Function at 0x1004675f
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1006c93f
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x678
push esi
mov dword [ebp - 0x30], 0x5e7a66fe
mov dword [ebp - 0x240], 0xfffffffa
mov dword [ebp - 0x340], 0xfffffff8
mov dword [ebp - 0x144], 0
mov dword [ebp - 0x4d4], 0xcced
mov dword [ebp - 0x4d0], 0xcced
mov dword [ebp - 0x4cc], 0xcced
mov dword [ebp - 0x4c8], 0xcced
lea ecx, [ebp - 0x14d]
call fcn.1001818e
push eax
lea eax, [ebp - 0x4c4]
push eax
lea eax, [ebp - 0x4d4]
push eax
lea ecx, [ebp - 0x640]
call fcn.10018191
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x5dc]
call fcn.1001807a
and dword [ebp - 4], 0
push 1
push 0x4f77
lea eax, [ebp - 0x30]
push eax
push 0x27fd
push 1
call fcn.10035616
add esp, 0x14
mov dword [ebp - 0x30], 0
jmp 0x1004682e
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 1
je 0x10046a10
push 2
lea ecx, [ebp - 0x49c]
call fcn.1001803e
mov byte [ebp - 4], 1
mov dword [ebp - 0x338], 0xc2132456
mov dword [ebp - 0x430], 0xffffffff
lea eax, [ebp - 0x49c]
push eax
lea eax, [ebp - 0x614]
push eax
call fcn.10045ce7
pop ecx
pop ecx
push 1
push 0x2a9a
push 0x4588
push 0x58ce
push 1
push 0x778f
call fcn.10035931
add esp, 0x18
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x240], eax
mov eax, dword [ebp - 0x240]
mov dword [ebp - 0x340], eax
mov esi, dword [ebp - 0x340]
push 0
lea ecx, [ebp - 0x49c]
call fcn.10018124
cmp esi, dword [eax]
jge 0x100468ca
mov dword [ebp - 0x348], 1
jmp 0x100468d1
and dword [ebp - 0x348], 0
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x348]
jne 0x100468e8
mov dword [ebp - 0x35c], 1
jmp 0x100468ef
and dword [ebp - 0x35c], 0
mov eax, dword [ebp - 0x35c]
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 0
je 0x10046917
push 8
pop eax
test eax, eax
je 0x10046917
mov dword [ebp - 0x31c], 1
jmp 0x1004691e
and dword [ebp - 0x31c], 0
mov eax, dword [ebp - 0x30]
imul eax, dword [ebp - 0x31c]
cmp eax, 0xfff7
jae 0x1004693b
mov dword [ebp - 0x16c], 1
jmp 0x10046942
and dword [ebp - 0x16c], 0
push 1
lea ecx, [ebp - 0x49c]
call fcn.10018124
mov eax, dword [eax]
neg eax
mov dword [ebp - 0x338], eax
mov eax, dword [ebp - 0x338]
cmp eax, dword [ebp - 0x16c]
jg 0x10046973
mov dword [ebp - 0x170], 1
jmp 0x1004697a
and dword [ebp - 0x170], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x170], eax
je 0x1004699a
cmp dword [ebp - 0x144], 0
je 0x1004699a
mov dword [ebp - 0x3a4], 1
jmp 0x100469a1
and dword [ebp - 0x3a4], 0
push 2
lea ecx, [ebp - 0x5dc]
call fcn.10018124
cmp dword [eax], 0
jbe 0x100469bf
mov dword [ebp - 0x178], 1
jmp 0x100469c6
and dword [ebp - 0x178], 0
push 1
lea ecx, [ebp - 0x49c]
call fcn.10018124
mov ecx, dword [ebp - 0x178]
cmp ecx, dword [eax]
jne 0x100469e9
mov dword [ebp - 0x17c], 1
jmp 0x100469f0
and dword [ebp - 0x17c], 0
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x430], eax
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x49c]
call fcn.100180a0
jmp 0x10046827
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5dc]
call fcn.100180a0
and dword [ebp - 0x2c], 0
push 3
lea ecx, [ebp - 0x5ec]
call fcn.1001803e
mov dword [ebp - 4], 2
mov dword [ebp - 0xf0], 0
lea eax, [ebp - 0x5ec]
push eax
lea eax, [ebp - 0x5e0]
push eax
call fcn.10045d2f
pop ecx
pop ecx
mov dword [ebp - 0xf0], 0
jmp 0x10046a6f
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 2
jg 0x10046a7f
call fcn.10045d77
jmp 0x10046a62
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5ec]
call fcn.100180a0
call fcn.10045e10
mov dword [ebp - 0x51c], 0xd6c05baf
mov byte [ebp - 0x72], 0
movzx eax, byte [ebp - 0x72]
test eax, eax
je 0x10046aae
call fcn.10045e66
push 1
push 0x710d
push 1
call fcn.1003645a
add esp, 0xc
push 1
lea ecx, [ebp - 0xe0]
call fcn.1001803e
mov dword [ebp - 4], 3
mov dword [ebp - 0xec], 0xf34ea885
mov dword [ebp - 0x24], 0
jmp 0x10046aed
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x10046b03
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xd4], 0x64a6847d
jmp 0x10046ae6
push 0x345c
push 1
push 0x185e
push 1
push 0x11be
push 0x1715
push 0xf5
push 0x6a78
lea eax, [ebp - 0xe0]
push eax
lea eax, [ebp - 0x24]
push eax
push 0x5fa2
push 1
push 0x751c
call fcn.100364fb
add esp, 0x34
mov dword [ebp - 0x24], 0
jmp 0x10046b54
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x10046b67
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x6c], 0xc525
jmp 0x10046b4d
push 0
lea ecx, [ebp - 0xe0]
call fcn.10018124
mov dword [eax], 2
jmp 0x10046ba0
push 0
lea ecx, [ebp - 0xe0]
call fcn.10018124
mov dword [ebp - 0x26c], eax
mov eax, dword [ebp - 0x26c]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x26c]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0xe0]
call fcn.10018124
cmp dword [eax], 0
jl 0x10046e56
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x33c], 0
mov dword [ebp - 0x474], 0x8bee6da
mov dword [ebp - 0x64], 0
jmp 0x10046be1
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 2
jg 0x10046c34
mov dword [ebp - 0x438], 0xfc4f27d2
push 0
lea ecx, [ebp - 0xe0]
call fcn.10018124
mov eax, dword [eax]
mov ecx, dword [ebp - 0x64]
mov ecx, dword [ebp + ecx*4 - 0xd4]
cmp dword [ebp + eax*4 - 0xd4], ecx
je 0x10046c1f
mov dword [ebp - 0x184], 1
jmp 0x10046c26
and dword [ebp - 0x184], 0
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x438], eax
jmp 0x10046bda
mov dword [ebp - 0x64], 0xa
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xd4]
cmp eax, dword [ebp - 0x64]
jge 0x10046c59
mov dword [ebp - 0x18c], 1
jmp 0x10046c60
and dword [ebp - 0x18c], 0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xd4], 0xf885
je 0x10046c7f
mov dword [ebp - 0x2e4], 1
jmp 0x10046c86
and dword [ebp - 0x2e4], 0
push 4
pop eax
imul eax, eax, 0
mov esi, dword [ebp + eax - 0xd4]
imul esi, dword [ebp - 0x2e4]
push 0
lea ecx, [ebp - 0xe0]
call fcn.10018124
cmp esi, dword [eax]
jge 0x10046cb7
mov dword [ebp - 0x274], 1
jmp 0x10046cbe
and dword [ebp - 0x274], 0
mov eax, dword [ebp - 0x18c]
cmp eax, dword [ebp - 0x274]
jge 0x10046cf1
push 0
lea ecx, [ebp - 0xe0]
call fcn.10018124
mov eax, dword [eax]
cmp dword [ebp + eax*4 - 0xd4], 0
je 0x10046cf1
mov dword [ebp - 0x194], 1
jmp 0x10046cf8
and dword [ebp - 0x194], 0
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x33c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd4]
cmp dword [ebp - 0x33c], eax
jg 0x10046d25
mov dword [ebp - 0x440], 1
jmp 0x10046d2c
and dword [ebp - 0x440], 0
push 0
lea ecx, [ebp - 0xe0]
call fcn.10018124
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0xd4]
mov dword [ebp - 0x520], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xd4]
sub eax, 0x6af30202
je 0x10046d81
push 0
lea ecx, [ebp - 0xe0]
call fcn.10018124
mov eax, dword [eax]
cmp dword [ebp + eax*4 - 0xd4], 0
je 0x10046d81
mov dword [ebp - 0x448], 1
jmp 0x10046d88
and dword [ebp - 0x448], 0
push 0
lea ecx, [ebp - 0xe0]
call fcn.10018124
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0xd4]
mov dword [ebp - 0x528], eax
push 0
lea ecx, [ebp - 0xe0]
call fcn.10018124
push 0
lea ecx, [ebp - 0xe0]
call fcn.10018124
mov eax, dword [eax]
cmp dword [ebp + eax*4 - 0xd4], 1
jbe 0x10046dd6
mov dword [ebp - 0x19c], 1
jmp 0x10046ddd
and dword [ebp - 0x19c], 0
push 0
lea ecx, [ebp - 0xe0]
call fcn.10018124
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0xd4]
cmp dword [ebp - 0x19c], eax
jge 0x10046e07
mov dword [ebp - 0x27c], 1
jmp 0x10046e0e
and dword [ebp - 0x27c], 0
push 0
lea ecx, [ebp - 0xe0]
call fcn.10018124
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0xd4]
add eax, dword [ebp - 0x27c]
cmp eax, dword [ebp - 0x474]
jge 0x10046e3e
mov dword [ebp - 0x1a4], 1
jmp 0x10046e45
and dword [ebp - 0x1a4], 0
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0xec], eax
jmp 0x10046b7c
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x6c], 0
jne 0x10046e9a
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6c]
mov dword [ebp - 0x2ec], eax
push 0
lea ecx, [ebp - 0xe0]
call fcn.10018124
mov ecx, dword [ebp - 0x2ec]
mov dword [eax], ecx
cmp dword [ebp - 0x2ec], 0
jne 0x10046e9a
and dword [ebp - 0x1ac], 0
jmp 0x10046ea4
mov dword [ebp - 0x1ac], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xd4]
cmp eax, dword [ebp - 0x1ac]
je 0x10046ec4
mov dword [ebp - 0x284], 1
jmp 0x10046ecb
and dword [ebp - 0x284], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6c]
cmp dword [ebp - 0x284], eax
jg 0x10046ee9
mov dword [ebp - 0x1b4], 1
jmp 0x10046ef0
and dword [ebp - 0x1b4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd4]
cmp dword [ebp - 0x1b4], eax
jne 0x10046f11
mov dword [ebp - 0x324], 1
jmp 0x10046f18
and dword [ebp - 0x324], 0
cmp dword [ebp - 0x324], 0xa839
jl 0x10046f30
mov dword [ebp - 0x1bc], 1
jmp 0x10046f37
and dword [ebp - 0x1bc], 0
cmp dword [ebp - 0x1bc], 0xfffb
jne 0x10046f4f
mov dword [ebp - 0x28c], 1
jmp 0x10046f56
and dword [ebp - 0x28c], 0
xor eax, eax
sub eax, dword [ebp - 0x28c]
cmp eax, 0xfffffff8
jge 0x10046f6f
mov dword [ebp - 0x1c4], 1
jmp 0x10046f76
and dword [ebp - 0x1c4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1c4]
sub ecx, dword [ebp + eax - 0x6c]
cmp ecx, dword [ebp - 0xec]
jl 0x10046fa7
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x6c], 0
je 0x10046fa7
mov dword [ebp - 0x2f4], 1
jmp 0x10046fae
and dword [ebp - 0x2f4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6c]
cmp dword [ebp - 0x2f4], eax
jge 0x10046fcc
mov dword [ebp - 0x1cc], 1
jmp 0x10046fd3
and dword [ebp - 0x1cc], 0
cmp dword [ebp - 0x1cc], 0xfffffffd
jle 0x10046fee
mov eax, 0x236bbbd2
test eax, eax
jne 0x10046fee
and dword [ebp - 0x294], 0
jmp 0x10046ff8
mov dword [ebp - 0x294], 1
cmp dword [ebp - 0x294], 0x7887
jne 0x10047010
mov dword [ebp - 0x1d4], 1
jmp 0x10047017
and dword [ebp - 0x1d4], 0
cmp dword [ebp - 0x1d4], 0x2392
jle 0x1004702f
mov dword [ebp - 0x34c], 1
jmp 0x10047036
and dword [ebp - 0x34c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6c]
cmp dword [ebp - 0x34c], eax
je 0x10047054
mov dword [ebp - 0x1dc], 1
jmp 0x1004705b
and dword [ebp - 0x1dc], 0
mov eax, dword [ebp - 0xec]
cmp dword [ebp - 0x1dc], eax
jle 0x10047075
mov dword [ebp - 0x29c], 1
jmp 0x1004707c
and dword [ebp - 0x29c], 0
mov eax, dword [ebp - 0x29c]
mov dword [ebp - 0xec], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe0]
call fcn.100180a0
mov dword [ebp - 0xa4], 0x1836ccb0
mov dword [ebp - 0x1e4], 0xfffffff7
mov dword [ebp - 0x158], 0xfb1c0380
push 3
lea ecx, [ebp - 0x4ec]
call fcn.1001803e
mov dword [ebp - 4], 4
mov dword [ebp - 0x98], 0
jmp 0x100470e2
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 1
jge 0x100470fe
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0x47c], 0xcd9d7
jmp 0x100470d5
push 1
lea eax, [ebp - 0x4ec]
push eax
lea eax, [ebp - 0x98]
push eax
push 0x730b
push 0x5776
push 1
push 0x2954
call fcn.10036864
add esp, 0x1c
mov byte [ebp - 0x73], 0
movzx eax, byte [ebp - 0x73]
test eax, eax
je 0x10047146
push 1
push 1
push 0x305b
push 1
call fcn.10036936
add esp, 0x10
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x1e4], eax
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x158], eax
mov eax, dword [ebp - 0x1e4]
mov dword [ebp - 0x530], eax
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x538], eax
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x47c], 0x8932
cmp dword [ebp - 0xa4], 0x8932
jg 0x1004719f
mov dword [ebp - 0x2fc], 1
jmp 0x100471a6
and dword [ebp - 0x2fc], 0
mov eax, dword [ebp - 0xa4]
cmp eax, dword [ebp - 0x2fc]
jge 0x100471c9
cmp dword [ebp - 0x158], 0
je 0x100471c9
mov dword [ebp - 0x1ec], 1
jmp 0x100471d0
and dword [ebp - 0x1ec], 0
mov eax, dword [ebp - 0xa4]
cmp dword [ebp - 0x1ec], eax
jg 0x100471ea
mov dword [ebp - 0x2a4], 1
jmp 0x100471f1
and dword [ebp - 0x2a4], 0
push 2
lea ecx, [ebp - 0x4ec]
call fcn.10018124
mov ecx, dword [ebp - 0x2a4]
mov dword [eax], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4ec]
call fcn.100180a0
mov eax, dword [ebp + 8]
mov dword [ebp - 0x130], eax
mov dword [ebp - 0x7c], 1
mov dword [ebp - 0x90], 0xffffffff
mov dword [ebp - 0x45c], 0xa13735ca
mov dword [ebp - 0x7c], 0xfffffff6
jmp 0x10047249
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 6
je 0x100477f0
mov dword [ebp - 0x94], 0xffffffff
mov dword [ebp - 0x4c], 2
mov dword [ebp - 0x39c], 0xc254e7f1
mov dword [ebp - 0x224], 0xffffffff
mov dword [ebp - 0x94], 0
jmp 0x10047291
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0x1a
je 0x100477c7
mov dword [ebp - 0x484], 0x2327
cmp dword [ebp - 0x484], 0x51f
jge 0x100473dc
call fcn.10052df5
push 0x20
pop ecx
imul ecx, ecx, 0
add eax, ecx
push eax
push 0x100086c4
push 0x100086c8
call fcn.10053bc2
add esp, 0xc
call fcn.10052df5
push 0x20
pop ecx
shl ecx, 0
add eax, ecx
push eax
push 0x100086d0
push 0x100086d4
call fcn.10053bc2
add esp, 0xc
lea eax, [ebp - 0x1fc]
push eax
lea eax, [ebp - 0x32c]
push eax
lea eax, [ebp - 0x1f4]
push eax
mov ecx, 0x1065d430
call fcn.100177fe
mov ecx, eax
call fcn.100177fe
mov ecx, eax
call fcn.100177fe
cmp dword [ebp - 0x1f4], 0x21
jg 0x1004735b
push fcn.1001c8e7
push dword [ebp - 0x1f4]
mov edx, 0x100086dc
mov ecx, 0x1065d378
call fcn.1001c710
mov ecx, eax
call fcn.10017c40
mov ecx, eax
call fcn.10017c34
jmp 0x100473dc
cmp dword [ebp - 0x32c], 0x21
jg 0x1004738e
push fcn.1001c8e7
push dword [ebp - 0x32c]
mov edx, 0x100086dc
mov ecx, 0x1065d378
call fcn.1001c710
mov ecx, eax
call fcn.10017c40
mov ecx, eax
call fcn.10017c34
jmp 0x100473dc
cmp dword [ebp - 0x1fc], 0x21
jg 0x100473c1
push fcn.1001c8e7
push dword [ebp - 0x1fc]
mov edx, 0x100086dc
mov ecx, 0x1065d378
call fcn.1001c710
mov ecx, eax
call fcn.10017c40
mov ecx, eax
call fcn.10017c34
jmp 0x100473dc
push fcn.1001c8e7
mov edx, 0x100086e4
mov ecx, 0x1065d378
call fcn.1001c710
mov ecx, eax
call fcn.10017c34
mov dword [ebp - 0x58], 0xf40fc027
mov dword [ebp - 0xbc], 0xa9cea445
mov dword [ebp - 0x110], 0
jmp 0x10047406
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 2
jge 0x10047422
mov eax, dword [ebp - 0x110]
mov dword [ebp + eax*4 - 0x354], 0x25b3b9da
jmp 0x100473f9
mov dword [ebp - 0x58], 0
jmp 0x10047432
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 1
jg 0x100477b1
mov dword [ebp - 0x160], 0
mov dword [ebp - 0x390], 1
mov eax, dword [ebp - 0x58]
cmp dword [ebp + eax*4 - 0x354], 0
je 0x10047470
push 5
pop eax
test eax, eax
je 0x10047470
mov dword [ebp - 0x20c], 1
jmp 0x10047477
and dword [ebp - 0x20c], 0
cmp dword [ebp - 0xbc], 1
jge 0x1004748c
mov dword [ebp - 0x2ac], 1
jmp 0x10047493
and dword [ebp - 0x2ac], 0
cmp dword [ebp - 0x2ac], 0xcedb7758
jne 0x100474ab
mov dword [ebp - 0x48c], 1
jmp 0x100474b2
and dword [ebp - 0x48c], 0
cmp dword [ebp - 0x7c], 0
jle 0x100474c4
mov dword [ebp - 0x204], 1
jmp 0x100474cb
and dword [ebp - 0x204], 0
mov eax, dword [ebp - 0x204]
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x90]
imul eax, dword [ebp - 0x58]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x94]
cmp dword [ebp - 0x4c], eax
jl 0x100474fb
mov dword [ebp - 0x304], 1
jmp 0x10047502
and dword [ebp - 0x304], 0
mov eax, dword [ebp - 0x39c]
cmp dword [ebp - 0x304], eax
jle 0x1004751c
mov dword [ebp - 0x2b4], 1
jmp 0x10047523
and dword [ebp - 0x2b4], 0
mov eax, dword [ebp - 0x20c]
imul eax, dword [ebp - 0x2b4]
mov ecx, dword [ebp - 0x58]
mov dword [ebp + ecx*4 - 0x354], eax
mov dword [ebp - 0x4c], 0x10
jmp 0x1004754a
mov eax, dword [ebp - 0x4c]
dec eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0xfffffff4
jle 0x100477ac
mov dword [ebp - 0x3b0], 0xffffffff
mov dword [ebp - 0xf4], 0x954656e2
mov dword [ebp - 0x41c], 1
mov dword [ebp - 0x514], 0xa956
mov dword [ebp - 0x510], 0xa956
mov dword [ebp - 0x50c], 0xa956
mov dword [ebp - 0x508], 0xa956
mov dword [ebp - 0x104], 0
jmp 0x100475b3
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 2
jge 0x100475cf
mov eax, dword [ebp - 0x104]
mov dword [ebp + eax*4 - 0x54c], 0xd67a3d58
jmp 0x100475a6
mov dword [ebp - 0x90], 0x12f69a01
cmp dword [ebp - 0x90], 0
je 0x10047616
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x540], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x54c]
mov dword [ebp - 0x584], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x58c], eax
mov eax, dword [ebp - 0x160]
add eax, dword [ebp - 0x160]
cmp dword [ebp - 0x4c], 0x2b5
jne 0x1004762b
mov dword [ebp - 0x214], 1
jmp 0x10047632
and dword [ebp - 0x214], 0
cmp dword [ebp - 0x214], 0xfffffffa
je 0x10047647
mov dword [ebp - 0x344], 1
jmp 0x1004764e
and dword [ebp - 0x344], 0
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x344], eax
jne 0x10047665
mov dword [ebp - 0x21c], 1
jmp 0x1004766c
and dword [ebp - 0x21c], 0
cmp dword [ebp - 0x21c], 0x9020024
jne 0x10047684
mov dword [ebp - 0x428], 1
jmp 0x1004768b
and dword [ebp - 0x428], 0
mov eax, dword [ebp - 0x3b0]
mov dword [ebp - 0x458], eax
mov eax, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x458]
mov dword [ebp + eax*4 - 0x354], ecx
mov eax, dword [ebp - 0x94]
cmp dword [ebp - 0x390], eax
jle 0x100476c1
mov dword [ebp - 0x2bc], 1
jmp 0x100476c8
and dword [ebp - 0x2bc], 0
mov eax, dword [ebp - 0x2bc]
mov dword [ebp - 0xf4], eax
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0x224], eax
mov eax, dword [ebp - 0x224]
mov dword [ebp - 0x41c], eax
mov dword [ebp - 0xbc], 0
jmp 0x10047705
mov eax, dword [ebp - 0xbc]
dec eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0xfffffff3
jle 0x100477a7
mov dword [ebp - 0x3ac], 0xffffffff
push 4
pop eax
test eax, eax
je 0x1004778f
mov dword [ebp - 0x90], 0x4926a672
mov eax, dword [ebp - 0x90]
sub eax, dword [ebp - 0x3ac]
jne 0x1004773f
cmp dword [ebp - 0x4c], 0
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x514], 0xfffffff8
or eax, 0xffffffff
imul eax, eax, 0xfffffff8
mov dword [ebp - 0xf4], eax
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0x594], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x354]
mov dword [ebp - 0x59c], eax
mov eax, 0x5455
test eax, eax
je 0x1004778f
mov dword [ebp - 0x30c], 1
jmp 0x10047796
and dword [ebp - 0x30c], 0
mov eax, dword [ebp - 0x30c]
mov dword [ebp - 0x45c], eax
jmp 0x100476f8
jmp 0x10047543
jmp 0x1004742b
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x354], 0
jmp 0x10047284
mov byte [ebp - 0x75], 0
movzx eax, byte [ebp - 0x75]
test eax, eax
je 0x100477eb
push 0x4913
push 0
push 1
push 0x941
push 1
call fcn.100439f7
add esp, 0x14
jmp 0x10047242
mov eax, dword [ebp - 0x130]
movzx eax, word [eax]
cmp eax, 0x5a4d
je 0x10047dbd
mov dword [ebp - 0x10], 0xfffffffb
mov dword [ebp - 0x44], 0x19a6fdd8
mov dword [ebp - 0x40], 0xee6d54ec
push 3
lea ecx, [ebp - 0x468]
call fcn.1001803e
mov dword [ebp - 4], 5
push 1
push 0x214e
lea eax, [ebp - 0x468]
push eax
push 0x531a
push 0x370
push 1
push 0x552a
push 0x96
push 0x25be
push 0x390c
push 0x749e
push 0x578e
lea eax, [ebp - 0x5a4]
push eax
push 0x6d4e
push 0x47b1
call fcn.10036af7
add esp, 0x3c
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x5ac], eax
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x10], eax
jl 0x1004789b
mov dword [ebp - 0x22c], 1
jmp 0x100478a2
and dword [ebp - 0x22c], 0
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x22c]
neg eax
sub eax, 0x4adf2985
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x10], 0xffffffff
je 0x100478c8
mov dword [ebp - 0x2c4], 1
jmp 0x100478cf
and dword [ebp - 0x2c4], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x2c4], eax
jge 0x100478e6
mov dword [ebp - 0x234], 1
jmp 0x100478ed
and dword [ebp - 0x234], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x234], eax
jg 0x10047904
mov dword [ebp - 0x334], 1
jmp 0x1004790b
and dword [ebp - 0x334], 0
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x334]
cmp eax, 0xb9c6fec1
jbe 0x10047928
mov dword [ebp - 0x23c], 1
jmp 0x1004792f
and dword [ebp - 0x23c], 0
imul eax, dword [ebp - 0x23c], 3
cmp eax, dword [ebp - 0x10]
jle 0x10047947
mov dword [ebp - 0x2cc], 1
jmp 0x1004794e
and dword [ebp - 0x2cc], 0
mov eax, dword [ebp - 0x2cc]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x40], eax
jge 0x1004796b
mov dword [ebp - 0x244], 1
jmp 0x10047972
and dword [ebp - 0x244], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x244], eax
jne 0x10047989
mov dword [ebp - 0x314], 1
jmp 0x10047990
and dword [ebp - 0x314], 0
mov eax, dword [ebp - 0x314]
sub eax, dword [ebp - 0x10]
cmp eax, 0xffffffff
jne 0x100479aa
mov dword [ebp - 0x24c], 1
jmp 0x100479b1
and dword [ebp - 0x24c], 0
cmp dword [ebp - 0x24c], 0
jl 0x100479c6
mov dword [ebp - 0x2d4], 1
jmp 0x100479cd
and dword [ebp - 0x2d4], 0
mov eax, dword [ebp - 0x2d4]
add eax, 0x21ad
cmp eax, dword [ebp - 0x10]
jl 0x100479e9
mov dword [ebp - 0x254], 1
jmp 0x100479f0
and dword [ebp - 0x254], 0
imul eax, dword [ebp - 0x10], 0xa2c7
cmp eax, dword [ebp - 0x254]
jge 0x10047a0b
mov dword [ebp - 0x358], 1
jmp 0x10047a12
and dword [ebp - 0x358], 0
mov eax, dword [ebp - 0x358]
sub eax, dword [ebp - 0x10]
je 0x10047c6b
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x190], 0x9fa6b86d
mov dword [ebp - 0x1a0], 0xfffa
mov dword [ebp - 0x120], 1
mov dword [ebp - 0x1b8], 0x11162bca
cmp dword [ebp - 0x40], 0
je 0x10047a6e
mov eax, 0xffff
test eax, eax
je 0x10047a6e
mov dword [ebp - 0x25c], 1
jmp 0x10047a75
and dword [ebp - 0x25c], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x25c], eax
jg 0x10047a8c
mov dword [ebp - 0x3b4], 1
jmp 0x10047a93
and dword [ebp - 0x3b4], 0
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x5b4], eax
imul eax, dword [ebp - 0x88], 0
cmp eax, dword [ebp - 0x44]
jne 0x10047ab7
mov dword [ebp - 0x2dc], 1
jmp 0x10047abe
and dword [ebp - 0x2dc], 0
mov eax, dword [ebp - 0x2dc]
sub eax, dword [ebp - 0x88]
cmp eax, dword [ebp - 0x88]
jne 0x10047ade
mov dword [ebp - 0x264], 1
jmp 0x10047ae5
and dword [ebp - 0x264], 0
cmp dword [ebp - 0x264], 0xffffffff
jbe 0x10047afa
mov dword [ebp - 0x424], 1
jmp 0x10047b01
and dword [ebp - 0x424], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x10], eax
jle 0x10047b15
mov dword [ebp - 0x174], 1
jmp 0x10047b1c
and dword [ebp - 0x174], 0
mov eax, dword [ebp - 0x174]
inc eax
cmp eax, dword [ebp - 0x190]
jne 0x10047b37
mov dword [ebp - 0x168], 1
jmp 0x10047b3e
and dword [ebp - 0x168], 0
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x168]
cmp eax, dword [ebp - 0x40]
jge 0x10047b58
mov dword [ebp - 0x180], 1
jmp 0x10047b5f
and dword [ebp - 0x180], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x180], eax
jge 0x10047b76
mov dword [ebp - 0x188], 1
jmp 0x10047b7d
and dword [ebp - 0x188], 0
mov eax, dword [ebp - 0x1a0]
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x120], eax
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x5bc], eax
push 1
lea ecx, [ebp - 0x468]
call fcn.10018124
cmp dword [eax], 0
jne 0x10047bbc
cmp dword [ebp - 0x44], 0
jne 0x10047bbc
and dword [ebp - 0x198], 0
jmp 0x10047bc6
mov dword [ebp - 0x198], 1
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x198], eax
je 0x10047bdd
mov dword [ebp - 0x3bc], 1
jmp 0x10047be4
and dword [ebp - 0x3bc], 0
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x5c4], eax
push 1
lea ecx, [ebp - 0x468]
call fcn.10018124
mov esi, dword [ebp - 0x1a0]
push 1
lea ecx, [ebp - 0x468]
call fcn.10018124
cmp esi, dword [eax]
jg 0x10047c26
cmp dword [ebp - 0x120], 0
jne 0x10047c26
and dword [ebp - 0x1a8], 0
jmp 0x10047c30
mov dword [ebp - 0x1a8], 1
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0x1a8], eax
jle 0x10047c4a
mov dword [ebp - 0x1b0], 1
jmp 0x10047c51
and dword [ebp - 0x1b0], 0
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x1b8], eax
mov eax, dword [ebp - 0x1b8]
mov dword [ebp - 0x44], eax
jmp 0x10047da7
mov dword [ebp - 0xac], 0xfffffff8
mov dword [ebp - 0x3c4], 0x91aff671
mov dword [ebp - 0x44], 0xffffffe2
jmp 0x10047c8f
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0xc
je 0x10047ca5
mov byte [ebp - 0x70], 0
lea eax, [ebp - 0x70]
push eax
call fcn.10045e88
pop ecx
jmp 0x10047c88
mov eax, dword [ebp - 0x40]
imul eax, dword [ebp - 0x44]
test eax, eax
je 0x10047cf2
mov dword [ebp - 0x46c], 1
push 0x2a2c
lea eax, [ebp - 0x46c]
push eax
push 1
push 0x7d7a
push 0x7693
push 0x16a0
push 1
lea eax, [ebp - 0xac]
push eax
push 0x1898
call fcn.10037063
add esp, 0x24
jmp 0x10047da7
mov dword [ebp - 0x12c], 0x82c1
cmp dword [ebp - 0x12c], 7
jl 0x10047d11
mov dword [ebp - 0x1c0], 1
jmp 0x10047d18
and dword [ebp - 0x1c0], 0
mov eax, dword [ebp - 0x12c]
imul eax, dword [ebp - 0x1c0]
test eax, eax
jne 0x10047d3b
cmp dword [ebp - 0xac], 0
jne 0x10047d3b
and dword [ebp - 0x1d0], 0
jmp 0x10047d45
mov dword [ebp - 0x1d0], 1
cmp dword [ebp - 0x3c4], 0x1dee1550
jge 0x10047d5d
mov dword [ebp - 0x1c8], 1
jmp 0x10047d64
and dword [ebp - 0x1c8], 0
imul eax, dword [ebp - 0x1c8], 0
add eax, dword [ebp - 0x12c]
jne 0x10047d7a
cmp dword [ebp - 0xac], 0
mov eax, dword [ebp - 0xac]
cmp dword [ebp - 0x1d0], eax
jg 0x10047d94
mov dword [ebp - 0x1d8], 1
jmp 0x10047d9b
and dword [ebp - 0x1d8], 0
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 0xac], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x468]
call fcn.100180a0
xor eax, eax
jmp 0x10049568
push 0x48f8
push 1
push 0x2b42
push 0x3dad
push 1
push 0x64e7
push 0x6ffb
push 1
call fcn.10037134
add esp, 0x20
mov eax, dword [ebp - 0x130]
mov ecx, dword [ebp + 8]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0xb0], ecx
mov dword [ebp - 0x9c], 0xea5d6c05
mov dword [ebp - 0x238], 1
mov dword [ebp - 0x15c], 0xeb0badca
mov dword [ebp - 0x9c], 0x10
jmp 0x10047e2d
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0x1d
jle 0x10048303
mov dword [ebp - 0x18], 0x3248c66
mov dword [ebp - 0x42c], 0x2453
cmp dword [ebp - 0x42c], 0x5c2
jge 0x10047fcf
mov dword [ebp - 0x5cc], 0x5d
lea eax, [ebp - 0x154]
push eax
push 0x100086a4
call fcn.10052cbb
pop ecx
pop ecx
mov eax, dword [ebp - 0x154]
mov dword [ebp - 0x3cc], eax
mov eax, dword [ebp - 0x154]
dec eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x3cc], 0
je 0x10047fcf
lea eax, [ebp - 0x14c]
push eax
lea eax, [ebp - 0x480]
push eax
push 0x10008728
call fcn.10052cbb
add esp, 0xc
mov byte [ebp - 0x74], 0
lea eax, [ebp - 0x74]
push eax
push 0x5d
lea ecx, [ebp - 0x630]
call fcn.1004a280
mov dword [ebp - 4], 6
and dword [ebp - 0x134], 0
jmp 0x10047eeb
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
mov eax, dword [ebp - 0x134]
cmp eax, dword [ebp - 0x480]
jge 0x10047f2f
lea eax, [ebp - 0x3d4]
push eax
push 0x100086a4
call fcn.10052cbb
pop ecx
pop ecx
push 1
push dword [ebp - 0x3d4]
lea eax, [ebp - 0x678]
push eax
lea ecx, [ebp - 0x630]
call fcn.1004a301
mov ecx, eax
call fcn.1004a320
jmp 0x10047ede
and dword [ebp - 0x1e0], 0
mov dword [ebp - 0xc8], 1
jmp 0x10047f4f
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0x5d
jge 0x10047fa9
push dword [ebp - 0xc8]
lea eax, [ebp - 0x668]
push eax
lea ecx, [ebp - 0x630]
call fcn.1004a301
mov ecx, eax
call fcn.1004a345
movzx eax, al
test eax, eax
je 0x10047f80
jmp 0x10047f42
cmp dword [ebp - 0x14c], 0
jle 0x10047f98
mov eax, dword [ebp - 0x14c]
dec eax
mov dword [ebp - 0x14c], eax
jmp 0x10047fa7
mov eax, dword [ebp - 0xc8]
dec eax
mov dword [ebp - 0x1e0], eax
jmp 0x10047fa9
jmp 0x10047f42
push dword [ebp - 0x1e0]
push 0x10008718
call fcn.100535f4
pop ecx
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x630]
call fcn.1004a2e1
jmp 0x10047e78
mov dword [ebp - 0x43c], 0x40b319b
mov dword [ebp - 0x34], 0
jmp 0x10047fe9
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 4
jge 0x10047fff
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x38c], 0xffffffff
jmp 0x10047fe2
mov dword [ebp - 0x34], 0
jmp 0x1004800f
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 1
jge 0x10048025
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x518], 0x7512
jmp 0x10048008
mov dword [ebp - 0x18], 0
jmp 0x10048035
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jg 0x100482fe
mov dword [ebp - 0xb4], 0x6fe23a26
mov dword [ebp - 0x13c], 0x1c8d535d
mov dword [ebp - 0x210], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x38c], 0x5720b963
je 0x10048079
mov dword [ebp - 0x1e8], 1
jmp 0x10048080
and dword [ebp - 0x1e8], 0
mov eax, dword [ebp - 0x1e8]
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0
je 0x100480f8
cmp dword [ebp - 0x18], 0
jne 0x100480ad
mov eax, 0xdfad5bef
test eax, eax
jne 0x100480ad
and dword [ebp - 0x1f0], 0
jmp 0x100480b7
mov dword [ebp - 0x1f0], 1
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x38c]
cmp eax, dword [ebp - 0x1f0]
jle 0x100480d5
mov dword [ebp - 0x434], 1
jmp 0x100480dc
and dword [ebp - 0x434], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x38c], 0xb5cf1c94
jb 0x100480f8
mov dword [ebp - 0x1f8], 1
jmp 0x100480ff
and dword [ebp - 0x1f8], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x38c]
cmp eax, dword [ebp - 0x1f8]
je 0x1004811d
mov dword [ebp - 0x200], 1
jmp 0x10048124
and dword [ebp - 0x200], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x38c]
cmp dword [ebp - 0x200], eax
je 0x10048142
mov dword [ebp - 0x3dc], 1
jmp 0x10048149
and dword [ebp - 0x3dc], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x38c], 0xee491ba6
jb 0x10048165
mov dword [ebp - 0x208], 1
jmp 0x1004816c
and dword [ebp - 0x208], 0
cmp dword [ebp - 0x208], 0
je 0x100481aa
mov dword [ebp - 0x470], 0xab551fa4
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x38c]
mov dword [ebp - 0x470], eax
push 0x7036
push 1
push 0x223c
push 1
call fcn.10038ee0
add esp, 0x10
jmp 0x100482eb
mov dword [ebp - 0x3e4], 1
mov dword [ebp - 0xfc], 0
mov dword [ebp - 0x114], 0x7268f57f
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x61c], eax
mov eax, dword [ebp - 0x114]
dec eax
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x638], eax
mov eax, dword [ebp - 0x238]
mov dword [ebp - 0x5b8], eax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x5a8], eax
mov dword [ebp - 0x210], 3
mov eax, dword [ebp - 0x210]
cmp dword [ebp - 0x3e4], eax
jne 0x10048229
mov dword [ebp - 0x218], 1
jmp 0x10048230
and dword [ebp - 0x218], 0
mov eax, dword [ebp - 0x218]
mov dword [ebp - 0xfc], eax
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x13c], eax
mov eax, dword [ebp - 0x13c]
imul eax, dword [ebp - 0x43c]
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 0
je 0x10048282
mov eax, 0x270c
test eax, eax
je 0x10048282
cmp dword [ebp - 0x13c], 0
je 0x10048282
mov dword [ebp - 0x220], 1
jmp 0x10048289
and dword [ebp - 0x220], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x38c]
cmp eax, dword [ebp - 0x220]
jne 0x100482a7
mov dword [ebp - 0x228], 1
jmp 0x100482ae
and dword [ebp - 0x228], 0
mov eax, dword [ebp - 0xb4]
imul eax, dword [ebp - 0x228]
cmp eax, dword [ebp - 0xb4]
jne 0x100482d8
cmp dword [ebp - 0xfc], 0
je 0x100482d8
mov dword [ebp - 0x230], 1
jmp 0x100482df
and dword [ebp - 0x230], 0
mov eax, dword [ebp - 0x230]
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0x5e], 0
lea eax, [ebp - 0x5e]
push eax
call fcn.10045eea
pop ecx
jmp 0x1004802e
jmp 0x10047e20
lea eax, [ebp - 0x238]
push eax
push 0x63c9
lea eax, [ebp - 0x9c]
push eax
push 0x5893
push 1
push 0x4b88
push 1
lea eax, [ebp - 0x15c]
push eax
call fcn.10039023
add esp, 0x20
mov eax, dword [ebp - 0xb0]
cmp dword [eax], 0x4550
je 0x10048560
mov dword [ebp - 0xa0], 0x24a8c6a5
mov dword [ebp - 0x3f4], 0x4feccdf
mov dword [ebp - 0x444], 0x283d3454
mov dword [ebp - 0xa0], 0
jmp 0x1004837c
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0x13
jne 0x1004854b
mov dword [ebp - 0x4c0], 0x69f4288a
mov dword [ebp - 0x4bc], 0x69f4288a
mov dword [ebp - 0x4b8], 0x69f4288a
mov dword [ebp - 0x4b4], 0x69f4288a
lea ecx, [ebp - 0x145]
call fcn.1001818e
push eax
lea eax, [ebp - 0x4b0]
push eax
lea eax, [ebp - 0x4c0]
push eax
lea ecx, [ebp - 0x670]
call fcn.10018191
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x504]
call fcn.1001807a
mov dword [ebp - 4], 7
mov dword [ebp - 0x80], 0xcb03629a
mov dword [ebp - 0x3ec], 0xb017290b
mov dword [ebp - 0x248], 0
mov dword [ebp - 0x80], 3
jmp 0x10048418
mov eax, dword [ebp - 0x80]
dec eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0
jl 0x10048537
push 3
lea ecx, [ebp - 0x368]
call fcn.1001803e
mov byte [ebp - 4], 8
lea eax, [ebp - 0x368]
push eax
lea eax, [ebp - 0x524]
push eax
call fcn.10011664
pop ecx
pop ecx
push 1
lea ecx, [ebp - 0x368]
call fcn.10018124
mov dword [eax], 3
jmp 0x10048481
push 1
lea ecx, [ebp - 0x368]
call fcn.10018124
mov dword [ebp - 0x164], eax
mov eax, dword [ebp - 0x164]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x164]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x368]
call fcn.10018124
cmp dword [eax], 0
jl 0x10048523
mov dword [ebp - 0x250], 7
mov dword [ebp - 0x490], 0xc3e5f88
lea eax, [ebp - 0x3ec]
push eax
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x250]
push eax
lea eax, [ebp - 0x368]
push eax
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x504]
push eax
lea eax, [ebp - 0x248]
push eax
lea eax, [ebp - 0x490]
push eax
call fcn.10045f31
add esp, 0x20
lea eax, [ebp - 0x3f4]
push eax
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x248]
push eax
lea eax, [ebp - 0x368]
push eax
lea eax, [ebp - 0x504]
push eax
lea eax, [ebp - 0x444]
push eax
lea eax, [ebp - 0x250]
push eax
call fcn.1004613f
add esp, 0x1c
jmp 0x1004845d
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x368]
call fcn.100180a0
jmp 0x10048411
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x504]
call fcn.100180a0
jmp 0x1004836f
mov byte [ebp - 0x5f], 0
lea eax, [ebp - 0x5f]
push eax
call fcn.10046298
pop ecx
xor eax, eax
jmp 0x10049568
mov dword [ebp - 0x620], 0x3556
mov byte [ebp - 0x6e], 0
lea eax, [ebp - 0x6e]
push eax
call fcn.100462d2
pop ecx
mov byte [ebp - 0x71], 0
lea eax, [ebp - 0x71]
push eax
call fcn.10046314
pop ecx
push dword [ebp - 0xb0]
push 1
push 0x5edd
push 0x7075
push 0x18ac
push 1
lea eax, [ebp - 0x108]
push eax
push 1
call fcn.100351bd
add esp, 0x20
mov dword [ebp - 0x54], 7
mov dword [ebp - 0x3fc], 0x71bc7dcd
mov dword [ebp - 0x38], 0
jmp 0x100485d1
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 1
jge 0x100485e7
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x260], 0x35568345
jmp 0x100485ca
mov dword [ebp - 0x38], 0
jmp 0x100485f7
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 3
jge 0x1004860d
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x5fc], 0x4f78d7cb
jmp 0x100485f0
mov dword [ebp - 0x54], 0
jmp 0x1004861d
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0
jg 0x10048748
mov dword [ebp - 0x84], 0xffffffff
mov dword [ebp - 0x3fc], 0xffff
cmp dword [ebp - 0x84], 0xade661fb
jbe 0x10048653
mov dword [ebp - 0x258], 1
jmp 0x1004865a
and dword [ebp - 0x258], 0
cmp dword [ebp - 0x258], 0x6acb
jle 0x10048672
mov dword [ebp - 0x478], 1
jmp 0x10048679
and dword [ebp - 0x478], 0
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x52c], eax
mov eax, dword [ebp - 0x84]
cmp dword [ebp - 0x84], eax
jle 0x100486a2
cmp dword [ebp - 0x84], 0
jne 0x100486a2
and dword [ebp - 0x270], 0
jmp 0x100486ac
mov dword [ebp - 0x270], 1
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp + eax*4 - 0x260]
mov dword [ebp - 0x268], eax
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x268]
mov dword [ebp + eax*4 - 0x260], ecx
mov eax, dword [ebp - 0x54]
imul eax, dword [ebp - 0x268]
cmp eax, dword [ebp - 0x270]
jg 0x100486ea
mov dword [ebp - 0x278], 1
jmp 0x100486f1
and dword [ebp - 0x278], 0
cmp dword [ebp - 0x278], 0xffffffff
jne 0x10048706
mov dword [ebp - 0x124], 1
jmp 0x1004870d
and dword [ebp - 0x124], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x124]
mov dword [ebp + eax - 0x5fc], ecx
mov eax, 0x59d568d5
sub eax, dword [ebp - 0x124]
mov dword [ebp - 0x84], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x5fc]
mov dword [ebp - 0x84], eax
jmp 0x10048616
cmp dword [ebp - 0x108], 0
jne 0x100488f7
mov dword [ebp - 0x5b0], 0x3556
call fcn.10046342
mov byte [ebp - 0x5d], 0
lea eax, [ebp - 0x5d]
push eax
call fcn.10046391
pop ecx
mov dword [ebp - 0x404], 0x23e6
cmp dword [ebp - 0x404], 0x909
jge 0x10048815
push 0x10ad5704
push 0x10ae9604
mov ecx, 0x1065d430
call fcn.100177fe
mov ecx, eax
call fcn.100177fe
and dword [ebp - 0x128], 0
jmp 0x100487bd
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
mov eax, dword [ebp - 0x128]
cmp eax, dword [0x10ad5704]
jge 0x100487f9
mov eax, dword [0x10ae9604]
cdq
push 0xa
pop ecx
idiv ecx
test edx, edx
je 0x100487e7
mov eax, dword [0x10ae9604]
dec eax
mov dword [0x10ae9604], eax
jmp 0x100487f7
mov eax, dword [0x10ae9604]
cdq
push 0xa
pop ecx
idiv ecx
mov dword [0x10ae9604], eax
jmp 0x100487b0
push fcn.1001c8e7
push dword [0x10ae9604]
mov ecx, 0x1065d378
call fcn.10017c40
mov ecx, eax
call fcn.10017c34
mov dword [ebp - 0x44c], 0x55cc25b
mov dword [ebp - 0x14], 0
jmp 0x1004882f
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x10048845
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x4a4], 0x124f84b8
jmp 0x10048828
mov dword [ebp - 0x14], 0
jmp 0x10048855
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 4
jge 0x1004886b
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x650], 0x39ed080c
jmp 0x1004884e
mov dword [ebp - 0x14], 0
jmp 0x1004887b
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x10048891
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x558], 0xb3f36565
jmp 0x10048874
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x4a4]
mov dword [ebp - 0x280], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x280]
mov dword [ebp + eax - 0x650], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x4a4]
mov dword [ebp - 0x288], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x288]
mov dword [ebp + eax - 0x558], ecx
mov eax, dword [ebp - 0x280]
imul eax, dword [ebp - 0x288]
mov dword [ebp - 0x44c], eax
xor eax, eax
jmp 0x10049568
push 0x19eb
push 0x5736
push 0x3393
push 0x1da5
push 1
push 0x600
lea eax, [ebp - 0x534]
push eax
push 0x47b6
push dword [ebp - 0x130]
lea eax, [ebp - 0x108]
push eax
push 0
push 0x5d5f
push 0x6e8a
push dword [ebp - 0xb0]
push 0x1b45
push 0x1d55
push 1
push 0x7a7b
push 0x79e2
lea eax, [ebp - 0x2c]
push eax
push 0x454d
push 0x6408
push 0x3fbb
call fcn.10043bb8
add esp, 0x5c
mov dword [ebp - 0x28], 0
mov dword [ebp - 0xa8], 0x7adf
mov dword [ebp - 0x40c], 0xf592758e
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x28], eax
jl 0x1004899d
mov dword [ebp - 0x298], 1
jmp 0x100489a4
and dword [ebp - 0x298], 0
mov eax, 0x63e31551
test eax, eax
je 0x100489fd
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x5f0], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x53c], eax
mov eax, dword [ebp - 0xa8]
add eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0xa8]
jne 0x100489dc
mov dword [ebp - 0x290], 1
jmp 0x100489e3
and dword [ebp - 0x290], 0
mov eax, dword [ebp - 0xa8]
add eax, dword [ebp - 0x290]
je 0x100489fd
mov dword [ebp - 0x2a0], 1
jmp 0x10048a04
and dword [ebp - 0x2a0], 0
mov eax, dword [ebp - 0x298]
add eax, dword [ebp - 0x2a0]
cmp eax, dword [ebp - 0x28]
jne 0x10048a27
cmp dword [ebp - 0xa8], 0
jne 0x10048a27
and dword [ebp - 0x2a8], 0
jmp 0x10048a31
mov dword [ebp - 0x2a8], 1
mov eax, dword [ebp - 0x2a8]
sub eax, dword [ebp - 0xa8]
mov dword [ebp - 0x40c], eax
mov dword [ebp - 0x28], 0xffffffef
jmp 0x10048a53
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0x3b
jge 0x10048a84
mov byte [ebp - 0x6d], 0
movzx eax, byte [ebp - 0x6d]
test eax, eax
je 0x10048a82
push 1
push 0x696f
push 0x39ec
push 0x1fdd
push 1
push 0x29
call fcn.100426b9
add esp, 0x18
jmp 0x10048a4c
lea eax, [ebp - 0xb0]
push eax
push 0
push 0x5c99
lea eax, [ebp - 0x2c]
push eax
push 0x1c5e
push 0x31f2
push 0x34fe
lea eax, [ebp + 8]
push eax
push 0x3a15
push 1
call fcn.1004345b
add esp, 0x28
lea eax, [ebp - 0xb0]
push eax
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0x2c8]
push eax
call fcn.100463d0
add esp, 0xc
mov dword [ebp - 0x394], 0x124f01c0
mov dword [ebp - 0x3a0], 0xc29a3df6
mov dword [ebp - 0x560], 0x9c5a
mov dword [ebp - 0x544], 9
mov dword [ebp - 0x488], 0x1cdc
cmp dword [ebp - 0x488], 0x41f
jge 0x10048bd8
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 0x5c]
push eax
push 0x10008b80
call fcn.10052cbb
add esp, 0x10
and dword [ebp - 0xb8], 0
cmp dword [ebp - 0x5c], 1
jne 0x10048b5a
cmp dword [ebp - 0x50], 1
jne 0x10048b5a
mov eax, dword [ebp - 0x5c]
add eax, dword [ebp - 0x8c]
add eax, dword [ebp - 0x50]
mov dword [ebp - 0xb8], eax
jmp 0x10048bc6
cmp dword [ebp - 0x5c], 1
je 0x10048b71
cmp dword [ebp - 0x8c], 1
jne 0x10048b86
mov eax, dword [ebp - 0x5c]
cmp eax, dword [ebp - 0x50]
jge 0x10048b86
mov eax, dword [ebp - 0x5c]
add eax, dword [ebp - 0x8c]
imul eax, dword [ebp - 0x50]
mov dword [ebp - 0xb8], eax
jmp 0x10048bc6
cmp dword [ebp - 0x50], 1
je 0x10048b9d
cmp dword [ebp - 0x8c], 1
jne 0x10048bb2
mov eax, dword [ebp - 0x5c]
cmp eax, dword [ebp - 0x50]
jl 0x10048bb2
mov eax, dword [ebp - 0x8c]
add eax, dword [ebp - 0x50]
imul eax, dword [ebp - 0x5c]
mov dword [ebp - 0xb8], eax
jmp 0x10048bc6
mov eax, dword [ebp - 0x5c]
imul eax, dword [ebp - 0x8c]
imul eax, dword [ebp - 0x50]
mov dword [ebp - 0xb8], eax
push dword [ebp - 0xb8]
push 0x10008780
call fcn.100535f4
pop ecx
pop ecx
mov dword [ebp - 0x564], 0x12491e29
mov dword [ebp - 0x550], 1
mov dword [ebp - 0x3a8], 6
mov dword [ebp - 0x56c], 0xffffffff
mov dword [ebp - 0x55c], 0x12e1dfe0
mov dword [ebp - 0x398], 0x2d83d783
mov dword [ebp - 0x574], 0xffffffff
mov dword [ebp - 0x3b8], 1
mov dword [ebp - 0x414], 0x2116
cmp dword [ebp - 0x414], 0x124b
jge 0x10048daf
mov dword [ebp - 0x20], 1
and dword [ebp - 0x1c], 0
lea eax, [ebp - 0x370]
push eax
push 0x10008b8c
call fcn.10052cbb
pop ecx
pop ecx
mov eax, dword [ebp - 0x370]
mov dword [ebp - 0x454], eax
mov eax, dword [ebp - 0x36c]
mov dword [ebp - 0x450], eax
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x450]
jg 0x10048ca7
jl 0x10048c90
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x454]
ja 0x10048ca7
push 0
push 0xa
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
call fcn.10057560
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], edx
jmp 0x10048c78
push 0
push 0xa
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
call fcn.1006b1b0
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x20]
sub eax, 1
mov ecx, dword [ebp - 0x1c]
sbb ecx, 0
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x370]
sub eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x36c]
sbb ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x11c], eax
mov dword [ebp - 0x118], ecx
and dword [ebp - 0xc0], 0
cmp dword [ebp - 0x1c], 0
jl 0x10048d3c
jg 0x10048d01
cmp dword [ebp - 0x20], 0
jbe 0x10048d3c
push 0
push 0xa
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
call fcn.1006b260
mov ecx, eax
mov esi, edx
mov eax, dword [ebp - 0xc0]
cdq
add eax, ecx
adc edx, esi
mov dword [ebp - 0xc0], eax
push 0
push 0xa
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
call fcn.1006b1b0
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], edx
jmp 0x10048cf3
cmp dword [ebp - 0x118], 0
jl 0x10048d9d
jg 0x10048d50
cmp dword [ebp - 0x11c], 0
jbe 0x10048d9d
push 0
push 0xa
push dword [ebp - 0x118]
push dword [ebp - 0x11c]
call fcn.1006b260
mov ecx, eax
mov esi, edx
mov eax, dword [ebp - 0xc0]
cdq
add eax, ecx
adc edx, esi
mov dword [ebp - 0xc0], eax
push 0
push 0xa
push dword [ebp - 0x118]
push dword [ebp - 0x11c]
call fcn.1006b1b0
mov dword [ebp - 0x11c], eax
mov dword [ebp - 0x118], edx
jmp 0x10048d3c
push dword [ebp - 0xc0]
push 0x10008718
call fcn.100535f4
pop ecx
pop ecx
mov dword [ebp - 0x3c0], 0
mov dword [ebp - 0x2b0], 0xaf7cc73e
mov dword [ebp - 0x3c], 0
jmp 0x10048dd3
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 4
jge 0x10048de9
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x660], 0x312fbb6b
jmp 0x10048dcc
mov dword [ebp - 0x3c], 0
jmp 0x10048df9
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 2
jge 0x10048e0f
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x4ac], 0xd714
jmp 0x10048df2
mov eax, dword [ebp - 0x2b0]
inc eax
mov dword [ebp - 0x2b0], eax
cmp dword [ebp - 0x398], 0
jne 0x10048e33
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x4ac], 0
cmp dword [ebp - 0x3a0], 0
je 0x10048e9a
cmp dword [ebp - 0x3a8], 0
jne 0x10048e69
cmp dword [ebp - 0x394], 0
jne 0x10048e69
mov eax, 0xdbf60700
test eax, eax
jne 0x10048e69
cmp dword [ebp - 0x3b8], 0
jne 0x10048e69
and dword [ebp - 0x2b8], 0
jmp 0x10048e73
mov dword [ebp - 0x2b8], 1
mov eax, dword [ebp - 0x2b8]
sub eax, dword [ebp - 0x3c0]
push 4
pop ecx
imul ecx, ecx, 0
add eax, dword [ebp + ecx - 0x4ac]
je 0x10048e9a
mov dword [ebp - 0x2c0], 1
jmp 0x10048ea1
and dword [ebp - 0x2c0], 0
imul eax, dword [ebp - 0x2c0], 0xf121
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x660], eax
cmp dword [ebp - 0x2c8], 0
je 0x10048f08
mov dword [ebp - 0x3c8], 0
lea eax, [ebp - 0x3c8]
push eax
call fcn.100463fe
pop ecx
lea eax, [ebp - 0x2c8]
push eax
push 0x1ba3
push 1
push 0x795f
lea eax, [ebp - 0x2c]
push eax
push 1
push 0x4af1
push 0x6b06
push 0x1f4a
call fcn.1004329c
add esp, 0x24
mov dword [ebp - 0xe8], 0xfffffff7
mov dword [ebp - 0x3d8], 0x2a3cc92e
mov dword [ebp - 0xe4], 0xffffffff
mov dword [ebp - 0x140], 6
mov dword [ebp - 0x138], 7
mov dword [ebp - 0x10c], 0
jmp 0x10048f53
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 3
jge 0x10048f6f
mov eax, dword [ebp - 0x10c]
mov dword [ebp + eax*4 - 0x4f8], 0x82c32b96
jmp 0x10048f46
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x57c], eax
mov eax, dword [ebp - 0x140]
mov dword [ebp - 0x568], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x4f8]
mov dword [ebp - 0x618], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x4f8]
mov dword [ebp - 0x570], eax
cmp dword [ebp - 0xe4], 6
jbe 0x10048fc1
mov dword [ebp - 0x2d0], 1
jmp 0x10048fc8
and dword [ebp - 0x2d0], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x2d0]
add ecx, 0x75dd
cmp dword [ebp + eax - 0x4f8], ecx
jne 0x10048fee
mov dword [ebp - 0x3d0], 1
jmp 0x10048ff5
and dword [ebp - 0x3d0], 0
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x5c0], eax
mov eax, dword [ebp - 0x138]
dec eax
mov dword [ebp - 0x138], eax
or eax, 0xffffffff
je 0x10049028
cmp dword [ebp - 0xe8], 0
je 0x10049028
mov dword [ebp - 0x2d8], 1
jmp 0x1004902f
and dword [ebp - 0x2d8], 0
mov eax, dword [ebp - 0x2d8]
sub eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0xe4]
lea eax, [eax + ecx - 0x2a26f636]
cmp eax, dword [ebp - 0x3d8]
je 0x1004905c
mov dword [ebp - 0x2e0], 1
jmp 0x10049063
and dword [ebp - 0x2e0], 0
mov eax, dword [ebp - 0x140]
cmp dword [ebp - 0x2e0], eax
jg 0x1004907d
mov dword [ebp - 0x2e8], 1
jmp 0x10049084
and dword [ebp - 0x2e8], 0
mov eax, dword [ebp - 0x2e8]
sub eax, dword [ebp - 0x140]
je 0x100490a7
cmp dword [ebp - 0xe8], 0
je 0x100490a7
mov dword [ebp - 0x2f0], 1
jmp 0x100490ae
and dword [ebp - 0x2f0], 0
imul eax, dword [ebp - 0x2f0], 0xf1c1
cmp eax, 0xffff
ja 0x100490cb
mov dword [ebp - 0x2f8], 1
jmp 0x100490d2
and dword [ebp - 0x2f8], 0
mov eax, dword [ebp - 0xe8]
imul eax, dword [ebp - 0x2f8]
test eax, eax
je 0x100490f8
mov eax, 0xb077cb11
test eax, eax
je 0x100490f8
mov dword [ebp - 0x300], 1
jmp 0x100490ff
and dword [ebp - 0x300], 0
cmp dword [ebp - 0x300], 0x4d3380d4
jl 0x10049117
mov dword [ebp - 0x308], 1
jmp 0x1004911e
and dword [ebp - 0x308], 0
mov eax, dword [ebp - 0x308]
mov dword [ebp - 0xe4], eax
mov byte [ebp - 0x60], 0
lea eax, [ebp - 0x60]
push eax
call fcn.10046477
pop ecx
push dword [ebp - 0x2c]
call fcn.10033642
pop ecx
test eax, eax
jne 0x100491b5
mov dword [ebp - 0xf8], 0x831713b9
mov dword [ebp - 0x3e0], 1
mov dword [ebp - 0x3e8], 0x82a10aa4
mov dword [ebp - 0xf8], 0
jmp 0x1004917c
mov eax, dword [ebp - 0xf8]
dec eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0xfffffffe
jge 0x100491ae
mov dword [ebp - 0x3f0], 0x4e7937d8
lea eax, [ebp - 0x3e0]
push eax
lea eax, [ebp - 0x3e8]
push eax
lea eax, [ebp - 0x3f0]
push eax
call fcn.1004649e
add esp, 0xc
jmp 0x1004916f
xor eax, eax
jmp 0x10049568
mov dword [ebp - 0x400], 0
mov dword [ebp - 0x3f8], 0x2b00
mov dword [ebp - 0x48], 0
jmp 0x100491d9
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 1
jge 0x100491ef
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x578], 0x8c6a53d0
jmp 0x100491d2
mov dword [ebp - 0x48], 0
jmp 0x100491ff
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 3
jge 0x10049215
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x684], 0xdfe4b283
jmp 0x100491f8
mov byte [ebp - 0x6f], 0
lea eax, [ebp - 0x6f]
push eax
call fcn.10046512
pop ecx
lea eax, [ebp - 0x3f8]
push eax
lea eax, [ebp - 0x400]
push eax
call fcn.10046542
pop ecx
pop ecx
push 1
push 0
push dword [ebp - 0x2c]
push 0x2955
push 0xf4b
call fcn.10037479
add esp, 0x14
mov dword [ebp - 0x100], 0xffffffff
mov dword [ebp - 0x600], 0xfffffffd
mov dword [ebp - 0x580], 0x15912491
mov dword [ebp - 0x5c8], 0x49c9fb37
mov dword [ebp - 0x588], 8
mov dword [ebp - 0x408], 0x58a012e1
mov dword [ebp - 0x100], 0
jmp 0x100492a6
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0x14
jg 0x100492d2
mov dword [ebp - 0x634], 7
mov dword [ebp - 0x590], 7
lea eax, [ebp - 0x408]
push eax
call fcn.100465ad
pop ecx
jmp 0x10049299
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax]
cmp dword [eax + 0x28], 0
je 0x100493ef
mov dword [ebp - 0x5d0], 9
mov byte [ebp - 0x65], 0
lea eax, [ebp - 0x65]
push eax
call fcn.100465c6
pop ecx
call fcn.10046650
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x108]
add ecx, dword [eax + 0x28]
mov dword [ebp - 0x318], ecx
push 1
lea ecx, [ebp - 0x37c]
call fcn.1001803e
mov dword [ebp - 4], 9
lea eax, [ebp - 0x37c]
push eax
push 1
push 1
push 0x80f
push 0x2a06
lea eax, [ebp - 0x598]
push eax
call fcn.10044e98
add esp, 0x18
lea eax, [ebp - 0x37c]
push eax
call fcn.10046675
pop ecx
push 0
lea ecx, [ebp - 0x37c]
call fcn.10018124
mov esi, eax
push 0
lea ecx, [ebp - 0x37c]
call fcn.10018124
mov ecx, dword [esi]
cmp ecx, dword [eax]
jle 0x10049385
mov dword [ebp - 0x310], 1
jmp 0x1004938c
and dword [ebp - 0x310], 0
push 0
lea ecx, [ebp - 0x37c]
call fcn.10018124
mov ecx, dword [ebp - 0x310]
mov dword [eax], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x37c]
call fcn.100180a0
cmp dword [ebp - 0x318], 0
jne 0x100493c0
xor eax, eax
jmp 0x10049568
push 0
push 1
push 0xdeadbeef
call dword [ebp - 0x318]
mov dword [ebp - 0x410], eax
cmp dword [ebp - 0x410], 0
jne 0x100493e5
xor eax, eax
jmp 0x10049568
lea eax, [ebp - 0x2c]
push eax
call fcn.100466fd
pop ecx
mov dword [ebp - 0x320], 0
mov dword [ebp - 0x328], 0x743d837b
mov dword [ebp - 0xc4], 0x871d976f
push 4
lea ecx, [ebp - 0x60c]
call fcn.1001803e
mov dword [ebp - 4], 0xa
lea eax, [ebp - 0x60c]
push eax
push 1
push 0x1b86
push 0x76e4
lea eax, [ebp - 0x610]
push eax
push 1
call fcn.10045183
add esp, 0x18
push 0x4660
lea eax, [ebp - 0x320]
push eax
lea eax, [ebp - 0xc4]
push eax
lea eax, [ebp - 0x328]
push eax
push 0x1022
push 1
push 1
call fcn.100456b1
add esp, 0x1c
mov dword [ebp - 0xc4], 0
jmp 0x10049489
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 4
jle 0x10049538
push 2
lea ecx, [ebp - 0x4e0]
call fcn.1001803e
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x420], 0xfffffffe
mov dword [ebp - 0x418], 9
lea eax, [ebp - 0x4e0]
push eax
lea eax, [ebp - 0x5a0]
push eax
call fcn.10046717
pop ecx
pop ecx
push 0x4c52
lea eax, [ebp - 0x320]
push eax
push 0x402f
push 1
push 0x2030
push 0x681f
lea eax, [ebp - 0x328]
push eax
lea eax, [ebp - 0x418]
push eax
push 0x9db
push 0x3bef
lea eax, [ebp - 0x420]
push eax
push 1
push 1
push 0x32fb
lea eax, [ebp - 0x4e0]
push eax
call fcn.1004592c
add esp, 0x3c
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x4e0]
call fcn.100180a0
jmp 0x1004947c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x60c]
call fcn.100180a0
mov eax, dword [ebp - 0x2c]
cmp dword [eax + 0x10], 0
je 0x1004955b
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x330], eax
jmp 0x10049562
and dword [ebp - 0x330], 0
mov eax, dword [ebp - 0x330]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret