Function at 0x1004a804
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10071144
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x9d8
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 0x30]
test eax, eax
je 0x1004a960
mov eax, dword [ebp + 8]
mov dword [ebp - 0x5bc], eax
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0x668], eax
mov eax, dword [ebp + 0x34]
mov dword [ebp - 0x5c4], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x660], eax
lea eax, [ebp + 0x20]
mov dword [ebp - 0x548], eax
mov eax, dword [ebp - 0x548]
movzx eax, byte [eax]
test eax, eax
je 0x1004a8e6
mov eax, dword [ebp - 0x5bc]
mov dword [ebp - 0x5cc], eax
mov eax, dword [ebp - 0x5c4]
mov dword [ebp - 0x650], eax
mov eax, dword [ebp - 0x5cc]
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp - 0x650]
mov dword [ebp - 0x658], eax
mov eax, dword [ebp - 0xb4]
mov dword [eax], 0
jmp 0x1004a8be
mov eax, dword [ebp - 0xb4]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xb4]
mov dword [ecx], eax
mov eax, dword [ebp - 0xb4]
cmp dword [eax], 2
jge 0x1004a8e4
mov eax, dword [ebp - 0xb4]
push dword [eax]
mov ecx, dword [ebp - 0x658]
call fcn.1001f296
mov dword [eax], 1
jmp 0x1004a8ad
jmp 0x1004a95b
mov eax, dword [ebp - 0x660]
mov dword [ebp - 0x670], eax
mov eax, dword [ebp - 0x668]
mov dword [ebp - 0x5b4], eax
mov eax, dword [ebp - 0x670]
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x5b4]
mov dword [ebp - 0x520], eax
mov eax, dword [ebp - 0x94]
mov dword [eax], 0
jmp 0x1004a935
mov eax, dword [ebp - 0x94]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x94]
mov dword [ecx], eax
mov eax, dword [ebp - 0x94]
cmp dword [eax], 1
jge 0x1004a95b
mov eax, dword [ebp - 0x94]
push dword [eax]
mov ecx, dword [ebp - 0x520]
call fcn.1001f296
mov dword [eax], 0x89f2
jmp 0x1004a924
jmp 0x1004f45b
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 0x56c], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x61c], eax
lea eax, [ebp + 0x14]
mov dword [ebp - 0x6b8], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x564], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x574], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x528], eax
mov eax, dword [ebp - 0x6b8]
movzx eax, byte [eax]
test eax, eax
je 0x1004e9fe
mov eax, dword [ebp - 0x528]
mov dword [ebp - 0x1f0], eax
mov eax, dword [ebp - 0x61c]
mov dword [ebp - 0x74], eax
and dword [ebp - 0x30], 0
push 0x3c3e
push 1
push 0
push 0x3938
push 0x60ed
push 0x57da
push 0x3ec3
call fcn.10050f49
add esp, 0x1c
mov dword [ebp - 0xd4], 4
mov dword [ebp - 0x334], 0x985589b5
mov dword [ebp - 0x5c], 2
mov dword [ebp - 0x530], 2
or dword [ebp - 0x734], 0xffffffff
or dword [ebp - 0x730], 0xffffffff
or dword [ebp - 0x72c], 0xffffffff
or dword [ebp - 0x728], 0xffffffff
lea ecx, [ebp - 0x201]
call fcn.1001f2a5
push eax
lea eax, [ebp - 0x724]
push eax
lea eax, [ebp - 0x734]
push eax
lea ecx, [ebp - 0x978]
call fcn.1001f2a8
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x7d0]
call fcn.1001f254
and dword [ebp - 4], 0
push 0xe39
lea eax, [ebp - 0x7d0]
push eax
push 0
push 1
push 0x3413
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x334]
push eax
lea eax, [ebp - 0xd4]
push eax
push 1
push 0x46dd
lea eax, [ebp - 0x530]
push eax
call fcn.10044897
add esp, 0x2c
mov dword [ebp - 0xd4], 0xffffffe7
jmp 0x1004aab5
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0x32
jle 0x1004abbb
mov dword [ebp - 0x66c], 0x18b9628e
mov eax, dword [ebp - 0x66c]
mov dword [ebp - 0x83c], eax
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x860], eax
cmp dword [ebp - 0x334], 0
je 0x1004ab5b
mov byte [ebp - 0x6d], 0
push 0x6103
push 0x414b
push 0x6406
push 0x82
push 0x5ba1
push 1
push 0x4a44
lea eax, [ebp - 0x6d]
push eax
push 0x2c55
push 0
push 0x108b
push 1
push 0x5785
call fcn.10048e71
add esp, 0x34
mov dword [ebp - 0x5c], 0
jmp 0x1004ab3d
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 4
jge 0x1004ab59
push dword [ebp - 0x5c]
lea ecx, [ebp - 0x7d0]
call fcn.1001f296
mov dword [eax], 0xd258d033
jmp 0x1004ab36
jmp 0x1004ab9e
push 1
push 0xca7
push 0x37b8
push 0x64c3
push 0x3240
push 0xa90
push 0x4694
push 0x7afa
push 0x403b
push 0x2dc4
push 0x298a
push 1
push 0x4e86
call fcn.100437f9
add esp, 0x34
push 0x28d5
push 0x586e
push 1
push 1
push 1
call fcn.100439cb
add esp, 0x14
jmp 0x1004aaa8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7d0]
call fcn.1001f27a
push 0xf07
push 1
push 0x7260
push 1
push 0
call fcn.1004f7f9
add esp, 0x14
mov dword [ebp - 0x170], 0xffffffff
mov dword [ebp - 0x1a4], 0xacc4b7c7
mov dword [ebp - 0x9c], 1
mov dword [ebp - 0x250], 0x4ea33a4d
mov dword [ebp - 0x4fc], 1
mov dword [ebp - 0x4d0], 8
mov dword [ebp - 0x104], 0xfffffffa
mov dword [ebp - 0xf4], 0
jmp 0x1004ac41
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 3
jge 0x1004ac5d
mov eax, dword [ebp - 0xf4]
mov dword [ebp + eax*4 - 0x794], 0
jmp 0x1004ac34
mov byte [ebp - 0x51], 0
push 0x775
push 0x118f
push 0x2afe
push 0xcdb
lea eax, [ebp - 0x51]
push eax
push 0x716d
push 0x859
push 1
push 0
call fcn.100460c2
add esp, 0x24
cmp dword [ebp - 0x170], 0
je 0x1004acc2
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 0
jne 0x1004acb6
cmp dword [ebp - 0x1a4], 0
je 0x1004acc2
mov dword [ebp - 0x4d8], 1
jmp 0x1004acc9
and dword [ebp - 0x4d8], 0
mov eax, dword [ebp - 0x4d8]
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0
jne 0x1004acf3
cmp dword [ebp - 0x9c], 0xab9c
je 0x1004acf3
and dword [ebp - 0x4e0], 0
jmp 0x1004acfd
mov dword [ebp - 0x4e0], 1
mov eax, dword [ebp - 0x170]
imul eax, dword [ebp - 0x4e0]
sub eax, dword [ebp - 0x250]
cmp eax, 0xfffffff8
je 0x1004ad21
mov dword [ebp - 0x4f4], 1
jmp 0x1004ad28
and dword [ebp - 0x4f4], 0
mov eax, dword [ebp - 0x4f4]
sub eax, dword [ebp - 0x170]
mov dword [ebp - 0x4fc], eax
push 9
pop eax
test eax, eax
je 0x1004ad56
cmp dword [ebp - 0x9c], 0
je 0x1004ad56
mov dword [ebp - 0x538], 1
jmp 0x1004ad5d
and dword [ebp - 0x538], 0
mov eax, dword [ebp - 0x4d0]
mov dword [ebp - 0x948], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x794]
mov dword [ebp - 0x868], eax
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x8ec], eax
mov eax, dword [ebp - 0x4fc]
mov dword [ebp - 0x504], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x504]
mov dword [ebp + eax - 0x794], ecx
cmp dword [ebp - 0x4d0], 0xffffffff
jle 0x1004adbc
mov dword [ebp - 0x248], 1
jmp 0x1004adc3
and dword [ebp - 0x248], 0
imul eax, dword [ebp - 0x248], 0
test eax, eax
je 0x1004afa7
mov dword [ebp - 0x3a0], 0xffffffff
mov dword [ebp - 0x624], 0
mov dword [ebp - 0xfc], 0
jmp 0x1004adff
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 1
jge 0x1004ae1b
mov eax, dword [ebp - 0xfc]
mov dword [ebp + eax*4 - 0xc4], 0
jmp 0x1004adf2
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc4]
mov dword [ebp - 0x870], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc4]
mov dword [ebp - 0x930], eax
mov dword [ebp - 0x3a0], 0x6de21e52
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x794]
cmp eax, dword [ebp - 0x3a0]
jne 0x1004ae6c
mov dword [ebp - 0x4ac], 1
jmp 0x1004ae73
and dword [ebp - 0x4ac], 0
mov eax, dword [ebp - 0x250]
cmp dword [ebp - 0x4ac], eax
jg 0x1004ae8d
mov dword [ebp - 0x258], 1
jmp 0x1004ae94
and dword [ebp - 0x258], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc4]
cmp dword [ebp - 0x258], eax
jge 0x1004aeb5
mov dword [ebp - 0x3b4], 1
jmp 0x1004aebc
and dword [ebp - 0x3b4], 0
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x104], eax
mov eax, dword [ebp - 0x104]
imul eax, dword [ebp - 0x3b4]
neg eax
cmp eax, 0x5b04ce9d
jne 0x1004aeea
mov dword [ebp - 0x260], 1
jmp 0x1004aef1
and dword [ebp - 0x260], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc4]
cmp dword [ebp - 0x260], eax
jg 0x1004af12
mov dword [ebp - 0x45c], 1
jmp 0x1004af19
and dword [ebp - 0x45c], 0
mov eax, dword [ebp - 0x9c]
cmp dword [ebp - 0x45c], eax
jl 0x1004af33
mov dword [ebp - 0x268], 1
jmp 0x1004af3a
and dword [ebp - 0x268], 0
cmp dword [ebp - 0x268], 0
jg 0x1004af4f
mov dword [ebp - 0x3bc], 1
jmp 0x1004af56
and dword [ebp - 0x3bc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc4]
cmp dword [ebp - 0x3bc], eax
jle 0x1004af77
mov dword [ebp - 0x270], 1
jmp 0x1004af7e
and dword [ebp - 0x270], 0
mov eax, dword [ebp - 0x270]
mov dword [ebp - 0x624], eax
push 0x279b
push 0x5d67
push 0x5385
push 1
push 1
call fcn.10043ae8
add esp, 0x14
jmp 0x1004afe0
mov dword [ebp - 0x7e0], 0x3b02
mov dword [ebp - 0x7dc], 0x3b02
mov dword [ebp - 0x7d8], 0x3b02
mov dword [ebp - 0x7d4], 0x3b02
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x7e0], 1
push 0x6008
push 0x356c
push 0x12da
push 0x2969
lea eax, [ebp - 0x1f0]
push eax
push 0x45f4
push 0
push 0x7631
push 0x6c76
lea eax, [ebp - 0x1c8]
push eax
push 0x2b5a
push 1
push 1
call fcn.10040091
add esp, 0x34
mov dword [ebp - 0x540], 0xe83c773
mov dword [ebp - 0x4f0], 0x831e42a4
mov eax, dword [ebp - 0x540]
mov dword [ebp - 0x4f0], eax
push 0x1506
push 0x2d04
push 0x3c5
push 0x416b
push 1
push 1
push 0x5466
push 0
push 0x5154
push 0x46c5
lea eax, [ebp - 0x4f0]
push eax
push 0x26c1
push 0x5351
push 0x3f6b
push 0x40a
push 0x7679
call fcn.1003e8ef
add esp, 0x40
mov eax, dword [ebp - 0x1c8]
movzx eax, word [eax]
cmp eax, 0x5a4d
je 0x1004b7a3
push 1
lea ecx, [ebp - 0x680]
call fcn.1001f1f8
mov dword [ebp - 4], 1
lea eax, [ebp - 0xa4]
push eax
push 0
push 0x60fd
push 1
push 1
push 0x2955
push 0x124e
push 0x7b6e
lea eax, [ebp - 0x680]
push eax
push 0x5976
push 0x564c
push 0x204a
push 0x33e1
push 0x6097
push 0x4cf4
call fcn.10044008
add esp, 0x3c
mov dword [ebp - 0xa4], 0
jmp 0x1004b124
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 4
jge 0x1004b140
mov eax, dword [ebp - 0xa4]
mov dword [ebp + eax*4 - 0x9e8], 0xfc55
jmp 0x1004b117
push 0
lea ecx, [ebp - 0x680]
call fcn.1001f296
mov dword [eax], 0x1a
jmp 0x1004b179
push 0
lea ecx, [ebp - 0x680]
call fcn.1001f296
mov dword [ebp - 0x278], eax
mov eax, dword [ebp - 0x278]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x278]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x680]
call fcn.1001f296
cmp dword [eax], 0x15
jge 0x1004b1f2
mov dword [ebp - 0xec], 0x7d214c40
mov byte [ebp - 0x5d], 0
push 0
lea eax, [ebp - 0x5d]
push eax
push 0x2006
push 0
call fcn.10048da1
add esp, 0x10
mov dword [ebp - 0xec], 0
jmp 0x1004b1c7
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 3
jg 0x1004b1ed
push 0x5eaf
push 1
push 0x3ac
push 1
push 0x3324
call fcn.10043bd2
add esp, 0x14
jmp 0x1004b1ba
jmp 0x1004b155
mov byte [ebp - 0x53], 0
lea eax, [ebp - 0x53]
push eax
push 1
push 0x4d96
push 0x7d05
push 1
push 0x23d1
call fcn.10043cae
add esp, 0x18
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x680]
call fcn.1001f27a
mov dword [ebp - 0x18], 4
push 3
lea ecx, [ebp - 0x690]
call fcn.1001f1f8
mov dword [ebp - 4], 2
mov dword [ebp - 0x290], 0xeffb91e6
mov dword [ebp - 0x4c], 0x421ad7ba
mov dword [ebp - 0x3cc], 0x7f95e19f
mov dword [ebp - 0x674], 9
mov dword [ebp - 0x1b0], 0
mov dword [ebp - 0x3dc], 0x6d0046ba
mov dword [ebp - 0x4dc], 0xfffffffb
push 2
lea ecx, [ebp - 0x7ac]
call fcn.1001f1f8
mov byte [ebp - 4], 3
push 1
push 0x531e
push 0x71c5
push 0x10f7
push 0x449b
lea eax, [ebp - 0xe4]
push eax
push 1
push 0x2b8c
lea eax, [ebp - 0x690]
push eax
push 0x4513
push 0x453e
call fcn.1003e1b7
add esp, 0x2c
mov dword [ebp - 0x3c4], 0x373b
mov dword [ebp - 0x514], 0x100090e8
cmp dword [ebp - 0x3c4], 0x3ae7
jle 0x1004b3dc
push 0
call dword [sym.imp.USER32.dll_ShowCursor]
and dword [ebp - 0x178], 0
jmp 0x1004b312
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 0x25d3
jge 0x1004b3d1
and dword [ebp - 0x108], 0
jmp 0x1004b338
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0x6015
jge 0x1004b3cc
and dword [ebp - 0x10c], 0
jmp 0x1004b35e
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0x3453
jge 0x1004b3c7
mov eax, dword [ebp - 0x108]
add eax, dword [ebp - 0x10c]
and eax, dword [ebp - 0x178]
cdq
mov dword [ebp - 0x5d8], eax
mov dword [ebp - 0x5d4], edx
push dword [ebp - 0x5d4]
push dword [ebp - 0x5d8]
lea ecx, [ebp - 0x9a8]
call fcn.1000aa9e
pop ecx
pop ecx
mov dword [ebp - 0x6b0], eax
mov ecx, dword [ebp - 0x6b0]
call fcn.1001edec
push eax
call fcn.10058a1f
pop ecx
lea ecx, [ebp - 0x9a8]
call fcn.1001ede2
jmp 0x1004b351
jmp 0x1004b32b
jmp 0x1004b305
push 0x22e5
call dword [sym.imp.USER32.dll_GetSysColor]
mov dword [ebp - 0xe4], 0
jmp 0x1004b3f5
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 2
jge 0x1004b417
push dword [ebp - 0xe4]
lea ecx, [ebp - 0x7ac]
call fcn.1001f296
mov dword [eax], 0xfffffffc
jmp 0x1004b3e8
mov byte [ebp - 4], 4
cmp dword [ebp - 0x3c4], 0x36ad
jge 0x1004b433
push dword [ebp - 0x514]
call fcn.10058a1f
pop ecx
jmp 0x1004b44f
mov dword [ebp - 4], 3
jmp 0x1004b45f
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x878], eax
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x18]
jg 0x1004b47c
mov dword [ebp - 0x1e0], 1
jmp 0x1004b483
and dword [ebp - 0x1e0], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x4c]
jl 0x1004b49d
mov dword [ebp - 0x280], 1
jmp 0x1004b4a4
and dword [ebp - 0x280], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x280], eax
jle 0x1004b4c1
mov eax, 0x286c8a81
test eax, eax
jne 0x1004b4c1
and dword [ebp - 0x464], 0
jmp 0x1004b4cb
mov dword [ebp - 0x464], 1
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x464], eax
jle 0x1004b4e2
mov dword [ebp - 0x62c], 1
jmp 0x1004b4e9
and dword [ebp - 0x62c], 0
cmp dword [ebp - 0x4c], 0x74fd
je 0x1004b4fe
mov dword [ebp - 0x288], 1
jmp 0x1004b505
and dword [ebp - 0x288], 0
mov eax, dword [ebp - 0x288]
mov dword [ebp - 0x3cc], eax
cmp dword [ebp - 0x3cc], 0
jne 0x1004b529
cmp dword [ebp - 0x4c], 0
jne 0x1004b529
and dword [ebp - 0x550], 0
jmp 0x1004b533
mov dword [ebp - 0x550], 1
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x888], eax
cmp dword [ebp - 0x4c], 0xffffffff
jne 0x1004b54e
mov dword [ebp - 0x4b4], 1
jmp 0x1004b555
and dword [ebp - 0x4b4], 0
push 1
lea ecx, [ebp - 0x690]
call fcn.1001f296
mov ecx, dword [ebp - 0x1e0]
mov dword [eax], ecx
mov eax, dword [ebp - 0x1e0]
mov dword [ebp - 0x290], eax
mov eax, dword [ebp - 0x290]
cmp eax, dword [ebp - 0x4b4]
jg 0x1004b590
mov dword [ebp - 0x298], 1
jmp 0x1004b597
and dword [ebp - 0x298], 0
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x298]
lea eax, [ecx + eax - 1]
test eax, eax
jae 0x1004b5ba
mov eax, 0x4b4322e7
test eax, eax
jne 0x1004b5ba
and dword [ebp - 0x3d4], 0
jmp 0x1004b5c4
mov dword [ebp - 0x3d4], 1
cmp dword [ebp - 0x3d4], 0x50ba4309
jne 0x1004b5dc
mov dword [ebp - 0x2a0], 1
jmp 0x1004b5e3
and dword [ebp - 0x2a0], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x2a0], eax
je 0x1004b5fa
mov dword [ebp - 0x46c], 1
jmp 0x1004b601
and dword [ebp - 0x46c], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x46c], eax
jl 0x1004b618
mov dword [ebp - 0x2a8], 1
jmp 0x1004b61f
and dword [ebp - 0x2a8], 0
mov eax, dword [ebp - 0x2a8]
mov dword [ebp - 0x674], eax
push 1
lea ecx, [ebp - 0x690]
call fcn.1001f296
mov eax, dword [eax]
mov dword [ebp - 0x1b0], eax
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x3dc], eax
cmp dword [ebp - 0x3dc], 0
jne 0x1004b65e
cmp dword [ebp - 0x1b0], 0
je 0x1004b673
mov eax, 0xf2fe868e
test eax, eax
je 0x1004b673
mov dword [ebp - 0x2b0], 1
jmp 0x1004b67a
and dword [ebp - 0x2b0], 0
mov eax, dword [ebp - 0x2b0]
mov dword [ebp - 0x4dc], eax
mov eax, dword [ebp - 0x4dc]
cmp eax, dword [ebp - 0x18]
jg 0x1004b69d
mov dword [ebp - 0x2b8], 1
jmp 0x1004b6a4
and dword [ebp - 0x2b8], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x2b8], eax
jl 0x1004b6be
cmp dword [ebp - 0x4c], 0
jne 0x1004b6be
and dword [ebp - 0x3e4], 0
jmp 0x1004b6c8
mov dword [ebp - 0x3e4], 1
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x3e4], eax
jg 0x1004b6df
mov dword [ebp - 0x2c0], 1
jmp 0x1004b6e6
and dword [ebp - 0x2c0], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x2c0], eax
jg 0x1004b6f7
cmp dword [ebp - 0x18], 0
je 0x1004b709
push 2
lea ecx, [ebp - 0x690]
call fcn.1001f296
cmp dword [eax], 0
jne 0x1004b716
xor eax, eax
jne 0x1004b716
and dword [ebp - 0x474], 0
jmp 0x1004b720
mov dword [ebp - 0x474], 1
cmp dword [ebp - 0x474], 0x51f81f13
jge 0x1004b738
mov dword [ebp - 0x2c8], 1
jmp 0x1004b73f
and dword [ebp - 0x2c8], 0
mov eax, dword [ebp - 0x2c8]
sub eax, 0x9ef
je 0x1004b75e
cmp dword [ebp - 0x4c], 0
je 0x1004b75e
mov dword [ebp - 0x3ec], 1
jmp 0x1004b765
and dword [ebp - 0x3ec], 0
push 1
lea ecx, [ebp - 0x7ac]
call fcn.1001f296
mov ecx, dword [ebp - 0x3ec]
mov dword [eax], ecx
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x7ac]
call fcn.1001f27a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x690]
call fcn.1001f27a
mov eax, dword [ebp - 0x74]
and dword [eax], 0
jmp 0x1004f45b
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x558], 0
mov dword [ebp - 0x634], 0
mov dword [ebp - 0x880], 0x874b28e
push 3
lea ecx, [ebp - 0x8c8]
call fcn.1001f1f8
mov dword [ebp - 4], 6
mov dword [ebp - 0x894], 0xfffffff9
push 0x1136
push 0xe26
push 0x1d77
push 0x7ded
lea eax, [ebp - 0xac]
push eax
push 0x537a
push 0
push 0x16eb
push 1
lea eax, [ebp - 0x8c8]
push eax
push 1
call fcn.10045c2e
add esp, 0x2c
mov dword [ebp - 0xac], 0
jmp 0x1004b839
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 2
jge 0x1004b855
mov eax, dword [ebp - 0xac]
mov dword [ebp + eax*4 - 0x718], 0
jmp 0x1004b82c
mov eax, dword [ebp - 0x64]
cmp eax, dword [ebp - 0x64]
je 0x1004b869
mov dword [ebp - 0x2d0], 1
jmp 0x1004b870
and dword [ebp - 0x2d0], 0
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x2d0], eax
jne 0x1004b887
mov dword [ebp - 0x2d8], 1
jmp 0x1004b88e
and dword [ebp - 0x2d8], 0
mov eax, dword [ebp - 0x64]
cmp eax, dword [ebp - 0x558]
jle 0x1004b8a5
mov dword [ebp - 0x4bc], 1
jmp 0x1004b8ac
and dword [ebp - 0x4bc], 0
mov eax, dword [ebp - 0x64]
add eax, dword [ebp - 0x4bc]
mov dword [ebp - 0x634], eax
mov eax, dword [ebp - 0x2d8]
neg eax
cmp eax, 9
jle 0x1004b8d4
mov dword [ebp - 0x3f4], 1
jmp 0x1004b8db
and dword [ebp - 0x3f4], 0
mov eax, dword [ebp - 0x64]
cmp eax, dword [ebp - 0x3f4]
jl 0x1004b8f2
mov dword [ebp - 0x2e0], 1
jmp 0x1004b8f9
and dword [ebp - 0x2e0], 0
mov eax, dword [ebp - 0x2e0]
mov dword [ebp - 0x64], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x718]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x718], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x8c8]
call fcn.1001f27a
mov eax, dword [ebp - 0x1c8]
mov ecx, dword [ebp - 0x1f0]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0xbc], ecx
push 4
lea ecx, [ebp - 0x8e8]
call fcn.1001f1f8
mov dword [ebp - 4], 7
mov dword [ebp - 0x114], 0xe1e87df2
mov dword [ebp - 0x940], 0x1fc3eee
mov dword [ebp - 0x89c], 0x99d94b4b
push 3
lea ecx, [ebp - 0x8d8]
call fcn.1001f1f8
mov byte [ebp - 4], 8
mov dword [ebp - 0x560], 1
mov dword [ebp - 0x2c], 0
jmp 0x1004b99e
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 4
jge 0x1004b9b7
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x8e8]
call fcn.1001f296
and dword [eax], 0
jmp 0x1004b997
push 0x63b7
push 1
push 0x39c2
push 1
push 1
push 0x8fc
push 0x73d1
push 0x5ffe
push 0x45cf
push 0x38cb
push 0x5053
push 0x7e79
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x8d8]
push eax
push 0x7621
call fcn.10044008
add esp, 0x3c
mov dword [ebp - 0x2c], 0
jmp 0x1004ba12
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jge 0x1004ba28
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x988], 0
jmp 0x1004ba0b
mov byte [ebp - 0x65], 0
movzx eax, byte [ebp - 0x65]
test eax, eax
je 0x1004ba59
push 1
push 0
push 0x6c12
push 0x3ac8
push 0x2b7c
push 0x1a14
push 0x607c
call fcn.10043d79
add esp, 0x1c
mov dword [ebp - 0x114], 3
jmp 0x1004ba72
mov eax, dword [ebp - 0x114]
dec eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0
jl 0x1004bb00
mov dword [ebp - 0x90c], 0x7d65
mov dword [ebp - 0x808], 0
mov dword [ebp - 0x180], 0
jmp 0x1004baac
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 2
jge 0x1004bac8
mov eax, dword [ebp - 0x180]
mov dword [ebp + eax*4 - 0x990], 6
jmp 0x1004ba9f
mov byte [ebp - 0x55], 0
push 1
lea eax, [ebp - 0x55]
push eax
push 1
call fcn.10044599
add esp, 0xc
push 1
lea eax, [ebp - 0x560]
push eax
push 1
push 0x3f5d
push 1
push 0x2239
call fcn.100446e5
add esp, 0x18
jmp 0x1004ba65
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x8d8]
call fcn.1001f27a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x8e8]
call fcn.1001f27a
mov eax, dword [ebp - 0xbc]
cmp dword [eax], 0x4550
je 0x1004c079
push 4
lea ecx, [ebp - 0x3ac]
call fcn.1001f1f8
mov dword [ebp - 4], 9
mov dword [ebp - 0x80c], 1
mov dword [ebp - 0x6a8], 0
mov dword [ebp - 0x6a4], 0
mov dword [ebp - 0x6a0], 0
mov dword [ebp - 0x69c], 0
mov dword [ebp - 0xcc], 1
push 3
lea ecx, [ebp - 0x6d4]
call fcn.1001f1f8
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x500], 0xffff
push 0x165f
push 0x765d
push 0x2e18
lea eax, [ebp - 0x88]
push eax
lea eax, [ebp - 0x3ac]
push eax
push 0x1083
push 1
push 0xe4
push 0
push 1
call fcn.1003eec8
add esp, 0x28
mov dword [ebp - 0x88], 0
jmp 0x1004bbe9
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 2
jge 0x1004bc05
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0x720], 0xfffffffd
jmp 0x1004bbdc
push 0
lea eax, [ebp - 0x6d4]
push eax
push 0x5aab
lea eax, [ebp - 0x88]
push eax
call fcn.10050697
add esp, 0x10
push 0
lea ecx, [ebp - 0x3ac]
call fcn.1001f296
cmp dword [eax], 0
je 0x1004bd0b
mov eax, dword [ebp - 0xcc]
mov ecx, dword [ebp - 0xcc]
inc ecx
mov dword [ebp - 0xcc], ecx
test eax, eax
jne 0x1004bcf8
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x720]
mov dword [ebp - 0x814], eax
cmp dword [ebp - 0xcc], 4
jb 0x1004bc78
cmp dword [ebp - 0xcc], 0
jne 0x1004bc8a
mov eax, 0xffff
test eax, eax
jne 0x1004bc8a
and dword [ebp - 0x47c], 0
jmp 0x1004bc94
mov dword [ebp - 0x47c], 1
push 2
lea ecx, [ebp - 0x6d4]
call fcn.1001f296
mov ecx, dword [ebp - 0x47c]
cmp ecx, dword [eax]
jle 0x1004bcb7
mov dword [ebp - 0x2e8], 1
jmp 0x1004bcbe
and dword [ebp - 0x2e8], 0
push 2
lea ecx, [ebp - 0x6d4]
call fcn.1001f296
mov ecx, dword [ebp - 0x2e8]
cmp ecx, dword [eax]
je 0x1004bce1
mov dword [ebp - 0x698], 1
jmp 0x1004bce8
and dword [ebp - 0x698], 0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x720], 0
je 0x1004bd0b
push 3
pop eax
test eax, eax
je 0x1004bd0b
mov dword [ebp - 0x568], 1
jmp 0x1004bd12
and dword [ebp - 0x568], 0
push 3
lea ecx, [ebp - 0x3ac]
call fcn.1001f296
push 4
pop eax
imul eax, eax, 3
mov esi, dword [ebp + eax - 0x6a8]
push 4
pop eax
imul eax, eax, 3
mov edi, dword [ebp + eax - 0x6a8]
push 0
lea ecx, [ebp - 0x3ac]
call fcn.1001f296
imul edi, dword [eax]
push 2
lea ecx, [ebp - 0x3ac]
call fcn.1001f296
add edi, dword [eax]
cmp edi, esi
jge 0x1004bd68
mov dword [ebp - 0x3fc], 1
jmp 0x1004bd6f
and dword [ebp - 0x3fc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x6a8]
cmp dword [ebp - 0x3fc], eax
jge 0x1004bd90
mov dword [ebp - 0x2f0], 1
jmp 0x1004bd97
and dword [ebp - 0x2f0], 0
mov eax, dword [ebp - 0x2f0]
mov dword [ebp - 0x500], eax
mov esi, dword [ebp - 0x500]
push 0
lea ecx, [ebp - 0x3ac]
call fcn.1001f296
cmp dword [eax], esi
je 0x1004bdd5
push 3
lea ecx, [ebp - 0x3ac]
call fcn.1001f296
cmp dword [eax], 0
jne 0x1004bdd5
and dword [ebp - 0x2f8], 0
jmp 0x1004bddf
mov dword [ebp - 0x2f8], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2f8]
mov dword [ebp + eax - 0x6a8], ecx
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x6d4]
call fcn.1001f27a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3ac]
call fcn.1001f27a
mov dword [ebp - 0x8c], 0x2d5e48d3
mov dword [ebp - 0x8c], 0
jmp 0x1004be33
mov eax, dword [ebp - 0x8c]
dec eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0xffffffe5
jle 0x1004c06e
mov dword [ebp - 0x11c], 0x8fc558ba
mov dword [ebp - 0x684], 0x342f3d47
cmp dword [ebp - 0x11c], 0
je 0x1004bfbd
push 2
lea ecx, [ebp - 0x710]
call fcn.1001f1f8
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x570], 0x36729694
push 0x4d3d
push 1
push 0x3e60
lea eax, [ebp - 0x710]
push eax
push 1
lea eax, [ebp - 0x81c]
push eax
push 1
push 0x43fc
call fcn.1003e466
add esp, 0x20
mov esi, dword [ebp - 0x8c]
push 1
lea ecx, [ebp - 0x710]
call fcn.1001f296
cmp esi, dword [eax]
jl 0x1004becd
mov dword [ebp - 0x63c], 1
jmp 0x1004bed4
and dword [ebp - 0x63c], 0
cmp dword [ebp - 0x11c], 0x9c45
jg 0x1004beec
mov dword [ebp - 0x404], 1
jmp 0x1004bef3
and dword [ebp - 0x404], 0
mov eax, dword [ebp - 0x570]
cmp dword [ebp - 0x404], eax
jg 0x1004bf0d
mov dword [ebp - 0x300], 1
jmp 0x1004bf14
and dword [ebp - 0x300], 0
cmp dword [ebp - 0x300], 1
jne 0x1004bf29
mov dword [ebp - 0x484], 1
jmp 0x1004bf30
and dword [ebp - 0x484], 0
mov eax, dword [ebp - 0x11c]
cmp dword [ebp - 0x484], eax
jge 0x1004bf4a
mov dword [ebp - 0x308], 1
jmp 0x1004bf51
and dword [ebp - 0x308], 0
push 0
lea ecx, [ebp - 0x710]
call fcn.1001f296
mov eax, dword [eax]
dec eax
cmp eax, dword [ebp - 0x308]
jle 0x1004bf75
mov dword [ebp - 0x40c], 1
jmp 0x1004bf7c
and dword [ebp - 0x40c], 0
mov eax, dword [ebp - 0x11c]
cmp eax, dword [ebp - 0x40c]
jge 0x1004bf96
mov dword [ebp - 0x310], 1
jmp 0x1004bf9d
and dword [ebp - 0x310], 0
mov eax, dword [ebp - 0x310]
mov dword [ebp - 0x684], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x710]
call fcn.1001f27a
jmp 0x1004c069
push 3
lea ecx, [ebp - 0x6ec]
call fcn.1001f1f8
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x188], 0
jmp 0x1004bfea
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 3
jge 0x1004c00c
push dword [ebp - 0x188]
lea ecx, [ebp - 0x6ec]
call fcn.1001f296
mov dword [eax], 0xb166c193
jmp 0x1004bfdd
mov byte [ebp - 0x5f], 0
push 1
push 0x2fe6
push 1
push 0x399b
push 0x769f
push 0x610a
lea eax, [ebp - 0x5f]
push eax
call fcn.100447a7
add esp, 0x1c
push 1
lea ecx, [ebp - 0x6ec]
call fcn.1001f296
cmp dword [eax], 0
je 0x1004c05a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6ec]
call fcn.1001f27a
jmp 0x1004be26
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6ec]
call fcn.1001f27a
jmp 0x1004be26
mov eax, dword [ebp - 0x74]
and dword [eax], 0
jmp 0x1004f45b
push 0x5152
push dword [ebp - 0xbc]
push 0
push 0x4af3
push 0x6dca
push 0x1f31
push 1
lea eax, [ebp - 0x150]
push eax
call fcn.1004fc40
add esp, 0x20
mov dword [ebp - 0x1b8], 0x2c5eb200
mov dword [ebp - 0x328], 0xffffffff
mov dword [ebp - 0x1c0], 0xee3f2f34
mov dword [ebp - 0x1e8], 0x5a9390df
mov dword [ebp - 0x208], 7
mov dword [ebp - 0xdc], 0x393dfe8e
mov dword [ebp - 0x414], 0xfffffff7
mov dword [ebp - 0x588], 0xffff
mov dword [ebp - 0x590], 0x414028b0
mov dword [ebp - 0x124], 0
jmp 0x1004c119
mov eax, dword [ebp - 0x124]
inc eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 4
jge 0x1004c135
mov eax, dword [ebp - 0x124]
mov dword [ebp + eax*4 - 0x6c8], 0xfffffff8
jmp 0x1004c10c
mov eax, dword [ebp - 0x1b8]
mov dword [ebp - 0x824], eax
cmp dword [ebp - 0xdc], 0
je 0x1004c15f
mov eax, 0x95c3c62e
test eax, eax
je 0x1004c15f
mov dword [ebp - 0x4c4], 1
jmp 0x1004c166
and dword [ebp - 0x4c4], 0
cmp dword [ebp - 0x4c4], 1
jg 0x1004c17b
mov dword [ebp - 0x318], 1
jmp 0x1004c182
and dword [ebp - 0x318], 0
mov eax, dword [ebp - 0x318]
mov dword [ebp - 0x1e8], eax
mov eax, dword [ebp - 0x1e8]
mov dword [ebp - 0x414], eax
mov eax, dword [ebp - 0x414]
mov dword [ebp - 0x82c], eax
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x834], eax
push 4
pop eax
shl eax, 1
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x6c8]
cmp ecx, dword [ebp + eax - 0x6c8]
jl 0x1004c1d9
mov dword [ebp - 0x320], 1
jmp 0x1004c1e0
and dword [ebp - 0x320], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1c0]
sub ecx, dword [ebp - 0x320]
cmp ecx, dword [ebp + eax - 0x6c8]
jne 0x1004c207
mov dword [ebp - 0x48c], 1
jmp 0x1004c20e
and dword [ebp - 0x48c], 0
mov eax, dword [ebp - 0x208]
mov dword [ebp - 0x578], eax
mov eax, dword [ebp - 0x48c]
mov dword [ebp - 0x644], eax
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
mov eax, dword [ebp - 0x578]
cmp eax, dword [ebp - 0x644]
je 0x1004c24d
mov dword [ebp - 0x580], 1
jmp 0x1004c254
and dword [ebp - 0x580], 0
mov eax, dword [ebp - 0x1b8]
mov dword [ebp - 0x804], eax
mov eax, dword [ebp - 0x1b8]
mov dword [ebp - 0x328], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1e8]
sub ecx, dword [ebp + eax - 0x6c8]
cmp dword [ebp - 0x328], ecx
jl 0x1004c293
mov dword [ebp - 0x6ac], 1
jmp 0x1004c29a
and dword [ebp - 0x6ac], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6c8]
mov dword [ebp - 0x1c0], eax
imul eax, dword [ebp - 0x1c0], 0xc772
cmp eax, 0x9c0d
jne 0x1004c2ca
mov dword [ebp - 0x41c], 1
jmp 0x1004c2d1
and dword [ebp - 0x41c], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x41c]
mov dword [ebp + eax - 0x6c8], ecx
cmp dword [ebp - 0xdc], 0xdbe6a916
jb 0x1004c2fc
mov dword [ebp - 0x330], 1
jmp 0x1004c303
and dword [ebp - 0x330], 0
cmp dword [ebp - 0x330], 0xfffffffd
jle 0x1004c318
mov dword [ebp - 0x4e4], 1
jmp 0x1004c31f
and dword [ebp - 0x4e4], 0
mov eax, dword [ebp - 0x588]
cmp dword [ebp - 0x4e4], eax
je 0x1004c339
mov dword [ebp - 0x64c], 1
jmp 0x1004c340
and dword [ebp - 0x64c], 0
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x844], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x6c8], 0
je 0x1004c371
cmp dword [ebp - 0xdc], 0
je 0x1004c371
mov dword [ebp - 0x338], 1
jmp 0x1004c378
and dword [ebp - 0x338], 0
mov eax, dword [ebp - 0x338]
mov dword [ebp - 0x590], eax
cmp dword [ebp - 0x150], 0
jne 0x1004c501
mov dword [ebp - 0x190], 0
jmp 0x1004c3aa
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 3
jge 0x1004c3c6
mov eax, dword [ebp - 0x190]
mov dword [ebp + eax*4 - 0x704], 0x69fdf99f
jmp 0x1004c39d
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x704], 0xfffffff3
jmp 0x1004c3f1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x704]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x704], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x704], 0xffffffe5
jne 0x1004c4f6
mov dword [ebp - 0x12c], 0
jmp 0x1004c41d
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 3
jge 0x1004c439
mov eax, dword [ebp - 0x12c]
mov dword [ebp + eax*4 - 0x6e0], 0x53644469
jmp 0x1004c410
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x6e0], 0
jmp 0x1004c464
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x6e0]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x6e0], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x6e0], 0x15
jne 0x1004c4f1
mov dword [ebp - 0x198], 0
jmp 0x1004c48c
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 3
jge 0x1004c4a8
mov eax, dword [ebp - 0x198]
mov dword [ebp + eax*4 - 0x958], 5
jmp 0x1004c47f
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x958], 0xffffffff
push 0x5796
push 0x64e0
push 1
push 1
push 0x76
push 0x6a90
push 0x6c4d
push 0x3d6b
push 1
push 0x180e
push 0x28c4
call fcn.10044897
add esp, 0x2c
jmp 0x1004c44b
jmp 0x1004c3d8
mov eax, dword [ebp - 0x74]
and dword [eax], 0
jmp 0x1004f45b
mov dword [ebp - 0x38], 0x8872
mov dword [ebp - 0x148], 1
mov dword [ebp - 0x174], 0xe0fc36fe
mov dword [ebp - 0x200], 4
push 1
push 0x17f5
push 0x3130
push 0
call fcn.10048da1
add esp, 0x10
cmp dword [ebp - 0x38], 0
jne 0x1004c5b9
mov eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x38]
jl 0x1004c559
cmp dword [ebp - 0x38], 0
jne 0x1004c559
and dword [ebp - 0x424], 0
jmp 0x1004c563
mov dword [ebp - 0x424], 1
cmp dword [ebp - 0x424], 1
jge 0x1004c578
mov dword [ebp - 0x340], 1
jmp 0x1004c57f
and dword [ebp - 0x340], 0
cmp dword [ebp - 0x340], 0xfffffff7
je 0x1004c594
mov dword [ebp - 0x494], 1
jmp 0x1004c59b
and dword [ebp - 0x494], 0
mov eax, dword [ebp - 0x494]
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 0
jne 0x1004c5b9
and dword [ebp - 0x348], 0
jmp 0x1004c5c3
mov dword [ebp - 0x348], 1
cmp dword [ebp - 0x348], 0xfffffffa
jg 0x1004c5de
cmp dword [ebp - 0x38], 0
je 0x1004c5de
mov dword [ebp - 0x42c], 1
jmp 0x1004c5e5
and dword [ebp - 0x42c], 0
mov eax, dword [ebp - 0x42c]
mov dword [ebp - 0x174], eax
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0x200], eax
mov eax, dword [ebp - 0x200]
imul eax, dword [ebp - 0x38]
imul eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x38]
jge 0x1004c61c
mov dword [ebp - 0x350], 1
jmp 0x1004c623
and dword [ebp - 0x350], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x350], eax
jg 0x1004c847
mov dword [ebp - 0x654], 5
push 1
lea ecx, [ebp - 0x758]
call fcn.1001f1f8
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x4cc], 0x4e8f
mov dword [ebp - 0x598], 0x10009144
cmp dword [ebp - 0x4cc], 0x4ef0
jle 0x1004c782
and dword [ebp - 0x194], 0
jmp 0x1004c68a
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 0x5f92
jge 0x1004c782
and dword [ebp - 0x140], 0
jmp 0x1004c6b0
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 0x4840
jge 0x1004c77d
and dword [ebp - 0x1a0], 0
jmp 0x1004c6d6
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 0x7b14
jge 0x1004c778
and dword [ebp - 0x138], 0
jmp 0x1004c6fc
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0x3873
jge 0x1004c773
mov eax, dword [ebp - 0x1a0]
imul eax, dword [ebp - 0x138]
mov edx, dword [ebp - 0x194]
mov ecx, dword [ebp - 0x140]
shl edx, cl
and eax, edx
cdq
mov dword [ebp - 0x5e4], eax
mov dword [ebp - 0x5e0], edx
push dword [ebp - 0x5e0]
push dword [ebp - 0x5e4]
lea ecx, [ebp - 0x9c0]
call fcn.1000aa9e
pop ecx
pop ecx
mov dword [ebp - 0x694], eax
mov ecx, dword [ebp - 0x694]
call fcn.1001edec
push eax
call fcn.10058a1f
pop ecx
lea ecx, [ebp - 0x9c0]
call fcn.1001ede2
jmp 0x1004c6ef
jmp 0x1004c6c9
jmp 0x1004c6a3
jmp 0x1004c67d
lea eax, [ebp - 0x758]
push eax
lea eax, [ebp - 0x84c]
push eax
push 0x7a03
push 1
push 0x5a3c
push 0
push 0x536e
push 0x658b
push 0x5fcf
call fcn.1004a267
add esp, 0x24
mov byte [ebp - 4], 0xe
cmp dword [ebp - 0x4cc], 0x4e60
jge 0x1004c7d1
push dword [ebp - 0x598]
call fcn.10058a1f
pop ecx
jmp 0x1004c7ed
mov dword [ebp - 4], 0xd
jmp 0x1004c7fd
lea eax, [ebp - 0x654]
push eax
lea eax, [ebp - 0x174]
push eax
push 0x428c
lea eax, [ebp - 0x148]
push eax
push 0x37a4
lea eax, [ebp - 0x758]
push eax
lea eax, [ebp - 0x200]
push eax
push 0
push 0
call fcn.100460c2
add esp, 0x24
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x758]
call fcn.1001f27a
jmp 0x1004c88b
push 0x7fbc
push 0x40ef
push 0x4fd3
push 0x2f30
push 0x4ade
push 0x6815
push 1
lea eax, [ebp - 0x174]
push eax
push 0x127b
push 0x172f
lea eax, [ebp - 0x148]
push eax
push 1
push 0
call fcn.10040091
add esp, 0x34
push 0x1fc9
push 0x4382
push 0x7d1c
push 1
push 0x54e6
push 0x3f01
push dword [ebp - 0xbc]
push 0x981
push 0x2fec
push 0xea4
push 0x7810
push 0x4501
lea eax, [ebp - 0x30]
push eax
push 0xcd1
push 0x4921
lea eax, [ebp - 0x854]
push eax
push 0x4344
push 1
push 0x4800
push 0
push 0x366c
push 0x4b05
push 0x18d0
push 0x3e3c
push 0x39da
push 0x1693
push 0x2fc
push 0x22af
push 0x422
push 0xed6
push dword [ebp - 0x1c8]
push 0x25d1
lea eax, [ebp - 0x150]
push eax
call fcn.10044d08
add esp, 0x84
mov dword [ebp - 0x5b0], 0xed15de05
mov dword [ebp - 0x608], 0xffffffff
mov dword [ebp - 0x5a0], 0xa8fe2430
mov dword [ebp - 0x6b4], 6
mov dword [ebp - 0x5a8], 0xfa85f88e
mov dword [ebp - 0x5b8], 0
mov dword [ebp - 0x65c], 2
mov dword [ebp - 0x604], 0x39d5b611
mov byte [ebp - 0x4d], 0
push 1
push 1
push 0x71a3
push 0x6371
push 0x6a82
lea eax, [ebp - 0x4d]
push eax
call fcn.10044b95
add esp, 0x18
push 0x34e9
push 0x2c33
lea eax, [ebp - 0x5a0]
push eax
push 1
push 0x2dcb
lea eax, [ebp - 0x6b4]
push eax
push 0x1fd4
push 0x27e6
push 0x22f4
push 0x6708
lea eax, [ebp - 0x5a8]
push eax
lea eax, [ebp - 0x65c]
push eax
push 0x1c0a
push 0x176c
push 0x4065
push 0x56f5
push 0x6e29
push 1
push 0x78d
push 1
lea eax, [ebp - 0x5b0]
push eax
lea eax, [ebp - 0x604]
push eax
push 0x4df7
push 0x6c5d
push 0x3386
push 0xd1e
push 0x3be8
lea eax, [ebp - 0x5b8]
push eax
push 0x12c9
push 0x7125
push 0x14a6
lea eax, [ebp - 0x608]
push eax
push 0x4606
call fcn.10044d08
add esp, 0x84
lea eax, [ebp - 0xbc]
push eax
push 0xec9
lea eax, [ebp - 0x30]
push eax
push 0x2c7c
push 0x74fe
push 0x6e47
push 1
lea eax, [ebp - 0x1f0]
push eax
push 1
push 1
call fcn.1003eec8
add esp, 0x28
mov dword [ebp - 0x34], 0x60f951fe
mov dword [ebp - 0x434], 1
push 3
lea ecx, [ebp - 0x7c4]
call fcn.1001f1f8
mov dword [ebp - 4], 0x10
push 0
push 0x52d4
lea eax, [ebp - 0x7c4]
push eax
push 0x7bc
push 1
push 0x65ce
lea eax, [ebp - 0x85c]
push eax
call fcn.10044604
add esp, 0x1c
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x864], eax
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x34]
jge 0x1004cb00
mov dword [ebp - 0x358], 1
jmp 0x1004cb07
and dword [ebp - 0x358], 0
mov eax, dword [ebp - 0x358]
sub eax, dword [ebp - 0x434]
cmp eax, dword [ebp - 0x434]
jg 0x1004cb27
mov dword [ebp - 0x360], 1
jmp 0x1004cb2e
and dword [ebp - 0x360], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x360], eax
jg 0x1004cb45
mov dword [ebp - 0x49c], 1
jmp 0x1004cb4c
and dword [ebp - 0x49c], 0
mov eax, dword [ebp - 0x49c]
add eax, 3
mov ecx, dword [ebp - 0x34]
imul ecx, eax
mov eax, dword [ebp - 0x34]
imul eax, ecx
test eax, eax
je 0x1004cb77
cmp dword [ebp - 0x34], 0
je 0x1004cb77
mov dword [ebp - 0x368], 1
jmp 0x1004cb7e
and dword [ebp - 0x368], 0
mov eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x368]
jle 0x1004cb98
mov dword [ebp - 0x43c], 1
jmp 0x1004cb9f
and dword [ebp - 0x43c], 0
push 2
lea ecx, [ebp - 0x7c4]
call fcn.1001f296
mov ecx, dword [ebp - 0x43c]
mov dword [eax], ecx
mov byte [ebp - 0x4e], 0
push 0x3304
push 1
lea eax, [ebp - 0x4e]
push eax
push 0x1efb
push 1
call fcn.100454e2
add esp, 0x14
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7c4]
call fcn.1001f27a
push 0
push 0x7b0f
push 0x376e
push 0x6544
push 0xb64
push 0x954
lea eax, [ebp - 0x150]
push eax
push 0x3f52
push 0x60fb
push 0x4e5b
lea eax, [ebp - 0x4f8]
push eax
push 1
lea eax, [ebp - 0xbc]
push eax
call fcn.100437f9
add esp, 0x34
mov dword [ebp - 0x610], 0x60f951fe
mov dword [ebp - 0x5c0], 1
push 3
lea ecx, [ebp - 0x770]
call fcn.1001f1f8
mov dword [ebp - 4], 0x11
lea eax, [ebp - 0x770]
push eax
lea eax, [ebp - 0x86c]
push eax
push 0x2789
push 0x2a0b
push 0x4dae
push 1
push 1
push 1
call fcn.100456fe
add esp, 0x20
lea eax, [ebp - 0x770]
push eax
push 0x5110
push 1
push 0x7f4b
push 0x1364
push 0x3a6
push 1
push 0x276e
lea eax, [ebp - 0x5c0]
push eax
push 0x5eeb
push 0x7793
lea eax, [ebp - 0x610]
push eax
push 1
call fcn.1003fc27
add esp, 0x34
mov byte [ebp - 0x50], 0
push 0x76ff
push 0x433e
push 1
push 1
lea eax, [ebp - 0x50]
push eax
call fcn.1004588d
add esp, 0x14
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x770]
call fcn.1001f27a
cmp dword [ebp - 0x4f8], 0
je 0x1004ce3b
mov dword [ebp - 0x370], 0x8cccddd
push 2
lea ecx, [ebp - 0x6f8]
call fcn.1001f1f8
mov dword [ebp - 4], 0x12
push 3
lea ecx, [ebp - 0x7b8]
call fcn.1001f1f8
mov byte [ebp - 4], 0x13
mov dword [ebp - 0x618], 0x21ebc5f9
push 0x2700
lea eax, [ebp - 0x5c8]
push eax
push 0x3cc3
push 0
push 0x1d5c
push 1
lea eax, [ebp - 0x6f8]
push eax
push 0x2db0
call fcn.10046747
add esp, 0x20
push 1
push 0x31ba
lea eax, [ebp - 0x5c8]
push eax
push 0x67ae
push 0x5877
push 1
lea eax, [ebp - 0x7b8]
push eax
call fcn.10045a5d
add esp, 0x1c
push 0x7aba
push 0
lea eax, [ebp - 0x370]
push eax
push 0x244b
push 1
lea eax, [ebp - 0x6f8]
push eax
call fcn.100413e3
add esp, 0x18
lea eax, [ebp - 0x370]
push eax
lea eax, [ebp - 0x7b8]
push eax
lea eax, [ebp - 0x618]
push eax
push 0x41ed
push 0x5fcf
push 0x3d9b
push 1
push 0xbc
lea eax, [ebp - 0x6f8]
push eax
push 0x3d0e
push 0x35fc
push 1
push 1
call fcn.10040091
add esp, 0x34
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x7b8]
call fcn.1001f27a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6f8]
call fcn.1001f27a
lea eax, [ebp - 0x4f8]
push eax
push 0x105e
lea eax, [ebp - 0x30]
push eax
push 0
push 0x36f8
push 0x865
call fcn.100512bb
add esp, 0x18
push 2
lea ecx, [ebp - 0x510]
call fcn.1001f1f8
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x5dc], 0xfffe
mov dword [ebp - 0x620], 0xffffffff
push 0x6bfc
push 0x540e
push 0x148
push 0xe1d
push 1
push 0x4fde
push 0x3990
push 0x37c9
push 0x2aad
push 1
lea eax, [ebp - 0x510]
push eax
push 0x651c
push 0x7477
lea eax, [ebp - 0x874]
push eax
call fcn.100402b6
add esp, 0x38
push 0
lea ecx, [ebp - 0x510]
call fcn.1001f296
mov dword [eax], 0xfffffffe
jmp 0x1004cee8
push 0
lea ecx, [ebp - 0x510]
call fcn.1001f296
mov dword [ebp - 0x378], eax
mov eax, dword [ebp - 0x378]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x378]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x510]
call fcn.1001f296
cmp dword [eax], 0xfffffff9
jne 0x1004cfa6
push 3
lea ecx, [ebp - 0x788]
call fcn.1001f1f8
mov byte [ebp - 4], 0x15
mov dword [ebp - 0x5d0], 0xfffffff7
push 0x18c7
push 0xd65
push 0x16dd
lea eax, [ebp - 0x788]
push eax
push 0x5af4
push 0x79b5
push 1
lea eax, [ebp - 0x87c]
push eax
push 1
push 0x44d4
push 1
call fcn.10045c2e
add esp, 0x2c
push 0x2947
push 0x50fd
lea eax, [ebp - 0x510]
push eax
push 0x702f
push 1
push 0x68ec
push 0x394
lea eax, [ebp - 0x5d0]
push eax
push 1
lea eax, [ebp - 0x788]
push eax
push 0x64c0
call fcn.100404bd
add esp, 0x2c
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x788]
call fcn.1001f27a
jmp 0x1004cec4
lea eax, [ebp - 0x510]
push eax
push 1
push 0x3686
lea eax, [ebp - 0x620]
push eax
push 1
lea eax, [ebp - 0x5dc]
push eax
push 0x45c2
push 0x7c4e
call fcn.10045ed8
add esp, 0x20
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x510]
call fcn.1001f27a
push dword [ebp - 0x30]
call fcn.1003d0b7
pop ecx
test eax, eax
jne 0x1004d062
mov dword [ebp - 0x628], 0xa48bbca6
push 0x56d9
push 0xe33
lea eax, [ebp - 0x628]
push eax
push 0x14a0
push 1
push 1
call fcn.10046225
add esp, 0x18
push 0x6978
push 0x287
push 0x3ad3
push 0x735
push 0x3248
push 0x5033
push 1
push 0x2e46
push 0x59b0
push 1
push 0x29c9
call fcn.10046324
add esp, 0x2c
mov eax, dword [ebp - 0x74]
and dword [eax], 0
jmp 0x1004f45b
lea eax, [ebp - 0x30]
push eax
push 0xc91
push 0x63ef
push 1
push 0x45d0
push 1
push 0x7ab7
push 0x789d
call fcn.10046747
add esp, 0x20
mov dword [ebp - 0x388], 0x4414
mov dword [ebp - 0x90], 0x277ebd00
mov dword [ebp - 0x630], 6
mov dword [ebp - 0x390], 0xa812c005
mov dword [ebp - 0x3c], 0
jmp 0x1004d0c3
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 1
jge 0x1004d0d6
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x20], 0x624039b
jmp 0x1004d0bc
mov dword [ebp - 0x3c], 0
jmp 0x1004d0e6
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 3
jge 0x1004d0fc
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x740], 0xde6f
jmp 0x1004d0df
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x20], 2
jmp 0x1004d121
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x20], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x20], 0xffffffed
je 0x1004d175
mov dword [ebp - 0x18c], 1
mov dword [ebp - 0x18c], 0
jmp 0x1004d151
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0x1d
je 0x1004d173
mov dword [ebp - 0x444], 0xe307
mov eax, dword [ebp - 0x444]
dec eax
mov dword [ebp - 0x444], eax
jmp 0x1004d144
jmp 0x1004d10c
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x20], 0
jne 0x1004d261
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20]
cmp eax, dword [ebp - 0x90]
jle 0x1004d1b1
mov dword [ebp - 0x380], 1
jmp 0x1004d1b8
and dword [ebp - 0x380], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20]
cmp eax, dword [ebp - 0x380]
jg 0x1004d1d6
mov dword [ebp - 0x44c], 1
jmp 0x1004d1dd
and dword [ebp - 0x44c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x740]
cmp eax, dword [ebp - 0x388]
jge 0x1004d1fe
mov dword [ebp - 0x4a4], 1
jmp 0x1004d205
and dword [ebp - 0x4a4], 0
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x20]
imul ecx, dword [ebp - 0x4a4]
cmp ecx, dword [ebp + eax - 0x20]
jg 0x1004d22e
mov dword [ebp - 0x5e8], 1
jmp 0x1004d235
and dword [ebp - 0x5e8], 0
mov eax, dword [ebp - 0x388]
mov dword [ebp - 0x884], eax
mov dword [ebp - 0x630], 0x4b14151c
mov dword [ebp - 0x390], 0xf67a
mov eax, dword [ebp - 0x44c]
sub eax, dword [ebp - 0x390]
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20]
mov dword [ebp - 0x898], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20]
mov dword [ebp - 0x8a0], eax
cmp dword [ebp - 0x90], 0
je 0x1004d29f
cmp dword [ebp - 0x90], 0
je 0x1004d29f
mov dword [ebp - 0x5f4], 1
jmp 0x1004d2a6
and dword [ebp - 0x5f4], 0
push 4
pop eax
shl eax, 1
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x740]
cmp ecx, dword [ebp + eax - 0x740]
je 0x1004d2cc
mov dword [ebp - 0x4d4], 1
jmp 0x1004d2d3
and dword [ebp - 0x4d4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x4d4]
mov dword [ebp + eax - 0x20], ecx
mov eax, dword [ebp - 0x30]
mov eax, dword [eax]
cmp dword [eax + 0x28], 0
je 0x1004e7e7
mov dword [ebp - 0x398], 0xfffffffe
push 3
lea ecx, [ebp - 0x238]
call fcn.1001f1f8
mov dword [ebp - 4], 0x16
mov dword [ebp - 0x264], 0x8fa4
push 0xc56
push 1
lea eax, [ebp - 0x238]
push eax
push 0
lea eax, [ebp - 0x98]
push eax
push 0xd9f
push 0x2da9
call fcn.100435bf
add esp, 0x1c
mov dword [ebp - 0x98], 0
jmp 0x1004d35c
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 1
jge 0x1004d378
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0x1d0], 0x7609fa85
jmp 0x1004d34f
mov esi, dword [ebp - 0x398]
push 0
lea ecx, [ebp - 0x238]
call fcn.1001f296
mov dword [eax], esi
push 0
lea ecx, [ebp - 0x238]
call fcn.1001f296
cmp dword [eax], 1
je 0x1004d3ab
mov dword [ebp - 0x638], 1
jmp 0x1004d3b2
and dword [ebp - 0x638], 0
push 0
lea ecx, [ebp - 0x238]
call fcn.1001f296
cmp dword [eax], 0
jne 0x1004d3d0
mov dword [ebp - 0x454], 1
jmp 0x1004d3d7
and dword [ebp - 0x454], 0
mov eax, dword [ebp - 0x398]
add eax, dword [ebp - 0x454]
je 0x1004d3fa
mov eax, 0x41720348
test eax, eax
je 0x1004d3fa
mov dword [ebp - 0x600], 1
jmp 0x1004d401
and dword [ebp - 0x600], 0
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
or edx, 0xffffffff
sub edx, dword [ebp + ecx - 0x1d0]
cmp edx, dword [ebp + eax - 0x1d0]
je 0x1004d42c
mov dword [ebp - 0x240], 1
jmp 0x1004d433
and dword [ebp - 0x240], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1d0]
cmp dword [ebp - 0x240], eax
jge 0x1004d454
mov dword [ebp - 0x244], 1
jmp 0x1004d45b
and dword [ebp - 0x244], 0
push 2
lea ecx, [ebp - 0x238]
call fcn.1001f296
mov ecx, dword [ebp - 0x244]
cmp ecx, dword [eax]
jl 0x1004d484
cmp dword [ebp - 0x264], 0
jne 0x1004d484
and dword [ebp - 0x24c], 0
jmp 0x1004d48e
mov dword [ebp - 0x24c], 1
push 0
lea ecx, [ebp - 0x238]
call fcn.1001f296
mov ecx, dword [ebp - 0x24c]
imul ecx, dword [eax]
cmp ecx, 0x9d5b
jle 0x1004d4b8
mov dword [ebp - 0x254], 1
jmp 0x1004d4bf
and dword [ebp - 0x254], 0
push 1
lea ecx, [ebp - 0x238]
call fcn.1001f296
mov eax, dword [eax]
cmp eax, dword [ebp - 0x254]
jge 0x1004d4e2
mov dword [ebp - 0x25c], 1
jmp 0x1004d4e9
and dword [ebp - 0x25c], 0
mov esi, dword [ebp - 0x25c]
sub esi, dword [ebp - 0x264]
push 0
lea ecx, [ebp - 0x238]
call fcn.1001f296
mov dword [eax], esi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x238]
call fcn.1001f27a
mov eax, dword [ebp - 0x30]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x150]
add ecx, dword [eax + 0x28]
mov dword [ebp - 0x3c8], ecx
mov dword [ebp - 0x17c], 0xcc14173b
push 3
lea ecx, [ebp - 0x74c]
call fcn.1001f1f8
mov dword [ebp - 4], 0x17
mov dword [ebp - 0x26c], 0xe12aa53f
push 2
lea ecx, [ebp - 0x7a0]
call fcn.1001f1f8
mov byte [ebp - 4], 0x18
mov dword [ebp - 0x14], 0
jmp 0x1004d570
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x1004d586
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x220], 0xb7cefa9d
jmp 0x1004d569
push 1
push 0x42ad
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x74c]
push eax
push 0x4a3d
push 1
push 0x5377
push 0x6076
push 0x26b
call fcn.10046860
add esp, 0x24
mov dword [ebp - 0x14], 0
jmp 0x1004d5c6
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x1004d5dc
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x970], 0xb5f0b10
jmp 0x1004d5bf
mov dword [ebp - 0x14], 0
jmp 0x1004d5ec
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x1004d602
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x964], 0xc36fe5ab
jmp 0x1004d5e5
push 0x11ef
lea eax, [ebp - 0x7a0]
push eax
push 1
push 0
lea eax, [ebp - 0x14]
push eax
push 0x5f3
call fcn.10048168
add esp, 0x18
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x220]
cmp eax, dword [ebp - 0x17c]
jl 0x1004d644
mov dword [ebp - 0x218], 1
jmp 0x1004d64b
and dword [ebp - 0x218], 0
cmp dword [ebp - 0x17c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x220]
mov dword [ebp - 0x8a8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x220]
mov dword [ebp - 0x26c], eax
cmp dword [ebp - 0x26c], 0
je 0x1004d696
cmp dword [ebp - 0x17c], 0
je 0x1004d696
mov dword [ebp - 0x274], 1
jmp 0x1004d69d
and dword [ebp - 0x274], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x220]
cmp dword [ebp - 0x274], eax
jl 0x1004d6be
mov dword [ebp - 0x284], 1
jmp 0x1004d6c5
and dword [ebp - 0x284], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x220]
mov dword [ebp - 0x27c], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x27c]
mov dword [ebp + eax - 0x970], ecx
mov eax, dword [ebp - 0x27c]
cmp eax, dword [ebp - 0x284]
je 0x1004d704
mov dword [ebp - 0x28c], 1
jmp 0x1004d70b
and dword [ebp - 0x28c], 0
push 1
lea ecx, [ebp - 0x74c]
call fcn.1001f296
mov ecx, dword [ebp - 0x218]
mov dword [eax], ecx
mov eax, dword [ebp - 0x218]
cmp eax, dword [ebp - 0x28c]
je 0x1004d73a
mov dword [ebp - 0x294], 1
jmp 0x1004d741
and dword [ebp - 0x294], 0
push 4
pop eax
shl eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov edx, dword [ebp - 0x294]
sub edx, dword [ebp + ecx - 0x964]
cmp edx, dword [ebp + eax - 0x220]
jg 0x1004d76f
mov dword [ebp - 0x29c], 1
jmp 0x1004d776
and dword [ebp - 0x29c], 0
push 1
lea ecx, [ebp - 0x7a0]
call fcn.1001f296
mov ecx, dword [ebp - 0x29c]
mov dword [eax], ecx
lea eax, [ebp - 0x17c]
push eax
push 1
push 0x1a7
push 0x32c5
push 1
push 0x4aaf
push 1
push 0x6b1a
call fcn.10046a13
add esp, 0x20
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x7a0]
call fcn.1001f27a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x74c]
call fcn.1001f27a
cmp dword [ebp - 0x3c8], 0
jne 0x1004decc
mov dword [ebp - 0x1c], 3
mov dword [ebp - 0x2dc], 0
mov dword [ebp - 0x1f8], 0x88d0d3f7
mov dword [ebp - 0xa0], 0x6d6dbc1c
mov dword [ebp - 0x1d8], 2
mov dword [ebp - 0x158], 0
jmp 0x1004d827
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 1
jge 0x1004d843
mov eax, dword [ebp - 0x158]
mov dword [ebp + eax*4 - 0x2ec], 0xffffffff
jmp 0x1004d81a
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x8b0], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x8b8], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x934], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x93c], eax
mov dword [ebp - 0xa0], 1
cmp dword [ebp - 0xa0], 0x4f77722
je 0x1004d889
mov dword [ebp - 0x640], 1
jmp 0x1004d890
and dword [ebp - 0x640], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x944], eax
cmp dword [ebp - 0xa0], 0x6bd2
jl 0x1004d8b1
mov dword [ebp - 0x2a4], 1
jmp 0x1004d8b8
and dword [ebp - 0x2a4], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x2a4], eax
jge 0x1004d8cf
mov dword [ebp - 0x2ac], 1
jmp 0x1004d8d6
and dword [ebp - 0x2ac], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x2ac], eax
jle 0x1004d8f6
cmp dword [ebp - 0xa0], 0
je 0x1004d8f6
mov dword [ebp - 0x2b4], 1
jmp 0x1004d8fd
and dword [ebp - 0x2b4], 0
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x2b4]
cmp eax, dword [ebp - 0x1c]
jg 0x1004d918
mov dword [ebp - 0x2bc], 1
jmp 0x1004d91f
and dword [ebp - 0x2bc], 0
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x2bc]
je 0x1004d936
mov dword [ebp - 0x2c4], 1
jmp 0x1004d93d
and dword [ebp - 0x2c4], 0
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x2c4]
jg 0x1004d954
mov dword [ebp - 0x2cc], 1
jmp 0x1004d95b
and dword [ebp - 0x2cc], 0
mov eax, dword [ebp - 0x2cc]
sub eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 0xc56d
jge 0x1004d982
mov dword [ebp - 0x2d4], 1
jmp 0x1004d989
and dword [ebp - 0x2d4], 0
cmp dword [ebp - 0x2d4], 3
je 0x1004d99e
mov dword [ebp - 0x2e4], 1
jmp 0x1004d9a5
and dword [ebp - 0x2e4], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x2dc], eax
mov eax, dword [ebp - 0x2dc]
mov dword [ebp - 0x1f8], eax
mov eax, dword [ebp - 0x1f8]
cmp eax, dword [ebp - 0x2e4]
jg 0x1004d9dd
cmp dword [ebp - 0x1d8], 0
je 0x1004d9dd
mov dword [ebp - 0x648], 1
jmp 0x1004d9e4
and dword [ebp - 0x648], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x94c], eax
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x938], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x8fc], eax
mov eax, dword [ebp - 0x1f8]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x2ec], eax
mov eax, dword [ebp - 0x1c]
add eax, 8
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x2ec], eax
mov dword [ebp - 0x28], 0xfffffffa
mov dword [ebp - 0x40], 0x3c61
mov dword [ebp - 0x84], 1
mov dword [ebp - 0x32c], 1
mov dword [ebp - 0x614], 0x133ecb4
push 1
lea ecx, [ebp - 0x764]
call fcn.1001f1f8
mov dword [ebp - 4], 0x19
mov dword [ebp - 0x364], 0
mov dword [ebp - 0x518], 0xfffffff6
mov dword [ebp - 0x7f0], 2
mov dword [ebp - 0x7ec], 2
mov dword [ebp - 0x7e8], 2
mov dword [ebp - 0x7e4], 2
mov dword [ebp - 0x19c], 0
jmp 0x1004dabd
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 1
jge 0x1004dadf
push dword [ebp - 0x19c]
lea ecx, [ebp - 0x764]
call fcn.1001f296
mov dword [eax], 4
jmp 0x1004dab0
cmp dword [ebp - 0x28], 0
je 0x1004db4b
mov eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0x28]
je 0x1004db07
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x8a4], eax
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x40]
jg 0x1004db07
and dword [ebp - 0x2f4], 0
jmp 0x1004db11
mov dword [ebp - 0x2f4], 1
mov eax, dword [ebp - 0x2f4]
sub eax, 0x6a1c17c7
cmp eax, dword [ebp - 0x40]
jg 0x1004db2d
mov dword [ebp - 0x2fc], 1
jmp 0x1004db34
and dword [ebp - 0x2fc], 0
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x2fc]
jl 0x1004db4b
mov dword [ebp - 0x304], 1
jmp 0x1004db52
and dword [ebp - 0x304], 0
mov eax, dword [ebp - 0x304]
sub eax, 0x4a7c23f2
cmp eax, dword [ebp - 0x28]
jne 0x1004db6d
push 6
pop eax
test eax, eax
je 0x1004dcb4
cmp dword [ebp - 0x84], 0
je 0x1004dcb4
mov dword [ebp - 0x60c], 1
mov dword [ebp - 0x40], 0
jmp 0x1004db94
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0x13
jge 0x1004dcaf
mov dword [ebp - 0x810], 0x2a4b15d3
mov dword [ebp - 0x28], 2
jmp 0x1004dbb8
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0x13
jle 0x1004dc71
mov dword [ebp - 0x664], 0xfffd
mov dword [ebp - 0x84], 0xc
jmp 0x1004dbe5
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0x32
jle 0x1004dc62
mov dword [ebp - 0x160], 9
push 0x4010
push 1
push 0x2e11
push 1
push 0x7f9a
push 0x42aa
push 0x4d33
push 1
push 0x4d53
push 0x6d6c
call fcn.10047ee0
add esp, 0x28
mov dword [ebp - 0x160], 0xffffffe3
jmp 0x1004dc42
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 0xffffffe4
jge 0x1004dc5d
lea eax, [ebp - 0x60c]
push eax
push 0
call fcn.10049509
pop ecx
pop ecx
jmp 0x1004dc35
jmp 0x1004dbd8
mov dword [ebp - 0x664], 0
jmp 0x1004dbb1
push 0x11ad
push 0x333c
push 0x59f7
push 0xe20
push 1
push 0x12c9
push 0x11b6
push 1
push 0x2ffd
push 0x74bd
push 0x7c58
call fcn.1004829d
add esp, 0x2c
jmp 0x1004db8d
jmp 0x1004de8a
mov dword [ebp - 0x184], 0x57461d0e
mov dword [ebp - 0x354], 0x730e92f9
cmp dword [ebp - 0x32c], 0
je 0x1004de3f
cmp dword [ebp - 0x84], 0
jne 0x1004dcf0
cmp dword [ebp - 0x184], 0
jne 0x1004dcf0
and dword [ebp - 0x30c], 0
jmp 0x1004dcfa
mov dword [ebp - 0x30c], 1
cmp dword [ebp - 0x30c], 0
jne 0x1004dd13
push 2
pop eax
test eax, eax
jne 0x1004dd13
and dword [ebp - 0x314], 0
jmp 0x1004dd1d
mov dword [ebp - 0x314], 1
mov eax, dword [ebp - 0x314]
dec eax
sub eax, dword [ebp - 0x184]
imul eax, dword [ebp - 0x614]
mov dword [ebp - 0x31c], eax
push 0
lea ecx, [ebp - 0x764]
call fcn.1001f296
mov ecx, dword [ebp - 0x31c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x184]
cmp dword [ebp - 0x31c], eax
jg 0x1004dd66
mov dword [ebp - 0x324], 1
jmp 0x1004dd6d
and dword [ebp - 0x324], 0
cmp dword [ebp - 0x324], 0xde30
jl 0x1004dd85
mov dword [ebp - 0x23c], 1
jmp 0x1004dd8c
and dword [ebp - 0x23c], 0
mov eax, dword [ebp - 0x32c]
cmp dword [ebp - 0x23c], eax
jle 0x1004dda6
mov dword [ebp - 0x33c], 1
jmp 0x1004ddad
and dword [ebp - 0x33c], 0
cmp dword [ebp - 0x33c], 9
ja 0x1004ddc2
mov dword [ebp - 0x344], 1
jmp 0x1004ddc9
and dword [ebp - 0x344], 0
mov eax, dword [ebp - 0x184]
add eax, dword [ebp - 0x344]
cmp eax, 0xffffffff
jl 0x1004dde6
mov dword [ebp - 0x34c], 1
jmp 0x1004dded
and dword [ebp - 0x34c], 0
mov eax, dword [ebp - 0x34c]
mov dword [ebp - 0x354], eax
cmp dword [ebp - 0x354], 0
je 0x1004de17
mov eax, 0xbf8c3261
test eax, eax
je 0x1004de17
mov dword [ebp - 0x35c], 1
jmp 0x1004de1e
and dword [ebp - 0x35c], 0
mov eax, dword [ebp - 0x35c]
mov dword [ebp - 0x364], eax
cmp dword [ebp - 0x364], 0
je 0x1004de3f
mov dword [ebp - 0x36c], 1
jmp 0x1004de46
and dword [ebp - 0x36c], 0
mov eax, dword [ebp - 0x36c]
mov dword [ebp - 0x518], eax
cmp dword [ebp - 0x40], 0x103ca543
jge 0x1004de6d
mov eax, 0x5e139a53
test eax, eax
jne 0x1004de6d
and dword [ebp - 0x374], 0
jmp 0x1004de77
mov dword [ebp - 0x374], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x374]
mov dword [ebp + eax - 0x7f0], ecx
mov byte [ebp - 0x52], 0
push 1
push 0x653b
push 0x5bdb
push 1
push 0x2fa4
lea eax, [ebp - 0x52]
push eax
push 0x6f3f
call fcn.10048632
add esp, 0x1c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x764]
call fcn.1001f27a
mov eax, dword [ebp - 0x74]
and dword [eax], 0
jmp 0x1004f45b
mov dword [ebp - 0x37c], 0xfffffffe
push 3
lea ecx, [ebp - 0x22c]
call fcn.1001f1f8
mov dword [ebp - 4], 0x1a
mov dword [ebp - 0x3c0], 0x8fa4
push 1
lea eax, [ebp - 0xa8]
push eax
push 1
lea eax, [ebp - 0x22c]
push eax
push 0x6140
push 1
push 0x68d4
call fcn.10048834
add esp, 0x1c
mov dword [ebp - 0xa8], 0
jmp 0x1004df33
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 1
jge 0x1004df4f
mov eax, dword [ebp - 0xa8]
mov dword [ebp + eax*4 - 0x1a8], 0x7609fa85
jmp 0x1004df26
push 1
lea eax, [ebp - 0x37c]
push eax
lea eax, [ebp - 0x22c]
push eax
push 1
call fcn.1004127f
add esp, 0x10
push 0
lea ecx, [ebp - 0x22c]
call fcn.1001f296
cmp dword [eax], 1
je 0x1004df87
mov dword [ebp - 0x51c], 1
jmp 0x1004df8e
and dword [ebp - 0x51c], 0
push 0
lea ecx, [ebp - 0x22c]
call fcn.1001f296
cmp dword [eax], 0
jne 0x1004dfac
mov dword [ebp - 0x384], 1
jmp 0x1004dfb3
and dword [ebp - 0x384], 0
mov eax, dword [ebp - 0x37c]
add eax, dword [ebp - 0x384]
je 0x1004dfd6
mov eax, 0x41720348
test eax, eax
je 0x1004dfd6
mov dword [ebp - 0x524], 1
jmp 0x1004dfdd
and dword [ebp - 0x524], 0
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
or edx, 0xffffffff
sub edx, dword [ebp + ecx - 0x1a8]
cmp edx, dword [ebp + eax - 0x1a8]
je 0x1004e008
mov dword [ebp - 0x38c], 1
jmp 0x1004e00f
and dword [ebp - 0x38c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1a8]
cmp dword [ebp - 0x38c], eax
jge 0x1004e030
mov dword [ebp - 0x394], 1
jmp 0x1004e037
and dword [ebp - 0x394], 0
push 2
lea ecx, [ebp - 0x22c]
call fcn.1001f296
mov ecx, dword [ebp - 0x394]
cmp ecx, dword [eax]
jl 0x1004e060
cmp dword [ebp - 0x3c0], 0
jne 0x1004e060
and dword [ebp - 0x39c], 0
jmp 0x1004e06a
mov dword [ebp - 0x39c], 1
push 0
lea ecx, [ebp - 0x22c]
call fcn.1001f296
mov ecx, dword [ebp - 0x39c]
imul ecx, dword [eax]
cmp ecx, 0x9d5b
jle 0x1004e094
mov dword [ebp - 0x3b0], 1
jmp 0x1004e09b
and dword [ebp - 0x3b0], 0
push 1
lea ecx, [ebp - 0x22c]
call fcn.1001f296
mov eax, dword [eax]
cmp eax, dword [ebp - 0x3b0]
jge 0x1004e0be
mov dword [ebp - 0x3b8], 1
jmp 0x1004e0c5
and dword [ebp - 0x3b8], 0
mov esi, dword [ebp - 0x3b8]
sub esi, dword [ebp - 0x3c0]
push 0
lea ecx, [ebp - 0x22c]
call fcn.1001f296
mov dword [eax], esi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x22c]
call fcn.1001f27a
push 0
push 1
push 0xdeadbeef
call dword [ebp - 0x3c8]
mov dword [ebp - 0x52c], eax
cmp dword [ebp - 0x52c], 0
jne 0x1004e263
mov dword [ebp - 0x130], 0xd313dd33
push 2
lea ecx, [ebp - 0x8f8]
call fcn.1001f1f8
mov dword [ebp - 4], 0x1b
mov dword [ebp - 0x534], 0xc5735e4b
lea eax, [ebp - 0x920]
push eax
push 1
push 0x365b
lea eax, [ebp - 0x8f8]
push eax
push 1
push 0x19b3
call fcn.100413e3
add esp, 0x18
mov dword [ebp - 0x130], 0
jmp 0x1004e176
mov eax, dword [ebp - 0x130]
dec eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0xfffffffa
jne 0x1004e203
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0xb0], 0
jmp 0x1004e1a6
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 1
jg 0x1004e1f3
push 1
push 0x2cb8
push 1
push 0x6234
call fcn.1004894f
add esp, 0x10
push 0x5a3e
push 0x5596
push 0x1cfa
push 1
lea eax, [ebp - 0x534]
push eax
push 1
push 0x685c
push 0x320d
call fcn.10042c8b
add esp, 0x20
jmp 0x1004e199
cmp dword [ebp - 0xb0], 0
je 0x1004e1fe
jmp 0x1004e203
jmp 0x1004e169
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x8f8]
call fcn.1001f27a
mov dword [ebp - 0x818], 6
mov byte [ebp - 0x54], 0
push 0x6bc6
push 0x2c92
push 1
push 1
lea eax, [ebp - 0x54]
push eax
call fcn.10042f18
add esp, 0x14
mov byte [ebp - 0x56], 0
push 0x2c81
push 1
push 0x2746
push 1
lea eax, [ebp - 0x56]
push eax
call fcn.10042fbe
add esp, 0x14
mov eax, dword [ebp - 0x74]
and dword [eax], 0
jmp 0x1004f45b
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x54c], 0x5d3cc114
mov dword [ebp - 0x8ac], 1
mov dword [ebp - 0x820], 0xfffffff7
mov dword [ebp - 0x91c], 0xffffffff
mov dword [ebp - 0x828], 0x9a3a768f
mov dword [ebp - 0x554], 1
mov dword [ebp - 0x8b4], 0xac29f8d9
push 4
lea ecx, [ebp - 0x918]
call fcn.1001f1f8
mov dword [ebp - 4], 0x1c
mov dword [ebp - 0x830], 0xffffffff
mov dword [ebp - 0x420], 0x71534bb8
mov dword [ebp - 0xb8], 0
jmp 0x1004e2f1
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 2
jge 0x1004e30d
mov eax, dword [ebp - 0xb8]
mov dword [ebp + eax*4 - 0x980], 0xfffffffb
jmp 0x1004e2e4
push 0x28c5
push 0x7bb5
push 0x2833
push 0x7fa3
push 0xe03
push 0x71e8
push 0x4ddf
lea eax, [ebp - 0xb8]
push eax
push 1
push 1
push 0x34dd
push 0x97c
push 0x3323
push 1
lea eax, [ebp - 0x918]
push eax
push 0x79e6
push 0x3a5e
push 0x2abc
push 0x67e6
call fcn.100430af
add esp, 0x4c
mov dword [ebp - 0x6c], 0xc
jmp 0x1004e37f
mov eax, dword [ebp - 0x6c]
dec eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0xfffffff4
jl 0x1004e78c
mov dword [ebp - 0x134], 6
mov dword [ebp - 0xc8], 0xc17e5c28
mov dword [ebp - 0x924], 0xf7a0d7c8
mov dword [ebp - 0x1ac], 5
push 1
lea ecx, [ebp - 0x908]
call fcn.1001f1f8
mov byte [ebp - 4], 0x1d
mov dword [ebp - 0x838], 0xf1a9f139
mov dword [ebp - 0xc0], 0
jmp 0x1004e3e5
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 2
jge 0x1004e401
mov eax, dword [ebp - 0xc0]
mov dword [ebp + eax*4 - 0x4ec], 0x108f8256
jmp 0x1004e3d8
push 0x31e
push 1
lea eax, [ebp - 0xc0]
push eax
push 0x29b0
push 1
lea eax, [ebp - 0x908]
push eax
push 0x561b
call fcn.100489f3
add esp, 0x1c
mov dword [ebp - 0x134], 1
jmp 0x1004e443
mov eax, dword [ebp - 0x134]
dec eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0
jl 0x1004e751
mov dword [ebp - 0x13c], 0x121ac488
mov dword [ebp - 0x410], 0xffffffff
mov dword [ebp - 0x13c], 0
jmp 0x1004e47d
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 1
jg 0x1004e74c
mov dword [ebp - 0x8bc], 0xdf39f3c5
lea eax, [ebp - 0xc8]
push eax
push 1
push 0x24e4
push 0x1477
push 1
push 0x726
call fcn.10048c5c
add esp, 0x18
mov dword [ebp - 0xc8], 1
jmp 0x1004e4cf
mov eax, dword [ebp - 0xc8]
dec eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0
jl 0x1004e747
push 4
lea ecx, [ebp - 0x214]
call fcn.1001f1f8
mov byte [ebp - 4], 0x1e
mov dword [ebp - 0x53c], 0xc3d8d58
push 1
push 1
lea eax, [ebp - 0x840]
push eax
lea eax, [ebp - 0x214]
push eax
call fcn.10048d08
add esp, 0x10
push 1
lea ecx, [ebp - 0x214]
call fcn.1001f296
and dword [eax], 0
jmp 0x1004e547
push 1
lea ecx, [ebp - 0x214]
call fcn.1001f296
mov dword [ebp - 0x3d0], eax
mov eax, dword [ebp - 0x3d0]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x3d0]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x214]
call fcn.1001f296
cmp dword [eax], 1
jg 0x1004e733
mov dword [ebp - 0x92c], 5
mov dword [ebp - 0x544], 0
push 1
lea ecx, [ebp - 0x214]
call fcn.1001f296
mov eax, dword [eax]
xor esi, esi
inc esi
sub esi, dword [ebp + eax*4 - 0x4ec]
push 1
lea ecx, [ebp - 0x214]
call fcn.1001f296
mov eax, dword [eax]
cmp dword [ebp + eax*4 - 0x4ec], esi
jg 0x1004e5b0
or eax, 0xffffffff
jne 0x1004e5b0
and dword [ebp - 0x3d8], 0
jmp 0x1004e5ba
mov dword [ebp - 0x3d8], 1
mov eax, dword [ebp - 0x3d8]
neg eax
mov dword [ebp - 0x1ac], eax
mov eax, dword [ebp - 0x1ac]
sub eax, 0x4938
cmp eax, dword [ebp - 0x6c]
jne 0x1004e5e4
mov dword [ebp - 0x3e0], 1
jmp 0x1004e5eb
and dword [ebp - 0x3e0], 0
push 1
lea ecx, [ebp - 0x214]
call fcn.1001f296
mov ecx, dword [ebp - 0x3e0]
cmp ecx, dword [eax]
jg 0x1004e60e
mov dword [ebp - 0x3e8], 1
jmp 0x1004e615
and dword [ebp - 0x3e8], 0
cmp dword [ebp - 0x3e8], 0
jle 0x1004e622
cmp dword [ebp - 0x6c], 0
push 1
lea ecx, [ebp - 0x214]
call fcn.1001f296
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x4ec]
mov dword [ebp - 0x848], eax
push 1
lea ecx, [ebp - 0x214]
call fcn.1001f296
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x4ec]
mov dword [ebp - 0x8cc], eax
cmp dword [ebp - 0x53c], 1
jb 0x1004e66f
mov dword [ebp - 0x3f0], 1
jmp 0x1004e676
and dword [ebp - 0x3f0], 0
mov eax, dword [ebp - 0x3f0]
mov dword [ebp - 0x544], eax
mov esi, dword [ebp - 0x1ac]
push 1
lea ecx, [ebp - 0x214]
call fcn.1001f296
mov eax, dword [eax]
cmp dword [ebp + eax*4 - 0x4ec], esi
jne 0x1004e6ac
mov dword [ebp - 0x3f8], 1
jmp 0x1004e6b3
and dword [ebp - 0x3f8], 0
cmp dword [ebp - 0x3f8], 0x5799333c
jg 0x1004e6cb
mov dword [ebp - 0x400], 1
jmp 0x1004e6d2
and dword [ebp - 0x400], 0
cmp dword [ebp - 0x400], 1
jle 0x1004e6f0
mov eax, 0x64e4
test eax, eax
je 0x1004e6f0
mov dword [ebp - 0x408], 1
jmp 0x1004e6f7
and dword [ebp - 0x408], 0
imul eax, dword [ebp - 0x408], 0
mov dword [ebp - 0x410], eax
mov eax, dword [ebp - 0x410]
cmp eax, dword [ebp - 0x6c]
jge 0x1004e71b
mov dword [ebp - 0x418], 1
jmp 0x1004e722
and dword [ebp - 0x418], 0
mov eax, dword [ebp - 0x418]
mov dword [ebp - 0x54c], eax
jmp 0x1004e523
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x214]
call fcn.1001f27a
jmp 0x1004e4c2
jmp 0x1004e470
jmp 0x1004e436
push 0x5286
push 1
push 0x7c59
push 1
push 0x7ba6
push 0x661a
lea eax, [ebp - 0x554]
push eax
call fcn.100435bf
add esp, 0x1c
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x908]
call fcn.1001f27a
jmp 0x1004e378
mov eax, dword [ebp - 0x420]
inc eax
mov dword [ebp - 0x420], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x918]
call fcn.1001f27a
push 0x3bfd
push 0x1325
push 0x3d84
lea eax, [ebp - 0x30]
push eax
push 0x5bd5
push 1
push 0x2493
push 0x4ae1
push 0x3b30
push 1
push 0xced
push 1
push 0x14fa
call fcn.10048e71
add esp, 0x34
mov dword [ebp - 0x164], 0xffffffff
mov dword [ebp - 0x428], 0x604
mov dword [ebp - 0x55c], 0x10009180
cmp dword [ebp - 0x428], 0x71e
jle 0x1004e8fa
and dword [ebp - 0x154], 0
jmp 0x1004e82b
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 0x762d
jge 0x1004e8f0
and dword [ebp - 0x15c], 0
jmp 0x1004e851
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 0x14c2
jge 0x1004e8eb
and dword [ebp - 0x144], 0
jmp 0x1004e877
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 0x31d7
jge 0x1004e8e6
and dword [ebp - 0x14c], 0
jmp 0x1004e899
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 0x578d
jge 0x1004e8e4
mov eax, dword [ebp - 0x144]
and eax, dword [ebp - 0x14c]
mov ecx, dword [ebp - 0x154]
or ecx, dword [ebp - 0x15c]
or eax, ecx
cdq
mov dword [ebp - 0x5f0], eax
mov dword [ebp - 0x5ec], edx
push dword [ebp - 0x5ec]
push dword [ebp - 0x5f0]
mov ecx, 0x10618c38
call fcn.1001efdc
jmp 0x1004e88c
jmp 0x1004e86a
jmp 0x1004e844
jmp 0x1004e81e
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push 0x5c23
push 0x4712
push 0x4778
push 1
push 1
push 0x27ad
call fcn.1004369d
add esp, 0x18
mov dword [ebp - 4], 0x1f
cmp dword [ebp - 0x428], 0x23f
jge 0x1004e93d
mov edx, dword [ebp - 0x55c]
mov ecx, 0x10618c38
call fcn.100234ff
jmp 0x1004e959
or dword [ebp - 4], 0xffffffff
jmp 0x1004e963
mov dword [ebp - 0x164], 0xffffffe7
jmp 0x1004e97c
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 0x17
jle 0x1004e9ce
push 1
push 0x6b7b
push 1
push 0x2b3a
call fcn.10049136
add esp, 0x10
mov byte [ebp - 0x5e], 0
movzx eax, byte [ebp - 0x5e]
test eax, eax
je 0x1004e9cc
push 0
push 0x5dc7
push 1
push 0x6ce5
push 0x8eb
push 0x6d5c
push 0x1663
call fcn.100447a7
add esp, 0x1c
jmp 0x1004e96f
mov eax, dword [ebp - 0x30]
cmp dword [eax + 0x10], 0
je 0x1004e9e2
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x430], eax
jmp 0x1004e9e9
and dword [ebp - 0x430], 0
mov eax, dword [ebp - 0x74]
mov ecx, dword [ebp - 0x430]
mov dword [eax], ecx
jmp 0x1004f45b
mov eax, dword [ebp - 0x564]
mov dword [ebp - 0x1fc], eax
mov eax, dword [ebp - 0x56c]
mov dword [ebp - 0x4c8], eax
mov eax, dword [ebp - 0x574]
mov dword [ebp - 0x128], eax
mov dword [ebp - 0x7c], 1
mov dword [ebp - 0x800], 1
mov dword [ebp - 0x7fc], 1
mov dword [ebp - 0x7f8], 1
mov dword [ebp - 0x7f4], 1
mov dword [ebp - 0x450], 0x99a5
mov dword [ebp - 0x57c], 0xfffffff7
mov byte [ebp - 0x57], 0
push 0x60fe
push 0
push 0x7f57
push 0x5f9e
push 1
lea eax, [ebp - 0x57]
push eax
call fcn.10048c5c
add esp, 0x18
cmp dword [ebp - 0x7c], 0xbd42ca8c
jae 0x1004eab3
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x800], 1
xor eax, eax
inc eax
js 0x1004eab3
mov dword [ebp - 0x438], 1
jmp 0x1004eaba
and dword [ebp - 0x438], 0
mov eax, dword [ebp - 0x438]
sub eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x7c], eax
jl 0x1004eada
cmp dword [ebp - 0x450], 0
jne 0x1004eada
and dword [ebp - 0x440], 0
jmp 0x1004eae4
mov dword [ebp - 0x440], 1
mov eax, dword [ebp - 0x440]
add eax, 0x1afcb7a7
cmp eax, 0xa1405524
jbe 0x1004eb02
mov dword [ebp - 0x448], 1
jmp 0x1004eb09
and dword [ebp - 0x448], 0
mov eax, dword [ebp - 0x448]
add eax, 0x6aac8953
cmp eax, dword [ebp - 0x7c]
jg 0x1004eb2b
cmp dword [ebp - 0x7c], 0
je 0x1004eb2b
mov dword [ebp - 0x458], 1
jmp 0x1004eb32
and dword [ebp - 0x458], 0
mov eax, dword [ebp - 0x450]
cmp dword [ebp - 0x458], eax
jne 0x1004eb4c
mov dword [ebp - 0x460], 1
jmp 0x1004eb53
and dword [ebp - 0x460], 0
cmp dword [ebp - 0x460], 0xe81de98
jl 0x1004eb6b
mov dword [ebp - 0x468], 1
jmp 0x1004eb72
and dword [ebp - 0x468], 0
mov eax, dword [ebp - 0x7c]
cmp eax, dword [ebp - 0x468]
jl 0x1004eb89
mov dword [ebp - 0x470], 1
jmp 0x1004eb90
and dword [ebp - 0x470], 0
mov eax, dword [ebp - 0x470]
mov dword [ebp - 0x57c], eax
push 0x7ae1
push 0x3b97
push 0x7ad4
lea eax, [ebp - 0x128]
push eax
push 0x461d
lea eax, [ebp - 0x1fc]
push eax
push 0
push 0xdf0
push 0x1334
push 0x11ef
push 0x589e
push 0
push 1
call fcn.10040091
add esp, 0x34
push 3
lea ecx, [ebp - 0x77c]
call fcn.1001f1f8
mov dword [ebp - 4], 0x21
mov dword [ebp - 0xd8], 0x38ecf54c
push 0x5e3b
push 0x6070
push 0x5900
push 0x33bc
lea eax, [ebp - 0x77c]
push eax
lea eax, [ebp - 0xd0]
push eax
push 0x3e5e
push 0x2023
push 0
push 1
push 0x26a
push 0x517a
call fcn.10037733
add esp, 0x30
mov dword [ebp - 0xd0], 0
jmp 0x1004ec59
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 2
jge 0x1004ec75
mov eax, dword [ebp - 0xd0]
mov dword [ebp + eax*4 - 0x890], 0x3126ff23
jmp 0x1004ec4c
mov dword [ebp - 0xd8], 0
jmp 0x1004ec8e
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 2
jg 0x1004ecc2
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x890], 0
push dword [ebp - 0xd8]
lea ecx, [ebp - 0x77c]
call fcn.1001f296
cmp dword [eax], 0
je 0x1004ecc0
jmp 0x1004ecc2
jmp 0x1004ec81
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x77c]
call fcn.1001f27a
mov eax, dword [ebp - 0x128]
cmp dword [eax], 0
jne 0x1004f45b
mov dword [ebp - 0x850], 6
push 0
push 0
push 0x581f
call fcn.1004967e
add esp, 0xc
mov byte [ebp - 0x4f], 0
movzx eax, byte [ebp - 0x4f]
test eax, eax
je 0x1004ed1d
push 0
push 0
push 0x4bbd
push 0x3c68
call fcn.1003a280
add esp, 0x10
mov eax, dword [ebp - 0x1fc]
mov eax, dword [eax + 0x24]
and eax, 0x40
je 0x1004f42f
mov dword [ebp - 0x584], 0x1dcf
cmp dword [ebp - 0x584], 0xa5a
jge 0x1004f06e
lea eax, [ebp - 0x1b4]
push eax
push 0x1000770c
call fcn.100587eb
pop ecx
pop ecx
mov byte [ebp - 0x21], 0
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x58c], eax
mov eax, dword [ebp - 0x1b4]
dec eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x58c], 0
je 0x1004f06e
movzx eax, byte [ebp - 0x21]
test eax, eax
je 0x1004ed99
push 0x10007679
call fcn.10058bd6
pop ecx
push 0x10619e18
push 0x1000770c
call fcn.100587eb
pop ecx
pop ecx
and dword [ebp - 0xf0], 0
jmp 0x1004edc0
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
mov eax, dword [ebp - 0xf0]
cmp eax, dword [0x10619e18]
jge 0x1004ede9
imul eax, dword [ebp - 0xf0], 0xb
add eax, 0x10619e20
push eax
push 0x100091e8
call fcn.100587eb
pop ecx
pop ecx
jmp 0x1004edb3
and dword [ebp - 0xf8], 0
jmp 0x1004edff
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
mov eax, dword [ebp - 0xf8]
cmp eax, dword [0x10619e18]
jge 0x1004ee28
imul eax, dword [ebp - 0xf8], 0xb
add eax, 0x10619d98
push eax
push 0x100091e8
call fcn.100587eb
pop ecx
pop ecx
jmp 0x1004edf2
or dword [ebp - 0x1d4], 0xffffffff
or dword [ebp - 0x1dc], 0xffffffff
and dword [ebp - 0x44], 0
jmp 0x1004ee43
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
cmp eax, dword [0x10619e18]
jge 0x1004ef7d
and dword [ebp - 0x48], 0
jmp 0x1004ee5f
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
cmp eax, dword [0x10619e18]
jge 0x1004ef78
imul eax, dword [ebp - 0x44], 0xb
mov ecx, dword [ebp - 0x48]
movsx eax, byte [eax + ecx + 0x10619d98]
cmp eax, 0x78
jne 0x1004ef73
imul eax, dword [ebp - 0x44], 0xb
mov ecx, dword [ebp - 0x48]
movsx eax, byte [eax + ecx + 0x10619e20]
cmp eax, 0x2a
jne 0x1004eeac
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x1d4], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x1dc], eax
and dword [ebp - 0x1cc], 0
and dword [ebp - 0xe0], 0
jmp 0x1004eec9
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 8
jge 0x1004ef5c
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0x44]
add ecx, dword [eax*4 + 0x1061853c]
mov dword [ebp - 0x1bc], ecx
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0x48]
add ecx, dword [eax*4 + 0x1061855c]
mov dword [ebp - 0x1c4], ecx
cmp dword [ebp - 0x1bc], 0
jl 0x1004ef57
mov eax, dword [ebp - 0x1bc]
cmp eax, dword [0x10619e18]
jge 0x1004ef57
cmp dword [ebp - 0x1c4], 0
jl 0x1004ef57
mov eax, dword [ebp - 0x1c4]
cmp eax, dword [0x10619e18]
jge 0x1004ef57
imul eax, dword [ebp - 0x1bc], 0xb
mov ecx, dword [ebp - 0x1c4]
movsx eax, byte [eax + ecx + 0x10619e20]
cmp eax, 0x2a
jne 0x1004ef57
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
jmp 0x1004eebc
mov eax, dword [ebp - 0x1cc]
add eax, 0x30
imul ecx, dword [ebp - 0x44], 0xb
mov edx, dword [ebp - 0x48]
mov byte [ecx + edx + 0x10619d98], al
jmp 0x1004ee58
jmp 0x1004ee3c
cmp dword [ebp - 0x1d4], 0xffffffff
jne 0x1004efd3
cmp dword [ebp - 0x1dc], 0xffffffff
jne 0x1004efd3
and dword [ebp - 0x100], 0
jmp 0x1004efa5
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
mov eax, dword [ebp - 0x100]
cmp eax, dword [0x10619e18]
jge 0x1004efce
imul eax, dword [ebp - 0x100], 0xb
add eax, 0x10619d98
push eax
push 0x100091ec
call fcn.10058a1f
pop ecx
pop ecx
jmp 0x1004ef98
jmp 0x1004f065
and dword [ebp - 0x80], 0
jmp 0x1004efeb
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
push 0x10007679
call fcn.10058bd6
pop ecx
mov eax, dword [ebp - 0x80]
cmp eax, dword [0x10619e18]
jge 0x1004f065
and dword [ebp - 0x78], 0
jmp 0x1004f003
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x78]
cmp eax, dword [0x10619e18]
jge 0x1004f060
mov eax, dword [ebp - 0x80]
cmp eax, dword [ebp - 0x1d4]
jne 0x1004f024
mov eax, dword [ebp - 0x78]
cmp eax, dword [ebp - 0x1dc]
je 0x1004f038
imul eax, dword [ebp - 0x80], 0xb
mov ecx, dword [ebp - 0x78]
movsx eax, byte [eax + ecx + 0x10619e20]
cmp eax, 0x2a
jne 0x1004f042
push 0x2a
call fcn.1005ab13
pop ecx
jmp 0x1004f05e
imul eax, dword [ebp - 0x80], 0xb
mov ecx, dword [ebp - 0x78]
movsx eax, byte [eax + ecx + 0x10619d98]
push eax
push 0x100091f0
call fcn.10058a1f
pop ecx
pop ecx
jmp 0x1004effc
jmp 0x1004efd9
mov byte [ebp - 0x21], 1
jmp 0x1004ed60
mov dword [ebp - 0xe8], 0xcaa8e55a
mov dword [ebp - 0x928], 8
mov dword [ebp - 0x59c], 0xffffffff
mov dword [ebp - 0x1f4], 0xc3e5f88
mov dword [ebp - 0x110], 0
jmp 0x1004f0af
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 2
jge 0x1004f0cb
mov eax, dword [ebp - 0x110]
mov dword [ebp + eax*4 - 0x16c], 0x24a8c6a5
jmp 0x1004f0a2
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x16c], 0
jmp 0x1004f0f9
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x16c]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x16c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x16c], 7
jle 0x1004f239
mov dword [ebp - 0x1e4], 0xffffffff
mov dword [ebp - 0x490], 4
mov dword [ebp - 0x1ec], 0x9d010789
mov eax, dword [ebp - 0x1e4]
mov dword [ebp - 0x858], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x16c], 1
jg 0x1004f153
mov dword [ebp - 0x594], 1
jmp 0x1004f15a
and dword [ebp - 0x594], 0
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x8dc], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1e4]
cmp ecx, dword [ebp + eax - 0x16c]
je 0x1004f187
mov dword [ebp - 0x478], 1
jmp 0x1004f18e
and dword [ebp - 0x478], 0
mov eax, dword [ebp - 0x1ec]
add eax, dword [ebp - 0x478]
cmp eax, dword [ebp - 0x1e4]
jge 0x1004f1ae
mov dword [ebp - 0x480], 1
jmp 0x1004f1b5
and dword [ebp - 0x480], 0
mov eax, dword [ebp - 0x1ec]
cmp eax, dword [ebp - 0x480]
jne 0x1004f1cf
mov dword [ebp - 0x488], 1
jmp 0x1004f1d6
and dword [ebp - 0x488], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x488]
sub ecx, dword [ebp + eax - 0x16c]
cmp ecx, dword [ebp - 0x1ec]
jle 0x1004f1fd
mov dword [ebp - 0x498], 1
jmp 0x1004f204
and dword [ebp - 0x498], 0
mov dword [ebp - 0x490], 0x8306
mov eax, dword [ebp - 0x490]
sub eax, dword [ebp - 0x498]
inc eax
mov dword [ebp - 0xe8], eax
push 0
push 1
lea eax, [ebp - 0xe8]
push eax
call fcn.1004967e
add esp, 0xc
jmp 0x1004f0de
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x16c], 0xfffffffe
jae 0x1004f2e5
imul eax, dword [ebp - 0x1f4], 0xffffffff
mov ecx, dword [ebp - 0x1f4]
dec ecx
mov dword [ebp - 0x1f4], ecx
test eax, eax
jne 0x1004f277
cmp dword [ebp - 0xe8], 0
jne 0x1004f277
and dword [ebp - 0x4a0], 0
jmp 0x1004f281
mov dword [ebp - 0x4a0], 1
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x16c], 0x832397bd
mov eax, dword [ebp - 0x59c]
cmp dword [ebp - 0x4a0], eax
jle 0x1004f2ac
mov dword [ebp - 0x4a8], 1
jmp 0x1004f2b3
and dword [ebp - 0x4a8], 0
cmp dword [ebp - 0x4a8], 0xfffffffc
jge 0x1004f2c8
mov dword [ebp - 0x4b0], 1
jmp 0x1004f2cf
and dword [ebp - 0x4b0], 0
mov eax, dword [ebp - 0x4b0]
sub eax, 0x71c25028
jne 0x1004f2e5
and dword [ebp - 0x4b8], 0
jmp 0x1004f2ef
mov dword [ebp - 0x4b8], 1
mov eax, dword [ebp - 0x4b8]
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0x4c0], 0xca7
mov dword [ebp - 0x5ac], 0x100091f4
cmp dword [ebp - 0x4c0], 0xfae
jle 0x1004f3bf
and dword [ebp - 0x118], 0
jmp 0x1004f335
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0x2f21
jge 0x1004f3bf
and dword [ebp - 0x120], 0
jmp 0x1004f357
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0x1433
jge 0x1004f3ba
mov eax, dword [ebp - 0x118]
add eax, dword [ebp - 0x120]
cdq
mov dword [ebp - 0x5fc], eax
mov dword [ebp - 0x5f8], edx
push dword [ebp - 0x5f8]
push dword [ebp - 0x5fc]
lea ecx, [ebp - 0x9d8]
call fcn.1000aa9e
pop ecx
pop ecx
mov dword [ebp - 0x5a4], eax
mov ecx, dword [ebp - 0x5a4]
call fcn.1001edec
push eax
call fcn.10058a1f
pop ecx
lea ecx, [ebp - 0x9d8]
call fcn.1001ede2
jmp 0x1004f34a
jmp 0x1004f328
lea eax, [ebp - 0x4c8]
push eax
push 1
push 0x6b54
push 0x1163
push 0
push 0x55b1
lea eax, [ebp - 0x128]
push eax
call fcn.1003af1d
add esp, 0x1c
mov dword [ebp - 4], 0x22
cmp dword [ebp - 0x4c0], 0xa7e
jge 0x1004f407
push dword [ebp - 0x5ac]
call fcn.10058a1f
pop ecx
jmp 0x1004f423
or dword [ebp - 4], 0xffffffff
jmp 0x1004f42d
jmp 0x1004f45b
mov eax, dword [ebp - 0x1fc]
mov eax, dword [eax + 0x24]
and eax, 0x80
je 0x1004f45b
lea eax, [ebp - 0x128]
push eax
lea eax, [ebp - 0x4c8]
push eax
push 1
push 0
push 1
call fcn.100439cb
add esp, 0x14
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret