Function at 0x4ada20
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
mov eax, 0x1460
call fcn.004d8d00
lea eax, [ebp - 0x10a4]
mov ecx, 0x20a
lea edx, [ebp - 0xe6e]
lea esi, [ebp - 0x646]
lea edi, [ebp - 0x850]
lea ebx, [ebp - 0x43c]
mov dword [ebp - 0x10cc], eax
lea eax, [ebp - 0xc64]
mov dword [ebp - 0x10d0], eax
mov eax, 0
mov dword [ebp - 0x10d4], eax
mov eax, 0x14
mov dword [ebp - 0x10d8], eax
lea eax, [ebp - 0x10a0]
mov dword [ebp - 0x10dc], eax
lea eax, [ebp - 0x108c]
mov dword [ebp - 0x10e0], eax
lea eax, [ebp - 0x1078]
mov dword [ebp - 0x10e4], eax
lea eax, [ebp - 0x232]
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x28], 0
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [ebp - 0x10e8], ebx
mov dword [ebp - 0x10ec], ecx
mov dword [ebp - 0x10f0], edx
mov dword [ebp - 0x10f4], esi
mov dword [ebp - 0x10f8], edi
call fcn.004d9580
mov eax, dword [ebp - 0x10e8]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.004d9580
mov eax, dword [ebp - 0x10f4]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.004d9580
mov eax, dword [ebp - 0x10f8]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.004d9580
mov eax, dword [ebp - 0x10d0]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.004d9580
mov eax, dword [ebp - 0x10f0]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.004d9580
mov eax, dword [ebp - 0x10e4]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
call fcn.004d9580
mov eax, dword [ebp - 0x10e0]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x14
call fcn.004d9580
mov eax, dword [ebp - 0x10dc]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x14
call fcn.004d9580
mov dword [ebp - 0x10ac], 0xffffffff
mov eax, dword [ebp - 0x10f0]
mov dword [esp], eax
mov ecx, dword [ebp - 0x10cc]
mov dword [esp + 4], ecx
mov edx, dword [ebp - 0x10f4]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0x20a
mov esi, dword [ebp - 0x10f8]
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], 0x20a
mov edi, dword [ebp - 0x10e8]
mov dword [esp + 0x18], edi
mov dword [esp + 0x1c], 0x20a
mov ebx, dword [ebp - 0x10d0]
mov dword [esp + 0x20], ebx
call fcn.004ab2b0
mov eax, 0x20a
lea ecx, [ebp - 0x1078]
mov dword [esp], ecx
mov dword [esp + 4], 0x20a
mov dword [ebp - 0x10fc], eax
call fcn.00410a60
lea eax, [ebp - 0x1078]
mov ecx, dword [0x4fc48c]
mov edx, esp
mov dword [edx + 8], eax
mov dword [edx + 4], 0
mov dword [edx], 0
call ecx
sub esp, 0xc
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10c8], 0x6ba09e82
mov eax, dword [ebp - 0x10c8]
mov ecx, eax
sub ecx, 0x83e7c036
mov dword [ebp - 0x1100], eax
mov dword [ebp - 0x1104], ecx
jg 0x4adce1
jmp 0x4adcc5
mov eax, dword [ebp - 0x1100]
sub eax, 0x80e1a931
mov dword [ebp - 0x1108], eax
je 0x4b0358
jmp 0x4aeb6d
mov eax, dword [ebp - 0x1100]
sub eax, 0x90662234
mov dword [ebp - 0x110c], eax
jg 0x4add19
jmp 0x4adcfd
mov eax, dword [ebp - 0x1100]
sub eax, 0x83e7c037
mov dword [ebp - 0x1110], eax
je 0x4b028c
jmp 0x4aeb6d
mov eax, dword [ebp - 0x1100]
sub eax, 0x970742cd
mov dword [ebp - 0x1114], eax
jg 0x4add51
jmp 0x4add35
mov eax, dword [ebp - 0x1100]
sub eax, 0x90662235
mov dword [ebp - 0x1118], eax
je 0x4b0323
jmp 0x4aeb6d
mov eax, dword [ebp - 0x1100]
sub eax, 0x99f1867f
mov dword [ebp - 0x111c], eax
jg 0x4add89
jmp 0x4add6d
mov eax, dword [ebp - 0x1100]
sub eax, 0x970742ce
mov dword [ebp - 0x1120], eax
je 0x4af5c0
jmp 0x4aeb6d
mov eax, dword [ebp - 0x1100]
sub eax, 0x9d69a3e6
mov dword [ebp - 0x1124], eax
jg 0x4addc1
jmp 0x4adda5
mov eax, dword [ebp - 0x1100]
sub eax, 0x99f18680
mov dword [ebp - 0x1128], eax
je 0x4af1f8
jmp 0x4aeb6d
mov eax, dword [ebp - 0x1100]
sub eax, 0xa5a5b5c8
mov dword [ebp - 0x112c], eax
jg 0x4addf9
jmp 0x4adddd
mov eax, dword [ebp - 0x1100]
sub eax, 0x9d69a3e7
mov dword [ebp - 0x1130], eax
je 0x4af44a
jmp 0x4aeb6d
mov eax, dword [ebp - 0x1100]
sub eax, 0xa60658e7
mov dword [ebp - 0x1134], eax
jg 0x4ade31
jmp 0x4ade15
mov eax, dword [ebp - 0x1100]
sub eax, 0xa5a5b5c9
mov dword [ebp - 0x1138], eax
je 0x4af265
jmp 0x4aeb6d
mov eax, dword [ebp - 0x1100]
sub eax, 0xac253c2e
mov dword [ebp - 0x113c], eax
jg 0x4ade69
jmp 0x4ade4d
mov eax, dword [ebp - 0x1100]
sub eax, 0xa60658e8
mov dword [ebp - 0x1140], eax
je 0x4b02b9
jmp 0x4aeb6d
mov eax, dword [ebp - 0x1100]
sub eax, 0xb0260950
mov dword [ebp - 0x1144], eax
jg 0x4adea1
jmp 0x4ade85
mov eax, dword [ebp - 0x1100]
sub eax, 0xac253c2f
mov dword [ebp - 0x1148], eax
je 0x4b0064
jmp 0x4aeb6d
mov eax, dword [ebp - 0x1100]
sub eax, 0xb2679a05
mov dword [ebp - 0x114c], eax
jg 0x4aded9
jmp 0x4adebd
mov eax, dword [ebp - 0x1100]
sub eax, 0xb0260951
mov dword [ebp - 0x1150], eax
je 0x4af5a7
jmp 0x4aeb6d
mov eax, dword [ebp - 0x1100]
sub eax, 0xb2b95138
mov dword [ebp - 0x1154], eax
jg 0x4adf11
jmp 0x4adef5
mov eax, dword [ebp - 0x1100]
sub eax, 0xb2679a06
mov dword [ebp - 0x1158], eax
je 0x4afe81
jmp 0x4aeb6d
mov eax, dword [ebp - 0x1100]
sub eax, 0xb3413323
mov dword [ebp - 0x115c], eax
jg 0x4adf49
jmp 0x4adf2d
mov eax, dword [ebp - 0x1100]
sub eax, 0xb2b95139
mov dword [ebp - 0x1160], eax
je 0x4afd0e
jmp 0x4aeb6d
mov eax, dword [ebp - 0x1100]
sub eax, 0xb9878527
mov dword [ebp - 0x1164], eax
jg 0x4adf81
jmp 0x4adf65
mov eax, dword [ebp - 0x1100]
sub eax, 0xb3413324
mov dword [ebp - 0x1168], eax
je 0x4aed74
jmp 0x4aeb6d
mov eax, dword [ebp - 0x1100]
sub eax, 0xbc30ec5a
mov dword [ebp - 0x116c], eax
jg 0x4adfb9
jmp 0x4adf9d
mov eax, dword [ebp - 0x1100]
sub eax, 0xb9878528
mov dword [ebp - 0x1170], eax
je 0x4af919
jmp 0x4aeb6d
mov eax, dword [ebp - 0x1100]
sub eax, 0xc906a6e8
mov dword [ebp - 0x1174], eax
jg 0x4adff1
jmp 0x4adfd5
mov eax, dword [ebp - 0x1100]
sub eax, 0xbc30ec5b
mov dword [ebp - 0x1178], eax
je 0x4afedf
jmp 0x4aeb6d
mov eax, dword [ebp - 0x1100]
sub eax, 0xc9d34bc7
mov dword [ebp - 0x117c], eax
jg 0x4ae029
jmp 0x4ae00d
mov eax, dword [ebp - 0x1100]
sub eax, 0xc906a6e9
mov dword [ebp - 0x1180], eax
je 0x4af8fb
jmp 0x4aeb6d
mov eax, dword [ebp - 0x1100]
sub eax, 0xcad63947
mov dword [ebp - 0x1184], eax
jg 0x4ae061
jmp 0x4ae045
mov eax, dword [ebp - 0x1100]
sub eax, 0xc9d34bc8
mov dword [ebp - 0x1188], eax
je 0x4af9b2
jmp 0x4aeb6d
mov eax, dword [ebp - 0x1100]
sub eax, 0xcf633884
mov dword [ebp - 0x118c], eax
jg 0x4ae099
jmp 0x4ae07d
mov eax, dword [ebp - 0x1100]
sub eax, 0xcad63948
mov dword [ebp - 0x1190], eax
je 0x4af353
jmp 0x4aeb6d
mov eax, dword [ebp - 0x1100]
sub eax, 0xd3bc53a9
mov dword [ebp - 0x1194], eax
jg 0x4ae0d1
jmp 0x4ae0b5
mov eax, dword [ebp - 0x1100]
sub eax, 0xcf633885
mov dword [ebp - 0x1198], eax
je 0x4aff9b
jmp 0x4aeb6d
mov eax, dword [ebp - 0x1100]
sub eax, 0xd7758411
mov dword [ebp - 0x119c], eax
jg 0x4ae109
jmp 0x4ae0ed
mov eax, dword [ebp - 0x1100]
sub eax, 0xd3bc53aa
mov dword [ebp - 0x11a0], eax
je 0x4afbe9
jmp 0x4aeb6d
mov eax, dword [ebp - 0x1100]
sub eax, 0xda99d5d6
mov dword [ebp - 0x11a4], eax
jg 0x4ae141
jmp 0x4ae125
mov eax, dword [ebp - 0x1100]
sub eax, 0xd7758412
mov dword [ebp - 0x11a8], eax
je 0x4aff4f
jmp 0x4aeb6d
mov eax, dword [ebp - 0x1100]
sub eax, 0xde701496
mov dword [ebp - 0x11ac], eax
jg 0x4ae179
jmp 0x4ae15d
mov eax, dword [ebp - 0x1100]
sub eax, 0xda99d5d7
mov dword [ebp - 0x11b0], eax
je 0x4b02d7
jmp 0x4aeb6d
mov eax, dword [ebp - 0x1100]
sub eax, 0xe4bbd348
mov dword [ebp - 0x11b4], eax
jg 0x4ae1b1
jmp 0x4ae195
mov eax, dword [ebp - 0x1100]
sub eax, 0xde701497
mov dword [ebp - 0x11b8], eax
je 0x4afaa8
jmp 0x4aeb6d
mov eax, dword [ebp - 0x1100]
sub eax, 0xefcf20d5
mov dword [ebp - 0x11bc], eax
jg 0x4ae1e9
jmp 0x4ae1cd
mov eax, dword [ebp - 0x1100]
sub eax, 0xe4bbd349
mov dword [ebp - 0x11c0], eax
je 0x4af6e4
jmp 0x4aeb6d
mov eax, dword [ebp - 0x1100]
sub eax, 0xf2d432c0
mov dword [ebp - 0x11c4], eax
jg 0x4ae221
jmp 0x4ae205
mov eax, dword [ebp - 0x1100]
sub eax, 0xefcf20d6
mov dword [ebp - 0x11c8], eax
je 0x4af078
jmp 0x4aeb6d
mov eax, dword [ebp - 0x1100]
sub eax, 0xf6c6a6b6
mov dword [ebp - 0x11cc], eax
jg 0x4ae259
jmp 0x4ae23d
mov eax, dword [ebp - 0x1100]
sub eax, 0xf2d432c1
mov dword [ebp - 0x11d0], eax
je 0x4aed83
jmp 0x4aeb6d
mov eax, dword [ebp - 0x1100]
sub eax, 0xfab31ac5
mov dword [ebp - 0x11d4], eax
jg 0x4ae291
jmp 0x4ae275
mov eax, dword [ebp - 0x1100]
sub eax, 0xf6c6a6b7
mov dword [ebp - 0x11d8], eax
je 0x4aeba2
jmp 0x4aeb6d
mov eax, dword [ebp - 0x1100]
sub eax, 0xffb5647b
mov dword [ebp - 0x11dc], eax
jg 0x4ae2c9
jmp 0x4ae2ad
mov eax, dword [ebp - 0x1100]
sub eax, 0xfab31ac6
mov dword [ebp - 0x11e0], eax
je 0x4af825
jmp 0x4aeb6d
mov eax, dword [ebp - 0x1100]
sub eax, 0x6205a1
mov dword [ebp - 0x11e4], eax
jg 0x4ae301
jmp 0x4ae2e5
mov eax, dword [ebp - 0x1100]
sub eax, 0xffb5647c
mov dword [ebp - 0x11e8], eax
je 0x4af3ac
jmp 0x4aeb6d
mov eax, dword [ebp - 0x1100]
sub eax, 0x31386d4
mov dword [ebp - 0x11ec], eax
jg 0x4ae339
jmp 0x4ae31d
mov eax, dword [ebp - 0x1100]
sub eax, 0x6205a2
mov dword [ebp - 0x11f0], eax
je 0x4afe62
jmp 0x4aeb6d
mov eax, dword [ebp - 0x1100]
sub eax, 0x91056d6
mov dword [ebp - 0x11f4], eax
jg 0x4ae371
jmp 0x4ae355
mov eax, dword [ebp - 0x1100]
sub eax, 0x31386d5
mov dword [ebp - 0x11f8], eax
je 0x4b006f
jmp 0x4aeb6d
mov eax, dword [ebp - 0x1100]
sub eax, 0xeb33072
mov dword [ebp - 0x11fc], eax
jg 0x4ae3a9
jmp 0x4ae38d
mov eax, dword [ebp - 0x1100]
sub eax, 0x91056d7
mov dword [ebp - 0x1200], eax
je 0x4af598
jmp 0x4aeb6d
mov eax, dword [ebp - 0x1100]
sub eax, 0xf01d6e1
mov dword [ebp - 0x1204], eax
jg 0x4ae3e1
jmp 0x4ae3c5
mov eax, dword [ebp - 0x1100]
sub eax, 0xeb33073
mov dword [ebp - 0x1208], eax
je 0x4af096
jmp 0x4aeb6d
mov eax, dword [ebp - 0x1100]
sub eax, 0x119d1838
mov dword [ebp - 0x120c], eax
jg 0x4ae419
jmp 0x4ae3fd
mov eax, dword [ebp - 0x1100]
sub eax, 0xf01d6e2
mov dword [ebp - 0x1210], eax
je 0x4afb6a
jmp 0x4aeb6d
mov eax, dword [ebp - 0x1100]
sub eax, 0x17976846
mov dword [ebp - 0x1214], eax
jg 0x4ae451
jmp 0x4ae435
mov eax, dword [ebp - 0x1100]
sub eax, 0x119d1839
mov dword [ebp - 0x1218], eax
je 0x4afbda
jmp 0x4aeb6d
mov eax, dword [ebp - 0x1100]
sub eax, 0x189e07a4
mov dword [ebp - 0x121c], eax
jg 0x4ae489
jmp 0x4ae46d
mov eax, dword [ebp - 0x1100]
sub eax, 0x17976847
mov dword [ebp - 0x1220], eax
je 0x4af6f3
jmp 0x4aeb6d
mov eax, dword [ebp - 0x1100]
sub eax, 0x1b729809
mov dword [ebp - 0x1224], eax
jg 0x4ae4c1
jmp 0x4ae4a5
mov eax, dword [ebp - 0x1100]
sub eax, 0x189e07a5
mov dword [ebp - 0x1228], eax
je 0x4b0006
jmp 0x4aeb6d
mov eax, dword [ebp - 0x1100]
sub eax, 0x242f05db
mov dword [ebp - 0x122c], eax
jg 0x4ae4f9
jmp 0x4ae4dd
mov eax, dword [ebp - 0x1100]
sub eax, 0x1b72980a
mov dword [ebp - 0x1230], eax
je 0x4af459
jmp 0x4aeb6d
mov eax, dword [ebp - 0x1100]
sub eax, 0x26dbfd12
mov dword [ebp - 0x1234], eax
jg 0x4ae531
jmp 0x4ae515
mov eax, dword [ebp - 0x1100]
sub eax, 0x242f05dc
mov dword [ebp - 0x1238], eax
je 0x4b037e
jmp 0x4aeb6d
mov eax, dword [ebp - 0x1100]
sub eax, 0x28ef3cfd
mov dword [ebp - 0x123c], eax
jg 0x4ae569
jmp 0x4ae54d
mov eax, dword [ebp - 0x1100]
sub eax, 0x26dbfd13
mov dword [ebp - 0x1240], eax
je 0x4aff5e
jmp 0x4aeb6d
mov eax, dword [ebp - 0x1100]
sub eax, 0x29005fec
mov dword [ebp - 0x1244], eax
jg 0x4ae5a1
jmp 0x4ae585
mov eax, dword [ebp - 0x1100]
sub eax, 0x28ef3cfe
mov dword [ebp - 0x1248], eax
je 0x4afac7
jmp 0x4aeb6d
mov eax, dword [ebp - 0x1100]
sub eax, 0x30a786ff
mov dword [ebp - 0x124c], eax
jg 0x4ae5d9
jmp 0x4ae5bd
mov eax, dword [ebp - 0x1100]
sub eax, 0x29005fed
mov dword [ebp - 0x1250], eax
je 0x4af88d
jmp 0x4aeb6d
mov eax, dword [ebp - 0x1100]
sub eax, 0x3321d62e
mov dword [ebp - 0x1254], eax
jg 0x4ae611
jmp 0x4ae5f5
mov eax, dword [ebp - 0x1100]
sub eax, 0x30a78700
mov dword [ebp - 0x1258], eax
je 0x4af834
jmp 0x4aeb6d
mov eax, dword [ebp - 0x1100]
sub eax, 0x3ed1b819
mov dword [ebp - 0x125c], eax
jg 0x4ae649
jmp 0x4ae62d
mov eax, dword [ebp - 0x1100]
sub eax, 0x3321d62f
mov dword [ebp - 0x1260], eax
je 0x4af326
jmp 0x4aeb6d
mov eax, dword [ebp - 0x1100]
sub eax, 0x46496a87
mov dword [ebp - 0x1264], eax
jg 0x4ae681
jmp 0x4ae665
mov eax, dword [ebp - 0x1100]
sub eax, 0x3ed1b81a
mov dword [ebp - 0x1268], eax
je 0x4aec3b
jmp 0x4aeb6d
mov eax, dword [ebp - 0x1100]
sub eax, 0x4869f979
mov dword [ebp - 0x126c], eax
jg 0x4ae6b9
jmp 0x4ae69d
mov eax, dword [ebp - 0x1100]
sub eax, 0x46496a88
mov dword [ebp - 0x1270], eax
je 0x4af0f2
jmp 0x4aeb6d
mov eax, dword [ebp - 0x1100]
sub eax, 0x48d8755d
mov dword [ebp - 0x1274], eax
jg 0x4ae6f1
jmp 0x4ae6d5
mov eax, dword [ebp - 0x1100]
sub eax, 0x4869f97a
mov dword [ebp - 0x1278], eax
je 0x4af344
jmp 0x4aeb6d
mov eax, dword [ebp - 0x1100]
sub eax, 0x4c525a78
mov dword [ebp - 0x127c], eax
jg 0x4ae729
jmp 0x4ae70d
mov eax, dword [ebp - 0x1100]
sub eax, 0x48d8755e
mov dword [ebp - 0x1280], eax
je 0x4afa99
jmp 0x4aeb6d
mov eax, dword [ebp - 0x1100]
sub eax, 0x527c9399
mov dword [ebp - 0x1284], eax
jg 0x4ae761
jmp 0x4ae745
mov eax, dword [ebp - 0x1100]
sub eax, 0x4c525a79
mov dword [ebp - 0x1288], eax
je 0x4afd6c
jmp 0x4aeb6d
mov eax, dword [ebp - 0x1100]
sub eax, 0x52e181ef
mov dword [ebp - 0x128c], eax
jg 0x4ae799
jmp 0x4ae77d
mov eax, dword [ebp - 0x1100]
sub eax, 0x527c939a
mov dword [ebp - 0x1290], eax
je 0x4afe53
jmp 0x4aeb6d
mov eax, dword [ebp - 0x1100]
sub eax, 0x5a0b7e7f
mov dword [ebp - 0x1294], eax
jg 0x4ae7d1
jmp 0x4ae7b5
mov eax, dword [ebp - 0x1100]
sub eax, 0x52e181f0
mov dword [ebp - 0x1298], eax
je 0x4af0a5
jmp 0x4aeb6d
mov eax, dword [ebp - 0x1100]
sub eax, 0x5a52ff3b
mov dword [ebp - 0x129c], eax
jg 0x4ae809
jmp 0x4ae7ed
mov eax, dword [ebp - 0x1100]
sub eax, 0x5a0b7e80
mov dword [ebp - 0x12a0], eax
je 0x4b02fd
jmp 0x4aeb6d
mov eax, dword [ebp - 0x1100]
sub eax, 0x5af84faf
mov dword [ebp - 0x12a4], eax
jg 0x4ae841
jmp 0x4ae825
mov eax, dword [ebp - 0x1100]
sub eax, 0x5a52ff3c
mov dword [ebp - 0x12a8], eax
je 0x4aee26
jmp 0x4aeb6d
mov eax, dword [ebp - 0x1100]
sub eax, 0x6149e2cc
mov dword [ebp - 0x12ac], eax
jg 0x4ae879
jmp 0x4ae85d
mov eax, dword [ebp - 0x1100]
sub eax, 0x5af84fb0
mov dword [ebp - 0x12b0], eax
je 0x4b0332
jmp 0x4aeb6d
mov eax, dword [ebp - 0x1100]
sub eax, 0x63dce040
mov dword [ebp - 0x12b4], eax
jg 0x4ae8b1
jmp 0x4ae895
mov eax, dword [ebp - 0x1100]
sub eax, 0x6149e2cd
mov dword [ebp - 0x12b8], eax
je 0x4af101
jmp 0x4aeb6d
mov eax, dword [ebp - 0x1100]
sub eax, 0x66b07156
mov dword [ebp - 0x12bc], eax
jg 0x4ae8e9
jmp 0x4ae8cd
mov eax, dword [ebp - 0x1100]
sub eax, 0x63dce041
mov dword [ebp - 0x12c0], eax
je 0x4afcf0
jmp 0x4aeb6d
mov eax, dword [ebp - 0x1100]
sub eax, 0x67fe3d06
mov dword [ebp - 0x12c4], eax
jg 0x4ae921
jmp 0x4ae905
mov eax, dword [ebp - 0x1100]
sub eax, 0x66b07157
mov dword [ebp - 0x12c8], eax
je 0x4b02c8
jmp 0x4aeb6d
mov eax, dword [ebp - 0x1100]
sub eax, 0x69f7bb61
mov dword [ebp - 0x12cc], eax
jg 0x4ae959
jmp 0x4ae93d
mov eax, dword [ebp - 0x1100]
sub eax, 0x67fe3d07
mov dword [ebp - 0x12d0], eax
je 0x4af207
jmp 0x4aeb6d
mov eax, dword [ebp - 0x1100]
sub eax, 0x6a7e2e26
mov dword [ebp - 0x12d4], eax
jg 0x4ae991
jmp 0x4ae975
mov eax, dword [ebp - 0x1100]
sub eax, 0x69f7bb62
mov dword [ebp - 0x12d8], eax
je 0x4aed34
jmp 0x4aeb6d
mov eax, dword [ebp - 0x1100]
sub eax, 0x6ba09e81
mov dword [ebp - 0x12dc], eax
jg 0x4ae9c9
jmp 0x4ae9ad
mov eax, dword [ebp - 0x1100]
sub eax, 0x6a7e2e27
mov dword [ebp - 0x12e0], eax
je 0x4aed52
jmp 0x4aeb6d
mov eax, dword [ebp - 0x1100]
sub eax, 0x6cfaa91a
mov dword [ebp - 0x12e4], eax
jg 0x4aea01
jmp 0x4ae9e5
mov eax, dword [ebp - 0x1100]
sub eax, 0x6ba09e82
mov dword [ebp - 0x12e8], eax
je 0x4aeb72
jmp 0x4aeb6d
mov eax, dword [ebp - 0x1100]
sub eax, 0x6f7b0a7f
mov dword [ebp - 0x12ec], eax
jg 0x4aea39
jmp 0x4aea1d
mov eax, dword [ebp - 0x1100]
sub eax, 0x6cfaa91b
mov dword [ebp - 0x12f0], eax
je 0x4aeb93
jmp 0x4aeb6d
mov eax, dword [ebp - 0x1100]
sub eax, 0x72be695a
mov dword [ebp - 0x12f4], eax
jg 0x4aea71
jmp 0x4aea55
mov eax, dword [ebp - 0x1100]
sub eax, 0x6f7b0a80
mov dword [ebp - 0x12f8], eax
je 0x4b009c
jmp 0x4aeb6d
mov eax, dword [ebp - 0x1100]
sub eax, 0x75c80731
mov dword [ebp - 0x12fc], eax
jg 0x4aeaa9
jmp 0x4aea8d
mov eax, dword [ebp - 0x1100]
sub eax, 0x72be695b
mov dword [ebp - 0x1300], eax
je 0x4affad
jmp 0x4aeb6d
mov eax, dword [ebp - 0x1100]
sub eax, 0x78cf7396
mov dword [ebp - 0x1304], eax
jg 0x4aeae1
jmp 0x4aeac5
mov eax, dword [ebp - 0x1100]
sub eax, 0x75c80732
mov dword [ebp - 0x1308], eax
je 0x4af6d5
jmp 0x4aeb6d
mov eax, dword [ebp - 0x1100]
sub eax, 0x7c058e36
mov dword [ebp - 0x130c], eax
jg 0x4aeb19
jmp 0x4aeafd
mov eax, dword [ebp - 0x1100]
sub eax, 0x78cf7397
mov dword [ebp - 0x1310], eax
je 0x4b021e
jmp 0x4aeb6d
mov eax, dword [ebp - 0x1100]
sub eax, 0x7c058e37
mov dword [ebp - 0x1314], eax
je 0x4af78c
jmp 0x4aeb35
mov eax, dword [ebp - 0x1100]
sub eax, 0x7fd9ad4b
mov dword [ebp - 0x1318], eax
je 0x4af42c
jmp 0x4aeb51
mov eax, dword [ebp - 0x1100]
sub eax, 0x7fdbc1a2
mov dword [ebp - 0x131c], eax
je 0x4afc47
jmp 0x4aeb6d
jmp 0x4b0388
mov eax, 0xf6c6a6b7
mov ecx, 0x6cfaa91b
mov edx, dword [ebp - 0x18]
cmp edx, 0
cmove eax, ecx
mov dword [ebp - 0x10c8], eax
jmp 0x4b0388
mov dword [ebp - 0x10c8], 0x970742ce
jmp 0x4b0388
mov eax, 0x31386d5
mov ecx, 0x3ed1b81a
mov dl, 1
mov esi, dword [0x4fc1a0]
mov edi, dword [0x4fc19c]
mov ebx, esi
sub ebx, 0x7603f1cf
sub ebx, 1
add ebx, 0x7603f1cf
imul esi, ebx
and esi, 1
cmp esi, 0
sete dh
cmp edi, 0xa
setl bl
mov bh, dh
xor bh, 1
mov dword [ebp - 0x1320], eax
mov al, bl
xor al, 1
xor dl, 1
mov ah, bh
and ah, 1
and dh, dl
mov byte [ebp - 0x1321], al
and al, 1
and bl, dl
or ah, dh
or al, bl
xor ah, al
mov al, byte [ebp - 0x1321]
or bh, al
xor bh, 1
or dl, 1
and bh, dl
or ah, bh
test ah, 1
mov esi, dword [ebp - 0x1320]
cmovne esi, ecx
mov dword [ebp - 0x10c8], esi
jmp 0x4b0388
mov eax, dword [0x4fc4a8]
mov ecx, dword [ebp - 0x20]
mov edx, esp
mov dword [edx], ecx
mov dword [edx + 4], 0xffffffff
call eax
sub esp, 8
mov ecx, 0x31386d5
mov edx, 0x69f7bb62
mov bl, 1
mov dword [ebp - 0x10a8], eax
cmp dword [ebp - 0x10a8], 0
setne bh
and bh, 1
mov byte [ebp - 0x12], bh
mov eax, dword [0x4fc1a0]
mov esi, dword [0x4fc19c]
mov edi, eax
sub edi, 0x858dd123
sub edi, 1
add edi, 0x858dd123
imul eax, edi
and eax, 1
cmp eax, 0
sete bh
cmp esi, 0xa
setl al
mov ah, bh
xor ah, 1
mov byte [ebp - 0x1322], al
xor al, 1
xor bl, 0
mov byte [ebp - 0x1323], al
mov al, ah
and al, 0
and bh, bl
mov byte [ebp - 0x1324], al
mov al, byte [ebp - 0x1323]
and al, 0
mov byte [ebp - 0x1325], al
mov al, byte [ebp - 0x1322]
and al, bl
mov byte [ebp - 0x1326], al
mov al, byte [ebp - 0x1324]
or al, bh
mov bh, byte [ebp - 0x1325]
mov byte [ebp - 0x1327], al
mov al, byte [ebp - 0x1326]
or bh, al
mov al, byte [ebp - 0x1327]
xor al, bh
mov bh, byte [ebp - 0x1323]
or ah, bh
xor ah, 1
or bl, 0
and ah, bl
or al, ah
test al, 1
cmovne ecx, edx
mov dword [ebp - 0x10c8], ecx
jmp 0x4b0388
mov eax, 0xf2d432c1
mov ecx, 0x6a7e2e27
mov dl, byte [ebp - 0x12]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c8], eax
jmp 0x4b0388
mov eax, 0xf2d432c1
mov ecx, 0xb3413324
cmp dword [ebp - 0x10a8], 0x80
cmovne eax, ecx
mov dword [ebp - 0x10c8], eax
jmp 0x4b0388
mov dword [ebp - 0x10c8], 0x970742ce
jmp 0x4b0388
mov eax, 0x6f7b0a80
mov ecx, 0x5a52ff3c
mov dl, 1
mov esi, 0
mov edi, dword [0x4fc1a0]
mov ebx, dword [0x4fc19c]
sub esi, 1
mov dword [ebp - 0x132c], eax
mov eax, edi
add eax, esi
imul edi, eax
and edi, 1
cmp edi, 0
sete dh
cmp ebx, 0xa
setl al
mov ah, dh
xor ah, 1
mov bl, al
xor bl, 1
xor dl, 0
mov bh, ah
and bh, 0
and dh, dl
mov byte [ebp - 0x132d], al
mov al, bl
and al, 0
mov byte [ebp - 0x132e], al
mov al, byte [ebp - 0x132d]
and al, dl
or bh, dh
mov dh, byte [ebp - 0x132e]
or dh, al
xor bh, dh
or ah, bl
xor ah, 1
or dl, 0
and ah, dl
or bh, ah
test bh, 1
mov esi, dword [ebp - 0x132c]
cmovne esi, ecx
mov dword [ebp - 0x10c8], esi
jmp 0x4b0388
mov eax, 0
mov ecx, 0x20a
lea edx, [ebp - 0xa5a]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [ebp - 0x1334], eax
mov dword [ebp - 0x1338], ecx
call fcn.0040c560
mov ecx, 0x104
lea edx, [0x4ebb6a]
mov esi, 3
lea edi, [ebp - 0xa5a]
mov dword [esp], edi
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], 3
mov dword [ebp - 0x133c], eax
mov dword [ebp - 0x1340], ecx
mov dword [ebp - 0x1344], esi
call fcn.0040cc10
lea ecx, [ebp - 0x43c]
mov dword [esp], ecx
mov dword [ebp - 0x1348], eax
call fcn.0040dcf0
mov ecx, 0x101
lea edx, [ebp - 0xa5a]
lea esi, [ebp - 0x43c]
add edx, 6
mov dword [esp], edx
mov dword [esp + 4], 0x101
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [ebp - 0x134c], ecx
call fcn.0040cc10
lea ecx, [ebp - 0x232]
mov edx, 0
mov esi, dword [0x4ee7c8]
movzx esi, word [esi]
mov dword [ebp - 0x10b0], esi
mov esi, dword [ebp - 0x10b0]
sub edx, 1
sub esi, edx
mov edx, dword [0x4ee7c8]
movzx edx, word [edx + esi*2]
mov dword [ebp - 0x10b4], edx
mov edx, dword [ebp - 0x10b4]
mov esi, dword [0x4ee7c8]
mov edi, dword [ebp - 0x10b0]
shl edi, 1
add esi, edi
add esi, 4
mov edi, dword [0x4ee7c8]
add edi, 2
mov ebx, dword [ebp - 0x10b0]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edx
mov dword [ebp - 0x1350], eax
call fcn.0040a7e0
lea eax, [ebp - 0x646]
mov ecx, dword [0x4fc4b4]
mov edx, esp
mov dword [edx + 8], 0
mov dword [edx + 0xc], eax
mov dword [edx + 4], 0
mov dword [edx], 0
call ecx
sub esp, 0x10
mov ecx, 0x6f7b0a80
mov edx, 0xefcf20d6
mov bl, 1
mov esi, 0
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
sete bh
and bh, 1
mov byte [ebp - 0x11], bh
mov eax, dword [0x4fc1a0]
mov edi, dword [0x4fc19c]
sub esi, 1
mov dword [ebp - 0x1354], eax
add eax, esi
mov esi, dword [ebp - 0x1354]
imul esi, eax
and esi, 1
cmp esi, 0
sete bh
cmp edi, 0xa
setl al
mov ah, bh
xor ah, 1
mov byte [ebp - 0x1355], al
xor al, 1
xor bl, 1
mov byte [ebp - 0x1356], al
mov al, ah
and al, 1
and bh, bl
mov byte [ebp - 0x1357], al
mov al, byte [ebp - 0x1356]
and al, 1
mov byte [ebp - 0x1358], al
mov al, byte [ebp - 0x1355]
and al, bl
mov byte [ebp - 0x1359], al
mov al, byte [ebp - 0x1357]
or al, bh
mov bh, byte [ebp - 0x1358]
mov byte [ebp - 0x135a], al
mov al, byte [ebp - 0x1359]
or bh, al
mov al, byte [ebp - 0x135a]
xor al, bh
mov bh, byte [ebp - 0x1356]
or ah, bh
xor ah, 1
or bl, 1
and ah, bl
or al, ah
test al, 1
cmovne ecx, edx
mov dword [ebp - 0x10c8], ecx
jmp 0x4b0388
mov eax, 0x52e181f0
mov ecx, 0xeb33073
mov dl, byte [ebp - 0x11]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c8], eax
jmp 0x4b0388
mov dword [ebp - 0x10c8], 0x970742ce
jmp 0x4b0388
lea eax, [ebp - 0x1c]
lea ecx, [ebp - 0x28]
lea edx, [ebp - 0xe6e]
lea esi, [ebp - 0x646]
mov edi, dword [ebp - 0x10a4]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], esi
call fcn.004ad260
mov ecx, 0x6149e2cd
mov edx, 0x46496a88
cmp eax, 0
cmovl ecx, edx
mov dword [ebp - 0x10c8], ecx
jmp 0x4b0388
mov dword [ebp - 0x10c8], 0x970742ce
jmp 0x4b0388
lea eax, [ebp - 0x108c]
mov ecx, 0
mov edx, dword [0x4ee7cc]
movzx edx, word [edx]
mov dword [ebp - 0x10b8], edx
mov edx, dword [ebp - 0x10b8]
sub ecx, 1
sub edx, ecx
mov ecx, dword [0x4ee7cc]
movzx ecx, word [ecx + edx*2]
mov dword [ebp - 0x10bc], ecx
mov ecx, dword [ebp - 0x10bc]
mov edx, dword [0x4ee7cc]
mov esi, dword [ebp - 0x10b8]
shl esi, 1
add edx, esi
add edx, 4
mov esi, dword [0x4ee7cc]
add esi, 2
mov edi, dword [ebp - 0x10b8]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], esi
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
call fcn.0040a7e0
mov eax, 0x40
mov ecx, 0
mov edx, 1
lea esi, [ebp - 0x232]
lea edi, [ebp - 0xa5a]
lea ebx, [ebp - 0x108c]
mov dword [esp], esi
mov dword [esp + 4], edi
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 0x40
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 1
mov dword [ebp - 0x1360], eax
mov dword [ebp - 0x1364], ecx
mov dword [ebp - 0x1368], edx
call fcn.004ac770
mov ecx, 0x67fe3d07
mov edx, 0x99f18680
cmp eax, 0
cmovl ecx, edx
mov dword [ebp - 0x10c8], ecx
jmp 0x4b0388
mov dword [ebp - 0x10c8], 0x970742ce
jmp 0x4b0388
mov eax, 0x78cf7397
mov ecx, 0xa5a5b5c9
mov edx, dword [0x4fc1a0]
mov esi, dword [0x4fc19c]
mov edi, edx
add edi, 0xaf99ee26
sub edi, 1
sub edi, 0xaf99ee26
imul edx, edi
and edx, 1
cmp edx, 0
sete bl
cmp esi, 0xa
setl bh
mov dl, bl
and dl, bh
xor bl, bh
or dl, bl
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c8], eax
jmp 0x4b0388
mov eax, 0
mov ecx, 0x40
mov edx, 1
lea esi, [ebp - 0xc64]
lea edi, [ebp - 0x108c]
mov dword [esp], esi
mov dword [esp + 4], 0
mov dword [esp + 8], edi
mov dword [esp + 0xc], 0x40
mov dword [esp + 0x10], 1
mov dword [esp + 0x14], 1
mov dword [ebp - 0x136c], eax
mov dword [ebp - 0x1370], ecx
mov dword [ebp - 0x1374], edx
call fcn.004ac770
mov ecx, 0x78cf7397
mov edx, 0x3321d62f
cmp eax, 0
setl bl
and bl, 1
mov byte [ebp - 0x10], bl
mov eax, dword [0x4fc1a0]
mov esi, dword [0x4fc19c]
mov edi, eax
add edi, 0xe2d7b0d0
sub edi, 1
sub edi, 0xe2d7b0d0
imul eax, edi
and eax, 1
cmp eax, 0
sete bl
cmp esi, 0xa
setl bh
mov al, bl
and al, bh
xor bl, bh
or al, bl
test al, 1
cmovne ecx, edx
mov dword [ebp - 0x10c8], ecx
jmp 0x4b0388
mov eax, 0xcad63948
mov ecx, 0x4869f97a
mov dl, byte [ebp - 0x10]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c8], eax
jmp 0x4b0388
mov dword [ebp - 0x10c8], 0x970742ce
jmp 0x4b0388
mov eax, 0x83e7c037
mov ecx, 0xffb5647c
mov edx, 0
mov esi, dword [0x4fc1a0]
mov edi, dword [0x4fc19c]
sub edx, 1
mov ebx, esi
add ebx, edx
imul esi, ebx
and esi, 1
cmp esi, 0
sete dl
cmp edi, 0xa
setl dh
mov bl, dl
and bl, dh
xor dl, dh
or bl, dl
test bl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c8], eax
jmp 0x4b0388
mov eax, dword [0x4fc4a8]
mov ecx, dword [ebp - 0x24]
mov edx, esp
mov dword [edx], ecx
mov dword [edx + 4], 0xffffffff
call eax
sub esp, 8
mov ecx, 0x83e7c037
mov edx, 0x7fd9ad4b
cmp eax, 0
setne bl
and bl, 1
mov byte [ebp - 0xf], bl
mov eax, dword [0x4fc1a0]
mov esi, dword [0x4fc19c]
mov edi, eax
sub edi, 0x8533bf5f
sub edi, 1
add edi, 0x8533bf5f
imul eax, edi
and eax, 1
cmp eax, 0
sete bl
cmp esi, 0xa
setl bh
mov al, bl
and al, bh
xor bl, bh
or al, bl
test al, 1
cmovne ecx, edx
mov dword [ebp - 0x10c8], ecx
jmp 0x4b0388
mov eax, 0x1b72980a
mov ecx, 0x9d69a3e7
mov dl, byte [ebp - 0xf]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c8], eax
jmp 0x4b0388
mov dword [ebp - 0x10c8], 0x17976847
jmp 0x4b0388
mov eax, 0
mov ecx, 0x20a
lea edx, [ebp - 0xa5a]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [ebp - 0x1378], eax
mov dword [ebp - 0x137c], ecx
call fcn.0040c560
mov ecx, 0x104
lea edx, [0x4ebcb2]
mov esi, 6
lea edi, [ebp - 0xa5a]
mov dword [esp], edi
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], 6
mov dword [ebp - 0x1380], eax
mov dword [ebp - 0x1384], ecx
mov dword [ebp - 0x1388], esi
call fcn.0040cc10
lea ecx, [ebp - 0x43c]
mov dword [esp], ecx
mov dword [ebp - 0x138c], eax
call fcn.0040dcf0
mov ecx, 0xfe
lea edx, [ebp - 0xa5a]
lea esi, [ebp - 0x43c]
add edx, 0xc
mov dword [esp], edx
mov dword [esp + 4], 0xfe
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [ebp - 0x1390], ecx
call fcn.0040cc10
mov ecx, 0x40
mov edx, 0
mov esi, 1
lea edi, [ebp - 0x232]
lea ebx, [ebp - 0xa5a]
mov dword [ebp - 0x1394], eax
lea eax, [ebp - 0x108c]
mov dword [esp], edi
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x40
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 1
mov dword [ebp - 0x1398], esi
mov dword [ebp - 0x139c], ecx
mov dword [ebp - 0x13a0], edx
call fcn.004ac770
mov ecx, 0xb0260951
mov edx, 0x91056d7
cmp eax, 0
cmovl ecx, edx
mov dword [ebp - 0x10c8], ecx
jmp 0x4b0388
mov dword [ebp - 0x10c8], 0x970742ce
jmp 0x4b0388
mov dword [ebp - 0x10ac], 1
mov dword [ebp - 0x10c8], 0x30a78700
jmp 0x4b0388
lea eax, [ebp - 0x850]
mov ecx, dword [0x4fc4b0]
mov edx, esp
mov dword [edx], eax
call ecx
sub esp, 4
lea ecx, [ebp - 0x10a0]
mov edx, dword [0x4ee7d0]
movzx edx, word [edx]
mov dword [ebp - 0x10c0], edx
mov edx, dword [ebp - 0x10c0]
add edx, 0x9950f517
add edx, 1
sub edx, 0x9950f517
mov esi, dword [0x4ee7d0]
movzx edx, word [esi + edx*2]
mov dword [ebp - 0x10c4], edx
mov edx, dword [ebp - 0x10c4]
mov esi, dword [0x4ee7d0]
mov edi, dword [ebp - 0x10c0]
shl edi, 1
add esi, edi
add esi, 4
mov edi, dword [0x4ee7d0]
add edi, 2
mov ebx, dword [ebp - 0x10c0]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edx
mov dword [ebp - 0x13a4], eax
call fcn.0040a7e0
mov eax, 0
mov ecx, 0x4540
mov edx, 1
lea esi, [ebp - 0xe6e]
lea edi, [ebp - 0x10a0]
mov dword [esp], esi
mov dword [esp + 4], 0
mov dword [esp + 8], edi
mov dword [esp + 0xc], 0x4540
mov dword [esp + 0x10], 1
mov dword [esp + 0x14], 0
mov dword [ebp - 0x13a8], eax
mov dword [ebp - 0x13ac], ecx
mov dword [ebp - 0x13b0], edx
call fcn.004ac770
mov ecx, 0xe4bbd349
mov edx, 0x75c80732
cmp eax, 0
cmovl ecx, edx
mov dword [ebp - 0x10c8], ecx
jmp 0x4b0388
mov dword [ebp - 0x10c8], 0x970742ce
jmp 0x4b0388
mov dword [ebp - 0x10c8], 0x17976847
jmp 0x4b0388
mov eax, 0xa60658e8
mov ecx, 0x7c058e37
mov dl, 1
mov esi, dword [0x4fc1a0]
mov edi, dword [0x4fc19c]
mov ebx, esi
add ebx, 0xba68e4f
sub ebx, 1
sub ebx, 0xba68e4f
imul esi, ebx
and esi, 1
cmp esi, 0
sete dh
cmp edi, 0xa
setl bl
mov bh, dh
xor bh, 1
mov dword [ebp - 0x13b4], eax
mov al, bl
xor al, 1
xor dl, 1
mov ah, bh
and ah, 1
and dh, dl
mov byte [ebp - 0x13b5], al
and al, 1
and bl, dl
or ah, dh
or al, bl
xor ah, al
mov al, byte [ebp - 0x13b5]
or bh, al
xor bh, 1
or dl, 1
and bh, dl
or ah, bh
test ah, 1
mov esi, dword [ebp - 0x13b4]
cmovne esi, ecx
mov dword [ebp - 0x10c8], esi
jmp 0x4b0388
mov eax, 0xa60658e8
mov ecx, 0xfab31ac6
mov dl, 1
mov esi, dword [0x4fc1a0]
mov edi, dword [0x4fc19c]
mov ebx, esi
add ebx, 0x1bae1b68
sub ebx, 1
sub ebx, 0x1bae1b68
imul esi, ebx
and esi, 1
cmp esi, 0
sete dh
cmp edi, 0xa
setl bl
mov bh, dh
xor bh, 1
mov dword [ebp - 0x13bc], eax
mov al, bl
xor al, 1
xor dl, 1
mov ah, bh
and ah, 1
and dh, dl
mov byte [ebp - 0x13bd], al
and al, 1
and bl, dl
or ah, dh
or al, bl
xor ah, al
mov al, byte [ebp - 0x13bd]
or bh, al
xor bh, 1
or dl, 1
and bh, dl
or ah, bh
test ah, 1
mov esi, dword [ebp - 0x13bc]
cmovne esi, ecx
mov dword [ebp - 0x10c8], esi
jmp 0x4b0388
mov dword [ebp - 0x10c8], 0x30a78700
jmp 0x4b0388
mov eax, 0x66b07157
mov ecx, 0x29005fed
mov edx, 0
mov esi, dword [0x4fc1a0]
mov edi, dword [0x4fc19c]
sub edx, 1
mov ebx, esi
add ebx, edx
imul esi, ebx
and esi, 1
cmp esi, 0
sete dl
cmp edi, 0xa
setl dh
mov bl, dl
and bl, dh
xor dl, dh
or bl, dl
test bl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c8], eax
jmp 0x4b0388
mov eax, 0x66b07157
mov ecx, 0xc906a6e9
cmp dword [ebp - 0x1c], 0
setne dl
and dl, 1
mov byte [ebp - 0xe], dl
mov esi, dword [0x4fc1a0]
mov edi, dword [0x4fc19c]
mov ebx, esi
sub ebx, 0xfc5d45ee
sub ebx, 1
add ebx, 0xfc5d45ee
imul esi, ebx
and esi, 1
cmp esi, 0
sete dl
cmp edi, 0xa
setl dh
mov bl, dl
and bl, dh
xor dl, dh
or bl, dl
test bl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c8], eax
jmp 0x4b0388
mov eax, 0xde701497
mov ecx, 0xb9878528
mov dl, byte [ebp - 0xe]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c8], eax
jmp 0x4b0388
mov eax, 0xda99d5d7
mov ecx, 0xc9d34bc8
mov dl, 1
mov esi, dword [0x4fc1a0]
mov edi, dword [0x4fc19c]
mov ebx, esi
sub ebx, 0xf5fb05fc
sub ebx, 1
add ebx, 0xf5fb05fc
imul esi, ebx
and esi, 1
cmp esi, 0
sete dh
cmp edi, 0xa
setl bl
mov bh, dh
xor bh, 1
mov dword [ebp - 0x13c4], eax
mov al, bl
xor al, 1
xor dl, 0
mov ah, bh
and ah, 0
and dh, dl
mov byte [ebp - 0x13c5], al
and al, 0
and bl, dl
or ah, dh
or al, bl
xor ah, al
mov al, byte [ebp - 0x13c5]
or bh, al
xor bh, 1
or dl, 0
and bh, dl
or ah, bh
test ah, 1
mov esi, dword [ebp - 0x13c4]
cmovne esi, ecx
mov dword [ebp - 0x10c8], esi
jmp 0x4b0388
mov eax, dword [0x4fc474]
mov ecx, dword [ebp - 0x1c]
mov edx, esp
mov dword [edx], ecx
call eax
sub esp, 4
mov ecx, 0xda99d5d7
mov edx, 0x48d8755e
mov bl, 1
mov esi, 0
mov edi, dword [0x4fc1a0]
mov dword [ebp - 0x13cc], eax
mov eax, dword [0x4fc19c]
sub esi, 1
mov dword [ebp - 0x13d0], eax
mov eax, edi
add eax, esi
imul edi, eax
and edi, 1
cmp edi, 0
sete bh
mov eax, dword [ebp - 0x13d0]
cmp eax, 0xa
setl al
mov ah, bh
xor ah, 1
mov byte [ebp - 0x13d1], al
xor al, 1
xor bl, 0
mov byte [ebp - 0x13d2], al
mov al, ah
and al, 0
and bh, bl
mov byte [ebp - 0x13d3], al
mov al, byte [ebp - 0x13d2]
and al, 0
mov byte [ebp - 0x13d4], al
mov al, byte [ebp - 0x13d1]
and al, bl
mov byte [ebp - 0x13d5], al
mov al, byte [ebp - 0x13d3]
or al, bh
mov bh, byte [ebp - 0x13d4]
mov byte [ebp - 0x13d6], al
mov al, byte [ebp - 0x13d5]
or bh, al
mov al, byte [ebp - 0x13d6]
xor al, bh
mov bh, byte [ebp - 0x13d2]
or ah, bh
xor ah, 1
or bl, 0
and ah, bl
or al, ah
test al, 1
cmovne ecx, edx
mov dword [ebp - 0x10c8], ecx
jmp 0x4b0388
mov dword [ebp - 0x10c8], 0xde701497
jmp 0x4b0388
mov eax, 0xd3bc53aa
mov ecx, 0x28ef3cfe
cmp dword [ebp - 0x28], 0
cmovne eax, ecx
mov dword [ebp - 0x10c8], eax
jmp 0x4b0388
mov eax, 0x5a0b7e80
mov ecx, 0xf01d6e2
mov dl, 1
mov esi, 0
mov edi, dword [0x4fc1a0]
mov ebx, dword [0x4fc19c]
sub esi, 1
mov dword [ebp - 0x13dc], eax
mov eax, edi
add eax, esi
imul edi, eax
and edi, 1
cmp edi, 0
sete dh
cmp ebx, 0xa
setl al
mov ah, dh
xor ah, 1
mov bl, al
xor bl, 1
xor dl, 0
mov bh, ah
and bh, 0
and dh, dl
mov byte [ebp - 0x13dd], al
mov al, bl
and al, 0
mov byte [ebp - 0x13de], al
mov al, byte [ebp - 0x13dd]
and al, dl
or bh, dh
mov dh, byte [ebp - 0x13de]
or dh, al
xor bh, dh
or ah, bl
xor ah, 1
or dl, 0
and ah, dl
or bh, ah
test bh, 1
mov esi, dword [ebp - 0x13dc]
cmovne esi, ecx
mov dword [ebp - 0x10c8], esi
jmp 0x4b0388
mov eax, dword [ebp - 0x28]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
sub esp, 4
mov ecx, 0x5a0b7e80
mov edx, 0x119d1839
mov esi, 0
mov edi, dword [0x4fc1a0]
mov ebx, dword [0x4fc19c]
sub esi, 1
mov dword [ebp - 0x13e4], eax
mov eax, edi
add eax, esi
imul edi, eax
and edi, 1
cmp edi, 0
sete al
cmp ebx, 0xa
setl ah
mov bl, al
and bl, ah
xor al, ah
or bl, al
test bl, 1
cmovne ecx, edx
mov dword [ebp - 0x10c8], ecx
jmp 0x4b0388
mov dword [ebp - 0x10c8], 0xd3bc53aa
jmp 0x4b0388
mov eax, 0x90662235
mov ecx, 0x7fdbc1a2
mov edx, dword [0x4fc1a0]
mov esi, dword [0x4fc19c]
mov edi, edx
sub edi, 0x1914abd9
sub edi, 1
add edi, 0x1914abd9
imul edx, edi
and edx, 1
cmp edx, 0
sete bl
cmp esi, 0xa
setl bh
mov dl, bl
and dl, bh
xor bl, bh
or dl, bl
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c8], eax
jmp 0x4b0388
mov eax, 0x90662235
mov ecx, 0x63dce041
mov dl, 1
cmp dword [ebp - 0x24], 0
setne dh
and dh, 1
mov byte [ebp - 0xd], dh
mov esi, dword [0x4fc1a0]
mov edi, dword [0x4fc19c]
mov ebx, esi
sub ebx, 0xf60135c8
sub ebx, 1
add ebx, 0xf60135c8
imul esi, ebx
and esi, 1
cmp esi, 0
sete dh
cmp edi, 0xa
setl bl
mov bh, dh
xor bh, 1
mov dword [ebp - 0x13e8], eax
mov al, bl
xor al, 1
xor dl, 1
mov ah, bh
and ah, 1
and dh, dl
mov byte [ebp - 0x13e9], al
and al, 1
and bl, dl
or ah, dh
or al, bl
xor ah, al
mov al, byte [ebp - 0x13e9]
or bh, al
xor bh, 1
or dl, 1
and bh, dl
or ah, bh
test ah, 1
mov esi, dword [ebp - 0x13e8]
cmovne esi, ecx
mov dword [ebp - 0x10c8], esi
jmp 0x4b0388
mov eax, 0x6205a2
mov ecx, 0xb2b95139
mov dl, byte [ebp - 0xd]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c8], eax
jmp 0x4b0388
mov eax, 0x5af84fb0
mov ecx, 0x4c525a79
mov edx, dword [0x4fc1a0]
mov esi, dword [0x4fc19c]
mov edi, edx
sub edi, 0x345cccae
sub edi, 1
add edi, 0x345cccae
imul edx, edi
and edx, 1
cmp edx, 0
sete bl
cmp esi, 0xa
setl bh
mov dl, bl
and dl, bh
xor bl, bh
or dl, bl
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c8], eax
jmp 0x4b0388
mov eax, dword [ebp - 0x24]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
sub esp, 4
mov ecx, 0x5af84fb0
mov edx, 0x527c939a
mov bl, 1
mov esi, 0
mov edi, dword [0x4fc1a0]
mov dword [ebp - 0x13f0], eax
mov eax, dword [0x4fc19c]
sub esi, 1
mov dword [ebp - 0x13f4], eax
mov eax, edi
add eax, esi
imul edi, eax
and edi, 1
cmp edi, 0
sete bh
mov eax, dword [ebp - 0x13f4]
cmp eax, 0xa
setl al
mov ah, bh
xor ah, 1
mov byte [ebp - 0x13f5], al
xor al, 1
xor bl, 0
mov byte [ebp - 0x13f6], al
mov al, ah
and al, 0
and bh, bl
mov byte [ebp - 0x13f7], al
mov al, byte [ebp - 0x13f6]
and al, 0
mov byte [ebp - 0x13f8], al
mov al, byte [ebp - 0x13f5]
and al, bl
mov byte [ebp - 0x13f9], al
mov al, byte [ebp - 0x13f7]
or al, bh
mov bh, byte [ebp - 0x13f8]
mov byte [ebp - 0x13fa], al
mov al, byte [ebp - 0x13f9]
or bh, al
mov al, byte [ebp - 0x13fa]
xor al, bh
mov bh, byte [ebp - 0x13f6]
or ah, bh
xor ah, 1
or bl, 0
and ah, bl
or al, ah
test al, 1
cmovne ecx, edx
mov dword [ebp - 0x10c8], ecx
jmp 0x4b0388
mov dword [ebp - 0x10c8], 0x6205a2
jmp 0x4b0388
mov eax, 0x26dbfd13
mov ecx, 0xb2679a06
cmp dword [ebp - 0x20], 0
cmovne eax, ecx
mov dword [ebp - 0x10c8], eax
jmp 0x4b0388
mov eax, 0x80e1a931
mov ecx, 0xbc30ec5b
mov edx, dword [0x4fc1a0]
mov esi, dword [0x4fc19c]
mov edi, edx
sub edi, 0x3a2352d4
sub edi, 1
add edi, 0x3a2352d4
imul edx, edi
and edx, 1
cmp edx, 0
sete bl
cmp esi, 0xa
setl bh
mov dl, bl
and dl, bh
xor bl, bh
or dl, bl
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c8], eax
jmp 0x4b0388
mov eax, dword [ebp - 0x20]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
sub esp, 4
mov ecx, 0x80e1a931
mov edx, 0xd7758412
mov esi, 0
mov edi, dword [0x4fc1a0]
mov ebx, dword [0x4fc19c]
sub esi, 1
mov dword [ebp - 0x1400], eax
mov eax, edi
add eax, esi
imul edi, eax
and edi, 1
cmp edi, 0
sete al
cmp ebx, 0xa
setl ah
mov bl, al
and bl, ah
xor al, ah
or bl, al
test bl, 1
cmovne ecx, edx
mov dword [ebp - 0x10c8], ecx
jmp 0x4b0388
mov dword [ebp - 0x10c8], 0x26dbfd13
jmp 0x4b0388
lea eax, [ebp - 0x43c]
mov ecx, dword [0x4fc4b0]
mov edx, esp
mov dword [edx], eax
call ecx
sub esp, 4
mov ecx, 0x72be695b
mov edx, 0xcf633885
cmp dword [ebp - 0x10ac], 0
cmovne ecx, edx
mov dword [ebp - 0x10c8], ecx
mov dword [ebp - 0x1404], eax
jmp 0x4b0388
mov eax, esp
mov dword [eax], 0
mov eax, dword [sym.imp.KERNEL32.dll_ExitProcess]
call eax
sub esp, 4
mov eax, 0x242f05dc
mov ecx, 0x189e07a5
mov edx, 0
mov esi, dword [0x4fc1a0]
mov edi, dword [0x4fc19c]
sub edx, 1
mov ebx, esi
add ebx, edx
imul esi, ebx
and esi, 1
cmp esi, 0
sete dl
cmp edi, 0xa
setl dh
mov bl, dl
and bl, dh
xor dl, dh
or bl, dl
test bl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c8], eax
jmp 0x4b0388
mov eax, 0x242f05dc
mov ecx, 0xac253c2f
mov edx, dword [0x4fc1a0]
mov esi, dword [0x4fc19c]
mov edi, edx
add edi, 0xf7d76ef2
sub edi, 1
sub edi, 0xf7d76ef2
imul edx, edi
and edx, 1
cmp edx, 0
sete bl
cmp esi, 0xa
setl bh
mov dl, bl
and dl, bh
xor bl, bh
or dl, bl
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c8], eax
jmp 0x4b0388
add esp, 0x1460
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [0x4fc4a8]
mov ecx, dword [ebp - 0x20]
mov edx, esp
mov dword [edx], ecx
mov dword [edx + 4], 0xffffffff
call eax
sub esp, 8
mov dword [ebp - 0x10a8], eax
mov dword [ebp - 0x10c8], 0x3ed1b81a
jmp 0x4b0388
mov eax, 0
mov ecx, 0x20a
lea edx, [ebp - 0xa5a]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x20a
mov dword [ebp - 0x1408], eax
mov dword [ebp - 0x140c], ecx
call fcn.0040c560
mov ecx, 0x104
lea edx, [0x4ebb6a]
mov esi, 3
lea edi, [ebp - 0xa5a]
mov dword [esp], edi
mov dword [esp + 4], 0x104
mov dword [esp + 8], edx
mov dword [esp + 0xc], 3
mov dword [ebp - 0x1410], eax
mov dword [ebp - 0x1414], ecx
mov dword [ebp - 0x1418], esi
call fcn.0040cc10
lea ecx, [ebp - 0x43c]
mov dword [esp], ecx
mov dword [ebp - 0x141c], eax
call fcn.0040dcf0
mov ecx, 0x101
lea edx, [ebp - 0xa5a]
lea esi, [ebp - 0x43c]
add edx, 6
mov dword [esp], edx
mov dword [esp + 4], 0x101
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [ebp - 0x1420], ecx
call fcn.0040cc10
lea ecx, [ebp - 0x232]
mov edx, 0
mov esi, dword [0x4ee7c8]
movzx esi, word [esi]
mov dword [ebp - 0x10b0], esi
mov esi, dword [ebp - 0x10b0]
sub edx, 1
sub esi, edx
mov edx, dword [0x4ee7c8]
movzx edx, word [edx + esi*2]
mov dword [ebp - 0x10b4], edx
mov edx, dword [ebp - 0x10b4]
mov esi, dword [0x4ee7c8]
mov edi, dword [ebp - 0x10b0]
shl edi, 1
add esi, edi
add esi, 4
mov edi, dword [0x4ee7c8]
add edi, 2
mov ebx, dword [ebp - 0x10b0]
mov dword [esp], ecx
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edx
mov dword [ebp - 0x1424], eax
call fcn.0040a7e0
lea eax, [ebp - 0x646]
mov ecx, dword [0x4fc4b4]
mov edx, esp
mov dword [edx + 8], 0
mov dword [edx + 0xc], eax
mov dword [edx + 4], 0
mov dword [edx], 0
call ecx
sub esp, 0x10
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x10c8], 0x5a52ff3c
jmp 0x4b0388
mov eax, 0
mov ecx, 0x40
mov edx, 1
lea esi, [ebp - 0xc64]
lea edi, [ebp - 0x108c]
mov dword [esp], esi
mov dword [esp + 4], 0
mov dword [esp + 8], edi
mov dword [esp + 0xc], 0x40
mov dword [esp + 0x10], 1
mov dword [esp + 0x14], 1
mov dword [ebp - 0x1428], eax
mov dword [ebp - 0x142c], ecx
mov dword [ebp - 0x1430], edx
call fcn.004ac770
mov dword [ebp - 0x10c8], 0xa5a5b5c9
mov dword [ebp - 0x1434], eax
jmp 0x4b0388
mov eax, dword [0x4fc4a8]
mov ecx, dword [ebp - 0x24]
mov edx, esp
mov dword [edx], ecx
mov dword [edx + 4], 0xffffffff
call eax
sub esp, 8
mov dword [ebp - 0x10c8], 0xffb5647c
mov dword [ebp - 0x1438], eax
jmp 0x4b0388
mov dword [ebp - 0x10c8], 0x7c058e37
jmp 0x4b0388
mov dword [ebp - 0x10c8], 0x29005fed
jmp 0x4b0388
mov eax, dword [0x4fc474]
mov ecx, dword [ebp - 0x1c]
mov edx, esp
mov dword [edx], ecx
call eax
sub esp, 4
mov dword [ebp - 0x10c8], 0xc9d34bc8
mov dword [ebp - 0x143c], eax
jmp 0x4b0388
mov eax, dword [ebp - 0x28]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
sub esp, 4
mov dword [ebp - 0x10c8], 0xf01d6e2
mov dword [ebp - 0x1440], eax
jmp 0x4b0388
mov dword [ebp - 0x10c8], 0x7fdbc1a2
jmp 0x4b0388
mov eax, dword [ebp - 0x24]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
sub esp, 4
mov dword [ebp - 0x10c8], 0x4c525a79
mov dword [ebp - 0x1444], eax
jmp 0x4b0388
mov eax, dword [ebp - 0x20]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
sub esp, 4
mov dword [ebp - 0x10c8], 0xbc30ec5b
mov dword [ebp - 0x1448], eax
jmp 0x4b0388
mov dword [ebp - 0x10c8], 0x189e07a5
jmp 0x4adca0