Function at 0x10043fb5
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10082cbc
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x6b8
push esi
and dword [ebp - 0x35c], 0
push 1
lea ecx, [ebp - 0xf8]
call fcn.10017b45
and dword [ebp - 4], 0
mov dword [ebp - 0x44], 0xd329b3a0
mov dword [ebp - 0x430], 1
mov dword [ebp - 0x42c], 1
mov dword [ebp - 0x428], 1
mov dword [ebp - 0x424], 1
mov dword [ebp - 0x3cc], 0xfffffffd
mov dword [ebp - 0x54c], 0xfffffffb
mov dword [ebp - 0x540], 0xfffffff6
mov dword [ebp - 0x548], 0x8dbe583c
mov dword [ebp - 0x550], 0xfffffffe
mov dword [ebp - 0x40], 0
jmp 0x1004405d
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 1
jge 0x10044079
push dword [ebp - 0x40]
lea ecx, [ebp - 0xf8]
call fcn.10017bb2
mov dword [eax], 0x532bb11a
jmp 0x10044056
mov dword [ebp - 0x40], 0
jmp 0x10044089
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 4
jge 0x1004409f
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x678], 0xa2b617f2
jmp 0x10044082
push 0
lea ecx, [ebp - 0xf8]
call fcn.10017bb2
push 0
lea ecx, [ebp - 0xf8]
call fcn.10017bb2
mov esi, eax
push 0
lea ecx, [ebp - 0xf8]
call fcn.10017bb2
mov ecx, dword [esi]
cmp ecx, dword [eax]
jg 0x100440da
mov dword [ebp - 0x26c], 1
jmp 0x100440e1
and dword [ebp - 0x26c], 0
push 0
lea ecx, [ebp - 0xf8]
call fcn.10017bb2
mov ecx, dword [ebp - 0x26c]
cmp ecx, dword [eax]
jge 0x10044104
mov dword [ebp - 0x36c], 1
jmp 0x1004410b
and dword [ebp - 0x36c], 0
cmp dword [ebp - 0x36c], 0x9dbe
jne 0x10044123
mov dword [ebp - 0x374], 1
jmp 0x1004412a
and dword [ebp - 0x374], 0
push 0
lea ecx, [ebp - 0xf8]
call fcn.10017bb2
mov eax, dword [eax]
cmp eax, dword [ebp - 0x374]
jne 0x1004414d
mov dword [ebp - 0x37c], 1
jmp 0x10044154
and dword [ebp - 0x37c], 0
mov esi, dword [ebp - 0x37c]
sub esi, 0x7f2be925
push 0
lea ecx, [ebp - 0xf8]
call fcn.10017bb2
cmp esi, dword [eax]
jle 0x1004417d
mov dword [ebp - 0x384], 1
jmp 0x10044184
and dword [ebp - 0x384], 0
cmp dword [ebp - 0x384], 0xf495e3b3
jae 0x1004419c
mov dword [ebp - 0x38c], 1
jmp 0x100441a3
and dword [ebp - 0x38c], 0
cmp dword [ebp - 0x38c], 0xa29f
jg 0x100441bb
mov dword [ebp - 0x18c], 1
jmp 0x100441c2
and dword [ebp - 0x18c], 0
push 0
lea ecx, [ebp - 0xf8]
call fcn.10017bb2
mov ecx, dword [ebp - 0x18c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x18c], eax
jle 0x100441ef
push 0
lea ecx, [ebp - 0xf8]
call fcn.10017bb2
push 0
lea ecx, [ebp - 0xf8]
call fcn.10017bb2
mov ecx, dword [ebp - 0x44]
cmp dword [eax], ecx
jne 0x10044231
mov dword [ebp - 0x44], 0
jmp 0x10044213
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0
jg 0x1004422c
mov byte [ebp - 0x4f], 0
push 0
lea eax, [ebp - 0x4f]
push eax
call fcn.10043cad
pop ecx
pop ecx
jmp 0x1004420c
jmp 0x100443ee
mov dword [ebp - 0x5c], 0xffffffff
push 0
lea ecx, [ebp - 0xf8]
call fcn.10017bb2
cmp dword [eax], 0
jne 0x100442a1
push 0
lea ecx, [ebp - 0xf8]
call fcn.10017bb2
mov ecx, dword [ebp - 0x5c]
cmp dword [eax], ecx
jg 0x1004426a
mov dword [ebp - 0x394], 1
jmp 0x10044271
and dword [ebp - 0x394], 0
imul eax, dword [ebp - 0x394], 0x5367
mov ecx, 0x7180
sub ecx, eax
jne 0x10044294
push 4
pop eax
test eax, eax
jne 0x10044294
and dword [ebp - 0x2b8], 0
jmp 0x1004429e
mov dword [ebp - 0x2b8], 1
mov eax, dword [ebp - 0x5c]
mov eax, 0xfbcae26e
inc eax
cmp eax, 0xfffffffd
jle 0x100442b8
mov dword [ebp - 0x3b8], 1
jmp 0x100442bf
and dword [ebp - 0x3b8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x430]
mov dword [ebp - 0x558], eax
cmp dword [ebp - 0x5c], 0xbd3d38e2
jae 0x100442e7
mov dword [ebp - 0x364], 1
jmp 0x100442ee
and dword [ebp - 0x364], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x430]
cmp dword [ebp - 0x364], eax
jne 0x1004430e
mov dword [ebp - 0x1e0], 1
jmp 0x10044315
and dword [ebp - 0x1e0], 0
cmp dword [ebp - 0x1e0], 0xdad24015
je 0x1004432d
mov dword [ebp - 0x198], 1
jmp 0x10044334
and dword [ebp - 0x198], 0
push 0
lea ecx, [ebp - 0xf8]
call fcn.10017bb2
mov ecx, dword [ebp - 0x198]
mov dword [eax], ecx
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0x44], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x430]
cmp dword [ebp - 0x44], eax
jne 0x10044370
mov dword [ebp - 0x328], 1
jmp 0x10044377
and dword [ebp - 0x328], 0
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x328], eax
jl 0x1004438e
mov dword [ebp - 0x3c4], 1
jmp 0x10044395
and dword [ebp - 0x3c4], 0
cmp dword [ebp - 0x5c], 0xfffc
jb 0x100443b0
cmp dword [ebp - 0x5c], 0
je 0x100443b0
mov dword [ebp - 0x1e8], 1
jmp 0x100443b7
and dword [ebp - 0x1e8], 0
mov eax, dword [ebp - 0x5c]
add eax, dword [ebp - 0x1e8]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x430]
jle 0x100443db
mov dword [ebp - 0x2c0], 1
jmp 0x100443e2
and dword [ebp - 0x2c0], 0
mov eax, dword [ebp - 0x2c0]
mov dword [ebp - 0x3cc], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x678]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x678], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xf8]
call fcn.10017bad
mov dword [ebp - 0x88], 0xb110c93b
mov dword [ebp - 0x88], 0
jmp 0x10044439
mov eax, dword [ebp - 0x88]
dec eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
jl 0x10044470
mov dword [ebp - 0x3d4], 0xdf98a59c
push 0
push 0x7ad1
lea eax, [ebp - 0x3d4]
push eax
push 0x5943
lea eax, [ebp - 0x88]
push eax
call fcn.10046ec9
add esp, 0x14
jmp 0x1004442c
mov dword [ebp - 0xe8], 3
mov dword [ebp - 0x64], 2
cmp dword [ebp - 0xe8], 6
jne 0x10044496
mov dword [ebp - 0x1f0], 1
jmp 0x1004449d
and dword [ebp - 0x1f0], 0
mov eax, dword [ebp - 0x1f0]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0xe8]
sub eax, dword [ebp - 0x64]
je 0x100444d8
mov byte [ebp - 0x54], 0
movzx eax, byte [ebp - 0x54]
test eax, eax
je 0x100444d3
push 1
push 0
push 0x198d
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDlgItemInt]
jmp 0x100445b0
mov dword [ebp - 0x74], 0xfff9
push 2
lea ecx, [ebp - 0x4f0]
call fcn.10017b45
mov dword [ebp - 4], 1
mov dword [ebp - 0xbc], 0
jmp 0x1004450c
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 2
jge 0x1004452e
push dword [ebp - 0xbc]
lea ecx, [ebp - 0x4f0]
call fcn.10017bb2
mov dword [eax], 0x6038
jmp 0x100444ff
cmp dword [ebp - 0xe8], 0
je 0x10044563
mov dword [ebp - 0x3dc], 0xb1b0
lea eax, [ebp - 0x3dc]
push eax
lea eax, [ebp - 0xe8]
push eax
push 0
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x64]
push eax
call fcn.10048023
add esp, 0x14
jmp 0x10044574
mov byte [ebp - 0x6e], 0
lea eax, [ebp - 0x6e]
push eax
push 0
call fcn.100478ca
pop ecx
pop ecx
mov dword [ebp - 0x74], 0
jmp 0x10044584
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 1
jg 0x100445a1
push dword [ebp - 0x74]
lea ecx, [ebp - 0x4f0]
call fcn.10017bb2
cmp dword [eax], 0
je 0x1004459f
jmp 0x100445a1
jmp 0x1004457d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4f0]
call fcn.10017bad
mov dword [ebp - 0x64], 0
jmp 0x100445c0
mov eax, dword [ebp - 0x64]
dec eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0xffffffff
jle 0x100445ed
mov byte [ebp - 0x56], 0
movzx eax, byte [ebp - 0x56]
test eax, eax
je 0x100445eb
push 0x1280
push 0
push 0x2e24
push 0x1e45
call fcn.10048602
add esp, 0x10
jmp 0x100445b9
mov byte [ebp - 0x188], 0x18
mov byte [ebp - 0x187], 0xf3
mov byte [ebp - 0x186], 0x15
mov byte [ebp - 0x185], 0xf
mov byte [ebp - 0x184], 2
mov byte [ebp - 0x183], 0x15
mov byte [ebp - 0x182], 0x16
mov byte [ebp - 0x181], 0x14
mov byte [ebp - 0x180], 8
mov byte [ebp - 0x17f], 0x1e
mov byte [ebp - 0x17e], 7
mov byte [ebp - 0x17d], 1
mov byte [ebp - 0x17c], 9
mov byte [ebp - 0x17b], 2
mov byte [ebp - 0x17a], 0xf
mov byte [ebp - 0x179], 0x1a
mov byte [ebp - 0x178], 5
mov byte [ebp - 0x177], 0x16
mov byte [ebp - 0x176], 0x19
mov byte [ebp - 0x175], 0x1c
mov byte [ebp - 0x174], 0x14
mov byte [ebp - 0x173], 0xf
mov byte [ebp - 0x172], 3
mov byte [ebp - 0x171], 0x11
mov byte [ebp - 0x170], 0xa
mov byte [ebp - 0x16f], 0xf
mov byte [ebp - 0x16e], 1
mov byte [ebp - 0x16d], 9
mov byte [ebp - 0x16c], 0x17
mov byte [ebp - 0x16b], 0x1a
mov byte [ebp - 0x16a], 4
mov byte [ebp - 0x169], 0x1d
mov byte [ebp - 0x168], 0x11
mov byte [ebp - 0x167], 0x17
mov byte [ebp - 0x166], 0
mov byte [ebp - 0x165], 0x13
mov byte [ebp - 0x164], 0x12
mov byte [ebp - 0x163], 0x12
mov byte [ebp - 0x162], 6
mov byte [ebp - 0x161], 0x14
mov byte [ebp - 0x160], 0xb
mov byte [ebp - 0x15f], 0xb
mov byte [ebp - 0x15e], 0xe
mov byte [ebp - 0x15d], 3
mov byte [ebp - 0x15c], 0xd
mov byte [ebp - 0x15b], 1
mov byte [ebp - 0x15a], 0x10
mov byte [ebp - 0x159], 0x1f
mov byte [ebp - 0x158], 0x13
mov byte [ebp - 0x157], 5
mov byte [ebp - 0x156], 0x1c
mov byte [ebp - 0x155], 0x9e
mov byte [ebp - 0x154], 0xc7
mov byte [ebp - 0x153], 0xbc
mov byte [ebp - 0x152], 0x59
mov byte [ebp - 0x151], 0xde
mov byte [ebp - 0x150], 0x1e
mov byte [ebp - 0x14f], 0x1f
mov byte [ebp - 0x14e], 0x90
mov byte [ebp - 0x14d], 0x8c
mov byte [ebp - 0x14c], 0xda
mov byte [ebp - 0x14b], 0xcf
mov byte [ebp - 0x14a], 0xa
mov byte [ebp - 0x149], 0x16
mov byte [ebp - 0x148], 0xf8
mov byte [ebp - 0x147], 0xd5
mov byte [ebp - 0x146], 0x2f
mov byte [ebp - 0x145], 0x14
mov byte [ebp - 0x144], 0x82
mov byte [ebp - 0x143], 0xcc
mov byte [ebp - 0x142], 0x1e
mov byte [ebp - 0x141], 0x96
mov byte [ebp - 0x140], 0xba
mov byte [ebp - 0x13f], 0x62
mov byte [ebp - 0x13e], 0xbf
mov byte [ebp - 0x13d], 0xc5
mov byte [ebp - 0x13c], 0x43
mov byte [ebp - 0x13b], 0x90
mov byte [ebp - 0x13a], 0xae
mov byte [ebp - 0x139], 0xc
mov byte [ebp - 0x138], 0x19
mov dword [ebp - 0x78], 0x7ca0029b
mov dword [ebp - 0x4c], 0xaad8
mov dword [ebp - 0x560], 1
mov dword [ebp - 0x568], 0
mov dword [ebp - 0x570], 0x15fdc8df
mov dword [ebp - 0x578], 0x74a52027
mov dword [ebp - 0x580], 0x111d0188
mov dword [ebp - 0x588], 0x1b17d72b
mov dword [ebp - 0x590], 0x89e022a5
mov dword [ebp - 0x598], 0x6dd2cc91
mov dword [ebp - 0x5a0], 0x3c57643
mov dword [ebp - 0x5a8], 0xfffffffb
mov dword [ebp - 0x2c8], 0x70d9
mov dword [ebp - 0xc4], 0
jmp 0x100448b9
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 1
jge 0x100448d5
mov eax, dword [ebp - 0xc4]
mov dword [ebp + eax*4 - 0x200], 0xa6d0811
jmp 0x100448ac
mov dword [ebp - 0x78], 0x8e469ad5
cmp dword [ebp - 0x78], 0xc3a0
jg 0x100448f1
mov dword [ebp - 0x360], 1
jmp 0x100448f8
and dword [ebp - 0x360], 0
cmp dword [ebp - 0x4c], 0
jne 0x1004490a
mov dword [ebp - 0x1f8], 1
jmp 0x10044911
and dword [ebp - 0x1f8], 0
mov eax, dword [ebp - 0x360]
imul eax, dword [ebp - 0x1f8]
neg eax
jne 0x10044928
cmp dword [ebp - 0x4c], 0
je 0x1004499c
mov dword [ebp - 0x5b0], 0xfffffffe
mov dword [ebp - 0x5b8], 0x6e3e45bb
push 2
lea ecx, [ebp - 0x5d8]
call fcn.10017b45
mov dword [ebp - 4], 2
mov dword [ebp - 0x3e4], 0x62a7
lea eax, [ebp - 0x5c0]
push eax
push 0
lea eax, [ebp - 0x5d8]
push eax
call fcn.100486cb
add esp, 0xc
lea eax, [ebp - 0x3e4]
push eax
push 0
push 0x3f1e
call fcn.10043c37
add esp, 0xc
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5d8]
call fcn.10017bad
jmp 0x10044a40
mov dword [ebp - 0x5c8], 0
mov dword [ebp - 0x610], 0xffffffff
mov dword [ebp - 0x618], 0xffffffff
mov dword [ebp - 0x78], 0
jmp 0x100449ca
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0
jg 0x10044a14
mov dword [ebp - 0xfc], 0
jmp 0x100449e9
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 3
jge 0x10044a05
mov eax, dword [ebp - 0xfc]
mov dword [ebp + eax*4 - 0x6b4], 0x51ac06e3
jmp 0x100449dc
mov eax, dword [ebp - 0x2c8]
inc eax
mov dword [ebp - 0x2c8], eax
jmp 0x100449c3
mov dword [ebp - 0x4c], 0
jmp 0x10044a24
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jg 0x10044a40
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x4c]
mov eax, dword [ebp + eax*4 - 0x200]
mov dword [ebp + ecx*4 - 0x200], eax
jmp 0x10044a1d
mov byte [ebp - 0x51], 0
movzx eax, byte [ebp - 0x51]
test eax, eax
je 0x10044a5a
push 0x422d
push 0
call fcn.10047f97
pop ecx
pop ecx
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x188]
or eax, 0x8a
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x188]
and ecx, 0x8a
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x188]
mov byte [ebp + ecx - 0x524], al
mov dword [ebp - 0x18], 2
and dword [ebp - 0x84], 0
jmp 0x10044ab0
mov eax, dword [ebp - 0x18]
inc eax
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0x51
jae 0x1004504b
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x188]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x18], eax
jne 0x10044d8a
mov dword [ebp - 0xcc], 1
mov dword [ebp - 0x644], 0x76c3a0b8
mov dword [ebp - 0x64c], 2
mov dword [ebp - 0x638], 0x5aad8530
push 2
lea ecx, [ebp - 0x5e8]
call fcn.10017b45
mov dword [ebp - 4], 3
mov dword [ebp - 0x648], 1
mov dword [ebp - 0x3a0], 1
mov dword [ebp - 0xa8], 0
jmp 0x10044b3e
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 1
jge 0x10044b5a
mov eax, dword [ebp - 0xa8]
mov dword [ebp + eax*4 - 0x3ec], 0xc204e2db
jmp 0x10044b31
lea eax, [ebp - 0x5e8]
push eax
push 0
push 0x2593
lea eax, [ebp - 0xa8]
push eax
push 0x618b
push 0x5de0
push 0x5640
call fcn.100484b1
add esp, 0x1c
mov dword [ebp - 0xcc], 0
jmp 0x10044b9f
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0
jg 0x10044bea
mov dword [ebp - 0x90], 5
mov dword [ebp - 0x90], 0
jmp 0x10044bcb
mov eax, dword [ebp - 0x90]
dec eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0
jl 0x10044be8
mov eax, dword [ebp - 0x90]
cmp dword [ebp + eax*4 - 0x3ec], 0
je 0x10044be6
jmp 0x10044be8
jmp 0x10044bbe
jmp 0x10044b92
push 0x49d6
push 1
lea eax, [ebp - 0x3a0]
push eax
call fcn.10043c37
add esp, 0xc
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5e8]
call fcn.10017bad
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0x188]
inc eax
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0x188]
mov ecx, dword [ebp - 0x18]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x1c], 0x6dd8d130
mov dword [ebp - 0x48], 0xfffffffe
push 2
lea ecx, [ebp - 0x4c0]
call fcn.10017b45
mov dword [ebp - 4], 4
lea eax, [ebp - 0x538]
push eax
push 0
lea eax, [ebp - 0x4c0]
push eax
call fcn.10047b47
add esp, 0xc
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], eax
jg 0x10044c84
mov dword [ebp - 0x3bc], 1
jmp 0x10044c8b
and dword [ebp - 0x3bc], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x534], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x5b4], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x53c], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x614], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x544], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x48], eax
jne 0x10044cd2
mov dword [ebp - 0x48], 1
jmp 0x10044d76
mov dword [ebp - 0x414], 1
mov dword [ebp - 0x104], 0
jmp 0x10044cf5
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 2
jge 0x10044d11
mov eax, dword [ebp - 0x104]
mov dword [ebp + eax*4 - 0x6a0], 0
jmp 0x10044ce8
mov dword [ebp - 0x48], 0xffffffea
jmp 0x10044d21
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0xffffffea
je 0x10044d6d
mov dword [ebp - 0x330], 0xc1d6
mov dword [ebp - 0x1c], 0
jmp 0x10044d41
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jg 0x10044d6b
push 0
lea eax, [ebp - 0x4c0]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.10047855
add esp, 0xc
mov eax, dword [ebp - 0x330]
dec eax
mov dword [ebp - 0x330], eax
jmp 0x10044d3a
jmp 0x10044d1a
mov eax, dword [ebp - 0x414]
mov dword [ebp - 0x48], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4c0]
call fcn.10017bad
jmp 0x10044aa8
mov dword [ebp - 0xd4], 0xea5d6c05
mov dword [ebp - 0x438], 0xffffffff
mov dword [ebp - 0x3b0], 0xffffffff
mov dword [ebp - 0x41c], 0xaac1e0f7
mov dword [ebp - 0xd4], 0xfffffffc
jmp 0x10044dcb
mov eax, dword [ebp - 0xd4]
dec eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0xffffffe5
jne 0x10044fa6
mov dword [ebp - 0xdc], 0xeede0b40
push 1
lea ecx, [ebp - 0x4e4]
call fcn.10017b45
mov dword [ebp - 4], 5
mov dword [ebp - 0x10c], 0
jmp 0x10044e0f
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 1
jge 0x10044e31
push dword [ebp - 0x10c]
lea ecx, [ebp - 0x4e4]
call fcn.10017bb2
mov dword [eax], 7
jmp 0x10044e02
mov dword [ebp - 0xdc], 0xffffffe2
jmp 0x10044e4a
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0xb
jg 0x10044f92
mov dword [ebp - 0xa0], 0x3c891c55
mov dword [ebp - 0x398], 0x4667120d
mov dword [ebp - 0x3a8], 0x66ef3b06
mov dword [ebp - 0xa0], 0
jmp 0x10044e8e
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0x12
jg 0x10044f8d
mov dword [ebp - 0x80], 1
push 3
lea ecx, [ebp - 0x4cc]
call fcn.10017b45
mov byte [ebp - 4], 6
push 0
lea eax, [ebp - 0x4cc]
push eax
lea eax, [ebp - 0x5bc]
push eax
call fcn.10047f26
add esp, 0xc
mov dword [ebp - 0x80], 5
jmp 0x10044edb
mov eax, dword [ebp - 0x80]
dec eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0xfffffffe
jl 0x10044f1d
mov byte [ebp - 0x4d], 0
movzx eax, byte [ebp - 0x4d]
test eax, eax
je 0x10044f01
push 0x49c
push 0x4db1
push 0
call fcn.10047fe5
add esp, 0xc
mov byte [ebp - 0x5d], 0
movzx eax, byte [ebp - 0x5d]
test eax, eax
je 0x10044f1b
push 0
push 0x20f0
call fcn.10043c79
pop ecx
pop ecx
jmp 0x10044ed4
lea eax, [ebp - 0x4e4]
push eax
push 0x548
push 0x3b4f
lea eax, [ebp - 0x3a8]
push eax
lea eax, [ebp - 0x4cc]
push eax
push 0x2edb
push 9
lea eax, [ebp - 0x438]
push eax
lea eax, [ebp - 0x3b0]
push eax
lea eax, [ebp - 0x41c]
push eax
lea eax, [ebp - 0x398]
push eax
lea eax, [ebp - 0xa0]
push eax
push 0x5d9b
lea eax, [ebp - 0x80]
push eax
push 0
call fcn.10048b26
add esp, 0x3c
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x4cc]
call fcn.10017bad
jmp 0x10044e81
jmp 0x10044e3d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4e4]
call fcn.10017bad
jmp 0x10044dbe
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0x187]
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x84]
movzx ecx, byte [ebp + ecx - 0x18a]
movsx ecx, byte [ebp + ecx - 0x524]
add eax, ecx
mov ecx, dword [ebp - 0x18]
movzx ecx, byte [ebp + ecx - 0x187]
mov edx, dword [ebp - 0x18]
sub edx, dword [ebp - 0x84]
movzx edx, byte [ebp + edx - 0x18a]
movsx edx, byte [ebp + edx - 0x524]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x18]
movzx ecx, byte [ebp + ecx - 0x187]
mov edx, dword [ebp - 0x18]
sub edx, dword [ebp - 0x84]
movzx edx, byte [ebp + edx - 0x18a]
movsx edx, byte [ebp + edx - 0x524]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x18]
movzx ecx, byte [ebp + ecx - 0x188]
mov byte [ebp + ecx - 0x524], al
push 0
call fcn.10043ce9
pop ecx
lea eax, [ebp - 0x84]
push eax
push 0
call fcn.10043e74
pop ecx
pop ecx
jmp 0x10044aa8
mov dword [ebp - 0x114], 0xd5e48d32
mov dword [ebp - 0x528], 0xa971867b
push 1
lea ecx, [ebp - 0x5f8]
call fcn.10017b45
mov dword [ebp - 4], 7
lea eax, [ebp - 0x640]
push eax
push 0x3849
push 0x5491
push 0
lea eax, [ebp - 0x5f8]
push eax
call fcn.10043e9f
add esp, 0x14
mov dword [ebp - 0x114], 0xe
jmp 0x100450ae
mov eax, dword [ebp - 0x114]
dec eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0xffffffe9
je 0x100451b6
mov dword [ebp - 0x7c], 0x8bac04ee
mov dword [ebp - 0x554], 0x69f30cc2
mov dword [ebp - 0x5c4], 0x3edfa831
mov dword [ebp - 0x55c], 0x2aee5a98
mov dword [ebp - 0x448], 0xc40a98ce
mov dword [ebp - 0x38], 0
jmp 0x100450fa
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 1
jge 0x10045110
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x208], 0
jmp 0x100450f3
mov dword [ebp - 0x38], 0
jmp 0x10045120
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 1
jge 0x10045136
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x61c], 0xffffffff
jmp 0x10045119
mov dword [ebp - 0x7c], 0
jmp 0x10045146
mov eax, dword [ebp - 0x7c]
dec eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0
jl 0x100451b1
mov dword [ebp - 0x564], 0x35edade0
mov dword [ebp - 0x5cc], 0x9c45c1d1
mov dword [ebp - 0x62c], 0
mov dword [ebp - 0x628], 0
mov dword [ebp - 0x624], 0
mov dword [ebp - 0x620], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x7c]
mov eax, dword [ebp + eax - 0x208]
mov dword [ebp + ecx*4 - 0x208], eax
push 1
lea eax, [ebp - 0x448]
push eax
call fcn.10043c79
pop ecx
pop ecx
jmp 0x1004513f
jmp 0x100450a1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5f8]
call fcn.10017bad
xor eax, eax
inc eax
imul eax, eax, 0x1a
mov byte [ebp + eax - 0x524], 0
lea eax, [ebp - 0x524]
push eax
lea ecx, [ebp - 0x690]
call fcn.1002fafb
mov dword [ebp - 4], 8
push 3
lea ecx, [ebp - 0x134]
call fcn.10017b45
mov byte [ebp - 4], 9
mov dword [ebp - 0x10], 0xb1cecb45
mov dword [ebp - 0x28], 1
mov dword [ebp - 0x194], 0x142ace07
mov dword [ebp - 0xe4], 0
jmp 0x1004522e
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 3
jge 0x10045250
push dword [ebp - 0xe4]
lea ecx, [ebp - 0x134]
call fcn.10017bb2
mov dword [eax], 0x41b3
jmp 0x10045221
mov byte [ebp - 0x53], 0
lea eax, [ebp - 0x53]
push eax
push 0
call fcn.10047afa
pop ecx
pop ecx
mov dword [ebp - 0x10], 2
jmp 0x10045271
mov eax, dword [ebp - 0x10]
dec eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jl 0x10045a2b
push 1
lea ecx, [ebp - 0x1b8]
call fcn.10017b45
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x3c8], 0xbad479ea
mov dword [ebp - 0x11c], 0
jmp 0x100452af
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 1
jge 0x100452d1
push dword [ebp - 0x11c]
lea ecx, [ebp - 0x1b8]
call fcn.10017bb2
mov dword [eax], 0xd952eaa2
jmp 0x100452a2
push dword [ebp - 0x10]
lea ecx, [ebp - 0x134]
call fcn.10017bb2
mov dword [ebp - 0x2d0], eax
push dword [ebp - 0x10]
lea ecx, [ebp - 0x134]
call fcn.10017bb2
mov ecx, dword [ebp - 0x2d0]
mov eax, dword [eax]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x1b8]
call fcn.10017bb2
mov dword [ebp - 0x210], eax
mov eax, dword [ebp - 0x210]
mov ecx, dword [ebp - 0x2d0]
mov ecx, dword [ecx]
mov dword [eax], ecx
mov eax, dword [ebp - 0x210]
mov eax, dword [eax]
add eax, 0xe9105be
je 0x10045555
push 0
lea ecx, [ebp - 0x1b8]
call fcn.10017bb2
mov dword [ebp - 0x388], eax
push dword [ebp - 0x10]
lea ecx, [ebp - 0x134]
call fcn.10017bb2
mov ecx, dword [ebp - 0x388]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x388]
cmp eax, dword [ecx]
jg 0x10045377
mov dword [ebp - 0x3c0], 1
jmp 0x1004537e
and dword [ebp - 0x3c0], 0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x134]
call fcn.10017bb2
cmp dword [ebp - 0x10], 0xfffffff6
jbe 0x100453b1
push dword [ebp - 0x10]
lea ecx, [ebp - 0x134]
call fcn.10017bb2
cmp dword [eax], 0
je 0x100453b1
mov dword [ebp - 0x218], 1
jmp 0x100453b8
and dword [ebp - 0x218], 0
cmp dword [ebp - 0x218], 0xd890fc52
jb 0x10045555
mov dword [ebp - 0x1a0], 0xffffffff
mov dword [ebp - 0x408], 0x5a47b6c4
mov esi, dword [ebp - 0x10]
push dword [ebp - 0x10]
lea ecx, [ebp - 0x134]
call fcn.10017bb2
cmp esi, dword [eax]
jle 0x100453fd
mov dword [ebp - 0x2d8], 1
jmp 0x10045404
and dword [ebp - 0x2d8], 0
cmp dword [ebp - 0x1a0], 0xca4b
jne 0x1004541c
mov dword [ebp - 0x220], 1
jmp 0x10045423
and dword [ebp - 0x220], 0
cmp dword [ebp - 0x220], 0xfffd
jb 0x1004543b
mov dword [ebp - 0x404], 1
jmp 0x10045442
and dword [ebp - 0x404], 0
mov eax, dword [ebp - 0x1a0]
cmp dword [ebp - 0x10], eax
jg 0x10045459
mov dword [ebp - 0x338], 1
jmp 0x10045460
and dword [ebp - 0x338], 0
push 0
lea ecx, [ebp - 0x1b8]
call fcn.10017bb2
mov ecx, dword [ebp - 0x338]
cmp ecx, dword [eax]
jne 0x10045483
mov dword [ebp - 0x228], 1
jmp 0x1004548a
and dword [ebp - 0x228], 0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x228]
jl 0x100454a7
mov dword [ebp - 0x2e0], 1
jmp 0x100454ae
and dword [ebp - 0x2e0], 0
imul eax, dword [ebp - 0x2e0], 0
cmp eax, dword [ebp - 0x3c8]
je 0x100454c9
mov dword [ebp - 0x230], 1
jmp 0x100454d0
and dword [ebp - 0x230], 0
imul eax, dword [ebp - 0x230], 0x8f9e
cmp eax, dword [ebp - 0x10]
jge 0x100454eb
mov dword [ebp - 0x368], 1
jmp 0x100454f2
and dword [ebp - 0x368], 0
mov eax, dword [ebp - 0x1a0]
cmp dword [ebp - 0x368], eax
jl 0x1004550c
mov dword [ebp - 0x238], 1
jmp 0x10045513
and dword [ebp - 0x238], 0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x134]
call fcn.10017bb2
mov eax, dword [eax]
cmp eax, dword [ebp - 0x238]
je 0x1004553d
cmp dword [ebp - 0x28], 0
je 0x1004553d
mov dword [ebp - 0x2e8], 1
jmp 0x10045544
and dword [ebp - 0x2e8], 0
mov eax, dword [ebp - 0x2e8]
mov dword [ebp - 0x408], eax
jmp 0x100459f4
mov dword [ebp - 0x240], 0x8712
mov dword [ebp - 0x380], 0xfffffff6
mov dword [ebp - 0x4a8], 0x56e99fd4
mov dword [ebp - 0x4a4], 0x56e99fd4
mov dword [ebp - 0x4a0], 0x56e99fd4
mov dword [ebp - 0x49c], 0x56e99fd4
lea ecx, [ebp - 0x18d]
call fcn.10017bc1
push eax
lea eax, [ebp - 0x498]
push eax
lea eax, [ebp - 0x4a8]
push eax
lea ecx, [ebp - 0x698]
call fcn.10017bc4
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x464]
call fcn.10017b87
mov byte [ebp - 4], 0xb
mov dword [ebp - 0xb0], 0
jmp 0x100455e3
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 1
jge 0x100455ff
mov eax, dword [ebp - 0xb0]
mov dword [ebp + eax*4 - 0x118], 0x4d024bfc
jmp 0x100455d6
cmp dword [ebp - 0x240], 0
je 0x1004562b
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x464]
call fcn.10017bad
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x1b8]
call fcn.10017bad
jmp 0x10045a2b
or eax, 0xffffffff
sub eax, dword [ebp - 0x240]
je 0x1004588f
mov dword [ebp - 0xec], 0xed9a830f
mov dword [ebp - 0x410], 1
push 0
lea ecx, [ebp - 0x1b8]
call fcn.10017bb2
push dword [ebp - 0x10]
lea ecx, [ebp - 0x134]
call fcn.10017bb2
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x118], 0
je 0x10045685
mov dword [ebp - 0x340], 1
jmp 0x1004568c
and dword [ebp - 0x340], 0
mov eax, dword [ebp - 0xec]
cmp eax, dword [ebp - 0x340]
jne 0x100456a6
mov dword [ebp - 0x248], 1
jmp 0x100456ad
and dword [ebp - 0x248], 0
push 1
lea ecx, [ebp - 0x464]
call fcn.10017bb2
mov dword [eax], 1
imul eax, dword [ebp - 0x248], 0x1265
inc eax
cmp eax, dword [ebp - 0xec]
je 0x100456df
mov dword [ebp - 0x2f0], 1
jmp 0x100456e6
and dword [ebp - 0x2f0], 0
mov eax, dword [ebp - 0xec]
cmp dword [ebp - 0x2f0], eax
jle 0x10045700
mov dword [ebp - 0x250], 1
jmp 0x10045707
and dword [ebp - 0x250], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x118]
cmp dword [ebp - 0x250], eax
jle 0x10045728
mov dword [ebp - 0x258], 1
jmp 0x1004572f
and dword [ebp - 0x258], 0
mov dword [ebp - 0x380], 0x174d4a52
mov eax, dword [ebp - 0x380]
cmp eax, dword [ebp - 0x258]
jne 0x10045753
mov dword [ebp - 0x2f8], 1
jmp 0x1004575a
and dword [ebp - 0x2f8], 0
mov eax, dword [ebp - 0xec]
cmp dword [ebp - 0x2f8], eax
jge 0x10045774
mov dword [ebp - 0x260], 1
jmp 0x1004577b
and dword [ebp - 0x260], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x260], eax
jl 0x10045792
mov dword [ebp - 0x348], 1
jmp 0x10045799
and dword [ebp - 0x348], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x348], eax
jge 0x100457b0
mov dword [ebp - 0x3d0], 1
jmp 0x100457b7
and dword [ebp - 0x3d0], 0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x134]
call fcn.10017bb2
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x118]
cmp dword [ebp - 0x10], eax
jle 0x100457e9
mov eax, 0xc224
test eax, eax
jne 0x100457e9
and dword [ebp - 0x268], 0
jmp 0x100457f3
mov dword [ebp - 0x268], 1
push 4
pop eax
imul eax, eax, 0
mov esi, dword [ebp + eax - 0x118]
imul esi, dword [ebp - 0x268]
push 0
lea ecx, [ebp - 0x1b8]
call fcn.10017bb2
sub esi, dword [eax]
dec esi
cmp esi, 0xfffa
jae 0x1004582b
mov dword [ebp - 0x300], 1
jmp 0x10045832
and dword [ebp - 0x300], 0
mov eax, dword [ebp - 0x300]
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xbb1c
je 0x10045850
mov dword [ebp - 0x270], 1
jmp 0x10045857
and dword [ebp - 0x270], 0
mov eax, dword [ebp - 0x270]
mov dword [ebp - 0x194], eax
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x410], eax
mov byte [ebp - 0x6d], 0
movzx eax, byte [ebp - 0x6d]
test eax, eax
je 0x1004588a
push 0
push 0x8fa
push 0
call dword [sym.imp.OLEAUT32.dll_SafeArrayDestroy]
jmp 0x100459e5
push 1
lea ecx, [ebp - 0x458]
call fcn.10017b45
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x100], 0
jmp 0x100458b9
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 1
jge 0x100458db
push dword [ebp - 0x100]
lea ecx, [ebp - 0x458]
call fcn.10017bb2
mov dword [eax], 0xd5bc3fa0
jmp 0x100458ac
mov dword [ebp - 0x28], 1
cmp dword [ebp - 0x28], 0
jne 0x1004596e
push 2
lea ecx, [ebp - 0x134]
call fcn.10017bb2
cmp dword [eax], 0x7d46
jne 0x1004590d
mov dword [ebp - 0x370], 1
jmp 0x10045914
and dword [ebp - 0x370], 0
push 2
lea ecx, [ebp - 0x464]
call fcn.10017bb2
mov ecx, dword [ebp - 0x370]
imul ecx, dword [eax]
cmp ecx, 0x40c593bb
jge 0x1004593e
mov dword [ebp - 0x278], 1
jmp 0x10045945
and dword [ebp - 0x278], 0
mov eax, dword [ebp - 0x278]
mov dword [ebp - 0x28], eax
mov esi, dword [ebp - 0x28]
neg esi
push dword [ebp - 0x10]
lea ecx, [ebp - 0x134]
call fcn.10017bb2
cmp esi, dword [eax]
jle 0x1004596e
and dword [ebp - 0x308], 0
jmp 0x10045978
mov dword [ebp - 0x308], 1
push 0
lea ecx, [ebp - 0x458]
call fcn.10017bb2
mov ecx, dword [ebp - 0x308]
cmp ecx, dword [eax]
jne 0x1004599b
mov dword [ebp - 0x280], 1
jmp 0x100459a2
and dword [ebp - 0x280], 0
push 0
lea ecx, [ebp - 0x458]
call fcn.10017bb2
mov ecx, dword [ebp - 0x280]
mov dword [eax], ecx
push 0x1bc9
push 0
lea eax, [ebp - 0x10]
push eax
push 0x95a
lea eax, [ebp - 0x194]
push eax
call fcn.10043f34
add esp, 0x14
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x458]
call fcn.10017bad
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x464]
call fcn.10017bad
push 0
lea ecx, [ebp - 0x1b8]
call fcn.10017bb2
cmp dword [eax], 0
je 0x10045a17
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x1b8]
call fcn.10017bad
jmp 0x10045a2b
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x1b8]
call fcn.10017bad
jmp 0x1004526a
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x134]
call fcn.10017bad
and dword [ebp - 0x110], 0
jmp 0x10045a50
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0x1b
jae 0x10045c23
push 2
lea ecx, [ebp - 0x1c4]
call fcn.10017b45
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x288], 8
mov dword [ebp - 0x298], 0xcc254292
mov dword [ebp - 0x418], 0x8cd54673
push 0x67a8
lea eax, [ebp - 0x1c4]
push eax
push 0
push 0x2777
lea eax, [ebp - 0x56c]
push eax
call fcn.1004841b
add esp, 0x14
mov dword [ebp - 0x2c], 0
jmp 0x10045ac5
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jg 0x10045c01
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x1c4]
call fcn.10017bb2
mov esi, eax
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x1c4]
call fcn.10017bb2
mov ecx, dword [esi]
cmp ecx, dword [eax]
jge 0x10045aff
mov dword [ebp - 0x310], 1
jmp 0x10045b06
and dword [ebp - 0x310], 0
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x1c4]
call fcn.10017bb2
mov esi, eax
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x1c4]
call fcn.10017bb2
mov ecx, dword [esi]
sub ecx, dword [eax]
jne 0x10045b38
xor eax, eax
inc eax
jne 0x10045b38
and dword [ebp - 0x3d8], 0
jmp 0x10045b42
mov dword [ebp - 0x3d8], 1
push 1
lea ecx, [ebp - 0x1c4]
call fcn.10017bb2
cmp dword [eax], 0x5b64
jge 0x10045b63
mov dword [ebp - 0x350], 1
jmp 0x10045b6a
and dword [ebp - 0x350], 0
mov eax, dword [ebp - 0x350]
mov dword [ebp - 0x288], eax
mov esi, dword [ebp - 0x288]
push 0
lea ecx, [ebp - 0x1c4]
call fcn.10017bb2
cmp esi, dword [eax]
jg 0x10045b99
mov dword [ebp - 0x290], 1
jmp 0x10045ba0
and dword [ebp - 0x290], 0
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x1c4]
call fcn.10017bb2
mov eax, dword [eax]
mov ecx, dword [ebp - 0x310]
lea esi, [ecx + eax - 1]
sub esi, dword [ebp - 0x290]
push 1
lea ecx, [ebp - 0x1c4]
call fcn.10017bb2
cmp esi, dword [eax]
jl 0x10045bdd
mov dword [ebp - 0x390], 1
jmp 0x10045be4
and dword [ebp - 0x390], 0
mov eax, dword [ebp - 0x390]
mov dword [ebp - 0x298], eax
mov eax, dword [ebp - 0x298]
mov dword [ebp - 0x418], eax
jmp 0x10045abe
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x1c4]
call fcn.10017bad
mov eax, dword [ebp - 0x110]
mov byte [ebp + eax - 0x524], 0
jmp 0x10045a43
mov dword [ebp - 0xb4], 3
mov dword [ebp - 0x6c], 2
cmp dword [ebp - 0xb4], 6
jne 0x10045c49
mov dword [ebp - 0x318], 1
jmp 0x10045c50
and dword [ebp - 0x318], 0
mov eax, dword [ebp - 0x318]
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0xb4]
sub eax, dword [ebp - 0x6c]
je 0x10045c83
mov byte [ebp - 0x55], 0
movzx eax, byte [ebp - 0x55]
test eax, eax
je 0x10045c7e
push 0x3f7
push 0
call fcn.10043e1d
pop ecx
pop ecx
jmp 0x10045d66
mov dword [ebp - 0x2a0], 0xfff9
push 2
lea ecx, [ebp - 0x4fc]
call fcn.10017b45
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x108], 0
jmp 0x10045cb7
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 2
jge 0x10045cd9
push dword [ebp - 0x108]
lea ecx, [ebp - 0x4fc]
call fcn.10017bb2
mov dword [eax], 0x6038
jmp 0x10045caa
cmp dword [ebp - 0xb4], 0
je 0x10045d1b
mov dword [ebp - 0x3e0], 0xb1b0
push 0
push 0x77e9
lea eax, [ebp - 0xb4]
push eax
lea eax, [ebp - 0x2a0]
push eax
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp - 0x3e0]
push eax
push 0xc5a
call fcn.1004771c
add esp, 0x1c
jmp 0x10045d35
mov byte [ebp - 0x65], 0
movzx eax, byte [ebp - 0x65]
test eax, eax
je 0x10045d35
push 1
push 0x410b
call fcn.10043cad
pop ecx
pop ecx
push 0x7448
push 0
lea eax, [ebp - 0x2a0]
push eax
push 0x4c3a
lea eax, [ebp - 0x4fc]
push eax
call fcn.100477d3
add esp, 0x14
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x4fc]
call fcn.10017bad
mov dword [ebp - 0x6c], 0
jmp 0x10045d76
mov eax, dword [ebp - 0x6c]
dec eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0xffffffff
jle 0x10045d92
mov byte [ebp - 0x57], 0
movzx eax, byte [ebp - 0x57]
test eax, eax
je 0x10045d90
push 1
call fcn.10043ce9
pop ecx
jmp 0x10045d6f
push 0x1000804a
lea ecx, [ebp - 0x668]
call fcn.1002fafb
mov byte [ebp - 4], 0xf
push 4
lea ecx, [ebp - 0x128]
call fcn.10017b45
mov byte [ebp - 4], 0x10
push 1
lea ecx, [ebp - 0x3fc]
call fcn.10017b45
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x20], 0
jmp 0x10045dd8
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 4
jge 0x10045df4
push dword [ebp - 0x20]
lea ecx, [ebp - 0x128]
call fcn.10017bb2
mov dword [eax], 1
jmp 0x10045dd1
mov dword [ebp - 0x20], 0
jmp 0x10045e04
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 1
jge 0x10045e17
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x14], 0x252cb136
jmp 0x10045dfd
mov dword [ebp - 0x20], 0
jmp 0x10045e27
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 1
jge 0x10045e40
push dword [ebp - 0x20]
lea ecx, [ebp - 0x3fc]
call fcn.10017bb2
or dword [eax], 0xffffffff
jmp 0x10045e20
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x14], 0
jmp 0x10045e65
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x14], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x14], 3
jg 0x10046498
mov dword [ebp - 0x24], 0xc4530722
mov dword [ebp - 0x294], 0xffffffff
mov dword [ebp - 0x8c], 0x2dafbbd0
mov dword [ebp - 0xc8], 0xffffffff
mov dword [ebp - 0xc0], 0xffff
mov dword [ebp - 0x24], 0
jmp 0x10045eb5
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jg 0x10046482
mov dword [ebp - 0x3e8], 1
mov dword [ebp - 0x94], 0x9884cb8f
mov dword [ebp - 0xb8], 0
jmp 0x10045eec
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 1
jge 0x10045f08
mov eax, dword [ebp - 0xb8]
mov dword [ebp + eax*4 - 0x274], 0xffffffff
jmp 0x10045edf
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x14]
lea ecx, [ebp - 0x128]
call fcn.10017bb2
cmp dword [eax], 0
je 0x10045f3d
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
je 0x10045f3d
mov dword [ebp - 0x24c], 1
jmp 0x10045f44
and dword [ebp - 0x24c], 0
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x14]
lea ecx, [ebp - 0x128]
call fcn.10017bb2
mov esi, eax
push 3
lea ecx, [ebp - 0x128]
call fcn.10017bb2
mov ecx, dword [esi]
cmp ecx, dword [eax]
jge 0x100462bd
push 1
lea ecx, [ebp - 0x128]
call fcn.10017bb2
cmp dword [eax], 0
jne 0x10045f96
mov eax, 0x7a8d
test eax, eax
jne 0x10045f96
and dword [ebp - 0x358], 0
jmp 0x10045fa0
mov dword [ebp - 0x358], 1
cmp dword [ebp - 0x358], 0xf77d
je 0x10045fb8
mov dword [ebp - 0x2a8], 1
jmp 0x10045fbf
and dword [ebp - 0x2a8], 0
mov eax, dword [ebp - 0x8c]
cmp dword [ebp - 0x2a8], eax
je 0x10045fe6
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x14], 0
je 0x10045fe6
mov dword [ebp - 0x320], 1
jmp 0x10045fed
and dword [ebp - 0x320], 0
mov eax, dword [ebp - 0x8c]
cmp eax, dword [ebp - 0x320]
jg 0x10046007
mov dword [ebp - 0x420], 1
jmp 0x1004600e
and dword [ebp - 0x420], 0
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x14]
lea ecx, [ebp - 0x128]
call fcn.10017bb2
mov esi, dword [ebp - 0x24]
push 3
lea ecx, [ebp - 0x128]
call fcn.10017bb2
cmp esi, dword [eax]
jne 0x10046043
mov dword [ebp - 0x2b0], 1
jmp 0x1004604a
and dword [ebp - 0x2b0], 0
cmp dword [ebp - 0x2b0], 0xffff
jbe 0x10046062
mov dword [ebp - 0x378], 1
jmp 0x10046069
and dword [ebp - 0x378], 0
push 0
lea ecx, [ebp - 0x3fc]
call fcn.10017bb2
mov ecx, dword [ebp - 0x378]
cmp ecx, dword [eax]
jg 0x1004608c
mov dword [ebp - 0x1d8], 1
jmp 0x10046093
and dword [ebp - 0x1d8], 0
cmp dword [ebp - 0x1d8], 0x3f54
jl 0x100460ab
mov dword [ebp - 0x1dc], 1
jmp 0x100460b2
and dword [ebp - 0x1dc], 0
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x14]
lea ecx, [ebp - 0x128]
call fcn.10017bb2
mov ecx, dword [ebp - 0x1dc]
sub ecx, dword [eax]
imul eax, ecx, 0xd5eb
cmp eax, 0xfffffffd
jl 0x100460e6
mov dword [ebp - 0x1e4], 1
jmp 0x100460ed
and dword [ebp - 0x1e4], 0
mov eax, dword [ebp - 0x8c]
cmp dword [ebp - 0x1e4], eax
jne 0x10046107
mov dword [ebp - 0x1ec], 1
jmp 0x1004610e
and dword [ebp - 0x1ec], 0
mov eax, dword [ebp - 0x8c]
add eax, dword [ebp - 0x1ec]
cmp eax, 0xaa6f
je 0x1004612d
mov dword [ebp - 0x1f4], 1
jmp 0x10046134
and dword [ebp - 0x1f4], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x1f4], eax
jle 0x10046154
cmp dword [ebp - 0xc8], 0
je 0x10046154
mov dword [ebp - 0x1fc], 1
jmp 0x1004615b
and dword [ebp - 0x1fc], 0
cmp dword [ebp - 0x1fc], 0x6463a473
jl 0x10046173
mov dword [ebp - 0x204], 1
jmp 0x1004617a
and dword [ebp - 0x204], 0
cmp dword [ebp - 0x204], 0xb83dcdcb
jae 0x10046192
mov dword [ebp - 0x20c], 1
jmp 0x10046199
and dword [ebp - 0x20c], 0
mov eax, dword [ebp - 0x24]
imul eax, dword [ebp - 0x20c]
imul eax, dword [ebp - 0x94]
test eax, eax
jne 0x100461c0
mov eax, 0xffff
test eax, eax
jne 0x100461c0
and dword [ebp - 0x214], 0
jmp 0x100461ca
mov dword [ebp - 0x214], 1
mov eax, dword [ebp - 0x214]
dec eax
mov dword [ebp - 0xc8], eax
mov esi, dword [ebp - 0xc8]
push 0
lea ecx, [ebp - 0x3fc]
call fcn.10017bb2
add esi, dword [eax]
push 4
pop eax
imul eax, eax, 0
cmp esi, dword [ebp + eax - 0x14]
je 0x10046204
mov dword [ebp - 0x21c], 1
jmp 0x1004620b
and dword [ebp - 0x21c], 0
mov eax, dword [ebp - 0x21c]
sub eax, 0xfff8
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 5
je 0x10046231
mov dword [ebp - 0x224], 1
jmp 0x10046238
and dword [ebp - 0x224], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
imul eax, dword [ebp - 0x224]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x274]
jl 0x10046264
mov dword [ebp - 0x22c], 1
jmp 0x1004626b
and dword [ebp - 0x22c], 0
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x14]
lea ecx, [ebp - 0x128]
call fcn.10017bb2
mov ecx, dword [ebp - 0x22c]
cmp ecx, dword [eax]
jg 0x10046296
mov dword [ebp - 0x234], 1
jmp 0x1004629d
and dword [ebp - 0x234], 0
push 0
lea ecx, [ebp - 0x3fc]
call fcn.10017bb2
mov ecx, dword [ebp - 0x234]
cmp ecx, dword [eax]
jne 0x100462bd
and dword [ebp - 0x23c], 0
jmp 0x100462c7
mov dword [ebp - 0x23c], 1
mov eax, dword [ebp - 0x8c]
cmp dword [ebp - 0x23c], eax
jne 0x100462e1
mov dword [ebp - 0x244], 1
jmp 0x100462e8
and dword [ebp - 0x244], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
add eax, dword [ebp - 0x244]
cmp eax, dword [ebp - 0x24]
jl 0x10046309
mov dword [ebp - 0x254], 1
jmp 0x10046310
and dword [ebp - 0x254], 0
mov eax, dword [ebp - 0x24c]
cmp eax, dword [ebp - 0x254]
jge 0x1004632a
mov dword [ebp - 0x25c], 1
jmp 0x10046331
and dword [ebp - 0x25c], 0
mov eax, dword [ebp - 0x25c]
mov dword [ebp - 0x3e8], eax
mov eax, 0x865e
test eax, eax
je 0x1004646a
mov eax, 0xfff8
test eax, eax
je 0x10046405
mov eax, dword [ebp - 0x294]
cmp dword [ebp - 0xc0], eax
jne 0x10046371
mov dword [ebp - 0x264], 1
jmp 0x10046378
and dword [ebp - 0x264], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x264], eax
jl 0x1004638f
mov dword [ebp - 0x1d4], 1
jmp 0x10046396
and dword [ebp - 0x1d4], 0
cmp dword [ebp - 0x1d4], 0x316
jl 0x100463ae
mov dword [ebp - 0x434], 1
jmp 0x100463b5
and dword [ebp - 0x434], 0
push 3
lea ecx, [ebp - 0x128]
call fcn.10017bb2
mov eax, dword [eax]
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x650], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x274]
mov dword [ebp - 0x574], eax
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x14]
lea ecx, [ebp - 0x128]
call fcn.10017bb2
mov ecx, dword [ebp - 0x24]
cmp dword [eax], ecx
jge 0x10046417
cmp dword [ebp - 0xc8], 0
jne 0x10046417
and dword [ebp - 0x27c], 0
jmp 0x10046421
mov dword [ebp - 0x27c], 1
push dword [ebp - 0x24]
lea ecx, [ebp - 0x128]
call fcn.10017bb2
mov ecx, dword [ebp - 0x27c]
cmp ecx, dword [eax]
jge 0x10046445
mov dword [ebp - 0x284], 1
jmp 0x1004644c
and dword [ebp - 0x284], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
cmp dword [ebp - 0x284], eax
jge 0x1004646a
mov dword [ebp - 0x28c], 1
jmp 0x10046471
and dword [ebp - 0x28c], 0
mov eax, dword [ebp - 0x28c]
mov dword [ebp - 0x294], eax
jmp 0x10045eae
mov byte [ebp - 0x4e], 0
lea eax, [ebp - 0x4e]
push eax
push 1
call fcn.10043e1d
pop ecx
pop ecx
jmp 0x10045e50
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x3fc]
call fcn.10017bad
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x128]
call fcn.10017bad
mov dword [ebp - 0x494], 3
mov dword [ebp - 0x490], 3
mov dword [ebp - 0x48c], 3
mov dword [ebp - 0x488], 3
lea ecx, [ebp - 0x1a1]
call fcn.10017bc1
push eax
lea eax, [ebp - 0x484]
push eax
lea eax, [ebp - 0x494]
push eax
lea ecx, [ebp - 0x6a8]
call fcn.10017bc4
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x470]
call fcn.10017b87
mov byte [ebp - 4], 0x12
mov dword [ebp - 0x9c], 6
push 3
lea ecx, [ebp - 0x4b4]
call fcn.10017b45
mov byte [ebp - 4], 0x13
mov dword [ebp - 0x440], 0xffffffff
mov dword [ebp - 0x30], 0
jmp 0x1004654c
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 1
jge 0x1004655f
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x3c], 0xc506d444
jmp 0x10046545
mov dword [ebp - 0x30], 0
jmp 0x1004656f
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jge 0x1004658b
push dword [ebp - 0x30]
lea ecx, [ebp - 0x4b4]
call fcn.10017bb2
mov dword [eax], 8
jmp 0x10046568
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x3c], 0
jmp 0x100465b0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3c]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x3c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3c], 3
jg 0x100469cc
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 0x2f4], 0x28d8805e
mov dword [ebp - 0xd8], 1
mov dword [ebp - 0x2ec], 0xd225
cmp dword [ebp - 0x34], 0
je 0x100465f1
jmp 0x100469cc
mov dword [ebp - 0x34], 3
jmp 0x10046601
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jl 0x100469c7
push 1
lea ecx, [ebp - 0x1d0]
call fcn.10017b45
mov byte [ebp - 4], 0x14
mov dword [ebp - 0x40c], 0xffffffff
mov dword [ebp - 0xd0], 0
jmp 0x1004663f
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 1
jge 0x10046661
push dword [ebp - 0xd0]
lea ecx, [ebp - 0x1d0]
call fcn.10017bb2
mov dword [eax], 0xba5c1243
jmp 0x10046632
cmp dword [ebp - 0x9c], 0
jne 0x10046951
push 0
lea ecx, [ebp - 0x1d0]
call fcn.10017bb2
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3c], 0x2e7c650b
jne 0x10046697
mov dword [ebp - 0x29c], 1
jmp 0x1004669e
and dword [ebp - 0x29c], 0
push 2
lea ecx, [ebp - 0x470]
call fcn.10017bb2
mov esi, dword [ebp - 0x29c]
sub esi, dword [eax]
push 0
lea ecx, [ebp - 0x1d0]
call fcn.10017bb2
cmp esi, dword [eax]
jle 0x100466d0
mov dword [ebp - 0x3f0], 1
jmp 0x100466d7
and dword [ebp - 0x3f0], 0
mov eax, 0xbbbb
imul eax, eax, 6
test eax, eax
jne 0x100466ef
mov dword [ebp - 0x2a4], 1
jmp 0x100466f6
and dword [ebp - 0x2a4], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x2a4], eax
jg 0x1004670d
mov dword [ebp - 0x43c], 1
jmp 0x10046714
and dword [ebp - 0x43c], 0
mov eax, dword [ebp - 0x2f4]
mov dword [ebp - 0x5dc], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x57c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3c], 0xe820
jle 0x10046745
mov dword [ebp - 0x400], 1
jmp 0x1004674c
and dword [ebp - 0x400], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3c]
cmp dword [ebp - 0xd8], eax
jge 0x1004676a
mov dword [ebp - 0x2ac], 1
jmp 0x10046771
and dword [ebp - 0x2ac], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3c]
cmp dword [ebp - 0x2ac], eax
jle 0x1004678f
mov dword [ebp - 0x2b4], 1
jmp 0x10046796
and dword [ebp - 0x2b4], 0
mov eax, dword [ebp - 0x9c]
cmp dword [ebp - 0x2b4], eax
jle 0x100467b0
mov dword [ebp - 0x2bc], 1
jmp 0x100467b7
and dword [ebp - 0x2bc], 0
push 0
lea ecx, [ebp - 0x1d0]
call fcn.10017bb2
mov ecx, dword [ebp - 0x2bc]
add ecx, dword [eax]
jne 0x100467e3
cmp dword [ebp - 0x9c], 0
je 0x100467e3
mov dword [ebp - 0x2c4], 1
jmp 0x100467ea
and dword [ebp - 0x2c4], 0
push 0
lea ecx, [ebp - 0x1d0]
call fcn.10017bb2
mov ecx, dword [ebp - 0x2c4]
cmp ecx, dword [eax]
jl 0x1004680d
mov dword [ebp - 0x2cc], 1
jmp 0x10046814
and dword [ebp - 0x2cc], 0
mov eax, dword [ebp - 0x2cc]
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 9
ja 0x10046835
mov dword [ebp - 0x2d4], 1
jmp 0x1004683c
and dword [ebp - 0x2d4], 0
cmp dword [ebp - 0x2d4], 7
je 0x10046854
cmp dword [ebp - 0x34], 0
jne 0x10046854
and dword [ebp - 0x2dc], 0
jmp 0x1004685e
mov dword [ebp - 0x2dc], 1
cmp dword [ebp - 0x2dc], 0xf75d5927
jne 0x10046876
mov dword [ebp - 0x444], 1
jmp 0x1004687d
and dword [ebp - 0x444], 0
push 0
lea ecx, [ebp - 0x470]
call fcn.10017bb2
push 0
lea ecx, [ebp - 0x1d0]
call fcn.10017bb2
cmp dword [eax], 6
jl 0x100468a8
mov dword [ebp - 0x2e4], 1
jmp 0x100468af
and dword [ebp - 0x2e4], 0
push 1
lea ecx, [ebp - 0x470]
call fcn.10017bb2
mov ecx, dword [ebp - 0x2e4]
add ecx, dword [eax]
mov dword [ebp - 0x2ec], ecx
mov eax, dword [ebp - 0x2ec]
imul eax, dword [ebp - 0xd8]
cmp eax, dword [ebp - 0x2f4]
jle 0x100468fd
push 1
lea ecx, [ebp - 0x4b4]
call fcn.10017bb2
cmp dword [eax], 0
je 0x100468fd
mov dword [ebp - 0x2fc], 1
jmp 0x10046904
and dword [ebp - 0x2fc], 0
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x2fc]
jg 0x1004691b
mov dword [ebp - 0x44c], 1
jmp 0x10046922
and dword [ebp - 0x44c], 0
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0x630], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3c]
mov dword [ebp - 0x584], eax
mov esi, dword [ebp - 0x40c]
push 0
lea ecx, [ebp - 0x1d0]
call fcn.10017bb2
push 0
lea ecx, [ebp - 0x1d0]
call fcn.10017bb2
mov ecx, dword [ebp - 0xd8]
cmp dword [eax], ecx
jl 0x10046983
push 0
lea ecx, [ebp - 0x1d0]
call fcn.10017bb2
cmp dword [eax], 0
jne 0x10046983
and dword [ebp - 0x304], 0
jmp 0x1004698d
mov dword [ebp - 0x304], 1
mov eax, dword [ebp - 0x304]
mov dword [ebp - 0x440], eax
mov byte [ebp - 0x50], 0
movzx eax, byte [ebp - 0x50]
test eax, eax
je 0x100469b3
push 0x17d9
push 1
call fcn.10043e74
pop ecx
pop ecx
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x1d0]
call fcn.10017bad
jmp 0x100465fa
jmp 0x1004659b
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x4b4]
call fcn.10017bad
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x470]
call fcn.10017bad
lea ecx, [ebp - 0x668]
call fcn.10017f7e
cmp eax, dword [ebp + 0xc]
je 0x10046e7b
mov dword [ebp - 0xac], 0x53b26bdd
mov dword [ebp - 0x34c], 0xfffffffe
mov dword [ebp - 0x31c], 0x256ee973
mov dword [ebp - 0x344], 0xffffffff
mov dword [ebp - 0x5ec], 1
mov dword [ebp - 0x58c], 0
mov dword [ebp - 0x634], 0xffffffff
mov dword [ebp - 0x39c], 0xffffffff
mov dword [ebp - 0x594], 0xfffffffc
mov dword [ebp - 0x5fc], 0xfffffffe
mov dword [ebp - 0x59c], 1
push 1
lea ecx, [ebp - 0x508]
call fcn.10017b45
mov byte [ebp - 4], 0x15
mov dword [ebp - 0x3a4], 0x324015fb
push 4
lea ecx, [ebp - 0x4d8]
call fcn.10017b45
mov byte [ebp - 4], 0x16
mov dword [ebp - 0x1ac], 9
mov dword [ebp - 0xa4], 0
jmp 0x10046abb
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 1
jge 0x10046add
push dword [ebp - 0xa4]
lea ecx, [ebp - 0x508]
call fcn.10017bb2
mov dword [eax], 4
jmp 0x10046aae
push 0x47d7
push 0
lea eax, [ebp - 0x4d8]
push eax
lea eax, [ebp - 0xa4]
push eax
call fcn.1004718b
add esp, 0x10
mov dword [ebp - 0xac], 6
jmp 0x10046b13
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0x11
jle 0x10046d2b
mov dword [ebp - 0x19c], 0x85b7
mov dword [ebp - 0xe0], 0
jmp 0x10046b43
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 4
jge 0x10046b5f
mov eax, dword [ebp - 0xe0]
mov dword [ebp + eax*4 - 0x480], 0xfffffffa
jmp 0x10046b36
cmp dword [ebp - 0xac], 1
jle 0x10046b74
mov dword [ebp - 0x334], 1
jmp 0x10046b7b
and dword [ebp - 0x334], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x480], 1
je 0x10046b97
mov dword [ebp - 0x30c], 1
jmp 0x10046b9e
and dword [ebp - 0x30c], 0
push 0
lea ecx, [ebp - 0x4d8]
call fcn.10017bb2
mov ecx, dword [ebp - 0x30c]
mov dword [eax], ecx
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x480], 0xffffffff
jg 0x10046bcf
mov dword [ebp - 0x314], 1
jmp 0x10046bd6
and dword [ebp - 0x314], 0
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
mov eax, dword [ebp - 0x314]
mov dword [ebp - 0x31c], eax
mov eax, dword [ebp - 0x31c]
neg eax
cmp dword [ebp - 0x1ac], eax
jge 0x10046c18
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x480], 0
jne 0x10046c18
and dword [ebp - 0x324], 0
jmp 0x10046c22
mov dword [ebp - 0x324], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x480]
cmp dword [ebp - 0x324], eax
jge 0x10046c43
mov dword [ebp - 0x32c], 1
jmp 0x10046c4a
and dword [ebp - 0x32c], 0
push 0
lea ecx, [ebp - 0x508]
call fcn.10017bb2
mov ecx, dword [ebp - 0x32c]
cmp ecx, dword [eax]
je 0x10046c6d
mov dword [ebp - 0x33c], 1
jmp 0x10046c74
and dword [ebp - 0x33c], 0
mov eax, dword [ebp - 0x19c]
dec eax
mov dword [ebp - 0x19c], eax
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x34c], eax
mov eax, dword [ebp - 0x334]
sub eax, dword [ebp - 0x33c]
imul eax, eax, 0xfffe
mov dword [ebp - 0x344], eax
mov eax, dword [ebp - 0x344]
cmp dword [ebp - 0x34c], eax
jle 0x10046cbf
mov dword [ebp - 0x354], 1
jmp 0x10046cc6
and dword [ebp - 0x354], 0
cmp dword [ebp - 0x354], 0x422f8dc7
jle 0x10046cde
mov dword [ebp - 0x1a8], 1
jmp 0x10046ce5
and dword [ebp - 0x1a8], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x1a8]
mov dword [ebp + eax - 0x480], ecx
mov eax, dword [ebp - 0x39c]
add eax, dword [ebp - 0x1a8]
mov dword [ebp - 0x3a4], eax
mov byte [ebp - 0x52], 0
push 0
push 0x76da
push 0x711d
lea eax, [ebp - 0x52]
push eax
call fcn.100479b6
add esp, 0x10
jmp 0x10046b06
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x4d8]
call fcn.10017bad
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x508]
call fcn.10017bad
push 0x40fa
lea eax, [ebp - 0x690]
push eax
lea eax, [ebp - 0x3b4]
push eax
push 1
push 0x7e9d
call fcn.10043e9f
add esp, 0x14
push 3
lea ecx, [ebp - 0x608]
call fcn.10017b45
mov byte [ebp - 4], 0x17
mov dword [ebp - 0x63c], 0x36432a27
mov dword [ebp - 0x5a4], 0xf2000252
mov dword [ebp - 0x60c], 0x18795010
mov dword [ebp - 0x5ac], 1
mov dword [ebp - 0x52c], 0xbd4dfbd6
mov dword [ebp - 0x530], 0xfffffff8
mov dword [ebp - 0x3ac], 0xffffffff
lea eax, [ebp - 0x98]
push eax
push 1
push 0x7e9c
lea eax, [ebp - 0x608]
push eax
push 0x7476
call fcn.10043f34
add esp, 0x14
mov dword [ebp - 0x98], 0
jmp 0x10046dfd
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 4
jge 0x10046e19
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0x6c4], 0
jmp 0x10046df0
push 0x59d6
lea eax, [ebp - 0x3ac]
push eax
push 0
push 0x464c
push 0x3d89
push 0x4942
call fcn.10047a1a
add esp, 0x18
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x608]
call fcn.10017bad
push 0
push 0x7197
push 0x16fd
lea eax, [ebp - 0x3b4]
push eax
lea eax, [ebp - 0x690]
push eax
lea eax, [ebp - 0x668]
push eax
call fcn.100488aa
add esp, 0x18
jmp 0x100469ea
lea eax, [ebp - 0x668]
push eax
mov ecx, dword [ebp + 8]
call fcn.10017a4e
mov eax, dword [ebp - 0x35c]
or eax, 1
mov dword [ebp - 0x35c], eax
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x668]
call fcn.10017aa7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x690]
call fcn.10017aa7
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret