Function at 0x1004b281
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10073756
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x8dc
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 0x20]
test eax, eax
je 0x1004f2d8
lea eax, [ebp + 8]
mov dword [ebp - 0x4e4], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x64c], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x634], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x5f4], eax
mov eax, dword [ebp - 0x4e4]
movzx eax, byte [eax]
test eax, eax
je 0x1004b30c
mov eax, dword [ebp - 0x634]
mov dword [ebp - 0x63c], eax
mov eax, dword [ebp - 0x63c]
mov dword [ebp - 0x644], eax
mov eax, dword [ebp - 0x644]
mov dword [eax], 0xffffffff
jmp 0x1004f2d6
mov eax, dword [ebp - 0x64c]
mov dword [ebp - 0x19c], eax
mov eax, dword [ebp - 0x5f4]
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x48], 0
jmp 0x1004b334
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 1
jge 0x1004b34a
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x5e4], 3
jmp 0x1004b32d
mov dword [ebp - 0x48], 0
jmp 0x1004b35a
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 1
jge 0x1004b370
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0xd8], 0x90c4d8e5
jmp 0x1004b353
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xd8], 0
jmp 0x1004b39e
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd8]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xd8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xd8], 0
jg 0x1004b437
mov dword [ebp - 0x15c], 0x31d83293
mov byte [ebp - 0x8d], 0
push 1
push 0
lea eax, [ebp - 0x8d]
push eax
push 0x5630
call fcn.100465f5
add esp, 0x10
mov dword [ebp - 0x15c], 0
jmp 0x1004b3f4
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 0
jg 0x1004b432
mov byte [ebp - 0x8f], 0
lea eax, [ebp - 0x8f]
push eax
push 1
push 1
call fcn.100447b9
add esp, 0xc
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd8]
cmp dword [ebp + eax*4 - 0x5e4], 0
je 0x1004b430
jmp 0x1004b432
jmp 0x1004b3e7
jmp 0x1004b383
mov byte [ebp - 0x65], 0
push 1
push 0x6e98
push 0x37b5
push 1
lea eax, [ebp - 0x65]
push eax
push 0x6439
push 0x3695
push 0x5f
push 0x6fca
push 1
push 0x3d97
push 0x7504
push 0x6f73
push 0x3a59
call fcn.10044904
add esp, 0x38
and dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 8
mov dword [ebp - 0x50], 0x8c9a01c7
mov dword [ebp - 0x65c], 0x6082f4e5
mov dword [ebp - 0x658], 0x6082f4e5
mov dword [ebp - 0x654], 0x6082f4e5
mov dword [ebp - 0x650], 0x6082f4e5
mov dword [ebp - 0x4d0], 0x52705104
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jg 0x1004b747
mov dword [ebp - 0x24], 1
mov dword [ebp - 0x374], 0xa527
mov dword [ebp - 0x414], 0x1e183a09
mov dword [ebp - 0x5dc], 0
cmp dword [ebp - 0x24], 0
jne 0x1004b506
cmp dword [ebp - 0x24], 0
jne 0x1004b506
and dword [ebp - 0x4dc], 0
jmp 0x1004b510
mov dword [ebp - 0x4dc], 1
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x764], eax
cmp dword [ebp - 0x30], 0x2c4d
jg 0x1004b534
mov eax, 0x8c84
test eax, eax
jne 0x1004b534
and dword [ebp - 0x2d0], 0
jmp 0x1004b53e
mov dword [ebp - 0x2d0], 1
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x2d0]
jle 0x1004b555
mov dword [ebp - 0x4a4], 1
jmp 0x1004b55c
and dword [ebp - 0x4a4], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x4a4], eax
jle 0x1004b573
mov dword [ebp - 0x4a0], 1
jmp 0x1004b57a
and dword [ebp - 0x4a0], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x4a0], eax
jl 0x1004b591
mov dword [ebp - 0x49c], 1
jmp 0x1004b598
and dword [ebp - 0x49c], 0
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x49c]
cmp eax, dword [ebp - 0x24]
je 0x1004b5b2
mov dword [ebp - 0x214], 1
jmp 0x1004b5b9
and dword [ebp - 0x214], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x214], eax
jg 0x1004b5d0
mov dword [ebp - 0x364], 1
jmp 0x1004b5d7
and dword [ebp - 0x364], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x364], eax
jge 0x1004b5ee
mov dword [ebp - 0x21c], 1
jmp 0x1004b5f5
and dword [ebp - 0x21c], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x21c], eax
jg 0x1004b60c
mov dword [ebp - 0x188], 1
jmp 0x1004b613
and dword [ebp - 0x188], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x188]
mov dword [ebp + eax - 0x65c], ecx
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x188], eax
jle 0x1004b63d
mov dword [ebp - 0x40c], 1
jmp 0x1004b644
and dword [ebp - 0x40c], 0
mov eax, dword [ebp - 0x374]
cmp dword [ebp - 0x40c], eax
jge 0x1004b65e
mov dword [ebp - 0x224], 1
jmp 0x1004b665
and dword [ebp - 0x224], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x224], eax
jge 0x1004b67c
mov dword [ebp - 0x36c], 1
jmp 0x1004b683
and dword [ebp - 0x36c], 0
imul eax, dword [ebp - 0x36c], 0xffffffff
test eax, eax
je 0x1004b6a0
cmp dword [ebp - 0x24], 0
je 0x1004b6a0
mov dword [ebp - 0x22c], 1
jmp 0x1004b6a7
and dword [ebp - 0x22c], 0
cmp dword [ebp - 0x22c], 7
jl 0x1004b6bc
mov dword [ebp - 0x45c], 1
jmp 0x1004b6c3
and dword [ebp - 0x45c], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x45c], eax
jne 0x1004b6da
mov dword [ebp - 0x234], 1
jmp 0x1004b6e1
and dword [ebp - 0x234], 0
mov eax, dword [ebp - 0x50]
imul eax, dword [ebp - 0x234]
cmp eax, dword [ebp - 0x374]
jg 0x1004b6f9
cmp dword [ebp - 0x50], 0
jne 0x1004b708
cmp dword [ebp - 0x30], 0
jne 0x1004b708
and dword [ebp - 0x23c], 0
jmp 0x1004b712
mov dword [ebp - 0x23c], 1
mov eax, dword [ebp - 0x23c]
mov dword [ebp - 0x414], eax
mov eax, dword [ebp - 0x414]
mov dword [ebp - 0x5dc], eax
push 0x7977
push 0x3b5d
push 1
push 0
push 1
call fcn.10050564
add esp, 0x14
jmp 0x1004b8d3
mov dword [ebp - 0x28], 0xd734895c
mov dword [ebp - 0x50], 5
jmp 0x1004b75e
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 5
jge 0x1004b7a6
cmp dword [ebp - 0x28], 0
je 0x1004b76c
jmp 0x1004b7a6
mov byte [ebp - 0x91], 0
push 0x74e4
push 1
push 0x6b53
push 0x7bbb
push 0xef2
push 0x4fce
lea eax, [ebp - 0x91]
push eax
push 0
push 0x6c36
call fcn.10048e4a
add esp, 0x24
jmp 0x1004b757
mov dword [ebp - 0x30], 0
jmp 0x1004b7b6
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jg 0x1004b8d3
mov dword [ebp - 0x7a0], 0xf6ec
mov dword [ebp - 0x28], 0
jmp 0x1004b7da
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jg 0x1004b88a
mov dword [ebp - 0x18c], 0xf1db06d6
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x65c], 1
xor eax, eax
inc eax
cmp eax, 0x2283
jle 0x1004b812
mov dword [ebp - 0x244], 1
jmp 0x1004b819
and dword [ebp - 0x244], 0
mov eax, dword [ebp - 0x18c]
cmp dword [ebp - 0x244], eax
je 0x1004b833
mov dword [ebp - 0x37c], 1
jmp 0x1004b83a
and dword [ebp - 0x37c], 0
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x37c], eax
jle 0x1004b851
mov dword [ebp - 0x24c], 1
jmp 0x1004b858
and dword [ebp - 0x24c], 0
mov eax, dword [ebp - 0x18c]
cmp dword [ebp - 0x24c], eax
jle 0x1004b872
mov dword [ebp - 0x464], 1
jmp 0x1004b879
and dword [ebp - 0x464], 0
mov eax, dword [ebp - 0x464]
mov dword [ebp - 0x18c], eax
jmp 0x1004b7d3
mov dword [ebp - 0x28], 3
jmp 0x1004b89a
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jl 0x1004b8ce
mov byte [ebp - 0x6d], 0
movzx eax, byte [ebp - 0x6d]
test eax, eax
je 0x1004b8bd
push 1
push 0x78e
push 1
call fcn.10045ff5
add esp, 0xc
mov eax, dword [ebp - 0x28]
cmp dword [ebp + eax*4 - 0x65c], 0
je 0x1004b8cc
jmp 0x1004b8ce
jmp 0x1004b893
jmp 0x1004b7af
lea eax, [ebp - 0x4d0]
push eax
push 1
push 0x48f6
push 1
call fcn.100418f9
add esp, 0x10
mov dword [ebp - 0x254], 0x197a
mov dword [ebp - 0x4ec], 0x10009628
cmp dword [ebp - 0x254], 0x1ceb
jle 0x1004b9b5
and dword [ebp - 0xe8], 0
jmp 0x1004b925
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0x4b41
jge 0x1004b9b5
and dword [ebp - 0xf8], 0
jmp 0x1004b94b
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0x6097
jge 0x1004b9b0
mov eax, dword [ebp - 0xe8]
mov ecx, dword [ebp - 0xf8]
sar eax, cl
cdq
mov dword [ebp - 0x5f0], eax
mov dword [ebp - 0x5ec], edx
push dword [ebp - 0x5ec]
push dword [ebp - 0x5f0]
lea ecx, [ebp - 0x8bc]
call fcn.1000b06a
pop ecx
pop ecx
mov dword [ebp - 0x5ac], eax
mov ecx, dword [ebp - 0x5ac]
call fcn.1000f793
push eax
call fcn.100598a3
pop ecx
lea ecx, [ebp - 0x8bc]
call fcn.1000f789
jmp 0x1004b93e
jmp 0x1004b918
and dword [ebp - 4], 0
cmp dword [ebp - 0x254], 0x1749
jge 0x1004b9d1
push dword [ebp - 0x4ec]
call fcn.100598a3
pop ecx
jmp 0x1004b9ed
or dword [ebp - 4], 0xffffffff
jmp 0x1004b9f7
mov dword [ebp - 0x54], 0xa2ae
mov dword [ebp - 0x690], 0xa29f5838
mov dword [ebp - 0x68c], 0xa29f5838
mov dword [ebp - 0x688], 0xa29f5838
mov dword [ebp - 0x684], 0xa29f5838
lea ecx, [ebp - 0x18d]
call fcn.1000fa98
push eax
lea eax, [ebp - 0x680]
push eax
lea eax, [ebp - 0x690]
push eax
lea ecx, [ebp - 0x88c]
call fcn.1000fa9b
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x6cc]
call fcn.1000fa47
mov dword [ebp - 4], 2
mov dword [ebp - 0x38c], 0xe75d5f8d
mov dword [ebp - 0x4f4], 8
mov eax, dword [ebp - 0x54]
cmp eax, dword [ebp - 0x54]
jge 0x1004ba8a
mov dword [ebp - 0x1c0], 1
jmp 0x1004ba91
and dword [ebp - 0x1c0], 0
push 0
lea ecx, [ebp - 0x6cc]
call fcn.1000fa89
mov ecx, dword [ebp - 0x1c0]
mov dword [eax], ecx
mov eax, dword [ebp - 0x1c0]
sub eax, dword [ebp - 0x38c]
cmp dword [ebp - 0x54], eax
jne 0x1004bac3
mov dword [ebp - 0x384], 1
jmp 0x1004baca
and dword [ebp - 0x384], 0
cmp dword [ebp - 0x384], 0x2b82c447
jge 0x1004bae2
mov dword [ebp - 0x25c], 1
jmp 0x1004bae9
and dword [ebp - 0x25c], 0
mov eax, dword [ebp - 0x25c]
sub eax, dword [ebp - 0x54]
cmp eax, dword [ebp - 0x54]
jne 0x1004bb03
mov dword [ebp - 0x41c], 1
jmp 0x1004bb0a
and dword [ebp - 0x41c], 0
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x41c], eax
jne 0x1004bb21
mov dword [ebp - 0x5b0], 1
jmp 0x1004bb28
and dword [ebp - 0x5b0], 0
mov eax, dword [ebp - 0x4f4]
mov dword [ebp - 0x810], eax
push 2
pop eax
cmp eax, 0x5524872
ja 0x1004bb4a
mov dword [ebp - 0x264], 1
jmp 0x1004bb51
and dword [ebp - 0x264], 0
cmp dword [ebp - 0x264], 0
jne 0x1004bb66
mov dword [ebp - 0x26c], 1
jmp 0x1004bb6d
and dword [ebp - 0x26c], 0
mov eax, dword [ebp - 0x38c]
imul eax, dword [ebp - 0x26c]
cmp eax, 0xc715
jl 0x1004bb8d
mov dword [ebp - 0x468], 1
jmp 0x1004bb94
and dword [ebp - 0x468], 0
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x468], eax
jl 0x1004bbab
mov dword [ebp - 0x648], 1
jmp 0x1004bbb2
and dword [ebp - 0x648], 0
mov eax, 0xd35da2a
test eax, eax
je 0x1004bbcb
push 0
push 0x3586
call fcn.1004f68b
pop ecx
pop ecx
jmp 0x1004bc05
mov dword [ebp - 0x4fc], 0xffff
lea eax, [ebp - 0x4fc]
push eax
push 1
push 0x6895
push 1
push 1
push 0x7f84
lea eax, [ebp - 0x6cc]
push eax
push 0x2c17
push 0x3fe2
call fcn.10046046
add esp, 0x24
mov dword [ebp - 0x274], 0x321b
mov dword [ebp - 0x504], 0x100096a0
cmp dword [ebp - 0x274], 0x3422
jle 0x1004bcc9
and dword [ebp - 0x178], 0
jmp 0x1004bc3f
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 0x30de
jge 0x1004bcc9
and dword [ebp - 0x100], 0
jmp 0x1004bc61
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0x17c7
jge 0x1004bcc4
mov eax, dword [ebp - 0x178]
sub eax, dword [ebp - 0x100]
cdq
mov dword [ebp - 0x5fc], eax
mov dword [ebp - 0x5f8], edx
push dword [ebp - 0x5f8]
push dword [ebp - 0x5fc]
lea ecx, [ebp - 0x8d4]
call fcn.1000b06a
pop ecx
pop ecx
mov dword [ebp - 0x5b8], eax
mov ecx, dword [ebp - 0x5b8]
call fcn.1000f793
push eax
call fcn.100598a3
pop ecx
lea ecx, [ebp - 0x8d4]
call fcn.1000f789
jmp 0x1004bc54
jmp 0x1004bc32
mov byte [ebp - 0x93], 0
mov byte [ebp - 4], 3
cmp dword [ebp - 0x274], 0x3078
jge 0x1004bcec
push dword [ebp - 0x504]
call fcn.100598a3
pop ecx
jmp 0x1004bd08
mov dword [ebp - 4], 2
jmp 0x1004bd18
movzx eax, byte [ebp - 0x93]
test eax, eax
je 0x1004bd2e
push 1
push 1
call fcn.100419fb
pop ecx
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6cc]
call fcn.1000fa6d
mov dword [ebp - 0x600], 0xffffffff
mov dword [ebp - 0xd0], 4
push 0x57d1
lea eax, [ebp - 0xd0]
push eax
push 1
lea eax, [ebp - 0x600]
push eax
push 0
push 1
call fcn.1004f464
add esp, 0x18
mov dword [ebp - 0xd0], 0xffffffef
jmp 0x1004bd8b
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0x1a
jge 0x1004bdd9
mov dword [ebp - 0x50c], 0xb0cb
mov byte [ebp - 0x75], 0
push 0x66f5
lea eax, [ebp - 0x75]
push eax
push 0x41cf
push 0x5784
push 1
push 1
call fcn.10046500
add esp, 0x18
push 0x108
push 0
lea eax, [ebp - 0x50c]
push eax
call fcn.1004f394
add esp, 0xc
jmp 0x1004bd7e
mov dword [ebp - 0x7a8], 0xfffffffe
mov dword [ebp - 0x1d8], 0x8f69f7fd
mov dword [ebp - 0x630], 1
mov dword [ebp - 0x514], 0xfffffff6
mov dword [ebp - 0x5c0], 0xffffffff
mov dword [ebp - 0x198], 0x182a
mov dword [ebp - 0x140], 0
jmp 0x1004be2e
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 3
jge 0x1004be4a
mov eax, dword [ebp - 0x140]
mov dword [ebp + eax*4 - 0x6e4], 7
jmp 0x1004be21
xor eax, eax
jne 0x1004be6e
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6e4]
add eax, dword [ebp - 0x1d8]
push 4
pop ecx
imul ecx, ecx, 0
cmp dword [ebp + ecx - 0x6e4], eax
cmp dword [ebp - 0x1d8], 0
je 0x1004be83
mov dword [ebp - 0x394], 1
jmp 0x1004be8a
and dword [ebp - 0x394], 0
mov eax, dword [ebp - 0x5c0]
cmp dword [ebp - 0x394], eax
jg 0x1004be9f
cmp dword [ebp - 0x514], 0
cmp dword [ebp - 0x630], 0xf209
jg 0x1004bebd
mov eax, 0xff60
test eax, eax
jne 0x1004bebd
and dword [ebp - 0x27c], 0
jmp 0x1004bec7
mov dword [ebp - 0x27c], 1
mov eax, dword [ebp - 0x198]
dec eax
mov dword [ebp - 0x198], eax
mov eax, dword [ebp - 0x198]
imul eax, dword [ebp - 0x27c]
add eax, dword [ebp - 0x1d8]
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x6e4], eax
mov dword [ebp - 0xa4], 0xac64a684
mov dword [ebp - 0x718], 0xffffffff
mov dword [ebp - 0x714], 0xffffffff
mov dword [ebp - 0x710], 0xffffffff
mov dword [ebp - 0x70c], 0xffffffff
push 2
lea ecx, [ebp - 0x7cc]
call fcn.1000fa0b
mov dword [ebp - 4], 5
mov dword [ebp - 0x294], 0x6d9935ff
push 1
push 0xb2d
push 0x84f
push 0x7c0b
push 0x49ac
push 0x5fdb
lea eax, [ebp - 0x818]
push eax
push 1
lea eax, [ebp - 0x7cc]
push eax
call fcn.10041c16
add esp, 0x24
mov dword [ebp - 0xa4], 0xffffffe7
jmp 0x1004bf90
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0x15
jne 0x1004c120
mov dword [ebp - 0x38], 0xffffffff
mov dword [ebp - 0x72c], 0x9b780f88
mov dword [ebp - 0x734], 0xffffffff
mov dword [ebp - 0x74c], 0xffffffff
mov dword [ebp - 0x754], 0xfffffffd
mov dword [ebp - 0x75c], 0x604491d0
mov dword [ebp - 0x38], 0x11
jmp 0x1004bfe6
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0xffffffe9
je 0x1004c11b
mov dword [ebp - 0x424], 0xf145ba13
mov dword [ebp - 0x71c], 0xf63abefa
mov eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0xa4]
jne 0x1004c01b
mov dword [ebp - 0x51c], 1
jmp 0x1004c022
and dword [ebp - 0x51c], 0
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x76c], eax
mov eax, dword [ebp - 0xa4]
add eax, dword [ebp - 0x38]
neg eax
cmp eax, dword [ebp - 0x424]
jle 0x1004c053
cmp dword [ebp - 0x424], 0
je 0x1004c053
mov dword [ebp - 0x284], 1
jmp 0x1004c05a
and dword [ebp - 0x284], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x284], eax
jge 0x1004c071
mov dword [ebp - 0x39c], 1
jmp 0x1004c078
and dword [ebp - 0x39c], 0
cmp dword [ebp - 0x39c], 0xfc4f
jne 0x1004c090
mov dword [ebp - 0x28c], 1
jmp 0x1004c097
and dword [ebp - 0x28c], 0
mov eax, dword [ebp - 0x28c]
neg eax
mov dword [ebp - 0x488], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x488]
mov dword [ebp + eax - 0x718], ecx
mov eax, dword [ebp - 0xa4]
add eax, dword [ebp - 0x488]
cmp eax, dword [ebp - 0x38]
jge 0x1004c0ef
push 0x28ae
push 0x6f6a
push 0
push 0x139a
call fcn.1005070c
add esp, 0x10
cmp dword [ebp - 0x38], 0
je 0x1004c0ed
jmp 0x1004bfdf
jmp 0x1004c116
mov dword [ebp - 0x774], 0xffffffff
push 0x517
push 1
push 0x1b98
lea eax, [ebp - 0x294]
push eax
push 1
call fcn.100466a7
add esp, 0x14
jmp 0x1004bfdf
jmp 0x1004bf83
lea eax, [ebp - 0x294]
push eax
push 1
push 1
push 0x33e2
call fcn.10041d12
add esp, 0x10
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7cc]
call fcn.1000fa6d
lea eax, [ebp - 0x1b8]
push eax
lea eax, [ebp - 0x19c]
push eax
push 0x3cd6
push 0x1d30
push 1
push 1
call fcn.1004682f
add esp, 0x18
mov dword [ebp - 0x77c], 0xffffffff
mov dword [ebp - 0x784], 0xd453606d
mov dword [ebp - 0x67c], 0x5d09ea9
mov dword [ebp - 0x678], 0x5d09ea9
mov dword [ebp - 0x674], 0x5d09ea9
mov dword [ebp - 0x670], 0x5d09ea9
lea ecx, [ebp - 0x17d]
call fcn.1000fa98
push eax
lea eax, [ebp - 0x66c]
push eax
lea eax, [ebp - 0x67c]
push eax
lea ecx, [ebp - 0x894]
call fcn.1000fa9b
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x86c]
call fcn.1000fa47
mov dword [ebp - 4], 6
mov dword [ebp - 0x5c8], 0xfffffffd
mov byte [ebp - 0x99], 0
push 0x45af
push 0xcea
push 0x5913
push 0
push 1
lea eax, [ebp - 0x99]
push eax
push 0x75fa
push 1
call fcn.100495b1
add esp, 0x20
lea eax, [ebp - 0x5c8]
push eax
push 0
push 0x677b
push 1
call fcn.1004f316
add esp, 0x10
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x86c]
call fcn.1000fa6d
mov eax, dword [ebp - 0x1b8]
movzx eax, word [eax]
cmp eax, 0x5a4d
je 0x1004c76a
mov dword [ebp - 0x108], 0x74dd0324
mov dword [ebp - 0x3c], 0
jmp 0x1004c272
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 4
jge 0x1004c288
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x860], 0x5baf43b7
jmp 0x1004c26b
mov dword [ebp - 0x3c], 0
jmp 0x1004c298
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 3
jge 0x1004c2ae
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x7dc], 1
jmp 0x1004c291
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x860]
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x7dc], eax
mov dword [ebp - 0x108], 0x1a
jmp 0x1004c2e1
mov eax, dword [ebp - 0x108]
dec eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0xfffffff8
jle 0x1004c6a2
mov dword [ebp - 0x160], 0
jmp 0x1004c307
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 4
jge 0x1004c323
mov eax, dword [ebp - 0x160]
mov dword [ebp + eax*4 - 0x4cc], 1
jmp 0x1004c2fa
mov byte [ebp - 0x7d], 0
movzx eax, byte [ebp - 0x7d]
test eax, eax
je 0x1004c33d
push 0
push 0x16c1
call fcn.1004f737
pop ecx
pop ecx
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x4cc], 0
jmp 0x1004c368
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x4cc]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x4cc], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x4cc], 0x10
jne 0x1004c69d
mov dword [ebp - 0x98], 0xb96
mov dword [ebp - 0x3a4], 0x3fa8
mov dword [ebp - 0x524], 0x10009718
cmp dword [ebp - 0x3a4], 0x423c
jle 0x1004c482
and dword [ebp - 0x118], 0
jmp 0x1004c3bf
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0x1465
jge 0x1004c482
and dword [ebp - 0x110], 0
jmp 0x1004c3e5
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0x58a3
jge 0x1004c47d
and dword [ebp - 0x148], 0
jmp 0x1004c40b
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 0x326c
jge 0x1004c478
and dword [ebp - 0x170], 0
jmp 0x1004c42d
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 0x39b4
jge 0x1004c476
mov eax, dword [ebp - 0x110]
add eax, dword [ebp - 0x148]
or eax, dword [ebp - 0x118]
or eax, dword [ebp - 0x170]
cdq
mov dword [ebp - 0x608], eax
mov dword [ebp - 0x604], edx
push dword [ebp - 0x604]
push dword [ebp - 0x608]
mov ecx, 0x1061a6b8
call fcn.1000f7b3
jmp 0x1004c420
jmp 0x1004c3fe
jmp 0x1004c3d8
jmp 0x1004c3b2
mov dword [ebp - 0x52c], 0x866193f
mov dword [ebp - 4], 7
cmp dword [ebp - 0x3a4], 0x3f9c
jge 0x1004c4af
mov edx, dword [ebp - 0x524]
mov ecx, 0x1061a6b8
call fcn.10011dbf
jmp 0x1004c4cb
or dword [ebp - 4], 0xffffffff
jmp 0x1004c4d5
mov dword [ebp - 0x5d0], 0xd38ca8c9
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x78c], eax
cmp dword [ebp - 0x98], 0
je 0x1004c551
cmp dword [ebp - 0x98], 1
je 0x1004c509
mov dword [ebp - 0x29c], 1
jmp 0x1004c510
and dword [ebp - 0x29c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x4cc]
cmp dword [ebp - 0x29c], eax
jg 0x1004c530
mov dword [ebp - 0x42c], 1
jmp 0x1004c537
and dword [ebp - 0x42c], 0
mov eax, dword [ebp - 0x98]
cmp dword [ebp - 0x42c], eax
jge 0x1004c551
mov dword [ebp - 0x2a4], 1
jmp 0x1004c558
and dword [ebp - 0x2a4], 0
mov eax, dword [ebp - 0x98]
cmp dword [ebp - 0x2a4], eax
jg 0x1004c572
mov dword [ebp - 0x60c], 1
jmp 0x1004c579
and dword [ebp - 0x60c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x4cc]
cmp eax, dword [ebp - 0x98]
jne 0x1004c599
mov dword [ebp - 0x3ac], 1
jmp 0x1004c5a0
and dword [ebp - 0x3ac], 0
cmp dword [ebp - 0x3ac], 0xd14c
jg 0x1004c5b8
mov dword [ebp - 0x2ac], 1
jmp 0x1004c5bf
and dword [ebp - 0x2ac], 0
mov eax, dword [ebp - 0x98]
cmp dword [ebp - 0x2ac], eax
jg 0x1004c5e6
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x860], 0
jne 0x1004c5e6
and dword [ebp - 0x470], 0
jmp 0x1004c5f0
mov dword [ebp - 0x470], 1
mov eax, dword [ebp - 0x52c]
imul eax, dword [ebp - 0x470]
push 4
pop ecx
shl ecx, 1
cmp dword [ebp + ecx - 0x4cc], eax
je 0x1004c617
mov dword [ebp - 0x2b4], 1
jmp 0x1004c61e
and dword [ebp - 0x2b4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7dc]
cmp dword [ebp - 0x2b4], eax
jne 0x1004c63f
mov dword [ebp - 0x3b4], 1
jmp 0x1004c646
and dword [ebp - 0x3b4], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x4cc]
cmp dword [ebp - 0x3b4], eax
jg 0x1004c666
mov dword [ebp - 0x2bc], 1
jmp 0x1004c66d
and dword [ebp - 0x2bc], 0
cmp dword [ebp - 0x2bc], 0x1dd2e91c
je 0x1004c685
mov dword [ebp - 0x434], 1
jmp 0x1004c68c
and dword [ebp - 0x434], 0
mov eax, dword [ebp - 0x434]
mov dword [ebp - 0x5d0], eax
jmp 0x1004c34f
jmp 0x1004c2d4
mov dword [ebp - 0xc0], 0xfffffffa
cmp dword [ebp - 0xc0], 0
je 0x1004c741
push 3
lea ecx, [ebp - 0x7ec]
call fcn.1000fa0b
mov dword [ebp - 4], 9
push 0x46e5
lea eax, [ebp - 0x7ec]
push eax
push 0x6922
push 0x2a0e
lea eax, [ebp - 0x794]
push eax
push 0
push 1
call fcn.10050c22
add esp, 0x1c
mov dword [ebp - 0xc0], 0
jmp 0x1004c70f
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 2
jg 0x1004c730
push 0x1835
push 1
push 1
push 0x6412
call fcn.100468f7
add esp, 0x10
jmp 0x1004c702
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7ec]
call fcn.1000fa6d
jmp 0x1004c75c
push 0x5711
push 0x462
push 0x3fa8
push 1
push 1
call fcn.10046999
add esp, 0x14
mov eax, dword [ebp - 0x8c]
and dword [eax], 0
jmp 0x1004f305
mov dword [ebp - 0x14], 0xffffffff
push 1
lea ecx, [ebp - 0x6d8]
call fcn.1000fa0b
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x1c8], 0xfffffffc
mov dword [ebp - 0x2d4], 0
mov dword [ebp - 0x2dc], 0
mov dword [ebp - 0x79c], 9
push 0
lea eax, [ebp - 0x6d8]
push eax
lea eax, [ebp - 0xe0]
push eax
push 0x77be
call fcn.10050cf6
add esp, 0x10
mov dword [ebp - 0xe0], 0
jmp 0x1004c7e3
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 1
jge 0x1004c7ff
mov eax, dword [ebp - 0xe0]
mov dword [ebp + eax*4 - 0x120], 0xfffffffd
jmp 0x1004c7d6
mov dword [ebp - 0x14], 0
jmp 0x1004c80f
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x16
jge 0x1004c855
mov byte [ebp - 0x9b], 0
movzx eax, byte [ebp - 0x9b]
test eax, eax
je 0x1004c853
push 0x3d67
push 0x3a87
push 0x978
push 0
push 0x6c28
push 0x163
push 0x3df0
push 1
push 1
call fcn.10047368
add esp, 0x24
jmp 0x1004c808
mov eax, 0x9cd4
test eax, eax
je 0x1004c862
cmp dword [ebp - 0x14], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x7a4], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x7ac], eax
mov eax, 0xee61780e
sub eax, dword [ebp - 0x14]
je 0x1004c890
cmp dword [ebp - 0x14], 0
je 0x1004c890
mov dword [ebp - 0x1a0], 1
jmp 0x1004c897
and dword [ebp - 0x1a0], 0
push 0
lea ecx, [ebp - 0x6d8]
call fcn.1000fa89
mov ecx, dword [ebp - 0x1a0]
mov dword [eax], ecx
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 0x6eea
jg 0x1004c8d0
mov dword [ebp - 0x2c4], 1
jmp 0x1004c8d7
and dword [ebp - 0x2c4], 0
cmp dword [ebp - 0x2c4], 0xfff8
jae 0x1004c8ef
mov dword [ebp - 0x3bc], 1
jmp 0x1004c8f6
and dword [ebp - 0x3bc], 0
cmp dword [ebp - 0x3bc], 0xc4ddb84c
jb 0x1004c90e
mov dword [ebp - 0x2cc], 1
jmp 0x1004c915
and dword [ebp - 0x2cc], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x2cc], eax
jl 0x1004c92c
mov dword [ebp - 0x498], 1
jmp 0x1004c933
and dword [ebp - 0x498], 0
mov eax, dword [ebp - 0x498]
mov dword [ebp - 0x2d4], eax
mov eax, dword [ebp - 0x2d4]
mov dword [ebp - 0x7b4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x120]
mov dword [ebp - 0x7bc], eax
cmp dword [ebp - 0x1c8], 0xbf8b
jge 0x1004c976
mov dword [ebp - 0x3c4], 1
jmp 0x1004c97d
and dword [ebp - 0x3c4], 0
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x3c4]
mov dword [ebp - 0x2dc], eax
cmp dword [ebp - 0x2dc], 1
jge 0x1004c9a1
mov dword [ebp - 0x43c], 1
jmp 0x1004c9a8
and dword [ebp - 0x43c], 0
cmp dword [ebp - 0x43c], 0x98dc509c
jbe 0x1004c9c0
mov dword [ebp - 0x2e4], 1
jmp 0x1004c9c7
and dword [ebp - 0x2e4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x14]
add ecx, dword [ebp - 0x2e4]
cmp ecx, dword [ebp + eax - 0x120]
jne 0x1004c9eb
mov dword [ebp - 0x3cc], 1
jmp 0x1004c9f2
and dword [ebp - 0x3cc], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x3cc], eax
jl 0x1004ca09
mov dword [ebp - 0x2ec], 1
jmp 0x1004ca10
and dword [ebp - 0x2ec], 0
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x120]
imul ecx, dword [ebp - 0x2ec]
cmp ecx, dword [ebp + eax - 0x120]
jl 0x1004ca3f
mov dword [ebp - 0x478], 1
jmp 0x1004ca46
and dword [ebp - 0x478], 0
mov eax, dword [ebp - 0x478]
mov dword [ebp - 0x14], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6d8]
call fcn.1000fa6d
push 0x682d
lea eax, [ebp - 0x19c]
push eax
lea eax, [ebp - 0xcc]
push eax
push 1
lea eax, [ebp - 0x1b8]
push eax
push 0xd55
push 0x58f5
push 0
push 1
call fcn.10047368
add esp, 0x24
mov dword [ebp - 0xc8], 0xffffffff
mov dword [ebp - 0x640], 0xca70051e
mov dword [ebp - 0xc8], 0
jmp 0x1004cabd
mov eax, dword [ebp - 0xc8]
dec eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0xffffffef
je 0x1004cb3d
mov dword [ebp - 0x534], 0x52835357
mov byte [ebp - 0x85], 0
push 0x72ee
push 0x6d15
push 1
push 0x24ff
push 0x4207
push 0x640b
lea eax, [ebp - 0x85]
push eax
push 1
push 0x1a6
call fcn.10046a2d
add esp, 0x24
push 0
lea eax, [ebp - 0xc8]
push eax
push 0x6f2
push 1
lea eax, [ebp - 0x534]
push eax
push 0x1956
push 0x11f6
lea eax, [ebp - 0x640]
push eax
call fcn.1004467f
add esp, 0x20
jmp 0x1004cab0
mov eax, dword [ebp - 0xcc]
cmp dword [eax], 0x4550
je 0x1004cc25
mov dword [ebp - 0x828], 0xbcd
mov dword [ebp - 0x830], 0xfffffff8
push 4
lea ecx, [ebp - 0x7fc]
call fcn.1000fa0b
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x838], 9
mov dword [ebp - 0x83c], 0
mov dword [ebp - 0x53c], 0x260389a9
lea eax, [ebp - 0x7fc]
push eax
push 1
push 1
push 0x667e
lea eax, [ebp - 0x730]
push eax
push 1
push 0x5eca
push 0x5f86
call fcn.10046d0b
add esp, 0x20
push 0x7f9e
lea eax, [ebp - 0x53c]
push eax
push 1
push 0x57ed
push 0
push 1
push 0xe04
call fcn.10050624
add esp, 0x1c
mov byte [ebp - 0x92], 0
push 0x7f7d
push 0x1575
push 1
push 0
lea eax, [ebp - 0x92]
push eax
call fcn.10049172
add esp, 0x14
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7fc]
call fcn.1000fa6d
mov eax, dword [ebp - 0x8c]
and dword [eax], 0
jmp 0x1004f305
mov dword [ebp - 0x1c], 0x15252cb1
mov dword [ebp - 0x1d0], 9
mov dword [ebp - 0x334], 0xc630de2f
mov dword [ebp - 0x44c], 1
mov dword [ebp - 0x324], 5
mov dword [ebp - 0x128], 0xfffffff7
mov dword [ebp - 0x618], 4
mov dword [ebp - 0x1b0], 0xffffffff
mov dword [ebp - 0x54c], 0
mov dword [ebp - 0x150], 0
jmp 0x1004cc95
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 3
jge 0x1004ccb1
mov eax, dword [ebp - 0x150]
mov dword [ebp + eax*4 - 0x204], 1
jmp 0x1004cc88
mov dword [ebp - 0x1c], 0
jmp 0x1004ccc1
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jg 0x1004cf1a
mov dword [ebp - 0x1e8], 0xe08cccdd
mov dword [ebp - 0x3e4], 0
push 1
lea eax, [ebp - 0x1e8]
push eax
push 1
call fcn.10046e95
add esp, 0xc
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x204]
mov dword [ebp - 0x2f4], eax
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x2f4]
mov dword [ebp + eax*4 - 0x204], ecx
cmp dword [ebp - 0x2f4], 0
je 0x1004cee0
mov dword [ebp - 0x1a8], 0x9c3d
mov dword [ebp - 0xac], 0xffffffff
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0x728], eax
cmp dword [ebp - 0xac], 0
jne 0x1004cd54
mov dword [ebp - 0x3d4], 1
jmp 0x1004cd5b
and dword [ebp - 0x3d4], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x3d4], eax
jle 0x1004cd72
mov dword [ebp - 0x5d8], 1
jmp 0x1004cd79
and dword [ebp - 0x5d8], 0
cmp dword [ebp - 0xac], 0
jne 0x1004cd8e
mov dword [ebp - 0x2fc], 1
jmp 0x1004cd95
and dword [ebp - 0x2fc], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x2fc], eax
jle 0x1004cdac
mov dword [ebp - 0x544], 1
jmp 0x1004cdb3
and dword [ebp - 0x544], 0
mov eax, dword [ebp - 0x1e8]
mov dword [ebp - 0x73c], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x204]
mov dword [ebp - 0x744], eax
cmp dword [ebp - 0xac], 0
mov eax, 0x658
cmp eax, 0x7ab5
jl 0x1004cdf0
mov dword [ebp - 0x444], 1
jmp 0x1004cdf7
and dword [ebp - 0x444], 0
cmp dword [ebp - 0x444], 0x2772
jl 0x1004ce0f
mov dword [ebp - 0x304], 1
jmp 0x1004ce16
and dword [ebp - 0x304], 0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp + eax*4 - 0x204]
cmp ecx, dword [ebp - 0x304]
jle 0x1004ce3d
cmp dword [ebp - 0xac], 0
jne 0x1004ce3d
and dword [ebp - 0x3dc], 0
jmp 0x1004ce47
mov dword [ebp - 0x3dc], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x204]
cmp dword [ebp - 0x3dc], eax
jl 0x1004ce68
mov dword [ebp - 0x30c], 1
jmp 0x1004ce6f
and dword [ebp - 0x30c], 0
mov eax, dword [ebp - 0xac]
cmp dword [ebp - 0x30c], eax
jge 0x1004ce89
mov dword [ebp - 0x490], 1
jmp 0x1004ce90
and dword [ebp - 0x490], 0
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
mov eax, dword [ebp - 0x1a8]
cmp eax, dword [ebp - 0x490]
jge 0x1004ceb7
mov dword [ebp - 0x314], 1
jmp 0x1004cebe
and dword [ebp - 0x314], 0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x204]
add eax, dword [ebp - 0x314]
jne 0x1004ced4
cmp dword [ebp - 0x1c], 0
mov dword [ebp - 0x3e4], 0x1bb30b13
jmp 0x1004cf15
push 0x19e7
push 0x523a
push 0x71b5
lea eax, [ebp - 0x1d0]
push eax
push 1
push 1
push 0x3dd7
lea eax, [ebp - 0x3e4]
push eax
lea eax, [ebp - 0x1e8]
push eax
call fcn.10047020
add esp, 0x24
jmp 0x1004ccba
xor eax, eax
jne 0x1004cfea
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x204]
mov dword [ebp - 0x7b0], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x204]
cmp eax, dword [ebp - 0x1d0]
je 0x1004cf5f
mov eax, 0xbd5f5ab9
test eax, eax
je 0x1004cf5f
mov dword [ebp - 0x31c], 1
jmp 0x1004cf66
and dword [ebp - 0x31c], 0
mov eax, dword [ebp - 0x31c]
mov dword [ebp - 0x44c], eax
mov eax, dword [ebp - 0x44c]
mov dword [ebp - 0x324], eax
cmp dword [ebp - 0x324], 0
jne 0x1004cf90
mov eax, 0x55a9
test eax, eax
je 0x1004cfa5
cmp dword [ebp - 0x128], 0
je 0x1004cfa5
mov dword [ebp - 0x3ec], 1
jmp 0x1004cfac
and dword [ebp - 0x3ec], 0
mov eax, dword [ebp - 0x618]
cmp dword [ebp - 0x3ec], eax
jg 0x1004cfc6
mov dword [ebp - 0x32c], 1
jmp 0x1004cfcd
and dword [ebp - 0x32c], 0
imul eax, dword [ebp - 0x32c], 9
test eax, eax
je 0x1004cfe1
cmp dword [ebp - 0x1b0], 0
jne 0x1004cfea
and dword [ebp - 0x480], 0
jmp 0x1004cff4
mov dword [ebp - 0x480], 1
mov eax, dword [ebp - 0x128]
cmp dword [ebp - 0x480], eax
jne 0x1004d00e
mov dword [ebp - 0x3f4], 1
jmp 0x1004d015
and dword [ebp - 0x3f4], 0
mov dword [ebp - 0x1c], 0x9cd8
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x334], eax
mov eax, dword [ebp - 0x334]
cmp eax, dword [ebp - 0x3f4]
jl 0x1004d03f
mov dword [ebp - 0x33c], 1
jmp 0x1004d046
and dword [ebp - 0x33c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x204]
cmp dword [ebp - 0x33c], eax
jl 0x1004d067
mov dword [ebp - 0x454], 1
jmp 0x1004d06e
and dword [ebp - 0x454], 0
mov eax, dword [ebp - 0x454]
mov dword [ebp - 0x54c], eax
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0x1b0], eax
mov eax, dword [ebp - 0x1b0]
cmp eax, dword [ebp - 0x1d0]
je 0x1004d0a0
mov dword [ebp - 0x344], 1
jmp 0x1004d0a7
and dword [ebp - 0x344], 0
mov eax, dword [ebp - 0x344]
mov dword [ebp - 0x128], eax
lea eax, [ebp - 0xec]
push eax
push 0
push dword [ebp - 0xcc]
push 0x4fcb
call fcn.10050a30
add esp, 0x10
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x20], 0xfffffff2
jmp 0x1004d0e6
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x10
jle 0x1004d383
mov dword [ebp - 0x3fc], 0xfffffffa
mov dword [ebp - 0x168], 0
jmp 0x1004d113
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 1
jge 0x1004d12c
mov eax, dword [ebp - 0x168]
mov dword [ebp + eax*4 - 0x2c], 1
jmp 0x1004d106
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x2c], 0
jmp 0x1004d151
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2c]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x2c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2c], 0x11
je 0x1004d37e
mov dword [ebp - 0xb4], 0x35ca4204
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2c]
mov dword [ebp - 0x3fc], eax
cmp dword [ebp - 0x3fc], 0
je 0x1004d236
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2c]
add eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0xb4]
jl 0x1004d1aa
mov dword [ebp - 0x34c], 1
jmp 0x1004d1b1
and dword [ebp - 0x34c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2c]
cmp dword [ebp - 0x34c], eax
je 0x1004d1cf
mov dword [ebp - 0x460], 1
jmp 0x1004d1d6
and dword [ebp - 0x460], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2c]
cmp dword [ebp - 0x460], eax
je 0x1004d1f4
mov dword [ebp - 0x354], 1
jmp 0x1004d1fb
and dword [ebp - 0x354], 0
cmp dword [ebp - 0x354], 0
je 0x1004d210
mov dword [ebp - 0x404], 1
jmp 0x1004d217
and dword [ebp - 0x404], 0
mov eax, dword [ebp - 0x404]
add eax, 0xdf86
sub eax, dword [ebp - 0xb4]
je 0x1004d236
mov dword [ebp - 0x35c], 1
jmp 0x1004d23d
and dword [ebp - 0x35c], 0
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x35c]
cmp eax, dword [ebp - 0x20]
je 0x1004d258
mov dword [ebp - 0x20c], 1
jmp 0x1004d25f
and dword [ebp - 0x20c], 0
cmp dword [ebp - 0x20c], 0xe924
jle 0x1004d277
mov dword [ebp - 0x210], 1
jmp 0x1004d27e
and dword [ebp - 0x210], 0
cmp dword [ebp - 0x210], 0xfffc
je 0x1004d296
mov dword [ebp - 0x218], 1
jmp 0x1004d29d
and dword [ebp - 0x218], 0
mov eax, dword [ebp - 0xb4]
cmp eax, dword [ebp - 0x218]
jle 0x1004d2b7
mov dword [ebp - 0x220], 1
jmp 0x1004d2be
and dword [ebp - 0x220], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2c]
cmp dword [ebp - 0x220], eax
jl 0x1004d2dc
mov dword [ebp - 0x228], 1
jmp 0x1004d2e3
and dword [ebp - 0x228], 0
cmp dword [ebp - 0x228], 0
jg 0x1004d2f8
mov dword [ebp - 0x230], 1
jmp 0x1004d2ff
and dword [ebp - 0x230], 0
mov eax, dword [ebp - 0xb4]
cmp dword [ebp - 0x230], eax
jl 0x1004d319
mov dword [ebp - 0x238], 1
jmp 0x1004d320
and dword [ebp - 0x238], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x238], eax
jge 0x1004d337
mov dword [ebp - 0x240], 1
jmp 0x1004d33e
and dword [ebp - 0x240], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2c]
cmp dword [ebp - 0x240], eax
jg 0x1004d35c
mov dword [ebp - 0x248], 1
jmp 0x1004d363
and dword [ebp - 0x248], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x248]
sub ecx, dword [ebp + eax - 0x2c]
mov dword [ebp - 0xb4], ecx
jmp 0x1004d13c
jmp 0x1004d0df
mov dword [ebp - 0x20], 0
jmp 0x1004d393
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 8
jg 0x1004d3fb
mov dword [ebp - 0x5e0], 0xfffffffa
push 0x29fb
push 0
push 0xef0
push 1
push 1
lea eax, [ebp - 0x20]
push eax
push 0x3cad
push 0x6686
lea eax, [ebp - 0x5e0]
push eax
call fcn.10046046
add esp, 0x24
mov byte [ebp - 0x9d], 0
lea eax, [ebp - 0x9d]
push eax
push 0x4301
push 1
push 0x5e7a
push 1
push 0xa0e
call fcn.10042127
add esp, 0x18
jmp 0x1004d38c
cmp dword [ebp - 0xec], 0
jne 0x1004d611
push 2
lea ecx, [ebp - 0x668]
call fcn.1000fa0b
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x250], 0xcfce2949
mov dword [ebp - 0x554], 9
lea eax, [ebp - 0x668]
push eax
lea eax, [ebp - 0xb8]
push eax
push 0x440
push 0x63fa
push 1
push 0
push 0x3c48
push 0x1ca
push 0x388c
call fcn.10047020
add esp, 0x24
mov dword [ebp - 0xb8], 0
jmp 0x1004d47c
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 1
jge 0x1004d498
mov eax, dword [ebp - 0xb8]
mov dword [ebp + eax*4 - 0x738], 0xf05d
jmp 0x1004d46f
push 1
lea eax, [ebp - 0x668]
push eax
push 0x4d14
push 0x4ff9
push 0x41d3
push 0x2e54
push 0x1bbe
push 0x420a
push 1
lea eax, [ebp - 0x250]
push eax
call fcn.10047206
add esp, 0x28
lea eax, [ebp - 0x668]
push eax
push 0x64b6
push 0x6207
push 1
push 0x1872
lea eax, [ebp - 0x250]
push eax
lea eax, [ebp - 0x554]
push eax
push 1
push 1
call fcn.10047368
add esp, 0x24
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x668]
call fcn.1000fa6d
mov dword [ebp - 0xbc], 9
mov dword [ebp - 0x564], 1
mov dword [ebp - 0xbc], 0xffffffff
jmp 0x1004d53e
mov eax, dword [ebp - 0xbc]
dec eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0xffffffef
jne 0x1004d603
push 2
lea ecx, [ebp - 0x6fc]
call fcn.1000fa0b
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x5e8], 0x8e64e6dc
mov dword [ebp - 0x638], 0xc12a7b09
mov dword [ebp - 0x55c], 0x421dd2eb
push 0
lea eax, [ebp - 0x820]
push eax
push 1
push 1
push 0x1a6d
lea eax, [ebp - 0x6fc]
push eax
push 0x268e
call fcn.1004f931
add esp, 0x1c
push 0x23c4
lea eax, [ebp - 0x638]
push eax
lea eax, [ebp - 0x55c]
push eax
lea eax, [ebp - 0x5e8]
push eax
lea eax, [ebp - 0x6fc]
push eax
push 1
push 1
push 1
lea eax, [ebp - 0xbc]
push eax
push 0x5139
push 0x50aa
push 0x5457
lea eax, [ebp - 0x564]
push eax
call fcn.10047637
add esp, 0x34
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6fc]
call fcn.1000fa6d
jmp 0x1004d531
mov eax, dword [ebp - 0x8c]
and dword [eax], 0
jmp 0x1004f305
mov dword [ebp - 0x258], 0x56ec
mov dword [ebp - 0x56c], 0x1000975c
cmp dword [ebp - 0x258], 0x57fd
jle 0x1004d6e3
and dword [ebp - 0x130], 0
jmp 0x1004d64b
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0x2e6c
jge 0x1004d6db
and dword [ebp - 0x158], 0
jmp 0x1004d671
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 0x765b
jge 0x1004d6d6
mov eax, dword [ebp - 0x130]
mov ecx, dword [ebp - 0x158]
sar eax, cl
cdq
mov dword [ebp - 0x614], eax
mov dword [ebp - 0x610], edx
push dword [ebp - 0x610]
push dword [ebp - 0x614]
lea ecx, [ebp - 0x8ec]
call fcn.1000b06a
pop ecx
pop ecx
mov dword [ebp - 0x624], eax
mov ecx, dword [ebp - 0x624]
call fcn.1000f793
push eax
call fcn.100598a3
pop ecx
lea ecx, [ebp - 0x8ec]
call fcn.1000f789
jmp 0x1004d664
jmp 0x1004d63e
push 0
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0x258], 0x5320
jge 0x1004d702
push dword [ebp - 0x56c]
call fcn.100598a3
pop ecx
jmp 0x1004d71e
or dword [ebp - 4], 0xffffffff
jmp 0x1004d728
mov dword [ebp - 0x58], 0xfffffff8
push 1
push 0x715b
lea eax, [ebp - 0x58]
push eax
push 0
call fcn.100443b7
add esp, 0x10
mov dword [ebp - 0x58], 4
jmp 0x1004d754
mov eax, dword [ebp - 0x58]
dec eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0xfffffff5
jl 0x1004d835
mov dword [ebp - 0xc4], 0x8748afa2
mov dword [ebp - 0x5a8], 0xc58bdfad
mov dword [ebp - 0xf0], 0
jmp 0x1004d78b
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 3
jge 0x1004d7a7
mov eax, dword [ebp - 0xf0]
mov dword [ebp + eax*4 - 0x878], 0xfffffffb
jmp 0x1004d77e
cmp dword [ebp - 0xc4], 0
jne 0x1004d7c2
cmp dword [ebp - 0xc4], 0
jne 0x1004d7c2
and dword [ebp - 0x260], 0
jmp 0x1004d7cc
mov dword [ebp - 0x260], 1
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x740], eax
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x268], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x268]
mov dword [ebp + eax - 0x878], ecx
mov eax, dword [ebp - 0x58]
imul eax, dword [ebp - 0x260]
add eax, dword [ebp - 0x58]
cmp dword [ebp - 0x268], eax
jl 0x1004d817
mov dword [ebp - 0x270], 1
jmp 0x1004d81e
and dword [ebp - 0x270], 0
mov eax, dword [ebp - 0xc4]
add eax, dword [ebp - 0x270]
mov dword [ebp - 0x5a8], eax
jmp 0x1004d74d
push 0x1ca6
lea eax, [ebp - 0x1b8]
push eax
push 0x6c89
lea eax, [ebp - 0x7b8]
push eax
push 0x6b99
lea eax, [ebp - 0x34]
push eax
push 1
push 1
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0xec]
push eax
call fcn.10042338
add esp, 0x28
mov dword [ebp - 0x184], 0xa122
mov dword [ebp - 0x278], 0x190d
mov dword [ebp - 0x574], 0x100097c0
cmp dword [ebp - 0x278], 0x1bd4
jle 0x1004d97c
and dword [ebp - 0x104], 0
jmp 0x1004d8b4
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0x385b
jge 0x1004d97c
and dword [ebp - 0xf4], 0
jmp 0x1004d8da
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0x1523
jge 0x1004d977
and dword [ebp - 0xfc], 0
jmp 0x1004d900
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0x20c1
jge 0x1004d972
and dword [ebp - 0x10c], 0
jmp 0x1004d922
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0x2c33
jge 0x1004d970
mov eax, dword [ebp - 0xf4]
imul eax, dword [ebp - 0xfc]
mov ecx, dword [ebp - 0x104]
sub ecx, eax
or ecx, dword [ebp - 0x10c]
mov eax, ecx
cdq
mov dword [ebp - 0x620], eax
mov dword [ebp - 0x61c], edx
push dword [ebp - 0x61c]
push dword [ebp - 0x620]
mov ecx, 0x1061a6b8
call fcn.1000f7b3
jmp 0x1004d915
jmp 0x1004d8f3
jmp 0x1004d8cd
jmp 0x1004d8a7
push 1
lea ecx, [ebp - 0x4b0]
call fcn.1000fa0b
mov dword [ebp - 4], 0x10
mov byte [ebp - 4], 0x11
cmp dword [ebp - 0x278], 0x168c
jge 0x1004d9b0
mov edx, dword [ebp - 0x574]
mov ecx, 0x1061a6b8
call fcn.10011dbf
jmp 0x1004d9cc
mov dword [ebp - 4], 0x10
jmp 0x1004d9dc
mov dword [ebp - 0x5b4], 0
mov dword [ebp - 0x57c], 0xd081
mov dword [ebp - 0x114], 1
mov dword [ebp - 0x584], 0
mov dword [ebp - 0x194], 0xf36a5b5c
mov dword [ebp - 0x1e0], 1
mov dword [ebp - 0x280], 0x69c93e32
push 1
lea ecx, [ebp - 0x4bc]
call fcn.1000fa0b
mov byte [ebp - 4], 0x13
mov dword [ebp - 0x288], 0x2c8cdab0
mov dword [ebp - 0x2c0], 0xdcfe
push 1
lea eax, [ebp - 0x5a4]
push eax
push 0x60cb
lea eax, [ebp - 0x4b0]
push eax
push 0x119f
push 0x1ae3
push 0x1cb3
push 1
push 0x3ae1
push 0x3064
push 0x514c
push 0
push 0x4433
call fcn.10050032
add esp, 0x34
push 0
lea eax, [ebp - 0x5a4]
push eax
push 0xf4c
lea eax, [ebp - 0x4bc]
push eax
call fcn.10050602
add esp, 0x10
push 1
push 0x3a3b
lea eax, [ebp - 0x184]
push eax
lea eax, [ebp - 0x194]
push eax
lea eax, [ebp - 0x57c]
push eax
push 0x6c12
lea eax, [ebp - 0x4b0]
push eax
lea eax, [ebp - 0x114]
push eax
lea eax, [ebp - 0x280]
push eax
lea eax, [ebp - 0x1e0]
push eax
lea eax, [ebp - 0x5b4]
push eax
push 1
push 0x6cab
push 1
lea eax, [ebp - 0x584]
push eax
call fcn.10047a5e
add esp, 0x3c
push 0
lea ecx, [ebp - 0x4bc]
call fcn.1000fa89
cmp dword [eax], 0
je 0x1004db2b
cmp dword [ebp - 0x194], 0
jne 0x1004db2b
mov dword [ebp - 0x208], 1
jmp 0x1004db32
and dword [ebp - 0x208], 0
imul eax, dword [ebp - 0x280], 0x8e12
mov dword [ebp - 0x288], eax
cmp dword [ebp - 0x288], 0
je 0x1004db69
push 0
lea ecx, [ebp - 0x4bc]
call fcn.1000fa89
cmp dword [eax], 0
je 0x1004db69
mov dword [ebp - 0x290], 1
jmp 0x1004db70
and dword [ebp - 0x290], 0
push 0
lea ecx, [ebp - 0x4b0]
call fcn.1000fa89
mov ecx, dword [ebp - 0x290]
cmp ecx, dword [eax]
jle 0x1004db93
mov dword [ebp - 0x298], 1
jmp 0x1004db9a
and dword [ebp - 0x298], 0
mov eax, dword [ebp - 0x114]
sub eax, dword [ebp - 0x298]
cmp eax, dword [ebp - 0x184]
je 0x1004dbba
mov dword [ebp - 0x2a0], 1
jmp 0x1004dbc1
and dword [ebp - 0x2a0], 0
mov eax, dword [ebp - 0x2c0]
cmp dword [ebp - 0x2a0], eax
jge 0x1004dbdb
mov dword [ebp - 0x2a8], 1
jmp 0x1004dbe2
and dword [ebp - 0x2a8], 0
mov eax, dword [ebp - 0x2a8]
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 4
jb 0x1004dc03
mov dword [ebp - 0x2b0], 1
jmp 0x1004dc0a
and dword [ebp - 0x2b0], 0
push 0
lea ecx, [ebp - 0x4b0]
call fcn.1000fa89
mov ecx, dword [ebp - 0x2b0]
cmp ecx, dword [eax]
je 0x1004dc2d
mov dword [ebp - 0x2b8], 1
jmp 0x1004dc34
and dword [ebp - 0x2b8], 0
push 0
lea ecx, [ebp - 0x4b0]
call fcn.1000fa89
mov ecx, dword [ebp - 0x2b8]
cmp ecx, dword [eax]
jl 0x1004dc57
mov dword [ebp - 0x2c8], 1
jmp 0x1004dc5e
and dword [ebp - 0x2c8], 0
mov eax, dword [ebp - 0x2c0]
cmp dword [ebp - 0x2c8], eax
jle 0x1004dc78
mov dword [ebp - 0x5bc], 1
jmp 0x1004dc7f
and dword [ebp - 0x5bc], 0
push 0
lea ecx, [ebp - 0x4bc]
call fcn.1000fa89
cmp dword [eax], 0
jne 0x1004dc98
cmp dword [ebp - 0x114], 0
mov esi, dword [ebp - 0x114]
push 0
lea ecx, [ebp - 0x4bc]
call fcn.1000fa89
mov eax, dword [eax]
add eax, esi
mov ecx, dword [ebp - 0x184]
sub ecx, dword [ebp - 0x208]
sub ecx, eax
mov dword [ebp - 0x194], ecx
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x4bc]
call fcn.1000fa6d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4b0]
call fcn.1000fa6d
push 0
lea eax, [ebp - 0xcc]
push eax
push 0x5d48
lea eax, [ebp - 0x19c]
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.10050ff6
add esp, 0x14
mov dword [ebp - 0x5c], 0x1f7e2799
mov dword [ebp - 0x6c], 0xe045dcef
mov dword [ebp - 0x1a4], 0xfffffff8
push 1
lea ecx, [ebp - 0x6c0]
call fcn.1000fa0b
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x11c], 0
jmp 0x1004dd47
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 1
jge 0x1004dd69
push dword [ebp - 0x11c]
lea ecx, [ebp - 0x6c0]
call fcn.1000fa89
mov dword [eax], 0x4e62b500
jmp 0x1004dd3a
mov dword [ebp - 0x5c], 0xffffffe2
jmp 0x1004dd79
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0xfffffff1
jne 0x1004e0f4
mov dword [ebp - 0x40], 0xe8b72fd4
mov dword [ebp - 0x64], 8
push 3
lea ecx, [ebp - 0x708]
call fcn.1000fa0b
mov byte [ebp - 4], 0x15
mov dword [ebp - 0x58c], 0x9482
mov dword [ebp - 0x124], 0
jmp 0x1004ddc5
mov eax, dword [ebp - 0x124]
inc eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 3
jge 0x1004dde4
push dword [ebp - 0x124]
lea ecx, [ebp - 0x708]
call fcn.1000fa89
and dword [eax], 0
jmp 0x1004ddb8
mov dword [ebp - 0x40], 0xffffffef
jmp 0x1004ddf4
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0xe
jg 0x1004de93
mov dword [ebp - 0x12c], 0xffffffff
mov byte [ebp - 0xa5], 0
movzx eax, byte [ebp - 0xa5]
test eax, eax
je 0x1004de46
push 0x5fe0
push 0x30e4
push 0x1469
push 1
push 0x4bd0
push 0x7156
push 1
push 0x26c4
push 1
call fcn.100424b8
add esp, 0x24
mov dword [ebp - 0x12c], 0
jmp 0x1004de5f
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0x13
jle 0x1004de8e
mov byte [ebp - 0x9c], 0
push 1
push 1
push 0x189e
lea eax, [ebp - 0x9c]
push eax
push 0x569f
call fcn.10047e7b
add esp, 0x14
jmp 0x1004de52
jmp 0x1004dded
mov eax, dword [ebp - 0x5c]
cmp eax, dword [ebp - 0x40]
jne 0x1004dea7
mov dword [ebp - 0x300], 1
jmp 0x1004deae
and dword [ebp - 0x300], 0
cmp dword [ebp - 0x40], 0
je 0x1004df69
cmp dword [ebp - 0x5c], 0x1a1f
jl 0x1004decd
mov dword [ebp - 0x2d8], 1
jmp 0x1004ded4
and dword [ebp - 0x2d8], 0
mov eax, dword [ebp - 0x2d8]
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
je 0x1004dee9
cmp dword [ebp - 0x64], 0
jne 0x1004def8
cmp dword [ebp - 0x6c], 0
jne 0x1004def8
and dword [ebp - 0x2e0], 0
jmp 0x1004df02
mov dword [ebp - 0x2e0], 1
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x2e0], eax
jne 0x1004df19
mov dword [ebp - 0x2e8], 1
jmp 0x1004df20
and dword [ebp - 0x2e8], 0
mov eax, dword [ebp - 0x2e8]
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 0xefe0
jge 0x1004df4a
cmp dword [ebp - 0x1a4], 0
jne 0x1004df4a
and dword [ebp - 0x1ac], 0
jmp 0x1004df54
mov dword [ebp - 0x1ac], 1
push 2
lea ecx, [ebp - 0x708]
call fcn.1000fa89
mov ecx, dword [ebp - 0x1ac]
mov dword [eax], ecx
mov eax, dword [ebp - 0x5c]
add eax, 0x88af
cmp dword [ebp - 0x40], eax
jne 0x1004df82
mov dword [ebp - 0x2f0], 1
jmp 0x1004df89
and dword [ebp - 0x2f0], 0
mov eax, dword [ebp - 0x64]
imul eax, dword [ebp - 0x2f0]
cmp eax, dword [ebp - 0x58c]
jle 0x1004dfa7
mov dword [ebp - 0x2f8], 1
jmp 0x1004dfae
and dword [ebp - 0x2f8], 0
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x2f8], eax
jl 0x1004dfc5
mov dword [ebp - 0x1b4], 1
jmp 0x1004dfcc
and dword [ebp - 0x1b4], 0
push 0
lea ecx, [ebp - 0x6c0]
call fcn.1000fa89
mov ecx, dword [ebp - 0x1b4]
mov dword [eax], ecx
mov eax, dword [ebp - 0x300]
cmp eax, dword [ebp - 0x1b4]
jne 0x1004e00f
push 1
push 0x7381
push 0x2403
push 1
push 0x45d8
call fcn.10047fb0
add esp, 0x14
jmp 0x1004e0e0
mov dword [ebp - 0x5cc], 0x1422
mov dword [ebp - 0x64], 0
jmp 0x1004e029
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0xb
jle 0x1004e0b8
mov dword [ebp - 0x5c4], 0x630971cf
mov dword [ebp - 0x308], 0
mov dword [ebp - 0x6c], 0x16
jmp 0x1004e057
mov eax, dword [ebp - 0x6c]
dec eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0xfffffffc
jge 0x1004e0b3
mov dword [ebp - 0x134], 0
jmp 0x1004e076
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 1
jge 0x1004e092
mov eax, dword [ebp - 0x134]
mov dword [ebp + eax*4 - 0x594], 0xe511904e
jmp 0x1004e069
mov eax, dword [ebp - 0x5c4]
mov dword [ebp - 0x308], eax
mov eax, dword [ebp - 0x308]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x594], eax
jmp 0x1004e050
jmp 0x1004e022
push 1
push 1
lea eax, [ebp - 0x40]
push eax
push 0x33c4
push 0x6b02
push 0x32d0
lea eax, [ebp - 0x5cc]
push eax
push 1
call fcn.10048034
add esp, 0x20
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x708]
call fcn.1000fa6d
jmp 0x1004dd72
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6c0]
call fcn.1000fa6d
push 1
push 1
push 0x3410
lea eax, [ebp - 0x4d8]
push eax
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.1004362f
add esp, 0x18
mov dword [ebp - 0x1bc], 0x2bbef7d6
mov dword [ebp - 0x1c4], 0xfffffff7
push 2
lea ecx, [ebp - 0x1f8]
call fcn.1000fa0b
mov dword [ebp - 4], 0x16
mov dword [ebp - 0x330], 1
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0x13c], 0
jmp 0x1004e17e
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 2
jge 0x1004e1a0
push dword [ebp - 0x13c]
lea ecx, [ebp - 0x1f8]
call fcn.1000fa89
mov dword [eax], 0xa831d26e
jmp 0x1004e171
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
or eax, 0xffffffff
je 0x1004e24a
push 1
lea ecx, [ebp - 0x1f8]
call fcn.1000fa89
push 1
lea ecx, [ebp - 0x1f8]
call fcn.1000fa89
mov eax, dword [eax]
sub eax, 0x73a4c924
imul esi, eax, 0
push 1
lea ecx, [ebp - 0x1f8]
call fcn.1000fa89
add esi, dword [eax]
push 1
lea ecx, [ebp - 0x1f8]
call fcn.1000fa89
sub esi, dword [eax]
push 1
lea ecx, [ebp - 0x1f8]
call fcn.1000fa89
imul esi, dword [eax]
push 1
lea ecx, [ebp - 0x1f8]
call fcn.1000fa89
add esi, dword [eax]
je 0x1004e22e
mov eax, 0xe495761b
test eax, eax
je 0x1004e22e
mov dword [ebp - 0x310], 1
jmp 0x1004e235
and dword [ebp - 0x310], 0
cmp dword [ebp - 0x310], 0
je 0x1004e24a
mov dword [ebp - 0x318], 1
jmp 0x1004e251
and dword [ebp - 0x318], 0
mov dword [ebp - 0x1c4], 0xffffffff
mov eax, dword [ebp - 0x1c4]
add eax, dword [ebp - 0x318]
cmp eax, 0xf825
jle 0x1004e27a
mov dword [ebp - 0x320], 1
jmp 0x1004e281
and dword [ebp - 0x320], 0
push 1
lea ecx, [ebp - 0x1f8]
call fcn.1000fa89
mov ecx, dword [ebp - 0x320]
imul ecx, dword [eax]
mov dword [ebp - 0x328], ecx
push 0
lea ecx, [ebp - 0x1f8]
call fcn.1000fa89
mov ecx, dword [ebp - 0x328]
mov dword [eax], ecx
mov eax, dword [ebp - 0x328]
mov dword [ebp - 0x330], eax
mov eax, dword [ebp - 0x330]
cmp eax, dword [ebp - 0xb0]
jge 0x1004e310
mov dword [ebp - 0x59c], 0x374fd522
push 0x1585
push 1
lea eax, [ebp - 0x59c]
push eax
lea eax, [ebp - 0xb0]
push eax
push 0x1585
push 0x2106
push 0x2004
push 1
lea eax, [ebp - 0x1bc]
push eax
call fcn.10048e4a
add esp, 0x24
jmp 0x1004e39a
mov dword [ebp - 0x5d4], 0xf37f
mov dword [ebp - 0xb0], 0xffffffeb
jmp 0x1004e333
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0xe
jle 0x1004e39a
mov dword [ebp - 0x4d4], 0x16709e14
push 0x2645
push 1
push 0x60e9
push 0x5b60
push 0x690c
push 1
push 1
push 0x72ca
push 0x264a
lea eax, [ebp - 0x5d4]
push eax
call fcn.10043758
add esp, 0x28
lea eax, [ebp - 0x4d4]
push eax
lea eax, [ebp - 0x1c4]
push eax
push 1
push 1
push 0xfd8
call fcn.10049172
add esp, 0x14
jmp 0x1004e326
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1f8]
call fcn.1000fa6d
push 1
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x4d8]
push eax
push 0x49cf
push 1
call fcn.1004933f
add esp, 0x14
mov dword [ebp - 0x4c], 3
mov dword [ebp - 0x4e0], 0
mov dword [ebp - 0x748], 0xf5c9b8db
mov dword [ebp - 0x81c], 0xfffffffa
mov dword [ebp - 0x750], 0xffffffff
mov dword [ebp - 0x7c0], 0xfddf34ff
mov dword [ebp - 0x758], 0x90d790f
mov dword [ebp - 0x834], 0x8faa83f
mov dword [ebp - 0x84c], 0xa1ee319
mov dword [ebp - 0x848], 0xa1ee319
mov dword [ebp - 0x844], 0xa1ee319
mov dword [ebp - 0x840], 0xa1ee319
mov dword [ebp - 0x144], 0
jmp 0x1004e453
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 4
jge 0x1004e46f
mov eax, dword [ebp - 0x144]
mov dword [ebp + eax*4 - 0x8a4], 0x9facd4a7
jmp 0x1004e446
mov dword [ebp - 0x4c], 0
jmp 0x1004e47f
mov eax, dword [ebp - 0x4c]
dec eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0xffffffe7
je 0x1004e663
mov dword [ebp - 0x14c], 0xffffffff
mov dword [ebp - 0x74], 7
mov dword [ebp - 0x760], 0xfffffff9
mov dword [ebp - 0x7d0], 5
mov dword [ebp - 0x768], 0xffffffff
mov dword [ebp - 0x14c], 0
jmp 0x1004e4d1
mov eax, dword [ebp - 0x14c]
dec eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 0xffffffe6
je 0x1004e61d
mov dword [ebp - 0x1cc], 0xffffffff
mov dword [ebp - 0x4f0], 0xa73d2d67
push 1
push 0
lea eax, [ebp - 0x4e0]
push eax
push 0x2de6
call fcn.10050f74
add esp, 0x10
cmp dword [ebp - 0x74], 0xffff
jb 0x1004e51f
mov dword [ebp - 0x338], 1
jmp 0x1004e526
and dword [ebp - 0x338], 0
mov eax, dword [ebp - 0x1cc]
cmp eax, dword [ebp - 0x338]
jle 0x1004e540
mov dword [ebp - 0x340], 1
jmp 0x1004e547
and dword [ebp - 0x340], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x340], eax
jg 0x1004e55e
mov dword [ebp - 0x348], 1
jmp 0x1004e565
and dword [ebp - 0x348], 0
cmp dword [ebp - 0x348], 0x51ae9a07
jg 0x1004e586
mov eax, 0xd20b
test eax, eax
je 0x1004e586
mov dword [ebp - 0x350], 1
jmp 0x1004e58d
and dword [ebp - 0x350], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x350], eax
jle 0x1004e5a4
mov dword [ebp - 0x4e8], 1
jmp 0x1004e5ab
and dword [ebp - 0x4e8], 0
mov eax, dword [ebp - 0x4c]
cmp eax, dword [ebp - 0x4f0]
je 0x1004e5c2
mov dword [ebp - 0x358], 1
jmp 0x1004e5c9
and dword [ebp - 0x358], 0
mov eax, dword [ebp - 0x1cc]
cmp dword [ebp - 0x358], eax
jg 0x1004e5e3
mov dword [ebp - 0x360], 1
jmp 0x1004e5ea
and dword [ebp - 0x360], 0
mov eax, dword [ebp - 0x360]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x824], eax
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x770], eax
mov eax, dword [ebp - 0x1cc]
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x8a4], eax
jmp 0x1004e4c4
mov dword [ebp - 0x74], 3
jmp 0x1004e62d
mov eax, dword [ebp - 0x74]
dec eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0
jl 0x1004e65e
mov dword [ebp - 0x4f8], 0
lea eax, [ebp - 0x4f8]
push eax
push 0x3bbc
push 1
push 0x2438
push 1
push 1
call fcn.100494d1
add esp, 0x18
jmp 0x1004e626
jmp 0x1004e478
push dword [ebp - 0x34]
call fcn.10040cac
pop ecx
test eax, eax
jne 0x1004e67e
mov eax, dword [ebp - 0x8c]
and dword [eax], 0
jmp 0x1004f305
mov dword [ebp - 0x510], 9
mov dword [ebp - 0x500], 0
mov dword [ebp - 0x508], 0x58382bdb
mov dword [ebp - 0x518], 0xfffffff6
push 1
lea ecx, [ebp - 0x6f0]
call fcn.1000fa0b
mov dword [ebp - 4], 0x17
mov dword [ebp - 0x154], 0
jmp 0x1004e6d3
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 1
jge 0x1004e6f5
push dword [ebp - 0x154]
lea ecx, [ebp - 0x6f0]
call fcn.1000fa89
mov dword [eax], 0x859bb7a1
jmp 0x1004e6c6
lea eax, [ebp - 0x500]
push eax
lea eax, [ebp - 0x508]
push eax
push 0x15fc
lea eax, [ebp - 0x510]
push eax
push 0
lea eax, [ebp - 0x6f0]
push eax
push 1
lea eax, [ebp - 0x518]
push eax
call fcn.1004ac1f
add esp, 0x20
mov byte [ebp - 0x90], 0
push 0x1e94
push 0x3d0
lea eax, [ebp - 0x90]
push eax
push 1
push 1
push 0x7d4f
push 0x19a0
push 1
call fcn.100495b1
add esp, 0x20
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6f0]
call fcn.1000fa6d
push 1
lea eax, [ebp - 0x34]
push eax
push 0x4e60
push 0x7a21
push 0x14f3
push 0x5066
push 0x1f4b
push 0x1691
push 0x1ceb
push 0x7b35
push 0x295e
push 0
push 0x1e60
push 1
push 0x4d49
call fcn.10047a5e
add esp, 0x3c
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
cmp dword [eax + 0x28], 0
je 0x1004f2ab
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xec]
add ecx, dword [eax + 0x28]
mov dword [ebp - 0x400], ecx
mov dword [ebp - 0x7c], 0xfffffff8
push 1
push 0x7cd5
push 0x5b9c
lea eax, [ebp - 0x7c]
push eax
push 0
push 0xefb
call fcn.10047152
add esp, 0x18
mov dword [ebp - 0x7c], 4
jmp 0x1004e80a
mov eax, dword [ebp - 0x7c]
dec eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0xfffffff5
jl 0x1004e8eb
mov dword [ebp - 0xd4], 0x8748afa2
mov dword [ebp - 0x520], 0xc58bdfad
mov dword [ebp - 0x164], 0
jmp 0x1004e841
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 3
jge 0x1004e85d
mov eax, dword [ebp - 0x164]
mov dword [ebp + eax*4 - 0x884], 0xfffffffb
jmp 0x1004e834
cmp dword [ebp - 0xd4], 0
jne 0x1004e878
cmp dword [ebp - 0xd4], 0
jne 0x1004e878
and dword [ebp - 0x368], 0
jmp 0x1004e882
mov dword [ebp - 0x368], 1
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0x7e0], eax
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0x370], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x370]
mov dword [ebp + eax - 0x884], ecx
mov eax, dword [ebp - 0x7c]
imul eax, dword [ebp - 0x368]
add eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x370], eax
jl 0x1004e8cd
mov dword [ebp - 0x378], 1
jmp 0x1004e8d4
and dword [ebp - 0x378], 0
mov eax, dword [ebp - 0xd4]
add eax, dword [ebp - 0x378]
mov dword [ebp - 0x520], eax
jmp 0x1004e803
cmp dword [ebp - 0x400], 0
jne 0x1004ed8a
mov dword [ebp - 0x84], 0xffffffff
push 2
lea ecx, [ebp - 0x69c]
call fcn.1000fa0b
mov dword [ebp - 4], 0x18
mov dword [ebp - 0x530], 0xd081
mov dword [ebp - 0xdc], 0
jmp 0x1004e939
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 1
jge 0x1004e955
mov eax, dword [ebp - 0xdc]
mov dword [ebp + eax*4 - 0x528], 0xfffffffd
jmp 0x1004e92c
push 0x5cc6
push 1
lea eax, [ebp - 0x69c]
push eax
push 0x1f6d
lea eax, [ebp - 0xdc]
push eax
push 1
call fcn.100499d1
add esp, 0x18
mov byte [ebp - 0x9a], 0
push 0x68ce
push 1
push 0x3cd9
push 1
push 0x2a77
lea eax, [ebp - 0x9a]
push eax
push 0x376c
call fcn.1004aa75
add esp, 0x1c
cmp dword [ebp - 0x84], 0
je 0x1004e9ea
imul eax, dword [ebp - 0x84], 0xa520
cmp eax, dword [ebp - 0x84]
jle 0x1004e9ce
mov dword [ebp - 0x380], 1
jmp 0x1004e9d5
and dword [ebp - 0x380], 0
cmp dword [ebp - 0x380], 0
je 0x1004e9ea
mov dword [ebp - 0x388], 1
jmp 0x1004e9f1
and dword [ebp - 0x388], 0
push 1
lea ecx, [ebp - 0x69c]
call fcn.1000fa89
mov ecx, dword [ebp - 0x388]
mov dword [eax], ecx
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x390], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x390]
mov dword [ebp + eax - 0x528], ecx
mov eax, dword [ebp - 0x390]
add eax, 6
cmp eax, 0xbdeb
jg 0x1004ea4a
mov eax, 0x22a5bc42
test eax, eax
je 0x1004ea4a
mov dword [ebp - 0x398], 1
jmp 0x1004ea51
and dword [ebp - 0x398], 0
mov eax, dword [ebp - 0x84]
cmp eax, dword [ebp - 0x398]
jle 0x1004ea6b
mov dword [ebp - 0x3a0], 1
jmp 0x1004ea72
and dword [ebp - 0x3a0], 0
mov eax, dword [ebp - 0x84]
add eax, dword [ebp - 0x3a0]
jne 0x1004ea92
mov eax, 0xc9105fa2
test eax, eax
jne 0x1004ea92
and dword [ebp - 0x3a8], 0
jmp 0x1004ea9c
mov dword [ebp - 0x3a8], 1
cmp dword [ebp - 0x3a8], 0
jne 0x1004eab1
mov dword [ebp - 0x3b0], 1
jmp 0x1004eab8
and dword [ebp - 0x3b0], 0
mov eax, dword [ebp - 0x84]
imul eax, dword [ebp - 0x3b0]
cmp eax, 0xb719d872
je 0x1004ead8
mov dword [ebp - 0x3b8], 1
jmp 0x1004eadf
and dword [ebp - 0x3b8], 0
mov eax, dword [ebp - 0x3b8]
mov dword [ebp - 0x530], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x69c]
call fcn.1000fa6d
mov dword [ebp - 0x568], 0xf07b4bc6
mov dword [ebp - 0x778], 0xfc3938dd
mov dword [ebp - 0x850], 0x74006310
mov dword [ebp - 0x3d0], 1
push 3
lea ecx, [ebp - 0x6a8]
call fcn.1000fa0b
mov dword [ebp - 4], 0x19
mov dword [ebp - 0x558], 0xf67d50f8
mov dword [ebp - 0x780], 0xe229edca
mov dword [ebp - 0x578], 3
mov dword [ebp - 0x550], 0x4dc41fd9
mov dword [ebp - 0x538], 0x515466bc
mov dword [ebp - 0x540], 4
mov dword [ebp - 0x548], 0xfffffffc
mov dword [ebp - 0x7f0], 0xffffffff
mov dword [ebp - 0x1dc], 0x3b0cf5aa
mov dword [ebp - 0x1d4], 0x2f5a260d
mov dword [ebp - 0x570], 0xfd57
push 1
lea eax, [ebp - 0x6a8]
push eax
push 0
lea eax, [ebp - 0xe4]
push eax
push 0x2a0b
call fcn.1004f5f5
add esp, 0x14
mov dword [ebp - 0xe4], 0
jmp 0x1004ebdc
cmp dword [ebp - 0xe4], 2
jge 0x1004ebf8
mov eax, dword [ebp - 0xe4]
mov dword [ebp + eax*4 - 0x724], 0x816f93bd
jmp 0x1004ebcf
imul eax, dword [ebp - 0x538], 0xfffa
test eax, eax
je 0x1004ec24
push 0
push 1
push 0xdeadbeef
call dword [ebp - 0x400]
mov dword [ebp - 0x590], eax
push 1
lea ecx, [ebp - 0x80c]
call fcn.1000fa0b
mov dword [ebp - 4], 0x1a
mov dword [ebp - 0x16c], 0
jmp 0x1004edcc
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 1
jge 0x1004edee
push dword [ebp - 0x16c]
lea ecx, [ebp - 0x80c]
call fcn.1000fa89
mov dword [eax], 0x75dc
jmp 0x1004edbf
push 0x3965
push 1
push 0x14
push 0
push 0x6861
call fcn.1004b194
add esp, 0x14
mov dword [ebp - 0x408], 0x64da
mov dword [ebp - 0x580], 0x10009800
cmp dword [ebp - 0x408], 0x6623
jle 0x1004eeaf
and dword [ebp - 0x174], 0
jmp 0x1004ee40
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 0x34aa
jge 0x1004eea3
and dword [ebp - 0x17c], 0
jmp 0x1004ee62
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 0x6034
jge 0x1004eea1
mov eax, dword [ebp - 0x174]
mov ecx, dword [ebp - 0x17c]
shl eax, cl
cdq
mov dword [ebp - 0x62c], eax
mov dword [ebp - 0x628], edx
push dword [ebp - 0x628]
push dword [ebp - 0x62c]
mov ecx, 0x1061a6b8
call fcn.1000f7b3
jmp 0x1004ee55
jmp 0x1004ee33
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleExW]
mov byte [ebp - 0x8e], 0
push 0
lea eax, [ebp - 0x8e]
push eax
call fcn.10050548
pop ecx
pop ecx
mov byte [ebp - 4], 0x1b
cmp dword [ebp - 0x408], 0x6316
jge 0x1004eee6
mov edx, dword [ebp - 0x580]
mov ecx, 0x1061a6b8
call fcn.10011dbf
jmp 0x1004ef73
mov dword [ebp - 4], 0x1a
jmp 0x1004ef83
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x80c]
call fcn.1000fa6d
cmp dword [ebp - 0x590], 0
jne 0x1004efa9
mov eax, dword [ebp - 0x8c]
and dword [eax], 0
jmp 0x1004f305
mov dword [ebp - 0x18], 0xffffffff
push 1
lea ecx, [ebp - 0x6b4]
call fcn.1000fa0b
mov dword [ebp - 4], 0x1d
mov dword [ebp - 0x1ec], 0xfffffffc
mov dword [ebp - 0x448], 0
mov dword [ebp - 0x458], 0
mov dword [ebp - 0x82c], 9
mov dword [ebp - 0x44], 0
jmp 0x1004effc
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 1
jge 0x1004f018
push dword [ebp - 0x44]
lea ecx, [ebp - 0x6b4]
call fcn.1000fa89
mov dword [eax], 0xfffffff6
jmp 0x1004eff5
mov dword [ebp - 0x44], 0
jmp 0x1004f028
cmp dword [ebp - 0x44], 1
jge 0x1004f03e
mov eax, dword [ebp - 0x34]
cmp dword [eax + 0x10], 0
je 0x1004f2bf
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x494], eax
jmp 0x1004f2c6
and dword [ebp - 0x494], 0
mov eax, dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x494]
mov dword [eax], ecx
jmp 0x1004f305
jmp 0x1004f305
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x5a0], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x598], eax
push dword [ebp - 0x598]
push 0
push dword [ebp - 0x5a0]
push 0x3909
call fcn.10050a30
add esp, 0x10
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret