]
call fcn.0040becf
push eax
lea eax, [ebp - 0x1b88]
push eax
lea eax, [ebp - 0x1b98]
push eax
lea ecx, [ebp - 0x2650]
call fcn.0040bed2
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x2564]
call fcn.0040be7e
mov dword [ebp - 0x2388], 0xfe01bd97
push 1
lea ecx, [ebp - 0x20cc]
call fcn.0040bdd2
lea eax, [ebp - 0x328]
push eax
push 0
push 0x7380
lea eax, [ebp - 0x20cc]
push eax
push 1
push 0x3d17
push 0x7d5b
push 0
push 1
push 1
call fcn.00494414
add esp, 0x28
mov dword [ebp - 0x328], 0
jmp 0x4994f8
mov eax, dword [ebp - 0x328]
inc eax
mov dword [ebp - 0x328], eax
cmp dword [ebp - 0x328], 2
jge 0x499514
mov eax, dword [ebp - 0x328]
mov dword [ebp + eax*4 - 0x1b84], 0xfffffffe
jmp 0x4994eb
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1b84]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x1b84], eax
lea ecx, [ebp - 0x20cc]
call fcn.0040bea4
lea ecx, [ebp - 0x2564]
call fcn.0040bea4
mov eax, dword [ebp - 0x121c]
mov dword [ebp - 0x2000], eax
or eax, 0xffffffff
ja 0x499562
mov dword [ebp - 0x944], 1
jmp 0x499569
and dword [ebp - 0x944], 0
mov eax, dword [ebp - 0x1454]
cmp eax, dword [ebp - 0x944]
jne 0x499583
mov dword [ebp - 0x94c], 1
jmp 0x49958a
and dword [ebp - 0x94c], 0
mov eax, dword [ebp - 0xe54]
cmp dword [ebp - 0x94c], eax
jne 0x4995a4
mov dword [ebp - 0x10dc], 1
jmp 0x4995ab
and dword [ebp - 0x10dc], 0
mov eax, dword [ebp - 0x10dc]
mov dword [ebp - 0x954], eax
push 4
lea ecx, [ebp - 0x1aa4]
call fcn.0040bdd2
mov dword [ebp - 0xe5c], 0xe314a5ea
mov dword [ebp - 0x1260], 0xffffffff
mov dword [ebp - 0x19f0], 0x914cc5c6
mov dword [ebp - 0x25c], 0
jmp 0x4995fb
mov eax, dword [ebp - 0x25c]
inc eax
mov dword [ebp - 0x25c], eax
cmp dword [ebp - 0x25c], 1
jge 0x499617
mov eax, dword [ebp - 0x25c]
mov dword [ebp + eax*4 - 0x224], 0xffffffff
jmp 0x4995ee
push 0x7ebf
lea eax, [ebp - 0x1aa4]
push eax
push 0x3dbc
push 0x585d
lea eax, [ebp - 0x25c]
push eax
push 0
push 1
push 1
push 0x18db
call fcn.0048fb47
add esp, 0x24
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x224], 0xfffffff9
jmp 0x499675
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x224]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x224], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x224], 0xffffffe2
jle 0x499839
mov dword [ebp - 0x1b8], 0x3b3152c5
mov dword [ebp - 0x17dc], 0xfadf6285
mov dword [ebp - 0x145c], 0xc18ab9c2
mov dword [ebp - 0x394], 0
jmp 0x4996c0
mov eax, dword [ebp - 0x394]
inc eax
mov dword [ebp - 0x394], eax
cmp dword [ebp - 0x394], 3
jge 0x4996dc
mov eax, dword [ebp - 0x394]
mov dword [ebp + eax*4 - 0x2504], 0xfffffffb
jmp 0x4996b3
mov dword [ebp - 0x1b8], 3
jmp 0x4996f5
mov eax, dword [ebp - 0x1b8]
dec eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 0
jl 0x499834
push 1
push 0
push 1
call fcn.00485b02
add esp, 0xc
mov eax, dword [ebp - 0x17dc]
mov dword [ebp - 0x2344], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x224]
mov dword [ebp - 0x2008], eax
mov eax, dword [ebp - 0x145c]
mov dword [ebp - 0x2490], eax
mov eax, dword [ebp - 0x1b8]
mov dword [ebp - 0xe5c], eax
mov eax, dword [ebp - 0xe5c]
sub eax, 0x64d64ea3
cmp eax, 3
je 0x499763
mov dword [ebp - 0x95c], 1
jmp 0x49976a
and dword [ebp - 0x95c], 0
mov eax, dword [ebp - 0x95c]
mov dword [ebp - 0x1260], eax
mov esi, dword [ebp - 0x1260]
sub esi, 0x3d21
push 0
lea ecx, [ebp - 0x1aa4]
call fcn.0040bec0
cmp esi, dword [eax]
jg 0x49979f
mov dword [ebp - 0x964], 1
jmp 0x4997a6
and dword [ebp - 0x964], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x224]
cmp eax, dword [ebp - 0x964]
je 0x4997c7
mov dword [ebp - 0x96c], 1
jmp 0x4997ce
and dword [ebp - 0x96c], 0
push 4
pop eax
shl eax, 1
lea eax, [ebp + eax - 0x2504]
mov dword [ebp - 0xe64], eax
push dword [ebp - 0x1b8]
lea ecx, [ebp - 0x1aa4]
call fcn.0040bec0
mov ecx, dword [ebp - 0xe64]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0xe64]
mov eax, dword [eax]
add eax, dword [ebp - 0x96c]
cmp eax, 0x15a8df04
jge 0x49981c
mov dword [ebp - 0x10e4], 1
jmp 0x499823
and dword [ebp - 0x10e4], 0
mov eax, dword [ebp - 0x10e4]
mov dword [ebp - 0x19f0], eax
jmp 0x4996e8
jmp 0x49965a
lea ecx, [ebp - 0x1aa4]
call fcn.0040bea4
mov dword [ebp - 0x90], 0xfffffffa
mov dword [ebp - 0x6cc], 0
mov dword [ebp - 0x2010], 1
mov dword [ebp - 0x9ac], 0xfffffffb
push 1
lea ecx, [ebp - 0x7e8]
call fcn.0040bdd2
mov dword [ebp - 0xeac], 0xe31bb000
mov dword [ebp - 0x9c4], 0x94592404
push 4
lea ecx, [ebp - 0x1ad4]
call fcn.0040bdd2
push 3
lea ecx, [ebp - 0x1abc]
call fcn.0040bdd2
mov dword [ebp - 0x70], 0
jmp 0x4998b7
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 1
jge 0x4998d3
push dword [ebp - 0x70]
lea ecx, [ebp - 0x7e8]
call fcn.0040bec0
mov dword [eax], 0x8e55a441
jmp 0x4998b0
mov dword [ebp - 0x70], 0
jmp 0x4998e3
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 4
jge 0x4998ff
push dword [ebp - 0x70]
lea ecx, [ebp - 0x1ad4]
call fcn.0040bec0
mov dword [eax], 0x45464cd0
jmp 0x4998dc
push 1
push 0x5d70
push 0x6d66
push 0x6a38
lea eax, [ebp - 0x70]
push eax
push 0x3734
push 0x103c
push 0x7a3a
push 0x4613
push 0x571e
push 1
push 1
lea eax, [ebp - 0x1abc]
push eax
push 0x1093
push 1
call fcn.0047b463
add esp, 0x3c
mov dword [ebp - 0x90], 2
jmp 0x499960
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0x1a
jne 0x499f4d
mov dword [ebp - 0x75c], 0x1836ccb0
mov dword [ebp - 0x39c], 0
or dword [ebp - 0x1c74], 0xffffffff
or dword [ebp - 0x1c70], 0xffffffff
or dword [ebp - 0x1c6c], 0xffffffff
or dword [ebp - 0x1c68], 0xffffffff
lea ecx, [ebp - 0x7a5]
call fcn.0040becf
push eax
lea eax, [ebp - 0x1c64]
push eax
lea eax, [ebp - 0x1c74]
push eax
lea ecx, [ebp - 0x2610]
call fcn.0040bed2
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1ce4]
call fcn.0040be7e
mov dword [ebp - 0x9a4], 0
mov dword [ebp - 0x1464], 0x55a5481f
mov dword [ebp - 0x17e4], 6
mov dword [ebp - 0x4e8], 0
jmp 0x499a09
mov eax, dword [ebp - 0x4e8]
inc eax
mov dword [ebp - 0x4e8], eax
cmp dword [ebp - 0x4e8], 3
jge 0x499a25
mov eax, dword [ebp - 0x4e8]
mov dword [ebp + eax*4 - 0x192c], 0xd53d2ae4
jmp 0x4999fc
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x192c]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x192c], eax
mov esi, dword [ebp - 0x39c]
push 0
lea ecx, [ebp - 0x7e8]
call fcn.0040bec0
mov edi, eax
push 0
lea ecx, [ebp - 0x7e8]
call fcn.0040bec0
mov ecx, dword [edi]
sub ecx, dword [eax]
sub esi, ecx
jne 0x499a77
xor eax, eax
jne 0x499a77
and dword [ebp - 0x974], 0
jmp 0x499a81
mov dword [ebp - 0x974], 1
mov eax, dword [ebp - 0x9c4]
cmp dword [ebp - 0x974], eax
jne 0x499a9b
mov dword [ebp - 0xe6c], 1
jmp 0x499aa2
and dword [ebp - 0xe6c], 0
mov esi, dword [ebp - 0x90]
add esi, dword [ebp - 0xe6c]
push 3
lea ecx, [ebp - 0x1ce4]
call fcn.0040bec0
imul esi, dword [eax]
cmp esi, dword [ebp - 0x9ac]
jg 0x499ad2
mov dword [ebp - 0x97c], 1
jmp 0x499ad9
and dword [ebp - 0x97c], 0
mov eax, dword [ebp - 0x75c]
cmp dword [ebp - 0x97c], eax
jl 0x499af3
mov dword [ebp - 0x1224], 1
jmp 0x499afa
and dword [ebp - 0x1224], 0
mov eax, dword [ebp - 0x6cc]
sub eax, dword [ebp - 0x1224]
cmp eax, 0xb017290b
ja 0x499b19
mov dword [ebp - 0x984], 1
jmp 0x499b20
and dword [ebp - 0x984], 0
push 0
lea ecx, [ebp - 0x7e8]
call fcn.0040bec0
mov ecx, dword [ebp - 0x984]
cmp ecx, dword [eax]
jle 0x499b4c
cmp dword [ebp - 0x9a4], 0
je 0x499b4c
mov dword [ebp - 0xe74], 1
jmp 0x499b53
and dword [ebp - 0xe74], 0
mov eax, dword [ebp - 0x75c]
cmp eax, dword [ebp - 0xe74]
jle 0x499b6d
mov dword [ebp - 0x98c], 1
jmp 0x499b74
and dword [ebp - 0x98c], 0
push 0
lea ecx, [ebp - 0x7e8]
call fcn.0040bec0
mov ecx, dword [ebp - 0x98c]
cmp ecx, dword [eax]
jl 0x499b97
mov dword [ebp - 0x10ec], 1
jmp 0x499b9e
and dword [ebp - 0x10ec], 0
push 0
lea ecx, [ebp - 0x7e8]
call fcn.0040bec0
mov ecx, dword [ebp - 0x10ec]
mov dword [eax], ecx
push 2
lea ecx, [ebp - 0x1ad4]
call fcn.0040bec0
mov dword [ebp - 0x6c4], eax
mov eax, dword [ebp - 0x6c4]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x6c4]
mov ecx, dword [ecx]
inc ecx
mov edx, dword [ebp - 0x6c4]
mov dword [edx], ecx
test eax, eax
je 0x499df0
push 0
lea ecx, [ebp - 0x7e8]
call fcn.0040bec0
cmp dword [eax], 0
je 0x499c54
mov eax, dword [ebp - 0x1464]
mov dword [ebp - 0x234c], eax
mov eax, 0xe835
cmp eax, 0xe74c
jle 0x499c1d
mov dword [ebp - 0x994], 1
jmp 0x499c24
and dword [ebp - 0x994], 0
push 0
lea ecx, [ebp - 0x7e8]
call fcn.0040bec0
mov ecx, dword [ebp - 0x994]
add ecx, dword [eax]
push 4
pop eax
shl eax, 0
cmp ecx, dword [ebp + eax - 0x192c]
jl 0x499c54
mov dword [ebp - 0xe7c], 1
jmp 0x499c5b
and dword [ebp - 0xe7c], 0
cmp dword [ebp - 0xe7c], 0xf9695ff7
jae 0x499c73
mov dword [ebp - 0x99c], 1
jmp 0x499c7a
and dword [ebp - 0x99c], 0
mov eax, dword [ebp - 0x39c]
cmp eax, dword [ebp - 0x99c]
jg 0x499c94
mov dword [ebp - 0x1264], 1
jmp 0x499c9b
and dword [ebp - 0x1264], 0
cmp dword [ebp - 0x1264], 0xfffffffc
jbe 0x499cb0
mov dword [ebp - 0xe84], 1
jmp 0x499cb7
and dword [ebp - 0xe84], 0
mov eax, dword [ebp - 0x9a4]
cmp dword [ebp - 0xe84], eax
jge 0x499cd1
mov dword [ebp - 0x10f4], 1
jmp 0x499cd8
and dword [ebp - 0x10f4], 0
mov eax, dword [ebp - 0x9ac]
cmp dword [ebp - 0x10f4], eax
jle 0x499cf2
mov dword [ebp - 0x9b4], 1
jmp 0x499cf9
and dword [ebp - 0x9b4], 0
mov eax, dword [ebp - 0x39c]
cmp dword [ebp - 0x9b4], eax
jge 0x499d13
mov dword [ebp - 0xe8c], 1
jmp 0x499d1a
and dword [ebp - 0xe8c], 0
mov eax, dword [ebp - 0x90]
cmp dword [ebp - 0xe8c], eax
jge 0x499d34
mov dword [ebp - 0x9bc], 1
jmp 0x499d3b
and dword [ebp - 0x9bc], 0
mov eax, dword [ebp - 0x6cc]
cmp dword [ebp - 0x9bc], eax
jle 0x499d55
mov dword [ebp - 0x122c], 1
jmp 0x499d5c
and dword [ebp - 0x122c], 0
imul eax, dword [ebp - 0x122c], 0x3b6e
cmp eax, 0xb27c
je 0x499d79
mov dword [ebp - 0xe94], 1
jmp 0x499d80
and dword [ebp - 0xe94], 0
mov eax, dword [ebp - 0x9c4]
imul eax, dword [ebp - 0xe94]
cmp eax, dword [ebp - 0x75c]
jle 0x499da1
mov dword [ebp - 0x9cc], 1
jmp 0x499da8
and dword [ebp - 0x9cc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x192c]
cmp eax, dword [ebp - 0x9cc]
jg 0x499dc9
mov dword [ebp - 0x10fc], 1
jmp 0x499dd0
and dword [ebp - 0x10fc], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x192c]
add eax, dword [ebp - 0x10fc]
je 0x499df0
mov dword [ebp - 0x9d4], 1
jmp 0x499df7
and dword [ebp - 0x9d4], 0
mov eax, dword [ebp - 0xeac]
cmp dword [ebp - 0x9d4], eax
jne 0x499e1a
mov eax, 0x83c5ee74
test eax, eax
je 0x499e1a
mov dword [ebp - 0xe9c], 1
jmp 0x499e21
and dword [ebp - 0xe9c], 0
mov eax, dword [ebp - 0x90]
cmp dword [ebp - 0xe9c], eax
je 0x499e3b
mov dword [ebp - 0x9dc], 1
jmp 0x499e42
and dword [ebp - 0x9dc], 0
mov eax, dword [ebp - 0x39c]
cmp dword [ebp - 0x9dc], eax
jle 0x499e5c
mov dword [ebp - 0x126c], 1
jmp 0x499e63
and dword [ebp - 0x126c], 0
cmp dword [ebp - 0x126c], 0x243b3be7
jne 0x499e7b
mov dword [ebp - 0x9e4], 1
jmp 0x499e82
and dword [ebp - 0x9e4], 0
mov eax, dword [ebp - 0x9e4]
mov dword [ebp - 0x17e4], eax
push 0
lea ecx, [ebp - 0x7e8]
call fcn.0040bec0
cmp dword [eax], 0
je 0x499eb5
cmp dword [ebp - 0x90], 0
je 0x499eb5
mov dword [ebp - 0xea4], 1
jmp 0x499ebc
and dword [ebp - 0xea4], 0
push 0
lea ecx, [ebp - 0x1abc]
call fcn.0040bec0
mov ecx, dword [ebp - 0xea4]
cmp ecx, dword [eax]
jl 0x499edf
mov dword [ebp - 0x9ec], 1
jmp 0x499ee6
and dword [ebp - 0x9ec], 0
mov eax, dword [ebp - 0x90]
cmp eax, dword [ebp - 0x9ec]
je 0x499f00
mov dword [ebp - 0x1104], 1
jmp 0x499f07
and dword [ebp - 0x1104], 0
mov eax, dword [ebp - 0x6cc]
cmp dword [ebp - 0x1104], eax
jg 0x499f21
mov dword [ebp - 0x9f4], 1
jmp 0x499f28
and dword [ebp - 0x9f4], 0
push 1
lea ecx, [ebp - 0x1ce4]
call fcn.0040bec0
mov ecx, dword [ebp - 0x9f4]
mov dword [eax], ecx
lea ecx, [ebp - 0x1ce4]
call fcn.0040bea4
jmp 0x499953
lea eax, [ebp - 0xeac]
push eax
push 0x10b3
push 0x44a2
lea eax, [ebp - 0x1abc]
push eax
lea eax, [ebp - 0x90]
push eax
push 0x635a
push 0x148b
push 0
push 0x3f27
push 1
push 1
push 1
push 1
push 0x1841
push 0x686
lea eax, [ebp - 0x7e8]
push eax
lea eax, [ebp - 0x1ad4]
push eax
call fcn.0048c3e0
add esp, 0x44
lea ecx, [ebp - 0x1abc]
call fcn.0040bea4
lea ecx, [ebp - 0x1ad4]
call fcn.0040bea4
lea ecx, [ebp - 0x7e8]
call fcn.0040bea4
mov dword [ebp - 0x2d4], 0xffffffff
push 1
lea ecx, [ebp - 0x193c]
call fcn.0040bdd2
push 0
lea eax, [ebp - 0x193c]
push eax
push 1
push 0x3482
push 0x210b
push 0x71e5
lea eax, [ebp - 0x2018]
push eax
push 1
push 1
call fcn.0048d02e
add esp, 0x24
mov dword [ebp - 0x2d4], 8
jmp 0x49a023
mov eax, dword [ebp - 0x2d4]
dec eax
mov dword [ebp - 0x2d4], eax
cmp dword [ebp - 0x2d4], 0xfffffff8
je 0x49a2a8
mov dword [ebp - 0x818], 0xe56f9b2c
mov dword [ebp - 0x814], 0xe56f9b2c
mov dword [ebp - 0x810], 0xe56f9b2c
mov dword [ebp - 0x80c], 0xe56f9b2c
mov dword [ebp - 0x7ac], 0xfa48a2b8
mov dword [ebp - 0x6d4], 1
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x818], 0xffffffe7
jmp 0x49a09a
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x818]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x818], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x818], 0xfffffff8
jne 0x49a2a3
mov dword [ebp - 0x1f0], 0
mov dword [ebp - 0xa0c], 0xfffffff7
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x818]
mov dword [ebp - 0x23ec], eax
cmp dword [ebp - 0x1f0], 0
jne 0x49a0fc
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1f0]
cmp dword [ebp + eax - 0x818], ecx
jge 0x49a0fc
and dword [ebp - 0x146c], 0
jmp 0x49a106
mov dword [ebp - 0x146c], 1
mov eax, dword [ebp - 0x1f0]
mov dword [ebp - 0x2020], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x818]
mov dword [ebp - 0x2354], eax
mov eax, dword [ebp - 0x1f0]
push 4
pop ecx
shl ecx, 0
sub eax, dword [ebp + ecx - 0x818]
cmp eax, dword [ebp - 0x1f0]
jl 0x49a14b
mov dword [ebp - 0x9fc], 1
jmp 0x49a152
and dword [ebp - 0x9fc], 0
cmp dword [ebp - 0x9fc], 0
ja 0x49a167
mov dword [ebp - 0x1234], 1
jmp 0x49a16e
and dword [ebp - 0x1234], 0
push 4
pop eax
imul eax, eax, 3
mov esi, dword [ebp - 0x1234]
sub esi, dword [ebp + eax - 0x818]
push 0
lea ecx, [ebp - 0x193c]
call fcn.0040bec0
cmp esi, dword [eax]
jg 0x49a19e
mov dword [ebp - 0xa04], 1
jmp 0x49a1a5
and dword [ebp - 0xa04], 0
mov eax, dword [ebp - 0xa04]
mov dword [ebp - 0x7ac], eax
mov eax, dword [ebp - 0x7ac]
cmp dword [ebp - 0x1f0], eax
jge 0x49a1cb
mov dword [ebp - 0xeb4], 1
jmp 0x49a1d2
and dword [ebp - 0xeb4], 0
mov eax, dword [ebp - 0xeb4]
mov dword [ebp - 0xa0c], eax
mov eax, dword [ebp - 0xa0c]
mov dword [ebp - 0x6d4], eax
push 0
lea ecx, [ebp - 0x193c]
call fcn.0040bec0
cmp dword [eax], 0
jne 0x49a288
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x818], 1
jge 0x49a21c
mov dword [ebp - 0x110c], 1
jmp 0x49a223
and dword [ebp - 0x110c], 0
mov eax, dword [ebp - 0x2d4]
imul eax, dword [ebp - 0x110c]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x818]
jne 0x49a24b
mov dword [ebp - 0xa14], 1
jmp 0x49a252
and dword [ebp - 0xa14], 0
push 0
lea ecx, [ebp - 0x193c]
call fcn.0040bec0
mov ecx, dword [ebp - 0x6d4]
mov edx, dword [ebp - 0x7ac]
sub edx, dword [ebp - 0xa14]
imul edx, edx, 0xfffa
sub ecx, edx
mov eax, dword [eax]
sub eax, ecx
jne 0x49a288
and dword [ebp - 0xebc], 0
jmp 0x49a292
mov dword [ebp - 0xebc], 1
mov eax, dword [ebp - 0xebc]
mov dword [ebp - 0x6d4], eax
jmp 0x49a07f
jmp 0x49a016
lea ecx, [ebp - 0x193c]
call fcn.0040bea4
mov dword [ebp - 0x12c], 0xffffffff
mov dword [ebp - 0x1c0], 0x41bb
mov dword [ebp - 0x588], 0
jmp 0x49a2e0
mov eax, dword [ebp - 0x588]
inc eax
mov dword [ebp - 0x588], eax
cmp dword [ebp - 0x588], 2
jge 0x49a2fc
mov eax, dword [ebp - 0x588]
mov dword [ebp + eax*4 - 0x1b7c], 0
jmp 0x49a2d3
mov dword [ebp - 0x12c], 1
jmp 0x49a315
mov eax, dword [ebp - 0x12c]
dec eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0
jl 0x49a65d
mov dword [ebp - 0x58], 0x9cc25fa
mov dword [ebp - 0x3a4], 0
jmp 0x49a342
mov eax, dword [ebp - 0x3a4]
inc eax
mov dword [ebp - 0x3a4], eax
cmp dword [ebp - 0x3a4], 1
jge 0x49a35e
mov eax, dword [ebp - 0x3a4]
mov dword [ebp + eax*4 - 0x5e0], 0x5e5316d
jmp 0x49a335
mov dword [ebp - 0x58], 0x8a6b950b
cmp dword [ebp - 0x58], 0
je 0x49a5de
mov dword [ebp - 0x18d0], 0x3817d1dc
mov dword [ebp - 0x3ac], 1
mov dword [ebp - 0x58], 0
jmp 0x49a393
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 1
jg 0x49a477
mov dword [ebp - 0x4f0], 0
jmp 0x49a3b6
mov eax, dword [ebp - 0x4f0]
inc eax
mov dword [ebp - 0x4f0], eax
cmp dword [ebp - 0x4f0], 3
jge 0x49a3d2
mov eax, dword [ebp - 0x4f0]
mov dword [ebp + eax*4 - 0x254c], 1
jmp 0x49a3a9
cmp dword [ebp - 0x18d0], 0
je 0x49a3ed
cmp dword [ebp - 0x58], 0
je 0x49a3ed
mov dword [ebp - 0xa1c], 1
jmp 0x49a3f4
and dword [ebp - 0xa1c], 0
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0xa1c], eax
jg 0x49a40b
mov dword [ebp - 0x1474], 1
jmp 0x49a412
and dword [ebp - 0x1474], 0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1b7c], 5
jbe 0x49a42e
mov dword [ebp - 0x1274], 1
jmp 0x49a435
and dword [ebp - 0x1274], 0
cmp dword [ebp - 0x1274], 0x55a63a74
jge 0x49a44d
mov dword [ebp - 0x17ec], 1
jmp 0x49a454
and dword [ebp - 0x17ec], 0
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0x2028], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x3ac]
mov dword [ebp + eax - 0x254c], ecx
jmp 0x49a38c
cmp dword [ebp - 0x12c], 0
je 0x49a5c2
mov eax, dword [ebp - 0x3ac]
mov dword [ebp - 0x2454], eax
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0x2030], eax
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x3ac], eax
jle 0x49a4b3
mov dword [ebp - 0x147c], 1
jmp 0x49a4ba
and dword [ebp - 0x147c], 0
mov eax, dword [ebp - 0x3ac]
mov dword [ebp - 0x235c], eax
cmp dword [ebp - 0x58], 0xfffffff6
jbe 0x49a4d8
mov dword [ebp - 0xa24], 1
jmp 0x49a4df
and dword [ebp - 0xa24], 0
mov eax, 0x896e
sub eax, dword [ebp - 0xa24]
je 0x49a4f8
mov dword [ebp - 0xec4], 1
jmp 0x49a4ff
and dword [ebp - 0xec4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1b7c]
cmp dword [ebp - 0xec4], eax
jle 0x49a520
mov dword [ebp - 0xa2c], 1
jmp 0x49a527
and dword [ebp - 0xa2c], 0
mov eax, dword [ebp - 0xa2c]
sub eax, dword [ebp - 0x1c0]
cmp eax, dword [ebp - 0x58]
jle 0x49a544
mov dword [ebp - 0x1114], 1
jmp 0x49a54b
and dword [ebp - 0x1114], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5e0]
cmp dword [ebp - 0x1114], eax
jl 0x49a56c
mov dword [ebp - 0xa34], 1
jmp 0x49a573
and dword [ebp - 0xa34], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5e0]
cmp dword [ebp - 0xa34], eax
jge 0x49a597
cmp dword [ebp - 0x58], 0
jne 0x49a597
and dword [ebp - 0xecc], 0
jmp 0x49a5a1
mov dword [ebp - 0xecc], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5e0]
cmp dword [ebp - 0xecc], eax
jg 0x49a5c2
mov dword [ebp - 0x1970], 1
jmp 0x49a5c9
and dword [ebp - 0x1970], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1c0]
mov dword [ebp + eax - 0x5e0], ecx
jmp 0x49a658
mov byte [ebp - 0x16d], 0
movzx eax, byte [ebp - 0x16d]
test eax, eax
je 0x49a639
push 0x233c
push 0x46d6
push 0x7bca
push 0x42d7
push 0
push 0x22d7
push 0x4555
push 1
push 0x2114
push 0x52bc
push 0x2fb2
push 1
push 0x376c
push 1
push 0
push 0x12ac
call fcn.004851eb
add esp, 0x40
mov byte [ebp - 0x106], 0
movzx eax, byte [ebp - 0x106]
test eax, eax
je 0x49a658
push 0xff2
push 0
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
jmp 0x49a308
mov dword [ebp - 0x1c0], 0
jmp 0x49a676
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 1
jg 0x49a6d5
push 0x2851
push 0x6db0
push 1
push 0
push 1
push 0
push 0x43d3
push 0x7074
push 0x14e8
push 1
push 0x1eac
call fcn.0048dab5
add esp, 0x2c
push 0x7020
push 0
push 0
push 1
push 0x3f92
push 0x12d1
push 1
push 0x3e8e
call fcn.00490421
add esp, 0x20
jmp 0x49a669
mov dword [ebp - 0x2e4], 0
mov dword [ebp - 0xb54], 0x3eb60693
mov dword [ebp - 0x264], 8
mov dword [ebp - 0x310], 0x2ba29f58
mov dword [ebp - 0x17f4], 0x3925
push 1
lea ecx, [ebp - 0x1e34]
call fcn.0040bdd2
mov dword [ebp - 0x1428], 1
mov dword [ebp - 0x78], 0
jmp 0x49a72e
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 3
jge 0x49a744
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0x251c], 0xffffffff
jmp 0x49a727
mov dword [ebp - 0x78], 0
jmp 0x49a754
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 1
jge 0x49a76a
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0x111c], 0xfffffffd
jmp 0x49a74d
lea eax, [ebp - 0x78]
push eax
push 0x298f
push 0x708
push 0x6b6f
push 0
push 0x3efb
push 0x58d7
lea eax, [ebp - 0x1e34]
push eax
push 0x47ae
push 0x7a07
push 0x21d7
push 0x5dee
push 0x6d1c
push 0x30e8
push 1
push 1
push 0x1ec4
push 0x5db5
push 1
push 0x1f88
call fcn.0048ef35
add esp, 0x50
push 0
push 0x7c7a
push 0xb14
push 0x76c7
push 0x6cfb
push 0x5a26
push 0
push 0
push 0x1c1a
push 0x6d58
push 0x6068
call fcn.0048c0c7
add esp, 0x2c
mov dword [ebp - 0x264], 0
jmp 0x49a81a
mov eax, dword [ebp - 0x264]
inc eax
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 2
jg 0x49abdc
mov dword [ebp - 0x590], 0x32bb11ac
mov dword [ebp - 0xa3c], 0x29ae
mov dword [ebp - 0x1484], str.risqdznf_igdubtjtb_cdrlbmjh_vunnqe_ylqgojmc_yje_vcn_ejb_rqepq_mhtr
cmp dword [ebp - 0xa3c], 0x2ac9
jle 0x49a8c8
and dword [ebp - 0x3b4], 0
jmp 0x49a867
mov eax, dword [ebp - 0x3b4]
inc eax
mov dword [ebp - 0x3b4], eax
cmp dword [ebp - 0x3b4], 0xb4f
jge 0x49a8c8
and dword [ebp - 0x4f8], 0
jmp 0x49a889
mov eax, dword [ebp - 0x4f8]
inc eax
mov dword [ebp - 0x4f8], eax
cmp dword [ebp - 0x4f8], 0x4e8e
jge 0x49a8c6
mov eax, dword [ebp - 0x3b4]
sub eax, dword [ebp - 0x4f8]
cdq
mov dword [ebp - 0x15bc], eax
mov dword [ebp - 0x15b8], edx
push dword [ebp - 0x15b8]
push dword [ebp - 0x15bc]
mov ecx, 0xaa47f8
call fcn.0040bbab
jmp 0x49a87c
jmp 0x49a85a
mov dword [ebp - 0x764], 0xd0374c7a
mov dword [ebp - 4], 2
cmp dword [ebp - 0xa3c], 0x2684
jge 0x49a8f5
mov edx, dword [ebp - 0x1484]
mov ecx, 0xaa47f8
call fcn.0040e430
jmp 0x49a911
or dword [ebp - 4], 0xffffffff
jmp 0x49a91b
mov dword [ebp - 0x1124], 4
mov dword [ebp - 0x3bc], 0
jmp 0x49a93e
mov eax, dword [ebp - 0x3bc]
inc eax
mov dword [ebp - 0x3bc], eax
cmp dword [ebp - 0x3bc], 2
jge 0x49a95a
mov eax, dword [ebp - 0x3bc]
mov dword [ebp + eax*4 - 0x205c], 0x7b79f6a7
jmp 0x49a931
mov dword [ebp - 0x590], 0
jmp 0x49a973
mov eax, dword [ebp - 0x590]
inc eax
mov dword [ebp - 0x590], eax
cmp dword [ebp - 0x590], 2
jg 0x49abd7
mov dword [ebp - 0xa64], 0x1865
mov dword [ebp - 0x3c4], 0
mov dword [ebp - 0x500], 0x761ac7eb
mov eax, dword [ebp - 0x310]
inc eax
mov dword [ebp - 0x310], eax
mov eax, dword [ebp - 0x764]
cmp dword [ebp - 0x764], eax
jge 0x49a9c5
mov dword [ebp - 0x123c], 1
jmp 0x49a9cc
and dword [ebp - 0x123c], 0
mov eax, dword [ebp - 0x310]
cmp dword [ebp - 0x123c], eax
jg 0x49a9e6
mov dword [ebp - 0xa44], 1
jmp 0x49a9ed
and dword [ebp - 0xa44], 0
mov eax, dword [ebp - 0x764]
cmp dword [ebp - 0xa44], eax
jge 0x49aa20
cmp dword [ebp - 0xa64], 0
je 0x49aa20
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x111c], 0
je 0x49aa20
mov dword [ebp - 0xed4], 1
jmp 0x49aa27
and dword [ebp - 0xed4], 0
imul eax, dword [ebp - 0xed4], 0xffff
cmp eax, dword [ebp - 0x3c4]
jne 0x49aa45
mov dword [ebp - 0xa4c], 1
jmp 0x49aa4c
and dword [ebp - 0xa4c], 0
mov eax, dword [ebp - 0x500]
cmp dword [ebp - 0xa4c], eax
jne 0x49aa66
mov dword [ebp - 0x6dc], 1
jmp 0x49aa6d
and dword [ebp - 0x6dc], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x6dc]
mov dword [ebp + eax - 0x111c], ecx
mov eax, dword [ebp - 0x500]
cmp eax, dword [ebp - 0x6dc]
je 0x49aa9a
mov dword [ebp - 0xa54], 1
jmp 0x49aaa1
and dword [ebp - 0xa54], 0
mov eax, dword [ebp - 0x264]
mov eax, dword [ebp + eax*4 - 0x251c]
add eax, dword [ebp - 0xa54]
neg eax
jne 0x49aaca
mov eax, 0x12afbcae
test eax, eax
jne 0x49aaca
and dword [ebp - 0xedc], 0
jmp 0x49aad4
mov dword [ebp - 0xedc], 1
mov eax, dword [ebp - 0x3c4]
cmp dword [ebp - 0xedc], eax
jg 0x49aaf7
mov eax, 0x5f87
test eax, eax
je 0x49aaf7
mov dword [ebp - 0xa5c], 1
jmp 0x49aafe
and dword [ebp - 0xa5c], 0
mov eax, dword [ebp - 0x17f4]
cmp dword [ebp - 0xa5c], eax
je 0x49ab18
mov dword [ebp - 0x127c], 1
jmp 0x49ab1f
and dword [ebp - 0x127c], 0
mov eax, dword [ebp - 0x127c]
mov dword [ebp - 0x3c4], eax
mov eax, dword [ebp - 0x3c4]
sub eax, 0x41385bd7
sub eax, dword [ebp - 0x500]
imul eax, dword [ebp - 0x500]
cmp eax, dword [ebp - 0xa64]
jle 0x49ab57
mov dword [ebp - 0xee4], 1
jmp 0x49ab5e
and dword [ebp - 0xee4], 0
mov eax, dword [ebp - 0xee4]
sub eax, 4
mov dword [ebp - 0xa6c], eax
push 0
lea ecx, [ebp - 0x1e34]
call fcn.0040bec0
mov ecx, dword [ebp - 0xa6c]
mov dword [eax], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x205c]
imul eax, dword [ebp - 0xa6c]
mov dword [ebp - 0x1124], eax
mov eax, dword [ebp - 0x310]
cmp dword [ebp - 0x1124], eax
jg 0x49abbc
cmp dword [ebp - 0x310], 0
jne 0x49abbc
and dword [ebp - 0xa74], 0
jmp 0x49abc6
mov dword [ebp - 0xa74], 1
mov eax, dword [ebp - 0xa74]
mov dword [ebp - 0x1428], eax
jmp 0x49a966
jmp 0x49a80d
lea ecx, [ebp - 0x1e34]
call fcn.0040bea4
mov dword [ebp - 0x2038], 1
mov dword [ebp - 0x17fc], 0
mov dword [ebp - 0x18d8], 0x3eb60693
mov dword [ebp - 0x23f4], 1
mov dword [ebp - 0x1494], 1
mov dword [ebp - 0x3cc], 0
jmp 0x49ac32
mov eax, dword [ebp - 0x3cc]
inc eax
mov dword [ebp - 0x3cc], eax
cmp dword [ebp - 0x3cc], 3
jge 0x49ac4e
mov eax, dword [ebp - 0x3cc]
mov dword [ebp + eax*4 - 0x2710], 0xa167c28c
jmp 0x49ac25
lea eax, [ebp - 0x18d8]
push eax
push 1
push 1
push 0
push 1
lea eax, [ebp - 0x1494]
push eax
push 0x186e
push 0x7708
lea eax, [ebp - 0x17fc]
push eax
push 0xbb8
push 1
push 0x6c70
call fcn.00481fdc
add esp, 0x30
mov dword [ebp - 0x1824], 1
mov dword [ebp - 0x218], 0xffffffff
mov dword [ebp - 0x76c], 0xffffffff
mov dword [ebp - 0x6e4], 1
mov dword [ebp - 0x26c], 0xffffffff
push 0
push 0xc1a
lea eax, [ebp - 0x218]
push eax
push 0x371
push 0x4d4e
push 0x266b
lea eax, [ebp - 0x6e4]
push eax
lea eax, [ebp - 0x76c]
push eax
lea eax, [ebp - 0x26c]
push eax
push 0x2089
push 0
push 1
push 0x75ea
call fcn.00477098
add esp, 0x34
cmp dword [ebp - 0x218], 0
je 0x49ad21
cmp dword [ebp - 0x76c], 0
je 0x49ad21
mov dword [ebp - 0xeec], 1
jmp 0x49ad28
and dword [ebp - 0xeec], 0
mov eax, dword [ebp - 0x218]
sub eax, 0x53739231
mov ecx, dword [ebp - 0xeec]
sub ecx, dword [ebp - 0x26c]
cmp eax, ecx
jl 0x49ad51
or eax, 0xffffffff
jne 0x49ad51
and dword [ebp - 0xa7c], 0
jmp 0x49ad5b
mov dword [ebp - 0xa7c], 1
mov eax, dword [ebp - 0x218]
imul eax, dword [ebp - 0xa7c]
test eax, eax
je 0x49b00d
mov dword [ebp - 0x7cc], 0xfffffffd
mov dword [ebp - 0x134], 0xffffffff
mov dword [ebp - 0x3d4], 0x53d0c96
mov dword [ebp - 0x608], 0
jmp 0x49ada7
mov eax, dword [ebp - 0x608]
inc eax
mov dword [ebp - 0x608], eax
cmp dword [ebp - 0x608], 3
jge 0x49adc3
mov eax, dword [ebp - 0x608]
mov dword [ebp + eax*4 - 0x24bc], 0xfff8
jmp 0x49ad9a
xor eax, eax
inc eax
sub eax, dword [ebp - 0x134]
cmp eax, 0x51ef224b
jge 0x49addf
mov dword [ebp - 0x1244], 1
jmp 0x49ade6
and dword [ebp - 0x1244], 0
mov eax, dword [ebp - 0x134]
cmp eax, dword [ebp - 0x1244]
jl 0x49ae00
mov dword [ebp - 0x149c], 1
jmp 0x49ae07
and dword [ebp - 0x149c], 0
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x2040], eax
mov dword [ebp - 0x3d4], 0x3a8a1d58
cmp dword [ebp - 0x3d4], 0
je 0x49ae37
or eax, 0xffffffff
je 0x49ae37
mov dword [ebp - 0xa84], 1
jmp 0x49ae3e
and dword [ebp - 0xa84], 0
cmp dword [ebp - 0xa84], 0x7ea9
jne 0x49ae56
mov dword [ebp - 0xef4], 1
jmp 0x49ae5d
and dword [ebp - 0xef4], 0
cmp dword [ebp - 0xef4], 0x24e1
jg 0x49ae75
mov dword [ebp - 0xa8c], 1
jmp 0x49ae7c
and dword [ebp - 0xa8c], 0
cmp dword [ebp - 0xa8c], 0x819a
jge 0x49ae94
mov dword [ebp - 0x112c], 1
jmp 0x49ae9b
and dword [ebp - 0x112c], 0
mov eax, dword [ebp - 0x7cc]
add eax, dword [ebp - 0x112c]
cmp eax, dword [ebp - 0x218]
jl 0x49aebb
mov dword [ebp - 0xa94], 1
jmp 0x49aec2
and dword [ebp - 0xa94], 0
cmp dword [ebp - 0xa94], 0x5584e2bb
jl 0x49aeda
mov dword [ebp - 0xefc], 1
jmp 0x49aee1
and dword [ebp - 0xefc], 0
mov eax, dword [ebp - 0x7cc]
imul eax, dword [ebp - 0xefc]
cmp eax, 0x6f594a39
jg 0x49af01
mov dword [ebp - 0xa9c], 1
jmp 0x49af08
and dword [ebp - 0xa9c], 0
mov eax, dword [ebp - 0x134]
sub eax, dword [ebp - 0xa9c]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x24bc]
mov dword [ebp - 0x26c], eax
mov eax, dword [ebp - 0x134]
cmp dword [ebp - 0x26c], eax
jg 0x49af42
mov dword [ebp - 0x1284], 1
jmp 0x49af49
and dword [ebp - 0x1284], 0
mov eax, dword [ebp - 0x7cc]
add eax, dword [ebp - 0x1284]
cmp eax, 0xfffc
jb 0x49af68
mov dword [ebp - 0xaa4], 1
jmp 0x49af6f
and dword [ebp - 0xaa4], 0
mov eax, dword [ebp - 0x218]
cmp dword [ebp - 0xaa4], eax
jl 0x49af84
cmp dword [ebp - 0x3d4], 0
cmp dword [ebp - 0x26c], 0
je 0x49afa2
cmp dword [ebp - 0x6e4], 0
je 0x49afa2
mov dword [ebp - 0xf04], 1
jmp 0x49afa9
and dword [ebp - 0xf04], 0
cmp dword [ebp - 0xf04], 1
jae 0x49afbe
mov dword [ebp - 0xaac], 1
jmp 0x49afc5
and dword [ebp - 0xaac], 0
mov eax, dword [ebp - 0xaac]
mov dword [ebp - 0x134], eax
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x6e4], eax
push 0x82
push 0x5e4c
push 0x51e9
push 0x7247
push 1
lea eax, [ebp - 0x3d4]
push eax
push 1
push 0x7b02
push 0
call fcn.004926e7
add esp, 0x24
jmp 0x49b082
mov dword [ebp - 0x19d8], 0
mov dword [ebp - 0x14a4], 0x70f82edd
mov dword [ebp - 0x1804], 3
push 0x7d9d
push 1
push 0x180f
push 0x3bae
push 0x509b
push 0
push 0x627
push 0x3410
lea eax, [ebp - 0x76c]
push eax
push 0x16b4
push 0x143
push 0
push 1
push 0x3cf7
lea eax, [ebp - 0x19d8]
push eax
call fcn.00485098
add esp, 0x3c
mov eax, dword [ebp - 0x14a4]
mov dword [ebp - 0x1804], eax
mov dword [ebp - 0xf0c], 0xb2c21353
mov dword [ebp - 0xd8], 5
mov dword [ebp - 0x508], 0
jmp 0x49b0af
mov eax, dword [ebp - 0x508]
inc eax
mov dword [ebp - 0x508], eax
cmp dword [ebp - 0x508], 3
jge 0x49b0cb
mov eax, dword [ebp - 0x508]
mov dword [ebp + eax*4 - 0x1380], 0xfffffffe
jmp 0x49b0a2
mov eax, dword [ebp - 0xf0c]
mov dword [ebp - 0x1134], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x1134]
mov dword [ebp + eax - 0x1380], ecx
cmp dword [ebp - 0x1134], 0
je 0x49b26d
push 3
lea ecx, [ebp - 0x1aec]
call fcn.0040bdd2
mov dword [ebp - 0x14ac], 0xd73d
mov dword [ebp - 0xab4], 1
push 1
push 0x4e44
push 0
push 0x71b9
push 0x3324
push 0x3239
push 0x4967
lea eax, [ebp - 0x2364]
push eax
push 0x4422
push 1
push 0
push 0x1ea3
push 0x4bc
push 1
lea eax, [ebp - 0x1aec]
push eax
push 0xd9a
call fcn.00495059
add esp, 0x40
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1380]
mov dword [ebp - 0x2048], eax
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x1380], 1
push 8
pop eax
inc eax
mov dword [ebp - 0xab4], eax
je 0x49b1a7
mov eax, 0xffff
test eax, eax
je 0x49b1a7
mov dword [ebp - 0xabc], 1
jmp 0x49b1ae
and dword [ebp - 0xabc], 0
mov eax, dword [ebp - 0xf0c]
cmp dword [ebp - 0xabc], eax
jg 0x49b1c8
mov dword [ebp - 0x124c], 1
jmp 0x49b1cf
and dword [ebp - 0x124c], 0
mov eax, dword [ebp - 0x14ac]
cmp dword [ebp - 0x124c], eax
jg 0x49b1f8
push 1
lea ecx, [ebp - 0x1aec]
call fcn.0040bec0
cmp dword [eax], 0
jne 0x49b1f8
and dword [ebp - 0xac4], 0
jmp 0x49b202
mov dword [ebp - 0xac4], 1
push 2
lea ecx, [ebp - 0x1aec]
call fcn.0040bec0
mov eax, dword [eax]
cmp eax, dword [ebp - 0xac4]
jne 0x49b225
mov dword [ebp - 0xf14], 1
jmp 0x49b22c
and dword [ebp - 0xf14], 0
mov eax, dword [ebp - 0xf14]
add eax, 0xffff
cmp eax, 0xcd95ff79
jne 0x49b24a
mov dword [ebp - 0xacc], 1
jmp 0x49b251
and dword [ebp - 0xacc], 0
mov eax, dword [ebp - 0xacc]
mov dword [ebp - 0xd8], eax
lea ecx, [ebp - 0x1aec]
call fcn.0040bea4
jmp 0x49b2fa
mov byte [ebp - 0x135], 0
push 0x3483
push 0x548
push 0x56fe
lea eax, [ebp - 0x135]
push eax
push 1
push 0x2f98
push 0x6f4e
push 0
push 0x28f5
push 0x420d
push 0
push 1
call fcn.00496b09
add esp, 0x30
mov dword [ebp - 0xd8], 2
jmp 0x49b2c7
mov eax, dword [ebp - 0xd8]
dec eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0
jl 0x49b2fa
mov eax, dword [ebp - 0xd8]
mov eax, dword [ebp + eax*4 - 0x1380]
mov ecx, dword [ebp - 0xd8]
imul eax, dword [ebp + ecx*4 - 0x1380]
mov ecx, dword [ebp - 0xd8]
mov dword [ebp + ecx*4 - 0x1380], eax
jmp 0x49b2ba
mov dword [ebp - 0x3dc], 0
jmp 0x49b313
mov eax, dword [ebp - 0x3dc]
inc eax
mov dword [ebp - 0x3dc], eax
cmp dword [ebp - 0x3dc], 3
jge 0x49b32f
mov eax, dword [ebp - 0x3dc]
mov dword [ebp + eax*4 - 0x2788], 0xa167c28c
jmp 0x49b306
push 0x7138
push 0x429e
push 1
push 1
push 1
push 0
push 0x2732
push 1
push 0x1f2e
push 0x4f70
push 0
push 0x7d65
call fcn.0047edcd
add esp, 0x30
cmp dword [ebp - 0x2e4], 1
jae 0x49b376
mov dword [ebp - 0x113c], 1
jmp 0x49b37d
and dword [ebp - 0x113c], 0
mov eax, dword [ebp - 0x2e4]
cmp dword [ebp - 0x113c], eax
je 0x49b397
mov dword [ebp - 0xad4], 1
jmp 0x49b39e
and dword [ebp - 0xad4], 0
mov eax, dword [ebp - 0xad4]
sub eax, dword [ebp - 0xb54]
cmp dword [ebp - 0x2e4], eax
jle 0x49b3be
mov dword [ebp - 0xf1c], 1
jmp 0x49b3c5
and dword [ebp - 0xf1c], 0
cmp dword [ebp - 0xf1c], 0xcd45
jg 0x49b3dd
mov dword [ebp - 0xadc], 1
jmp 0x49b3e4
and dword [ebp - 0xadc], 0
mov eax, dword [ebp - 0x2e4]
cmp dword [ebp - 0xadc], eax
jle 0x49bb2e
mov dword [ebp - 0x2dc], 0x7689351f
mov dword [ebp - 0x6ec], 0x4c7b7f60
mov dword [ebp - 0x274], 0xffffffff
mov dword [ebp - 0xafc], 1
mov dword [ebp - 0x1c8], 0x2a41536c
mov dword [ebp - 0x3c], 0
jmp 0x49b438
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 3
jge 0x49b44e
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x194c], 0xffff
jmp 0x49b431
mov dword [ebp - 0x3c], 0
jmp 0x49b45e
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 4
jge 0x49b474
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x2638], 0xac84
jmp 0x49b457
mov dword [ebp - 0x3c], 0
jmp 0x49b484
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 2
jge 0x49b49a
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x15c8], 0xe9a07b30
jmp 0x49b47d
cmp dword [ebp - 0x6ec], 0
je 0x49b4aa
cmp dword [ebp - 0x6ec], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x194c]
sub eax, dword [ebp - 0x2dc]
cmp dword [ebp - 0x2dc], eax
je 0x49b4d1
mov dword [ebp - 0x128c], 1
jmp 0x49b4d8
and dword [ebp - 0x128c], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x128c]
sub ecx, dword [ebp + eax - 0x2638]
cmp dword [ebp - 0x2dc], ecx
jne 0x49b4ff
mov dword [ebp - 0xae4], 1
jmp 0x49b506
and dword [ebp - 0xae4], 0
mov eax, dword [ebp - 0x2dc]
cmp dword [ebp - 0xae4], eax
je 0x49b520
mov dword [ebp - 0xf24], 1
jmp 0x49b527
and dword [ebp - 0xf24], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xf24]
add ecx, dword [ebp + eax - 0x194c]
mov dword [ebp - 0xaec], ecx
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xaec]
mov dword [ebp + eax - 0x15c8], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x194c]
cmp dword [ebp - 0xaec], eax
jg 0x49b573
mov dword [ebp - 0x1144], 1
jmp 0x49b57a
and dword [ebp - 0x1144], 0
mov eax, dword [ebp - 0x2dc]
sub eax, dword [ebp - 0x1144]
mov dword [ebp - 0x274], eax
je 0x49b6eb
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x194c], 0
je 0x49b6eb
mov dword [ebp - 0x18e0], 0
push 4
lea ecx, [ebp - 0x1b04]
call fcn.0040bdd2
mov dword [ebp - 0x14b4], 0xaf19195c
mov dword [ebp - 0x598], 0
jmp 0x49b5e0
mov eax, dword [ebp - 0x598]
inc eax
mov dword [ebp - 0x598], eax
cmp dword [ebp - 0x598], 4
jge 0x49b5ff
push dword [ebp - 0x598]
lea ecx, [ebp - 0x1b04]
call fcn.0040bec0
and dword [eax], 0
jmp 0x49b5d3
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x15c8], 0x70cc
mov eax, dword [ebp - 0x18e0]
mov dword [ebp - 0x236c], eax
push 1
lea ecx, [ebp - 0x1b04]
call fcn.0040bec0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x194c], 0
jne 0x49b64b
mov eax, 0x83fb18ba
test eax, eax
jne 0x49b64b
and dword [ebp - 0xaf4], 0
jmp 0x49b655
mov dword [ebp - 0xaf4], 1
mov eax, dword [ebp - 0xaf4]
mov dword [ebp - 0x274], eax
mov esi, dword [ebp - 0x274]
push 1
lea ecx, [ebp - 0x1b04]
call fcn.0040bec0
cmp esi, dword [eax]
jg 0x49b684
mov dword [ebp - 0xf2c], 1
jmp 0x49b68b
and dword [ebp - 0xf2c], 0
imul eax, dword [ebp - 0xf2c], 0x65f5
mov dword [ebp - 0xafc], eax
mov eax, 0xc34ccbb2
sub eax, dword [ebp - 0xafc]
imul eax, dword [ebp - 0x6ec], 0
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 0xfff7
jae 0x49b6cb
mov dword [ebp - 0x1c8], 0
jmp 0x49b704
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 0xd
jg 0x49b747
push 0x60ea
push 1
push 0x4ecb
push 1
push 0x6ee3
push 0x5ff0
push 0x4fb4
push 1
push 0
push 0x1040
push 0x368a
push 0x4c2b
call fcn.004872c0
add esp, 0x30
jmp 0x49b6f7
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x15c8]
mov dword [ebp - 0x274], eax
push 1
push 0x480f
push 0x5528
push 0
push 1
push 0x1b1d
push 1
push 0x7130
push 0x375a
push 0x702a
call fcn.0048084a
add esp, 0x28
mov byte [ebp - 0x18d], 0
mov dword [ebp - 0x1c24], 0x8eac
mov dword [ebp - 0x1c20], 0x8eac
mov dword [ebp - 0x1c1c], 0x8eac
mov dword [ebp - 0x1c18], 0x8eac
lea ecx, [ebp - 0x6a1]
call fcn.0040becf
push eax
lea eax, [ebp - 0x1c14]
push eax
lea eax, [ebp - 0x1c24]
push eax
lea ecx, [ebp - 0x25b8]
call fcn.0040bed2
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1d14]
call fcn.0040be7e
or dword [ebp - 0x1cc4], 0xffffffff
or dword [ebp - 0x1cc0], 0xffffffff
or dword [ebp - 0x1cbc], 0xffffffff
or dword [ebp - 0x1cb8], 0xffffffff
lea ecx, [ebp - 0x749]
call fcn.0040becf
push eax
lea eax, [ebp - 0x1cb4]
push eax
lea eax, [ebp - 0x1cc4]
push eax
lea ecx, [ebp - 0x25b0]
call fcn.0040bed2
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1330]
call fcn.0040be7e
mov dword [ebp - 0x3e4], 0xef6b8f3d
push 2
lea ecx, [ebp - 0x1330]
call fcn.0040bec0
and dword [eax], 0
jmp 0x49b87d
push 2
lea ecx, [ebp - 0x1330]
call fcn.0040bec0
cmp dword [eax], 3
jg 0x49b8e6
push 1
lea eax, [ebp - 0x1330]
push eax
push 0x3798
push 1
push 1
push 0x7181
push 1
push 0x716
push 1
push 0x4010
push 0x2231
push 1
lea eax, [ebp - 0x1d14]
push eax
call fcn.0047c5a9
add esp, 0x34
push 2
lea ecx, [ebp - 0x1330]
call fcn.0040bec0
cmp dword [eax], 0
je 0x49b8e1
jmp 0x49b859
jmp 0x49b859
mov dword [ebp - 0x3e4], 3
jmp 0x49b8ff
cmp dword [ebp - 0x3e4], 0
jl 0x49ba20
mov dword [ebp - 0x14e4], 0xfffe
push 3
lea ecx, [ebp - 0x2124]
call fcn.0040bdd2
or dword [ebp - 0x1bac], 0xffffffff
or dword [ebp - 0x1ba8], 0xffffffff
or dword [ebp - 0x1ba4], 0xffffffff
or dword [ebp - 0x1ba0], 0xffffffff
lea ecx, [ebp - 0x775]
call fcn.0040becf
push eax
lea eax, [ebp - 0x1b9c]
push eax
lea eax, [ebp - 0x1bac]
push eax
lea ecx, [ebp - 0x2648]
call fcn.0040bed2
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x24c8]
call fcn.0040be7e
mov dword [ebp - 0x228], 0x4e2db58
mov dword [ebp - 0x1980], 0xfffffffd
mov dword [ebp - 0x228], 0xffffffe2
jmp 0x49bbc3
mov eax, dword [ebp - 0x228]
inc eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 0xfffffff0
jg 0x49bd1f
mov dword [ebp - 0x27c], 1
mov dword [ebp - 0x27c], 0
jmp 0x49bbf3
mov eax, dword [ebp - 0x27c]
dec eax
mov dword [ebp - 0x27c], eax
cmp dword [ebp - 0x27c], 0xfffffff2
jge 0x49bcfb
mov dword [ebp - 0x14c4], 0x898f01ba
mov dword [ebp - 0x14bc], 1
mov dword [ebp - 0x1bc0], 0x2883
mov dword [ebp - 0x1bbc], 0x2883
mov dword [ebp - 0x1bb8], 0x2883
mov dword [ebp - 0x1bb4], 0x2883
lea ecx, [ebp - 0x785]
call fcn.0040becf
push eax
lea eax, [ebp - 0x1bb0]
push eax
lea eax, [ebp - 0x1bc0]
push eax
lea ecx, [ebp - 0x25d0]
call fcn.0040bed2
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x2114]
call fcn.0040be7e
mov dword [ebp - 0x1814], 0xe3268dd2
push 1
push 0
push 0x5ce2
push 0x7df1
lea eax, [ebp - 0x14bc]
push eax
push 0x32dc
push 0x4ec4
push 0x3b2c
push 0x45c8
lea eax, [ebp - 0x2114]
push eax
push 1
lea eax, [ebp - 0x27c]
push eax
push 0x182
lea eax, [ebp - 0x228]
push eax
lea eax, [ebp - 0x1980]
push eax
lea eax, [ebp - 0x14c4]
push eax
push 1
lea eax, [ebp - 0x1814]
push eax
push 0x883
push 0x4867
push 0
call fcn.00484752
add esp, 0x54
lea ecx, [ebp - 0x2114]
call fcn.0040bea4
jmp 0x49bbe6
push 1
push 0x5c36
push 0
push 1
push 1
push 0x86e
push 0x672d
call fcn.0048145d
add esp, 0x1c
jmp 0x49bbb6
mov dword [ebp - 0x1d0], 0x3ae35568
mov dword [ebp - 0xb4c], 0xfffffff7
mov dword [ebp - 0x5e8], 0
jmp 0x49bd4c
mov eax, dword [ebp - 0x5e8]
inc eax
mov dword [ebp - 0x5e8], eax
cmp dword [ebp - 0x5e8], 3
jge 0x49bd68
mov eax, dword [ebp - 0x5e8]
mov dword [ebp + eax*4 - 0x1398], 0
jmp 0x49bd3f
mov dword [ebp - 0x1d0], 0
jmp 0x49bd81
mov eax, dword [ebp - 0x1d0]
inc eax
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 0xe
jl 0x49c2c6
push 3
lea ecx, [ebp - 0x1348]
call fcn.0040bdd2
mov dword [ebp - 0x1a00], 0xa1c3d076
push 1
lea ecx, [ebp - 0x195c]
call fcn.0040bdd2
mov dword [ebp - 0x14dc], 0x446f
push 0x364e
lea eax, [ebp - 0x14cc]
push eax
push 0x2a5
push 0x42c6
push 0x97a
lea eax, [ebp - 0x1348]
push eax
push 0x3370
push 1
push 0
push 0
call fcn.0047b085
add esp, 0x28
push 0x7ec
push 0x1de4
push 0x1d64
push 0x4041
lea eax, [ebp - 0x195c]
push eax
push 0x2c1b
lea eax, [ebp - 0x14cc]
push eax
push 1
push 1
push 0
call fcn.0047b085
add esp, 0x28
mov byte [ebp - 0x10a], 0
push 0x3178
push 0x1428
push 0x7e68
push 0x7300
push 0xde
push 0
push 1
push 0
lea eax, [ebp - 0x10a]
push eax
push 1
push 0x44dc
call fcn.00494608
add esp, 0x2c
push 0
lea ecx, [ebp - 0x1348]
call fcn.0040bec0
mov dword [eax], 0xfffffff3
jmp 0x49be9b
push 0
lea ecx, [ebp - 0x1348]
call fcn.0040bec0
mov dword [ebp - 0xf34], eax
mov eax, dword [ebp - 0xf34]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xf34]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x1348]
call fcn.0040bec0
cmp dword [eax], 2
jl 0x49c2ab
mov dword [ebp - 0x50], 0xfffffffa
mov dword [ebp - 0x1f8], 0xfffffffd
mov dword [ebp - 0x14d4], 5
mov dword [ebp - 0xb34], 0x9f19
mov dword [ebp - 0x50], 0
jmp 0x49bee6
cmp dword [ebp - 0x50], 2
jg 0x49c298
mov dword [ebp - 0x20e4], 0xa5659cde
mov dword [ebp - 0x23fc], 0x91260e2e
mov dword [ebp - 0x20f0], 0xa2fc53d
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp + eax*4 - 0x1398]
mov dword [ebp - 0x2374], eax
push 4
pop eax
shl eax, 1
imul eax, dword [ebp + eax - 0x1398], 0x6986
test eax, eax
jne 0x49bf41
cmp dword [ebp - 0x50], 0
jne 0x49bf41
and dword [ebp - 0xb0c], 0
jmp 0x49bf4b
mov dword [ebp - 0xb0c], 1
mov eax, dword [ebp - 0x50]
cmp eax, dword [ebp - 0xb0c]
jg 0x49bf62
mov dword [ebp - 0x18e8], 1
jmp 0x49bf69
and dword [ebp - 0x18e8], 0
mov eax, dword [ebp - 0x1d0]
mov dword [ebp - 0x20fc], eax
push 1
lea ecx, [ebp - 0x1348]
call fcn.0040bec0
mov ecx, dword [ebp - 0x1f8]
cmp dword [eax], ecx
jge 0x49bf98
mov dword [ebp - 0x114c], 1
jmp 0x49bf9f
and dword [ebp - 0x114c], 0
cmp dword [ebp - 0x114c], 0x8b012130
jne 0x49bfb7
mov dword [ebp - 0xb14], 1
jmp 0x49bfbe
and dword [ebp - 0xb14], 0
mov eax, dword [ebp - 0x50]
mov esi, dword [ebp + eax*4 - 0x1398]
add esi, dword [ebp - 0xb14]
push 0
lea ecx, [ebp - 0x1348]
call fcn.0040bec0
sub esi, dword [eax]
je 0x49bff0
or eax, 0xffffffff
je 0x49bff0
mov dword [ebp - 0xf3c], 1
jmp 0x49bff7
and dword [ebp - 0xf3c], 0
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp + eax*4 - 0x1398]
add eax, dword [ebp - 0xf3c]
cmp eax, dword [ebp - 0x1f8]
jl 0x49c01b
mov dword [ebp - 0xb1c], 1
jmp 0x49c022
and dword [ebp - 0xb1c], 0
cmp dword [ebp - 0xb1c], 0x9d73
jne 0x49c03a
mov dword [ebp - 0x1294], 1
jmp 0x49c041
and dword [ebp - 0x1294], 0
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x1294]
mov dword [ebp + eax*4 - 0x1398], ecx
mov dword [ebp - 0x1f8], 0xfffffffd
jmp 0x49c06a
cmp dword [ebp - 0xb4c], 0
je 0x49c2a6
jmp 0x49be77
jmp 0x49be77
lea ecx, [ebp - 0x195c]
call fcn.0040bea4
lea ecx, [ebp - 0x1348]
call fcn.0040bea4
jmp 0x49bd74
push 0x4be2
push 0x39ea
push 0x70cc
lea eax, [ebp - 0x2410]
push eax
push 0x1bc
push 0x549a
push 1
push 0x657
lea eax, [ebp - 0x2124]
push eax
push 0x3f60
push 1
push 1
call fcn.0047cf52
add esp, 0x30
mov dword [ebp - 0x518], 0xd6c05baf
mov dword [ebp - 0x3f4], 0
jmp 0x49c328
mov eax, dword [ebp - 0x3f4]
inc eax
mov dword [ebp - 0x3f4], eax
cmp dword [ebp - 0x3f4], 1
jge 0x49c344
mov eax, dword [ebp - 0x3f4]
mov dword [ebp + eax*4 - 0x115c], 2
jmp 0x49c31b
mov dword [ebp - 0x518], 0
jmp 0x49c35d
mov eax, dword [ebp - 0x518]
dec eax
mov dword [ebp - 0x518], eax
cmp dword [ebp - 0x518], 0xfffffffd
jg 0x49c41f
mov dword [ebp - 0x210], 0x248c66f5
mov dword [ebp - 0x210], 0
jmp 0x49c38d
mov eax, dword [ebp - 0x210]
inc eax
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 0
jg 0x49c41a
mov eax, dword [ebp - 0x210]
mov ecx, dword [ebp - 0x210]
mov eax, dword [ebp + eax*4 - 0x115c]
mov dword [ebp + ecx*4 - 0x115c], eax
mov byte [ebp - 0x13d], 0
push 0x4e5
push 0x5f30
push 0x5bfd
lea eax, [ebp - 0x13d]
push eax
push 1
push 0
push 0x937
push 0x39e6
push 0x45d3
push 1
push 0x44d6
push 0x52da
push 0x3445
push 0x554
push 0x5005
push 0x73f4
push 0x7e9b
push 1
push 1
call fcn.00488763
add esp, 0x4c
jmp 0x49c380
jmp 0x49c350
push 0
push 0x1ed3
push 0x3934
lea eax, [ebp - 0x14e4]
push eax
lea eax, [ebp - 0xb54]
push eax
push 0x7122
push 0x347f
push 1
lea eax, [ebp - 0x2e4]
push eax
push 1
push 0
call fcn.004800e0
add esp, 0x2c
push 0
push 0x8bf
push 1
lea eax, [ebp - 0x1824]
push eax
push 0x1018
push 0x11c4
push 0x1691
push 1
push 1
call fcn.00481b88
add esp, 0x24
lea ecx, [ebp - 0x24c8]
call fcn.0040bea4
lea ecx, [ebp - 0x2124]
call fcn.0040bea4
lea eax, [ebp - 0x1008]
push eax
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov dword [ebp - 0x1010], eax
mov dword [ebp - 0x28c], 0xc93b4e1
push 3
lea ecx, [ebp - 0x1dd4]
call fcn.0040bdd2
mov dword [ebp - 0x18f0], 0xc87778e1
push 1
lea eax, [ebp - 0x2128]
push eax
push 0
push 0x5cd6
push 0x3f3b
push 0
lea eax, [ebp - 0x1dd4]
push eax
push 0x5810
push 0x1940
call fcn.0048f757
add esp, 0x24
mov byte [ebp - 0x10c], 0
movzx eax, byte [ebp - 0x10c]
test eax, eax
je 0x49c564
push 0
push 0x23c
push 0x7b41
push 1
push 0x776b
push 0x181d
push 0x3448
push 1
push 0x61c7
push 0x3c48
push 0x76bf
push 0x7526
push 0x649b
push 0x743
push 0x70a
push 1
push 0
call fcn.0047fc91
add esp, 0x44
mov dword [ebp - 0x28c], 0
jmp 0x49c57d
cmp dword [ebp - 0x28c], 0xffffffe9
jle 0x49c838
mov dword [ebp - 0x318], 7
mov dword [ebp - 0xf5c], 0x4478
mov dword [ebp - 0x14ec], str.jgognmyxh_jiuulgel_lcomsvmr_hopthhl_tboodpb_dhkb_pufldoi_koenhdt_izarl
cmp dword [ebp - 0xf5c], 0x4590
jle 0x49c6a0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyW]
and dword [ebp - 0x3fc], 0
jmp 0x49c5ec
cmp dword [ebp - 0x3fc], 0x1f5a
jge 0x49c6a0
and dword [ebp - 0x5a0], 0
jmp 0x49c612
cmp dword [ebp - 0x5a0], 0x11de
jge 0x49c69b
mov dword [ebp - 0x1be8], 0x580090ae
mov dword [ebp - 0x1be4], 0x580090ae
mov dword [ebp - 0x1be0], 0x580090ae
mov dword [ebp - 0x1bdc], 0x580090ae
lea ecx, [ebp - 0x77d]
call fcn.0040becf
push eax
lea eax, [ebp - 0x1bd8]
push eax
lea eax, [ebp - 0x1be8]
push eax
lea ecx, [ebp - 0x2680]
call fcn.0040bed2
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x2134]
call fcn.0040be7e
mov dword [ebp - 4], 4
cmp dword [ebp - 0xf5c], 0x444b
jge 0x49c71c
push dword [ebp - 0x14ec]
call fcn.004b7f67
pop ecx
jmp 0x49c738
or dword [ebp - 4], 0xffffffff
jmp 0x49c742
mov dword [ebp - 0x14f4], 0xd633c668
mov byte [ebp - 0x175], 0
movzx eax, byte [ebp - 0x175]
test eax, eax
je 0x49c787
lea ecx, [ebp - 0x1dd4]
call fcn.0040bea4
push 1
lea ecx, [ebp - 0x2144]
call fcn.0040bdd2
push 0x1087
push 0xfb7
push 1
push 0x7f95
push 0x57c4
push 0x6697
push 1
push 0x4a5e
lea eax, [ebp - 0x2144]
push eax
lea eax, [ebp - 0x2384]
push eax
push 0x20ed
push 0x1b2e
push 1
push 0
push 0x5130
push 0x12b1
call fcn.0047f756
add esp, 0x40
mov byte [ebp - 0x10e], 0
movzx eax, byte [ebp - 0x10e]
test eax, eax
je 0x49c8c5
push 0
push 1
push 1
push 0x1039
call fcn.00490b53
add esp, 0x10
mov byte [ebp - 0x145], 0
push 1
push 1
push 0x74
lea eax, [ebp - 0x145]
push eax
push 0x1c1f
push 0x4779
push 0x6e57
push 0x2ed6
push 0x3962
push 0x64a4
push 0
push 0x50e8
push 0x2c40
push 0x1720
push 0x1f33
push 0x7a7e
push 1
push 0x309b
push 0xe4b
push 0x136c
push 1
call fcn.00484752
add esp, 0x54
lea ecx, [ebp - 0x2144]
call fcn.0040bea4
push 2
lea ecx, [ebp - 0x1d44]
call fcn.0040bdd2
mov dword [ebp - 0x520], 0
push 3
lea ecx, [ebp - 0x2154]
call fcn.0040bdd2
mov dword [ebp - 0x2138], 6
lea eax, [ebp - 0x1d44]
push eax
push 0x1ab9
push 0
push 1
push 1
push 1
push 0x3e48
push 1
lea eax, [ebp - 0x294]
push eax
call fcn.004920e7
add esp, 0x24
mov dword [ebp - 0x294], 0
jmp 0x49c9a9
mov eax, dword [ebp - 0x294]
inc eax
mov dword [ebp - 0x294], eax
cmp dword [ebp - 0x294], 3
jge 0x49c9cb
push dword [ebp - 0x294]
lea ecx, [ebp - 0x2154]
call fcn.0040bec0
mov dword [eax], 2
jmp 0x49c99c
mov dword [ebp - 0x520], 0
jmp 0x49c9e4
cmp dword [ebp - 0x520], 1
jg 0x49cb19
mov eax, dword [ebp - 0x1538]
mov dword [ebp - 0x1548], eax
mov eax, dword [ebp - 0x1540]
mov dword [ebp - 0x1550], eax
mov eax, dword [ebp - 0x1548]
mov dword [ebp - 0x344], eax
mov eax, dword [ebp - 0x1550]
mov dword [ebp - 0x1558], eax
mov eax, dword [ebp - 0x344]
mov dword [eax], 0
jmp 0x4a9daf
mov eax, dword [ebp - 0x344]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x344]
mov dword [ecx], eax
mov eax, dword [ebp - 0x344]
cmp dword [eax], 3
jge 0x4a9dd5
mov eax, dword [ebp - 0x344]
push dword [eax]
mov ecx, dword [ebp - 0x1558]
call fcn.0040bec0
mov dword [eax], 0x6318d581
jmp 0x4a9d9e
jmp 0x4a9dff
mov eax, dword [ebp - 0x1560]
mov dword [ebp - 0x1568], eax
push 0x54b2
push 0
push 1
push 0x75a1
push dword [ebp - 0x1568]
call fcn.00493d11
add esp, 0x14
jmp 0x4a9e12
push 0
push 0x552a
push 1
call fcn.00485ddb
add esp, 0xc
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret