Function at 0x10049514
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10064920
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x404
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x158], 0x44a6
mov dword [ebp - 0x25c], 0x1000bd38
cmp dword [ebp - 0x158], 0x4572
jle 0x100495d0
and dword [ebp - 0xf8], 0
jmp 0x1004956f
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0x4533
jge 0x100495d0
and dword [ebp - 0xe8], 0
jmp 0x10049591
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0x5b81
jge 0x100495ce
mov eax, dword [ebp - 0xf8]
xor eax, dword [ebp - 0xe8]
cdq
mov dword [ebp - 0x2d8], eax
mov dword [ebp - 0x2d4], edx
push dword [ebp - 0x2d4]
push dword [ebp - 0x2d8]
mov ecx, 0x1060d4b8
call fcn.1001a685
jmp 0x10049584
jmp 0x10049562
and dword [ebp - 4], 0
cmp dword [ebp - 0x158], 0x42c5
jge 0x100495f0
mov edx, dword [ebp - 0x25c]
mov ecx, 0x1060d4b8
call fcn.1001cb90
jmp 0x1004960c
or dword [ebp - 4], 0xffffffff
jmp 0x10049616
mov dword [ebp - 0x18], 0x44555950
mov dword [ebp - 0x48], 0x8a527335
mov dword [ebp - 0xb8], 0
jmp 0x1004963d
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 1
jge 0x10049656
mov eax, dword [ebp - 0xb8]
mov dword [ebp + eax*4 - 0x28], 0x611bc38
jmp 0x10049630
cmp dword [ebp - 0x18], 0
jne 0x10049713
push 5
pop eax
test eax, eax
je 0x10049679
cmp dword [ebp - 0x18], 0
je 0x10049679
mov dword [ebp - 0x2cc], 1
jmp 0x10049680
and dword [ebp - 0x2cc], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x244], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x244]
mov dword [ebp + eax - 0x28], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x28]
mov dword [ebp - 0x390], eax
cmp dword [ebp - 0x18], 0x2301
je 0x100496be
mov dword [ebp - 0x12c], 1
jmp 0x100496c5
and dword [ebp - 0x12c], 0
cmp dword [ebp - 0x12c], 0x71a
jg 0x100496dd
mov dword [ebp - 0x294], 1
jmp 0x100496e4
and dword [ebp - 0x294], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x3c0], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x28], 0
jne 0x10049704
cmp dword [ebp - 0x48], 0
cmp dword [ebp - 0x48], 0
jne 0x10049713
and dword [ebp - 0x128], 0
jmp 0x1004971d
mov dword [ebp - 0x128], 1
imul eax, dword [ebp - 0x128], 0xfaaa
cmp eax, dword [ebp - 0x18]
jge 0x10049735
mov eax, 0x90412894
test eax, eax
je 0x10049748
push 4
pop eax
test eax, eax
je 0x10049748
mov dword [ebp - 0x22c], 1
jmp 0x1004974f
and dword [ebp - 0x22c], 0
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x22c]
cmp eax, 0xf58aae07
jbe 0x10049890
mov dword [ebp - 0x94], 0xfffffff9
mov dword [ebp - 0x29c], 0xfffffff6
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x39c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x28], 0xb36c
jge 0x100497a9
mov eax, 0x839bf5bf
test eax, eax
je 0x100497a9
mov dword [ebp - 0x134], 1
jmp 0x100497b0
and dword [ebp - 0x134], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x28]
cmp dword [ebp - 0x134], eax
jl 0x100497ce
mov dword [ebp - 0x1b4], 1
jmp 0x100497d5
and dword [ebp - 0x1b4], 0
mov eax, dword [ebp - 0x1b4]
neg eax
cmp eax, dword [ebp - 0x48]
jge 0x100497ee
mov dword [ebp - 0x13c], 1
jmp 0x100497f5
and dword [ebp - 0x13c], 0
imul eax, dword [ebp - 0x13c], 0x9690
imul eax, dword [ebp - 0x94]
cmp eax, dword [ebp - 0x94]
jge 0x1004981a
mov dword [ebp - 0x1f4], 1
jmp 0x10049821
and dword [ebp - 0x1f4], 0
cmp dword [ebp - 0x1f4], 1
jb 0x10049836
mov dword [ebp - 0x24c], 1
jmp 0x1004983d
and dword [ebp - 0x24c], 0
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x94]
jl 0x10049854
mov dword [ebp - 0x144], 1
jmp 0x1004985b
and dword [ebp - 0x144], 0
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x144]
jne 0x10049872
mov dword [ebp - 0x1bc], 1
jmp 0x10049879
and dword [ebp - 0x1bc], 0
mov eax, dword [ebp - 0x1bc]
sub eax, dword [ebp - 0x94]
mov dword [ebp - 0x29c], eax
jmp 0x100499da
mov dword [ebp - 0xfc], 0x94914501
mov dword [ebp - 0x10c], 3
mov dword [ebp - 0x164], 0x762cc684
mov dword [ebp - 0x254], 0x82e70d5d
cmp dword [ebp - 0xfc], 0
je 0x100498da
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x28], 0
je 0x100498da
mov dword [ebp - 0x14c], 1
jmp 0x100498e1
and dword [ebp - 0x14c], 0
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x10c]
jne 0x10049908
mov dword [ebp - 0x214], 1
jmp 0x1004990f
and dword [ebp - 0x214], 0
mov eax, dword [ebp - 0x14c]
cmp eax, dword [ebp - 0x214]
jl 0x10049929
mov dword [ebp - 0x154], 1
jmp 0x10049930
and dword [ebp - 0x154], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x28], 0
jne 0x10049944
cmp dword [ebp - 0xfc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x28]
mov dword [ebp - 0x48], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x48]
imul ecx, dword [ebp - 0xfc]
sub ecx, dword [ebp + eax - 0x28]
cmp ecx, 0xfffb
jae 0x10049979
mov dword [ebp - 0x1c4], 1
jmp 0x10049980
and dword [ebp - 0x1c4], 0
mov eax, dword [ebp - 0x154]
cmp eax, dword [ebp - 0x1c4]
je 0x1004999a
mov dword [ebp - 0x15c], 1
jmp 0x100499a1
and dword [ebp - 0x15c], 0
mov eax, dword [ebp - 0xfc]
cmp dword [ebp - 0x15c], eax
jge 0x100499bb
mov dword [ebp - 0x1fc], 1
jmp 0x100499c2
and dword [ebp - 0x1fc], 0
mov eax, dword [ebp - 0x1fc]
mov dword [ebp - 0x164], eax
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0x254], eax
and dword [ebp - 0x20], 0
mov dword [ebp - 0xa4], 0x387fb0b0
mov dword [ebp - 0xc0], 0
jmp 0x10049a01
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 1
jge 0x10049a1d
mov eax, dword [ebp - 0xc0]
mov dword [ebp + eax*4 - 0x2a4], 0x2e91
jmp 0x100499f4
mov dword [ebp - 0xa4], 0
jmp 0x10049a36
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 1
jge 0x10049a52
mov eax, dword [ebp - 0xa4]
mov dword [ebp + eax*4 - 0x2a4], 0
jmp 0x10049a29
mov byte [ebp - 0x69], 0
movzx eax, byte [ebp - 0x69]
test eax, eax
je 0x10049a6b
push 0
push 0x1eff
call dword [sym.imp.GDI32.dll_SelectClipRgn]
mov dword [ebp - 0x9c], 0xe1757117
mov dword [ebp - 0x264], 0
mov dword [ebp - 0x9c], 0
jmp 0x10049a98
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0x10
jne 0x10049c89
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x17c], 0x57e71f09
mov dword [ebp - 0x204], 0
mov dword [ebp - 0x2b4], 1
mov dword [ebp - 0x2ac], 1
mov dword [ebp - 0x70], 0
jmp 0x10049ae4
mov eax, dword [ebp - 0x70]
dec eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0xfffffff0
jne 0x10049c76
mov dword [ebp - 0x50], 1
mov dword [ebp - 0x26c], 8
mov dword [ebp - 0x2bc], 0x3297
mov dword [ebp - 0x50], 0xa
jmp 0x10049b19
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0x15
je 0x10049c25
mov dword [ebp - 0x8c], 0x64f14790
mov dword [ebp - 0x8c], 0
jmp 0x10049b46
mov eax, dword [ebp - 0x8c]
dec eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0xfffffff1
je 0x10049c20
mov dword [ebp - 0x23c], 0xfffffff7
cmp dword [ebp - 0x17c], 0
jne 0x10049ba7
cmp dword [ebp - 0x50], 0
jne 0x10049ba7
cmp dword [ebp - 0x70], 0x31fb
jne 0x10049b84
cmp dword [ebp - 0x50], 0
jne 0x10049b84
and dword [ebp - 0x1cc], 0
jmp 0x10049b8e
mov dword [ebp - 0x1cc], 1
cmp dword [ebp - 0x1cc], 2
jne 0x10049ba7
push 0xfffffffffffffffc
pop eax
test eax, eax
jne 0x10049ba7
and dword [ebp - 0x16c], 0
jmp 0x10049bb1
mov dword [ebp - 0x16c], 1
cmp dword [ebp - 0x16c], 9
jne 0x10049bc6
mov dword [ebp - 0x224], 1
jmp 0x10049bcd
and dword [ebp - 0x224], 0
mov eax, dword [ebp - 0x8c]
cmp eax, dword [ebp - 0x224]
je 0x10049be7
mov dword [ebp - 0x174], 1
jmp 0x10049bee
and dword [ebp - 0x174], 0
mov eax, dword [ebp - 0x23c]
cmp eax, dword [ebp - 0x174]
je 0x10049c08
mov dword [ebp - 0x1d4], 1
jmp 0x10049c0f
and dword [ebp - 0x1d4], 0
mov eax, dword [ebp - 0x1d4]
mov dword [ebp - 0x204], eax
jmp 0x10049b39
jmp 0x10049b12
lea eax, [ebp - 0x2ac]
push eax
push 0
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x2b4]
push eax
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0x26c]
push eax
push 1
lea eax, [ebp - 0x204]
push eax
lea eax, [ebp - 0x2bc]
push eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.1004727c
add esp, 0x30
jmp 0x10049add
mov byte [ebp - 0x6b], 0
lea eax, [ebp - 0x6b]
push eax
call fcn.100484d2
pop ecx
jmp 0x10049a8b
mov dword [ebp - 0x2c4], 0xec299e88
mov dword [ebp - 0x34], 0
jmp 0x10049ca3
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 1
jge 0x10049cb6
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x1c], 0xfffffff9
jmp 0x10049c9c
mov dword [ebp - 0x34], 0
jmp 0x10049cc6
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 3
jge 0x10049cdc
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x3fc], 0xffffffff
jmp 0x10049cbf
mov byte [ebp - 0x61], 0
movzx eax, byte [ebp - 0x61]
test eax, eax
je 0x10049ced
call fcn.1004850a
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1c], 0xacd7
jge 0x10049d0a
xor eax, eax
jne 0x10049d0a
and dword [ebp - 0x184], 0
jmp 0x10049d14
mov dword [ebp - 0x184], 1
cmp dword [ebp - 0x184], 0xfffb
jb 0x10049d2c
mov dword [ebp - 0x1dc], 1
jmp 0x10049d33
and dword [ebp - 0x1dc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1c]
cmp eax, dword [ebp - 0x1dc]
jge 0x10049d51
mov dword [ebp - 0x18c], 1
jmp 0x10049d58
and dword [ebp - 0x18c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1c]
cmp dword [ebp - 0x18c], eax
jle 0x10049d83
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1c], 0
je 0x10049d83
mov dword [ebp - 0x21c], 1
jmp 0x10049d8a
and dword [ebp - 0x21c], 0
mov eax, dword [ebp - 0x21c]
mov dword [ebp - 0x2c4], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1c], 9
je 0x10049daf
mov dword [ebp - 0x278], 1
jmp 0x10049db6
and dword [ebp - 0x278], 0
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x1c]
cmp ecx, dword [ebp + eax - 0x1c]
jg 0x10049dd8
mov dword [ebp - 0x194], 1
jmp 0x10049ddf
and dword [ebp - 0x194], 0
cmp dword [ebp - 0x194], 1
jle 0x10049df5
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1c], 0
je 0x10049e0e
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1c], 0
je 0x10049e0e
mov dword [ebp - 0x1e4], 1
jmp 0x10049e15
and dword [ebp - 0x1e4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1c]
add eax, dword [ebp - 0x1e4]
cmp eax, 0x951a
jne 0x10049e38
mov dword [ebp - 0x19c], 1
jmp 0x10049e3f
and dword [ebp - 0x19c], 0
mov eax, dword [ebp - 0x19c]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x3fc], eax
mov dword [ebp - 0x58], 0x8edf1feb
mov dword [ebp - 0x320], 1
mov dword [ebp - 0x20c], 0x193208a
mov dword [ebp - 0x288], 0
cmp dword [ebp - 0x58], 0
je 0x10049eac
mov dword [ebp - 0x2dc], 0xffffffff
mov dword [ebp - 0x280], 0x923e64f1
lea eax, [ebp - 0x2dc]
push eax
lea eax, [ebp - 0x280]
push eax
call fcn.1004851f
pop ecx
pop ecx
jmp 0x10049fc5
mov dword [ebp - 0xf0], 0
jmp 0x10049ec5
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 4
jge 0x10049ee1
mov eax, dword [ebp - 0xf0]
mov dword [ebp + eax*4 - 0x3ec], 0xfffffff9
jmp 0x10049eb8
mov dword [ebp - 0x320], 0x31e468a0
push 4
pop eax
imul eax, eax, 3
push 4
pop ecx
imul ecx, ecx, 3
mov ecx, dword [ebp + ecx - 0x3ec]
imul ecx, dword [ebp - 0x58]
imul ecx, dword [ebp + eax - 0x3ec]
cmp ecx, dword [ebp - 0x58]
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x3ec]
mov dword [ebp - 0x20c], eax
mov eax, dword [ebp - 0x20c]
cmp eax, dword [ebp - 0x58]
jl 0x10049f37
mov dword [ebp - 0x1a4], 1
jmp 0x10049f3e
and dword [ebp - 0x1a4], 0
cmp dword [ebp - 0x1a4], 0xa7bc6c89
jb 0x10049f56
mov dword [ebp - 0x1ec], 1
jmp 0x10049f5d
and dword [ebp - 0x1ec], 0
cmp dword [ebp - 0x1ec], 0
je 0x10049f72
mov dword [ebp - 0x1ac], 1
jmp 0x10049f79
and dword [ebp - 0x1ac], 0
mov eax, dword [ebp - 0x58]
cmp eax, dword [ebp - 0x1ac]
je 0x10049f90
mov dword [ebp - 0x124], 1
jmp 0x10049f97
and dword [ebp - 0x124], 0
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x124], eax
je 0x10049fae
mov dword [ebp - 0x130], 1
jmp 0x10049fb5
and dword [ebp - 0x130], 0
mov eax, dword [ebp - 0x58]
imul eax, dword [ebp - 0x130]
mov dword [ebp - 0x288], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x110], eax
mov eax, dword [ebp - 0x110]
movzx eax, word [eax]
cmp eax, 0x5a4d
je 0x1004a05a
mov dword [ebp - 0x2e8], 0xfffffffb
mov dword [ebp - 0x138], 0x5a3d7f19
mov dword [ebp - 0x290], 0x653b1dab
lea eax, [ebp - 0x138]
push eax
push 0x22fa
push 0x6b2
push 1
lea eax, [ebp - 0x2e8]
push eax
push 1
push 0x3c4b
lea eax, [ebp - 0x290]
push eax
push 0x240e
call fcn.1004551d
add esp, 0x24
push 0x33ba
lea eax, [ebp - 0x138]
push eax
push 1
push 1
push 0x1490
call fcn.10045c90
add esp, 0x14
call fcn.10048573
xor eax, eax
jmp 0x1004b4ee
push 1
lea ecx, [ebp - 0x3d4]
call fcn.1001a8b6
mov dword [ebp - 4], 2
lea eax, [ebp - 0x3d4]
push eax
lea eax, [ebp - 0x80]
push eax
call fcn.10048b7f
pop ecx
pop ecx
mov dword [ebp - 0x140], 0x14ea
mov dword [ebp - 0x31c], 0x1000bd90
cmp dword [ebp - 0x140], 0x1516
jle 0x1004a17d
and dword [ebp - 0xd0], 0
jmp 0x1004a0ba
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0x681d
jge 0x1004a17d
and dword [ebp - 0xc8], 0
jmp 0x1004a0e0
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0x238a
jge 0x1004a178
and dword [ebp - 0x100], 0
jmp 0x1004a106
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0x44b9
jge 0x1004a173
and dword [ebp - 0xac], 0
jmp 0x1004a128
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0x1a38
jge 0x1004a171
mov eax, dword [ebp - 0xc8]
add eax, dword [ebp - 0x100]
xor eax, dword [ebp - 0xd0]
or eax, dword [ebp - 0xac]
cdq
mov dword [ebp - 0x2e4], eax
mov dword [ebp - 0x2e0], edx
push dword [ebp - 0x2e0]
push dword [ebp - 0x2e4]
mov ecx, 0x1060d4b8
call fcn.1001a685
jmp 0x1004a11b
jmp 0x1004a0f9
jmp 0x1004a0d3
jmp 0x1004a0ad
mov dword [ebp - 0x80], 0
jmp 0x1004a18d
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 2
jge 0x1004a1a3
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0x238], 0x3838a1f9
jmp 0x1004a186
mov byte [ebp - 4], 3
cmp dword [ebp - 0x140], 0x1195
jge 0x1004a1c3
mov edx, dword [ebp - 0x31c]
mov ecx, 0x1060d4b8
call fcn.1001cb90
jmp 0x1004a1df
mov dword [ebp - 4], 2
jmp 0x1004a1ef
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x238], 0
jmp 0x1004a21d
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x238]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x238], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x238], 0
jl 0x1004a24a
mov byte [ebp - 0x42], 0
movzx eax, byte [ebp - 0x42]
test eax, eax
je 0x1004a248
push 0
push 0x134
push 0
call dword [sym.imp.GDI32.dll_GetObjectW]
jmp 0x1004a202
mov byte [ebp - 0x6a], 0
lea eax, [ebp - 0x6a]
push eax
call fcn.10048cb3
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3d4]
call fcn.1001a938
lea eax, [ebp - 0x110]
push eax
lea eax, [ebp + 8]
push eax
lea eax, [ebp - 0x98]
push eax
call fcn.10048dd4
add esp, 0xc
mov dword [ebp - 0x24], 0xddc85f70
push 1
lea ecx, [ebp - 0x36c]
call fcn.1001a8b6
mov dword [ebp - 4], 5
push 1
lea eax, [ebp - 0x36c]
push eax
push 0x2f98
push 1
lea eax, [ebp - 0x84]
push eax
push 0x5a26
call fcn.10045e9c
add esp, 0x18
mov dword [ebp - 0x84], 0
jmp 0x1004a2d9
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 2
jge 0x1004a2f5
mov eax, dword [ebp - 0x84]
mov dword [ebp + eax*4 - 0x3b8], 0xffffffff
jmp 0x1004a2cc
mov dword [ebp - 0x24], 7
jmp 0x1004a305
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xfffffffc
jg 0x1004a31b
mov byte [ebp - 0x49], 0
lea eax, [ebp - 0x49]
push eax
call fcn.10048e02
pop ecx
jmp 0x1004a2fe
mov dword [ebp - 0x24], 0
jmp 0x1004a32b
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jg 0x1004a3c4
mov dword [ebp - 0xd8], 0x48afa2fa
mov dword [ebp - 0xd8], 0
jmp 0x1004a358
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0
jg 0x1004a37e
push 0x3d65
push 0
push 0x1e2b
push 1
push 0x6e1c
call fcn.10047e4e
add esp, 0x14
jmp 0x1004a34b
push dword [ebp - 0x24]
lea ecx, [ebp - 0x36c]
call fcn.1001a954
mov dword [ebp - 0x148], eax
push dword [ebp - 0x24]
lea ecx, [ebp - 0x36c]
call fcn.1001a954
mov ecx, dword [ebp - 0x148]
mov eax, dword [eax]
mov dword [ecx], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x148]
mov ecx, dword [ecx]
mov dword [ebp + eax - 0x3b8], ecx
jmp 0x1004a324
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x36c]
call fcn.1001a938
mov eax, dword [ebp - 0x98]
cmp dword [eax], 0x4550
je 0x1004a3e8
xor eax, eax
jmp 0x1004b4ee
push 3
lea ecx, [ebp - 0x360]
call fcn.1001a8b6
mov dword [ebp - 4], 6
mov dword [ebp - 0x88], 1
mov dword [ebp - 0x2f4], 0x2e633725
mov dword [ebp - 0x2a0], 0x99e68fc7
lea eax, [ebp - 0x360]
push eax
lea eax, [ebp - 0x3dc]
push eax
call fcn.10048f17
pop ecx
pop ecx
mov dword [ebp - 0x88], 0
jmp 0x1004a448
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 2
jg 0x1004a472
mov dword [ebp - 0x298], 0xcce57bf5
lea eax, [ebp - 0x360]
push eax
lea eax, [ebp - 0x298]
push eax
call fcn.10048f5c
pop ecx
pop ecx
jmp 0x1004a43b
lea eax, [ebp - 0x2f4]
push eax
lea eax, [ebp - 0x2a0]
push eax
push 1
push 1
lea eax, [ebp - 0x88]
push eax
lea eax, [ebp - 0x360]
push eax
call fcn.10046205
add esp, 0x18
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x360]
call fcn.1001a938
lea eax, [ebp - 0x98]
push eax
lea eax, [ebp - 0xcc]
push eax
push 0x7d32
push 1
push 0x2284
push 1
call fcn.1004666e
add esp, 0x18
mov dword [ebp - 0x3c], 0x4fddd3f4
mov dword [ebp - 0x108], 0
jmp 0x1004a4ed
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 1
jge 0x1004a509
mov eax, dword [ebp - 0x108]
mov dword [ebp + eax*4 - 0x118], 0x901f
jmp 0x1004a4e0
mov byte [ebp - 0x41], 0
movzx eax, byte [ebp - 0x41]
test eax, eax
je 0x1004a524
push 0xc43
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x118]
mov dword [ebp - 0x3c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x118]
cmp eax, dword [ebp - 0x3c]
jge 0x1004a56e
mov dword [ebp - 0x3c], 0
jmp 0x1004a556
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 1
jge 0x1004a56c
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x118], 0x9124
jmp 0x1004a54f
jmp 0x1004a5c3
mov dword [ebp - 0x33c], 9
push 1
push 0x2fac
push 0x4229
push 0x4275
push 1
push 0x30d0
call fcn.1004699c
add esp, 0x18
push 0x583d
push 1
push 0x4a3d
push 0xdb6
push 1
lea eax, [ebp - 0x33c]
push eax
push 0x648e
lea eax, [ebp - 0x3c]
push eax
call fcn.10046a8e
add esp, 0x20
cmp dword [ebp - 0xcc], 0
jne 0x1004a5d3
xor eax, eax
jmp 0x1004b4ee
push 1
lea ecx, [ebp - 0x338]
call fcn.1001a8b6
mov dword [ebp - 4], 7
mov dword [ebp - 0x60], 0xfffffffc
mov dword [ebp - 0x78], 0
push 0x743d
push 0x40f8
lea eax, [ebp - 0x3a4]
push eax
push 0x5597
push 0x2f23
push 0x3db4
lea eax, [ebp - 0x338]
push eax
push 1
push 1
push 0x12d7
push 1
push 0x6139
push 0x39e4
push 0x3ee8
call fcn.10046ceb
add esp, 0x38
mov byte [ebp - 0x59], 0
movzx eax, byte [ebp - 0x59]
test eax, eax
je 0x1004a665
push 0x37b1
push 0x4ea8
push 1
push 1
push 0x6994
call fcn.10047007
add esp, 0x14
mov dword [ebp - 0x60], 0
jmp 0x1004a675
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0
jg 0x1004a7ed
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x300], 0xffffffff
mov dword [ebp - 0x74], 0
jmp 0x1004a6a0
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0
jg 0x1004a7e8
mov dword [ebp - 0x2a8], 4
mov dword [ebp - 0x2b8], 0x49cff29c
push dword [ebp - 0x60]
lea ecx, [ebp - 0x338]
call fcn.1001a954
mov esi, eax
push dword [ebp - 0x60]
lea ecx, [ebp - 0x338]
call fcn.1001a954
mov eax, dword [eax]
add eax, dword [esi]
je 0x1004a759
mov byte [ebp - 0x51], 0
movzx eax, byte [ebp - 0x51]
test eax, eax
je 0x1004a72c
push 0x213d
push 1
push 0x6ff0
push 0x6100
push 0x2023
push 0x4c4d
push 0x542e
push 1
push 0x37fc
push 0x1055
push 0x51c6
push 0x36a7
call fcn.1004727c
add esp, 0x30
push 0x225a
push 0x819
push 1
push 0x5c90
lea eax, [ebp - 0x78]
push eax
push 0x4ad4
lea eax, [ebp - 0x74]
push eax
push 1
call fcn.10047568
add esp, 0x20
jmp 0x1004a7e3
mov dword [ebp - 0x314], 0xffffffff
mov byte [ebp - 0x6c], 0
push 0
push 0x2665
push 0x593a
lea eax, [ebp - 0x6c]
push eax
push 0x3454
push 1
call fcn.10047a3f
add esp, 0x18
mov dword [ebp - 0x78], 0
jmp 0x1004a796
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0
jg 0x1004a7e3
mov dword [ebp - 0x2b0], 0xeb32a831
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x2a8]
push eax
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x338]
push eax
lea eax, [ebp - 0x300]
push eax
lea eax, [ebp - 0x2b0]
push eax
call fcn.10048fa5
add esp, 0x18
mov eax, dword [ebp - 0x60]
sub eax, dword [ebp - 0x314]
mov dword [ebp - 0x2b8], eax
jmp 0x1004a78f
jmp 0x1004a699
jmp 0x1004a66e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x338]
call fcn.1001a938
push 1
push 0x234a
lea eax, [ebp - 0x3c8]
push eax
lea eax, [ebp - 0xcc]
push eax
push dword [ebp - 0x110]
push 0
push dword [ebp - 0x98]
lea eax, [ebp - 0x20]
push eax
call fcn.1004582d
add esp, 0x20
mov dword [ebp - 0x90], 0xdb3ae355
mov dword [ebp - 0x150], 0xd513c61c
mov dword [ebp - 0x90], 0x16
jmp 0x1004a858
mov eax, dword [ebp - 0x90]
dec eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0xffffffe9
jle 0x1004a972
mov dword [ebp - 0x120], 0xd66a0756
push 4
lea ecx, [ebp - 0x378]
call fcn.1001a8b6
mov dword [ebp - 4], 8
mov dword [ebp - 0x30], 0
jmp 0x1004a893
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 2
jge 0x1004a8a9
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x380], 0x738ab659
jmp 0x1004a88c
mov dword [ebp - 0x30], 0
jmp 0x1004a8b9
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 4
jge 0x1004a8d5
push dword [ebp - 0x30]
lea ecx, [ebp - 0x378]
call fcn.1001a954
mov dword [eax], 0xfffffff8
jmp 0x1004a8b2
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x380]
mov dword [ebp - 0x3ac], eax
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x150], eax
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0x6a1c
jge 0x1004a918
mov dword [ebp - 0x160], 1
jmp 0x1004a91f
and dword [ebp - 0x160], 0
mov esi, dword [ebp - 0x160]
add esi, 0xc774
push 3
lea ecx, [ebp - 0x378]
call fcn.1001a954
mov dword [eax], esi
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x380], 0
je 0x1004a95e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x378]
call fcn.1001a938
jmp 0x1004a84b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x378]
call fcn.1001a938
jmp 0x1004a84b
push 0x1724
push 0
push dword [ebp - 0x98]
push dword [ebp - 0x20]
push 0x7f3e
push 1
push 0xdb1
push 0x8c0
push dword [ebp + 8]
call fcn.1003061c
add esp, 0x24
call fcn.1004912d
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0xcc]
sub ecx, dword [eax + 0x34]
mov dword [ebp - 0x30c], ecx
mov dword [ebp - 0x68], 1
push 1
lea ecx, [ebp - 0x348]
call fcn.1001a8b6
mov dword [ebp - 4], 9
mov dword [ebp - 0xe0], 0
jmp 0x1004a9ec
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 1
jge 0x1004aa0e
push dword [ebp - 0xe0]
lea ecx, [ebp - 0x348]
call fcn.1001a954
mov dword [eax], 0x2c29a3df
jmp 0x1004a9df
push 1
lea eax, [ebp - 0x68]
push eax
push 1
push 0x33d0
push 0x2f11
push 0x6b2e
lea eax, [ebp - 0x348]
push eax
call fcn.10047afc
add esp, 0x1c
mov dword [ebp - 0x68], 0
jmp 0x1004aa44
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
jg 0x1004aac1
mov dword [ebp - 0x104], 0x912491e2
mov dword [ebp - 0x104], 0
jmp 0x1004aa6d
mov eax, dword [ebp - 0x104]
dec eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0
jl 0x1004aaaa
push 1
push 0x602d
push 1
push 1
push 0x1e97
push 0x165c
call fcn.10047ccf
add esp, 0x18
push dword [ebp - 0x68]
lea ecx, [ebp - 0x348]
call fcn.1001a954
cmp dword [eax], 0
je 0x1004aaa8
jmp 0x1004aa60
jmp 0x1004aa60
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x348]
push eax
call fcn.10049323
pop ecx
pop ecx
jmp 0x1004aa3d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x348]
call fcn.1001a938
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x30c]
push eax
call fcn.10049357
pop ecx
pop ecx
push dword [ebp - 0x20]
call fcn.10042e1c
pop ecx
test eax, eax
jne 0x1004aaf6
xor eax, eax
jmp 0x1004b4ee
mov dword [ebp - 0x310], 0x79e6
mov dword [ebp - 0x2c8], 0x5d0d658e
mov dword [ebp - 0x318], 0
mov dword [ebp - 0x2d0], 0xfffffff6
mov dword [ebp - 0x2c0], 0xf84255eb
mov dword [ebp - 0x40], 0xfffffff6
mov dword [ebp - 0xb0], 0
jmp 0x1004ab48
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 2
jge 0x1004ab64
mov eax, dword [ebp - 0xb0]
mov dword [ebp + eax*4 - 0x2fc], 0x73598422
jmp 0x1004ab3b
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x318]
push eax
lea eax, [ebp - 0x2c8]
push eax
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x40]
push eax
call fcn.10049388
add esp, 0x18
mov dword [ebp - 0x40], 1
jmp 0x1004aba3
mov eax, dword [ebp - 0x40]
dec eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jl 0x1004ad18
mov dword [ebp - 0x274], 0xffffffff
mov dword [ebp - 0x168], 0x3e97
mov dword [ebp - 0x270], 0x1000be20
cmp dword [ebp - 0x168], 0x3ea1
jle 0x1004ac85
and dword [ebp - 0xc4], 0
jmp 0x1004abf1
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0x167d
jge 0x1004ac85
and dword [ebp - 0xb4], 0
jmp 0x1004ac17
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0x4528
jge 0x1004ac80
and dword [ebp - 0xbc], 0
jmp 0x1004ac39
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0x6401
jge 0x1004ac7e
mov eax, dword [ebp - 0xb4]
mov ecx, dword [ebp - 0xbc]
shl eax, cl
xor eax, dword [ebp - 0xc4]
cdq
mov dword [ebp - 0x2f0], eax
mov dword [ebp - 0x2ec], edx
push dword [ebp - 0x2ec]
push dword [ebp - 0x2f0]
mov ecx, 0x1060d4b8
call fcn.1001a685
jmp 0x1004ac2c
jmp 0x1004ac0a
jmp 0x1004abe4
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x168], 0x3c69
jge 0x1004aca8
mov edx, dword [ebp - 0x270]
mov ecx, 0x1060d4b8
call fcn.1001cb90
jmp 0x1004acc4
or dword [ebp - 4], 0xffffffff
jmp 0x1004acce
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp + eax*4 - 0x2fc]
mov dword [ebp - 0x3f0], eax
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x40]
mov ecx, dword [ebp + ecx*4 - 0x2fc]
cmp ecx, dword [ebp + eax*4 - 0x2fc]
jg 0x1004ad00
mov dword [ebp - 0x170], 1
jmp 0x1004ad07
and dword [ebp - 0x170], 0
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0x274], eax
jmp 0x1004ab9c
lea eax, [ebp - 0x20]
push eax
push 1
push 0x1dfd
push 1
push 0x14fd
call fcn.10047e4e
add esp, 0x14
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
cmp dword [eax + 0x28], 0
je 0x1004ad89
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xcc]
add ecx, dword [eax + 0x28]
mov dword [ebp - 0x178], ecx
jne 0x1004ad5a
xor eax, eax
jmp 0x1004b4ee
push 0
push 1
push 0xdeadbeef
call dword [ebp - 0x178]
mov dword [ebp - 0x27c], eax
cmp dword [ebp - 0x27c], 0
jne 0x1004ad7f
xor eax, eax
jmp 0x1004b4ee
mov eax, dword [ebp - 0x20]
mov dword [eax + 0x10], 1
mov dword [ebp - 0x14], 0x4b25
mov dword [ebp - 0xec], 1
push 2
lea ecx, [ebp - 0x32c]
call fcn.1001a8b6
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x38], 1
mov dword [ebp - 0x7c], 0x5a945cb8
mov dword [ebp - 0x218], 9
mov dword [ebp - 0xd4], 0
jmp 0x1004addf
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 2
jge 0x1004ae01
push dword [ebp - 0xd4]
lea ecx, [ebp - 0x32c]
call fcn.1001a954
mov dword [eax], 4
jmp 0x1004add2
cmp dword [ebp - 0x14], 0
jne 0x1004ae0b
cmp dword [ebp - 0x14], 0
cmp dword [ebp - 0x14], 0
je 0x1004ae23
cmp dword [ebp - 0x14], 0
je 0x1004ae23
mov dword [ebp - 0x180], 1
jmp 0x1004ae2a
and dword [ebp - 0x180], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x180], eax
jle 0x1004ae41
mov dword [ebp - 0x284], 1
jmp 0x1004ae48
and dword [ebp - 0x284], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x3d8], eax
mov dword [ebp - 0xec], 1
push 0
lea ecx, [ebp - 0x32c]
call fcn.1001a954
or dword [eax], 0xffffffff
mov esi, dword [ebp - 0x14]
push 0
lea ecx, [ebp - 0x32c]
call fcn.1001a954
cmp dword [eax], esi
jl 0x1004ae8b
mov dword [ebp - 0x188], 1
jmp 0x1004ae92
and dword [ebp - 0x188], 0
cmp dword [ebp - 0x188], 0x4f88
jle 0x1004aeaa
mov dword [ebp - 0x190], 1
jmp 0x1004aeb1
and dword [ebp - 0x190], 0
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x190]
jne 0x1004aec8
mov dword [ebp - 0x198], 1
jmp 0x1004aecf
and dword [ebp - 0x198], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x198], eax
jge 0x1004aee6
mov dword [ebp - 0x1a0], 1
jmp 0x1004aeed
and dword [ebp - 0x1a0], 0
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0
je 0x1004b150
mov eax, 0x6c84
test eax, eax
je 0x1004b150
push 1
lea ecx, [ebp - 0x354]
call fcn.1001a8b6
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x248], 1
mov dword [ebp - 0x1c0], 0x9f2e0723
mov dword [ebp - 0x1a8], 0x2ad
mov dword [ebp - 0x240], 0x1000be70
cmp dword [ebp - 0x1a8], 0x3b8
jle 0x1004b013
push 0x11e0
push 0x1876
push 0
push 0xf21
call dword [sym.imp.USER32.dll_DrawEdge]
and dword [ebp - 0xdc], 0
jmp 0x1004af89
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0x39d4
jge 0x1004b013
and dword [ebp - 0xe4], 0
jmp 0x1004afab
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0x3ad5
jge 0x1004b00e
mov eax, dword [ebp - 0xdc]
and eax, dword [ebp - 0xe4]
cdq
mov dword [ebp - 0x308], eax
mov dword [ebp - 0x304], edx
push dword [ebp - 0x304]
push dword [ebp - 0x308]
lea ecx, [ebp - 0x414]
call fcn.1000d41a
pop ecx
pop ecx
mov dword [ebp - 0x28c], eax
mov ecx, dword [ebp - 0x28c]
call fcn.1001a665
push eax
call fcn.1004e4c6
pop ecx
lea ecx, [ebp - 0x414]
call fcn.1001a65b
jmp 0x1004af9e
jmp 0x1004af7c
mov dword [ebp - 0x1c8], 0x98436572
mov byte [ebp - 4], 0xe
cmp dword [ebp - 0x1a8], 0xffffffa6
jge 0x1004b036
push dword [ebp - 0x240]
call fcn.1004e4c6
pop ecx
jmp 0x1004b052
mov dword [ebp - 4], 0xd
jmp 0x1004b062
lea eax, [ebp - 0x354]
push eax
push 0x53e
push 0x403f
push 0x47d0
push 0x177b
push 0x2276
lea eax, [ebp - 0x394]
push eax
push 0x182a
push 0x340b
push 1
push 1
call fcn.100480fc
add esp, 0x2c
call fcn.100494e3
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x398], eax
push 0
lea ecx, [ebp - 0x354]
call fcn.1001a954
cmp dword [eax], 1
jge 0x1004b0ce
mov dword [ebp - 0x1b0], 1
jmp 0x1004b0d5
and dword [ebp - 0x1b0], 0
mov esi, dword [ebp - 0x38]
add esi, dword [ebp - 0x1b0]
push 0
lea ecx, [ebp - 0x354]
call fcn.1001a954
cmp dword [eax], esi
jge 0x1004b0fb
mov dword [ebp - 0x1b8], 1
jmp 0x1004b102
and dword [ebp - 0x1b8], 0
mov eax, dword [ebp - 0x248]
imul eax, dword [ebp - 0x1b8]
mov dword [ebp - 0x1c0], eax
mov esi, dword [ebp - 0x1c0]
push 1
lea ecx, [ebp - 0x32c]
call fcn.1001a954
add esi, dword [eax]
mov dword [ebp - 0x1c8], esi
mov eax, dword [ebp - 0x1c8]
mov dword [ebp - 0xec], eax
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x354]
call fcn.1001a938
jmp 0x1004b4be
mov dword [ebp - 0x11c], 0xffff
mov dword [ebp - 0x14], 0
jmp 0x1004b16a
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x16
jge 0x1004b4be
push 3
lea ecx, [ebp - 0x38c]
call fcn.1001a8b6
mov byte [ebp - 4], 0x10
mov dword [ebp - 0x228], 0x8b4fd089
mov dword [ebp - 0x268], 1
mov dword [ebp - 0x2c], 0
jmp 0x1004b1a9
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jge 0x1004b1bf
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0xf4], 0x769035a6
jmp 0x1004b1a2
mov dword [ebp - 0x2c], 0
jmp 0x1004b1cf
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x1004b1eb
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x38c]
call fcn.1001a954
mov dword [eax], 0x54554565
jmp 0x1004b1c8
mov dword [ebp - 0x7c], 0
jmp 0x1004b1fb
mov eax, dword [ebp - 0x7c]
dec eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0xfffffff0
jle 0x1004b4aa
mov dword [ebp - 0xa8], 0xffffffff
mov dword [ebp - 0x258], 0xffffffff
mov dword [ebp - 0x38], 0
jmp 0x1004b229
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0x1c
jge 0x1004b4a5
mov dword [ebp - 0xa0], 8
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xf4], 0
jne 0x1004b25f
mov eax, 0xffff
test eax, eax
jne 0x1004b25f
and dword [ebp - 0x1d0], 0
jmp 0x1004b269
mov dword [ebp - 0x1d0], 1
cmp dword [ebp - 0x1d0], 0xb395b915
jne 0x1004b281
mov dword [ebp - 0x250], 1
jmp 0x1004b288
and dword [ebp - 0x250], 0
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x3a0], eax
cmp dword [ebp - 0x258], 0xb933df47
jae 0x1004b2ac
mov dword [ebp - 0x1d8], 1
jmp 0x1004b2b3
and dword [ebp - 0x1d8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf4]
cmp dword [ebp - 0x1d8], eax
jl 0x1004b2d4
mov dword [ebp - 0x1e0], 1
jmp 0x1004b2db
and dword [ebp - 0x1e0], 0
cmp dword [ebp - 0x1e0], 1
jb 0x1004b2f0
mov dword [ebp - 0x1e8], 1
jmp 0x1004b2f7
and dword [ebp - 0x1e8], 0
mov eax, dword [ebp - 0xa0]
add eax, dword [ebp - 0x1e8]
mov ecx, dword [ebp - 0xa8]
imul ecx, eax
sub ecx, dword [ebp - 0xa8]
jne 0x1004b326
cmp dword [ebp - 0xa0], 0
jne 0x1004b326
and dword [ebp - 0x1f0], 0
jmp 0x1004b330
mov dword [ebp - 0x1f0], 1
cmp dword [ebp - 0x1f0], 0xfff8
jbe 0x1004b348
mov dword [ebp - 0x114], 1
jmp 0x1004b34f
and dword [ebp - 0x114], 0
push 1
lea ecx, [ebp - 0x38c]
call fcn.1001a954
mov ecx, dword [ebp - 0x114]
mov dword [eax], ecx
mov eax, dword [ebp - 0x11c]
cmp dword [ebp - 0x114], eax
je 0x1004b37e
mov dword [ebp - 0x1f8], 1
jmp 0x1004b385
and dword [ebp - 0x1f8], 0
mov eax, dword [ebp - 0xec]
cmp dword [ebp - 0x1f8], eax
jl 0x1004b39f
mov dword [ebp - 0x260], 1
jmp 0x1004b3a6
and dword [ebp - 0x260], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf4]
mov dword [ebp - 0x3a8], eax
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x3b0], eax
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x3bc], eax
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x3c4], eax
cmp dword [ebp - 0x218], 0
jne 0x1004b3ec
cmp dword [ebp - 0x38], 0
je 0x1004b401
mov eax, 0xd4f00d13
test eax, eax
je 0x1004b401
mov dword [ebp - 0x200], 1
jmp 0x1004b408
and dword [ebp - 0x200], 0
mov eax, dword [ebp - 0x11c]
cmp dword [ebp - 0x200], eax
jle 0x1004b422
mov dword [ebp - 0x208], 1
jmp 0x1004b429
and dword [ebp - 0x208], 0
mov eax, dword [ebp - 0xa8]
imul eax, dword [ebp - 0x208]
cmp eax, dword [ebp - 0xa0]
jg 0x1004b44a
mov dword [ebp - 0x210], 1
jmp 0x1004b451
and dword [ebp - 0x210], 0
mov eax, dword [ebp - 0xa8]
cmp dword [ebp - 0x210], eax
jle 0x1004b471
cmp dword [ebp - 0x218], 0
jne 0x1004b471
and dword [ebp - 0x220], 0
jmp 0x1004b47b
mov dword [ebp - 0x220], 1
mov eax, dword [ebp - 0x220]
mov dword [ebp - 0x228], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf4]
sub eax, dword [ebp - 0x228]
mov dword [ebp - 0x268], eax
jmp 0x1004b222
jmp 0x1004b1f4
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x38c]
call fcn.1001a938
jmp 0x1004b163
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x32c]
call fcn.1001a938
mov eax, dword [ebp - 0x20]
cmp dword [eax + 0x10], 0
je 0x1004b4e1
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x230], eax
jmp 0x1004b4e8
and dword [ebp - 0x230], 0
mov eax, dword [ebp - 0x230]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret