Function at 0x10041a3f
Capabilities:
Extract resource via kernel32 functions
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1005ea0f
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x8d4
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
and dword [ebp - 0x28], 0
mov dword [ebp - 0x304], 0x6885
mov dword [ebp - 0x4b8], 0x1000b95c
cmp dword [ebp - 0x304], 0x6bd6
jle 0x10041b71
and dword [ebp - 0xb4], 0
jmp 0x10041aa2
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0x7f2c
jge 0x10041b6b
and dword [ebp - 0x164], 0
jmp 0x10041ac8
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 0x25fc
jge 0x10041b66
and dword [ebp - 0x1cc], 0
jmp 0x10041aee
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 0x41e4
jge 0x10041b61
and dword [ebp - 0x1d4], 0
jmp 0x10041b10
mov eax, dword [ebp - 0x1d4]
inc eax
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 0x313
jge 0x10041b5f
mov ecx, dword [ebp - 0x1cc]
imul ecx, dword [ebp - 0x1d4]
mov eax, dword [ebp - 0xb4]
cdq
idiv dword [ebp - 0x164]
add edx, ecx
mov eax, edx
cdq
mov dword [ebp - 0x4f0], eax
mov dword [ebp - 0x4ec], edx
push dword [ebp - 0x4ec]
push dword [ebp - 0x4f0]
mov ecx, 0x10607538
call fcn.1000e7af
jmp 0x10041b03
jmp 0x10041ae1
jmp 0x10041abb
jmp 0x10041a95
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x4d4], 8
and dword [ebp - 4], 0
cmp dword [ebp - 0x304], 0x65dc
jge 0x10041b9b
mov edx, dword [ebp - 0x4b8]
mov ecx, 0x10607538
call fcn.1001021f
jmp 0x10041bb7
or dword [ebp - 4], 0xffffffff
jmp 0x10041bc1
mov dword [ebp - 0x6d4], 0xfe6e3245
mov dword [ebp - 0x79c], 2
mov dword [ebp - 0x708], 4
mov dword [ebp - 0x5f8], 2
mov dword [ebp - 0x77c], 7
mov dword [ebp - 0x4e4], 0x3b2c57e7
mov dword [ebp - 0x5e0], 0xb441a62a
mov dword [ebp - 0xbc], 0
jmp 0x10041c20
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 3
jge 0x10041c3c
mov eax, dword [ebp - 0xbc]
mov dword [ebp + eax*4 - 0x798], 0x1e46
jmp 0x10041c13
cmp dword [ebp - 0x4d4], 0
je 0x10041c67
mov byte [ebp - 0x55], 0
movzx eax, byte [ebp - 0x55]
test eax, eax
je 0x10041c62
push 1
push 0x6523
push 1
call fcn.10031590
add esp, 0xc
jmp 0x10041ead
mov dword [ebp - 0x424], 0xb08
mov dword [ebp - 0x4dc], 0x1000b9a0
cmp dword [ebp - 0x424], 0xeab
jle 0x10041d4b
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumResourceNamesW]
and dword [ebp - 0x194], 0
jmp 0x10041caf
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 0x7ab1
jge 0x10041d41
and dword [ebp - 0xc4], 0
jmp 0x10041cd5
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0x929
jge 0x10041d3c
and dword [ebp - 0x16c], 0
jmp 0x10041cf7
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 0x6fa8
jge 0x10041d3a
mov eax, dword [ebp - 0x194]
add eax, dword [ebp - 0xc4]
sub eax, dword [ebp - 0x16c]
cdq
mov dword [ebp - 0x4fc], eax
mov dword [ebp - 0x4f8], edx
push dword [ebp - 0x4f8]
push dword [ebp - 0x4fc]
mov ecx, 0x10607538
call fcn.1000e7af
jmp 0x10041cea
jmp 0x10041cc8
jmp 0x10041ca2
push 0
push 0
call dword [sym.imp.KERNEL32.dll_LoadResource]
mov dword [ebp - 0x710], 0
mov dword [ebp - 4], 2
cmp dword [ebp - 0x424], 0x91b
jge 0x10041d78
mov edx, dword [ebp - 0x4dc]
mov ecx, 0x10607538
call fcn.1001021f
jmp 0x10041d94
or dword [ebp - 4], 0xffffffff
jmp 0x10041d9e
mov dword [ebp - 0x7bc], 0x63f9e923
mov dword [ebp - 0x434], 0x909b7928
mov dword [ebp - 0x718], 0xed8f6efb
mov dword [ebp - 0xcc], 0
jmp 0x10041dd5
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 2
jge 0x10041df1
mov eax, dword [ebp - 0xcc]
mov dword [ebp + eax*4 - 0x458], 0
jmp 0x10041dc8
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x798]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x798], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x458], 0
je 0x10041e7d
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x458], 0
je 0x10041e46
or eax, 0xffffffff
je 0x10041e46
cmp dword [ebp - 0x4e4], 0
je 0x10041e46
mov dword [ebp - 0x42c], 1
jmp 0x10041e4d
and dword [ebp - 0x42c], 0
mov eax, dword [ebp - 0x434]
add eax, dword [ebp - 0x42c]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x458]
imul ecx, eax
cmp ecx, dword [ebp - 0x434]
jl 0x10041e7d
mov dword [ebp - 0x5d8], 1
jmp 0x10041e84
and dword [ebp - 0x5d8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x458]
mov dword [ebp - 0x784], eax
mov eax, dword [ebp - 0x5e0]
mov dword [ebp - 0x720], eax
mov dword [ebp - 0x5f8], 0x698
mov dword [ebp - 0x444], 0x1d1
mov dword [ebp - 0x5dc], 0x1000ba08
cmp dword [ebp - 0x444], 0x4a2
jle 0x10041fa8
and dword [ebp - 0x19c], 0
jmp 0x10041ee7
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 0x292e
jge 0x10041fa8
and dword [ebp - 0xd4], 0
jmp 0x10041f0d
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0x7a98
jge 0x10041fa3
and dword [ebp - 0x174], 0
jmp 0x10041f33
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 0x2f8c
jge 0x10041f9e
mov eax, dword [ebp - 0x19c]
sub eax, dword [ebp - 0xd4]
mov ecx, dword [ebp - 0x174]
sar eax, cl
cdq
mov dword [ebp - 0x508], eax
mov dword [ebp - 0x504], edx
push dword [ebp - 0x504]
push dword [ebp - 0x508]
lea ecx, [ebp - 0x810]
call fcn.1000d330
pop ecx
pop ecx
mov dword [ebp - 0x600], eax
mov ecx, dword [ebp - 0x600]
call fcn.1000e78f
push eax
call fcn.10048556
pop ecx
lea ecx, [ebp - 0x810]
call fcn.1000e785
jmp 0x10041f26
jmp 0x10041f00
jmp 0x10041eda
mov dword [ebp - 0x84], 0x2fe22364
mov dword [ebp - 0x560], 0xfff9
mov dword [ebp - 0xdc], 0
jmp 0x10041fd5
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 1
jge 0x10041ff1
mov eax, dword [ebp - 0xdc]
mov dword [ebp + eax*4 - 0x4cc], 0x55bb
jmp 0x10041fc8
mov dword [ebp - 0x84], 0
jmp 0x1004200a
mov eax, dword [ebp - 0x84]
dec eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0
jl 0x100421a1
mov dword [ebp - 0x470], 0xfffffff9
mov dword [ebp - 0x758], 0x72a8358b
mov dword [ebp - 0x728], 0xffffffff
mov dword [ebp - 0x43c], 0x656e
mov dword [ebp - 0x468], 0x1000ba50
cmp dword [ebp - 0x43c], 0x672a
jle 0x10042130
and dword [ebp - 0x17c], 0
jmp 0x1004206f
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 0x112b
jge 0x10042130
and dword [ebp - 0x1a4], 0
jmp 0x10042095
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 0x5dcd
jge 0x1004212b
and dword [ebp - 0xe4], 0
jmp 0x100420bb
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0x3d55
jge 0x10042126
mov ecx, dword [ebp - 0x1a4]
sub ecx, dword [ebp - 0xe4]
mov eax, dword [ebp - 0x17c]
sar eax, cl
cdq
mov dword [ebp - 0x514], eax
mov dword [ebp - 0x510], edx
push dword [ebp - 0x510]
push dword [ebp - 0x514]
lea ecx, [ebp - 0x828]
call fcn.1000d330
pop ecx
pop ecx
mov dword [ebp - 0x610], eax
mov ecx, dword [ebp - 0x610]
call fcn.1000e78f
push eax
call fcn.10048556
pop ecx
lea ecx, [ebp - 0x828]
call fcn.1000e785
jmp 0x100420ae
jmp 0x10042088
jmp 0x10042062
mov eax, dword [ebp - 0x84]
cmp dword [ebp + eax*4 - 0x4cc], 0
je 0x10042142
jmp 0x100421a1
mov dword [ebp - 4], 4
cmp dword [ebp - 0x43c], 0x633e
jge 0x10042161
push dword [ebp - 0x468]
call fcn.10048556
pop ecx
jmp 0x1004217d
or dword [ebp - 4], 0xffffffff
jmp 0x10042187
lea eax, [ebp - 0x560]
push eax
lea eax, [ebp - 0x470]
push eax
call fcn.10041153
pop ecx
pop ecx
jmp 0x10041ffd
mov dword [ebp - 4], 6
cmp dword [ebp - 0x444], 0xffffffde
jge 0x100421bd
push dword [ebp - 0x5dc]
call fcn.10048556
pop ecx
jmp 0x100421d9
or dword [ebp - 4], 0xffffffff
jmp 0x100421e3
push 4
lea ecx, [ebp - 0x450]
call fcn.1000e8c4
mov dword [ebp - 4], 8
mov dword [ebp - 0x41c], 0x3925
mov dword [ebp - 0x56c], 0x1000ba80
cmp dword [ebp - 0x41c], 0x3b57
jle 0x10042324
and dword [ebp - 0x184], 0
jmp 0x10042231
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 0x3d7f
jge 0x10042324
and dword [ebp - 0xec], 0
jmp 0x10042257
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0x682c
jge 0x1004231f
and dword [ebp - 0x1ac], 0
jmp 0x1004227d
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 0x33b5
jge 0x1004231a
and dword [ebp - 0xf4], 0
jmp 0x100422a3
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0x74dd
jge 0x10042315
mov eax, dword [ebp - 0xec]
cdq
idiv dword [ebp - 0x1ac]
sub edx, dword [ebp - 0xf4]
xor edx, dword [ebp - 0x184]
mov eax, edx
cdq
mov dword [ebp - 0x520], eax
mov dword [ebp - 0x51c], edx
push dword [ebp - 0x51c]
push dword [ebp - 0x520]
lea ecx, [ebp - 0x84c]
call fcn.1000d330
pop ecx
pop ecx
mov dword [ebp - 0x478], eax
mov ecx, dword [ebp - 0x478]
call fcn.1000e78f
push eax
call fcn.10048556
pop ecx
lea ecx, [ebp - 0x84c]
call fcn.1000e785
jmp 0x10042296
jmp 0x10042270
jmp 0x1004224a
jmp 0x10042224
mov byte [ebp - 4], 9
cmp dword [ebp - 0x41c], 0x3654
jge 0x10042340
push dword [ebp - 0x56c]
call fcn.10048556
pop ecx
jmp 0x1004235c
mov dword [ebp - 4], 8
jmp 0x1004236c
mov dword [ebp - 0x760], 0xe043eef7
push 2
lea ecx, [ebp - 0x6bc]
call fcn.1000e8c4
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x1c], 0
jmp 0x10042397
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x100423ad
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x7a8], 0xfffc
jmp 0x10042390
push 0x6a31
push 1
push 1
push 0xa0b
push 0x52f4
lea eax, [ebp - 0x1c]
push eax
push 0x2d7a
push 0x789
push 0x4628
push 0x51e1
push 0x3721
push 0x5316
push 1
lea eax, [ebp - 0x450]
push eax
call fcn.10031949
add esp, 0x38
mov dword [ebp - 0x1c], 0
jmp 0x10042403
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x10042419
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x858], 0xfe57
jmp 0x100423fc
lea eax, [ebp - 0x6bc]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.100411bc
pop ecx
pop ecx
push 3
lea ecx, [ebp - 0x450]
call fcn.1000e93c
mov dword [eax], 2
jmp 0x10042464
push 3
lea ecx, [ebp - 0x450]
call fcn.1000e93c
mov dword [ebp - 0x234], eax
mov eax, dword [ebp - 0x234]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x234]
mov dword [ecx], eax
push 3
lea ecx, [ebp - 0x450]
call fcn.1000e93c
cmp dword [eax], 0
jl 0x100425fc
mov dword [ebp - 0x238], 0x3cf4
mov dword [ebp - 0x5e8], 0x1000bad0
cmp dword [ebp - 0x238], 0x3ee9
jle 0x10042575
and dword [ebp - 0xfc], 0
jmp 0x100424b4
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0x563a
jge 0x10042575
and dword [ebp - 0x1bc], 0
jmp 0x100424da
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 0xa5b
jge 0x10042570
and dword [ebp - 0x104], 0
jmp 0x10042500
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0x5128
jge 0x1004256b
mov eax, dword [ebp - 0xfc]
mov ecx, dword [ebp - 0x1bc]
sar eax, cl
and eax, dword [ebp - 0x104]
cdq
mov dword [ebp - 0x52c], eax
mov dword [ebp - 0x528], edx
push dword [ebp - 0x528]
push dword [ebp - 0x52c]
lea ecx, [ebp - 0x870]
call fcn.1000d330
pop ecx
pop ecx
mov dword [ebp - 0x480], eax
mov ecx, dword [ebp - 0x480]
call fcn.1000e78f
push eax
call fcn.10048556
pop ecx
lea ecx, [ebp - 0x870]
call fcn.1000e785
jmp 0x100424f3
jmp 0x100424cd
jmp 0x100424a7
mov byte [ebp - 4], 0xc
cmp dword [ebp - 0x238], 0x3af4
jge 0x10042591
push dword [ebp - 0x5e8]
call fcn.10048556
pop ecx
jmp 0x100425ad
mov dword [ebp - 4], 0xb
jmp 0x100425bd
push 3
lea ecx, [ebp - 0x450]
call fcn.1000e93c
mov eax, dword [eax]
mov esi, dword [ebp + eax*4 - 0x7a8]
push 3
lea ecx, [ebp - 0x450]
call fcn.1000e93c
mov eax, dword [eax]
mov dword [ebp + eax*4 - 0x7a8], esi
mov byte [ebp - 0x6d], 0
lea eax, [ebp - 0x6d]
push eax
call fcn.10041204
pop ecx
jmp 0x10042440
lea eax, [ebp - 0x6bc]
push eax
call fcn.10041232
pop ecx
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x6bc]
call fcn.1000e920
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x450]
call fcn.1000e920
mov eax, dword [ebp + 8]
mov dword [ebp - 0x204], eax
mov dword [ebp - 0x488], 0xe6bacd79
mov dword [ebp - 0x1c4], 0
jmp 0x10042653
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 3
jge 0x1004266f
mov eax, dword [ebp - 0x1c4]
mov dword [ebp + eax*4 - 0x87c], 0x60657976
jmp 0x10042646
lea eax, [ebp - 0x488]
push eax
call fcn.10041259
pop ecx
mov eax, dword [ebp - 0x204]
movzx eax, word [eax]
cmp eax, 0x5a4d
je 0x100429ab
mov dword [ebp - 0xa0], 0xffffffff
mov dword [ebp - 0x1e4], 0xffffffff
mov dword [ebp - 0x498], 0x7e294b58
mov dword [ebp - 0x730], 0xfffffff6
mov dword [ebp - 0x440], 0x6583
mov dword [ebp - 0x490], 0x1000bb68
cmp dword [ebp - 0x440], 0x6652
jle 0x100427ea
and dword [ebp - 0x114], 0
jmp 0x100426f2
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0x30bc
jge 0x100427ea
and dword [ebp - 0x10c], 0
jmp 0x10042718
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0x5542
jge 0x100427e5
and dword [ebp - 0x190], 0
jmp 0x1004273e
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 0x3074
jge 0x100427e0
and dword [ebp - 0xac], 0
jmp 0x10042764
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0x6980
jge 0x100427db
mov eax, dword [ebp - 0x10c]
imul eax, dword [ebp - 0x190]
mov ecx, dword [ebp - 0x114]
sub ecx, eax
or ecx, dword [ebp - 0xac]
mov eax, ecx
cdq
mov dword [ebp - 0x538], eax
mov dword [ebp - 0x534], edx
push dword [ebp - 0x534]
push dword [ebp - 0x538]
lea ecx, [ebp - 0x894]
call fcn.1000d330
pop ecx
pop ecx
mov dword [ebp - 0x578], eax
mov ecx, dword [ebp - 0x578]
call fcn.1000e78f
push eax
call fcn.10048556
pop ecx
lea ecx, [ebp - 0x894]
call fcn.1000e785
jmp 0x10042757
jmp 0x10042731
jmp 0x1004270b
jmp 0x100426e5
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0x440], 0x633d
jge 0x10042809
push dword [ebp - 0x490]
call fcn.10048556
pop ecx
jmp 0x10042825
or dword [ebp - 4], 0xffffffff
jmp 0x1004282f
mov dword [ebp - 0x584], 0xfffffff8
mov dword [ebp - 0x11c], 0
jmp 0x10042852
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 2
jge 0x1004286e
mov eax, dword [ebp - 0x11c]
mov dword [ebp + eax*4 - 0x7e8], 0
jmp 0x10042845
mov dword [ebp - 0xa0], 0x1d
jmp 0x10042887
mov eax, dword [ebp - 0xa0]
dec eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 7
je 0x10042997
mov dword [ebp - 0xa8], 9
mov dword [ebp - 0x248], 0xbacc5d9b
mov dword [ebp - 0x5ac], 0xcfce2949
mov dword [ebp - 0xa8], 9
jmp 0x100428cb
mov eax, dword [ebp - 0xa8]
dec eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0xffffffec
jle 0x10042960
mov dword [ebp - 0x1d8], 0
jmp 0x100428f1
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 1
jge 0x1004290d
mov eax, dword [ebp - 0x1d8]
mov dword [ebp + eax*4 - 0x240], 0xcb63
jmp 0x100428e4
mov dword [ebp - 0x1e4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1e4]
cmp ecx, dword [ebp + eax - 0x240]
jle 0x10042948
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x240], 0
je 0x10042948
mov dword [ebp - 0x348], 1
jmp 0x1004294f
and dword [ebp - 0x348], 0
mov eax, dword [ebp - 0x348]
mov dword [ebp - 0x248], eax
jmp 0x100428be
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x1e4]
push eax
lea eax, [ebp - 0x248]
push eax
lea eax, [ebp - 0x5ac]
push eax
lea eax, [ebp - 0xa8]
push eax
lea eax, [ebp - 0x498]
push eax
call fcn.100412ae
add esp, 0x18
jmp 0x1004287a
lea eax, [ebp - 0x584]
push eax
call fcn.10041391
pop ecx
xor eax, eax
jmp 0x10045b09
mov dword [ebp - 0x3c8], 2
mov dword [ebp - 0x5b0], 3
push 3
lea ecx, [ebp - 0x6a4]
call fcn.1000e8c4
mov dword [ebp - 4], 0x10
push 1
lea ecx, [ebp - 0x634]
call fcn.1000e8c4
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x250], 1
lea eax, [ebp - 0x4a0]
push eax
push 0x6d78
push 1
push 0x5c90
push 1
push 0x9eb
lea eax, [ebp - 0x6a4]
push eax
push 0x2df4
call fcn.100356d9
add esp, 0x20
push 0
push 0x15a4
push 1
lea eax, [ebp - 0x634]
push eax
lea eax, [ebp - 0x4a0]
push eax
push 0x40dd
push 1
call fcn.1003cb8f
add esp, 0x1c
lea eax, [ebp - 0x3c8]
push eax
lea eax, [ebp - 0x6a4]
push eax
push 0x26a3
push 0x46f
push 1
lea eax, [ebp - 0x634]
push eax
push 1
lea eax, [ebp - 0x250]
push eax
lea eax, [ebp - 0x5b0]
push eax
push 0x5820
push 0x173b
call fcn.10035c1a
add esp, 0x2c
lea eax, [ebp - 0x3c8]
push eax
push 0x1043
push 0xbf7
lea eax, [ebp - 0x634]
push eax
push 0x2d73
push 0
push 1
lea eax, [ebp - 0x250]
push eax
call fcn.1003cab3
add esp, 0x20
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x634]
call fcn.1000e920
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6a4]
call fcn.1000e920
lea eax, [ebp - 0x94]
push eax
push 0x72d4
lea eax, [ebp - 0x204]
push eax
lea eax, [ebp + 8]
push eax
push 1
push 1
push 0x3091
call fcn.10035f23
add esp, 0x1c
mov dword [ebp - 0x20], 0xf80c3414
mov dword [ebp - 0x6c], 0x3c67ee39
mov dword [ebp - 0x768], 4
mov dword [ebp - 0x738], 0xfffffffc
mov dword [ebp - 0x770], 0x13d0bb9
push 4
lea ecx, [ebp - 0x340]
call fcn.1000e8c4
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x74], 0xffffffff
mov dword [ebp - 0x40], 0xcff26af9
mov dword [ebp - 0x5b8], 0xd231
mov dword [ebp - 0x2c], 0
jmp 0x10042b63
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jge 0x10042b76
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x48], 0x9beb0647
jmp 0x10042b5c
push 0x7ebe
push 0x125a
push 0x4851
push 0x3ebd
push 0x6017
push 1
push 0x4e2d
lea eax, [ebp - 0x340]
push eax
lea eax, [ebp - 0x2c]
push eax
push 0x295
push 0x3cb1
push 1
push 0x6b6a
call fcn.1003600a
add esp, 0x34
mov dword [ebp - 0x2c], 0
jmp 0x10042bca
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x10042be0
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x68c], 8
jmp 0x10042bc3
mov byte [ebp - 0x56], 0
movzx eax, byte [ebp - 0x56]
test eax, eax
je 0x10042c07
push 1
push 0x5684
push 0x383f
push 0
push 0x22ab
call fcn.1003efba
add esp, 0x14
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x40]
inc ecx
mov dword [ebp - 0x40], ecx
test eax, eax
jne 0x10042c3d
push 3
lea ecx, [ebp - 0x340]
call fcn.1000e93c
push 3
lea ecx, [ebp - 0x340]
call fcn.1000e93c
cmp dword [eax], 0
jne 0x10042c3d
and dword [ebp - 0x350], 0
jmp 0x10042c47
mov dword [ebp - 0x350], 1
push 3
lea ecx, [ebp - 0x340]
call fcn.1000e93c
mov ecx, dword [ebp - 0x350]
mov dword [eax], ecx
xor eax, eax
jne 0x10042c72
mov eax, 0xa898
test eax, eax
jne 0x10042c72
and dword [ebp - 0x258], 0
jmp 0x10042c7c
mov dword [ebp - 0x258], 1
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x48]
add ecx, dword [ebp + eax - 0x48]
mov dword [ebp - 0x20], ecx
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x258]
jne 0x10042caa
mov dword [ebp - 0x408], 1
jmp 0x10042cb1
and dword [ebp - 0x408], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x48]
cmp dword [ebp - 0x408], eax
jl 0x10042ccf
mov dword [ebp - 0x260], 1
jmp 0x10042cd6
and dword [ebp - 0x260], 0
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x260], eax
jg 0x10042ced
mov dword [ebp - 0x358], 1
jmp 0x10042cf4
and dword [ebp - 0x358], 0
cmp dword [ebp - 0x358], 0x39bf
je 0x10042d0c
mov dword [ebp - 0x268], 1
jmp 0x10042d13
and dword [ebp - 0x268], 0
mov eax, dword [ebp - 0x268]
sub eax, 0x518854c7
add eax, dword [ebp - 0x6c]
mov dword [ebp - 0x3d0], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3d0]
mov dword [ebp + eax - 0x68c], ecx
mov eax, dword [ebp - 0x74]
add eax, dword [ebp - 0x3d0]
push 4
pop ecx
imul ecx, ecx, 0
cmp dword [ebp + ecx - 0x48], eax
jge 0x10042f28
push 1
lea ecx, [ebp - 0x60c]
call fcn.1000e8c4
mov byte [ebp - 4], 0x13
push 1
push 0x2047
lea eax, [ebp - 0x60c]
push eax
push 0
lea eax, [ebp - 0x740]
push eax
call fcn.1003e588
add esp, 0x14
mov dword [ebp - 0x74], 0
jmp 0x10042d93
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 1
jge 0x10042da6
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0x48], 0x2699ff93
jmp 0x10042d8c
mov dword [ebp - 0x40], 0x10
jmp 0x10042db6
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0x32
jge 0x10042f17
mov dword [ebp - 0x590], 0x7e94
cmp dword [ebp - 0x40], 0x2f52
jg 0x10042ddf
mov dword [ebp - 0x4a8], 1
jmp 0x10042de6
and dword [ebp - 0x4a8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x68c]
mov dword [ebp - 0x778], eax
xor eax, eax
jb 0x10042e09
mov dword [ebp - 0x270], 1
jmp 0x10042e10
and dword [ebp - 0x270], 0
mov eax, dword [ebp - 0x590]
cmp dword [ebp - 0x270], eax
jl 0x10042e2a
mov dword [ebp - 0x4b0], 1
jmp 0x10042e31
and dword [ebp - 0x4b0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x68c]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x748], eax
push 0
lea ecx, [ebp - 0x60c]
call fcn.1000e93c
mov esi, eax
push 1
lea ecx, [ebp - 0x340]
call fcn.1000e93c
mov eax, dword [eax]
cmp eax, dword [esi]
jle 0x10042e78
mov dword [ebp - 0x360], 1
jmp 0x10042e7f
and dword [ebp - 0x360], 0
mov esi, dword [ebp - 0x5b8]
add esi, dword [ebp - 0x360]
push 0
lea ecx, [ebp - 0x60c]
call fcn.1000e93c
cmp esi, dword [eax]
jne 0x10042ea8
mov dword [ebp - 0x278], 1
jmp 0x10042eaf
and dword [ebp - 0x278], 0
push 0
lea ecx, [ebp - 0x60c]
call fcn.1000e93c
mov ecx, dword [ebp - 0x278]
cmp ecx, dword [eax]
jl 0x10042ed2
mov dword [ebp - 0x428], 1
jmp 0x10042ed9
and dword [ebp - 0x428], 0
push 3
lea ecx, [ebp - 0x340]
call fcn.1000e93c
mov ecx, dword [ebp - 0x428]
mov dword [eax], ecx
mov dword [ebp - 0x6c], 0
jmp 0x10042efe
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
jg 0x10042f12
mov eax, dword [ebp - 0x6c]
cmp dword [ebp + eax*4 - 0x48], 0
je 0x10042f10
jmp 0x10042f12
jmp 0x10042ef7
jmp 0x10042daf
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x60c]
call fcn.1000e920
jmp 0x10042f5b
mov dword [ebp - 0x20], 0
jmp 0x10042f38
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jl 0x10042f5b
mov esi, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
add eax, 3
push eax
lea ecx, [ebp - 0x340]
call fcn.1000e93c
mov eax, dword [eax]
mov dword [ebp + esi*4 - 0x48], eax
jmp 0x10042f31
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x340]
call fcn.1000e920
mov eax, dword [ebp - 0x94]
cmp dword [eax], 0x4550
je 0x1004318b
mov dword [ebp - 0x368], 2
mov dword [ebp - 0x4c0], 3
push 3
lea ecx, [ebp - 0x668]
call fcn.1000e8c4
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x280], 0x24f0
mov dword [ebp - 0x45c], 0x1000bbdc
cmp dword [ebp - 0x280], 0x2710
jle 0x10043072
and dword [ebp - 0x124], 0
jmp 0x10042fde
mov eax, dword [ebp - 0x124]
inc eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0x205d
jge 0x10043072
and dword [ebp - 0x198], 0
jmp 0x10043004
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 0x5509
jge 0x1004306d
and dword [ebp - 0x12c], 0
jmp 0x10043026
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0x2161
jge 0x1004306b
mov eax, dword [ebp - 0x124]
mov ecx, dword [ebp - 0x198]
sar eax, cl
xor eax, dword [ebp - 0x12c]
cdq
mov dword [ebp - 0x544], eax
mov dword [ebp - 0x540], edx
push dword [ebp - 0x540]
push dword [ebp - 0x544]
mov ecx, 0x10607538
call fcn.1000e7af
jmp 0x10043019
jmp 0x10042ff7
jmp 0x10042fd1
push 1
lea ecx, [ebp - 0x628]
call fcn.1000e8c4
mov byte [ebp - 4], 0x15
mov byte [ebp - 4], 0x16
cmp dword [ebp - 0x280], 0x2172
jge 0x100430a3
mov edx, dword [ebp - 0x45c]
mov ecx, 0x10607538
call fcn.1001021f
jmp 0x100430bf
mov dword [ebp - 4], 0x15
jmp 0x100430cf
mov dword [ebp - 0x288], 1
lea eax, [ebp - 0x668]
push eax
lea eax, [ebp - 0x59c]
push eax
push 0x5f58
push 1
push 1
call fcn.1003c8e3
add esp, 0x14
push 1
lea eax, [ebp - 0x628]
push eax
push 1
push 0x7f25
push 0x417b
lea eax, [ebp - 0x59c]
push eax
push 1
call fcn.1003cb8f
add esp, 0x1c
lea eax, [ebp - 0x368]
push eax
lea eax, [ebp - 0x4c0]
push eax
lea eax, [ebp - 0x668]
push eax
lea eax, [ebp - 0x628]
push eax
lea eax, [ebp - 0x288]
push eax
call fcn.100413aa
add esp, 0x14
lea eax, [ebp - 0x368]
push eax
lea eax, [ebp - 0x288]
push eax
lea eax, [ebp - 0x628]
push eax
call fcn.10041468
add esp, 0xc
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x628]
call fcn.1000e920
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x668]
call fcn.1000e920
xor eax, eax
jmp 0x10045b09
push 2
lea ecx, [ebp - 0x224]
call fcn.1000e8c4
mov dword [ebp - 4], 0x18
mov dword [ebp - 0x3d8], 0x15d0
mov dword [ebp - 0x5c0], 0x1000bc18
cmp dword [ebp - 0x3d8], 0x1975
jle 0x10043237
and dword [ebp - 0x1c0], 0
jmp 0x100431d5
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 0x21c0
jge 0x10043237
and dword [ebp - 0x134], 0
jmp 0x100431f7
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0x709d
jge 0x10043235
mov eax, dword [ebp - 0x1c0]
imul eax, dword [ebp - 0x134]
cdq
mov dword [ebp - 0x550], eax
mov dword [ebp - 0x54c], edx
push dword [ebp - 0x54c]
push dword [ebp - 0x550]
mov ecx, 0x10607538
call fcn.1000e7af
jmp 0x100431ea
jmp 0x100431c8
mov byte [ebp - 4], 0x19
cmp dword [ebp - 0x3d8], 0x14a8
jge 0x10043257
mov edx, dword [ebp - 0x5c0]
mov ecx, 0x10607538
call fcn.1001021f
jmp 0x10043273
mov dword [ebp - 4], 0x18
jmp 0x10043283
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x8c]
push eax
call fcn.1004149d
pop ecx
pop ecx
mov dword [ebp - 0x8c], 0
jmp 0x100432b1
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 2
jge 0x100432ca
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0x3c], 0
jmp 0x100432a4
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x3c], 0
jmp 0x100432ef
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3c]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x3c], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x3c], 1
jg 0x100435d2
mov dword [ebp - 0x210], 0
mov dword [ebp - 0x380], 0xfffffff9
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x3c]
lea ecx, [ebp - 0x224]
call fcn.1000e93c
cmp dword [eax], 0
jne 0x1004333b
mov eax, 0x11738ab6
test eax, eax
je 0x10043568
mov dword [ebp - 0x218], 0
mov dword [ebp - 0x5a8], 0xac89d73a
mov eax, dword [ebp - 0x218]
mov dword [ebp - 0x780], eax
mov esi, dword [ebp - 0x218]
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x3c]
lea ecx, [ebp - 0x224]
call fcn.1000e93c
cmp dword [eax], esi
jle 0x10043386
mov dword [ebp - 0x3e0], 1
jmp 0x1004338d
and dword [ebp - 0x3e0], 0
push 4
pop eax
imul eax, eax, 0
mov esi, dword [ebp + eax - 0x3c]
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x3c]
lea ecx, [ebp - 0x224]
call fcn.1000e93c
cmp esi, dword [eax]
jge 0x100433bc
mov dword [ebp - 0x290], 1
jmp 0x100433c3
and dword [ebp - 0x290], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3c]
cmp dword [ebp - 0x290], eax
jge 0x100433e1
mov dword [ebp - 0x370], 1
jmp 0x100433e8
and dword [ebp - 0x370], 0
cmp dword [ebp - 0x370], 0xffffffff
jne 0x100433fd
mov dword [ebp - 0x298], 1
jmp 0x10043404
and dword [ebp - 0x298], 0
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x3c]
lea ecx, [ebp - 0x224]
call fcn.1000e93c
mov ecx, dword [ebp - 0x298]
cmp ecx, dword [eax]
jg 0x1004342f
mov dword [ebp - 0x410], 1
jmp 0x10043436
and dword [ebp - 0x410], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3c]
cmp dword [ebp - 0x410], eax
jl 0x10043454
mov dword [ebp - 0x2a0], 1
jmp 0x1004345b
and dword [ebp - 0x2a0], 0
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x3c]
lea ecx, [ebp - 0x224]
call fcn.1000e93c
mov ecx, dword [ebp - 0x2a0]
cmp ecx, dword [eax]
jle 0x10043486
mov dword [ebp - 0x378], 1
jmp 0x1004348d
and dword [ebp - 0x378], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3c]
cmp dword [ebp - 0x378], eax
jle 0x100434ab
mov dword [ebp - 0x2a8], 1
jmp 0x100434b2
and dword [ebp - 0x2a8], 0
mov eax, dword [ebp - 0x2a8]
mov dword [ebp - 0x210], eax
mov eax, dword [ebp - 0x210]
cmp dword [ebp - 0x3e0], eax
jl 0x100434d8
mov dword [ebp - 0x2b0], 1
jmp 0x100434df
and dword [ebp - 0x2b0], 0
push 4
pop eax
imul eax, eax, 0
mov esi, dword [ebp + eax - 0x3c]
add esi, dword [ebp - 0x2b0]
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x3c]
lea ecx, [ebp - 0x224]
call fcn.1000e93c
cmp esi, dword [eax]
jl 0x10043514
mov dword [ebp - 0x4c8], 1
jmp 0x1004351b
and dword [ebp - 0x4c8], 0
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x3c]
lea ecx, [ebp - 0x224]
call fcn.1000e93c
mov eax, dword [ebp - 0x210]
mov dword [ebp - 0x750], eax
mov eax, dword [ebp - 0x218]
mov dword [ebp - 0x380], eax
mov eax, dword [ebp - 0x380]
mov dword [ebp - 0x5a8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3c], 0
je 0x10043566
jmp 0x100432da
jmp 0x100435c2
mov dword [ebp - 0x2b8], 0xfff8
push 0x226
push 0x7636
push 0x6b38
push 0x5040
push 1
push 0x66c7
push 0x38b8
push 0x29ba
push 0x1fa
push 1
push 0x623c
push 0x2df
push 0x12db
call fcn.1003ccd2
add esp, 0x34
mov eax, dword [ebp - 0x2b8]
inc eax
mov dword [ebp - 0x2b8], eax
push 1
push 1
call fcn.1003ced8
pop ecx
pop ecx
jmp 0x100432da
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x224]
call fcn.1000e920
lea eax, [ebp - 0x118]
push eax
push 0x506
push 1
push 0x60b0
lea eax, [ebp - 0x94]
push eax
push 0x5a69
push 0x2f73
push 0x31e5
push 1
call fcn.1003d0dc
add esp, 0x24
mov dword [ebp - 0x1d0], 1
mov dword [ebp - 0x438], 0x16b9
mov dword [ebp - 0x5c8], 0x1000bc6c
cmp dword [ebp - 0x438], 0x1a13
jle 0x100436c8
and dword [ebp - 0x1a0], 0
jmp 0x10043658
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 0x42af
jge 0x100436b9
and dword [ebp - 0x13c], 0
jmp 0x1004367a
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0x3ad3
jge 0x100436b7
mov eax, dword [ebp - 0x1a0]
sub eax, dword [ebp - 0x13c]
cdq
mov dword [ebp - 0x55c], eax
mov dword [ebp - 0x558], edx
push dword [ebp - 0x558]
push dword [ebp - 0x55c]
mov ecx, 0x10607538
call fcn.1000e7af
jmp 0x1004366d
jmp 0x1004364b
push 0x1387
push 0
push 0
call dword [sym.imp.GDI32.dll_TranslateCharsetInfo]
mov dword [ebp - 0x1d0], 0xffffffe7
jmp 0x100436e1
mov eax, dword [ebp - 0x1d0]
inc eax
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 0x15
je 0x10043706
mov dword [ebp - 0x4d0], 2
call fcn.100414e2
cmp dword [ebp - 0x4d0], 0
je 0x10043704
jmp 0x100436d4
jmp 0x100436d4
mov dword [ebp - 4], 0x1b
cmp dword [ebp - 0x438], 0x148f
jge 0x10043729
mov edx, dword [ebp - 0x5c8]
mov ecx, 0x10607538
call fcn.1001021f
jmp 0x10043745
or dword [ebp - 4], 0xffffffff
jmp 0x1004374f
cmp dword [ebp - 0x118], 0
jne 0x10043a64
mov dword [ebp - 0x388], 2
mov dword [ebp - 0x5d0], 3
push 3
lea ecx, [ebp - 0x674]
call fcn.1000e8c4
mov dword [ebp - 4], 0x1d
push 1
lea ecx, [ebp - 0x640]
call fcn.1000e8c4
mov byte [ebp - 4], 0x1e
mov dword [ebp - 0x2c0], 0x2fe5
mov dword [ebp - 0x4d8], 0x1000bca0
cmp dword [ebp - 0x2c0], 0x30d2
jle 0x100438bf
push 0
push 0x235d
push 0x1864
push 0
push 0x1e5a
push 0x13ae
push 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
and dword [ebp - 0x144], 0
jmp 0x100437ef
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 0x2f95
jge 0x100438b5
and dword [ebp - 0x1a8], 0
jmp 0x10043815
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 0x5527
jge 0x100438b0
and dword [ebp - 0x14c], 0
jmp 0x1004383b
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 0x7e30
jge 0x100438ab
and dword [ebp - 0x1c8], 0
jmp 0x1004385d
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 0x4fcb
jge 0x100438a9
mov eax, dword [ebp - 0x144]
imul eax, dword [ebp - 0x1a8]
imul eax, dword [ebp - 0x14c]
imul eax, dword [ebp - 0x1c8]
cdq
mov dword [ebp - 0x568], eax
mov dword [ebp - 0x564], edx
push dword [ebp - 0x564]
push dword [ebp - 0x568]
mov ecx, 0x10607538
call fcn.1000e7af
jmp 0x10043850
jmp 0x1004382e
jmp 0x10043808
jmp 0x100437e2
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetCommState]
mov dword [ebp - 0x2c8], 1
mov byte [ebp - 4], 0x1f
cmp dword [ebp - 0x2c0], 0x2cf5
jge 0x100438e9
mov edx, dword [ebp - 0x4d8]
mov ecx, 0x10607538
call fcn.1001021f
jmp 0x10043905
mov dword [ebp - 4], 0x1e
jmp 0x10043915
mov dword [ebp - 0x9c], 0
jmp 0x1004392e
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 3
jge 0x10043950
push dword [ebp - 0x9c]
lea ecx, [ebp - 0x674]
call fcn.1000e93c
mov dword [eax], 0x4ebb0cb8
jmp 0x10043921
lea eax, [ebp - 0x640]
push eax
push 0x7d28
push 1
lea eax, [ebp - 0x9c]
push eax
push 1
call fcn.1003d44e
add esp, 0x14
lea eax, [ebp - 0x388]
push eax
lea eax, [ebp - 0x5d0]
push eax
lea eax, [ebp - 0x674]
push eax
lea eax, [ebp - 0x640]
push eax
lea eax, [ebp - 0x2c8]
push eax
call fcn.100413aa
add esp, 0x14
lea eax, [ebp - 0x388]
push eax
lea eax, [ebp - 0x2c8]
push eax
lea eax, [ebp - 0x640]
push eax
call fcn.10041468
add esp, 0xc
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x640]
call fcn.1000e920
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x674]
call fcn.1000e920
mov dword [ebp - 0x3e8], 0xfffc
mov dword [ebp - 0x4e0], 0xc203
mov dword [ebp - 0x214], 0xfffffffb
cmp dword [ebp - 0x3e8], 0
je 0x10043a42
push 0x4619
push 0x1392
push 0x655b
push 0x4928
push 1
push 0
push 0x2869
push 0x3959
push 0x6f0e
call fcn.1003dc0b
add esp, 0x24
lea eax, [ebp - 0x4e0]
push eax
lea eax, [ebp - 0x214]
push eax
call fcn.1004150e
pop ecx
pop ecx
jmp 0x10043a47
call fcn.10041609
mov eax, dword [ebp - 0x214]
neg eax
mov ecx, dword [ebp - 0x3e8]
add ecx, eax
mov dword [ebp - 0x214], ecx
xor eax, eax
jmp 0x10045b09
push 0x6cda
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x788]
push eax
lea eax, [ebp - 0x204]
push eax
push 1
push 1
lea eax, [ebp - 0x118]
push eax
push 0x6185
lea eax, [ebp - 0x94]
push eax
call fcn.1003dc0b
add esp, 0x24
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x2d0], 0x971c
push 1
push 0x2129
push 1
lea eax, [ebp - 0x78]
push eax
push 0x5895
push 0x3611
lea eax, [ebp - 0x2d0]
push eax
push 0x955
call fcn.1003de74
add esp, 0x20
mov dword [ebp - 0x78], 0xffffffe8
jmp 0x10043ae6
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0x2a
jg 0x10043b42
mov dword [ebp - 0x4e8], 1
mov dword [ebp - 0x5f0], 0x86f25db2
mov dword [ebp - 0x5b4], 9
push 0x1a5
lea eax, [ebp - 0x78]
push eax
push 1
push 0x1840
push 1
lea eax, [ebp - 0x5b4]
push eax
lea eax, [ebp - 0x4e8]
push eax
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x5f0]
push eax
call fcn.1003e053
add esp, 0x24
jmp 0x10043adf
push 0xb33
push 0x3b40
push 0
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp + 8]
push eax
push 0x6c82
lea eax, [ebp - 0x94]
push eax
push 1
call fcn.1004107d
add esp, 0x20
mov dword [ebp - 0x30], 0xe125d16d
mov dword [ebp - 0x418], 0x8afc1da7
mov dword [ebp - 0x390], 0x69c5
mov dword [ebp - 0x5bc], 0x1000bd28
cmp dword [ebp - 0x390], 0x6c9e
jle 0x10043caf
call dword [sym.imp.GDI32.dll_GdiFlush]
and dword [ebp - 0x15c], 0
jmp 0x10043bbd
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 0x20e1
jge 0x10043caf
and dword [ebp - 0x18c], 0
jmp 0x10043be3
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0x528c
jge 0x10043caa
and dword [ebp - 0x154], 0
jmp 0x10043c09
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 0x1817
jge 0x10043ca5
and dword [ebp - 0x188], 0
jmp 0x10043c2f
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 0x7a06
jge 0x10043ca0
mov eax, dword [ebp - 0x154]
xor eax, dword [ebp - 0x188]
mov ecx, dword [ebp - 0x15c]
sub ecx, dword [ebp - 0x18c]
or eax, ecx
cdq
mov dword [ebp - 0x574], eax
mov dword [ebp - 0x570], edx
push dword [ebp - 0x570]
push dword [ebp - 0x574]
lea ecx, [ebp - 0x8c4]
call fcn.1000d330
pop ecx
pop ecx
mov dword [ebp - 0x4f4], eax
mov ecx, dword [ebp - 0x4f4]
call fcn.1000e78f
push eax
call fcn.10048556
pop ecx
lea ecx, [ebp - 0x8c4]
call fcn.1000e785
jmp 0x10043c22
jmp 0x10043bfc
jmp 0x10043bd6
jmp 0x10043bb0
push 3
lea ecx, [ebp - 0x680]
call fcn.1000e8c4
mov dword [ebp - 4], 0x21
mov byte [ebp - 4], 0x22
cmp dword [ebp - 0x390], 0x66dc
jge 0x10043cdf
push dword [ebp - 0x5bc]
call fcn.10048556
pop ecx
jmp 0x10043cfb
mov dword [ebp - 4], 0x21
jmp 0x10043d0b
lea eax, [ebp - 0x680]
push eax
push 0x5f55
push 1
push 0x14a9
push 0x1484
push 0x1cf4
lea eax, [ebp - 0x6d0]
push eax
push 0x5058
push 0x564a
push 0x12d
push 1
call fcn.1003e2e9
add esp, 0x2c
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x6cc], eax
cmp dword [ebp - 0x30], 0
jne 0x10043dc8
cmp dword [ebp - 0x30], 0
je 0x10043d67
cmp dword [ebp - 0x30], 0
je 0x10043d67
cmp dword [ebp - 0x30], 0
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jle 0x10043d7b
mov dword [ebp - 0x2d8], 1
jmp 0x10043d82
and dword [ebp - 0x2d8], 0
mov eax, dword [ebp - 0x2d8]
mov dword [ebp - 0x418], eax
mov eax, dword [ebp - 0x418]
cmp eax, dword [ebp - 0x30]
jne 0x10043da5
mov dword [ebp - 0x2e0], 1
jmp 0x10043dac
and dword [ebp - 0x2e0], 0
mov eax, dword [ebp - 0x30]
imul eax, dword [ebp - 0x2e0]
xor ecx, ecx
sub ecx, eax
cmp ecx, 7
jge 0x10043dc8
and dword [ebp - 0x398], 0
jmp 0x10043dd2
mov dword [ebp - 0x398], 1
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x398], eax
jl 0x10043de9
mov dword [ebp - 0x2e8], 1
jmp 0x10043df0
and dword [ebp - 0x2e8], 0
push 0
lea ecx, [ebp - 0x680]
call fcn.1000e93c
mov ecx, dword [ebp - 0x2e8]
mov dword [eax], ecx
call fcn.10041644
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x680]
call fcn.1000e920
mov eax, dword [ebp - 0x94]
mov ecx, dword [ebp - 0x118]
sub ecx, dword [eax + 0x34]
mov dword [ebp - 0x3b0], ecx
mov dword [ebp - 0x1f0], 0xa772
mov dword [ebp - 0x430], 1
mov dword [ebp - 0x300], 0xfffffffa
mov dword [ebp - 0x3a0], 0x135e1f6f
mov dword [ebp - 0x5c4], 5
mov dword [ebp - 0x5ec], 0xea0d018d
mov dword [ebp - 0x3f0], 0x358e
mov dword [ebp - 0x500], 0x1000bd98
cmp dword [ebp - 0x3f0], 0x361f
jle 0x10043f85
push 0
push 0xac9
call dword [sym.imp.GDI32.dll_SelectClipRgn]
and dword [ebp - 0xb0], 0
jmp 0x10043eb1
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0x245e
jge 0x10043f75
and dword [ebp - 0xb8], 0
jmp 0x10043ed7
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0xa0b
jge 0x10043f70
and dword [ebp - 0xc0], 0
jmp 0x10043efd
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0x44fa
jge 0x10043f6b
and dword [ebp - 0xc8], 0
jmp 0x10043f1f
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0x2d7a
jge 0x10043f69
mov eax, dword [ebp - 0xb0]
imul eax, dword [ebp - 0xb8]
add eax, dword [ebp - 0xc0]
add eax, dword [ebp - 0xc8]
cdq
mov dword [ebp - 0x580], eax
mov dword [ebp - 0x57c], edx
push dword [ebp - 0x57c]
push dword [ebp - 0x580]
mov ecx, 0x10607538
call fcn.1000e7af
jmp 0x10043f12
jmp 0x10043ef0
jmp 0x10043eca
jmp 0x10043ea4
push 0x3bd
push 0x1414
call dword [sym.imp.GDI32.dll_RestoreDC]
mov dword [ebp - 0x6dc], 0xc3f4f880
mov dword [ebp - 4], 0x24
cmp dword [ebp - 0x3f0], 0x322a
jge 0x10043fb2
mov edx, dword [ebp - 0x500]
mov ecx, 0x10607538
call fcn.1001021f
jmp 0x10043fce
or dword [ebp - 4], 0xffffffff
jmp 0x10043fd8
mov dword [ebp - 0x208], 0
mov dword [ebp - 0x6e4], 0xc2184e5a
mov dword [ebp - 0x6ec], 1
mov dword [ebp - 0xd0], 0
jmp 0x1004400f
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 1
jge 0x1004402b
mov eax, dword [ebp - 0xd0]
mov dword [ebp + eax*4 - 0x2f8], 3
jmp 0x10044002
xor eax, eax
inc eax
je 0x1004404a
mov eax, dword [ebp - 0x5ec]
cmp eax, dword [ebp - 0x208]
je 0x1004404a
mov dword [ebp - 0x2f0], 1
jmp 0x10044051
and dword [ebp - 0x2f0], 0
mov eax, dword [ebp - 0x1f0]
mov dword [ebp - 0x3a0], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2f8]
imul eax, dword [ebp - 0x2f0]
mov ecx, dword [ebp - 0x1f0]
sub ecx, dword [ebp - 0x3a0]
cmp ecx, eax
jge 0x1004408d
mov dword [ebp - 0x50c], 1
jmp 0x10044094
and dword [ebp - 0x50c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2f8]
mov dword [ebp - 0x6f4], eax
mov eax, dword [ebp - 0x1f0]
mov dword [ebp - 0x430], eax
mov eax, dword [ebp - 0x430]
mov dword [ebp - 0x300], eax
cmp dword [ebp - 0x300], 0xd28
je 0x100440d7
mov dword [ebp - 0x3a8], 1
jmp 0x100440de
and dword [ebp - 0x3a8], 0
cmp dword [ebp - 0x3a8], 0
jg 0x100440f3
mov dword [ebp - 0x308], 1
jmp 0x100440fa
and dword [ebp - 0x308], 0
mov eax, dword [ebp - 0x308]
mov dword [ebp - 0x5c4], eax
mov eax, dword [ebp - 0x208]
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x3b0], 0
je 0x1004433c
mov dword [ebp - 0xd8], 0
jmp 0x10044138
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 1
jge 0x10044154
mov eax, dword [ebp - 0xd8]
mov dword [ebp + eax*4 - 0x310], 0
jmp 0x1004412b
mov byte [ebp - 0x65], 0
movzx eax, byte [ebp - 0x65]
test eax, eax
je 0x100442fe
mov dword [ebp - 0x3f8], 0x2086
mov dword [ebp - 0x5fc], 0x1000bdfc
cmp dword [ebp - 0x3f8], 0x20e4
jle 0x1004429e
push 0xa19
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
and dword [ebp - 0xf0], 0
jmp 0x100441ad
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0x7f4c
jge 0x1004429e
and dword [ebp - 0xe0], 0
jmp 0x100441d3
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0x37fa
jge 0x10044299
and dword [ebp - 0xe8], 0
jmp 0x100441f9
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0x7685
jge 0x10044294
and dword [ebp - 0xf8], 0
jmp 0x1004421f
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0x8051
jge 0x1004428f
mov eax, dword [ebp - 0xe0]
imul eax, dword [ebp - 0xe8]
and eax, dword [ebp - 0xf0]
or eax, dword [ebp - 0xf8]
cdq
mov dword [ebp - 0x58c], eax
mov dword [ebp - 0x588], edx
push dword [ebp - 0x588]
push dword [ebp - 0x58c]
lea ecx, [ebp - 0x8ac]
call fcn.1000d330
pop ecx
pop ecx
mov dword [ebp - 0x518], eax
mov ecx, dword [ebp - 0x518]
call fcn.1000e78f
push eax
call fcn.10048556
pop ecx
lea ecx, [ebp - 0x8ac]
call fcn.1000e785
jmp 0x10044212
jmp 0x100441ec
jmp 0x100441c6
jmp 0x100441a0
push 1
push 0x33dd
push 1
push 0x69ef
push 0x7a5a
call fcn.1003e654
add esp, 0x14
mov dword [ebp - 4], 0x26
cmp dword [ebp - 0x3f8], 0x1fed
jge 0x100442d8
push dword [ebp - 0x5fc]
call fcn.10048556
pop ecx
jmp 0x100442f4
or dword [ebp - 4], 0xffffffff
jmp 0x100442fe
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x310]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x310], eax
push 0x3b61
push 0x7d7b
lea eax, [ebp - 0x28]
push eax
push 1
push 1
lea eax, [ebp - 0x3b0]
push eax
push 1
call fcn.1003e843
add esp, 0x1c
mov dword [ebp - 0x524], 8
mov dword [ebp - 0x100], 0
jmp 0x1004435f
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 1
jge 0x10044378
mov eax, dword [ebp - 0x100]
mov dword [ebp + eax*4 - 0x44], 0
jmp 0x10044352
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x44], 0x1b
jmp 0x1004439d
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x44]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x44], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x44], 0xfffffff9
jg 0x100443b1
call fcn.10041673
jmp 0x10044388
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x44], 0
jne 0x100443de
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x44]
mov dword [ebp - 0x318], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x318]
mov dword [ebp + eax - 0x44], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x44]
mov dword [ebp - 0x524], eax
push dword [ebp - 0x28]
call fcn.1002f362
pop ecx
test eax, eax
jne 0x10044553
push 2
lea ecx, [ebp - 0x698]
call fcn.1000e8c4
mov dword [ebp - 4], 0x28
mov dword [ebp - 0x108], 0xa66fe7d8
mov dword [ebp - 0x6fc], 7
mov dword [ebp - 0x704], 0xd4e677b5
mov dword [ebp - 0x70c], 0xe1f6f084
push 1
push 0x6ce9
lea eax, [ebp - 0x714]
push eax
push 0x4181
push 0
lea eax, [ebp - 0x698]
push eax
call fcn.1003f0d3
add esp, 0x18
mov dword [ebp - 0x108], 0
jmp 0x10044478
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 1
jg 0x1004453d
mov dword [ebp - 0xa4], 0xb25b3b9d
mov dword [ebp - 0x420], 0
mov dword [ebp - 0x110], 0
jmp 0x100444b2
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 4
jge 0x100444ce
mov eax, dword [ebp - 0x110]
mov dword [ebp + eax*4 - 0x8e4], 0xffffffff
jmp 0x100444a5
push 0x6bd8
push 1
lea eax, [ebp - 0x420]
push eax
push 1
push 0x12e1
push 0x423f
call fcn.1003ede3
add esp, 0x18
mov dword [ebp - 0xa4], 1
jmp 0x10044509
mov eax, dword [ebp - 0xa4]
dec eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0
jl 0x10044538
call fcn.1004169e
push 1
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0x420]
push eax
lea eax, [ebp - 0x698]
push eax
call fcn.1003f053
add esp, 0x10
jmp 0x100444fc
jmp 0x1004446b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x698]
call fcn.1000e920
xor eax, eax
jmp 0x10045b09
mov dword [ebp - 0x5cc], 9
push 4
lea ecx, [ebp - 0x7b8]
call fcn.1000e8c4
mov dword [ebp - 4], 0x29
push 1
push 0x2e18
push 0xa4c
lea eax, [ebp - 0x7b8]
push eax
lea eax, [ebp - 0x71c]
push eax
push 0x5464
push 1
call fcn.1003f1a1
add esp, 0x1c
push 0x68c1
push 0x12d4
push 0x6d30
push 0x4933
push 0x6344
lea eax, [ebp - 0x5cc]
push eax
push 0x6d01
push 0x5d54
push 1
push 0x1767
push 1
push 0x189f
push 0x1376
push 0x2230
call fcn.1003f755
add esp, 0x38
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7b8]
call fcn.1000e920
push 0x291e
push 0x7162
push 0x33b
push 1
push 0x2b4a
lea eax, [ebp - 0x28]
push eax
push 0x679b
push 0x1461
push 1
push 1
push 0x34b1
call fcn.1003fbd3
add esp, 0x2c
call fcn.100416c4
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
cmp dword [eax + 0x28], 0
je 0x100454f6
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x118]
add ecx, dword [eax + 0x28]
mov dword [ebp - 0x400], ecx
mov dword [ebp - 0x530], 0xcea5d6c0
push 0x7ad1
push 1
push 0x7699
lea eax, [ebp - 0x530]
push eax
push 0x891
push 0x76ba
push 0x67a6
push 1
push 1
call fcn.1003ff06
add esp, 0x24
call fcn.100417fa
cmp dword [ebp - 0x400], 0
jne 0x100448b2
mov dword [ebp - 0x3b8], 2
mov dword [ebp - 0x53c], 3
push 3
lea ecx, [ebp - 0x6b0]
call fcn.1000e8c4
mov dword [ebp - 4], 0x2a
push 1
lea ecx, [ebp - 0x61c]
call fcn.1000e8c4
mov byte [ebp - 4], 0x2b
mov dword [ebp - 0x328], 1
mov dword [ebp - 0x88], 0
jmp 0x100446f6
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 3
jge 0x10044718
push dword [ebp - 0x88]
lea ecx, [ebp - 0x6b0]
call fcn.1000e93c
mov dword [eax], 0x4ebb0cb8
jmp 0x100446e9
mov dword [ebp - 0x320], 0x5986
mov dword [ebp - 0x5f4], 0x1000be60
cmp dword [ebp - 0x320], 0x5994
jle 0x100447e4
and dword [ebp - 0x120], 0
jmp 0x10044752
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0xc1f
jge 0x100447e4
and dword [ebp - 0x128], 0
jmp 0x10044778
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0x5711
jge 0x100447df
and dword [ebp - 0x130], 0
jmp 0x1004479a
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0x1329
jge 0x100447dd
mov eax, dword [ebp - 0x120]
add eax, dword [ebp - 0x128]
sub eax, dword [ebp - 0x130]
cdq
mov dword [ebp - 0x598], eax
mov dword [ebp - 0x594], edx
push dword [ebp - 0x594]
push dword [ebp - 0x598]
mov ecx, 0x10607538
call fcn.1000e7af
jmp 0x1004478d
jmp 0x1004476b
jmp 0x10044745
lea eax, [ebp - 0x61c]
push eax
lea eax, [ebp - 0x88]
push eax
call fcn.1004191f
pop ecx
pop ecx
mov byte [ebp - 4], 0x2c
cmp dword [ebp - 0x320], 0x5610
jge 0x10044819
mov edx, dword [ebp - 0x5f4]
mov ecx, 0x10607538
call fcn.1001021f
jmp 0x10044835
mov dword [ebp - 4], 0x2b
jmp 0x10044845
lea eax, [ebp - 0x3b8]
push eax
lea eax, [ebp - 0x53c]
push eax
lea eax, [ebp - 0x6b0]
push eax
lea eax, [ebp - 0x61c]
push eax
lea eax, [ebp - 0x328]
push eax
call fcn.100413aa
add esp, 0x14
lea eax, [ebp - 0x3b8]
push eax
lea eax, [ebp - 0x328]
push eax
lea eax, [ebp - 0x61c]
push eax
call fcn.10041468
add esp, 0xc
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x61c]
call fcn.1000e920
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6b0]
call fcn.1000e920
xor eax, eax
jmp 0x10045b09
mov dword [ebp - 0x98], 0x32667a87
mov dword [ebp - 0x724], 0x485bf25c
mov dword [ebp - 0x138], 0
jmp 0x100448df
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 1
jge 0x100448fb
mov eax, dword [ebp - 0x138]
mov dword [ebp + eax*4 - 0x5d4], 0x99ff
jmp 0x100448d2
mov dword [ebp - 0x98], 0
jmp 0x10044914
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0
jg 0x10044993
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x548], 0xffffffff
push 0x10ea
lea eax, [ebp - 0x90]
push eax
push 0x20fc
push 0x53ea
push 1
push 1
call fcn.100402c6
add esp, 0x18
mov dword [ebp - 0x90], 0
jmp 0x1004496c
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0
jg 0x1004498e
mov eax, dword [ebp - 0x98]
imul eax, dword [ebp + eax*4 - 0x5d4], 0x2006
mov dword [ebp - 0x548], eax
jmp 0x1004495f
jmp 0x10044907
push 0
push 1
push 0xdeadbeef
call dword [ebp - 0x400]
mov dword [ebp - 0x460], eax
mov dword [ebp - 0x554], 1
mov dword [ebp - 0x140], 0
jmp 0x100449cb
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 2
jge 0x100449e7
mov eax, dword [ebp - 0x140]
mov dword [ebp + eax*4 - 0x1e0], 0xffffffff
jmp 0x100449be
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x1e0], 0xfffffff5
jmp 0x10044a15
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1e0]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x1e0], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1e0], 0xfffffff8
je 0x10044c38
mov dword [ebp - 0x54], 8
mov dword [ebp - 0x26c], 0xffffffff
mov dword [ebp - 0x54], 0
jmp 0x10044a4a
mov eax, dword [ebp - 0x54]
dec eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0xfffffff8
jle 0x10044c33
mov dword [ebp - 0x1f8], 0xa9a9
cmp dword [ebp - 0x54], 0
jne 0x10044b36
xor eax, eax
inc eax
je 0x10044a82
cmp dword [ebp - 0x1f8], 0
je 0x10044a82
mov dword [ebp - 0x330], 1
jmp 0x10044a89
and dword [ebp - 0x330], 0
cmp dword [ebp - 0x330], 5
jbe 0x10044a9e
mov dword [ebp - 0x3c0], 1
jmp 0x10044aa5
and dword [ebp - 0x3c0], 0
mov eax, dword [ebp - 0x1f8]
cmp dword [ebp - 0x3c0], eax
je 0x10044abf
mov dword [ebp - 0x230], 1
jmp 0x10044ac6
and dword [ebp - 0x230], 0
cmp dword [ebp - 0x230], 9
jge 0x10044adb
mov dword [ebp - 0x22c], 1
jmp 0x10044ae2
and dword [ebp - 0x22c], 0
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x22c], eax
je 0x10044af9
mov dword [ebp - 0x23c], 1
jmp 0x10044b00
and dword [ebp - 0x23c], 0
cmp dword [ebp - 0x23c], 0xffffffff
jae 0x10044b15
mov dword [ebp - 0x244], 1
jmp 0x10044b1c
and dword [ebp - 0x244], 0
cmp dword [ebp - 0x244], 0
je 0x10044b2a
xor eax, eax
inc eax
jne 0x10044b36
mov dword [ebp - 0x24c], 1
jmp 0x10044b3d
and dword [ebp - 0x24c], 0
cmp dword [ebp - 0x24c], 0xfffc
jae 0x10044b55
mov dword [ebp - 0x254], 1
jmp 0x10044b5c
and dword [ebp - 0x254], 0
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x1e0]
sub ecx, dword [ebp - 0x254]
cmp ecx, dword [ebp + eax - 0x1e0]
jne 0x10044b8a
mov dword [ebp - 0x25c], 1
jmp 0x10044b91
and dword [ebp - 0x25c], 0
mov eax, dword [ebp - 0x26c]
cmp dword [ebp - 0x25c], eax
jle 0x10044bab
mov dword [ebp - 0x5e4], 1
jmp 0x10044bb2
and dword [ebp - 0x5e4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1e0]
mov dword [ebp - 0x72c], eax
mov eax, dword [ebp - 0x54]
sub eax, 0x45b8362b
imul eax, eax, 0x5751
test eax, eax
je 0x10044bf3
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1e0], 0
je 0x10044bf3
mov dword [ebp - 0x264], 1
jmp 0x10044bfa
and dword [ebp - 0x264], 0
mov eax, dword [ebp - 0x1f8]
cmp eax, dword [ebp - 0x264]
jl 0x10044c14
mov dword [ebp - 0x274], 1
jmp 0x10044c1b
and dword [ebp - 0x274], 0
mov eax, dword [ebp - 0x26c]
imul eax, dword [ebp - 0x274]
mov dword [ebp - 0x554], eax
jmp 0x10044a43
jmp 0x100449fa
cmp dword [ebp - 0x460], 0
jne 0x1004545b
mov dword [ebp - 0x14], 0x261fc42f
mov dword [ebp - 0x7c], 0xffffffff
mov dword [ebp - 0x148], 0
jmp 0x10044c6c
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 3
jge 0x10044c85
mov eax, dword [ebp - 0x148]
mov dword [ebp + eax*4 - 0x64], 1
jmp 0x10044c5f
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x64], 0xff23
jg 0x10044d80
mov eax, 0x5b2906c9
test eax, eax
je 0x10044d54
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x64]
mov dword [ebp - 0x734], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x64], 0xffffffff
jl 0x10044ccf
mov dword [ebp - 0x27c], 1
jmp 0x10044cd6
and dword [ebp - 0x27c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x64]
cmp dword [ebp - 0x27c], eax
jl 0x10044cf4
mov dword [ebp - 0x284], 1
jmp 0x10044cfb
and dword [ebp - 0x284], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x284]
shl ecx, 1
cmp ecx, dword [ebp + eax - 0x64]
jg 0x10044d1b
mov dword [ebp - 0x464], 1
jmp 0x10044d22
and dword [ebp - 0x464], 0
mov dword [ebp - 0x14], 0x5f27
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x73c], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x64]
mov dword [ebp - 0x744], eax
cmp dword [ebp - 0x14], 0
je 0x10044d54
mov dword [ebp - 0x28c], 1
jmp 0x10044d5b
and dword [ebp - 0x28c], 0
cmp dword [ebp - 0x28c], 0xfffffff8
jne 0x10044d71
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x64], 0
jne 0x10044d80
cmp dword [ebp - 0x14], 0
jne 0x10044d80
and dword [ebp - 0x294], 0
jmp 0x10044d8a
mov dword [ebp - 0x294], 1
cmp dword [ebp - 0x294], 0x831966c4
jae 0x10044da2
mov dword [ebp - 0x29c], 1
jmp 0x10044da9
and dword [ebp - 0x29c], 0
cmp dword [ebp - 0x29c], 0xfffffff6
jg 0x10044dbe
mov dword [ebp - 0x2a4], 1
jmp 0x10044dc5
and dword [ebp - 0x2a4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x64]
cmp dword [ebp - 0x2a4], eax
je 0x10044f7d
mov dword [ebp - 0x80], 1
mov dword [ebp - 0x20c], 0xb79a97a8
mov dword [ebp - 0x46c], 0xffffffff
push 3
lea ecx, [ebp - 0x6c8]
call fcn.1000e8c4
mov dword [ebp - 4], 0x2e
push 0x5edd
push 1
lea eax, [ebp - 0x74c]
push eax
lea eax, [ebp - 0x6c8]
push eax
push 1
push 0x3030
push 1
push 0x2cf0
call fcn.100404b3
add esp, 0x20
mov dword [ebp - 0x14], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x64]
mov dword [ebp - 0x754], eax
mov eax, dword [ebp - 0x80]
sub eax, dword [ebp - 0x80]
cmp eax, dword [ebp - 0x80]
jg 0x10044e63
mov dword [ebp - 0x2ac], 1
jmp 0x10044e6a
and dword [ebp - 0x2ac], 0
mov eax, dword [ebp - 0x80]
add eax, dword [ebp - 0x2ac]
cmp dword [ebp - 0x80], eax
jge 0x10044e84
mov dword [ebp - 0x2b4], 1
jmp 0x10044e8b
and dword [ebp - 0x2b4], 0
mov eax, dword [ebp - 0x2b4]
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 0
jne 0x10044eb2
cmp dword [ebp - 0x20c], 0
jne 0x10044eb2
mov eax, 0xf77d
test eax, eax
je 0x10044ec5
push 0xfffffffffffffffe
pop eax
test eax, eax
je 0x10044ec5
mov dword [ebp - 0x2bc], 1
jmp 0x10044ecc
and dword [ebp - 0x2bc], 0
mov eax, dword [ebp - 0x46c]
imul eax, dword [ebp - 0x2bc]
test eax, eax
jne 0x10044ef3
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x64], 0
jne 0x10044ef3
and dword [ebp - 0x2c4], 0
jmp 0x10044efd
mov dword [ebp - 0x2c4], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x64]
cmp dword [ebp - 0x2c4], eax
je 0x10044f1b
mov dword [ebp - 0x474], 1
jmp 0x10044f22
and dword [ebp - 0x474], 0
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x75c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x64], 0x8c040c8e
ja 0x10044f47
mov dword [ebp - 0x200], 1
jmp 0x10044f4e
and dword [ebp - 0x200], 0
push 2
lea ecx, [ebp - 0x6c8]
call fcn.1000e93c
mov ecx, dword [ebp - 0x200]
mov dword [eax], ecx
mov eax, dword [ebp - 0x200]
mov dword [ebp - 0x14], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6c8]
call fcn.1000e920
jmp 0x10044fb6
call fcn.10041967
push 0x76b
push 0x4865
push 1
push 0xda8
push 0x2a32
push 0x770
push 0x2fd8
push 0x14a2
push 0x2134
push 1
call fcn.10040810
add esp, 0x28
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x64], 0
je 0x10045105
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x64], 1
jge 0x10044fdf
mov dword [ebp - 0x2cc], 1
jmp 0x10044fe6
and dword [ebp - 0x2cc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x64]
cmp dword [ebp - 0x2cc], eax
jge 0x10045004
mov dword [ebp - 0x47c], 1
jmp 0x1004500b
and dword [ebp - 0x47c], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x7ac], eax
cmp dword [ebp - 0x14], 0
jne 0x10045029
cmp dword [ebp - 0x14], 0
jne 0x10045029
and dword [ebp - 0x2d4], 0
jmp 0x10045033
mov dword [ebp - 0x2d4], 1
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x2d4]
jne 0x10045050
mov eax, 0xff49
test eax, eax
jne 0x10045050
and dword [ebp - 0x2dc], 0
jmp 0x1004505a
mov dword [ebp - 0x2dc], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x64]
add eax, dword [ebp - 0x2dc]
cmp dword [ebp - 0x14], eax
jl 0x1004507b
mov dword [ebp - 0x2e4], 1
jmp 0x10045082
and dword [ebp - 0x2e4], 0
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x2e4], eax
jle 0x10045099
mov dword [ebp - 0x2ec], 1
jmp 0x100450a0
and dword [ebp - 0x2ec], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x64]
cmp dword [ebp - 0x2ec], eax
jge 0x100450bd
mov dword [ebp - 0x484], 1
jmp 0x100450c4
and dword [ebp - 0x484], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x64]
mov dword [ebp - 0x6d8], eax
mov eax, 0x6b35ed35
test eax, eax
jne 0x100450e9
mov dword [ebp - 0x2f4], 1
jmp 0x100450f0
and dword [ebp - 0x2f4], 0
cmp dword [ebp - 0x2f4], 5
ja 0x10045105
mov dword [ebp - 0x2fc], 1
jmp 0x1004510c
and dword [ebp - 0x2fc], 0
mov eax, dword [ebp - 0x2fc]
sub eax, dword [ebp - 0x7c]
je 0x100452ed
mov dword [ebp - 0x4c], 1
mov dword [ebp - 0x354], 0x8a7cf5ee
mov dword [ebp - 0x334], 0x7968679
mov dword [ebp - 0x494], 0
mov byte [ebp - 0x4d], 0
lea eax, [ebp - 0x4d]
push eax
call fcn.10041996
pop ecx
cmp dword [ebp - 0x4c], 0
jne 0x10045160
mov dword [ebp - 0x34c], 1
jmp 0x10045167
and dword [ebp - 0x34c], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x64], 0
jne 0x10045183
cmp dword [ebp - 0x4c], 0
jne 0x10045183
and dword [ebp - 0x228], 0
jmp 0x1004518d
mov dword [ebp - 0x228], 1
cmp dword [ebp - 0x228], 0
jne 0x100451a2
mov dword [ebp - 0x30c], 1
jmp 0x100451a9
and dword [ebp - 0x30c], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x30c], eax
jg 0x100451c7
push 5
pop eax
test eax, eax
je 0x100451c7
mov dword [ebp - 0x314], 1
jmp 0x100451ce
and dword [ebp - 0x314], 0
mov eax, dword [ebp - 0x314]
sub eax, dword [ebp - 0x4c]
cmp eax, 0x84746ba8
jae 0x100451ea
mov dword [ebp - 0x31c], 1
jmp 0x100451f1
and dword [ebp - 0x31c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x64]
add eax, dword [ebp - 0x31c]
jne 0x10045212
cmp dword [ebp - 0x4c], 0
jne 0x10045212
and dword [ebp - 0x324], 0
jmp 0x1004521c
mov dword [ebp - 0x324], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x64]
cmp dword [ebp - 0x324], eax
jge 0x10045239
mov dword [ebp - 0x32c], 1
jmp 0x10045240
and dword [ebp - 0x32c], 0
cmp dword [ebp - 0x32c], 0xc2d9
jge 0x10045258
mov dword [ebp - 0x344], 1
jmp 0x1004525f
and dword [ebp - 0x344], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x334], eax
mov eax, dword [ebp - 0x334]
cmp eax, dword [ebp - 0x344]
jg 0x10045282
mov dword [ebp - 0x48c], 1
jmp 0x10045289
and dword [ebp - 0x48c], 0
cmp dword [ebp - 0x14], 0
jne 0x1004529b
mov dword [ebp - 0x35c], 1
jmp 0x100452a2
and dword [ebp - 0x35c], 0
mov eax, dword [ebp - 0x34c]
mov dword [ebp - 0x354], eax
mov eax, dword [ebp - 0x354]
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x7c]
imul eax, dword [ebp - 0x4c]
cmp eax, dword [ebp - 0x35c]
jge 0x100452d2
mov dword [ebp - 0x364], 1
jmp 0x100452d9
and dword [ebp - 0x364], 0
mov eax, dword [ebp - 0x364]
sub eax, dword [ebp - 0x4c]
mov dword [ebp - 0x494], eax
jmp 0x10045454
mov dword [ebp - 0x1e8], 0
mov dword [ebp - 0x4ac], 0x298c0595
mov dword [ebp - 0x65c], 0xfffffffa
mov dword [ebp - 0x658], 0xfffffffa
mov dword [ebp - 0x654], 0xfffffffa
mov dword [ebp - 0x650], 0xfffffffa
lea ecx, [ebp - 0x1f9]
call fcn.1000ec57
push eax
lea eax, [ebp - 0x64c]
push eax
lea eax, [ebp - 0x65c]
push eax
lea ecx, [ebp - 0x7e0]
call fcn.100261fc
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x7c8]
call fcn.100261d6
mov dword [ebp - 4], 0x2f
mov dword [ebp - 0x14], 0
jmp 0x10045375
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 7
jne 0x10045445
mov dword [ebp - 0x4a4], 1
mov eax, dword [ebp - 0x1e8]
mov dword [ebp - 0x764], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x64], 0xa0a0
jge 0x100453b5
push 0xfffffffffffffffb
pop eax
test eax, eax
jne 0x100453b5
and dword [ebp - 0x36c], 0
jmp 0x100453bf
mov dword [ebp - 0x36c], 1
cmp dword [ebp - 0x36c], 2
je 0x100453d4
mov dword [ebp - 0x374], 1
jmp 0x100453db
and dword [ebp - 0x374], 0
mov eax, dword [ebp - 0x1e8]
add eax, dword [ebp - 0x374]
cmp eax, 1
jne 0x100453f8
mov dword [ebp - 0x49c], 1
jmp 0x100453ff
and dword [ebp - 0x49c], 0
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x6e0], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x64]
mov dword [ebp - 0x78c], eax
mov eax, dword [ebp - 0x4a4]
mov ecx, dword [ebp - 0x7c]
lea esi, [ecx + eax - 6]
sub esi, dword [ebp - 0x1e8]
sub esi, dword [ebp - 0x4ac]
push 2
lea ecx, [ebp - 0x7c8]
call fcn.1000e93c
mov dword [eax], esi
jmp 0x1004536e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7c8]
call fcn.1000e920
xor eax, eax
jmp 0x10045b09
push 2
lea ecx, [ebp - 0x7d8]
call fcn.1000e8c4
mov dword [ebp - 4], 0x30
mov dword [ebp - 0x158], 0xeef20fe6
mov dword [ebp - 0x150], 0
jmp 0x10045492
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 2
jge 0x100454b4
push dword [ebp - 0x150]
lea ecx, [ebp - 0x7d8]
call fcn.1000e93c
mov dword [eax], 0x571177e8
jmp 0x10045485
mov dword [ebp - 0x158], 0
jmp 0x100454cd
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 1
jg 0x100454dd
call fcn.100419c9
jmp 0x100454c0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7d8]
call fcn.1000e920
mov eax, dword [ebp - 0x28]
mov dword [eax + 0x10], 1
mov dword [ebp - 0x40c], 0x588e
mov dword [ebp - 0x4c4], 0x1000be78
cmp dword [ebp - 0x40c], 0x5a74
jle 0x1004558d
and dword [ebp - 0x160], 0
jmp 0x1004552c
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 0x7e65
jge 0x1004558d
and dword [ebp - 0x168], 0
jmp 0x1004554e
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 0x4e58
jge 0x1004558b
mov eax, dword [ebp - 0x160]
or eax, dword [ebp - 0x168]
cdq
mov dword [ebp - 0x5a4], eax
mov dword [ebp - 0x5a0], edx
push dword [ebp - 0x5a0]
push dword [ebp - 0x5a4]
mov ecx, 0x10607538
call fcn.1000e7af
jmp 0x10045541
jmp 0x1004551f
push 2
lea ecx, [ebp - 0x1b8]
call fcn.1000e8c4
mov dword [ebp - 4], 0x31
mov dword [ebp - 0x18], 0x18d4081c
mov dword [ebp - 0x6e8], 0x1ad5
mov dword [ebp - 0x1f4], 0x3b6abb57
push 1
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x1b8]
push eax
push 0x3fd1
push 1
push 0x4d53
call fcn.10040f8d
add esp, 0x18
mov dword [ebp - 0x24], 0
jmp 0x100455ed
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x10045603
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x3c4], 0xec0351a9
jmp 0x100455e6
mov dword [ebp - 0x24], 0
jmp 0x10045613
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 4
jge 0x10045629
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x7f8], 0x7865d486
jmp 0x1004560c
mov dword [ebp - 0x18], 0
jmp 0x10045639
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jg 0x10045a90
mov dword [ebp - 0x76c], 0
mov dword [ebp - 0x170], 0
jmp 0x10045666
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 2
jge 0x10045682
mov eax, dword [ebp - 0x170]
mov dword [ebp + eax*4 - 0x648], 0x57b6a69e
jmp 0x10045659
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1b8]
call fcn.1000e93c
cmp dword [eax], 0
je 0x100456b4
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1b8]
call fcn.1000e93c
cmp dword [eax], 0
je 0x100456b4
mov dword [ebp - 0x37c], 1
jmp 0x100456bb
and dword [ebp - 0x37c], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x37c], eax
jl 0x100456d2
mov dword [ebp - 0x384], 1
jmp 0x100456d9
and dword [ebp - 0x384], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x384], eax
jl 0x10045708
mov eax, 0xb0bf2465
test eax, eax
jne 0x10045708
push 0
lea ecx, [ebp - 0x1b8]
call fcn.1000e93c
cmp dword [eax], 0
jne 0x10045708
and dword [ebp - 0x38c], 0
jmp 0x10045712
mov dword [ebp - 0x38c], 1
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1b8]
call fcn.1000e93c
mov eax, dword [eax]
add eax, dword [ebp - 0x38c]
mov dword [ebp - 0x394], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x394]
mov dword [ebp + eax - 0x3c4], ecx
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1b8]
call fcn.1000e93c
mov eax, dword [eax]
cmp eax, dword [ebp - 0x394]
jl 0x10045765
mov dword [ebp - 0x39c], 1
jmp 0x1004576c
and dword [ebp - 0x39c], 0
cmp dword [ebp - 0x39c], 0xfffd
jae 0x10045784
mov dword [ebp - 0x3a4], 1
jmp 0x1004578b
and dword [ebp - 0x3a4], 0
push 1
lea ecx, [ebp - 0x1b8]
call fcn.1000e93c
mov ecx, dword [ebp - 0x3a4]
cmp ecx, dword [eax]
jne 0x100457ae
mov dword [ebp - 0x3ac], 1
jmp 0x100457b5
and dword [ebp - 0x3ac], 0
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1b8]
call fcn.1000e93c
mov ecx, dword [ebp - 0x3ac]
cmp ecx, dword [eax]
je 0x10045833
mov dword [ebp - 0x178], 0x2f63069b
mov dword [ebp - 0x178], 0
jmp 0x100457f0
mov eax, dword [ebp - 0x178]
dec eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 0
jl 0x1004582e
mov dword [ebp - 0x180], 0xb748abb7
mov dword [ebp - 0x180], 1
jmp 0x1004581c
mov eax, dword [ebp - 0x180]
dec eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 0
jl 0x1004582c
call fcn.10041a0a
jmp 0x1004580f
jmp 0x100457e3
jmp 0x10045a78
mov dword [ebp - 0x3bc], 0xffffffff
mov dword [ebp - 0x404], 1
mov dword [ebp - 0x6f0], 0x18de0f4c
mov dword [ebp - 0x7cc], 0xffffffff
mov dword [ebp - 0x6f8], 0
mov dword [ebp - 0x3f4], 0xc027682c
mov dword [ebp - 0x774], 0xffffffff
mov dword [ebp - 0x700], 0xffffffff
mov dword [ebp - 0x1ec], 0xfffffffb
mov dword [ebp - 0x34], 0
jmp 0x1004589d
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 3
jge 0x100458b3
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x834], 0xb016fefd
jmp 0x10045896
mov dword [ebp - 0x34], 0
jmp 0x100458c3
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 4
jge 0x100458d9
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x8d4], 0x2ceb
jmp 0x100458bc
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1b8]
call fcn.1000e93c
cmp dword [eax], 0xffffffff
jne 0x100458f8
mov dword [ebp - 0x3b4], 1
jmp 0x100458ff
and dword [ebp - 0x3b4], 0
mov eax, dword [ebp - 0x3b4]
neg eax
mov dword [ebp - 0x3bc], eax
mov esi, dword [ebp - 0x3bc]
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1b8]
call fcn.1000e93c
add esi, dword [eax]
jne 0x10045a3e
push 4
pop eax
imul eax, eax, 0
lea eax, [ebp + eax - 0x3c4]
mov dword [ebp - 0x3cc], eax
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1b8]
call fcn.1000e93c
mov ecx, dword [ebp - 0x3cc]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x1ec]
mov dword [ebp - 0x4b4], eax
mov eax, dword [ebp - 0x3cc]
mov eax, dword [eax]
mov dword [ebp - 0x4bc], eax
mov eax, dword [ebp - 0x1ec]
dec eax
mov dword [ebp - 0x1ec], eax
mov eax, dword [ebp - 0x4b4]
cmp eax, dword [ebp - 0x4bc]
jne 0x10045995
mov dword [ebp - 0x3dc], 1
jmp 0x1004599c
and dword [ebp - 0x3dc], 0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x648], 0xfffffffd
jge 0x100459b8
mov dword [ebp - 0x3d4], 1
jmp 0x100459bf
and dword [ebp - 0x3d4], 0
cmp dword [ebp - 0x3d4], 0x8e036b6a
je 0x100459d7
mov dword [ebp - 0x3e4], 1
jmp 0x100459de
and dword [ebp - 0x3e4], 0
mov eax, dword [ebp - 0x3dc]
cmp eax, dword [ebp - 0x3e4]
jge 0x100459f8
mov dword [ebp - 0x3ec], 1
jmp 0x100459ff
and dword [ebp - 0x3ec], 0
mov eax, dword [ebp - 0x3ec]
mov dword [ebp - 0x3f4], eax
mov esi, dword [ebp - 0x3f4]
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1b8]
call fcn.1000e93c
cmp esi, dword [eax]
jge 0x10045a3e
push 1
lea ecx, [ebp - 0x1b8]
call fcn.1000e93c
cmp dword [eax], 0
jne 0x10045a3e
and dword [ebp - 0x3fc], 0
jmp 0x10045a48
mov dword [ebp - 0x3fc], 1
mov eax, dword [ebp - 0x3fc]
mov dword [ebp - 0x404], eax
mov eax, dword [ebp - 0x404]
add eax, 0x37e2
mov dword [ebp - 0x1f4], eax
mov eax, dword [ebp - 0x1f4]
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x7f8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x648]
mov dword [ebp - 0x1f4], eax
jmp 0x10045632
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1b8]
call fcn.1000e920
mov dword [ebp - 4], 0x32
cmp dword [ebp - 0x40c], 0x5850
jge 0x10045ac2
mov edx, dword [ebp - 0x4c4]
mov ecx, 0x10607538
call fcn.1001021f
jmp 0x10045ade
or dword [ebp - 4], 0xffffffff
jmp 0x10045ae8
mov eax, dword [ebp - 0x28]
cmp dword [eax + 0x10], 0
je 0x10045afc
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x414], eax
jmp 0x10045b03
and dword [ebp - 0x414], 0
mov eax, dword [ebp - 0x414]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret