Function at 0x47c296
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0xb4
mov dword [ebp - 0x70], ecx
mov eax, dword [0x4a7440]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov ecx, 0x72d2b041
cmp ecx, 0x14b52db9
jg 0x47c35e
cmp ecx, 0xc6e9dea1
jle 0x47c40e
cmp ecx, 0xe0a5f851
jle 0x47c4fb
cmp ecx, 0xf3a0f9ea
jle 0x47c68c
cmp ecx, 0x4d69446
jg 0x47c8ed
cmp ecx, 0x65184
jg 0x47cd32
cmp ecx, 0xf3a0f9eb
je 0x47d08c
cmp ecx, 0xf3dcad11
jne 0x47c2b4
mov edx, dword [0x4a7b48]
mov eax, dword [0x4a7b4c]
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x53bf8436
mov esi, 0xa3191e2a
cmovne edx, esi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, esi
cmp eax, 0xa
mov dword [ebp - 0x90], 0xffffffff
cmovge ecx, edx
jmp 0x47c2b4
cmp ecx, 0x5052a559
jg 0x47c4a9
cmp ecx, 0x35343633
jle 0x47c56a
cmp ecx, 0x42499dba
jle 0x47c6e1
cmp ecx, 0x4794a8e4
jg 0x47c923
cmp ecx, 0x44f0de53
jg 0x47cd62
cmp ecx, 0x42499dbb
je 0x47d0be
cmp ecx, 0x43cba5c0
jne 0x47c2b4
movsx eax, byte [ebp - 0x31]
push dword [ebp - 0x6c]
push eax
call fcn.004846ee
add esp, 8
mov byte [ebp - 0x4c], al
mov esi, dword [0x4a7b48]
mov edx, dword [0x4a7b4c]
lea ecx, [esi + 1]
imul ecx, esi
mov esi, ecx
xor esi, 0xfffffffe
test esi, ecx
sete ah
cmp edx, 0xa
setl bl
xor bl, ah
mov ebx, 0x5052a55a
mov eax, 0x4fa32700
cmovne ebx, eax
test esi, ecx
mov ecx, ebx
cmove ecx, eax
cmp edx, 0xa
cmovge ecx, ebx
mov al, byte [ebp - 0x4c]
mov byte [ebp - 0x43], al
jmp 0x47c2b4
cmp ecx, 0xa473aca8
jg 0x47c5bf
cmp ecx, 0x9204c5d3
jg 0x47c751
cmp ecx, 0x85e2d919
jle 0x47c95d
cmp ecx, 0x8aa3b08a
jg 0x47cd9e
cmp ecx, 0x85e2d91a
je 0x47d0d1
cmp ecx, 0x86e9df49
jne 0x47c2b4
push dword [ebp - 0x60]
call fcn.004845f6
add esp, 4
mov ecx, dword [ebp - 0x40]
mov edx, dword [ecx + 0x30]
dec dword [edx]
mov ecx, dword [ecx + 0x20]
mov edx, dword [ecx]
lea ebx, [edx + 1]
mov dword [ecx], ebx
mov byte [edx], al
mov eax, dword [0x4a7b48]
lea ecx, [eax + 1]
imul eax, ecx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete al
mov ecx, 0x14c12b9d
mov esi, 0x85e2d91a
cmove ecx, esi
cmp dword [0x4a7b4c], 0xa
mov edx, 0x14c12b9d
jmp 0x47d7c7
cmp ecx, 0x6456bb5a
jg 0x47c60b
cmp ecx, 0x58dfb041
jg 0x47c797
cmp ecx, 0x537d4e32
jle 0x47c997
cmp ecx, 0x53c6ad15
jg 0x47cde8
cmp ecx, 0x537d4e33
je 0x47d0db
cmp ecx, 0x53bf8436
jne 0x47c2b4
mov ecx, 0xf3dcad11
jmp 0x47c2b4
cmp ecx, 0xd019cc11
jg 0x47c7d1
cmp ecx, 0xcd347880
jle 0x47c9ef
cmp ecx, 0xceff59ef
jg 0x47ce14
cmp ecx, 0xcd347881
je 0x47d0e8
cmp ecx, 0xcd73c45c
jne 0x47c2b4
mov edx, dword [0x4a7b48]
mov eax, dword [0x4a7b4c]
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xcf62dd32
mov esi, 0x48e18062
jmp 0x47cf46
cmp ecx, 0x1f5c29e2
jg 0x47c817
cmp ecx, 0x1802377e
jle 0x47ca28
cmp ecx, 0x1e8ae60c
jg 0x47ce36
cmp ecx, 0x1802377f
je 0x47d0f6
cmp ecx, 0x1a765bab
jne 0x47c2b4
cmp dword [ebp - 0x8c], 0
mov ecx, 0xf3a0f9eb
mov eax, 0xa3761988
cmove ecx, eax
jmp 0x47c2b4
cmp ecx, 0xb7bdd040
jg 0x47c854
cmp ecx, 0xac4f61b8
jle 0x47ca8b
cmp ecx, 0xb0db2a21
jg 0x47ce66
cmp ecx, 0xac4f61b9
je 0x47d10f
cmp ecx, 0xb0c85e63
jne 0x47c2b4
mov eax, dword [ebp + 8]
mov dword [ebp - 0x74], eax
mov ecx, 0x15e5572
jmp 0x47c2b4
cmp ecx, 0x72d2b040
jg 0x47c88a
cmp ecx, 0x6e6dfbe5
jle 0x47cac7
cmp ecx, 0x706dd6b4
jg 0x47ce91
cmp ecx, 0x6e6dfbe6
je 0x47d122
cmp ecx, 0x6ef3209a
jne 0x47c2b4
mov edx, dword [0x4a7b48]
mov eax, dword [0x4a7b4c]
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov esi, 0xd019cc12
mov edi, 0x209920a1
cmovne esi, edi
test edx, ecx
mov ecx, esi
cmove ecx, edi
cmp eax, 0xa
cmovge ecx, esi
xor edi, edi
dec edi
jmp 0x47c2b4
cmp ecx, 0xe666acd3
jle 0x47cb40
cmp ecx, 0xe87167e4
jg 0x47ceb3
cmp ecx, 0xe666acd4
je 0x47d12f
cmp ecx, 0xe7e758b5
jne 0x47c2b4
mov eax, dword [0x4a7b48]
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete al
mov ecx, 0x537d4e33
mov esi, 0x1635f29e
jmp 0x47ca77
cmp ecx, 0x3b13fcdc
jle 0x47cb69
cmp ecx, 0x3fa7eaab
jg 0x47ced5
cmp ecx, 0x3b13fcdd
je 0x47d154
cmp ecx, 0x3decb760
jne 0x47c2b4
mov edi, dword [ebp - 0x68]
mov eax, dword [ebp - 0x48]
mov dword [eax], 1
mov eax, dword [0x4a7b48]
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete al
mov ecx, 0x9fa0e450
mov esi, 0x119a4f94
cmove ecx, esi
cmp dword [0x4a7b4c], 0xa
mov edx, 0x9fa0e450
jmp 0x47d7c7
cmp ecx, 0x975a5ef4
jle 0x47cbc0
cmp ecx, 0xa3191e29
jg 0x47cf00
cmp ecx, 0x975a5ef5
je 0x47d15e
cmp ecx, 0x9fa0e450
jne 0x47c2b4
mov edi, dword [ebp - 0x68]
mov eax, dword [ebp - 0x48]
mov dword [eax], 1
mov ecx, 0x3decb760
jmp 0x47c2b4
cmp ecx, 0x6164b522
jle 0x47cbe9
cmp ecx, 0x63d34867
jg 0x47cf5c
cmp ecx, 0x6164b523
je 0x47d19a
cmp ecx, 0x6300a035
jne 0x47c2b4
mov ecx, 0xe433881f
jmp 0x47c2b4
cmp ecx, 0xd7de46a5
jle 0x47cc17
cmp ecx, 0xdc6f894d
jg 0x47cf89
cmp ecx, 0xd7de46a6
je 0x47d1ce
cmp ecx, 0xd9b74ad3
jne 0x47c2b4
cmp byte [ebp - 0x42], 0
mov ecx, 0x7ced010c
mov eax, 0x66ea27c6
cmovne ecx, eax
jmp 0x47c2b4
cmp ecx, 0x25d02626
jle 0x47cc58
cmp ecx, 0x29119b3b
jg 0x47cfab
cmp ecx, 0x25d02627
je 0x47d21a
cmp ecx, 0x27b405a5
jne 0x47c2b4
mov ecx, 0x6164b523
mov edi, dword [ebp - 0x5c]
jmp 0x47c2b4
cmp ecx, 0xc0788d31
jle 0x47ccae
cmp ecx, 0xc53cdf98
jg 0x47cff7
cmp ecx, 0xc0788d32
je 0x47c880
cmp ecx, 0xc4e769f4
jne 0x47c2b4
mov ecx, 0x6164b523
jmp 0x47c2b4
cmp ecx, 0x78296729
jle 0x47cd04
cmp ecx, 0x7b6efb16
jg 0x47d01c
cmp ecx, 0x7829672a
je 0x47d232
cmp ecx, 0x79753d80
jne 0x47c2b4
mov edx, dword [0x4a7b48]
mov eax, dword [0x4a7b4c]
lea ecx, [edx - 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x83166100
mov esi, 0xbed21f41
jmp 0x47cf46
cmp ecx, 0x91842f6
jg 0x47d048
cmp ecx, 0x4d69447
je 0x47d248
cmp ecx, 0x4ecb687
jne 0x47c2b4
cmp dword [ebp - 0x7c], 0
setne byte [ebp - 0x41]
mov ecx, 0xb0db2a22
jmp 0x47c2b4
cmp ecx, 0x4b16a01f
jle 0x47d06f
cmp ecx, 0x4b16a020
je 0x47d25e
cmp ecx, 0x4fa32700
jne 0x47c2b4
cmp byte [ebp - 0x43], 0
mov ecx, 0x559f3639
mov eax, 0xc6e9dea2
cmovne ecx, eax
jmp 0x47c2b4
cmp ecx, 0x81819814
je 0x47d273
cmp ecx, 0x83166100
je 0x47d286
cmp ecx, 0x85983752
jne 0x47c2b4
mov eax, dword [ebp - 0x40]
add eax, 0x4c
mov dword [ebp - 0x88], eax
mov ecx, 0xab05f10e
jmp 0x47c2b4
cmp ecx, 0x5052a55a
je 0x47d293
cmp ecx, 0x51d4e4a6
je 0x47d2ad
cmp ecx, 0x533fdd9e
jne 0x47c2b4
mov eax, dword [0x4a7b48]
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete al
mov ecx, 0xcf62dd32
mov esi, 0xcd73c45c
cmove ecx, esi
cmp dword [0x4a7b4c], 0xa
mov edx, 0xcf62dd32
jmp 0x47d7c7
cmp ecx, 0xc6e9dea2
je 0x47d2c3
cmp ecx, 0xc8d051fe
je 0x47d2f7
cmp ecx, 0xc9f194f3
jne 0x47c2b4
mov ecx, dword [ebp - 0x40]
call fcn.0047afca
mov eax, dword [ebp - 0x40]
mov ecx, 0x69af2c74
jmp 0x47c2b4
cmp ecx, 0x14b52dba
je 0x47d322
cmp ecx, 0x14c12b9d
je 0x47d33b
cmp ecx, 0x1635f29e
jne 0x47c2b4
mov eax, dword [ebp - 0x64]
mov eax, dword [eax]
mov dword [ebp - 0x94], eax
mov eax, dword [0x4a7b48]
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete al
mov ecx, 0x537d4e33
mov esi, 0x5f4bea9a
cmove ecx, esi
cmp dword [0x4a7b4c], 0xa
mov edx, 0x537d4e33
jmp 0x47d7c7
cmp ecx, 0xa473aca9
je 0x47d364
cmp ecx, 0xa561fa5e
je 0x47d36e
cmp ecx, 0xab05f10e
jne 0x47c2b4
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
mov dword [ebp - 0x8c], eax
mov ecx, 0x1a765bab
jmp 0x47c2b4
cmp ecx, 0x6456bb5b
je 0x47d3f2
cmp ecx, 0x66ea27c6
je 0x47d43a
cmp ecx, 0x69af2c74
jne 0x47c2b4
mov ecx, dword [ebp - 0x40]
call fcn.0047afca
mov edx, dword [0x4a7b48]
mov eax, dword [0x4a7b4c]
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xc9f194f3
mov esi, 0x58dfb042
cmovne edx, esi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, esi
cmp eax, 0xa
mov eax, dword [ebp - 0x40]
cmovge ecx, edx
add eax, 0x38
mov dword [ebp - 0x64], eax
jmp 0x47c2b4
cmp ecx, 0xe0a5f852
je 0x47d44a
cmp ecx, 0xe2cec284
je 0x47d45a
cmp ecx, 0xe433881f
je 0x47d065
jmp 0x47c2b4
cmp ecx, 0x35343634
je 0x47d472
cmp ecx, 0x37211c55
je 0x47d4a6
cmp ecx, 0x38acaa10
jne 0x47c2b4
mov eax, dword [0x4a7b48]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
sete al
mov ecx, 0x76bc4dee
mov esi, 0xd7de46a6
cmove ecx, esi
cmp dword [0x4a7b4c], 0xa
mov edx, 0x76bc4dee
jmp 0x47d7c7
cmp ecx, 0x9204c5d4
je 0x47d4fd
cmp ecx, 0x92915acb
je 0x47d545
cmp ecx, 0x92c5bd6e
je 0x47d328
jmp 0x47c2b4
cmp ecx, 0x58dfb042
je 0x47d579
cmp ecx, 0x5d4623cc
je 0x47d583
cmp ecx, 0x5f4bea9a
jne 0x47c2b4
mov ecx, 0x1802377f
jmp 0x47c2b4
cmp ecx, 0xd019cc12
je 0x47d58d
cmp ecx, 0xd0d89c77
je 0x47d59a
cmp ecx, 0xd5edc554
jne 0x47c2b4
mov eax, dword [ebp - 0x40]
mov ecx, dword [eax + 0x20]
mov eax, dword [eax + 0x30]
mov ecx, dword [ecx]
add ecx, dword [eax]
mov dword [ebp - 0x84], ecx
mov ecx, 0xceff59f0
jmp 0x47c2b4
cmp ecx, 0x1f5c29e3
je 0x47d5ce
cmp ecx, 0x209920a1
je 0x47d5e3
cmp ecx, 0x23c8ea02
jne 0x47c2b4
mov edx, dword [0x4a7b48]
mov eax, dword [0x4a7b4c]
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x14c12b9d
mov esi, 0x86e9df49
jmp 0x47d741
cmp ecx, 0xb7bdd041
je 0x47d5ed
cmp ecx, 0xbed21f41
je 0x47d600
cmp ecx, 0xbf79937f
jne 0x47c2b4
mov edx, dword [0x4a7b48]
mov eax, dword [0x4a7b4c]
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x706dd6b5
mov esi, 0xa561fa5e
jmp 0x47d741
cmp ecx, 0x72d2b041
je 0x47d63f
cmp ecx, 0x75a88892
je 0x47d64f
cmp ecx, 0x76bc4dee
jne 0x47c2b4
mov ecx, 0xd7de46a6
jmp 0x47c2b4
cmp ecx, 0x65185
je 0x47d68b
cmp ecx, 0x15e5572
jne 0x47c2b4
push dword [ebp - 0x74]
call fcn.004844ae
add esp, 4
mov dword [ebp - 0x78], eax
mov ecx, 0x6e6dfbe6
jmp 0x47c2b4
cmp ecx, 0x44f0de54
je 0x47d695
cmp ecx, 0x472da14e
jne 0x47c2b4
mov eax, dword [0x4a7b48]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
sete al
mov ecx, 0x53c6ad16
mov esi, 0xd0d89c77
jmp 0x47d5ba
cmp ecx, 0x8aa3b08b
je 0x47d6db
cmp ecx, 0x8f9bcf20
jne 0x47c2b4
mov edx, dword [0x4a7b48]
mov eax, dword [0x4a7b4c]
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov esi, 0x5052a55a
mov ebx, 0x43cba5c0
jmp 0x47d18b
cmp ecx, 0x53c6ad16
je 0x47d6e5
cmp ecx, 0x559f3639
jne 0x47c2b4
mov dword [ebp - 0xb8], 0xffffffff
mov ecx, 0x81819814
jmp 0x47c2b4
cmp ecx, 0xceff59f0
je 0x47d6ef
cmp ecx, 0xcf62dd32
jne 0x47c2b4
mov ecx, 0xcd73c45c
jmp 0x47c2b4
cmp ecx, 0x1e8ae60d
je 0x47d70a
cmp ecx, 0x1ee333ec
jne 0x47c2b4
mov eax, dword [ebp - 0x54]
cmp eax, 3
mov ecx, 0x51d4e4a6
mov eax, 0xc53cdf99
cmove ecx, eax
jmp 0x47c2b4
cmp ecx, 0xb0db2a22
je 0x47d714
cmp ecx, 0xb48e6154
jne 0x47c2b4
mov ecx, 0x27b405a5
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x5c], eax
jmp 0x47c2b4
cmp ecx, 0x706dd6b5
je 0x47d756
cmp ecx, 0x728350e3
jne 0x47c2b4
mov ecx, 0x42499dbb
jmp 0x47c2b4
cmp ecx, 0xe87167e5
je 0x47d798
cmp ecx, 0xee5c561f
jne 0x47c2b4
mov ecx, 0xc0788d32
jmp 0x47c2b4
cmp ecx, 0x3fa7eaac
je 0x47d7d7
cmp ecx, 0x40da2a3c
jne 0x47c2b4
mov eax, dword [ebp + 8]
mov dword [ebp - 0x9c], eax
mov ecx, 0x2c5efd60
jmp 0x47c2b4
cmp ecx, 0xa3191e2a
je 0x47d7e1
cmp ecx, 0xa3761988
jne 0x47c2b4
mov edx, dword [0x4a7b48]
mov eax, dword [0x4a7b4c]
lea ecx, [edx - 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x53bf8436
mov esi, 0xf3dcad11
cmovne edx, esi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, esi
cmp eax, 0xa
cmovge ecx, edx
jmp 0x47c2b4
cmp ecx, 0x63d34868
je 0x47d7eb
cmp ecx, 0x64348c51
jne 0x47c2b4
mov eax, dword [ebp - 0x40]
mov eax, dword [eax + 0x20]
mov eax, dword [eax]
mov dword [ebp - 0x7c], eax
mov ecx, 0x4ecb687
jmp 0x47c2b4
cmp ecx, 0xdc6f894e
je 0x47d065
cmp ecx, 0xde281df5
jne 0x47c2b4
mov ecx, 0xbf79937f
jmp 0x47c2b4
cmp ecx, 0x29119b3c
je 0x47d7f5
cmp ecx, 0x2c5efd60
jne 0x47c2b4
push dword [ebp - 0x9c]
call fcn.004845f6
add esp, 4
movsx eax, al
push dword [ebp - 0x98]
push eax
call fcn.004846ee
add esp, 8
test al, al
mov ecx, 0x38acaa10
mov eax, 0xb7bdd041
cmovne ecx, eax
jmp 0x47c2b4
cmp ecx, 0xc53cdf99
je 0x47d802
cmp ecx, 0xc5473853
jne 0x47c2b4
mov ecx, 0x6164b523
mov edi, dword [ebp + 8]
jmp 0x47c2b4
cmp ecx, 0x7b6efb17
je 0x47d815
cmp ecx, 0x7ced010c
jne 0x47c2b4
mov dword [ebp - 0xb0], 0xffffffff
mov ecx, 0x14b52dba
jmp 0x47c2b4
cmp ecx, 0x91842f7
je 0x47d81f
cmp ecx, 0x119a4f94
je 0x47d331
jmp 0x47c2b4
mov ecx, 0xee5c561f
jmp 0x47c2b4
cmp ecx, 0x4794a8e5
jne 0x47d82f
mov eax, dword [ebp - 0x40]
mov byte [eax + 0x3d], 1
mov ecx, 0x37211c55
jmp 0x47c2b4
mov edx, dword [0x4a7b48]
mov eax, dword [0x4a7b4c]
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0xc9f194f3
mov esi, 0x69af2c74
jmp 0x47d741
mov ecx, 0x4d69447
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0x58], eax
jmp 0x47c2b4
mov ecx, 0xc5473853
jmp 0x47c2b4
mov eax, dword [ebp - 0x64]
mov ecx, 0x1635f29e
jmp 0x47c2b4
cmp dword [ebp - 0x50], 0
mov ecx, 0xe666acd4
jmp 0x47d56c
cmp dword [ebp - 0x94], 0
mov ecx, 0xde281df5
mov eax, 0x79753d80
cmove ecx, eax
jmp 0x47c2b4
mov ecx, 0x27b405a5
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x5c], eax
jmp 0x47c2b4
mov ecx, 0x6164b523
mov edi, dword [ebp - 0x78]
jmp 0x47c2b4
mov eax, dword [0x4a7b48]
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete al
mov ecx, 0x29119b3c
mov esi, 0x6456bb5b
jmp 0x47d426
mov ecx, 0x9204c5d4
jmp 0x47c2b4
mov edx, dword [0x4a7b48]
mov eax, dword [0x4a7b4c]
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov esi, 0x9fa0e450
mov ebx, 0x3decb760
cmovne esi, ebx
test edx, ecx
mov ecx, esi
cmove ecx, ebx
jmp 0x47d6d0
mov eax, dword [0x4a7b48]
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete al
mov ecx, 0x3b13fcdd
mov esi, 0x9204c5d4
cmove ecx, esi
cmp dword [0x4a7b4c], 0xa
mov edx, 0x3b13fcdd
jmp 0x47d7c7
mov edx, dword [0x4a7b48]
mov eax, dword [0x4a7b4c]
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x76bc4dee
mov esi, 0x5d4623cc
cmovne ebx, esi
test edx, ecx
mov ecx, ebx
cmove ecx, esi
cmp eax, 0xa
mov dword [ebp - 0xa4], 0xffffffff
cmovge ecx, ebx
jmp 0x47c2b4
mov eax, dword [ebp - 0x54]
cmp eax, 2
mov ecx, 0x51d4e4a6
mov eax, 0x1f5c29e3
cmovb ecx, eax
jmp 0x47c2b4
cmp byte [ebp - 0x41], 0
mov ecx, 0x85983752
mov eax, 0x4b16a020
cmovne ecx, eax
jmp 0x47c2b4
mov eax, dword [ebp - 0x48]
mov dword [eax], 1
mov ecx, 0xee5c561f
mov edi, dword [ebp - 0x58]
jmp 0x47c2b4
mov eax, dword [ebp - 0x40]
mov eax, dword [eax + 0x20]
mov eax, dword [eax]
mov dword [ebp - 0x80], eax
mov ecx, 0xd5edc554
jmp 0x47c2b4
mov ecx, 0x4d69447
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0x58], eax
jmp 0x47c2b4
mov eax, dword [ebp - 0x40]
mov ecx, 0xbed21f41
jmp 0x47c2b4
movsx eax, byte [ebp - 0x31]
push dword [ebp - 0x6c]
push eax
call fcn.004846ee
add esp, 8
mov ecx, 0x43cba5c0
jmp 0x47c2b4
mov eax, dword [ebp - 0x48]
mov dword [eax], 1
mov ecx, 0xdc6f894e
xor edi, edi
dec edi
jmp 0x47c2b4
mov edx, dword [0x4a7b48]
mov eax, dword [0x4a7b4c]
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov esi, 0x3fa7eaac
mov ebx, edi
mov edi, 0x75a88892
jmp 0x47d6c4
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0xc0], 0xffffffff
mov eax, dword [ebp - 0xc0]
cmp eax, dword [ebp + 8]
mov ecx, 0x64348c51
mov eax, 0xb0c85e63
cmove ecx, eax
jmp 0x47c2b4
mov edi, dword [ebp - 0xb0]
mov eax, dword [ebp - 0x48]
mov dword [eax], 1
mov ecx, 0x6300a035
jmp 0x47c2b4
push dword [ebp - 0x60]
call fcn.004845f6
add esp, 4
mov ecx, dword [ebp - 0x40]
mov edx, dword [ecx + 0x30]
dec dword [edx]
mov ecx, dword [ecx + 0x20]
mov edx, dword [ecx]
lea esi, [edx + 1]
mov dword [ecx], esi
mov byte [edx], al
mov ecx, 0x86e9df49
jmp 0x47c2b4
mov ecx, 0xd9b74ad3
jmp 0x47c2b4
push dword [ebp + 8]
call fcn.004845f6
add esp, 4
mov byte [ebp - 0x31], al
mov eax, dword [ebp - 0x40]
mov ecx, dword [eax + 0x38]
mov eax, dword [ebp - 0x40]
add eax, 0x40
mov edx, dword [ecx]
lea esi, [ebp - 0x3c]
push esi
lea esi, [ebp - 0x10]
push esi
lea esi, [ebp - 0x30]
push esi
lea esi, [ebp - 0x38]
push esi
lea esi, [ebp - 0x30]
push esi
lea esi, [ebp - 0x31]
push esi
push eax
call dword [edx + 0x1c]
mov dword [ebp - 0x4c], eax
mov ebx, dword [0x4a7b48]
mov edx, dword [0x4a7b4c]
lea ecx, [ebx + 1]
imul ecx, ebx
mov ebx, ecx
xor ebx, 0xfffffffe
test ebx, ecx
sete al
cmp edx, 0xa
setl ah
xor ah, al
mov eax, 0x706dd6b5
mov esi, 0x63d34868
cmovne eax, esi
test ebx, ecx
mov ecx, eax
cmove ecx, esi
cmp edx, 0xa
mov edx, dword [ebp - 0x4c]
mov dword [ebp - 0x54], edx
cmovge ecx, eax
jmp 0x47c2b4
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 0x40]
add eax, 0x4c
mov dword [ebp - 0xac], eax
mov eax, dword [0x4a7b48]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
sete al
mov ecx, 0x29119b3c
mov esi, 0x7b6efb17
cmove ecx, esi
cmp dword [0x4a7b4c], 0xa
mov edx, 0x29119b3c
jmp 0x47d7c7
mov eax, dword [ebp + 8]
mov dword [ebp - 0x68], eax
mov ecx, 0x975a5ef5
jmp 0x47c2b4
mov eax, dword [ebp + 8]
mov dword [ebp - 0x60], eax
mov ecx, 0x23c8ea02
jmp 0x47c2b4
mov eax, dword [ebp - 0x54]
cmp eax, 3
mov ecx, 0x1ee333ec
mov eax, 0x25d02627
cmovl ecx, eax
jmp 0x47c2b4
mov eax, dword [0x4a7b48]
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete al
mov ecx, 0x8aa3b08b
mov esi, 0x7829672a
cmove ecx, esi
cmp dword [0x4a7b4c], 0xa
mov edx, 0x8aa3b08b
jmp 0x47d7c7
mov eax, dword [ebp - 0x40]
mov byte [eax + 0x3d], 1
mov edx, dword [0x4a7b48]
mov eax, dword [0x4a7b4c]
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov esi, 0x4794a8e5
mov ebx, edi
mov edi, 0xa473aca9
cmovne esi, edi
test edx, ecx
mov ecx, esi
cmove ecx, edi
mov edi, ebx
cmp eax, 0xa
cmovge ecx, esi
lea eax, [ebp - 0x31]
cmp dword [ebp - 0x38], eax
setne byte [ebp - 0x42]
jmp 0x47c2b4
mov edx, dword [0x4a7b48]
mov eax, dword [0x4a7b4c]
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov esi, 0x3b13fcdd
mov ebx, 0x65185
cmovne esi, ebx
test edx, ecx
mov ecx, esi
cmove ecx, ebx
cmp eax, 0xa
cmovge ecx, esi
mov dword [ebp - 0xbc], edi
jmp 0x47c2b4
mov eax, dword [ebp - 0xac]
push dword [eax]
push dword [ebp - 0x50]
push 1
lea eax, [ebp - 0x30]
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
add esp, 0x10
mov ecx, dword [ebp - 0xa8]
cmp ecx, eax
mov ecx, 0xe87167e5
mov eax, 0x44f0de54
cmove ecx, eax
jmp 0x47c2b4
mov ecx, 0xe7e758b5
jmp 0x47c2b4
mov ecx, 0xac4f61b9
jmp 0x47c2b4
xor edi, edi
dec edi
mov ecx, 0x6ef3209a
jmp 0x47c2b4
mov eax, dword [0x4a7b48]
lea ecx, [eax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete al
mov ecx, 0x53c6ad16
mov esi, 0xc4e769f4
cmove ecx, esi
cmp dword [0x4a7b4c], 0xa
mov edx, 0x53c6ad16
jmp 0x47d7c7
mov ecx, dword [ebp - 0x3c]
lea eax, [ebp - 0x30]
sub ecx, eax
mov dword [ebp - 0x50], ecx
mov ecx, 0xcd347881
jmp 0x47c2b4
mov ecx, 0x92c5bd6e
jmp 0x47c2b4
mov eax, dword [ebp + 8]
mov dword [ebp - 0xa0], eax
mov ecx, 0xb48e6154
jmp 0x47c2b4
mov eax, dword [ebp - 0x40]
mov eax, dword [eax + 0x4c]
mov dword [ebp - 0x98], eax
mov eax, dword [0x4a7b48]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
sete al
mov ecx, 0x83166100
mov esi, 0x1e8ae60d
cmove ecx, esi
cmp dword [0x4a7b4c], 0xa
mov edx, 0x83166100
jmp 0x47d7c7
push eax
mov eax, esp
mov dword [ebp - 0x48], eax
mov ecx, 0xc8d051fe
jmp 0x47c2b4
mov eax, dword [ebp + 8]
mov dword [ebp - 0xb4], eax
mov eax, dword [0x4a7b48]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
sete al
mov ecx, 0x3fa7eaac
mov esi, 0x728350e3
cmove ecx, esi
cmp dword [0x4a7b4c], 0xa
mov edx, 0x3fa7eaac
jmp 0x47d7c7
mov ecx, 0x533fdd9e
jmp 0x47c2b4
mov edx, dword [0x4a7b48]
mov eax, dword [0x4a7b4c]
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov esi, 0x4794a8e5
mov ebx, edi
mov edi, 0x37211c55
cmovne esi, edi
test edx, ecx
mov ecx, esi
cmove ecx, edi
mov edi, ebx
cmp eax, 0xa
cmovge ecx, esi
jmp 0x47c2b4
mov ecx, 0x35343634
jmp 0x47c2b4
mov ecx, 0xd0d89c77
jmp 0x47c2b4
mov eax, dword [ebp - 0x80]
cmp eax, dword [ebp - 0x84]
mov ecx, 0x85983752
mov eax, 0xe0a5f852
cmovb ecx, eax
jmp 0x47c2b4
mov ecx, 0x40da2a3c
jmp 0x47c2b4
mov edx, dword [0x4a7b48]
mov eax, dword [0x4a7b4c]
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x8aa3b08b
mov esi, 0x35343634
cmovne ebx, esi
test edx, ecx
mov ecx, ebx
cmove ecx, esi
cmp eax, 0xa
cmovge ecx, ebx
jmp 0x47c2b4
push dword [ebp + 8]
call fcn.004845f6
add esp, 4
mov byte [ebp - 0x31], al
mov eax, dword [ebp - 0x40]
mov ecx, dword [eax + 0x38]
mov eax, dword [ebp - 0x40]
add eax, 0x40
mov edx, dword [ecx]
lea esi, [ebp - 0x3c]
push esi
lea esi, [ebp - 0x10]
push esi
lea esi, [ebp - 0x30]
push esi
lea esi, [ebp - 0x38]
push esi
lea esi, [ebp - 0x30]
push esi
lea esi, [ebp - 0x31]
push esi
push eax
call dword [edx + 0x1c]
mov ecx, 0xa561fa5e
jmp 0x47c2b4
mov eax, dword [0x4a7b48]
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete al
mov ecx, 0xd019cc12
mov esi, 0x6ef3209a
cmove ecx, esi
cmp dword [0x4a7b4c], 0xa
mov edx, 0xd019cc12
cmovge ecx, edx
setl dl
xor dl, al
cmovne ecx, esi
jmp 0x47c2b4
mov ecx, 0x75a88892
jmp 0x47c2b4
mov ecx, 0x91842f7
jmp 0x47c2b4
mov ecx, 0xe2cec284
jmp 0x47c2b4
mov eax, dword [ebp - 0x40]
mov ecx, 0x6456bb5b
jmp 0x47c2b4
mov eax, dword [ebp - 0x40]
mov eax, dword [eax + 0x4c]
mov dword [ebp - 0x6c], eax
mov ecx, 0x8f9bcf20
jmp 0x47c2b4
mov ecx, 0x92915acb
jmp 0x47c2b4
mov ecx, 0x472da14e
mov edi, dword [ebp - 0x90]
jmp 0x47c2b4
cmp ecx, 0x48e18062
jne 0x47c2b4
mov esi, dword [ebp - 0xbc]
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004a0b91
mov eax, esi
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret 4