Function at 0x10050f66
Capabilities:
Connect pipe

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100745be
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x638
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 8]
test eax, eax
je 0x100523a7
lea eax, [ebp + 0x2c]
mov dword [ebp - 0x32c], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x314], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x370], eax
lea eax, [ebp + 0x10]
mov dword [ebp - 0x368], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x3f4], eax
mov eax, dword [ebp - 0x32c]
movzx eax, byte [eax]
test eax, eax
je 0x1005233f
mov eax, dword [ebp - 0x368]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x370]
mov dword [ebp - 0x26c], eax
mov eax, dword [0x10dbd3b8]
and eax, 1
jne 0x1005101e
mov eax, dword [0x10dbd3b8]
or eax, 1
mov dword [0x10dbd3b8], eax
and dword [ebp - 4], 0
mov ecx, 0x10dbd390
call fcn.1005592c
push 0x100748ad
call fcn.10058cb5
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0xc4], 0x53b26bdd
mov dword [ebp - 0x458], 9
mov dword [ebp - 0xc4], 0x16
jmp 0x1005104b
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0x19
jle 0x100511f4
mov dword [ebp - 0x2a0], 0x10b9
push 0
push 0x2281
push 0x68af
lea eax, [ebp - 0x2a0]
push eax
push 0x6699
push 0xe94
push 1
push 1
call fcn.100542a5
add esp, 0x20
mov dword [ebp - 0x250], 0x1439
mov dword [ebp - 0x3a8], 0x1000f3a0
cmp dword [ebp - 0x250], 0x1700
jle 0x10051189
and dword [ebp - 0x84], 0
jmp 0x100510c5
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0x5a30
jge 0x10051189
and dword [ebp - 0xd4], 0
jmp 0x100510eb
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0x29a8
jge 0x10051184
and dword [ebp - 0x9c], 0
jmp 0x10051111
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0x43d6
jge 0x1005117f
and dword [ebp - 0xc0], 0
jmp 0x10051133
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0x74f6
jge 0x1005117d
mov eax, dword [ebp - 0x84]
imul eax, dword [ebp - 0xd4]
add eax, dword [ebp - 0x9c]
and eax, dword [ebp - 0xc0]
cdq
mov dword [ebp - 0x37c], eax
mov dword [ebp - 0x378], edx
push dword [ebp - 0x378]
push dword [ebp - 0x37c]
mov ecx, 0x1061aa98
call fcn.10026e04
jmp 0x10051126
jmp 0x10051104
jmp 0x100510de
jmp 0x100510b8
mov dword [ebp - 4], 1
cmp dword [ebp - 0x250], 0x1292
jge 0x100511ac
mov edx, dword [ebp - 0x3a8]
mov ecx, 0x1061aa98
call fcn.10029b1c
jmp 0x100511c8
or dword [ebp - 4], 0xffffffff
jmp 0x100511d2
push 0
lea eax, [ebp - 0x2a0]
push eax
push 0x642a
push 1
push 0x298b
call fcn.10053e04
add esp, 0x14
jmp 0x1005103e
mov eax, dword [ebp - 0x74]
mov ecx, dword [eax]
call fcn.1004b36d
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xc8], 0xffffffff
mov dword [ebp - 0x5c], 0
push 3
lea ecx, [ebp - 0x408]
call fcn.10027044
mov dword [ebp - 4], 3
mov dword [ebp - 0xec], 0x9f361739
mov dword [ebp - 0x3c0], 0xfffffffd
mov dword [ebp - 0xa4], 0
jmp 0x10051256
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 3
jge 0x10051278
push dword [ebp - 0xa4]
lea ecx, [ebp - 0x408]
call fcn.100270e2
mov dword [eax], 1
jmp 0x10051249
mov byte [ebp - 0x36], 0
push 0x2021
push 0x1569
push 0
push 0x53a7
lea eax, [ebp - 0x36]
push eax
call fcn.10054599
add esp, 0x14
mov eax, dword [ebp - 0x5c]
cmp eax, dword [ebp - 0x5c]
jge 0x100512ad
mov dword [ebp - 0x3b0], 1
jmp 0x100512b4
and dword [ebp - 0x3b0], 0
mov dword [ebp - 0x5c], 0xfffffff6
mov esi, dword [ebp - 0x5c]
push 2
lea ecx, [ebp - 0x408]
call fcn.100270e2
mov dword [eax], esi
mov eax, 0x2206dd2c
test eax, eax
jne 0x100512e5
cmp dword [ebp - 0x5c], 0
jne 0x100512e5
and dword [ebp - 0x3b8], 0
jmp 0x100512ef
mov dword [ebp - 0x3b8], 1
cmp dword [ebp - 0x5c], 0
je 0x10051313
push 0
lea ecx, [ebp - 0x408]
call fcn.100270e2
cmp dword [eax], 0
je 0x10051313
mov dword [ebp - 0x2a8], 1
jmp 0x1005131a
and dword [ebp - 0x2a8], 0
mov eax, dword [ebp - 0xc8]
cmp dword [ebp - 0x2a8], eax
je 0x10051334
mov dword [ebp - 0x29c], 1
jmp 0x1005133b
and dword [ebp - 0x29c], 0
mov eax, dword [ebp - 0xc8]
cmp dword [ebp - 0x29c], eax
je 0x10051355
mov dword [ebp - 0x298], 1
jmp 0x1005135c
and dword [ebp - 0x298], 0
cmp dword [ebp - 0x298], 0xfffffff6
jge 0x10051371
mov dword [ebp - 0x130], 1
jmp 0x10051378
and dword [ebp - 0x130], 0
mov eax, dword [ebp - 0xec]
dec eax
mov dword [ebp - 0xec], eax
mov eax, dword [ebp - 0xec]
cmp eax, dword [ebp - 0x130]
jle 0x1005139f
mov dword [ebp - 0x128], 1
jmp 0x100513a6
and dword [ebp - 0x128], 0
imul eax, dword [ebp - 0x128], 0
test eax, eax
je 0x100513c2
or eax, 0xffffffff
je 0x100513c2
mov dword [ebp - 0x12c], 1
jmp 0x100513c9
and dword [ebp - 0x12c], 0
mov eax, dword [ebp - 0x12c]
add eax, 0x6de6b933
cmp dword [ebp - 0xc8], eax
je 0x100513e8
mov dword [ebp - 0x1ec], 1
jmp 0x100513ef
and dword [ebp - 0x1ec], 0
mov eax, dword [ebp - 0xc8]
cmp dword [ebp - 0x1ec], eax
jge 0x10051409
mov dword [ebp - 0x134], 1
jmp 0x10051410
and dword [ebp - 0x134], 0
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x3c0], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x408]
call fcn.100270c6
cmp dword [ebp - 0xe0], 6
jae 0x10051534
mov eax, dword [ebp - 0x74]
mov eax, dword [eax]
mov dword [ebp - 0x3c8], eax
lea eax, [ebp - 0x4a0]
push eax
mov ecx, 0x10dbd390
call fcn.100271bf
push eax
lea eax, [ebp - 0x3c8]
push eax
lea eax, [ebp - 0x4e4]
push eax
mov ecx, 0x10dbd390
call fcn.100271d6
mov ecx, eax
call fcn.10027031
movzx eax, al
test eax, eax
je 0x10051534
mov dword [ebp - 0x13c], 1
mov dword [ebp - 0x24c], 0xfffffffd
push 0x1e99
push 0x4cc9
push 1
push 0x7071
push 0x33d7
lea eax, [ebp - 0x13c]
push eax
push 1
push 0x44a0
lea eax, [ebp - 0x24c]
push eax
push 1
push 0x204
call fcn.1004f426
add esp, 0x2c
push 1
push 0x79e2
lea eax, [ebp - 0x24c]
push eax
push 0x4d90
push 1
push 0
push 0x3d1c
push 0x6980
lea eax, [ebp - 0x13c]
push eax
push 0x5a74
push 0x2dd1
call fcn.100549a6
add esp, 0x2c
mov eax, dword [ebp - 0x74]
mov eax, dword [eax]
mov dword [ebp - 0x3d0], eax
lea eax, [ebp - 0x3d0]
push eax
mov ecx, 0x10dbd390
call fcn.10055980
push eax
mov ecx, dword [ebp - 0x26c]
call fcn.1005561d
jmp 0x10053a7d
lea ecx, [ebp - 0x4c0]
call fcn.100555ad
mov dword [ebp - 4], 4
mov dword [ebp - 0xac], 0xa2cb51db
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x34], 1
push 2
lea ecx, [ebp - 0x2c0]
call fcn.10027044
mov byte [ebp - 4], 5
push 0x19b0
lea eax, [ebp - 0x4f0]
push eax
push 1
push 0
lea eax, [ebp - 0x2c0]
push eax
push 0x4a79
push 0x4a0f
push 0x54d3
call fcn.10050a3b
add esp, 0x20
cmp dword [ebp - 0x1c], 0
je 0x10051627
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x1c]
jle 0x100515bb
mov dword [ebp - 0x1f4], 1
jmp 0x100515c2
and dword [ebp - 0x1f4], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x1f4], eax
jl 0x100515d9
mov dword [ebp - 0x360], 1
jmp 0x100515e0
and dword [ebp - 0x360], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x4cc], eax
cmp dword [ebp - 0x1c], 0
jne 0x100515fe
cmp dword [ebp - 0x1c], 0
jne 0x100515fe
and dword [ebp - 0x2f4], 0
jmp 0x10051608
mov dword [ebp - 0x2f4], 1
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x58c], eax
mov eax, 0x26f3
cmp eax, 3
jae 0x10051627
mov dword [ebp - 0x144], 1
jmp 0x1005162e
and dword [ebp - 0x144], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x144], eax
jle 0x10051645
mov dword [ebp - 0x27c], 1
jmp 0x1005164c
and dword [ebp - 0x27c], 0
mov eax, dword [ebp - 0x27c]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
add eax, 0x58bf
jne 0x10051674
cmp dword [ebp - 0x34], 0
jne 0x10051674
and dword [ebp - 0x14c], 0
jmp 0x1005167e
mov dword [ebp - 0x14c], 1
push 1
lea ecx, [ebp - 0x2c0]
call fcn.100270e2
mov ecx, dword [ebp - 0x14c]
cmp ecx, dword [eax]
jl 0x100516a1
mov dword [ebp - 0x1fc], 1
jmp 0x100516a8
and dword [ebp - 0x1fc], 0
push 0
lea ecx, [ebp - 0x2c0]
call fcn.100270e2
mov ecx, dword [ebp - 0x1fc]
cmp ecx, dword [eax]
jne 0x100516cb
mov dword [ebp - 0x154], 1
jmp 0x100516d2
and dword [ebp - 0x154], 0
mov eax, dword [ebp - 0xac]
dec eax
mov dword [ebp - 0xac], eax
push 1
lea ecx, [ebp - 0x2c0]
call fcn.100270e2
mov ecx, dword [ebp - 0x154]
add ecx, dword [eax]
cmp dword [ebp - 0xac], ecx
jne 0x10051708
mov dword [ebp - 0x254], 1
jmp 0x1005170f
and dword [ebp - 0x254], 0
mov esi, dword [ebp - 0x254]
sub esi, 9
push 1
lea ecx, [ebp - 0x2c0]
call fcn.100270e2
mov dword [eax], esi
mov dword [ebp - 0x34], 0
jmp 0x10051737
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 1
jg 0x1005176e
push 1
push 0
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0xac]
push eax
push 1
push 0xd48
push 0x7d69
push 0x2a25
lea eax, [ebp - 0x34]
push eax
call fcn.100543e2
add esp, 0x24
jmp 0x10051730
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2c0]
call fcn.100270c6
mov eax, dword [ebp - 0xe0]
xor edx, edx
push 2
pop ecx
div ecx
test edx, edx
jne 0x10052308
push 2
lea ecx, [ebp - 0x2d8]
call fcn.10027044
mov byte [ebp - 4], 6
mov dword [ebp - 0x40], 0x39beb064
mov dword [ebp - 0x204], 0x9e2a8d3a
mov dword [ebp - 0x2fc], 0
mov dword [ebp - 0x374], 0x1c0a
cmp dword [ebp - 0x374], 0x6b5
jge 0x10051c0c
push 0x20
pop eax
imul esi, eax, 0
call fcn.10059aa4
add eax, esi
push eax
push 0x1000f41c
push 0x1000f420
call fcn.10059d99
add esp, 0xc
push 0x20
pop esi
shl esi, 0
call fcn.10059aa4
add eax, esi
push eax
push 0x1000f428
push 0x1000f42c
call fcn.10059d99
add esp, 0xc
xor eax, eax
inc eax
je 0x10051c0c
push 0x10dbce58
push 0x1000e1fc
call fcn.10058aab
pop ecx
pop ecx
cmp dword [0x10dbce58], 0
jne 0x10051840
jmp 0x10051c0c
push 0x10dbceb8
push 0x10dbd208
push 0x10dbcea8
push 0x10dbd1e0
push 0x10dbcf08
push 0x10dbcf10
push 0x10dbd210
push 0x10dbd1d8
push 0x10dbceb0
push 0x1000f434
call fcn.10058aab
add esp, 0x20
movsd xmm0, qword [0x1000f5f0]
movsd qword [esp], xmm0
movsd xmm0, qword [0x10dbcea8]
subsd xmm0, qword [0x10dbcf08]
push ecx
push ecx
movsd qword [esp], xmm0
call fcn.10059780
add esp, 0x10
fstp qword [ebp - 0x538]
movsd xmm0, qword [ebp - 0x538]
push ecx
push ecx
movsd xmm1, qword [0x1000f5f0]
movsd qword [esp], xmm1
movsd xmm1, qword [0x10dbd1e0]
subsd xmm1, qword [0x10dbcf10]
push ecx
push ecx
movsd qword [esp], xmm1
movsd qword [ebp - 0x570], xmm0
call fcn.10059780
add esp, 0x10
fstp qword [ebp - 0x4d4]
movsd xmm0, qword [ebp - 0x4d4]
movsd xmm1, qword [ebp - 0x570]
addsd xmm0, xmm1
movsd qword [0x10dbcf18], xmm0
and dword [ebp - 0xd0], 0
jmp 0x10051922
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0xd0]
cmp eax, dword [0x10dbce58]
jge 0x1005193f
mov eax, dword [ebp - 0xd0]
mov byte [eax + 0x10dbd1f8], 0
jmp 0x10051915
and dword [ebp - 0x24], 0
jmp 0x1005194c
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
cmp eax, dword [0x10dbce58]
jge 0x10051be2
cvtsi2sd xmm0, dword [0x10dbce58]
or ecx, 0xffffffff
movsd qword [ebp - 0x4e0], xmm0
call fcn.10055cc4
mulsd xmm0, qword [0x1000f5f0]
movsd xmm1, qword [ebp - 0x4e0]
divsd xmm0, xmm1
cvtsi2sd xmm1, dword [ebp - 0x24]
cvtsi2sd xmm2, dword [0x10dbce58]
or ecx, 0xffffffff
movsd qword [ebp - 0x510], xmm0
movsd qword [ebp - 0x4ec], xmm1
movsd qword [ebp - 0x544], xmm2
call fcn.10055cc4
mulsd xmm0, qword [0x1000f5f0]
movsd xmm1, qword [ebp - 0x544]
divsd xmm0, xmm1
movsd xmm1, qword [ebp - 0x4ec]
mulsd xmm0, xmm1
push ecx
push ecx
movsd qword [esp], xmm0
call fcn.10059dc0
pop ecx
pop ecx
fstp qword [ebp - 0x5b4]
movsd xmm0, qword [ebp - 0x5b4]
mov eax, dword [ebp - 0x24]
inc eax
cvtsi2sd xmm1, eax
cvtsi2sd xmm2, dword [0x10dbce58]
or ecx, 0xffffffff
movsd qword [ebp - 0x57c], xmm0
movsd qword [ebp - 0x550], xmm1
movsd qword [ebp - 0x4f8], xmm2
call fcn.10055cc4
mulsd xmm0, qword [0x1000f5f0]
movsd xmm1, qword [ebp - 0x4f8]
divsd xmm0, xmm1
movsd xmm1, qword [ebp - 0x550]
mulsd xmm0, xmm1
push ecx
push ecx
movsd qword [esp], xmm0
call fcn.10059dc0
pop ecx
pop ecx
fstp qword [ebp - 0x504]
movsd xmm0, qword [ebp - 0x504]
movsd xmm1, qword [ebp - 0x57c]
subsd xmm0, xmm1
movsd xmm1, qword [0x1000f5f0]
mulsd xmm1, qword [0x10dbd210]
divsd xmm1, qword [0x1000f5f8]
mulsd xmm1, xmm0
movsd xmm0, qword [ebp - 0x510]
divsd xmm1, xmm0
mov eax, dword [ebp - 0x24]
movsd qword [eax*8 + 0x10dbcec0], xmm1
cvtsi2sd xmm0, dword [0x10dbce58]
or ecx, 0xffffffff
movsd qword [ebp - 0x55c], xmm0
call fcn.10055cc4
mulsd xmm0, qword [0x1000f5f0]
movsd xmm1, qword [ebp - 0x55c]
divsd xmm0, xmm1
mov eax, dword [ebp - 0x24]
inc eax
cvtsi2sd xmm1, eax
cvtsi2sd xmm2, dword [0x10dbce58]
or ecx, 0xffffffff
movsd qword [ebp - 0x484], xmm0
movsd qword [ebp - 0x5a0], xmm1
movsd qword [ebp - 0x51c], xmm2
call fcn.10055cc4
mulsd xmm0, qword [0x1000f5f0]
movsd xmm1, qword [ebp - 0x51c]
divsd xmm0, xmm1
movsd xmm1, qword [ebp - 0x5a0]
mulsd xmm0, xmm1
push ecx
push ecx
movsd qword [esp], xmm0
call fcn.10059650
pop ecx
pop ecx
fstp qword [ebp - 0x44c]
movsd xmm0, qword [ebp - 0x44c]
cvtsi2sd xmm1, dword [ebp - 0x24]
cvtsi2sd xmm2, dword [0x10dbce58]
or ecx, 0xffffffff
movsd qword [ebp - 0x478], xmm0
movsd qword [ebp - 0x460], xmm1
movsd qword [ebp - 0x454], xmm2
call fcn.10055cc4
mulsd xmm0, qword [0x1000f5f0]
movsd xmm1, qword [ebp - 0x454]
divsd xmm0, xmm1
movsd xmm1, qword [ebp - 0x460]
mulsd xmm0, xmm1
push ecx
push ecx
movsd qword [esp], xmm0
call fcn.10059650
pop ecx
pop ecx
fstp qword [ebp - 0x46c]
movsd xmm0, qword [ebp - 0x46c]
movsd xmm1, qword [ebp - 0x478]
subsd xmm0, xmm1
movsd xmm1, qword [0x1000f5f0]
mulsd xmm1, qword [0x10dbd210]
divsd xmm1, qword [0x1000f5f8]
mulsd xmm1, xmm0
movsd xmm0, qword [ebp - 0x484]
divsd xmm1, xmm0
mov eax, dword [ebp - 0x24]
movsd qword [eax*8 + 0x10dbce60], xmm1
jmp 0x10051945
mov byte [0x10dbce5c], 0
push 0
call fcn.10050e7b
pop ecx
movzx eax, byte [0x10dbce5c]
test eax, eax
jne 0x10051c07
push 0x1000f464
call fcn.10058cdf
pop ecx
jmp 0x10051818
lea eax, [ebp - 0x4c8]
push eax
lea eax, [ebp - 0x2d8]
push eax
push 0x434e
push 0
push 1
call fcn.1004f88b
add esp, 0x14
mov dword [ebp - 0x40], 1
jmp 0x10051c3b
mov eax, dword [ebp - 0x40]
dec eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jl 0x10051d5b
mov dword [ebp - 0xb4], 0
jmp 0x10051c5e
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 2
jge 0x10051c7a
mov eax, dword [ebp - 0xb4]
mov dword [ebp + eax*4 - 0x490], 0xd9ed
jmp 0x10051c51
mov esi, dword [ebp - 0x2fc]
push 1
lea ecx, [ebp - 0x2d8]
call fcn.100270e2
cmp esi, dword [eax]
jl 0x10051cb6
mov eax, 0x383c
test eax, eax
jne 0x10051cb6
push dword [ebp - 0x40]
lea ecx, [ebp - 0x2d8]
call fcn.100270e2
cmp dword [eax], 0
jne 0x10051cb6
and dword [ebp - 0x15c], 0
jmp 0x10051cc0
mov dword [ebp - 0x15c], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x490]
mov dword [ebp - 0x204], eax
mov eax, dword [ebp - 0x15c]
neg eax
mov ecx, dword [ebp - 0x204]
sub ecx, dword [ebp - 0x40]
cmp ecx, eax
jl 0x10051cf4
mov dword [ebp - 0x164], 1
jmp 0x10051cfb
and dword [ebp - 0x164], 0
push dword [ebp - 0x40]
lea ecx, [ebp - 0x2d8]
call fcn.100270e2
mov eax, dword [eax]
cmp eax, dword [ebp - 0x164]
jg 0x10051d1f
mov dword [ebp - 0x294], 1
jmp 0x10051d26
and dword [ebp - 0x294], 0
push 1
lea ecx, [ebp - 0x2d8]
call fcn.100270e2
mov ecx, dword [ebp - 0x294]
mov dword [eax], ecx
push 0xe4a
push 0x153f
push 0x14f9
push 1
push 1
call fcn.1004f88b
add esp, 0x14
jmp 0x10051c34
mov byte [ebp - 0x38], 0
movzx eax, byte [ebp - 0x38]
test eax, eax
je 0x10051d8c
push 1
push 0x673e
push 0x7258
push 0x2355
push 0x43be
push 0x7511
push 1
call fcn.1004f951
add esp, 0x1c
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2d8]
call fcn.100270c6
lea eax, [ebp - 0x630]
push eax
call fcn.10049eca
pop ecx
mov esi, eax
lea edi, [ebp - 0x5e8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea esi, [ebp - 0x5e8]
lea edi, [ebp - 0x600]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x74]
mov ecx, dword [eax]
call fcn.1004b387
mov dword [ebp - 0x30c], eax
mov dword [ebp - 0x28], 0x3e63
mov dword [ebp - 0x20], 0xffffffff
push 2
lea ecx, [ebp - 0x2b4]
call fcn.10027044
mov byte [ebp - 4], 7
mov dword [ebp - 0x48], 0x1a82e77e
mov dword [ebp - 0x80], 3
lea eax, [ebp - 0x4fc]
push eax
push 0x1c36
push 1
push 1
lea eax, [ebp - 0x2b4]
push eax
push 0x2be
call fcn.1004e590
add esp, 0x18
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x28]
jle 0x10051e37
mov dword [ebp - 0x25c], 1
jmp 0x10051e3e
and dword [ebp - 0x25c], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x16c], eax
push 0
lea ecx, [ebp - 0x2b4]
call fcn.100270e2
mov ecx, dword [ebp - 0x16c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x16c]
sub eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x28]
jg 0x10051e88
push 0
lea ecx, [ebp - 0x2b4]
call fcn.100270e2
cmp dword [eax], 0
je 0x10051e88
mov dword [ebp - 0x20c], 1
jmp 0x10051e8f
and dword [ebp - 0x20c], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x20c], eax
jge 0x10051ea6
mov dword [ebp - 0x174], 1
jmp 0x10051ead
and dword [ebp - 0x174], 0
imul eax, dword [ebp - 0x174], 0xfffffffe
cmp eax, dword [ebp - 0x28]
jle 0x10051ec5
mov dword [ebp - 0x17c], 1
jmp 0x10051ecc
and dword [ebp - 0x17c], 0
mov eax, dword [ebp - 0x25c]
sub eax, dword [ebp - 0x17c]
jne 0x10051ee8
or eax, 0xffffffff
jne 0x10051ee8
and dword [ebp - 0x3c4], 0
jmp 0x10051ef2
mov dword [ebp - 0x3c4], 1
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x508], eax
cmp dword [ebp - 0x28], 0
je 0x10051f16
mov eax, 0x8405
test eax, eax
je 0x10051f16
mov dword [ebp - 0x214], 1
jmp 0x10051f1d
and dword [ebp - 0x214], 0
cmp dword [ebp - 0x214], 8
jne 0x10051f32
mov dword [ebp - 0x184], 1
jmp 0x10051f39
and dword [ebp - 0x184], 0
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
je 0x10051fcf
push 4
lea ecx, [ebp - 0x588]
call fcn.10027044
mov byte [ebp - 4], 8
mov dword [ebp - 0x284], 7
lea eax, [ebp - 0x588]
push eax
push 0xeb6
push 1
push 0xdcf
lea eax, [ebp - 0x7c]
push eax
push 1
call fcn.100508b1
add esp, 0x18
mov dword [ebp - 0x7c], 0
jmp 0x10051f98
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 2
jge 0x10051fae
mov eax, dword [ebp - 0x7c]
mov dword [ebp + eax*4 - 0x608], 0x34886255
jmp 0x10051f91
mov eax, dword [ebp - 0x284]
dec eax
mov dword [ebp - 0x284], eax
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x588]
call fcn.100270c6
jmp 0x10052204
mov dword [ebp - 0x58], 0
mov dword [ebp - 0xbc], 1
mov dword [ebp - 0x194], 0x28b293c3
mov dword [ebp - 0x224], 0xffffffff
mov dword [ebp - 0xd8], 0
jmp 0x1005200d
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 1
jge 0x10052029
mov eax, dword [ebp - 0xd8]
mov dword [ebp + eax*4 - 0x304], 1
jmp 0x10052000
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x514], eax
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0
jne 0x10052053
cmp dword [ebp - 0x58], 0
jne 0x10052053
and dword [ebp - 0x18c], 0
jmp 0x1005205d
mov dword [ebp - 0x18c], 1
cmp dword [ebp - 0x18c], 6
je 0x10052072
mov dword [ebp - 0x21c], 1
jmp 0x10052079
and dword [ebp - 0x21c], 0
mov eax, dword [ebp - 0x21c]
mov dword [ebp - 0x194], eax
mov eax, dword [ebp - 0x194]
sub eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x58]
jl 0x1005209f
mov dword [ebp - 0x108], 1
jmp 0x100520a6
and dword [ebp - 0x108], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x108]
mov dword [ebp + eax - 0x304], ecx
cmp dword [ebp - 0x108], 0
je 0x100520d5
push 4
pop eax
test eax, eax
je 0x100520d5
mov dword [ebp - 0x264], 1
jmp 0x100520dc
and dword [ebp - 0x264], 0
mov eax, dword [ebp - 0x48]
cmp eax, dword [ebp - 0x264]
jle 0x100520f3
mov dword [ebp - 0x19c], 1
jmp 0x100520fa
and dword [ebp - 0x19c], 0
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 0xfffffffd
jne 0x1005211b
mov dword [ebp - 0x380], 1
jmp 0x10052122
and dword [ebp - 0x380], 0
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x58]
jg 0x10052139
mov dword [ebp - 0x1a4], 1
jmp 0x10052140
and dword [ebp - 0x1a4], 0
mov esi, dword [ebp - 0x58]
push 0
lea ecx, [ebp - 0x2b4]
call fcn.100270e2
mov ecx, dword [ebp - 0x1a4]
add ecx, dword [eax]
add ecx, esi
mov dword [ebp - 0x2a4], ecx
push 1
lea ecx, [ebp - 0x2b4]
call fcn.100270e2
mov ecx, dword [ebp - 0x2a4]
mov dword [eax], ecx
cmp dword [ebp - 0x2a4], 0x9b03
jle 0x1005218d
mov dword [ebp - 0x1ac], 1
jmp 0x10052194
and dword [ebp - 0x1ac], 0
mov eax, dword [ebp - 0x58]
imul eax, dword [ebp - 0x1ac]
test eax, eax
je 0x100521b7
cmp dword [ebp - 0xbc], 0
je 0x100521b7
mov dword [ebp - 0x22c], 1
jmp 0x100521be
and dword [ebp - 0x22c], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x22c], eax
jle 0x100521db
push 1
lea ecx, [ebp - 0x2b4]
call fcn.100270e2
cmp dword [eax], 0
jne 0x100521e2
cmp dword [ebp - 0xbc], 0
cmp dword [ebp - 0x20], 2
ja 0x100521f4
mov dword [ebp - 0x1b4], 1
jmp 0x100521fb
and dword [ebp - 0x1b4], 0
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x20], 0xffffffff
jmp 0x10052214
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 6
jge 0x10052280
mov dword [ebp - 0x48], 0
jmp 0x1005222a
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 1
jg 0x1005227e
mov dword [ebp - 0x80], 1
jmp 0x10052240
mov eax, dword [ebp - 0x80]
dec eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0
jl 0x1005227c
mov byte [ebp - 0x39], 0
lea eax, [ebp - 0x39]
push eax
push 0x6c28
push 1
push 0x6cd1
push 1
call fcn.1005098c
add esp, 0x14
push 0x7c35
push 0
push 1
push 0x752a
call fcn.10055157
add esp, 0x10
jmp 0x10052239
jmp 0x10052223
jmp 0x1005220d
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2b4]
call fcn.100270c6
push 0x3870
push 0x297e
lea eax, [ebp - 0x4c0]
push eax
lea eax, [ebp - 0x600]
push eax
lea eax, [ebp - 0x30c]
push eax
push 0x7e4c
lea eax, [ebp - 0xe0]
push eax
push 1
push 0
push 0x20f4
call fcn.1005477d
add esp, 0x28
push 0x7b35
push 0
push 0x16d0
call fcn.100551da
add esp, 0xc
cmp dword [ebp - 0xe0], 6
jae 0x10052308
push 0x10dbd390
push dword [ebp - 0x74]
push 1
lea eax, [ebp - 0x4c0]
push eax
push 0x34c3
push 1
call fcn.1004ed07
add esp, 0x18
lea eax, [ebp - 0x4c0]
push eax
mov ecx, dword [ebp - 0x26c]
call fcn.1005561d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4c0]
call fcn.10026f66
jmp 0x10053a7d
mov eax, dword [ebp - 0x3f4]
mov dword [ebp - 0x38c], eax
mov eax, dword [ebp - 0x314]
mov dword [ebp - 0x31c], eax
mov eax, dword [ebp - 0x38c]
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x31c]
mov dword [ebp - 0x3cc], eax
mov eax, dword [ebp - 0x6c]
mov dword [eax], 0
jmp 0x10052382
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x6c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x6c]
cmp dword [eax], 2
jge 0x100523a2
mov eax, dword [ebp - 0x6c]
push dword [eax]
mov ecx, dword [ebp - 0x3cc]
call fcn.100270e2
mov dword [eax], 0x42f2aa78
jmp 0x10052377
jmp 0x10053a7d
lea eax, [ebp + 0x1c]
mov dword [ebp - 0x398], eax
lea eax, [ebp + 0x24]
mov dword [ebp - 0x324], eax
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0x338], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x340], eax
mov eax, dword [ebp + 0x30]
mov dword [ebp - 0x2e8], eax
mov eax, dword [ebp - 0x324]
movzx eax, byte [eax]
test eax, eax
je 0x10053a1a
mov eax, dword [ebp - 0x398]
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x2e8]
mov dword [ebp - 0x290], eax
push 0
push 0x70cc
push 0
call fcn.1004c328
add esp, 0xc
mov eax, dword [0x10dbd3b8]
and eax, 2
jne 0x10052442
mov eax, dword [0x10dbd3b8]
or eax, 2
mov dword [0x10dbd3b8], eax
mov dword [ebp - 4], 9
mov ecx, 0x10dbd3dc
call fcn.10055875
push 0x1007489e
call fcn.10058cb5
pop ecx
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x70]
mov ecx, dword [eax]
call fcn.1004b36d
mov dword [ebp - 0xf8], eax
push 2
lea ecx, [ebp - 0x94]
call fcn.10027044
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x11c], 0xfffffff8
push 3
lea ecx, [ebp - 0x2cc]
call fcn.10027044
mov byte [ebp - 4], 0xb
push 2
lea ecx, [ebp - 0x434]
call fcn.10027044
mov byte [ebp - 4], 0xc
lea eax, [ebp - 0x94]
push eax
push 0x566a
push 0x7fc2
push 0
lea eax, [ebp - 0x1bc]
push eax
call fcn.1004b694
add esp, 0x14
push 0x3ca8
lea eax, [ebp - 0x2cc]
push eax
lea eax, [ebp - 0x1bc]
push eax
push 0
call fcn.1004baf4
add esp, 0x10
lea eax, [ebp - 0x1bc]
push eax
push 0x4f64
push 0x1cd7
push 0x155e
push 0x3497
push 0
lea eax, [ebp - 0x434]
push eax
call fcn.1004bcb1
add esp, 0x1c
push 1
lea ecx, [ebp - 0x94]
call fcn.100270e2
and dword [eax], 0
jmp 0x10052533
push 1
lea ecx, [ebp - 0x94]
call fcn.100270e2
mov dword [ebp - 0x234], eax
mov eax, dword [ebp - 0x234]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x234]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x94]
call fcn.100270e2
cmp dword [eax], 0xfffffffd
jle 0x10052952
push 2
lea ecx, [ebp - 0x2e4]
call fcn.10027044
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x3fc], 0xfd8f2714
mov dword [ebp - 0x334], 0x716e
mov dword [ebp - 0x33c], 0xb4e3
push 3
lea ecx, [ebp - 0x3e0]
call fcn.10027044
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x54], 0
jmp 0x10052599
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 1
jge 0x100525af
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0xe8], 5
jmp 0x10052592
push 0x5767
push 1
push 0x2088
lea eax, [ebp - 0x2e4]
push eax
lea eax, [ebp - 0x54]
push eax
push 0
push 0x1540
call fcn.1004e679
add esp, 0x1c
lea eax, [ebp - 0x3e0]
push eax
push 0
lea eax, [ebp - 0x54]
push eax
call fcn.10053b41
add esp, 0xc
push 4
pop eax
imul eax, eax, 0
mov esi, dword [ebp + eax - 0xe8]
push 1
lea ecx, [ebp - 0x2e4]
call fcn.100270e2
cmp esi, dword [eax]
jle 0x10052626
mov eax, 0xfffb
test eax, eax
je 0x10052626
cmp dword [ebp - 0x3fc], 0
je 0x10052626
mov dword [ebp - 0x1c4], 1
jmp 0x1005262d
and dword [ebp - 0x1c4], 0
mov eax, dword [ebp - 0x1c4]
mov dword [ebp - 0x11c], eax
push 1
lea ecx, [ebp - 0x94]
call fcn.100270e2
mov esi, eax
push 1
lea ecx, [ebp - 0x94]
call fcn.100270e2
mov eax, dword [eax]
cmp eax, dword [esi]
jl 0x10052667
mov dword [ebp - 0x28c], 1
jmp 0x1005266e
and dword [ebp - 0x28c], 0
push 1
lea ecx, [ebp - 0x94]
call fcn.100270e2
mov eax, dword [eax]
cmp eax, dword [ebp - 0x28c]
jg 0x10052691
mov dword [ebp - 0x1cc], 1
jmp 0x10052698
and dword [ebp - 0x1cc], 0
push 0
lea ecx, [ebp - 0x2cc]
call fcn.100270e2
mov ecx, dword [ebp - 0x1cc]
cmp ecx, dword [eax]
jne 0x100526bb
mov dword [ebp - 0x23c], 1
jmp 0x100526c2
and dword [ebp - 0x23c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe8]
add eax, dword [ebp - 0x23c]
jne 0x100526f2
push 0
lea ecx, [ebp - 0x94]
call fcn.100270e2
cmp dword [eax], 0
jne 0x100526f2
and dword [ebp - 0x1d4], 0
jmp 0x100526fc
mov dword [ebp - 0x1d4], 1
cmp dword [ebp - 0x1d4], 0x6ce028f4
jne 0x10052714
mov dword [ebp - 0x274], 1
jmp 0x1005271b
and dword [ebp - 0x274], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe8]
cmp dword [ebp - 0x274], eax
jle 0x1005273c
mov dword [ebp - 0x1dc], 1
jmp 0x10052743
and dword [ebp - 0x1dc], 0
mov eax, dword [ebp - 0x334]
mov ecx, dword [ebp - 0x1dc]
lea esi, [ecx + eax - 0xceb2be5]
push 0
lea ecx, [ebp - 0x94]
call fcn.100270e2
cmp dword [eax], esi
jg 0x10052773
mov dword [ebp - 0x244], 1
jmp 0x1005277a
and dword [ebp - 0x244], 0
push 1
lea ecx, [ebp - 0x94]
call fcn.100270e2
mov ecx, dword [ebp - 0x244]
cmp ecx, dword [eax]
jl 0x1005279d
mov dword [ebp - 0x1e4], 1
jmp 0x100527a4
and dword [ebp - 0x1e4], 0
push 2
lea ecx, [ebp - 0x2cc]
call fcn.100270e2
mov ecx, dword [ebp - 0x1e4]
cmp ecx, dword [eax]
jge 0x100527c7
mov dword [ebp - 0x3a4], 1
jmp 0x100527ce
and dword [ebp - 0x3a4], 0
mov eax, dword [ebp - 0x33c]
mov dword [ebp - 0x520], eax
push 1
lea ecx, [ebp - 0x94]
call fcn.100270e2
push 0
lea ecx, [ebp - 0x2cc]
call fcn.100270e2
mov esi, eax
push 1
lea ecx, [ebp - 0x94]
call fcn.100270e2
mov eax, dword [eax]
cmp eax, dword [esi]
je 0x10052815
mov dword [ebp - 0x124], 1
jmp 0x1005281c
and dword [ebp - 0x124], 0
cmp dword [ebp - 0x124], 0xfffa
jae 0x10052834
mov dword [ebp - 0x120], 1
jmp 0x1005283b
and dword [ebp - 0x120], 0
push 0
lea ecx, [ebp - 0x3e0]
call fcn.100270e2
mov ecx, dword [ebp - 0x120]
cmp ecx, dword [eax]
jg 0x10052867
cmp dword [ebp - 0x11c], 0
je 0x10052867
mov dword [ebp - 0xf4], 1
jmp 0x1005286e
and dword [ebp - 0xf4], 0
push 1
lea ecx, [ebp - 0x434]
call fcn.100270e2
mov ecx, dword [ebp - 0xf4]
mov dword [eax], ecx
cmp dword [ebp - 0xf4], 0xe85c68ab
je 0x100528ad
push 1
lea ecx, [ebp - 0x94]
call fcn.100270e2
cmp dword [eax], 0
je 0x100528ad
mov dword [ebp - 0x138], 1
jmp 0x100528b4
and dword [ebp - 0x138], 0
push 1
lea ecx, [ebp - 0x2cc]
call fcn.100270e2
mov ecx, dword [ebp - 0x138]
cmp ecx, dword [eax]
je 0x100528ff
push 1
lea ecx, [ebp - 0x2e4]
call fcn.100270e2
cmp dword [eax], 0
je 0x100528fd
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x3e0]
call fcn.100270c6
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x2e4]
call fcn.100270c6
jmp 0x10052952
jmp 0x1005292f
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xe8], 0
je 0x1005292f
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x3e0]
call fcn.100270c6
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x2e4]
call fcn.100270c6
jmp 0x10052952
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x3e0]
call fcn.100270c6
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x2e4]
call fcn.100270c6
jmp 0x1005250f
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x434]
call fcn.100270c6
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x2cc]
call fcn.100270c6
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x94]
call fcn.100270c6
cmp dword [ebp - 0xf8], 3
jae 0x10052a0d
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
mov dword [ebp - 0x3d4], eax
lea eax, [ebp - 0x528]
push eax
mov ecx, 0x10dbd3dc
call fcn.100271bf
push eax
lea eax, [ebp - 0x3d4]
push eax
lea eax, [ebp - 0x530]
push eax
mov ecx, 0x10dbd3dc
call fcn.100271d6
mov ecx, eax
call fcn.10027031
movzx eax, al
test eax, eax
je 0x10052a0d
push 1
push 0x6c4c
push 0
call fcn.1004e7de
add esp, 0xc
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
mov dword [ebp - 0x344], eax
lea eax, [ebp - 0x344]
push eax
mov ecx, 0x10dbd3dc
call fcn.100558c9
push eax
mov ecx, dword [ebp - 0x290]
call fcn.10049852
jmp 0x10053a7d
lea eax, [ebp - 0x624]
push eax
call fcn.10049eca
pop ecx
mov esi, eax
lea edi, [ebp - 0x5f4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea esi, [ebp - 0x5f4]
lea edi, [ebp - 0x5dc]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x30], 0xe7ad53a3
mov dword [ebp - 0x10c], 9
mov dword [ebp - 0x3e4], 0x22354120
mov dword [ebp - 0x36c], 0xfffffffe
mov dword [ebp - 0xdc], 0xf33bc6c2
push 4
lea ecx, [ebp - 0x414]
call fcn.10027044
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x140], 0x528e
mov dword [ebp - 0x34c], 0x1000f470
cmp dword [ebp - 0x140], 0x5583
jle 0x10052b43
and dword [ebp - 0xe4], 0
jmp 0x10052ab8
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0x6063
jge 0x10052b43
and dword [ebp - 0xcc], 0
jmp 0x10052ada
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0x3fc
jge 0x10052b3e
mov eax, dword [ebp - 0xe4]
imul eax, dword [ebp - 0xcc]
cdq
mov dword [ebp - 0x388], eax
mov dword [ebp - 0x384], edx
push dword [ebp - 0x384]
push dword [ebp - 0x388]
lea ecx, [ebp - 0x648]
call fcn.10010ade
pop ecx
pop ecx
mov dword [ebp - 0x3ac], eax
mov ecx, dword [ebp - 0x3ac]
call fcn.10026de4
push eax
call fcn.10058cdf
pop ecx
lea ecx, [ebp - 0x648]
call fcn.10026dda
jmp 0x10052acd
jmp 0x10052aab
mov dword [ebp - 0x3b4], 8
mov byte [ebp - 4], 0x10
cmp dword [ebp - 0x140], 0x5239
jge 0x10052b69
push dword [ebp - 0x34c]
call fcn.10058cdf
pop ecx
jmp 0x10052b85
mov dword [ebp - 4], 0xf
jmp 0x10052b95
mov dword [ebp - 0x60], 0
jmp 0x10052ba5
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 2
jge 0x10052bbb
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x114], 0x57863718
jmp 0x10052b9e
push 1
push 0x2758
push 0x58bc
lea eax, [ebp - 0x414]
push eax
lea eax, [ebp - 0x60]
push eax
push 0
push 0xbe1
push 0x9b2
push 0x7a90
push 0x4782
push 1
push 0x2427
push 0x6a65
push 0x6943
push 0x2125
push 0x736d
push 0x3d5e
push 0x75a3
call fcn.1004c635
add esp, 0x48
cmp dword [ebp - 0x18], 0xfffffff6
jne 0x10052c27
mov dword [ebp - 0x160], 1
jmp 0x10052c2e
and dword [ebp - 0x160], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x53c], eax
xor eax, eax
cmp eax, 0x93bd
jl 0x10052c4c
mov dword [ebp - 0x104], 1
jmp 0x10052c53
and dword [ebp - 0x104], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x104]
mov dword [ebp + eax - 0x114], ecx
cmp dword [ebp - 0x104], 1
jge 0x10052c84
mov eax, 0xcf5aa05
test eax, eax
je 0x10052c84
mov dword [ebp - 0x148], 1
jmp 0x10052c8b
and dword [ebp - 0x148], 0
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
jne 0x10052ca8
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x114], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x114]
cmp eax, dword [ebp - 0x18]
jg 0x10052cc6
mov dword [ebp - 0x150], 1
jmp 0x10052ccd
and dword [ebp - 0x150], 0
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x150]
cmp eax, 0xffffffff
jge 0x10052ce7
mov dword [ebp - 0x158], 1
jmp 0x10052cee
and dword [ebp - 0x158], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x158], eax
je 0x10052d05
mov dword [ebp - 0x168], 1
jmp 0x10052d0c
and dword [ebp - 0x168], 0
mov eax, dword [ebp - 0x160]
sub eax, dword [ebp - 0x168]
add eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x10c]
jge 0x10052d2f
mov dword [ebp - 0x170], 1
jmp 0x10052d36
and dword [ebp - 0x170], 0
mov eax, dword [ebp - 0x10c]
cmp dword [ebp - 0x170], eax
jg 0x10052d66
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x114], 0
je 0x10052d66
cmp dword [ebp - 0x30], 0
je 0x10052d66
mov dword [ebp - 0x178], 1
jmp 0x10052d6d
and dword [ebp - 0x178], 0
cmp dword [ebp - 0x178], 0x8c17
je 0x10052f50
mov dword [ebp - 0x180], 0
mov dword [ebp - 0xfc], 0xffffffff
mov dword [ebp - 0x190], 4
mov dword [ebp - 0x548], 0xffffffff
mov dword [ebp - 0x18], 0
jmp 0x10052db5
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jg 0x10052f31
mov byte [ebp - 0x35], 0
movzx eax, byte [ebp - 0x35]
test eax, eax
je 0x10052ddf
push 0x306d
push 0
push 0x4fe
call fcn.1004c44c
add esp, 0xc
mov dword [ebp - 0x30], 1
jmp 0x10052def
mov eax, dword [ebp - 0x30]
dec eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
jl 0x10052f2c
mov dword [ebp - 0x428], 0x9d707d8e
mov dword [ebp - 0x424], 0x9d707d8e
mov dword [ebp - 0x420], 0x9d707d8e
mov dword [ebp - 0x41c], 0x9d707d8e
lea ecx, [ebp - 0xfd]
call fcn.100270f1
push eax
lea eax, [ebp - 0x418]
push eax
lea eax, [ebp - 0x428]
push eax
lea ecx, [ebp - 0x610]
call fcn.100270f4
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x440]
call fcn.100270a0
mov byte [ebp - 4], 0x12
mov dword [ebp - 0x354], 0x3fd90538
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x114], 3
jb 0x10052f0e
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x554], eax
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x560], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xfc], eax
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0xfc]
cmp ecx, dword [ebp + eax*4 - 0x114]
jge 0x10052eb1
mov dword [ebp - 0x3f8], 1
jmp 0x10052eb8
and dword [ebp - 0x3f8], 0
mov esi, dword [ebp - 0x180]
push 1
lea ecx, [ebp - 0x440]
call fcn.100270e2
mov dword [eax], esi
cmp dword [ebp - 0xfc], 0
je 0x10052ef4
push 3
lea ecx, [ebp - 0x440]
call fcn.100270e2
cmp dword [eax], 0
je 0x10052ef4
mov dword [ebp - 0x188], 1
jmp 0x10052efb
and dword [ebp - 0x188], 0
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 0
mov dword [ebp - 0x354], 0
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x440]
call fcn.100270c6
jmp 0x10052de8
jmp 0x10052dae
push 1
push 0x6897
push 1
push 0
lea eax, [ebp - 0x414]
push eax
call fcn.100546d1
add esp, 0x14
jmp 0x10052fd9
mov dword [ebp - 0x2ec], 0xffffffff
mov dword [ebp - 0x3bc], 0xffffffff
mov dword [ebp - 0x35c], 0
mov dword [ebp - 0x364], 0x741179d7
push 0
lea eax, [ebp - 0x3b4]
push eax
push 0x4947
lea eax, [ebp - 0x35c]
push eax
lea eax, [ebp - 0x10c]
push eax
push 0x1fd3
lea eax, [ebp - 0x3e4]
push eax
push 0xb58
lea eax, [ebp - 0x364]
push eax
lea eax, [ebp - 0x3bc]
push eax
push 0x519e
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x36c]
push eax
lea eax, [ebp - 0x414]
push eax
lea eax, [ebp - 0x2ec]
push eax
call fcn.1004dea6
add esp, 0x3c
mov dword [ebp - 0xdc], 0
jmp 0x10052ff2
mov eax, dword [ebp - 0xdc]
dec eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0xffffffe6
jne 0x1005301f
push 0x5016
push 0x2738
push 0
push 0x515f
push 1
push 0x1ca
push 1
call fcn.1004da3f
add esp, 0x1c
jmp 0x10052fe5
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x414]
call fcn.100270c6
mov eax, dword [ebp - 0x70]
mov ecx, dword [eax]
call fcn.1004b387
mov dword [ebp - 0x300], eax
mov dword [ebp - 0x198], 0xc18
mov dword [ebp - 0x2f0], 0x1000f4b0
cmp dword [ebp - 0x198], 0xf46
jle 0x100530e3
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ConnectNamedPipe]
and dword [ebp - 0x88], 0
jmp 0x10053082
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0x6291
jge 0x100530e3
and dword [ebp - 0x98], 0
jmp 0x100530a4
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0x7604
jge 0x100530e1
mov eax, dword [ebp - 0x88]
xor eax, dword [ebp - 0x98]
cdq
mov dword [ebp - 0x394], eax
mov dword [ebp - 0x390], edx
push dword [ebp - 0x390]
push dword [ebp - 0x394]
mov ecx, 0x1061aa98
call fcn.10026e04
jmp 0x10053097
jmp 0x10053075
mov dword [ebp - 4], 0x13
cmp dword [ebp - 0x198], 0x883
jge 0x10053106
mov edx, dword [ebp - 0x2f0]
mov ecx, 0x1061aa98
call fcn.10029b1c
jmp 0x10053122
or dword [ebp - 4], 0xffffffff
jmp 0x1005312c
mov dword [ebp - 0xf0], 0xffffffff
mov dword [ebp - 0x1c0], 0xe7374489
mov dword [ebp - 0x2c], 0
jmp 0x10053150
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jge 0x10053163
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x50], 0xfffffffd
jmp 0x10053149
mov dword [ebp - 0x2c], 0
jmp 0x10053173
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jge 0x10053189
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x49c], 0x714ba09
jmp 0x1005316c
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x50]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x50], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x50]
mov dword [ebp - 0x568], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x50]
mov dword [ebp - 0x574], eax
push 4
pop eax
imul eax, eax, 0
imul eax, dword [ebp + eax - 0x50], 0x2c5b
test eax, eax
je 0x100531ee
xor eax, eax
inc eax
je 0x100531ee
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x50], 0
je 0x100531ee
mov dword [ebp - 0x2f8], 1
jmp 0x100531f5
and dword [ebp - 0x2f8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x50]
mov dword [ebp - 0x5b8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x50], 0xffffffff
jbe 0x1005321e
mov dword [ebp - 0x1a0], 1
jmp 0x10053225
and dword [ebp - 0x1a0], 0
cmp dword [ebp - 0x1a0], 0xffffffff
jb 0x1005323a
mov dword [ebp - 0x1a8], 1
jmp 0x10053241
and dword [ebp - 0x1a8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x50]
cmp dword [ebp - 0x1a8], eax
je 0x10053265
cmp dword [ebp - 0xf0], 0
jne 0x10053265
and dword [ebp - 0x1b0], 0
jmp 0x1005326f
mov dword [ebp - 0x1b0], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x50]
cmp dword [ebp - 0x1b0], eax
je 0x1005328d
mov dword [ebp - 0x1b8], 1
jmp 0x10053294
and dword [ebp - 0x1b8], 0
mov eax, dword [ebp - 0x1b8]
mov dword [ebp - 0x1c0], eax
mov eax, dword [ebp - 0x1c0]
mov dword [ebp - 0x524], eax
mov eax, dword [ebp - 0xf0]
cmp eax, dword [ebp - 0xf0]
jne 0x100532c6
mov dword [ebp - 0x1c8], 1
jmp 0x100532cd
and dword [ebp - 0x1c8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x50]
cmp dword [ebp - 0x1c8], eax
jge 0x100532f1
mov eax, 0x5e97312b
test eax, eax
jne 0x100532f1
and dword [ebp - 0x1d0], 0
jmp 0x100532fb
mov dword [ebp - 0x1d0], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x50]
cmp dword [ebp - 0x1d0], eax
jg 0x10053319
mov dword [ebp - 0x1d8], 1
jmp 0x10053320
and dword [ebp - 0x1d8], 0
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x50]
neg ecx
sub ecx, dword [ebp - 0x1d8]
cmp ecx, dword [ebp + eax - 0x50]
jle 0x10053351
push 0xfffffffffffffff9
pop eax
test eax, eax
je 0x10053351
mov dword [ebp - 0x1e0], 1
jmp 0x10053358
and dword [ebp - 0x1e0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1e0]
mov dword [ebp + eax - 0x49c], ecx
lea eax, [ebp - 0x5dc]
push eax
push dword [ebp - 0x300]
push dword [ebp - 0xf8]
lea eax, [ebp - 0x5d0]
push eax
call fcn.1004b3a6
add esp, 0x10
mov dword [ebp - 4], 0x15
mov dword [ebp - 0x444], 0xbeaa32b1
mov dword [ebp - 0x564], 0xfffffffb
mov dword [ebp - 0x464], 0xebb6748f
mov dword [ebp - 0x52c], 0
mov dword [ebp - 0x470], 6
push 3
lea ecx, [ebp - 0x598]
call fcn.10027044
mov byte [ebp - 4], 0x16
mov dword [ebp - 0x4a8], 0x2b483718
mov dword [ebp - 0x308], 0xfffffffd
push 0x423f
push 1
push 0x43b0
lea eax, [ebp - 0x598]
push eax
push 0x567c
push 0x21e
push 0x422
lea eax, [ebp - 0x64]
push eax
push 0x4ef0
push 0
call fcn.1004eddd
add esp, 0x28
mov dword [ebp - 0x64], 0
jmp 0x10053430
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 2
jge 0x10053446
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x618], 0x434392f2
jmp 0x10053429
mov byte [ebp - 0x41], 0
push 0
lea eax, [ebp - 0x41]
push eax
push 1
call fcn.1004c328
add esp, 0xc
push 0x6309
lea eax, [ebp - 0x308]
push eax
push 0x7284
push 0
call fcn.1004c9d7
add esp, 0x10
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x598]
call fcn.100270c6
cmp dword [ebp - 0xf8], 3
jae 0x10053913
mov dword [ebp - 0x14], 0xfe7d8a87
mov dword [ebp - 0x68], 0xd303f024
mov dword [ebp - 0x288], 0x1b546539
mov dword [ebp - 0x1e8], 0x2d57
mov dword [ebp - 0x310], 0x1000f50c
cmp dword [ebp - 0x1e8], 0x2e26
jle 0x10053542
and dword [ebp - 0xa0], 0
jmp 0x100534df
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0x879
jge 0x10053542
and dword [ebp - 0xa8], 0
jmp 0x10053501
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0x24a7
jge 0x10053540
mov eax, dword [ebp - 0xa0]
mov ecx, dword [ebp - 0xa8]
shl eax, cl
cdq
mov dword [ebp - 0x3a0], eax
mov dword [ebp - 0x39c], edx
push dword [ebp - 0x39c]
push dword [ebp - 0x3a0]
mov ecx, 0x1061aa98
call fcn.10026e04
jmp 0x100534f4
jmp 0x100534d2
mov dword [ebp - 0xb0], 0
jmp 0x1005355b
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 1
jge 0x10053577
mov eax, dword [ebp - 0xb0]
mov dword [ebp + eax*4 - 0x220], 0xffffffff
jmp 0x1005354e
mov byte [ebp - 4], 0x17
cmp dword [ebp - 0x1e8], 0x2c4a
jge 0x10053597
mov edx, dword [ebp - 0x310]
mov ecx, 0x1061aa98
call fcn.10029b1c
jmp 0x100535b3
mov dword [ebp - 4], 0x15
jmp 0x100535c3
mov byte [ebp - 0x37], 0
push 0x1d36
push 0x71fa
push 0x35f
push 0x1863
push 0
lea eax, [ebp - 0x37]
push eax
call fcn.1004d22b
add esp, 0x18
mov dword [ebp - 0x14], 0
jmp 0x100535f9
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jl 0x100538ee
mov dword [ebp - 0x278], 0xffffffff
mov dword [ebp - 0x240], 0xf40fc027
mov dword [ebp - 0xb8], 0
jmp 0x10053630
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 3
jge 0x1005364c
mov eax, dword [ebp - 0xb8]
mov dword [ebp + eax*4 - 0x3f0], 0
jmp 0x10053623
push 0
lea eax, [ebp - 0x68]
push eax
push 0
call fcn.1004e7de
add esp, 0xc
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x47c], eax
cmp dword [ebp - 0x14], 0x83de
jl 0x1005367a
mov dword [ebp - 0x1f0], 1
jmp 0x10053681
and dword [ebp - 0x1f0], 0
mov eax, dword [ebp - 0x68]
cmp eax, dword [ebp - 0x1f0]
jge 0x10053698
mov dword [ebp - 0x1f8], 1
jmp 0x1005369f
and dword [ebp - 0x1f8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3f0]
cmp eax, dword [ebp - 0x1f8]
jg 0x100536c0
mov dword [ebp - 0x200], 1
jmp 0x100536c7
and dword [ebp - 0x200], 0
mov eax, dword [ebp - 0x200]
add eax, 0xac8e
cmp eax, 0xfffffff9
je 0x100536e6
cmp dword [ebp - 0x14], 0
jne 0x100536e6
and dword [ebp - 0x208], 0
jmp 0x100536f0
mov dword [ebp - 0x208], 1
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x208], eax
jge 0x10053707
mov dword [ebp - 0x210], 1
jmp 0x1005370e
and dword [ebp - 0x210], 0
cmp dword [ebp - 0x210], 0
jae 0x10053723
mov dword [ebp - 0x218], 1
jmp 0x1005372a
and dword [ebp - 0x218], 0
mov eax, dword [ebp - 0x218]
mov dword [ebp - 0x240], eax
mov eax, 0x6ee3
test eax, eax
je 0x10053751
cmp dword [ebp - 0x68], 0
je 0x10053751
mov dword [ebp - 0x230], 1
jmp 0x10053758
and dword [ebp - 0x230], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x220]
mov dword [ebp - 0x228], eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x228]
mov dword [ebp + eax*4 - 0x220], ecx
mov eax, dword [ebp - 0x228]
cmp eax, dword [ebp - 0x230]
jle 0x10053792
mov dword [ebp - 0x238], 1
jmp 0x10053799
and dword [ebp - 0x238], 0
mov eax, dword [ebp - 0x278]
cmp dword [ebp - 0x238], eax
jne 0x100537b3
mov dword [ebp - 0x318], 1
jmp 0x100537ba
and dword [ebp - 0x318], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x3f0]
mov dword [ebp - 0x4c4], eax
mov eax, dword [ebp - 0x240]
cmp eax, dword [ebp - 0x68]
jne 0x100537e3
mov dword [ebp - 0x248], 1
jmp 0x100537ea
and dword [ebp - 0x248], 0
mov eax, dword [ebp - 0x248]
sub eax, dword [ebp - 0x68]
cmp eax, dword [ebp - 0x14]
je 0x10053804
mov dword [ebp - 0x118], 1
jmp 0x1005380b
and dword [ebp - 0x118], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x118]
sub ecx, dword [ebp + eax - 0x3f0]
imul eax, ecx, 0xd5d5
cmp eax, 1
ja 0x10053834
mov dword [ebp - 0x258], 1
jmp 0x1005383b
and dword [ebp - 0x258], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x258]
sub ecx, dword [ebp + eax - 0x3f0]
jne 0x1005385e
cmp dword [ebp - 0x14], 0
jne 0x1005385e
and dword [ebp - 0x260], 0
jmp 0x10053868
mov dword [ebp - 0x260], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3f0]
add eax, dword [ebp - 0x260]
cmp eax, dword [ebp - 0x14]
jne 0x10053895
cmp dword [ebp - 0x288], 0
je 0x10053895
mov dword [ebp - 0x268], 1
jmp 0x1005389c
and dword [ebp - 0x268], 0
cmp dword [ebp - 0x268], 1
je 0x100538b1
mov dword [ebp - 0x270], 1
jmp 0x100538b8
and dword [ebp - 0x270], 0
mov eax, dword [ebp - 0x270]
sub eax, dword [ebp - 0x14]
inc eax
cmp eax, dword [ebp - 0x278]
je 0x100538d6
mov dword [ebp - 0x280], 1
jmp 0x100538dd
and dword [ebp - 0x280], 0
mov eax, dword [ebp - 0x280]
mov dword [ebp - 0x288], eax
jmp 0x100535f2
push 0x10dbd3dc
push 0
lea eax, [ebp - 0x5d0]
push eax
push 0x4f1b
push 0x4be5
push 0
push dword [ebp - 0x70]
call fcn.1004e679
add esp, 0x1c
mov dword [ebp - 0x328], 0x25b0
mov dword [ebp - 0x320], 1
mov dword [ebp - 0x488], 8
mov dword [ebp - 0x4a4], 2
mov dword [ebp - 0x494], 0
push 2
lea ecx, [ebp - 0x5ac]
call fcn.10027044
mov byte [ebp - 4], 0x19
mov dword [ebp - 0x330], 0
push 0xb90
push 1
lea eax, [ebp - 0x4d8]
push eax
push 0
push 0xfb7
push 0x4023
push 0x79da
push 0x1d0e
push 0x2b73
lea eax, [ebp - 0x5ac]
push eax
push 0
call fcn.10050f66
add esp, 0x2c
lea eax, [ebp - 0x320]
push eax
push 0x7e20
push 0
push 0x74d
lea eax, [ebp - 0x328]
push eax
call fcn.1004f7b0
add esp, 0x14
push 0x2a9f
lea eax, [ebp - 0x330]
push eax
push 0
push 0xe1f
call fcn.1005487f
add esp, 0x10
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x5ac]
call fcn.100270c6
lea eax, [ebp - 0x5d0]
push eax
mov ecx, dword [ebp - 0x290]
call fcn.10049852
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5d0]
call fcn.10026fd0
jmp 0x10053a7d
mov eax, dword [ebp - 0x338]
mov dword [ebp - 0x348], eax
mov eax, dword [ebp - 0x340]
mov dword [ebp - 0x350], eax
mov eax, dword [ebp - 0x348]
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x350]
mov dword [ebp - 0x358], eax
mov eax, dword [ebp - 0x78]
mov dword [eax], 0
jmp 0x10053a5d
mov eax, dword [ebp - 0x78]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x78]
mov dword [ecx], eax
mov eax, dword [ebp - 0x78]
cmp dword [eax], 2
jge 0x10053a7d
mov eax, dword [ebp - 0x78]
push dword [eax]
mov ecx, dword [ebp - 0x358]
call fcn.100270e2
mov dword [eax], 0x12df3d37
jmp 0x10053a52
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret