Function at 0x4af0c0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x3e8
mov eax, 0
mov ecx, dword [0x4fa1a0]
mov edx, dword [0x4fa19c]
sub eax, 1
mov esi, ecx
add esi, eax
imul ecx, esi
and ecx, 1
cmp ecx, 0
sete bl
and bl, 1
mov byte [ebp - 0x6e], bl
cmp edx, 0xa
setl bl
and bl, 1
mov byte [ebp - 0x6d], bl
mov dword [ebp - 0x74], 0xeabe665c
mov eax, dword [ebp - 0x74]
mov ecx, eax
sub ecx, 0x7e2da9aa
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x7c], ecx
jg 0x4afc68
jmp 0x4af130
mov eax, dword [ebp - 0x78]
sub eax, 0x7d089d4a
mov dword [ebp - 0x80], eax
jg 0x4afc4f
jmp 0x4af146
mov eax, dword [ebp - 0x78]
sub eax, 0x7bb8d8cd
mov dword [ebp - 0x84], eax
jg 0x4afc36
jmp 0x4af15f
mov eax, dword [ebp - 0x78]
sub eax, 0x78cb3adf
mov dword [ebp - 0x88], eax
jg 0x4afc1d
jmp 0x4af178
mov eax, dword [ebp - 0x78]
sub eax, 0x73fdaeb2
mov dword [ebp - 0x8c], eax
jg 0x4afc04
jmp 0x4af191
mov eax, dword [ebp - 0x78]
sub eax, 0x812000e3
mov dword [ebp - 0x90], eax
jg 0x4af1c3
jmp 0x4af1aa
mov eax, dword [ebp - 0x78]
sub eax, 0x80cdce50
mov dword [ebp - 0x94], eax
je 0x4b0de3
jmp 0x4afc81
mov eax, dword [ebp - 0x78]
sub eax, 0x851a94f2
mov dword [ebp - 0x98], eax
jg 0x4af1f5
jmp 0x4af1dc
mov eax, dword [ebp - 0x78]
sub eax, 0x812000e4
mov dword [ebp - 0x9c], eax
je 0x4b16e9
jmp 0x4afc81
mov eax, dword [ebp - 0x78]
sub eax, 0x87093202
mov dword [ebp - 0xa0], eax
jg 0x4af227
jmp 0x4af20e
mov eax, dword [ebp - 0x78]
sub eax, 0x851a94f3
mov dword [ebp - 0xa4], eax
je 0x4b16f5
jmp 0x4afc81
mov eax, dword [ebp - 0x78]
sub eax, 0x9031170b
mov dword [ebp - 0xa8], eax
jg 0x4af259
jmp 0x4af240
mov eax, dword [ebp - 0x78]
sub eax, 0x87093203
mov dword [ebp - 0xac], eax
je 0x4b031c
jmp 0x4afc81
mov eax, dword [ebp - 0x78]
sub eax, 0x90e13431
mov dword [ebp - 0xb0], eax
jg 0x4af28b
jmp 0x4af272
mov eax, dword [ebp - 0x78]
sub eax, 0x9031170c
mov dword [ebp - 0xb4], eax
je 0x4b097f
jmp 0x4afc81
mov eax, dword [ebp - 0x78]
sub eax, 0x9a8e4f44
mov dword [ebp - 0xb8], eax
jg 0x4af2bd
jmp 0x4af2a4
mov eax, dword [ebp - 0x78]
sub eax, 0x90e13432
mov dword [ebp - 0xbc], eax
je 0x4b15ce
jmp 0x4afc81
mov eax, dword [ebp - 0x78]
sub eax, 0x9c85ded6
mov dword [ebp - 0xc0], eax
jg 0x4af2ef
jmp 0x4af2d6
mov eax, dword [ebp - 0x78]
sub eax, 0x9a8e4f45
mov dword [ebp - 0xc4], eax
je 0x4b08d9
jmp 0x4afc81
mov eax, dword [ebp - 0x78]
sub eax, 0xa2d80daf
mov dword [ebp - 0xc8], eax
jg 0x4af321
jmp 0x4af308
mov eax, dword [ebp - 0x78]
sub eax, 0x9c85ded7
mov dword [ebp - 0xcc], eax
je 0x4b0dad
jmp 0x4afc81
mov eax, dword [ebp - 0x78]
sub eax, 0xa864ddb5
mov dword [ebp - 0xd0], eax
jg 0x4af353
jmp 0x4af33a
mov eax, dword [ebp - 0x78]
sub eax, 0xa2d80db0
mov dword [ebp - 0xd4], eax
je 0x4b1739
jmp 0x4afc81
mov eax, dword [ebp - 0x78]
sub eax, 0xa9a9b626
mov dword [ebp - 0xd8], eax
jg 0x4af385
jmp 0x4af36c
mov eax, dword [ebp - 0x78]
sub eax, 0xa864ddb6
mov dword [ebp - 0xdc], eax
je 0x4b04f6
jmp 0x4afc81
mov eax, dword [ebp - 0x78]
sub eax, 0xad83ad18
mov dword [ebp - 0xe0], eax
jg 0x4af3b7
jmp 0x4af39e
mov eax, dword [ebp - 0x78]
sub eax, 0xa9a9b627
mov dword [ebp - 0xe4], eax
je 0x4b0707
jmp 0x4afc81
mov eax, dword [ebp - 0x78]
sub eax, 0xb0a523f4
mov dword [ebp - 0xe8], eax
jg 0x4af3e9
jmp 0x4af3d0
mov eax, dword [ebp - 0x78]
sub eax, 0xad83ad19
mov dword [ebp - 0xec], eax
je 0x4b0d52
jmp 0x4afc81
mov eax, dword [ebp - 0x78]
sub eax, 0xc15187f7
mov dword [ebp - 0xf0], eax
jg 0x4af41b
jmp 0x4af402
mov eax, dword [ebp - 0x78]
sub eax, 0xb0a523f5
mov dword [ebp - 0xf4], eax
je 0x4b0bdd
jmp 0x4afc81
mov eax, dword [ebp - 0x78]
sub eax, 0xc5f0da05
mov dword [ebp - 0xf8], eax
jg 0x4af44d
jmp 0x4af434
mov eax, dword [ebp - 0x78]
sub eax, 0xc15187f8
mov dword [ebp - 0xfc], eax
je 0x4b0cf7
jmp 0x4afc81
mov eax, dword [ebp - 0x78]
sub eax, 0xd5a69f5f
mov dword [ebp - 0x100], eax
jg 0x4af47f
jmp 0x4af466
mov eax, dword [ebp - 0x78]
sub eax, 0xc5f0da06
mov dword [ebp - 0x104], eax
je 0x4b0e4b
jmp 0x4afc81
mov eax, dword [ebp - 0x78]
sub eax, 0xd922b3c2
mov dword [ebp - 0x108], eax
jg 0x4af4b1
jmp 0x4af498
mov eax, dword [ebp - 0x78]
sub eax, 0xd5a69f60
mov dword [ebp - 0x10c], eax
je 0x4b172d
jmp 0x4afc81
mov eax, dword [ebp - 0x78]
sub eax, 0xdbc1b516
mov dword [ebp - 0x110], eax
jg 0x4af4e3
jmp 0x4af4ca
mov eax, dword [ebp - 0x78]
sub eax, 0xd922b3c3
mov dword [ebp - 0x114], eax
je 0x4b0337
jmp 0x4afc81
mov eax, dword [ebp - 0x78]
sub eax, 0xe289a4c1
mov dword [ebp - 0x118], eax
jg 0x4af515
jmp 0x4af4fc
mov eax, dword [ebp - 0x78]
sub eax, 0xdbc1b517
mov dword [ebp - 0x11c], eax
je 0x4b0355
jmp 0x4afc81
mov eax, dword [ebp - 0x78]
sub eax, 0xe2df90b4
mov dword [ebp - 0x120], eax
jg 0x4af547
jmp 0x4af52e
mov eax, dword [ebp - 0x78]
sub eax, 0xe289a4c2
mov dword [ebp - 0x124], eax
je 0x4b0b61
jmp 0x4afc81
mov eax, dword [ebp - 0x78]
sub eax, 0xe42b3964
mov dword [ebp - 0x128], eax
jg 0x4af579
jmp 0x4af560
mov eax, dword [ebp - 0x78]
sub eax, 0xe2df90b5
mov dword [ebp - 0x12c], eax
je 0x4b0361
jmp 0x4afc81
mov eax, dword [ebp - 0x78]
sub eax, 0xe8466b30
mov dword [ebp - 0x130], eax
jg 0x4af5ab
jmp 0x4af592
mov eax, dword [ebp - 0x78]
sub eax, 0xe42b3965
mov dword [ebp - 0x134], eax
je 0x4b117a
jmp 0x4afc81
mov eax, dword [ebp - 0x78]
sub eax, 0xeabe665b
mov dword [ebp - 0x138], eax
jg 0x4af5dd
jmp 0x4af5c4
mov eax, dword [ebp - 0x78]
sub eax, 0xe8466b31
mov dword [ebp - 0x13c], eax
je 0x4b06ec
jmp 0x4afc81
mov eax, dword [ebp - 0x78]
sub eax, 0xf05ef670
mov dword [ebp - 0x140], eax
jg 0x4af60f
jmp 0x4af5f6
mov eax, dword [ebp - 0x78]
sub eax, 0xeabe665c
mov dword [ebp - 0x144], eax
je 0x4afc86
jmp 0x4afc81
mov eax, dword [ebp - 0x78]
sub eax, 0xf7fbbb26
mov dword [ebp - 0x148], eax
jg 0x4af641
jmp 0x4af628
mov eax, dword [ebp - 0x78]
sub eax, 0xf05ef671
mov dword [ebp - 0x14c], eax
je 0x4b0e08
jmp 0x4afc81
mov eax, dword [ebp - 0x78]
sub eax, 0xf9f46237
mov dword [ebp - 0x150], eax
jg 0x4af673
jmp 0x4af65a
mov eax, dword [ebp - 0x78]
sub eax, 0xf7fbbb27
mov dword [ebp - 0x154], eax
je 0x4b0eac
jmp 0x4afc81
mov eax, dword [ebp - 0x78]
sub eax, 0xfa5dc53a
mov dword [ebp - 0x158], eax
jg 0x4af6a5
jmp 0x4af68c
mov eax, dword [ebp - 0x78]
sub eax, 0xf9f46238
mov dword [ebp - 0x15c], eax
je 0x4b1057
jmp 0x4afc81
mov eax, dword [ebp - 0x78]
sub eax, 0xb364acb
mov dword [ebp - 0x160], eax
jg 0x4af6d7
jmp 0x4af6be
mov eax, dword [ebp - 0x78]
sub eax, 0xfa5dc53b
mov dword [ebp - 0x164], eax
je 0x4b1602
jmp 0x4afc81
mov eax, dword [ebp - 0x78]
sub eax, 0xdd46566
mov dword [ebp - 0x168], eax
jg 0x4af709
jmp 0x4af6f0
mov eax, dword [ebp - 0x78]
sub eax, 0xb364acc
mov dword [ebp - 0x16c], eax
je 0x4b017d
jmp 0x4afc81
mov eax, dword [ebp - 0x78]
sub eax, 0x150609dd
mov dword [ebp - 0x170], eax
jg 0x4af73b
jmp 0x4af722
mov eax, dword [ebp - 0x78]
sub eax, 0xdd46567
mov dword [ebp - 0x174], eax
je 0x4b0ac1
jmp 0x4afc81
mov eax, dword [ebp - 0x78]
sub eax, 0x17615805
mov dword [ebp - 0x178], eax
jg 0x4af76d
jmp 0x4af754
mov eax, dword [ebp - 0x78]
sub eax, 0x150609de
mov dword [ebp - 0x17c], eax
je 0x4b1172
jmp 0x4afc81
mov eax, dword [ebp - 0x78]
sub eax, 0x19717ca0
mov dword [ebp - 0x180], eax
jg 0x4af79f
jmp 0x4af786
mov eax, dword [ebp - 0x78]
sub eax, 0x17615806
mov dword [ebp - 0x184], eax
je 0x4b0e8e
jmp 0x4afc81
mov eax, dword [ebp - 0x78]
sub eax, 0x1aad98dc
mov dword [ebp - 0x188], eax
jg 0x4af7d1
jmp 0x4af7b8
mov eax, dword [ebp - 0x78]
sub eax, 0x19717ca1
mov dword [ebp - 0x18c], eax
je 0x4b07ff
jmp 0x4afc81
mov eax, dword [ebp - 0x78]
sub eax, 0x21b1b314
mov dword [ebp - 0x190], eax
jg 0x4af803
jmp 0x4af7ea
mov eax, dword [ebp - 0x78]
sub eax, 0x1aad98dd
mov dword [ebp - 0x194], eax
je 0x4b0ceb
jmp 0x4afc81
mov eax, dword [ebp - 0x78]
sub eax, 0x22a3ebdb
mov dword [ebp - 0x198], eax
jg 0x4af835
jmp 0x4af81c
mov eax, dword [ebp - 0x78]
sub eax, 0x21b1b315
mov dword [ebp - 0x19c], eax
je 0x4b0fc1
jmp 0x4afc81
mov eax, dword [ebp - 0x78]
sub eax, 0x23c1337a
mov dword [ebp - 0x1a0], eax
jg 0x4af867
jmp 0x4af84e
mov eax, dword [ebp - 0x78]
sub eax, 0x22a3ebdc
mov dword [ebp - 0x1a4], eax
je 0x4b0973
jmp 0x4afc81
mov eax, dword [ebp - 0x78]
sub eax, 0x32278c72
mov dword [ebp - 0x1a8], eax
jg 0x4af899
jmp 0x4af880
mov eax, dword [ebp - 0x78]
sub eax, 0x23c1337b
mov dword [ebp - 0x1ac], eax
je 0x4b1145
jmp 0x4afc81
mov eax, dword [ebp - 0x78]
sub eax, 0x32f273fc
mov dword [ebp - 0x1b0], eax
jg 0x4af8cb
jmp 0x4af8b2
mov eax, dword [ebp - 0x78]
sub eax, 0x32278c73
mov dword [ebp - 0x1b4], eax
je 0x4b0502
jmp 0x4afc81
mov eax, dword [ebp - 0x78]
sub eax, 0x36fdb9c6
mov dword [ebp - 0x1b8], eax
jg 0x4af8fd
jmp 0x4af8e4
mov eax, dword [ebp - 0x78]
sub eax, 0x32f273fd
mov dword [ebp - 0x1bc], eax
je 0x4b0958
jmp 0x4afc81
mov eax, dword [ebp - 0x78]
sub eax, 0x38b9106c
mov dword [ebp - 0x1c0], eax
jg 0x4af92f
jmp 0x4af916
mov eax, dword [ebp - 0x78]
sub eax, 0x36fdb9c7
mov dword [ebp - 0x1c4], eax
je 0x4b021f
jmp 0x4afc81
mov eax, dword [ebp - 0x78]
sub eax, 0x39e39f8c
mov dword [ebp - 0x1c8], eax
jg 0x4af961
jmp 0x4af948
mov eax, dword [ebp - 0x78]
sub eax, 0x38b9106d
mov dword [ebp - 0x1cc], eax
je 0x4afce7
jmp 0x4afc81
mov eax, dword [ebp - 0x78]
sub eax, 0x3c56ed29
mov dword [ebp - 0x1d0], eax
jg 0x4af993
jmp 0x4af97a
mov eax, dword [ebp - 0x78]
sub eax, 0x39e39f8d
mov dword [ebp - 0x1d4], eax
je 0x4b1160
jmp 0x4afc81
mov eax, dword [ebp - 0x78]
sub eax, 0x3cf53ac8
mov dword [ebp - 0x1d8], eax
jg 0x4af9c5
jmp 0x4af9ac
mov eax, dword [ebp - 0x78]
sub eax, 0x3c56ed2a
mov dword [ebp - 0x1dc], eax
je 0x4b0872
jmp 0x4afc81
mov eax, dword [ebp - 0x78]
sub eax, 0x416c2195
mov dword [ebp - 0x1e0], eax
jg 0x4af9f7
jmp 0x4af9de
mov eax, dword [ebp - 0x78]
sub eax, 0x3cf53ac9
mov dword [ebp - 0x1e4], eax
je 0x4b0fb5
jmp 0x4afc81
mov eax, dword [ebp - 0x78]
sub eax, 0x431b1917
mov dword [ebp - 0x1e8], eax
jg 0x4afa29
jmp 0x4afa10
mov eax, dword [ebp - 0x78]
sub eax, 0x416c2196
mov dword [ebp - 0x1ec], eax
je 0x4b0dc5
jmp 0x4afc81
mov eax, dword [ebp - 0x78]
sub eax, 0x4962a1b6
mov dword [ebp - 0x1f0], eax
jg 0x4afa5b
jmp 0x4afa42
mov eax, dword [ebp - 0x78]
sub eax, 0x431b1918
mov dword [ebp - 0x1f4], eax
je 0x4b0557
jmp 0x4afc81
mov eax, dword [ebp - 0x78]
sub eax, 0x5608cf0c
mov dword [ebp - 0x1f8], eax
jg 0x4afa8d
jmp 0x4afa74
mov eax, dword [ebp - 0x78]
sub eax, 0x4962a1b7
mov dword [ebp - 0x1fc], eax
je 0x4b1721
jmp 0x4afc81
mov eax, dword [ebp - 0x78]
sub eax, 0x5a37a32f
mov dword [ebp - 0x200], eax
jg 0x4afabf
jmp 0x4afaa6
mov eax, dword [ebp - 0x78]
sub eax, 0x5608cf0d
mov dword [ebp - 0x204], eax
je 0x4b054b
jmp 0x4afc81
mov eax, dword [ebp - 0x78]
sub eax, 0x646315ac
mov dword [ebp - 0x208], eax
jg 0x4afaf1
jmp 0x4afad8
mov eax, dword [ebp - 0x78]
sub eax, 0x5a37a330
mov dword [ebp - 0x20c], eax
je 0x4b07f3
jmp 0x4afc81
mov eax, dword [ebp - 0x78]
sub eax, 0x65b72439
mov dword [ebp - 0x210], eax
jg 0x4afb23
jmp 0x4afb0a
mov eax, dword [ebp - 0x78]
sub eax, 0x646315ad
mov dword [ebp - 0x214], eax
je 0x4b175e
jmp 0x4afc81
mov eax, dword [ebp - 0x78]
sub eax, 0x6793deee
mov dword [ebp - 0x218], eax
jg 0x4afb55
jmp 0x4afb3c
mov eax, dword [ebp - 0x78]
sub eax, 0x65b7243a
mov dword [ebp - 0x21c], eax
je 0x4b0f42
jmp 0x4afc81
mov eax, dword [ebp - 0x78]
sub eax, 0x7371a425
mov dword [ebp - 0x220], eax
jg 0x4afbeb
jmp 0x4afb6e
mov eax, dword [ebp - 0x78]
sub eax, 0x73337b81
mov dword [ebp - 0x224], eax
jg 0x4afbd2
jmp 0x4afb87
mov eax, dword [ebp - 0x78]
sub eax, 0x6793deef
mov dword [ebp - 0x228], eax
je 0x4b0bbc
jmp 0x4afba0
mov eax, dword [ebp - 0x78]
sub eax, 0x67bdf1e1
mov dword [ebp - 0x22c], eax
je 0x4b075d
jmp 0x4afbb9
mov eax, dword [ebp - 0x78]
sub eax, 0x70dd920f
mov dword [ebp - 0x230], eax
je 0x4b0db9
jmp 0x4afc81
mov eax, dword [ebp - 0x78]
sub eax, 0x73337b82
mov dword [ebp - 0x234], eax
je 0x4b0bc8
jmp 0x4afc81
mov eax, dword [ebp - 0x78]
sub eax, 0x7371a426
mov dword [ebp - 0x238], eax
je 0x4b05b2
jmp 0x4afc81
mov eax, dword [ebp - 0x78]
sub eax, 0x73fdaeb3
mov dword [ebp - 0x23c], eax
je 0x4b0162
jmp 0x4afc81
mov eax, dword [ebp - 0x78]
sub eax, 0x78cb3ae0
mov dword [ebp - 0x240], eax
je 0x4b0189
jmp 0x4afc81
mov eax, dword [ebp - 0x78]
sub eax, 0x7bb8d8ce
mov dword [ebp - 0x244], eax
je 0x4b087e
jmp 0x4afc81
mov eax, dword [ebp - 0x78]
sub eax, 0x7d089d4b
mov dword [ebp - 0x248], eax
je 0x4b0e26
jmp 0x4afc81
mov eax, dword [ebp - 0x78]
sub eax, 0x7e2da9ab
mov dword [ebp - 0x24c], eax
je 0x4b0e69
jmp 0x4afc81
jmp 0x4b1785
mov eax, 0xe42b3965
mov ecx, 0x38b9106d
mov dl, 1
mov dh, byte [ebp - 0x6e]
mov bl, byte [ebp - 0x6d]
mov bh, dh
xor bh, 1
mov dword [ebp - 0x250], eax
mov al, bl
xor al, 1
xor dl, 1
mov ah, bh
and ah, 1
and dh, dl
mov byte [ebp - 0x251], al
and al, 1
and bl, dl
or ah, dh
or al, bl
xor ah, al
mov al, byte [ebp - 0x251]
or bh, al
xor bh, 1
or dl, 1
and bh, dl
or ah, bh
test ah, 1
mov esi, dword [ebp - 0x250]
cmovne esi, ecx
mov dword [ebp - 0x74], esi
jmp 0x4b1785
mov eax, 0x20a
mov ecx, 0
mov edx, 0x14
mov esi, 4
mov dword [ebp - 0x258], eax
mov eax, esi
mov dword [ebp - 0x25c], esi
mov dword [ebp - 0x260], ecx
mov dword [ebp - 0x264], edx
call fcn.004d65d0
mov eax, esp
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x25c]
call fcn.004d65d0
mov eax, esp
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x25c]
call fcn.004d65d0
mov eax, esp
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x25c]
call fcn.004d65d0
mov eax, esp
mov dword [ebp - 0x60], eax
mov eax, 0x20c
mov dword [ebp - 0x268], eax
call fcn.004d65d0
mov eax, esp
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x268]
call fcn.004d65d0
mov eax, esp
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x268]
call fcn.004d65d0
mov eax, esp
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x268]
call fcn.004d65d0
mov eax, esp
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x268]
call fcn.004d65d0
mov eax, esp
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x268]
call fcn.004d65d0
mov eax, esp
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x268]
call fcn.004d65d0
mov eax, esp
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x268]
call fcn.004d65d0
mov eax, 0x14
mov ecx, esp
mov dword [ebp - 0x26c], eax
mov dword [ebp - 0x270], ecx
call fcn.004d65d0
mov eax, esp
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x26c]
call fcn.004d65d0
mov eax, esp
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x25c]
call fcn.004d65d0
mov eax, esp
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x25c]
call fcn.004d65d0
mov eax, esp
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x25c]
call fcn.004d65d0
mov eax, esp
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x25c]
call fcn.004d65d0
mov eax, esp
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x25c]
call fcn.004d65d0
mov eax, esp
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x25c]
call fcn.004d65d0
mov eax, esp
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x25c]
call fcn.004d65d0
mov eax, esp
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x25c]
call fcn.004d65d0
mov eax, esp
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x25c]
call fcn.004d65d0
mov eax, esp
mov ecx, dword [ebp - 0x270]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x6c]
mov dword [eax], 0
mov eax, dword [ebp - 0x68]
mov dword [eax], 0
mov eax, dword [ebp - 0x64]
mov dword [eax], 0
mov eax, dword [ebp - 0x60]
mov dword [eax], 0
mov eax, dword [ebp - 0x5c]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [ebp - 0x274], ecx
call fcn.004d6e50
add esp, 0xc
mov eax, dword [ebp - 0x58]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.004d6e50
add esp, 0xc
mov eax, dword [ebp - 0x54]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.004d6e50
add esp, 0xc
mov eax, dword [ebp - 0x50]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.004d6e50
add esp, 0xc
mov eax, dword [ebp - 0x48]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.004d6e50
add esp, 0xc
mov eax, dword [ebp - 0x44]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.004d6e50
add esp, 0xc
mov eax, dword [ebp - 0x274]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.004d6e50
add esp, 0xc
mov eax, dword [ebp - 0x40]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x14
call fcn.004d6e50
add esp, 0xc
mov eax, dword [ebp - 0x3c]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x14
call fcn.004d6e50
add esp, 0xc
mov eax, dword [ebp - 0x30]
mov dword [eax], 0xffffffff
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x58]
mov edx, dword [ebp - 0x50]
mov esi, dword [ebp - 0x54]
mov edi, dword [ebp - 0x44]
mov ebx, dword [ebp - 0x38]
sub esp, 0x24
mov dword [esp], edi
mov dword [esp + 4], ebx
mov dword [esp + 8], esi
mov dword [esp + 0xc], 0x20a
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], 0x20a
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], 0x20a
mov dword [esp + 0x20], eax
call fcn.004acac0
add esp, 0x24
mov eax, 0x20a
sub esp, 8
mov ecx, dword [ebp - 0x274]
mov dword [esp], ecx
mov dword [esp + 4], 0x20a
mov dword [ebp - 0x278], eax
call fcn.00411d60
add esp, 8
mov eax, dword [0x4fa48c]
sub esp, 0xc
mov ecx, esp
mov edx, dword [ebp - 0x274]
mov dword [ecx + 8], edx
mov dword [ecx + 4], 0
mov dword [ecx], 0
call eax
mov ecx, 0xe42b3965
mov edx, 0x73fdaeb3
mov bl, 1
mov esi, dword [ebp - 0x68]
mov dword [esi], eax
mov eax, dword [ebp - 0x68]
cmp dword [eax], 0
sete bh
and bh, 1
mov byte [ebp - 0x11], bh
mov eax, dword [0x4fa1a0]
mov esi, dword [0x4fa19c]
mov edi, eax
sub edi, 0x494a4637
sub edi, 1
add edi, 0x494a4637
imul eax, edi
and eax, 1
cmp eax, 0
sete bh
cmp esi, 0xa
setl al
mov ah, bh
xor ah, 1
mov byte [ebp - 0x279], al
xor al, 1
xor bl, 0
mov byte [ebp - 0x27a], al
mov al, ah
and al, 0
and bh, bl
mov byte [ebp - 0x27b], al
mov al, byte [ebp - 0x27a]
and al, 0
mov byte [ebp - 0x27c], al
mov al, byte [ebp - 0x279]
and al, bl
mov byte [ebp - 0x27d], al
mov al, byte [ebp - 0x27b]
or al, bh
mov bh, byte [ebp - 0x27c]
mov byte [ebp - 0x27e], al
mov al, byte [ebp - 0x27d]
or bh, al
mov al, byte [ebp - 0x27e]
xor al, bh
mov bh, byte [ebp - 0x27a]
or ah, bh
xor ah, 1
or bl, 0
and ah, bl
or al, ah
test al, 1
cmovne ecx, edx
mov dword [ebp - 0x74], ecx
jmp 0x4b1785
mov eax, 0x78cb3ae0
mov ecx, 0xb364acc
mov dl, byte [ebp - 0x11]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x74], eax
jmp 0x4b1785
mov dword [ebp - 0x74], 0xb0a523f5
jmp 0x4b1785
mov eax, 0x90e13432
mov ecx, 0x36fdb9c7
mov dl, 1
mov esi, dword [0x4fa1a0]
mov edi, dword [0x4fa19c]
mov ebx, esi
add ebx, 0x764a9ead
sub ebx, 1
sub ebx, 0x764a9ead
imul esi, ebx
and esi, 1
cmp esi, 0
sete dh
cmp edi, 0xa
setl bl
mov bh, dh
xor bh, 1
mov dword [ebp - 0x284], eax
mov al, bl
xor al, 1
xor dl, 0
mov ah, bh
and ah, 0
and dh, dl
mov byte [ebp - 0x285], al
and al, 0
and bl, dl
or ah, dh
or al, bl
xor ah, al
mov al, byte [ebp - 0x285]
or bh, al
xor bh, 1
or dl, 0
and bh, dl
or ah, bh
test ah, 1
mov esi, dword [ebp - 0x284]
cmovne esi, ecx
mov dword [ebp - 0x74], esi
jmp 0x4b1785
mov eax, dword [0x4fa4a8]
mov ecx, dword [ebp - 0x68]
mov ecx, dword [ecx]
sub esp, 8
mov edx, esp
mov dword [edx], ecx
mov dword [edx + 4], 0xffffffff
call eax
mov ecx, 0x90e13432
mov edx, 0x87093203
mov bl, 1
mov esi, 0
mov edi, dword [ebp - 0x34]
mov dword [edi], eax
mov eax, dword [ebp - 0x34]
cmp dword [eax], 0
setne bh
and bh, 1
mov byte [ebp - 0x10], bh
mov eax, dword [0x4fa1a0]
mov edi, dword [0x4fa19c]
sub esi, 1
mov dword [ebp - 0x28c], eax
add eax, esi
mov esi, dword [ebp - 0x28c]
imul esi, eax
and esi, 1
cmp esi, 0
sete bh
cmp edi, 0xa
setl al
mov ah, bh
xor ah, 1
mov byte [ebp - 0x28d], al
xor al, 1
xor bl, 1
mov byte [ebp - 0x28e], al
mov al, ah
and al, 1
and bh, bl
mov byte [ebp - 0x28f], al
mov al, byte [ebp - 0x28e]
and al, 1
mov byte [ebp - 0x290], al
mov al, byte [ebp - 0x28d]
and al, bl
mov byte [ebp - 0x291], al
mov al, byte [ebp - 0x28f]
or al, bh
mov bh, byte [ebp - 0x290]
mov byte [ebp - 0x292], al
mov al, byte [ebp - 0x291]
or bh, al
mov al, byte [ebp - 0x292]
xor al, bh
mov bh, byte [ebp - 0x28e]
or ah, bh
xor ah, 1
or bl, 1
and ah, bl
or al, ah
test al, 1
cmovne ecx, edx
mov dword [ebp - 0x74], ecx
jmp 0x4b1785
mov eax, 0xe2df90b5
mov ecx, 0xd922b3c3
mov dl, byte [ebp - 0x10]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x74], eax
jmp 0x4b1785
mov eax, 0xe2df90b5
mov ecx, 0xdbc1b517
mov edx, dword [ebp - 0x34]
cmp dword [edx], 0x80
cmovne eax, ecx
mov dword [ebp - 0x74], eax
jmp 0x4b1785
mov dword [ebp - 0x74], 0xb0a523f5
jmp 0x4b1785
mov eax, 0
mov ecx, 0x20a
mov edx, dword [ebp - 0x4c]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [ebp - 0x298], eax
mov dword [ebp - 0x29c], ecx
call fcn.0040d320
add esp, 0xc
mov ecx, 0x104
lea edx, [0x4e9c8e]
mov esi, 3
mov edi, dword [ebp - 0x4c]
sub esp, 0x10
mov dword [esp], edi
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], 3
mov dword [ebp - 0x2a0], eax
mov dword [ebp - 0x2a4], ecx
mov dword [ebp - 0x2a8], esi
call fcn.0040d900
add esp, 0x10
mov ecx, dword [ebp - 0x58]
sub esp, 4
mov dword [esp], ecx
mov dword [ebp - 0x2ac], eax
call fcn.0040e500
add esp, 4
mov ecx, 0x101
mov edx, dword [ebp - 0x58]
mov esi, dword [ebp - 0x4c]
add esi, 6
sub esp, 0x10
mov dword [esp], esi
mov dword [esp + 4], 0x101
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov dword [ebp - 0x2b0], ecx
call fcn.0040d900
add esp, 0x10
mov ecx, 0
mov edx, dword [str._vSp]
movzx edx, word [edx]
mov esi, dword [ebp - 0x2c]
mov dword [esi], edx
mov edx, dword [ebp - 0x2c]
mov edx, dword [edx]
sub ecx, 1
sub edx, ecx
mov ecx, dword [str._vSp]
movzx ecx, word [ecx + edx*2]
mov edx, dword [ebp - 0x28]
mov dword [edx], ecx
mov ecx, dword [ebp - 0x28]
mov ecx, dword [ecx]
mov edx, dword [str._vSp]
mov esi, dword [ebp - 0x2c]
mov esi, dword [esi]
shl esi, 1
add edx, esi
add edx, 4
mov esi, dword [str._vSp]
add esi, 2
mov edi, dword [ebp - 0x2c]
mov edi, dword [edi]
mov ebx, dword [ebp - 0x5c]
sub esp, 0x14
mov dword [esp], ebx
mov dword [esp + 4], edi
mov dword [esp + 8], esi
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
mov dword [ebp - 0x2b4], eax
call fcn.0040b550
add esp, 0x14
mov eax, dword [0x4fa4b4]
mov ecx, dword [ebp - 0x54]
sub esp, 0x10
mov edx, esp
mov dword [edx + 8], 0
mov dword [edx + 0xc], ecx
mov dword [edx + 4], 0
mov dword [edx], 0
call eax
mov ecx, 0x32278c73
mov edx, 0xa864ddb6
mov esi, dword [ebp - 0x64]
mov dword [esi], eax
mov eax, dword [ebp - 0x64]
cmp dword [eax], 0
cmove ecx, edx
mov dword [ebp - 0x74], ecx
jmp 0x4b1785
mov dword [ebp - 0x74], 0xb0a523f5
jmp 0x4b1785
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x38]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x44]
mov esi, dword [ebp - 0x6c]
mov edi, dword [ebp - 0x60]
sub esp, 0x14
mov dword [esp], esi
mov dword [esp + 4], edi
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
call fcn.004ae5b0
add esp, 0x14
mov ecx, 0x431b1918
mov edx, 0x5608cf0d
cmp eax, 0
cmovl ecx, edx
mov dword [ebp - 0x74], ecx
jmp 0x4b1785
mov dword [ebp - 0x74], 0xb0a523f5
jmp 0x4b1785
mov eax, 0xfa5dc53b
mov ecx, 0x7371a426
mov edx, dword [0x4fa1a0]
mov esi, dword [0x4fa19c]
mov edi, edx
sub edi, 0xd075aa8d
sub edi, 1
add edi, 0xd075aa8d
imul edx, edi
and edx, 1
cmp edx, 0
sete bl
cmp esi, 0xa
setl bh
mov dl, bl
and dl, bh
xor bl, bh
or dl, bl
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x74], eax
jmp 0x4b1785
mov eax, 0
mov ecx, dword [0x4ec764]
movzx ecx, word [ecx]
mov edx, dword [ebp - 0x24]
mov dword [edx], ecx
mov ecx, dword [ebp - 0x24]
mov ecx, dword [ecx]
sub eax, 1
sub ecx, eax
mov eax, dword [0x4ec764]
movzx eax, word [eax + ecx*2]
mov ecx, dword [ebp - 0x20]
mov dword [ecx], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
mov ecx, dword [0x4ec764]
mov edx, dword [ebp - 0x24]
mov edx, dword [edx]
shl edx, 1
add ecx, edx
add ecx, 4
mov edx, dword [0x4ec764]
add edx, 2
mov esi, dword [ebp - 0x24]
mov esi, dword [esi]
mov edi, dword [ebp - 0x40]
sub esp, 0x14
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
call fcn.0040b550
add esp, 0x14
mov eax, 0x40
mov ecx, 0
mov edx, 1
mov esi, dword [ebp - 0x40]
mov edi, dword [ebp - 0x4c]
mov ebx, dword [ebp - 0x5c]
sub esp, 0x18
mov dword [esp], ebx
mov dword [esp + 4], edi
mov dword [esp + 8], esi
mov dword [esp + 0xc], 0x40
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 1
mov dword [ebp - 0x2b8], eax
mov dword [ebp - 0x2bc], ecx
mov dword [ebp - 0x2c0], edx
call fcn.004ae190
add esp, 0x18
mov ecx, 0xfa5dc53b
mov edx, 0xe8466b31
cmp eax, 0
setl al
and al, 1
mov byte [ebp - 0xf], al
mov esi, dword [0x4fa1a0]
mov edi, dword [0x4fa19c]
mov ebx, esi
sub ebx, 0x317d98b4
sub ebx, 1
add ebx, 0x317d98b4
imul esi, ebx
and esi, 1
cmp esi, 0
sete al
cmp edi, 0xa
setl ah
mov bl, al
and bl, ah
xor al, ah
or bl, al
test bl, 1
cmovne ecx, edx
mov dword [ebp - 0x74], ecx
jmp 0x4b1785
mov eax, 0x19717ca1
mov ecx, 0xa9a9b627
mov dl, byte [ebp - 0xf]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x74], eax
jmp 0x4b1785
mov eax, 0x812000e4
mov ecx, 0x67bdf1e1
mov edx, 0
mov esi, dword [0x4fa1a0]
mov edi, dword [0x4fa19c]
sub edx, 1
mov ebx, esi
add ebx, edx
imul esi, ebx
and esi, 1
cmp esi, 0
sete dl
cmp edi, 0xa
setl dh
mov bl, dl
and bl, dh
xor dl, dh
or bl, dl
test bl, 1
cmovne eax, ecx
mov dword [ebp - 0x74], eax
jmp 0x4b1785
mov eax, 0x812000e4
mov ecx, 0x5a37a330
mov dl, 1
mov esi, dword [0x4fa1a0]
mov edi, dword [0x4fa19c]
mov ebx, esi
sub ebx, 0x4970bd6
sub ebx, 1
add ebx, 0x4970bd6
imul esi, ebx
and esi, 1
cmp esi, 0
sete dh
cmp edi, 0xa
setl bl
mov bh, dh
xor bh, 1
mov dword [ebp - 0x2c4], eax
mov al, bl
xor al, 1
xor dl, 0
mov ah, bh
and ah, 0
and dh, dl
mov byte [ebp - 0x2c5], al
and al, 0
and bl, dl
or ah, dh
or al, bl
xor ah, al
mov al, byte [ebp - 0x2c5]
or bh, al
xor bh, 1
or dl, 0
and bh, dl
or ah, bh
test ah, 1
mov esi, dword [ebp - 0x2c4]
cmovne esi, ecx
mov dword [ebp - 0x74], esi
jmp 0x4b1785
mov dword [ebp - 0x74], 0xb0a523f5
jmp 0x4b1785
mov eax, 0
mov ecx, 0x40
mov edx, 1
mov esi, dword [ebp - 0x40]
mov edi, dword [ebp - 0x48]
sub esp, 0x18
mov dword [esp], edi
mov dword [esp + 4], 0
mov dword [esp + 8], esi
mov dword [esp + 0xc], 0x40
mov dword [esp + 0x10], 1
mov dword [esp + 0x14], 1
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2d0], ecx
mov dword [ebp - 0x2d4], edx
call fcn.004ae190
add esp, 0x18
mov ecx, 0x7bb8d8ce
mov edx, 0x3c56ed2a
cmp eax, 0
cmovl ecx, edx
mov dword [ebp - 0x74], ecx
jmp 0x4b1785
mov dword [ebp - 0x74], 0xb0a523f5
jmp 0x4b1785
mov eax, 0x851a94f3
mov ecx, 0x9a8e4f45
mov edx, dword [0x4fa1a0]
mov esi, dword [0x4fa19c]
mov edi, edx
add edi, 0xc273cdaa
sub edi, 1
sub edi, 0xc273cdaa
imul edx, edi
and edx, 1
cmp edx, 0
sete bl
cmp esi, 0xa
setl bh
mov dl, bl
and dl, bh
xor bl, bh
or dl, bl
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x74], eax
jmp 0x4b1785
mov eax, dword [0x4fa4a8]
mov ecx, dword [ebp - 0x64]
mov ecx, dword [ecx]
sub esp, 8
mov edx, esp
mov dword [edx], ecx
mov dword [edx + 4], 0xffffffff
call eax
mov ecx, 0x851a94f3
mov edx, 0x32f273fd
cmp eax, 0
setne bl
and bl, 1
mov byte [ebp - 0xe], bl
mov eax, dword [0x4fa1a0]
mov esi, dword [0x4fa19c]
mov edi, eax
sub edi, 0x3be44564
sub edi, 1
add edi, 0x3be44564
imul eax, edi
and eax, 1
cmp eax, 0
sete bl
cmp esi, 0xa
setl bh
mov al, bl
and al, bh
xor bl, bh
or al, bl
test al, 1
cmovne ecx, edx
mov dword [ebp - 0x74], ecx
jmp 0x4b1785
mov eax, 0x9031170c
mov ecx, 0x22a3ebdc
mov dl, byte [ebp - 0xe]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x74], eax
jmp 0x4b1785
mov dword [ebp - 0x74], 0x70dd920f
jmp 0x4b1785
mov eax, 0
mov ecx, 0x20a
mov edx, dword [ebp - 0x4c]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [ebp - 0x2d8], eax
mov dword [ebp - 0x2dc], ecx
call fcn.0040d320
add esp, 0xc
mov ecx, 0x104
lea edx, str._q__u
mov esi, 6
mov edi, dword [ebp - 0x4c]
sub esp, 0x10
mov dword [esp], edi
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], 6
mov dword [ebp - 0x2e0], eax
mov dword [ebp - 0x2e4], ecx
mov dword [ebp - 0x2e8], esi
call fcn.0040d900
add esp, 0x10
mov ecx, dword [ebp - 0x58]
sub esp, 4
mov dword [esp], ecx
mov dword [ebp - 0x2ec], eax
call fcn.0040e500
add esp, 4
mov ecx, 0xfe
mov edx, dword [ebp - 0x58]
mov esi, dword [ebp - 0x4c]
add esi, 0xc
sub esp, 0x10
mov dword [esp], esi
mov dword [esp + 4], 0xfe
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov dword [ebp - 0x2f0], ecx
call fcn.0040d900
add esp, 0x10
mov ecx, 0x40
mov edx, 0
mov esi, 1
mov edi, dword [ebp - 0x40]
mov ebx, dword [ebp - 0x4c]
mov dword [ebp - 0x2f4], eax
mov eax, dword [ebp - 0x5c]
sub esp, 0x18
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov dword [esp + 0xc], 0x40
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 1
mov dword [ebp - 0x2f8], esi
mov dword [ebp - 0x2fc], ecx
mov dword [ebp - 0x300], edx
call fcn.004ae190
add esp, 0x18
mov ecx, 0x73337b82
mov edx, 0xdd46567
cmp eax, 0
cmovl ecx, edx
mov dword [ebp - 0x74], ecx
jmp 0x4b1785
mov eax, 0x4962a1b7
mov ecx, 0xe289a4c2
mov dl, 1
mov esi, 0
mov edi, dword [0x4fa1a0]
mov ebx, dword [0x4fa19c]
sub esi, 1
mov dword [ebp - 0x304], eax
mov eax, edi
add eax, esi
imul edi, eax
and edi, 1
cmp edi, 0
sete dh
cmp ebx, 0xa
setl al
mov ah, dh
xor ah, 1
mov bl, al
xor bl, 1
xor dl, 0
mov bh, ah
and bh, 0
and dh, dl
mov byte [ebp - 0x305], al
mov al, bl
and al, 0
mov byte [ebp - 0x306], al
mov al, byte [ebp - 0x305]
and al, dl
or bh, dh
mov dh, byte [ebp - 0x306]
or dh, al
xor bh, dh
or ah, bl
xor ah, 1
or dl, 0
and ah, dl
or bh, ah
test bh, 1
mov esi, dword [ebp - 0x304]
cmovne esi, ecx
mov dword [ebp - 0x74], esi
jmp 0x4b1785
mov eax, 0x4962a1b7
mov ecx, 0x6793deef
mov edx, dword [0x4fa1a0]
mov esi, dword [0x4fa19c]
mov edi, edx
add edi, 0x7a2dce3c
sub edi, 1
sub edi, 0x7a2dce3c
imul edx, edi
and edx, 1
cmp edx, 0
sete bl
cmp esi, 0xa
setl bh
mov dl, bl
and dl, bh
xor bl, bh
or dl, bl
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x74], eax
jmp 0x4b1785
mov dword [ebp - 0x74], 0xb0a523f5
jmp 0x4b1785
mov eax, dword [ebp - 0x30]
mov dword [eax], 1
mov dword [ebp - 0x74], 0x416c2196
jmp 0x4b1785
mov eax, dword [0x4fa4b0]
mov ecx, dword [ebp - 0x50]
sub esp, 4
mov edx, esp
mov dword [edx], ecx
call eax
mov ecx, 0
mov edx, dword [0x4ec768]
movzx edx, word [edx]
mov esi, dword [ebp - 0x1c]
mov dword [esi], edx
mov edx, dword [ebp - 0x1c]
mov edx, dword [edx]
mov esi, ecx
sub esi, edx
mov edx, ecx
sub edx, 1
add esi, edx
sub ecx, esi
mov edx, dword [0x4ec768]
movzx ecx, word [edx + ecx*2]
mov edx, dword [ebp - 0x18]
mov dword [edx], ecx
mov ecx, dword [ebp - 0x18]
mov ecx, dword [ecx]
mov edx, dword [0x4ec768]
mov esi, dword [ebp - 0x1c]
mov esi, dword [esi]
shl esi, 1
add edx, esi
add edx, 4
mov esi, dword [0x4ec768]
add esi, 2
mov edi, dword [ebp - 0x1c]
mov edi, dword [edi]
mov ebx, dword [ebp - 0x3c]
sub esp, 0x14
mov dword [esp], ebx
mov dword [esp + 4], edi
mov dword [esp + 8], esi
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
mov dword [ebp - 0x30c], eax
call fcn.0040b550
add esp, 0x14
mov eax, 0
mov ecx, 0x4540
mov edx, 1
mov esi, dword [ebp - 0x3c]
mov edi, dword [ebp - 0x44]
sub esp, 0x18
mov dword [esp], edi
mov dword [esp + 4], 0
mov dword [esp + 8], esi
mov dword [esp + 0xc], 0x4540
mov dword [esp + 0x10], 1
mov dword [esp + 0x14], 0
mov dword [ebp - 0x310], eax
mov dword [ebp - 0x314], ecx
mov dword [ebp - 0x318], edx
call fcn.004ae190
add esp, 0x18
mov ecx, 0xc15187f8
mov edx, 0x1aad98dd
cmp eax, 0
cmovl ecx, edx
mov dword [ebp - 0x74], ecx
jmp 0x4b1785
mov dword [ebp - 0x74], 0xb0a523f5
jmp 0x4b1785
mov eax, 0xd5a69f60
mov ecx, 0xad83ad19
mov edx, dword [0x4fa1a0]
mov esi, dword [0x4fa19c]
mov edi, edx
add edi, 0xef45468d
sub edi, 1
sub edi, 0xef45468d
imul edx, edi
and edx, 1
cmp edx, 0
sete bl
cmp esi, 0xa
setl bh
mov dl, bl
and dl, bh
xor bl, bh
or dl, bl
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x74], eax
jmp 0x4b1785
mov eax, 0xd5a69f60
mov ecx, 0x9c85ded7
mov edx, dword [0x4fa1a0]
mov esi, dword [0x4fa19c]
mov edi, edx
sub edi, 0x359d44a8
sub edi, 1
add edi, 0x359d44a8
imul edx, edi
and edx, 1
cmp edx, 0
sete bl
cmp esi, 0xa
setl bh
mov dl, bl
and dl, bh
xor bl, bh
or dl, bl
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x74], eax
jmp 0x4b1785
mov dword [ebp - 0x74], 0x70dd920f
jmp 0x4b1785
mov dword [ebp - 0x74], 0x416c2196
jmp 0x4b1785
mov eax, 0xf05ef671
mov ecx, 0x80cdce50
mov edx, dword [ebp - 0x6c]
cmp dword [edx], 0
cmovne eax, ecx
mov dword [ebp - 0x74], eax
jmp 0x4b1785
mov eax, dword [0x4fa474]
mov ecx, dword [ebp - 0x6c]
mov ecx, dword [ecx]
sub esp, 4
mov edx, esp
mov dword [edx], ecx
call eax
mov dword [ebp - 0x74], 0xf05ef671
mov dword [ebp - 0x31c], eax
jmp 0x4b1785
mov eax, 0xc5f0da06
mov ecx, 0x7d089d4b
mov edx, dword [ebp - 0x60]
cmp dword [edx], 0
cmovne eax, ecx
mov dword [ebp - 0x74], eax
jmp 0x4b1785
mov eax, dword [ebp - 0x60]
mov eax, dword [eax]
sub esp, 4
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
mov dword [ebp - 0x74], 0xc5f0da06
mov dword [ebp - 0x320], eax
jmp 0x4b1785
mov eax, 0x17615806
mov ecx, 0x7e2da9ab
mov edx, dword [ebp - 0x64]
cmp dword [edx], 0
cmovne eax, ecx
mov dword [ebp - 0x74], eax
jmp 0x4b1785
mov eax, dword [ebp - 0x64]
mov eax, dword [eax]
sub esp, 4
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
mov dword [ebp - 0x74], 0x17615806
mov dword [ebp - 0x324], eax
jmp 0x4b1785
mov eax, 0x21b1b315
mov ecx, 0xf7fbbb27
mov edx, dword [ebp - 0x68]
cmp dword [edx], 0
cmovne eax, ecx
mov dword [ebp - 0x74], eax
jmp 0x4b1785
mov eax, 0xa2d80db0
mov ecx, 0x65b7243a
mov dl, 1
mov esi, dword [0x4fa1a0]
mov edi, dword [0x4fa19c]
mov ebx, esi
sub ebx, 0x57d3736
sub ebx, 1
add ebx, 0x57d3736
imul esi, ebx
and esi, 1
cmp esi, 0
sete dh
cmp edi, 0xa
setl bl
mov bh, dh
xor bh, 1
mov dword [ebp - 0x328], eax
mov al, bl
xor al, 1
xor dl, 1
mov ah, bh
and ah, 1
and dh, dl
mov byte [ebp - 0x329], al
and al, 1
and bl, dl
or ah, dh
or al, bl
xor ah, al
mov al, byte [ebp - 0x329]
or bh, al
xor bh, 1
or dl, 1
and bh, dl
or ah, bh
test ah, 1
mov esi, dword [ebp - 0x328]
cmovne esi, ecx
mov dword [ebp - 0x74], esi
jmp 0x4b1785
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
sub esp, 4
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
mov ecx, 0xa2d80db0
mov edx, 0x3cf53ac9
mov esi, dword [0x4fa1a0]
mov edi, dword [0x4fa19c]
mov ebx, esi
add ebx, 0xfc731fb1
sub ebx, 1
sub ebx, 0xfc731fb1
imul esi, ebx
and esi, 1
cmp esi, 0
sete bl
cmp edi, 0xa
setl bh
mov dword [ebp - 0x330], eax
mov al, bl
and al, bh
xor bl, bh
or al, bl
test al, 1
cmovne ecx, edx
mov dword [ebp - 0x74], ecx
jmp 0x4b1785
mov dword [ebp - 0x74], 0x21b1b315
jmp 0x4b1785
mov eax, 0x646315ad
mov ecx, 0xf9f46238
mov dl, 1
mov esi, dword [0x4fa1a0]
mov edi, dword [0x4fa19c]
mov ebx, esi
add ebx, 0x43b47a29
sub ebx, 1
sub ebx, 0x43b47a29
imul esi, ebx
and esi, 1
cmp esi, 0
sete dh
cmp edi, 0xa
setl bl
mov bh, dh
xor bh, 1
mov dword [ebp - 0x334], eax
mov al, bl
xor al, 1
xor dl, 1
mov ah, bh
and ah, 1
and dh, dl
mov byte [ebp - 0x335], al
and al, 1
and bl, dl
or ah, dh
or al, bl
xor ah, al
mov al, byte [ebp - 0x335]
or bh, al
xor bh, 1
or dl, 1
and bh, dl
or ah, bh
test ah, 1
mov esi, dword [ebp - 0x334]
cmovne esi, ecx
mov dword [ebp - 0x74], esi
jmp 0x4b1785
mov eax, dword [0x4fa4b0]
mov ecx, dword [ebp - 0x58]
sub esp, 4
mov edx, esp
mov dword [edx], ecx
call eax
mov ecx, 0x646315ad
mov edx, 0x23c1337b
mov bl, 1
mov esi, dword [ebp - 0x30]
cmp dword [esi], 0
setne bh
and bh, 1
mov byte [ebp - 0xd], bh
mov esi, dword [0x4fa1a0]
mov edi, dword [0x4fa19c]
mov dword [ebp - 0x33c], eax
mov eax, esi
sub eax, 0x808873ac
sub eax, 1
add eax, 0x808873ac
imul esi, eax
and esi, 1
cmp esi, 0
sete bh
cmp edi, 0xa
setl al
mov ah, bh
xor ah, 1
mov byte [ebp - 0x33d], al
xor al, 1
xor bl, 0
mov byte [ebp - 0x33e], al
mov al, ah
and al, 0
and bh, bl
mov byte [ebp - 0x33f], al
mov al, byte [ebp - 0x33e]
and al, 0
mov byte [ebp - 0x340], al
mov al, byte [ebp - 0x33d]
and al, bl
mov byte [ebp - 0x341], al
mov al, byte [ebp - 0x33f]
or al, bh
mov bh, byte [ebp - 0x340]
mov byte [ebp - 0x342], al
mov al, byte [ebp - 0x341]
or bh, al
mov al, byte [ebp - 0x342]
xor al, bh
mov bh, byte [ebp - 0x33e]
or ah, bh
xor ah, 1
or bl, 0
and ah, bl
or al, ah
test al, 1
cmovne ecx, edx
mov dword [ebp - 0x74], ecx
jmp 0x4b1785
mov eax, 0x150609de
mov ecx, 0x39e39f8d
mov dl, byte [ebp - 0xd]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x74], eax
jmp 0x4b1785
sub esp, 4
mov eax, esp
mov dword [eax], 0
mov eax, dword [sym.imp.KERNEL32.dll_ExitProcess]
call eax
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, 0x20a
mov ecx, 0
mov edx, 0x14
mov esi, 4
mov dword [ebp - 0x348], eax
mov eax, esi
mov dword [ebp - 0x34c], esi
mov dword [ebp - 0x350], ecx
mov dword [ebp - 0x354], edx
call fcn.004d65d0
mov eax, esp
mov ecx, dword [ebp - 0x34c]
mov dword [ebp - 0x358], eax
mov eax, ecx
call fcn.004d65d0
mov eax, esp
mov ecx, dword [ebp - 0x34c]
mov dword [ebp - 0x35c], eax
mov eax, ecx
call fcn.004d65d0
mov eax, esp
mov ecx, 0x20c
mov edx, dword [ebp - 0x34c]
mov dword [ebp - 0x360], eax
mov eax, edx
mov dword [ebp - 0x364], ecx
call fcn.004d65d0
mov eax, esp
mov ecx, dword [ebp - 0x364]
mov dword [ebp - 0x368], eax
mov eax, ecx
call fcn.004d65d0
mov eax, esp
mov ecx, dword [ebp - 0x364]
mov dword [ebp - 0x36c], eax
mov eax, ecx
call fcn.004d65d0
mov eax, esp
mov ecx, dword [ebp - 0x364]
mov dword [ebp - 0x370], eax
mov eax, ecx
call fcn.004d65d0
mov eax, esp
mov ecx, dword [ebp - 0x364]
mov dword [ebp - 0x374], eax
mov eax, ecx
call fcn.004d65d0
mov eax, esp
mov ecx, dword [ebp - 0x364]
mov dword [ebp - 0x378], eax
mov eax, ecx
call fcn.004d65d0
mov eax, esp
mov ecx, dword [ebp - 0x364]
mov dword [ebp - 0x37c], eax
mov eax, ecx
call fcn.004d65d0
mov eax, esp
mov ecx, dword [ebp - 0x364]
mov dword [ebp - 0x380], eax
mov eax, ecx
call fcn.004d65d0
mov eax, esp
mov ecx, dword [ebp - 0x364]
mov dword [ebp - 0x384], eax
mov eax, ecx
call fcn.004d65d0
mov eax, esp
mov ecx, dword [ebp - 0x36c]
mov edx, 0x14
mov dword [ebp - 0x388], eax
mov eax, edx
mov dword [ebp - 0x38c], edx
mov dword [ebp - 0x390], ecx
call fcn.004d65d0
mov eax, esp
mov ecx, dword [ebp - 0x384]
mov edx, dword [ebp - 0x370]
mov esi, dword [ebp - 0x38c]
mov dword [ebp - 0x394], eax
mov eax, esi
mov dword [ebp - 0x398], ecx
mov dword [ebp - 0x39c], edx
call fcn.004d65d0
mov eax, esp
mov ecx, dword [ebp - 0x360]
mov edx, dword [ebp - 0x34c]
mov dword [ebp - 0x3a0], eax
mov eax, edx
mov dword [ebp - 0x3a4], ecx
call fcn.004d65d0
mov eax, esp
mov ecx, dword [ebp - 0x34c]
mov dword [ebp - 0x3a8], eax
mov eax, ecx
call fcn.004d65d0
mov eax, dword [ebp - 0x394]
mov ecx, esp
mov edx, dword [ebp - 0x358]
mov esi, dword [ebp - 0x380]
mov edi, dword [ebp - 0x34c]
mov dword [ebp - 0x3ac], eax
mov eax, edi
mov dword [ebp - 0x3b0], ecx
mov dword [ebp - 0x3b4], edx
mov dword [ebp - 0x3b8], esi
call fcn.004d65d0
mov eax, dword [ebp - 0x388]
mov ecx, dword [ebp - 0x35c]
mov edx, esp
mov esi, dword [ebp - 0x378]
mov edi, dword [ebp - 0x374]
mov ebx, dword [ebp - 0x368]
mov dword [ebp - 0x3bc], eax
mov eax, dword [ebp - 0x3b4]
mov dword [eax], 0
mov dword [ecx], 0
mov eax, dword [ebp - 0x3a4]
mov dword [eax], 0
mov dword [ebx], 0
mov ebx, dword [ebp - 0x390]
sub esp, 0xc
mov dword [esp], ebx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [ebp - 0x3c0], ecx
mov dword [ebp - 0x3c4], edi
mov dword [ebp - 0x3c8], esi
mov dword [ebp - 0x3cc], edx
call fcn.004d6e50
add esp, 0xc
mov eax, dword [ebp - 0x39c]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.004d6e50
add esp, 0xc
mov eax, dword [ebp - 0x3c4]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.004d6e50
add esp, 0xc
mov eax, dword [ebp - 0x3c8]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.004d6e50
add esp, 0xc
mov eax, dword [ebp - 0x3b8]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.004d6e50
add esp, 0xc
mov eax, dword [ebp - 0x398]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.004d6e50
add esp, 0xc
mov eax, dword [ebp - 0x3bc]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.004d6e50
add esp, 0xc
mov eax, dword [ebp - 0x3ac]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x14
call fcn.004d6e50
add esp, 0xc
mov eax, dword [ebp - 0x3a0]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x14
call fcn.004d6e50
add esp, 0xc
mov eax, dword [ebp - 0x3cc]
mov dword [eax], 0xffffffff
sub esp, 0x24
mov ecx, dword [ebp - 0x398]
mov dword [esp], ecx
mov edx, dword [ebp - 0x3a8]
mov dword [esp + 4], edx
mov edx, dword [ebp - 0x3c4]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0x20a
mov esi, dword [ebp - 0x3c8]
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], 0x20a
mov edi, dword [ebp - 0x39c]
mov dword [esp + 0x18], edi
mov dword [esp + 0x1c], 0x20a
mov ebx, dword [ebp - 0x3b8]
mov dword [esp + 0x20], ebx
call fcn.004acac0
add esp, 0x24
mov eax, 0x20a
sub esp, 8
mov ecx, dword [ebp - 0x3bc]
mov dword [esp], ecx
mov dword [esp + 4], 0x20a
mov dword [ebp - 0x3d0], eax
call fcn.00411d60
add esp, 8
mov eax, dword [0x4fa48c]
sub esp, 0xc
mov ecx, esp
mov edx, dword [ebp - 0x3bc]
mov dword [ecx + 8], edx
mov dword [ecx + 4], 0
mov dword [ecx], 0
call eax
mov ecx, dword [ebp - 0x3c0]
mov dword [ecx], eax
mov dword [ebp - 0x74], 0x38b9106d
jmp 0x4b1785
mov eax, dword [0x4fa4a8]
mov ecx, dword [ebp - 0x68]
mov ecx, dword [ecx]
sub esp, 8
mov edx, esp
mov dword [edx], ecx
mov dword [edx + 4], 0xffffffff
call eax
mov ecx, dword [ebp - 0x34]
mov dword [ecx], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x74], 0x36fdb9c7
mov dword [ebp - 0x3d4], eax
jmp 0x4b1785
mov eax, dword [0x4ec764]
movzx eax, word [eax]
mov ecx, dword [ebp - 0x24]
mov dword [ecx], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [eax]
add eax, 0xbefa1698
add eax, 1
sub eax, 0xbefa1698
mov ecx, dword [0x4ec764]
movzx eax, word [ecx + eax*2]
mov ecx, dword [ebp - 0x20]
mov dword [ecx], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
mov ecx, dword [0x4ec764]
mov edx, dword [ebp - 0x24]
mov edx, dword [edx]
shl edx, 1
add ecx, edx
add ecx, 4
mov edx, dword [0x4ec764]
add edx, 2
mov esi, dword [ebp - 0x24]
mov esi, dword [esi]
mov edi, dword [ebp - 0x40]
sub esp, 0x14
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
call fcn.0040b550
add esp, 0x14
mov eax, 0x40
mov ecx, 0
mov edx, 1
mov esi, dword [ebp - 0x40]
mov edi, dword [ebp - 0x4c]
mov ebx, dword [ebp - 0x5c]
sub esp, 0x18
mov dword [esp], ebx
mov dword [esp + 4], edi
mov dword [esp + 8], esi
mov dword [esp + 0xc], 0x40
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 1
mov dword [ebp - 0x3d8], eax
mov dword [ebp - 0x3dc], ecx
mov dword [ebp - 0x3e0], edx
call fcn.004ae190
add esp, 0x18
mov dword [ebp - 0x74], 0x7371a426
mov dword [ebp - 0x3e4], eax
jmp 0x4b1785
mov dword [ebp - 0x74], 0x67bdf1e1
jmp 0x4b1785
mov eax, dword [0x4fa4a8]
mov ecx, dword [ebp - 0x64]
mov ecx, dword [ecx]
sub esp, 8
mov edx, esp
mov dword [edx], ecx
mov dword [edx + 4], 0xffffffff
call eax
mov dword [ebp - 0x74], 0x9a8e4f45
mov dword [ebp - 0x3e8], eax
jmp 0x4b1785
mov dword [ebp - 0x74], 0xe289a4c2
jmp 0x4b1785
mov dword [ebp - 0x74], 0xad83ad19
jmp 0x4b1785
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
sub esp, 4
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
mov dword [ebp - 0x74], 0x65b7243a
mov dword [ebp - 0x3ec], eax
jmp 0x4b1785
mov eax, dword [0x4fa4b0]
mov ecx, dword [ebp - 0x58]
sub esp, 4
mov edx, esp
mov dword [edx], ecx
call eax
mov ecx, dword [ebp - 0x30]
mov dword [ebp - 0x74], 0xf9f46238
mov dword [ebp - 0x3f0], eax
mov dword [ebp - 0x3f4], ecx
jmp 0x4af114