Function at 0x4aff74
Capabilities:
Access peb ldr_data
Check http status code
Check os version
Encrypt data using speck
Get process heap flags
Parse credit card information
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0xf8
call 0x4aff83
pop eax
mov dword [esp + 0x98], eax
push 0x20
pop ecx
call fcn.004016e1
mov esi, eax
xor ecx, ecx
mov dword [eax], 0xae9
mov dword [eax + 4], 0x6c
mov dword [eax + 8], 0xb29
mov dword [eax + 0xc], 0x128
mov dword [eax + 0x10], 0x53c
mov dword [eax + 0x14], 0x333
mov dword [eax + 0x18], 0xabc
mov dword [eax + 0x1c], 0x7e0
push 0xffffffffffffffe0
pop eax
test eax, eax
je 0x4affde
add ecx, dword [esi + eax + 0x20]
add eax, 4
jmp 0x4affd1
mov edi, ecx
cmp ecx, 0xd8a
jne 0x4affee
sub esp, 0x600
push 0x38
pop ecx
call fcn.004016e1
mov edx, 0xbbc
mov ecx, 0xa8f
xor ebx, ebx
mov dword [eax], edx
mov dword [eax + 4], ecx
mov dword [eax + 8], 0xeb4
mov dword [eax + 0xc], 0xceb
mov dword [eax + 0x10], edx
mov dword [eax + 0x14], 0xe60
mov dword [eax + 0x18], 0xe06
mov dword [eax + 0x1c], 0x26a
mov dword [eax + 0x20], 0xd6
mov dword [eax + 0x24], 0x89b
mov dword [eax + 0x28], 0x3c8
mov dword [eax + 0x2c], 0x8fd
mov dword [eax + 0x30], ecx
mov dword [eax + 0x34], 0x4a0
push 0xffffffffffffffc8
pop ecx
mov edx, edi
test ecx, ecx
je 0x4b0065
add ebx, dword [eax + ecx + 0x38]
add ecx, 4
jmp 0x4b0058
cmp edx, 0x390
je 0x4b00ad
cmp edx, 0xeb5
je 0x4b0097
cmp edx, 0xeed
je 0x4b00a0
cmp edx, 0x32b1
jne 0x4b00b6
mov ecx, ebx
mov edx, 0x7fffffff
add ecx, 0x32b1
cmovno edx, ecx
jmp 0x4b00b6
mov edx, 0xeb5
sub edx, ebx
jmp 0x4b00b6
mov edx, 0xeed
add esp, 0x9f9
jmp 0x4b00b6
mov edx, 0x390
mov ecx, ebx
shr edx, cl
cmp ebx, 0x282
mov dword [esp + 0xc4], esi
mov dword [esp + 0xc0], eax
je 0x4b00f2
cmp ebx, 0xf5f
je 0x4b00e5
mov edi, edx
cmp ebx, 0x81db
jne 0x4b00fb
mov ebx, 0xdb810000
jmp 0x4b00fb
mov ebx, 0xf5f
mov ecx, edx
mov edi, edx
shl ebx, cl
jmp 0x4b00fb
mov ebx, 0x282
mov edi, edx
sub ebx, edx
push 8
pop ecx
call fcn.004016e1
xor esi, esi
mov dword [eax], 0xc92
mov dword [eax + 4], 0x13e
push 0xfffffffffffffff8
pop ecx
mov edx, edi
test ecx, ecx
je 0x4b0124
add esi, dword [eax + ecx + 8]
add ecx, 4
jmp 0x4b0117
cmp edx, 0x54e
mov dword [esp + 0xbc], eax
je 0x4b0142
cmp edx, 0xb48c
jne 0x4b0158
mov edx, 0x8cb40000
jmp 0x4b0158
mov edx, 0x54e
xor eax, eax
cmp edx, esi
setns al
add eax, 0x7fffffff
sub edx, esi
cmovo edx, eax
mov ecx, 0xdb810695
xor eax, eax
mov edi, 0xdb810695
cmp ecx, edx
setns al
add eax, 0x7fffffff
sub edi, edx
cmovo edi, eax
cmp ebx, ecx
cmovne edi, ebx
cmp esi, 0x580
mov dword [esp + 0x14], edi
jne 0x4b0197
mov eax, edx
shr eax, 0x1f
add eax, 0x7fffffff
imul esi, edx, 0x580
cmovo esi, eax
mov ecx, 0x265
mov ebp, 0xa56
mov edi, 0x2f73
mov dword [esp + 0xc], 0x453
mov ebx, esi
sub edi, 1
jb 0x4b023f
mov esi, ebx
mov edx, dword [esp + 0xc]
bswap esi
lea eax, [esi + ebx]
sar eax, 0x1f
add eax, 0x80000000
add esi, ebx
cmovo esi, eax
mov eax, ecx
mov ecx, dword [esp + 0x14]
sub ecx, edx
imul ecx, eax
call fcn.004015c4
mov dword [esp + 0x14], eax
mov eax, esi
bswap ebp
mov ecx, 0xf0f0f0f
mov edx, 0x55555555
mov dword [esp + 0xc], ebx
xor eax, ebx
shr eax, 0x1f
add eax, 0x7fffffff
imul esi, ebx
cmovo esi, eax
mov eax, ebp
and ebp, ecx
shr eax, 4
shl ebp, 4
and eax, ecx
mov ecx, 0x33333333
or ebp, eax
mov eax, ebp
shr ebp, 2
and eax, ecx
and ebp, ecx
lea eax, [ebp + eax*4]
mov ecx, eax
shr eax, 1
and ecx, edx
and eax, edx
mov edx, ebx
lea ebp, [eax + ecx*2]
mov ecx, ebx
shl ebp, cl
mov ecx, ebx
jmp 0x4b01ae
mov esi, ebp
cmp edx, 0x4fb
je 0x4b0283
cmp edx, 0xb3f
je 0x4b0263
cmp edx, 0x7fffffff
jne 0x4b0288
mov edx, esi
xor edx, 0x7fffffff
jmp 0x4b0288
mov edi, ecx
mov ecx, dword [esp + 0x14]
mov edx, 0xb3f
xor eax, eax
cmp edx, ecx
setns al
add eax, 0x7fffffff
sub edx, ecx
mov ecx, edi
cmovo edx, eax
jmp 0x4b0288
mov edx, 0xfb040000
mov eax, dword [esp + 0x14]
cmp eax, 0xb4c
je 0x4b02cb
cmp eax, 0xdaa
je 0x4b02de
cmp eax, 0xe18
je 0x4b02b0
cmp eax, 0xd5
jne 0x4b02f7
add esp, 0xab9
ud2
mov edi, ecx
mov ecx, dword [esp + 0xc]
mov eax, ecx
shr eax, 0x1f
add eax, 0x7fffffff
imul ecx, ecx, 0xe18
cmovo ecx, eax
jmp 0x4b02f1
mov edi, ecx
mov eax, 0xb4c
mov ecx, edx
shr eax, cl
mov ecx, edi
mov dword [esp + 0x14], eax
jmp 0x4b02f7
mov eax, dword [esp + 0xc]
mov edi, ecx
mov ecx, 0x7fffffff
add eax, 0xdaa
cmovno ecx, eax
mov dword [esp + 0x14], ecx
mov ecx, edi
mov eax, esi
cmp ebx, 0xfee
je 0x4b0318
cmp ebx, 0x7fffffff
jne 0x4b0327
mov edi, ecx
mov ebx, 0x7fffffff
mov ecx, edx
shl ebx, cl
mov ecx, edi
jmp 0x4b0327
add eax, 0xfee
mov ebx, 0x7fffffff
cmovno ebx, eax
mov eax, esi
cmp ecx, 0x365
je 0x4b0344
cmp ecx, 0x7fffffff
jne 0x4b034a
mov edi, 0x7fffffff
mov ecx, eax
shl edi, cl
mov ecx, edi
jmp 0x4b034a
lea ecx, [ebx + 0x365]
mov eax, dword [esp + 0xc]
mov ebp, ecx
cmp eax, 0x7fffffff
je 0x4b0366
cmp eax, 0x959
jne 0x4b0377
sub esp, 0x63b
ud2
mov eax, 0x7fffffff
mov ecx, dword [esp + 0x14]
shr eax, cl
mov ecx, ebp
mov dword [esp + 0xc], eax
cmp esi, 0x3c7
je 0x4b039c
mov edi, esi
mov esi, edx
cmp edi, 0x4c1
jne 0x4b03a9
mov eax, ecx
mov edi, 0x7fffffff
add eax, 0x4c1
cmovno edi, eax
jmp 0x4b03a9
mov esi, edx
sub esp, 0x114e
mov edi, 0x3c7
push 0x30
pop ecx
call fcn.004016e1
xor ecx, ecx
mov dword [eax], 0x279
mov dword [eax + 4], 0x356
mov dword [eax + 8], 0x973
mov dword [eax + 0xc], 0xe1
mov dword [eax + 0x10], 0xc38
mov dword [eax + 0x14], 0x3a
mov dword [eax + 0x18], 0x6d1
mov dword [eax + 0x1c], 0xfbb
mov dword [eax + 0x20], 0xfd4
mov dword [eax + 0x24], 0xe92
mov dword [eax + 0x28], 0x573
mov dword [eax + 0x2c], 0xbbf
push 0xffffffffffffffd0
pop edx
test edx, edx
je 0x4b0416
add ecx, dword [eax + edx + 0x30]
add edx, 4
jmp 0x4b0409
cmp esi, 0x5c3
je 0x4b0443
mov edx, dword [esp + 0x14]
cmp esi, 0x7fffffff
je 0x4b043a
cmp esi, 0x282
jne 0x4b044e
sub esp, 0x1249
ud2
mov esi, 0x7fffffff
shr esi, cl
jmp 0x4b044e
mov edx, dword [esp + 0x14]
mov esi, 0x5c3
shl esi, cl
cmp edx, 0xb17
mov dword [esp + 0x18], esi
je 0x4b047c
cmp edx, 0xb31
je 0x4b0472
cmp edx, 0xec5
jne 0x4b048a
sub esp, 0x8b3
ud2
mov dword [esp + 0x14], 0x8cd00000
jmp 0x4b048a
sub esp, 0xcce
mov dword [esp + 0x14], 0xb17
mov edx, ebx
neg edx
jo 0x4b04a3
cmp ebx, 0x80000328
jne 0x4b04a6
mov ebx, 0x80000328
sub ebx, dword [esp + 0x14]
jmp 0x4b04a6
xor ebx, ebx
inc ebx
mov edx, dword [esp + 0x18]
cmp ebp, 0x7c7
je 0x4b04ef
mov esi, ebp
cmp ebp, 0xa43
je 0x4b04e2
cmp esi, 0x7fffffff
jne 0x4b04f4
mov esi, dword [esp + 0xc]
mov edx, esi
shr edx, 0x1f
add edx, 0x7fffffff
imul ebp, esi, 0x7fffffff
cmovo ebp, edx
mov edx, dword [esp + 0x18]
jmp 0x4b04f4
sub esp, 0x1052
mov ebp, 0xa43
jmp 0x4b04f4
mov ebp, 0xc7070000
mov esi, dword [esp + 0xc]
mov dword [esp + 0xb8], eax
cmp esi, 0x150
je 0x4b0529
cmp esi, 0xce9
je 0x4b0521
mov edx, esi
cmp esi, 0x7fffffff
jne 0x4b0538
imul edx, ecx, 0x7fffffff
jmp 0x4b0538
lea edx, [edi + 0xce9]
jmp 0x4b0538
mov eax, edx
mov edx, 0x7fffffff
add eax, 0x150
cmovno edx, eax
mov dword [esp + 0xc], edx
imul edx, ebp, 0x6df
cmp edi, 0x6df
mov eax, 0x62b9
mov esi, 0x7fffffff
mov dword [esp + 0x24], 0x770
cmovne edx, edi
mov dword [esp + 8], edx
add edx, eax
cmovo edx, esi
cmp ecx, eax
mov eax, dword [esp + 0x14]
cmovne edx, ecx
mov ecx, ebp
mov ebp, 0x242
mov dword [esp], edx
mov edx, 0x311a
sub edx, 1
mov dword [esp + 4], ebp
jb 0x4b06a1
mov dword [esp + 0x14], edx
mov edx, dword [esp + 0x18]
mov eax, ecx
mov dword [esp + 0x10], ecx
mov ecx, dword [esp]
mov esi, 0xf0f0f0f
mov edi, 0x33333333
sar edx, cl
lea ecx, [edx + ebx]
sar ecx, 0x1f
add ecx, 0x80000000
add edx, ebx
cmovo edx, ecx
mov ecx, ebp
bswap ecx
mov dword [esp + 0x18], edx
mov ebp, ecx
and ecx, esi
shr ebp, 4
shl ecx, 4
and ebp, esi
or ecx, ebp
mov ebp, ecx
shr ecx, 2
and ebp, edi
and ecx, edi
mov edi, 0x55555555
lea ecx, [ecx + ebp*4]
mov ebp, ecx
shr ecx, 1
and ebp, edi
and ecx, edi
mov edi, 0x7fffffff
lea ebp, [ecx + ebp*2]
xor ecx, ecx
cmp ebp, edx
setns cl
add ecx, edi
sub ebp, edx
cmovo ebp, ecx
imul ebx, eax
mov eax, 0x33333333
bswap ebx
mov ecx, ebx
and ebx, esi
shr ecx, 4
shl ebx, 4
and ecx, esi
mov esi, dword [esp + 0x10]
or ebx, ecx
mov ecx, ebx
shr ebx, 2
and ecx, eax
and ebx, eax
mov eax, 0x55555555
lea ecx, [ebx + ecx*4]
mov ebx, ecx
shr ecx, 1
and ebx, eax
and ecx, eax
mov eax, dword [esp + 8]
lea ebx, [ecx + ebx*2]
mov ecx, edx
mov edx, dword [esp + 0xc]
sar ebx, cl
xor ecx, ecx
imul ebx, esi
bswap eax
cmp eax, ebx
setns cl
add ecx, edi
sub eax, ebx
cmovo eax, ecx
xor ecx, ecx
mov dword [esp + 8], eax
mov eax, dword [esp + 0x24]
cmp edx, eax
setns cl
add ecx, edi
sub edx, eax
cmovo edx, ecx
mov ecx, dword [esp]
xor eax, eax
shl edx, cl
cmp edx, ecx
setns al
add eax, edi
sub edx, ecx
cmovo edx, eax
mov eax, dword [esp + 4]
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x14]
sub ecx, eax
imul ebp, eax
mov dword [esp + 0x24], eax
mov eax, esi
bswap ecx
mov dword [esp], ecx
xor ecx, ecx
jmp 0x4b057e
mov ecx, dword [esp + 0x18]
cmp ecx, 0xa
jne 0x4b06be
mov ecx, dword [esp]
mov edx, ecx
shr edx, 0x1f
add edx, 0x7fffffff
imul ecx, ecx, 0xa
cmovo ecx, edx
mov ebp, dword [esp + 8]
cmp eax, 0xabd
mov edi, ecx
jne 0x4b06d9
mov ecx, 0xabd
mov edx, edi
call fcn.004015c4
mov ecx, edi
mov esi, dword [esp + 0xc]
mov dword [esp + 0x14], eax
xor eax, eax
mov edx, esi
neg edx
mov edx, esi
setns al
add eax, 0x7fffffff
neg esi
cmovo esi, eax
cmp edx, 0x97a9c610
mov dword [esp + 0x1c], esi
je 0x4b0739
cmp edx, 0x97a9c463
je 0x4b0724
cmp edx, 0x97a9c52c
je 0x4b0731
cmp edx, 0x97a9c038
jne 0x4b0744
imul edx, dword [esp + 4], 0x97a9c038
jmp 0x4b0744
add esp, 0x1252
mov edx, 0x97a9c463
jmp 0x4b0744
lea edx, [ecx - 0x68563ad4]
jmp 0x4b0744
sub esp, 0x5ad
mov edx, 0x97a9c610
cmp ebp, 0xffffff7f
je 0x4b0773
cmp ebp, 0xffffff92
je 0x4b075d
cmp ebp, 0xffffff96
jne 0x4b077a
imul ebp, dword [esp + 0x14], 0xffffff96
jmp 0x4b077a
push 0xffffffffffffff92
pop ecx
mov esi, edx
mov edx, dword [esp + 0x14]
call fcn.004015c4
mov edx, esi
mov ecx, edi
mov ebp, eax
jmp 0x4b077a
mov ebp, 0xffffff7f
sub ebp, ecx
mov esi, 0xcd2
mov eax, 0xcd2
shl esi, cl
mov ecx, dword [esp]
cmp ecx, eax
mov eax, dword [esp + 0x24]
cmovne esi, ecx
mov dword [esp], esi
cmp eax, 0xad1
je 0x4b07c7
cmp eax, 0xfae
je 0x4b07bc
cmp eax, 0x33080000
jne 0x4b07d9
mov esi, edx
mov ecx, 0x33080000
mov edx, ebx
call fcn.004015c4
mov edx, esi
jmp 0x4b07d9
mov eax, dword [esp + 4]
add eax, 0xfae
jmp 0x4b07d9
mov ecx, dword [esp + 0x1c]
mov eax, 0x7fffffff
add ecx, 0xad1
cmovno eax, ecx
mov ecx, dword [esp + 4]
mov dword [esp + 8], ebp
mov dword [esp + 0x24], eax
cmp ecx, 0x58b
je 0x4b0814
cmp ecx, 0x977
je 0x4b080a
cmp ecx, 0x5d680000
mov eax, ecx
jne 0x4b0819
mov eax, 0x5d680000
mov ecx, edx
shr eax, cl
jmp 0x4b0819
imul eax, dword [esp + 0x14], 0x977
jmp 0x4b0819
mov eax, 0xd1a00000
mov ebp, edx
mov dword [esp + 4], eax
push 0x40
pop ecx
call fcn.004016e1
mov esi, eax
xor ecx, ecx
mov dword [eax], 0xf58
mov dword [eax + 4], 0x2d1
mov dword [eax + 8], 0x4b1
mov dword [eax + 0xc], 0x246
mov dword [eax + 0x10], 0xecc
mov dword [eax + 0x14], 0x35b
mov dword [eax + 0x18], 0x73d
mov dword [eax + 0x1c], 0x6ca
mov dword [eax + 0x20], 0x8aa
mov dword [eax + 0x24], 0xe03
mov dword [eax + 0x28], 0x8ea
mov dword [eax + 0x2c], 0xc05
mov dword [eax + 0x30], 0xebe
mov dword [eax + 0x34], 0x144
mov dword [eax + 0x38], 0x373
mov dword [eax + 0x3c], 0x2b3
push 0xffffffffffffffc0
pop eax
mov edx, dword [esp]
test eax, eax
je 0x4b08ad
add ecx, dword [esi + eax + 0x40]
add eax, 4
jmp 0x4b08a0
cmp edi, 4
mov dword [esp + 0x10], ecx
je 0x4b08e7
cmp edi, 5
mov edx, ebp
je 0x4b08e0
cmp edi, 0xc
jne 0x4b090d
xor eax, eax
push 0xc
pop edi
mov ebp, dword [esp + 0x1c]
mov ecx, dword [esp + 0x10]
cmp edi, ebp
setns al
add eax, 0x7fffffff
sub edi, ebp
cmovo edi, eax
jmp 0x4b090d
push 5
pop edi
sub edi, ecx
jmp 0x4b090d
mov edi, edx
lea eax, [edx - 0x20000000]
lea ecx, [edx*4]
mov edx, ebp
shr edi, 0x1f
add edi, 0x7fffffff
cmp eax, 0xc0000000
cmovae edi, ecx
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x14]
test eax, eax
je 0x4b092d
cmp eax, 0x863
jne 0x4b0931
mov eax, 0x863
mov ecx, dword [esp + 0x1c]
shl eax, cl
mov dword [esp + 0x14], eax
jmp 0x4b0931
mov dword [esp + 0x14], ecx
mov ecx, 0x865
xor eax, eax
mov ebp, 0x865
cmp ecx, edx
setns al
add eax, 0x7fffffff
sub ebp, edx
cmovo ebp, eax
cmp ebx, ecx
mov ecx, dword [esp + 0x1c]
cmovne ebp, ebx
imul ebx, edi, 0x68564715
mov dword [esp + 0x18], ebp
cmp ecx, 0x68564715
cmovne ebx, ecx
cmp edx, 0x97a9b8eb
je 0x4b0985
cmp edx, 0x97a9bebb
jne 0x4b098f
sub esp, 0x1016
mov edx, 0x97a9bebb
jmp 0x4b098f
mov edx, 0x97a9b8eb
mov ecx, dword [esp]
shl edx, cl
cmp dword [esp + 8], 0xffffff80
mov ebp, edi
mov dword [esp + 0xc], edx
jne 0x4b09ac
push 0xffffffffffffff80
pop ecx
mov edx, dword [esp + 0x14]
call fcn.004015c4
mov dword [esp + 8], eax
mov eax, dword [esp]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x1c], ebx
cmp eax, 0x15474e35
je 0x4b09e5
cmp eax, 0x1007
je 0x4b09d3
cmp eax, 0x91
jne 0x4b09f7
mov eax, 0x89000000
jmp 0x4b09f7
mov ecx, 0x1007
mov edx, ebx
call fcn.004015c4
mov ecx, dword [esp + 0x14]
jmp 0x4b09f7
mov edx, dword [esp + 0x18]
mov eax, 0x7fffffff
add edx, 0x15474e35
cmovno eax, edx
mov dword [esp], eax
push 0xb
pop ebx
xor edx, edx
cmp ebx, eax
setns dl
add edx, 0x7fffffff
sub ebx, eax
mov eax, dword [esp + 0x24]
cmovo ebx, edx
cmp eax, 0xb
cmovne ebx, eax
mov eax, dword [esp + 4]
mov dword [esp + 0x24], ebx
cmp eax, 0x20a
je 0x4b0a78
cmp eax, 0x5f6
je 0x4b0a51
mov ebx, dword [esp + 0x1c]
cmp eax, 0x66c
je 0x4b0a5f
cmp eax, 0xb3b
jne 0x4b0a8a
add esp, 0x796
mov dword [esp + 4], 0xb3b
jmp 0x4b0a8a
mov ebx, dword [esp + 0x1c]
mov dword [esp + 4], 0x6fa00000
jmp 0x4b0a8a
mov eax, ecx
shr eax, 0x1f
add eax, 0x7fffffff
imul edx, ecx, 0x66c
cmovo edx, eax
mov dword [esp + 4], edx
jmp 0x4b0a8a
add esp, 0x1355
mov ebx, dword [esp + 0x1c]
mov dword [esp + 4], 0x20a
mov eax, dword [esp + 0x10]
cmp eax, 0x7db
je 0x4b0ab6
cmp eax, 0xcd9
je 0x4b0aae
cmp eax, 0x7b12
jne 0x4b0abc
mov eax, 0x7b12
mov ecx, ebx
shl eax, cl
jmp 0x4b0abc
lea eax, [ecx + 0xcd9]
jmp 0x4b0abc
imul eax, ecx, 0x7db
mov dword [esp + 0x10], eax
push 0x30
pop ecx
call fcn.004016e1
xor edi, edi
mov dword [eax], 0x7b5
mov dword [eax + 4], 0x961
mov dword [eax + 8], 0xcac
mov dword [eax + 0xc], 0x84e
mov dword [eax + 0x10], 0xd10
mov dword [eax + 0x14], 0xc7a
mov dword [eax + 0x18], 0x2d8
mov dword [eax + 0x1c], 0x5af
mov dword [eax + 0x20], 0xadd
mov dword [eax + 0x24], 0xe30
mov dword [eax + 0x28], 0xa13
mov dword [eax + 0x2c], 0x5cf
push 0xffffffffffffffd0
pop ecx
test ecx, ecx
je 0x4b0b2d
add edi, dword [eax + ecx + 0x30]
add ecx, 4
jmp 0x4b0b20
mov ecx, dword [esp]
mov edx, ebx
mov ebx, 0x7fffffff
add ecx, 0xe
cmovno ebx, ecx
cmp ebp, 0xe
cmovne ebx, ebp
cmp dword [esp + 0x14], 0xbfc
mov dword [esp + 0x20], ebx
je 0x4b774a
mov ecx, dword [esp + 0x18]
mov ebp, dword [esp + 8]
cmp ecx, 0x284
je 0x4b0b8a
mov ebx, edx
mov edx, dword [esp + 0xc]
cmp ecx, 0xf48
je 0x4b0b83
cmp ecx, 0x84b
jne 0x4b0b9f
add esp, 0x9a8
ud2
mov ecx, 0x480f0000
jmp 0x4b0b9f
mov ebx, 0x284
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0xc]
shr ebx, cl
mov ecx, ebx
mov ebx, dword [esp + 0x1c]
cmp ebx, 0x97a9b93a
mov dword [esp + 0xb4], eax
mov dword [esp + 0x18], ecx
je 0x4b0bf2
cmp ebx, 0x97a9bad4
je 0x4b0bd1
cmp ebx, 0x97a9bc0b
je 0x4b0bd8
cmp ebx, 0x97a9c89c
jne 0x4b0bf8
mov ebx, 0x9cc8a997
jmp 0x4b0bf8
mov ebx, 0x2b5d95e9
jmp 0x4b0bf8
mov edx, dword [esp + 4]
mov ecx, 0x97a9bc0b
call fcn.004015c4
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0xc]
mov ebx, eax
jmp 0x4b0bf8
lea ebx, [ecx - 0x685646c6]
cmp edx, 0x95c
je 0x4b0c45
cmp edx, 0xcc2
je 0x4b0c2c
cmp edx, 0xf23
je 0x4b0c34
cmp edx, 0x1d600000
jne 0x4b0c50
mov ecx, 0x1d600000
mov edx, ebp
call fcn.004015c4
mov ecx, dword [esp + 0x18]
mov edx, eax
jmp 0x4b0c50
imul edx, ebx, 0xcc2
jmp 0x4b0c50
mov eax, ecx
mov edx, 0x7fffffff
add eax, 0xf23
cmovno edx, eax
jmp 0x4b0c50
sub esp, 0x7e4
mov edx, 0x95c
test ebp, ebp
je 0x4b0ca0
cmp ebp, 0x1bf
je 0x4b0c8c
mov edx, dword [esp]
cmp ebp, 0x250
je 0x4b0c94
cmp ebp, 0xf3b
jne 0x4b0ca5
mov ecx, dword [esp + 4]
mov eax, ecx
shr eax, 0x1f
add eax, 0x7fffffff
imul ebp, ecx, 0xf3b
mov ecx, dword [esp + 0x18]
cmovo ebp, eax
jmp 0x4b0ca5
imul ebp, ebx, 0x1bf
jmp 0x4b0ca2
mov eax, dword [esp + 0x24]
lea ebp, [eax + 0x250]
jmp 0x4b0ca5
mov ebp, edx
mov edx, dword [esp]
cmp edx, 0xc56
mov dword [esp + 8], ebp
je 0x4b0cd6
cmp edx, 0xe2f
je 0x4b0cc9
cmp edx, 0x15474e35
jne 0x4b0ce1
lea edx, [ecx + 0x15474e35]
jmp 0x4b0ce1
sub esp, 0xc2c
mov edx, 0xe2f
jmp 0x4b0ce1
sub esp, 0xc3d
mov edx, 0xc56
mov eax, dword [esp + 0x24]
xor ebp, ebp
mov ecx, dword [esp + 0x10]
mov dword [esp], edx
inc ebp
shl ebp, cl
cmp eax, 1
cmovne ebp, eax
mov eax, dword [esp + 4]
cmp eax, 0x1f5
je 0x4b0d2f
cmp eax, 0xeb2
je 0x4b0d1b
cmp eax, 0xbad00
jne 0x4b0d42
mov eax, dword [esp + 0x20]
add eax, 0xbad00
jmp 0x4b0d29
mov edx, dword [esp + 8]
mov ecx, 0xeb2
call fcn.004015c4
mov dword [esp + 4], eax
jmp 0x4b0d42
mov eax, ebx
mov ecx, 0x7fffffff
add eax, 0x1f5
cmovno ecx, eax
mov dword [esp + 4], ecx
cmp edi, 0xa59
je 0x4b0d62
cmp edi, 0xdd2
jne 0x4b0d68
mov edx, dword [esp + 8]
mov ecx, 0xdd2
call fcn.004015c4
jmp 0x4b0d68
add esp, 0xafe
push 0x18
pop ecx
call fcn.004016e1
mov dword [eax], 0x8c4
mov dword [eax + 4], 0xe15
mov dword [eax + 8], 0x772
mov dword [eax + 0xc], 0xff5
mov dword [eax + 0x10], 0x2b5
mov dword [esp + 0xb0], eax
mov dword [eax + 0x14], 0x765
mov eax, dword [esp + 0x18]
test eax, eax
je 0x4b0dea
cmp eax, 0x486
je 0x4b0ddb
mov edi, dword [esp + 8]
mov ebp, dword [esp + 4]
cmp eax, 0x508
je 0x4b0de2
cmp eax, 0x67e
jne 0x4b0dfb
mov ecx, edi
shr ecx, 0x1f
add ecx, 0x7fffffff
imul eax, edi, 0x67e
cmovo eax, ecx
jmp 0x4b0dfb
mov eax, 0x86040000
jmp 0x4b0df3
lea eax, [ebx + 0x508]
jmp 0x4b0dfb
xor ecx, ecx
mov edx, ebp
call fcn.004015c4
mov edi, dword [esp + 8]
mov ebp, dword [esp + 4]
cmp ebx, 0x97a9c0e4
je 0x4b0e16
mov eax, dword [esp]
cmp ebx, 0x97a9bcbb
jne 0x4b0e25
add esp, 0xf08
ud2
mov edx, eax
mov ecx, 0x97a9c0e4
call fcn.004015c4
mov eax, dword [esp]
cmp edi, 9
jne 0x4b0e37
push 9
pop ecx
mov edx, ebp
call fcn.004015c4
mov eax, dword [esp]
cmp eax, 0x235
jne 0x4b0e44
sub esp, 0x122d
cmp ebp, 0xb74
mov dword [esp + 0xac], esi
jne 0x4b0e59
add esp, 0xea7
mov ecx, 0x7dc
mov ebp, 0x3a7
mov esi, 0xea1
mov edi, 0x1a0
mov edx, 0x515
mov eax, 0x2b00
mov dword [esp + 8], 0x75e
mov dword [esp + 0xc], 0x223
mov ebx, edx
sub eax, 1
jb 0x4b0f4d
mov dword [esp], eax
mov eax, ebp
mov esi, ebp
mov ebp, edi
mov ecx, ebx
mov edx, edi
sub eax, edi
sub ebp, ebx
sar eax, cl
mov ecx, 0x7fffffff
add ebp, eax
xor eax, eax
cmp edi, ebp
setns al
add eax, ecx
mov ecx, dword [esp + 8]
sub edi, ebp
cmovo edi, eax
call fcn.004015c4
xor edx, edx
cmp eax, esi
mov ecx, 0x7fffffff
setns dl
add edx, ecx
mov ecx, dword [esp + 0xc]
sub eax, esi
mov esi, 0xf0f0f0f
cmovo eax, edx
mov dword [esp + 8], eax
bswap ecx
mov edx, ecx
and ecx, esi
shr edx, 4
shl ecx, 4
and edx, esi
mov esi, 0x33333333
or ecx, edx
mov edx, ecx
shr ecx, 2
and edx, esi
and ecx, esi
mov esi, 0x55555555
lea edx, [ecx + edx*4]
mov ecx, edx
shr edx, 1
and ecx, esi
and edx, esi
lea esi, [edx + ecx*2]
xor ecx, ecx
mov edx, 0x7fffffff
cmp esi, eax
setns cl
add ecx, edx
sub esi, eax
cmovo esi, ecx
mov ecx, eax
imul edi, ebx
xor ecx, ebx
add esi, ebx
shr ecx, 0x1f
sub edi, esi
mov dword [esp + 0xc], esi
add ecx, edx
mov edx, ebx
imul edx, eax
mov eax, dword [esp]
cmovo edx, ecx
mov ecx, ebx
jmp 0x4b0e87
cmp dword [esp + 8], 0xf72
mov dword [esp + 0x10], ecx
je 0x4b0f7d
cmp dword [esp + 8], 0x7fffffff
jne 0x4b0f8b
mov edx, dword [esp + 0xc]
mov ecx, 0x7fffffff
call fcn.004015c4
mov ecx, dword [esp + 0x10]
mov dword [esp + 8], eax
jmp 0x4b0f8b
add esp, 0x5b7
mov dword [esp + 8], 0xf72
cmp ecx, 0xa64
mov dword [esp + 0x14], esi
jne 0x4b0f9d
add esp, 0x755
mov esi, dword [esp + 0x10]
mov ecx, 0x80000ca4
mov eax, 0x80000000
add esi, ecx
cmovo esi, eax
cmp ebp, ecx
cmovne esi, ebp
mov dword [esp + 0x30], esi
mov esi, dword [esp + 0xc]
cmp esi, 0xd3542acc
je 0x4b1005
cmp esi, 0xd3542fd3
mov ebp, edi
je 0x4b0fec
cmp esi, 0xd3543216
je 0x4b0ff3
cmp esi, 0xd354334e
jne 0x4b1014
mov esi, 0xd354334e
mov ecx, dword [esp + 8]
sar esi, cl
jmp 0x4b1012
mov esi, 0xcbf42acb
jmp 0x4b1014
mov ecx, 0xd3543216
mov edx, ebx
call fcn.004015c4
mov ebp, edi
mov esi, eax
jmp 0x4b1014
mov esi, dword [esp + 0x30]
add esi, 0xd3542acc
cmovo esi, eax
mov ebp, edi
mov eax, dword [esp + 0x14]
cmp eax, 0xd3543062
je 0x4b1032
cmp eax, 0xd35435de
mov ecx, ebx
jne 0x4b1049
mov dword [esp + 0x14], 0xde3554d3
jmp 0x4b1049
mov eax, dword [esp + 0x30]
mov ecx, 0x80000000
add eax, 0xd3543062
cmovno ecx, eax
mov dword [esp + 0x14], ecx
mov ecx, ebx
cmp ebp, 0x77d
je 0x4b1094
cmp ebp, 0x803
je 0x4b1073
cmp ebp, 0xbce
je 0x4b1087
cmp ebp, 0x2cabd534
jne 0x4b109b
imul ebp, dword [esp + 0x14], 0x2cabd534
jmp 0x4b109b
mov edx, dword [esp + 0x10]
mov ecx, 0x803
call fcn.004015c4
mov ecx, ebx
mov ebp, eax
jmp 0x4b109b
add esp, 0x110f
mov ebp, 0xbce
jmp 0x4b109b
mov ebp, 0x77d
sub ebp, esi
cmp ecx, 0x5d1
mov dword [esp + 0xc], esi
mov dword [esp + 4], ebp
je 0x4b10d7
cmp ecx, 0x61f
je 0x4b10ca
cmp ecx, 0xef1
jne 0x4b10f3
mov eax, 0xef1
mov ecx, dword [esp + 4]
shl eax, cl
mov ecx, eax
jmp 0x4b10f3
mov ecx, 0x61f
sub esp, 0x12ed
jmp 0x4b10f3
mov ecx, dword [esp + 0x10]
mov esi, 0x5d1
xor eax, eax
cmp esi, ecx
setns al
add eax, 0x7fffffff
sub esi, ecx
mov ecx, esi
cmovo ecx, eax
mov dword [esp + 0x28], ecx
mov eax, 0x798
mov ebx, 0xa51
mov ecx, 0x201
mov esi, 0x3077
mov edi, 0x455
mov dword [esp + 0x20], 0xeed
mov dword [esp + 0x1c], 0x6e6
mov dword [esp + 0x2c], 0x965
sub esi, 1
mov dword [esp + 0x34], ebx
mov dword [esp + 0x18], eax
mov dword [esp], edi
mov dword [esp + 0x24], ecx
jb 0x4b13d5
mov edx, dword [esp + 8]
mov dword [esp + 0x54], esi
mov esi, dword [esp + 0x14]
mov ebp, ecx
sar edx, cl
mov ecx, edx
mov edx, esi
call fcn.004015c4
mov edx, ebx
mov ecx, eax
mov dword [esp + 8], eax
xor eax, eax
bswap ebp
mov ebx, 0x80000000
bswap esi
bswap edx
sar edx, cl
mov ecx, 0x7fffffff
cmp edi, edx
mov dword [esp + 0x2c], edx
setns al
add eax, ecx
sub edi, edx
mov ecx, dword [esp + 4]
cmovo edi, eax
add ebp, edx
lea eax, [ebp + edx]
mov dword [esp + 0x48], edi
mov edi, 0x80000000
sar eax, 0x1f
xor eax, edi
add ebp, edx
mov edx, dword [esp + 0x18]
cmovo ebp, eax
mov dword [esp + 0x3c], ebp
mov ebp, ecx
lea eax, [ecx + edx]
sar eax, 0x1f
xor eax, edi
mov edi, dword [esp + 0x1c]
add ebp, edx
mov edx, 0x7fffffff
cmovo ebp, eax
xor eax, eax
cmp ebp, edi
setns al
add eax, edx
mov edx, dword [esp + 0xc]
sub ebp, edi
cmovo ebp, eax
imul edx, dword [esp + 8]
lea eax, [edx + ecx]
sar eax, 0x1f
xor eax, ebx
add edx, ecx
mov ecx, dword [esp]
cmovo edx, eax
shl ebp, cl
mov ecx, dword [esp + 0x18]
lea eax, [ebp + edx]
mov dword [esp + 0xc], edx
sar eax, 0x1f
xor eax, ebx
add ebp, edx
cmovo ebp, eax
lea eax, [ecx + ebp]
sar eax, 0x1f
xor eax, ebx
add ecx, ebp
mov ebx, 0xf0f0f0f
cmovo ecx, eax
mov eax, esi
mov dword [esp + 4], ecx
mov ecx, 0xf0f0f0f
shr eax, 4
and esi, ecx
and eax, ecx
mov ecx, 0x33333333
shl esi, 4
or esi, eax
mov eax, esi
shr esi, 2
and eax, ecx
and esi, ecx
lea eax, [esi + eax*4]
mov esi, 0x55555555
mov ecx, eax
shr eax, 1
and ecx, esi
and eax, esi
lea esi, [eax + ecx*2]
xor eax, eax
mov ecx, 0x7fffffff
imul esi, edx
mov edx, dword [esp + 0x28]
cmp esi, edx
setns al
add eax, ecx
sub esi, edx
mov edx, dword [esp + 0x10]
mov ecx, 0xf0f0f0f
cmovo esi, eax
mov dword [esp + 0x14], esi
mov esi, 0x33333333
bswap edx
mov eax, edx
and edx, ecx
shr eax, 4
shl edx, 4
and eax, ecx
mov ecx, 0x33333333
or edx, eax
mov eax, edx
shr edx, 2
and eax, ecx
and edx, ecx
mov ecx, 0x55555555
lea eax, [edx + eax*4]
mov edx, eax
shr eax, 1
and edx, ecx
and eax, ecx
mov ecx, dword [esp + 0x30]
lea eax, [eax + edx*2]
sub eax, dword [esp + 0x24]
bswap eax
mov edx, eax
and eax, ebx
shr edx, 4
shl eax, 4
and edx, ebx
mov ebx, 0x55555555
or eax, edx
mov edx, eax
shr eax, 2
and edx, esi
and eax, esi
mov esi, dword [esp + 0x20]
lea eax, [eax + edx*4]
mov edx, eax
shr eax, 1
and edx, ebx
and eax, ebx
add ecx, esi
lea eax, [eax + edx*2]
mov edx, 0x7fffffff
imul ecx, dword [esp + 0x18]
add eax, edi
mov dword [esp + 0x10], eax
mov eax, ecx
xor eax, edi
shr eax, 0x1f
add eax, edx
imul ecx, edi
mov edx, 0xf0f0f0f
cmovo ecx, eax
bswap ecx
mov eax, ecx
and ecx, edx
shr eax, 4
shl ecx, 4
and eax, edx
mov edx, 0x33333333
or ecx, eax
mov eax, ecx
shr ecx, 2
and eax, edx
and ecx, edx
lea eax, [ecx + eax*4]
mov ecx, 0x55555555
mov edx, eax
shr eax, 1
and edx, ecx
and eax, ecx
mov ecx, dword [esp + 0x28]
lea eax, [eax + edx*2]
mov edx, ebp
mov dword [esp + 0x30], eax
call fcn.004015c4
mov edx, dword [esp]
mov ecx, eax
mov ebx, 0x7fffffff
bswap esi
xor ecx, edx
shr ecx, 0x1f
add ecx, ebx
imul eax, edx
mov edx, dword [esp + 0x34]
cmovo eax, ecx
sub esi, dword [esp + 8]
mov ecx, dword [esp]
mov dword [esp + 0x28], eax
mov eax, esi
xor eax, edx
shr eax, 0x1f
add eax, ebx
imul esi, edx
mov ebx, dword [esp + 0x14]
cmovo esi, eax
shl edi, cl
mov ecx, 0x7fffffff
bswap edi
mov dword [esp + 0x20], esi
mov esi, dword [esp + 0x54]
mov eax, edi
xor eax, edx
sub dword [esp + 4], ebx
shr eax, 0x1f
add eax, ecx
imul edi, edx
mov edx, dword [esp + 0x3c]
cmovo edi, eax
mov dword [esp + 0x1c], edi
mov edi, dword [esp + 0x48]
mov eax, edx
xor eax, edi
shr eax, 0x1f
add eax, ecx
imul edi, edx
mov ecx, edx
cmovo edi, eax
mov eax, dword [esp + 4]
mov dword [esp + 4], ebp
add edi, ebx
mov ebx, dword [esp + 0x2c]
jmp 0x4b1128
cmp dword [esp + 8], 0xe63
je 0x4b1416
cmp dword [esp + 8], 0xf8d
mov edi, dword [esp + 0xc]
mov ecx, dword [esp + 4]
mov esi, dword [esp + 0x20]
mov eax, dword [esp + 0x30]
jne 0x4b1434
mov edx, 0xf8d
xor ebx, ebx
cmp edx, esi
setns bl
add ebx, 0x7fffffff
sub edx, esi
cmovo edx, ebx
mov dword [esp + 8], edx
jmp 0x4b1434
sub esp, 0x4dd
mov edi, dword [esp + 0xc]
mov ecx, dword [esp + 4]
mov esi, dword [esp + 0x20]
mov eax, dword [esp + 0x30]
mov dword [esp + 8], 0xe63
mov ebx, dword [esp + 0x10]
cmp ebx, 0xfe27d8b2
je 0x4b1484
cmp ebx, 0xfe27da87
je 0x4b1475
cmp ebx, 0xfe27dc36
jne 0x4b1492
mov esi, dword [esp + 8]
mov edx, 0xfe27dc36
xor ebx, ebx
cmp edx, esi
setns bl
add ebx, 0x7fffffff
sub edx, esi
mov esi, dword [esp + 0x20]
cmovo edx, ebx
mov dword [esp + 0x10], edx
jmp 0x4b1492
mov ebx, 0xfe27da87
sub ebx, dword [esp + 8]
mov dword [esp + 0x10], ebx
jmp 0x4b1492
add esp, 0xa6d
mov dword [esp + 0x10], 0xfe27d8b2
cmp eax, 0x389
je 0x4b14d5
cmp eax, 0x3b7
je 0x4b14b9
cmp eax, 0x57d
je 0x4b14cd
mov edx, dword [esp + 0x18]
cmp eax, 0x8a0
jne 0x4b14eb
mov eax, 0x5100000
jmp 0x4b14eb
mov edx, dword [esp + 0x34]
mov ecx, 0x3b7
call fcn.004015c4
mov ecx, dword [esp + 4]
jmp 0x4b14e7
imul eax, esi, 0x57d
jmp 0x4b14e7
mov edx, dword [esp + 8]
mov eax, 0x7fffffff
add edx, 0x389
cmovno eax, edx
mov edx, dword [esp + 0x18]
cmp edi, 0x800007a8
mov dword [esp + 0x30], eax
je 0x4b151b
cmp edi, 0x80000d12
jne 0x4b1526
mov edi, 0x80000d12
xor eax, eax
mov edx, dword [esp + 0x18]
cmp edi, ecx
setns al
add eax, 0x7fffffff
sub edi, ecx
cmovo edi, eax
jmp 0x4b1526
add esp, 0x125a
mov edi, 0x800007a8
mov ebx, dword [esp + 0x14]
cmp ebx, 0x800001ea
je 0x4b1562
cmp ebx, 0x8000091b
je 0x4b156e
cmp ebx, 0x8000097e
je 0x4b1552
cmp ebx, 0x800006b4
jne 0x4b157c
sub esp, 0x12f0
ud2
mov eax, 0x8000097e
mov ecx, dword [esp]
sar eax, cl
mov ecx, dword [esp + 4]
jmp 0x4b1568
lea eax, [edx - 0x7ffffe16]
mov dword [esp + 0x14], eax
jmp 0x4b157c
sub esp, 0x8da
mov dword [esp + 0x14], 0x8000091b
mov eax, ecx
mov ebp, edi
neg eax
jo 0x4b15ba
mov edi, dword [esp + 0x2c]
cmp ecx, 0x80000a07
je 0x4b15ce
cmp ecx, 0x80000e55
je 0x4b15a8
cmp ecx, 0x80000bb1
jne 0x4b15d9
sub esp, 0xf38
ud2
mov eax, ebp
sar eax, 0x1f
add eax, 0x80000000
imul ecx, ebp, 0x80000e55
jmp 0x4b15c9
mov ecx, dword [esp + 0x24]
mov edi, dword [esp + 0x2c]
mov eax, 0x80000000
add ecx, eax
cmovo ecx, eax
jmp 0x4b15d9
sub esp, 0xcf9
mov ecx, 0x80000a07
mov eax, dword [esp + 0x28]
cmp eax, 0x836
je 0x4b161a
cmp eax, 0xc1b
je 0x4b160b
cmp eax, 0xd9f
jne 0x4b1639
mov edx, dword [esp + 0x10]
mov esi, 0xd9f
xor eax, eax
cmp esi, edx
setns al
add eax, 0x7fffffff
sub esi, edx
jmp 0x4b162e
mov eax, dword [esp + 8]
add eax, 0xc1b
mov dword [esp + 0x28], eax
jmp 0x4b1639
mov esi, dword [esp + 0x24]
mov eax, esi
shr eax, 0x1f
add eax, 0x7fffffff
imul esi, esi, 0x836
cmovo esi, eax
mov dword [esp + 0x28], esi
mov esi, dword [esp + 0x20]
cmp esi, 0xfffacd2f
je 0x4b1668
mov eax, dword [esp + 0x18]
cmp esi, 0xfffad06f
je 0x4b165e
cmp esi, 0xfffad425
jne 0x4b1671
mov esi, 0xfffad425
sub esi, edi
jmp 0x4b1671
imul esi, dword [esp + 0x24], 0xfffad06f
jmp 0x4b1671
mov eax, dword [esp + 0x18]
mov esi, 0x2fcdfaff
test eax, eax
mov dword [esp + 4], ecx
je 0x4b16be
cmp eax, 0xd6
je 0x4b16c9
mov ecx, dword [esp + 0x28]
cmp eax, 0x4ab
je 0x4b169a
cmp eax, 0x5e4
jne 0x4b16d3
add esp, 0xc8a
ud2
mov edi, esi
mov esi, 0x4ab
xor eax, eax
cmp esi, ecx
setns al
add eax, 0x7fffffff
sub esi, ecx
cmovo esi, eax
mov dword [esp + 0x18], esi
mov esi, edi
mov edi, dword [esp + 0x2c]
jmp 0x4b16d3
xor ecx, ecx
mov edx, ebp
call fcn.004015c4
jmp 0x4b16cf
imul eax, esi, 0xd6
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x24]
cmp eax, 0x316
je 0x4b1702
cmp eax, 0x8e6
je 0x4b16f8
cmp eax, 0x510a0000
jne 0x4b170f
imul eax, ebp, 0x510a0000
jmp 0x4b170b
mov dword [esp + 0x34], 0xe6080000
jmp 0x4b170f
mov eax, dword [esp + 0x1c]
add eax, 0x316
mov dword [esp + 0x34], eax
cmp edi, 0x420
je 0x4b1726
cmp edi, 0x95d
jne 0x4b1736
mov edi, 0x5d090000
jmp 0x4b1736
mov eax, dword [esp]
mov edi, 0x7fffffff
add eax, 0x420
cmovno edi, eax
cmp ecx, 0x457
je 0x4b1777
cmp ecx, 0x4d5
je 0x4b1767
cmp ecx, 0xdf7
jne 0x4b1784
mov ecx, dword [esp + 0x14]
mov eax, ecx
shr eax, 0x1f
add eax, 0x7fffffff
imul ecx, ecx, 0xdf7
cmovo ecx, eax
jmp 0x4b1784
mov edx, dword [esp + 0x10]
mov ecx, 0x4d5
call fcn.004015c4
jmp 0x4b1782
mov eax, 0x457
mov ecx, dword [esp + 8]
shr eax, cl
mov ecx, eax
mov eax, dword [esp]
mov dword [esp + 0x2c], edi
mov dword [esp + 0x24], ecx
cmp eax, 0xffffffff
je 0x4b17b7
cmp eax, 5
je 0x4b17a9
cmp eax, 0xc
jne 0x4b17c7
push 0xc
pop eax
mov ecx, dword [esp + 0x34]
shl eax, cl
jmp 0x4b17b2
add esp, 0x1029
push 5
pop eax
mov dword [esp], eax
jmp 0x4b17c7
mov eax, dword [esp + 0x10]
mov ecx, 0x80000000
dec eax
cmovno ecx, eax
mov dword [esp], ecx
push 0x3c
pop ecx
call fcn.004016e1
xor edi, edi
mov dword [eax], 0xf94
mov dword [eax + 4], 0x254
mov dword [eax + 8], 0xf80
mov dword [eax + 0xc], 0x538
mov dword [eax + 0x10], 0x5f2
mov dword [eax + 0x14], 0x6bc
mov dword [eax + 0x18], 0x316
mov dword [eax + 0x1c], 0x829
mov dword [eax + 0x20], 0xc17
mov dword [eax + 0x24], 0xe04
mov dword [eax + 0x28], 0xf4e
mov dword [eax + 0x2c], 0x258
mov dword [eax + 0x30], 0x50
mov dword [eax + 0x34], 0xdc7
mov dword [eax + 0x38], 0x73
push 0xffffffffffffffc4
pop edx
mov ecx, dword [esp + 0x10]
test edx, edx
je 0x4b184d
add edi, dword [eax + edx + 0x3c]
add edx, 4
jmp 0x4b1840
cmp ecx, 0xfe27d4ac
mov dword [esp + 0xa8], eax
je 0x4b1879
mov edx, dword [esp + 8]
mov eax, dword [esp + 0x18]
cmp ecx, 0xfe27d6b6
jne 0x4b1886
sub esp, 0x885
mov ecx, 0xfe27d6b6
jmp 0x4b1886
mov edx, dword [esp + 8]
mov eax, dword [esp + 0x18]
mov ecx, 0xacd427fe
mov dword [esp + 0x10], ecx
mov ecx, dword [esp]
and ecx, 0x1f
push 0x57
pop ebx
mov dword [esp + 0x20], ecx
shl ebx, cl
mov ecx, dword [esp + 0x30]
cmp ecx, 0x57
cmovne ebx, ecx
cmp ebp, 0x800006e8
mov dword [esp + 0x60], ebx
je 0x4b18db
mov ecx, dword [esp + 4]
cmp ebp, 0x80000bef
je 0x4b18d4
cmp ebp, 0x80000faf
mov ebx, ebp
jne 0x4b18e6
mov ebx, 0x80000faf
mov ecx, eax
shl ebx, cl
mov ecx, dword [esp + 4]
jmp 0x4b18e6
mov ebx, 0xef0b0080
jmp 0x4b18e6
mov ecx, dword [esp + 4]
mov ebx, 0x800006e8
sar ebx, cl
mov dword [esp + 0xc], ebx
mov ebx, dword [esp + 0x14]
mov ebp, edx
shl ebp, 0x1f
mov eax, ebx
neg eax
cmovno ebp, ebx
cmp ecx, 9
mov ebx, edi
jne 0x4b1907
add esp, 0x129d
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x10]
mov edi, dword [esp + 0x2c]
cmp eax, 0x430
je 0x4b1943
cmp eax, 0x5ad
je 0x4b1932
cmp eax, 0x996
jne 0x4b194e
mov dword [esp + 0x28], 0x69900000
jmp 0x4b194e
mov eax, 0x5ad
mov ecx, dword [esp + 0x18]
shl eax, cl
mov ecx, dword [esp + 0x10]
jmp 0x4b194a
imul eax, dword [esp], 0x430
mov dword [esp + 0x28], eax
cmp esi, 0x2c3
je 0x4b1991
cmp esi, 0x567
je 0x4b1978
cmp esi, 0x2fcdfaff
jne 0x4b19a4
mov eax, dword [esp]
mov esi, 0x7fffffff
add eax, 0x2fcdfaff
cmovno esi, eax
jmp 0x4b19a4
mov edx, dword [esp]
mov ecx, 0x567
call fcn.004015c4
mov edx, dword [esp + 8]
mov ecx, dword [esp + 0x10]
mov esi, eax
jmp 0x4b19a4
mov eax, ebx
shr eax, 0x1f
add eax, 0x7fffffff
imul esi, ebx, 0x2c3
cmovo esi, eax
mov eax, dword [esp + 0x18]
cmp eax, 0x240
je 0x4b19dd
cmp eax, 0xce3
je 0x4b19d4
cmp eax, 0xe84
jne 0x4b19e8
mov eax, edx
shr eax, 0x1f
add eax, 0x7fffffff
imul edx, edx, 0xe84
cmovo edx, eax
mov eax, edx
jmp 0x4b19e8
mov eax, 0xce3
sub eax, ebx
jmp 0x4b19e8
sub esp, 0x81d
mov eax, 0x240
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x1c]
cmp eax, 0xc8
je 0x4b1a06
cmp eax, 0xc8b
jne 0x4b1a0c
sub esp, 0xc58
jmp 0x4b1a0c
add esp, 0x737
mov eax, dword [esp + 0x34]
cmp eax, 0x594
je 0x4b1a49
cmp eax, 0x6c6
je 0x4b1a3c
cmp eax, 0xfa6
jne 0x4b1a5c
mov eax, dword [esp + 0x60]
mov edx, 0x7fffffff
add eax, 0xfa6
cmovno edx, eax
mov dword [esp + 0x34], edx
jmp 0x4b1a5c
mov eax, 0x6c6
mov ecx, dword [esp + 0x10]
shl eax, cl
jmp 0x4b1a54
mov eax, 0x594
mov ecx, dword [esp + 0x20]
shr eax, cl
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x34], eax
mov eax, dword [esp + 4]
cmp edi, 0x5b8
je 0x4b1a96
cmp edi, 0x510a0000
je 0x4b1a80
cmp edi, 0xeef
jne 0x4b1a9c
add esp, 0x1363
ud2
mov edx, dword [esp + 0x60]
mov ecx, 0x510a0000
call fcn.004015c4
mov ecx, dword [esp + 0x10]
mov edi, eax
jmp 0x4b1a9c
lea edi, [eax + 0x5b8]
mov eax, dword [esp + 0x24]
cmp eax, 0xe7
je 0x4b1abb
cmp eax, 0x24d
jne 0x4b1ac1
mov eax, 0x24d
add esp, 0x856
jmp 0x4b1ac1
imul eax, ecx, 0xe7
mov dword [esp + 0x24], eax
mov eax, dword [esp]
cmp eax, 0xfe27d2be
je 0x4b1b1b
cmp eax, 0xfe27d4da
je 0x4b1af7
mov ecx, dword [esp + 0x28]
cmp eax, 0xfe27daaa
je 0x4b1b00
cmp eax, 0xfe27dc6c
jne 0x4b1b2d
sub esp, 0x4ba
mov dword [esp], 0xfe27dc6c
jmp 0x4b1b2d
mov eax, 0xfe27d4da
sub eax, esi
jmp 0x4b1b26
mov edx, 0xfe27daaa
xor eax, eax
cmp edx, edi
setns al
add eax, 0x7fffffff
sub edx, edi
cmovo edx, eax
mov dword [esp], edx
jmp 0x4b1b2d
mov eax, 0xfe27d2be
mov ecx, dword [esp + 4]
shl eax, cl
mov ecx, dword [esp + 0x28]
mov dword [esp], eax
cmp ebx, 0x69c
mov dword [esp + 0x20], esi
je 0x4b1b67
cmp ebx, 0xb08
je 0x4b1b5b
cmp ebx, 0x78d8
jne 0x4b1b6d
mov edx, dword [esp + 0x60]
mov ecx, 0x78d8
call fcn.004015c4
mov ebx, eax
jmp 0x4b1b6d
mov eax, dword [esp + 0xc]
lea ebx, [eax + 0xb08]
jmp 0x4b1b6d
imul ebx, ecx, 0x69c
push 0x18
pop ecx
call fcn.004016e1
mov esi, eax
xor ecx, ecx
mov dword [eax], 0x18b
mov dword [eax + 4], 0x460
mov dword [eax + 8], 0xa13
mov dword [eax + 0xc], 0xa93
mov dword [eax + 0x10], 0xe3a
mov dword [eax + 0x14], 0x940
push 0xffffffffffffffe8
pop eax
mov edx, ebp
test eax, eax
je 0x4b1bb4
add ecx, dword [esi + eax + 0x18]
add eax, 4
jmp 0x4b1ba7
mov eax, dword [esp + 8]
mov dword [esp + 0x38], ecx
test eax, eax
je 0x4b1c10
cmp eax, 0x513
je 0x4b1bea
cmp eax, 0xbde
je 0x4b1c00
mov ecx, dword [esp + 4]
mov ebp, dword [esp + 0x60]
cmp eax, 0xdc9
jne 0x4b1c31
mov eax, 0xdc9
sub eax, ebx
mov dword [esp + 8], eax
jmp 0x4b1c31
mov edx, dword [esp + 0x18]
mov ecx, 0x513
call fcn.004015c4
mov edx, ebp
mov dword [esp + 8], eax
jmp 0x4b1c29
add esp, 0xbe7
mov dword [esp + 8], 0xbde
jmp 0x4b1c29
xor eax, eax
mov ebp, ecx
neg ecx
setns al
mov ecx, ebp
add eax, 0x7fffffff
neg ecx
cmovo ecx, eax
mov dword [esp + 8], ecx
mov ecx, dword [esp + 4]
mov ebp, dword [esp + 0x60]
mov eax, dword [esp + 0x10]
cmp eax, 0xfe27d2bf
je 0x4b1c5d
cmp eax, 0xfe27d9eb
je 0x4b1c55
cmp eax, 0xfe27db54
jne 0x4b1c69
mov eax, 0xfe27db54
sub eax, dword [esp + 0xc]
jmp 0x4b1c65
lea eax, [edi - 0x1d82615]
jmp 0x4b1c65
imul eax, dword [esp + 0xc], 0xfe27d2bf
mov dword [esp + 0x10], eax
cmp ebp, 0x1c9
je 0x4b1c9a
cmp ebp, 0x835
je 0x4b1c89
cmp ebp, 0xf25
jne 0x4b1ca3
sub esp, 0x6bf
ud2
mov ebp, 0x835
mov ecx, dword [esp + 0x28]
shr ebp, cl
mov ecx, dword [esp + 4]
jmp 0x4b1ca3
mov ebp, 0x1c9
sub ebp, dword [esp + 0x34]
mov eax, dword [esp + 0xc]
cmp eax, 0x800001e5
je 0x4b1cee
cmp eax, 0x800008ac
je 0x4b1cc6
cmp eax, 0x80000e67
jne 0x4b1cfc
mov dword [esp + 0xc], 0x670e0080
jmp 0x4b1cfc
mov dword [esp + 0x40], ebx
mov ebx, edi
mov edi, 0x800008ac
xor eax, eax
cmp edi, ebp
setns al
add eax, 0x7fffffff
sub edi, ebp
cmovo edi, eax
mov dword [esp + 0xc], edi
mov edi, ebx
mov ebx, dword [esp + 0x40]
jmp 0x4b1cfc
sub esp, 0x8e4
mov dword [esp + 0xc], 0x800001e5
test edx, edx
mov dword [esp + 0x2c], edi
cmove edx, dword [esp + 0x1c]
cmp ecx, 9
mov dword [esp + 0x4c], edx
jne 0x4b1d4c
mov eax, dword [esp + 0x28]
lea ecx, [eax + eax*8]
mov eax, dword [esp + 0x28]
mov edi, ebx
mov ebx, ebp
mov dword [esp + 4], ecx
test eax, eax
je 0x4b1d82
cmp eax, 0x7bf
je 0x4b1d6a
cmp eax, 0x985
jne 0x4b1d8a
mov eax, dword [esp + 0xc]
mov ebp, 0x7fffffff
add eax, 0x985
cmovno ebp, eax
mov dword [esp + 0x28], ebp
jmp 0x4b1d8a
cmp ecx, 0xffffffff
je 0x4b27b6
cmp ecx, 8
je 0x4b27ac
cmp ecx, 0xb
jne 0x4b1d17
mov ecx, 0xb000000
jmp 0x4b1d17
mov edx, dword [esp + 4]
mov ecx, 0x7bf
call fcn.004015c4
mov edx, dword [esp + 0x4c]
mov ecx, dword [esp + 4]
jmp 0x4b1d86
mov eax, ecx
neg eax
mov dword [esp + 0x28], eax
mov ebp, dword [esp + 0x20]
cmp ebp, 0x2ef
je 0x4b1dcc
mov eax, dword [esp + 0x18]
cmp ebp, 0xae3
je 0x4b1db7
cmp ebp, 0x2df5cdbd
jne 0x4b1dd8
mov ebp, 0x2df5cdbd
mov ecx, dword [esp + 8]
shl ebp, cl
jmp 0x4b1dc2
mov ebp, 0xae3
mov ecx, dword [esp + 0xc]
shr ebp, cl
mov ecx, dword [esp + 4]
mov dword [esp + 0x20], ebp
jmp 0x4b1dd8
mov eax, dword [esp + 0x18]
mov dword [esp + 0x20], 0xef020000
test eax, eax
je 0x4b1e00
cmp eax, 0x684
mov ebp, ebx
je 0x4b1df9
cmp eax, 0x8ca
mov ebx, edi
jne 0x4b1e0a
mov eax, dword [esp + 0x24]
add eax, 0x8ca
jmp 0x4b1e0a
mov eax, 0x21600000
jmp 0x4b1e08
mov eax, dword [esp + 0x24]
mov ebp, ebx
neg eax
mov ebx, edi
cmp dword [esp + 0x1c], 0x85c
mov edi, dword [esp + 0x2c]
mov dword [esp + 0x18], eax
jne 0x4b1e36
mov edx, dword [esp + 0x18]
mov ecx, 0x85c
call fcn.004015c4
mov edx, dword [esp + 0x4c]
mov ecx, dword [esp + 4]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x34]
cmp eax, 0x5b6
je 0x4b1e56
cmp eax, 0x30a
jne 0x4b1e64
imul eax, dword [esp + 0x1c], 0x30a
mov dword [esp + 0x34], eax
jmp 0x4b1e64
sub esp, 0x11a9
mov dword [esp + 0x34], 0x5b6
and ecx, 0x1f
xor eax, eax
inc eax
mov dword [esp + 0x30], ecx
shr eax, cl
cmp edi, 1
mov ecx, dword [esp + 0x24]
cmovne eax, edi
mov dword [esp + 0x14], eax
mov eax, 0x7fffffff
add edx, eax
cmovo edx, eax
cmp ecx, eax
cmovne edx, ecx
mov ecx, dword [esp]
mov dword [esp + 0x3c], edx
cmp ecx, 0x3a
je 0x4b1ed2
cmp ecx, 0x918
je 0x4b1ebf
cmp ecx, 0xfd6
jne 0x4b1edf
mov ecx, dword [esp + 0x3c]
mov eax, ecx
shr eax, 0x1f
add eax, 0x7fffffff
imul ecx, ecx, 0xfd6
jmp 0x4b1ed9
mov edx, dword [esp + 0x38]
mov ecx, 0x918
call fcn.004015c4
mov dword [esp], eax
jmp 0x4b1edf
mov ecx, dword [esp + 0xc]
add ecx, 0x3a
cmovo ecx, eax
mov dword [esp], ecx
cmp ebx, 1
je 0x4b1f18
cmp ebx, 9
je 0x4b1f02
mov ecx, dword [esp + 0x10]
cmp ebx, 0xa
je 0x4b1f11
cmp ebx, 0xf
jne 0x4b1f25
push 0xf
pop ebx
add esp, 0xa4b
jmp 0x4b1f25
mov eax, ebp
mov ebx, 0x7fffffff
add eax, 9
cmovno ebx, eax
jmp 0x4b1f21
mov ebx, 0xa000000
jmp 0x4b1f25
xor ebx, ebx
mov ecx, dword [esp + 0x30]
inc ebx
shl ebx, cl
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x38]
cmp eax, 0x6d1
je 0x4b1f58
cmp eax, 0xa44
je 0x4b1f4c
cmp eax, 0x320b
jne 0x4b1f6f
mov ecx, 0x320b
mov edx, ebx
call fcn.004015c4
jmp 0x4b1f6f
mov eax, 0xa44
mov ecx, dword [esp]
shr eax, cl
jmp 0x4b1f6f
mov eax, 0x6d1
xor edx, edx
cmp eax, ecx
setns dl
add edx, 0x7fffffff
sub eax, ecx
cmovo eax, edx
mov dword [esp + 0x40], ebx
mov dword [esp + 0x38], eax
push 0x14
pop ecx
call fcn.004016e1
xor ebx, ebx
mov dword [eax], 0xc29
mov dword [eax + 4], 0x96d
mov dword [eax + 8], 0xb79
mov dword [eax + 0xc], 0x5be
mov dword [eax + 0x10], 0x426
push 0xffffffffffffffec
pop ecx
mov edx, dword [esp + 8]
test ecx, ecx
je 0x4b1fb7
add ebx, dword [eax + ecx + 0x14]
add ecx, 4
jmp 0x4b1faa
cmp edx, 0xffffcfdd
je 0x4b1fdf
cmp edx, 0xffffdb05
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x4c]
jne 0x4b1fef
add esp, 0xef4
mov dword [esp + 8], 0xffffdb05
jmp 0x4b1fef
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x4c]
mov dword [esp + 8], 0xbbf3ffff
cmp ecx, 0x800005c6
je 0x4b2006
cmp ecx, 0x800008bf
jne 0x4b2011
mov ecx, 0xbf080080
jmp 0x4b2011
sub esp, 0x776
mov ecx, 0x800005c6
cmp ebp, 0x164
mov dword [esp + 0x10], ecx
je 0x4b2032
cmp ebp, 0xb1d
jne 0x4b2044
mov ebp, 0xb1d
mov ecx, dword [esp + 0x40]
shl ebp, cl
jmp 0x4b2044
mov ecx, dword [esp + 0x20]
mov ebp, 0x7fffffff
add ecx, 0x164
cmovno ebp, ecx
mov edi, dword [esp + 0xc]
mov ecx, edi
neg ecx
jo 0x4b207b
cmp edi, 0x800005f9
je 0x4b206a
cmp edi, 0x80000ca5
jne 0x4b2083
lea ecx, [ebp - 0x7ffff35b]
mov dword [esp + 0xc], ecx
jmp 0x4b2083
mov edi, 0x800005f9
mov ecx, dword [esp + 0x1c]
shl edi, cl
mov dword [esp + 0xc], edi
jmp 0x4b2083
mov dword [esp + 0xc], pe_nt_image_headers32
test edx, edx
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], esi
je 0x4b20ca
cmp edx, 0x7f
je 0x4b20b6
mov eax, dword [esp + 0x28]
cmp edx, 0x182
je 0x4b20bd
cmp edx, 0xabd
jne 0x4b20db
imul edx, ebx, 0xabd
jmp 0x4b20db
mov edx, 0xfe000000
jmp 0x4b20d7
mov edx, 0x182
mov ecx, dword [esp + 0x1c]
shl edx, cl
jmp 0x4b20d7
mov edx, dword [esp + 0x40]
xor ecx, ecx
call fcn.004015c4
mov edx, eax
mov eax, dword [esp + 0x28]
mov esi, dword [esp + 0x20]
cmp eax, 2
mov dword [esp + 0x4c], edx
mov dword [esp + 0x60], ebp
je 0x4b212f
cmp eax, 5
je 0x4b210d
cmp eax, 6
je 0x4b2118
mov ebp, dword [esp + 0x14]
cmp eax, 0x10
jne 0x4b2138
push 0x10
pop ecx
mov edx, dword [esp + 4]
call fcn.004015c4
jmp 0x4b2138
push 5
pop eax
mov ecx, dword [esp + 0x40]
shr eax, cl
jmp 0x4b2134
xor ecx, ecx
push 6
pop eax
cmp eax, edx
setns cl
add ecx, 0x7fffffff
sub eax, edx
cmovo eax, ecx
jmp 0x4b2134
mov eax, 0x40000000
mov ebp, dword [esp + 0x14]
mov edx, dword [esp + 0xc]
mov ecx, 0xb7a00fd3
mov dword [esp + 0x28], eax
xor eax, eax
mov edi, 0xb7a00fd3
mov dword [esp + 0x6c], ebx
cmp ecx, edx
setns al
add eax, 0x7fffffff
sub edi, edx
cmovo edi, eax
mov eax, dword [esp + 0x18]
cmp esi, ecx
cmovne edi, esi
mov dword [esp + 0x50], edi
cmp eax, 0x80000001
je 0x4b2186
mov edi, dword [esp + 0x1c]
cmp eax, 0x80000790
jne 0x4b218f
sub esp, 0x106d
ud2
mov edi, dword [esp + 0x1c]
mov eax, 0x1000080
mov ecx, dword [esp + 0x28]
cmp edi, 0x308
mov dword [esp + 0x18], eax
je 0x4b21c8
cmp edi, 0x104
je 0x4b21be
test edi, edi
jne 0x4b21d0
mov edx, dword [esp + 0x38]
xor ecx, ecx
call fcn.004015c4
mov ecx, dword [esp + 0x28]
mov edi, eax
jmp 0x4b21d0
imul edi, dword [esp + 0x6c], 0x104
jmp 0x4b21d0
mov edi, 0x308
sub edi, dword [esp]
mov eax, dword [esp + 0x34]
cmp eax, 0x7c8
je 0x4b7752
cmp eax, 0xdf6
je 0x4b775a
cmp ebp, 0xda2
je 0x4b2202
cmp ebp, 0x8b0
jne 0x4b2218
sub esp, 0xd8a
ud2
mov ebp, 0xda2
xor eax, eax
cmp ebp, ecx
setns al
add eax, 0x7fffffff
sub ebp, ecx
cmovo ebp, eax
mov ecx, dword [esp + 0x3c]
cmp ecx, 0x3b7
je 0x4b223d
cmp ecx, 0xfc5
jne 0x4b2242
mov eax, ebp
mov ecx, 0x7fffffff
add eax, 0xfc5
cmovno ecx, eax
jmp 0x4b2242
mov ecx, 0xb7030000
mov edx, dword [esp + 0x40]
mov ebx, dword [esp]
mov dword [esp + 0x3c], ecx
mov esi, 0x21f
mov eax, 0x21f
mov ecx, edx
shl eax, cl
cmp ebx, esi
cmovne eax, ebx
cmp edx, 0x800002de
je 0x4b2285
mov esi, dword [esp + 0x38]
cmp edx, 0x80000384
jne 0x4b2295
mov edx, 0x80000384
mov ecx, dword [esp + 0x50]
shl edx, cl
mov dword [esp + 0x40], edx
jmp 0x4b2291
imul ecx, dword [esp + 0x34], 0x800002de
mov dword [esp + 0x40], ecx
mov esi, dword [esp + 0x38]
cmp esi, 1
mov dword [esp + 0x14], ebp
je 0x4b22be
mov edx, dword [esp + 0x4c]
cmp esi, 6
je 0x4b22b3
cmp esi, 7
jne 0x4b22c3
push 7
pop esi
sub esi, edx
jmp 0x4b22c3
sub esp, 0x9d3
push 6
pop esi
jmp 0x4b22c3
mov esi, 0x80000000
mov ebp, dword [esp + 0x6c]
mov dword [esp + 0x2c], eax
mov dword [esp + 0x38], esi
mov dword [esp + 0x1c], edi
cmp ebp, 0x20c
je 0x4b2330
cmp ebp, 0x654
je 0x4b230f
mov ecx, dword [esp + 0x28]
cmp ebp, 0xc2a
je 0x4b2319
cmp ebp, 0x2af3
jne 0x4b2343
mov edx, dword [esp + 0x34]
mov ecx, 0x2af3
call fcn.004015c4
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x6c], eax
jmp 0x4b2343
mov dword [esp + 0x6c], 0x54060000
jmp 0x4b233f
mov eax, dword [esp + 0x10]
mov esi, 0x7fffffff
add eax, 0xc2a
cmovno esi, eax
mov dword [esp + 0x6c], esi
jmp 0x4b2343
mov eax, 0x20c
mov ecx, dword [esp + 0x50]
shr eax, cl
mov dword [esp + 0x6c], eax
mov ecx, dword [esp + 0x28]
mov dword [esp], 0xeb7
mov dword [esp + 0x48], 0x24e
push 0x24
pop eax
mov dword [esp + 0x64], eax
mov dword [esp + 0x58], 0xcb1
push 0x13
pop eax
mov edi, dword [esp + 0x18]
mov ebp, dword [esp + 0x14]
mov ebx, 0x50b
mov dword [esp + 0x44], eax
mov dword [esp + 0x68], 0x234e
mov dword [esp + 0x5c], 0xe27
mov dword [esp + 0x20], 0x235
mov esi, dword [esp + 0x40]
sub dword [esp + 0x68], 1
mov dword [esp + 0x14], ebx
mov dword [esp + 0x24], edi
mov dword [esp + 0x54], ebp
mov dword [esp + 0x30], esi
jb 0x4b2742
mov edi, dword [esp + 0xc]
xor eax, eax
mov esi, 0x7fffffff
mov edx, dword [esp + 0x3c]
mov ebx, 0x7fffffff
cmp edi, ecx
setns al
add eax, esi
mov esi, edi
mov edi, 0x80000000
sub esi, ecx
mov ecx, ebp
mov ebp, dword [esp + 0x14]
cmovo esi, eax
mov eax, esi
xor eax, edx
shr eax, 0x1f
add eax, ebx
imul esi, edx
cmovo esi, eax
bswap esi
sar esi, cl
lea eax, [ebp + esi]
mov dword [esp + 0xc], esi
sar eax, 0x1f
xor eax, edi
add ebp, esi
mov esi, dword [esp]
mov edi, dword [esp + 0x34]
cmovo ebp, eax
xor eax, eax
mov dword [esp + 0x1c], ebp
mov ebp, 0x7fffffff
cmp edx, esi
bswap edi
setns al
add eax, ebx
sub edx, esi
mov esi, 0xf0f0f0f
mov ebx, dword [esp + 0x58]
cmovo edx, eax
mov eax, edi
and edi, esi
shr eax, 4
shl edi, 4
mov dword [esp + 0x3c], edx
mov edx, 0x7fffffff
and eax, esi
mov esi, 0x33333333
or edi, eax
mov eax, edi
shr edi, 2
and eax, esi
and edi, esi
mov esi, 0x55555555
lea eax, [edi + eax*4]
mov edi, eax
shr eax, 1
and edi, esi
and eax, esi
mov esi, dword [esp + 0x38]
lea edi, [eax + edi*2]
xor eax, eax
cmp edi, esi
setns al
add eax, edx
sub edi, esi
mov esi, dword [esp + 0x44]
cmovo edi, eax
mov dword [esp + 0x34], edi
mov edi, dword [esp + 0x60]
mov eax, edi
xor eax, esi
shr eax, 0x1f
add eax, edx
imul edi, esi
mov edx, 0x80000000
mov esi, dword [esp + 0x50]
cmovo edi, eax
lea eax, [edi + ecx]
sar eax, 0x1f
xor eax, edx
mov edx, dword [esp + 0x10]
add edi, ecx
mov ecx, ebx
bswap esi
cmovo edi, eax
shl edx, cl
mov eax, edx
xor eax, ebx
shr eax, 0x1f
add eax, ebp
imul edx, ebx
cmovo edx, eax
mov ecx, edx
mov edx, dword [esp + 0x48]
call fcn.004015c4
mov edx, dword [esp + 0x2c]
mov ecx, edi
mov dword [esp + 0x10], eax
call fcn.004015c4
mov edi, eax
mov eax, esi
mov ecx, 0xf0f0f0f
mov edx, 0x55555555
shr eax, 4
and esi, ecx
and eax, ecx
shl esi, 4
mov ecx, 0x33333333
or esi, eax
mov eax, esi
shr esi, 2
and eax, ecx
and esi, ecx
lea eax, [esi + eax*4]
mov esi, 0xf0f0f0f
mov ecx, eax
shr eax, 1
and ecx, edx
and eax, edx
lea edx, [eax + ecx*2]
mov eax, dword [esp + 0x24]
mov dword [esp + 0x50], edx
bswap eax
mov ecx, eax
and eax, esi
shr ecx, 4
shl eax, 4
and ecx, esi
mov esi, 0x33333333
or eax, ecx
mov ecx, eax
shr eax, 2
and ecx, esi
and eax, esi
mov esi, 0x55555555
lea eax, [eax + ecx*4]
mov ecx, eax
shr eax, 1
and ecx, esi
and eax, esi
lea eax, [eax + ecx*2]
mov ecx, dword [esp + 0x10]
sar eax, cl
mov ecx, eax
call fcn.004015c4
mov edx, dword [esp + 0x3c]
mov ecx, dword [esp + 0x30]
mov dword [esp + 0x18], eax
mov esi, 0x7fffffff
mov ebp, dword [esp + 8]
mov eax, edx
xor eax, ecx
shr eax, 0x1f
add eax, esi
imul edx, ecx
mov esi, dword [esp + 0x18]
cmovo edx, eax
sub edx, dword [esp]
mov eax, esi
mov ecx, edx
mov dword [esp + 0x3c], edx
mov edx, 0x7fffffff
bswap ecx
xor eax, ecx
shr eax, 0x1f
add eax, edx
imul ecx, esi
mov esi, dword [esp + 0x1c]
mov edx, 0x80000000
cmovo ecx, eax
mov dword [esp + 0x40], ecx
sub esi, dword [esp + 0x34]
lea eax, [esi + ecx]
sar eax, 0x1f
xor eax, edx
add esi, ecx
mov ecx, dword [esp]
mov edx, edi
cmovo esi, eax
shl ebp, cl
mov eax, edi
mov ecx, 0x7fffffff
mov edi, 0x7fffffff
mov dword [esp + 0x1c], esi
mov esi, dword [esp]
xor eax, ebp
mov dword [esp + 8], ebp
shr eax, 0x1f
add eax, ecx
imul edx, ebp
mov ecx, ebx
cmovo edx, eax
xor eax, eax
imul esi, dword [esp + 0x14]
mov dword [esp + 0x60], edx
shl esi, cl
mov ecx, 0x7fffffff
bswap esi
cmp esi, edx
setns al
add eax, ecx
sub esi, edx
mov ecx, dword [esp + 0x5c]
cmovo esi, eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0x44], esi
add eax, ecx
xor ecx, ecx
cmp eax, esi
setns cl
add ecx, edi
sub eax, esi
cmovo eax, ecx
lea ecx, [ebx + edx]
mov dword [esp], eax
sar ecx, 0x1f
mov eax, 0x80000000
xor ecx, eax
mov eax, dword [esp + 4]
add ebx, edx
mov edx, dword [esp + 0x48]
cmovo ebx, ecx
mov ecx, dword [esp + 0x5c]
bswap ebx
sub eax, dword [esp + 0xc]
shl eax, cl
mov ecx, eax
mov dword [esp + 4], eax
sar edx, cl
mov ecx, edx
xor ecx, ebp
shr ecx, 0x1f
add ecx, edi
imul edx, ebp
cmovo edx, ecx
xor ecx, ecx
mov ebp, edx
mov edx, dword [esp + 0x18]
cmp ebp, edx
setns cl
add ecx, edi
sub ebp, edx
mov edi, dword [esp + 0x2c]
mov edx, 0xf0f0f0f
cmovo ebp, ecx
mov ecx, dword [esp + 0x30]
mov dword [esp + 0x48], ebp
mov ebp, dword [esp + 0x54]
shl ebp, cl
mov ecx, dword [esp + 0x3c]
shl edi, cl
mov ecx, ebx
and ebx, edx
shr ecx, 4
sub edi, dword [esp + 0x64]
shl ebx, 4
bswap ebp
and ecx, edx
mov edx, 0x33333333
or ebx, ecx
mov ecx, ebx
shr ebx, 2
and ecx, edx
and ebx, edx
lea edx, [ebx + ecx*4]
mov ecx, edi
mov ebx, dword [esp + 0x38]
mov edi, 0x55555555
bswap ecx
mov dword [esp + 0x2c], ecx
shl dword [esp + 0x6c], cl
mov ecx, edx
shr edx, 1
and ecx, edi
and edx, edi
mov edi, 0x7fffffff
lea edx, [edx + ecx*2]
add ecx, ecx
sub ebx, dword [esp + 0x34]
xor ecx, eax
shr ecx, 0x1f
add ecx, edi
imul edx, eax
mov edi, dword [esp + 0x18]
cmovo edx, ecx
mov eax, ebx
mov dword [esp + 0x38], ebx
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0x58], edx
mov edx, dword [esp]
mov dword [esp], esi
mov esi, dword [esp + 0x50]
sub ebx, eax
mov eax, dword [esp + 0x30]
shl edx, cl
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x64], esi
mov dword [esp + 0x5c], edx
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x24]
imul ecx, edi
mov dword [esp + 0x20], ecx
mov ecx, dword [esp + 0x54]
mov dword [esp + 0x4c], eax
jmp 0x4b238d
mov dword [esp + 0x28], ecx
mov ecx, dword [esp + 0x14]
mov ebx, dword [esp + 8]
mov eax, 0xeb8
add ecx, eax
cmp ebx, eax
cmovne ecx, ebx
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x74], ecx
lea eax, [ebx - 1]
ror eax, 1
cmp eax, 6
ja 0x4b27cd
mov eax, dword [eax*4 + 0x4b77ec]
mov edx, dword [esp + 0x4c]
add eax, dword [esp + 0x98]
jmp eax
mov ecx, 0x10000000
jmp 0x4b1d17
mov edx, dword [esp + 8]
xor ecx, ecx
dec ecx
call fcn.004015c4
mov edx, dword [esp + 0x4c]
mov ecx, eax
jmp 0x4b1d17
mov edx, dword [esp + 0x4c]
mov ecx, dword [esp + 0x14]
mov esi, dword [esp + 0x60]
mov eax, 0x160
mov ebp, 0x7fffffff
add ecx, eax
cmovno ebp, ecx
cmp esi, eax
mov eax, dword [esp + 0xc]
cmovne ebp, esi
mov esi, dword [esp + 0x44]
mov dword [esp + 0x40], ebp
cmp eax, 0x125
je 0x4b2817
cmp eax, 0x29d
jne 0x4b2838
sub esp, 0xdeb
mov dword [esp + 0xc], 0x29d
jmp 0x4b2838
mov ebp, esi
mov esi, dword [esp]
mov ecx, 0x125
xor eax, eax
cmp ecx, esi
setns al
add eax, 0x7fffffff
sub ecx, esi
mov esi, ebp
cmovo ecx, eax
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x2c]
cmp edx, 0x19d
je 0x4b286b
cmp edx, 0x328
je 0x4b2861
mov ebp, dword [esp + 4]
cmp edx, 0x7ea
jne 0x4b2878
mov edx, 0x7ea
shl edx, cl
jmp 0x4b2874
imul edx, dword [esp + 0x5c], 0x328
jmp 0x4b2874
mov edx, 0x19d
mov ecx, ebx
shr edx, cl
mov ebp, dword [esp + 4]
cmp ebp, 0x341
mov dword [esp + 0x4c], edx
je 0x4b28b4
cmp ebp, 0x74e
je 0x4b28a7
cmp ebp, 0x4002
jne 0x4b28b9
mov eax, dword [esp + 0x50]
mov ebp, 0x7fffffff
add eax, 0x4002
cmovno ebp, eax
jmp 0x4b28b9
add esp, 0xba1
mov ebp, 0x74e
jmp 0x4b28b9
mov ebp, 0x82c00000
mov ecx, 0x875
xor eax, eax
mov edx, ebp
cmp ecx, ebp
mov ebp, 0x875
mov dword [esp + 4], edx
setns al
add eax, 0x7fffffff
sub ebp, edx
cmovo ebp, eax
mov eax, dword [esp + 0x28]
cmp eax, ecx
cmovne ebp, eax
mov eax, dword [esp + 0x50]
mov dword [esp + 0x84], ebp
cmp eax, 0xb7a00000
je 0x4b292c
cmp eax, 0xb7a005dc
je 0x4b291a
cmp eax, 0xb7a0070d
mov eax, dword [esp + 4]
jne 0x4b2934
add eax, 0xb7a0070d
mov ecx, 0x80000000
cmovno ecx, eax
mov dword [esp + 0x50], ecx
jmp 0x4b2934
mov ecx, 0xb7a005dc
mov edx, ebx
call fcn.004015c4
mov dword [esp + 0x50], eax
jmp 0x4b2934
mov dword [esp + 0x50], 0xa0b7
mov eax, dword [esp + 0x24]
cmp eax, 0x30
je 0x4b296a
cmp eax, 0x55b
je 0x4b295a
cmp eax, 0xa87
jne 0x4b2985
add esp, 0x5ed
mov dword [esp + 0x24], 0x55b
jmp 0x4b2985
mov ecx, dword [esp + 0x84]
mov eax, ecx
shr eax, 0x1f
add eax, 0x7fffffff
imul ecx, ecx, 0x30
cmovo ecx, eax
mov dword [esp + 0x24], ecx
mov eax, dword [esp + 0x1c]
cmp eax, 0x153
je 0x4b29b7
cmp eax, 0xe3a
jne 0x4b29c5
mov eax, 0x153
mov ecx, dword [esp]
shr eax, cl
mov dword [esp + 0x1c], eax
mov ecx, 0x10c
xor eax, eax
mov ebp, 0x10c
mov edi, dword [esp + 0x3c]
cmp ecx, ebx
setns al
add eax, 0x7fffffff
sub ebp, ebx
cmovo ebp, eax
mov eax, dword [esp + 0x34]
cmp eax, ecx
mov ecx, 0xd9800000
cmovne ebp, eax
mov eax, dword [esp + 0x2c]
cmp edi, 0x19b
cmovne ecx, edi
mov dword [esp + 0x28], ebp
cmp eax, 0x6f7
je 0x4b2a2f
add esp, 0x782
ud2
add esp, 0x1350
ud2
add esp, 0x5ca
ud2