Function at 0x1004c47e
Capabilities:
Inspect section memory permissions
Parse pe header

Disassembly:
push 8
push 0x520
mov eax, 0x1009e24c
call fcn.10099a2f
mov esi, ecx
mov dword [ebp - 0x49c], esi
mov dword [ebp - 0x4ec], esi
mov ecx, dword [ebx + 0xc]
mov eax, dword [ebx + 8]
mov dword [ebp - 0x504], esi
mov dword [ebp - 0x4b4], ecx
xor ecx, ecx
mov dword [ebp - 0x488], ecx
mov dword [ebp - 0x48c], ecx
mov ecx, esi
push eax
call fcn.10036f25
xor eax, eax
lea edi, [esi + 0x18]
mov dword [ebp - 4], eax
xor ecx, ecx
push 7
pop edx
mov dword [edi], eax
mov dword [edi + 0x10], eax
mov dword [edi + 0x14], edx
mov word [edi], cx
lea ecx, [esi + 0x34]
xor esi, esi
mov dword [ecx], eax
mov dword [ebp - 0x514], ecx
mov dword [ecx + 0x10], eax
mov dword [ecx + 0x14], edx
mov word [ecx], si
mov esi, dword [ebp - 0x49c]
lea ecx, [esi + 0x4c]
mov dword [ecx + 0x14], edx
xor edx, edx
mov dword [ecx], eax
mov dword [ebp - 0x4e4], ecx
mov dword [ecx + 0x10], eax
mov word [ecx], dx
lea ecx, [esi + 0x6c]
mov byte [esi + 0x65], al
mov dword [esi + 0x68], eax
mov dword [ebp - 0x4d0], ecx
mov dword [ecx], eax
lea ecx, [esi + 0x70]
mov byte [ebp - 4], 4
mov dword [ebp - 0x4a4], ecx
call fcn.1005541a
lea ecx, [esi + 0x78]
mov byte [ebp - 4], 5
mov dword [ebp - 0x490], ecx
call fcn.1005541a
lea eax, [esi + 0x80]
mov byte [ebp - 4], 6
mov ecx, eax
mov dword [ebp - 0x4b0], eax
call fcn.1005541a
lea ecx, [esi + 0x88]
mov byte [ebp - 4], 7
mov dword [ebp - 0x4ac], ecx
call fcn.1005541a
add esi, 0x90
mov byte [ebp - 4], 8
push 0x7c
pop ecx
mov dword [ebp - 0x4bc], esi
and dword [esi], 0
and dword [esi + 4], 0
mov dword [ebp - 0x4ec], esi
call fcn.1002bb01
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [esi], eax
mov byte [ebp - 4], 9
mov esi, dword [ebp - 0x49c]
add esi, 0x98
push 0x34
pop ecx
mov dword [ebp - 0x508], esi
and dword [esi], 0
and dword [esi + 4], 0
mov dword [ebp - 0x4ec], esi
call fcn.1002bb01
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [esi], eax
mov byte [ebp - 4], 0xa
mov esi, dword [ebp - 0x49c]
add esi, 0xa0
push 0x48
pop ecx
mov dword [ebp - 0x4c0], esi
and dword [esi], 0
and dword [esi + 4], 0
mov dword [ebp - 0x4ec], esi
call fcn.1002bb01
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [esi], eax
mov byte [ebp - 4], 0xb
mov esi, dword [ebp - 0x49c]
push 0x2c
lea eax, [esi + 0xa8]
mov dword [eax], 0xfffffffe
lea ecx, [esi + 0xb4]
mov dword [ebp - 0x4a8], eax
lea eax, [esi + 0xac]
mov dword [eax], 0xfffffffe
mov dword [ebp - 0x4ec], eax
xor eax, eax
mov dword [esi + 0xb0], eax
mov dword [ebp - 0x4f0], ecx
mov dword [ecx], eax
mov dword [ecx + 4], eax
call fcn.1008b467
pop ecx
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [esi + 0xb4], eax
lea eax, [esi + 0xbc]
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x4e8], eax
and dword [eax], 0
and dword [eax + 4], 0
push 0x2c
call fcn.1008b467
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [esi + 0xbc], eax
lea ecx, [esi + 0xc8]
xor eax, eax
xor edx, edx
mov dword [ecx], eax
mov dword [ebp - 0x4d8], ecx
mov dword [ecx + 0x10], eax
mov dword [ecx + 0x14], 7
mov word [ecx], dx
lea ecx, [esi + 0xe4]
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x4dc], ecx
mov dword [ecx], eax
mov dword [ecx + 4], eax
mov dword [esp], 0x1c0
call fcn.1008b467
pop ecx
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [esi + 0xe4], eax
add esi, 0xec
mov byte [ebp - 4], 0xf
push 0x34
pop ecx
mov dword [ebp - 0x520], esi
and dword [esi], 0
and dword [esi + 4], 0
mov dword [ebp - 0x510], esi
call fcn.1002bb01
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [esi], eax
mov eax, dword [ebp - 0x49c]
xor ecx, ecx
add eax, 0xf4
xor edx, edx
push 7
pop esi
mov dword [ebp - 0x51c], eax
mov dword [eax], ecx
mov dword [eax + 0x10], ecx
mov dword [eax + 0x14], esi
mov word [eax], dx
mov edx, dword [ebp - 0x49c]
lea eax, [edx + 0x10c]
mov dword [eax + 0x14], esi
xor esi, esi
mov dword [eax], ecx
mov dword [ebp - 0x510], eax
mov dword [eax + 0x10], ecx
mov word [eax], si
lea esi, [edx + 0x124]
mov byte [ebp - 4], 0x12
mov dword [ebp - 0x4fc], esi
push 0x40
mov dword [esi], ecx
mov dword [esi + 4], ecx
call fcn.1008b467
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [esi], eax
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x34]
mov dword [esp], 0x10016578
call fcn.1002b985
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0x4b4]
push eax
call fcn.10068da3
mov ecx, eax
call fcn.1006b054
push eax
mov ecx, edi
call fcn.10036e90
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x13
call fcn.1002b9c2
push 0x1001251c
lea ecx, [ebp - 0x1e0]
call fcn.1002b985
lea eax, [ebp - 0x1e0]
mov byte [ebp - 4], 0x15
mov ecx, dword [ebp - 0x4b4]
push eax
call fcn.10068da3
push eax
lea ecx, [ebp - 0x494]
call fcn.10068ae1
lea ecx, [ebp - 0x1e0]
mov byte [ebp - 4], 0x17
call fcn.1002b9c2
push 0x10016590
lea ecx, [ebp - 0x34]
call fcn.1002b985
mov byte [ebp - 4], 0x18
mov esi, dword [ebp - 0x494]
mov eax, dword [esi]
mov edi, dword [eax + 4]
lea eax, [ebp - 0x34]
push eax
mov ecx, edi
call dword [0x100b134c]
mov ecx, esi
call edi
lea ecx, [ebp - 0x34]
mov byte [ebp - 0x481], al
mov byte [ebp - 4], 0x17
call fcn.1002b9c2
cmp byte [ebp - 0x481], 0
je 0x1004c914
push 0x10016590
lea ecx, [ebp - 0x34]
call fcn.1002b985
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 0x19
push eax
lea ecx, [ebp - 0x494]
call fcn.10068d34
push eax
lea ecx, [ebp - 0x4a0]
call fcn.10068ae1
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x1b
call fcn.1002b9c2
push 0x10
call fcn.1008b467
pop ecx
mov dword [ebp - 0x4b4], eax
lea ecx, [ebp - 0x4a0]
mov byte [ebp - 4], 0x1c
push ecx
mov ecx, eax
call fcn.100603ae
mov edx, dword [ebp - 0x4d0]
mov ecx, 0x10000000
mov dword [ebp - 0x488], ecx
mov dword [ebp - 0x48c], ecx
lea ecx, [ebp - 0x4b4]
cmp edx, ecx
je 0x1004c8f8
mov ecx, dword [edx]
mov dword [edx], eax
test ecx, ecx
je 0x1004c905
jmp 0x1004c8fe
test eax, eax
je 0x1004c905
mov ecx, eax
push 1
call fcn.10038a60
lea ecx, [ebp - 0x4a0]
mov byte [ebp - 4], 0x17
call fcn.10036d1b
push 0x100165b0
lea ecx, [ebp - 0x34]
call fcn.1002b985
mov byte [ebp - 4], 0x1d
mov esi, dword [ebp - 0x494]
mov eax, dword [esi]
mov edi, dword [eax + 4]
lea eax, [ebp - 0x34]
push eax
mov ecx, edi
call dword [0x100b134c]
mov ecx, esi
call edi
lea ecx, [ebp - 0x34]
mov byte [ebp - 0x481], al
mov byte [ebp - 4], 0x17
call fcn.1002b9c2
cmp byte [ebp - 0x481], 0
je 0x1004cad4
push 0x100165b0
lea ecx, [ebp - 0x34]
call fcn.1002b985
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 0x1e
push eax
lea ecx, [ebp - 0x494]
call fcn.10068d34
push eax
lea ecx, [ebp - 0x498]
call fcn.10068ae1
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x20
call fcn.1002b9c2
lea ecx, [ebp - 0x498]
call fcn.10068cb7
cmp eax, 5
je 0x1004cac5
lea ecx, [ebp - 0x498]
call fcn.10068c9f
push eax
lea ecx, [ebp - 0x70]
call fcn.1002d3ac
mov byte [ebp - 4], 0x21
mov esi, dword [ebp - 0x70]
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x4a0], esi
mov dword [ebp - 0x4b4], eax
cmp esi, eax
je 0x1004cabd
mov edi, dword [ebp - 0x4a4]
push 0x100165dc
lea ecx, [ebp - 0x34]
call fcn.1002b985
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 0x22
push eax
mov ecx, esi
call fcn.10068da3
mov ecx, eax
call fcn.1006b054
push eax
lea ecx, [ebp - 0x4c]
call fcn.10036f25
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x24
call fcn.1002b9c2
lea eax, [ebp - 0x4c]
mov ecx, edi
push eax
lea eax, [ebp - 0xb8]
push eax
call fcn.10057a3e
mov esi, eax
lea edi, [ebp - 0x4cc]
lea eax, [ebp - 0x4c]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push dword [ebp - 0x4c4]
call fcn.10057e56
mov edi, dword [ebp - 0x4a4]
test al, al
jne 0x1004ca96
cmp dword [edi + 4], 0x6666666
je 0x1004fe1b
lea eax, [ebp - 0x4c]
push eax
push dword [edi]
lea ecx, [ebp - 0x4d4]
push edi
call fcn.100589e4
lea ecx, [ebp - 0x4d4]
mov esi, dword [eax + 4]
and dword [eax + 4], 0
call fcn.100585b8
push esi
push dword [ebp - 0x4c8]
mov ecx, edi
push dword [ebp - 0x4cc]
call fcn.10041c57
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x21
call fcn.1002b9c2
mov esi, dword [ebp - 0x4a0]
add esi, 4
mov dword [ebp - 0x4a0], esi
cmp esi, dword [ebp - 0x4b4]
jne 0x1004c9e3
lea ecx, [ebp - 0x70]
call fcn.1003733c
lea ecx, [ebp - 0x498]
mov byte [ebp - 4], 0x17
call fcn.10036d1b
push 0x100165f4
lea ecx, [ebp - 0x34]
call fcn.1002b985
mov byte [ebp - 4], 0x25
mov esi, dword [ebp - 0x494]
mov eax, dword [esi]
mov edi, dword [eax + 4]
lea eax, [ebp - 0x34]
push eax
mov ecx, edi
call dword [0x100b134c]
mov ecx, esi
call edi
lea ecx, [ebp - 0x34]
mov byte [ebp - 0x481], al
mov byte [ebp - 4], 0x17
call fcn.1002b9c2
cmp byte [ebp - 0x481], 0
je 0x1004cc94
push 0x100165f4
lea ecx, [ebp - 0x34]
call fcn.1002b985
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 0x26
push eax
lea ecx, [ebp - 0x494]
call fcn.10068d34
push eax
lea ecx, [ebp - 0x4a4]
call fcn.10068ae1
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x28
call fcn.1002b9c2
lea ecx, [ebp - 0x4a4]
call fcn.10068cb7
cmp eax, 5
je 0x1004cc85
lea ecx, [ebp - 0x4a4]
call fcn.10068c9f
push eax
lea ecx, [ebp - 0x4cc]
call fcn.1002d3ac
mov byte [ebp - 4], 0x29
mov esi, dword [ebp - 0x4cc]
mov eax, dword [ebp - 0x4c8]
mov dword [ebp - 0x4a0], esi
mov dword [ebp - 0x4b4], eax
cmp esi, eax
je 0x1004cc7a
mov edi, dword [ebp - 0x4b0]
push 0x100165dc
lea ecx, [ebp - 0x34]
call fcn.1002b985
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 0x2a
push eax
mov ecx, esi
call fcn.10068da3
mov ecx, eax
call fcn.1006b054
push eax
lea ecx, [ebp - 0x4c]
call fcn.10036f25
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x2c
call fcn.1002b9c2
lea eax, [ebp - 0x4c]
mov ecx, edi
push eax
lea eax, [ebp - 0xb8]
push eax
call fcn.10057a3e
mov esi, eax
lea edi, [ebp - 0x70]
lea eax, [ebp - 0x4c]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push dword [ebp - 0x68]
call fcn.10057e56
mov edi, dword [ebp - 0x4b0]
test al, al
jne 0x1004cc53
cmp dword [edi + 4], 0x6666666
je 0x1004fe1b
lea eax, [ebp - 0x4c]
push eax
push dword [edi]
lea ecx, [ebp - 0x4d4]
push edi
call fcn.100589e4
lea ecx, [ebp - 0x4d4]
mov esi, dword [eax + 4]
and dword [eax + 4], 0
call fcn.100585b8
push esi
push dword [ebp - 0x6c]
mov ecx, edi
push dword [ebp - 0x70]
call fcn.10041c57
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x29
call fcn.1002b9c2
mov esi, dword [ebp - 0x4a0]
add esi, 4
mov dword [ebp - 0x4a0], esi
cmp esi, dword [ebp - 0x4b4]
jne 0x1004cbac
lea ecx, [ebp - 0x4cc]
call fcn.1003733c
lea ecx, [ebp - 0x4a4]
mov byte [ebp - 4], 0x17
call fcn.10036d1b
push 0x10016624
lea ecx, [ebp - 0x34]
call fcn.1002b985
mov byte [ebp - 4], 0x2d
mov esi, dword [ebp - 0x494]
mov eax, dword [esi]
mov edi, dword [eax + 4]
lea eax, [ebp - 0x34]
push eax
mov ecx, edi
call dword [0x100b134c]
mov ecx, esi
call edi
lea ecx, [ebp - 0x34]
mov byte [ebp - 0x481], al
mov byte [ebp - 4], 0x17
call fcn.1002b9c2
cmp byte [ebp - 0x481], 0
je 0x1004ce54
push 0x10016624
lea ecx, [ebp - 0x34]
call fcn.1002b985
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 0x2e
push eax
lea ecx, [ebp - 0x494]
call fcn.10068d34
push eax
lea ecx, [ebp - 0x4a4]
call fcn.10068ae1
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x30
call fcn.1002b9c2
lea ecx, [ebp - 0x4a4]
call fcn.10068cb7
cmp eax, 5
je 0x1004ce45
lea ecx, [ebp - 0x4a4]
call fcn.10068c9f
push eax
lea ecx, [ebp - 0x4cc]
call fcn.1002d3ac
mov byte [ebp - 4], 0x31
mov esi, dword [ebp - 0x4cc]
mov eax, dword [ebp - 0x4c8]
mov dword [ebp - 0x4a0], esi
mov dword [ebp - 0x4b4], eax
cmp esi, eax
je 0x1004ce3a
mov edi, dword [ebp - 0x4ac]
push 0x100165dc
lea ecx, [ebp - 0x34]
call fcn.1002b985
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 0x32
push eax
mov ecx, esi
call fcn.10068da3
mov ecx, eax
call fcn.1006b054
push eax
lea ecx, [ebp - 0x4c]
call fcn.10036f25
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x34
call fcn.1002b9c2
lea eax, [ebp - 0x4c]
mov ecx, edi
push eax
lea eax, [ebp - 0xb8]
push eax
call fcn.10057a3e
mov esi, eax
lea edi, [ebp - 0x70]
lea eax, [ebp - 0x4c]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push dword [ebp - 0x68]
call fcn.10057e56
mov edi, dword [ebp - 0x4ac]
test al, al
jne 0x1004ce13
cmp dword [edi + 4], 0x6666666
je 0x1004fe1b
lea eax, [ebp - 0x4c]
push eax
push dword [edi]
lea ecx, [ebp - 0x4d4]
push edi
call fcn.100589e4
lea ecx, [ebp - 0x4d4]
mov esi, dword [eax + 4]
and dword [eax + 4], 0
call fcn.100585b8
push esi
push dword [ebp - 0x6c]
mov ecx, edi
push dword [ebp - 0x70]
call fcn.10041c57
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x31
call fcn.1002b9c2
mov esi, dword [ebp - 0x4a0]
add esi, 4
mov dword [ebp - 0x4a0], esi
cmp esi, dword [ebp - 0x4b4]
jne 0x1004cd6c
lea ecx, [ebp - 0x4cc]
call fcn.1003733c
lea ecx, [ebp - 0x4a4]
mov byte [ebp - 4], 0x17
call fcn.10036d1b
mov esi, dword [ebp - 0x49c]
mov edi, 0x1000b060
push edi
lea ecx, [esi + 0x34]
mov byte [esi + 0x30], 0
call fcn.10036e69
push edi
lea ecx, [esi + 0x4c]
mov byte [esi + 0x64], 0
call fcn.10036e69
push 0x10016654
lea ecx, [ebp - 0x34]
call fcn.1002b985
mov byte [ebp - 4], 0x35
mov esi, dword [ebp - 0x494]
mov eax, dword [esi]
mov edi, dword [eax + 4]
lea eax, [ebp - 0x34]
push eax
mov ecx, edi
call dword [0x100b134c]
mov ecx, esi
call edi
lea ecx, [ebp - 0x34]
mov byte [ebp - 0x481], al
mov byte [ebp - 4], 0x17
call fcn.1002b9c2
cmp byte [ebp - 0x481], 0
je 0x1004d3b1
push 0x10016654
lea ecx, [ebp - 0x34]
call fcn.1002b985
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 0x36
push eax
lea ecx, [ebp - 0x494]
call fcn.10068d34
push eax
lea ecx, [ebp - 0x498]
call fcn.10068ae1
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x38
call fcn.1002b9c2
lea ecx, [ebp - 0x498]
call fcn.10068cb7
cmp eax, 5
je 0x1004d3a2
push 0x1001667c
lea ecx, [ebp - 0x64]
call fcn.1002b985
mov byte [ebp - 4], 0x39
mov eax, dword [ebp - 0x488]
mov esi, dword [ebp - 0x498]
or eax, 1
mov dword [ebp - 0x488], eax
mov dword [ebp - 0x48c], eax
mov eax, dword [esi]
mov edi, dword [eax + 4]
lea eax, [ebp - 0x64]
push eax
mov ecx, edi
call dword [0x100b134c]
mov ecx, esi
call edi
test al, al
je 0x1004cfa0
push 0x1001667c
lea ecx, [ebp - 0x4c]
call fcn.1002b985
mov dword [ebp - 4], 0x3a
lea ecx, [ebp - 0x498]
mov eax, dword [ebp - 0x488]
or eax, 2
mov dword [ebp - 0x488], eax
mov dword [ebp - 0x48c], eax
lea eax, [ebp - 0x4c]
push eax
call fcn.10068d34
mov ecx, eax
call fcn.10068cb7
mov byte [ebp - 0x482], 1
cmp eax, 5
jne 0x1004cfa7
mov byte [ebp - 0x482], 0
mov eax, dword [ebp - 0x488]
test al, 2
je 0x1004cfce
and eax, 0xfffffffd
lea ecx, [ebp - 0x4c]
mov dword [ebp - 0x488], eax
mov dword [ebp - 0x48c], eax
call fcn.1002b9c2
mov eax, dword [ebp - 0x488]
mov dword [ebp - 4], 0x38
test al, 1
je 0x1004cff0
and eax, 0xfffffffe
lea ecx, [ebp - 0x64]
mov dword [ebp - 0x488], eax
mov dword [ebp - 0x48c], eax
call fcn.1002b9c2
cmp byte [ebp - 0x482], 0
je 0x1004d035
push 0x1001667c
lea ecx, [ebp - 0x4c]
call fcn.1002b985
lea eax, [ebp - 0x4c]
mov byte [ebp - 4], 0x3b
push eax
lea ecx, [ebp - 0x498]
call fcn.10068d34
mov ecx, eax
call fcn.10068c87
mov ecx, dword [ebp - 0x49c]
mov byte [ebp - 4], 0x38
mov byte [ecx + 0x30], al
lea ecx, [ebp - 0x4c]
call fcn.1002b9c2
mov eax, dword [ebp - 0x49c]
cmp byte [eax + 0x30], 1
jne 0x1004d3a2
push 0x100166ac
lea ecx, [ebp - 0x64]
call fcn.1002b985
mov byte [ebp - 4], 0x3c
mov eax, dword [ebp - 0x488]
mov esi, dword [ebp - 0x498]
or eax, 4
mov dword [ebp - 0x488], eax
mov dword [ebp - 0x48c], eax
mov eax, dword [esi]
mov edi, dword [eax + 4]
lea eax, [ebp - 0x64]
push eax
mov ecx, edi
call dword [0x100b134c]
mov ecx, esi
call edi
test al, al
je 0x1004d0d5
push 0x100166ac
lea ecx, [ebp - 0x4c]
call fcn.1002b985
mov dword [ebp - 4], 0x3d
lea ecx, [ebp - 0x498]
mov eax, dword [ebp - 0x488]
or eax, 8
mov dword [ebp - 0x488], eax
mov dword [ebp - 0x48c], eax
lea eax, [ebp - 0x4c]
push eax
call fcn.10068d34
mov ecx, eax
call fcn.10068cb7
mov byte [ebp - 0x482], 1
cmp eax, 5
jne 0x1004d0dc
mov byte [ebp - 0x482], 0
mov eax, dword [ebp - 0x488]
test al, 8
je 0x1004d0fd
and eax, 0xfffffff7
lea ecx, [ebp - 0x4c]
mov dword [ebp - 0x488], eax
call fcn.1002b9c2
mov eax, dword [ebp - 0x488]
mov dword [ebp - 4], 0x38
test al, 4
je 0x1004d119
and eax, 0xfffffffb
lea ecx, [ebp - 0x64]
mov dword [ebp - 0x488], eax
call fcn.1002b9c2
cmp byte [ebp - 0x482], 0
je 0x1004d161
push 0x100166ac
lea ecx, [ebp - 0x4c]
call fcn.1002b985
lea eax, [ebp - 0x4c]
mov byte [ebp - 4], 0x3e
push eax
lea ecx, [ebp - 0x498]
call fcn.10068d34
mov ecx, eax
call fcn.1006b054
mov ecx, dword [ebp - 0x514]
push eax
call fcn.10036e90
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x38
call fcn.1002b9c2
push 0x100166cc
lea ecx, [ebp - 0x64]
call fcn.1002b985
mov byte [ebp - 4], 0x3f
mov eax, dword [ebp - 0x488]
mov esi, dword [ebp - 0x498]
or eax, 0x10
mov dword [ebp - 0x488], eax
mov dword [ebp - 0x48c], eax
mov eax, dword [esi]
mov edi, dword [eax + 4]
lea eax, [ebp - 0x64]
push eax
mov ecx, edi
call dword [0x100b134c]
mov ecx, esi
call edi
test al, al
je 0x1004d1f1
push 0x100166cc
lea ecx, [ebp - 0x4c]
call fcn.1002b985
mov dword [ebp - 4], 0x40
lea ecx, [ebp - 0x498]
mov eax, dword [ebp - 0x488]
or eax, 0x20
mov dword [ebp - 0x488], eax
mov dword [ebp - 0x48c], eax
lea eax, [ebp - 0x4c]
push eax
call fcn.10068d34
mov ecx, eax
call fcn.10068cb7
mov byte [ebp - 0x482], 1
cmp eax, 5
jne 0x1004d1f8
mov byte [ebp - 0x482], 0
mov eax, dword [ebp - 0x488]
test al, 0x20
je 0x1004d219
and eax, 0xffffffdf
lea ecx, [ebp - 0x4c]
mov dword [ebp - 0x488], eax
call fcn.1002b9c2
mov eax, dword [ebp - 0x488]
mov dword [ebp - 4], 0x38
test al, 0x10
je 0x1004d235
and eax, 0xffffffef
lea ecx, [ebp - 0x64]
mov dword [ebp - 0x488], eax
call fcn.1002b9c2
cmp byte [ebp - 0x482], 0
je 0x1004d27a
push 0x100166cc
lea ecx, [ebp - 0x4c]
call fcn.1002b985
lea eax, [ebp - 0x4c]
mov byte [ebp - 4], 0x41
push eax
lea ecx, [ebp - 0x498]
call fcn.10068d34
mov ecx, eax
call fcn.10068c87
mov ecx, dword [ebp - 0x49c]
mov byte [ebp - 4], 0x38
mov byte [ecx + 0x64], al
lea ecx, [ebp - 0x4c]
call fcn.1002b9c2
push 0x100166f0
lea ecx, [ebp - 0x64]
call fcn.1002b985
mov byte [ebp - 4], 0x42
mov eax, dword [ebp - 0x488]
mov esi, dword [ebp - 0x498]
or eax, 0x40
mov dword [ebp - 0x488], eax
mov dword [ebp - 0x48c], eax
mov eax, dword [esi]
mov edi, dword [eax + 4]
lea eax, [ebp - 0x64]
push eax
mov ecx, edi
call dword [0x100b134c]
mov ecx, esi
call edi
test al, al
je 0x1004d30c
push 0x100166f0
lea ecx, [ebp - 0x4c]
call fcn.1002b985
mov dword [ebp - 4], 0x43
lea ecx, [ebp - 0x498]
mov eax, dword [ebp - 0x488]
or eax, 0x80
mov dword [ebp - 0x488], eax
mov dword [ebp - 0x48c], eax
lea eax, [ebp - 0x4c]
push eax
call fcn.10068d34
mov ecx, eax
call fcn.10068cb7
mov byte [ebp - 0x482], 1
cmp eax, 5
jne 0x1004d313
mov byte [ebp - 0x482], 0
mov eax, dword [ebp - 0x488]
test al, al
jns 0x1004d33c
and eax, 0xffffff7f
lea ecx, [ebp - 0x4c]
mov dword [ebp - 0x488], eax
mov dword [ebp - 0x48c], eax
call fcn.1002b9c2
mov eax, dword [ebp - 0x488]
mov dword [ebp - 4], 0x38
test al, 0x40
je 0x1004d35e
and eax, 0xffffffbf
lea ecx, [ebp - 0x64]
mov dword [ebp - 0x488], eax
mov dword [ebp - 0x48c], eax
call fcn.1002b9c2
cmp byte [ebp - 0x482], 0
je 0x1004d3a2
push 0x100166f0
lea ecx, [ebp - 0x4c]
call fcn.1002b985
lea eax, [ebp - 0x4c]
mov byte [ebp - 4], 0x44
push eax
lea ecx, [ebp - 0x498]
call fcn.10068d34
mov ecx, eax
call fcn.1006b054
mov ecx, dword [ebp - 0x4e4]
push eax
call fcn.10036e90
lea ecx, [ebp - 0x4c]
call fcn.1002b9c2
lea ecx, [ebp - 0x498]
mov byte [ebp - 4], 0x17
call fcn.10036d1b
push 0x10016718
lea ecx, [ebp - 0x34]
call fcn.1002b985
mov byte [ebp - 4], 0x45
mov esi, dword [ebp - 0x494]
mov eax, dword [esi]
mov edi, dword [eax + 4]
lea eax, [ebp - 0x34]
push eax
mov ecx, edi
call dword [0x100b134c]
mov ecx, esi
call edi
lea ecx, [ebp - 0x34]
mov byte [ebp - 0x481], al
mov byte [ebp - 4], 0x17
call fcn.1002b9c2
cmp byte [ebp - 0x481], 0
je 0x1004d571
push 0x10016718
lea ecx, [ebp - 0x34]
call fcn.1002b985
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 0x46
push eax
lea ecx, [ebp - 0x494]
call fcn.10068d34
push eax
lea ecx, [ebp - 0x4ac]
call fcn.10068ae1
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x48
call fcn.1002b9c2
lea ecx, [ebp - 0x4ac]
call fcn.10068cb7
cmp eax, 5
je 0x1004d562
lea ecx, [ebp - 0x4ac]
call fcn.10068c9f
push eax
lea ecx, [ebp - 0x4cc]
call fcn.1002d3ac
mov byte [ebp - 4], 0x49
mov esi, dword [ebp - 0x4cc]
mov eax, dword [ebp - 0x4c8]
mov dword [ebp - 0x4a0], esi
mov dword [ebp - 0x4b4], eax
cmp esi, eax
je 0x1004d557
mov edi, dword [ebp - 0x490]
push 0x100165dc
lea ecx, [ebp - 0x34]
call fcn.1002b985
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 0x4a
push eax
mov ecx, esi
call fcn.10068da3
mov ecx, eax
call fcn.1006b054
push eax
lea ecx, [ebp - 0x4c]
call fcn.10036f25
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x4c
call fcn.1002b9c2
lea eax, [ebp - 0x4c]
mov ecx, edi
push eax
lea eax, [ebp - 0xb8]
push eax
call fcn.10057a3e
mov esi, eax
lea edi, [ebp - 0x70]
lea eax, [ebp - 0x4c]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push dword [ebp - 0x68]
call fcn.10057e56
mov edi, dword [ebp - 0x490]
test al, al
jne 0x1004d530
cmp dword [edi + 4], 0x6666666
je 0x1004fe1b
lea eax, [ebp - 0x4c]
push eax
push dword [edi]
lea ecx, [ebp - 0x4d4]
push edi
call fcn.100589e4
lea ecx, [ebp - 0x4d4]
mov esi, dword [eax + 4]
and dword [eax + 4], 0
call fcn.100585b8
push esi
push dword [ebp - 0x6c]
mov ecx, edi
push dword [ebp - 0x70]
call fcn.10041c57
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x49
call fcn.1002b9c2
mov esi, dword [ebp - 0x4a0]
add esi, 4
mov dword [ebp - 0x4a0], esi
cmp esi, dword [ebp - 0x4b4]
jne 0x1004d489
lea ecx, [ebp - 0x4cc]
call fcn.1003733c
lea ecx, [ebp - 0x4ac]
mov byte [ebp - 4], 0x17
call fcn.10036d1b
push 0x1001673c
lea ecx, [ebp - 0x34]
call fcn.1002b985
mov byte [ebp - 4], 0x4d
mov esi, dword [ebp - 0x494]
mov eax, dword [esi]
mov edi, dword [eax + 4]
lea eax, [ebp - 0x34]
push eax
mov ecx, edi
call dword [0x100b134c]
mov ecx, esi
call edi
lea ecx, [ebp - 0x34]
mov byte [ebp - 0x481], al
mov byte [ebp - 4], 0x17
call fcn.1002b9c2
cmp byte [ebp - 0x481], 0
je 0x1004d870
push 0x1001673c
lea ecx, [ebp - 0x34]
call fcn.1002b985
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 0x4e
push eax
lea ecx, [ebp - 0x494]
call fcn.10068d34
push eax
lea ecx, [ebp - 0x4a4]
call fcn.10068ae1
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x50
call fcn.1002b9c2
push 0x1001675c
lea ecx, [ebp - 0x4c]
call fcn.1002b985
lea eax, [ebp - 0x4c]
mov byte [ebp - 4], 0x51
push eax
lea ecx, [ebp - 0x4a4]
call fcn.10068d34
mov ecx, eax
call fcn.10068c57
cmp dword [eax + 8], 2
jne 0x1004d62a
fld qword [eax]
call fcn.1008c2a0
jmp 0x1004d62c
mov eax, dword [eax]
mov ecx, eax
call fcn.1005480b
mov ecx, dword [ebp - 0x49c]
mov byte [ebp - 4], 0x50
mov dword [ecx + 0xb0], eax
lea ecx, [ebp - 0x4c]
call fcn.1002b9c2
push 0x1001677c
lea ecx, [ebp - 0x64]
call fcn.1002b985
mov byte [ebp - 4], 0x52
mov esi, dword [ebp - 0x4a4]
mov eax, dword [esi]
mov edi, dword [eax + 4]
lea eax, [ebp - 0x64]
push eax
mov ecx, edi
call dword [0x100b134c]
mov ecx, esi
call edi
lea ecx, [ebp - 0x64]
mov byte [ebp - 0x481], al
mov byte [ebp - 4], 0x50
call fcn.1002b9c2
cmp byte [ebp - 0x481], 0
je 0x1004d861
push 0x1001677c
lea ecx, [ebp - 0x4c]
call fcn.1002b985
lea eax, [ebp - 0x4c]
mov byte [ebp - 4], 0x53
push eax
lea ecx, [ebp - 0x4a4]
call fcn.10068d34
push eax
lea ecx, [ebp - 0x4ac]
call fcn.10068ae1
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x55
call fcn.1002b9c2
lea ecx, [ebp - 0x4ac]
call fcn.10068cb7
cmp eax, 5
je 0x1004d856
lea ecx, [ebp - 0x4ac]
call fcn.10068c9f
push eax
lea ecx, [ebp - 0x70]
call fcn.1002d3ac
mov byte [ebp - 4], 0x56
mov esi, dword [ebp - 0x70]
mov edi, dword [ebp - 0x6c]
jmp 0x1004d846
push 0x1001678c
lea ecx, [ebp - 0x34]
call fcn.1002b985
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 0x57
push eax
mov ecx, esi
call fcn.10068da3
mov ecx, eax
call fcn.10068c57
cmp dword [eax + 8], 2
jne 0x1004d737
fld qword [eax]
call fcn.1008c2a0
jmp 0x1004d739
mov eax, dword [eax]
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x490], eax
mov byte [ebp - 4], 0x56
call fcn.1002b9c2
push 0x100167a0
lea ecx, [ebp - 0x34]
call fcn.1002b985
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 0x58
push eax
mov ecx, esi
call fcn.10068da3
mov ecx, eax
call fcn.1006b054
push eax
lea ecx, [ebp - 0x4c]
call fcn.10036f25
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x5a
call fcn.1002b9c2
push 0x100167b8
lea ecx, [ebp - 0x64]
call fcn.1002b985
push 0
push ecx
lea edx, [ebp - 0x64]
lea ecx, [ebp - 0x4c]
call fcn.100628d1
lea ecx, [ebp - 0x64]
mov byte [ebp - 0x481], al
call fcn.1002b9c2
cmp byte [ebp - 0x481], 0
je 0x1004d805
push 0xffffffffffffffff
push 2
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x4c]
call fcn.10036d39
mov byte [ebp - 4], 0x5b
mov ecx, dword [ebp - 0x490]
call fcn.1005480b
mov ecx, dword [ebp - 0x4e8]
mov dword [ebp - 0x4b4], eax
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x4d4]
push eax
call fcn.100563b0
mov ecx, dword [ebp - 0x4b4]
mov eax, dword [eax]
mov dword [eax + 0x28], ecx
lea ecx, [ebp - 0x64]
call fcn.1002b9c2
jmp 0x1004d837
mov ecx, dword [ebp - 0x490]
call fcn.1005480b
mov ecx, dword [ebp - 0x4f0]
mov dword [ebp - 0x4b4], eax
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x518]
push eax
call fcn.10056473
mov ecx, dword [ebp - 0x4b4]
mov eax, dword [eax]
mov dword [eax + 0x28], ecx
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x56
call fcn.1002b9c2
add esi, 4
cmp esi, edi
jne 0x1004d705
lea ecx, [ebp - 0x70]
call fcn.1003733c
lea ecx, [ebp - 0x4ac]
call fcn.10036d1b
lea ecx, [ebp - 0x4a4]
mov byte [ebp - 4], 0x17
call fcn.10036d1b
mov eax, dword [ebp - 0x49c]
lea ecx, [ebp - 0x34]
push 0x100167c0
mov byte [eax + 0xe0], 0
call fcn.1002b985
mov byte [ebp - 4], 0x5c
mov esi, dword [ebp - 0x494]
mov eax, dword [esi]
mov edi, dword [eax + 4]
lea eax, [ebp - 0x34]
push eax
mov ecx, edi
call dword [0x100b134c]
mov ecx, esi
call edi
lea ecx, [ebp - 0x34]
mov byte [ebp - 0x481], al
mov byte [ebp - 4], 0x17
call fcn.1002b9c2
cmp byte [ebp - 0x481], 0
je 0x1004d932
push 0x100167c0
lea ecx, [ebp - 0x34]
call fcn.1002b985
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 0x5d
push eax
lea ecx, [ebp - 0x494]
call fcn.10068d34
push eax
lea ecx, [ebp - 0x490]
call fcn.10068ae1
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x5f
call fcn.1002b9c2
lea ecx, [ebp - 0x490]
call fcn.10068cb7
cmp eax, 5
je 0x1004d923
lea ecx, [ebp - 0x490]
call fcn.10068c87
mov ecx, dword [ebp - 0x49c]
mov byte [ecx + 0xe0], al
lea ecx, [ebp - 0x490]
mov byte [ebp - 4], 0x17
call fcn.10036d1b
push 0x100167f0
lea ecx, [ebp - 0x34]
call fcn.1002b985
mov byte [ebp - 4], 0x60
mov esi, dword [ebp - 0x494]
mov eax, dword [esi]
mov edi, dword [eax + 4]
lea eax, [ebp - 0x34]
push eax
mov ecx, edi
call dword [0x100b134c]
mov ecx, esi
call edi
lea ecx, [ebp - 0x34]
mov byte [ebp - 0x481], al
mov byte [ebp - 4], 0x17
call fcn.1002b9c2
cmp byte [ebp - 0x481], 0
je 0x1004d9f2
push 0x100167f0
lea ecx, [ebp - 0x34]
call fcn.1002b985
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 0x61
push eax
lea ecx, [ebp - 0x494]
call fcn.10068d34
push eax
lea ecx, [ebp - 0x490]
call fcn.10068ae1
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x63
call fcn.1002b9c2
lea ecx, [ebp - 0x490]
call fcn.10068cb7
cmp eax, 5
je 0x1004d9e3
lea ecx, [ebp - 0x490]
call fcn.10068c87
cmp al, 1
jne 0x1004d9e3
mov eax, dword [0x100b07d0]
mov ecx, dword [ebp - 0x4b0]
push eax
push dword [eax]
call fcn.10055fb8
lea ecx, [ebp - 0x490]
mov byte [ebp - 4], 0x17
call fcn.10036d1b
mov eax, dword [ebp - 0x49c]
lea ecx, [ebp - 0x34]
push 0x10016840
mov byte [eax + 0xc4], 0
call fcn.1002b985
mov byte [ebp - 4], 0x64
mov esi, dword [ebp - 0x494]
mov eax, dword [esi]
mov edi, dword [eax + 4]
lea eax, [ebp - 0x34]
push eax
mov ecx, edi
call dword [0x100b134c]
mov ecx, esi
call edi
lea ecx, [ebp - 0x34]
mov byte [ebp - 0x481], al
mov byte [ebp - 4], 0x17
call fcn.1002b9c2
cmp byte [ebp - 0x481], 0
je 0x1004dab4
push 0x10016840
lea ecx, [ebp - 0x34]
call fcn.1002b985
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 0x65
push eax
lea ecx, [ebp - 0x494]
call fcn.10068d34
push eax
lea ecx, [ebp - 0x490]
call fcn.10068ae1
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x67
call fcn.1002b9c2
lea ecx, [ebp - 0x490]
call fcn.10068cb7
cmp eax, 5
je 0x1004daa5
lea ecx, [ebp - 0x490]
call fcn.10068c87
mov ecx, dword [ebp - 0x49c]
mov byte [ecx + 0xc4], al
lea ecx, [ebp - 0x490]
mov byte [ebp - 4], 0x17
call fcn.10036d1b
mov eax, dword [ebp - 0x49c]
lea ecx, [ebp - 0x34]
push 0x1001688c
mov byte [eax + 0xc5], 0
call fcn.1002b985
mov byte [ebp - 4], 0x68
mov esi, dword [ebp - 0x494]
mov eax, dword [esi]
mov edi, dword [eax + 4]
lea eax, [ebp - 0x34]
push eax
mov ecx, edi
call dword [0x100b134c]
mov ecx, esi
call edi
lea ecx, [ebp - 0x34]
mov byte [ebp - 0x481], al
mov byte [ebp - 4], 0x17
call fcn.1002b9c2
cmp byte [ebp - 0x481], 0
je 0x1004db76
push 0x1001688c
lea ecx, [ebp - 0x34]
call fcn.1002b985
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 0x69
push eax
lea ecx, [ebp - 0x494]
call fcn.10068d34
push eax
lea ecx, [ebp - 0x490]
call fcn.10068ae1
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x6b
call fcn.1002b9c2
lea ecx, [ebp - 0x490]
call fcn.10068cb7
cmp eax, 5
je 0x1004db67
lea ecx, [ebp - 0x490]
call fcn.10068c87
mov ecx, dword [ebp - 0x49c]
mov byte [ecx + 0xc5], al
lea ecx, [ebp - 0x490]
mov byte [ebp - 4], 0x17
call fcn.10036d1b
mov ecx, dword [ebp - 0x4d8]
call fcn.10036e2e
push 0x100168bc
lea ecx, [ebp - 0x34]
call fcn.1002b985
mov byte [ebp - 4], 0x6c
mov esi, dword [ebp - 0x494]
mov eax, dword [esi]
mov edi, dword [eax + 4]
lea eax, [ebp - 0x34]
push eax
mov ecx, edi
call dword [0x100b134c]
mov ecx, esi
call edi
lea ecx, [ebp - 0x34]
mov byte [ebp - 0x481], al
mov byte [ebp - 4], 0x17
call fcn.1002b9c2
cmp byte [ebp - 0x481], 0
je 0x1004dc36
push 0x100168bc
lea ecx, [ebp - 0x34]
call fcn.1002b985
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 0x6d
push eax
lea ecx, [ebp - 0x494]
call fcn.10068d34
push eax
lea ecx, [ebp - 0x490]
call fcn.10068ae1
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x6f
call fcn.1002b9c2
lea ecx, [ebp - 0x490]
call fcn.10068cb7
cmp eax, 5
je 0x1004dc27
lea ecx, [ebp - 0x490]
call fcn.1006b054
mov ecx, dword [ebp - 0x4d8]
push eax
call fcn.10036e90
lea ecx, [ebp - 0x490]
mov byte [ebp - 4], 0x17
call fcn.10036d1b
push 0x100168e8
lea ecx, [ebp - 0x34]
call fcn.1002b985
mov byte [ebp - 4], 0x70
mov esi, dword [ebp - 0x494]
mov eax, dword [esi]
mov edi, dword [eax + 4]
lea eax, [ebp - 0x34]
push eax
mov ecx, edi
call dword [0x100b134c]
mov ecx, esi
call edi
lea ecx, [ebp - 0x34]
mov byte [ebp - 0x481], al
mov byte [ebp - 4], 0x17
call fcn.1002b9c2
cmp byte [ebp - 0x481], 0
je 0x1004dce8
push 0x100168e8
lea ecx, [ebp - 0x34]
call fcn.1002b985
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 0x71
push eax
lea ecx, [ebp - 0x494]
call fcn.10068d34
push eax
lea ecx, [ebp - 0x490]
call fcn.10068ae1
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x73
call fcn.1002b9c2
lea ecx, [ebp - 0x490]
call fcn.10068cb7
cmp eax, 5
je 0x1004dcd9
lea ecx, [ebp - 0x490]
call fcn.10068c87
mov ecx, dword [ebp - 0x49c]
mov byte [ecx + 0x65], al
lea ecx, [ebp - 0x490]
mov byte [ebp - 4], 0x17
call fcn.10036d1b
push 0x10016914
lea ecx, [ebp - 0x34]
call fcn.1002b985
mov byte [ebp - 4], 0x74
mov esi, dword [ebp - 0x494]
mov eax, dword [esi]
mov edi, dword [eax + 4]
lea eax, [ebp - 0x34]
push eax
mov ecx, edi
call dword [0x100b134c]
mov ecx, esi
call edi
lea ecx, [ebp - 0x34]
mov byte [ebp - 0x481], al
mov byte [ebp - 4], 0x17
call fcn.1002b9c2
cmp byte [ebp - 0x481], 0
je 0x1004de75
push 0x10016914
lea ecx, [ebp - 0x34]
call fcn.1002b985
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 0x75
push eax
lea ecx, [ebp - 0x494]
call fcn.10068d34
push eax
lea ecx, [ebp - 0x490]
call fcn.10068ae1
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x77
call fcn.1002b9c2
lea ecx, [ebp - 0x490]
call fcn.10068cb7
cmp eax, 5
je 0x1004de66
lea ecx, [ebp - 0x490]
call fcn.10068c9f
push eax
lea ecx, [ebp - 0x70]
call fcn.1002d3ac
mov byte [ebp - 4], 0x78
mov esi, dword [ebp - 0x70]
mov edi, dword [ebp - 0x6c]
jmp 0x1004de56
push 0x10012684
lea ecx, [ebp - 0x34]
call fcn.1002b985
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 0x79
push eax
mov ecx, esi
call fcn.10068da3
mov ecx, eax
call fcn.1006b054
push eax
lea ecx, [ebp - 0xc4]
call fcn.10036f25
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x7b
call fcn.1002b9c2
push 0x10016934
lea ecx, [ebp - 0x4c]
call fcn.1002b985
lea eax, [ebp - 0x4c]
mov byte [ebp - 4], 0x7c
push eax
mov ecx, esi
call fcn.10068da3
mov ecx, eax
call fcn.1006b054
push eax
lea ecx, [ebp - 0x64]
call fcn.10036f25
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x7e
call fcn.1002b9c2
mov ecx, dword [ebp - 0x4fc]
lea eax, [ebp - 0xc4]
push eax
lea eax, [ebp - 0x4f4]
push eax
call fcn.1005620c
lea ecx, [ebp - 0x64]
push ecx
mov ecx, dword [eax]
add ecx, 0x28
call fcn.10036e90
lea ecx, [ebp - 0x64]
call fcn.1002b9c2
lea ecx, [ebp - 0xc4]
mov byte [ebp - 4], 0x78
call fcn.1002b9c2
add esi, 4
cmp esi, edi
jne 0x1004dda2
lea ecx, [ebp - 0x70]
call fcn.1003733c
lea ecx, [ebp - 0x490]
mov byte [ebp - 4], 0x17
call fcn.10036d1b
push 0x10016944
lea ecx, [ebp - 0x34]
call fcn.1002b985
mov byte [ebp - 4], 0x7f
mov esi, dword [ebp - 0x494]
mov eax, dword [esi]
mov edi, dword [eax + 4]
lea eax, [ebp - 0x34]
push eax
mov ecx, edi
call dword [0x100b134c]
mov ecx, esi
call edi
lea ecx, [ebp - 0x34]
mov byte [ebp - 0x481], al
mov byte [ebp - 4], 0x17
call fcn.1002b9c2
cmp byte [ebp - 0x481], 0
je 0x1004df0b
push 0x10016944
lea ecx, [ebp - 0x34]
call fcn.1002b985
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 0x80
push eax
lea ecx, [ebp - 0x494]
call fcn.10068d34
mov ecx, eax
call fcn.10068c57
cmp dword [eax + 8], 2
jne 0x1004def4
fld qword [eax]
call fcn.1008c2a0
mov ecx, eax
jmp 0x1004def6
mov ecx, dword [eax]
mov eax, dword [ebp - 0x49c]
mov byte [ebp - 4], 0x17
mov dword [eax + 0x68], ecx
lea ecx, [ebp - 0x34]
call fcn.1002b9c2
push 0x10016970
lea ecx, [ebp - 0x34]
call fcn.1002b985
mov byte [ebp - 4], 0x81
mov esi, dword [ebp - 0x494]
mov eax, dword [esi]
mov edi, dword [eax + 4]
lea eax, [ebp - 0x34]
push eax
mov ecx, edi
call dword [0x100b134c]
mov ecx, esi
call edi
lea ecx, [ebp - 0x34]
mov byte [ebp - 0x481], al
mov byte [ebp - 4], 0x17
call fcn.1002b9c2
cmp byte [ebp - 0x481], 0
je 0x1004e03b
push 0x10016970
lea ecx, [ebp - 0x34]
call fcn.1002b985
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 0x82
push eax
lea ecx, [ebp - 0x494]
call fcn.10068d34
push eax
lea ecx, [ebp - 0x490]
call fcn.10068ae1
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x84
call fcn.1002b9c2
lea ecx, [ebp - 0x490]
call fcn.10068cb7
cmp eax, 5
je 0x1004e02c
lea ecx, [ebp - 0x490]
call fcn.10068c9f
push eax
lea ecx, [ebp - 0x70]
call fcn.1002d3ac
mov byte [ebp - 4], 0x85
mov esi, dword [ebp - 0x70]
mov edi, dword [ebp - 0x6c]
jmp 0x1004e020
lea ecx, [ebp - 0x480]
call fcn.1004fe21
lea eax, [ebp - 0x480]
mov byte [ebp - 4], 0x86
mov ecx, dword [ebp - 0x49c]
push eax
push esi
call fcn.10051544
mov ecx, dword [ebp - 0x4dc]
lea eax, [ebp - 0x480]
push eax
lea eax, [ebp - 0x500]
push eax
call fcn.10056324
lea ecx, [ebp - 0x480]
push ecx
mov ecx, dword [eax]
add ecx, 0x28
call fcn.10050021
lea ecx, [ebp - 0x480]
mov byte [ebp - 4], 0x85
call fcn.10038d99
add esi, 4
cmp esi, edi
jne 0x1004dfc2
lea ecx, [ebp - 0x70]
call fcn.1003733c
lea ecx, [ebp - 0x490]
mov byte [ebp - 4], 0x17
call fcn.10036d1b
mov esi, 0x10016984
lea ecx, [ebp - 0x34]
push esi
call fcn.1002b985
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 0x87
push eax
lea ecx, [ebp - 0x494]
call fcn.1003c6b2
lea ecx, [ebp - 0x34]
mov byte [ebp - 0x481], al
mov byte [ebp - 4], 0x17
call fcn.1002b9c2
cmp byte [ebp - 0x481], 0
je 0x1004ed24
push esi
lea ecx, [ebp - 0x34]
call fcn.1002b985
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 0x88
push eax
lea ecx, [ebp - 0x494]
call fcn.10068d34
push eax
lea ecx, [ebp - 0x4b0]
call fcn.10068ae1
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x8a
call fcn.1002b9c2
lea ecx, [ebp - 0x4b0]
call fcn.10068cb7
cmp eax, 5
je 0x1004ed15
lea ecx, [ebp - 0x4b0]
call fcn.10068cb7
cmp eax, 2
jne 0x1004ed15
lea ecx, [ebp - 0x4b0]
call fcn.1006b054
push eax
lea ecx, [ebp - 0x4c]
call fcn.10036f25
lea ecx, [ebp - 0x498]
mov byte [ebp - 4], 0x8b
call fcn.10068a4c
mov byte [ebp - 4], 0x8d
lea eax, [ebp - 0x4c]
cmp dword [ebp - 0x38], 8
jb 0x1004e10a
mov eax, dword [ebp - 0x4c]
push eax
lea ecx, [ebp - 0x34]
call fcn.1002b985
lea edx, [ebp - 0x34]
mov byte [ebp - 4], 0x8e
lea ecx, [ebp - 0x4a0]
call fcn.1006b362
mov esi, dword [ebp - 0x488]
lea eax, [ebp - 0x4a0]
or esi, 0x20000000
lea ecx, [ebp - 0x498]
push eax
mov dword [ebp - 0x488], esi
mov dword [ebp - 0x48c], esi
call fcn.10068b67
lea ecx, [ebp - 0x4a0]
call fcn.10036d1b
lea ecx, [ebp - 0x34]
call fcn.1002b9c2
mov dword [ebp - 4], 0x8c
jmp 0x1004e2af
lea ecx, [ebp - 0x498]
call fcn.10068cb7
cmp eax, 5
je 0x1004ed02
lea ecx, [ebp - 0x498]
call fcn.10068cb7
cmp eax, 4
jne 0x1004ed02
lea ecx, [ebp - 0x498]
call fcn.10068c9f
push eax
lea ecx, [ebp - 0x4cc]
call fcn.1002d3ac
mov edi, dword [ebp - 0x4c8]
mov esi, dword [ebp - 0x4cc]
mov dword [ebp - 0x4fc], edi
jmp 0x1004ece9
lea ecx, [ebp - 0x1c8]
call fcn.1004fff6
push 0x10012644
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x91
call fcn.1002b985
mov byte [ebp - 4], 0x92
mov ecx, esi
mov eax, dword [ebp - 0x488]
or eax, 0x100
mov dword [ebp - 0x488], eax
mov dword [ebp - 0x48c], eax
lea eax, [ebp - 0x64]
push eax
call fcn.1003c6b2
test al, al
je 0x1004e394
push 0x10012644
lea ecx, [ebp - 0x34]
call fcn.1002b985
mov dword [ebp - 4], 0x93
mov ecx, esi
mov eax, dword [ebp - 0x488]
or eax, 0x200
mov dword [ebp - 0x488], eax
mov dword [ebp - 0x48c], eax
lea eax, [ebp - 0x34]
push eax
call fcn.10068da3
mov ecx, eax
call fcn.10068cb7
mov byte [ebp - 0x482], 1
cmp eax, 5
jne 0x1004e39b
mov byte [ebp - 0x482], 0
mov eax, dword [ebp - 0x488]
test eax, 0x200
je 0x1004e3c7
and eax, 0xfffffdff
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x488], eax
mov dword [ebp - 0x48c], eax
call fcn.1002b9c2
mov eax, dword [ebp - 0x488]
mov dword [ebp - 4], 0x91
test eax, 0x100
je 0x1004e3ee
and eax, 0xfffffeff
lea ecx, [ebp - 0x64]
mov dword [ebp - 0x488], eax
mov dword [ebp - 0x48c], eax
call fcn.1002b9c2
cmp byte [ebp - 0x482], 0
je 0x1004eca5
push 0x10012644
lea ecx, [ebp - 0x34]
call fcn.1002b985
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 0x94
push eax
mov ecx, esi
call fcn.10068da3
mov ecx, eax
call fcn.1006b054
push eax
lea ecx, [ebp - 0x1c8]
call fcn.10036e90
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x91
call fcn.1002b9c2
push 0x10012684
lea ecx, [ebp - 0x64]
call fcn.1002b985
mov byte [ebp - 4], 0x95
mov ecx, esi
mov eax, dword [ebp - 0x488]
or eax, 0x400
mov dword [ebp - 0x488], eax
mov dword [ebp - 0x48c], eax
lea eax, [ebp - 0x64]
push eax
call fcn.1003c6b2
test al, al
je 0x1004e4b6
push 0x10012684
lea ecx, [ebp - 0x34]
call fcn.1002b985
mov dword [ebp - 4], 0x96
mov ecx, esi
mov eax, dword [ebp - 0x488]
or eax, 0x800
mov dword [ebp - 0x488], eax
mov dword [ebp - 0x48c], eax
lea eax, [ebp - 0x34]
push eax
call fcn.10068da3
mov ecx, eax
call fcn.10068cb7
mov byte [ebp - 0x482], 1
cmp eax, 5
jne 0x1004e4bd
mov byte [ebp - 0x482], 0
mov eax, dword [ebp - 0x488]
test eax, 0x800
je 0x1004e4e3
and eax, 0xfffff7ff
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x488], eax
call fcn.1002b9c2
mov eax, dword [ebp - 0x488]
mov dword [ebp - 4], 0x91
test eax, 0x400
je 0x1004e504
and eax, 0xfffffbff
lea ecx, [ebp - 0x64]
mov dword [ebp - 0x488], eax
call fcn.1002b9c2
cmp byte [ebp - 0x482], 0
je 0x1004e54a
push 0x10012684
lea ecx, [ebp - 0x34]
call fcn.1002b985
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 0x97
push eax
mov ecx, esi
call fcn.10068da3
mov ecx, eax
call fcn.1006b054
push eax
lea ecx, [ebp - 0x1b0]
call fcn.10036e90
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x91
call fcn.1002b9c2
jmp 0x1004e55a
push 0x10016a88
lea ecx, [ebp - 0x1b0]
call fcn.10036e69
push 0x10016a90
lea ecx, [ebp - 0x64]
call fcn.1002b985
mov byte [ebp - 4], 0x98
mov ecx, esi
mov eax, dword [ebp - 0x488]
or eax, 0x1000
mov dword [ebp - 0x488], eax
mov dword [ebp - 0x48c], eax
lea eax, [ebp - 0x64]
push eax
call fcn.1003c6b2
test al, al
je 0x1004e5da
push 0x10016a90
lea ecx, [ebp - 0x34]
call fcn.1002b985
mov dword [ebp - 4], 0x99
mov ecx, esi
mov eax, dword [ebp - 0x488]
or eax, 0x2000
mov dword [ebp - 0x488], eax
mov dword [ebp - 0x48c], eax
lea eax, [ebp - 0x34]
push eax
call fcn.10068da3
mov ecx, eax
call fcn.10068cb7
mov byte [ebp - 0x482], 1
cmp eax, 5
jne 0x1004e5e1
mov byte [ebp - 0x482], 0
mov eax, dword [ebp - 0x488]
test eax, 0x2000
je 0x1004e607
and eax, 0xffffdfff
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x488], eax
call fcn.1002b9c2
mov eax, dword [ebp - 0x488]
mov dword [ebp - 4], 0x91
test eax, 0x1000
je 0x1004e628
and eax, 0xffffefff
lea ecx, [ebp - 0x64]
mov dword [ebp - 0x488], eax
call fcn.1002b9c2
cmp byte [ebp - 0x482], 0
je 0x1004e66e
push 0x10016a90
lea ecx, [ebp - 0x34]
call fcn.1002b985
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 0x9a
push eax
mov ecx, esi
call fcn.10068da3
mov ecx, eax
call fcn.1006b054
push eax
lea ecx, [ebp - 0x198]
call fcn.10036e90
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x91
call fcn.1002b9c2
jmp 0x1004e67e
push 0x10016a88
lea ecx, [ebp - 0x1b0]
call fcn.10036e69
push 0x10016aa8
lea ecx, [ebp - 0x64]
call fcn.1002b985
mov byte [ebp - 4], 0x9b
mov ecx, esi
mov eax, dword [ebp - 0x488]
or eax, 0x4000
mov dword [ebp - 0x488], eax
mov dword [ebp - 0x48c], eax
lea eax, [ebp - 0x64]
push eax
call fcn.1003c6b2
test al, al
je 0x1004e6fe
push 0x10016aa8
lea ecx, [ebp - 0x34]
call fcn.1002b985
mov dword [ebp - 4], 0x9c
mov ecx, esi
mov eax, dword [ebp - 0x488]
or eax, 0x8000
mov dword [ebp - 0x488], eax
mov dword [ebp - 0x48c], eax
lea eax, [ebp - 0x34]
push eax
call fcn.10068da3
mov ecx, eax
call fcn.10068cb7
mov byte [ebp - 0x482], 1
cmp eax, 5
jne 0x1004e705
mov byte [ebp - 0x482], 0
mov eax, dword [ebp - 0x488]
test eax, 0x8000
je 0x1004e731
and eax, 0xffff7fff
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x488], eax
mov dword [ebp - 0x48c], eax
call fcn.1002b9c2
mov eax, dword [ebp - 0x488]
mov dword [ebp - 4], 0x91
test eax, 0x4000
je 0x1004e758
and eax, 0xffffbfff
lea ecx, [ebp - 0x64]
mov dword [ebp - 0x488], eax
mov dword [ebp - 0x48c], eax
call fcn.1002b9c2
cmp byte [ebp - 0x482], 0
je 0x1004ec16
push 0x10016aa8
lea ecx, [ebp - 0x34]
call fcn.1002b985
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 0x9d
push eax
mov ecx, esi
call fcn.10068da3
mov ecx, eax
call fcn.10068c9f
push eax
lea ecx, [ebp - 0x70]
call fcn.1002d3ac
lea ecx, [ebp - 0x34]
call fcn.1002b9c2
mov edi, dword [ebp - 0x70]
mov eax, dword [ebp - 0x6c]
cmp edi, eax
je 0x1004ec04
mov esi, eax
xor eax, eax
xor edx, edx
push 7
pop ecx
mov dword [ebp - 0xe4], ecx
mov dword [ebp - 0xcc], ecx
xor ecx, ecx
mov dword [ebp - 0xf8], eax
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xe8], eax
mov word [ebp - 0xf8], dx
mov dword [ebp - 0xd0], eax
mov word [ebp - 0xe0], cx
mov byte [ebp - 0xc8], al
push 0x10016ab4
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0xa0
call fcn.1002b985
mov byte [ebp - 4], 0xa1
mov ecx, edi
mov eax, dword [ebp - 0x488]
or eax, 0x10000
mov dword [ebp - 0x488], eax
mov dword [ebp - 0x48c], eax
lea eax, [ebp - 0x64]
push eax
call fcn.1003c6b2
test al, al
je 0x1004e86e
push 0x10016ab4
lea ecx, [ebp - 0x34]
call fcn.1002b985
mov dword [ebp - 4], 0xa2
mov ecx, edi
mov eax, dword [ebp - 0x488]
or eax, 0x20000
mov dword [ebp - 0x488], eax
mov dword [ebp - 0x48c], eax
lea eax, [ebp - 0x34]
push eax
call fcn.10068da3
mov ecx, eax
call fcn.10068cb7
mov byte [ebp - 0x482], 1
cmp eax, 5
jne 0x1004e875
mov byte [ebp - 0x482], 0
mov eax, dword [ebp - 0x488]
test eax, 0x20000
je 0x1004e8a1
and eax, 0xfffdffff
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x488], eax
mov dword [ebp - 0x48c], eax
call fcn.1002b9c2
mov eax, dword [ebp - 0x488]
mov dword [ebp - 4], 0xa0
test eax, 0x10000
je 0x1004e8c8
and eax, 0xfffeffff
lea ecx, [ebp - 0x64]
mov dword [ebp - 0x488], eax
mov dword [ebp - 0x48c], eax
call fcn.1002b9c2
cmp byte [ebp - 0x482], 0
je 0x1004ebb2
push 0x10016ab4
lea ecx, [ebp - 0x34]
call fcn.1002b985
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 0xa3
push eax
mov ecx, edi
call fcn.10068da3
mov ecx, eax
call fcn.1006b054
push eax
lea ecx, [ebp - 0xe0]
call fcn.10036e90
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0xa0
call fcn.1002b9c2
push 0x10012684
lea ecx, [ebp - 0x64]
call fcn.1002b985
mov byte [ebp - 4], 0xa4
mov ecx, edi
mov eax, dword [ebp - 0x488]
or eax, 0x40000
mov dword [ebp - 0x488], eax
mov dword [ebp - 0x48c], eax
lea eax, [ebp - 0x64]
push eax
call fcn.1003c6b2
test al, al
je 0x1004e990
push 0x10012684
lea ecx, [ebp - 0x34]
call fcn.1002b985
mov dword [ebp - 4], 0xa5
mov ecx, edi
mov eax, dword [ebp - 0x488]
or eax, 0x80000
mov dword [ebp - 0x488], eax
mov dword [ebp - 0x48c], eax
lea eax, [ebp - 0x34]
push eax
call fcn.10068da3
mov ecx, eax
call fcn.10068cb7
mov byte [ebp - 0x482], 1
cmp eax, 5
jne 0x1004e997
mov byte [ebp - 0x482], 0
mov eax, dword [ebp - 0x488]
test eax, 0x80000
je 0x1004e9bd
and eax, 0xfff7ffff
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x488], eax
call fcn.1002b9c2
mov eax, dword [ebp - 0x488]
mov dword [ebp - 4], 0xa0
test eax, 0x40000
je 0x1004e9de
and eax, 0xfffbffff
lea ecx, [ebp - 0x64]
mov dword [ebp - 0x488], eax
call fcn.1002b9c2
cmp byte [ebp - 0x482], 0
je 0x1004ea24
push 0x10012684
lea ecx, [ebp - 0x34]
call fcn.1002b985
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 0xa6
push eax
mov ecx, edi
call fcn.10068da3
mov ecx, eax
call fcn.1006b054
push eax
lea ecx, [ebp - 0xf8]
call fcn.10036e90
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0xa0
call fcn.1002b9c2
jmp 0x1004ea34
push 0x10016a88
lea ecx, [ebp - 0xf8]
call fcn.10036e69
push 0x10016b2c
lea ecx, [ebp - 0x64]
call fcn.1002b985
mov byte [ebp - 4], 0xa7
mov ecx, edi
mov eax, dword [ebp - 0x488]
or eax, 0x100000
mov dword [ebp - 0x488], eax
mov dword [ebp - 0x48c], eax
lea eax, [ebp - 0x64]
push eax
call fcn.1003c6b2
test al, al
je 0x1004eab4
push 0x10016b2c
lea ecx, [ebp - 0x34]
call fcn.1002b985
mov dword [ebp - 4], 0xa8
mov ecx, edi
mov eax, dword [ebp - 0x488]
or eax, 0x200000
mov dword [ebp - 0x488], eax
mov dword [ebp - 0x48c], eax
lea eax, [ebp - 0x34]
push eax
call fcn.10068da3
mov ecx, eax
call fcn.10068cb7
mov byte [ebp - 0x482], 1
cmp eax, 5
jne 0x1004eabb
mov byte [ebp - 0x482], 0
mov eax, dword [ebp - 0x488]
test eax, 0x200000
je 0x1004eae7
and eax, 0xffdfffff
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x488], eax
mov dword [ebp - 0x48c], eax
call fcn.1002b9c2
mov eax, dword [ebp - 0x488]
mov dword [ebp - 4], 0xa0
test eax, 0x100000
je 0x1004eb0e
and eax, 0xffefffff
lea ecx, [ebp - 0x64]
mov dword [ebp - 0x488], eax
mov dword [ebp - 0x48c], eax
call fcn.1002b9c2
cmp byte [ebp - 0x482], 0
je 0x1004eb4e
push 0x10016b2c
lea ecx, [ebp - 0x34]
call fcn.1002b985
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 0xa9
push eax
mov ecx, edi
call fcn.10068da3
mov ecx, eax
call fcn.10068c87
lea ecx, [ebp - 0x34]
mov byte [ebp - 0xc8], al
mov byte [ebp - 4], 0xa0
call fcn.1002b9c2
jmp 0x1004eb55
mov byte [ebp - 0xc8], 0
mov eax, dword [ebp - 0x17c]
lea ecx, [ebp - 0xf8]
push ecx
cmp eax, dword [ebp - 0x178]
je 0x1004eb7a
mov edx, eax
call fcn.100566a3
add dword [ebp - 0x17c], 0x34
jmp 0x1004eb86
push eax
lea ecx, [ebp - 0x180]
call fcn.100566dd
mov ecx, dword [ebp - 0x508]
lea eax, [ebp - 0xe0]
push eax
lea eax, [ebp - 0x4b8]
push eax
call fcn.1005658b
mov ecx, dword [eax]
lea eax, [ebp - 0x1c8]
add ecx, 0x28
push eax
call fcn.10036c80
jmp 0x1004ebe8
call fcn.100616f8
mov ecx, dword [eax]
cmp dword [ecx], 5
jbe 0x1004ebe8
push 0
push 0
call fcn.1002579a
test al, al
je 0x1004ebe8
lea eax, [ebp - 0x4dc]
mov dword [ebp - 0x4dc], 0x10016ad8
push eax
push ecx
push ecx
mov edx, 0x1002225b
call fcn.10025991
lea ecx, [ebp - 0xf8]
call fcn.100390b0
add edi, 4
cmp edi, esi
jne 0x1004e7a9
mov esi, dword [ebp - 0x4a0]
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x91
call fcn.1003733c
mov edi, dword [ebp - 0x4fc]
mov ecx, dword [ebp - 0x4bc]
lea eax, [ebp - 0x1c8]
push eax
lea eax, [ebp - 0x4d4]
push eax
call fcn.10056617
lea ecx, [ebp - 0x1c8]
push ecx
mov eax, dword [eax]
add eax, 0x28
mov ecx, eax
mov dword [ebp - 0x490], eax
call fcn.10036e90
mov ecx, dword [ebp - 0x490]
lea eax, [ebp - 0x1b0]
push eax
add ecx, 0x18
call fcn.10036e90
mov ecx, dword [ebp - 0x490]
lea eax, [ebp - 0x198]
push eax
lea ecx, [ecx + 0x30]
call fcn.10036e90
mov ecx, dword [ebp - 0x490]
lea eax, [ebp - 0x180]
add ecx, 0x48
cmp ecx, eax
je 0x1004ecdb
mov byte [ebp - 0x4f0], 0
push dword [ebp - 0x4f0]
push dword [ebp - 0x17c]
push dword [ebp - 0x180]
call fcn.1005808a
jmp 0x1004ecdb
call fcn.100616f8
mov ecx, dword [eax]
cmp dword [ecx], 5
jbe 0x1004ecdb
push 0
push 0
call fcn.1002579a
test al, al
je 0x1004ecdb
lea eax, [ebp - 0x4dc]
mov dword [ebp - 0x4dc], 0x10016a18
push eax
push ecx
push ecx
mov edx, 0x1002225b
call fcn.10025991
lea ecx, [ebp - 0x1c8]
call fcn.10038e5b
add esi, 4
mov dword [ebp - 0x4a0], esi
cmp esi, edi
jne 0x1004e305
lea ecx, [ebp - 0x4cc]
call fcn.1003733c
lea ecx, [ebp - 0x498]
call fcn.10036d1b
lea ecx, [ebp - 0x4c]
call fcn.1002b9c2
lea ecx, [ebp - 0x4b0]
mov byte [ebp - 4], 0x17
call fcn.10036d1b
mov esi, 0x10016b44
lea ecx, [ebp - 0x34]
push esi
call fcn.1002b985
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 0xaa
push eax
lea ecx, [ebp - 0x494]
call fcn.1003c6b2
lea ecx, [ebp - 0x34]
mov byte [ebp - 0x481], al
mov byte [ebp - 4], 0x17
call fcn.1002b9c2
cmp byte [ebp - 0x481], 0
je 0x1004f139
push esi
lea ecx, [ebp - 0x34]
call fcn.1002b985
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 0xab
push eax
lea ecx, [ebp - 0x494]
call fcn.10068d34
push eax
lea ecx, [ebp - 0x4ac]
call fcn.10068ae1
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0xad
call fcn.1002b9c2
lea ecx, [ebp - 0x4ac]
call fcn.10068cb7
cmp eax, 5
je 0x1004f12a
lea ecx, [ebp - 0x4ac]
call fcn.10068c9f
push eax
lea ecx, [ebp - 0x70]
call fcn.1002d3ac
mov byte [ebp - 4], 0xae
mov esi, dword [ebp - 0x70]
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x490], esi
mov dword [ebp - 0x4bc], eax
cmp esi, eax
je 0x1004f122
mov edi, 0x10016b74
lea ecx, [ebp - 0xe4]
call fcn.100501ef
push 0x100165dc
lea ecx, [ebp - 0x1f8]
call fcn.1002b985
lea eax, [ebp - 0x1f8]
mov byte [ebp - 4], 0xaf
push eax
mov ecx, esi
call fcn.10068da3
mov ecx, eax
call fcn.1006b054
push eax
lea ecx, [ebp - 0x270]
call fcn.10036f25
lea ecx, [ebp - 0x1f8]
mov byte [ebp - 4], 0xb1
call fcn.1002b9c2
push edi
lea ecx, [ebp - 0x110]
call fcn.1002b985
lea eax, [ebp - 0x110]
mov byte [ebp - 4], 0xb2
push eax
mov ecx, esi
call fcn.1003c6b2
lea ecx, [ebp - 0x110]
mov byte [ebp - 0x481], al
mov byte [ebp - 4], 0xb1
call fcn.1002b9c2
cmp byte [ebp - 0x481], 0
je 0x1004ef7b
push edi
lea ecx, [ebp - 0x110]
call fcn.1002b985
lea eax, [ebp - 0x110]
mov byte [ebp - 4], 0xb3
push eax
mov ecx, esi
call fcn.10068da3
push eax
lea ecx, [ebp - 0x514]
call fcn.10068ae1
lea ecx, [ebp - 0x110]
mov byte [ebp - 4], 0xb5
call fcn.1002b9c2
lea ecx, [ebp - 0x514]
call fcn.10068cb7
cmp eax, 5
je 0x1004ef6c
push edi
lea ecx, [ebp - 0x158]
call fcn.1002b985
lea eax, [ebp - 0x158]
mov byte [ebp - 4], 0xb6
push eax
mov ecx, esi
call fcn.10068da3
mov ecx, eax
call fcn.1006b054
push eax
lea ecx, [ebp - 0x128]
call fcn.10036f25
lea ecx, [ebp - 0x158]
mov byte [ebp - 4], 0xb8
call fcn.1002b9c2
xor eax, eax
lea ecx, [ebp - 0x5c]
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x128]
push eax
call fcn.10063a94
neg al
push 0x10016b8c
sbb al, al
inc al
push eax
push 0x80004005
push 0x10016bc4
push 0x1c5
push dword [ebx + 4]
call fcn.10039338
lea esi, [ebp - 0x5c]
add esp, 0x18
lea edi, [ebp - 0xe4]
movsd dword es:[edi], dword [esi]
lea ecx, [ebp - 0x128]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.1002b9c2
mov ecx, dword [ebp - 0x48c]
mov esi, dword [ebp - 0x490]
mov dword [ebp - 0x488], ecx
lea ecx, [ebp - 0x514]
mov byte [ebp - 4], 0xb1
call fcn.10036d1b
push 0x10016bfc
lea ecx, [ebp - 0x128]
call fcn.1002b985
lea eax, [ebp - 0x128]
mov byte [ebp - 4], 0xb9
push eax
mov ecx, esi
call fcn.1003c6b2
lea ecx, [ebp - 0x128]
mov byte [ebp - 0x481], al
mov byte [ebp - 4], 0xb1
call fcn.1002b9c2
cmp byte [ebp - 0x481], 0
je 0x1004f0ca
push 0x10016bfc
lea ecx, [ebp - 0x128]
call fcn.1002b985
lea eax, [ebp - 0x128]
mov byte [ebp - 4], 0xba
push eax
mov ecx, esi
call fcn.10068da3
push eax
lea ecx, [ebp - 0x4d0]
call fcn.10068ae1
lea ecx, [ebp - 0x128]
mov byte [ebp - 4], 0xbc
call fcn.1002b9c2
lea ecx, [ebp - 0x4d0]
call fcn.10068cb7
cmp eax, 5
je 0x1004f0bb
push 0x10016bfc
lea ecx, [ebp - 0x158]
call fcn.1002b985
lea eax, [ebp - 0x158]
mov byte [ebp - 4], 0xbd
push eax
mov ecx, esi
call fcn.10068da3
mov ecx, eax
call fcn.1006b054
push eax
lea ecx, [ebp - 0x110]
call fcn.10036f25
lea ecx, [ebp - 0x158]
mov byte [ebp - 4], 0xbf
call fcn.1002b9c2
xor eax, eax
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x110]
push eax
call fcn.10063a94
neg al
push 0x10016c14
sbb al, al
inc al
push eax
push 0x80004005
push 0x10016bc4
push 0x1d1
push dword [ebx + 4]
call fcn.10039338
lea esi, [ebp - 0x44]
add esp, 0x18
lea edi, [ebp - 0xd4]
movsd dword es:[edi], dword [esi]
lea ecx, [ebp - 0x110]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.1002b9c2
mov ecx, dword [ebp - 0x48c]
mov dword [ebp - 0x488], ecx
lea ecx, [ebp - 0x4d0]
mov byte [ebp - 4], 0xb1
call fcn.10036d1b
mov ecx, dword [ebp - 0x4c0]
lea eax, [ebp - 0x270]
push eax
lea eax, [ebp - 0x50c]
push eax
call fcn.100564ff
push 8
pop ecx
lea esi, [ebp - 0xe4]
mov edi, dword [eax]
add edi, 0x28
rep movsd dword es:[edi], dword [esi]
lea ecx, [ebp - 0x270]
mov byte [ebp - 4], 0xae
call fcn.1002b9c2
mov esi, dword [ebp - 0x490]
mov edi, 0x10016b74
add esi, 4
mov dword [ebp - 0x490], esi
cmp esi, dword [ebp - 0x4bc]
jne 0x1004ede3
lea ecx, [ebp - 0x70]
call fcn.1003733c
lea ecx, [ebp - 0x4ac]
mov byte [ebp - 4], 0x17
call fcn.10036d1b
mov esi, dword [ebp - 0x4a8]
lea ecx, [ebp - 0x2b8]
mov edi, 0x10016c50
push edi
mov dword [esi], 0xfffffffe
call fcn.1002b985
lea eax, [ebp - 0x2b8]
mov byte [ebp - 4], 0xc0
push eax
lea ecx, [ebp - 0x494]
call fcn.1003c6b2
lea ecx, [ebp - 0x2b8]
mov byte [ebp - 0x481], al
mov byte [ebp - 4], 0x17
call fcn.1002b9c2
cmp byte [ebp - 0x481], 0
je 0x1004f1f2
push edi
lea ecx, [ebp - 0x140]
call fcn.1002b985
lea eax, [ebp - 0x140]
mov byte [ebp - 4], 0xc1
push eax
lea ecx, [ebp - 0x494]
call fcn.10068d34
push eax
lea ecx, [ebp - 0x4e8]
call fcn.10068ae1
lea ecx, [ebp - 0x140]
mov byte [ebp - 4], 0xc3
call fcn.1002b9c2
lea ecx, [ebp - 0x4e8]
call fcn.10068ccf
test al, al
je 0x1004f1e3
lea ecx, [ebp - 0x4e8]
call fcn.10068c6f
mov dword [esi], eax
lea ecx, [ebp - 0x4e8]
mov byte [ebp - 4], 0x17
call fcn.10036d1b
mov esi, 0x10016ca0
lea ecx, [ebp - 0x170]
push esi
call fcn.1002b985
lea eax, [ebp - 0x170]
mov byte [ebp - 4], 0xc4
push eax
lea ecx, [ebp - 0x494]
call fcn.1003c6b2
lea ecx, [ebp - 0x170]
mov byte [ebp - 0x481], al
mov byte [ebp - 4], 0x17
call fcn.1002b9c2
cmp byte [ebp - 0x481], 0
je 0x1004fb49
push esi
lea ecx, [ebp - 0xac]
call fcn.1002b985
lea eax, [ebp - 0xac]
mov byte [ebp - 4], 0xc5
push eax
lea ecx, [ebp - 0x494]
call fcn.10068d34
push eax
lea ecx, [ebp - 0x4b0]
call fcn.10068ae1
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 0xc7
call fcn.1002b9c2
lea ecx, [ebp - 0x4b0]
call fcn.10068cb7
cmp eax, 5
je 0x1004fb3a
lea ecx, [ebp - 0x4b0]
call fcn.10068cb7
cmp eax, 2
jne 0x1004fb3a
lea ecx, [ebp - 0x4b0]
call fcn.1006b054
push eax
lea ecx, [ebp - 0x34]
call fcn.10036f25
lea ecx, [ebp - 0x498]
mov byte [ebp - 4], 0xc8
call fcn.10068a4c
mov byte [ebp - 4], 0xca
lea eax, [ebp - 0x34]
cmp dword [ebp - 0x20], 8
jb 0x1004f2d3
mov eax, dword [ebp - 0x34]
push eax
lea ecx, [ebp - 0x94]
call fcn.1002b985
lea edx, [ebp - 0x94]
mov byte [ebp - 4], 0xcb
lea ecx, [ebp - 0x4b4]
call fcn.1006b362
or dword [ebp - 0x488], 0x40000000
lea eax, [ebp - 0x4b4]
push eax
lea ecx, [ebp - 0x498]
call fcn.10068b67
lea ecx, [ebp - 0x4b4]
call fcn.10036d1b
lea ecx, [ebp - 0x94]
call fcn.1002b9c2
mov dword [ebp - 4], 0xc9
jmp 0x1004f473
lea ecx, [ebp - 0x498]
call fcn.10068cb7
cmp eax, 5
je 0x1004fb27
lea ecx, [ebp - 0x498]
call fcn.10068cb7
cmp eax, 4
jne 0x1004fb27
lea ecx, [ebp - 0x498]
call fcn.10068c9f
push eax
lea ecx, [ebp - 0xb8]
call fcn.1002d3ac
mov byte [ebp - 4], 0xcd
mov edi, dword [ebp - 0xb4]
mov esi, dword [ebp - 0xb8]
mov dword [ebp - 0x4c0], edi
jmp 0x1004fb0e
push 0x10012644
lea ecx, [ebp - 0xac]
call fcn.1002b985
mov byte [ebp - 4], 0xce
mov ecx, esi
mov eax, dword [ebp - 0x488]
or eax, 0x400000
mov dword [ebp - 0x488], eax
mov dword [ebp - 0x48c], eax
lea eax, [ebp - 0xac]
push eax
call fcn.1003c6b2
test al, al
je 0x1004f559
push 0x10012644
lea ecx, [ebp - 0x94]
call fcn.1002b985
mov dword [ebp - 4], 0xcf
mov ecx, esi
mov eax, dword [ebp - 0x488]
or eax, 0x800000
mov dword [ebp - 0x488], eax
mov dword [ebp - 0x48c], eax
lea eax, [ebp - 0x94]
push eax
call fcn.10068da3
mov ecx, eax
call fcn.10068cb7
mov byte [ebp - 0x482], 0
cmp eax, 5
jne 0x1004f560
mov byte [ebp - 0x482], 1
mov eax, dword [ebp - 0x488]
test eax, 0x800000
je 0x1004f589
and eax, 0xff7fffff
lea ecx, [ebp - 0x94]
mov dword [ebp - 0x488], eax
call fcn.1002b9c2
mov eax, dword [ebp - 0x488]
mov dword [ebp - 4], 0xcd
test eax, 0x400000
je 0x1004f5ad
and eax, 0xffbfffff
lea ecx, [ebp - 0xac]
mov dword [ebp - 0x488], eax
call fcn.1002b9c2
cmp byte [ebp - 0x482], 0
je 0x1004f5f9
call fcn.100616f8
mov ecx, dword [eax]
cmp dword [ecx], 5
jbe 0x1004fb0b
push 0
push 0
call fcn.1002579a
test al, al
je 0x1004fb0b
lea eax, [ebp - 0x4a8]
mov dword [ebp - 0x4a8], 0x10016d38
push eax
push ecx
push ecx
mov edx, 0x1002225b
call fcn.10025991
jmp 0x1004fb0b
push 0x10012644
lea ecx, [ebp - 0x94]
call fcn.1002b985
lea eax, [ebp - 0x94]
mov byte [ebp - 4], 0xd0
push eax
mov ecx, esi
call fcn.10068da3
mov ecx, eax
call fcn.1006b054
push eax
lea ecx, [ebp - 0x140]
call fcn.10036f25
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0xd2
call fcn.1002b9c2
push 0x10016db4
lea ecx, [ebp - 0x170]
mov byte [ebp - 0x481], 0
call fcn.1002b985
mov byte [ebp - 4], 0xd3
mov ecx, esi
mov eax, dword [ebp - 0x488]
or eax, 0x1000000
mov dword [ebp - 0x488], eax
mov dword [ebp - 0x48c], eax
lea eax, [ebp - 0x170]
push eax
call fcn.1003c6b2
test al, al
je 0x1004f6d0
push 0x10016db4
lea ecx, [ebp - 0xac]
call fcn.1002b985
mov dword [ebp - 4], 0xd4
mov ecx, esi
mov eax, dword [ebp - 0x488]
or eax, 0x2000000
mov dword [ebp - 0x488], eax
mov dword [ebp - 0x48c], eax
lea eax, [ebp - 0xac]
push eax
call fcn.10068da3
mov ecx, eax
call fcn.10068cb7
mov byte [ebp - 0x482], 1
cmp eax, 5
jne 0x1004f6d7
mov byte [ebp - 0x482], 0
mov eax, dword [ebp - 0x488]
test eax, 0x2000000
je 0x1004f700
and eax, 0xfdffffff
lea ecx, [ebp - 0xac]
mov dword [ebp - 0x488], eax
call fcn.1002b9c2
mov eax, dword [ebp - 0x488]
mov dword [ebp - 4], 0xd2
test eax, 0x1000000
je 0x1004f724
and eax, 0xfeffffff
lea ecx, [ebp - 0x170]
mov dword [ebp - 0x488], eax
call fcn.1002b9c2
cmp byte [ebp - 0x482], 0
je 0x1004f76b
push 0x10016db4
lea ecx, [ebp - 0xac]
call fcn.1002b985
lea eax, [ebp - 0xac]
mov byte [ebp - 4], 0xd5
push eax
mov ecx, esi
call fcn.10068da3
mov ecx, eax
call fcn.10068c87
lea ecx, [ebp - 0xac]
mov byte [ebp - 0x481], al
mov byte [ebp - 4], 0xd2
call fcn.1002b9c2
lea ecx, [ebp - 0x4f4]
mov byte [ebp - 0x4f8], 0
call fcn.10055642
mov al, byte [ebp - 0x481]
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 0xd6
push 0x10016dc4
mov byte [ebp - 0x4f8], al
call fcn.1002b985
mov byte [ebp - 4], 0xd7
mov ecx, esi
mov eax, dword [ebp - 0x488]
or eax, 0x4000000
mov dword [ebp - 0x488], eax
mov dword [ebp - 0x48c], eax
lea eax, [ebp - 0xac]
push eax
call fcn.1003c6b2
test al, al
je 0x1004f819
push 0x10016dc4
lea ecx, [ebp - 0x94]
call fcn.1002b985
mov dword [ebp - 4], 0xd8
mov ecx, esi
mov eax, dword [ebp - 0x488]
or eax, 0x8000000
mov dword [ebp - 0x488], eax
mov dword [ebp - 0x48c], eax
lea eax, [ebp - 0x94]
push eax
call fcn.10068da3
mov ecx, eax
call fcn.10068cb7
mov byte [ebp - 0x481], 1
cmp eax, 5
jne 0x1004f820
mov byte [ebp - 0x481], 0
mov eax, dword [ebp - 0x488]
test eax, 0x8000000
je 0x1004f849
and eax, 0xf7ffffff
lea ecx, [ebp - 0x94]
mov dword [ebp - 0x488], eax
call fcn.1002b9c2
mov eax, dword [ebp - 0x488]
mov dword [ebp - 4], 0xd6
test eax, 0x4000000
je 0x1004f86d
and eax, 0xfbffffff
lea ecx, [ebp - 0xac]
mov dword [ebp - 0x488], eax
call fcn.1002b9c2
cmp byte [ebp - 0x481], 0
je 0x1004fabe
push 0x10016dc4
lea ecx, [ebp - 0x94]
call fcn.1002b985
lea eax, [ebp - 0x94]
mov byte [ebp - 4], 0xd9
push eax
mov ecx, esi
call fcn.10068da3
mov ecx, eax
call fcn.10068c9f
push eax
lea ecx, [ebp - 0x4cc]
call fcn.1002d3ac
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0xdb
call fcn.1002b9c2
mov edi, dword [ebp - 0x4cc]
mov eax, dword [ebp - 0x4c8]
cmp edi, eax
je 0x1004faa9
mov esi, eax
mov ecx, edi
call fcn.10068cb7
cmp eax, 5
je 0x1004fa62
mov ecx, edi
call fcn.10068cb7
cmp eax, 2
jne 0x1004fa62
mov ecx, edi
call fcn.1006b054
push eax
lea ecx, [ebp - 0x7c]
call fcn.10036f25
push ecx
push ecx
lea eax, [ebp - 0x7c]
mov byte [ebp - 4], 0xdc
push eax
lea ecx, [ebp - 0x398]
call fcn.10055296
and dword [ebp - 0x4c], 0
xor eax, eax
and dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], 7
mov word [ebp - 0x4c], ax
push 0x3a
lea edx, [ebp - 0x4c]
mov byte [ebp - 4], 0xde
lea ecx, [ebp - 0x398]
call fcn.10057883
mov ecx, eax
mov eax, dword [ecx]
mov eax, dword [eax + 4]
test byte [eax + ecx + 0xc], 6
je 0x1004f9aa
call fcn.100616f8
mov ecx, dword [eax]
cmp dword [ecx], 5
jbe 0x1004f986
push 0
push 0
call fcn.1002579a
test al, al
je 0x1004f986
lea eax, [ebp - 0x4a8]
mov dword [ebp - 0x4a8], 0x10016e60
push eax
push ecx
push ecx
mov edx, 0x1002225b
call fcn.10025991
lea ecx, [ebp - 0x4c]
call fcn.1002b9c2
lea ecx, [ebp - 0x398]
call fcn.1003cb49
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0xdb
call fcn.1002b9c2
jmp 0x1004fa98
and dword [ebp - 0x64], 0
xor eax, eax
and dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 7
mov word [ebp - 0x64], ax
mov byte [ebp - 4], 0xdf
lea ecx, [ebp - 0x398]
mov eax, dword [ebp - 0x398]
push 0xa
add ecx, dword [eax + 4]
call fcn.10040c94
movzx eax, ax
lea edx, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x398]
call fcn.10057883
mov ecx, eax
mov eax, dword [ecx]
mov eax, dword [eax + 4]
test byte [eax + ecx + 0xc], 6
je 0x1004fa3c
call fcn.100616f8
mov ecx, dword [eax]
cmp dword [ecx], 5
jbe 0x1004fa2f
push 0
push 0
call fcn.1002579a
test al, al
je 0x1004fa2f
lea eax, [ebp - 0x4a8]
mov dword [ebp - 0x4a8], 0x10016e60
push eax
push ecx
push ecx
mov edx, 0x1002225b
call fcn.10025991
lea ecx, [ebp - 0x64]
call fcn.1002b9c2
jmp 0x1004f986
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x4e0]
push eax
lea ecx, [ebp - 0x4f4]
call fcn.10056a5f
lea ecx, [ebp - 0x64]
push ecx
mov ecx, dword [eax]
add ecx, 0x28
call fcn.10036e90
jmp 0x1004fa2f
call fcn.100616f8
mov ecx, dword [eax]
cmp dword [ecx], 5
jbe 0x1004fa98
push 0
push 0
call fcn.1002579a
test al, al
je 0x1004fa98
lea eax, [ebp - 0x4a8]
mov dword [ebp - 0x4a8], 0x10016de8
push eax
push ecx
push ecx
mov edx, 0x1002225b
call fcn.10025991
add edi, 4
cmp edi, esi
jne 0x1004f8d4
mov esi, dword [ebp - 0x4b4]
lea ecx, [ebp - 0x4cc]
mov byte [ebp - 4], 0xd6
call fcn.1003733c
mov edi, dword [ebp - 0x4c0]
mov ecx, dword [ebp - 0x520]
lea eax, [ebp - 0x140]
push eax
lea eax, [ebp - 0x500]
push eax
call fcn.10056298
mov ecx, dword [eax]
mov al, byte [ebp - 0x4f8]
mov byte [ecx + 0x28], al
lea eax, [ebp - 0x4f4]
push eax
add ecx, 0x2c
call fcn.100555ae
lea ecx, [ebp - 0x4f4]
call fcn.1003890f
lea ecx, [ebp - 0x140]
mov byte [ebp - 4], 0xcd
call fcn.1002b9c2
add esi, 4
mov dword [ebp - 0x4b4], esi
cmp esi, edi
jne 0x1004f4cd
lea ecx, [ebp - 0xb8]
call fcn.1003733c
lea ecx, [ebp - 0x498]
call fcn.10036d1b
lea ecx, [ebp - 0x34]
call fcn.1002b9c2
lea ecx, [ebp - 0x4b0]
mov byte [ebp - 4], 0x17
call fcn.10036d1b
mov esi, 0x10016ecc
lea ecx, [ebp - 0x2a0]
push esi
call fcn.1002b985
lea eax, [ebp - 0x2a0]
mov byte [ebp - 4], 0xe0
push eax
lea ecx, [ebp - 0x494]
call fcn.1003c6b2
lea ecx, [ebp - 0x2a0]
mov byte [ebp - 0x481], al
mov byte [ebp - 4], 0x17
call fcn.1002b9c2
cmp byte [ebp - 0x481], 0
je 0x1004fd4a
push esi
lea ecx, [ebp - 0x288]
call fcn.1002b985
lea eax, [ebp - 0x288]
mov byte [ebp - 4], 0xe1
push eax
lea ecx, [ebp - 0x494]
call fcn.10068d34
push eax
lea ecx, [ebp - 0x4a4]
call fcn.10068ae1
lea ecx, [ebp - 0x288]
mov byte [ebp - 4], 0xe3
call fcn.1002b9c2
mov esi, 0x10016efc
lea ecx, [ebp - 0x258]
push esi
call fcn.1002b985
lea eax, [ebp - 0x258]
mov byte [ebp - 4], 0xe4
push eax
lea ecx, [ebp - 0x4a4]
call fcn.1003c6b2
lea ecx, [ebp - 0x258]
mov byte [ebp - 0x481], al
mov byte [ebp - 4], 0xe3
call fcn.1002b9c2
cmp byte [ebp - 0x481], 0
je 0x1004fc87
push esi
lea ecx, [ebp - 0x210]
call fcn.1002b985
lea eax, [ebp - 0x210]
mov byte [ebp - 4], 0xe5
push eax
lea ecx, [ebp - 0x4a4]
call fcn.10068d34
push eax
lea ecx, [ebp - 0x4e4]
call fcn.10068ae1
lea ecx, [ebp - 0x210]
mov byte [ebp - 4], 0xe7
call fcn.1002b9c2
lea ecx, [ebp - 0x4e4]
call fcn.10068cb7
cmp eax, 2
jne 0x1004fc78
lea ecx, [ebp - 0x4e4]
call fcn.1006b054
mov ecx, dword [ebp - 0x51c]
push eax
call fcn.10036e90
lea ecx, [ebp - 0x4e4]
mov byte [ebp - 4], 0xe3
call fcn.10036d1b
mov esi, 0x10016f28
lea ecx, [ebp - 0x240]
push esi
call fcn.1002b985
lea eax, [ebp - 0x240]
mov byte [ebp - 4], 0xe8
push eax
lea ecx, [ebp - 0x4a4]
call fcn.1003c6b2
lea ecx, [ebp - 0x240]
mov byte [ebp - 0x481], al
mov byte [ebp - 4], 0xe3
call fcn.1002b9c2
cmp byte [ebp - 0x481], 0
je 0x1004fd3b
push esi
lea ecx, [ebp - 0x228]
call fcn.1002b985
lea eax, [ebp - 0x228]
mov byte [ebp - 4], 0xe9
push eax
lea ecx, [ebp - 0x4a4]
call fcn.10068d34
push eax
lea ecx, [ebp - 0x4d8]
call fcn.10068ae1
lea ecx, [ebp - 0x228]
mov byte [ebp - 4], 0xeb
call fcn.1002b9c2
lea ecx, [ebp - 0x4d8]
call fcn.10068cb7
cmp eax, 2
jne 0x1004fd30
lea ecx, [ebp - 0x4d8]
call fcn.1006b054
mov ecx, dword [ebp - 0x510]
push eax
call fcn.10036e90
lea ecx, [ebp - 0x4d8]
call fcn.10036d1b
lea ecx, [ebp - 0x4a4]
mov byte [ebp - 4], 0x17
call fcn.10036d1b
mov esi, dword [ebp - 0x4ec]
lea ecx, [ebp - 0x2d0]
mov edi, 0x10016f58
push edi
mov dword [esi], 0xfffffffe
call fcn.1002b985
lea eax, [ebp - 0x2d0]
mov byte [ebp - 4], 0xec
push eax
lea ecx, [ebp - 0x494]
call fcn.1003c6b2
lea ecx, [ebp - 0x2d0]
mov byte [ebp - 0x481], al
mov byte [ebp - 4], 0x17
call fcn.1002b9c2
cmp byte [ebp - 0x481], 0
je 0x1004fdff
push edi
lea ecx, [ebp - 0x2e8]
call fcn.1002b985
lea eax, [ebp - 0x2e8]
mov byte [ebp - 4], 0xed
push eax
lea ecx, [ebp - 0x494]
call fcn.10068d34
push eax
lea ecx, [ebp - 0x4a0]
call fcn.10068ae1
lea ecx, [ebp - 0x2e8]
mov byte [ebp - 4], 0xef
call fcn.1002b9c2
lea ecx, [ebp - 0x4a0]
call fcn.10068ccf
test al, al
je 0x1004fdf4
lea ecx, [ebp - 0x4a0]
call fcn.10068c6f
mov dword [esi], eax
lea ecx, [ebp - 0x4a0]
call fcn.10036d1b
lea ecx, [ebp - 0x494]
call fcn.10036d1b
mov eax, dword [ebp - 0x49c]
mov ecx, dword [ebp - 0x1c]
call fcn.100999a0
ret 8
call fcn.1003bbf6
int3