Function at 0x1004d8f5
Capabilities:
Contain obfuscated stackstrings
Encode data using base64
Enumerate pe sections
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1008e60b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xc58
push esi
and dword [ebp - 0x18], 0
movzx eax, byte [ebp + 0x10]
test eax, eax
je 0x10052f84
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x37c], eax
mov dword [ebp - 0x428], 0x85c9e53
mov dword [ebp - 0x5c], 0xfffffff8
mov dword [ebp - 0x1c8], 0
mov dword [ebp - 0x174], 0x3531f145
mov dword [ebp - 0x324], 0xffffffff
mov dword [ebp - 0x428], 1
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x428], eax
jg 0x1004d983
mov dword [ebp - 0x654], 1
jmp 0x1004d98a
and dword [ebp - 0x654], 0
cmp dword [ebp - 0x5c], 1
jne 0x1004d99c
mov dword [ebp - 0x618], 1
jmp 0x1004d9a3
and dword [ebp - 0x618], 0
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x618], eax
jge 0x1004d9ba
mov dword [ebp - 0x620], 1
jmp 0x1004d9c1
and dword [ebp - 0x620], 0
mov eax, dword [ebp - 0x5c]
cmp eax, dword [ebp - 0x620]
jge 0x1004d9d8
mov dword [ebp - 0x644], 1
jmp 0x1004d9df
and dword [ebp - 0x644], 0
mov eax, dword [ebp - 0x644]
mov dword [ebp - 0x1c8], eax
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x1c8], eax
jl 0x1004da02
mov dword [ebp - 0x64c], 1
jmp 0x1004da09
and dword [ebp - 0x64c], 0
mov eax, dword [ebp - 0x64c]
mov dword [ebp - 0x174], eax
mov eax, dword [ebp - 0x174]
cmp dword [ebp - 0x654], eax
jg 0x1004da2f
mov dword [ebp - 0x65c], 1
jmp 0x1004da36
and dword [ebp - 0x65c], 0
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x65c], eax
jne 0x1004da4d
mov dword [ebp - 0x664], 1
jmp 0x1004da54
and dword [ebp - 0x664], 0
cmp dword [ebp - 0x664], 0xffffffff
jg 0x1004da69
mov dword [ebp - 0x67c], 1
jmp 0x1004da70
and dword [ebp - 0x67c], 0
mov eax, dword [ebp - 0x5c]
add eax, dword [ebp - 0x67c]
cmp eax, 0xa4c
jg 0x1004da8c
mov dword [ebp - 0x650], 1
jmp 0x1004da93
and dword [ebp - 0x650], 0
mov eax, dword [ebp - 0x650]
neg eax
je 0x1004dabb
push 0x18ed
push 0
push 0x4c8d
push 0x2e81
call fcn.1004cd91
add esp, 0x10
jmp 0x1004dd0d
mov dword [ebp - 0x58], 0x8bc0
mov dword [ebp - 0x1bc], 0xffffffff
mov dword [ebp - 0x734], 0xffffffff
mov dword [ebp - 0xad4], 0x31364f2c
mov dword [ebp - 0x2f8], 0xa83cd0cd
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x9d8], eax
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x1c8], eax
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x1c8], eax
je 0x1004db13
mov dword [ebp - 0x354], 1
jmp 0x1004db1a
and dword [ebp - 0x354], 0
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x354], eax
jle 0x1004db31
mov dword [ebp - 0x610], 1
jmp 0x1004db38
and dword [ebp - 0x610], 0
mov eax, dword [ebp - 0x58]
sub eax, dword [ebp - 0x610]
cmp eax, dword [ebp - 0x58]
jge 0x1004db52
mov dword [ebp - 0x5bc], 1
jmp 0x1004db59
and dword [ebp - 0x5bc], 0
mov eax, dword [ebp - 0x58]
cmp eax, dword [ebp - 0x5bc]
jg 0x1004db70
mov dword [ebp - 0x35c], 1
jmp 0x1004db77
and dword [ebp - 0x35c], 0
mov eax, dword [ebp - 0x58]
add eax, dword [ebp - 0x35c]
je 0x1004db89
push 0xfffffffffffffffc
pop eax
test eax, eax
jne 0x1004db9b
cmp dword [ebp - 0x324], 0
jne 0x1004db9b
and dword [ebp - 0x4f4], 0
jmp 0x1004dba5
mov dword [ebp - 0x4f4], 1
mov eax, dword [ebp - 0x324]
cmp dword [ebp - 0x4f4], eax
jle 0x1004dbbf
mov dword [ebp - 0x364], 1
jmp 0x1004dbc6
and dword [ebp - 0x364], 0
mov eax, dword [ebp - 0x364]
mov dword [ebp - 0x174], eax
mov eax, dword [ebp - 0x174]
add eax, dword [ebp - 0x58]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x1bc], eax
mov eax, dword [ebp - 0x1bc]
cmp dword [ebp - 0x58], eax
je 0x1004dbfe
mov dword [ebp - 0x624], 1
jmp 0x1004dc05
and dword [ebp - 0x624], 0
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x624], eax
jge 0x1004dc4c
mov dword [ebp - 0x724], 1
mov dword [ebp - 0x72c], 0x1552b9cb
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x724]
push eax
push 0
push 0x5af8
push 0x2549
lea eax, [ebp - 0x72c]
push eax
call fcn.1004bd33
add esp, 0x18
jmp 0x1004dc6c
mov byte [ebp - 0xb7], 0
movzx eax, byte [ebp - 0xb7]
test eax, eax
je 0x1004dc6c
push 0
push 0x2b7d
call fcn.1004b4a8
pop ecx
pop ecx
mov eax, 0xad4d
test eax, eax
je 0x1004dc8a
cmp dword [ebp - 0x1bc], 0
je 0x1004dc8a
mov dword [ebp - 0x36c], 1
jmp 0x1004dc91
and dword [ebp - 0x36c], 0
mov eax, dword [ebp - 0x2f8]
dec eax
mov dword [ebp - 0x2f8], eax
mov eax, dword [ebp - 0x2f8]
cmp dword [ebp - 0x36c], eax
je 0x1004dcb8
mov dword [ebp - 0x4fc], 1
jmp 0x1004dcbf
and dword [ebp - 0x4fc], 0
mov eax, dword [ebp - 0x324]
cmp dword [ebp - 0x4fc], eax
jge 0x1004dcd9
mov dword [ebp - 0x374], 1
jmp 0x1004dce0
and dword [ebp - 0x374], 0
mov eax, dword [ebp - 0x734]
cmp dword [ebp - 0x374], eax
jne 0x1004dcfa
mov dword [ebp - 0x5c4], 1
jmp 0x1004dd01
and dword [ebp - 0x5c4], 0
mov eax, dword [ebp - 0x5c4]
mov dword [ebp - 0x1bc], eax
push 0
call fcn.1004b5aa
pop ecx
mov eax, dword [ebp - 0x37c]
movzx eax, word [eax]
cmp eax, 0x5a4d
je 0x1004dd2a
jmp 0x10052ff3
push 3
lea ecx, [ebp - 0x9f8]
call fcn.10018732
and dword [ebp - 4], 0
mov dword [ebp - 0x1e0], 1
mov dword [ebp - 0x17c], 0
jmp 0x1004dd5e
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 3
jge 0x1004dd7d
push dword [ebp - 0x17c]
lea ecx, [ebp - 0x9f8]
call fcn.100187be
or dword [eax], 0xffffffff
jmp 0x1004dd51
mov dword [ebp - 0x1e0], 2
jmp 0x1004dd96
mov eax, dword [ebp - 0x1e0]
dec eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 0
jl 0x1004dda9
push 1
call fcn.1004b464
pop ecx
jmp 0x1004dd89
mov byte [ebp - 0xa5], 0
push 1
lea eax, [ebp - 0xa5]
push eax
call fcn.1004b4a8
pop ecx
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9f8]
call fcn.100187b9
mov eax, dword [ebp - 0x37c]
mov ecx, dword [ebp - 0x28]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0x94], ecx
mov dword [ebp - 0x100], 0xc184c506
mov dword [ebp - 0x184], 0
jmp 0x1004de04
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 2
jge 0x1004de20
mov eax, dword [ebp - 0x184]
mov dword [ebp + eax*4 - 0xa18], 0xffffffff
jmp 0x1004ddf7
mov dword [ebp - 0x100], 1
jmp 0x1004de39
mov eax, dword [ebp - 0x100]
dec eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0
jl 0x1004de56
mov eax, dword [ebp - 0x100]
cmp dword [ebp + eax*4 - 0xa18], 0
je 0x1004de54
jmp 0x1004de56
jmp 0x1004de2c
mov eax, dword [ebp - 0x94]
cmp dword [eax], 0x4550
je 0x1004de69
jmp 0x10052ff3
mov dword [ebp - 0x85c], 0xb674
mov dword [ebp - 0x858], 0xb674
mov dword [ebp - 0x854], 0xb674
mov dword [ebp - 0x850], 0xb674
mov dword [ebp - 0x634], 0
mov dword [ebp - 0x504], 0xa42b4837
mov dword [ebp - 0x394], 0xfffffffe
mov dword [ebp - 0x504], 0x5d63eb9c
cmp dword [ebp - 0x504], 1
jne 0x1004dece
mov dword [ebp - 0x384], 1
jmp 0x1004ded5
and dword [ebp - 0x384], 0
cmp dword [ebp - 0x384], 1
je 0x1004deea
mov dword [ebp - 0x38c], 1
jmp 0x1004def1
and dword [ebp - 0x38c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x85c]
mov dword [ebp - 0x634], eax
mov eax, dword [ebp - 0x634]
push 4
pop ecx
shl ecx, 0
imul eax, dword [ebp + ecx - 0x85c]
add eax, dword [ebp - 0x38c]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x85c]
jl 0x1004df39
mov dword [ebp - 0x50c], 1
jmp 0x1004df40
and dword [ebp - 0x50c], 0
mov eax, dword [ebp - 0x50c]
mov dword [ebp - 0x394], eax
push 0x2fcd
push 1
push 0x571c
lea eax, [ebp - 0x394]
push eax
call fcn.1004b505
add esp, 0x10
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x94]
lea eax, [ecx + eax + 0x78]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0xbc], 0x478144ad
mov dword [ebp - 0xcc], 0xfffffff7
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x1e4], 1
mov dword [ebp - 0x1c4], 0
jmp 0x1004dfb8
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 4
jge 0x1004dfd4
mov eax, dword [ebp - 0x1c4]
mov dword [ebp + eax*4 - 0x86c], 0x7d711e7b
jmp 0x1004dfab
cmp dword [ebp - 0xbc], 0xd76715f0
je 0x1004dfec
mov dword [ebp - 0x5cc], 1
jmp 0x1004dff3
and dword [ebp - 0x5cc], 0
mov dword [ebp - 0xcc], 4
mov eax, dword [ebp - 0xcc]
imul eax, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x5cc]
imul ecx, eax
mov dword [ebp - 0x39c], ecx
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x39c]
mov dword [ebp + eax - 0x86c], ecx
mov eax, dword [ebp - 0x39c]
sub eax, dword [ebp - 0x6c]
add eax, dword [ebp - 0x6c]
sub eax, dword [ebp - 0xbc]
cmp eax, dword [ebp - 0x6c]
jl 0x1004e04c
mov dword [ebp - 0x514], 1
jmp 0x1004e053
and dword [ebp - 0x514], 0
cmp dword [ebp - 0x514], 0
je 0x1004e1e8
mov dword [ebp - 0x18c], 0xffffffff
mov dword [ebp - 0x144], 0xd9fabaf1
cmp dword [ebp - 0x6c], 0x912e
jne 0x1004e089
mov dword [ebp - 0x63c], 1
jmp 0x1004e090
and dword [ebp - 0x63c], 0
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0xa0c], eax
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0x9e0], eax
mov eax, dword [ebp - 0x18c]
cmp dword [ebp - 0x6c], eax
jne 0x1004e0bf
mov dword [ebp - 0x320], 1
jmp 0x1004e0c6
and dword [ebp - 0x320], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x320]
mov dword [ebp + eax - 0x86c], ecx
mov eax, dword [ebp - 0xbc]
cmp dword [ebp - 0x320], eax
jl 0x1004e0ee
cmp dword [ebp - 0x144], 0
mov eax, dword [ebp - 0x144]
add eax, 0x563b52eb
mov dword [ebp - 0xcc], eax
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0xae0], eax
mov eax, dword [ebp - 0x144]
mov dword [ebp - 0xa08], eax
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x1e4], eax
je 0x1004e12b
mov dword [ebp - 0x3a4], 1
jmp 0x1004e132
and dword [ebp - 0x3a4], 0
mov eax, dword [ebp - 0x3a4]
sub eax, dword [ebp - 0x1e4]
mov dword [ebp - 0x18c], eax
je 0x1004e15b
cmp dword [ebp - 0xcc], 0
je 0x1004e15b
mov dword [ebp - 0x3ac], 1
jmp 0x1004e162
and dword [ebp - 0x3ac], 0
mov eax, dword [ebp - 0x6c]
add eax, dword [ebp - 0x63c]
cmp eax, dword [ebp - 0x3ac]
jne 0x1004e17f
mov dword [ebp - 0x51c], 1
jmp 0x1004e186
and dword [ebp - 0x51c], 0
mov eax, dword [ebp - 0x144]
cmp dword [ebp - 0x51c], eax
jl 0x1004e1a0
mov dword [ebp - 0x3b4], 1
jmp 0x1004e1a7
and dword [ebp - 0x3b4], 0
mov eax, dword [ebp - 0x144]
cmp dword [ebp - 0x3b4], eax
jl 0x1004e1c1
mov dword [ebp - 0x784], 1
jmp 0x1004e1c8
and dword [ebp - 0x784], 0
imul eax, dword [ebp - 0xbc], 7
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0x1e4], eax
push 1
call fcn.1004b5aa
pop ecx
jmp 0x1004e493
mov dword [ebp - 0xd4], 0x785e8a77
push 1
lea ecx, [ebp - 0x96c]
call fcn.10018732
mov dword [ebp - 4], 1
push 4
lea ecx, [ebp - 0x878]
call fcn.10018732
mov byte [ebp - 4], 2
mov dword [ebp - 0x52c], 1
lea eax, [ebp - 0x96c]
push eax
push 0
lea eax, [ebp - 0x10c]
push eax
call fcn.1004d2ff
add esp, 0xc
mov dword [ebp - 0x10c], 0
jmp 0x1004e252
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 4
jge 0x1004e274
push dword [ebp - 0x10c]
lea ecx, [ebp - 0x878]
call fcn.100187be
mov dword [eax], 0x7260e960
jmp 0x1004e245
cmp dword [ebp - 0xd4], 0
jne 0x1004e3f7
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0xaa8], eax
cmp dword [ebp - 0xd4], 6
jbe 0x1004e2a2
mov dword [ebp - 0x5d4], 1
jmp 0x1004e2a9
and dword [ebp - 0x5d4], 0
mov eax, dword [ebp - 0x5d4]
sub eax, dword [ebp - 0xd4]
jne 0x1004e2c9
cmp dword [ebp - 0xd4], 0
jne 0x1004e2c9
and dword [ebp - 0x3bc], 0
jmp 0x1004e2d3
mov dword [ebp - 0x3bc], 1
mov eax, dword [ebp - 0xd4]
cmp dword [ebp - 0x3bc], eax
jl 0x1004e2ed
mov dword [ebp - 0x524], 1
jmp 0x1004e2f4
and dword [ebp - 0x524], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x86c]
cmp dword [ebp - 0x524], eax
jne 0x1004e315
mov dword [ebp - 0x78c], 1
jmp 0x1004e31c
and dword [ebp - 0x78c], 0
push 0
lea ecx, [ebp - 0x878]
call fcn.100187be
mov ecx, dword [ebp - 0xbc]
cmp dword [eax], ecx
je 0x1004e340
xor eax, eax
jne 0x1004e340
and dword [ebp - 0x3c4], 0
jmp 0x1004e34a
mov dword [ebp - 0x3c4], 1
mov eax, dword [ebp - 0xbc]
cmp dword [ebp - 0x3c4], eax
jg 0x1004e364
mov dword [ebp - 0x630], 1
jmp 0x1004e36b
and dword [ebp - 0x630], 0
push 0
lea ecx, [ebp - 0x96c]
call fcn.100187be
mov dword [eax], 0x182
cmp dword [ebp - 0x630], 0x182
jl 0x1004e396
mov dword [ebp - 0x3cc], 1
jmp 0x1004e39d
and dword [ebp - 0x3cc], 0
mov eax, dword [ebp - 0x3cc]
mov dword [ebp - 0x52c], eax
mov eax, dword [ebp - 0x52c]
sub eax, dword [ebp - 0x6c]
je 0x1004e3d2
push 3
lea ecx, [ebp - 0x878]
call fcn.100187be
cmp dword [eax], 0
je 0x1004e3d2
mov dword [ebp - 0x3d4], 1
jmp 0x1004e3d9
and dword [ebp - 0x3d4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x86c]
cmp dword [ebp - 0x3d4], eax
jg 0x1004e3f7
and dword [ebp - 0x5dc], 0
jmp 0x1004e401
mov dword [ebp - 0x5dc], 1
cmp dword [ebp - 0x5dc], 0xa5f72677
jne 0x1004e419
mov dword [ebp - 0x3dc], 1
jmp 0x1004e420
and dword [ebp - 0x3dc], 0
mov eax, dword [ebp - 0xd4]
cmp dword [ebp - 0x3dc], eax
je 0x1004e43f
or eax, 0xffffffff
je 0x1004e43f
mov dword [ebp - 0x2cc], 1
jmp 0x1004e446
and dword [ebp - 0x2cc], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2cc]
mov dword [ebp + eax - 0x86c], ecx
mov eax, dword [ebp - 0x2cc]
mov dword [ebp - 0x1e4], eax
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x86c], 0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x878]
call fcn.100187b9
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x96c]
call fcn.100187b9
mov eax, dword [ebp - 0x48]
cmp dword [eax + 4], 0
jne 0x1004e4a1
jmp 0x10052ff3
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x194], 0
jmp 0x1004e4c1
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 1
jge 0x1004e4dd
mov eax, dword [ebp - 0x194]
mov dword [ebp + eax*4 - 0x794], 0xfffffffb
jmp 0x1004e4b4
mov dword [ebp - 0x80], 0
jmp 0x1004e4ed
mov eax, dword [ebp - 0x80]
dec eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0
jl 0x1004e504
mov eax, dword [ebp - 0x80]
cmp dword [ebp + eax*4 - 0x794], 0
je 0x1004e502
jmp 0x1004e504
jmp 0x1004e4e6
mov dword [ebp - 0x80], 0xc
jmp 0x1004e514
mov eax, dword [ebp - 0x80]
dec eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0xfffffffb
jge 0x1004e531
mov dword [ebp - 0x79c], 0xffffffff
cmp dword [ebp - 0x79c], 0
je 0x1004e52f
jmp 0x1004e531
jmp 0x1004e50d
and dword [ebp - 0x34], 0
mov dword [ebp - 0x60], 0xce12
push 2
lea ecx, [ebp - 0x924]
call fcn.10018732
mov dword [ebp - 4], 3
mov dword [ebp - 0x7bc], 0xffffffff
lea eax, [ebp - 0x924]
push eax
push 0x1407
push 1
lea eax, [ebp - 0xa10]
push eax
call fcn.1004b5ea
add esp, 0x10
mov dword [ebp - 0x60], 0xfffffff6
mov dword [ebp - 0x60], 0
jmp 0x1004e58e
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 1
jg 0x1004e72b
mov dword [ebp - 0x7ac], 7
mov dword [ebp - 0x7a4], 0x4198d72a
push 3
lea ecx, [ebp - 0x6b8]
call fcn.10018732
mov byte [ebp - 4], 4
mov dword [ebp - 0x7b4], 0x67b4
mov dword [ebp - 0x7cc], 0x83adeb94
push 0
lea eax, [ebp - 0x6b8]
push eax
lea eax, [ebp - 0xad0]
push eax
push 0x4623
call fcn.1004d53d
add esp, 0x10
push 0x5b37
push 0x34b7
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp - 0x7a4]
push eax
push 0x61dd
push 0x6e29
lea eax, [ebp - 0x6b8]
push eax
lea eax, [ebp - 0x7ac]
push eax
push 1
call fcn.1004b65b
add esp, 0x24
mov eax, dword [ebp - 0x7b4]
mov dword [ebp - 0xa1c], eax
cmp dword [ebp - 0x7bc], 0
je 0x1004e664
push dword [ebp - 0x60]
lea ecx, [ebp - 0x924]
call fcn.100187be
mov dword [eax], 0x2ae4
mov eax, 0x2ae4
cmp eax, 2
jl 0x1004e664
mov dword [ebp - 0x534], 1
jmp 0x1004e66b
and dword [ebp - 0x534], 0
cmp dword [ebp - 0x534], 0xfffffff6
jl 0x1004e680
mov dword [ebp - 0x7c4], 1
jmp 0x1004e687
and dword [ebp - 0x7c4], 0
push 2
lea ecx, [ebp - 0x6b8]
call fcn.100187be
push 2
lea ecx, [ebp - 0x6b8]
call fcn.100187be
mov ecx, dword [ebp - 0x60]
cmp dword [eax], ecx
jl 0x1004e6b4
mov dword [ebp - 0x3e4], 1
jmp 0x1004e6bb
and dword [ebp - 0x3e4], 0
mov eax, dword [ebp - 0x7cc]
cmp dword [ebp - 0x3e4], eax
jne 0x1004e6d5
mov dword [ebp - 0x7d4], 1
jmp 0x1004e6dc
and dword [ebp - 0x7d4], 0
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0xab0], eax
cmp dword [ebp - 0x60], 5
jbe 0x1004e6f7
mov dword [ebp - 0x678], 1
jmp 0x1004e6fe
and dword [ebp - 0x678], 0
imul esi, dword [ebp - 0x678], 0x4257
push 2
lea ecx, [ebp - 0x6b8]
call fcn.100187be
mov dword [eax], esi
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x6b8]
call fcn.100187b9
jmp 0x1004e587
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x924]
call fcn.100187b9
mov eax, dword [ebp - 0x94]
movzx eax, word [eax + 0x14]
mov ecx, dword [ebp - 0x94]
lea eax, [ecx + eax + 0x18]
mov dword [ebp - 0xe0], eax
push 3
lea ecx, [ebp - 0x7e4]
call fcn.10018732
mov dword [ebp - 4], 5
mov dword [ebp - 0x810], 0x29c1464f
push 0x3a0f
lea eax, [ebp - 0x7e4]
push eax
push 0x4d6e
push 0xcb9
push 0x7ef3
push 0x3bab
push 0xd75
push 1
lea eax, [ebp - 0xa28]
push eax
push 0x2d12
call fcn.1004b8eb
add esp, 0x28
push 1
lea ecx, [ebp - 0x7e4]
call fcn.100187be
and dword [eax], 0
jmp 0x1004e7e3
push 1
lea ecx, [ebp - 0x7e4]
call fcn.100187be
mov dword [ebp - 0x3ec], eax
mov eax, dword [ebp - 0x3ec]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x3ec]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x7e4]
call fcn.100187be
cmp dword [eax], 0
jne 0x1004e81e
mov dword [ebp - 0x740], 0
lea eax, [ebp - 0x810]
push eax
push 0
lea eax, [ebp - 0x740]
push eax
push 0x56d1
call fcn.1004bccc
add esp, 0x10
jmp 0x1004e7bf
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7e4]
call fcn.100187b9
and dword [ebp - 0x2fc], 0
jmp 0x1004e852
mov eax, dword [ebp - 0x2fc]
inc eax
mov dword [ebp - 0x2fc], eax
mov eax, dword [ebp - 0xe0]
add eax, 0x28
mov dword [ebp - 0xe0], eax
mov eax, dword [ebp - 0x94]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x2fc], eax
jge 0x1004e8d3
mov eax, dword [ebp - 0xe0]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x53c], eax
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x53c]
jb 0x1004e8ce
mov eax, dword [ebp - 0x94]
push dword [eax + 0x38]
mov eax, dword [ebp - 0xe0]
push dword [eax + 8]
call fcn.1004b239
pop ecx
pop ecx
add eax, dword [ebp - 0x53c]
mov dword [ebp - 0x7f8], eax
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x7f8]
jae 0x1004e8ce
push 0
lea eax, [ebp - 0x34]
push eax
push 0x414e
lea eax, [ebp - 0xe0]
push eax
call fcn.1004d242
add esp, 0x10
jmp 0x1004e8d3
jmp 0x1004e836
push 4
lea ecx, [ebp - 0x884]
call fcn.10018732
mov dword [ebp - 4], 6
mov dword [ebp - 0xe4], 0xb546158d
mov dword [ebp - 0x1cc], 0
jmp 0x1004e90a
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 4
jge 0x1004e92c
push dword [ebp - 0x1cc]
lea ecx, [ebp - 0x884]
call fcn.100187be
mov dword [eax], 0xad6f2ee7
jmp 0x1004e8fd
mov dword [ebp - 0xe4], 0
jmp 0x1004e945
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 3
jg 0x1004ea09
mov dword [ebp - 0x134], 0x70a77c87
mov dword [ebp - 0x6bc], 0xffff
mov dword [ebp - 0x134], 0
jmp 0x1004e97f
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 3
jg 0x1004e9de
push 0
push 0x7ede
push 0x12ec
push 0x23e8
push 0x366e
push 0x5478
push 0x5fe5
push 0x269e
call fcn.1004cb0c
add esp, 0x20
push 0x776d
lea eax, [ebp - 0x884]
push eax
push 0x19ce
push 1
push 0x626c
lea eax, [ebp - 0xe4]
push eax
call fcn.1004ba63
add esp, 0x18
jmp 0x1004e972
lea eax, [ebp - 0xe4]
push eax
push 0
lea eax, [ebp - 0x6bc]
push eax
lea eax, [ebp - 0x884]
push eax
lea eax, [ebp - 0x134]
push eax
call fcn.1004bf9e
add esp, 0x14
jmp 0x1004e938
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x884]
call fcn.100187b9
cmp dword [ebp - 0x34], 0
jne 0x1004ea23
jmp 0x10052ff3
mov dword [ebp - 0x30], 0xfffffffa
mov dword [ebp - 0x2d4], 0x40421a16
push 3
lea ecx, [ebp - 0x93c]
call fcn.10018732
mov dword [ebp - 4], 7
push 3
lea ecx, [ebp - 0x900]
call fcn.10018732
mov byte [ebp - 4], 8
mov dword [ebp - 0x80c], 0x8fb0c4f3
mov dword [ebp - 0x74], 0
jmp 0x1004ea73
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 3
jge 0x1004ea8c
push dword [ebp - 0x74]
lea ecx, [ebp - 0x93c]
call fcn.100187be
and dword [eax], 0
jmp 0x1004ea6c
mov dword [ebp - 0x74], 0
jmp 0x1004ea9c
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 3
jge 0x1004eab8
push dword [ebp - 0x74]
lea ecx, [ebp - 0x900]
call fcn.100187be
mov dword [eax], 1
jmp 0x1004ea95
mov byte [ebp - 0xc5], 0
movzx eax, byte [ebp - 0xc5]
test eax, eax
je 0x1004eae7
push 0
push 0xa1b
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetTextExtentPoint32A]
mov dword [ebp - 0x30], 5
jmp 0x1004eaf7
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0x12
jge 0x1004eef7
mov dword [ebp - 0x3fc], 0x7df2f4a8
mov dword [ebp - 0x2dc], 0x21f1eb32
push 1
lea ecx, [ebp - 0x330]
call fcn.10018732
mov byte [ebp - 4], 9
mov dword [ebp - 0x114], 0xa6f63eed
mov dword [ebp - 0x6d0], 0xd3e67b33
mov dword [ebp - 0x424], 0x791a
mov dword [ebp - 0x19c], 0
jmp 0x1004eb5d
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 1
jge 0x1004eb7f
push dword [ebp - 0x19c]
lea ecx, [ebp - 0x330]
call fcn.100187be
mov dword [eax], 4
jmp 0x1004eb50
lea eax, [ebp - 0x330]
push eax
push 0x10c3
lea eax, [ebp - 0x30]
push eax
push 0x2c0d
lea eax, [ebp - 0x2dc]
push eax
lea eax, [ebp - 0x3fc]
push eax
push 0x349c
push 0x712d
push 0
push 0x3790
lea eax, [ebp - 0x114]
push eax
call fcn.1004ce8e
add esp, 0x2c
push 0
lea ecx, [ebp - 0x330]
call fcn.100187be
cmp dword [eax], 0
je 0x1004eed0
cmp dword [ebp - 0x30], 0
je 0x1004ee1b
push 0
lea ecx, [ebp - 0x330]
call fcn.100187be
cmp dword [eax], 0
jne 0x1004ee0f
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0xaf0], eax
push 0
lea ecx, [ebp - 0x330]
call fcn.100187be
cmp dword [eax], 0
jne 0x1004ec25
cmp dword [ebp - 0x30], 0
jne 0x1004ec25
and dword [ebp - 0x3f4], 0
jmp 0x1004ec2f
mov dword [ebp - 0x3f4], 1
mov eax, dword [ebp - 0x3f4]
sub eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jl 0x1004ec49
mov dword [ebp - 0x6c8], 1
jmp 0x1004ec50
and dword [ebp - 0x6c8], 0
push 0
lea ecx, [ebp - 0x330]
call fcn.100187be
xor eax, eax
inc eax
jne 0x1004ec74
mov eax, 0x78be
test eax, eax
jne 0x1004ec74
and dword [ebp - 0x5e4], 0
jmp 0x1004ec7e
mov dword [ebp - 0x5e4], 1
mov eax, dword [ebp - 0x5e4]
mov dword [ebp - 0x2d4], eax
mov eax, dword [ebp - 0x2d4]
neg eax
cmp eax, dword [ebp - 0x114]
jge 0x1004eca3
cmp dword [ebp - 0x2d4], 0
je 0x1004ecb8
cmp dword [ebp - 0x3fc], 0
je 0x1004ecb8
mov dword [ebp - 0x544], 1
jmp 0x1004ecbf
and dword [ebp - 0x544], 0
mov eax, dword [ebp - 0x30]
imul eax, dword [ebp - 0x544]
cmp eax, 0x23f8c0e5
jne 0x1004ecdc
mov dword [ebp - 0x7a0], 1
jmp 0x1004ece3
and dword [ebp - 0x7a0], 0
mov eax, dword [ebp - 0x2dc]
mov dword [ebp - 0xa38], eax
mov esi, dword [ebp - 0x30]
push 0
lea ecx, [ebp - 0x330]
call fcn.100187be
cmp esi, dword [eax]
jne 0x1004ed0f
mov dword [ebp - 0x404], 1
jmp 0x1004ed16
and dword [ebp - 0x404], 0
mov eax, dword [ebp - 0x6d0]
cmp dword [ebp - 0x404], eax
jge 0x1004ed30
mov dword [ebp - 0x638], 1
jmp 0x1004ed37
and dword [ebp - 0x638], 0
cmp dword [ebp - 0x638], 6
jne 0x1004ed4c
mov dword [ebp - 0x40c], 1
jmp 0x1004ed53
and dword [ebp - 0x40c], 0
cmp dword [ebp - 0x40c], 0xfffd
je 0x1004ed6b
mov dword [ebp - 0x310], 1
jmp 0x1004ed72
and dword [ebp - 0x310], 0
push 0
lea ecx, [ebp - 0x93c]
call fcn.100187be
mov ecx, dword [ebp - 0x310]
mov dword [eax], ecx
cmp dword [ebp - 0x310], 0
je 0x1004eda3
push 9
pop eax
test eax, eax
je 0x1004eda3
mov dword [ebp - 0x54c], 1
jmp 0x1004edaa
and dword [ebp - 0x54c], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x54c], eax
jg 0x1004edc1
mov dword [ebp - 0x30c], 1
jmp 0x1004edc8
and dword [ebp - 0x30c], 0
push 2
lea ecx, [ebp - 0x900]
call fcn.100187be
mov ecx, dword [ebp - 0x30c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x2dc]
cmp dword [ebp - 0x30c], eax
jne 0x1004edf7
mov dword [ebp - 0x414], 1
jmp 0x1004edfe
and dword [ebp - 0x414], 0
mov eax, dword [ebp - 0x30]
add eax, dword [ebp - 0x414]
mov dword [ebp - 0x114], eax
je 0x1004ee1b
mov dword [ebp - 0x5ec], 1
jmp 0x1004ee22
and dword [ebp - 0x5ec], 0
cmp dword [ebp - 0x5ec], 2
jl 0x1004ee37
mov dword [ebp - 0x41c], 1
jmp 0x1004ee3e
and dword [ebp - 0x41c], 0
mov esi, dword [ebp - 0x41c]
sub esi, dword [ebp - 0x30]
push 0
lea ecx, [ebp - 0x330]
call fcn.100187be
cmp esi, dword [eax]
jg 0x1004ee64
mov dword [ebp - 0x554], 1
jmp 0x1004ee6b
and dword [ebp - 0x554], 0
mov eax, dword [ebp - 0x424]
cmp dword [ebp - 0x554], eax
jge 0x1004ee85
mov dword [ebp - 0x658], 1
jmp 0x1004ee8c
and dword [ebp - 0x658], 0
mov eax, dword [ebp - 0x424]
cmp dword [ebp - 0x658], eax
jne 0x1004eea6
mov dword [ebp - 0x42c], 1
jmp 0x1004eead
and dword [ebp - 0x42c], 0
push 0
lea ecx, [ebp - 0x330]
call fcn.100187be
mov ecx, dword [ebp - 0x42c]
cmp ecx, dword [eax]
je 0x1004eed0
mov dword [ebp - 0x55c], 1
jmp 0x1004eed7
and dword [ebp - 0x55c], 0
mov eax, dword [ebp - 0x55c]
mov dword [ebp - 0x80c], eax
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x330]
call fcn.100187b9
jmp 0x1004eaf0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x900]
call fcn.100187b9
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x93c]
call fcn.100187b9
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x34]
add ecx, dword [eax]
add ecx, dword [ebp - 0x28]
mov dword [ebp - 0x10], ecx
xor ecx, ecx
call fcn.1003473e
push eax
call fcn.10075d08
pop ecx
mov dword [ebp - 0x6e0], 0
mov dword [ebp - 0x6d8], 0x32ffab8c
push 2
lea ecx, [ebp - 0x960]
call fcn.10018732
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x7a8], 0
mov dword [ebp - 0xab8], 8
push 1
lea ecx, [ebp - 0xa34]
call fcn.10018732
mov byte [ebp - 4], 0xb
mov dword [ebp - 0xa48], 0x2ad14ca7
mov dword [ebp - 0x808], 0
lea eax, [ebp - 0x68]
push eax
push 0
push 0x1da9
lea eax, [ebp - 0x960]
push eax
call fcn.1004d8f5
add esp, 0x10
mov dword [ebp - 0x68], 0
jmp 0x1004efbc
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 2
jge 0x1004efd2
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0xb2c], 1
jmp 0x1004efb5
mov dword [ebp - 0x68], 0
jmp 0x1004efe2
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 1
jge 0x1004effe
push dword [ebp - 0x68]
lea ecx, [ebp - 0xa34]
call fcn.100187be
mov dword [eax], 0x6c49a7e1
jmp 0x1004efdb
push 0x4388
lea eax, [ebp - 0x6d8]
push eax
push 0x6ee9
lea eax, [ebp - 0x7a8]
push eax
lea eax, [ebp - 0x960]
push eax
lea eax, [ebp - 0x6e0]
push eax
push 0
push 0x6783
push 0x3f46
call fcn.1004d6fb
add esp, 0x24
push 1
lea eax, [ebp - 0x808]
push eax
call fcn.1004bc46
pop ecx
pop ecx
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xa34]
call fcn.100187b9
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x960]
call fcn.100187b9
mov dword [ebp - 0x830], 0xfffffff6
mov dword [ebp - 0x82c], 0xfffffff6
mov dword [ebp - 0x828], 0xfffffff6
mov dword [ebp - 0x824], 0xfffffff6
mov dword [ebp - 0x154], 0
mov dword [ebp - 0x2e4], 0xeea2
mov dword [ebp - 0x154], 3
jmp 0x1004f0bb
mov eax, dword [ebp - 0x154]
dec eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 0
jl 0x1004f0dd
mov byte [ebp - 0x8d], 0
push 1
lea eax, [ebp - 0x8d]
push eax
call fcn.1004bc78
pop ecx
pop ecx
jmp 0x1004f0ae
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x830]
mov dword [ebp - 0xad8], eax
mov dword [ebp - 0x2e4], 0xffffffff
cmp dword [ebp - 0x2e4], 0
jne 0x1004f1b4
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x830], 0x5bfc
jne 0x1004f126
mov dword [ebp - 0x43c], 1
jmp 0x1004f12d
and dword [ebp - 0x43c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x830]
cmp dword [ebp - 0x2e4], eax
je 0x1004f14d
mov dword [ebp - 0x434], 1
jmp 0x1004f154
and dword [ebp - 0x434], 0
cmp dword [ebp - 0x434], 0x6aa16542
jne 0x1004f16c
mov dword [ebp - 0x5f4], 1
jmp 0x1004f173
and dword [ebp - 0x5f4], 0
cmp dword [ebp - 0x5f4], 9
jge 0x1004f188
mov dword [ebp - 0x6e8], 1
jmp 0x1004f18f
and dword [ebp - 0x6e8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x830]
mov dword [ebp - 0xa58], eax
cmp dword [ebp - 0x43c], 0xfffffffa
je 0x1004f1b4
and dword [ebp - 0x564], 0
jmp 0x1004f1be
mov dword [ebp - 0x564], 1
mov eax, dword [ebp - 0x564]
mov dword [ebp - 0x154], eax
mov byte [ebp - 0x270], 4
mov byte [ebp - 0x26f], 0x72
mov byte [ebp - 0x26e], 9
mov byte [ebp - 0x26d], 8
mov byte [ebp - 0x26c], 8
mov byte [ebp - 0x26b], 0
mov byte [ebp - 0x26a], 0
mov byte [ebp - 0x269], 1
mov byte [ebp - 0x268], 2
mov byte [ebp - 0x267], 6
mov byte [ebp - 0x266], 0x35
mov byte [ebp - 0x265], 0xf3
mov byte [ebp - 0x264], 0x78
mov byte [ebp - 0x263], 0x40
mov byte [ebp - 0x262], 0x18
mov byte [ebp - 0x261], 0x2c
mov byte [ebp - 0x260], 0x72
mov byte [ebp - 0x25f], 0xde
mov byte [ebp - 0x25e], 0x31
mov byte [ebp - 0x25d], 0xa1
mov byte [ebp - 0x25c], 0x4c
mov byte [ebp - 0x25b], 5
mov byte [ebp - 0x25a], 0x66
mov byte [ebp - 0x259], 0xcc
mov byte [ebp - 0x258], 0xb8
mov byte [ebp - 0x257], 0x19
mov byte [ebp - 0x256], 0xc5
mov byte [ebp - 0x255], 0x6a
mov byte [ebp - 0x254], 0x76
mov byte [ebp - 0x253], 0xaa
mov byte [ebp - 0x252], 0xf6
mov byte [ebp - 0x251], 0xcd
mov byte [ebp - 0x250], 0xfe
mov byte [ebp - 0x24f], 0x41
mov byte [ebp - 0x24e], 0x50
mov byte [ebp - 0x24d], 0xdd
mov byte [ebp - 0x24c], 0x91
mov byte [ebp - 0x24b], 0xfe
mov byte [ebp - 0x24a], 0xf
mov byte [ebp - 0x249], 0x4d
mov byte [ebp - 0x248], 0x21
mov byte [ebp - 0x247], 0x2b
mov byte [ebp - 0x246], 0xb2
mov byte [ebp - 0x245], 0xca
mov byte [ebp - 0x244], 0xcb
mov byte [ebp - 0x243], 0x1c
mov byte [ebp - 0x242], 0xde
mov byte [ebp - 0x241], 0xb7
mov byte [ebp - 0x240], 0xd7
mov byte [ebp - 0x23f], 0x18
mov byte [ebp - 0x23e], 0x4c
mov byte [ebp - 0x23d], 0x96
mov byte [ebp - 0x23c], 0xe2
mov byte [ebp - 0x23b], 0x87
mov byte [ebp - 0x23a], 0xaa
mov byte [ebp - 0x239], 0xcc
mov byte [ebp - 0x238], 0xbd
mov byte [ebp - 0x237], 0xbf
mov byte [ebp - 0x236], 0x6f
mov byte [ebp - 0x235], 0x65
mov byte [ebp - 0x234], 0xa6
mov byte [ebp - 0x233], 0x1a
mov byte [ebp - 0x232], 0x88
mov byte [ebp - 0x231], 0xeb
mov byte [ebp - 0x230], 1
mov byte [ebp - 0x22f], 2
mov byte [ebp - 0x22e], 3
mov byte [ebp - 0x22d], 2
mov byte [ebp - 0x22c], 7
mov byte [ebp - 0x22b], 1
mov byte [ebp - 0x22a], 5
mov byte [ebp - 0x229], 7
mov byte [ebp - 0x228], 6
mov byte [ebp - 0x227], 0
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x270]
or eax, 0x4a
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x270]
and ecx, 0x4a
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x270]
mov byte [ebp + ecx - 0x688], al
mov dword [ebp - 0x20], 2
and dword [ebp - 0x11c], 0
jmp 0x1004f421
mov eax, dword [ebp - 0x20]
inc eax
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x4a
jae 0x1004f513
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x270]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x20], eax
jne 0x1004f46b
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x270]
inc eax
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x270]
mov ecx, dword [ebp - 0x20]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x20], eax
jmp 0x1004f419
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x26f]
mov ecx, dword [ebp - 0x20]
sub ecx, dword [ebp - 0x11c]
movzx ecx, byte [ebp + ecx - 0x272]
movsx ecx, byte [ebp + ecx - 0x688]
add eax, ecx
mov ecx, dword [ebp - 0x20]
movzx ecx, byte [ebp + ecx - 0x26f]
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x11c]
movzx edx, byte [ebp + edx - 0x272]
movsx edx, byte [ebp + edx - 0x688]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x20]
movzx ecx, byte [ebp + ecx - 0x26f]
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x11c]
movzx edx, byte [ebp + edx - 0x272]
movsx edx, byte [ebp + edx - 0x688]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x20]
movzx ecx, byte [ebp + ecx - 0x270]
mov byte [ebp + ecx - 0x688], al
push 0x462e
push 1
push 0x2579
lea eax, [ebp - 0x11c]
push eax
call fcn.1004bccc
add esp, 0x10
jmp 0x1004f419
xor eax, eax
inc eax
imul eax, eax, 0xa
mov byte [ebp + eax - 0x688], 0
mov dword [ebp - 0x1f0], 0x73838a1f
mov dword [ebp - 0xac0], 0xc3938dd4
mov dword [ebp - 0x980], 0x193e0566
mov dword [ebp - 0x7b0], 0xfffffffd
mov dword [ebp - 0x24], 0
jmp 0x1004f559
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x1004f56f
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xc34], 0
jmp 0x1004f552
mov dword [ebp - 0x24], 0
jmp 0x1004f57f
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jge 0x1004f595
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x9ec], 0xf7921e12
jmp 0x1004f578
mov dword [ebp - 0x24], 0
jmp 0x1004f5a5
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x1004f5bb
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x984], 0x1d99ea5d
jmp 0x1004f59e
mov dword [ebp - 0x1f0], 2
jmp 0x1004f5d4
mov eax, dword [ebp - 0x1f0]
dec eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 0
jl 0x1004f6ab
mov dword [ebp - 0x98c], 0xb1658084
mov dword [ebp - 0x994], 0
mov dword [ebp - 0x99c], 0
mov dword [ebp - 0x9a4], 0
mov dword [ebp - 0x9ac], 0x6310fe
mov dword [ebp - 0x9b4], 0xffffffff
push 3
lea ecx, [ebp - 0xa44]
call fcn.10018732
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x9bc], 0
mov dword [ebp - 0x444], 1
push 0x125f
push 0x5297
push 0x42f6
push 0x4807
lea eax, [ebp - 0xa44]
push eax
push 0xd18
push 0x260e
push 0x7f2f
push 0x6c67
push 0
lea eax, [ebp - 0x9c4]
push eax
push 0x1d94
call fcn.1004bdca
add esp, 0x30
mov eax, dword [ebp - 0x444]
inc eax
mov dword [ebp - 0x444], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa44]
call fcn.100187b9
jmp 0x1004f5c7
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x7b0]
mov dword [ebp + eax - 0x9ec], ecx
lea eax, [ebp - 0x688]
push eax
lea ecx, [ebp - 0xbd4]
call fcn.100287d4
mov dword [ebp - 0x6f0], eax
mov eax, dword [ebp - 0x6f0]
mov dword [ebp - 0x814], eax
mov dword [ebp - 4], 0xd
push 0xa
xor edx, edx
mov ecx, dword [ebp - 0x814]
call fcn.10034703
pop ecx
mov dword [ebp - 0x764], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xbd4]
call fcn.10018694
and dword [ebp - 0x1a4], 0
jmp 0x1004f724
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 0xb
jae 0x1004f73d
mov eax, dword [ebp - 0x1a4]
mov byte [ebp + eax - 0x688], 0
jmp 0x1004f717
push 2
lea ecx, [ebp - 0x33c]
call fcn.10018732
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x38], 1
mov dword [ebp - 0x7b8], 0xa7c6dd3
mov dword [ebp - 0x9cc], 0
push 0x71b8
push 0x7fe7
push 1
lea eax, [ebp - 0x33c]
push eax
lea eax, [ebp - 0x9d4]
push eax
push 0x31ef
call fcn.1004bd33
add esp, 0x18
mov dword [ebp - 0x38], 0
jmp 0x1004f7a3
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 1
jg 0x1004f8fd
mov dword [ebp - 0x314], 0xffffffff
mov dword [ebp - 0x6f8], 0xa048c840
push dword [ebp - 0x38]
lea ecx, [ebp - 0x33c]
call fcn.100187be
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x9dc], eax
cmp dword [ebp - 0x38], 0
je 0x1004f7fd
push dword [ebp - 0x38]
lea ecx, [ebp - 0x33c]
call fcn.100187be
cmp dword [eax], 0
je 0x1004f7fd
mov dword [ebp - 0x640], 1
jmp 0x1004f804
and dword [ebp - 0x640], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x640], eax
jne 0x1004f81b
mov dword [ebp - 0x44c], 1
jmp 0x1004f822
and dword [ebp - 0x44c], 0
push dword [ebp - 0x38]
lea ecx, [ebp - 0x33c]
call fcn.100187be
mov ecx, dword [ebp - 0x44c]
cmp ecx, dword [eax]
jge 0x1004f846
mov dword [ebp - 0x56c], 1
jmp 0x1004f84d
and dword [ebp - 0x56c], 0
push dword [ebp - 0x38]
lea ecx, [ebp - 0x33c]
call fcn.100187be
mov ecx, dword [ebp - 0x56c]
cmp ecx, dword [eax]
jne 0x1004f871
mov dword [ebp - 0x454], 1
jmp 0x1004f878
and dword [ebp - 0x454], 0
mov eax, dword [ebp - 0x454]
mov dword [ebp - 0x314], eax
mov esi, dword [ebp - 0x314]
push dword [ebp - 0x38]
lea ecx, [ebp - 0x33c]
call fcn.100187be
cmp dword [eax], esi
jge 0x1004f8a8
mov dword [ebp - 0x5fc], 1
jmp 0x1004f8af
and dword [ebp - 0x5fc], 0
push 1
lea ecx, [ebp - 0x33c]
call fcn.100187be
mov ecx, dword [ebp - 0x5fc]
mov dword [eax], ecx
push 0x6464
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x314]
push eax
lea eax, [ebp - 0x6f8]
push eax
lea eax, [ebp - 0x7b8]
push eax
push 0
push 0x6ce1
lea eax, [ebp - 0x33c]
push eax
call fcn.1004c7b1
add esp, 0x20
jmp 0x1004f79c
mov byte [ebp - 0xbe], 0
movzx eax, byte [ebp - 0xbe]
test eax, eax
je 0x1004f923
push 0x1a4
push 0
push 0x4292
call fcn.1004d148
add esp, 0xc
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x33c]
call fcn.100187b9
mov dword [ebp - 0x124], 0x3e713e19
mov dword [ebp - 0x8b8], 0xffff
mov dword [ebp - 0x8b4], 0xffff
mov dword [ebp - 0x8b0], 0xffff
mov dword [ebp - 0x8ac], 0xffff
lea ecx, [ebp - 0x2dd]
call fcn.10009623
push eax
lea eax, [ebp - 0x8a8]
push eax
lea eax, [ebp - 0x8b8]
push eax
lea ecx, [ebp - 0xb64]
call fcn.100187cd
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x978]
call fcn.10018793
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x13c], 0x8716b5b3
mov dword [ebp - 0x14c], 0xb56411d7
mov dword [ebp - 0x484], 0xfffffffe
mov dword [ebp - 0x648], 0
mov dword [ebp - 0x744], 0x376e30f4
mov dword [ebp - 0x708], 1
mov dword [ebp - 0x73c], 0xdcf28d0d
push 4
pop eax
test eax, eax
je 0x1004faa6
cmp dword [ebp - 0x124], 0
jg 0x1004fa06
mov dword [ebp - 0x45c], 1
jmp 0x1004fa0d
and dword [ebp - 0x45c], 0
mov eax, dword [ebp - 0x45c]
mov dword [ebp - 0x124], eax
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0x574], eax
push 2
lea ecx, [ebp - 0x978]
call fcn.100187be
mov ecx, dword [ebp - 0x574]
mov dword [eax], ecx
mov eax, dword [ebp - 0x13c]
cmp dword [ebp - 0x574], eax
jge 0x1004fa54
mov dword [ebp - 0x464], 1
jmp 0x1004fa5b
and dword [ebp - 0x464], 0
cmp dword [ebp - 0x464], 0x8d5feaf8
jb 0x1004fa75
xor eax, eax
inc eax
jne 0x1004fa75
and dword [ebp - 0x668], 0
jmp 0x1004fa7f
mov dword [ebp - 0x668], 1
mov eax, dword [ebp - 0x13c]
add eax, dword [ebp - 0x668]
mov dword [ebp - 0x13c], eax
je 0x1004faa6
push 0xfffffffffffffffd
pop eax
test eax, eax
je 0x1004faa6
mov dword [ebp - 0x46c], 1
jmp 0x1004faad
and dword [ebp - 0x46c], 0
mov eax, dword [ebp - 0x14c]
cmp dword [ebp - 0x46c], eax
jl 0x1004fac7
mov dword [ebp - 0x57c], 1
jmp 0x1004face
and dword [ebp - 0x57c], 0
cmp dword [ebp - 0x57c], 0xffffffff
jne 0x1004fae3
mov dword [ebp - 0x474], 1
jmp 0x1004faea
and dword [ebp - 0x474], 0
mov eax, dword [ebp - 0x14c]
cmp dword [ebp - 0x474], eax
jg 0x1004fb04
mov dword [ebp - 0x604], 1
jmp 0x1004fb0b
and dword [ebp - 0x604], 0
cmp dword [ebp - 0x604], 0x80c
jle 0x1004fb23
mov dword [ebp - 0x700], 1
jmp 0x1004fb2a
and dword [ebp - 0x700], 0
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x9e4], eax
mov eax, dword [ebp - 0x484]
mov dword [ebp - 0xab4], eax
mov eax, dword [ebp - 0x648]
cmp dword [ebp - 0x124], eax
je 0x1004fb5c
mov dword [ebp - 0x47c], 1
jmp 0x1004fb63
and dword [ebp - 0x47c], 0
cmp dword [ebp - 0x47c], 0x7617
jl 0x1004fb7b
mov dword [ebp - 0x584], 1
jmp 0x1004fb82
and dword [ebp - 0x584], 0
mov eax, dword [ebp - 0x584]
mov dword [ebp - 0x14c], eax
lea eax, [ebp - 0x978]
push eax
lea eax, [ebp - 0x73c]
push eax
lea eax, [ebp - 0x708]
push eax
lea eax, [ebp - 0x484]
push eax
push 0x40bc
lea eax, [ebp - 0x744]
push eax
lea eax, [ebp - 0x13c]
push eax
lea eax, [ebp - 0x648]
push eax
lea eax, [ebp - 0x124]
push eax
push 1
push 0x3965
lea eax, [ebp - 0x14c]
push eax
call fcn.1004bdca
add esp, 0x30
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x978]
call fcn.100187b9
mov byte [ebp - 0x224], 7
mov byte [ebp - 0x223], 0x70
mov byte [ebp - 0x222], 8
mov byte [ebp - 0x221], 6
mov byte [ebp - 0x220], 0
mov byte [ebp - 0x21f], 1
mov byte [ebp - 0x21e], 2
mov byte [ebp - 0x21d], 6
mov byte [ebp - 0x21c], 9
mov byte [ebp - 0x21b], 7
mov byte [ebp - 0x21a], 5
mov byte [ebp - 0x219], 1
mov byte [ebp - 0x218], 4
mov byte [ebp - 0x217], 5
mov byte [ebp - 0x216], 1
mov byte [ebp - 0x215], 2
mov byte [ebp - 0x214], 0x1c
mov byte [ebp - 0x213], 0x49
mov byte [ebp - 0x212], 0x4d
mov byte [ebp - 0x211], 0xf7
mov byte [ebp - 0x210], 0xfb
mov byte [ebp - 0x20f], 0xaa
mov byte [ebp - 0x20e], 0xc8
mov byte [ebp - 0x20d], 0x16
mov byte [ebp - 0x20c], 8
mov byte [ebp - 0x20b], 0x6d
mov byte [ebp - 0x20a], 0xef
mov byte [ebp - 0x209], 0xee
mov byte [ebp - 0x208], 0xca
mov byte [ebp - 0x207], 0x21
mov byte [ebp - 0x206], 0x34
mov byte [ebp - 0x205], 0xfd
mov byte [ebp - 0x204], 0x92
mov byte [ebp - 0x203], 0xd5
mov byte [ebp - 0x202], 0x3c
mov byte [ebp - 0x201], 0x13
mov byte [ebp - 0x200], 0xe9
mov byte [ebp - 0x1ff], 0x3b
mov byte [ebp - 0x1fe], 0x51
mov byte [ebp - 0x1fd], 0xf
mov byte [ebp - 0x1fc], 0x32
mov byte [ebp - 0x1fb], 0xda
mov byte [ebp - 0x1fa], 0x78
mov byte [ebp - 0x1f9], 0xae
mov byte [ebp - 0x1f8], 0x91
mov byte [ebp - 0x1f7], 3
mov byte [ebp - 0x1f6], 4
mov byte [ebp - 0x1f5], 6
mov byte [ebp - 0x1f4], 0xb
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x224]
or eax, 0x46
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x224]
and ecx, 0x46
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x224]
mov byte [ebp + ecx - 0x6a0], al
mov dword [ebp - 0x44], 2
and dword [ebp - 0x1d4], 0
jmp 0x1004fd98
mov eax, dword [ebp - 0x44]
inc eax
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0x31
jae 0x1004fe4e
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x224]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x44], eax
jne 0x1004fde2
mov eax, dword [ebp - 0x44]
movzx eax, byte [ebp + eax - 0x224]
inc eax
mov dword [ebp - 0x1d4], eax
mov eax, dword [ebp - 0x44]
movzx eax, byte [ebp + eax - 0x224]
mov ecx, dword [ebp - 0x44]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x44], eax
jmp 0x1004fd90
mov eax, dword [ebp - 0x44]
movzx eax, byte [ebp + eax - 0x223]
mov ecx, dword [ebp - 0x44]
sub ecx, dword [ebp - 0x1d4]
movzx ecx, byte [ebp + ecx - 0x226]
movsx ecx, byte [ebp + ecx - 0x6a0]
or eax, ecx
mov ecx, dword [ebp - 0x44]
movzx ecx, byte [ebp + ecx - 0x223]
mov edx, dword [ebp - 0x44]
sub edx, dword [ebp - 0x1d4]
movzx edx, byte [ebp + edx - 0x226]
movsx edx, byte [ebp + edx - 0x6a0]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x44]
movzx ecx, byte [ebp + ecx - 0x224]
mov byte [ebp + ecx - 0x6a0], al
and dword [ebp - 0x1d4], 0
jmp 0x1004fd90
xor eax, eax
inc eax
imul eax, eax, 0xa
mov byte [ebp + eax - 0x6a0], 0
mov dword [ebp - 0x844], 0xfffffff6
mov dword [ebp - 0x840], 0xfffffff6
mov dword [ebp - 0x83c], 0xfffffff6
mov dword [ebp - 0x838], 0xfffffff6
mov dword [ebp - 0x12c], 0
mov dword [ebp - 0x2ec], 0xeea2
mov dword [ebp - 0x12c], 3
jmp 0x1004feb1
mov eax, dword [ebp - 0x12c]
dec eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0
jl 0x1004feec
mov byte [ebp - 0xad], 0
movzx eax, byte [ebp - 0xad]
test eax, eax
je 0x1004feea
push 0x5db4
push 1
push 0x7903
push 0x58b3
push 0x3469
call fcn.1004bf9e
add esp, 0x14
jmp 0x1004fea4
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x844]
mov dword [ebp - 0xabc], eax
mov dword [ebp - 0x2ec], 0xffffffff
cmp dword [ebp - 0x2ec], 0
jne 0x1004ffc3
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x844], 0x5bfc
jne 0x1004ff35
mov dword [ebp - 0x494], 1
jmp 0x1004ff3c
and dword [ebp - 0x494], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x844]
cmp dword [ebp - 0x2ec], eax
je 0x1004ff5c
mov dword [ebp - 0x48c], 1
jmp 0x1004ff63
and dword [ebp - 0x48c], 0
cmp dword [ebp - 0x48c], 0x6aa16542
jne 0x1004ff7b
mov dword [ebp - 0x58c], 1
jmp 0x1004ff82
and dword [ebp - 0x58c], 0
cmp dword [ebp - 0x58c], 9
jge 0x1004ff97
mov dword [ebp - 0x710], 1
jmp 0x1004ff9e
and dword [ebp - 0x710], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x844]
mov dword [ebp - 0xac4], eax
cmp dword [ebp - 0x494], 0xfffffffa
je 0x1004ffc3
and dword [ebp - 0x60c], 0
jmp 0x1004ffcd
mov dword [ebp - 0x60c], 1
mov eax, dword [ebp - 0x60c]
mov dword [ebp - 0x12c], eax
lea eax, [ebp - 0x6a0]
push eax
lea ecx, [ebp - 0xc64]
call fcn.100287d4
mov dword [ebp - 0x74c], eax
mov eax, dword [ebp - 0x74c]
mov dword [ebp - 0x718], eax
mov dword [ebp - 4], 0x10
push 0xa
xor edx, edx
mov ecx, dword [ebp - 0x718]
call fcn.10034703
pop ecx
mov dword [ebp - 0x728], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc64]
call fcn.10018694
push 4
lea ecx, [ebp - 0x7f4]
call fcn.10018732
mov dword [ebp - 4], 0x11
mov dword [ebp - 0xc4], 0xb546158d
mov dword [ebp - 0x1ac], 0
jmp 0x10050060
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 4
jge 0x10050082
push dword [ebp - 0x1ac]
lea ecx, [ebp - 0x7f4]
call fcn.100187be
mov dword [eax], 0xad6f2ee7
jmp 0x10050053
mov dword [ebp - 0xc4], 0
jmp 0x1005009b
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 3
jg 0x1005014a
mov dword [ebp - 0xf8], 0x70a77c87
mov dword [ebp - 0x754], 0xffff
mov dword [ebp - 0xf8], 0
jmp 0x100500d5
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 3
jg 0x1005011f
mov byte [ebp - 0xbd], 0
push 0
lea eax, [ebp - 0xbd]
push eax
call fcn.1004ce3d
pop ecx
pop ecx
push dword [ebp - 0xc4]
lea ecx, [ebp - 0x7f4]
call fcn.100187be
mov esi, eax
push dword [ebp - 0xc4]
lea ecx, [ebp - 0x7f4]
call fcn.100187be
mov ecx, dword [esi]
mov dword [eax], ecx
jmp 0x100500c8
push 0
lea eax, [ebp - 0x7f4]
push eax
lea eax, [ebp - 0xc4]
push eax
lea eax, [ebp - 0x754]
push eax
lea eax, [ebp - 0xf8]
push eax
call fcn.1004c64c
add esp, 0x14
jmp 0x1005008e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7f4]
call fcn.100187b9
and dword [ebp - 0x1dc], 0
jmp 0x1005016f
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 0xb
jae 0x10050188
mov eax, dword [ebp - 0x1dc]
mov byte [ebp + eax - 0x6a0], 0
jmp 0x10050162
mov dword [ebp - 0x164], 0xd3df75dc
mov dword [ebp - 0x720], 2
mov dword [ebp - 0xdc], 2
mov dword [ebp - 0x1b4], 0
jmp 0x100501bf
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 3
jge 0x100501db
mov eax, dword [ebp - 0x1b4]
mov dword [ebp + eax*4 - 0xb00], 0x2189f42
jmp 0x100501b2
mov dword [ebp - 0x164], 0
jmp 0x100501f4
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 0xa
jg 0x100502ca
mov dword [ebp - 0x75c], 0
mov dword [ebp - 0xfc], 0x590f0234
lea eax, [ebp - 0xdc]
push eax
push 0
lea eax, [ebp - 0x720]
push eax
lea eax, [ebp - 0xfc]
push eax
lea eax, [ebp - 0x75c]
push eax
call fcn.1004c105
add esp, 0x14
mov dword [ebp - 0xdc], 2
jmp 0x10050254
mov eax, dword [ebp - 0xdc]
dec eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0
jl 0x100502c5
mov dword [ebp - 0xfc], 0
jmp 0x10050276
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 2
jg 0x100502c3
mov eax, dword [ebp - 0xdc]
cmp dword [ebp + eax*4 - 0xb00], 0
je 0x10050291
jmp 0x100502c3
mov byte [ebp - 0xb5], 0
movzx eax, byte [ebp - 0xb5]
test eax, eax
je 0x100502c1
push 0x2f87
push 1
push 0xdc1
push 0x4660
push 0x7071
call fcn.1004c105
add esp, 0x14
jmp 0x10050269
jmp 0x10050247
jmp 0x100501e7
push dword [ebp - 0x728]
push dword [ebp - 0x764]
call fcn.100488bb
pop ecx
pop ecx
mov dword [ebp - 0x4dc], eax
mov dword [ebp - 0x8cc], 5
mov dword [ebp - 0x8c8], 5
mov dword [ebp - 0x8c4], 5
mov dword [ebp - 0x8c0], 5
lea ecx, [ebp - 0x2ed]
call fcn.10009623
push eax
lea eax, [ebp - 0x8bc]
push eax
lea eax, [ebp - 0x8cc]
push eax
lea ecx, [ebp - 0xbbc]
call fcn.100187cd
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x674]
call fcn.10018793
mov dword [ebp - 4], 0x12
mov dword [ebp - 0xacc], 0xd8b2
mov dword [ebp - 0x4c4], 7
mov dword [ebp - 0x76c], 8
mov dword [ebp - 0x97c], 0
mov dword [ebp - 0x16c], 0
jmp 0x10050388
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 3
jge 0x100503a4
mov eax, dword [ebp - 0x16c]
mov dword [ebp + eax*4 - 0x954], 0x6f1bf506
jmp 0x1005037b
push 0
lea ecx, [ebp - 0x674]
call fcn.100187be
mov dword [eax], 6
jmp 0x100503dd
push 0
lea ecx, [ebp - 0x674]
call fcn.100187be
cmp dword [eax], 9
jl 0x10050778
mov dword [ebp - 0x110], 1
push 1
lea ecx, [ebp - 0x90c]
call fcn.10018732
mov byte [ebp - 4], 0x13
mov dword [ebp - 0x108], 0
jmp 0x10050427
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 2
jge 0x10050443
mov eax, dword [ebp - 0x108]
mov dword [ebp + eax*4 - 0xf4], 0
jmp 0x1005041a
push 0x7bb4
push 0x3f1b
push 0x5fe6
push 1
push 0x583f
push 0x1cb5
lea eax, [ebp - 0x90c]
push eax
push 0x46f7
push 0x76ca
lea eax, [ebp - 0x108]
push eax
call fcn.1004c193
add esp, 0x28
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xf4], 0
jmp 0x100504ac
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf4]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xf4], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xf4], 3
jge 0x100504d6
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf4]
mov dword [ebp + eax*4 - 0x954], 0
jmp 0x10050491
mov eax, 0x629bad2c
test eax, eax
je 0x100504ec
push 1
lea ecx, [ebp - 0x674]
call fcn.100187be
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf4]
cmp dword [ebp - 0x110], eax
jle 0x1005051a
mov dword [ebp - 0x594], 1
jmp 0x10050521
and dword [ebp - 0x594], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xf4]
cmp dword [ebp - 0x594], eax
je 0x10050542
mov dword [ebp - 0x4a4], 1
jmp 0x10050549
and dword [ebp - 0x4a4], 0
push 0
lea ecx, [ebp - 0x674]
call fcn.100187be
mov esi, eax
push 0
lea ecx, [ebp - 0x674]
call fcn.100187be
mov ecx, dword [ebp - 0x4a4]
sub ecx, dword [eax]
cmp dword [esi], ecx
jge 0x1005057d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x674]
call fcn.100187b9
mov eax, dword [ebp - 0x94]
mov ecx, dword [ebp - 0x4dc]
mov dword [eax + 8], ecx
push 2
lea ecx, [ebp - 0x2c0]
call fcn.10018732
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x178], 2
mov dword [ebp - 0x77c], 0xffffffff
mov dword [ebp - 0x170], 0
jmp 0x100507d7
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 2
jge 0x100507f9
push dword [ebp - 0x170]
lea ecx, [ebp - 0x2c0]
call fcn.100187be
mov dword [eax], 0x999d94b4
jmp 0x100507ca
mov byte [ebp - 0xbf], 0
movzx eax, byte [ebp - 0xbf]
test eax, eax
je 0x1005081f
push 0x1044
push 0x6282
push 0
call fcn.1004d1cb
add esp, 0xc
push 0
lea ecx, [ebp - 0x2c0]
call fcn.100187be
mov eax, dword [eax]
neg eax
je 0x10050959
push 1
lea ecx, [ebp - 0x2c0]
call fcn.100187be
mov eax, dword [eax]
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 5
jle 0x10050860
mov dword [ebp - 0x61c], 1
jmp 0x10050867
and dword [ebp - 0x61c], 0
push 0
lea ecx, [ebp - 0x2c0]
call fcn.100187be
mov esi, eax
push 0
lea ecx, [ebp - 0x2c0]
call fcn.100187be
mov ecx, dword [esi]
cmp ecx, dword [eax]
jg 0x10050895
mov dword [ebp - 0x4cc], 1
jmp 0x1005089c
and dword [ebp - 0x4cc], 0
mov esi, dword [ebp - 0x4cc]
neg esi
push 0
lea ecx, [ebp - 0x2c0]
call fcn.100187be
sub esi, dword [eax]
push 0
lea ecx, [ebp - 0x2c0]
call fcn.100187be
imul esi, dword [eax]
neg esi
cmp esi, 0xfffffff9
jne 0x100508d6
mov dword [ebp - 0x5ac], 1
jmp 0x100508dd
and dword [ebp - 0x5ac], 0
push 0
lea ecx, [ebp - 0x2c0]
call fcn.100187be
mov ecx, dword [ebp - 0x5ac]
cmp ecx, dword [eax]
jne 0x10050900
and dword [ebp - 0x774], 0
push 0
lea ecx, [ebp - 0x2c0]
call fcn.100187be
mov eax, 0x1f0ef2f3
add eax, 0xef72d4ea
je 0x1005098f
mov eax, 0xae3d
test eax, eax
je 0x1005098f
push 0
lea ecx, [ebp - 0x2c0]
call fcn.100187be
mov esi, dword [ebp - 0x178]
push 1
lea ecx, [ebp - 0x2c0]
call fcn.100187be
sub esi, dword [eax]
mov dword [ebp - 0x77c], esi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2c0]
call fcn.100187b9
lea eax, [ebp - 0x10]
push eax
push 1
lea eax, [ebp - 0x4dc]
push eax
call fcn.1004c3bc
add esp, 0xc
mov dword [ebp - 0x7c0], 1
mov dword [ebp - 0x81c], 0xd8cb4c23
mov dword [ebp - 0x750], 0xd329
mov dword [ebp - 0x748], 0x59bb7a14
mov dword [ebp - 0x834], 0xffffffff
mov dword [ebp - 0xadc], 0xffffffff
mov dword [ebp - 0xae4], 0x81de9829
mov dword [ebp - 0xaec], 0x7fb07d0
mov dword [ebp - 0xaf4], 9
mov dword [ebp - 0xaa0], 0xfffffff8
push 3
lea ecx, [ebp - 0xa54]
call fcn.10018732
mov dword [ebp - 4], 0x15
mov dword [ebp - 0xa00], 0xffffffff
mov dword [ebp - 0xa68], 0x8e188a74
mov dword [ebp - 0x988], 0
mov dword [ebp - 0x758], 0x906e71eb
mov dword [ebp - 0x118], 0
jmp 0x10050a87
cmp dword [ebp - 0x118], 2
jge 0x10050aa3
mov eax, dword [ebp - 0x118]
mov dword [ebp + eax*4 - 0xb94], 0x64de8cc1
jmp 0x10050a7a
push 0x5632
push 1
push 0x684e
lea eax, [ebp - 0x118]
push eax
lea eax, [ebp - 0xa54]
push eax
call fcn.1004c40f
add esp, 0x14
lea eax, [ebp - 0x81c]
push eax
push 0x2cc6
lea eax, [ebp - 0x748]
push eax
lea eax, [ebp - 0x7c0]
push eax
push 1
lea eax, [ebp - 0x750]
push eax
lea eax, [ebp - 0x834]
push eax
call fcn.1004c4b6
add esp, 0x1c
push 0
lea eax, [ebp - 0x758]
push eax
push 0x27a2
push 0x1f0b
push 0x3562
call fcn.1004d29a
add esp, 0x14
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa54]
call fcn.100187b9
and dword [ebp - 0x138], 0
mov dword [ebp - 0x84], 0xffffffff
mov dword [ebp - 0x9c], 0xccfd66c4
mov dword [ebp - 0x358], 0x5bd52a28
push 1
lea ecx, [ebp - 0x918]
call fcn.10018732
mov dword [ebp - 4], 0x16
mov dword [ebp - 0x120], 0
jmp 0x10050b78
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x70c], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x714], eax
mov eax, dword [ebp - 0x70c]
mov dword [ebp - 0x104], eax
mov eax, dword [ebp - 0x714]
mov dword [ebp - 0x71c], eax
mov eax, dword [ebp - 0x104]
mov dword [eax], 0
jmp 0x10052fcd
mov eax, dword [ebp - 0x104]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x104]
mov dword [ecx], eax
mov eax, dword [ebp - 0x104]
cmp dword [eax], 2
jge 0x10052ff3
mov eax, dword [ebp - 0x104]
push dword [eax]
mov ecx, dword [ebp - 0x71c]
call fcn.100187be
mov dword [eax], 8
jmp 0x10052fbc
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret