Function at 0x10040cdc
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1007a4b8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x760
and dword [ebp - 0x354], 0
mov dword [ebp - 0x6c], 0xc45cdbe8
mov dword [ebp - 0x36c], 0xe86a6760
mov dword [ebp - 0x590], 1
mov dword [ebp - 0x51c], 0xfffffff8
mov dword [ebp - 0x24], 0
jmp 0x10040d36
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jge 0x10040d4c
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x448], 1
jmp 0x10040d2f
mov dword [ebp - 0x24], 0
jmp 0x10040d5c
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x10040d72
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x5dc], 1
jmp 0x10040d55
mov dword [ebp - 0x24], 0
jmp 0x10040d82
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x10040d98
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x2e0], 0x386b9bdd
jmp 0x10040d7b
mov dword [ebp - 0x6c], 0
jmp 0x10040da8
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 1
jg 0x10041167
mov dword [ebp - 0xc0], 0xc5d9b4e9
mov dword [ebp - 0x2d8], 0xffff
mov dword [ebp - 0xb8], 0
jmp 0x10040ddf
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 3
jge 0x10040dfb
mov eax, dword [ebp - 0xb8]
mov dword [ebp + eax*4 - 0x1cc], 0xffffffff
jmp 0x10040dd2
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x1cc], 1
jmp 0x10040e29
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1cc]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x1cc], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1cc], 0
jl 0x100410fd
mov dword [ebp - 0x7c], 0x5a60d005
mov dword [ebp - 0x84], 0x61b8ce22
mov dword [ebp - 0x154], 0
jmp 0x10040e67
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 1
jge 0x10040e83
mov eax, dword [ebp - 0x154]
mov dword [ebp + eax*4 - 0x40c], 0xf34d89bb
jmp 0x10040e5a
mov dword [ebp - 0x7c], 1
jmp 0x10040e93
mov eax, dword [ebp - 0x7c]
dec eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0
jl 0x10040ec2
mov byte [ebp - 0x66], 0
lea eax, [ebp - 0x66]
push eax
push 0x7d63
push 0
call fcn.100449a1
add esp, 0xc
push 0
lea eax, [ebp - 0xc0]
push eax
call fcn.10044479
pop ecx
pop ecx
jmp 0x10040e8c
xor eax, eax
inc eax
je 0x10040f16
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x524], eax
push 4
pop eax
imul eax, eax, 0
imul eax, dword [ebp + eax - 0x1cc], 0xb245
cmp eax, dword [ebp - 0x6c]
jl 0x10040ef2
mov dword [ebp - 0x2bc], 1
jmp 0x10040ef9
and dword [ebp - 0x2bc], 0
mov eax, dword [ebp - 0x2d8]
mov ecx, dword [ebp - 0x2bc]
lea eax, [ecx + eax + 0xa]
test eax, eax
je 0x10040f16
and dword [ebp - 0x420], 0
jmp 0x10040f20
mov dword [ebp - 0x420], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x448]
mov dword [ebp - 0x52c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1cc]
mov dword [ebp - 0x7c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x448]
mov dword [ebp - 0x534], eax
cmp dword [ebp - 0x6c], 9
jle 0x10040f68
mov dword [ebp - 0x364], 1
jmp 0x10040f6f
and dword [ebp - 0x364], 0
mov eax, dword [ebp - 0x364]
mov dword [ebp - 0x36c], eax
mov eax, dword [ebp - 0xc0]
cmp dword [ebp - 0x36c], eax
jle 0x10040f95
mov dword [ebp - 0x374], 1
jmp 0x10040f9c
and dword [ebp - 0x374], 0
mov eax, dword [ebp - 0x374]
mov dword [ebp - 0xc0], eax
mov eax, dword [ebp - 0xc0]
push 4
pop ecx
imul ecx, ecx, 0
add eax, dword [ebp + ecx - 0x1cc]
cmp eax, dword [ebp - 0x84]
jg 0x10040fcf
mov dword [ebp - 0x390], 1
jmp 0x10040fd6
and dword [ebp - 0x390], 0
mov eax, dword [ebp - 0x84]
add eax, dword [ebp - 0x390]
push 4
pop ecx
imul ecx, ecx, 0
add eax, dword [ebp + ecx - 0x1cc]
cmp eax, 0xffffffff
jg 0x10041000
mov dword [ebp - 0x1f8], 1
jmp 0x10041007
and dword [ebp - 0x1f8], 0
mov eax, dword [ebp - 0x84]
cmp dword [ebp - 0x1f8], eax
jge 0x10041021
mov dword [ebp - 0x35c], 1
jmp 0x10041028
and dword [ebp - 0x35c], 0
mov eax, dword [ebp - 0x84]
cmp dword [ebp - 0x35c], eax
jle 0x10041042
mov dword [ebp - 0x340], 1
jmp 0x10041049
and dword [ebp - 0x340], 0
mov eax, dword [ebp - 0x340]
mov dword [ebp - 0x84], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x40c]
cmp dword [ebp - 0x84], eax
jg 0x10041076
mov dword [ebp - 0x200], 1
jmp 0x1004107d
and dword [ebp - 0x200], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1cc]
imul eax, dword [ebp - 0x200]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x1cc]
je 0x100410ac
mov dword [ebp - 0x414], 1
jmp 0x100410b3
and dword [ebp - 0x414], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1cc]
mov dword [ebp - 0x53c], eax
cmp dword [ebp - 0x2d8], 0x473ecfb8
jg 0x100410de
mov dword [ebp - 0x208], 1
jmp 0x100410e5
and dword [ebp - 0x208], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x208]
mov dword [ebp + eax - 0x5dc], ecx
jmp 0x10040e0e
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x5dc], 0xb42d
jle 0x1004111c
mov dword [ebp - 0x378], 1
jmp 0x10041123
and dword [ebp - 0x378], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x448]
imul eax, dword [ebp - 0x378]
cmp dword [ebp - 0x6c], eax
je 0x10041148
mov dword [ebp - 0x210], 1
jmp 0x1004114f
and dword [ebp - 0x210], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x210]
mov dword [ebp + eax - 0x1cc], ecx
jmp 0x10040da1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2e0]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x2e0], eax
mov dword [ebp - 0x4cc], 0xe91a049f
mov dword [ebp - 0x4c8], 0xe91a049f
mov dword [ebp - 0x4c4], 0xe91a049f
mov dword [ebp - 0x4c0], 0xe91a049f
mov dword [ebp - 0xa8], 2
mov dword [ebp - 0x130], 0
jmp 0x100411cd
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 1
jge 0x100411e6
mov eax, dword [ebp - 0x130]
mov dword [ebp + eax*4 - 0x54], 9
jmp 0x100411c0
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x54], 0
jmp 0x1004120b
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x54]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x54], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x54], 4
jge 0x1004122f
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x54]
mov dword [ebp + eax*4 - 0x4cc], 1
jmp 0x100411f6
mov dword [ebp - 0xa8], 3
jmp 0x10041248
mov eax, dword [ebp - 0xa8]
dec eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0
jl 0x1004142b
mov dword [ebp - 0x20], 0
jmp 0x10041265
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jge 0x1004127b
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x3b4], 0xfffffffe
jmp 0x1004125e
mov dword [ebp - 0x20], 0
jmp 0x1004128b
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x100412a1
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x5ec], 0xd870a326
jmp 0x10041284
mov dword [ebp - 0x20], 0
jmp 0x100412b1
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 4
jge 0x100412c7
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x6b4], 1
jmp 0x100412aa
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x3b4], 3
jmp 0x100412f5
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3b4]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x3b4], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x3b4], 0
jl 0x10041426
mov dword [ebp - 0xc8], 0
jmp 0x10041322
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 3
jge 0x1004133e
mov eax, dword [ebp - 0xc8]
mov dword [ebp + eax*4 - 0x4bc], 0x38591b68
jmp 0x10041315
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x4bc]
push 4
pop ecx
imul ecx, ecx, 3
imul eax, dword [ebp + ecx - 0x6b4]
sub eax, dword [ebp - 0xa8]
push 4
pop ecx
imul ecx, ecx, 3
cmp eax, dword [ebp + ecx - 0x6b4]
je 0x1004137a
mov dword [ebp - 0x218], 1
jmp 0x10041381
and dword [ebp - 0x218], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x4bc]
cmp eax, dword [ebp - 0x218]
jne 0x100413b8
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x54], 0
je 0x100413b8
mov eax, 0x86f25db2
test eax, eax
je 0x100413b8
mov dword [ebp - 0x348], 1
jmp 0x100413bf
and dword [ebp - 0x348], 0
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x5ec], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x54]
add eax, dword [ebp - 0x348]
push 4
pop ecx
shl ecx, 0
cmp dword [ebp + ecx - 0x4bc], eax
jle 0x1004140a
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x5ec], 0
je 0x1004140a
mov dword [ebp - 0x220], 1
jmp 0x10041411
and dword [ebp - 0x220], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x220]
mov dword [ebp + eax - 0x54], ecx
jmp 0x100412da
jmp 0x1004123b
mov dword [ebp - 0x4c], 0
jmp 0x1004143b
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 3
jge 0x10041451
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x6d0], 1
jmp 0x10041434
mov dword [ebp - 0x4c], 0
jmp 0x10041461
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 2
jge 0x10041477
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x380], 0x387fb0b0
jmp 0x1004145a
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x380], 0
jmp 0x100414a5
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x380]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x380], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x380], 3
jge 0x100414cf
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x380]
mov dword [ebp + eax*4 - 0x6d0], 8
jmp 0x1004148a
mov byte [ebp - 0x1c0], 0xa
mov byte [ebp - 0x1bf], 0xe5
mov byte [ebp - 0x1be], 0xe
mov byte [ebp - 0x1bd], 4
mov byte [ebp - 0x1bc], 0x14
mov byte [ebp - 0x1bb], 0x1a
mov byte [ebp - 0x1ba], 1
mov byte [ebp - 0x1b9], 0x17
mov byte [ebp - 0x1b8], 0xc
mov byte [ebp - 0x1b7], 0xf
mov byte [ebp - 0x1b6], 5
mov byte [ebp - 0x1b5], 0xb
mov byte [ebp - 0x1b4], 0x17
mov byte [ebp - 0x1b3], 0x1e
mov byte [ebp - 0x1b2], 0x13
mov byte [ebp - 0x1b1], 0xc
mov byte [ebp - 0x1b0], 3
mov byte [ebp - 0x1af], 0x10
mov byte [ebp - 0x1ae], 0x18
mov byte [ebp - 0x1ad], 0x1d
mov byte [ebp - 0x1ac], 2
mov byte [ebp - 0x1ab], 0x1a
mov byte [ebp - 0x1aa], 0x34
mov byte [ebp - 0x1a9], 0x3e
mov byte [ebp - 0x1a8], 0x66
mov byte [ebp - 0x1a7], 0x26
mov byte [ebp - 0x1a6], 0xdd
mov byte [ebp - 0x1a5], 0xa1
mov byte [ebp - 0x1a4], 0x57
mov byte [ebp - 0x1a3], 0xa8
mov byte [ebp - 0x1a2], 0xbe
mov byte [ebp - 0x1a1], 0x80
mov byte [ebp - 0x1a0], 7
mov byte [ebp - 0x19f], 0x54
mov byte [ebp - 0x19e], 0x56
mov byte [ebp - 0x19d], 0x31
mov byte [ebp - 0x19c], 0x53
mov byte [ebp - 0x19b], 6
mov byte [ebp - 0x19a], 0x4b
mov byte [ebp - 0x199], 0x39
mov byte [ebp - 0x198], 0xfe
mov byte [ebp - 0x197], 0xd8
mov byte [ebp - 0x196], 0xf4
mov byte [ebp - 0x195], 0x55
mov byte [ebp - 0x194], 0xca
mov byte [ebp - 0x193], 0x54
mov byte [ebp - 0x192], 0x28
mov byte [ebp - 0x191], 0x19
mov byte [ebp - 0x190], 0xfc
mov byte [ebp - 0x18f], 0x67
mov byte [ebp - 0x18e], 0x7b
mov byte [ebp - 0x18d], 0xc2
mov byte [ebp - 0x18c], 0x2a
mov byte [ebp - 0x18b], 0x2c
mov byte [ebp - 0x18a], 0x6c
mov byte [ebp - 0x189], 0x46
mov byte [ebp - 0x188], 0xe5
mov byte [ebp - 0x187], 0x59
mov byte [ebp - 0x186], 0x44
mov byte [ebp - 0x185], 0xbd
mov byte [ebp - 0x184], 0xbf
mov byte [ebp - 0x183], 0xd7
mov byte [ebp - 0x182], 0xab
mov byte [ebp - 0x181], 0xb4
mov byte [ebp - 0x180], 0x39
mov byte [ebp - 0x17f], 0x83
mov byte [ebp - 0x17e], 0x43
mov byte [ebp - 0x17d], 0x81
mov byte [ebp - 0x17c], 0x84
mov byte [ebp - 0x17b], 0xe9
mov byte [ebp - 0x17a], 0xab
mov byte [ebp - 0x179], 0x9b
mov byte [ebp - 0x178], 0xc8
mov byte [ebp - 0x177], 0x9a
mov byte [ebp - 0x176], 0x65
mov byte [ebp - 0x175], 0
mov byte [ebp - 0x174], 2
mov byte [ebp - 0x173], 0x12
mov byte [ebp - 0x172], 0x12
mov byte [ebp - 0x171], 0xf
mov byte [ebp - 0x170], 3
mov byte [ebp - 0x16f], 6
mov byte [ebp - 0x16e], 0x17
mov byte [ebp - 0x16d], 0x19
mov byte [ebp - 0x16c], 0x1d
mov byte [ebp - 0x16b], 0x11
mov byte [ebp - 0x16a], 8
mov byte [ebp - 0x169], 8
mov byte [ebp - 0x168], 0x1b
mov byte [ebp - 0x167], 0xd
mov byte [ebp - 0x166], 7
mov byte [ebp - 0x165], 0x15
mov byte [ebp - 0x164], 0x18
mov byte [ebp - 0x163], 0x10
mov byte [ebp - 0x162], 7
mov byte [ebp - 0x161], 9
mov byte [ebp - 0x160], 0x1b
mov byte [ebp - 0x15f], 7
mov byte [ebp - 0x15e], 2
mov byte [ebp - 0x15d], 4
mov byte [ebp - 0x15c], 0xd
mov byte [ebp - 0x15b], 0xb
mov byte [ebp - 0x15a], 9
mov byte [ebp - 0x159], 0x16
mov byte [ebp - 0x158], 0x1b
mov dword [ebp - 0xd0], 0xe2236432
mov dword [ebp - 0x120], 0
jmp 0x100417d1
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 3
jge 0x100417ed
mov eax, dword [ebp - 0x120]
mov dword [ebp + eax*4 - 0x75c], 0xb9b55bb2
jmp 0x100417c4
mov dword [ebp - 0xd0], 2
jmp 0x10041806
mov eax, dword [ebp - 0xd0]
dec eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0
jl 0x10041831
mov byte [ebp - 0x65], 0
movzx eax, byte [ebp - 0x65]
test eax, eax
je 0x1004182f
push 0x12f9
push 0
push 0x41e1
call fcn.10044832
add esp, 0xc
jmp 0x100417f9
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x1c0]
or eax, 0x8e
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x1c0]
and ecx, 0x8e
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x1c0]
mov byte [ebp + ecx - 0x508], al
mov dword [ebp - 0x1c], 2
and dword [ebp - 0xa4], 0
jmp 0x10041887
mov eax, dword [ebp - 0x1c]
inc eax
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x69
jae 0x10042936
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x1c0]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x1c], eax
jne 0x100420f1
mov dword [ebp - 0x4ec], 0xe91a049f
mov dword [ebp - 0x4e8], 0xe91a049f
mov dword [ebp - 0x4e4], 0xe91a049f
mov dword [ebp - 0x4e0], 0xe91a049f
mov dword [ebp - 0xb4], 2
mov dword [ebp - 0x138], 0
jmp 0x100418f7
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 1
jge 0x10041910
mov eax, dword [ebp - 0x138]
mov dword [ebp + eax*4 - 0x5c], 9
jmp 0x100418ea
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x5c], 0
jmp 0x10041935
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5c]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x5c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x5c], 4
jge 0x10041959
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5c]
mov dword [ebp + eax*4 - 0x4ec], 1
jmp 0x10041920
mov dword [ebp - 0xb4], 3
jmp 0x10041972
mov eax, dword [ebp - 0xb4]
dec eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0
jl 0x10041b55
mov dword [ebp - 0x28], 0
jmp 0x1004198f
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jge 0x100419a5
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x3c4], 0xfffffffe
jmp 0x10041988
mov dword [ebp - 0x28], 0
jmp 0x100419b5
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jge 0x100419cb
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x5fc], 0xd870a326
jmp 0x100419ae
mov dword [ebp - 0x28], 0
jmp 0x100419db
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 4
jge 0x100419f1
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x6c4], 1
jmp 0x100419d4
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x3c4], 3
jmp 0x10041a1f
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3c4]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x3c4], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x3c4], 0
jl 0x10041b50
mov dword [ebp - 0xd8], 0
jmp 0x10041a4c
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 3
jge 0x10041a68
mov eax, dword [ebp - 0xd8]
mov dword [ebp + eax*4 - 0x4b0], 0x38591b68
jmp 0x10041a3f
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x4b0]
push 4
pop ecx
imul ecx, ecx, 3
imul eax, dword [ebp + ecx - 0x6c4]
sub eax, dword [ebp - 0xb4]
push 4
pop ecx
imul ecx, ecx, 3
cmp eax, dword [ebp + ecx - 0x6c4]
je 0x10041aa4
mov dword [ebp - 0x2e8], 1
jmp 0x10041aab
and dword [ebp - 0x2e8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x4b0]
cmp eax, dword [ebp - 0x2e8]
jne 0x10041ae2
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x5c], 0
je 0x10041ae2
mov eax, 0x86f25db2
test eax, eax
je 0x10041ae2
mov dword [ebp - 0x228], 1
jmp 0x10041ae9
and dword [ebp - 0x228], 0
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x5fc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5c]
add eax, dword [ebp - 0x228]
push 4
pop ecx
shl ecx, 0
cmp dword [ebp + ecx - 0x4b0], eax
jle 0x10041b34
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x5fc], 0
je 0x10041b34
mov dword [ebp - 0x388], 1
jmp 0x10041b3b
and dword [ebp - 0x388], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x388]
mov dword [ebp + eax - 0x5c], ecx
jmp 0x10041a04
jmp 0x10041965
mov eax, dword [ebp - 0x1c]
movzx eax, byte [ebp + eax - 0x1c0]
inc eax
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0x140], 0x1928c176
mov dword [ebp - 0x48c], 0
mov dword [ebp - 0x544], 0xd193e056
mov dword [ebp - 0x424], 0xffffffff
mov dword [ebp - 0x54c], 0x7d50f82b
mov dword [ebp - 0x44], 0
jmp 0x10041ba9
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 2
jge 0x10041bbf
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x570], 0x515466bc
jmp 0x10041ba2
mov dword [ebp - 0x44], 0
jmp 0x10041bcf
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 2
jge 0x10041be5
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x57c], 0x939c
jmp 0x10041bc8
mov dword [ebp - 0x140], 0x1a
jmp 0x10041bfe
mov eax, dword [ebp - 0x140]
dec eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 0x15
jl 0x10041f4c
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0x554], 0x29edca8f
mov dword [ebp - 0x55c], 0
mov dword [ebp - 0x2f0], 0xf11caf1e
mov dword [ebp - 0xe0], 0
jmp 0x10041c4c
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0
jne 0x10041f47
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0x564], 0
mov dword [ebp - 0x480], 0xffffffff
mov dword [ebp - 0x5bc], 0x2d5fba25
mov dword [ebp - 0x230], 0xe9f4
mov dword [ebp - 0x43c], 1
mov dword [ebp - 0x12c], 0
jmp 0x10041cae
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 1
jge 0x10041cca
mov eax, dword [ebp - 0x12c]
mov dword [ebp + eax*4 - 0x41c], 0xfffd
jmp 0x10041ca1
mov dword [ebp - 0xb0], 0
jmp 0x10041ce3
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0
jg 0x10041f42
mov dword [ebp - 0x144], 0xededb5ca
mov dword [ebp - 0x5c4], 0xffffffff
mov dword [ebp - 0x434], 0x3b1067dc
mov dword [ebp - 0xe8], 0
jmp 0x10041d27
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 2
jge 0x10041d43
mov eax, dword [ebp - 0xe8]
mov dword [ebp + eax*4 - 0x3bc], 0xa7c7
jmp 0x10041d1a
mov dword [ebp - 0x144], 0
jmp 0x10041d5c
mov eax, dword [ebp - 0x144]
dec eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 0
jl 0x10041e16
mov dword [ebp - 0x5cc], 0x24dc41fd
mov dword [ebp - 0x61c], 0xb6dad816
mov dword [ebp - 0x658], 0xd850
mov dword [ebp - 0x654], 0xd850
mov dword [ebp - 0x650], 0xd850
mov dword [ebp - 0x64c], 0xd850
mov dword [ebp - 0x624], 0x84edc02
mov dword [ebp - 0xf0], 0
jmp 0x10041dc8
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 1
jge 0x10041de4
mov eax, dword [ebp - 0xf0]
mov dword [ebp + eax*4 - 0x62c], 0xfffffff7
jmp 0x10041dbb
mov eax, dword [ebp - 0x230]
inc eax
mov dword [ebp - 0x230], eax
mov byte [ebp - 0x64], 0
movzx eax, byte [ebp - 0x64]
test eax, eax
je 0x10041e11
push 0x43a3
push 0x6bee
push 0
call fcn.1004487c
add esp, 0xc
jmp 0x10041d4f
mov eax, dword [ebp - 0xb0]
cmp dword [ebp + eax*4 - 0x41c], 0x9b95520
je 0x10041e35
mov dword [ebp - 0x134], 1
jmp 0x10041e3c
and dword [ebp - 0x134], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x134]
mov dword [ebp + eax - 0x570], ecx
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x134]
mov dword [ebp + eax - 0x57c], ecx
mov eax, dword [ebp - 0x134]
neg eax
mov dword [ebp - 0x2f0], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3bc]
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x3bc]
inc ecx
push 4
pop edx
shl edx, 0
mov dword [ebp + edx - 0x3bc], ecx
test eax, eax
je 0x10041f0b
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3bc]
cmp dword [ebp - 0x424], eax
je 0x10041ebd
mov dword [ebp - 0x238], 1
jmp 0x10041ec4
and dword [ebp - 0x238], 0
mov eax, dword [ebp - 0x2f0]
cmp eax, dword [ebp - 0x238]
jg 0x10041ede
mov dword [ebp - 0x42c], 1
jmp 0x10041ee5
and dword [ebp - 0x42c], 0
mov eax, dword [ebp - 0x434]
mov dword [ebp - 0x634], eax
mov eax, dword [ebp - 0x43c]
cmp dword [ebp - 0x480], eax
je 0x10041f0b
mov dword [ebp - 0x350], 1
jmp 0x10041f12
and dword [ebp - 0x350], 0
cmp dword [ebp - 0x350], 0xb249
jge 0x10041f2a
mov dword [ebp - 0x240], 1
jmp 0x10041f31
and dword [ebp - 0x240], 0
mov eax, dword [ebp - 0x240]
mov dword [ebp - 0x48c], eax
jmp 0x10041cd6
jmp 0x10041c3f
jmp 0x10041bf1
mov eax, dword [ebp - 0x1c]
movzx eax, byte [ebp + eax - 0x1c0]
mov ecx, dword [ebp - 0x1c]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x98], 0x5d6c05ba
mov dword [ebp - 0x63c], 0xfffffff7
mov dword [ebp - 0x44c], 0xd7f19125
mov dword [ebp - 0xf8], 0
jmp 0x10041f98
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 3
jge 0x10041fb4
mov eax, dword [ebp - 0xf8]
mov dword [ebp + eax*4 - 0x750], 0x79d
jmp 0x10041f8b
mov dword [ebp - 0x98], 0
jmp 0x10041fcd
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0xa
je 0x100420ec
mov dword [ebp - 0x644], 0x249aaed6
mov dword [ebp - 0x608], 0
mov dword [ebp - 0x618], 0xffffffff
mov dword [ebp - 0x460], 1
mov dword [ebp - 0x148], 0
jmp 0x1004201b
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 1
jge 0x10042037
mov eax, dword [ebp - 0x148]
mov dword [ebp + eax*4 - 0x100], 0xeede0b40
jmp 0x1004200e
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x100], 5
jmp 0x10042065
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x100]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x100], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x100], 0xc
jge 0x100420e7
mov dword [ebp - 0x3e0], 0xfffffff7
mov dword [ebp - 0x488], 0x7d7c1188
mov dword [ebp - 0x404], 0xffffffff
mov dword [ebp - 0x3e8], 0x7b5cf1c9
lea eax, [ebp - 0x488]
push eax
push 0x3190
lea eax, [ebp - 0x98]
push eax
push 0x52e8
push 0
lea eax, [ebp - 0x3e0]
push eax
lea eax, [ebp - 0x404]
push eax
lea eax, [ebp - 0x460]
push eax
lea eax, [ebp - 0x3e8]
push eax
lea eax, [ebp - 0x44c]
push eax
call fcn.10044b24
add esp, 0x28
jmp 0x1004204a
jmp 0x10041fc0
jmp 0x1004187f
mov dword [ebp - 0x8c], 0x2fe22364
mov dword [ebp - 0x13c], 0
jmp 0x10042114
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 1
jge 0x10042130
mov eax, dword [ebp - 0x13c]
mov dword [ebp + eax*4 - 0x90], 1
jmp 0x10042107
mov dword [ebp - 0x8c], 0
jmp 0x10042149
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0
jg 0x10042405
mov dword [ebp - 0x30], 0xfffffff8
mov dword [ebp - 0x30], 0
jmp 0x1004216d
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
jg 0x100423ce
mov dword [ebp - 0x358], 0xfffffffc
mov eax, dword [ebp - 0x30]
cmp dword [ebp + eax*4 - 0x90], 0
je 0x100423a3
mov dword [ebp - 0x88], 0xfffffffd
mov dword [ebp - 0x88], 0
jmp 0x100421b5
mov eax, dword [ebp - 0x88]
dec eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
jl 0x100423a1
mov dword [ebp - 0x108], 0
jmp 0x100421db
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 1
jge 0x100421f7
mov eax, dword [ebp - 0x108]
mov dword [ebp + eax*4 - 0xa0], 0xd6c3f0bc
jmp 0x100421ce
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xa0], 0
jmp 0x10042225
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa0]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xa0], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xa0], 0
jl 0x1004239c
mov dword [ebp - 0x300], 0xfffffffd
mov dword [ebp - 0x250], 8
mov dword [ebp - 0x124], 0
jmp 0x10042266
mov eax, dword [ebp - 0x124]
inc eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 2
jge 0x10042282
mov eax, dword [ebp - 0x124]
mov dword [ebp + eax*4 - 0x588], 1
jmp 0x10042259
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x5e0], eax
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x30]
mov ecx, dword [ebp + ecx*4 - 0x90]
cmp dword [ebp + eax*4 - 0x90], ecx
jl 0x100422b0
mov dword [ebp - 0x2f8], 1
jmp 0x100422b7
and dword [ebp - 0x2f8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x588]
mov ecx, dword [ebp - 0x2f8]
neg ecx
add eax, ecx
push 2
pop ecx
sub ecx, eax
cmp ecx, dword [ebp - 0x8c]
je 0x100422e7
mov dword [ebp - 0x3f0], 1
jmp 0x100422ee
and dword [ebp - 0x3f0], 0
cmp dword [ebp - 0x300], 0xafbebf0a
jbe 0x10042306
mov dword [ebp - 0x248], 1
jmp 0x1004230d
and dword [ebp - 0x248], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa0]
add eax, dword [ebp - 0x248]
mov ecx, dword [ebp - 0x30]
cmp eax, dword [ebp + ecx*4 - 0x90]
jg 0x10042338
mov dword [ebp - 0x384], 1
jmp 0x1004233f
and dword [ebp - 0x384], 0
mov eax, dword [ebp - 0x384]
mov dword [ebp - 0x250], eax
mov eax, dword [ebp - 0x250]
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x90]
add eax, dword [ebp - 0x300]
je 0x10042384
mov eax, 0x5a165f5c
test eax, eax
je 0x10042384
cmp dword [ebp - 0x88], 0
je 0x10042384
mov dword [ebp - 0x258], 1
jmp 0x1004238b
and dword [ebp - 0x258], 0
mov eax, dword [ebp - 0x258]
mov dword [ebp - 0x358], eax
jmp 0x1004220a
jmp 0x100421a8
jmp 0x100423be
mov byte [ebp - 0x60], 0
movzx eax, byte [ebp - 0x60]
test eax, eax
je 0x100423be
push 0x17c2
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_OpenServiceW]
cmp dword [ebp - 0x358], 0
je 0x100423c9
jmp 0x100423ce
jmp 0x10042166
mov dword [ebp - 0x30], 0
jmp 0x100423de
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
jg 0x10042400
mov dword [ebp - 0x468], 0xb29d945a
push 0
lea eax, [ebp - 0x468]
push eax
call fcn.10040bcc
pop ecx
pop ecx
jmp 0x100423d7
jmp 0x1004213c
mov eax, dword [ebp - 0x1c]
movzx eax, byte [ebp + eax - 0x1bf]
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0xa4]
movzx ecx, byte [ebp + ecx - 0x1c2]
movsx ecx, byte [ebp + ecx - 0x508]
add eax, ecx
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ebp + ecx - 0x1bf]
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xa4]
movzx edx, byte [ebp + edx - 0x1c2]
movsx edx, byte [ebp + edx - 0x508]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ebp + ecx - 0x1bf]
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xa4]
movzx edx, byte [ebp + edx - 0x1c2]
movsx edx, byte [ebp + edx - 0x508]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ebp + ecx - 0x1c0]
mov byte [ebp + ecx - 0x508], al
mov dword [ebp - 0x110], 0xc03342eb
mov dword [ebp - 0x38], 0
mov dword [ebp - 0xbc], 0xbbd0a708
mov dword [ebp - 0x9c], 9
mov dword [ebp - 0x458], 0x62252705
mov byte [ebp - 0x62], 0
movzx eax, byte [ebp - 0x62]
test eax, eax
je 0x100424d6
push 1
push 0x2569
call fcn.10040bcc
pop ecx
pop ecx
mov dword [ebp - 0x110], 0xffffffee
jmp 0x100424ef
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0x1b
jge 0x1004292a
mov dword [ebp - 0x94], 0x9acd4098
mov dword [ebp - 0x408], 0x4290900
mov dword [ebp - 0x128], 0
jmp 0x10042529
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 2
jge 0x10042545
mov eax, dword [ebp - 0x128]
mov dword [ebp + eax*4 - 0x1ec], 0
jmp 0x1004251c
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1ec], 0
je 0x100425b6
mov dword [ebp - 0x518], 0
mov dword [ebp - 0x670], 0xffffffff
mov dword [ebp - 0x520], 1
mov dword [ebp - 0x5f0], 0x65352f76
mov dword [ebp - 0x528], 0xa205b290
mov dword [ebp - 0x604], 0xfffffff7
push 0
push 0x7369
push 0x208e
lea eax, [ebp - 0x94]
push eax
push 0x3881
call fcn.10040c37
add esp, 0x14
jmp 0x100427d6
mov dword [ebp - 0x310], 0xfffffff6
mov dword [ebp - 0x4dc], 0xffffffff
mov dword [ebp - 0x4d8], 0xffffffff
mov dword [ebp - 0x4d4], 0xffffffff
mov dword [ebp - 0x4d0], 0xffffffff
mov dword [ebp - 0x118], 0
jmp 0x10042601
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 2
jge 0x1004261d
mov eax, dword [ebp - 0x118]
mov dword [ebp + eax*4 - 0x454], 0xd258d033
jmp 0x100425f4
mov eax, 0xa7b7e80d
test eax, eax
je 0x1004279d
mov eax, dword [ebp - 0x310]
mov dword [ebp - 0x530], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x454]
add eax, dword [ebp - 0xbc]
cmp eax, dword [ebp - 0x38]
je 0x1004265a
mov dword [ebp - 0x260], 1
jmp 0x10042661
and dword [ebp - 0x260], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x260], eax
je 0x10042678
mov dword [ebp - 0x308], 1
jmp 0x1004267f
and dword [ebp - 0x308], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x454]
cmp dword [ebp - 0x308], eax
jne 0x100426a0
mov dword [ebp - 0x268], 1
jmp 0x100426a7
and dword [ebp - 0x268], 0
mov eax, dword [ebp - 0x38]
add eax, dword [ebp - 0x268]
je 0x100426bb
cmp dword [ebp - 0xbc], 0
jne 0x100426cd
mov eax, 0x5f93be41
test eax, eax
jne 0x100426cd
and dword [ebp - 0x394], 0
jmp 0x100426d7
mov dword [ebp - 0x394], 1
mov eax, dword [ebp - 0xbc]
cmp eax, dword [ebp - 0x394]
je 0x100426f1
mov dword [ebp - 0x270], 1
jmp 0x100426f8
and dword [ebp - 0x270], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x4dc]
cmp dword [ebp - 0x270], eax
je 0x10042718
mov dword [ebp - 0x278], 1
jmp 0x1004271f
and dword [ebp - 0x278], 0
mov eax, dword [ebp - 0x310]
cmp dword [ebp - 0x278], eax
jge 0x10042739
mov dword [ebp - 0x3f8], 1
jmp 0x10042740
and dword [ebp - 0x3f8], 0
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x600], eax
cmp dword [ebp - 0x38], 0xfffb
jb 0x10042761
mov dword [ebp - 0x360], 1
jmp 0x10042768
and dword [ebp - 0x360], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x360], eax
jne 0x1004277f
mov dword [ebp - 0x280], 1
jmp 0x10042786
and dword [ebp - 0x280], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x280], eax
jne 0x1004279d
mov dword [ebp - 0x318], 1
jmp 0x100427a4
and dword [ebp - 0x318], 0
cmp dword [ebp - 0x318], 0x1f6ed734
jl 0x100427bc
mov dword [ebp - 0x288], 1
jmp 0x100427c3
and dword [ebp - 0x288], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x288]
mov dword [ebp + eax - 0x454], ecx
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1ec], 0
jne 0x100428a6
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1ec]
mov dword [ebp - 0x538], eax
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x60c], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1ec]
mov ecx, dword [ebp - 0x9c]
lea eax, [eax + ecx - 7]
test eax, eax
je 0x10042839
mov eax, 0xc42ef39
test eax, eax
je 0x10042839
mov dword [ebp - 0x39c], 1
jmp 0x10042840
and dword [ebp - 0x39c], 0
mov eax, dword [ebp - 0x94]
cmp dword [ebp - 0x39c], eax
jne 0x10042863
cmp dword [ebp - 0x458], 0
je 0x10042863
mov dword [ebp - 0x290], 1
jmp 0x1004286a
and dword [ebp - 0x290], 0
mov eax, dword [ebp - 0x9c]
cmp dword [ebp - 0x290], eax
je 0x10042884
mov dword [ebp - 0x400], 1
jmp 0x1004288b
and dword [ebp - 0x400], 0
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x540], eax
cmp dword [ebp - 0x94], 8
jne 0x100428a6
and dword [ebp - 0x470], 0
jmp 0x100428b0
mov dword [ebp - 0x470], 1
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x614], eax
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x548], eax
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x640], eax
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0x550], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1ec], 0
jne 0x1004290f
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1ec], 0
jne 0x1004290f
and dword [ebp - 0x320], 0
jmp 0x10042919
mov dword [ebp - 0x320], 1
mov eax, dword [ebp - 0x320]
mov dword [ebp - 0x408], eax
jmp 0x100424e2
and dword [ebp - 0xa4], 0
jmp 0x1004187f
xor eax, eax
inc eax
imul eax, eax, 0x1a
mov byte [ebp + eax - 0x508], 0
mov dword [ebp - 0x610], 0xa11600d5
mov dword [ebp - 0x558], 0xa87a
mov dword [ebp - 0x2a0], 0xcc72b752
mov dword [ebp - 0x34], 0
jmp 0x10042972
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 4
jge 0x10042988
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x49c], 0x4e064826
jmp 0x1004296b
mov dword [ebp - 0x34], 0
jmp 0x10042998
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 4
jge 0x100429ae
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x76c], 0x45fe46c2
jmp 0x10042991
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x49c], 0
jmp 0x100429d9
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x49c]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x49c], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x49c], 4
jg 0x10042a7b
mov dword [ebp - 0x1d0], 0x1c97412d
mov byte [ebp - 0x5d], 0
movzx eax, byte [ebp - 0x5d]
test eax, eax
je 0x10042a0a
push 0
call fcn.10040c05
pop ecx
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x49c], 0
jne 0x10042a3f
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x49c], 0x285faafe
jge 0x10042a3f
cmp dword [ebp - 0x1d0], 0
jne 0x10042a3f
and dword [ebp - 0x298], 0
jmp 0x10042a49
mov dword [ebp - 0x298], 1
mov eax, dword [ebp - 0x1d0]
cmp dword [ebp - 0x298], eax
je 0x10042a63
mov dword [ebp - 0x368], 1
jmp 0x10042a6a
and dword [ebp - 0x368], 0
mov eax, dword [ebp - 0x368]
mov dword [ebp - 0x1d0], eax
jmp 0x100429c0
mov eax, dword [ebp - 0x2a0]
inc eax
mov dword [ebp - 0x2a0], eax
lea eax, [ebp - 0x508]
push eax
lea ecx, [ebp - 0x6e8]
call fcn.100238b2
and dword [ebp - 4], 0
and dword [ebp - 0xcc], 0
jmp 0x10042ab4
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0x1b
jae 0x10042cc9
mov dword [ebp - 0x2c], 0xa7c2
mov dword [ebp - 0xc4], 0xfffffff6
mov dword [ebp - 0x328], 0x7ddbf4d
mov dword [ebp - 0x464], 0x3b06d9e9
mov dword [ebp - 0x40], 0
jmp 0x10042af6
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 4
jge 0x10042b0c
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x720], 0
jmp 0x10042aef
mov dword [ebp - 0x40], 0
jmp 0x10042b1c
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 3
jge 0x10042b32
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x700], 0x8169c147
jmp 0x10042b15
xor eax, eax
jne 0x10042b46
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x68c], eax
cmp dword [ebp - 0x2c], 0xc9b996a5
jae 0x10042b64
mov dword [ebp - 0x478], 1
jmp 0x10042b6b
and dword [ebp - 0x478], 0
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x560], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x50c], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x328], eax
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x328], eax
jle 0x10042b9d
mov dword [ebp - 0x410], 1
jmp 0x10042ba4
and dword [ebp - 0x410], 0
cmp dword [ebp - 0x2c], 0x5daa
jl 0x10042bba
xor eax, eax
jne 0x10042bba
and dword [ebp - 0x1dc], 0
jmp 0x10042bc4
mov dword [ebp - 0x1dc], 1
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0xc4], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1dc]
mov dword [ebp + eax - 0x720], ecx
mov eax, dword [ebp - 0xc4]
cmp eax, dword [ebp - 0x1dc]
jge 0x10042bfa
mov dword [ebp - 0x2a8], 1
jmp 0x10042c01
and dword [ebp - 0x2a8], 0
cmp dword [ebp - 0x2a8], 0xfffffffa
jg 0x10042c16
mov dword [ebp - 0x38c], 1
jmp 0x10042c1d
and dword [ebp - 0x38c], 0
mov eax, dword [ebp - 0x38c]
sub eax, dword [ebp - 0x2c]
cmp eax, 0x26b5
jne 0x10042c39
mov dword [ebp - 0x2b0], 1
jmp 0x10042c40
and dword [ebp - 0x2b0], 0
mov eax, dword [ebp - 0x2c]
imul eax, dword [ebp - 0x2b0]
cmp eax, dword [ebp - 0x2c]
jl 0x10042c5b
mov dword [ebp - 0x330], 1
jmp 0x10042c62
and dword [ebp - 0x330], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x330], eax
jl 0x10042c79
mov dword [ebp - 0x1d4], 1
jmp 0x10042c80
and dword [ebp - 0x1d4], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1d4]
mov dword [ebp + eax - 0x700], ecx
mov eax, dword [ebp - 0x1d4]
mov dword [ebp - 0x464], eax
mov byte [ebp - 0x5e], 0
push 0
push 0x7262
lea eax, [ebp - 0x5e]
push eax
call fcn.10044797
add esp, 0xc
mov eax, dword [ebp - 0xcc]
mov byte [ebp + eax - 0x508], 0
jmp 0x10042aa7
mov dword [ebp - 0x3d4], 0x5299dada
mov dword [ebp - 0x3d0], 0x5299dada
mov dword [ebp - 0x3cc], 0x5299dada
mov dword [ebp - 0x3c8], 0x5299dada
mov dword [ebp - 0x2c8], 0x977a1245
mov dword [ebp - 0x398], 0xf545
mov dword [ebp - 0xd4], 0
jmp 0x10042d1e
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 1
jge 0x10042d3a
mov eax, dword [ebp - 0xd4]
mov dword [ebp + eax*4 - 0x338], 0
jmp 0x10042d11
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x3d4], 0
jmp 0x10042d65
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x3d4]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x3d4], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x3d4], 0
jg 0x10042e20
mov dword [ebp - 0x80], 0xffffffff
mov dword [ebp - 0x370], 0xd9edbda7
mov dword [ebp - 0x2c0], 0
mov dword [ebp - 0x418], 0xa18e418a
mov dword [ebp - 0x80], 0
jmp 0x10042dad
mov eax, dword [ebp - 0x80]
dec eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0
jl 0x10042df9
mov eax, dword [ebp - 0x80]
cmp dword [ebp + eax*4 - 0x338], 0
jb 0x10042dcc
mov dword [ebp - 0x2b8], 1
jmp 0x10042dd3
and dword [ebp - 0x2b8], 0
mov eax, dword [ebp - 0x2b8]
mov dword [ebp - 0x370], eax
mov eax, dword [ebp - 0x370]
mov dword [ebp - 0x2c0], eax
mov eax, dword [ebp - 0x2c0]
mov dword [ebp - 0x418], eax
jmp 0x10042da6
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x3d4]
mov eax, dword [ebp + eax*4 - 0x338]
mov dword [ebp - 0x2c8], eax
mov eax, dword [ebp - 0x2c8]
mov dword [ebp - 0x80], eax
jmp 0x10042d4c
mov eax, dword [ebp - 0x398]
dec eax
mov dword [ebp - 0x398], eax
push 0x10007b7a
lea ecx, [ebp - 0x6a4]
call fcn.100238b2
mov byte [ebp - 4], 1
mov dword [ebp - 0xdc], 0x15252cb1
mov dword [ebp - 0x568], 8
mov dword [ebp - 0x1d8], 0x16a2
mov dword [ebp - 0x594], 1
mov dword [ebp - 0x574], 0x97b09b37
mov dword [ebp - 0x59c], 0xf62c4df8
mov dword [ebp - 0x580], 0x4b7b8319
mov dword [ebp - 0x5a4], 0x511ec1fc
mov dword [ebp - 0xe4], 5
mov dword [ebp - 0x58c], 1
mov dword [ebp - 0x47c], 0x6082f4e5
mov dword [ebp - 0x5ac], 0xb4d258d0
mov dword [ebp - 0x5b4], 0xa7ab5bf7
mov dword [ebp - 0x48], 0
jmp 0x10042ed3
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 3
jge 0x10042ee9
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x72c], 0xffffffff
jmp 0x10042ecc
mov dword [ebp - 0x48], 0
jmp 0x10042ef9
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 1
jge 0x10042f0f
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x3d8], 1
jmp 0x10042ef2
mov byte [ebp - 0x5f], 0
movzx eax, byte [ebp - 0x5f]
test eax, eax
je 0x10042f23
push 0
call fcn.100445ba
pop ecx
mov dword [ebp - 0xdc], 2
jmp 0x10042f3c
mov eax, dword [ebp - 0xdc]
dec eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0
jl 0x10043056
mov dword [ebp - 0x598], 0xc5165352
mov dword [ebp - 0x66c], 0xf928d9ba
mov dword [ebp - 0x668], 0xf928d9ba
mov dword [ebp - 0x664], 0xf928d9ba
mov dword [ebp - 0x660], 0xf928d9ba
mov dword [ebp - 0x648], 0x3a72
mov dword [ebp - 0x5a0], 0xfffffff6
mov dword [ebp - 0x50], 0
jmp 0x10042f9f
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 2
jge 0x10042fb5
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x708], 7
jmp 0x10042f98
mov dword [ebp - 0x50], 0
jmp 0x10042fc5
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 2
jge 0x10042fdb
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x710], 0
jmp 0x10042fbe
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
mov eax, dword [ebp - 0x47c]
cmp dword [ebp - 0x1d8], eax
jge 0x10043002
mov dword [ebp - 0x2d0], 1
jmp 0x10043009
and dword [ebp - 0x2d0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2d0]
mov dword [ebp + eax - 0x3d8], ecx
mov dword [ebp - 0xe4], 0
jmp 0x10043035
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 2
jg 0x10043051
mov byte [ebp - 0x6d], 0
push 0
lea eax, [ebp - 0x6d]
push eax
call fcn.10044696
pop ecx
pop ecx
jmp 0x10043028
jmp 0x10042f2f
mov dword [ebp - 0xec], 1
mov byte [ebp - 0x63], 0
movzx eax, byte [ebp - 0x63]
test eax, eax
je 0x10043074
push 0
call fcn.10043cd8
pop ecx
mov dword [ebp - 0xec], 0
jmp 0x1004308d
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0x1a
jge 0x100430df
mov dword [ebp - 0xf4], 0
jmp 0x100430af
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 3
jge 0x100430cb
mov eax, dword [ebp - 0xf4]
mov dword [ebp + eax*4 - 0x6f4], 7
jmp 0x100430a2
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x6f4], 0
je 0x100430dd
jmp 0x100430df
jmp 0x10043080
lea ecx, [ebp - 0x6a4]
call fcn.10016c71
cmp eax, dword [ebp + 0xc]
je 0x1004385e
push 0x407
push 0
lea eax, [ebp - 0x6e8]
push eax
lea eax, [ebp - 0x45c]
push eax
call fcn.10044932
add esp, 0x10
mov dword [ebp - 0x10], 0xfffffffd
mov dword [ebp - 0x14], 0xb1891f78
mov dword [ebp - 0x438], 3
mov dword [ebp - 0xfc], 0
jmp 0x10043141
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 2
jge 0x1004315a
mov eax, dword [ebp - 0xfc]
mov dword [ebp + eax*4 - 0x78], 0xfffffffd
jmp 0x10043134
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0xffffffff
jge 0x10043172
mov dword [ebp - 0x1f4], 1
jmp 0x10043179
and dword [ebp - 0x1f4], 0
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x10]
test eax, eax
je 0x10043199
mov eax, 0xfff7
test eax, eax
je 0x10043199
mov dword [ebp - 0x1e0], 1
jmp 0x100431a0
and dword [ebp - 0x1e0], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1e0]
mov dword [ebp + eax - 0x78], ecx
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x1e0]
cmp eax, 0x7110
jge 0x100431d7
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x78], 0
jne 0x100431d7
and dword [ebp - 0x46c], 0
jmp 0x100431e1
mov dword [ebp - 0x46c], 1
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x620], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x5a8], eax
cmp dword [ebp - 0x10], 0
jbe 0x10043205
mov dword [ebp - 0x1fc], 1
jmp 0x1004320c
and dword [ebp - 0x1fc], 0
mov eax, dword [ebp - 0x1f4]
cmp eax, dword [ebp - 0x1fc]
jge 0x10043303
mov dword [ebp - 0x58], 0xffffffff
mov dword [ebp - 0x430], 0x9c1c73b0
xor eax, eax
inc eax
je 0x10043246
cmp dword [ebp - 0x14], 0
je 0x10043246
mov dword [ebp - 0x428], 1
jmp 0x1004324d
and dword [ebp - 0x428], 0
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x684], eax
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x58], eax
jne 0x1004326d
cmp dword [ebp - 0x58], 0
jne 0x1004326d
and dword [ebp - 0x204], 0
jmp 0x10043277
mov dword [ebp - 0x204], 1
cmp dword [ebp - 0x204], 0x981c5860
jae 0x1004328f
mov dword [ebp - 0x484], 1
jmp 0x10043296
and dword [ebp - 0x484], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x5b0], eax
mov eax, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x58]
imul ecx, dword [ebp - 0x58]
sub eax, ecx
cmp eax, dword [ebp - 0x58]
jle 0x100432bc
mov dword [ebp - 0x20c], 1
jmp 0x100432c3
and dword [ebp - 0x20c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x78]
mov ecx, dword [ebp - 0x58]
add ecx, dword [ebp - 0x20c]
sub eax, ecx
cmp eax, 0x477a
je 0x100432eb
mov dword [ebp - 0x214], 1
jmp 0x100432f2
and dword [ebp - 0x214], 0
mov eax, dword [ebp - 0x214]
mov dword [ebp - 0x430], eax
jmp 0x1004365a
mov dword [ebp - 0x23c], 0
mov dword [ebp - 0x27c], 0xffffffff
mov dword [ebp - 0x264], 0x5a33b115
mov dword [ebp - 0x104], 0
jmp 0x1004333a
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 2
jge 0x10043356
mov eax, dword [ebp - 0x104]
mov dword [ebp + eax*4 - 0x4a4], 7
jmp 0x1004332d
mov dword [ebp - 0x10], 0
jmp 0x10043366
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0x19
jg 0x100433b1
mov dword [ebp - 0x14], 0
jmp 0x1004337c
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0xffffffe9
jge 0x1004339b
mov dword [ebp - 0x21c], 0xfffffff9
mov eax, dword [ebp - 0x21c]
inc eax
mov dword [ebp - 0x21c], eax
jmp 0x10043375
mov byte [ebp - 0x61], 0
movzx eax, byte [ebp - 0x61]
test eax, eax
je 0x100433af
push 1
call fcn.10040c05
pop ecx
jmp 0x1004335f
mov dword [ebp - 0x14], 0x14
jmp 0x100433c1
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0xd
jle 0x1004365a
mov dword [ebp - 0x3ac], 0xfffffffa
mov dword [ebp - 0x3a8], 0xfffffffa
mov dword [ebp - 0x3a4], 0xfffffffa
mov dword [ebp - 0x3a0], 0xfffffffa
mov dword [ebp - 0x10], 0xfffffff1
jmp 0x10043403
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0x16
je 0x100435b0
mov dword [ebp - 0x24c], 0x9275a805
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x3ac]
mov dword [ebp - 0x628], eax
mov eax, dword [ebp - 0x23c]
mov dword [ebp - 0x5b8], eax
cmp dword [ebp - 0x24c], 0
jne 0x1004344d
cmp dword [ebp - 0x14], 0
jne 0x1004344d
and dword [ebp - 0x224], 0
jmp 0x10043457
mov dword [ebp - 0x224], 1
cmp dword [ebp - 0x224], 1
je 0x1004346c
mov dword [ebp - 0x22c], 1
jmp 0x10043473
and dword [ebp - 0x22c], 0
cmp dword [ebp - 0x22c], 0xa10b
jge 0x1004348b
mov dword [ebp - 0x234], 1
jmp 0x10043492
and dword [ebp - 0x234], 0
mov eax, dword [ebp - 0x234]
sub eax, dword [ebp - 0x23c]
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x78], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x78]
mov dword [ebp - 0x65c], eax
xor eax, eax
jne 0x100434d5
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3ac], 0
jne 0x100434d5
and dword [ebp - 0x244], 0
jmp 0x100434df
mov dword [ebp - 0x244], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x3ac]
imul eax, dword [ebp - 0x244]
cmp eax, 0xfffffff9
jg 0x1004350c
mov eax, 0x3e25
test eax, eax
je 0x1004350c
mov dword [ebp - 0x254], 1
jmp 0x10043513
and dword [ebp - 0x254], 0
mov eax, dword [ebp - 0x24c]
cmp dword [ebp - 0x254], eax
jge 0x1004352d
mov dword [ebp - 0x25c], 1
jmp 0x10043534
and dword [ebp - 0x25c], 0
mov eax, dword [ebp - 0x25c]
mov dword [ebp - 0x264], eax
or eax, 0xffffffff
sub eax, dword [ebp - 0x264]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x78]
jle 0x10043561
mov dword [ebp - 0x26c], 1
jmp 0x10043568
and dword [ebp - 0x26c], 0
mov eax, dword [ebp - 0x27c]
cmp eax, dword [ebp - 0x26c]
jl 0x10043582
mov dword [ebp - 0x274], 1
jmp 0x10043589
and dword [ebp - 0x274], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x3ac]
imul ecx, dword [ebp - 0x274], 0
sub eax, ecx
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x4a4], eax
jmp 0x100433fc
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3ac]
mov dword [ebp - 0x5c0], eax
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x27c], eax
jle 0x100435da
mov dword [ebp - 0x284], 1
jmp 0x100435e1
and dword [ebp - 0x284], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x3ac]
push 4
pop ecx
shl ecx, 1
imul eax, dword [ebp + ecx - 0x3ac]
sub eax, dword [ebp - 0x14]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x4a4]
jne 0x10043619
mov dword [ebp - 0x28c], 1
jmp 0x10043620
and dword [ebp - 0x28c], 0
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x284]
cmp eax, dword [ebp - 0x28c]
je 0x1004363e
mov dword [ebp - 0x294], 1
jmp 0x10043645
and dword [ebp - 0x294], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x294]
mov dword [ebp + eax - 0x78], ecx
jmp 0x100433ba
mov dword [ebp - 0x10], 0
jmp 0x1004366a
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 1
jg 0x10043835
mov dword [ebp - 0x10c], 0x8ae6fb37
mov dword [ebp - 0x14], 1
jmp 0x1004368e
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jl 0x10043830
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x78]
mov dword [ebp - 0x29c], eax
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x29c]
mov dword [ebp + eax*4 - 0x78], ecx
cmp dword [ebp - 0x29c], 0
jne 0x100437d5
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x78], 0
je 0x100436de
mov eax, 0x82d8
test eax, eax
je 0x100436de
mov dword [ebp - 0x2a4], 1
jmp 0x100436e5
and dword [ebp - 0x2a4], 0
mov eax, dword [ebp - 0x10c]
cmp eax, dword [ebp - 0x2a4]
jle 0x100436ff
mov dword [ebp - 0x2ac], 1
jmp 0x10043706
and dword [ebp - 0x2ac], 0
cmp dword [ebp - 0x2ac], 0
jne 0x10043722
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x78], 0
jne 0x10043722
and dword [ebp - 0x2b4], 0
jmp 0x1004372c
mov dword [ebp - 0x2b4], 1
mov eax, dword [ebp - 0x10c]
cmp dword [ebp - 0x2b4], eax
jle 0x10043750
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x78], 0
je 0x10043750
mov dword [ebp - 0x1f0], 1
jmp 0x10043757
and dword [ebp - 0x1f0], 0
imul eax, dword [ebp - 0x1f0], 0x74b6
cmp eax, dword [ebp - 0x14]
jg 0x10043772
mov dword [ebp - 0x2c4], 1
jmp 0x10043779
and dword [ebp - 0x2c4], 0
mov eax, dword [ebp - 0x10c]
cmp dword [ebp - 0x2c4], eax
jne 0x10043793
mov dword [ebp - 0x2cc], 1
jmp 0x1004379a
and dword [ebp - 0x2cc], 0
cmp dword [ebp - 0x2cc], 0x2fb0
je 0x100437b2
mov dword [ebp - 0x474], 1
jmp 0x100437b9
and dword [ebp - 0x474], 0
mov eax, dword [ebp - 0x10]
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x78]
cmp dword [ebp + eax*4 - 0x78], ecx
jle 0x100437d5
and dword [ebp - 0x2d4], 0
jmp 0x100437df
mov dword [ebp - 0x2d4], 1
cmp dword [ebp - 0x2d4], 0xffff
jbe 0x100437f7
mov dword [ebp - 0x2dc], 1
jmp 0x100437fe
and dword [ebp - 0x2dc], 0
mov eax, dword [ebp - 0x10c]
cmp dword [ebp - 0x2dc], eax
jle 0x10043818
mov dword [ebp - 0x2e4], 1
jmp 0x1004381f
and dword [ebp - 0x2e4], 0
mov eax, dword [ebp - 0x2e4]
mov dword [ebp - 0x438], eax
jmp 0x10043687
jmp 0x10043663
push 1
lea eax, [ebp - 0x6a4]
push eax
lea eax, [ebp - 0x6e8]
push eax
push 0x1d82
lea eax, [ebp - 0x45c]
push eax
call fcn.10040c37
add esp, 0x14
jmp 0x100430df
mov dword [ebp - 0x18], 0x3606de71
mov dword [ebp - 0x630], 5
mov dword [ebp - 0x5c8], 0xffffffff
mov dword [ebp - 0x688], 0xed09eb81
mov dword [ebp - 0x5d0], 6
mov dword [ebp - 0x3c], 0
jmp 0x1004389d
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 2
jge 0x100438b3
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x150], 0xae355683
jmp 0x10043896
mov dword [ebp - 0x3c], 0
jmp 0x100438c3
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 3
jge 0x100438d9
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x744], 0x45e2138b
jmp 0x100438bc
mov dword [ebp - 0x18], 1
jmp 0x100438e9
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jl 0x10043931
mov dword [ebp - 0xac], 1
mov dword [ebp - 0xac], 0
jmp 0x10043912
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 1
jg 0x1004392f
mov eax, dword [ebp - 0xac]
cmp dword [ebp + eax*4 - 0x150], 0
je 0x1004392d
jmp 0x1004392f
jmp 0x10043905
jmp 0x100438e2
mov dword [ebp - 0x18], 1
jmp 0x10043941
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jl 0x10043c8b
mov dword [ebp - 0x34c], 1
mov dword [ebp - 0x638], 0x6bd29a2a
mov dword [ebp - 0x33c], 0x191a83ac
mov dword [ebp - 0x510], 0xc56d20a2
mov dword [ebp - 0x3e4], 0
mov dword [ebp - 0x304], 0xebf8
mov dword [ebp - 0x3fc], 0xb20f9593
mov dword [ebp - 0x114], 0
jmp 0x100439aa
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 3
jge 0x100439c6
mov eax, dword [ebp - 0x114]
mov dword [ebp + eax*4 - 0x738], 0xe446f941
jmp 0x1004399d
mov eax, dword [ebp - 0x18]
xor ecx, ecx
inc ecx
sub ecx, dword [ebp + eax*4 - 0x150]
jne 0x10043a9e
mov dword [ebp - 0x1e4], 0xbc9fa8bc
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1e4]
cmp dword [ebp + eax - 0x150], ecx
jge 0x10043a0d
cmp dword [ebp - 0x1e4], 0
je 0x10043a0d
mov dword [ebp - 0x440], 1
jmp 0x10043a14
and dword [ebp - 0x440], 0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x150], 0x7006986d
jl 0x10043a33
mov dword [ebp - 0x2ec], 1
jmp 0x10043a3a
and dword [ebp - 0x2ec], 0
cmp dword [ebp - 0x2ec], 0x9ae4f78d
jne 0x10043a52
mov dword [ebp - 0x2f4], 1
jmp 0x10043a59
and dword [ebp - 0x2f4], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x150]
cmp dword [ebp - 0x2f4], eax
jg 0x10043a77
mov dword [ebp - 0x3dc], 1
jmp 0x10043a7e
and dword [ebp - 0x3dc], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x150]
mov ecx, dword [ebp - 0x18]
imul eax, dword [ebp + ecx*4 - 0x150]
mov dword [ebp - 0x1e4], eax
jmp 0x10043c70
mov dword [ebp - 0x3f4], 0x565e139a
mov dword [ebp - 0x31c], 0x406997b9
mov dword [ebp - 0x11c], 0
jmp 0x10043acb
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 4
jge 0x10043ae7
mov eax, dword [ebp - 0x11c]
mov dword [ebp + eax*4 - 0x680], 0x291260e2
jmp 0x10043abe
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x150], 0
je 0x10043af9
jmp 0x10043c8b
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x680]
mov dword [ebp - 0x3e4], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x680]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x680], eax
cmp dword [ebp - 0x304], 0xffffffff
je 0x10043b3d
xor eax, eax
je 0x10043b3d
mov dword [ebp - 0x3ec], 1
jmp 0x10043b44
and dword [ebp - 0x3ec], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x514], eax
mov eax, 0x4b44
sub eax, 0x179b
cmp eax, dword [ebp - 0x3f4]
jl 0x10043b6b
mov dword [ebp - 0x2fc], 1
jmp 0x10043b72
and dword [ebp - 0x2fc], 0
mov eax, dword [ebp - 0x34c]
cmp dword [ebp - 0x2fc], eax
jle 0x10043b8c
mov dword [ebp - 0x30c], 1
jmp 0x10043b93
and dword [ebp - 0x30c], 0
mov eax, dword [ebp - 0x304]
cmp dword [ebp - 0x30c], eax
jl 0x10043bad
mov dword [ebp - 0x314], 1
jmp 0x10043bb4
and dword [ebp - 0x314], 0
mov eax, dword [ebp - 0x314]
mov dword [ebp - 0x31c], eax
cmp dword [ebp - 0x31c], 0xd029b4cc
jne 0x10043bd8
mov dword [ebp - 0x324], 1
jmp 0x10043bdf
and dword [ebp - 0x324], 0
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x324]
add ecx, 0xffff
add eax, ecx
je 0x10043c10
mov eax, 0x52f0c8c5
test eax, eax
je 0x10043c10
mov eax, 0xb8b0e31
test eax, eax
je 0x10043c10
mov dword [ebp - 0x32c], 1
jmp 0x10043c17
and dword [ebp - 0x32c], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x150]
cmp dword [ebp - 0x32c], eax
jge 0x10043c35
mov dword [ebp - 0x334], 1
jmp 0x10043c3c
and dword [ebp - 0x334], 0
mov eax, dword [ebp - 0x334]
mov dword [ebp - 0x33c], eax
cmp dword [ebp - 0x33c], 1
jge 0x10043c5d
mov dword [ebp - 0x344], 1
jmp 0x10043c64
and dword [ebp - 0x344], 0
mov eax, dword [ebp - 0x344]
mov dword [ebp - 0x34c], eax
push 0x4c16
lea eax, [ebp - 0x3fc]
push eax
push 0
call fcn.10044747
add esp, 0xc
jmp 0x1004393a
lea eax, [ebp - 0x6a4]
push eax
mov ecx, dword [ebp + 8]
call fcn.100167d4
mov eax, dword [ebp - 0x354]
or eax, 1
mov dword [ebp - 0x354], eax
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x6a4]
call fcn.1001682d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6e8]
call fcn.1001682d
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret