Function at 0x4b9380
Capabilities:
Authenticate hmac
Parse credit card information
Parse pe header

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c4
mov dword [ebp - 0x1a4], 0x52
mov dword [ebp - 0xd0], 0x3b
mov dword [ebp - 0xb0], 0x31
mov dword [ebp - 0x17c], 0x5d
mov dword [ebp - 0x1a8], 0
mov dword [ebp - 0x194], 0x19
mov dword [ebp - 0x198], 0x2b
mov dword [ebp - 0x1a0], 0x59
mov dword [ebp - 0x1ac], 0x3c
mov dword [ebp - 0x14c], 0x31
mov dword [ebp - 0x1b0], 0x25
mov dword [ebp - 0x1b4], 0x34
mov dword [ebp - 0x158], 0x5e
mov dword [ebp - 0x19c], 1
mov dword [ebp - 0x150], 0x32
mov dword [ebp - 0x1b8], 0x2d
mov dword [ebp - 0x184], 0x5c
mov dword [ebp - 0x148], 0x44
mov dword [ebp - 0x15c], 0x29
mov dword [ebp - 0x180], 0x1c
mov dword [ebp - 0xb4], 0x58
mov dword [ebp - 0x154], 3
mov dword [ebp - 0x138], 0x44
mov eax, dword [ebp - 0xb4]
sub eax, 0xd
push eax
mov ecx, dword [ebp - 0x184]
add ecx, 3
push ecx
mov edx, dword [ebp - 0x154]
add edx, 0x46
push edx
mov eax, dword [ebp - 0x15c]
add eax, 0x1d
push eax
mov ecx, dword [ebp - 0xb0]
sub ecx, 0x1f
push ecx
mov edx, dword [ebp - 0x14c]
add edx, 0x1e
push edx
mov eax, dword [ebp - 0x150]
push eax
call fcn.004252e0
add esp, 0x1c
cmp dword [ebp - 0xd0], 0x3c
jge 0x4b954e
cmp dword [ebp - 0x14c], 0x3e
je 0x4b94e9
mov dword [0x4f8790], 0x1b
mov ecx, dword [0x4f8790]
sub ecx, 0x3b
mov dword [0x4f8790], ecx
mov edx, dword [ebp - 0xd0]
add edx, 1
mov dword [ebp - 0xd0], edx
mov dword [0x4f8790], 0x14
cmp dword [0x4f8790], 0xd
jle 0x4b9549
mov dword [0x4f8788], 0x32
cmp dword [0x4f8788], 0x2e
jle 0x4b9549
cmp dword [ebp - 0x150], 0x21
je 0x4b9549
mov dword [0x4f878c], 0x2e
cmp dword [0x4f878c], 0x33
jne 0x4b9549
mov eax, dword [ebp - 0xb0]
add eax, 0x4b
mov dword [ebp - 0xb0], eax
jmp 0x4b94ba
mov dword [ebp - 0x70], 0
cmp dword [ebp - 0x154], 0x13
jle 0x4b95ca
mov dword [0x4f8794], 0x31
cmp dword [0x4f8794], 0x36
je 0x4b95ca
cmp dword [ebp - 0x158], 0x5c
jle 0x4b95ca
mov dword [0x4f7dcc], 0x41
cmp dword [0x4f7dcc], 0x2d
je 0x4b95ca
cmp dword [ebp - 0x148], 0x61
jge 0x4b95ca
cmp dword [ebp - 0x158], 0xa
jge 0x4b95ca
mov dword [0x4f7dcc], 0x2c
cmp dword [0x4f7dcc], 0x2a
jne 0x4b95ca
cmp dword [ebp - 0x15c], 0x56
jne 0x4b95ca
mov ecx, dword [ebp - 0x138]
add ecx, 0x3c
mov dword [ebp - 0x138], ecx
mov edx, dword [ebp - 0xb4]
add edx, 1
mov dword [ebp - 0xb4], edx
mov dword [0x4f8794], 1
mov eax, dword [0x4f8794]
and eax, 0x16
mov dword [0x4f8794], eax
cmp dword [ebp - 0xb4], 0x59
jl 0x4b9555
mov dword [ebp - 0xd4], 0
jmp 0x4b9618
mov ecx, dword [ebp - 0xd4]
add ecx, 1
mov dword [ebp - 0xd4], ecx
mov edx, dword [0x4f7014]
xor edx, 0xc091
cmp dword [ebp - 0xd4], edx
jge 0x4bad71
mov dword [ebp - 0xe0], 0x1a
mov dword [ebp - 0x68], 0xf
mov dword [ebp - 0xe4], 0x57
mov dword [ebp - 0x1bc], 0x60
mov dword [ebp - 0x94], 0x3a
mov dword [ebp - 0x90], 0x54
mov dword [ebp - 0x64], 0x11
mov dword [ebp - 0xb8], 0x40
mov dword [ebp - 0xbc], 0x54
mov dword [ebp - 0x11c], 0x41
mov dword [ebp - 0x8c], 8
mov dword [ebp - 0x98], 0x60
mov dword [ebp - 0x164], 0x28
mov dword [ebp - 0xe8], 0x37
mov dword [ebp - 0x7c], 0x3a
mov dword [ebp - 0x88], 0x1b
mov dword [ebp - 0xec], 0x2b
mov dword [ebp - 0x78], 0x56
mov dword [ebp - 0x54], 0x30
mov dword [ebp - 0x84], 0x4b
mov dword [ebp - 0x160], 0xe
mov dword [ebp - 0x5c], 0x24
mov eax, dword [ebp - 0x7c]
sub eax, 0x46
mov dword [ebp - 0x7c], eax
mov ecx, dword [ebp - 0x70]
add ecx, 1
mov dword [ebp - 0x70], ecx
mov dword [ebp - 0xd8], 0
jmp 0x4b9727
mov edx, dword [ebp - 0xd8]
add edx, 1
mov dword [ebp - 0xd8], edx
mov eax, dword [ebp - 0x68]
sub eax, 0xe
cmp dword [ebp - 0xd8], eax
jge 0x4b9759
mov dword [0x4f7dcc], 0x3b
cmp dword [0x4f7dcc], 0x23
jle 0x4b9757
mov ecx, dword [ebp - 0x8c]
sub ecx, 0x64
mov dword [ebp - 0x8c], ecx
jmp 0x4b9718
mov edx, dword [ebp - 0x68]
add edx, 0x16
push edx
mov eax, dword [0x4f878c]
add eax, 2
push eax
mov ecx, dword [ebp - 0x5c]
add ecx, 0x3c
push ecx
mov edx, dword [ebp - 0x64]
add edx, 1
push edx
mov eax, dword [ebp - 0x54]
sub eax, 0x18
push eax
mov ecx, dword [ebp - 0x64]
add ecx, 0x2a
push ecx
mov edx, dword [ebp - 0x78]
sub edx, 0x28
push edx
mov eax, dword [ebp - 0x84]
sub eax, 0x1f
push eax
call fcn.00422e10
add esp, 0x20
mov dword [0x4f878c], 0x1e
mov dword [ebp - 0xdc], 0
jmp 0x4b97c3
mov ecx, dword [ebp - 0xdc]
add ecx, 1
mov dword [ebp - 0xdc], ecx
mov edx, dword [0x4f878c]
sub edx, 0x1d
cmp dword [ebp - 0xdc], edx
jge 0x4b97f7
cmp dword [ebp - 0x90], 0x5e
je 0x4b97f5
cmp dword [ebp - 0x94], 0x24
jle 0x4b97f5
mov eax, dword [ebp - 0x84]
and eax, 0x42
mov dword [ebp - 0x84], eax
jmp 0x4b97b4
cmp dword [ebp - 0xe4], 0x53
jne 0x4b980f
mov ecx, dword [ebp - 0x90]
sub ecx, 1
mov dword [ebp - 0x90], ecx
mov edx, dword [ebp - 0x5c]
add edx, 1
mov dword [ebp - 0x5c], edx
cmp dword [ebp - 0x94], 0x5c
jle 0x4b984b
cmp dword [ebp - 0xbc], 0x5f
jle 0x4b984b
cmp dword [ebp - 0x94], 0x3d
je 0x4b984b
cmp dword [ebp - 0x84], 0x46
je 0x4b984b
mov eax, dword [ebp - 0xb8]
sub eax, 1
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0x5c], 0x25
jl 0x4b97f7
cmp dword [ebp - 0x11c], 1
je 0x4b989a
cmp dword [ebp - 0x5c], 0x37
je 0x4b989a
cmp dword [ebp - 0x68], 0x5a
jle 0x4b989a
cmp dword [ebp - 0x160], 6
jne 0x4b989a
cmp dword [ebp - 0x5c], 0xe
jne 0x4b989a
mov dword [0x4f8790], 0x57
cmp dword [0x4f8790], 0x38
je 0x4b989a
cmp dword [ebp - 0x88], 0x35
jge 0x4b989a
mov ecx, dword [ebp - 0x78]
sub ecx, 1
mov dword [ebp - 0x78], ecx
mov edx, dword [ebp - 0x54]
add edx, 1
mov dword [ebp - 0x54], edx
cmp dword [ebp - 0x84], 0x3a
je 0x4b98df
mov dword [0x4f8790], 0x30
cmp dword [0x4f8790], 0x1c
jne 0x4b98df
cmp dword [ebp - 0x98], 0x25
je 0x4b98df
mov dword [0x4f8790], 0x18
mov eax, dword [0x4f8790]
add eax, 1
mov dword [0x4f8790], eax
cmp dword [ebp - 0x54], 0x31
jl 0x4b9851
mov dword [0x4f8790], 0x1b
cmp dword [0x4f8790], 0x43
jge 0x4b991b
cmp dword [ebp - 0x5c], 0x4b
jne 0x4b991b
mov dword [0x4f7dcc], 0x53
mov ecx, dword [0x4f7dcc]
add ecx, 0x30
mov dword [0x4f7dcc], ecx
cmp dword [ebp - 0x94], 0xc
jge 0x4b9983
cmp dword [ebp - 0x8c], 0x20
jge 0x4b9983
cmp dword [ebp - 0x54], 0x55
je 0x4b9983
cmp dword [ebp - 0x7c], 5
je 0x4b9983
cmp dword [ebp - 0x160], 0x50
jne 0x4b9983
mov dword [0x4f8790], 0x11
cmp dword [0x4f8790], 0x1b
jge 0x4b9983
cmp dword [ebp - 0x64], 0x2b
je 0x4b9983
cmp dword [ebp - 0x78], 0x16
jle 0x4b9983
mov dword [0x4f8788], 0x3d
cmp dword [0x4f8788], 0x48
jge 0x4b9983
mov edx, dword [ebp - 0x88]
sub edx, 1
mov dword [ebp - 0x88], edx
cmp dword [ebp - 0x164], 0x36
jne 0x4b99ac
cmp dword [ebp - 0xe4], 0x5a
je 0x4b99ac
mov dword [0x4f7dcc], 0xf
mov eax, dword [0x4f7dcc]
or eax, 0x2c
mov dword [0x4f7dcc], eax
mov ecx, dword [ebp - 0xe0]
add ecx, 1
mov dword [ebp - 0xe0], ecx
cmp dword [ebp - 0xe8], 0x23
jle 0x4b9a0d
cmp dword [ebp - 0xb8], 0x4f
jne 0x4b9a0d
cmp dword [ebp - 0x88], 0x10
je 0x4b9a0d
cmp dword [ebp - 0x54], 0x20
jne 0x4b9a0d
cmp dword [ebp - 0x54], 0x62
je 0x4b9a0d
mov dword [0x4f8788], 0x38
cmp dword [0x4f8788], 2
je 0x4b9a0d
cmp dword [ebp - 0x90], 0xe
je 0x4b9a0d
mov edx, dword [ebp - 0xec]
sub edx, 0x1e
mov dword [ebp - 0xec], edx
cmp dword [ebp - 0xe0], 0x1b
jl 0x4b9983
cmp dword [ebp - 0x98], 0x3b
je 0x4b9a86
cmp dword [ebp - 0x7c], 0x1a
je 0x4b9a86
cmp dword [ebp - 0xbc], 0x47
je 0x4b9a86
mov dword [0x4f7dcc], 0x5f
cmp dword [0x4f7dcc], 7
jne 0x4b9a86
cmp dword [ebp - 0x88], 0x3d
jle 0x4b9a86
cmp dword [ebp - 0x78], 0x50
jne 0x4b9a86
cmp dword [ebp - 0x8c], 8
jne 0x4b9a86
cmp dword [ebp - 0xe4], 5
jne 0x4b9a86
cmp dword [ebp - 0xe8], 0
jge 0x4b9a86
mov dword [0x4f8794], 0
mov eax, dword [0x4f8794]
xor eax, 0x4e
mov dword [0x4f8794], eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xa7
push ecx
mov edx, dword [ebp - 0xbc]
add edx, 0xb
push edx
mov eax, dword [ebp - 0xb8]
add eax, 8
push eax
mov ecx, dword [ebp - 0xe8]
add ecx, 0xf
push ecx
mov edx, dword [ebp - 0x68]
add edx, 3
push edx
mov eax, dword [ebp - 0xec]
add eax, 0x42
push eax
mov ecx, dword [ebp - 0x90]
sub ecx, 0x22
push ecx
call fcn.004252e0
add esp, 0x1c
mov edx, dword [ebp - 0x94]
add edx, 0x24
push edx
mov eax, dword [ebp - 0x68]
add eax, 0x37
push eax
call fcn.00428a80
add esp, 8
cmp dword [ebp - 0x164], 0x36
jle 0x4b9aff
mov ecx, dword [ebp - 0x64]
sub ecx, 1
mov dword [ebp - 0x64], ecx
mov dword [ebp - 0xf0], 0
jmp 0x4b9b1a
mov edx, dword [ebp - 0xf0]
add edx, 1
mov dword [ebp - 0xf0], edx
mov eax, dword [0x4f7010]
xor eax, 0x8a06
cmp dword [ebp - 0xf0], eax
jge 0x4ba813
mov dword [ebp - 0x24], 0x12
mov dword [ebp - 0x44], 0x16
mov dword [ebp - 4], 0x16
mov dword [ebp - 0x20], 0x62
mov dword [ebp - 0x48], 0x2e
mov dword [ebp - 0x38], 0x57
mov dword [ebp - 0x50], 1
mov dword [ebp - 0x28], 0x26
mov dword [ebp - 0xc], 0x32
mov dword [ebp - 0x1c], 0x15
mov dword [ebp - 8], 0x10
mov dword [ebp - 0x60], 0x37
mov dword [ebp - 0x4c], 9
mov dword [ebp - 0x74], 0x54
mov dword [ebp - 0x40], 0x51
mov dword [ebp - 0x2c], 1
mov dword [ebp - 0x10], 0x5e
mov dword [ebp - 0x30], 1
mov dword [ebp - 0x3c], 4
mov dword [ebp - 0x34], 9
mov dword [ebp - 0x18], 0x31
mov dword [ebp - 0x14], 0x46
mov dword [ebp - 0xf4], 0
jmp 0x4b9be5
mov ecx, dword [ebp - 0xf4]
add ecx, 1
mov dword [ebp - 0xf4], ecx
mov edx, dword [ebp - 0x34]
sub edx, 8
cmp dword [ebp - 0xf4], edx
jge 0x4b9c04
cmp dword [ebp - 0x40], 0x27
je 0x4b9c02
mov eax, dword [ebp - 0xc]
add eax, 1
mov dword [ebp - 0xc], eax
jmp 0x4b9bd6
mov ecx, dword [ebp - 0x44]
and ecx, 0
mov dword [ebp - 0x44], ecx
mov edx, dword [ebp - 0x10]
add edx, 1
mov dword [ebp - 0x10], edx
mov dword [0x4f8794], 0xf
cmp dword [0x4f8794], 0x3d
je 0x4b9c64
cmp dword [ebp - 0x20], 7
je 0x4b9c64
cmp dword [ebp - 0x24], 0x57
jge 0x4b9c64
mov dword [0x4f878c], 0x1a
cmp dword [0x4f878c], 0x49
jle 0x4b9c64
mov dword [0x4f8794], 0x4d
cmp dword [0x4f8794], 0x56
je 0x4b9c64
mov eax, dword [ebp - 0x1c]
or eax, 0x36
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x10], 0x5f
jl 0x4b9c04
mov dword [ebp - 0xf8], 0
jmp 0x4b9c85
mov ecx, dword [ebp - 0xf8]
add ecx, 1
mov dword [ebp - 0xf8], ecx
mov edx, dword [ebp - 8]
sub edx, 0xf
cmp dword [ebp - 0xf8], edx
jge 0x4b9ca4
cmp dword [ebp - 0x18], 0x5e
je 0x4b9ca2
mov eax, dword [ebp - 0xc]
add eax, 0x2d
mov dword [ebp - 0xc], eax
jmp 0x4b9c76
mov ecx, dword [ebp - 0x10]
add ecx, 1
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x30]
add edx, 1
mov dword [ebp - 0x30], edx
cmp dword [ebp - 0x3c], 0xf
jle 0x4b9d16
cmp dword [ebp - 0x10], 0x4b
je 0x4b9d16
cmp dword [ebp - 0x44], 0x1d
jge 0x4b9d16
cmp dword [ebp - 0xc], 4
jge 0x4b9d16
cmp dword [ebp - 8], 0x57
je 0x4b9d16
cmp dword [ebp - 4], 1
jne 0x4b9d16
cmp dword [ebp - 0x10], 0x5f
jne 0x4b9d16
cmp dword [ebp - 0x24], 0x36
jge 0x4b9d16
cmp dword [ebp - 0x38], 0x4e
jne 0x4b9d16
mov dword [0x4f8794], 0x4c
cmp dword [0x4f8794], 0x32
jle 0x4b9d16
mov dword [0x4f8794], 0x1e
mov eax, dword [0x4f8794]
and eax, 0x54
mov dword [0x4f8794], eax
cmp dword [ebp - 0x30], 2
jl 0x4b9ca4
cmp dword [ebp - 0x38], 0x58
jge 0x4b9d61
cmp dword [ebp - 0x60], 0xc
je 0x4b9d47
cmp dword [ebp - 8], 0x48
je 0x4b9d47
mov dword [0x4f8794], 0x48
mov ecx, dword [0x4f8794]
sub ecx, 1
mov dword [0x4f8794], ecx
mov edx, dword [ebp - 0x38]
add edx, 1
mov dword [ebp - 0x38], edx
cmp dword [ebp - 0x74], 0xb
jge 0x4b9d5f
mov eax, dword [ebp - 0x3c]
or eax, 0x41
mov dword [ebp - 0x3c], eax
jmp 0x4b9d1c
mov dword [ebp - 0xfc], 0
jmp 0x4b9d7c
mov ecx, dword [ebp - 0xfc]
add ecx, 1
mov dword [ebp - 0xfc], ecx
mov edx, dword [ebp - 0x40]
sub edx, 0x50
cmp dword [ebp - 0xfc], edx
jge 0x4b9d9b
cmp dword [ebp - 0x1c], 0x3c
jge 0x4b9d99
mov eax, dword [ebp - 4]
sub eax, 8
mov dword [ebp - 4], eax
jmp 0x4b9d6d
mov ecx, dword [ebp - 8]
add ecx, 0x39
push ecx
mov edx, dword [ebp - 8]
sub edx, 8
push edx
mov eax, dword [ebp - 8]
add eax, 0x15
push eax
mov ecx, dword [ebp - 0xc]
add ecx, 2
push ecx
mov edx, dword [ebp - 8]
add edx, 0x4f
push edx
mov eax, dword [0x4f8794]
sub eax, 0x2e
push eax
mov ecx, dword [ebp - 0x40]
sub ecx, 0x40
push ecx
call fcn.00428340
add esp, 0x1c
mov dword [0x4f8794], 0x1a
cmp dword [ebp - 0x3c], 0x47
jne 0x4b9e0e
cmp dword [ebp - 0x44], 0x30
jge 0x4b9e0e
mov dword [0x4f8790], 0x5a
cmp dword [0x4f8790], 0x1f
je 0x4b9e0e
cmp dword [ebp - 0x10], 0x46
je 0x4b9e0e
mov edx, dword [ebp - 0x24]
sub edx, 1
mov dword [ebp - 0x24], edx
mov eax, dword [0x4f8794]
add eax, 1
mov dword [0x4f8794], eax
cmp dword [ebp - 0x14], 0x64
jne 0x4b9e30
cmp dword [ebp - 0x38], 0x42
jne 0x4b9e30
mov ecx, dword [ebp - 0x18]
or ecx, 0x30
mov dword [ebp - 0x18], ecx
cmp dword [0x4f8794], 0x1b
jl 0x4b9de0
mov edx, dword [ebp - 0x3c]
add edx, 0x31
push edx
mov eax, dword [0x4f7dcc]
add eax, 0x51
push eax
mov ecx, dword [ebp - 0x28]
add ecx, 0x12
push ecx
mov edx, dword [ebp - 0x40]
push edx
mov eax, dword [ebp - 8]
add eax, 0x3d
push eax
mov ecx, dword [0x4f8794]
add ecx, 0x37
push ecx
mov edx, dword [ebp - 0x74]
sub edx, 0x28
push edx
mov eax, dword [0x4f7dcc]
add eax, 0x35
push eax
mov ecx, dword [0x4f7dcc]
add ecx, 0x42
push ecx
call fcn.0041ebf0
add esp, 0x24
mov edx, dword [ebp - 0x4c]
add edx, 0x1f
push edx
call fcn.00424220
add esp, 4
cmp dword [ebp - 0x34], 0xa
jge 0x4b9fba
cmp dword [ebp - 0x2c], 0x1d
je 0x4b9f6d
cmp dword [ebp - 0x20], 1
je 0x4b9f6d
cmp dword [ebp - 0x18], 0x2e
jge 0x4b9f6d
cmp dword [ebp - 0x18], 0x2b
je 0x4b9f6d
mov dword [0x4f8790], 0x48
cmp dword [0x4f8790], 0x34
jne 0x4b9f6d
cmp dword [ebp - 0x4c], 7
jne 0x4b9f6d
mov dword [0x4f7dcc], 0x53
cmp dword [0x4f7dcc], 0xa
jne 0x4b9f6d
mov dword [0x4f878c], 0x37
cmp dword [0x4f878c], 0x2a
je 0x4b9f6d
cmp dword [ebp - 0x3c], 0x13
je 0x4b9f6d
cmp dword [ebp - 0xc], 0x2a
jge 0x4b9f6d
cmp dword [ebp - 0x14], 0x2e
jle 0x4b9f6d
cmp dword [ebp - 0x50], 0x5b
jge 0x4b9f6d
cmp dword [ebp - 0x14], 0x3a
jle 0x4b9f6d
cmp dword [ebp - 0x24], 0x5c
jne 0x4b9f6d
cmp dword [ebp - 0x20], 0x24
jge 0x4b9f6d
mov dword [0x4f8790], 0x4b
cmp dword [0x4f8790], 0x43
jne 0x4b9f6d
cmp dword [ebp - 0x60], 0xb
je 0x4b9f6d
cmp dword [ebp - 0x30], 0x4c
je 0x4b9f6d
cmp dword [ebp - 0xc], 0x3f
je 0x4b9f6d
cmp dword [ebp - 4], 0x2c
je 0x4b9f6d
mov eax, dword [ebp - 4]
add eax, 1
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x34]
add ecx, 1
mov dword [ebp - 0x34], ecx
cmp dword [ebp - 0x30], 0x4b
jle 0x4b9fb5
cmp dword [ebp - 0x48], 0x49
jge 0x4b9fb5
cmp dword [ebp - 0x1c], 0x29
jle 0x4b9fb5
cmp dword [ebp - 0x1c], 0x5c
jge 0x4b9fb5
cmp dword [ebp - 0x14], 0xa
jle 0x4b9fb5
cmp dword [ebp - 0x2c], 0x2c
je 0x4b9fb5
cmp dword [ebp - 0x2c], 0x25
je 0x4b9fb5
cmp dword [ebp - 0x28], 0x15
jge 0x4b9fb5
cmp dword [ebp - 0x20], 0x2d
jne 0x4b9fb5
mov edx, dword [ebp - 0x38]
or edx, 0x1a
mov dword [ebp - 0x38], edx
jmp 0x4b9e96
mov eax, dword [ebp - 0x70]
add eax, 1
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x100], 0
jmp 0x4b9fde
mov ecx, dword [ebp - 0x100]
add ecx, 1
mov dword [ebp - 0x100], ecx
mov edx, dword [ebp - 0x44]
add edx, 1
cmp dword [ebp - 0x100], edx
jge 0x4ba03b
cmp dword [ebp - 0x30], 0x26
jne 0x4ba039
cmp dword [ebp - 0x14], 0x48
jle 0x4ba039
cmp dword [ebp - 0x2c], 0x5c
jne 0x4ba039
mov dword [0x4f7dcc], 1
cmp dword [0x4f7dcc], 0x39
jne 0x4ba039
cmp dword [ebp - 0x4c], 0x60
jle 0x4ba039
cmp dword [ebp - 4], 0x30
jle 0x4ba039
mov dword [0x4f8794], 0x30
cmp dword [0x4f8794], 0x62
jge 0x4ba039
mov eax, dword [ebp - 0x2c]
sub eax, 1
mov dword [ebp - 0x2c], eax
jmp 0x4b9fcf
cmp dword [ebp - 0x74], 0x44
jge 0x4ba0a7
mov dword [0x4f8794], 0x2e
cmp dword [0x4f8794], 0
je 0x4ba0a7
cmp dword [ebp - 0x14], 3
jle 0x4ba0a7
cmp dword [ebp - 0x20], 0x36
jne 0x4ba0a7
cmp dword [ebp - 0x24], 0x40
jne 0x4ba0a7
cmp dword [ebp - 0xc], 0x28
jne 0x4ba0a7
cmp dword [ebp - 0x60], 0x5a
jge 0x4ba0a7
cmp dword [ebp - 0x30], 0x10
jle 0x4ba0a7
mov dword [0x4f878c], 0x1b
cmp dword [0x4f878c], 0x5c
jne 0x4ba0a7
mov dword [0x4f878c], 0
cmp dword [0x4f878c], 0xe
jne 0x4ba0a7
mov ecx, dword [ebp - 0x28]
and ecx, 0x26
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x104], 0
jmp 0x4ba0c2
mov edx, dword [ebp - 0x104]
add edx, 1
mov dword [ebp - 0x104], edx
mov eax, dword [ebp - 0x10]
sub eax, 0x5f
cmp dword [ebp - 0x104], eax
jge 0x4ba0db
mov ecx, dword [ebp - 4]
xor ecx, 0x5b
mov dword [ebp - 4], ecx
jmp 0x4ba0b3
mov dword [0x4f8794], 0x53
cmp dword [ebp - 0x4c], 6
jge 0x4ba119
mov dword [0x4f8790], 0x4d
cmp dword [0x4f8790], 0x51
je 0x4ba119
cmp dword [ebp - 4], 0x5c
jle 0x4ba119
cmp dword [ebp - 0x48], 8
jge 0x4ba119
cmp dword [ebp - 0x2c], 0x30
je 0x4ba119
mov edx, dword [ebp - 0x60]
sub edx, 0x51
mov dword [ebp - 0x60], edx
mov eax, dword [0x4f8794]
add eax, 1
mov dword [0x4f8794], eax
mov dword [0x4f8788], 0x23
cmp dword [0x4f8788], 0x47
jge 0x4ba16a
cmp dword [ebp - 4], 5
jge 0x4ba16a
cmp dword [ebp - 0x44], 0x1e
jle 0x4ba16a
cmp dword [ebp - 4], 0x33
jge 0x4ba16a
cmp dword [ebp - 0x74], 0x43
jne 0x4ba16a
mov dword [0x4f7dcc], 0x33
mov ecx, dword [0x4f7dcc]
sub ecx, 0x56
mov dword [0x4f7dcc], ecx
cmp dword [0x4f8794], 0x54
jl 0x4ba0e5
mov edx, dword [ebp - 0x28]
add edx, 0xf
push edx
mov eax, dword [ebp - 8]
sub eax, 0x10
push eax
mov ecx, dword [ebp - 0x3c]
sub ecx, 4
push ecx
mov edx, dword [ebp - 0x18]
sub edx, 5
push edx
mov eax, dword [ebp - 0xc]
sub eax, 0x3b
push eax
mov ecx, dword [ebp - 0x48]
add ecx, 0x22
push ecx
mov edx, dword [ebp - 0x34]
add edx, 0x33
push edx
mov eax, dword [ebp - 0x74]
sub eax, 0x4e
push eax
mov ecx, dword [ebp - 0x60]
add ecx, 0x63
push ecx
call fcn.0041e030
add esp, 0x24
mov dword [ebp - 0x108], 0
jmp 0x4ba1d9
mov edx, dword [ebp - 0x108]
add edx, 1
mov dword [ebp - 0x108], edx
mov eax, dword [ebp - 0x2c]
sub eax, 1
cmp dword [ebp - 0x108], eax
jge 0x4ba1f2
mov ecx, dword [ebp - 0x28]
sub ecx, 0x36
mov dword [ebp - 0x28], ecx
jmp 0x4ba1ca
mov edx, dword [ebp - 0x14]
add edx, 0x16
push edx
mov eax, dword [ebp - 0x18]
add eax, 0x2d
push eax
mov ecx, dword [ebp - 0x2c]
add ecx, 0x49
push ecx
call fcn.00422f40
add esp, 0xc
mov edx, dword [ebp - 0x4c]
add edx, 0x3f
push edx
mov eax, dword [ebp - 0xc]
sub eax, 0x1f
push eax
call fcn.004223a0
add esp, 8
mov dword [0x4f8790], 0x2d
cmp dword [ebp - 0x40], 1
jne 0x4ba244
cmp dword [ebp - 0x44], 0x51
je 0x4ba244
mov ecx, dword [ebp - 4]
sub ecx, 0x64
mov dword [ebp - 4], ecx
mov edx, dword [0x4f8790]
add edx, 1
mov dword [0x4f8790], edx
cmp dword [ebp - 0x24], 0x2c
jle 0x4ba274
cmp dword [ebp - 0x18], 0x28
jne 0x4ba274
cmp dword [ebp - 0x24], 2
jle 0x4ba274
cmp dword [ebp - 0x24], 0x5e
je 0x4ba274
mov eax, dword [ebp - 0x14]
add eax, 0x39
mov dword [ebp - 0x14], eax
cmp dword [0x4f8790], 0x2e
jl 0x4ba22f
mov dword [ebp - 0x10c], 0
jmp 0x4ba298
mov ecx, dword [ebp - 0x10c]
add ecx, 1
mov dword [ebp - 0x10c], ecx
mov edx, dword [ebp - 0x24]
sub edx, 0x12
cmp dword [ebp - 0x10c], edx
jge 0x4ba2bf
mov dword [0x4f7dcc], 0x23
mov eax, dword [0x4f7dcc]
sub eax, 1
mov dword [0x4f7dcc], eax
jmp 0x4ba289
cmp dword [ebp - 0x4c], 0x47
jge 0x4ba2ce
mov ecx, dword [ebp - 8]
xor ecx, 0x20
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 4], edx
mov dword [0x4f8790], 0x15
cmp dword [0x4f8790], 0x58
je 0x4ba2f3
mov eax, dword [ebp - 0x30]
add eax, 1
mov dword [ebp - 0x30], eax
cmp dword [ebp - 4], 0xfffffff1
jl 0x4ba2bf
mov dword [ebp - 0x110], 0
jmp 0x4ba314
mov ecx, dword [ebp - 0x110]
add ecx, 1
mov dword [ebp - 0x110], ecx
mov edx, dword [ebp - 0x1c]
sub edx, 0x36
cmp dword [ebp - 0x110], edx
jge 0x4ba32d
mov eax, dword [ebp - 0x40]
and eax, 0x35
mov dword [ebp - 0x40], eax
jmp 0x4ba305
mov ecx, dword [ebp - 0x20]
xor ecx, 0x46
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x34]
xor edx, 0x51
mov dword [ebp - 0x34], edx
mov eax, dword [ebp - 0x48]
add eax, 1
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x38], 0x3a
jne 0x4ba357
mov ecx, dword [ebp - 0x50]
sub ecx, 0x34
mov dword [ebp - 0x50], ecx
cmp dword [ebp - 0x48], 0x2f
jl 0x4ba336
mov edx, dword [ebp - 4]
sub edx, 0x36
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0x14]
add eax, 1
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x18], 0xe
jne 0x4ba37e
mov ecx, dword [ebp - 0x10]
add ecx, 0x28
mov dword [ebp - 0x10], ecx
cmp dword [ebp - 0x14], 0x80
jl 0x4ba35d
cmp dword [ebp - 0x20], 0x25
jge 0x4ba3ba
mov dword [0x4f7dcc], 0xf
mov edx, dword [0x4f7dcc]
or edx, 0x27
mov dword [0x4f7dcc], edx
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 8]
add ecx, 0x2f
mov dword [ebp - 8], ecx
jmp 0x4ba387
mov dword [0x4f8790], 0x38
cmp dword [ebp - 0x44], 0x4b
jge 0x4ba3eb
cmp dword [ebp - 0x50], 0x15
jne 0x4ba3eb
cmp dword [ebp - 0xc], 0x16
je 0x4ba3eb
cmp dword [ebp - 8], 0x16
je 0x4ba3eb
cmp dword [ebp - 0x10], 0x52
jle 0x4ba3eb
mov edx, dword [ebp - 4]
sub edx, 1
mov dword [ebp - 4], edx
mov eax, dword [0x4f8790]
add eax, 1
mov dword [0x4f8790], eax
mov ecx, dword [ebp - 0x20]
xor ecx, 0x1c
mov dword [ebp - 0x20], ecx
cmp dword [0x4f8790], 0x39
jl 0x4ba3c4
mov dword [0x4f8788], 0x59
cmp dword [0x4f8788], 0x10
jne 0x4ba426
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0xc]
add eax, 1
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x28]
add ecx, 0xd
mov dword [ebp - 0x28], ecx
cmp dword [ebp - 0xc], 0x61
jl 0x4ba40a
mov dword [ebp - 0x114], 0
jmp 0x4ba459
mov edx, dword [ebp - 0x114]
add edx, 1
mov dword [ebp - 0x114], edx
mov eax, dword [ebp - 4]
add eax, 0x45
cmp dword [ebp - 0x114], eax
jge 0x4ba478
cmp dword [ebp - 0x14], 0x31
jne 0x4ba476
mov ecx, dword [ebp - 0x28]
and ecx, 0x5e
mov dword [ebp - 0x28], ecx
jmp 0x4ba44a
mov dword [ebp - 0x118], 0
jmp 0x4ba493
mov edx, dword [ebp - 0x118]
add edx, 1
mov dword [ebp - 0x118], edx
mov eax, dword [ebp - 0x118]
cmp eax, dword [ebp - 0x50]
jge 0x4ba4c2
mov dword [0x4f7dcc], 1
cmp dword [0x4f7dcc], 0xa
je 0x4ba4c0
cmp dword [ebp - 0x38], 0x11
je 0x4ba4c0
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x4ba484
cmp dword [ebp - 0x50], 0x4c
jne 0x4ba4d1
mov edx, dword [ebp - 0x1c]
xor edx, 0x53
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xc]
add eax, 1
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0x1c], 0x15
jge 0x4ba502
mov dword [0x4f8788], 0x5b
cmp dword [0x4f8788], 0x33
jge 0x4ba502
cmp dword [ebp - 0x34], 0x4a
jge 0x4ba502
mov ecx, dword [ebp - 8]
add ecx, 0x4b
mov dword [ebp - 8], ecx
cmp dword [ebp - 0xc], 0x62
jl 0x4ba4c2
mov edx, dword [ebp - 0x1c]
sub edx, 0x2d
push edx
mov eax, dword [ebp - 0x18]
add eax, 0x18
push eax
mov ecx, dword [ebp - 0x60]
add ecx, 0x43
push ecx
mov edx, dword [0x4f7dcc]
add edx, 0x52
push edx
mov eax, dword [0x4f8788]
sub eax, 0x13
push eax
call fcn.00428160
add esp, 0x14
mov dword [0x4f8794], 0x3b
cmp dword [0x4f8794], 0x3c
jge 0x4ba5b0
cmp dword [ebp - 0x18], 0x46
je 0x4ba570
cmp dword [ebp - 0x50], 0x1d
je 0x4ba570
mov dword [0x4f8788], 0x45
mov ecx, dword [0x4f8788]
add ecx, 1
mov dword [0x4f8788], ecx
mov edx, dword [0x4f8794]
add edx, 1
mov dword [0x4f8794], edx
mov dword [0x4f878c], 0x4c
cmp dword [0x4f878c], 0
jne 0x4ba5ae
mov dword [0x4f8790], 0x1b
cmp dword [0x4f8790], 0x5d
jge 0x4ba5ae
mov eax, dword [ebp - 0x3c]
and eax, 0x5c
mov dword [ebp - 0x3c], eax
jmp 0x4ba542
call fcn.004257e0
mov dword [0x4f7dcc], 0x32
cmp dword [0x4f7dcc], 0x33
jge 0x4ba6a6
mov dword [0x4f8788], 0x43
cmp dword [0x4f8788], 0x4c
jge 0x4ba656
cmp dword [ebp - 0x34], 0x2d
jge 0x4ba656
cmp dword [ebp - 0x1c], 0xe
je 0x4ba656
cmp dword [ebp - 0x10], 0xf
jne 0x4ba656
cmp dword [ebp - 0x74], 8
jne 0x4ba656
cmp dword [ebp - 0x38], 0x12
jge 0x4ba656
cmp dword [ebp - 0x44], 0x13
jle 0x4ba656
cmp dword [ebp - 0x48], 0x60
jge 0x4ba656
cmp dword [ebp - 8], 0x22
jne 0x4ba656
cmp dword [ebp - 0x14], 0
jge 0x4ba656
mov dword [0x4f8788], 0x60
cmp dword [0x4f8788], 0x1e
je 0x4ba656
cmp dword [ebp - 0x18], 0x41
jge 0x4ba656
cmp dword [ebp - 0x30], 0x64
jne 0x4ba656
cmp dword [ebp - 0x20], 0x2a
jge 0x4ba656
mov dword [0x4f8788], 0x23
cmp dword [0x4f8788], 0x38
jge 0x4ba656
mov ecx, dword [ebp - 0x10]
xor ecx, 0x29
mov dword [ebp - 0x10], ecx
mov edx, dword [0x4f7dcc]
add edx, 1
mov dword [0x4f7dcc], edx
cmp dword [ebp - 8], 0x62
jne 0x4ba6a1
cmp dword [ebp - 8], 0x58
jge 0x4ba6a1
cmp dword [ebp - 0x18], 0x36
jge 0x4ba6a1
mov dword [0x4f878c], 0x5f
cmp dword [0x4f878c], 0x4e
jne 0x4ba6a1
mov dword [0x4f8794], 0x2d
mov eax, dword [0x4f8794]
add eax, 1
mov dword [0x4f8794], eax
jmp 0x4ba5bf
mov dword [0x4f8788], 0x5e
cmp dword [0x4f8788], 0x32
je 0x4ba6c2
mov ecx, dword [ebp - 0x48]
or ecx, 0x29
mov dword [ebp - 0x48], ecx
mov edx, dword [0x4f8794]
add edx, 0x2f
push edx
mov eax, dword [0x4f8790]
add eax, 0x48
push eax
mov ecx, dword [ebp - 0x34]
sub ecx, 0x50
push ecx
mov edx, dword [ebp - 0x18]
add edx, 0x1b
push edx
mov eax, dword [ebp - 0x18]
add eax, 0x13
push eax
mov ecx, dword [ebp - 0x10]
add ecx, 0x1a
push ecx
call fcn.004295b0
add esp, 0x18
mov dword [0x4f8794], 0x12
mov edx, dword [0x4f8794]
sub edx, 1
mov dword [0x4f8794], edx
cmp dword [ebp - 0x2c], 3
jge 0x4ba7ac
cmp dword [ebp - 0x14], 0x25
je 0x4ba795
mov dword [0x4f8794], 0x36
cmp dword [0x4f8794], 0x41
jle 0x4ba795
cmp dword [ebp - 0x34], 0x46
jle 0x4ba795
mov dword [0x4f8794], 0x5d
cmp dword [0x4f8794], 0x12
jne 0x4ba795
cmp dword [ebp - 0x14], 0x4b
jle 0x4ba795
cmp dword [ebp - 0x4c], 0x41
je 0x4ba795
cmp dword [ebp - 0x3c], 0x3c
je 0x4ba795
cmp dword [ebp - 0x18], 0x1f
je 0x4ba795
cmp dword [ebp - 0x4c], 0x41
jle 0x4ba795
cmp dword [ebp - 0x30], 0x2a
jne 0x4ba795
cmp dword [ebp - 0x10], 0xf
je 0x4ba795
cmp dword [ebp - 0x28], 0x59
jne 0x4ba795
mov dword [0x4f8794], 0x1d
mov eax, dword [0x4f8794]
sub eax, 0x42
mov dword [0x4f8794], eax
mov ecx, dword [ebp - 0x2c]
add ecx, 1
mov dword [ebp - 0x2c], ecx
mov edx, dword [ebp - 0x1c]
or edx, 0x47
mov dword [ebp - 0x1c], edx
jmp 0x4ba712
mov dword [0x4f878c], 0x5f
mov eax, dword [ebp - 0x40]
sub eax, 1
mov dword [ebp - 0x40], eax
mov ecx, dword [0x4f878c]
add ecx, 1
mov dword [0x4f878c], ecx
cmp dword [ebp - 0x50], 0x51
jge 0x4ba805
cmp dword [ebp - 0xc], 0x41
jge 0x4ba805
cmp dword [ebp - 0x30], 0x62
jge 0x4ba805
cmp dword [ebp - 0x40], 0x12
jne 0x4ba805
cmp dword [ebp - 8], 8
je 0x4ba805
mov dword [0x4f7dcc], 0x4b
mov edx, dword [0x4f7dcc]
or edx, 0x31
mov dword [0x4f7dcc], edx
cmp dword [0x4f878c], 0x60
jl 0x4ba7b6
jmp 0x4b9b0b
cmp dword [ebp - 0x64], 0x62
jne 0x4ba860
cmp dword [ebp - 0x78], 0x3f
jne 0x4ba860
cmp dword [ebp - 0x54], 0x30
jne 0x4ba860
cmp dword [ebp - 0x64], 0x36
jle 0x4ba860
mov dword [0x4f7dcc], 0xf
cmp dword [0x4f7dcc], 2
jne 0x4ba860
mov dword [0x4f7dcc], 0x51
cmp dword [0x4f7dcc], 0x57
jle 0x4ba860
mov eax, dword [ebp - 0x11c]
add eax, 1
mov dword [ebp - 0x11c], eax
mov ecx, dword [ebp - 0x98]
add ecx, 1
mov dword [ebp - 0x98], ecx
mov edx, dword [ebp - 0x7c]
xor edx, 0x64
mov dword [ebp - 0x7c], edx
cmp dword [ebp - 0x98], 0x61
jl 0x4ba813
mov dword [ebp - 0x120], 0
jmp 0x4ba89c
mov eax, dword [ebp - 0x120]
add eax, 1
mov dword [ebp - 0x120], eax
mov ecx, dword [ebp - 0xbc]
sub ecx, 0x53
cmp dword [ebp - 0x120], ecx
jge 0x4ba8b8
mov edx, dword [ebp - 0x68]
and edx, 0x39
mov dword [ebp - 0x68], edx
jmp 0x4ba88d
mov dword [ebp - 0x124], 0
jmp 0x4ba8d3
mov eax, dword [ebp - 0x124]
add eax, 1
mov dword [ebp - 0x124], eax
mov ecx, dword [0x4f700c]
xor ecx, 0x78df
cmp dword [ebp - 0x124], ecx
jge 0x4bad6c
mov dword [ebp - 0x80], 4
mov dword [ebp - 0x174], 0x1b
mov dword [ebp - 0x1c0], 0x2e
mov dword [ebp - 0x178], 0x64
mov dword [ebp - 0x170], 0x50
mov dword [ebp - 0x18c], 4
mov dword [ebp - 0xc8], 0x3f
mov dword [ebp - 0xac], 0x42
mov dword [ebp - 0xa8], 0x59
mov dword [ebp - 0x188], 0x10
mov dword [ebp - 0x58], 0x17
mov dword [ebp - 0xcc], 0x32
mov dword [ebp - 0x168], 0x15
mov dword [ebp - 0x16c], 0x46
mov dword [ebp - 0x190], 0x22
mov dword [ebp - 0x6c], 8
mov dword [ebp - 0x130], 0x28
mov dword [ebp - 0xa4], 0x3c
mov dword [ebp - 0x9c], 0x50
mov dword [ebp - 0xa0], 0x15
mov dword [ebp - 0x1c4], 0x4f
mov dword [ebp - 0xc0], 0x5e
mov dword [ebp - 0xc4], 0x37
mov edx, dword [ebp - 0x168]
add edx, 0x5b
mov dword [ebp - 0x168], edx
mov eax, dword [ebp - 0x6c]
xor eax, 1
mov dword [ebp - 0x6c], eax
mov ecx, dword [ebp - 0x9c]
add ecx, 1
mov dword [ebp - 0x9c], ecx
mov dword [0x4f8794], 2
cmp dword [0x4f8794], 0x10
je 0x4baa0b
mov edx, dword [ebp - 0x80]
add edx, 1
mov dword [ebp - 0x80], edx
cmp dword [ebp - 0x9c], 0x51
jl 0x4ba9d7
mov dword [ebp - 0x128], 0
jmp 0x4baa2f
mov eax, dword [ebp - 0x128]
add eax, 1
mov dword [ebp - 0x128], eax
mov ecx, dword [ebp - 0xcc]
sub ecx, 0x31
cmp dword [ebp - 0x128], ecx
jge 0x4baa6d
mov dword [0x4f878c], 0x3e
cmp dword [0x4f878c], 0x34
jge 0x4baa6b
cmp dword [ebp - 0xa4], 0x16
jne 0x4baa6b
mov edx, dword [ebp - 0xc0]
or edx, 0x11
mov dword [ebp - 0xc0], edx
jmp 0x4baa20
cmp dword [ebp - 0xc8], 0x40
jge 0x4baaa8
mov eax, dword [ebp - 0xa0]
or eax, 0x39
mov dword [ebp - 0xa0], eax
mov ecx, dword [ebp - 0xc8]
add ecx, 1
mov dword [ebp - 0xc8], ecx
cmp dword [ebp - 0x9c], 0x1b
je 0x4baaa6
mov edx, dword [ebp - 0x58]
or edx, 0x4e
mov dword [ebp - 0x58], edx
jmp 0x4baa6d
cmp dword [ebp - 0x178], 0x5c
jne 0x4baae1
cmp dword [ebp - 0xc0], 0xc
jge 0x4baae1
cmp dword [ebp - 0xa8], 0x55
jne 0x4baae1
cmp dword [ebp - 0x6c], 0x62
je 0x4baae1
cmp dword [ebp - 0xc4], 0x5a
jle 0x4baae1
mov eax, dword [ebp - 0x16c]
sub eax, 1
mov dword [ebp - 0x16c], eax
mov ecx, dword [ebp - 0x58]
add ecx, 1
mov dword [ebp - 0x58], ecx
mov dword [0x4f7dcc], 0x1c
cmp dword [0x4f7dcc], 0x51
jle 0x4bab0c
mov edx, dword [ebp - 0xa8]
or edx, 0x34
mov dword [ebp - 0xa8], edx
cmp dword [ebp - 0x58], 0x60
jl 0x4baaa8
cmp dword [ebp - 0xc0], 0x50
je 0x4bab46
mov dword [0x4f7dcc], 0x15
cmp dword [0x4f7dcc], 0x17
je 0x4bab46
cmp dword [ebp - 0xac], 0x18
je 0x4bab46
mov eax, dword [ebp - 0xc4]
xor eax, 0x5b
mov dword [ebp - 0xc4], eax
mov ecx, dword [ebp - 0xa4]
add ecx, 0x20
push ecx
mov edx, dword [0x4f8790]
add edx, 0x4c
push edx
mov eax, dword [ebp - 0xcc]
sub eax, 0x27
push eax
mov ecx, dword [ebp - 0x170]
sub ecx, 4
push ecx
mov edx, dword [ebp - 0xa8]
sub edx, 0x15
push edx
mov eax, dword [0x4f8794]
add eax, 0x61
push eax
call fcn.004295b0
add esp, 0x18
cmp dword [ebp - 0x188], 0x16
jne 0x4babaa
cmp dword [ebp - 0xa0], 0x15
je 0x4babaa
mov ecx, dword [ebp - 0x130]
or ecx, 0x62
mov dword [ebp - 0x130], ecx
mov dword [ebp - 0x12c], 0
jmp 0x4babc5
mov edx, dword [ebp - 0x12c]
add edx, 1
mov dword [ebp - 0x12c], edx
mov eax, dword [ebp - 0xac]
sub eax, 0x41
cmp dword [ebp - 0x12c], eax
jge 0x4bac1e
cmp dword [ebp - 0x9c], 0x2d
jge 0x4bac1c
cmp dword [ebp - 0xc4], 0x32
jge 0x4bac1c
cmp dword [ebp - 0xa4], 0x13
je 0x4bac1c
mov dword [0x4f8794], 1
cmp dword [0x4f8794], 0x27
jne 0x4bac1c
cmp dword [ebp - 0xa4], 0x36
jle 0x4bac1c
cmp dword [ebp - 0x58], 0x1f
je 0x4bac1c
mov ecx, dword [ebp - 0x80]
add ecx, 1
mov dword [ebp - 0x80], ecx
jmp 0x4babb6
mov edx, dword [ebp - 0x70]
add edx, 1
mov dword [ebp - 0x70], edx
mov dword [ebp - 0x134], 0
jmp 0x4bac42
mov eax, dword [ebp - 0x134]
add eax, 1
mov dword [ebp - 0x134], eax
mov ecx, dword [ebp - 0x130]
sub ecx, 0x69
cmp dword [ebp - 0x134], ecx
jge 0x4bac8f
cmp dword [ebp - 0x170], 0x36
je 0x4bac8d
cmp dword [ebp - 0xc8], 0x46
jne 0x4bac8d
mov dword [0x4f8788], 0x4c
cmp dword [0x4f8788], 0x5a
je 0x4bac8d
cmp dword [ebp - 0x80], 0xa
jle 0x4bac8d
mov edx, dword [ebp - 0xa0]
sub edx, 1
mov dword [ebp - 0xa0], edx
jmp 0x4bac33
cmp dword [ebp - 0x18c], 0x14
jge 0x4bacaa
cmp dword [ebp - 0xcc], 0x24
jge 0x4bacaa
mov eax, dword [ebp - 0x58]
add eax, 1
mov dword [ebp - 0x58], eax
mov dword [0x4f8788], 0x4d
mov ecx, dword [0x4f8788]
sub ecx, 0x13
mov dword [0x4f8788], ecx
mov edx, dword [ebp - 0x6c]
add edx, 1
mov dword [ebp - 0x6c], edx
mov eax, dword [ebp - 0x174]
sub eax, 1
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x6c], 0xa
jl 0x4bacaa
cmp dword [ebp - 0xac], 0x43
jge 0x4bad67
cmp dword [ebp - 0x190], 0x40
jle 0x4bad2d
cmp dword [ebp - 0xcc], 0x54
jle 0x4bad2d
cmp dword [ebp - 0xa4], 0x18
jne 0x4bad2d
cmp dword [ebp - 0xa8], 0x20
jle 0x4bad2d
cmp dword [ebp - 0x80], 0x5f
jne 0x4bad2d
mov dword [0x4f8788], 0x36
mov ecx, dword [0x4f8788]
and ecx, 0x21
mov dword [0x4f8788], ecx
mov edx, dword [ebp - 0xac]
add edx, 1
mov dword [ebp - 0xac], edx
cmp dword [ebp - 0x178], 0x30
jle 0x4bad62
cmp dword [ebp - 0x6c], 0x22
jge 0x4bad62
mov dword [0x4f8788], 0x26
mov eax, dword [0x4f8788]
or eax, 0x22
mov dword [0x4f8788], eax
jmp 0x4bace1
jmp 0x4ba8c4
jmp 0x4b9609
mov dword [ebp - 0x13c], 0
jmp 0x4bad8c
mov ecx, dword [ebp - 0x13c]
add ecx, 1
mov dword [ebp - 0x13c], ecx
mov edx, dword [ebp - 0x138]
sub edx, 0x43
cmp dword [ebp - 0x13c], edx
jge 0x4badd1
cmp dword [ebp - 0x194], 0x5b
je 0x4badcf
cmp dword [ebp - 0xb0], 0x60
jge 0x4badcf
cmp dword [ebp - 0x180], 0x55
jge 0x4badcf
mov dword [0x4f8794], 0x16
mov eax, dword [0x4f8794]
or eax, 0x1f
mov dword [0x4f8794], eax
jmp 0x4bad7d
mov dword [ebp - 0x140], 0
jmp 0x4badec
mov ecx, dword [ebp - 0x140]
add ecx, 1
mov dword [ebp - 0x140], ecx
mov edx, dword [ebp - 0x198]
sub edx, 0x2a
cmp dword [ebp - 0x140], edx
jge 0x4bae39
mov dword [0x4f8788], 0x4f
cmp dword [0x4f8788], 0x45
jne 0x4bae37
cmp dword [ebp - 0xb0], 0xd
je 0x4bae37
cmp dword [ebp - 0x19c], 0x14
jge 0x4bae37
cmp dword [ebp - 0x1a0], 0x63
jne 0x4bae37
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x17c], eax
jmp 0x4baddd
mov eax, dword [ebp - 0x70]
jmp 0x4baea1
mov esp, ebp
pop ebp
ret