Function at 0x10041a29
Capabilities:
Contain obfuscated stackstrings
Enumerate pe sections
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100778d9
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xbe0
push esi
push edi
and dword [ebp - 0x18], 0
movzx eax, byte [ebp + 0xc]
test eax, eax
je 0x1004719e
mov eax, dword [ebp + 8]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x6dc], 0xfffffff9
mov dword [ebp - 0xa28], 0xffffffff
mov dword [ebp - 0xa74], 0xc96c7979
mov dword [ebp - 0x854], 4
mov dword [ebp - 0x710], 0x1208373b
mov dword [ebp - 0x6d4], 0x1f09a2b4
mov dword [ebp - 0x374], 0xa96950a4
mov dword [ebp - 0x960], 1
mov dword [ebp - 0x968], 0x1bf07968
mov dword [ebp - 0x970], 0xffffffff
mov dword [ebp - 0x978], 3
mov dword [ebp - 0x800], 0
mov dword [ebp - 0x110], 0xfffffff6
mov dword [ebp - 0x818], 0xfffffffd
mov dword [ebp - 0x344], 0x42
mov dword [ebp - 0x36c], 0xe9843c6b
mov dword [ebp - 0x7f8], 0xffffffff
push 2
lea ecx, [ebp - 0xa40]
call fcn.100146ad
and dword [ebp - 4], 0
mov dword [ebp - 0x5c], 0
jmp 0x10041b2a
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 3
jge 0x10041b40
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0xa94], 1
jmp 0x10041b23
mov dword [ebp - 0x5c], 0
jmp 0x10041b50
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 1
jge 0x10041b66
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x808], 0xfffffffa
jmp 0x10041b49
push 0x6378
lea eax, [ebp - 0x5c]
push eax
push 0x1110
lea eax, [ebp - 0xa40]
push eax
push 0
push 0x62f0
call fcn.1004097f
add esp, 0x18
mov eax, dword [ebp - 0x36c]
dec eax
mov dword [ebp - 0x36c], eax
mov eax, dword [ebp - 0x36c]
cmp dword [ebp - 0x374], eax
jl 0x10041bb1
mov dword [ebp - 0x414], 1
jmp 0x10041bb8
and dword [ebp - 0x414], 0
mov eax, dword [ebp - 0x110]
imul eax, dword [ebp - 0x374]
cmp dword [ebp - 0x414], eax
jge 0x10041bd9
mov dword [ebp - 0x364], 1
jmp 0x10041be0
and dword [ebp - 0x364], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x364]
mov dword [ebp + eax - 0xa94], ecx
mov eax, dword [ebp - 0x710]
cmp dword [ebp - 0x364], eax
je 0x10041c0d
mov dword [ebp - 0x6bc], 1
jmp 0x10041c14
and dword [ebp - 0x6bc], 0
mov eax, dword [ebp - 0x344]
mov dword [ebp - 0x810], eax
mov eax, dword [ebp - 0x6bc]
mov dword [ebp - 0x7f0], eax
mov eax, dword [ebp - 0x344]
dec eax
mov dword [ebp - 0x344], eax
mov eax, dword [ebp - 0x810]
cmp eax, dword [ebp - 0x7f0]
jne 0x10041c53
mov dword [ebp - 0x6c4], 1
jmp 0x10041c5a
and dword [ebp - 0x6c4], 0
mov eax, dword [ebp - 0x7f8]
cmp dword [ebp - 0x6c4], eax
jne 0x10041c7a
cmp dword [ebp - 0x374], 0
jne 0x10041c7a
and dword [ebp - 0x6cc], 0
jmp 0x10041c84
mov dword [ebp - 0x6cc], 1
mov eax, dword [ebp - 0x6cc]
mov dword [ebp - 0x6d4], eax
mov eax, dword [ebp - 0x800]
cmp dword [ebp - 0x6d4], eax
jl 0x10041caa
mov dword [ebp - 0x700], 1
jmp 0x10041cb1
and dword [ebp - 0x700], 0
mov dword [ebp - 0x6dc], 0xcdcb363f
mov eax, dword [ebp - 0x6dc]
cmp eax, dword [ebp - 0x700]
jg 0x10041cd5
mov dword [ebp - 0x708], 1
jmp 0x10041cdc
and dword [ebp - 0x708], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x808]
cmp dword [ebp - 0x708], eax
jle 0x10041cfd
mov dword [ebp - 0x744], 1
jmp 0x10041d04
and dword [ebp - 0x744], 0
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0x980], eax
cmp dword [ebp - 0x710], 5
jge 0x10041d4e
mov dword [ebp - 0x6f4], 0x5ca7dbc8
mov eax, dword [ebp - 0x818]
mov dword [ebp - 0x6f4], eax
lea eax, [ebp - 0x6f4]
push eax
push 0x5678
lea eax, [ebp - 0x854]
push eax
push 0
call fcn.100416c9
add esp, 0x10
jmp 0x10041d9d
mov dword [ebp - 0x110], 0
jmp 0x10041d67
mov eax, dword [ebp - 0x110]
dec eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0xfffffff2
jge 0x10041d9d
mov byte [ebp - 0xa3], 0
movzx eax, byte [ebp - 0xa3]
test eax, eax
je 0x10041d9b
push 0x2949
push 0x39ba
push 1
push 0x24c7
call fcn.1003ffcd
add esp, 0x10
jmp 0x10041d5a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa40]
call fcn.10014734
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x6f0], eax
mov eax, dword [ebp - 0x6f0]
movzx eax, word [eax]
cmp eax, 0x5a4d
je 0x10041dca
jmp 0x100471be
mov dword [ebp - 0x17c], 9
push 3
lea ecx, [ebp - 0x8b0]
call fcn.100146ad
mov dword [ebp - 4], 1
mov dword [ebp - 0x3c], 0
jmp 0x10041df8
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 3
jge 0x10041e0e
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0xaac], 0
jmp 0x10041df1
mov dword [ebp - 0x3c], 0
jmp 0x10041e1e
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 2
jge 0x10041e34
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0xac0], 9
jmp 0x10041e17
mov dword [ebp - 0x3c], 0
jmp 0x10041e44
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 3
jge 0x10041e60
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x8b0]
call fcn.10014739
mov dword [eax], 0xf8278b72
jmp 0x10041e3d
mov dword [ebp - 0x17c], 0
jmp 0x10041e79
mov eax, dword [ebp - 0x17c]
dec eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 0xfffffff5
jg 0x10042038
mov dword [ebp - 0x208], 1
mov dword [ebp - 0x68], 0xb5a5efa2
mov dword [ebp - 0x85c], 0x32c2674d
mov dword [ebp - 0x208], 2
jmp 0x10041eba
mov eax, dword [ebp - 0x208]
dec eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 0
jl 0x10041eec
mov dword [ebp - 0x68], 0xfffffffa
mov byte [ebp - 0xa6], 0
movzx eax, byte [ebp - 0xa6]
test eax, eax
je 0x10041eea
push 1
push 0x630a
call fcn.10040063
pop ecx
pop ecx
jmp 0x10041ead
mov dword [ebp - 0x68], 9
jmp 0x10041efc
mov eax, dword [ebp - 0x68]
dec eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0xffffffff
jne 0x10042033
mov dword [ebp - 0x37c], 9
mov dword [ebp - 0x704], 0x39032f82
mov dword [ebp - 0x988], 0
mov byte [ebp - 0xa8], 0
movzx eax, byte [ebp - 0xa8]
test eax, eax
je 0x10041f44
push 0xeb3
push 0
call fcn.10040b36
pop ecx
pop ecx
mov eax, dword [ebp - 0x37c]
inc eax
mov dword [ebp - 0x37c], eax
mov esi, dword [ebp - 0x37c]
push 9
pop edi
add edi, 0xeebcb174
push 4
pop eax
shl eax, 1
add edi, dword [ebp + eax - 0xaac]
neg edi
sub edi, dword [ebp - 0x704]
neg edi
push 0
lea ecx, [ebp - 0x8b0]
call fcn.10014739
sub edi, dword [eax]
sub edi, dword [ebp - 0x704]
imul eax, edi, 0xa301
mov ecx, dword [ebp - 0x68]
lea eax, [eax + ecx - 0x77c4]
imul esi, eax
cmp esi, dword [ebp - 0x68]
jle 0x10041faf
mov dword [ebp - 0x3d8], 1
jmp 0x10041fb6
and dword [ebp - 0x3d8], 0
push 0
lea ecx, [ebp - 0x8b0]
call fcn.10014739
mov ecx, dword [ebp - 0x3d8]
cmp ecx, dword [eax]
jg 0x10041fd9
mov dword [ebp - 0x6b4], 1
jmp 0x10041fe0
and dword [ebp - 0x6b4], 0
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0x6b4], eax
jl 0x10041ff7
mov dword [ebp - 0x580], 1
jmp 0x10041ffe
and dword [ebp - 0x580], 0
mov eax, dword [ebp - 0x17c]
cmp dword [ebp - 0x580], eax
jg 0x10042018
mov dword [ebp - 0x3e0], 1
jmp 0x1004201f
and dword [ebp - 0x3e0], 0
mov eax, dword [ebp - 0x68]
add eax, dword [ebp - 0x3e0]
mov dword [ebp - 0x85c], eax
jmp 0x10041ef5
jmp 0x10041e6c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x8b0]
call fcn.10014734
mov eax, dword [ebp - 0x6f0]
mov ecx, dword [ebp - 0x34]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0xdc], ecx
mov eax, dword [ebp - 0xdc]
cmp dword [eax], 0x4550
je 0x1004206c
jmp 0x100471be
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xdc]
lea eax, [ecx + eax + 0x78]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
cmp dword [eax + 4], 0
jne 0x1004208d
jmp 0x100471be
and dword [ebp - 0x38], 0
mov dword [ebp - 0x168], 0xffffffff
mov dword [ebp - 0x864], 0xa2b8ea2c
mov dword [ebp - 0x74], 0
jmp 0x100420b5
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 3
jge 0x100420cb
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0xaa0], 1
jmp 0x100420ae
mov dword [ebp - 0x74], 0
jmp 0x100420db
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 3
jge 0x100420f1
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0xbc0], 0xe9d6
jmp 0x100420d4
mov dword [ebp - 0x168], 2
jmp 0x1004210a
mov eax, dword [ebp - 0x168]
dec eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 0
jl 0x100421d1
mov dword [ebp - 0x990], 0xffffffff
mov dword [ebp - 0x958], 0x5dae5a60
mov dword [ebp - 0x9a8], 0
mov dword [ebp - 0x8c], 0
jmp 0x1004214e
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 3
jge 0x1004216a
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0xbb4], 0x7c04ccb6
jmp 0x10042141
mov dword [ebp - 0x8c], 0
jmp 0x10042183
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 4
jge 0x1004219f
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0xbec], 0xfffffff9
jmp 0x10042176
mov eax, dword [ebp - 0x168]
cmp dword [ebp + eax*4 - 0xaa0], 0
je 0x100421b1
jmp 0x100421d1
push 0x2f3
push 1
lea eax, [ebp - 0x864]
push eax
push 0x17ad
call fcn.100400cf
add esp, 0x10
jmp 0x100420fd
mov eax, dword [ebp - 0xdc]
movzx eax, word [eax + 0x14]
mov ecx, dword [ebp - 0xdc]
lea eax, [ecx + eax + 0x18]
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x170], 0xfffffffb
mov dword [ebp - 0x170], 0
jmp 0x1004220e
mov eax, dword [ebp - 0x170]
dec eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 0xfffffffa
jle 0x10042287
mov dword [ebp - 0x874], 0xc6ef
mov dword [ebp - 0x87c], 0xffffffff
mov dword [ebp - 0x86c], 0x9e95d1c5
mov byte [ebp - 0xaa], 0
movzx eax, byte [ebp - 0xaa]
test eax, eax
je 0x10042252
push 0x17d3
call dword [0x10cb62d8]
lea eax, [ebp - 0x86c]
push eax
push 0x28ab
push 0x5f28
lea eax, [ebp - 0x170]
push eax
lea eax, [ebp - 0x874]
push eax
push 0
lea eax, [ebp - 0x87c]
push eax
call fcn.10040ff1
add esp, 0x1c
jmp 0x10042201
and dword [ebp - 0x398], 0
jmp 0x100422ac
mov eax, dword [ebp - 0x398]
inc eax
mov dword [ebp - 0x398], eax
mov eax, dword [ebp - 0xa0]
add eax, 0x28
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0xdc]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x398], eax
jge 0x1004233c
mov eax, dword [ebp - 0xa0]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x3e8], eax
mov eax, dword [ebp - 0x50]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x3e8]
jb 0x10042337
mov eax, dword [ebp - 0xdc]
push dword [eax + 0x38]
mov eax, dword [ebp - 0xa0]
push dword [eax + 8]
call fcn.1003ff9e
pop ecx
pop ecx
add eax, dword [ebp - 0x3e8]
mov dword [ebp - 0x898], eax
mov eax, dword [ebp - 0x50]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x898]
jae 0x10042337
push 0x6fb0
push 0
lea eax, [ebp - 0x38]
push eax
push 0x7dd1
lea eax, [ebp - 0xa0]
push eax
push 0x27b9
push 0x28be
call fcn.10040562
add esp, 0x1c
jmp 0x1004233c
jmp 0x10042290
push 2
lea ecx, [ebp - 0x944]
call fcn.100146ad
mov dword [ebp - 4], 2
mov dword [ebp - 0x210], 0x7ca0029b
push 0xc4b
lea eax, [ebp - 0x9b0]
push eax
lea eax, [ebp - 0x944]
push eax
push 0x5fc7
push 1
call fcn.1004013c
add esp, 0x14
push 1
lea ecx, [ebp - 0x944]
call fcn.10014739
mov dword [eax], 8
mov dword [ebp - 0x210], 0xd
jmp 0x100423a8
mov eax, dword [ebp - 0x210]
dec eax
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 0xffffffe3
jge 0x100423d3
mov byte [ebp - 0xac], 0
movzx eax, byte [ebp - 0xac]
test eax, eax
je 0x100423d1
push 0xb3e
push 0
call fcn.100402ae
pop ecx
pop ecx
jmp 0x1004239b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x944]
call fcn.10014734
cmp dword [ebp - 0x38], 0
jne 0x100423ed
jmp 0x100471be
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x38]
add ecx, dword [eax]
add ecx, dword [ebp - 0x34]
mov dword [ebp - 0x14], ecx
push 2
lea ecx, [ebp - 0x920]
call fcn.100146ad
mov dword [ebp - 4], 3
mov dword [ebp - 0x194], 0x7ca0029b
mov dword [ebp - 0x1fc], 0
jmp 0x10042432
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 2
jge 0x10042454
push dword [ebp - 0x1fc]
lea ecx, [ebp - 0x920]
call fcn.10014739
mov dword [eax], 0xe469ad59
jmp 0x10042425
push 1
push 0x18f
lea eax, [ebp - 0x920]
push eax
call fcn.100401e6
add esp, 0xc
mov dword [ebp - 0x194], 0xd
jmp 0x10042483
mov eax, dword [ebp - 0x194]
dec eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 0xffffffe3
jge 0x100424b4
mov byte [ebp - 0xae], 0
movzx eax, byte [ebp - 0xae]
test eax, eax
je 0x100424b2
push 0x558d
push 0
push 0xd30
call fcn.10040892
add esp, 0xc
jmp 0x10042476
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x920]
call fcn.10014734
xor ecx, ecx
call fcn.1002c0d2
push eax
call fcn.1005f3d8
pop ecx
mov dword [ebp - 0x19c], 0
mov dword [ebp - 0x1dc], 0
jmp 0x100424f4
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 4
jge 0x10042510
mov eax, dword [ebp - 0x1dc]
mov dword [ebp + eax*4 - 0xbdc], 0x6847
jmp 0x100424e7
mov byte [ebp - 0xb0], 0
movzx eax, byte [ebp - 0xb0]
test eax, eax
je 0x1004252a
push 0
call fcn.10040d93
pop ecx
mov dword [ebp - 0x19c], 0
jmp 0x10042543
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 3
jg 0x1004257e
mov byte [ebp - 0xb2], 0
movzx eax, byte [ebp - 0xb2]
test eax, eax
je 0x1004257c
push 0x4303
push 0
push 0x2274
push 0x57fb
push 0x6181
call fcn.10040667
add esp, 0x14
jmp 0x10042536
mov byte [ebp - 0x254], 9
mov byte [ebp - 0x253], 0xd6
mov byte [ebp - 0x252], 4
mov byte [ebp - 0x251], 8
mov byte [ebp - 0x250], 7
mov byte [ebp - 0x24f], 0xe
mov byte [ebp - 0x24e], 6
mov byte [ebp - 0x24d], 7
mov byte [ebp - 0x24c], 2
mov byte [ebp - 0x24b], 6
mov byte [ebp - 0x24a], 5
mov byte [ebp - 0x249], 6
mov byte [ebp - 0x248], 1
mov byte [ebp - 0x247], 4
mov byte [ebp - 0x246], 8
mov byte [ebp - 0x245], 5
mov byte [ebp - 0x244], 3
mov byte [ebp - 0x243], 7
mov byte [ebp - 0x242], 0
mov byte [ebp - 0x241], 6
mov byte [ebp - 0x240], 0x2f
mov byte [ebp - 0x23f], 0x18
mov byte [ebp - 0x23e], 0xcf
mov byte [ebp - 0x23d], 0xa4
mov byte [ebp - 0x23c], 0xc7
mov byte [ebp - 0x23b], 0xed
mov byte [ebp - 0x23a], 0xb4
mov byte [ebp - 0x239], 0xc4
mov byte [ebp - 0x238], 0x76
mov byte [ebp - 0x237], 0xd4
mov byte [ebp - 0x236], 0xcf
mov byte [ebp - 0x235], 0xe
mov byte [ebp - 0x234], 0xb2
mov byte [ebp - 0x233], 0x16
mov byte [ebp - 0x232], 0xe2
mov byte [ebp - 0x231], 0x92
mov byte [ebp - 0x230], 7
mov byte [ebp - 0x22f], 0x18
mov byte [ebp - 0x22e], 0x6d
mov byte [ebp - 0x22d], 0x91
mov byte [ebp - 0x22c], 0x44
mov byte [ebp - 0x22b], 0x7f
mov byte [ebp - 0x22a], 0x85
mov byte [ebp - 0x229], 0x73
mov byte [ebp - 0x228], 0x5e
mov byte [ebp - 0x227], 0x99
mov byte [ebp - 0x226], 0xee
mov byte [ebp - 0x225], 0xaa
mov byte [ebp - 0x224], 0x22
mov byte [ebp - 0x223], 0xe3
mov byte [ebp - 0x222], 0xd7
mov byte [ebp - 0x221], 0x6c
mov byte [ebp - 0x220], 0x50
mov byte [ebp - 0x21f], 0xb8
mov byte [ebp - 0x21e], 0xa6
mov byte [ebp - 0x21d], 0xfb
mov byte [ebp - 0x21c], 0x91
mov byte [ebp - 0x21b], 0x7c
mov byte [ebp - 0x21a], 0xb3
mov byte [ebp - 0x219], 0xf2
mov byte [ebp - 0x218], 0xed
mov byte [ebp - 0x217], 0xe4
mov byte [ebp - 0x216], 0x4f
mov byte [ebp - 0x215], 0xc4
mov byte [ebp - 0x214], 0x8d
mov byte [ebp - 0x213], 0xa3
mov byte [ebp - 0x212], 0x13
mov byte [ebp - 0x211], 0x69
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x254]
or eax, 0xe6
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x254]
and ecx, 0xe6
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x254]
mov byte [ebp + ecx - 0x72c], al
mov dword [ebp - 0x30], 2
and dword [ebp - 0x144], 0
jmp 0x100427b0
mov eax, dword [ebp - 0x30]
inc eax
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0x44
jae 0x1004289d
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x254]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x30], eax
jne 0x100427fa
mov eax, dword [ebp - 0x30]
movzx eax, byte [ebp + eax - 0x254]
inc eax
mov dword [ebp - 0x144], eax
mov eax, dword [ebp - 0x30]
movzx eax, byte [ebp + eax - 0x254]
mov ecx, dword [ebp - 0x30]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x30], eax
jmp 0x100427a8
mov eax, dword [ebp - 0x30]
movzx eax, byte [ebp + eax - 0x253]
mov ecx, dword [ebp - 0x30]
sub ecx, dword [ebp - 0x144]
movzx ecx, byte [ebp + ecx - 0x256]
movsx ecx, byte [ebp + ecx - 0x72c]
add eax, ecx
mov ecx, dword [ebp - 0x30]
movzx ecx, byte [ebp + ecx - 0x253]
mov edx, dword [ebp - 0x30]
sub edx, dword [ebp - 0x144]
movzx edx, byte [ebp + edx - 0x256]
movsx edx, byte [ebp + edx - 0x72c]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x30]
movzx ecx, byte [ebp + ecx - 0x253]
mov edx, dword [ebp - 0x30]
sub edx, dword [ebp - 0x144]
movzx edx, byte [ebp + edx - 0x256]
movsx edx, byte [ebp + edx - 0x72c]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x30]
movzx ecx, byte [ebp + ecx - 0x254]
mov byte [ebp + ecx - 0x72c], al
push 0x121f
push 0
lea eax, [ebp - 0x144]
push eax
call fcn.10040355
add esp, 0xc
jmp 0x100427a8
xor eax, eax
inc eax
imul eax, eax, 0xa
mov byte [ebp + eax - 0x72c], 0
mov dword [ebp - 0x94], 0x8974b66
mov dword [ebp - 0x28], 0xc80f
mov dword [ebp - 0x40], 0xdfc9
mov dword [ebp - 0x7c], 0
jmp 0x100428d3
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 3
jge 0x100428e9
mov eax, dword [ebp - 0x7c]
mov dword [ebp + eax*4 - 0x340], 0x67f5ed9a
jmp 0x100428cc
mov dword [ebp - 0x7c], 0
jmp 0x100428f9
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 1
jge 0x1004290f
mov eax, dword [ebp - 0x7c]
mov dword [ebp + eax*4 - 0x814], 0xdde4e4c4
jmp 0x100428f2
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x9b8], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x9c0], eax
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 1
ja 0x1004293d
mov dword [ebp - 0x588], 1
jmp 0x10042944
and dword [ebp - 0x588], 0
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x588]
jge 0x1004295b
mov dword [ebp - 0x868], 1
jmp 0x10042962
and dword [ebp - 0x868], 0
push 4
pop eax
shl eax, 1
xor ecx, ecx
sub ecx, dword [ebp + eax - 0x340]
add ecx, 6
sub ecx, dword [ebp - 0x28]
jne 0x10042987
cmp dword [ebp - 0x28], 0
jne 0x10042987
and dword [ebp - 0x3f0], 0
jmp 0x10042991
mov dword [ebp - 0x3f0], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x340]
cmp dword [ebp - 0x3f0], eax
jle 0x100429b2
mov dword [ebp - 0x74c], 1
jmp 0x100429b9
and dword [ebp - 0x74c], 0
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x9c8], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x9d0], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x9d8], eax
mov eax, 0x6b5cfda6
test eax, eax
jne 0x100429f6
cmp dword [ebp - 0x94], 0
jne 0x100429f6
and dword [ebp - 0x658], 0
jmp 0x10042a00
mov dword [ebp - 0x658], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x340]
imul eax, dword [ebp - 0x658]
cmp eax, 0x69c1477a
jge 0x10042bf7
mov dword [ebp - 0x3b0], 0x525
mov dword [ebp - 0x660], 0x8071081b
mov byte [ebp - 0xa7], 0
lea eax, [ebp - 0xa7]
push eax
push 0x2a52
push 1
call fcn.1004023d
add esp, 0xc
mov dword [ebp - 0x94], 0
jmp 0x10042a69
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0x33
jg 0x10042bf2
mov dword [ebp - 0x590], 1
mov dword [ebp - 0x1e0], 0
jmp 0x10042a99
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 3
jge 0x10042ab5
mov eax, dword [ebp - 0x1e0]
mov dword [ebp + eax*4 - 0xab8], 0x5b4499c7
jmp 0x10042a8c
cmp dword [ebp - 0x590], 0
je 0x10042ad8
mov eax, dword [ebp - 0x3b0]
cmp dword [ebp - 0x3b0], eax
jge 0x10042ad8
mov dword [ebp - 0x3f8], 1
jmp 0x10042adf
and dword [ebp - 0x3f8], 0
mov eax, dword [ebp - 0x3f8]
neg eax
cmp dword [ebp - 0x590], eax
jge 0x10042bd0
cmp dword [ebp - 0x3b0], 0
jle 0x10042b08
mov dword [ebp - 0x400], 1
jmp 0x10042b0f
and dword [ebp - 0x400], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x340]
cmp dword [ebp - 0x400], eax
jl 0x10042b30
mov dword [ebp - 0x6c0], 1
jmp 0x10042b37
and dword [ebp - 0x6c0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x340]
cmp dword [ebp - 0x6c0], eax
jne 0x10042b58
mov dword [ebp - 0x408], 1
jmp 0x10042b5f
and dword [ebp - 0x408], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x408], eax
jle 0x10042b7d
push 0xfffffffffffffffc
pop eax
test eax, eax
je 0x10042b7d
mov dword [ebp - 0x598], 1
jmp 0x10042b84
and dword [ebp - 0x598], 0
mov eax, dword [ebp - 0x598]
sub eax, dword [ebp - 0x94]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x340]
jg 0x10042bab
mov dword [ebp - 0x410], 1
jmp 0x10042bb2
and dword [ebp - 0x410], 0
mov eax, dword [ebp - 0x410]
mov dword [ebp - 0x660], eax
cmp dword [ebp - 0x660], 0
jne 0x10042bd0
and dword [ebp - 0x418], 0
jmp 0x10042bda
mov dword [ebp - 0x418], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x418]
mov dword [ebp + eax - 0xab8], ecx
jmp 0x10042a5c
jmp 0x10043063
mov dword [ebp - 0xbc], 0x66c7
mov dword [ebp - 0x28], 0
jmp 0x10042c11
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jg 0x10043063
mov dword [ebp - 0x138], 0xffffffff
mov dword [ebp - 0x5a0], 0xffffffff
mov dword [ebp - 0x1a4], 0xf402e839
mov dword [ebp - 0x714], 1
mov dword [ebp - 0x83c], 0x5e99a55a
mov dword [ebp - 0x40], 0
jmp 0x10042c5d
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 2
jg 0x1004305e
mov dword [ebp - 0x678], 1
mov dword [ebp - 0x460], 0xb3286b00
mov eax, dword [ebp - 0x40]
cmp dword [ebp + eax*4 - 0x340], 0
je 0x10042c8d
jmp 0x1004305e
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp + eax*4 - 0x340]
mov dword [ebp - 0x9e0], eax
cmp dword [ebp - 0x94], 0
jne 0x10042cb8
cmp dword [ebp - 0xbc], 0
jne 0x10042cb8
and dword [ebp - 0x670], 0
jmp 0x10042cc2
mov dword [ebp - 0x670], 1
mov eax, dword [ebp - 0x678]
mov dword [ebp - 0x5a0], eax
cmp dword [ebp - 0x5a0], 0
jne 0x10042ce9
cmp dword [ebp - 0x28], 0
jne 0x10042ce9
mov dword [ebp - 0x420], 1
jmp 0x10042cf0
and dword [ebp - 0x420], 0
mov eax, dword [ebp - 0x1a4]
cmp dword [ebp - 0x420], eax
jne 0x10042d0a
mov dword [ebp - 0x6f8], 1
jmp 0x10042d11
and dword [ebp - 0x6f8], 0
mov eax, dword [ebp - 0xbc]
add eax, dword [ebp - 0x6f8]
imul eax, dword [ebp - 0x1a4]
cmp eax, dword [ebp - 0x138]
je 0x10042d38
mov dword [ebp - 0x428], 1
jmp 0x10042d3f
and dword [ebp - 0x428], 0
cmp dword [ebp - 0x428], 0
jne 0x10042d5a
mov eax, 0xd24a1705
test eax, eax
jne 0x10042d5a
and dword [ebp - 0x5a8], 0
jmp 0x10042d64
mov dword [ebp - 0x5a8], 1
mov eax, dword [ebp - 0xbc]
cmp dword [ebp - 0x5a8], eax
jle 0x10042d7e
mov dword [ebp - 0x7e8], 1
jmp 0x10042d85
and dword [ebp - 0x7e8], 0
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x138]
cmp dword [ebp + eax*4 - 0x340], ecx
jge 0x10042da3
mov dword [ebp - 0x430], 1
jmp 0x10042daa
and dword [ebp - 0x430], 0
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp + eax*4 - 0x340]
cmp dword [ebp - 0x430], eax
jg 0x10042dc8
mov dword [ebp - 0x668], 1
jmp 0x10042dcf
and dword [ebp - 0x668], 0
mov eax, dword [ebp - 0xbc]
cmp dword [ebp - 0x668], eax
jne 0x10042df2
mov eax, 0xc8b8afec
test eax, eax
je 0x10042df2
mov dword [ebp - 0x438], 1
jmp 0x10042df9
and dword [ebp - 0x438], 0
cmp dword [ebp - 0x438], 0x7d4e
je 0x10042e11
mov dword [ebp - 0x5b0], 1
jmp 0x10042e18
and dword [ebp - 0x5b0], 0
cmp dword [ebp - 0x5b0], 0xd28f
jg 0x10042e30
mov dword [ebp - 0x440], 1
jmp 0x10042e37
and dword [ebp - 0x440], 0
mov eax, dword [ebp - 0x440]
sub eax, dword [ebp - 0x138]
push 4
pop ecx
shl ecx, 1
imul eax, dword [ebp + ecx - 0x340]
cmp eax, dword [ebp - 0x138]
jl 0x10042e64
mov dword [ebp - 0x6c8], 1
jmp 0x10042e6b
and dword [ebp - 0x6c8], 0
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x6c8]
cmp eax, dword [ebp - 0x1a4]
je 0x10042e88
mov dword [ebp - 0x448], 1
jmp 0x10042e8f
and dword [ebp - 0x448], 0
mov eax, dword [ebp - 0xbc]
imul eax, dword [ebp - 0x448]
cmp eax, 0xffff
jb 0x10042eaf
mov dword [ebp - 0x5b8], 1
jmp 0x10042eb6
and dword [ebp - 0x5b8], 0
mov eax, dword [ebp - 0x5b8]
sub eax, dword [ebp - 0xbc]
cmp eax, 0xda0115b5
jb 0x10042ed5
mov dword [ebp - 0x450], 1
jmp 0x10042edc
and dword [ebp - 0x450], 0
cmp dword [ebp - 0x450], 0x71b0facd
jle 0x10042ef4
mov dword [ebp - 0x458], 1
jmp 0x10042efb
and dword [ebp - 0x458], 0
mov eax, dword [ebp - 0x670]
cmp eax, dword [ebp - 0x458]
jle 0x10042f15
mov dword [ebp - 0x3ac], 1
jmp 0x10042f1c
and dword [ebp - 0x3ac], 0
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x3ac]
mov dword [ebp + eax*4 - 0x340], ecx
mov eax, dword [ebp - 0x3ac]
sub eax, 0x7198
cmp eax, dword [ebp - 0x40]
jne 0x10042f48
mov dword [ebp - 0x5c0], 1
jmp 0x10042f4f
and dword [ebp - 0x5c0], 0
mov eax, dword [ebp - 0x5c0]
mov dword [ebp - 0x460], eax
mov eax, dword [ebp - 0x460]
mov dword [ebp - 0x714], eax
mov eax, dword [ebp - 0x714]
imul eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x1a4]
jg 0x10042f85
mov dword [ebp - 0x468], 1
jmp 0x10042f8c
and dword [ebp - 0x468], 0
cmp dword [ebp - 0x468], 0x9e04
je 0x10042fa4
mov dword [ebp - 0x380], 1
jmp 0x10042fab
and dword [ebp - 0x380], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x380]
mov dword [ebp + eax - 0x814], ecx
mov eax, dword [ebp - 0x138]
cmp eax, dword [ebp - 0x380]
je 0x10042fd8
mov dword [ebp - 0x5c8], 1
jmp 0x10042fdf
and dword [ebp - 0x5c8], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x5c8], eax
jge 0x10042ff6
mov dword [ebp - 0x470], 1
jmp 0x10042ffd
and dword [ebp - 0x470], 0
cmp dword [ebp - 0x470], 0xa71d4f06
jae 0x10043015
mov dword [ebp - 0x754], 1
jmp 0x1004301c
and dword [ebp - 0x754], 0
mov eax, dword [ebp - 0x678]
mov dword [ebp - 0x9e8], eax
cmp dword [ebp - 0xbc], 0
je 0x10043046
mov eax, 0x833d8312
test eax, eax
je 0x10043046
mov dword [ebp - 0x478], 1
jmp 0x1004304d
and dword [ebp - 0x478], 0
mov eax, dword [ebp - 0x478]
mov dword [ebp - 0x83c], eax
jmp 0x10042c56
jmp 0x10042c0a
lea eax, [ebp - 0x72c]
push eax
lea ecx, [ebp - 0xb78]
call fcn.1002114f
mov dword [ebp - 0x75c], eax
mov eax, dword [ebp - 0x75c]
mov dword [ebp - 0x81c], eax
mov dword [ebp - 4], 4
push 0xa
xor edx, edx
mov ecx, dword [ebp - 0x81c]
call fcn.1002c097
pop ecx
mov dword [ebp - 0x870], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb78]
call fcn.1001460f
mov dword [ebp - 0x98], 0x90197f0a
mov dword [ebp - 0x90], 0
jmp 0x100430d6
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 2
jge 0x100430f2
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0x8dc], 0xac204e2d
jmp 0x100430c9
mov dword [ebp - 0x90], 0
jmp 0x1004310b
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 2
jge 0x10043127
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0x3b8], 1
jmp 0x100430fe
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x3b8], 0
jmp 0x10043155
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3b8]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x3b8], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x3b8], 2
jge 0x1004317f
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3b8]
mov dword [ebp + eax*4 - 0x8dc], 0xfffffffb
jmp 0x1004313a
mov dword [ebp - 0x98], 1
jmp 0x10043198
mov eax, dword [ebp - 0x98]
dec eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0
jl 0x1004336b
mov dword [ebp - 0xc4], 0x1ba028ea
mov dword [ebp - 0x4a0], 1
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x9f0], eax
cmp dword [ebp - 0xc4], 0
jne 0x100431e0
mov eax, 0x811f
test eax, eax
jne 0x100431e0
and dword [ebp - 0x5d0], 0
jmp 0x100431ea
mov dword [ebp - 0x5d0], 1
mov eax, dword [ebp - 0x98]
cmp eax, dword [ebp - 0x5d0]
jne 0x10043204
mov dword [ebp - 0x480], 1
jmp 0x1004320b
and dword [ebp - 0x480], 0
cmp dword [ebp - 0x480], 0xfffffffb
jle 0x10043220
mov dword [ebp - 0x6d0], 1
jmp 0x10043227
and dword [ebp - 0x6d0], 0
mov eax, dword [ebp - 0x98]
cmp dword [ebp - 0x6d0], eax
je 0x10043241
mov dword [ebp - 0x488], 1
jmp 0x10043248
and dword [ebp - 0x488], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3b8]
cmp dword [ebp - 0x488], eax
jle 0x10043269
mov dword [ebp - 0x5d8], 1
jmp 0x10043270
and dword [ebp - 0x5d8], 0
imul eax, dword [ebp - 0x5d8], 5
cmp eax, dword [ebp - 0xc4]
jl 0x1004328b
mov dword [ebp - 0x490], 1
jmp 0x10043292
and dword [ebp - 0x490], 0
cmp dword [ebp - 0x490], 0xffffffff
jne 0x100432a7
mov dword [ebp - 0x680], 1
jmp 0x100432ae
and dword [ebp - 0x680], 0
mov eax, dword [ebp - 0xc4]
cmp dword [ebp - 0x680], eax
jg 0x100432c8
mov dword [ebp - 0x498], 1
jmp 0x100432cf
and dword [ebp - 0x498], 0
mov eax, dword [ebp - 0x98]
cmp dword [ebp - 0x498], eax
jg 0x100432e9
mov dword [ebp - 0x5e0], 1
jmp 0x100432f0
and dword [ebp - 0x5e0], 0
cmp dword [ebp - 0x5e0], 0
jne 0x10043309
push 0xfffffffffffffff6
pop eax
test eax, eax
jne 0x10043309
and dword [ebp - 0x764], 0
jmp 0x10043313
mov dword [ebp - 0x764], 1
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x9f8], eax
mov dword [ebp - 0x4a0], 0xb69c93e3
mov eax, dword [ebp - 0xc4]
cmp dword [ebp - 0x4a0], eax
jg 0x1004334c
cmp dword [ebp - 0xc4], 0
je 0x1004334c
mov dword [ebp - 0x6fc], 1
jmp 0x10043353
and dword [ebp - 0x6fc], 0
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x6fc]
mov dword [ebp + eax*4 - 0x8dc], ecx
jmp 0x1004318b
and dword [ebp - 0x1f8], 0
jmp 0x10043381
mov eax, dword [ebp - 0x1f8]
inc eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 0xb
jae 0x1004339a
mov eax, dword [ebp - 0x1f8]
mov byte [ebp + eax - 0x72c], 0
jmp 0x10043374
mov dword [ebp - 0x14c], 1
mov dword [ebp - 0x4a8], 0xffffffff
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x844], 0x65c2dd78
mov dword [ebp - 0x6d8], 8
mov dword [ebp - 0x84c], 0xf7398071
cmp dword [ebp - 0x14c], 0
je 0x100434c3
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x4a8], eax
cmp dword [ebp - 0x4a8], 0
jle 0x10043404
mov dword [ebp - 0x4b8], 1
jmp 0x1004340b
and dword [ebp - 0x4b8], 0
cmp dword [ebp - 0x84], 0x6de0184d
jne 0x10043423
mov dword [ebp - 0x5e8], 1
jmp 0x1004342a
and dword [ebp - 0x5e8], 0
mov eax, dword [ebp - 0x5e8]
mov dword [ebp - 0x844], eax
push 0xfffffffffffffff8
pop eax
test eax, eax
je 0x10043446
cmp dword [ebp - 0x14c], 0
jne 0x10043453
xor eax, eax
jne 0x10043453
and dword [ebp - 0x4b0], 0
jmp 0x1004345d
mov dword [ebp - 0x4b0], 1
cmp dword [ebp - 0x4b0], 1
jne 0x10043472
mov dword [ebp - 0x688], 1
jmp 0x10043479
and dword [ebp - 0x688], 0
mov eax, dword [ebp - 0x84]
cmp dword [ebp - 0x688], eax
jne 0x10043493
mov dword [ebp - 0x5f0], 1
jmp 0x1004349a
and dword [ebp - 0x5f0], 0
mov eax, dword [ebp - 0x14c]
add eax, dword [ebp - 0x4b8]
mov ecx, dword [ebp - 0x14c]
imul ecx, dword [ebp - 0x5f0]
cmp eax, ecx
jg 0x100434c3
mov dword [ebp - 0x4c0], 1
jmp 0x100434ca
and dword [ebp - 0x4c0], 0
mov eax, dword [ebp - 0x4c0]
mov dword [ebp - 0x6d8], eax
mov dword [ebp - 0x84], 0
jmp 0x100434ef
mov eax, dword [ebp - 0x84]
dec eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0xffffffff
jge 0x100436d0
mov dword [ebp - 0xcc], 6
mov dword [ebp - 0x388], 0xc1b0
mov dword [ebp - 0x350], 0xfffffffa
mov dword [ebp - 0x76c], 1
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0xa00], eax
mov eax, dword [ebp - 0x84]
cmp dword [ebp - 0x6d8], eax
jne 0x1004354a
mov dword [ebp - 0x4c8], 1
jmp 0x10043551
and dword [ebp - 0x4c8], 0
mov eax, dword [ebp - 0xcc]
cmp dword [ebp - 0x4c8], eax
jg 0x1004356b
mov dword [ebp - 0x5f8], 1
jmp 0x10043572
and dword [ebp - 0x5f8], 0
mov eax, dword [ebp - 0xcc]
mov ecx, dword [ebp - 0x84]
imul ecx, dword [ebp - 0x5f8]
imul eax, ecx
test eax, eax
je 0x10043593
cmp dword [ebp - 0xcc], 0
mov eax, dword [ebp - 0x388]
mov dword [ebp - 0xa08], eax
mov eax, dword [ebp - 0x388]
mov dword [ebp - 0xa10], eax
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0x350], eax
cmp dword [ebp - 0x350], 0
je 0x100435d5
cmp dword [ebp - 0x350], 0
je 0x100435d5
mov dword [ebp - 0x4d0], 1
jmp 0x100435dc
and dword [ebp - 0x4d0], 0
mov eax, dword [ebp - 0x388]
cmp dword [ebp - 0x4d0], eax
jle 0x100435f6
mov dword [ebp - 0x690], 1
jmp 0x100435fd
and dword [ebp - 0x690], 0
cmp dword [ebp - 0x690], 0x416da84b
je 0x10043615
mov dword [ebp - 0x4d8], 1
jmp 0x1004361c
and dword [ebp - 0x4d8], 0
mov eax, dword [ebp - 0xcc]
cmp dword [ebp - 0x4d8], eax
je 0x10043636
mov dword [ebp - 0x600], 1
jmp 0x1004363d
and dword [ebp - 0x600], 0
cmp dword [ebp - 0x600], 0
jg 0x10043652
mov dword [ebp - 0x4e0], 1
jmp 0x10043659
and dword [ebp - 0x4e0], 0
imul eax, dword [ebp - 0x4e0], 0xa08b
sub eax, dword [ebp - 0xcc]
cmp dword [ebp - 0xcc], eax
je 0x1004367d
mov dword [ebp - 0x70c], 1
jmp 0x10043684
and dword [ebp - 0x70c], 0
mov eax, dword [ebp - 0x70c]
sub eax, dword [ebp - 0x76c]
mov dword [ebp - 0x84c], eax
mov byte [ebp - 0xb4], 0
movzx eax, byte [ebp - 0xb4]
test eax, eax
je 0x100436cb
push 0x7b73
push 0
push 0x589c
push 0x303e
push 0xc92
push 0x84a
call fcn.10040c46
add esp, 0x18
jmp 0x100434e2
mov dword [ebp - 0x164], 0xfffffffb
mov dword [ebp - 0x164], 0
jmp 0x100436f3
mov eax, dword [ebp - 0x164]
dec eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 0xfffffffa
jle 0x1004375f
mov dword [ebp - 0x774], 0xc6ef
mov dword [ebp - 0x828], 0xffffffff
mov dword [ebp - 0x77c], 0x9e95d1c5
mov byte [ebp - 0xa1], 0
movzx eax, byte [ebp - 0xa1]
test eax, eax
je 0x10043737
push 0x17d3
call dword [0x10cb62d8]
lea eax, [ebp - 0x164]
push eax
lea eax, [ebp - 0x774]
push eax
lea eax, [ebp - 0x828]
push eax
lea eax, [ebp - 0x77c]
push eax
push 0
call fcn.10040b7b
add esp, 0x14
jmp 0x100436e6
mov byte [ebp - 0x2d0], 7
mov byte [ebp - 0x2cf], 0xf7
mov byte [ebp - 0x2ce], 9
mov byte [ebp - 0x2cd], 6
mov byte [ebp - 0x2cc], 0
mov byte [ebp - 0x2cb], 1
mov byte [ebp - 0x2ca], 6
mov byte [ebp - 0x2c9], 8
mov byte [ebp - 0x2c8], 2
mov byte [ebp - 0x2c7], 0xe
mov byte [ebp - 0x2c6], 1
mov byte [ebp - 0x2c5], 1
mov byte [ebp - 0x2c4], 5
mov byte [ebp - 0x2c3], 7
mov byte [ebp - 0x2c2], 3
mov byte [ebp - 0x2c1], 3
mov byte [ebp - 0x2c0], 0x5d
mov byte [ebp - 0x2bf], 0xed
mov byte [ebp - 0x2be], 4
mov byte [ebp - 0x2bd], 0xcc
mov byte [ebp - 0x2bc], 0x75
mov byte [ebp - 0x2bb], 0xe1
mov byte [ebp - 0x2ba], 0xed
mov byte [ebp - 0x2b9], 0xfa
mov byte [ebp - 0x2b8], 0xf7
mov byte [ebp - 0x2b7], 0xa3
mov byte [ebp - 0x2b6], 0xd6
mov byte [ebp - 0x2b5], 0xfd
mov byte [ebp - 0x2b4], 0xd8
mov byte [ebp - 0x2b3], 0xfc
mov byte [ebp - 0x2b2], 0xd3
mov byte [ebp - 0x2b1], 0x94
mov byte [ebp - 0x2b0], 0x90
mov byte [ebp - 0x2af], 0x80
mov byte [ebp - 0x2ae], 0x5d
mov byte [ebp - 0x2ad], 0xe9
mov byte [ebp - 0x2ac], 0x15
mov byte [ebp - 0x2ab], 0x34
mov byte [ebp - 0x2aa], 0xfc
mov byte [ebp - 0x2a9], 0x6b
mov byte [ebp - 0x2a8], 0xdc
mov byte [ebp - 0x2a7], 0xca
mov byte [ebp - 0x2a6], 0x96
mov byte [ebp - 0x2a5], 0xa4
mov byte [ebp - 0x2a4], 0xca
mov byte [ebp - 0x2a3], 0x2a
mov byte [ebp - 0x2a2], 0x77
mov byte [ebp - 0x2a1], 0x71
mov byte [ebp - 0x2a0], 0x45
mov byte [ebp - 0x29f], 0x10
mov byte [ebp - 0x29e], 0xf3
mov byte [ebp - 0x29d], 0x73
mov byte [ebp - 0x29c], 0x4a
mov byte [ebp - 0x29b], 1
mov byte [ebp - 0x29a], 0x26
mov byte [ebp - 0x299], 0x23
mov byte [ebp - 0x298], 0xe1
mov byte [ebp - 0x297], 0xe6
mov byte [ebp - 0x296], 0x27
mov byte [ebp - 0x295], 0xf2
mov byte [ebp - 0x294], 0x33
mov byte [ebp - 0x293], 0x7e
mov byte [ebp - 0x292], 0xd5
mov byte [ebp - 0x291], 0x50
mov byte [ebp - 0x290], 0x1d
mov byte [ebp - 0x28f], 0xf7
mov byte [ebp - 0x28e], 0x79
mov byte [ebp - 0x28d], 0x85
mov byte [ebp - 0x28c], 0xa1
mov byte [ebp - 0x28b], 0xf9
mov byte [ebp - 0x28a], 0x5f
mov byte [ebp - 0x289], 0xb6
mov byte [ebp - 0x288], 0x6e
mov byte [ebp - 0x287], 0xd7
mov byte [ebp - 0x286], 0xb7
mov byte [ebp - 0x285], 0x13
mov byte [ebp - 0x284], 0xef
mov byte [ebp - 0x283], 0x2c
mov byte [ebp - 0x282], 0xd8
mov byte [ebp - 0x281], 0xe6
mov byte [ebp - 0x280], 0x1e
mov byte [ebp - 0x27f], 0xba
mov byte [ebp - 0x27e], 0xab
mov byte [ebp - 0x27d], 0x9d
mov byte [ebp - 0x27c], 3
mov byte [ebp - 0x27b], 0xb8
mov byte [ebp - 0x27a], 0x5b
mov byte [ebp - 0x279], 0xfe
mov byte [ebp - 0x278], 0x9c
mov byte [ebp - 0x277], 0x68
mov byte [ebp - 0x276], 0xa6
mov byte [ebp - 0x275], 0x1b
mov byte [ebp - 0x274], 0xa6
mov byte [ebp - 0x273], 0x9a
mov byte [ebp - 0x272], 0xd1
mov byte [ebp - 0x271], 0xb5
mov byte [ebp - 0x270], 0xe6
mov byte [ebp - 0x26f], 0x11
mov byte [ebp - 0x26e], 0x20
mov byte [ebp - 0x26d], 0x2d
mov byte [ebp - 0x26c], 0x82
mov byte [ebp - 0x26b], 0x53
mov byte [ebp - 0x26a], 0x5d
mov byte [ebp - 0x269], 0x2c
mov byte [ebp - 0x268], 0x82
mov byte [ebp - 0x267], 0x63
mov byte [ebp - 0x266], 0x58
mov byte [ebp - 0x265], 0x1a
mov byte [ebp - 0x264], 0x90
mov byte [ebp - 0x263], 0xf2
mov byte [ebp - 0x262], 4
mov byte [ebp - 0x261], 6
mov byte [ebp - 0x260], 8
mov byte [ebp - 0x25f], 4
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x2d0]
or eax, 0xc1
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x2d0]
and ecx, 0xc1
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x2d0]
mov byte [ebp + ecx - 0x738], al
mov dword [ebp - 0x2c], 2
and dword [ebp - 0x154], 0
jmp 0x10043ad3
mov eax, dword [ebp - 0x2c]
inc eax
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0x72
jae 0x10043bba
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x2d0]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x2c], eax
jne 0x10043b1d
mov eax, dword [ebp - 0x2c]
movzx eax, byte [ebp + eax - 0x2d0]
inc eax
mov dword [ebp - 0x154], eax
mov eax, dword [ebp - 0x2c]
movzx eax, byte [ebp + eax - 0x2d0]
mov ecx, dword [ebp - 0x2c]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x2c], eax
jmp 0x10043acb
mov eax, dword [ebp - 0x2c]
movzx eax, byte [ebp + eax - 0x2cf]
mov ecx, dword [ebp - 0x2c]
sub ecx, dword [ebp - 0x154]
movzx ecx, byte [ebp + ecx - 0x2d2]
movsx ecx, byte [ebp + ecx - 0x738]
add eax, ecx
mov ecx, dword [ebp - 0x2c]
movzx ecx, byte [ebp + ecx - 0x2cf]
mov edx, dword [ebp - 0x2c]
sub edx, dword [ebp - 0x154]
movzx edx, byte [ebp + edx - 0x2d2]
movsx edx, byte [ebp + edx - 0x738]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x2c]
movzx ecx, byte [ebp + ecx - 0x2cf]
mov edx, dword [ebp - 0x2c]
sub edx, dword [ebp - 0x154]
movzx edx, byte [ebp + edx - 0x2d2]
movsx edx, byte [ebp + edx - 0x738]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x2c]
movzx ecx, byte [ebp + ecx - 0x2d0]
mov byte [ebp + ecx - 0x738], al
lea eax, [ebp - 0x154]
push eax
push 1
call fcn.100402ae
pop ecx
pop ecx
jmp 0x10043acb
xor eax, eax
inc eax
imul eax, eax, 0xa
mov byte [ebp + eax - 0x738], 0
push 4
lea ecx, [ebp - 0xa50]
call fcn.100146ad
mov dword [ebp - 4], 5
mov dword [ebp - 0x1ac], 0xfffffff8
mov dword [ebp - 0xa18], 0xffffffff
mov dword [ebp - 0xa20], 0x7ad4351c
push 1
lea eax, [ebp - 0xa50]
push eax
lea eax, [ebp - 0x954]
push eax
call fcn.100402f3
add esp, 0xc
mov dword [ebp - 0x1ac], 3
jmp 0x10043c2b
mov eax, dword [ebp - 0x1ac]
dec eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 0
jl 0x10043c50
mov dword [ebp - 0x89c], 4
push 0
lea eax, [ebp - 0x89c]
push eax
call fcn.100411e9
pop ecx
pop ecx
jmp 0x10043c1e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa50]
call fcn.10014734
lea eax, [ebp - 0x738]
push eax
lea ecx, [ebp - 0xb30]
call fcn.1002114f
mov dword [ebp - 0x784], eax
mov eax, dword [ebp - 0x784]
mov dword [ebp - 0x830], eax
mov dword [ebp - 4], 6
push 0xa
xor edx, edx
mov ecx, dword [ebp - 0x830]
call fcn.1002c097
pop ecx
mov dword [ebp - 0x78c], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb30]
call fcn.1001460f
and dword [ebp - 0x1e8], 0
jmp 0x10043cc5
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 0xb
jae 0x10043cde
mov eax, dword [ebp - 0x1e8]
mov byte [ebp + eax - 0x738], 0
jmp 0x10043cb8
push dword [ebp - 0x78c]
push dword [ebp - 0x870]
call fcn.1003d4e8
pop ecx
pop ecx
mov dword [ebp - 0x648], eax
mov dword [ebp - 0x24], 0x198a8f93
mov dword [ebp - 0x178], 0xdf100f83
mov dword [ebp - 0x358], 0
mov dword [ebp - 0x538], 0xb839b477
mov dword [ebp - 0x878], 0xb4e6b2e5
mov dword [ebp - 0x6c], 0
jmp 0x10043d36
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 2
jge 0x10043d4c
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0x204], 0x60b0ceaf
jmp 0x10043d2f
mov dword [ebp - 0x6c], 0
jmp 0x10043d5c
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 1
jge 0x10043d72
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0x640], 0x6e0a
jmp 0x10043d55
cmp dword [ebp - 0x24], 0
je 0x100443ff
mov dword [ebp - 0xd4], 0x87c4
mov dword [ebp - 0x4c], 0xd2bb650e
mov dword [ebp - 0x20c], 0x497d6a58
mov dword [ebp - 0x24], 0
jmp 0x10043da7
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0x39
jle 0x100440ee
mov dword [ebp - 0x20], 0x6f6dd8d1
mov byte [ebp - 0xfd], 0
lea eax, [ebp - 0xfd]
push eax
push 1
push 0x654c
call fcn.10040355
add esp, 0xc
mov dword [ebp - 0x20], 1
jmp 0x10043de5
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jl 0x100440e9
mov eax, 0xffff
test eax, eax
je 0x10043e11
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0x204], 0
je 0x10043e11
mov dword [ebp - 0x794], 1
jmp 0x10043e18
and dword [ebp - 0x794], 0
mov eax, dword [ebp - 0x24]
sub eax, 0xfff8
cmp eax, 0xfffffff7
jle 0x10043e31
mov dword [ebp - 0x4e8], 1
jmp 0x10043e38
and dword [ebp - 0x4e8], 0
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x204]
cmp dword [ebp - 0x4e8], eax
jl 0x10043e59
cmp dword [ebp - 0x20], 0
jne 0x10043e59
and dword [ebp - 0x608], 0
jmp 0x10043e63
mov dword [ebp - 0x608], 1
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x608], eax
jle 0x10043e7a
mov dword [ebp - 0x4f0], 1
jmp 0x10043e81
and dword [ebp - 0x4f0], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x4f0], eax
jge 0x10043e9e
cmp dword [ebp - 0x24], 0
je 0x10043e9e
mov dword [ebp - 0x698], 1
jmp 0x10043ea5
and dword [ebp - 0x698], 0
mov eax, dword [ebp - 0x698]
mov dword [ebp - 0xd4], eax
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0xa30], eax
cmp dword [ebp - 0x20], 0x58f8
jne 0x10043ed2
mov dword [ebp - 0x4f8], 1
jmp 0x10043ed9
and dword [ebp - 0x4f8], 0
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x204]
cmp dword [ebp - 0x4f8], eax
jg 0x10043ef7
mov dword [ebp - 0x610], 1
jmp 0x10043efe
and dword [ebp - 0x610], 0
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x204]
imul eax, dword [ebp - 0x610]
sub eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x20]
jge 0x10043f23
mov dword [ebp - 0x500], 1
jmp 0x10043f2a
and dword [ebp - 0x500], 0
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x204]
cmp eax, dword [ebp - 0x500]
jg 0x10043f48
mov dword [ebp - 0x6e0], 1
jmp 0x10043f4f
and dword [ebp - 0x6e0], 0
mov eax, dword [ebp - 0x6e0]
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0xfffffffd
jl 0x10043f6a
mov dword [ebp - 0x508], 1
jmp 0x10043f71
and dword [ebp - 0x508], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x508], eax
jge 0x10043f88
mov dword [ebp - 0x618], 1
jmp 0x10043f8f
and dword [ebp - 0x618], 0
mov eax, dword [ebp - 0x618]
sub eax, 0x629bad2c
cmp eax, 0xfff6
ja 0x10043fad
mov dword [ebp - 0x838], 1
jmp 0x10043fb4
and dword [ebp - 0x838], 0
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0xa80], eax
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0x204], ecx
jge 0x10043fde
mov eax, 0x53bdbb38
test eax, eax
jne 0x10043fde
and dword [ebp - 0x510], 0
jmp 0x10043fe8
mov dword [ebp - 0x510], 1
mov eax, dword [ebp - 0x20c]
cmp dword [ebp - 0x510], eax
jl 0x10044002
mov dword [ebp - 0x6a0], 1
jmp 0x10044009
and dword [ebp - 0x6a0], 0
cmp dword [ebp - 0x6a0], 4
jle 0x1004401e
mov dword [ebp - 0x518], 1
jmp 0x10044025
and dword [ebp - 0x518], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0x204], 0xffffffff
je 0x10044041
cmp dword [ebp - 0x4c], 0
jne 0x10044041
and dword [ebp - 0x620], 0
jmp 0x1004404b
mov dword [ebp - 0x620], 1
cmp dword [ebp - 0x620], 0xf4b
jg 0x1004406a
push 5
pop eax
test eax, eax
je 0x1004406a
mov dword [ebp - 0x520], 1
jmp 0x10044071
and dword [ebp - 0x520], 0
imul eax, dword [ebp - 0x520], 0xb69e
cmp eax, dword [ebp - 0x24]
jge 0x10044095
mov eax, 0x9b704dc
test eax, eax
je 0x10044095
mov dword [ebp - 0x6e4], 1
jmp 0x1004409c
and dword [ebp - 0x6e4], 0
mov eax, dword [ebp - 0x20c]
imul eax, dword [ebp - 0x6e4]
test eax, eax
jne 0x100440bf
cmp dword [ebp - 0xd4], 0
jne 0x100440bf
and dword [ebp - 0x528], 0
jmp 0x100440c9
mov dword [ebp - 0x528], 1
mov eax, dword [ebp - 0x528]
mov dword [ebp - 0x178], eax
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0x204], 0
je 0x100440e4
jmp 0x100440e9
jmp 0x10043dde
jmp 0x10043da0
mov dword [ebp - 0x4c], 0
jmp 0x100440fe
mov eax, dword [ebp - 0x4c]
dec eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0xffffffec
jge 0x100443fd
mov dword [ebp - 0x630], 0
mov dword [ebp - 0x6ec], 0x47006215
mov dword [ebp - 0x7ac], 0x4a2d56ab
mov dword [ebp - 0x1b4], 0
jmp 0x1004413f
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 1
jge 0x1004415b
mov eax, dword [ebp - 0x1b4]
mov dword [ebp + eax*4 - 0x7a4], 8
jmp 0x10044132
mov eax, dword [ebp - 0x358]
mov dword [ebp - 0x20c], eax
mov eax, dword [ebp - 0x4c]
neg eax
cmp eax, dword [ebp - 0x178]
jne 0x10044180
mov dword [ebp - 0x530], 1
jmp 0x10044187
and dword [ebp - 0x530], 0
mov eax, dword [ebp - 0xd4]
imul eax, dword [ebp - 0xd4]
test eax, eax
je 0x1004419f
cmp dword [ebp - 0x630], 0
mov eax, dword [ebp - 0xd4]
add eax, dword [ebp - 0x24]
jne 0x100441b9
cmp dword [ebp - 0x4c], 0
jne 0x100441b9
and dword [ebp - 0x79c], 0
jmp 0x100441c3
mov dword [ebp - 0x79c], 1
mov eax, 0xb57c19de
cmp eax, 0xffffffff
je 0x100441d9
mov dword [ebp - 0x628], 1
jmp 0x100441e0
and dword [ebp - 0x628], 0
mov eax, dword [ebp - 0xd4]
cmp dword [ebp - 0x628], eax
jge 0x100441fa
mov dword [ebp - 0x6a8], 1
jmp 0x10044201
and dword [ebp - 0x6a8], 0
mov eax, dword [ebp - 0x530]
mov dword [ebp - 0x178], eax
mov eax, dword [ebp - 0x178]
sub eax, dword [ebp - 0x6a8]
mov dword [ebp - 0x538], eax
cmp dword [ebp - 0x538], 0x15ac
jg 0x10044237
mov dword [ebp - 0x540], 1
jmp 0x1004423e
and dword [ebp - 0x540], 0
mov eax, dword [ebp - 0x630]
cmp dword [ebp - 0x540], eax
jg 0x10044258
mov dword [ebp - 0x6e8], 1
jmp 0x1004425f
and dword [ebp - 0x6e8], 0
mov eax, dword [ebp - 0x358]
cmp dword [ebp - 0x6e8], eax
jge 0x10044279
mov dword [ebp - 0x548], 1
jmp 0x10044280
and dword [ebp - 0x548], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x548], eax
jg 0x10044297
mov dword [ebp - 0x638], 1
jmp 0x1004429e
and dword [ebp - 0x638], 0
mov eax, dword [ebp - 0x358]
cmp dword [ebp - 0x638], eax
je 0x100442b8
mov dword [ebp - 0x8a4], 1
jmp 0x100442bf
and dword [ebp - 0x8a4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x204]
mov dword [ebp - 0xa88], eax
cmp dword [ebp - 0x20c], 0x4b2487f0
jle 0x100442ea
mov dword [ebp - 0x550], 1
jmp 0x100442f1
and dword [ebp - 0x550], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x550], eax
jne 0x10044308
mov dword [ebp - 0x6b0], 1
jmp 0x1004430f
and dword [ebp - 0x6b0], 0
cmp dword [ebp - 0x6b0], 0x1f6
jle 0x10044327
mov dword [ebp - 0x558], 1
jmp 0x1004432e
and dword [ebp - 0x558], 0
cmp dword [ebp - 0x558], 3
jbe 0x10044343
mov dword [ebp - 0x390], 1
jmp 0x1004434a
and dword [ebp - 0x390], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x390]
mov dword [ebp + eax - 0x7a4], ecx
cmp dword [ebp - 0x390], 0
jne 0x10044372
mov dword [ebp - 0x840], 1
jmp 0x10044379
and dword [ebp - 0x840], 0
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0xa6c], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x640]
cmp dword [ebp + eax - 0x640], ecx
jge 0x100443aa
mov dword [ebp - 0x560], 1
jmp 0x100443b1
and dword [ebp - 0x560], 0
mov eax, dword [ebp - 0x560]
mov dword [ebp - 0x6ec], eax
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x6ec], eax
jle 0x100443d4
mov dword [ebp - 0x568], 1
jmp 0x100443db
and dword [ebp - 0x568], 0
mov eax, dword [ebp - 0x7ac]
imul eax, dword [ebp - 0x568]
mov dword [ebp - 0x878], eax
mov dword [ebp - 0x178], 0xffffffff
jmp 0x100440f7
jmp 0x10044431
mov dword [ebp - 0x24], 0
jmp 0x1004440f
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jg 0x10044431
mov byte [ebp - 0xdd], 0
movzx eax, byte [ebp - 0xdd]
test eax, eax
je 0x1004442f
push 1
call fcn.100403a0
pop ecx
jmp 0x10044408
mov eax, dword [ebp - 0xdc]
mov ecx, dword [ebp - 0x648]
mov dword [eax + 8], ecx
push 0xf
push 5
call fcn.1003d4e8
pop ecx
pop ecx
add eax, dword [ebp - 0x648]
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 4], eax
and dword [ebp - 0x140], 0
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x18], 0
jbe 0x1004447c
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x140]
push eax
push 1
call fcn.100403d2
add esp, 0xc
mov dword [ebp - 0x134], 0x9f23e525
push 4
lea ecx, [ebp - 0x938]
call fcn.100146ad
mov dword [ebp - 4], 7
mov dword [ebp - 0x70], 0
jmp 0x100444aa
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 1
jge 0x100444c0
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0x130], 0xfffffff6
jmp 0x100444a3
mov dword [ebp - 0x70], 0
jmp 0x100444d0
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 4
jge 0x100444ec
push dword [ebp - 0x70]
lea ecx, [ebp - 0x938]
call fcn.10014739
mov dword [eax], 0xa7d2ae85
jmp 0x100444c9
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x130]
mov dword [ebp - 0x964], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, 0x706224ab
sub ecx, dword [ebp + eax - 0x130]
push 4
pop eax
imul eax, eax, 0
cmp ecx, dword [ebp + eax - 0x130]
je 0x1004452c
mov dword [ebp - 0x570], 1
jmp 0x10044533
and dword [ebp - 0x570], 0
mov eax, dword [ebp - 0x134]
cmp dword [ebp - 0x570], eax
je 0x10044556
cmp dword [ebp - 0x134], 0
je 0x10044556
mov dword [ebp - 0x6b8], 1
jmp 0x1004455d
and dword [ebp - 0x6b8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x130]
imul eax, dword [ebp - 0x6b8]
add eax, 6
cmp eax, 0x716b5b38
jle 0x10044587
mov dword [ebp - 0x578], 1
jmp 0x1004458e
and dword [ebp - 0x578], 0
mov eax, dword [ebp - 0x134]
cmp dword [ebp - 0x578], eax
jg 0x100445a8
mov dword [ebp - 0x650], 1
jmp 0x100445af
and dword [ebp - 0x650], 0
mov eax, dword [ebp - 0x134]
cmp dword [ebp - 0x650], eax
jne 0x100445c9
mov dword [ebp - 0x3d4], 1
jmp 0x100445d0
and dword [ebp - 0x3d4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x130]
cmp eax, dword [ebp - 0x3d4]
je 0x100445f1
mov dword [ebp - 0x3dc], 1
jmp 0x100445f8
and dword [ebp - 0x3dc], 0
mov eax, dword [ebp - 0x134]
cmp dword [ebp - 0x3dc], eax
je 0x10044612
mov dword [ebp - 0x3e4], 1
jmp 0x10044619
and dword [ebp - 0x3e4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x134]
imul ecx, dword [ebp - 0x3e4]
cmp dword [ebp + eax - 0x130], ecx
jge 0x10044659
mov byte [ebp - 0xa5], 0
push 0x3d73
push 1
push 0x719e
lea eax, [ebp - 0xa5]
push eax
call fcn.10040428
add esp, 0x10
jmp 0x10044691
mov dword [ebp - 0x95c], 0x2151
mov dword [ebp - 0x998], 0xaa5d732a
push 0
lea ecx, [ebp - 0x938]
call fcn.10014739
mov dword [ebp - 0x3ec], eax
mov eax, dword [ebp - 0x3ec]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x3ec]
mov dword [ecx], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x938]
call fcn.10014734
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 0x1c]
mov dword [ebp - 0x10], eax
push 2
lea ecx, [ebp - 0x3a8]
call fcn.100146ad
mov dword [ebp - 4], 8
mov dword [ebp - 0x54], 0xffffffff
mov dword [ebp - 0x8a0], 0x3d47941c
mov dword [ebp - 0x1bc], 0xfffffff8
mov dword [ebp - 0x7c4], 0x91f6f49c
mov dword [ebp - 0x9a0], 0xffffffff
lea eax, [ebp - 0x9f4]
push eax
push 1
lea eax, [ebp - 0x3a8]
push eax
call fcn.1004048b
add esp, 0xc
push 0
lea ecx, [ebp - 0x3a8]
call fcn.10014739
mov dword [eax], 0xfffffff3
jmp 0x1004473d
push 0
lea ecx, [ebp - 0x3a8]
call fcn.10014739
mov dword [ebp - 0x3f4], eax
mov eax, dword [ebp - 0x3f4]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x3f4]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x3a8]
call fcn.10014739
cmp dword [eax], 0xffffffe9
jne 0x10044777
mov byte [ebp - 0xbd], 0
movzx eax, byte [ebp - 0xbd]
test eax, eax
je 0x10044775
push 0xeb0
push 1
push 0x7963
call fcn.100404fb
add esp, 0xc
jmp 0x10044719
mov dword [ebp - 0x54], 0
jmp 0x10044787
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 1
jg 0x10044a19
mov dword [ebp - 0x7b4], 0x45c1
mov dword [ebp - 0x96c], 0x25d36729
mov dword [ebp - 0x38c], 0x919adb82
mov dword [ebp - 0x7bc], 0xffffffff
mov dword [ebp - 0x848], 1
mov dword [ebp - 0x360], 0x523dd972
push 1
lea ecx, [ebp - 0x3a8]
call fcn.10014739
cmp dword [eax], 0
jne 0x100448c3
cmp dword [ebp - 0x7b4], 0
jne 0x1004481b
mov esi, dword [ebp - 0x360]
push 0
lea ecx, [ebp - 0x3a8]
call fcn.10014739
add esi, dword [eax]
mov eax, dword [ebp - 0x360]
inc eax
mov dword [ebp - 0x360], eax
test esi, esi
jne 0x1004481b
and dword [ebp - 0x3fc], 0
jmp 0x10044825
mov dword [ebp - 0x3fc], 1
mov eax, dword [ebp - 0x848]
sub eax, dword [ebp - 0x54]
cmp eax, dword [ebp - 0x54]
je 0x1004483f
mov dword [ebp - 0x404], 1
jmp 0x10044846
and dword [ebp - 0x404], 0
mov eax, dword [ebp - 0x3fc]
mov dword [ebp - 0x38c], eax
mov eax, dword [ebp - 0x38c]
add eax, dword [ebp - 0x404]
jne 0x10044872
mov eax, 0xf5e4
test eax, eax
jne 0x10044872
and dword [ebp - 0x40c], 0
jmp 0x1004487c
mov dword [ebp - 0x40c], 1
mov eax, dword [ebp - 0x1bc]
cmp dword [ebp - 0x40c], eax
jge 0x10044896
mov dword [ebp - 0x3d0], 1
jmp 0x1004489d
and dword [ebp - 0x3d0], 0
mov eax, dword [ebp - 0x3d0]
mov dword [ebp - 0x1bc], eax
mov eax, dword [ebp - 0x1bc]
mov dword [ebp - 0x7bc], eax
push dword [ebp - 0x54]
lea ecx, [ebp - 0x3a8]
call fcn.10014739
imul eax, dword [ebp - 0x54], 0x4968
cmp eax, 0x5d872072
jge 0x100448e6
cmp dword [ebp - 0x8a0], 0
je 0x100448e6
mov dword [ebp - 0x41c], 1
jmp 0x100448ed
and dword [ebp - 0x41c], 0
mov eax, dword [ebp - 0x7c4]
cmp dword [ebp - 0x41c], eax
jge 0x10044907
mov dword [ebp - 0x424], 1
jmp 0x1004490e
and dword [ebp - 0x424], 0
push dword [ebp - 0x54]
lea ecx, [ebp - 0x3a8]
call fcn.10014739
mov ecx, dword [ebp - 0x424]
cmp ecx, dword [eax]
jle 0x10044932
mov dword [ebp - 0x42c], 1
jmp 0x10044939
and dword [ebp - 0x42c], 0
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x42c], eax
jl 0x10044950
mov dword [ebp - 0x434], 1
jmp 0x10044957
and dword [ebp - 0x434], 0
push dword [ebp - 0x54]
lea ecx, [ebp - 0x3a8]
call fcn.10014739
mov eax, dword [eax]
cmp eax, dword [ebp - 0x434]
jg 0x100449f4
push 3
lea ecx, [ebp - 0x8d4]
call fcn.100146ad
mov byte [ebp - 4], 9
lea eax, [ebp - 0xa44]
push eax
push 0
lea eax, [ebp - 0x8d4]
push eax
call fcn.10040ce7
add esp, 0xc
cmp dword [ebp - 0x38c], 0
je 0x100449b6
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x8d4]
call fcn.10014734
jmp 0x10044a19
lea eax, [ebp - 0x8d4]
push eax
push 1
push 0x4759
lea eax, [ebp - 0x3a8]
push eax
push 0x10ff
lea eax, [ebp - 0x1bc]
push eax
lea eax, [ebp - 0x54]
push eax
call fcn.10040562
add esp, 0x1c
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x8d4]
call fcn.10014734
jmp 0x10044a14
mov byte [ebp - 0xa9], 0
movzx eax, byte [ebp - 0xa9]
test eax, eax
je 0x10044a14
push 0x72db
push 1
call fcn.100405fa
pop ecx
pop ecx
jmp 0x10044780
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3a8]
call fcn.10014734
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 0x14]
sub eax, dword [ebp - 0x140]
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x850], 3
mov dword [ebp - 0x1f0], 0
jmp 0x10044a5d
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 3
jge 0x10044a79
mov eax, dword [ebp - 0x1f0]
mov dword [ebp + eax*4 - 0xbcc], 0xd4e7937d
jmp 0x10044a50
lea eax, [ebp - 0x850]
push eax
push 0
call fcn.10040f98
pop ecx
pop ecx
and dword [ebp - 0x15c], 0
jmp 0x10044a9f
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
mov eax, dword [ebp - 0x15c]
cmp eax, dword [ebp - 0x120]
jge 0x10044b53
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
mov eax, dword [eax + 0x14]
sub eax, dword [ecx + 0x18]
cmp dword [ebp - 0x15c], eax
jae 0x10044aeb
push 0
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x43c]
push eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x15c]
push eax
call fcn.100406d4
add esp, 0x18
jmp 0x10044b14
mov eax, dword [ebp - 0xa0]
mov eax, dword [eax + 0x14]
mov ecx, dword [ebp - 0xa0]
add eax, dword [ecx + 0x10]
push eax
mov eax, dword [ebp - 0xa0]
push dword [eax + 0x14]
call fcn.1003d4e8
pop ecx
pop ecx
mov dword [ebp - 0x43c], eax
lea eax, [ebp - 0x10]
push eax
push 1
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x43c]
push eax
call fcn.10040667
add esp, 0x14
lea eax, [ebp - 0x10]
push eax
push 0x51d0
push 0x684b
push 0
push 0x7ae4
call fcn.1004117b
add esp, 0x14
jmp 0x10044a92
push 2
lea ecx, [ebp - 0xa60]
call fcn.100146ad
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x1d8], 0xeef20fe6
mov dword [ebp - 0x1c4], 0
jmp 0x10044b8a
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 2
jge 0x10044bac
push dword [ebp - 0x1c4]
lea ecx, [ebp - 0xa60]
call fcn.10014739
mov dword [eax], 0x571177e8
jmp 0x10044b7d
mov dword [ebp - 0x1d8], 1
jmp 0x10044bc5
mov eax, dword [ebp - 0x1d8]
dec eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 0
jl 0x10044bf3
push 1
push 0x6c71
push 0x37d7
push 0x5e0
push 0x29bb
push 0x50ec
call fcn.100406d4
add esp, 0x18
jmp 0x10044bb8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa60]
call fcn.10014734
lea eax, [ebp - 0x14]
push eax
push 0x29c5
push 0
push 0x3d4e
lea eax, [ebp - 0x140]
push eax
call fcn.10041578
add esp, 0x14
mov dword [ebp - 0x118], 0xffffffff
mov dword [ebp - 0x1cc], 2
mov dword [ebp - 0x45c], 0xfffffffa
mov dword [ebp - 0x118], 6
jmp 0x10044c58
mov eax, dword [ebp - 0x118]
dec eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0xffffffee
jg 0x10044e0b
mov dword [ebp - 0x1d4], 0xa727
mov dword [ebp - 0x188], 2
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0x1d4]
push eax
lea eax, [ebp - 0x118]
push eax
push 1
lea eax, [ebp - 0x1cc]
push eax
call fcn.10040779
add esp, 0x14
cmp dword [ebp - 0x1d4], 0
je 0x10044de4
mov dword [ebp - 0x13c], 0x4b52dd86
cmp dword [ebp - 0x118], 0
je 0x10044db4
mov eax, dword [ebp - 0x1cc]
cmp dword [ebp - 0x1cc], eax
jl 0x10044cdd
mov dword [ebp - 0x7cc], 1
jmp 0x10044ce4
and dword [ebp - 0x7cc], 0
mov eax, dword [ebp - 0x1cc]
sub eax, 0x2a6f9a4d
cmp eax, dword [ebp - 0x1d4]
je 0x10044d03
mov dword [ebp - 0x444], 1
jmp 0x10044d0a
and dword [ebp - 0x444], 0
mov eax, dword [ebp - 0x188]
sub eax, dword [ebp - 0x444]
jne 0x10044d2a
cmp dword [ebp - 0x45c], 0
jne 0x10044d2a
and dword [ebp - 0x880], 0
jmp 0x10044d34
mov dword [ebp - 0x880], 1
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x974], eax
cmp dword [ebp - 0x1d4], 0xc8a0
jle 0x10044d58
mov dword [ebp - 0x44c], 1
jmp 0x10044d5f
and dword [ebp - 0x44c], 0
cmp dword [ebp - 0x44c], 6
jne 0x10044d74
mov dword [ebp - 0x454], 1
jmp 0x10044d7b
and dword [ebp - 0x454], 0
mov eax, dword [ebp - 0x13c]
add eax, dword [ebp - 0x454]
je 0x10044da7
cmp dword [ebp - 0x45c], 0
je 0x10044da7
mov eax, 0x9035a60c
test eax, eax
je 0x10044da7
mov dword [ebp - 0x464], 1
jmp 0x10044dae
and dword [ebp - 0x464], 0
mov eax, dword [ebp - 0x13c]
cmp dword [ebp - 0x188], 0
je 0x10044dca
cmp dword [ebp - 0x13c], 0
je 0x10044dc8
jmp 0x10044e0b
jmp 0x10044de2
lea eax, [ebp - 0x188]
push eax
push 1
lea eax, [ebp - 0x13c]
push eax
call fcn.10040892
add esp, 0xc
jmp 0x10044e06
mov byte [ebp - 0xc5], 0
push 0x433d
push 0
lea eax, [ebp - 0xc5]
push eax
push 0x4d75
call fcn.10041231
add esp, 0x10
jmp 0x10044c4b
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 0x18]
sub eax, dword [ebp - 0x140]
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x128], 0x184c506d
mov dword [ebp - 0x18c], 0
jmp 0x10044e40
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 2
jge 0x10044e5c
mov eax, dword [ebp - 0x18c]
mov dword [ebp + eax*4 - 0x8f4], 9
jmp 0x10044e33
mov dword [ebp - 0x128], 0
jmp 0x10044e75
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 1
jg 0x10044e9a
mov eax, dword [ebp - 0x128]
mov ecx, dword [ebp - 0x128]
mov eax, dword [ebp + eax*4 - 0x8f4]
mov dword [ebp + ecx*4 - 0x8f4], eax
jmp 0x10044e68
and dword [ebp - 0x368], 0
jmp 0x10044eb0
mov eax, dword [ebp - 0x368]
inc eax
mov dword [ebp - 0x368], eax
mov eax, dword [ebp - 0x368]
cmp eax, dword [ebp - 0x120]
jge 0x10044ee5
mov eax, dword [ebp - 0x38]
add eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x34]
and dword [ecx + eax], 0
push 1
push 0x556c
lea eax, [ebp - 0x10]
push eax
push 0x9d2
call fcn.10040907
add esp, 0x10
jmp 0x10044ea3
mov dword [ebp - 0x7d4], 0x13dd33a4
mov dword [ebp - 0x858], 4
mov dword [ebp - 0x7dc], 0x835357f4
lea eax, [ebp - 0x7d4]
push eax
push 0x5468
lea eax, [ebp - 0x858]
push eax
push 0x1d86
push 1
lea eax, [ebp - 0x7dc]
push eax
call fcn.1004097f
add esp, 0x18
mov eax, dword [ebp - 0x120]
shl eax, 2
mov ecx, dword [ebp - 0x10]
sub ecx, eax
mov eax, dword [ebp - 0x14]
mov dword [eax + 0x20], ecx
lea eax, [ebp - 0x140]
push eax
lea eax, [ebp - 0x14]
push eax
push 0
call fcn.10041601
add esp, 0xc
mov dword [ebp - 0x148], 0xa87013dc
mov dword [ebp - 0x190], 0
jmp 0x10044f78
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 4
jge 0x10044f94
mov eax, dword [ebp - 0x190]
mov dword [ebp + eax*4 - 0xb00], 0x40d7f825
jmp 0x10044f6b
mov dword [ebp - 0x148], 0
jmp 0x10044fad
cmp dword [ebp - 0x148], 3
jg 0x10045020
mov dword [ebp - 0x78], 1
mov dword [ebp - 0x78], 0
jmp 0x10044fcd
push 0x3c74
push 0xfd5
push 0x3173
push 0x734f
push 1
call fcn.10040b7b
add esp, 0x14
and dword [ebp - 0x198], 0
jmp 0x10045054
push 0x1186
push 0x24ba
push 0
call dword [0x10cb62d4]
push eax
call dword [0x10cb62bc]
push eax
call dword [0x10cb62b8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret