Function at 0x1004d56a
Capabilities:
Contain obfuscated stackstrings
Enumerate pe sections
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1008e9c9
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xaec
push esi
and dword [ebp - 0x18], 0
movzx eax, byte [ebp + 8]
test eax, eax
je 0x100520dd
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x570], eax
mov dword [ebp - 0x58], 0x68ec0ae9
mov dword [ebp - 0x1cc], 1
mov dword [ebp - 0x530], 7
mov dword [ebp - 0x58], 0xffffffef
jmp 0x1004d5d3
mov eax, dword [ebp - 0x58]
dec eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0xffffffe6
jle 0x1004d60a
mov dword [ebp - 0x6d4], 0xffffffff
mov byte [ebp - 0xbe], 0
movzx eax, byte [ebp - 0xbe]
test eax, eax
je 0x1004d5fd
push 0
call dword [0x10683294]
cmp dword [ebp - 0x6d4], 0
je 0x1004d608
jmp 0x1004d5cc
jmp 0x1004d5cc
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x8c0], eax
mov eax, 0x3061ece3
test eax, eax
je 0x1004d631
cmp dword [ebp - 0x1cc], 0
je 0x1004d631
mov dword [ebp - 0x3b0], 1
jmp 0x1004d638
and dword [ebp - 0x3b0], 0
mov eax, dword [ebp - 0x3b0]
mov dword [ebp - 0x530], eax
mov eax, dword [ebp - 0x530]
add eax, 0xcd7d
cmp dword [ebp - 0x58], eax
jg 0x1004d660
mov dword [ebp - 0x678], 1
jmp 0x1004d667
and dword [ebp - 0x678], 0
mov eax, dword [ebp - 0x1cc]
mov dword [ebp - 0x8dc], eax
mov eax, 0x7779
test eax, eax
jne 0x1004d683
cmp dword [ebp - 0x1cc], 0
mov eax, 0xd72276b8
cmp eax, 0xec299e88
jae 0x1004d69b
mov dword [ebp - 0x564], 1
jmp 0x1004d6a2
and dword [ebp - 0x564], 0
mov eax, dword [ebp - 0x1cc]
cmp eax, dword [ebp - 0x564]
jge 0x1004d6bc
mov dword [ebp - 0x56c], 1
jmp 0x1004d6c3
and dword [ebp - 0x56c], 0
cmp dword [ebp - 0x56c], 0xfffc
jb 0x1004d734
mov dword [ebp - 0x1a0], 0
jmp 0x1004d6e8
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 3
jge 0x1004d704
mov eax, dword [ebp - 0x1a0]
mov dword [ebp + eax*4 - 0x99c], 0xffffffff
jmp 0x1004d6db
mov dword [ebp - 0x58], 0
jmp 0x1004d714
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 3
jge 0x1004d72a
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x99c], 0xfffffff7
jmp 0x1004d70d
push 1
call fcn.1004b452
pop ecx
jmp 0x1004d74b
mov dword [ebp - 0x574], 0
mov eax, dword [ebp - 0x574]
inc eax
mov dword [ebp - 0x574], eax
mov eax, dword [ebp - 0x570]
movzx eax, word [eax]
cmp eax, 0x5a4d
je 0x1004d760
jmp 0x100520fd
mov dword [ebp - 0x90], 0xe87df2f4
mov dword [ebp - 0x74], 0
jmp 0x1004d77a
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 2
jge 0x1004d790
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0x9c8], 0xcff0ea75
jmp 0x1004d773
mov dword [ebp - 0x74], 0
jmp 0x1004d7a0
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 4
jge 0x1004d7b6
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0xa38], 0xe96b779c
jmp 0x1004d799
mov dword [ebp - 0x90], 1
jmp 0x1004d7cf
mov eax, dword [ebp - 0x90]
dec eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0
jl 0x1004d87c
mov dword [ebp - 0x75c], 0xffffffff
mov dword [ebp - 0x758], 0xffffffff
mov dword [ebp - 0x754], 0xffffffff
mov dword [ebp - 0x750], 0xffffffff
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x75c], 1
jmp 0x1004d82f
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x75c]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x75c], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x75c], 0
jl 0x1004d860
mov byte [ebp - 0xc1], 0
movzx eax, byte [ebp - 0xc1]
test eax, eax
je 0x1004d85e
push 0x511a
push 0
call fcn.1004b48e
pop ecx
pop ecx
jmp 0x1004d816
mov byte [ebp - 0xb5], 0
lea eax, [ebp - 0xb5]
push eax
push 1
call fcn.1004b48e
pop ecx
pop ecx
jmp 0x1004d7c2
mov dword [ebp - 0x90], 2
jmp 0x1004d895
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 2
jg 0x1004d8bd
mov dword [ebp - 0x680], 0x26ec17e5
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x680]
mov dword [ebp + eax - 0xa38], ecx
jmp 0x1004d888
mov eax, dword [ebp - 0x570]
mov ecx, dword [ebp - 0x30]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0xac], ecx
push 4
lea ecx, [ebp - 0x2d4]
call fcn.1001898a
and dword [ebp - 4], 0
mov dword [ebp - 0x80], 0x2ba39464
mov dword [ebp - 0x908], 0xa0435e45
mov dword [ebp - 0x8e4], 0xffffffff
mov dword [ebp - 0x1b4], 0
jmp 0x1004d914
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 4
jge 0x1004d936
push dword [ebp - 0x1b4]
lea ecx, [ebp - 0x2d4]
call fcn.100189f7
mov dword [eax], 0xfffffff6
jmp 0x1004d907
mov dword [ebp - 0x80], 3
jmp 0x1004d946
mov eax, dword [ebp - 0x80]
dec eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0
jl 0x1004dca3
mov dword [ebp - 0x4c], 5
mov dword [ebp - 0xcc], 0xae735984
mov dword [ebp - 0x160], 0
jmp 0x1004d97a
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 1
jge 0x1004d996
mov eax, dword [ebp - 0x160]
mov dword [ebp + eax*4 - 0x6d0], 1
jmp 0x1004d96d
mov byte [ebp - 0xc3], 0
movzx eax, byte [ebp - 0xc3]
test eax, eax
je 0x1004d9bc
push 0x6910
push 0x4e6
push 0
call fcn.1004cf0f
add esp, 0xc
mov dword [ebp - 0x4c], 0
jmp 0x1004d9cc
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 3
jg 0x1004dc9e
mov dword [ebp - 0x1bc], 0x488a9733
mov dword [ebp - 0x910], 0x8e00457a
mov dword [ebp - 0x8f4], 0xffffffff
mov dword [ebp - 0x974], 0
mov dword [ebp - 0x8fc], 0xffffffff
push 3
lea ecx, [ebp - 0x930]
call fcn.1001898a
mov byte [ebp - 4], 1
lea eax, [ebp - 0x930]
push eax
lea eax, [ebp - 0x120]
push eax
push 1
push 0xa3c
call fcn.1004b4ed
add esp, 0x10
mov dword [ebp - 0x120], 0
jmp 0x1004da4f
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 3
jge 0x1004da6b
mov eax, dword [ebp - 0x120]
mov dword [ebp + eax*4 - 0x920], 0xfffffffd
jmp 0x1004da42
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x95c], eax
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x904], eax
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x2d4]
call fcn.100189f7
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x984], eax
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x2d4]
call fcn.100189f7
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x90c], eax
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x964], eax
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x2d4]
call fcn.100189f7
cmp dword [eax], 0xcf13
jge 0x1004dad6
mov dword [ebp - 0x6c8], 1
jmp 0x1004dadd
and dword [ebp - 0x6c8], 0
mov eax, dword [ebp - 0x1bc]
mov dword [ebp - 0x914], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x560], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x560]
mov dword [ebp + eax - 0x6d0], ecx
mov eax, dword [ebp - 0x560]
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0
jne 0x1004db29
cmp dword [ebp - 0x4c], 0
jne 0x1004db29
and dword [ebp - 0x2ec], 0
jmp 0x1004db33
mov dword [ebp - 0x2ec], 1
push 2
lea ecx, [ebp - 0x2d4]
call fcn.100189f7
mov ecx, dword [ebp - 0x2ec]
cmp ecx, dword [eax]
jg 0x1004db56
mov dword [ebp - 0x528], 1
jmp 0x1004db5d
and dword [ebp - 0x528], 0
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x2d4]
call fcn.100189f7
mov eax, dword [eax]
cmp eax, dword [ebp - 0x528]
jl 0x1004db81
mov dword [ebp - 0x544], 1
jmp 0x1004db88
and dword [ebp - 0x544], 0
mov eax, dword [ebp - 0x1bc]
cmp dword [ebp - 0x544], eax
je 0x1004dba2
mov dword [ebp - 0x2f4], 1
jmp 0x1004dba9
and dword [ebp - 0x2f4], 0
mov eax, dword [ebp - 0x1bc]
cmp dword [ebp - 0x2f4], eax
jg 0x1004dbc3
mov dword [ebp - 0x6d8], 1
jmp 0x1004dbca
and dword [ebp - 0x6d8], 0
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x874], eax
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x2d4]
call fcn.100189f7
mov dword [ebp - 0x444], eax
push 2
lea ecx, [ebp - 0x2d4]
call fcn.100189f7
mov ecx, dword [ebp - 0x444]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x444]
mov eax, dword [eax]
mov dword [ebp - 0x1bc], eax
mov dword [ebp - 0xcc], 0
jmp 0x1004dc25
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0
jg 0x1004dc8a
mov dword [ebp - 0x878], 1
mov dword [ebp - 0x168], 0
jmp 0x1004dc51
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 2
jge 0x1004dc6d
mov eax, dword [ebp - 0x168]
mov dword [ebp + eax*4 - 0xa28], 0xfffffff6
jmp 0x1004dc44
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x920]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x920], eax
jmp 0x1004dc18
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x930]
call fcn.100189f2
jmp 0x1004d9c5
jmp 0x1004d93f
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2d4]
call fcn.100189f2
mov eax, dword [ebp - 0xac]
cmp dword [eax], 0x4550
je 0x1004dcc5
jmp 0x100520fd
mov dword [ebp - 0x1c4], 0xffffffff
mov dword [ebp - 0x26c], 1
push 1
lea ecx, [ebp - 0x794]
call fcn.1001898a
mov dword [ebp - 4], 2
push 2
lea ecx, [ebp - 0x720]
call fcn.1001898a
mov byte [ebp - 4], 3
mov dword [ebp - 0x6e0], 0xffff
push 3
lea ecx, [ebp - 0x710]
call fcn.1001898a
mov byte [ebp - 4], 4
mov dword [ebp - 0x24], 0
jmp 0x1004dd29
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x1004dd45
push dword [ebp - 0x24]
lea ecx, [ebp - 0x794]
call fcn.100189f7
mov dword [eax], 0x7ad4351c
jmp 0x1004dd22
mov dword [ebp - 0x24], 0
jmp 0x1004dd55
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jge 0x1004dd71
push dword [ebp - 0x24]
lea ecx, [ebp - 0x720]
call fcn.100189f7
mov dword [eax], 0xb7a7bc6c
jmp 0x1004dd4e
mov dword [ebp - 0x24], 0
jmp 0x1004dd81
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x1004dd9d
push dword [ebp - 0x24]
lea ecx, [ebp - 0x710]
call fcn.100189f7
mov dword [eax], 0x23024a1
jmp 0x1004dd7a
mov dword [ebp - 0x1c4], 0x11
jmp 0x1004ddb6
mov eax, dword [ebp - 0x1c4]
dec eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 3
jl 0x1004dfe7
mov dword [ebp - 0x6e8], 0x6e3245f1
mov dword [ebp - 0x304], 0x31e468a0
mov dword [ebp - 0x170], 0
jmp 0x1004ddf0
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 2
jge 0x1004de0c
mov eax, dword [ebp - 0x170]
mov dword [ebp + eax*4 - 0x5b0], 0x23e64f14
jmp 0x1004dde3
push 1
lea ecx, [ebp - 0x720]
call fcn.100189f7
mov dword [ebp - 0x2fc], eax
mov eax, dword [ebp - 0x2fc]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x2fc]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x794]
call fcn.100189f7
mov esi, eax
push 0
lea ecx, [ebp - 0x794]
call fcn.100189f7
mov ecx, dword [esi]
mov dword [eax], ecx
cmp dword [ebp - 0x6e0], 0
jne 0x1004de6b
cmp dword [ebp - 0x6e8], 0
jne 0x1004de6b
and dword [ebp - 0x6f0], 0
jmp 0x1004de75
mov dword [ebp - 0x6f0], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5b0]
mov dword [ebp - 0x880], eax
mov esi, dword [ebp - 0x26c]
push 2
lea ecx, [ebp - 0x710]
call fcn.100189f7
cmp esi, dword [eax]
je 0x1004deab
mov dword [ebp - 0x4ec], 1
jmp 0x1004deb2
and dword [ebp - 0x4ec], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5b0]
cmp eax, dword [ebp - 0x4ec]
je 0x1004ded4
push 0
lea ecx, [ebp - 0x720]
call fcn.100189f7
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x5b0]
cmp dword [ebp + eax - 0x5b0], ecx
jne 0x1004defc
mov dword [ebp - 0x6f8], 1
jmp 0x1004df03
and dword [ebp - 0x6f8], 0
push 0
lea ecx, [ebp - 0x710]
call fcn.100189f7
mov dword [ebp - 0x304], 0
mov eax, dword [ebp - 0x304]
mov ecx, dword [ebp - 0x26c]
inc ecx
sub eax, ecx
cmp eax, 0xfffffff9
jl 0x1004df3a
mov dword [ebp - 0x44c], 1
jmp 0x1004df41
and dword [ebp - 0x44c], 0
push 1
lea ecx, [ebp - 0x720]
call fcn.100189f7
mov ecx, dword [ebp - 0x44c]
cmp ecx, dword [eax]
jne 0x1004df64
mov dword [ebp - 0x30c], 1
jmp 0x1004df6b
and dword [ebp - 0x30c], 0
cmp dword [ebp - 0x30c], 0x983d
jg 0x1004df83
mov dword [ebp - 0x540], 1
jmp 0x1004df8a
and dword [ebp - 0x540], 0
imul eax, dword [ebp - 0x540], 0x9ab1
cmp eax, 4
jbe 0x1004dfa5
mov dword [ebp - 0x314], 1
jmp 0x1004dfac
and dword [ebp - 0x314], 0
push 2
lea ecx, [ebp - 0x710]
call fcn.100189f7
mov ecx, dword [ebp - 0x314]
cmp ecx, dword [eax]
jge 0x1004dfcf
mov dword [ebp - 0x454], 1
jmp 0x1004dfd6
and dword [ebp - 0x454], 0
mov eax, dword [ebp - 0x454]
mov dword [ebp - 0x26c], eax
jmp 0x1004dda9
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x710]
call fcn.100189f2
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x720]
call fcn.100189f2
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x794]
call fcn.100189f2
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xac]
lea eax, [ecx + eax + 0x78]
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0xd4], 0x256915a
mov dword [ebp - 0x45c], 0x780e
mov dword [ebp - 0x1d0], 0
jmp 0x1004e054
mov eax, dword [ebp - 0x1d0]
inc eax
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 3
jge 0x1004e070
mov eax, dword [ebp - 0x1d0]
mov dword [ebp + eax*4 - 0x590], 0xfffd
jmp 0x1004e047
mov dword [ebp - 0xd4], 4
mov dword [ebp - 0xd4], 0
jmp 0x1004e093
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 2
jg 0x1004e242
mov dword [ebp - 0x5c], 0
push 1
lea ecx, [ebp - 0x7b8]
call fcn.1001898a
mov dword [ebp - 4], 5
lea eax, [ebp - 0x7b8]
push eax
push 1
lea eax, [ebp - 0x888]
push eax
push 0x3355
call fcn.1004b586
add esp, 0x10
mov dword [ebp - 0x5c], 2
jmp 0x1004e0e8
mov eax, dword [ebp - 0x5c]
dec eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0
jl 0x1004e22e
mov dword [ebp - 0x778], 0xdb84c6a3
mov eax, dword [ebp - 0x5c]
cmp dword [ebp + eax*4 - 0x590], 0x5542
jl 0x1004e11b
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x590], 0
jne 0x1004e12d
cmp dword [ebp - 0x45c], 0
jne 0x1004e12d
and dword [ebp - 0x700], 0
jmp 0x1004e137
mov dword [ebp - 0x700], 1
push 0
lea ecx, [ebp - 0x7b8]
call fcn.100189f7
mov eax, dword [ebp - 0x5c]
mov esi, dword [ebp + eax*4 - 0x590]
push 0
lea ecx, [ebp - 0x7b8]
call fcn.100189f7
cmp esi, dword [eax]
jge 0x1004e16b
mov dword [ebp - 0x31c], 1
jmp 0x1004e172
and dword [ebp - 0x31c], 0
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp + eax*4 - 0x590]
cmp dword [ebp - 0x31c], eax
jle 0x1004e190
mov dword [ebp - 0x4f4], 1
jmp 0x1004e197
and dword [ebp - 0x4f4], 0
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp + eax*4 - 0x590]
cmp eax, dword [ebp - 0x4f4]
jle 0x1004e1b5
mov dword [ebp - 0x324], 1
jmp 0x1004e1bc
and dword [ebp - 0x324], 0
mov eax, dword [ebp - 0xd4]
cmp dword [ebp - 0x324], eax
jg 0x1004e1d6
mov dword [ebp - 0x770], 1
jmp 0x1004e1dd
and dword [ebp - 0x770], 0
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp + eax*4 - 0x590]
mov dword [ebp - 0x890], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x590]
mov dword [ebp - 0x898], eax
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x45c], eax
je 0x1004e216
mov dword [ebp - 0x32c], 1
jmp 0x1004e21d
and dword [ebp - 0x32c], 0
mov eax, dword [ebp - 0x32c]
mov dword [ebp - 0x778], eax
jmp 0x1004e0e1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7b8]
call fcn.100189f2
jmp 0x1004e086
mov eax, dword [ebp - 0x6c]
cmp dword [eax + 4], 0
jne 0x1004e250
jmp 0x100520fd
mov dword [ebp - 0x1d8], 0x1f2c29a
mov dword [ebp - 0x68c], 0x15912491
mov dword [ebp - 0x178], 0
jmp 0x1004e27d
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 3
jge 0x1004e299
mov eax, dword [ebp - 0x178]
mov dword [ebp + eax*4 - 0xad4], 3
jmp 0x1004e270
mov dword [ebp - 0x1d8], 2
jmp 0x1004e2b2
mov eax, dword [ebp - 0x1d8]
dec eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 0
jl 0x1004e2c7
mov dword [ebp - 0x68c], 0xffffffff
jmp 0x1004e2a5
and dword [ebp - 0x34], 0
mov dword [ebp - 0x50], 0x68ec0ae9
mov dword [ebp - 0x180], 1
mov dword [ebp - 0x334], 7
mov dword [ebp - 0x50], 0xffffffef
jmp 0x1004e2f6
mov eax, dword [ebp - 0x50]
dec eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0xffffffe6
jle 0x1004e333
mov dword [ebp - 0x5d4], 0xffffffff
mov byte [ebp - 0x92], 0
movzx eax, byte [ebp - 0x92]
test eax, eax
je 0x1004e326
push 1
push 0x4fc9
call fcn.1004b611
pop ecx
pop ecx
cmp dword [ebp - 0x5d4], 0
je 0x1004e331
jmp 0x1004e2ef
jmp 0x1004e2ef
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x8a0], eax
mov eax, 0x3061ece3
test eax, eax
je 0x1004e35a
cmp dword [ebp - 0x180], 0
je 0x1004e35a
mov dword [ebp - 0x550], 1
jmp 0x1004e361
and dword [ebp - 0x550], 0
mov eax, dword [ebp - 0x550]
mov dword [ebp - 0x334], eax
mov eax, dword [ebp - 0x334]
add eax, 0xcd7d
cmp dword [ebp - 0x50], eax
jg 0x1004e389
mov dword [ebp - 0x670], 1
jmp 0x1004e390
and dword [ebp - 0x670], 0
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x8a8], eax
mov eax, 0x7779
test eax, eax
jne 0x1004e3ac
cmp dword [ebp - 0x180], 0
mov eax, 0xd72276b8
cmp eax, 0xec299e88
jae 0x1004e3c4
mov dword [ebp - 0x464], 1
jmp 0x1004e3cb
and dword [ebp - 0x464], 0
mov eax, dword [ebp - 0x180]
cmp eax, dword [ebp - 0x464]
jge 0x1004e3e5
mov dword [ebp - 0x33c], 1
jmp 0x1004e3ec
and dword [ebp - 0x33c], 0
cmp dword [ebp - 0x33c], 0xfffc
jb 0x1004e46c
mov dword [ebp - 0x1e0], 0
jmp 0x1004e411
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 3
jge 0x1004e42d
mov eax, dword [ebp - 0x1e0]
mov dword [ebp + eax*4 - 0x9a8], 0xffffffff
jmp 0x1004e404
mov dword [ebp - 0x50], 0
jmp 0x1004e43d
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 3
jge 0x1004e453
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x9a8], 0xfffffff7
jmp 0x1004e436
mov byte [ebp - 0x94], 0
lea eax, [ebp - 0x94]
push eax
push 0
call fcn.1004bb44
pop ecx
pop ecx
jmp 0x1004e4b4
mov dword [ebp - 0x714], 0
push 0x6d4a
push 0x123a
push 0x7f46
lea eax, [ebp - 0x714]
push eax
push 0x7847
push 0x6ed2
push 0x11a8
push 1
push 0x3837
push 0xfa4
push 0x2b8c
call fcn.1004b662
add esp, 0x2c
mov eax, dword [ebp - 0xac]
movzx eax, word [eax + 0x14]
mov ecx, dword [ebp - 0xac]
lea eax, [ecx + eax + 0x18]
mov dword [ebp - 0xb4], eax
and dword [ebp - 0x2a0], 0
jmp 0x1004e4f3
mov eax, dword [ebp - 0x2a0]
inc eax
mov dword [ebp - 0x2a0], eax
mov eax, dword [ebp - 0xb4]
add eax, 0x28
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp - 0xac]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x2a0], eax
jge 0x1004e56f
mov eax, dword [ebp - 0xb4]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x4fc], eax
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x4fc]
jb 0x1004e56a
mov eax, dword [ebp - 0xac]
push dword [eax + 0x38]
mov eax, dword [ebp - 0xb4]
push dword [eax + 8]
call fcn.1004ab40
pop ecx
pop ecx
add eax, dword [ebp - 0x4fc]
mov dword [ebp - 0x5dc], eax
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x5dc]
jae 0x1004e56a
mov eax, dword [ebp - 0xb4]
mov ecx, dword [ebp - 0xb4]
mov eax, dword [eax + 0x14]
sub eax, dword [ecx + 0xc]
mov dword [ebp - 0x34], eax
jmp 0x1004e56f
jmp 0x1004e4d7
mov dword [ebp - 0x48], 0xffffffff
mov dword [ebp - 0x584], 0xfffffffd
mov dword [ebp - 0x580], 0xfffffffd
mov dword [ebp - 0x57c], 0xfffffffd
mov dword [ebp - 0x578], 0xfffffffd
mov dword [ebp - 0x54c], 5
mov dword [ebp - 0x274], 6
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x8b0], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x8b8], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x584], 0xfffffff9
jg 0x1004e5e0
mov dword [ebp - 0x344], 1
jmp 0x1004e5e7
and dword [ebp - 0x344], 0
mov eax, 0xbda7
sub eax, dword [ebp - 0x344]
cmp dword [ebp - 0x48], eax
jl 0x1004e603
mov dword [ebp - 0x46c], 1
jmp 0x1004e60a
and dword [ebp - 0x46c], 0
cmp dword [ebp - 0x46c], 0xb9ae77ab
je 0x1004e622
mov dword [ebp - 0x34c], 1
jmp 0x1004e629
and dword [ebp - 0x34c], 0
mov eax, dword [ebp - 0x48]
cmp eax, dword [ebp - 0x34c]
jge 0x1004e640
mov dword [ebp - 0x548], 1
jmp 0x1004e647
and dword [ebp - 0x548], 0
mov eax, dword [ebp - 0x548]
add eax, 0x85e0710
push 4
pop ecx
imul ecx, ecx, 3
cmp eax, dword [ebp + ecx - 0x584]
jne 0x1004e66d
mov dword [ebp - 0x354], 1
jmp 0x1004e674
and dword [ebp - 0x354], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x584]
cmp dword [ebp - 0x354], eax
je 0x1004e694
mov dword [ebp - 0x474], 1
jmp 0x1004e69b
and dword [ebp - 0x474], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x474]
mov dword [ebp + eax - 0x584], ecx
mov dword [ebp - 0x48], 0xfffffff9
jmp 0x1004e6be
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 1
jle 0x1004e8f6
mov dword [ebp - 0x6bc], 0x412894f
mov dword [ebp - 0x7c], 0xfffffff7
mov dword [ebp - 0x2c0], 0x51885a1e
mov dword [ebp - 0x2bc], 6
mov eax, dword [ebp - 0x6bc]
mov dword [ebp - 0x870], eax
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x8c8], eax
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x7c], eax
jl 0x1004e716
mov dword [ebp - 0x5e4], 1
jmp 0x1004e71d
and dword [ebp - 0x5e4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x584]
mov dword [ebp - 0x8d0], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x584], 0
je 0x1004e746
cmp dword [ebp - 0x7c], 0
jne 0x1004e758
mov eax, 0xde90
test eax, eax
jne 0x1004e758
and dword [ebp - 0x35c], 0
jmp 0x1004e762
mov dword [ebp - 0x35c], 1
mov eax, dword [ebp - 0x35c]
sub eax, dword [ebp - 0x7c]
jne 0x1004e77c
cmp dword [ebp - 0x7c], 0
jne 0x1004e77c
and dword [ebp - 0x504], 0
jmp 0x1004e786
mov dword [ebp - 0x504], 1
mov eax, dword [ebp - 0x504]
sub eax, dword [ebp - 0x48]
cmp eax, dword [ebp - 0x48]
jne 0x1004e7a0
mov dword [ebp - 0x364], 1
jmp 0x1004e7a7
and dword [ebp - 0x364], 0
cmp dword [ebp - 0x364], 0xffffffff
jle 0x1004e7c5
mov eax, 0xed76
test eax, eax
je 0x1004e7c5
mov dword [ebp - 0x47c], 1
jmp 0x1004e7cc
and dword [ebp - 0x47c], 0
mov eax, dword [ebp - 0x47c]
mov dword [ebp - 0x2c0], eax
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x8d8], eax
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x36c], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x36c]
mov dword [ebp + eax - 0x584], ecx
mov eax, dword [ebp - 0x2c0]
cmp eax, dword [ebp - 0x36c]
jl 0x1004e817
mov dword [ebp - 0x484], 1
jmp 0x1004e81e
and dword [ebp - 0x484], 0
mov eax, dword [ebp - 0x48]
imul ecx, dword [ebp - 0x48], 0x231d
sub eax, ecx
imul eax, dword [ebp - 0x7c]
mov dword [ebp - 0x54c], eax
mov eax, dword [ebp - 0x274]
cmp dword [ebp - 0x54c], eax
jg 0x1004e855
push 8
pop eax
test eax, eax
je 0x1004e855
mov dword [ebp - 0x374], 1
jmp 0x1004e85c
and dword [ebp - 0x374], 0
mov eax, dword [ebp - 0x374]
mov dword [ebp - 0x2bc], eax
mov eax, dword [ebp - 0x2bc]
mov dword [ebp - 0x8e0], eax
mov eax, dword [ebp - 0x274]
mov dword [ebp - 0x8e8], eax
mov eax, dword [ebp - 0x2bc]
cmp dword [ebp - 0x484], eax
jge 0x1004e89a
mov dword [ebp - 0x37c], 1
jmp 0x1004e8a1
and dword [ebp - 0x37c], 0
cmp dword [ebp - 0x37c], 0x4a0f0c0e
jle 0x1004e8b9
mov dword [ebp - 0x50c], 1
jmp 0x1004e8c0
and dword [ebp - 0x50c], 0
cmp dword [ebp - 0x50c], 0
jne 0x1004e8db
cmp dword [ebp - 0x274], 0
jne 0x1004e8db
and dword [ebp - 0x384], 0
jmp 0x1004e8e5
mov dword [ebp - 0x384], 1
mov eax, dword [ebp - 0x384]
mov dword [ebp - 0x2c0], eax
jmp 0x1004e6b7
cmp dword [ebp - 0x34], 0
jne 0x1004e901
jmp 0x100520fd
mov dword [ebp - 0x5ec], 1
mov dword [ebp - 0x48c], 0xfffffffa
push 3
lea ecx, [ebp - 0x7ac]
call fcn.1001898a
mov dword [ebp - 4], 6
mov dword [ebp - 0x764], 9
lea eax, [ebp - 0x960]
push eax
push 0
lea eax, [ebp - 0x7ac]
push eax
call fcn.1004bce5
add esp, 0xc
lea eax, [ebp - 0x764]
push eax
push 1
lea eax, [ebp - 0x5ec]
push eax
lea eax, [ebp - 0x48c]
push eax
lea eax, [ebp - 0x7ac]
push eax
call fcn.1004b792
add esp, 0x14
push 0x7c53
lea eax, [ebp - 0x48c]
push eax
push 0
lea eax, [ebp - 0x7ac]
push eax
call fcn.1004bba9
add esp, 0x10
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7ac]
call fcn.100189f2
mov eax, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x34]
add ecx, dword [eax]
add ecx, dword [ebp - 0x30]
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x6c4], 0xffff
mov dword [ebp - 0xdc], 0xbb743d83
mov dword [ebp - 0xe4], 0xffffffff
push 3
lea ecx, [ebp - 0x80c]
call fcn.1001898a
mov dword [ebp - 4], 7
mov dword [ebp - 0x188], 0
jmp 0x1004e9f6
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 3
jge 0x1004ea15
push dword [ebp - 0x188]
lea ecx, [ebp - 0x80c]
call fcn.100189f7
and dword [eax], 0
jmp 0x1004e9e9
mov eax, dword [ebp - 0x6c4]
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xe4], 0
je 0x1004eaa2
mov dword [ebp - 0xdc], 0
jmp 0x1004ea43
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 9
jl 0x1004ea89
mov dword [ebp - 0xe4], 0
jmp 0x1004ea65
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 3
jge 0x1004ea87
push dword [ebp - 0xe4]
lea ecx, [ebp - 0x80c]
call fcn.100189f7
mov dword [eax], 0xca9869ec
jmp 0x1004ea58
jmp 0x1004ea36
mov byte [ebp - 0x96], 0
lea eax, [ebp - 0x96]
push eax
push 0
call fcn.1004c0b0
pop ecx
pop ecx
jmp 0x1004eab8
mov dword [ebp - 0x5f4], 0
mov eax, dword [ebp - 0x5f4]
mov dword [ebp - 0xdc], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x80c]
call fcn.100189f2
xor ecx, ecx
call fcn.100346f0
push eax
call fcn.10072b78
pop ecx
mov dword [ebp - 0x1e8], 0x82062403
mov dword [ebp - 0x1e8], 0
jmp 0x1004eaf8
mov eax, dword [ebp - 0x1e8]
dec eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 0xfffffff1
jne 0x1004eb18
mov dword [ebp - 0x724], 0x55e00fe1
cmp dword [ebp - 0x724], 0
je 0x1004eb16
jmp 0x1004eb18
jmp 0x1004eaeb
mov byte [ebp - 0x98], 0
push 0x1e09
push 0
lea eax, [ebp - 0x98]
push eax
call fcn.1004bd5d
add esp, 0xc
mov byte [ebp - 0x268], 9
mov byte [ebp - 0x267], 0x9d
mov byte [ebp - 0x266], 7
mov byte [ebp - 0x265], 6
mov byte [ebp - 0x264], 8
mov byte [ebp - 0x263], 6
mov byte [ebp - 0x262], 0
mov byte [ebp - 0x261], 1
mov byte [ebp - 0x260], 4
mov byte [ebp - 0x25f], 9
mov byte [ebp - 0x25e], 1
mov byte [ebp - 0x25d], 0xd
mov byte [ebp - 0x25c], 3
mov byte [ebp - 0x25b], 2
mov byte [ebp - 0x25a], 5
mov byte [ebp - 0x259], 6
mov byte [ebp - 0x258], 6
mov byte [ebp - 0x257], 0
mov byte [ebp - 0x256], 2
mov byte [ebp - 0x255], 6
mov byte [ebp - 0x254], 0x50
mov byte [ebp - 0x253], 0x66
mov byte [ebp - 0x252], 0xdf
mov byte [ebp - 0x251], 0x3a
mov byte [ebp - 0x250], 0xfe
mov byte [ebp - 0x24f], 0xfa
mov byte [ebp - 0x24e], 0xa1
mov byte [ebp - 0x24d], 0x3b
mov byte [ebp - 0x24c], 0x5f
mov byte [ebp - 0x24b], 0xc
mov byte [ebp - 0x24a], 0xbc
mov byte [ebp - 0x249], 0xcb
mov byte [ebp - 0x248], 0xba
mov byte [ebp - 0x247], 0xd2
mov byte [ebp - 0x246], 0x55
mov byte [ebp - 0x245], 0xbd
mov byte [ebp - 0x244], 0x8a
mov byte [ebp - 0x243], 0x5b
mov byte [ebp - 0x242], 0xa9
mov byte [ebp - 0x241], 0x86
mov byte [ebp - 0x240], 0xaa
mov byte [ebp - 0x23f], 0x13
mov byte [ebp - 0x23e], 0xa4
mov byte [ebp - 0x23d], 0x88
mov byte [ebp - 0x23c], 0xd7
mov byte [ebp - 0x23b], 0x62
mov byte [ebp - 0x23a], 0xe9
mov byte [ebp - 0x239], 0xf9
mov byte [ebp - 0x238], 0xbb
mov byte [ebp - 0x237], 0x1b
mov byte [ebp - 0x236], 0x5a
mov byte [ebp - 0x235], 0xf1
mov byte [ebp - 0x234], 0xa8
mov byte [ebp - 0x233], 0xd3
mov byte [ebp - 0x232], 0xd3
mov byte [ebp - 0x231], 0x36
mov byte [ebp - 0x230], 0xe7
mov byte [ebp - 0x22f], 0x83
mov byte [ebp - 0x22e], 0xac
mov byte [ebp - 0x22d], 0x5a
mov byte [ebp - 0x22c], 0xca
mov byte [ebp - 0x22b], 0x6f
mov byte [ebp - 0x22a], 0xb4
mov byte [ebp - 0x229], 0xc4
mov byte [ebp - 0x228], 0x4c
mov byte [ebp - 0x227], 0xc5
mov byte [ebp - 0x226], 0xbd
mov byte [ebp - 0x225], 0x2d
mov byte [ebp - 0x224], 0x7e
mov byte [ebp - 0x223], 0x6f
mov byte [ebp - 0x222], 0xf1
mov byte [ebp - 0x221], 0xaf
mov byte [ebp - 0x220], 0x17
mov byte [ebp - 0x21f], 0xf6
mov byte [ebp - 0x21e], 0x6f
mov byte [ebp - 0x21d], 0x71
mov byte [ebp - 0x21c], 0x47
mov byte [ebp - 0x21b], 0x8d
mov byte [ebp - 0x21a], 0x85
mov byte [ebp - 0x219], 0x15
mov byte [ebp - 0x218], 0xc3
mov byte [ebp - 0x217], 0x91
mov byte [ebp - 0x216], 0xfc
mov byte [ebp - 0x215], 0xdf
mov byte [ebp - 0x214], 0x16
mov byte [ebp - 0x213], 0x94
mov byte [ebp - 0x212], 0xc4
mov byte [ebp - 0x211], 0x52
mov byte [ebp - 0x210], 0xaa
mov byte [ebp - 0x20f], 0x51
mov byte [ebp - 0x20e], 0xf3
mov byte [ebp - 0x20d], 0x9c
mov byte [ebp - 0x20c], 0xb7
mov byte [ebp - 0x20b], 0x83
mov byte [ebp - 0x20a], 0xf9
mov byte [ebp - 0x209], 0x35
mov byte [ebp - 0x208], 0xd9
mov byte [ebp - 0x207], 0x9c
mov byte [ebp - 0x206], 0x6e
mov byte [ebp - 0x205], 0x6c
mov byte [ebp - 0x204], 0x1d
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x268]
or eax, 0xad
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x268]
and ecx, 0xad
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x268]
mov byte [ebp + ecx - 0x59c], al
mov dword [ebp - 0x38], 2
and dword [ebp - 0x190], 0
jmp 0x1004ee4e
mov eax, dword [ebp - 0x38]
inc eax
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0x65
jae 0x1004ef04
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x268]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x38], eax
jne 0x1004ee98
mov eax, dword [ebp - 0x38]
movzx eax, byte [ebp + eax - 0x268]
inc eax
mov dword [ebp - 0x190], eax
mov eax, dword [ebp - 0x38]
movzx eax, byte [ebp + eax - 0x268]
mov ecx, dword [ebp - 0x38]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x38], eax
jmp 0x1004ee46
mov eax, dword [ebp - 0x38]
movzx eax, byte [ebp + eax - 0x267]
mov ecx, dword [ebp - 0x38]
sub ecx, dword [ebp - 0x190]
movzx ecx, byte [ebp + ecx - 0x26a]
movsx ecx, byte [ebp + ecx - 0x59c]
or eax, ecx
mov ecx, dword [ebp - 0x38]
movzx ecx, byte [ebp + ecx - 0x267]
mov edx, dword [ebp - 0x38]
sub edx, dword [ebp - 0x190]
movzx edx, byte [ebp + edx - 0x26a]
movsx edx, byte [ebp + edx - 0x59c]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x38]
movzx ecx, byte [ebp + ecx - 0x268]
mov byte [ebp + ecx - 0x59c], al
and dword [ebp - 0x190], 0
jmp 0x1004ee46
xor eax, eax
inc eax
imul eax, eax, 0xa
mov byte [ebp + eax - 0x59c], 0
mov dword [ebp - 0x5fc], 0x7d21
mov dword [ebp - 0x774], 0xffffffff
mov dword [ebp - 0x614], 0xc40a98ce
mov dword [ebp - 0x604], 0
mov dword [ebp - 0x61c], 0x6e1ee67b
mov dword [ebp - 0x6dc], 3
mov dword [ebp - 0x6cc], 0
mov dword [ebp - 0x734], 0x8d679bdd
mov dword [ebp - 0x60c], 6
mov dword [ebp - 0x5cc], 0xbc906383
mov dword [ebp - 0x624], 0xdc23988f
push 3
lea ecx, [ebp - 0x860]
call fcn.1001898a
mov dword [ebp - 4], 8
mov dword [ebp - 0x1f0], 0
jmp 0x1004efad
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 3
jge 0x1004efcf
push dword [ebp - 0x1f0]
lea ecx, [ebp - 0x860]
call fcn.100189f7
mov dword [eax], 0x66593c39
jmp 0x1004efa0
lea eax, [ebp - 0x5fc]
push eax
lea eax, [ebp - 0x860]
push eax
lea eax, [ebp - 0x6cc]
push eax
lea eax, [ebp - 0x604]
push eax
push 0x71c5
lea eax, [ebp - 0x774]
push eax
lea eax, [ebp - 0x60c]
push eax
lea eax, [ebp - 0x5cc]
push eax
lea eax, [ebp - 0x614]
push eax
lea eax, [ebp - 0x734]
push eax
lea eax, [ebp - 0x61c]
push eax
lea eax, [ebp - 0x6dc]
push eax
push 1
lea eax, [ebp - 0x624]
push eax
call fcn.1004b8c3
add esp, 0x38
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x860]
call fcn.100189f2
lea eax, [ebp - 0x59c]
push eax
lea ecx, [ebp - 0xa68]
call fcn.10028ea8
mov dword [ebp - 0x748], eax
mov eax, dword [ebp - 0x748]
mov dword [ebp - 0x62c], eax
mov dword [ebp - 4], 9
push 0xa
xor edx, edx
mov ecx, dword [ebp - 0x62c]
call fcn.100346b0
pop ecx
mov dword [ebp - 0x6f4], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa68]
call fcn.100188ec
push 4
lea ecx, [ebp - 0x7a0]
call fcn.1001898a
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x28], 8
mov dword [ebp - 0x514], 0x335900b0
mov dword [ebp - 0x494], 0xffffffff
mov dword [ebp - 0x78], 0
jmp 0x1004f0d0
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 4
jge 0x1004f0e9
push dword [ebp - 0x78]
lea ecx, [ebp - 0x7a0]
call fcn.100189f7
and dword [eax], 0
jmp 0x1004f0c9
mov dword [ebp - 0x78], 0
jmp 0x1004f0f9
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 4
jge 0x1004f10f
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0x788], 0
jmp 0x1004f0f2
mov dword [ebp - 0x28], 3
jmp 0x1004f11f
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jl 0x1004f264
mov dword [ebp - 0x27c], 0x1ac48889
mov dword [ebp - 0x968], 0xbbe56890
mov dword [ebp - 0x970], 0xab227d3
mov dword [ebp - 0x978], 0xffffffff
mov dword [ebp - 0x980], 0xffd81438
mov dword [ebp - 0x988], 0x9333c7d2
mov dword [ebp - 0x990], 0xfffffffb
mov dword [ebp - 0x94c], 0x60de5741
and dword [ebp - 0x800], 0
and dword [ebp - 0x7fc], 0
and dword [ebp - 0x7f8], 0
and dword [ebp - 0x7f4], 0
lea ecx, [ebp - 0x2c5]
call fcn.10009413
push eax
lea eax, [ebp - 0x7f0]
push eax
lea eax, [ebp - 0x800]
push eax
lea ecx, [ebp - 0xa50]
call fcn.10018a06
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x9c0]
call fcn.100189cc
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x198], 0
jmp 0x1004f1e7
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 2
jge 0x1004f203
mov eax, dword [ebp - 0x198]
mov dword [ebp + eax*4 - 0xa08], 0x56cd8339
jmp 0x1004f1da
mov eax, dword [ebp - 0x27c]
cmp dword [ebp - 0x27c], eax
jle 0x1004f22d
mov eax, dword [ebp - 0x28]
xor ecx, ecx
inc ecx
sub ecx, dword [ebp - 0x27c]
add eax, ecx
je 0x1004f22d
mov dword [ebp - 0x38c], 1
jmp 0x1004f234
and dword [ebp - 0x38c], 0
mov esi, dword [ebp - 0x38c]
add esi, 0x4f6c5533
push dword [ebp - 0x28]
lea ecx, [ebp - 0x7a0]
call fcn.100189f7
mov dword [eax], esi
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x9c0]
call fcn.100189f2
jmp 0x1004f118
mov eax, dword [ebp - 0x514]
mov dword [ebp - 0x954], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x494]
cmp dword [ebp + eax - 0x788], ecx
je 0x1004f290
mov dword [ebp - 0x6e4], 1
jmp 0x1004f297
and dword [ebp - 0x6e4], 0
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x97c], eax
mov eax, dword [ebp - 0x28]
push 4
pop ecx
shl ecx, 0
sub eax, dword [ebp + ecx - 0x788]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x788]
jge 0x1004f2cf
xor eax, eax
inc eax
je 0x1004f2cf
mov dword [ebp - 0x55c], 1
jmp 0x1004f2d6
and dword [ebp - 0x55c], 0
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x55c]
jg 0x1004f2ed
mov dword [ebp - 0x634], 1
jmp 0x1004f2f4
and dword [ebp - 0x634], 0
push 3
lea ecx, [ebp - 0x7a0]
call fcn.100189f7
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x788]
mov dword [ebp - 0x394], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x394]
mov dword [ebp + eax - 0x788], ecx
cmp dword [ebp - 0x394], 0
jb 0x1004f33b
mov dword [ebp - 0x39c], 1
jmp 0x1004f342
and dword [ebp - 0x39c], 0
mov eax, dword [ebp - 0x494]
cmp dword [ebp - 0x39c], eax
jne 0x1004f35c
mov dword [ebp - 0x3a4], 1
jmp 0x1004f363
and dword [ebp - 0x3a4], 0
mov eax, dword [ebp - 0x514]
cmp dword [ebp - 0x3a4], eax
jl 0x1004f3a7
mov dword [ebp - 0x28], 0
jmp 0x1004f381
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 4
jge 0x1004f397
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x788], 0xcde89c67
jmp 0x1004f37a
push 0x5df0
push 1
call fcn.1004bb44
pop ecx
pop ecx
jmp 0x1004f3e1
mov byte [ebp - 0x9a], 0
movzx eax, byte [ebp - 0x9a]
test eax, eax
je 0x1004f3c7
push 0
push 0x205c
call fcn.1004cab4
pop ecx
pop ecx
mov byte [ebp - 0x9c], 0
movzx eax, byte [ebp - 0x9c]
test eax, eax
je 0x1004f3e1
push 0
call dword [0x10683064]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7a0]
call fcn.100189f2
and dword [ebp - 0x1f8], 0
jmp 0x1004f406
mov eax, dword [ebp - 0x1f8]
inc eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 0xb
jae 0x1004f41f
mov eax, dword [ebp - 0x1f8]
mov byte [ebp + eax - 0x59c], 0
jmp 0x1004f3f9
mov byte [ebp - 0x150], 6
mov byte [ebp - 0x14f], 0x35
mov byte [ebp - 0x14e], 9
mov byte [ebp - 0x14d], 9
mov byte [ebp - 0x14c], 2
mov byte [ebp - 0x14b], 7
mov byte [ebp - 0x14a], 4
mov byte [ebp - 0x149], 3
mov byte [ebp - 0x148], 8
mov byte [ebp - 0x147], 4
mov byte [ebp - 0x146], 0
mov byte [ebp - 0x145], 1
mov byte [ebp - 0x144], 7
mov byte [ebp - 0x143], 7
mov byte [ebp - 0x142], 0xd
mov byte [ebp - 0x141], 0xad
mov byte [ebp - 0x140], 0x6b
mov byte [ebp - 0x13f], 0xed
mov byte [ebp - 0x13e], 0x81
mov byte [ebp - 0x13d], 0xc5
mov byte [ebp - 0x13c], 0x4d
mov byte [ebp - 0x13b], 0x86
mov byte [ebp - 0x13a], 0xd9
mov byte [ebp - 0x139], 0x49
mov byte [ebp - 0x138], 0xcc
mov byte [ebp - 0x137], 0x5a
mov byte [ebp - 0x136], 0x71
mov byte [ebp - 0x135], 0x20
mov byte [ebp - 0x134], 1
mov byte [ebp - 0x133], 0
mov byte [ebp - 0x132], 3
mov byte [ebp - 0x131], 4
mov byte [ebp - 0x130], 5
mov byte [ebp - 0x12f], 3
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x150]
or eax, 0xc
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x150]
and ecx, 0xc
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x150]
mov byte [ebp + ecx - 0x5a8], al
mov dword [ebp - 0x3c], 2
and dword [ebp - 0x200], 0
jmp 0x1004f55e
mov eax, dword [ebp - 0x3c]
inc eax
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0x22
jae 0x1004f614
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x150]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x3c], eax
jne 0x1004f5a8
mov eax, dword [ebp - 0x3c]
movzx eax, byte [ebp + eax - 0x150]
inc eax
mov dword [ebp - 0x200], eax
mov eax, dword [ebp - 0x3c]
movzx eax, byte [ebp + eax - 0x150]
mov ecx, dword [ebp - 0x3c]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x3c], eax
jmp 0x1004f556
mov eax, dword [ebp - 0x3c]
movzx eax, byte [ebp + eax - 0x14f]
mov ecx, dword [ebp - 0x3c]
sub ecx, dword [ebp - 0x200]
movzx ecx, byte [ebp + ecx - 0x152]
movsx ecx, byte [ebp + ecx - 0x5a8]
or eax, ecx
mov ecx, dword [ebp - 0x3c]
movzx ecx, byte [ebp + ecx - 0x14f]
mov edx, dword [ebp - 0x3c]
sub edx, dword [ebp - 0x200]
movzx edx, byte [ebp + edx - 0x152]
movsx edx, byte [ebp + edx - 0x5a8]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x3c]
movzx ecx, byte [ebp + ecx - 0x150]
mov byte [ebp + ecx - 0x5a8], al
and dword [ebp - 0x200], 0
jmp 0x1004f556
xor eax, eax
inc eax
imul eax, eax, 0xa
mov byte [ebp + eax - 0x5a8], 0
mov dword [ebp - 0x20], 0x76ff55e0
push 3
lea ecx, [ebp - 0x818]
call fcn.1001898a
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x1d4], 0
jmp 0x1004f656
mov eax, dword [ebp - 0x1d4]
inc eax
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 3
jge 0x1004f678
push dword [ebp - 0x1d4]
lea ecx, [ebp - 0x818]
call fcn.100189f7
mov dword [eax], 1
jmp 0x1004f649
mov byte [ebp - 0x93], 0
lea eax, [ebp - 0x93]
push eax
push 0
push 0x33e1
call fcn.1004ceb8
add esp, 0xc
cmp dword [ebp - 0x20], 0
je 0x1004f791
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x20], eax
jge 0x1004f6b3
mov dword [ebp - 0x3ac], 1
jmp 0x1004f6ba
and dword [ebp - 0x3ac], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x20], eax
jle 0x1004f6ce
mov dword [ebp - 0x49c], 1
jmp 0x1004f6d5
and dword [ebp - 0x49c], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x49c], eax
je 0x1004f6ec
mov dword [ebp - 0x744], 1
jmp 0x1004f6f3
and dword [ebp - 0x744], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x87c], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x924], eax
cmp dword [ebp - 0x20], 0x9478c9df
jbe 0x1004f717
mov eax, 0x67f5aee0
test eax, eax
je 0x1004f729
cmp dword [ebp - 0x20], 0
je 0x1004f729
mov dword [ebp - 0x554], 1
jmp 0x1004f730
and dword [ebp - 0x554], 0
mov eax, dword [ebp - 0x3ac]
cmp eax, dword [ebp - 0x554]
jg 0x1004f74a
mov dword [ebp - 0x3b4], 1
jmp 0x1004f751
and dword [ebp - 0x3b4], 0
mov eax, dword [ebp - 0x3b4]
sub eax, 0x687a4b3b
cmp eax, dword [ebp - 0x20]
jge 0x1004f76d
mov dword [ebp - 0x4a4], 1
jmp 0x1004f774
and dword [ebp - 0x4a4], 0
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x4a4]
sub eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x20]
je 0x1004f791
mov dword [ebp - 0x3bc], 1
jmp 0x1004f798
and dword [ebp - 0x3bc], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x3bc], eax
jge 0x1004f7b5
mov eax, 0x4151
test eax, eax
jne 0x1004f7b5
and dword [ebp - 0x51c], 0
jmp 0x1004f7bf
mov dword [ebp - 0x51c], 1
push 1
lea ecx, [ebp - 0x818]
call fcn.100189f7
mov ecx, dword [ebp - 0x51c]
mov dword [eax], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x818]
call fcn.100189f2
lea eax, [ebp - 0x5a8]
push eax
lea ecx, [ebp - 0xa98]
call fcn.10028ea8
mov dword [ebp - 0x63c], eax
mov eax, dword [ebp - 0x63c]
mov dword [ebp - 0x6ec], eax
mov dword [ebp - 4], 0xd
push 0xa
xor edx, edx
mov ecx, dword [ebp - 0x6ec]
call fcn.100346b0
pop ecx
mov dword [ebp - 0x64c], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa98]
call fcn.100188ec
push 2
lea ecx, [ebp - 0x940]
call fcn.1001898a
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x8c], 0xfffffffa
mov dword [ebp - 0x760], 0xb7bededb
push 0x2515
lea eax, [ebp - 0x884]
push eax
push 0x5930
lea eax, [ebp - 0x940]
push eax
push 0
push 0x110e
call fcn.1004cd6a
add esp, 0x18
mov dword [ebp - 0x8c], 1
jmp 0x1004f89b
mov eax, dword [ebp - 0x8c]
dec eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0
jl 0x1004f8ec
mov byte [ebp - 0x99], 0
movzx eax, byte [ebp - 0x99]
test eax, eax
je 0x1004f8ca
push 0x59f8
push 0x2cc5
push 0
call fcn.1004c470
add esp, 0xc
mov byte [ebp - 0x95], 0
movzx eax, byte [ebp - 0x95]
test eax, eax
je 0x1004f8ea
push 0x3041
push 0
call fcn.1004d56a
pop ecx
pop ecx
jmp 0x1004f88e
mov dword [ebp - 0x8c], 0
jmp 0x1004f905
mov eax, dword [ebp - 0x8c]
dec eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0xffffffe9
jne 0x1004f94b
mov dword [ebp - 0x644], 0x7b4bc66
push 0
push 0x7b66
push 0x390a
push 0x7ea6
lea eax, [ebp - 0x644]
push eax
lea eax, [ebp - 0x760]
push eax
push 0x21b5
push 0x7028
call fcn.1004d1d5
add esp, 0x20
jmp 0x1004f8f8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x940]
call fcn.100189f2
and dword [ebp - 0x1a8], 0
jmp 0x1004f970
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 0xb
jae 0x1004f989
mov eax, dword [ebp - 0x1a8]
mov byte [ebp + eax - 0x5a8], 0
jmp 0x1004f963
push dword [ebp - 0x64c]
push dword [ebp - 0x6f4]
call fcn.10047670
pop ecx
pop ecx
mov dword [ebp - 0x4bc], eax
mov dword [ebp - 0x60], 0xffffffff
mov dword [ebp - 0x688], 0x7cd95329
mov dword [ebp - 0x1ec], 0
jmp 0x1004f9cc
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 3
jge 0x1004f9e8
mov eax, dword [ebp - 0x1ec]
mov dword [ebp + eax*4 - 0x5c8], 1
jmp 0x1004f9bf
mov dword [ebp - 0x60], 0
jmp 0x1004f9f8
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 2
jg 0x1004fbec
mov dword [ebp - 0xa4], 0
mov byte [ebp - 0xbd], 0
lea eax, [ebp - 0xbd]
push eax
push 0x4d65
push 1
push 0x31a1
call fcn.1004bba9
add esp, 0x10
mov dword [ebp - 0xa4], 2
jmp 0x1004fa47
mov eax, dword [ebp - 0xa4]
dec eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0
jl 0x1004fbe7
mov dword [ebp - 0x3cc], 0x9796a0b5
mov dword [ebp - 0x654], 0xffffffff
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp + eax*4 - 0x5c8]
mov dword [ebp - 0x96c], eax
cmp dword [ebp - 0xa4], 0
jne 0x1004fa93
cmp dword [ebp - 0xa4], 0
jne 0x1004fa93
and dword [ebp - 0x3c4], 0
jmp 0x1004fa9d
mov dword [ebp - 0x3c4], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x5c8]
cmp dword [ebp - 0x3c4], eax
jge 0x1004fabe
mov dword [ebp - 0x4ac], 1
jmp 0x1004fac5
and dword [ebp - 0x4ac], 0
mov eax, dword [ebp - 0xa4]
imul ecx, dword [ebp - 0x4ac], 0xe584
push 4
pop edx
shl edx, 1
imul ecx, dword [ebp + edx - 0x5c8]
lea eax, [eax + ecx - 0x6df7]
mov dword [ebp - 0x3cc], eax
mov eax, dword [ebp - 0x654]
cmp dword [ebp - 0x3cc], eax
jg 0x1004fb09
mov dword [ebp - 0x558], 1
jmp 0x1004fb10
and dword [ebp - 0x558], 0
cmp dword [ebp - 0x558], 0
je 0x1004fb25
mov dword [ebp - 0x3d4], 1
jmp 0x1004fb2c
and dword [ebp - 0x3d4], 0
mov eax, dword [ebp - 0x3d4]
add eax, 0xb42c
cmp eax, dword [ebp - 0x60]
je 0x1004fb48
mov dword [ebp - 0x4b4], 1
jmp 0x1004fb4f
and dword [ebp - 0x4b4], 0
mov eax, dword [ebp - 0x60]
imul eax, dword [ebp - 0x4b4]
mov ecx, dword [ebp - 0x60]
cmp eax, dword [ebp + ecx*4 - 0x5c8]
jl 0x1004fb71
mov dword [ebp - 0x3dc], 1
jmp 0x1004fb78
and dword [ebp - 0x3dc], 0
cmp dword [ebp - 0x3dc], 0xa5e0
jne 0x1004fb96
cmp dword [ebp - 0x60], 0
je 0x1004fb96
mov dword [ebp - 0x524], 1
jmp 0x1004fb9d
and dword [ebp - 0x524], 0
cmp dword [ebp - 0x524], 0
jg 0x1004fbb2
mov dword [ebp - 0x3e4], 1
jmp 0x1004fbb9
and dword [ebp - 0x3e4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5c8]
imul eax, dword [ebp - 0x3e4]
push 4
pop ecx
shl ecx, 1
sub eax, dword [ebp + ecx - 0x5c8]
sub eax, 7
mov dword [ebp - 0x688], eax
jmp 0x1004fa3a
jmp 0x1004f9f1
push 0
push 0x6aab
lea eax, [ebp - 0x60]
push eax
call fcn.1004c80b
add esp, 0xc
mov eax, dword [ebp - 0xac]
mov ecx, dword [ebp - 0x4bc]
mov dword [eax + 8], ecx
push 1
lea eax, [ebp - 0x4bc]
push eax
lea eax, [ebp - 0x10]
push eax
push 0x1831
push 0x55e4
call fcn.1004bc59
add esp, 0x14
mov dword [ebp - 0x65c], 0xffffffff
mov byte [ebp - 0x97], 0
movzx eax, byte [ebp - 0x97]
test eax, eax
je 0x1004fc5d
push 0x1d37
push 1
push 0x467f
call fcn.1004bce5
add esp, 0xc
lea eax, [ebp - 0x65c]
push eax
push 1
push 0x21b8
call fcn.1004bd5d
add esp, 0xc
and dword [ebp - 0x118], 0
mov dword [ebp - 0x698], 0x7d21
mov dword [ebp - 0x674], 0xffffffff
mov dword [ebp - 0x664], 0xc40a98ce
mov dword [ebp - 0x66c], 0
mov dword [ebp - 0x6a0], 0x6e1ee67b
mov dword [ebp - 0x690], 3
mov dword [ebp - 0x6a8], 0
mov dword [ebp - 0x67c], 0x8d679bdd
mov dword [ebp - 0x684], 6
mov dword [ebp - 0x6b0], 0xbc906383
mov dword [ebp - 0x6b8], 0xdc23988f
push 3
lea ecx, [ebp - 0x86c]
call fcn.1001898a
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x1b0], 0
jmp 0x1004fd15
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 3
jge 0x1004fd37
push dword [ebp - 0x1b0]
lea ecx, [ebp - 0x86c]
call fcn.100189f7
mov dword [eax], 0x66593c39
jmp 0x1004fd08
lea eax, [ebp - 0x690]
push eax
lea eax, [ebp - 0x664]
push eax
lea eax, [ebp - 0x698]
push eax
push 0x26c4
lea eax, [ebp - 0x66c]
push eax
lea eax, [ebp - 0x6a0]
push eax
lea eax, [ebp - 0x674]
push eax
lea eax, [ebp - 0x86c]
push eax
lea eax, [ebp - 0x6a8]
push eax
push 1
lea eax, [ebp - 0x67c]
push eax
lea eax, [ebp - 0x6b0]
push eax
lea eax, [ebp - 0x684]
push eax
lea eax, [ebp - 0x6b8]
push eax
call fcn.1004be03
add esp, 0x38
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x86c]
call fcn.100189f2
mov eax, dword [ebp - 0x10]
cmp dword [eax + 0x18], 0
jbe 0x1004fdd6
push 0
lea eax, [ebp - 0x118]
push eax
push 0x5e76
lea eax, [ebp - 0x10]
push eax
push 0x820
push 0x4191
call fcn.1004d26b
add esp, 0x18
mov dword [ebp - 0x3ec], 0xffffffff
or dword [ebp - 0x7ec], 0xffffffff
or dword [ebp - 0x7e8], 0xffffffff
or dword [ebp - 0x7e4], 0xffffffff
or dword [ebp - 0x7e0], 0xffffffff
lea ecx, [ebp - 0x295]
call fcn.10009413
push eax
lea eax, [ebp - 0x7dc]
push eax
lea eax, [ebp - 0x7ec]
push eax
lea ecx, [ebp - 0x9e8]
call fcn.10018a06
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x848]
call fcn.100189cc
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x694], 0x5acee617
mov dword [ebp - 0x6c0], 0x299e885d
push 3
lea ecx, [ebp - 0x830]
call fcn.1001898a
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x6fc], 3
mov dword [ebp - 0x768], 0xff7673ed
mov dword [ebp - 0x1dc], 0
jmp 0x1004fe8a
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 3
jge 0x1004feac
push dword [ebp - 0x1dc]
lea ecx, [ebp - 0x830]
call fcn.100189f7
mov dword [eax], 0x85fafe44
jmp 0x1004fe7d
mov esi, dword [ebp - 0x3ec]
dec esi
push 3
lea ecx, [ebp - 0x848]
call fcn.100189f7
mov dword [eax], esi
lea eax, [ebp - 0x830]
push eax
lea eax, [ebp - 0x6c0]
push eax
lea eax, [ebp - 0x768]
push eax
push 0x48b
push 0
lea eax, [ebp - 0x694]
push eax
lea eax, [ebp - 0x3ec]
push eax
lea eax, [ebp - 0x848]
push eax
lea eax, [ebp - 0x6fc]
push eax
call fcn.1004c1e8
add esp, 0x24
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x830]
call fcn.100189f2
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x848]
call fcn.100189f2
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0x1c]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x64], 0xf89b
mov dword [ebp - 0x1fc], 0xb28787d
mov dword [ebp - 0x74c], 1
mov dword [ebp - 0x1b8], 0
jmp 0x1004ff5d
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 3
jge 0x1004ff79
mov eax, dword [ebp - 0x1b8]
mov dword [ebp + eax*4 - 0x9b4], 0xfffffffb
jmp 0x1004ff50
mov byte [ebp - 0x9b], 0
movzx eax, byte [ebp - 0x9b]
test eax, eax
je 0x1004ff99
push 0x59ad
push 1
call fcn.1004c0b0
pop ecx
pop ecx
cmp dword [ebp - 0x64], 0
je 0x100500df
cmp dword [ebp - 0x64], 0
je 0x1004ffbb
cmp dword [ebp - 0x64], 0
je 0x1004ffbb
mov dword [ebp - 0x568], 1
jmp 0x1004ffc2
and dword [ebp - 0x568], 0
mov eax, dword [ebp - 0x64]
imul eax, dword [ebp - 0x568]
cmp eax, 0xfff6
jne 0x1004ffdf
mov dword [ebp - 0x69c], 1
jmp 0x1004ffe6
and dword [ebp - 0x69c], 0
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x88c], eax
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x64], eax
jle 0x10050003
mov dword [ebp - 0x3f4], 1
jmp 0x1005000a
and dword [ebp - 0x3f4], 0
mov eax, dword [ebp - 0x3f4]
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 0xffffffff
jle 0x10050031
cmp dword [ebp - 0x1fc], 0
jne 0x10050031
and dword [ebp - 0x4c4], 0
jmp 0x1005003b
mov dword [ebp - 0x4c4], 1
imul eax, dword [ebp - 0x4c4], 0x96d4
cmp dword [ebp - 0x64], eax
jge 0x1005005c
cmp dword [ebp - 0x1fc], 0
jne 0x1005005c
and dword [ebp - 0x3fc], 0
jmp 0x10050066
mov dword [ebp - 0x3fc], 1
mov eax, dword [ebp - 0x64]
cmp eax, dword [ebp - 0x3fc]
jne 0x1005007d
mov dword [ebp - 0x52c], 1
jmp 0x10050084
and dword [ebp - 0x52c], 0
cmp dword [ebp - 0x52c], 0x1462ccd2
je 0x1005009c
mov dword [ebp - 0x404], 1
jmp 0x100500a3
and dword [ebp - 0x404], 0
mov eax, dword [ebp - 0x64]
cmp eax, dword [ebp - 0x404]
jl 0x100500ba
mov dword [ebp - 0x4cc], 1
jmp 0x100500c1
and dword [ebp - 0x4cc], 0
cmp dword [ebp - 0x4cc], 9
jbe 0x100500df
cmp dword [ebp - 0x74c], 0
je 0x100500df
mov dword [ebp - 0x40c], 1
jmp 0x100500e6
and dword [ebp - 0x40c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x40c]
mov dword [ebp + eax - 0x9b4], ecx
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0x14]
sub eax, dword [ebp - 0x118]
mov dword [ebp - 0xd0], eax
and dword [ebp - 0x108], 0
jmp 0x10050121
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
mov eax, dword [ebp - 0x108]
cmp eax, dword [ebp - 0xd0]
jge 0x10050200
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
mov eax, dword [eax + 0x14]
sub eax, dword [ecx + 0x18]
cmp dword [ebp - 0x108], eax
jae 0x1005016d
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0x538]
push eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x10]
push eax
push 1
lea eax, [ebp - 0x30]
push eax
call fcn.1004c101
add esp, 0x18
jmp 0x100501ad
push 0x7bcd
push 0x6091
push 0x5333
lea eax, [ebp - 0xb4]
push eax
push 0xd7c
push 0x1b73
push 0x7f4c
lea eax, [ebp - 0x538]
push eax
push 0
push 0x6d47
push 0x6f09
call fcn.1004cb12
add esp, 0x2c
lea eax, [ebp - 0x538]
push eax
push 1
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.1004c185
add esp, 0x14
push 0x6da1
push 0x4496
push 0x7a2a
lea eax, [ebp - 0x14]
push eax
push 1
push 0x2f12
push 0x18db
push 0x561e
push 0x7fac
call fcn.1004c1e8
add esp, 0x24
jmp 0x10050114
push 2
lea ecx, [ebp - 0x730]
call fcn.1001898a
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x704], 0x260417be
lea eax, [ebp - 0x934]
push eax
lea eax, [ebp - 0x730]
push eax
push 1
call fcn.1004c40c
add esp, 0xc
push 1
lea ecx, [ebp - 0x730]
call fcn.100189f7
and dword [eax], 0
jmp 0x1005026c
push 1
lea ecx, [ebp - 0x730]
call fcn.100189f7
mov dword [ebp - 0x414], eax
mov eax, dword [ebp - 0x414]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x414]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x730]
call fcn.100189f7
cmp dword [eax], 9
jle 0x100502a2
mov dword [ebp - 0x6a4], 8
lea eax, [ebp - 0x6a4]
push eax
lea eax, [ebp - 0x704]
push eax
push 1
call fcn.1004c470
add esp, 0xc
jmp 0x10050248
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x730]
call fcn.100189f2
lea eax, [ebp - 0x10]
push eax
push 1
push 0x5092
lea eax, [ebp - 0x118]
push eax
push 0x58e0
call fcn.1004c4b5
add esp, 0x14
mov dword [ebp - 0x4d4], 8
mov dword [ebp - 0x2a4], 0xe3cf9575
mov dword [ebp - 0x2c4], 0
mov dword [ebp - 0x284], 0xffffffff
push 2
lea ecx, [ebp - 0x740]
call fcn.1001898a
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x6ac], 0
push 0xe42
lea eax, [ebp - 0x894]
push eax
push 0
push 0x50e9
push 0x2951
push 0x142c
lea eax, [ebp - 0x740]
push eax
push 0x51fc
call fcn.1004c73d
add esp, 0x20
push 0x803
push 1
push 0x7395
lea eax, [ebp - 0x284]
push eax
lea eax, [ebp - 0x2a4]
push eax
lea eax, [ebp - 0x740]
push eax
lea eax, [ebp - 0x2c4]
push eax
lea eax, [ebp - 0x4d4]
push eax
call fcn.1004c53e
add esp, 0x20
mov eax, dword [ebp - 0x284]
mov dword [ebp - 0x948], eax
cmp dword [ebp - 0x4d4], 0
jne 0x100504b5
cmp dword [ebp - 0x2a4], 8
jae 0x100503ac
mov dword [ebp - 0x4dc], 1
jmp 0x100503b3
and dword [ebp - 0x4dc], 0
push 0
lea ecx, [ebp - 0x740]
call fcn.100189f7
cmp dword [eax], 0x51c8
jge 0x100503d4
mov dword [ebp - 0x41c], 1
jmp 0x100503db
and dword [ebp - 0x41c], 0
cmp dword [ebp - 0x41c], 0
jge 0x100503f0
mov dword [ebp - 0x534], 1
jmp 0x100503f7
and dword [ebp - 0x534], 0
mov eax, dword [ebp - 0x2c4]
cmp dword [ebp - 0x534], eax
jg 0x10050411
mov dword [ebp - 0x424], 1
jmp 0x10050418
and dword [ebp - 0x424], 0
mov eax, dword [ebp - 0x2a4]
cmp dword [ebp - 0x424], eax
jge 0x10050432
mov dword [ebp - 0x42c], 1
jmp 0x10050439
and dword [ebp - 0x42c], 0
mov eax, dword [ebp - 0x4dc]
cmp eax, dword [ebp - 0x42c]
jg 0x10050453
mov dword [ebp - 0x53c], 1
jmp 0x1005045a
and dword [ebp - 0x53c], 0
cmp dword [ebp - 0x53c], 0x69cd17cd
je 0x10050472
mov dword [ebp - 0x434], 1
jmp 0x10050479
and dword [ebp - 0x434], 0
mov eax, dword [ebp - 0x284]
cmp dword [ebp - 0x434], eax
jle 0x10050493
mov dword [ebp - 0x4e4], 1
jmp 0x1005049a
and dword [ebp - 0x4e4], 0
imul eax, dword [ebp - 0x4e4], 0x1bb1
sub eax, dword [ebp - 0x6ac]
jne 0x100504b5
and dword [ebp - 0x43c], 0
jmp 0x100504bf
mov dword [ebp - 0x43c], 1
push 1
lea ecx, [ebp - 0x740]
call fcn.100189f7
mov ecx, dword [ebp - 0x43c]
imul ecx, dword [eax]
mov dword [ebp - 0x2c4], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x740]
call fcn.100189f2
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0xd0]
push eax
push 1
lea eax, [ebp - 0x118]
push eax
call fcn.1004c674
add esp, 0x10
and dword [ebp - 0x28c], 0
jmp 0x1005051c
mov eax, dword [ebp - 0x28c]
inc eax
mov dword [ebp - 0x28c], eax
mov eax, dword [ebp - 0x28c]
cmp eax, dword [ebp - 0xd0]
jge 0x10050556
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x30]
and dword [ecx + eax], 0
push 0
push 0x14d6
push 0x1a5d
lea eax, [ebp - 0x14]
push eax
push 0x5b26
call fcn.1004c6d5
add esp, 0x14
jmp 0x1005050f
push 1
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0xd0]
push eax
push 0x54de
lea eax, [ebp - 0x10]
push eax
call fcn.1004c6d5
add esp, 0x14
push 0
push 0x22bf
lea eax, [ebp - 0x118]
push eax
push 0x517b
push 0x2039
lea eax, [ebp - 0x10]
push eax
call fcn.1004cf76
add esp, 0x18
and dword [ebp - 0x1c0], 0
jmp 0x100505ae
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
mov eax, dword [ebp - 0x1c0]
cmp eax, dword [ebp - 0xd0]
jge 0x100505fc
lea eax, [ebp - 0x30]
push eax
push 0x2658
push 1
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x34]
push eax
push 0x57f2
lea eax, [ebp - 0x1c0]
push eax
call fcn.1004c73d
add esp, 0x20
push 1
lea eax, [ebp - 0x14]
push eax
push 0xf25
call fcn.1004c80b
add esp, 0xc
jmp 0x100505a1
mov dword [ebp - 0x1e4], 0x399841b3
mov dword [ebp - 0x11c], 0xa519d814
push 1
lea ecx, [ebp - 0x824]
call fcn.1001898a
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x6b4], 0x6c28
mov dword [ebp - 0x110], 0
jmp 0x10050647
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 1
jge 0x10050663
mov eax, dword [ebp - 0x110]
mov dword [ebp + eax*4 - 0x2b8], 0x46880738
jmp 0x1005063a
lea eax, [ebp - 0x110]
push eax
push 1
lea eax, [ebp - 0x824]
push eax
call fcn.1004c84c
add esp, 0xc
mov dword [ebp - 0x1e4], 0
jmp 0x10050694
mov eax, dword [ebp - 0x1e4]
dec eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 0xfffffff4
jg 0x100508c3
mov dword [ebp - 0x294], 0xffffffff
mov dword [ebp - 0x29c], 0xd061a652
mov dword [ebp - 0xfc], 0xffffffff
mov dword [ebp - 0x154], 0xffffffff
mov dword [ebp - 0x2e8], 1
push 7
pop eax
test eax, eax
je 0x10050833
push 0
lea ecx, [ebp - 0x824]
call fcn.100189f7
mov dword [ebp - 0x2b4], eax
mov eax, dword [ebp - 0x2b4]
mov eax, dword [eax]
mov dword [ebp - 0x2e8], eax
mov eax, dword [ebp - 0x2e8]
mov dword [ebp - 0x2f0], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2f0]
mov dword [ebp + eax - 0x2b8], ecx
mov eax, dword [ebp - 0x2f0]
mov ecx, dword [ebp - 0x2b4]
mov ecx, dword [ecx]
inc ecx
mov edx, dword [ebp - 0x2b4]
mov dword [edx], ecx
test eax, eax
je 0x10050782
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xfc]
cmp dword [ebp + eax - 0x2b8], ecx
jle 0x1005075a
mov dword [ebp - 0x2f8], 1
jmp 0x10050761
and dword [ebp - 0x2f8], 0
mov eax, dword [ebp - 0x2f8]
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 0
je 0x10050782
mov dword [ebp - 0x300], 1
jmp 0x10050789
and dword [ebp - 0x300], 0
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x29c], eax
mov eax, dword [ebp - 0x29c]
mov dword [ebp - 0x89c], eax
mov eax, dword [ebp - 0x294]
mov dword [ebp - 0x944], eax
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x8a4], eax
mov eax, 0xbc8f
cmp eax, 0x11ca
je 0x100507d1
mov dword [ebp - 0x76c], 1
jmp 0x100507d8
and dword [ebp - 0x76c], 0
mov eax, dword [ebp - 0x6b4]
mov dword [ebp - 0x950], eax
cmp dword [ebp - 0x11c], 1
jae 0x100507ff
cmp dword [ebp - 0x11c], 0
jne 0x100507ff
and dword [ebp - 0x308], 0
jmp 0x10050809
mov dword [ebp - 0x308], 1
mov eax, dword [ebp - 0x300]
sub eax, dword [ebp - 0x308]
cmp eax, 0xffffffff
jae 0x10050826
mov dword [ebp - 0x310], 1
jmp 0x1005082d
and dword [ebp - 0x310], 0
mov eax, dword [ebp - 0xfc]
cmp dword [ebp - 0x154], 1
jne 0x1005085a
cmp dword [ebp - 0x294], 0
je 0x1005085a
cmp dword [ebp - 0x11c], 0
je 0x1005085a
mov dword [ebp - 0x318], 1
jmp 0x10050861
and dword [ebp - 0x318], 0
mov eax, dword [ebp - 0x294]
cmp dword [ebp - 0x318], eax
jle 0x1005089d
cmp dword [ebp - 0x154], 0
je 0x1005089d
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2b8], 0
je 0x1005089d
cmp dword [ebp - 0x29c], 0
je 0x1005089d
and dword [ebp - 0x320], 0
mov eax, dword [ebp - 0x320]
mov dword [ebp - 0xfc], eax
mov eax, dword [ebp - 0xfc]
neg eax
mov dword [ebp - 0x11c], eax
jmp 0x10050687
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x824]
call fcn.100189f2
mov eax, dword [ebp - 0xd0]
shl eax, 1
mov ecx, dword [ebp - 0x14]
sub ecx, eax
mov eax, dword [ebp - 0x10]
mov dword [eax + 0x24], ecx
mov dword [ebp - 0x1c], 0xb26bdde0
mov dword [ebp - 0x44], 0xee973417
mov dword [ebp - 0x330], 0xe53494ab
push 1
lea ecx, [ebp - 0x5bc]
call fcn.1001898a
mov dword [ebp - 4], 0x15
mov dword [ebp - 0x88], 0
jmp 0x1005092a
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 1
jge 0x1005094c
push dword [ebp - 0x88]
lea ecx, [ebp - 0x5bc]
call fcn.100189f7
mov dword [eax], 0x7e2
jmp 0x1005091d
mov dword [ebp - 0x88], 0
jmp 0x10050965
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 2
jge 0x10050981
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0x7c8], 0xfff7
jmp 0x10050958
mov dword [ebp - 0x1c], 0
jmp 0x10050991
cmp dword [ebp - 0x1c], 6
je 0x10050aa9
push 0
push 0x26df
push 0x2360
call dword [0x10683278]
push eax
call dword [0x10683264]
push eax
call dword [0x1068305c]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret