Function at 0x4a8e30
Capabilities:
Accept command line arguments
Get common file path
Inspect section memory permissions
Parse pe header
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4d8c60
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x610
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 8]
test eax, eax
je 0x4a8eaf
mov ecx, dword [ebp + 0x14]
mov dword [ebp - 0x454], ecx
mov edx, dword [ebp + 0x10]
mov dword [ebp - 0x3a0], edx
push 0x294f
push 0x24cd
push 0x44a1
mov eax, dword [ebp - 0x454]
push eax
push 0x1fb1
mov ecx, dword [ebp - 0x3a0]
push ecx
push 0x450a
push 0x3ead
push 1
push 0x68f9
call fcn.004ac240
add esp, 0x28
jmp 0x4ac223
lea edx, [ebp + 0x18]
mov dword [ebp - 0x480], edx
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x488], eax
lea ecx, [ebp + 0x1c]
mov dword [ebp - 0x49c], ecx
mov edx, dword [ebp + 0x20]
mov dword [ebp - 0x470], edx
mov eax, dword [ebp - 0x480]
movzx ecx, byte [eax]
test ecx, ecx
je 0x4a98fd
mov edx, dword [ebp - 0x488]
mov dword [ebp - 0x394], edx
mov eax, dword [ebp - 0x49c]
mov dword [ebp - 0x3c4], eax
mov dword [ebp - 0x9c], 0xdb3ae355
mov dword [ebp - 0x498], 0x513c61c7
mov dword [ebp - 0x57c], 1
mov dword [ebp - 0x11c], 0
jmp 0x4a8f35
mov ecx, dword [ebp - 0x11c]
add ecx, 1
mov dword [ebp - 0x11c], ecx
cmp dword [ebp - 0x11c], 2
jge 0x4a8f51
mov edx, dword [ebp - 0x11c]
mov dword [ebp + edx*4 - 0x540], 0x9ce
jmp 0x4a8f26
mov dword [ebp - 0x9c], 2
jmp 0x4a8f6c
mov eax, dword [ebp - 0x9c]
sub eax, 1
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0xffffffe5
jge 0x4a9025
mov byte [ebp - 0x4c], 0
push 1
push 0x3383
push 1
push 0x6529
push 0
push 0x4a1b
lea ecx, [ebp - 0x4c]
push ecx
push 0xa67
call fcn.004a59b0
add esp, 0x20
mov edx, 4
shl edx, 0
cmp dword [ebp + edx - 0x540], 0xd3f7bf3
jge 0x4a8fc4
mov dword [ebp - 0x224], 1
jmp 0x4a8fce
mov dword [ebp - 0x224], 0
mov eax, dword [ebp - 0x9c]
cmp eax, dword [ebp - 0x224]
jle 0x4a8fe8
mov dword [ebp - 0x374], 1
jmp 0x4a8ff2
mov dword [ebp - 0x374], 0
cmp dword [ebp - 0x374], 0xffff
jae 0x4a900a
mov dword [ebp - 0x37c], 1
jmp 0x4a9014
mov dword [ebp - 0x37c], 0
mov ecx, dword [ebp - 0x37c]
mov dword [ebp - 0x498], ecx
jmp 0x4a8f5d
mov edx, dword [ebp - 0x394]
mov eax, dword [edx + 4]
mov dword [ebp - 0x360], eax
mov dword [ebp - 0x51c], 0x6240
mov byte [ebp - 0x4a], 0
push 0x1a16
push 1
push 1
push 1
push 0x5b83
lea ecx, [ebp - 0x4a]
push ecx
call fcn.004a46a0
add esp, 0x18
push 0x58e0
push 1
push 0x1dd1
push 0x58f
push 0x5453
push 0x5cf
push 0x445e
push 0x3c57
push 1
push 0x7555
call fcn.004a48e0
add esp, 0x28
mov edx, dword [ebp - 0x394]
mov eax, dword [edx]
mov ecx, 8
imul edx, ecx, 5
lea eax, [eax + edx + 0x78]
mov dword [ebp - 0x2b0], eax
mov ecx, dword [ebp - 0x2b0]
cmp dword [ecx + 4], 0
jbe 0x4a98f8
mov dword [ebp - 0x38], 1
mov dword [ebp - 0x38], 0xffffffec
jmp 0x4a90d5
mov edx, dword [ebp - 0x38]
add edx, 1
mov dword [ebp - 0x38], edx
cmp dword [ebp - 0x38], 4
jl 0x4a9610
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x170], 0xfffffffa
mov dword [ebp - 0x16c], 0xfffffffa
mov dword [ebp - 0x168], 0xfffffffa
mov dword [ebp - 0x164], 0xfffffffa
mov dword [ebp - 0x12c], 0x93cc2542
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x68], 0
jmp 0x4a9131
mov eax, dword [ebp - 0x68]
sub eax, 1
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0xfffffffa
je 0x4a960b
mov dword [ebp - 0x20], 2
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x20], 0
jmp 0x4a915b
mov ecx, dword [ebp - 0x20]
add ecx, 1
mov dword [ebp - 0x20], ecx
cmp dword [ebp - 0x20], 3
jg 0x4a9606
push 1
lea ecx, [ebp - 0x38c]
call fcn.00428070
mov dword [ebp - 0x1b0], 0x4125dbf6
mov dword [ebp - 0xf4], 0
jmp 0x4a9197
mov edx, dword [ebp - 0xf4]
add edx, 1
mov dword [ebp - 0xf4], edx
cmp dword [ebp - 0xf4], 1
jge 0x4a91ba
mov eax, dword [ebp - 0xf4]
push eax
lea ecx, [ebp - 0x38c]
call fcn.004281c0
mov dword [eax], 0x12e1dfe
jmp 0x4a9188
push 0
lea ecx, [ebp - 0x38c]
call fcn.004281c0
mov dword [eax], 0
jmp 0x4a91f5
push 0
lea ecx, [ebp - 0x38c]
call fcn.004281c0
mov dword [ebp - 0x39c], eax
mov ecx, dword [ebp - 0x39c]
mov edx, dword [ecx]
add edx, 1
mov eax, dword [ebp - 0x39c]
mov dword [eax], edx
push 0
lea ecx, [ebp - 0x38c]
call fcn.004281c0
cmp dword [eax], 3
jg 0x4a93e1
mov ecx, dword [ebp - 0x12c]
mov dword [ebp - 0x524], ecx
mov edx, dword [ebp - 0x68]
mov dword [ebp - 0x52c], edx
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp + ecx*4 - 0x170]
cmp dword [ebp + eax*4 - 0x170], edx
jle 0x4a9242
mov dword [ebp - 0x290], 1
jmp 0x4a924c
mov dword [ebp - 0x290], 0
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x290]
mov ecx, dword [ebp - 0x20]
cmp eax, dword [ebp + ecx*4 - 0x170]
jg 0x4a926e
mov dword [ebp - 0x36c], 1
jmp 0x4a9278
mov dword [ebp - 0x36c], 0
mov edx, dword [ebp - 0x38]
mov dword [ebp - 0x40], edx
mov eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0x36c]
jne 0x4a9295
mov dword [ebp - 0x190], 1
jmp 0x4a929f
mov dword [ebp - 0x190], 0
mov ecx, dword [ebp - 0x38]
cmp dword [ebp - 0x190], ecx
jl 0x4a92b6
mov dword [ebp - 0x398], 1
jmp 0x4a92c0
mov dword [ebp - 0x398], 0
push 0
lea ecx, [ebp - 0x38c]
call fcn.004281c0
mov edx, dword [ebp - 0x398]
cmp edx, dword [eax]
jne 0x4a92e9
cmp dword [ebp - 0x68], 0
jne 0x4a92e9
mov dword [ebp - 0x198], 0
jmp 0x4a92f3
mov dword [ebp - 0x198], 1
mov eax, dword [ebp - 0x12c]
cmp eax, dword [ebp - 0x198]
jg 0x4a930d
mov dword [ebp - 0x298], 1
jmp 0x4a9317
mov dword [ebp - 0x298], 0
imul ecx, dword [ebp - 0x298], 0xec6e
test ecx, ecx
je 0x4a9337
cmp dword [ebp - 0x20], 0
je 0x4a9337
mov dword [ebp - 0x1a0], 1
jmp 0x4a9341
mov dword [ebp - 0x1a0], 0
mov edx, dword [ebp - 0x20]
imul edx, dword [ebp - 0x1a0]
test edx, edx
jne 0x4a936a
cmp dword [ebp - 0x12c], 0
jne 0x4a936a
cmp dword [ebp - 0x38], 0
jne 0x4a936a
mov dword [ebp - 0x318], 0
jmp 0x4a9374
mov dword [ebp - 0x318], 1
cmp dword [ebp - 0x318], 1
je 0x4a9389
mov dword [ebp - 0x1a8], 1
jmp 0x4a9393
mov dword [ebp - 0x1a8], 0
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp + eax*4 - 0x170]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp + edx*4 - 0x170]
imul eax, dword [ebp - 0x1a8]
imul ecx, eax
mov edx, dword [ebp - 0x20]
cmp ecx, dword [ebp + edx*4 - 0x170]
jne 0x4a93c9
mov dword [ebp - 0x2a0], 1
jmp 0x4a93d3
mov dword [ebp - 0x2a0], 0
mov eax, dword [ebp - 0x2a0]
mov dword [ebp - 0x60], eax
jmp 0x4a91cf
mov dword [ebp - 0x40], 3
jmp 0x4a93f3
mov ecx, dword [ebp - 0x40]
sub ecx, 1
mov dword [ebp - 0x40], ecx
cmp dword [ebp - 0x40], 0
jl 0x4a95f6
mov dword [ebp - 0x430], 0xa10
cmp dword [ebp - 0x430], 0x24c2
jle 0x4a9481
aaa
push 0xfffffffffffffff9
dec esi
mov cl, 0xc6
outsb dx, byte [esi]
fild qword [ecx]
and al, dh
push es
xor byte fs:[edi + ebx - 0x5d72e3fb], dh
pop ebp
push ebx
je 0x4a9427
inc esi
or eax, 0x4a37a86b
mov dword [ebp - 0x1c8], 0xffffffff
mov dword [ebp - 0x44c], 3
mov dword [ebp - 0x3ac], 0
mov dword [ebp - 0x60], 0
jmp 0x4a94b1
mov edx, dword [ebp - 0x60]
add edx, 1
mov dword [ebp - 0x60], edx
cmp dword [ebp - 0x60], 0
jg 0x4a95df
mov eax, dword [ebp - 0x40]
cmp dword [ebp + eax*4 - 0x170], 0
je 0x4a94cd
jmp 0x4a95df
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp + ecx*4 - 0x170]
mov dword [ebp - 0x534], edx
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0x170], 0
je 0x4a9577
mov ecx, dword [ebp - 0x38]
mov dword [ebp - 0x1b0], ecx
mov edx, dword [ebp - 0x1b0]
sub edx, 1
cmp edx, dword [ebp - 0x38]
jge 0x4a9511
mov dword [ebp - 0x358], 1
jmp 0x4a951b
mov dword [ebp - 0x358], 0
mov eax, dword [ebp - 0x1c8]
cmp dword [ebp - 0x358], eax
jle 0x4a9535
mov dword [ebp - 0x1b8], 1
jmp 0x4a953f
mov dword [ebp - 0x1b8], 0
mov ecx, dword [ebp - 0x60]
push ecx
lea ecx, [ebp - 0x38c]
call fcn.004281c0
mov edx, dword [eax]
cmp edx, dword [ebp - 0x1b8]
jg 0x4a9564
mov dword [ebp - 0x2a8], 1
jmp 0x4a956e
mov dword [ebp - 0x2a8], 0
cmp dword [ebp - 0x2a8], 0
jne 0x4a958c
cmp dword [ebp - 0x44c], 0
jne 0x4a958c
mov dword [ebp - 0x1c0], 0
jmp 0x4a9596
mov dword [ebp - 0x1c0], 1
mov eax, dword [ebp - 0x1c0]
mov dword [ebp - 0x3ac], eax
cmp dword [ebp - 0x38], 9
je 0x4a95b4
mov dword [ebp - 0x320], 1
jmp 0x4a95be
mov dword [ebp - 0x320], 0
push 0
lea ecx, [ebp - 0x38c]
call fcn.004281c0
mov ecx, dword [ebp - 0x320]
imul ecx, dword [eax]
mov dword [ebp - 0x1c8], ecx
jmp 0x4a94a8
mov edx, dword [ebp - 0x40]
cmp dword [ebp + edx*4 - 0x170], 0
je 0x4a95f1
jmp 0x4a93ea
jmp 0x4a93ea
lea ecx, [ebp - 0x38c]
call fcn.004281a0
jmp 0x4a9152
jmp 0x4a9128
jmp 0x4a90cc
mov eax, dword [ebp - 0x2b0]
mov ecx, dword [ebp - 0x360]
add ecx, dword [eax]
mov dword [ebp - 0x1f8], ecx
mov dword [ebp - 0x160], 0xa5d6c05b
mov dword [ebp - 0x15c], 0xa5d6c05b
mov dword [ebp - 0x158], 0xa5d6c05b
mov dword [ebp - 0x154], 0xa5d6c05b
mov dword [ebp - 0x1c], 0x7eede0b4
push 4
lea ecx, [ebp - 0x4d0]
call fcn.00428070
mov dword [ebp - 0x3bc], 0x8aac
mov dword [ebp - 0x438], 0xffffffff
push 0x5a2a
push 0x153b
lea edx, [ebp - 0x554]
push edx
push 0
lea eax, [ebp - 0x4d0]
push eax
call fcn.004a5c10
add esp, 0x14
mov dword [ebp - 0x1c], 0
jmp 0x4a96a8
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
cmp dword [ebp - 0x1c], 3
jg 0x4a97da
mov dword [ebp - 0x1d0], 0x8aaf0a9b
mov dword [ebp - 0x494], 0xfffffffd
mov edx, 4
shl edx, 1
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp + eax*4 - 0x160]
cmp dword [ebp + edx - 0x160], ecx
jg 0x4a96ec
mov dword [ebp - 0x444], 1
jmp 0x4a96f6
mov dword [ebp - 0x444], 0
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp + edx*4 - 0x160]
mov dword [ebp - 0x55c], eax
mov ecx, 4
shl ecx, 0
cmp dword [ebp + ecx - 0x160], 0
je 0x4a971c
cmp dword [ebp - 0x1c], 0
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp + eax*4 - 0x160]
cmp dword [ebp + edx*4 - 0x160], ecx
jne 0x4a973e
mov dword [ebp - 0x3b4], 1
jmp 0x4a9748
mov dword [ebp - 0x3b4], 0
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp + edx*4 - 0x160]
mov dword [ebp - 0x1d0], eax
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp + ecx*4 - 0x160]
cmp dword [ebp - 0x1d0], edx
jl 0x4a9776
mov dword [ebp - 0x378], 1
jmp 0x4a9780
mov dword [ebp - 0x378], 0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp + eax*4 - 0x160]
cmp ecx, dword [ebp - 0x378]
jle 0x4a979e
mov dword [ebp - 0x1d8], 1
jmp 0x4a97a8
mov dword [ebp - 0x1d8], 0
mov edx, dword [ebp - 0x1c]
cmp dword [ebp - 0x1d8], edx
jg 0x4a97bf
mov dword [ebp - 0x2b8], 1
jmp 0x4a97c9
mov dword [ebp - 0x2b8], 0
mov eax, dword [ebp - 0x2b8]
mov dword [ebp - 0x494], eax
jmp 0x4a969f
cmp dword [ebp - 0x1c], 0xe7c14ab6
jae 0x4a97ef
mov dword [ebp - 0x1e0], 1
jmp 0x4a97f9
mov dword [ebp - 0x1e0], 0
cmp dword [ebp - 0x1e0], 0xfffffffe
jg 0x4a980e
mov dword [ebp - 0x2c0], 1
jmp 0x4a9818
mov dword [ebp - 0x2c0], 0
push 2
lea ecx, [ebp - 0x4d0]
call fcn.004281c0
mov dword [eax], 1
mov ecx, 4
imul edx, ecx, 0
mov eax, dword [ebp + edx - 0x160]
add eax, 0x293afae3
cmp eax, 1
jle 0x4a9850
mov dword [ebp - 0x328], 1
jmp 0x4a985a
mov dword [ebp - 0x328], 0
cmp dword [ebp - 0x328], 0xffffffff
je 0x4a986f
mov dword [ebp - 0x1e8], 1
jmp 0x4a9879
mov dword [ebp - 0x1e8], 0
mov ecx, dword [ebp - 0x1e8]
sub ecx, 1
cmp dword [ebp - 0x2c0], ecx
jg 0x4a9896
mov dword [ebp - 0x1f0], 1
jmp 0x4a98a0
mov dword [ebp - 0x1f0], 0
mov edx, dword [ebp - 0x1f0]
sub edx, dword [ebp - 0x3bc]
mov dword [ebp - 0x438], edx
lea ecx, [ebp - 0x4d0]
call fcn.004281a0
mov eax, dword [ebp - 0x1f8]
cmp dword [eax], 0
jbe 0x4a98f8
push 0x748
mov ecx, dword [ebp - 0x3c4]
push ecx
lea edx, [ebp - 0x360]
push edx
push 0
push 0x4a77
push 0xaf5
lea eax, [ebp - 0x1f8]
push eax
call fcn.004b03f0
add esp, 0x1c
jmp 0x4a98bd
jmp 0x4ac223
mov ecx, dword [ebp - 0x470]
mov dword [ebp - 0xc8], ecx
mov dword [ebp - 0x2c8], 0x3d7b
mov dword [ebp - 0x3cc], str.frla_jeirrha_nxhwtgsw_ubatkk_wjrap_axl_tcl_zrherq_zmxi_sfcomqefe_ltutowp_daegseu_ckkam_fzwnwv
cmp dword [ebp - 0x2c8], 0x3d8e
jle 0x4a997b
mov dword [ebp - 0xa8], 0
jmp 0x4a9944
mov edx, dword [ebp - 0xa8]
add edx, 1
mov dword [ebp - 0xa8], edx
cmp dword [ebp - 0xa8], 0x1bdb
jge 0x4a997b
push 0x40c2
push 0x3427
push 0xdde
push 0
lea eax, [ebp - 0xa8]
push eax
push 1
push 1
push 0x1f8f
call fcn.004a5f50
add esp, 0x20
jmp 0x4a9935
mov dword [ebp - 0xb0], 0x7e2799ac
mov dword [ebp - 4], 0
cmp dword [ebp - 0x2c8], 0x3aca
jge 0x4a99ba
push 0xbc8
push 0x65f0
push 0x1b6a
push 0
lea ecx, [ebp - 0x3cc]
push ecx
push 1
call fcn.004a6480
add esp, 0x18
jmp 0x4a99d3
mov dword [ebp - 4], 0xffffffff
jmp 0x4a99e3
mov dword [ebp - 0x200], 0x306e
mov dword [ebp - 0x440], str.iogytrtwo_kcex_mhnwrms_bfyabpvh_zfh_wxlrm_yrfwm_jxxyaguh_nvmkd
cmp dword [ebp - 0x200], 0x31db
jle 0x4a9a80
mov dword [ebp - 0xa0], 0
jmp 0x4a9a1e
mov edx, dword [ebp - 0xa0]
add edx, 1
mov dword [ebp - 0xa0], edx
cmp dword [ebp - 0xa0], 0x605c
jge 0x4a9a80
mov dword [ebp - 0xb4], 0
jmp 0x4a9a45
mov eax, dword [ebp - 0xb4]
add eax, 1
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0x3a72
jge 0x4a9a7e
push 0x55b6
lea ecx, [ebp - 0xb4]
push ecx
push 0
push 0
push 1
push 0xb49
push 0x1eea
lea edx, [ebp - 0xa0]
push edx
call fcn.004b12a0
add esp, 0x20
jmp 0x4a9a36
jmp 0x4a9a0f
mov dword [ebp - 0x48c], 0xffffffff
mov dword [ebp - 4], 2
cmp dword [ebp - 0x200], 0x2f3f
jge 0x4a9ac6
push 0x4989
push 0x15f
push 0
push 0x1c93
push 0x6e78
lea eax, [ebp - 0x440]
push eax
push 1
push 1
call fcn.004a0770
add esp, 0x20
jmp 0x4a9aee
mov dword [ebp - 4], 0xffffffff
jmp 0x4a9afe
mov dword [ebp - 0xb0], 0xffffffe6
jmp 0x4a9b19
mov ecx, dword [ebp - 0xb0]
add ecx, 1
mov dword [ebp - 0xb0], ecx
cmp dword [ebp - 0xb0], 0xfffffff7
jge 0x4a9bd5
mov dword [ebp - 0x3d4], 0x4d2edc75
push 2
lea ecx, [ebp - 0x4a8]
call fcn.00428070
mov dword [ebp - 0xb8], 0
jmp 0x4a9b58
mov edx, dword [ebp - 0xb8]
add edx, 1
mov dword [ebp - 0xb8], edx
cmp dword [ebp - 0xb8], 2
jge 0x4a9b7b
mov eax, dword [ebp - 0xb8]
push eax
lea ecx, [ebp - 0x4a8]
call fcn.004281c0
mov dword [eax], 0xffffffff
jmp 0x4a9b49
lea ecx, [ebp - 0x4a8]
push ecx
push 1
push 1
push 0x4936
push 0x4244
push 0
push 0x5073
lea edx, [ebp - 0x3d4]
push edx
call fcn.004ae860
add esp, 0x20
lea eax, [ebp - 0x4a8]
push eax
push 1
push 0x7326
push 0
lea ecx, [ebp - 0x48c]
push ecx
call fcn.0049f7d0
add esp, 0x14
lea ecx, [ebp - 0x4a8]
call fcn.004281a0
jmp 0x4a9b0a
mov edx, dword [ebp - 0xc8]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xc8]
mov edx, dword [ecx]
movzx ecx, word [edx + 0x14]
lea edx, [eax + ecx + 0x18]
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x104], 0x48261f9c
mov dword [ebp - 0x3dc], 0x8959310c
mov dword [ebp - 0xbc], 0
jmp 0x4a9c1f
mov eax, dword [ebp - 0xbc]
add eax, 1
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 1
jge 0x4a9c3b
mov ecx, dword [ebp - 0xbc]
mov dword [ebp + ecx*4 - 0x564], 0xc4e2bf5
jmp 0x4a9c10
mov dword [ebp - 0x104], 0
jmp 0x4a9c56
mov edx, dword [ebp - 0x104]
sub edx, 1
mov dword [ebp - 0x104], edx
cmp dword [ebp - 0x104], 0xfffffffa
jne 0x4a9ed8
mov dword [ebp - 0x7c], 0xffffffff
mov dword [ebp - 0x56c], 0x78555145
push 1
lea ecx, [ebp - 0x4e8]
call fcn.00428070
mov dword [ebp - 0x34], 0
jmp 0x4a9c93
mov eax, dword [ebp - 0x34]
add eax, 1
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 2
jge 0x4a9ca9
mov ecx, dword [ebp - 0x34]
mov dword [ebp + ecx*4 - 0x54c], 0x7cf2
jmp 0x4a9c8a
mov dword [ebp - 0x34], 0
jmp 0x4a9cbb
mov edx, dword [ebp - 0x34]
add edx, 1
mov dword [ebp - 0x34], edx
cmp dword [ebp - 0x34], 1
jge 0x4a9cd1
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x574], 0xd77cccae
jmp 0x4a9cb2
lea ecx, [ebp - 0x34]
push ecx
push 0x73f2
push 0
push 0
push 0x53
lea edx, [ebp - 0x4e8]
push edx
call fcn.004a0690
add esp, 0x18
push 1
push 0x6f0b
push 0x83e
push 0x7795
push 0x2fc4
push 0x1cab
push 0x2477
push 0
push 0x7c41
call fcn.004a69a0
add esp, 0x24
mov dword [ebp - 0x7c], 0
jmp 0x4a9d30
mov eax, dword [ebp - 0x7c]
add eax, 1
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 6
jne 0x4a9ec8
mov dword [ebp - 0x98], 0x9ba07e4f
mov dword [ebp - 0x504], 4
mov dword [ebp - 0x584], 0xd5493e
mov dword [ebp - 0x58c], 0xffffffff
mov dword [ebp - 0x594], 3
mov dword [ebp - 0x5ec], 0xfffffffc
mov dword [ebp - 0x5f4], 0x16e074f0
mov dword [ebp - 0x98], 1
jmp 0x4a9d9b
mov ecx, dword [ebp - 0x98]
sub ecx, 1
mov dword [ebp - 0x98], ecx
cmp dword [ebp - 0x98], 0
jl 0x4a9ec3
mov dword [ebp - 0x5fc], 0x5245f5b1
mov dword [ebp - 0x5e0], 0xddca2728
mov dword [ebp - 0x5c8], 0xf3ccd246
mov dword [ebp - 0x510], 0x9ba87a5e
mov dword [ebp - 0x580], 0xcb6a7f4e
mov dword [ebp - 0x518], 0xffffffff
mov dword [ebp - 0x5f8], 0xacb6d64b
mov dword [ebp - 0x520], 0x9f9034e1
push 3
lea ecx, [ebp - 0x5a4]
call fcn.00428070
mov dword [ebp - 0xc4], 0
jmp 0x4a9e20
mov edx, dword [ebp - 0xc4]
add edx, 1
mov dword [ebp - 0xc4], edx
cmp dword [ebp - 0xc4], 3
jge 0x4a9e43
mov eax, dword [ebp - 0xc4]
push eax
lea ecx, [ebp - 0x5a4]
call fcn.004281c0
mov dword [eax], 1
jmp 0x4a9e11
mov ecx, dword [ebp - 0x98]
cmp dword [ebp + ecx*4 - 0x54c], 0
jne 0x4a9e68
cmp dword [ebp - 0x7c], 0xfff9
jb 0x4a9e68
mov dword [ebp - 0x330], 0
jmp 0x4a9e72
mov dword [ebp - 0x330], 1
cmp dword [ebp - 0x330], 6
jae 0x4a9e87
mov dword [ebp - 0x208], 1
jmp 0x4a9e91
mov dword [ebp - 0x208], 0
mov edx, dword [ebp - 0x208]
mov dword [ebp - 0x3dc], edx
push 0x2276
lea eax, [ebp - 0x4e8]
push eax
push 0
call fcn.004ae1c0
add esp, 0xc
lea ecx, [ebp - 0x5a4]
call fcn.004281a0
jmp 0x4a9d8c
jmp 0x4a9d27
lea ecx, [ebp - 0x4e8]
call fcn.004281a0
jmp 0x4a9c47
mov dword [ebp - 0x148], 0
jmp 0x4a9efc
mov ecx, dword [ebp - 0x148]
add ecx, 1
mov dword [ebp - 0x148], ecx
mov edx, dword [ebp - 0x30]
add edx, 0x28
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0xc8]
mov ecx, dword [eax]
movzx edx, word [ecx + 6]
cmp dword [ebp - 0x148], edx
jge 0x4ac223
mov dword [ebp - 0x2f0], 0x17c8
mov dword [ebp - 0x490], str.gybanfou_myplfji_rrfwwese_iafxqz_abwcwleo_butelnhvc_jcngyn_igjbyn_ztndzm_dvo_sptjyekx_dnwb_oppon_qdy
cmp dword [ebp - 0x2f0], 0x18d3
jle 0x4a9f40
push 1
push 1
call fcn.0049ff00
add esp, 8
mov dword [ebp - 0x24], 4
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x2d0], 0x7b0f
mov dword [ebp - 0x448], str.efegtp_eop_aqzrwvde_ehxszhtcw_lplqcfg_bwudy_dhxfadtue
cmp dword [ebp - 0x2d0], 0x7eb8
jle 0x4aa092
mov dword [ebp - 0x114], 0
jmp 0x4a9f8d
mov eax, dword [ebp - 0x114]
add eax, 1
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0x7098
jge 0x4aa088
mov dword [ebp - 0xcc], 0
jmp 0x4a9fb8
mov ecx, dword [ebp - 0xcc]
add ecx, 1
mov dword [ebp - 0xcc], ecx
cmp dword [ebp - 0xcc], 0x5cd6
jge 0x4aa083
mov dword [ebp - 0xf0], 0
jmp 0x4a9fe3
mov edx, dword [ebp - 0xf0]
add edx, 1
mov dword [ebp - 0xf0], edx
cmp dword [ebp - 0xf0], 0x3fd8
jge 0x4aa07e
mov dword [ebp - 0xd4], 0
jmp 0x4aa00e
mov eax, dword [ebp - 0xd4]
add eax, 1
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0x5611
jge 0x4aa079
mov eax, dword [ebp - 0x114]
xor eax, dword [ebp - 0xcc]
or eax, dword [ebp - 0xf0]
or eax, dword [ebp - 0xd4]
cdq
mov dword [ebp - 0x460], eax
mov dword [ebp - 0x45c], edx
mov ecx, dword [ebp - 0x45c]
push ecx
mov edx, dword [ebp - 0x460]
push edx
lea eax, [ebp - 0x620]
push eax
call fcn.00409670
add esp, 0xc
mov ecx, eax
call fcn.004078f0
push eax
call fcn.004bef16
add esp, 4
lea ecx, [ebp - 0x620]
call fcn.00407870
jmp 0x4a9fff
jmp 0x4a9fd4
jmp 0x4a9fa9
jmp 0x4a9f7e
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
mov dword [ebp - 0x150], 0xa7974498
mov dword [ebp - 4], 4
cmp dword [ebp - 0x2d0], 0x7a77
jge 0x4aa0be
mov ecx, dword [ebp - 0x448]
push ecx
call fcn.004bef16
add esp, 4
jmp 0x4aa0da
mov dword [ebp - 4], 0xffffffff
jmp 0x4aa0ea
mov dword [ebp - 0x3ec], 0xfffffffb
mov dword [ebp - 0x230], 0
mov dword [ebp - 0x248], 0x71b2a125
mov dword [ebp - 0x3f4], 0xffffffff
cmp dword [ebp - 0x24], 0
je 0x4aa1e2
mov edx, dword [ebp - 0x24]
mov dword [ebp - 0x588], edx
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x528], eax
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x5d8], ecx
mov edx, dword [ebp - 0x24]
sub edx, 6
sub edx, dword [ebp - 0x24]
cmp edx, 0x3bed162c
jl 0x4aa154
mov dword [ebp - 0x3e4], 1
jmp 0x4aa15e
mov dword [ebp - 0x3e4], 0
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x530], eax
mov ecx, dword [ebp - 0x24]
cmp dword [ebp - 0x24], ecx
jge 0x4aa17b
mov dword [ebp - 0x210], 1
jmp 0x4aa185
mov dword [ebp - 0x210], 0
mov edx, dword [ebp - 0x24]
cmp dword [ebp - 0x210], edx
je 0x4aa19c
mov dword [ebp - 0x390], 1
jmp 0x4aa1a6
mov dword [ebp - 0x390], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x390], eax
jge 0x4aa1bd
mov dword [ebp - 0x218], 1
jmp 0x4aa1c7
mov dword [ebp - 0x218], 0
mov ecx, dword [ebp - 0x218]
mov dword [ebp - 0x70], ecx
mov edx, dword [ebp - 0x70]
mov dword [ebp - 0x590], edx
cmp dword [ebp - 0x150], 0
jne 0x4aa1f4
cmp dword [ebp - 0x70], 0
je 0x4aa1f4
mov dword [ebp - 0x2d8], 1
jmp 0x4aa1fe
mov dword [ebp - 0x2d8], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x2d8], eax
jg 0x4aa215
mov dword [ebp - 0x220], 1
jmp 0x4aa21f
mov dword [ebp - 0x220], 0
cmp dword [ebp - 0x220], 1
je 0x4aa260
cmp dword [ebp - 0x150], 0
je 0x4aa260
mov byte [ebp - 0x4b], 0
push 0
lea ecx, [ebp - 0x4b]
push ecx
push 0
push 1
push 0x1fb9
push 0x132e
push 0x4036
push 0x3d4e
call fcn.004a55d0
add esp, 0x20
jmp 0x4aa4da
mov dword [ebp - 0xf8], 0
jmp 0x4aa27b
mov edx, dword [ebp - 0xf8]
add edx, 1
mov dword [ebp - 0xf8], edx
cmp dword [ebp - 0xf8], 2
jge 0x4aa297
mov eax, dword [ebp - 0xf8]
mov dword [ebp + eax*4 - 0x90], 6
jmp 0x4aa26c
or ecx, 0xffffffff
je 0x4aa3c1
mov dword [ebp - 0x70], 0x46c64e71
mov edx, 4
shl edx, 0
mov eax, dword [ebp + edx - 0x90]
cmp dword [ebp - 0x70], eax
jge 0x4aa2cb
mov ecx, 4
shl ecx, 0
cmp dword [ebp + ecx - 0x90], 0
mov edx, 0x8909
test edx, edx
jne 0x4aa2f2
mov eax, 4
shl eax, 0
cmp dword [ebp + eax - 0x90], 0
jne 0x4aa2f2
mov dword [ebp - 0x338], 0
jmp 0x4aa2fc
mov dword [ebp - 0x338], 1
cmp dword [ebp - 0x338], 0xcfadbacd
ja 0x4aa314
mov dword [ebp - 0x228], 1
jmp 0x4aa31e
mov dword [ebp - 0x228], 0
mov ecx, 4
shl ecx, 0
mov edx, dword [ebp + ecx - 0x90]
cmp dword [ebp - 0x228], edx
jle 0x4aa341
mov dword [ebp - 0x47c], 1
jmp 0x4aa34b
mov dword [ebp - 0x47c], 0
mov eax, 4
shl eax, 0
mov ecx, dword [ebp + eax - 0x90]
mov dword [ebp - 0x538], ecx
mov edx, 4
shl edx, 0
cmp dword [ebp + edx - 0x90], 0xfffffffb
jl 0x4aa37e
mov dword [ebp - 0x2e0], 1
jmp 0x4aa388
mov dword [ebp - 0x2e0], 0
mov eax, dword [ebp - 0x230]
cmp dword [ebp - 0x2e0], eax
jg 0x4aa3a2
mov dword [ebp - 0x368], 1
jmp 0x4aa3ac
mov dword [ebp - 0x368], 0
mov ecx, dword [ebp - 0x230]
imul ecx, dword [ebp - 0x368]
cmp dword [ebp - 0x3ec], ecx
jl 0x4aa3df
mov edx, 4
shl edx, 0
cmp dword [ebp + edx - 0x90], 0
jne 0x4aa3df
mov dword [ebp - 0x238], 0
jmp 0x4aa3e9
mov dword [ebp - 0x238], 1
mov eax, 4
imul ecx, eax, 0
mov edx, dword [ebp + ecx - 0x90]
cmp dword [ebp - 0x238], edx
jl 0x4aa40c
mov dword [ebp - 0x2e8], 1
jmp 0x4aa416
mov dword [ebp - 0x2e8], 0
mov eax, 4
shl eax, 0
mov ecx, dword [ebp + eax - 0x90]
cmp dword [ebp - 0x2e8], ecx
jl 0x4aa439
mov dword [ebp - 0x450], 1
jmp 0x4aa443
mov dword [ebp - 0x450], 0
mov edx, 4
shl edx, 0
cmp dword [ebp + edx - 0x90], 0xfffffff9
jbe 0x4aa461
mov dword [ebp - 0x240], 1
jmp 0x4aa46b
mov dword [ebp - 0x240], 0
mov eax, 4
shl eax, 0
mov ecx, dword [ebp + eax - 0x90]
cmp dword [ebp - 0x240], ecx
jle 0x4aa497
mov edx, 0x9a030833
test edx, edx
jne 0x4aa497
mov dword [ebp - 0x340], 0
jmp 0x4aa4a1
mov dword [ebp - 0x340], 1
mov eax, dword [ebp - 0x340]
mov dword [ebp - 0x248], eax
mov ecx, dword [ebp - 0x150]
sub ecx, dword [ebp - 0x248]
mov dword [ebp - 0x3f4], ecx
push 0x781a
push 0
push 1
push 0x4145
push 0x1911
call fcn.004ae010
add esp, 0x14
mov byte [ebp - 0x51], 0
push 0xa1c
push 0x5cc3
push 0x6c4
lea edx, [ebp - 0x51]
push edx
push 0x4c03
push 0
call fcn.004a4fd0
add esp, 0x18
mov dword [ebp - 4], 6
lea eax, [ebp - 0x2f0]
push eax
push 0x1c0f
push 0
push 0x701b
lea ecx, [ebp - 0x490]
push ecx
call fcn.004adde0
add esp, 0x14
jmp 0x4aa545
mov dword [ebp - 4], 0xffffffff
jmp 0x4aa555
mov dword [ebp - 0x64], 0x49fe387
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4b8], 0x24f8
mov dword [ebp - 0x4b4], 0x24f8
mov dword [ebp - 0x4b0], 0x24f8
mov dword [ebp - 0x4ac], 0x24f8
mov dword [ebp - 0x28], 0
push 2
lea ecx, [ebp - 0x128]
call fcn.00428070
mov dword [ebp - 0x250], 0x653d4237
mov dword [ebp - 0x5dc], 0x8a3e09e1
mov dword [ebp - 0xdc], 0
jmp 0x4aa5ce
mov edx, dword [ebp - 0xdc]
add edx, 1
mov dword [ebp - 0xdc], edx
cmp dword [ebp - 0xdc], 2
jge 0x4aa5f1
mov eax, dword [ebp - 0xdc]
push eax
lea ecx, [ebp - 0x128]
call fcn.004281c0
mov dword [eax], 0xffffffff
jmp 0x4aa5bf
lea ecx, [ebp - 0x250]
push ecx
push 0
push 1
call fcn.0049f6f0
add esp, 0xc
mov dword [ebp - 0x64], 0
jmp 0x4aa616
mov edx, dword [ebp - 0x64]
add edx, 1
mov dword [ebp - 0x64], edx
cmp dword [ebp - 0x64], 1
jg 0x4aaaa7
mov dword [ebp - 0x84], 0x9dce
mov dword [ebp - 0x458], 5
mov dword [ebp - 0x484], 0xffffffff
push 0x47f5
push 1
push 1
lea eax, [ebp - 0x64]
push eax
push 0x6322
push 0x4db7
lea ecx, [ebp - 0x128]
push ecx
push 1
push 0x2452
call fcn.004a0000
add esp, 0x24
mov dword [ebp - 0x28], 0
jmp 0x4aa67d
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
cmp dword [ebp - 0x28], 1
jg 0x4aaaa2
mov eax, dword [ebp - 0x28]
push eax
lea ecx, [ebp - 0x128]
call fcn.004281c0
cmp dword [eax], 0
je 0x4aa855
mov dword [ebp - 0x134], 0x9ab8
mov dword [ebp - 0x50], 4
jmp 0x4aa6bb
mov ecx, dword [ebp - 0x50]
sub ecx, 1
mov dword [ebp - 0x50], ecx
cmp dword [ebp - 0x50], 0
je 0x4aa6f4
push 0x1180
push 0xea7
lea edx, [ebp - 0x250]
push edx
push 0x1a00
push 0x7f3a
push 0x492e
lea eax, [ebp - 0x84]
push eax
push 0
call fcn.004af2a0
add esp, 0x20
jmp 0x4aa6b2
push 1
lea ecx, [ebp - 0x128]
call fcn.004281c0
mov esi, eax
mov ecx, dword [ebp - 0x28]
push ecx
lea ecx, [ebp - 0x128]
call fcn.004281c0
mov edx, dword [esi]
imul edx, dword [eax]
cmp edx, dword [ebp - 0x50]
je 0x4aa728
mov dword [ebp - 0x380], 1
jmp 0x4aa732
mov dword [ebp - 0x380], 0
mov eax, dword [ebp - 0x28]
push eax
lea ecx, [ebp - 0x128]
call fcn.004281c0
mov ecx, dword [ebp - 0x380]
cmp ecx, dword [eax]
jl 0x4aa760
mov edx, 1
test edx, edx
je 0x4aa760
mov dword [ebp - 0x258], 1
jmp 0x4aa76a
mov dword [ebp - 0x258], 0
mov eax, dword [ebp - 0x84]
imul eax, dword [ebp - 0x258]
cmp dword [ebp - 0x84], eax
jl 0x4aa78b
mov dword [ebp - 0x3fc], 1
jmp 0x4aa795
mov dword [ebp - 0x3fc], 0
mov ecx, dword [ebp - 0x28]
push ecx
lea ecx, [ebp - 0x128]
call fcn.004281c0
mov edx, dword [ebp - 0x134]
mov dword [ebp - 0x544], edx
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x598], eax
mov ecx, dword [ebp - 0x84]
add ecx, 1
cmp ecx, dword [ebp - 0x134]
jne 0x4aa7d9
mov dword [ebp - 0x144], 1
jmp 0x4aa7e3
mov dword [ebp - 0x144], 0
mov edx, dword [ebp - 0x64]
push edx
lea ecx, [ebp - 0x128]
call fcn.004281c0
mov ecx, dword [ebp - 0x144]
mov dword [eax], ecx
cmp dword [ebp - 0x144], 0xa1b14898
jbe 0x4aa812
mov dword [ebp - 0x2f8], 1
jmp 0x4aa81c
mov dword [ebp - 0x2f8], 0
cmp dword [ebp - 0x2f8], 0
jne 0x4aa83a
mov edx, 0xffff
test edx, edx
je 0x4aa83a
mov dword [ebp - 0x260], 1
jmp 0x4aa844
mov dword [ebp - 0x260], 0
inc dword [eax]
add byte [eax], al
add byte [ebx - 0x25f7b], cl
dec dword [ecx - 0x4577b]
invalid
mov eax, dword [ebp - 0x260]
mov dword [ebp - 0x458], eax
jmp 0x4aaa9d
mov dword [ebp - 0x13c], 0x33490ce6
mov dword [ebp - 0x404], 0xfc7
cmp dword [ebp - 0x404], 0x186b
jle 0x4aa905
sbb al, byte [edi]
jle 0x4aa83f
xlatb
xor al, 0x84
cmp dword [eax + 0x68], edx
push esp
inc eax
add byte [eax], al
mov ecx, dword [ebp - 0x28]
push ecx
lea ecx, [ebp - 0x128]
call fcn.004281c0
cmp dword [eax], 0
jne 0x4aa937
mov edx, 4
imul eax, edx, 3
cmp dword [ebp + eax - 0x4b8], 0
jne 0x4aa937
mov dword [ebp - 0x278], 0
jmp 0x4aa941
mov dword [ebp - 0x278], 1
mov dword [ebp - 0x50], 0x5b7518d
cmp dword [ebp - 0x50], 0
jne 0x4aa96e
mov ecx, dword [ebp - 0x28]
push ecx
lea ecx, [ebp - 0x128]
call fcn.004281c0
cmp dword [eax], 0
jne 0x4aa96e
mov dword [ebp - 0x348], 0
jmp 0x4aa978
mov dword [ebp - 0x348], 1
mov edx, dword [ebp - 0x484]
cmp dword [ebp - 0x348], edx
jne 0x4aa992
mov dword [ebp - 0x268], 1
jmp 0x4aa99c
mov dword [ebp - 0x268], 0
mov eax, dword [ebp - 0x268]
add eax, 7
mov dword [ebp - 0x13c], eax
jne 0x4aa9b4
cmp dword [ebp - 0x13c], 0
mov ecx, 0x4a53e8af
neg ecx
jne 0x4aa9cd
xor edx, edx
jne 0x4aa9cd
mov dword [ebp - 0x300], 0
jmp 0x4aa9d7
mov dword [ebp - 0x300], 1
cmp dword [ebp - 0x300], 0x6ac3
jge 0x4aa9ef
mov dword [ebp - 0x270], 1
jmp 0x4aa9f9
mov dword [ebp - 0x270], 0
mov eax, dword [ebp - 0x84]
cmp eax, dword [ebp - 0x270]
je 0x4aaa13
mov dword [ebp - 0x370], 1
jmp 0x4aaa1d
mov dword [ebp - 0x370], 0
push 1
lea ecx, [ebp - 0x128]
call fcn.004281c0
mov ecx, dword [ebp - 0x370]
cmp ecx, dword [eax]
jl 0x4aaa40
mov dword [ebp - 0x308], 1
jmp 0x4aaa4a
mov dword [ebp - 0x308], 0
mov esi, dword [ebp - 0x278]
sub esi, dword [ebp - 0x308]
mov edx, 4
imul eax, edx, 0
sub esi, dword [ebp + eax - 0x4b8]
mov ecx, dword [ebp - 0x28]
push ecx
lea ecx, [ebp - 0x128]
call fcn.004281c0
mov dword [eax], esi
push 0x7cb
push 0xdce
push 0
push 1
push 1
push 0x7e27
push 0x6b79
push 0x53c2
call fcn.004b12a0
add esp, 0x20
jmp 0x4aa674
jmp 0x4aa60d
lea ecx, [ebp - 0x128]
call fcn.004281a0
mov edx, dword [ebp - 0x30]
mov eax, dword [edx + 0x24]
and eax, 0x20000000
je 0x4aaacb
mov dword [ebp - 0x280], 1
jmp 0x4aaad5
mov dword [ebp - 0x280], 0
mov ecx, dword [ebp - 0x280]
mov dword [ebp - 0x3e8], ecx
push 3
lea ecx, [ebp - 0x500]
call fcn.00428070
mov dword [ebp - 0x350], 0x36e6
mov dword [ebp - 0x40c], str.cggvo_qmzsope_hrig_tksnv_eqleowcnt
cmp dword [ebp - 0x350], 0x3a5d
jle 0x4aabde
mov dword [ebp - 0x100], 0
jmp 0x4aab2d
mov edx, dword [ebp - 0x100]
add edx, 1
mov dword [ebp - 0x100], edx
cmp dword [ebp - 0x100], 0x59e0
jge 0x4aabd2
mov dword [ebp - 0xe4], 0
jmp 0x4aab58
mov eax, dword [ebp - 0xe4]
add eax, 1
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0x8ee
jge 0x4aabcd
mov dword [ebp - 0x108], 0
jmp 0x4aab7f
mov ecx, dword [ebp - 0x108]
add ecx, 1
mov dword [ebp - 0x108], ecx
cmp dword [ebp - 0x108], 0x43a4
jge 0x4aabc8
mov eax, dword [ebp - 0x100]
mov ecx, dword [ebp - 0xe4]
sar eax, cl
mov ecx, dword [ebp - 0x108]
shl eax, cl
cdq
mov dword [ebp - 0x46c], eax
mov dword [ebp - 0x468], edx
mov edx, dword [ebp - 0x468]
push edx
mov eax, dword [ebp - 0x46c]
push eax
mov ecx, 0xa9b5f0
call fcn.00427f00
jmp 0x4aab70
jmp 0x4aab49
jmp 0x4aab1e
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_OffsetRect]
mov dword [ebp - 0x464], 0x6aabecba
mov dword [ebp - 4], 8
cmp dword [ebp - 0x350], 0x3370
jge 0x4aac0f
mov ecx, dword [ebp - 0x40c]
push ecx
push 0xa9b5f0
call fcn.00408780
add esp, 8
jmp 0x4aac2b
mov dword [ebp - 4], 0xffffffff
jmp 0x4aac3b
mov dword [ebp - 0xec], 0
jmp 0x4aac56
mov edx, dword [ebp - 0xec]
add edx, 1
mov dword [ebp - 0xec], edx
cmp dword [ebp - 0xec], 3
jge 0x4aac79
mov eax, dword [ebp - 0xec]
push eax
lea ecx, [ebp - 0x500]
call fcn.004281c0
mov dword [eax], 0
jmp 0x4aac47
mov dword [ebp - 0x288], 0x998
mov dword [ebp - 0x414], str.qgh_zzciiapq_nbsklgb_sonszwqo_ikbfqguaq_sgduhc_jfvegkkyl_sesus_vaynvfito_lqewepiqr
cmp dword [ebp - 0x288], 0xa6c
jle 0x4aad58
mov dword [ebp - 0x10c], 0
jmp 0x4aacb8
mov ecx, dword [ebp - 0x10c]
add ecx, 1
mov dword [ebp - 0x10c], ecx
cmp dword [ebp - 0x10c], 0x3e78
jge 0x4aad58
mov dword [ebp - 0x110], 0
jmp 0x4aace3
mov edx, dword [ebp - 0x110]
add edx, 1
mov dword [ebp - 0x110], edx
cmp dword [ebp - 0x110], 0x4a03
jge 0x4aad53
mov dword [ebp - 0x118], 0
jmp 0x4aad0a
mov eax, dword [ebp - 0x118]
add eax, 1
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0x16ea
jge 0x4aad51
mov eax, dword [ebp - 0x110]
mov ecx, dword [ebp - 0x118]
sar eax, cl
and eax, dword [ebp - 0x10c]
cdq
mov dword [ebp - 0x478], eax
mov dword [ebp - 0x474], edx
mov ecx, dword [ebp - 0x474]
push ecx
mov edx, dword [ebp - 0x478]
push edx
mov ecx, 0xa9b5f0
call fcn.00427f00
jmp 0x4aacfb
jmp 0x4aacd4
jmp 0x4aaca9
push 0x4b94
lea eax, [ebp - 0x464]
push eax
push 0x340d
push 0
lea ecx, [ebp - 0x500]
push ecx
push 1
push 0x670d
push 0x2e41
call fcn.004a08f0
add esp, 0x20
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x288], 0x92f
jge 0x4aadad
mov edx, dword [ebp - 0x414]
push edx
push 0xa9b5f0
call fcn.00408780
add esp, 8
jmp 0x4aadc9
mov dword [ebp - 4], 0xffffffff
jmp 0x4aadd9
push 0x1549
push 1
push 1
push 0x354a
call fcn.004a0370
add esp, 0x10
lea ecx, [ebp - 0x500]
call fcn.004281a0
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax + 0x24]
and ecx, 0x40000000
je 0x4aae14
mov dword [ebp - 0x310], 1
jmp 0x4aae1e
mov dword [ebp - 0x310], 0
mov edx, dword [ebp - 0x310]
mov dword [ebp - 0x3e0], edx
mov dword [ebp - 0x18], 0x2617
mov dword [ebp - 0x3c], 0x1d68c2af
mov dword [ebp - 0x1fc], 0xeed050b7
mov dword [ebp - 0xfc], 0x3bec767d
mov dword [ebp - 0x48], 0xb783
push 1
lea ecx, [ebp - 0x4f4]
call fcn.00428070
mov dword [ebp - 0x74], 0
jmp 0x4aae72
mov eax, dword [ebp - 0x74]
add eax, 1
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 4
jge 0x4aae88
mov ecx, dword [ebp - 0x74]
mov dword [ebp + ecx*4 - 0x180], 0x57bf5cd5
jmp 0x4aae69
lea edx, [ebp - 0x74]
push edx
push 0
push 0x2fc9
lea eax, [ebp - 0x4f4]
push eax
call fcn.004ae6c0
add esp, 0x10
mov ecx, 4
shl ecx, 1
cmp dword [ebp + ecx - 0x180], 0
jne 0x4aaffa
mov edx, dword [ebp - 0x18]
mov dword [ebp - 0x550], edx
mov eax, 4
shl eax, 1
cmp dword [ebp + eax - 0x180], 0xc509
jge 0x4aaee9
mov ecx, 0x63372585
test ecx, ecx
je 0x4aaee9
mov dword [ebp - 0x188], 1
jmp 0x4aaef3
mov dword [ebp - 0x188], 0
mov edx, dword [ebp - 0x18]
cmp dword [ebp - 0x188], edx
jg 0x4aaf10
cmp dword [ebp - 0x18], 0
je 0x4aaf10
mov dword [ebp - 0x18c], 1
jmp 0x4aaf1a
mov dword [ebp - 0x18c], 0
mov eax, 4
shl eax, 1
mov ecx, dword [ebp + eax - 0x180]
cmp dword [ebp - 0x18c], ecx
jne 0x4aaf4e
mov edx, 4
imul eax, edx, 3
cmp dword [ebp + eax - 0x180], 0
jne 0x4aaf4e
mov dword [ebp - 0x194], 0
jmp 0x4aaf58
mov dword [ebp - 0x194], 1
mov ecx, dword [ebp - 0x194]
mov dword [ebp - 0x3c], ecx
cmp dword [ebp - 0x3c], 0
je 0x4aaf7c
mov edx, 0x68fc786c
test edx, edx
je 0x4aaf7c
mov dword [ebp - 0x19c], 1
jmp 0x4aaf86
mov dword [ebp - 0x19c], 0
cmp dword [ebp - 0x19c], 0x8ff7673e
jb 0x4aaf9e
mov dword [ebp - 0x1a4], 1
jmp 0x4aafa8
mov dword [ebp - 0x1a4], 0
mov eax, 4
shl eax, 1
mov ecx, dword [ebp + eax - 0x180]
cmp dword [ebp - 0x1a4], ecx
je 0x4aafca
mov dword [ebp - 0x1ac], 1
jmp 0x4aafd4
mov dword [ebp - 0x1ac], 0
mov edx, 4
imul eax, edx, 0
mov ecx, dword [ebp + eax - 0x180]
add ecx, dword [ebp - 0x1ac]
sub ecx, dword [ebp - 0x18]
jne 0x4aaffa
mov dword [ebp - 0x1b4], 0
jmp 0x4ab004
mov dword [ebp - 0x1b4], 1
mov edx, 0xa017779a
sub edx, dword [ebp - 0x1b4]
mov dword [ebp - 0x1fc], edx
cmp dword [ebp - 0x3c], 3
je 0x4ab027
mov dword [ebp - 0x1bc], 1
jmp 0x4ab031
mov dword [ebp - 0x1bc], 0
cmp dword [ebp - 0x1bc], 0x509e
jne 0x4ab049
mov dword [ebp - 0x1c4], 1
jmp 0x4ab053
mov dword [ebp - 0x1c4], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x1c4], eax
je 0x4ab06a
mov dword [ebp - 0x1cc], 1
jmp 0x4ab074
mov dword [ebp - 0x1cc], 0
mov ecx, 4
imul edx, ecx, 0
mov eax, dword [ebp + edx - 0x180]
cmp dword [ebp - 0x1cc], eax
je 0x4ab097
mov dword [ebp - 0x1d4], 1
jmp 0x4ab0a1
mov dword [ebp - 0x1d4], 0
mov ecx, dword [ebp - 0x18]
cmp dword [ebp - 0x1d4], ecx
jne 0x4ab0b8
mov dword [ebp - 0x1dc], 1
jmp 0x4ab0c2
mov dword [ebp - 0x1dc], 0
mov edx, dword [ebp - 0x1dc]
mov dword [ebp - 0xfc], edx
cmp dword [ebp - 0xfc], 0
jne 0x4ab0ef
cmp dword [ebp - 0x3c], 0
jne 0x4ab0ef
cmp dword [ebp - 0x3c], 0
jne 0x4ab0ef
mov dword [ebp - 0x1e4], 0
jmp 0x4ab0f9
mov dword [ebp - 0x1e4], 1
cmp dword [ebp - 0x1e4], 0
jle 0x4ab106
cmp dword [ebp - 0x18], 0
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x5e4], eax
mov ecx, dword [ebp - 0x48]
add ecx, 4
cmp ecx, 0xffffffff
jb 0x4ab129
mov dword [ebp - 0x1ec], 1
jmp 0x4ab133
mov dword [ebp - 0x1ec], 0
cmp dword [ebp - 0x1ec], 0xc8cbf698
ja 0x4ab14b
mov dword [ebp - 0x42c], 1
jmp 0x4ab155
mov dword [ebp - 0x42c], 0
mov edx, 4
shl edx, 1
mov eax, dword [ebp + edx - 0x180]
mov dword [ebp - 0x558], eax
or ecx, 0xffffffff
cmp ecx, 0xae227815
jae 0x4ab180
mov dword [ebp - 0x1f4], 1
jmp 0x4ab18a
mov dword [ebp - 0x1f4], 0
push 0
lea ecx, [ebp - 0x4f4]
call fcn.004281c0
mov edx, dword [ebp - 0x1f4]
mov dword [eax], edx
mov dword [ebp - 0x3c], 0x10
jmp 0x4ab1b1
mov eax, dword [ebp - 0x3c]
add eax, 1
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0x17
jg 0x4ab47a
mov dword [ebp - 0x78], 0xfffffff7
mov dword [ebp - 0x18], 0
jmp 0x4ab1d4
mov ecx, dword [ebp - 0x18]
add ecx, 1
mov dword [ebp - 0x18], ecx
cmp dword [ebp - 0x18], 1
jne 0x4ab396
mov dword [ebp - 0x130], 0xad5834d
mov dword [ebp - 0x48], 0
jmp 0x4ab1fa
mov edx, dword [ebp - 0x48]
add edx, 1
mov dword [ebp - 0x48], edx
cmp dword [ebp - 0x48], 3
jg 0x4ab370
mov dword [ebp - 0x14c], 2
mov dword [ebp - 0x234], 1
mov eax, dword [ebp - 0x48]
cmp dword [ebp + eax*4 - 0x180], 0
je 0x4ab34f
mov ecx, dword [ebp - 0x48]
mov edx, dword [ebp + ecx*4 - 0x180]
mov dword [ebp - 0x5a8], edx
mov eax, dword [ebp - 0x1fc]
mov dword [ebp - 0x560], eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ebp + ecx*4 - 0x180]
cmp dword [ebp - 0x14c], edx
jne 0x4ab267
xor eax, eax
je 0x4ab267
mov dword [ebp - 0x204], 1
jmp 0x4ab271
mov dword [ebp - 0x204], 0
cmp dword [ebp - 0x204], 0x4d9805f6
jg 0x4ab289
mov dword [ebp - 0x20c], 1
jmp 0x4ab293
mov dword [ebp - 0x20c], 0
mov ecx, 4
shl ecx, 1
mov edx, dword [ebp + ecx - 0x180]
cmp dword [ebp - 0x20c], edx
jl 0x4ab2b5
mov dword [ebp - 0x214], 1
jmp 0x4ab2bf
mov dword [ebp - 0x214], 0
mov eax, dword [ebp - 0x214]
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 0
je 0x4ab2f2
cmp dword [ebp - 0x234], 0
jne 0x4ab2f2
mov ecx, 0xfffffff9
test ecx, ecx
jne 0x4ab2f2
mov dword [ebp - 0x21c], 0
jmp 0x4ab2fc
mov dword [ebp - 0x21c], 1
mov edx, dword [ebp - 0x130]
mov eax, dword [ebp - 0x21c]
mov ecx, dword [ebp - 0x130]
sub ecx, 1
mov dword [ebp - 0x130], ecx
cmp edx, eax
jg 0x4ab32d
cmp dword [ebp - 0x78], 0
je 0x4ab32d
mov dword [ebp - 0x184], 1
jmp 0x4ab337
mov dword [ebp - 0x184], 0
cmp dword [ebp - 0x184], 0x73cb4ea9
jge 0x4ab34f
mov dword [ebp - 0x22c], 1
jmp 0x4ab359
mov dword [ebp - 0x22c], 0
mov edx, dword [ebp - 0x22c]
sub edx, 0x599618de
mov dword [ebp - 0x234], edx
jmp 0x4ab1f1
push 0x7bbe
push 1
lea eax, [ebp - 0x18]
push eax
push 0x4635
push 1
lea ecx, [ebp - 0xfc]
push ecx
call fcn.0049f3f0
add esp, 0x18
jmp 0x4ab1cb
mov dword [ebp - 0x23c], 0x61d1
mov dword [ebp - 0x41c], str.uxzki_oeth_ogfky_ziynatrsh_psoqyp_qgeie_prhx_dgqwfr_mnzxde_sta_cyihf_rba_zqk_nihjgvgi
cmp dword [ebp - 0x23c], 0x638a
jle 0x4ab3d6
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_CheckMenuItem]
push 0x2b04
push 0x60ac
push 0
call fcn.004ace90
add esp, 0xc
mov dword [ebp - 0x18], 3
jmp 0x4ab3e8
mov edx, dword [ebp - 0x18]
sub edx, 1
mov dword [ebp - 0x18], edx
cmp dword [ebp - 0x18], 0
jl 0x4ab425
mov dword [ebp - 0x78], 0
jmp 0x4ab400
mov eax, dword [ebp - 0x78]
add eax, 1
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 3
jg 0x4ab423
mov byte [ebp - 0x49], 0
movzx ecx, byte [ebp - 0x49]
test ecx, ecx
je 0x4ab421
push 0x3198
push 0
call fcn.004ae2d0
add esp, 8
jmp 0x4ab3f7
jmp 0x4ab3df
mov dword [ebp - 4], 0xc
push 0x3d5d
lea edx, [ebp - 0x23c]
push edx
push 0
lea eax, [ebp - 0x41c]
push eax
call fcn.004ac490
add esp, 0x10
jmp 0x4ab465
mov dword [ebp - 4], 0xffffffff
jmp 0x4ab475
jmp 0x4ab1a8
lea ecx, [ebp - 0x4f4]
call fcn.004281a0
mov ecx, dword [ebp - 0x30]
mov edx, dword [ecx + 0x24]
and edx, 0x80000000
je 0x4ab49f
mov dword [ebp - 0x244], 1
jmp 0x4ab4a9
mov dword [ebp - 0x244], 0
mov eax, dword [ebp - 0x244]
mov dword [ebp - 0x3f0], eax
mov dword [ebp - 0x274], 0xe8c9f369
mov dword [ebp - 0x5f0], 7
mov dword [ebp - 0x140], 0x2835357f
mov dword [ebp - 0x43c], 0x2aa0a5de
mov dword [ebp - 0x294], 0xffffffff
mov dword [ebp - 0x254], 1
mov dword [ebp - 0x80], 1
mov dword [ebp - 0x3b0], 0x7bc35240
mov dword [ebp - 0x138], 0
mov dword [ebp - 0x3b8], 0xd0c0b807
mov dword [ebp - 0x24c], 0x473c
mov dword [ebp - 0x434], str.lqh_tkuob_imqfxjxq_rdwyniqp_bpbvo_uelsa_pjdur_fqzjkxxyy_jxnxpgvs_ygrmplznh_qmgf
cmp dword [ebp - 0x24c], 0x475a
jle 0x4ab558
push 0x74e5
push 1
push 1
call fcn.004a04d0
add esp, 0xc
push 0x6d51
push 1
push 1
call fcn.0049f6f0
add esp, 0xc
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0x24c], 0x46dd
jge 0x4ab586
push 0x61c5
push 0x4f2
lea ecx, [ebp - 0x434]
push ecx
push 0
call fcn.004a4fa0
add esp, 0x10
jmp 0x4ab5a9
mov dword [ebp - 4], 0xffffffff
jmp 0x4ab5b9
mov dword [ebp - 0xa4], 0
jmp 0x4ab5d4
mov edx, dword [ebp - 0xa4]
add edx, 1
mov dword [ebp - 0xa4], edx
cmp dword [ebp - 0xa4], 3
jge 0x4ab5f0
mov eax, dword [ebp - 0xa4]
mov dword [ebp + eax*4 - 0x608], 0x76fda02
jmp 0x4ab5c5
cmp dword [ebp - 0x274], 0
jne 0x4ab730
mov ecx, dword [ebp - 0x138]
sub ecx, 1
mov dword [ebp - 0x138], ecx
mov edx, dword [ebp - 0x138]
mov dword [ebp - 0x254], edx
cmp dword [ebp - 0x254], 0x7a67d926
jge 0x4ab630
mov dword [ebp - 0x424], 1
jmp 0x4ab63a
mov dword [ebp - 0x424], 0
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x568], eax
mov ecx, dword [ebp - 0x140]
mov dword [ebp - 0x5b8], ecx
mov edx, dword [ebp - 0x80]
mov dword [ebp - 0x570], edx
mov eax, dword [ebp - 0x43c]
mov dword [ebp - 0x5e8], eax
mov ecx, dword [ebp - 0x80]
cmp dword [ebp - 0x140], ecx
jge 0x4ab67b
mov dword [ebp - 0x25c], 1
jmp 0x4ab685
mov dword [ebp - 0x25c], 0
mov edx, dword [ebp - 0x294]
cmp dword [ebp - 0x25c], edx
jne 0x4ab69f
mov dword [ebp - 0x3a4], 1
jmp 0x4ab6a9
mov dword [ebp - 0x3a4], 0
cmp dword [ebp - 0x140], 0x28f0bd90
jl 0x4ab6c1
mov dword [ebp - 0x264], 1
jmp 0x4ab6cb
mov dword [ebp - 0x264], 0
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0x264], eax
jl 0x4ab6e2
mov dword [ebp - 0x3a8], 1
jmp 0x4ab6ec
mov dword [ebp - 0x3a8], 0
mov ecx, 4
imul edx, ecx, 0
mov eax, dword [ebp - 0x80]
cmp dword [ebp + edx - 0x608], eax
jl 0x4ab70c
mov dword [ebp - 0x26c], 1
jmp 0x4ab716
mov dword [ebp - 0x26c], 0
mov ecx, dword [ebp - 0x26c]
add ecx, 0x5a27
jne 0x4ab730
mov dword [ebp - 0x27c], 0
jmp 0x4ab73a
mov dword [ebp - 0x27c], 1
mov edx, dword [ebp - 0x274]
cmp edx, dword [ebp - 0x27c]
jge 0x4ab754
mov dword [ebp - 0x284], 1
jmp 0x4ab75e
mov dword [ebp - 0x284], 0
mov eax, dword [ebp - 0x3b0]
add eax, dword [ebp - 0x284]
cmp eax, 8
jle 0x4ab784
cmp dword [ebp - 0x3b8], 0
je 0x4ab784
mov dword [ebp - 0x28c], 1
jmp 0x4ab78e
mov dword [ebp - 0x28c], 0
mov ecx, dword [ebp - 0x28c]
mov dword [ebp - 0x294], ecx
mov edx, dword [ebp - 0x30]
mov eax, dword [edx + 0x24]
and eax, 0x2000000
je 0x4ab7d3
push 0x4000
mov ecx, dword [ebp - 0x30]
mov edx, dword [ecx + 0x10]
push edx
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax + 8]
push ecx
push 0x7011
push 0x5904
call fcn.0049be10
add esp, 8
call eax
jmp 0x4a9ee4
mov dword [ebp - 0x14], 0xfffffff7
push 3
lea ecx, [ebp - 0x4dc]
call fcn.00428070
mov dword [ebp - 0x44], 0
jmp 0x4ab7f9
mov edx, dword [ebp - 0x44]
add edx, 1
mov dword [ebp - 0x44], edx
cmp dword [ebp - 0x44], 3
jge 0x4ab80f
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x5b4], 1
jmp 0x4ab7f0
mov dword [ebp - 0x44], 0
jmp 0x4ab821
mov ecx, dword [ebp - 0x44]
add ecx, 1
mov dword [ebp - 0x44], ecx
cmp dword [ebp - 0x44], 3
jge 0x4ab83e
mov edx, dword [ebp - 0x44]
push edx
lea ecx, [ebp - 0x4dc]
call fcn.004281c0
mov dword [eax], 0xfffffffe
jmp 0x4ab818
push 0x734d
push 0
push 1
push 0x3b20
call fcn.004a0370
add esp, 0x10
mov dword [ebp - 0x2e4], 0x1a4d
mov dword [ebp - 0x3d8], str.qifhp_ipwkhvsav_ohuxx_nbeu_woqvrv_rqnbeqmv_bdzdlcqxg_mvzp_uosz_bvxnd_fmayryye_amitiqi_adee_lil
cmp dword [ebp - 0x2e4], 0x1b4a
jle 0x4ab8c6
mov dword [ebp - 0xac], 0
jmp 0x4ab88f
mov eax, dword [ebp - 0xac]
add eax, 1
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0x4731
jge 0x4ab8bc
lea ecx, [ebp - 0xac]
push ecx
push 1
push 1
push 0
push 0x46e0
push 0x4bd4
call fcn.004a46a0
add esp, 0x18
jmp 0x4ab880
push 0
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
cmp dword [ebp - 0x14], 0
jne 0x4ab8d0
cmp dword [ebp - 0x14], 0
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x578], edx
cmp dword [ebp - 0x14], 0x238e486a
jle 0x4ab8ee
mov dword [ebp - 0x29c], 1
jmp 0x4ab8f8
mov dword [ebp - 0x29c], 0
cmp dword [ebp - 0x29c], 0xec93cc25
jbe 0x4ab910
mov dword [ebp - 0x2a4], 1
jmp 0x4ab91a
mov dword [ebp - 0x2a4], 0
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x2a4]
jle 0x4ab931
mov dword [ebp - 0x3c0], 1
jmp 0x4ab93b
mov dword [ebp - 0x3c0], 0
cmp dword [ebp - 0x14], 0
jne 0x4ab94d
mov dword [ebp - 0x2ac], 1
jmp 0x4ab957
mov dword [ebp - 0x2ac], 0
cmp dword [ebp - 0x2ac], 3
jl 0x4ab96c
mov dword [ebp - 0x3c8], 1
jmp 0x4ab976
mov dword [ebp - 0x3c8], 0
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x508], ecx
mov edx, dword [ebp - 0x14]
cmp dword [ebp - 0x14], edx
jne 0x4ab993
mov dword [ebp - 0x2b4], 1
jmp 0x4ab99d
mov dword [ebp - 0x2b4], 0
mov eax, 4
imul ecx, eax, 0
mov edx, dword [ebp - 0x2b4]
mov dword [ebp + ecx - 0x5b4], edx
mov eax, 4
imul ecx, eax, 0
cmp dword [ebp + ecx - 0x5b4], 0
jl 0x4ab9d0
mov dword [ebp - 0x2bc], 1
jmp 0x4ab9da
mov dword [ebp - 0x2bc], 0
mov edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0x2bc]
cmp edx, dword [ebp - 0x14]
jle 0x4ab9f4
mov dword [ebp - 0x2c4], 1
jmp 0x4ab9fe
mov dword [ebp - 0x2c4], 0
cmp dword [ebp - 0x2c4], 1
jg 0x4aba19
cmp dword [ebp - 0x14], 0
jne 0x4aba19
mov dword [ebp - 0x2cc], 0
jmp 0x4aba23
mov dword [ebp - 0x2cc], 1
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x2cc]
jge 0x4aba3a
mov dword [ebp - 0x2d4], 1
jmp 0x4aba44
mov dword [ebp - 0x2d4], 0
mov ecx, dword [ebp - 0x14]
cmp dword [ebp - 0x2d4], ecx
jg 0x4aba5b
mov dword [ebp - 0x2dc], 1
jmp 0x4aba65
mov dword [ebp - 0x2dc], 0
cmp dword [ebp - 0x2dc], 0xfffd
je 0x4abb2a
mov dword [ebp - 0x3d0], 0x31c0a9c5
push 0xc3d
push 0xda4
lea edx, [ebp - 0x4dc]
push edx
push 1
push 0x5fcd
push 0x7d1c
push 0x9d9
push 0x7e60
push 0x4942
push 0x2b94
push 0
push 0x3e78
call fcn.004a0590
add esp, 0x30
mov dword [ebp - 0x14], 0xd
jmp 0x4abad1
mov eax, dword [ebp - 0x14]
add eax, 1
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x10
jge 0x4abb25
cmp dword [ebp - 0x3d0], 0
je 0x4abae2
jmp 0x4abb25
mov byte [ebp - 0x5a], 0
push 0x3876
push 0x390a
push 0x183d
push 1
push 0x2be5
push 0x36db
push 0x72bb
lea ecx, [ebp - 0x5a]
push ecx
push 0x1ec
push 0x7fe7
push 1
push 0x7868
call fcn.004a0590
add esp, 0x30
jmp 0x4abac8
jmp 0x4abbb1
mov dword [ebp - 0xc0], 0
jmp 0x4abb45
mov edx, dword [ebp - 0xc0]
add edx, 1
mov dword [ebp - 0xc0], edx
cmp dword [ebp - 0xc0], 3
jge 0x4abb61
mov eax, dword [ebp - 0xc0]
mov dword [ebp + eax*4 - 0x5c4], 0xffff
jmp 0x4abb36
mov ecx, 4
imul edx, ecx, 0
mov eax, dword [ebp + edx - 0x5c4]
sub eax, 1
mov ecx, 4
imul edx, ecx, 0
mov dword [ebp + edx - 0x5c4], eax
mov byte [ebp - 0x59], 0
push 1
push 0x3c74
push 0x7611
push 0
push 0x47bd
lea eax, [ebp - 0x59]
push eax
push 0x7261
push 1
push 0x3382
call fcn.004a0a10
add esp, 0x24
push 0x319f
lea ecx, [ebp - 0x3d8]
push ecx
push 1
lea edx, [ebp - 0x2e4]
push edx
push 0x13b4
push 0x378d
push 1
push 1
call fcn.004a0770
add esp, 0x20
lea ecx, [ebp - 0x4dc]
call fcn.004281a0
push 0x73c
push 0x5e99
push 0x38a3
push 1
lea eax, [ebp - 0x428]
push eax
push 0x106a
push 0x3ba6
push 0
mov ecx, dword [ebp - 0x3e0]
push ecx
push 0x2fe9
mov edx, dword [ebp - 0x3e8]
push edx
push 0x57a0
mov eax, dword [ebp - 0x3f0]
push eax
mov ecx, dword [ebp - 0x30]
push ecx
push 0x4d95
push 1
push 0x960
call fcn.004b16b0
add esp, 0x44
lea edx, [ebp - 0xc8]
push edx
push 0x3e35
lea eax, [ebp - 0x364]
push eax
push 1
push 0x6ea8
push 1
lea ecx, [ebp - 0x30]
push ecx
push 0x1075
call fcn.004a08f0
add esp, 0x20
cmp dword [ebp - 0x364], 0
jbe 0x4ac21e
mov dword [ebp - 0x2ec], 0x44c8
mov dword [ebp - 0x3f8], str.qwrvpvqmg_qpuivgkh_ygebbnhb_vafjl_yibtgns_nnwnjjcho_xsyu_freqnt_itjlhv_scobn_squr_dssrcbnf
cmp dword [ebp - 0x2ec], 0x4689
jle 0x4abd54
mov dword [ebp - 0xe0], 0
jmp 0x4abcbb
mov edx, dword [ebp - 0xe0]
add edx, 1
mov dword [ebp - 0xe0], edx
cmp dword [ebp - 0xe0], 0xd7e
jge 0x4abd54
mov dword [ebp - 0xd8], 0
jmp 0x4abce6
mov eax, dword [ebp - 0xd8]
add eax, 1
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0x5873
jge 0x4abd4f
mov dword [ebp - 0xd0], 0
jmp 0x4abd0d
mov ecx, dword [ebp - 0xd0]
add ecx, 1
mov dword [ebp - 0xd0], ecx
cmp dword [ebp - 0xd0], 0x4256
jge 0x4abd4d
push 1
lea edx, [ebp - 0xd0]
push edx
lea eax, [ebp - 0xd8]
push eax
push 1
push 0x12ea
push 0x101c
lea ecx, [ebp - 0xe0]
push ecx
push 1
push 0x4d14
call fcn.004a0a10
add esp, 0x24
jmp 0x4abcfe
jmp 0x4abcd7
jmp 0x4abcac
mov dword [ebp - 0x6c], 1
push 0
push 0x3910
push 1
lea edx, [ebp - 0x2ec]
push edx
lea eax, [ebp - 0x3f8]
push eax
call fcn.004a0d10
add esp, 0x14
mov dword [ebp - 0x420], 0
mov dword [ebp - 0xe8], 0
jmp 0x4abd9f
mov ecx, dword [ebp - 0xe8]
add ecx, 1
mov dword [ebp - 0xe8], ecx
cmp dword [ebp - 0xe8], 3
jge 0x4abdbb
mov edx, dword [ebp - 0xe8]
mov dword [ebp + edx*4 - 0x5d4], 0xf4864854
jmp 0x4abd90
mov dword [ebp - 0x6c], 0xb
jmp 0x4abdcd
mov eax, dword [ebp - 0x6c]
sub eax, 1
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0xffffffec
jge 0x4ac1ee
mov dword [ebp - 0x58], 1
mov dword [ebp - 0x2c], 2
mov ecx, 1
test ecx, ecx
je 0x4abf34
cmp dword [ebp - 0x6c], 0
jne 0x4abeeb
cmp dword [ebp - 0x6c], 0
je 0x4abec3
mov edx, dword [ebp - 0x58]
cmp dword [ebp - 0x58], edx
jle 0x4abe1a
mov dword [ebp - 0x2f4], 1
jmp 0x4abe24
mov dword [ebp - 0x2f4], 0
cmp dword [ebp - 0x2f4], 0xd76270e7
jb 0x4abe45
mov eax, 0xfffffff7
test eax, eax
jne 0x4abe45
mov dword [ebp - 0x2fc], 0
jmp 0x4abe4f
mov dword [ebp - 0x2fc], 1
mov ecx, dword [ebp - 0x58]
cmp dword [ebp - 0x2fc], ecx
jl 0x4abe6f
mov edx, 0x6a9d9e17
test edx, edx
jne 0x4abe6f
mov dword [ebp - 0x304], 0
jmp 0x4abe79
mov dword [ebp - 0x304], 1
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x304], eax
jle 0x4abe90
mov dword [ebp - 0x30c], 1
jmp 0x4abe9a
mov dword [ebp - 0x30c], 0
mov ecx, dword [ebp - 0x30c]
sub ecx, 0x5229e043
mov edx, 4
imul eax, edx, 0
cmp ecx, dword [ebp + eax - 0x5d4]
jl 0x4abec3
mov dword [ebp - 0x314], 1
jmp 0x4abecd
mov dword [ebp - 0x314], 0
mov ecx, dword [ebp - 0x2c]
cmp dword [ebp - 0x314], ecx
je 0x4abeeb
mov edx, 0x91cb
test edx, edx
jne 0x4abeeb
cmp dword [ebp - 0x58], 0
jne 0x4abeeb
cmp dword [ebp - 0x2c], 0
imul eax, dword [ebp - 0x2c], 0x85d0
cmp eax, dword [ebp - 0x58]
jle 0x4abf0c
mov ecx, 0x1abd
test ecx, ecx
je 0x4abf0c
mov dword [ebp - 0x400], 1
jmp 0x4abf16
mov dword [ebp - 0x400], 0
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x50c], edx
mov eax, 0xd849
test eax, eax
je 0x4abf34
mov dword [ebp - 0x31c], 1
jmp 0x4abf3e
mov dword [ebp - 0x31c], 0
inc dword [eax]
add byte [eax], al
add byte [ebx - 0x72fc2bb3], cl
in al, 0xfc
invalid
mov ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 0x31c]
mov edx, 4
imul eax, edx, 0
cmp ecx, dword [ebp + eax - 0x5d4]
je 0x4abf64
mov dword [ebp - 0x324], 1
jmp 0x4abf6e
mov dword [ebp - 0x324], 0
cmp dword [ebp - 0x324], 0xfffd
jne 0x4ac02c
mov dword [ebp - 0x2c], 0
jmp 0x4abf90
mov ecx, dword [ebp - 0x2c]
add ecx, 1
mov dword [ebp - 0x2c], ecx
cmp dword [ebp - 0x2c], 2
jg 0x4ac027
mov dword [ebp - 0x408], 0x1151
cmp dword [ebp - 0x408], 0x1f80
jle 0x4ac005
mov bl, 0x58
jp 0x4abf39
mov ch, 0x91
imul esp, dword [ebx + 0x6327fd95], 0x15407a86
mov ah, 0xeb
loop 0x4abfb4
xlatb
or ch, byte [edi - 0x20]
xchg ebp, eax
pop ecx
dec eax
push 0x63
push 0x7531
push 1
push 1
call fcn.0049fe10
add esp, 0x10
push 0
call fcn.004a5500
add esp, 4
jmp 0x4abf87
jmp 0x4ac1e9
mov dword [ebp - 0x94], 0xffffffff
push 4
lea ecx, [ebp - 0x4c4]
call fcn.00428070
mov dword [ebp - 0x88], 0
jmp 0x4ac05e
mov edx, dword [ebp - 0x88]
add edx, 1
mov dword [ebp - 0x88], edx
cmp dword [ebp - 0x88], 1
jge 0x4ac07a
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0x33c], 6
jmp 0x4ac04f
lea ecx, [ebp - 0x88]
push ecx
push 0
push 0x7e71
lea edx, [ebp - 0x4c4]
push edx
call fcn.004ae830
add esp, 0x10
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x94], eax
jl 0x4ac0ae
mov dword [ebp - 0x410], 1
jmp 0x4ac0b8
mov dword [ebp - 0x410], 0
cmp dword [ebp - 0x94], 0
jbe 0x4ac0cd
mov dword [ebp - 0x32c], 1
jmp 0x4ac0d7
mov dword [ebp - 0x32c], 0
cmp dword [ebp - 0x32c], 0x54120977
jle 0x4ac0ef
mov dword [ebp - 0x334], 1
jmp 0x4ac0f9
mov dword [ebp - 0x334], 0
mov ecx, 4
imul edx, ecx, 0
mov eax, dword [ebp - 0x334]
mov dword [ebp + edx - 0x33c], eax
mov ecx, 4
imul edx, ecx, 0
mov eax, dword [ebp - 0x94]
cmp dword [ebp + edx - 0x33c], eax
jg 0x4ac131
mov dword [ebp - 0x418], 1
jmp 0x4ac13b
mov dword [ebp - 0x418], 0
cmp dword [ebp - 0x2c], 0x5c2c102d
jge 0x4ac150
mov dword [ebp - 0x344], 1
jmp 0x4ac15a
mov dword [ebp - 0x344], 0
mov ecx, dword [ebp - 0x94]
cmp ecx, dword [ebp - 0x344]
jne 0x4ac174
mov dword [ebp - 0x34c], 1
jmp 0x4ac17e
mov dword [ebp - 0x34c], 0
mov edx, dword [ebp - 0x94]
cmp dword [ebp - 0x34c], edx
je 0x4ac198
mov dword [ebp - 0x354], 1
jmp 0x4ac1a2
mov dword [ebp - 0x354], 0
mov eax, dword [ebp - 0x354]
sub eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x420]
jg 0x4ac1bf
mov dword [ebp - 0x35c], 1
jmp 0x4ac1c9
mov dword [ebp - 0x35c], 0
push 3
lea ecx, [ebp - 0x4c4]
call fcn.004281c0
mov ecx, dword [ebp - 0x35c]
mov dword [eax], ecx
lea ecx, [ebp - 0x4c4]
call fcn.004281a0
jmp 0x4abdc4
lea edx, [ebp - 0x514]
push edx
mov eax, dword [ebp - 0x428]
push eax
mov ecx, dword [ebp - 0x364]
push ecx
mov edx, dword [ebp - 0x30]
mov eax, dword [edx + 8]
push eax
push 0x7011
push 0x5f9a
call fcn.0049be10
add esp, 8
call eax
jmp 0x4a9ee4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret