Function at 0x1004de35
Capabilities:
Contain obfuscated stackstrings
Enumerate pe sections
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1008db30
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xd70
push esi
and dword [ebp - 0x1c], 0
movzx eax, byte [ebp + 0xc]
test eax, eax
je 0x1005351e
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x38], 0
mov dword [ebp - 0xdc], 7
mov dword [ebp - 0x988], 0xcfbce008
mov dword [ebp - 0x984], 0xcfbce008
mov dword [ebp - 0x980], 0xcfbce008
mov dword [ebp - 0x97c], 0xcfbce008
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0xa40], eax
imul eax, dword [ebp - 0x38], 0
test eax, eax
je 0x1004dec6
cmp dword [ebp - 0x38], 0
je 0x1004dec6
mov dword [ebp - 0x524], 1
jmp 0x1004decd
and dword [ebp - 0x524], 0
mov eax, dword [ebp - 0x38]
imul eax, dword [ebp - 0x524]
cmp dword [ebp - 0x38], eax
je 0x1004dee8
mov dword [ebp - 0x634], 1
jmp 0x1004deef
and dword [ebp - 0x634], 0
cmp dword [ebp - 0x634], 0xffffffff
ja 0x1004df04
mov dword [ebp - 0x63c], 1
jmp 0x1004df0b
and dword [ebp - 0x63c], 0
mov eax, dword [ebp - 0x38]
imul eax, dword [ebp - 0x63c]
test eax, eax
je 0x1004df2b
cmp dword [ebp - 0x38], 0
je 0x1004df2b
mov dword [ebp - 0x644], 1
jmp 0x1004df32
and dword [ebp - 0x644], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x644], eax
jl 0x1004df49
mov dword [ebp - 0x678], 1
jmp 0x1004df50
and dword [ebp - 0x678], 0
mov eax, dword [ebp - 0x678]
sub eax, 0x45c6b9bd
mov dword [ebp - 0xdc], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xdc]
mov dword [ebp + eax - 0x988], ecx
cmp dword [ebp - 0x38], 0
je 0x1004dfc9
mov dword [ebp - 0x38], 4
jmp 0x1004df8a
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0x2a
jle 0x1004dfc7
mov dword [ebp - 0xdc], 6
jmp 0x1004dfa9
mov eax, dword [ebp - 0xdc]
dec eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0xffffffe8
jl 0x1004dfc5
mov byte [ebp - 0x72], 0
lea eax, [ebp - 0x72]
push eax
push 1
call fcn.1004c4a5
pop ecx
pop ecx
jmp 0x1004df9c
jmp 0x1004df83
jmp 0x1004dfdd
mov byte [ebp - 0x71], 0
movzx eax, byte [ebp - 0x71]
test eax, eax
je 0x1004dfdd
push 0
call fcn.1004d720
pop ecx
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x67c], eax
push 1
lea ecx, [ebp - 0x7fc]
call fcn.100191fb
and dword [ebp - 4], 0
mov dword [ebp - 0xa00], 1
mov dword [ebp - 0xa08], 0xe2bfbd3a
mov dword [ebp - 0xa10], 0xffffffff
mov dword [ebp - 0xa18], 0xa277ebd0
push 0x68ee
push 0
lea eax, [ebp - 0xfc]
push eax
push 0x25a1
push 0x72a9
lea eax, [ebp - 0x7fc]
push eax
call fcn.1004cdce
add esp, 0x18
mov dword [ebp - 0xfc], 0
jmp 0x1004e05f
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 1
jge 0x1004e07b
mov eax, dword [ebp - 0xfc]
mov dword [ebp + eax*4 - 0x66c], 4
jmp 0x1004e052
push 0
lea ecx, [ebp - 0x7fc]
call fcn.10019299
and dword [eax], 0
jmp 0x1004e0b1
push 0
lea ecx, [ebp - 0x7fc]
call fcn.10019299
mov dword [ebp - 0x680], eax
mov eax, dword [ebp - 0x680]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x680]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x7fc]
call fcn.10019299
cmp dword [eax], 0xffffffe5
jl 0x1004e1cd
mov dword [ebp - 0x154], 0xa2961c0f
mov dword [ebp - 0xa70], 0xa147b80b
mov dword [ebp - 0xa78], 3
mov dword [ebp - 0xa80], 0
push 4
lea ecx, [ebp - 0xb40]
call fcn.100191fb
mov byte [ebp - 4], 1
mov dword [ebp - 0xf8], 0
jmp 0x1004e119
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 3
jge 0x1004e135
mov eax, dword [ebp - 0xf8]
mov dword [ebp + eax*4 - 0xd58], 0x6ff5
jmp 0x1004e10c
push 0x158a
lea eax, [ebp - 0xb40]
push eax
push 0x7821
lea eax, [ebp - 0xf8]
push eax
push 0
push 0x648f
call fcn.1004dcbc
add esp, 0x18
mov dword [ebp - 0x154], 2
jmp 0x1004e175
mov eax, dword [ebp - 0x154]
dec eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 0
jl 0x1004e1b9
mov dword [ebp - 0xa88], 5
mov dword [ebp - 0xa90], 0xfffffffa
mov dword [ebp - 0xa98], 0x6df7e441
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x66c]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x66c], eax
jmp 0x1004e168
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xb40]
call fcn.1001927d
jmp 0x1004e08d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7fc]
call fcn.1001927d
mov eax, dword [ebp - 0x67c]
movzx eax, word [eax]
cmp eax, 0x5a4d
je 0x1004e1f1
jmp 0x100536e6
mov dword [ebp - 0xaa0], 0xfffffffd
mov dword [ebp - 0xaa8], 0xfffffff7
mov dword [ebp - 0xab0], 0xa18885c6
mov dword [ebp - 0xab8], 0
push 1
lea ecx, [ebp - 0xb50]
call fcn.100191fb
mov dword [ebp - 4], 2
mov dword [ebp - 0xac0], 0
mov dword [ebp - 0xac8], 1
mov dword [ebp - 0xad0], 0xfffffffa
mov dword [ebp - 0xad8], 0
mov dword [ebp - 0xae0], 0xffffffff
mov dword [ebp - 0xae8], 1
mov dword [ebp - 0x760], 1
mov dword [ebp - 0x1cc], 0
jmp 0x1004e28c
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 1
jge 0x1004e2ae
push dword [ebp - 0x1cc]
lea ecx, [ebp - 0xb50]
call fcn.10019299
mov dword [eax], 0xfffffffb
jmp 0x1004e27f
push 0
lea eax, [ebp - 0x760]
push eax
push 0x18a6
call fcn.1004d9ff
add esp, 0xc
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb50]
call fcn.1001927d
mov eax, dword [ebp - 0x67c]
mov ecx, dword [ebp - 0x2c]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0x78], ecx
mov dword [ebp - 0xe8], 3
mov dword [ebp - 0x15c], 0
jmp 0x1004e305
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 3
jge 0x1004e321
mov eax, dword [ebp - 0x15c]
mov dword [ebp + eax*4 - 0xb60], 0
jmp 0x1004e2f8
mov dword [ebp - 0xe8], 0
jmp 0x1004e33a
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 2
jg 0x1004e381
mov dword [ebp - 0x794], 0xeac45307
mov eax, dword [ebp - 0xe8]
mov eax, dword [ebp + eax*4 - 0xb60]
mov dword [ebp - 0x4f0], eax
mov eax, dword [ebp - 0xe8]
mov ecx, dword [ebp - 0x4f0]
mov dword [ebp + eax*4 - 0xb60], ecx
mov eax, dword [ebp - 0x4f0]
mov dword [ebp - 0x794], eax
jmp 0x1004e32d
mov byte [ebp - 0x73], 0
push 1
lea eax, [ebp - 0x73]
push eax
push 0x97b
push 0xb67
call fcn.1004c4ff
add esp, 0x10
mov eax, dword [ebp - 0x78]
cmp dword [eax], 0x4550
je 0x1004e3ad
jmp 0x100536e6
mov dword [ebp - 0xbc], 0xdce9
mov dword [ebp - 0x62c], 1
push 0
lea eax, [ebp - 0x62c]
push eax
push 0x4271
push 0x2c20
lea eax, [ebp - 0xbc]
push eax
call fcn.1004cc4a
add esp, 0x14
mov dword [ebp - 0xbc], 0
jmp 0x1004e3fc
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0x25
je 0x1004e47f
mov dword [ebp - 0x79c], 0x449e
mov dword [ebp - 0x7a4], 0
mov dword [ebp - 0x7ac], 7
mov dword [ebp - 0x7b4], 0xfffffff6
push 0x77a3
lea eax, [ebp - 0x62c]
push eax
push 0
push 0x23e5
push 0x4558
lea eax, [ebp - 0x79c]
push eax
lea eax, [ebp - 0xbc]
push eax
lea eax, [ebp - 0x7a4]
push eax
push 0x2d20
lea eax, [ebp - 0x7ac]
push eax
lea eax, [ebp - 0x7b4]
push eax
push 0x61c1
call fcn.1004da41
add esp, 0x30
jmp 0x1004e3ef
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x78]
lea eax, [ecx + eax + 0x78]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
cmp dword [eax + 4], 0
jne 0x1004e49d
jmp 0x100536e6
and dword [ebp - 0x30], 0
mov dword [ebp - 0xd4], 7
mov dword [ebp - 0x320], 0xda8ed40a
push 2
lea ecx, [ebp - 0x690]
call fcn.100191fb
mov dword [ebp - 4], 3
mov dword [ebp - 0x7bc], 7
mov dword [ebp - 0x6c0], 0xf213ed4
mov dword [ebp - 0x6bc], 0xf213ed4
mov dword [ebp - 0x6b8], 0xf213ed4
mov dword [ebp - 0x6b4], 0xf213ed4
push 4
lea ecx, [ebp - 0x954]
call fcn.100191fb
mov byte [ebp - 4], 4
push 3
lea ecx, [ebp - 0x930]
call fcn.100191fb
mov byte [ebp - 4], 5
mov dword [ebp - 0x2b4], 0x75d1b300
mov dword [ebp - 0x10], 0
jmp 0x1004e537
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x1004e54d
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x2fc], 0x44cf
jmp 0x1004e530
mov dword [ebp - 0x10], 0
jmp 0x1004e55d
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x1004e579
push dword [ebp - 0x10]
lea ecx, [ebp - 0x690]
call fcn.10019299
mov dword [eax], 0xfffffff6
jmp 0x1004e556
mov dword [ebp - 0x10], 0
jmp 0x1004e589
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 1
jge 0x1004e59f
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x500], 0x255d5800
jmp 0x1004e582
mov dword [ebp - 0x10], 0
jmp 0x1004e5af
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 4
jge 0x1004e5cb
push dword [ebp - 0x10]
lea ecx, [ebp - 0x954]
call fcn.10019299
mov dword [eax], 0x212aeaf
jmp 0x1004e5a8
mov dword [ebp - 0x10], 0
jmp 0x1004e5db
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x1004e5f7
push dword [ebp - 0x10]
lea ecx, [ebp - 0x930]
call fcn.10019299
mov dword [eax], 1
jmp 0x1004e5d4
mov eax, 0xa6c9cd49
test eax, eax
je 0x1004e61c
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2fc], 0
je 0x1004e61c
mov dword [ebp - 0x340], 1
jmp 0x1004e623
and dword [ebp - 0x340], 0
mov eax, 0xe012d2c8
sub eax, dword [ebp - 0xd4]
cmp eax, dword [ebp - 0x340]
jge 0x1004e642
mov dword [ebp - 0x348], 1
jmp 0x1004e649
and dword [ebp - 0x348], 0
cmp dword [ebp - 0xd4], 0xfffffff9
jb 0x1004e65e
mov dword [ebp - 0x638], 1
jmp 0x1004e665
and dword [ebp - 0x638], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2fc]
cmp dword [ebp - 0x638], eax
jl 0x1004e686
mov dword [ebp - 0x2ac], 1
jmp 0x1004e68d
and dword [ebp - 0x2ac], 0
mov eax, dword [ebp - 0x348]
mov dword [ebp - 0x320], eax
push 1
lea ecx, [ebp - 0x690]
call fcn.10019299
mov ecx, dword [ebp - 0x2ac]
mov dword [eax], ecx
mov eax, dword [ebp - 0x2ac]
sub eax, 3
cmp dword [ebp - 0x320], eax
jl 0x1004e6cb
mov dword [ebp - 0x4f8], 1
jmp 0x1004e6d2
and dword [ebp - 0x4f8], 0
mov eax, dword [ebp - 0x4f8]
sub eax, dword [ebp - 0xd4]
cmp eax, 0x164
jg 0x1004e6f1
mov dword [ebp - 0x350], 1
jmp 0x1004e6f8
and dword [ebp - 0x350], 0
mov eax, dword [ebp - 0xd4]
cmp dword [ebp - 0x350], eax
jge 0x1004e712
mov dword [ebp - 0x5d0], 1
jmp 0x1004e719
and dword [ebp - 0x5d0], 0
cmp dword [ebp - 0x5d0], 0x47f5
jge 0x1004e731
mov dword [ebp - 0x310], 1
jmp 0x1004e738
and dword [ebp - 0x310], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x310]
mov dword [ebp + eax - 0x500], ecx
mov eax, dword [ebp - 0xd4]
imul eax, dword [ebp - 0x310]
mov dword [ebp - 0x7bc], eax
push 1
lea ecx, [ebp - 0x690]
call fcn.10019299
xor eax, eax
imul eax, eax, 0xe10a
push 4
pop ecx
shl ecx, 0
add eax, dword [ebp + ecx - 0x2fc]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x2fc]
jge 0x1004e79b
mov dword [ebp - 0x358], 1
jmp 0x1004e7a2
and dword [ebp - 0x358], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x358]
mov dword [ebp + eax - 0x6c0], ecx
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x2fc]
cmp dword [ebp + eax - 0x500], ecx
jge 0x1004e7dd
mov dword [ebp - 0x5d8], 1
jmp 0x1004e7e4
and dword [ebp - 0x5d8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x6c0]
mov dword [ebp - 0xaf0], eax
push 4
pop eax
imul eax, eax, 0
imul esi, dword [ebp + eax - 0x2fc], 0
imul esi, dword [ebp - 0xd4]
push 2
lea ecx, [ebp - 0x954]
call fcn.10019299
add esi, dword [eax]
push 4
pop eax
shl eax, 0
cmp esi, dword [ebp + eax - 0x2fc]
jl 0x1004e836
mov dword [ebp - 0x324], 1
jmp 0x1004e83d
and dword [ebp - 0x324], 0
push 1
lea ecx, [ebp - 0x930]
call fcn.10019299
mov ecx, dword [ebp - 0x324]
mov dword [eax], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6c0]
imul eax, dword [ebp - 0x324]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x6c0]
jle 0x1004e880
mov dword [ebp - 0x360], 1
jmp 0x1004e887
and dword [ebp - 0x360], 0
cmp dword [ebp - 0x360], 0xfffffff9
jne 0x1004e89c
mov dword [ebp - 0x64c], 1
jmp 0x1004e8a3
and dword [ebp - 0x64c], 0
push 0
lea ecx, [ebp - 0x690]
call fcn.10019299
mov ecx, dword [ebp - 0x64c]
sub ecx, dword [eax]
jne 0x1004e8c6
mov dword [ebp - 0x368], 1
jmp 0x1004e8cd
and dword [ebp - 0x368], 0
mov esi, dword [ebp - 0x2b4]
add esi, dword [ebp - 0x368]
imul esi, dword [ebp - 0x2b4]
push 1
lea ecx, [ebp - 0x690]
call fcn.10019299
imul esi, dword [eax]
push 1
lea ecx, [ebp - 0x690]
call fcn.10019299
cmp esi, dword [eax]
jge 0x1004e90d
mov dword [ebp - 0x508], 1
jmp 0x1004e914
and dword [ebp - 0x508], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6c0]
cmp dword [ebp - 0x508], eax
jl 0x1004e935
mov dword [ebp - 0x370], 1
jmp 0x1004e93c
and dword [ebp - 0x370], 0
mov eax, dword [ebp - 0x320]
mov ecx, dword [ebp - 0x2b4]
add ecx, dword [ebp - 0x370]
add eax, ecx
cmp eax, 0xfffffff6
je 0x1004e961
mov dword [ebp - 0x378], 1
jmp 0x1004e968
and dword [ebp - 0x378], 0
mov eax, dword [ebp - 0x5d8]
cmp eax, dword [ebp - 0x378]
jge 0x1004e982
mov dword [ebp - 0x510], 1
jmp 0x1004e989
and dword [ebp - 0x510], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x510]
mov dword [ebp + eax - 0x6c0], ecx
push 1
lea ecx, [ebp - 0x690]
call fcn.10019299
mov dword [eax], 0x7941993e
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x930]
call fcn.1001927d
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x954]
call fcn.1001927d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x690]
call fcn.1001927d
mov eax, dword [ebp - 0x78]
movzx eax, word [eax + 0x14]
mov ecx, dword [ebp - 0x78]
lea eax, [ecx + eax + 0x18]
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x164], 0x8bbca631
mov dword [ebp - 0xaf8], 0xd9e2a8d3
push 3
lea ecx, [ebp - 0xb80]
call fcn.100191fb
mov dword [ebp - 4], 6
mov dword [ebp - 0x1d8], 0
jmp 0x1004ea31
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 3
jge 0x1004ea53
push dword [ebp - 0x1d8]
lea ecx, [ebp - 0xb80]
call fcn.10019299
mov dword [eax], 0x8a527335
jmp 0x1004ea24
mov dword [ebp - 0x164], 0
jmp 0x1004ea6c
mov eax, dword [ebp - 0x164]
dec eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 0xffffffef
jle 0x1004ebdf
mov dword [ebp - 0x380], 0x77904128
mov dword [ebp - 0x1e0], 0
jmp 0x1004ea9c
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 4
jge 0x1004eab8
mov eax, dword [ebp - 0x1e0]
mov dword [ebp + eax*4 - 0x998], 0xfffffff6
jmp 0x1004ea8f
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x998], 0
jmp 0x1004eae6
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x998]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x998], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x998], 0xc
je 0x1004ebcd
push 3
lea ecx, [ebp - 0xb70]
call fcn.100191fb
mov byte [ebp - 4], 7
mov dword [ebp - 0x1e8], 0x68044455
mov dword [ebp - 0x16c], 0
jmp 0x1004eb2e
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 3
jge 0x1004eb50
push dword [ebp - 0x16c]
lea ecx, [ebp - 0xb70]
call fcn.10019299
mov dword [eax], 1
jmp 0x1004eb21
mov dword [ebp - 0x1e8], 0
jmp 0x1004eb69
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 2
jg 0x1004ebb9
mov byte [ebp - 0xaa], 0
push 0x41af
push 0x65f0
lea eax, [ebp - 0xaa]
push eax
push 1
call fcn.1004c577
add esp, 0x10
push 0x1d3a
push 0x2f69
push 0
push 0x7f1c
push 0x372f
push 0xc7b
call fcn.1004cbc6
add esp, 0x18
jmp 0x1004eb5c
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xb70]
call fcn.1001927d
jmp 0x1004eacb
mov eax, dword [ebp - 0x380]
dec eax
mov dword [ebp - 0x380], eax
jmp 0x1004ea5f
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb80]
call fcn.1001927d
and dword [ebp - 0x2ec], 0
jmp 0x1004ec13
mov eax, dword [ebp - 0x2ec]
inc eax
mov dword [ebp - 0x2ec], eax
mov eax, dword [ebp - 0x98]
add eax, 0x28
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x78]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x2ec], eax
jge 0x1004ec89
mov eax, dword [ebp - 0x98]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x640], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x640]
jb 0x1004ec84
mov eax, dword [ebp - 0x78]
push dword [eax + 0x38]
mov eax, dword [ebp - 0x98]
push dword [eax + 8]
call fcn.1004c2f7
pop ecx
pop ecx
add eax, dword [ebp - 0x640]
mov dword [ebp - 0x7c4], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x7c4]
jae 0x1004ec84
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x98]
mov eax, dword [eax + 0x14]
sub eax, dword [ecx + 0xc]
mov dword [ebp - 0x30], eax
jmp 0x1004ec89
jmp 0x1004ebf7
cmp dword [ebp - 0x30], 0
jne 0x1004ec94
jmp 0x100536e6
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x30]
add ecx, dword [eax]
add ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], ecx
xor ecx, ecx
call fcn.10034e03
push eax
call fcn.10073568
pop ecx
mov dword [ebp - 0xc4], 0x173bf38c
mov dword [ebp - 0x68], 0x1e12
mov dword [ebp - 0x390], 0xfe0cd1b7
mov dword [ebp - 0x7d4], 0x1bca3396
mov dword [ebp - 0x5e8], 0
mov dword [ebp - 0x9a8], 1
mov dword [ebp - 0x9a4], 1
mov dword [ebp - 0x9a0], 1
mov dword [ebp - 0x99c], 1
mov dword [ebp - 0x174], 0
jmp 0x1004ed20
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 3
jge 0x1004ed3c
mov eax, dword [ebp - 0x174]
mov dword [ebp + eax*4 - 0xc38], 8
jmp 0x1004ed13
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0x68], eax
jg 0x1004ede5
mov eax, dword [ebp - 0x68]
add eax, 0x83bc
cmp eax, dword [ebp - 0x68]
jle 0x1004ed61
mov dword [ebp - 0x388], 1
jmp 0x1004ed68
and dword [ebp - 0x388], 0
mov eax, dword [ebp - 0xc4]
cmp dword [ebp - 0x388], eax
jge 0x1004ed82
mov dword [ebp - 0x2bc], 1
jmp 0x1004ed89
and dword [ebp - 0x2bc], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x2bc]
mov dword [ebp + eax - 0xc38], ecx
cmp dword [ebp - 0x2bc], 0x1a6e483b
jg 0x1004edb3
mov dword [ebp - 0x518], 1
jmp 0x1004edba
and dword [ebp - 0x518], 0
mov eax, dword [ebp - 0x518]
mov dword [ebp - 0x390], eax
cmp dword [ebp - 0x390], 0x89b467bb
mov eax, 0xfff7
test eax, eax
je 0x1004ede5
mov dword [ebp - 0x5e0], 1
jmp 0x1004edec
and dword [ebp - 0x5e0], 0
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0x5e0], eax
jge 0x1004ee03
mov dword [ebp - 0x398], 1
jmp 0x1004ee0a
and dword [ebp - 0x398], 0
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0x398], eax
je 0x1004ee27
mov eax, 0x14d2
test eax, eax
jne 0x1004ee27
and dword [ebp - 0x520], 0
jmp 0x1004ee31
mov dword [ebp - 0x520], 1
mov eax, dword [ebp - 0xc4]
add eax, dword [ebp - 0x520]
cmp eax, 0x5c3c
jne 0x1004ee50
mov dword [ebp - 0x3a0], 1
jmp 0x1004ee57
and dword [ebp - 0x3a0], 0
mov eax, dword [ebp - 0x3a0]
inc eax
inc eax
cmp eax, 0x4ba09a16
jge 0x1004ee72
mov dword [ebp - 0x650], 1
jmp 0x1004ee79
and dword [ebp - 0x650], 0
mov eax, dword [ebp - 0xc4]
cmp eax, dword [ebp - 0x650]
jge 0x1004ee93
mov dword [ebp - 0x3a8], 1
jmp 0x1004ee9a
and dword [ebp - 0x3a8], 0
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0x3a8], eax
jge 0x1004eeb1
mov dword [ebp - 0x528], 1
jmp 0x1004eeb8
and dword [ebp - 0x528], 0
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0x528], eax
jge 0x1004eecf
mov dword [ebp - 0x7cc], 1
jmp 0x1004eed6
and dword [ebp - 0x7cc], 0
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0xb00], eax
cmp dword [ebp - 0xc4], 0
jbe 0x1004eef7
mov dword [ebp - 0x3b0], 1
jmp 0x1004eefe
and dword [ebp - 0x3b0], 0
mov eax, dword [ebp - 0x3b0]
mov dword [ebp - 0x7d4], eax
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x5e8], eax
cmp dword [ebp - 0x5e8], 0
je 0x1004ef30
xor eax, eax
inc eax
je 0x1004ef30
mov dword [ebp - 0x3b8], 1
jmp 0x1004ef37
and dword [ebp - 0x3b8], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x3b8]
mov dword [ebp + eax - 0x9a8], ecx
mov byte [ebp - 0x13c], 1
mov byte [ebp - 0x13b], 0x61
mov byte [ebp - 0x13a], 9
mov byte [ebp - 0x139], 5
mov byte [ebp - 0x138], 6
mov byte [ebp - 0x137], 1
mov byte [ebp - 0x136], 3
mov byte [ebp - 0x135], 6
mov byte [ebp - 0x134], 7
mov byte [ebp - 0x133], 1
mov byte [ebp - 0x132], 8
mov byte [ebp - 0x131], 6
mov byte [ebp - 0x130], 0
mov byte [ebp - 0x12f], 1
mov byte [ebp - 0x12e], 2
mov byte [ebp - 0x12d], 6
mov byte [ebp - 0x12c], 5
mov byte [ebp - 0x12b], 6
mov byte [ebp - 0x12a], 4
mov byte [ebp - 0x129], 9
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x13c]
or eax, 0x54
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x13c]
and ecx, 0x54
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x13c]
mov byte [ebp + ecx - 0x6a8], al
mov dword [ebp - 0x6c], 2
and dword [ebp - 0x530], 0
jmp 0x1004f026
mov eax, dword [ebp - 0x6c]
inc eax
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0x14
jae 0x1004f08e
mov eax, dword [ebp - 0x6c]
movzx eax, byte [ebp + eax - 0x13b]
mov ecx, dword [ebp - 0x6c]
sub ecx, dword [ebp - 0x530]
movzx ecx, byte [ebp + ecx - 0x13e]
movsx ecx, byte [ebp + ecx - 0x6a8]
or eax, ecx
mov ecx, dword [ebp - 0x6c]
movzx ecx, byte [ebp + ecx - 0x13b]
mov edx, dword [ebp - 0x6c]
sub edx, dword [ebp - 0x530]
movzx edx, byte [ebp + edx - 0x13e]
movsx edx, byte [ebp + edx - 0x6a8]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x6c]
movzx ecx, byte [ebp + ecx - 0x13c]
mov byte [ebp + ecx - 0x6a8], al
jmp 0x1004f01e
xor eax, eax
inc eax
imul eax, eax, 0xa
mov byte [ebp + eax - 0x6a8], 0
mov dword [ebp - 0x1f0], 0xffffffff
mov dword [ebp - 0x3c0], 0x3843046b
mov dword [ebp - 0x2c4], 0
mov dword [ebp - 0x550], 0xa42b4837
push 2
lea ecx, [ebp - 0x80c]
call fcn.100191fb
mov dword [ebp - 4], 8
mov dword [ebp - 0xb08], 0xfffffffc
mov dword [ebp - 0x540], 0xfffffffe
mov dword [ebp - 0x6f0], 0xfffffff9
mov dword [ebp - 0x17c], 0xbd7a89a4
mov dword [ebp - 0x4c], 0
jmp 0x1004f110
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 2
jge 0x1004f12c
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x80c]
call fcn.10019299
mov dword [eax], 5
jmp 0x1004f109
mov dword [ebp - 0x4c], 0
jmp 0x1004f13c
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 3
jge 0x1004f152
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0xb90], 0xfffffff6
jmp 0x1004f135
mov dword [ebp - 0x1f0], 0
jmp 0x1004f16b
mov eax, dword [ebp - 0x1f0]
dec eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 0xfffffff2
jge 0x1004f5a8
mov dword [ebp - 0x3e0], 1
mov dword [ebp - 0x3d0], 0x9dd952ea
push 3
lea ecx, [ebp - 0x6cc]
call fcn.100191fb
mov byte [ebp - 4], 9
mov dword [ebp - 0x878], 0xead
mov dword [ebp - 0x7e4], 0xfffffffd
push 2
lea ecx, [ebp - 0x978]
call fcn.100191fb
mov byte [ebp - 4], 0xa
push 1
lea eax, [ebp - 0x6cc]
push eax
push 0x6c5b
push 0x3789
lea eax, [ebp - 0xec]
push eax
call fcn.1004c607
add esp, 0x14
mov dword [ebp - 0xec], 0
jmp 0x1004f1fd
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 2
jge 0x1004f21f
push dword [ebp - 0xec]
lea ecx, [ebp - 0x978]
call fcn.10019299
mov dword [eax], 6
jmp 0x1004f1f0
mov dword [ebp - 0x3e0], 0xb457102d
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x7dc], eax
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x7dc], 0
je 0x1004f560
mov eax, dword [ebp - 0x540]
mov dword [ebp - 0xb10], eax
mov eax, dword [ebp - 0x550]
mov dword [ebp - 0xb18], eax
mov eax, dword [ebp - 0x7e4]
mov dword [ebp - 0x3c0], eax
mov eax, dword [ebp - 0x3c0]
push 4
pop ecx
shl ecx, 1
add eax, dword [ebp + ecx - 0xb90]
cmp eax, 0xcf8314cd
jne 0x1004f29e
mov eax, 0x149c99c4
test eax, eax
jne 0x1004f29e
and dword [ebp - 0x7ec], 0
jmp 0x1004f2a8
mov dword [ebp - 0x7ec], 1
push 0
lea ecx, [ebp - 0x6cc]
call fcn.10019299
mov esi, eax
push 2
lea ecx, [ebp - 0x6cc]
call fcn.10019299
mov ecx, dword [esi]
cmp ecx, dword [eax]
je 0x1004f2d6
mov dword [ebp - 0x648], 1
jmp 0x1004f2dd
and dword [ebp - 0x648], 0
push 0
lea ecx, [ebp - 0x6cc]
call fcn.10019299
mov ecx, dword [ebp - 0x648]
cmp ecx, dword [eax]
jl 0x1004f300
mov dword [ebp - 0x3c8], 1
jmp 0x1004f307
and dword [ebp - 0x3c8], 0
mov eax, dword [ebp - 0x17c]
cmp eax, dword [ebp - 0x3c8]
jg 0x1004f321
mov dword [ebp - 0x538], 1
jmp 0x1004f328
and dword [ebp - 0x538], 0
mov eax, dword [ebp - 0x538]
mov dword [ebp - 0x3d0], eax
push 2
lea ecx, [ebp - 0x6cc]
call fcn.10019299
cmp dword [eax], 0x127c80b1
jge 0x1004f355
mov dword [ebp - 0x31c], 1
jmp 0x1004f35c
and dword [ebp - 0x31c], 0
push 0
lea ecx, [ebp - 0x80c]
call fcn.10019299
mov ecx, dword [ebp - 0x31c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x31c]
sub eax, dword [ebp - 0x2c4]
je 0x1004f560
mov dword [ebp - 0x1f8], 0xfffffff8
mov eax, dword [ebp - 0x3d0]
sub eax, 0x685684c
cmp eax, 3
ja 0x1004f3a9
mov dword [ebp - 0x5f0], 1
jmp 0x1004f3b0
and dword [ebp - 0x5f0], 0
push 1
lea ecx, [ebp - 0x80c]
call fcn.10019299
mov ecx, dword [ebp - 0x5f0]
cmp ecx, dword [eax]
jge 0x1004f3d3
mov dword [ebp - 0x3d8], 1
jmp 0x1004f3da
and dword [ebp - 0x3d8], 0
mov eax, dword [ebp - 0x1f8]
imul eax, dword [ebp - 0x3d8]
add eax, 4
jne 0x1004f3fe
mov eax, 0xaf05e375
test eax, eax
jne 0x1004f3fe
and dword [ebp - 0x8b4], 0
jmp 0x1004f408
mov dword [ebp - 0x8b4], 1
mov eax, dword [ebp - 0x540]
mov dword [ebp - 0xb20], eax
mov eax, dword [ebp - 0x2c4]
cmp dword [ebp - 0x2c4], eax
jl 0x1004f42e
mov dword [ebp - 0x8e4], 1
jmp 0x1004f435
and dword [ebp - 0x8e4], 0
mov eax, dword [ebp - 0x3e0]
add eax, dword [ebp - 0x878]
jne 0x1004f45c
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xb90], 0
jne 0x1004f45c
and dword [ebp - 0x658], 0
jmp 0x1004f466
mov dword [ebp - 0x658], 1
mov eax, dword [ebp - 0x1f8]
cmp dword [ebp - 0x658], eax
jge 0x1004f47f
xor eax, eax
jne 0x1004f47f
cmp dword [ebp - 0x6f0], 0
push 1
lea ecx, [ebp - 0x80c]
call fcn.10019299
cmp dword [eax], 0xfffffff8
jne 0x1004f49d
mov dword [ebp - 0x3e8], 1
jmp 0x1004f4a4
and dword [ebp - 0x3e8], 0
cmp dword [ebp - 0x3e8], 0x2ed8
jge 0x1004f4bc
mov dword [ebp - 0x78c], 1
jmp 0x1004f4c3
and dword [ebp - 0x78c], 0
push 1
lea ecx, [ebp - 0x978]
call fcn.10019299
imul eax, dword [ebp - 0x1f8], 0xffffffff
add eax, 0x87a
cmp eax, 0xe52bdabf
jbe 0x1004f4ef
mov dword [ebp - 0x548], 1
jmp 0x1004f4f6
and dword [ebp - 0x548], 0
cmp dword [ebp - 0x548], 1
je 0x1004f50b
mov dword [ebp - 0x3f0], 1
jmp 0x1004f512
and dword [ebp - 0x3f0], 0
mov eax, dword [ebp - 0x1f8]
cmp dword [ebp - 0x3f0], eax
jle 0x1004f52c
mov dword [ebp - 0x5f8], 1
jmp 0x1004f533
and dword [ebp - 0x5f8], 0
cmp dword [ebp - 0x5f8], 0xa76c1e80
jbe 0x1004f54b
mov dword [ebp - 0x3f8], 1
jmp 0x1004f552
and dword [ebp - 0x3f8], 0
mov eax, dword [ebp - 0x3f8]
mov dword [ebp - 0x550], eax
jmp 0x1004f585
mov dword [ebp - 0x890], 9
lea eax, [ebp - 0x890]
push eax
push 0x5ea0
push 1
push 0x2768
call fcn.1004c688
add esp, 0x10
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x978]
call fcn.1001927d
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x6cc]
call fcn.1001927d
jmp 0x1004f15e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x80c]
call fcn.1001927d
lea eax, [ebp - 0x6a8]
push eax
lea ecx, [ebp - 0xd4c]
call fcn.100282a5
mov dword [ebp - 0x6f8], eax
mov eax, dword [ebp - 0x6f8]
mov dword [ebp - 0x7e0], eax
mov dword [ebp - 4], 0xb
push 0xa
xor edx, edx
mov ecx, dword [ebp - 0x7e0]
call fcn.10034dc3
pop ecx
mov dword [ebp - 0x738], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd4c]
call fcn.1001915d
mov dword [ebp - 0x184], 0
jmp 0x1004f620
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 2
jge 0x1004f63c
mov eax, dword [ebp - 0x184]
mov dword [ebp + eax*4 - 0x6b0], 0xcff0ea75
jmp 0x1004f613
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x6b0], 0
jmp 0x1004f66a
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x6b0]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x6b0], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x6b0], 0xffffffec
je 0x1004f6d3
mov dword [ebp - 0x200], 0xfffffffb
mov dword [ebp - 0x200], 0x11
jmp 0x1004f69d
mov eax, dword [ebp - 0x200]
dec eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 0xfffffffd
jge 0x1004f6ce
mov byte [ebp - 0xa9], 0
movzx eax, byte [ebp - 0xa9]
test eax, eax
je 0x1004f6cc
push 0
push 0x708d
push 0x64f0
call fcn.1004c6d5
add esp, 0xc
jmp 0x1004f690
jmp 0x1004f64f
and dword [ebp - 0x208], 0
jmp 0x1004f6e9
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 0xb
jae 0x1004f702
mov eax, dword [ebp - 0x208]
mov byte [ebp + eax - 0x6a8], 0
jmp 0x1004f6dc
mov dword [ebp - 0x190], 0xffffffff
mov dword [ebp - 0x400], 0x3843046b
mov dword [ebp - 0x2cc], 0
mov dword [ebp - 0x570], 0xa42b4837
push 2
lea ecx, [ebp - 0x81c]
call fcn.100191fb
mov dword [ebp - 4], 0xc
mov dword [ebp - 0xb28], 0xfffffffc
mov dword [ebp - 0x560], 0xfffffffe
mov dword [ebp - 0x718], 0xfffffff9
mov dword [ebp - 0x194], 0xbd7a89a4
mov dword [ebp - 0x58], 0
jmp 0x1004f776
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 2
jge 0x1004f792
push dword [ebp - 0x58]
lea ecx, [ebp - 0x81c]
call fcn.10019299
mov dword [eax], 5
jmp 0x1004f76f
mov dword [ebp - 0x58], 0
jmp 0x1004f7a2
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 3
jge 0x1004f7b8
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0xba0], 0xfffffff6
jmp 0x1004f79b
mov dword [ebp - 0x190], 0
jmp 0x1004f7d1
mov eax, dword [ebp - 0x190]
dec eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 0xfffffff2
jge 0x1004fc07
mov dword [ebp - 0x420], 1
mov dword [ebp - 0x410], 0x9dd952ea
push 3
lea ecx, [ebp - 0x6e4]
call fcn.100191fb
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x898], 0xead
mov dword [ebp - 0x8b0], 0xfffffffd
push 2
lea ecx, [ebp - 0x96c]
call fcn.100191fb
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x100], 0
jmp 0x1004f841
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 3
jge 0x1004f863
push dword [ebp - 0x100]
lea ecx, [ebp - 0x6e4]
call fcn.10019299
mov dword [eax], 2
jmp 0x1004f834
push 1
lea eax, [ebp - 0x96c]
push eax
lea eax, [ebp - 0x100]
push eax
call fcn.1004c6d5
add esp, 0xc
push 0x3651
push 0x5d35
push 1
lea eax, [ebp - 0x420]
push eax
call fcn.1004c73e
add esp, 0x10
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x700], eax
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x700], 0
je 0x1004fbcd
mov eax, dword [ebp - 0x560]
mov dword [ebp - 0xb30], eax
mov eax, dword [ebp - 0x570]
mov dword [ebp - 0xbd8], eax
mov eax, dword [ebp - 0x8b0]
mov dword [ebp - 0x400], eax
mov eax, dword [ebp - 0x400]
push 4
pop ecx
shl ecx, 1
add eax, dword [ebp + ecx - 0xba0]
cmp eax, 0xcf8314cd
jne 0x1004f90b
mov eax, 0x149c99c4
test eax, eax
jne 0x1004f90b
and dword [ebp - 0x708], 0
jmp 0x1004f915
mov dword [ebp - 0x708], 1
push 0
lea ecx, [ebp - 0x6e4]
call fcn.10019299
mov esi, eax
push 2
lea ecx, [ebp - 0x6e4]
call fcn.10019299
mov ecx, dword [esi]
cmp ecx, dword [eax]
je 0x1004f943
mov dword [ebp - 0x660], 1
jmp 0x1004f94a
and dword [ebp - 0x660], 0
push 0
lea ecx, [ebp - 0x6e4]
call fcn.10019299
mov ecx, dword [ebp - 0x660]
cmp ecx, dword [eax]
jl 0x1004f96d
mov dword [ebp - 0x408], 1
jmp 0x1004f974
and dword [ebp - 0x408], 0
mov eax, dword [ebp - 0x194]
cmp eax, dword [ebp - 0x408]
jg 0x1004f98e
mov dword [ebp - 0x558], 1
jmp 0x1004f995
and dword [ebp - 0x558], 0
mov eax, dword [ebp - 0x558]
mov dword [ebp - 0x410], eax
push 2
lea ecx, [ebp - 0x6e4]
call fcn.10019299
cmp dword [eax], 0x127c80b1
jge 0x1004f9c2
mov dword [ebp - 0x2f4], 1
jmp 0x1004f9c9
and dword [ebp - 0x2f4], 0
push 0
lea ecx, [ebp - 0x81c]
call fcn.10019299
mov ecx, dword [ebp - 0x2f4]
mov dword [eax], ecx
mov eax, dword [ebp - 0x2f4]
sub eax, dword [ebp - 0x2cc]
je 0x1004fbcd
mov dword [ebp - 0x1ec], 0xfffffff8
mov eax, dword [ebp - 0x410]
sub eax, 0x685684c
cmp eax, 3
ja 0x1004fa16
mov dword [ebp - 0x600], 1
jmp 0x1004fa1d
and dword [ebp - 0x600], 0
push 1
lea ecx, [ebp - 0x81c]
call fcn.10019299
mov ecx, dword [ebp - 0x600]
cmp ecx, dword [eax]
jge 0x1004fa40
mov dword [ebp - 0x418], 1
jmp 0x1004fa47
and dword [ebp - 0x418], 0
mov eax, dword [ebp - 0x1ec]
imul eax, dword [ebp - 0x418]
add eax, 4
jne 0x1004fa6b
mov eax, 0xaf05e375
test eax, eax
jne 0x1004fa6b
and dword [ebp - 0x7e8], 0
jmp 0x1004fa75
mov dword [ebp - 0x7e8], 1
mov eax, dword [ebp - 0x560]
mov dword [ebp - 0xbe0], eax
mov eax, dword [ebp - 0x2cc]
cmp dword [ebp - 0x2cc], eax
jl 0x1004fa9b
mov dword [ebp - 0x710], 1
jmp 0x1004faa2
and dword [ebp - 0x710], 0
mov eax, dword [ebp - 0x420]
add eax, dword [ebp - 0x898]
jne 0x1004fac9
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xba0], 0
jne 0x1004fac9
and dword [ebp - 0x654], 0
jmp 0x1004fad3
mov dword [ebp - 0x654], 1
mov eax, dword [ebp - 0x1ec]
cmp dword [ebp - 0x654], eax
jge 0x1004faec
xor eax, eax
jne 0x1004faec
cmp dword [ebp - 0x718], 0
push 1
lea ecx, [ebp - 0x81c]
call fcn.10019299
cmp dword [eax], 0xfffffff8
jne 0x1004fb0a
mov dword [ebp - 0x428], 1
jmp 0x1004fb11
and dword [ebp - 0x428], 0
cmp dword [ebp - 0x428], 0x2ed8
jge 0x1004fb29
mov dword [ebp - 0x7f0], 1
jmp 0x1004fb30
and dword [ebp - 0x7f0], 0
push 1
lea ecx, [ebp - 0x96c]
call fcn.10019299
imul eax, dword [ebp - 0x1ec], 0xffffffff
add eax, 0x87a
cmp eax, 0xe52bdabf
jbe 0x1004fb5c
mov dword [ebp - 0x568], 1
jmp 0x1004fb63
and dword [ebp - 0x568], 0
cmp dword [ebp - 0x568], 1
je 0x1004fb78
mov dword [ebp - 0x430], 1
jmp 0x1004fb7f
and dword [ebp - 0x430], 0
mov eax, dword [ebp - 0x1ec]
cmp dword [ebp - 0x430], eax
jle 0x1004fb99
mov dword [ebp - 0x608], 1
jmp 0x1004fba0
and dword [ebp - 0x608], 0
cmp dword [ebp - 0x608], 0xa76c1e80
jbe 0x1004fbb8
mov dword [ebp - 0x438], 1
jmp 0x1004fbbf
and dword [ebp - 0x438], 0
mov eax, dword [ebp - 0x438]
mov dword [ebp - 0x570], eax
jmp 0x1004fbe4
mov dword [ebp - 0x440], 9
mov eax, dword [ebp - 0x440]
inc eax
mov dword [ebp - 0x440], eax
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x96c]
call fcn.1001927d
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x6e4]
call fcn.1001927d
jmp 0x1004f7c4
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x81c]
call fcn.1001927d
mov dword [ebp - 0xe4], 0x5c68ec0a
mov dword [ebp - 0x674], 0x57b5bf2d
mov dword [ebp - 0x720], 0x54bcd76c
mov dword [ebp - 0x19c], 0
jmp 0x1004fc4d
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 1
jge 0x1004fc69
mov eax, dword [ebp - 0x19c]
mov dword [ebp + eax*4 - 0x314], 0xad38
jmp 0x1004fc40
mov dword [ebp - 0xe4], 0xffffffef
jmp 0x1004fc82
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 9
je 0x1004fd21
mov dword [ebp - 0x1d4], 0
jmp 0x1004fca8
mov eax, dword [ebp - 0x1d4]
inc eax
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 3
jge 0x1004fcc4
mov eax, dword [ebp - 0x1d4]
mov dword [ebp + eax*4 - 0x82c], 0xbf5cd53b
jmp 0x1004fc9b
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x82c], 0
jmp 0x1004fcf2
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x82c]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x82c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x82c], 1
jge 0x1004fd1c
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x82c]
mov dword [ebp + eax*4 - 0x314], 1
jmp 0x1004fcd7
jmp 0x1004fc75
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x314]
mov dword [ebp - 0xbe8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x314]
mov dword [ebp - 0xe4], eax
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x674], eax
cmp dword [ebp - 0x674], 0x5047
jge 0x1004fd6b
mov dword [ebp - 0x448], 1
jmp 0x1004fd72
and dword [ebp - 0x448], 0
mov eax, dword [ebp - 0x448]
mov dword [ebp - 0x720], eax
mov byte [ebp - 0x2a8], 1
mov byte [ebp - 0x2a7], 0x30
mov byte [ebp - 0x2a6], 3
mov byte [ebp - 0x2a5], 4
mov byte [ebp - 0x2a4], 0x52
mov byte [ebp - 0x2a3], 0x2c
mov byte [ebp - 0x2a2], 0x66
mov byte [ebp - 0x2a1], 0xaa
mov byte [ebp - 0x2a0], 0xcf
mov byte [ebp - 0x29f], 0xe7
mov byte [ebp - 0x29e], 0xb4
mov byte [ebp - 0x29d], 0xc1
mov byte [ebp - 0x29c], 0xdb
mov byte [ebp - 0x29b], 0x37
mov byte [ebp - 0x29a], 0x21
mov byte [ebp - 0x299], 0xd2
mov byte [ebp - 0x298], 0x8b
mov byte [ebp - 0x297], 0x69
mov byte [ebp - 0x296], 0x21
mov byte [ebp - 0x295], 3
mov byte [ebp - 0x294], 0xb
mov byte [ebp - 0x293], 0xcc
mov byte [ebp - 0x292], 0x8e
mov byte [ebp - 0x291], 0x39
mov byte [ebp - 0x290], 0x13
mov byte [ebp - 0x28f], 0xba
mov byte [ebp - 0x28e], 0x92
mov byte [ebp - 0x28d], 0x24
mov byte [ebp - 0x28c], 0xd6
mov byte [ebp - 0x28b], 0xa0
mov byte [ebp - 0x28a], 0x10
mov byte [ebp - 0x289], 0xd2
mov byte [ebp - 0x288], 0xcb
mov byte [ebp - 0x287], 0x76
mov byte [ebp - 0x286], 0xd7
mov byte [ebp - 0x285], 0x5b
mov byte [ebp - 0x284], 0x44
mov byte [ebp - 0x283], 0xbc
mov byte [ebp - 0x282], 0xc9
mov byte [ebp - 0x281], 0x57
mov byte [ebp - 0x280], 0x14
mov byte [ebp - 0x27f], 0xdc
mov byte [ebp - 0x27e], 0xa6
mov byte [ebp - 0x27d], 0x30
mov byte [ebp - 0x27c], 0x2f
mov byte [ebp - 0x27b], 0x2c
mov byte [ebp - 0x27a], 0x35
mov byte [ebp - 0x279], 0x11
mov byte [ebp - 0x278], 0x6c
mov byte [ebp - 0x277], 0xd7
mov byte [ebp - 0x276], 0xfd
mov byte [ebp - 0x275], 0x6c
mov byte [ebp - 0x274], 0xfd
mov byte [ebp - 0x273], 0xeb
mov byte [ebp - 0x272], 0xc3
mov byte [ebp - 0x271], 0x71
mov byte [ebp - 0x270], 0xaa
mov byte [ebp - 0x26f], 0xde
mov byte [ebp - 0x26e], 0x86
mov byte [ebp - 0x26d], 0x5c
mov byte [ebp - 0x26c], 0x60
mov byte [ebp - 0x26b], 0x31
mov byte [ebp - 0x26a], 0x13
mov byte [ebp - 0x269], 0xfb
mov byte [ebp - 0x268], 0xc1
mov byte [ebp - 0x267], 0x20
mov byte [ebp - 0x266], 0x16
mov byte [ebp - 0x265], 0xdf
mov byte [ebp - 0x264], 0x9d
mov byte [ebp - 0x263], 0x7a
mov byte [ebp - 0x262], 0xa9
mov byte [ebp - 0x261], 0xfc
mov byte [ebp - 0x260], 0x9b
mov byte [ebp - 0x25f], 0
mov byte [ebp - 0x25e], 0xb6
mov byte [ebp - 0x25d], 0xc9
mov byte [ebp - 0x25c], 0x71
mov byte [ebp - 0x25b], 0xf7
mov byte [ebp - 0x25a], 0xcf
mov byte [ebp - 0x259], 0x92
mov byte [ebp - 0x258], 0x78
mov byte [ebp - 0x257], 0x5e
mov byte [ebp - 0x256], 0x3f
mov byte [ebp - 0x255], 0x11
mov byte [ebp - 0x254], pe_nt_image_headers32
mov byte [ebp - 0x253], 0x40
mov byte [ebp - 0x252], 0xf0
mov byte [ebp - 0x251], 5
mov byte [ebp - 0x250], 3
mov byte [ebp - 0x24f], 2
mov byte [ebp - 0x24e], 6
mov byte [ebp - 0x24d], 9
mov byte [ebp - 0x24c], 7
mov byte [ebp - 0x24b], 0
mov byte [ebp - 0x24a], 1
mov byte [ebp - 0x249], 7
mov byte [ebp - 0x248], 7
mov byte [ebp - 0x247], 6
mov byte [ebp - 0x246], 0xf
mov byte [ebp - 0x245], 4
mov byte [ebp - 0x244], 0xd
mov byte [ebp - 0x243], 8
mov byte [ebp - 0x242], 4
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x2a8]
or eax, 6
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x2a8]
and ecx, 6
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x2a8]
mov byte [ebp + ecx - 0x69c], al
mov dword [ebp - 0x24], 2
and dword [ebp - 0x114], 0
jmp 0x100500a0
mov eax, dword [ebp - 0x24]
inc eax
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0x67
jae 0x1005017e
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x2a8]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x24], eax
jne 0x100500ea
mov eax, dword [ebp - 0x24]
movzx eax, byte [ebp + eax - 0x2a8]
inc eax
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x24]
movzx eax, byte [ebp + eax - 0x2a8]
mov ecx, dword [ebp - 0x24]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x24], eax
jmp 0x10050098
mov eax, dword [ebp - 0x24]
movzx eax, byte [ebp + eax - 0x2a7]
mov ecx, dword [ebp - 0x24]
sub ecx, dword [ebp - 0x114]
movzx ecx, byte [ebp + ecx - 0x2aa]
movsx ecx, byte [ebp + ecx - 0x69c]
add eax, ecx
mov ecx, dword [ebp - 0x24]
movzx ecx, byte [ebp + ecx - 0x2a7]
mov edx, dword [ebp - 0x24]
sub edx, dword [ebp - 0x114]
movzx edx, byte [ebp + edx - 0x2aa]
movsx edx, byte [ebp + edx - 0x69c]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x24]
movzx ecx, byte [ebp + ecx - 0x2a7]
mov edx, dword [ebp - 0x24]
sub edx, dword [ebp - 0x114]
movzx edx, byte [ebp + edx - 0x2aa]
movsx edx, byte [ebp + edx - 0x69c]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x24]
movzx ecx, byte [ebp + ecx - 0x2a8]
mov byte [ebp + ecx - 0x69c], al
and dword [ebp - 0x114], 0
jmp 0x10050098
xor eax, eax
inc eax
imul eax, eax, 0xa
mov byte [ebp + eax - 0x69c], 0
mov dword [ebp - 0x1fc], 0x443250e6
mov dword [ebp - 0x2d4], 0x5d70512a
mov dword [ebp - 0x8cc], 0x87e91c17
mov dword [ebp - 0x728], 0xebe1552b
mov dword [ebp - 0x1a4], 0
jmp 0x100501cd
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 2
jge 0x100501e9
mov eax, dword [ebp - 0x1a4]
mov dword [ebp + eax*4 - 0x308], 0xfffffff8
jmp 0x100501c0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x308], 5
jbe 0x1005020b
cmp dword [ebp - 0x1fc], 0
jne 0x1005020b
and dword [ebp - 0x450], 0
jmp 0x10050215
mov dword [ebp - 0x450], 1
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x308], 1
jne 0x10050231
mov dword [ebp - 0x578], 1
jmp 0x10050238
and dword [ebp - 0x578], 0
mov eax, dword [ebp - 0x1fc]
cmp dword [ebp - 0x578], eax
jg 0x10050252
mov dword [ebp - 0x610], 1
jmp 0x10050259
and dword [ebp - 0x610], 0
mov eax, dword [ebp - 0x450]
imul eax, dword [ebp - 0x610]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x308]
je 0x10050281
mov dword [ebp - 0x458], 1
jmp 0x10050288
and dword [ebp - 0x458], 0
mov eax, dword [ebp - 0x1fc]
cmp eax, dword [ebp - 0x458]
jle 0x100502a2
mov dword [ebp - 0x580], 1
jmp 0x100502a9
and dword [ebp - 0x580], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x308]
imul eax, dword [ebp - 0x580]
cmp eax, 0xba13b288
jae 0x100502d0
mov dword [ebp - 0x460], 1
jmp 0x100502d7
and dword [ebp - 0x460], 0
mov eax, dword [ebp - 0x460]
mov dword [ebp - 0x2d4], eax
cmp dword [ebp - 0x1fc], 0xfffffffb
jae 0x100502f8
mov dword [ebp - 0x468], 1
jmp 0x100502ff
and dword [ebp - 0x468], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x308], 1
jne 0x1005031b
mov dword [ebp - 0x65c], 1
jmp 0x10050322
and dword [ebp - 0x65c], 0
mov eax, dword [ebp - 0x65c]
mov dword [ebp - 0x2d4], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x308]
cmp eax, dword [ebp - 0x2d4]
jg 0x1005035c
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x308], 0
jne 0x1005035c
and dword [ebp - 0x588], 0
jmp 0x10050366
mov dword [ebp - 0x588], 1
mov eax, dword [ebp - 0x468]
cmp eax, dword [ebp - 0x588]
jl 0x10050380
mov dword [ebp - 0x470], 1
jmp 0x10050387
and dword [ebp - 0x470], 0
mov eax, dword [ebp - 0x470]
dec eax
jne 0x1005039e
xor eax, eax
inc eax
jne 0x1005039e
and dword [ebp - 0x618], 0
jmp 0x100503a8
mov dword [ebp - 0x618], 1
mov eax, dword [ebp - 0x618]
sub eax, dword [ebp - 0x8cc]
mov dword [ebp - 0x728], eax
lea eax, [ebp - 0x69c]
push eax
lea ecx, [ebp - 0xd1c]
call fcn.100282a5
mov dword [ebp - 0x800], eax
mov eax, dword [ebp - 0x800]
mov dword [ebp - 0x730], eax
mov dword [ebp - 4], 0xf
push 0xa
xor edx, edx
mov ecx, dword [ebp - 0x730]
call fcn.10034dc3
pop ecx
mov dword [ebp - 0x8a0], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd1c]
call fcn.1001915d
and dword [ebp - 0x1ac], 0
jmp 0x10050420
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 0xb
jae 0x10050439
mov eax, dword [ebp - 0x1ac]
mov byte [ebp + eax - 0x69c], 0
jmp 0x10050413
push dword [ebp - 0x8a0]
push dword [ebp - 0x738]
call fcn.1004923a
pop ecx
pop ecx
mov dword [ebp - 0x5b0], eax
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x740], 0xffffffff
mov dword [ebp - 0x490], 0xffffffff
mov dword [ebp - 0x874], 0x93f04518
mov dword [ebp - 0x750], 0
mov dword [ebp - 0xbf0], 0xfffffffd
mov dword [ebp - 0x87c], 1
mov dword [ebp - 0xbf8], 4
mov dword [ebp - 0xc00], 0xfffffff8
mov dword [ebp - 0xc1c], 0x86e6af57
mov dword [ebp - 0xc24], 1
mov dword [ebp - 0xc2c], 0xfffffff9
mov dword [ebp - 0x498], 0x1f15
cmp dword [ebp - 0x60], 1
jne 0x100504e3
mov dword [ebp - 0x684], 1
jmp 0x100504ea
and dword [ebp - 0x684], 0
cmp dword [ebp - 0x60], 0
jne 0x100504fc
mov dword [ebp - 0x478], 1
jmp 0x10050503
and dword [ebp - 0x478], 0
mov eax, dword [ebp - 0x60]
cmp eax, dword [ebp - 0x478]
jge 0x1005051a
mov dword [ebp - 0x480], 1
jmp 0x10050521
and dword [ebp - 0x480], 0
cmp dword [ebp - 0x60], 0x81d2
jne 0x10050536
mov dword [ebp - 0x590], 1
jmp 0x1005053d
and dword [ebp - 0x590], 0
imul eax, dword [ebp - 0x590], 0xec17
cmp dword [ebp - 0x480], eax
jg 0x1005055b
mov dword [ebp - 0x488], 1
jmp 0x10050562
and dword [ebp - 0x488], 0
mov eax, dword [ebp - 0x684]
imul eax, dword [ebp - 0x488]
cmp eax, 0x85ce96b7
jae 0x10050626
mov dword [ebp - 0x810], 0xffffffff
mov dword [ebp - 0x60], 0
jmp 0x10050594
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0x3b
jl 0x100505fc
mov dword [ebp - 0x598], 0
lea eax, [ebp - 0x598]
push eax
lea eax, [ebp - 0x810]
push eax
push 0
lea eax, [ebp - 0x740]
push eax
lea eax, [ebp - 0x490]
push eax
push 0x2ce7
lea eax, [ebp - 0x60]
push eax
push 0x1a5a
call fcn.1004d13f
add esp, 0x20
push 0x507d
lea eax, [ebp - 0x598]
push eax
push 0x1d12
push 1
lea eax, [ebp - 0x874]
push eax
call fcn.1004c7b2
add esp, 0x14
jmp 0x1005058d
mov byte [ebp - 0x74], 0
movzx eax, byte [ebp - 0x74]
test eax, eax
je 0x10050621
push 0x17d0
push 0x52fe
push 0
push 0x1b67
call fcn.1004cf64
add esp, 0x10
jmp 0x100506ad
mov dword [ebp - 0x820], 4
mov dword [ebp - 0xbcc], 0xfffffff7
mov dword [ebp - 0x758], 0x64e48c0c
mov dword [ebp - 0x748], 1
mov dword [ebp - 0xa24], 0xfffffffe
mov dword [ebp - 0x9b4], 0xb33df123
mov dword [ebp - 0x620], 3
push 1
lea eax, [ebp - 0x748]
push eax
lea eax, [ebp - 0x820]
push eax
lea eax, [ebp - 0x750]
push eax
lea eax, [ebp - 0x87c]
push eax
lea eax, [ebp - 0x490]
push eax
lea eax, [ebp - 0x758]
push eax
call fcn.1004c830
add esp, 0x1c
mov eax, dword [ebp - 0x620]
dec eax
mov dword [ebp - 0x620], eax
mov eax, dword [ebp - 0x498]
dec eax
mov dword [ebp - 0x498], eax
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x5b0]
mov dword [eax + 8], ecx
mov dword [ebp - 0x80], 0x17571177
mov dword [ebp - 0x300], 0xf0796840
mov dword [ebp - 0x80], 0
jmp 0x100506e7
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 6
jge 0x10050980
and dword [ebp - 0x924], 0
and dword [ebp - 0x920], 0
and dword [ebp - 0x91c], 0
and dword [ebp - 0x918], 0
lea ecx, [ebp - 0x2ed]
call fcn.100090c3
push eax
lea eax, [ebp - 0x914]
push eax
lea eax, [ebp - 0x924]
push eax
lea ecx, [ebp - 0xc4c]
call fcn.100192a8
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x83c]
call fcn.10019257
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x8c8], 0x8373b2c
mov dword [ebp - 0x8c4], 0x8373b2c
mov dword [ebp - 0x8c0], 0x8373b2c
mov dword [ebp - 0x8bc], 0x8373b2c
push 2
lea ecx, [ebp - 0x93c]
call fcn.100191fb
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x1dc], 0
jmp 0x1005079b
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 2
jge 0x100507bd
push dword [ebp - 0x1dc]
lea ecx, [ebp - 0x93c]
call fcn.10019299
mov dword [eax], 0xfffffff6
jmp 0x1005078e
push 3
lea ecx, [ebp - 0x83c]
call fcn.10019299
cmp dword [eax], 0
jne 0x10050867
push 3
lea ecx, [ebp - 0x83c]
call fcn.10019299
cmp dword [eax], 0xffffffff
jne 0x100507f1
mov dword [ebp - 0x5a0], 1
jmp 0x100507f8
and dword [ebp - 0x5a0], 0
mov eax, dword [ebp - 0x80]
add eax, dword [ebp - 0x5a0]
jne 0x10050812
cmp dword [ebp - 0x80], 0
jne 0x10050812
and dword [ebp - 0x4a0], 0
jmp 0x1005081c
mov dword [ebp - 0x4a0], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x4a0]
mov dword [ebp + eax - 0x8c8], ecx
mov eax, 0xd8f6
cmp eax, 0x9695
jg 0x10050847
mov dword [ebp - 0x664], 1
jmp 0x1005084e
and dword [ebp - 0x664], 0
mov eax, dword [ebp - 0x664]
sub eax, dword [ebp - 0x80]
jne 0x10050867
or eax, 0xffffffff
jne 0x10050867
and dword [ebp - 0x4a8], 0
jmp 0x10050871
mov dword [ebp - 0x4a8], 1
push 2
lea ecx, [ebp - 0x83c]
call fcn.10019299
mov ecx, dword [ebp - 0x4a8]
cmp ecx, dword [eax]
je 0x10050894
mov dword [ebp - 0x5a8], 1
jmp 0x1005089b
and dword [ebp - 0x5a8], 0
mov eax, dword [ebp - 0x5a8]
mov dword [ebp - 0x300], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x8c8], 0
je 0x1005094a
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x8c8], 0
jne 0x100508d8
push 1
lea ecx, [ebp - 0x83c]
call fcn.10019299
push 3
pop eax
test eax, eax
jne 0x100508f1
cmp dword [ebp - 0x300], 0
jne 0x100508f1
and dword [ebp - 0x4b0], 0
jmp 0x100508fb
mov dword [ebp - 0x4b0], 1
push 1
lea ecx, [ebp - 0x93c]
call fcn.10019299
imul eax, dword [eax], 0xffff
cmp eax, dword [ebp - 0x4b0]
je 0x10050922
mov dword [ebp - 0x628], 1
jmp 0x10050929
and dword [ebp - 0x628], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x8c8]
cmp eax, dword [ebp - 0x628]
jge 0x1005094a
and dword [ebp - 0x4b8], 0
mov eax, dword [ebp - 0x4b8]
mov dword [ebp - 0x300], eax
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x93c]
call fcn.1001927d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x83c]
call fcn.1001927d
jmp 0x100506e0
push 0xf
push 5
call fcn.1004923a
pop ecx
pop ecx
add eax, dword [ebp - 0x5b0]
mov ecx, dword [ebp - 0x18]
mov dword [ecx + 4], eax
mov dword [ebp - 0x6e8], 0xfffffff9
mov dword [ebp - 0x104], 0xaa61fc2d
mov dword [ebp - 0x830], 1
mov dword [ebp - 0xbec], 0x323fa9df
mov dword [ebp - 0x1b4], 0
jmp 0x100509d8
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 2
jge 0x100509f4
mov eax, dword [ebp - 0x1b4]
mov dword [ebp + eax*4 - 0xc6c], 0xfffffffd
jmp 0x100509cb
push 0x68a6
lea eax, [ebp - 0x104]
push eax
push 1
lea eax, [ebp - 0x830]
push eax
push 0x14f2
lea eax, [ebp - 0x6e8]
push eax
call fcn.1004c926
add esp, 0x18
mov dword [ebp - 0x104], 1
jmp 0x10050a36
mov eax, dword [ebp - 0x104]
dec eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0
jl 0x10050afb
mov dword [ebp - 0x9bc], 0xfffffff7
mov dword [ebp - 0xaf4], 0x4dfecbe9
mov dword [ebp - 0x9c4], 0x50faeb38
mov dword [ebp - 0xba4], 0x57392715
mov dword [ebp - 0x9cc], 0xe2e4ed3
mov dword [ebp - 0xafc], 0x7b47e0fa
mov dword [ebp - 0x9d4], 0xd1edb6b7
mov dword [ebp - 0xc20], 0x1c5860bc
mov dword [ebp - 0x9dc], 0
mov dword [ebp - 0xa20], 0x37d437f1
mov dword [ebp - 0x884], 0xc74b
mov dword [ebp - 0x1f4], 0
jmp 0x10050aca
mov eax, dword [ebp - 0x1f4]
inc eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 3
jge 0x10050ae6
mov eax, dword [ebp - 0x1f4]
mov dword [ebp + eax*4 - 0xd7c], 0
jmp 0x10050abd
push 0
lea eax, [ebp - 0x884]
push eax
call fcn.1004ca3d
pop ecx
pop ecx
jmp 0x10050a29
and dword [ebp - 0x11c], 0
mov dword [ebp - 0x1bc], 0xfffffffa
mov dword [ebp - 0x1bc], 0
jmp 0x10050b25
mov eax, dword [ebp - 0x1bc]
dec eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 0xfffffffc
jne 0x10050b3e
push 1
push 0x261c
call fcn.1004ca3d
pop ecx
pop ecx
jmp 0x10050b18
mov byte [ebp - 0x91], 0
movzx eax, byte [ebp - 0x91]
test eax, eax
je 0x10050b64
push 1
push 0x43b6
push 0x415c
call fcn.1004ca83
add esp, 0xc
mov eax, dword [ebp - 0x18]
cmp dword [eax + 0x18], 0
jbe 0x10050b8c
push 0
lea eax, [ebp - 0x11c]
push eax
lea eax, [ebp - 0x18]
push eax
push 0x4cee
push 0xf68
call fcn.1004d84f
add esp, 0x14
mov dword [ebp - 0x9e4], 0x5f70ad6f
mov byte [ebp - 0x79], 0
push 0x266c
push 0x31e7
lea eax, [ebp - 0x79]
push eax
push 1
call fcn.1004cae9
add esp, 0x10
mov byte [ebp - 0xa1], 0
movzx eax, byte [ebp - 0xa1]
test eax, eax
je 0x10050bdd
mov eax, dword [ebp + 8]
mov dword [ebp - 0x75c], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x764], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x76c], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x774], eax
mov eax, dword [ebp - 0x75c]
mov dword [ebp - 0x2e0], eax
mov eax, dword [ebp - 0x764]
mov dword [ebp - 0x784], eax
mov eax, dword [ebp - 0x76c]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x774]
mov dword [ebp - 0x5ec], eax
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
mov dword [ebp - 0x9f8], eax
mov eax, dword [ebp - 0x48]
cmp dword [eax], 0xc6eed1e1
ja 0x10053591
mov dword [ebp - 0x77c], 1
jmp 0x10053598
and dword [ebp - 0x77c], 0
mov eax, 0xffff
test eax, eax
jne 0x100535aa
mov eax, dword [ebp - 0x2e0]
cmp dword [eax], 0
mov eax, dword [ebp - 0x5ec]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx]
mov dword [eax], ecx
mov eax, dword [ebp - 0x5ec]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx]
cmp dword [eax], ecx
jne 0x100535d6
push 0xfffffffffffffffb
pop eax
test eax, eax
jne 0x100535d6
and dword [ebp - 0x5f4], 0
jmp 0x100535e0
mov dword [ebp - 0x5f4], 1
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x5f4]
jle 0x100535f9
mov dword [ebp - 0x5fc], 1
jmp 0x10053600
and dword [ebp - 0x5fc], 0
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
cmp dword [ebp - 0x5fc], eax
jle 0x10053619
mov dword [ebp - 0x604], 1
jmp 0x10053620
and dword [ebp - 0x604], 0
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
cmp dword [ebp - 0x604], eax
jg 0x10053639
mov dword [ebp - 0x60c], 1
jmp 0x10053640
and dword [ebp - 0x60c], 0
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
cmp dword [ebp - 0x60c], eax
jl 0x10053659
mov dword [ebp - 0x614], 1
jmp 0x10053660
and dword [ebp - 0x614], 0
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
cmp dword [ebp - 0x614], eax
jne 0x10053679
mov dword [ebp - 0x2d8], 1
jmp 0x10053680
and dword [ebp - 0x2d8], 0
push 2
mov ecx, dword [ebp - 0x784]
call fcn.10019299
mov ecx, dword [ebp - 0x2d8]
mov dword [eax], ecx
mov eax, dword [ebp - 0x2e0]
mov eax, dword [eax]
cmp dword [ebp - 0x2d8], eax
jg 0x100536b1
mov dword [ebp - 0x61c], 1
jmp 0x100536b8
and dword [ebp - 0x61c], 0
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
cmp dword [ebp - 0x61c], eax
jge 0x100536d1
mov dword [ebp - 0x624], 1
jmp 0x100536d8
and dword [ebp - 0x624], 0
mov eax, dword [ebp - 0x2e0]
mov ecx, dword [ebp - 0x624]
mov dword [eax], ecx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret