Function at 0x497821
Capabilities:
Accept command line arguments
Create directory
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4c5e6f
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x2cfc
call fcn.004c1770
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 0x48]
test eax, eax
je 0x4ac6aa
mov eax, dword [ebp + 0x50]
mov dword [ebp - 0x1790], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x1778], eax
lea eax, [ebp + 0x40]
mov dword [ebp - 0x1780], eax
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0x18f8], eax
mov eax, dword [ebp + 0x34]
mov dword [ebp - 0x18e0], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x18e8], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1900], eax
mov eax, dword [ebp + 0x4c]
mov dword [ebp - 0x1788], eax
lea eax, [ebp + 0x30]
mov dword [ebp - 0x178c], eax
mov eax, dword [ebp + 0x44]
mov dword [ebp - 0x18f0], eax
lea eax, [ebp + 0xc]
mov dword [ebp - 0x18d8], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x1770], eax
mov eax, dword [ebp - 0x178c]
movzx eax, byte [eax]
test eax, eax
je 0x4ac570
mov eax, dword [ebp - 0x18d8]
mov dword [ebp - 0x1bb4], eax
mov eax, dword [ebp - 0x18e0]
mov dword [ebp - 0x1720], eax
mov eax, dword [ebp - 0x18e8]
mov dword [ebp - 0x1728], eax
mov eax, dword [ebp - 0x18f0]
mov dword [ebp - 0x1738], eax
mov eax, dword [ebp - 0x18f8]
mov dword [ebp - 0x1718], eax
mov eax, dword [ebp - 0x1900]
mov dword [ebp - 0x1730], eax
mov eax, dword [ebp - 0x1bb4]
movzx eax, byte [eax]
test eax, eax
je 0x4ac41d
mov dword [ebp - 0x308], 0
mov dword [ebp - 0x50], 0x7c8a6b95
mov dword [ebp - 0x84c], 1
mov dword [ebp - 0x14ec], 0xfffffffd
mov dword [ebp - 0x1bc4], 0xd221
mov dword [ebp - 0x1bcc], 0x947e29ac
mov dword [ebp - 0x304], 0
jmp 0x49797e
mov eax, dword [ebp - 0x304]
inc eax
mov dword [ebp - 0x304], eax
cmp dword [ebp - 0x304], 3
jge 0x49799a
mov eax, dword [ebp - 0x304]
mov dword [ebp + eax*4 - 0x2140], 0xd7ba9668
jmp 0x497971
cmp dword [ebp - 0x308], 0
jne 0x4979b2
cmp dword [ebp - 0x50], 0
jne 0x4979b2
and dword [ebp - 0x155c], 0
jmp 0x4979bc
mov dword [ebp - 0x155c], 1
mov eax, dword [ebp - 0x308]
mov dword [ebp - 0x28bc], eax
mov eax, dword [ebp - 0x84c]
cmp dword [ebp - 0x308], eax
jne 0x4979e2
mov dword [ebp - 0xe9c], 1
jmp 0x4979e9
and dword [ebp - 0xe9c], 0
cmp dword [ebp - 0xe9c], 0xd8d92426
je 0x497a01
mov dword [ebp - 0x14dc], 1
jmp 0x497a08
and dword [ebp - 0x14dc], 0
mov eax, dword [ebp - 0x14dc]
sub eax, dword [ebp - 0x84c]
cmp eax, 0xec1b
jle 0x497a27
mov dword [ebp - 0x14e4], 1
jmp 0x497a2e
and dword [ebp - 0x14e4], 0
mov eax, dword [ebp - 0x14e4]
mov dword [ebp - 0x14ec], eax
cmp dword [ebp - 0x14ec], 1
je 0x497a55
cmp dword [ebp - 0x50], 0
je 0x497a55
mov dword [ebp - 0x14f4], 1
jmp 0x497a5c
and dword [ebp - 0x14f4], 0
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x14f4], eax
je 0x497a73
mov dword [ebp - 0x1524], 1
jmp 0x497a7a
and dword [ebp - 0x1524], 0
mov eax, dword [ebp - 0x50]
imul eax, dword [ebp - 0x1524]
cmp eax, dword [ebp - 0x50]
jge 0x497aa4
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x2140], 0
je 0x497aa4
mov dword [ebp - 0x152c], 1
jmp 0x497aab
and dword [ebp - 0x152c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2140]
cmp dword [ebp - 0x152c], eax
jg 0x497acc
mov dword [ebp - 0x1534], 1
jmp 0x497ad3
and dword [ebp - 0x1534], 0
mov eax, dword [ebp - 0x1534]
sub eax, 3
cmp dword [ebp - 0x50], eax
jge 0x497aed
mov dword [ebp - 0x1bbc], 1
jmp 0x497af4
and dword [ebp - 0x1bbc], 0
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x2140], 0xbe74fd57
jne 0x497b12
mov dword [ebp - 0x153c], 1
jmp 0x497b19
and dword [ebp - 0x153c], 0
mov eax, dword [ebp - 0x84c]
cmp dword [ebp - 0x153c], eax
je 0x497b33
mov dword [ebp - 0x1544], 1
jmp 0x497b3a
and dword [ebp - 0x1544], 0
mov eax, dword [ebp - 0x1544]
sub eax, dword [ebp - 0x1bc4]
cmp eax, 3
jb 0x497b57
mov dword [ebp - 0x154c], 1
jmp 0x497b5e
and dword [ebp - 0x154c], 0
cmp dword [ebp - 0x154c], 0xfffffffa
ja 0x497b79
cmp dword [ebp - 0x50], 0
je 0x497b79
mov dword [ebp - 0x1554], 1
jmp 0x497b80
and dword [ebp - 0x1554], 0
mov eax, dword [ebp - 0x1554]
mov dword [ebp - 0x1bcc], eax
mov eax, dword [ebp - 0x50]
add eax, dword [ebp - 0x155c]
cmp eax, dword [ebp - 0x308]
jne 0x497bc1
push 1
push 1
push 0
push 0x2f70
push 1
push 0x652b
push 0x2cfb
call fcn.004912e3
add esp, 0x1c
jmp 0x497cf0
mov dword [ebp - 0x1bdc], 0x965da1f7
mov dword [ebp - 0x1bd4], 0xb039b7c3
mov dword [ebp - 0x50], 0
jmp 0x497be5
mov eax, dword [ebp - 0x50]
dec eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0xffffffeb
jge 0x497cf0
mov dword [ebp - 0x1be4], 1
push 2
lea ecx, [ebp - 0x2098]
call fcn.0040b279
lea eax, [ebp - 0x244c]
push eax
push 0
push 0x7835
push 1
push 0x7f9c
lea eax, [ebp - 0x2098]
push eax
push 1
push 0
call fcn.0047a45f
add esp, 0x20
push 0x4047
push 0xc5c
push 1
push 0xa21
push 0x7f07
push 1
push 0x2c86
push 0x334e
push 0
push 1
call fcn.0047e2c2
add esp, 0x28
push 0x1ffc
lea eax, [ebp - 0x50]
push eax
push 0x627f
push 0x520
push 0x5aa7
push 0x4476
push 1
push 0x5372
push 0x81
push 1
push 0x1655
push 0x38cd
push 0
push 0x4c78
lea eax, [ebp - 0x1bd4]
push eax
push 0x29f0
push 0
push 0x3d67
lea eax, [ebp - 0x2098]
push eax
push 1
push 0x28f7
push 0x1cf9
push 0x7a8e
lea eax, [ebp - 0x1bdc]
push eax
push 0x68dd
lea eax, [ebp - 0x1be4]
push eax
push 1
call fcn.0048f3fd
add esp, 0x6c
lea ecx, [ebp - 0x2098]
call fcn.0040b34b
jmp 0x497bde
mov dword [ebp - 0x1564], 0x250b
mov dword [ebp - 0x1bec], str.htbew_ppt_koisnyhlf_ioppffy_qtehfz_twyll_nyzzddor_yynolii_xyymanw
cmp dword [ebp - 0x1564], 0x2659
jle 0x497d9b
push 0x15d0
push 0x139
call dword [sym.imp.GDI32.dll_SetTextAlign]
and dword [ebp - 0x508], 0
jmp 0x497d3a
mov eax, dword [ebp - 0x508]
inc eax
mov dword [ebp - 0x508], eax
cmp dword [ebp - 0x508], 0x3989
jge 0x497d9b
and dword [ebp - 0x310], 0
jmp 0x497d5c
mov eax, dword [ebp - 0x310]
inc eax
mov dword [ebp - 0x310], eax
cmp dword [ebp - 0x310], 0x64b4
jge 0x497d99
mov eax, dword [ebp - 0x508]
sub eax, dword [ebp - 0x310]
cdq
mov dword [ebp - 0x190c], eax
mov dword [ebp - 0x1908], edx
push dword [ebp - 0x1908]
push dword [ebp - 0x190c]
mov ecx, 0xade298
call fcn.0040b052
jmp 0x497d4f
jmp 0x497d2d
and dword [ebp - 4], 0
cmp dword [ebp - 0x1564], 0x2282
jge 0x497dbb
mov edx, dword [ebp - 0x1bec]
mov ecx, 0xade298
call fcn.0040d8d7
jmp 0x497dd7
or dword [ebp - 4], 0xffffffff
jmp 0x497de1
mov dword [ebp - 0x110], 0xfff8
mov dword [ebp - 0x1e38], 0x960f
mov dword [ebp - 0x1e34], 0x960f
mov dword [ebp - 0x1e30], 0x960f
mov dword [ebp - 0x1e2c], 0x960f
mov dword [ebp - 0x18c], 0x69c1477a
mov dword [ebp - 0x7a4], 0xfffffffd
mov dword [ebp - 0x15f4], 5
mov dword [ebp - 0x1c04], 1
mov dword [ebp - 0x510], 0
jmp 0x497e54
mov eax, dword [ebp - 0x510]
inc eax
mov dword [ebp - 0x510], eax
cmp dword [ebp - 0x510], 3
jge 0x497e70
mov eax, dword [ebp - 0x510]
mov dword [ebp + eax*4 - 0x2960], 0xffffffff
jmp 0x497e47
push 0x33a1
push 1
push 0x7794
push 1
push 1
push 1
push 0x633a
push 0x2113
lea eax, [ebp - 0x110]
push eax
call fcn.00477e6f
add esp, 0x24
mov dword [ebp - 0x110], 0
jmp 0x497eb4
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 3
jg 0x498322
push 2
lea ecx, [ebp - 0x78c]
call fcn.0040b279
mov dword [ebp - 0x15fc], 0x5c1b
mov dword [ebp - 0x1bfc], 0x1cd43a1e
mov dword [ebp - 0x26cc], 0xfffffffa
push 0
lea eax, [ebp - 0x2454]
push eax
push 0x7d57
push 1
lea eax, [ebp - 0x78c]
push eax
push 0
call fcn.004849bc
add esp, 0x18
push 0
push 1
push 1
push 0x64be
push 0x327d
call fcn.00492501
add esp, 0x14
push 1
lea ecx, [ebp - 0x78c]
call fcn.0040b367
cmp dword [eax], 0
jne 0x497fc1
push 0
lea ecx, [ebp - 0x78c]
call fcn.0040b367
imul esi, dword [eax], 0xffff
push 0
lea ecx, [ebp - 0x78c]
call fcn.0040b367
cmp esi, dword [eax]
jge 0x497f71
cmp dword [ebp - 0x18c], 0
jne 0x497f71
and dword [ebp - 0x156c], 0
jmp 0x497f7b
mov dword [ebp - 0x156c], 1
cmp dword [ebp - 0x156c], 1
jl 0x497f90
mov dword [ebp - 0x1574], 1
jmp 0x497f97
and dword [ebp - 0x1574], 0
cmp dword [ebp - 0x1574], 9
jae 0x497fac
mov dword [ebp - 0x1bf4], 1
jmp 0x497fb3
and dword [ebp - 0x1bf4], 0
xor eax, eax
inc eax
jne 0x497fc1
and dword [ebp - 0x157c], 0
jmp 0x497fcb
mov dword [ebp - 0x157c], 1
push 0
lea ecx, [ebp - 0x78c]
call fcn.0040b367
mov ecx, dword [ebp - 0x157c]
imul ecx, dword [eax]
mov dword [ebp - 0x7a4], ecx
mov eax, dword [ebp - 0x7a4]
mov dword [ebp - 0x28c0], eax
cmp dword [ebp - 0x18c], 0x57b17b4d
je 0x49800b
mov dword [ebp - 0x1584], 1
jmp 0x498012
and dword [ebp - 0x1584], 0
push 1
lea ecx, [ebp - 0x78c]
call fcn.0040b367
push 7
pop ecx
sub ecx, dword [eax]
mov eax, dword [ebp - 0x1584]
sub eax, dword [ebp - 0x18c]
cmp ecx, eax
jg 0x498040
mov dword [ebp - 0x15e4], 1
jmp 0x498047
and dword [ebp - 0x15e4], 0
push 1
lea ecx, [ebp - 0x78c]
call fcn.0040b367
mov ecx, dword [ebp - 0x15e4]
cmp ecx, dword [eax]
jle 0x49806a
mov dword [ebp - 0x15ec], 1
jmp 0x498071
and dword [ebp - 0x15ec], 0
mov eax, dword [ebp - 0x15ec]
mov dword [ebp - 0x15f4], eax
mov eax, dword [ebp - 0x15f4]
mov dword [ebp - 0x15fc], eax
cmp dword [ebp - 0x15fc], 0
jne 0x4980a4
cmp dword [ebp - 0x7a4], 0
jne 0x4980a4
and dword [ebp - 0xfd8], 0
jmp 0x4980ae
mov dword [ebp - 0xfd8], 1
push 0
lea ecx, [ebp - 0x78c]
call fcn.0040b367
mov ecx, dword [ebp - 0xfd8]
cmp ecx, dword [eax]
jle 0x4980da
cmp dword [ebp - 0x18c], 0
je 0x4980da
mov dword [ebp - 0x998], 1
jmp 0x4980e1
and dword [ebp - 0x998], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1e38]
mov dword [ebp - 0x14d4], eax
mov eax, dword [ebp - 0x110]
mov ecx, dword [ebp - 0x14d4]
mov dword [ebp + eax*4 - 0x1e38], ecx
mov esi, dword [ebp - 0x14d4]
imul esi, dword [ebp - 0x998]
push 1
lea ecx, [ebp - 0x78c]
call fcn.0040b367
sub esi, dword [eax]
add esi, 0xfffffff6
mov dword [ebp - 0x1558], esi
push 1
lea ecx, [ebp - 0x78c]
call fcn.0040b367
mov ecx, dword [ebp - 0x1558]
mov dword [eax], ecx
mov eax, dword [ebp - 0x1bfc]
imul eax, dword [ebp - 0x1558]
test eax, eax
je 0x49816e
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1e38], 0
je 0x49816e
mov dword [ebp - 0x9a0], 1
jmp 0x498175
and dword [ebp - 0x9a0], 0
cmp dword [ebp - 0x9a0], 0xfffffffa
jne 0x49818a
mov dword [ebp - 0xfe0], 1
jmp 0x498191
and dword [ebp - 0xfe0], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xfe0]
mov dword [ebp + eax - 0x2960], ecx
push 0
lea ecx, [ebp - 0x78c]
call fcn.0040b367
mov ecx, dword [ebp - 0x110]
cmp dword [eax], ecx
jne 0x4981e0
mov eax, 0x5b4499c7
test eax, eax
je 0x4981e0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1e38], 0
je 0x4981e0
mov dword [ebp - 0x9a8], 1
jmp 0x4981e7
and dword [ebp - 0x9a8], 0
mov eax, dword [ebp - 0x18c]
cmp dword [ebp - 0x9a8], eax
jne 0x498201
mov dword [ebp - 0x1300], 1
jmp 0x498208
and dword [ebp - 0x1300], 0
mov eax, dword [ebp - 0x110]
cmp dword [ebp - 0x1300], eax
jge 0x498222
mov dword [ebp - 0x9b0], 1
jmp 0x498229
and dword [ebp - 0x9b0], 0
mov eax, dword [ebp - 0x18c]
cmp dword [ebp - 0x9b0], eax
jl 0x498243
mov dword [ebp - 0xfe8], 1
jmp 0x49824a
and dword [ebp - 0xfe8], 0
mov eax, dword [ebp - 0x18c]
cmp dword [ebp - 0xfe8], eax
jge 0x4982a0
mov byte [ebp - 0x174], 0
push 1
push 0x735d
push 0
push 0x7b47
push 0x5935
push 0
push 1
push 0x7cfd
push 0x25cf
push 0x5367
lea eax, [ebp - 0x174]
push eax
push 0x7a02
push 0x5d7f
call fcn.0048466e
add esp, 0x34
jmp 0x498312
mov dword [ebp - 0x245c], 0xfc71010f
mov dword [ebp - 0x26dc], 1
mov dword [ebp - 0x2464], 0x206cbc8c
mov dword [ebp - 0x318], 0
jmp 0x4982d7
mov eax, dword [ebp - 0x318]
inc eax
mov dword [ebp - 0x318], eax
cmp dword [ebp - 0x318], 1
jge 0x4982f3
mov eax, dword [ebp - 0x318]
mov dword [ebp + eax*4 - 0x2860], 0
jmp 0x4982ca
push 0x6968
push 1
push 0
push 1
lea eax, [ebp - 0x1c04]
push eax
push 0x3773
call fcn.0047c84d
add esp, 0x18
lea ecx, [ebp - 0x78c]
call fcn.0040b34b
jmp 0x497ea7
push 1
push 0x6393
push 1
push 0x3bfa
push 0x5111
push 1
push 0
call fcn.004817d8
add esp, 0x1c
mov dword [ebp - 0x338], 0
push 1
push 0x6686
push 0x1bcb
push 0x4d01
push 1
push 0xd67
push 0x4171
push 1
push 1
push 0x7c94
call fcn.004782db
add esp, 0x28
mov dword [ebp - 0x5c], 0x7c8a6b95
mov dword [ebp - 0x7b4], 1
mov dword [ebp - 0xa48], 0xfffffffd
mov dword [ebp - 0x74], 0x185299da
mov dword [ebp - 0x688], 0xbeb0647d
mov dword [ebp - 0x9b8], 5
mov dword [ebp - 0x9c8], 0xee39f3fa
push 3
lea ecx, [ebp - 0x2578]
call fcn.0040b279
mov dword [ebp - 0x1c0c], 0xffffffff
mov dword [ebp - 0x246c], 0xc5ad058b
push 0x71af
push 0
push 0xbc8
push 0xc8e
push 1
lea eax, [ebp - 0x26ec]
push eax
push 1
push 0
push 0x4408
lea eax, [ebp - 0x2578]
push eax
call fcn.004843e4
add esp, 0x28
lea eax, [ebp - 0x74]
push eax
push 0
lea eax, [ebp - 0x688]
push eax
push 0xbca
push 0
push 0x29eb
push 1
push 0x1f2c
push 0
call fcn.00485812
add esp, 0x24
mov dword [ebp - 0x688], 0x14b5
mov eax, dword [ebp - 0x688]
mov dword [ebp - 0x9b8], eax
mov eax, dword [ebp - 0x74]
cmp eax, dword [ebp - 0x9b8]
jge 0x498463
mov dword [ebp - 0x1490], 1
jmp 0x49846a
and dword [ebp - 0x1490], 0
cmp dword [ebp - 0x74], 0
jne 0x49847f
cmp dword [ebp - 0x74], 0
jne 0x49847f
and dword [ebp - 0x9c0], 0
jmp 0x498489
mov dword [ebp - 0x9c0], 1
mov eax, dword [ebp - 0x74]
imul eax, dword [ebp - 0x1490]
cmp eax, dword [ebp - 0x9c0]
jl 0x4984a7
mov dword [ebp - 0xff0], 1
jmp 0x4984ae
and dword [ebp - 0xff0], 0
mov eax, dword [ebp - 0xff0]
mov dword [ebp - 0x9c8], eax
cmp dword [ebp - 0x9c8], 0
je 0x4984c9
cmp dword [ebp - 0x74], 0
jne 0x4984d8
cmp dword [ebp - 0x74], 0
jne 0x4984d8
and dword [ebp - 0x1308], 0
jmp 0x4984e2
mov dword [ebp - 0x1308], 1
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x1308], eax
jne 0x4984f9
mov dword [ebp - 0x9d0], 1
jmp 0x498500
and dword [ebp - 0x9d0], 0
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x9d0], eax
jne 0x498517
mov dword [ebp - 0xff8], 1
jmp 0x49851e
and dword [ebp - 0xff8], 0
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0xff8], eax
jne 0x498535
mov dword [ebp - 0x9d8], 1
jmp 0x49853c
and dword [ebp - 0x9d8], 0
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x9d8], eax
jge 0x49854e
push 3
pop eax
test eax, eax
je 0x49855d
mov dword [ebp - 0x688], 0x7af2c9a1
jmp 0x498608
mov dword [ebp - 0x2474], 9
mov dword [ebp - 0x2918], 0x814b11f3
mov dword [ebp - 0x247c], 0x40c3
mov dword [ebp - 0x320], 0
jmp 0x498594
mov eax, dword [ebp - 0x320]
inc eax
mov dword [ebp - 0x320], eax
cmp dword [ebp - 0x320], 4
jge 0x4985b0
mov eax, dword [ebp - 0x320]
mov dword [ebp + eax*4 - 0x2cec], 0xfffffffc
jmp 0x498587
push 1
push 0
push 0x621e
push 0x28da
push 0x616e
push 0
push 1
push 0x6fef
push 1
call fcn.004878af
add esp, 0x24
push 1
push 0x2250
push 1
lea eax, [ebp - 0x1c0c]
push eax
push 1
push 0x3ef2
push 1
push 0x655f
push 0x3b14
push 0
push 0x3a8f
call fcn.004808f4
add esp, 0x2c
lea ecx, [ebp - 0x2578]
call fcn.0040b34b
mov dword [ebp - 0x1c3c], 0xd221
push 1
lea ecx, [ebp - 0x2588]
call fcn.0040b279
mov dword [ebp - 0xdc], 0
jmp 0x498643
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 1
jge 0x49865f
mov eax, dword [ebp - 0xdc]
mov dword [ebp + eax*4 - 0x518], 0x4fd3df75
jmp 0x498636
mov dword [ebp - 0xdc], 0
jmp 0x498678
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 1
jge 0x498697
push dword [ebp - 0xdc]
lea ecx, [ebp - 0x2588]
call fcn.0040b367
and dword [eax], 0
jmp 0x49866b
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x518], 0x1b
jmp 0x4986c5
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x518]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x518], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x518], 0xffffffe9
je 0x498702
push 0x2a03
push 0
push 1
push 1
push 0x1b06
push 1
push 0x1467
push 0x69ac
push 1
push 0x2f27
call fcn.0047984a
add esp, 0x28
jmp 0x4986aa
lea ecx, [ebp - 0x2588]
call fcn.0040b34b
mov dword [ebp - 0x1c44], 0x947e29ac
mov dword [ebp - 0x908], 0xffffffff
mov dword [ebp - 0x904], 0xffffffff
mov dword [ebp - 0x900], 0xffffffff
mov dword [ebp - 0x8fc], 0xffffffff
mov dword [ebp - 0x1c14], 0
mov dword [ebp - 0x328], 0
jmp 0x498762
mov eax, dword [ebp - 0x328]
inc eax
mov dword [ebp - 0x328], eax
cmp dword [ebp - 0x328], 3
jge 0x49877e
mov eax, dword [ebp - 0x328]
mov dword [ebp + eax*4 - 0x1e44], 0xffffffff
jmp 0x498755
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x908], 2
jmp 0x4987ac
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x908]
dec eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x908], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x908], 0
jl 0x498938
push 3
lea ecx, [ebp - 0x20f8]
call fcn.0040b279
mov dword [ebp - 0x9e0], 0xb9dbea52
mov dword [ebp - 0x1310], 0x8382bdb9
mov dword [ebp - 0x9f0], 0
push 0
push 0x1fc
push 1
push 0x4247
lea eax, [ebp - 0x26fc]
push eax
push 0
push 0xdd5
lea eax, [ebp - 0x20f8]
push eax
push 1
call fcn.00493c5c
add esp, 0x24
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x908]
mov eax, dword [ebp + eax*4 - 0x1e44]
mov dword [ebp - 0x2484], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x908]
mov dword [ebp - 0x15d0], eax
push 2
lea ecx, [ebp - 0x20f8]
call fcn.0040b367
mov ecx, dword [ebp - 0x15d0]
mov dword [eax], ecx
mov eax, dword [ebp - 0x15d0]
mov dword [ebp - 0x9e0], eax
cmp dword [ebp - 0x9e0], 0
je 0x4988d2
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x908], 0
jne 0x4988a0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x908]
mov dword [ebp - 0x2868], eax
xor eax, eax
inc eax
jne 0x4988a0
and dword [ebp - 0x1000], 0
jmp 0x4988aa
mov dword [ebp - 0x1000], 1
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x908]
mov eax, dword [ebp + eax*4 - 0x1e44]
cmp dword [ebp - 0x1000], eax
jge 0x4988d2
mov dword [ebp - 0x9e8], 1
jmp 0x4988d9
and dword [ebp - 0x9e8], 0
mov eax, dword [ebp - 0x9e8]
mov dword [ebp - 0x1310], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x908]
mov ecx, dword [ebp - 0x1310]
sub ecx, dword [ebp + eax*4 - 0x1e44]
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x908]
mov eax, dword [ebp + eax*4 - 0x1e44]
imul eax, ecx
mov dword [ebp - 0x9f0], eax
mov eax, dword [ebp - 0x9f0]
mov dword [ebp - 0x1c14], eax
lea ecx, [ebp - 0x20f8]
call fcn.0040b34b
jmp 0x498791
mov byte [ebp - 0x176], 0
push 1
push 0xb02
push 1
lea eax, [ebp - 0x176]
push eax
push 0x63c1
push 0
push 0x8a0
push 0x7d0e
push 1
call fcn.00493c5c
add esp, 0x24
mov dword [ebp - 0x610], 0
jmp 0x498983
mov eax, dword [ebp - 0x610]
inc eax
mov dword [ebp - 0x610], eax
cmp dword [ebp - 0x610], 3
jge 0x49899f
mov eax, dword [ebp - 0x610]
mov dword [ebp + eax*4 - 0x20b0], 0xd7ba9668
jmp 0x498976
mov dword [ebp - 0x2e8], 0
mov dword [ebp - 0x248c], 0x5761be36
mov dword [ebp - 0x520], 0x41311e2d
mov dword [ebp - 0x4c], 0xbd4856cd
mov dword [ebp - 0x130], 2
cmp dword [ebp - 0x2e8], 0xf72d4ea6
jbe 0x498a51
cmp dword [ebp - 0x2e8], 0xd94b
jle 0x4989f2
mov dword [ebp - 0x1008], 1
jmp 0x4989f9
and dword [ebp - 0x1008], 0
cmp dword [ebp - 0x1008], 0x81d21f1e
ja 0x498a11
mov dword [ebp - 0x9f8], 1
jmp 0x498a18
and dword [ebp - 0x9f8], 0
cmp dword [ebp - 0x9f8], 0xa831d26e
ja 0x498a30
mov dword [ebp - 0x1498], 1
jmp 0x498a37
and dword [ebp - 0x1498], 0
mov eax, dword [ebp - 0x2e8]
cmp dword [ebp - 0x1498], eax
jle 0x498a51
mov dword [ebp - 0xa00], 1
jmp 0x498a58
and dword [ebp - 0xa00], 0
mov eax, dword [ebp - 0x2e8]
add eax, dword [ebp - 0xa00]
je 0x498c14
mov dword [ebp - 0x7ac], 0xfffa
mov dword [ebp - 0x1010], 0x799333c7
mov dword [ebp - 0x1c24], 0x58f5537c
mov dword [ebp - 0x270c], 4
mov dword [ebp - 0x2494], 0xf7bdd484
mov dword [ebp - 0x86c], 1
mov byte [ebp - 0x17a], 0
push 0x5914
push 0x69f7
push 0xe5
lea eax, [ebp - 0x17a]
push eax
push 1
push 0x6b15
push 1
push 1
push 0x62ba
push 0x43b8
push 0x4107
push 0x2f37
push 0xdd9
push 0
push 0x2f5e
push 0x3cf5
push 0x18ec
push 0x445c
push 0x6884
call fcn.00479cca
add esp, 0x4c
mov eax, dword [ebp - 0x7ac]
mov dword [ebp - 0x1010], eax
cmp dword [ebp - 0x1010], 0
je 0x498b3a
mov eax, dword [ebp - 0x86c]
dec eax
mov dword [ebp - 0x86c], eax
je 0x498b3a
mov dword [ebp - 0xa08], 1
jmp 0x498b41
and dword [ebp - 0xa08], 0
cmp dword [ebp - 0x7ac], 0x846b
jne 0x498b59
mov dword [ebp - 0x1318], 1
jmp 0x498b60
and dword [ebp - 0x1318], 0
mov eax, dword [ebp - 0x7ac]
add eax, dword [ebp - 0xa08]
cmp eax, dword [ebp - 0x1318]
jle 0x498b80
mov dword [ebp - 0xa10], 1
jmp 0x498b87
and dword [ebp - 0xa10], 0
mov eax, dword [ebp - 0x2e8]
cmp eax, dword [ebp - 0xa10]
jle 0x498ba1
mov dword [ebp - 0x1018], 1
jmp 0x498ba8
and dword [ebp - 0x1018], 0
cmp dword [ebp - 0x1018], 0xffffffff
ja 0x498bbd
mov dword [ebp - 0xa18], 1
jmp 0x498bc4
and dword [ebp - 0xa18], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0xa18], eax
jl 0x498bdb
mov dword [ebp - 0x1c1c], 1
jmp 0x498be2
and dword [ebp - 0x1c1c], 0
mov eax, dword [ebp - 0x520]
cmp dword [ebp - 0x1c24], eax
jge 0x498bfc
mov dword [ebp - 0x1560], 1
jmp 0x498c03
and dword [ebp - 0x1560], 0
mov eax, dword [ebp - 0x1560]
mov dword [ebp - 0x520], eax
jmp 0x498f3b
push 4
lea ecx, [ebp - 0x8bc]
call fcn.0040b279
mov dword [ebp - 0x28c8], 0xc1dc0ac7
push 1
push 1
lea eax, [ebp - 0x8bc]
push eax
push 0x1987
lea eax, [ebp - 0x280]
push eax
push 0
push 1
push 0x6368
push 1
call fcn.004878af
add esp, 0x24
mov dword [ebp - 0x280], 0
jmp 0x498c6e
mov eax, dword [ebp - 0x280]
inc eax
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 2
jge 0x498c8a
mov eax, dword [ebp - 0x280]
mov dword [ebp + eax*4 - 0x2224], 0x9c36de1f
jmp 0x498c61
mov dword [ebp - 0x130], 0
jmp 0x498ca3
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 3
jg 0x498f30
mov dword [ebp - 0x1f5c], 0x21a1
mov dword [ebp - 0x1f58], 0x21a1
mov dword [ebp - 0x1f54], 0x21a1
mov dword [ebp - 0x1f50], 0x21a1
mov dword [ebp - 0x854], 0x3e67b33d
mov byte [ebp - 0x17c], 0
movzx eax, byte [ebp - 0x17c]
test eax, eax
je 0x498d09
push 1
push 1
push 0
push 0
push 0xffd
call fcn.0047b90c
add esp, 0x14
push 1
push 1
push 0
push 0x7f9f
push 1
push 0x5d9c
push 0x7711
push 0x125
push 1
call fcn.00485b0d
add esp, 0x24
mov dword [ebp - 0x4c], 3
jmp 0x498d3f
mov eax, dword [ebp - 0x4c]
dec eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jl 0x498f2b
cmp dword [ebp - 0x854], 1
jl 0x498d5e
mov dword [ebp - 0xa20], 1
jmp 0x498d65
and dword [ebp - 0xa20], 0
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x8bc]
call fcn.0040b367
mov ecx, dword [ebp - 0xa20]
cmp ecx, dword [eax]
je 0x498d89
mov dword [ebp - 0x1020], 1
jmp 0x498d90
and dword [ebp - 0x1020], 0
mov eax, dword [ebp - 0x520]
cmp dword [ebp - 0x1020], eax
jl 0x498daa
mov dword [ebp - 0xa28], 1
jmp 0x498db1
and dword [ebp - 0xa28], 0
push dword [ebp - 0x130]
lea ecx, [ebp - 0x8bc]
call fcn.0040b367
mov ecx, dword [ebp - 0xa28]
cmp ecx, dword [eax]
jl 0x498dd8
mov dword [ebp - 0x1320], 1
jmp 0x498ddf
and dword [ebp - 0x1320], 0
mov eax, dword [ebp - 0x1320]
mov dword [ebp - 0x854], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1f5c]
cmp dword [ebp - 0x854], eax
jne 0x498e0c
mov dword [ebp - 0xa30], 1
jmp 0x498e13
and dword [ebp - 0xa30], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x1f5c]
cmp dword [ebp - 0xa30], eax
jle 0x498e34
mov dword [ebp - 0x1028], 1
jmp 0x498e3b
and dword [ebp - 0x1028], 0
push 3
lea ecx, [ebp - 0x8bc]
call fcn.0040b367
mov ecx, dword [ebp - 0x1028]
cmp ecx, dword [eax]
je 0x498e61
cmp dword [ebp - 0x4c], 0
jne 0x498e61
and dword [ebp - 0xa38], 0
jmp 0x498e6b
mov dword [ebp - 0xa38], 1
push dword [ebp - 0x130]
lea ecx, [ebp - 0x8bc]
call fcn.0040b367
mov ecx, dword [ebp - 0xa38]
cmp ecx, dword [eax]
jl 0x498e92
mov dword [ebp - 0x1c2c], 1
jmp 0x498e99
and dword [ebp - 0x1c2c], 0
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x8bc]
call fcn.0040b367
push dword [ebp - 0x130]
lea ecx, [ebp - 0x8bc]
call fcn.0040b367
push dword [ebp - 0x130]
lea ecx, [ebp - 0x8bc]
call fcn.0040b367
mov esi, eax
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x8bc]
call fcn.0040b367
mov ecx, dword [esi]
cmp ecx, dword [eax]
jl 0x498eeb
mov dword [ebp - 0x330], 1
jmp 0x498ef2
and dword [ebp - 0x330], 0
push 3
lea ecx, [ebp - 0x8bc]
call fcn.0040b367
mov ecx, dword [ebp - 0x330]
mov dword [eax], ecx
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x330]
mov dword [ebp + eax - 0x2224], ecx
mov eax, dword [ebp - 0x330]
mov dword [ebp - 0x520], eax
jmp 0x498d38
jmp 0x498c96
lea ecx, [ebp - 0x8bc]
call fcn.0040b34b
mov dword [ebp - 0x4c], 0xffffffed
jmp 0x498f4b
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0xf
jl 0x498f91
mov byte [ebp - 0x17e], 0
push 1
push 0x6db0
push 0x1c1
push 1
push 0
push 0x704f
push 0x4ad4
lea eax, [ebp - 0x17e]
push eax
push 0
push 0x1028
push 1
push 0x25ef
call fcn.00496287
add esp, 0x30
jmp 0x498f44
cmp dword [ebp - 0x338], 0
jne 0x498fa9
cmp dword [ebp - 0x5c], 0
jne 0x498fa9
and dword [ebp - 0x1330], 0
jmp 0x498fb3
mov dword [ebp - 0x1330], 1
mov eax, dword [ebp - 0x338]
mov dword [ebp - 0x249c], eax
mov eax, dword [ebp - 0x7b4]
cmp dword [ebp - 0x338], eax
jne 0x498fd9
mov dword [ebp - 0x14a0], 1
jmp 0x498fe0
and dword [ebp - 0x14a0], 0
cmp dword [ebp - 0x14a0], 0xd8d92426
je 0x498ff8
mov dword [ebp - 0xa40], 1
jmp 0x498fff
and dword [ebp - 0xa40], 0
mov eax, dword [ebp - 0xa40]
sub eax, dword [ebp - 0x7b4]
cmp eax, 0xec1b
jle 0x49901e
mov dword [ebp - 0x1030], 1
jmp 0x499025
and dword [ebp - 0x1030], 0
mov eax, dword [ebp - 0x1030]
mov dword [ebp - 0xa48], eax
cmp dword [ebp - 0xa48], 1
je 0x49904c
cmp dword [ebp - 0x5c], 0
je 0x49904c
mov dword [ebp - 0x1328], 1
jmp 0x499053
and dword [ebp - 0x1328], 0
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x1328], eax
je 0x49906a
mov dword [ebp - 0xa50], 1
jmp 0x499071
and dword [ebp - 0xa50], 0
mov eax, dword [ebp - 0x5c]
imul eax, dword [ebp - 0xa50]
cmp eax, dword [ebp - 0x5c]
jge 0x49909b
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x20b0], 0
je 0x49909b
mov dword [ebp - 0x1038], 1
jmp 0x4990a2
and dword [ebp - 0x1038], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20b0]
cmp dword [ebp - 0x1038], eax
jg 0x4990c3
mov dword [ebp - 0xa58], 1
jmp 0x4990ca
and dword [ebp - 0xa58], 0
mov eax, dword [ebp - 0xa58]
sub eax, 3
cmp dword [ebp - 0x5c], eax
jge 0x4990e4
mov dword [ebp - 0x1c34], 1
jmp 0x4990eb
and dword [ebp - 0x1c34], 0
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x20b0], 0xbe74fd57
jne 0x499109
mov dword [ebp - 0x15f8], 1
jmp 0x499110
and dword [ebp - 0x15f8], 0
mov eax, dword [ebp - 0x7b4]
cmp dword [ebp - 0x15f8], eax
je 0x49912a
mov dword [ebp - 0xa60], 1
jmp 0x499131
and dword [ebp - 0xa60], 0
mov eax, dword [ebp - 0xa60]
sub eax, dword [ebp - 0x1c3c]
cmp eax, 3
jb 0x49914e
mov dword [ebp - 0x1040], 1
jmp 0x499155
and dword [ebp - 0x1040], 0
cmp dword [ebp - 0x1040], 0xfffffffa
ja 0x499170
cmp dword [ebp - 0x5c], 0
je 0x499170
mov dword [ebp - 0xa68], 1
jmp 0x499177
and dword [ebp - 0xa68], 0
mov eax, dword [ebp - 0xa68]
mov dword [ebp - 0x1c44], eax
mov eax, dword [ebp - 0x5c]
add eax, dword [ebp - 0x1330]
cmp eax, dword [ebp - 0x338]
jne 0x499caf
mov dword [ebp - 0x218], 0x60477862
mov dword [ebp - 0x1c54], 0xdfc9b996
mov dword [ebp - 0x271c], 1
mov dword [ebp - 0x24a4], 0xf4df7b14
mov dword [ebp - 0x2870], 0xfffffff6
mov dword [ebp - 0x24ac], 0xfffffff9
mov dword [ebp - 0x272c], 0xfffffffd
mov dword [ebp - 0x24b4], 0xfffffffe
mov dword [ebp - 0x2930], 5
push 2
lea ecx, [ebp - 0x2598]
call fcn.0040b279
mov dword [ebp - 0x24bc], 2
mov dword [ebp - 0x273c], 0xbb5fb49a
mov dword [ebp - 0x1048], 0xffff
lea eax, [ebp - 0x2598]
push eax
push 1
push 0x29b9
push 0x1f0e
push 0x1df6
push 0
push 0x1c77
push 1
lea eax, [ebp - 0x24c4]
push eax
push 0
push 0x77b3
push 1
push 1
push 0x4b36
push 0x5068
push 0x6813
push 0x3ec
push 0x329a
push 0x36cc
push 0x760f
push 1
push 0x503f
call fcn.00497821
add esp, 0x58
mov dword [ebp - 0x218], 0
jmp 0x49929b
mov eax, dword [ebp - 0x218]
inc eax
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 0xf
jne 0x4993f9
mov dword [ebp - 0xa70], 0x3a9f
mov dword [ebp - 0x1c4c], str.abpe_yqgwn_gkoeeywwn_gcaj_obbf_qkahas_mveaqi_kdh
cmp dword [ebp - 0xa70], 0x3c1c
jle 0x499374
and dword [ebp - 0x528], 0
jmp 0x4992e2
mov eax, dword [ebp - 0x528]
inc eax
mov dword [ebp - 0x528], eax
cmp dword [ebp - 0x528], 0x78bf
jge 0x499374
and dword [ebp - 0x6c8], 0
jmp 0x499308
mov eax, dword [ebp - 0x6c8]
inc eax
mov dword [ebp - 0x6c8], eax
cmp dword [ebp - 0x6c8], 0x4fd1
jge 0x49936f
and dword [ebp - 0x340], 0
jmp 0x49932a
mov eax, dword [ebp - 0x340]
inc eax
mov dword [ebp - 0x340], eax
cmp dword [ebp - 0x340], 0x5abb
jge 0x49936d
mov eax, dword [ebp - 0x6c8]
xor eax, dword [ebp - 0x340]
or eax, dword [ebp - 0x528]
cdq
mov dword [ebp - 0x1918], eax
mov dword [ebp - 0x1914], edx
push dword [ebp - 0x1914]
push dword [ebp - 0x1918]
mov ecx, 0xade298
call fcn.0040b052
jmp 0x49931d
jmp 0x4992fb
jmp 0x4992d5
mov dword [ebp - 0x1c5c], 0xffff
mov dword [ebp - 4], 2
cmp dword [ebp - 0xa70], 0x36c8
jge 0x4993a1
mov edx, dword [ebp - 0x1c4c]
mov ecx, 0xade298
call fcn.0040d8d7
jmp 0x4993bd
or dword [ebp - 4], 0xffffffff
jmp 0x4993c7
lea eax, [ebp - 0x1c54]
push eax
push 0x158e
push 0x3ddd
push 1
lea eax, [ebp - 0x218]
push eax
push 1
push 1
lea eax, [ebp - 0x1c5c]
push eax
call fcn.004791f8
add esp, 0x20
jmp 0x49928e
mov eax, dword [ebp - 0x1048]
dec eax
mov dword [ebp - 0x1048], eax
lea ecx, [ebp - 0x2598]
call fcn.0040b34b
push 1
lea ecx, [ebp - 0x25c8]
call fcn.0040b279
mov dword [ebp - 0x348], 0xffffffff
mov dword [ebp - 0x2878], 0xfffffff8
mov dword [ebp - 0x28e0], 8
mov dword [ebp - 0x28dc], 8
mov dword [ebp - 0x28d8], 8
mov dword [ebp - 0x28d4], 8
mov dword [ebp - 0x24cc], 0
mov dword [ebp - 0xa78], 0xffff
lea eax, [ebp - 0x274c]
push eax
push 0x1450
push 0
lea eax, [ebp - 0x25c8]
push eax
push 0
push 0xec4
push 0
push 1
push 0x5f92
push 0x3833
push 0x4eb6
push 0x77c
call fcn.00481e7d
add esp, 0x30
mov dword [ebp - 0x348], 0
jmp 0x4994c3
mov eax, dword [ebp - 0x348]
dec eax
mov dword [ebp - 0x348], eax
cmp dword [ebp - 0x348], 0
jl 0x4995dc
push 2
lea ecx, [ebp - 0x25b8]
call fcn.0040b279
mov dword [ebp - 0x24d4], 0x4678dc2a
mov dword [ebp - 0x28d0], 9
push 3
lea ecx, [ebp - 0x25a8]
call fcn.0040b279
mov dword [ebp - 0x24dc], 0xd9827359
push 0x3a4a
lea eax, [ebp - 0x25b8]
push eax
push 0x218a
push 0x6fae
lea eax, [ebp - 0x2b8]
push eax
push 0x4322
push 1
push 1
push 0
call fcn.004758ef
add esp, 0x24
mov dword [ebp - 0x2b8], 0
jmp 0x499551
mov eax, dword [ebp - 0x2b8]
inc eax
mov dword [ebp - 0x2b8], eax
cmp dword [ebp - 0x2b8], 3
jge 0x499573
push dword [ebp - 0x2b8]
lea ecx, [ebp - 0x25a8]
call fcn.0040b367
mov dword [eax], 0xfffffffe
jmp 0x499544
mov eax, dword [ebp - 0xa78]
dec eax
mov dword [ebp - 0xa78], eax
mov byte [ebp - 0x180], 0
lea eax, [ebp - 0x180]
push eax
push 0
push 1
push 0x1351
push 0x6933
push 1
push 0x6a06
push 1
push 0x2760
push 0x66c7
push 0x3f7
push 0x447e
call fcn.00490cc9
add esp, 0x30
lea ecx, [ebp - 0x25a8]
call fcn.0040b34b
lea ecx, [ebp - 0x25b8]
call fcn.0040b34b
jmp 0x4994b6
lea ecx, [ebp - 0x25c8]
call fcn.0040b34b
mov byte [ebp - 0x182], 0
mov dword [ebp - 0xac0], 0x4d09
mov dword [ebp - 0x1c6c], str.viegwn_tayuk_adkarraa
cmp dword [ebp - 0xac0], 0x4e2b
jle 0x4996a8
and dword [ebp - 0x618], 0
jmp 0x499628
mov eax, dword [ebp - 0x618]
inc eax
mov dword [ebp - 0x618], eax
cmp dword [ebp - 0x618], 0x7d1a
jge 0x4996a8
and dword [ebp - 0x350], 0
jmp 0x49964a
mov eax, dword [ebp - 0x350]
inc eax
mov dword [ebp - 0x350], eax
cmp dword [ebp - 0x350], 0x2359
jge 0x4996a3
mov eax, dword [ebp - 0x618]
xor eax, dword [ebp - 0x350]
cdq
mov dword [ebp - 0x1924], eax
mov dword [ebp - 0x1920], edx
push dword [ebp - 0x1920]
push dword [ebp - 0x1924]
lea ecx, [ebp - 0x2ad0]
call fcn.00401a48
pop ecx
pop ecx
mov ecx, eax
call fcn.0040b047
push eax
call fcn.004af8e7
pop ecx
lea ecx, [ebp - 0x2ad0]
call fcn.0040b03d
jmp 0x49963d
jmp 0x49961b
mov dword [ebp - 0x1340], 0x8748
mov dword [ebp - 0x14a8], 0x56e7
mov dword [ebp - 0x1c64], str.yrou_dazgzsa_qjirhtt_ftwbqdtri_rxlnnyab_wxvoawkdk_jcxxl_glae_owpu_wkk_zrgyceh_rjntv_lmhv_wlaxrhuro
cmp dword [ebp - 0x14a8], 0x57a0
jle 0x49977e
and dword [ebp - 0x530], 0
jmp 0x4996ec
mov eax, dword [ebp - 0x530]
inc eax
mov dword [ebp - 0x530], eax
cmp dword [ebp - 0x530], 0x7943
jge 0x49977e
and dword [ebp - 0x358], 0
jmp 0x499712
mov eax, dword [ebp - 0x358]
inc eax
mov dword [ebp - 0x358], eax
cmp dword [ebp - 0x358], 0x1290
jge 0x499779
and dword [ebp - 0x690], 0
jmp 0x499734
mov eax, dword [ebp - 0x690]
inc eax
mov dword [ebp - 0x690], eax
cmp dword [ebp - 0x690], 0x1caf
jge 0x499777
mov eax, dword [ebp - 0x530]
add eax, dword [ebp - 0x358]
add eax, dword [ebp - 0x690]
cdq
mov dword [ebp - 0x1930], eax
mov dword [ebp - 0x192c], edx
push dword [ebp - 0x192c]
push dword [ebp - 0x1930]
mov ecx, 0xade298
call fcn.0040b052
jmp 0x499727
jmp 0x499705
jmp 0x4996df
mov dword [ebp - 0x78], 7
mov dword [ebp - 4], 4
cmp dword [ebp - 0x14a8], 0x5313
jge 0x4997a8
mov edx, dword [ebp - 0x1c64]
mov ecx, 0xade298
call fcn.0040d8d7
jmp 0x4997c4
or dword [ebp - 4], 0xffffffff
jmp 0x4997ce
push 2
lea ecx, [ebp - 0x2128]
call fcn.0040b279
mov dword [ebp - 0x538], 0xfffffff6
mov dword [ebp - 0x14b0], 0xfffffffd
mov dword [ebp - 0x220], 0
jmp 0x499808
mov eax, dword [ebp - 0x220]
inc eax
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 3
jge 0x499824
mov eax, dword [ebp - 0x220]
mov dword [ebp + eax*4 - 0x1c94], 0xfffffffe
jmp 0x4997fb
lea eax, [ebp - 0x2128]
push eax
push 0x7d3a
push 0x7cdb
push 0x5340
push 0x75b
push 0x6a91
push 1
push 1
lea eax, [ebp - 0x220]
push eax
push 0
push 1
push 0x48cd
push 0
push 0x585a
call fcn.00484072
add esp, 0x38
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x275c], eax
cmp dword [ebp - 0x78], 0x1a78e
jl 0x499885
mov dword [ebp - 0xa80], 1
jmp 0x49988c
and dword [ebp - 0xa80], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1c94]
cmp dword [ebp - 0xa80], eax
jne 0x4998ad
mov dword [ebp - 0x1050], 1
jmp 0x4998b4
and dword [ebp - 0x1050], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1c94]
cmp dword [ebp - 0x1050], eax
jge 0x4998db
mov eax, 0x15a8df04
test eax, eax
jne 0x4998db
and dword [ebp - 0xa88], 0
jmp 0x4998e5
mov dword [ebp - 0xa88], 1
mov eax, dword [ebp - 0xa88]
sub eax, 0x1914
jne 0x499901
cmp dword [ebp - 0x78], 0
jne 0x499901
and dword [ebp - 0x360], 0
jmp 0x49990b
mov dword [ebp - 0x360], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x360]
mov dword [ebp + eax - 0x1c94], ecx
push 0
lea ecx, [ebp - 0x2128]
call fcn.0040b367
mov ecx, dword [ebp - 0x360]
mov dword [eax], ecx
cmp dword [ebp - 0x360], 1
jl 0x499948
mov dword [ebp - 0x1338], 1
jmp 0x49994f
and dword [ebp - 0x1338], 0
mov eax, dword [ebp - 0x78]
cmp dword [ebp - 0x1338], eax
jl 0x499966
mov dword [ebp - 0xa90], 1
jmp 0x49996d
and dword [ebp - 0xa90], 0
mov eax, dword [ebp - 0x78]
cmp dword [ebp - 0xa90], eax
jge 0x499984
mov dword [ebp - 0x1058], 1
jmp 0x49998b
and dword [ebp - 0x1058], 0
mov eax, dword [ebp - 0x78]
imul eax, dword [ebp - 0x1058]
sub eax, 0x1210
cmp eax, 0x90ef874a
jb 0x4999ad
mov dword [ebp - 0xa98], 1
jmp 0x4999b4
and dword [ebp - 0xa98], 0
mov eax, dword [ebp - 0x78]
add eax, dword [ebp - 0xa98]
cmp eax, 0xffffffff
je 0x4999ce
mov dword [ebp - 0x1568], 1
jmp 0x4999d5
and dword [ebp - 0x1568], 0
cmp dword [ebp - 0x1568], 0xffffffff
jb 0x4999ea
mov dword [ebp - 0xaa0], 1
jmp 0x4999f1
and dword [ebp - 0xaa0], 0
mov eax, dword [ebp - 0x78]
cmp dword [ebp - 0xaa0], eax
jge 0x499a08
mov dword [ebp - 0x1060], 1
jmp 0x499a0f
and dword [ebp - 0x1060], 0
mov eax, dword [ebp - 0x1060]
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x538]
cmp dword [ebp - 0x78], eax
jge 0x499a2f
mov dword [ebp - 0xaa8], 1
jmp 0x499a36
and dword [ebp - 0xaa8], 0
cmp dword [ebp - 0xaa8], 1
je 0x499a4b
mov dword [ebp - 0xab0], 1
jmp 0x499a52
and dword [ebp - 0xab0], 0
mov dword [ebp - 0x1340], 0x52c58fb7
mov eax, dword [ebp - 0x1340]
cmp eax, dword [ebp - 0xab0]
je 0x499a76
mov dword [ebp - 0x1068], 1
jmp 0x499a7d
and dword [ebp - 0x1068], 0
mov eax, dword [ebp - 0x1068]
mov dword [ebp - 0x538], eax
cmp dword [ebp - 0x538], 0
jne 0x499aa0
push 6
pop eax
test eax, eax
jne 0x499aa0
cmp dword [ebp - 0x538], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1c94]
mov dword [ebp - 0x24e4], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x14b0]
cmp dword [ebp + eax - 0x1c94], ecx
jl 0x499ad4
mov dword [ebp - 0xab8], 1
jmp 0x499adb
and dword [ebp - 0xab8], 0
mov eax, dword [ebp - 0xab8]
mov dword [ebp - 0x14b0], eax
push 0x4969
push 0x34bc
push 1
push 1
push 0x1f20
push 0x54d0
lea eax, [ebp - 0x78]
push eax
push 0
call fcn.00495736
add esp, 0x20
lea ecx, [ebp - 0x2128]
call fcn.0040b34b
mov dword [ebp - 4], 6
cmp dword [ebp - 0xac0], 0x4a04
jge 0x499b37
push dword [ebp - 0x1c6c]
call fcn.004af8e7
pop ecx
jmp 0x499b53
or dword [ebp - 4], 0xffffffff
jmp 0x499b5d
movzx eax, byte [ebp - 0x182]
test eax, eax
je 0x499caa
mov dword [ebp - 0x368], 0xae355683
mov dword [ebp - 0x368], 0
jmp 0x499b8f
mov eax, dword [ebp - 0x368]
dec eax
mov dword [ebp - 0x368], eax
cmp dword [ebp - 0x368], 0xffffffeb
jle 0x499c9f
mov dword [ebp - 0x288], 0xffffffff
mov dword [ebp - 0x288], 0xfffffff9
mov dword [ebp - 0x288], 0xffffffff
jmp 0x499bc9
mov eax, dword [ebp - 0x288]
inc eax
mov dword [ebp - 0x288], eax
cmp dword [ebp - 0x288], 0xffffffff
jg 0x499c9a
mov dword [ebp - 0x1e0], 0x26d2e858
mov dword [ebp - 0x620], 0
jmp 0x499bf9
mov eax, dword [ebp - 0x620]
inc eax
mov dword [ebp - 0x620], eax
cmp dword [ebp - 0x620], 4
jge 0x499c15
mov eax, dword [ebp - 0x620]
mov dword [ebp + eax*4 - 0x29c8], 3
jmp 0x499bec
push 0x4ee0
push 1
lea eax, [ebp - 0x1e0]
push eax
push 0x289e
push 0
push 1
call fcn.0047ab88
add esp, 0x18
mov dword [ebp - 0x1e0], 3
jmp 0x499c4d
mov eax, dword [ebp - 0x1e0]
dec eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 0
jl 0x499c95
mov byte [ebp - 0x184], 0
lea eax, [ebp - 0x184]
push eax
push 0
push 0
push 0x7863
push 1
push 0x5403
push 0x4c26
call fcn.00483c98
add esp, 0x1c
mov eax, dword [ebp - 0x1e0]
cmp dword [ebp + eax*4 - 0x29c8], 0
je 0x499c93
jmp 0x499c40
jmp 0x499c40
jmp 0x499bbc
jmp 0x499b82
push 0x1d01
call dword [sym.imp.USER32.dll_GetDC]
jmp 0x49af06
mov dword [ebp - 0xad8], 0x38ec
mov dword [ebp - 0xad0], 1
mov dword [ebp - 0x1080], 1
mov dword [ebp - 0xac8], 0x2ba7b7e8
mov dword [ebp - 0x1c7c], 1
mov dword [ebp - 0x1070], 0x3258
mov dword [ebp - 0x1c74], str.ivsc_nvlvyib_laqrztze_ftlqlc_gdkb_ztsojomk_vpo_leatmyera
cmp dword [ebp - 0x1070], 0x32e7
jle 0x499dd6
and dword [ebp - 0x370], 0
jmp 0x499d1b
mov eax, dword [ebp - 0x370]
inc eax
mov dword [ebp - 0x370], eax
cmp dword [ebp - 0x370], 0x59e6
jge 0x499dcc
and dword [ebp - 0x540], 0
jmp 0x499d41
mov eax, dword [ebp - 0x540]
inc eax
mov dword [ebp - 0x540], eax
cmp dword [ebp - 0x540], 0x5861
jge 0x499dc7
and dword [ebp - 0x378], 0
jmp 0x499d63
mov eax, dword [ebp - 0x378]
inc eax
mov dword [ebp - 0x378], eax
cmp dword [ebp - 0x378], 0x6f0b
jge 0x499dc2
mov eax, dword [ebp - 0x370]
sub eax, dword [ebp - 0x540]
add eax, dword [ebp - 0x378]
cdq
mov dword [ebp - 0x193c], eax
mov dword [ebp - 0x1938], edx
push dword [ebp - 0x1938]
push dword [ebp - 0x193c]
lea ecx, [ebp - 0x2a70]
call fcn.00401a48
pop ecx
pop ecx
mov ecx, eax
call fcn.0040b047
push eax
call fcn.004af8e7
pop ecx
lea ecx, [ebp - 0x2a70]
call fcn.0040b03d
jmp 0x499d56
jmp 0x499d34
jmp 0x499d0e
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0x1348], 0x8d9ba5f2
mov dword [ebp - 4], 8
cmp dword [ebp - 0x1070], 0x2f1c
jge 0x499dff
push dword [ebp - 0x1c74]
call fcn.004af8e7
pop ecx
jmp 0x499e1b
or dword [ebp - 4], 0xffffffff
jmp 0x499e25
push 2
lea ecx, [ebp - 0x1e50]
call fcn.0040b279
mov dword [ebp - 0x1078], 0xc3997b09
mov dword [ebp - 0x15d8], 1
mov dword [ebp - 0xae0], 0x77ae2718
mov dword [ebp - 0x6e8], 0
jmp 0x499e69
mov eax, dword [ebp - 0x6e8]
inc eax
mov dword [ebp - 0x6e8], eax
cmp dword [ebp - 0x6e8], 2
jge 0x499e8b
push dword [ebp - 0x6e8]
lea ecx, [ebp - 0x1e50]
call fcn.0040b367
mov dword [eax], 0x9b857552
jmp 0x499e5c
push 0x51eb
push 1
lea eax, [ebp - 0x1080]
push eax
lea eax, [ebp - 0xad8]
push eax
push 0
push 0x2083
lea eax, [ebp - 0x1e50]
push eax
lea eax, [ebp - 0x1348]
push eax
push 0x1e47
lea eax, [ebp - 0xae0]
push eax
push 1
lea eax, [ebp - 0x1078]
push eax
lea eax, [ebp - 0x15d8]
push eax
push 0x6963
push 0
lea eax, [ebp - 0x1c7c]
push eax
push 0x6396
lea eax, [ebp - 0xad0]
push eax
push 0x62a
push 0x212d
lea eax, [ebp - 0xac8]
push eax
call fcn.004914ff
add esp, 0x54
push 0xd0e
lea eax, [ebp - 0x1e50]
push eax
push 0x4f5b
push 0x1272
push 1
lea eax, [ebp - 0xac8]
push eax
push 1
push 1
lea eax, [ebp - 0x1348]
push eax
lea eax, [ebp - 0xad0]
push eax
push 0x3ab8
lea eax, [ebp - 0x1078]
push eax
lea eax, [ebp - 0xad8]
push eax
push 1
lea eax, [ebp - 0x15d8]
push eax
push 0x4ec7
lea eax, [ebp - 0xae0]
push eax
push 0x223b
lea eax, [ebp - 0x1080]
push eax
call fcn.00479cca
add esp, 0x4c
lea ecx, [ebp - 0x1e50]
call fcn.0040b34b
mov dword [ebp - 0x1e1c], 0x965da1f7
mov dword [ebp - 0x1e24], 0xb039b7c3
mov dword [ebp - 0x628], 0x60477862
mov dword [ebp - 0xae8], 0x5f72
mov dword [ebp - 0x1c84], str.pmxtu_jtidduj_zup_nnjdo_lfggodpk_vkkht_azqvx_dqz_quax
cmp dword [ebp - 0xae8], 0x61e3
jle 0x49a08d
and dword [ebp - 0x380], 0
jmp 0x499fd4
mov eax, dword [ebp - 0x380]
inc eax
mov dword [ebp - 0x380], eax
cmp dword [ebp - 0x380], 0x6c51
jge 0x49a087
and dword [ebp - 0x548], 0
jmp 0x499ffa
mov eax, dword [ebp - 0x548]
inc eax
mov dword [ebp - 0x548], eax
cmp dword [ebp - 0x548], 0x10a5
jge 0x49a082
and dword [ebp - 0x388], 0
jmp 0x49a01c
mov eax, dword [ebp - 0x388]
inc eax
mov dword [ebp - 0x388], eax
cmp dword [ebp - 0x388], 0x50ee
jge 0x49a07d
mov eax, dword [ebp - 0x380]
mov ecx, dword [ebp - 0x548]
shl eax, cl
xor eax, dword [ebp - 0x388]
cdq
mov dword [ebp - 0x1948], eax
mov dword [ebp - 0x1944], edx
push dword [ebp - 0x1944]
push dword [ebp - 0x1948]
lea ecx, [ebp - 0x2b00]
call fcn.00401a48
pop ecx
pop ecx
mov ecx, eax
call fcn.0040b047
push eax
call fcn.004af8e7
pop ecx
lea ecx, [ebp - 0x2b00]
call fcn.0040b03d
jmp 0x49a00f
jmp 0x499fed
jmp 0x499fc7
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x2880], 7
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0xae8], 0x5f17
jge 0x49a0b6
push dword [ebp - 0x1c84]
call fcn.004af8e7
pop ecx
jmp 0x49a0d2
or dword [ebp - 4], 0xffffffff
jmp 0x49a0dc
mov dword [ebp - 0x628], 0
jmp 0x49a0f5
mov eax, dword [ebp - 0x628]
inc eax
mov dword [ebp - 0x628], eax
cmp dword [ebp - 0x628], 0x17
jge 0x49a199
mov dword [ebp - 0x1de0], 0x7c203980
push 0x7115
push 0x1fbc
push 0x4654
push 0x3258
push 0x1ad3
push 0x1516
push 0x162d
push 0x5a28
push 0xc25
push 0x13ff
push 0xafc
push 0x20e9
push 0x5009
lea eax, [ebp - 0x1de0]
push eax
push 0x1987
push 0x24e9
push 0x683b
push 0x71d6
push 0x4ba4
push 1
push 0
push 0x410f
push 0x7d75
push 0x5418
push 1
push 0xf5
push 0x5b7f
call fcn.0047d9d3
add esp, 0x6c
jmp 0x49a0e8
mov byte [ebp - 0x186], 0
movzx eax, byte [ebp - 0x186]
test eax, eax
je 0x49a1ca
push 1
push 0x2a4f
push 1
push 0x3817
push 0x66e9
push 1
push 0
call fcn.0047f455
add esp, 0x1c
mov dword [ebp - 0x5c], 0
jmp 0x49a1da
mov eax, dword [ebp - 0x5c]
dec eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0xffffffeb
jge 0x49af06
mov dword [ebp - 0x1b10], 1
push 2
lea ecx, [ebp - 0x20c8]
call fcn.0040b279
mov dword [ebp - 0x390], 0xc75b57fd
mov dword [ebp - 0x390], 0xffffffee
jmp 0x49a21e
mov eax, dword [ebp - 0x390]
dec eax
mov dword [ebp - 0x390], eax
cmp dword [ebp - 0x390], 0xffffffec
jge 0x49a302
mov dword [ebp - 0x194], 0x1bf2
mov dword [ebp - 0x550], 0
jmp 0x49a24e
mov eax, dword [ebp - 0x550]
inc eax
mov dword [ebp - 0x550], eax
cmp dword [ebp - 0x550], 4
jge 0x49a26a
mov eax, dword [ebp - 0x550]
mov dword [ebp + eax*4 - 0x28f4], 0xffffffff
jmp 0x49a241
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x28f4]
mov dword [ebp - 0x194], eax
mov dword [ebp - 0x194], 0
jmp 0x49a295
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 3
jg 0x49a2fd
mov dword [ebp - 0x228], 0xef9d7865
mov dword [ebp - 0x228], 3
jmp 0x49a2c1
mov eax, dword [ebp - 0x228]
dec eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 0
jl 0x49a2f0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x194]
mov eax, dword [ebp + eax - 0x28f4]
mov dword [ebp + ecx*4 - 0x28f4], eax
cmp dword [ebp - 0x194], 0
je 0x49a2ee
jmp 0x49a2b4
jmp 0x49a2b4
cmp dword [ebp - 0x228], 0
je 0x49a2fb
jmp 0x49a288
jmp 0x49a288
jmp 0x49a211
push 0
push 0x620b
push 0x6ceb
push 1
push 0
push 1
lea eax, [ebp - 0x24ec]
push eax
lea eax, [ebp - 0x20c8]
push eax
call fcn.0048da0f
add esp, 0x20
mov dword [ebp - 0x1de8], 1
push 3
lea ecx, [ebp - 0x25d8]
call fcn.0040b279
mov dword [ebp - 0x21d0], 0xffffffff
mov dword [ebp - 0x1350], 0x2ba7b7e8
mov dword [ebp - 0x34], 0
jmp 0x49a365
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 2
jge 0x49a37b
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x2230], 0xffffffff
jmp 0x49a35e
mov dword [ebp - 0x34], 0
jmp 0x49a38b
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 3
jge 0x49a3a4
push dword [ebp - 0x34]
lea ecx, [ebp - 0x25d8]
call fcn.0040b367
or dword [eax], 0xffffffff
jmp 0x49a384
mov dword [ebp - 0x34], 0
jmp 0x49a3b4
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 4
jge 0x49a3ca
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x2d0c], 0xfffffff9
jmp 0x49a3ad
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2230]
mov dword [ebp - 0x1de8], eax
mov eax, dword [ebp - 0x1350]
inc eax
mov dword [ebp - 0x1350], eax
lea ecx, [ebp - 0x25d8]
call fcn.0040b34b
push 2
lea ecx, [ebp - 0x954]
call fcn.0040b279
mov dword [ebp - 0x1f88], 0x6d8d3833
mov dword [ebp - 0x1f84], 0x6d8d3833
mov dword [ebp - 0x1f80], 0x6d8d3833
mov dword [ebp - 0x1f7c], 0x6d8d3833
lea ecx, [ebp - 0x865]
call fcn.0040b376
push eax
lea eax, [ebp - 0x1f78]
push eax
lea eax, [ebp - 0x1f88]
push eax
lea ecx, [ebp - 0x29b0]
call fcn.0040b379
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1e5c]
call fcn.0040b325
mov dword [ebp - 0x118], 0xb785b647
mov dword [ebp - 0xb20], 0xe2caeaba
mov dword [ebp - 0x2e0], 0
mov dword [ebp - 0xbc], 0
jmp 0x49a496
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 2
jge 0x49a4b8
push dword [ebp - 0xbc]
lea ecx, [ebp - 0x954]
call fcn.0040b367
mov dword [eax], 7
jmp 0x49a489
mov dword [ebp - 0xbc], 0
jmp 0x49a4d1
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 3
jge 0x49a4ed
mov eax, dword [ebp - 0xbc]
mov dword [ebp + eax*4 - 0x1594], 0
jmp 0x49a4c4
push 1
lea ecx, [ebp - 0x954]
call fcn.0040b367
cmp dword [eax], 0
jne 0x49a511
mov eax, 0xffff
test eax, eax
jne 0x49a511
and dword [ebp - 0xaf0], 0
jmp 0x49a51b
mov dword [ebp - 0xaf0], 1
push 1
lea ecx, [ebp - 0x954]
call fcn.0040b367
mov esi, eax
push 0
lea ecx, [ebp - 0x954]
call fcn.0040b367
mov ecx, dword [esi]
cmp ecx, dword [eax]
jl 0x49a549
mov dword [ebp - 0x1df0], 1
jmp 0x49a550
and dword [ebp - 0x1df0], 0
push 1
lea ecx, [ebp - 0x954]
call fcn.0040b367
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1594]
mov dword [ebp - 0x21d8], eax
push 2
lea ecx, [ebp - 0x1e5c]
call fcn.0040b367
cmp dword [eax], 0x98cafa32
jne 0x49a591
mov dword [ebp - 0x1088], 1
jmp 0x49a598
and dword [ebp - 0x1088], 0
mov eax, dword [ebp - 0xaf0]
cmp eax, dword [ebp - 0x1088]
jl 0x49a5c4
push 2
lea ecx, [ebp - 0x1e5c]
call fcn.0040b367
cmp dword [eax], 0
je 0x49a5c4
mov dword [ebp - 0xaf8], 1
jmp 0x49a5cb
and dword [ebp - 0xaf8], 0
push 1
lea ecx, [ebp - 0x954]
call fcn.0040b367
mov ecx, dword [ebp - 0xaf8]
mov dword [eax], ecx
mov dword [ebp - 0x118], 0xffffffea
jmp 0x49a5f9
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0x15
jge 0x49aa52
mov dword [ebp - 0x2c], 1
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1594], 0
ja 0x49a629
mov dword [ebp - 0xb10], 1
jmp 0x49a630
and dword [ebp - 0xb10], 0
cmp dword [ebp - 0x2c], 0x4b26
jge 0x49a645
mov dword [ebp - 0x14b8], 1
jmp 0x49a64c
and dword [ebp - 0x14b8], 0
cmp dword [ebp - 0x14b8], 0x8101aedf
jb 0x49a664
mov dword [ebp - 0xb00], 1
jmp 0x49a66b
and dword [ebp - 0xb00], 0
mov eax, dword [ebp - 0x118]
cmp dword [ebp - 0xb00], eax
je 0x49a685
mov dword [ebp - 0x1090], 1
jmp 0x49a68c
and dword [ebp - 0x1090], 0
mov eax, dword [ebp - 0x1090]
neg eax
mov dword [ebp - 0xb08], eax
push 1
lea ecx, [ebp - 0x954]
call fcn.0040b367
mov ecx, dword [ebp - 0xb08]
mov dword [eax], ecx
cmp dword [ebp - 0xb08], 0
jne 0x49a6c4
mov dword [ebp - 0x1358], 1
jmp 0x49a6cb
and dword [ebp - 0x1358], 0
push 2
lea ecx, [ebp - 0x1e5c]
call fcn.0040b367
mov ecx, dword [ebp - 0x1358]
cmp ecx, dword [eax]
jle 0x49a6ee
mov dword [ebp - 0x1098], 1
jmp 0x49a6f5
and dword [ebp - 0x1098], 0
mov eax, dword [ebp - 0xb10]
cmp eax, dword [ebp - 0x1098]
jge 0x49a71f
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1594], 0
je 0x49a71f
mov dword [ebp - 0xb18], 1
jmp 0x49a726
and dword [ebp - 0xb18], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1594]
cmp dword [ebp - 0xb18], eax
jge 0x49a747
mov dword [ebp - 0x1570], 1
jmp 0x49a74e
and dword [ebp - 0x1570], 0
mov eax, dword [ebp - 0x1570]
mov dword [ebp - 0xb20], eax
mov eax, dword [ebp - 0x118]
cmp dword [ebp - 0xb20], eax
jge 0x49a774
mov dword [ebp - 0x10a0], 1
jmp 0x49a77b
and dword [ebp - 0x10a0], 0
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x10a0]
jl 0x49a792
mov dword [ebp - 0xb28], 1
jmp 0x49a799
and dword [ebp - 0xb28], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0xb28], eax
jg 0x49a7b0
mov dword [ebp - 0x1360], 1
jmp 0x49a7b7
and dword [ebp - 0x1360], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x1360], eax
jge 0x49a7ce
mov dword [ebp - 0x1df8], 1
jmp 0x49a7d5
and dword [ebp - 0x1df8], 0
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x21e0], eax
cmp dword [ebp - 0x118], 0
jne 0x49a7ed
cmp dword [ebp - 0x2c], 0
je 0x49a84a
push 0
push 0
push 0
push 1
push 0x12ff
call fcn.0047b90c
add esp, 0x14
mov dword [ebp - 0x2c], 0
jmp 0x49a812
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0xfffffff2
jge 0x49a845
push 1
push 1
push 0xcb5
push 0x322f
push 0x446f
push 1
push 1
push 0xc7
lea eax, [ebp - 0x2e0]
push eax
call fcn.0047a6c0
add esp, 0x24
jmp 0x49a80b
jmp 0x49a9f8
mov dword [ebp - 0x398], 3
mov byte [ebp - 0x13d], 0
movzx eax, byte [ebp - 0x13d]
test eax, eax
je 0x49a87e
push 0x1c53
push 0
push 0x775
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CompareStringW]
mov dword [ebp - 0x2e0], 0xfffffffa
jmp 0x49a897
cmp dword [ebp - 0x2e0], 0xffffffe8
jg 0x49a9f8
mov dword [ebp - 0x230], 0x5a40a7b4
mov eax, dword [ebp - 0x230]
mov dword [ebp - 0x21e8], eax
mov eax, dword [ebp - 0x398]
mov dword [ebp - 0x21f0], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1594]
mov dword [ebp - 0x21f8], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x230]
cmp dword [ebp + eax - 0x1594], ecx
je 0x49a8fa
mov dword [ebp - 0x1e0c], 1
jmp 0x49a901
and dword [ebp - 0x1e0c], 0
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x2200], eax
mov eax, dword [ebp - 0x398]
add eax, dword [ebp - 0x230]
imul eax, dword [ebp - 0x398]
cmp eax, dword [ebp - 0x230]
jle 0x49a934
mov dword [ebp - 0xb30], 1
jmp 0x49a93b
and dword [ebp - 0xb30], 0
cmp dword [ebp - 0xb30], 5
je 0x49a950
mov dword [ebp - 0x10a8], 1
jmp 0x49a957
and dword [ebp - 0x10a8], 0
cmp dword [ebp - 0x10a8], 0
jle 0x49a96c
mov dword [ebp - 0xb38], 1
jmp 0x49a973
and dword [ebp - 0xb38], 0
mov eax, dword [ebp - 0x398]
imul eax, dword [ebp - 0xb38]
push 4
pop ecx
shl ecx, 0
imul eax, dword [ebp + ecx - 0x1594]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x1594]
jl 0x49a9a9
mov dword [ebp - 0x14c0], 1
jmp 0x49a9b0
and dword [ebp - 0x14c0], 0
cmp dword [ebp - 0x14c0], 0
je 0x49a9cb
push 0x20f
push 0x4c82
push 0x945
push 1
push 0
push 0x742d
push 0x682f
push 1
lea eax, [ebp - 0x2c]
push eax
push 1
push 0x67af
push 0x2de1
push 0x1608
push 0x36b1
push 0x788c
push 0x626c
push 0x374f
push 0x834
call fcn.00495aef
add esp, 0x48
jmp 0x49a5ec
lea ecx, [ebp - 0x1e5c]
call fcn.0040b34b
lea ecx, [ebp - 0x954]
call fcn.0040b34b
mov byte [ebp - 0x1d0], 0
push 1
lea ecx, [ebp - 0x1ca4]
call fcn.0040b279
push 1
push 0x912
lea eax, [ebp - 0x1ca4]
push eax
push 0
push 0x7d8f
push 0xf1c
push 0
push 0x454f
lea eax, [ebp - 0x2208]
push eax
push 1
call fcn.0047f52c
add esp, 0x28
push 0
lea ecx, [ebp - 0x1ca4]
call fcn.0040b367
mov dword [eax], 0xfffffff2
jmp 0x49aae7
push 0
lea ecx, [ebp - 0x1ca4]
call fcn.0040b367
mov dword [ebp - 0x10b0], eax
mov eax, dword [ebp - 0x10b0]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x10b0]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x1ca4]
call fcn.0040b367
cmp dword [eax], 0x15
jge 0x49ac61
mov dword [ebp - 0xb48], 0x396f
mov dword [ebp - 0x1e14], str.wnpr_vtszz_oiebtxp_mcfqxxc_wbenjq
cmp dword [ebp - 0xb48], 0x39b2
jle 0x49abb7
and dword [ebp - 0x698], 0
jmp 0x49ab37
mov eax, dword [ebp - 0x698]
inc eax
mov dword [ebp - 0x698], eax
cmp dword [ebp - 0x698], 0x3226
jge 0x49abb7
and dword [ebp - 0x3a0], 0
jmp 0x49ab59
mov eax, dword [ebp - 0x3a0]
inc eax
mov dword [ebp - 0x3a0], eax
cmp dword [ebp - 0x3a0], 0x554
jge 0x49abb2
mov eax, dword [ebp - 0x698]
or eax, dword [ebp - 0x3a0]
cdq
mov dword [ebp - 0x1954], eax
mov dword [ebp - 0x1950], edx
push dword [ebp - 0x1950]
push dword [ebp - 0x1954]
lea ecx, [ebp - 0x2c74]
call fcn.00401a48
pop ecx
pop ecx
mov ecx, eax
call fcn.0040b047
push eax
call fcn.004af8e7
pop ecx
lea ecx, [ebp - 0x2c74]
call fcn.0040b03d
jmp 0x49ab4c
jmp 0x49ab2a
mov byte [ebp - 0x1ce], 0
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0xb48], 0x3625
jge 0x49abdd
push dword [ebp - 0x1e14]
call fcn.004af8e7
pop ecx
jmp 0x49abf9
or dword [ebp - 4], 0xffffffff
jmp 0x49ac03
lea eax, [ebp - 0x1ce]
push eax
push 1
push 0
push 0x46d0
push 1
push 0
push 0x3f27
push 0x7862
push 0x2dfb
call fcn.0049322d
add esp, 0x24
push 1
push 0x7c19
push 1
push 0x1328
push 1
push 0
push 0x37b8
push 0x604f
push 0x5eba
push 0x3d82
call fcn.0047bcbf
add esp, 0x28
jmp 0x49aac3
mov byte [ebp - 0x145], 0
push 0
push 0
lea eax, [ebp - 0x145]
push eax
push 0x3978
push 0x6413
push 0x721e
push 0x6991
push 0
call fcn.0048ff20
add esp, 0x20
lea ecx, [ebp - 0x1ca4]
call fcn.0040b34b
movzx eax, byte [ebp - 0x1d0]
test eax, eax
je 0x49ace6
push 0
push 1
push 0x19e2
push 0x41f9
push 0x5d5a
push 1
push 0x5937
call fcn.004821a3
add esp, 0x1c
push 0x6f62
push 1
push 0x652d
push 0x218b
push 1
push 1
call fcn.0047ab88
add esp, 0x18
push 4
lea ecx, [ebp - 0x1cb4]
call fcn.0040b279
lea eax, [ebp - 0x290]
push eax
push 0
push 1
push 0
push 0x84c
push 1
push 0x3379
push 0x5374
push 1
lea eax, [ebp - 0x1cb4]
push eax
call fcn.0047984a
add esp, 0x28
mov dword [ebp - 0x290], 0
jmp 0x49ad3b
mov eax, dword [ebp - 0x290]
inc eax
mov dword [ebp - 0x290], eax
cmp dword [ebp - 0x290], 4
jge 0x49ad57
mov eax, dword [ebp - 0x290]
mov dword [ebp + eax*4 - 0x2a58], 1
jmp 0x49ad2e
push 3
lea ecx, [ebp - 0x1cb4]
call fcn.0040b367
push 3
lea ecx, [ebp - 0x1cb4]
call fcn.0040b367
push 0
lea ecx, [ebp - 0x1cb4]
call fcn.0040b367
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x2a58]
cmp dword [eax], ecx
je 0x49ad9a
mov dword [ebp - 0x1368], 1
jmp 0x49ada1
and dword [ebp - 0x1368], 0
xor eax, eax
inc eax
sub eax, dword [ebp - 0x1368]
je 0x49ae27
mov byte [ebp - 0x14d], 0
movzx eax, byte [ebp - 0x14d]
test eax, eax
je 0x49ade0
push 1
push 0x4197
push 1
push 0x30b0
push 0x4001
push 0x4cb2
push 0
call fcn.0048ce44
add esp, 0x1c
mov byte [ebp - 0x1d2], 0
push 1
push 1
lea eax, [ebp - 0x1d2]
push eax
push 0x855
push 1
push 0x8a6
push 1
push 0x44ca
push 0x7aa4
push 0x6e5
push 0x1f6a
push 0x6d53
push 1
push 0
call fcn.00492d5e
add esp, 0x38
jmp 0x49ae9d
mov byte [ebp - 0x155], 0
movzx eax, byte [ebp - 0x155]
test eax, eax
je 0x49ae9d
push 0x790e
push 1
push 0xe8
push 0x4d43
push 0x5bc2
push 0x4142
push 1
push 1
push 0x321b
push 0x405
push 0x42b7
push 0x8f5
push 0xbd8
push 0x4e89
push 0x4656
push 0x1a4a
push 0
push 0
push 0x6000
push 0x1c9c
push 0
push 0xdc3
call fcn.0048df35
add esp, 0x58
lea ecx, [ebp - 0x1cb4]
call fcn.0040b34b
push 0x42f5
push 0x4d46
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x1e1c]
push eax
push 0x5497
lea eax, [ebp - 0x1e24]
push eax
lea eax, [ebp - 0x20c8]
push eax
lea eax, [ebp - 0x1b10]
push eax
push 0
push 0x3cca
push 0x963
push 0
push 1
push 1
push 0x618d
call fcn.0048c5be
add esp, 0x3c
lea ecx, [ebp - 0x20c8]
call fcn.0040b34b
jmp 0x49a1d3
mov dword [ebp - 0xfc], 0x4e2
mov dword [ebp - 0x558], 0
jmp 0x49af29
mov eax, dword [ebp - 0x558]
inc eax
mov dword [ebp - 0x558], eax
cmp dword [ebp - 0x558], 3
jge 0x49af45
mov eax, dword [ebp - 0x558]
mov dword [ebp + eax*4 - 0x25e8], 0x898f01ba
jmp 0x49af1c
push 0x5847
push 0x75e9
push 0x57ce
push 0x763
push 0xf1d
push 0x6474
push 0
push 0x671f
push 0x507a
push 1
push 0x7042
push 0x6e6a
push 1
push 0x41ee
push 0x59a
push 0x19a9
push 1
push 0x1dba
push 0x188f
push 1
push 0x4bac
lea eax, [ebp - 0xfc]
push eax
push 0x7bad
push 0x6e85
push 0x64b9
push 0x564d
push 1
call fcn.0048f3fd
add esp, 0x6c
mov dword [ebp - 0xfc], 0
jmp 0x49afdd
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0x12
jge 0x49b2e1
mov dword [ebp - 0x128], 0xea122098
cmp dword [ebp - 0xfc], 0
je 0x49b104
mov dword [ebp - 0x874], 8
mov dword [ebp - 0x7bc], 0x1b17d72b
mov dword [ebp - 0x16d4], 1
mov eax, dword [ebp - 0x7bc]
mov dword [ebp - 0x2210], eax
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0x2218], eax
mov eax, dword [ebp - 0x7bc]
mov dword [ebp - 0x22b0], eax
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0xb50], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xb50]
mov dword [ebp + eax - 0x25e8], ecx
mov eax, dword [ebp - 0x874]
dec eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
mov ecx, dword [ebp - 0xfc]
imul ecx, dword [ebp - 0xfc]
imul eax, ecx
cmp dword [ebp - 0xb50], eax
jl 0x49b099
mov dword [ebp - 0x18d0], 1
jmp 0x49b0a0
and dword [ebp - 0x18d0], 0
mov eax, dword [ebp - 0x16d4]
mov dword [ebp - 0x22b8], eax
mov eax, dword [ebp - 0x128]
cmp dword [ebp - 0x128], eax
jg 0x49b0c6
mov dword [ebp - 0x10b8], 1
jmp 0x49b0cd
and dword [ebp - 0x10b8], 0
mov eax, dword [ebp - 0x10b8]
add eax, 0x108fc3a9
cmp dword [ebp - 0x128], eax
jne 0x49b0ec
mov dword [ebp - 0xb58], 1
jmp 0x49b0f3
and dword [ebp - 0xb58], 0
mov eax, dword [ebp - 0xb58]
mov dword [ebp - 0x7bc], eax
jmp 0x49b297
mov dword [ebp - 0x128], 2
jmp 0x49b11d
mov eax, dword [ebp - 0x128]
dec eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0
jl 0x49b297
mov dword [ebp - 0x3a8], 0xae7b1b0c
mov dword [ebp - 0x3a8], 0
jmp 0x49b14d
mov eax, dword [ebp - 0x3a8]
inc eax
mov dword [ebp - 0x3a8], eax
cmp dword [ebp - 0x3a8], 2
jg 0x49b254
mov dword [ebp - 0x630], 0xffffffff
mov dword [ebp - 0x630], 2
jmp 0x49b17d
mov eax, dword [ebp - 0x630]
dec eax
mov dword [ebp - 0x630], eax
cmp dword [ebp - 0x630], 0
jl 0x49b24f
mov dword [ebp - 0x238], 0x29207965
mov byte [ebp - 0x1d4], 0
movzx eax, byte [ebp - 0x1d4]
test eax, eax
je 0x49b215
push 0x1c7d
push 0x57b2
push 0x6654
push 0x73b6
push 0x124c
push 0x599a
push 0x3a22
push 0x665c
push 0x5a0b
push 0x34d
push 1
push 0x2a4d
push 0x57c5
push 0
push 0x31cb
push 0x1f59
push 0x64b4
push 1
push 0x4a4a
push 1
push 0x5aa7
push 0x22a0
push 0x31ae
call fcn.00486db5
add esp, 0x5c
mov dword [ebp - 0x238], 0
jmp 0x49b22e
mov eax, dword [ebp - 0x238]
inc eax
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 3
jge 0x49b24a
mov eax, dword [ebp - 0x238]
mov dword [ebp + eax*4 - 0x25e8], 0x653e3f36
jmp 0x49b221
jmp 0x49b170
jmp 0x49b140
mov byte [ebp - 0x15d], 0
push 0
push 0x11de
push 0x25cc
push 1
push 1
push 0x1c5a
push 0x192c
push 0x4307
push 0
push 0x5e47
push 0
lea eax, [ebp - 0x15d]
push eax
call fcn.00496287
add esp, 0x30
jmp 0x49b110
push 1
push 1
push 0x18c3
push 0x12c2
push 0x614b
push 0x22c4
push 0x5ce3
push 0x437d
push 0x6c69
push 0x6e83
push 0x1694
push 0xfd3
push 1
push 0x664f
call fcn.0047b268
add esp, 0x38
jmp 0x49afd0
mov byte [ebp - 0x25], 0
mov dword [ebp - 0x2c0], 0xac204e2d
mov dword [ebp - 0x10c0], 0xf6872920
mov dword [ebp - 0x215c], 0x4ab462a7
mov dword [ebp - 0x2158], 0x4ab462a7
mov dword [ebp - 0x2154], 0x4ab462a7
mov dword [ebp - 0x2150], 0x4ab462a7
mov dword [ebp - 0x2c0], 0xffffffe3
jmp 0x49b33a
mov eax, dword [ebp - 0x2c0]
inc eax
mov dword [ebp - 0x2c0], eax
cmp dword [ebp - 0x2c0], 0xe
jle 0x49b53c
push 4
lea ecx, [ebp - 0x1cc4]
call fcn.0040b279
mov dword [ebp - 0x9c], 0xfffffffc
push 0
lea eax, [ebp - 0x22c0]
push eax
push 0x2478
push 0x35c
lea eax, [ebp - 0x1cc4]
push eax
push 1
push 0
push 0x20a8
push 0x3460
push 0x6466
push 0xd0f
call fcn.0047f9b6
add esp, 0x2c
mov dword [ebp - 0x9c], 3
jmp 0x49b3b1
mov eax, dword [ebp - 0x9c]
dec eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0
jl 0x49b4fd
push 2
lea ecx, [ebp - 0x2110]
call fcn.0040b279
push 0x29ec
push 0x2075
lea eax, [ebp - 0x2110]
push eax
push 1
push 0
push 0
lea eax, [ebp - 0x22c8]
push eax
push 0x17d1
call fcn.00483a57
add esp, 0x20
push 1
lea ecx, [ebp - 0x2110]
call fcn.0040b367
mov eax, dword [ebp - 0x9c]
xor ecx, ecx
inc ecx
sub ecx, dword [ebp - 0x9c]
add eax, ecx
je 0x49b42b
cmp dword [ebp - 0x2c0], 0
je 0x49b42b
mov dword [ebp - 0x15f0], 1
jmp 0x49b432
and dword [ebp - 0x15f0], 0
mov eax, dword [ebp - 0x15f0]
add eax, 0x886a
jne 0x49b44b
mov dword [ebp - 0xb60], 1
jmp 0x49b452
and dword [ebp - 0xb60], 0
mov eax, dword [ebp - 0xb60]
mov dword [ebp - 0x10c0], eax
cmp dword [ebp - 0x10c0], 0x3e3f
jne 0x49b476
mov dword [ebp - 0xb68], 1
jmp 0x49b47d
and dword [ebp - 0xb68], 0
mov eax, dword [ebp - 0x9c]
cmp dword [ebp - 0xb68], eax
je 0x49b497
mov dword [ebp - 0xb70], 1
jmp 0x49b49e
and dword [ebp - 0xb70], 0
push dword [ebp - 0x9c]
lea ecx, [ebp - 0x1cc4]
call fcn.0040b367
mov dword [ebp - 0x1370], eax
push dword [ebp - 0x9c]
lea ecx, [ebp - 0x1cc4]
call fcn.0040b367
mov ecx, dword [ebp - 0x1370]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x1370]
mov eax, dword [eax]
imul eax, dword [ebp - 0xb70]
neg eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x215c], eax
lea ecx, [ebp - 0x2110]
call fcn.0040b34b
jmp 0x49b3a4
push 0x6489
push 1
push 0x2b43
push 1
lea eax, [ebp - 0x9c]
push eax
push 0
lea eax, [ebp - 0x1cc4]
push eax
push 1
push 0
push 0x3e24
call fcn.0048b304
add esp, 0x28
lea ecx, [ebp - 0x1cc4]
call fcn.0040b34b
jmp 0x49b32d
mov byte [ebp - 0x1d6], 0
movzx eax, byte [ebp - 0x1d6]
test eax, eax
je 0x49b574
push 1
push 0
push 0x6392
push 0
push 0x3468
push 1
push 0x6ae5
push 0
push 0x2e25
call fcn.004906cb
add esp, 0x24
mov dword [ebp - 0x8c], 0x4e2
mov dword [ebp - 0x560], 0
mov dword [ebp - 0x54], 0x7c8a6b95
mov dword [ebp - 0x85c], 1
mov dword [ebp - 0xb80], 0xfffffffd
mov dword [ebp - 0x16dc], 0xd221
mov dword [ebp - 0x1b18], 0x947e29ac
mov dword [ebp - 0x3b0], 0
jmp 0x49b5d0
mov eax, dword [ebp - 0x3b0]
inc eax
mov dword [ebp - 0x3b0], eax
cmp dword [ebp - 0x3b0], 3
jge 0x49b5ec
mov eax, dword [ebp - 0x3b0]
mov dword [ebp + eax*4 - 0x2020], 0xd7ba9668
jmp 0x49b5c3
cmp dword [ebp - 0x560], 0
jne 0x49b604
cmp dword [ebp - 0x54], 0
jne 0x49b604
and dword [ebp - 0x10e0], 0
jmp 0x49b60e
mov dword [ebp - 0x10e0], 1
mov eax, dword [ebp - 0x560]
mov dword [ebp - 0x22d0], eax
mov eax, dword [ebp - 0x85c]
cmp dword [ebp - 0x560], eax
jne 0x49b634
mov dword [ebp - 0x10c8], 1
jmp 0x49b63b
and dword [ebp - 0x10c8], 0
cmp dword [ebp - 0x10c8], 0xd8d92426
je 0x49b653
mov dword [ebp - 0xb78], 1
jmp 0x49b65a
and dword [ebp - 0xb78], 0
mov eax, dword [ebp - 0xb78]
sub eax, dword [ebp - 0x85c]
cmp eax, 0xec1b
jle 0x49b679
mov dword [ebp - 0x14c8], 1
jmp 0x49b680
and dword [ebp - 0x14c8], 0
mov eax, dword [ebp - 0x14c8]
mov dword [ebp - 0xb80], eax
cmp dword [ebp - 0xb80], 1
je 0x49b6a7
cmp dword [ebp - 0x54], 0
je 0x49b6a7
mov dword [ebp - 0x10d0], 1
jmp 0x49b6ae
and dword [ebp - 0x10d0], 0
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x10d0], eax
je 0x49b6c5
mov dword [ebp - 0xb88], 1
jmp 0x49b6cc
and dword [ebp - 0xb88], 0
mov eax, dword [ebp - 0x54]
imul eax, dword [ebp - 0xb88]
cmp eax, dword [ebp - 0x54]
jge 0x49b6f6
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x2020], 0
je 0x49b6f6
mov dword [ebp - 0x1378], 1
jmp 0x49b6fd
and dword [ebp - 0x1378], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2020]
cmp dword [ebp - 0x1378], eax
jg 0x49b71e
mov dword [ebp - 0xb90], 1
jmp 0x49b725
and dword [ebp - 0xb90], 0
mov eax, dword [ebp - 0xb90]
sub eax, 3
cmp dword [ebp - 0x54], eax
jge 0x49b73f
mov dword [ebp - 0x1c80], 1
jmp 0x49b746
and dword [ebp - 0x1c80], 0
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x2020], 0xbe74fd57
jne 0x49b764
mov dword [ebp - 0x10d8], 1
jmp 0x49b76b
and dword [ebp - 0x10d8], 0
mov eax, dword [ebp - 0x85c]
cmp dword [ebp - 0x10d8], eax
je 0x49b785
mov dword [ebp - 0xb98], 1
jmp 0x49b78c
and dword [ebp - 0xb98], 0
mov eax, dword [ebp - 0xb98]
sub eax, dword [ebp - 0x16dc]
cmp eax, 3
jb 0x49b7a9
mov dword [ebp - 0x1578], 1
jmp 0x49b7b0
and dword [ebp - 0x1578], 0
cmp dword [ebp - 0x1578], 0xfffffffa
ja 0x49b7cb
cmp dword [ebp - 0x54], 0
je 0x49b7cb
mov dword [ebp - 0xba0], 1
jmp 0x49b7d2
and dword [ebp - 0xba0], 0
mov eax, dword [ebp - 0xba0]
mov dword [ebp - 0x1b18], eax
mov eax, dword [ebp - 0x54]
add eax, dword [ebp - 0x10e0]
cmp eax, dword [ebp - 0x560]
jne 0x49b82b
mov byte [ebp - 0x165], 0
push 0x25c0
push 1
push 0x7cb6
lea eax, [ebp - 0x165]
push eax
push 1
push 0x3021
push 1
push 0
push 0x283f
push 0x541f
call fcn.004843e4
add esp, 0x28
jmp 0x49b91f
mov dword [ebp - 0x16e4], 0x965da1f7
mov dword [ebp - 0x1dec], 0xb039b7c3
mov dword [ebp - 0x54], 0
jmp 0x49b84f
mov eax, dword [ebp - 0x54]
dec eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0xffffffeb
jge 0x49b91f
mov dword [ebp - 0x16ec], 1
push 2
lea ecx, [ebp - 0x20a4]
call fcn.0040b279
push 0x7473
lea eax, [ebp - 0x20a4]
push eax
push 0x6e28
lea eax, [ebp - 0x22d8]
push eax
push 0
push 0x327e
push 1
push 1
call fcn.004944cf
add esp, 0x20
mov byte [ebp - 0x1d8], 0
push 0x7202
push 0x5efe
push 1
push 0x2907
push 0x638
lea eax, [ebp - 0x1d8]
push eax
push 1
push 1
push 1
push 0x3cb9
call fcn.0047b58d
add esp, 0x28
push 0
push 1
push 0x5e72
lea eax, [ebp - 0x20a4]
push eax
push 0
lea eax, [ebp - 0x16e4]
push eax
lea eax, [ebp - 0x1dec]
push eax
push 0x7fa
lea eax, [ebp - 0x54]
push eax
push 0x79c9
lea eax, [ebp - 0x16ec]
push eax
call fcn.004745e2
add esp, 0x2c
lea ecx, [ebp - 0x20a4]
call fcn.0040b34b
jmp 0x49b848
push 4
lea ecx, [ebp - 0x25f8]
call fcn.0040b279
mov dword [ebp - 0x3b8], 0xaa32b1ce
push 0x50f
lea eax, [ebp - 0x22e0]
push eax
push 0
push 0
push 0x24f9
push 1
lea eax, [ebp - 0x25f8]
push eax
push 0x73ad
push 0x1bd6
push 1
call fcn.0047897a
add esp, 0x28
mov dword [ebp - 0x3b8], 3
jmp 0x49b981
mov eax, dword [ebp - 0x3b8]
dec eax
mov dword [ebp - 0x3b8], eax
cmp dword [ebp - 0x3b8], 0
jl 0x49b9ca
push 1
push 0xbeb
push 0x7bdb
push 0x13ba
push 1
push 0
push 0x2893
push 1
push 1
push 0x1415
call fcn.0048afd8
add esp, 0x28
push 0x7d1a
push 1
push 0
push 1
call fcn.0048a2ea
add esp, 0x10
jmp 0x49b974
lea ecx, [ebp - 0x25f8]
call fcn.0040b34b
mov dword [ebp - 0x6d0], 0
jmp 0x49b9ee
mov eax, dword [ebp - 0x6d0]
inc eax
mov dword [ebp - 0x6d0], eax
cmp dword [ebp - 0x6d0], 3
jge 0x49ba0a
mov eax, dword [ebp - 0x6d0]
mov dword [ebp + eax*4 - 0x2658], 0x898f01ba
jmp 0x49b9e1
mov dword [ebp - 0x22e8], 0x5e7a
mov dword [ebp - 0x22f0], 0x8a87013d
mov dword [ebp - 0x22f8], 0
or dword [ebp - 0x2000], 0xffffffff
or dword [ebp - 0x1ffc], 0xffffffff
or dword [ebp - 0x1ff8], 0xffffffff
or dword [ebp - 0x1ff4], 0xffffffff
lea ecx, [ebp - 0x799]
call fcn.0040b376
push eax
lea eax, [ebp - 0x1ff0]
push eax
lea eax, [ebp - 0x2000]
push eax
lea ecx, [ebp - 0x29b8]
call fcn.0040b379
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x299c]
call fcn.0040b325
mov dword [ebp - 0x2300], 0x7b568be1
mov dword [ebp - 0x2308], 2
mov dword [ebp - 0x2310], 0xcb81eca6
mov dword [ebp - 0x1b20], 4
push 1
push 0x331b
lea eax, [ebp - 0x1b20]
push eax
push 1
push 1
push 0x3aa9
push 0x796b
push 0x72a9
push 0
push 0x49d1
push 1
call fcn.00494b7a
add esp, 0x2c
lea ecx, [ebp - 0x299c]
call fcn.0040b34b
mov eax, dword [ebp - 0x8c]
dec eax
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x8c], 0
jmp 0x49bb04
cmp dword [ebp - 0x8c], 0x12
jge 0x49ea69
mov dword [ebp - 0x16f4], 0
mov dword [ebp - 0x3c0], 0
jmp 0x49bb34
mov eax, dword [ebp - 0x3c0]
inc eax
mov dword [ebp - 0x3c0], eax
cmp dword [ebp - 0x3c0], 2
jge 0x49bb50
mov eax, dword [ebp - 0x3c0]
mov dword [ebp + eax*4 - 0x223c], 0x14a02569
jmp 0x49bb27
mov byte [ebp - 0x1da], 0
push 1
push 1
push 0x74df
push 1
lea eax, [ebp - 0x1da]
push eax
push 0x46
push 1
push 0x566
push 0x159a
call fcn.0047be03
add esp, 0x24
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x223c]
mov dword [ebp - 0x16f4], eax
mov dword [ebp - 0x108], 0xea122098
mov dword [ebp - 0x3c8], 0
mov dword [ebp - 0x64], 0x7c8a6b95
mov dword [ebp - 0x7c4], 1
mov dword [ebp - 0x10e8], 0xfffffffd
mov dword [ebp - 0x16fc], 0xd221
mov dword [ebp - 0x1b28], 0x947e29ac
mov dword [ebp - 0x568], 0
jmp 0x49bbee
mov eax, dword [ebp - 0x568]
inc eax
mov dword [ebp - 0x568], eax
cmp dword [ebp - 0x568], 3
jge 0x49bc0a
mov eax, dword [ebp - 0x568]
mov dword [ebp + eax*4 - 0x2074], 0xd7ba9668
jmp 0x49bbe1
cmp dword [ebp - 0x3c8], 0
jne 0x49bc22
cmp dword [ebp - 0x64], 0
jne 0x49bc22
and dword [ebp - 0xbd8], 0
jmp 0x49bc2c
mov dword [ebp - 0xbd8], 1
mov eax, dword [ebp - 0x3c8]
mov dword [ebp - 0x2318], eax
mov eax, dword [ebp - 0x7c4]
cmp dword [ebp - 0x3c8], eax
jne 0x49bc52
mov dword [ebp - 0xba8], 1
jmp 0x49bc59
and dword [ebp - 0xba8], 0
cmp dword [ebp - 0xba8], 0xd8d92426
je 0x49bc71
mov dword [ebp - 0x1380], 1
jmp 0x49bc78
and dword [ebp - 0x1380], 0
mov eax, dword [ebp - 0x1380]
sub eax, dword [ebp - 0x7c4]
cmp eax, 0xec1b
jle 0x49bc97
mov dword [ebp - 0xbb0], 1
jmp 0x49bc9e
and dword [ebp - 0xbb0], 0
mov eax, dword [ebp - 0xbb0]
mov dword [ebp - 0x10e8], eax
cmp dword [ebp - 0x10e8], 1
je 0x49bcc5
cmp dword [ebp - 0x64], 0
je 0x49bcc5
and dword [ebp - 0xbb8], 0
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0xbb8], eax
je 0x49bce3
mov dword [ebp - 0xf4], 0xfffffff8
mov dword [ebp - 0x7f4], 8
mov dword [ebp - 0x11b8], 0x62db8e96
mov dword [ebp - 0xd58], 1
mov dword [ebp - 0x11c0], 0xffffffff
mov dword [ebp - 0x598], 0xa87a5eaf
mov dword [ebp - 0x878], 1
mov dword [ebp - 0xd78], 0xe13f5e3
mov dword [ebp - 0x17cc], 0x3703
mov dword [ebp - 0xd80], 0x72737ae9
mov dword [ebp - 0x428], 0
jmp 0x49eae6
mov eax, dword [ebp - 0x428]
inc eax
mov dword [ebp - 0x428], eax
cmp dword [ebp - 0x428], 2
jge 0x49eb02
mov eax, dword [ebp - 0x428]
mov dword [ebp + eax*4 - 0x1f24], 0xfffffffb
jmp 0x49ead9
mov eax, dword [ebp - 0xf4]
cmp dword [ebp - 0xf4], eax
jge 0x49eb1c
mov dword [ebp - 0xd50], 1
jmp 0x49eb23
and dword [ebp - 0xd50], 0
mov eax, dword [ebp - 0xd50]
mov dword [ebp - 0x598], eax
mov eax, dword [ebp - 0x598]
mov dword [ebp - 0x878], eax
mov eax, dword [ebp - 0x878]
cmp dword [ebp - 0xf4], eax
jg 0x49eb55
mov dword [ebp - 0xd60], 1
jmp 0x49eb5c
and dword [ebp - 0xd60], 0
mov dword [ebp - 0x11b8], 0x9310
mov eax, dword [ebp - 0x11b8]
mov dword [ebp - 0xd58], eax
mov eax, dword [ebp - 0xd58]
mov dword [ebp - 0x1514], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1514]
mov dword [ebp + eax - 0x1f24], ecx
mov eax, dword [ebp - 0x1514]
mov dword [ebp - 0x11c0], eax
mov eax, dword [ebp - 0xf4]
add eax, dword [ebp - 0xd60]
cmp dword [ebp - 0x11c0], eax
jge 0x49ebbd
mov dword [ebp - 0xd68], 1
jmp 0x49ebc4
and dword [ebp - 0xd68], 0
mov eax, dword [ebp - 0xf4]
cmp dword [ebp - 0xd68], eax
jge 0x49ebde
mov dword [ebp - 0x13f0], 1
jmp 0x49ebe5
and dword [ebp - 0x13f0], 0
mov eax, dword [ebp - 0xd78]
cmp dword [ebp - 0x13f0], eax
jne 0x49ebff
mov dword [ebp - 0xd70], 1
jmp 0x49ec06
and dword [ebp - 0xd70], 0
mov eax, dword [ebp - 0xf4]
cmp eax, dword [ebp - 0xd70]
jne 0x49ec25
xor eax, eax
inc eax
je 0x49ec25
mov dword [ebp - 0x11c8], 1
jmp 0x49ec2c
and dword [ebp - 0x11c8], 0
mov eax, dword [ebp - 0x7f4]
imul eax, dword [ebp - 0xf4]
mov ecx, dword [ebp - 0xf4]
imul ecx, dword [ebp - 0x11c8]
sub eax, ecx
mov dword [ebp - 0x1b90], eax
mov eax, dword [ebp - 0x17cc]
mov dword [ebp - 0x17d4], eax
mov eax, dword [ebp - 0x7f4]
dec eax
mov dword [ebp - 0x7f4], eax
mov eax, dword [ebp - 0x1b90]
cmp eax, dword [ebp - 0x17d4]
jg 0x49ec81
mov dword [ebp - 0x151c], 1
jmp 0x49ec88
and dword [ebp - 0x151c], 0
mov eax, dword [ebp - 0xd78]
imul eax, dword [ebp - 0x151c]
mov dword [ebp - 0xd80], eax
mov eax, dword [ebp - 0xd80]
sub eax, dword [ebp - 0xf4]
cmp eax, 0xd800
jle 0x49ecba
mov eax, dword [ebp - 0x1718]
mov dword [ebp - 0x1740], eax
mov eax, dword [ebp - 0x1720]
mov dword [ebp - 0x1748], eax
mov eax, dword [ebp - 0x1728]
mov dword [ebp - 0x1750], eax
mov eax, dword [ebp - 0x1730]
mov dword [ebp - 0x1758], eax
mov eax, dword [ebp - 0x1738]
mov dword [ebp - 0x1760], eax
mov eax, dword [ebp - 0x1740]
mov dword [ebp - 0x1768], eax
mov eax, dword [ebp - 0x1748]
mov dword [ebp - 0x14a4], eax
mov eax, dword [ebp - 0x1750]
mov dword [ebp - 0x149c], eax
mov eax, dword [ebp - 0x1758]
mov dword [ebp - 0x14b4], eax
mov eax, dword [ebp - 0x1760]
mov dword [ebp - 0x6fc], eax
mov eax, dword [ebp - 0x14a4]
cmp dword [eax], 0
je 0x4ac54f
mov eax, dword [ebp - 0x149c]
mov eax, dword [eax]
mov dword [ebp - 0x26bc], eax
mov eax, dword [ebp - 0x149c]
mov eax, dword [eax]
mov dword [ebp - 0x2444], eax
mov eax, dword [ebp - 0x6fc]
mov eax, dword [eax]
mov dword [ebp - 0x2858], eax
mov eax, dword [ebp - 0x14b4]
cmp dword [eax], 0
jne 0x4ac4ed
mov eax, dword [ebp - 0x14a4]
cmp dword [eax], 0
jne 0x4ac4ed
and dword [ebp - 0x14ac], 0
jmp 0x4ac4f7
mov dword [ebp - 0x14ac], 1
cmp dword [ebp - 0x14ac], 0xf928
jne 0x4ac50f
mov dword [ebp - 0x14bc], 1
jmp 0x4ac516
and dword [ebp - 0x14bc], 0
mov eax, dword [ebp - 0x14b4]
mov ecx, dword [ebp - 0x14bc]
mov dword [eax], ecx
mov eax, dword [ebp - 0x6fc]
mov eax, dword [eax]
sub eax, 0x97b0
mov ecx, dword [ebp - 0x6fc]
sub eax, dword [ecx]
mov ecx, dword [ebp - 0x6fc]
add eax, dword [ecx]
je 0x4ac54f
mov dword [ebp - 0x14c4], 1
jmp 0x4ac556
and dword [ebp - 0x14c4], 0
push 0
mov ecx, dword [ebp - 0x1768]
call fcn.0040b367
mov ecx, dword [ebp - 0x14c4]
mov dword [eax], ecx
jmp 0x4ac6a5
mov eax, dword [ebp - 0x1770]
mov dword [ebp - 0x17a0], eax
mov eax, dword [ebp - 0x1778]
mov dword [ebp - 0x17a8], eax
mov eax, dword [ebp - 0x1780]
mov dword [ebp - 0x1798], eax
mov eax, dword [ebp - 0x1788]
mov dword [ebp - 0x17c8], eax
mov eax, dword [ebp - 0x1790]
mov dword [ebp - 0x17d0], eax
mov eax, dword [ebp - 0x1798]
movzx eax, byte [eax]
test eax, eax
je 0x4ac630
mov eax, dword [ebp - 0x17a0]
mov dword [ebp - 0x17b0], eax
mov eax, dword [ebp - 0x17a8]
mov dword [ebp - 0x17b8], eax
mov eax, dword [ebp - 0x17b0]
mov dword [ebp - 0x2cc], eax
mov eax, dword [ebp - 0x17b8]
mov dword [ebp - 0x17c0], eax
mov eax, dword [ebp - 0x2cc]
mov dword [eax], 0
jmp 0x4ac608
mov eax, dword [ebp - 0x2cc]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x2cc]
mov dword [ecx], eax
mov eax, dword [ebp - 0x2cc]
cmp dword [eax], 2
jge 0x4ac62e
mov eax, dword [ebp - 0x2cc]
push dword [eax]
mov ecx, dword [ebp - 0x17c0]
call fcn.0040b367
mov dword [eax], 0x4b4fbf64
jmp 0x4ac5f7
jmp 0x4ac6a5
mov eax, dword [ebp - 0x17c8]
mov dword [ebp - 0x17d8], eax
mov eax, dword [ebp - 0x17d0]
mov dword [ebp - 0x17e0], eax
mov eax, dword [ebp - 0x17d8]
mov dword [ebp - 0x2d4], eax
mov eax, dword [ebp - 0x17e0]
mov dword [ebp - 0x17e8], eax
mov eax, dword [ebp - 0x2d4]
mov dword [eax], 0
jmp 0x4ac67f
mov eax, dword [ebp - 0x2d4]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x2d4]
mov dword [ecx], eax
mov eax, dword [ebp - 0x2d4]
cmp dword [eax], 1
jge 0x4ac6a5
mov eax, dword [ebp - 0x2d4]
push dword [eax]
mov ecx, dword [ebp - 0x17e8]
call fcn.0040b367
mov dword [eax], 4
jmp 0x4ac66e
jmp 0x4ac9d6
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x1810], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x1808], eax
lea eax, [ebp + 0x2c]
mov dword [ebp - 0x17f8], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x1870], eax
mov eax, dword [ebp + 0x3c]
mov dword [ebp - 0x1868], eax
mov eax, dword [ebp + 0x5c]
mov dword [ebp - 0x1880], eax
lea eax, [ebp + 0x58]
mov dword [ebp - 0x1878], eax
lea eax, [ebp + 0x38]
mov dword [ebp - 0x17f0], eax
mov eax, dword [ebp + 0x54]
mov dword [ebp - 0x1818], eax
mov eax, dword [ebp - 0x17f0]
movzx eax, byte [eax]
test eax, eax
je 0x4ac8f7
mov dword [ebp - 0x14cc], 0xb67
mov dword [ebp - 0x1800], str.fwgqtoaty_slrldzf_bemtwvfj_mnqw_pgljb_ngkingjz_pmg_lfulldkcq_jfqsx
cmp dword [ebp - 0x14cc], 0xde7
jle 0x4ac7a3
and dword [ebp - 0x704], 0
jmp 0x4ac742
mov eax, dword [ebp - 0x704]
inc eax
mov dword [ebp - 0x704], eax
cmp dword [ebp - 0x704], 0x23f1
jge 0x4ac7a3
and dword [ebp - 0x608], 0
jmp 0x4ac764
mov eax, dword [ebp - 0x608]
inc eax
mov dword [ebp - 0x608], eax
cmp dword [ebp - 0x608], 0x1430
jge 0x4ac7a1
mov eax, dword [ebp - 0x704]
add eax, dword [ebp - 0x608]
cdq
mov dword [ebp - 0x1ae0], eax
mov dword [ebp - 0x1adc], edx
push dword [ebp - 0x1adc]
push dword [ebp - 0x1ae0]
mov ecx, 0xade298
call fcn.0040b052
jmp 0x4ac757
jmp 0x4ac735
mov eax, dword [ebp - 0x17f8]
mov dword [ebp - 0x1820], eax
mov dword [ebp - 4], 0x4e
cmp dword [ebp - 0x14cc], 0xac0
jge 0x4ac7d2
mov edx, dword [ebp - 0x1800]
mov ecx, 0xade298
call fcn.0040d8d7
jmp 0x4ac7ee
or dword [ebp - 4], 0xffffffff
jmp 0x4ac7f8
mov eax, dword [ebp - 0x1808]
mov dword [ebp - 0x1848], eax
mov eax, dword [ebp - 0x1810]
mov dword [ebp - 0x1840], eax
mov eax, dword [ebp - 0x1818]
mov dword [ebp - 0x1828], eax
mov eax, dword [ebp - 0x1820]
movzx eax, byte [eax]
test eax, eax
je 0x4ac880
mov eax, dword [ebp - 0x1828]
mov dword [ebp - 0x1830], eax
mov eax, dword [ebp - 0x1830]
mov dword [ebp - 0x1838], eax
mov eax, dword [ebp - 0x1838]
movzx eax, byte [eax]
test eax, eax
je 0x4ac87e
push 0
push 0x3a1d
push 0x6bf9
push 1
push 1
push 0x58ca
push 0x2db0
push 0x4bb9
push 0
push 0x5726
push 1
call fcn.00494b7a
add esp, 0x2c
jmp 0x4ac8f2
mov eax, dword [ebp - 0x1840]
mov dword [ebp - 0x1850], eax
mov eax, dword [ebp - 0x1848]
mov dword [ebp - 0x1858], eax
mov eax, dword [ebp - 0x1850]
mov dword [ebp - 0x2dc], eax
mov eax, dword [ebp - 0x1858]
mov dword [ebp - 0x1860], eax
mov eax, dword [ebp - 0x2dc]
mov dword [eax], 0
jmp 0x4ac8cf
mov eax, dword [ebp - 0x2dc]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x2dc]
mov dword [ecx], eax
mov eax, dword [ebp - 0x2dc]
cmp dword [eax], 3
jge 0x4ac8f2
mov eax, dword [ebp - 0x2dc]
push dword [eax]
mov ecx, dword [ebp - 0x1860]
call fcn.0040b367
or dword [eax], 0xffffffff
jmp 0x4ac8be
jmp 0x4ac9d6
mov eax, dword [ebp - 0x1868]
mov dword [ebp - 0x1890], eax
mov eax, dword [ebp - 0x1870]
mov dword [ebp - 0x18b8], eax
mov eax, dword [ebp - 0x1878]
mov dword [ebp - 0x1888], eax
mov eax, dword [ebp - 0x1880]
mov dword [ebp - 0x1898], eax
mov eax, dword [ebp - 0x1888]
movzx eax, byte [eax]
test eax, eax
je 0x4ac9ab
mov eax, dword [ebp - 0x1890]
mov dword [ebp - 0x18a0], eax
mov eax, dword [ebp - 0x1898]
mov dword [ebp - 0x18a8], eax
mov eax, dword [ebp - 0x18a0]
mov dword [ebp - 0x2e4], eax
mov eax, dword [ebp - 0x18a8]
mov dword [ebp - 0x18b0], eax
mov eax, dword [ebp - 0x2e4]
mov dword [eax], 0
jmp 0x4ac983
mov eax, dword [ebp - 0x2e4]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x2e4]
mov dword [ecx], eax
mov eax, dword [ebp - 0x2e4]
cmp dword [eax], 2
jge 0x4ac9a9
mov eax, dword [ebp - 0x2e4]
push dword [eax]
mov ecx, dword [ebp - 0x18b0]
call fcn.0040b367
mov dword [eax], 0x205300ce
jmp 0x4ac972
jmp 0x4ac9d6
mov eax, dword [ebp - 0x18b8]
mov dword [ebp - 0x18c0], eax
mov eax, dword [ebp - 0x18c0]
mov dword [ebp - 0x18c8], eax
mov eax, dword [ebp - 0x18c8]
movzx eax, byte [eax]
test eax, eax
je 0x4ac9d6
call dword [sym.imp.USER32.dll_GetMessageTime]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret