Function at 0x10043fb6
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1006d625
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x350
push esi
push 3
lea ecx, [ebp - 0x28c]
call fcn.1001a4ba
and dword [ebp - 4], 0
mov dword [ebp - 0x20], 1
mov dword [ebp - 0x31c], 0xd7249aae
mov dword [ebp - 0x318], 0xffffffff
mov dword [ebp - 0x314], 0xffffffff
mov dword [ebp - 0x310], 0xffffffff
mov dword [ebp - 0x30c], 0xffffffff
mov dword [ebp - 0x204], 0x7e7c14ab
mov dword [ebp - 0x78], 0
jmp 0x10044039
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 3
jge 0x10044055
push dword [ebp - 0x78]
lea ecx, [ebp - 0x28c]
call fcn.1001a5a5
mov dword [eax], 0x6c05
jmp 0x10044032
mov dword [ebp - 0x20], 2
jmp 0x10044065
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jl 0x1004409d
mov byte [ebp - 0x2a], 0
push 0x7a53
push 0x37c3
push 1
push 1
lea eax, [ebp - 0x2a]
push eax
call fcn.10041ccb
add esp, 0x14
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x28c]
push eax
call fcn.10043d32
pop ecx
pop ecx
jmp 0x1004405e
mov dword [ebp - 0x20], 0
jmp 0x100440ad
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jg 0x100441f0
mov dword [ebp - 0x21c], 0
mov dword [ebp - 0x218], 0
mov dword [ebp - 0x214], 0
mov dword [ebp - 0x210], 0
mov dword [ebp - 0x50], 0xfffffff9
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x21c], 2
jmp 0x10044114
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x21c]
dec eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x21c], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x21c], 0
jl 0x10044148
mov byte [ebp - 0x2d], 0
movzx eax, byte [ebp - 0x2d]
test eax, eax
je 0x10044146
push 1
push 0x3c88
push 0x68fd
push 1
call fcn.10041de0
add esp, 0x10
jmp 0x100440f9
mov dword [ebp - 0x50], 2
jmp 0x10044158
mov eax, dword [ebp - 0x50]
dec eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
jl 0x100441eb
mov dword [ebp - 0x2c8], 0xfffffffd
mov dword [ebp - 0x2ec], 7
mov dword [ebp - 0x2f0], 5
mov dword [ebp - 0x74], 0
jmp 0x10044190
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 2
jge 0x100441a6
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0x340], 0x5befa1e1
jmp 0x10044189
push 0x5b3
push 0x4f2a
push 0x2cfb
lea eax, [ebp - 0x204]
push eax
push 0x222b
push 0x2150
push 0x69e3
push 0
push 0x38e7
push 0x691d
push 1
push 0x783f
call fcn.10041fdf
add esp, 0x30
jmp 0x10044151
jmp 0x100440a6
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28c]
call fcn.1001a53e
and dword [ebp - 0x18], 0
mov dword [ebp - 0x10], 0x5ccc90a3
mov dword [ebp - 0x64], 0
jmp 0x1004421a
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 2
jge 0x10044230
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0xb4], 0x75dcec3d
jmp 0x10044213
mov dword [ebp - 0x10], 0
jmp 0x10044240
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 1
jg 0x10044355
mov dword [ebp - 0x198], 0
mov eax, 0xad72
test eax, eax
je 0x10044314
push 9
pop eax
test eax, eax
je 0x1004427c
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x10], eax
jg 0x1004427c
mov dword [ebp - 0x164], 1
jmp 0x10044283
and dword [ebp - 0x164], 0
mov eax, dword [ebp - 0x164]
add eax, 0x78c0
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0xb4]
jg 0x100442a9
mov dword [ebp - 0x1f4], 1
jmp 0x100442b0
and dword [ebp - 0x1f4], 0
mov eax, dword [ebp - 0x1f4]
inc eax
mov ecx, dword [ebp - 0x10]
sub eax, dword [ebp + ecx*4 - 0xb4]
mov dword [ebp - 0x198], eax
mov eax, dword [ebp - 0x198]
push 4
pop ecx
shl ecx, 0
add eax, dword [ebp + ecx - 0xb4]
cmp eax, 0xffffffff
jne 0x100442e3
cmp dword [ebp - 0x10], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xb4], 0xfff7
je 0x10044314
mov eax, 0x75507304
test eax, eax
je 0x10044314
mov eax, 0x18ee85ec
test eax, eax
je 0x10044314
mov dword [ebp - 0x180], 1
jmp 0x1004431b
and dword [ebp - 0x180], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0xb4]
cmp eax, dword [ebp - 0x180]
jne 0x10044339
mov dword [ebp - 0xd0], 1
jmp 0x10044340
and dword [ebp - 0xd0], 0
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0xd0]
mov dword [ebp + eax*4 - 0xb4], ecx
jmp 0x10044239
mov dword [ebp - 0x258], 0x399841b3
mov dword [ebp - 0x248], 0
mov dword [ebp - 0x250], 4
mov dword [ebp - 0x280], 0x21fbb9
mov dword [ebp - 0x27c], 0x21fbb9
mov dword [ebp - 0x278], 0x21fbb9
mov dword [ebp - 0x274], 0x21fbb9
lea ecx, [ebp - 0xa9]
call fcn.1001a609
push eax
lea eax, [ebp - 0x270]
push eax
lea eax, [ebp - 0x280]
push eax
lea ecx, [ebp - 0x348]
call fcn.1001a64b
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x2b8]
call fcn.1001a518
mov dword [ebp - 4], 1
lea eax, [ebp - 0x2b8]
push eax
lea eax, [ebp - 0x248]
push eax
lea eax, [ebp - 0x250]
push eax
lea eax, [ebp - 0x258]
push eax
call fcn.10043d69
add esp, 0x10
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2b8]
call fcn.1001a53e
mov dword [ebp - 0x34], 1
mov dword [ebp - 0x84], 0
jmp 0x1004442a
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 1
jge 0x10044446
mov eax, dword [ebp - 0x84]
mov dword [ebp + eax*4 - 0x240], 0x4a8c6a53
jmp 0x1004441d
mov dword [ebp - 0x34], 0
jmp 0x10044456
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jl 0x100444b1
mov dword [ebp - 0x188], 1
mov dword [ebp - 0x228], 1
mov dword [ebp - 0x188], 0xccb03629
cmp dword [ebp - 0x188], 0
jne 0x10044499
mov eax, dword [ebp - 0x34]
cmp dword [ebp + eax*4 - 0x240], 0
jl 0x10044499
and dword [ebp - 0xd8], 0
jmp 0x100444a3
mov dword [ebp - 0xd8], 1
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0x228], eax
jmp 0x1004444f
push 1
push 1
lea eax, [ebp - 0x34]
push eax
call fcn.100420b0
add esp, 0xc
push 0x57f6
lea eax, [ebp + 8]
push eax
lea eax, [ebp - 0x9c]
push eax
push 1
push 1
call fcn.100421e4
add esp, 0x14
mov dword [ebp - 0x14], 5
mov dword [ebp - 0x48], 0xca3191b4
mov dword [ebp - 0x98], 8
mov dword [ebp - 0x6c], 0
jmp 0x10044505
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 3
jge 0x1004451b
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0x298], 0x31
jmp 0x100444fe
mov byte [ebp - 0x2c], 0
movzx eax, byte [ebp - 0x2c]
test eax, eax
je 0x1004453a
push 1
push 1
push 0x457b
push 1
call fcn.10042269
add esp, 0x10
cmp dword [ebp - 0x14], 0
jne 0x1004454c
mov dword [ebp - 0xf8], 1
jmp 0x10044553
and dword [ebp - 0xf8], 0
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
lea eax, [eax + ecx - 0xd9a5]
cmp eax, dword [ebp - 0x48]
jl 0x10044571
mov dword [ebp - 0x190], 1
jmp 0x10044578
and dword [ebp - 0x190], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x190], eax
jle 0x1004458f
mov dword [ebp - 0xe0], 1
jmp 0x10044596
and dword [ebp - 0xe0], 0
mov eax, dword [ebp - 0xe0]
sub eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x14]
jge 0x100445b0
mov dword [ebp - 0x19c], 1
jmp 0x100445b7
and dword [ebp - 0x19c], 0
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x19c], eax
jg 0x100445ce
mov dword [ebp - 0xe8], 1
jmp 0x100445d5
and dword [ebp - 0xe8], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0xe8], eax
je 0x100445ec
mov dword [ebp - 0xf0], 1
jmp 0x100445f3
and dword [ebp - 0xf0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x298]
dec eax
mov dword [ebp - 0x1a4], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1a4]
mov dword [ebp + eax - 0x298], ecx
mov eax, dword [ebp - 0x1a4]
cmp eax, dword [ebp - 0xf0]
jg 0x1004464a
mov eax, 0xfaf14186
test eax, eax
jne 0x1004464a
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x298], 0
jne 0x1004464a
and dword [ebp - 0x1ac], 0
jmp 0x10044654
mov dword [ebp - 0x1ac], 1
mov eax, dword [ebp - 0x48]
add eax, dword [ebp - 0x1ac]
cmp eax, 0xfffffffa
jne 0x1004466e
mov dword [ebp - 0x1b4], 1
jmp 0x10044675
and dword [ebp - 0x1b4], 0
mov eax, dword [ebp - 0xf8]
cmp eax, dword [ebp - 0x1b4]
je 0x1004468f
mov dword [ebp - 0x100], 1
jmp 0x10044696
and dword [ebp - 0x100], 0
cmp dword [ebp - 0x100], 0xa1efe0c2
ja 0x100446ae
mov dword [ebp - 0x1bc], 1
jmp 0x100446b5
and dword [ebp - 0x1bc], 0
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x1bc]
jne 0x100446cc
mov dword [ebp - 0x108], 1
jmp 0x100446d3
and dword [ebp - 0x108], 0
mov eax, dword [ebp - 0x98]
cmp dword [ebp - 0x108], eax
jne 0x100446ed
mov dword [ebp - 0x1c4], 1
jmp 0x100446f4
and dword [ebp - 0x1c4], 0
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x1c4]
jne 0x1004470b
mov dword [ebp - 0x110], 1
jmp 0x10044712
and dword [ebp - 0x110], 0
mov eax, dword [ebp - 0x98]
imul eax, dword [ebp - 0x110]
cmp eax, 0xffffffff
je 0x10044730
mov dword [ebp - 0x1cc], 1
jmp 0x10044737
and dword [ebp - 0x1cc], 0
mov eax, dword [ebp - 0x1cc]
add eax, 0x9d07
cmp eax, dword [ebp - 0x48]
jne 0x10044753
mov dword [ebp - 0x118], 1
jmp 0x1004475a
and dword [ebp - 0x118], 0
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x118]
cmp eax, dword [ebp - 0x98]
jg 0x10044777
mov dword [ebp - 0x1d4], 1
jmp 0x1004477e
and dword [ebp - 0x1d4], 0
cmp dword [ebp - 0x1d4], 9
jg 0x10044793
mov dword [ebp - 0x120], 1
jmp 0x1004479a
and dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x9c]
movzx eax, word [eax]
cmp eax, 0x5a4d
je 0x100447ba
xor eax, eax
jmp 0x100455be
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x40], 0xdadf8609
mov dword [ebp - 0x7c], 0
jmp 0x100447d8
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 3
jge 0x100447ee
mov eax, dword [ebp - 0x7c]
mov dword [ebp + eax*4 - 0x35c], 0x69002fce
jmp 0x100447d1
cmp dword [ebp - 0x28], 0
je 0x100448ae
cmp dword [ebp - 0x28], 0x74bf90ed
jge 0x1004480d
mov dword [ebp - 0x1ec], 1
jmp 0x10044814
and dword [ebp - 0x1ec], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x28], eax
jle 0x10044828
mov dword [ebp - 0x1dc], 1
jmp 0x1004482f
and dword [ebp - 0x1dc], 0
mov eax, dword [ebp - 0x1dc]
sub eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x28]
jne 0x10044849
mov dword [ebp - 0x128], 1
jmp 0x10044850
and dword [ebp - 0x128], 0
cmp dword [ebp - 0x128], 0xfff6
je 0x10044868
mov dword [ebp - 0x1e4], 1
jmp 0x1004486f
and dword [ebp - 0x1e4], 0
mov eax, dword [ebp - 0x1e4]
inc eax
imul eax, eax, 0x2a17
cmp dword [ebp - 0x1ec], eax
jne 0x10044890
mov dword [ebp - 0x134], 1
jmp 0x10044897
and dword [ebp - 0x134], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x134], eax
jl 0x100448ae
mov dword [ebp - 0x194], 1
jmp 0x100448b5
and dword [ebp - 0x194], 0
cmp dword [ebp - 0x194], 6
jl 0x100448ca
mov dword [ebp - 0x23c], 1
jmp 0x100448d1
and dword [ebp - 0x23c], 0
cmp dword [ebp - 0x28], 0
je 0x10044a76
mov dword [ebp - 0x3c], 0x2401dbda
mov dword [ebp - 0x13c], 0xcfdfe92
mov dword [ebp - 0xa8], 0xef34ea88
mov dword [ebp - 0x58], 0
jmp 0x10044906
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 3
jge 0x1004491c
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x2c4], 0xfa02
jmp 0x100448ff
lea eax, [ebp - 0x13c]
push eax
push 0x1a09
lea eax, [ebp - 0x40]
push eax
push 1
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x3c]
push eax
push 1
call fcn.10042687
add esp, 0x1c
mov dword [ebp - 0x3c], 0
jmp 0x10044950
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 2
jg 0x10044a74
cmp dword [ebp - 0x13c], 1
jge 0x1004496f
mov dword [ebp - 0x1c8], 1
jmp 0x10044976
and dword [ebp - 0x1c8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2c4]
cmp dword [ebp - 0x1c8], eax
jle 0x10044997
mov dword [ebp - 0x144], 1
jmp 0x1004499e
and dword [ebp - 0x144], 0
mov eax, dword [ebp - 0xa8]
cmp dword [ebp - 0x144], eax
jne 0x100449b8
mov dword [ebp - 0x1a0], 1
jmp 0x100449bf
and dword [ebp - 0x1a0], 0
imul eax, dword [ebp - 0x1a0], 0
cmp eax, 0xad31
jg 0x100449d9
mov dword [ebp - 0x14c], 1
jmp 0x100449e0
and dword [ebp - 0x14c], 0
cmp dword [ebp - 0x14c], 1
jge 0x100449f5
mov dword [ebp - 0x1e0], 1
jmp 0x100449fc
and dword [ebp - 0x1e0], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2c4]
cmp dword [ebp - 0x1e0], eax
jg 0x10044a1c
mov dword [ebp - 0x154], 1
jmp 0x10044a23
and dword [ebp - 0x154], 0
mov eax, dword [ebp - 0xa8]
cmp eax, dword [ebp - 0x154]
jl 0x10044a3d
mov dword [ebp - 0x1a8], 1
jmp 0x10044a44
and dword [ebp - 0x1a8], 0
cmp dword [ebp - 0x1a8], 0xce2e7c52
jbe 0x10044a5c
mov dword [ebp - 0x15c], 1
jmp 0x10044a63
and dword [ebp - 0x15c], 0
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0xa8], eax
jmp 0x10044949
jmp 0x10044aab
mov dword [ebp - 0x224], 0
push 0x510a
lea eax, [ebp - 0x224]
push eax
push 1
push 0x2e29
push 1
call fcn.100427fd
add esp, 0x14
mov byte [ebp - 0x2b], 0
lea eax, [ebp - 0x2b]
push eax
call fcn.10043e05
pop ecx
mov dword [ebp - 0x40], 2
jmp 0x10044abb
mov eax, dword [ebp - 0x40]
dec eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jl 0x10044afb
mov dword [ebp - 0x60], 0
jmp 0x10044ad1
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 3
jge 0x10044ae7
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x338], 1
jmp 0x10044aca
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x338], 0
je 0x10044af9
jmp 0x10044afb
jmp 0x10044ab4
mov eax, dword [ebp - 0x9c]
mov ecx, dword [ebp + 8]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0x4c], ecx
mov eax, dword [ebp - 0x4c]
cmp dword [eax], 0x4550
je 0x10044b1c
xor eax, eax
jmp 0x100455be
mov dword [ebp - 0x130], 0xfb0b
mov dword [ebp - 0x1c], 0xb055cc25
mov dword [ebp - 0x24], 0
jmp 0x10044b3d
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 4
jge 0x10044b53
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x32c], 0x4f84b811
jmp 0x10044b36
mov dword [ebp - 0x24], 0
jmp 0x10044b63
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x10044b79
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x244], 9
jmp 0x10044b5c
cmp dword [ebp - 0x130], 0
je 0x10044b8c
call fcn.10043e67
jmp 0x10044f3e
push 1
lea ecx, [ebp - 0x200]
call fcn.1001a4ba
mov dword [ebp - 4], 2
mov dword [ebp - 0x1c0], 1
mov dword [ebp - 0x24c], 0x23579942
mov dword [ebp - 0x22c], 0xffffffff
mov dword [ebp - 0x174], 9
mov dword [ebp - 0x1e8], 0x4a53e8af
mov dword [ebp - 0x254], 0xfffffff7
push 1
push 0x189a
lea eax, [ebp - 0x200]
push eax
push 0x16bf
push 0x7823
push 0x6193
push 0x7179
push 0x7300
push 1
push 0x7709
push 0x596c
lea eax, [ebp - 0x2f4]
push eax
push 0x2966
push 1
push 0x6a2f
call fcn.10042a07
add esp, 0x3c
push 1
push 1
lea eax, [ebp - 0x1c]
push eax
call fcn.10042d79
add esp, 0xc
mov eax, 0x974e
test eax, eax
je 0x10044c61
push 0
lea ecx, [ebp - 0x200]
call fcn.1001a5a5
cmp dword [eax], 0
je 0x10044c61
mov dword [ebp - 0x1d8], 1
jmp 0x10044c68
and dword [ebp - 0x1d8], 0
push 0
lea ecx, [ebp - 0x200]
call fcn.1001a5a5
cmp dword [eax], 2
jbe 0x10044c86
mov dword [ebp - 0x1d0], 1
jmp 0x10044c8d
and dword [ebp - 0x1d0], 0
push 0
lea ecx, [ebp - 0x200]
call fcn.1001a5a5
mov ecx, dword [ebp - 0x1d0]
cmp ecx, dword [eax]
jne 0x10044cb0
mov dword [ebp - 0xc4], 1
jmp 0x10044cb7
and dword [ebp - 0xc4], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0xc4], eax
jl 0x10044cce
mov dword [ebp - 0x1b0], 1
jmp 0x10044cd5
and dword [ebp - 0x1b0], 0
mov eax, dword [ebp - 0x1c0]
cmp dword [ebp - 0x1b0], eax
jle 0x10044cf8
mov eax, 0x898d
test eax, eax
je 0x10044cf8
mov dword [ebp - 0x16c], 1
jmp 0x10044cff
and dword [ebp - 0x16c], 0
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0x24c], eax
imul eax, dword [ebp - 0x22c], 0x9791
cmp eax, dword [ebp - 0x1c]
jge 0x10044d26
mov dword [ebp - 0x1f0], 1
jmp 0x10044d2d
and dword [ebp - 0x1f0], 0
push 0
lea ecx, [ebp - 0x200]
call fcn.1001a5a5
mov ecx, dword [ebp - 0x1f0]
cmp ecx, dword [eax]
jg 0x10044d50
mov dword [ebp - 0xa0], 1
jmp 0x10044d57
and dword [ebp - 0xa0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xa0]
mov dword [ebp + eax - 0x32c], ecx
cmp dword [ebp - 0xa0], 0
jne 0x10044d85
cmp dword [ebp - 0x174], 0
jne 0x10044d85
and dword [ebp - 0x90], 0
jmp 0x10044d8f
mov dword [ebp - 0x90], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x90]
mov dword [ebp + eax - 0x244], ecx
cmp dword [ebp - 0x90], 0
je 0x10044dc7
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x32c], 0
je 0x10044dc7
mov dword [ebp - 0x234], 1
jmp 0x10044dce
and dword [ebp - 0x234], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x2f8], eax
mov eax, 0xfa36fe54
sub eax, dword [ebp - 0x1c]
imul eax, eax, 0x5b7
cmp eax, dword [ebp - 0x174]
jge 0x10044df9
mov dword [ebp - 0x1b8], 1
jmp 0x10044e00
and dword [ebp - 0x1b8], 0
cmp dword [ebp - 0x1b8], 0x62eae264
jl 0x10044e18
mov dword [ebp - 0x17c], 1
jmp 0x10044e1f
and dword [ebp - 0x17c], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x17c], eax
jg 0x10044e3c
mov eax, 0xabdc9a81
test eax, eax
jne 0x10044e3c
and dword [ebp - 0x184], 0
jmp 0x10044e46
mov dword [ebp - 0x184], 1
mov eax, dword [ebp - 0x1d8]
imul eax, dword [ebp - 0x184]
sub eax, dword [ebp - 0x1c]
cmp eax, 5
jl 0x10044e67
mov dword [ebp - 0x18c], 1
jmp 0x10044e6e
and dword [ebp - 0x18c], 0
mov eax, dword [ebp - 0x1c0]
mov ecx, dword [ebp - 0x18c]
lea eax, [ecx + eax + 0x3490]
sub eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 1
jb 0x10044e9f
mov dword [ebp - 0x12c], 1
jmp 0x10044ea6
and dword [ebp - 0x12c], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x12c], eax
jne 0x10044ebd
mov dword [ebp - 0x138], 1
jmp 0x10044ec4
and dword [ebp - 0x138], 0
mov eax, dword [ebp - 0x130]
cmp dword [ebp - 0x138], eax
jl 0x10044ede
mov dword [ebp - 0x140], 1
jmp 0x10044ee5
and dword [ebp - 0x140], 0
cmp dword [ebp - 0x140], 0x8a597fb6
jae 0x10044efd
mov dword [ebp - 0x148], 1
jmp 0x10044f04
and dword [ebp - 0x148], 0
cmp dword [ebp - 0x148], 0xffff
ja 0x10044f1c
mov dword [ebp - 0x150], 1
jmp 0x10044f23
and dword [ebp - 0x150], 0
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x254], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x200]
call fcn.1001a53e
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x1c]
mov dword [ebp + eax - 0x32c], ecx
push 1
push 0x3117
push 1
push 0x4133
lea eax, [ebp - 0x4c]
push eax
push 0x7871
lea eax, [ebp - 0x5c]
push eax
call fcn.10043119
add esp, 0x1c
push 2
lea ecx, [ebp - 0xc0]
call fcn.1001a4ba
mov dword [ebp - 4], 3
mov dword [ebp - 0x2fc], 0xbc5021c
lea eax, [ebp - 0xc0]
push eax
lea eax, [ebp - 0x44]
push eax
call fcn.10043e94
pop ecx
pop ecx
mov dword [ebp - 0x44], 0
jmp 0x10044fb0
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 4
jge 0x10044fc6
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x2a8], 0xffffffff
jmp 0x10044fa9
push 1
lea ecx, [ebp - 0xc0]
call fcn.1001a5a5
and dword [eax], 0
jmp 0x10044ffc
push 1
lea ecx, [ebp - 0xc0]
call fcn.1001a5a5
mov dword [ebp - 0x158], eax
mov eax, dword [ebp - 0x158]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x158]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0xc0]
call fcn.1001a5a5
cmp dword [eax], 0xffffffe9
jle 0x1004527e
mov dword [ebp - 0x220], 0xfffffffb
mov dword [ebp - 0x20c], 0
mov dword [ebp - 0x208], 0xda0bdbd
mov dword [ebp - 0xec], 0x282d564c
mov dword [ebp - 0x26c], 0xfffffffd
mov dword [ebp - 0x268], 0xfffffffd
mov dword [ebp - 0x264], 0xfffffffd
mov dword [ebp - 0x260], 0xfffffffd
lea ecx, [ebp - 0x89]
call fcn.1001a609
push eax
lea eax, [ebp - 0x25c]
push eax
lea eax, [ebp - 0x26c]
push eax
lea ecx, [ebp - 0x350]
call fcn.1001a64b
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x2d4]
call fcn.1001a518
mov byte [ebp - 4], 4
mov dword [ebp - 0x168], 6
push 4
pop eax
imul eax, eax, 0
mov esi, dword [ebp + eax - 0x2a8]
push 0
lea ecx, [ebp - 0xc0]
call fcn.1001a5a5
cmp esi, dword [eax]
jle 0x100450cf
mov dword [ebp - 0x160], 1
jmp 0x100450d6
and dword [ebp - 0x160], 0
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x168], eax
mov eax, dword [ebp - 0x20c]
cmp dword [ebp - 0x168], eax
je 0x100450fc
mov dword [ebp - 0x170], 1
jmp 0x10045103
and dword [ebp - 0x170], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2a8]
sub eax, dword [ebp - 0x170]
jne 0x10045131
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2a8], 0
jne 0x10045131
and dword [ebp - 0x178], 0
jmp 0x1004513b
mov dword [ebp - 0x178], 1
mov eax, dword [ebp - 0x220]
cmp dword [ebp - 0x178], eax
jl 0x10045155
mov dword [ebp - 0xc8], 1
jmp 0x1004515c
and dword [ebp - 0xc8], 0
push 1
lea ecx, [ebp - 0xc0]
call fcn.1001a5a5
mov ecx, dword [ebp - 0xc8]
cmp ecx, dword [eax]
jge 0x1004517f
mov dword [ebp - 0xcc], 1
jmp 0x10045186
and dword [ebp - 0xcc], 0
mov eax, dword [ebp - 0xec]
sub eax, dword [ebp - 0x208]
imul eax, eax, 7
cmp eax, dword [ebp - 0xcc]
je 0x100451a9
mov dword [ebp - 0xd4], 1
jmp 0x100451b0
and dword [ebp - 0xd4], 0
push 0
lea ecx, [ebp - 0xc0]
call fcn.1001a5a5
mov ecx, dword [ebp - 0xd4]
cmp ecx, dword [eax]
je 0x100451d3
mov dword [ebp - 0xdc], 1
jmp 0x100451da
and dword [ebp - 0xdc], 0
push 2
lea ecx, [ebp - 0x2d4]
call fcn.1001a5a5
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x94]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x94]
mov dword [ecx], eax
imul eax, dword [ebp - 0xdc], 0xffffffff
mov ecx, dword [ebp - 0x94]
cmp dword [ecx], eax
jle 0x1004521b
mov dword [ebp - 0xe4], 1
jmp 0x10045222
and dword [ebp - 0xe4], 0
push 1
lea ecx, [ebp - 0xc0]
call fcn.1001a5a5
mov ecx, dword [ebp - 0xe4]
cmp ecx, dword [eax]
jge 0x1004524a
xor eax, eax
inc eax
je 0x1004524a
mov dword [ebp - 0xf4], 1
jmp 0x10045251
and dword [ebp - 0xf4], 0
mov eax, dword [ebp - 0xec]
add eax, dword [ebp - 0xf4]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x2a8], eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x2d4]
call fcn.1001a53e
jmp 0x10044fd8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc0]
call fcn.1001a53e
cmp dword [ebp - 0x5c], 0
jne 0x1004529a
xor eax, eax
jmp 0x100455be
mov dword [ebp - 0x68], 2
call fcn.10043ed9
mov dword [ebp - 0x68], 0xffffffe8
jmp 0x100452b6
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0xb
je 0x10045346
push 2
lea ecx, [ebp - 0x2e8]
call fcn.1001a4ba
mov dword [ebp - 4], 5
mov dword [ebp - 0x54], 1
mov dword [ebp - 0x70], 0
jmp 0x100452eb
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 2
jge 0x10045307
push dword [ebp - 0x70]
lea ecx, [ebp - 0x2e8]
call fcn.1001a5a5
mov dword [eax], 0x1ad386cc
jmp 0x100452e4
mov dword [ebp - 0x54], 1
jmp 0x10045317
mov eax, dword [ebp - 0x54]
dec eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0
jl 0x10045324
call fcn.10043f1d
jmp 0x10045310
mov byte [ebp - 0x29], 0
lea eax, [ebp - 0x29]
push eax
call fcn.10043f4e
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2e8]
call fcn.1001a53e
jmp 0x100452af
push 1
lea eax, [ebp - 0x18]
push eax
push 0xcc5
push 0x37b0
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x304]
push eax
lea eax, [ebp - 0x5c]
push eax
push 1
push 1
call fcn.10043b2f
add esp, 0x28
mov dword [ebp - 0xfc], 0x971c1ec2
mov dword [ebp - 0x88], 0xffffffff
mov dword [ebp - 0xa4], 0xfc88eb98
mov dword [ebp - 0x38], 1
mov dword [ebp - 0x80], 0
jmp 0x100453ad
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 2
jge 0x100453c3
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0x2dc], 0x267e6aa1
jmp 0x100453a6
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x2ac], eax
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x300], eax
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x308], eax
mov eax, dword [ebp - 0x88]
sub eax, dword [ebp - 0xa4]
jne 0x10045411
push 7
pop eax
test eax, eax
jne 0x10045411
and dword [ebp - 0x104], 0
jmp 0x1004541b
mov dword [ebp - 0x104], 1
mov eax, dword [ebp - 0xa4]
cmp dword [ebp - 0x104], eax
jl 0x10045435
mov dword [ebp - 0x10c], 1
jmp 0x1004543c
and dword [ebp - 0x10c], 0
mov eax, dword [ebp - 0xa4]
cmp dword [ebp - 0x10c], eax
jle 0x10045458
or eax, 0xffffffff
jne 0x10045458
and dword [ebp - 0x114], 0
jmp 0x10045462
mov dword [ebp - 0x114], 1
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x38], 0
jmp 0x1004547b
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 1
jg 0x10045491
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x2dc], 0x5158018d
jmp 0x10045474
push 0
push 0x7891
lea eax, [ebp + 8]
push eax
push 1
push 0x29b0
push 0x4187
push 0x1f7
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.10043c3b
add esp, 0x24
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x230]
push eax
call fcn.10043f88
add esp, 0xc
push 1
lea eax, [ebp - 0x230]
push eax
push 0x2ea
push 1
lea eax, [ebp - 0x18]
push eax
push 0x40d0
push 0x40b7
push 0x34b2
push 0x41ce
call fcn.10043c3b
add esp, 0x24
push dword [ebp - 0x18]
call fcn.1003e4bf
pop ecx
test eax, eax
jne 0x10045518
xor eax, eax
jmp 0x100455be
push dword [ebp - 0x18]
push 0x56a3
push 0x93d
push 0x3159
push 0x2826
push 0xacf
push 0x3c22
push 0x4eab
push 1
push 0x2b3f
push 0
call fcn.10037e75
add esp, 0x2c
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
cmp dword [eax + 0x28], 0
je 0x1004559d
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x5c]
add ecx, dword [eax + 0x28]
mov dword [ebp - 0x11c], ecx
jne 0x10045571
xor eax, eax
jmp 0x100455be
push 0
push 1
push 0xdeadbeef
call dword [ebp - 0x11c]
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 0
jne 0x10045593
xor eax, eax
jmp 0x100455be
mov eax, dword [ebp - 0x18]
mov dword [eax + 0x10], 1
mov eax, dword [ebp - 0x18]
cmp dword [eax + 0x10], 0
je 0x100455b1
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x124], eax
jmp 0x100455b8
and dword [ebp - 0x124], 0
mov eax, dword [ebp - 0x124]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret