Function at 0x100484e1
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1008a254
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x5cc
push esi
and dword [ebp - 0x16c], 0
push 1
lea ecx, [ebp - 0x468]
call fcn.1001a98c
and dword [ebp - 4], 0
mov dword [ebp - 0x36c], 0xc4d8e5cc
mov dword [ebp - 0x84], 0
jmp 0x1004853b
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 1
jge 0x1004855d
push dword [ebp - 0x84]
lea ecx, [ebp - 0x468]
call fcn.1001aa1a
mov dword [eax], 0xd3df75dc
jmp 0x1004852e
push 0x1b6f
push 0x5ade
push 0x3eeb
push 0x3b38
lea eax, [ebp - 0x36c]
push eax
push 0x6173
push 0x4ee4
push 0x7796
push 0x3a18
push 0x7cce
push 0x4fc0
push 0
lea eax, [ebp - 0x468]
push eax
call fcn.1004bef4
add esp, 0x34
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x468]
call fcn.1001aa15
mov dword [ebp - 0x574], 4
mov byte [ebp - 0x4a], 0
movzx eax, byte [ebp - 0x4a]
test eax, eax
je 0x100485d4
push 0
call fcn.100484a7
pop ecx
mov byte [ebp - 0x42], 0
movzx eax, byte [ebp - 0x42]
test eax, eax
je 0x100485f4
push 0x57d0
push 0
push 0xbdf
call fcn.1004cdf0
add esp, 0xc
mov byte [ebp - 0xf4], 0xa
mov byte [ebp - 0xf3], 0x3a
mov byte [ebp - 0xf2], 0xd
mov byte [ebp - 0xf1], 5
mov byte [ebp - 0xf0], 2
mov byte [ebp - 0xef], 0xd
mov byte [ebp - 0xee], 8
mov byte [ebp - 0xed], 0xa
mov byte [ebp - 0xec], 6
mov byte [ebp - 0xeb], 0xe
mov byte [ebp - 0xea], 0xc
mov byte [ebp - 0xe9], 0xa
mov byte [ebp - 0xe8], 0x19
mov byte [ebp - 0xe7], 0x17
mov byte [ebp - 0xe6], 0x11
mov byte [ebp - 0xe5], 8
mov byte [ebp - 0xe4], 0x16
mov byte [ebp - 0xe3], 5
mov byte [ebp - 0xe2], 0xf
mov byte [ebp - 0xe1], 7
mov byte [ebp - 0xe0], 0xb
mov byte [ebp - 0xdf], 0x1c
mov byte [ebp - 0xde], 1
mov byte [ebp - 0xdd], 0x61
mov byte [ebp - 0xdc], 1
mov byte [ebp - 0xdb], 0xe
mov byte [ebp - 0xda], 0x10
mov byte [ebp - 0xd9], 0x13
mov byte [ebp - 0xd8], 0x13
mov byte [ebp - 0xd7], 5
mov byte [ebp - 0xd6], 0x12
mov byte [ebp - 0xd5], 7
mov byte [ebp - 0xd4], 9
mov byte [ebp - 0xd3], 0x19
mov byte [ebp - 0xd2], 0x14
mov byte [ebp - 0xd1], 0x1f
mov byte [ebp - 0xd0], 0xe
mov byte [ebp - 0xcf], 0x1a
mov byte [ebp - 0xce], 0
mov byte [ebp - 0xcd], 0xe
mov byte [ebp - 0xcc], 0x15
mov byte [ebp - 0xcb], 0x17
mov byte [ebp - 0xca], 7
mov byte [ebp - 0xc9], 0x1e
mov byte [ebp - 0xc8], 0x18
mov byte [ebp - 0xc7], 0x11
mov byte [ebp - 0xc6], 4
mov byte [ebp - 0xc5], 0x1c
mov byte [ebp - 0xc4], 5
mov byte [ebp - 0xc3], 3
mov byte [ebp - 0xc2], 3
mov byte [ebp - 0xc1], 2
mov byte [ebp - 0xc0], 0x17
mov byte [ebp - 0xbf], 0x1c
mov dword [ebp - 0x54], 1
mov dword [ebp - 0x128], 0xfffffffc
mov byte [ebp - 0x49], 0
push 0
lea eax, [ebp - 0x49]
push eax
call fcn.1004b655
pop ecx
pop ecx
mov dword [ebp - 0x54], 0xfffffff8
jmp 0x100487a0
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0xe
jge 0x10048aca
mov dword [ebp - 0x450], 1
mov dword [ebp - 0x44c], 1
mov dword [ebp - 0x448], 1
mov dword [ebp - 0x444], 1
lea ecx, [ebp - 0x115]
call fcn.1000a693
push eax
lea eax, [ebp - 0x440]
push eax
lea eax, [ebp - 0x450]
push eax
lea ecx, [ebp - 0x5b0]
call fcn.1001aa29
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x150]
call fcn.1001a9eb
mov dword [ebp - 4], 1
mov dword [ebp - 0xb8], 0x1fc9a57b
mov dword [ebp - 0xac], 0
jmp 0x10048831
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 2
jge 0x1004884d
mov eax, dword [ebp - 0xac]
mov dword [ebp + eax*4 - 0x504], 0
jmp 0x10048824
push 1
lea ecx, [ebp - 0x150]
call fcn.1001aa1a
and dword [eax], 0
jmp 0x10048883
push 1
lea ecx, [ebp - 0x150]
call fcn.1001aa1a
mov dword [ebp - 0x1d8], eax
mov eax, dword [ebp - 0x1d8]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x1d8]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x150]
call fcn.1001aa1a
cmp dword [eax], 1
jg 0x100488c2
mov byte [ebp - 0x48], 0
lea eax, [ebp - 0x48]
push eax
push 0x35c4
push 0x4be5
push 0x3d83
push 0x616
push 0x42c3
push 0
call fcn.1004cbdc
add esp, 0x1c
jmp 0x1004885f
cmp dword [ebp - 0xb8], 0
jne 0x10048a71
cmp dword [ebp - 0xb8], 0
jne 0x100488f3
push 1
lea ecx, [ebp - 0x150]
call fcn.1001aa1a
cmp dword [eax], 0
jne 0x100488f3
and dword [ebp - 0x308], 0
jmp 0x100488fd
mov dword [ebp - 0x308], 1
cmp dword [ebp - 0x308], 6
jle 0x10048912
mov dword [ebp - 0x31c], 1
jmp 0x10048919
and dword [ebp - 0x31c], 0
mov eax, dword [ebp - 0xb8]
cmp dword [ebp - 0x31c], eax
jne 0x10048933
mov dword [ebp - 0x324], 1
jmp 0x1004893a
and dword [ebp - 0x324], 0
mov eax, dword [ebp - 0x54]
cmp eax, dword [ebp - 0x324]
jl 0x10048951
mov dword [ebp - 0x32c], 1
jmp 0x10048958
and dword [ebp - 0x32c], 0
cmp dword [ebp - 0x32c], 0xc6a3
jne 0x10048970
mov dword [ebp - 0x334], 1
jmp 0x10048977
and dword [ebp - 0x334], 0
mov eax, dword [ebp - 0x54]
cmp eax, dword [ebp - 0x334]
jg 0x1004898e
mov dword [ebp - 0x2d4], 1
jmp 0x10048995
and dword [ebp - 0x2d4], 0
push 2
lea ecx, [ebp - 0x150]
call fcn.1001aa1a
mov ecx, dword [ebp - 0x2d4]
cmp ecx, dword [eax]
je 0x100489b8
mov dword [ebp - 0x2e0], 1
jmp 0x100489bf
and dword [ebp - 0x2e0], 0
cmp dword [ebp - 0x2e0], 0xfffffffc
jle 0x100489d4
mov dword [ebp - 0x160], 1
jmp 0x100489db
and dword [ebp - 0x160], 0
mov eax, dword [ebp - 0xb8]
cmp dword [ebp - 0x160], eax
jne 0x100489f5
mov dword [ebp - 0x2e8], 1
jmp 0x100489fc
and dword [ebp - 0x2e8], 0
mov eax, dword [ebp - 0x2e8]
mov dword [ebp - 0x128], eax
mov esi, dword [ebp - 0x128]
push 1
lea ecx, [ebp - 0x150]
call fcn.1001aa1a
cmp esi, dword [eax]
jle 0x10048a2b
mov dword [ebp - 0x168], 1
jmp 0x10048a32
and dword [ebp - 0x168], 0
cmp dword [ebp - 0x168], 1
jge 0x10048a47
mov dword [ebp - 0x2f0], 1
jmp 0x10048a4e
and dword [ebp - 0x2f0], 0
mov eax, dword [ebp - 0x2f0]
add eax, 0xfff8
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x504]
jg 0x10048a71
and dword [ebp - 0x170], 0
jmp 0x10048a7b
mov dword [ebp - 0x170], 1
cmp dword [ebp - 0x170], 0x6c74aa0d
jg 0x10048aa3
cmp dword [ebp - 0x128], 0
je 0x10048aa1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x150]
call fcn.1001aa15
jmp 0x10048aca
jmp 0x10048ab6
push 3
lea ecx, [ebp - 0x150]
call fcn.1001aa1a
mov dword [eax], 0xfffffffe
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x150]
call fcn.1001aa15
jmp 0x10048799
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0xf4]
or eax, 0x51
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0xf4]
and ecx, 0x51
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0xf4]
mov byte [ebp + ecx - 0x4a8], al
mov dword [ebp - 0x14], 2
and dword [ebp - 0x6c], 0
jmp 0x10048b18
mov eax, dword [ebp - 0x14]
inc eax
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x36
jae 0x10049d1b
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0xf4]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x14], eax
jne 0x10049506
mov dword [ebp - 0x1c], 5
mov dword [ebp - 0x28], 1
mov dword [ebp - 0x120], 0x62a4b15
mov dword [ebp - 0x130], 0xffff
mov dword [ebp - 0x1c], 4
jmp 0x10048b6f
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0xfffffff8
je 0x1004908d
mov dword [ebp - 0x98], 0x2071
mov dword [ebp - 0x74], 0xfffffff9
mov dword [ebp - 0x388], 0
mov dword [ebp - 0x390], 0x1213072
mov dword [ebp - 0x3cc], 0xdd5c0aec
mov dword [ebp - 0x104], 0x14648a57
mov dword [ebp - 0x3d4], 0x3ecb407c
mov dword [ebp - 0x3e4], 0xffffffff
push 1
lea ecx, [ebp - 0x428]
call fcn.1001a98c
mov dword [ebp - 4], 2
push 0
lea eax, [ebp - 0x4f0]
push eax
lea eax, [ebp - 0x428]
push eax
push 0x556c
push 0x1283
call fcn.1004afda
add esp, 0x14
cmp dword [ebp - 0x1c], 1
jne 0x10048c0e
mov dword [ebp - 0x2f8], 1
jmp 0x10048c15
and dword [ebp - 0x2f8], 0
cmp dword [ebp - 0x2f8], 8
ja 0x10048c2a
mov dword [ebp - 0x300], 1
jmp 0x10048c31
and dword [ebp - 0x300], 0
mov eax, dword [ebp - 0x98]
cmp eax, dword [ebp - 0x300]
jge 0x10048c4b
mov dword [ebp - 0x17c], 1
jmp 0x10048c52
and dword [ebp - 0x17c], 0
mov eax, dword [ebp - 0x98]
imul eax, dword [ebp - 0x17c]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x74], eax
jge 0x10048c76
mov dword [ebp - 0x264], 1
jmp 0x10048c7d
and dword [ebp - 0x264], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x264]
cmp eax, dword [ebp - 0x1c]
jle 0x10048ca3
cmp dword [ebp - 0x28], 0
je 0x10048ca3
mov dword [ebp - 0x184], 1
jmp 0x10048caa
and dword [ebp - 0x184], 0
mov eax, dword [ebp - 0x184]
sub eax, dword [ebp - 0x388]
sub eax, dword [ebp - 0x390]
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x330], 1
jmp 0x10048cd5
cmp dword [ebp - 0x330], 0xfffe
ja 0x10048e85
mov dword [ebp - 0x90], 0
jmp 0x10048cfe
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 2
jge 0x10048d1a
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0x39c], 0xfffffff8
jmp 0x10048cf1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x39c]
mov dword [ebp - 0x578], eax
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x1c], eax
jge 0x10048d41
mov dword [ebp - 0x18c], 1
jmp 0x10048d48
and dword [ebp - 0x18c], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x18c], eax
jl 0x10048d5f
mov dword [ebp - 0x26c], 1
jmp 0x10048d66
and dword [ebp - 0x26c], 0
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x26c], eax
jle 0x10048d7d
mov dword [ebp - 0x194], 1
jmp 0x10048d84
and dword [ebp - 0x194], 0
mov eax, dword [ebp - 0x194]
sub eax, dword [ebp - 0x3cc]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x39c]
jne 0x10048dab
mov dword [ebp - 0x2dc], 1
jmp 0x10048db2
and dword [ebp - 0x2dc], 0
cmp dword [ebp - 0x2dc], 0x504e
jge 0x10048dca
mov dword [ebp - 0x19c], 1
jmp 0x10048dd1
and dword [ebp - 0x19c], 0
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x28], eax
jg 0x10048dee
mov dword [ebp - 0x274], 1
jmp 0x10048df5
and dword [ebp - 0x274], 0
mov eax, dword [ebp - 0x274]
mov dword [ebp - 0x104], eax
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x4f8], eax
cmp dword [ebp - 0x120], 0
je 0x10048e32
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x39c], 0
je 0x10048e32
mov dword [ebp - 0x1a4], 1
jmp 0x10048e39
and dword [ebp - 0x1a4], 0
cmp dword [ebp - 0x1a4], 0x52e2cc7b
jl 0x10048e51
mov dword [ebp - 0x318], 1
jmp 0x10048e58
and dword [ebp - 0x318], 0
cmp dword [ebp - 0x318], 0
jne 0x10048e6d
mov dword [ebp - 0x1ac], 1
jmp 0x10048e74
and dword [ebp - 0x1ac], 0
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x3d4], eax
jmp 0x10049079
mov dword [ebp - 0x3dc], 0xe92f
push 2
lea ecx, [ebp - 0x404]
call fcn.1001a98c
mov byte [ebp - 4], 3
mov dword [ebp - 0x33c], 1
mov dword [ebp - 0x1b4], 0xfa1c18a1
mov dword [ebp - 0xa8], 0
jmp 0x10048ecd
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 2
jge 0x10048eef
push dword [ebp - 0xa8]
lea ecx, [ebp - 0x404]
call fcn.1001aa1a
mov dword [eax], 0x3565e139
jmp 0x10048ec0
lea eax, [ebp - 0x33c]
push eax
push 0
lea eax, [ebp - 0x28]
push eax
push 0x7e7b
lea eax, [ebp - 0x3dc]
push eax
push 0x62b1
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0x3e4]
push eax
lea eax, [ebp - 0x130]
push eax
lea eax, [ebp - 0x98]
push eax
lea eax, [ebp - 0x404]
push eax
call fcn.1004ac05
add esp, 0x2c
mov eax, dword [ebp - 0x1b4]
mov ecx, dword [ebp - 0x130]
add ecx, 0x35609592
sub eax, ecx
cmp eax, 0xffffffff
jne 0x10048f5d
mov dword [ebp - 0x27c], 1
jmp 0x10048f64
and dword [ebp - 0x27c], 0
cmp dword [ebp - 0x27c], 0
jne 0x10048f79
mov dword [ebp - 0x3ec], 1
jmp 0x10048f80
and dword [ebp - 0x3ec], 0
push 0
lea ecx, [ebp - 0x428]
call fcn.1001aa1a
cmp dword [ebp - 0x1b4], 0
je 0x10048fa8
cmp dword [ebp - 0x28], 0
je 0x10048fa8
mov dword [ebp - 0x2e4], 1
jmp 0x10048faf
and dword [ebp - 0x2e4], 0
cmp dword [ebp - 0x2e4], 0x91cd
jle 0x10048fc7
mov dword [ebp - 0x1bc], 1
jmp 0x10048fce
and dword [ebp - 0x1bc], 0
mov eax, dword [ebp - 0x130]
add eax, dword [ebp - 0x1bc]
cmp eax, 0x3ae4
jge 0x10048fed
mov dword [ebp - 0x3f4], 1
jmp 0x10048ff4
and dword [ebp - 0x3f4], 0
push 0
lea ecx, [ebp - 0x428]
call fcn.1001aa1a
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x54c], eax
push 0
lea ecx, [ebp - 0x404]
call fcn.1001aa1a
mov ecx, dword [ebp - 0x28]
cmp dword [eax], ecx
jne 0x1004902d
mov dword [ebp - 0x284], 1
jmp 0x10049034
and dword [ebp - 0x284], 0
push 1
lea ecx, [ebp - 0x404]
call fcn.1001aa1a
mov ecx, dword [ebp - 0x284]
cmp ecx, dword [eax]
jl 0x10049057
mov dword [ebp - 0x1c4], 1
jmp 0x1004905e
and dword [ebp - 0x1c4], 0
mov eax, dword [ebp - 0x1c4]
mov dword [ebp - 0x33c], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x404]
call fcn.1001aa15
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x428]
call fcn.1001aa15
jmp 0x10048b68
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0xf4]
inc eax
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x3a8], 0xffffffff
mov dword [ebp - 0x29c], 6
mov dword [ebp - 0x2ec], 6
push 1
lea ecx, [ebp - 0x414]
call fcn.1001a98c
mov dword [ebp - 4], 4
mov dword [ebp - 0x380], 0xcc90
mov dword [ebp - 0x70], 0
jmp 0x100490e8
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 3
jge 0x100490fb
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0x80], 4
jmp 0x100490e1
push 0
push 0x1c7e
lea eax, [ebp - 0x70]
push eax
push 0x7cfe
lea eax, [ebp - 0x414]
push eax
call fcn.1004adcc
add esp, 0x14
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x80], 0xffffffee
jmp 0x1004913f
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x80]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x80], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x80], 1
jg 0x1004915f
mov byte [ebp - 0x43], 0
push 0
lea eax, [ebp - 0x43]
push eax
call fcn.1004b3e0
pop ecx
pop ecx
jmp 0x1004912a
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x80]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x80]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x80]
jle 0x1004918c
mov dword [ebp - 0x1cc], 1
jmp 0x10049193
and dword [ebp - 0x1cc], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x80]
cmp dword [ebp - 0x1cc], eax
jle 0x100491b0
mov dword [ebp - 0x28c], 1
jmp 0x100491b7
and dword [ebp - 0x28c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x80]
cmp dword [ebp - 0x28c], eax
jg 0x100491d5
mov dword [ebp - 0x1d4], 1
jmp 0x100491dc
and dword [ebp - 0x1d4], 0
imul eax, dword [ebp - 0x1d4], 0xc9f1
cmp eax, 0x6c8c
jg 0x1004920f
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x80], 0
je 0x1004920f
cmp dword [ebp - 0x3a8], 0
je 0x1004920f
mov dword [ebp - 0x374], 1
jmp 0x10049216
and dword [ebp - 0x374], 0
mov eax, dword [ebp - 0x29c]
mov dword [ebp - 0x2ec], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x80]
sub eax, dword [ebp - 0x2ec]
jne 0x10049240
mov dword [ebp - 0x1dc], 1
jmp 0x10049247
and dword [ebp - 0x1dc], 0
push 4
pop eax
shl eax, 1
mov esi, dword [ebp + eax - 0x80]
add esi, dword [ebp - 0x1dc]
push 0
lea ecx, [ebp - 0x414]
call fcn.1001aa1a
cmp esi, dword [eax]
je 0x10049273
mov dword [ebp - 0x294], 1
jmp 0x1004927a
and dword [ebp - 0x294], 0
push 0
lea ecx, [ebp - 0x414]
call fcn.1001aa1a
mov ecx, dword [ebp - 0x294]
cmp ecx, dword [eax]
je 0x1004929d
mov dword [ebp - 0x1e4], 1
jmp 0x100492a4
and dword [ebp - 0x1e4], 0
push 0
lea ecx, [ebp - 0x414]
call fcn.1001aa1a
mov ecx, dword [ebp - 0x1e4]
cmp ecx, dword [eax]
je 0x100492c7
mov dword [ebp - 0x320], 1
jmp 0x100492ce
and dword [ebp - 0x320], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x80]
cmp eax, dword [ebp - 0x320]
jge 0x100492ec
mov dword [ebp - 0x1ec], 1
jmp 0x100492f3
and dword [ebp - 0x1ec], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x80]
imul eax, dword [ebp - 0x1ec]
add eax, dword [ebp - 0x29c]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x80]
jne 0x10049326
push 3
pop eax
test eax, eax
jne 0x10049326
and dword [ebp - 0x1f4], 0
jmp 0x10049330
mov dword [ebp - 0x1f4], 1
cmp dword [ebp - 0x1f4], 1
jne 0x10049345
mov dword [ebp - 0x2f4], 1
jmp 0x1004934c
and dword [ebp - 0x2f4], 0
mov eax, dword [ebp - 0x2f4]
mov dword [ebp - 0x380], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x414]
call fcn.1001aa15
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0xf4]
mov ecx, dword [ebp - 0x14]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x40], 1
mov dword [ebp - 0x204], 0xd3740063
mov dword [ebp - 0x10c], 0xa38d0672
mov dword [ebp - 0x40], 4
jmp 0x100493a7
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0xa
jne 0x10049501
mov dword [ebp - 0x30], 1
mov dword [ebp - 0xbc], 0
jmp 0x100493d1
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 3
jge 0x100493ed
mov eax, dword [ebp - 0xbc]
mov dword [ebp + eax*4 - 0x48c], 0x4edc0223
jmp 0x100493c4
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x518], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x4b0], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x4b4], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x4bc], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x4c4], eax
mov eax, dword [ebp - 0x40]
inc eax
cmp eax, 0x6371
jg 0x10049437
mov dword [ebp - 0x1fc], 1
jmp 0x1004943e
and dword [ebp - 0x1fc], 0
mov eax, dword [ebp - 0x30]
imul eax, dword [ebp - 0x1fc]
cmp eax, dword [ebp - 0x30]
jl 0x10049459
mov dword [ebp - 0x2a4], 1
jmp 0x10049460
and dword [ebp - 0x2a4], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x2a4], eax
je 0x10049477
mov dword [ebp - 0x3d8], 1
jmp 0x1004947e
and dword [ebp - 0x3d8], 0
mov dword [ebp - 0x204], 0x3938
mov eax, dword [ebp - 0x204]
mov dword [ebp - 0x4cc], eax
mov dword [ebp - 0x10c], 1
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x4d4], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x48c]
mov dword [ebp - 0x4dc], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x48c], 0
jne 0x100494df
cmp dword [ebp - 0x10c], 0
jne 0x100494df
and dword [ebp - 0x338], 0
jmp 0x100494e9
mov dword [ebp - 0x338], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x338]
mov dword [ebp + eax - 0x48c], ecx
jmp 0x100493a0
jmp 0x10048b10
mov dword [ebp - 0x34], 0xfffffff9
mov dword [ebp - 0x304], 0xf7e813a3
mov dword [ebp - 0x234], 0xf844
mov dword [ebp - 0x3f8], 0x739032f8
mov dword [ebp - 0x38c], 0
mov dword [ebp - 0x34], 0xffffffe3
jmp 0x10049545
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0xfffffff1
jl 0x100498d0
push 1
lea ecx, [ebp - 0x144]
call fcn.1001a98c
mov dword [ebp - 4], 5
mov dword [ebp - 0x3a4], 1
lea eax, [ebp - 0x144]
push eax
push 0x6695
push 0
lea eax, [ebp - 0x4e4]
push eax
call fcn.1004af64
add esp, 0x10
cmp dword [ebp - 0x34], 0
je 0x100495a4
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x144]
call fcn.1001aa15
jmp 0x100498d0
push 0
lea ecx, [ebp - 0x144]
call fcn.1001aa1a
and dword [eax], 0
jmp 0x100495da
push 0
lea ecx, [ebp - 0x144]
call fcn.1001aa1a
mov dword [ebp - 0x20c], eax
mov eax, dword [ebp - 0x20c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x20c]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x144]
call fcn.1001aa1a
cmp dword [eax], 7
jg 0x100498bc
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x2c], 0
jmp 0x10049607
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0x12
jg 0x1004989d
mov dword [ebp - 0x224], 0xffffffff
mov dword [ebp - 0xa0], 0
jmp 0x10049634
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 3
jge 0x10049650
mov eax, dword [ebp - 0xa0]
mov dword [ebp + eax*4 - 0x538], 3
jmp 0x10049627
cmp dword [ebp - 0x34], 0
je 0x10049668
cmp dword [ebp - 0x34], 0
je 0x10049668
mov dword [ebp - 0x2ac], 1
jmp 0x1004966f
and dword [ebp - 0x2ac], 0
mov eax, dword [ebp - 0x2ac]
sub eax, dword [ebp - 0x2c]
cmp eax, 0xc443
jne 0x1004968b
mov dword [ebp - 0x214], 1
jmp 0x10049692
and dword [ebp - 0x214], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x214], eax
jne 0x100496b2
cmp dword [ebp - 0x234], 0
je 0x100496b2
mov dword [ebp - 0x2fc], 1
jmp 0x100496b9
and dword [ebp - 0x2fc], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x2fc], eax
jle 0x100496d0
mov dword [ebp - 0x21c], 1
jmp 0x100496d7
and dword [ebp - 0x21c], 0
mov eax, dword [ebp - 0x224]
cmp dword [ebp - 0x21c], eax
jle 0x100496f1
mov dword [ebp - 0x2b4], 1
jmp 0x100496f8
and dword [ebp - 0x2b4], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x2b4], eax
jne 0x10049715
cmp dword [ebp - 0x224], 0
jne 0x10049715
and dword [ebp - 0x328], 0
jmp 0x1004971f
mov dword [ebp - 0x328], 1
cmp dword [ebp - 0x328], 0x7756
jge 0x10049737
mov dword [ebp - 0x37c], 1
jmp 0x1004973e
and dword [ebp - 0x37c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x538]
mov dword [ebp - 0x4ec], eax
push 0xfffffffffffffff7
pop eax
test eax, eax
je 0x10049775
push 0
lea ecx, [ebp - 0x144]
call fcn.1001aa1a
cmp dword [eax], 0
je 0x10049775
mov dword [ebp - 0x22c], 1
jmp 0x1004977c
and dword [ebp - 0x22c], 0
mov eax, dword [ebp - 0x3f8]
add eax, dword [ebp - 0x22c]
cmp eax, dword [ebp - 0x2c]
jge 0x10049799
mov dword [ebp - 0x2bc], 1
jmp 0x100497a0
and dword [ebp - 0x2bc], 0
push 0
lea ecx, [ebp - 0x144]
call fcn.1001aa1a
mov ecx, dword [ebp - 0x2bc]
cmp ecx, dword [eax]
je 0x100497c3
mov dword [ebp - 0x384], 1
jmp 0x100497ca
and dword [ebp - 0x384], 0
mov eax, dword [ebp - 0x234]
mov dword [ebp - 0x4f4], eax
mov dword [ebp - 0x304], 0xa5d
cmp dword [ebp - 0x304], 0x2129
je 0x10049805
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x538], 0
jne 0x10049805
and dword [ebp - 0x23c], 0
jmp 0x1004980f
mov dword [ebp - 0x23c], 1
push 0
lea ecx, [ebp - 0x144]
call fcn.1001aa1a
mov eax, dword [eax]
imul eax, dword [ebp - 0x23c]
test eax, eax
jne 0x10049837
xor eax, eax
inc eax
jne 0x10049837
and dword [ebp - 0x2c4], 0
jmp 0x10049841
mov dword [ebp - 0x2c4], 1
mov eax, dword [ebp - 0x3a4]
cmp dword [ebp - 0x2c4], eax
je 0x1004985b
mov dword [ebp - 0x244], 1
jmp 0x10049862
and dword [ebp - 0x244], 0
push 0
lea ecx, [ebp - 0x144]
call fcn.1001aa1a
mov ecx, dword [ebp - 0x244]
cmp ecx, dword [eax]
jl 0x10049885
mov dword [ebp - 0x340], 1
jmp 0x1004988c
and dword [ebp - 0x340], 0
mov eax, dword [ebp - 0x340]
mov dword [ebp - 0x38c], eax
jmp 0x10049600
mov byte [ebp - 0x47], 0
movzx eax, byte [ebp - 0x47]
test eax, eax
je 0x100498b7
push 0
push 0x1a75
call fcn.1004ad85
pop ecx
pop ecx
jmp 0x100495b6
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x144]
call fcn.1001aa15
jmp 0x1004953e
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0xf3]
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x6c]
movzx ecx, byte [ebp + ecx - 0xf6]
movsx ecx, byte [ebp + ecx - 0x4a8]
add eax, ecx
mov ecx, dword [ebp - 0x14]
movzx ecx, byte [ebp + ecx - 0xf3]
mov edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0x6c]
movzx edx, byte [ebp + edx - 0xf6]
movsx edx, byte [ebp + edx - 0x4a8]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x14]
movzx ecx, byte [ebp + ecx - 0xf3]
mov edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0x6c]
movzx edx, byte [ebp + edx - 0xf6]
movsx edx, byte [ebp + edx - 0x4a8]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x14]
movzx ecx, byte [ebp + ecx - 0xf4]
mov byte [ebp + ecx - 0x4a8], al
mov dword [ebp - 0x2cc], 0x29
mov dword [ebp - 0x50], 0x197f0a29
mov dword [ebp - 0x198], 0
mov dword [ebp - 0xb4], 0x6e3e45bb
mov dword [ebp - 0x25c], 0x61a6b719
mov dword [ebp - 0x114], 1
mov dword [ebp - 0x134], 0xc33bab72
mov dword [ebp - 0x368], 0xfffffff8
mov dword [ebp - 0x364], 0xfffffff8
mov dword [ebp - 0x360], 0xfffffff8
mov dword [ebp - 0x35c], 0xfffffff8
mov dword [ebp - 0x188], 0xc8e1
mov dword [ebp - 0x3b4], 0xb218ad38
push 3
lea ecx, [ebp - 0x434]
call fcn.1001a98c
mov dword [ebp - 4], 6
mov dword [ebp - 0x180], 1
push 1
lea ecx, [ebp - 0x480]
call fcn.1001a98c
mov byte [ebp - 4], 7
mov dword [ebp - 0x20], 0
jmp 0x10049a0d
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jge 0x10049a23
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x314], 4
jmp 0x10049a06
mov dword [ebp - 0x20], 0
jmp 0x10049a33
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x10049a4f
push dword [ebp - 0x20]
lea ecx, [ebp - 0x434]
call fcn.1001aa1a
mov dword [eax], 1
jmp 0x10049a2c
lea eax, [ebp - 0x480]
push eax
push 0
lea eax, [ebp - 0x20]
push eax
push 0x1edb
call fcn.1004b984
add esp, 0x10
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x4fc], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x134]
cmp dword [ebp + eax - 0x314], ecx
je 0x10049a93
mov dword [ebp - 0x24c], 1
jmp 0x10049a9a
and dword [ebp - 0x24c], 0
mov eax, dword [ebp - 0x134]
cmp dword [ebp - 0x24c], eax
je 0x10049ab4
mov dword [ebp - 0x3ac], 1
jmp 0x10049abb
and dword [ebp - 0x3ac], 0
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x508], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x314]
mov dword [ebp - 0x520], eax
mov eax, dword [ebp - 0x2cc]
mov dword [ebp - 0x528], eax
mov eax, dword [ebp - 0x2cc]
mov dword [ebp - 0x254], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x254]
mov dword [ebp + eax - 0x314], ecx
mov eax, dword [ebp - 0x134]
cmp dword [ebp - 0x254], eax
jne 0x10049b2b
mov dword [ebp - 0x30c], 1
jmp 0x10049b32
and dword [ebp - 0x30c], 0
cmp dword [ebp - 0x30c], 0xfffffff9
jne 0x10049b49
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x368], 0
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x368], 0
je 0x10049b74
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x368], 0
je 0x10049b74
mov dword [ebp - 0x394], 1
jmp 0x10049b7b
and dword [ebp - 0x394], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x368]
mov dword [ebp - 0x560], eax
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x568], eax
mov eax, 0x42c8cda
cmp eax, 0xffffffff
jge 0x10049bb0
mov dword [ebp - 0x174], 1
jmp 0x10049bb7
and dword [ebp - 0x174], 0
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x25c], eax
mov eax, dword [ebp - 0x25c]
add eax, dword [ebp - 0x174]
imul eax, dword [ebp - 0x3b4]
mov ecx, dword [ebp - 0xb4]
imul ecx, eax
mov dword [ebp - 0x50], ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x368]
cmp dword [ebp - 0x50], eax
jg 0x10049c0a
mov dword [ebp - 0x178], 1
jmp 0x10049c11
and dword [ebp - 0x178], 0
push 2
lea ecx, [ebp - 0x434]
call fcn.1001aa1a
mov ecx, dword [ebp - 0x178]
mov dword [eax], ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x314]
sub eax, dword [ebp - 0x180]
cmp dword [ebp - 0x180], eax
je 0x10049c4d
mov dword [ebp - 0x190], 1
jmp 0x10049c54
and dword [ebp - 0x190], 0
mov dword [ebp - 0x50], 0x4457
mov esi, dword [ebp - 0x188]
imul esi, dword [ebp - 0x50]
imul esi, dword [ebp - 0x190]
push 0
lea ecx, [ebp - 0x480]
call fcn.1001aa1a
add esi, dword [eax]
je 0x10049c92
cmp dword [ebp - 0x198], 0
je 0x10049c92
mov dword [ebp - 0x1a0], 1
jmp 0x10049c99
and dword [ebp - 0x1a0], 0
push 2
lea ecx, [ebp - 0x434]
call fcn.1001aa1a
mov ecx, dword [ebp - 0x1a0]
sub ecx, dword [eax]
cmp ecx, dword [ebp - 0xb4]
jge 0x10049cc8
cmp dword [ebp - 0x114], 0
jne 0x10049cc8
and dword [ebp - 0x1a8], 0
jmp 0x10049cd2
mov dword [ebp - 0x1a8], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1a8]
mov dword [ebp + eax - 0x314], ecx
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x480]
call fcn.1001aa15
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x434]
call fcn.1001aa15
lea eax, [ebp - 0x6c]
push eax
push 0x7f6f
push 0
call fcn.1004b693
add esp, 0xc
jmp 0x10048b10
push 1
lea ecx, [ebp - 0x548]
call fcn.1001a98c
mov dword [ebp - 4], 8
mov dword [ebp - 0x88], 0
jmp 0x10049d48
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 1
jge 0x10049d67
push dword [ebp - 0x88]
lea ecx, [ebp - 0x548]
call fcn.1001aa1a
or dword [eax], 0xffffffff
jmp 0x10049d3b
mov byte [ebp - 0x45], 0
movzx eax, byte [ebp - 0x45]
test eax, eax
je 0x10049d87
push 0
push 0x653a
push 0x2286
call fcn.1004b10b
add esp, 0xc
mov byte [ebp - 0x44], 0
movzx eax, byte [ebp - 0x44]
test eax, eax
je 0x10049db1
push 0x64cd
push 0x3bb5
push 0x7529
push 0x20d2
push 0
call fcn.1004c627
add esp, 0x14
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x548]
call fcn.1001aa15
xor eax, eax
inc eax
imul eax, eax, 0x1a
mov byte [ebp + eax - 0x4a8], 0
push 0
call fcn.1004b502
pop ecx
lea eax, [ebp - 0x4a8]
push eax
lea ecx, [ebp - 0x5a8]
call fcn.100292d8
mov dword [ebp - 4], 9
push 1
lea ecx, [ebp - 0x558]
call fcn.1001a98c
mov byte [ebp - 4], 0xa
lea eax, [ebp - 0x4ac]
push eax
push 0x5667
push 0x3b64
lea eax, [ebp - 0x558]
push eax
push 0
call fcn.1004b854
add esp, 0x14
push 0x291
push 0
push 0x2ee2
call fcn.1004cb5c
add esp, 0xc
push 0x79fd
push 0
call fcn.1004cdb6
pop ecx
pop ecx
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x558]
call fcn.1001aa15
and dword [ebp - 0x94], 0
jmp 0x10049e69
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0x1b
jae 0x1004a19a
mov dword [ebp - 0x18], 0xd925
mov dword [ebp - 0x58], 5
mov dword [ebp - 0x12c], 0x89fff12f
mov dword [ebp - 0x11c], 0x3631af66
mov dword [ebp - 0x3c4], 1
mov dword [ebp - 0x8c], 0
jmp 0x10049ebb
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 1
jge 0x10049ed4
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0x64], 0xaa12afd7
jmp 0x10049eae
cmp dword [ebp - 0x18], 0
jne 0x10049ee9
cmp dword [ebp - 0x18], 0
jne 0x10049ee9
and dword [ebp - 0x1b0], 0
jmp 0x10049ef3
mov dword [ebp - 0x1b0], 1
mov eax, dword [ebp - 0x1b0]
sub eax, dword [ebp - 0x18]
cmp dword [ebp - 0x18], eax
jge 0x10049f0d
mov dword [ebp - 0x1b8], 1
jmp 0x10049f14
and dword [ebp - 0x1b8], 0
cmp dword [ebp - 0x1b8], 1
je 0x10049f29
mov dword [ebp - 0x1c0], 1
jmp 0x10049f30
and dword [ebp - 0x1c0], 0
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x1c0]
je 0x10049f47
mov dword [ebp - 0x1c8], 1
jmp 0x10049f4e
and dword [ebp - 0x1c8], 0
mov eax, dword [ebp - 0x1c8]
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0
jne 0x10049f75
mov eax, 0x866
test eax, eax
jne 0x10049f75
and dword [ebp - 0x1d0], 0
jmp 0x10049f7f
mov dword [ebp - 0x1d0], 1
cmp dword [ebp - 0x1d0], 0xffffffff
jbe 0x10049f94
mov dword [ebp - 0x3a0], 1
jmp 0x10049f9b
and dword [ebp - 0x3a0], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x514], eax
cmp dword [ebp - 0x12c], 0xd1cb
jg 0x10049fbc
mov dword [ebp - 0x154], 1
jmp 0x10049fc3
and dword [ebp - 0x154], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x154], eax
jg 0x10049fda
mov dword [ebp - 0x1e0], 1
jmp 0x10049fe1
and dword [ebp - 0x1e0], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x1e0], eax
jg 0x10049ff8
mov dword [ebp - 0x1e8], 1
jmp 0x10049fff
and dword [ebp - 0x1e8], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x58]
add eax, dword [ebp - 0x1e8]
cmp eax, dword [ebp - 0x18]
je 0x1004a01f
mov dword [ebp - 0x1f0], 1
jmp 0x1004a026
and dword [ebp - 0x1f0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1f0]
mov dword [ebp + eax - 0x64], ecx
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x18]
cmp dword [ebp + eax - 0x64], ecx
jg 0x1004a051
mov dword [ebp - 0x3bc], 1
jmp 0x1004a058
and dword [ebp - 0x3bc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x64]
mov dword [ebp - 0x56c], eax
cmp dword [ebp - 0x11c], 0
je 0x1004a086
cmp dword [ebp - 0x3c4], 0
je 0x1004a086
mov dword [ebp - 0x1f8], 1
jmp 0x1004a08d
and dword [ebp - 0x1f8], 0
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x1f8], eax
je 0x1004a0af
or eax, 0xffffffff
jne 0x1004a0af
cmp dword [ebp - 0x11c], 0
jne 0x1004a0af
and dword [ebp - 0x200], 0
jmp 0x1004a0b9
mov dword [ebp - 0x200], 1
mov eax, dword [ebp - 0x200]
sub eax, 0x4bbea1c0
cmp eax, 1
je 0x1004a0d5
mov dword [ebp - 0x208], 1
jmp 0x1004a0dc
and dword [ebp - 0x208], 0
mov eax, dword [ebp - 0x11c]
cmp dword [ebp - 0x208], eax
jge 0x1004a0fc
mov eax, 0x5379a1d1
test eax, eax
jne 0x1004a0fc
and dword [ebp - 0x3e0], 0
jmp 0x1004a106
mov dword [ebp - 0x3e0], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x64]
mov dword [ebp - 0x4b8], eax
or eax, 0xffffffff
cmp eax, 1
jbe 0x1004a12a
mov dword [ebp - 0x138], 1
jmp 0x1004a131
and dword [ebp - 0x138], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x138]
mov dword [ebp + eax - 0x64], ecx
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x138], eax
jl 0x1004a158
mov dword [ebp - 0x210], 1
jmp 0x1004a15f
and dword [ebp - 0x210], 0
cmp dword [ebp - 0x210], 0xf4fc6a3f
jne 0x1004a177
mov dword [ebp - 0x218], 1
jmp 0x1004a17e
and dword [ebp - 0x218], 0
mov eax, dword [ebp - 0x218]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x94]
mov byte [ebp + eax - 0x4a8], 0
jmp 0x10049e5c
mov dword [ebp - 0x124], 0xffffffff
mov dword [ebp - 0x230], 1
mov dword [ebp - 0x228], 0x34c865b4
mov dword [ebp - 0x240], 0xffffffff
mov dword [ebp - 0x3b0], 0x83cc47d1
mov dword [ebp - 0x24], 0
jmp 0x1004a1dc
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 4
jge 0x1004a1f2
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x5c0], 0x4f16efa4
jmp 0x1004a1d5
mov dword [ebp - 0x24], 0
jmp 0x1004a202
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jge 0x1004a218
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x510], 0x79b69b2e
jmp 0x1004a1fb
mov eax, dword [ebp - 0x124]
cmp dword [ebp - 0x124], eax
jge 0x1004a232
mov dword [ebp - 0x220], 1
jmp 0x1004a239
and dword [ebp - 0x220], 0
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x5c0], 0xb9dd952e
imul eax, dword [ebp - 0x220], 0xb9dd952e
mov dword [ebp - 0x230], eax
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0x228], eax
mov eax, dword [ebp - 0x228]
cmp dword [ebp - 0x230], eax
jl 0x1004a280
mov dword [ebp - 0x238], 1
jmp 0x1004a287
and dword [ebp - 0x238], 0
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x510], 0x2fdad5a5
mov eax, 0x2fdad5a5
cmp eax, 0xfffffffd
je 0x1004a2ae
mov dword [ebp - 0x248], 1
jmp 0x1004a2b5
and dword [ebp - 0x248], 0
mov eax, dword [ebp - 0x238]
mov dword [ebp - 0x240], eax
mov eax, dword [ebp - 0x240]
cmp eax, dword [ebp - 0x248]
jg 0x1004a2db
mov dword [ebp - 0x250], 1
jmp 0x1004a2e2
and dword [ebp - 0x250], 0
mov eax, dword [ebp - 0x250]
mov dword [ebp - 0x3b0], eax
push 0x100093d6
lea ecx, [ebp - 0x590]
call fcn.100292d8
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x9c], 0
jmp 0x1004a31b
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 1
jge 0x1004a337
mov eax, dword [ebp - 0x9c]
mov dword [ebp + eax*4 - 0x258], 0xdb58
jmp 0x1004a30e
mov byte [ebp - 0x46], 0
movzx eax, byte [ebp - 0x46]
test eax, eax
je 0x1004a357
push 0x692
push 0x2f2d
push 0
call fcn.1004b2fc
add esp, 0xc
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x258]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x258], eax
lea ecx, [ebp - 0x590]
call fcn.1001ae48
cmp eax, dword [ebp + 0xc]
je 0x1004ab7a
mov dword [ebp - 0x418], 0x6652d0da
push 1
lea ecx, [ebp - 0x474]
call fcn.1001a98c
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x5c], 0
jmp 0x1004a3b1
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 3
jge 0x1004a3c7
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x34c], 0x25b9b55b
jmp 0x1004a3aa
push 0
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x474]
push eax
push 0x34c2
push 0x3072
call fcn.1004ba1e
add esp, 0x14
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x34c], 0
jmp 0x1004a414
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x34c]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x34c], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x34c], 0xffffffeb
je 0x1004a569
mov dword [ebp - 0x60], 0xecc2443a
mov dword [ebp - 0x280], 0x5da2282d
mov dword [ebp - 0x3b8], 0xdac842f8
mov dword [ebp - 0x3e8], 0xffffffff
cmp dword [ebp - 0x60], 0
jne 0x1004a477
push 0
lea ecx, [ebp - 0x474]
call fcn.1001aa1a
mov dword [ebp - 0x108], eax
mov eax, dword [ebp - 0x108]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x108]
mov dword [ecx], eax
mov eax, dword [ebp - 0x418]
mov dword [ebp - 0x3b8], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x60]
cmp dword [ebp + eax - 0x34c], ecx
jg 0x1004a4a1
mov dword [ebp - 0x260], 1
jmp 0x1004a4a8
and dword [ebp - 0x260], 0
mov eax, dword [ebp - 0x280]
cmp dword [ebp - 0x260], eax
jg 0x1004a4c2
mov dword [ebp - 0x268], 1
jmp 0x1004a4c9
and dword [ebp - 0x268], 0
mov eax, dword [ebp - 0x60]
sub eax, dword [ebp - 0x268]
cmp eax, 7
jle 0x1004a4e3
mov dword [ebp - 0x270], 1
jmp 0x1004a4ea
and dword [ebp - 0x270], 0
cmp dword [ebp - 0x270], 0xb30498d2
jae 0x1004a502
mov dword [ebp - 0x278], 1
jmp 0x1004a509
and dword [ebp - 0x278], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x34c]
cmp dword [ebp - 0x278], eax
jg 0x1004a52a
mov dword [ebp - 0x288], 1
jmp 0x1004a531
and dword [ebp - 0x288], 0
mov eax, dword [ebp - 0x280]
cmp dword [ebp - 0x288], eax
jge 0x1004a54b
mov dword [ebp - 0x290], 1
jmp 0x1004a552
and dword [ebp - 0x290], 0
mov eax, dword [ebp - 0x290]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x3e8], eax
jmp 0x1004a3f9
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x474]
call fcn.1001aa15
call fcn.1006f667
mov esi, eax
lea ecx, [ebp - 0x5a8]
call fcn.1001ae48
mov ecx, eax
mov eax, esi
xor edx, edx
div ecx
mov dword [ebp - 0x41c], edx
push 1
lea ecx, [ebp - 0x100]
call fcn.1001a98c
mov byte [ebp - 4], 0xd
mov dword [ebp - 0xb0], 0xe1ca2961
mov dword [ebp - 0x51c], 0
mov dword [ebp - 0x4c0], 0xfffffff8
mov dword [ebp - 0x55c], 7
mov dword [ebp - 0x4c8], 0xfb5c4ce1
mov dword [ebp - 0x524], 9
mov dword [ebp - 0x4d0], 0x7ad11e75
mov dword [ebp - 0x15c], 0x7d660f18
mov dword [ebp - 0x570], 0xbf7d69fd
push 2
lea ecx, [ebp - 0x45c]
call fcn.1001a98c
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x10], 0
jmp 0x1004a624
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 1
jge 0x1004a640
push dword [ebp - 0x10]
lea ecx, [ebp - 0x100]
call fcn.1001aa1a
mov dword [eax], 1
jmp 0x1004a61d
mov dword [ebp - 0x10], 0
jmp 0x1004a650
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x1004a663
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x3c], 0x2c70bb74
jmp 0x1004a649
mov dword [ebp - 0x10], 0
jmp 0x1004a673
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x1004a68c
push dword [ebp - 0x10]
lea ecx, [ebp - 0x45c]
call fcn.1001aa1a
or dword [eax], 0xffffffff
jmp 0x1004a66c
mov dword [ebp - 0x10], 0
jmp 0x1004a69c
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x1004a6b2
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x43c], 0x1684
jmp 0x1004a695
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x3c], 0
jmp 0x1004a6d7
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3c]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x3c], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x3c], 0
jl 0x1004aaff
push 1
lea ecx, [ebp - 0x358]
call fcn.1001a98c
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x68], 1
mov dword [ebp - 0xa4], 0
jmp 0x1004a719
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 1
jge 0x1004a73b
push dword [ebp - 0xa4]
lea ecx, [ebp - 0x358]
call fcn.1001aa1a
mov dword [eax], 0x176df7e
jmp 0x1004a70c
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x3c]
lea ecx, [ebp - 0x100]
call fcn.1001aa1a
mov eax, dword [eax]
mov dword [ebp - 0xb0], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3c]
mov dword [ebp - 0x4d8], eax
push 0
lea ecx, [ebp - 0x100]
call fcn.1001aa1a
push 0
lea ecx, [ebp - 0x358]
call fcn.1001aa1a
mov dword [eax], 0xd39c7c6f
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x3c]
lea ecx, [ebp - 0x100]
call fcn.1001aa1a
cmp dword [eax], 0xd39c7c6f
jge 0x1004a7b1
mov dword [ebp - 0x298], 1
jmp 0x1004a7b8
and dword [ebp - 0x298], 0
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x3c]
lea ecx, [ebp - 0x100]
call fcn.1001aa1a
mov ecx, dword [ebp - 0x298]
cmp ecx, dword [eax]
jle 0x1004a7e3
mov dword [ebp - 0x2a0], 1
jmp 0x1004a7ea
and dword [ebp - 0x2a0], 0
push 4
pop eax
shl eax, 0
mov esi, dword [ebp + eax - 0x3c]
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x3c]
lea ecx, [ebp - 0x100]
call fcn.1001aa1a
mov ecx, dword [ebp - 0x2a0]
sub ecx, dword [eax]
cmp esi, ecx
jg 0x1004a821
mov dword [ebp - 0x2a8], 1
jmp 0x1004a828
and dword [ebp - 0x2a8], 0
mov eax, dword [ebp - 0x2a8]
mov dword [ebp - 0xb0], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3c]
cmp dword [ebp - 0xb0], eax
jl 0x1004a852
mov dword [ebp - 0x2b0], 1
jmp 0x1004a859
and dword [ebp - 0x2b0], 0
cmp dword [ebp - 0x2b0], 0xffffffff
jg 0x1004a874
cmp dword [ebp - 0xb0], 0
jne 0x1004a874
and dword [ebp - 0x2b8], 0
jmp 0x1004a87e
mov dword [ebp - 0x2b8], 1
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x3c]
lea ecx, [ebp - 0x100]
call fcn.1001aa1a
mov esi, dword [ebp - 0x2b8]
add esi, dword [eax]
push 0
lea ecx, [ebp - 0x100]
call fcn.1001aa1a
cmp esi, dword [eax]
je 0x1004a8d2
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x3c]
lea ecx, [ebp - 0x100]
call fcn.1001aa1a
cmp dword [eax], 0
je 0x1004a8d2
mov dword [ebp - 0x2c0], 1
jmp 0x1004a8d9
and dword [ebp - 0x2c0], 0
mov eax, dword [ebp - 0x2c0]
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
je 0x1004aab0
mov dword [ebp - 0x3c0], 5
mov dword [ebp - 0x52c], 0
mov dword [ebp - 0x4e0], 0xaa296768
mov dword [ebp - 0x408], 3
mov dword [ebp - 0x564], 0
mov dword [ebp - 0x3f0], 0xfffffff7
mov dword [ebp - 0x4e8], 0x93cbfb41
mov dword [ebp - 0x53c], 0x4f89c894
mov dword [ebp - 0x3c8], 0xffffffff
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x3c]
lea ecx, [ebp - 0x100]
call fcn.1001aa1a
push 4
pop eax
shl eax, 0
mov esi, dword [ebp + eax - 0x3c]
push 0
lea ecx, [ebp - 0x358]
call fcn.1001aa1a
cmp esi, dword [eax]
jge 0x1004a982
mov dword [ebp - 0x2c8], 1
jmp 0x1004a989
and dword [ebp - 0x2c8], 0
mov eax, dword [ebp - 0x3c0]
cmp dword [ebp - 0x2c8], eax
je 0x1004aa9b
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x43c]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x43c], eax
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0x408], eax
jle 0x1004a9cd
mov dword [ebp - 0x2d0], 1
jmp 0x1004a9d4
and dword [ebp - 0x2d0], 0
push 0
lea ecx, [ebp - 0x358]
call fcn.1001aa1a
mov ecx, dword [ebp - 0x2d0]
cmp ecx, dword [eax]
je 0x1004a9f7
mov dword [ebp - 0x110], 1
jmp 0x1004a9fe
and dword [ebp - 0x110], 0
push 0
lea ecx, [ebp - 0x358]
call fcn.1001aa1a
mov ecx, dword [ebp - 0x110]
mov dword [eax], ecx
cmp dword [ebp - 0x110], 0
je 0x1004aa31
mov eax, 0xab7a
test eax, eax
je 0x1004aa31
mov dword [ebp - 0x2d8], 1
jmp 0x1004aa38
and dword [ebp - 0x2d8], 0
mov eax, dword [ebp - 0x3c8]
cmp dword [ebp - 0x2d8], eax
jle 0x1004aa52
mov dword [ebp - 0x158], 1
jmp 0x1004aa59
and dword [ebp - 0x158], 0
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x3c]
lea ecx, [ebp - 0x100]
call fcn.1001aa1a
mov ecx, dword [ebp - 0x158]
sub ecx, dword [eax]
mov dword [ebp - 0x15c], ecx
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x68]
sub eax, 0xf5ea
je 0x1004aa9b
mov dword [ebp - 0x164], 1
jmp 0x1004aaa2
and dword [ebp - 0x164], 0
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0x3f0], eax
jmp 0x1004aaeb
mov dword [ebp - 0x3d0], 0
push 0
lea eax, [ebp - 0x3d0]
push eax
lea eax, [ebp - 0x45c]
push eax
push 0x404f
call fcn.1004b49b
add esp, 0x10
mov byte [ebp - 0x41], 0
movzx eax, byte [ebp - 0x41]
test eax, eax
je 0x1004aaeb
push 0
call fcn.1004b616
pop ecx
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x358]
call fcn.1001aa15
jmp 0x1004a6c2
push 1
call fcn.100484a7
pop ecx
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x45c]
call fcn.1001aa15
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x100]
call fcn.1001aa15
push 1
push dword [ebp - 0x41c]
lea eax, [ebp - 0x5d8]
push eax
lea ecx, [ebp - 0x5a8]
call fcn.10053b79
mov dword [ebp - 0x370], eax
mov eax, dword [ebp - 0x370]
mov dword [ebp - 0x378], eax
mov byte [ebp - 4], 0x10
push dword [ebp - 0x378]
lea ecx, [ebp - 0x590]
call fcn.10029307
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x5d8]
call fcn.1001a8ee
jmp 0x1004a372
lea eax, [ebp - 0x590]
push eax
mov ecx, dword [ebp + 8]
call fcn.1001a895
mov eax, dword [ebp - 0x16c]
or eax, 1
mov dword [ebp - 0x16c], eax
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x590]
call fcn.1001a8ee
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5a8]
call fcn.1001a8ee
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret