Function at 0x10045a10
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100709cc
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x6b8
push esi
push edi
push 2
lea ecx, [ebp - 0x51c]
call fcn.1000f401
and dword [ebp - 4], 0
mov dword [ebp - 0x5ec], 0xffffffff
mov dword [ebp - 0x588], 0xfffffffe
mov dword [ebp - 0x478], 3
mov dword [ebp - 0x20], 0
jmp 0x10045a6f
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 4
jge 0x10045a85
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x560], 0xfffffff6
jmp 0x10045a68
lea eax, [ebp - 0x51c]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.10044eeb
pop ecx
pop ecx
mov dword [ebp - 0x20], 0
jmp 0x10045aa7
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x10045abd
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x6b8], 0
jmp 0x10045aa0
call fcn.10044f33
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x560], 0xb
jmp 0x10045aed
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x560]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x560], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x560], 6
je 0x10045ccf
mov dword [ebp - 0x94], 0x7dc4b4e1
mov dword [ebp - 0x568], 0
mov dword [ebp - 0x408], 0xffffffff
mov dword [ebp - 0x56c], 1
mov dword [ebp - 0x574], 0x4d0f4f23
mov dword [ebp - 0x5b4], 0xfff839e0
mov dword [ebp - 0x470], 0xfffffff8
mov dword [ebp - 0x94], 0xfffffffc
jmp 0x10045b5f
mov eax, dword [ebp - 0x94]
dec eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0xfffffff3
jne 0x10045b89
mov dword [ebp - 0x458], 0xfaaaeb9a
lea eax, [ebp - 0x51c]
push eax
lea eax, [ebp - 0x458]
push eax
call fcn.10044f72
pop ecx
pop ecx
jmp 0x10045b52
mov dword [ebp - 0x410], 0x254a
cmp dword [ebp - 0x410], 0x7eb
jge 0x10045c78
lea eax, [ebp - 0x124]
push eax
mov ecx, 0x10661f98
call fcn.10021ab3
push dword [ebp - 0x124]
lea ecx, [ebp - 0x488]
call fcn.1000f401
mov byte [ebp - 4], 1
and dword [ebp - 0x120], 0
jmp 0x10045bdf
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
mov eax, dword [ebp - 0x120]
cmp eax, dword [ebp - 0x124]
jge 0x10045c0b
push dword [ebp - 0x120]
lea ecx, [ebp - 0x488]
call fcn.1000f48a
push eax
mov ecx, 0x10661f98
call fcn.10021ab3
jmp 0x10045bd2
lea eax, [ebp - 0x5bc]
push eax
lea ecx, [ebp - 0x488]
call fcn.1000f5ed
push dword [eax]
lea eax, [ebp - 0x5c4]
push eax
lea ecx, [ebp - 0x488]
call fcn.1000f59b
push dword [eax]
call fcn.10012087
pop ecx
pop ecx
push fcn.10011f68
mov eax, dword [ebp - 0x124]
cdq
sub eax, edx
sar eax, 1
push eax
lea ecx, [ebp - 0x488]
call fcn.1000f48a
push dword [eax]
mov ecx, 0x10661e78
call fcn.1000f0f4
mov ecx, eax
call fcn.1000f0e8
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x488]
call fcn.1000f485
push 1
push 0x5a0d
push 0
push 0x50fa
lea eax, [ebp - 0x470]
push eax
push 1
push 0x1ab9
lea eax, [ebp - 0x478]
push eax
push 0x71fa
push 0x214b
push 0x6767
push 0x4206
lea eax, [ebp - 0x94]
push eax
push 0x2df5
lea eax, [ebp - 0x408]
push eax
call fcn.10041c00
add esp, 0x3c
jmp 0x10045ad4
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x51c]
call fcn.1000f485
and dword [ebp - 0x34], 0
push 1
push 0x5a48
push 0x1fc9
push 1
push 0x3e97
push 0x2123
push 0x7834
call fcn.1003f15c
add esp, 0x1c
mov dword [ebp - 0x1c], 1
mov dword [ebp - 0x40c], 0x9dbe4fcd
mov dword [ebp - 0x36c], 0xffffffff
mov dword [ebp - 0x430], 3
mov dword [ebp - 0x374], 0xd4f95201
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x5cc], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x5d4], eax
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], eax
jne 0x10045d5c
mov dword [ebp - 0x2a0], 1
jmp 0x10045d63
and dword [ebp - 0x2a0], 0
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x2a0]
test eax, eax
je 0x10045d83
cmp dword [ebp - 0x1c], 0
je 0x10045d83
mov dword [ebp - 0x350], 1
jmp 0x10045d8a
and dword [ebp - 0x350], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x5dc], eax
cmp dword [ebp - 0x1c], 0x7bc3
jle 0x10045da8
mov dword [ebp - 0x338], 1
jmp 0x10045daf
and dword [ebp - 0x338], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x338], eax
jle 0x10045dc6
mov dword [ebp - 0x340], 1
jmp 0x10045dcd
and dword [ebp - 0x340], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x340], eax
jg 0x10045de4
mov dword [ebp - 0x354], 1
jmp 0x10045deb
and dword [ebp - 0x354], 0
cmp dword [ebp - 0x1c], 0x7d92
je 0x10045e00
mov dword [ebp - 0x330], 1
jmp 0x10045e07
and dword [ebp - 0x330], 0
mov eax, dword [ebp - 0x330]
neg eax
cmp eax, dword [ebp - 0x1c]
jge 0x10045e20
mov dword [ebp - 0x2cc], 1
jmp 0x10045e27
and dword [ebp - 0x2cc], 0
cmp dword [ebp - 0x2cc], 1
jl 0x10045e3c
mov dword [ebp - 0x174], 1
jmp 0x10045e43
and dword [ebp - 0x174], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x174], eax
jne 0x10045ebb
mov dword [ebp - 0x35c], 7
mov dword [ebp - 0x438], 0x28f0bd90
mov dword [ebp - 0x404], 9
push 0x176
push 1
push 0x6782
push 0xa26
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x404]
push eax
push 0x7904
lea eax, [ebp - 0x35c]
push eax
push 0x4b59
push 0x670d
push 1
lea eax, [ebp - 0x438]
push eax
push 0x46dd
push 1
call fcn.1003f47f
add esp, 0x38
jmp 0x10045f3f
mov dword [ebp - 0x364], 0xffffffff
mov dword [ebp - 0x5e4], 0
mov dword [ebp - 0xac], 0
jmp 0x10045ee8
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 2
jge 0x10045f04
mov eax, dword [ebp - 0xac]
mov dword [ebp + eax*4 - 0x67c], 0x5aa1ede5
jmp 0x10045edb
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x364]
push eax
lea eax, [ebp - 0x40c]
push eax
lea eax, [ebp - 0x36c]
push eax
lea eax, [ebp - 0x430]
push eax
call fcn.10044fd1
add esp, 0x14
push 1
lea eax, [ebp - 0x374]
push eax
push 1
call fcn.1003f71d
add esp, 0xc
mov dword [ebp - 0x44], 0xc204e2db
mov dword [ebp - 0x74], 0x74952f34
mov dword [ebp - 0x184], 0xe45bbbde
push 3
lea ecx, [ebp - 0x4bc]
call fcn.1000f401
mov dword [ebp - 4], 2
mov dword [ebp - 0x1bc], 0xaeb8efb6
mov dword [ebp - 0x344], 0
push 1
lea ecx, [ebp - 0x534]
call fcn.1000f401
mov byte [ebp - 4], 3
mov dword [ebp - 0x39c], 0
mov dword [ebp - 0x564], 0x74354af3
lea eax, [ebp - 0x4bc]
push eax
lea eax, [ebp - 0x414]
push eax
call fcn.10045096
pop ecx
pop ecx
lea eax, [ebp - 0x534]
push eax
lea eax, [ebp - 0x414]
push eax
call fcn.100450de
pop ecx
pop ecx
mov dword [ebp - 0x44], 0xa
jmp 0x10045fde
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0x1c
jne 0x100465b1
mov dword [ebp - 0x28], 0xb143e95a
mov dword [ebp - 0xf0], 0
mov dword [ebp - 0x3a4], 0xfffffff6
mov dword [ebp - 0xe8], 0
jmp 0x1004601c
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 2
jge 0x10046038
mov eax, dword [ebp - 0xe8]
mov dword [ebp + eax*4 - 0x41c], 0x389f
jmp 0x1004600f
call fcn.10045126
cmp dword [ebp - 0x28], 0
jne 0x100460bb
mov dword [ebp - 0x74], 0xffff
cmp dword [ebp - 0x74], 0
je 0x10046062
cmp dword [ebp - 0x74], 0
je 0x10046062
mov dword [ebp - 0x25c], 1
jmp 0x10046069
and dword [ebp - 0x25c], 0
cmp dword [ebp - 0x25c], 0x1e01
jg 0x10046081
mov dword [ebp - 0x17c], 1
jmp 0x10046088
and dword [ebp - 0x17c], 0
mov eax, dword [ebp - 0x44]
add eax, dword [ebp - 0x17c]
cmp eax, dword [ebp - 0x28]
jne 0x100460a2
mov dword [ebp - 0x324], 1
jmp 0x100460a9
and dword [ebp - 0x324], 0
cmp dword [ebp - 0x324], 3
je 0x100460bb
and dword [ebp - 0x37c], 0
jmp 0x100460c5
mov dword [ebp - 0x37c], 1
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x5f4], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x184], eax
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x5fc], eax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x604], eax
cmp dword [ebp - 0x28], 0x29bf3901
jge 0x1004643b
mov dword [ebp - 0x264], 1
mov dword [ebp - 0x38c], 0x8317d239
mov dword [ebp - 0x28], 0xffffffea
jmp 0x1004611d
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xd
jne 0x10046436
mov dword [ebp - 0x26c], 0
push 1
lea ecx, [ebp - 0x504]
call fcn.1000f401
mov byte [ebp - 4], 4
mov dword [ebp - 0x448], 0x177c
cmp dword [ebp - 0x448], 0xa6d
jge 0x100462c1
lea eax, [ebp - 0x150]
push eax
push 0x1000817c
call fcn.10055adb
pop ecx
pop ecx
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x384], eax
mov eax, dword [ebp - 0x150]
dec eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x384], 0
je 0x100462c1
lea eax, [ebp - 0x8c]
push eax
push 0x1000817c
call fcn.10055adb
pop ecx
pop ecx
push dword [ebp - 0x8c]
lea ecx, [ebp - 0x498]
call fcn.1000f401
mov byte [ebp - 4], 5
and dword [ebp - 0xb8], 0
jmp 0x100461d3
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
mov eax, dword [ebp - 0xb8]
cmp eax, dword [ebp - 0x8c]
jge 0x10046201
push dword [ebp - 0xb8]
lea ecx, [ebp - 0x498]
call fcn.1000f48a
push eax
push 0x1000817c
call fcn.10055adb
pop ecx
pop ecx
jmp 0x100461c6
or dword [ebp - 0x158], 0xffffffff
mov dword [ebp - 0xa8], 1
jmp 0x10046221
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 0x8c]
dec eax
cmp dword [ebp - 0xa8], eax
jge 0x1004627e
mov eax, dword [ebp - 0x8c]
dec eax
push eax
lea ecx, [ebp - 0x498]
call fcn.1000f48a
mov esi, eax
push 0
lea ecx, [ebp - 0x498]
call fcn.1000f48a
mov edi, eax
push dword [ebp - 0xa8]
lea ecx, [ebp - 0x498]
call fcn.1000f48a
mov ecx, dword [edi]
add ecx, dword [eax]
cmp dword [esi], ecx
jl 0x1004627c
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0x158], eax
jmp 0x1004627e
jmp 0x10046214
cmp dword [ebp - 0x158], 0
jle 0x100462a2
push dword [ebp - 0x8c]
push dword [ebp - 0x158]
push 0x1000897c
call fcn.10055d0f
add esp, 0xc
jmp 0x100462ad
push 0x100081f0
call fcn.10055ec6
pop ecx
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x498]
call fcn.1000f485
jmp 0x1004616f
lea eax, [ebp - 0x504]
push eax
lea eax, [ebp - 0x60c]
push eax
call fcn.10045151
pop ecx
pop ecx
mov dword [ebp - 0x264], 0xfffffff6
cmp dword [ebp - 0x264], 1
jb 0x100462fb
mov eax, 0x30bc
test eax, eax
jne 0x100462fb
and dword [ebp - 0x18c], 0
jmp 0x10046305
mov dword [ebp - 0x18c], 1
mov eax, dword [ebp - 0x26c]
cmp eax, dword [ebp - 0x18c]
jg 0x1004631f
mov dword [ebp - 0x420], 1
jmp 0x10046326
and dword [ebp - 0x420], 0
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x614], eax
mov eax, 0xb7215766
cmp eax, 0xb25631cd
ja 0x10046347
mov dword [ebp - 0x2d4], 1
jmp 0x1004634e
and dword [ebp - 0x2d4], 0
cmp dword [ebp - 0x2d4], 0xc6dc
jge 0x10046366
mov dword [ebp - 0x194], 1
jmp 0x1004636d
and dword [ebp - 0x194], 0
mov eax, dword [ebp - 0x74]
cmp eax, dword [ebp - 0x194]
jge 0x10046384
mov dword [ebp - 0x19c], 1
jmp 0x1004638b
and dword [ebp - 0x19c], 0
mov eax, dword [ebp - 0x26c]
imul eax, dword [ebp - 0x19c]
push 4
pop ecx
shl ecx, 0
imul eax, dword [ebp + ecx - 0x41c]
cmp eax, 0x2570d978
jg 0x100463b9
mov dword [ebp - 0x30c], 1
jmp 0x100463c0
and dword [ebp - 0x30c], 0
cmp dword [ebp - 0x30c], 9
jl 0x100463d5
mov dword [ebp - 0x1a4], 1
jmp 0x100463dc
and dword [ebp - 0x1a4], 0
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0xf0], eax
mov esi, dword [ebp - 0xf0]
push 0
lea ecx, [ebp - 0x504]
call fcn.1000f48a
mov dword [eax], esi
cmp dword [ebp - 0x38c], 1
je 0x10046412
mov dword [ebp - 0x274], 1
jmp 0x10046419
and dword [ebp - 0x274], 0
mov eax, dword [ebp - 0x274]
mov dword [ebp - 0x74], eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x504]
call fcn.1000f485
jmp 0x10046116
jmp 0x100465ac
mov dword [ebp - 0x394], 0x8a1d
mov dword [ebp - 0x61c], 0x5f6f594a
mov dword [ebp - 0x12c], 0xfffffffd
mov dword [ebp - 0x42c], 0xfffffffb
push 1
lea ecx, [ebp - 0x4bc]
call fcn.1000f48a
mov dword [eax], 1
cmp dword [ebp - 0x1bc], 1
jg 0x1004648b
mov dword [ebp - 0x1ac], 1
jmp 0x10046492
and dword [ebp - 0x1ac], 0
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x1ac], eax
jne 0x100464a9
mov dword [ebp - 0x2dc], 1
jmp 0x100464b0
and dword [ebp - 0x2dc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x41c]
add eax, dword [ebp - 0x2dc]
jne 0x100464d1
mov dword [ebp - 0x1b4], 1
jmp 0x100464d8
and dword [ebp - 0x1b4], 0
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x12c]
imul eax, dword [ebp - 0x44]
imul eax, dword [ebp - 0xf0]
cmp eax, 0x5e39
jne 0x10046508
mov dword [ebp - 0x27c], 1
jmp 0x1004650f
and dword [ebp - 0x27c], 0
cmp dword [ebp - 0x27c], 7
jbe 0x10046524
mov dword [ebp - 0x450], 1
jmp 0x1004652b
and dword [ebp - 0x450], 0
mov eax, dword [ebp - 0x394]
mov dword [ebp - 0x624], eax
cmp dword [ebp - 0x1bc], 0x99d6db78
jne 0x1004654f
mov dword [ebp - 0x334], 1
jmp 0x10046556
and dword [ebp - 0x334], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x334]
sub ecx, dword [ebp + eax - 0x41c]
mov dword [ebp - 0x42c], ecx
lea eax, [ebp - 0x39c]
push eax
lea eax, [ebp - 0x534]
push eax
lea eax, [ebp - 0xf0]
push eax
lea eax, [ebp - 0x12c]
push eax
lea eax, [ebp - 0x344]
push eax
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x3a4]
push eax
lea eax, [ebp - 0x4bc]
push eax
call fcn.10045199
add esp, 0x20
jmp 0x10045fd7
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x534]
call fcn.1000f485
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4bc]
call fcn.1000f485
lea eax, [ebp - 0x128]
push eax
lea eax, [ebp + 8]
push eax
push 1
push 1
call fcn.1003f7b1
add esp, 0x10
mov eax, dword [ebp - 0x128]
movzx eax, word [eax]
cmp eax, 0x5a4d
je 0x100469b7
mov dword [ebp - 0x40], 0x3152c58f
mov dword [ebp - 0x48], 0
mov dword [ebp - 0xd0], 0xfadf6285
mov dword [ebp - 0x294], 0xcc16
mov dword [ebp - 0x314], 0xf2b5d06d
mov dword [ebp - 0x1f4], 0x49b8ae05
mov dword [ebp - 0x3bc], 0xffffffff
call fcn.10045265
cmp dword [ebp - 0x40], 0xffffffff
jg 0x10046651
mov dword [ebp - 0x468], 1
jmp 0x10046658
and dword [ebp - 0x468], 0
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x62c], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x634], eax
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x40], eax
jl 0x1004667e
mov dword [ebp - 0x1c4], 1
jmp 0x10046685
and dword [ebp - 0x1c4], 0
mov eax, dword [ebp - 0x1c4]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x66c], eax
xor eax, eax
cmp eax, 0xfffffff7
jge 0x100466aa
mov dword [ebp - 0x284], 1
jmp 0x100466b1
and dword [ebp - 0x284], 0
mov eax, dword [ebp - 0xd0]
cmp dword [ebp - 0x284], eax
jne 0x10046977
mov dword [ebp - 0x3b4], 0xf54ceaa9
mov dword [ebp - 0xc0], 0
jmp 0x100466e6
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 1
jge 0x10046702
mov eax, dword [ebp - 0xc0]
mov dword [ebp + eax*4 - 0xc8], 0x7092ff82
jmp 0x100466d9
mov dword [ebp - 0x48], 0
jmp 0x10046712
mov eax, dword [ebp - 0x48]
dec eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0xfffffff9
jge 0x10046975
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0x100], 6
mov dword [ebp - 0x40], 0
jmp 0x10046740
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0x2a
jge 0x10046774
mov byte [ebp - 0x61], 0
lea eax, [ebp - 0x61]
push eax
push 0x3a6f
push 0x63db
push 1
push 1
call fcn.1003fa4d
add esp, 0x14
mov byte [ebp - 0x62], 0
lea eax, [ebp - 0x62]
push eax
call fcn.100452a4
pop ecx
jmp 0x10046739
cmp dword [ebp - 0x48], 5
je 0x10046786
mov dword [ebp - 0x1cc], 1
jmp 0x1004678d
and dword [ebp - 0x1cc], 0
mov eax, dword [ebp - 0x294]
cmp dword [ebp - 0x1cc], eax
jle 0x100467a7
mov dword [ebp - 0x2e4], 1
jmp 0x100467ae
and dword [ebp - 0x2e4], 0
imul eax, dword [ebp - 0x2e4], 0x6fe1
test eax, eax
jne 0x100467c8
mov dword [ebp - 0x1d4], 1
jmp 0x100467cf
and dword [ebp - 0x1d4], 0
mov eax, dword [ebp - 0xf8]
cmp dword [ebp - 0x1d4], eax
jge 0x100467e9
mov dword [ebp - 0x3ac], 1
jmp 0x100467f0
and dword [ebp - 0x3ac], 0
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x674], eax
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x628], eax
mov eax, dword [ebp - 0xf8]
sub eax, dword [ebp - 0xd0]
cmp eax, 1
jg 0x10046825
mov dword [ebp - 0x28c], 1
jmp 0x1004682c
and dword [ebp - 0x28c], 0
mov eax, dword [ebp - 0xf8]
cmp dword [ebp - 0x28c], eax
jge 0x10046846
mov dword [ebp - 0x1dc], 1
jmp 0x1004684d
and dword [ebp - 0x1dc], 0
mov eax, dword [ebp - 0x1dc]
mov dword [ebp - 0x314], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc8]
cmp dword [ebp - 0x314], eax
jl 0x1004687a
mov dword [ebp - 0x1e4], 1
jmp 0x10046881
and dword [ebp - 0x1e4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1e4]
sub ecx, dword [ebp + eax - 0xc8]
cmp ecx, dword [ebp - 0x294]
jne 0x100468a8
mov dword [ebp - 0x1ec], 1
jmp 0x100468af
and dword [ebp - 0x1ec], 0
imul eax, dword [ebp - 0x1ec], 0x4465
cmp eax, dword [ebp - 0xd0]
je 0x100468cd
mov dword [ebp - 0x2ec], 1
jmp 0x100468d4
and dword [ebp - 0x2ec], 0
mov eax, dword [ebp - 0x2ec]
mov dword [ebp - 0x1f4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc8]
cmp dword [ebp - 0x1f4], eax
jne 0x1004690a
cmp dword [ebp - 0x100], 0
je 0x1004690a
mov dword [ebp - 0x440], 1
jmp 0x10046911
and dword [ebp - 0x440], 0
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x58c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc8], 0xb28
jne 0x1004693c
mov dword [ebp - 0x29c], 1
jmp 0x10046943
and dword [ebp - 0x29c], 0
mov eax, dword [ebp - 0x100]
cmp dword [ebp - 0x29c], eax
jg 0x1004695d
mov dword [ebp - 0x1fc], 1
jmp 0x10046964
and dword [ebp - 0x1fc], 0
mov eax, dword [ebp - 0x1fc]
mov dword [ebp - 0x3b4], eax
jmp 0x1004670b
jmp 0x100469b0
mov dword [ebp - 0x43c], 0x7fba349a
lea eax, [ebp - 0x48]
push eax
push 0x713e
push 1
lea eax, [ebp - 0x43c]
push eax
push 0x25b2
lea eax, [ebp - 0xd0]
push eax
push 1
lea eax, [ebp - 0x3bc]
push eax
call fcn.1003fd42
add esp, 0x20
xor eax, eax
jmp 0x10048aef
push 0x5a91
lea eax, [ebp - 0x84]
push eax
push 1
push 0
push 0x7bfa
lea eax, [ebp - 0x128]
push eax
lea eax, [ebp + 8]
push eax
call fcn.10043743
add esp, 0x1c
mov dword [ebp - 0x14], 0xffffffff
push 1
lea ecx, [ebp - 0x464]
call fcn.1000f401
mov dword [ebp - 4], 6
mov dword [ebp - 0x9c], 0xdf800085
mov dword [ebp - 0x48c], 0xffff
push 0x63d3
push 0
push 0
push 0x2218
lea eax, [ebp - 0x464]
push eax
lea eax, [ebp - 0x570]
push eax
push 1
push 0x7cb
call fcn.10044504
add esp, 0x20
cmp dword [ebp - 0x14], 0
je 0x10046a86
mov dword [ebp - 0x108], 0
jmp 0x10046a58
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 2
jge 0x10046a74
mov eax, dword [ebp - 0x108]
mov dword [ebp + eax*4 - 0x580], 0xb57e8b72
jmp 0x10046a4b
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x580]
mov dword [ebp - 0x14], eax
jmp 0x10046a8b
call fcn.100452cb
mov eax, 0xb8ae505b
test eax, eax
je 0x10046c72
cmp dword [ebp - 0x14], 0
jne 0x10046c11
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x594], eax
mov eax, 0xe5d5ec7e
test eax, eax
jne 0x10046ac3
cmp dword [ebp - 0x14], 0
jne 0x10046ac3
and dword [ebp - 0x144], 0
jmp 0x10046acd
mov dword [ebp - 0x144], 1
push 0
lea ecx, [ebp - 0x464]
call fcn.1000f48a
mov ecx, dword [ebp - 0x144]
mov dword [eax], ecx
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x144], eax
je 0x10046af9
mov dword [ebp - 0x32c], 1
jmp 0x10046b00
and dword [ebp - 0x32c], 0
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x32c]
add eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x14]
jg 0x10046b1d
mov dword [ebp - 0x204], 1
jmp 0x10046b24
and dword [ebp - 0x204], 0
cmp dword [ebp - 0x204], 0x892657cf
jae 0x10046b3c
mov dword [ebp - 0x2a4], 1
jmp 0x10046b43
and dword [ebp - 0x2a4], 0
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x2a4]
cmp eax, dword [ebp - 0x14]
je 0x10046b5d
mov dword [ebp - 0x20c], 1
jmp 0x10046b64
and dword [ebp - 0x20c], 0
cmp dword [ebp - 0x20c], 0xfffffff8
jbe 0x10046b79
mov dword [ebp - 0x2f4], 1
jmp 0x10046b80
and dword [ebp - 0x2f4], 0
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x2f4]
cmp eax, dword [ebp - 0x14]
jle 0x10046b9a
mov dword [ebp - 0x214], 1
jmp 0x10046ba1
and dword [ebp - 0x214], 0
cmp dword [ebp - 0x214], 1
jl 0x10046bc5
push 0
lea ecx, [ebp - 0x464]
call fcn.1000f48a
cmp dword [eax], 0
jne 0x10046bc5
and dword [ebp - 0x2ac], 0
jmp 0x10046bcf
mov dword [ebp - 0x2ac], 1
cmp dword [ebp - 0x2ac], 2
jne 0x10046be4
mov dword [ebp - 0x21c], 1
jmp 0x10046beb
and dword [ebp - 0x21c], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x21c], eax
jl 0x10046c11
push 0
lea ecx, [ebp - 0x464]
call fcn.1000f48a
cmp dword [eax], 0
jne 0x10046c11
and dword [ebp - 0x31c], 0
jmp 0x10046c1b
mov dword [ebp - 0x31c], 1
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x31c]
je 0x10046c32
mov dword [ebp - 0x224], 1
jmp 0x10046c39
and dword [ebp - 0x224], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x224], eax
jge 0x10046c50
mov dword [ebp - 0x2b4], 1
jmp 0x10046c57
and dword [ebp - 0x2b4], 0
mov eax, dword [ebp - 0x2b4]
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x10046c72
mov dword [ebp - 0x22c], 1
jmp 0x10046c79
and dword [ebp - 0x22c], 0
cmp dword [ebp - 0x22c], 2
jne 0x10046c8e
mov dword [ebp - 0x2fc], 1
jmp 0x10046c95
and dword [ebp - 0x2fc], 0
mov eax, dword [ebp - 0x2fc]
add eax, 0x20eeb498
cmp eax, 0x58a8
jge 0x10046cb3
mov dword [ebp - 0x234], 1
jmp 0x10046cba
and dword [ebp - 0x234], 0
cmp dword [ebp - 0x234], 0
jg 0x10046ccf
mov dword [ebp - 0x2bc], 1
jmp 0x10046cd6
and dword [ebp - 0x2bc], 0
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0x2bc]
add eax, dword [ebp - 0x9c]
cmp eax, dword [ebp - 0x9c]
jg 0x10046cfc
mov dword [ebp - 0x23c], 1
jmp 0x10046d03
and dword [ebp - 0x23c], 0
mov eax, dword [ebp - 0x48c]
cmp dword [ebp - 0x23c], eax
jne 0x10046d23
cmp dword [ebp - 0x9c], 0
jne 0x10046d23
and dword [ebp - 0x33c], 0
jmp 0x10046d2d
mov dword [ebp - 0x33c], 1
mov eax, dword [ebp - 0x33c]
mov dword [ebp - 0x9c], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x464]
call fcn.1000f485
mov eax, dword [ebp - 0x84]
cmp dword [eax], 0x4550
je 0x10046fdb
push 2
lea ecx, [ebp - 0x644]
call fcn.1000f401
mov dword [ebp - 4], 7
mov dword [ebp - 0x3c4], 0xffffffff
push 0x363b
push 0
push 0x259e
push 1
push 0x31fa
push 0x13cb
push 0x6aba
lea eax, [ebp - 0x578]
push eax
lea eax, [ebp - 0x644]
push eax
push 0x1bb0
push 0x9da
push 0x41a
push 0x3abe
call fcn.10043ec4
add esp, 0x34
lea eax, [ebp - 0x3c4]
push eax
call fcn.100452ec
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x644]
call fcn.1000f485
mov dword [ebp - 0x3cc], 0x647c2c9e
push 2
lea ecx, [ebp - 0x4b0]
call fcn.1000f401
mov dword [ebp - 4], 8
mov dword [ebp - 0x46c], 6
mov dword [ebp - 0x244], 0xb07d0d1d
mov dword [ebp - 0x454], 7
mov dword [ebp - 0x3d4], 0xfff8
mov dword [ebp - 0x44c], 0xae26
mov dword [ebp - 0x3dc], 0
mov dword [ebp - 0x134], 2
mov dword [ebp - 0x154], 1
mov dword [ebp - 0x47c], 6
push 2
lea ecx, [ebp - 0x4ec]
call fcn.1000f401
mov byte [ebp - 4], 9
lea eax, [ebp - 0x4b0]
push eax
push 1
push 0x6610
push 0x1644
push 0x1b29
push 0x7133
push 1
lea eax, [ebp - 0x444]
push eax
push 0x70be
push 1
call fcn.1004053d
add esp, 0x28
lea eax, [ebp - 0x4ec]
push eax
push 1
lea eax, [ebp - 0x444]
push eax
push 1
call fcn.100406bd
add esp, 0x10
lea eax, [ebp - 0x3cc]
push eax
lea eax, [ebp - 0x46c]
push eax
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x3d4]
push eax
lea eax, [ebp - 0x44c]
push eax
lea eax, [ebp - 0x4b0]
push eax
call fcn.10045380
add esp, 0x18
cmp dword [ebp - 0x3dc], 0
jne 0x10046f97
mov eax, dword [ebp - 0x244]
add eax, dword [ebp - 0x134]
cmp dword [ebp - 0x134], eax
jl 0x10046f12
mov dword [ebp - 0x2c4], 1
jmp 0x10046f19
and dword [ebp - 0x2c4], 0
mov eax, dword [ebp - 0x2c4]
mov dword [ebp - 0x154], eax
mov eax, dword [ebp - 0x154]
shl eax, 1
cmp eax, dword [ebp - 0x47c]
jl 0x10046f41
mov dword [ebp - 0x3e4], 1
jmp 0x10046f48
and dword [ebp - 0x3e4], 0
cmp dword [ebp - 0x134], 0x75e7
jne 0x10046f69
cmp dword [ebp - 0x154], 0
je 0x10046f69
mov dword [ebp - 0x24c], 1
jmp 0x10046f70
and dword [ebp - 0x24c], 0
push 0
lea ecx, [ebp - 0x4b0]
call fcn.1000f48a
mov ecx, dword [ebp - 0x24c]
mov dword [eax], ecx
cmp dword [ebp - 0x454], 0
jne 0x10046f97
and dword [ebp - 0x304], 0
jmp 0x10046fa1
mov dword [ebp - 0x304], 1
push 0
lea ecx, [ebp - 0x4ec]
call fcn.1000f48a
mov ecx, dword [ebp - 0x304]
mov dword [eax], ecx
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x4ec]
call fcn.1000f485
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4b0]
call fcn.1000f485
xor eax, eax
jmp 0x10048aef
mov dword [ebp - 0x254], 0x2c03342e
mov dword [ebp - 0x3ec], 6
lea eax, [ebp - 0x254]
push eax
push 1
push 0x6f54
push 1
push 0x3db1
push 0x535d
call fcn.10040773
add esp, 0x18
lea eax, [ebp - 0x3ec]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.100454cf
pop ecx
pop ecx
push 1
push 0x6fe8
push 0xbba
push 0x41c5
push 0x45b4
push 0x8a9
push 1
push 1
lea eax, [ebp - 0xfc]
push eax
lea eax, [ebp - 0x84]
push eax
call fcn.10040a3f
add esp, 0x28
mov dword [ebp - 0x1a8], 0x53d06ce1
mov dword [ebp - 0x170], 0xffffffff
mov dword [ebp - 0x59c], 0x6ccb0362
mov dword [ebp - 0x3fc], 0x439cb61d
mov dword [ebp - 0x14c], 0x5739
mov dword [ebp - 0x160], 0
mov dword [ebp - 0x3f4], 4
mov dword [ebp - 0x1a0], 0x502870b1
mov dword [ebp - 0x434], 0x2ce33a90
push 2
lea ecx, [ebp - 0x654]
call fcn.1000f401
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x3c], 0
jmp 0x100470d9
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 2
jge 0x100470ef
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x4d0], 0x4288a137
jmp 0x100470d2
mov dword [ebp - 0x3c], 0
jmp 0x100470ff
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 2
jge 0x1004711b
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x654]
call fcn.1000f48a
mov dword [eax], 0xe605a420
jmp 0x100470f8
lea eax, [ebp - 0x160]
push eax
call fcn.1001bd35
pop ecx
mov eax, dword [ebp - 0x160]
cmp dword [ebp - 0x14c], eax
jle 0x10047142
mov dword [ebp - 0x474], 1
jmp 0x10047149
and dword [ebp - 0x474], 0
mov eax, dword [ebp - 0x1a8]
mov dword [ebp - 0x170], eax
mov eax, dword [ebp - 0x3f4]
cmp dword [ebp - 0x170], eax
je 0x1004716f
mov dword [ebp - 0x178], 1
jmp 0x10047176
and dword [ebp - 0x178], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x4d0], 0
mov eax, 0xbab0
cmp eax, 7
jle 0x1004719a
mov dword [ebp - 0x180], 1
jmp 0x100471a1
and dword [ebp - 0x180], 0
mov eax, dword [ebp - 0x178]
cmp eax, dword [ebp - 0x180]
jne 0x100471bb
mov dword [ebp - 0x13c], 1
jmp 0x100471c2
and dword [ebp - 0x13c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x13c]
mov dword [ebp + eax - 0x4d0], ecx
cmp dword [ebp - 0x13c], 0
je 0x100471f3
cmp dword [ebp - 0x14c], 0
je 0x100471f3
mov dword [ebp - 0x188], 1
jmp 0x100471fa
and dword [ebp - 0x188], 0
mov eax, dword [ebp - 0x14c]
add eax, dword [ebp - 0x188]
cmp eax, 2
jg 0x10047217
mov dword [ebp - 0x190], 1
jmp 0x1004721e
and dword [ebp - 0x190], 0
cmp dword [ebp - 0x190], 0
jne 0x10047233
mov dword [ebp - 0x198], 1
jmp 0x1004723a
and dword [ebp - 0x198], 0
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0x1a0], eax
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x584], eax
mov eax, dword [ebp - 0x1a8]
mov dword [ebp - 0x5a4], eax
mov eax, 0x452
imul eax, eax, 0xbe8c
cmp eax, dword [ebp - 0x434]
je 0x10047284
push 2
pop eax
test eax, eax
je 0x10047284
mov dword [ebp - 0x1b0], 1
jmp 0x1004728b
and dword [ebp - 0x1b0], 0
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x3fc], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x654]
call fcn.1000f485
cmp dword [ebp - 0xfc], 0
jne 0x1004739b
push 1
lea ecx, [ebp - 0x4f8]
call fcn.1000f401
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x34c], 4
mov dword [ebp - 0x348], 0xb4b5a9ce
push 0x7313
push 0x2eca
push 0x510
push 0x7f18
push 0x2535
push 1
lea eax, [ebp - 0x5ac]
push eax
push 0x6453
push 0x7863
push 0x58fd
push 0x6313
lea eax, [ebp - 0x4f8]
push eax
push 0xf2
push 1
push 0
call fcn.10041802
add esp, 0x3c
mov byte [ebp - 0x63], 0
lea eax, [ebp - 0x63]
push eax
call fcn.10045531
pop ecx
push 0x22c3
push 0x75ed
push 0x4402
push 0x5a02
push 0x2658
push 0x4b22
lea eax, [ebp - 0x34c]
push eax
lea eax, [ebp - 0x4f8]
push eax
push 0x2798
push 1
lea eax, [ebp - 0x348]
push eax
push 1
push 0x3e18
call fcn.1004137f
add esp, 0x34
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4f8]
call fcn.1000f485
call fcn.1004555f
xor eax, eax
jmp 0x10048aef
push 0x14e0
push 1
push 0x6270
push 1
push dword [ebp - 0x128]
lea eax, [ebp - 0x590]
push eax
push dword [ebp - 0x84]
push 0x7e87
push 0x6527
lea eax, [ebp - 0xfc]
push eax
push 0x3d20
push 0x20bf
lea eax, [ebp - 0x34]
push eax
push 0x28cf
push 1
push 0x57c1
call fcn.1003e555
add esp, 0x40
push 1
push 0x171d
push 1
lea eax, [ebp - 0x84]
push eax
push 0x5099
push 1
push 0x5d8c
push 0x1375
lea eax, [ebp + 8]
push eax
push 0x4674
push 0xf11
lea eax, [ebp - 0x34]
push eax
push 0x1b35
push 0x4f77
push 0x22f
call fcn.10041c00
add esp, 0x3c
push 1
lea eax, [ebp - 0xfc]
push eax
push 0x1f12
lea eax, [ebp - 0x200]
push eax
push 0x15d4
push 1
lea eax, [ebp - 0x84]
push eax
push 1
push 0x1839
push 0x3720
call fcn.10041fbe
add esp, 0x28
cmp dword [ebp - 0x200], 0
je 0x100476d9
mov dword [ebp - 0x110], 0xde2167fa
mov dword [ebp - 0xa4], 0xbefcdf11
mov dword [ebp - 0xd8], 0
jmp 0x100474aa
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 4
jge 0x100474c6
mov eax, dword [ebp - 0xd8]
mov dword [ebp + eax*4 - 0x550], 0xffffffff
jmp 0x1004749d
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x550]
mov dword [ebp - 0x5f8], eax
cmp dword [ebp - 0x110], 0xffffffff
jg 0x100474ee
mov dword [ebp - 0x1b8], 1
jmp 0x100474f5
and dword [ebp - 0x1b8], 0
mov eax, dword [ebp - 0x110]
add eax, dword [ebp - 0x1b8]
je 0x1004750c
mov eax, 0xaaf5
test eax, eax
jne 0x1004751e
mov eax, 0x3dc9
test eax, eax
jne 0x1004751e
and dword [ebp - 0x1c0], 0
jmp 0x10047528
mov dword [ebp - 0x1c0], 1
mov eax, dword [ebp - 0x110]
cmp dword [ebp - 0x1c0], eax
jle 0x10047542
mov dword [ebp - 0x1c8], 1
jmp 0x10047549
and dword [ebp - 0x1c8], 0
cmp dword [ebp - 0x1c8], 5
jne 0x1004755e
mov dword [ebp - 0x1d0], 1
jmp 0x10047565
and dword [ebp - 0x1d0], 0
mov eax, dword [ebp - 0xa4]
cmp dword [ebp - 0x1d0], eax
jne 0x1004757f
mov dword [ebp - 0x1e0], 1
jmp 0x10047586
and dword [ebp - 0x1e0], 0
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0x1d8], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x1d8]
mov dword [ebp + eax - 0x550], ecx
mov eax, dword [ebp - 0x1d8]
cmp eax, dword [ebp - 0x1e0]
jge 0x1004763f
mov dword [ebp - 0x130], 0x56df
cmp dword [ebp - 0x130], 0
je 0x1004761e
cmp dword [ebp - 0x130], 3
jae 0x100475de
mov dword [ebp - 0x1e8], 1
jmp 0x100475e5
and dword [ebp - 0x1e8], 0
cmp dword [ebp - 0x1e8], 0x1678b
je 0x100475fd
mov dword [ebp - 0x1f0], 1
jmp 0x10047604
and dword [ebp - 0x1f0], 0
mov eax, dword [ebp - 0x130]
sub eax, dword [ebp - 0x1f0]
je 0x1004761e
mov dword [ebp - 0x1f8], 1
jmp 0x10047625
and dword [ebp - 0x1f8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1f8]
mov dword [ebp + eax - 0x550], ecx
call fcn.1004565d
jmp 0x1004768b
mov dword [ebp - 0x358], 0xce3d978
lea eax, [ebp - 0x358]
push eax
call fcn.1004567e
pop ecx
mov dword [ebp - 0xa4], 0
jmp 0x1004766f
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 3
jg 0x1004768b
mov byte [ebp - 0x57], 0
movzx eax, byte [ebp - 0x57]
test eax, eax
je 0x10047689
call fcn.10045695
jmp 0x10047662
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x550], 0xffffffff
push 0x3319
push dword [ebp - 0x200]
push 0x524e
push 0x7fa
push 0
push 0x7bdb
push 0x4b48
push dword [ebp - 0x34]
push 0x2d68
push 0x136a
push 1
push 0x10e1
call fcn.1003e11c
add esp, 0x30
push dword [ebp - 0x34]
call fcn.1003c6f1
pop ecx
test eax, eax
jne 0x10047d29
mov dword [ebp - 0x24], 2
mov dword [ebp - 0x30], 0xfffffffc
push 2
lea ecx, [ebp - 0x4a4]
call fcn.1000f401
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x138], 0x11bd77df
push 4
lea ecx, [ebp - 0x4c8]
call fcn.1000f401
mov byte [ebp - 4], 0xd
lea eax, [ebp - 0x4a4]
push eax
lea eax, [ebp - 0x360]
push eax
call fcn.100456a0
pop ecx
pop ecx
push 0x1225
push 0x1532
push 1
push 0x5e73
push 1
push 0x271a
lea eax, [ebp - 0x360]
push eax
push 0xaa4
lea eax, [ebp - 0x4c8]
push eax
push 1
push 0x2afa
push 0x3bd1
call fcn.100425e6
add esp, 0x30
cmp dword [ebp - 0x24], 0
jne 0x1004788b
push 1
lea ecx, [ebp - 0x4a4]
call fcn.1000f48a
mov dword [eax], 1
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x24]
je 0x100477af
mov dword [ebp - 0x208], 1
jmp 0x100477b6
and dword [ebp - 0x208], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x208], eax
jne 0x100477cd
mov dword [ebp - 0x210], 1
jmp 0x100477d4
and dword [ebp - 0x210], 0
mov eax, dword [ebp - 0x210]
sub eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x30]
jl 0x100477ee
mov dword [ebp - 0x218], 1
jmp 0x100477f5
and dword [ebp - 0x218], 0
cmp dword [ebp - 0x218], 0xcbc2
je 0x1004780d
mov dword [ebp - 0x368], 1
jmp 0x10047814
and dword [ebp - 0x368], 0
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x598], eax
mov eax, dword [ebp - 0x30]
imul eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x24]
jl 0x10047835
mov dword [ebp - 0x220], 1
jmp 0x1004783c
and dword [ebp - 0x220], 0
cmp dword [ebp - 0x220], 0xffffffff
jge 0x10047851
mov dword [ebp - 0x228], 1
jmp 0x10047858
and dword [ebp - 0x228], 0
cmp dword [ebp - 0x228], 0x583e
jl 0x10047870
mov dword [ebp - 0x230], 1
jmp 0x10047877
and dword [ebp - 0x230], 0
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x230]
jne 0x1004788b
and dword [ebp - 0x238], 0
jmp 0x10047895
mov dword [ebp - 0x238], 1
mov eax, dword [ebp - 0x138]
cmp dword [ebp - 0x238], eax
jg 0x100478af
mov dword [ebp - 0x240], 1
jmp 0x100478b6
and dword [ebp - 0x240], 0
mov eax, dword [ebp - 0x138]
cmp dword [ebp - 0x240], eax
jge 0x100478d0
mov dword [ebp - 0x248], 1
jmp 0x100478d7
and dword [ebp - 0x248], 0
mov eax, dword [ebp - 0x24]
imul eax, dword [ebp - 0x248]
cmp eax, 0x2324
jl 0x100478f4
mov dword [ebp - 0x250], 1
jmp 0x100478fb
and dword [ebp - 0x250], 0
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x250]
jle 0x10047912
mov dword [ebp - 0x258], 1
jmp 0x10047919
and dword [ebp - 0x258], 0
mov eax, dword [ebp - 0x138]
cmp dword [ebp - 0x258], eax
jle 0x10047933
mov dword [ebp - 0x260], 1
jmp 0x1004793a
and dword [ebp - 0x260], 0
cmp dword [ebp - 0x260], 0xd40a7fc
jg 0x10047a1d
mov dword [ebp - 0x370], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x370], eax
jge 0x100479bb
mov dword [ebp - 0x380], 0
mov dword [ebp - 0x378], 0
mov byte [ebp - 0x59], 0
push 1
push 0x372a
lea eax, [ebp - 0x59]
push eax
push 1
push 1
call fcn.10042b7e
add esp, 0x14
push 1
push 0x238
lea eax, [ebp - 0x378]
push eax
push 0x638a
lea eax, [ebp - 0x380]
push eax
push 0x5f98
push 1
push 1
call fcn.10042c38
add esp, 0x20
jmp 0x10047a1b
push 3
lea ecx, [ebp - 0x510]
call fcn.1000f401
mov byte [ebp - 4], 0xe
lea eax, [ebp - 0x510]
push eax
lea eax, [ebp - 0x668]
push eax
call fcn.100456e8
pop ecx
pop ecx
lea eax, [ebp - 0x4c8]
push eax
push 1
push 0
push 0x440
push 0x6f11
push 0x1dd3
push 1
lea eax, [ebp - 0x510]
push eax
call fcn.10044504
add esp, 0x20
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x510]
call fcn.1000f485
jmp 0x10047a8e
mov dword [ebp - 0x388], 0xfffffff9
mov byte [ebp - 0x55], 0
push 0x6083
push 0x4b59
push 0xd6
push 1
push 0x696d
push 0x6504
lea eax, [ebp - 0x55]
push eax
push 1
call fcn.10042f9c
add esp, 0x20
mov dword [ebp - 0x30], 0
jmp 0x10047a64
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 1
jg 0x10047a8e
lea eax, [ebp - 0x4c8]
push eax
lea eax, [ebp - 0x24]
push eax
call fcn.10045730
pop ecx
pop ecx
lea eax, [ebp - 0x388]
push eax
push 1
call fcn.100431af
pop ecx
pop ecx
jmp 0x10047a5d
push 1
push 0x52de
push 0x688d
push 0x211f
push 0x1325
push 0x903
push 1
push 0x16e4
lea eax, [ebp - 0x4a4]
push eax
push 0x24e6
call fcn.100432d0
add esp, 0x28
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x4c8]
call fcn.1000f485
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4a4]
call fcn.1000f485
mov dword [ebp - 0x390], 0x241f
cmp dword [ebp - 0x390], 0xf50
jge 0x10047d22
mov edx, 0x11d424a8
mov ecx, 0x10661f98
call fcn.10024668
mov edx, 0x11d424c0
mov ecx, eax
call fcn.10024668
and dword [ebp - 0x118], 0
jmp 0x10047b2d
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
mov ecx, 0x11d424a8
call fcn.1000f320
cmp dword [ebp - 0x118], eax
jae 0x10047b5b
push dword [ebp - 0x118]
mov ecx, 0x11d424a8
call fcn.10010888
movsx eax, byte [eax]
mov byte [eax + 0x111b31b3], 1
jmp 0x10047b20
and dword [ebp - 0x104], 0
jmp 0x10047b71
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
mov ecx, 0x11d424c0
call fcn.1000f320
cmp dword [ebp - 0x104], eax
jae 0x10047bbb
push dword [ebp - 0x104]
mov ecx, 0x11d424c0
call fcn.10010888
movsx eax, byte [eax]
movzx eax, byte [eax + 0x111b31b3]
test eax, eax
jne 0x10047bb9
push fcn.10011f68
push 0xffffffffffffffff
mov ecx, 0x10661e78
call fcn.1000f0f4
mov ecx, eax
call fcn.1000f0e8
jmp 0x10047b64
push 0x9eb168
push 0xffffffffffffffff
push 0x10752b90
call fcn.1000ef8d
add esp, 0xc
mov ecx, 0x11d424a8
call fcn.1000f320
dec eax
dec eax
mov dword [ebp - 0x50], eax
jmp 0x10047be7
mov eax, dword [ebp - 0x50]
dec eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
jl 0x10047c56
and dword [ebp - 0x88], 0
jmp 0x10047c03
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0x1a
jge 0x10047c33
mov eax, dword [ebp - 0x50]
inc eax
imul eax, eax, 0x68
imul ecx, dword [ebp - 0x50], 0x68
mov edx, dword [ebp - 0x88]
mov esi, dword [ebp - 0x88]
mov eax, dword [eax + esi*4 + 0x10752b90]
mov dword [ecx + edx*4 + 0x10752b90], eax
jmp 0x10047bf6
mov esi, dword [ebp - 0x50]
inc esi
imul edi, dword [ebp - 0x50], 0x68
mov eax, dword [ebp - 0x50]
inc eax
push eax
mov ecx, 0x11d424a8
call fcn.10010888
movsx eax, byte [eax]
mov dword [edi + eax*4 + 0x10752a0c], esi
jmp 0x10047be0
and dword [ebp - 0x6c], 0
or dword [ebp - 0x60], 0xffffffff
jmp 0x10047c67
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
mov ecx, 0x11d424c0
call fcn.1000f320
cmp dword [ebp - 0x6c], eax
jae 0x10047d06
push dword [ebp - 0x6c]
mov ecx, 0x11d424c0
call fcn.10010888
mov al, byte [eax]
mov byte [ebp - 0xd], al
cmp dword [ebp - 0x60], 0xffffffff
jne 0x10047cc5
push 0
mov ecx, 0x11d424a8
call fcn.10010888
movsx eax, byte [eax]
movsx ecx, byte [ebp - 0xd]
cmp eax, ecx
jne 0x10047caf
and dword [ebp - 0x60], 0
jmp 0x10047cc3
push 0x68
pop eax
imul eax, eax, 0
movsx ecx, byte [ebp - 0xd]
mov eax, dword [eax + ecx*4 + 0x10752a0c]
mov dword [ebp - 0x60], eax
jmp 0x10047d01
imul eax, dword [ebp - 0x60], 0x68
movsx ecx, byte [ebp - 0xd]
cmp dword [eax + ecx*4 + 0x10752a0c], 0xffffffff
je 0x10047ceb
imul eax, dword [ebp - 0x60], 0x68
movsx ecx, byte [ebp - 0xd]
mov eax, dword [eax + ecx*4 + 0x10752a0c]
mov dword [ebp - 0x60], eax
jmp 0x10047d01
or dword [ebp - 0x60], 0xffffffff
mov eax, dword [0x106615cc]
inc eax
mov dword [0x106615cc], eax
mov eax, dword [ebp - 0x6c]
dec eax
mov dword [ebp - 0x6c], eax
jmp 0x10047c60
push fcn.10011f68
push dword [0x106615cc]
mov ecx, 0x10661e78
call fcn.1000f0f4
mov ecx, eax
call fcn.1000f0e8
xor eax, eax
jmp 0x10048aef
push 0x29dc
lea eax, [ebp - 0x34]
push eax
push 0x7cae
push 0x2c61
push 1
push 1
push 0x2caf
push 0x2316
push 0xb5e
push 0x3031
call fcn.100434f2
add esp, 0x28
mov dword [ebp - 0xec], 0x624039b6
push 1
push 0x71c6
push 0x40d5
push 0x5836
push 0x39eb
push 0x3045
push 0x7ded
push 0x3cac
push 0x7cd
push 1
call fcn.10043c50
add esp, 0x28
mov dword [ebp - 0xec], 0
jmp 0x10047db3
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0xc
jne 0x10047ded
mov byte [ebp - 0x56], 0
push 1
push 0x4765
push 1
push 0x16f7
push 0x31d
push 0xc2
push 1
lea eax, [ebp - 0x56]
push eax
push 0x332f
call fcn.10043d44
add esp, 0x24
jmp 0x10047da6
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
cmp dword [eax + 0x28], 0
je 0x10048ace
mov dword [ebp - 0x3a0], 0x7ce5
push 2
lea ecx, [ebp - 0x540]
call fcn.1000f401
mov dword [ebp - 4], 0xf
mov dword [ebp - 0xa0], 1
mov dword [ebp - 0x3a8], 4
mov dword [ebp - 0x98], 0xba6b42be
mov dword [ebp - 0x270], 4
push 2
lea ecx, [ebp - 0x528]
call fcn.1000f401
mov byte [ebp - 4], 0x10
mov dword [ebp - 0x398], 0x1980
cmp dword [ebp - 0x398], 0x1210
jge 0x10047f3a
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x268]
push eax
push 0x100081e4
call fcn.10055adb
add esp, 0xc
imul eax, dword [ebp - 0x90], 3
cmp dword [ebp - 0x268], eax
jge 0x10047ea7
push 0x100081f0
call fcn.10055ec6
pop ecx
jmp 0x10047f3a
and dword [ebp - 0x114], 0
jmp 0x10047ebd
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x114]
cmp eax, dword [ebp - 0x90]
jge 0x10047ee9
mov eax, dword [ebp - 0x114]
inc eax
cdq
idiv dword [ebp - 0x90]
inc edx
push edx
push 0x100081c4
call fcn.10055d0f
pop ecx
pop ecx
jmp 0x10047eb0
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xf4], eax
jmp 0x10047f04
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
mov eax, dword [ebp - 0xf4]
cmp eax, dword [ebp - 0x268]
jge 0x10047f2f
mov eax, dword [ebp - 0xf4]
cdq
idiv dword [ebp - 0x90]
inc edx
push edx
push 0x100081c4
call fcn.10055d0f
pop ecx
pop ecx
jmp 0x10047ef7
push 0x100080e5
call fcn.10055ec6
pop ecx
mov dword [ebp - 0x38], 0
jmp 0x10047f4a
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 2
jge 0x10047f66
push dword [ebp - 0x38]
lea ecx, [ebp - 0x540]
call fcn.1000f48a
mov dword [eax], 0x1188
jmp 0x10047f43
mov dword [ebp - 0x38], 0
jmp 0x10047f76
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 2
jge 0x10047f92
push dword [ebp - 0x38]
lea ecx, [ebp - 0x528]
call fcn.1000f48a
mov dword [eax], 0xc5051dd2
jmp 0x10047f6f
lea eax, [ebp - 0x3a0]
push eax
push 1
push 0x3615
push 0x3960
push 0x43c4
push 0x392f
lea eax, [ebp - 0x98]
push eax
lea eax, [ebp - 0x3a8]
push eax
push 0xf31
lea eax, [ebp - 0xa0]
push eax
push 0x4783
push 1
lea eax, [ebp - 0x528]
push eax
push 0x226c
lea eax, [ebp - 0x270]
push eax
push 0x235d
push 0x7405
push 0x2996
lea eax, [ebp - 0x540]
push eax
push 0x6d5f
call fcn.1004403f
add esp, 0x50
mov dword [ebp - 0x98], 0
jmp 0x1004801f
mov eax, dword [ebp - 0x98]
dec eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0xffffffe8
je 0x100480f0
mov dword [ebp - 0x3b0], 0xffff
mov dword [ebp - 0x3b8], 0xfffffffe
mov dword [ebp - 0xa0], 0xe
jmp 0x10048059
mov eax, dword [ebp - 0xa0]
dec eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 8
je 0x100480eb
mov dword [ebp - 0x3c0], 0
mov dword [ebp - 0x10c], 0
jmp 0x10048089
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 3
jge 0x100480a5
mov eax, dword [ebp - 0x10c]
mov dword [ebp + eax*4 - 0x6c4], 1
jmp 0x1004807c
cmp dword [ebp - 0x3b0], 0
je 0x100480b0
jmp 0x100480eb
mov eax, dword [ebp - 0x270]
mov dword [ebp - 0x5a0], eax
cmp dword [ebp - 0x3b8], 1
jne 0x100480d1
mov dword [ebp - 0x278], 1
jmp 0x100480d8
and dword [ebp - 0x278], 0
mov eax, dword [ebp - 0x278]
neg eax
mov dword [ebp - 0x3c0], eax
jmp 0x1004804c
jmp 0x10048012
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x528]
call fcn.1000f485
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x540]
call fcn.1000f485
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xfc]
add ecx, dword [eax + 0x28]
mov dword [ebp - 0x320], ecx
call fcn.1004577c
cmp dword [ebp - 0x320], 0
jne 0x10048137
xor eax, eax
jmp 0x10048aef
mov dword [ebp - 0x288], 1
mov dword [ebp - 0x298], 0
mov dword [ebp - 0xdc], 0xfffe
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0x310], 0xfffffffa
mov dword [ebp - 0x2d8], 0x9c3cbaa6
mov dword [ebp - 0x2f0], 1
mov dword [ebp - 0x3d0], 0xfffffffb
mov dword [ebp - 0x600], 0x689bb5c
mov dword [ebp - 0x11c], 0
jmp 0x100481aa
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 2
jge 0x100481c6
mov eax, dword [ebp - 0x11c]
mov dword [ebp + eax*4 - 0xe4], 0xd7d7
jmp 0x1004819d
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xe4], 1
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xe4], 0
jne 0x100482a2
push 4
pop eax
shl eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0xe4]
cmp dword [ebp + eax - 0xe4], ecx
jg 0x10048213
mov dword [ebp - 0x280], 1
jmp 0x1004821a
and dword [ebp - 0x280], 0
mov eax, dword [ebp - 0x280]
mov dword [ebp - 0x288], eax
cmp dword [ebp - 0x288], 0
jne 0x10048248
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xe4], 0
jne 0x10048248
and dword [ebp - 0x290], 0
jmp 0x10048252
mov dword [ebp - 0x290], 1
mov eax, dword [ebp - 0x290]
mov dword [ebp - 0x298], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xe4]
cmp eax, dword [ebp - 0x298]
jge 0x1004827f
mov dword [ebp - 0x15c], 1
jmp 0x10048286
and dword [ebp - 0x15c], 0
mov eax, dword [ebp - 0x15c]
sub eax, 0xe63a
cmp eax, dword [ebp - 0xdc]
jg 0x100482a2
and dword [ebp - 0x2a8], 0
jmp 0x100482ac
mov dword [ebp - 0x2a8], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xe4]
cmp dword [ebp - 0x2a8], eax
jg 0x100482cd
mov dword [ebp - 0x2b0], 1
jmp 0x100482d4
and dword [ebp - 0x2b0], 0
mov eax, dword [ebp - 0xdc]
imul eax, dword [ebp - 0x2b0]
cmp eax, dword [ebp - 0xb0]
jne 0x100482f5
mov dword [ebp - 0x2b8], 1
jmp 0x100482fc
and dword [ebp - 0x2b8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xe4]
cmp dword [ebp - 0x2b8], eax
jl 0x10048326
mov eax, 0xe836ea0e
test eax, eax
je 0x10048326
mov dword [ebp - 0x2c0], 1
jmp 0x1004832d
and dword [ebp - 0x2c0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xe4]
cmp dword [ebp - 0x2c0], eax
jl 0x1004834e
mov dword [ebp - 0x3c8], 1
jmp 0x10048355
and dword [ebp - 0x3c8], 0
mov eax, dword [ebp - 0x310]
mov dword [ebp - 0x5a8], eax
or eax, 0xffffffff
cmp eax, 0x72625aa9
je 0x10048377
mov dword [ebp - 0x2c8], 1
jmp 0x1004837e
and dword [ebp - 0x2c8], 0
imul eax, dword [ebp - 0x2c8], 0
cmp eax, 0xf6a1
jge 0x10048398
mov dword [ebp - 0x2d0], 1
jmp 0x1004839f
and dword [ebp - 0x2d0], 0
mov eax, dword [ebp - 0x2d0]
mov dword [ebp - 0x2d8], eax
cmp dword [ebp - 0x2d8], 0xcce3f50e
jb 0x100483c3
mov dword [ebp - 0x2e0], 1
jmp 0x100483ca
and dword [ebp - 0x2e0], 0
mov eax, dword [ebp - 0x2e0]
sub eax, dword [ebp - 0xb0]
cmp eax, dword [ebp - 0xb0]
jne 0x100483ea
mov dword [ebp - 0x2e8], 1
jmp 0x100483f1
and dword [ebp - 0x2e8], 0
mov eax, dword [ebp - 0x2e8]
mov dword [ebp - 0x2f0], eax
mov eax, dword [ebp - 0xdc]
cmp dword [ebp - 0x2f0], eax
jg 0x10048417
mov dword [ebp - 0x2f8], 1
jmp 0x1004841e
and dword [ebp - 0x2f8], 0
mov eax, dword [ebp - 0xdc]
cmp dword [ebp - 0x2f8], eax
jge 0x10048438
mov dword [ebp - 0x300], 1
jmp 0x1004843f
and dword [ebp - 0x300], 0
cmp dword [ebp - 0x300], 1
jle 0x10048454
mov dword [ebp - 0x308], 1
jmp 0x1004845b
and dword [ebp - 0x308], 0
mov eax, dword [ebp - 0x308]
sub eax, dword [ebp - 0xb0]
cmp eax, dword [ebp - 0x310]
jne 0x1004847b
mov dword [ebp - 0x318], 1
jmp 0x10048482
and dword [ebp - 0x318], 0
mov eax, dword [ebp - 0x318]
mov dword [ebp - 0x3d0], eax
push 0
push 1
push 0xdeadbeef
call dword [ebp - 0x320]
mov dword [ebp - 0x3d8], eax
cmp dword [ebp - 0x3d8], 0
jne 0x100484b3
xor eax, eax
jmp 0x10048aef
mov dword [ebp - 0x630], 0xb4e1a362
push 1
lea ecx, [ebp - 0x664]
call fcn.1000f401
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x400], 5
mov dword [ebp - 0x5b0], 0xc3fbb4eb
mov dword [ebp - 0x608], 0x3e63e315
mov dword [ebp - 0x5b8], 1
mov dword [ebp - 0x3e0], 0x26f0
cmp dword [ebp - 0x3e0], 0x97a
jge 0x10048a29
lea eax, [ebp - 0x658]
push eax
lea eax, [ebp - 0x140]
push eax
mov ecx, 0x10661f98
call fcn.10021ab3
mov ecx, eax
call fcn.10021ab3
lea ecx, [ebp - 0x80]
call fcn.1000f5e0
mov byte [ebp - 4], 0x12
and dword [ebp - 0x68], 0
mov eax, dword [ebp - 0x140]
mov dword [ebp - 0x3e8], eax
mov eax, dword [ebp - 0x140]
dec eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x3e8], 0
je 0x1004879d
lea eax, [ebp - 0x148]
push eax
mov ecx, 0x10661f98
call fcn.10021ab3
cmp dword [ebp - 0x148], 0
jne 0x1004858b
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
jmp 0x10048542
and dword [ebp - 0x3f0], 0
lea eax, [ebp - 0x3f0]
push eax
push dword [ebp - 0x148]
lea ecx, [ebp - 0x16c]
call fcn.1000f43d
mov byte [ebp - 4], 0x13
and dword [ebp - 0xb4], 0
jmp 0x100485c4
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp - 0xb4]
cmp eax, dword [ebp - 0x148]
jge 0x100485f0
push dword [ebp - 0xb4]
lea ecx, [ebp - 0x16c]
call fcn.1000f48a
push eax
mov ecx, 0x10661f98
call fcn.10021ab3
jmp 0x100485b7
mov byte [ebp - 0x15], 0
and dword [ebp - 0x70], 0
jmp 0x10048601
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
lea ecx, [ebp - 0x80]
call fcn.1004924a
cmp dword [ebp - 0x70], eax
jae 0x10048705
movzx eax, byte [ebp - 0x15]
test eax, eax
je 0x1004861f
jmp 0x10048705
and dword [ebp - 0xbc], 0
jmp 0x10048635
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
lea ecx, [ebp - 0x16c]
call fcn.1000f5fc
cmp dword [ebp - 0xbc], eax
jae 0x10048700
lea eax, [ebp - 0x5c0]
push eax
push dword [ebp - 0x70]
lea ecx, [ebp - 0x80]
call fcn.10049253
mov ecx, eax
call fcn.1000f59b
push eax
push dword [ebp - 0xbc]
lea ecx, [ebp - 0x16c]
call fcn.1000f48a
push eax
lea eax, [ebp - 0x610]
push eax
push dword [ebp - 0x70]
lea ecx, [ebp - 0x80]
call fcn.10049253
mov ecx, eax
call fcn.10049447
mov ecx, eax
call fcn.1000f5cd
movzx eax, al
test eax, eax
je 0x100486fb
and dword [ebp - 0xc4], 0
jmp 0x100486b5
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
lea ecx, [ebp - 0x16c]
call fcn.1000f5fc
cmp dword [ebp - 0xc4], eax
jae 0x100486f5
push dword [ebp - 0xc4]
lea ecx, [ebp - 0x16c]
call fcn.1000f48a
push eax
lea eax, [ebp - 0x694]
push eax
push dword [ebp - 0x70]
lea ecx, [ebp - 0x80]
call fcn.10049253
mov ecx, eax
call fcn.10049419
jmp 0x100486a8
mov byte [ebp - 0x15], 1
jmp 0x10048700
jmp 0x10048628
jmp 0x100485fa
movzx eax, byte [ebp - 0x15]
test eax, eax
jne 0x10048789
lea ecx, [ebp - 0x428]
call fcn.10049404
mov byte [ebp - 4], 0x14
and dword [ebp - 0xcc], 0
jmp 0x10048732
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
lea ecx, [ebp - 0x16c]
call fcn.1000f5fc
cmp dword [ebp - 0xcc], eax
jae 0x1004876b
push dword [ebp - 0xcc]
lea ecx, [ebp - 0x16c]
call fcn.1000f48a
push eax
lea eax, [ebp - 0x684]
push eax
lea ecx, [ebp - 0x428]
call fcn.10049419
jmp 0x10048725
lea eax, [ebp - 0x428]
push eax
lea ecx, [ebp - 0x80]
call fcn.10049381
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x428]
call fcn.10022018
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x16c]
call fcn.1000f485
jmp 0x10048542
lea ecx, [ebp - 0x80]
call fcn.1004924a
test eax, eax
jbe 0x10048a04
mov byte [ebp - 0x58], 1
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x80]
call fcn.1004924a
push eax
lea ecx, [ebp - 0x4e0]
call fcn.1000f327
mov byte [ebp - 4], 0x15
and dword [ebp - 0x2c], 0
jmp 0x100487da
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
lea ecx, [ebp - 0x80]
call fcn.1004924a
cmp dword [ebp - 0x2c], eax
jae 0x10048996
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x54], eax
jmp 0x100487fb
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
lea ecx, [ebp - 0x80]
call fcn.1004924a
cmp dword [ebp - 0x54], eax
jae 0x10048991
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x80]
call fcn.10049253
mov ecx, eax
call fcn.10049437
lea eax, [ebp - 0x5c8]
push eax
push dword [ebp - 0x54]
lea ecx, [ebp - 0x80]
call fcn.10049253
mov ecx, eax
call fcn.10049437
mov eax, dword [eax]
mov dword [ebp - 0x4c], eax
jmp 0x10048853
push 0
lea eax, [ebp - 0x638]
push eax
lea ecx, [ebp - 0x4c]
call fcn.10049499
lea eax, [ebp - 0x5d0]
push eax
push dword [ebp - 0x54]
lea ecx, [ebp - 0x80]
call fcn.10049253
mov ecx, eax
call fcn.1000f59b
push eax
lea ecx, [ebp - 0x4c]
call fcn.1000f5cd
movzx eax, al
test eax, eax
je 0x100488eb
lea eax, [ebp - 0x618]
push eax
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x80]
call fcn.10049253
mov ecx, eax
call fcn.1000f59b
push eax
lea ecx, [ebp - 0x4c]
call fcn.10049493
push eax
lea eax, [ebp - 0x5d8]
push eax
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x80]
call fcn.10049253
mov ecx, eax
call fcn.10049447
mov ecx, eax
call fcn.1000f5cd
movzx eax, al
test eax, eax
je 0x100488e6
push 0
push dword [ebp - 0x54]
lea eax, [ebp - 0x69c]
push eax
lea ecx, [ebp - 0x4e0]
call fcn.1000f3a8
mov ecx, eax
call fcn.1000f3c7
jmp 0x100488eb
jmp 0x10048842
push dword [ebp - 0x54]
lea eax, [ebp - 0x6ac]
push eax
lea ecx, [ebp - 0x4e0]
call fcn.1000f3a8
mov ecx, eax
call fcn.1000f3ec
movzx eax, al
test eax, eax
jne 0x1004898c
lea eax, [ebp - 0x670]
push eax
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x80]
call fcn.10049253
mov ecx, eax
call fcn.10049437
mov eax, dword [eax]
mov dword [ebp - 0x4c], eax
jmp 0x1004893f
push 0
lea eax, [ebp - 0x5e0]
push eax
lea ecx, [ebp - 0x4c]
call fcn.10049499
lea eax, [ebp - 0x620]
push eax
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x80]
call fcn.10049253
mov ecx, eax
call fcn.1000f59b
push eax
lea ecx, [ebp - 0x4c]
call fcn.1000f5cd
movzx eax, al
test eax, eax
je 0x1004898c
lea ecx, [ebp - 0x4c]
call fcn.10049493
push eax
lea eax, [ebp - 0x6a4]
push eax
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x80]
call fcn.10049253
mov ecx, eax
call fcn.10049419
jmp 0x1004892e
jmp 0x100487f4
jmp 0x100487d3
and dword [ebp - 0xd4], 0
jmp 0x100489ac
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
lea ecx, [ebp - 0x4e0]
call fcn.100494b0
cmp dword [ebp - 0xd4], eax
jae 0x100489ee
push dword [ebp - 0xd4]
lea eax, [ebp - 0x68c]
push eax
lea ecx, [ebp - 0x4e0]
call fcn.1000f3a8
mov ecx, eax
call fcn.1000f3ec
movzx eax, al
test eax, eax
je 0x100489ec
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
jmp 0x1004899f
mov eax, dword [ebp - 0x68]
dec eax
mov dword [ebp - 0x68], eax
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x4e0]
call fcn.1000f388
push fcn.10011f68
push dword [ebp - 0x68]
mov ecx, 0x10661e78
call fcn.1000f0f4
mov ecx, eax
call fcn.1000f0e8
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x80]
call fcn.1004934d
mov dword [ebp - 0x5e8], 1
mov dword [ebp - 0x648], 0xbf90a233
mov dword [ebp - 0x3f8], 0x1adb2bc4
lea eax, [ebp - 0x664]
push eax
lea eax, [ebp - 0x5f0]
push eax
call fcn.100459c8
pop ecx
pop ecx
push 0x2b70
push 0
push 1
lea eax, [ebp - 0x3f8]
push eax
call fcn.10044d55
add esp, 0x10
lea eax, [ebp - 0x400]
push eax
push 1
push 0x769b
push 0x3c40
push 0x742
push 0x80
push 0x3656
push 1
call fcn.10044c61
add esp, 0x20
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x664]
call fcn.1000f485
push 1
lea eax, [ebp - 0x34]
push eax
push 0x645d
push 1
push 0x18b0
push 0x3eae
call fcn.10044df6
add esp, 0x18
mov eax, dword [ebp - 0x34]
cmp dword [eax + 0x10], 0
je 0x10048ae2
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x328], eax
jmp 0x10048ae9
and dword [ebp - 0x328], 0
mov eax, dword [ebp - 0x328]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret