Function at 0x10043ea5
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10068d15
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x6c0
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x1fc], 0x46fc
mov dword [ebp - 0x3f0], 0x1000b974
cmp dword [ebp - 0x1fc], 0x471e
jle 0x10043fff
and dword [ebp - 0x14c], 0
jmp 0x10043f04
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 0x4c65
jge 0x10043fff
and dword [ebp - 0xcc], 0
jmp 0x10043f2a
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0x660e
jge 0x10043ffa
and dword [ebp - 0xe8], 0
jmp 0x10043f50
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0x4e35
jge 0x10043ff5
and dword [ebp - 0xc4], 0
jmp 0x10043f76
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0x2d4c
jge 0x10043ff0
mov eax, dword [ebp - 0xe8]
add eax, dword [ebp - 0xc4]
mov edx, dword [ebp - 0x14c]
mov ecx, dword [ebp - 0xcc]
sar edx, cl
mov ecx, eax
sar edx, cl
mov eax, edx
cdq
mov dword [ebp - 0x3a4], eax
mov dword [ebp - 0x3a0], edx
push dword [ebp - 0x3a0]
push dword [ebp - 0x3a4]
lea ecx, [ebp - 0x690]
call fcn.1000d8ea
pop ecx
pop ecx
mov dword [ebp - 0x3fc], eax
mov ecx, dword [ebp - 0x3fc]
call fcn.1001b15a
push eax
call fcn.10052776
pop ecx
lea ecx, [ebp - 0x690]
call fcn.1001b150
jmp 0x10043f69
jmp 0x10043f43
jmp 0x10043f1d
jmp 0x10043ef7
mov dword [ebp - 0xb0], 0xda115252
and dword [ebp - 4], 0
cmp dword [ebp - 0x1fc], 0x4471
jge 0x10044025
push dword [ebp - 0x3f0]
call fcn.10052776
pop ecx
jmp 0x10044041
or dword [ebp - 4], 0xffffffff
jmp 0x1004404b
mov dword [ebp - 0x124], 0
jmp 0x10044064
mov eax, dword [ebp - 0x124]
inc eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 1
jge 0x10044080
mov eax, dword [ebp - 0x124]
mov dword [ebp + eax*4 - 0x5d4], 0
jmp 0x10044057
mov dword [ebp - 0xb0], 0
jmp 0x10044099
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0
jg 0x100440e6
mov dword [ebp - 0xd4], 0x9aed23b6
mov dword [ebp - 0xd4], 0
jmp 0x100440c5
mov eax, dword [ebp - 0xd4]
dec eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0
jl 0x100440e4
mov byte [ebp - 0x48], 0
lea eax, [ebp - 0x48]
push eax
push 1
push 1
call fcn.1003ad26
add esp, 0xc
jmp 0x100440b8
jmp 0x1004408c
mov byte [ebp - 0x4d], 0
push 0x7649
push 0xe21
lea eax, [ebp - 0x4d]
push eax
push 0x95c
push 0
push 0
call fcn.1003f9eb
add esp, 0x18
and dword [ebp - 0x1c], 0
mov dword [ebp - 0x400], 0x6b0f7383
mov dword [ebp - 0x528], 0
mov dword [ebp - 0x5c8], 0xfffffff8
mov dword [ebp - 0x530], 2
mov dword [ebp - 0x408], 0x580849f8
mov dword [ebp - 0x5e8], 0xf07b4bc6
mov dword [ebp - 0x540], 0xbededb5c
push 3
lea ecx, [ebp - 0x43c]
call fcn.1001b3ab
mov dword [ebp - 4], 2
push 3
lea ecx, [ebp - 0x53c]
call fcn.1001b3ab
mov byte [ebp - 4], 3
push 0x15ff
push 0x7778
push 0
lea eax, [ebp - 0x3f8]
push eax
push 1
push 0x236b
push 1
push 0x7db3
lea eax, [ebp - 0x43c]
push eax
push 0x3191
call fcn.1003fb96
add esp, 0x28
push 0x26e7
push 0x4f32
push 0x6e2
push 1
push 0x31be
push 1
push 0x12d8
push 0x765
push 0x79fb
lea eax, [ebp - 0x3f8]
push eax
push 0x1d43
push 0x740b
lea eax, [ebp - 0x53c]
push eax
call fcn.1003ae06
add esp, 0x34
lea eax, [ebp - 0x43c]
push eax
call fcn.100432e8
pop ecx
push 0x37f0
push 0x5211
lea eax, [ebp - 0x400]
push eax
lea eax, [ebp - 0x43c]
push eax
push 0x934
lea eax, [ebp - 0x408]
push eax
push 0
push 1
push 0x74b4
call fcn.1003f37a
add esp, 0x24
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x53c]
call fcn.1001b42d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x43c]
call fcn.1001b42d
push 1
lea ecx, [ebp - 0x314]
call fcn.1001b3ab
mov dword [ebp - 4], 4
push 2
lea ecx, [ebp - 0x4ac]
call fcn.1001b3ab
mov byte [ebp - 4], 5
mov dword [ebp - 0x5d0], 0x5a9864ba
mov dword [ebp - 0x394], 0xffffffff
mov dword [ebp - 0x550], 0x725f
lea eax, [ebp - 0x314]
push eax
lea eax, [ebp - 0x410]
push eax
call fcn.1004330f
pop ecx
pop ecx
push 0x7f9f
push 0x6cbb
push 1
lea eax, [ebp - 0x410]
push eax
lea eax, [ebp - 0x4ac]
push eax
push 1
call fcn.1003b00b
add esp, 0x18
push 0
lea ecx, [ebp - 0x314]
call fcn.1001b449
mov dword [eax], 0xfffffff1
jmp 0x10044309
push 0
lea ecx, [ebp - 0x314]
call fcn.1001b449
mov dword [ebp - 0x2f0], eax
mov eax, dword [ebp - 0x2f0]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x2f0]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x314]
call fcn.1001b449
cmp dword [eax], 0xe
jg 0x10044478
mov dword [ebp - 0x58], 0xfc558bac
mov dword [ebp - 0x330], 0x3edb3952
cmp dword [ebp - 0x58], 0
je 0x1004440c
mov dword [ebp - 0x58], 1
jmp 0x1004434a
mov eax, dword [ebp - 0x58]
dec eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0
jl 0x1004440a
mov dword [ebp - 0x84], 1
mov dword [ebp - 0x398], 0x391cb4e7
mov dword [ebp - 0x84], 1
jmp 0x10044381
mov eax, dword [ebp - 0x84]
dec eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0
jl 0x10044405
mov dword [ebp - 0x358], 0x821342f3
lea eax, [ebp - 0x398]
push eax
lea eax, [ebp - 0x358]
push eax
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x4ac]
push eax
call fcn.10043357
add esp, 0x10
push 0x1c0d
push 0x5c74
push 0x5cb9
push 0x1e03
push 0x763b
push 0x72f4
push 0x61fe
push 0x1573
push 0x4e47
push 0x70c5
push 0
push 1
push 0x5148
push 0x5966
call fcn.1003ed4a
add esp, 0x38
jmp 0x10044374
jmp 0x10044343
jmp 0x10044473
mov dword [ebp - 0x32c], 0xfd07
push 1
push 0x866
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x314]
push eax
push 0x1708
lea eax, [ebp - 0x330]
push eax
push 0x14c1
push 1
push 0x1240
push 0x6a36
push 0x2ea7
push 0x1b
push 0x472e
lea eax, [ebp - 0x32c]
push eax
lea eax, [ebp - 0x394]
push eax
push 0x5ec
push 1
push 0x2c64
call fcn.1003b721
add esp, 0x48
jmp 0x100442e5
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x4ac]
call fcn.1001b42d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x314]
call fcn.1001b42d
mov dword [ebp - 0x60], 0xffffffff
mov dword [ebp - 0x164], 0
jmp 0x100444b6
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 2
jge 0x100444d2
mov eax, dword [ebp - 0x164]
mov dword [ebp + eax*4 - 0x578], 0
jmp 0x100444a9
cmp dword [ebp - 0x60], 0
je 0x100444f3
mov byte [ebp - 0x49], 0
movzx eax, byte [ebp - 0x49]
test eax, eax
je 0x100444f1
push 0x7e8
push 0
call dword [sym.imp.USER32.dll_CharUpperBuffW]
jmp 0x1004451b
mov dword [ebp - 0x60], 0
jmp 0x10044503
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0x20
jle 0x1004451b
mov eax, dword [ebp - 0x60]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x578], eax
jmp 0x100444fc
lea eax, [ebp + 8]
push eax
lea eax, [ebp - 0x1b4]
push eax
call fcn.10015c5d
pop ecx
pop ecx
mov eax, dword [ebp - 0x1b4]
movzx eax, word [eax]
cmp eax, 0x5a4d
je 0x100446fe
push 3
lea ecx, [ebp - 0x54c]
call fcn.1001b3ab
mov dword [ebp - 4], 6
mov dword [ebp - 0x12c], 0xf57a7c20
mov dword [ebp - 0xdc], 0
jmp 0x10044578
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 3
jge 0x1004459a
push dword [ebp - 0xdc]
lea ecx, [ebp - 0x54c]
call fcn.1001b449
mov dword [eax], 0x77862fd4
jmp 0x1004456b
mov dword [ebp - 0x12c], 2
jmp 0x100445b3
mov eax, dword [ebp - 0x12c]
dec eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0
jl 0x10044608
mov dword [ebp - 0xe4], 0x8974b66
mov dword [ebp - 0xe4], 2
jmp 0x100445df
mov eax, dword [ebp - 0xe4]
dec eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0
jl 0x100445f8
mov byte [ebp - 0x41], 0
lea eax, [ebp - 0x41]
push eax
call fcn.100434e9
pop ecx
jmp 0x100445d2
mov byte [ebp - 0x42], 0
lea eax, [ebp - 0x42]
push eax
call fcn.1004351e
pop ecx
jmp 0x100445a6
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x54c]
call fcn.1001b42d
mov dword [ebp - 0x2e8], 0x4cf0
mov dword [ebp - 0x334], 0x1000b9d0
cmp dword [ebp - 0x2e8], 0x4ffe
jle 0x100446ae
and dword [ebp - 0x154], 0
jmp 0x1004464d
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 0x68ab
jge 0x100446ae
and dword [ebp - 0xec], 0
jmp 0x1004466f
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0x63f5
jge 0x100446ac
mov eax, dword [ebp - 0x154]
and eax, dword [ebp - 0xec]
cdq
mov dword [ebp - 0x3b0], eax
mov dword [ebp - 0x3ac], edx
push dword [ebp - 0x3ac]
push dword [ebp - 0x3b0]
mov ecx, 0x106126b8
call fcn.1001b17a
jmp 0x10044662
jmp 0x10044640
xor eax, eax
jmp 0x10046f6a
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x4a0], 0xfffffffd
mov dword [ebp - 0x49c], 0xfffffffd
mov dword [ebp - 0x498], 0xfffffffd
mov dword [ebp - 0x494], 0xfffffffd
lea ecx, [ebp - 0x1b5]
call fcn.1001b458
push eax
lea eax, [ebp - 0x490]
push eax
lea eax, [ebp - 0x4a0]
push eax
lea ecx, [ebp - 0x63c]
call fcn.1001b45b
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x628]
call fcn.1001b407
mov dword [ebp - 4], 9
mov dword [ebp - 0x134], 0
jmp 0x10044782
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 4
jge 0x1004479e
mov eax, dword [ebp - 0x134]
mov dword [ebp + eax*4 - 0x61c], 0
jmp 0x10044775
cmp dword [ebp - 0x80], 0
je 0x10044877
mov dword [ebp - 0x48c], 5
mov dword [ebp - 0x488], 5
mov dword [ebp - 0x484], 5
mov dword [ebp - 0x480], 5
lea ecx, [ebp - 0x1a9]
call fcn.1001b458
push eax
lea eax, [ebp - 0x47c]
push eax
lea eax, [ebp - 0x48c]
push eax
lea ecx, [ebp - 0x644]
call fcn.1001b45b
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x55c]
call fcn.1001b407
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x80], 0
jmp 0x10044819
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 3
jg 0x10044866
mov byte [ebp - 0x4e], 0
lea eax, [ebp - 0x4e]
push eax
call fcn.10043547
pop ecx
lea eax, [ebp - 0x80]
push eax
push 0x717b
push 0x283d
push 1
lea eax, [ebp - 0x55c]
push eax
push 1
push 0x13f
push 0x25fe
push 0
push 0x2750
push 0x2476
call fcn.10042151
add esp, 0x2c
jmp 0x10044812
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x55c]
call fcn.1001b42d
jmp 0x10044885
mov byte [ebp - 0x44], 0
lea eax, [ebp - 0x44]
push eax
call fcn.1004359a
pop ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x61c]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x61c], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x628]
call fcn.1001b42d
push 1
lea eax, [ebp - 0x1b4]
push eax
push 0x58ff
push 0x6160
push 0x1deb
push 1
lea eax, [ebp - 0x8c]
push eax
push 0x42b8
lea eax, [ebp + 8]
push eax
push 0x3f93
push 1
push 0x3d40
push 0x4c8c
call fcn.1003dcff
add esp, 0x34
mov eax, dword [ebp - 0x8c]
cmp dword [eax], 0x4550
je 0x10045170
push 2
lea ecx, [ebp - 0x3e0]
call fcn.1001b3ab
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x28], 0
jmp 0x10044928
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jge 0x10044944
push dword [ebp - 0x28]
lea ecx, [ebp - 0x3e0]
call fcn.1001b449
mov dword [eax], 0x342eb90d
jmp 0x10044921
mov dword [ebp - 0x28], 0
jmp 0x10044954
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 4
jge 0x1004496a
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x430], 0xffffffff
jmp 0x1004494d
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x430], 0
jmp 0x10044998
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x430]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x430], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x430], 1
jg 0x10044d17
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x98], 7
mov dword [ebp - 0x74], 0xffff
mov dword [ebp - 0xf4], 0
jmp 0x100449dd
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 4
jge 0x100449f9
mov eax, dword [ebp - 0xf4]
mov dword [ebp + eax*4 - 0x65c], 0x2dafbbd0
jmp 0x100449d0
mov dword [ebp - 0x2c], 0
jmp 0x10044a09
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jg 0x10044a2f
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x430]
lea ecx, [ebp - 0x3e0]
call fcn.1001b449
mov dword [eax], 0x1a9565e0
jmp 0x10044a02
mov dword [ebp - 0x2c], 0
jmp 0x10044a3f
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jg 0x10044d12
mov eax, dword [ebp - 0x74]
dec eax
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x98], 1
jmp 0x10044a69
mov eax, dword [ebp - 0x98]
dec eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0
jl 0x10044d0d
mov dword [ebp - 0x1c8], 0x7b1b
mov dword [ebp - 0x40c], 0x1000b9e8
cmp dword [ebp - 0x1c8], 0x7c63
jle 0x10044b74
and dword [ebp - 0x174], 0
jmp 0x10044ab0
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 0x63a8
jge 0x10044b74
and dword [ebp - 0xfc], 0
jmp 0x10044ad6
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0x5b96
jge 0x10044b6f
and dword [ebp - 0x13c], 0
jmp 0x10044afc
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0x327f
jge 0x10044b6a
and dword [ebp - 0x104], 0
jmp 0x10044b1e
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0xd59
jge 0x10044b68
mov eax, dword [ebp - 0x174]
imul eax, dword [ebp - 0xfc]
and eax, dword [ebp - 0x13c]
or eax, dword [ebp - 0x104]
cdq
mov dword [ebp - 0x3bc], eax
mov dword [ebp - 0x3b8], edx
push dword [ebp - 0x3b8]
push dword [ebp - 0x3bc]
mov ecx, 0x106126b8
call fcn.1001b17a
jmp 0x10044b11
jmp 0x10044aef
jmp 0x10044ac9
jmp 0x10044aa3
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x3e0]
call fcn.1001b449
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x430]
mov eax, dword [ebp + eax*4 - 0x658]
mov dword [ebp - 0x604], eax
imul esi, dword [ebp - 0x98], 5
push 1
lea ecx, [ebp - 0x3e0]
call fcn.1001b449
mov dword [eax], esi
mov byte [ebp - 4], 0xc
cmp dword [ebp - 0x1c8], 0x79f1
jge 0x10044bd2
mov edx, dword [ebp - 0x40c]
mov ecx, 0x106126b8
call fcn.1001d6f2
jmp 0x10044bee
mov dword [ebp - 4], 0xb
jmp 0x10044bfe
mov dword [ebp - 0x74], 0
jmp 0x10044c0e
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 1
jg 0x10044d08
mov dword [ebp - 0x15c], 1
mov dword [ebp - 0x15c], 0
jmp 0x10044c3b
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 1
jg 0x10044d03
push 3
lea ecx, [ebp - 0x420]
call fcn.1001b3ab
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x10c], 0
jmp 0x10044c72
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 3
jge 0x10044c94
push dword [ebp - 0x10c]
lea ecx, [ebp - 0x420]
call fcn.1001b449
mov dword [eax], 0xa01c77dc
jmp 0x10044c65
push 1
lea ecx, [ebp - 0x420]
call fcn.1001b449
mov dword [eax], 3
jmp 0x10044ccd
push 1
lea ecx, [ebp - 0x420]
call fcn.1001b449
mov dword [ebp - 0x260], eax
mov eax, dword [ebp - 0x260]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x260]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x420]
call fcn.1001b449
cmp dword [eax], 0
jl 0x10044cef
mov byte [ebp - 0x46], 0
lea eax, [ebp - 0x46]
push eax
call fcn.100435cd
pop ecx
jmp 0x10044ca9
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x420]
call fcn.1001b42d
jmp 0x10044c2e
jmp 0x10044c07
jmp 0x10044a5c
jmp 0x10044a38
jmp 0x1004497d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3e0]
call fcn.1001b42d
push 4
lea ecx, [ebp - 0x2fc]
call fcn.1001b3ab
mov dword [ebp - 4], 0xf
push 3
lea ecx, [ebp - 0x308]
call fcn.1001b3ab
mov byte [ebp - 4], 0x10
lea eax, [ebp - 0x6c]
push eax
push 0x6d70
lea eax, [ebp - 0x2fc]
push eax
push 1
push 1
push 0x3b81
call fcn.1003df9f
add esp, 0x18
mov dword [ebp - 0x6c], 0
jmp 0x10044d7c
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 1
jge 0x10044d8f
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0x38], 0x252cb136
jmp 0x10044d75
lea eax, [ebp - 0x6c]
push eax
push 0x5200
push 0x7158
push 0
lea eax, [ebp - 0x308]
push eax
push 0
call fcn.100429fb
add esp, 0x18
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x38], 3
jmp 0x10044dd5
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x38]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x38], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x38], 0
jl 0x10044e00
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x38]
lea ecx, [ebp - 0x2fc]
call fcn.1001b449
cmp dword [eax], 0
je 0x10044dfe
jmp 0x10044e00
jmp 0x10044dc0
push 1
lea ecx, [ebp - 0x2fc]
call fcn.1001b449
cmp dword [eax], 0x42f58f7b
jg 0x10044e21
mov dword [ebp - 0x1d0], 1
jmp 0x10044e28
and dword [ebp - 0x1d0], 0
push 0
lea ecx, [ebp - 0x2fc]
call fcn.1001b449
mov ecx, dword [ebp - 0x1d0]
cmp ecx, dword [eax]
jl 0x10044e4b
mov dword [ebp - 0x33c], 1
jmp 0x10044e52
and dword [ebp - 0x33c], 0
push 1
lea ecx, [ebp - 0x2fc]
call fcn.1001b449
mov eax, 0xfff6
cmp eax, 0xd9ba
jbe 0x10044e77
mov dword [ebp - 0x2a8], 1
jmp 0x10044e7e
and dword [ebp - 0x2a8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x38]
cmp dword [ebp - 0x2a8], eax
jge 0x10044e9c
mov dword [ebp - 0x1d8], 1
jmp 0x10044ea3
and dword [ebp - 0x1d8], 0
cmp dword [ebp - 0x1d8], 0x5261fc42
je 0x10044ebb
mov dword [ebp - 0x268], 1
jmp 0x10044ec2
and dword [ebp - 0x268], 0
mov eax, dword [ebp - 0x268]
inc eax
je 0x10044f68
mov dword [ebp - 0x144], 0xfffffffd
mov dword [ebp - 0x1e0], 0
mov dword [ebp - 0x144], 0
jmp 0x10044efc
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 0x13
jle 0x10044f63
push 0x27cd
push 0x5877
push 0x3681
push 0x6dae
push 0x7252
push 0x6244
push 1
push 0x61e4
push 0x65ec
lea eax, [ebp - 0x1e0]
push eax
push 0xaf9
push 1
push 0x161b
push 0x939
push 0x59d8
call fcn.1003e48b
add esp, 0x3c
lea eax, [ebp - 0x1e0]
push eax
call fcn.1004371d
pop ecx
jmp 0x10044eef
jmp 0x1004514b
mov dword [ebp - 0x40], 1
push 0
lea ecx, [ebp - 0x308]
call fcn.1001b449
mov dword [ebp - 0x18c], eax
mov eax, dword [ebp - 0x18c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x18c]
mov ecx, dword [ecx]
inc ecx
mov edx, dword [ebp - 0x18c]
mov dword [edx], ecx
test eax, eax
jne 0x100450ab
push 0
lea ecx, [ebp - 0x308]
call fcn.1001b449
cmp dword [eax], 0x36ea
je 0x10044fc4
mov dword [ebp - 0x1e8], 1
jmp 0x10044fcb
and dword [ebp - 0x1e8], 0
cmp dword [ebp - 0x40], 0
je 0x10045000
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x38]
mov dword [ebp - 0x588], eax
push 0
lea ecx, [ebp - 0x308]
call fcn.1001b449
cmp dword [ebp - 0x40], 0
je 0x10045000
mov dword [ebp - 0x2b0], 1
jmp 0x10045007
and dword [ebp - 0x2b0], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x2b0], eax
jl 0x10045030
push 0
lea ecx, [ebp - 0x2fc]
call fcn.1001b449
cmp dword [eax], 0
je 0x10045030
mov dword [ebp - 0x270], 1
jmp 0x10045037
and dword [ebp - 0x270], 0
mov eax, dword [ebp - 0x1e8]
cmp eax, dword [ebp - 0x270]
jne 0x10045051
mov dword [ebp - 0x1f0], 1
jmp 0x10045058
and dword [ebp - 0x1f0], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x1f0], eax
jl 0x1004506f
mov dword [ebp - 0x2b4], 1
jmp 0x10045076
and dword [ebp - 0x2b4], 0
push 0
lea ecx, [ebp - 0x308]
call fcn.1001b449
mov ecx, dword [ebp - 0x2b4]
sub ecx, dword [eax]
jne 0x1004509f
push 0
lea ecx, [ebp - 0x308]
call fcn.1001b449
cmp dword [eax], 0
je 0x100450ab
mov dword [ebp - 0x1f8], 1
jmp 0x100450b2
and dword [ebp - 0x1f8], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x1f8], eax
jg 0x100450cf
mov eax, 0xc3dc
test eax, eax
jne 0x100450cf
and dword [ebp - 0x278], 0
jmp 0x100450d9
mov dword [ebp - 0x278], 1
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x278]
lea eax, [ecx + eax + 0x70055833]
cmp eax, 1
jne 0x100450fa
mov dword [ebp - 0x200], 1
jmp 0x10045101
and dword [ebp - 0x200], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x200], eax
je 0x10045118
mov dword [ebp - 0x2e4], 1
jmp 0x1004511f
and dword [ebp - 0x2e4], 0
cmp dword [ebp - 0x2e4], 9
jg 0x10045134
mov dword [ebp - 0x208], 1
jmp 0x1004513b
and dword [ebp - 0x208], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x208]
mov dword [ebp + eax - 0x38], ecx
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x308]
call fcn.1001b42d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2fc]
call fcn.1001b42d
xor eax, eax
jmp 0x10046f6a
mov dword [ebp - 0x1a4], 0x9bf3
mov dword [ebp - 0x7c], 2
mov dword [ebp - 0x90], 0xfffffff8
mov dword [ebp - 0x16c], 0xb143e95a
mov dword [ebp - 0x194], 0xb1af9d66
mov dword [ebp - 0x34c], 0x90ae
mov dword [ebp - 0x114], 0
jmp 0x100451c2
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 2
jge 0x100451de
mov eax, dword [ebp - 0x114]
mov dword [ebp + eax*4 - 0x564], 0xfffffffa
jmp 0x100451b5
push 0x27c2
push 1
push 0
call fcn.100419a2
add esp, 0xc
cmp dword [ebp - 0x1a4], 0
je 0x10045332
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x16c], eax
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 0xa22e
jg 0x1004523e
mov dword [ebp - 0x210], 1
jmp 0x10045245
and dword [ebp - 0x210], 0
mov eax, dword [ebp - 0x7c]
cmp eax, dword [ebp - 0x7c]
jg 0x10045259
mov dword [ebp - 0x39c], 1
jmp 0x10045260
and dword [ebp - 0x39c], 0
mov eax, dword [ebp - 0x194]
add eax, 0xc80a
cmp eax, 1
je 0x1004527c
mov dword [ebp - 0x344], 1
jmp 0x10045283
and dword [ebp - 0x344], 0
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x5d8], eax
cmp dword [ebp - 0x1a4], 0xcef3
jle 0x100452a7
mov dword [ebp - 0x3ec], 1
jmp 0x100452ae
and dword [ebp - 0x3ec], 0
cmp dword [ebp - 0x7c], 0xffff
jbe 0x100452c3
mov dword [ebp - 0x280], 1
jmp 0x100452ca
and dword [ebp - 0x280], 0
imul eax, dword [ebp - 0x280], 0xcf0a
cmp eax, dword [ebp - 0x194]
jl 0x100452e8
mov dword [ebp - 0x2bc], 1
jmp 0x100452ef
and dword [ebp - 0x2bc], 0
mov eax, dword [ebp - 0x210]
add eax, dword [ebp - 0x2bc]
cmp eax, dword [ebp - 0x90]
jge 0x1004530f
mov dword [ebp - 0x218], 1
jmp 0x10045316
and dword [ebp - 0x218], 0
mov eax, dword [ebp - 0x194]
cmp dword [ebp - 0x218], eax
jg 0x1004532b
cmp dword [ebp - 0x90], 0
cmp dword [ebp - 0x7c], 0x7935db5a
mov eax, dword [ebp - 0x34c]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x564], eax
push 0x672a
push dword [ebp - 0x8c]
push 0x797a
push 0x7ff1
push 0x5578
push 1
lea eax, [ebp - 0x130]
push eax
push 0x9d0
push 0x1830
push 0x25b4
push 0x2be2
push 1
push 0x7749
push 0x235d
push 1
push 0x2f8f
call fcn.1002edf0
add esp, 0x40
mov dword [ebp - 0x478], 0xfff7
mov dword [ebp - 0x474], 0xfff7
mov dword [ebp - 0x470], 0xfff7
mov dword [ebp - 0x46c], 0xfff7
lea ecx, [ebp - 0x179]
call fcn.1001b458
push eax
lea eax, [ebp - 0x468]
push eax
lea eax, [ebp - 0x478]
push eax
lea ecx, [ebp - 0x664]
call fcn.1001b45b
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x448]
call fcn.1001b407
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x68], 1
mov dword [ebp - 0x70], 0xfffffffb
mov dword [ebp - 0x354], 0x7308f472
mov dword [ebp - 0xa0], 0xcacff8ee
mov dword [ebp - 0x464], 1
mov dword [ebp - 0x460], 1
mov dword [ebp - 0x45c], 1
mov dword [ebp - 0x458], 1
lea ecx, [ebp - 0x181]
call fcn.1001b458
push eax
lea eax, [ebp - 0x454]
push eax
lea eax, [ebp - 0x464]
push eax
lea ecx, [ebp - 0x64c]
call fcn.1001b45b
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x570]
call fcn.1001b407
mov byte [ebp - 4], 0x12
mov dword [ebp - 0x68], 3
jmp 0x1004548e
mov eax, dword [ebp - 0x68]
dec eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
jl 0x100456ab
mov dword [ebp - 0x24], 1
mov dword [ebp - 0x78], 0x15747814
mov dword [ebp - 0x64], 0x60edac7a
mov dword [ebp - 0xbc], 0
jmp 0x100454c6
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 1
jge 0x100454e2
mov eax, dword [ebp - 0xbc]
mov dword [ebp + eax*4 - 0x598], 1
jmp 0x100454b9
mov dword [ebp - 0x24], 0
jmp 0x100454f2
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jg 0x1004555c
mov dword [ebp - 0x5fc], 0x6715
mov dword [ebp - 0x5a8], 0
mov dword [ebp - 0xc0], 0
jmp 0x10045525
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 2
jge 0x10045541
mov eax, dword [ebp - 0xc0]
mov dword [ebp + eax*4 - 0x66c], 0xfffffff7
jmp 0x10045518
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x448]
push eax
call fcn.10043734
pop ecx
pop ecx
jmp 0x100454eb
mov dword [ebp - 0x24], 3
jmp 0x1004556c
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jl 0x100456a6
mov dword [ebp - 0x35c], 0x337672a6
mov dword [ebp - 0x404], 0x18227fd
mov dword [ebp - 0x64], 0
jmp 0x1004559a
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 3
jg 0x10045651
mov dword [ebp - 0x3a8], 0xfffc
mov dword [ebp - 0xa0], 0
jmp 0x100455c7
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 3
jg 0x1004564c
mov dword [ebp - 0x78], 0
jmp 0x100455e0
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0
jg 0x10045647
mov dword [ebp - 0x70], 3
jmp 0x100455f6
mov eax, dword [ebp - 0x70]
dec eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
jl 0x10045637
push 0x5028
lea eax, [ebp - 0x70]
push eax
push 0xa99
push 0x1199
push 1
lea eax, [ebp - 0x448]
push eax
push 1
lea eax, [ebp - 0x78]
push eax
push 1
call fcn.1003eb13
add esp, 0x24
lea eax, [ebp - 0x3a8]
push eax
call fcn.1004376b
pop ecx
jmp 0x100455ef
mov byte [ebp - 0x4a], 0
lea eax, [ebp - 0x4a]
push eax
call fcn.10043784
pop ecx
jmp 0x100455d9
jmp 0x100455ba
jmp 0x10045593
push 0x4514
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x570]
push eax
push 0x18f5
lea eax, [ebp - 0x448]
push eax
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x354]
push eax
lea eax, [ebp - 0x404]
push eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x35c]
push eax
push 1
push 1
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x24]
push eax
call fcn.1003ed4a
add esp, 0x38
jmp 0x10045565
jmp 0x10045487
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x570]
call fcn.1001b42d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.1001b42d
cmp dword [ebp - 0x130], 0
jne 0x100457bd
mov dword [ebp - 0xc8], 0xffffffff
mov dword [ebp - 0xc8], 0
jmp 0x100456f9
mov eax, dword [ebp - 0xc8]
dec eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0xfffffff4
jne 0x1004573c
mov dword [ebp - 0x3b4], 0
push 0x566
push 0x556d
push 0x6298
push 0xc2
push 0x5b32
push 0x2d
push 1
push 1
lea eax, [ebp - 0x3b4]
push eax
call fcn.1003f37a
add esp, 0x24
jmp 0x100456ec
mov dword [ebp - 0xd0], 0xbac64a68
mov dword [ebp - 0xd0], 0xd
jmp 0x1004575f
mov eax, dword [ebp - 0xd0]
dec eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0xffffffef
jg 0x100457b1
mov dword [ebp - 0x364], 0xb51dba33
push 0x6562
push 0x62d2
push 0x72c0
push 0
push 0x3a67
push 0x5ee9
push 1
lea eax, [ebp - 0x364]
push eax
push 1
push 0x32b3
push 0x5796
push 0x6ab3
call fcn.10040717
add esp, 0x30
jmp 0x10045752
call fcn.100437d7
xor eax, eax
jmp 0x10046f6a
mov dword [ebp - 0x288], 0x7258
mov dword [ebp - 0x36c], 0x1000ba50
cmp dword [ebp - 0x288], 0x74e3
jle 0x10045881
and dword [ebp - 0xd8], 0
jmp 0x100457f7
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0x6381
jge 0x10045881
and dword [ebp - 0xe0], 0
jmp 0x10045819
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0x2f62
jge 0x1004587c
mov eax, dword [ebp - 0xd8]
add eax, dword [ebp - 0xe0]
cdq
mov dword [ebp - 0x3c8], eax
mov dword [ebp - 0x3c4], edx
push dword [ebp - 0x3c4]
push dword [ebp - 0x3c8]
lea ecx, [ebp - 0x6a8]
call fcn.1000d8ea
pop ecx
pop ecx
mov dword [ebp - 0x3f4], eax
mov ecx, dword [ebp - 0x3f4]
call fcn.1001b15a
push eax
call fcn.10052776
pop ecx
lea ecx, [ebp - 0x6a8]
call fcn.1001b150
jmp 0x1004580c
jmp 0x100457ea
lea eax, [ebp - 0x1b4]
push eax
lea eax, [ebp - 0x130]
push eax
push 1
push 1
push 0x19fb
lea eax, [ebp - 0x8c]
push eax
push 0x42e4
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x5e0]
push eax
call fcn.1003f84f
add esp, 0x24
mov dword [ebp - 4], 0x13
cmp dword [ebp - 0x288], 0x6e71
jge 0x100458d6
push dword [ebp - 0x36c]
call fcn.10052776
pop ecx
jmp 0x100458f2
or dword [ebp - 4], 0xffffffff
jmp 0x100458fc
push 2
lea ecx, [ebp - 0xac]
call fcn.1001b3ab
mov dword [ebp - 4], 0x15
mov dword [ebp - 0x19c], 0x5db0ff84
mov dword [ebp - 0x250], 0x1021
mov dword [ebp - 0x2ac], 0x2da50e28
mov dword [ebp - 0x384], 0x3002
mov dword [ebp - 0x3cc], 0x674dcce6
mov dword [ebp - 0x37c], 0x74c
mov dword [ebp - 0x88], 0
jmp 0x10045965
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 1
jge 0x1004597e
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0x34], 0xc93
jmp 0x10045958
lea eax, [ebp - 0xac]
push eax
push 1
push 0x25e6
lea eax, [ebp - 0x88]
push eax
call fcn.1003f960
add esp, 0x10
push 0
lea ecx, [ebp - 0xac]
call fcn.1001b449
and dword [eax], 0
jmp 0x100459d1
push 0
lea ecx, [ebp - 0xac]
call fcn.1001b449
mov dword [ebp - 0x220], eax
mov eax, dword [ebp - 0x220]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x220]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0xac]
call fcn.1001b449
cmp dword [eax], 0
jl 0x10045d60
mov dword [ebp - 0x18], 0x9609c3fb
mov dword [ebp - 0xf0], 0xfffffffb
mov dword [ebp - 0x414], 0xeb7f464f
mov dword [ebp - 0x18], 0
jmp 0x10045a12
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jg 0x10045bfe
mov dword [ebp - 0xb4], 0x51da622a
mov dword [ebp - 0x4e0], 0x71e9942c
mov dword [ebp - 0x4dc], 0x71e9942c
mov dword [ebp - 0x4d8], 0x71e9942c
mov dword [ebp - 0x4d4], 0x71e9942c
mov dword [ebp - 0xb4], 0
jmp 0x10045a67
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0
jg 0x10045ab8
mov dword [ebp - 0xb8], 0
jmp 0x10045a89
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 2
jge 0x10045aa5
mov eax, dword [ebp - 0xb8]
mov dword [ebp + eax*4 - 0x584], 7
jmp 0x10045a7c
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x584], 0xfffffff6
jmp 0x10045a5a
mov dword [ebp - 0xf0], 0x86255d58
cmp dword [ebp - 0xf0], 0
je 0x10045adf
push 0
lea ecx, [ebp - 0xac]
call fcn.1001b449
mov eax, dword [eax]
cmp dword [ebp + eax*4 - 0x34], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x34]
imul eax, dword [ebp - 0x18]
cmp eax, 0x6095
jl 0x10045afd
mov dword [ebp - 0x2dc], 1
jmp 0x10045b04
and dword [ebp - 0x2dc], 0
cmp dword [ebp - 0x2dc], 1
jb 0x10045b19
mov dword [ebp - 0x3c0], 1
jmp 0x10045b20
and dword [ebp - 0x3c0], 0
push 0
lea ecx, [ebp - 0xac]
call fcn.1001b449
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x34]
mov dword [ebp - 0x508], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x34]
cmp eax, dword [ebp - 0x18]
jge 0x10045b54
mov dword [ebp - 0x374], 1
jmp 0x10045b5b
and dword [ebp - 0x374], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x34], 0x45beac3e
jge 0x10045b74
mov dword [ebp - 0x228], 1
jmp 0x10045b7b
and dword [ebp - 0x228], 0
cmp dword [ebp - 0x228], 0xfffc
je 0x10045b93
mov dword [ebp - 0x290], 1
jmp 0x10045b9a
and dword [ebp - 0x290], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x290]
sub ecx, dword [ebp - 0x18]
cmp ecx, dword [ebp + eax - 0x4e0]
jne 0x10045bbd
mov dword [ebp - 0x230], 1
jmp 0x10045bc4
and dword [ebp - 0x230], 0
cmp dword [ebp - 0x230], 0x87a7
jl 0x10045bdc
mov dword [ebp - 0x2c4], 1
jmp 0x10045be3
and dword [ebp - 0x2c4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x34]
add eax, dword [ebp - 0x2c4]
mov dword [ebp - 0x19c], eax
jmp 0x10045a0b
push 0
lea ecx, [ebp - 0xac]
call fcn.1001b449
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x34]
mov dword [ebp - 0x50c], eax
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x514], eax
push 0
lea ecx, [ebp - 0xac]
call fcn.1001b449
push 0
lea ecx, [ebp - 0xac]
call fcn.1001b449
mov eax, dword [eax]
mov esi, dword [ebp + eax*4 - 0x34]
push 0
lea ecx, [ebp - 0xac]
call fcn.1001b449
cmp esi, dword [eax]
jg 0x10045c60
mov dword [ebp - 0x238], 1
jmp 0x10045c67
and dword [ebp - 0x238], 0
mov esi, dword [ebp - 0x18]
neg esi
sub esi, dword [ebp - 0x238]
push 0
lea ecx, [ebp - 0xac]
call fcn.1001b449
cmp esi, dword [eax]
jl 0x10045c8f
mov dword [ebp - 0x298], 1
jmp 0x10045c96
and dword [ebp - 0x298], 0
mov eax, dword [ebp - 0x250]
cmp dword [ebp - 0x298], eax
je 0x10045cb6
cmp dword [ebp - 0x414], 0
jne 0x10045cb6
and dword [ebp - 0x240], 0
jmp 0x10045cc0
mov dword [ebp - 0x240], 1
mov eax, dword [ebp - 0x240]
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 0x219fa4a6
jl 0x10045cea
cmp dword [ebp - 0xf0], 0
jne 0x10045cea
and dword [ebp - 0x2ec], 0
jmp 0x10045cf4
mov dword [ebp - 0x2ec], 1
push 0
lea ecx, [ebp - 0xac]
call fcn.1001b449
mov ecx, dword [ebp - 0x2ec]
cmp ecx, dword [eax]
jge 0x10045d17
mov dword [ebp - 0x248], 1
jmp 0x10045d1e
and dword [ebp - 0x248], 0
push 0
lea ecx, [ebp - 0xac]
call fcn.1001b449
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x34]
cmp dword [ebp - 0x248], eax
jge 0x10045d45
mov dword [ebp - 0x2a0], 1
jmp 0x10045d4c
and dword [ebp - 0x2a0], 0
mov eax, dword [ebp - 0x2a0]
sub eax, 9
mov dword [ebp - 0x2ac], eax
jmp 0x100459ad
lea eax, [ebp - 0x37c]
push eax
lea eax, [ebp - 0x250]
push eax
lea eax, [ebp - 0x3cc]
push eax
lea eax, [ebp - 0xac]
push eax
lea eax, [ebp - 0x384]
push eax
lea eax, [ebp - 0x2ac]
push eax
call fcn.100437f8
add esp, 0x18
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xac]
call fcn.1001b42d
push 0x1f87
push 1
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 8]
push eax
push 1
lea eax, [ebp - 0x8c]
push eax
call fcn.1003fa8f
add esp, 0x18
lea eax, [ebp - 0x8c]
push eax
push 0x5222
push 1
push 0x4aea
push 1
push 0x73bc
push 1
lea eax, [ebp - 0x130]
push eax
push 0x1500
lea eax, [ebp - 0x318]
push eax
call fcn.1003fb96
add esp, 0x28
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x318]
push eax
call fcn.100438a7
pop ecx
pop ecx
push 4
lea ecx, [ebp - 0x4c4]
call fcn.1001b3ab
mov dword [ebp - 4], 0x16
mov dword [ebp - 0x100], 0xfffffff7
mov dword [ebp - 0x51c], 1
mov dword [ebp - 0xf8], 0
jmp 0x10045e4b
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 4
jge 0x10045e6d
push dword [ebp - 0xf8]
lea ecx, [ebp - 0x4c4]
call fcn.1001b449
mov dword [eax], 0x439beb06
jmp 0x10045e3e
lea eax, [ebp - 0x4c4]
push eax
call fcn.10043a5d
pop ecx
mov dword [ebp - 0x100], 0
jmp 0x10045e93
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0x11
je 0x10045ecf
mov dword [ebp - 0x38c], 2
push 0x53ea
lea eax, [ebp - 0x38c]
push eax
push 1
push 0x4481
push 0x2845
push 1
push 0x24da
call fcn.1003fd01
add esp, 0x1c
jmp 0x10045e86
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4c4]
call fcn.1001b42d
push dword [ebp - 0x1c]
call fcn.1002c501
pop ecx
test eax, eax
jne 0x10045ef2
xor eax, eax
jmp 0x10046f6a
mov dword [ebp - 0x110], 0xf5540d7f
mov dword [ebp - 0x524], 1
mov dword [ebp - 0x324], 0x8b39
mov dword [ebp - 0x108], 0
jmp 0x10045f29
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 3
jge 0x10045f45
mov eax, dword [ebp - 0x108]
mov dword [ebp + eax*4 - 0x634], 0xffffffff
jmp 0x10045f1c
mov dword [ebp - 0x110], 0xfffffff0
jmp 0x10045f5e
mov eax, dword [ebp - 0x110]
dec eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0xffffffef
jge 0x10046056
mov dword [ebp - 0x52c], 0
mov dword [ebp - 0x180], 0x992f
mov dword [ebp - 0x118], 0
jmp 0x10045f98
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 2
jge 0x10045fb4
mov eax, dword [ebp - 0x118]
mov dword [ebp + eax*4 - 0x450], 0x51ea66e5
jmp 0x10045f8b
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x258], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x258]
mov dword [ebp + eax - 0x634], ecx
cmp dword [ebp - 0x258], 0x4b25b3b9
jg 0x10045ff7
mov dword [ebp - 0x1c4], 1
jmp 0x10045ffe
and dword [ebp - 0x1c4], 0
mov eax, dword [ebp - 0x324]
mov dword [ebp - 0x1c0], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1c0]
mov dword [ebp + eax - 0x450], ecx
xor eax, eax
sub eax, dword [ebp - 0x1c0]
cmp dword [ebp - 0x1c4], eax
jle 0x10046034
call fcn.10043a7b
jmp 0x10046051
mov dword [ebp - 0x328], 0xfffffff9
mov eax, dword [ebp - 0x328]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x450], eax
jmp 0x10045f51
push dword [ebp - 0x1c]
push 0x1e0e
push 0
push 0x75d6
push 1
call fcn.1002a562
add esp, 0x14
mov dword [ebp - 0x14], 0xadae8c9f
mov dword [ebp - 0x30], 0x5077045b
mov dword [ebp - 0x198], 0x26067bbd
push 1
lea ecx, [ebp - 0x594]
call fcn.1001b3ab
mov dword [ebp - 4], 0x17
push 1
lea eax, [ebp - 0x94]
push eax
push 0x5dce
push 0x1a41
push 0x17be
push 1
push 1
push 0x3e61
lea eax, [ebp - 0x594]
push eax
call fcn.1003ff43
add esp, 0x24
mov dword [ebp - 0x94], 0
jmp 0x100460e4
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 1
jge 0x10046100
mov eax, dword [ebp - 0x94]
mov dword [ebp + eax*4 - 0x204], 0xffffffff
jmp 0x100460d7
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x5cc], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x504], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x5dc], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x5e4], eax
mov eax, dword [ebp - 0x14]
sub eax, 0x2a600bba
jne 0x10046140
mov dword [ebp - 0x1cc], 1
jmp 0x10046147
and dword [ebp - 0x1cc], 0
cmp dword [ebp - 0x1cc], 0xc46bc227
ja 0x1004615f
mov dword [ebp - 0x1d4], 1
jmp 0x10046166
and dword [ebp - 0x1d4], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x1d4], eax
jne 0x1004617d
mov dword [ebp - 0x1dc], 1
jmp 0x10046184
and dword [ebp - 0x1dc], 0
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x1dc]
cmp eax, 0x1fcc1031
jle 0x100461a1
mov dword [ebp - 0x320], 1
jmp 0x100461a8
and dword [ebp - 0x320], 0
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x14]
jl 0x100461c0
mov dword [ebp - 0x1e4], 1
jmp 0x100461c7
and dword [ebp - 0x1e4], 0
mov eax, dword [ebp - 0x1e4]
add eax, 0xf844
cmp eax, 1
jl 0x100461e3
mov dword [ebp - 0x1ec], 1
jmp 0x100461ea
and dword [ebp - 0x1ec], 0
cmp dword [ebp - 0x1ec], 0xbd90
jne 0x100461fc
cmp dword [ebp - 0x30], 0
jne 0x1004620b
cmp dword [ebp - 0x14], 0
jne 0x1004620b
and dword [ebp - 0x1f4], 0
jmp 0x10046215
mov dword [ebp - 0x1f4], 1
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x1f4]
mov dword [ebp - 0x198], eax
mov eax, dword [ebp - 0x198]
cmp eax, dword [ebp - 0x14]
jge 0x10046281
cmp dword [ebp - 0x30], 0
je 0x10046281
mov byte [ebp - 0x4c], 0
push 1
lea eax, [ebp - 0x4c]
push eax
push 1
push 0x4c22
push 0x667d
push 1
call fcn.100403c0
add esp, 0x18
mov dword [ebp - 0x30], 0
jmp 0x10046266
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
jg 0x1004627c
mov byte [ebp - 0x52], 0
lea eax, [ebp - 0x52]
push eax
call fcn.10043aa2
pop ecx
jmp 0x1004625f
jmp 0x100463b9
mov dword [ebp - 0x188], 0xffff
mov dword [ebp - 0x190], 0xf4bb0f55
mov dword [ebp - 0x214], 0x674d9070
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x190], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x190]
cmp ecx, dword [ebp + eax - 0x204]
jge 0x100462d9
mov dword [ebp - 0x1bc], 1
jmp 0x100462e0
and dword [ebp - 0x1bc], 0
cmp dword [ebp - 0x1bc], 1
jge 0x100462f5
mov dword [ebp - 0x338], 1
jmp 0x100462fc
and dword [ebp - 0x338], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x204]
mov dword [ebp - 0x60c], eax
mov eax, dword [ebp - 0x190]
cmp eax, dword [ebp - 0x214]
jg 0x10046329
mov dword [ebp - 0x20c], 1
jmp 0x10046330
and dword [ebp - 0x20c], 0
imul eax, dword [ebp - 0x20c], 0xfffd
cmp eax, dword [ebp - 0x214]
jl 0x1004634e
mov dword [ebp - 0x21c], 1
jmp 0x10046355
and dword [ebp - 0x21c], 0
cmp dword [ebp - 0x21c], 0
jg 0x1004636a
mov dword [ebp - 0x224], 1
jmp 0x10046371
and dword [ebp - 0x224], 0
mov eax, dword [ebp - 0x198]
sub eax, dword [ebp - 0x224]
mov dword [ebp - 0x30], eax
mov byte [ebp - 0x50], 0
push 0x2f6b
push 0x2114
push 0x523
push 0
push 0x5f52
push 1
lea eax, [ebp - 0x50]
push eax
push 0x277b
push 1
push 0x6e5d
push 0x4090
call fcn.10042151
add esp, 0x2c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x594]
call fcn.1001b42d
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
cmp dword [eax + 0x28], 0
je 0x10046f49
mov dword [ebp - 0x120], 0xd313dd33
push 2
lea ecx, [ebp - 0x5b4]
call fcn.1001b3ab
mov dword [ebp - 4], 0x18
lea eax, [ebp - 0x9c]
push eax
push 0x668b
push 0x1ad2
push 1
push 0x45b6
push 0x618
push 1
push 0x74a4
push 1
push 0x623a
push 0x3cc9
lea eax, [ebp - 0x5b4]
push eax
call fcn.10040717
add esp, 0x30
mov dword [ebp - 0x9c], 0
jmp 0x1004644d
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 3
jge 0x10046469
mov eax, dword [ebp - 0x9c]
mov dword [ebp + eax*4 - 0x678], 0x834d8a94
jmp 0x10046440
mov dword [ebp - 0x120], 0
jmp 0x10046482
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 6
jle 0x10046533
mov dword [ebp - 0x128], 0xae8c9f36
push 1
lea ecx, [ebp - 0x5a4]
call fcn.1001b3ab
mov byte [ebp - 4], 0x19
lea eax, [ebp - 0x5a4]
push eax
lea eax, [ebp - 0x608]
push eax
push 0x5d3c
push 1
push 0x71e
push 1
call fcn.10040cd7
add esp, 0x18
call fcn.10043ad5
mov dword [ebp - 0x128], 1
jmp 0x100464ec
mov eax, dword [ebp - 0x128]
dec eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0
jl 0x1004651f
mov dword [ebp - 0x340], 0x44accb24
lea eax, [ebp - 0x340]
push eax
call fcn.1004376b
pop ecx
mov byte [ebp - 0x51], 0
movzx eax, byte [ebp - 0x51]
test eax, eax
je 0x1004651d
call fcn.10043b00
jmp 0x100464df
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x5a4]
call fcn.1001b42d
jmp 0x10046475
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5b4]
call fcn.1001b42d
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x130]
add ecx, dword [eax + 0x28]
mov dword [ebp - 0x2c0], ecx
mov dword [ebp - 0x31c], 1
push 1
lea ecx, [ebp - 0x4d0]
call fcn.1001b3ab
mov dword [ebp - 4], 0x1a
mov dword [ebp - 0x350], 0x4ba09a16
mov dword [ebp - 0x348], 0x7420ea1b
lea eax, [ebp - 0x4d0]
push eax
push 1
push 0x4b61
push 1
push 0x7d14
push 0x4abf
push 0x629f
push 0x50d6
lea eax, [ebp - 0x5c0]
push eax
call fcn.10040ec4
add esp, 0x24
lea eax, [ebp - 0x348]
push eax
lea eax, [ebp - 0x4d0]
push eax
lea eax, [ebp - 0x350]
push eax
lea eax, [ebp - 0x31c]
push eax
call fcn.10043b1c
add esp, 0x10
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4d0]
call fcn.1001b42d
cmp dword [ebp - 0x2c0], 0
jne 0x100467d0
mov dword [ebp - 0x3c], 1
mov dword [ebp - 0x22c], 0xd955a619
mov dword [ebp - 0x23c], 5
mov dword [ebp - 0x3c], 3
jmp 0x10046626
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 3
jge 0x100467bb
mov dword [ebp - 0x500], 0x82bc9063
mov dword [ebp - 0x4fc], 0x82bc9063
mov dword [ebp - 0x4f8], 0x82bc9063
mov dword [ebp - 0x4f4], 0x82bc9063
mov dword [ebp - 0x138], 0
jmp 0x10046671
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 1
jge 0x1004668d
mov eax, dword [ebp - 0x138]
mov dword [ebp + eax*4 - 0x1a0], 0xd972c40a
jmp 0x10046664
cmp dword [ebp - 0x3c], 1
je 0x1004669a
cmp dword [ebp - 0x22c], 0
cmp dword [ebp - 0x22c], 0
jne 0x100466af
mov dword [ebp - 0x234], 1
jmp 0x100466b6
and dword [ebp - 0x234], 0
mov eax, dword [ebp - 0x234]
mov dword [ebp - 0x23c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3c]
add ecx, dword [ebp - 0x23c]
cmp ecx, dword [ebp + eax - 0x1a0]
jle 0x100466e6
mov dword [ebp - 0x244], 1
jmp 0x100466ed
and dword [ebp - 0x244], 0
cmp dword [ebp - 0x244], 0xffffffff
jne 0x10046702
mov dword [ebp - 0x24c], 1
jmp 0x10046709
and dword [ebp - 0x24c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1a0]
cmp dword [ebp - 0x24c], eax
jge 0x1004672a
mov dword [ebp - 0x254], 1
jmp 0x10046731
and dword [ebp - 0x254], 0
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x254], eax
jne 0x10046748
mov dword [ebp - 0x25c], 1
jmp 0x1004674f
and dword [ebp - 0x25c], 0
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x25c], eax
je 0x10046768
xor eax, eax
inc eax
jne 0x10046768
and dword [ebp - 0x264], 0
jmp 0x10046772
mov dword [ebp - 0x264], 1
imul eax, dword [ebp - 0x264], 0xbd55
test eax, eax
jne 0x10046799
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1a0], 0
jne 0x10046799
and dword [ebp - 0x26c], 0
jmp 0x100467a3
mov dword [ebp - 0x26c], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x26c]
mov dword [ebp + eax - 0x500], ecx
jmp 0x1004661f
mov byte [ebp - 0x43], 0
lea eax, [ebp - 0x43]
push eax
call fcn.10043c25
pop ecx
xor eax, eax
jmp 0x10046f6a
mov dword [ebp - 0x5c], 0x2961c0f8
mov dword [ebp - 0x1a8], 0xfffffffc
mov dword [ebp - 0x2b8], 0x176df7e4
mov dword [ebp - 0x20], 0xfffffffc
mov dword [ebp - 0x370], 2
mov dword [ebp - 0x57c], 0
mov dword [ebp - 0x140], 0
jmp 0x1004681f
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 4
jge 0x1004683b
mov eax, dword [ebp - 0x140]
mov dword [ebp + eax*4 - 0x6d0], 1
jmp 0x10046812
lea eax, [ebp - 0x1a8]
push eax
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x2b8]
push eax
call fcn.10043c53
add esp, 0xc
mov eax, dword [ebp - 0x1a8]
cmp eax, dword [ebp - 0x20]
jl 0x1004688f
mov byte [ebp - 0x4b], 0
push 1
push 0x2c24
push 1
push 1
push 0x2369
lea eax, [ebp - 0x4b]
push eax
push 0x16fe
push 0x529a
call fcn.10041e47
add esp, 0x20
jmp 0x10046b67
push 2
lea ecx, [ebp - 0x2d4]
call fcn.1001b3ab
mov dword [ebp - 4], 0x1b
mov dword [ebp - 0x5b8], 0x826243a5
mov dword [ebp - 0x1b0], 0xb41ce094
mov dword [ebp - 0x4f0], 0
mov dword [ebp - 0x4ec], 0
mov dword [ebp - 0x4e8], 0
mov dword [ebp - 0x4e4], 0
mov dword [ebp - 0x29c], 0xc894628a
push 0x1e4
lea eax, [ebp - 0x2d4]
push eax
push 0x25ca
push 1
push 0x6e46
push 1
push 0x2fe9
lea eax, [ebp - 0x510]
push eax
push 1
push 0x32a1
push 0x7b91
call fcn.10042151
add esp, 0x2c
mov dword [ebp - 0x20], 0
jmp 0x10046933
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 1
jg 0x10046b36
mov dword [ebp - 0x5c], 0
jmp 0x1004694d
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 1
jg 0x10046963
mov byte [ebp - 0x45], 0
lea eax, [ebp - 0x45]
push eax
call fcn.10043d14
pop ecx
jmp 0x10046946
mov esi, dword [ebp - 0x1a8]
inc esi
push dword [ebp - 0x20]
lea ecx, [ebp - 0x2d4]
call fcn.1001b449
cmp dword [eax], esi
jl 0x1004698e
cmp dword [ebp - 0x5c], 0
je 0x1004698e
mov dword [ebp - 0x274], 1
jmp 0x10046995
and dword [ebp - 0x274], 0
push 1
lea ecx, [ebp - 0x2d4]
call fcn.1001b449
mov ecx, dword [ebp - 0x274]
cmp ecx, dword [eax]
jne 0x100469b8
mov dword [ebp - 0x27c], 1
jmp 0x100469bf
and dword [ebp - 0x27c], 0
push dword [ebp - 0x20]
lea ecx, [ebp - 0x2d4]
call fcn.1001b449
mov ecx, dword [ebp - 0x27c]
cmp ecx, dword [eax]
jl 0x100469e3
mov dword [ebp - 0x284], 1
jmp 0x100469ea
and dword [ebp - 0x284], 0
mov eax, dword [ebp - 0x284]
add eax, 0x3f0e
jne 0x10046a05
xor eax, eax
inc eax
jne 0x10046a05
and dword [ebp - 0x28c], 0
jmp 0x10046a0f
mov dword [ebp - 0x28c], 1
push dword [ebp - 0x20]
lea ecx, [ebp - 0x2d4]
call fcn.1001b449
mov ecx, dword [ebp - 0x28c]
sub ecx, dword [eax]
xor esi, esi
sub esi, ecx
push dword [ebp - 0x20]
lea ecx, [ebp - 0x2d4]
call fcn.1001b449
cmp esi, dword [eax]
jge 0x10046a47
mov dword [ebp - 0x294], 1
jmp 0x10046a4e
and dword [ebp - 0x294], 0
mov eax, dword [ebp - 0x294]
mov dword [ebp - 0x1b0], eax
mov eax, dword [ebp - 0x1b0]
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x4f0], eax
mov dword [ebp - 0x29c], 0xde1f1717
cmp dword [ebp - 0x29c], 0x1e168459
je 0x10046a8e
mov dword [ebp - 0x2a4], 1
jmp 0x10046a95
and dword [ebp - 0x2a4], 0
push dword [ebp - 0x20]
lea ecx, [ebp - 0x2d4]
call fcn.1001b449
mov ecx, dword [ebp - 0x2a4]
add ecx, dword [eax]
mov eax, 0xb5978573
sub eax, ecx
je 0x10046add
mov dword [ebp - 0x360], 0x4f5774d2
lea eax, [ebp - 0x1b0]
push eax
lea eax, [ebp - 0x360]
push eax
lea eax, [ebp - 0x2b8]
push eax
call fcn.10043d3d
add esp, 0xc
jmp 0x10046b31
mov dword [ebp - 0x368], 0xffffffff
lea eax, [ebp - 0x368]
push eax
push 0x5dc9
push 0x6e05
push 1
push 0x10ed
push 0x15eb
push 1
call fcn.1004244a
add esp, 0x1c
mov byte [ebp - 0x4f], 0
push 0x24f5
push 1
push 0x22ed
lea eax, [ebp - 0x4f]
push eax
push 0x4aca
push 1
call fcn.10042642
add esp, 0x18
jmp 0x1004692c
push 1
push 0x731c
push 1
push 0x5a93
push 0xddc
lea eax, [ebp - 0x370]
push eax
call fcn.10042bab
add esp, 0x18
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2d4]
call fcn.1001b42d
push 0
push 1
push 0xdeadbeef
call dword [ebp - 0x2c0]
mov dword [ebp - 0x380], eax
mov dword [ebp - 0x160], 0xffffffff
mov dword [ebp - 0x5bc], 0x3c8fc558
mov dword [ebp - 0x518], 0xd214c405
mov dword [ebp - 0x5c4], 0xddbc3707
mov dword [ebp - 0x520], 0xffffffff
mov dword [ebp - 0x5f8], 0x71867b8f
mov dword [ebp - 0x5f4], 0x71867b8f
mov dword [ebp - 0x5f0], 0x71867b8f
mov dword [ebp - 0x5ec], 0x71867b8f
mov byte [ebp - 0x47], 0
lea eax, [ebp - 0x47]
push eax
call fcn.10043d72
pop ecx
mov dword [ebp - 0x2c8], 0x13ef
mov dword [ebp - 0x378], 0x1000baac
cmp dword [ebp - 0x2c8], 0x152c
jle 0x10046cbe
push 0x157a
call dword [sym.imp.USER32.dll_PostQuitMessage]
and dword [ebp - 0x158], 0
jmp 0x10046c29
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 0x4987
jge 0x10046cbe
and dword [ebp - 0x148], 0
jmp 0x10046c4f
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 0x7485
jge 0x10046cb9
and dword [ebp - 0x150], 0
jmp 0x10046c71
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0x47e5
jge 0x10046cb7
mov eax, dword [ebp - 0x148]
cdq
idiv dword [ebp - 0x150]
and edx, dword [ebp - 0x158]
mov eax, edx
cdq
mov dword [ebp - 0x3d4], eax
mov dword [ebp - 0x3d0], edx
push dword [ebp - 0x3d0]
push dword [ebp - 0x3d4]
mov ecx, 0x106126b8
call fcn.1001b17a
jmp 0x10046c64
jmp 0x10046c42
jmp 0x10046c1c
mov dword [ebp - 0x160], 0xa
jmp 0x10046cd7
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 0xf
jg 0x10046d5d
push 2
lea ecx, [ebp - 0x4b8]
call fcn.1001b3ab
mov dword [ebp - 4], 0x1c
push 0x17d7
lea eax, [ebp - 0x4b8]
push eax
lea eax, [ebp - 0x600]
push eax
push 1
push 1
push 0x12dd
push 0x13c
push 0x54a5
call fcn.100430ad
add esp, 0x20
push 0x2fca
push 1
push 0x5b46
lea eax, [ebp - 0x4b8]
push eax
push 0xcf6
push 0x464d
push 1
call fcn.100431c6
add esp, 0x1c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4b8]
call fcn.1001b42d
jmp 0x10046cca
mov dword [ebp - 4], 0x1d
cmp dword [ebp - 0x2c8], 0x1014
jge 0x10046d80
mov edx, dword [ebp - 0x378]
mov ecx, 0x106126b8
call fcn.1001d6f2
jmp 0x10046d9c
or dword [ebp - 4], 0xffffffff
jmp 0x10046da6
cmp dword [ebp - 0x380], 0
jne 0x10046db6
xor eax, eax
jmp 0x10046f6a
push 1
lea eax, [ebp - 0x1c]
push eax
push 0x5270
push 1
call fcn.10043278
add esp, 0x10
mov dword [ebp - 0x2d8], 0x7bcf
mov dword [ebp - 0x390], 0x1000baf0
cmp dword [ebp - 0x2d8], 0x7c10
jle 0x10046f04
and dword [ebp - 0x168], 0
jmp 0x10046e05
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 0x628
jge 0x10046efe
and dword [ebp - 0x170], 0
jmp 0x10046e2b
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 0x3e65
jge 0x10046ef9
and dword [ebp - 0x178], 0
jmp 0x10046e51
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 0x1a15
jge 0x10046ef4
and dword [ebp - 0x11c], 0
jmp 0x10046e77
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0x19bf
jge 0x10046eef
mov eax, dword [ebp - 0x168]
cdq
idiv dword [ebp - 0x170]
mov eax, edx
cdq
idiv dword [ebp - 0x178]
and edx, dword [ebp - 0x11c]
mov eax, edx
cdq
mov dword [ebp - 0x3e8], eax
mov dword [ebp - 0x3e4], edx
push dword [ebp - 0x3e4]
push dword [ebp - 0x3e8]
lea ecx, [ebp - 0x6c0]
call fcn.1000d8ea
pop ecx
pop ecx
mov dword [ebp - 0x388], eax
mov ecx, dword [ebp - 0x388]
call fcn.1001b15a
push eax
call fcn.10052776
pop ecx
lea ecx, [ebp - 0x6c0]
call fcn.1001b150
jmp 0x10046e6a
jmp 0x10046e44
jmp 0x10046e1e
jmp 0x10046df8
call dword [sym.imp.USER32.dll_GetCapture]
mov dword [ebp - 4], 0x1f
cmp dword [ebp - 0x2d8], 0x7a0c
jge 0x10046f23
push dword [ebp - 0x390]
call fcn.10052776
pop ecx
jmp 0x10046f3f
or dword [ebp - 4], 0xffffffff
jmp 0x10046f49
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x10], 0
je 0x10046f5d
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x2e0], eax
jmp 0x10046f64
and dword [ebp - 0x2e0], 0
mov eax, dword [ebp - 0x2e0]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret