Function at 0x4a13f0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x754
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 8]
mov dword [ebp - 0xd0], ecx
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0xd8], edx
mov dword [ebp - 0xdc], 0
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xe4], 0
mov dword [ebp - 0xe8], 0
mov dword [ebp - 0xec], 0
mov dword [ebp - 0xf0], 0
mov dword [ebp - 0xf4], 0
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0xfc], 0
mov dword [ebp - 0x110], 0
mov dword [ebp - 0x114], 0
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0x128], 0x176dac6d
mov eax, dword [ebp - 0x128]
mov ecx, eax
sub ecx, 0x8f1b7a61
mov dword [ebp - 0x12c], eax
mov dword [ebp - 0x130], ecx
jg 0x4a14dc
jmp 0x4a14c0
mov eax, dword [ebp - 0x12c]
sub eax, 0x88d3b817
mov dword [ebp - 0x134], eax
je 0x4a5781
jmp 0x4a2410
mov eax, dword [ebp - 0x12c]
sub eax, 0x7f3c7a07
mov dword [ebp - 0x138], eax
jg 0x4a23f4
jmp 0x4a14f8
mov eax, dword [ebp - 0x12c]
sub eax, 0x92a6312a
mov dword [ebp - 0x13c], eax
jg 0x4a1530
jmp 0x4a1514
mov eax, dword [ebp - 0x12c]
sub eax, 0x8f1b7a62
mov dword [ebp - 0x140], eax
je 0x4a256c
jmp 0x4a2410
mov eax, dword [ebp - 0x12c]
sub eax, 0x96286b83
mov dword [ebp - 0x144], eax
jg 0x4a1568
jmp 0x4a154c
mov eax, dword [ebp - 0x12c]
sub eax, 0x92a6312b
mov dword [ebp - 0x148], eax
je 0x4a4ad4
jmp 0x4a2410
mov eax, dword [ebp - 0x12c]
sub eax, 0x9806821d
mov dword [ebp - 0x14c], eax
jg 0x4a15a0
jmp 0x4a1584
mov eax, dword [ebp - 0x12c]
sub eax, 0x96286b84
mov dword [ebp - 0x150], eax
je 0x4a269a
jmp 0x4a2410
mov eax, dword [ebp - 0x12c]
sub eax, 0x9b665f32
mov dword [ebp - 0x154], eax
jg 0x4a15d8
jmp 0x4a15bc
mov eax, dword [ebp - 0x12c]
sub eax, 0x9806821e
mov dword [ebp - 0x158], eax
je 0x4a5837
jmp 0x4a2410
mov eax, dword [ebp - 0x12c]
sub eax, 0xa1dc08e7
mov dword [ebp - 0x15c], eax
jg 0x4a1610
jmp 0x4a15f4
mov eax, dword [ebp - 0x12c]
sub eax, 0x9b665f33
mov dword [ebp - 0x160], eax
je 0x4a2605
jmp 0x4a2410
mov eax, dword [ebp - 0x12c]
sub eax, 0xa627168b
mov dword [ebp - 0x164], eax
jg 0x4a1648
jmp 0x4a162c
mov eax, dword [ebp - 0x12c]
sub eax, 0xa1dc08e8
mov dword [ebp - 0x168], eax
je 0x4a5c43
jmp 0x4a2410
mov eax, dword [ebp - 0x12c]
sub eax, 0x7a6dbbae
mov dword [ebp - 0x16c], eax
jg 0x4a23d8
jmp 0x4a1664
mov eax, dword [ebp - 0x12c]
sub eax, 0x79a3abda
mov dword [ebp - 0x170], eax
jg 0x4a23bc
jmp 0x4a1680
mov eax, dword [ebp - 0x12c]
sub eax, 0x7785a45c
mov dword [ebp - 0x174], eax
jg 0x4a23a0
jmp 0x4a169c
mov eax, dword [ebp - 0x12c]
sub eax, 0x6a2fe924
mov dword [ebp - 0x178], eax
jg 0x4a2384
jmp 0x4a16b8
mov eax, dword [ebp - 0x12c]
sub eax, 0xa66942e3
mov dword [ebp - 0x17c], eax
jg 0x4a16f0
jmp 0x4a16d4
mov eax, dword [ebp - 0x12c]
sub eax, 0xa627168c
mov dword [ebp - 0x180], eax
je 0x4a5341
jmp 0x4a2410
mov eax, dword [ebp - 0x12c]
sub eax, 0xa92a6130
mov dword [ebp - 0x184], eax
jg 0x4a1728
jmp 0x4a170c
mov eax, dword [ebp - 0x12c]
sub eax, 0xa66942e4
mov dword [ebp - 0x188], eax
je 0x4a54ad
jmp 0x4a2410
mov eax, dword [ebp - 0x12c]
sub eax, 0xa9a7aa7a
mov dword [ebp - 0x18c], eax
jg 0x4a1760
jmp 0x4a1744
mov eax, dword [ebp - 0x12c]
sub eax, 0xa92a6131
mov dword [ebp - 0x190], eax
je 0x4a35b0
jmp 0x4a2410
mov eax, dword [ebp - 0x12c]
sub eax, 0x69743e6c
mov dword [ebp - 0x194], eax
jg 0x4a2368
jmp 0x4a177c
mov eax, dword [ebp - 0x12c]
sub eax, 0x69695cdf
mov dword [ebp - 0x198], eax
jg 0x4a234c
jmp 0x4a1798
mov eax, dword [ebp - 0x12c]
sub eax, 0x67be870e
mov dword [ebp - 0x19c], eax
jg 0x4a2330
jmp 0x4a17b4
mov eax, dword [ebp - 0x12c]
sub eax, 0x595da6a2
mov dword [ebp - 0x1a0], eax
jg 0x4a2314
jmp 0x4a17d0
mov eax, dword [ebp - 0x12c]
sub eax, 0x579bc317
mov dword [ebp - 0x1a4], eax
jg 0x4a22f8
jmp 0x4a17ec
mov eax, dword [ebp - 0x12c]
sub eax, 0x56d44b02
mov dword [ebp - 0x1a8], eax
jg 0x4a22dc
jmp 0x4a1808
mov eax, dword [ebp - 0x12c]
sub eax, 0x528f871f
mov dword [ebp - 0x1ac], eax
jg 0x4a22c0
jmp 0x4a1824
mov eax, dword [ebp - 0x12c]
sub eax, 0x51ae7bee
mov dword [ebp - 0x1b0], eax
jg 0x4a22a4
jmp 0x4a1840
mov eax, dword [ebp - 0x12c]
sub eax, 0x50788706
mov dword [ebp - 0x1b4], eax
jg 0x4a2288
jmp 0x4a185c
mov eax, dword [ebp - 0x12c]
sub eax, 0x4c70901c
mov dword [ebp - 0x1b8], eax
jg 0x4a226c
jmp 0x4a1878
mov eax, dword [ebp - 0x12c]
sub eax, 0x468db2cc
mov dword [ebp - 0x1bc], eax
jg 0x4a2250
jmp 0x4a1894
mov eax, dword [ebp - 0x12c]
sub eax, 0x458e4b95
mov dword [ebp - 0x1c0], eax
jg 0x4a2234
jmp 0x4a18b0
mov eax, dword [ebp - 0x12c]
sub eax, 0x4442c366
mov dword [ebp - 0x1c4], eax
jg 0x4a2218
jmp 0x4a18cc
mov eax, dword [ebp - 0x12c]
sub eax, 0x413d3008
mov dword [ebp - 0x1c8], eax
jg 0x4a21fc
jmp 0x4a18e8
mov eax, dword [ebp - 0x12c]
sub eax, 0x3ff0a2f2
mov dword [ebp - 0x1cc], eax
jg 0x4a21e0
jmp 0x4a1904
mov eax, dword [ebp - 0x12c]
sub eax, 0x3b48fd08
mov dword [ebp - 0x1d0], eax
jg 0x4a21c4
jmp 0x4a1920
mov eax, dword [ebp - 0x12c]
sub eax, 0x376daf61
mov dword [ebp - 0x1d4], eax
jg 0x4a21a8
jmp 0x4a193c
mov eax, dword [ebp - 0x12c]
sub eax, 0x31c2752d
mov dword [ebp - 0x1d8], eax
jg 0x4a218c
jmp 0x4a1958
mov eax, dword [ebp - 0x12c]
sub eax, 0x30da6a41
mov dword [ebp - 0x1dc], eax
jg 0x4a2170
jmp 0x4a1974
mov eax, dword [ebp - 0x12c]
sub eax, 0x2ac338d3
mov dword [ebp - 0x1e0], eax
jg 0x4a2154
jmp 0x4a1990
mov eax, dword [ebp - 0x12c]
sub eax, 0x23818c51
mov dword [ebp - 0x1e4], eax
jg 0x4a2138
jmp 0x4a19ac
mov eax, dword [ebp - 0x12c]
sub eax, 0x220cac01
mov dword [ebp - 0x1e8], eax
jg 0x4a211c
jmp 0x4a19c8
mov eax, dword [ebp - 0x12c]
sub eax, 0x1da08bec
mov dword [ebp - 0x1ec], eax
jg 0x4a2100
jmp 0x4a19e4
mov eax, dword [ebp - 0x12c]
sub eax, 0x176dac6c
mov dword [ebp - 0x1f0], eax
jg 0x4a20e4
jmp 0x4a1a00
mov eax, dword [ebp - 0x12c]
sub eax, 0x14cb9bb4
mov dword [ebp - 0x1f4], eax
jg 0x4a20c8
jmp 0x4a1a1c
mov eax, dword [ebp - 0x12c]
sub eax, 0x33c5c5b
mov dword [ebp - 0x1f8], eax
jg 0x4a20ac
jmp 0x4a1a38
mov eax, dword [ebp - 0x12c]
sub eax, 0xbaa44e
mov dword [ebp - 0x1fc], eax
jg 0x4a2090
jmp 0x4a1a54
mov eax, dword [ebp - 0x12c]
sub eax, 0x509312
mov dword [ebp - 0x200], eax
jg 0x4a2074
jmp 0x4a1a70
mov eax, dword [ebp - 0x12c]
sub eax, 0xed9002eb
mov dword [ebp - 0x204], eax
jg 0x4a2058
jmp 0x4a1a8c
mov eax, dword [ebp - 0x12c]
sub eax, 0xea891c70
mov dword [ebp - 0x208], eax
jg 0x4a203c
jmp 0x4a1aa8
mov eax, dword [ebp - 0x12c]
sub eax, 0xea502c26
mov dword [ebp - 0x20c], eax
jg 0x4a2020
jmp 0x4a1ac4
mov eax, dword [ebp - 0x12c]
sub eax, 0xe9971391
mov dword [ebp - 0x210], eax
jg 0x4a2004
jmp 0x4a1ae0
mov eax, dword [ebp - 0x12c]
sub eax, 0xe92c18e4
mov dword [ebp - 0x214], eax
jg 0x4a1fe8
jmp 0x4a1afc
mov eax, dword [ebp - 0x12c]
sub eax, 0xe82e50e9
mov dword [ebp - 0x218], eax
jg 0x4a1fcc
jmp 0x4a1b18
mov eax, dword [ebp - 0x12c]
sub eax, 0xe6722589
mov dword [ebp - 0x21c], eax
jg 0x4a1fb0
jmp 0x4a1b34
mov eax, dword [ebp - 0x12c]
sub eax, 0xe3917a96
mov dword [ebp - 0x220], eax
jg 0x4a1f94
jmp 0x4a1b50
mov eax, dword [ebp - 0x12c]
sub eax, 0xe0b9fad3
mov dword [ebp - 0x224], eax
jg 0x4a1f78
jmp 0x4a1b6c
mov eax, dword [ebp - 0x12c]
sub eax, 0xdfd2af4b
mov dword [ebp - 0x228], eax
jg 0x4a1f5c
jmp 0x4a1b88
mov eax, dword [ebp - 0x12c]
sub eax, 0xdd3c3e4e
mov dword [ebp - 0x22c], eax
jg 0x4a1f40
jmp 0x4a1ba4
mov eax, dword [ebp - 0x12c]
sub eax, 0xd9a796fe
mov dword [ebp - 0x230], eax
jg 0x4a1f24
jmp 0x4a1bc0
mov eax, dword [ebp - 0x12c]
sub eax, 0xd954e026
mov dword [ebp - 0x234], eax
jg 0x4a1f08
jmp 0x4a1bdc
mov eax, dword [ebp - 0x12c]
sub eax, 0xd62b39c7
mov dword [ebp - 0x238], eax
jg 0x4a1eec
jmp 0x4a1bf8
mov eax, dword [ebp - 0x12c]
sub eax, 0xcfc2ccb7
mov dword [ebp - 0x23c], eax
jg 0x4a1ed0
jmp 0x4a1c14
mov eax, dword [ebp - 0x12c]
sub eax, 0xce1f2c06
mov dword [ebp - 0x240], eax
jg 0x4a1eb4
jmp 0x4a1c30
mov eax, dword [ebp - 0x12c]
sub eax, 0xcc24e236
mov dword [ebp - 0x244], eax
jg 0x4a1e98
jmp 0x4a1c4c
mov eax, dword [ebp - 0x12c]
sub eax, 0xc6915684
mov dword [ebp - 0x248], eax
jg 0x4a1e7c
jmp 0x4a1c68
mov eax, dword [ebp - 0x12c]
sub eax, 0xc5d7a6ea
mov dword [ebp - 0x24c], eax
jg 0x4a1e60
jmp 0x4a1c84
mov eax, dword [ebp - 0x12c]
sub eax, 0xc4796bd7
mov dword [ebp - 0x250], eax
jg 0x4a1e44
jmp 0x4a1ca0
mov eax, dword [ebp - 0x12c]
sub eax, 0xc221e08a
mov dword [ebp - 0x254], eax
jg 0x4a1e28
jmp 0x4a1cbc
mov eax, dword [ebp - 0x12c]
sub eax, 0xc010bddb
mov dword [ebp - 0x258], eax
jg 0x4a1e0c
jmp 0x4a1cd8
mov eax, dword [ebp - 0x12c]
sub eax, 0xbdaf0b8c
mov dword [ebp - 0x25c], eax
jg 0x4a1df0
jmp 0x4a1cf4
mov eax, dword [ebp - 0x12c]
sub eax, 0xbc871bda
mov dword [ebp - 0x260], eax
jg 0x4a1dd4
jmp 0x4a1d10
mov eax, dword [ebp - 0x12c]
sub eax, 0xbc2678b0
mov dword [ebp - 0x264], eax
jg 0x4a1db8
jmp 0x4a1d2c
mov eax, dword [ebp - 0x12c]
sub eax, 0xb474f56b
mov dword [ebp - 0x268], eax
jg 0x4a1d9c
jmp 0x4a1d48
mov eax, dword [ebp - 0x12c]
sub eax, 0xa9a7aa7b
mov dword [ebp - 0x26c], eax
je 0x4a4ae3
mov eax, dword [ebp - 0x12c]
sub eax, 0xb474f56c
mov dword [ebp - 0x278], eax
je 0x4a5826
jmp 0x4a2410
mov eax, dword [ebp - 0x12c]
sub eax, 0xbc2678b1
mov dword [ebp - 0x27c], eax
je 0x4a644e
jmp 0x4a2410
mov eax, dword [ebp - 0x12c]
sub eax, 0xbc871bdb
mov dword [ebp - 0x280], eax
je 0x4a2c10
jmp 0x4a2410
mov eax, dword [ebp - 0x12c]
sub eax, 0xbdaf0b8d
mov dword [ebp - 0x284], eax
je 0x4a51cb
jmp 0x4a2410
mov eax, dword [ebp - 0x12c]
sub eax, 0xc010bddc
mov dword [ebp - 0x288], eax
je 0x4a3699
jmp 0x4a2410
mov eax, dword [ebp - 0x12c]
sub eax, 0xc221e08b
mov dword [ebp - 0x28c], eax
je 0x4a4958
jmp 0x4a2410
mov eax, dword [ebp - 0x12c]
sub eax, 0xc4796bd8
mov dword [ebp - 0x290], eax
je 0x4a51aa
jmp 0x4a2410
mov eax, dword [ebp - 0x12c]
sub eax, 0xc5d7a6eb
mov dword [ebp - 0x294], eax
je 0x4a4ac5
jmp 0x4a2410
mov eax, dword [ebp - 0x12c]
sub eax, 0xc6915685
mov dword [ebp - 0x298], eax
je 0x4a3f83
jmp 0x4a2410
mov eax, dword [ebp - 0x12c]
sub eax, 0xcc24e237
mov dword [ebp - 0x29c], eax
je 0x4a36ba
jmp 0x4a2410
mov eax, dword [ebp - 0x12c]
sub eax, 0xce1f2c07
mov dword [ebp - 0x2a0], eax
je 0x4a372f
jmp 0x4a2410
mov eax, dword [ebp - 0x12c]
sub eax, 0xcfc2ccb8
mov dword [ebp - 0x2a4], eax
je 0x4a2d11
jmp 0x4a2410
mov eax, dword [ebp - 0x12c]
sub eax, 0xd62b39c8
mov dword [ebp - 0x2a8], eax
je 0x4a35c9
jmp 0x4a2410
mov eax, dword [ebp - 0x12c]
sub eax, 0xd954e027
mov dword [ebp - 0x2ac], eax
je 0x4a3753
jmp 0x4a2410
mov eax, dword [ebp - 0x12c]
sub eax, 0xd9a796ff
mov dword [ebp - 0x2b0], eax
je 0x4a5264
jmp 0x4a2410
mov eax, dword [ebp - 0x12c]
sub eax, 0xdd3c3e4f
mov dword [ebp - 0x2b4], eax
je 0x4a2679
jmp 0x4a2410
mov eax, dword [ebp - 0x12c]
sub eax, 0xdfd2af4c
mov dword [ebp - 0x2b8], eax
je 0x4a5578
jmp 0x4a2410
mov eax, dword [ebp - 0x12c]
sub eax, 0xe0b9fad4
mov dword [ebp - 0x2bc], eax
je 0x4a3627
jmp 0x4a2410
mov eax, dword [ebp - 0x12c]
sub eax, 0xe3917a97
mov dword [ebp - 0x2c0], eax
je 0x4a2c69
jmp 0x4a2410
mov eax, dword [ebp - 0x12c]
sub eax, 0xe672258a
mov dword [ebp - 0x2c4], eax
je 0x4a40c5
jmp 0x4a2410
mov eax, dword [ebp - 0x12c]
sub eax, 0xe82e50ea
mov dword [ebp - 0x2c8], eax
je 0x4a40b6
jmp 0x4a2410
mov eax, dword [ebp - 0x12c]
sub eax, 0xe92c18e5
mov dword [ebp - 0x2cc], eax
je 0x4a2d02
jmp 0x4a2410
mov eax, dword [ebp - 0x12c]
sub eax, 0xe9971392
mov dword [ebp - 0x2d0], eax
je 0x4a6565
jmp 0x4a2410
mov eax, dword [ebp - 0x12c]
sub eax, 0xea502c27
mov dword [ebp - 0x2d4], eax
je 0x4a4937
jmp 0x4a2410
mov eax, dword [ebp - 0x12c]
sub eax, 0xea891c71
mov dword [ebp - 0x2d8], eax
je 0x4a5c25
jmp 0x4a2410
mov eax, dword [ebp - 0x12c]
sub eax, 0xed9002ec
mov dword [ebp - 0x2dc], eax
je 0x4a5075
jmp 0x4a2410
mov eax, dword [ebp - 0x12c]
sub eax, 0x509313
mov dword [ebp - 0x2e0], eax
je 0x4a49f1
jmp 0x4a2410
mov eax, dword [ebp - 0x12c]
sub eax, 0xbaa44f
mov dword [ebp - 0x2e4], eax
je 0x4a549e
jmp 0x4a2410
mov eax, dword [ebp - 0x12c]
sub eax, 0x33c5c5c
mov dword [ebp - 0x2e8], eax
je 0x4a5cf3
jmp 0x4a2410
mov eax, dword [ebp - 0x12c]
sub eax, 0x14cb9bb5
mov dword [ebp - 0x2ec], eax
je 0x4a4168
jmp 0x4a2410
mov eax, dword [ebp - 0x12c]
sub eax, 0x176dac6d
mov dword [ebp - 0x2f0], eax
je 0x4a2415
jmp 0x4a2410
mov eax, dword [ebp - 0x12c]
sub eax, 0x1da08bed
mov dword [ebp - 0x2f4], eax
je 0x4a276e
jmp 0x4a2410
mov eax, dword [ebp - 0x12c]
sub eax, 0x220cac02
mov dword [ebp - 0x2f8], eax
je 0x4a654c
jmp 0x4a2410
mov eax, dword [ebp - 0x12c]
sub eax, 0x23818c52
mov dword [ebp - 0x2fc], eax
je 0x4a5c34
jmp 0x4a2410
mov eax, dword [ebp - 0x12c]
sub eax, 0x2ac338d4
mov dword [ebp - 0x300], eax
je 0x4a50ec
jmp 0x4a2410
mov eax, dword [ebp - 0x12c]
sub eax, 0x30da6a42
mov dword [ebp - 0x304], eax
je 0x4a5533
jmp 0x4a2410
mov eax, dword [ebp - 0x12c]
sub eax, 0x31c2752e
mov dword [ebp - 0x308], eax
je 0x4a254b
jmp 0x4a2410
mov eax, dword [ebp - 0x12c]
sub eax, 0x376daf62
mov dword [ebp - 0x30c], eax
je 0x4a56cf
jmp 0x4a2410
mov eax, dword [ebp - 0x12c]
sub eax, 0x3b48fd09
mov dword [ebp - 0x310], eax
je 0x4a562a
jmp 0x4a2410
mov eax, dword [ebp - 0x12c]
sub eax, 0x3ff0a2f3
mov dword [ebp - 0x314], eax
je 0x4a64d9
jmp 0x4a2410
mov eax, dword [ebp - 0x12c]
sub eax, 0x413d3009
mov dword [ebp - 0x318], eax
je 0x4a2bf7
jmp 0x4a2410
mov eax, dword [ebp - 0x12c]
sub eax, 0x4442c367
mov dword [ebp - 0x31c], eax
je 0x4a54bc
jmp 0x4a2410
mov eax, dword [ebp - 0x12c]
sub eax, 0x458e4b96
mov dword [ebp - 0x320], eax
je 0x4a34b5
jmp 0x4a2410
mov eax, dword [ebp - 0x12c]
sub eax, 0x468db2cd
mov dword [ebp - 0x324], eax
je 0x4a26b3
jmp 0x4a2410
mov eax, dword [ebp - 0x12c]
sub eax, 0x4c70901d
mov dword [ebp - 0x328], eax
je 0x4a36d8
jmp 0x4a2410
mov eax, dword [ebp - 0x12c]
sub eax, 0x50788707
mov dword [ebp - 0x32c], eax
je 0x4a5846
jmp 0x4a2410
mov eax, dword [ebp - 0x12c]
sub eax, 0x51ae7bef
mov dword [ebp - 0x330], eax
je 0x4a6580
jmp 0x4a2410
mov eax, dword [ebp - 0x12c]
sub eax, 0x528f8720
mov dword [ebp - 0x334], eax
je 0x4a2bd6
jmp 0x4a2410
mov eax, dword [ebp - 0x12c]
sub eax, 0x56d44b03
mov dword [ebp - 0x338], eax
je 0x4a5362
jmp 0x4a2410
mov eax, dword [ebp - 0x12c]
sub eax, 0x579bc318
mov dword [ebp - 0x33c], eax
je 0x4a53fb
jmp 0x4a2410
mov eax, dword [ebp - 0x12c]
sub eax, 0x595da6a3
mov dword [ebp - 0x340], eax
je 0x4a34ce
jmp 0x4a2410
mov eax, dword [ebp - 0x12c]
sub eax, 0x67be870f
mov dword [ebp - 0x344], eax
je 0x4a508e
jmp 0x4a2410
mov eax, dword [ebp - 0x12c]
sub eax, 0x69695ce0
mov dword [ebp - 0x348], eax
je 0x4a5501
jmp 0x4a2410
mov eax, dword [ebp - 0x12c]
sub eax, 0x69743e6d
mov dword [ebp - 0x34c], eax
je 0x4a56de
jmp 0x4a2410
mov eax, dword [ebp - 0x12c]
sub eax, 0x6a2fe925
mov dword [ebp - 0x350], eax
je 0x4a2492
jmp 0x4a2410
mov eax, dword [ebp - 0x12c]
sub eax, 0x7785a45d
mov dword [ebp - 0x354], eax
je 0x4a64ca
jmp 0x4a2410
mov eax, dword [ebp - 0x12c]
sub eax, 0x79a3abdb
mov dword [ebp - 0x358], eax
je 0x4a5587
jmp 0x4a2410
mov eax, dword [ebp - 0x12c]
sub eax, 0x7a6dbbaf
mov dword [ebp - 0x35c], eax
je 0x4a5855
jmp 0x4a2410
mov eax, dword [ebp - 0x12c]
sub eax, 0x7f3c7a08
mov dword [ebp - 0x360], eax
je 0x4a26d5
jmp 0x4a2410
jmp 0x4a658a
mov eax, 0xa9aae914
mov ecx, 0x96286b84
mov edx, dword [ebp - 0xc8]
cmp edx, 0
cmove eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x4a658a
mov eax, 0x9806821e
mov ecx, 0x31c2752e
mov dl, 1
mov esi, 0
cmp dword [ebp - 0xd4], 0
sete dh
and dh, 1
mov byte [ebp - 0xc3], dh
mov edi, dword [0x50ae30]
mov ebx, dword [0x50ae2c]
sub esi, 1
mov dword [ebp - 0x364], eax
mov eax, edi
add eax, esi
imul edi, eax
and edi, 1
cmp edi, 0
sete dh
cmp ebx, 0xa
setl al
mov ah, dh
xor ah, 1
mov bl, al
xor bl, 1
xor dl, 1
mov bh, ah
and bh, 1
and dh, dl
mov byte [ebp - 0x365], al
mov al, bl
and al, 1
mov byte [ebp - 0x366], al
mov al, byte [ebp - 0x365]
and al, dl
or bh, dh
mov dh, byte [ebp - 0x366]
or dh, al
xor bh, dh
or ah, bl
xor ah, 1
or dl, 1
and ah, dl
or bh, ah
test bh, 1
mov esi, dword [ebp - 0x364]
cmovne esi, ecx
mov dword [ebp - 0x128], esi
jmp 0x4a658a
mov eax, 0x8f1b7a62
mov ecx, 0x96286b84
mov dl, byte [ebp - 0xc3]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x4a658a
mov eax, 0x50788707
mov ecx, 0x9b665f33
mov dl, 1
mov esi, dword [0x50ae30]
mov edi, dword [0x50ae2c]
mov ebx, esi
add ebx, 0x8ccf961e
sub ebx, 1
sub ebx, 0x8ccf961e
imul esi, ebx
and esi, 1
cmp esi, 0
sete dh
cmp edi, 0xa
setl bl
mov bh, dh
xor bh, 1
mov dword [ebp - 0x36c], eax
mov al, bl
xor al, 1
xor dl, 0
mov ah, bh
and ah, 0
and dh, dl
mov byte [ebp - 0x36d], al
and al, 0
and bl, dl
or ah, dh
or al, bl
xor ah, al
mov al, byte [ebp - 0x36d]
or bh, al
xor bh, 1
or dl, 0
and bh, dl
or ah, bh
test ah, 1
mov esi, dword [ebp - 0x36c]
cmovne esi, ecx
mov dword [ebp - 0x128], esi
jmp 0x4a658a
mov eax, 0x50788707
mov ecx, 0xdd3c3e4f
cmp dword [ebp - 0xd0], 0
sete dl
and dl, 1
mov byte [ebp - 0xc2], dl
mov esi, dword [0x50ae30]
mov edi, dword [0x50ae2c]
mov ebx, esi
sub ebx, 0xc334f96a
sub ebx, 1
add ebx, 0xc334f96a
imul esi, ebx
and esi, 1
cmp esi, 0
sete dl
cmp edi, 0xa
setl dh
mov bl, dl
and bl, dh
xor dl, dh
or bl, dl
test bl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x4a658a
mov eax, 0x468db2cd
mov ecx, 0x96286b84
mov dl, byte [ebp - 0xc2]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x4a658a
mov dword [ebp - 0xcc], 0
mov dword [ebp - 0x128], 0x69743e6d
jmp 0x4a658a
mov eax, 0xcfc2ccb8
mov ecx, 0x7f3c7a08
cmp dword [0x509ac8], 0
cmove eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x4a658a
mov eax, 0x7a6dbbaf
mov ecx, 0x1da08bed
mov dl, 1
mov esi, dword [0x50ae30]
mov edi, dword [0x50ae2c]
mov ebx, esi
add ebx, 0x5d3d4486
sub ebx, 1
sub ebx, 0x5d3d4486
imul esi, ebx
and esi, 1
cmp esi, 0
sete dh
cmp edi, 0xa
setl bl
mov bh, dh
xor bh, 1
mov dword [ebp - 0x374], eax
mov al, bl
xor al, 1
xor dl, 0
mov ah, bh
and ah, 0
and dh, dl
mov byte [ebp - 0x375], al
and al, 0
and bl, dl
or ah, dh
or al, bl
xor ah, al
mov al, byte [ebp - 0x375]
or bh, al
xor bh, 1
or dl, 0
and bh, dl
or ah, bh
test ah, 1
mov esi, dword [ebp - 0x374]
cmovne esi, ecx
mov dword [ebp - 0x128], esi
jmp 0x4a658a
lea eax, [0x4fcccc]
add eax, 5
mov ecx, 4
lea edx, [ebp - 0xb4]
mov dword [ebp - 0xb4], 0
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], 4
mov dword [ebp - 0x37c], ecx
call fcn.00409040
mov ecx, 1
mov edx, dword [ebp - 0xb4]
mov dword [esp], edx
mov dword [esp + 4], 1
mov dword [ebp - 0x380], eax
mov dword [ebp - 0x384], ecx
call fcn.004b4d44
mov dword [0x509ac8], eax
mov eax, dword [0x509ac8]
mov dword [ebp - 0xac], eax
mov dword [ebp - 0xb8], 0x765c05cb
mov eax, dword [ebp - 0xb8]
mov ecx, eax
sub ecx, 0xd7673c07
mov dword [ebp - 0x388], eax
mov dword [ebp - 0x38c], ecx
jg 0x4a282a
jmp 0x4a280e
mov eax, dword [ebp - 0x388]
sub eax, 0x8b406704
mov dword [ebp - 0x390], eax
je 0x4a2b16
jmp 0x4a2996
mov eax, dword [ebp - 0x388]
sub eax, 0xde81645d
mov dword [ebp - 0x394], eax
jg 0x4a2862
jmp 0x4a2846
mov eax, dword [ebp - 0x388]
sub eax, 0xd7673c08
mov dword [ebp - 0x398], eax
je 0x4a2a53
jmp 0x4a2996
mov eax, dword [ebp - 0x388]
sub eax, 0xe374ddf5
mov dword [ebp - 0x39c], eax
jg 0x4a289a
jmp 0x4a287e
mov eax, dword [ebp - 0x388]
sub eax, 0xde81645e
mov dword [ebp - 0x3a0], eax
je 0x4a2aac
jmp 0x4a2996
mov eax, dword [ebp - 0x388]
sub eax, 0x49325759
mov dword [ebp - 0x3a4], eax
jg 0x4a28d2
jmp 0x4a28b6
mov eax, dword [ebp - 0x388]
sub eax, 0xe374ddf6
mov dword [ebp - 0x3a8], eax
je 0x4a2b25
jmp 0x4a2996
mov eax, dword [ebp - 0x388]
sub eax, 0x4fb3f276
mov dword [ebp - 0x3ac], eax
jg 0x4a290a
jmp 0x4a28ee
mov eax, dword [ebp - 0x388]
sub eax, 0x4932575a
mov dword [ebp - 0x3b0], eax
je 0x4a2a3a
jmp 0x4a2996
mov eax, dword [ebp - 0x388]
sub eax, 0x6c10ac30
mov dword [ebp - 0x3b4], eax
jg 0x4a2942
jmp 0x4a2926
mov eax, dword [ebp - 0x388]
sub eax, 0x4fb3f277
mov dword [ebp - 0x3b8], eax
je 0x4a29bf
jmp 0x4a2996
mov eax, dword [ebp - 0x388]
sub eax, 0x6c10ac31
mov dword [ebp - 0x3bc], eax
je 0x4a2a21
jmp 0x4a295e
mov eax, dword [ebp - 0x388]
sub eax, 0x75ebcb57
mov dword [ebp - 0x3c0], eax
je 0x4a29d8
jmp 0x4a297a
mov eax, dword [ebp - 0x388]
sub eax, 0x765c05cb
mov dword [ebp - 0x3c4], eax
je 0x4a299b
jmp 0x4a2996
jmp 0x4a2b20
mov eax, 0x75ebcb57
mov ecx, 0x4fb3f277
mov edx, dword [ebp - 0xac]
cmp edx, 0
cmove eax, ecx
mov dword [ebp - 0xb8], eax
jmp 0x4a2b20
mov dword [ebp - 0xb0], 0xffffffff
mov dword [ebp - 0xb8], 0xd7673c08
jmp 0x4a2b20
lea eax, [0x4fcccc]
mov ecx, dword [ebp - 0xb4]
mov edx, dword [0x509ac8]
mov esi, dword [0x4fccc8]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
call fcn.004acb70
mov ecx, 0x4932575a
mov edx, 0x6c10ac31
cmp eax, 0
cmovl ecx, edx
mov dword [ebp - 0xb8], ecx
jmp 0x4a2b20
mov dword [ebp - 0xb0], 0xffffffff
mov dword [ebp - 0xb8], 0xd7673c08
jmp 0x4a2b20
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0xb8], 0xd7673c08
jmp 0x4a2b20
mov eax, 0x8b406704
mov ecx, 0xde81645e
mov edx, 0
mov esi, dword [0x50ae50]
mov edi, dword [0x50ae4c]
sub edx, 1
mov ebx, esi
add ebx, edx
imul esi, ebx
and esi, 1
cmp esi, 0
sete dl
cmp edi, 0xa
setl dh
mov bl, dl
and bl, dh
xor dl, dh
or bl, dl
test bl, 1
cmovne eax, ecx
mov dword [ebp - 0xb8], eax
jmp 0x4a2b20
mov eax, 0x8b406704
mov ecx, 0xe374ddf6
mov edx, dword [ebp - 0xb0]
mov dword [ebp - 0xa8], edx
mov edx, dword [0x50ae50]
mov esi, dword [0x50ae4c]
mov edi, edx
add edi, 0x40b8a7f8
sub edi, 1
sub edi, 0x40b8a7f8
imul edx, edi
and edx, 1
cmp edx, 0
sete bl
cmp esi, 0xa
setl bh
mov dl, bl
and dl, bh
xor bl, bh
or dl, bl
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xb8], eax
jmp 0x4a2b20
mov dword [ebp - 0xb8], 0xde81645e
jmp 0x4a27e9
mov eax, 0x7a6dbbaf
mov ecx, 0x528f8720
mov dl, 1
mov esi, dword [ebp - 0xa8]
cmp esi, 0
setl dh
and dh, 1
mov byte [ebp - 0xc1], dh
mov esi, dword [0x50ae30]
mov edi, dword [0x50ae2c]
mov ebx, esi
add ebx, 0x3fce7287
sub ebx, 1
sub ebx, 0x3fce7287
imul esi, ebx
and esi, 1
cmp esi, 0
sete dh
cmp edi, 0xa
setl bl
mov bh, dh
xor bh, 1
mov dword [ebp - 0x3c8], eax
mov al, bl
xor al, 1
xor dl, 1
mov ah, bh
and ah, 1
and dh, dl
mov byte [ebp - 0x3c9], al
and al, 1
and bl, dl
or ah, dh
or al, bl
xor ah, al
mov al, byte [ebp - 0x3c9]
or bh, al
xor bh, 1
or dl, 1
and bh, dl
or ah, bh
test ah, 1
mov esi, dword [ebp - 0x3c8]
cmovne esi, ecx
mov dword [ebp - 0x128], esi
jmp 0x4a658a
mov eax, 0xbc871bdb
mov ecx, 0x413d3009
mov dl, byte [ebp - 0xc1]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x4a658a
mov dword [ebp - 0xcc], 0
mov dword [ebp - 0x128], 0x69743e6d
jmp 0x4a658a
mov eax, 0xea891c71
mov ecx, 0xe3917a97
mov edx, 0
mov esi, dword [0x50ae30]
mov edi, dword [0x50ae2c]
sub edx, 1
mov ebx, esi
add ebx, edx
imul esi, ebx
and esi, 1
cmp esi, 0
sete dl
cmp edi, 0xa
setl dh
mov bl, dl
and bl, dh
xor dl, dh
or bl, dl
test bl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x4a658a
mov eax, 0xea891c71
mov ecx, 0xe92c18e5
mov dl, 1
mov esi, dword [0x50ae30]
mov edi, dword [0x50ae2c]
mov ebx, esi
sub ebx, 0xb831992d
sub ebx, 1
add ebx, 0xb831992d
imul esi, ebx
and esi, 1
cmp esi, 0
sete dh
cmp edi, 0xa
setl bl
mov bh, dh
xor bh, 1
mov dword [ebp - 0x3d0], eax
mov al, bl
xor al, 1
xor dl, 1
mov ah, bh
and ah, 1
and dh, dl
mov byte [ebp - 0x3d1], al
and al, 1
and bl, dl
or ah, dh
or al, bl
xor ah, al
mov al, byte [ebp - 0x3d1]
or bh, al
xor bh, 1
or dl, 1
and bh, dl
or ah, bh
test ah, 1
mov esi, dword [ebp - 0x3d0]
cmovne esi, ecx
mov dword [ebp - 0x128], esi
jmp 0x4a658a
mov dword [ebp - 0x128], 0xcfc2ccb8
jmp 0x4a658a
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0xa4], 0x8db02c99
mov eax, dword [ebp - 0xa4]
mov ecx, eax
sub ecx, 0x59e6c11b
mov dword [ebp - 0x3d8], eax
mov dword [ebp - 0x3dc], ecx
jg 0x4a304a
jmp 0x4a2d56
mov eax, dword [ebp - 0x3d8]
sub eax, 0x4c7a5e41
mov dword [ebp - 0x3e0], eax
jg 0x4a302e
jmp 0x4a2d72
mov eax, dword [ebp - 0x3d8]
sub eax, 0x458f6a0d
mov dword [ebp - 0x3e4], eax
jg 0x4a3012
jmp 0x4a2d8e
mov eax, dword [ebp - 0x3d8]
sub eax, 0x86a4d46a
mov dword [ebp - 0x3e8], eax
jg 0x4a2dc6
jmp 0x4a2daa
mov eax, dword [ebp - 0x3d8]
sub eax, 0x805b2afe
mov dword [ebp - 0x3ec], eax
je 0x4a3447
jmp 0x4a3066
mov eax, dword [ebp - 0x3d8]
sub eax, 0x8db02c98
mov dword [ebp - 0x3f0], eax
jg 0x4a2dfe
jmp 0x4a2de2
mov eax, dword [ebp - 0x3d8]
sub eax, 0x86a4d46b
mov dword [ebp - 0x3f4], eax
je 0x4a3429
jmp 0x4a3066
mov eax, dword [ebp - 0x3d8]
sub eax, 0xa50c522b
mov dword [ebp - 0x3f8], eax
jg 0x4a2e36
jmp 0x4a2e1a
mov eax, dword [ebp - 0x3d8]
sub eax, 0x8db02c99
mov dword [ebp - 0x3fc], eax
je 0x4a306b
jmp 0x4a3066
mov eax, dword [ebp - 0x3d8]
sub eax, 0xab71b6f2
mov dword [ebp - 0x400], eax
jg 0x4a2e6e
jmp 0x4a2e52
mov eax, dword [ebp - 0x3d8]
sub eax, 0xa50c522c
mov dword [ebp - 0x404], eax
je 0x4a31a8
jmp 0x4a3066
mov eax, dword [ebp - 0x3d8]
sub eax, 0xb9446f5c
mov dword [ebp - 0x408], eax
jg 0x4a2ea6
jmp 0x4a2e8a
mov eax, dword [ebp - 0x3d8]
sub eax, 0xab71b6f3
mov dword [ebp - 0x40c], eax
je 0x4a30e8
jmp 0x4a3066
mov eax, dword [ebp - 0x3d8]
sub eax, 0xef493e53
mov dword [ebp - 0x410], eax
jg 0x4a2ede
jmp 0x4a2ec2
mov eax, dword [ebp - 0x3d8]
sub eax, 0xb9446f5d
mov dword [ebp - 0x414], eax
je 0x4a31ff
jmp 0x4a3066
mov eax, dword [ebp - 0x3d8]
sub eax, 0xfc25e089
mov dword [ebp - 0x418], eax
jg 0x4a2f16
jmp 0x4a2efa
mov eax, dword [ebp - 0x3d8]
sub eax, 0xef493e54
mov dword [ebp - 0x41c], eax
je 0x4a3438
jmp 0x4a3066
mov eax, dword [ebp - 0x3d8]
sub eax, 0xff3aae11
mov dword [ebp - 0x420], eax
jg 0x4a2f4e
jmp 0x4a2f32
mov eax, dword [ebp - 0x3d8]
sub eax, 0xfc25e08a
mov dword [ebp - 0x424], eax
je 0x4a346e
jmp 0x4a3066
mov eax, dword [ebp - 0x3d8]
sub eax, 0x43fb3f0
mov dword [ebp - 0x428], eax
jg 0x4a2f86
jmp 0x4a2f6a
mov eax, dword [ebp - 0x3d8]
sub eax, 0xff3aae12
mov dword [ebp - 0x42c], eax
je 0x4a308f
jmp 0x4a3066
mov eax, dword [ebp - 0x3d8]
sub eax, 0x1c1ad9b9
mov dword [ebp - 0x430], eax
jg 0x4a2ff6
jmp 0x4a2fa2
mov eax, dword [ebp - 0x3d8]
sub eax, 0x43fb3f1
mov dword [ebp - 0x434], eax
je 0x4a31c9
jmp 0x4a2fbe
mov eax, dword [ebp - 0x3d8]
sub eax, 0x58b6a70
mov dword [ebp - 0x438], eax
je 0x4a3298
jmp 0x4a2fda
mov eax, dword [ebp - 0x3d8]
sub eax, 0x1a7297c7
mov dword [ebp - 0x43c], eax
je 0x4a3323
jmp 0x4a3066
mov eax, dword [ebp - 0x3d8]
sub eax, 0x1c1ad9ba
mov dword [ebp - 0x440], eax
je 0x4a33c6
jmp 0x4a3066
mov eax, dword [ebp - 0x3d8]
sub eax, 0x458f6a0e
mov dword [ebp - 0x444], eax
je 0x4a3487
jmp 0x4a3066
mov eax, dword [ebp - 0x3d8]
sub eax, 0x4c7a5e42
mov dword [ebp - 0x448], eax
je 0x4a31f0
jmp 0x4a3066
mov eax, dword [ebp - 0x3d8]
sub eax, 0x59e6c11c
mov dword [ebp - 0x44c], eax
je 0x4a3314
jmp 0x4a3066
jmp 0x4a3482
mov eax, 0x1a7297c7
mov ecx, 0xff3aae12
mov edx, dword [ebp - 0xa0]
cmp edx, dword [0x4fccc4]
cmovb eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x4a3482
mov eax, 0xef493e54
mov ecx, 0xab71b6f3
mov edx, 0
mov esi, dword [0x50ad4c]
mov edi, dword [0x50ad48]
sub edx, 1
mov ebx, esi
add ebx, edx
imul esi, ebx
and esi, 1
cmp esi, 0
sete dl
cmp edi, 0xa
setl dh
mov bl, dl
and bl, dh
xor dl, dh
or bl, dl
test bl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x4a3482
mov eax, 0xef493e54
mov ecx, 0xa50c522c
mov dl, 1
lea esi, [0x4fc9dc]
imul edi, dword [ebp - 0xa0], 0xc
add esi, edi
mov esi, dword [esi + 4]
cmp esi, dword [ebp - 0x9c]
sete dh
and dh, 1
mov byte [ebp - 0x91], dh
mov esi, dword [0x50ad4c]
mov edi, dword [0x50ad48]
mov ebx, esi
add ebx, 0xa563b69d
sub ebx, 1
sub ebx, 0xa563b69d
imul esi, ebx
and esi, 1
cmp esi, 0
sete dh
cmp edi, 0xa
setl bl
mov bh, dh
xor bh, 1
mov dword [ebp - 0x450], eax
mov al, bl
xor al, 1
xor dl, 0
mov ah, bh
and ah, 0
and dh, dl
mov byte [ebp - 0x451], al
and al, 0
and bl, dl
or ah, dh
or al, bl
xor ah, al
mov al, byte [ebp - 0x451]
or bh, al
xor bh, 1
or dl, 0
and bh, dl
or ah, bh
test ah, 1
mov esi, dword [ebp - 0x450]
cmovne esi, ecx
mov dword [ebp - 0xa4], esi
jmp 0x4a3482
mov eax, 0x4c7a5e42
mov ecx, 0x43fb3f1
mov dl, byte [ebp - 0x91]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x4a3482
lea eax, [0x4fc9dc]
imul ecx, dword [ebp - 0xa0], 0xc
add eax, ecx
mov dword [ebp - 0x98], eax
mov dword [ebp - 0xa4], 0x458f6a0e
jmp 0x4a3482
mov dword [ebp - 0xa4], 0xb9446f5d
jmp 0x4a3482
mov eax, 0x805b2afe
mov ecx, 0x58b6a70
mov dl, 1
mov esi, dword [0x50ad4c]
mov edi, dword [0x50ad48]
mov ebx, esi
sub ebx, 0x2c36fa53
sub ebx, 1
add ebx, 0x2c36fa53
imul esi, ebx
and esi, 1
cmp esi, 0
sete dh
cmp edi, 0xa
setl bl
mov bh, dh
xor bh, 1
mov dword [ebp - 0x458], eax
mov al, bl
xor al, 1
xor dl, 1
mov ah, bh
and ah, 1
and dh, dl
mov byte [ebp - 0x459], al
and al, 1
and bl, dl
or ah, dh
or al, bl
xor ah, al
mov al, byte [ebp - 0x459]
or bh, al
xor bh, 1
or dl, 1
and bh, dl
or ah, bh
test ah, 1
mov esi, dword [ebp - 0x458]
cmovne esi, ecx
mov dword [ebp - 0xa4], esi
jmp 0x4a3482
mov eax, 0x805b2afe
mov ecx, 0x59e6c11c
mov edx, dword [ebp - 0xa0]
sub edx, 0x7a79658d
add edx, 1
add edx, 0x7a79658d
mov dword [ebp - 0xa0], edx
mov edx, dword [0x50ad4c]
mov esi, dword [0x50ad48]
mov edi, edx
add edi, 0xf07bf907
sub edi, 1
sub edi, 0xf07bf907
imul edx, edi
and edx, 1
cmp edx, 0
sete bl
cmp esi, 0xa
setl bh
mov dl, bl
and dl, bh
xor bl, bh
or dl, bl
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x4a3482
mov dword [ebp - 0xa4], 0x8db02c99
jmp 0x4a3482
mov eax, 0xfc25e08a
mov ecx, 0x1c1ad9ba
mov dl, 1
mov esi, 0
mov edi, dword [0x50ad4c]
mov ebx, dword [0x50ad48]
sub esi, 1
mov dword [ebp - 0x460], eax
mov eax, edi
add eax, esi
imul edi, eax
and edi, 1
cmp edi, 0
sete dh
cmp ebx, 0xa
setl al
mov ah, dh
xor ah, 1
mov bl, al
xor bl, 1
xor dl, 0
mov bh, ah
and bh, 0
and dh, dl
mov byte [ebp - 0x461], al
mov al, bl
and al, 0
mov byte [ebp - 0x462], al
mov al, byte [ebp - 0x461]
and al, dl
or bh, dh
mov dh, byte [ebp - 0x462]
or dh, al
xor bh, dh
or ah, bl
xor ah, 1
or dl, 0
and ah, dl
or bh, ah
test bh, 1
mov esi, dword [ebp - 0x460]
cmovne esi, ecx
mov dword [ebp - 0xa4], esi
jmp 0x4a3482
mov eax, 0xfc25e08a
mov ecx, 0x86a4d46b
mov edx, 0
mov dword [ebp - 0x98], 0
mov esi, dword [0x50ad4c]
mov edi, dword [0x50ad48]
sub edx, 1
mov ebx, esi
add ebx, edx
imul esi, ebx
and esi, 1
cmp esi, 0
sete dl
cmp edi, 0xa
setl dh
mov bl, dl
and bl, dh
xor dl, dh
or bl, dl
test bl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x4a3482
mov dword [ebp - 0xa4], 0x458f6a0e
jmp 0x4a3482
mov dword [ebp - 0xa4], 0xab71b6f3
jmp 0x4a3482
mov eax, 0
mov ecx, dword [ebp - 0xa0]
sub eax, 1
sub ecx, eax
mov dword [ebp - 0xa0], ecx
mov dword [ebp - 0xa4], 0x58b6a70
jmp 0x4a3482
mov dword [ebp - 0x98], 0
mov dword [ebp - 0xa4], 0x1c1ad9ba
jmp 0x4a2d31
mov eax, 0x595da6a3
mov ecx, 0x458e4b96
mov edx, dword [ebp - 0x98]
mov dword [ebp - 0xe0], edx
cmp dword [ebp - 0xe0], 0
cmove eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x4a658a
mov dword [ebp - 0xcc], 0
mov dword [ebp - 0x128], 0x69743e6d
jmp 0x4a658a
mov eax, dword [0x509ac8]
mov ecx, dword [ebp - 0xe0]
add eax, dword [ecx]
mov dword [ebp - 0xdc], eax
call fcn.0040a000
mov ecx, 0
mov dword [ebp - 0x124], eax
mov eax, dword [ebp - 0xdc]
add eax, 0x2b
mov dword [ebp - 0xe4], eax
mov eax, dword [ebp - 0xdc]
mov eax, dword [eax + 0x1f]
shl eax, 1
mov edx, dword [ebp - 0xdc]
add edx, 0x2b
shl eax, 2
add edx, eax
mov dword [ebp - 0xec], edx
mov eax, dword [ebp - 0xdc]
mov eax, dword [eax + 0x1f]
shl eax, 1
mov edx, dword [ebp - 0xdc]
mov edx, dword [edx + 0x23]
shl edx, 1
mov esi, ecx
sub esi, eax
mov eax, ecx
sub eax, edx
add esi, eax
sub ecx, esi
mov eax, dword [ebp - 0xdc]
add eax, 0x2b
shl ecx, 2
add eax, ecx
mov dword [ebp - 0xf4], eax
mov eax, dword [ebp - 0xd0]
mov ecx, esp
mov dword [ecx + 8], 0x1000
mov dword [ecx + 0xc], 0x40
mov dword [ecx + 4], eax
mov dword [ecx], 0
mov eax, dword [sym.imp.KERNEL32.dll_VirtualAlloc]
call eax
sub esp, 0x10
mov ecx, 0xd62b39c8
mov edx, 0xa92a6131
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0
cmove ecx, edx
mov dword [ebp - 0x128], ecx
jmp 0x4a658a
mov dword [ebp - 0xcc], 0
mov dword [ebp - 0x128], 0x69743e6d
jmp 0x4a658a
mov eax, 0x23818c52
mov ecx, 0xe0b9fad4
mov edx, dword [0x50ae30]
mov esi, dword [0x50ae2c]
mov edi, edx
sub edi, 0xfde16d07
sub edi, 1
add edi, 0xfde16d07
imul edx, edi
and edx, 1
cmp edx, 0
sete bl
cmp esi, 0xa
setl bh
mov dl, bl
and dl, bh
xor bl, bh
or dl, bl
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x4a658a
mov eax, 0x23818c52
mov ecx, 0xc010bddc
mov edx, 0
mov esi, dword [ebp - 0xe0]
cmp dword [esi + 8], 0
setne bl
and bl, 1
mov byte [ebp - 0xc0], bl
mov esi, dword [0x50ae30]
mov edi, dword [0x50ae2c]
sub edx, 1
mov ebx, esi
add ebx, edx
imul esi, ebx
and esi, 1
cmp esi, 0
sete dl
cmp edi, 0xa
setl dh
mov bl, dl
and bl, dh
xor dl, dh
or bl, dl
test bl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x4a658a
mov eax, 0x4c70901d
mov ecx, 0xcc24e237
mov dl, byte [ebp - 0xc0]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x4a658a
mov eax, dword [ebp - 0xe0]
mov eax, dword [eax + 8]
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0x128], 0x69743e6d
jmp 0x4a658a
mov eax, 0
mov ecx, dword [ebp - 0xfc]
mov edx, dword [ebp - 0xe0]
mov dword [edx + 8], ecx
mov ecx, dword [ebp - 0xd8]
mov edx, dword [ebp - 0x124]
sub eax, edx
sub ecx, eax
mov dword [ebp - 0xf8], ecx
mov dword [ebp - 0x100], 0
mov dword [ebp - 0x104], 0
mov dword [ebp - 0x108], 0
mov dword [ebp - 0x128], 0xce1f2c07
jmp 0x4a658a
mov eax, 0x79a3abdb
mov ecx, 0xd954e027
mov edx, dword [ebp - 0x104]
cmp edx, dword [ebp - 0xd0]
cmovb eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x4a658a
mov eax, dword [ebp - 0xd8]
mov ecx, dword [ebp - 0x104]
add eax, 0x9423e78f
add eax, ecx
sub eax, 0x9423e78f
mov dword [ebp - 0x118], eax
mov eax, dword [ebp - 0x118]
mov ecx, dword [ebp - 0xdc]
mov ecx, dword [ecx + 0x1f]
mov edx, dword [ebp - 0xe4]
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x84], ecx
mov dword [ebp - 0x88], edx
mov dword [ebp - 0x8c], 0
mov dword [ebp - 0x90], 0x66dda058
mov eax, dword [ebp - 0x90]
mov ecx, eax
sub ecx, 0x66dda057
mov dword [ebp - 0x468], eax
mov dword [ebp - 0x46c], ecx
jg 0x4a3ac2
jmp 0x4a37ce
mov eax, dword [ebp - 0x468]
sub eax, 0x5b88152e
mov dword [ebp - 0x470], eax
jg 0x4a3aa6
jmp 0x4a37ea
mov eax, dword [ebp - 0x468]
sub eax, 0xac61091d
mov dword [ebp - 0x474], eax
jg 0x4a3822
jmp 0x4a3806
mov eax, dword [ebp - 0x468]
sub eax, 0xa65d2bd9
mov dword [ebp - 0x478], eax
je 0x4a3e80
jmp 0x4a3ade
mov eax, dword [ebp - 0x468]
sub eax, 0xc2faeb35
mov dword [ebp - 0x47c], eax
jg 0x4a385a
jmp 0x4a383e
mov eax, dword [ebp - 0x468]
sub eax, 0xac61091e
mov dword [ebp - 0x480], eax
je 0x4a3e9e
jmp 0x4a3ade
mov eax, dword [ebp - 0x468]
sub eax, 0xea2fe4f5
mov dword [ebp - 0x484], eax
jg 0x4a3892
jmp 0x4a3876
mov eax, dword [ebp - 0x468]
sub eax, 0xc2faeb36
mov dword [ebp - 0x488], eax
je 0x4a3ead
jmp 0x4a3ade
mov eax, dword [ebp - 0x468]
sub eax, 0xf98aa79a
mov dword [ebp - 0x48c], eax
jg 0x4a38ca
jmp 0x4a38ae
mov eax, dword [ebp - 0x468]
sub eax, 0xea2fe4f6
mov dword [ebp - 0x490], eax
je 0x4a3d11
jmp 0x4a3ade
mov eax, dword [ebp - 0x468]
sub eax, 0xfadd62b2
mov dword [ebp - 0x494], eax
jg 0x4a3902
jmp 0x4a38e6
mov eax, dword [ebp - 0x468]
sub eax, 0xf98aa79b
mov dword [ebp - 0x498], eax
je 0x4a3d20
jmp 0x4a3ade
mov eax, dword [ebp - 0x468]
sub eax, 0xfec7fb37
mov dword [ebp - 0x49c], eax
jg 0x4a393a
jmp 0x4a391e
mov eax, dword [ebp - 0x468]
sub eax, 0xfadd62b3
mov dword [ebp - 0x4a0], eax
je 0x4a3c78
jmp 0x4a3ade
mov eax, dword [ebp - 0x468]
sub eax, 0x3c19896
mov dword [ebp - 0x4a4], eax
jg 0x4a3972
jmp 0x4a3956
mov eax, dword [ebp - 0x468]
sub eax, 0xfec7fb38
mov dword [ebp - 0x4a8], eax
je 0x4a3bd9
jmp 0x4a3ade
mov eax, dword [ebp - 0x468]
sub eax, 0x6579a7b
mov dword [ebp - 0x4ac], eax
jg 0x4a39aa
jmp 0x4a398e
mov eax, dword [ebp - 0x468]
sub eax, 0x3c19897
mov dword [ebp - 0x4b0], eax
je 0x4a3b60
jmp 0x4a3ade
mov eax, dword [ebp - 0x468]
sub eax, 0x1163c82e
mov dword [ebp - 0x4b4], eax
jg 0x4a39e2
jmp 0x4a39c6
mov eax, dword [ebp - 0x468]
sub eax, 0x6579a7c
mov dword [ebp - 0x4b8], eax
je 0x4a3d47
jmp 0x4a3ade
mov eax, dword [ebp - 0x468]
sub eax, 0x1d913e45
mov dword [ebp - 0x4bc], eax
jg 0x4a3a1a
jmp 0x4a39fe
mov eax, dword [ebp - 0x468]
sub eax, 0x1163c82f
mov dword [ebp - 0x4c0], eax
je 0x4a3de0
jmp 0x4a3ade
mov eax, dword [ebp - 0x468]
sub eax, 0x25f80676
mov dword [ebp - 0x4c4], eax
jg 0x4a3a52
jmp 0x4a3a36
mov eax, dword [ebp - 0x468]
sub eax, 0x1d913e46
mov dword [ebp - 0x4c8], eax
je 0x4a3bf7
jmp 0x4a3ade
mov eax, dword [ebp - 0x468]
sub eax, 0x25f80677
mov dword [ebp - 0x4cc], eax
je 0x4a3e8f
jmp 0x4a3a6e
mov eax, dword [ebp - 0x468]
sub eax, 0x478e58c2
mov dword [ebp - 0x4d0], eax
je 0x4a3ec3
jmp 0x4a3a8a
mov eax, dword [ebp - 0x468]
sub eax, 0x48179b09
mov dword [ebp - 0x4d4], eax
je 0x4a3c1a
jmp 0x4a3ade
mov eax, dword [ebp - 0x468]
sub eax, 0x5b88152f
mov dword [ebp - 0x4d8], eax
je 0x4a3b07
jmp 0x4a3ade
mov eax, dword [ebp - 0x468]
sub eax, 0x66dda058
mov dword [ebp - 0x4dc], eax
je 0x4a3ae3
jmp 0x4a3ade
jmp 0x4a3ebe
mov eax, 0x6579a7c
mov ecx, 0x5b88152f
mov edx, dword [ebp - 0x8c]
cmp edx, dword [ebp - 0x84]
cmovb eax, ecx
mov dword [ebp - 0x90], eax
jmp 0x4a3ebe
mov eax, 0x25f80677
mov ecx, 0x3c19897
mov edx, 0
mov esi, dword [0x50ae40]
mov edi, dword [0x50ae3c]
sub edx, 1
mov ebx, esi
add ebx, edx
imul esi, ebx
and esi, 1
cmp esi, 0
sete dl
cmp edi, 0xa
setl dh
mov bl, dl
and bl, dh
xor dl, dh
or bl, dl
test bl, 1
cmovne eax, ecx
mov dword [ebp - 0x90], eax
jmp 0x4a3ebe
mov eax, 0x25f80677
mov ecx, 0xfec7fb38
mov edx, dword [ebp - 0x8c]
mov esi, dword [ebp - 0x88]
mov edx, dword [esi + edx*8]
cmp edx, dword [ebp - 0x80]
sete bl
and bl, 1
mov byte [ebp - 0x75], bl
mov edx, dword [0x50ae40]
mov esi, dword [0x50ae3c]
mov edi, edx
sub edi, 0x73ad4d65
sub edi, 1
add edi, 0x73ad4d65
imul edx, edi
and edx, 1
cmp edx, 0
sete bl
cmp esi, 0xa
setl bh
mov dl, bl
and dl, bh
xor bl, bh
or dl, bl
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x90], eax
jmp 0x4a3ebe
mov eax, 0x48179b09
mov ecx, 0x1d913e46
mov dl, byte [ebp - 0x75]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x90], eax
jmp 0x4a3ebe
mov eax, dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x88]
shl eax, 3
add ecx, eax
mov dword [ebp - 0x7c], ecx
mov dword [ebp - 0x90], 0x478e58c2
jmp 0x4a3ebe
mov eax, 0xac61091e
mov ecx, 0xfadd62b3
mov edx, dword [0x50ae40]
mov esi, dword [0x50ae3c]
mov edi, edx
sub edi, 0xc10d645c
sub edi, 1
add edi, 0xc10d645c
imul edx, edi
and edx, 1
cmp edx, 0
sete bl
cmp esi, 0xa
setl bh
mov dl, bl
and dl, bh
xor bl, bh
or dl, bl
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x90], eax
jmp 0x4a3ebe
mov eax, 0xac61091e
mov ecx, 0xea2fe4f6
mov dl, 1
mov esi, dword [0x50ae40]
mov edi, dword [0x50ae3c]
mov ebx, esi
add ebx, 0x9f105a82
sub ebx, 1
sub ebx, 0x9f105a82
imul esi, ebx
and esi, 1
cmp esi, 0
sete dh
cmp edi, 0xa
setl bl
mov bh, dh
xor bh, 1
mov dword [ebp - 0x4e0], eax
mov al, bl
xor al, 1
xor dl, 0
mov ah, bh
and ah, 0
and dh, dl
mov byte [ebp - 0x4e1], al
and al, 0
and bl, dl
or ah, dh
or al, bl
xor ah, al
mov al, byte [ebp - 0x4e1]
or bh, al
xor bh, 1
or dl, 0
and bh, dl
or ah, bh
test ah, 1
mov esi, dword [ebp - 0x4e0]
cmovne esi, ecx
mov dword [ebp - 0x90], esi
jmp 0x4a3ebe
mov dword [ebp - 0x90], 0xf98aa79b
jmp 0x4a3ebe
mov eax, 0
mov ecx, dword [ebp - 0x8c]
sub eax, 1
sub ecx, eax
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 0x90], 0x66dda058
jmp 0x4a3ebe
mov eax, 0xc2faeb36
mov ecx, 0x1163c82f
mov dl, 1
mov esi, dword [0x50ae40]
mov edi, dword [0x50ae3c]
mov ebx, esi
add ebx, 0x10aca5a9
sub ebx, 1
sub ebx, 0x10aca5a9
imul esi, ebx
and esi, 1
cmp esi, 0
sete dh
cmp edi, 0xa
setl bl
mov bh, dh
xor bh, 1
mov dword [ebp - 0x4e8], eax
mov al, bl
xor al, 1
xor dl, 1
mov ah, bh
and ah, 1
and dh, dl
mov byte [ebp - 0x4e9], al
and al, 1
and bl, dl
or ah, dh
or al, bl
xor ah, al
mov al, byte [ebp - 0x4e9]
or bh, al
xor bh, 1
or dl, 1
and bh, dl
or ah, bh
test ah, 1
mov esi, dword [ebp - 0x4e8]
cmovne esi, ecx
mov dword [ebp - 0x90], esi
jmp 0x4a3ebe
mov eax, 0xc2faeb36
mov ecx, 0xa65d2bd9
mov dl, 1
mov dword [ebp - 0x7c], 0
mov esi, dword [0x50ae40]
mov edi, dword [0x50ae3c]
mov ebx, esi
sub ebx, 0x1e5ff03b
sub ebx, 1
add ebx, 0x1e5ff03b
imul esi, ebx
and esi, 1
cmp esi, 0
sete dh
cmp edi, 0xa
setl bl
mov bh, dh
xor bh, 1
mov dword [ebp - 0x4f0], eax
mov al, bl
xor al, 1
xor dl, 0
mov ah, bh
and ah, 0
and dh, dl
mov byte [ebp - 0x4f1], al
and al, 0
and bl, dl
or ah, dh
or al, bl
xor ah, al
mov al, byte [ebp - 0x4f1]
or bh, al
xor bh, 1
or dl, 0
and bh, dl
or ah, bh
test ah, 1
mov esi, dword [ebp - 0x4f0]
cmovne esi, ecx
mov dword [ebp - 0x90], esi
jmp 0x4a3ebe
mov dword [ebp - 0x90], 0x478e58c2
jmp 0x4a3ebe
mov dword [ebp - 0x90], 0x3c19897
jmp 0x4a3ebe
mov dword [ebp - 0x90], 0xfadd62b3
jmp 0x4a3ebe
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x90], 0x1163c82f
jmp 0x4a37a9
mov eax, 0xe672258a
mov ecx, 0xb4102942
mov edx, dword [ebp - 0x7c]
mov dword [ebp - 0xe8], edx
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x4a658a
mov eax, 0xa1dc08e8
mov ecx, 0xe82e50ea
mov dl, 1
mov esi, 0
mov edi, dword [ebp - 0xe8]
mov edi, dword [edi + 4]
mov ebx, dword [ebp - 0x124]
sub edi, 0x99572bf9
add edi, ebx
add edi, 0x99572bf9
mov dword [ebp - 0x11c], edi
mov edi, dword [ebp - 0x11c]
mov ebx, dword [ebp - 0xfc]
mov dword [ebp - 0x500], eax
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x504], eax
mov eax, esi
mov dword [ebp - 0x508], ecx
mov ecx, dword [ebp - 0x504]
sub eax, ecx
sub ebx, eax
mov eax, esi
sub eax, 4
sub ebx, eax
mov eax, esi
sub eax, ebx
add edi, eax
mov eax, dword [ebp - 0xfc]
mov ebx, dword [ebp - 0x104]
mov dword [eax + ebx], edi
mov eax, dword [ebp - 0x104]
sub esi, 4
sub eax, esi
mov dword [ebp - 0x104], eax
mov eax, dword [ebp - 0x110]
sub eax, 0xbfe413c2
add eax, 1
add eax, 0xbfe413c2
mov dword [ebp - 0x110], eax
mov eax, dword [0x50ae30]
mov esi, dword [0x50ae2c]
mov edi, eax
add edi, 0x7ea8733c
sub edi, 1
sub edi, 0x7ea8733c
imul eax, edi
and eax, 1
cmp eax, 0
sete dh
cmp esi, 0xa
setl al
mov ah, dh
xor ah, 1
mov cl, al
xor cl, 1
xor dl, 1
mov ch, ah
and ch, 1
and dh, dl
mov bl, cl
and bl, 1
and al, dl
or ch, dh
or bl, al
xor ch, bl
or ah, cl
xor ah, 1
or dl, 1
and ah, dl
or ch, ah
test ch, 1
mov esi, dword [ebp - 0x500]
mov edi, dword [ebp - 0x508]
cmovne esi, edi
mov dword [ebp - 0x128], esi
jmp 0x4a658a
mov dword [ebp - 0x128], 0xce1f2c07
jmp 0x4a658a
mov eax, 0x33c5c5c
mov ecx, 0x14cb9bb5
mov dl, 1
mov esi, 0
mov edi, dword [0x50ae30]
mov ebx, dword [0x50ae2c]
sub esi, 1
mov dword [ebp - 0x50c], eax
mov eax, edi
add eax, esi
imul edi, eax
and edi, 1
cmp edi, 0
sete dh
cmp ebx, 0xa
setl al
mov ah, dh
xor ah, 1
mov bl, al
xor bl, 1
xor dl, 0
mov bh, ah
and bh, 0
and dh, dl
mov byte [ebp - 0x50d], al
mov al, bl
and al, 0
mov byte [ebp - 0x50e], al
mov al, byte [ebp - 0x50d]
and al, dl
or bh, dh
mov dh, byte [ebp - 0x50e]
or dh, al
xor bh, dh
or ah, bl
xor ah, 1
or dl, 0
and ah, dl
or bh, ah
test bh, 1
mov esi, dword [ebp - 0x50c]
cmovne esi, ecx
mov dword [ebp - 0x128], esi
jmp 0x4a658a
mov eax, dword [ebp - 0x118]
mov ecx, dword [ebp - 0xdc]
mov ecx, dword [ecx + 0x23]
mov edx, dword [ebp - 0xec]
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x68], ecx
mov dword [ebp - 0x6c], edx
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x74], 0x66dda058
mov eax, dword [ebp - 0x74]
mov ecx, eax
sub ecx, 0x66dda057
mov dword [ebp - 0x514], eax
mov dword [ebp - 0x518], ecx
jg 0x4a44aa
jmp 0x4a41b6
mov eax, dword [ebp - 0x514]
sub eax, 0x5b88152e
mov dword [ebp - 0x51c], eax
jg 0x4a448e
jmp 0x4a41d2
mov eax, dword [ebp - 0x514]
sub eax, 0xac61091d
mov dword [ebp - 0x520], eax
jg 0x4a420a
jmp 0x4a41ee
mov eax, dword [ebp - 0x514]
sub eax, 0xa65d2bd9
mov dword [ebp - 0x524], eax
je 0x4a488c
jmp 0x4a44c6
mov eax, dword [ebp - 0x514]
sub eax, 0xc2faeb35
mov dword [ebp - 0x528], eax
jg 0x4a4242
jmp 0x4a4226
mov eax, dword [ebp - 0x514]
sub eax, 0xac61091e
mov dword [ebp - 0x52c], eax
je 0x4a48a4
jmp 0x4a44c6
mov eax, dword [ebp - 0x514]
sub eax, 0xea2fe4f5
mov dword [ebp - 0x530], eax
jg 0x4a427a
jmp 0x4a425e
mov eax, dword [ebp - 0x514]
sub eax, 0xc2faeb36
mov dword [ebp - 0x534], eax
je 0x4a48b0
jmp 0x4a44c6
mov eax, dword [ebp - 0x514]
sub eax, 0xf98aa79a
mov dword [ebp - 0x538], eax
jg 0x4a42b2
jmp 0x4a4296
mov eax, dword [ebp - 0x514]
sub eax, 0xea2fe4f6
mov dword [ebp - 0x53c], eax
je 0x4a4757
jmp 0x4a44c6
mov eax, dword [ebp - 0x514]
sub eax, 0xfadd62b2
mov dword [ebp - 0x540], eax
jg 0x4a42ea
jmp 0x4a42ce
mov eax, dword [ebp - 0x514]
sub eax, 0xf98aa79b
mov dword [ebp - 0x544], eax
je 0x4a4763
jmp 0x4a44c6
mov eax, dword [ebp - 0x514]
sub eax, 0xfec7fb37
mov dword [ebp - 0x548], eax
jg 0x4a4322
jmp 0x4a4306
mov eax, dword [ebp - 0x514]
sub eax, 0xfadd62b3
mov dword [ebp - 0x54c], eax
je 0x4a46c1
jmp 0x4a44c6
mov eax, dword [ebp - 0x514]
sub eax, 0x3c19896
mov dword [ebp - 0x550], eax
jg 0x4a435a
jmp 0x4a433e
mov eax, dword [ebp - 0x514]
sub eax, 0xfec7fb38
mov dword [ebp - 0x554], eax
je 0x4a4631
jmp 0x4a44c6
mov eax, dword [ebp - 0x514]
sub eax, 0x6579a7b
mov dword [ebp - 0x558], eax
jg 0x4a4392
jmp 0x4a4376
mov eax, dword [ebp - 0x514]
sub eax, 0x3c19897
mov dword [ebp - 0x55c], eax
je 0x4a457c
jmp 0x4a44c6
mov eax, dword [ebp - 0x514]
sub eax, 0x1163c82e
mov dword [ebp - 0x560], eax
jg 0x4a43ca
jmp 0x4a43ae
mov eax, dword [ebp - 0x514]
sub eax, 0x6579a7c
mov dword [ebp - 0x564], eax
je 0x4a478a
jmp 0x4a44c6
mov eax, dword [ebp - 0x514]
sub eax, 0x1d913e45
mov dword [ebp - 0x568], eax
jg 0x4a4402
jmp 0x4a43e6
mov eax, dword [ebp - 0x514]
sub eax, 0x1163c82f
mov dword [ebp - 0x56c], eax
je 0x4a482a
jmp 0x4a44c6
mov eax, dword [ebp - 0x514]
sub eax, 0x25f80676
mov dword [ebp - 0x570], eax
jg 0x4a443a
jmp 0x4a441e
mov eax, dword [ebp - 0x514]
sub eax, 0x1d913e46
mov dword [ebp - 0x574], eax
je 0x4a464c
jmp 0x4a44c6
mov eax, dword [ebp - 0x514]
sub eax, 0x25f80677
mov dword [ebp - 0x578], eax
je 0x4a4898
jmp 0x4a4456
mov eax, dword [ebp - 0x514]
sub eax, 0x478e58c2
mov dword [ebp - 0x57c], eax
je 0x4a48c3
jmp 0x4a4472
mov eax, dword [ebp - 0x514]
sub eax, 0x48179b09
mov dword [ebp - 0x580], eax
je 0x4a4666
jmp 0x4a44c6
mov eax, dword [ebp - 0x514]
sub eax, 0x5b88152f
mov dword [ebp - 0x584], eax
je 0x4a44e6
jmp 0x4a44c6
mov eax, dword [ebp - 0x514]
sub eax, 0x66dda058
mov dword [ebp - 0x588], eax
je 0x4a44cb
jmp 0x4a44c6
jmp 0x4a48be
mov eax, 0x6579a7c
mov ecx, 0x5b88152f
mov edx, dword [ebp - 0x70]
cmp edx, dword [ebp - 0x68]
cmovb eax, ecx
mov dword [ebp - 0x74], eax
jmp 0x4a48be
mov eax, 0x25f80677
mov ecx, 0x3c19897
mov dl, 1
mov esi, dword [0x50ae40]
mov edi, dword [0x50ae3c]
mov ebx, esi
add ebx, 0x47b1c405
sub ebx, 1
sub ebx, 0x47b1c405
imul esi, ebx
and esi, 1
cmp esi, 0
sete dh
cmp edi, 0xa
setl bl
mov bh, dh
xor bh, 1
mov dword [ebp - 0x58c], eax
mov al, bl
xor al, 1
xor dl, 1
mov ah, bh
and ah, 1
and dh, dl
mov byte [ebp - 0x58d], al
and al, 1
and bl, dl
or ah, dh
or al, bl
xor ah, al
mov al, byte [ebp - 0x58d]
or bh, al
xor bh, 1
or dl, 1
and bh, dl
or ah, bh
test ah, 1
mov esi, dword [ebp - 0x58c]
cmovne esi, ecx
mov dword [ebp - 0x74], esi
jmp 0x4a48be
mov eax, 0x25f80677
mov ecx, 0xfec7fb38
mov dl, 1
mov esi, 0
mov edi, dword [ebp - 0x70]
mov ebx, dword [ebp - 0x6c]
mov edi, dword [ebx + edi*8]
cmp edi, dword [ebp - 0x64]
sete dh
and dh, 1
mov byte [ebp - 0x59], dh
mov edi, dword [0x50ae40]
mov ebx, dword [0x50ae3c]
sub esi, 1
mov dword [ebp - 0x594], eax
mov eax, edi
add eax, esi
imul edi, eax
and edi, 1
cmp edi, 0
sete dh
cmp ebx, 0xa
setl al
mov ah, dh
xor ah, 1
mov bl, al
xor bl, 1
xor dl, 0
mov bh, ah
and bh, 0
and dh, dl
mov byte [ebp - 0x595], al
mov al, bl
and al, 0
mov byte [ebp - 0x596], al
mov al, byte [ebp - 0x595]
and al, dl
or bh, dh
mov dh, byte [ebp - 0x596]
or dh, al
xor bh, dh
or ah, bl
xor ah, 1
or dl, 0
and ah, dl
or bh, ah
test bh, 1
mov esi, dword [ebp - 0x594]
cmovne esi, ecx
mov dword [ebp - 0x74], esi
jmp 0x4a48be
mov eax, 0x48179b09
mov ecx, 0x1d913e46
mov dl, byte [ebp - 0x59]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x74], eax
jmp 0x4a48be
mov eax, dword [ebp - 0x70]
mov ecx, dword [ebp - 0x6c]
shl eax, 3
add ecx, eax
mov dword [ebp - 0x60], ecx
mov dword [ebp - 0x74], 0x478e58c2
jmp 0x4a48be
mov eax, 0xac61091e
mov ecx, 0xfadd62b3
mov edx, dword [0x50ae40]
mov esi, dword [0x50ae3c]
mov edi, edx
add edi, 0xcf8e9d5f
sub edi, 1
sub edi, 0xcf8e9d5f
imul edx, edi
and edx, 1
cmp edx, 0
sete bl
cmp esi, 0xa
setl bh
mov dl, bl
and dl, bh
xor bl, bh
or dl, bl
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x74], eax
jmp 0x4a48be
mov eax, 0xac61091e
mov ecx, 0xea2fe4f6
mov dl, 1
mov esi, dword [0x50ae40]
mov edi, dword [0x50ae3c]
mov ebx, esi
sub ebx, 0x93414060
sub ebx, 1
add ebx, 0x93414060
imul esi, ebx
and esi, 1
cmp esi, 0
sete dh
cmp edi, 0xa
setl bl
mov bh, dh
xor bh, 1
mov dword [ebp - 0x59c], eax
mov al, bl
xor al, 1
xor dl, 1
mov ah, bh
and ah, 1
and dh, dl
mov byte [ebp - 0x59d], al
and al, 1
and bl, dl
or ah, dh
or al, bl
xor ah, al
mov al, byte [ebp - 0x59d]
or bh, al
xor bh, 1
or dl, 1
and bh, dl
or ah, bh
test ah, 1
mov esi, dword [ebp - 0x59c]
cmovne esi, ecx
mov dword [ebp - 0x74], esi
jmp 0x4a48be
mov dword [ebp - 0x74], 0xf98aa79b
jmp 0x4a48be
mov eax, 0
mov ecx, dword [ebp - 0x70]
mov edx, eax
sub edx, ecx
mov ecx, eax
sub ecx, 1
add edx, ecx
sub eax, edx
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x74], 0x66dda058
jmp 0x4a48be
mov eax, 0xc2faeb36
mov ecx, 0x1163c82f
mov dl, 1
mov esi, 0
mov edi, dword [0x50ae40]
mov ebx, dword [0x50ae3c]
sub esi, 1
mov dword [ebp - 0x5a4], eax
mov eax, edi
add eax, esi
imul edi, eax
and edi, 1
cmp edi, 0
sete dh
cmp ebx, 0xa
setl al
mov ah, dh
xor ah, 1
mov bl, al
xor bl, 1
xor dl, 1
mov bh, ah
and bh, 1
and dh, dl
mov byte [ebp - 0x5a5], al
mov al, bl
and al, 1
mov byte [ebp - 0x5a6], al
mov al, byte [ebp - 0x5a5]
and al, dl
or bh, dh
mov dh, byte [ebp - 0x5a6]
or dh, al
xor bh, dh
or ah, bl
xor ah, 1
or dl, 1
and ah, dl
or bh, ah
test bh, 1
mov esi, dword [ebp - 0x5a4]
cmovne esi, ecx
mov dword [ebp - 0x74], esi
jmp 0x4a48be
mov eax, 0xc2faeb36
mov ecx, 0xa65d2bd9
mov dword [ebp - 0x60], 0
mov edx, dword [0x50ae40]
mov esi, dword [0x50ae3c]
mov edi, edx
sub edi, 0x7681af34
sub edi, 1
add edi, 0x7681af34
imul edx, edi
and edx, 1
cmp edx, 0
sete bl
cmp esi, 0xa
setl bh
mov dl, bl
and dl, bh
xor bl, bh
or dl, bl
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x74], eax
jmp 0x4a48be
mov dword [ebp - 0x74], 0x478e58c2
jmp 0x4a48be
mov dword [ebp - 0x74], 0x3c19897
jmp 0x4a48be
mov dword [ebp - 0x74], 0xfadd62b3
jmp 0x4a48be
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x74], 0x1163c82f
jmp 0x4a4194
mov eax, 0x33c5c5c
mov ecx, 0xea502c27
mov edx, 0
mov esi, dword [ebp - 0x60]
mov dword [ebp - 0xe8], esi
cmp esi, 0
setne bl
and bl, 1
mov byte [ebp - 0xbf], bl
mov esi, dword [0x50ae30]
mov edi, dword [0x50ae2c]
sub edx, 1
mov ebx, esi
add ebx, edx
imul esi, ebx
and esi, 1
cmp esi, 0
sete dl
cmp edi, 0xa
setl dh
mov bl, dl
and bl, dh
xor dl, dh
or bl, dl
test bl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x4a658a
mov eax, 0x92a6312b
mov ecx, 0xc221e08b
mov dl, byte [ebp - 0xbf]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x4a658a
mov eax, 0xbc2678b1
mov ecx, 0x509313
mov dl, 1
mov esi, dword [0x50ae30]
mov edi, dword [0x50ae2c]
mov ebx, esi
add ebx, 0xe0bbd1d
sub ebx, 1
sub ebx, 0xe0bbd1d
imul esi, ebx
and esi, 1
cmp esi, 0
sete dh
cmp edi, 0xa
setl bl
mov bh, dh
xor bh, 1
mov dword [ebp - 0x5ac], eax
mov al, bl
xor al, 1
xor dl, 0
mov ah, bh
and ah, 0
and dh, dl
mov byte [ebp - 0x5ad], al
and al, 0
and bl, dl
or ah, dh
or al, bl
xor ah, al
mov al, byte [ebp - 0x5ad]
or bh, al
xor bh, 1
or dl, 0
and bh, dl
or ah, bh
test ah, 1
mov esi, dword [ebp - 0x5ac]
cmovne esi, ecx
mov dword [ebp - 0x128], esi
jmp 0x4a658a
mov eax, 0xbc2678b1
mov ecx, 0xc5d7a6eb
mov edx, 0
mov esi, dword [ebp - 0x118]
mov edi, dword [ebp - 0x124]
add esi, 0xec693e59
add esi, edi
sub esi, 0xec693e59
mov esi, dword [esi]
mov dword [ebp - 0x120], esi
mov esi, dword [ebp - 0x120]
mov edi, dword [ebp - 0xfc]
mov ebx, dword [ebp - 0x104]
mov dword [edi + ebx], esi
mov esi, dword [ebp - 0x104]
mov edi, edx
sub edi, esi
mov esi, edx
sub esi, 4
add edi, esi
sub edx, edi
mov dword [ebp - 0x104], edx
mov edx, dword [ebp - 0x114]
add edx, 0x42e60bcb
add edx, 1
sub edx, 0x42e60bcb
mov dword [ebp - 0x114], edx
mov edx, dword [0x50ae30]
mov esi, dword [0x50ae2c]
mov edi, edx
add edi, 0x49fff1c1
sub edi, 1
sub edi, 0x49fff1c1
imul edx, edi
and edx, 1
cmp edx, 0
sete dl
cmp esi, 0xa
setl dh
mov bl, dl
and bl, dh
xor dl, dh
or bl, dl
test bl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x4a658a
mov dword [ebp - 0x128], 0xce1f2c07
jmp 0x4a658a
mov dword [ebp - 0x128], 0xa9a7aa7b
jmp 0x4a658a
mov dword [ebp - 0x10c], 0
mov dword [ebp - 0x128], 0x67be870f
jmp 0x4a658a
mov eax, 0x7785a45d
mov ecx, 0x2ac338d4
mov edx, dword [0x50ae30]
mov esi, dword [0x50ae2c]
mov edi, edx
add edi, 0x87eac501
sub edi, 1
sub edi, 0x87eac501
imul edx, edi
and edx, 1
cmp edx, 0
sete bl
cmp esi, 0xa
setl bh
mov dl, bl
and dl, bh
xor bl, bh
or dl, bl
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x4a658a
mov eax, 0x7785a45d
mov ecx, 0xc4796bd8
mov dl, 1
mov esi, 0
mov edi, dword [ebp - 0x10c]
mov ebx, dword [ebp - 0xf0]
cmp edi, dword [ebx + 4]
setb dh
and dh, 1
mov byte [ebp - 0xbe], dh
mov edi, dword [0x50ae30]
mov ebx, dword [0x50ae2c]
sub esi, 1
mov dword [ebp - 0x624], eax
mov eax, edi
add eax, esi
imul edi, eax
and edi, 1
cmp edi, 0
sete dh
cmp ebx, 0xa
setl al
mov ah, dh
xor ah, 1
mov bl, al
xor bl, 1
xor dl, 1
mov bh, ah
and bh, 1
and dh, dl
mov byte [ebp - 0x625], al
mov al, bl
and al, 1
mov byte [ebp - 0x626], al
mov al, byte [ebp - 0x625]
and al, dl
or bh, dh
mov dh, byte [ebp - 0x626]
or dh, al
xor bh, dh
or ah, bl
xor ah, 1
or dl, 1
and ah, dl
or bh, ah
test bh, 1
mov esi, dword [ebp - 0x624]
cmovne esi, ecx
mov dword [ebp - 0x128], esi
jmp 0x4a658a
mov eax, 0x69695ce0
mov ecx, 0xbdaf0b8d
mov dl, byte [ebp - 0xbe]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x4a658a
mov eax, 0x3ff0a2f3
mov ecx, 0xd9a796ff
mov dl, 1
mov esi, dword [0x50ae30]
mov edi, dword [0x50ae2c]
mov ebx, esi
add ebx, 0xb68f5706
sub ebx, 1
sub ebx, 0xb68f5706
imul esi, ebx
and esi, 1
cmp esi, 0
sete dh
cmp edi, 0xa
setl bl
mov bh, dh
xor bh, 1
mov dword [ebp - 0x62c], eax
mov al, bl
xor al, 1
xor dl, 0
mov ah, bh
and ah, 0
and dh, dl
mov byte [ebp - 0x62d], al
and al, 0
and bl, dl
or ah, dh
or al, bl
xor ah, al
mov al, byte [ebp - 0x62d]
or bh, al
xor bh, 1
or dl, 0
and bh, dl
or ah, bh
test ah, 1
mov esi, dword [ebp - 0x62c]
cmovne esi, ecx
mov dword [ebp - 0x128], esi
jmp 0x4a658a
mov eax, 0x3ff0a2f3
mov ecx, 0xa627168c
mov edx, dword [ebp - 0x104]
mov esi, dword [ebp - 0xf8]
movzx edx, byte [esi + edx]
mov esi, dword [ebp - 0x108]
mov edi, esi
add edi, 0xefd46951
add edi, 1
sub edi, 0xefd46951
mov dword [ebp - 0x108], edi
mov edi, dword [ebp - 0xdc]
movzx esi, byte [edi + esi + 1]
mov edi, edx
xor edi, 0xffffffff
mov ebx, esi
and ebx, edi
xor esi, 0xffffffff
and edx, esi
or ebx, edx
mov dl, bl
mov esi, dword [ebp - 0x104]
mov edi, dword [ebp - 0xfc]
mov byte [edi + esi], dl
mov esi, dword [ebp - 0x108]
mov edi, dword [ebp - 0xdc]
movzx edi, byte [edi]
cmp esi, edi
sete dl
and dl, 1
mov byte [ebp - 0xbd], dl
mov esi, dword [0x50ae30]
mov edi, dword [0x50ae2c]
mov ebx, esi
sub ebx, 0x3cc72d9c
sub ebx, 1
add ebx, 0x3cc72d9c
imul esi, ebx
and esi, 1
cmp esi, 0
sete dl
cmp edi, 0xa
setl dh
mov bl, dl
and bl, dh
xor dl, dh
or bl, dl
test bl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x4a658a
mov eax, 0xa66942e4
mov ecx, 0x56d44b03
mov dl, byte [ebp - 0xbd]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x4a658a
mov eax, 0x220cac02
mov ecx, 0x579bc318
mov dl, 1
mov esi, dword [0x50ae30]
mov edi, dword [0x50ae2c]
mov ebx, esi
sub ebx, 0x5c4436f
sub ebx, 1
add ebx, 0x5c4436f
imul esi, ebx
and esi, 1
cmp esi, 0
sete dh
cmp edi, 0xa
setl bl
mov bh, dh
xor bh, 1
mov dword [ebp - 0x634], eax
mov al, bl
xor al, 1
xor dl, 1
mov ah, bh
and ah, 1
and dh, dl
mov byte [ebp - 0x635], al
and al, 1
and bl, dl
or ah, dh
or al, bl
xor ah, al
mov al, byte [ebp - 0x635]
or bh, al
xor bh, 1
or dl, 1
and bh, dl
or ah, bh
test ah, 1
mov esi, dword [ebp - 0x634]
cmovne esi, ecx
mov dword [ebp - 0x128], esi
jmp 0x4a658a
mov eax, 0x220cac02
mov ecx, 0xbaa44f
mov dl, 1
mov dword [ebp - 0x108], 0
mov esi, dword [0x50ae30]
mov edi, dword [0x50ae2c]
mov ebx, esi
add ebx, 0xcaf6240b
sub ebx, 1
sub ebx, 0xcaf6240b
imul esi, ebx
and esi, 1
cmp esi, 0
sete dh
cmp edi, 0xa
setl bl
mov bh, dh
xor bh, 1
mov dword [ebp - 0x63c], eax
mov al, bl
xor al, 1
xor dl, 0
mov ah, bh
and ah, 0
and dh, dl
mov byte [ebp - 0x63d], al
and al, 0
and bl, dl
or ah, dh
or al, bl
xor ah, al
mov al, byte [ebp - 0x63d]
or bh, al
xor bh, 1
or dl, 0
and bh, dl
or ah, bh
test ah, 1
mov esi, dword [ebp - 0x63c]
cmovne esi, ecx
mov dword [ebp - 0x128], esi
jmp 0x4a658a
mov dword [ebp - 0x128], 0xa66942e4
jmp 0x4a658a
mov dword [ebp - 0x128], 0x4442c367
jmp 0x4a658a
mov eax, dword [ebp - 0x10c]
sub eax, 0xb30e75c3
add eax, 1
add eax, 0xb30e75c3
mov dword [ebp - 0x10c], eax
mov eax, dword [ebp - 0x104]
sub eax, 0xce8fd8aa
add eax, 1
add eax, 0xce8fd8aa
mov dword [ebp - 0x104], eax
mov dword [ebp - 0x128], 0x67be870f
jmp 0x4a658a
mov eax, 0
mov ecx, dword [ebp - 0x10c]
mov edx, dword [ebp - 0x100]
mov esi, eax
sub esi, edx
mov edx, eax
sub edx, ecx
add esi, edx
sub eax, esi
mov dword [ebp - 0x100], eax
mov dword [ebp - 0x128], 0xdfd2af4c
jmp 0x4a658a
mov eax, 0
mov ecx, dword [ebp - 0x104]
mov edx, dword [ebp - 0xf8]
mov bl, byte [edx + ecx]
mov ecx, dword [ebp - 0x104]
mov edx, dword [ebp - 0xfc]
mov byte [edx + ecx], bl
mov ecx, dword [ebp - 0x104]
sub eax, 1
sub ecx, eax
mov dword [ebp - 0x104], ecx
mov dword [ebp - 0x128], 0xdfd2af4c
jmp 0x4a658a
mov dword [ebp - 0x128], 0xce1f2c07
jmp 0x4a658a
mov eax, 0xe9971392
mov ecx, 0x3b48fd09
mov dl, 1
mov esi, 0
mov edi, dword [0x50ae30]
mov ebx, dword [0x50ae2c]
sub esi, 1
mov dword [ebp - 0x644], eax
mov eax, edi
add eax, esi
imul edi, eax
and edi, 1
cmp edi, 0
sete dh
cmp ebx, 0xa
setl al
mov ah, dh
xor ah, 1
mov bl, al
xor bl, 1
xor dl, 0
mov bh, ah
and bh, 0
and dh, dl
mov byte [ebp - 0x645], al
mov al, bl
and al, 0
mov byte [ebp - 0x646], al
mov al, byte [ebp - 0x645]
and al, dl
or bh, dh
mov dh, byte [ebp - 0x646]
or dh, al
xor bh, dh
or ah, bl
xor ah, 1
or dl, 0
and ah, dl
or bh, ah
test bh, 1
mov esi, dword [ebp - 0x644]
cmovne esi, ecx
mov dword [ebp - 0x128], esi
jmp 0x4a658a
mov eax, 0xe9971392
mov ecx, 0x376daf62
mov dl, 1
mov esi, dword [ebp - 0xfc]
mov dword [ebp - 0xcc], esi
mov esi, dword [0x50ae30]
mov edi, dword [0x50ae2c]
mov ebx, esi
sub ebx, 0xda49491
sub ebx, 1
add ebx, 0xda49491
imul esi, ebx
and esi, 1
cmp esi, 0
sete dh
cmp edi, 0xa
setl bl
mov bh, dh
xor bh, 1
mov dword [ebp - 0x64c], eax
mov al, bl
xor al, 1
xor dl, 1
mov ah, bh
and ah, 1
and dh, dl
mov byte [ebp - 0x64d], al
and al, 1
and bl, dl
or ah, dh
or al, bl
xor ah, al
mov al, byte [ebp - 0x64d]
or bh, al
xor bh, 1
or dl, 1
and bh, dl
or ah, bh
test ah, 1
mov esi, dword [ebp - 0x64c]
cmovne esi, ecx
mov dword [ebp - 0x128], esi
jmp 0x4a658a
mov dword [ebp - 0x128], 0x69743e6d
jmp 0x4a658a
mov eax, 0x51ae7bef
mov ecx, 0x88d3b817
mov dl, 1
mov esi, 0
mov edi, dword [0x50ae30]
mov ebx, dword [0x50ae2c]
sub esi, 1
mov dword [ebp - 0x654], eax
mov eax, edi
add eax, esi
imul edi, eax
and edi, 1
cmp edi, 0
sete dh
cmp ebx, 0xa
setl al
mov ah, dh
xor ah, 1
mov bl, al
xor bl, 1
xor dl, 0
mov bh, ah
and bh, 0
and dh, dl
mov byte [ebp - 0x655], al
mov al, bl
and al, 0
mov byte [ebp - 0x656], al
mov al, byte [ebp - 0x655]
and al, dl
or bh, dh
mov dh, byte [ebp - 0x656]
or dh, al
xor bh, dh
or ah, bl
xor ah, 1
or dl, 0
and ah, dl
or bh, ah
test bh, 1
mov esi, dword [ebp - 0x654]
cmovne esi, ecx
mov dword [ebp - 0x128], esi
jmp 0x4a658a
mov eax, 0x51ae7bef
mov ecx, 0xb474f56c
mov dl, 1
mov esi, dword [ebp - 0xcc]
mov dword [ebp - 0xbc], esi
mov esi, dword [0x50ae30]
mov edi, dword [0x50ae2c]
mov ebx, esi
add ebx, 0x1cfb3304
sub ebx, 1
sub ebx, 0x1cfb3304
imul esi, ebx
and esi, 1
cmp esi, 0
sete dh
cmp edi, 0xa
setl bl
mov bh, dh
xor bh, 1
mov dword [ebp - 0x65c], eax
mov al, bl
xor al, 1
xor dl, 0
mov ah, bh
and ah, 0
and dh, dl
mov byte [ebp - 0x65d], al
and al, 0
and bl, dl
or ah, dh
or al, bl
xor ah, al
mov al, byte [ebp - 0x65d]
or bh, al
xor bh, 1
or dl, 0
and bh, dl
or ah, bh
test ah, 1
mov esi, dword [ebp - 0x65c]
cmovne esi, ecx
mov dword [ebp - 0x128], esi
jmp 0x4a658a
mov eax, dword [ebp - 0xbc]
add esp, 0x754
pop esi
pop edi
pop ebx
pop ebp
ret
mov dword [ebp - 0x128], 0x6a2fe925
jmp 0x4a658a
mov dword [ebp - 0x128], 0x9b665f33
jmp 0x4a658a
lea eax, [0x4fcccc]
add eax, 5
mov ecx, 4
lea edx, [ebp - 0x38]
mov dword [ebp - 0x38], 0
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], 4
mov dword [ebp - 0x664], ecx
call fcn.00409040
mov ecx, 1
mov edx, dword [ebp - 0x38]
mov dword [esp], edx
mov dword [esp + 4], 1
mov dword [ebp - 0x668], eax
mov dword [ebp - 0x66c], ecx
call fcn.004b4d44
mov dword [0x509ac8], eax
mov eax, dword [0x509ac8]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x3c], 0x765c05cb
mov eax, dword [ebp - 0x3c]
mov ecx, eax
sub ecx, 0xd7673c07
mov dword [ebp - 0x670], eax
mov dword [ebp - 0x674], ecx
jg 0x4a58ff
jmp 0x4a58e3
mov eax, dword [ebp - 0x670]
sub eax, 0x8b406704
mov dword [ebp - 0x678], eax
je 0x4a5c01
jmp 0x4a5a6b
mov eax, dword [ebp - 0x670]
sub eax, 0xde81645d
mov dword [ebp - 0x67c], eax
jg 0x4a5937
jmp 0x4a591b
mov eax, dword [ebp - 0x670]
sub eax, 0xd7673c08
mov dword [ebp - 0x680], eax
je 0x4a5b0a
jmp 0x4a5a6b
mov eax, dword [ebp - 0x670]
sub eax, 0xe374ddf5
mov dword [ebp - 0x684], eax
jg 0x4a596f
jmp 0x4a5953
mov eax, dword [ebp - 0x670]
sub eax, 0xde81645e
mov dword [ebp - 0x688], eax
je 0x4a5ba0
jmp 0x4a5a6b
mov eax, dword [ebp - 0x670]
sub eax, 0x49325759
mov dword [ebp - 0x68c], eax
jg 0x4a59a7
jmp 0x4a598b
mov eax, dword [ebp - 0x670]
sub eax, 0xe374ddf6
mov dword [ebp - 0x690], eax
je 0x4a5c0d
jmp 0x4a5a6b
mov eax, dword [ebp - 0x670]
sub eax, 0x4fb3f276
mov dword [ebp - 0x694], eax
jg 0x4a59df
jmp 0x4a59c3
mov eax, dword [ebp - 0x670]
sub eax, 0x4932575a
mov dword [ebp - 0x698], eax
je 0x4a5af7
jmp 0x4a5a6b
mov eax, dword [ebp - 0x670]
sub eax, 0x6c10ac30
mov dword [ebp - 0x69c], eax
jg 0x4a5a17
jmp 0x4a59fb
mov eax, dword [ebp - 0x670]
sub eax, 0x4fb3f277
mov dword [ebp - 0x6a0], eax
je 0x4a5a8e
jmp 0x4a5a6b
mov eax, dword [ebp - 0x670]
sub eax, 0x6c10ac31
mov dword [ebp - 0x6a4], eax
je 0x4a5ae4
jmp 0x4a5a33
mov eax, dword [ebp - 0x670]
sub eax, 0x75ebcb57
mov dword [ebp - 0x6a8], eax
je 0x4a5aa1
jmp 0x4a5a4f
mov eax, dword [ebp - 0x670]
sub eax, 0x765c05cb
mov dword [ebp - 0x6ac], eax
je 0x4a5a70
jmp 0x4a5a6b
jmp 0x4a5c08
mov eax, 0x75ebcb57
mov ecx, 0x4fb3f277
mov edx, dword [ebp - 0x30]
cmp edx, 0
cmove eax, ecx
mov dword [ebp - 0x3c], eax
jmp 0x4a5c08
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 0x3c], 0xd7673c08
jmp 0x4a5c08
lea eax, [0x4fcccc]
mov ecx, dword [ebp - 0x38]
mov edx, dword [0x509ac8]
mov esi, dword [0x4fccc8]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
call fcn.004acb70
mov ecx, 0x4932575a
mov edx, 0x6c10ac31
cmp eax, 0
cmovl ecx, edx
mov dword [ebp - 0x3c], ecx
jmp 0x4a5c08
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 0x3c], 0xd7673c08
jmp 0x4a5c08
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x3c], 0xd7673c08
jmp 0x4a5c08
mov eax, 0x8b406704
mov ecx, 0xde81645e
mov dl, 1
mov esi, dword [0x50ae50]
mov edi, dword [0x50ae4c]
mov ebx, esi
sub ebx, 0x7b2862d4
sub ebx, 1
add ebx, 0x7b2862d4
imul esi, ebx
and esi, 1
cmp esi, 0
sete dh
cmp edi, 0xa
setl bl
mov bh, dh
xor bh, 1
mov dword [ebp - 0x6b0], eax
mov al, bl
xor al, 1
xor dl, 1
mov ah, bh
and ah, 1
and dh, dl
mov byte [ebp - 0x6b1], al
and al, 1
and bl, dl
or ah, dh
or al, bl
xor ah, al
mov al, byte [ebp - 0x6b1]
or bh, al
xor bh, 1
or dl, 1
and bh, dl
or ah, bh
test ah, 1
mov esi, dword [ebp - 0x6b0]
cmovne esi, ecx
mov dword [ebp - 0x3c], esi
jmp 0x4a5c08
mov eax, 0x8b406704
mov ecx, 0xe374ddf6
mov edx, dword [ebp - 0x34]
mov dword [ebp - 0x2c], edx
mov edx, dword [0x50ae50]
mov esi, dword [0x50ae4c]
mov edi, edx
sub edi, 0x7a72f9e7
sub edi, 1
add edi, 0x7a72f9e7
imul edx, edi
and edx, 1
cmp edx, 0
sete bl
cmp esi, 0xa
setl bh
mov dl, bl
and dl, bh
xor bl, bh
or dl, bl
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x3c], eax
jmp 0x4a5c08
mov dword [ebp - 0x3c], 0xde81645e
jmp 0x4a58c1
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x128], 0x1da08bed
mov dword [ebp - 0x6b8], eax
jmp 0x4a658a
mov dword [ebp - 0x128], 0xe3917a97
jmp 0x4a658a
mov dword [ebp - 0x128], 0xe0b9fad4
jmp 0x4a658a
mov eax, 0
mov ecx, dword [ebp - 0xe8]
mov ecx, dword [ecx + 4]
mov edx, dword [ebp - 0x124]
mov esi, eax
sub esi, edx
sub ecx, esi
mov dword [ebp - 0x11c], ecx
mov ecx, dword [ebp - 0x11c]
mov edx, dword [ebp - 0xfc]
mov esi, dword [ebp - 0x104]
sub edx, 0xd320bec3
add edx, esi
add edx, 0xd320bec3
mov esi, eax
sub esi, 4
sub edx, esi
sub ecx, 0x7fd1fcf2
sub ecx, edx
add ecx, 0x7fd1fcf2
mov edx, dword [ebp - 0xfc]
mov esi, dword [ebp - 0x104]
mov dword [edx + esi], ecx
mov ecx, dword [ebp - 0x104]
add ecx, 0xde833910
add ecx, 4
sub ecx, 0xde833910
mov dword [ebp - 0x104], ecx
mov ecx, dword [ebp - 0x110]
mov edx, eax
sub edx, ecx
mov ecx, eax
sub ecx, 1
add edx, ecx
sub eax, edx
mov dword [ebp - 0x110], eax
mov dword [ebp - 0x128], 0xc6915685
jmp 0x4a658a
mov eax, dword [ebp - 0x118]
mov ecx, dword [ebp - 0xdc]
mov ecx, dword [ecx + 0x23]
mov edx, dword [ebp - 0xec]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x50], edx
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x58], 0x66dda058
mov eax, dword [ebp - 0x58]
mov ecx, eax
sub ecx, 0x66dda057
mov dword [ebp - 0x6bc], eax
mov dword [ebp - 0x6c0], ecx
jg 0x4a6035
jmp 0x4a5d41
mov eax, dword [ebp - 0x6bc]
sub eax, 0x5b88152e
mov dword [ebp - 0x6c4], eax
jg 0x4a6019
jmp 0x4a5d5d
mov eax, dword [ebp - 0x6bc]
sub eax, 0xac61091d
mov dword [ebp - 0x6c8], eax
jg 0x4a5d95
jmp 0x4a5d79
mov eax, dword [ebp - 0x6bc]
sub eax, 0xa65d2bd9
mov dword [ebp - 0x6cc], eax
je 0x4a63ff
jmp 0x4a6051
mov eax, dword [ebp - 0x6bc]
sub eax, 0xc2faeb35
mov dword [ebp - 0x6d0], eax
jg 0x4a5dcd
jmp 0x4a5db1
mov eax, dword [ebp - 0x6bc]
sub eax, 0xac61091e
mov dword [ebp - 0x6d4], eax
je 0x4a6417
jmp 0x4a6051
mov eax, dword [ebp - 0x6bc]
sub eax, 0xea2fe4f5
mov dword [ebp - 0x6d8], eax
jg 0x4a5e05
jmp 0x4a5de9
mov eax, dword [ebp - 0x6bc]
sub eax, 0xc2faeb36
mov dword [ebp - 0x6dc], eax
je 0x4a6423
jmp 0x4a6051
mov eax, dword [ebp - 0x6bc]
sub eax, 0xf98aa79a
mov dword [ebp - 0x6e0], eax
jg 0x4a5e3d
jmp 0x4a5e21
mov eax, dword [ebp - 0x6bc]
sub eax, 0xea2fe4f6
mov dword [ebp - 0x6e4], eax
je 0x4a6298
jmp 0x4a6051
mov eax, dword [ebp - 0x6bc]
sub eax, 0xfadd62b2
mov dword [ebp - 0x6e8], eax
jg 0x4a5e75
jmp 0x4a5e59
mov eax, dword [ebp - 0x6bc]
sub eax, 0xf98aa79b
mov dword [ebp - 0x6ec], eax
je 0x4a62a4
jmp 0x4a6051
mov eax, dword [ebp - 0x6bc]
sub eax, 0xfec7fb37
mov dword [ebp - 0x6f0], eax
jg 0x4a5ead
jmp 0x4a5e91
mov eax, dword [ebp - 0x6bc]
sub eax, 0xfadd62b3
mov dword [ebp - 0x6f4], eax
je 0x4a6202
jmp 0x4a6051
mov eax, dword [ebp - 0x6bc]
sub eax, 0x3c19896
mov dword [ebp - 0x6f8], eax
jg 0x4a5ee5
jmp 0x4a5ec9
mov eax, dword [ebp - 0x6bc]
sub eax, 0xfec7fb38
mov dword [ebp - 0x6fc], eax
je 0x4a6177
jmp 0x4a6051
mov eax, dword [ebp - 0x6bc]
sub eax, 0x6579a7b
mov dword [ebp - 0x700], eax
jg 0x4a5f1d
jmp 0x4a5f01
mov eax, dword [ebp - 0x6bc]
sub eax, 0x3c19897
mov dword [ebp - 0x704], eax
je 0x4a6107
jmp 0x4a6051
mov eax, dword [ebp - 0x6bc]
sub eax, 0x1163c82e
mov dword [ebp - 0x708], eax
jg 0x4a5f55
jmp 0x4a5f39
mov eax, dword [ebp - 0x6bc]
sub eax, 0x6579a7c
mov dword [ebp - 0x70c], eax
je 0x4a62c2
jmp 0x4a6051
mov eax, dword [ebp - 0x6bc]
sub eax, 0x1d913e45
mov dword [ebp - 0x710], eax
jg 0x4a5f8d
jmp 0x4a5f71
mov eax, dword [ebp - 0x6bc]
sub eax, 0x1163c82f
mov dword [ebp - 0x714], eax
je 0x4a6358
jmp 0x4a6051
mov eax, dword [ebp - 0x6bc]
sub eax, 0x25f80676
mov dword [ebp - 0x718], eax
jg 0x4a5fc5
jmp 0x4a5fa9
mov eax, dword [ebp - 0x6bc]
sub eax, 0x1d913e46
mov dword [ebp - 0x71c], eax
je 0x4a6192
jmp 0x4a6051
mov eax, dword [ebp - 0x6bc]
sub eax, 0x25f80677
mov dword [ebp - 0x720], eax
je 0x4a640b
jmp 0x4a5fe1
mov eax, dword [ebp - 0x6bc]
sub eax, 0x478e58c2
mov dword [ebp - 0x724], eax
je 0x4a6436
jmp 0x4a5ffd
mov eax, dword [ebp - 0x6bc]
sub eax, 0x48179b09
mov dword [ebp - 0x728], eax
je 0x4a61ac
jmp 0x4a6051
mov eax, dword [ebp - 0x6bc]
sub eax, 0x5b88152f
mov dword [ebp - 0x72c], eax
je 0x4a6071
jmp 0x4a6051
mov eax, dword [ebp - 0x6bc]
sub eax, 0x66dda058
mov dword [ebp - 0x730], eax
je 0x4a6056
jmp 0x4a6051
jmp 0x4a6431
mov eax, 0x6579a7c
mov ecx, 0x5b88152f
mov edx, dword [ebp - 0x54]
cmp edx, dword [ebp - 0x4c]
cmovb eax, ecx
mov dword [ebp - 0x58], eax
jmp 0x4a6431
mov eax, 0x25f80677
mov ecx, 0x3c19897
mov dl, 1
mov esi, dword [0x50ae40]
mov edi, dword [0x50ae3c]
mov ebx, esi
sub ebx, 0x48dc1904
sub ebx, 1
add ebx, 0x48dc1904
imul esi, ebx
and esi, 1
cmp esi, 0
sete dh
cmp edi, 0xa
setl bl
mov bh, dh
xor bh, 1
mov dword [ebp - 0x734], eax
mov al, bl
xor al, 1
xor dl, 1
mov ah, bh
and ah, 1
and dh, dl
mov byte [ebp - 0x735], al
and al, 1
and bl, dl
or ah, dh
or al, bl
xor ah, al
mov al, byte [ebp - 0x735]
or bh, al
xor bh, 1
or dl, 1
and bh, dl
or ah, bh
test ah, 1
mov esi, dword [ebp - 0x734]
cmovne esi, ecx
mov dword [ebp - 0x58], esi
jmp 0x4a6431
mov eax, 0x25f80677
mov ecx, 0xfec7fb38
mov edx, dword [ebp - 0x54]
mov esi, dword [ebp - 0x50]
mov edx, dword [esi + edx*8]
cmp edx, dword [ebp - 0x48]
sete bl
and bl, 1
mov byte [ebp - 0x3d], bl
mov edx, dword [0x50ae40]
mov esi, dword [0x50ae3c]
mov edi, edx
add edi, 0xc9cc8dfe
sub edi, 1
sub edi, 0xc9cc8dfe
imul edx, edi
and edx, 1
cmp edx, 0
sete bl
cmp esi, 0xa
setl bh
mov dl, bl
and dl, bh
xor bl, bh
or dl, bl
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x58], eax
jmp 0x4a6431
mov eax, 0x48179b09
mov ecx, 0x1d913e46
mov dl, byte [ebp - 0x3d]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x58], eax
jmp 0x4a6431
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x50]
shl eax, 3
add ecx, eax
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x58], 0x478e58c2
jmp 0x4a6431
mov eax, 0xac61091e
mov ecx, 0xfadd62b3
mov edx, 0
mov esi, dword [0x50ae40]
mov edi, dword [0x50ae3c]
sub edx, 1
mov ebx, esi
add ebx, edx
imul esi, ebx
and esi, 1
cmp esi, 0
sete dl
cmp edi, 0xa
setl dh
mov bl, dl
and bl, dh
xor dl, dh
or bl, dl
test bl, 1
cmovne eax, ecx
mov dword [ebp - 0x58], eax
jmp 0x4a6431
mov eax, 0xac61091e
mov ecx, 0xea2fe4f6
mov dl, 1
mov esi, dword [0x50ae40]
mov edi, dword [0x50ae3c]
mov ebx, esi
add ebx, 0x5e415fca
sub ebx, 1
sub ebx, 0x5e415fca
imul esi, ebx
and esi, 1
cmp esi, 0
sete dh
cmp edi, 0xa
setl bl
mov bh, dh
xor bh, 1
mov dword [ebp - 0x73c], eax
mov al, bl
xor al, 1
xor dl, 0
mov ah, bh
and ah, 0
and dh, dl
mov byte [ebp - 0x73d], al
and al, 0
and bl, dl
or ah, dh
or al, bl
xor ah, al
mov al, byte [ebp - 0x73d]
or bh, al
xor bh, 1
or dl, 0
and bh, dl
or ah, bh
test ah, 1
mov esi, dword [ebp - 0x73c]
cmovne esi, ecx
mov dword [ebp - 0x58], esi
jmp 0x4a6431
mov dword [ebp - 0x58], 0xf98aa79b
jmp 0x4a6431
mov eax, 0
mov ecx, dword [ebp - 0x54]
sub eax, 1
sub ecx, eax
mov dword [ebp - 0x54], ecx
mov dword [ebp - 0x58], 0x66dda058
jmp 0x4a6431
mov eax, 0xc2faeb36
mov ecx, 0x1163c82f
mov dl, 1
mov esi, dword [0x50ae40]
mov edi, dword [0x50ae3c]
mov ebx, esi
add ebx, 0x60695dca
sub ebx, 1
sub ebx, 0x60695dca
imul esi, ebx
and esi, 1
cmp esi, 0
sete dh
cmp edi, 0xa
setl bl
mov bh, dh
xor bh, 1
mov dword [ebp - 0x744], eax
mov al, bl
xor al, 1
xor dl, 0
mov ah, bh
and ah, 0
and dh, dl
mov byte [ebp - 0x745], al
and al, 0
and bl, dl
or ah, dh
or al, bl
xor ah, al
mov al, byte [ebp - 0x745]
or bh, al
xor bh, 1
or dl, 0
and bh, dl
or ah, bh
test ah, 1
mov esi, dword [ebp - 0x744]
cmovne esi, ecx
mov dword [ebp - 0x58], esi
jmp 0x4a6431
mov eax, 0xc2faeb36
mov ecx, 0xa65d2bd9
mov dl, 1
mov esi, 0
mov dword [ebp - 0x44], 0
mov edi, dword [0x50ae40]
mov ebx, dword [0x50ae3c]
sub esi, 1
mov dword [ebp - 0x74c], eax
mov eax, edi
add eax, esi
imul edi, eax
and edi, 1
cmp edi, 0
sete dh
cmp ebx, 0xa
setl al
mov ah, dh
xor ah, 1
mov bl, al
xor bl, 1
xor dl, 0
mov bh, ah
and bh, 0
and dh, dl
mov byte [ebp - 0x74d], al
mov al, bl
and al, 0
mov byte [ebp - 0x74e], al
mov al, byte [ebp - 0x74d]
and al, dl
or bh, dh
mov dh, byte [ebp - 0x74e]
or dh, al
xor bh, dh
or ah, bl
xor ah, 1
or dl, 0
and ah, dl
or bh, ah
test bh, 1
mov esi, dword [ebp - 0x74c]
cmovne esi, ecx
mov dword [ebp - 0x58], esi
jmp 0x4a6431
mov dword [ebp - 0x58], 0x478e58c2
jmp 0x4a6431
mov dword [ebp - 0x58], 0x3c19897
jmp 0x4a6431
mov dword [ebp - 0x58], 0xfadd62b3
jmp 0x4a6431
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x58], 0x1163c82f
jmp 0x4a5d1f
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0x128], 0x14cb9bb5
jmp 0x4a658a
mov eax, 0
mov ecx, dword [ebp - 0x118]
mov edx, dword [ebp - 0x124]
mov esi, eax
sub esi, ecx
mov ecx, eax
sub ecx, edx
add esi, ecx
mov ecx, eax
sub ecx, esi
mov ecx, dword [ecx]
mov dword [ebp - 0x120], ecx
mov ecx, dword [ebp - 0x120]
mov edx, dword [ebp - 0xfc]
mov esi, dword [ebp - 0x104]
mov dword [edx + esi], ecx
mov ecx, dword [ebp - 0x104]
mov edx, eax
sub edx, ecx
mov ecx, eax
sub ecx, 4
add edx, ecx
mov ecx, eax
sub ecx, edx
mov dword [ebp - 0x104], ecx
mov ecx, dword [ebp - 0x114]
sub eax, 1
sub ecx, eax
mov dword [ebp - 0x114], ecx
mov dword [ebp - 0x128], 0x509313
jmp 0x4a658a
mov dword [ebp - 0x128], 0x2ac338d4
jmp 0x4a658a
mov eax, dword [ebp - 0x104]
mov ecx, dword [ebp - 0xf8]
movzx eax, byte [ecx + eax]
mov ecx, dword [ebp - 0x108]
mov edx, ecx
add edx, 0xfea5144
add edx, 1
sub edx, 0xfea5144
mov dword [ebp - 0x108], edx
mov edx, dword [ebp - 0xdc]
movzx ecx, byte [edx + ecx + 1]
mov edx, eax
xor edx, 0xffffffff
mov esi, ecx
and esi, edx
xor ecx, 0xffffffff
and eax, ecx
or esi, eax
mov eax, esi
mov bl, al
mov eax, dword [ebp - 0x104]
mov ecx, dword [ebp - 0xfc]
mov byte [ecx + eax], bl
mov dword [ebp - 0x128], 0xd9a796ff
jmp 0x4a658a
mov dword [ebp - 0x108], 0
mov dword [ebp - 0x128], 0x579bc318
jmp 0x4a658a
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0x128], 0x3b48fd09
jmp 0x4a658a
mov dword [ebp - 0x128], 0x88d3b817
jmp 0x4a149b