Function at 0x1004f7fc
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10074e94
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x780
push esi
push edi
mov dword [ebp - 0x128], 0xe1d925b0
mov dword [ebp - 0x18], 0x4dc9ed9b
mov dword [ebp - 0x64], 0xc97412df
push 3
lea ecx, [ebp - 0x4c8]
call fcn.1000c0ba
and dword [ebp - 4], 0
mov dword [ebp - 0x68c], 0xffffffff
lea eax, [ebp - 0x4c8]
push eax
lea eax, [ebp - 0x6f4]
push eax
call fcn.1004e61a
pop ecx
pop ecx
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x128]
push eax
lea eax, [ebp - 0x64]
push eax
call fcn.1004e662
add esp, 0xc
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x60c], eax
cmp dword [ebp - 0x18], 0x87a5
jge 0x1004f899
mov dword [ebp - 0x2ec], 1
jmp 0x1004f8a0
and dword [ebp - 0x2ec], 0
mov eax, dword [ebp - 0x128]
add eax, dword [ebp - 0x64]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x128]
imul eax, dword [ebp - 0x64]
cmp eax, dword [ebp - 0x18]
jl 0x1004f8c7
mov dword [ebp - 0x244], 1
jmp 0x1004f8ce
and dword [ebp - 0x244], 0
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x244]
cmp eax, dword [ebp - 0x18]
jle 0x1004f8f1
mov eax, 0xccca
test eax, eax
je 0x1004f8f1
mov dword [ebp - 0x2f8], 1
jmp 0x1004f8f8
and dword [ebp - 0x2f8], 0
cmp dword [ebp - 0x18], 0xbda9
jge 0x1004f90d
mov dword [ebp - 0x238], 1
jmp 0x1004f914
and dword [ebp - 0x238], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x238], eax
jg 0x1004f9d9
push 1
lea ecx, [ebp - 0x4a4]
call fcn.1000c0ba
mov byte [ebp - 4], 1
lea eax, [ebp - 0x67c]
push eax
push 0x4148
lea eax, [ebp - 0x4a4]
push eax
push 0x6121
push 1
push 1
push 0x3016
push 0x7d7f
push 0x12e6
push 0x4dc6
push 0x3bfe
call fcn.10047608
add esp, 0x2c
lea eax, [ebp - 0x4a4]
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x64]
push eax
call fcn.1004e6cc
add esp, 0xc
mov dword [ebp - 0x18], 0x11
jmp 0x1004f998
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 9
jl 0x1004f9c8
mov byte [ebp - 0x57], 0
push 1
push 0x7671
push 1
push 0x5833
lea eax, [ebp - 0x57]
push eax
push 0x28ee
push 0x5865
call fcn.1004781c
add esp, 0x1c
jmp 0x1004f991
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a4]
call fcn.1000c116
jmp 0x1004fa27
mov dword [ebp - 0x300], 0x336
mov dword [ebp - 0x308], 0xb167d3d8
lea eax, [ebp - 0x300]
push eax
push 1
lea eax, [ebp - 0x128]
push eax
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x308]
push eax
push 0x4e95
push 0
lea eax, [ebp - 0x4c8]
push eax
lea eax, [ebp - 0x18]
push eax
push 0x294d
call fcn.1004dbbe
add esp, 0x28
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4c8]
call fcn.1000c116
and dword [ebp - 0x20], 0
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x5c], 0x81ced8f6
mov dword [ebp - 0x614], 0xfffffff9
mov dword [ebp - 0x6cc], 0x38ff4399
mov dword [ebp - 0x61c], 0xbb085ca7
mov dword [ebp - 0x684], 0x97689278
mov dword [ebp - 0x624], 0xf39ab1b5
mov dword [ebp - 0x3b0], 8
mov dword [ebp - 0x6f8], 0xfffffff9
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x62c], eax
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x5f8], eax
mov dword [ebp - 0x5c], 0xffffffff
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x5c], eax
je 0x1004fabb
mov dword [ebp - 0x240], 1
jmp 0x1004fac2
and dword [ebp - 0x240], 0
cmp dword [ebp - 0x240], 1
je 0x1004fad7
mov dword [ebp - 0x258], 1
jmp 0x1004fade
and dword [ebp - 0x258], 0
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x258], eax
jne 0x1004faf5
mov dword [ebp - 0x24c], 1
jmp 0x1004fafc
and dword [ebp - 0x24c], 0
mov eax, dword [ebp - 0x6c]
imul eax, dword [ebp - 0x24c]
test eax, eax
je 0x1004fb7a
mov dword [ebp - 0x310], 0xe4e91208
mov dword [ebp - 0x3b4], 0xffffffff
mov byte [ebp - 0x45], 0
movzx eax, byte [ebp - 0x45]
test eax, eax
je 0x1004fb51
push 0x673e
push 1
push 1
push 0x5c5b
push 0x7f11
push 0x2cf3
push 1
push 0xbed
call fcn.100479d6
add esp, 0x20
push 0x6c94
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x3b4]
push eax
push 0x40ea
push 1
push 1
call fcn.10047bf3
add esp, 0x18
jmp 0x1004ffc8
push 3
lea ecx, [ebp - 0x4d4]
call fcn.1000c0ba
mov dword [ebp - 4], 2
mov dword [ebp - 0x600], 0xf0f5
push 0x56cc
push 0x7ca9
push 0x2227
push 0x7003
push 0x36a6
lea eax, [ebp - 0x98]
push eax
push 0x7f63
push 0x7f29
push 1
push 1
push 0x73c9
lea eax, [ebp - 0x4d4]
push eax
push 0x3cd3
push 0xb9
call fcn.10047fb4
add esp, 0x38
mov dword [ebp - 0x98], 0
jmp 0x1004fbfd
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 3
jge 0x1004fc19
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0x6a8], 1
jmp 0x1004fbf0
mov dword [ebp - 0x5c], 2
jmp 0x1004fc29
mov eax, dword [ebp - 0x5c]
dec eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0
jl 0x1004fc8f
mov dword [ebp - 0x3bc], 0x7e595016
mov dword [ebp - 0x608], 1
lea eax, [ebp - 0x4d4]
push eax
lea eax, [ebp - 0x3bc]
push eax
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x6c]
push eax
call fcn.1004e722
add esp, 0x10
push 1
push 0x143f
push 0x1043
lea eax, [ebp - 0x3b0]
push eax
push 1
push 0xd13
push 0x72c0
push 0x5fcb
call fcn.10048673
add esp, 0x20
jmp 0x1004fc22
mov dword [ebp - 0x2f0], 0x1dd5
cmp dword [ebp - 0x2f0], 0xa05
jge 0x1004ff9e
and dword [ebp - 0x518], 0
mov dword [ebp - 0x514], 0x1f
mov dword [ebp - 0x510], 0x1c
mov dword [ebp - 0x50c], 0x1f
mov dword [ebp - 0x508], 0x1e
mov dword [ebp - 0x504], 0x1f
mov dword [ebp - 0x500], 0x1e
mov dword [ebp - 0x4fc], 0x1f
mov dword [ebp - 0x4f8], 0x1f
mov dword [ebp - 0x4f4], 0x1e
mov dword [ebp - 0x4f0], 0x1f
mov dword [ebp - 0x4ec], 0x1e
mov dword [ebp - 0x4e8], 0x1f
and dword [ebp - 0x74], 0
and dword [ebp - 0xc4], 0
and dword [ebp - 0x94], 0
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0xc4]
push eax
lea eax, [ebp - 0x74]
push eax
push 0x1000ad94
call fcn.100593cb
add esp, 0x10
and dword [ebp - 0x84], 0
and dword [ebp - 0x68], 0
and dword [ebp - 0xb0], 0
lea eax, [ebp - 0xb0]
push eax
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x84]
push eax
push 0x1000ad94
call fcn.100593cb
add esp, 0x10
mov eax, dword [ebp - 0x84]
sub eax, dword [ebp - 0x74]
cvtsi2sd xmm0, eax
mulsd xmm0, qword [0x1000af68]
mov eax, dword [ebp - 0x68]
sub eax, dword [ebp - 0xc4]
cvtsi2sd xmm1, eax
mulsd xmm1, qword [0x1000af68]
addsd xmm0, xmm1
mov eax, dword [ebp - 0xb0]
sub eax, dword [ebp - 0x94]
cvtsi2sd xmm1, eax
addsd xmm0, xmm1
movsd qword [ebp - 0x524], xmm0
movsd xmm0, qword [0x1000aee8]
comisd xmm0, xmmword [ebp - 0x524]
jbe 0x1004fe38
and dword [ebp - 0x7c], 0
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0xc4], eax
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0xb0], eax
and dword [ebp - 0x14], 0
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x38], eax
jmp 0x1004fe4b
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x84]
jg 0x1004ff8f
and dword [ebp - 0x4c], 0
mov eax, dword [ebp - 0x38]
cdq
mov ecx, 0xb1
idiv ecx
test edx, edx
jne 0x1004fe76
mov dword [ebp - 0x4c], 0xb1
jmp 0x1004feb1
mov eax, dword [ebp - 0x38]
cdq
mov ecx, 0xb1
idiv ecx
test edx, edx
jne 0x1004fe8e
mov dword [ebp - 0x4c], 0xb1
jmp 0x1004feb1
mov eax, dword [ebp - 0x38]
and eax, 0x80000003
jns 0x1004fe9d
dec eax
or eax, 0xfffffffc
inc eax
test eax, eax
jne 0x1004feaa
mov dword [ebp - 0x4c], 0xb1
jmp 0x1004feb1
mov dword [ebp - 0x4c], 0xb1
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x4c]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x74]
jne 0x1004ff27
mov dword [ebp - 0x8c], 1
jmp 0x1004fedb
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x8c]
cmp eax, dword [ebp - 0xc4]
jge 0x1004ff1b
cmp dword [ebp - 0x8c], 2
jne 0x1004ff06
cmp dword [ebp - 0x4c], 0xb1
jne 0x1004ff06
mov eax, dword [ebp - 0x14]
sub eax, 0x1d
mov dword [ebp - 0x14], eax
jmp 0x1004ff19
mov eax, dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp + eax*4 - 0x518]
mov dword [ebp - 0x14], ecx
jmp 0x1004fece
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x94]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x84]
jne 0x1004ff8a
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x10c], eax
jmp 0x1004ff4a
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0xc
jg 0x1004ff68
mov eax, dword [ebp - 0x10c]
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp + eax*4 - 0x518]
mov dword [ebp - 0x14], ecx
jmp 0x1004ff3d
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0xb0]
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x4c], 0xb1
jne 0x1004ff8a
cmp dword [ebp - 0x68], 2
jg 0x1004ff8a
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
jmp 0x1004fe44
push dword [ebp - 0x14]
push 0x1000a6f0
call fcn.100595c0
pop ecx
pop ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6a8]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x6a8], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4d4]
call fcn.1000c116
mov dword [ebp - 0x374], 1
mov dword [ebp - 0x28c], 1
push 1
lea ecx, [ebp - 0x414]
call fcn.1000c0ba
mov dword [ebp - 4], 3
push 3
lea ecx, [ebp - 0x3e4]
call fcn.1000c0ba
mov byte [ebp - 4], 4
push 3
lea ecx, [ebp - 0x480]
call fcn.1000c0ba
mov byte [ebp - 4], 5
push 2
lea ecx, [ebp - 0x4b0]
call fcn.1000c0ba
mov byte [ebp - 4], 6
mov dword [ebp - 0x1fc], 0xffffffff
mov dword [ebp - 0x294], 0xfff6
mov dword [ebp - 0x360], 1
lea eax, [ebp - 0x414]
push eax
lea eax, [ebp - 0x54]
push eax
call fcn.1004e7c0
pop ecx
pop ecx
push 0x43f5
push 1
lea eax, [ebp - 0x54]
push eax
push 0x6944
lea eax, [ebp - 0x3e4]
push eax
push 1
call fcn.1004875b
add esp, 0x18
lea eax, [ebp - 0x480]
push eax
push 0x1e10
push 1
push 0x754
push 0x2215
push 0x3e2d
push 0x3bb0
lea eax, [ebp - 0x54]
push eax
push 1
call fcn.10048829
add esp, 0x24
mov dword [ebp - 0x54], 0
jmp 0x100500b4
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 2
jge 0x100500d0
push dword [ebp - 0x54]
lea ecx, [ebp - 0x4b0]
call fcn.1000c132
mov dword [eax], 0x37e05af8
jmp 0x100500ad
lea eax, [ebp - 0x480]
push eax
lea eax, [ebp - 0x3e4]
push eax
lea eax, [ebp - 0x414]
push eax
lea eax, [ebp - 0x4b0]
push eax
lea eax, [ebp - 0x1fc]
push eax
lea eax, [ebp - 0x28c]
push eax
lea eax, [ebp - 0x374]
push eax
lea eax, [ebp - 0x294]
push eax
call fcn.1004e808
add esp, 0x20
lea eax, [ebp - 0x3e4]
push eax
push 0x3624
lea eax, [ebp - 0x414]
push eax
push 0xa2
push 1
push 0x5ef0
push 0xc0
push 0x300b
push 0x317d
push 0xefb
lea eax, [ebp - 0x360]
push eax
push 0x64ed
lea eax, [ebp - 0x1fc]
push eax
push 0x25ff
push 1
push 0x1710
call fcn.1004897c
add esp, 0x40
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x4b0]
call fcn.1000c116
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x480]
call fcn.1000c116
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x3e4]
call fcn.1000c116
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x414]
call fcn.1000c116
mov dword [ebp - 0x24], 1
mov dword [ebp - 0xd8], 0
jmp 0x100501c6
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 2
jge 0x100501e2
mov eax, dword [ebp - 0xd8]
mov dword [ebp + eax*4 - 0x428], 0xea75c96d
jmp 0x100501b9
mov dword [ebp - 0x24], 0
jmp 0x100501f2
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jg 0x10050480
push 2
lea ecx, [ebp - 0x4bc]
call fcn.1000c0ba
mov dword [ebp - 4], 7
mov dword [ebp - 0x124], 0
jmp 0x10050229
mov eax, dword [ebp - 0x124]
inc eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 2
jge 0x1005024b
push dword [ebp - 0x124]
lea ecx, [ebp - 0x4bc]
call fcn.1000c132
mov dword [eax], 0xfffffff7
jmp 0x1005021c
cmp dword [ebp - 0x24], 0
je 0x10050275
mov dword [ebp - 0x29c], 0xfffffff9
lea eax, [ebp - 0x29c]
push eax
lea eax, [ebp - 0x4bc]
push eax
call fcn.1004eabe
pop ecx
pop ecx
jmp 0x1005044a
mov dword [ebp - 0xe8], 1
mov dword [ebp - 0xe0], 0
jmp 0x10050298
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 2
jge 0x100502b4
mov eax, dword [ebp - 0xe0]
mov dword [ebp + eax*4 - 0x178], 0
jmp 0x1005028b
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x178], 0
jmp 0x100502e2
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x178]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x178], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x178], 1
jg 0x10050331
mov dword [ebp - 0xd0], 0x96b779c6
mov dword [ebp - 0xd0], 0
jmp 0x10050315
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 1
jg 0x1005032f
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0x428], 0
je 0x1005032d
jmp 0x1005032f
jmp 0x10050308
jmp 0x100502c7
mov dword [ebp - 0xe8], 1
jmp 0x1005034a
mov eax, dword [ebp - 0xe8]
dec eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0
jl 0x1005044a
mov dword [ebp - 0x390], 0x761be360
mov dword [ebp - 0x2a4], 0x7f39cee2
mov dword [ebp - 0x204], 0
mov eax, 0x3a4c924b
test eax, eax
je 0x10050382
cmp dword [ebp - 0x24], 0
mov eax, dword [ebp - 0x390]
mov dword [ebp - 0x610], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x178]
cmp dword [ebp - 0x24], eax
jge 0x100503ac
mov dword [ebp - 0x194], 1
jmp 0x100503b3
and dword [ebp - 0x194], 0
mov eax, dword [ebp - 0x2a4]
cmp dword [ebp - 0x194], eax
jle 0x100503cd
mov dword [ebp - 0x234], 1
jmp 0x100503d4
and dword [ebp - 0x234], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x428]
cmp dword [ebp - 0x234], eax
jle 0x100503f5
mov dword [ebp - 0x19c], 1
jmp 0x100503fc
and dword [ebp - 0x19c], 0
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x204], eax
mov eax, dword [ebp - 0x204]
mov dword [ebp - 0x618], eax
xor eax, eax
inc eax
jne 0x10050428
cmp dword [ebp - 0x24], 0
jne 0x10050428
and dword [ebp - 0x1a4], 0
jmp 0x10050432
mov dword [ebp - 0x1a4], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1a4]
mov dword [ebp + eax - 0x178], ecx
jmp 0x1005033d
mov byte [ebp - 0x5d], 0
movzx eax, byte [ebp - 0x5d]
test eax, eax
je 0x1005046c
push 1
push 1
push 0x37d
push 0x1fce
call fcn.10048b44
add esp, 0x10
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4bc]
call fcn.1000c116
jmp 0x100501eb
mov eax, dword [ebp + 8]
mov dword [ebp - 0x154], eax
mov eax, dword [ebp - 0x154]
movzx eax, word [eax]
cmp eax, 0x5a4d
je 0x10050a5f
push 2
lea ecx, [ebp - 0x184]
call fcn.1000c0ba
mov dword [ebp - 4], 8
mov dword [ebp - 0x3c], 0x9beb0647
mov dword [ebp - 0x168], 0x8c683368
mov dword [ebp - 0x370], 0xffff
lea eax, [ebp - 0x184]
push eax
lea eax, [ebp - 0x620]
push eax
call fcn.10044ced
pop ecx
pop ecx
mov dword [ebp - 0x3c], 1
jmp 0x100504f1
mov eax, dword [ebp - 0x3c]
dec eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
jl 0x100507fa
mov dword [ebp - 0x628], 0xa1245c81
mov dword [ebp - 0x630], 0xa90611bc
mov dword [ebp - 0x638], 0x7ee39f3f
mov dword [ebp - 0x640], 0xffffffff
mov dword [ebp - 0x648], 0xdd013d0b
mov dword [ebp - 0x650], 9
mov dword [ebp - 0x658], 1
mov dword [ebp - 0x660], 5
mov dword [ebp - 0x668], 1
mov dword [ebp - 0x670], 0xffffffff
mov dword [ebp - 0x678], 0xffffffff
mov dword [ebp - 0x680], 0x14b11f38
mov dword [ebp - 0x688], 0xaae07ea4
mov dword [ebp - 0x690], 0xb3799040
mov dword [ebp - 0x698], 7
mov dword [ebp - 0x6fc], 0
mov dword [ebp - 0x704], 0xbcabebf3
mov dword [ebp - 0x70c], 8
mov dword [ebp - 0x2b4], 0xfffffff7
mov dword [ebp - 0x700], 0x58bbe58
mov dword [ebp - 0x5e4], 0xf23d37f4
mov dword [ebp - 0x528], 0xfffffffd
mov dword [ebp - 0x51c], 0xfffffff7
mov dword [ebp - 0x534], 0xfffffffd
mov dword [ebp - 0x634], 0xfffffffc
push 3
lea ecx, [ebp - 0x6b8]
call fcn.1000c0ba
mov byte [ebp - 4], 9
mov dword [ebp - 0x134], 1
mov dword [ebp - 0x3a8], 0x7d9cc132
mov dword [ebp - 0xa0], 0
jmp 0x10050633
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 1
jge 0x1005064f
mov eax, dword [ebp - 0xa0]
mov dword [ebp + eax*4 - 0x2ac], 0
jmp 0x10050626
lea eax, [ebp - 0x6b8]
push eax
lea eax, [ebp - 0xa0]
push eax
call fcn.1004eae6
pop ecx
pop ecx
mov eax, dword [ebp - 0x134]
add eax, 0x6003
mov ecx, dword [ebp - 0x134]
dec ecx
mov dword [ebp - 0x134], ecx
cmp eax, 0xfffffff7
jle 0x10050724
push 0
lea ecx, [ebp - 0x184]
call fcn.1000c132
push 0
lea ecx, [ebp - 0x184]
call fcn.1000c132
cmp dword [eax], 0x82e
jl 0x100506b3
mov dword [ebp - 0x368], 1
jmp 0x100506ba
and dword [ebp - 0x368], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2ac]
mov dword [ebp - 0x540], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x6dc], eax
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x184]
call fcn.1000c132
push 0
lea ecx, [ebp - 0x184]
call fcn.1000c132
mov eax, dword [eax]
mov dword [ebp - 0x168], eax
mov eax, dword [ebp - 0x168]
mov dword [ebp - 0x54c], eax
push 1
lea ecx, [ebp - 0x184]
call fcn.1000c132
cmp dword [ebp - 0x3a8], 0
jne 0x10050724
and dword [ebp - 0x25c], 0
jmp 0x1005072e
mov dword [ebp - 0x25c], 1
mov eax, dword [ebp - 0x25c]
sub eax, 0x5efb48ca
jne 0x1005074d
cmp dword [ebp - 0x2b4], 0
jne 0x1005074d
and dword [ebp - 0x1ac], 0
jmp 0x10050757
mov dword [ebp - 0x1ac], 1
mov eax, 0x4d9e
sub eax, dword [ebp - 0x1ac]
jne 0x10050776
cmp dword [ebp - 0x370], 0
jne 0x10050776
and dword [ebp - 0x20c], 0
jmp 0x10050780
mov dword [ebp - 0x20c], 1
push 1
lea ecx, [ebp - 0x184]
call fcn.1000c132
mov ecx, dword [ebp - 0x20c]
cmp ecx, dword [eax]
je 0x100507a9
cmp dword [ebp - 0x168], 0
jne 0x100507a9
and dword [ebp - 0x1b4], 0
jmp 0x100507b3
mov dword [ebp - 0x1b4], 1
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x1b4], eax
je 0x100507ca
mov dword [ebp - 0x23c], 1
jmp 0x100507d1
and dword [ebp - 0x23c], 0
push 1
lea ecx, [ebp - 0x184]
call fcn.1000c132
mov ecx, dword [ebp - 0x23c]
mov dword [eax], ecx
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x6b8]
call fcn.1000c116
jmp 0x100504ea
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x184]
call fcn.1000c116
push 4
lea ecx, [ebp - 0x498]
call fcn.1000c0ba
mov dword [ebp - 4], 0xa
mov dword [ebp - 0xc0], 0x252cb136
mov dword [ebp - 0x3b8], 0x1c77dcd
mov dword [ebp - 0x63c], 9
mov dword [ebp - 0x558], 0
mov dword [ebp - 0x694], 0xf9534236
push 0x69e
push 0x7518
push 0x221b
push 0xda1
push 0x3edd
lea eax, [ebp - 0x564]
push eax
push 1
lea eax, [ebp - 0x498]
push eax
push 0x5f3d
push 0
push 1
push 0x629d
call fcn.10048be4
add esp, 0x30
mov dword [ebp - 0x2bc], 0x16c6
cmp dword [ebp - 0x2bc], 0x1056
jge 0x10050945
call fcn.1004f425
call fcn.1004f55e
lea eax, [ebp - 0x13c]
push eax
push 0x1000a6d8
call fcn.100593cb
pop ecx
pop ecx
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x398], eax
mov eax, dword [ebp - 0x13c]
dec eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x398], 0
je 0x10050945
lea eax, [ebp - 0x2c4]
push eax
lea eax, [ebp - 0x378]
push eax
push 0x1000a888
call fcn.100593cb
add esp, 0xc
push dword [ebp - 0x2c4]
push dword [ebp - 0x378]
call fcn.1004f60d
pop ecx
pop ecx
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 0xffffffff
jne 0x10050931
push 0x1000aeb0
call fcn.10059696
pop ecx
jmp 0x10050943
push dword [ebp - 0x1bc]
push 0x1000a7c4
call fcn.100595c0
pop ecx
pop ecx
jmp 0x100508c5
mov byte [ebp - 0x56], 0
movzx eax, byte [ebp - 0x56]
test eax, eax
je 0x10050956
call fcn.1004eb2b
mov dword [ebp - 0xc0], 0
jmp 0x1005096f
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 3
jg 0x10050a49
mov dword [ebp - 0x2cc], 0xd68f985
mov dword [ebp - 0x644], 0xd02268f6
mov dword [ebp - 0x570], 9
mov dword [ebp - 0x2c], 0
jmp 0x100509aa
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jge 0x100509c0
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x708], 0xffffffff
jmp 0x100509a3
mov dword [ebp - 0x2c], 0
jmp 0x100509d0
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x100509e6
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x6c8], 0x28ea
jmp 0x100509c9
push 0x1597
lea eax, [ebp - 0x2cc]
push eax
push 0x5991
lea eax, [ebp - 0x3b8]
push eax
lea eax, [ebp - 0xc0]
push eax
push 0x383a
push 1
push 0x7087
lea eax, [ebp - 0x498]
push eax
push 1
push 1
push 0x3104
call fcn.10048be4
add esp, 0x30
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6c8]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x6c8], eax
jmp 0x10050962
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x498]
call fcn.1000c116
xor eax, eax
jmp 0x1005280a
mov dword [ebp - 0x10], 0x9609c3fb
mov dword [ebp - 0xf0], 4
mov dword [ebp - 0x254], 0x16488a9
mov dword [ebp - 0x40], 0xffffffff
mov dword [ebp - 0x140], 0xdf78b15b
mov dword [ebp - 0x280], 0x42c3b03c
mov dword [ebp - 0x2f4], 4
mov dword [ebp - 0x108], 0
jmp 0x10050ab8
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 1
jge 0x10050ad4
mov eax, dword [ebp - 0x108]
mov dword [ebp + eax*4 - 0x388], 6
jmp 0x10050aab
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0
je 0x10050b05
mov dword [ebp - 0xf0], 0x3c0b
cmp dword [ebp - 0xf0], 0
je 0x10050b05
mov dword [ebp - 0x2d4], 1
jmp 0x10050b0c
and dword [ebp - 0x2d4], 0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x57c], eax
cmp dword [ebp - 0x10], 0xd06bde64
ja 0x10050b2a
mov dword [ebp - 0x380], 1
jmp 0x10050b31
and dword [ebp - 0x380], 0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x64c], eax
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x10], eax
jle 0x10050b4e
mov dword [ebp - 0x214], 1
jmp 0x10050b55
and dword [ebp - 0x214], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x214], eax
jne 0x10050b6c
mov dword [ebp - 0x1c4], 1
jmp 0x10050b73
and dword [ebp - 0x1c4], 0
mov eax, dword [ebp - 0x1c4]
mov dword [ebp - 0x254], eax
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x254], eax
jl 0x10050b96
mov dword [ebp - 0x2dc], 1
jmp 0x10050b9d
and dword [ebp - 0x2dc], 0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x588], eax
mov eax, dword [ebp - 0x10]
dec eax
cmp eax, 0xffff
jb 0x10050bbd
mov dword [ebp - 0x1cc], 1
jmp 0x10050bc4
and dword [ebp - 0x1cc], 0
mov eax, dword [ebp - 0x1cc]
sub eax, 0x5dbc
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
sub eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x10]
jle 0x10050be9
mov dword [ebp - 0x3a0], 1
jmp 0x10050bf0
and dword [ebp - 0x3a0], 0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x140], eax
mov eax, dword [ebp - 0x140]
cmp dword [ebp - 0x10], eax
jl 0x10050c10
mov dword [ebp - 0x2e4], 1
jmp 0x10050c17
and dword [ebp - 0x2e4], 0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x69c], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x594], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x388]
sub eax, dword [ebp - 0x10]
mov dword [ebp - 0x280], eax
mov dword [ebp - 0x40], 0xfffffff1
jmp 0x10050c4f
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0x16
jl 0x10050c98
mov dword [ebp - 0x35c], 0
mov dword [ebp - 0x358], 3
call fcn.1004eb46
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x358]
push eax
lea eax, [ebp - 0x2f4]
push eax
lea eax, [ebp - 0x35c]
push eax
lea eax, [ebp - 0x140]
push eax
call fcn.1004eb75
add esp, 0x14
jmp 0x10050c48
lea eax, [ebp + 8]
push eax
push 0x1b13
push 0x677
push 1
push 1
lea eax, [ebp - 0xac]
push eax
push 1
push 0x394a
lea eax, [ebp - 0x154]
push eax
push 0x4076
push 0x43b9
push 0x1896
push 0x41c3
push 0xefe
call fcn.10048e7f
add esp, 0x38
mov dword [ebp - 0x30], 0xada439be
mov dword [ebp - 0x15c], 5
mov dword [ebp - 0x450], 0xfffffff9
mov dword [ebp - 0x44c], 0xfffffff9
mov dword [ebp - 0x448], 0xfffffff9
mov dword [ebp - 0x444], 0xfffffff9
lea ecx, [ebp - 0x141]
call fcn.1000c25e
push eax
lea eax, [ebp - 0x440]
push eax
lea eax, [ebp - 0x450]
push eax
lea ecx, [ebp - 0x720]
call fcn.10024f8b
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x6d8]
call fcn.10024f65
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x188], 0xcc7c44d9
mov dword [ebp - 0x11c], 0
jmp 0x10050d78
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 2
jge 0x10050d94
mov eax, dword [ebp - 0x11c]
mov dword [ebp + eax*4 - 0x264], 0xbca6
jmp 0x10050d6b
mov dword [ebp - 0x30], 0
jmp 0x10050da4
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 1
jg 0x10050dcb
mov dword [ebp - 0x2fc], 5
lea eax, [ebp - 0x2fc]
push eax
call fcn.1004ebf8
pop ecx
cmp dword [ebp - 0x30], 0
je 0x10050dc9
jmp 0x10050dcb
jmp 0x10050d9d
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x654], eax
cmp dword [ebp - 0x30], 0
jne 0x10050eb1
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x264], 0
jge 0x10050dfd
mov dword [ebp - 0x21c], 1
jmp 0x10050e04
and dword [ebp - 0x21c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x264]
cmp dword [ebp - 0x21c], eax
jl 0x10050e25
mov dword [ebp - 0x1d4], 1
jmp 0x10050e2c
and dword [ebp - 0x1d4], 0
push 3
pop eax
sub eax, dword [ebp - 0x1d4]
cmp eax, 0xf545
jge 0x10050e48
mov dword [ebp - 0x364], 1
jmp 0x10050e4f
and dword [ebp - 0x364], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x264]
mov dword [ebp - 0x5a0], eax
push 1
lea ecx, [ebp - 0x6d8]
call fcn.1000c132
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x6ec], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x264]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x15c]
cmp dword [ebp - 0x30], eax
jge 0x10050e9f
cmp dword [ebp - 0x188], 0
jne 0x10050eb1
mov eax, 0xaf90
test eax, eax
jne 0x10050eb1
and dword [ebp - 0x1dc], 0
jmp 0x10050ebb
mov dword [ebp - 0x1dc], 1
cmp dword [ebp - 0x1dc], 0xea06
jl 0x10050ed3
mov dword [ebp - 0x224], 1
jmp 0x10050eda
and dword [ebp - 0x224], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x264]
cmp eax, dword [ebp - 0x224]
je 0x10050efb
mov dword [ebp - 0x1e4], 1
jmp 0x10050f02
and dword [ebp - 0x1e4], 0
mov eax, dword [ebp - 0x1e4]
mov dword [ebp - 0x15c], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6d8]
call fcn.1000c116
mov eax, dword [ebp - 0xac]
cmp dword [eax], 0x4550
je 0x1005120b
mov dword [ebp - 0x36c], 1
mov dword [ebp - 0x304], 1
push 1
lea ecx, [ebp - 0x3d8]
call fcn.1000c0ba
mov dword [ebp - 4], 0xc
push 3
lea ecx, [ebp - 0x3fc]
call fcn.1000c0ba
mov byte [ebp - 4], 0xd
push 3
lea ecx, [ebp - 0x468]
call fcn.1000c0ba
mov byte [ebp - 4], 0xe
push 2
lea ecx, [ebp - 0x45c]
call fcn.1000c0ba
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x248], 0xffffffff
mov dword [ebp - 0x30c], 0xfff6
mov dword [ebp - 0x354], 1
lea eax, [ebp - 0x3d8]
push eax
push 1
push 1
push 0x426f
push 0x678d
lea eax, [ebp - 0x1c]
push eax
call fcn.1004924a
add esp, 0x18
mov dword [ebp - 0x1c], 0
jmp 0x10050fd9
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x10050ff5
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x3fc]
call fcn.1000c132
mov dword [eax], 0xc83b9135
jmp 0x10050fd2
mov dword [ebp - 0x1c], 0
jmp 0x10051005
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x10051021
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x468]
call fcn.1000c132
mov dword [eax], 0xea37
jmp 0x10050ffe
push 1
lea eax, [ebp - 0x1c]
push eax
push 1
push 0x6c3d
push 0x58e3
push 0x7c53
push 0x2488
lea eax, [ebp - 0x45c]
push eax
push 0x515c
push 0x5e08
push 0x68db
push 0x11ee
push 0x20fa
push 0x508e
push 1
push 0xeb5
call fcn.10049372
add esp, 0x40
lea eax, [ebp - 0x468]
push eax
lea eax, [ebp - 0x3fc]
push eax
lea eax, [ebp - 0x3d8]
push eax
lea eax, [ebp - 0x45c]
push eax
lea eax, [ebp - 0x248]
push eax
lea eax, [ebp - 0x304]
push eax
lea eax, [ebp - 0x36c]
push eax
lea eax, [ebp - 0x30c]
push eax
call fcn.1004e808
add esp, 0x20
lea eax, [ebp - 0x3fc]
push eax
lea eax, [ebp - 0x248]
push eax
lea eax, [ebp - 0x354]
push eax
lea eax, [ebp - 0x3d8]
push eax
call fcn.1004ec59
add esp, 0x10
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x45c]
call fcn.1000c116
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x468]
call fcn.1000c116
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x3fc]
call fcn.1000c116
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3d8]
call fcn.1000c116
push 2
lea ecx, [ebp - 0x474]
call fcn.1000c0ba
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x314], 0x7a7c2039
mov dword [ebp - 0x37c], 0x66ac3a60
mov dword [ebp - 0x320], 0xfffffffe
push 0x79e8
push 1
push 0x4f1e
push 0x27b5
push 1
lea eax, [ebp - 0x5ac]
push eax
push 0x6235
push 0x2b81
push 1
push 0x4229
lea eax, [ebp - 0x474]
push eax
push 0x5da0
push 0x7b1b
push 0x7970
push 0x521b
push 0x5a17
push 0x2935
push 0x62f4
call fcn.10049bf1
add esp, 0x48
push 0x52b0
push 0x315c
push 0x7ee0
push 0x2d6c
push 0x5494
lea eax, [ebp - 0x314]
push eax
lea eax, [ebp - 0x37c]
push eax
push 0x789
push 0x40b7
push 0x6620
lea eax, [ebp - 0x474]
push eax
push 1
push 0x934
lea eax, [ebp - 0x320]
push eax
push 1
call fcn.1004a390
add esp, 0x3c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x474]
call fcn.1000c116
xor eax, eax
jmp 0x1005280a
push 0x13c6
lea eax, [ebp - 0x104]
push eax
push 1
push dword [ebp - 0xac]
push 0x7221
push 1
push 0x7046
call fcn.10047018
add esp, 0x1c
cmp dword [ebp - 0x104], 0
jne 0x1005140a
mov dword [ebp - 0x384], 0x2505
cmp dword [ebp - 0x384], 0x1368
jge 0x10051365
and dword [ebp - 0x78c], 0
push 0x50
push 0
lea eax, [ebp - 0x788]
push eax
call fcn.10059c60
add esp, 0xc
and dword [ebp - 0x70], 0
lea eax, [ebp - 0x1ec]
push eax
mov ecx, 0x10665a70
call fcn.100107ce
and dword [ebp - 0xa8], 0
jmp 0x1005129f
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 0xa8]
cmp eax, dword [ebp - 0x1ec]
jge 0x100512da
mov eax, dword [ebp - 0xa8]
lea eax, [ebp + eax*4 - 0x78c]
push eax
mov ecx, 0x10665a70
call fcn.100107ce
mov eax, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0x70]
add ecx, dword [ebp + eax*4 - 0x78c]
mov dword [ebp - 0x70], ecx
jmp 0x10051292
mov eax, dword [ebp - 0x70]
and eax, 0x80000001
jns 0x100512e9
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x100512f5
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
and dword [ebp - 0xb8], 0
and dword [ebp - 0x14c], 0
mov eax, dword [ebp - 0xb8]
cmp eax, dword [ebp - 0x1ec]
jge 0x10051349
mov eax, dword [ebp - 0x70]
cdq
sub eax, edx
sar eax, 1
cmp dword [ebp - 0x14c], eax
jge 0x10051349
mov eax, dword [ebp - 0xb8]
mov ecx, dword [ebp - 0x14c]
add ecx, dword [ebp + eax*4 - 0x78c]
mov dword [ebp - 0x14c], ecx
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
jmp 0x10051303
push fcn.10014ec1
push dword [ebp - 0xb8]
mov ecx, 0x106659b8
call fcn.100109c9
mov ecx, eax
call fcn.100109bd
mov dword [ebp - 0x90], 0xfffffff9
mov dword [ebp - 0x9c], 0x51f20002
mov dword [ebp - 0x90], 0
jmp 0x10051392
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 3
jl 0x100513fe
push 0x804
push 1
push 1
lea eax, [ebp - 0x9c]
push eax
push 1
push 0x5a6f
lea eax, [ebp - 0x90]
push eax
call fcn.1004a654
add esp, 0x1c
mov dword [ebp - 0x9c], 0
jmp 0x100513da
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0x1c
jne 0x100513fc
mov dword [ebp - 0x32c], 0x3d2d672a
lea eax, [ebp - 0x32c]
push eax
call fcn.1004ed22
pop ecx
jmp 0x100513cd
jmp 0x10051385
call fcn.1004eda5
xor eax, eax
jmp 0x1005280a
mov dword [ebp - 0x80], 0x7e2799ac
mov dword [ebp - 0x16c], 0xfffffff6
push 2
lea ecx, [ebp - 0x48c]
call fcn.1000c0ba
mov dword [ebp - 4], 0x11
lea eax, [ebp - 0x48c]
push eax
lea eax, [ebp - 0x65c]
push eax
call fcn.100444cb
pop ecx
pop ecx
mov dword [ebp - 0x80], 0xfffffff2
jmp 0x10051454
mov eax, dword [ebp - 0x80]
dec eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0xffffffe7
jne 0x100516a2
push 4
lea ecx, [ebp - 0x408]
call fcn.1000c0ba
mov byte [ebp - 4], 0x12
mov dword [ebp - 0x78], 8
mov dword [ebp - 0x250], 9
lea eax, [ebp - 0x408]
push eax
lea eax, [ebp - 0x5b8]
push eax
call fcn.1004efbd
pop ecx
pop ecx
mov dword [ebp - 0x78], 0
jmp 0x100514a5
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 3
jg 0x10051679
push 1
lea ecx, [ebp - 0x27c]
call fcn.1000c0ba
mov byte [ebp - 4], 0x13
mov dword [ebp - 0x38c], 0xb996340c
mov dword [ebp - 0x394], 1
push 1
lea eax, [ebp - 0x27c]
push eax
push 1
push 0x2733
push 0x7a8f
lea eax, [ebp - 0x6ac]
push eax
push 0x4113
push 0x67c6
call fcn.1004ab79
add esp, 0x20
mov byte [ebp - 0x4d], 0
movzx eax, byte [ebp - 0x4d]
test eax, eax
je 0x10051513
call fcn.1004f005
push 0
lea ecx, [ebp - 0x27c]
call fcn.1000c132
mov dword [eax], 3
jmp 0x1005154c
push 0
lea ecx, [ebp - 0x27c]
call fcn.1000c132
mov dword [ebp - 0x22c], eax
mov eax, dword [ebp - 0x22c]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x22c]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x27c]
call fcn.1000c132
cmp dword [eax], 0
jl 0x10051665
mov dword [ebp - 0x1f4], 0xfe2cf456
push 4
lea ecx, [ebp - 0x3f0]
call fcn.1000c0ba
mov byte [ebp - 4], 0x14
mov dword [ebp - 0x338], 0xffff
lea eax, [ebp - 0x5c4]
push eax
push 0x4723
push 0x6a82
lea eax, [ebp - 0x3f0]
push eax
push 1
push 1
push 0x252a
push 0x3f69
call fcn.1004ad2c
add esp, 0x20
lea eax, [ebp - 0x250]
push eax
lea eax, [ebp - 0x1f4]
push eax
push 0x445f
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x408]
push eax
lea eax, [ebp - 0x27c]
push eax
push 0x58ca
push 0x76f6
lea eax, [ebp - 0x80]
push eax
push 0
lea eax, [ebp - 0x16c]
push eax
push 1
call fcn.1004d034
add esp, 0x34
lea eax, [ebp - 0x1f4]
push eax
lea eax, [ebp - 0x250]
push eax
lea eax, [ebp - 0x27c]
push eax
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x408]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x38c]
push eax
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x338]
push eax
lea eax, [ebp - 0x394]
push eax
lea eax, [ebp - 0x16c]
push eax
call fcn.1004f019
add esp, 0x2c
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x3f0]
call fcn.1000c116
jmp 0x10051528
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x27c]
call fcn.1000c116
jmp 0x1005149e
push 0
lea ecx, [ebp - 0x48c]
call fcn.1000c132
mov eax, dword [eax]
mov dword [ebp - 0x16c], eax
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x408]
call fcn.1000c116
jmp 0x1005144d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48c]
call fcn.1000c116
push 0x400c
push 0x325c
push 0x6a12
lea eax, [ebp - 0x20]
push eax
push 1
lea eax, [ebp - 0x154]
push eax
lea eax, [ebp - 0xac]
push eax
lea eax, [ebp - 0x104]
push eax
push 0x2249
push 1
push 0x7473
push 0x6646
lea eax, [ebp - 0x664]
push eax
push 0x6128
push 0x18ad
push 0x6578
call fcn.1004b8f2
add esp, 0x40
push 0x196a
push 1
lea eax, [ebp - 0xac]
push eax
lea eax, [ebp - 0x20]
push eax
push 0x4b6e
lea eax, [ebp + 8]
push eax
push 0x1d93
push 0x3aaf
push 0x2b16
push 0x4e51
push 1
push 0x6b94
call fcn.1004bcf7
add esp, 0x30
push 4
lea ecx, [ebp - 0x420]
call fcn.1000c0ba
mov dword [ebp - 4], 0x15
mov dword [ebp - 0x44], 0x532fe223
mov dword [ebp - 0x344], 0x1f48
cmp dword [ebp - 0x344], 0x439
jge 0x100518ab
xor eax, eax
inc eax
imul eax, eax, 0
mov byte [eax + 0x10bc1210], 1
xor eax, eax
inc eax
shl eax, 0
mov byte [eax + 0x10bc1210], 1
call fcn.1004f748
lea eax, [ebp - 0x164]
push eax
mov ecx, 0x10665a70
call fcn.100107ce
mov dword [ebp - 0x18c], eax
mov eax, dword [ebp - 0x18c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x18c]
add ecx, dword [eax + 4]
call fcn.10015d80
movzx eax, al
test eax, eax
je 0x100518ab
cmp dword [ebp - 0x164], 0
je 0x100518ab
mov eax, dword [ebp - 0x164]
movzx eax, byte [eax + 0x10bc1210]
test eax, eax
jne 0x1005180f
push fcn.10014ec1
push 0
mov ecx, 0x106659b8
call fcn.100109c9
mov ecx, eax
call fcn.100109bd
jmp 0x100518a6
lea eax, [ebp - 0x5d0]
push eax
mov ecx, 0x10f36010
call fcn.10010dc1
push eax
lea eax, [ebp - 0x5e0]
push eax
mov ecx, 0x10f36010
call fcn.1002d9ca
push dword [eax]
lea eax, [ebp - 0x5dc]
push eax
mov ecx, 0x10f36010
call fcn.10010dc1
push dword [eax]
lea edx, [ebp - 0x164]
lea ecx, [ebp - 0x5e8]
call fcn.10053559
pop ecx
pop ecx
mov ecx, eax
call fcn.10052b41
mov dword [ebp - 0x190], eax
push fcn.10014ec1
push dword [ebp - 0x190]
mov ecx, 0x10f36010
call fcn.1000c132
mov esi, eax
mov eax, dword [ebp - 0x190]
dec eax
push eax
mov ecx, 0x10f36010
call fcn.1000c132
mov ecx, dword [esi]
sub ecx, dword [eax]
push ecx
mov ecx, 0x106659b8
call fcn.100109c9
mov ecx, eax
call fcn.100109bd
jmp 0x1005179c
push 1
push 0x110
push 0xa41
lea eax, [ebp - 0x5f0]
push eax
push 1
push 0x72bb
push 1
lea eax, [ebp - 0x420]
push eax
call fcn.1004ccb5
add esp, 0x20
mov dword [ebp - 0x44], 3
jmp 0x100518e6
mov eax, dword [ebp - 0x44]
dec eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0
jl 0x1005198d
mov dword [ebp - 0xa4], 0x72a8358b
push dword [ebp - 0x44]
lea ecx, [ebp - 0x420]
call fcn.1000c132
mov dword [ebp - 0x198], eax
push dword [ebp - 0x44]
lea ecx, [ebp - 0x420]
call fcn.1000c132
mov ecx, dword [ebp - 0x198]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x198]
cmp dword [eax], 0
jne 0x10051940
cmp dword [ebp - 0x44], 0
jne 0x10051940
and dword [ebp - 0x1a0], 0
jmp 0x1005194a
mov dword [ebp - 0x1a0], 1
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xa4], 3
jmp 0x1005196f
mov eax, dword [ebp - 0xa4]
dec eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0
jl 0x10051988
mov byte [ebp - 0x55], 0
lea eax, [ebp - 0x55]
push eax
call fcn.1004f30b
pop ecx
jmp 0x10051962
jmp 0x100518df
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x420]
call fcn.1000c116
mov eax, dword [ebp - 0xac]
mov ecx, dword [ebp - 0x104]
sub ecx, dword [eax + 0x34]
mov dword [ebp - 0x39c], ecx
mov dword [ebp - 0x114], 0x13dd33a4
mov dword [ebp - 0xf8], 0
jmp 0x100519d4
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 1
jge 0x100519f0
mov eax, dword [ebp - 0xf8]
mov dword [ebp + eax*4 - 0x6f0], 1
jmp 0x100519c7
mov dword [ebp - 0x114], 3
jmp 0x10051a09
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 5
je 0x10051a47
mov dword [ebp - 0x100], 0x8c9f3690
mov dword [ebp - 0x100], 0
jmp 0x10051a35
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0
jg 0x10051a45
call fcn.1004f357
jmp 0x10051a28
jmp 0x100519fc
lea eax, [ebp - 0x39c]
push eax
push 1
push 0x30e1
push 0x4919
push 0x1a52
lea eax, [ebp - 0x20]
push eax
push 1
call fcn.1004d51e
add esp, 0x1c
mov dword [ebp - 0xe4], 4
mov dword [ebp - 0x150], 0xe7d8a870
mov dword [ebp - 0xdc], 0xffffffff
and dword [ebp - 0x43c], 0
and dword [ebp - 0x438], 0
and dword [ebp - 0x434], 0
and dword [ebp - 0x430], 0
lea ecx, [ebp - 0x16d]
call fcn.1000c25e
push eax
lea eax, [ebp - 0x42c]
push eax
lea eax, [ebp - 0x43c]
push eax
lea ecx, [ebp - 0x728]
call fcn.10024f8b
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x270]
call fcn.10024f65
mov dword [ebp - 4], 0x16
mov dword [ebp - 0xd4], 0
jmp 0x10051afc
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 1
jge 0x10051b18
mov eax, dword [ebp - 0xd4]
mov dword [ebp + eax*4 - 0x138], 0xa9cea445
jmp 0x10051aef
push 1
push 0x3f47
lea eax, [ebp - 0x270]
push eax
push 1
call fcn.1004d5fd
add esp, 0x10
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x5ec], eax
mov dword [ebp - 0xdc], 8
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x66c], eax
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x5f4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x138]
mov dword [ebp - 0x6bc], eax
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x5fc], eax
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x674], eax
push 3
lea ecx, [ebp - 0x270]
call fcn.1000c132
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x138]
add eax, 0xc866
cmp eax, dword [ebp - 0xe4]
jl 0x10051bbc
mov dword [ebp - 0x148], 1
jmp 0x10051bc3
and dword [ebp - 0x148], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x148]
mov dword [ebp + eax - 0x138], ecx
mov esi, dword [ebp - 0xdc]
add esi, dword [ebp - 0x148]
push 3
lea ecx, [ebp - 0x270]
call fcn.1000c132
cmp esi, dword [eax]
jl 0x10051bff
mov dword [ebp - 0x350], 1
jmp 0x10051c06
and dword [ebp - 0x350], 0
push 3
lea ecx, [ebp - 0x270]
call fcn.1000c132
mov esi, eax
push 1
lea ecx, [ebp - 0x270]
call fcn.1000c132
mov ecx, dword [esi]
cmp ecx, dword [eax]
jle 0x10051c34
mov dword [ebp - 0x1a8], 1
jmp 0x10051c3b
and dword [ebp - 0x1a8], 0
mov eax, dword [ebp - 0xdc]
imul eax, dword [ebp - 0x1a8]
test eax, eax
je 0x10051c6a
push 2
lea ecx, [ebp - 0x270]
call fcn.1000c132
cmp dword [eax], 0
je 0x10051c6a
mov dword [ebp - 0x1b0], 1
jmp 0x10051c71
and dword [ebp - 0x1b0], 0
cmp dword [ebp - 0x1b0], 0xfffffffc
jne 0x10051c86
mov dword [ebp - 0x3a4], 1
jmp 0x10051c8d
and dword [ebp - 0x3a4], 0
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x150], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x270]
call fcn.1000c116
mov dword [ebp - 0x3ac], 0x1b70
cmp dword [ebp - 0x3ac], 0x82d
jge 0x10051df7
xorpd xmm0, xmm0
movlpd qword [ebp - 0x130], xmm0
lea eax, [ebp - 0xcc]
push eax
mov ecx, 0x10665a70
call fcn.100528af
mov eax, dword [ebp - 0xcc]
or eax, dword [ebp - 0xc8]
je 0x10051d9b
push 0
push 0xa
push dword [ebp - 0xc8]
push dword [ebp - 0xcc]
call fcn.100733b0
mov dword [ebp - 0x31c], eax
mov dword [ebp - 0x318], edx
cmp dword [ebp - 0x31c], 7
jne 0x10051d24
cmp dword [ebp - 0x318], 0
je 0x10051d57
push 0
push 0xa
push dword [ebp - 0xc8]
push dword [ebp - 0xcc]
call fcn.100733b0
mov dword [ebp - 0x328], eax
mov dword [ebp - 0x324], edx
cmp dword [ebp - 0x328], 4
jne 0x10051d75
cmp dword [ebp - 0x324], 0
jne 0x10051d75
mov eax, dword [ebp - 0x130]
add eax, 1
mov ecx, dword [ebp - 0x12c]
adc ecx, 0
mov dword [ebp - 0x130], eax
mov dword [ebp - 0x12c], ecx
push 0
push 0xa
push dword [ebp - 0xc8]
push dword [ebp - 0xcc]
call fcn.10073300
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xc8], edx
jmp 0x10051cdf
cmp dword [ebp - 0x130], 7
jne 0x10051dad
cmp dword [ebp - 0x12c], 0
je 0x10051dbf
cmp dword [ebp - 0x130], 4
jne 0x10051ddc
cmp dword [ebp - 0x12c], 0
jne 0x10051ddc
push fcn.10014ec1
mov edx, 0x1000a7a8
mov ecx, 0x106659b8
call fcn.10014cea
mov ecx, eax
call fcn.100109bd
jmp 0x10051df7
push fcn.10014ec1
mov edx, 0x1000a7ac
mov ecx, 0x106659b8
call fcn.10014cea
mov ecx, eax
call fcn.100109bd
push dword [ebp - 0x20]
call fcn.10044e1a
pop ecx
test eax, eax
jne 0x10051e0b
xor eax, eax
jmp 0x1005280a
mov dword [ebp - 0x88], 0xb2391cb4
mov dword [ebp - 0x290], 0x5f7919ad
mov dword [ebp - 0x210], 0x3380ee91
mov dword [ebp - 0x284], 0x229f
cmp dword [ebp - 0x284], 0x1115
jge 0x10051ef3
lea eax, [ebp - 0x288]
push eax
push 0x1000a6dc
call fcn.100593cb
pop ecx
pop ecx
and dword [ebp - 0xb4], 0
and dword [ebp - 0x158], 0
jmp 0x10051e73
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
mov eax, dword [ebp - 0x158]
cmp eax, dword [ebp - 0x288]
jge 0x10051ee1
lea eax, [ebp - 0x1b8]
push eax
lea eax, [ebp - 0xec]
push eax
push 0x1000a880
call fcn.100593cb
add esp, 0xc
mov eax, dword [ebp - 0xb4]
cmp eax, dword [ebp - 0xec]
jge 0x10051eb8
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0xb4], eax
jmp 0x10051edf
mov eax, dword [ebp - 0xb4]
sub eax, dword [ebp - 0xec]
cdq
idiv dword [ebp - 0x1b8]
inc eax
imul eax, dword [ebp - 0x1b8]
add eax, dword [ebp - 0xec]
mov dword [ebp - 0xb4], eax
jmp 0x10051e66
push dword [ebp - 0xb4]
push 0x1000a6f0
call fcn.100595c0
pop ecx
pop ecx
mov dword [ebp - 0x298], 0xfffffff8
mov dword [ebp - 0x28], 0
jmp 0x10051f0d
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 4
jge 0x10051f23
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x3cc], 0xffffffff
jmp 0x10051f06
mov dword [ebp - 0x28], 0
jmp 0x10051f33
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jge 0x10051f49
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x718], 0xe67b38eb
jmp 0x10051f2c
cmp dword [ebp - 0x88], 0x6ab2
jge 0x10051f61
mov dword [ebp - 0x1c0], 1
jmp 0x10051f68
and dword [ebp - 0x1c0], 0
mov eax, dword [ebp - 0x1c0]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
jne 0x1005200e
mov dword [ebp - 0x290], 8
cmp dword [ebp - 0x88], 0xffff
jae 0x10051fa3
mov dword [ebp - 0x1c8], 1
jmp 0x10051faa
and dword [ebp - 0x1c8], 0
cmp dword [ebp - 0x1c8], 0
je 0x10051fc8
cmp dword [ebp - 0x88], 0
je 0x10051fc8
mov dword [ebp - 0x1d0], 1
jmp 0x10051fcf
and dword [ebp - 0x1d0], 0
mov eax, dword [ebp - 0x88]
cmp eax, dword [ebp - 0x1d0]
jle 0x10051fe9
mov dword [ebp - 0x1d8], 1
jmp 0x10051ff0
and dword [ebp - 0x1d8], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x3cc]
cmp dword [ebp - 0x1d8], eax
jl 0x1005200e
and dword [ebp - 0x1e0], 0
jmp 0x10052018
mov dword [ebp - 0x1e0], 1
cmp dword [ebp - 0x1e0], 0xfff7
jae 0x10052030
mov dword [ebp - 0x1e8], 1
jmp 0x10052037
and dword [ebp - 0x1e8], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x3cc]
cmp dword [ebp - 0x1e8], eax
jg 0x10052058
mov dword [ebp - 0x1f0], 1
jmp 0x1005205f
and dword [ebp - 0x1f0], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x3cc]
cmp dword [ebp - 0x1f0], eax
jl 0x10052080
mov dword [ebp - 0x1f8], 1
jmp 0x10052087
and dword [ebp - 0x1f8], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x3cc]
add eax, dword [ebp - 0x1f8]
cmp eax, 0x3707
jge 0x100520ac
mov dword [ebp - 0x200], 1
jmp 0x100520b3
and dword [ebp - 0x200], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x3cc]
cmp dword [ebp - 0x200], eax
jl 0x100520d7
push 0xfffffffffffffffb
pop eax
test eax, eax
jne 0x100520d7
and dword [ebp - 0x208], 0
jmp 0x100520e1
mov dword [ebp - 0x208], 1
imul eax, dword [ebp - 0x208], 0xffff
mov dword [ebp - 0x210], eax
mov eax, dword [ebp - 0x210]
mov dword [ebp - 0x218], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x218]
mov dword [ebp + eax - 0x718], ecx
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x3cc]
add eax, dword [ebp - 0x218]
neg eax
mov dword [ebp - 0x298], eax
push 0x3a
push 1
push 1
push 0x3257
push 0x226b
push 1
push 0x6e79
push 0x2d1c
lea eax, [ebp - 0x20]
push eax
call fcn.1004d6b0
add esp, 0x24
mov dword [ebp - 0x2a0], 0x1654
cmp dword [ebp - 0x2a0], 0x1233
jge 0x1005242e
lea eax, [ebp - 0x5d8]
push eax
lea eax, [ebp - 0x530]
push eax
mov ecx, 0x10665a70
call fcn.1002d638
mov ecx, eax
call fcn.1002d638
xor eax, eax
inc eax
je 0x1005242e
lea eax, [ebp - 0x340]
push eax
lea eax, [ebp - 0x34c]
push eax
lea eax, [ebp - 0x334]
push eax
mov ecx, 0x10665a70
call fcn.1002d638
mov ecx, eax
call fcn.1002d638
mov ecx, eax
call fcn.1002d638
movsd xmm0, qword [0x1000aee8]
comisd xmm0, xmmword [ebp - 0x334]
jae 0x100521f7
movsd xmm0, qword [0x1000aee8]
comisd xmm0, xmmword [ebp - 0x34c]
jae 0x100521f7
movsd xmm0, qword [0x1000aee8]
comisd xmm0, xmmword [ebp - 0x340]
jb 0x100521fc
jmp 0x1005242e
push 2
pop ecx
call fcn.100535da
mulsd xmm0, qword [ebp - 0x530]
or ecx, 0xffffffff
movsd qword [ebp - 0x5c0], xmm0
call fcn.10053601
mulsd xmm0, qword [ebp - 0x334]
divsd xmm0, qword [0x1000af60]
push ecx
push ecx
movsd qword [esp], xmm0
call fcn.1005c1f0
pop ecx
pop ecx
fstp qword [ebp - 0x53c]
movsd xmm0, qword [ebp - 0x53c]
or ecx, 0xffffffff
movsd qword [ebp - 0x548], xmm0
call fcn.10053601
mulsd xmm0, qword [ebp - 0x334]
divsd xmm0, qword [0x1000af60]
push ecx
push ecx
movsd qword [esp], xmm0
call fcn.1005c1f0
pop ecx
pop ecx
fstp qword [ebp - 0x554]
movsd xmm0, qword [ebp - 0x548]
mulsd xmm0, qword [ebp - 0x554]
movsd xmm1, qword [0x1000af20]
divsd xmm1, xmm0
or ecx, 0xffffffff
movsd qword [ebp - 0x584], xmm1
call fcn.10053601
mulsd xmm0, qword [ebp - 0x340]
divsd xmm0, qword [0x1000af60]
push ecx
push ecx
movsd qword [esp], xmm0
call fcn.1005c1f0
pop ecx
pop ecx
fstp qword [ebp - 0x560]
movsd xmm0, qword [ebp - 0x560]
or ecx, 0xffffffff
movsd qword [ebp - 0x56c], xmm0
call fcn.10053601
mulsd xmm0, qword [ebp - 0x340]
divsd xmm0, qword [0x1000af60]
push ecx
push ecx
movsd qword [esp], xmm0
call fcn.1005c1f0
pop ecx
pop ecx
fstp qword [ebp - 0x578]
movsd xmm0, qword [ebp - 0x56c]
mulsd xmm0, qword [ebp - 0x578]
movsd xmm1, qword [0x1000af20]
divsd xmm1, xmm0
movsd xmm0, qword [ebp - 0x584]
addsd xmm0, xmm1
or ecx, 0xffffffff
movsd qword [ebp - 0x5b4], xmm0
call fcn.10053601
mulsd xmm0, qword [ebp - 0x34c]
divsd xmm0, qword [0x1000af60]
push ecx
push ecx
movsd qword [esp], xmm0
call fcn.1005c1f0
pop ecx
pop ecx
fstp qword [ebp - 0x590]
movsd xmm0, qword [ebp - 0x590]
or ecx, 0xffffffff
movsd qword [ebp - 0x59c], xmm0
call fcn.10053601
mulsd xmm0, qword [ebp - 0x34c]
divsd xmm0, qword [0x1000af60]
push ecx
push ecx
movsd qword [esp], xmm0
call fcn.1005c1f0
pop ecx
pop ecx
fstp qword [ebp - 0x5a8]
movsd xmm0, qword [ebp - 0x59c]
mulsd xmm0, qword [ebp - 0x5a8]
movsd xmm1, qword [0x1000af30]
divsd xmm1, xmm0
movsd xmm0, qword [ebp - 0x5b4]
subsd xmm0, xmm1
push ecx
push ecx
movsd qword [esp], xmm0
call fcn.1005be34
pop ecx
pop ecx
fstp qword [ebp - 0x5cc]
movsd xmm0, qword [ebp - 0x5c0]
divsd xmm0, qword [ebp - 0x5cc]
addsd xmm0, qword [ebp - 0x5d8]
push ecx
push ecx
movsd qword [esp], xmm0
call fcn.1005bc97
pop ecx
pop ecx
call fcn.10073490
mov dword [ebp - 0x2a8], eax
push fcn.10014ec1
push dword [ebp - 0x2a8]
mov ecx, 0x106659b8
call fcn.100109c9
mov ecx, eax
call fcn.100109bd
jmp 0x1005218b
mov dword [ebp - 0xfc], 0x6fe7d8a8
mov dword [ebp - 0x2b8], 0x2759951e
mov dword [ebp - 0x604], 0xab60e704
mov dword [ebp - 0xf4], 0
jmp 0x10052465
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 4
jge 0x10052481
mov eax, dword [ebp - 0xf4]
mov dword [ebp + eax*4 - 0x738], 0x540d
jmp 0x10052458
mov dword [ebp - 0xfc], 0
jmp 0x1005249a
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 3
jg 0x100524ea
mov dword [ebp - 0x2b0], 0x82ff40fc
mov dword [ebp - 0x2c0], 1
lea eax, [ebp - 0x2b0]
push eax
push 1
push 0x3186
lea eax, [ebp - 0x2b8]
push eax
push 0x1bc7
push 1
call fcn.1004d86d
add esp, 0x18
lea eax, [ebp - 0x2c0]
push eax
call fcn.10044510
pop ecx
jmp 0x1005248d
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
cmp dword [eax + 0x28], 0
je 0x10052652
mov dword [ebp - 0x2c8], 0x17d1
cmp dword [ebp - 0x2c8], 0x12f7
jge 0x10052606
push 8
pop eax
shl eax, 0
mov dword [eax + 0x10da96e0], 1
and dword [eax + 0x10da96e4], 0
mov dword [ebp - 0x34], 2
jmp 0x1005253a
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0x29
jge 0x1005259b
mov eax, dword [ebp - 0x34]
cdq
mov ecx, dword [ebp - 0x34]
push dword [ecx*8 + 0x10da96dc]
push dword [ecx*8 + 0x10da96d8]
push edx
push eax
call fcn.1005f9d0
mov esi, eax
mov edi, edx
mov eax, dword [ebp - 0x34]
push dword [eax*8 + 0x10da96dc]
push dword [eax*8 + 0x10da96d8]
mov eax, dword [ebp - 0x34]
cdq
push edx
push eax
call fcn.1004f7b0
add esp, 0x10
push edx
push eax
push edi
push esi
call fcn.10073300
mov ecx, dword [ebp - 0x34]
mov dword [ecx*8 + 0x10da96e0], eax
mov dword [ecx*8 + 0x10da96e4], edx
jmp 0x10052533
lea eax, [ebp - 0x160]
push eax
push 0x1000a6d8
call fcn.100593cb
pop ecx
pop ecx
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x2d0], eax
mov eax, dword [ebp - 0x160]
dec eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x2d0], 0
je 0x10052606
lea eax, [ebp - 0x2d8]
push eax
push 0x1000a6d8
call fcn.100593cb
pop ecx
pop ecx
mov eax, dword [ebp - 0x2d8]
push dword [eax*8 + 0x10da96e4]
push dword [eax*8 + 0x10da96e0]
push 0x1000a914
call fcn.100595c0
add esp, 0xc
jmp 0x100525ae
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x104]
add ecx, dword [eax + 0x28]
mov dword [ebp - 0x220], ecx
jne 0x10052623
xor eax, eax
jmp 0x1005280a
push 0
push 1
push 0xdeadbeef
call dword [ebp - 0x220]
mov dword [ebp - 0x2e0], eax
cmp dword [ebp - 0x2e0], 0
jne 0x10052648
xor eax, eax
jmp 0x1005280a
lea eax, [ebp - 0x20]
push eax
call fcn.1004f382
pop ecx
mov dword [ebp - 0x110], 0xffffffff
mov dword [ebp - 0x4e4], 0x286e871d
mov dword [ebp - 0x4e0], 0x286e871d
mov dword [ebp - 0x4dc], 0x286e871d
mov dword [ebp - 0x4d8], 0x286e871d
mov dword [ebp - 0x228], 9
mov dword [ebp - 0x110], 0
jmp 0x100526a7
mov eax, dword [ebp - 0x110]
dec eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0xfffffffc
jne 0x100527dc
mov dword [ebp - 0xbc], 1
mov dword [ebp - 0xbc], 0
jmp 0x100526d7
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 3
jg 0x100527d7
mov eax, dword [ebp - 0xbc]
cmp dword [ebp + eax*4 - 0x4e4], 0
je 0x100527c5
mov dword [ebp - 0x120], 0xffffffff
push 3
lea ecx, [ebp - 0x6e8]
call fcn.1000c0ba
mov dword [ebp - 4], 0x17
mov dword [ebp - 0x118], 0
jmp 0x1005272f
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 3
jge 0x10052751
push dword [ebp - 0x118]
lea ecx, [ebp - 0x6e8]
call fcn.1000c132
mov dword [eax], 0xcfd1f2e9
jmp 0x10052722
mov dword [ebp - 0x120], 0
jmp 0x1005276a
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 3
jg 0x100527b4
mov dword [ebp - 0x2e8], 2
mov byte [ebp - 0x58], 0
push 0x5745
push 0x48d
push 0x2aa3
lea eax, [ebp - 0x58]
push eax
push 0x3205
push 1
push 1
call fcn.1004ddec
add esp, 0x1c
lea eax, [ebp - 0x2e8]
push eax
call fcn.10044510
pop ecx
jmp 0x1005275d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6e8]
call fcn.1000c116
jmp 0x100527d2
lea eax, [ebp - 0x228]
push eax
call fcn.1004f39c
pop ecx
jmp 0x100526ca
jmp 0x1005269a
lea eax, [ebp - 0x228]
push eax
call fcn.1004f3b3
pop ecx
mov eax, dword [ebp - 0x20]
cmp dword [eax + 0x10], 0
je 0x100527fd
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x230], eax
jmp 0x10052804
and dword [ebp - 0x230], 0
mov eax, dword [ebp - 0x230]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret