Function at 0x1004e4fb
Capabilities:
Contain obfuscated stackstrings
Enumerate pe sections
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1008f804
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xd70
push esi
and dword [ebp - 0x18], 0
movzx eax, byte [ebp + 0x10]
test eax, eax
je 0x100546c7
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x28], 0xfffffffe
mov dword [ebp - 0x4c], 0xc80fc3a0
mov dword [ebp - 0x3c], 0xffffffff
mov dword [ebp - 0x130], 0xffffffff
mov dword [ebp - 0x29c], 0
jmp 0x1004e568
mov eax, dword [ebp - 0x29c]
inc eax
mov dword [ebp - 0x29c], eax
cmp dword [ebp - 0x29c], 4
jge 0x1004e584
mov eax, dword [ebp - 0x29c]
mov dword [ebp + eax*4 - 0x3a0], 7
jmp 0x1004e55b
mov dword [ebp - 0x28], 0
jmp 0x1004e594
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 5
je 0x1004e89c
mov dword [ebp - 0x34], 2
mov dword [ebp - 0x324], 8
mov dword [ebp - 0x80], 0x77509cb0
mov dword [ebp - 0x924], 8
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0xb1c], eax
cmp dword [ebp - 0x34], 0
jne 0x1004e618
imul eax, dword [ebp - 0x34], 0x6de0
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
add eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x34]
jne 0x1004e5f0
mov dword [ebp - 0x63c], 1
jmp 0x1004e5f7
and dword [ebp - 0x63c], 0
mov dword [ebp - 0x324], 0x63ba
mov eax, dword [ebp - 0x324]
sub eax, dword [ebp - 0x63c]
jne 0x1004e618
and dword [ebp - 0x888], 0
jmp 0x1004e622
mov dword [ebp - 0x888], 1
cmp dword [ebp - 0x888], 0xffffffff
jge 0x1004e637
mov dword [ebp - 0x890], 1
jmp 0x1004e63e
and dword [ebp - 0x890], 0
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x890]
jle 0x1004e655
mov dword [ebp - 0x898], 1
jmp 0x1004e65c
and dword [ebp - 0x898], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x898], eax
jge 0x1004e679
cmp dword [ebp - 0x34], 0
je 0x1004e679
mov dword [ebp - 0x8a0], 1
jmp 0x1004e680
and dword [ebp - 0x8a0], 0
mov eax, dword [ebp - 0x8a0]
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x34], 0
jmp 0x1004e699
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 3
jg 0x1004e897
mov dword [ebp - 0x8c8], 0x17b4
mov eax, dword [ebp - 0x34]
cmp dword [ebp + eax*4 - 0x3a0], 0
je 0x1004e853
mov eax, dword [ebp - 0x8c8]
mov ecx, dword [ebp - 0x34]
imul eax, dword [ebp + ecx*4 - 0x3a0]
mov ecx, dword [ebp - 0x34]
cmp eax, dword [ebp + ecx*4 - 0x3a0]
jle 0x1004e6e7
mov dword [ebp - 0x8a8], 1
jmp 0x1004e6ee
and dword [ebp - 0x8a8], 0
cmp dword [ebp - 0x8a8], 0
jg 0x1004e703
mov dword [ebp - 0x8e0], 1
jmp 0x1004e70a
and dword [ebp - 0x8e0], 0
mov eax, dword [ebp - 0x8c8]
cmp dword [ebp - 0x8e0], eax
je 0x1004e724
mov dword [ebp - 0x8e8], 1
jmp 0x1004e72b
and dword [ebp - 0x8e8], 0
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp + eax*4 - 0x3a0]
cmp dword [ebp - 0x8e8], eax
jge 0x1004e749
mov dword [ebp - 0x8f0], 1
jmp 0x1004e750
and dword [ebp - 0x8f0], 0
mov eax, dword [ebp - 0x8f0]
inc eax
cmp eax, dword [ebp - 0x28]
jne 0x1004e768
mov dword [ebp - 0x8b4], 1
jmp 0x1004e76f
and dword [ebp - 0x8b4], 0
mov eax, dword [ebp - 0x8b4]
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x80], eax
jle 0x1004e78c
mov dword [ebp - 0x5bc], 1
jmp 0x1004e793
and dword [ebp - 0x5bc], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x3a0]
imul eax, dword [ebp - 0x5bc]
cmp dword [ebp - 0x4c], eax
jge 0x1004e7b8
mov dword [ebp - 0x3bc], 1
jmp 0x1004e7bf
and dword [ebp - 0x3bc], 0
mov eax, dword [ebp - 0x924]
imul eax, dword [ebp - 0x3bc]
test eax, eax
jne 0x1004e7de
xor eax, eax
inc eax
jne 0x1004e7de
and dword [ebp - 0x680], 0
jmp 0x1004e7e8
mov dword [ebp - 0x680], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3a0]
add eax, dword [ebp - 0x680]
imul eax, dword [ebp - 0x4c]
cmp eax, 0xfffc
jbe 0x1004e812
mov dword [ebp - 0x3c4], 1
jmp 0x1004e819
and dword [ebp - 0x3c4], 0
cmp dword [ebp - 0x3c4], 0xa7412631
je 0x1004e834
cmp dword [ebp - 0x34], 0
je 0x1004e834
and dword [ebp - 0x688], 0
jmp 0x1004e83e
mov dword [ebp - 0x688], 1
mov eax, dword [ebp - 0x688]
dec eax
je 0x1004e853
mov dword [ebp - 0x3cc], 1
jmp 0x1004e85a
and dword [ebp - 0x3cc], 0
mov eax, dword [ebp - 0x3cc]
mov dword [ebp - 0x324], eax
mov dword [ebp - 0x80], 0
jmp 0x1004e876
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 3
jg 0x1004e892
mov eax, dword [ebp - 0x80]
mov ecx, dword [ebp - 0x80]
mov eax, dword [ebp + eax*4 - 0x3a0]
mov dword [ebp + ecx*4 - 0x3a0], eax
jmp 0x1004e86f
jmp 0x1004e692
jmp 0x1004e58d
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0xb80], eax
mov eax, dword [ebp - 0x3c]
neg eax
sub eax, dword [ebp - 0x28]
mov dword [ebp - 0x690], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x690]
mov dword [ebp + eax - 0x3a0], ecx
mov eax, dword [ebp - 0x690]
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
je 0x1004e8e8
push 0xfffffffffffffff8
pop eax
test eax, eax
je 0x1004e8e8
mov dword [ebp - 0x3d4], 1
jmp 0x1004e8ef
and dword [ebp - 0x3d4], 0
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
cmp eax, dword [ebp - 0x3d4]
jg 0x1004e90c
mov dword [ebp - 0x698], 1
jmp 0x1004e913
and dword [ebp - 0x698], 0
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x698], eax
jge 0x1004e92a
mov dword [ebp - 0x3dc], 1
jmp 0x1004e931
and dword [ebp - 0x3dc], 0
mov eax, dword [ebp - 0x3c]
sub eax, dword [ebp - 0x3dc]
add eax, dword [ebp - 0x3c]
cmp eax, 0xfffffffd
jae 0x1004e94e
mov dword [ebp - 0x6a0], 1
jmp 0x1004e955
and dword [ebp - 0x6a0], 0
cmp dword [ebp - 0x6a0], 0x1ab7
jne 0x1004e96d
mov dword [ebp - 0x3e4], 1
jmp 0x1004e974
and dword [ebp - 0x3e4], 0
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x3e4], eax
je 0x1004e98b
mov dword [ebp - 0x6a8], 1
jmp 0x1004e992
and dword [ebp - 0x6a8], 0
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x6a8], eax
jle 0x1004ecba
mov dword [ebp - 0x44], 0xab67338d
mov dword [ebp - 0x3fc], 0x2ac9e043
mov dword [ebp - 0x424], 1
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0xbb8], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0xae4], eax
cmp dword [ebp - 0x3c], 0xffffffff
je 0x1004e9e0
mov dword [ebp - 0x3ec], 1
jmp 0x1004e9e7
and dword [ebp - 0x3ec], 0
cmp dword [ebp - 0x3ec], 0
jge 0x1004e9fc
mov dword [ebp - 0x6b0], 1
jmp 0x1004ea03
and dword [ebp - 0x6b0], 0
mov eax, dword [ebp - 0x4c]
add eax, dword [ebp - 0x6b0]
cmp eax, dword [ebp - 0x44]
jl 0x1004ea1d
mov dword [ebp - 0x3f4], 1
jmp 0x1004ea24
and dword [ebp - 0x3f4], 0
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x3f4], eax
je 0x1004ea3b
mov dword [ebp - 0x9bc], 1
jmp 0x1004ea42
and dword [ebp - 0x9bc], 0
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0xae8], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0xaf0], eax
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x3a0], 0xfffffff9
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x3a0]
mov dword [ebp - 0xaf8], eax
cmp dword [ebp - 0x44], 0x3286b001
jne 0x1004ea91
cmp dword [ebp - 0x44], 0
je 0x1004ea91
mov dword [ebp - 0x6b8], 1
jmp 0x1004ea98
and dword [ebp - 0x6b8], 0
mov eax, dword [ebp - 0x6b8]
mov dword [ebp - 0x3fc], eax
mov eax, dword [ebp - 0x3fc]
mov dword [ebp - 0xb00], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0xb24], eax
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x130], eax
je 0x1004ead0
mov dword [ebp - 0x6c0], 1
jmp 0x1004ead7
and dword [ebp - 0x6c0], 0
cmp dword [ebp - 0x6c0], 0x9bbd
jne 0x1004eaef
mov dword [ebp - 0x404], 1
jmp 0x1004eaf6
and dword [ebp - 0x404], 0
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x404], eax
jge 0x1004eb0d
mov dword [ebp - 0x6c8], 1
jmp 0x1004eb14
and dword [ebp - 0x6c8], 0
mov eax, dword [ebp - 0x28]
imul eax, dword [ebp - 0x6c8]
test eax, eax
je 0x1004eb34
cmp dword [ebp - 0x3c], 0
je 0x1004eb34
mov dword [ebp - 0x40c], 1
jmp 0x1004eb3b
and dword [ebp - 0x40c], 0
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x40c], eax
jg 0x1004eb52
mov dword [ebp - 0x6d0], 1
jmp 0x1004eb59
and dword [ebp - 0x6d0], 0
mov eax, dword [ebp - 0x130]
cmp dword [ebp - 0x6d0], eax
jne 0x1004eb73
mov dword [ebp - 0x414], 1
jmp 0x1004eb7a
and dword [ebp - 0x414], 0
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x414], eax
jl 0x1004eb91
mov dword [ebp - 0x9c4], 1
jmp 0x1004eb98
and dword [ebp - 0x9c4], 0
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0xb2c], eax
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x4c]
mov edx, dword [ebp - 0x130]
lea ecx, [ecx + edx - 0x7d004f7e]
imul eax, ecx
cmp eax, 0x739a15fb
jg 0x1004ebca
mov dword [ebp - 0x9cc], 1
jmp 0x1004ebd1
and dword [ebp - 0x9cc], 0
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0xb34], eax
imul eax, dword [ebp - 0x3c], 0xb76a
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x4c], eax
je 0x1004ebfb
mov dword [ebp - 0x6d8], 1
jmp 0x1004ec02
and dword [ebp - 0x6d8], 0
imul eax, dword [ebp - 0x6d8], 0
imul eax, dword [ebp - 0x44]
test eax, eax
jne 0x1004ec26
cmp dword [ebp - 0x4c], 0
jne 0x1004ec26
cmp dword [ebp - 0x44], 0
jne 0x1004ec26
and dword [ebp - 0x41c], 0
jmp 0x1004ec30
mov dword [ebp - 0x41c], 1
cmp dword [ebp - 0x41c], 0xba4bdaca
jne 0x1004ec48
mov dword [ebp - 0x6e0], 1
jmp 0x1004ec4f
and dword [ebp - 0x6e0], 0
mov eax, dword [ebp - 0x6e0]
mov dword [ebp - 0x424], eax
cmp dword [ebp - 0x424], 0xaed54f57
ja 0x1004ec73
mov dword [ebp - 0x6e8], 1
jmp 0x1004ec7a
and dword [ebp - 0x6e8], 0
mov eax, dword [ebp - 0x6e8]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x44]
je 0x1004ec9c
xor eax, eax
inc eax
je 0x1004ec9c
mov dword [ebp - 0x42c], 1
jmp 0x1004eca3
and dword [ebp - 0x42c], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x42c]
mov dword [ebp + eax - 0x3a0], ecx
jmp 0x1004eed5
mov dword [ebp - 0xbc], 0xe202
mov dword [ebp - 0x718], 0xb25d924
mov dword [ebp - 0x9d4], 0xffffffff
mov dword [ebp - 0x268], 0
jmp 0x1004ecf1
mov eax, dword [ebp - 0x268]
inc eax
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 3
jge 0x1004ed0d
mov eax, dword [ebp - 0x268]
mov dword [ebp + eax*4 - 0xc1c], 0xfd707927
jmp 0x1004ece4
mov eax, dword [ebp - 0x3c]
sub eax, dword [ebp - 0xbc]
cmp eax, dword [ebp - 0x4c]
jge 0x1004ed27
mov dword [ebp - 0x6f0], 1
jmp 0x1004ed2e
and dword [ebp - 0x6f0], 0
cmp dword [ebp - 0x6f0], 6
ja 0x1004ed43
mov dword [ebp - 0x434], 1
jmp 0x1004ed4a
and dword [ebp - 0x434], 0
mov eax, dword [ebp - 0xbc]
cmp dword [ebp - 0x434], eax
jge 0x1004ed64
mov dword [ebp - 0x33c], 1
jmp 0x1004ed6b
and dword [ebp - 0x33c], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x33c]
mov dword [ebp + eax - 0x3a0], ecx
mov eax, dword [ebp - 0xbc]
cmp dword [ebp - 0x33c], eax
jne 0x1004ed98
mov dword [ebp - 0x6f8], 1
jmp 0x1004ed9f
and dword [ebp - 0x6f8], 0
mov eax, dword [ebp - 0x6f8]
add eax, 0x6deeb808
cmp eax, dword [ebp - 0xbc]
jl 0x1004edbe
mov dword [ebp - 0x43c], 1
jmp 0x1004edc5
and dword [ebp - 0x43c], 0
mov eax, dword [ebp - 0x130]
cmp dword [ebp - 0x43c], eax
je 0x1004eddf
mov dword [ebp - 0x700], 1
jmp 0x1004ede6
and dword [ebp - 0x700], 0
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x700], eax
jl 0x1004edfd
mov dword [ebp - 0x444], 1
jmp 0x1004ee04
and dword [ebp - 0x444], 0
mov eax, dword [ebp - 0xbc]
add eax, dword [ebp - 0x444]
cmp eax, dword [ebp - 0xbc]
jne 0x1004ee24
mov dword [ebp - 0x708], 1
jmp 0x1004ee2b
and dword [ebp - 0x708], 0
mov eax, dword [ebp - 0x130]
imul eax, dword [ebp - 0x708]
cmp eax, dword [ebp - 0x4c]
jge 0x1004ee49
mov dword [ebp - 0x44c], 1
jmp 0x1004ee50
and dword [ebp - 0x44c], 0
mov eax, dword [ebp - 0xbc]
cmp dword [ebp - 0x44c], eax
je 0x1004ee6a
mov dword [ebp - 0x710], 1
jmp 0x1004ee71
and dword [ebp - 0x710], 0
cmp dword [ebp - 0x710], 0x3741
jg 0x1004ee89
mov dword [ebp - 0x454], 1
jmp 0x1004ee90
and dword [ebp - 0x454], 0
mov eax, dword [ebp - 0x28]
imul eax, dword [ebp - 0x454]
imul eax, eax, 0x7f86
mov dword [ebp - 0x718], eax
mov eax, dword [ebp - 0x718]
mov dword [ebp - 0x45c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x45c]
mov dword [ebp + eax - 0xc1c], ecx
imul eax, dword [ebp - 0x45c], 0x799b
mov dword [ebp - 0x9d4], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x770], eax
mov dword [ebp - 0x144], 0x20002526
mov dword [ebp - 0xc4], 0xac9d73df
mov dword [ebp - 0x720], 0
mov dword [ebp - 0x46c], 0
mov dword [ebp - 0x740], 0xf0a0cd95
mov dword [ebp - 0x748], 0x974498b9
mov dword [ebp - 0x768], 0x83518f4c
mov dword [ebp - 0x9dc], 0xfffffffb
mov dword [ebp - 0x94], 0
jmp 0x1004ef47
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 3
jge 0x1004ef63
mov eax, dword [ebp - 0x94]
mov dword [ebp + eax*4 - 0xc58], 0
jmp 0x1004ef3a
mov dword [ebp - 0x94], 0
jmp 0x1004ef7c
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 3
jge 0x1004ef98
mov eax, dword [ebp - 0x94]
mov dword [ebp + eax*4 - 0xc40], 0xfffffffa
jmp 0x1004ef6f
cmp dword [ebp - 0x144], 0
jne 0x1004efad
mov dword [ebp - 0x760], 1
jmp 0x1004efb4
and dword [ebp - 0x760], 0
mov eax, dword [ebp - 0x144]
mov dword [ebp - 0xb3c], eax
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x720], eax
cmp dword [ebp - 0x720], 0x842f
jle 0x1004efe4
mov dword [ebp - 0x464], 1
jmp 0x1004efeb
and dword [ebp - 0x464], 0
mov eax, dword [ebp - 0x144]
cmp dword [ebp - 0x464], eax
jl 0x1004f00b
mov eax, 0xd20b50f6
test eax, eax
jne 0x1004f00b
and dword [ebp - 0x728], 0
jmp 0x1004f015
mov dword [ebp - 0x728], 1
mov eax, dword [ebp - 0x728]
mov dword [ebp - 0x46c], eax
mov eax, dword [ebp - 0x46c]
mov dword [ebp - 0x730], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x730]
mov dword [ebp + eax - 0xc58], ecx
mov eax, dword [ebp - 0xc4]
cmp dword [ebp - 0x730], eax
jge 0x1004f05a
mov dword [ebp - 0x474], 1
jmp 0x1004f061
and dword [ebp - 0x474], 0
mov eax, dword [ebp - 0xc4]
cmp dword [ebp - 0x474], eax
jge 0x1004f07b
mov dword [ebp - 0x738], 1
jmp 0x1004f082
and dword [ebp - 0x738], 0
mov eax, dword [ebp - 0x144]
cmp dword [ebp - 0x738], eax
jl 0x1004f09c
mov dword [ebp - 0x47c], 1
jmp 0x1004f0a3
and dword [ebp - 0x47c], 0
mov eax, dword [ebp - 0x47c]
mov dword [ebp - 0x740], eax
mov eax, dword [ebp - 0x144]
cmp dword [ebp - 0x740], eax
je 0x1004f0c9
mov dword [ebp - 0x484], 1
jmp 0x1004f0d0
and dword [ebp - 0x484], 0
mov eax, dword [ebp - 0x484]
mov dword [ebp - 0x748], eax
mov eax, dword [ebp - 0xc4]
cmp dword [ebp - 0x748], eax
jle 0x1004f0f6
mov dword [ebp - 0x48c], 1
jmp 0x1004f0fd
and dword [ebp - 0x48c], 0
mov eax, dword [ebp - 0xc4]
add eax, dword [ebp - 0x48c]
cmp eax, dword [ebp - 0xc4]
jge 0x1004f11d
mov dword [ebp - 0x750], 1
jmp 0x1004f124
and dword [ebp - 0x750], 0
cmp dword [ebp - 0x750], 0xe9a5
jle 0x1004f13c
mov dword [ebp - 0x494], 1
jmp 0x1004f143
and dword [ebp - 0x494], 0
mov eax, dword [ebp - 0x494]
add eax, 0x5c9b
cmp eax, 0xfffffffd
jl 0x1004f15f
mov dword [ebp - 0x758], 1
jmp 0x1004f166
and dword [ebp - 0x758], 0
mov eax, dword [ebp - 0x144]
cmp eax, dword [ebp - 0x758]
jge 0x1004f180
mov dword [ebp - 0x49c], 1
jmp 0x1004f187
and dword [ebp - 0x49c], 0
mov eax, dword [ebp - 0xc4]
cmp dword [ebp - 0x49c], eax
jge 0x1004f1a1
mov dword [ebp - 0x4a4], 1
jmp 0x1004f1a8
and dword [ebp - 0x4a4], 0
mov eax, dword [ebp - 0x760]
add eax, dword [ebp - 0x4a4]
mov dword [ebp - 0x768], eax
mov eax, dword [ebp - 0x768]
mov dword [ebp - 0x4ac], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x4ac]
mov dword [ebp + eax - 0xc40], ecx
mov eax, dword [ebp - 0x4ac]
sub eax, 8
mov dword [ebp - 0x9dc], eax
mov eax, dword [ebp - 0x770]
movzx eax, word [eax]
cmp eax, 0x5a4d
je 0x1004f1fc
jmp 0x100546e5
mov eax, dword [ebp - 0x770]
mov ecx, dword [ebp - 0x30]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0xf4], ecx
mov dword [ebp - 0x198], 0xffffffff
mov dword [ebp - 0xa0c], 0x81ff29ac
mov dword [ebp - 0x278], 0
jmp 0x1004f23b
mov eax, dword [ebp - 0x278]
inc eax
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x278], 3
jge 0x1004f257
mov eax, dword [ebp - 0x278]
mov dword [ebp + eax*4 - 0xb7c], 0x334
jmp 0x1004f22e
mov dword [ebp - 0x198], 2
jmp 0x1004f270
mov eax, dword [ebp - 0x198]
dec eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 0
jl 0x1004f390
mov dword [ebp - 0x19c], 0xffffffff
mov dword [ebp - 0x19c], 0
jmp 0x1004f2a0
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 2
jg 0x1004f38b
mov dword [ebp - 0xa0], 1
mov dword [ebp - 0xa0], 0
jmp 0x1004f2d0
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 2
jg 0x1004f2f5
mov byte [ebp - 0x105], 0
movzx eax, byte [ebp - 0x105]
test eax, eax
je 0x1004f2f3
push 0
call fcn.1004dbf8
pop ecx
jmp 0x1004f2c3
mov dword [ebp - 0xa0], 2
jmp 0x1004f30e
mov eax, dword [ebp - 0xa0]
dec eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0
jl 0x1004f386
mov dword [ebp - 0x238], 1
mov eax, dword [ebp - 0x198]
mov ecx, dword [ebp - 0x19c]
mov eax, dword [ebp + eax*4 - 0xb7c]
mov dword [ebp + ecx*4 - 0xb7c], eax
mov dword [ebp - 0x238], 0
jmp 0x1004f354
mov eax, dword [ebp - 0x238]
dec eax
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 0xffffffeb
jge 0x1004f381
mov dword [ebp - 0xa14], 0x84bc9c3d
lea eax, [ebp - 0xa0c]
push eax
push 0
lea eax, [ebp - 0xa14]
push eax
call fcn.1004da8d
add esp, 0xc
jmp 0x1004f347
jmp 0x1004f301
jmp 0x1004f293
jmp 0x1004f263
mov byte [ebp - 0x12a], 0
movzx eax, byte [ebp - 0x12a]
test eax, eax
je 0x1004f3b6
push 0x7c5d
push 1
push 0x1701
call fcn.1004da8d
add esp, 0xc
mov eax, dword [ebp - 0xf4]
cmp dword [eax], 0x4550
je 0x1004f3c9
jmp 0x100546e5
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xf4]
lea eax, [ecx + eax + 0x78]
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x68]
cmp dword [eax + 4], 0
jne 0x1004f3ea
jmp 0x100546e5
mov dword [ebp - 0x158], 0xffffffff
mov dword [ebp - 0xd4], 0xefa42b48
mov dword [ebp - 0xcc], 0xffffffff
mov dword [ebp - 0x1d8], 0xa519d814
mov dword [ebp - 0x248], 0xffffffff
cmp dword [ebp - 0x158], 0xeaa29c14
je 0x1004f434
mov dword [ebp - 0x4b4], 1
jmp 0x1004f43b
and dword [ebp - 0x4b4], 0
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0xb44], eax
mov eax, dword [ebp - 0x4b4]
mov dword [ebp - 0xd4], eax
mov eax, dword [ebp - 0xd4]
mov ecx, dword [ebp - 0x158]
add ecx, 0x253a
sub eax, ecx
je 0x1004f47e
cmp dword [ebp - 0xd4], 0
je 0x1004f47e
mov dword [ebp - 0x778], 1
jmp 0x1004f485
and dword [ebp - 0x778], 0
cmp dword [ebp - 0x778], 0xfffffff8
jae 0x1004f49a
mov dword [ebp - 0x4bc], 1
jmp 0x1004f4a1
and dword [ebp - 0x4bc], 0
mov eax, dword [ebp - 0x4bc]
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 1
jge 0x1004f4c2
mov dword [ebp - 0x780], 1
jmp 0x1004f4c9
and dword [ebp - 0x780], 0
mov eax, dword [ebp - 0x780]
mov dword [ebp - 0x1d8], eax
mov eax, dword [ebp - 0xcc]
cmp dword [ebp - 0xcc], eax
jne 0x1004f4ef
mov dword [ebp - 0x790], 1
jmp 0x1004f4f6
and dword [ebp - 0x790], 0
cmp dword [ebp - 0xd4], 0
je 0x1004f506
cmp dword [ebp - 0x248], 0
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0xb4c], eax
mov eax, dword [ebp - 0x248]
mov dword [ebp - 0xb54], eax
cmp dword [ebp - 0xcc], 8
jge 0x1004f530
mov eax, 0xab2bc8f9
test eax, eax
je 0x1004f545
cmp dword [ebp - 0x1d8], 0
je 0x1004f545
mov dword [ebp - 0x4c4], 1
jmp 0x1004f54c
and dword [ebp - 0x4c4], 0
mov eax, dword [ebp - 0xcc]
imul eax, dword [ebp - 0x4c4]
cmp eax, dword [ebp - 0x248]
je 0x1004f56d
mov dword [ebp - 0xa1c], 1
jmp 0x1004f574
and dword [ebp - 0xa1c], 0
cmp dword [ebp - 0xcc], 1
jne 0x1004f589
mov dword [ebp - 0x788], 1
jmp 0x1004f590
and dword [ebp - 0x788], 0
mov eax, dword [ebp - 0x788]
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0x4688d239
jl 0x1004f5b4
mov dword [ebp - 0x4cc], 1
jmp 0x1004f5bb
and dword [ebp - 0x4cc], 0
mov eax, dword [ebp - 0x4cc]
mov dword [ebp - 0x1d8], eax
mov eax, dword [ebp - 0x1d8]
add eax, 0xfffd
cmp dword [ebp - 0x790], eax
jle 0x1004f5e6
mov dword [ebp - 0x4d4], 1
jmp 0x1004f5ed
and dword [ebp - 0x4d4], 0
cmp dword [ebp - 0x4d4], 2
jb 0x1004f671
mov dword [ebp - 0x240], 0
jmp 0x1004f60f
mov eax, dword [ebp - 0x240]
inc eax
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 2
jge 0x1004f62b
mov eax, dword [ebp - 0x240]
mov dword [ebp + eax*4 - 0xb0c], 0
jmp 0x1004f602
mov byte [ebp - 0x128], 0
movzx eax, byte [ebp - 0x128]
test eax, eax
je 0x1004f65b
push 0x2fe5
push 0
push 0x2bd8
push 0x66ff
push 0x7a93
call fcn.1004e499
add esp, 0x14
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xb0c], 0x280563ad
jmp 0x1004f80a
mov dword [ebp - 0xa24], 0x3e87122a
mov dword [ebp - 0xa2c], 0xffffffff
mov byte [ebp - 0xbd], 0
movzx eax, byte [ebp - 0xbd]
test eax, eax
je 0x1004f69f
push 0
call fcn.1004dc9d
pop ecx
cmp dword [ebp - 0xa24], 0
je 0x1004f6c4
mov dword [ebp - 0x798], 0xeda1
mov eax, dword [ebp - 0x798]
dec eax
mov dword [ebp - 0x798], eax
jmp 0x1004f80a
mov dword [ebp - 0x4ec], 0x108a6652
mov dword [ebp - 0x1e0], 0
jmp 0x1004f6e7
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 4
jge 0x1004f703
mov eax, dword [ebp - 0x1e0]
mov dword [ebp + eax*4 - 0xad4], 0x7d63
jmp 0x1004f6da
cmp dword [ebp - 0x158], 0
je 0x1004f71f
push 0xfffffffffffffffa
pop eax
test eax, eax
je 0x1004f71f
mov dword [ebp - 0x4dc], 1
jmp 0x1004f726
and dword [ebp - 0x4dc], 0
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0xad4]
cmp dword [ebp + eax - 0xad4], ecx
je 0x1004f74e
mov dword [ebp - 0x7a0], 1
jmp 0x1004f755
and dword [ebp - 0x7a0], 0
mov eax, dword [ebp - 0x4dc]
cmp eax, dword [ebp - 0x7a0]
jne 0x1004f76f
mov dword [ebp - 0x4e4], 1
jmp 0x1004f776
and dword [ebp - 0x4e4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xad4]
cmp dword [ebp - 0x4e4], eax
jle 0x1004f797
mov dword [ebp - 0x7a8], 1
jmp 0x1004f79e
and dword [ebp - 0x7a8], 0
mov eax, dword [ebp - 0x7a8]
mov dword [ebp - 0x4ec], eax
cmp dword [ebp - 0x4ec], 0
je 0x1004f7ba
cmp dword [ebp - 0xa2c], 0
cmp dword [ebp - 0x248], 8
jae 0x1004f7cf
mov dword [ebp - 0x7b0], 1
jmp 0x1004f7d6
and dword [ebp - 0x7b0], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xad4]
cmp dword [ebp - 0x7b0], eax
je 0x1004f7f7
mov dword [ebp - 0x4f4], 1
jmp 0x1004f7fe
and dword [ebp - 0x4f4], 0
mov eax, dword [ebp - 0x4f4]
mov dword [ebp - 0xd4], eax
and dword [ebp - 0x38], 0
mov dword [ebp - 0x180], 0xcbcef054
mov dword [ebp - 0x160], 0xfffffffd
mov dword [ebp - 0x1c], 0
jmp 0x1004f832
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jge 0x1004f848
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xdc], 0x1ab4456e
jmp 0x1004f82b
mov dword [ebp - 0x1c], 0
jmp 0x1004f858
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x1004f86e
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x320], 0x45b0e82c
jmp 0x1004f851
mov dword [ebp - 0x1c], 0
jmp 0x1004f87e
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x1004f894
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x920], 0x8a92
jmp 0x1004f877
mov dword [ebp - 0x1c], 0
jmp 0x1004f8a4
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jge 0x1004f8ba
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x524], 1
jmp 0x1004f89d
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0xb5c], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x320], 0xffffffff
jge 0x1004f8e2
mov dword [ebp - 0x7b8], 1
jmp 0x1004f8e9
and dword [ebp - 0x7b8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x320]
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x320]
lea eax, [eax + ecx + 6]
test eax, eax
jne 0x1004f917
mov dword [ebp - 0xa34], 1
jmp 0x1004f91e
and dword [ebp - 0xa34], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x7b8]
mov dword [ebp + eax - 0xdc], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x920]
inc eax
mov dword [ebp - 0x4fc], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x4fc]
mov dword [ebp + eax - 0x920], ecx
imul eax, dword [ebp - 0x4fc], 0x85b3
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x320]
jl 0x1004f97d
mov dword [ebp - 0x7c0], 1
jmp 0x1004f984
and dword [ebp - 0x7c0], 0
mov eax, dword [ebp - 0x7c0]
mov dword [ebp - 0x160], eax
mov eax, dword [ebp - 0x160]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x320]
mov eax, dword [ebp - 0x180]
cmp dword [ebp - 0x180], eax
jl 0x1004f9be
mov dword [ebp - 0x504], 1
jmp 0x1004f9c5
and dword [ebp - 0x504], 0
cmp dword [ebp - 0x504], 0
ja 0x1004f9da
mov dword [ebp - 0xa68], 1
jmp 0x1004f9e1
and dword [ebp - 0xa68], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x180]
cmp dword [ebp + eax - 0x320], ecx
jl 0x1004fa12
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x920], 0
je 0x1004fa12
mov dword [ebp - 0x7c8], 1
jmp 0x1004fa19
and dword [ebp - 0x7c8], 0
cmp dword [ebp - 0x7c8], 0xffffffff
jne 0x1004fa2e
mov dword [ebp - 0x50c], 1
jmp 0x1004fa35
and dword [ebp - 0x50c], 0
cmp dword [ebp - 0x50c], 0xe629bad2
jbe 0x1004fa54
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x920], 0
je 0x1004fc13
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x920], 0
je 0x1004fc13
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xdc], 0
je 0x1004fc13
mov dword [ebp - 0x260], 0
mov dword [ebp - 0x1f0], 2
mov dword [ebp - 0x1e8], 0
jmp 0x1004faa8
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 3
jge 0x1004fac4
mov eax, dword [ebp - 0x1e8]
mov dword [ebp + eax*4 - 0xb8c], 0xfffffffe
jmp 0x1004fa9b
xor eax, eax
inc eax
je 0x1004fb9c
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x920]
mov dword [ebp - 0x260], eax
mov eax, dword [ebp - 0x260]
imul eax, dword [ebp - 0x1f0]
test eax, eax
jne 0x1004fb9c
push 4
pop eax
imul eax, eax, 0
imul eax, dword [ebp + eax - 0xdc], 0x9320
mov dword [ebp - 0x1f0], eax
mov eax, dword [ebp - 0x1f0]
cmp dword [ebp - 0x160], eax
je 0x1004fb26
mov dword [ebp - 0x7d0], 1
jmp 0x1004fb2d
and dword [ebp - 0x7d0], 0
cmp dword [ebp - 0x7d0], 0xd3ea
jne 0x1004fb45
mov dword [ebp - 0x514], 1
jmp 0x1004fb4c
and dword [ebp - 0x514], 0
cmp dword [ebp - 0x514], 0x4bb8686b
jg 0x1004fb64
mov dword [ebp - 0x7d8], 1
jmp 0x1004fb6b
and dword [ebp - 0x7d8], 0
cmp dword [ebp - 0x7d8], 0xffff
jne 0x1004fb83
mov dword [ebp - 0x51c], 1
jmp 0x1004fb8a
and dword [ebp - 0x51c], 0
mov eax, dword [ebp - 0x260]
add eax, dword [ebp - 0x51c]
cmp eax, dword [ebp - 0x260]
cmp dword [ebp - 0x1f0], 0
jne 0x1004fbb1
mov dword [ebp - 0xa70], 1
jmp 0x1004fbb8
and dword [ebp - 0xa70], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xb8c]
mov dword [ebp - 0xb64], eax
push 4
pop eax
shl eax, 0
imul eax, dword [ebp + eax - 0x320], 0xffffffff
neg eax
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0xb8c]
je 0x1004fbf4
mov dword [ebp - 0x7e0], 1
jmp 0x1004fbfb
and dword [ebp - 0x7e0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x7e0]
mov dword [ebp + eax - 0xdc], ecx
jmp 0x1004fdd7
mov dword [ebp - 0x534], 0x55a6
mov dword [ebp - 0xa6c], 0xa4a7b592
mov dword [ebp - 0x7f0], 0
mov dword [ebp - 0x88], 0
jmp 0x1004fc4a
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 2
jge 0x1004fc66
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0xc84], 0
jmp 0x1004fc3d
mov dword [ebp - 0x88], 0
jmp 0x1004fc7f
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 3
jge 0x1004fc9b
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0xc70], 6
jmp 0x1004fc72
cmp dword [ebp - 0x180], 0
jne 0x1004fd69
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x524]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x524], eax
mov eax, dword [ebp - 0x534]
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0xdc]
imul eax, eax, 5
cmp eax, 0x794679f
je 0x1004fcec
mov dword [ebp - 0x7e8], 1
jmp 0x1004fcf3
and dword [ebp - 0x7e8], 0
cmp dword [ebp - 0x7e8], 0x40e302f9
je 0x1004fd11
cmp dword [ebp - 0xa6c], 0
jne 0x1004fd11
and dword [ebp - 0x52c], 0
jmp 0x1004fd1b
mov dword [ebp - 0x52c], 1
mov eax, dword [ebp - 0x52c]
mov dword [ebp - 0x7f0], eax
mov eax, dword [ebp - 0x7f0]
mov dword [ebp - 0xb6c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xdc]
mov dword [ebp - 0xbe0], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x320]
mov dword [ebp - 0x160], eax
push 0xfffffffffffffffd
pop eax
test eax, eax
jne 0x1004fd69
and dword [ebp - 0xa30], 0
jmp 0x1004fd73
mov dword [ebp - 0xa30], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc70]
cmp dword [ebp - 0x534], eax
jle 0x1004fd94
mov dword [ebp - 0x7f8], 1
jmp 0x1004fd9b
and dword [ebp - 0x7f8], 0
cmp dword [ebp - 0x7f8], 0x1d3
jge 0x1004fdb3
mov dword [ebp - 0x53c], 1
jmp 0x1004fdba
and dword [ebp - 0x53c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x53c]
mov dword [ebp + eax - 0xdc], ecx
mov dword [ebp - 0x160], 1
mov eax, dword [ebp - 0xf4]
movzx eax, word [eax + 0x14]
mov ecx, dword [ebp - 0xf4]
lea eax, [ecx + eax + 0x18]
mov dword [ebp - 0x114], eax
and dword [ebp - 0x344], 0
jmp 0x1004fe16
mov eax, dword [ebp - 0x344]
inc eax
mov dword [ebp - 0x344], eax
mov eax, dword [ebp - 0x114]
add eax, 0x28
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0xf4]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x344], eax
jge 0x1004fe92
mov eax, dword [ebp - 0x114]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x800], eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x800]
jb 0x1004fe8d
mov eax, dword [ebp - 0xf4]
push dword [eax + 0x38]
mov eax, dword [ebp - 0x114]
push dword [eax + 8]
call fcn.1004da5e
pop ecx
pop ecx
add eax, dword [ebp - 0x800]
mov dword [ebp - 0xa5c], eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
cmp eax, dword [ebp - 0xa5c]
jae 0x1004fe8d
mov eax, dword [ebp - 0x114]
mov ecx, dword [ebp - 0x114]
mov eax, dword [eax + 0x14]
sub eax, dword [ecx + 0xc]
mov dword [ebp - 0x38], eax
jmp 0x1004fe92
jmp 0x1004fdfa
cmp dword [ebp - 0x38], 0
jne 0x1004fe9d
jmp 0x100546e5
mov eax, dword [ebp - 0x68]
mov ecx, dword [ebp - 0x38]
add ecx, dword [eax]
add ecx, dword [ebp - 0x30]
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x9c], 0
jmp 0x1004fec4
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 1
jge 0x1004fee0
mov eax, dword [ebp - 0x9c]
mov dword [ebp + eax*4 - 0xbe8], 5
jmp 0x1004feb7
mov dword [ebp - 0x9c], 0
jmp 0x1004fef9
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 4
jge 0x1004ff15
mov eax, dword [ebp - 0x9c]
mov dword [ebp + eax*4 - 0xac4], 1
jmp 0x1004feec
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0xac4], 0
jmp 0x1004ff40
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xac4]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0xac4], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xac4], 0
jg 0x1004ff93
mov byte [ebp - 0x10d], 0
push 0x2493
push 1
push 0x3cc9
lea eax, [ebp - 0x10d]
push eax
call fcn.1004dad2
add esp, 0x10
mov byte [ebp - 0xb5], 0
movzx eax, byte [ebp - 0xb5]
test eax, eax
je 0x1004ff91
push 1
push 0x4738
call fcn.1004db51
pop ecx
pop ecx
jmp 0x1004ff27
xor ecx, ecx
call fcn.100381fe
push eax
call fcn.10076b08
pop ecx
mov dword [ebp - 0xb0], 0xffffffff
mov dword [ebp - 0x26c], 0
jmp 0x1004ffc4
mov eax, dword [ebp - 0x26c]
inc eax
mov dword [ebp - 0x26c], eax
cmp dword [ebp - 0x26c], 3
jge 0x1004ffe0
mov eax, dword [ebp - 0x26c]
mov dword [ebp + eax*4 - 0xaa4], 0x7117
jmp 0x1004ffb7
mov dword [ebp - 0xb0], 2
jmp 0x1004fff9
mov eax, dword [ebp - 0xb0]
dec eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0
jl 0x100500fc
mov dword [ebp - 0x9b4], 0x6ee4e912
mov eax, dword [ebp - 0xb0]
cmp dword [ebp + eax*4 - 0xaa4], 0
je 0x10050035
mov eax, 0xfffc
test eax, eax
je 0x10050035
mov dword [ebp - 0x544], 1
jmp 0x1005003c
and dword [ebp - 0x544], 0
mov eax, dword [ebp - 0xb0]
mov ecx, dword [ebp - 0x544]
sub ecx, dword [ebp + eax*4 - 0xaa4]
cmp ecx, 0xa4d63a88
jne 0x10050063
mov dword [ebp - 0x808], 1
jmp 0x1005006a
and dword [ebp - 0x808], 0
cmp dword [ebp - 0xb0], 0
jl 0x1005007f
mov dword [ebp - 0x54c], 1
jmp 0x10050086
and dword [ebp - 0x54c], 0
mov eax, dword [ebp - 0x808]
cmp eax, dword [ebp - 0x54c]
jle 0x100500a0
mov dword [ebp - 0x810], 1
jmp 0x100500a7
and dword [ebp - 0x810], 0
cmp dword [ebp - 0x810], 2
je 0x100500bc
mov dword [ebp - 0x554], 1
jmp 0x100500c3
and dword [ebp - 0x554], 0
mov eax, dword [ebp - 0xb0]
mov eax, dword [ebp + eax*4 - 0xaa4]
cmp dword [ebp - 0x554], eax
je 0x100500e4
mov dword [ebp - 0x818], 1
jmp 0x100500eb
and dword [ebp - 0x818], 0
mov eax, dword [ebp - 0x818]
mov dword [ebp - 0x9b4], eax
jmp 0x1004ffec
mov dword [ebp - 0x13c], 0xfffffff9
mov dword [ebp - 0xe4], 0xfffffffa
mov dword [ebp - 0x34c], 0
mov dword [ebp - 0x354], 1
mov dword [ebp - 0x940], 0
mov dword [ebp - 0x90], 0
jmp 0x10050147
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 2
jge 0x10050163
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0x318], 0xce55459e
jmp 0x1005013a
mov dword [ebp - 0x90], 0
jmp 0x1005017c
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 1
jge 0x10050198
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0x1f8], 4
jmp 0x1005016f
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x55c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x55c]
mov dword [ebp + eax - 0x318], ecx
cmp dword [ebp - 0x55c], 0
je 0x10050397
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0xbf0], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x318]
push 4
pop ecx
imul ecx, ecx, 0
add eax, dword [ebp + ecx - 0x318]
cmp eax, dword [ebp - 0xe4]
jge 0x100501fe
mov dword [ebp - 0x930], 1
jmp 0x10050205
and dword [ebp - 0x930], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x318]
mov dword [ebp - 0xbf8], eax
mov eax, dword [ebp - 0x13c]
cmp dword [ebp - 0x13c], eax
jge 0x10050232
mov dword [ebp - 0x820], 1
jmp 0x10050239
and dword [ebp - 0x820], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x318]
add eax, dword [ebp - 0x820]
cmp eax, dword [ebp - 0xe4]
jl 0x10050270
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x318], 0
je 0x10050270
mov dword [ebp - 0x564], 1
jmp 0x10050277
and dword [ebp - 0x564], 0
mov eax, dword [ebp - 0x34c]
mov dword [ebp - 0x9d8], eax
mov eax, dword [ebp - 0x564]
mov dword [ebp - 0x938], eax
mov eax, dword [ebp - 0x34c]
dec eax
mov dword [ebp - 0x34c], eax
mov eax, dword [ebp - 0x9d8]
cmp eax, dword [ebp - 0x938]
jle 0x100502b6
mov dword [ebp - 0x828], 1
jmp 0x100502bd
and dword [ebp - 0x828], 0
mov eax, dword [ebp - 0xe4]
imul eax, dword [ebp - 0x828]
test eax, eax
je 0x100502ea
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x318], 0
je 0x100502ea
mov dword [ebp - 0x56c], 1
jmp 0x100502f1
and dword [ebp - 0x56c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x318]
cmp dword [ebp - 0x56c], eax
jl 0x10050312
mov dword [ebp - 0x830], 1
jmp 0x10050319
and dword [ebp - 0x830], 0
cmp dword [ebp - 0x830], 0
jb 0x1005032e
mov dword [ebp - 0x574], 1
jmp 0x10050335
and dword [ebp - 0x574], 0
cmp dword [ebp - 0x574], 0x28d92279
jle 0x1005034d
mov dword [ebp - 0x57c], 1
jmp 0x10050354
and dword [ebp - 0x57c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1f8]
dec eax
mov dword [ebp - 0x838], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x838]
mov dword [ebp + eax - 0x1f8], ecx
mov eax, dword [ebp - 0x838]
cmp eax, dword [ebp - 0x57c]
jle 0x10050397
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1f8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1f8]
mov dword [ebp - 0x354], eax
mov eax, dword [ebp - 0xe4]
cmp dword [ebp - 0x354], eax
jne 0x100503c4
mov dword [ebp - 0x840], 1
jmp 0x100503cb
and dword [ebp - 0x840], 0
cmp dword [ebp - 0x840], 0xfffa
je 0x100503e3
mov dword [ebp - 0x9f0], 1
jmp 0x100503ea
and dword [ebp - 0x9f0], 0
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0xc00], eax
cmp dword [ebp - 0x354], 0
jne 0x10050406
cmp dword [ebp - 0xe4], 0
cmp dword [ebp - 0x13c], 0xec6f
jne 0x1005041e
mov dword [ebp - 0x584], 1
jmp 0x10050425
and dword [ebp - 0x584], 0
mov eax, dword [ebp - 0x13c]
cmp dword [ebp - 0x584], eax
jg 0x1005043f
mov dword [ebp - 0x848], 1
jmp 0x10050446
and dword [ebp - 0x848], 0
mov eax, dword [ebp - 0xe4]
cmp dword [ebp - 0x848], eax
je 0x10050460
mov dword [ebp - 0x58c], 1
jmp 0x10050467
and dword [ebp - 0x58c], 0
mov eax, 0xa4a9
sub eax, dword [ebp - 0x58c]
mov dword [ebp - 0x940], eax
mov byte [ebp - 0x2cc], 2
mov byte [ebp - 0x2cb], 0xb5
mov byte [ebp - 0x2ca], 0
mov byte [ebp - 0x2c9], 6
mov byte [ebp - 0x2c8], 5
mov byte [ebp - 0x2c7], 0
mov byte [ebp - 0x2c6], 0x1a
mov byte [ebp - 0x2c5], 0xfe
mov byte [ebp - 0x2c4], 0xb6
mov byte [ebp - 0x2c3], 0x9a
mov byte [ebp - 0x2c2], 0x60
mov byte [ebp - 0x2c1], 0x53
mov byte [ebp - 0x2c0], 0x31
mov byte [ebp - 0x2bf], 0x3a
mov byte [ebp - 0x2be], 0x9b
mov byte [ebp - 0x2bd], 0x81
mov byte [ebp - 0x2bc], 0xdf
mov byte [ebp - 0x2bb], 0x48
mov byte [ebp - 0x2ba], 0xb9
mov byte [ebp - 0x2b9], 0x81
mov byte [ebp - 0x2b8], 0xac
mov byte [ebp - 0x2b7], 0xec
mov byte [ebp - 0x2b6], 0xd4
mov byte [ebp - 0x2b5], 0x93
mov byte [ebp - 0x2b4], 0x5c
mov byte [ebp - 0x2b3], 0xfd
mov byte [ebp - 0x2b2], 0x43
mov byte [ebp - 0x2b1], 0xea
mov byte [ebp - 0x2b0], 0x75
mov byte [ebp - 0x2af], 0x57
mov byte [ebp - 0x2ae], 0xdc
mov byte [ebp - 0x2ad], 0x6b
mov byte [ebp - 0x2ac], 0x3f
mov byte [ebp - 0x2ab], 8
mov byte [ebp - 0x2aa], 1
mov byte [ebp - 0x2a9], 3
mov byte [ebp - 0x2a8], 7
mov byte [ebp - 0x2a7], 7
mov byte [ebp - 0x2a6], 1
mov byte [ebp - 0x2a5], 6
mov byte [ebp - 0x2a4], 7
mov byte [ebp - 0x2a3], 9
mov byte [ebp - 0x2a2], 1
mov byte [ebp - 0x2a1], 1
mov byte [ebp - 0x2a0], 5
mov byte [ebp - 0x29f], 4
mov byte [ebp - 0x29e], 0xd
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x2cc]
or eax, 0x82
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x2cc]
and ecx, 0x82
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x2cc]
mov byte [ebp + ecx - 0x8fc], al
mov dword [ebp - 0x60], 2
and dword [ebp - 0x274], 0
jmp 0x10050617
mov eax, dword [ebp - 0x60]
inc eax
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0x2f
jae 0x100506dc
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x2cc]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x60], eax
jne 0x10050661
mov eax, dword [ebp - 0x60]
movzx eax, byte [ebp + eax - 0x2cc]
inc eax
mov dword [ebp - 0x274], eax
mov eax, dword [ebp - 0x60]
movzx eax, byte [ebp + eax - 0x2cc]
mov ecx, dword [ebp - 0x60]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x60], eax
jmp 0x1005060f
mov eax, dword [ebp - 0x60]
movzx eax, byte [ebp + eax - 0x2cb]
mov ecx, dword [ebp - 0x60]
sub ecx, dword [ebp - 0x274]
movzx ecx, byte [ebp + ecx - 0x2ce]
movsx ecx, byte [ebp + ecx - 0x8fc]
or eax, ecx
mov ecx, dword [ebp - 0x60]
movzx ecx, byte [ebp + ecx - 0x2cb]
mov edx, dword [ebp - 0x60]
sub edx, dword [ebp - 0x274]
movzx edx, byte [ebp + edx - 0x2ce]
movsx edx, byte [ebp + edx - 0x8fc]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x60]
movzx ecx, byte [ebp + ecx - 0x2cc]
mov byte [ebp + ecx - 0x8fc], al
push 0
push 0x6db5
lea eax, [ebp - 0x274]
push eax
call fcn.1004e4fb
add esp, 0xc
jmp 0x1005060f
xor eax, eax
inc eax
imul eax, eax, 0xa
mov byte [ebp + eax - 0x8fc], 0
mov dword [ebp - 0x9e0], 8
push 0x71c9
lea eax, [ebp - 0x9e0]
push eax
push 1
call fcn.1004db84
add esp, 0xc
mov byte [ebp - 0x129], 0
movzx eax, byte [ebp - 0x129]
test eax, eax
je 0x10050724
push 1
call fcn.1004dbf8
pop ecx
lea eax, [ebp - 0x8fc]
push eax
lea ecx, [ebp - 0xd54]
call fcn.1002d2e1
mov dword [ebp - 0x948], eax
mov eax, dword [ebp - 0x948]
mov dword [ebp - 0x9f4], eax
and dword [ebp - 4], 0
push 0xa
xor edx, edx
mov ecx, dword [ebp - 0x9f4]
call fcn.100381be
pop ecx
mov dword [ebp - 0xa38], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd54]
call fcn.1001dca7
mov dword [ebp - 0x27c], 0
mov dword [ebp - 0x850], 0x14c90d29
mov dword [ebp - 0x950], 0x5e790e86
mov dword [ebp - 0xc08], 0x8e85a7b0
mov dword [ebp - 0x860], 0xfffffff6
mov dword [ebp - 0x200], 0
jmp 0x100507bc
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 2
jge 0x100507d8
mov eax, dword [ebp - 0x200]
mov dword [ebp + eax*4 - 0xca4], 0
jmp 0x100507af
cmp dword [ebp - 0x27c], 0xfe77
jle 0x100507f0
mov dword [ebp - 0x594], 1
jmp 0x100507f7
and dword [ebp - 0x594], 0
mov eax, dword [ebp - 0x27c]
mov dword [ebp - 0x850], eax
cmp dword [ebp - 0x850], 1
jg 0x10050818
mov eax, dword [ebp + 8]
mov dword [ebp - 0x9a4], eax
mov eax, dword [ebp - 0x9a4]
mov dword [ebp - 0x9ac], eax
mov eax, dword [ebp - 0x9ac]
and dword [eax], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret