Function at 0x4a9d10
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x830
mov eax, 0
mov ecx, 0x20a
lea edx, [ebp - 0x662]
lea esi, [ebp - 0x458]
lea edi, [ebp - 0x24e]
mov ebx, 0x28
mov dword [ebp - 0x680], eax
lea eax, [ebp - 0x44]
mov dword [ebp - 0x1c], 0
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x28
mov dword [ebp - 0x684], ebx
mov dword [ebp - 0x688], ecx
mov dword [ebp - 0x68c], edx
mov dword [ebp - 0x690], esi
mov dword [ebp - 0x694], edi
call fcn.004d9580
mov eax, dword [ebp - 0x694]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.004d9580
mov eax, dword [ebp - 0x690]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.004d9580
mov eax, dword [ebp - 0x68c]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.004d9580
mov dword [ebp - 0x670], 0
call fcn.004a80c0
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x67c], 0xf2f0d194
mov eax, dword [ebp - 0x67c]
mov ecx, eax
sub ecx, 0x897001b3
mov dword [ebp - 0x698], eax
mov dword [ebp - 0x69c], ecx
jg 0x4a9e3a
jmp 0x4a9e1e
mov eax, dword [ebp - 0x698]
sub eax, 0x83a4b2cb
mov dword [ebp - 0x6a0], eax
je 0x4ab0af
jmp 0x4aa5fe
mov eax, dword [ebp - 0x698]
sub eax, 0x923f9a34
mov dword [ebp - 0x6a4], eax
jg 0x4a9e72
jmp 0x4a9e56
mov eax, dword [ebp - 0x698]
sub eax, 0x897001b4
mov dword [ebp - 0x6a8], eax
je 0x4ab004
jmp 0x4aa5fe
mov eax, dword [ebp - 0x698]
sub eax, 0x9822454c
mov dword [ebp - 0x6ac], eax
jg 0x4a9eaa
jmp 0x4a9e8e
mov eax, dword [ebp - 0x698]
sub eax, 0x923f9a35
mov dword [ebp - 0x6b0], eax
je 0x4aa765
jmp 0x4aa5fe
mov eax, dword [ebp - 0x698]
sub eax, 0x7eb1899e
mov dword [ebp - 0x6b4], eax
jg 0x4aa5e2
jmp 0x4a9ec6
mov eax, dword [ebp - 0x698]
sub eax, 0x9b8fa32d
mov dword [ebp - 0x6b8], eax
jg 0x4a9efe
jmp 0x4a9ee2
mov eax, dword [ebp - 0x698]
sub eax, 0x9822454d
mov dword [ebp - 0x6bc], eax
je 0x4aabe1
jmp 0x4aa5fe
mov eax, dword [ebp - 0x698]
sub eax, 0x9e9275da
mov dword [ebp - 0x6c0], eax
jg 0x4a9f36
jmp 0x4a9f1a
mov eax, dword [ebp - 0x698]
sub eax, 0x9b8fa32e
mov dword [ebp - 0x6c4], eax
je 0x4aafa6
jmp 0x4aa5fe
mov eax, dword [ebp - 0x698]
sub eax, 0x9f145045
mov dword [ebp - 0x6c8], eax
jg 0x4a9f6e
jmp 0x4a9f52
mov eax, dword [ebp - 0x698]
sub eax, 0x9e9275db
mov dword [ebp - 0x6cc], eax
je 0x4aab26
jmp 0x4aa5fe
mov eax, dword [ebp - 0x698]
sub eax, 0xa399550b
mov dword [ebp - 0x6d0], eax
jg 0x4a9fa6
jmp 0x4a9f8a
mov eax, dword [ebp - 0x698]
sub eax, 0x9f145046
mov dword [ebp - 0x6d4], eax
je 0x4aa6bd
jmp 0x4aa5fe
mov eax, dword [ebp - 0x698]
sub eax, 0xb42b2768
mov dword [ebp - 0x6d8], eax
jg 0x4a9fde
jmp 0x4a9fc2
mov eax, dword [ebp - 0x698]
sub eax, 0xa399550c
mov dword [ebp - 0x6dc], eax
je 0x4aa953
jmp 0x4aa5fe
mov eax, dword [ebp - 0x698]
sub eax, 0xd60e5db8
mov dword [ebp - 0x6e0], eax
jg 0x4aa016
jmp 0x4a9ffa
mov eax, dword [ebp - 0x698]
sub eax, 0xb42b2769
mov dword [ebp - 0x6e4], eax
je 0x4aacb3
jmp 0x4aa5fe
mov eax, dword [ebp - 0x698]
sub eax, 0xd88bb612
mov dword [ebp - 0x6e8], eax
jg 0x4aa04e
jmp 0x4aa032
mov eax, dword [ebp - 0x698]
sub eax, 0xd60e5db9
mov dword [ebp - 0x6ec], eax
je 0x4ab0af
jmp 0x4aa5fe
mov eax, dword [ebp - 0x698]
sub eax, 0xe21f8cb6
mov dword [ebp - 0x6f0], eax
jg 0x4aa086
jmp 0x4aa06a
mov eax, dword [ebp - 0x698]
sub eax, 0xd88bb613
mov dword [ebp - 0x6f4], eax
je 0x4aaede
jmp 0x4aa5fe
mov eax, dword [ebp - 0x698]
sub eax, 0xec45dc20
mov dword [ebp - 0x6f8], eax
jg 0x4aa0be
jmp 0x4aa0a2
mov eax, dword [ebp - 0x698]
sub eax, 0xe21f8cb7
mov dword [ebp - 0x6fc], eax
je 0x4ab263
jmp 0x4aa5fe
mov eax, dword [ebp - 0x698]
sub eax, 0x7a1e15e9
mov dword [ebp - 0x700], eax
jg 0x4aa5c6
jmp 0x4aa0da
mov eax, dword [ebp - 0x698]
sub eax, 0x7a034638
mov dword [ebp - 0x704], eax
jg 0x4aa5aa
jmp 0x4aa0f6
mov eax, dword [ebp - 0x698]
sub eax, 0x6ca77714
mov dword [ebp - 0x708], eax
jg 0x4aa58e
jmp 0x4aa112
mov eax, dword [ebp - 0x698]
sub eax, 0x6c35a5cf
mov dword [ebp - 0x70c], eax
jg 0x4aa572
jmp 0x4aa12e
mov eax, dword [ebp - 0x698]
sub eax, 0x687e7683
mov dword [ebp - 0x710], eax
jg 0x4aa556
jmp 0x4aa14a
mov eax, dword [ebp - 0x698]
sub eax, 0x62dab2a7
mov dword [ebp - 0x714], eax
jg 0x4aa53a
jmp 0x4aa166
mov eax, dword [ebp - 0x698]
sub eax, 0x5f43d894
mov dword [ebp - 0x718], eax
jg 0x4aa51e
jmp 0x4aa182
mov eax, dword [ebp - 0x698]
sub eax, 0x5ee0e0ee
mov dword [ebp - 0x71c], eax
jg 0x4aa502
jmp 0x4aa19e
mov eax, dword [ebp - 0x698]
sub eax, 0x4ede58f0
mov dword [ebp - 0x720], eax
jg 0x4aa4e6
jmp 0x4aa1ba
mov eax, dword [ebp - 0x698]
sub eax, 0x4e84cdaa
mov dword [ebp - 0x724], eax
jg 0x4aa4ca
jmp 0x4aa1d6
mov eax, dword [ebp - 0x698]
sub eax, 0x4547790c
mov dword [ebp - 0x728], eax
jg 0x4aa4ae
jmp 0x4aa1f2
mov eax, dword [ebp - 0x698]
sub eax, 0x439b1185
mov dword [ebp - 0x72c], eax
jg 0x4aa492
jmp 0x4aa20e
mov eax, dword [ebp - 0x698]
sub eax, 0x3f8039f0
mov dword [ebp - 0x730], eax
jg 0x4aa476
jmp 0x4aa22a
mov eax, dword [ebp - 0x698]
sub eax, 0x37706796
mov dword [ebp - 0x734], eax
jg 0x4aa45a
jmp 0x4aa246
mov eax, dword [ebp - 0x698]
sub eax, 0x257d61e2
mov dword [ebp - 0x738], eax
jg 0x4aa43e
jmp 0x4aa262
mov eax, dword [ebp - 0x698]
sub eax, 0x1ba5a469
mov dword [ebp - 0x73c], eax
jg 0x4aa422
jmp 0x4aa27e
mov eax, dword [ebp - 0x698]
sub eax, 0x1a21279d
mov dword [ebp - 0x740], eax
jg 0x4aa406
jmp 0x4aa29a
mov eax, dword [ebp - 0x698]
sub eax, 0x1a0ac121
mov dword [ebp - 0x744], eax
jg 0x4aa3ea
jmp 0x4aa2b6
mov eax, dword [ebp - 0x698]
sub eax, 0xef2ac95
mov dword [ebp - 0x748], eax
jg 0x4aa3ce
jmp 0x4aa2d2
mov eax, dword [ebp - 0x698]
sub eax, 0xffc29c64
mov dword [ebp - 0x74c], eax
jg 0x4aa3b2
jmp 0x4aa2ee
mov eax, dword [ebp - 0x698]
sub eax, 0xfe07ba74
mov dword [ebp - 0x750], eax
jg 0x4aa396
jmp 0x4aa30a
mov eax, dword [ebp - 0x698]
sub eax, 0xf3ea0561
mov dword [ebp - 0x754], eax
jg 0x4aa37a
jmp 0x4aa326
mov eax, dword [ebp - 0x698]
sub eax, 0xec45dc21
mov dword [ebp - 0x758], eax
je 0x4aa8f4
jmp 0x4aa342
mov eax, dword [ebp - 0x698]
sub eax, 0xec4aa840
mov dword [ebp - 0x75c], eax
je 0x4aa756
jmp 0x4aa35e
mov eax, dword [ebp - 0x698]
sub eax, 0xf2f0d194
mov dword [ebp - 0x760], eax
je 0x4aa603
jmp 0x4aa5fe
mov eax, dword [ebp - 0x698]
sub eax, 0xf3ea0562
mov dword [ebp - 0x764], eax
je 0x4ab0cc
jmp 0x4aa5fe
mov eax, dword [ebp - 0x698]
sub eax, 0xfe07ba75
mov dword [ebp - 0x768], eax
je 0x4ab288
jmp 0x4aa5fe
mov eax, dword [ebp - 0x698]
sub eax, 0xffc29c65
mov dword [ebp - 0x76c], eax
je 0x4ab1aa
jmp 0x4aa5fe
mov eax, dword [ebp - 0x698]
sub eax, 0xef2ac96
mov dword [ebp - 0x770], eax
je 0x4aa928
jmp 0x4aa5fe
mov eax, dword [ebp - 0x698]
sub eax, 0x1a0ac122
mov dword [ebp - 0x774], eax
je 0x4aae80
jmp 0x4aa5fe
mov eax, dword [ebp - 0x698]
sub eax, 0x1a21279e
mov dword [ebp - 0x778], eax
je 0x4ab23d
jmp 0x4aa5fe
mov eax, dword [ebp - 0x698]
sub eax, 0x1ba5a46a
mov dword [ebp - 0x77c], eax
je 0x4aa912
jmp 0x4aa5fe
mov eax, dword [ebp - 0x698]
sub eax, 0x257d61e3
mov dword [ebp - 0x780], eax
je 0x4aac3f
jmp 0x4aa5fe
mov eax, dword [ebp - 0x698]
sub eax, 0x37706797
mov dword [ebp - 0x784], eax
je 0x4ab0bd
jmp 0x4aa5fe
mov eax, dword [ebp - 0x698]
sub eax, 0x3f8039f1
mov dword [ebp - 0x788], eax
je 0x4ab279
jmp 0x4aa5fe
mov eax, dword [ebp - 0x698]
sub eax, 0x439b1186
mov dword [ebp - 0x78c], eax
je 0x4aad0c
jmp 0x4aa5fe
mov eax, dword [ebp - 0x698]
sub eax, 0x4547790d
mov dword [ebp - 0x790], eax
je 0x4aa9f6
jmp 0x4aa5fe
mov eax, dword [ebp - 0x698]
sub eax, 0x4e84cdab
mov dword [ebp - 0x794], eax
je 0x4aa7c3
jmp 0x4aa5fe
mov eax, dword [ebp - 0x698]
sub eax, 0x4ede58f1
mov dword [ebp - 0x798], eax
je 0x4aab02
jmp 0x4aa5fe
mov eax, dword [ebp - 0x698]
sub eax, 0x5ee0e0ef
mov dword [ebp - 0x79c], eax
je 0x4aaae4
jmp 0x4aa5fe
mov eax, dword [ebp - 0x698]
sub eax, 0x5f43d895
mov dword [ebp - 0x7a0], eax
je 0x4aae5e
jmp 0x4aa5fe
mov eax, dword [ebp - 0x698]
sub eax, 0x62dab2a8
mov dword [ebp - 0x7a4], eax
je 0x4aaf90
jmp 0x4aa5fe
mov eax, dword [ebp - 0x698]
sub eax, 0x687e7684
mov dword [ebp - 0x7a8], eax
je 0x4aacc2
jmp 0x4aa5fe
mov eax, dword [ebp - 0x698]
sub eax, 0x6c35a5d0
mov dword [ebp - 0x7ac], eax
je 0x4aae4f
jmp 0x4aa5fe
mov eax, dword [ebp - 0x698]
sub eax, 0x6ca77715
mov dword [ebp - 0x7b0], eax
je 0x4aab97
jmp 0x4aa5fe
mov eax, dword [ebp - 0x698]
sub eax, 0x7a034639
mov dword [ebp - 0x7b4], eax
je 0x4aada5
jmp 0x4aa5fe
mov eax, dword [ebp - 0x698]
sub eax, 0x7a1e15ea
mov dword [ebp - 0x7b8], eax
je 0x4aaf81
jmp 0x4aa5fe
mov eax, dword [ebp - 0x698]
sub eax, 0x7eb1899f
mov dword [ebp - 0x7bc], eax
je 0x4aa624
jmp 0x4aa5fe
jmp 0x4ab2a4
mov eax, 0x923f9a35
mov ecx, 0x7eb1899f
mov edx, dword [ebp - 0x14]
cmp edx, 0
cmovl eax, ecx
mov dword [ebp - 0x67c], eax
jmp 0x4ab2a4
mov eax, 0x37706797
mov ecx, 0x9f145046
mov dl, 1
mov esi, dword [0x4fc520]
mov edi, dword [0x4fc51c]
mov ebx, esi
sub ebx, 0xcbbe35c4
sub ebx, 1
add ebx, 0xcbbe35c4
imul esi, ebx
and esi, 1
cmp esi, 0
sete dh
cmp edi, 0xa
setl bl
mov bh, dh
xor bh, 1
mov dword [ebp - 0x7c0], eax
mov al, bl
xor al, 1
xor dl, 1
mov ah, bh
and ah, 1
and dh, dl
mov byte [ebp - 0x7c1], al
and al, 1
and bl, dl
or ah, dh
or al, bl
xor ah, al
mov al, byte [ebp - 0x7c1]
or bh, al
xor bh, 1
or dl, 1
and bh, dl
or ah, bh
test ah, 1
mov esi, dword [ebp - 0x7c0]
cmovne esi, ecx
mov dword [ebp - 0x67c], esi
jmp 0x4ab2a4
mov eax, 0x37706797
mov ecx, 0xec4aa840
mov dl, 1
mov esi, dword [0x4fc520]
mov edi, dword [0x4fc51c]
mov ebx, esi
sub ebx, 0x67f2a289
sub ebx, 1
add ebx, 0x67f2a289
imul esi, ebx
and esi, 1
cmp esi, 0
sete dh
cmp edi, 0xa
setl bl
mov bh, dh
xor bh, 1
mov dword [ebp - 0x7c8], eax
mov al, bl
xor al, 1
xor dl, 0
mov ah, bh
and ah, 0
and dh, dl
mov byte [ebp - 0x7c9], al
and al, 0
and bl, dl
or ah, dh
or al, bl
xor ah, al
mov al, byte [ebp - 0x7c9]
or bh, al
xor bh, 1
or dl, 0
and bh, dl
or ah, bh
test ah, 1
mov esi, dword [ebp - 0x7c8]
cmovne esi, ecx
mov dword [ebp - 0x67c], esi
jmp 0x4ab2a4
mov dword [ebp - 0x67c], 0x9b8fa32e
jmp 0x4ab2a4
mov eax, 0xf3ea0562
mov ecx, 0x4e84cdab
mov edx, dword [0x4fc520]
mov esi, dword [0x4fc51c]
mov edi, edx
sub edi, 0x2fe452f3
sub edi, 1
add edi, 0x2fe452f3
imul edx, edi
and edx, 1
cmp edx, 0
sete bl
cmp esi, 0xa
setl bh
mov dl, bl
and dl, bh
xor bl, bh
or dl, bl
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x67c], eax
jmp 0x4ab2a4
mov eax, 0x104
lea ecx, [ebp - 0x24e]
mov dword [esp], ecx
mov dword [esp + 4], 0x104
mov dword [ebp - 0x7d0], eax
call fcn.0040c820
mov dword [ebp - 0x668], eax
mov eax, dword [0x4fc4b8]
call eax
lea ecx, [ebp - 0x44]
mov edx, 0
mov dword [0x4faeec], eax
mov eax, dword [0x4ee7a4]
movzx eax, word [eax]
mov dword [ebp - 0x674], eax
mov eax, dword [ebp - 0x674]
mov esi, edx
sub esi, eax
mov eax, edx
sub eax, 1
add esi, eax
sub edx, esi
mov eax, dword [0x4ee7a4]
movzx eax, word [eax + edx*2]
mov dword [ebp - 0x678], eax
mov eax, dword [ebp - 0x678]
mov edx, dword [0x4ee7a4]
mov esi, dword [ebp - 0x674]
shl esi, 1
add edx, esi
add edx, 4
mov esi, dword [0x4ee7a4]
add esi, 2
mov edi, dword [ebp - 0x674]
mov dword [esp], ecx
mov dword [esp + 4], edi
mov dword [esp + 8], esi
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], eax
call fcn.0040a7e0
lea eax, [ebp - 0x44]
mov ecx, dword [0x4faeec]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00411a70
mov ecx, 0xf3ea0562
mov edx, 0xec45dc21
cmp eax, 0
setne bl
and bl, 1
mov byte [ebp - 0xe], bl
mov eax, dword [0x4fc520]
mov esi, dword [0x4fc51c]
mov edi, eax
add edi, 0x97bc9c2b
sub edi, 1
sub edi, 0x97bc9c2b
imul eax, edi
and eax, 1
cmp eax, 0
sete bl
cmp esi, 0xa
setl bh
mov al, bl
and al, bh
xor bl, bh
or al, bl
test al, 1
cmovne ecx, edx
mov dword [ebp - 0x67c], ecx
jmp 0x4ab2a4
mov eax, 0xef2ac96
mov ecx, 0x1ba5a46a
mov dl, byte [ebp - 0xe]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x67c], eax
jmp 0x4ab2a4
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x67c], 0xd60e5db9
jmp 0x4ab2a4
lea eax, [ebp - 0x670]
mov dword [esp], eax
call fcn.004a6230
mov ecx, 0x5f43d895
mov edx, 0xa399550c
cmp eax, 0
cmovne ecx, edx
mov dword [ebp - 0x67c], ecx
jmp 0x4ab2a4
mov eax, 0xffc29c65
mov ecx, 0x4547790d
mov dl, 1
mov esi, 0
mov edi, dword [0x4fc520]
mov ebx, dword [0x4fc51c]
sub esi, 1
mov dword [ebp - 0x7d4], eax
mov eax, edi
add eax, esi
imul edi, eax
and edi, 1
cmp edi, 0
sete dh
cmp ebx, 0xa
setl al
mov ah, dh
xor ah, 1
mov bl, al
xor bl, 1
xor dl, 0
mov bh, ah
and bh, 0
and dh, dl
mov byte [ebp - 0x7d5], al
mov al, bl
and al, 0
mov byte [ebp - 0x7d6], al
mov al, byte [ebp - 0x7d5]
and al, dl
or bh, dh
mov dh, byte [ebp - 0x7d6]
or dh, al
xor bh, dh
or ah, bl
xor ah, 1
or dl, 0
and ah, dl
or bh, ah
test bh, 1
mov esi, dword [ebp - 0x7d4]
cmovne esi, ecx
mov dword [ebp - 0x67c], esi
jmp 0x4ab2a4
mov eax, 0x104
lea ecx, [ebp - 0x458]
lea edx, [ebp - 0x24e]
mov esi, dword [ebp - 0x668]
mov dword [esp], ecx
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [ebp - 0x7dc], eax
call fcn.0040d160
lea ecx, [ebp - 0x458]
mov dword [ebp - 0x66c], eax
mov eax, dword [ebp - 0x66c]
sub eax, 0x7ff64f6e
sub eax, 4
add eax, 0x7ff64f6e
shl eax, 1
mov edx, ecx
add edx, eax
mov word [edx], 0
mov eax, dword [0x4fc4b4]
mov edx, esp
mov dword [edx + 8], 0
mov dword [edx + 0xc], ecx
mov dword [edx + 4], 0
mov dword [edx], 0
call eax
sub esp, 0x10
mov ecx, 0xffc29c65
mov edx, 0x5ee0e0ef
mov esi, 0
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
setne bl
and bl, 1
mov byte [ebp - 0xd], bl
mov eax, dword [0x4fc520]
mov edi, dword [0x4fc51c]
sub esi, 1
mov ebx, eax
add ebx, esi
imul eax, ebx
and eax, 1
cmp eax, 0
sete al
cmp edi, 0xa
setl ah
mov bl, al
and bl, ah
xor al, ah
or bl, al
test bl, 1
cmovne ecx, edx
mov dword [ebp - 0x67c], ecx
jmp 0x4ab2a4
mov eax, 0x687e7684
mov ecx, 0x4ede58f1
mov dl, byte [ebp - 0xd]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x67c], eax
jmp 0x4ab2a4
mov eax, dword [sym.imp.KERNEL32.dll_GetLastError]
call eax
mov ecx, 0x6ca77715
mov edx, 0x9e9275db
cmp eax, 0xb7
cmove ecx, edx
mov dword [ebp - 0x67c], ecx
jmp 0x4ab2a4
lea eax, [ebp - 0x458]
mov dword [esp], eax
call fcn.0040dcf0
mov ecx, 0x104
lea edx, [ebp - 0x662]
lea esi, [ebp - 0x458]
mov dword [esp], edx
mov dword [esp + 4], 0x104
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [ebp - 0x7e0], ecx
call fcn.004112c0
lea eax, [ebp - 0x662]
mov dword [esp], eax
call fcn.004a8820
mov eax, dword [0x4fc4c4]
mov ecx, dword [ebp - 0x1c]
mov edx, esp
mov dword [edx], ecx
call eax
sub esp, 4
mov dword [ebp - 0x67c], 0x9822454d
mov dword [ebp - 0x7e4], eax
jmp 0x4ab2a4
lea eax, [0x4faef0]
mov ecx, 0x104
lea edx, [ebp - 0x24e]
mov esi, dword [ebp - 0x668]
mov dword [esp], eax
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [ebp - 0x7e8], ecx
call fcn.0040cc10
mov dword [ebp - 0x67c], 0x9822454d
mov dword [ebp - 0x7ec], eax
jmp 0x4ab2a4
mov eax, 0x1a21279e
mov ecx, 0x257d61e3
mov edx, dword [0x4fc520]
mov esi, dword [0x4fc51c]
mov edi, edx
add edi, 0x19419903
sub edi, 1
sub edi, 0x19419903
imul edx, edi
and edx, 1
cmp edx, 0
sete bl
cmp esi, 0xa
setl bh
mov dl, bl
and dl, bh
xor bl, bh
or dl, bl
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x67c], eax
jmp 0x4ab2a4
mov eax, dword [ebp - 0x1c]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
sub esp, 4
mov ecx, 0x1a21279e
mov edx, 0xb42b2769
mov esi, dword [0x4fc520]
mov edi, dword [0x4fc51c]
mov ebx, esi
add ebx, 0xad129e8b
sub ebx, 1
sub ebx, 0xad129e8b
imul esi, ebx
and esi, 1
cmp esi, 0
sete bl
cmp edi, 0xa
setl bh
mov dword [ebp - 0x7f0], eax
mov al, bl
and al, bh
xor bl, bh
or al, bl
test al, 1
cmovne ecx, edx
mov dword [ebp - 0x67c], ecx
jmp 0x4ab2a4
mov dword [ebp - 0x67c], 0x439b1186
jmp 0x4ab2a4
lea eax, [0x4faef0]
mov ecx, 0x104
lea edx, [ebp - 0x24e]
mov esi, dword [ebp - 0x668]
mov dword [esp], eax
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [ebp - 0x7f4], ecx
call fcn.0040cc10
mov dword [ebp - 0x67c], 0x439b1186
mov dword [ebp - 0x7f8], eax
jmp 0x4ab2a4
mov eax, 0xe21f8cb7
mov ecx, 0x7a034639
mov dl, 1
mov esi, dword [0x4fc520]
mov edi, dword [0x4fc51c]
mov ebx, esi
sub ebx, 0x2952e83f
sub ebx, 1
add ebx, 0x2952e83f
imul esi, ebx
and esi, 1
cmp esi, 0
sete dh
cmp edi, 0xa
setl bl
mov bh, dh
xor bh, 1
mov dword [ebp - 0x7fc], eax
mov al, bl
xor al, 1
xor dl, 0
mov ah, bh
and ah, 0
and dh, dl
mov byte [ebp - 0x7fd], al
and al, 0
and bl, dl
or ah, dh
or al, bl
xor ah, al
mov al, byte [ebp - 0x7fd]
or bh, al
xor bh, 1
or dl, 0
and bh, dl
or ah, bh
test ah, 1
mov esi, dword [ebp - 0x7fc]
cmovne esi, ecx
mov dword [ebp - 0x67c], esi
jmp 0x4ab2a4
mov eax, 0xe21f8cb7
mov ecx, 0x6c35a5d0
mov dl, 1
mov esi, 0
mov dword [ebp - 0x18], 0xffffffff
mov edi, dword [0x4fc520]
mov ebx, dword [0x4fc51c]
sub esi, 1
mov dword [ebp - 0x804], eax
mov eax, edi
add eax, esi
imul edi, eax
and edi, 1
cmp edi, 0
sete dh
cmp ebx, 0xa
setl al
mov ah, dh
xor ah, 1
mov bl, al
xor bl, 1
xor dl, 1
mov bh, ah
and bh, 1
and dh, dl
mov byte [ebp - 0x805], al
mov al, bl
and al, 1
mov byte [ebp - 0x806], al
mov al, byte [ebp - 0x805]
and al, dl
or bh, dh
mov dh, byte [ebp - 0x806]
or dh, al
xor bh, dh
or ah, bl
xor ah, 1
or dl, 1
and ah, dl
or bh, ah
test bh, 1
mov esi, dword [ebp - 0x804]
cmovne esi, ecx
mov dword [ebp - 0x67c], esi
jmp 0x4ab2a4
mov dword [ebp - 0x67c], 0xd60e5db9
jmp 0x4ab2a4
mov eax, 0x62dab2a8
mov ecx, 0x1a0ac122
cmp dword [ebp - 0x670], 6
cmovb eax, ecx
mov dword [ebp - 0x67c], eax
jmp 0x4ab2a4
mov eax, 0x3f8039f1
mov ecx, 0xd88bb613
mov edx, dword [0x4fc520]
mov esi, dword [0x4fc51c]
mov edi, edx
sub edi, 0x88b1fbca
sub edi, 1
add edi, 0x88b1fbca
imul edx, edi
and edx, 1
cmp edx, 0
sete bl
cmp esi, 0xa
setl bh
mov dl, bl
and dl, bh
xor bl, bh
or dl, bl
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x67c], eax
jmp 0x4ab2a4
mov eax, 0x3f8039f1
mov ecx, 0x7a1e15ea
mov dl, 1
mov esi, 0
mov edi, dword [0x4fc520]
mov ebx, dword [0x4fc51c]
sub esi, 1
mov dword [ebp - 0x80c], eax
mov eax, edi
add eax, esi
imul edi, eax
and edi, 1
cmp edi, 0
sete dh
cmp ebx, 0xa
setl al
mov ah, dh
xor ah, 1
mov bl, al
xor bl, 1
xor dl, 1
mov bh, ah
and bh, 1
and dh, dl
mov byte [ebp - 0x80d], al
mov al, bl
and al, 1
mov byte [ebp - 0x80e], al
mov al, byte [ebp - 0x80d]
and al, dl
or bh, dh
mov dh, byte [ebp - 0x80e]
or dh, al
xor bh, dh
or ah, bl
xor ah, 1
or dl, 1
and ah, dl
or bh, ah
test bh, 1
mov esi, dword [ebp - 0x80c]
cmovne esi, ecx
mov dword [ebp - 0x67c], esi
jmp 0x4ab2a4
mov dword [ebp - 0x67c], 0x9b8fa32e
jmp 0x4ab2a4
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x67c], 0xd60e5db9
jmp 0x4ab2a4
mov eax, 0xfe07ba75
mov ecx, 0x897001b4
mov edx, dword [0x4fc520]
mov esi, dword [0x4fc51c]
mov edi, edx
sub edi, 0xb2a9d82d
sub edi, 1
add edi, 0xb2a9d82d
imul edx, edi
and edx, 1
cmp edx, 0
sete bl
cmp esi, 0xa
setl bh
mov dl, bl
and dl, bh
xor bl, bh
or dl, bl
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x67c], eax
jmp 0x4ab2a4
mov eax, esp
mov dword [eax], 0
mov eax, dword [sym.imp.KERNEL32.dll_ExitProcess]
call eax
sub esp, 4
mov eax, 0xfe07ba75
mov ecx, 0x83a4b2cb
mov dl, 1
mov esi, dword [0x4fc520]
mov edi, dword [0x4fc51c]
mov ebx, esi
add ebx, 0x169f139
sub ebx, 1
sub ebx, 0x169f139
imul esi, ebx
and esi, 1
cmp esi, 0
sete dh
cmp edi, 0xa
setl bl
mov bh, dh
xor bh, 1
mov dword [ebp - 0x814], eax
mov al, bl
xor al, 1
xor dl, 1
mov ah, bh
and ah, 1
and dh, dl
mov byte [ebp - 0x815], al
and al, 1
and bl, dl
or ah, dh
or al, bl
xor ah, al
mov al, byte [ebp - 0x815]
or bh, al
xor bh, 1
or dl, 1
and bh, dl
or ah, bh
test ah, 1
mov esi, dword [ebp - 0x814]
cmovne esi, ecx
mov dword [ebp - 0x67c], esi
jmp 0x4ab2a4
mov eax, dword [ebp - 0x18]
add esp, 0x830
pop esi
pop edi
pop ebx
pop ebp
ret
mov dword [ebp - 0x67c], 0x9f145046
jmp 0x4ab2a4
mov eax, 0x104
lea ecx, [ebp - 0x24e]
mov dword [esp], ecx
mov dword [esp + 4], 0x104
mov dword [ebp - 0x81c], eax
call fcn.0040c820
mov dword [ebp - 0x668], eax
mov eax, dword [0x4fc4b8]
call eax
lea ecx, [ebp - 0x44]
mov edx, 0
mov dword [0x4faeec], eax
mov eax, dword [0x4ee7a4]
movzx eax, word [eax]
mov dword [ebp - 0x674], eax
mov eax, dword [ebp - 0x674]
mov esi, edx
sub esi, eax
mov eax, edx
sub eax, 1
add esi, eax
sub edx, esi
mov eax, dword [0x4ee7a4]
movzx eax, word [eax + edx*2]
mov dword [ebp - 0x678], eax
mov eax, dword [ebp - 0x678]
mov edx, dword [0x4ee7a4]
mov esi, dword [ebp - 0x674]
shl esi, 1
add edx, esi
add edx, 4
mov esi, dword [0x4ee7a4]
add esi, 2
mov edi, dword [ebp - 0x674]
mov dword [esp], ecx
mov dword [esp + 4], edi
mov dword [esp + 8], esi
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], eax
call fcn.0040a7e0
lea eax, [ebp - 0x44]
mov ecx, dword [0x4faeec]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00411a70
mov dword [ebp - 0x67c], 0x4e84cdab
mov dword [ebp - 0x820], eax
jmp 0x4ab2a4
mov eax, 0x104
lea ecx, [ebp - 0x458]
lea edx, [ebp - 0x24e]
mov esi, dword [ebp - 0x668]
mov dword [esp], ecx
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [ebp - 0x824], eax
call fcn.0040d160
lea ecx, [ebp - 0x458]
mov edx, 0
mov dword [ebp - 0x66c], eax
mov eax, dword [ebp - 0x66c]
sub edx, 4
add eax, edx
mov word [ebp + eax*2 - 0x458], 0
mov eax, dword [0x4fc4b4]
mov edx, esp
mov dword [edx + 8], 0
mov dword [edx + 0xc], ecx
mov dword [edx + 4], 0
mov dword [edx], 0
call eax
sub esp, 0x10
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x67c], 0x4547790d
jmp 0x4ab2a4
mov eax, dword [ebp - 0x1c]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
sub esp, 4
mov dword [ebp - 0x67c], 0x257d61e3
mov dword [ebp - 0x828], eax
jmp 0x4ab2a4
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x67c], 0x7a034639
jmp 0x4ab2a4
mov dword [ebp - 0x67c], 0xd88bb613
jmp 0x4ab2a4
mov eax, esp
mov dword [eax], 0
mov eax, dword [sym.imp.KERNEL32.dll_ExitProcess]
call eax
sub esp, 4
mov dword [ebp - 0x67c], 0x897001b4
jmp 0x4a9df9