Function at 0x49e83f
Capabilities:
Accept command line arguments
Create pipe
Encrypt data using speck

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4ca6c5
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x2714
call fcn.004c5f30
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 0xc]
test eax, eax
je 0x4b1303
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x159c], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x1228], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x176c], eax
lea eax, [ebp + 0x10]
mov dword [ebp - 0x15b8], eax
lea eax, [ebp + 0x20]
mov dword [ebp - 0x11a8], eax
lea eax, [ebp + 0x2c]
mov dword [ebp - 0x1220], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x11a0], eax
mov eax, dword [ebp - 0x15b8]
movzx eax, byte [eax]
test eax, eax
je 0x4b116c
mov eax, dword [ebp - 0x1220]
mov dword [ebp - 0x1230], eax
mov eax, dword [ebp - 0x1228]
mov dword [ebp - 0x158c], eax
mov eax, dword [ebp - 0x1230]
movzx eax, byte [eax]
test eax, eax
je 0x4b1130
mov byte [ebp - 0x21], 0
push 1
lea ecx, [ebp - 0x16b8]
call fcn.00450d2f
mov dword [ebp - 0x268], 0
jmp 0x49e917
mov eax, dword [ebp - 0x268]
inc eax
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 1
jge 0x49e939
push dword [ebp - 0x268]
lea ecx, [ebp - 0x16b8]
call fcn.00450e1d
mov dword [eax], 0x91a049fe
jmp 0x49e90a
push 0
lea ecx, [ebp - 0x16b8]
call fcn.00450e1d
and dword [eax], 0
jmp 0x49e96f
push 0
lea ecx, [ebp - 0x16b8]
call fcn.00450e1d
mov dword [ebp - 0xcf0], eax
mov eax, dword [ebp - 0xcf0]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xcf0]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x16b8]
call fcn.00450e1d
cmp dword [eax], 6
jl 0x49ea29
mov dword [ebp - 0x274], 0xed080c17
mov dword [ebp - 0x1238], 0xfffffff7
mov dword [ebp - 0x440], 0
jmp 0x49e9b2
mov eax, dword [ebp - 0x440]
inc eax
mov dword [ebp - 0x440], eax
cmp dword [ebp - 0x440], 3
jge 0x49e9ce
mov eax, dword [ebp - 0x440]
mov dword [ebp + eax*4 - 0x26e8], 0xf84b8114
jmp 0x49e9a5
mov dword [ebp - 0x274], 0
jmp 0x49e9e7
mov eax, dword [ebp - 0x274]
inc eax
mov dword [ebp - 0x274], eax
cmp dword [ebp - 0x274], 2
jg 0x49ea19
push 1
push 1
push 0x787a
push 0x2ec4
push 0x5555
push 0x42a2
push 1
push 0x6ae7
call fcn.0047da4e
add esp, 0x20
jmp 0x49e9da
cmp dword [ebp - 0x1238], 0
je 0x49ea24
jmp 0x49ea29
jmp 0x49e94b
lea ecx, [ebp - 0x16b8]
call fcn.00450e01
push 2
lea ecx, [ebp - 0x2054]
call fcn.00450d2f
mov dword [ebp - 0xf58], 0x407f
mov dword [ebp - 0x1240], str.ifj_vnz_ldy
cmp dword [ebp - 0xf58], 0x427f
jle 0x49eb0f
push 0x167e
push 0
push 0xf0b
push 0
call dword [sym.imp.USER32.dll_LoadStringA]
and dword [ebp - 0x528], 0
jmp 0x49ea8f
mov eax, dword [ebp - 0x528]
inc eax
mov dword [ebp - 0x528], eax
cmp dword [ebp - 0x528], 0x5661
jge 0x49eb0f
and dword [ebp - 0x27c], 0
jmp 0x49eab1
mov eax, dword [ebp - 0x27c]
inc eax
mov dword [ebp - 0x27c], eax
cmp dword [ebp - 0x27c], 0x6843
jge 0x49eb0a
mov eax, dword [ebp - 0x528]
add eax, dword [ebp - 0x27c]
cdq
mov dword [ebp - 0x129c], eax
mov dword [ebp - 0x1298], edx
push dword [ebp - 0x1298]
push dword [ebp - 0x129c]
lea ecx, [ebp - 0x2718]
call fcn.00401993
pop ecx
pop ecx
mov ecx, eax
call fcn.00450c0f
push eax
call fcn.004b40b7
pop ecx
lea ecx, [ebp - 0x2718]
call fcn.00450c05
jmp 0x49eaa4
jmp 0x49ea82
push 2
lea ecx, [ebp - 0x1b24]
call fcn.00450d2f
and dword [ebp - 4], 0
cmp dword [ebp - 0xf58], 0x3cf0
jge 0x49eb38
push dword [ebp - 0x1240]
call fcn.004b40b7
pop ecx
jmp 0x49eb54
or dword [ebp - 4], 0xffffffff
jmp 0x49eb5e
mov dword [ebp - 0x74], 0
jmp 0x49eb6e
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 2
jge 0x49eb84
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0x10f4], 4
jmp 0x49eb67
mov dword [ebp - 0xf60], 0x554b
mov dword [ebp - 0x1248], str.nkc_bjmdiibnu_ddw_osspcvp_stgd_ltfj_roqqah
cmp dword [ebp - 0xf60], 0x587d
jle 0x49ec1b
and dword [ebp - 0x448], 0
jmp 0x49ebba
mov eax, dword [ebp - 0x448]
inc eax
mov dword [ebp - 0x448], eax
cmp dword [ebp - 0x448], 0x2847
jge 0x49ec1b
and dword [ebp - 0x284], 0
jmp 0x49ebdc
mov eax, dword [ebp - 0x284]
inc eax
mov dword [ebp - 0x284], eax
cmp dword [ebp - 0x284], 0x49ee
jge 0x49ec19
mov eax, dword [ebp - 0x448]
or eax, dword [ebp - 0x284]
cdq
mov dword [ebp - 0x12a8], eax
mov dword [ebp - 0x12a4], edx
push dword [ebp - 0x12a4]
push dword [ebp - 0x12a8]
mov ecx, 0xaca3b8
call fcn.00450c1a
jmp 0x49ebcf
jmp 0x49ebad
mov dword [ebp - 0x74], 0
jmp 0x49ec2b
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 2
jge 0x49ec47
push dword [ebp - 0x74]
lea ecx, [ebp - 0x2054]
call fcn.00450e1d
mov dword [eax], 0xa3b3f365
jmp 0x49ec24
mov dword [ebp - 4], 2
cmp dword [ebp - 0xf60], 0x5485
jge 0x49ec6a
mov edx, dword [ebp - 0x1248]
mov ecx, 0xaca3b8
call fcn.004525c0
jmp 0x49ec86
or dword [ebp - 4], 0xffffffff
jmp 0x49ec90
push 0x492e
push 0x60e5
push 0
push 1
push 0
lea eax, [ebp - 0x1b24]
push eax
push 0x4062
push 1
lea eax, [ebp - 0x74]
push eax
call fcn.00488dfe
add esp, 0x24
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x10f4], 0
jmp 0x49ece8
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x10f4]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x10f4], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x10f4], 0xfffffffd
jle 0x49ee59
push 1
lea ecx, [ebp - 0x16c8]
call fcn.00450d2f
mov dword [ebp - 0x2220], 0x509978f3
mov dword [ebp - 0x21ac], 0xb055cc25
mov dword [ebp - 0x1e64], 0xb68dee21
mov dword [ebp - 0x2148], 1
mov dword [ebp - 0x1e6c], 0x70a3267e
mov dword [ebp - 0x21b0], 0x18d9dce
push 0xa6f
push 0x71db
push 1
push 0x7663
push 0x5165
push 0x562d
push 0x6d4
push 0x1d62
lea eax, [ebp - 0x1e74]
push eax
push 1
push 0x3a43
lea eax, [ebp - 0x16c8]
push eax
push 1
push 1
push 0
push 1
push 0x4c70
call fcn.0048615a
add esp, 0x44
push 0
lea ecx, [ebp - 0x16c8]
call fcn.00450e1d
mov dword [eax], 0x19
jmp 0x49edcd
push 0
lea ecx, [ebp - 0x16c8]
call fcn.00450e1d
mov dword [ebp - 0xf68], eax
mov eax, dword [ebp - 0xf68]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0xf68]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x16c8]
call fcn.00450e1d
cmp dword [eax], 0
jle 0x49ee49
mov dword [ebp - 0x2158], 0x98764276
mov dword [ebp - 0x5f0], 0
jmp 0x49ee02
mov eax, dword [ebp - 0x5f0]
inc eax
mov dword [ebp - 0x5f0], eax
cmp dword [ebp - 0x5f0], 3
jge 0x49ee1e
mov eax, dword [ebp - 0x5f0]
mov dword [ebp + eax*4 - 0x2514], 0xffffffff
jmp 0x49edf5
push 1
push 0x4b77
push 0x4130
lea eax, [ebp - 0x1b24]
push eax
push 0
push 1
push 0x53da
push 1
call fcn.0049e630
add esp, 0x20
jmp 0x49eda9
lea ecx, [ebp - 0x16c8]
call fcn.00450e01
jmp 0x49eccd
lea ecx, [ebp - 0x1b24]
call fcn.00450e01
lea ecx, [ebp - 0x2054]
call fcn.00450e01
push 1
lea ecx, [ebp - 0x1718]
call fcn.00450d2f
push 1
lea ecx, [ebp - 0x1ba8]
call fcn.00450d2f
mov dword [ebp - 0x1014], 0x168f
mov dword [ebp - 0x1250], str.dxtkovai_ffylhbak_sjvenhpg_auw_bgoze_xfs
cmp dword [ebp - 0x1014], 0x1815
jle 0x49ef83
and dword [ebp - 0x294], 0
jmp 0x49eec3
mov eax, dword [ebp - 0x294]
inc eax
mov dword [ebp - 0x294], eax
cmp dword [ebp - 0x294], 0xd98
jge 0x49ef79
and dword [ebp - 0x28c], 0
jmp 0x49eee9
mov eax, dword [ebp - 0x28c]
inc eax
mov dword [ebp - 0x28c], eax
cmp dword [ebp - 0x28c], 0x25c5
jge 0x49ef74
and dword [ebp - 0x450], 0
jmp 0x49ef0b
mov eax, dword [ebp - 0x450]
inc eax
mov dword [ebp - 0x450], eax
cmp dword [ebp - 0x450], 0x2090
jge 0x49ef6f
mov eax, dword [ebp - 0x28c]
cdq
idiv dword [ebp - 0x450]
mov eax, dword [ebp - 0x294]
mov ecx, edx
sar eax, cl
cdq
mov dword [ebp - 0x12b4], eax
mov dword [ebp - 0x12b0], edx
push dword [ebp - 0x12b0]
push dword [ebp - 0x12b4]
lea ecx, [ebp - 0x25f8]
call fcn.00401993
pop ecx
pop ecx
mov ecx, eax
call fcn.00450c0f
push eax
call fcn.004b40b7
pop ecx
lea ecx, [ebp - 0x25f8]
call fcn.00450c05
jmp 0x49eefe
jmp 0x49eedc
jmp 0x49eeb6
push 0
push 0
call dword [sym.imp.USER32.dll_CharUpperBuffW]
push 0x1d32
push 0x2897
push 0x7f0c
push 1
push 1
push 0x52a
push 0x359e
push 0x550
lea eax, [ebp - 0x1e7c]
push eax
push 0x73ab
push 0x5bc8
lea eax, [ebp - 0x1ba8]
push eax
push 1
push 0x54bd
push 0x3529
call fcn.0047dcd7
add esp, 0x3c
mov dword [ebp - 4], 4
cmp dword [ebp - 0x1014], 0x1353
jge 0x49eff0
push dword [ebp - 0x1250]
call fcn.004b40b7
pop ecx
jmp 0x49f00c
or dword [ebp - 4], 0xffffffff
jmp 0x49f016
push 1
push 1
push 0x27cd
push 0x2dcd
push 0x238c
push 0x7ca6
push 0
push 0x54f1
push 1
call fcn.0047e197
add esp, 0x24
push 1
push 1
push 0x7d16
push 0xae2
push 0x4bc4
push 0x756d
push 1
lea eax, [ebp - 0x1ba8]
push eax
push 1
call fcn.0047e197
add esp, 0x24
lea ecx, [ebp - 0x1ba8]
call fcn.00450e01
push 0x5e3d
lea eax, [ebp - 0x21b8]
push eax
push 0x266d
push 1
push 1
push 0x1a26
push 0
lea eax, [ebp - 0x1718]
push eax
push 0x42c0
push 0
push 0x7a46
call fcn.00492a4f
add esp, 0x2c
push 0
lea ecx, [ebp - 0x1718]
call fcn.00450e1d
and dword [eax], 0
jmp 0x49f0e2
push 0
lea ecx, [ebp - 0x1718]
call fcn.00450e1d
mov dword [ebp - 0x101c], eax
mov eax, dword [ebp - 0x101c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x101c]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x1718]
call fcn.00450e1d
cmp dword [eax], 6
jl 0x4a0783
mov dword [ebp - 0x229c], 0xbdde
mov dword [ebp - 0x2298], 0xbdde
mov dword [ebp - 0x2294], 0xbdde
mov dword [ebp - 0x2290], 0xbdde
mov dword [ebp - 0x29c], 0xfffffffa
mov dword [ebp - 0x1954], 0xf33f
mov dword [ebp - 0x1950], 0xf33f
mov dword [ebp - 0x194c], 0xf33f
mov dword [ebp - 0x1948], 0xf33f
mov dword [ebp - 0x1e84], 0x24307a32
mov dword [ebp - 0x530], 0
jmp 0x49f175
mov eax, dword [ebp - 0x530]
inc eax
mov dword [ebp - 0x530], eax
cmp dword [ebp - 0x530], 4
jge 0x49f191
mov eax, dword [ebp - 0x530]
mov dword [ebp + eax*4 - 0x24f0], 0xfffffff6
jmp 0x49f168
mov byte [ebp - 0x16d], 0
push 0x6051
push 0x794b
push 1
push 0x64fb
push 0x5c8b
lea eax, [ebp - 0x16d]
push eax
push 0x1977
push 1
push 1
push 0x5f9e
push 1
push 0
call fcn.0048d3c1
add esp, 0x30
mov dword [ebp - 0x29c], 0
jmp 0x49f1e8
mov eax, dword [ebp - 0x29c]
inc eax
mov dword [ebp - 0x29c], eax
cmp dword [ebp - 0x29c], 3
jg 0x49f365
push 2
lea ecx, [ebp - 0x16d8]
call fcn.00450d2f
mov dword [ebp - 0x1034], 0
mov dword [ebp - 0x458], 0
jmp 0x49f225
mov eax, dword [ebp - 0x458]
inc eax
mov dword [ebp - 0x458], eax
cmp dword [ebp - 0x458], 2
jge 0x49f247
push dword [ebp - 0x458]
lea ecx, [ebp - 0x16d8]
call fcn.00450e1d
mov dword [eax], 0x4ccb63e8
jmp 0x49f218
mov byte [ebp - 0x121], 0
push 0
push 0x38fd
lea eax, [ebp - 0x121]
push eax
push 1
push 0x47ad
push 0x185c
push 0x5b5b
push 1
push 1
push 0x56b
call fcn.0049e83f
add esp, 0x28
mov eax, dword [ebp - 0x1034]
mov dword [ebp - 0x2168], eax
push 0
lea ecx, [ebp - 0x16d8]
call fcn.00450e1d
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1954], 1
je 0x49f2b3
mov dword [ebp - 0x1024], 1
jmp 0x49f2ba
and dword [ebp - 0x1024], 0
push 0
lea ecx, [ebp - 0x16d8]
call fcn.00450e1d
mov eax, dword [eax]
cmp eax, dword [ebp - 0x1024]
jne 0x49f2dd
mov dword [ebp - 0x102c], 1
jmp 0x49f2e4
and dword [ebp - 0x102c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1954]
imul eax, dword [ebp - 0x102c]
test eax, eax
jne 0x49f317
push 0
lea ecx, [ebp - 0x16d8]
call fcn.00450e1d
cmp dword [eax], 0
jne 0x49f317
and dword [ebp - 0x103c], 0
jmp 0x49f321
mov dword [ebp - 0x103c], 1
mov eax, dword [ebp - 0x1034]
cmp dword [ebp - 0x103c], eax
jne 0x49f33b
mov dword [ebp - 0x1044], 1
jmp 0x49f342
and dword [ebp - 0x1044], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x1044]
mov dword [ebp + eax - 0x24f0], ecx
lea ecx, [ebp - 0x16d8]
call fcn.00450e01
jmp 0x49f1db
mov dword [ebp - 0x22b0], 0xbdde
mov dword [ebp - 0x22ac], 0xbdde
mov dword [ebp - 0x22a8], 0xbdde
mov dword [ebp - 0x22a4], 0xbdde
mov dword [ebp - 0x5a0], 0xfffffffa
mov dword [ebp - 0x18fc], 0xf33f
mov dword [ebp - 0x18f8], 0xf33f
mov dword [ebp - 0x18f4], 0xf33f
mov dword [ebp - 0x18f0], 0xf33f
mov dword [ebp - 0x1e8c], 0x24307a32
mov dword [ebp - 0x2a4], 0
jmp 0x49f3e2
mov eax, dword [ebp - 0x2a4]
inc eax
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 4
jge 0x49f3fe
mov eax, dword [ebp - 0x2a4]
mov dword [ebp + eax*4 - 0x2440], 0xfffffff6
jmp 0x49f3d5
mov byte [ebp - 0x16f], 0
push 0x3146
push 0
push 1
push 0x54b8
push 0x3eb0
push 1
push 1
lea eax, [ebp - 0x16f]
push eax
push 0x4849
push 0x76d3
call fcn.0047bd4b
add esp, 0x28
mov dword [ebp - 0x5a0], 0
jmp 0x49f44e
mov eax, dword [ebp - 0x5a0]
inc eax
mov dword [ebp - 0x5a0], eax
cmp dword [ebp - 0x5a0], 3
jg 0x49f5ae
push 2
lea ecx, [ebp - 0x16e8]
call fcn.00450d2f
mov dword [ebp - 0x105c], 0
push 0x1fbb
push 1
lea eax, [ebp - 0x21c0]
push eax
push 0
lea eax, [ebp - 0x16e8]
push eax
push 1
push 0x3fcf
push 1
push 0
call fcn.004846ae
add esp, 0x24
push 0x568
push 0
push 1
push 0x12fa
push 0x3bc2
push 1
push 0x3373
push 1
push 1
push 0x65c
call fcn.004989c3
add esp, 0x28
mov eax, dword [ebp - 0x105c]
mov dword [ebp - 0x1e94], eax
push 0
lea ecx, [ebp - 0x16e8]
call fcn.00450e1d
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x18fc], 1
je 0x49f4fc
mov dword [ebp - 0x104c], 1
jmp 0x49f503
and dword [ebp - 0x104c], 0
push 0
lea ecx, [ebp - 0x16e8]
call fcn.00450e1d
mov eax, dword [eax]
cmp eax, dword [ebp - 0x104c]
jne 0x49f526
mov dword [ebp - 0x1054], 1
jmp 0x49f52d
and dword [ebp - 0x1054], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18fc]
imul eax, dword [ebp - 0x1054]
test eax, eax
jne 0x49f560
push 0
lea ecx, [ebp - 0x16e8]
call fcn.00450e1d
cmp dword [eax], 0
jne 0x49f560
and dword [ebp - 0x1064], 0
jmp 0x49f56a
mov dword [ebp - 0x1064], 1
mov eax, dword [ebp - 0x105c]
cmp dword [ebp - 0x1064], eax
jne 0x49f584
mov dword [ebp - 0x1088], 1
jmp 0x49f58b
and dword [ebp - 0x1088], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x1088]
mov dword [ebp + eax - 0x2440], ecx
lea ecx, [ebp - 0x16e8]
call fcn.00450e01
jmp 0x49f441
mov dword [ebp - 0x2cc], 0xed080c17
push 0
push 1
push 0
push 0x1822
call fcn.004777b8
add esp, 0x10
mov dword [ebp - 0x1630], 0xfffffff7
mov dword [ebp - 0xa4], 9
mov dword [ebp - 0x1268], 0xfffffff7
mov dword [ebp - 0x2ac], 0
jmp 0x49f602
mov eax, dword [ebp - 0x2ac]
inc eax
mov dword [ebp - 0x2ac], eax
cmp dword [ebp - 0x2ac], 4
jge 0x49f61e
mov eax, dword [ebp - 0x2ac]
mov dword [ebp + eax*4 - 0x1cb4], 0xa8eac8b
jmp 0x49f5f5
mov dword [ebp - 0xa4], 0
jmp 0x49f637
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 3
jg 0x49f68a
mov byte [ebp - 0x129], 0
lea eax, [ebp - 0x129]
push eax
push 0
push 0x6852
push 1
push 0x3712
push 0x1fc9
push 0x72b8
push 1
push 1
push 0x107b
push 0x2188
push 0x5f7b
push 0x7d4c
push 0
call fcn.0048d918
add esp, 0x38
jmp 0x49f62a
mov dword [ebp - 0xa4], 0x11
jmp 0x49f6a3
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0x14
jl 0x49faf3
mov dword [ebp - 0x81c], 0xa4d9a54e
mov dword [ebp - 0x460], 0
jmp 0x49f6d3
mov eax, dword [ebp - 0x460]
inc eax
mov dword [ebp - 0x460], eax
cmp dword [ebp - 0x460], 1
jge 0x49f6ef
mov eax, dword [ebp - 0x460]
mov dword [ebp + eax*4 - 0x17c], 0xfffffff9
jmp 0x49f6c6
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x17c], 0
jmp 0x49f71d
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x17c]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x17c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x17c], 0xfffffff9
jle 0x49faee
mov dword [ebp - 0xe0], 0x836b16b4
push 0x1c64
push 1
push 0x1c29
push 0
push 0x5b41
push 0x3fa8
lea eax, [ebp - 0xa4]
push eax
push 1
push 1
push 0x60f3
lea eax, [ebp - 0xe0]
push eax
push 0x26b8
push 0x1bb2
push 1
call fcn.0048d918
add esp, 0x38
mov dword [ebp - 0xe0], 0
jmp 0x49f797
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 3
jg 0x49fae9
mov dword [ebp - 0x80c], 0x7da7
mov dword [ebp - 0x1258], str.qqhmwdsxg_rib_ixbqwryeu_sdgcrlav
cmp dword [ebp - 0x80c], 0x7ec2
jle 0x49f8a5
and dword [ebp - 0x468], 0
jmp 0x49f7de
mov eax, dword [ebp - 0x468]
inc eax
mov dword [ebp - 0x468], eax
cmp dword [ebp - 0x468], 0x44be
jge 0x49f8a5
and dword [ebp - 0x2b4], 0
jmp 0x49f804
mov eax, dword [ebp - 0x2b4]
inc eax
mov dword [ebp - 0x2b4], eax
cmp dword [ebp - 0x2b4], 0x5118
jge 0x49f8a0
and dword [ebp - 0x538], 0
jmp 0x49f82a
mov eax, dword [ebp - 0x538]
inc eax
mov dword [ebp - 0x538], eax
cmp dword [ebp - 0x538], 0xfdb
jge 0x49f89b
and dword [ebp - 0x2bc], 0
jmp 0x49f84c
mov eax, dword [ebp - 0x2bc]
inc eax
mov dword [ebp - 0x2bc], eax
cmp dword [ebp - 0x2bc], 0x630d
jge 0x49f899
mov eax, dword [ebp - 0x2b4]
cdq
idiv dword [ebp - 0x538]
imul edx, dword [ebp - 0x2bc]
add edx, dword [ebp - 0x468]
mov eax, edx
cdq
mov dword [ebp - 0x12c0], eax
mov dword [ebp - 0x12bc], edx
push dword [ebp - 0x12bc]
push dword [ebp - 0x12c0]
mov ecx, 0xaca3b8
call fcn.00450c1a
jmp 0x49f83f
jmp 0x49f81d
jmp 0x49f7f7
jmp 0x49f7d1
mov dword [ebp - 4], 6
cmp dword [ebp - 0x80c], 0x7ce6
jge 0x49f8c8
mov edx, dword [ebp - 0x1258]
mov ecx, 0xaca3b8
call fcn.004525c0
jmp 0x49f8e4
or dword [ebp - 4], 0xffffffff
jmp 0x49f8ee
mov dword [ebp - 0x1278], 0xfffffff8
mov dword [ebp - 0x2c4], 0
jmp 0x49f911
mov eax, dword [ebp - 0x2c4]
inc eax
mov dword [ebp - 0x2c4], eax
cmp dword [ebp - 0x2c4], 2
jge 0x49f92d
mov eax, dword [ebp - 0x2c4]
mov dword [ebp + eax*4 - 0xf74], 1
jmp 0x49f904
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xf74], 0
jmp 0x49f95b
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf74]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xf74], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xf74], 3
jg 0x49fae4
mov dword [ebp - 0x1270], 0xdba1dd79
mov eax, dword [ebp - 0xe0]
cmp dword [ebp + eax*4 - 0x1cb4], 0
jne 0x49f996
xor eax, eax
jne 0x49f996
and dword [ebp - 0xf50], 0
jmp 0x49f9a0
mov dword [ebp - 0xf50], 1
cmp dword [ebp - 0xf50], 0xffffffff
jl 0x49f9b5
mov dword [ebp - 0xe94], 1
jmp 0x49f9bc
and dword [ebp - 0xe94], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x17c]
cmp dword [ebp - 0xe94], eax
je 0x49f9dd
mov dword [ebp - 0x814], 1
jmp 0x49f9e4
and dword [ebp - 0x814], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x1cb4]
cmp dword [ebp - 0x814], eax
jg 0x49fa05
mov dword [ebp - 0xc6c], 1
jmp 0x49fa0c
and dword [ebp - 0xc6c], 0
mov eax, dword [ebp - 0xc6c]
mov dword [ebp - 0x81c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x17c]
cmp eax, dword [ebp - 0x81c]
je 0x49fa39
mov dword [ebp - 0xfc0], 1
jmp 0x49fa40
and dword [ebp - 0xfc0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf74]
cmp dword [ebp - 0xfc0], eax
jne 0x49fa61
mov dword [ebp - 0x824], 1
jmp 0x49fa68
and dword [ebp - 0x824], 0
mov eax, dword [ebp - 0xe0]
mov eax, dword [ebp + eax*4 - 0x1cb4]
cmp eax, dword [ebp - 0x824]
jle 0x49fa89
mov dword [ebp - 0x1260], 1
jmp 0x49fa90
and dword [ebp - 0x1260], 0
mov eax, dword [ebp - 0xe0]
mov eax, dword [ebp + eax*4 - 0x1cb4]
add eax, 0x3a7e
mov dword [ebp - 0x1268], eax
push 0x6f3c
push 0
push 1
push 0
lea eax, [ebp - 0x1270]
push eax
push 0xa00
push 0
push 0x5681
push 0x3b83
lea eax, [ebp - 0x1278]
push eax
push 0x3b0e
call fcn.0049bf47
add esp, 0x2c
jmp 0x49f940
jmp 0x49f78a
jmp 0x49f702
jmp 0x49f696
mov dword [ebp - 0x15e0], 0x58ed
push 2
lea ecx, [ebp - 0x1a70]
call fcn.00450d2f
mov dword [ebp - 0x15e8], 0x6c9cd49f
mov dword [ebp - 0x15f8], 0
push 2
lea ecx, [ebp - 0x1a64]
call fcn.00450d2f
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x1288], 0x6095dbc2
mov dword [ebp - 0x208], 0xfc167656
mov dword [ebp - 0x1290], 0x13ed423c
mov dword [ebp - 0x15f0], 1
push 1
push 1
push 0x2666
push 0x35ba
push 1
push 1
push 0x28f7
push 0x621b
lea eax, [ebp - 0x1a70]
push eax
push 0x30fa
lea eax, [ebp - 0x1280]
push eax
push 0
call fcn.00489dea
add esp, 0x30
push 0x1f59
push 1
lea eax, [ebp - 0x1a64]
push eax
push 0x5232
lea eax, [ebp - 0x1280]
push eax
push 0x1e5d
push 0
push 0x7a70
push 0x3e88
push 0x55b5
push 1
push 0
call fcn.00495238
add esp, 0x30
lea eax, [ebp - 0x1288]
push eax
lea eax, [ebp - 0x1290]
push eax
push 0
push 0x512b
lea eax, [ebp - 0x1a70]
push eax
lea eax, [ebp - 0x15e0]
push eax
push 0x364d
push 0x3e1a
lea eax, [ebp - 0x15e8]
push eax
push 1
lea eax, [ebp - 0x15f0]
push eax
push 0x5a4d
push 0x6b7d
lea eax, [ebp - 0x1a64]
push eax
push 0x2cb5
push 1
push 0x622a
lea eax, [ebp - 0x220]
push eax
lea eax, [ebp - 0x208]
push eax
push 0x3c96
push 0x2dc0
lea eax, [ebp - 0x15f8]
push eax
push 1
push 0x7c09
push 0xb6c
push 1
push 0x5c6a
call fcn.004963a6
add esp, 0x6c
mov dword [ebp - 0x220], 0
jmp 0x49fc7f
mov eax, dword [ebp - 0x220]
dec eax
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 0xffffffee
je 0x49fcdc
mov dword [ebp - 0x208], 0
jmp 0x49fca1
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 1
jg 0x49fcda
push 1
push 0x1ad5
push 0x3689
push 1
push 0x680f
push 0x1f52
push 0x16e2
push 1
push 1
push 0x20d2
call fcn.0047ed41
add esp, 0x28
jmp 0x49fc94
jmp 0x49fc72
lea ecx, [ebp - 0x1a64]
call fcn.00450e01
lea ecx, [ebp - 0x1a70]
call fcn.00450e01
mov dword [ebp - 0x5d8], 0
jmp 0x49fd0b
mov eax, dword [ebp - 0x5d8]
inc eax
mov dword [ebp - 0x5d8], eax
cmp dword [ebp - 0x5d8], 3
jge 0x49fd27
mov eax, dword [ebp - 0x5d8]
mov dword [ebp + eax*4 - 0x255c], 0xf84b8114
jmp 0x49fcfe
mov dword [ebp - 0x2cc], 0
jmp 0x49fd40
mov eax, dword [ebp - 0x2cc]
inc eax
mov dword [ebp - 0x2cc], eax
cmp dword [ebp - 0x2cc], 2
jg 0x4a0452
push 2
lea ecx, [ebp - 0x1708]
call fcn.00450d2f
push 2
lea ecx, [ebp - 0x1aa0]
call fcn.00450d2f
mov dword [ebp - 0x1600], 0xa1a4d63a
push 4
lea ecx, [ebp - 0x1a88]
call fcn.00450d2f
mov dword [ebp - 0x1cc4], 1
mov dword [ebp - 0x1cc0], 1
mov dword [ebp - 0x1cbc], 1
mov dword [ebp - 0x1cb8], 1
mov dword [ebp - 0x470], 0x9d3388a0
mov dword [ebp - 0x2178], 0xc895
mov dword [ebp - 0x1e9c], 0x97689278
mov dword [ebp - 0x5c], 0
jmp 0x49fdd4
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 2
jge 0x49fded
push dword [ebp - 0x5c]
lea ecx, [ebp - 0x1708]
call fcn.00450e1d
or dword [eax], 0xffffffff
jmp 0x49fdcd
lea eax, [ebp - 0x1aa0]
push eax
push 1
push 0x7b21
push 0
push 0x6b1b
push 1
lea eax, [ebp - 0x5c]
push eax
push 1
push 1
call fcn.004846ae
add esp, 0x24
lea eax, [ebp - 0x1a88]
push eax
push 0
push 1
push 0x7b6
push 1
push 0x928
push 0x4f0b
push 0x73cf
lea eax, [ebp - 0x5c]
push eax
push 1
call fcn.00492cfa
add esp, 0x28
mov dword [ebp - 0x5c], 0
jmp 0x49fe53
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 2
jge 0x49fe69
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x1f60], 0x8d247f69
jmp 0x49fe4c
push 1
lea ecx, [ebp - 0x1708]
call fcn.00450e1d
mov dword [eax], 0xffffffea
jmp 0x49fea2
push 1
lea ecx, [ebp - 0x1708]
call fcn.00450e1d
mov dword [ebp - 0xc74], eax
mov eax, dword [ebp - 0xc74]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xc74]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x1708]
call fcn.00450e1d
cmp dword [eax], 0xfffffff4
je 0x4a035b
mov dword [ebp - 0x90], 0xe2c0d37a
mov dword [ebp - 0x1608], 0xfffffffe
push 3
lea ecx, [ebp - 0x16f8]
call fcn.00450d2f
mov dword [ebp - 0x688], 1
mov dword [ebp - 0x82c], 0x819b53b3
push 0x7f46
push 1
push 0
push 0x3bd0
push 0x781e
push 0x72e5
lea eax, [ebp - 0x16f8]
push eax
lea eax, [ebp - 0x21c8]
push eax
push 0
push 0xcc4
push 0x701b
call fcn.00479c5d
add esp, 0x2c
mov dword [ebp - 0x90], 1
jmp 0x49ff40
mov eax, dword [ebp - 0x90]
dec eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0
jl 0x4a034b
mov dword [ebp - 0x85c], 0xffffffff
mov dword [ebp - 0x1ea4], 0x1bf07968
mov dword [ebp - 0x844], 1
mov dword [ebp - 0x1610], 2
push 3
lea ecx, [ebp - 0x117c]
call fcn.00450d2f
mov dword [ebp - 0x2188], 0x19c36c1
mov dword [ebp - 0x1eac], 0x1d4b4ea6
mov dword [ebp - 0x84c], 0xffffffff
push 1
lea eax, [ebp - 0x21d0]
push eax
push 1
lea eax, [ebp - 0x117c]
push eax
push 0
push 0x7888
push 0x2719
push 0x2ac
push 0x57a4
push 0x4fbc
push 0
call fcn.0048ec7a
add esp, 0x2c
cmp dword [ebp - 0x82c], 0
je 0x4a0048
push 2
lea ecx, [ebp - 0x117c]
call fcn.00450e1d
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x1eb4], eax
mov eax, dword [ebp - 0x82c]
cmp dword [ebp - 0x84c], eax
jl 0x4a0017
push 0xfffffffffffffff8
pop eax
test eax, eax
jne 0x4a0017
and dword [ebp - 0x680], 0
jmp 0x4a0021
mov dword [ebp - 0x680], 1
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x680]
mov dword [ebp + eax - 0x1cc4], ecx
cmp dword [ebp - 0x680], 0
je 0x4a0048
mov dword [ebp - 0xe9c], 1
jmp 0x4a004f
and dword [ebp - 0xe9c], 0
cmp dword [ebp - 0xe9c], 0x78c2ba28
jg 0x4a0067
mov dword [ebp - 0x834], 1
jmp 0x4a006e
and dword [ebp - 0x834], 0
mov eax, dword [ebp - 0x470]
add eax, dword [ebp - 0x834]
jne 0x4a008a
xor eax, eax
inc eax
jne 0x4a008a
and dword [ebp - 0xc7c], 0
jmp 0x4a0094
mov dword [ebp - 0xc7c], 1
mov eax, dword [ebp - 0x90]
cmp dword [ebp - 0xc7c], eax
je 0x4a00ae
mov dword [ebp - 0x73c], 1
jmp 0x4a00b5
and dword [ebp - 0x73c], 0
push 1
lea ecx, [ebp - 0x1a88]
call fcn.00450e1d
mov ecx, dword [ebp - 0x73c]
mov dword [eax], ecx
push dword [ebp - 0x90]
lea ecx, [ebp - 0x1aa0]
call fcn.00450e1d
mov eax, dword [eax]
cmp eax, dword [ebp - 0x73c]
jle 0x4a00f1
mov dword [ebp - 0x83c], 1
jmp 0x4a00f8
and dword [ebp - 0x83c], 0
cmp dword [ebp - 0x83c], 0
jae 0x4a010d
mov dword [ebp - 0x1048], 1
jmp 0x4a0114
and dword [ebp - 0x1048], 0
mov eax, dword [ebp - 0x1048]
mov dword [ebp - 0x844], eax
cmp dword [ebp - 0x844], 0xaac4e246
jbe 0x4a0138
mov dword [ebp - 0xc84], 1
jmp 0x4a013f
and dword [ebp - 0xc84], 0
mov eax, dword [ebp - 0x688]
mov dword [ebp - 0x2198], eax
mov eax, dword [ebp - 0xc84]
mov dword [ebp - 0x470], eax
mov eax, dword [ebp - 0x470]
mov dword [ebp - 0x1ebc], eax
mov eax, dword [ebp - 0x688]
dec eax
mov dword [ebp - 0x688], eax
mov eax, dword [ebp - 0x84c]
sub eax, 6
mov dword [ebp - 0xea4], eax
push 0
lea ecx, [ebp - 0x117c]
call fcn.00450e1d
mov ecx, dword [ebp - 0xea4]
mov dword [eax], ecx
mov eax, dword [ebp - 0xea4]
mov dword [ebp - 0x1600], eax
push 2
lea ecx, [ebp - 0x16f8]
call fcn.00450e1d
push 2
lea ecx, [ebp - 0x16f8]
call fcn.00450e1d
cmp dword [eax], 0xe55e
jg 0x4a01d7
cmp dword [ebp - 0x1608], 0
je 0x4a01d7
mov dword [ebp - 0x854], 1
jmp 0x4a01de
and dword [ebp - 0x854], 0
mov eax, dword [ebp - 0x90]
cmp eax, dword [ebp - 0x854]
jge 0x4a01f8
mov dword [ebp - 0xc8c], 1
jmp 0x4a01ff
and dword [ebp - 0xc8c], 0
mov eax, dword [ebp - 0xc8c]
mov dword [ebp - 0x85c], eax
mov eax, dword [ebp - 0x85c]
cmp dword [ebp - 0x90], eax
jg 0x4a0225
mov dword [ebp - 0xfc8], 1
jmp 0x4a022c
and dword [ebp - 0xfc8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1f60]
cmp dword [ebp - 0xfc8], eax
jle 0x4a024d
mov dword [ebp - 0x864], 1
jmp 0x4a0254
and dword [ebp - 0x864], 0
cmp dword [ebp - 0x864], 9
jne 0x4a0269
mov dword [ebp - 0xc94], 1
jmp 0x4a0270
and dword [ebp - 0xc94], 0
cmp dword [ebp - 0xc94], 0
jge 0x4a0285
mov dword [ebp - 0x86c], 1
jmp 0x4a028c
and dword [ebp - 0x86c], 0
cmp dword [ebp - 0x86c], 0x9de5
je 0x4a02a4
mov dword [ebp - 0xeac], 1
jmp 0x4a02ab
and dword [ebp - 0xeac], 0
mov eax, dword [ebp - 0x470]
cmp dword [ebp - 0xeac], eax
jle 0x4a02c5
mov dword [ebp - 0x874], 1
jmp 0x4a02cc
and dword [ebp - 0x874], 0
push 2
lea ecx, [ebp - 0x117c]
call fcn.00450e1d
mov esi, dword [ebp - 0x874]
add esi, dword [eax]
push 0
lea ecx, [ebp - 0x16f8]
call fcn.00450e1d
cmp esi, dword [eax]
jle 0x4a02fe
mov dword [ebp - 0xc9c], 1
jmp 0x4a0305
and dword [ebp - 0xc9c], 0
mov eax, dword [ebp - 0x1610]
cmp dword [ebp - 0xc9c], eax
jle 0x4a031f
mov dword [ebp - 0x87c], 1
jmp 0x4a0326
and dword [ebp - 0x87c], 0
push 0
lea ecx, [ebp - 0x117c]
call fcn.00450e1d
mov ecx, dword [ebp - 0x87c]
mov dword [eax], ecx
lea ecx, [ebp - 0x117c]
call fcn.00450e01
jmp 0x49ff33
lea ecx, [ebp - 0x16f8]
call fcn.00450e01
jmp 0x49fe7e
lea ecx, [ebp - 0x1a88]
call fcn.00450e01
lea ecx, [ebp - 0x1aa0]
call fcn.00450e01
lea ecx, [ebp - 0x1708]
call fcn.00450e01
mov byte [ebp - 0x171], 0
push 4
lea ecx, [ebp - 0x2064]
call fcn.00450d2f
push 1
push 1
push 0x36b7
push 0
lea eax, [ebp - 0x2064]
push eax
push 0
push 0x57a
push 0x1f5a
lea eax, [ebp - 0x21d8]
push eax
call fcn.0047e62c
add esp, 0x24
push 1
push 0x32c0
push 0
push 0x6f45
push 1
push 0x77a0
push 1
call fcn.0049b409
add esp, 0x1c
push 0x205
push 0x59f8
push 0
push 0x1c10
push 0x2610
push 0x3cc3
push 1
push 1
push 0x179
push 0x7cc7
push 1
push 0x7d55
push 0xee8
push 0xe6c
push 0x34de
push 0x432b
call fcn.00493db3
add esp, 0x40
lea ecx, [ebp - 0x2064]
call fcn.00450e01
push 0
push 1
push 0x841
lea eax, [ebp - 0x171]
push eax
push 0
call fcn.0049af1a
add esp, 0x14
jmp 0x49fd33
mov dword [ebp - 0x50], 0x5052061f
mov dword [ebp - 0x54], 0x31eb2391
mov dword [ebp - 0x184], 0xfffffffa
mov dword [ebp - 0x1628], 0
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x1ec4], eax
cmp dword [ebp - 0x50], 1
jb 0x4a048f
mov dword [ebp - 0x1020], 1
jmp 0x4a0496
and dword [ebp - 0x1020], 0
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x1020], eax
jl 0x4a04ad
mov dword [ebp - 0x884], 1
jmp 0x4a04b4
and dword [ebp - 0x884], 0
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x884], eax
jg 0x4a04cb
mov dword [ebp - 0xca4], 1
jmp 0x4a04d2
and dword [ebp - 0xca4], 0
mov eax, dword [ebp - 0xca4]
inc eax
inc eax
cmp eax, dword [ebp - 0x50]
je 0x4a04eb
mov dword [ebp - 0x88c], 1
jmp 0x4a04f2
and dword [ebp - 0x88c], 0
mov eax, dword [ebp - 0x50]
add eax, dword [ebp - 0x88c]
cmp eax, dword [ebp - 0x50]
jle 0x4a050f
cmp dword [ebp - 0x50], 0
jne 0x4a050f
and dword [ebp - 0xeb4], 0
jmp 0x4a0519
mov dword [ebp - 0xeb4], 1
mov eax, dword [ebp - 0xeb4]
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0
je 0x4a05c6
mov dword [ebp - 0x1620], 0xfffffff8
mov dword [ebp - 0x1618], 0x7511ecbf
push 0xdc
push 0x33fb
push 1
push 0x4653
push 0x27e2
push 0x4ebc
lea eax, [ebp - 0x184]
push eax
lea eax, [ebp - 0x1618]
push eax
push 0x5a74
push 1
push 0x3135
push 0x3a2b
push 0x3449
push 0x7672
push 0x7897
push 0
push 0x6257
push 0x3e3a
push 0x5a3c
lea eax, [ebp - 0x50]
push eax
push 0x419
push 0x7889
push 1
lea eax, [ebp - 0x1620]
push eax
push 0x2aaf
push 1
lea eax, [ebp - 0x54]
push eax
call fcn.004963a6
add esp, 0x6c
jmp 0x4a05f6
mov byte [ebp - 0x131], 0
lea eax, [ebp - 0x131]
push eax
push 0x7c9d
push 0x7e4a
push 1
push 0
push 0x6483
push 0x4e88
push 0
call fcn.0048753b
add esp, 0x20
cmp dword [ebp - 0x184], 0
jne 0x4a068f
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x21a8], eax
cmp dword [ebp - 0x50], 0
jne 0x4a062e
cmp dword [ebp - 0x54], 0
jne 0x4a062e
cmp dword [ebp - 0x54], 0
jne 0x4a062e
push 2
pop eax
test eax, eax
jne 0x4a062e
and dword [ebp - 0x894], 0
jmp 0x4a0638
mov dword [ebp - 0x894], 1
cmp dword [ebp - 0x894], 0xfffd
jb 0x4a0650
mov dword [ebp - 0xcac], 1
jmp 0x4a0657
and dword [ebp - 0xcac], 0
mov eax, dword [ebp - 0x54]
cmp eax, dword [ebp - 0xcac]
je 0x4a066e
mov dword [ebp - 0x89c], 1
jmp 0x4a0675
and dword [ebp - 0x89c], 0
mov eax, dword [ebp - 0x54]
add eax, dword [ebp - 0x89c]
cmp eax, dword [ebp - 0x184]
jg 0x4a068f
and dword [ebp - 0xfd0], 0
jmp 0x4a0699
mov dword [ebp - 0xfd0], 1
cmp dword [ebp - 0xfd0], 6
jne 0x4a06ae
mov dword [ebp - 0x8a4], 1
jmp 0x4a06b5
and dword [ebp - 0x8a4], 0
mov eax, dword [ebp - 0x184]
sub eax, dword [ebp - 0x8a4]
cmp eax, dword [ebp - 0x50]
jl 0x4a06d2
mov dword [ebp - 0xcb4], 1
jmp 0x4a06d9
and dword [ebp - 0xcb4], 0
cmp dword [ebp - 0xcb4], 0x777f
jne 0x4a06f1
mov dword [ebp - 0x8ac], 1
jmp 0x4a06f8
and dword [ebp - 0x8ac], 0
mov eax, dword [ebp - 0x8ac]
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 0x7924
jle 0x4a071c
mov dword [ebp - 0xebc], 1
jmp 0x4a0723
and dword [ebp - 0xebc], 0
mov eax, dword [ebp - 0x54]
add eax, dword [ebp - 0xebc]
cmp eax, 1
jge 0x4a073d
mov dword [ebp - 0x8b4], 1
jmp 0x4a0744
and dword [ebp - 0x8b4], 0
cmp dword [ebp - 0x8b4], 0xfffffffc
jle 0x4a0759
mov dword [ebp - 0xcbc], 1
jmp 0x4a0760
and dword [ebp - 0xcbc], 0
mov eax, dword [ebp - 0xcbc]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
dec eax
mov dword [ebp - 0x1628], eax
cmp dword [ebp - 0x1630], 0
je 0x4a077e
jmp 0x4a0783
jmp 0x49f0be
lea ecx, [ebp - 0x1718]
call fcn.00450e01
mov dword [ebp - 0xf0], 0x5540d7f8
mov dword [ebp - 0xf0], 0x1b
jmp 0x4a07b1
mov eax, dword [ebp - 0xf0]
dec eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0xfffffff0
je 0x4a0897
mov dword [ebp - 0x2d4], 0xdce9d05b
mov dword [ebp - 0x2d4], 0
jmp 0x4a07e1
mov eax, dword [ebp - 0x2d4]
dec eax
mov dword [ebp - 0x2d4], eax
cmp dword [ebp - 0x2d4], 0xffffffed
je 0x4a0892
mov dword [ebp - 0x540], 0xff82ff40
mov dword [ebp - 0x540], 0
jmp 0x4a0811
mov eax, dword [ebp - 0x540]
inc eax
mov dword [ebp - 0x540], eax
cmp dword [ebp - 0x540], 2
jne 0x4a088d
mov byte [ebp - 0x173], 0
push 0
push 1
push 0x791f
push 1
push 0x49d6
push 0x25f0
push 0x16d5
push 1
lea eax, [ebp - 0x173]
push eax
push 0x49df
call fcn.0048cf2b
add esp, 0x28
mov byte [ebp - 0x139], 0
push 0x52ee
push 0x4703
push 1
push 1
push 0x393
push 0x1fbf
lea eax, [ebp - 0x139]
push eax
push 1
push 0
push 0xe68
call fcn.004835e5
add esp, 0x28
jmp 0x4a0804
jmp 0x4a07d4
jmp 0x4a07a4
mov dword [ebp - 0xf0], 0xffffffe8
jmp 0x4a08b0
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0xfffffff4
jge 0x4a0a54
mov dword [ebp - 0x478], 0x4f3d4e6
mov dword [ebp - 0x2dc], 0
jmp 0x4a08e0
mov eax, dword [ebp - 0x2dc]
inc eax
mov dword [ebp - 0x2dc], eax
cmp dword [ebp - 0x2dc], 4
jge 0x4a08fc
mov eax, dword [ebp - 0x2dc]
mov dword [ebp + eax*4 - 0x2498], 0x94d03572
jmp 0x4a08d3
mov dword [ebp - 0x478], 0xfffffffd
jmp 0x4a0915
mov eax, dword [ebp - 0x478]
inc eax
mov dword [ebp - 0x478], eax
cmp dword [ebp - 0x478], 0x11
jg 0x4a0a30
mov dword [ebp - 0x2e4], 0
jmp 0x4a093b
mov eax, dword [ebp - 0x2e4]
inc eax
mov dword [ebp - 0x2e4], eax
cmp dword [ebp - 0x2e4], 2
jge 0x4a0957
mov eax, dword [ebp - 0x2e4]
mov dword [ebp + eax*4 - 0x111c], 0x17059141
jmp 0x4a092e
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x111c], 4
jmp 0x4a0985
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x111c]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x111c], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x111c], 0xa
jg 0x4a09d6
mov dword [ebp - 0x1c0], 0xd303f024
mov dword [ebp - 0x1c0], 3
jmp 0x4a09b8
mov eax, dword [ebp - 0x1c0]
dec eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 0
jl 0x4a09d4
mov eax, dword [ebp - 0x1c0]
mov dword [ebp + eax*4 - 0x2498], 0
jmp 0x4a09ab
jmp 0x4a096a
push 0x68c8
push 0x4414
push 0
push 0x2372
push 0x2cf6
push 0x1578
push 1
push 0x1314
push 0x4273
push 0x4667
push 1
push 0x197
push 0
push 0x2cc8
push 0x20c5
push 1
push 1
push 0x69f
push 0x488f
call fcn.004908ee
add esp, 0x4c
jmp 0x4a0908
push 1
push 0x5768
push 0
push 0x7322
push 1
push 0x1b87
push 1
call fcn.00479f4f
add esp, 0x1c
jmp 0x4a08a3
mov dword [ebp - 0x710], 1
mov dword [ebp - 0x8bc], 0x2304b25b
mov dword [ebp - 0x1638], 0
cmp dword [ebp - 0x710], 0
je 0x4a0ab1
cmp dword [ebp - 0x710], 0
je 0x4a0ab1
push 0x6545
push 0
push 0
push 0x7802
lea eax, [ebp - 0x8bc]
push eax
push 1
push 0x10da
lea eax, [ebp - 0x710]
push eax
call fcn.0047f257
add esp, 0x20
jmp 0x4a0b10
push 0x5dc6
push 0x4589
push 1
push 0x7225
push 0x125
push 1
lea eax, [ebp - 0x8bc]
push eax
lea eax, [ebp - 0x1638]
push eax
push 1
push 0
call fcn.0048c9bf
add esp, 0x28
mov byte [ebp - 0x175], 0
push 0
push 0x55c7
lea eax, [ebp - 0x175]
push eax
push 0xc0c
push 1
push 0
push 0x422e
push 1
call fcn.0049e630
add esp, 0x20
mov dword [ebp - 0x1060], 0x63a2
mov dword [ebp - 0x1640], str.qsuqiyemp_xnbhhx_nhhi_turzafo_erdysk_obmwbbzfj_naxorlq_cjgo_nzt
cmp dword [ebp - 0x1060], 0x6786
jle 0x4a0c1c
and dword [ebp - 0x5a8], 0
jmp 0x4a0b4a
mov eax, dword [ebp - 0x5a8]
inc eax
mov dword [ebp - 0x5a8], eax
cmp dword [ebp - 0x5a8], 0x7ea8
jge 0x4a0c11
and dword [ebp - 0x2ec], 0
jmp 0x4a0b70
mov eax, dword [ebp - 0x2ec]
inc eax
mov dword [ebp - 0x2ec], eax
cmp dword [ebp - 0x2ec], 0xbff
jge 0x4a0c0c
and dword [ebp - 0x480], 0
jmp 0x4a0b96
mov eax, dword [ebp - 0x480]
inc eax
mov dword [ebp - 0x480], eax
cmp dword [ebp - 0x480], 0x2084
jge 0x4a0c07
and dword [ebp - 0x2f4], 0
jmp 0x4a0bb8
mov eax, dword [ebp - 0x2f4]
inc eax
mov dword [ebp - 0x2f4], eax
cmp dword [ebp - 0x2f4], 0x3b0e
jge 0x4a0c05
mov eax, dword [ebp - 0x5a8]
imul eax, dword [ebp - 0x2ec]
cdq
idiv dword [ebp - 0x480]
or edx, dword [ebp - 0x2f4]
mov eax, edx
cdq
mov dword [ebp - 0x12cc], eax
mov dword [ebp - 0x12c8], edx
push dword [ebp - 0x12c8]
push dword [ebp - 0x12cc]
mov ecx, 0xaca3b8
call fcn.00450c1a
jmp 0x4a0bab
jmp 0x4a0b89
jmp 0x4a0b63
jmp 0x4a0b3d
push 0x3a4
call dword [sym.imp.GDI32.dll_RealizePalette]
mov dword [ebp - 4], 8
cmp dword [ebp - 0x1060], 0x604e
jge 0x4a0c3f
mov edx, dword [ebp - 0x1640]
mov ecx, 0xaca3b8
call fcn.004525c0
jmp 0x4a0c5b
or dword [ebp - 4], 0xffffffff
jmp 0x4a0c65
mov dword [ebp - 0x1998], 0xfffffffb
mov dword [ebp - 0x1994], 0xfffffffb
mov dword [ebp - 0x1990], 0xfffffffb
mov dword [ebp - 0x198c], 0xfffffffb
lea ecx, [ebp - 0x719]
call fcn.00450e2c
push eax
lea eax, [ebp - 0x1988]
push eax
lea eax, [ebp - 0x1998]
push eax
lea ecx, [ebp - 0x2488]
call fcn.00450e2f
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x794]
call fcn.00450ddb
mov dword [ebp - 0xccc], 0xffffffff
mov dword [ebp - 0x1650], 0xffffffff
mov dword [ebp - 0x1658], 0xffff
mov dword [ebp - 0xd0], 0
jmp 0x4a0cf9
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 3
jge 0x4a0d15
mov eax, dword [ebp - 0xd0]
mov dword [ebp + eax*4 - 0x2340], 0xeac8b13e
jmp 0x4a0cec
mov dword [ebp - 0xd0], 0
jmp 0x4a0d2e
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 2
jge 0x4a0d4a
mov eax, dword [ebp - 0xd0]
mov dword [ebp + eax*4 - 0x18ec], 0x57736d0c
jmp 0x4a0d21
push 1
lea ecx, [ebp - 0x794]
call fcn.00450e1d
and dword [eax], 0
jmp 0x4a0d80
push 1
lea ecx, [ebp - 0x794]
call fcn.00450e1d
mov dword [ebp - 0x8c4], eax
mov eax, dword [ebp - 0x8c4]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x8c4]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x794]
call fcn.00450e1d
cmp dword [eax], 2
jg 0x4a12a0
push 1
lea ecx, [ebp - 0x7dc]
call fcn.00450d2f
push 3
lea ecx, [ebp - 0x1ab8]
call fcn.00450d2f
push 1
push 0x7281
push 0x7370
push 0x2e80
push 0x73a2
push 0x69b7
push 1
push 1
push 0x6606
push 0x370e
push 0x20f9
push 1
push 1
push 0x5633
push 0x1070
push 0x6def
lea eax, [ebp - 0x7dc]
push eax
push 0x6b39
push 0x4eaf
push 0x60e3
lea eax, [ebp - 0x1648]
push eax
push 0
call fcn.0048f305
add esp, 0x58
push 1
lea eax, [ebp - 0x1ab8]
push eax
push 0x6a67
push 1
push 0x7d34
push 0x39d8
push 0x3de7
lea eax, [ebp - 0x1648]
push eax
push 0
call fcn.00479204
add esp, 0x24
mov byte [ebp - 0x141], 0
movzx eax, byte [ebp - 0x141]
test eax, eax
je 0x4a0ea8
push 0x2893
push 0
push 0
push 1
push 0x34f1
push 0x1b1d
push 1
push 0x253c
push 0x74c0
push 1
push 0x1627
push 0x1fa7
push 0x971
push 0x47ae
push 0x3dc1
push 0x65a5
push 0x3d92
call fcn.00488576
add esp, 0x44
cmp dword [ebp - 0xccc], 0
je 0x4a1027
cmp dword [ebp - 0x1650], 0
je 0x4a0edc
push 1
lea ecx, [ebp - 0x794]
call fcn.00450e1d
cmp dword [eax], 0
je 0x4a0edc
mov dword [ebp - 0xcc4], 1
jmp 0x4a0ee3
and dword [ebp - 0xcc4], 0
push 0
lea ecx, [ebp - 0x7dc]
call fcn.00450e1d
mov ecx, dword [ebp - 0xcc4]
cmp ecx, dword [eax]
jne 0x4a0f06
mov dword [ebp - 0x8cc], 1
jmp 0x4a0f0d
and dword [ebp - 0x8cc], 0
push 1
lea ecx, [ebp - 0x794]
call fcn.00450e1d
mov eax, dword [eax]
cmp eax, dword [ebp - 0x8cc]
je 0x4a0f30
mov dword [ebp - 0xec4], 1
jmp 0x4a0f37
and dword [ebp - 0xec4], 0
push 1
lea ecx, [ebp - 0x794]
call fcn.00450e1d
mov eax, dword [eax]
lea eax, [ebp + eax*4 - 0x2340]
mov dword [ebp - 0x8d4], eax
push 1
lea ecx, [ebp - 0x794]
call fcn.00450e1d
mov ecx, dword [ebp - 0x8d4]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0xec4]
dec eax
mov ecx, dword [ebp - 0x8d4]
cmp dword [ecx], eax
jl 0x4a0f88
push 0
lea ecx, [ebp - 0x7dc]
call fcn.00450e1d
cmp dword [ebp - 0xccc], 0
jne 0x4a0fa3
mov eax, 0x2af
test eax, eax
jne 0x4a0fa3
and dword [ebp - 0x8dc], 0
jmp 0x4a0fad
mov dword [ebp - 0x8dc], 1
cmp dword [ebp - 0x8dc], 0
je 0x4a0fc2
mov dword [ebp - 0x690], 1
jmp 0x4a0fc9
and dword [ebp - 0x690], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x690]
mov dword [ebp + eax - 0x18ec], ecx
push 0
lea ecx, [ebp - 0x7dc]
call fcn.00450e1d
mov esi, dword [ebp - 0x690]
imul esi, dword [eax]
push 0
lea ecx, [ebp - 0x7dc]
call fcn.00450e1d
cmp esi, dword [eax]
jg 0x4a1027
push 1
push 1
push 0x4ac6
push 0
push 0x62f8
push 0x4e0c
push 1
call fcn.004960d5
add esp, 0x1c
jmp 0x4a1285
mov dword [ebp - 0x698], 0
mov dword [ebp - 0x548], 0
jmp 0x4a104a
mov eax, dword [ebp - 0x548]
inc eax
mov dword [ebp - 0x548], eax
cmp dword [ebp - 0x548], 2
jge 0x4a1066
mov eax, dword [ebp - 0x548]
mov dword [ebp + eax*4 - 0x1fec], 0xf51b4373
jmp 0x4a103d
mov esi, dword [ebp - 0x698]
push 0
lea ecx, [ebp - 0x794]
call fcn.00450e1d
cmp esi, dword [eax]
jg 0x4a1089
mov dword [ebp - 0xfd8], 1
jmp 0x4a1090
and dword [ebp - 0xfd8], 0
cmp dword [ebp - 0xfd8], 0x514f
je 0x4a10a8
mov dword [ebp - 0xecc], 1
jmp 0x4a10af
and dword [ebp - 0xecc], 0
push 0
lea ecx, [ebp - 0x7dc]
call fcn.00450e1d
cmp dword [eax], 0
jne 0x4a119d
push 4
pop eax
imul eax, eax, 0
mov esi, dword [ebp + eax - 0x18ec]
push 0
lea ecx, [ebp - 0x7dc]
call fcn.00450e1d
cmp esi, dword [eax]
jge 0x4a1102
xor eax, eax
jne 0x4a1102
push 0
lea ecx, [ebp - 0x7dc]
call fcn.00450e1d
cmp dword [eax], 0
jne 0x4a1102
and dword [ebp - 0x8e4], 0
jmp 0x4a110c
mov dword [ebp - 0x8e4], 1
push 1
lea ecx, [ebp - 0x794]
call fcn.00450e1d
mov ecx, dword [ebp - 0x8e4]
cmp ecx, dword [eax]
jl 0x4a112f
mov dword [ebp - 0xcd4], 1
jmp 0x4a1136
and dword [ebp - 0xcd4], 0
cmp dword [ebp - 0xcd4], 0xf0aeacb2
jb 0x4a114e
mov dword [ebp - 0x8ec], 1
jmp 0x4a1155
and dword [ebp - 0x8ec], 0
mov eax, dword [ebp - 0x1658]
cmp dword [ebp - 0x8ec], eax
jl 0x4a116f
mov dword [ebp - 0x744], 1
jmp 0x4a1176
and dword [ebp - 0x744], 0
push 0
lea ecx, [ebp - 0x7dc]
call fcn.00450e1d
mov ecx, dword [ebp - 0x744]
mov dword [eax], ecx
cmp dword [ebp - 0x744], 0
jne 0x4a119d
and dword [ebp - 0x8f4], 0
jmp 0x4a11a7
mov dword [ebp - 0x8f4], 1
mov eax, dword [ebp - 0xecc]
imul eax, dword [ebp - 0x8f4]
cmp eax, 7
ja 0x4a11c5
mov dword [ebp - 0xcdc], 1
jmp 0x4a11cc
and dword [ebp - 0xcdc], 0
cmp dword [ebp - 0xcdc], 0x5ee87909
jg 0x4a11e4
mov dword [ebp - 0x8fc], 1
jmp 0x4a11eb
and dword [ebp - 0x8fc], 0
mov eax, dword [ebp - 0x8fc]
mov dword [ebp - 0x698], eax
mov esi, dword [ebp - 0x698]
push 1
lea ecx, [ebp - 0x1ab8]
call fcn.00450e1d
cmp esi, dword [eax]
jge 0x4a121a
mov dword [ebp - 0x1028], 1
jmp 0x4a1221
and dword [ebp - 0x1028], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1028]
mov dword [ebp + eax - 0x1fec], ecx
mov byte [ebp - 0x177], 0
push 0x1627
push 0x108b
push 1
push 0x5a19
push 0x35bb
push 0x466d
push 0x4a2b
push 0x47
push 0xd8c
push 1
lea eax, [ebp - 0x177]
push eax
push 0x1116
push 0
push 1
push 1
push 1
push 0x6642
call fcn.0048615a
add esp, 0x44
lea ecx, [ebp - 0x1ab8]
call fcn.00450e01
lea ecx, [ebp - 0x7dc]
call fcn.00450e01
jmp 0x4a0d5c
lea ecx, [ebp - 0x794]
call fcn.00450e01
mov dword [ebp - 0xe8], 0x5540d7f8
mov dword [ebp - 0x98], 0xffffffff
mov dword [ebp - 0x924], 0x549e
mov dword [ebp - 0xed4], 0
mov dword [ebp - 0x1660], 1
mov dword [ebp - 0xcf4], 0x85ba5616
mov dword [ebp - 0x1668], 0xffffffff
mov dword [ebp - 0x2fc], 0
jmp 0x4a130a
mov eax, dword [ebp - 0x2fc]
inc eax
mov dword [ebp - 0x2fc], eax
cmp dword [ebp - 0x2fc], 3
jge 0x4a1326
mov eax, dword [ebp - 0x2fc]
mov dword [ebp + eax*4 - 0x2358], 0xffffffff
jmp 0x4a12fd
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x1ecc], eax
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x21e0], eax
imul eax, dword [ebp - 0x98], 9
cmp eax, dword [ebp - 0x98]
jge 0x4a1359
mov dword [ebp - 0x904], 1
jmp 0x4a1360
and dword [ebp - 0x904], 0
mov eax, dword [ebp - 0x904]
sub eax, dword [ebp - 0x924]
cmp eax, dword [ebp - 0xed4]
jge 0x4a1380
mov dword [ebp - 0xce4], 1
jmp 0x4a1387
and dword [ebp - 0xce4], 0
cmp dword [ebp - 0xce4], 0x89f7
jge 0x4a139f
mov dword [ebp - 0x90c], 1
jmp 0x4a13a6
and dword [ebp - 0x90c], 0
mov eax, dword [ebp - 0x90c]
sub eax, dword [ebp - 0xed4]
cmp eax, 0xffffffff
jne 0x4a13c3
mov dword [ebp - 0x914], 1
jmp 0x4a13ca
and dword [ebp - 0x914], 0
mov eax, dword [ebp - 0x98]
cmp dword [ebp - 0x914], eax
jle 0x4a13dc
xor eax, eax
jne 0x4a13ea
or eax, 0xffffffff
jne 0x4a13ea
and dword [ebp - 0xcec], 0
jmp 0x4a13f4
mov dword [ebp - 0xcec], 1
mov eax, dword [ebp - 0xcec]
sub eax, dword [ebp - 0x1660]
je 0x4a1417
cmp dword [ebp - 0x98], 0
je 0x4a1417
mov dword [ebp - 0x91c], 1
jmp 0x4a141e
and dword [ebp - 0x91c], 0
mov eax, dword [ebp - 0x98]
cmp dword [ebp - 0x91c], eax
jne 0x4a1438
mov dword [ebp - 0xfe0], 1
jmp 0x4a143f
and dword [ebp - 0xfe0], 0
mov eax, dword [ebp - 0xfe0]
mov dword [ebp - 0xcf4], eax
mov eax, dword [ebp - 0x924]
cmp dword [ebp - 0xcf4], eax
jl 0x4a1465
mov dword [ebp - 0x718], 1
jmp 0x4a146c
and dword [ebp - 0x718], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x718]
mov dword [ebp + eax - 0x2358], ecx
mov eax, dword [ebp - 0x718]
neg eax
cmp eax, dword [ebp - 0x98]
jne 0x4a149b
mov dword [ebp - 0x92c], 1
jmp 0x4a14a2
and dword [ebp - 0x92c], 0
cmp dword [ebp - 0x92c], 0x2c0d
jle 0x4a14ba
mov dword [ebp - 0xedc], 1
jmp 0x4a14c1
and dword [ebp - 0xedc], 0
mov eax, dword [ebp - 0x98]
cmp eax, dword [ebp - 0xedc]
jne 0x4a14db
mov dword [ebp - 0x934], 1
jmp 0x4a14e2
and dword [ebp - 0x934], 0
mov eax, dword [ebp - 0x934]
mov dword [ebp - 0x1668], eax
mov dword [ebp - 0xe8], 0x1b
jmp 0x4a1507
mov eax, dword [ebp - 0xe8]
dec eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0xfffffff0
je 0x4a29d5
push 2
lea ecx, [ebp - 0x1ae8]
call fcn.00450d2f
mov dword [ebp - 0xcfc], 0x28b0
mov dword [ebp - 0x1670], str.apohiksym_pxjanx_ltrp_gmqalu_bhfl_xdnohpme_crbjzgbf_ugcgfu_qbebakcd_tbafgx
cmp dword [ebp - 0xcfc], 0x2c65
jle 0x4a1653
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
and dword [ebp - 0x488], 0
jmp 0x4a1569
mov eax, dword [ebp - 0x488]
inc eax
mov dword [ebp - 0x488], eax
cmp dword [ebp - 0x488], 0x2951
jge 0x4a1653
and dword [ebp - 0x304], 0
jmp 0x4a158f
mov eax, dword [ebp - 0x304]
inc eax
mov dword [ebp - 0x304], eax
cmp dword [ebp - 0x304], 0x7025
jge 0x4a164e
and dword [ebp - 0x600], 0
jmp 0x4a15b5
mov eax, dword [ebp - 0x600]
inc eax
mov dword [ebp - 0x600], eax
cmp dword [ebp - 0x600], 0x4ce3
jge 0x4a1649
and dword [ebp - 0x30c], 0
jmp 0x4a15db
mov eax, dword [ebp - 0x30c]
inc eax
mov dword [ebp - 0x30c], eax
cmp dword [ebp - 0x30c], 0x5beb
jge 0x4a1644
mov eax, dword [ebp - 0x488]
mov ecx, dword [ebp - 0x304]
sar eax, cl
mov ecx, dword [ebp - 0x600]
shl eax, cl
or eax, dword [ebp - 0x30c]
cdq
mov dword [ebp - 0x12d8], eax
mov dword [ebp - 0x12d4], edx
push dword [ebp - 0x12d4]
push dword [ebp - 0x12d8]
lea ecx, [ebp - 0x26a0]
call fcn.00401993
pop ecx
pop ecx
mov ecx, eax
call fcn.00450c0f
push eax
call fcn.004b40b7
pop ecx
lea ecx, [ebp - 0x26a0]
call fcn.00450c05
jmp 0x4a15ce
jmp 0x4a15a8
jmp 0x4a1582
jmp 0x4a155c
mov dword [ebp - 0x230], 0
jmp 0x4a166c
mov eax, dword [ebp - 0x230]
inc eax
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 1
jge 0x4a1688
mov eax, dword [ebp - 0x230]
mov dword [ebp + eax*4 - 0x19c], 0
jmp 0x4a165f
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0xcfc], 0x2656
jge 0x4a16a7
push dword [ebp - 0x1670]
call fcn.004b40b7
pop ecx
jmp 0x4a16c3
or dword [ebp - 4], 0xffffffff
jmp 0x4a16cd
push 0
lea eax, [ebp - 0x230]
push eax
push 1
push 1
push 0x4869
push 0x7065
lea eax, [ebp - 0x1ae8]
push eax
push 0x3ee9
push 1
call fcn.0047c498
add esp, 0x24
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x19c], 0
jmp 0x4a1728
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x19c]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x19c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x19c], 0xffffffe4
jl 0x4a18bc
mov dword [ebp - 0x490], 0
mov dword [ebp - 0x490], 0xfffffffc
jmp 0x4a175f
mov eax, dword [ebp - 0x490]
dec eax
mov dword [ebp - 0x490], eax
cmp dword [ebp - 0x490], 0xffffffee
jl 0x4a18b7
mov dword [ebp - 0x314], 0x822e6e7f
mov dword [ebp - 0xb8], 0
jmp 0x4a178f
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 1
jge 0x4a17ab
mov eax, dword [ebp - 0xb8]
mov dword [ebp + eax*4 - 0x1ed4], 0xffffffff
jmp 0x4a1782
mov dword [ebp - 0xb8], 0
jmp 0x4a17c4
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 2
jge 0x4a17e0
mov eax, dword [ebp - 0xb8]
mov dword [ebp + eax*4 - 0x1f6c], 0x55a6
jmp 0x4a17b7
mov dword [ebp - 0x314], 0
jmp 0x4a17f9
mov eax, dword [ebp - 0x314]
inc eax
mov dword [ebp - 0x314], eax
cmp dword [ebp - 0x314], 1
jg 0x4a18b2
mov dword [ebp - 0x550], 1
mov dword [ebp - 0x21e8], 0xe26595ad
mov dword [ebp - 0x550], 1
jmp 0x4a1833
mov eax, dword [ebp - 0x550]
dec eax
mov dword [ebp - 0x550], eax
cmp dword [ebp - 0x550], 0
jl 0x4a18ad
push 1
lea ecx, [ebp - 0x1ad0]
call fcn.00450d2f
mov dword [ebp - 0x31c], 0
jmp 0x4a1862
mov eax, dword [ebp - 0x31c]
inc eax
mov dword [ebp - 0x31c], eax
cmp dword [ebp - 0x31c], 1
jge 0x4a1881
push dword [ebp - 0x31c]
lea ecx, [ebp - 0x1ad0]
call fcn.00450e1d
or dword [eax], 0xffffffff
jmp 0x4a1855
push 4
pop eax
imul eax, eax, 0
mov esi, dword [ebp + eax - 0x1f6c]
push 0
lea ecx, [ebp - 0x1ad0]
call fcn.00450e1d
mov dword [eax], esi
lea ecx, [ebp - 0x1ad0]
call fcn.00450e01
jmp 0x4a1826
jmp 0x4a17ec
jmp 0x4a1752
jmp 0x4a170d
push 0
lea ecx, [ebp - 0x1ae8]
call fcn.00450e1d
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov eax, dword [ebp + eax - 0x19c]
mov dword [ebp + ecx - 0x19c], eax
lea ecx, [ebp - 0x1ae8]
call fcn.00450e01
mov dword [ebp - 0x324], 0xdce9d05b
mov dword [ebp - 0x1c8], 0xffffffff
mov dword [ebp - 0x1050], 0x67f5ed9a
mov dword [ebp - 0x1edc], 0xffffffff
mov dword [ebp - 0x21b4], 0xc80fc3a0
mov dword [ebp - 0x1ee4], 0x4f823aaf
mov dword [ebp - 0x1678], 1
mov dword [ebp - 0x498], 0
jmp 0x4a194d
mov eax, dword [ebp - 0x498]
inc eax
mov dword [ebp - 0x498], eax
cmp dword [ebp - 0x498], 3
jge 0x4a1969
mov eax, dword [ebp - 0x498]
mov dword [ebp + eax*4 - 0x25a4], 0xfebfb2c4
jmp 0x4a1940
mov eax, dword [ebp - 0x1c8]
cmp dword [ebp - 0x1050], eax
je 0x4a1983
mov dword [ebp - 0x93c], 1
jmp 0x4a198a
and dword [ebp - 0x93c], 0
mov eax, dword [ebp - 0x1c8]
add eax, dword [ebp - 0x93c]
cmp eax, dword [ebp - 0x1050]
je 0x4a19aa
mov dword [ebp - 0x944], 1
jmp 0x4a19b1
and dword [ebp - 0x944], 0
mov eax, dword [ebp - 0x1c8]
mov dword [ebp - 0x2320], eax
xor eax, eax
sub eax, 0x4a0d
cmp dword [ebp - 0x944], eax
jl 0x4a19d8
mov dword [ebp - 0xd04], 1
jmp 0x4a19df
and dword [ebp - 0xd04], 0
mov eax, dword [ebp - 0x1c8]
cmp dword [ebp - 0xd04], eax
jne 0x4a19f9
mov dword [ebp - 0x94c], 1
jmp 0x4a1a00
and dword [ebp - 0x94c], 0
mov eax, dword [ebp - 0x94c]
mov dword [ebp - 0x1c8], eax
push 0x225b
push 0x6840
push 0x445e
push 1
push 0x168a
push 0
push 0x13ad
push 0x529
push 0x4cce
push 0x74c
push 1
push 0x647d
lea eax, [ebp - 0x1678]
push eax
push 0
push 0x4e4d
push 0x5693
push 0x3807
push 1
push 0x3b32
call fcn.004937a2
add esp, 0x4c
mov dword [ebp - 0x324], 0
jmp 0x4a1a7f
mov eax, dword [ebp - 0x324]
dec eax
mov dword [ebp - 0x324], eax
cmp dword [ebp - 0x324], 0xffffffed
je 0x4a29d0
mov dword [ebp - 0x38], 6
push 1
lea ecx, [ebp - 0x10d4]
call fcn.00450d2f
mov dword [ebp - 0x1834], 0x4caa8e55
mov dword [ebp - 0x1eec], 0xffffffff
mov dword [ebp - 0x21bc], 9
mov dword [ebp - 0x1690], 0xbe92e3f9
mov dword [ebp - 0x1ef4], 6
mov dword [ebp - 0x1698], 0x3de467b4
mov dword [ebp - 0xd14], 0
mov dword [ebp - 0x11a4], 0xedb6b7be
mov dword [ebp - 0x225c], 0
mov dword [ebp - 0x6a0], 0
mov dword [ebp - 0x16a0], 0x870b1b9b
push 1
push 0x40e
push 0
push 0x383b
push 0x3995
push 0x3f38
push 1
lea eax, [ebp - 0x10d4]
push eax
push 0
lea eax, [ebp - 0x1efc]
push eax
push 0x6f25
call fcn.00478d8c
add esp, 0x2c
mov dword [ebp - 0x38], 0
jmp 0x4a1b55
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0xfffffff2
jne 0x4a1d1b
push 2
lea ecx, [ebp - 0x1b00]
call fcn.00450d2f
mov dword [ebp - 0x5b0], 0
jmp 0x4a1b85
mov eax, dword [ebp - 0x5b0]
inc eax
mov dword [ebp - 0x5b0], eax
cmp dword [ebp - 0x5b0], 2
jge 0x4a1ba4
push dword [ebp - 0x5b0]
lea ecx, [ebp - 0x1b00]
call fcn.00450e1d
and dword [eax], 0
jmp 0x4a1b78
push 0
push 0
push 0x66f3
push 1
push 0x444d
push 1
lea eax, [ebp - 0x1b00]
push eax
call fcn.00483183
add esp, 0x1c
mov dword [ebp - 0xee4], 0x431a
mov dword [ebp - 0x1680], str.zprauthfa_rls_ylsamq_huqdyicb_hrru_usjn_yemdvvar_rkoypalxi_nuyu
cmp dword [ebp - 0xee4], 0x4394
jle 0x4a1cc6
push 0
push 1
push 0xa3f
push 0
call dword [sym.imp.USER32.dll_SetMenuItemInfoW]
and dword [ebp - 0x32c], 0
jmp 0x4a1c10
mov eax, dword [ebp - 0x32c]
inc eax
mov dword [ebp - 0x32c], eax
cmp dword [ebp - 0x32c], 0x6a26
jge 0x4a1cc6
and dword [ebp - 0x4a0], 0
jmp 0x4a1c36
mov eax, dword [ebp - 0x4a0]
inc eax
mov dword [ebp - 0x4a0], eax
cmp dword [ebp - 0x4a0], 0x67f8
jge 0x4a1cc1
and dword [ebp - 0x334], 0
jmp 0x4a1c58
mov eax, dword [ebp - 0x334]
inc eax
mov dword [ebp - 0x334], eax
cmp dword [ebp - 0x334], 0x2ac7
jge 0x4a1cbc
mov eax, dword [ebp - 0x32c]
cdq
idiv dword [ebp - 0x4a0]
mov ecx, dword [ebp - 0x334]
sar edx, cl
mov eax, edx
cdq
mov dword [ebp - 0x12e4], eax
mov dword [ebp - 0x12e0], edx
push dword [ebp - 0x12e0]
push dword [ebp - 0x12e4]
lea ecx, [ebp - 0x2628]
call fcn.00401993
pop ecx
pop ecx
mov ecx, eax
call fcn.00450c0f
push eax
call fcn.004b40b7
pop ecx
lea ecx, [ebp - 0x2628]
call fcn.00450c05
jmp 0x4a1c4b
jmp 0x4a1c29
jmp 0x4a1c03
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0xee4], 0x3f36
jge 0x4a1ce5
push dword [ebp - 0x1680]
call fcn.004b40b7
pop ecx
jmp 0x4a1d01
or dword [ebp - 4], 0xffffffff
jmp 0x4a1d0b
lea ecx, [ebp - 0x1b00]
call fcn.00450e01
jmp 0x4a1b4e
mov dword [ebp - 0x38], 0
jmp 0x4a1d2b
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
jg 0x4a20bc
push 3
lea ecx, [ebp - 0x1728]
call fcn.00450d2f
mov dword [ebp - 0x21c4], 0xc9995890
mov dword [ebp - 0x1f04], 0x8939f5fa
mov dword [ebp - 0x22dc], 0xe6b6cd3
mov dword [ebp - 0x1f0c], 0
mov dword [ebp - 0x21cc], 0xfffffffa
mov dword [ebp - 0x1f14], 0xee56e31b
mov dword [ebp - 0x183c], 0xffffffff
mov dword [ebp - 0x181c], 1
mov dword [ebp - 0x1fa4], 0xffffffff
push 4
lea ecx, [ebp - 0x1b18]
call fcn.00450d2f
push 1
lea eax, [ebp - 0x1728]
push eax
push 0
push 0x6c11
push 1
push 0x1e7f
push 0
lea eax, [ebp - 0x1688]
push eax
call fcn.0047d077
add esp, 0x20
push 0x72bf
push 1
lea eax, [ebp - 0x1b18]
push eax
push 0x1dc9
push 0
push 0x2564
lea eax, [ebp - 0x1688]
push eax
push 0x10ff
push 1
call fcn.0048e6cb
add esp, 0x24
push 1
lea ecx, [ebp - 0x1728]
call fcn.00450e1d
and dword [eax], 0
jmp 0x4a1e37
push 1
lea ecx, [ebp - 0x1728]
call fcn.00450e1d
mov dword [ebp - 0x954], eax
mov eax, dword [ebp - 0x954]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x954]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x1728]
call fcn.00450e1d
cmp dword [eax], 0
jg 0x4a2057
mov dword [ebp - 0x1824], 0
mov dword [ebp - 0x558], 0
jmp 0x4a1e70
mov eax, dword [ebp - 0x558]
inc eax
mov dword [ebp - 0x558], eax
cmp dword [ebp - 0x558], 1
jge 0x4a1e8c
mov eax, dword [ebp - 0x558]
mov dword [ebp + eax*4 - 0x182c], 0xaa61fc2d
jmp 0x4a1e63
mov eax, dword [ebp - 0x1690]
cmp dword [ebp - 0x1698], eax
jne 0x4a1ea6
mov dword [ebp - 0x95c], 1
jmp 0x4a1ead
and dword [ebp - 0x95c], 0
push dword [ebp - 0x38]
lea ecx, [ebp - 0x10d4]
call fcn.00450e1d
mov ecx, dword [ebp - 0x16a0]
cmp dword [eax], ecx
jge 0x4a1ed8
push 9
pop eax
test eax, eax
je 0x4a1ed8
mov dword [ebp - 0x16a8], 1
jmp 0x4a1edf
and dword [ebp - 0x16a8], 0
push dword [ebp - 0x38]
lea ecx, [ebp - 0x10d4]
call fcn.00450e1d
cmp dword [ebp - 0xd14], 1
jg 0x4a1f02
mov dword [ebp - 0xd0c], 1
jmp 0x4a1f09
and dword [ebp - 0xd0c], 0
mov eax, dword [ebp - 0xd0c]
sub eax, dword [ebp - 0x181c]
cmp dword [ebp - 0x95c], eax
jne 0x4a1f29
mov dword [ebp - 0xfe8], 1
jmp 0x4a1f30
and dword [ebp - 0xfe8], 0
push dword [ebp - 0x38]
lea ecx, [ebp - 0x10d4]
call fcn.00450e1d
mov ecx, dword [ebp - 0xfe8]
add ecx, dword [eax]
jne 0x4a1f64
push dword [ebp - 0x38]
lea ecx, [ebp - 0x10d4]
call fcn.00450e1d
cmp dword [eax], 0
jne 0x4a1f64
and dword [ebp - 0x964], 0
jmp 0x4a1f6e
mov dword [ebp - 0x964], 1
mov eax, dword [ebp - 0x1824]
cmp dword [ebp - 0x964], eax
jne 0x4a1f88
mov dword [ebp - 0x96c], 1
jmp 0x4a1f8f
and dword [ebp - 0x96c], 0
mov eax, dword [ebp - 0xd14]
cmp dword [ebp - 0x96c], eax
je 0x4a1fa9
mov dword [ebp - 0xeec], 1
jmp 0x4a1fb0
and dword [ebp - 0xeec], 0
mov eax, dword [ebp - 0x6a0]
dec eax
mov dword [ebp - 0x6a0], eax
mov eax, dword [ebp - 0x6a0]
mov dword [ebp - 0x974], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x974]
mov dword [ebp + eax - 0x182c], ecx
mov esi, dword [ebp - 0x1834]
add esi, dword [ebp - 0xeec]
push 1
lea ecx, [ebp - 0x1b18]
call fcn.00450e1d
sub esi, dword [eax]
add esi, dword [ebp - 0x974]
push dword [ebp - 0x38]
lea ecx, [ebp - 0x10d4]
call fcn.00450e1d
cmp dword [eax], esi
jne 0x4a201b
mov dword [ebp - 0xd1c], 1
jmp 0x4a2022
and dword [ebp - 0xd1c], 0
mov eax, dword [ebp - 0xd1c]
add eax, 7
cmp eax, dword [ebp - 0x183c]
jle 0x4a203f
mov dword [ebp - 0x97c], 1
jmp 0x4a2046
and dword [ebp - 0x97c], 0
mov eax, dword [ebp - 0x97c]
mov dword [ebp - 0x11a4], eax
jmp 0x4a1e13
push 0x3fc
push 0x3ce5
push 0x386f
push 0x1029
push 0x73fc
push 0x5194
push 0x3c09
push 1
push 1
push 0
push 0xfd9
push 0x1c27
push 0xd54
push 0x6901
push 0x2d94
call fcn.004825fc
add esp, 0x3c
lea ecx, [ebp - 0x1b18]
call fcn.00450e01
lea ecx, [ebp - 0x1728]
call fcn.00450e01
jmp 0x4a1d24
lea ecx, [ebp - 0x10d4]
call fcn.00450e01
mov dword [ebp - 0x33c], 0xff82ff40
mov dword [ebp - 0x33c], 0
jmp 0x4a20ea
mov eax, dword [ebp - 0x33c]
inc eax
mov dword [ebp - 0x33c], eax
cmp dword [ebp - 0x33c], 2
jne 0x4a29cb
push 1
push 0
push 0
push 0x7856
push 1
call fcn.0047ce40
add esp, 0x14
push 1
lea ecx, [ebp - 0x1170]
call fcn.00450d2f
mov dword [ebp - 0x1218], 0xc7555b7c
push 0
push 0x43c3
push 1
push 0
lea eax, [ebp - 0x1f1c]
push eax
push 0x7662
lea eax, [ebp - 0x1170]
push eax
push 0x479a
call fcn.004773c1
add esp, 0x20
push 0
lea ecx, [ebp - 0x1170]
call fcn.00450e1d
and dword [eax], 0
jmp 0x4a2184
push 0
lea ecx, [ebp - 0x1170]
call fcn.00450e1d
mov dword [ebp - 0x1030], eax
mov eax, dword [ebp - 0x1030]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x1030]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x1170]
call fcn.00450e1d
cmp dword [eax], 0xffffffea
jg 0x4a222a
mov byte [ebp - 0x16a], 0
push 0x319a
push 0x6efa
push 1
push 1
push 0x4dd0
push 0x214e
push 1
lea eax, [ebp - 0x16a]
push eax
push 1
push 0
push 0x673c
push 0x35b9
push 1
push 0x4764
call fcn.004991d3
add esp, 0x38
push 0x6ec7
push 0x2b27
lea eax, [ebp - 0x1218]
push eax
push 0
push 0x5b6f
push 0x1c3d
push 1
push 0x5f2d
push 0x726a
push 0
lea eax, [ebp - 0x1170]
push eax
push 0x92d
push 0
push 0x4718
call fcn.00498511
add esp, 0x38
jmp 0x4a2160
lea ecx, [ebp - 0x1170]
call fcn.00450e01
mov byte [ebp - 0x144], 0
movzx eax, byte [ebp - 0x144]
test eax, eax
je 0x4a2599
mov dword [ebp - 0x984], 0x6e8d
mov dword [ebp - 0x1694], str.ugqeiy_knssg_txjx_txpjxyxe_smixsrgg_jqwqspeer_euiuusy_kytpmum_podfewk_dyqvmjxy_cqc_usgr
cmp dword [ebp - 0x984], 0x719b
jle 0x4a2324
and dword [ebp - 0x344], 0
jmp 0x4a2285
mov eax, dword [ebp - 0x344]
inc eax
mov dword [ebp - 0x344], eax
cmp dword [ebp - 0x344], 0x1d96
jge 0x4a2317
and dword [ebp - 0x4a8], 0
jmp 0x4a22ab
mov eax, dword [ebp - 0x4a8]
inc eax
mov dword [ebp - 0x4a8], eax
cmp dword [ebp - 0x4a8], 0x1293
jge 0x4a2312
and dword [ebp - 0x258], 0
jmp 0x4a22cd
mov eax, dword [ebp - 0x258]
inc eax
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 0x6f72
jge 0x4a2310
mov eax, dword [ebp - 0x4a8]
xor eax, dword [ebp - 0x258]
or eax, dword [ebp - 0x344]
cdq
mov dword [ebp - 0x12f0], eax
mov dword [ebp - 0x12ec], edx
push dword [ebp - 0x12ec]
push dword [ebp - 0x12f0]
mov ecx, 0xaca3b8
call fcn.00450c1a
jmp 0x4a22c0
jmp 0x4a229e
jmp 0x4a2278
push 1
push 0x2350
call dword [sym.imp.USER32.dll_EnableWindow]
mov dword [ebp - 0x4c], 0
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0x984], 0x6acb
jge 0x4a234e
mov edx, dword [ebp - 0x1694]
mov ecx, 0xaca3b8
call fcn.004525c0
jmp 0x4a236a
or dword [ebp - 4], 0xffffffff
jmp 0x4a2374
mov dword [ebp - 0x18c], 0xfa147b80
push 2
lea ecx, [ebp - 0x1b30]
call fcn.00450d2f
mov dword [ebp - 0x11ac], 1
lea eax, [ebp - 0x210]
push eax
push 1
push 0x24bd
push 1
lea eax, [ebp - 0x1b30]
push eax
push 0x5fc2
push 0
call fcn.00488400
add esp, 0x1c
mov dword [ebp - 0x210], 0
jmp 0x4a23d4
mov eax, dword [ebp - 0x210]
inc eax
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 2
jge 0x4a23f0
mov eax, dword [ebp - 0x210]
mov dword [ebp + eax*4 - 0x1ff8], 1
jmp 0x4a23c7
cmp dword [ebp - 0x4c], 0
je 0x4a2432
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x18c], eax
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0xd24], eax
push 1
lea ecx, [ebp - 0x1b30]
call fcn.00450e1d
mov ecx, dword [ebp - 0xd24]
mov dword [eax], ecx
cmp dword [ebp - 0xd24], 0
jne 0x4a2432
and dword [ebp - 0xef4], 0
jmp 0x4a243c
mov dword [ebp - 0xef4], 1
cmp dword [ebp - 0x4c], 0
je 0x4a248f
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x4c]
lea eax, [eax + ecx + 0x38390e03]
imul eax, eax, 0x4142
mov dword [ebp - 0x11ac], eax
push 0xfffffffffffffffe
pop eax
cmp eax, 0x2280643b
je 0x4a2471
mov dword [ebp - 0x98c], 1
jmp 0x4a2478
and dword [ebp - 0x98c], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x98c], eax
jle 0x4a248f
mov dword [ebp - 0x994], 1
jmp 0x4a2496
and dword [ebp - 0x994], 0
mov eax, dword [ebp - 0xef4]
cmp eax, dword [ebp - 0x994]
jge 0x4a24b0
mov dword [ebp - 0xd2c], 1
jmp 0x4a24b7
and dword [ebp - 0xd2c], 0
mov eax, dword [ebp - 0x4c]
add eax, dword [ebp - 0xd2c]
cmp eax, 2
jne 0x4a24d1
mov dword [ebp - 0x15a4], 1
jmp 0x4a24d8
and dword [ebp - 0x15a4], 0
cmp dword [ebp - 0x4c], 3
je 0x4a24ea
mov dword [ebp - 0x99c], 1
jmp 0x4a24f1
and dword [ebp - 0x99c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x99c]
mov dword [ebp + eax - 0x1ff8], ecx
mov dword [ebp - 0x18c], 0
jmp 0x4a251d
mov eax, dword [ebp - 0x18c]
dec eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0xffffffe5
jle 0x4a257c
mov dword [ebp - 0x4c], 0
jmp 0x4a2536
mov eax, dword [ebp - 0x4c]
dec eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0xfffffff1
jg 0x4a257a
mov byte [ebp - 0x15e], 0
push 0x6b51
push 1
push 1
push 1
push 0
push 0x7310
push 0x5552
push 0x3589
lea eax, [ebp - 0x15e]
push eax
push 0x291b
push 0x3f25
call fcn.00487f68
add esp, 0x2c
jmp 0x4a252f
jmp 0x4a2510
lea ecx, [ebp - 0x1b30]
call fcn.00450e01
push 0
push 0x1921
push 0x129d
call dword [sym.imp.USER32.dll_GetScrollInfo]
push 1
lea ecx, [ebp - 0x1b48]
call fcn.00450d2f
mov dword [ebp - 0x11b4], 0xb999fb0
mov dword [ebp - 0x5e0], 0
jmp 0x4a25c9
mov eax, dword [ebp - 0x5e0]
inc eax
mov dword [ebp - 0x5e0], eax
cmp dword [ebp - 0x5e0], 1
jge 0x4a25eb
push dword [ebp - 0x5e0]
lea ecx, [ebp - 0x1b48]
call fcn.00450e1d
mov dword [eax], 0xfb63
jmp 0x4a25bc
push 0x6683
push 0x5e40
push 0
push 0x655b
push 0x5fab
push 0
lea eax, [ebp - 0x1b48]
push eax
push 0x5975
lea eax, [ebp - 0x11b4]
push eax
push 0
call fcn.00499d21
add esp, 0x28
push 0
push 0
push 1
push 0x3b7
push 0x7cc9
push 1
push 1
push 0x7281
push 1
push 0x6d9c
push 0x4d7a
push 1
push 0x121d
call fcn.00493107
add esp, 0x34
lea ecx, [ebp - 0x1b48]
call fcn.00450e01
mov byte [ebp - 0x148], 0
mov dword [ebp - 0x350], 0
mov dword [ebp - 0x1a10], 0xfffffff9
mov dword [ebp - 0x1a0c], 0xfffffff9
mov dword [ebp - 0x1a08], 0xfffffff9
mov dword [ebp - 0x1a04], 0xfffffff9
lea ecx, [ebp - 0x705]
call fcn.00450e2c
push eax
lea eax, [ebp - 0x1a00]
push eax
lea eax, [ebp - 0x1a10]
push eax
lea ecx, [ebp - 0x23f0]
call fcn.00450e2f
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x10ec]
call fcn.00450ddb
mov dword [ebp - 0x100], 0x88586fd5
mov dword [ebp - 0xd3c], 2
mov eax, dword [ebp - 0x350]
cmp dword [ebp - 0x350], eax
jle 0x4a270a
push 2
lea ecx, [ebp - 0x10ec]
call fcn.00450e1d
cmp dword [eax], 0
jne 0x4a270a
and dword [ebp - 0xff0], 0
jmp 0x4a2714
mov dword [ebp - 0xff0], 1
push 3
lea ecx, [ebp - 0x10ec]
call fcn.00450e1d
mov ecx, dword [ebp - 0xff0]
cmp ecx, dword [eax]
jge 0x4a2737
mov dword [ebp - 0x9ac], 1
jmp 0x4a273e
and dword [ebp - 0x9ac], 0
push 2
lea ecx, [ebp - 0x10ec]
call fcn.00450e1d
cmp dword [eax], 0
jne 0x4a275d
push 2
lea ecx, [ebp - 0x10ec]
call fcn.00450e1d
mov eax, 0xa17d
cmp eax, 0xffffffff
jg 0x4a2773
mov dword [ebp - 0x9a4], 1
jmp 0x4a277a
and dword [ebp - 0x9a4], 0
mov eax, dword [ebp - 0x100]
cmp dword [ebp - 0x9a4], eax
jge 0x4a2794
mov dword [ebp - 0xd34], 1
jmp 0x4a279b
and dword [ebp - 0xd34], 0
mov eax, dword [ebp - 0xd3c]
cmp dword [ebp - 0xd34], eax
jl 0x4a27b5
mov dword [ebp - 0xefc], 1
jmp 0x4a27bc
and dword [ebp - 0xefc], 0
mov eax, dword [ebp - 0x9ac]
cmp eax, dword [ebp - 0xefc]
jg 0x4a27d6
mov dword [ebp - 0x9b4], 1
jmp 0x4a27dd
and dword [ebp - 0x9b4], 0
mov eax, dword [ebp - 0x9b4]
sub eax, dword [ebp - 0x100]
jne 0x4a27f9
xor eax, eax
inc eax
jne 0x4a27f9
and dword [ebp - 0x17f8], 0
jmp 0x4a2803
mov dword [ebp - 0x17f8], 1
mov eax, dword [ebp - 0xd3c]
mov dword [ebp - 0x1fa8], eax
push 2
lea ecx, [ebp - 0x10ec]
call fcn.00450e1d
mov ecx, dword [ebp - 0x350]
cmp dword [eax], ecx
jle 0x4a2887
mov byte [ebp - 0x146], 0
push 1
push 1
push 0x544d
push 1
lea eax, [ebp - 0x146]
push eax
push 1
call fcn.00480aa4
add esp, 0x18
push 0x17ad
push 0xba3
push 0
push 0x1076
push 0x2a37
push 0x6ff8
push 0x6154
push 0
push 1
push 1
push 0
push 0x79cb
push 1
push 0x6329
call fcn.00480eee
add esp, 0x38
jmp 0x4a28b1
mov byte [ebp - 0x174], 0
movzx eax, byte [ebp - 0x174]
test eax, eax
je 0x4a28b1
push 1
push 1
push 1
push 0x7a0e
push 0x443c
call fcn.00480c14
add esp, 0x14
mov dword [ebp - 0x100], 0xfffffff9
jmp 0x4a28ca
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0xfffffffd
jg 0x4a297d
mov dword [ebp - 0x15ac], 0x24f63abe
mov dword [ebp - 0x11bc], 0x5b01d976
push 1
lea ecx, [ebp - 0x1b60]
call fcn.00450d2f
lea eax, [ebp - 0x1b60]
push eax
push 0x79fc
push 0x6faf
push 1
push 1
lea eax, [ebp - 0x1f24]
push eax
push 0x41b2
push 0
push 0
call fcn.0048a13d
add esp, 0x24
push 0x3c7a
lea eax, [ebp - 0x11bc]
push eax
push 1
lea eax, [ebp - 0x350]
push eax
lea eax, [ebp - 0x15ac]
push eax
push 1
push 0x45e5
lea eax, [ebp - 0x1b60]
push eax
push 0x18
lea eax, [ebp - 0x10ec]
push eax
lea eax, [ebp - 0x100]
push eax
push 1
push 1
push 0
call fcn.0048de4f
add esp, 0x38
lea ecx, [ebp - 0x1b60]
call fcn.00450e01
jmp 0x4a28bd
lea ecx, [ebp - 0x10ec]
call fcn.00450e01
push 0x3cd7
push 0x5108
push 1
push 0x6421
push 0x53ca
lea eax, [ebp - 0x148]
push eax
push 0x522
push 1
push 1
push 1
push 1
push 0x35d6
push 1
push 0x6d5c
call fcn.00480eee
add esp, 0x38
jmp 0x4a20dd
jmp 0x4a1a72
jmp 0x4a14fa
mov dword [ebp - 0x40], 6
push 1
lea ecx, [ebp - 0x10b0]
call fcn.00450d2f
mov dword [ebp - 0x11e4], 0x4caa8e55
mov dword [ebp - 0x1fb0], 0xffffffff
mov dword [ebp - 0x1f2c], 9
mov dword [ebp - 0x169c], 0xbe92e3f9
mov dword [ebp - 0x1fb8], 6
mov dword [ebp - 0x11cc], 0x3de467b4
mov dword [ebp - 0x9d4], 0
mov dword [ebp - 0x11ec], 0xedb6b7be
mov dword [ebp - 0x1f34], 0
mov dword [ebp - 0x74c], 0
mov dword [ebp - 0x15b4], 0x870b1b9b
push 0x5b2f
push 1
lea eax, [ebp - 0x10b0]
push eax
push 0x14c9
push 0
lea eax, [ebp - 0x1fc0]
push eax
push 0x18b2
push 0x35de
push 0
call fcn.0047a0d0
add esp, 0x24
mov dword [ebp - 0x40], 0
jmp 0x4a2a97
mov eax, dword [ebp - 0x40]
dec eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0xfffffff2
jne 0x4a2b35
push 2
lea ecx, [ebp - 0x1be4]
call fcn.00450d2f
push 0x1dc8
push 0
push 0x7766
lea eax, [ebp - 0x1be4]
push eax
push 1
push 0x5d9
push 0x527c
lea eax, [ebp - 0x1f3c]
push eax
push 0x2dd7
push 0
push 0x13b4
push 0x5401
push 0x64fa
push 0x39a1
push 0x5100
push 0x57f7
call fcn.0049198e
add esp, 0x40
push 0
lea ecx, [ebp - 0x1be4]
call fcn.00450e1d
mov dword [ebp - 0x9bc], eax
mov eax, dword [ebp - 0x9bc]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x9bc]
mov dword [ecx], eax
lea ecx, [ebp - 0x1be4]
call fcn.00450e01
jmp 0x4a2a90
mov dword [ebp - 0x40], 0
jmp 0x4a2b45
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jg 0x4a2ed0
push 3
lea ecx, [ebp - 0x1738]
call fcn.00450d2f
mov dword [ebp - 0x1fc8], 0xc9995890
mov dword [ebp - 0x1f44], 0x8939f5fa
mov dword [ebp - 0x1fd0], 0xe6b6cd3
mov dword [ebp - 0x1f4c], 0
mov dword [ebp - 0x1fd8], 0xfffffffa
mov dword [ebp - 0x1f54], 0xee56e31b
mov dword [ebp - 0x16a4], 0xffffffff
mov dword [ebp - 0x177c], 1
mov dword [ebp - 0x1fe0], 0xffffffff
push 4
lea ecx, [ebp - 0x1bfc]
call fcn.00450d2f
push 0x28f2
push 1
push 0
push 0x6f9b
push 1
lea eax, [ebp - 0x11c4]
push eax
push 0x99c
push 1
push 1
lea eax, [ebp - 0x1738]
push eax
push 0x7214
push 1
call fcn.00486c5e
add esp, 0x30
push 0x7acf
push 0
push 0x7eac
push 1
push 0x2214
push 0x1866
push 0x232e
lea eax, [ebp - 0x1bfc]
push eax
push 0xe8d
push 0
push 0x4333
push 0x430c
push 0x7853
lea eax, [ebp - 0x11c4]
push eax
call fcn.00489671
add esp, 0x38
push 1
lea ecx, [ebp - 0x1738]
call fcn.00450e1d
and dword [eax], 0
jmp 0x4a2c78
push 1
lea ecx, [ebp - 0x1738]
call fcn.00450e1d
mov dword [ebp - 0x1084], eax
mov eax, dword [ebp - 0x1084]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x1084]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x1738]
call fcn.00450e1d
cmp dword [eax], 0
jg 0x4a2e98
mov dword [ebp - 0x11dc], 0
mov dword [ebp - 0x4b0], 0
jmp 0x4a2cb1
mov eax, dword [ebp - 0x4b0]
inc eax
mov dword [ebp - 0x4b0], eax
cmp dword [ebp - 0x4b0], 1
jge 0x4a2ccd
mov eax, dword [ebp - 0x4b0]
mov dword [ebp + eax*4 - 0x15bc], 0xaa61fc2d
jmp 0x4a2ca4
mov eax, dword [ebp - 0x169c]
cmp dword [ebp - 0x11cc], eax
jne 0x4a2ce7
mov dword [ebp - 0xd44], 1
jmp 0x4a2cee
and dword [ebp - 0xd44], 0
push dword [ebp - 0x40]
lea ecx, [ebp - 0x10b0]
call fcn.00450e1d
mov ecx, dword [ebp - 0x15b4]
cmp dword [eax], ecx
jge 0x4a2d19
push 9
pop eax
test eax, eax
je 0x4a2d19
mov dword [ebp - 0x11d4], 1
jmp 0x4a2d20
and dword [ebp - 0x11d4], 0
push dword [ebp - 0x40]
lea ecx, [ebp - 0x10b0]
call fcn.00450e1d
cmp dword [ebp - 0x9d4], 1
jg 0x4a2d43
mov dword [ebp - 0x9c4], 1
jmp 0x4a2d4a
and dword [ebp - 0x9c4], 0
mov eax, dword [ebp - 0x9c4]
sub eax, dword [ebp - 0x177c]
cmp dword [ebp - 0xd44], eax
jne 0x4a2d6a
mov dword [ebp - 0x9cc], 1
jmp 0x4a2d71
and dword [ebp - 0x9cc], 0
push dword [ebp - 0x40]
lea ecx, [ebp - 0x10b0]
call fcn.00450e1d
mov ecx, dword [ebp - 0x9cc]
add ecx, dword [eax]
jne 0x4a2da5
push dword [ebp - 0x40]
lea ecx, [ebp - 0x10b0]
call fcn.00450e1d
cmp dword [eax], 0
jne 0x4a2da5
and dword [ebp - 0xf04], 0
jmp 0x4a2daf
mov dword [ebp - 0xf04], 1
mov eax, dword [ebp - 0x11dc]
cmp dword [ebp - 0xf04], eax
jne 0x4a2dc9
mov dword [ebp - 0xd4c], 1
jmp 0x4a2dd0
and dword [ebp - 0xd4c], 0
mov eax, dword [ebp - 0x9d4]
cmp dword [ebp - 0xd4c], eax
je 0x4a2dea
mov dword [ebp - 0x9dc], 1
jmp 0x4a2df1
and dword [ebp - 0x9dc], 0
mov eax, dword [ebp - 0x74c]
dec eax
mov dword [ebp - 0x74c], eax
mov eax, dword [ebp - 0x74c]
mov dword [ebp - 0xff8], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xff8]
mov dword [ebp + eax - 0x15bc], ecx
mov esi, dword [ebp - 0x11e4]
add esi, dword [ebp - 0x9dc]
push 1
lea ecx, [ebp - 0x1bfc]
call fcn.00450e1d
sub esi, dword [eax]
add esi, dword [ebp - 0xff8]
push dword [ebp - 0x40]
lea ecx, [ebp - 0x10b0]
call fcn.00450e1d
cmp dword [eax], esi
jne 0x4a2e5c
mov dword [ebp - 0x9e4], 1
jmp 0x4a2e63
and dword [ebp - 0x9e4], 0
mov eax, dword [ebp - 0x9e4]
add eax, 7
cmp eax, dword [ebp - 0x16a4]
jle 0x4a2e80
mov dword [ebp - 0xd54], 1
jmp 0x4a2e87
and dword [ebp - 0xd54], 0
mov eax, dword [ebp - 0xd54]
mov dword [ebp - 0x11ec], eax
jmp 0x4a2c54
push 0x257c
push 0x63cf
push 1
push 0x3b55
push 1
push 1
call fcn.00481688
add esp, 0x18
lea ecx, [ebp - 0x1bfc]
call fcn.00450e01
lea ecx, [ebp - 0x1738]
call fcn.00450e01
jmp 0x4a2b3e
lea ecx, [ebp - 0x10b0]
call fcn.00450e01
mov dword [ebp - 0xe8], 0xffffffe8
jmp 0x4a2ef4
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0xfffffff4
jge 0x4a572c
mov dword [ebp - 0x568], 0x4f3d4e6
mov dword [ebp - 0x14], 0xa48bbca6
mov dword [ebp - 0x108], 0xffffffff
push 3
lea ecx, [ebp - 0x1748]
call fcn.00450d2f
push 0x4218
push 0x3a34
push 0
push 1
push 0x2913
push 1
lea eax, [ebp - 0x1fac]
push eax
lea eax, [ebp - 0x1748]
push eax
push 1
call fcn.0049b220
add esp, 0x24
mov dword [ebp - 0x14], 0
jmp 0x4a2f66
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0xf
jle 0x4a2f83
mov dword [ebp - 0x15c4], 0xdc4b
cmp dword [ebp - 0x15c4], 0
je 0x4a2f81
jmp 0x4a2f83
jmp 0x4a2f5f
cmp dword [ebp - 0x14], 0
jne 0x4a30a5
cmp dword [ebp - 0x14], 0
je 0x4a3017
cmp dword [ebp - 0x14], 0
jne 0x4a2fac
cmp dword [ebp - 0x14], 0
jne 0x4a2fac
and dword [ebp - 0x9ec], 0
jmp 0x4a2fb6
mov dword [ebp - 0x9ec], 1
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x9ec], eax
jl 0x4a2fcd
mov dword [ebp - 0xf0c], 1
jmp 0x4a2fd4
and dword [ebp - 0xf0c], 0
cmp dword [ebp - 0xf0c], 0
jl 0x4a2fe9
mov dword [ebp - 0x9f4], 1
jmp 0x4a2ff0
and dword [ebp - 0x9f4], 0
mov eax, dword [ebp - 0x9f4]
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0
jne 0x4a300e
cmp dword [ebp - 0x108], 0
je 0x4a3017
and dword [ebp - 0xd5c], 0
jmp 0x4a3021
mov dword [ebp - 0xd5c], 1
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0xd5c]
jge 0x4a3038
mov dword [ebp - 0x9fc], 1
jmp 0x4a303f
and dword [ebp - 0x9fc], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x9fc], eax
jne 0x4a3056
mov dword [ebp - 0x1038], 1
jmp 0x4a305d
and dword [ebp - 0x1038], 0
cmp dword [ebp - 0x1038], 0x30b91ee4
jne 0x4a307e
mov eax, 0xf15cc7c4
test eax, eax
je 0x4a307e
mov dword [ebp - 0xa04], 1
jmp 0x4a3085
and dword [ebp - 0xa04], 0
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0xa04]
cmp eax, dword [ebp - 0x14]
je 0x4a30a5
cmp dword [ebp - 0x108], 0
jne 0x4a30a5
and dword [ebp - 0x11f4], 0
jmp 0x4a30af
mov dword [ebp - 0x11f4], 1
mov eax, 0xcabe
sub eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x14]
cmp eax, 1
jl 0x4a30cb
mov dword [ebp - 0xd64], 1
jmp 0x4a30d2
and dword [ebp - 0xd64], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0xd64], eax
je 0x4a30e9
mov dword [ebp - 0x1828], 1
jmp 0x4a30f0
and dword [ebp - 0x1828], 0
push 0
lea ecx, [ebp - 0x1748]
call fcn.00450e1d
push 0
lea ecx, [ebp - 0x1748]
call fcn.00450e1d
cmp dword [eax], 0
jne 0x4a3121
cmp dword [ebp - 0x108], 0
jne 0x4a3121
and dword [ebp - 0xa0c], 0
jmp 0x4a312b
mov dword [ebp - 0xa0c], 1
mov eax, dword [ebp - 0xa0c]
sub eax, 0x2fa9ed9c
je 0x4a332c
mov dword [ebp - 0x6a8], 0xffff
mov dword [ebp - 0x16ac], 1
mov dword [ebp - 0x120c], 0xfafeceb2
mov dword [ebp - 0x1204], 0xfffd
mov dword [ebp - 0x15d4], 1
mov dword [ebp - 0x1214], 0xfffffffe
mov byte [ebp - 0x160], 0
push 1
push 0x700d
push 0x2652
push 0x3254
push 0x57d4
push 0x1584
push 1
lea eax, [ebp - 0x160]
push eax
push 1
push 0xd34
push 0
push 0x149f
push 1
push 0x50a3
call fcn.00494c4d
add esp, 0x38
mov eax, dword [ebp - 0x6a8]
mov dword [ebp - 0x21d4], eax
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0x1fb4], eax
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x6a8], eax
jg 0x4a31ef
mov dword [ebp - 0xf14], 1
jmp 0x4a31f6
and dword [ebp - 0xf14], 0
cmp dword [ebp - 0xf14], 0
jae 0x4a3265
mov dword [ebp - 0x11fc], 0xc3f1
push 0x370b
push 0x7659
push 0
push 0x5373
push 0x3d87
push 0x3733
push 0
push 0x1a0c
push 0x545e
push 0x1c9d
push 1
push 0x2edf
push 0
push 0xebb
lea eax, [ebp - 0x11fc]
push eax
push 1
push 1
push 0x72d5
push 0x61d2
call fcn.004908ee
add esp, 0x4c
jmp 0x4a332a
mov dword [ebp - 0x15cc], 0xc19c50ed
push 0x58de
push 0xa83
push 0x1065
push 1
push 0x384b
push 0x14b8
push 0x62a7
push 0x3c33
push 0x1911
push 0x6716
push 0xb3d
push 0x19a1
push 0xfd7
push 0
push 0x6aab
push 0x16a1
push 1
push 0
call fcn.004877db
add esp, 0x48
push 1
push 1
lea eax, [ebp - 0x15cc]
push eax
lea eax, [ebp - 0x108]
push eax
push 0x2521
lea eax, [ebp - 0x1204]
push eax
push 0x223
lea eax, [ebp - 0x6a8]
push eax
push 0x305e
lea eax, [ebp - 0x16ac]
push eax
lea eax, [ebp - 0x1748]
push eax
push 1
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x120c]
push eax
lea eax, [ebp - 0x15d4]
push eax
lea eax, [ebp - 0x1214]
push eax
push 0x39a8
call fcn.00481f21
add esp, 0x44
jmp 0x4a3372
mov dword [ebp - 0x178c], 0xfff9
mov dword [ebp - 0x121c], 0xadbe56f6
push 1
push 0x36c5
push 0x645
push 1
lea eax, [ebp - 0x178c]
push eax
push 0x18bb
lea eax, [ebp - 0x121c]
push eax
push 0
push 1
push 0x6ec3
call fcn.0047ed41
add esp, 0x28
lea ecx, [ebp - 0x1748]
call fcn.00450e01
mov dword [ebp - 0xdc], 0x5c68ec0a
mov dword [ebp - 0xa14], 0x518c
mov dword [ebp - 0x15dc], str.jausuhqwv_ectwrswog_crlfa_wkmaoeq_hfknkgqci_swiay_ktmnm_jdteofjaq_qgepzd_zva_xhwexehm
cmp dword [ebp - 0xa14], 0x51b1
jle 0x4a3487
call dword [sym.imp.KERNEL32.dll_SwitchToThread]
and dword [ebp - 0x358], 0
jmp 0x4a33c7
mov eax, dword [ebp - 0x358]
inc eax
mov dword [ebp - 0x358], eax
cmp dword [ebp - 0x358], 0x4703
jge 0x4a347c
and dword [ebp - 0x560], 0
jmp 0x4a33ed
mov eax, dword [ebp - 0x560]
inc eax
mov dword [ebp - 0x560], eax
cmp dword [ebp - 0x560], 0xa0d
jge 0x4a3477
and dword [ebp - 0x360], 0
jmp 0x4a340f
mov eax, dword [ebp - 0x360]
inc eax
mov dword [ebp - 0x360], eax
cmp dword [ebp - 0x360], 0x551e
jge 0x4a3472
mov eax, dword [ebp - 0x358]
mov ecx, dword [ebp - 0x560]
sar eax, cl
mov ecx, dword [ebp - 0x360]
sar eax, cl
cdq
mov dword [ebp - 0x12fc], eax
mov dword [ebp - 0x12f8], edx
push dword [ebp - 0x12f8]
push dword [ebp - 0x12fc]
lea ecx, [ebp - 0x252c]
call fcn.00401993
pop ecx
pop ecx
mov ecx, eax
call fcn.00450c0f
push eax
call fcn.004b40b7
pop ecx
lea ecx, [ebp - 0x252c]
call fcn.00450c05
jmp 0x4a3402
jmp 0x4a33e0
jmp 0x4a33ba
push 0x176b
call dword [sym.imp.USER32.dll_GetKeyboardType]
mov dword [ebp - 0x368], 0xfff7
mov dword [ebp - 4], 0x10
cmp dword [ebp - 0xa14], 0x4fc6
jge 0x4a34b0
push dword [ebp - 0x15dc]
call fcn.004b40b7
pop ecx
jmp 0x4a34cc
or dword [ebp - 4], 0xffffffff
jmp 0x4a34d6
mov dword [ebp - 0xe4], 2
mov dword [ebp - 0xc8], 0xffffffff
mov dword [ebp - 0x1058], 0x8ff7673e
mov dword [ebp - 0xdc], 0
jmp 0x4a350d
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 7
je 0x4a385a
mov dword [ebp - 0xa0], 0x3bc6
push 0x6bff
lea eax, [ebp - 0x368]
push eax
push 0
push 0x43c1
push 1
lea eax, [ebp - 0xdc]
push eax
push 0
push 0x1060
push 0x62aa
push 0x17cf
push 0x501f
lea eax, [ebp - 0xc8]
push eax
push 0x267f
push 0x7362
lea eax, [ebp - 0xe4]
push eax
push 1
lea eax, [ebp - 0xa0]
push eax
call fcn.00478a2e
add esp, 0x44
mov dword [ebp - 0xe4], 0
jmp 0x4a3598
mov eax, dword [ebp - 0xe4]
dec eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0xffffffe2
jl 0x4a3855
mov dword [ebp - 0x5b8], 0xdacd7d39
mov dword [ebp - 0x4b8], 0
jmp 0x4a35c8
mov eax, dword [ebp - 0x4b8]
inc eax
mov dword [ebp - 0x4b8], eax
cmp dword [ebp - 0x4b8], 2
jge 0x4a35e4
mov eax, dword [ebp - 0x4b8]
mov dword [ebp + eax*4 - 0x1984], 4
jmp 0x4a35bb
push 0x121f
push 0x6cb2
push 1
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0xc8]
push eax
push 0x1f0c
push 0x10d2
push 0x595f
push 0x5e7e
push 1
push 0x58cc
push 0x23d5
push 1
push 0
push 1
push 1
push 0x4a85
call fcn.0048615a
add esp, 0x44
push 4
pop eax
test eax, eax
je 0x4a383d
mov eax, dword [ebp - 0x368]
cmp dword [ebp - 0x5b8], eax
jle 0x4a3658
mov dword [ebp - 0xd7c], 1
jmp 0x4a365f
and dword [ebp - 0xd7c], 0
mov eax, dword [ebp - 0x368]
cmp dword [ebp - 0x5b8], eax
jg 0x4a3679
mov dword [ebp - 0xd6c], 1
jmp 0x4a3680
and dword [ebp - 0xd6c], 0
mov eax, dword [ebp - 0xa0]
cmp dword [ebp - 0xd6c], eax
jle 0x4a369a
mov dword [ebp - 0xa1c], 1
jmp 0x4a36a1
and dword [ebp - 0xa1c], 0
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0xa1c]
lea eax, [ecx + eax + 0xd68c]
cmp eax, dword [ebp - 0xa0]
jle 0x4a36d1
cmp dword [ebp - 0x1058], 0
je 0x4a36d1
mov dword [ebp - 0x1000], 1
jmp 0x4a36d8
and dword [ebp - 0x1000], 0
mov eax, dword [ebp - 0xdc]
cmp dword [ebp - 0x1000], eax
jle 0x4a36f2
mov dword [ebp - 0xa24], 1
jmp 0x4a36f9
and dword [ebp - 0xa24], 0
mov eax, dword [ebp - 0xdc]
cmp dword [ebp - 0xa24], eax
je 0x4a3713
mov dword [ebp - 0xd74], 1
jmp 0x4a371a
and dword [ebp - 0xd74], 0
mov eax, dword [ebp - 0x368]
cmp eax, dword [ebp - 0xd74]
jg 0x4a3744
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1984], 0
je 0x4a3744
mov dword [ebp - 0x1224], 1
jmp 0x4a374b
and dword [ebp - 0x1224], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1984]
mov dword [ebp - 0x2310], eax
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x1fbc], eax
cmp dword [ebp - 0xa0], 0
je 0x4a3788
cmp dword [ebp - 0xe4], 0
je 0x4a3788
mov dword [ebp - 0xa2c], 1
jmp 0x4a378f
and dword [ebp - 0xa2c], 0
cmp dword [ebp - 0xa2c], 0xfffffffa
jne 0x4a37a4
mov dword [ebp - 0xf1c], 1
jmp 0x4a37ab
and dword [ebp - 0xf1c], 0
mov eax, dword [ebp - 0xa0]
cmp dword [ebp - 0xf1c], eax
jl 0x4a37c5
mov dword [ebp - 0x16bc], 1
jmp 0x4a37cc
and dword [ebp - 0x16bc], 0
mov eax, dword [ebp - 0x5b8]
mov dword [ebp - 0x21dc], eax
mov eax, dword [ebp - 0xc8]
cmp dword [ebp - 0x5b8], eax
jg 0x4a37f2
mov dword [ebp - 0xa34], 1
jmp 0x4a37f9
and dword [ebp - 0xa34], 0
mov eax, dword [ebp - 0xa34]
sub eax, dword [ebp - 0xa0]
cmp eax, dword [ebp - 0xa0]
jl 0x4a3819
mov dword [ebp - 0xa3c], 1
jmp 0x4a3820
and dword [ebp - 0xa3c], 0
mov eax, dword [ebp - 0xd7c]
imul eax, dword [ebp - 0xa3c]
test eax, eax
je 0x4a383d
mov dword [ebp - 0x122c], 1
jmp 0x4a3844
and dword [ebp - 0x122c], 0
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0xc8], eax
jmp 0x4a358b
jmp 0x4a3500
mov dword [ebp - 0xc8], 0
jmp 0x4a3873
mov eax, dword [ebp - 0xc8]
dec eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0xfffffffc
jge 0x4a38f4
mov dword [ebp - 0x15e4], 0x2781
mov dword [ebp - 0x1234], 0
push 0x254b
lea eax, [ebp - 0x15e4]
push eax
push 1
lea eax, [ebp - 0xdc]
push eax
push 0x5ddb
push 0x7ba4
push 1
lea eax, [ebp - 0x1234]
push eax
push 0x52cd
push 0x216
push 0
push 0x4513
push 1
push 0x1b81
push 0x202e
push 1
push 1
lea eax, [ebp - 0xe4]
push eax
lea eax, [ebp - 0x1058]
push eax
call fcn.004908ee
add esp, 0x4c
jmp 0x4a3866
mov dword [ebp - 0x370], 0
jmp 0x4a390d
mov eax, dword [ebp - 0x370]
inc eax
mov dword [ebp - 0x370], eax
cmp dword [ebp - 0x370], 4
jge 0x4a3929
mov eax, dword [ebp - 0x370]
mov dword [ebp + eax*4 - 0x2458], 0x94d03572
jmp 0x4a3900
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x110], 0
mov dword [ebp - 0x754], 0
mov dword [ebp - 0x728], 0xfffffffd
mov dword [ebp - 0x15ec], 0x7a3ebef2
mov dword [ebp - 0x1008], 0
push 3
lea ecx, [ebp - 0x1c14]
call fcn.00450d2f
mov dword [ebp - 0x124c], 0xffffffff
mov dword [ebp - 0x28], 0
jmp 0x4a3989
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 1
jge 0x4a399f
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0xd8c], 1
jmp 0x4a3982
mov dword [ebp - 0x28], 0
jmp 0x4a39af
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jge 0x4a39c5
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0xf80], 6
jmp 0x4a39a8
push 0
push 1
push 1
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x1c14]
push eax
call fcn.00480c14
add esp, 0x14
mov dword [ebp - 0x28], 0
jmp 0x4a39ee
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jge 0x4a3a04
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x24a0], 0
jmp 0x4a39e7
mov dword [ebp - 0x2c], 0
jmp 0x4a3a14
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0xc
jne 0x4a3b9a
mov dword [ebp - 0x378], 0xf38d
mov dword [ebp - 0xd84], 0xe44142b9
mov dword [ebp - 0x4c0], 0
jmp 0x4a3a4b
mov eax, dword [ebp - 0x4c0]
inc eax
mov dword [ebp - 0x4c0], eax
cmp dword [ebp - 0x4c0], 3
jge 0x4a3a67
mov eax, dword [ebp - 0x4c0]
mov dword [ebp + eax*4 - 0x2074], 0xaee0cd97
jmp 0x4a3a3e
mov eax, dword [ebp - 0x378]
cmp dword [ebp - 0x2c], eax
jne 0x4a3a7e
mov dword [ebp - 0xa44], 1
jmp 0x4a3a85
and dword [ebp - 0xa44], 0
mov eax, dword [ebp - 0xa44]
mov dword [ebp - 0xd84], eax
mov eax, dword [ebp - 0x378]
sub eax, dword [ebp - 0xd84]
jne 0x4a3ab1
cmp dword [ebp - 0x110], 0
jne 0x4a3ab1
and dword [ebp - 0xa4c], 0
jmp 0x4a3abb
mov dword [ebp - 0xa4c], 1
mov eax, dword [ebp - 0x378]
cmp dword [ebp - 0xa4c], eax
jge 0x4a3ad5
mov dword [ebp - 0x720], 1
jmp 0x4a3adc
and dword [ebp - 0x720], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x720]
mov dword [ebp + eax - 0xd8c], ecx
cmp dword [ebp - 0x720], 0
je 0x4a3b09
or eax, 0xffffffff
je 0x4a3b09
mov dword [ebp - 0x1808], 1
jmp 0x4a3b10
and dword [ebp - 0x1808], 0
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x1fc4], eax
imul eax, dword [ebp - 0x110], 0xcf95
cmp eax, dword [ebp - 0x378]
jne 0x4a3b37
mov dword [ebp - 0x6b0], 1
jmp 0x4a3b3e
and dword [ebp - 0x6b0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x6b0]
mov dword [ebp + eax - 0x2074], ecx
imul eax, dword [ebp - 0x6b0], 0
test eax, eax
jne 0x4a3b75
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2074], 0
jne 0x4a3b75
and dword [ebp - 0x123c], 0
jmp 0x4a3b7f
mov dword [ebp - 0x123c], 1
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0x226c], eax
mov dword [ebp - 0x754], 0xb441791e
jmp 0x4a3a0d
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x1fcc], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xf80], 0
je 0x4a3c6d
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0x21e4], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x754], eax
mov eax, dword [ebp - 0x754]
imul eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x728]
je 0x4a3bea
mov dword [ebp - 0xf24], 1
jmp 0x4a3bf1
and dword [ebp - 0xf24], 0
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0xf24]
jg 0x4a3c08
mov dword [ebp - 0xa54], 1
jmp 0x4a3c0f
and dword [ebp - 0xa54], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xa54]
sub ecx, dword [ebp + eax - 0xf80]
cmp ecx, dword [ebp - 0x15ec]
jg 0x4a3c36
mov dword [ebp - 0x1244], 1
jmp 0x4a3c3d
and dword [ebp - 0x1244], 0
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0x1fd4], eax
mov eax, dword [ebp - 0x1008]
push 4
pop ecx
shl ecx, 0
add eax, dword [ebp + ecx - 0xf80]
cmp eax, 0xfffffffd
je 0x4a3c6d
mov dword [ebp - 0x6b8], 1
jmp 0x4a3c74
and dword [ebp - 0x6b8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x6b8]
mov dword [ebp + eax - 0xd8c], ecx
cmp dword [ebp - 0x6b8], 0xfffffff7
jle 0x4a3c9c
mov dword [ebp - 0xa5c], 1
jmp 0x4a3ca3
and dword [ebp - 0xa5c], 0
cmp dword [ebp - 0xa5c], 0
jbe 0x4a3cbe
cmp dword [ebp - 0x1008], 0
jne 0x4a3cbe
and dword [ebp - 0xa64], 0
jmp 0x4a3cc8
mov dword [ebp - 0xa64], 1
cmp dword [ebp - 0xa64], 0xffffffff
jb 0x4a3cdd
mov dword [ebp - 0xd94], 1
jmp 0x4a3ce4
and dword [ebp - 0xd94], 0
cmp dword [ebp - 0xd94], 0xce10
je 0x4a3cfc
mov dword [ebp - 0x16cc], 1
jmp 0x4a3d03
and dword [ebp - 0x16cc], 0
cmp dword [ebp - 0x2c], 0
jne 0x4a3d17
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xf80], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2c]
cmp dword [ebp + eax - 0xf80], ecx
je 0x4a3d30
cmp dword [ebp - 0x728], 0
cmp dword [ebp - 0x110], 0
jb 0x4a3d45
mov dword [ebp - 0xa6c], 1
jmp 0x4a3d4c
and dword [ebp - 0xa6c], 0
push 2
lea ecx, [ebp - 0x1c14]
call fcn.00450e1d
mov ecx, dword [ebp - 0xa6c]
cmp ecx, dword [eax]
jl 0x4a3d6f
mov dword [ebp - 0xf2c], 1
jmp 0x4a3d76
and dword [ebp - 0xf2c], 0
cmp dword [ebp - 0xf2c], 0xf82a
jg 0x4a3d8e
mov dword [ebp - 0xa74], 1
jmp 0x4a3d95
and dword [ebp - 0xa74], 0
mov eax, dword [ebp - 0xa74]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jbe 0x4a3db0
mov dword [ebp - 0xd9c], 1
jmp 0x4a3db7
and dword [ebp - 0xd9c], 0
mov eax, dword [ebp - 0x728]
add eax, dword [ebp - 0xd9c]
je 0x4a3dd8
push 9
pop eax
test eax, eax
je 0x4a3dd8
mov dword [ebp - 0xa7c], 1
jmp 0x4a3ddf
and dword [ebp - 0xa7c], 0
imul eax, dword [ebp - 0xa7c], 0x1f9d
cmp eax, dword [ebp - 0x110]
jle 0x4a3dfd
mov dword [ebp - 0x1040], 1
jmp 0x4a3e04
and dword [ebp - 0x1040], 0
mov eax, dword [ebp - 0x1040]
mov dword [ebp - 0x124c], eax
lea ecx, [ebp - 0x1c14]
call fcn.00450e01
mov dword [ebp - 0x568], 0xfffffffd
jmp 0x4a3e34
mov eax, dword [ebp - 0x568]
inc eax
mov dword [ebp - 0x568], eax
cmp dword [ebp - 0x568], 0x11
jg 0x4a4c21
push 0x53a4
push 0x304
push 0x74a3
push 0
push 0x7dd2
push 0x3c28
push 0x744a
push 0
push 1
push 0x6634
call fcn.00477f1d
add esp, 0x28
mov dword [ebp - 0x380], 0
jmp 0x4a3e8b
mov eax, dword [ebp - 0x380]
inc eax
mov dword [ebp - 0x380], eax
cmp dword [ebp - 0x380], 2
jge 0x4a3ea7
mov eax, dword [ebp - 0x380]
mov dword [ebp + eax*4 - 0x1114], 0x17059141
jmp 0x4a3e7e
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x1114], 4
jmp 0x4a3ed5
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1114]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x1114], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1114], 0xa
jg 0x4a4279
mov dword [ebp - 0x1464], 0x4b666a75
mov dword [ebp - 0x125c], 5
mov dword [ebp - 0x1264], 0xc3d6c1df
push 1
lea ecx, [ebp - 0x1c2c]
call fcn.00450d2f
mov dword [ebp - 0x1254], 0x8bbd188
mov dword [ebp - 0x1468], 6
mov dword [ebp - 0x15f4], 0xfffffffd
mov dword [ebp - 0x22f0], 7
push 0x16e2
push 1
push 0x6da8
push 0x2bcd
push 0x2b08
lea eax, [ebp - 0x1fdc]
push eax
push 0
lea eax, [ebp - 0x1c2c]
push eax
push 0x78
push 0x2792
push 1
push 1
call fcn.00495238
add esp, 0x30
push 0x580e
lea eax, [ebp - 0x15f4]
push eax
push 1
lea eax, [ebp - 0x1254]
push eax
lea eax, [ebp - 0x1c2c]
push eax
push 0
push 1
lea eax, [ebp - 0x1464]
push eax
lea eax, [ebp - 0x125c]
push eax
lea eax, [ebp - 0x1468]
push eax
lea eax, [ebp - 0x1264]
push eax
call fcn.00495bf9
add esp, 0x2c
lea ecx, [ebp - 0x1c2c]
call fcn.00450e01
mov dword [ebp - 0x1d0], 0xd303f024
mov dword [ebp - 0xda4], 0x3121
mov dword [ebp - 0x1478], str.sfskz_quvtkx_meu_zpcplu_sjqfcsq_ljbphmlpa_zdbmwgjgd_ncxtqvi_fpedg_pqkwt
cmp dword [ebp - 0xda4], 0x3208
jle 0x4a40bc
and dword [ebp - 0x4c8], 0
jmp 0x4a4008
mov eax, dword [ebp - 0x4c8]
inc eax
mov dword [ebp - 0x4c8], eax
cmp dword [ebp - 0x4c8], 0x7405
jge 0x4a40bc
and dword [ebp - 0x388], 0
jmp 0x4a402e
mov eax, dword [ebp - 0x388]
inc eax
mov dword [ebp - 0x388], eax
cmp dword [ebp - 0x388], 0x1bf8
jge 0x4a40b7
and dword [ebp - 0x5f8], 0
jmp 0x4a4050
mov eax, dword [ebp - 0x5f8]
inc eax
mov dword [ebp - 0x5f8], eax
cmp dword [ebp - 0x5f8], 0x6066
jge 0x4a40b2
mov eax, dword [ebp - 0x4c8]
cdq
idiv dword [ebp - 0x388]
add edx, dword [ebp - 0x5f8]
mov eax, edx
cdq
mov dword [ebp - 0x1308], eax
mov dword [ebp - 0x1304], edx
push dword [ebp - 0x1304]
push dword [ebp - 0x1308]
lea ecx, [ebp - 0x2550]
call fcn.00401993
pop ecx
pop ecx
mov ecx, eax
call fcn.00450c0f
push eax
call fcn.004b40b7
pop ecx
lea ecx, [ebp - 0x2550]
call fcn.00450c05
jmp 0x4a4043
jmp 0x4a4021
jmp 0x4a3ffb
mov dword [ebp - 0x1d0], 3
jmp 0x4a40d5
mov eax, dword [ebp - 0x1d0]
dec eax
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 0
jl 0x4a422f
mov dword [ebp - 0x58], 0x730f94f3
mov dword [ebp - 0x390], 0
jmp 0x4a4102
mov eax, dword [ebp - 0x390]
inc eax
mov dword [ebp - 0x390], eax
cmp dword [ebp - 0x390], 3
jge 0x4a411e
mov eax, dword [ebp - 0x390]
mov dword [ebp + eax*4 - 0x114c], 0xec2e0cf5
jmp 0x4a40f5
push 0x28d6
push 1
push 1
push 0xe75
push 1
push 1
push 0x20ee
call fcn.00482a47
add esp, 0x1c
mov dword [ebp - 0x58], 2
jmp 0x4a414d
mov eax, dword [ebp - 0x58]
dec eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0
jl 0x4a4219
mov dword [ebp - 0x126c], 0x859b
mov eax, dword [ebp - 0x58]
cmp dword [ebp + eax*4 - 0x114c], 0
je 0x4a4173
jmp 0x4a4219
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp + eax*4 - 0x114c]
mov dword [ebp - 0x21ec], eax
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp + eax*4 - 0x114c]
mov dword [ebp - 0x1fe4], eax
mov eax, dword [ebp - 0x58]
add eax, 9
cmp eax, 1
jg 0x4a41aa
mov dword [ebp - 0x1470], 1
jmp 0x4a41b1
and dword [ebp - 0x1470], 0
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp + eax*4 - 0x114c]
mov dword [ebp - 0x2274], eax
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x1ff0], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x114c], 0x75d5f8d9
jl 0x4a41e8
mov dword [ebp - 0xa84], 1
jmp 0x4a41ef
and dword [ebp - 0xa84], 0
cmp dword [ebp - 0xa84], 8
jle 0x4a41fc
xor eax, eax
jne 0x4a420a
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x114c], 0
imul eax, dword [ebp - 0x58], 0
mov dword [ebp - 0x126c], eax
jmp 0x4a4146
mov eax, dword [ebp - 0x1d0]
mov dword [ebp + eax*4 - 0x2458], 0
jmp 0x4a40c8
mov dword [ebp - 4], 0x12
cmp dword [ebp - 0xda4], 0x304e
jge 0x4a424e
push dword [ebp - 0x1478]
call fcn.004b40b7
pop ecx
jmp 0x4a426a
or dword [ebp - 4], 0xffffffff
jmp 0x4a4274
jmp 0x4a3eba
push 0x30f6
push 0x17c8
push 1
push 1
push 1
push 0xaf0
push 0
call fcn.0048a5ce
add esp, 0x1c
mov byte [ebp - 0x14a], 0
mov dword [ebp - 0x1d8], 0x3ae35568
mov dword [ebp - 0x1d8], 0
jmp 0x4a42c2
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 0x1a
jg 0x4a4665
mov dword [ebp - 0x250], 0
mov dword [ebp - 0xa8c], 0x209d
mov dword [ebp - 0x1274], str.hdkngajg_awztmjfec_bxvggkjd_ckh_ahdltbx_mhielisw_zfndifo
cmp dword [ebp - 0xa8c], 0x2455
jle 0x4a43fb
and dword [ebp - 0x570], 0
jmp 0x4a4313
mov eax, dword [ebp - 0x570]
inc eax
mov dword [ebp - 0x570], eax
cmp dword [ebp - 0x570], 0x302
jge 0x4a43fb
and dword [ebp - 0x4d0], 0
jmp 0x4a4339
mov eax, dword [ebp - 0x4d0]
inc eax
mov dword [ebp - 0x4d0], eax
cmp dword [ebp - 0x4d0], 0x697e
jge 0x4a43f6
and dword [ebp - 0x398], 0
jmp 0x4a435f
mov eax, dword [ebp - 0x398]
inc eax
mov dword [ebp - 0x398], eax
cmp dword [ebp - 0x398], 0x24df
jge 0x4a43f1
and dword [ebp - 0x3a0], 0
jmp 0x4a4385
mov eax, dword [ebp - 0x3a0]
inc eax
mov dword [ebp - 0x3a0], eax
cmp dword [ebp - 0x3a0], 0x41f2
jge 0x4a43ec
mov ecx, dword [ebp - 0x4d0]
add ecx, dword [ebp - 0x398]
mov eax, dword [ebp - 0x570]
sar eax, cl
xor eax, dword [ebp - 0x3a0]
cdq
mov dword [ebp - 0x1314], eax
mov dword [ebp - 0x1310], edx
push dword [ebp - 0x1310]
push dword [ebp - 0x1314]
lea ecx, [ebp - 0x2574]
call fcn.00401993
pop ecx
pop ecx
mov ecx, eax
call fcn.00450c0f
push eax
call fcn.004b40b7
pop ecx
lea ecx, [ebp - 0x2574]
call fcn.00450c05
jmp 0x4a4378
jmp 0x4a4352
jmp 0x4a432c
jmp 0x4a4306
mov dword [ebp - 0x4d8], 0
jmp 0x4a4414
mov eax, dword [ebp - 0x4d8]
inc eax
mov dword [ebp - 0x4d8], eax
cmp dword [ebp - 0x4d8], 2
jge 0x4a4430
mov eax, dword [ebp - 0x4d8]
mov dword [ebp + eax*4 - 0x195c], 0
jmp 0x4a4407
mov dword [ebp - 4], 0x14
cmp dword [ebp - 0xa8c], 0x1e0d
jge 0x4a444f
push dword [ebp - 0x1274]
call fcn.004b40b7
pop ecx
jmp 0x4a446b
or dword [ebp - 4], 0xffffffff
jmp 0x4a4475
mov dword [ebp - 0x250], 1
jmp 0x4a448e
mov eax, dword [ebp - 0x250]
dec eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0
jl 0x4a4652
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0x1480], 0xffffffff
mov dword [ebp - 0xa8], 1
jmp 0x4a44c8
mov eax, dword [ebp - 0xa8]
dec eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0
jl 0x4a45b4
push 3
lea ecx, [ebp - 0x1758]
call fcn.00450d2f
push 0x41e0
push 0x5321
push 0
push 1
push 1
push 1
lea eax, [ebp - 0x21f4]
push eax
push 0x7a86
push 0x7742
push 1
push 0x386a
lea eax, [ebp - 0x1758]
push eax
call fcn.0049b76d
add esp, 0x30
push 0
lea ecx, [ebp - 0x1758]
call fcn.00450e1d
and dword [eax], 0
jmp 0x4a4551
push 0
lea ecx, [ebp - 0x1758]
call fcn.00450e1d
mov dword [ebp - 0xf34], eax
mov eax, dword [ebp - 0xf34]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xf34]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x1758]
call fcn.00450e1d
cmp dword [eax], 1
jg 0x4a45a4
push 0x1a9a
push 1
push 0x4d0e
push 1
push 0x4e3b
push 0x357e
push 0x774c
push 1
push 1
push 0x3b0b
push 0x68f2
push 0x47d4
push 0x3f2a
push 0
call fcn.0048d918
add esp, 0x38
jmp 0x4a452d
lea ecx, [ebp - 0x1758]
call fcn.00450e01
jmp 0x4a44bb
mov dword [ebp - 0xa8], 0
jmp 0x4a45cd
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 1
jg 0x4a464d
mov dword [ebp - 0x127c], 0xfffffffd
mov eax, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0x250]
mov eax, dword [ebp + eax*4 - 0x195c]
mov dword [ebp + ecx*4 - 0x195c], eax
push 0x4529
push 1
push 0x3e19
push 0xf36
push 0
push 0
push 0x5e10
push 0x18da
lea eax, [ebp - 0x1480]
push eax
push 0x3416
push 0x59f0
lea eax, [ebp - 0x127c]
push eax
push 0x559a
push 0x3a28
push 0x5d19
call fcn.0049814a
add esp, 0x3c
jmp 0x4a45c0
jmp 0x4a4481
cmp dword [ebp - 0x1d8], 0
je 0x4a4660
jmp 0x4a42b5
jmp 0x4a42b5
movzx eax, byte [ebp - 0x14a]
test eax, eax
je 0x4a4c1c
mov dword [ebp - 0x19e8], 0xfffffffb
mov dword [ebp - 0x19e4], 0xfffffffb
mov dword [ebp - 0x19e0], 0xfffffffb
mov dword [ebp - 0x19dc], 0xfffffffb
lea ecx, [ebp - 0x659]
call fcn.00450e2c
push eax
lea eax, [ebp - 0x19d8]
push eax
lea eax, [ebp - 0x19e8]
push eax
lea ecx, [ebp - 0x23f8]
call fcn.00450e2f
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x7ac]
call fcn.00450ddb
mov dword [ebp - 0xdb4], 0xffffffff
mov dword [ebp - 0x1488], 0xffffffff
mov dword [ebp - 0x1284], 0xffff
mov dword [ebp - 0xc0], 0
jmp 0x4a4708
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 3
jge 0x4a4724
mov eax, dword [ebp - 0xc0]
mov dword [ebp + eax*4 - 0x2370], 0xeac8b13e
jmp 0x4a46fb
mov dword [ebp - 0xc0], 0
jmp 0x4a473d
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 2
jge 0x4a4759
mov eax, dword [ebp - 0xc0]
mov dword [ebp + eax*4 - 0x197c], 0x57736d0c
jmp 0x4a4730
push 1
lea ecx, [ebp - 0x7ac]
call fcn.00450e1d
and dword [eax], 0
jmp 0x4a478f
push 1
lea ecx, [ebp - 0x7ac]
call fcn.00450e1d
cmp dword [eax], 2
jg 0x4a4c09
push 1
lea ecx, [ebp - 0x7c4]
call fcn.00450d2f
push 3
lea ecx, [ebp - 0x1c44]
call fcn.00450d2f
mov dword [ebp - 0x218], 0
jmp 0x4a47d8
mov eax, dword [ebp - 0x218]
inc eax
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 1
jge 0x4a47fa
push dword [ebp - 0x218]
lea ecx, [ebp - 0x7c4]
call fcn.00450e1d
mov dword [eax], 0xc9ca3191
jmp 0x4a47cb
push 1
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x1c44]
push eax
push 0
push 1
call fcn.00482f0b
add esp, 0x14
mov byte [ebp - 0x150], 0
push 1
push 0x674d
lea eax, [ebp - 0x150]
push eax
push 0
push 1
push 0x365c
push 0x51f7
push 1
call fcn.0048ea70
add esp, 0x20
cmp dword [ebp - 0xdb4], 0
je 0x4a49c2
cmp dword [ebp - 0x1488], 0
je 0x4a4877
push 1
lea ecx, [ebp - 0x7ac]
call fcn.00450e1d
cmp dword [eax], 0
je 0x4a4877
mov dword [ebp - 0xdac], 1
jmp 0x4a487e
and dword [ebp - 0xdac], 0
push 0
lea ecx, [ebp - 0x7c4]
call fcn.00450e1d
mov ecx, dword [ebp - 0xdac]
cmp ecx, dword [eax]
jne 0x4a48a1
mov dword [ebp - 0xa9c], 1
jmp 0x4a48a8
and dword [ebp - 0xa9c], 0
push 1
lea ecx, [ebp - 0x7ac]
call fcn.00450e1d
mov eax, dword [eax]
cmp eax, dword [ebp - 0xa9c]
je 0x4a48cb
mov dword [ebp - 0x1010], 1
jmp 0x4a48d2
and dword [ebp - 0x1010], 0
push 1
lea ecx, [ebp - 0x7ac]
call fcn.00450e1d
mov eax, dword [eax]
lea eax, [ebp + eax*4 - 0x2370]
mov dword [ebp - 0xaa4], eax
push 1
lea ecx, [ebp - 0x7ac]
call fcn.00450e1d
mov ecx, dword [ebp - 0xaa4]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x1010]
dec eax
mov ecx, dword [ebp - 0xaa4]
cmp dword [ecx], eax
jl 0x4a4923
push 0
lea ecx, [ebp - 0x7c4]
call fcn.00450e1d
cmp dword [ebp - 0xdb4], 0
jne 0x4a493e
mov eax, 0x2af
test eax, eax
jne 0x4a493e
and dword [ebp - 0xaac], 0
jmp 0x4a4948
mov dword [ebp - 0xaac], 1
cmp dword [ebp - 0xaac], 0
je 0x4a495d
mov dword [ebp - 0x6c0], 1
jmp 0x4a4964
and dword [ebp - 0x6c0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x6c0]
mov dword [ebp + eax - 0x197c], ecx
push 0
lea ecx, [ebp - 0x7c4]
call fcn.00450e1d
mov esi, dword [ebp - 0x6c0]
imul esi, dword [eax]
push 0
lea ecx, [ebp - 0x7c4]
call fcn.00450e1d
cmp esi, dword [eax]
jg 0x4a49c2
push 0x2646
push 0
push 1
push 0x437b
push 1
push 1
push 0x55d2
call fcn.00482a47
add esp, 0x1c
jmp 0x4a4bee
mov dword [ebp - 0x6c8], 0
mov dword [ebp - 0x3a8], 0
jmp 0x4a49e5
mov eax, dword [ebp - 0x3a8]
inc eax
mov dword [ebp - 0x3a8], eax
cmp dword [ebp - 0x3a8], 2
jge 0x4a4a01
mov eax, dword [ebp - 0x3a8]
mov dword [ebp + eax*4 - 0x1f78], 0xf51b4373
jmp 0x4a49d8
mov esi, dword [ebp - 0x6c8]
push 0
lea ecx, [ebp - 0x7ac]
call fcn.00450e1d
cmp esi, dword [eax]
jg 0x4a4a24
mov dword [ebp - 0xf3c], 1
jmp 0x4a4a2b
and dword [ebp - 0xf3c], 0
cmp dword [ebp - 0xf3c], 0x514f
je 0x4a4a43
mov dword [ebp - 0xfb0], 1
jmp 0x4a4a4a
and dword [ebp - 0xfb0], 0
push 0
lea ecx, [ebp - 0x7c4]
call fcn.00450e1d
cmp dword [eax], 0
jne 0x4a4b38
push 4
pop eax
imul eax, eax, 0
mov esi, dword [ebp + eax - 0x197c]
push 0
lea ecx, [ebp - 0x7c4]
call fcn.00450e1d
cmp esi, dword [eax]
jge 0x4a4a9d
xor eax, eax
jne 0x4a4a9d
push 0
lea ecx, [ebp - 0x7c4]
call fcn.00450e1d
cmp dword [eax], 0
jne 0x4a4a9d
and dword [ebp - 0xab4], 0
jmp 0x4a4aa7
mov dword [ebp - 0xab4], 1
push 1
lea ecx, [ebp - 0x7ac]
call fcn.00450e1d
mov ecx, dword [ebp - 0xab4]
cmp ecx, dword [eax]
jl 0x4a4aca
mov dword [ebp - 0xdbc], 1
jmp 0x4a4ad1
and dword [ebp - 0xdbc], 0
cmp dword [ebp - 0xdbc], 0xf0aeacb2
jb 0x4a4ae9
mov dword [ebp - 0xabc], 1
jmp 0x4a4af0
and dword [ebp - 0xabc], 0
mov eax, dword [ebp - 0x1284]
cmp dword [ebp - 0xabc], eax
jl 0x4a4b0a
mov dword [ebp - 0xac4], 1
mov eax, dword [ebp - 0xfb0]
imul eax, dword [ebp - 0xac4]
cmp eax, 7
ja 0x4a4b60
mov dword [ebp - 0xdc4], 1
jmp 0x4a4b67
and dword [ebp - 0xdc4], 0
cmp dword [ebp - 0xdc4], 0x5ee87909
jg 0x4a4b7f
mov dword [ebp - 0xacc], 1
jmp 0x4a4b86
and dword [ebp - 0xacc], 0
mov eax, dword [ebp - 0xacc]
mov dword [ebp - 0x6c8], eax
mov esi, dword [ebp - 0x6c8]
push 1
lea ecx, [ebp - 0x1c44]
call fcn.00450e1d
cmp esi, dword [eax]
jge 0x4a4bb5
mov dword [ebp - 0xf44], 1
jmp 0x4a4bbc
and dword [ebp - 0xf44], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xf44]
mov dword [ebp + eax - 0x1f78], ecx
push 1
push 1
push 0x3802
push 1
push 0x6b9d
push 1
push 0x414b
call fcn.00483183
add esp, 0x1c
lea ecx, [ebp - 0x1c44]
call fcn.00450e01
lea ecx, [ebp - 0x7c4]
call fcn.00450e01
jmp 0x4a476b
lea ecx, [ebp - 0x7ac]
call fcn.00450e01
push 0
call dword [sym.imp.KERNEL32.dll_GetThreadPriority]
jmp 0x4a3e27
mov dword [ebp - 0x88], 0xfffffff6
mov dword [ebp - 0x1ffc], 0x5da2a0c0
mov dword [ebp - 0x5c0], 0
jmp 0x4a4c4e
mov eax, dword [ebp - 0x5c0]
inc eax
mov dword [ebp - 0x5c0], eax
cmp dword [ebp - 0x5c0], 3
jge 0x4a4c6a
mov eax, dword [ebp - 0x5c0]
mov dword [ebp + eax*4 - 0x2388], 0xec2e0cf5
jmp 0x4a4c41
mov dword [ebp - 0x88], 0
jmp 0x4a4c83
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 2
jg 0x4a4ca0
mov eax, dword [ebp - 0x88]
cmp dword [ebp + eax*4 - 0x2388], 0
je 0x4a4c9e
jmp 0x4a4ca0
jmp 0x4a4c76
mov dword [ebp - 0x88], 0
jmp 0x4a4cb9
mov eax, dword [ebp - 0x88]
dec eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0xfffffff5
jne 0x4a4f3a
mov dword [ebp - 0x578], 9
mov dword [ebp - 0x2330], 0xd416db6d
mov dword [ebp - 0xad4], 0x4bda
mov dword [ebp - 0x1460], str.aqkl_lkziio_ijjkj_bamsd_gmzbqmt_czslat_ckhp_uky_aslac_vsnkpqrqa_wpiovgrka
cmp dword [ebp - 0xad4], 0x4f2c
jle 0x4a4daa
and dword [ebp - 0x3b0], 0
jmp 0x4a4d14
mov eax, dword [ebp - 0x3b0]
inc eax
mov dword [ebp - 0x3b0], eax
cmp dword [ebp - 0x3b0], 0x7f48
jge 0x4a4daa
and dword [ebp - 0x4e0], 0
jmp 0x4a4d3a
mov eax, dword [ebp - 0x4e0]
inc eax
mov dword [ebp - 0x4e0], eax
cmp dword [ebp - 0x4e0], 0x5ff2
jge 0x4a4da5
and dword [ebp - 0x3b8], 0
jmp 0x4a4d5c
mov eax, dword [ebp - 0x3b8]
inc eax
mov dword [ebp - 0x3b8], eax
cmp dword [ebp - 0x3b8], 0x58d7
jge 0x4a4da3
mov eax, dword [ebp - 0x3b0]
imul eax, dword [ebp - 0x4e0]
cdq
idiv dword [ebp - 0x3b8]
mov eax, edx
cdq
mov dword [ebp - 0x1320], eax
mov dword [ebp - 0x131c], edx
push dword [ebp - 0x131c]
push dword [ebp - 0x1320]
mov ecx, 0xaca3b8
call fcn.00450c1a
jmp 0x4a4d4f
jmp 0x4a4d2d
jmp 0x4a4d07
mov dword [ebp - 4], 0x16
cmp dword [ebp - 0xad4], 0x4829
jge 0x4a4dcd
mov edx, dword [ebp - 0x1460]
mov ecx, 0xaca3b8
call fcn.004525c0
jmp 0x4a4de9
or dword [ebp - 4], 0xffffffff
jmp 0x4a4df3
push 4
lea ecx, [ebp - 0x1c5c]
call fcn.00450d2f
mov dword [ebp - 0x2008], 0xffffffff
mov dword [ebp - 0x1e0], 0
jmp 0x4a4e23
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 3
jge 0x4a4e3f
mov eax, dword [ebp - 0x1e0]
mov dword [ebp + eax*4 - 0x2670], 0xffffffff
jmp 0x4a4e16
push 0x3155
lea eax, [ebp - 0x1e0]
push eax
push 0
lea eax, [ebp - 0x1c5c]
push eax
push 0x12b3
push 0x68e0
push 0x484d
push 1
push 1
push 0x4981
push 1
call fcn.0049584f
add esp, 0x2c
mov dword [ebp - 0x578], 0
jmp 0x4a4e8f
mov eax, dword [ebp - 0x578]
inc eax
mov dword [ebp - 0x578], eax
cmp dword [ebp - 0x578], 0xa
jge 0x4a4f2a
mov dword [ebp - 0x21fc], 0x5af8b513
mov dword [ebp - 0x128c], 0
mov dword [ebp - 0x3c0], 0
jmp 0x4a4ec9
mov eax, dword [ebp - 0x3c0]
inc eax
mov dword [ebp - 0x3c0], eax
cmp dword [ebp - 0x3c0], 3
jge 0x4a4ee5
mov eax, dword [ebp - 0x3c0]
mov dword [ebp + eax*4 - 0x25c8], 0
jmp 0x4a4ebc
push 0
push 0x5813
push 0
push 1
push 0x4032
lea eax, [ebp - 0x1c5c]
push eax
push 1
push 0x53c3
call fcn.00497992
add esp, 0x20
push 1
lea eax, [ebp - 0x128c]
push eax
push 0
push 1
push 0x6514
call fcn.0049a2c9
add esp, 0x14
jmp 0x4a4e82
lea ecx, [ebp - 0x1c5c]
call fcn.00450e01
jmp 0x4a4cac
mov byte [ebp - 0x16c], 0
push 4
lea ecx, [ebp - 0x1080]
call fcn.00450d2f
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x734], 0x197e7c14
mov dword [ebp - 0x3c8], 0x39e6
mov dword [ebp - 0x4e8], 0xa7967268
mov dword [ebp - 0xddc], 0xffffffff
push 2
lea ecx, [ebp - 0x18a8]
call fcn.00450d2f
mov dword [ebp - 0x14a0], 0x7797
mov dword [ebp - 0x30], 0
jmp 0x4a4fa4
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 4
jge 0x4a4fc0
push dword [ebp - 0x30]
lea ecx, [ebp - 0x1080]
call fcn.00450e1d
mov dword [eax], 0x6c05baf4
jmp 0x4a4f9d
mov dword [ebp - 0x30], 0
jmp 0x4a4fd0
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 2
jge 0x4a4fec
push dword [ebp - 0x30]
lea ecx, [ebp - 0x18a8]
call fcn.00450e1d
mov dword [eax], 0x1fa46b4c
jmp 0x4a4fc9
mov dword [ebp - 0x30], 0
jmp 0x4a4ffc
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jge 0x4a5012
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x1c74], 0xfffffff7
jmp 0x4a4ff5
mov dword [ebp - 0x18], 0
jmp 0x4a5022
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jg 0x4a51cd
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1080]
call fcn.00450e1d
cmp dword [ebp - 0x18], 0
je 0x4a5051
xor eax, eax
inc eax
je 0x4a5051
mov dword [ebp - 0xdcc], 1
jmp 0x4a5058
and dword [ebp - 0xdcc], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0xdcc], eax
jle 0x4a506f
mov dword [ebp - 0x1498], 1
jmp 0x4a5076
and dword [ebp - 0x1498], 0
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1080]
call fcn.00450e1d
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1080]
call fcn.00450e1d
cmp dword [eax], 0xa9bca7b5
jae 0x4a50a6
mov dword [ebp - 0xadc], 1
jmp 0x4a50ad
and dword [ebp - 0xadc], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0xadc], eax
je 0x4a50c4
mov dword [ebp - 0xfb4], 1
jmp 0x4a50cb
and dword [ebp - 0xfb4], 0
mov eax, dword [ebp - 0xfb4]
sub eax, dword [ebp - 0x734]
jne 0x4a50eb
mov eax, 0x1fa4c821
test eax, eax
jne 0x4a50eb
and dword [ebp - 0x1294], 0
jmp 0x4a50f5
mov dword [ebp - 0x1294], 1
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1080]
call fcn.00450e1d
mov ecx, dword [ebp - 0x734]
shl ecx, 2
cmp dword [eax], ecx
jg 0x4a511c
mov dword [ebp - 0xae4], 1
jmp 0x4a5123
and dword [ebp - 0xae4], 0
mov eax, dword [ebp - 0x3c8]
add eax, dword [ebp - 0xae4]
cmp eax, dword [ebp - 0x18]
jl 0x4a5140
mov dword [ebp - 0xdd4], 1
jmp 0x4a5147
and dword [ebp - 0xdd4], 0
mov eax, dword [ebp - 0xdd4]
inc eax
jne 0x4a5165
mov eax, 0xf758
test eax, eax
jne 0x4a5165
mov dword [ebp - 0xaec], 1
jmp 0x4a516c
and dword [ebp - 0xaec], 0
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1080]
call fcn.00450e1d
mov ecx, dword [ebp - 0xaec]
mov dword [eax], ecx
mov byte [ebp - 0x170], 0
push 0
push 0x26e1
push 0x449e
push 0x17e1
push 0x7cbb
lea eax, [ebp - 0x170]
push eax
push 0x7b15
push 0
push 0x1710
push 0x2978
push 1
push 0x4be0
push 1
call fcn.004946d4
add esp, 0x34
jmp 0x4a501b
cmp dword [ebp - 0x4e8], 0
jne 0x4a5289
mov eax, dword [ebp - 0x4e8]
mov dword [ebp - 0x2014], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x227c], eax
mov eax, dword [ebp - 0x3c8]
mov dword [ebp - 0x2020], eax
mov eax, dword [ebp - 0x3c8]
mov dword [ebp - 0xf4c], eax
push 3
lea ecx, [ebp - 0x1080]
call fcn.00450e1d
mov ecx, dword [ebp - 0xf4c]
mov dword [eax], ecx
cmp dword [ebp - 0xf4c], 0x242ea6ae
jne 0x4a5234
mov dword [ebp - 0xaf4], 1
jmp 0x4a523b
and dword [ebp - 0xaf4], 0
mov eax, dword [ebp - 0xaf4]
mov dword [ebp - 0xddc], eax
mov eax, dword [ebp - 0xddc]
mov dword [ebp - 0x1d1c], eax
mov eax, dword [ebp - 0x4e8]
mov dword [ebp - 0x1d20], eax
cmp dword [ebp - 0x4e8], 0x7985
jl 0x4a5277
mov dword [ebp - 0xafc], 1
jmp 0x4a527e
and dword [ebp - 0xafc], 0
mov eax, dword [ebp - 0xafc]
sub eax, dword [ebp - 0x18]
je 0x4a529e
mov eax, 0xb637
test eax, eax
je 0x4a529e
mov dword [ebp - 0xfbc], 1
jmp 0x4a52a5
and dword [ebp - 0xfbc], 0
push 0
lea ecx, [ebp - 0x18a8]
call fcn.00450e1d
mov ecx, dword [ebp - 0xfbc]
mov dword [eax], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1c74]
mov dword [ebp - 0x1d28], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1c74], 0
je 0x4a52f1
cmp dword [ebp - 0x14a0], 0
je 0x4a52f1
mov dword [ebp - 0xb04], 1
jmp 0x4a52f8
and dword [ebp - 0xb04], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1c74]
imul eax, dword [ebp - 0xb04]
cmp dword [ebp - 0x734], eax
jl 0x4a5320
mov dword [ebp - 0xde4], 1
jmp 0x4a5327
and dword [ebp - 0xde4], 0
cmp dword [ebp - 0xde4], 0
je 0x4a5342
push 0
lea ecx, [ebp - 0x18a8]
call fcn.00450e1d
cmp dword [eax], 0
jne 0x4a5354
mov eax, 0x22489aff
test eax, eax
jne 0x4a5354
and dword [ebp - 0xb0c], 0
jmp 0x4a535e
mov dword [ebp - 0xb0c], 1
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0xb0c]
je 0x4a537e
cmp dword [ebp - 0x3c8], 0
je 0x4a537e
mov dword [ebp - 0xf54], 1
jmp 0x4a5385
and dword [ebp - 0xf54], 0
mov eax, dword [ebp - 0xf54]
mov dword [ebp - 0x18], eax
lea ecx, [ebp - 0x18a8]
call fcn.00450e01
lea ecx, [ebp - 0x1080]
call fcn.00450e01
movzx eax, byte [ebp - 0x16c]
test eax, eax
je 0x4a5727
mov dword [ebp - 0x118], 3
mov dword [ebp - 0xfac], 1
mov dword [ebp - 0x14a8], 0xfffffffa
mov dword [ebp - 0x5e8], 0
jmp 0x4a53ea
cmp dword [ebp - 0x5e8], 2
jge 0x4a5406
mov eax, dword [ebp - 0x5e8]
mov dword [ebp + eax*4 - 0x7f0], 0x10f7a73d
jmp 0x4a53dd
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x1d30], eax
xor eax, eax
inc eax
je 0x4a545e
jmp 0x4a2ee7
mov dword [ebp - 0xb44], 0x8094a188
mov dword [ebp - 0x1d48], 0x822cb3a3
mov dword [ebp - 0x1d50], 0xffffffff
mov dword [ebp - 0x14b8], 0x5b0e
mov dword [ebp - 0x3d0], 0
jmp 0x4a576d
mov eax, dword [ebp - 0x3d0]
inc eax
mov dword [ebp - 0x3d0], eax
cmp dword [ebp - 0x3d0], 3
jge 0x4a5789
mov eax, dword [ebp - 0x3d0]
mov dword [ebp + eax*4 - 0x23a0], 0
jmp 0x4a5760
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x23a0]
mov dword [ebp - 0xb44], eax
cmp dword [ebp - 0xb44], 0
je 0x4a5bb5
mov dword [ebp - 0xe04], 0x289c
mov dword [ebp - 0x12ac], str.asambn_rsjvidoqd_qsbqtf_apzlxyan_qxtzxsvow_drov
cmp dword [ebp - 0xe04], 0x28d3
jle 0x4a5846
and dword [ebp - 0x4f0], 0
jmp 0x4a57df
mov eax, dword [ebp - 0x4f0]
inc eax
mov dword [ebp - 0x4f0], eax
cmp dword [ebp - 0x4f0], 0x6621
jge 0x4a5840
and dword [ebp - 0x3d8], 0
jmp 0x4a5801
mov eax, dword [ebp - 0x3d8]
inc eax
mov dword [ebp - 0x3d8], eax
cmp dword [ebp - 0x3d8], 0x57b5
jge 0x4a583e
mov eax, dword [ebp - 0x4f0]
xor eax, dword [ebp - 0x3d8]
cdq
mov dword [ebp - 0x132c], eax
mov dword [ebp - 0x1328], edx
push dword [ebp - 0x1328]
push dword [ebp - 0x132c]
mov ecx, 0xaca3b8
call fcn.00450c1a
jmp 0x4a57f4
jmp 0x4a57d2
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov dword [ebp - 0x1d58], 0xb0ceafd
mov dword [ebp - 4], 0x18
cmp dword [ebp - 0xe04], 0x2866
jge 0x4a5873
mov edx, dword [ebp - 0x12ac]
mov ecx, 0xaca3b8
call fcn.004525c0
jmp 0x4a588f
or dword [ebp - 4], 0xffffffff
jmp 0x4a5899
mov dword [ebp - 0x1d60], 0x36f6dd8d
mov dword [ebp - 0x1d68], 0xffffffff
mov dword [ebp - 0x1d70], 0xca9d6923
mov dword [ebp - 0xb4c], 0x7ef1
mov dword [ebp - 0x14b0], str.piumq_julyh_lljrfmfx_gtxewnsb_tmio_kvdcwrww_pszrnyb_syixkaqru_orbwnumgh
cmp dword [ebp - 0xb4c], 0x8074
jle 0x4a59a2
and dword [ebp - 0x580], 0
jmp 0x4a58f1
mov eax, dword [ebp - 0x580]
inc eax
mov dword [ebp - 0x580], eax
cmp dword [ebp - 0x580], 0x3cf
jge 0x4a59a2
and dword [ebp - 0x3e0], 0
jmp 0x4a5917
mov eax, dword [ebp - 0x3e0]
inc eax
mov dword [ebp - 0x3e0], eax
cmp dword [ebp - 0x3e0], 0xd5f
jge 0x4a599d
and dword [ebp - 0x4f8], 0
jmp 0x4a5939
mov eax, dword [ebp - 0x4f8]
inc eax
mov dword [ebp - 0x4f8], eax
cmp dword [ebp - 0x4f8], 0x6109
jge 0x4a5998
mov eax, dword [ebp - 0x580]
add eax, dword [ebp - 0x3e0]
add eax, dword [ebp - 0x4f8]
cdq
mov dword [ebp - 0x1338], eax
mov dword [ebp - 0x1334], edx
push dword [ebp - 0x1334]
push dword [ebp - 0x1338]
lea ecx, [ebp - 0x2598]
call fcn.00401993
pop ecx
pop ecx
mov ecx, eax
call fcn.00450c0f
push eax
call fcn.004b40b7
pop ecx
lea ecx, [ebp - 0x2598]
call fcn.00450c05
jmp 0x4a592c
jmp 0x4a590a
jmp 0x4a58e4
mov dword [ebp - 0x1d78], 0x5cbcef05
mov dword [ebp - 4], 0x1a
cmp dword [ebp - 0xb4c], 0x7c36
jge 0x4a59cb
push dword [ebp - 0x14b0]
call fcn.004b40b7
pop ecx
jmp 0x4a59e7
or dword [ebp - 4], 0xffffffff
jmp 0x4a59f1
mov dword [ebp - 0x1d80], 0xdda37bb0
push 2
lea ecx, [ebp - 0x2084]
call fcn.00450d2f
mov dword [ebp - 0x1d88], 0xffffffff
lea eax, [ebp - 0x1d90]
push eax
push 0
lea eax, [ebp - 0x2084]
push eax
push 1
push 1
push 0x4f5c
call fcn.0047a8d9
add esp, 0x18
mov dword [ebp - 0xf64], 0x1400
mov dword [ebp - 0x12b8], str.kqtpqvsey_cjzb_bhft_velvygt_jayyuh_gwjhhiu_xkp_zpx
cmp dword [ebp - 0xf64], 0x1494
jle 0x4a5b39
push 0
call dword [sym.imp.ADVAPI32.dll_GetLengthSid]
and dword [ebp - 0x3e8], 0
jmp 0x4a5a75
mov eax, dword [ebp - 0x3e8]
inc eax
mov dword [ebp - 0x3e8], eax
cmp dword [ebp - 0x3e8], 0x674f
jge 0x4a5b39
and dword [ebp - 0x5c8], 0
jmp 0x4a5a9b
mov eax, dword [ebp - 0x5c8]
inc eax
mov dword [ebp - 0x5c8], eax
cmp dword [ebp - 0x5c8], 0x5ed8
jge 0x4a5b34
and dword [ebp - 0x3f0], 0
jmp 0x4a5ac1
mov eax, dword [ebp - 0x3f0]
inc eax
mov dword [ebp - 0x3f0], eax
cmp dword [ebp - 0x3f0], 0x24ad
jge 0x4a5b2f
and dword [ebp - 0x500], 0
jmp 0x4a5ae3
mov eax, dword [ebp - 0x500]
inc eax
mov dword [ebp - 0x500], eax
cmp dword [ebp - 0x500], 0x4f11
jge 0x4a5b2d
mov eax, dword [ebp - 0x3e8]
imul eax, dword [ebp - 0x5c8]
and eax, dword [ebp - 0x3f0]
and eax, dword [ebp - 0x500]
cdq
mov dword [ebp - 0x1344], eax
mov dword [ebp - 0x1340], edx
push dword [ebp - 0x1340]
push dword [ebp - 0x1344]
mov ecx, 0xaca3b8
call fcn.00450c1a
jmp 0x4a5ad6
jmp 0x4a5ab4
jmp 0x4a5a8e
jmp 0x4a5a68
mov dword [ebp - 4], 0x1c
cmp dword [ebp - 0xf64], 0x13d9
jge 0x4a5b5c
mov edx, dword [ebp - 0x12b8]
mov ecx, 0xaca3b8
call fcn.004525c0
jmp 0x4a5b78
or dword [ebp - 4], 0xffffffff
jmp 0x4a5b82
push 1
lea eax, [ebp - 0x14b8]
push eax
push 0x1afd
push 0x411d
push 0x2640
push 1
push 1
push 0
call fcn.00476b2c
add esp, 0x20
lea ecx, [ebp - 0x2084]
call fcn.00450e01
jmp 0x4a5bf0
mov byte [ebp - 0x14e], 0
push 0
push 0x6185
lea eax, [ebp - 0x14e]
push eax
push 0x3e90
push 1
push 1
push 0x79d
push 0x1497
push 1
push 1
push 0x44b5
push 1
call fcn.004970eb
add esp, 0x30
lea eax, [ebp - 0xdf0]
push eax
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov dword [ebp - 0xea8], eax
mov dword [ebp - 0x6d0], 1
mov dword [ebp - 0xe0c], 0x2304b25b
mov dword [ebp - 0x14c0], 0
cmp dword [ebp - 0x6d0], 0
je 0x4a5d6e
cmp dword [ebp - 0x6d0], 0
je 0x4a5d6e
push 0
push 1
lea eax, [ebp - 0xe0c]
push eax
push 0x1a03
push 0x9d8
push 0x693
push 1
lea eax, [ebp - 0x6d0]
push eax
call fcn.0047da4e
add esp, 0x20
mov dword [ebp - 0xb54], 0x1ecb
mov dword [ebp - 0x12c4], str.peylck_zguvfcnph_ujjpamhky_eymxztkn_poi_acp
cmp dword [ebp - 0xb54], 0x21b4
jle 0x4a5d27
and dword [ebp - 0x3f8], 0
jmp 0x4a5ca7
mov eax, dword [ebp - 0x3f8]
inc eax
mov dword [ebp - 0x3f8], eax
cmp dword [ebp - 0x3f8], 0x41e9
jge 0x4a5d27
and dword [ebp - 0x588], 0
jmp 0x4a5cc9
mov eax, dword [ebp - 0x588]
inc eax
mov dword [ebp - 0x588], eax
cmp dword [ebp - 0x588], 0x5987
jge 0x4a5d22
mov eax, dword [ebp - 0x3f8]
add eax, dword [ebp - 0x588]
cdq
mov dword [ebp - 0x1350], eax
mov dword [ebp - 0x134c], edx
push dword [ebp - 0x134c]
push dword [ebp - 0x1350]
lea ecx, [ebp - 0x25bc]
call fcn.00401993
pop ecx
pop ecx
mov ecx, eax
call fcn.00450c0f
push eax
call fcn.004b40b7
pop ecx
lea ecx, [ebp - 0x25bc]
call fcn.00450c05
jmp 0x4a5cbc
jmp 0x4a5c9a
mov dword [ebp - 4], 0x1e
cmp dword [ebp - 0xb54], 0x1dfe
jge 0x4a5d46
push dword [ebp - 0x12c4]
call fcn.004b40b7
pop ecx
jmp 0x4a5d62
or dword [ebp - 4], 0xffffffff
jmp 0x4a5d6c
jmp 0x4a5dbd
mov eax, dword [ebp - 0x14c0]
mov dword [ebp - 0xe0c], eax
mov byte [ebp - 0x172], 0
lea eax, [ebp - 0x172]
push eax
push 0
push 0x1829
push 0
push 1
push 0x285e
push 0x1737
push 0x5a63
push 1
push 0x47d0
push 0x3d7e
push 0x5765
push 1
call fcn.0049d012
add esp, 0x34
cmp dword [ebp - 0xea8], 0
je 0x4b0498
cmp dword [ebp - 0xdf0], 1
jle 0x4b0498
push 2
lea ecx, [ebp - 0x2094]
call fcn.00450d2f
push 2
lea ecx, [ebp - 0x1ca4]
call fcn.00450d2f
mov dword [ebp - 0x194], 0
jmp 0x4a5e0a
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 2
jge 0x4a5e26
mov eax, dword [ebp - 0x194]
mov dword [ebp + eax*4 - 0x1124], 4
jmp 0x4a5dfd
mov dword [ebp - 0xb5c], 0x702f
mov dword [ebp - 0x12d0], str.sxi_uont_gwlsferr_ffrlqxej_xeuassxm_uuebnc
cmp dword [ebp - 0xb5c], 0x727a
jle 0x4a5f29
and dword [ebp - 0x608], 0
jmp 0x4a5e60
mov eax, dword [ebp - 0x608]
inc eax
mov dword [ebp - 0x608], eax
cmp dword [ebp - 0x608], 0x1c70
jge 0x4a5f29
and dword [ebp - 0x400], 0
jmp 0x4a5e86
mov eax, dword [ebp - 0x400]
inc eax
mov dword [ebp - 0x400], eax
cmp dword [ebp - 0x400], 0x50f1
jge 0x4a5f24
and dword [ebp - 0x508], 0
jmp 0x4a5eac
mov eax, dword [ebp - 0x508]
inc eax
mov dword [ebp - 0x508], eax
cmp dword [ebp - 0x508], 0x726d
jge 0x4a5f1f
and dword [ebp - 0x408], 0
jmp 0x4a5ece
mov eax, dword [ebp - 0x408]
inc eax
mov dword [ebp - 0x408], eax
cmp dword [ebp - 0x408], 0x702f
jge 0x4a5f1d
mov eax, dword [ebp - 0x400]
imul eax, dword [ebp - 0x508]
cdq
idiv dword [ebp - 0x408]
mov eax, dword [ebp - 0x608]
mov ecx, edx
shl eax, cl
cdq
mov dword [ebp - 0x135c], eax
mov dword [ebp - 0x1358], edx
push dword [ebp - 0x1358]
push dword [ebp - 0x135c]
mov ecx, 0xaca3b8
call fcn.00450c1a
jmp 0x4a5ec1
jmp 0x4a5e9f
jmp 0x4a5e79
jmp 0x4a5e53
push 1
lea eax, [ebp - 0x194]
push eax
push 1
push 0x4472
lea eax, [ebp - 0x2094]
push eax
push 0xf34
push 1
push 0x48be
push 0
push 0x6bb6
push 0x4343
call fcn.00478d8c
add esp, 0x2c
mov dword [ebp - 4], 0x20
cmp dword [ebp - 0xb5c], 0x6f90
jge 0x4a5f83
mov edx, dword [ebp - 0x12d0]
mov ecx, 0xaca3b8
call fcn.004525c0
jmp 0x4a5f9f
or dword [ebp - 4], 0xffffffff
jmp 0x4a5fa9
push 1
push 0x4452
push 0x59e8
push 0x512c
push 0x461e
push 0x166
push 0x6764
push 0xacd
lea eax, [ebp - 0x1ca4]
push eax
push 0x1f9
push 0x7d30
push 0xbb
push 0x4b18
push 1
push 0x4646
lea eax, [ebp - 0x194]
push eax
push 0
call fcn.0048b957
add esp, 0x44
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x1124], 0
jmp 0x4a602f
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1124]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x1124], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1124], 0xfffffffd
jle 0x4a610e
push 1
lea ecx, [ebp - 0x1c8c]
call fcn.00450d2f
mov dword [ebp - 0x1d98], 0x509978f3
mov dword [ebp - 0x1da0], 0xb055cc25
mov dword [ebp - 0x1da8], 0xb68dee21
mov dword [ebp - 0x1db0], 1
mov dword [ebp - 0x1db8], 0x70a3267e
mov dword [ebp - 0x1dc0], 0x18d9dce
mov dword [ebp - 0x410], 0
jmp 0x4a60a5
mov eax, dword [ebp - 0x410]
inc eax
mov dword [ebp - 0x410], eax
cmp dword [ebp - 0x410], 1
jge 0x4a60c7
push dword [ebp - 0x410]
lea ecx, [ebp - 0x1c8c]
call fcn.00450e1d
mov dword [eax], 0x22124f84
jmp 0x4a6098
push 1
push 0x199d
push 1
push 0x7002
push 0
push 0x3405
lea eax, [ebp - 0x1c8c]
push eax
lea eax, [ebp - 0x1ca4]
push eax
push 0x636c
push 0x3b00
push 1
call fcn.0048ec7a
add esp, 0x2c
lea ecx, [ebp - 0x1c8c]
call fcn.00450e01
jmp 0x4a6014
lea ecx, [ebp - 0x1ca4]
call fcn.00450e01
lea ecx, [ebp - 0x2094]
call fcn.00450e01
mov dword [ebp - 0xfd4], 0x1979
mov dword [ebp - 0x14c8], str.bqz_iepulwtm_gqk_etyqx_jmaefuyeo_qfflxzi_ylvj_asvvs_yjlbkphkv_chweru
cmp dword [ebp - 0xfd4], 0x19d8
jle 0x4a6225
and dword [ebp - 0x510], 0
jmp 0x4a615e
mov eax, dword [ebp - 0x510]
inc eax
mov dword [ebp - 0x510], eax
cmp dword [ebp - 0x510], 0x12df
jge 0x4a6225
and dword [ebp - 0x418], 0
jmp 0x4a6184
mov eax, dword [ebp - 0x418]
inc eax
mov dword [ebp - 0x418], eax
cmp dword [ebp - 0x418], 0x27c5
jge 0x4a6220
and dword [ebp - 0x590], 0
jmp 0x4a61aa
mov eax, dword [ebp - 0x590]
inc eax
mov dword [ebp - 0x590], eax
cmp dword [ebp - 0x590], 0x44d1
jge 0x4a621b
and dword [ebp - 0x420], 0
jmp 0x4a61cc
mov eax, dword [ebp - 0x420]
inc eax
mov dword [ebp - 0x420], eax
cmp dword [ebp - 0x420], 0x64a5
jge 0x4a6219
mov eax, dword [ebp - 0x510]
xor eax, dword [ebp - 0x418]
mov edx, dword [ebp - 0x590]
mov ecx, dword [ebp - 0x420]
shl edx, cl
or eax, edx
cdq
mov dword [ebp - 0x1368], eax
mov dword [ebp - 0x1364], edx
push dword [ebp - 0x1364]
push dword [ebp - 0x1368]
mov ecx, 0xaca3b8
call fcn.00450c1a
jmp 0x4a61bf
jmp 0x4a619d
jmp 0x4a6177
jmp 0x4a6151
mov dword [ebp - 4], 0x22
cmp dword [ebp - 0xfd4], 0x187a
jge 0x4a6248
mov edx, dword [ebp - 0x14c8]
mov ecx, 0xaca3b8
call fcn.004525c0
jmp 0x4a6264
or dword [ebp - 4], 0xffffffff
jmp 0x4a626e
push 0x1ffa
push 1
push 0x5d96
push 1
push 0x6fb6
push 1
push 0x3aae
push 1
push 1
call fcn.004846ae
add esp, 0x24
mov dword [ebp - 0x738], 1
push 1
push 0xf11
push 1
push 0x4cdd
push 1
push 1
push 0x2e04
push 0x1427
push 0x4213
call fcn.00484cd0
add esp, 0x24
mov dword [ebp - 0xf6c], 0x2304b25b
push 0x16e7
push 0x5c5e
push 1
push 0x3f65
push 0x298c
push 1
push 1
push 0x5531
call fcn.00485094
add esp, 0x20
mov dword [ebp - 0x14e0], 0
or dword [ebp - 0x1a38], 0xffffffff
or dword [ebp - 0x1a34], 0xffffffff
or dword [ebp - 0x1a30], 0xffffffff
or dword [ebp - 0x1a2c], 0xffffffff
lea ecx, [ebp - 0x721]
call fcn.00450e2c
push eax
lea eax, [ebp - 0x1a28]
push eax
lea eax, [ebp - 0x1a38]
push eax
lea ecx, [ebp - 0x2408]
call fcn.00450e2f
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x20a4]
call fcn.00450ddb
mov dword [ebp - 0x238], 0xa18885c6
mov dword [ebp - 0x14d0], 0xbd55fd0a
mov dword [ebp - 0x238], 0
jmp 0x4a6380
mov eax, dword [ebp - 0x238]
inc eax
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 3
jg 0x4a63da
mov dword [ebp - 0x12dc], 0x233fd52
push 0
push 0x5b8a
push 0x5a74
lea eax, [ebp - 0x20a4]
push eax
push 0x7cf6
push 0x4393
push 0x20b4
push 1
lea eax, [ebp - 0x12dc]
push eax
lea eax, [ebp - 0x238]
push eax
push 1
lea eax, [ebp - 0x14d0]
push eax
push 1
call fcn.004946d4
add esp, 0x34
jmp 0x4a6373
lea ecx, [ebp - 0x20a4]
call fcn.00450e01
cmp dword [ebp - 0x738], 0
je 0x4a65cd
cmp dword [ebp - 0x738], 0
je 0x4a65cd
mov dword [ebp - 0xb64], 0x8094a188
mov dword [ebp - 0x1dc8], 0x822cb3a3
mov dword [ebp - 0x1dd0], 0xffffffff
mov dword [ebp - 0x12e8], 0x5b0e
mov dword [ebp - 0x518], 0
jmp 0x4a6440
mov eax, dword [ebp - 0x518]
inc eax
mov dword [ebp - 0x518], eax
cmp dword [ebp - 0x518], 3
jge 0x4a645c
mov eax, dword [ebp - 0x518]
mov dword [ebp + eax*4 - 0x23b8], 0
jmp 0x4a6433
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x23b8]
mov dword [ebp - 0xb64], eax
cmp dword [ebp - 0xb64], 0
je 0x4a6544
mov dword [ebp - 0x1dd8], 0xb0ceafd
mov dword [ebp - 0x1de0], 0x36f6dd8d
mov dword [ebp - 0x1de8], 0xffffffff
mov dword [ebp - 0x1df0], 0xca9d6923
mov dword [ebp - 0x1df8], 0x5cbcef05
mov dword [ebp - 0x1e00], 0xdda37bb0
push 2
lea ecx, [ebp - 0x20b4]
call fcn.00450d2f
mov dword [ebp - 0x1e08], 0xffffffff
push 0x371d
push 0x764e
push 0x3c75
lea eax, [ebp - 0x20b4]
push eax
push 1
lea eax, [ebp - 0x1e10]
push eax
push 0x6f6
push 0x4e3a
push 1
push 0x9b1
push 0x468e
push 1
call fcn.00485841
add esp, 0x30
push 0
push 0x537
push 1
push 1
push 0x404e
lea eax, [ebp - 0x12e8]
push eax
push 0x539c
push 0x535f
call fcn.004773c1
add esp, 0x20
lea ecx, [ebp - 0x20b4]
call fcn.00450e01
jmp 0x4a6576
push 1
push 0x25b4
push 0x1e4d
push 0x79b8
push 0
push 1
push 0x3e4e
push 0x72b0
push 1
push 1
push 0xb3c
push 1
call fcn.004970eb
add esp, 0x30
push 0x4ff0
push 0
push 1
push 1
push 0x2572
push 0x4f5c
push 1
push 0x43df
push 0x1b56
push 1
lea eax, [ebp - 0xf6c]
push eax
lea eax, [ebp - 0x738]
push eax
push 0x3c37
push 0x5ffa
push 0x46d1
push 0x7abf
push 0x3004
call fcn.00488576
add esp, 0x44
jmp 0x4a732e
mov dword [ebp - 0x6d8], 0xa9ac70c3
mov dword [ebp - 0x12f4], 0x811f07b4
mov dword [ebp - 0x14d8], 0x2b3b7bed
mov dword [ebp - 0x1e18], 0
mov dword [ebp - 0x1e20], 0xe0566a92
mov dword [ebp - 0x1e28], 0xffffffff
mov dword [ebp - 0x1e30], 0xf82baef6
mov dword [ebp - 0x1e38], 0xca8fecf7
mov dword [ebp - 0x1e40], 1
mov dword [ebp - 0x1e48], 0xd0890515
mov dword [ebp - 0x1e50], 0xfffffff9
mov dword [ebp - 0x1e58], 0
push 3
lea ecx, [ebp - 0x1c80]
call fcn.00450d2f
mov dword [ebp - 0x1e8], 0
jmp 0x4a666b
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 1
jge 0x4a6687
mov eax, dword [ebp - 0x1e8]
mov dword [ebp + eax*4 - 0x1e60], 0
jmp 0x4a665e
push 0x6b0f
push 0x310a
lea eax, [ebp - 0x1c80]
push eax
push 0
push 0x1aaf
push 0x1b17
lea eax, [ebp - 0x1e8]
push eax
push 0
push 0x2eb7
push 0x3fa9
push 0x7dc4
push 1
push 0x11c2
push 0x476e
push 0
call fcn.004900ac
add esp, 0x3c
cmp dword [ebp - 0x6d8], 0
jne 0x4a66ed
cmp dword [ebp - 0x6d8], 0
jne 0x4a66ed
and dword [ebp - 0xe14], 0
jmp 0x4a66f7
mov dword [ebp - 0xe14], 1
mov eax, dword [ebp - 0x6d8]
add eax, dword [ebp - 0xe14]
je 0x4a674d
lea eax, [ebp - 0x14d8]
push eax
push 0x2584
push 0x248c
push 1
push 0x368
push 0x4da6
push 1
push 0x694
push 0x2540
push 0
push 0x6976
push 0x1c1e
push 0
lea eax, [ebp - 0x12f4]
push eax
call fcn.00498511
add esp, 0x38
jmp 0x4a677f
mov byte [ebp - 0xf5], 0
push 1
push 0x7906
push 0
push 1
push 0xeb4
lea eax, [ebp - 0xf5]
push eax
push 0xebe
push 0x7c5
push 0
call fcn.0047c498
add esp, 0x24
push 0
lea ecx, [ebp - 0x1c80]
call fcn.00450e1d
mov dword [ebp - 0xb6c], eax
mov eax, dword [ebp - 0xb6c]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0xb6c]
mov dword [ecx], eax
lea ecx, [ebp - 0x1c80]
call fcn.00450e01
lea eax, [ebp - 0x14e0]
push eax
push 0x66df
push 1
push 1
push 1
push 0x279a
lea eax, [ebp - 0xf6c]
push eax
push 0
push 0x1396
call fcn.00488dfe
add esp, 0x24
mov dword [ebp - 0x1c], 0x5b8b78a
mov dword [ebp - 0x68], 0x2da3c3d2
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x130c], 1
mov dword [ebp - 0x428], 0
jmp 0x4a6816
mov eax, dword [ebp - 0x428]
inc eax
mov dword [ebp - 0x428], eax
cmp dword [ebp - 0x428], 4
jge 0x4a6832
mov eax, dword [ebp - 0x428]
mov dword [ebp + eax*4 - 0x1074], 1
jmp 0x4a6809
push 0xfffffffffffffffe
pop eax
test eax, eax
je 0x4a6877
cmp dword [ebp - 0x1c], 0
jne 0x4a684f
push 0xfffffffffffffffa
pop eax
test eax, eax
jne 0x4a684f
and dword [ebp - 0xb74], 0
jmp 0x4a6859
mov dword [ebp - 0xb74], 1
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1e68], eax
cmp dword [ebp - 0xb74], 0xffffffff
jl 0x4a6877
mov dword [ebp - 0xe1c], 1
jmp 0x4a687e
and dword [ebp - 0xe1c], 0
mov eax, dword [ebp - 0xe1c]
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0xfffffffb
ja 0x4a6899
mov dword [ebp - 0xb7c], 1
jmp 0x4a68a0
and dword [ebp - 0xb7c], 0
mov eax, dword [ebp - 0xb7c]
inc eax
inc eax
cmp eax, 0x5a8d
jne 0x4a68bb
mov dword [ebp - 0xfdc], 1
jmp 0x4a68c2
and dword [ebp - 0xfdc], 0
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xfdc]
je 0x4a68df
cmp dword [ebp - 0x1c], 0
je 0x4a68df
mov dword [ebp - 0xb84], 1
jmp 0x4a68e6
and dword [ebp - 0xb84], 0
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0xb84]
cmp eax, 0x1540ee1d
jge 0x4a6908
cmp dword [ebp - 0x1c], 0
je 0x4a6908
mov dword [ebp - 0xe24], 1
jmp 0x4a690f
and dword [ebp - 0xe24], 0
cmp dword [ebp - 0xe24], 0x78e60d74
jge 0x4a6927
mov dword [ebp - 0xb8c], 1
jmp 0x4a692e
and dword [ebp - 0xb8c], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0xb8c], eax
jle 0x4a6945
mov dword [ebp - 0xf78], 1
jmp 0x4a694c
and dword [ebp - 0xf78], 0
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0xf78]
cmp eax, 0x17a
je 0x4a6969
mov dword [ebp - 0xb94], 1
jmp 0x4a6970
and dword [ebp - 0xb94], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0xb94], eax
je 0x4a697f
cmp dword [ebp - 0x68], 0
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x1074], 9
jg 0x4a699b
mov dword [ebp - 0xe2c], 1
jmp 0x4a69a2
and dword [ebp - 0xe2c], 0
mov eax, dword [ebp - 0xe2c]
mov dword [ebp - 0x1c], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x1074]
cmp dword [ebp - 0x1c], eax
jne 0x4a69c9
mov dword [ebp - 0xb9c], 1
jmp 0x4a69d0
and dword [ebp - 0xb9c], 0
mov eax, dword [ebp - 0xb9c]
sub eax, dword [ebp - 0x120]
je 0x4a69f3
mov eax, 0x40284818
test eax, eax
je 0x4a69f3
mov dword [ebp - 0xfe4], 1
jmp 0x4a69fa
and dword [ebp - 0xfe4], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x1074]
cmp dword [ebp - 0xfe4], eax
jle 0x4a6a1b
mov dword [ebp - 0xba4], 1
jmp 0x4a6a22
and dword [ebp - 0xba4], 0
cmp dword [ebp - 0xba4], 0x7df2ddfd
jge 0x4a6cea
or eax, 0xffffffff
je 0x4a6cea
mov dword [ebp - 0x5d0], 0
jmp 0x4a6a54
mov eax, dword [ebp - 0x5d0]
inc eax
mov dword [ebp - 0x5d0], eax
cmp dword [ebp - 0x5d0], 2
jge 0x4a6a70
mov eax, dword [ebp - 0x5d0]
mov dword [ebp + eax*4 - 0x730], 2
jmp 0x4a6a47
mov dword [ebp - 0x1c], 0
jmp 0x4a6a80
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jg 0x4a6aad
mov dword [ebp - 0x1e70], 0xe8bfa085
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x730]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x730], eax
jmp 0x4a6a79
mov dword [ebp - 0x120], 3
jmp 0x4a6ac6
mov eax, dword [ebp - 0x120]
dec eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0
jl 0x4a6ce5
mov dword [ebp - 0xe34], 0x44f8a3d3
push 2
lea ecx, [ebp - 0x1884]
call fcn.00450d2f
mov dword [ebp - 0x740], 0x5a03
lea eax, [ebp - 0x1e78]
push eax
push 0x27f3
push 1
push 0x7973
push 0x5902
push 0x11b4
lea eax, [ebp - 0x1884]
push eax
push 0x5d07
push 0x4633
push 1
push 0x40d7
push 0x641e
push 1
push 1
push 1
push 1
push 0x478c
call fcn.0048615a
add esp, 0x44
mov byte [ebp - 0x143], 0
movzx eax, byte [ebp - 0x143]
test eax, eax
je 0x4a6b81
push 0x4b38
push 1
push 0xee9
push 0x2788
push 1
push 0x77c3
push 0x8a5
push 0x22fb
push 0
call fcn.0047a0d0
add esp, 0x24
mov eax, dword [ebp - 0x740]
dec eax
mov dword [ebp - 0x740], eax
mov eax, dword [ebp - 0x120]
mov eax, dword [ebp + eax*4 - 0x1074]
mov dword [ebp - 0x1e80], eax
mov eax, dword [ebp - 0x740]
mov dword [ebp - 0x1e88], eax
mov dword [ebp - 0xe34], 0x6a6b
mov eax, dword [ebp - 0xe34]
mov dword [ebp - 0x1e90], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x1074]
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x1074]
mov ecx, dword [ebp - 0x120]
cmp eax, dword [ebp + ecx*4 - 0x1074]
jge 0x4a6bf8
mov dword [ebp - 0x1300], 1
jmp 0x4a6bff
and dword [ebp - 0x1300], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x730]
push 4
pop ecx
imul ecx, ecx, 0
add eax, dword [ebp + ecx - 0x730]
jne 0x4a6c27
mov dword [ebp - 0xbac], 1
jmp 0x4a6c2e
and dword [ebp - 0xbac], 0
mov eax, 0xcae4
sub eax, dword [ebp - 0xbac]
imul eax, eax, 0x468f
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x730]
je 0x4a6c5a
mov dword [ebp - 0xf84], 1
jmp 0x4a6c61
and dword [ebp - 0xf84], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x730]
cmp dword [ebp - 0xf84], eax
jle 0x4a6c82
mov dword [ebp - 0xbb4], 1
jmp 0x4a6c89
and dword [ebp - 0xbb4], 0
push 4
pop eax
shl eax, 0
mov esi, dword [ebp + eax - 0x730]
add esi, dword [ebp - 0xbb4]
push 1
lea ecx, [ebp - 0x1884]
call fcn.00450e1d
cmp esi, dword [eax]
jg 0x4a6cb9
mov dword [ebp - 0xe3c], 1
jmp 0x4a6cc0
and dword [ebp - 0xe3c], 0
push 0
lea ecx, [ebp - 0x1884]
call fcn.00450e1d
mov ecx, dword [ebp - 0xe3c]
mov dword [eax], ecx
lea ecx, [ebp - 0x1884]
call fcn.00450e01
jmp 0x4a6ab9
jmp 0x4a6f81
mov dword [ebp - 0x6e0], 5
mov dword [ebp - 0xbbc], 0x6d49
mov dword [ebp - 0x14e8], str.atoornxck_bgniwcsu_bxdj_spybqrsk_exc_sojz
cmp dword [ebp - 0xbbc], 0x6ea8
jle 0x4a6df5
and dword [ebp - 0x430], 0
jmp 0x4a6d2e
mov eax, dword [ebp - 0x430]
inc eax
mov dword [ebp - 0x430], eax
cmp dword [ebp - 0x430], 0x7143
jge 0x4a6df5
and dword [ebp - 0x520], 0
jmp 0x4a6d54
mov eax, dword [ebp - 0x520]
inc eax
mov dword [ebp - 0x520], eax
cmp dword [ebp - 0x520], 0x2cd2
jge 0x4a6df0
and dword [ebp - 0x438], 0
jmp 0x4a6d7a
mov eax, dword [ebp - 0x438]
inc eax
mov dword [ebp - 0x438], eax
cmp dword [ebp - 0x438], 0x547a
jge 0x4a6deb
and dword [ebp - 0x598], 0
jmp 0x4a6d9c
mov eax, dword [ebp - 0x598]
inc eax
mov dword [ebp - 0x598], eax
cmp dword [ebp - 0x598], 0x5ab3
jge 0x4a6de9
mov eax, dword [ebp - 0x430]
mov ecx, dword [ebp - 0x520]
sar eax, cl
mov ecx, dword [ebp - 0x438]
and ecx, dword [ebp - 0x598]
xor eax, ecx
cdq
mov dword [ebp - 0x1374], eax
mov dword [ebp - 0x1370], edx
push dword [ebp - 0x1370]
push dword [ebp - 0x1374]
mov ecx, 0xaca3b8
call fcn.00450c1a
jmp 0x4a6d8f
jmp 0x4a6d6d
jmp 0x4a6d47
jmp 0x4a6d21
mov dword [ebp - 0x764], 0x586e024b
mov dword [ebp - 4], 0x24
cmp dword [ebp - 0xbbc], 0x6bab
jge 0x4a6e22
mov edx, dword [ebp - 0x14e8]
mov ecx, 0xaca3b8
call fcn.004525c0
jmp 0x4a6e3e
or dword [ebp - 4], 0xffffffff
jmp 0x4a6e48
mov dword [ebp - 0x68], 0
jmp 0x4a6e58
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 3
jg 0x4a6f29
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x764]
cmp dword [ebp + eax - 0x1074], ecx
je 0x4a6e83
mov dword [ebp - 0xfec], 1
jmp 0x4a6e8a
and dword [ebp - 0xfec], 0
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp + eax*4 - 0x1074]
cmp eax, dword [ebp - 0xfec]
jl 0x4a6eab
cmp dword [ebp - 0x68], 0
jne 0x4a6eab
and dword [ebp - 0xbc4], 0
jmp 0x4a6eb5
mov dword [ebp - 0xbc4], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1074]
cmp dword [ebp - 0xbc4], eax
je 0x4a6ed6
mov dword [ebp - 0xe44], 1
jmp 0x4a6edd
and dword [ebp - 0xe44], 0
mov eax, dword [ebp - 0xe44]
sub eax, dword [ebp - 0x764]
mov ecx, dword [ebp - 0x68]
cmp eax, dword [ebp + ecx*4 - 0x1074]
jg 0x4a6f01
mov dword [ebp - 0xbcc], 1
jmp 0x4a6f08
and dword [ebp - 0xbcc], 0
mov dword [ebp - 0x6e0], 0xfffffffb
mov eax, dword [ebp - 0x6e0]
sub eax, dword [ebp - 0xbcc]
mov dword [ebp - 0x130c], eax
jmp 0x4a6e51
push 1
push 1
push 0x380
push 0xb26
lea eax, [ebp - 0x6e0]
push eax
push 0x1f59
push 0x44d7
push 0x2524
push 0x957
push 0x6caa
push 0x710a
push 0
push 0x795
push 0x755d
push 0x4cd9
push 0x5527
lea eax, [ebp - 0x764]
push eax
call fcn.00481f21
add esp, 0x44
and dword [ebp - 0x19ac], 0
and dword [ebp - 0x19a8], 0
and dword [ebp - 0x19a4], 0
and dword [ebp - 0x19a0], 0
lea ecx, [ebp - 0x665]
call fcn.00450e2c
push eax
lea eax, [ebp - 0x199c]
push eax
lea eax, [ebp - 0x19ac]
push eax
lea ecx, [ebp - 0x2478]
call fcn.00450e2f
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1c68]
call fcn.00450ddb
mov dword [ebp - 0xbd4], 0x2c29a3df
mov dword [ebp - 0xf90], 0x181b
mov dword [ebp - 0x14f0], str.zgcrjsxcz_eta_laudjkzc
cmp dword [ebp - 0xf90], 0x1a33
jle 0x4a70e5
and dword [ebp - 0x280], 0
jmp 0x4a7016
mov eax, dword [ebp - 0x280]
inc eax
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 0x280
jge 0x4a70dd
and dword [ebp - 0x264], 0
jmp 0x4a703c
mov eax, dword [ebp - 0x264]
inc eax
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 0x7610
jge 0x4a70d8
and dword [ebp - 0x270], 0
jmp 0x4a7062
mov eax, dword [ebp - 0x270]
inc eax
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 0x6e7d
jge 0x4a70d3
and dword [ebp - 0x278], 0
jmp 0x4a7084
mov eax, dword [ebp - 0x278]
inc eax
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x278], 0x25cd
jge 0x4a70d1
mov eax, dword [ebp - 0x264]
mov ecx, dword [ebp - 0x270]
shl eax, cl
mov ecx, dword [ebp - 0x278]
sar eax, cl
and eax, dword [ebp - 0x280]
cdq
mov dword [ebp - 0x1380], eax
mov dword [ebp - 0x137c], edx
push dword [ebp - 0x137c]
push dword [ebp - 0x1380]
mov ecx, 0xaca3b8
call fcn.00450c1a
jmp 0x4a7077
jmp 0x4a7055
jmp 0x4a702f
jmp 0x4a7009
push 0
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov dword [ebp - 4], 0x26
cmp dword [ebp - 0xf90], 0x14c6
jge 0x4a7108
mov edx, dword [ebp - 0x14f0]
mov ecx, 0xaca3b8
call fcn.004525c0
jmp 0x4a7124
or dword [ebp - 4], 0xffffffff
jmp 0x4a712e
push 0x492a
push 0x54a4
push 1
lea eax, [ebp - 0xbd4]
push eax
push 0x18cc
push 0x5aeb
push 0x4ea0
push 0x51d0
push 0xa60
push 0
push 0x4a9c
push 0x1abc
push 0x32ad
push 0x241e
push 0x11e6
push 0
lea eax, [ebp - 0x1c68]
push eax
push 0x54a4
push 0x58b5
push 0x743d
push 0x7fc8
push 0x1a0d
push 1
push 0x18b9
push 0x44f7
push 1
push 0x5dbc
call fcn.004963a6
add esp, 0x6c
push 0x60c1
push 0
push 0
lea eax, [ebp - 0x1c68]
push eax
push 1
lea eax, [ebp - 0xbd4]
push eax
push 0x2013
push 0x213e
push 0x7fcb
push 1
call fcn.00492cfa
add esp, 0x28
lea ecx, [ebp - 0x1c68]
call fcn.00450e01
mov byte [ebp - 0x152], 0
mov dword [ebp - 0x7c], 2
mov dword [ebp - 0x7c], 0
jmp 0x4a720d
mov eax, dword [ebp - 0x7c]
dec eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0xffffffee
jle 0x4a727c
push 1
push 0x7c0d
push 1
push 1
push 0x575f
push 0x6616
push 0x1675
push 0x585c
push 0
call fcn.0047c498
add esp, 0x24
mov byte [ebp - 0x164], 0
push 0
push 1
push 0x67d9
push 0x1ba4
push 1
push 1
push 0x603
lea eax, [ebp - 0x164]
push eax
push 0x6fd2
push 0x4ce
push 0x30f0
push 1
call fcn.00489dea
add esp, 0x30
jmp 0x4a7206
mov dword [ebp - 0x7c], 0
jmp 0x4a728c
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0x18
jg 0x4a72e8
mov dword [ebp - 0x1318], 1
mov dword [ebp - 0x14f8], 1
push 0
push 1
push 1
push 0x22ad
push 1
push 0x39d4
push 0x7a85
push 0x5e28
lea eax, [ebp - 0x1318]
push eax
push 0x1f73
push 0x3e5c
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x14f8]
push eax
call fcn.0048beab
add esp, 0x34
jmp 0x4a7285
push 0x2023
push 1
push 0x6657
push 0x4757
push 0x7ab9
push 0x7a06
push 0x7fb9
push 0x110a
push 0x5232
push 1
push 1
push 0
push 1
lea eax, [ebp - 0x152]
push eax
push 0x3f6b
call fcn.0048b398
add esp, 0x3c
mov dword [ebp - 0x1b4], 0xfffffff7
mov dword [ebp - 0x288], 0
jmp 0x4a7351
mov eax, dword [ebp - 0x288]
inc eax
mov dword [ebp - 0x288], eax
cmp dword [ebp - 0x288], 3
jge 0x4a736d
mov eax, dword [ebp - 0x288]
mov dword [ebp + eax*4 - 0x23d0], 5
jmp 0x4a7344
mov byte [ebp - 0x16e], 0
push 0x5856
push 0
push 1
lea eax, [ebp - 0x16e]
push eax
push 0x361c
push 1
push 0x324f
push 0x7ed0
push 0x277c
push 0x5a40
call fcn.00489545
add esp, 0x28
mov dword [ebp - 0x1b4], 0
jmp 0x4a73c0
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 2
jg 0x4a73dd
mov eax, dword [ebp - 0x1b4]
cmp dword [ebp + eax*4 - 0x23d0], 0
je 0x4a73db
jmp 0x4a73dd
jmp 0x4a73b3
push 4
lea ecx, [ebp - 0x20c4]
call fcn.00450d2f
lea eax, [ebp - 0x20c4]
push eax
push 0x67c9
push 0
push 0x41b9
push 0x48b8
push 0x3b30
lea eax, [ebp - 0x1e98]
push eax
push 1
push 1
push 0x52f1
push 0
call fcn.0049584f
add esp, 0x2c
push 0x33a1
push 0x4fd0
push 0x5976
push 1
push 0x4ee2
push 1
push 0x9d1
push 0x1984
push 0x386b
push 0x49a2
push 1
push 0x3ae3
push 0x13ff
push 1
push 0x7eb3
push 0x47eb
push 0x4687
push 0
push 0x1f9f
call fcn.004937a2
add esp, 0x4c
push 0x61ca
push 0x2b86
push 0x2ee2
push 1
push 0x1f85
push 0x10a0
push 0x79e7
push 0x6ab3
push 0x4750
push 0x224d
push 0x2129
push 0x37a3
push 0x7930
push 1
push 0x32f0
push 0x72cf
push 1
push 0
call fcn.004877db
add esp, 0x48
lea ecx, [ebp - 0x20c4]
call fcn.00450e01
mov dword [ebp - 0xbdc], 1
push 2
lea ecx, [ebp - 0x1a7c]
call fcn.00450d2f
mov dword [ebp - 0x1330], 0xfdb6968
mov dword [ebp - 0x1500], 0x168aa2
mov dword [ebp - 0x1508], 0x50faeb38
mov dword [ebp - 0xe4c], 0x1700
mov dword [ebp - 0x1324], str.rmkpuw_rdeqa_cercat_forhgx_ojpzfzrb_nwgkob_ojficj
cmp dword [ebp - 0xe4c], 0x1763
jle 0x4a7610
and dword [ebp - 0x290], 0
jmp 0x4a7549
cmp dword [ebp - 0x290], 0x48e0
jge 0x4a75fc
and dword [ebp - 0x298], 0
jmp 0x4a756f
cmp dword [ebp - 0x298], 0x649b
jge 0x4a75f7
and dword [ebp - 0x2a0], 0
jmp 0x4a7591
jmp 0x4a753c
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FormatMessageW]
push 0
push 1
lea eax, [ebp - 0x1ea0]
push eax
push 1
push 0x5bca
push 0x5dfb
lea eax, [ebp - 0x1a7c]
push eax
push 1
push 0x396c
push 0x9af
call fcn.0048e349
add esp, 0x28
mov dword [ebp - 4], 0x28
cmp dword [ebp - 0xe4c], 0x1536
jge 0x4a7661
push dword [ebp - 0x1324]
call fcn.004b40b7
pop ecx
jmp 0x4a767d
or dword [ebp - 4], 0xffffffff
jmp 0x4a7687
push 0x554b
lea eax, [ebp - 0xbdc]
push eax
push 0x4c05
push 0
push 0
push 0x52f
push 0x26c
push 0
call fcn.0048753b
add esp, 0x20
lea eax, [ebp - 0xbdc]
push eax
push 1
push 0x19f1
push 0x5b4c
lea eax, [ebp - 0x1500]
push eax
lea eax, [ebp - 0x1330]
push eax
lea eax, [ebp - 0x1508]
push eax
lea eax, [ebp - 0x1a7c]
push eax
push 0x1384
push 0
push 1
push 1
push 1
push 0x7edc
push 0xf11
call fcn.0048b398
add esp, 0x3c
lea ecx, [ebp - 0x1a7c]
call fcn.00450e01
push 1
lea ecx, [ebp - 0x1c38]
call fcn.00450d2f
mov dword [ebp - 0x1ea8], 0xc0351a93
mov dword [ebp - 0x1eb0], 0x51162f63
mov dword [ebp - 0x1f0], 0x5411aa84
mov dword [ebp - 0x1518], 0
mov dword [ebp - 0x133c], 0x39956a21
mov dword [ebp - 0xff4], 0x69376522
mov dword [ebp - 0x2a8], 0
jmp 0x4a776b
cmp dword [ebp - 0x2a8], 2
jge 0x4a7787
mov dword [ebp - 0xeb0], 0x8094a188
mov dword [ebp - 0x2308], 0x822cb3a3
mov dword [ebp - 0x1e34], 0xffffffff
mov dword [ebp - 0x156c], 0x5b0e
mov dword [ebp - 0x5e4], 0
jmp 0x4b04d9
mov eax, dword [ebp - 0x5e4]
inc eax
mov dword [ebp - 0x5e4], eax
cmp dword [ebp - 0x5e4], 3
jge 0x4b04f5
mov eax, dword [ebp - 0x5e4]
mov dword [ebp + eax*4 - 0x23dc], 0
jmp 0x4b04cc
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x23dc]
mov dword [ebp - 0xeb0], eax
cmp dword [ebp - 0xeb0], 0
je 0x4b05d6
mov dword [ebp - 0x2118], 0xb0ceafd
mov dword [ebp - 0x1e3c], 0x36f6dd8d
mov dword [ebp - 0x224c], 0xffffffff
mov dword [ebp - 0x1e44], 0xca9d6923
mov dword [ebp - 0x2128], 0x5cbcef05
mov dword [ebp - 0x1e4c], 0xdda37bb0
push 2
lea ecx, [ebp - 0x21a4]
call fcn.00450d2f
mov dword [ebp - 0x22c8], 0xffffffff
mov dword [ebp - 0x5ec], 0
jmp 0x4b0581
mov eax, dword [ebp - 0x5ec]
inc eax
mov dword [ebp - 0x5ec], eax
cmp dword [ebp - 0x5ec], 2
jge 0x4b05a3
push dword [ebp - 0x5ec]
lea ecx, [ebp - 0x21a4]
call fcn.00450e1d
mov dword [eax], 0xd9ddcef9
jmp 0x4b0574
push 1
lea eax, [ebp - 0x156c]
push eax
push 1
push 0
push 0x7966
push 0x258
push 1
push 0xc21
call fcn.00497992
add esp, 0x20
lea ecx, [ebp - 0x21a4]
call fcn.00450e01
jmp 0x4b0614
mov byte [ebp - 0x169], 0
push 1
push 1
lea eax, [ebp - 0x169]
push eax
push 0x6f70
push 0x1a5a
push 0x6be2
push 0xdf1
push 0x3ac9
push 1
push 0x4349
push 1
push 1
call fcn.0049c35f
add esp, 0x30
mov dword [ebp - 0x24c], 0x15252cb1
mov dword [ebp - 0x1e54], 7
push 3
lea ecx, [ebp - 0x1890]
call fcn.00450d2f
mov dword [ebp - 0x167c], 0xc3d0
mov dword [ebp - 0x244], 0
jmp 0x4b0658
mov eax, dword [ebp - 0x244]
inc eax
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 3
jge 0x4b0674
mov eax, dword [ebp - 0x244]
mov dword [ebp + eax*4 - 0x2580], 1
jmp 0x4b064b
push 0x3e9f
push 0x25ea
push 0x59cb
push 0x7efa
lea eax, [ebp - 0x1890]
push eax
push 0x3ddb
push 1
push 0x7d15
push 0x293
push 0
push 1
lea eax, [ebp - 0x244]
push eax
call fcn.0049ccde
add esp, 0x30
mov byte [ebp - 0x111], 0
push 0x7069
push 1
lea eax, [ebp - 0x111]
push eax
push 0x10a7
push 0x4316
push 1
push 0x2695
push 0x2b6b
push 0x4aad
push 1
call fcn.0049ca08
add esp, 0x28
mov dword [ebp - 0x24c], 2
jmp 0x4b0706
mov eax, dword [ebp - 0x24c]
dec eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 0
jl 0x4b096d
mov dword [ebp - 0x1574], 0xfffffff6
mov dword [ebp - 0x2138], 0xdafbbd0a
mov dword [ebp - 0x175c], 0x87c7ab89
mov dword [ebp - 0x5f4], 0
jmp 0x4b074a
mov eax, dword [ebp - 0x5f4]
inc eax
mov dword [ebp - 0x5f4], eax
cmp dword [ebp - 0x5f4], 3
jge 0x4b0766
mov eax, dword [ebp - 0x5f4]
mov dword [ebp + eax*4 - 0x1814], 0xfffffff6
jmp 0x4b073d
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x1814], 0
jmp 0x4b0794
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1814]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x1814], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1814], 2
jg 0x4b07ed
mov dword [ebp - 0x1e5c], 7
push 0x3d83
push 0x351f
push 0x58e
lea eax, [ebp - 0x167c]
push eax
push 0x6a5
push 0x3253
push 1
push 0x7870
push 0x5c81
push 1
push 1
push 0x5716
call fcn.0049ccde
add esp, 0x30
jmp 0x4b0779
mov dword [ebp - 0xeb8], 0x3ffc
mov dword [ebp - 0x157c], str.ngvsqdi_iokbl_aocan_nhvkxkwk_nxsl_nzlgc_euxwkxq_xng_wtjwqdrqm_vcphm_iqobvmw_rxgqsu_xdmnneiw
cmp dword [ebp - 0xeb8], 0x434a
jle 0x4b08c2
and dword [ebp - 0x5fc], 0
jmp 0x4b0827
mov eax, dword [ebp - 0x5fc]
inc eax
mov dword [ebp - 0x5fc], eax
cmp dword [ebp - 0x5fc], 0x3a9e
jge 0x4b0888
and dword [ebp - 0x604], 0
jmp 0x4b0849
mov eax, dword [ebp - 0x604]
inc eax
mov dword [ebp - 0x604], eax
cmp dword [ebp - 0x604], 0x6d93
jge 0x4b0886
mov eax, dword [ebp - 0x5fc]
add eax, dword [ebp - 0x604]
cdq
mov dword [ebp - 0x144c], eax
mov dword [ebp - 0x1448], edx
push dword [ebp - 0x1448]
push dword [ebp - 0x144c]
mov ecx, 0xaca3b8
call fcn.00450c1a
jmp 0x4b083c
jmp 0x4b081a
push 0
push 0x24db
push 0x231a
push 0x17ac
push 0x2662
push 0x1d3c
push 0x62b
push 0x2522
push 0x1725
push 0x3b3
push 0xde4
call dword [sym.imp.GDI32.dll_StretchBlt]
push 2
lea ecx, [ebp - 0x1890]
call fcn.00450e1d
mov esi, dword [ebp - 0x1574]
push 0
lea ecx, [ebp - 0x1890]
call fcn.00450e1d
imul esi, dword [eax]
cmp esi, dword [ebp - 0x24c]
jl 0x4b08f9
mov dword [ebp - 0x6f4], 1
jmp 0x4b0900
and dword [ebp - 0x6f4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x6f4]
mov dword [ebp + eax - 0x1814], ecx
mov eax, dword [ebp - 0x6f4]
mov dword [ebp - 0x175c], eax
mov dword [ebp - 4], 0x48
cmp dword [ebp - 0xeb8], 0x3e96
jge 0x4b0942
mov edx, dword [ebp - 0x157c]
mov ecx, 0xaca3b8
call fcn.004525c0
jmp 0x4b095e
or dword [ebp - 4], 0xffffffff
jmp 0x4b0968
jmp 0x4b06f9
lea ecx, [ebp - 0x1890]
call fcn.00450e01
movzx eax, byte [ebp - 0x21]
test eax, eax
jne 0x4b0a8d
mov dword [ebp - 0x6fc], 1
mov dword [ebp - 0xec0], 0x2304b25b
mov dword [ebp - 0x1684], 0
cmp dword [ebp - 0x6fc], 0
je 0x4b09eb
cmp dword [ebp - 0x6fc], 0
je 0x4b09eb
push 1
push 0x2c56
push 0x4560
push 1
lea eax, [ebp - 0x6fc]
push eax
lea eax, [ebp - 0xec0]
push eax
push 0x365f
push 0
push 1
push 0x265
call fcn.0049e83f
add esp, 0x28
jmp 0x4b0a83
push 0x1ff8
push 1
push 0x340a
push 1
push 1
lea eax, [ebp - 0xec0]
push eax
push 0x390c
push 0x8ca
push 1
push 0x1b8f
lea eax, [ebp - 0x1684]
push eax
push 0x6f73
push 1
call fcn.0049d012
add esp, 0x34
push 0x1a2f
push 0x5ffe
push 0x67ee
push 1
push 0x17fb
push 0x2b62
push 0x4a0
push 1
push 1
push 0x4484
push 0x154e
push 0x3a60
push 0x277c
push 1
push 0x329c
push 0x59ab
push 0x3f88
push 0x1ba9
push 1
push 1
call fcn.0049d44c
add esp, 0x50
jmp 0x4b1337
mov dword [ebp - 0x19c0], 0xfffffffb
mov dword [ebp - 0x19bc], 0xfffffffb
mov dword [ebp - 0x19b8], 0xfffffffb
mov dword [ebp - 0x19b4], 0xfffffffb
lea ecx, [ebp - 0x755]
call fcn.00450e2c
push eax
lea eax, [ebp - 0x19b0]
push eax
lea eax, [ebp - 0x19c0]
push eax
lea ecx, [ebp - 0x2460]
call fcn.00450e2f
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x770]
call fcn.00450ddb
mov dword [ebp - 0xef0], 0xffffffff
mov dword [ebp - 0x1584], 0xffffffff
mov dword [ebp - 0x1840], 0xffff
mov dword [ebp - 0xb0], 0
jmp 0x4b0b21
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 3
jge 0x4b0b3d
mov eax, dword [ebp - 0xb0]
mov dword [ebp + eax*4 - 0x2394], 0xeac8b13e
jmp 0x4b0b14
mov dword [ebp - 0xb0], 0
jmp 0x4b0b56
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 2
jge 0x4b0b72
mov eax, dword [ebp - 0xb0]
mov dword [ebp + eax*4 - 0x1944], 0x57736d0c
jmp 0x4b0b49
push 1
lea ecx, [ebp - 0x770]
call fcn.00450e1d
and dword [eax], 0
jmp 0x4b0ba8
push 1
lea ecx, [ebp - 0x770]
call fcn.00450e1d
mov dword [ebp - 0xec8], eax
mov eax, dword [ebp - 0xec8]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xec8]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x770]
call fcn.00450e1d
cmp dword [eax], 2
jg 0x4b10bd
push 1
lea ecx, [ebp - 0x7e8]
call fcn.00450d2f
push 3
lea ecx, [ebp - 0x1c20]
call fcn.00450d2f
push 0x881
push 0x1a23
push 1
push 1
push 0x66de
lea eax, [ebp - 0x254]
push eax
push 1
push 0x486b
push 0
push 1
push 0x99c
push 0x8b3
push 1
lea eax, [ebp - 0x7e8]
push eax
call fcn.004991d3
add esp, 0x38
mov dword [ebp - 0x254], 0
jmp 0x4b0c31
mov eax, dword [ebp - 0x254]
inc eax
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 3
jge 0x4b0c50
push dword [ebp - 0x254]
lea ecx, [ebp - 0x1c20]
call fcn.00450e1d
or dword [eax], 0xffffffff
jmp 0x4b0c24
mov byte [ebp - 0x16b], 0
push 0x272a
push 0x790e
push 0x2465
push 0x78ad
push 1
push 0x755c
push 0x159
push 0x7243
push 1
push 0x46fc
push 0x73fc
lea eax, [ebp - 0x16b]
push eax
push 1
push 0x5dde
push 0x5223
push 0x3b16
push 0x67f2
push 0x84a
push 0x275c
push 0x3fd5
push 1
push 0x5d55
push 0x58df
push 0x4aba
push 0x2b
push 0x266d
push 0x2920
push 0x2a5c
push 1
call fcn.0049df13
add esp, 0x74
cmp dword [ebp - 0xef0], 0
je 0x4b0e64
cmp dword [ebp - 0x1584], 0
je 0x4b0d14
push 1
lea ecx, [ebp - 0x770]
call fcn.00450e1d
cmp dword [eax], 0
je 0x4b0d14
mov dword [ebp - 0xed0], 1
jmp 0x4b0d1b
and dword [ebp - 0xed0], 0
push 0
lea ecx, [ebp - 0x7e8]
call fcn.00450e1d
mov ecx, dword [ebp - 0xed0]
cmp ecx, dword [eax]
jne 0x4b0d3e
mov dword [ebp - 0xed8], 1
jmp 0x4b0d45
and dword [ebp - 0xed8], 0
push 1
lea ecx, [ebp - 0x770]
call fcn.00450e1d
mov eax, dword [eax]
cmp eax, dword [ebp - 0xed8]
je 0x4b0d68
mov dword [ebp - 0xee0], 1
jmp 0x4b0d6f
and dword [ebp - 0xee0], 0
push 1
lea ecx, [ebp - 0x770]
call fcn.00450e1d
mov eax, dword [eax]
lea eax, [ebp + eax*4 - 0x2394]
mov dword [ebp - 0xee8], eax
push 1
lea ecx, [ebp - 0x770]
call fcn.00450e1d
mov ecx, dword [ebp - 0xee8]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0xee0]
dec eax
mov ecx, dword [ebp - 0xee8]
cmp dword [ecx], eax
jl 0x4b0dc0
push 0
lea ecx, [ebp - 0x7e8]
call fcn.00450e1d
cmp dword [ebp - 0xef0], 0
jne 0x4b0ddb
mov eax, 0x2af
test eax, eax
jne 0x4b0ddb
and dword [ebp - 0xef8], 0
jmp 0x4b0de5
mov dword [ebp - 0xef8], 1
cmp dword [ebp - 0xef8], 0
je 0x4b0dfa
mov dword [ebp - 0x704], 1
jmp 0x4b0e01
and dword [ebp - 0x704], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x704]
mov dword [ebp + eax - 0x1944], ecx
push 0
lea ecx, [ebp - 0x7e8]
call fcn.00450e1d
mov esi, dword [ebp - 0x704]
imul esi, dword [eax]
push 0
lea ecx, [ebp - 0x7e8]
call fcn.00450e1d
cmp esi, dword [eax]
jg 0x4b0e64
push 1
push 0x7a8d
push 0x1a24
push 0x6734
push 1
push 1
push 0x26ab
push 1
call fcn.0049e630
add esp, 0x20
jmp 0x4b10a2
mov dword [ebp - 0x714], 0
mov dword [ebp - 0x60c], 0
jmp 0x4b0e87
mov eax, dword [ebp - 0x60c]
inc eax
mov dword [ebp - 0x60c], eax
cmp dword [ebp - 0x60c], 2
jge 0x4b0ea3
mov eax, dword [ebp - 0x60c]
mov dword [ebp + eax*4 - 0x1f9c], 0xf51b4373
jmp 0x4b0e7a
mov esi, dword [ebp - 0x714]
push 0
lea ecx, [ebp - 0x770]
call fcn.00450e1d
cmp esi, dword [eax]
jg 0x4b0ec6
mov dword [ebp - 0xf00], 1
jmp 0x4b0ecd
and dword [ebp - 0xf00], 0
cmp dword [ebp - 0xf00], 0x514f
je 0x4b0ee5
mov dword [ebp - 0xf20], 1
jmp 0x4b0eec
and dword [ebp - 0xf20], 0
push 0
lea ecx, [ebp - 0x7e8]
call fcn.00450e1d
cmp dword [eax], 0
jne 0x4b0fda
push 4
pop eax
imul eax, eax, 0
mov esi, dword [ebp + eax - 0x1944]
push 0
lea ecx, [ebp - 0x7e8]
call fcn.00450e1d
cmp esi, dword [eax]
jge 0x4b0f3f
xor eax, eax
jne 0x4b0f3f
push 0
lea ecx, [ebp - 0x7e8]
call fcn.00450e1d
cmp dword [eax], 0
jne 0x4b0f3f
and dword [ebp - 0xf08], 0
jmp 0x4b0f49
mov dword [ebp - 0xf08], 1
push 1
lea ecx, [ebp - 0x770]
call fcn.00450e1d
mov ecx, dword [ebp - 0xf08]
cmp ecx, dword [eax]
jl 0x4b0f6c
mov dword [ebp - 0xf10], 1
jmp 0x4b0f73
and dword [ebp - 0xf10], 0
cmp dword [ebp - 0xf10], 0xf0aeacb2
jb 0x4b0f8b
mov dword [ebp - 0xf18], 1
jmp 0x4b0f92
and dword [ebp - 0xf18], 0
mov eax, dword [ebp - 0x1840]
cmp dword [ebp - 0xf18], eax
jl 0x4b0fac
mov dword [ebp - 0x70c], 1
jmp 0x4b0fb3
and dword [ebp - 0x70c], 0
push 0
lea ecx, [ebp - 0x7e8]
call fcn.00450e1d
mov ecx, dword [ebp - 0x70c]
mov dword [eax], ecx
cmp dword [ebp - 0x70c], 0
jne 0x4b0fda
and dword [ebp - 0xf28], 0
jmp 0x4b0fe4
mov dword [ebp - 0xf28], 1
mov eax, dword [ebp - 0xf20]
imul eax, dword [ebp - 0xf28]
cmp eax, 7
ja 0x4b1002
mov dword [ebp - 0xf30], 1
jmp 0x4b1009
and dword [ebp - 0xf30], 0
cmp dword [ebp - 0xf30], 0x5ee87909
jg 0x4b1021
mov dword [ebp - 0xf38], 1
jmp 0x4b1028
and dword [ebp - 0xf38], 0
mov eax, dword [ebp - 0xf38]
mov dword [ebp - 0x714], eax
mov esi, dword [ebp - 0x714]
push 1
lea ecx, [ebp - 0x1c20]
call fcn.00450e1d
cmp esi, dword [eax]
jge 0x4b1057
mov dword [ebp - 0xf40], 1
jmp 0x4b105e
and dword [ebp - 0xf40], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xf40]
mov dword [ebp + eax - 0x1f9c], ecx
mov byte [ebp - 0x119], 0
movzx eax, byte [ebp - 0x119]
test eax, eax
je 0x4b10a2
push 1
push 1
push 0x76d6
push 1
push 0x2a20
push 0
push 0x7c0b
call fcn.00483183
add esp, 0x1c
lea ecx, [ebp - 0x1c20]
call fcn.00450e01
lea ecx, [ebp - 0x7e8]
call fcn.00450e01
jmp 0x4b0b84
lea ecx, [ebp - 0x770]
call fcn.00450e01
push 1
lea eax, [ebp - 0x26c4]
push eax
xor edx, edx
inc edx
xor ecx, ecx
call fcn.00474e43
pop ecx
pop ecx
mov esi, eax
lea edi, [ebp - 0x234c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea esi, [ebp - 0x234c]
lea edi, [ebp - 0x18c0]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x2d28
push 1
push 1
push 1
push 0x2734
push 0
call fcn.0047f9a0
add esp, 0x18
cmp dword [ebp - 0x18c0], 0
je 0x4b112e
push 0
push dword [ebp - 0x18b8]
push dword [ebp - 0x18bc]
call dword [ebp - 0x18c0]
jmp 0x4b1167
mov eax, dword [ebp - 0x158c]
mov dword [ebp - 0x168c], eax
mov eax, dword [ebp - 0x168c]
mov dword [ebp - 0x1594], eax
mov eax, dword [ebp - 0x1594]
movzx eax, byte [eax]
test eax, eax
je 0x4b1167
push 0x2564
push 0x1c1a
push 0
call dword [sym.imp.USER32.dll_CheckMenuItem]
jmp 0x4b1301
mov eax, dword [ebp - 0x176c]
mov dword [ebp - 0x11f0], eax
mov eax, dword [ebp - 0x159c]
mov dword [ebp - 0x11b8], eax
mov eax, dword [ebp - 0x11a0]
mov dword [ebp - 0x11c0], eax
mov eax, dword [ebp - 0x11a8]
mov dword [ebp - 0x11b0], eax
mov eax, dword [ebp - 0x11b0]
movzx eax, byte [eax]
test eax, eax
je 0x4b12cf
mov eax, dword [ebp - 0x11b8]
mov dword [ebp - 0x11c8], eax
mov eax, dword [ebp - 0x11c0]
mov dword [ebp - 0x11d0], eax
mov eax, dword [ebp - 0x11c8]
mov dword [ebp - 0x11e0], eax
mov dword [ebp - 0xf48], 0x2062
mov dword [ebp - 0x11d8], str.gmw_bjt_ulnglywb
cmp dword [ebp - 0xf48], 0x2189
jle 0x4b1268
and dword [ebp - 0x348], 0
jmp 0x4b1207
mov eax, dword [ebp - 0x348]
inc eax
mov dword [ebp - 0x348], eax
cmp dword [ebp - 0x348], 0x15ce
jge 0x4b1268
and dword [ebp - 0x26c], 0
jmp 0x4b1229
mov eax, dword [ebp - 0x26c]
inc eax
mov dword [ebp - 0x26c], eax
cmp dword [ebp - 0x26c], 0xf8c
jge 0x4b1266
mov eax, dword [ebp - 0x348]
and eax, dword [ebp - 0x26c]
cdq
mov dword [ebp - 0x1458], eax
mov dword [ebp - 0x1454], edx
push dword [ebp - 0x1454]
push dword [ebp - 0x1458]
mov ecx, 0xaca3b8
call fcn.00450c1a
jmp 0x4b121c
jmp 0x4b11fa
mov eax, dword [ebp - 0x11d0]
mov dword [ebp - 0x11e8], eax
mov dword [ebp - 4], 0x4a
cmp dword [ebp - 0xf48], 0x1dd6
jge 0x4b1297
mov edx, dword [ebp - 0x11d8]
mov ecx, 0xaca3b8
call fcn.004525c0
jmp 0x4b12b3
or dword [ebp - 4], 0xffffffff
jmp 0x4b12bd
mov eax, dword [ebp - 0x11e0]
mov ecx, dword [ebp - 0x11e8]
mov ecx, dword [ecx]
mov dword [eax], ecx
jmp 0x4b1301
mov eax, dword [ebp - 0x11f0]
mov dword [ebp - 0x11f8], eax
mov eax, dword [ebp - 0x11f8]
mov dword [ebp - 0x1200], eax
mov eax, dword [ebp - 0x1200]
movzx eax, byte [eax]
test eax, eax
je 0x4b1301
push 1
push 0x2350
call dword [sym.imp.USER32.dll_EnableWindow]
jmp 0x4b1337
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0x1208], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1210], eax
push dword [ebp - 0x1208]
push 0x4ea9
push dword [ebp - 0x1210]
push 0
push 1
push 0x17f3
call fcn.0048c944
add esp, 0x18
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret