Function at 0x1004a131
Capabilities:
Allocate thread local storage
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1008f76f
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x864
push esi
and dword [ebp - 0x2ac], 0
mov dword [ebp - 0x1e0], 0xffff
mov dword [ebp - 0x208], 0x29c1464f
mov dword [ebp - 0x228], 0x2b483718
mov dword [ebp - 0x7e8], 0xacf25792
mov dword [ebp - 0x220], 0xffffffff
mov dword [ebp - 0x2b8], 0xffffffff
mov dword [ebp - 0x530], 0
mov dword [ebp - 0x558], 1
mov dword [ebp - 0x554], 1
mov dword [ebp - 0x550], 1
mov dword [ebp - 0x54c], 1
mov dword [ebp - 0x114], 1
mov dword [ebp - 0x1e8], 0
mov dword [ebp - 0x1ec], 0x88c5540f
mov dword [ebp - 0x70c], 0
mov dword [ebp - 0x230], 0xd4644688
mov dword [ebp - 0x1a8], 0
mov dword [ebp - 0x454], 0
mov dword [ebp - 0x5ec], 0x9bd9
mov dword [ebp - 0x5fc], 1
mov dword [ebp - 0x1e0], 0xfffd
mov eax, dword [ebp - 0x1e0]
mov dword [ebp - 0x714], eax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x71c], eax
push 0xfffffffffffffff8
pop eax
cmp eax, 0x446ed9a8
jne 0x1004a257
mov dword [ebp - 0x2b4], 1
jmp 0x1004a25e
and dword [ebp - 0x2b4], 0
cmp dword [ebp - 0x2b4], 0x66969e96
jg 0x1004a276
mov dword [ebp - 0x4fc], 1
jmp 0x1004a27d
and dword [ebp - 0x4fc], 0
cmp dword [ebp - 0x4fc], 0xffff
jae 0x1004a295
mov dword [ebp - 0x504], 1
jmp 0x1004a29c
and dword [ebp - 0x504], 0
mov eax, dword [ebp - 0x504]
mov dword [ebp - 0x208], eax
mov eax, dword [ebp - 0x208]
push 4
pop ecx
imul ecx, ecx, 3
sub eax, dword [ebp + ecx - 0x558]
cmp eax, dword [ebp - 0x114]
je 0x1004a2cf
mov dword [ebp - 0x50c], 1
jmp 0x1004a2d6
and dword [ebp - 0x50c], 0
imul eax, dword [ebp - 0x50c], 0x8998
imul eax, dword [ebp - 0x2b8]
mov dword [ebp - 0x530], eax
mov eax, dword [ebp - 0x530]
sub eax, dword [ebp - 0x114]
cmp eax, dword [ebp - 0x2b8]
jle 0x1004a30d
mov dword [ebp - 0x55c], 1
jmp 0x1004a314
and dword [ebp - 0x55c], 0
mov eax, dword [ebp - 0x1e8]
mov dword [ebp - 0x724], eax
mov eax, dword [ebp - 0x454]
mov dword [ebp - 0x72c], eax
mov eax, dword [ebp - 0x5ec]
mov dword [ebp - 0x734], eax
mov eax, dword [ebp - 0x1ec]
mov dword [ebp - 0x73c], eax
cmp dword [ebp - 0x1e0], 0
je 0x1004a35e
or eax, 0xffffffff
je 0x1004a35e
mov dword [ebp - 0x44c], 1
jmp 0x1004a365
and dword [ebp - 0x44c], 0
mov eax, 0xb46f9f11
sub eax, dword [ebp - 0x44c]
inc eax
cmp dword [ebp - 0x114], eax
jg 0x1004a385
mov dword [ebp - 0x218], 1
jmp 0x1004a38c
and dword [ebp - 0x218], 0
mov eax, dword [ebp - 0x218]
sub eax, dword [ebp - 0x454]
mov dword [ebp - 0x220], eax
mov eax, dword [ebp - 0x230]
cmp dword [ebp - 0x220], eax
jg 0x1004a3b8
mov dword [ebp - 0x5f4], 1
jmp 0x1004a3bf
and dword [ebp - 0x5f4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x558]
mov dword [ebp - 0x77c], eax
cmp dword [ebp - 0x1e8], 0
je 0x1004a3e7
mov dword [ebp - 0x45c], 1
jmp 0x1004a3ee
and dword [ebp - 0x45c], 0
mov eax, dword [ebp - 0x1a8]
dec eax
mov dword [ebp - 0x1a8], eax
mov eax, dword [ebp - 0x1ec]
add eax, dword [ebp - 0x45c]
mov dword [ebp - 0x228], eax
mov eax, dword [ebp - 0x228]
inc eax
cmp dword [ebp - 0x1a8], eax
jle 0x1004a428
mov dword [ebp - 0x464], 1
jmp 0x1004a42f
and dword [ebp - 0x464], 0
mov eax, dword [ebp - 0x464]
mov dword [ebp - 0x1e8], eax
mov eax, dword [ebp - 0x208]
add eax, dword [ebp - 0x230]
cmp eax, dword [ebp - 0x1ec]
jge 0x1004a45b
mov dword [ebp - 0x46c], 1
jmp 0x1004a462
and dword [ebp - 0x46c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x558]
cmp dword [ebp - 0x46c], eax
jge 0x1004a483
mov dword [ebp - 0x238], 1
jmp 0x1004a48a
and dword [ebp - 0x238], 0
mov eax, dword [ebp - 0x5fc]
cmp dword [ebp - 0x238], eax
jg 0x1004a4a4
mov dword [ebp - 0x474], 1
jmp 0x1004a4ab
and dword [ebp - 0x474], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x558]
add eax, dword [ebp - 0x474]
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x558], eax
mov dword [ebp - 0x48], 5
mov dword [ebp - 0x18], 0
jmp 0x1004a4e2
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jge 0x1004a4f5
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1c], 8
jmp 0x1004a4db
mov dword [ebp - 0x18], 0
jmp 0x1004a505
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jge 0x1004a51b
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xc0], 0x82169286
jmp 0x1004a4fe
mov dword [ebp - 0x18], 0
jmp 0x1004a52b
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x1004a541
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x748], 0xfffffffe
jmp 0x1004a524
mov dword [ebp - 0x48], 0
jmp 0x1004a551
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
jg 0x1004a5f7
mov dword [ebp - 0x10c], 0
jmp 0x1004a574
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 3
jge 0x1004a590
mov eax, dword [ebp - 0x10c]
mov dword [ebp + eax*4 - 0x678], 0x951fe77d
jmp 0x1004a567
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x678], 0
jmp 0x1004a5be
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x678]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x678], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x678], 0
jg 0x1004a5f2
mov byte [ebp - 0x77], 0
movzx eax, byte [ebp - 0x77]
test eax, eax
je 0x1004a5e8
push 0x128b
push 0
call fcn.1004e294
pop ecx
pop ecx
push 0
call fcn.10049f15
pop ecx
jmp 0x1004a5a3
jmp 0x1004a54a
mov dword [ebp - 0x48], 0xffffffef
jmp 0x1004a607
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0x12
jne 0x1004a8dd
mov dword [ebp - 0x10], 0xfffffff6
mov dword [ebp - 0x484], 9
mov dword [ebp - 0x10], 0
jmp 0x1004a632
mov eax, dword [ebp - 0x10]
dec eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jl 0x1004a8d8
mov dword [ebp - 0x638], 9
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x1c], 0
je 0x1004a655
jmp 0x1004a8d8
cmp dword [ebp - 0x10], 0
jne 0x1004a85d
cmp dword [ebp - 0x48], 1
je 0x1004a671
mov dword [ebp - 0x604], 1
jmp 0x1004a678
and dword [ebp - 0x604], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1c]
mov dword [ebp - 0x784], eax
cmp dword [ebp - 0x484], 0x339b8842
je 0x1004a6a0
mov dword [ebp - 0x240], 1
jmp 0x1004a6a7
and dword [ebp - 0x240], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1c]
cmp dword [ebp - 0x240], eax
je 0x1004a6c5
mov dword [ebp - 0x47c], 1
jmp 0x1004a6cc
and dword [ebp - 0x47c], 0
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x47c]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0xc0]
jg 0x1004a6fe
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x748], 0
jne 0x1004a6fe
and dword [ebp - 0x248], 0
jmp 0x1004a708
mov dword [ebp - 0x248], 1
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x1c]
cmp dword [ebp - 0x248], eax
jne 0x1004a723
mov dword [ebp - 0x250], 1
jmp 0x1004a72a
and dword [ebp - 0x250], 0
mov eax, dword [ebp - 0x484]
cmp dword [ebp - 0x250], eax
jge 0x1004a744
mov dword [ebp - 0x48c], 1
jmp 0x1004a74b
and dword [ebp - 0x48c], 0
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x48c]
je 0x1004a762
mov dword [ebp - 0x64c], 1
jmp 0x1004a769
and dword [ebp - 0x64c], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x1c]
mov dword [ebp - 0x78c], eax
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x1c], 0
jle 0x1004a78c
mov dword [ebp - 0x258], 1
jmp 0x1004a793
and dword [ebp - 0x258], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1c]
imul eax, dword [ebp - 0x258]
cmp eax, 0xfffffffc
je 0x1004a7b5
mov dword [ebp - 0x494], 1
jmp 0x1004a7bc
and dword [ebp - 0x494], 0
mov eax, dword [ebp - 0x494]
sub eax, 0xe879
mov ecx, dword [ebp - 0x10]
sub eax, dword [ebp + ecx*4 - 0x1c]
je 0x1004a7ec
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc0], 0
je 0x1004a7ec
mov dword [ebp - 0x260], 1
jmp 0x1004a7f3
and dword [ebp - 0x260], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc0]
cmp dword [ebp - 0x260], eax
jle 0x1004a814
mov dword [ebp - 0x49c], 1
jmp 0x1004a81b
and dword [ebp - 0x49c], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x1c]
cmp dword [ebp - 0x49c], eax
jg 0x1004a836
mov dword [ebp - 0x654], 1
jmp 0x1004a83d
and dword [ebp - 0x654], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x1c]
mov dword [ebp - 0x794], eax
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x1c], 0
jne 0x1004a85d
and dword [ebp - 0x268], 0
jmp 0x1004a867
mov dword [ebp - 0x268], 1
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x1c]
cmp dword [ebp - 0x268], eax
jge 0x1004a882
mov dword [ebp - 0x65c], 1
jmp 0x1004a889
and dword [ebp - 0x65c], 0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x7cc], eax
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x1c]
neg eax
cmp eax, 0xfffffffc
jae 0x1004a8ac
mov dword [ebp - 0x650], 1
jmp 0x1004a8b3
and dword [ebp - 0x650], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x1c]
mov dword [ebp - 0x7d4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc0]
mov dword [ebp - 0x638], eax
jmp 0x1004a62b
jmp 0x1004a600
mov dword [ebp - 0x5c], 0
jmp 0x1004a8ed
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 1
jge 0x1004a903
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x7dc], 5
jmp 0x1004a8e6
mov dword [ebp - 0x5c], 0
jmp 0x1004a913
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 4
jge 0x1004a929
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x6bc], 1
jmp 0x1004a90c
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x6bc], 0
jmp 0x1004a954
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x6bc]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x6bc], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x6bc], 0
jg 0x1004a99b
mov byte [ebp - 0x86], 0
lea eax, [ebp - 0x86]
push eax
push 0
push 0x6da6
call fcn.1004dc2c
add esp, 0xc
push 0
push 0x572e
push 0x1a2c
push 0x7380
call fcn.1004a048
add esp, 0x10
jmp 0x1004a93b
mov byte [ebp - 0x1a4], 0x11
mov byte [ebp - 0x1a3], 0xa1
mov byte [ebp - 0x1a2], 0xc
mov byte [ebp - 0x1a1], 0x1f
mov byte [ebp - 0x1a0], 7
mov byte [ebp - 0x19f], 5
mov byte [ebp - 0x19e], 0x15
mov byte [ebp - 0x19d], 0x1e
mov byte [ebp - 0x19c], 0xb
mov byte [ebp - 0x19b], 0x1a
mov byte [ebp - 0x19a], 0
mov byte [ebp - 0x199], 0xd
mov byte [ebp - 0x198], 8
mov byte [ebp - 0x197], 8
mov byte [ebp - 0x196], 0x19
mov byte [ebp - 0x195], 0x13
mov byte [ebp - 0x194], 0xe
mov byte [ebp - 0x193], 0x15
mov byte [ebp - 0x192], 0x18
mov byte [ebp - 0x191], 0x16
mov byte [ebp - 0x190], 5
mov byte [ebp - 0x18f], 0x1f
mov byte [ebp - 0x18e], 0xd
mov byte [ebp - 0x18d], 8
mov byte [ebp - 0x18c], 0xa
mov byte [ebp - 0x18b], 5
mov byte [ebp - 0x18a], 0x13
mov byte [ebp - 0x189], 0x1f
mov byte [ebp - 0x188], 0x17
mov byte [ebp - 0x187], 0xc
mov byte [ebp - 0x186], 3
mov byte [ebp - 0x185], 0x1c
mov byte [ebp - 0x184], 4
mov byte [ebp - 0x183], 1
mov byte [ebp - 0x182], 6
mov byte [ebp - 0x181], 2
mov byte [ebp - 0x180], 0x4c
mov byte [ebp - 0x17f], 0x29
mov byte [ebp - 0x17e], 0xc6
mov byte [ebp - 0x17d], 0x7c
mov byte [ebp - 0x17c], 0x41
mov byte [ebp - 0x17b], 0xd3
mov byte [ebp - 0x17a], 0x82
mov byte [ebp - 0x179], 0x75
mov byte [ebp - 0x178], 0xd6
mov byte [ebp - 0x177], 0x13
mov byte [ebp - 0x176], 0x49
mov byte [ebp - 0x175], 0x8c
mov byte [ebp - 0x174], 0xe0
mov byte [ebp - 0x173], 0x4f
mov byte [ebp - 0x172], 0x3e
mov byte [ebp - 0x171], 0x89
mov byte [ebp - 0x170], 0x40
mov byte [ebp - 0x16f], 0xf4
mov byte [ebp - 0x16e], 0x2e
mov byte [ebp - 0x16d], 0x9e
mov byte [ebp - 0x16c], 0xd3
mov byte [ebp - 0x16b], 0xcb
mov byte [ebp - 0x16a], 0xc8
mov byte [ebp - 0x169], 0xcf
mov byte [ebp - 0x168], 0xa
mov byte [ebp - 0x167], 0xda
mov byte [ebp - 0x166], 0x5f
mov byte [ebp - 0x165], 0x51
mov byte [ebp - 0x164], 0x9c
mov byte [ebp - 0x163], 0x2e
mov byte [ebp - 0x162], 0xc5
mov byte [ebp - 0x161], 0x63
mov byte [ebp - 0x160], 0xca
mov byte [ebp - 0x15f], 0xd2
mov byte [ebp - 0x15e], 0x4b
mov byte [ebp - 0x15d], 0x89
mov byte [ebp - 0x15c], 0xfd
mov byte [ebp - 0x15b], 0xdf
mov byte [ebp - 0x15a], 0xda
mov byte [ebp - 0x159], 0x2f
mov byte [ebp - 0x158], 0xb7
mov byte [ebp - 0x157], 0xd5
mov byte [ebp - 0x156], 0x33
mov byte [ebp - 0x155], 9
mov byte [ebp - 0x154], 0xaf
mov byte [ebp - 0x153], 0xbe
mov byte [ebp - 0x152], 0xdf
mov byte [ebp - 0x151], 0x4f
mov byte [ebp - 0x150], 1
mov byte [ebp - 0x14f], 0x3f
mov byte [ebp - 0x14e], 0xc2
mov byte [ebp - 0x14d], 0x1c
mov byte [ebp - 0x14c], 0x5c
mov byte [ebp - 0x14b], 0x1b
mov byte [ebp - 0x14a], 0x68
mov byte [ebp - 0x149], 0x85
mov byte [ebp - 0x148], 0x7c
mov byte [ebp - 0x147], 0xcf
mov byte [ebp - 0x146], 0x7e
mov byte [ebp - 0x145], 0x50
mov byte [ebp - 0x144], 0xf6
mov byte [ebp - 0x143], 0xc4
mov byte [ebp - 0x142], 0x14
mov byte [ebp - 0x141], 0xb9
mov byte [ebp - 0x140], 0x18
mov byte [ebp - 0x13f], 0x45
mov byte [ebp - 0x13e], 4
mov byte [ebp - 0x13d], 0xc3
mov byte [ebp - 0x13c], 0x56
mov byte [ebp - 0x13b], 0x2d
mov byte [ebp - 0x13a], 0xb5
mov byte [ebp - 0x139], 0xc
mov byte [ebp - 0x138], 0xa5
mov byte [ebp - 0x137], 0x87
mov byte [ebp - 0x136], 0x90
mov byte [ebp - 0x135], 0xfb
mov byte [ebp - 0x134], 0xa5
mov byte [ebp - 0x133], 0x14
mov byte [ebp - 0x132], 0x12
mov byte [ebp - 0x131], 0x10
mov byte [ebp - 0x130], 4
mov byte [ebp - 0x12f], 1
mov byte [ebp - 0x12e], 0x13
mov byte [ebp - 0x12d], 0x16
mov byte [ebp - 0x12c], 0x15
mov byte [ebp - 0x12b], 9
mov byte [ebp - 0x12a], 0x1d
mov byte [ebp - 0x129], 0x12
mov byte [ebp - 0x128], 0x19
mov byte [ebp - 0x127], 0xf
mov byte [ebp - 0x126], 3
mov byte [ebp - 0x125], 2
mov byte [ebp - 0x124], 0x13
mov dword [ebp - 0xc4], 0
jmp 0x1004ad3b
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 2
jge 0x1004ad57
mov eax, dword [ebp - 0xc4]
mov dword [ebp + eax*4 - 0x850], 0xa684
jmp 0x1004ad2e
mov byte [ebp - 0x6e], 0
movzx eax, byte [ebp - 0x6e]
test eax, eax
je 0x1004ad6b
push 1
call fcn.100228ae
pop ecx
mov byte [ebp - 0x6f], 0
movzx eax, byte [ebp - 0x6f]
test eax, eax
je 0x1004ad7f
push 1
call fcn.10049f15
pop ecx
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x1a4]
or eax, 0xd3
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x1a4]
and ecx, 0xd3
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x1a4]
mov byte [ebp + ecx - 0x6d8], al
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x7e4], 0x590
mov dword [ebp - 0xec], 0
jmp 0x1004ade7
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 2
jge 0x1004ae03
mov eax, dword [ebp - 0xec]
mov dword [ebp + eax*4 - 0x1f4], 0xffffffff
jmp 0x1004adda
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x14], eax
jge 0x1004b042
mov dword [ebp - 0xac], 0x37c0
mov dword [ebp - 0xcc], 0xabff5ecc
mov dword [ebp - 0x290], 1
mov dword [ebp - 0x568], 0xd69b45c
cmp dword [ebp - 0x14], 0xffffffff
jg 0x1004ae49
mov dword [ebp - 0x4a4], 1
jmp 0x1004ae50
and dword [ebp - 0x4a4], 0
mov eax, dword [ebp - 0xac]
mov ecx, dword [ebp - 0xac]
imul ecx, dword [ebp - 0x4a4]
imul eax, ecx
cmp eax, 5
ja 0x1004ae77
mov dword [ebp - 0x270], 1
jmp 0x1004ae7e
and dword [ebp - 0x270], 0
cmp dword [ebp - 0x270], 0xfffffffc
je 0x1004ae93
mov dword [ebp - 0x4ac], 1
jmp 0x1004ae9a
and dword [ebp - 0x4ac], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x4ac], eax
jge 0x1004aeb1
mov dword [ebp - 0x278], 1
jmp 0x1004aeb8
and dword [ebp - 0x278], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x278], eax
jl 0x1004aecf
mov dword [ebp - 0x4b4], 1
jmp 0x1004aed6
and dword [ebp - 0x4b4], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x4b4], eax
jge 0x1004aeed
mov dword [ebp - 0x280], 1
jmp 0x1004aef4
and dword [ebp - 0x280], 0
imul eax, dword [ebp - 0x280], 0xffffffff
cmp eax, dword [ebp - 0x14]
je 0x1004af0c
mov dword [ebp - 0x4bc], 1
jmp 0x1004af13
and dword [ebp - 0x4bc], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x4bc], eax
jne 0x1004af2a
mov dword [ebp - 0x288], 1
jmp 0x1004af31
and dword [ebp - 0x288], 0
mov eax, dword [ebp - 0x288]
mov dword [ebp - 0xcc], eax
mov eax, dword [ebp - 0xcc]
add eax, 0x12a2ef7e
cmp eax, dword [ebp - 0x14]
je 0x1004af59
mov dword [ebp - 0x4c4], 1
jmp 0x1004af60
and dword [ebp - 0x4c4], 0
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x4c4]
cmp eax, dword [ebp - 0xac]
jne 0x1004af7d
mov dword [ebp - 0x1b4], 1
jmp 0x1004af84
and dword [ebp - 0x1b4], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1b4]
mov dword [ebp + eax - 0x1f4], ecx
mov eax, dword [ebp - 0x1b4]
sub eax, 6
cmp eax, 2
jae 0x1004afb1
mov dword [ebp - 0x5e4], 1
jmp 0x1004afb8
and dword [ebp - 0x5e4], 0
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0x7ec], eax
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0x7f4], eax
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0x290], eax
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x290], eax
jge 0x1004aff3
mov dword [ebp - 0x4cc], 1
jmp 0x1004affa
and dword [ebp - 0x4cc], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x4cc], eax
jle 0x1004b015
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1f4], 0
jne 0x1004b027
cmp dword [ebp - 0xcc], 0
jne 0x1004b027
and dword [ebp - 0x298], 0
jmp 0x1004b031
mov dword [ebp - 0x298], 1
mov eax, dword [ebp - 0x298]
mov dword [ebp - 0x568], eax
jmp 0x1004b4ce
mov dword [ebp - 0x570], 0x3d82f881
mov dword [ebp - 0x14], 0
jmp 0x1004b05c
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0xfffffffd
jle 0x1004b4bd
mov dword [ebp - 0x90], 1
mov dword [ebp - 0x4d4], 0xfffffffa
mov dword [ebp - 0x578], 0xe8e356d6
mov dword [ebp - 0x90], 0xffffffe6
jmp 0x1004b09d
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0xfffffff7
jne 0x1004b4b8
mov dword [ebp - 0x34], 0x5866b388
mov dword [ebp - 0x658], 0xfffffffc
mov dword [ebp - 0x34], 1
jmp 0x1004b0cb
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jl 0x1004b4b3
mov dword [ebp - 0x9c], 0xffffffff
mov dword [ebp - 0x2e8], 0xc51c
mov dword [ebp - 0x5f8], 0xfffffffb
mov dword [ebp - 0x9c], 0
jmp 0x1004b10c
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 1
jg 0x1004b4ae
mov dword [ebp - 0xa4], 6
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x7c0], eax
mov eax, dword [ebp - 0xa4]
cmp dword [ebp - 0x34], eax
jne 0x1004b146
mov dword [ebp - 0x5f0], 1
jmp 0x1004b14d
and dword [ebp - 0x5f0], 0
mov dword [ebp - 0x4d4], 7
mov eax, dword [ebp - 0x4d4]
mov dword [ebp - 0x80c], eax
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x90]
cmp dword [ebp + eax*4 - 0x1f4], ecx
jge 0x1004b185
push 9
pop eax
test eax, eax
jne 0x1004b185
and dword [ebp - 0x2a0], 0
jmp 0x1004b18f
mov dword [ebp - 0x2a0], 1
cmp dword [ebp - 0x2a0], 0
jne 0x1004b1aa
cmp dword [ebp - 0xa4], 0
jne 0x1004b1aa
and dword [ebp - 0x4dc], 0
jmp 0x1004b1b4
mov dword [ebp - 0x4dc], 1
imul eax, dword [ebp - 0x4dc], 0x5ccf
test eax, eax
je 0x1004b45a
mov dword [ebp - 0x2a8], 0x5a1b
cmp dword [ebp - 0x2a8], 0
je 0x1004b3ef
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1f4], 0xffffffff
jne 0x1004b1f9
mov dword [ebp - 0x4e4], 1
jmp 0x1004b200
and dword [ebp - 0x4e4], 0
mov eax, dword [ebp - 0x2a8]
cmp dword [ebp - 0x4e4], eax
jle 0x1004b21a
mov dword [ebp - 0x2b0], 1
jmp 0x1004b221
and dword [ebp - 0x2b0], 0
imul eax, dword [ebp - 0x2b0], 0x1fd1
cmp dword [ebp - 0x34], eax
jg 0x1004b23c
mov dword [ebp - 0x4ec], 1
jmp 0x1004b243
and dword [ebp - 0x4ec], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x4ec], eax
jge 0x1004b25a
mov dword [ebp - 0x4f4], 1
jmp 0x1004b261
and dword [ebp - 0x4f4], 0
imul eax, dword [ebp - 0x4f4], 0xfff6
test eax, eax
jne 0x1004b27e
cmp dword [ebp - 0x34], 0
jne 0x1004b27e
and dword [ebp - 0x3f8], 0
jmp 0x1004b288
mov dword [ebp - 0x3f8], 1
cmp dword [ebp - 0x3f8], 0x316a
jl 0x1004b2a0
mov dword [ebp - 0x2c0], 1
jmp 0x1004b2a7
and dword [ebp - 0x2c0], 0
cmp dword [ebp - 0x2c0], 0xffffffff
jl 0x1004b2bc
mov dword [ebp - 0x498], 1
jmp 0x1004b2c3
and dword [ebp - 0x498], 0
mov eax, dword [ebp - 0xa4]
cmp dword [ebp - 0x498], eax
jge 0x1004b2dd
mov dword [ebp - 0x2c8], 1
jmp 0x1004b2e4
and dword [ebp - 0x2c8], 0
cmp dword [ebp - 0x2c8], 3
ja 0x1004b2f9
mov dword [ebp - 0x400], 1
jmp 0x1004b300
and dword [ebp - 0x400], 0
mov eax, dword [ebp - 0x9c]
cmp dword [ebp - 0x400], eax
jl 0x1004b323
cmp dword [ebp - 0x90], 0
je 0x1004b323
mov dword [ebp - 0x2d0], 1
jmp 0x1004b32a
and dword [ebp - 0x2d0], 0
mov eax, dword [ebp - 0xa4]
cmp eax, dword [ebp - 0x2d0]
jle 0x1004b344
mov dword [ebp - 0x4e8], 1
jmp 0x1004b34b
and dword [ebp - 0x4e8], 0
mov eax, dword [ebp - 0x4e8]
sub eax, dword [ebp - 0x34]
jne 0x1004b368
cmp dword [ebp - 0x9c], 0
jne 0x1004b368
and dword [ebp - 0x2d8], 0
jmp 0x1004b372
mov dword [ebp - 0x2d8], 1
cmp dword [ebp - 0x2d8], 0xffffffff
jne 0x1004b387
mov dword [ebp - 0x408], 1
jmp 0x1004b38e
and dword [ebp - 0x408], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1f4]
cmp eax, dword [ebp - 0x408]
jge 0x1004b3af
mov dword [ebp - 0x2e0], 1
jmp 0x1004b3b6
and dword [ebp - 0x2e0], 0
imul eax, dword [ebp - 0x2e0], 0x8194
cmp eax, 0xb022
jge 0x1004b3d3
mov dword [ebp - 0x4a0], 1
jmp 0x1004b3da
and dword [ebp - 0x4a0], 0
cmp dword [ebp - 0x4a0], 0
je 0x1004b3ef
mov dword [ebp - 0x1dc], 1
jmp 0x1004b3f6
and dword [ebp - 0x1dc], 0
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x1dc]
mov dword [ebp + eax*4 - 0x1f4], ecx
mov eax, dword [ebp - 0x2e8]
mov dword [ebp - 0x6dc], eax
mov eax, dword [ebp - 0x570]
mov dword [ebp - 0x6e8], eax
xor eax, eax
je 0x1004b437
cmp dword [ebp - 0x2e8], 0
je 0x1004b437
mov dword [ebp - 0x410], 1
jmp 0x1004b43e
and dword [ebp - 0x410], 0
mov eax, dword [ebp - 0x410]
mov dword [ebp - 0x658], eax
cmp dword [ebp - 0x578], 0
je 0x1004b458
jmp 0x1004b0ff
jmp 0x1004b4a9
mov dword [ebp - 0x2f0], 0xa093ea4b
mov dword [ebp - 0x2f0], 9
mov eax, dword [ebp - 0x2f0]
mov dword [ebp - 0x5f8], eax
mov byte [ebp - 0x71], 0
movzx eax, byte [ebp - 0x71]
test eax, eax
je 0x1004b4a9
push 0x5645
push 0
push 0x6222
push 0x61e7
push 0x240c
push 0x69b8
call fcn.1004de92
add esp, 0x18
jmp 0x1004b0ff
jmp 0x1004b0c4
jmp 0x1004b090
jmp 0x1004b055
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x1f4], 0xfffffffb
mov dword [ebp - 0x28], 2
and dword [ebp - 0xdc], 0
jmp 0x1004b4e6
mov eax, dword [ebp - 0x28]
inc eax
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0x81
jae 0x1004c0bc
mov dword [ebp - 0x110], 0
jmp 0x1004b50c
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 1
jge 0x1004b528
mov eax, dword [ebp - 0x110]
mov dword [ebp + eax*4 - 0x780], 0x624039b
jmp 0x1004b4ff
mov byte [ebp - 0x73], 0
movzx eax, byte [ebp - 0x73]
test eax, eax
je 0x1004b53c
push 0
call fcn.1004de06
pop ecx
mov byte [ebp - 0x75], 0
movzx eax, byte [ebp - 0x75]
test eax, eax
je 0x1004b556
push 0x2586
push 0
call fcn.1004a0ef
pop ecx
pop ecx
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x1a4]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x28], eax
jne 0x1004be63
mov dword [ebp - 0x420], 0xffffffff
mov dword [ebp - 0xd4], 0xf18ee85e
mov dword [ebp - 0x6c], 0x51acae7b
mov dword [ebp - 0x1bc], 0xb903
mov dword [ebp - 0x94], 1
mov dword [ebp - 0x24], 0
jmp 0x1004b5b0
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x1004b5c6
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x120], 0xf0ed
jmp 0x1004b5a9
mov dword [ebp - 0x24], 0
jmp 0x1004b5d6
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jge 0x1004b5ec
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x610], 0xffffffff
jmp 0x1004b5cf
mov dword [ebp - 0x24], 0
jmp 0x1004b5fc
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x1004b612
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x830], 0xffffffff
jmp 0x1004b5f5
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x120]
cmp dword [ebp + eax - 0x120], ecx
jge 0x1004b862
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x6c]
sub eax, dword [ebp - 0xd4]
jne 0x1004b65e
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x120], 0
jne 0x1004b65e
and dword [ebp - 0x510], 0
jmp 0x1004b668
mov dword [ebp - 0x510], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x120]
cmp dword [ebp - 0x510], eax
jge 0x1004b689
mov dword [ebp - 0x2f8], 1
jmp 0x1004b690
and dword [ebp - 0x2f8], 0
imul eax, dword [ebp - 0x2f8], 0x5bed
test eax, eax
jne 0x1004b6ae
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x120], 0
je 0x1004b6ca
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x120], 0
je 0x1004b6ca
mov dword [ebp - 0x580], 1
jmp 0x1004b6d1
and dword [ebp - 0x580], 0
mov eax, dword [ebp - 0x1bc]
mov dword [ebp - 0x6f0], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1bc]
sub ecx, dword [ebp + eax - 0x120]
mov dword [ebp - 0x418], ecx
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x418]
mov dword [ebp + eax - 0x610], ecx
mov eax, dword [ebp - 0xd4]
cmp dword [ebp - 0x418], eax
jg 0x1004b723
mov dword [ebp - 0x300], 1
jmp 0x1004b72a
and dword [ebp - 0x300], 0
cmp dword [ebp - 0x300], 0xe402095d
jb 0x1004b742
mov dword [ebp - 0x4a8], 1
jmp 0x1004b749
and dword [ebp - 0x4a8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x120]
cmp dword [ebp - 0x4a8], eax
jle 0x1004b76a
mov dword [ebp - 0x308], 1
jmp 0x1004b771
and dword [ebp - 0x308], 0
cmp dword [ebp - 0x308], 0x78c0
jne 0x1004b789
mov dword [ebp - 0x310], 1
jmp 0x1004b790
and dword [ebp - 0x310], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x120]
mov dword [ebp - 0x420], eax
mov eax, dword [ebp - 0x420]
cmp eax, dword [ebp - 0x310]
jl 0x1004b7bd
mov dword [ebp - 0x4f0], 1
jmp 0x1004b7c4
and dword [ebp - 0x4f0], 0
mov eax, dword [ebp - 0x1bc]
cmp dword [ebp - 0x4f0], eax
jne 0x1004b7de
mov dword [ebp - 0x318], 1
jmp 0x1004b7e5
and dword [ebp - 0x318], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x120]
cmp dword [ebp - 0x318], eax
jg 0x1004b806
mov dword [ebp - 0x428], 1
jmp 0x1004b80d
and dword [ebp - 0x428], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x120]
cmp dword [ebp - 0x428], eax
jge 0x1004b82e
mov dword [ebp - 0x204], 1
jmp 0x1004b835
and dword [ebp - 0x204], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x204]
mov dword [ebp + eax - 0x830], ecx
mov eax, dword [ebp - 0xd4]
cmp dword [ebp - 0x204], eax
jl 0x1004b862
mov dword [ebp - 0x320], 1
jmp 0x1004b869
and dword [ebp - 0x320], 0
mov eax, dword [ebp - 0x320]
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x7d0], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x120], 0x6f4e
jle 0x1004b8a0
mov dword [ebp - 0x4b0], 1
jmp 0x1004b8a7
and dword [ebp - 0x4b0], 0
mov eax, dword [ebp - 0x4b0]
add eax, 0x50e1
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x120]
jle 0x1004b933
mov byte [ebp - 0x87], 0
movzx eax, byte [ebp - 0x87]
test eax, eax
je 0x1004b8e1
push 0
push 0x7457
call fcn.1004e0ad
pop ecx
pop ecx
mov dword [ebp - 0x6c], 1
jmp 0x1004b8f1
mov eax, dword [ebp - 0x6c]
dec eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
jl 0x1004b931
mov dword [ebp - 0x94], 2
jmp 0x1004b910
mov eax, dword [ebp - 0x94]
dec eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0
jl 0x1004b92f
mov eax, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x6c]
mov eax, dword [ebp + eax*4 - 0x610]
mov dword [ebp + ecx*4 - 0x610], eax
jmp 0x1004b903
jmp 0x1004b8ea
jmp 0x1004b947
mov byte [ebp - 0x7d], 0
movzx eax, byte [ebp - 0x7d]
test eax, eax
je 0x1004b947
push 0
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
mov eax, dword [ebp - 0x28]
movzx eax, byte [ebp + eax - 0x1a4]
inc eax
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0x1cc], 0xfffffffd
mov dword [ebp - 0x438], 0xffffffff
mov dword [ebp - 0x6f8], 8
mov dword [ebp - 0x598], 0x801fc3ee
mov dword [ebp - 0x788], 0xbef7d651
mov dword [ebp - 0x700], 0xffffffff
mov dword [ebp - 0x640], 0xffffffff
mov dword [ebp - 0x808], 1
mov dword [ebp - 0x804], 1
mov dword [ebp - 0x800], 1
mov dword [ebp - 0x7fc], 1
mov dword [ebp - 0x1c4], 0xf39c
mov dword [ebp - 0x1e4], 0xda8d
mov dword [ebp - 0x7f8], 0xffffffff
mov dword [ebp - 0x608], 5
mov dword [ebp - 0x590], 0xfffffffd
mov dword [ebp - 0x708], 1
mov dword [ebp - 0x430], 0xa93f0451
mov dword [ebp - 0x628], 0xb9d37639
mov dword [ebp - 0x20], 0
jmp 0x1004ba27
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jge 0x1004ba3d
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x680], 0xffffffff
jmp 0x1004ba20
mov dword [ebp - 0x20], 0
jmp 0x1004ba4d
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 4
jge 0x1004ba63
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x860], 5
jmp 0x1004ba46
mov dword [ebp - 0x20], 0
jmp 0x1004ba73
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x1004ba89
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x7a4], 0xfffffffe
jmp 0x1004ba6c
push 0
push 0x563b
lea eax, [ebp - 0x640]
push eax
call fcn.10049f5e
add esp, 0xc
mov eax, dword [ebp - 0x1c4]
dec eax
mov dword [ebp - 0x1c4], eax
mov eax, dword [ebp - 0x1e4]
mov dword [ebp - 0x328], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x328]
mov dword [ebp + eax - 0x860], ecx
mov eax, dword [ebp - 0x1c4]
mov dword [ebp - 0x588], eax
mov eax, dword [ebp - 0x328]
mov dword [ebp - 0x600], eax
mov eax, dword [ebp - 0x1e4]
dec eax
mov dword [ebp - 0x1e4], eax
mov eax, dword [ebp - 0x588]
cmp eax, dword [ebp - 0x600]
jle 0x1004bb0a
mov dword [ebp - 0x4b8], 1
jmp 0x1004bb11
and dword [ebp - 0x4b8], 0
mov eax, dword [ebp - 0x430]
inc eax
mov dword [ebp - 0x430], eax
mov eax, dword [ebp - 0x590]
mov dword [ebp - 0x790], eax
cmp dword [ebp - 0x628], 0
je 0x1004bb48
cmp dword [ebp - 0x598], 0
je 0x1004bb48
mov dword [ebp - 0x330], 1
jmp 0x1004bb4f
and dword [ebp - 0x330], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x330]
sub ecx, dword [ebp + eax - 0x680]
cmp dword [ebp - 0x1cc], 0xc114
jge 0x1004bb7a
mov dword [ebp - 0x514], 1
jmp 0x1004bb81
and dword [ebp - 0x514], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x7a4]
cmp dword [ebp - 0x514], eax
je 0x1004bba1
mov dword [ebp - 0x338], 1
jmp 0x1004bba8
and dword [ebp - 0x338], 0
mov eax, dword [ebp - 0x338]
mov dword [ebp - 0x438], eax
cmp dword [ebp - 0x438], 0x61e33ecd
jg 0x1004bbcc
mov dword [ebp - 0x340], 1
jmp 0x1004bbd3
and dword [ebp - 0x340], 0
mov eax, dword [ebp - 0x1cc]
push 4
pop ecx
shl ecx, 0
imul eax, dword [ebp + ecx - 0x680]
mov ecx, dword [ebp - 0x1cc]
add ecx, dword [ebp - 0x340]
sub eax, ecx
cmp dword [ebp - 0x4b8], eax
jg 0x1004bc09
mov dword [ebp - 0x348], 1
jmp 0x1004bc10
and dword [ebp - 0x348], 0
mov eax, dword [ebp - 0x608]
cmp dword [ebp - 0x348], eax
jg 0x1004bc2a
mov dword [ebp - 0x440], 1
jmp 0x1004bc31
and dword [ebp - 0x440], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x440]
mov dword [ebp + eax - 0x7a4], ecx
mov eax, dword [ebp - 0x28]
movzx eax, byte [ebp + eax - 0x1a4]
mov ecx, dword [ebp - 0x28]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x4f8], 0
mov dword [ebp - 0x450], 0xfffffffa
mov dword [ebp - 0x624], 0x1649bc00
mov dword [ebp - 0x50], 0
jmp 0x1004bc86
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 3
jge 0x1004bc9c
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x524], 0xfffffffb
jmp 0x1004bc7f
mov dword [ebp - 0x50], 0
jmp 0x1004bcac
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 4
jge 0x1004bcc2
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x870], 0xbbf9acf2
jmp 0x1004bca5
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x524], 0
je 0x1004bcdf
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x524], 0
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x524], 0xfffffff6
jge 0x1004bcfa
mov dword [ebp - 0x350], 1
jmp 0x1004bd01
and dword [ebp - 0x350], 0
mov eax, dword [ebp - 0x350]
mov dword [ebp - 0x4f8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x524]
cmp eax, dword [ebp - 0x4f8]
jge 0x1004bd2e
mov dword [ebp - 0x358], 1
jmp 0x1004bd35
and dword [ebp - 0x358], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x524]
cmp dword [ebp - 0x358], eax
jle 0x1004bd56
mov dword [ebp - 0x448], 1
jmp 0x1004bd5d
and dword [ebp - 0x448], 0
cmp dword [ebp - 0x448], 2
jne 0x1004bd72
mov dword [ebp - 0x360], 1
jmp 0x1004bd79
and dword [ebp - 0x360], 0
cmp dword [ebp - 0x360], 0xfffd
jae 0x1004bd91
mov dword [ebp - 0x4c0], 1
jmp 0x1004bd98
and dword [ebp - 0x4c0], 0
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x870], 1
xor eax, eax
inc eax
sub eax, dword [ebp - 0x4c0]
cmp eax, 0xa6ff
jge 0x1004bdc5
mov dword [ebp - 0x368], 1
jmp 0x1004bdcc
and dword [ebp - 0x368], 0
mov eax, dword [ebp - 0x368]
mov dword [ebp - 0x450], eax
mov eax, dword [ebp - 0x450]
push 4
pop ecx
imul ecx, ecx, 0
add eax, dword [ebp + ecx - 0x524]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x524]
jg 0x1004be06
mov dword [ebp - 0x370], 1
jmp 0x1004be0d
and dword [ebp - 0x370], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x524]
cmp eax, dword [ebp - 0x370]
jg 0x1004be2e
mov dword [ebp - 0x528], 1
jmp 0x1004be35
and dword [ebp - 0x528], 0
cmp dword [ebp - 0x528], 0xcb45
jg 0x1004be4d
mov dword [ebp - 0x5a0], 1
jmp 0x1004be54
and dword [ebp - 0x5a0], 0
mov dword [ebp - 0x624], 0x9ec0021f
jmp 0x1004b4de
mov dword [ebp - 0x98], 0x928c176b
mov dword [ebp - 0x388], 0x7d50f82b
mov dword [ebp - 0x69c], 0x6f9b6917
mov dword [ebp - 0x698], 0x6f9b6917
mov dword [ebp - 0x694], 0x6f9b6917
mov dword [ebp - 0x690], 0x6f9b6917
mov dword [ebp - 0x98], 0
jmp 0x1004beb8
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0x15
jl 0x1004c041
mov dword [ebp - 0xf4], 0xfffffffa
mov dword [ebp - 0x5a8], 0
mov dword [ebp - 0x5b0], 1
cmp dword [ebp - 0xf4], 0
je 0x1004bf34
cmp dword [ebp - 0xf4], 0
jne 0x1004bf10
cmp dword [ebp - 0x388], 0
jne 0x1004bf10
mov eax, 0xf6e2
test eax, eax
jne 0x1004bf10
and dword [ebp - 0x378], 0
jmp 0x1004bf1a
mov dword [ebp - 0x378], 1
mov eax, dword [ebp - 0xf4]
cmp dword [ebp - 0x378], eax
jle 0x1004bf34
mov dword [ebp - 0x458], 1
jmp 0x1004bf3b
and dword [ebp - 0x458], 0
cmp dword [ebp - 0x458], 4
jb 0x1004bf50
mov dword [ebp - 0x380], 1
jmp 0x1004bf57
and dword [ebp - 0x380], 0
mov eax, dword [ebp - 0x5a8]
cmp dword [ebp - 0x380], eax
jle 0x1004bf71
mov dword [ebp - 0x4c8], 1
jmp 0x1004bf78
and dword [ebp - 0x4c8], 0
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x4c8]
sub ecx, dword [ebp - 0x388]
add eax, ecx
cmp eax, dword [ebp - 0x98]
jg 0x1004bfa0
mov dword [ebp - 0x1f8], 1
jmp 0x1004bfa7
and dword [ebp - 0x1f8], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1f8]
mov dword [ebp + eax - 0x69c], ecx
cmp dword [ebp - 0x1f8], 0
je 0x1004c00c
mov dword [ebp - 0x614], 0xd76270e7
lea eax, [ebp - 0x614]
push eax
push 0
lea eax, [ebp - 0x5b0]
push eax
push 0x75e9
call fcn.1004dad2
add esp, 0x10
mov byte [ebp - 0x70], 0
movzx eax, byte [ebp - 0x70]
test eax, eax
je 0x1004c00a
push 0
push 0x34e0
push 0x2fe0
call fcn.1004de37
add esp, 0xc
jmp 0x1004c03c
mov dword [ebp - 0x634], 1
cmp dword [ebp - 0xf4], 0
je 0x1004c021
jmp 0x1004c041
push 0
lea eax, [ebp - 0x634]
push eax
push 0x5e87
push 0x3010
call fcn.10049f9b
add esp, 0x10
jmp 0x1004beab
mov eax, dword [ebp - 0x28]
movzx eax, byte [ebp + eax - 0x1a3]
mov ecx, dword [ebp - 0x28]
sub ecx, dword [ebp - 0xdc]
movzx ecx, byte [ebp + ecx - 0x1a6]
movsx ecx, byte [ebp + ecx - 0x6d8]
or eax, ecx
mov ecx, dword [ebp - 0x28]
movzx ecx, byte [ebp + ecx - 0x1a3]
mov edx, dword [ebp - 0x28]
sub edx, dword [ebp - 0xdc]
movzx edx, byte [ebp + edx - 0x1a6]
movsx edx, byte [ebp + edx - 0x6d8]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x28]
movzx ecx, byte [ebp + ecx - 0x1a4]
mov byte [ebp + ecx - 0x6d8], al
push 1
lea eax, [ebp - 0xdc]
push eax
push 0x3816
call fcn.10049f5e
add esp, 0xc
jmp 0x1004b4de
mov dword [ebp - 0x58], 0
jmp 0x1004c0cc
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 4
jge 0x1004c0e2
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x540], 0x937d8e6e
jmp 0x1004c0c5
mov dword [ebp - 0x58], 0
jmp 0x1004c0f2
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 2
jge 0x1004c108
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x100], 0xbec0351
jmp 0x1004c0eb
push 4
pop eax
shl eax, 1
imul eax, dword [ebp + eax - 0x540], 0xffff
cmp eax, 0xffffffff
jae 0x1004c17e
push 4
pop eax
shl eax, 1
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x540]
cmp dword [ebp + eax - 0x540], ecx
jge 0x1004c143
mov dword [ebp - 0x5b8], 1
jmp 0x1004c14a
and dword [ebp - 0x5b8], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x540]
mov dword [ebp - 0x710], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x540]
mov dword [ebp - 0x7d8], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x540], 0
jne 0x1004c18e
push 0xfffffffffffffff6
pop eax
test eax, eax
jne 0x1004c18e
and dword [ebp - 0x1d4], 0
jmp 0x1004c198
mov dword [ebp - 0x1d4], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1d4]
mov dword [ebp + eax - 0x100], ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x540]
imul eax, dword [ebp - 0x1d4]
test eax, eax
je 0x1004c1df
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x100], 0
je 0x1004c1df
mov dword [ebp - 0x460], 1
jmp 0x1004c1e6
and dword [ebp - 0x460], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x540]
cmp eax, dword [ebp - 0x460]
jne 0x1004c208
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x100], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x100], 0
je 0x1004c231
mov byte [ebp - 0x6d], 0
movzx eax, byte [ebp - 0x6d]
test eax, eax
je 0x1004c22c
push 0
call fcn.10022922
pop ecx
jmp 0x1004c50e
mov dword [ebp - 0x40], 0xffffffff
mov dword [ebp - 0x44], 0xfff6
mov dword [ebp - 0x5c0], 0xfffffff8
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x718], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x100]
cmp dword [ebp + eax - 0x100], ecx
jle 0x1004c27a
mov dword [ebp - 0x390], 1
jmp 0x1004c281
and dword [ebp - 0x390], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x390], eax
jne 0x1004c298
mov dword [ebp - 0x500], 1
jmp 0x1004c29f
and dword [ebp - 0x500], 0
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x500], eax
jle 0x1004c2b6
mov dword [ebp - 0x398], 1
jmp 0x1004c2bd
and dword [ebp - 0x398], 0
mov eax, dword [ebp - 0x44]
add eax, dword [ebp - 0x398]
push 4
pop ecx
shl ecx, 0
add eax, dword [ebp + ecx - 0x540]
jne 0x1004c2e7
mov eax, 0xfe57b6a6
test eax, eax
jne 0x1004c2e7
and dword [ebp - 0x468], 0
jmp 0x1004c2f1
mov dword [ebp - 0x468], 1
cmp dword [ebp - 0x468], 3
jae 0x1004c306
mov dword [ebp - 0x620], 1
jmp 0x1004c30d
and dword [ebp - 0x620], 0
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x798], eax
cmp dword [ebp - 0x44], 0x8594
jl 0x1004c32b
mov dword [ebp - 0x3a0], 1
jmp 0x1004c332
and dword [ebp - 0x3a0], 0
mov eax, dword [ebp - 0x3a0]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
imul eax, dword [ebp - 0x44]
push 4
pop ecx
imul ecx, ecx, 0
cmp dword [ebp + ecx - 0x100], eax
jl 0x1004c35d
mov dword [ebp - 0x4d0], 1
jmp 0x1004c364
and dword [ebp - 0x4d0], 0
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x4d0], eax
jl 0x1004c37b
mov dword [ebp - 0x3a8], 1
jmp 0x1004c382
and dword [ebp - 0x3a8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3a8]
mov dword [ebp + eax - 0x100], ecx
mov dword [ebp - 0x40], 3
jmp 0x1004c3a5
mov eax, dword [ebp - 0x40]
dec eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jl 0x1004c50e
mov dword [ebp - 0x518], 2
mov dword [ebp - 0x108], 0
jmp 0x1004c3d2
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 1
jge 0x1004c3ee
mov eax, dword [ebp - 0x108]
mov dword [ebp + eax*4 - 0x1ac], 0x1beba424
jmp 0x1004c3c5
mov byte [ebp - 0x85], 0
movzx eax, byte [ebp - 0x85]
test eax, eax
je 0x1004c408
push 1
call fcn.10022922
pop ecx
mov dword [ebp - 0x44], 0
jmp 0x1004c418
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 3
jg 0x1004c509
mov dword [ebp - 0xe4], 0x5c66b319
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1ac], 0xffffffff
jbe 0x1004c448
mov dword [ebp - 0x3b0], 1
jmp 0x1004c44f
and dword [ebp - 0x3b0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1ac]
mov dword [ebp - 0x720], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1ac]
mov dword [ebp - 0x7f0], eax
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x728], eax
mov eax, dword [ebp - 0xe4]
push 4
pop ecx
imul ecx, ecx, 0
add eax, dword [ebp + ecx - 0x540]
cmp eax, dword [ebp - 0xe4]
jne 0x1004c4a8
mov dword [ebp - 0x470], 1
jmp 0x1004c4af
and dword [ebp - 0x470], 0
mov eax, dword [ebp - 0x470]
mov dword [ebp - 0x518], eax
mov eax, dword [ebp - 0x3b0]
sub eax, dword [ebp - 0x518]
cmp eax, 0xf8c5
je 0x1004c4da
mov dword [ebp - 0x3b8], 1
jmp 0x1004c4e1
and dword [ebp - 0x3b8], 0
mov eax, dword [ebp - 0xe4]
add eax, dword [ebp - 0x3b8]
mov dword [ebp - 0x5c0], eax
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x100], 0x1947684a
jmp 0x1004c411
jmp 0x1004c39e
xor eax, eax
inc eax
imul eax, eax, 0x1a
mov byte [ebp + eax - 0x6d8], 0
mov dword [ebp - 0x7a8], 0xfff8
push 0
call fcn.1004dce2
pop ecx
mov byte [ebp - 0x72], 0
movzx eax, byte [ebp - 0x72]
test eax, eax
je 0x1004c54e
push 0
push 0x758
push 0x5a44
call fcn.1004df0a
add esp, 0xc
lea eax, [ebp - 0x6d8]
push eax
lea ecx, [ebp - 0x848]
call fcn.1002d2e1
and dword [ebp - 4], 0
mov dword [ebp - 0x3c], 0xfffffffe
mov dword [ebp - 0x63c], 0xbefa1e1c
mov dword [ebp - 0x5c8], 0xfffffffd
mov dword [ebp - 0x644], 0xf1c946b4
mov dword [ebp - 0xbc], 0
jmp 0x1004c5a2
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 4
jge 0x1004c5be
mov eax, dword [ebp - 0xbc]
mov dword [ebp + eax*4 - 0x66c], 0x6c05baf4
jmp 0x1004c595
mov dword [ebp - 0x3c], 0
jmp 0x1004c5ce
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 3
jg 0x1004c700
mov eax, dword [ebp - 0x3c]
cmp dword [ebp + eax*4 - 0x66c], 0
jne 0x1004c5fe
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x66c], 0
jne 0x1004c5fe
and dword [ebp - 0x3c0], 0
jmp 0x1004c608
mov dword [ebp - 0x3c0], 1
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp + eax*4 - 0x66c]
mov dword [ebp - 0x730], eax
cmp dword [ebp - 0x3c], 0
jne 0x1004c62a
mov dword [ebp - 0x478], 1
jmp 0x1004c631
and dword [ebp - 0x478], 0
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x478], eax
jl 0x1004c655
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x66c], 0
jne 0x1004c655
and dword [ebp - 0x4d8], 0
jmp 0x1004c65f
mov dword [ebp - 0x4d8], 1
mov eax, dword [ebp - 0x3c0]
cmp eax, dword [ebp - 0x4d8]
jl 0x1004c679
mov dword [ebp - 0x3c8], 1
jmp 0x1004c680
and dword [ebp - 0x3c8], 0
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp + eax*4 - 0x66c]
cmp dword [ebp - 0x3c8], eax
jle 0x1004c69e
mov dword [ebp - 0x480], 1
jmp 0x1004c6a5
and dword [ebp - 0x480], 0
mov eax, dword [ebp - 0x480]
inc eax
cmp eax, dword [ebp - 0x3c]
jle 0x1004c6bd
mov dword [ebp - 0x3d0], 1
jmp 0x1004c6c4
and dword [ebp - 0x3d0], 0
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x3d0]
add ecx, 0x7fa3
cmp dword [ebp + eax*4 - 0x66c], ecx
jne 0x1004c6e8
mov dword [ebp - 0x508], 1
jmp 0x1004c6ef
and dword [ebp - 0x508], 0
mov eax, dword [ebp - 0x508]
mov dword [ebp - 0x63c], eax
jmp 0x1004c5c7
mov eax, dword [ebp - 0x5c8]
mov dword [ebp - 0x644], eax
and dword [ebp - 0xd0], 0
jmp 0x1004c722
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0x1b
jae 0x1004cc04
mov dword [ebp - 0x68], 0xfffffff6
mov dword [ebp - 0x1b0], 1
mov dword [ebp - 0x30c], 0xfa942f34
mov dword [ebp - 0x62c], 0x8227fd5d
mov dword [ebp - 0x7e0], 6
mov dword [ebp - 0x738], 0xffffffff
mov dword [ebp - 0x7b8], 2
mov dword [ebp - 0x740], 1
mov dword [ebp - 0x35c], 0xfffffff7
mov dword [ebp - 0xb8], 0
jmp 0x1004c79f
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 1
jge 0x1004c7b8
mov eax, dword [ebp - 0xb8]
mov dword [ebp + eax*4 - 0x38], 0xfffffff7
jmp 0x1004c792
mov dword [ebp - 0x68], 0
jmp 0x1004c7c8
mov eax, dword [ebp - 0x68]
dec eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
jl 0x1004cbe4
mov dword [ebp - 0xc8], 0xffffffff
mov dword [ebp - 0x3f0], 0xe86f
mov dword [ebp - 0x2d4], 0x1ee01e6e
mov dword [ebp - 0xc8], 0
jmp 0x1004c809
mov eax, dword [ebp - 0xc8]
dec eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0
jl 0x1004cbdf
mov dword [ebp - 0x2f4], 0xffffffff
mov dword [ebp - 0x1b8], 1
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp + eax*4 - 0x38]
mov dword [ebp - 0x7bc], eax
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp + eax*4 - 0x38]
mov dword [ebp - 0x74c], eax
cmp dword [ebp - 0x3f0], 0x2e755073
je 0x1004c85c
mov dword [ebp - 0x3d8], 1
jmp 0x1004c863
and dword [ebp - 0x3d8], 0
cmp dword [ebp - 0x3d8], 4
jae 0x1004c878
mov dword [ebp - 0x488], 1
jmp 0x1004c87f
and dword [ebp - 0x488], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x38]
cmp dword [ebp - 0x488], eax
jge 0x1004c89d
mov dword [ebp - 0x3e0], 1
jmp 0x1004c8a4
and dword [ebp - 0x3e0], 0
mov eax, dword [ebp - 0x3e0]
inc eax
je 0x1004c8c6
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x38], 0
je 0x1004c8c6
mov dword [ebp - 0x4e0], 1
jmp 0x1004c8cd
and dword [ebp - 0x4e0], 0
cmp dword [ebp - 0x4e0], 3
jae 0x1004c8e2
mov dword [ebp - 0x3e8], 1
jmp 0x1004c8e9
and dword [ebp - 0x3e8], 0
mov eax, dword [ebp - 0x2f4]
cmp dword [ebp - 0x3e8], eax
je 0x1004c903
mov dword [ebp - 0x490], 1
jmp 0x1004c90a
and dword [ebp - 0x490], 0
cmp dword [ebp - 0x490], 0x78c0
jne 0x1004c922
mov dword [ebp - 0x5d0], 1
jmp 0x1004c929
and dword [ebp - 0x5d0], 0
mov eax, dword [ebp - 0x3f0]
mov dword [ebp - 0x7c4], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x68]
mov ecx, dword [ebp + ecx*4 - 0x38]
cmp dword [ebp + eax - 0x38], ecx
jl 0x1004c954
mov dword [ebp - 0x52c], 1
jmp 0x1004c95b
and dword [ebp - 0x52c], 0
cmp dword [ebp - 0x52c], 6
jne 0x1004c970
mov dword [ebp - 0x20c], 1
jmp 0x1004c977
and dword [ebp - 0x20c], 0
mov eax, dword [ebp - 0x1b0]
cmp dword [ebp - 0x20c], eax
jle 0x1004c991
mov dword [ebp - 0x2bc], 1
jmp 0x1004c998
and dword [ebp - 0x2bc], 0
cmp dword [ebp - 0x2bc], 3
jg 0x1004c9ad
mov dword [ebp - 0x2c4], 1
jmp 0x1004c9b4
and dword [ebp - 0x2c4], 0
cmp dword [ebp - 0x2c4], 0xffffffff
jl 0x1004c9c9
mov dword [ebp - 0x2cc], 1
jmp 0x1004c9d0
and dword [ebp - 0x2cc], 0
mov eax, dword [ebp - 0x2cc]
mov dword [ebp - 0x2d4], eax
mov eax, dword [ebp - 0x2d4]
mov dword [ebp - 0x2dc], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2dc]
mov dword [ebp + eax - 0x38], ecx
cmp dword [ebp - 0x2dc], 0
je 0x1004ca16
mov eax, 0x209
test eax, eax
je 0x1004ca16
mov dword [ebp - 0x2e4], 1
jmp 0x1004ca1d
and dword [ebp - 0x2e4], 0
cmp dword [ebp - 0x2e4], 1
jne 0x1004ca32
mov dword [ebp - 0x2ec], 1
jmp 0x1004ca39
and dword [ebp - 0x2ec], 0
mov eax, dword [ebp - 0x1b0]
cmp dword [ebp - 0x2ec], eax
jne 0x1004ca59
cmp dword [ebp - 0x2f4], 0
jne 0x1004ca59
and dword [ebp - 0x2fc], 0
jmp 0x1004ca63
mov dword [ebp - 0x2fc], 1
mov eax, dword [ebp - 0x2fc]
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 0x1532d49a
je 0x1004ca87
mov dword [ebp - 0x304], 1
jmp 0x1004ca8e
and dword [ebp - 0x304], 0
mov eax, dword [ebp - 0x1b0]
cmp dword [ebp - 0x304], eax
jne 0x1004caa8
mov dword [ebp - 0x344], 1
jmp 0x1004caaf
and dword [ebp - 0x344], 0
mov dword [ebp - 0x30c], 0
cmp dword [ebp - 0x30c], 0
jne 0x1004cb3e
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x38], 1
jne 0x1004cadb
mov dword [ebp - 0x314], 1
jmp 0x1004cae2
and dword [ebp - 0x314], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x38]
cmp dword [ebp - 0x314], eax
jl 0x1004cb00
mov dword [ebp - 0x31c], 1
jmp 0x1004cb07
and dword [ebp - 0x31c], 0
cmp dword [ebp - 0x31c], 0xf2a5cf69
jne 0x1004cb1f
mov dword [ebp - 0x324], 1
jmp 0x1004cb26
and dword [ebp - 0x324], 0
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp + eax*4 - 0x38]
cmp dword [ebp - 0x324], eax
jg 0x1004cb3e
and dword [ebp - 0x32c], 0
jmp 0x1004cb48
mov dword [ebp - 0x32c], 1
mov eax, dword [ebp - 0x62c]
cmp dword [ebp - 0x32c], eax
jl 0x1004cb62
mov dword [ebp - 0x334], 1
jmp 0x1004cb69
and dword [ebp - 0x334], 0
cmp dword [ebp - 0x334], 0xc438
jne 0x1004cb81
mov dword [ebp - 0x33c], 1
jmp 0x1004cb88
and dword [ebp - 0x33c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x38]
cmp dword [ebp - 0x33c], eax
jne 0x1004cba6
mov dword [ebp - 0x34c], 1
jmp 0x1004cbad
and dword [ebp - 0x34c], 0
mov eax, dword [ebp - 0x344]
cmp eax, dword [ebp - 0x34c]
jle 0x1004cbc7
mov dword [ebp - 0x354], 1
jmp 0x1004cbce
and dword [ebp - 0x354], 0
mov eax, dword [ebp - 0x354]
mov dword [ebp - 0x1b8], eax
jmp 0x1004c7fc
jmp 0x1004c7c1
mov eax, dword [ebp - 0x35c]
inc eax
mov dword [ebp - 0x35c], eax
mov eax, dword [ebp - 0xd0]
mov byte [ebp + eax - 0x6d8], 0
jmp 0x1004c715
mov dword [ebp - 0xa8], 0x53b26bdd
mov dword [ebp - 0x5d8], 0xfffffffb
mov dword [ebp - 0x648], 0xffffffff
mov dword [ebp - 0x5e0], 0x883faa05
mov dword [ebp - 0xa8], 0
jmp 0x1004cc45
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 2
jg 0x1004ccbc
mov dword [ebp - 0x630], 0xcc5d9b4e
mov dword [ebp - 0x5e8], 0x12a2ef7e
mov byte [ebp - 0x74], 0
lea eax, [ebp - 0x74]
push eax
push 0x3b26
push 0
call fcn.1004db84
add esp, 0xc
lea eax, [ebp - 0x5d8]
push eax
push 0
push 0x1346
lea eax, [ebp - 0x630]
push eax
push 0x207e
lea eax, [ebp - 0xa8]
push eax
lea eax, [ebp - 0x5e0]
push eax
lea eax, [ebp - 0x648]
push eax
lea eax, [ebp - 0x5e8]
push eax
call fcn.1004dd1a
add esp, 0x24
jmp 0x1004cc38
push 0x1000cc6e
lea ecx, [ebp - 0x824]
call fcn.1002d2e1
mov byte [ebp - 4], 1
mov dword [ebp - 0x4c], 0x3ae35568
mov dword [ebp - 0x758], 0
mov dword [ebp - 0x364], 0x6cedda56
mov dword [ebp - 0xd8], 0
jmp 0x1004cd04
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 2
jge 0x1004cd20
mov eax, dword [ebp - 0xd8]
mov dword [ebp + eax*4 - 0x754], 6
jmp 0x1004ccf7
mov dword [ebp - 0x4c], 0xffffffea
jmp 0x1004cd30
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 7
jne 0x1004ce95
mov dword [ebp - 0x1c0], 0
mov dword [ebp - 0x38c], 8
mov dword [ebp - 0x394], 0x28d029b4
push 1
push 0x103a
lea eax, [ebp - 0x38c]
push eax
lea eax, [ebp - 0x1c0]
push eax
call fcn.10049f9b
add esp, 0x10
mov dword [ebp - 0x364], 1
mov eax, dword [ebp - 0x364]
mov dword [ebp - 0x768], eax
mov eax, dword [ebp - 0x1c0]
mov dword [ebp - 0x764], eax
cmp dword [ebp - 0x1c0], 0x385e13cd
jne 0x1004cdaf
mov dword [ebp - 0x36c], 1
jmp 0x1004cdb6
and dword [ebp - 0x36c], 0
cmp dword [ebp - 0x36c], 0xfffffff8
jbe 0x1004cdcb
mov dword [ebp - 0x374], 1
jmp 0x1004cdd2
and dword [ebp - 0x374], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x374], eax
jl 0x1004cde9
mov dword [ebp - 0x37c], 1
jmp 0x1004cdf0
and dword [ebp - 0x37c], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x37c], eax
je 0x1004ce07
mov dword [ebp - 0x384], 1
jmp 0x1004ce0e
and dword [ebp - 0x384], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x384], eax
jg 0x1004ce25
mov dword [ebp - 0x560], 1
jmp 0x1004ce2c
and dword [ebp - 0x560], 0
mov eax, dword [ebp - 0x38c]
mov dword [ebp - 0x394], eax
mov eax, dword [ebp - 0x394]
cmp dword [ebp - 0x4c], eax
jne 0x1004ce4f
mov dword [ebp - 0x39c], 1
jmp 0x1004ce56
and dword [ebp - 0x39c], 0
cmp dword [ebp - 0x39c], 0x1425
jge 0x1004ce6e
mov dword [ebp - 0x3a4], 1
jmp 0x1004ce75
and dword [ebp - 0x3a4], 0
mov eax, dword [ebp - 0x3a4]
sub eax, 0x132
sub eax, dword [ebp - 0x4c]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x754], eax
jmp 0x1004cd29
mov dword [ebp - 0x30], 1
mov dword [ebp - 0xa0], 0x9a2b441
mov dword [ebp - 0x3d4], 0xbb35b689
mov dword [ebp - 0xf0], 0xbf0bb9a6
mov dword [ebp - 0x6ac], 7
mov dword [ebp - 0x6a8], 7
mov dword [ebp - 0x6a4], 7
mov dword [ebp - 0x6a0], 7
mov dword [ebp - 0x5ac], 0xfffffff8
mov dword [ebp - 0x5a4], 6
mov dword [ebp - 0xe8], 0xda390e6
mov dword [ebp - 0x54], 0
jmp 0x1004cf10
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 2
jge 0x1004cf26
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x61c], 0xe468a07c
jmp 0x1004cf09
mov dword [ebp - 0x54], 0
jmp 0x1004cf36
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 2
jge 0x1004cf4c
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x760], 0x8470fb2e
jmp 0x1004cf2f
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x76c], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x774], eax
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x30], eax
jg 0x1004cf75
cmp dword [ebp - 0x30], 0
jne 0x1004cf75
and dword [ebp - 0x3ac], 0
jmp 0x1004cf7f
mov dword [ebp - 0x3ac], 1
mov eax, dword [ebp - 0x30]
add eax, dword [ebp - 0x3ac]
je 0x1004cf9c
cmp dword [ebp - 0x30], 0
je 0x1004cf9c
mov dword [ebp - 0x3b4], 1
jmp 0x1004cfa3
and dword [ebp - 0x3b4], 0
mov eax, dword [ebp - 0x3b4]
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 3
jle 0x1004cfc5
xor eax, eax
jne 0x1004cfc5
and dword [ebp - 0x3bc], 0
jmp 0x1004cfcf
mov dword [ebp - 0x3bc], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x61c]
imul eax, dword [ebp - 0x3bc]
cmp dword [ebp - 0x30], eax
jle 0x1004d353
mov dword [ebp - 0x404], 1
mov dword [ebp - 0x40c], 0x9d3388a0
mov dword [ebp - 0x56c], 0xfffffffd
mov dword [ebp - 0x594], 0xfffffff7
mov dword [ebp - 0x3e4], 0xfffffff9
mov dword [ebp - 0x770], 0xf2d4e203
mov dword [ebp - 0x64], 0
jmp 0x1004d038
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 3
jge 0x1004d04e
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x68c], 0x7dbc8b69
jmp 0x1004d031
mov dword [ebp - 0x64], 0
jmp 0x1004d05e
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 3
jge 0x1004d074
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x7b4], 0xb36282dc
jmp 0x1004d057
mov dword [ebp - 0xa0], 0
jmp 0x1004d08d
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0x10
jle 0x1004d1b0
mov dword [ebp - 0x1c8], 0xb7a7
mov dword [ebp - 0x1d0], 0xfffffffb
cmp dword [ebp - 0x404], 0
je 0x1004d0bc
jmp 0x1004d1b0
mov eax, dword [ebp - 0x1c8]
mov dword [ebp - 0x564], eax
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x564], 0x94bb489f
jne 0x1004d0ed
mov dword [ebp - 0x3cc], 1
jmp 0x1004d0f4
and dword [ebp - 0x3cc], 0
cmp dword [ebp - 0x56c], 1
je 0x1004d109
mov dword [ebp - 0x3c4], 1
jmp 0x1004d110
and dword [ebp - 0x3c4], 0
mov eax, dword [ebp - 0x1d0]
cmp eax, dword [ebp - 0x3c4]
jne 0x1004d12a
mov dword [ebp - 0x574], 1
jmp 0x1004d131
and dword [ebp - 0x574], 0
mov eax, dword [ebp - 0xf0]
add eax, dword [ebp - 0x30]
jne 0x1004d145
cmp dword [ebp - 0x1d0], 0
je 0x1004d157
cmp dword [ebp - 0x30], 0
je 0x1004d157
mov dword [ebp - 0x57c], 1
jmp 0x1004d15e
and dword [ebp - 0x57c], 0
mov eax, 0xffff
test eax, eax
je 0x1004d183
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x61c], 0
je 0x1004d183
mov dword [ebp - 0x584], 1
jmp 0x1004d18a
and dword [ebp - 0x584], 0
mov eax, dword [ebp - 0x3cc]
mov dword [ebp - 0x3d4], eax
mov eax, dword [ebp - 0x3d4]
mov dword [ebp - 0x7c8], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x1d0], eax
jmp 0x1004d080
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
mov eax, dword [ebp - 0xe8]
cmp dword [ebp - 0xf0], eax
je 0x1004d1d7
mov dword [ebp - 0x3ec], 1
jmp 0x1004d1de
and dword [ebp - 0x3ec], 0
cmp dword [ebp - 0x3e4], 0xd8aa
jl 0x1004d1f6
mov dword [ebp - 0x3dc], 1
jmp 0x1004d1fd
and dword [ebp - 0x3dc], 0
mov eax, dword [ebp - 0xf0]
cmp dword [ebp - 0x3dc], eax
jge 0x1004d217
mov dword [ebp - 0x58c], 1
jmp 0x1004d21e
and dword [ebp - 0x58c], 0
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x778], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7b4]
mov dword [ebp - 0x6e0], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x7b4]
add eax, dword [ebp - 0x594]
cmp dword [ebp - 0x3e4], eax
jg 0x1004d261
mov dword [ebp - 0x59c], 1
jmp 0x1004d268
and dword [ebp - 0x59c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x68c]
mov dword [ebp - 0x6e4], eax
cmp dword [ebp - 0x3ec], 0x18d27381
jge 0x1004d292
mov dword [ebp - 0x3f4], 1
jmp 0x1004d299
and dword [ebp - 0x3f4], 0
cmp dword [ebp - 0x3f4], 0x9109b52f
jbe 0x1004d2b1
mov dword [ebp - 0x3fc], 1
jmp 0x1004d2b8
and dword [ebp - 0x3fc], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x68c]
cmp dword [ebp - 0x3fc], eax
je 0x1004d2d8
mov dword [ebp - 0x1d8], 1
jmp 0x1004d2df
and dword [ebp - 0x1d8], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1d8]
mov dword [ebp + eax - 0x68c], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x61c]
cmp dword [ebp - 0x1d8], eax
jge 0x1004d323
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x760], 0
je 0x1004d323
mov dword [ebp - 0x414], 1
jmp 0x1004d32a
and dword [ebp - 0x414], 0
mov eax, dword [ebp - 0x404]
mov dword [ebp - 0x40c], eax
mov eax, dword [ebp - 0x40c]
sub eax, dword [ebp - 0x414]
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x6ac], eax
jmp 0x1004d493
mov dword [ebp - 0x42c], 8
mov dword [ebp - 0xe0], 0
jmp 0x1004d376
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 2
jge 0x1004d392
mov eax, dword [ebp - 0xe0]
mov dword [ebp + eax*4 - 0x548], 2
jmp 0x1004d369
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x6ec], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x548]
push 4
pop ecx
shl ecx, 0
imul eax, dword [ebp + ecx - 0x548]
push 4
pop ecx
shl ecx, 0
imul eax, dword [ebp + ecx - 0x548]
cmp eax, 2
jl 0x1004d3d8
mov dword [ebp - 0x41c], 1
jmp 0x1004d3df
and dword [ebp - 0x41c], 0
mov eax, dword [ebp - 0x5a4]
cmp eax, dword [ebp - 0x41c]
jne 0x1004d3f9
mov dword [ebp - 0x424], 1
jmp 0x1004d400
and dword [ebp - 0x424], 0
mov eax, dword [ebp - 0x424]
mov dword [ebp - 0x42c], eax
cmp dword [ebp - 0x42c], 0
je 0x1004d42f
or eax, 0xffffffff
je 0x1004d42f
mov eax, 0xfff6
test eax, eax
je 0x1004d42f
mov dword [ebp - 0x434], 1
jmp 0x1004d436
and dword [ebp - 0x434], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x548]
cmp eax, dword [ebp - 0x434]
je 0x1004d457
mov dword [ebp - 0x43c], 1
jmp 0x1004d45e
and dword [ebp - 0x43c], 0
mov eax, dword [ebp - 0xf0]
cmp eax, dword [ebp - 0x43c]
jl 0x1004d478
mov dword [ebp - 0x444], 1
jmp 0x1004d47f
and dword [ebp - 0x444], 0
mov eax, dword [ebp - 0x444]
mov dword [ebp - 0x5ac], eax
push 0
call fcn.10049ffb
pop ecx
lea ecx, [ebp - 0x824]
call fcn.1001e150
cmp eax, dword [ebp + 0xc]
je 0x1004d576
call fcn.10076ae7
mov esi, eax
lea ecx, [ebp - 0x848]
call fcn.1001e150
mov ecx, eax
mov eax, esi
xor edx, edx
div ecx
mov dword [ebp - 0x5bc], edx
mov dword [ebp - 0xf8], 1
mov dword [ebp - 0xf8], 3
jmp 0x1004d4ea
mov eax, dword [ebp - 0xf8]
dec eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0xffffffe9
jl 0x1004d552
mov dword [ebp - 0x104], 0xa876e6ba
mov dword [ebp - 0x5b4], 0
mov dword [ebp - 0x104], 0
jmp 0x1004d520
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 7
je 0x1004d545
mov byte [ebp - 0x89], 0
movzx eax, byte [ebp - 0x89]
test eax, eax
je 0x1004d543
push 1
call fcn.10049ffb
pop ecx
jmp 0x1004d513
cmp dword [ebp - 0x5b4], 0
je 0x1004d550
jmp 0x1004d552
jmp 0x1004d4dd
push 1
lea eax, [ebp - 0x5bc]
push eax
lea eax, [ebp - 0x824]
push eax
lea eax, [ebp - 0x848]
push eax
call fcn.1004a048
add esp, 0x10
jmp 0x1004d493
mov dword [ebp - 0x7c], 1
mov dword [ebp - 0x60], 0
jmp 0x1004d58d
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 2
jge 0x1004d5a3
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x200], 6
jmp 0x1004d586
mov dword [ebp - 0x60], 0
jmp 0x1004d5b3
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 1
jge 0x1004d5c9
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0xb4], 0xeaa32b1c
jmp 0x1004d5ac
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xb4], 1
jmp 0x1004d5f7
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb4]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xb4], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xb4], 0
jl 0x1004da02
mov dword [ebp - 0x2c], 0xfffffff9
mov dword [ebp - 0x84], 0xcf7d1649
mov dword [ebp - 0xb0], 0xffff
mov dword [ebp - 0x2c], 0
jmp 0x1004d636
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jg 0x1004d9f5
mov dword [ebp - 0x5dc], 0xa1b4bc71
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x200]
mov dword [ebp - 0x6f4], eax
cmp dword [ebp - 0x2c], 0
ja 0x1004d66c
mov dword [ebp - 0x210], 1
jmp 0x1004d673
and dword [ebp - 0x210], 0
cmp dword [ebp - 0x210], 0xf209
jl 0x1004d68b
mov dword [ebp - 0x214], 1
jmp 0x1004d692
and dword [ebp - 0x214], 0
cmp dword [ebp - 0x214], 0xfffffff8
jne 0x1004d6a7
mov dword [ebp - 0x21c], 1
jmp 0x1004d6ae
and dword [ebp - 0x21c], 0
mov eax, dword [ebp - 0x21c]
neg eax
cmp eax, 0x70ca
jne 0x1004d6c9
mov dword [ebp - 0x224], 1
jmp 0x1004d6d0
and dword [ebp - 0x224], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x224], eax
jne 0x1004d6e7
mov dword [ebp - 0x22c], 1
jmp 0x1004d6ee
and dword [ebp - 0x22c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x200]
cmp dword [ebp - 0x22c], eax
jle 0x1004d70f
mov dword [ebp - 0x234], 1
jmp 0x1004d716
and dword [ebp - 0x234], 0
mov eax, dword [ebp - 0x7c]
cmp eax, dword [ebp - 0x234]
jle 0x1004d72d
mov dword [ebp - 0x23c], 1
jmp 0x1004d734
and dword [ebp - 0x23c], 0
cmp dword [ebp - 0x23c], 7
jne 0x1004d749
mov dword [ebp - 0x244], 1
jmp 0x1004d750
and dword [ebp - 0x244], 0
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x200]
imul eax, dword [ebp - 0x244]
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0
jne 0x1004d786
mov eax, dword [ebp - 0x2c]
cmp dword [ebp + eax*4 - 0x200], 0
jne 0x1004d786
and dword [ebp - 0x24c], 0
jmp 0x1004d790
mov dword [ebp - 0x24c], 1
mov eax, dword [ebp - 0xb0]
cmp dword [ebp - 0x24c], eax
jne 0x1004d7aa
mov dword [ebp - 0x254], 1
jmp 0x1004d7b1
and dword [ebp - 0x254], 0
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x200]
mov ecx, dword [ebp - 0x254]
add ecx, 0xfffe
add eax, ecx
jne 0x1004d9be
mov dword [ebp - 0x5c4], 0xfffffff8
mov dword [ebp - 0x5cc], 0x6ac1dea9
mov dword [ebp - 0xb0], 0
jmp 0x1004d7fc
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 1
jg 0x1004d9bc
mov dword [ebp - 0x274], 0xd0863e87
mov dword [ebp - 0x7c], 0
jmp 0x1004d823
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 1
jg 0x1004d9a6
mov dword [ebp - 0x28c], 0x8a251abe
mov dword [ebp - 0x84], 0
jmp 0x1004d850
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 1
jg 0x1004d887
mov byte [ebp - 0x76], 0
movzx eax, byte [ebp - 0x76]
test eax, eax
je 0x1004d86b
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
mov byte [ebp - 0x88], 0
movzx eax, byte [ebp - 0x88]
test eax, eax
je 0x1004d885
push 0
call fcn.1004e33e
pop ecx
jmp 0x1004d843
cmp dword [ebp - 0x2c], 0
je 0x1004d8a2
cmp dword [ebp - 0x274], 0
je 0x1004d8a2
mov dword [ebp - 0x25c], 1
jmp 0x1004d8a9
and dword [ebp - 0x25c], 0
cmp dword [ebp - 0x25c], 4
jbe 0x1004d8be
mov dword [ebp - 0x264], 1
jmp 0x1004d8c5
and dword [ebp - 0x264], 0
mov eax, dword [ebp - 0x7c]
mov eax, dword [ebp + eax*4 - 0x200]
cmp eax, dword [ebp - 0x264]
je 0x1004d8e3
mov dword [ebp - 0x26c], 1
jmp 0x1004d8ea
and dword [ebp - 0x26c], 0
cmp dword [ebp - 0x26c], 1
jl 0x1004d8ff
mov dword [ebp - 0x27c], 1
jmp 0x1004d906
and dword [ebp - 0x27c], 0
mov eax, dword [ebp - 0x274]
add eax, dword [ebp - 0x27c]
cmp eax, 0xd538
jle 0x1004d925
mov dword [ebp - 0x284], 1
jmp 0x1004d92c
and dword [ebp - 0x284], 0
mov eax, dword [ebp - 0x284]
mov dword [ebp - 0x28c], eax
mov eax, dword [ebp - 0x28c]
mov dword [ebp - 0x6fc], eax
mov eax, dword [ebp - 0x7c]
mov eax, dword [ebp + eax*4 - 0x200]
mov dword [ebp - 0x704], eax
cmp dword [ebp - 0x84], 0
je 0x1004d972
cmp dword [ebp - 0x5c4], 0
je 0x1004d972
mov dword [ebp - 0x294], 1
jmp 0x1004d979
and dword [ebp - 0x294], 0
cmp dword [ebp - 0x294], 0xfffffffc
jbe 0x1004d98e
mov dword [ebp - 0x29c], 1
jmp 0x1004d995
and dword [ebp - 0x29c], 0
mov eax, dword [ebp - 0x29c]
mov dword [ebp - 0x5cc], eax
jmp 0x1004d81c
mov byte [ebp - 0x78], 0
lea eax, [ebp - 0x78]
push eax
push 1
call fcn.1004a0ef
pop ecx
pop ecx
jmp 0x1004d7ef
jmp 0x1004d9f0
mov dword [ebp - 0x5d4], 5
cmp dword [ebp - 0x5d4], 3
je 0x1004d9dd
mov dword [ebp - 0x2a4], 1
jmp 0x1004d9e4
and dword [ebp - 0x2a4], 0
mov eax, dword [ebp - 0x2a4]
mov dword [ebp - 0x5dc], eax
jmp 0x1004d62f
cmp dword [ebp - 0x2c], 0
je 0x1004d9fd
jmp 0x1004da02
jmp 0x1004d5dc
lea eax, [ebp - 0x824]
push eax
mov ecx, dword [ebp + 8]
call fcn.1001dc4e
mov eax, dword [ebp - 0x2ac]
or eax, 1
mov dword [ebp - 0x2ac], eax
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x824]
call fcn.1001dca7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x848]
call fcn.1001dca7
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret