Function at 0x4b4190
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
mov eax, 0x1438
call fcn.004dca50
lea eax, [ebp - 0x10a4]
mov ecx, 0x20a
lea edx, [ebp - 0xe6e]
lea esi, [ebp - 0x646]
lea edi, [ebp - 0x850]
lea ebx, [ebp - 0x43c]
mov dword [ebp - 0x10cc], eax
lea eax, [ebp - 0xc64]
mov dword [ebp - 0x10d0], eax
mov eax, 0
mov dword [ebp - 0x10d4], eax
mov eax, 0x14
mov dword [ebp - 0x10d8], eax
lea eax, [ebp - 0x10a0]
mov dword [ebp - 0x10dc], eax
lea eax, [ebp - 0x108c]
mov dword [ebp - 0x10e0], eax
lea eax, [ebp - 0x1078]
mov dword [ebp - 0x10e4], eax
lea eax, [ebp - 0x232]
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x28], 0
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [ebp - 0x10e8], ebx
mov dword [ebp - 0x10ec], ecx
mov dword [ebp - 0x10f0], edx
mov dword [ebp - 0x10f4], esi
mov dword [ebp - 0x10f8], edi
call fcn.004dd2d0
mov eax, dword [ebp - 0x10e8]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.004dd2d0
mov eax, dword [ebp - 0x10f4]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.004dd2d0
mov eax, dword [ebp - 0x10f8]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.004dd2d0
mov eax, dword [ebp - 0x10d0]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.004dd2d0
mov eax, dword [ebp - 0x10f0]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.004dd2d0
mov eax, dword [ebp - 0x10e4]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.004dd2d0
mov eax, dword [ebp - 0x10e0]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x14
call fcn.004dd2d0
mov eax, dword [ebp - 0x10dc]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x14
call fcn.004dd2d0
mov dword [ebp - 0x10ac], 0xffffffff
mov eax, dword [ebp - 0x10f0]
mov dword [esp], eax
mov ecx, dword [ebp - 0x10cc]
mov dword [esp + 4], ecx
mov edx, dword [ebp - 0x10f4]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0x20a
mov esi, dword [ebp - 0x10f8]
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], 0x20a
mov edi, dword [ebp - 0x10e8]
mov dword [esp + 0x18], edi
mov dword [esp + 0x1c], 0x20a
mov ebx, dword [ebp - 0x10d0]
mov dword [esp + 0x20], ebx
call fcn.004af130
mov eax, 0x20a
lea ecx, [ebp - 0x1078]
mov dword [esp], ecx
mov dword [esp + 4], 0x20a
mov dword [ebp - 0x10fc], eax
call fcn.00412640
lea eax, [ebp - 0x1078]
mov ecx, dword [0x500334]
mov edx, esp
mov dword [edx + 8], eax
mov dword [edx + 4], 0
mov dword [edx], 0
call ecx
sub esp, 0xc
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10c8], 0x74b63b1
mov eax, dword [ebp - 0x10c8]
mov ecx, eax
sub ecx, 0x80dae1c0
mov dword [ebp - 0x1100], eax
mov dword [ebp - 0x1104], ecx
jg 0x4b4451
jmp 0x4b4435
mov eax, dword [ebp - 0x1100]
sub eax, 0x8087c6cf
mov dword [ebp - 0x1108], eax
je 0x4b57ef
jmp 0x4b52dd
mov eax, dword [ebp - 0x1100]
sub eax, 0x81ab686d
mov dword [ebp - 0x110c], eax
jg 0x4b4489
jmp 0x4b446d
mov eax, dword [ebp - 0x1100]
sub eax, 0x80dae1c1
mov dword [ebp - 0x1110], eax
je 0x4b5943
jmp 0x4b52dd
mov eax, dword [ebp - 0x1100]
sub eax, 0x84433eb4
mov dword [ebp - 0x1114], eax
jg 0x4b44c1
jmp 0x4b44a5
mov eax, dword [ebp - 0x1100]
sub eax, 0x81ab686e
mov dword [ebp - 0x1118], eax
je 0x4b64a0
jmp 0x4b52dd
mov eax, dword [ebp - 0x1100]
sub eax, 0x8934e834
mov dword [ebp - 0x111c], eax
jg 0x4b44f9
jmp 0x4b44dd
mov eax, dword [ebp - 0x1100]
sub eax, 0x84433eb5
mov dword [ebp - 0x1120], eax
je 0x4b6653
jmp 0x4b52dd
mov eax, dword [ebp - 0x1100]
sub eax, 0x8a058353
mov dword [ebp - 0x1124], eax
jg 0x4b4531
jmp 0x4b4515
mov eax, dword [ebp - 0x1100]
sub eax, 0x8934e835
mov dword [ebp - 0x1128], eax
je 0x4b605b
jmp 0x4b52dd
mov eax, dword [ebp - 0x1100]
sub eax, 0x8d63155d
mov dword [ebp - 0x112c], eax
jg 0x4b4569
jmp 0x4b454d
mov eax, dword [ebp - 0x1100]
sub eax, 0x8a058354
mov dword [ebp - 0x1130], eax
je 0x4b5352
jmp 0x4b52dd
mov eax, dword [ebp - 0x1100]
sub eax, 0x94dc84be
mov dword [ebp - 0x1134], eax
jg 0x4b45a1
jmp 0x4b4585
mov eax, dword [ebp - 0x1100]
sub eax, 0x8d63155e
mov dword [ebp - 0x1138], eax
je 0x4b66f9
jmp 0x4b52dd
mov eax, dword [ebp - 0x1100]
sub eax, 0x9b2e8e8c
mov dword [ebp - 0x113c], eax
jg 0x4b45d9
jmp 0x4b45bd
mov eax, dword [ebp - 0x1100]
sub eax, 0x94dc84bf
mov dword [ebp - 0x1140], eax
je 0x4b5620
jmp 0x4b52dd
mov eax, dword [ebp - 0x1100]
sub eax, 0x9d6bce60
mov dword [ebp - 0x1144], eax
jg 0x4b4611
jmp 0x4b45f5
mov eax, dword [ebp - 0x1100]
sub eax, 0x9b2e8e8d
mov dword [ebp - 0x1148], eax
je 0x4b6892
jmp 0x4b52dd
mov eax, dword [ebp - 0x1100]
sub eax, 0xa18c482d
mov dword [ebp - 0x114c], eax
jg 0x4b4649
jmp 0x4b462d
mov eax, dword [ebp - 0x1100]
sub eax, 0x9d6bce61
mov dword [ebp - 0x1150], eax
je 0x4b5b44
jmp 0x4b52dd
mov eax, dword [ebp - 0x1100]
sub eax, 0xa1dd3887
mov dword [ebp - 0x1154], eax
jg 0x4b4681
jmp 0x4b4665
mov eax, dword [ebp - 0x1100]
sub eax, 0xa18c482e
mov dword [ebp - 0x1158], eax
je 0x4b5f58
jmp 0x4b52dd
mov eax, dword [ebp - 0x1100]
sub eax, 0xa5c2f81f
mov dword [ebp - 0x115c], eax
jg 0x4b46b9
jmp 0x4b469d
mov eax, dword [ebp - 0x1100]
sub eax, 0xa1dd3888
mov dword [ebp - 0x1160], eax
je 0x4b60df
jmp 0x4b52dd
mov eax, dword [ebp - 0x1100]
sub eax, 0xa76a4d4a
mov dword [ebp - 0x1164], eax
jg 0x4b46f1
jmp 0x4b46d5
mov eax, dword [ebp - 0x1100]
sub eax, 0xa5c2f820
mov dword [ebp - 0x1168], eax
je 0x4b5796
jmp 0x4b52dd
mov eax, dword [ebp - 0x1100]
sub eax, 0xac011d2a
mov dword [ebp - 0x116c], eax
jg 0x4b4729
jmp 0x4b470d
mov eax, dword [ebp - 0x1100]
sub eax, 0xa76a4d4b
mov dword [ebp - 0x1170], eax
je 0x4b66ea
jmp 0x4b52dd
mov eax, dword [ebp - 0x1100]
sub eax, 0xad90e08d
mov dword [ebp - 0x1174], eax
jg 0x4b4761
jmp 0x4b4745
mov eax, dword [ebp - 0x1100]
sub eax, 0xac011d2b
mov dword [ebp - 0x1178], eax
je 0x4b5efa
jmp 0x4b52dd
mov eax, dword [ebp - 0x1100]
sub eax, 0xb01dbb56
mov dword [ebp - 0x117c], eax
jg 0x4b4799
jmp 0x4b477d
mov eax, dword [ebp - 0x1100]
sub eax, 0xad90e08e
mov dword [ebp - 0x1180], eax
je 0x4b6166
jmp 0x4b52dd
mov eax, dword [ebp - 0x1100]
sub eax, 0xb73446b3
mov dword [ebp - 0x1184], eax
jg 0x4b47d1
jmp 0x4b47b5
mov eax, dword [ebp - 0x1100]
sub eax, 0xb01dbb57
mov dword [ebp - 0x1188], eax
je 0x4b567c
jmp 0x4b52dd
mov eax, dword [ebp - 0x1100]
sub eax, 0xbc48a82d
mov dword [ebp - 0x118c], eax
jg 0x4b4809
jmp 0x4b47ed
mov eax, dword [ebp - 0x1100]
sub eax, 0xb73446b4
mov dword [ebp - 0x1190], eax
je 0x4b5f67
jmp 0x4b52dd
mov eax, dword [ebp - 0x1100]
sub eax, 0xbdc8a3b4
mov dword [ebp - 0x1194], eax
jg 0x4b4841
jmp 0x4b4825
mov eax, dword [ebp - 0x1100]
sub eax, 0xbc48a82e
mov dword [ebp - 0x1198], eax
je 0x4b5fcf
jmp 0x4b52dd
mov eax, dword [ebp - 0x1100]
sub eax, 0x7f2bb455
mov dword [ebp - 0x119c], eax
jg 0x4b52c1
jmp 0x4b485d
mov eax, dword [ebp - 0x1100]
sub eax, 0x7ee0b980
mov dword [ebp - 0x11a0], eax
jg 0x4b52a5
jmp 0x4b4879
mov eax, dword [ebp - 0x1100]
sub eax, 0xbde31c05
mov dword [ebp - 0x11a4], eax
jg 0x4b48b1
jmp 0x4b4895
mov eax, dword [ebp - 0x1100]
sub eax, 0xbdc8a3b5
mov dword [ebp - 0x11a8], eax
je 0x4b6319
jmp 0x4b52dd
mov eax, dword [ebp - 0x1100]
sub eax, 0xc86a900d
mov dword [ebp - 0x11ac], eax
jg 0x4b48e9
jmp 0x4b48cd
mov eax, dword [ebp - 0x1100]
sub eax, 0xbde31c06
mov dword [ebp - 0x11b0], eax
je 0x4b6258
jmp 0x4b52dd
mov eax, dword [ebp - 0x1100]
sub eax, 0xc8c547e9
mov dword [ebp - 0x11b4], eax
jg 0x4b4921
jmp 0x4b4905
mov eax, dword [ebp - 0x1100]
sub eax, 0xc86a900e
mov dword [ebp - 0x11b8], eax
je 0x4b545c
jmp 0x4b52dd
mov eax, dword [ebp - 0x1100]
sub eax, 0xca767ac8
mov dword [ebp - 0x11bc], eax
jg 0x4b4959
jmp 0x4b493d
mov eax, dword [ebp - 0x1100]
sub eax, 0xc8c547ea
mov dword [ebp - 0x11c0], eax
je 0x4b665e
jmp 0x4b52dd
mov eax, dword [ebp - 0x1100]
sub eax, 0xcb34a8eb
mov dword [ebp - 0x11c4], eax
jg 0x4b4991
jmp 0x4b4975
mov eax, dword [ebp - 0x1100]
sub eax, 0xca767ac9
mov dword [ebp - 0x11c8], eax
je 0x4b6276
jmp 0x4b52dd
mov eax, dword [ebp - 0x1100]
sub eax, 0xcccac43f
mov dword [ebp - 0x11cc], eax
jg 0x4b49c9
jmp 0x4b49ad
mov eax, dword [ebp - 0x1100]
sub eax, 0xcb34a8ec
mov dword [ebp - 0x11d0], eax
je 0x4b63f8
jmp 0x4b52dd
mov eax, dword [ebp - 0x1100]
sub eax, 0xcdd220cc
mov dword [ebp - 0x11d4], eax
jg 0x4b4a01
jmp 0x4b49e5
mov eax, dword [ebp - 0x1100]
sub eax, 0xcccac440
mov dword [ebp - 0x11d8], eax
je 0x4b5312
jmp 0x4b52dd
mov eax, dword [ebp - 0x1100]
sub eax, 0xd6046329
mov dword [ebp - 0x11dc], eax
jg 0x4b4a39
jmp 0x4b4a1d
mov eax, dword [ebp - 0x1100]
sub eax, 0xcdd220cd
mov dword [ebp - 0x11e0], eax
je 0x4b5787
jmp 0x4b52dd
mov eax, dword [ebp - 0x1100]
sub eax, 0xd8fc77d4
mov dword [ebp - 0x11e4], eax
jg 0x4b4a71
jmp 0x4b4a55
mov eax, dword [ebp - 0x1100]
sub eax, 0xd604632a
mov dword [ebp - 0x11e8], eax
je 0x4b562f
jmp 0x4b52dd
mov eax, dword [ebp - 0x1100]
sub eax, 0xdd2400ca
mov dword [ebp - 0x11ec], eax
jg 0x4b4aa9
jmp 0x4b4a8d
mov eax, dword [ebp - 0x1100]
sub eax, 0xd8fc77d5
mov dword [ebp - 0x11f0], eax
je 0x4b5ba2
jmp 0x4b52dd
mov eax, dword [ebp - 0x1100]
sub eax, 0xe110c14a
mov dword [ebp - 0x11f4], eax
jg 0x4b4ae1
jmp 0x4b4ac5
mov eax, dword [ebp - 0x1100]
sub eax, 0xdd2400cb
mov dword [ebp - 0x11f8], eax
je 0x4b683f
jmp 0x4b52dd
mov eax, dword [ebp - 0x1100]
sub eax, 0xe3ddd9af
mov dword [ebp - 0x11fc], eax
jg 0x4b4b19
jmp 0x4b4afd
mov eax, dword [ebp - 0x1100]
sub eax, 0xe110c14b
mov dword [ebp - 0x1200], eax
je 0x4b5a9c
jmp 0x4b52dd
mov eax, dword [ebp - 0x1100]
sub eax, 0xe61e4424
mov dword [ebp - 0x1204], eax
jg 0x4b4b51
jmp 0x4b4b35
mov eax, dword [ebp - 0x1100]
sub eax, 0xe3ddd9b0
mov dword [ebp - 0x1208], eax
je 0x4b53eb
jmp 0x4b52dd
mov eax, dword [ebp - 0x1100]
sub eax, 0xe83eeb14
mov dword [ebp - 0x120c], eax
jg 0x4b4b89
jmp 0x4b4b6d
mov eax, dword [ebp - 0x1100]
sub eax, 0xe61e4425
mov dword [ebp - 0x1210], eax
je 0x4b5e8d
jmp 0x4b52dd
mov eax, dword [ebp - 0x1100]
sub eax, 0xe9913ec8
mov dword [ebp - 0x1214], eax
jg 0x4b4bc1
jmp 0x4b4ba5
mov eax, dword [ebp - 0x1100]
sub eax, 0xe83eeb15
mov dword [ebp - 0x1218], eax
je 0x4b684e
jmp 0x4b52dd
mov eax, dword [ebp - 0x1100]
sub eax, 0xeb8347d0
mov dword [ebp - 0x121c], eax
jg 0x4b4bf9
jmp 0x4b4bdd
mov eax, dword [ebp - 0x1100]
sub eax, 0xe9913ec9
mov dword [ebp - 0x1220], eax
je 0x4b59a1
jmp 0x4b52dd
mov eax, dword [ebp - 0x1100]
sub eax, 0xfa1b8faf
mov dword [ebp - 0x1224], eax
jg 0x4b4c31
jmp 0x4b4c15
mov eax, dword [ebp - 0x1100]
sub eax, 0xeb8347d1
mov dword [ebp - 0x1228], eax
je 0x4b547a
jmp 0x4b52dd
mov eax, dword [ebp - 0x1100]
sub eax, 0xfd1e5fe2
mov dword [ebp - 0x122c], eax
jg 0x4b4c69
jmp 0x4b4c4d
mov eax, dword [ebp - 0x1100]
sub eax, 0xfa1b8fb0
mov dword [ebp - 0x1230], eax
je 0x4b5489
jmp 0x4b52dd
mov eax, dword [ebp - 0x1100]
sub eax, 0xfe637fb1
mov dword [ebp - 0x1234], eax
jg 0x4b4ca1
jmp 0x4b4c85
mov eax, dword [ebp - 0x1100]
sub eax, 0xfd1e5fe3
mov dword [ebp - 0x1238], eax
je 0x4b686c
jmp 0x4b52dd
mov eax, dword [ebp - 0x1100]
sub eax, 0xff4130e0
mov dword [ebp - 0x123c], eax
jg 0x4b4cd9
jmp 0x4b4cbd
mov eax, dword [ebp - 0x1100]
sub eax, 0xfe637fb2
mov dword [ebp - 0x1240], eax
je 0x4b6148
jmp 0x4b52dd
mov eax, dword [ebp - 0x1100]
sub eax, 0xffe00085
mov dword [ebp - 0x1244], eax
jg 0x4b4d11
jmp 0x4b4cf5
mov eax, dword [ebp - 0x1100]
sub eax, 0xff4130e1
mov dword [ebp - 0x1248], eax
je 0x4b568b
jmp 0x4b52dd
mov eax, dword [ebp - 0x1100]
sub eax, 0x162e8c2
mov dword [ebp - 0x124c], eax
jg 0x4b4d49
jmp 0x4b4d2d
mov eax, dword [ebp - 0x1100]
sub eax, 0xffe00086
mov dword [ebp - 0x1250], eax
je 0x4b6081
jmp 0x4b52dd
mov eax, dword [ebp - 0x1100]
sub eax, 0x3bd7e88
mov dword [ebp - 0x1254], eax
jg 0x4b4d81
jmp 0x4b4d65
mov eax, dword [ebp - 0x1100]
sub eax, 0x162e8c3
mov dword [ebp - 0x1258], eax
je 0x4b6604
jmp 0x4b52dd
mov eax, dword [ebp - 0x1100]
sub eax, 0x3dfd199
mov dword [ebp - 0x125c], eax
jg 0x4b4db9
jmp 0x4b4d9d
mov eax, dword [ebp - 0x1100]
sub eax, 0x3bd7e89
mov dword [ebp - 0x1260], eax
je 0x4b5e9c
jmp 0x4b52dd
mov eax, dword [ebp - 0x1100]
sub eax, 0x74ebcadd
mov dword [ebp - 0x1264], eax
jg 0x4b5289
jmp 0x4b4dd5
mov eax, dword [ebp - 0x1100]
sub eax, 0x74d4e9d4
mov dword [ebp - 0x1268], eax
jg 0x4b526d
jmp 0x4b4df1
mov eax, dword [ebp - 0x1100]
sub eax, 0x746ac93b
mov dword [ebp - 0x126c], eax
jg 0x4b5251
jmp 0x4b4e0d
mov eax, dword [ebp - 0x1100]
sub eax, 0x69652ee7
mov dword [ebp - 0x1270], eax
jg 0x4b5235
jmp 0x4b4e29
mov eax, dword [ebp - 0x1100]
sub eax, 0x57abb969
mov dword [ebp - 0x1274], eax
jg 0x4b5219
jmp 0x4b4e45
mov eax, dword [ebp - 0x1100]
sub eax, 0x5684ba45
mov dword [ebp - 0x1278], eax
jg 0x4b51fd
jmp 0x4b4e61
mov eax, dword [ebp - 0x1100]
sub eax, 0x4ada289b
mov dword [ebp - 0x127c], eax
jg 0x4b51e1
jmp 0x4b4e7d
mov eax, dword [ebp - 0x1100]
sub eax, 0x44f90b4c
mov dword [ebp - 0x1280], eax
jg 0x4b51c5
jmp 0x4b4e99
mov eax, dword [ebp - 0x1100]
sub eax, 0x4170a6eb
mov dword [ebp - 0x1284], eax
jg 0x4b51a9
jmp 0x4b4eb5
mov eax, dword [ebp - 0x1100]
sub eax, 0x396e1af8
mov dword [ebp - 0x1288], eax
jg 0x4b518d
jmp 0x4b4ed1
mov eax, dword [ebp - 0x1100]
sub eax, 0x3914ab92
mov dword [ebp - 0x128c], eax
jg 0x4b5171
jmp 0x4b4eed
mov eax, dword [ebp - 0x1100]
sub eax, 0x2f491e4a
mov dword [ebp - 0x1290], eax
jg 0x4b5155
jmp 0x4b4f09
mov eax, dword [ebp - 0x1100]
sub eax, 0x2f222221
mov dword [ebp - 0x1294], eax
jg 0x4b5139
jmp 0x4b4f25
mov eax, dword [ebp - 0x1100]
sub eax, 0x29a2e08e
mov dword [ebp - 0x1298], eax
jg 0x4b511d
jmp 0x4b4f41
mov eax, dword [ebp - 0x1100]
sub eax, 0x2686a456
mov dword [ebp - 0x129c], eax
jg 0x4b5101
jmp 0x4b4f5d
mov eax, dword [ebp - 0x1100]
sub eax, 0x25396c10
mov dword [ebp - 0x12a0], eax
jg 0x4b50e5
jmp 0x4b4f79
mov eax, dword [ebp - 0x1100]
sub eax, 0x24e0429c
mov dword [ebp - 0x12a4], eax
jg 0x4b50c9
jmp 0x4b4f95
mov eax, dword [ebp - 0x1100]
sub eax, 0x237faad2
mov dword [ebp - 0x12a8], eax
jg 0x4b50ad
jmp 0x4b4fb1
mov eax, dword [ebp - 0x1100]
sub eax, 0x21d8616c
mov dword [ebp - 0x12ac], eax
jg 0x4b5091
jmp 0x4b4fcd
mov eax, dword [ebp - 0x1100]
sub eax, 0xcdfb32f
mov dword [ebp - 0x12b0], eax
jg 0x4b5075
jmp 0x4b4fe9
mov eax, dword [ebp - 0x1100]
sub eax, 0x8a86a29
mov dword [ebp - 0x12b4], eax
jg 0x4b5059
jmp 0x4b5005
mov eax, dword [ebp - 0x1100]
sub eax, 0x3dfd19a
mov dword [ebp - 0x12b8], eax
je 0x4b66db
jmp 0x4b5021
mov eax, dword [ebp - 0x1100]
sub eax, 0x3f1e2e4
mov dword [ebp - 0x12bc], eax
je 0x4b65f5
jmp 0x4b503d
mov eax, dword [ebp - 0x1100]
sub eax, 0x74b63b1
mov dword [ebp - 0x12c0], eax
je 0x4b52e2
jmp 0x4b52dd
mov eax, dword [ebp - 0x1100]
sub eax, 0x8a86a2a
mov dword [ebp - 0x12c4], eax
je 0x4b603d
jmp 0x4b52dd
mov eax, dword [ebp - 0x1100]
sub eax, 0xcdfb330
mov dword [ebp - 0x12c8], eax
je 0x4b6509
jmp 0x4b52dd
mov eax, dword [ebp - 0x1100]
sub eax, 0x21d8616d
mov dword [ebp - 0x12cc], eax
je 0x4b685d
jmp 0x4b52dd
mov eax, dword [ebp - 0x1100]
sub eax, 0x237faad3
mov dword [ebp - 0x12d0], eax
je 0x4b5f76
jmp 0x4b52dd
mov eax, dword [ebp - 0x1100]
sub eax, 0x24e0429d
mov dword [ebp - 0x12d4], eax
je 0x4b5d75
jmp 0x4b52dd
mov eax, dword [ebp - 0x1100]
sub eax, 0x25396c11
mov dword [ebp - 0x12d8], eax
je 0x4b68a1
jmp 0x4b52dd
mov eax, dword [ebp - 0x1100]
sub eax, 0x2686a457
mov dword [ebp - 0x12dc], eax
je 0x4b6830
jmp 0x4b52dd
mov eax, dword [ebp - 0x1100]
sub eax, 0x29a2e08f
mov dword [ebp - 0x12e0], eax
je 0x4b5d2f
jmp 0x4b52dd
mov eax, dword [ebp - 0x1100]
sub eax, 0x2f222222
mov dword [ebp - 0x12e4], eax
je 0x4b5d5c
jmp 0x4b52dd
mov eax, dword [ebp - 0x1100]
sub eax, 0x2f491e4b
mov dword [ebp - 0x12e8], eax
je 0x4b59fa
jmp 0x4b52dd
mov eax, dword [ebp - 0x1100]
sub eax, 0x3914ab93
mov dword [ebp - 0x12ec], eax
je 0x4b618c
jmp 0x4b52dd
mov eax, dword [ebp - 0x1100]
sub eax, 0x396e1af9
mov dword [ebp - 0x12f0], eax
je 0x4b6527
jmp 0x4b52dd
mov eax, dword [ebp - 0x1100]
sub eax, 0x4170a6ec
mov dword [ebp - 0x12f4], eax
je 0x4b666d
jmp 0x4b52dd
mov eax, dword [ebp - 0x1100]
sub eax, 0x44f90b4d
mov dword [ebp - 0x12f8], eax
je 0x4b5303
jmp 0x4b52dd
mov eax, dword [ebp - 0x1100]
sub eax, 0x4ada289c
mov dword [ebp - 0x12fc], eax
je 0x4b6585
jmp 0x4b52dd
mov eax, dword [ebp - 0x1100]
sub eax, 0x5684ba46
mov dword [ebp - 0x1300], eax
je 0x4b5d4d
jmp 0x4b52dd
mov eax, dword [ebp - 0x1100]
sub eax, 0x57abb96a
mov dword [ebp - 0x1304], eax
je 0x4b5a3e
jmp 0x4b52dd
mov eax, dword [ebp - 0x1100]
sub eax, 0x69652ee8
mov dword [ebp - 0x1308], eax
je 0x4b6407
jmp 0x4b52dd
mov eax, dword [ebp - 0x1100]
sub eax, 0x746ac93c
mov dword [ebp - 0x130c], eax
je 0x4b6641
jmp 0x4b52dd
mov eax, dword [ebp - 0x1100]
sub eax, 0x74d4e9d5
mov dword [ebp - 0x1310], eax
je 0x4b5b35
jmp 0x4b52dd
mov eax, dword [ebp - 0x1100]
sub eax, 0x74ebcade
mov dword [ebp - 0x1314], eax
je 0x4b5925
jmp 0x4b52dd
mov eax, dword [ebp - 0x1100]
sub eax, 0x7ee0b981
mov dword [ebp - 0x1318], eax
je 0x4b5a09
jmp 0x4b52dd
mov eax, dword [ebp - 0x1100]
sub eax, 0x7f2bb456
mov dword [ebp - 0x131c], eax
je 0x4b61ea
jmp 0x4b52dd
jmp 0x4b68c2
mov eax, 0xcccac440
mov ecx, 0x44f90b4d
mov edx, dword [ebp - 0x18]
cmp edx, 0
cmove eax, ecx
mov dword [ebp - 0x10c8], eax
jmp 0x4b68c2
mov dword [ebp - 0x10c8], 0x24e0429d
jmp 0x4b68c2
mov eax, dword [0x500350]
mov ecx, dword [ebp - 0x20]
mov edx, esp
mov dword [edx], ecx
mov dword [edx + 4], 0xffffffff
call eax
sub esp, 8
mov ecx, 0xfa1b8fb0
mov edx, 0x8a058354
mov dword [ebp - 0x10a8], eax
cmp dword [ebp - 0x10a8], 0
cmovne ecx, edx
mov dword [ebp - 0x10c8], ecx
jmp 0x4b68c2
mov eax, 0xc8c547ea
mov ecx, 0xe3ddd9b0
mov dl, 1
mov esi, dword [0x500048]
mov edi, dword [0x500044]
mov ebx, esi
add ebx, 0xc7ed7dca
sub ebx, 1
sub ebx, 0xc7ed7dca
imul esi, ebx
and esi, 1
cmp esi, 0
sete dh
cmp edi, 0xa
setl bl
mov bh, dh
xor bh, 1
mov dword [ebp - 0x1320], eax
mov al, bl
xor al, 1
xor dl, 1
mov ah, bh
and ah, 1
and dh, dl
mov byte [ebp - 0x1321], al
and al, 1
and bl, dl
or ah, dh
or al, bl
xor ah, al
mov al, byte [ebp - 0x1321]
or bh, al
xor bh, 1
or dl, 1
and bh, dl
or ah, bh
test ah, 1
mov esi, dword [ebp - 0x1320]
cmovne esi, ecx
mov dword [ebp - 0x10c8], esi
jmp 0x4b68c2
mov eax, 0xc8c547ea
mov ecx, 0xc86a900e
cmp dword [ebp - 0x10a8], 0x80
setne dl
and dl, 1
mov byte [ebp - 0x13], dl
mov esi, dword [0x500048]
mov edi, dword [0x500044]
mov ebx, esi
sub ebx, 0xae59eeac
sub ebx, 1
add ebx, 0xae59eeac
imul esi, ebx
and esi, 1
cmp esi, 0
sete dl
cmp edi, 0xa
setl dh
mov bl, dl
and bl, dh
xor dl, dh
or bl, dl
test bl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c8], eax
jmp 0x4b68c2
mov eax, 0xfa1b8fb0
mov ecx, 0xeb8347d1
mov dl, byte [ebp - 0x13]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c8], eax
jmp 0x4b68c2
mov dword [ebp - 0x10c8], 0x24e0429d
jmp 0x4b68c2
mov eax, 0
mov ecx, 0x20a
lea edx, [ebp - 0xa5a]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [ebp - 0x1328], eax
mov dword [ebp - 0x132c], ecx
call fcn.0040dd40
mov ecx, 0x104
lea edx, [0x4fea3a]
mov esi, 3
lea edi, [ebp - 0xa5a]
mov dword [esp], edi
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], 3
mov dword [ebp - 0x1330], eax
mov dword [ebp - 0x1334], ecx
mov dword [ebp - 0x1338], esi
call fcn.0040e770
lea ecx, [ebp - 0x43c]
mov dword [esp], ecx
mov dword [ebp - 0x133c], eax
call fcn.0040f980
mov ecx, 0x101
lea edx, [ebp - 0xa5a]
lea esi, [ebp - 0x43c]
add edx, 6
mov dword [esp], edx
mov dword [esp + 4], 0x101
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [ebp - 0x1340], ecx
call fcn.0040e770
lea ecx, [ebp - 0x232]
mov edx, dword [str._vnMb]
movzx edx, word [edx]
mov dword [ebp - 0x10b0], edx
mov edx, dword [ebp - 0x10b0]
add edx, 0xca2c86e0
add edx, 1
sub edx, 0xca2c86e0
mov esi, dword [str._vnMb]
movzx edx, word [esi + edx*2]
mov dword [ebp - 0x10b4], edx
mov edx, dword [ebp - 0x10b4]
mov esi, dword [str._vnMb]
mov edi, dword [ebp - 0x10b0]
shl edi, 1
add esi, edi
add esi, 4
mov edi, dword [str._vnMb]
add edi, 2
mov ebx, dword [ebp - 0x10b0]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edx
mov dword [ebp - 0x1344], eax
call fcn.0040c030
lea eax, [ebp - 0x646]
mov ecx, dword [0x50035c]
mov edx, esp
mov dword [edx + 8], 0
mov dword [edx + 0xc], eax
mov dword [edx + 4], 0
mov dword [edx], 0
call ecx
sub esp, 0x10
mov ecx, 0xd604632a
mov edx, 0x94dc84bf
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
cmove ecx, edx
mov dword [ebp - 0x10c8], ecx
jmp 0x4b68c2
mov dword [ebp - 0x10c8], 0x24e0429d
jmp 0x4b68c2
lea eax, [ebp - 0x1c]
lea ecx, [ebp - 0x28]
lea edx, [ebp - 0xe6e]
lea esi, [ebp - 0x646]
mov edi, dword [ebp - 0x10a4]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], esi
call fcn.004b33a0
mov ecx, 0xff4130e1
mov edx, 0xb01dbb57
cmp eax, 0
cmovl ecx, edx
mov dword [ebp - 0x10c8], ecx
jmp 0x4b68c2
mov dword [ebp - 0x10c8], 0x24e0429d
jmp 0x4b68c2
lea eax, [ebp - 0x108c]
mov ecx, dword [0x4f2768]
movzx ecx, word [ecx]
mov dword [ebp - 0x10b8], ecx
mov ecx, dword [ebp - 0x10b8]
add ecx, 0xba6fa58c
add ecx, 1
sub ecx, 0xba6fa58c
mov edx, dword [0x4f2768]
movzx ecx, word [edx + ecx*2]
mov dword [ebp - 0x10bc], ecx
mov ecx, dword [ebp - 0x10bc]
mov edx, dword [0x4f2768]
mov esi, dword [ebp - 0x10b8]
shl esi, 1
add edx, esi
add edx, 4
mov esi, dword [0x4f2768]
add esi, 2
mov edi, dword [ebp - 0x10b8]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], esi
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
call fcn.0040c030
mov eax, 0x40
mov ecx, 0
mov edx, 1
lea esi, [ebp - 0x232]
lea edi, [ebp - 0xa5a]
lea ebx, [ebp - 0x108c]
mov dword [esp], esi
mov dword [esp + 4], edi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 0x40
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 1
mov dword [ebp - 0x1348], eax
mov dword [ebp - 0x134c], ecx
mov dword [ebp - 0x1350], edx
call fcn.004b2960
mov ecx, 0xa5c2f820
mov edx, 0xcdd220cd
cmp eax, 0
cmovl ecx, edx
mov dword [ebp - 0x10c8], ecx
jmp 0x4b68c2
mov dword [ebp - 0x10c8], 0x24e0429d
jmp 0x4b68c2
mov eax, 0x4170a6ec
mov ecx, 0x8087c6cf
mov edx, 0
mov esi, dword [0x500048]
mov edi, dword [0x500044]
sub edx, 1
mov ebx, esi
add ebx, edx
imul esi, ebx
and esi, 1
cmp esi, 0
sete dl
cmp edi, 0xa
setl dh
mov bl, dl
and bl, dh
xor dl, dh
or bl, dl
test bl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c8], eax
jmp 0x4b68c2
mov eax, 0
mov ecx, 0x40
mov edx, 1
lea esi, [ebp - 0xc64]
lea edi, [ebp - 0x108c]
mov dword [esp], esi
mov dword [esp + 4], 0
mov dword [esp + 8], edi
mov dword [esp + 0xc], 0x40
mov dword [esp + 0x10], 1
mov dword [esp + 0x14], 1
mov dword [ebp - 0x1354], eax
mov dword [ebp - 0x1358], ecx
mov dword [ebp - 0x135c], edx
call fcn.004b2960
mov ecx, 0x4170a6ec
mov edx, 0x74ebcade
mov bl, 1
mov esi, 0
cmp eax, 0
setl bh
and bh, 1
mov byte [ebp - 0x12], bh
mov eax, dword [0x500048]
mov edi, dword [0x500044]
sub esi, 1
mov dword [ebp - 0x1360], eax
add eax, esi
mov esi, dword [ebp - 0x1360]
imul esi, eax
and esi, 1
cmp esi, 0
sete bh
cmp edi, 0xa
setl al
mov ah, bh
xor ah, 1
mov byte [ebp - 0x1361], al
xor al, 1
xor bl, 0
mov byte [ebp - 0x1362], al
mov al, ah
and al, 0
and bh, bl
mov byte [ebp - 0x1363], al
mov al, byte [ebp - 0x1362]
and al, 0
mov byte [ebp - 0x1364], al
mov al, byte [ebp - 0x1361]
and al, bl
mov byte [ebp - 0x1365], al
mov al, byte [ebp - 0x1363]
or al, bh
mov bh, byte [ebp - 0x1364]
mov byte [ebp - 0x1366], al
mov al, byte [ebp - 0x1365]
or bh, al
mov al, byte [ebp - 0x1366]
xor al, bh
mov bh, byte [ebp - 0x1362]
or ah, bh
xor ah, 1
or bl, 0
and ah, bl
or al, ah
test al, 1
cmovne ecx, edx
mov dword [ebp - 0x10c8], ecx
jmp 0x4b68c2
mov eax, 0x7ee0b981
mov ecx, 0x80dae1c1
mov dl, byte [ebp - 0x12]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c8], eax
jmp 0x4b68c2
mov eax, 0x3dfd19a
mov ecx, 0xe9913ec9
mov edx, dword [0x500048]
mov esi, dword [0x500044]
mov edi, edx
sub edi, 0xa35aaac
sub edi, 1
add edi, 0xa35aaac
imul edx, edi
and edx, 1
cmp edx, 0
sete bl
cmp esi, 0xa
setl bh
mov dl, bl
and dl, bh
xor bl, bh
or dl, bl
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c8], eax
jmp 0x4b68c2
mov eax, 0x3dfd19a
mov ecx, 0x2f491e4b
mov edx, 0
mov esi, dword [0x500048]
mov edi, dword [0x500044]
sub edx, 1
mov ebx, esi
add ebx, edx
imul esi, ebx
and esi, 1
cmp esi, 0
sete dl
cmp edi, 0xa
setl dh
mov bl, dl
and bl, dh
xor dl, dh
or bl, dl
test bl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c8], eax
jmp 0x4b68c2
mov dword [ebp - 0x10c8], 0x24e0429d
jmp 0x4b68c2
mov eax, dword [0x500350]
mov ecx, dword [ebp - 0x24]
mov edx, esp
mov dword [edx], ecx
mov dword [edx + 4], 0xffffffff
call eax
sub esp, 8
mov ecx, 0x9d6bce61
mov edx, 0x57abb96a
cmp eax, 0
cmovne ecx, edx
mov dword [ebp - 0x10c8], ecx
jmp 0x4b68c2
mov eax, 0xa76a4d4b
mov ecx, 0xe110c14b
mov edx, dword [0x500048]
mov esi, dword [0x500044]
mov edi, edx
add edi, 0xb356ce14
sub edi, 1
sub edi, 0xb356ce14
imul edx, edi
and edx, 1
cmp edx, 0
sete bl
cmp esi, 0xa
setl bh
mov dl, bl
and dl, bh
xor bl, bh
or dl, bl
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c8], eax
jmp 0x4b68c2
mov eax, 0xa76a4d4b
mov ecx, 0x74d4e9d5
mov dl, 1
mov esi, dword [0x500048]
mov edi, dword [0x500044]
mov ebx, esi
sub ebx, 0xbdfe1bb0
sub ebx, 1
add ebx, 0xbdfe1bb0
imul esi, ebx
and esi, 1
cmp esi, 0
sete dh
cmp edi, 0xa
setl bl
mov bh, dh
xor bh, 1
mov dword [ebp - 0x136c], eax
mov al, bl
xor al, 1
xor dl, 0
mov ah, bh
and ah, 0
and dh, dl
mov byte [ebp - 0x136d], al
and al, 0
and bl, dl
or ah, dh
or al, bl
xor ah, al
mov al, byte [ebp - 0x136d]
or bh, al
xor bh, 1
or dl, 0
and bh, dl
or ah, bh
test ah, 1
mov esi, dword [ebp - 0x136c]
cmovne esi, ecx
mov dword [ebp - 0x10c8], esi
jmp 0x4b68c2
mov dword [ebp - 0x10c8], 0xb73446b4
jmp 0x4b68c2
mov eax, 0x8d63155e
mov ecx, 0xd8fc77d5
mov edx, dword [0x500048]
mov esi, dword [0x500044]
mov edi, edx
sub edi, 0x6bea563e
sub edi, 1
add edi, 0x6bea563e
imul edx, edi
and edx, 1
cmp edx, 0
sete bl
cmp esi, 0xa
setl bh
mov dl, bl
and dl, bh
xor bl, bh
or dl, bl
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c8], eax
jmp 0x4b68c2
mov eax, 0
mov ecx, 0x20a
lea edx, [ebp - 0xa5a]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [ebp - 0x1374], eax
mov dword [ebp - 0x1378], ecx
call fcn.0040dd40
mov ecx, 0x104
lea edx, str._q__u
mov esi, 6
lea edi, [ebp - 0xa5a]
mov dword [esp], edi
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], 6
mov dword [ebp - 0x137c], eax
mov dword [ebp - 0x1380], ecx
mov dword [ebp - 0x1384], esi
call fcn.0040e770
lea ecx, [ebp - 0x43c]
mov dword [esp], ecx
mov dword [ebp - 0x1388], eax
call fcn.0040f980
mov ecx, 0xfe
lea edx, [ebp - 0xa5a]
lea esi, [ebp - 0x43c]
add edx, 0xc
mov dword [esp], edx
mov dword [esp + 4], 0xfe
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [ebp - 0x138c], ecx
call fcn.0040e770
mov ecx, 0x40
mov edx, 0
mov esi, 1
lea edi, [ebp - 0x232]
lea ebx, [ebp - 0xa5a]
mov dword [ebp - 0x1390], eax
lea eax, [ebp - 0x108c]
mov dword [esp], edi
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x40
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 1
mov dword [ebp - 0x1394], esi
mov dword [ebp - 0x1398], ecx
mov dword [ebp - 0x139c], edx
call fcn.004b2960
mov ecx, 0x8d63155e
mov edx, 0x29a2e08f
cmp eax, 0
setl al
and al, 1
mov byte [ebp - 0x11], al
mov esi, dword [0x500048]
mov edi, dword [0x500044]
mov ebx, esi
add ebx, 0xf3323b64
sub ebx, 1
sub ebx, 0xf3323b64
imul esi, ebx
and esi, 1
cmp esi, 0
sete al
cmp edi, 0xa
setl ah
mov bl, al
and bl, ah
xor al, ah
or bl, al
test bl, 1
cmovne ecx, edx
mov dword [ebp - 0x10c8], ecx
jmp 0x4b68c2
mov eax, 0x2f222222
mov ecx, 0x5684ba46
mov dl, byte [ebp - 0x11]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c8], eax
jmp 0x4b68c2
mov dword [ebp - 0x10c8], 0x24e0429d
jmp 0x4b68c2
mov dword [ebp - 0x10ac], 1
mov dword [ebp - 0x10c8], 0x237faad3
jmp 0x4b68c2
lea eax, [ebp - 0x850]
mov ecx, dword [0x500358]
mov edx, esp
mov dword [edx], eax
call ecx
sub esp, 4
lea ecx, [ebp - 0x10a0]
mov edx, 0
mov esi, dword [0x4f276c]
movzx esi, word [esi]
mov dword [ebp - 0x10c0], esi
mov esi, dword [ebp - 0x10c0]
mov edi, edx
sub edi, esi
mov esi, edx
sub esi, 1
add edi, esi
sub edx, edi
mov esi, dword [0x4f276c]
movzx edx, word [esi + edx*2]
mov dword [ebp - 0x10c4], edx
mov edx, dword [ebp - 0x10c4]
mov esi, dword [0x4f276c]
mov edi, dword [ebp - 0x10c0]
shl edi, 1
add esi, edi
add esi, 4
mov edi, dword [0x4f276c]
add edi, 2
mov ebx, dword [ebp - 0x10c0]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edx
mov dword [ebp - 0x13a0], eax
call fcn.0040c030
mov eax, 0
mov ecx, 0x4540
mov edx, 1
lea esi, [ebp - 0xe6e]
lea edi, [ebp - 0x10a0]
mov dword [esp], esi
mov dword [esp + 4], 0
mov dword [esp + 8], edi
mov dword [esp + 0xc], 0x4540
mov dword [esp + 0x10], 1
mov dword [esp + 0x14], 0
mov dword [ebp - 0x13a4], eax
mov dword [ebp - 0x13a8], ecx
mov dword [ebp - 0x13ac], edx
call fcn.004b2960
mov ecx, 0x3bd7e89
mov edx, 0xe61e4425
cmp eax, 0
cmovl ecx, edx
mov dword [ebp - 0x10c8], ecx
jmp 0x4b68c2
mov dword [ebp - 0x10c8], 0x24e0429d
jmp 0x4b68c2
mov eax, 0x2686a457
mov ecx, 0xac011d2b
mov edx, dword [0x500048]
mov esi, dword [0x500044]
mov edi, edx
add edi, 0x17ce7184
sub edi, 1
sub edi, 0x17ce7184
imul edx, edi
and edx, 1
cmp edx, 0
sete bl
cmp esi, 0xa
setl bh
mov dl, bl
and dl, bh
xor bl, bh
or dl, bl
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c8], eax
jmp 0x4b68c2
mov eax, 0x2686a457
mov ecx, 0xa18c482e
mov edx, dword [0x500048]
mov esi, dword [0x500044]
mov edi, edx
add edi, 0x3382abc2
sub edi, 1
sub edi, 0x3382abc2
imul edx, edi
and edx, 1
cmp edx, 0
sete bl
cmp esi, 0xa
setl bh
mov dl, bl
and dl, bh
xor bl, bh
or dl, bl
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c8], eax
jmp 0x4b68c2
mov dword [ebp - 0x10c8], 0xb73446b4
jmp 0x4b68c2
mov dword [ebp - 0x10c8], 0x237faad3
jmp 0x4b68c2
mov eax, 0xdd2400cb
mov ecx, 0xbc48a82e
mov edx, 0
mov esi, dword [0x500048]
mov edi, dword [0x500044]
sub edx, 1
mov ebx, esi
add ebx, edx
imul esi, ebx
and esi, 1
cmp esi, 0
sete dl
cmp edi, 0xa
setl dh
mov bl, dl
and bl, dh
xor dl, dh
or bl, dl
test bl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c8], eax
jmp 0x4b68c2
mov eax, 0xdd2400cb
mov ecx, 0x8a86a2a
cmp dword [ebp - 0x1c], 0
setne dl
and dl, 1
mov byte [ebp - 0x10], dl
mov esi, dword [0x500048]
mov edi, dword [0x500044]
mov ebx, esi
sub ebx, 0x972f56b0
sub ebx, 1
add ebx, 0x972f56b0
imul esi, ebx
and esi, 1
cmp esi, 0
sete dl
cmp edi, 0xa
setl dh
mov bl, dl
and bl, dh
xor dl, dh
or bl, dl
test bl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c8], eax
jmp 0x4b68c2
mov eax, 0xffe00086
mov ecx, 0x8934e835
mov dl, byte [ebp - 0x10]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c8], eax
jmp 0x4b68c2
mov eax, dword [0x50031c]
mov ecx, dword [ebp - 0x1c]
mov edx, esp
mov dword [edx], ecx
call eax
sub esp, 4
mov dword [ebp - 0x10c8], 0xffe00086
mov dword [ebp - 0x13b0], eax
jmp 0x4b68c2
mov eax, 0xe83eeb15
mov ecx, 0xa1dd3888
mov edx, dword [0x500048]
mov esi, dword [0x500044]
mov edi, edx
add edi, 0xcd098865
sub edi, 1
sub edi, 0xcd098865
imul edx, edi
and edx, 1
cmp edx, 0
sete bl
cmp esi, 0xa
setl bh
mov dl, bl
and dl, bh
xor bl, bh
or dl, bl
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c8], eax
jmp 0x4b68c2
mov eax, 0xe83eeb15
mov ecx, 0xfe637fb2
mov edx, 0
cmp dword [ebp - 0x28], 0
setne bl
and bl, 1
mov byte [ebp - 0xf], bl
mov esi, dword [0x500048]
mov edi, dword [0x500044]
sub edx, 1
mov ebx, esi
add ebx, edx
imul esi, ebx
and esi, 1
cmp esi, 0
sete dl
cmp edi, 0xa
setl dh
mov bl, dl
and bl, dh
xor dl, dh
or bl, dl
test bl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c8], eax
jmp 0x4b68c2
mov eax, 0x3914ab93
mov ecx, 0xad90e08e
mov dl, byte [ebp - 0xf]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c8], eax
jmp 0x4b68c2
mov eax, dword [ebp - 0x28]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
sub esp, 4
mov dword [ebp - 0x10c8], 0x3914ab93
mov dword [ebp - 0x13b4], eax
jmp 0x4b68c2
mov eax, 0x21d8616d
mov ecx, 0x7f2bb456
mov edx, dword [0x500048]
mov esi, dword [0x500044]
mov edi, edx
sub edi, 0x76011978
sub edi, 1
add edi, 0x76011978
imul edx, edi
and edx, 1
cmp edx, 0
sete bl
cmp esi, 0xa
setl bh
mov dl, bl
and dl, bh
xor bl, bh
or dl, bl
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c8], eax
jmp 0x4b68c2
mov eax, 0x21d8616d
mov ecx, 0xbde31c06
cmp dword [ebp - 0x24], 0
setne dl
and dl, 1
mov byte [ebp - 0xe], dl
mov esi, dword [0x500048]
mov edi, dword [0x500044]
mov ebx, esi
add ebx, 0xada5a732
sub ebx, 1
sub ebx, 0xada5a732
imul esi, ebx
and esi, 1
cmp esi, 0
sete dl
cmp edi, 0xa
setl dh
mov bl, dl
and bl, dh
xor dl, dh
or bl, dl
test bl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c8], eax
jmp 0x4b68c2
mov eax, 0x69652ee8
mov ecx, 0xca767ac9
mov dl, byte [ebp - 0xe]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c8], eax
jmp 0x4b68c2
mov eax, 0xfd1e5fe3
mov ecx, 0xbdc8a3b5
mov dl, 1
mov esi, 0
mov edi, dword [0x500048]
mov ebx, dword [0x500044]
sub esi, 1
mov dword [ebp - 0x13b8], eax
mov eax, edi
add eax, esi
imul edi, eax
and edi, 1
cmp edi, 0
sete dh
cmp ebx, 0xa
setl al
mov ah, dh
xor ah, 1
mov bl, al
xor bl, 1
xor dl, 0
mov bh, ah
and bh, 0
and dh, dl
mov byte [ebp - 0x13b9], al
mov al, bl
and al, 0
mov byte [ebp - 0x13ba], al
mov al, byte [ebp - 0x13b9]
and al, dl
or bh, dh
mov dh, byte [ebp - 0x13ba]
or dh, al
xor bh, dh
or ah, bl
xor ah, 1
or dl, 0
and ah, dl
or bh, ah
test bh, 1
mov esi, dword [ebp - 0x13b8]
cmovne esi, ecx
mov dword [ebp - 0x10c8], esi
jmp 0x4b68c2
mov eax, dword [ebp - 0x24]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
sub esp, 4
mov ecx, 0xfd1e5fe3
mov edx, 0xcb34a8ec
mov bl, 1
mov esi, dword [0x500048]
mov edi, dword [0x500044]
mov dword [ebp - 0x13c0], eax
mov eax, esi
sub eax, 0xf4cae176
sub eax, 1
add eax, 0xf4cae176
imul esi, eax
and esi, 1
cmp esi, 0
sete bh
cmp edi, 0xa
setl al
mov ah, bh
xor ah, 1
mov byte [ebp - 0x13c1], al
xor al, 1
xor bl, 0
mov byte [ebp - 0x13c2], al
mov al, ah
and al, 0
and bh, bl
mov byte [ebp - 0x13c3], al
mov al, byte [ebp - 0x13c2]
and al, 0
mov byte [ebp - 0x13c4], al
mov al, byte [ebp - 0x13c1]
and al, bl
mov byte [ebp - 0x13c5], al
mov al, byte [ebp - 0x13c3]
or al, bh
mov bh, byte [ebp - 0x13c4]
mov byte [ebp - 0x13c6], al
mov al, byte [ebp - 0x13c5]
or bh, al
mov al, byte [ebp - 0x13c6]
xor al, bh
mov bh, byte [ebp - 0x13c2]
or ah, bh
xor ah, 1
or bl, 0
and ah, bl
or al, ah
test al, 1
cmovne ecx, edx
mov dword [ebp - 0x10c8], ecx
jmp 0x4b68c2
mov dword [ebp - 0x10c8], 0x69652ee8
jmp 0x4b68c2
mov eax, 0x9b2e8e8d
mov ecx, 0x81ab686e
mov dl, 1
mov esi, dword [0x500048]
mov edi, dword [0x500044]
mov ebx, esi
add ebx, 0xc9bf6828
sub ebx, 1
sub ebx, 0xc9bf6828
imul esi, ebx
and esi, 1
cmp esi, 0
sete dh
cmp edi, 0xa
setl bl
mov bh, dh
xor bh, 1
mov dword [ebp - 0x13cc], eax
mov al, bl
xor al, 1
xor dl, 1
mov ah, bh
and ah, 1
and dh, dl
mov byte [ebp - 0x13cd], al
and al, 1
and bl, dl
or ah, dh
or al, bl
xor ah, al
mov al, byte [ebp - 0x13cd]
or bh, al
xor bh, 1
or dl, 1
and bh, dl
or ah, bh
test ah, 1
mov esi, dword [ebp - 0x13cc]
cmovne esi, ecx
mov dword [ebp - 0x10c8], esi
jmp 0x4b68c2
mov eax, 0x9b2e8e8d
mov ecx, 0xcdfb330
mov edx, 0
cmp dword [ebp - 0x20], 0
setne bl
and bl, 1
mov byte [ebp - 0xd], bl
mov esi, dword [0x500048]
mov edi, dword [0x500044]
sub edx, 1
mov ebx, esi
add ebx, edx
imul esi, ebx
and esi, 1
cmp esi, 0
sete dl
cmp edi, 0xa
setl dh
mov bl, dl
and bl, dh
xor dl, dh
or bl, dl
test bl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c8], eax
jmp 0x4b68c2
mov eax, 0x162e8c3
mov ecx, 0x396e1af9
mov dl, byte [ebp - 0xd]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c8], eax
jmp 0x4b68c2
mov eax, 0x25396c11
mov ecx, 0x4ada289c
mov edx, dword [0x500048]
mov esi, dword [0x500044]
mov edi, edx
add edi, 0xe15d6adb
sub edi, 1
sub edi, 0xe15d6adb
imul edx, edi
and edx, 1
cmp edx, 0
sete bl
cmp esi, 0xa
setl bh
mov dl, bl
and dl, bh
xor bl, bh
or dl, bl
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c8], eax
jmp 0x4b68c2
mov eax, dword [ebp - 0x20]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
sub esp, 4
mov ecx, 0x25396c11
mov edx, 0x3f1e2e4
mov esi, 0
mov edi, dword [0x500048]
mov ebx, dword [0x500044]
sub esi, 1
mov dword [ebp - 0x13d4], eax
mov eax, edi
add eax, esi
imul edi, eax
and edi, 1
cmp edi, 0
sete al
cmp ebx, 0xa
setl ah
mov bl, al
and bl, ah
xor al, ah
or bl, al
test bl, 1
cmovne ecx, edx
mov dword [ebp - 0x10c8], ecx
jmp 0x4b68c2
mov dword [ebp - 0x10c8], 0x162e8c3
jmp 0x4b68c2
lea eax, [ebp - 0x43c]
mov ecx, dword [0x500358]
mov edx, esp
mov dword [edx], eax
call ecx
sub esp, 4
mov ecx, 0x84433eb5
mov edx, 0x746ac93c
cmp dword [ebp - 0x10ac], 0
cmovne ecx, edx
mov dword [ebp - 0x10c8], ecx
mov dword [ebp - 0x13d8], eax
jmp 0x4b68c2
mov eax, esp
mov dword [eax], 0
mov eax, dword [sym.imp.KERNEL32.dll_ExitProcess]
call eax
sub esp, 4
add esp, 0x1438
pop esi
pop edi
pop ebx
pop ebp
ret
mov dword [ebp - 0x10c8], 0xe3ddd9b0
jmp 0x4b68c2
mov eax, 0
mov ecx, 0x40
mov edx, 1
lea esi, [ebp - 0xc64]
lea edi, [ebp - 0x108c]
mov dword [esp], esi
mov dword [esp + 4], 0
mov dword [esp + 8], edi
mov dword [esp + 0xc], 0x40
mov dword [esp + 0x10], 1
mov dword [esp + 0x14], 1
mov dword [ebp - 0x13dc], eax
mov dword [ebp - 0x13e0], ecx
mov dword [ebp - 0x13e4], edx
call fcn.004b2960
mov dword [ebp - 0x10c8], 0x8087c6cf
mov dword [ebp - 0x13e8], eax
jmp 0x4b68c2
mov dword [ebp - 0x10c8], 0xe9913ec9
jmp 0x4b68c2
mov dword [ebp - 0x10c8], 0xe110c14b
jmp 0x4b68c2
mov eax, 0
mov ecx, 0x20a
lea edx, [ebp - 0xa5a]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [ebp - 0x13ec], eax
mov dword [ebp - 0x13f0], ecx
call fcn.0040dd40
mov ecx, 0x104
lea edx, str._q__u
mov esi, 6
lea edi, [ebp - 0xa5a]
mov dword [esp], edi
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], 6
mov dword [ebp - 0x13f4], eax
mov dword [ebp - 0x13f8], ecx
mov dword [ebp - 0x13fc], esi
call fcn.0040e770
lea ecx, [ebp - 0x43c]
mov dword [esp], ecx
mov dword [ebp - 0x1400], eax
call fcn.0040f980
mov ecx, 0xfe
lea edx, [ebp - 0xa5a]
lea esi, [ebp - 0x43c]
add edx, 0xc
mov dword [esp], edx
mov dword [esp + 4], 0xfe
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [ebp - 0x1404], ecx
call fcn.0040e770
mov ecx, 0x40
mov edx, 0
mov esi, 1
lea edi, [ebp - 0x232]
lea ebx, [ebp - 0xa5a]
mov dword [ebp - 0x1408], eax
lea eax, [ebp - 0x108c]
mov dword [esp], edi
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x40
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 1
mov dword [ebp - 0x140c], esi
mov dword [ebp - 0x1410], ecx
mov dword [ebp - 0x1414], edx
call fcn.004b2960
mov dword [ebp - 0x10c8], 0xd8fc77d5
mov dword [ebp - 0x1418], eax
jmp 0x4b68c2
mov dword [ebp - 0x10c8], 0xac011d2b
jmp 0x4b68c2
mov dword [ebp - 0x10c8], 0xbc48a82e
jmp 0x4b68c2
mov dword [ebp - 0x10c8], 0xa1dd3888
jmp 0x4b68c2
mov dword [ebp - 0x10c8], 0x7f2bb456
jmp 0x4b68c2
mov eax, dword [ebp - 0x24]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
sub esp, 4
mov dword [ebp - 0x10c8], 0xbdc8a3b5
mov dword [ebp - 0x141c], eax
jmp 0x4b68c2
mov dword [ebp - 0x10c8], 0x81ab686e
jmp 0x4b68c2
mov eax, dword [ebp - 0x20]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
sub esp, 4
mov dword [ebp - 0x10c8], 0x4ada289c
mov dword [ebp - 0x1420], eax
jmp 0x4b4410