Function at 0x4885c5
Capabilities:
Get thread local storage value
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4bf795
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0xd38
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 8]
test eax, eax
je 0x48e8f1
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 0x800], eax
mov eax, dword [ebp + 0x30]
mov dword [ebp - 0x89c], eax
lea eax, [ebp + 0x1c]
mov dword [ebp - 0x888], eax
lea eax, [ebp + 0x10]
mov dword [ebp - 0x8a4], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x894], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x7f8], eax
mov eax, dword [ebp + 0x34]
mov dword [ebp - 0x88c], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x7d0], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x8fc], eax
mov eax, dword [ebp - 0x888]
movzx eax, byte [eax]
test eax, eax
je 0x48e8b8
mov eax, dword [ebp - 0x7f8]
mov dword [ebp - 0x7c4], eax
mov eax, dword [ebp - 0x800]
mov dword [ebp - 0x6f0], eax
mov eax, dword [ebp - 0x88c]
mov dword [ebp - 0x6ac], eax
mov eax, dword [ebp - 0x894]
mov dword [ebp - 0x6a4], eax
mov eax, dword [ebp - 0x89c]
mov dword [ebp - 0x7f0], eax
mov eax, dword [ebp - 0x8a4]
mov dword [ebp - 0x8f0], eax
mov eax, dword [ebp - 0x8fc]
mov dword [ebp - 0x870], eax
mov eax, dword [ebp - 0x8f0]
movzx eax, byte [eax]
test eax, eax
je 0x48877e
mov eax, dword [ebp - 0x7f0]
mov dword [ebp - 0x6a8], eax
mov eax, dword [ebp - 0x6f0]
mov dword [ebp - 0x69c], eax
mov eax, dword [ebp - 0x6a8]
mov dword [ebp - 0x194], eax
mov eax, dword [ebp - 0x69c]
mov dword [ebp - 0x7bc], eax
push 3
mov ecx, dword [ebp - 0x194]
call fcn.0043566b
and dword [eax], 0
jmp 0x488723
push 3
mov ecx, dword [ebp - 0x194]
call fcn.0043566b
mov dword [ebp - 0x478], eax
mov eax, dword [ebp - 0x478]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x478]
mov dword [ecx], eax
push 3
mov ecx, dword [ebp - 0x194]
call fcn.0043566b
cmp dword [eax], 1
jg 0x488779
mov dword [ebp - 0xac8], 0x8ef6b8f3
mov dword [ebp - 0x640], 0x947597a6
mov eax, dword [ebp - 0x640]
dec eax
mov dword [ebp - 0x640], eax
push 3
mov ecx, dword [ebp - 0x194]
call fcn.0043566b
push dword [eax]
mov ecx, dword [ebp - 0x7bc]
call fcn.0043566b
cmp dword [eax], 0
je 0x488777
jmp 0x4886ff
jmp 0x4886ff
jmp 0x48e8b6
mov eax, dword [ebp - 0x6a4]
mov dword [ebp - 0x744], eax
mov eax, dword [ebp - 0x870]
mov dword [ebp - 0x7c0], eax
mov eax, dword [ebp - 0x6ac]
mov dword [ebp - 0x630], eax
mov eax, dword [ebp - 0x7c4]
mov dword [ebp - 0x284], eax
mov dword [ebp - 0x6c4], 1
push 4
lea ecx, [ebp - 0xa5c]
call fcn.0043557d
mov dword [ebp - 0x87c], 0x65c829e
mov dword [ebp - 0x6bc], 8
mov dword [ebp - 0x7cc], 0x9015
push 3
lea ecx, [ebp - 0x9fc]
call fcn.0043557d
mov dword [ebp - 0x648], 0x1381
mov dword [ebp - 0x6b4], str.mciasz_kovz_smyavsc_quew_twce_gwx_fchepoz_ayfczuj_xzrcqa
cmp dword [ebp - 0x648], 0x16af
jle 0x488907
and dword [ebp - 0x110], 0
jmp 0x48882a
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0x7bb4
jge 0x4888f0
and dword [ebp - 0x108], 0
jmp 0x488850
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0x6929
jge 0x4888eb
and dword [ebp - 0x188], 0
jmp 0x488876
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 0x29fc
jge 0x4888e6
and dword [ebp - 0x1c8], 0
jmp 0x488898
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 0x6222
jge 0x4888e4
mov ecx, dword [ebp - 0x108]
imul ecx, dword [ebp - 0x188]
mov eax, dword [ebp - 0x110]
sar eax, cl
xor eax, dword [ebp - 0x1c8]
cdq
mov dword [ebp - 0x80c], eax
mov dword [ebp - 0x808], edx
push dword [ebp - 0x808]
push dword [ebp - 0x80c]
mov ecx, 0xab56b8
call fcn.00435439
jmp 0x48888b
jmp 0x488869
jmp 0x488843
jmp 0x48881d
push 0
push 0x16f8
push 0x9d7
push 0x8a2
call dword [sym.imp.GDI32.dll_GetCharABCWidthsW]
push 0
push 0x78cc
push 0xdd2
push 1
push 0x1760
push 0
push 1
push 0
lea eax, [ebp - 0x8d8]
push eax
lea eax, [ebp - 0xa5c]
push eax
call fcn.00461bfd
add esp, 0x28
and dword [ebp - 4], 0
cmp dword [ebp - 0x648], 0x127c
jge 0x488956
mov edx, dword [ebp - 0x6b4]
mov ecx, 0xab56b8
call fcn.004371ef
jmp 0x488972
or dword [ebp - 4], 0xffffffff
jmp 0x48897c
push 0
push 0x2d2f
push 1
push 0x678d
push 0x6bcb
push 1
lea eax, [ebp - 0x8d8]
push eax
push 0
lea eax, [ebp - 0x9fc]
push eax
call fcn.00477c7d
add esp, 0x24
lea eax, [ebp - 0x6bc]
push eax
push 0xa81
lea eax, [ebp - 0x7cc]
push eax
lea eax, [ebp - 0xa5c]
push eax
push 0x7c2c
push 0
push 0x798c
push 0x36e7
push 0x1f6f
push 1
push 0x1271
push 0
push 0x4047
lea eax, [ebp - 0x6c4]
push eax
lea eax, [ebp - 0x9fc]
push eax
push 1
push 1
push 1
push 0x5dfb
lea eax, [ebp - 0x87c]
push eax
push 0x2a1d
call fcn.0045e2fc
add esp, 0x54
lea ecx, [ebp - 0x9fc]
call fcn.0043564f
lea ecx, [ebp - 0xa5c]
call fcn.0043564f
mov dword [ebp - 0x72c], 1
push 4
lea ecx, [ebp - 0xa38]
call fcn.0043557d
mov dword [ebp - 0x28], 0x7b18
mov dword [ebp - 0xa0], 0xffffffff
xor eax, eax
jne 0x488a5e
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x28], eax
jl 0x488ad4
mov dword [ebp - 0x6cc], 2
mov dword [ebp - 0x28], 0x17
jmp 0x488a78
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0x25
jl 0x488a9f
push 0x14b4
push 1
push 0
push 0x746c
push 1
push 0x656b
push 1
call fcn.0046d383
add esp, 0x1c
jmp 0x488a71
push 0xde9
lea eax, [ebp - 0xa0]
push eax
push 0
push 0x2781
push 0x7e18
lea eax, [ebp - 0x6cc]
push eax
push 0
push 0
push 0x2d1a
call fcn.00476a01
add esp, 0x24
jmp 0x488c63
mov dword [ebp - 0x984], 0
mov dword [ebp - 0x980], 0
mov dword [ebp - 0x97c], 0
mov dword [ebp - 0x978], 0
mov dword [ebp - 0x8ec], 8
mov dword [ebp - 0xa0], 0
jmp 0x488b1f
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 3
jg 0x488c3a
mov dword [ebp - 0x650], 1
mov byte [ebp - 0x6a], 0
movzx eax, byte [ebp - 0x6a]
test eax, eax
je 0x488b5c
push 0
push 0
push 0x4864
push 1
push 1
push 0x5da2
call fcn.004706e2
add esp, 0x18
push 1
push 0x6880
push 0x6119
push 1
push 0
lea eax, [ebp - 0x28]
push eax
push 0
call fcn.0045dd4f
add esp, 0x1c
mov dword [ebp - 0x28], 0
jmp 0x488b8a
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jg 0x488c35
mov dword [ebp - 0x6d4], 7
mov dword [ebp - 0x7d4], 0xe56e31bb
push 0
call fcn.0049ac66
pop ecx
mov eax, dword [ebp - 0xa0]
mov eax, dword [ebp + eax*4 - 0x984]
mov dword [ebp - 0xb24], eax
mov eax, dword [ebp - 0x650]
mov dword [ebp - 0xbe0], eax
mov eax, dword [ebp - 0x7d4]
mov dword [ebp - 0xb2c], eax
cmp dword [ebp - 0x650], 5
jl 0x488bf0
mov dword [ebp - 0x658], 1
jmp 0x488bf7
and dword [ebp - 0x658], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x658]
sub ecx, dword [ebp + eax - 0x984]
cmp ecx, dword [ebp - 0x6d4]
jl 0x488c1d
mov dword [ebp - 0x2cc], 1
jmp 0x488c24
and dword [ebp - 0x2cc], 0
mov eax, dword [ebp - 0x2cc]
mov dword [ebp - 0x8ec], eax
jmp 0x488b83
jmp 0x488b12
push 0x45c2
push 1
push 0
push 0x4edf
push 1
push 0x33e8
push 0xb57
push 0xbb4
push 0
call fcn.0045aa21
add esp, 0x24
mov byte [ebp - 0x86], 0
push 0x53e2
push 1
push 1
push 0x4c2b
push 0
push 0x5da2
push 0x7758
push 0xfaf
push 1
push 0x554e
lea eax, [ebp - 0x86]
push eax
push 0x7116
call fcn.0046987a
add esp, 0x30
mov dword [ebp - 0x804], 0x65c829e
mov dword [ebp - 0x734], 8
mov dword [ebp - 0x638], 0xfff6
mov dword [ebp - 0x6e4], 0xecf4a416
push 3
lea ecx, [ebp - 0xa08]
call fcn.0043557d
mov dword [ebp - 0x6dc], 1
mov dword [ebp - 0x7dc], 0
push 0x467b
lea eax, [ebp - 0xa08]
push eax
push 0x785b
push 0x367f
push 0xb8e
push 0
push 1
push 0x518e
lea eax, [ebp - 0xc2c]
push eax
push 1
push 1
call fcn.0046046e
add esp, 0x2c
lea eax, [ebp - 0x638]
push eax
push 1
push 0
push 0
push 0xfa2
push 1
push 0x1735
call fcn.00455b68
add esp, 0x1c
push 0
lea eax, [ebp - 0x638]
push eax
lea eax, [ebp - 0x6dc]
push eax
lea eax, [ebp - 0xa08]
push eax
lea eax, [ebp - 0x7dc]
push eax
lea eax, [ebp - 0x6e4]
push eax
call fcn.00490645
add esp, 0x18
lea ecx, [ebp - 0xa08]
call fcn.0043564f
mov dword [ebp - 0x898], 0x9015
mov dword [ebp - 0x2d0], 0x5818
mov dword [ebp - 0x688], str.wrrm_wcbgnbkk_ihgtb_pvv_flgzc_pdtrgj_puqungog
cmp dword [ebp - 0x2d0], 0x59f5
jle 0x488e44
and dword [ebp - 0x118], 0
jmp 0x488dc1
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0x5801
jge 0x488e44
and dword [ebp - 0x190], 0
jmp 0x488de3
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 0x6652
jge 0x488e3f
mov eax, dword [ebp - 0x118]
cdq
idiv dword [ebp - 0x190]
mov eax, edx
cdq
mov dword [ebp - 0x818], eax
mov dword [ebp - 0x814], edx
push dword [ebp - 0x814]
push dword [ebp - 0x818]
lea ecx, [ebp - 0xcc4]
call fcn.00401a1e
pop ecx
pop ecx
mov ecx, eax
call fcn.0043542e
push eax
call fcn.004a9457
pop ecx
lea ecx, [ebp - 0xcc4]
call fcn.00435424
jmp 0x488dd6
jmp 0x488db4
mov dword [ebp - 4], 2
cmp dword [ebp - 0x2d0], 0x567d
jge 0x488e63
push dword [ebp - 0x688]
call fcn.004a9457
pop ecx
jmp 0x488e7f
or dword [ebp - 4], 0xffffffff
jmp 0x488e89
mov dword [ebp - 0xa8], 0xffffffff
mov dword [ebp - 0xb34], 0x4eea2a3b
mov dword [ebp - 0xbf0], 1
mov dword [ebp - 0x494], 0x2fea
mov dword [ebp - 0x6ec], str.nwt_uxefdzjdw_qrylqc_ktjczx_vzmde_bewl_sgpoe_kqst_nmusn
cmp dword [ebp - 0x494], 0x301f
jle 0x488fa7
and dword [ebp - 0x120], 0
jmp 0x488ee1
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0x3aa2
jge 0x488fa7
and dword [ebp - 0x1e8], 0
jmp 0x488f07
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 0x1d16
jge 0x488fa2
and dword [ebp - 0x128], 0
jmp 0x488f2d
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0x1e83
jge 0x488f9d
and dword [ebp - 0x198], 0
jmp 0x488f4f
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 0x6c51
jge 0x488f9b
mov eax, dword [ebp - 0x120]
add eax, dword [ebp - 0x1e8]
mov ecx, dword [ebp - 0x128]
imul ecx, dword [ebp - 0x198]
or eax, ecx
cdq
mov dword [ebp - 0x824], eax
mov dword [ebp - 0x820], edx
push dword [ebp - 0x820]
push dword [ebp - 0x824]
mov ecx, 0xab56b8
call fcn.00435439
jmp 0x488f42
jmp 0x488f20
jmp 0x488efa
jmp 0x488ed4
push 1
lea ecx, [ebp - 0xbbc]
call fcn.0043557d
mov dword [ebp - 4], 4
cmp dword [ebp - 0x494], 0x2fb4
jge 0x488fd7
mov edx, dword [ebp - 0x6ec]
mov ecx, 0xab56b8
call fcn.004371ef
jmp 0x488ff3
or dword [ebp - 4], 0xffffffff
jmp 0x488ffd
mov dword [ebp - 0xb3c], 0x21afa9b6
mov dword [ebp - 0x34], 0
jmp 0x489017
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 3
jge 0x48902d
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0xbac], 0
jmp 0x489010
push 0
push 0x5c2f
lea eax, [ebp - 0xbbc]
push eax
push 1
lea eax, [ebp - 0x34]
push eax
push 0
push 1
push 1
push 0x280d
push 0x2666
call fcn.00461bfd
add esp, 0x28
mov dword [ebp - 0x34], 0
jmp 0x489069
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 1
jge 0x48907f
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x63c], 0xf1a969ac
jmp 0x489062
mov dword [ebp - 0xa8], 0
jmp 0x489098
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 2
jg 0x489156
push 1
lea ecx, [ebp - 0x8b4]
call fcn.0043557d
push 0x5953
push 0
push 1
lea eax, [ebp - 0x8b4]
push eax
push 0xf34
lea eax, [ebp - 0xc58]
push eax
push 0x5d5e
push 0x7e16
push 0
call fcn.0047218b
add esp, 0x24
push 0
lea ecx, [ebp - 0x8b4]
call fcn.0043566b
and dword [eax], 0
jmp 0x489118
push 0
lea ecx, [ebp - 0x8b4]
call fcn.0043566b
mov dword [ebp - 0x2d4], eax
mov eax, dword [ebp - 0x2d4]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x2d4]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x8b4]
call fcn.0043566b
cmp dword [eax], 2
jg 0x489146
mov eax, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0xa8]
mov eax, dword [ebp + eax*4 - 0xbac]
mov dword [ebp + ecx*4 - 0xbac], eax
jmp 0x4890f4
lea ecx, [ebp - 0x8b4]
call fcn.0043564f
jmp 0x48908b
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x63c]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x63c], eax
lea ecx, [ebp - 0xbbc]
call fcn.0043564f
push 3
lea ecx, [ebp - 0xa20]
call fcn.0043557d
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0x98], 0xfffffffe
mov dword [ebp - 0xc8], 0
jmp 0x4891b6
mov eax, dword [ebp - 0xc8]
dec eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0xffffffeb
jg 0x4892bd
mov dword [ebp - 0x9f0], 0xfffffffd
mov dword [ebp - 0x9ec], 0xfffffffd
mov dword [ebp - 0x9e8], 0xfffffffd
mov dword [ebp - 0x9e4], 0xfffffffd
lea ecx, [ebp - 0x205]
call fcn.0043567a
push eax
lea eax, [ebp - 0x9e0]
push eax
lea eax, [ebp - 0x9f0]
push eax
lea ecx, [ebp - 0xc8c]
call fcn.0043567d
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xbcc]
call fcn.00435629
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0
jne 0x489243
xor eax, eax
inc eax
jne 0x489243
and dword [ebp - 0x2dc], 0
jmp 0x48924d
mov dword [ebp - 0x2dc], 1
push 0
lea ecx, [ebp - 0xbcc]
call fcn.0043566b
mov ecx, dword [ebp - 0x2dc]
mov dword [eax], ecx
mov dword [ebp - 0x98], 0
jmp 0x48927b
mov eax, dword [ebp - 0x98]
dec eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0xfffffffd
jl 0x4892ad
push 0
push 0x6fd5
push 0x5672
push 0x3f29
push 0x7c6e
push 0x4b94
push 0
push 1
call fcn.0048ec42
add esp, 0x20
jmp 0x48926e
lea ecx, [ebp - 0xbcc]
call fcn.0043564f
jmp 0x4891a9
mov dword [ebp - 0x1a0], 0x6ff23b1a
mov dword [ebp - 0x6f4], 0xa01c77dc
mov dword [ebp - 0x49c], 0x976
mov dword [ebp - 0x7e4], str.gcq_zswjf_gtp_llogxj_xmtleeywy_blb_gxhxh_kpn_sxe_qajlx_iih_tqaskwrxu
cmp dword [ebp - 0x49c], 0xa22
jle 0x489368
and dword [ebp - 0x130], 0
jmp 0x489307
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0x14ae
jge 0x489368
and dword [ebp - 0x1d0], 0
jmp 0x489329
mov eax, dword [ebp - 0x1d0]
inc eax
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 0x1284
jge 0x489366
mov eax, dword [ebp - 0x130]
sub eax, dword [ebp - 0x1d0]
cdq
mov dword [ebp - 0x830], eax
mov dword [ebp - 0x82c], edx
push dword [ebp - 0x82c]
push dword [ebp - 0x830]
mov ecx, 0xab56b8
call fcn.00435439
jmp 0x48931c
jmp 0x4892fa
mov dword [ebp - 0x138], 0
jmp 0x489381
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 2
jge 0x48939d
mov eax, dword [ebp - 0x138]
mov dword [ebp + eax*4 - 0x9a4], 0x7084bc9c
jmp 0x489374
mov dword [ebp - 4], 6
cmp dword [ebp - 0x49c], 0x698
jge 0x4893c0
mov edx, dword [ebp - 0x7e4]
mov ecx, 0xab56b8
call fcn.004371ef
jmp 0x4893dc
or dword [ebp - 4], 0xffffffff
jmp 0x4893e6
cmp dword [ebp - 0x1a0], 0
jne 0x489444
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0xb44], eax
mov eax, 0x165352f7
cmp eax, 0x5b2906c
jge 0x489413
mov dword [ebp - 0x2e4], 1
jmp 0x48941a
and dword [ebp - 0x2e4], 0
mov eax, dword [ebp - 0x2e4]
mov dword [ebp - 0x1a0], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x9a4]
cmp dword [ebp - 0x1a0], eax
je 0x489444
mov eax, 0xacd40988
test eax, eax
je 0x489460
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x9a4], 0
je 0x489460
mov dword [ebp - 0x57c], 1
jmp 0x489467
and dword [ebp - 0x57c], 0
cmp dword [ebp - 0x57c], 1
ja 0x48947c
mov dword [ebp - 0x2ec], 1
jmp 0x489483
and dword [ebp - 0x2ec], 0
cmp dword [ebp - 0x2ec], 0x8e99
jg 0x4894d9
mov eax, 0xb4ef66b1
test eax, eax
je 0x4894d9
mov byte [ebp - 0x7d], 0
push 0x42a1
push 0
push 1
lea eax, [ebp - 0x7d]
push eax
push 0x23e3
push 1
call fcn.00460772
add esp, 0x18
mov byte [ebp - 0x70], 0
movzx eax, byte [ebp - 0x70]
test eax, eax
je 0x4894d7
push 0
push 0
push 0
push 0x3ba9
call fcn.0049608f
add esp, 0x10
jmp 0x48950c
push 0x7d90
push 0x4194
push 0x570d
push 0x60d3
push 0x3e1c
push 0x4b50
push 0x6b20
push 0
push 1
push 0
push 1
call fcn.004876ea
add esp, 0x2c
lea eax, [ebp - 0x6f4]
push eax
push 1
push 0
push 0x4e0d
push 0
push 1
push 0x429a
call fcn.004867bd
add esp, 0x1c
push 0x350f
push 1
push 1
push 0x1107
push 0x49e0
push 0
lea eax, [ebp - 0x704]
push eax
push 0x6a8b
lea eax, [ebp - 0xa38]
push eax
call fcn.0047021a
add esp, 0x24
mov dword [ebp - 0x584], 0x244d513c
mov dword [ebp - 0x24], 0x8d7cbae8
mov dword [ebp - 0x1f8], 0x4c7ba3f3
mov dword [ebp - 0x6fc], 0x2138b36c
mov dword [ebp - 0x7ec], 0xfffffffd
mov dword [ebp - 0x140], 0
jmp 0x4895a5
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 3
jge 0x4895c1
mov eax, dword [ebp - 0x140]
mov dword [ebp + eax*4 - 0xc84], 0xffffffff
jmp 0x489598
cmp dword [ebp - 0x24], 0
jne 0x4895da
cmp dword [ebp - 0x24], 0
jne 0x4895da
xor eax, eax
jne 0x4895da
and dword [ebp - 0x4a4], 0
jmp 0x4895e4
mov dword [ebp - 0x4a4], 1
mov eax, dword [ebp - 0x4a4]
neg eax
cmp eax, dword [ebp - 0x24]
jge 0x4895fd
mov dword [ebp - 0x2f4], 1
jmp 0x489604
and dword [ebp - 0x2f4], 0
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x2f4]
lea eax, [ecx + eax + 3]
imul eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x24]
jg 0x489626
mov dword [ebp - 0x5ec], 1
jmp 0x48962d
and dword [ebp - 0x5ec], 0
mov eax, dword [ebp - 0x1f8]
cmp dword [ebp - 0x5ec], eax
jl 0x489647
mov dword [ebp - 0x2fc], 1
jmp 0x48964e
and dword [ebp - 0x2fc], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x2fc], eax
jne 0x489665
mov dword [ebp - 0x4ac], 1
jmp 0x48966c
and dword [ebp - 0x4ac], 0
cmp dword [ebp - 0x4ac], 0
jne 0x489681
mov dword [ebp - 0x304], 1
jmp 0x489688
and dword [ebp - 0x304], 0
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x304]
cmp eax, dword [ebp - 0x24]
jle 0x4896a5
cmp dword [ebp - 0x24], 0
jne 0x4896a5
and dword [ebp - 0x8f4], 0
jmp 0x4896af
mov dword [ebp - 0x8f4], 1
mov eax, dword [ebp - 0x1f8]
mov dword [ebp - 0xc00], eax
mov dword [ebp - 0x584], 0
mov eax, dword [ebp - 0x584]
inc eax
sub eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x6fc]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x1f8], 0
je 0x4896f6
cmp dword [ebp - 0x1f8], 0
je 0x4896f6
mov dword [ebp - 0x30c], 1
jmp 0x4896fd
and dword [ebp - 0x30c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc84]
cmp dword [ebp - 0x30c], eax
jle 0x48971e
mov dword [ebp - 0x4b4], 1
jmp 0x489725
and dword [ebp - 0x4b4], 0
cmp dword [ebp - 0x4b4], 0xcd45
jge 0x48973d
mov dword [ebp - 0x314], 1
jmp 0x489744
and dword [ebp - 0x314], 0
mov eax, dword [ebp - 0x314]
mov dword [ebp - 0x7ec], eax
lea eax, [ebp - 0x704]
push eax
lea eax, [ebp - 0xa20]
push eax
push 0
call fcn.0049586d
add esp, 0xc
mov dword [ebp - 0x30], 0xb32a831d
mov dword [ebp - 0x148], 4
mov dword [ebp - 0x8c], 0xbd4856cd
mov dword [ebp - 0x94], 0xfffc
mov dword [ebp - 0x218], 0xb296
mov dword [ebp - 0xf4], 0x1675
mov dword [ebp - 0x7f4], 0xffff
mov dword [ebp - 0x71c], 0x5e7
mov dword [ebp - 0x384], 0x42359916
mov dword [ebp - 0x18], 0
jmp 0x4897cf
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x4897e5
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x298], 1
jmp 0x4897c8
mov dword [ebp - 0x18], 0
jmp 0x4897f5
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jge 0x48980b
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1a8], 0x1dda8db8
jmp 0x4897ee
mov dword [ebp - 0x18], 0
jmp 0x48981b
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x489831
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x2a4], 0xffffffff
jmp 0x489814
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0xb4c], eax
cmp dword [ebp - 0x30], 0xffffffff
jbe 0x489858
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
je 0x489858
mov dword [ebp - 0x624], 1
jmp 0x48985f
and dword [ebp - 0x624], 0
cmp dword [ebp - 0x624], 0
je 0x48987a
cmp dword [ebp - 0x30], 0
je 0x48987a
mov dword [ebp - 0x214], 1
jmp 0x489881
and dword [ebp - 0x214], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x214]
mov dword [ebp + eax - 0x298], ecx
cmp dword [ebp - 0x214], 0
je 0x4898af
cmp dword [ebp - 0x30], 0
je 0x4898af
mov dword [ebp - 0x31c], 1
jmp 0x4898b6
and dword [ebp - 0x31c], 0
cmp dword [ebp - 0x31c], 0x79c63c40
jle 0x4898ce
mov dword [ebp - 0x4bc], 1
jmp 0x4898d5
and dword [ebp - 0x4bc], 0
mov eax, dword [ebp - 0x148]
imul eax, dword [ebp - 0x4bc]
mov dword [ebp - 0x148], eax
mov eax, dword [ebp - 0x8c]
cmp dword [ebp - 0x148], eax
jge 0x489902
mov dword [ebp - 0x324], 1
jmp 0x489909
and dword [ebp - 0x324], 0
mov eax, dword [ebp - 0x8c]
cmp dword [ebp - 0x324], eax
je 0x489923
mov dword [ebp - 0x58c], 1
jmp 0x48992a
and dword [ebp - 0x58c], 0
cmp dword [ebp - 0x58c], 0
jne 0x489943
push 0xfffffffffffffffd
pop eax
test eax, eax
jne 0x489943
and dword [ebp - 0x32c], 0
jmp 0x48994d
mov dword [ebp - 0x32c], 1
cmp dword [ebp - 0x32c], 1
jae 0x489962
mov dword [ebp - 0x4c4], 1
jmp 0x489969
and dword [ebp - 0x4c4], 0
mov eax, dword [ebp - 0x8c]
cmp dword [ebp - 0x4c4], eax
jl 0x489983
mov dword [ebp - 0x334], 1
jmp 0x48998a
and dword [ebp - 0x334], 0
cmp dword [ebp - 0x334], 1
ja 0x48999f
mov dword [ebp - 0x5f4], 1
jmp 0x4899a6
and dword [ebp - 0x5f4], 0
mov eax, dword [ebp - 0x5f4]
neg eax
sub eax, dword [ebp - 0x8c]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x1a8]
jg 0x4899cf
mov dword [ebp - 0x33c], 1
jmp 0x4899d6
and dword [ebp - 0x33c], 0
mov eax, dword [ebp - 0x33c]
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0xc04], eax
cmp dword [ebp - 0x148], 0
jne 0x489a03
mov dword [ebp - 0x344], 1
jmp 0x489a0a
and dword [ebp - 0x344], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1a8], 5
jne 0x489a26
mov dword [ebp - 0x4cc], 1
jmp 0x489a2d
and dword [ebp - 0x4cc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x298]
cmp dword [ebp - 0x4cc], eax
jg 0x489a4e
mov dword [ebp - 0x594], 1
jmp 0x489a55
and dword [ebp - 0x594], 0
mov eax, dword [ebp - 0x344]
cmp eax, dword [ebp - 0x594]
jne 0x489a6f
mov dword [ebp - 0x34c], 1
jmp 0x489a76
and dword [ebp - 0x34c], 0
cmp dword [ebp - 0x34c], 0x2420
jge 0x489a8e
mov dword [ebp - 0x4d4], 1
jmp 0x489a95
and dword [ebp - 0x4d4], 0
mov eax, dword [ebp - 0x218]
cmp eax, dword [ebp - 0x4d4]
je 0x489ab4
or eax, 0xffffffff
je 0x489ab4
mov dword [ebp - 0x890], 1
jmp 0x489abb
and dword [ebp - 0x890], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x298]
mov dword [ebp - 0xb54], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1a8]
sub eax, 0x9cde
cmp eax, dword [ebp - 0xf4]
jne 0x489af4
mov dword [ebp - 0x354], 1
jmp 0x489afb
and dword [ebp - 0x354], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x354], eax
jne 0x489b12
mov dword [ebp - 0x64c], 1
jmp 0x489b19
and dword [ebp - 0x64c], 0
cmp dword [ebp - 0x64c], 0
jb 0x489b2e
mov dword [ebp - 0x35c], 1
jmp 0x489b35
and dword [ebp - 0x35c], 0
mov eax, dword [ebp - 0x35c]
neg eax
jne 0x489b4d
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x298], 0
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x298], 0x8101bc64
mov eax, dword [ebp - 0xf4]
cmp dword [ebp - 0x8c], eax
jg 0x489b78
mov dword [ebp - 0x4dc], 1
jmp 0x489b7f
and dword [ebp - 0x4dc], 0
mov eax, dword [ebp - 0x4dc]
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 1
jge 0x489b9a
mov dword [ebp - 0x364], 1
jmp 0x489ba1
and dword [ebp - 0x364], 0
imul eax, dword [ebp - 0x364], 0x8e43
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x2a4]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x1a8]
je 0x489bd3
mov dword [ebp - 0x59c], 1
jmp 0x489bda
and dword [ebp - 0x59c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2a4]
cmp dword [ebp - 0x59c], eax
jl 0x489c08
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2a4], 0
jne 0x489c08
and dword [ebp - 0x36c], 0
jmp 0x489c12
mov dword [ebp - 0x36c], 1
mov eax, dword [ebp - 0x218]
cmp dword [ebp - 0x36c], eax
jne 0x489c2c
mov dword [ebp - 0x4e4], 1
jmp 0x489c33
and dword [ebp - 0x4e4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2a4]
cmp eax, dword [ebp - 0x4e4]
jg 0x489c54
mov dword [ebp - 0x374], 1
jmp 0x489c5b
and dword [ebp - 0x374], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2a4]
cmp dword [ebp - 0x374], eax
jle 0x489c7c
mov dword [ebp - 0x70c], 1
jmp 0x489c83
and dword [ebp - 0x70c], 0
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0xb70], eax
cmp dword [ebp - 0x30], 0
je 0x489e38
mov dword [ebp - 0x90], 0xfffffffa
mov dword [ebp - 0xb5c], 0xffffffff
mov dword [ebp - 0xb7c], 0x4ca6a668
mov dword [ebp - 0x7fc], 0xfffffff8
cmp dword [ebp - 0x7f4], 0
je 0x489d1f
cmp dword [ebp - 0xf4], 0xffffffff
jl 0x489cdf
mov dword [ebp - 0x5fc], 1
jmp 0x489ce6
and dword [ebp - 0x5fc], 0
cmp dword [ebp - 0x5fc], 0x1f29a3a7
jge 0x489cfe
mov dword [ebp - 0x37c], 1
jmp 0x489d05
and dword [ebp - 0x37c], 0
mov eax, dword [ebp - 0x90]
cmp dword [ebp - 0x37c], eax
jne 0x489d1f
mov dword [ebp - 0x714], 1
jmp 0x489d26
and dword [ebp - 0x714], 0
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xc0c], eax
mov eax, dword [ebp - 0x90]
sub eax, 0x7078c3f
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x2a4]
je 0x489d58
mov dword [ebp - 0x8e4], 1
jmp 0x489d5f
and dword [ebp - 0x8e4], 0
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xb88], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x298], 0
je 0x489d90
cmp dword [ebp - 0x71c], 0
je 0x489d90
mov dword [ebp - 0x4ec], 1
jmp 0x489d97
and dword [ebp - 0x4ec], 0
mov eax, dword [ebp - 0x4ec]
mov dword [ebp - 0x384], eax
mov eax, dword [ebp - 0x384]
mov dword [ebp - 0xab8], eax
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0xac0], eax
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xab4], eax
cmp dword [ebp - 0x90], 0x350090e7
jne 0x489ddf
mov dword [ebp - 0x5a4], 1
jmp 0x489de6
and dword [ebp - 0x5a4], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x5a4]
mov dword [ebp + eax - 0x298], ecx
push 0x14a4
push 0
push 0x29d3
push 0x1241
push 1
push 0x5bd3
push 0x6024
push 0
push 0x5f6
push 0x69f1
push 0x2c71
lea eax, [ebp - 0x7fc]
push eax
call fcn.00452929
add esp, 0x30
jmp 0x489ea8
mov dword [ebp - 0x724], 0xf1f47437
push 0
push 1
push 0x6d85
push 0x5886
lea eax, [ebp - 0x218]
push eax
push 0x9ce
push 1
lea eax, [ebp - 0x724]
push eax
push 0x48ed
call fcn.0045b87e
add esp, 0x24
mov dword [ebp - 0x94], 0
jmp 0x489e8b
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 1
jg 0x489ea8
mov eax, dword [ebp - 0x94]
cmp dword [ebp + eax*4 - 0x2a4], 0
je 0x489ea6
jmp 0x489ea8
jmp 0x489e7e
push 0x7c01
push 0x22c1
push 0x6d2c
push 0x1672
push 0x715d
push 0x40b3
push 1
push 0x7eeb
push 0x799a
lea eax, [ebp - 0x898]
push eax
lea eax, [ebp - 0x72c]
push eax
lea eax, [ebp - 0xa20]
push eax
push 0
push 0
push 0x5c50
push 1
lea eax, [ebp - 0x804]
push eax
push 0x700c
push 0x42df
push 0x7d24
lea eax, [ebp - 0x734]
push eax
lea eax, [ebp - 0xa38]
push eax
push 0x3e00
push 0x3d64
call fcn.00487fc7
add esp, 0x60
lea ecx, [ebp - 0xa20]
call fcn.0043564f
lea ecx, [ebp - 0xa38]
call fcn.0043564f
push 4
lea ecx, [ebp - 0x8c4]
call fcn.0043557d
mov dword [ebp - 0x220], 0x8e9934b0
push 4
lea ecx, [ebp - 0x928]
call fcn.0043557d
mov dword [ebp - 0xc0], 0
jmp 0x489f7b
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 4
jge 0x489f9a
push dword [ebp - 0xc0]
lea ecx, [ebp - 0x8c4]
call fcn.0043566b
or dword [eax], 0xffffffff
jmp 0x489f6e
push 0x7df8
lea eax, [ebp - 0xc0]
push eax
lea eax, [ebp - 0x928]
push eax
push 1
push 0
push 0x262f
push 0
push 0xaa4
push 0x7d6b
push 0x5835
push 0x384d
push 0
push 1
call fcn.004758dc
add esp, 0x34
push 2
lea ecx, [ebp - 0x8c4]
call fcn.0043566b
and dword [eax], 0
jmp 0x48a00e
push 2
lea ecx, [ebp - 0x8c4]
call fcn.0043566b
mov dword [ebp - 0x38c], eax
mov eax, dword [ebp - 0x38c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x38c]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0x8c4]
call fcn.0043566b
cmp dword [eax], 0xd
jl 0x48a0fc
mov dword [ebp - 0x4f4], 0xafbbd0a7
mov dword [ebp - 0x8e8], 0x89bdd777
mov dword [ebp - 0xf8], 0
jmp 0x48a051
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 2
jge 0x48a06d
mov eax, dword [ebp - 0xf8]
mov dword [ebp + eax*4 - 0xb78], 0x5589b583
jmp 0x48a044
mov dword [ebp - 0x4f4], 0
imul eax, dword [ebp - 0x4f4], 9
cmp eax, 1
jge 0x48a08f
mov dword [ebp - 0x394], 1
jmp 0x48a096
and dword [ebp - 0x394], 0
mov eax, dword [ebp - 0x394]
mov dword [ebp - 0x220], eax
mov eax, dword [ebp - 0x220]
mov dword [ebp - 0xad0], eax
or eax, 0xffffffff
je 0x48a0c3
xor eax, eax
je 0x48a0c3
mov dword [ebp - 0x62c], 1
jmp 0x48a0ca
and dword [ebp - 0x62c], 0
mov eax, dword [ebp - 0x62c]
neg eax
mov dword [ebp - 0x39c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x39c]
mov dword [ebp + eax - 0xb78], ecx
mov eax, dword [ebp - 0x39c]
mov dword [ebp - 0x8e8], eax
jmp 0x489fea
push 1
lea ecx, [ebp - 0x928]
call fcn.0043566b
mov dword [ebp - 0x29c], eax
mov eax, dword [ebp - 0x29c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x29c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x29c]
cmp dword [eax], 0
jne 0x48a173
push 0x57e0
push 0x5780
push 1
push 0x2827
push 1
push 0x7f6d
push 0
push 0x2f14
push 0x708f
push 0x23bf
push 1
lea eax, [ebp - 0x220]
push eax
push 1
push 0x331d
push 0x66d9
call fcn.0046fb41
add esp, 0x3c
jmp 0x48a1b9
mov dword [ebp - 0x810], 0xfffffffc
mov dword [ebp - 0x73c], 0xfffffff8
push 0
push 0x11fc
lea eax, [ebp - 0x928]
push eax
push 1
lea eax, [ebp - 0x73c]
push eax
lea eax, [ebp - 0x810]
push eax
push 0x4b6e
push 0
push 0x16c0
call fcn.004524c3
add esp, 0x24
lea ecx, [ebp - 0x928]
call fcn.0043564f
lea ecx, [ebp - 0x8c4]
call fcn.0043564f
mov eax, dword [ebp - 0x744]
mov eax, dword [eax + 0x38]
mov dword [ebp - 0x27c], eax
mov dword [ebp - 0x228], 0xfffffffd
mov dword [ebp - 0x1d8], 0
mov dword [ebp - 0x99c], 0x5b0bb8bf
mov dword [ebp - 0x998], 0x5b0bb8bf
mov dword [ebp - 0x994], 0x5b0bb8bf
mov dword [ebp - 0x990], 0x5b0bb8bf
mov dword [ebp - 0x8a0], 0xfffd
mov dword [ebp - 0x3b4], 0
mov dword [ebp - 0x260], 0xcefbde28
push 1
lea ecx, [ebp - 0xa50]
call fcn.0043557d
mov dword [ebp - 0x150], 0
jmp 0x48a25e
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 1
jge 0x48a280
push dword [ebp - 0x150]
lea ecx, [ebp - 0xa50]
call fcn.0043566b
mov dword [eax], 0xbbb66efe
jmp 0x48a251
mov eax, dword [ebp - 0x228]
mov dword [ebp - 0xad8], eax
cmp dword [ebp - 0x8a0], 0
jle 0x48a2a1
mov dword [ebp - 0x3a4], 1
jmp 0x48a2a8
and dword [ebp - 0x3a4], 0
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 0x4fc], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x4fc]
mov dword [ebp + eax - 0x99c], ecx
mov eax, dword [ebp - 0x4fc]
cmp eax, dword [ebp - 0x3a4]
jge 0x48a2e5
push 0xfffffffffffffff8
pop eax
test eax, eax
jne 0x48a2e5
and dword [ebp - 0x5ac], 0
jmp 0x48a2ef
mov dword [ebp - 0x5ac], 1
mov eax, dword [ebp - 0x1d8]
cmp dword [ebp - 0x5ac], eax
je 0x48a309
mov dword [ebp - 0x3ac], 1
jmp 0x48a310
and dword [ebp - 0x3ac], 0
mov eax, dword [ebp - 0x1d8]
cmp eax, dword [ebp - 0x3ac]
jg 0x48a32a
mov dword [ebp - 0x504], 1
jmp 0x48a331
and dword [ebp - 0x504], 0
imul eax, dword [ebp - 0x504], 0x32c5
mov dword [ebp - 0x3b4], eax
cmp dword [ebp - 0x3b4], 0
jne 0x48a35c
cmp dword [ebp - 0x260], 0
jne 0x48a35c
and dword [ebp - 0x604], 0
jmp 0x48a366
mov dword [ebp - 0x604], 1
mov eax, dword [ebp - 0x604]
mov dword [ebp - 0x260], eax
mov eax, dword [ebp - 0x260]
mov dword [ebp - 0xae0], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x228]
cmp dword [ebp + eax - 0x99c], ecx
jl 0x48a39f
mov dword [ebp - 0x3bc], 1
jmp 0x48a3a6
and dword [ebp - 0x3bc], 0
mov eax, dword [ebp - 0x228]
imul eax, dword [ebp - 0x3bc]
test eax, eax
je 0x48a3cc
mov eax, 0xfffd
test eax, eax
je 0x48a3cc
mov dword [ebp - 0x50c], 1
jmp 0x48a3d3
and dword [ebp - 0x50c], 0
mov eax, dword [ebp - 0x1d8]
cmp dword [ebp - 0x50c], eax
je 0x48a3ed
mov dword [ebp - 0x3c4], 1
jmp 0x48a3f4
and dword [ebp - 0x3c4], 0
push 0
lea ecx, [ebp - 0xa50]
call fcn.0043566b
mov ecx, dword [ebp - 0x3c4]
mov dword [eax], ecx
lea ecx, [ebp - 0xa50]
call fcn.0043564f
mov dword [ebp - 0x160], 0xfffffff9
mov dword [ebp - 0xe8], 0x833fcb50
mov dword [ebp - 0x1f0], 0
mov dword [ebp - 0x158], 0
jmp 0x48a44b
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 2
jge 0x48a467
mov eax, dword [ebp - 0x158]
mov dword [ebp + eax*4 - 0xc9c], 0xffffffff
jmp 0x48a43e
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0xe8], eax
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x160], 0
je 0x48a553
mov dword [ebp - 0x74c], 0x6b8f3d42
mov byte [ebp - 0x87], 0
movzx eax, byte [ebp - 0x87]
test eax, eax
je 0x48a4f7
push 0
push 0
push 0x35b
push 0x11fa
push 0xceb
push 0x70c2
push 0x424
push 0x7c0c
push 0x19c1
push 0x3a7b
push 0x5134
push 0x2ddc
push 0x44d7
push 0x2e27
push 1
push 0x2516
call fcn.0046f0d1
add esp, 0x40
push 0x5614
push 0x1a59
push 1
push 0x4d2
push 0x3a4a
push 1
push 0x615b
push 0x68c0
push 0x689b
push 0x5455
push 1
push 0x5009
push 0x7e7f
lea eax, [ebp - 0x74c]
push eax
push 0
push 0
push 0x5f7a
lea eax, [ebp - 0x160]
push eax
call fcn.0045fa35
add esp, 0x48
jmp 0x48a714
mov dword [ebp - 0xae8], 0x9339b884
mov dword [ebp - 0xaf0], 0xfe1f230b
mov dword [ebp - 0xaf8], 0xdd8e181f
mov dword [ebp - 0xb00], 7
mov dword [ebp - 0xb08], 0x7f5e1753
mov dword [ebp - 0x1b0], 0
jmp 0x48a59e
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 4
jge 0x48a5ba
mov eax, dword [ebp - 0x1b0]
mov dword [ebp + eax*4 - 0x90c], 0x188047d2
jmp 0x48a591
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0xb10], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x90c], 0xf63588c5
je 0x48a5e4
mov dword [ebp - 0x81c], 1
jmp 0x48a5eb
and dword [ebp - 0x81c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x90c]
mov dword [ebp - 0xb18], eax
push 4
pop eax
imul eax, eax, 0
imul eax, dword [ebp + eax - 0x90c], 0xf7d2
add eax, 0x2e0f2044
cmp eax, 0x9f19
jg 0x48a627
mov dword [ebp - 0x5b4], 1
jmp 0x48a62e
and dword [ebp - 0x5b4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x90c]
mov dword [ebp - 0xb20], eax
mov eax, dword [ebp - 0x5b4]
mov dword [ebp - 0xe8], eax
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0xb28], eax
mov eax, dword [ebp - 0x1f0]
mov dword [ebp - 0xb30], eax
mov eax, dword [ebp - 0x1f0]
mov dword [ebp - 0xb38], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x90c], 0
jne 0x48a68c
mov dword [ebp - 0x3cc], 1
jmp 0x48a693
and dword [ebp - 0x3cc], 0
cmp dword [ebp - 0x3cc], 0x6b471dfd
jne 0x48a6ab
mov dword [ebp - 0x514], 1
jmp 0x48a6b2
and dword [ebp - 0x514], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x514]
sub ecx, dword [ebp + eax - 0x90c]
mov dword [ebp - 0x1f0], ecx
push 1
push 0x351c
push 0x6c8
push 0x6a1b
push 0x5367
push 0x5cbb
push 0x2ff1
push 0x1cff
lea eax, [ebp - 0xe8]
push eax
push 0x469d
push 1
push 1
push 0x4f01
push 0x6065
push 0
call fcn.00487289
add esp, 0x3c
push 4
lea ecx, [ebp - 0x8d4]
call fcn.0043557d
push 0x5f9c
push 0x11b6
push 0x7932
push 0x49e5
push 0x418b
push 0
push 0x58b2
push 1
push 1
push 1
push 0x62e2
push 0x7abe
push 0x62c2
push 0x1489
push 0x4fe1
call fcn.0045868e
add esp, 0x3c
mov dword [ebp - 0x9c], 0x8e9934b0
push 4
lea ecx, [ebp - 0x94c]
call fcn.0043557d
mov dword [ebp - 0x230], 0xfffffffd
mov dword [ebp - 0x1e0], 0
mov dword [ebp - 0x9b4], 0x5b0bb8bf
mov dword [ebp - 0x9b0], 0x5b0bb8bf
mov dword [ebp - 0x9ac], 0x5b0bb8bf
mov dword [ebp - 0x9a8], 0x5b0bb8bf
mov dword [ebp - 0x8f8], 0xfffd
mov dword [ebp - 0x3ec], 0
mov dword [ebp - 0x280], 0xcefbde28
push 1
lea ecx, [ebp - 0xa68]
call fcn.0043557d
push 1
push 0x3e8c
lea eax, [ebp - 0xb40]
push eax
push 0x72ff
push 0
push 0x2418
push 0
lea eax, [ebp - 0xa68]
push eax
call fcn.00461f2a
add esp, 0x20
mov dword [ebp - 0x3d4], 0xccf
mov dword [ebp - 0x754], str.akokglznj_kzk_gzgcwk_pdb
cmp dword [ebp - 0x3d4], 0xfbb
jle 0x48a8fe
and dword [ebp - 0x170], 0
jmp 0x48a84b
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 0x5318
jge 0x48a8fe
and dword [ebp - 0x168], 0
jmp 0x48a871
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 0x5ee7
jge 0x48a8f9
and dword [ebp - 0x1b8], 0
jmp 0x48a893
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 0x4609
jge 0x48a8f4
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x1b8]
sar eax, cl
and eax, dword [ebp - 0x170]
cdq
mov dword [ebp - 0x83c], eax
mov dword [ebp - 0x838], edx
push dword [ebp - 0x838]
push dword [ebp - 0x83c]
lea ecx, [ebp - 0xd0c]
call fcn.00401a1e
pop ecx
pop ecx
mov ecx, eax
call fcn.0043542e
push eax
call fcn.004a9457
pop ecx
lea ecx, [ebp - 0xd0c]
call fcn.00435424
jmp 0x48a886
jmp 0x48a864
jmp 0x48a83e
mov dword [ebp - 4], 8
cmp dword [ebp - 0x3d4], 0xc54
jge 0x48a91d
push dword [ebp - 0x754]
call fcn.004a9457
pop ecx
jmp 0x48a939
or dword [ebp - 4], 0xffffffff
jmp 0x48a943
mov eax, dword [ebp - 0x230]
mov dword [ebp - 0xb48], eax
cmp dword [ebp - 0x8f8], 0
jle 0x48a964
mov dword [ebp - 0x3dc], 1
jmp 0x48a96b
and dword [ebp - 0x3dc], 0
mov eax, dword [ebp - 0x1e0]
mov dword [ebp - 0x644], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x644]
mov dword [ebp + eax - 0x9b4], ecx
mov eax, dword [ebp - 0x644]
cmp eax, dword [ebp - 0x3dc]
jge 0x48a9a8
push 0xfffffffffffffff8
pop eax
test eax, eax
jne 0x48a9a8
and dword [ebp - 0x51c], 0
jmp 0x48a9b2
mov dword [ebp - 0x51c], 1
mov eax, dword [ebp - 0x1e0]
cmp dword [ebp - 0x51c], eax
je 0x48a9cc
mov dword [ebp - 0x3e4], 1
jmp 0x48a9d3
and dword [ebp - 0x3e4], 0
mov eax, dword [ebp - 0x1e0]
cmp eax, dword [ebp - 0x3e4]
jg 0x48a9ed
mov dword [ebp - 0x5bc], 1
jmp 0x48a9f4
and dword [ebp - 0x5bc], 0
imul eax, dword [ebp - 0x5bc], 0x32c5
mov dword [ebp - 0x3ec], eax
cmp dword [ebp - 0x3ec], 0
jne 0x48aa1f
cmp dword [ebp - 0x280], 0
jne 0x48aa1f
and dword [ebp - 0x524], 0
jmp 0x48aa29
mov dword [ebp - 0x524], 1
mov eax, dword [ebp - 0x524]
mov dword [ebp - 0x280], eax
mov eax, dword [ebp - 0x280]
mov dword [ebp - 0xb50], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x230]
cmp dword [ebp + eax - 0x9b4], ecx
jl 0x48aa62
mov dword [ebp - 0x3f4], 1
jmp 0x48aa69
and dword [ebp - 0x3f4], 0
mov eax, dword [ebp - 0x230]
imul eax, dword [ebp - 0x3f4]
test eax, eax
je 0x48aa8f
mov eax, 0xfffd
test eax, eax
je 0x48aa8f
mov dword [ebp - 0x60c], 1
jmp 0x48aa96
and dword [ebp - 0x60c], 0
mov eax, dword [ebp - 0x1e0]
cmp dword [ebp - 0x60c], eax
je 0x48aab0
mov dword [ebp - 0x3fc], 1
jmp 0x48aab7
and dword [ebp - 0x3fc], 0
push 0
lea ecx, [ebp - 0xa68]
call fcn.0043566b
mov ecx, dword [ebp - 0x3fc]
mov dword [eax], ecx
lea ecx, [ebp - 0xa68]
call fcn.0043564f
mov dword [ebp - 0x38], 0x2e91a04
mov dword [ebp - 0x5c], 6
mov dword [ebp - 0x38], 0x19
jmp 0x48aaf5
cmp dword [ebp - 0x38], 0x14
jl 0x48ac3e
push 2
lea ecx, [ebp - 0xa80]
call fcn.0043557d
mov dword [ebp - 0x50], 0
jmp 0x48ab1c
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 2
jge 0x48ab38
push dword [ebp - 0x50]
lea ecx, [ebp - 0xa80]
call fcn.0043566b
mov dword [eax], 2
jmp 0x48ab15
mov dword [ebp - 0x50], 0
jmp 0x48ab48
cmp dword [ebp - 0x50], 1
jge 0x48ab5e
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x178], 0x5cc25bfc
jmp 0x48ab41
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x178], 0
jne 0x48ab8a
mov dword [ebp - 0x5c], 0xfffffff3
jmp 0x48ac4e
cmp dword [ebp - 0x5c], 7
jne 0x48ae37
mov dword [ebp - 0x74], 0x23e5
mov dword [ebp - 0x75c], 0x8f5063f3
mov dword [ebp - 0x1c0], 0
jmp 0x48ac82
cmp dword [ebp - 0x1c0], 2
jge 0x48ac9e
mov eax, dword [ebp - 0x1c0]
mov dword [ebp + eax*4 - 0xb68], 0xe80c
jmp 0x48ac75
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x38], eax
xor eax, eax
sub eax, dword [ebp - 0x5c]
je 0x48acaf
mov dword [ebp - 0xb8], 0
jmp 0x48ae50
cmp dword [ebp - 0xb8], 4
jge 0x48ae6f
push dword [ebp - 0xb8]
lea ecx, [ebp - 0x8d4]
call fcn.0043566b
or dword [eax], 0xffffffff
jmp 0x48ae43
push 2
lea ecx, [ebp - 0xa98]
call fcn.0043557d
push 4
lea ecx, [ebp - 0xaa4]
call fcn.0043557d
mov dword [ebp - 0xb58], 0xfffffffe
mov dword [ebp - 0xb60], 0x164caf14
push 3
lea ecx, [ebp - 0xbdc]
call fcn.0043557d
mov dword [ebp - 0x2c], 0
jmp 0x48aeba
jmp 0x48e8ef
mov eax, dword [ebp - 0x7d0]
mov dword [ebp - 0x7d8], eax
push 0
push 0x1321
push 0x77ce
push 0
push 0x7883
push 0x14de
push 0x23f2
push dword [ebp - 0x7d8]
call fcn.00451f1e
add esp, 0x20
jmp 0x48e91d
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x7e8], eax
lea eax, [ebp + 0x28]
mov dword [ebp - 0x7e0], eax
mov eax, dword [ebp - 0x7e0]
movzx eax, byte [eax]
push eax
push 0
push dword [ebp - 0x7e8]
call fcn.00459c8a
add esp, 0xc
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret