Function at 0x10042675
Capabilities:
Allocate thread local storage
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100655f6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x874
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x38], 1
mov dword [ebp - 0x2a4], 0x4d9e
mov dword [ebp - 0x5b4], 0x1000b1b8
cmp dword [ebp - 0x2a4], 0x4fd5
jle 0x10042773
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
and dword [ebp - 0x16c], 0
jmp 0x100426e1
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 0x5c0b
jge 0x10042773
and dword [ebp - 0xdc], 0
jmp 0x10042707
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0x2176
jge 0x1004276e
and dword [ebp - 0x1a8], 0
jmp 0x10042729
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 0x206b
jge 0x1004276c
mov eax, dword [ebp - 0x16c]
xor eax, dword [ebp - 0xdc]
xor eax, dword [ebp - 0x1a8]
cdq
mov dword [ebp - 0x4d8], eax
mov dword [ebp - 0x4d4], edx
push dword [ebp - 0x4d4]
push dword [ebp - 0x4d8]
mov ecx, 0x1060def8
call fcn.1001a86e
jmp 0x1004271c
jmp 0x100426fa
jmp 0x100426d4
push 3
lea ecx, [ebp - 0x1d4]
call fcn.1001aa9f
and dword [ebp - 4], 0
mov byte [ebp - 4], 1
cmp dword [ebp - 0x2a4], 0x4c05
jge 0x100427a4
mov edx, dword [ebp - 0x5b4]
mov ecx, 0x1060def8
call fcn.1001cd79
jmp 0x100427c0
and dword [ebp - 4], 0
jmp 0x100427ca
mov dword [ebp - 0x330], 0xd4c46983
mov dword [ebp - 0x5b8], 1
lea eax, [ebp - 0x1d4]
push eax
push 0x3c75
push 0x3086
push 1
push 1
push 0x54b1
lea eax, [ebp - 0x710]
push eax
push 0x2adb
call fcn.1002e279
add esp, 0x20
cmp dword [ebp - 0x38], 0
je 0x100428c0
mov esi, dword [ebp - 0x38]
imul esi, dword [ebp - 0x38]
push 0
lea ecx, [ebp - 0x1d4]
call fcn.1001ab3d
cmp esi, dword [eax]
je 0x1004283a
mov dword [ebp - 0x1c4], 1
jmp 0x10042841
and dword [ebp - 0x1c4], 0
cmp dword [ebp - 0x38], 0xb6f65e79
jb 0x10042856
mov dword [ebp - 0x420], 1
jmp 0x1004285d
and dword [ebp - 0x420], 0
push 0
lea ecx, [ebp - 0x1d4]
call fcn.1001ab3d
mov ecx, dword [ebp - 0x1c4]
mov dword [eax], ecx
mov eax, dword [ebp - 0x1c4]
cmp eax, dword [ebp - 0x420]
jg 0x1004288c
mov dword [ebp - 0x40c], 1
jmp 0x10042893
and dword [ebp - 0x40c], 0
mov eax, dword [ebp - 0x40c]
add eax, 8
cmp eax, dword [ebp - 0x38]
jne 0x100428c0
lea eax, [ebp - 0x38]
push eax
push 0x4142
push 1
push 0x4fac
push 0
call fcn.10032557
add esp, 0x14
jmp 0x10042b79
mov dword [ebp - 0x4cc], 0x30b56bf5
mov dword [ebp - 0xa8], 0xfffffff8
mov dword [ebp - 0xe4], 0
jmp 0x100428ed
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 2
jge 0x10042909
mov eax, dword [ebp - 0xe4]
mov dword [ebp + eax*4 - 0x418], 0xfffffffa
jmp 0x100428e0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x418]
mov dword [ebp - 0x7a8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x418], 0x1efe
jg 0x1004293b
mov dword [ebp - 0x224], 1
jmp 0x10042942
and dword [ebp - 0x224], 0
mov eax, 0x86e1
sub eax, dword [ebp - 0x224]
cmp eax, 6
jle 0x1004295e
mov dword [ebp - 0x320], 1
jmp 0x10042965
and dword [ebp - 0x320], 0
mov eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x320]
jge 0x1004297c
mov dword [ebp - 0x4c4], 1
jmp 0x10042983
and dword [ebp - 0x4c4], 0
mov esi, dword [ebp - 0x38]
push 0
lea ecx, [ebp - 0x1d4]
call fcn.1001ab3d
cmp dword [eax], esi
jne 0x100429a3
mov dword [ebp - 0x228], 1
jmp 0x100429aa
and dword [ebp - 0x228], 0
mov eax, dword [ebp - 0x330]
cmp dword [ebp - 0x228], eax
je 0x100429c4
mov dword [ebp - 0x3a0], 1
jmp 0x100429cb
and dword [ebp - 0x3a0], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x3a0], eax
je 0x100429e2
mov dword [ebp - 0x230], 1
jmp 0x100429e9
and dword [ebp - 0x230], 0
push 4
pop eax
shl eax, 0
mov esi, dword [ebp + eax - 0x418]
add esi, dword [ebp - 0x230]
push 0
lea ecx, [ebp - 0x1d4]
call fcn.1001ab3d
add esi, dword [eax]
cmp esi, 0xffffffff
jge 0x10042a1e
or eax, 0xffffffff
jne 0x10042a1e
and dword [ebp - 0x328], 0
jmp 0x10042a28
mov dword [ebp - 0x328], 1
mov eax, dword [ebp - 0x328]
mov dword [ebp - 0x4cc], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 0
mov edx, dword [ebp - 0xa8]
sub edx, dword [ebp + ecx - 0x418]
cmp edx, dword [ebp + eax - 0x418]
jge 0x10042a62
mov dword [ebp - 0x238], 1
jmp 0x10042a69
and dword [ebp - 0x238], 0
mov eax, dword [ebp - 0x238]
add eax, 0x681c37f5
jne 0x10042a94
push 2
lea ecx, [ebp - 0x1d4]
call fcn.1001ab3d
cmp dword [eax], 0
je 0x10042a94
mov dword [ebp - 0x3e0], 1
jmp 0x10042a9b
and dword [ebp - 0x3e0], 0
mov eax, dword [ebp - 0x3e0]
add eax, 0xffff
cmp eax, 0x56979f9f
jg 0x10042ab9
mov dword [ebp - 0x240], 1
jmp 0x10042ac0
and dword [ebp - 0x240], 0
push 1
lea ecx, [ebp - 0x1d4]
call fcn.1001ab3d
mov ecx, dword [ebp - 0x240]
cmp ecx, dword [eax]
jne 0x10042ae3
mov dword [ebp - 0x1fc], 1
jmp 0x10042aea
and dword [ebp - 0x1fc], 0
push 0
lea ecx, [ebp - 0x1d4]
call fcn.1001ab3d
mov ecx, dword [ebp - 0x1fc]
mov dword [eax], ecx
cmp dword [ebp - 0x1fc], 0
je 0x10042b2c
mov byte [ebp - 0x54], 0
movzx eax, byte [ebp - 0x54]
test eax, eax
je 0x10042b2a
push 1
push 1
push 0x1f08
push 0x26e3
call fcn.1002e36d
add esp, 0x10
jmp 0x10042b79
mov dword [ebp - 0xa8], 0
jmp 0x10042b45
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0xa
jge 0x10042b79
push 0x3bc6
push 0x1b6e
push 0
push 1
push 0xc09
lea eax, [ebp - 0x1d4]
push eax
push 0x781c
push 1
call fcn.1002e6e0
add esp, 0x20
jmp 0x10042b38
cmp dword [ebp - 0x330], 0xfffffffc
jl 0x10042b8e
mov dword [ebp - 0x1dc], 1
jmp 0x10042b95
and dword [ebp - 0x1dc], 0
push 0
lea ecx, [ebp - 0x1d4]
call fcn.1001ab3d
mov ecx, dword [ebp - 0x1dc]
mov dword [eax], ecx
mov eax, dword [ebp - 0x1dc]
mov dword [ebp - 0x5b8], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1d4]
call fcn.1001ab21
and dword [ebp - 0x20], 0
mov dword [ebp - 0x4bc], 0xe56f9b2c
push 2
lea ecx, [ebp - 0x6b8]
call fcn.1001aa9f
mov dword [ebp - 4], 3
push 3
lea ecx, [ebp - 0x6c4]
call fcn.1001aa9f
mov byte [ebp - 4], 4
mov dword [ebp - 0x248], 0x50be
mov dword [ebp - 0x5c8], 0x1000b240
cmp dword [ebp - 0x248], 0x5314
jle 0x10042cf1
and dword [ebp - 0x1b0], 0
jmp 0x10042c32
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 0x7c83
jge 0x10042cf1
and dword [ebp - 0x174], 0
jmp 0x10042c58
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 0xa80
jge 0x10042cec
and dword [ebp - 0xec], 0
jmp 0x10042c7e
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0x585c
jge 0x10042ce7
mov eax, dword [ebp - 0x174]
add eax, dword [ebp - 0xec]
and eax, dword [ebp - 0x1b0]
cdq
mov dword [ebp - 0x4e4], eax
mov dword [ebp - 0x4e0], edx
push dword [ebp - 0x4e0]
push dword [ebp - 0x4e4]
lea ecx, [ebp - 0x83c]
call fcn.1000d25a
pop ecx
pop ecx
mov dword [ebp - 0x5c0], eax
mov ecx, dword [ebp - 0x5c0]
call fcn.1001a84e
push eax
call fcn.1004f3d6
pop ecx
lea ecx, [ebp - 0x83c]
call fcn.1001a844
jmp 0x10042c71
jmp 0x10042c4b
jmp 0x10042c25
mov byte [ebp - 4], 5
cmp dword [ebp - 0x248], 0x4f79
jge 0x10042d0d
push dword [ebp - 0x5c8]
call fcn.1004f3d6
pop ecx
jmp 0x10042d29
mov dword [ebp - 4], 4
jmp 0x10042d39
lea eax, [ebp - 0x6b8]
push eax
lea eax, [ebp - 0x5d0]
push eax
call fcn.10041a80
pop ecx
pop ecx
lea eax, [ebp - 0x6c4]
push eax
lea eax, [ebp - 0x5d0]
push eax
call fcn.10041ac8
pop ecx
pop ecx
push 0x2d9f
push 0x7e93
lea eax, [ebp - 0x4bc]
push eax
push 0x21f3
push 0x7104
push 1
push 1
lea eax, [ebp - 0x6c4]
push eax
lea eax, [ebp - 0x6b8]
push eax
call fcn.1002e52d
add esp, 0x24
mov byte [ebp - 0x4e], 0
movzx eax, byte [ebp - 0x4e]
test eax, eax
je 0x10042da9
call fcn.10041b0d
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x6c4]
call fcn.1001ab21
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6b8]
call fcn.1001ab21
mov dword [ebp - 0xf4], 0x4e2db58
mov dword [ebp - 0xf4], 0
jmp 0x10042dea
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 6
jne 0x10042fd2
mov dword [ebp - 0xfc], 0x290be443
mov dword [ebp - 0x17c], 0
jmp 0x10042e1a
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 2
jge 0x10042e36
mov eax, dword [ebp - 0x17c]
mov dword [ebp + eax*4 - 0x7e4], 9
jmp 0x10042e0d
mov dword [ebp - 0xfc], 1
jmp 0x10042e4f
mov eax, dword [ebp - 0xfc]
dec eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0
jl 0x10042e5f
call fcn.10041b29
jmp 0x10042e42
mov dword [ebp - 0x3a8], 0x44bf
mov dword [ebp - 0x450], 0x1000b268
cmp dword [ebp - 0x3a8], 0x4823
jle 0x10042f5c
and dword [ebp - 0x10c], 0
jmp 0x10042e99
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0x39f4
jge 0x10042f5c
and dword [ebp - 0xd0], 0
jmp 0x10042ebf
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0x6385
jge 0x10042f57
and dword [ebp - 0x104], 0
jmp 0x10042ee5
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0x5739
jge 0x10042f52
and dword [ebp - 0x184], 0
jmp 0x10042f07
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 0x529a
jge 0x10042f50
mov eax, dword [ebp - 0xd0]
add eax, dword [ebp - 0x104]
sub eax, dword [ebp - 0x184]
or eax, dword [ebp - 0x10c]
cdq
mov dword [ebp - 0x4f0], eax
mov dword [ebp - 0x4ec], edx
push dword [ebp - 0x4ec]
push dword [ebp - 0x4f0]
mov ecx, 0x1060def8
call fcn.1001a86e
jmp 0x10042efa
jmp 0x10042ed8
jmp 0x10042eb2
jmp 0x10042e8c
mov byte [ebp - 0x50], 0
push 0x161d
push 0
push 0x6265
push 1
push 0x3e84
push 0x1871
lea eax, [ebp - 0x50]
push eax
call fcn.10030629
add esp, 0x1c
mov dword [ebp - 4], 7
cmp dword [ebp - 0x3a8], 0x44a2
jge 0x10042fa7
mov edx, dword [ebp - 0x450]
mov ecx, 0x1060def8
call fcn.1001cd79
jmp 0x10042fc3
or dword [ebp - 4], 0xffffffff
jmp 0x10042fcd
jmp 0x10042ddd
mov byte [ebp - 0x55], 0
movzx eax, byte [ebp - 0x55]
test eax, eax
je 0x1004316a
push 0x5c23
push 1
push 1
push 0x2922
call fcn.1002e8ef
add esp, 0x10
mov dword [ebp - 0x250], 0x3c39
mov dword [ebp - 0x458], 0x1000b2f4
cmp dword [ebp - 0x250], 0x3ffa
jle 0x10043125
and dword [ebp - 0x18c], 0
jmp 0x10043032
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0x5a3b
jge 0x10043125
and dword [ebp - 0x1b8], 0
jmp 0x10043058
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 0x6193
jge 0x10043120
and dword [ebp - 0x114], 0
jmp 0x1004307e
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0x5ad3
jge 0x1004311b
and dword [ebp - 0x11c], 0
jmp 0x100430a4
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0x3f2d
jge 0x10043116
mov eax, dword [ebp - 0x1b8]
cdq
idiv dword [ebp - 0x114]
and edx, dword [ebp - 0x18c]
xor edx, dword [ebp - 0x11c]
mov eax, edx
cdq
mov dword [ebp - 0x4fc], eax
mov dword [ebp - 0x4f8], edx
push dword [ebp - 0x4f8]
push dword [ebp - 0x4fc]
lea ecx, [ebp - 0x80c]
call fcn.1000d25a
pop ecx
pop ecx
mov dword [ebp - 0x58c], eax
mov ecx, dword [ebp - 0x58c]
call fcn.1001a84e
push eax
call fcn.1004f3d6
pop ecx
lea ecx, [ebp - 0x80c]
call fcn.1001a844
jmp 0x10043097
jmp 0x10043071
jmp 0x1004304b
jmp 0x10043025
mov dword [ebp - 4], 9
cmp dword [ebp - 0x250], 0x39e8
jge 0x10043144
push dword [ebp - 0x458]
call fcn.1004f3d6
pop ecx
jmp 0x10043160
or dword [ebp - 4], 0xffffffff
jmp 0x1004316a
mov dword [ebp - 0xb0], 0x477862fd
mov dword [ebp - 0x400], 0
mov dword [ebp - 0x4c], 0xae649f6d
push 3
lea ecx, [ebp - 0x65c]
call fcn.1001aa9f
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x24], 0
jmp 0x100431a9
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x100431bf
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x270], 0xfffffffe
jmp 0x100431a2
mov dword [ebp - 0x24], 0
jmp 0x100431cf
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x100431eb
push dword [ebp - 0x24]
lea ecx, [ebp - 0x65c]
call fcn.1001ab3d
mov dword [eax], 1
jmp 0x100431c8
mov dword [ebp - 0xb0], 0
jmp 0x10043204
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 3
jge 0x1004354f
mov dword [ebp - 0x98], 1
mov dword [ebp - 0x278], 0xc39ba095
cmp dword [ebp - 0xb0], 0xf4df
je 0x1004323d
mov dword [ebp - 0x338], 1
jmp 0x10043244
and dword [ebp - 0x338], 0
cmp dword [ebp - 0x338], 0xfffa
jb 0x1004325c
mov dword [ebp - 0x258], 1
jmp 0x10043263
and dword [ebp - 0x258], 0
mov eax, dword [ebp - 0x258]
mov dword [ebp - 0x400], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x400]
add ecx, dword [ebp - 0x98]
cmp ecx, dword [ebp + eax - 0x270]
jl 0x10043296
mov dword [ebp - 0x260], 1
jmp 0x1004329d
and dword [ebp - 0x260], 0
imul eax, dword [ebp - 0x260], 0xfffffff6
neg eax
cmp eax, dword [ebp - 0x98]
jle 0x100432bf
xor eax, eax
inc eax
je 0x100432bf
mov dword [ebp - 0x340], 1
jmp 0x100432c6
and dword [ebp - 0x340], 0
cmp dword [ebp - 0x340], 1
jae 0x100432db
mov dword [ebp - 0x56c], 1
jmp 0x100432e2
and dword [ebp - 0x56c], 0
cmp dword [ebp - 0x278], 1
jg 0x100432f7
mov dword [ebp - 0x268], 1
jmp 0x100432fe
and dword [ebp - 0x268], 0
mov eax, dword [ebp - 0x98]
cmp dword [ebp - 0x268], eax
jl 0x10043318
mov dword [ebp - 0x3b0], 1
jmp 0x1004331f
and dword [ebp - 0x3b0], 0
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x7b0], eax
mov eax, dword [ebp - 0x3b0]
dec eax
mov dword [ebp - 0x460], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x460]
mov dword [ebp + eax - 0x270], ecx
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x724], eax
imul esi, dword [ebp - 0x98], 0xffff
push 1
lea ecx, [ebp - 0x65c]
call fcn.1001ab3d
mov dword [eax], esi
mov dword [ebp - 0x4c], 0
jmp 0x10043384
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0x30
jge 0x1004354a
mov dword [ebp - 0x348], 0x4b2d
mov dword [ebp - 0x468], 0x1000b34c
cmp dword [ebp - 0x348], 0x4e45
jle 0x100434b8
and dword [ebp - 0x12c], 0
jmp 0x100433c8
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0x669c
jge 0x100434b8
and dword [ebp - 0x194], 0
jmp 0x100433ee
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 0x4f52
jge 0x100434b3
and dword [ebp - 0x1c0], 0
jmp 0x10043414
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 0x6b6d
jge 0x100434ae
and dword [ebp - 0x124], 0
jmp 0x1004343a
mov eax, dword [ebp - 0x124]
inc eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0x4856
jge 0x100434a9
mov eax, dword [ebp - 0x1c0]
add eax, dword [ebp - 0x124]
and eax, dword [ebp - 0x194]
xor eax, dword [ebp - 0x12c]
cdq
mov dword [ebp - 0x508], eax
mov dword [ebp - 0x504], edx
push dword [ebp - 0x504]
push dword [ebp - 0x508]
lea ecx, [ebp - 0x86c]
call fcn.1000d25a
pop ecx
pop ecx
mov dword [ebp - 0x5a8], eax
mov ecx, dword [ebp - 0x5a8]
call fcn.1001a84e
push eax
call fcn.1004f3d6
pop ecx
lea ecx, [ebp - 0x86c]
call fcn.1001a844
jmp 0x1004342d
jmp 0x10043407
jmp 0x100433e1
jmp 0x100433bb
mov dword [ebp - 0x470], 2
mov byte [ebp - 4], 0xc
cmp dword [ebp - 0x348], 0x4771
jge 0x100434de
push dword [ebp - 0x468]
call fcn.1004f3d6
pop ecx
jmp 0x100434fa
mov dword [ebp - 4], 0xb
jmp 0x1004350a
mov dword [ebp - 0x560], 0xddbb7a2e
push 0x174e
lea eax, [ebp - 0x278]
push eax
push 1
lea eax, [ebp - 0x560]
push eax
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x65c]
push eax
push 1
lea eax, [ebp - 0x470]
push eax
call fcn.1002ea06
add esp, 0x20
jmp 0x1004337d
jmp 0x100431f7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x65c]
call fcn.1001ab21
mov dword [ebp - 0x134], 0xbe4438b
mov dword [ebp - 0x1ac], 0
jmp 0x10043581
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 1
jge 0x1004359d
mov eax, dword [ebp - 0x1ac]
mov dword [ebp + eax*4 - 0xc0], 0xfffffff6
jmp 0x10043574
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xc0], 0xffffffef
jmp 0x100435cb
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc0]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xc0], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc0], 0xfffffff5
jg 0x1004363b
push 1
lea ecx, [ebp - 0x644]
call fcn.1001aa9f
mov dword [ebp - 4], 0xe
lea eax, [ebp - 0x644]
push eax
lea eax, [ebp - 0x7a0]
push eax
call fcn.10041b5b
pop ecx
pop ecx
push 0
lea ecx, [ebp - 0x644]
call fcn.1001ab3d
cmp dword [eax], 0
je 0x10043627
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x644]
call fcn.1001ab21
jmp 0x1004363b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x644]
call fcn.1001ab21
jmp 0x100435b0
mov dword [ebp - 0x134], 0xc
jmp 0x10043654
mov eax, dword [ebp - 0x134]
dec eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0xb
jle 0x10043694
mov byte [ebp - 0x52], 0
lea eax, [ebp - 0x52]
push eax
push 0x10f5
push 1
push 0
push 0x7746
push 0x7af6
call fcn.1002f26b
add esp, 0x18
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc0], 0
je 0x10043692
jmp 0x10043694
jmp 0x10043647
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1e0], eax
mov eax, dword [ebp - 0x1e0]
movzx eax, word [eax]
cmp eax, 0x5a4d
je 0x100439a2
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x1f4], 0xabe8f210
mov dword [ebp - 0x350], 0xfffffffb
mov dword [ebp - 0x478], 0
mov dword [ebp - 0x6f0], 0x35fe57b6
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x14]
je 0x100436f4
mov dword [ebp - 0x3e8], 1
jmp 0x100436fb
and dword [ebp - 0x3e8], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x3e8], eax
jl 0x10043712
mov dword [ebp - 0x604], 1
jmp 0x10043719
and dword [ebp - 0x604], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x1f4], eax
mov eax, dword [ebp - 0x1f4]
mov dword [ebp - 0x758], eax
cmp dword [ebp - 0x14], 0xdc2a82a1
je 0x10043743
mov dword [ebp - 0x280], 1
jmp 0x1004374a
and dword [ebp - 0x280], 0
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x280]
mov dword [ebp - 0x14], eax
push 5
pop eax
sub eax, dword [ebp - 0x350]
je 0x100437c7
mov dword [ebp - 0x19c], 0
jmp 0x1004377b
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 3
jge 0x10043797
mov eax, dword [ebp - 0x19c]
mov dword [ebp + eax*4 - 0x7d0], 0x23cc
jmp 0x1004376e
call fcn.10041ba3
mov dword [ebp - 0x14], 0
jmp 0x100437ac
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x100437c2
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x7d0], 0xffff
jmp 0x100437a5
jmp 0x100438fa
mov dword [ebp - 0x568], 0xfffffffa
mov dword [ebp - 0x480], 0xfffffffb
mov dword [ebp - 0x288], 0x26a2
mov dword [ebp - 0x444], 0x1000b388
cmp dword [ebp - 0x288], 0x2789
jle 0x10043882
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetCommTimeouts]
and dword [ebp - 0x13c], 0
jmp 0x1004381f
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0x47c8
jge 0x10043882
and dword [ebp - 0x1bc], 0
jmp 0x10043841
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 0x3b81
jge 0x10043880
mov eax, dword [ebp - 0x13c]
mov ecx, dword [ebp - 0x1bc]
sar eax, cl
cdq
mov dword [ebp - 0x514], eax
mov dword [ebp - 0x510], edx
push dword [ebp - 0x510]
push dword [ebp - 0x514]
mov ecx, 0x1060def8
call fcn.1001a86e
jmp 0x10043834
jmp 0x10043812
lea eax, [ebp - 0x478]
push eax
lea eax, [ebp - 0x1f4]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x568]
push eax
lea eax, [ebp - 0x350]
push eax
lea eax, [ebp - 0x480]
push eax
call fcn.10041bf3
add esp, 0x18
mov dword [ebp - 4], 0xf
cmp dword [ebp - 0x288], 0x2468
jge 0x100438d4
mov edx, dword [ebp - 0x444]
mov ecx, 0x1060def8
call fcn.1001cd79
jmp 0x100438f0
or dword [ebp - 4], 0xffffffff
jmp 0x100438fa
mov dword [ebp - 0x5c], 0
push 4
lea ecx, [ebp - 0x62c]
call fcn.1001aa9f
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x488], 0xc1464f16
lea eax, [ebp - 0x6f8]
push eax
push 1
push 0x153c
push 0
lea eax, [ebp - 0x62c]
push eax
call fcn.1002f046
add esp, 0x14
mov dword [ebp - 0x5c], 1
mov dword [ebp - 0x5c], 0
jmp 0x10043955
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 3
jg 0x1004398c
push dword [ebp - 0x5c]
lea ecx, [ebp - 0x62c]
call fcn.1001ab3d
cmp dword [eax], 0
je 0x10043970
jmp 0x1004398c
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x62c]
push eax
lea eax, [ebp - 0x488]
push eax
call fcn.10041cc5
add esp, 0xc
jmp 0x1004394e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x62c]
call fcn.1001ab21
xor eax, eax
jmp 0x100465d8
mov dword [ebp - 0xa0], 0x2c03342e
mov dword [ebp - 0x144], 0
jmp 0x100439c5
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 2
jge 0x100439e1
mov eax, dword [ebp - 0x144]
mov dword [ebp + eax*4 - 0x440], 0
jmp 0x100439b8
mov dword [ebp - 0xa0], 0xffffffe3
jmp 0x100439fa
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0xfffffffe
jg 0x10043b70
mov dword [ebp - 0x40], 0x54c3c69a
mov dword [ebp - 0x3b8], 1
mov dword [ebp - 0x40], 0
jmp 0x10043a28
mov eax, dword [ebp - 0x40]
dec eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0xffffffe3
jle 0x10043a59
mov dword [ebp - 0x570], 0x2f76ec75
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x440], 0
mov eax, dword [ebp - 0x40]
add eax, 0xd8f8
mov dword [ebp - 0x570], eax
jmp 0x10043a21
cmp dword [ebp - 0x40], 0
je 0x10043a7b
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x440], 0
je 0x10043a7b
mov dword [ebp - 0x358], 1
jmp 0x10043a82
and dword [ebp - 0x358], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x440]
neg eax
mov dword [ebp - 0x3b8], eax
cmp dword [ebp - 0x3b8], 0x87c7
jg 0x10043aaf
mov dword [ebp - 0x290], 1
jmp 0x10043ab6
and dword [ebp - 0x290], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x440]
cmp dword [ebp - 0x290], eax
jne 0x10043ad7
mov dword [ebp - 0x298], 1
jmp 0x10043ade
and dword [ebp - 0x298], 0
mov eax, dword [ebp - 0x358]
cmp eax, dword [ebp - 0x298]
jne 0x10043af8
mov dword [ebp - 0x410], 1
jmp 0x10043aff
and dword [ebp - 0x410], 0
mov eax, dword [ebp - 0x40]
imul eax, dword [ebp - 0x410]
cmp eax, 0xfffe
jb 0x10043b1c
mov dword [ebp - 0x2a0], 1
jmp 0x10043b23
and dword [ebp - 0x2a0], 0
mov eax, dword [ebp - 0xa0]
cmp dword [ebp - 0x2a0], eax
jne 0x10043b3d
mov dword [ebp - 0x360], 1
jmp 0x10043b44
and dword [ebp - 0x360], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x360], eax
je 0x10043b5b
mov dword [ebp - 0x2a8], 1
jmp 0x10043b62
and dword [ebp - 0x2a8], 0
mov eax, dword [ebp - 0x2a8]
mov dword [ebp - 0x40], eax
jmp 0x100439ed
mov byte [ebp - 0x4f], 0
movzx eax, byte [ebp - 0x4f]
test eax, eax
je 0x10043b9e
push 0x551f
push 0x3172
push 0
push 1
push 1
push 0x352c
push 0x460
call fcn.1003013f
add esp, 0x1c
mov eax, dword [ebp - 0x1e0]
mov ecx, dword [ebp + 8]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0xa4], ecx
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x64], 0xfffffffd
mov dword [ebp - 0x1e4], 0
push 4
lea ecx, [ebp - 0x5e0]
call fcn.1001aa9f
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x1c], 0xfffffff8
mov dword [ebp - 0x388], 0xfffffff7
mov dword [ebp - 0x28], 0
jmp 0x10043bfd
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 4
jge 0x10043c19
push dword [ebp - 0x28]
lea ecx, [ebp - 0x5e0]
call fcn.1001ab3d
mov dword [eax], 1
jmp 0x10043bf6
mov dword [ebp - 0x28], 0
jmp 0x10043c29
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 1
jge 0x10043c3c
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x48], 0xfff6
jmp 0x10043c22
mov dword [ebp - 0x3d8], 0x30e0
mov dword [ebp - 0x578], 0x1000b3c0
cmp dword [ebp - 0x3d8], 0x326d
jle 0x10043d30
push 0
push 0xf10
push 0
push 0
push 0x87d
push 0x165d
push 0x4bf
push 0x1c33
call dword [sym.imp.GDI32.dll_ExtTextOutA]
and dword [ebp - 0x1a4], 0
jmp 0x10043c9b
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 0x6efe
jge 0x10043cfd
and dword [ebp - 0x14c], 0
jmp 0x10043cbd
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 0x59f8
jge 0x10043cfb
mov eax, dword [ebp - 0x1a4]
imul eax, dword [ebp - 0x14c]
cdq
mov dword [ebp - 0x520], eax
mov dword [ebp - 0x51c], edx
push dword [ebp - 0x51c]
push dword [ebp - 0x520]
mov ecx, 0x1060def8
call fcn.1001a86e
jmp 0x10043cb0
jmp 0x10043c8e
push 0x2300
push 0x344
push 0x14c
push 0x1907
push 0x2429
push 0xfea
push 0x10bd
push 0x618
push 0x2c7
call dword [sym.imp.GDI32.dll_Arc]
cmp dword [ebp - 0x18], 0
je 0x10043d49
push 4
pop eax
test eax, eax
je 0x10043d49
mov dword [ebp - 0x3c0], 1
jmp 0x10043d50
and dword [ebp - 0x3c0], 0
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x3c0]
je 0x10043d67
mov dword [ebp - 0x2b0], 1
jmp 0x10043d6e
and dword [ebp - 0x2b0], 0
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x2b0]
cmp eax, dword [ebp - 0x18]
jg 0x10043d91
mov eax, 0xfffd
test eax, eax
je 0x10043d91
mov dword [ebp - 0x368], 1
jmp 0x10043d98
and dword [ebp - 0x368], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x368], eax
jne 0x10043daf
mov dword [ebp - 0x2b8], 1
jmp 0x10043db6
and dword [ebp - 0x2b8], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x2b8], eax
jge 0x10043dcd
mov dword [ebp - 0x490], 1
jmp 0x10043dd4
and dword [ebp - 0x490], 0
cmp dword [ebp - 0x18], 0x5197
jge 0x10043de9
mov dword [ebp - 0x3f0], 1
jmp 0x10043df0
and dword [ebp - 0x3f0], 0
mov eax, dword [ebp - 0x3f0]
mov dword [ebp - 0x1e4], eax
mov eax, dword [ebp - 0x1e4]
mov dword [ebp - 0x2c0], eax
push 2
lea ecx, [ebp - 0x5e0]
call fcn.1001ab3d
mov ecx, dword [ebp - 0x2c0]
mov dword [eax], ecx
cmp dword [ebp - 0x2c0], 0x68fa
jle 0x10043e35
mov dword [ebp - 0x370], 1
jmp 0x10043e3c
and dword [ebp - 0x370], 0
cmp dword [ebp - 0x370], 0xedfa90ef
jb 0x10043e54
mov dword [ebp - 0x2c8], 1
jmp 0x10043e5b
and dword [ebp - 0x2c8], 0
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x2c8]
jle 0x10043e72
mov dword [ebp - 0x3c8], 1
jmp 0x10043e79
and dword [ebp - 0x3c8], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x3c8], eax
jle 0x10043e90
mov dword [ebp - 0x2d0], 1
jmp 0x10043e97
and dword [ebp - 0x2d0], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x2d0], eax
jl 0x10043eae
mov dword [ebp - 0x378], 1
jmp 0x10043eb5
and dword [ebp - 0x378], 0
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x378]
test eax, eax
je 0x10043ee1
push 3
lea ecx, [ebp - 0x5e0]
call fcn.1001ab3d
cmp dword [eax], 0
je 0x10043ee1
mov dword [ebp - 0x5d4], 1
jmp 0x10043ee8
and dword [ebp - 0x5d4], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x7ac], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x48], 0x7df2
jl 0x10043f0d
mov dword [ebp - 0x2d8], 1
jmp 0x10043f14
and dword [ebp - 0x2d8], 0
mov dword [ebp - 0x64], 0x3e86f8c7
mov eax, dword [ebp - 0x64]
cmp eax, dword [ebp - 0x2d8]
je 0x10043f32
mov dword [ebp - 0x408], 1
jmp 0x10043f39
and dword [ebp - 0x408], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x48]
cmp dword [ebp - 0x408], eax
jle 0x10043f57
mov dword [ebp - 0x2e0], 1
jmp 0x10043f5e
and dword [ebp - 0x2e0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x48]
cmp dword [ebp - 0x2e0], eax
jle 0x10043f7c
mov dword [ebp - 0x380], 1
jmp 0x10043f83
and dword [ebp - 0x380], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x380], eax
jne 0x10043f9a
mov dword [ebp - 0x2e8], 1
jmp 0x10043fa1
and dword [ebp - 0x2e8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x48]
cmp dword [ebp - 0x2e8], eax
jl 0x10043fce
cmp dword [ebp - 0x1c], 0
je 0x10043fce
mov eax, 0x62cf9e8
test eax, eax
je 0x10043fce
mov dword [ebp - 0x3d0], 1
jmp 0x10043fd5
and dword [ebp - 0x3d0], 0
cmp dword [ebp - 0x3d0], 0x552ad14c
jl 0x10043fed
mov dword [ebp - 0x2f0], 1
jmp 0x10043ff4
and dword [ebp - 0x2f0], 0
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x2f0]
test eax, eax
je 0x100440f8
mov dword [ebp - 0x2f8], 0xde47
cmp dword [ebp - 0x388], 0
jne 0x100440d7
push 4
pop eax
imul eax, eax, 0
imul ecx, dword [ebp - 0x1c], 0xa6b9
cmp ecx, dword [ebp + eax - 0x48]
je 0x1004403c
mov dword [ebp - 0x498], 1
jmp 0x10044043
and dword [ebp - 0x498], 0
mov eax, dword [ebp - 0x388]
mov dword [ebp - 0x700], eax
mov eax, dword [ebp - 0x2f8]
cmp eax, dword [ebp - 0x2f8]
jle 0x10044069
mov dword [ebp - 0x3f8], 1
jmp 0x10044070
and dword [ebp - 0x3f8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3f8]
sub ecx, dword [ebp + eax - 0x48]
cmp ecx, dword [ebp - 0x1e4]
je 0x10044094
mov dword [ebp - 0x300], 1
jmp 0x1004409b
and dword [ebp - 0x300], 0
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x300]
jne 0x100440b8
cmp dword [ebp - 0x18], 0
je 0x100440b8
mov dword [ebp - 0x390], 1
jmp 0x100440bf
and dword [ebp - 0x390], 0
mov eax, dword [ebp - 0x390]
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jne 0x100440d7
and dword [ebp - 0x308], 0
jmp 0x100440e1
mov dword [ebp - 0x308], 1
push 0
lea ecx, [ebp - 0x5e0]
call fcn.1001ab3d
mov ecx, dword [ebp - 0x308]
mov dword [eax], ecx
jmp 0x10044124
mov byte [ebp - 0x65], 0
push 0x28dd
push 1
lea eax, [ebp - 0x65]
push eax
push 1
push 0x60de
call fcn.1002f046
add esp, 0x14
mov byte [ebp - 0x51], 0
lea eax, [ebp - 0x51]
push eax
call fcn.10041d1f
pop ecx
mov byte [ebp - 4], 0x13
cmp dword [ebp - 0x3d8], 0x2dab
jge 0x10044144
mov edx, dword [ebp - 0x578]
mov ecx, 0x1060def8
call fcn.1001cd79
jmp 0x10044160
mov dword [ebp - 4], 0x12
jmp 0x10044170
mov dword [ebp - 0x1c], 0
jmp 0x10044180
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jg 0x100441ae
mov dword [ebp - 0x64], 0
jmp 0x10044196
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0
jg 0x100441ac
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x48]
mov ecx, dword [ebp - 0x64]
mov dword [ebp + ecx*4 - 0x48], eax
jmp 0x1004418f
jmp 0x10044179
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5e0]
call fcn.1001ab21
mov eax, dword [ebp - 0xa4]
cmp dword [eax], 0x4550
je 0x100446cf
mov dword [ebp - 0x310], 0x74f3
mov dword [ebp - 0x4a0], 0x1000b458
cmp dword [ebp - 0x310], 0x75e2
jle 0x10044268
and dword [ebp - 0x1b4], 0
jmp 0x10044205
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 0x1aee
jge 0x10044268
and dword [ebp - 0x154], 0
jmp 0x10044227
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 0x2cbc
jge 0x10044266
mov eax, dword [ebp - 0x1b4]
mov ecx, dword [ebp - 0x154]
sar eax, cl
cdq
mov dword [ebp - 0x52c], eax
mov dword [ebp - 0x528], edx
push dword [ebp - 0x528]
push dword [ebp - 0x52c]
mov ecx, 0x1060def8
call fcn.1001a86e
jmp 0x1004421a
jmp 0x100441f8
mov dword [ebp - 0xb8], 0xc3c69aed
mov dword [ebp - 4], 0x15
cmp dword [ebp - 0x310], 0x7405
jge 0x10044295
mov edx, dword [ebp - 0x4a0]
mov ecx, 0x1060def8
call fcn.1001cd79
jmp 0x100442b1
or dword [ebp - 4], 0xffffffff
jmp 0x100442bb
mov dword [ebp - 0x6c], 0x126ff23b
mov dword [ebp - 0x190], 0
jmp 0x100442db
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 1
jge 0x100442f7
mov eax, dword [ebp - 0x190]
mov dword [ebp + eax*4 - 0x4a8], 2
jmp 0x100442ce
push 0x3a8f
lea eax, [ebp - 0x6c]
push eax
push 1
push 1
push 0x269c
lea eax, [ebp - 0xb8]
push eax
call fcn.1002f26b
add esp, 0x18
mov dword [ebp - 0x6c], 0
jmp 0x10044328
mov eax, dword [ebp - 0x6c]
dec eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
jl 0x10044623
mov dword [ebp - 0x620], 0x6a20
mov dword [ebp - 0x61c], 0x6a20
mov dword [ebp - 0x618], 0x6a20
mov dword [ebp - 0x614], 0x6a20
mov dword [ebp - 0x22c], 0xffffffff
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x620]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x620], eax
mov dword [ebp - 0xb8], 0
jmp 0x10044396
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0
jg 0x1004461e
mov dword [ebp - 0x7c], 0x4981ff29
mov dword [ebp - 0x318], 0
mov dword [ebp - 0x5bc], 0xaebb1bb3
mov dword [ebp - 0x580], 0x5618d7c
mov dword [ebp - 0x7c], 0
jmp 0x100443d8
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0
jg 0x10044619
push 3
lea ecx, [ebp - 0x5f0]
call fcn.1001aa9f
mov dword [ebp - 4], 0x17
mov dword [ebp - 0x1ec], 0x7dcda720
mov dword [ebp - 0x15c], 0
jmp 0x10044419
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 3
jge 0x1004443b
push dword [ebp - 0x15c]
lea ecx, [ebp - 0x5f0]
call fcn.1001ab3d
mov dword [eax], 0x34b0b4ef
jmp 0x1004440c
push 1
lea ecx, [ebp - 0x5f0]
call fcn.1001ab3d
and dword [eax], 0
jmp 0x10044471
push 1
lea ecx, [ebp - 0x5f0]
call fcn.1001ab3d
mov dword [ebp - 0x398], eax
mov eax, dword [ebp - 0x398]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x398]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x5f0]
call fcn.1001ab3d
cmp dword [eax], 0
jl 0x10044605
mov dword [ebp - 0x204], 0xffffffff
mov dword [ebp - 0x4b0], 0xe96f77d9
mov eax, 0xa5f2
test eax, eax
je 0x100445ac
mov dword [ebp - 0x1ec], 0xc42ff18c
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x318], eax
mov eax, dword [ebp - 0x204]
cmp eax, dword [ebp - 0x318]
jge 0x100444d5
mov dword [ebp - 0x234], 1
jmp 0x100444dc
and dword [ebp - 0x234], 0
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x768], eax
mov eax, dword [ebp - 0x204]
cmp eax, dword [ebp - 0x204]
jge 0x100444ff
mov dword [ebp - 0x41c], 1
jmp 0x10044506
and dword [ebp - 0x41c], 0
mov eax, dword [ebp - 0x41c]
mov dword [ebp - 0x1ec], eax
mov eax, dword [ebp - 0x1ec]
mov dword [ebp - 0x708], eax
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x720], eax
cmp dword [ebp - 0x6c], 0xfffffff8
ja 0x10044539
mov dword [ebp - 0x214], 1
jmp 0x10044540
and dword [ebp - 0x214], 0
mov eax, dword [ebp - 0x5bc]
cmp dword [ebp - 0x214], eax
jg 0x1004455a
mov dword [ebp - 0x210], 1
jmp 0x10044561
and dword [ebp - 0x210], 0
mov eax, dword [ebp - 0x210]
mov dword [ebp - 0x22c], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov edx, dword [ebp - 0x22c]
sub edx, dword [ebp + ecx - 0x4a8]
mov ecx, dword [ebp - 0x234]
sub ecx, edx
sub ecx, dword [ebp + eax - 0x620]
je 0x100445ac
cmp dword [ebp - 0x580], 0
je 0x100445ac
mov dword [ebp - 0x23c], 1
jmp 0x100445b3
and dword [ebp - 0x23c], 0
cmp dword [ebp - 0x23c], 0xffff
jb 0x100445cb
mov dword [ebp - 0x244], 1
jmp 0x100445d2
and dword [ebp - 0x244], 0
mov eax, dword [ebp - 0x244]
sub eax, 0x6ed73489
test eax, eax
jle 0x100445ed
mov dword [ebp - 0x24c], 1
jmp 0x100445f4
and dword [ebp - 0x24c], 0
mov eax, dword [ebp - 0x24c]
mov dword [ebp - 0x4b0], eax
jmp 0x1004444d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5f0]
call fcn.1001ab21
jmp 0x100443d1
jmp 0x10044389
jmp 0x10044321
push 2
lea ecx, [ebp - 0x6a0]
call fcn.1001aa9f
mov dword [ebp - 4], 0x18
mov dword [ebp - 0x8c], 0xfffffff6
lea eax, [ebp - 0x6e4]
push eax
push 0x3529
push 1
push 0x1db4
lea eax, [ebp - 0x6a0]
push eax
push 1
call fcn.1002f505
add esp, 0x18
call fcn.10041d4d
mov dword [ebp - 0x8c], 0
jmp 0x10044683
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 2
jge 0x100446b9
push 1
lea eax, [ebp - 0x8c]
push eax
push 1
push 0x675f
push 0x5b9a
push 1
push 0x3a85
lea eax, [ebp - 0x6a0]
push eax
call fcn.1002f7e9
add esp, 0x20
jmp 0x10044676
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6a0]
call fcn.1001ab21
xor eax, eax
jmp 0x100465d8
lea eax, [ebp - 0x158]
push eax
push 0x5cb9
push dword [ebp - 0xa4]
push 0x70f0
push 0
push 0x213
push 0x464c
push 1
call fcn.1002ee08
add esp, 0x20
mov dword [ebp - 0x90], 0x4e1a3622
mov dword [ebp - 0xc8], 0xbb4ebb0c
mov dword [ebp - 0x84], 0xbce008fb
mov dword [ebp - 0x4b8], 0xfffffff7
push 3
lea ecx, [ebp - 0x638]
call fcn.1001aa9f
mov dword [ebp - 4], 0x19
mov dword [ebp - 0x1c8], 0xb1a7
mov dword [ebp - 0x198], 0
jmp 0x1004475b
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 3
jge 0x1004477d
push dword [ebp - 0x198]
lea ecx, [ebp - 0x638]
call fcn.1001ab3d
mov dword [eax], 3
jmp 0x1004474e
push 0x456a
lea eax, [ebp - 0xc8]
push eax
push 0x411a
push 0x45f0
push 1
lea eax, [ebp - 0x90]
push eax
push 0xf0
push 0x7012
push 1
call fcn.1002f9fa
add esp, 0x24
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0x728], eax
cmp dword [ebp - 0x84], 0
jne 0x100447e0
push 2
lea ecx, [ebp - 0x638]
call fcn.1001ab3d
cmp dword [eax], 0
jne 0x100447e0
and dword [ebp - 0x254], 0
jmp 0x100447ea
mov dword [ebp - 0x254], 1
mov eax, dword [ebp - 0x1c8]
dec eax
mov dword [ebp - 0x1c8], eax
mov eax, dword [ebp - 0x254]
add eax, 0x164
cmp dword [ebp - 0x1c8], eax
jge 0x10044816
mov dword [ebp - 0x25c], 1
jmp 0x1004481d
and dword [ebp - 0x25c], 0
imul eax, dword [ebp - 0x90], 0xfffd
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x90]
cmp eax, dword [ebp - 0x25c]
jne 0x10044847
mov dword [ebp - 0x264], 1
jmp 0x1004484e
and dword [ebp - 0x264], 0
mov eax, dword [ebp - 0x84]
cmp dword [ebp - 0x264], eax
je 0x10044868
mov dword [ebp - 0x26c], 1
jmp 0x1004486f
and dword [ebp - 0x26c], 0
mov eax, dword [ebp - 0xc8]
sub eax, dword [ebp - 0x26c]
je 0x10044890
push 0xfffffffffffffffe
pop eax
test eax, eax
je 0x10044890
mov dword [ebp - 0x274], 1
jmp 0x10044897
and dword [ebp - 0x274], 0
mov eax, dword [ebp - 0x84]
cmp dword [ebp - 0x274], eax
jle 0x100448b1
mov dword [ebp - 0x27c], 1
jmp 0x100448b8
and dword [ebp - 0x27c], 0
mov eax, dword [ebp - 0xc8]
add eax, dword [ebp - 0x27c]
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0xffffffff
jae 0x100448da
call fcn.10041d83
jmp 0x1004492c
mov dword [ebp - 0x588], 0x2b0402ad
mov dword [ebp - 0x5f4], 0xf9703980
lea eax, [ebp - 0xc8]
push eax
lea eax, [ebp - 0x5f4]
push eax
lea eax, [ebp - 0x4b8]
push eax
lea eax, [ebp - 0x638]
push eax
lea eax, [ebp - 0x588]
push eax
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x84]
push eax
call fcn.10041d9f
add esp, 0x1c
call fcn.10042061
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x638]
call fcn.1001ab21
cmp dword [ebp - 0x158], 0
jne 0x10044ee8
mov dword [ebp - 0xe0], 0x70ad6f2e
mov dword [ebp - 0xe8], 0xffffffff
mov dword [ebp - 0x718], 0x158d
mov dword [ebp - 0x94], 0x11d9
mov dword [ebp - 0x284], 0x11b0
mov dword [ebp - 0x5c4], 0x1000b4b8
cmp dword [ebp - 0x284], 0x141d
jle 0x10044a9e
and dword [ebp - 0x164], 0
jmp 0x100449aa
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 0x1c15
jge 0x10044a9e
and dword [ebp - 0x1a0], 0
jmp 0x100449d0
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 0x7211
jge 0x10044a99
and dword [ebp - 0xd4], 0
jmp 0x100449f6
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0xf6
jge 0x10044a94
and dword [ebp - 0xd8], 0
jmp 0x10044a1c
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0x38ac
jge 0x10044a8f
mov eax, dword [ebp - 0x164]
mov ecx, dword [ebp - 0x1a0]
sar eax, cl
mov ecx, dword [ebp - 0xd4]
shl eax, cl
xor eax, dword [ebp - 0xd8]
cdq
mov dword [ebp - 0x538], eax
mov dword [ebp - 0x534], edx
push dword [ebp - 0x534]
push dword [ebp - 0x538]
lea ecx, [ebp - 0x824]
call fcn.1000d25a
pop ecx
pop ecx
mov dword [ebp - 0x4c0], eax
mov ecx, dword [ebp - 0x4c0]
call fcn.1001a84e
push eax
call fcn.1004f3d6
pop ecx
lea ecx, [ebp - 0x824]
call fcn.1001a844
jmp 0x10044a0f
jmp 0x100449e9
jmp 0x100449c3
jmp 0x1004499d
mov dword [ebp - 0x7a4], 0xca9
mov dword [ebp - 4], 0x1a
cmp dword [ebp - 0x284], 0x112e
jge 0x10044ac7
push dword [ebp - 0x5c4]
call fcn.1004f3d6
pop ecx
jmp 0x10044ae3
or dword [ebp - 4], 0xffffffff
jmp 0x10044aed
mov dword [ebp - 0x72c], 0xd64e
mov dword [ebp - 0x2c], 0
jmp 0x10044b07
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jge 0x10044b1d
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x7f4], 0x8c3ad3b3
jmp 0x10044b00
mov dword [ebp - 0x2c], 0
jmp 0x10044b2d
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jge 0x10044b43
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x1d8], 0x4b7c
jmp 0x10044b26
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1d8]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x1d8], eax
mov dword [ebp - 0xe0], 0
jmp 0x10044b77
mov eax, dword [ebp - 0xe0]
dec eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0
jl 0x10044be9
mov dword [ebp - 0x94], 0
jmp 0x10044b99
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 1
jge 0x10044bb5
mov eax, dword [ebp - 0x94]
mov dword [ebp + eax*4 - 0x1d8], 6
jmp 0x10044b8c
mov dword [ebp - 0xe8], 1
jmp 0x10044bce
mov eax, dword [ebp - 0xe8]
dec eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0
jl 0x10044be7
mov byte [ebp - 0x5d], 0
lea eax, [ebp - 0x5d]
push eax
call fcn.10042097
pop ecx
jmp 0x10044bc1
jmp 0x10044b6a
mov dword [ebp - 0x74], 0xffffffff
mov dword [ebp - 0x2e4], 0x5849968c
mov dword [ebp - 0x590], 0xb3f4b141
mov dword [ebp - 0x34], 0
jmp 0x10044c14
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 3
jge 0x10044c2a
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x650], 0xfff8
jmp 0x10044c0d
mov dword [ebp - 0x34], 0
jmp 0x10044c3a
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 3
jge 0x10044c50
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x7dc], 0xaee0cd97
jmp 0x10044c33
mov dword [ebp - 0x74], 2
jmp 0x10044c60
mov eax, dword [ebp - 0x74]
dec eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0
jl 0x10044ed3
mov dword [ebp - 0x2ec], 0xfffffff9
mov eax, dword [ebp - 0x74]
cmp dword [ebp + eax*4 - 0x650], 3
jl 0x10044c8d
mov dword [ebp - 0x28c], 1
jmp 0x10044c94
and dword [ebp - 0x28c], 0
cmp dword [ebp - 0x28c], 0x67e307b
jne 0x10044cac
mov dword [ebp - 0x294], 1
jmp 0x10044cb3
and dword [ebp - 0x294], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x650]
cmp dword [ebp - 0x294], eax
jl 0x10044e7b
push 3
lea ecx, [ebp - 0x438]
call fcn.1001aa9f
mov dword [ebp - 4], 0x1c
mov dword [ebp - 0x29c], 0xffffffff
lea eax, [ebp - 0x438]
push eax
lea eax, [ebp - 0x778]
push eax
call fcn.100420c5
pop ecx
pop ecx
push 2
lea ecx, [ebp - 0x438]
call fcn.1001ab3d
cmp dword [eax], 0
je 0x10044d26
mov eax, 0xfffa
test eax, eax
je 0x10044d26
mov dword [ebp - 0x2cc], 1
jmp 0x10044d2d
and dword [ebp - 0x2cc], 0
push 2
lea ecx, [ebp - 0x438]
call fcn.1001ab3d
cmp dword [eax], 2
jae 0x10044d4b
mov dword [ebp - 0x2bc], 1
jmp 0x10044d52
and dword [ebp - 0x2bc], 0
push 1
lea ecx, [ebp - 0x438]
call fcn.1001ab3d
mov dword [ebp - 0x29c], 0xde6f
cmp dword [ebp - 0x29c], 0
je 0x10044d8b
mov eax, dword [ebp - 0x74]
cmp dword [ebp + eax*4 - 0x650], 0
je 0x10044d8b
mov dword [ebp - 0x20c], 1
jmp 0x10044d92
and dword [ebp - 0x20c], 0
mov eax, dword [ebp - 0x20c]
neg eax
cmp eax, dword [ebp - 0x2ec]
je 0x10044dae
mov dword [ebp - 0x2ac], 1
jmp 0x10044db5
and dword [ebp - 0x2ac], 0
push 2
lea ecx, [ebp - 0x438]
call fcn.1001ab3d
mov ecx, dword [ebp - 0x2ac]
cmp ecx, dword [eax]
jge 0x10044dd8
mov dword [ebp - 0x2b4], 1
jmp 0x10044ddf
and dword [ebp - 0x2b4], 0
push 2
lea ecx, [ebp - 0x438]
call fcn.1001ab3d
mov ecx, dword [ebp - 0x2b4]
cmp ecx, dword [eax]
jg 0x10044e02
mov dword [ebp - 0x2c4], 1
jmp 0x10044e09
and dword [ebp - 0x2c4], 0
mov eax, dword [ebp - 0x2bc]
cmp eax, dword [ebp - 0x2c4]
jl 0x10044e23
mov dword [ebp - 0x2d4], 1
jmp 0x10044e2a
and dword [ebp - 0x2d4], 0
mov eax, dword [ebp - 0x2cc]
cmp eax, dword [ebp - 0x2d4]
jne 0x10044e44
mov dword [ebp - 0x2dc], 1
jmp 0x10044e4b
and dword [ebp - 0x2dc], 0
mov eax, dword [ebp - 0x2dc]
mov dword [ebp - 0x2e4], eax
mov eax, dword [ebp - 0x2e4]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x7dc], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x438]
call fcn.1001ab21
jmp 0x10044ece
mov dword [ebp - 0x4c8], 0x69b4
mov dword [ebp - 0x2fc], 0xfffffff7
cmp dword [ebp - 0x2ec], 0
je 0x10044e9a
jmp 0x10044ed3
mov eax, dword [ebp - 0x4c8]
mov dword [ebp - 0x2f4], eax
mov eax, dword [ebp - 0x74]
mov ecx, dword [ebp - 0x2f4]
mov dword [ebp + eax*4 - 0x650], ecx
mov eax, dword [ebp - 0x2f4]
mov dword [ebp - 0x2fc], eax
mov eax, dword [ebp - 0x2fc]
mov dword [ebp - 0x590], eax
jmp 0x10044c59
mov byte [ebp - 0x53], 0
lea eax, [ebp - 0x53]
push eax
call fcn.1004210d
pop ecx
xor eax, eax
jmp 0x100465d8
call fcn.10042145
push 0x5fbf
lea eax, [ebp - 0x20]
push eax
push 1
lea eax, [ebp - 0x1e0]
push eax
push 0x5c4d
push 0x6c25
push 0x7d86
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0x738]
push eax
lea eax, [ebp - 0x158]
push eax
push 0x2274
push 0x5254
push 0x130d
push 0x7ba7
push 1
push 0x14ca
push 0x280
push 0x3da1
push 0x2f05
push 0x2970
call fcn.10030ca0
add esp, 0x50
mov dword [ebp - 0x1e8], 0x86cce57b
mov dword [ebp - 0x304], 0x6e5c7a00
mov dword [ebp - 0x9c], 0xdeec5416
mov dword [ebp - 0x1f0], 0x6c74aa0d
mov dword [ebp - 0x30c], 0x87d0fa51
push 3
lea ecx, [ebp - 0x600]
call fcn.1001aa9f
mov dword [ebp - 4], 0x1d
mov dword [ebp - 0x324], 0xe3051ebf
mov dword [ebp - 0x5e4], 1
mov dword [ebp - 0x78], 0xec767dbf
mov dword [ebp - 0x4d0], 0xe07f0936
mov dword [ebp - 0x1f8], 0x7f2bfcff
mov dword [ebp - 0xf0], 0
jmp 0x10044fe8
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 3
jge 0x10045007
push dword [ebp - 0xf0]
lea ecx, [ebp - 0x600]
call fcn.1001ab3d
and dword [eax], 0
jmp 0x10044fdb
push 0x2e04
push 0x128b
lea eax, [ebp - 0x324]
push eax
lea eax, [ebp - 0x4d0]
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x600]
push eax
lea eax, [ebp - 0x78]
push eax
push 0x6b63
lea eax, [ebp - 0x1e8]
push eax
push 1
lea eax, [ebp - 0x304]
push eax
lea eax, [ebp - 0x5e4]
push eax
push 1
lea eax, [ebp - 0x1f0]
push eax
lea eax, [ebp - 0x30c]
push eax
call fcn.1003143e
add esp, 0x3c
mov dword [ebp - 0x9c], 0
jmp 0x1004507e
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 4
jge 0x1004521d
mov dword [ebp - 0x4dc], 0xfffffffc
mov dword [ebp - 0x31c], 0xfffffffd
mov dword [ebp - 0x314], 4
lea eax, [ebp - 0x1f0]
push eax
push 1
lea eax, [ebp - 0x314]
push eax
lea eax, [ebp - 0x304]
push eax
push 1
push 0x20fc
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x1e8]
push eax
lea eax, [ebp - 0x30c]
push eax
lea eax, [ebp - 0x1f8]
push eax
lea eax, [ebp - 0x4dc]
push eax
lea eax, [ebp - 0x600]
push eax
lea eax, [ebp - 0x31c]
push eax
call fcn.10031a67
add esp, 0x34
cmp dword [ebp - 0x1e8], 0
je 0x10045136
mov dword [ebp - 0x78], 0xfffffff9
jmp 0x10045116
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0x30
jle 0x10045131
push 1
push 1
push 1
push 0x6d2
call fcn.10031d4e
add esp, 0x10
jmp 0x1004510f
jmp 0x10045218
mov dword [ebp - 0x4e8], 1
mov dword [ebp - 0x59c], 0x1745
mov dword [ebp - 0x4f4], 8
mov dword [ebp - 0x5cc], 0x7825fa2f
push 2
lea ecx, [ebp - 0x6d0]
call fcn.1001aa9f
mov byte [ebp - 4], 0x1e
lea eax, [ebp - 0x6d0]
push eax
lea eax, [ebp - 0x7b4]
push eax
push 1
push 0x2232
push 1
push 0x3753
call fcn.10031ed8
add esp, 0x18
lea eax, [ebp - 0x59c]
push eax
lea eax, [ebp - 0x314]
push eax
lea eax, [ebp - 0x1f0]
push eax
lea eax, [ebp - 0x4e8]
push eax
push 1
lea eax, [ebp - 0x1f8]
push eax
push 1
lea eax, [ebp - 0x31c]
push eax
lea eax, [ebp - 0x5cc]
push eax
lea eax, [ebp - 0x324]
push eax
lea eax, [ebp - 0x4f4]
push eax
lea eax, [ebp - 0x6d0]
push eax
lea eax, [ebp - 0x600]
push eax
call fcn.10031fd8
add esp, 0x34
push 0x13e0
push 0
push 0x747e
push 1
lea eax, [ebp - 0x1f8]
push eax
call fcn.100419e8
add esp, 0x14
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x6d0]
call fcn.1001ab21
jmp 0x10045071
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x600]
call fcn.1001ab21
push 0x2068
push 1
push 0x4dd8
push dword [ebp + 8]
push 0x5f88
push 0x5a81
push dword [ebp - 0x20]
push 0x21cd
push 0x3f76
push 0x473d
push 0
push 0x7d6d
push dword [ebp - 0xa4]
push 0x33bf
call fcn.10034f5c
add esp, 0x38
mov dword [ebp - 0x740], 0xfffffffa
call fcn.1004246e
call fcn.1004249d
push 1
lea eax, [ebp - 0x158]
push eax
push 1
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0x344]
push eax
call fcn.10032a2a
add esp, 0x14
mov dword [ebp - 0xf8], 0xffffffff
mov dword [ebp - 0xc4], 0xfffffffe
push 1
lea ecx, [ebp - 0x774]
call fcn.1001aa9f
mov dword [ebp - 4], 0x1f
lea eax, [ebp - 0x788]
push eax
push 0x53b3
push 1
push 0x58c
lea eax, [ebp - 0x774]
push eax
push 1
call fcn.10032ab7
add esp, 0x18
mov dword [ebp - 0xf8], 0
jmp 0x1004530b
mov eax, dword [ebp - 0xf8]
dec eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0xffffffed
jl 0x1004585c
mov dword [ebp - 0x100], 0x29000d4e
mov dword [ebp - 0xac], 0x60a4
mov dword [ebp - 0x100], 0
jmp 0x10045345
mov eax, dword [ebp - 0x100]
dec eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0xfffffff3
jg 0x10045857
mov dword [ebp - 0x32c], 0x293a
mov dword [ebp - 0x500], 0x1000b520
cmp dword [ebp - 0x32c], 0x2a4a
jle 0x1004544b
and dword [ebp - 0x108], 0
jmp 0x1004538c
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0x6e08
jge 0x1004544b
and dword [ebp - 0x110], 0
jmp 0x100453b2
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0x1fd2
jge 0x10045446
and dword [ebp - 0x118], 0
jmp 0x100453d8
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0x5d63
jge 0x10045441
mov eax, dword [ebp - 0x108]
add eax, dword [ebp - 0x110]
add eax, dword [ebp - 0x118]
cdq
mov dword [ebp - 0x544], eax
mov dword [ebp - 0x540], edx
push dword [ebp - 0x540]
push dword [ebp - 0x544]
lea ecx, [ebp - 0x854]
call fcn.1000d25a
pop ecx
pop ecx
mov dword [ebp - 0x54c], eax
mov ecx, dword [ebp - 0x54c]
call fcn.1001a84e
push eax
call fcn.1004f3d6
pop ecx
lea ecx, [ebp - 0x854]
call fcn.1001a844
jmp 0x100453cb
jmp 0x100453a5
jmp 0x1004537f
push 3
lea ecx, [ebp - 0x764]
call fcn.1001aa9f
mov byte [ebp - 4], 0x20
mov byte [ebp - 4], 0x21
cmp dword [ebp - 0x32c], 0x275d
jge 0x10045478
push dword [ebp - 0x500]
call fcn.1004f3d6
pop ecx
jmp 0x10045494
mov dword [ebp - 4], 0x20
jmp 0x100454a4
mov dword [ebp - 0xb4], 3
mov dword [ebp - 0x334], 0x1e07
mov dword [ebp - 0x50c], 0x1000b578
cmp dword [ebp - 0x334], 0x20ae
jle 0x10045610
push 0
push 0
push 0x1698
push 0
push 0x179
push 0
push 0xa9e
push 0xd0f
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
and dword [ebp - 0x130], 0
jmp 0x1004550a
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0x957
jge 0x10045602
and dword [ebp - 0x138], 0
jmp 0x10045530
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0x845
jge 0x100455fd
and dword [ebp - 0x120], 0
jmp 0x10045556
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0x11ab
jge 0x100455f8
and dword [ebp - 0x128], 0
jmp 0x1004557c
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0x44da
jge 0x100455f3
mov eax, dword [ebp - 0x120]
imul eax, dword [ebp - 0x128]
mov edx, dword [ebp - 0x130]
mov ecx, dword [ebp - 0x138]
shl edx, cl
xor eax, edx
cdq
mov dword [ebp - 0x598], eax
mov dword [ebp - 0x594], edx
push dword [ebp - 0x594]
push dword [ebp - 0x598]
lea ecx, [ebp - 0x884]
call fcn.1000d25a
pop ecx
pop ecx
mov dword [ebp - 0x55c], eax
mov ecx, dword [ebp - 0x55c]
call fcn.1001a84e
push eax
call fcn.1004f3d6
pop ecx
lea ecx, [ebp - 0x884]
call fcn.1001a844
jmp 0x1004556f
jmp 0x10045549
jmp 0x10045523
jmp 0x100454fd
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetOverlappedResult]
mov byte [ebp - 4], 0x23
cmp dword [ebp - 0x334], 0x1c95
jge 0x1004562c
push dword [ebp - 0x50c]
call fcn.1004f3d6
pop ecx
jmp 0x10045648
mov dword [ebp - 4], 0x20
jmp 0x10045658
mov dword [ebp - 0x3c], 0
jmp 0x10045668
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 3
jge 0x10045684
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x764]
call fcn.1001ab3d
mov dword [eax], 0x61bab593
jmp 0x10045661
mov dword [ebp - 0x3c], 0
jmp 0x10045694
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 1
jge 0x100456aa
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x518], 0x8dc2a82a
jmp 0x1004568d
push 1
push 0x2c57
push 0xb8d
lea eax, [ebp - 0xac]
push eax
push 0x3c07
push 0
push 0x4513
call fcn.10032b5f
add esp, 0x1c
mov dword [ebp - 0x33c], 0x587e
mov dword [ebp - 0x564], 0x1000b5c8
cmp dword [ebp - 0x33c], 0x5b55
jle 0x1004579e
and dword [ebp - 0x150], 0
jmp 0x1004570b
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0x700d
jge 0x1004579e
and dword [ebp - 0x140], 0
jmp 0x10045731
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 0x4e12
jge 0x10045799
and dword [ebp - 0x148], 0
jmp 0x10045753
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 0x414c
jge 0x10045797
mov eax, dword [ebp - 0x140]
imul eax, dword [ebp - 0x148]
add eax, dword [ebp - 0x150]
cdq
mov dword [ebp - 0x5a4], eax
mov dword [ebp - 0x5a0], edx
push dword [ebp - 0x5a0]
push dword [ebp - 0x5a4]
mov ecx, 0x1060def8
call fcn.1001a86e
jmp 0x10045746
jmp 0x10045724
jmp 0x100456fe
mov byte [ebp - 4], 0x25
cmp dword [ebp - 0x33c], 0x586e
jge 0x100457be
mov edx, dword [ebp - 0x564]
mov ecx, 0x1060def8
call fcn.1001cd79
jmp 0x100457da
mov dword [ebp - 4], 0x20
jmp 0x100457ea
mov dword [ebp - 0xac], 0
jmp 0x10045803
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 7
jne 0x10045843
mov dword [ebp - 0xb4], 0
jmp 0x10045825
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 1
jge 0x10045841
mov eax, dword [ebp - 0xb4]
mov dword [ebp + eax*4 - 0x518], 2
jmp 0x10045818
jmp 0x100457f6
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x764]
call fcn.1001ab21
jmp 0x10045338
jmp 0x100452fe
mov dword [ebp - 0xc4], 0
jmp 0x10045875
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 7
je 0x10045959
mov dword [ebp - 0x548], 0
mov dword [ebp - 0xbc], 0x84cbed56
mov dword [ebp - 0x524], 1
push 0x2b0b
push 0x36f6
push 0x7b64
push 0x6628
push 0x191
lea eax, [ebp - 0x548]
push eax
push 1
push 0x581e
lea eax, [ebp - 0xbc]
push eax
push 0x420a
push 0x321d
push 0x2294
push 0x7e94
push 0x1dba
push 1
push 0x333d
push 0x24d0
push 0x1186
push 0x7240
call fcn.10032c8a
add esp, 0x4c
mov dword [ebp - 0xbc], 0
jmp 0x1004591e
mov eax, dword [ebp - 0xbc]
dec eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0xffffffe3
jge 0x10045954
mov dword [ebp - 0x574], 0xffffffff
lea eax, [ebp - 0xc4]
push eax
lea eax, [ebp - 0x524]
push eax
lea eax, [ebp - 0x574]
push eax
push 1
push 1
call fcn.1003316c
add esp, 0x14
jmp 0x10045911
jmp 0x10045868
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x774]
call fcn.1001ab21
cmp dword [ebp - 0x344], 0
je 0x10045997
push 1
lea eax, [ebp - 0x20]
push eax
push 1
push 0x2207
push 0x1972
lea eax, [ebp - 0x344]
push eax
push 0x6c9
call fcn.10033237
add esp, 0x1c
mov dword [ebp - 0x57c], 0xd5e48d32
mov dword [ebp - 0x530], 0
call fcn.100424d4
lea eax, [ebp - 0x530]
push eax
lea eax, [ebp - 0x57c]
push eax
call fcn.10042508
pop ecx
pop ecx
push dword [ebp - 0x20]
call fcn.1002bcea
pop ecx
test eax, eax
jne 0x10045b35
mov dword [ebp - 0x37c], 0xfffffffa
mov dword [ebp - 0x35c], 0x88d96753
mov dword [ebp - 0x374], 0xfffffffb
mov dword [ebp - 0x448], 0x4a797449
mov dword [ebp - 0x44], 0
jmp 0x10045a0e
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 1
jge 0x10045a24
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x53c], 0xd6c3f0bc
jmp 0x10045a07
mov dword [ebp - 0x44], 0
jmp 0x10045a34
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 3
jge 0x10045a4a
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x784], 0xffff
jmp 0x10045a2d
xor eax, eax
inc eax
je 0x10045af0
cmp dword [ebp - 0x35c], 0xffffffff
jg 0x10045a68
mov dword [ebp - 0x34c], 1
jmp 0x10045a6f
and dword [ebp - 0x34c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x784]
cmp dword [ebp - 0x34c], eax
jne 0x10045a8f
mov dword [ebp - 0x354], 1
jmp 0x10045a96
and dword [ebp - 0x354], 0
mov eax, dword [ebp - 0x354]
neg eax
mov dword [ebp - 0x364], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x364]
mov dword [ebp + eax - 0x53c], ecx
mov eax, dword [ebp - 0x35c]
imul eax, dword [ebp - 0x364]
add eax, dword [ebp - 0x37c]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x784]
sub ecx, eax
je 0x10045af0
cmp dword [ebp - 0x374], 0
je 0x10045af0
mov dword [ebp - 0x36c], 1
jmp 0x10045af7
and dword [ebp - 0x36c], 0
cmp dword [ebp - 0x36c], 0x6432a276
jl 0x10045b0f
mov dword [ebp - 0x584], 1
jmp 0x10045b16
and dword [ebp - 0x584], 0
mov eax, dword [ebp - 0x374]
mov dword [ebp - 0x748], eax
mov eax, dword [ebp - 0x448]
mov dword [ebp - 0x37c], eax
xor eax, eax
jmp 0x100465d8
push 1
lea ecx, [ebp - 0x688]
call fcn.1001aa9f
mov dword [ebp - 4], 0x27
mov dword [ebp - 0x44c], 1
mov dword [ebp - 0x45c], 0x2b5725d3
mov dword [ebp - 0x464], 0x941ce3cb
mov dword [ebp - 0x454], 9
mov dword [ebp - 0x46c], 0xffffffff
lea eax, [ebp - 0x688]
push eax
lea eax, [ebp - 0x78c]
push eax
call fcn.10042574
pop ecx
pop ecx
lea eax, [ebp - 0x44c]
push eax
lea eax, [ebp - 0x454]
push eax
push 1
lea eax, [ebp - 0x45c]
push eax
lea eax, [ebp - 0x464]
push eax
lea eax, [ebp - 0x688]
push eax
push 0x163c
push 1
lea eax, [ebp - 0x46c]
push eax
call fcn.100335ac
add esp, 0x24
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x688]
call fcn.1001ab21
push 0
push 1
push dword [ebp - 0x20]
call fcn.1003380d
add esp, 0xc
mov dword [ebp - 0x39c], 0x8939f5fa
mov dword [ebp - 0x30], 0
jmp 0x10045c03
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jge 0x10045c19
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x42c], 0x91f7
jmp 0x10045bfc
mov dword [ebp - 0x30], 0
jmp 0x10045c29
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 2
jge 0x10045c3f
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x734], 0x33356370
jmp 0x10045c22
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x42c], 0x288a
mov eax, 0x288a
cmp eax, 0xccb0
jne 0x10045c68
mov dword [ebp - 0x384], 1
jmp 0x10045c6f
and dword [ebp - 0x384], 0
mov eax, dword [ebp - 0x384]
sub eax, 0xfff7
jne 0x10045d24
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x42c]
cmp ecx, dword [ebp + eax - 0x42c]
jg 0x10045cb8
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x42c], 0
je 0x10045cb8
mov dword [ebp - 0x38c], 1
jmp 0x10045cbf
and dword [ebp - 0x38c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x38c]
dec ecx
dec ecx
sub ecx, dword [ebp + eax - 0x42c]
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x42c], ecx
jg 0x10045cef
mov dword [ebp - 0x394], 1
jmp 0x10045cf6
and dword [ebp - 0x394], 0
mov eax, dword [ebp - 0x394]
mov dword [ebp - 0x39c], eax
cmp dword [ebp - 0x39c], 0
jne 0x10045d24
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x42c], 0
jne 0x10045d24
and dword [ebp - 0x3a4], 0
jmp 0x10045d2e
mov dword [ebp - 0x3a4], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3a4]
mov dword [ebp + eax - 0x734], ecx
mov byte [ebp - 0x6d], 0
lea eax, [ebp - 0x6d]
push eax
call fcn.100425bc
pop ecx
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
cmp dword [eax + 0x28], 0
je 0x100461ee
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x158]
add ecx, dword [eax + 0x28]
mov dword [ebp - 0x3c4], ecx
and dword [ebp - 0x67c], 0
and dword [ebp - 0x678], 0
and dword [ebp - 0x674], 0
and dword [ebp - 0x670], 0
lea ecx, [ebp - 0x205]
call fcn.1001ab4c
push eax
lea eax, [ebp - 0x66c]
push eax
lea eax, [ebp - 0x67c]
push eax
lea ecx, [ebp - 0x7ec]
call fcn.1001ab4f
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x610]
call fcn.1001aafb
mov dword [ebp - 4], 0x28
mov dword [ebp - 0x474], 0x88ad88ca
mov dword [ebp - 0x47c], 0x963f6d1d
push 0
lea ecx, [ebp - 0x610]
call fcn.1001ab3d
and dword [eax], 0
jmp 0x10045e14
push 0
lea ecx, [ebp - 0x610]
call fcn.1001ab3d
mov dword [ebp - 0x3ac], eax
mov eax, dword [ebp - 0x3ac]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x3ac]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x610]
call fcn.1001ab3d
cmp dword [eax], 0x13
jl 0x10045f66
mov dword [ebp - 0xcc], 0xbacd7953
push 1
lea ecx, [ebp - 0x694]
call fcn.1001aa9f
mov byte [ebp - 4], 0x29
lea eax, [ebp - 0x694]
push eax
lea eax, [ebp - 0x750]
push eax
call fcn.100425e5
pop ecx
pop ecx
mov dword [ebp - 0xcc], 0
jmp 0x10045e73
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0x16
jne 0x10045f52
push 4
lea ecx, [ebp - 0x668]
call fcn.1001aa9f
mov byte [ebp - 4], 0x2a
mov dword [ebp - 0x484], 0x3783312e
push 0x4e29
push 1
push 0x2ef4
push 0x4122
lea eax, [ebp - 0x668]
push eax
push 1
lea eax, [ebp - 0x6e8]
push eax
call fcn.10034c3e
add esp, 0x1c
lea eax, [ebp - 0x668]
push eax
push 0x52a1
push 1
push 0x7b51
push 1
push 0x1fbe
push 1
call fcn.10034e3b
add esp, 0x1c
lea eax, [ebp - 0x694]
push eax
push 1
lea eax, [ebp - 0x474]
push eax
push 0x625e
lea eax, [ebp - 0x668]
push eax
push 0x1051
push 0x1660
lea eax, [ebp - 0x610]
push eax
lea eax, [ebp - 0x47c]
push eax
lea eax, [ebp - 0xcc]
push eax
push 1
lea eax, [ebp - 0x484]
push eax
push 0x7ffc
push 0x25ea
call fcn.10034f5c
add esp, 0x38
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x668]
call fcn.1001ab21
jmp 0x10045e66
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x694]
call fcn.1001ab21
jmp 0x10045df0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x610]
call fcn.1001ab21
cmp dword [ebp - 0x3c4], 0
jne 0x10045f85
xor eax, eax
jmp 0x100465d8
push 1
lea ecx, [ebp - 0x558]
call fcn.1001aa9f
mov dword [ebp - 4], 0x2b
mov dword [ebp - 0x6e0], 0xf7bf48c4
mov dword [ebp - 0x6dc], 0xf7bf48c4
mov dword [ebp - 0x6d8], 0xf7bf48c4
mov dword [ebp - 0x6d4], 0xf7bf48c4
mov dword [ebp - 0x6ec], 0x4570
push 0x33bf
lea eax, [ebp - 0x6f4]
push eax
push 0x1615
push 0x4dfe
push 0x688b
push 0x5f9b
push 0x26be
push 1
push 1
push 0xc4d
lea eax, [ebp - 0x558]
push eax
push 1
push 0x29a7
call fcn.10040cf6
add esp, 0x34
push 0
lea ecx, [ebp - 0x558]
call fcn.1001ab3d
mov dword [eax], 0xfffffffa
jmp 0x10046048
push 0
lea ecx, [ebp - 0x558]
call fcn.1001ab3d
mov dword [ebp - 0x3b4], eax
mov eax, dword [ebp - 0x3b4]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x3b4]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x558]
call fcn.1001ab3d
cmp dword [eax], 0xf
jne 0x10046180
mov dword [ebp - 0x80], 0xffffffff
push 1
lea ecx, [ebp - 0x6ac]
call fcn.1001aa9f
mov byte [ebp - 4], 0x2c
lea eax, [ebp - 0x6ac]
push eax
push 1
push 1
push 0x6e17
lea eax, [ebp - 0x6fc]
push eax
push 0x635a
call fcn.1004132b
add esp, 0x18
mov eax, dword [ebp - 0x80]
imul eax, dword [ebp - 0x80]
mov dword [ebp - 0x3bc], eax
push 0
lea ecx, [ebp - 0x6ac]
call fcn.1001ab3d
mov ecx, dword [ebp - 0x3bc]
mov dword [eax], ecx
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x3bc]
mov dword [ebp + eax - 0x6e0], ecx
mov dword [ebp - 0x80], 0xffffffe2
jmp 0x100460df
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0x32
jne 0x1004616c
mov dword [ebp - 0x704], 0
mov dword [ebp - 0x70c], 5
mov dword [ebp - 0x714], 0xab61b583
mov dword [ebp - 0x71c], 1
mov dword [ebp - 0x73c], 2
mov dword [ebp - 0x48c], 0xaa1dd5c0
mov dword [ebp - 0x160], 0
jmp 0x1004613e
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 1
jge 0x1004615a
mov eax, dword [ebp - 0x160]
mov dword [ebp + eax*4 - 0x744], 0x720d7006
jmp 0x10046131
lea eax, [ebp - 0x48c]
push eax
call fcn.10014743
pop ecx
jmp 0x100460d8
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x6ac]
call fcn.1001ab21
jmp 0x10046024
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x558]
call fcn.1001ab21
push 0
push 1
push 0xdeadbeef
call dword [ebp - 0x3c4]
mov dword [ebp - 0x494], eax
cmp dword [ebp - 0x494], 0
jne 0x100461b4
xor eax, eax
jmp 0x100465d8
push 0x51c
lea eax, [ebp - 0x20]
push eax
push 0xf3b
push 0x2118
push 0x7284
push 0x222c
push 1
push 1
push 0x42c8
push 0x279
push 1
push 0x60c0
call fcn.10041400
add esp, 0x30
mov dword [ebp - 0x3fc], 0x346a
mov dword [ebp - 0x4b4], 0x1000b658
cmp dword [ebp - 0x3fc], 0x3724
jle 0x100462bb
and dword [ebp - 0x178], 0
jmp 0x10046228
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 0x6c67
jge 0x100462bb
and dword [ebp - 0x168], 0
jmp 0x1004624e
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 0x483f
jge 0x100462b6
and dword [ebp - 0x170], 0
jmp 0x10046270
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 0x2e81
jge 0x100462b4
mov eax, dword [ebp - 0x168]
imul eax, dword [ebp - 0x170]
or eax, dword [ebp - 0x178]
cdq
mov dword [ebp - 0x5b0], eax
mov dword [ebp - 0x5ac], edx
push dword [ebp - 0x5ac]
push dword [ebp - 0x5b0]
mov ecx, 0x1060def8
call fcn.1001a86e
jmp 0x10046263
jmp 0x10046241
jmp 0x1004621b
mov dword [ebp - 0x88], 0xc75b57fd
mov dword [ebp - 0x4ac], 0xe60be628
mov dword [ebp - 0x180], 0
jmp 0x100462e8
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 4
jge 0x10046304
mov eax, dword [ebp - 0x180]
mov dword [ebp + eax*4 - 0x79c], 0xd7b1c2a2
jmp 0x100462db
mov dword [ebp - 0x88], 0x1a
jmp 0x1004631d
mov eax, dword [ebp - 0x88]
dec eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0xfffffffc
jne 0x1004656e
push 3
lea ecx, [ebp - 0x220]
call fcn.1001aa9f
mov dword [ebp - 4], 0x2d
mov dword [ebp - 0x3e4], 0xfffffff6
mov dword [ebp - 0x3ec], 0xfb91
lea eax, [ebp - 0x220]
push eax
lea eax, [ebp - 0x74c]
push eax
call fcn.1004262d
pop ecx
pop ecx
mov byte [ebp - 0x4d], 0
movzx eax, byte [ebp - 0x4d]
test eax, eax
je 0x1004638e
push 0x6d42
push 1
push 0x7458
push 1
push 0x7335
call fcn.100419e8
add esp, 0x14
push 2
lea ecx, [ebp - 0x220]
call fcn.1001ab3d
and dword [eax], 0
jmp 0x100463c4
push 2
lea ecx, [ebp - 0x220]
call fcn.1001ab3d
mov dword [ebp - 0x3cc], eax
mov eax, dword [ebp - 0x3cc]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x3cc]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0x220]
call fcn.1001ab3d
cmp dword [eax], 3
jg 0x1004655a
mov dword [ebp - 0x200], 2
mov dword [ebp - 0x188], 0
jmp 0x100463fd
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 4
jge 0x10046419
mov eax, dword [ebp - 0x188]
mov dword [ebp + eax*4 - 0x7c4], 0xca4e8652
jmp 0x100463f0
push 2
lea ecx, [ebp - 0x220]
call fcn.1001ab3d
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x79c]
mov dword [ebp - 0x200], eax
mov eax, dword [ebp - 0x200]
mov dword [ebp - 0x3d4], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3d4]
mov dword [ebp + eax - 0x7c4], ecx
push 2
lea ecx, [ebp - 0x220]
call fcn.1001ab3d
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x79c]
cmp dword [ebp - 0x3d4], eax
je 0x1004647e
mov dword [ebp - 0x3dc], 1
jmp 0x10046485
and dword [ebp - 0x3dc], 0
cmp dword [ebp - 0x3dc], 1
jbe 0x100464ec
mov dword [ebp - 0x3e4], 0xeec80f21
mov eax, dword [ebp - 0x3e4]
mov dword [ebp - 0x3ec], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x3ec]
sub ecx, dword [ebp + eax - 0x7c4]
cmp ecx, 0x64c9d8d9
je 0x100464ca
mov dword [ebp - 0x49c], 1
jmp 0x100464d1
and dword [ebp - 0x49c], 0
mov eax, dword [ebp - 0x200]
add eax, dword [ebp - 0x88]
je 0x100464ec
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x7c4], 0
push 2
lea ecx, [ebp - 0x220]
call fcn.1001ab3d
cmp dword [eax], 1
je 0x1004650a
mov dword [ebp - 0x4a4], 1
jmp 0x10046511
and dword [ebp - 0x4a4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x79c]
mov dword [ebp - 0x754], eax
cmp dword [ebp - 0x88], 1
ja 0x1004653f
mov eax, 0x5c34
test eax, eax
jne 0x1004653f
and dword [ebp - 0x3f4], 0
jmp 0x10046549
mov dword [ebp - 0x3f4], 1
mov eax, dword [ebp - 0x3f4]
mov dword [ebp - 0x4ac], eax
jmp 0x100463a0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x220]
call fcn.1001ab21
jmp 0x10046310
mov dword [ebp - 4], 0x2e
cmp dword [ebp - 0x3fc], 0x326a
jge 0x10046591
mov edx, dword [ebp - 0x4b4]
mov ecx, 0x1060def8
call fcn.1001cd79
jmp 0x100465ad
or dword [ebp - 4], 0xffffffff
jmp 0x100465b7
mov eax, dword [ebp - 0x20]
cmp dword [eax + 0x10], 0
je 0x100465cb
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x404], eax
jmp 0x100465d2
and dword [ebp - 0x404], 0
mov eax, dword [ebp - 0x404]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret