Function at 0x10054670
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1007821f
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x604
push esi
push edi
movzx eax, byte [ebp + 0x10]
test eax, eax
je 0x100572f8
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x3b4], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x374], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x320], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x3c4], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x3bc], eax
lea eax, [ebp + 8]
mov dword [ebp - 0x330], eax
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0x3a0], eax
mov eax, dword [ebp - 0x330]
movzx eax, byte [eax]
test eax, eax
je 0x100547c9
mov eax, dword [ebp - 0x374]
mov dword [ebp - 0x3cc], eax
mov eax, dword [ebp - 0x3b4]
mov dword [ebp - 0x404], eax
mov eax, dword [ebp - 0x3bc]
mov dword [ebp - 0x380], eax
mov eax, dword [ebp - 0x3c4]
mov dword [ebp - 0x3c8], eax
mov eax, dword [ebp - 0x3cc]
mov dword [ebp - 0x2b4], eax
mov eax, dword [ebp - 0x404]
mov dword [ebp - 0x244], eax
mov eax, dword [ebp - 0x380]
mov dword [ebp - 0x36c], eax
mov eax, dword [ebp - 0x3c8]
mov dword [ebp - 0x318], eax
mov eax, dword [ebp - 0x2b4]
movzx eax, byte [eax]
test eax, eax
je 0x1005476b
mov ecx, dword [ebp - 0x244]
call fcn.10057b05
movzx eax, al
test eax, eax
jne 0x100547c4
push 0xa19
push 0x10ab
push 0x7523
push 0x7d2c
push 0x2d24
push 0x7b1a
push 0x2f9f
push dword [ebp - 0x244]
push dword [ebp - 0x36c]
push 0x721f
push 1
push 1
push 0x37f9
push dword [ebp - 0x318]
push 0x4e15
call fcn.10054408
add esp, 0x3c
mov eax, dword [ebp - 0x2b4]
mov byte [eax], 1
jmp 0x100572f6
mov eax, dword [ebp - 0x3a0]
mov dword [ebp - 0x284], eax
mov eax, dword [ebp - 0x320]
mov dword [ebp - 0x2a4], eax
mov dword [ebp - 0x100], 0x91a049fe
mov dword [ebp - 0x528], 0x4b1b055c
mov dword [ebp - 0x580], 0x591b68de
mov dword [ebp - 0x328], 0
mov dword [ebp - 0xf8], 0
jmp 0x10054822
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 4
jge 0x1005483e
mov eax, dword [ebp - 0xf8]
mov dword [ebp + eax*4 - 0x5bc], 0x7ef5d870
jmp 0x10054815
push 1
push 0x2a38
push 0
call fcn.100445bc
add esp, 0xc
mov dword [ebp - 0x100], 0
jmp 0x10054868
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0x12
je 0x10054b10
push 4
lea ecx, [ebp - 0x2f8]
call fcn.10025cee
and dword [ebp - 4], 0
push 4
lea ecx, [ebp - 0x2ec]
call fcn.10025cee
mov byte [ebp - 4], 1
push 0x303b
lea eax, [ebp - 0x3f0]
push eax
push 0
lea eax, [ebp - 0x2f8]
push eax
push 1
push 0x88b
call fcn.10042c02
add esp, 0x18
lea eax, [ebp - 0x2ec]
push eax
push 0x47a1
push 0
push 0x64c3
push 0
lea eax, [ebp - 0x3f0]
push eax
call fcn.10042c02
add esp, 0x18
push 3
lea ecx, [ebp - 0x2f8]
call fcn.10025d6c
cmp dword [eax], 0
jne 0x100548fd
mov dword [ebp - 0x278], 1
jmp 0x10054904
and dword [ebp - 0x278], 0
push 3
lea ecx, [ebp - 0x2ec]
call fcn.10025d6c
cmp dword [eax], 1
jge 0x10054922
mov dword [ebp - 0x2bc], 1
jmp 0x10054929
and dword [ebp - 0x2bc], 0
push 3
lea ecx, [ebp - 0x2f8]
call fcn.10025d6c
mov ecx, dword [ebp - 0x2bc]
cmp ecx, dword [eax]
jle 0x1005494c
mov dword [ebp - 0x2dc], 1
jmp 0x10054953
and dword [ebp - 0x2dc], 0
push 3
lea ecx, [ebp - 0x2ec]
call fcn.10025d6c
mov ecx, dword [ebp - 0x2dc]
cmp ecx, dword [eax]
jle 0x10054976
mov dword [ebp - 0x208], 1
jmp 0x1005497d
and dword [ebp - 0x208], 0
push 2
lea ecx, [ebp - 0x2ec]
call fcn.10025d6c
mov ecx, dword [ebp - 0x208]
cmp ecx, dword [eax]
je 0x100549a0
mov dword [ebp - 0x2ac], 1
jmp 0x100549a7
and dword [ebp - 0x2ac], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x5bc]
inc eax
mov dword [ebp - 0x130], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x130]
mov dword [ebp + eax - 0x5bc], ecx
mov eax, dword [ebp - 0x328]
add eax, dword [ebp - 0x2ac]
add eax, dword [ebp - 0x130]
cmp dword [ebp - 0x278], eax
jg 0x10054a3f
mov byte [ebp - 0x4b], 0
movzx eax, byte [ebp - 0x4b]
test eax, eax
je 0x10054a05
push 0
push 0x6868
push 0
call fcn.100445bc
add esp, 0xc
push 3
lea ecx, [ebp - 0x2f8]
call fcn.10025d6c
cmp dword [eax], 0
je 0x10054a3a
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2ec]
call fcn.10025d50
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2f8]
call fcn.10025d50
jmp 0x10054b10
jmp 0x10054aed
push 2
lea ecx, [ebp - 0x44c]
call fcn.10025cee
mov byte [ebp - 4], 2
push 0x5e9d
push 0xd74
push 1
push 0xd3b
push 0x134
push 0
push 0x356a
lea eax, [ebp - 0x44c]
push eax
push 0x540e
lea eax, [ebp - 0x52c]
push eax
push 0x2385
push 0x4990
push 0xd90
call fcn.10041e00
add esp, 0x34
lea eax, [ebp - 0x44c]
push eax
push 1
push 0x5881
push 0x625c
push 0x23a2
push 1
lea eax, [ebp - 0x2ec]
push eax
call fcn.10041ac4
add esp, 0x1c
mov byte [ebp - 0x4a], 0
push 0x58a0
push 1
lea eax, [ebp - 0x4a]
push eax
push 1
push 0x2c6b
call fcn.1003fd9a
add esp, 0x14
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x44c]
call fcn.10025d50
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2ec]
call fcn.10025d50
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2f8]
call fcn.10025d50
jmp 0x1005485b
push 1
lea ecx, [ebp - 0x540]
call fcn.10025cee
mov dword [ebp - 4], 3
push 1
lea ecx, [ebp - 0x3dc]
call fcn.10025cee
mov byte [ebp - 4], 4
push 0xb22
push 1
lea eax, [ebp - 0x540]
push eax
push 1
lea eax, [ebp - 0x3a8]
push eax
push 0x5af6
push 1
call fcn.10041bbb
add esp, 0x1c
push 0
push 0x7786
push 0x6264
push 0x3d10
push 1
push 0x3abb
lea eax, [ebp - 0x3dc]
push eax
push 0x83d
push 0x7f84
lea eax, [ebp - 0x3a8]
push eax
push 0x70cc
call fcn.1004148d
add esp, 0x2c
push 0
lea ecx, [ebp - 0x3dc]
call fcn.10025d6c
and dword [eax], 0
jmp 0x10054bce
push 0
lea ecx, [ebp - 0x3dc]
call fcn.10025d6c
mov dword [ebp - 0x138], eax
mov eax, dword [ebp - 0x138]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x138]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x3dc]
call fcn.10025d6c
cmp dword [eax], 0
jg 0x10054c1f
push 0x774f
push 0x601
push 0x3a59
push 1
push 0
call fcn.10054300
add esp, 0x14
push 0x6917
push 0
push 0x385d
push 0x4dc3
push 0
push 0x2ef6
push 1
call fcn.10043f0f
add esp, 0x1c
jmp 0x10054baa
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x3dc]
call fcn.10025d50
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x540]
call fcn.10025d50
mov eax, dword [0x106223c4]
and eax, 1
jne 0x10054c74
mov eax, dword [0x106223c4]
or eax, 1
mov dword [0x106223c4], eax
mov dword [ebp - 4], 5
mov ecx, 0x10622360
call fcn.100379ad
push 0x100784ae
call fcn.1005e662
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x210], 2
mov dword [ebp - 0x140], 0xfffffffa
mov dword [ebp - 0x30c], 0
mov dword [ebp - 0x88], 0x5b0bb8bf
mov dword [ebp - 0x534], 0
mov dword [ebp - 0x588], 1
mov dword [ebp - 0x4c8], 0
mov dword [ebp - 0x4d0], 0x1f050678
mov dword [ebp - 0x408], 0xefbde283
mov dword [ebp - 0x4d8], 0
mov dword [ebp - 0x4e0], 0xbb66efe0
mov dword [ebp - 0x4e8], 0xfffffffa
mov dword [ebp - 0x108], 0
jmp 0x10054d05
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 3
jge 0x10054d21
mov eax, dword [ebp - 0x108]
mov dword [ebp + eax*4 - 0x5f8], 0x3ae5d5ec
jmp 0x10054cf8
push 1
push 0x7958
lea eax, [ebp - 0x210]
push eax
push 1
lea eax, [ebp - 0x140]
push eax
lea eax, [ebp - 0x30c]
push eax
lea eax, [ebp - 0x88]
push eax
call fcn.100400be
add esp, 0x1c
mov dword [ebp - 0x88], 0
jmp 0x10054d67
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0x11
jge 0x10054eb3
mov dword [ebp - 0x4f0], 7
mov dword [ebp - 0x4f8], 0x53f0d3ec
mov dword [ebp - 0x500], 0
mov dword [ebp - 0x508], 0
mov dword [ebp - 0x338], 1
mov dword [ebp - 0x3b0], 5
push 2
lea ecx, [ebp - 0x470]
call fcn.10025cee
mov dword [ebp - 4], 6
mov dword [ebp - 0x3d0], 0xffff
mov dword [ebp - 0x340], 0xd45e
mov dword [ebp - 0x8c], 0
jmp 0x10054df1
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 1
jge 0x10054e0d
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0x510], 0x280bfe73
jmp 0x10054de4
push 0x78ae
push 1
push 1
push 0x7d55
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 0x470]
push eax
call fcn.1004031a
add esp, 0x18
lea eax, [ebp - 0x3d0]
push eax
push 0x1402
push 1
push 1
push 0x5382
call fcn.10041d3f
add esp, 0x14
push 0x5c3e
lea eax, [ebp - 0x338]
push eax
push 1
lea eax, [ebp - 0x3b0]
push eax
push 0x4d21
push 1
lea eax, [ebp - 0x210]
push eax
push 0x2ba1
lea eax, [ebp - 0x470]
push eax
push 0x5698
lea eax, [ebp - 0x140]
push eax
lea eax, [ebp - 0x340]
push eax
lea eax, [ebp - 0x408]
push eax
call fcn.10041e00
add esp, 0x34
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x470]
call fcn.10025d50
jmp 0x10054d5a
push dword [ebp - 0x284]
lea ecx, [ebp - 0x434]
call fcn.100377b9
mov dword [ebp - 4], 7
lea eax, [ebp - 0x518]
push eax
lea ecx, [ebp - 0x434]
call fcn.10037e5e
push dword [eax]
lea eax, [ebp - 0x520]
push eax
lea ecx, [ebp - 0x434]
call fcn.10037e72
push dword [eax]
lea eax, [ebp - 0x4c4]
push eax
lea ecx, [ebp - 0x434]
call fcn.10037e5e
push dword [eax]
mov edx, 0x1003f8ab
lea ecx, [ebp - 0x530]
call fcn.10057d47
add esp, 0xc
mov dword [ebp - 0x48], 0xffffffff
mov dword [ebp - 0x38], 0x622b6078
mov dword [ebp - 0x148], 0x5a9390df
mov dword [ebp - 0x160], 0x12ef314d
mov dword [ebp - 0xd8], 0
mov dword [ebp - 0x220], 0xa8d6e859
mov dword [ebp - 0xe4], 0xd909cc0f
mov dword [ebp - 0x10c], 0xd4d3380d
mov dword [ebp - 0x230], 0x3c62ed5b
mov dword [ebp - 0x3b8], 6
mov dword [ebp - 0x104], 0
jmp 0x10054f91
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 3
jge 0x10054fad
mov eax, dword [ebp - 0x104]
mov dword [ebp + eax*4 - 0x5c8], 0
jmp 0x10054f84
cmp dword [ebp - 0x48], 0
je 0x100550b3
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x38], eax
je 0x10054fcb
mov dword [ebp - 0x2b0], 1
jmp 0x10054fd2
and dword [ebp - 0x2b0], 0
mov eax, dword [ebp - 0x2b0]
mov dword [ebp - 0x148], eax
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x148], eax
jne 0x10054ff5
mov dword [ebp - 0x218], 1
jmp 0x10054ffc
and dword [ebp - 0x218], 0
mov eax, dword [ebp - 0x218]
neg eax
sub eax, dword [ebp - 0x38]
jne 0x1005500f
cmp dword [ebp - 0x48], 0
je 0x10055013
cmp dword [ebp - 0x48], 0
cmp dword [ebp - 0x38], 1
ja 0x10055025
mov dword [ebp - 0x150], 1
jmp 0x1005502c
and dword [ebp - 0x150], 0
mov eax, dword [ebp - 0x160]
imul eax, dword [ebp - 0x150]
cmp eax, 7
jl 0x1005504a
mov dword [ebp - 0x280], 1
jmp 0x10055051
and dword [ebp - 0x280], 0
cmp dword [ebp - 0x280], 0xffffffff
jl 0x10055066
mov dword [ebp - 0x158], 1
jmp 0x1005506d
and dword [ebp - 0x158], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x158], eax
jne 0x10055084
mov dword [ebp - 0x348], 1
jmp 0x1005508b
and dword [ebp - 0x348], 0
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x584], eax
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0x58c], eax
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 0
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x5a4], eax
mov eax, 0x495e
add eax, 0x3cc9
mov dword [ebp - 0xe4], eax
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x5ac], eax
cmp dword [ebp - 0xe4], 0
je 0x100550e8
cmp dword [ebp - 0xe4], 0
mov eax, dword [ebp - 0x38]
imul eax, dword [ebp - 0x160]
cmp eax, 4
jb 0x10055103
mov dword [ebp - 0x2d8], 1
jmp 0x1005510a
and dword [ebp - 0x2d8], 0
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x2d8], eax
jne 0x10055121
mov dword [ebp - 0x168], 1
jmp 0x10055128
and dword [ebp - 0x168], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x168], eax
jne 0x1005513f
mov dword [ebp - 0x228], 1
jmp 0x10055146
and dword [ebp - 0x228], 0
mov eax, dword [ebp - 0x228]
mov dword [ebp - 0x10c], eax
mov eax, dword [ebp - 0xd8]
cmp dword [ebp - 0x10c], eax
jl 0x1005516c
mov dword [ebp - 0x170], 1
jmp 0x10055173
and dword [ebp - 0x170], 0
mov eax, dword [ebp - 0xd8]
cmp dword [ebp - 0x170], eax
jg 0x10055188
push 0xfffffffffffffff7
pop eax
test eax, eax
jne 0x1005519a
cmp dword [ebp - 0x10c], 0
jne 0x1005519a
and dword [ebp - 0x288], 0
jmp 0x100551a4
mov dword [ebp - 0x288], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x5c8]
cmp dword [ebp - 0x288], eax
jne 0x100551c5
mov dword [ebp - 0x178], 1
jmp 0x100551cc
and dword [ebp - 0x178], 0
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x230], eax
mov eax, dword [ebp - 0x230]
cmp dword [ebp - 0x48], eax
jne 0x100551ef
mov dword [ebp - 0x180], 1
jmp 0x100551f6
and dword [ebp - 0x180], 0
cmp dword [ebp - 0x180], 0xc7f2bac4
jb 0x1005520e
mov dword [ebp - 0x2b8], 1
jmp 0x10055215
and dword [ebp - 0x2b8], 0
mov eax, dword [ebp - 0x2b8]
mov dword [ebp - 0x3b8], eax
lea ecx, [ebp - 0x434]
call fcn.1003f836
mov dword [ebp - 0x29c], eax
movzx eax, byte [0x1062223e]
test eax, eax
je 0x10055ae1
mov ecx, 0x10622360
call fcn.10057b05
movzx eax, al
test eax, eax
jne 0x10055ae1
lea eax, [ebp - 0x29c]
push eax
lea eax, [ebp - 0x268]
push eax
mov ecx, 0x10622360
call fcn.10037a64
mov dword [ebp - 0x10], 2
mov dword [ebp - 0x3c], 0x378f1e0c
push 2
lea ecx, [ebp - 0x488]
call fcn.10025cee
mov byte [ebp - 4], 8
mov dword [ebp - 0x368], 2
lea eax, [ebp - 0x5a8]
push eax
lea eax, [ebp - 0x488]
push eax
push 0x7e6f
push 0x292b
push 1
push 1
push 0x537d
call fcn.10040d5d
add esp, 0x1c
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x5a0], eax
cmp dword [ebp - 0x10], 0xfffffffa
jle 0x10055332
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x4cc], eax
cmp dword [ebp - 0x10], 0
jne 0x100552ec
xor eax, eax
inc eax
jne 0x100552ec
and dword [ebp - 0x188], 0
jmp 0x100552f6
mov dword [ebp - 0x188], 1
mov eax, dword [ebp - 0x188]
neg eax
cmp eax, 0xa21e
jle 0x10055317
cmp dword [ebp - 0x10], 0
je 0x10055317
mov dword [ebp - 0x238], 1
jmp 0x1005531e
and dword [ebp - 0x238], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x238], eax
je 0x10055332
and dword [ebp - 0x190], 0
jmp 0x1005533c
mov dword [ebp - 0x190], 1
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
jne 0x1005535a
cmp dword [ebp - 0x10], 0
jne 0x1005535a
and dword [ebp - 0x290], 0
jmp 0x10055364
mov dword [ebp - 0x290], 1
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x290], eax
jg 0x1005537b
mov dword [ebp - 0x198], 1
jmp 0x10055382
and dword [ebp - 0x198], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x198], eax
je 0x10055399
mov dword [ebp - 0x240], 1
jmp 0x100553a0
and dword [ebp - 0x240], 0
mov eax, dword [ebp - 0x240]
sub eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x10]
je 0x100553ba
mov dword [ebp - 0x1a0], 1
jmp 0x100553c1
and dword [ebp - 0x1a0], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x1a0], eax
jge 0x100553d8
mov dword [ebp - 0x2e0], 1
jmp 0x100553df
and dword [ebp - 0x2e0], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x2e0], eax
jg 0x100553f6
mov dword [ebp - 0x350], 1
jmp 0x100553fd
and dword [ebp - 0x350], 0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x544], eax
cmp dword [ebp - 0x10], 0
je 0x10055497
mov dword [ebp - 0x3c], 0
jmp 0x10055420
mov eax, dword [ebp - 0x3c]
dec eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0xfffffff3
je 0x10055495
mov dword [ebp - 0x10], 0xfffffff5
jmp 0x10055436
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xfffffffa
jle 0x10055493
mov dword [ebp - 0x37c], 0xbdb88dcf
cmp dword [ebp - 0x37c], 0
je 0x10055451
jmp 0x10055493
push 0x2c74
push 0x6f0f
push 0xb72
push 0x1222
push 1
push 0x11b1
push 0x2aa0
push 1
push 0x2a81
push 1
push 0x5039
push 0x4c4b
push 0x53bc
call fcn.10040e58
add esp, 0x34
jmp 0x1005542f
jmp 0x10055419
jmp 0x10055502
mov dword [ebp - 0x38c], 0
mov dword [ebp - 0x358], 0xb8a442f2
mov dword [ebp - 0x360], 0xfffffffe
mov dword [ebp - 0x384], 0xfffffffc
push 1
lea eax, [ebp - 0x358]
push eax
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x384]
push eax
lea eax, [ebp - 0x488]
push eax
lea eax, [ebp - 0x3c]
push eax
push 0x2ca6
lea eax, [ebp - 0x360]
push eax
push 1
lea eax, [ebp - 0x38c]
push eax
lea eax, [ebp - 0x368]
push eax
call fcn.100420ef
add esp, 0x2c
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x488]
call fcn.10025d50
lea eax, [ebp - 0x4d4]
push eax
mov ecx, 0x10622360
call fcn.10025e7f
push eax
lea ecx, [ebp - 0x268]
call fcn.10025ec7
movzx eax, al
test eax, eax
je 0x10055ae1
push 4
lea ecx, [ebp - 0x70]
call fcn.10025cee
mov byte [ebp - 4], 9
mov dword [ebp - 0x30], 0x31ea0627
mov dword [ebp - 0x64], 0xd7d2
push 3
lea ecx, [ebp - 0x414]
call fcn.10025cee
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x2d4], 0xffffffff
mov dword [ebp - 0x39c], 0
mov dword [ebp - 0x1c], 0
jmp 0x1005558a
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 4
jge 0x100555a3
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x70]
call fcn.10025d6c
mov dword [eax], 4
jmp 0x10055583
mov dword [ebp - 0x1c], 0
jmp 0x100555b3
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x100555cf
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x414]
call fcn.10025d6c
mov dword [eax], 0x62cc684c
jmp 0x100555ac
mov dword [ebp - 0x1c], 0
jmp 0x100555df
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x100555f5
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x59c], 1
jmp 0x100555d8
push 1
lea ecx, [ebp - 0x70]
call fcn.10025d6c
or dword [eax], 0xffffffff
jmp 0x10055625
push 1
lea ecx, [ebp - 0x70]
call fcn.10025d6c
mov dword [ebp - 0x1a8], eax
mov eax, dword [ebp - 0x1a8]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x1a8]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x70]
call fcn.10025d6c
cmp dword [eax], 0xffffffeb
jg 0x100558db
mov dword [ebp - 0x50], 9
mov dword [ebp - 0x34], 0xca779041
mov dword [ebp - 0x298], 0xe4cff15c
mov dword [ebp - 0xe8], 0
jmp 0x10055669
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 3
jge 0x10055685
mov eax, dword [ebp - 0xe8]
mov dword [ebp + eax*4 - 0x550], 0xffff
jmp 0x1005565c
cmp dword [ebp - 0x50], 0
je 0x100556b3
mov dword [ebp - 0x34], 0xc9a130df
cmp dword [ebp - 0x34], 0
je 0x100556b3
push 1
lea ecx, [ebp - 0x70]
call fcn.10025d6c
cmp dword [eax], 0
je 0x100556b3
mov dword [ebp - 0x248], 1
jmp 0x100556ba
and dword [ebp - 0x248], 0
push 1
lea ecx, [ebp - 0x70]
call fcn.10025d6c
mov ecx, dword [ebp - 0x248]
cmp ecx, dword [eax]
jge 0x100556d2
cmp dword [ebp - 0x34], 0
push 0
lea ecx, [ebp - 0x70]
call fcn.10025d6c
mov esi, eax
push 0
lea ecx, [ebp - 0x70]
call fcn.10025d6c
mov ecx, dword [esi]
cmp ecx, dword [eax]
jl 0x100556fa
mov dword [ebp - 0x1b0], 1
jmp 0x10055701
and dword [ebp - 0x1b0], 0
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x298], eax
mov eax, dword [ebp - 0x298]
mov dword [ebp - 0x568], eax
push 1
lea ecx, [ebp - 0x70]
call fcn.10025d6c
mov esi, dword [ebp - 0x50]
push 1
lea ecx, [ebp - 0x70]
call fcn.10025d6c
mov edi, eax
push 3
lea ecx, [ebp - 0x70]
call fcn.10025d6c
mov ecx, dword [edi]
add ecx, dword [eax]
cmp esi, ecx
jle 0x10055750
mov dword [ebp - 0x1b8], 1
jmp 0x10055757
and dword [ebp - 0x1b8], 0
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x1b8], eax
je 0x1005576e
mov dword [ebp - 0x250], 1
jmp 0x10055775
and dword [ebp - 0x250], 0
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x250], eax
je 0x10055792
cmp dword [ebp - 0x30], 0
je 0x10055792
mov dword [ebp - 0x1c0], 1
jmp 0x10055799
and dword [ebp - 0x1c0], 0
push 1
lea ecx, [ebp - 0x70]
call fcn.10025d6c
mov ecx, dword [ebp - 0x1c0]
cmp ecx, dword [eax]
jle 0x100557b9
mov dword [ebp - 0x2c0], 1
jmp 0x100557c0
and dword [ebp - 0x2c0], 0
mov eax, dword [ebp - 0x2c0]
sub eax, dword [ebp - 0x30]
sub eax, 3
jne 0x100557d4
cmp dword [ebp - 0x50], 0
je 0x100557e7
push 0xfffffffffffffffd
pop eax
test eax, eax
je 0x100557e7
mov dword [ebp - 0x1c8], 1
jmp 0x100557ee
and dword [ebp - 0x1c8], 0
mov eax, dword [ebp - 0x50]
imul eax, dword [ebp - 0x1c8]
test eax, eax
jne 0x1005580a
or eax, 0xffffffff
jne 0x1005580a
and dword [ebp - 0x258], 0
jmp 0x10055814
mov dword [ebp - 0x258], 1
xor eax, eax
sub eax, dword [ebp - 0x258]
je 0x1005583e
push 0x52aa
push 1
push 1
push 0x36c4
push 0x3924
call fcn.100423a2
add esp, 0x14
jmp 0x100558c5
push 0x5408
lea eax, [ebp - 0x30]
push eax
push 0
push 1
push 0x2897
push 0x2d09
push 0x7c03
push 0x173e
push 0x6552
push 0x62b7
lea eax, [ebp - 0x34]
push eax
push 1
call fcn.100461bc
add esp, 0x30
mov dword [ebp - 0x30], 2
jmp 0x10055887
mov eax, dword [ebp - 0x30]
dec eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
jl 0x100558c5
mov dword [ebp - 0x34], 2
jmp 0x1005589d
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jl 0x100558c3
mov eax, dword [ebp - 0x34]
cmp dword [ebp + eax*4 - 0x550], 0
je 0x100558b2
jmp 0x100558c3
mov eax, dword [ebp - 0x34]
cmp dword [ebp + eax*4 - 0x550], 0
je 0x100558c1
jmp 0x10055896
jmp 0x10055896
jmp 0x10055880
push 1
lea ecx, [ebp - 0x70]
call fcn.10025d6c
cmp dword [eax], 0
je 0x100558d6
jmp 0x100558db
jmp 0x10055604
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x4dc], eax
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x1d0], eax
push 1
lea ecx, [ebp - 0x414]
call fcn.10025d6c
mov ecx, dword [ebp - 0x1d0]
mov dword [eax], ecx
push 1
lea ecx, [ebp - 0x70]
call fcn.10025d6c
mov ecx, dword [ebp - 0x1d0]
cmp ecx, dword [eax]
jl 0x10055922
mov dword [ebp - 0x394], 1
jmp 0x10055929
and dword [ebp - 0x394], 0
push 1
lea ecx, [ebp - 0x414]
call fcn.10025d6c
mov esi, eax
push 2
lea ecx, [ebp - 0x70]
call fcn.10025d6c
mov ecx, dword [esi]
cmp ecx, dword [eax]
jg 0x10055954
mov dword [ebp - 0x2a0], 1
jmp 0x1005595b
and dword [ebp - 0x2a0], 0
mov dword [ebp - 0x30], 1
mov eax, dword [ebp - 0x30]
imul eax, dword [ebp - 0x2a0]
cmp eax, 0xffff
ja 0x1005597f
mov dword [ebp - 0x1d8], 1
jmp 0x10055986
and dword [ebp - 0x1d8], 0
push 1
lea ecx, [ebp - 0x70]
call fcn.10025d6c
mov eax, dword [eax]
cmp eax, dword [ebp - 0x1d8]
jg 0x100559a9
cmp dword [ebp - 0x30], 0
jne 0x100559a9
and dword [ebp - 0x11c], 0
jmp 0x100559b3
mov dword [ebp - 0x11c], 1
push 0
lea ecx, [ebp - 0x70]
call fcn.10025d6c
mov ecx, dword [ebp - 0x11c]
mov dword [eax], ecx
cmp dword [ebp - 0x11c], 0
ja 0x100559da
mov dword [ebp - 0x260], 1
jmp 0x100559e1
and dword [ebp - 0x260], 0
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x260], eax
jl 0x100559fe
mov eax, 0xa64a
test eax, eax
jne 0x100559fe
and dword [ebp - 0x118], 0
jmp 0x10055a08
mov dword [ebp - 0x118], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x118]
mov dword [ebp + eax - 0x59c], ecx
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x118], eax
jg 0x10055a32
mov dword [ebp - 0x1e0], 1
jmp 0x10055a39
and dword [ebp - 0x1e0], 0
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x1e0], eax
jne 0x10055a50
mov dword [ebp - 0x370], 1
jmp 0x10055a57
and dword [ebp - 0x370], 0
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x554], eax
push 1
lea ecx, [ebp - 0x70]
call fcn.10025d6c
mov eax, dword [eax]
mov dword [ebp - 0x2d4], eax
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x2d4], eax
jl 0x10055a89
mov dword [ebp - 0x1e8], 1
jmp 0x10055a90
and dword [ebp - 0x1e8], 0
mov eax, dword [ebp - 0x1e8]
mov dword [ebp - 0x39c], eax
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x414]
call fcn.10025d50
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x70]
call fcn.10025d50
lea ecx, [ebp - 0x268]
call fcn.10057c06
mov ecx, dword [ebp - 0x2a4]
mov eax, dword [eax + 4]
mov dword [ecx], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x434]
call fcn.10037851
jmp 0x10057325
mov dword [ebp - 0x14], 0xfffffffc
push 2
lea ecx, [ebp - 0x494]
call fcn.10025cee
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x378], 0x993911e7
mov dword [ebp - 0x3ac], 0x5d33
mov dword [ebp - 0x3a4], 1
push 0xe6f
push 0x753f
push 0x4680
push 0x54de
push 0x4edc
lea eax, [ebp - 0x494]
push eax
push 0x241e
push 0
push 0x502c
push 0
lea eax, [ebp - 0x4e4]
push eax
push 0x16bf
call fcn.10043d08
add esp, 0x30
cmp dword [ebp - 0x14], 0
jne 0x10055c95
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x14], eax
jne 0x10055b77
mov dword [ebp - 0x1f0], 1
jmp 0x10055b7e
and dword [ebp - 0x1f0], 0
cmp dword [ebp - 0x1f0], 0xffffffff
jle 0x10055b93
mov dword [ebp - 0x2a8], 1
jmp 0x10055b9a
and dword [ebp - 0x2a8], 0
mov eax, dword [ebp - 0x2a8]
sub eax, 5
cmp eax, 0x27f0
jne 0x10055bb6
mov dword [ebp - 0x1f8], 1
jmp 0x10055bbd
and dword [ebp - 0x1f8], 0
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x1f8]
cmp eax, 0xffffffff
jg 0x10055bd7
mov dword [ebp - 0x270], 1
jmp 0x10055bde
and dword [ebp - 0x270], 0
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x270]
cmp eax, 0x819d3388
jb 0x10055bf3
cmp dword [ebp - 0x14], 0
mov eax, dword [ebp - 0x14]
inc eax
sub eax, dword [ebp - 0x14]
cmp eax, 0x951b
jg 0x10055c0d
mov dword [ebp - 0x200], 1
jmp 0x10055c14
and dword [ebp - 0x200], 0
mov eax, dword [ebp - 0x200]
sub eax, dword [ebp - 0x14]
jne 0x10055c23
cmp dword [ebp - 0x14], 0
mov eax, 0x547507a
neg eax
cmp eax, dword [ebp - 0x14]
jl 0x10055c3b
mov dword [ebp - 0x2d0], 1
jmp 0x10055c42
and dword [ebp - 0x2d0], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x2d0], eax
jle 0x10055c59
mov dword [ebp - 0x128], 1
jmp 0x10055c60
and dword [ebp - 0x128], 0
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x128]
jg 0x10055c77
mov dword [ebp - 0x12c], 1
jmp 0x10055c7e
and dword [ebp - 0x12c], 0
imul eax, dword [ebp - 0x12c], 0xba56
test eax, eax
jne 0x10055c95
and dword [ebp - 0x134], 0
jmp 0x10055c9f
mov dword [ebp - 0x134], 1
cmp dword [ebp - 0x134], 9
jge 0x10055cb4
mov dword [ebp - 0x13c], 1
jmp 0x10055cbb
and dword [ebp - 0x13c], 0
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x13c]
cmp eax, dword [ebp - 0x14]
jge 0x10055d71
or eax, 0xffffffff
je 0x10055d71
mov dword [ebp - 0x144], 0x6a4a
push 0x6b3e
push 0x1f80
push 0x235b
push 0x7730
push 0x3c33
push 0x7c86
push 1
push 1
push 1
lea eax, [ebp - 0x144]
push eax
push 0x7e67
push 0x210
push 0x30fa
call fcn.10042482
add esp, 0x34
lea eax, [ebp - 0x14]
push eax
push 0x10f7
push 0x1832
push 1
push 0x43e0
lea eax, [ebp - 0x378]
push eax
lea eax, [ebp - 0x494]
push eax
push 0x4a8b
lea eax, [ebp - 0x3a4]
push eax
push 0x14cc
lea eax, [ebp - 0x144]
push eax
lea eax, [ebp - 0x3ac]
push eax
push 1
call fcn.10042668
add esp, 0x34
jmp 0x10055da6
mov dword [ebp - 0x3e0], 0xfffffffe
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x3e0]
push eax
push 0x4cae
push 0x7ee9
push 0
push 1
push 0x60e8
push 0x5bab
call fcn.10057335
add esp, 0x20
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x494]
call fcn.10025d50
and dword [ebp - 0x7c], 0
lea eax, [ebp - 0x434]
push eax
call fcn.1003fd49
pop ecx
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0
jne 0x10057150
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x56c], 0x37400631
mov dword [ebp - 0x4ec], 0x8b0d193e
mov dword [ebp - 0x84], 8
mov dword [ebp - 0x564], 0xfffffff7
mov dword [ebp - 0x80], 0xffffffff
mov dword [ebp - 0xe0], 0
jmp 0x10055e22
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 3
jge 0x10055e3e
mov eax, dword [ebp - 0xe0]
mov dword [ebp + eax*4 - 0x5d4], 0xec995f76
jmp 0x10055e15
mov dword [ebp - 0x74], 0
jmp 0x10055e4e
mov eax, dword [ebp - 0x74]
dec eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0xffffffe6
jg 0x10056142
push 2
lea ecx, [ebp - 0x3ec]
call fcn.10025cee
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x5c], 0xab6dad81
mov dword [ebp - 0x3c0], 0xfffffffb
mov dword [ebp - 0x4f4], 0xb0cf5aa0
mov dword [ebp - 0x4a4], 0x70e7ad53
mov dword [ebp - 0x4a0], 0x70e7ad53
mov dword [ebp - 0x49c], 0x70e7ad53
mov dword [ebp - 0x498], 0x70e7ad53
mov dword [ebp - 0x40], 0xc35cf455
push 0x1f0c
push 0x6a5d
push 1
push 0
lea eax, [ebp - 0x574]
push eax
push 0x15f7
push 0x121e
push 0x7e31
push 0x619b
lea eax, [ebp - 0x3ec]
push eax
push 0x7f89
push 1
call fcn.100461bc
add esp, 0x30
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x4fc], eax
push 1
lea ecx, [ebp - 0x3ec]
call fcn.10025d6c
mov dword [ebp - 0x120], eax
mov eax, dword [ebp - 0x120]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x120]
mov dword [ecx], eax
mov eax, dword [ebp - 0x120]
cmp dword [eax], 0
jne 0x10055fc4
push 1
lea ecx, [ebp - 0x3ec]
call fcn.10025d6c
push 1
lea ecx, [ebp - 0x3ec]
call fcn.10025d6c
cmp dword [eax], 0xc8d3
jge 0x10055f5c
mov dword [ebp - 0x14c], 1
jmp 0x10055f63
and dword [ebp - 0x14c], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x4a4]
cmp eax, dword [ebp - 0x14c]
jne 0x10055f84
mov dword [ebp - 0x388], 1
jmp 0x10055f8b
and dword [ebp - 0x388], 0
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x57c], eax
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x5d4]
dec eax
imul eax, dword [ebp - 0x3c0]
sub eax, dword [ebp - 0x84]
cmp eax, dword [ebp - 0x80]
jg 0x10055fc4
and dword [ebp - 0x154], 0
jmp 0x10055fce
mov dword [ebp - 0x154], 1
cmp dword [ebp - 0x154], 0x8cdb
jge 0x10055fe6
mov dword [ebp - 0x15c], 1
jmp 0x10055fed
and dword [ebp - 0x15c], 0
xor eax, eax
sub eax, dword [ebp - 0x15c]
cmp eax, 0xfff9
jne 0x1005600b
cmp dword [ebp - 0x5c], 0
jne 0x1005600b
and dword [ebp - 0x164], 0
jmp 0x10056015
mov dword [ebp - 0x164], 1
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x164], eax
jg 0x10056088
mov dword [ebp - 0x80], 0
jmp 0x10056030
mov eax, dword [ebp - 0x80]
dec eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0xfffffffc
jl 0x10056083
mov dword [ebp - 0x84], 0x1d
jmp 0x1005604f
mov eax, dword [ebp - 0x84]
dec eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0xffffffec
je 0x10056081
push 0xa7
push 0x213e
push 0x418e
push 1
push 1
push 0x3bab
push 0x2ea3
push 1
call fcn.1004291c
add esp, 0x20
jmp 0x10056042
jmp 0x10056029
jmp 0x1005612e
mov dword [ebp - 0x5c], 0
jmp 0x10056098
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 3
jg 0x1005612e
mov byte [ebp - 0x42], 0
movzx eax, byte [ebp - 0x42]
test eax, eax
je 0x100560e7
push 0x6dbd
push 0x257e
push 0x7890
push 1
push 0x1f1
push 0x6da9
push 0x26d9
push 0x3124
push 0xd32
push 0x1906
push 1
call fcn.1004158c
add esp, 0x2c
mov dword [ebp - 0x40], 0
jmp 0x100560f7
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 3
jg 0x10056129
push 0x4eb1
push 1
push 0x500a
push 0x27fb
push 1
push 0x7525
push 0x4028
push 0x3b16
call fcn.10042a9d
add esp, 0x20
jmp 0x100560f0
jmp 0x10056091
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x3ec]
call fcn.10025d50
jmp 0x10055e47
mov dword [ebp - 0x24], 1
mov dword [ebp - 0xcc], 0x30a9bca7
mov dword [ebp - 0x54], 0x7120dd93
mov dword [ebp - 0xf0], 4
mov dword [ebp - 0x78], 0x412f3a68
push 1
lea ecx, [ebp - 0x560]
call fcn.10025cee
mov byte [ebp - 4], 0xd
lea eax, [ebp - 0x560]
push eax
push 0x608d
lea eax, [ebp - 0x504]
push eax
push 0
push 1
push 0x588f
push 0x4361
push 1
call fcn.1004291c
add esp, 0x20
cmp dword [ebp - 0x24], 0
jne 0x1005621b
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x24], eax
jle 0x100561c1
mov dword [ebp - 0x16c], 1
jmp 0x100561c8
and dword [ebp - 0x16c], 0
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0xcc], eax
mov eax, dword [ebp - 0xcc]
add eax, dword [ebp - 0x24]
cmp dword [ebp - 0x24], eax
jle 0x100561ee
mov dword [ebp - 0x174], 1
jmp 0x100561f5
and dword [ebp - 0x174], 0
mov eax, dword [ebp - 0x174]
sub eax, dword [ebp - 0x24]
cmp eax, 0x39e
jg 0x10056211
mov dword [ebp - 0x17c], 1
jmp 0x10056218
and dword [ebp - 0x17c], 0
mov eax, dword [ebp - 0x24]
mov eax, 0xb1dab551
test eax, eax
je 0x10056236
cmp dword [ebp - 0x24], 0
je 0x10056236
mov dword [ebp - 0x184], 1
jmp 0x1005623d
and dword [ebp - 0x184], 0
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x184]
je 0x10056254
mov dword [ebp - 0x18c], 1
jmp 0x1005625b
and dword [ebp - 0x18c], 0
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x24], 1
jl 0x10056276
mov dword [ebp - 0x194], 1
jmp 0x1005627d
and dword [ebp - 0x194], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x194], eax
je 0x1005629b
push 0xfffffffffffffff7
pop eax
test eax, eax
je 0x1005629b
mov dword [ebp - 0x19c], 1
jmp 0x100562a2
and dword [ebp - 0x19c], 0
mov eax, dword [ebp - 0xf0]
cmp dword [ebp - 0x19c], eax
je 0x100562bc
mov dword [ebp - 0x1a4], 1
jmp 0x100562c3
and dword [ebp - 0x1a4], 0
mov eax, dword [ebp - 0xf0]
cmp dword [ebp - 0x1a4], eax
jle 0x100562dd
mov dword [ebp - 0x1ac], 1
jmp 0x100562e4
and dword [ebp - 0x1ac], 0
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x1ac]
jg 0x100562fb
mov dword [ebp - 0x1b4], 1
jmp 0x10056302
and dword [ebp - 0x1b4], 0
cmp dword [ebp - 0x1b4], 0x51dd2e9
jge 0x1005631a
mov dword [ebp - 0x1bc], 1
jmp 0x10056321
and dword [ebp - 0x1bc], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x1bc], eax
jle 0x10056338
mov dword [ebp - 0x1c4], 1
jmp 0x1005633f
and dword [ebp - 0x1c4], 0
cmp dword [ebp - 0x1c4], 1
jge 0x100563d1
mov dword [ebp - 0x400], 0x40b319
mov dword [ebp - 0x390], 0xffffffff
mov byte [ebp - 0x41], 0
movzx eax, byte [ebp - 0x41]
test eax, eax
je 0x1005638c
push 1
push 1
push 0x5526
push 0x4af9
push 0x76c2
push 0x7dd5
call fcn.10042d0f
add esp, 0x18
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x390]
push eax
lea eax, [ebp - 0xf0]
push eax
push 0x4acd
push 0x5e93
lea eax, [ebp - 0x400]
push eax
push 0x228a
push 1
push 1
push 0x6877
call fcn.10042d98
add esp, 0x2c
jmp 0x10056474
push 1
lea ecx, [ebp - 0x458]
call fcn.10025cee
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x310], 5
mov dword [ebp - 0x398], 6
push 0
push 0x7860
push 0x3ee4
push 1
push 0x4a72
lea eax, [ebp - 0x570]
push eax
lea eax, [ebp - 0x458]
push eax
call fcn.100446c8
add esp, 0x1c
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0xf0]
push eax
lea eax, [ebp - 0x458]
push eax
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0x398]
push eax
push 0x749e
lea eax, [ebp - 0x310]
push eax
push 1
lea eax, [ebp - 0x78]
push eax
push 0
push 0x6d3d
push 0x60fb
call fcn.10043d08
add esp, 0x30
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x458]
call fcn.10025d50
mov dword [ebp - 0x54], 0
jmp 0x10056484
mov eax, dword [ebp - 0x54]
dec eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0
jl 0x100564e9
mov dword [ebp - 0x78], 0
jmp 0x1005649a
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0
jg 0x100564e7
push 0x2764
push 1
push 0x4daa
push 0x6523
push 1
push 0x23dc
push 0x736a
push 0x4e6e
push 0x219f
push 0xcda
push 0x590
push 1
push 0x1874
push 0x6d10
call fcn.10043090
add esp, 0x38
jmp 0x10056493
jmp 0x1005647d
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x560]
call fcn.10025d50
cmp dword [0x10622234], 0
jne 0x10057132
mov byte [ebp - 0xc8], 0xa
mov byte [ebp - 0xc7], 0x10
mov byte [ebp - 0xc6], 8
mov byte [ebp - 0xc5], 0x42
mov byte [ebp - 0xc4], 5
mov byte [ebp - 0xc3], 0x42
mov byte [ebp - 0xc2], 7
mov byte [ebp - 0xc1], 0x5e
mov byte [ebp - 0xc0], 2
mov byte [ebp - 0xbf], 0x40
mov byte [ebp - 0xbe], 0
mov byte [ebp - 0xbd], 0x39
mov byte [ebp - 0xbc], 1
mov byte [ebp - 0xbb], 0x2e
mov byte [ebp - 0xba], 4
mov byte [ebp - 0xb9], 0
mov byte [ebp - 0xb8], 6
mov byte [ebp - 0xb7], 0x56
mov byte [ebp - 0xb6], 9
mov byte [ebp - 0xb5], 0x57
mov byte [ebp - 0xb4], 0xb
mov byte [ebp - 0xb3], 8
mov byte [ebp - 0xb2], 4
mov byte [ebp - 0xb1], 0x79
mov byte [ebp - 0xb0], 0xf9
mov byte [ebp - 0xaf], 0x75
mov byte [ebp - 0xae], 0x29
mov byte [ebp - 0xad], 3
mov byte [ebp - 0xac], 2
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0xc8]
or eax, 0x7c
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0xc8]
and ecx, 0x7c
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0xc8]
mov word [ebp + ecx*2 - 0x4c0], ax
mov dword [ebp - 0x2c], 2
and dword [ebp - 0xec], 0
jmp 0x10056622
mov eax, dword [ebp - 0x2c]
inc eax
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0x1d
jae 0x10056c10
push 4
lea ecx, [ebp - 0x2cc]
call fcn.10025cee
mov byte [ebp - 4], 0xf
push 1
lea ecx, [ebp - 0x464]
call fcn.10025cee
mov byte [ebp - 4], 0x10
mov dword [ebp - 0x31c], 0x71db
mov dword [ebp - 0x214], 0x6af9031e
mov dword [ebp - 0x324], 0x23c5ad05
mov dword [ebp - 0x58], 0
jmp 0x1005667c
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 2
jge 0x10056692
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x114], 0x39beb064
jmp 0x10056675
push 0x17d8
push 1
lea eax, [ebp - 0x2cc]
push eax
push 0x716c
push 0x6f27
push 0x7b6b
push 0x1198
lea eax, [ebp - 0x58]
push eax
push 0x44fc
push 1
push 0x2665
push 1
push 0x2571
call fcn.100434b1
add esp, 0x34
lea eax, [ebp - 0x464]
push eax
push 0x194d
push 1
push 1
push 0x25ee
lea eax, [ebp - 0x58]
push eax
call fcn.1004182c
add esp, 0x18
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x114], 0
jne 0x100568fa
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x114]
mov dword [ebp - 0x50c], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x114]
neg eax
je 0x1005674d
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x114], 0
je 0x1005674d
xor eax, eax
inc eax
je 0x1005674d
mov dword [ebp - 0x314], 1
jmp 0x10056754
and dword [ebp - 0x314], 0
push 0
lea ecx, [ebp - 0x2cc]
call fcn.10025d6c
push 1
lea ecx, [ebp - 0x2cc]
call fcn.10025d6c
mov esi, eax
push 2
lea ecx, [ebp - 0x2cc]
call fcn.10025d6c
mov ecx, dword [esi]
cmp ecx, dword [eax]
je 0x1005678f
mov dword [ebp - 0x1cc], 1
jmp 0x10056796
and dword [ebp - 0x1cc], 0
push 0
lea ecx, [ebp - 0x2cc]
call fcn.10025d6c
mov ecx, dword [ebp - 0x1cc]
cmp ecx, dword [eax]
jge 0x100567b9
mov dword [ebp - 0x1d4], 1
jmp 0x100567c0
and dword [ebp - 0x1d4], 0
cmp dword [ebp - 0x1d4], 0x894f
jne 0x100567d8
mov dword [ebp - 0x1dc], 1
jmp 0x100567df
and dword [ebp - 0x1dc], 0
push 3
lea ecx, [ebp - 0x2cc]
call fcn.10025d6c
mov ecx, dword [ebp - 0x1dc]
sub ecx, dword [eax]
cmp ecx, 0xc3414b5
jne 0x10056808
mov dword [ebp - 0x1e4], 1
jmp 0x1005680f
and dword [ebp - 0x1e4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x114]
add eax, dword [ebp - 0x1e4]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x114]
jge 0x1005683d
mov dword [ebp - 0x1ec], 1
jmp 0x10056844
and dword [ebp - 0x1ec], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x114]
cmp dword [ebp - 0x1ec], eax
jge 0x10056865
mov dword [ebp - 0x1f4], 1
jmp 0x1005686c
and dword [ebp - 0x1f4], 0
cmp dword [ebp - 0x1f4], 0x3799
jle 0x10056884
mov dword [ebp - 0x1fc], 1
jmp 0x1005688b
and dword [ebp - 0x1fc], 0
push 0
lea ecx, [ebp - 0x2cc]
call fcn.10025d6c
mov ecx, dword [ebp - 0x1fc]
cmp ecx, dword [eax]
jl 0x100568ae
mov dword [ebp - 0x204], 1
jmp 0x100568b5
and dword [ebp - 0x204], 0
push 0
lea ecx, [ebp - 0x464]
call fcn.10025d6c
mov ecx, dword [ebp - 0x204]
imul ecx, dword [eax]
cmp ecx, dword [ebp - 0x31c]
jle 0x100568df
mov dword [ebp - 0x20c], 1
jmp 0x100568e6
and dword [ebp - 0x20c], 0
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 0
mov dword [ebp - 0x324], 0x27e80a7c
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x464]
call fcn.10025d50
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x2cc]
call fcn.10025d50
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0xc8]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x2c], eax
jne 0x10056965
mov eax, dword [ebp - 0x2c]
movzx eax, byte [ebp + eax - 0xc8]
inc eax
mov dword [ebp - 0xec], eax
mov eax, dword [ebp - 0x2c]
movzx eax, byte [ebp + eax - 0xc8]
mov ecx, dword [ebp - 0x2c]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x2c], eax
jmp 0x1005661a
mov dword [ebp - 0x18], 0x7597a61e
mov dword [ebp - 0x124], 0x43cc
mov byte [ebp - 0x4c], 0
push 1
push 0x3ef0
lea eax, [ebp - 0x4c]
push eax
push 0x52b0
push 1
push 0x6ae5
push 0x7aca
call fcn.1004391c
add esp, 0x1c
mov eax, 0x753589fe
test eax, eax
je 0x100569be
cmp dword [ebp - 0x18], 0
je 0x100569be
or eax, 0xffffffff
je 0x100569be
mov dword [ebp - 0x21c], 1
jmp 0x100569c5
and dword [ebp - 0x21c], 0
mov eax, dword [ebp - 0x21c]
add eax, 0xb051
cmp eax, dword [ebp - 0x18]
jl 0x100569e1
mov dword [ebp - 0x32c], 1
jmp 0x100569e8
and dword [ebp - 0x32c], 0
mov eax, dword [ebp - 0x18]
imul ecx, dword [ebp - 0x18], 0x2aff
lea eax, [eax + ecx + 0x4909a187]
imul eax, dword [ebp - 0x18]
cmp eax, 6
je 0x10056a14
cmp dword [ebp - 0x18], 0
je 0x10056a14
mov dword [ebp - 0x224], 1
jmp 0x10056a1b
and dword [ebp - 0x224], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x224], eax
jg 0x10056a32
mov dword [ebp - 0x22c], 1
jmp 0x10056a39
and dword [ebp - 0x22c], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x22c], eax
jge 0x10056a50
mov dword [ebp - 0x234], 1
jmp 0x10056a57
and dword [ebp - 0x234], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x234], eax
jg 0x10056a74
cmp dword [ebp - 0x18], 0
je 0x10056a74
mov dword [ebp - 0x23c], 1
jmp 0x10056a7b
and dword [ebp - 0x23c], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x23c], eax
jne 0x10056a92
mov dword [ebp - 0x334], 1
jmp 0x10056a99
and dword [ebp - 0x334], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x590], eax
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0x514], eax
cmp dword [ebp - 0x18], 0
je 0x10056b64
push 1
lea ecx, [ebp - 0x47c]
call fcn.10025cee
mov byte [ebp - 4], 0x11
push 0x6309
lea eax, [ebp - 0x578]
push eax
push 1
push 0x487
push 0x3ab1
lea eax, [ebp - 0x47c]
push eax
push 1
push 0xffb
push 0x1347
push 0x1f6b
push 0x6a2
push 0x3dc2
push 0x4887
push 0x3eda
call fcn.10043a20
add esp, 0x38
mov dword [ebp - 0x18], 0
jmp 0x10056b25
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0x34
je 0x10056b53
lea eax, [ebp - 0x47c]
push eax
push 0
push 0x2437
push 0x145e
push 1
lea eax, [ebp - 0x124]
push eax
push 1
call fcn.10043f0f
add esp, 0x1c
jmp 0x10056b1e
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x47c]
call fcn.10025d50
jmp 0x10056b86
push 0x34c9
push 0
push 0x4fac
push 1
push 0x66bb
push 0x557f
push 1
call fcn.10041bbb
add esp, 0x1c
mov eax, dword [ebp - 0x2c]
movzx eax, byte [ebp + eax - 0xc7]
mov ecx, dword [ebp - 0x2c]
sub ecx, dword [ebp - 0xec]
movzx ecx, byte [ebp + ecx - 0xca]
movzx ecx, word [ebp + ecx*2 - 0x4c0]
or eax, ecx
mov ecx, dword [ebp - 0x2c]
movzx ecx, byte [ebp + ecx - 0xc7]
mov edx, dword [ebp - 0x2c]
sub edx, dword [ebp - 0xec]
movzx edx, byte [ebp + edx - 0xca]
movzx edx, word [ebp + edx*2 - 0x4c0]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x2c]
movzx ecx, byte [ebp + ecx - 0xc8]
mov word [ebp + ecx*2 - 0x4c0], ax
push 0x3422
push 1
lea eax, [ebp - 0xec]
push eax
push 0x7a11
push 1
push 0x504f
push 1
call fcn.10043f0f
add esp, 0x1c
jmp 0x1005661a
mov dword [ebp - 0x20], 0x7597a61e
mov dword [ebp - 0x274], 0x43cc
push 0x1ea
push 1
push 0
call fcn.10042301
add esp, 0xc
mov eax, 0x753589fe
test eax, eax
je 0x10056c52
cmp dword [ebp - 0x20], 0
je 0x10056c52
or eax, 0xffffffff
je 0x10056c52
mov dword [ebp - 0x24c], 1
jmp 0x10056c59
and dword [ebp - 0x24c], 0
mov eax, dword [ebp - 0x24c]
add eax, 0xb051
cmp eax, dword [ebp - 0x20]
jl 0x10056c75
mov dword [ebp - 0x33c], 1
jmp 0x10056c7c
and dword [ebp - 0x33c], 0
mov eax, dword [ebp - 0x20]
imul ecx, dword [ebp - 0x20], 0x2aff
lea eax, [eax + ecx + 0x4909a187]
imul eax, dword [ebp - 0x20]
cmp eax, 6
je 0x10056ca8
cmp dword [ebp - 0x20], 0
je 0x10056ca8
mov dword [ebp - 0x254], 1
jmp 0x10056caf
and dword [ebp - 0x254], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x254], eax
jg 0x10056cc6
mov dword [ebp - 0x25c], 1
jmp 0x10056ccd
and dword [ebp - 0x25c], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x25c], eax
jge 0x10056ce4
mov dword [ebp - 0x264], 1
jmp 0x10056ceb
and dword [ebp - 0x264], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x264], eax
jg 0x10056d08
cmp dword [ebp - 0x20], 0
je 0x10056d08
mov dword [ebp - 0x26c], 1
jmp 0x10056d0f
and dword [ebp - 0x26c], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x26c], eax
jne 0x10056d26
mov dword [ebp - 0x344], 1
jmp 0x10056d2d
and dword [ebp - 0x344], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x51c], eax
mov eax, dword [ebp - 0x274]
mov dword [ebp - 0x594], eax
cmp dword [ebp - 0x20], 0
je 0x10056dd3
push 1
lea ecx, [ebp - 0x440]
call fcn.10025cee
mov byte [ebp - 4], 0x12
mov dword [ebp - 0xfc], 0
jmp 0x10056d76
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 1
jge 0x10056d95
push dword [ebp - 0xfc]
lea ecx, [ebp - 0x440]
call fcn.10025d6c
and dword [eax], 0
jmp 0x10056d69
push 0x1aa9
push 1
lea eax, [ebp - 0x20]
push eax
push 0x79c
lea eax, [ebp - 0x440]
push eax
push 0x8c
push 1
lea eax, [ebp - 0x274]
push eax
call fcn.1004427d
add esp, 0x20
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x440]
call fcn.10025d50
jmp 0x10056e0b
mov byte [ebp - 0x49], 0
movzx eax, byte [ebp - 0x49]
test eax, eax
je 0x10056e0b
push 0x7b6f
push 0x1b67
push 0x3680
push 0xd4c
push 0x7cf0
push 0x2212
push 0
push 1
push 1
call fcn.10054670
add esp, 0x24
push 2
pop eax
imul eax, eax, 0xc
xor ecx, ecx
mov word [ebp + eax - 0x4c0], cx
mov dword [ebp - 0x34c], 5
push 1
push 0x4b84
lea eax, [ebp - 0x34c]
push eax
push 0x3f6b
push 0x2b54
push 1
call fcn.100443f4
add esp, 0x18
lea eax, [ebp - 0x4c0]
push eax
lea ecx, [ebp - 0x610]
call fcn.10057a02
mov dword [ebp - 0x354], eax
mov eax, dword [ebp - 0x354]
mov dword [ebp - 0x35c], eax
mov byte [ebp - 4], 0x13
push dword [ebp - 0x35c]
call fcn.1003fd49
pop ecx
mov dword [ebp - 0x27c], eax
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x610]
call fcn.10037851
and dword [ebp - 0xf4], 0
jmp 0x10056ea6
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0xd
jae 0x10056ec1
xor eax, eax
mov ecx, dword [ebp - 0xf4]
mov word [ebp + ecx*2 - 0x4c0], ax
jmp 0x10056e99
cmp dword [ebp - 0x27c], 0
je 0x10057132
mov byte [ebp - 0xa8], 0xa
mov byte [ebp - 0xa7], 0x4b
mov byte [ebp - 0xa6], 5
mov byte [ebp - 0xa5], 0x10
mov byte [ebp - 0xa4], 3
mov byte [ebp - 0xa3], 0xd
mov byte [ebp - 0xa2], 6
mov byte [ebp - 0xa1], 6
mov byte [ebp - 0xa0], 0xb
mov byte [ebp - 0x9f], 0x35
mov byte [ebp - 0x9e], 8
mov byte [ebp - 0x9d], 0x36
mov byte [ebp - 0x9c], 7
mov byte [ebp - 0x9b], 0x13
mov byte [ebp - 0x9a], 9
mov byte [ebp - 0x99], 0
mov byte [ebp - 0x98], 1
mov byte [ebp - 0x97], 0x1d
mov byte [ebp - 0x96], 4
mov byte [ebp - 0x95], 0x23
mov byte [ebp - 0x94], 0
mov byte [ebp - 0x93], 0
mov byte [ebp - 0x92], 2
mov byte [ebp - 0x91], 0x93
mov byte [ebp - 0x90], 0x14
mov byte [ebp - 0x8f], 2
mov byte [ebp - 0x8e], 0x2d
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0xa8]
or eax, 0x32
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0xa8]
and ecx, 0x32
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0xa8]
mov byte [ebp + ecx - 0x308], al
mov dword [ebp - 0x28], 2
and dword [ebp - 0xd0], 0
jmp 0x10056fdc
mov eax, dword [ebp - 0x28]
inc eax
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0x1b
jae 0x100570b2
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0xa8]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x28], eax
jne 0x10057026
mov eax, dword [ebp - 0x28]
movzx eax, byte [ebp + eax - 0xa8]
inc eax
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0x28]
movzx eax, byte [ebp + eax - 0xa8]
mov ecx, dword [ebp - 0x28]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x28], eax
jmp 0x10056fd4
mov eax, dword [ebp - 0x28]
movzx eax, byte [ebp + eax - 0xa7]
mov ecx, dword [ebp - 0x28]
sub ecx, dword [ebp - 0xd0]
movzx ecx, byte [ebp + ecx - 0xaa]
movsx ecx, byte [ebp + ecx - 0x308]
or eax, ecx
mov ecx, dword [ebp - 0x28]
movzx ecx, byte [ebp + ecx - 0xa7]
mov edx, dword [ebp - 0x28]
sub edx, dword [ebp - 0xd0]
movzx edx, byte [ebp + edx - 0xaa]
movsx edx, byte [ebp + edx - 0x308]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x28]
movzx ecx, byte [ebp + ecx - 0xa8]
mov byte [ebp + ecx - 0x308], al
lea eax, [ebp - 0xd0]
push eax
push 0x7a8a
push 0x629e
push 0x50ba
push 1
push 0x33f2
push 1
call fcn.1004463b
add esp, 0x1c
jmp 0x10056fd4
xor eax, eax
inc eax
imul eax, eax, 0xc
mov byte [ebp + eax - 0x308], 0
lea eax, [ebp - 0x308]
push eax
lea ecx, [ebp - 0x5ec]
call fcn.1003efdc
mov byte [ebp - 4], 0x14
and dword [ebp - 0xd4], 0
jmp 0x100570ec
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0xd
jae 0x10057105
mov eax, dword [ebp - 0xd4]
mov byte [ebp + eax - 0x308], 0
jmp 0x100570df
push 0
push 0
lea eax, [ebp - 0x5ec]
push eax
push dword [ebp - 0x27c]
call fcn.1004b01e
add esp, 0x10
mov dword [0x10622234], eax
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x5ec]
call fcn.1003791a
cmp dword [0x10622234], 0
je 0x10057150
mov ecx, dword [ebp - 0x284]
call fcn.100378b0
push eax
call dword [0x10622234]
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x60], 2
mov dword [ebp - 0x28c], 9
cmp dword [ebp - 0x60], 0
je 0x1005721d
mov dword [ebp - 0x60], 0
jmp 0x1005717b
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0x1b
jne 0x10057218
push 1
lea ecx, [ebp - 0x3fc]
call fcn.10025cee
mov byte [ebp - 4], 0x15
push 0x6999
lea eax, [ebp - 0x524]
push eax
push 0x34ea
push 1
lea eax, [ebp - 0x3fc]
push eax
push 1
call fcn.100448d1
add esp, 0x18
push 1
push 0
push 0x2606
push 0x6cc3
lea eax, [ebp - 0x3fc]
push eax
lea eax, [ebp - 0x28c]
push eax
call fcn.10042d0f
add esp, 0x18
push 0
lea ecx, [ebp - 0x3fc]
call fcn.10025d6c
cmp dword [eax], 0
je 0x10057204
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x3fc]
call fcn.10025d50
jmp 0x10057174
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x3fc]
call fcn.10025d50
jmp 0x10057174
jmp 0x100572a0
mov dword [ebp - 0xdc], 0
jmp 0x10057236
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 2
jge 0x10057252
mov eax, dword [ebp - 0xdc]
mov dword [ebp + eax*4 - 0x41c], 0xffffffff
jmp 0x10057229
cmp dword [ebp - 0x28c], 0x5047
jg 0x10057286
cmp dword [ebp - 0x60], 0x6f44
jl 0x10057286
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x41c], 0xfff6
jbe 0x10057286
mov dword [ebp - 0x294], 1
jmp 0x1005728d
and dword [ebp - 0x294], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x294]
mov dword [ebp + eax - 0x41c], ecx
push 0x10622360
push 0x5bc2
lea eax, [ebp - 0x29c]
push eax
push 0x1062223e
push 0x42c4
lea eax, [ebp - 0x7c]
push eax
push 1
push 1
call fcn.10044a9a
add esp, 0x20
mov eax, dword [ebp - 0x2a4]
mov ecx, dword [ebp - 0x7c]
mov dword [eax], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x434]
call fcn.10037851
jmp 0x10057325
jmp 0x10057325
lea eax, [ebp + 0xc]
mov dword [ebp - 0x364], eax
mov eax, dword [ebp - 0x364]
movzx eax, byte [eax]
test eax, eax
je 0x1005731d
push 0
push 0x1b79
call dword [sym.imp.USER32.dll_ValidateRect]
jmp 0x10057325
push 0
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret