Function at 0x1004d2b0
Capabilities:
Contain obfuscated stackstrings
Enumerate pe sections
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1008a38c
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xd2c
push esi
and dword [ebp - 0x18], 0
movzx eax, byte [ebp + 0x10]
test eax, eax
je 0x10052e72
mov eax, dword [ebp + 8]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0xe4], 0x546158d3
mov dword [ebp - 0x888], 0x2fafd11d
mov dword [ebp - 0x84c], 6
mov dword [ebp - 0x224], 0
jmp 0x1004d31c
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 3
jge 0x1004d338
mov eax, dword [ebp - 0x224]
mov dword [ebp + eax*4 - 0xbe8], 0x11914cc5
jmp 0x1004d30f
lea eax, [ebp - 0x888]
push eax
lea eax, [ebp - 0x84c]
push eax
push 1
push 0x7b6c
push 0xa09
lea eax, [ebp - 0xe4]
push eax
call fcn.1004bafe
add esp, 0x18
mov dword [ebp - 0xe4], 0
jmp 0x1004d37a
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 3
jge 0x1004d396
mov eax, dword [ebp - 0xe4]
mov dword [ebp + eax*4 - 0xbe8], 0x40ee1d45
jmp 0x1004d36d
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x44c], eax
mov eax, dword [ebp - 0x44c]
movzx eax, word [eax]
cmp eax, 0x5a4d
je 0x1004d3b4
jmp 0x10052e93
mov eax, dword [ebp - 0x44c]
mov ecx, dword [ebp - 0x28]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0x98], ecx
mov dword [ebp - 0x11c], 0x6ce125d
mov dword [ebp - 0xaf8], 1
mov dword [ebp - 0xb1c], 0xa137b189
mov dword [ebp - 0xaf4], 1
mov dword [ebp - 0xb24], 0x3629aa81
push 1
lea ecx, [ebp - 0xa08]
call fcn.100185e1
and dword [ebp - 4], 0
mov dword [ebp - 0x6c4], 0x9d0
mov dword [ebp - 0x19c], 0
jmp 0x1004d42c
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 1
jge 0x1004d44e
push dword [ebp - 0x19c]
lea ecx, [ebp - 0xa08]
call fcn.1001866d
mov dword [eax], 0xe4b28306
jmp 0x1004d41f
mov eax, dword [ebp - 0x6c4]
inc eax
mov dword [ebp - 0x6c4], eax
mov dword [ebp - 0x11c], 0
jmp 0x1004d474
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 1
jge 0x1004d49c
push 1
lea eax, [ebp - 0xa08]
push eax
lea eax, [ebp - 0x11c]
push eax
push 0x3203
call fcn.1004bc60
add esp, 0x10
jmp 0x1004d467
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa08]
call fcn.10018668
mov eax, dword [ebp - 0x98]
cmp dword [eax], 0x4550
je 0x1004d4be
jmp 0x10052e93
mov dword [ebp - 0xd4], 0xbf506e60
mov dword [ebp - 0x704], 0xffffffff
mov dword [ebp - 0x2b0], 0
mov dword [ebp - 0x878], 1
mov dword [ebp - 0xafc], 0x938d
mov dword [ebp - 0x1e8], 0
jmp 0x1004d509
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 2
jge 0x1004d525
mov eax, dword [ebp - 0x1e8]
mov dword [ebp + eax*4 - 0x35c], 5
jmp 0x1004d4fc
cmp dword [ebp - 0xd4], 0
jl 0x1004d53a
mov dword [ebp - 0x854], 1
jmp 0x1004d541
and dword [ebp - 0x854], 0
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0xb2c], eax
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0xb20], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x35c], 0xdc99
jg 0x1004d578
mov dword [ebp - 0x6cc], 1
jmp 0x1004d57f
and dword [ebp - 0x6cc], 0
cmp dword [ebp - 0x6cc], 0
jb 0x1004d594
mov dword [ebp - 0x6d4], 1
jmp 0x1004d59b
and dword [ebp - 0x6d4], 0
mov eax, dword [ebp - 0x6d4]
sub eax, 0x33fd529b
cmp eax, dword [ebp - 0xd4]
jle 0x1004d5ba
mov dword [ebp - 0x70c], 1
jmp 0x1004d5c1
and dword [ebp - 0x70c], 0
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0x704], eax
mov eax, dword [ebp - 0x704]
cmp eax, dword [ebp - 0x70c]
jg 0x1004d5e7
mov dword [ebp - 0x85c], 1
jmp 0x1004d5ee
and dword [ebp - 0x85c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x35c]
mov dword [ebp - 0xbb0], eax
or eax, 0xffffffff
sub eax, dword [ebp - 0xd4]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x35c]
jle 0x1004d625
mov dword [ebp - 0x714], 1
jmp 0x1004d62c
and dword [ebp - 0x714], 0
mov eax, dword [ebp - 0x714]
sub eax, 0xffff
mov dword [ebp - 0x2b0], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x35c]
cmp dword [ebp - 0x2b0], eax
jg 0x1004d65e
mov dword [ebp - 0x864], 1
jmp 0x1004d665
and dword [ebp - 0x864], 0
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0xb28], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x35c]
mov dword [ebp - 0xb94], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x35c]
cmp dword [ebp - 0x2b0], eax
jl 0x1004d6a5
mov dword [ebp - 0x6f8], 1
jmp 0x1004d6ac
and dword [ebp - 0x6f8], 0
cmp dword [ebp - 0x6f8], 4
jle 0x1004d6c1
mov dword [ebp - 0x6e0], 1
jmp 0x1004d6c8
and dword [ebp - 0x6e0], 0
mov eax, dword [ebp - 0x6e0]
mov dword [ebp - 0x878], eax
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x98]
lea eax, [ecx + eax + 0x78]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
cmp dword [eax + 4], 0
jne 0x1004d6f5
jmp 0x10052e93
and dword [ebp - 0x24], 0
mov dword [ebp - 0x9ac], 0x8f0aa6e6
mov dword [ebp - 0x9a8], 0x8f0aa6e6
mov dword [ebp - 0x9a4], 0x8f0aa6e6
mov dword [ebp - 0x9a0], 0x8f0aa6e6
lea ecx, [ebp - 0x329]
call fcn.10008d33
push eax
lea eax, [ebp - 0x99c]
push eax
lea eax, [ebp - 0x9ac]
push eax
lea ecx, [ebp - 0xc14]
call fcn.1001867c
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x354]
call fcn.10018642
mov dword [ebp - 4], 1
mov dword [ebp - 0x94], 0xf0a9b27f
mov dword [ebp - 0x348], 0xfffd
mov dword [ebp - 0x324], 6
mov dword [ebp - 0x898], 0x546153b7
mov dword [ebp - 0xb30], 0xf0fc5a51
mov dword [ebp - 0xbc0], 0
mov dword [ebp - 0xa70], 0xbaba27fa
mov dword [ebp - 0xa78], 0xe9becc42
mov dword [ebp - 0x8a8], 0xfffb
push 3
lea ecx, [ebp - 0x354]
call fcn.1001866d
cmp dword [eax], 0
jne 0x1004d7ed
push 3
lea ecx, [ebp - 0x354]
call fcn.1001866d
cmp dword [eax], 0
je 0x1004d7e4
mov eax, 0x844a
test eax, eax
jne 0x1004d7ed
and dword [ebp - 0x368], 0
jmp 0x1004d7f7
mov dword [ebp - 0x368], 1
push 3
lea ecx, [ebp - 0x354]
call fcn.1001866d
mov ecx, dword [ebp - 0x368]
add ecx, dword [eax]
je 0x1004d8c5
push 3
lea ecx, [ebp - 0x354]
call fcn.1001866d
cmp dword [eax], 1
jae 0x1004d830
mov dword [ebp - 0x6bc], 1
jmp 0x1004d837
and dword [ebp - 0x6bc], 0
mov eax, dword [ebp - 0x6bc]
mov dword [ebp - 0x94], eax
mov esi, dword [ebp - 0x94]
push 3
lea ecx, [ebp - 0x354]
call fcn.1001866d
imul esi, dword [eax]
test esi, esi
je 0x1004d864
cmp dword [ebp - 0x348], 0
cmp dword [ebp - 0x94], 0xa9bc
jg 0x1004d87c
mov dword [ebp - 0x558], 1
jmp 0x1004d883
and dword [ebp - 0x558], 0
cmp dword [ebp - 0x558], 0xb5cf1c94
ja 0x1004d89b
mov dword [ebp - 0x370], 1
jmp 0x1004d8a2
and dword [ebp - 0x370], 0
push 0
lea ecx, [ebp - 0x354]
call fcn.1001866d
mov ecx, dword [ebp - 0x370]
cmp ecx, dword [eax]
jg 0x1004d8c5
mov dword [ebp - 0x650], 1
jmp 0x1004d8cc
and dword [ebp - 0x650], 0
mov esi, dword [ebp - 0x650]
sub esi, dword [ebp - 0x348]
sub esi, 0x1ba6b42b
push 3
lea ecx, [ebp - 0x354]
call fcn.1001866d
cmp esi, dword [eax]
jge 0x1004d8fb
mov dword [ebp - 0x378], 1
jmp 0x1004d902
and dword [ebp - 0x378], 0
push 3
lea ecx, [ebp - 0x354]
call fcn.1001866d
mov ecx, dword [ebp - 0x378]
cmp ecx, dword [eax]
jge 0x1004d983
mov dword [ebp - 0x790], 0x620a3418
mov dword [ebp - 0x880], 0xb10079d6
push 1
push 0x6e20
lea eax, [ebp - 0x94]
push eax
push 0x79c4
call fcn.1004bcb6
add esp, 0x10
lea eax, [ebp - 0x354]
push eax
lea eax, [ebp - 0x94]
push eax
push 0
lea eax, [ebp - 0x880]
push eax
lea eax, [ebp - 0x790]
push eax
lea eax, [ebp - 0x324]
push eax
lea eax, [ebp - 0x348]
push eax
push 0x2794
call fcn.1004bdd7
add esp, 0x20
jmp 0x1004d9d3
mov dword [ebp - 0x890], 0xfffffffb
mov dword [ebp - 0x8a0], 0xa798be49
mov eax, dword [ebp - 0x890]
mov dword [ebp - 0x94], eax
push 0x37d2
lea eax, [ebp - 0x94]
push eax
push 0x20b9
lea eax, [ebp - 0x898]
push eax
push 1
lea eax, [ebp - 0x324]
push eax
lea eax, [ebp - 0x8a0]
push eax
call fcn.1004bd2a
add esp, 0x1c
push 0
lea eax, [ebp - 0x324]
push eax
lea eax, [ebp - 0x8a8]
push eax
push 0x2ddc
push 0x7252
call fcn.1004c646
add esp, 0x14
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x354]
call fcn.10018668
mov eax, dword [ebp - 0x98]
movzx eax, word [eax + 0x14]
mov ecx, dword [ebp - 0x98]
lea eax, [ecx + eax + 0x18]
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0x48], 0xca4f833f
push 2
lea ecx, [ebp - 0x780]
call fcn.100185e1
mov dword [ebp - 4], 2
mov dword [ebp - 0x8c0], 0xffffffff
mov dword [ebp - 0x60], 0
jmp 0x1004da53
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 1
jge 0x1004da69
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x2bc], 0
jmp 0x1004da4c
mov dword [ebp - 0x60], 0
jmp 0x1004da79
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 2
jge 0x1004da95
push dword [ebp - 0x60]
lea ecx, [ebp - 0x780]
call fcn.1001866d
mov dword [eax], 0x36d0
jmp 0x1004da72
mov dword [ebp - 0x48], 0
jmp 0x1004daa5
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
jg 0x1004db47
mov dword [ebp - 0x1a4], 0x1fe77dd6
mov dword [ebp - 0x120], 0xe164caf
mov dword [ebp - 0x1a4], 0
jmp 0x1004dadc
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 0
jg 0x1004db42
mov dword [ebp - 0x8b0], 0x1dfd9475
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x120], 0
jmp 0x1004db11
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0
jg 0x1004db40
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x8b0]
mov dword [ebp + eax*4 - 0x2bc], ecx
push 0xa13
push 0x1d0b
push 0
call fcn.1004c100
add esp, 0xc
jmp 0x1004db04
jmp 0x1004dacf
jmp 0x1004da9e
mov dword [ebp - 0x48], 0
jmp 0x1004db57
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 8
jl 0x1004de75
mov dword [ebp - 0xc8], 4
mov dword [ebp - 0xc8], 0
jmp 0x1004db84
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 8
jg 0x1004de70
mov dword [ebp - 0x944], 0xffffffff
mov dword [ebp - 0x960], 0x5e175309
mov dword [ebp - 0x1ec], 0
jmp 0x1004dbbe
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 1
jge 0x1004dbda
mov eax, dword [ebp - 0x1ec]
mov dword [ebp + eax*4 - 0x84], 1
jmp 0x1004dbb1
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x84], 0
jmp 0x1004dc08
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x84]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x84], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x84], 4
jl 0x1004de35
mov dword [ebp - 0x304], 0
mov dword [ebp - 0x95c], 0x360e5697
mov esi, dword [ebp - 0x304]
push 1
lea ecx, [ebp - 0x780]
call fcn.1001866d
add esi, dword [eax]
push 4
pop eax
imul eax, eax, 0
cmp esi, dword [ebp + eax - 0x2bc]
jge 0x1004dc63
cmp dword [ebp - 0x48], 0
jne 0x1004dc63
and dword [ebp - 0x560], 0
jmp 0x1004dc6d
mov dword [ebp - 0x560], 1
mov eax, dword [ebp - 0xc8]
mov ecx, dword [ebp - 0xc8]
imul ecx, dword [ebp - 0x560]
sub eax, ecx
cmp eax, dword [ebp - 0x304]
je 0x1004dc96
mov dword [ebp - 0x8b8], 1
jmp 0x1004dc9d
and dword [ebp - 0x8b8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x84]
mov dword [ebp - 0xa80], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2bc], 0x19909d07
jle 0x1004dccf
mov dword [ebp - 0x380], 1
jmp 0x1004dcd6
and dword [ebp - 0x380], 0
mov eax, dword [ebp - 0x380]
mov dword [ebp - 0x8c0], eax
push 0
lea ecx, [ebp - 0x780]
call fcn.1001866d
mov eax, dword [eax]
inc eax
jne 0x1004dd0d
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x84], 0
jne 0x1004dd0d
and dword [ebp - 0x708], 0
jmp 0x1004dd17
mov dword [ebp - 0x708], 1
mov eax, dword [ebp - 0x944]
cmp dword [ebp - 0x708], eax
je 0x1004dd31
mov dword [ebp - 0x388], 1
jmp 0x1004dd38
and dword [ebp - 0x388], 0
push 0
lea ecx, [ebp - 0x780]
call fcn.1001866d
mov eax, dword [eax]
cmp eax, dword [ebp - 0x388]
je 0x1004dd5b
mov dword [ebp - 0x568], 1
jmp 0x1004dd62
and dword [ebp - 0x568], 0
mov eax, dword [ebp - 0xc8]
cmp dword [ebp - 0x568], eax
jg 0x1004dd7c
mov dword [ebp - 0x390], 1
jmp 0x1004dd83
and dword [ebp - 0x390], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x84]
add eax, dword [ebp - 0x390]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x84]
je 0x1004ddb1
mov dword [ebp - 0x658], 1
jmp 0x1004ddb8
and dword [ebp - 0x658], 0
push 1
lea ecx, [ebp - 0x780]
call fcn.1001866d
mov ecx, dword [ebp - 0x658]
cmp ecx, dword [eax]
jl 0x1004dddb
mov dword [ebp - 0x398], 1
jmp 0x1004dde2
and dword [ebp - 0x398], 0
mov eax, dword [ebp - 0x304]
cmp dword [ebp - 0x398], eax
jne 0x1004ddfc
mov dword [ebp - 0x570], 1
jmp 0x1004de03
and dword [ebp - 0x570], 0
mov eax, dword [ebp - 0x960]
cmp dword [ebp - 0x570], eax
jl 0x1004de1d
mov dword [ebp - 0x3a0], 1
jmp 0x1004de24
and dword [ebp - 0x3a0], 0
mov eax, dword [ebp - 0x3a0]
mov dword [ebp - 0x95c], eax
jmp 0x1004dbed
mov byte [ebp - 0xc3], 0
push 0x3701
push 0x33f8
push 1
push 0x3f67
push 0x15ae
push 0x3841
push 0x75ba
lea eax, [ebp - 0xc3]
push eax
call fcn.1004bdd7
add esp, 0x20
jmp 0x1004db77
jmp 0x1004db50
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x780]
call fcn.10018668
and dword [ebp - 0x2c4], 0
jmp 0x1004dea9
mov eax, dword [ebp - 0x2c4]
inc eax
mov dword [ebp - 0x2c4], eax
mov eax, dword [ebp - 0xa8]
add eax, 0x28
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 0x98]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x2c4], eax
jge 0x1004df25
mov eax, dword [ebp - 0xa8]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x6d0], eax
mov eax, dword [ebp - 0x38]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x6d0]
jb 0x1004df20
mov eax, dword [ebp - 0x98]
push dword [eax + 0x38]
mov eax, dword [ebp - 0xa8]
push dword [eax + 8]
call fcn.1004ba24
pop ecx
pop ecx
add eax, dword [ebp - 0x6d0]
mov dword [ebp - 0x798], eax
mov eax, dword [ebp - 0x38]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x798]
jae 0x1004df20
mov eax, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0xa8]
mov eax, dword [eax + 0x14]
sub eax, dword [ecx + 0xc]
mov dword [ebp - 0x24], eax
jmp 0x1004df25
jmp 0x1004de8d
mov dword [ebp - 0x1ac], 1
push 1
lea ecx, [ebp - 0xa68]
call fcn.100185e1
mov dword [ebp - 4], 3
mov dword [ebp - 0xa88], 0x32b7b88c
push 3
lea ecx, [ebp - 0xa50]
call fcn.100185e1
mov byte [ebp - 4], 4
push 0x209a
lea eax, [ebp - 0xa68]
push eax
push 0x7c81
push 0
lea eax, [ebp - 0x140]
push eax
push 0x3968
push 0x46c1
call fcn.1004bf7f
add esp, 0x1c
mov dword [ebp - 0x140], 0
jmp 0x1004dfa3
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 3
jge 0x1004dfc5
push dword [ebp - 0x140]
lea ecx, [ebp - 0xa50]
call fcn.1001866d
mov dword [eax], 0x9cec
jmp 0x1004df96
mov dword [ebp - 0x1ac], 0
jmp 0x1004dfde
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 9
je 0x1004e0f0
mov dword [ebp - 0x844], 0xffffffff
push 3
lea ecx, [ebp - 0x980]
call fcn.100185e1
mov byte [ebp - 4], 5
mov dword [ebp - 0x894], 0xcc5d9b4e
mov dword [ebp - 0xa90], 0xffffffff
mov dword [ebp - 0xa98], 0xfffffff7
mov dword [ebp - 0xaa0], 0xfcf33f23
mov dword [ebp - 0xaa8], 0x5486b6fe
mov dword [ebp - 0xab0], 0xb5ea
mov dword [ebp - 0x78], 0
jmp 0x1004e052
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 3
jge 0x1004e06e
push dword [ebp - 0x78]
lea ecx, [ebp - 0x980]
call fcn.1001866d
mov dword [eax], 0x4cc
jmp 0x1004e04b
mov dword [ebp - 0x78], 0
jmp 0x1004e07e
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 3
jge 0x1004e094
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0xd14], 0x348f4a8
jmp 0x1004e077
lea eax, [ebp - 0x980]
push eax
push 0x36ea
lea eax, [ebp - 0xa50]
push eax
push 1
push 0x4880
lea eax, [ebp - 0x844]
push eax
lea eax, [ebp - 0xa68]
push eax
call fcn.1004bf7f
add esp, 0x1c
push 1
lea eax, [ebp - 0x894]
push eax
lea eax, [ebp - 0x980]
push eax
call fcn.1004c08a
add esp, 0xc
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x980]
call fcn.10018668
jmp 0x1004dfd1
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xa50]
call fcn.10018668
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa68]
call fcn.10018668
cmp dword [ebp - 0x24], 0
jne 0x1004e119
jmp 0x10052e93
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x24]
add ecx, dword [eax]
add ecx, dword [ebp - 0x28]
mov dword [ebp - 0x14], ecx
xor ecx, ecx
call fcn.10032f5a
push eax
call fcn.10071ac8
pop ecx
and dword [ebp - 0x9c0], 0
and dword [ebp - 0x9bc], 0
and dword [ebp - 0x9b8], 0
and dword [ebp - 0x9b4], 0
lea ecx, [ebp - 0x341]
call fcn.10008d33
push eax
lea eax, [ebp - 0x9b0]
push eax
lea eax, [ebp - 0x9c0]
push eax
lea ecx, [ebp - 0xc84]
call fcn.1001867c
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xb14]
call fcn.10018642
mov dword [ebp - 4], 6
push 1
lea ecx, [ebp - 0x8d0]
call fcn.100185e1
mov byte [ebp - 4], 7
mov dword [ebp - 0x20c], 0
jmp 0x1004e1b7
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 1
jge 0x1004e1d6
push dword [ebp - 0x20c]
lea ecx, [ebp - 0x8d0]
call fcn.1001866d
or dword [eax], 0xffffffff
jmp 0x1004e1aa
push 0
lea ecx, [ebp - 0x8d0]
call fcn.1001866d
mov dword [eax], 3
jmp 0x1004e20f
push 0
lea ecx, [ebp - 0x8d0]
call fcn.1001866d
mov dword [ebp - 0x3a8], eax
mov eax, dword [ebp - 0x3a8]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x3a8]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x8d0]
call fcn.1001866d
cmp dword [eax], 0
jl 0x1004e28e
mov dword [ebp - 0x128], 1
mov dword [ebp - 0x128], 0
jmp 0x1004e244
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 3
jg 0x1004e289
push dword [ebp - 0x128]
lea ecx, [ebp - 0xb14]
call fcn.1001866d
cmp dword [eax], 0
je 0x1004e265
jmp 0x1004e289
mov byte [ebp - 0xc2], 0
push 0
push 0x4769
push 0x241d
lea eax, [ebp - 0xc2]
push eax
call fcn.1004cb67
add esp, 0x10
jmp 0x1004e237
jmp 0x1004e1eb
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x8d0]
call fcn.10018668
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb14]
call fcn.10018668
mov dword [ebp - 0x100], 6
mov dword [ebp - 0x668], 3
mov dword [ebp - 0x130], 0xd4c46983
mov dword [ebp - 0x7a0], 1
mov dword [ebp - 0x590], 0xffffffff
mov dword [ebp - 0x928], 0x2c91076
mov dword [ebp - 0x7a8], 0xc7dffc5a
mov dword [ebp - 0x1b4], 0
jmp 0x1004e30b
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 3
jge 0x1004e327
mov eax, dword [ebp - 0x1b4]
mov dword [ebp + eax*4 - 0x18c], 0xa8eac8b1
jmp 0x1004e2fe
mov dword [ebp - 0x100], 0
jmp 0x1004e340
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 2
jg 0x1004e396
mov dword [ebp - 0x150], 0x68876942
cmp dword [ebp - 0x150], 0
je 0x1004e35e
jmp 0x1004e396
mov dword [ebp - 0x150], 0
jmp 0x1004e377
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 2
jg 0x1004e394
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x18c], 0
je 0x1004e392
jmp 0x1004e394
jmp 0x1004e36a
jmp 0x1004e333
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x18c]
mov dword [ebp - 0xab8], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x18c]
mov dword [ebp - 0xac0], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x18c], 0
je 0x1004e3e6
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x18c], 0
je 0x1004e3e6
mov dword [ebp - 0x578], 1
jmp 0x1004e3ed
and dword [ebp - 0x578], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x18c]
cmp dword [ebp - 0x578], eax
je 0x1004e40d
mov dword [ebp - 0x3b0], 1
jmp 0x1004e414
and dword [ebp - 0x3b0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x18c]
mov ecx, dword [ebp - 0x3b0]
lea eax, [ecx + eax + 0xc22]
test eax, eax
je 0x1004e44d
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x18c], 0
je 0x1004e44d
mov dword [ebp - 0x660], 1
jmp 0x1004e454
and dword [ebp - 0x660], 0
mov eax, dword [ebp - 0x660]
mov dword [ebp - 0x668], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18c]
cmp dword [ebp - 0x130], eax
jle 0x1004e48e
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x18c], 0
jne 0x1004e48e
and dword [ebp - 0x3b8], 0
jmp 0x1004e498
mov dword [ebp - 0x3b8], 1
mov eax, dword [ebp - 0x130]
cmp dword [ebp - 0x3b8], eax
jg 0x1004e4b2
mov dword [ebp - 0x580], 1
jmp 0x1004e4b9
and dword [ebp - 0x580], 0
mov dword [ebp - 0x100], 0x1b49
mov eax, dword [ebp - 0x100]
cmp eax, dword [ebp - 0x580]
jg 0x1004e4e2
xor eax, eax
inc eax
je 0x1004e4e2
mov dword [ebp - 0x3c0], 1
jmp 0x1004e4e9
and dword [ebp - 0x3c0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18c]
cmp dword [ebp - 0x3c0], eax
jg 0x1004e50a
mov dword [ebp - 0x6dc], 1
jmp 0x1004e511
and dword [ebp - 0x6dc], 0
mov eax, dword [ebp - 0x130]
cmp dword [ebp - 0x6dc], eax
jne 0x1004e52b
mov dword [ebp - 0x3c8], 1
jmp 0x1004e532
and dword [ebp - 0x3c8], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x3c8]
sub ecx, dword [ebp + eax - 0x18c]
cmp ecx, 5
jle 0x1004e556
mov dword [ebp - 0x588], 1
jmp 0x1004e55d
and dword [ebp - 0x588], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x18c]
cmp dword [ebp - 0x588], eax
je 0x1004e57e
mov dword [ebp - 0x3d0], 1
jmp 0x1004e585
and dword [ebp - 0x3d0], 0
mov eax, dword [ebp - 0x3d0]
mov dword [ebp - 0x7a0], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x18c]
cmp dword [ebp - 0x668], eax
je 0x1004e5b1
mov dword [ebp - 0x3d8], 1
jmp 0x1004e5b8
and dword [ebp - 0x3d8], 0
mov eax, dword [ebp - 0x3d8]
mov dword [ebp - 0x590], eax
mov eax, dword [ebp - 0x590]
sub eax, dword [ebp - 0x130]
je 0x1004e5d9
push 0xfffffffffffffffc
pop eax
test eax, eax
jne 0x1004e5f1
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x18c], 0
jne 0x1004e5f1
and dword [ebp - 0x3e0], 0
jmp 0x1004e5fb
mov dword [ebp - 0x3e0], 1
cmp dword [ebp - 0x3e0], 0
jne 0x1004e60b
cmp dword [ebp - 0x928], 0
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x7a8], eax
mov byte [ebp - 0x25c], 6
mov byte [ebp - 0x25b], 0xd2
mov byte [ebp - 0x25a], 3
mov byte [ebp - 0x259], 6
mov byte [ebp - 0x258], 7
mov byte [ebp - 0x257], 1
mov byte [ebp - 0x256], 8
mov byte [ebp - 0x255], 6
mov byte [ebp - 0x254], 4
mov byte [ebp - 0x253], 8
mov byte [ebp - 0x252], 9
mov byte [ebp - 0x251], 8
mov byte [ebp - 0x250], 2
mov byte [ebp - 0x24f], 7
mov byte [ebp - 0x24e], 0x1f
mov byte [ebp - 0x24d], 0x81
mov byte [ebp - 0x24c], 0x36
mov byte [ebp - 0x24b], 0x6d
mov byte [ebp - 0x24a], 0x87
mov byte [ebp - 0x249], 0xe6
mov byte [ebp - 0x248], 0x3e
mov byte [ebp - 0x247], 0xb4
mov byte [ebp - 0x246], 0x8c
mov byte [ebp - 0x245], 0x70
mov byte [ebp - 0x244], 0xe0
mov byte [ebp - 0x243], 0xe2
mov byte [ebp - 0x242], 0x38
mov byte [ebp - 0x241], 0x6a
mov byte [ebp - 0x240], 0xb3
mov byte [ebp - 0x23f], 0x17
mov byte [ebp - 0x23e], 0x4d
mov byte [ebp - 0x23d], 0xe0
mov byte [ebp - 0x23c], 0xbf
mov byte [ebp - 0x23b], 0xe0
mov byte [ebp - 0x23a], 0xe6
mov byte [ebp - 0x239], 0x72
mov byte [ebp - 0x238], 0x2d
mov byte [ebp - 0x237], 7
mov byte [ebp - 0x236], 0xac
mov byte [ebp - 0x235], 0x6e
mov byte [ebp - 0x234], 0xe7
mov byte [ebp - 0x233], 0xf0
mov byte [ebp - 0x232], 0x28
mov byte [ebp - 0x231], 0xbb
mov byte [ebp - 0x230], 0x87
mov byte [ebp - 0x22f], 0xbb
mov byte [ebp - 0x22e], 5
mov byte [ebp - 0x22d], 6
mov byte [ebp - 0x22c], 1
mov byte [ebp - 0x22b], 4
mov byte [ebp - 0x22a], 0
mov byte [ebp - 0x229], 4
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x25c]
or eax, 0xe3
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x25c]
and ecx, 0xe3
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x25c]
mov byte [ebp + ecx - 0x750], al
mov dword [ebp - 0x30], 2
and dword [ebp - 0x1f4], 0
jmp 0x1004e7d9
mov eax, dword [ebp - 0x30]
inc eax
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0x34
jae 0x1004e88f
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x25c]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x30], eax
jne 0x1004e823
mov eax, dword [ebp - 0x30]
movzx eax, byte [ebp + eax - 0x25c]
inc eax
mov dword [ebp - 0x1f4], eax
mov eax, dword [ebp - 0x30]
movzx eax, byte [ebp + eax - 0x25c]
mov ecx, dword [ebp - 0x30]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x30], eax
jmp 0x1004e7d1
mov eax, dword [ebp - 0x30]
movzx eax, byte [ebp + eax - 0x25b]
mov ecx, dword [ebp - 0x30]
sub ecx, dword [ebp - 0x1f4]
movzx ecx, byte [ebp + ecx - 0x25e]
movsx ecx, byte [ebp + ecx - 0x750]
or eax, ecx
mov ecx, dword [ebp - 0x30]
movzx ecx, byte [ebp + ecx - 0x25b]
mov edx, dword [ebp - 0x30]
sub edx, dword [ebp - 0x1f4]
movzx edx, byte [ebp + edx - 0x25e]
movsx edx, byte [ebp + edx - 0x750]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x30]
movzx ecx, byte [ebp + ecx - 0x25c]
mov byte [ebp + ecx - 0x750], al
and dword [ebp - 0x1f4], 0
jmp 0x1004e7d1
xor eax, eax
inc eax
imul eax, eax, 0xa
mov byte [ebp + eax - 0x750], 0
lea eax, [ebp - 0x750]
push eax
lea ecx, [ebp - 0xc9c]
call fcn.100279e3
mov dword [ebp - 0x89c], eax
mov eax, dword [ebp - 0x89c]
mov dword [ebp - 0x7b0], eax
mov dword [ebp - 4], 8
push 0xa
xor edx, edx
mov ecx, dword [ebp - 0x7b0]
call fcn.10032f1f
pop ecx
mov dword [ebp - 0x800], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc9c]
call fcn.10018543
mov dword [ebp - 0x50], 0xfffffff8
mov dword [ebp - 0x88], 1
push 0x3f0e
push 0
push 0x77a9
push 0x59e8
call fcn.1004c7fd
add esp, 0x10
mov dword [ebp - 0x50], 0
jmp 0x1004e927
mov eax, dword [ebp - 0x50]
dec eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0xfffffffe
jl 0x1004eb26
mov dword [ebp - 0x21c], 0
mov dword [ebp - 0x8f8], 6
mov dword [ebp - 0x3f0], 0xc9ca3191
mov dword [ebp - 0x400], 0xfffffffc
mov dword [ebp - 0x1bc], 0
jmp 0x1004e972
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 3
jge 0x1004e98e
mov eax, dword [ebp - 0x1bc]
mov dword [ebp + eax*4 - 0xd38], 0x3cc9f196
jmp 0x1004e965
mov eax, dword [ebp - 0x21c]
mov dword [ebp - 0xac8], eax
cmp dword [ebp - 0x50], 0
jne 0x1004e9f1
cmp dword [ebp - 0x8f8], 0xffffffff
jg 0x1004e9b5
mov dword [ebp - 0x6d8], 1
jmp 0x1004e9bc
and dword [ebp - 0x6d8], 0
mov eax, dword [ebp - 0x50]
cmp eax, dword [ebp - 0x6d8]
jle 0x1004e9d3
mov dword [ebp - 0x3e8], 1
jmp 0x1004e9da
and dword [ebp - 0x3e8], 0
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x3e8], eax
jne 0x1004e9f1
mov dword [ebp - 0x598], 1
jmp 0x1004e9f8
and dword [ebp - 0x598], 0
mov eax, dword [ebp - 0x598]
mov dword [ebp - 0x3f0], eax
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x3f0], eax
jge 0x1004ea1b
mov dword [ebp - 0x670], 1
jmp 0x1004ea22
and dword [ebp - 0x670], 0
mov eax, dword [ebp - 0x21c]
cmp eax, dword [ebp - 0x670]
jle 0x1004ea3c
mov dword [ebp - 0x3f8], 1
jmp 0x1004ea43
and dword [ebp - 0x3f8], 0
mov eax, dword [ebp - 0x3f8]
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x21c]
cmp dword [ebp - 0x88], eax
jne 0x1004ea6f
cmp dword [ebp - 0x88], 0
jne 0x1004ea6f
and dword [ebp - 0x7b8], 0
jmp 0x1004ea79
mov dword [ebp - 0x7b8], 1
mov eax, dword [ebp - 0x21c]
mov dword [ebp - 0xad0], eax
cmp dword [ebp - 0x50], 0
jne 0x1004ea9a
cmp dword [ebp - 0x50], 0
jne 0x1004ea9a
and dword [ebp - 0x5a0], 0
jmp 0x1004eaa4
mov dword [ebp - 0x5a0], 1
mov eax, dword [ebp - 0x5a0]
mov dword [ebp - 0x400], eax
cmp dword [ebp - 0x400], 0
je 0x1004eaff
mov dword [ebp - 0x88], 0
jmp 0x1004ead2
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 2
jg 0x1004eafd
mov byte [ebp - 0xa9], 0
movzx eax, byte [ebp - 0xa9]
test eax, eax
je 0x1004eafb
push 0
push 0x4f8a
call fcn.1004c717
pop ecx
pop ecx
jmp 0x1004eac5
jmp 0x1004eb21
mov dword [ebp - 0x8a4], 0
lea eax, [ebp - 0x8a4]
push eax
lea eax, [ebp - 0x88]
push eax
push 1
call fcn.1004c100
add esp, 0xc
jmp 0x1004e920
and dword [ebp - 0x1c4], 0
jmp 0x1004eb3c
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 0xb
jae 0x1004eb55
mov eax, dword [ebp - 0x1c4]
mov byte [ebp + eax - 0x750], 0
jmp 0x1004eb2f
push 0x310c
push 1
call fcn.1004c14e
pop ecx
pop ecx
mov byte [ebp - 0x2ac], 9
mov byte [ebp - 0x2ab], 0x68
mov byte [ebp - 0x2aa], 6
mov byte [ebp - 0x2a9], 9
mov byte [ebp - 0x2a8], 8
mov byte [ebp - 0x2a7], 9
mov byte [ebp - 0x2a6], 3
mov byte [ebp - 0x2a5], 2
mov byte [ebp - 0x2a4], 5
mov byte [ebp - 0x2a3], 3
mov byte [ebp - 0x2a2], 0
mov byte [ebp - 0x2a1], 0
mov byte [ebp - 0x2a0], 2
mov byte [ebp - 0x29f], 6
mov byte [ebp - 0x29e], 1
mov byte [ebp - 0x29d], 1
mov byte [ebp - 0x29c], 4
mov byte [ebp - 0x29b], 2
mov byte [ebp - 0x29a], 7
mov byte [ebp - 0x299], 2
mov byte [ebp - 0x298], 0x3a
mov byte [ebp - 0x297], 0x4b
mov byte [ebp - 0x296], 0xd6
mov byte [ebp - 0x295], 0x73
mov byte [ebp - 0x294], 0xe6
mov byte [ebp - 0x293], 0xd9
mov byte [ebp - 0x292], pe_nt_image_headers32
mov byte [ebp - 0x291], 0xcd
mov byte [ebp - 0x290], 0xb8
mov byte [ebp - 0x28f], 0xef
mov byte [ebp - 0x28e], 0x5c
mov byte [ebp - 0x28d], 0x46
mov byte [ebp - 0x28c], 0x89
mov byte [ebp - 0x28b], 0xce
mov byte [ebp - 0x28a], 0x53
mov byte [ebp - 0x289], 0xf3
mov byte [ebp - 0x288], 0xc3
mov byte [ebp - 0x287], 0x50
mov byte [ebp - 0x286], 0xc2
mov byte [ebp - 0x285], 0x4c
mov byte [ebp - 0x284], 0x5e
mov byte [ebp - 0x283], 0x5b
mov byte [ebp - 0x282], 0x47
mov byte [ebp - 0x281], 0xa1
mov byte [ebp - 0x280], 0x18
mov byte [ebp - 0x27f], 0x42
mov byte [ebp - 0x27e], 0x7f
mov byte [ebp - 0x27d], 0x36
mov byte [ebp - 0x27c], 0x23
mov byte [ebp - 0x27b], 0xd6
mov byte [ebp - 0x27a], 0x7f
mov byte [ebp - 0x279], 0x61
mov byte [ebp - 0x278], 0x71
mov byte [ebp - 0x277], 0xc
mov byte [ebp - 0x276], 0xcf
mov byte [ebp - 0x275], 0x2d
mov byte [ebp - 0x274], 0xba
mov byte [ebp - 0x273], 1
mov byte [ebp - 0x272], 0x92
mov byte [ebp - 0x271], 0xf5
mov byte [ebp - 0x270], 0xe7
mov byte [ebp - 0x26f], 0x35
mov byte [ebp - 0x26e], 0x34
mov byte [ebp - 0x26d], 0x5f
mov byte [ebp - 0x26c], 9
mov byte [ebp - 0x26b], 0xda
mov byte [ebp - 0x26a], 0x56
mov byte [ebp - 0x269], 0x36
mov byte [ebp - 0x268], 0x72
mov byte [ebp - 0x267], 0x70
mov byte [ebp - 0x266], 0xbe
mov byte [ebp - 0x265], 0x97
mov byte [ebp - 0x264], 0x29
mov byte [ebp - 0x263], 0x9e
mov byte [ebp - 0x262], 0x96
mov byte [ebp - 0x261], 0x67
mov byte [ebp - 0x260], 0xc5
mov byte [ebp - 0x25f], 0x12
mov byte [ebp - 0x25e], 0xae
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x2ac]
or eax, 0x58
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x2ac]
and ecx, 0x58
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x2ac]
mov byte [ebp + ecx - 0x75c], al
mov dword [ebp - 0x34], 2
and dword [ebp - 0x1fc], 0
jmp 0x1004eddd
mov eax, dword [ebp - 0x34]
inc eax
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0x4f
jae 0x1004eea2
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x2ac]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x34], eax
jne 0x1004ee27
mov eax, dword [ebp - 0x34]
movzx eax, byte [ebp + eax - 0x2ac]
inc eax
mov dword [ebp - 0x1fc], eax
mov eax, dword [ebp - 0x34]
movzx eax, byte [ebp + eax - 0x2ac]
mov ecx, dword [ebp - 0x34]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x34], eax
jmp 0x1004edd5
mov eax, dword [ebp - 0x34]
movzx eax, byte [ebp + eax - 0x2ab]
mov ecx, dword [ebp - 0x34]
sub ecx, dword [ebp - 0x1fc]
movzx ecx, byte [ebp + ecx - 0x2ae]
movsx ecx, byte [ebp + ecx - 0x75c]
or eax, ecx
mov ecx, dword [ebp - 0x34]
movzx ecx, byte [ebp + ecx - 0x2ab]
mov edx, dword [ebp - 0x34]
sub edx, dword [ebp - 0x1fc]
movzx edx, byte [ebp + edx - 0x2ae]
movsx edx, byte [ebp + edx - 0x75c]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x34]
movzx ecx, byte [ebp + ecx - 0x2ac]
mov byte [ebp + ecx - 0x75c], al
push 1
lea eax, [ebp - 0x1fc]
push eax
push 0x41b2
call fcn.1004c266
add esp, 0xc
jmp 0x1004edd5
xor eax, eax
inc eax
imul eax, eax, 0xa
mov byte [ebp + eax - 0x75c], 0
mov dword [ebp - 0x2c], 9
push 2
lea ecx, [ebp - 0x72c]
call fcn.100185e1
mov dword [ebp - 4], 9
mov dword [ebp - 0x80], 0xf02
mov dword [ebp - 0x7c8], 0x9170
lea eax, [ebp - 0xad8]
push eax
push 1
push 0x4ca6
lea eax, [ebp - 0x72c]
push eax
push 0x4952
push 0x724c
push 0x3f45
call fcn.1004c2a3
add esp, 0x1c
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0xae0], eax
mov eax, dword [ebp - 0x80]
dec eax
mov dword [ebp - 0x80], eax
imul eax, dword [ebp - 0x80], 0
neg eax
jne 0x1004efb9
push 1
lea ecx, [ebp - 0x72c]
call fcn.1001866d
cmp dword [eax], 0
je 0x1004ef42
mov dword [ebp - 0x328], 1
jmp 0x1004ef49
and dword [ebp - 0x328], 0
push 0
lea ecx, [ebp - 0x72c]
call fcn.1001866d
mov ecx, dword [ebp - 0x328]
mov dword [eax], ecx
cmp dword [ebp - 0x328], 0
jne 0x1004ef82
push 1
lea ecx, [ebp - 0x72c]
call fcn.1001866d
cmp dword [eax], 0
jne 0x1004ef82
and dword [ebp - 0x6e4], 0
jmp 0x1004ef8c
mov dword [ebp - 0x6e4], 1
mov eax, dword [ebp - 0x2c]
imul eax, dword [ebp - 0x6e4]
sub eax, dword [ebp - 0x80]
cmp eax, dword [ebp - 0x2c]
jge 0x1004efb9
push 1
lea ecx, [ebp - 0x72c]
call fcn.1001866d
cmp dword [eax], 0
jne 0x1004efb9
and dword [ebp - 0x408], 0
jmp 0x1004efc3
mov dword [ebp - 0x408], 1
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x408]
jle 0x1004efda
mov dword [ebp - 0x5a8], 1
jmp 0x1004efe1
and dword [ebp - 0x5a8], 0
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x5a8]
imul eax, dword [ebp - 0x2c]
test eax, eax
je 0x1004f0e5
mov dword [ebp - 0x2c], 0
jmp 0x1004f006
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 5
je 0x1004f07d
push 3
lea ecx, [ebp - 0xa38]
call fcn.100185e1
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x7c0], 0xffffffff
push 0x352f
push 1
push 0x1771
lea eax, [ebp - 0xae8]
push eax
lea eax, [ebp - 0xa38]
push eax
call fcn.1004c3be
add esp, 0x14
push 2
lea ecx, [ebp - 0xa38]
call fcn.1001866d
mov eax, dword [eax]
mov dword [ebp - 0x7c0], eax
push 0
push 0x27f5
call fcn.1004c487
pop ecx
pop ecx
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xa38]
call fcn.10018668
jmp 0x1004efff
mov dword [ebp - 0x2c], 0
jmp 0x1004f08d
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0xffffffe7
jle 0x1004f0e3
mov dword [ebp - 0x80], 0
jmp 0x1004f0a3
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0x38
jg 0x1004f0e1
mov dword [ebp - 0x8fc], 0xa925f321
push 0x1b2f
push 0
lea eax, [ebp - 0x8fc]
push eax
push 0x20af
lea eax, [ebp - 0x72c]
push eax
call fcn.1004cc49
add esp, 0x14
mov dword [ebp - 0x7c8], 0x3f36fc75
jmp 0x1004f09c
jmp 0x1004f086
jmp 0x1004f0ff
mov dword [ebp - 0x8ac], 5
lea eax, [ebp - 0x8ac]
push eax
push 1
call fcn.1004c448
pop ecx
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x72c]
call fcn.10018668
lea eax, [ebp - 0x75c]
push eax
lea ecx, [ebp - 0xd08]
call fcn.100279e3
mov dword [ebp - 0x7d0], eax
mov eax, dword [ebp - 0x7d0]
mov dword [ebp - 0x904], eax
mov dword [ebp - 4], 0xb
push 0xa
xor edx, edx
mov ecx, dword [ebp - 0x904]
call fcn.10032f1f
pop ecx
mov dword [ebp - 0x8c4], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd08]
call fcn.10018543
mov dword [ebp - 0xd0], 0xfffffff7
mov dword [ebp - 0x148], 0x5004286a
mov dword [ebp - 0x420], 0
mov dword [ebp - 0xd0], 0
jmp 0x1004f195
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0xb
je 0x1004f516
mov dword [ebp - 0xfc], 0xfffffffd
mov dword [ebp - 0x2cc], 0x83019c36
mov dword [ebp - 0x5b8], 0xbd5d5181
mov dword [ebp - 0x7f0], 0x8b697689
mov dword [ebp - 0x914], 0x1b57606a
mov dword [ebp - 0xfc], 0xfffffff6
jmp 0x1004f1ed
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 9
jge 0x1004f501
mov dword [ebp - 0xec], 0xe2c0d37a
mov dword [ebp - 0x90c], 0xfffffff6
mov dword [ebp - 0x7e8], 0xf5b872a
mov dword [ebp - 0xec], 0
jmp 0x1004f231
mov eax, dword [ebp - 0xec]
dec eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0xfffffffe
jg 0x1004f4fc
mov dword [ebp - 0x214], 0xffff
mov dword [ebp - 0x678], 0xfffffff9
mov dword [ebp - 0x8bc], 0
mov dword [ebp - 0x1cc], 0
jmp 0x1004f275
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 1
jge 0x1004f291
mov eax, dword [ebp - 0x1cc]
mov dword [ebp + eax*4 - 0x8b4], 1
jmp 0x1004f268
mov dword [ebp - 0x148], 1
mov eax, dword [ebp - 0xec]
cmp dword [ebp - 0x148], eax
jl 0x1004f2b5
mov dword [ebp - 0x410], 1
jmp 0x1004f2bc
and dword [ebp - 0x410], 0
mov eax, dword [ebp - 0x410]
mov dword [ebp - 0x678], eax
mov eax, dword [ebp - 0x214]
cmp dword [ebp - 0x678], eax
jl 0x1004f2e2
mov dword [ebp - 0x7d8], 1
jmp 0x1004f2e9
and dword [ebp - 0x7d8], 0
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0xaf0], eax
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0x418], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x418]
mov dword [ebp + eax - 0x8b4], ecx
mov eax, dword [ebp - 0x214]
cmp dword [ebp - 0x418], eax
jg 0x1004f32e
mov dword [ebp - 0x5b0], 1
jmp 0x1004f335
and dword [ebp - 0x5b0], 0
mov eax, dword [ebp - 0x5b0]
mov dword [ebp - 0x420], eax
mov eax, dword [ebp - 0xfc]
cmp dword [ebp - 0x420], eax
jge 0x1004f35b
mov dword [ebp - 0x6ec], 1
jmp 0x1004f362
and dword [ebp - 0x6ec], 0
cmp dword [ebp - 0x6ec], 0x843c
jne 0x1004f37a
mov dword [ebp - 0x7e0], 1
jmp 0x1004f381
and dword [ebp - 0x7e0], 0
mov eax, dword [ebp - 0x214]
mov dword [ebp - 0xa6c], eax
cmp dword [ebp - 0x90c], 0xd23205e6
jae 0x1004f3a5
mov dword [ebp - 0x428], 1
jmp 0x1004f3ac
and dword [ebp - 0x428], 0
mov eax, dword [ebp - 0x428]
mov dword [ebp - 0x2cc], eax
mov eax, dword [ebp - 0x2cc]
mov dword [ebp - 0x5b8], eax
cmp dword [ebp - 0x5b8], 0
jne 0x1004f3d9
mov dword [ebp - 0x430], 1
jmp 0x1004f3e0
and dword [ebp - 0x430], 0
mov eax, dword [ebp - 0xd0]
add eax, dword [ebp - 0x430]
cmp eax, dword [ebp - 0xd0]
jg 0x1004f400
mov dword [ebp - 0x680], 1
jmp 0x1004f407
and dword [ebp - 0x680], 0
mov eax, dword [ebp - 0x680]
mov dword [ebp - 0x7e8], eax
mov eax, dword [ebp - 0x214]
cmp dword [ebp - 0x148], eax
jne 0x1004f436
mov eax, 0x902820a3
test eax, eax
je 0x1004f436
mov dword [ebp - 0x438], 1
jmp 0x1004f43d
and dword [ebp - 0x438], 0
mov eax, dword [ebp - 0x8bc]
cmp dword [ebp - 0x438], eax
jne 0x1004f457
mov dword [ebp - 0x5c0], 1
jmp 0x1004f45e
and dword [ebp - 0x5c0], 0
mov eax, dword [ebp - 0xd0]
cmp eax, dword [ebp - 0x5c0]
jle 0x1004f478
mov dword [ebp - 0x440], 1
jmp 0x1004f47f
and dword [ebp - 0x440], 0
cmp dword [ebp - 0x440], 0
jge 0x1004f494
mov dword [ebp - 0x720], 1
jmp 0x1004f49b
and dword [ebp - 0x720], 0
mov eax, dword [ebp - 0xfc]
cmp dword [ebp - 0x720], eax
je 0x1004f4b5
mov dword [ebp - 0x448], 1
jmp 0x1004f4bc
and dword [ebp - 0x448], 0
mov eax, dword [ebp - 0x448]
mov dword [ebp - 0x7f0], eax
cmp dword [ebp - 0x148], 0xd8f6
je 0x1004f4e0
mov dword [ebp - 0x5c8], 1
jmp 0x1004f4e7
and dword [ebp - 0x5c8], 0
imul eax, dword [ebp - 0x5c8], 0xfe98
mov dword [ebp - 0x914], eax
jmp 0x1004f224
jmp 0x1004f1e0
push 1
lea eax, [ebp - 0x2cc]
push eax
call fcn.1004c487
pop ecx
pop ecx
jmp 0x1004f188
and dword [ebp - 0x1d4], 0
jmp 0x1004f52c
mov eax, dword [ebp - 0x1d4]
inc eax
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 0xb
jae 0x1004f545
mov eax, dword [ebp - 0x1d4]
mov byte [ebp + eax - 0x75c], 0
jmp 0x1004f51f
mov dword [ebp - 0x138], 0x6e3245f1
mov dword [ebp - 0x204], 0
jmp 0x1004f568
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 4
jge 0x1004f584
mov eax, dword [ebp - 0x204]
mov dword [ebp + eax*4 - 0xbdc], 0xdf1f
jmp 0x1004f55b
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xbdc]
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x138], 0
jmp 0x1004f5af
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0x10
jle 0x1004f637
mov dword [ebp - 0x70], 0xcdcb363f
mov dword [ebp - 0x70], 0
jmp 0x1004f5cf
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 3
jg 0x1004f60b
mov dword [ebp - 0x7f8], 0xfffa
push 1
push 0xd00
push 0x50e8
lea eax, [ebp - 0x7f8]
push eax
push 0x26f
push 0x5b31
push 0x1111
call fcn.1004c4c6
add esp, 0x1c
jmp 0x1004f5c8
mov dword [ebp - 0x70], 3
jmp 0x1004f61b
mov eax, dword [ebp - 0x70]
dec eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
jl 0x1004f632
mov eax, dword [ebp - 0x70]
cmp dword [ebp + eax*4 - 0xbdc], 0
je 0x1004f630
jmp 0x1004f632
jmp 0x1004f614
jmp 0x1004f5a2
push dword [ebp - 0x8c4]
push dword [ebp - 0x800]
call fcn.10048e72
pop ecx
pop ecx
mov dword [ebp - 0x4b0], eax
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x4b0]
mov dword [eax + 8], ecx
mov dword [ebp - 0x40], 0x97f6af11
mov dword [ebp - 0x6e8], 0xfffffffd
mov dword [ebp - 0x91c], 0x93dd61fb
mov dword [ebp - 0x810], 0xfffffffa
mov dword [ebp - 0xb00], 0xfd7f7fff
mov dword [ebp - 0x2dc], 1
push 3
lea ecx, [ebp - 0x8e0]
call fcn.100185e1
mov dword [ebp - 4], 0xc
push 2
lea ecx, [ebp - 0xa44]
call fcn.100185e1
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x118], 0
jmp 0x1004f6d6
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 3
jge 0x1004f6f5
push dword [ebp - 0x118]
lea ecx, [ebp - 0x8e0]
call fcn.1001866d
and dword [eax], 0
jmp 0x1004f6c9
push 0x662c
lea eax, [ebp - 0xa44]
push eax
push 0x4627
push 0x40a1
push 0x6cd
lea eax, [ebp - 0x118]
push eax
push 0
call fcn.1004c8f3
add esp, 0x1c
mov dword [ebp - 0x40], 0
jmp 0x1004f731
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0x1a
je 0x1004fb8b
mov dword [ebp - 0x1dc], 0x9fb37b04
mov dword [ebp - 0x698], 0xf068
mov dword [ebp - 0x30c], 0xc2e607d1
mov dword [ebp - 0x808], 0xfffffff7
mov dword [ebp - 0x4a8], 2
mov dword [ebp - 0x818], 0x8880d0e1
mov dword [ebp - 0x974], 0xa870c387
mov dword [ebp - 0x970], 0xa870c387
mov dword [ebp - 0x96c], 0xa870c387
mov dword [ebp - 0x968], 0xa870c387
mov dword [ebp - 0x8d4], 0xfffffffd
cmp dword [ebp - 0x1dc], 0
jne 0x1004f8df
or eax, 0xffffffff
je 0x1004f873
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0xb88], eax
cmp dword [ebp - 0x698], 0
jne 0x1004f7dd
mov dword [ebp - 0x450], 1
jmp 0x1004f7e4
and dword [ebp - 0x450], 0
mov eax, dword [ebp - 0x450]
inc eax
jne 0x1004f7ff
mov eax, 0x93876a47
test eax, eax
jne 0x1004f7ff
and dword [ebp - 0x688], 0
jmp 0x1004f809
mov dword [ebp - 0x688], 1
mov eax, dword [ebp - 0x688]
sub eax, dword [ebp - 0x30c]
cmp eax, 0xffff
jne 0x1004f82e
cmp dword [ebp - 0x40], 0
je 0x1004f82e
mov dword [ebp - 0x458], 1
jmp 0x1004f835
and dword [ebp - 0x458], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x458], eax
jg 0x1004f84c
mov dword [ebp - 0x5d0], 1
jmp 0x1004f853
and dword [ebp - 0x5d0], 0
imul eax, dword [ebp - 0x5d0], 0x4f98
imul eax, eax, 0x3ee6
test eax, eax
je 0x1004f873
mov dword [ebp - 0x460], 1
jmp 0x1004f87a
and dword [ebp - 0x460], 0
mov eax, dword [ebp - 0x460]
mov dword [ebp - 0x6e8], eax
cmp dword [ebp - 0x6e8], 0xfffffffd
jl 0x1004f89b
mov dword [ebp - 0x468], 1
jmp 0x1004f8a2
and dword [ebp - 0x468], 0
mov eax, dword [ebp - 0x1dc]
cmp dword [ebp - 0x468], eax
jne 0x1004f8bc
mov dword [ebp - 0x5d8], 1
jmp 0x1004f8c3
and dword [ebp - 0x5d8], 0
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x30c]
add ecx, dword [ebp - 0x5d8]
add eax, ecx
jne 0x1004f8df
and dword [ebp - 0x470], 0
jmp 0x1004f8e9
mov dword [ebp - 0x470], 1
mov eax, dword [ebp - 0x40]
add eax, dword [ebp - 0x470]
cmp eax, dword [ebp - 0x40]
jge 0x1004f903
mov dword [ebp - 0x690], 1
jmp 0x1004f90a
and dword [ebp - 0x690], 0
mov eax, dword [ebp - 0x690]
inc eax
mov dword [ebp - 0x91c], eax
push 0
lea ecx, [ebp - 0xa44]
call fcn.1001866d
mov dword [ebp - 0x2d4], eax
mov eax, dword [ebp - 0x2d4]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x2d4]
mov dword [ecx], eax
mov eax, dword [ebp - 0x30c]
mov ecx, dword [ebp - 0x2d4]
cmp eax, dword [ecx]
jge 0x1004fa0d
cmp dword [ebp - 0x2dc], 0xfdf1
jg 0x1004f967
mov dword [ebp - 0x478], 1
jmp 0x1004f96e
and dword [ebp - 0x478], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x974]
cmp dword [ebp - 0x478], eax
jne 0x1004f98f
mov dword [ebp - 0x5e0], 1
jmp 0x1004f996
and dword [ebp - 0x5e0], 0
mov eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0x5e0]
jg 0x1004f9ad
mov dword [ebp - 0x480], 1
jmp 0x1004f9b4
and dword [ebp - 0x480], 0
mov eax, dword [ebp - 0x808]
cmp dword [ebp - 0x480], eax
jle 0x1004f9ce
mov dword [ebp - 0x710], 1
jmp 0x1004f9d5
and dword [ebp - 0x710], 0
mov eax, dword [ebp - 0x1dc]
add eax, dword [ebp - 0x710]
cmp eax, 0x13d7
jle 0x1004f9f4
mov dword [ebp - 0x488], 1
jmp 0x1004f9fb
and dword [ebp - 0x488], 0
cmp dword [ebp - 0x488], 2
jle 0x1004fa0d
and dword [ebp - 0x5e8], 0
jmp 0x1004fa17
mov dword [ebp - 0x5e8], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x974]
imul eax, dword [ebp - 0x5e8]
imul eax, eax, 0xfffffffb
cmp eax, dword [ebp - 0x4a8]
jl 0x1004fa42
mov dword [ebp - 0x490], 1
jmp 0x1004fa49
and dword [ebp - 0x490], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x974]
add eax, dword [ebp - 0x490]
cmp eax, dword [ebp - 0x698]
je 0x1004fa70
mov dword [ebp - 0x498], 1
jmp 0x1004fa77
and dword [ebp - 0x498], 0
mov eax, dword [ebp - 0x8d4]
cmp dword [ebp - 0x498], eax
jl 0x1004fa91
mov dword [ebp - 0x5f0], 1
jmp 0x1004fa98
and dword [ebp - 0x5f0], 0
push 0
lea ecx, [ebp - 0x8e0]
call fcn.1001866d
mov ecx, dword [ebp - 0x5f0]
cmp ecx, dword [eax]
jg 0x1004fabb
mov dword [ebp - 0x4a0], 1
jmp 0x1004fac2
and dword [ebp - 0x4a0], 0
push 0
lea ecx, [ebp - 0x8e0]
call fcn.1001866d
mov ecx, dword [ebp - 0x4a0]
cmp ecx, dword [eax]
jg 0x1004fae5
mov dword [ebp - 0x6f0], 1
jmp 0x1004faec
and dword [ebp - 0x6f0], 0
mov eax, dword [ebp - 0x810]
cmp dword [ebp - 0x6f0], eax
jge 0x1004fb06
mov dword [ebp - 0x924], 1
jmp 0x1004fb0d
and dword [ebp - 0x924], 0
mov eax, dword [ebp - 0x4a8]
mov dword [ebp - 0xb90], eax
mov eax, dword [ebp - 0x818]
cmp dword [ebp - 0x1dc], eax
jle 0x1004fb33
mov dword [ebp - 0x340], 1
jmp 0x1004fb3a
and dword [ebp - 0x340], 0
push 0
lea ecx, [ebp - 0x8e0]
call fcn.1001866d
mov ecx, dword [ebp - 0x340]
mov dword [eax], ecx
cmp dword [ebp - 0x340], 0
jne 0x1004fb6a
mov eax, 0xfff8
test eax, eax
jne 0x1004fb6a
and dword [ebp - 0x5f8], 0
jmp 0x1004fb74
mov dword [ebp - 0x5f8], 1
mov eax, dword [ebp - 0x5f8]
sub eax, dword [ebp - 0x2dc]
mov dword [ebp - 0x2dc], eax
jmp 0x1004f72a
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xa44]
call fcn.10018668
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x8e0]
call fcn.10018668
push 1
push 0x19a1
push 0xd29
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x4b0]
push eax
call fcn.1004c646
add esp, 0x14
mov dword [ebp - 0x6c], 0x6de713a4
mov dword [ebp - 0x1a0], 0x3244d513
mov dword [ebp - 0x4c], 0x583dc0e3
mov dword [ebp - 0x2e4], 2
mov dword [ebp - 0xa0], 0x945d4475
mov dword [ebp - 0x838], 0x3eef59df
mov dword [ebp - 0x934], 0x6c7bfb9e
mov dword [ebp - 0xb98], 0xcfcb68b6
mov dword [ebp - 0x64], 0
jmp 0x1004fc22
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 2
jge 0x1004fc38
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x870], 0x8c32619c
jmp 0x1004fc1b
mov dword [ebp - 0x64], 0
jmp 0x1004fc48
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 1
jge 0x1004fc5e
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x828], 0xfffffffb
jmp 0x1004fc41
push 0
lea eax, [ebp - 0x6c]
push eax
push 0x3f16
call fcn.1004d2b0
add esp, 0xc
mov dword [ebp - 0x6c], 0xffffffe8
jmp 0x1004fc81
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0x14
jg 0x1005030a
mov dword [ebp - 0x198], 0x526d2e85
mov dword [ebp - 0x114], 0xffffffff
push 2
lea ecx, [ebp - 0xa2c]
call fcn.100185e1
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x1e4], 0
jmp 0x1004fccc
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 2
jge 0x1004fcee
push dword [ebp - 0x1e4]
lea ecx, [ebp - 0xa2c]
call fcn.1001866d
mov dword [eax], 0xc5b6cc60
jmp 0x1004fcbf
cmp dword [ebp - 0x198], 0
je 0x1004ffb6
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x1a0], eax
jle 0x1004fd16
push 0xfffffffffffffffc
pop eax
test eax, eax
jne 0x1004fd16
and dword [ebp - 0x8e4], 0
jmp 0x1004fd20
mov dword [ebp - 0x8e4], 1
mov dword [ebp - 0x4c], 0x747b
cmp dword [ebp - 0x4c], 0xffff
jae 0x1004fd3c
mov dword [ebp - 0x820], 1
jmp 0x1004fd43
and dword [ebp - 0x820], 0
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0xbac], eax
xor eax, eax
inc eax
jne 0x1004fd63
mov eax, 0xffff
test eax, eax
jne 0x1004fd63
and dword [ebp - 0x6a0], 0
jmp 0x1004fd6d
mov dword [ebp - 0x6a0], 1
mov eax, dword [ebp - 0x1a0]
add eax, dword [ebp - 0x6a0]
cmp eax, dword [ebp - 0x198]
jl 0x1004ffb6
mov dword [ebp - 0x608], 1
mov dword [ebp - 0x4c8], 0x461d0ee3
mov dword [ebp - 0x4c], 0
jmp 0x1004fda9
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jle 0x1004ff8d
mov dword [ebp - 0x6f4], 0xffffffff
mov dword [ebp - 0x610], 0xffffffff
mov dword [ebp - 0x194], 0
jmp 0x1004fde0
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 3
jge 0x1004fdfc
mov eax, dword [ebp - 0x194]
mov dword [ebp + eax*4 - 0xbf4], 0xffff
jmp 0x1004fdd3
mov eax, dword [ebp - 0x4c]
imul eax, dword [ebp - 0x4c]
cmp eax, 0x6ff5
jle 0x1004fe16
mov dword [ebp - 0x4b8], 1
jmp 0x1004fe1d
and dword [ebp - 0x4b8], 0
mov eax, dword [ebp - 0x198]
cmp dword [ebp - 0x4b8], eax
jge 0x1004fe37
mov dword [ebp - 0x600], 1
jmp 0x1004fe3e
and dword [ebp - 0x600], 0
mov eax, dword [ebp - 0x198]
cmp dword [ebp - 0x600], eax
jl 0x1004fe58
mov dword [ebp - 0x4c0], 1
jmp 0x1004fe5f
and dword [ebp - 0x4c0], 0
mov eax, dword [ebp - 0x4c0]
mov dword [ebp - 0x2e4], eax
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0xbb4], eax
mov eax, dword [ebp - 0x608]
mov dword [ebp - 0x6f4], eax
mov eax, dword [ebp - 0x6f4]
mov dword [ebp - 0x4c8], eax
mov eax, dword [ebp - 0x610]
cmp dword [ebp - 0x4c8], eax
je 0x1004fea9
mov dword [ebp - 0x6a8], 1
jmp 0x1004feb0
and dword [ebp - 0x6a8], 0
mov eax, dword [ebp - 0x608]
mov dword [ebp - 0x4d0], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x4d0]
mov dword [ebp + eax - 0xbf4], ecx
mov eax, dword [ebp - 0x4d0]
imul eax, dword [ebp - 0x6a8]
cmp eax, 0xcc414254
jbe 0x1004feef
mov dword [ebp - 0x4d8], 1
jmp 0x1004fef6
and dword [ebp - 0x4d8], 0
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x4d8], eax
jne 0x1004ff0d
mov dword [ebp - 0x4e0], 1
jmp 0x1004ff14
and dword [ebp - 0x4e0], 0
mov eax, dword [ebp - 0x610]
cmp dword [ebp - 0x4e0], eax
jle 0x1004ff2e
mov dword [ebp - 0x6fc], 1
jmp 0x1004ff35
and dword [ebp - 0x6fc], 0
mov eax, dword [ebp - 0x6fc]
sub eax, dword [ebp - 0x6c]
mov dword [ebp - 0xa0], eax
je 0x1004ff5b
mov eax, 0x8d5680a2
test eax, eax
je 0x1004ff5b
mov dword [ebp - 0x4e8], 1
jmp 0x1004ff62
and dword [ebp - 0x4e8], 0
cmp dword [ebp - 0x4e8], 0xfffffff8
jae 0x1004ff77
mov dword [ebp - 0x92c], 1
jmp 0x1004ff7e
and dword [ebp - 0x92c], 0
mov dword [ebp - 0x114], 0x31b3b333
jmp 0x1004fda2
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x870], 0
je 0x1004ffb1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa2c]
call fcn.10018668
jmp 0x1005030a
jmp 0x100502f6
mov dword [ebp - 0x8f4], 0
push 1
lea ecx, [ebp - 0xa20]
call fcn.100185e1
mov byte [ebp - 4], 0xf
mov dword [ebp - 0xbbc], 0xf2c7
mov dword [ebp - 0x54], 0
jmp 0x1004ffeb
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 2
jge 0x10050001
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x764], 0xfffffff9
jmp 0x1004ffe4
push 0x2e25
lea eax, [ebp - 0x54]
push eax
push 0
push 0x5f2e
lea eax, [ebp - 0xa20]
push eax
push 0x29c5
call fcn.1004ce16
add esp, 0x18
mov dword [ebp - 0x54], 0
jmp 0x10050035
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 1
jge 0x1005004b
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x314], 1
jmp 0x1005002e
cmp dword [ebp - 0x2e4], 0
je 0x10050125
xor eax, eax
jne 0x10050075
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x764], 0
jne 0x10050075
and dword [ebp - 0x618], 0
jmp 0x1005007f
mov dword [ebp - 0x618], 1
mov eax, dword [ebp - 0x114]
cmp eax, dword [ebp - 0x618]
jle 0x10050099
mov dword [ebp - 0x4f0], 1
jmp 0x100500a0
and dword [ebp - 0x4f0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x764]
cmp dword [ebp - 0x4f0], eax
je 0x100500c7
cmp dword [ebp - 0x4c], 0
je 0x100500c7
mov dword [ebp - 0x6b0], 1
jmp 0x100500ce
and dword [ebp - 0x6b0], 0
cmp dword [ebp - 0x6b0], 7
jle 0x100500e3
mov dword [ebp - 0x4f8], 1
jmp 0x100500ea
and dword [ebp - 0x4f8], 0
mov eax, dword [ebp - 0x114]
cmp dword [ebp - 0x4f8], eax
je 0x10050104
mov dword [ebp - 0x620], 1
jmp 0x1005010b
and dword [ebp - 0x620], 0
mov eax, dword [ebp - 0xa0]
cmp dword [ebp - 0x620], eax
je 0x10050125
mov dword [ebp - 0x500], 1
jmp 0x1005012c
and dword [ebp - 0x500], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x764]
imul eax, dword [ebp - 0x500]
cmp eax, dword [ebp - 0x1a0]
jl 0x1005015a
cmp dword [ebp - 0xa0], 0
jne 0x1005015a
and dword [ebp - 0x71c], 0
jmp 0x10050164
mov dword [ebp - 0x71c], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x71c]
sub ecx, dword [ebp + eax - 0x764]
cmp ecx, dword [ebp - 0x114]
jge 0x1005018b
mov dword [ebp - 0x508], 1
jmp 0x10050192
and dword [ebp - 0x508], 0
cmp dword [ebp - 0x508], 0x11a46c42
jge 0x100501aa
mov dword [ebp - 0x628], 1
jmp 0x100501b1
and dword [ebp - 0x628], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x870]
cmp eax, dword [ebp - 0x628]
je 0x100501d2
mov dword [ebp - 0x510], 1
jmp 0x100501d9
and dword [ebp - 0x510], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x870]
imul eax, dword [ebp - 0x510]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
add eax, 0x5b6a4d7c
mov dword [ebp - 0xa0], eax
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x828], 0xfffffffc
push 0
lea ecx, [ebp - 0xa20]
call fcn.1001866d
cmp dword [eax], 0xfffffffc
jle 0x1005022d
mov dword [ebp - 0x6b8], 1
jmp 0x10050234
and dword [ebp - 0x6b8], 0
mov eax, dword [ebp - 0x8f4]
cmp eax, dword [ebp - 0x6b8]
jg 0x1005024e
mov dword [ebp - 0x518], 1
jmp 0x10050255
and dword [ebp - 0x518], 0
mov dword [ebp - 0xa0], 0x7e9a
mov eax, dword [ebp - 0xa0]
cmp dword [ebp - 0x518], eax
jl 0x10050279
mov dword [ebp - 0x830], 1
jmp 0x10050280
and dword [ebp - 0x830], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x314]
mov dword [ebp - 0xbc4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x314]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x314], eax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0xbcc], eax
mov eax, dword [ebp - 0x2e4]
cmp dword [ebp - 0x934], eax
jl 0x100502d4
mov dword [ebp - 0x630], 1
jmp 0x100502db
and dword [ebp - 0x630], 0
mov eax, dword [ebp - 0x630]
mov dword [ebp - 0x838], eax
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0xa20]
call fcn.10018668
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa2c]
call fcn.10018668
jmp 0x1004fc7a
and dword [ebp - 0x110], 0
mov dword [ebp - 0x5c], 9
mov dword [ebp - 0x718], 0
mov dword [ebp - 0x93c], 0xffffffff
mov dword [ebp - 0x1a8], 0
jmp 0x10050345
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 2
jge 0x10050361
mov eax, dword [ebp - 0x1a8]
mov dword [ebp + eax*4 - 0xb08], 0x42b9193c
jmp 0x10050338
mov byte [ebp - 0xc4], 0
push 1
lea eax, [ebp - 0xc4]
push eax
call fcn.1004c717
pop ecx
pop ecx
cmp dword [ebp - 0x5c], 0
jne 0x100503bc
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xb08], 0
cmp dword [ebp - 0x5c], 0
je 0x100503a1
mov dword [ebp - 0x520], 1
jmp 0x100503a8
and dword [ebp - 0x520], 0
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x520], eax
jne 0x100503bc
and dword [ebp - 0x700], 0
jmp 0x100503c6
mov dword [ebp - 0x700], 1
cmp dword [ebp - 0x700], 0x77ebd004
jle 0x100503de
mov dword [ebp - 0x528], 1
jmp 0x100503e5
and dword [ebp - 0x528], 0
cmp dword [ebp - 0x528], 0xffffffff
jle 0x100503fa
mov dword [ebp - 0x638], 1
jmp 0x10050401
and dword [ebp - 0x638], 0
cmp dword [ebp - 0x638], 0xdffbe584
jne 0x10050419
mov dword [ebp - 0x530], 1
jmp 0x10050420
and dword [ebp - 0x530], 0
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x530], eax
jl 0x10050437
mov dword [ebp - 0x6c0], 1
jmp 0x1005043e
and dword [ebp - 0x6c0], 0
mov eax, dword [ebp - 0x5c]
cmp eax, dword [ebp - 0x6c0]
jge 0x10050455
mov dword [ebp - 0x538], 1
jmp 0x1005045c
and dword [ebp - 0x538], 0
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x538], eax
jg 0x10050473
mov dword [ebp - 0x640], 1
jmp 0x1005047a
and dword [ebp - 0x640], 0
cmp dword [ebp - 0x640], 0x9796a0b5
jbe 0x10050498
mov eax, 0x734c
test eax, eax
jne 0x10050498
and dword [ebp - 0x540], 0
jmp 0x100504a2
mov dword [ebp - 0x540], 1
mov eax, dword [ebp - 0x540]
mov dword [ebp - 0x718], eax
mov eax, dword [ebp - 0x5c]
add eax, dword [ebp - 0x718]
cmp dword [ebp - 0x5c], eax
jge 0x100504ce
mov eax, 0x969b42c5
test eax, eax
jne 0x100504ce
and dword [ebp - 0x548], 0
jmp 0x100504d8
mov dword [ebp - 0x548], 1
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x548], eax
je 0x100504ef
mov dword [ebp - 0x648], 1
jmp 0x100504f6
and dword [ebp - 0x648], 0
mov eax, dword [ebp - 0x5c]
add eax, dword [ebp - 0x648]
mov dword [ebp - 0x93c], eax
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x18], 0
jbe 0x1005052d
lea eax, [ebp - 0x110]
push eax
push 1
lea eax, [ebp - 0x14]
push eax
push 0x616
push 0x4cdf
call fcn.1004c770
add esp, 0x14
mov dword [ebp - 0x1c], 0x6feb9e9d
mov dword [ebp - 0x330], 0xa2b8ea2c
mov dword [ebp - 0x37c], 0
mov dword [ebp - 0x2ec], 0x56fd8c65
mov dword [ebp - 0x848], 0x707e294
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0xbb8], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0xb74], eax
cmp dword [ebp - 0x1c], 0xffffffff
ja 0x10050580
mov dword [ebp - 0x840], 1
jmp 0x10050587
and dword [ebp - 0x840], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0xb8c], eax
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], eax
jle 0x100505a4
mov dword [ebp - 0x550], 1
jmp 0x100505ab
and dword [ebp - 0x550], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x550], eax
jne 0x100505c2
mov dword [ebp - 0x6c8], 1
jmp 0x100505c9
and dword [ebp - 0x6c8], 0
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x6c8]
cmp eax, 0x23f
jne 0x100505e9
cmp dword [ebp - 0x1c], 0
jne 0x100505e9
and dword [ebp - 0x364], 0
jmp 0x100505f3
mov dword [ebp - 0x364], 1
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x364], eax
jge 0x10050604
cmp dword [ebp - 0x1c], 0
je 0x10050616
cmp dword [ebp - 0x1c], 0
je 0x10050616
mov dword [ebp - 0x36c], 1
jmp 0x1005061d
and dword [ebp - 0x36c], 0
mov eax, dword [ebp - 0x36c]
mov dword [ebp - 0x330], eax
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x330], eax
jle 0x10050640
mov dword [ebp - 0x374], 1
jmp 0x10050647
and dword [ebp - 0x374], 0
mov eax, dword [ebp - 0x374]
mov dword [ebp - 0x37c], eax
cmp dword [ebp - 0x37c], 0xb7b8
jl 0x1005066b
mov dword [ebp - 0x900], 1
jmp 0x10050672
and dword [ebp - 0x900], 0
cmp dword [ebp - 0x1c], 0
jne 0x10050685
xor eax, eax
jne 0x10050685
and dword [ebp - 0x384], 0
jmp 0x1005068f
mov dword [ebp - 0x384], 1
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x384]
mov dword [ebp - 0x2ec], eax
mov eax, dword [ebp - 0x2ec]
mov dword [ebp - 0x848], eax
lea eax, [ebp - 0x1c]
push eax
push 1
lea eax, [ebp - 0x330]
push eax
lea eax, [ebp - 0x2ec]
push eax
call fcn.1004c7fd
add esp, 0x10
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 0x1c]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x9d4], 0xe83
mov dword [ebp - 0x9d0], 0xe83
mov dword [ebp - 0x9cc], 0xe83
mov dword [ebp - 0x9c8], 0xe83
lea ecx, [ebp - 0x305]
call fcn.10008d33
push eax
lea eax, [ebp - 0x9c4]
push eax
lea eax, [ebp - 0x9d4]
push eax
lea ecx, [ebp - 0xc64]
call fcn.1001867c
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xc0c]
call fcn.10018642
mov dword [ebp - 4], 0x10
mov dword [ebp - 0xa74], 0xe42a43d9
push 1
lea ecx, [ebp - 0xa5c]
call fcn.100185e1
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x74], 0
jmp 0x1005075e
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 2
jge 0x10050774
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0xc5c], 0xaccbad86
jmp 0x10050757
mov dword [ebp - 0x74], 0
jmp 0x10050784
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 1
jge 0x100507a0
push dword [ebp - 0x74]
lea ecx, [ebp - 0xa5c]
call fcn.1001866d
mov dword [eax], 0x9b3a
jmp 0x1005077d
push 0
lea ecx, [ebp - 0xa5c]
call fcn.1001866d
mov dword [ebp - 0x38c], eax
mov eax, dword [ebp - 0x38c]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x38c]
mov dword [ecx], eax
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xa5c]
call fcn.10018668
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc0c]
call fcn.10018668
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 0x14]
sub eax, dword [ebp - 0x110]
mov dword [ebp - 0xf0], eax
mov dword [ebp - 0xb3c], 0xa8c6
mov byte [ebp - 0xb1], 0
push 0
lea eax, [ebp - 0xb1]
push eax
push 0x67aa
call fcn.1004cd8a
add esp, 0xc
mov byte [ebp - 0xd5], 0
movzx eax, byte [ebp - 0xd5]
test eax, eax
je 0x1005083b
push 0x3c44
push 1
call fcn.1004c8ba
pop ecx
pop ecx
and dword [ebp - 0x124], 0
jmp 0x10050851
mov eax, dword [ebp - 0x124]
inc eax
mov dword [ebp - 0x124], eax
mov eax, dword [ebp - 0x124]
cmp eax, dword [ebp - 0xf0]
jge 0x100508dd
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
mov eax, dword [eax + 0x14]
sub eax, dword [ecx + 0x18]
cmp dword [ebp - 0x124], eax
jae 0x10050890
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x24]
add ecx, dword [eax + 0x1c]
add ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x124]
mov eax, dword [ecx + eax*4]
mov dword [ebp - 0x394], eax
jmp 0x100508a8
push 0
lea eax, [ebp - 0x394]
push eax
lea eax, [ebp - 0xa8]
push eax
call fcn.1004ccf0
add esp, 0xc
lea eax, [ebp - 0x10]
push eax
push 0x6608
lea eax, [ebp - 0x394]
push eax
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x28]
push eax
push 0x3a48
push 1
call fcn.1004c8f3
add esp, 0x1c
mov eax, dword [ebp - 0x10]
add eax, 4
mov dword [ebp - 0x10], eax
jmp 0x10050844
mov dword [ebp - 0x44], 0xca4f833f
push 2
lea ecx, [ebp - 0x78c]
call fcn.100185e1
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x908], 0xffffffff
mov dword [ebp - 0x7c], 0
jmp 0x10050912
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 1
jge 0x10050928
mov eax, dword [ebp - 0x7c]
mov dword [ebp + eax*4 - 0x31c], 0
jmp 0x1005090b
mov dword [ebp - 0x7c], 0
jmp 0x10050938
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 2
jge 0x10050954
push dword [ebp - 0x7c]
lea ecx, [ebp - 0x78c]
call fcn.1001866d
mov dword [eax], 0x36d0
jmp 0x10050931
mov dword [ebp - 0x44], 0
jmp 0x10050964
cmp dword [ebp - 0x44], 0
jg 0x10050a1d
mov dword [ebp - 0x1b0], 0x1fe77dd6
mov dword [ebp - 0x12c], 0xe164caf
mov dword [ebp - 0x1b0], 0
jmp 0x1005099b
mov dword [ebp - 0x44], 0
jmp 0x10050a2d
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x834], eax
mov eax, dword [ebp - 0x834]
mov dword [ebp - 0x83c], eax
mov eax, dword [ebp - 0x83c]
mov dword [eax], 0xe3556834
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret