Function at 0x10043eb0
Capabilities:
Clear file content
Contain obfuscated stackstrings
Enumerate pe sections
Parse pe header
Resolve function by parsing pe exports
Set thread local storage value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10089501
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xd0c
and dword [ebp - 0x18], 0
movzx eax, byte [ebp + 8]
test eax, eax
je 0x10049c58
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x110], 0xc0ae9714
mov dword [ebp - 0x26c], 0x9c4ddb84
mov dword [ebp - 0x110], 0xa
jmp 0x10043f11
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0xc
je 0x10043fdd
mov dword [ebp - 0x6d4], 0xdeec5416
mov dword [ebp - 0x8b4], 1
mov dword [ebp - 0x804], 0x9229a275
push 0x2570
lea eax, [ebp - 0x804]
push eax
lea eax, [ebp - 0x6d4]
push eax
lea eax, [ebp - 0x8b4]
push eax
push 0
lea eax, [ebp - 0x26c]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.100430e1
add esp, 0x1c
cmp dword [ebp - 0x26c], 0
jle 0x10043f83
mov dword [ebp - 0x768], 1
jmp 0x10043f8a
and dword [ebp - 0x768], 0
mov eax, dword [ebp - 0x6d4]
cmp dword [ebp - 0x768], eax
jge 0x10043fa4
mov dword [ebp - 0x8bc], 1
jmp 0x10043fab
and dword [ebp - 0x8bc], 0
mov eax, dword [ebp - 0x26c]
cmp dword [ebp - 0x110], eax
je 0x10043fc5
mov dword [ebp - 0x770], 1
jmp 0x10043fcc
and dword [ebp - 0x770], 0
mov eax, dword [ebp - 0x770]
mov dword [ebp - 0x26c], eax
jmp 0x10043f04
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x778], eax
mov eax, dword [ebp - 0x778]
movzx eax, word [eax]
cmp eax, 0x5a4d
je 0x10043ffb
jmp 0x10049c60
mov dword [ebp - 0x168], 0x469ad59e
mov dword [ebp - 0x274], 0
jmp 0x1004401e
mov eax, dword [ebp - 0x274]
inc eax
mov dword [ebp - 0x274], eax
cmp dword [ebp - 0x274], 1
jge 0x1004403a
mov eax, dword [ebp - 0x274]
mov dword [ebp + eax*4 - 0x330], 4
jmp 0x10044011
mov byte [ebp - 0x108], 0
movzx eax, byte [ebp - 0x108]
test eax, eax
je 0x10044054
push 0
call fcn.10043465
pop ecx
mov dword [ebp - 0x168], 0
jmp 0x1004406d
mov eax, dword [ebp - 0x168]
dec eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 0
jl 0x100441fe
mov dword [ebp - 0xb8], 0xfffffff7
mov dword [ebp - 0xb8], 0
jmp 0x1004409d
mov eax, dword [ebp - 0xb8]
dec eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0
jl 0x1004412c
mov dword [ebp - 0x1e8], 0xffffffff
mov dword [ebp - 0x1e8], 0
jmp 0x100440cd
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 0
jg 0x10044127
mov dword [ebp - 0x124], 0xb8ee41b6
mov dword [ebp - 0x124], 0
jmp 0x100440f9
mov eax, dword [ebp - 0x124]
inc eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 1
jge 0x10044115
mov eax, dword [ebp - 0x124]
mov dword [ebp + eax*4 - 0x330], 1
jmp 0x100440ec
lea eax, [ebp - 0x124]
push eax
push 0
call fcn.10042f9c
pop ecx
pop ecx
jmp 0x100440c0
jmp 0x10044090
mov dword [ebp - 0xb8], 0
jmp 0x10044145
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0
jg 0x100441f9
mov byte [ebp - 0x10a], 0
push 0x45bd
lea eax, [ebp - 0x10a]
push eax
push 0
call fcn.10042f53
add esp, 0xc
mov eax, dword [ebp - 0x168]
cmp dword [ebp + eax*4 - 0x330], 0
je 0x1004419b
mov byte [ebp - 0xe5], 0
movzx eax, byte [ebp - 0xe5]
test eax, eax
je 0x10044199
push 0
call fcn.100430a5
pop ecx
jmp 0x100441f4
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x174], 0
jmp 0x100441be
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 1
jge 0x100441da
mov eax, dword [ebp - 0x174]
mov dword [ebp + eax*4 - 0x330], 0x28ea388
jmp 0x100441b1
mov byte [ebp - 0x109], 0
movzx eax, byte [ebp - 0x109]
test eax, eax
je 0x100441f4
push 0
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
jmp 0x10044138
jmp 0x10044060
mov eax, dword [ebp - 0x778]
mov ecx, dword [ebp - 0x3c]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0xe4], ecx
mov dword [ebp - 0x138], 0x17be9fb1
mov dword [ebp - 0x22c], 0x1fc2
mov dword [ebp - 0x90c], 0x7bde5156
mov dword [ebp - 0xa4c], 0x511f0b9f
mov dword [ebp - 0xac8], 0xffffffff
mov dword [ebp - 0xaac], 0x30ae734f
mov dword [ebp - 0xaf4], 1
mov dword [ebp - 0xab4], 0xffffffff
mov dword [ebp - 0xb58], 0x2e525b78
mov dword [ebp - 0xabc], 0xd1cd0509
mov dword [ebp - 0xa00], 0x20295d0c
mov dword [ebp - 0x91c], 0xc6914f09
mov dword [ebp - 0x30], 0
jmp 0x10044298
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 2
jge 0x100442ae
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x314], 0xfffb
jmp 0x10044291
mov dword [ebp - 0x30], 0
jmp 0x100442be
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jge 0x100442d4
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0xca8], 7
jmp 0x100442b7
mov dword [ebp - 0x30], 0
jmp 0x100442e4
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 2
jge 0x100442fa
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0xc54], 0x4feccdf
jmp 0x100442dd
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x314], 0
jne 0x10044361
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x314]
add eax, 0xcd9d75
cmp eax, dword [ebp - 0x22c]
je 0x10044330
mov dword [ebp - 0x7a0], 1
jmp 0x10044337
and dword [ebp - 0x7a0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x314]
mov dword [ebp - 0x138], eax
mov eax, dword [ebp - 0x138]
add eax, dword [ebp - 0x7a0]
jne 0x10044361
and dword [ebp - 0x7a8], 0
jmp 0x1004436b
mov dword [ebp - 0x7a8], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x314]
cmp dword [ebp - 0x7a8], eax
jne 0x1004438c
mov dword [ebp - 0x7b0], 1
jmp 0x10044393
and dword [ebp - 0x7b0], 0
imul eax, dword [ebp - 0x7b0], 0
cmp eax, dword [ebp - 0x22c]
jne 0x100443ae
mov dword [ebp - 0x794], 1
jmp 0x100443b5
and dword [ebp - 0x794], 0
cmp dword [ebp - 0x794], 0
jbe 0x100443ca
mov dword [ebp - 0x784], 1
jmp 0x100443d1
and dword [ebp - 0x784], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x314]
cmp dword [ebp - 0x784], eax
je 0x100443f2
mov dword [ebp - 0x7ac], 1
jmp 0x100443f9
and dword [ebp - 0x7ac], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x314]
cmp eax, dword [ebp - 0x7ac]
je 0x1004458a
mov dword [ebp - 0x11c], 0xfffffff7
mov dword [ebp - 0x8d4], 0xee83adeb
mov dword [ebp - 0x224], 0
jmp 0x1004443f
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 3
jge 0x1004445b
mov eax, dword [ebp - 0x224]
mov dword [ebp + eax*4 - 0xb74], 0xffffffff
jmp 0x10044432
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x314], 0xfffb
jae 0x1004447a
mov dword [ebp - 0x3c0], 1
jmp 0x10044481
and dword [ebp - 0x3c0], 0
mov eax, dword [ebp - 0x3c0]
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0
je 0x10044572
cmp dword [ebp - 0x11c], 0
je 0x10044551
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0xa08], eax
imul eax, dword [ebp - 0x138], 0x60bc
test eax, eax
je 0x100444d6
cmp dword [ebp - 0x138], 0
je 0x100444d6
mov dword [ebp - 0x6d0], 1
jmp 0x100444dd
and dword [ebp - 0x6d0], 0
mov eax, dword [ebp - 0x11c]
cmp dword [ebp - 0x6d0], eax
jne 0x100444fd
mov eax, 0xbd53d2ae
test eax, eax
jne 0x100444fd
and dword [ebp - 0x8c4], 0
jmp 0x10044507
mov dword [ebp - 0x8c4], 1
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x8cc], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x8cc]
mov dword [ebp + eax - 0xb74], ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x314]
mov dword [ebp - 0xa54], eax
cmp dword [ebp - 0x22c], 0xe6ba
jl 0x10044551
mov dword [ebp - 0x3c8], 1
jmp 0x10044558
and dword [ebp - 0x3c8], 0
mov eax, dword [ebp - 0x11c]
cmp dword [ebp - 0x3c8], eax
jle 0x10044572
mov dword [ebp - 0x6d8], 1
jmp 0x10044579
and dword [ebp - 0x6d8], 0
mov eax, dword [ebp - 0x6d8]
mov dword [ebp - 0x8d4], eax
jmp 0x1004463c
mov dword [ebp - 0x904], 0x90b1
mov dword [ebp - 0xa5c], 0x840cc74b
mov dword [ebp - 0xa64], 0x1c250287
mov dword [ebp - 0xa6c], 0x4069a3e2
mov dword [ebp - 0xa74], 1
mov dword [ebp - 0x914], 0xbaed
mov dword [ebp - 0x1ac], 0
jmp 0x100445df
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 2
jge 0x100445fb
mov eax, dword [ebp - 0x1ac]
mov dword [ebp + eax*4 - 0xbfc], 0x54764fe6
jmp 0x100445d2
push 0x51e0
push 0
lea eax, [ebp - 0x22c]
push eax
lea eax, [ebp - 0x904]
push eax
lea eax, [ebp - 0x90c]
push eax
lea eax, [ebp - 0x914]
push eax
call fcn.10042fdd
add esp, 0x18
lea eax, [ebp - 0x91c]
push eax
push 0x1f6c
push 1
call fcn.10042f53
add esp, 0xc
mov eax, dword [ebp - 0xe4]
cmp dword [eax], 0x4550
je 0x1004464f
jmp 0x10049c60
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xe4]
lea eax, [ecx + eax + 0x78]
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x15c], 0x1fbb9cf7
mov dword [ebp - 0x1b4], 0
jmp 0x10044685
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 4
jge 0x100446a1
mov eax, dword [ebp - 0x1b4]
mov dword [ebp + eax*4 - 0x3b4], 1
jmp 0x10044678
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x3b4], 0xfffffff5
jmp 0x100446cf
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3b4]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x3b4], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x3b4], 0xffffffec
jle 0x10044901
mov dword [ebp - 0xb0], 8
mov dword [ebp - 0xa7c], 0xffffffff
cmp dword [ebp - 0xb0], 0
je 0x10044739
cmp dword [ebp - 0xb0], 0x1a65
jl 0x10044718
mov dword [ebp - 0x3d0], 1
jmp 0x1004471f
and dword [ebp - 0x3d0], 0
imul eax, dword [ebp - 0x3d0], 0x65c8
test eax, eax
je 0x10044739
mov dword [ebp - 0x6e0], 1
jmp 0x10044740
and dword [ebp - 0x6e0], 0
push 4
pop eax
shl eax, 0
imul ecx, dword [ebp - 0x6e0], 0
cmp dword [ebp + eax - 0x3b4], ecx
jl 0x10044762
mov dword [ebp - 0x3d8], 1
jmp 0x10044769
and dword [ebp - 0x3d8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3b4]
imul eax, dword [ebp - 0x3d8]
push 4
pop ecx
shl ecx, 0
add eax, dword [ebp + ecx - 0x3b4]
jne 0x100447a5
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3b4], 0
jne 0x100447a5
and dword [ebp - 0x944], 0
jmp 0x100447af
mov dword [ebp - 0x944], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3b4]
mov dword [ebp - 0xa84], eax
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0xa8c], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x3b4]
mov dword [ebp - 0xad0], eax
cmp dword [ebp - 0xb0], 0
jl 0x100447f6
mov dword [ebp - 0x94c], 1
jmp 0x100447fd
and dword [ebp - 0x94c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3b4]
mov dword [ebp - 0xad8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3b4]
mov dword [ebp - 0x15c], eax
mov dword [ebp - 0x15c], 0
jmp 0x1004483c
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 0x1a
je 0x100448fc
mov dword [ebp - 0x234], 0
jmp 0x10044862
mov eax, dword [ebp - 0x234]
inc eax
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 2
jge 0x1004487e
mov eax, dword [ebp - 0x234]
mov dword [ebp + eax*4 - 0xbdc], 0xffffffff
jmp 0x10044855
mov dword [ebp - 0xb0], 0
jmp 0x10044897
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 1
jg 0x100448f7
mov dword [ebp - 0x954], 0x87a9b65c
mov dword [ebp - 0x1bc], 0
jmp 0x100448c3
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 3
jge 0x100448df
mov eax, dword [ebp - 0x1bc]
mov dword [ebp + eax*4 - 0xce4], 0xc5540fff
jmp 0x100448b6
lea eax, [ebp - 0x954]
push eax
push 0
push 0x448e
call fcn.100433db
add esp, 0xc
jmp 0x1004488a
jmp 0x1004482f
jmp 0x100446b4
mov eax, dword [ebp - 0x58]
cmp dword [eax + 4], 0
jne 0x1004490f
jmp 0x10049c60
mov dword [ebp - 0xae0], 0xffff
mov byte [ebp - 0xed], 0
lea eax, [ebp - 0xed]
push eax
push 0
call fcn.10043357
pop ecx
pop ecx
push 0x6ce6
push 1
call fcn.10042f9c
pop ecx
pop ecx
and dword [ebp - 0x38], 0
mov dword [ebp - 0x23c], 0
jmp 0x1004495b
mov eax, dword [ebp - 0x23c]
inc eax
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 1
jge 0x10044977
mov eax, dword [ebp - 0x23c]
mov dword [ebp + eax*4 - 0x1c4], 0
jmp 0x1004494e
mov byte [ebp - 0x106], 0
lea eax, [ebp - 0x106]
push eax
push 1
push 0x2c4a
push 0x718c
push 0x185b
push 0x4c52
call fcn.10042fdd
add esp, 0x18
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x1c4], 0
jmp 0x100449d1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1c4]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x1c4], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1c4], 0x15
jne 0x100449eb
push 1
call fcn.100430a5
pop ecx
jmp 0x100449b6
mov eax, dword [ebp - 0xe4]
movzx eax, word [eax + 0x14]
mov ecx, dword [ebp - 0xe4]
lea eax, [ecx + eax + 0x18]
mov dword [ebp - 0xf4], eax
mov dword [ebp - 0x48], 5
mov dword [ebp - 0x244], 0
jmp 0x10044a25
mov eax, dword [ebp - 0x244]
inc eax
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 4
jge 0x10044a41
mov eax, dword [ebp - 0x244]
mov dword [ebp + eax*4 - 0x9ac], 0x10c9
jmp 0x10044a18
mov dword [ebp - 0x48], 3
jmp 0x10044a51
mov eax, dword [ebp - 0x48]
dec eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
jl 0x10044bdc
mov dword [ebp - 0x938], 0x8ed40a16
mov dword [ebp - 0x1cc], 0
jmp 0x10044a7e
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 3
jge 0x10044a9a
mov eax, dword [ebp - 0x1cc]
mov dword [ebp + eax*4 - 0xb98], 0xfffffffe
jmp 0x10044a71
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x938], eax
jne 0x10044ab1
mov dword [ebp - 0x6e8], 1
jmp 0x10044ab8
and dword [ebp - 0x6e8], 0
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp + eax*4 - 0x9ac]
sub eax, 6
cmp eax, dword [ebp - 0x6e8]
jge 0x10044ad9
mov dword [ebp - 0x3e0], 1
jmp 0x10044ae0
and dword [ebp - 0x3e0], 0
imul eax, dword [ebp - 0x3e0], 0x8405
test eax, eax
jne 0x10044b07
mov eax, dword [ebp - 0x48]
cmp dword [ebp + eax*4 - 0x9ac], 0
je 0x10044b07
mov dword [ebp - 0x6f0], 1
jmp 0x10044b0e
and dword [ebp - 0x6f0], 0
cmp dword [ebp - 0x6f0], 0xa7a81a82
jbe 0x10044b26
mov dword [ebp - 0x8e0], 1
jmp 0x10044b2d
and dword [ebp - 0x8e0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x9ac]
mov dword [ebp - 0xae8], eax
mov eax, dword [ebp - 0x48]
sub eax, dword [ebp - 0x48]
jne 0x10044b57
cmp dword [ebp - 0x48], 0
jne 0x10044b57
and dword [ebp - 0x8c8], 0
jmp 0x10044b61
mov dword [ebp - 0x8c8], 1
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0xaf0], eax
mov eax, 0x80090ae7
test eax, eax
jne 0x10044b7f
mov dword [ebp - 0x3e8], 1
jmp 0x10044b86
and dword [ebp - 0x3e8], 0
cmp dword [ebp - 0x3e8], 0x4225189d
jne 0x10044b9e
mov dword [ebp - 0x6f8], 1
jmp 0x10044ba5
and dword [ebp - 0x6f8], 0
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp + eax*4 - 0x9ac]
sub eax, dword [ebp - 0x6f8]
add eax, dword [ebp - 0x48]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xb98], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x9ac], 0
je 0x10044bd7
jmp 0x10044bdc
jmp 0x10044a4a
and dword [ebp - 0x364], 0
jmp 0x10044c01
mov eax, dword [ebp - 0x364]
inc eax
mov dword [ebp - 0x364], eax
mov eax, dword [ebp - 0xf4]
add eax, 0x28
mov dword [ebp - 0xf4], eax
mov eax, dword [ebp - 0xe4]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x364], eax
jge 0x10044c7d
mov eax, dword [ebp - 0xf4]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x3f0], eax
mov eax, dword [ebp - 0x58]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x3f0]
jb 0x10044c78
mov eax, dword [ebp - 0xe4]
push dword [eax + 0x38]
mov eax, dword [ebp - 0xf4]
push dword [eax + 8]
call fcn.10042e57
pop ecx
pop ecx
add eax, dword [ebp - 0x3f0]
mov dword [ebp - 0x8ac], eax
mov eax, dword [ebp - 0x58]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x8ac]
jae 0x10044c78
mov eax, dword [ebp - 0xf4]
mov ecx, dword [ebp - 0xf4]
mov eax, dword [eax + 0x14]
sub eax, dword [ecx + 0xc]
mov dword [ebp - 0x38], eax
jmp 0x10044c7d
jmp 0x10044be5
mov dword [ebp - 0x60], 0xfffffffb
mov dword [ebp - 0x374], 1
mov dword [ebp - 0x810], 0xfffffffc
mov dword [ebp - 0x428], 0x81c1d99e
mov dword [ebp - 0x8e4], 1
mov dword [ebp - 0x818], 0xe91c
mov dword [ebp - 0x24c], 0
jmp 0x10044ccf
mov eax, dword [ebp - 0x24c]
inc eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 4
jge 0x10044ceb
mov eax, dword [ebp - 0x24c]
mov dword [ebp + eax*4 - 0xc4c], 9
jmp 0x10044cc2
cmp dword [ebp - 0x60], 0
je 0x10044d45
mov eax, dword [ebp - 0x60]
imul eax, dword [ebp - 0x60]
cmp eax, 0xffffffff
jbe 0x10044d09
mov dword [ebp - 0x700], 1
jmp 0x10044d10
and dword [ebp - 0x700], 0
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0x700], eax
jl 0x10044d27
mov dword [ebp - 0x3f8], 1
jmp 0x10044d2e
and dword [ebp - 0x3f8], 0
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0x3f8], eax
jge 0x10044d45
mov dword [ebp - 0x36c], 1
jmp 0x10044d4c
and dword [ebp - 0x36c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x36c]
mov dword [ebp + eax - 0xc4c], ecx
cmp dword [ebp - 0x36c], 0x50f82bae
jne 0x10044d77
mov dword [ebp - 0x708], 1
jmp 0x10044d7e
and dword [ebp - 0x708], 0
mov eax, dword [ebp - 0x708]
inc eax
cmp eax, 0xfffffffa
jg 0x10044d96
mov dword [ebp - 0x400], 1
jmp 0x10044d9d
and dword [ebp - 0x400], 0
cmp dword [ebp - 0x400], 0xa38d0672
jne 0x10044db5
mov dword [ebp - 0x710], 1
jmp 0x10044dbc
and dword [ebp - 0x710], 0
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0x710], eax
jne 0x10044dd3
mov dword [ebp - 0x408], 1
jmp 0x10044dda
and dword [ebp - 0x408], 0
cmp dword [ebp - 0x408], 0x11db
jl 0x10044df2
mov dword [ebp - 0x718], 1
jmp 0x10044df9
and dword [ebp - 0x718], 0
mov eax, dword [ebp - 0x374]
cmp dword [ebp - 0x718], eax
jne 0x10044e13
mov dword [ebp - 0x410], 1
jmp 0x10044e1a
and dword [ebp - 0x410], 0
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0x410], eax
jne 0x10044e31
mov dword [ebp - 0x720], 1
jmp 0x10044e38
and dword [ebp - 0x720], 0
mov eax, dword [ebp - 0x374]
cmp dword [ebp - 0x720], eax
jne 0x10044e52
mov dword [ebp - 0x418], 1
jmp 0x10044e59
and dword [ebp - 0x418], 0
mov eax, dword [ebp - 0x374]
cmp dword [ebp - 0x418], eax
jle 0x10044e73
mov dword [ebp - 0x728], 1
jmp 0x10044e7a
and dword [ebp - 0x728], 0
cmp dword [ebp - 0x728], 0x22d5
je 0x10044e92
mov dword [ebp - 0x420], 1
jmp 0x10044e99
and dword [ebp - 0x420], 0
mov eax, dword [ebp - 0x810]
add eax, dword [ebp - 0x420]
cmp dword [ebp - 0x60], eax
jle 0x10044eb6
mov dword [ebp - 0x730], 1
jmp 0x10044ebd
and dword [ebp - 0x730], 0
mov eax, dword [ebp - 0x730]
mov dword [ebp - 0x428], eax
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0x428], eax
jg 0x10044ee0
mov dword [ebp - 0x738], 1
jmp 0x10044ee7
and dword [ebp - 0x738], 0
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0x738], eax
jne 0x10044efe
mov dword [ebp - 0x430], 1
jmp 0x10044f05
and dword [ebp - 0x430], 0
mov eax, dword [ebp - 0x430]
mov dword [ebp - 0x8e4], eax
push 0x9bc
push 0x1c6f
push 0
push 0x3e14
push 0x5364
lea eax, [ebp - 0x818]
push eax
call fcn.10043de5
add esp, 0x18
cmp dword [ebp - 0x38], 0
jne 0x10044f41
jmp 0x10049c60
mov dword [ebp - 0x34], 0xfffffff7
mov dword [ebp - 0x740], 2
mov dword [ebp - 0x8d0], 0
mov dword [ebp - 0x38c], 1
mov dword [ebp - 0x1d4], 0
jmp 0x10044f7f
mov eax, dword [ebp - 0x1d4]
inc eax
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 2
jge 0x10044f9b
mov eax, dword [ebp - 0x1d4]
mov dword [ebp + eax*4 - 0x99c], 0xfffffffd
jmp 0x10044f72
mov dword [ebp - 0x34], 1
jmp 0x10044fab
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jl 0x10045255
mov dword [ebp - 0xc4], 0xfffffff6
mov dword [ebp - 0x820], 0x23758185
mov dword [ebp - 0x740], 0
cmp dword [ebp - 0x740], 0
je 0x10044fe8
mov dword [ebp - 0x46c], 1
jmp 0x10044fef
and dword [ebp - 0x46c], 0
cmp dword [ebp - 0x34], 1
jb 0x10045001
mov dword [ebp - 0x438], 1
jmp 0x10045008
and dword [ebp - 0x438], 0
mov eax, dword [ebp - 0xc4]
cmp dword [ebp - 0x438], eax
jne 0x10045022
mov dword [ebp - 0x748], 1
jmp 0x10045029
and dword [ebp - 0x748], 0
mov eax, dword [ebp - 0x748]
mov dword [ebp - 0x8d0], eax
mov eax, dword [ebp - 0xc4]
cmp dword [ebp - 0xc4], eax
jl 0x1004504f
mov dword [ebp - 0x440], 1
jmp 0x10045056
and dword [ebp - 0x440], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x440], eax
je 0x1004506d
mov dword [ebp - 0x750], 1
jmp 0x10045074
and dword [ebp - 0x750], 0
mov eax, dword [ebp - 0x34]
imul eax, dword [ebp - 0x750]
test eax, eax
jne 0x10045094
cmp dword [ebp - 0xc4], 0
jne 0x10045094
and dword [ebp - 0x448], 0
jmp 0x1004509e
mov dword [ebp - 0x448], 1
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x448], eax
je 0x100450b5
mov dword [ebp - 0x758], 1
jmp 0x100450bc
and dword [ebp - 0x758], 0
mov eax, dword [ebp - 0x758]
add eax, 0x67bb
cmp eax, dword [ebp - 0xc4]
je 0x100450db
mov dword [ebp - 0x760], 1
jmp 0x100450e2
and dword [ebp - 0x760], 0
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x760]
jne 0x100450fb
xor eax, eax
inc eax
jne 0x100450fb
and dword [ebp - 0x454], 0
jmp 0x10045105
mov dword [ebp - 0x454], 1
mov eax, dword [ebp - 0x454]
mov dword [ebp - 0x38c], eax
mov eax, dword [ebp - 0x38c]
mov dword [ebp - 0x820], eax
cmp dword [ebp - 0x34], 0xfffffff9
je 0x1004512f
mov dword [ebp - 0x8ec], 1
jmp 0x10045136
and dword [ebp - 0x8ec], 0
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp + eax*4 - 0x99c]
mov dword [ebp - 0x614], eax
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x614]
mov dword [ebp + eax*4 - 0x99c], ecx
cmp dword [ebp - 0x614], 0xffff
jb 0x10045168
cmp dword [ebp - 0x34], 0
je 0x1004517d
mov eax, 0x2129
test eax, eax
je 0x1004517d
mov dword [ebp - 0x45c], 1
jmp 0x10045184
and dword [ebp - 0x45c], 0
cmp dword [ebp - 0x45c], 1
je 0x10045199
mov dword [ebp - 0x6f4], 1
jmp 0x100451a0
and dword [ebp - 0x6f4], 0
cmp dword [ebp - 0x6f4], 0xffffffff
jl 0x100451b5
mov dword [ebp - 0x464], 1
jmp 0x100451bc
and dword [ebp - 0x464], 0
cmp dword [ebp - 0x464], 0x58528353
jne 0x100451d4
mov dword [ebp - 0x61c], 1
jmp 0x100451db
and dword [ebp - 0x61c], 0
cmp dword [ebp - 0x61c], 0xffffffff
ja 0x100451f0
mov dword [ebp - 0x828], 1
jmp 0x100451f7
and dword [ebp - 0x828], 0
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0xaf8], eax
mov eax, dword [ebp - 0x38c]
neg eax
cmp eax, dword [ebp - 0x34]
jl 0x1004521c
mov dword [ebp - 0x764], 1
jmp 0x10045223
and dword [ebp - 0x764], 0
mov eax, dword [ebp - 0x46c]
cmp eax, dword [ebp - 0x764]
jle 0x1004523d
mov dword [ebp - 0x474], 1
jmp 0x10045244
and dword [ebp - 0x474], 0
mov eax, dword [ebp - 0x474]
mov dword [ebp - 0xc4], eax
jmp 0x10044fa4
mov eax, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x38]
add ecx, dword [eax]
add ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x14], ecx
xor ecx, ecx
call fcn.100303f6
push eax
call fcn.1006fe98
pop ecx
mov dword [ebp - 0x20], 0xac64a684
mov dword [ebp - 0x84], 0xfd66c4a8
mov dword [ebp - 0x4b4], 0x8a6c
mov dword [ebp - 0x39c], 0xce4a839b
mov dword [ebp - 0x20], 0
jmp 0x100452a6
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x1b
jl 0x10045430
mov dword [ebp - 0x48c], 1
mov dword [ebp - 0x494], 0xffffffff
mov dword [ebp - 0x9e8], 0xd8bc0d13
mov dword [ebp - 0x9e4], 0xd8bc0d13
mov dword [ebp - 0x9e0], 0xd8bc0d13
mov dword [ebp - 0x9dc], 0xd8bc0d13
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x20], eax
jg 0x10045300
mov dword [ebp - 0x624], 1
jmp 0x10045307
and dword [ebp - 0x624], 0
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x624]
jne 0x1004531e
mov dword [ebp - 0x484], 1
jmp 0x10045325
and dword [ebp - 0x484], 0
cmp dword [ebp - 0x48c], 0
je 0x10045340
mov eax, 0xa3531f14
test eax, eax
jne 0x10045340
and dword [ebp - 0x47c], 0
jmp 0x1004534a
mov dword [ebp - 0x47c], 1
cmp dword [ebp - 0x47c], 0xffffffff
jg 0x1004535f
mov dword [ebp - 0x6fc], 1
jmp 0x10045366
and dword [ebp - 0x6fc], 0
cmp dword [ebp - 0x6fc], 0x26f3
jl 0x1004537e
mov dword [ebp - 0x62c], 1
jmp 0x10045385
and dword [ebp - 0x62c], 0
mov eax, dword [ebp - 0x484]
cmp eax, dword [ebp - 0x62c]
jl 0x1004539f
mov dword [ebp - 0x79c], 1
jmp 0x100453a6
and dword [ebp - 0x79c], 0
mov eax, dword [ebp - 0x48c]
imul eax, dword [ebp - 0x79c]
mov dword [ebp - 0x494], eax
cmp dword [ebp - 0x494], 0x12a3
jne 0x100453d1
mov dword [ebp - 0x634], 1
jmp 0x100453d8
and dword [ebp - 0x634], 0
mov eax, dword [ebp - 0x634]
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0
jne 0x100453f6
cmp dword [ebp - 0x84], 0
je 0x100453fc
cmp dword [ebp - 0x20], 0
jne 0x1004540e
cmp dword [ebp - 0x84], 0
jne 0x1004540e
and dword [ebp - 0x49c], 0
jmp 0x10045418
mov dword [ebp - 0x49c], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x49c]
mov dword [ebp + eax - 0x9e8], ecx
jmp 0x1004529f
mov dword [ebp - 0x84], 0
jmp 0x10045449
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0x18
jg 0x10045744
mov dword [ebp - 0x704], 0x3b1ad31f
mov dword [ebp - 0x76c], 0
mov dword [ebp - 0x88], 0
jmp 0x10045483
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 1
jge 0x1004549f
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0xcc], 0xc9b7
jmp 0x10045476
mov dword [ebp - 0x88], 0
jmp 0x100454b8
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 3
jge 0x100454d4
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0xbc8], 1
jmp 0x100454ab
mov dword [ebp - 0x20], 0
jmp 0x100454e4
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jg 0x1004573f
mov dword [ebp - 0x94], 0xffffffff
mov dword [ebp - 0x94], 0
jmp 0x10045511
mov eax, dword [ebp - 0x94]
dec eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0
jl 0x1004573a
mov dword [ebp - 0x4bc], 0xffffffff
mov dword [ebp - 0x8d8], 0x354d1843
mov eax, dword [ebp - 0x94]
cmp dword [ebp + eax*4 - 0xcc], 0
je 0x10045656
cmp dword [ebp - 0x94], 0xe69ed994
je 0x1004555e
mov dword [ebp - 0x4a4], 1
jmp 0x10045565
and dword [ebp - 0x4a4], 0
mov eax, dword [ebp - 0x94]
mov eax, dword [ebp + eax*4 - 0xcc]
mov dword [ebp - 0x704], eax
mov eax, dword [ebp - 0x704]
cmp dword [ebp - 0x4a4], eax
jle 0x1004559b
mov eax, 0x4f2c
test eax, eax
je 0x1004559b
mov dword [ebp - 0x63c], 1
jmp 0x100455a2
and dword [ebp - 0x63c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xcc]
cmp dword [ebp - 0x63c], eax
jne 0x100455c3
mov dword [ebp - 0x4ac], 1
jmp 0x100455ca
and dword [ebp - 0x4ac], 0
mov eax, dword [ebp - 0x4ac]
mov dword [ebp - 0x76c], eax
mov eax, dword [ebp - 0x76c]
mov dword [ebp - 0x4b4], eax
mov eax, dword [ebp - 0x94]
mov eax, dword [ebp + eax*4 - 0xcc]
cmp eax, dword [ebp - 0x4b4]
jle 0x10045603
mov dword [ebp - 0x644], 1
jmp 0x1004560a
and dword [ebp - 0x644], 0
mov eax, dword [ebp - 0x94]
cmp dword [ebp - 0x644], eax
je 0x10045624
mov dword [ebp - 0x394], 1
jmp 0x1004562b
and dword [ebp - 0x394], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x394]
mov dword [ebp + eax - 0xbc8], ecx
mov eax, dword [ebp - 0x394]
mov dword [ebp - 0x4bc], eax
mov eax, dword [ebp - 0x4bc]
add eax, dword [ebp - 0x84]
xor eax, eax
inc eax
jne 0x10045669
xor eax, eax
inc eax
jne 0x10045669
and dword [ebp - 0x70c], 0
jmp 0x10045673
mov dword [ebp - 0x70c], 1
mov eax, dword [ebp - 0x70c]
mov dword [ebp - 0x39c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xcc]
cmp dword [ebp - 0x39c], eax
jne 0x1004569d
cmp dword [ebp - 0x39c], 0
jne 0x100456a3
cmp dword [ebp - 0x20], 0
je 0x100456b6
push 9
pop eax
test eax, eax
je 0x100456b6
mov dword [ebp - 0x4c4], 1
jmp 0x100456bd
and dword [ebp - 0x4c4], 0
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0xcc]
cmp dword [ebp - 0x4c4], eax
jge 0x100456db
mov dword [ebp - 0x64c], 1
jmp 0x100456e2
and dword [ebp - 0x64c], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x64c], eax
jle 0x100456f9
mov dword [ebp - 0x4cc], 1
jmp 0x10045700
and dword [ebp - 0x4cc], 0
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0xcc]
cmp dword [ebp - 0x4cc], eax
jge 0x1004571e
mov dword [ebp - 0x7c8], 1
jmp 0x10045725
and dword [ebp - 0x7c8], 0
imul eax, dword [ebp - 0x7c8], 0x2e18
mov dword [ebp - 0x8d8], eax
jmp 0x10045504
jmp 0x100454dd
jmp 0x1004543c
mov dword [ebp - 0x140], 0xfffffff8
mov dword [ebp - 0x4d4], 0
mov dword [ebp - 0x25c], 0xce96b779
mov dword [ebp - 0xb00], 0xffffffff
mov dword [ebp - 0xb08], 0
mov dword [ebp - 0xb10], 0x3a4c924b
mov dword [ebp - 0x254], 0
jmp 0x10045799
mov eax, dword [ebp - 0x254]
inc eax
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 2
jge 0x100457b5
mov eax, dword [ebp - 0x254]
mov dword [ebp + eax*4 - 0xa14], 0x75c96dd1
jmp 0x1004578c
mov dword [ebp - 0x140], 1
jmp 0x100457ce
mov eax, dword [ebp - 0x140]
dec eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 0
jl 0x10045911
mov dword [ebp - 0xb54], 7
mov dword [ebp - 0xb24], 0x83674579
mov dword [ebp - 0xb20], 0x83674579
mov dword [ebp - 0xb1c], 0x83674579
mov dword [ebp - 0xb18], 0x83674579
mov eax, dword [ebp - 0x140]
cmp dword [ebp + eax*4 - 0xa14], 0
je 0x10045892
mov dword [ebp - 0x1dc], 0x6801fc3e
mov dword [ebp - 0xb14], 0x831d26ec
mov dword [ebp - 0xa04], 0x7858f9c2
mov dword [ebp - 0x1dc], 0
jmp 0x10045854
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 1
jg 0x10045890
mov dword [ebp - 0x830], 0
mov dword [ebp - 0x4d4], 1
push 0x7aba
lea eax, [ebp - 0x830]
push eax
push 0
lea eax, [ebp - 0x4d4]
push eax
call fcn.10043783
add esp, 0x10
jmp 0x10045847
jmp 0x100458b7
mov dword [ebp - 0x8f4], 0xfffb
push 0x6e4a
lea eax, [ebp - 0x8f4]
push eax
push 0x4f40
push 0
call fcn.10043e58
add esp, 0x10
mov dword [ebp - 0x25c], 0
jmp 0x100458d0
mov eax, dword [ebp - 0x25c]
inc eax
mov dword [ebp - 0x25c], eax
cmp dword [ebp - 0x25c], 1
jg 0x1004590c
mov byte [ebp - 0xbd], 0
lea eax, [ebp - 0xbd]
push eax
push 0x853
push 0xffb
push 0x2be4
push 1
push 0x1cdb
push 0x29e2
call fcn.100430e1
add esp, 0x1c
jmp 0x100458c3
jmp 0x100457c1
mov byte [ebp - 0x194], 8
mov byte [ebp - 0x193], pe_nt_image_headers32
mov byte [ebp - 0x192], 1
mov byte [ebp - 0x191], 5
mov byte [ebp - 0x190], 0
mov byte [ebp - 0x18f], 4
mov byte [ebp - 0x18e], 7
mov byte [ebp - 0x18d], 7
mov byte [ebp - 0x18c], 5
mov byte [ebp - 0x18b], 7
mov byte [ebp - 0x18a], 6
mov byte [ebp - 0x189], 0
mov byte [ebp - 0x188], 4
mov byte [ebp - 0x187], 9
mov byte [ebp - 0x186], 3
mov byte [ebp - 0x185], 0xf
mov byte [ebp - 0x184], 9
mov byte [ebp - 0x183], 7
mov byte [ebp - 0x182], 0xa
mov byte [ebp - 0x181], 0xc5
mov byte [ebp - 0x180], 0x11
mov byte [ebp - 0x17f], 0xe0
mov byte [ebp - 0x17e], 0x29
mov byte [ebp - 0x17d], 0x88
mov byte [ebp - 0x17c], 0x6e
mov byte [ebp - 0x17b], 0x6b
mov byte [ebp - 0x17a], 0
mov byte [ebp - 0x179], 0x8b
mov byte [ebp - 0x178], 5
mov byte [ebp - 0x177], 2
mov byte [ebp - 0x176], 7
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x194]
or eax, 0xc8
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x194]
and ecx, 0xc8
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x194]
mov byte [ebp + ecx - 0x7e4], al
mov dword [ebp - 0x2c], 2
and dword [ebp - 0x160], 0
jmp 0x10045a40
mov eax, dword [ebp - 0x2c]
inc eax
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0x1f
jae 0x10045b2d
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x194]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x2c], eax
jne 0x10045a8a
mov eax, dword [ebp - 0x2c]
movzx eax, byte [ebp + eax - 0x194]
inc eax
mov dword [ebp - 0x160], eax
mov eax, dword [ebp - 0x2c]
movzx eax, byte [ebp + eax - 0x194]
mov ecx, dword [ebp - 0x2c]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x2c], eax
jmp 0x10045a38
mov eax, dword [ebp - 0x2c]
movzx eax, byte [ebp + eax - 0x193]
mov ecx, dword [ebp - 0x2c]
sub ecx, dword [ebp - 0x160]
movzx ecx, byte [ebp + ecx - 0x196]
movsx ecx, byte [ebp + ecx - 0x7e4]
add eax, ecx
mov ecx, dword [ebp - 0x2c]
movzx ecx, byte [ebp + ecx - 0x193]
mov edx, dword [ebp - 0x2c]
sub edx, dword [ebp - 0x160]
movzx edx, byte [ebp + edx - 0x196]
movsx edx, byte [ebp + edx - 0x7e4]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x2c]
movzx ecx, byte [ebp + ecx - 0x193]
mov edx, dword [ebp - 0x2c]
sub edx, dword [ebp - 0x160]
movzx edx, byte [ebp + edx - 0x196]
movsx edx, byte [ebp + edx - 0x7e4]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x2c]
movzx ecx, byte [ebp + ecx - 0x194]
mov byte [ebp + ecx - 0x7e4], al
lea eax, [ebp - 0x160]
push eax
push 0
push 0x4282
call fcn.100433a3
add esp, 0xc
jmp 0x10045a38
xor eax, eax
inc eax
imul eax, eax, 0xa
mov byte [ebp + eax - 0x7e4], 0
mov dword [ebp - 0xd4], 0xfffffffc
mov dword [ebp - 0x264], 0
jmp 0x10045b5e
mov eax, dword [ebp - 0x264]
inc eax
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 3
jge 0x10045b7a
mov eax, dword [ebp - 0x264]
mov dword [ebp + eax*4 - 0x320], 1
jmp 0x10045b51
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x320], 0xffffffee
jmp 0x10045ba8
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x320]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x320], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x320], 0x15
jge 0x10045f0b
mov dword [ebp - 0x50], 0x55b7cefa
mov dword [ebp - 0x504], 0x733e
mov dword [ebp - 0x1ec], 0
jmp 0x10045be6
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 2
jge 0x10045c02
mov eax, dword [ebp - 0x1ec]
mov dword [ebp + eax*4 - 0x3a4], 0xb72fd491
jmp 0x10045bd9
mov dword [ebp - 0x50], 1
jmp 0x10045c12
mov eax, dword [ebp - 0x50]
dec eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
jl 0x10045ee9
mov dword [ebp - 0x1f0], 0xab3ae5d5
mov dword [ebp - 0x230], 0
jmp 0x10045c3f
mov eax, dword [ebp - 0x230]
inc eax
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 2
jge 0x10045c5b
mov eax, dword [ebp - 0x230]
mov dword [ebp + eax*4 - 0xa20], 1
jmp 0x10045c32
mov eax, dword [ebp - 0x50]
cmp dword [ebp + eax*4 - 0x3a4], 0
je 0x10045ebd
mov eax, 0x89a6
test eax, eax
je 0x10045ebd
cmp dword [ebp - 0x50], 0x7e28
je 0x10045c8e
mov dword [ebp - 0x654], 1
jmp 0x10045c95
and dword [ebp - 0x654], 0
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp + eax*4 - 0x3a4]
cmp dword [ebp - 0x654], eax
jge 0x10045cb3
mov dword [ebp - 0x4dc], 1
jmp 0x10045cba
and dword [ebp - 0x4dc], 0
mov eax, dword [ebp - 0x1f0]
cmp dword [ebp - 0x4dc], eax
jle 0x10045cd4
mov dword [ebp - 0x714], 1
jmp 0x10045cdb
and dword [ebp - 0x714], 0
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp + eax*4 - 0x3a4]
imul eax, dword [ebp - 0x714]
test eax, eax
jbe 0x10045cfc
mov dword [ebp - 0x4e4], 1
jmp 0x10045d03
and dword [ebp - 0x4e4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x320]
cmp dword [ebp - 0x4e4], eax
je 0x10045d24
mov dword [ebp - 0x65c], 1
jmp 0x10045d2b
and dword [ebp - 0x65c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x320]
cmp dword [ebp - 0x65c], eax
jle 0x10045d4b
mov dword [ebp - 0x4ec], 1
jmp 0x10045d52
and dword [ebp - 0x4ec], 0
mov eax, dword [ebp - 0x50]
imul ecx, dword [ebp - 0x4ec], 0
cmp dword [ebp + eax*4 - 0x3a4], ecx
jl 0x10045d71
mov dword [ebp - 0x774], 1
jmp 0x10045d78
and dword [ebp - 0x774], 0
cmp dword [ebp - 0x774], 0x5009
jle 0x10045d90
mov dword [ebp - 0x380], 1
jmp 0x10045d97
and dword [ebp - 0x380], 0
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x380]
mov dword [ebp + eax*4 - 0x3a4], ecx
mov eax, dword [ebp - 0x1f0]
cmp dword [ebp - 0x380], eax
jge 0x10045dc1
mov dword [ebp - 0x4f4], 1
jmp 0x10045dc8
and dword [ebp - 0x4f4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x320]
cmp dword [ebp - 0x4f4], eax
jge 0x10045df6
mov eax, dword [ebp - 0x50]
cmp dword [ebp + eax*4 - 0x3a4], 0
je 0x10045df6
mov dword [ebp - 0x664], 1
jmp 0x10045dfd
and dword [ebp - 0x664], 0
mov eax, dword [ebp - 0x664]
mov dword [ebp - 0x1f0], eax
mov eax, dword [ebp - 0x1f0]
add eax, 0xa1bc
imul eax, eax, 7
cmp eax, dword [ebp - 0x50]
jne 0x10045e28
mov dword [ebp - 0x4fc], 1
jmp 0x10045e2f
and dword [ebp - 0x4fc], 0
cmp dword [ebp - 0x4fc], 0xfffffffc
jg 0x10045e44
mov dword [ebp - 0x71c], 1
jmp 0x10045e4b
and dword [ebp - 0x71c], 0
mov eax, dword [ebp - 0x71c]
neg eax
je 0x10045e65
xor eax, eax
je 0x10045e65
mov dword [ebp - 0x838], 1
jmp 0x10045e6c
and dword [ebp - 0x838], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa20]
mov dword [ebp - 0x9fc], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x320]
mov dword [ebp - 0xafc], eax
mov dword [ebp - 0x504], 0x50b5
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x320]
cmp dword [ebp - 0x504], eax
jg 0x10045ebd
mov dword [ebp - 0x66c], 1
jmp 0x10045ec4
and dword [ebp - 0x66c], 0
mov eax, dword [ebp - 0x66c]
mov dword [ebp - 0xd4], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x320], 0
je 0x10045ee4
jmp 0x10045c0b
jmp 0x10045c0b
mov byte [ebp - 0x105], 0
lea eax, [ebp - 0x105]
push eax
push 0
push 0x5a5c
call fcn.10043b77
add esp, 0xc
jmp 0x10045b8d
cmp dword [ebp - 0xd4], 0xbf0
jg 0x10045f23
mov dword [ebp - 0x51c], 1
jmp 0x10045f2a
and dword [ebp - 0x51c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x320]
cmp dword [ebp - 0xd4], eax
jne 0x10045f4b
mov dword [ebp - 0x338], 1
jmp 0x10045f52
and dword [ebp - 0x338], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x338]
mov dword [ebp + eax - 0x320], ecx
cmp dword [ebp - 0x338], 0x79a9257d
je 0x10045f7c
mov dword [ebp - 0x50c], 1
jmp 0x10045f83
and dword [ebp - 0x50c], 0
mov eax, dword [ebp - 0xd4]
cmp dword [ebp - 0x50c], eax
jge 0x10045f9d
mov dword [ebp - 0x7a4], 1
jmp 0x10045fa4
and dword [ebp - 0x7a4], 0
mov eax, dword [ebp - 0xd4]
add eax, dword [ebp - 0x7a4]
cmp eax, dword [ebp - 0xd4]
jle 0x10045fc4
mov dword [ebp - 0x514], 1
jmp 0x10045fcb
and dword [ebp - 0x514], 0
cmp dword [ebp - 0x514], 0x75f7f777
jle 0x10045fe3
mov dword [ebp - 0x674], 1
jmp 0x10045fea
and dword [ebp - 0x674], 0
mov eax, dword [ebp - 0x674]
sub eax, 0x6e774655
neg eax
cmp dword [ebp - 0x51c], eax
jge 0x10046014
mov eax, 0x38b
test eax, eax
je 0x10046014
mov dword [ebp - 0x724], 1
jmp 0x1004601b
and dword [ebp - 0x724], 0
cmp dword [ebp - 0x724], 0xe816884a
jb 0x10046033
mov dword [ebp - 0x524], 1
jmp 0x1004603a
and dword [ebp - 0x524], 0
mov eax, dword [ebp - 0x524]
mov dword [ebp - 0xd4], eax
lea eax, [ebp - 0x7e4]
push eax
lea ecx, [ebp - 0xc6c]
call fcn.10026693
mov dword [ebp - 0x8fc], eax
mov eax, dword [ebp - 0x8fc]
mov dword [ebp - 0x840], eax
and dword [ebp - 4], 0
push 0xa
xor edx, edx
mov ecx, dword [ebp - 0x840]
call fcn.100303b6
pop ecx
mov dword [ebp - 0x890], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc6c]
call fcn.100193f3
mov dword [ebp - 0x67c], 7
mov dword [ebp - 0xa0c], 0x9d3388a0
mov dword [ebp - 0x930], 0xffffffff
mov dword [ebp - 0x1c], 0
jmp 0x100460c1
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x100460d7
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x92c], 4
jmp 0x100460ba
mov dword [ebp - 0x1c], 0
jmp 0x100460e7
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 4
jge 0x100460fd
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x7c4], 0
jmp 0x100460e0
mov dword [ebp - 0x1c], 0
jmp 0x1004610d
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 4
jge 0x10046123
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xc24], 0xf0796840
jmp 0x10046106
mov dword [ebp - 0x1c], 0
jmp 0x10046133
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x10046149
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x7f8], 0xfffffffe
jmp 0x1004612c
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x7c4], 2
jmp 0x10046177
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x7c4]
dec eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x7c4], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x7c4], 0
jl 0x1004650e
mov dword [ebp - 0x858], 0x8302
mov dword [ebp - 0xa4], 0
jmp 0x100461ae
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 3
jge 0x100461ca
mov eax, dword [ebp - 0xa4]
mov dword [ebp + eax*4 - 0xb80], 0x68593f9b
jmp 0x100461a1
mov dword [ebp - 0xa4], 0
jmp 0x100461e3
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 2
jge 0x100461ff
mov eax, dword [ebp - 0xa4]
mov dword [ebp + eax*4 - 0x800], 0xe2294bb4
jmp 0x100461d6
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x7c4]
mov eax, dword [ebp + eax*4 - 0x92c]
mov dword [ebp - 0xac4], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x7c4], 0
jne 0x10046249
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x7c4]
cmp dword [ebp + eax*4 - 0x92c], 0
jne 0x10046249
and dword [ebp - 0x52c], 0
jmp 0x10046253
mov dword [ebp - 0x52c], 1
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x7c4]
mov dword [ebp - 0x67c], eax
mov eax, dword [ebp - 0x67c]
mov dword [ebp - 0x370], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x370]
mov dword [ebp + eax - 0xc24], ecx
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x370]
mov dword [ebp + eax - 0xb80], ecx
mov eax, dword [ebp - 0x52c]
cmp eax, dword [ebp - 0x370]
jl 0x100462b2
mov dword [ebp - 0x958], 1
jmp 0x100462b9
and dword [ebp - 0x958], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x92c], 0xffffffff
je 0x100462d5
mov dword [ebp - 0x77c], 1
jmp 0x100462dc
and dword [ebp - 0x77c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x800]
mov ecx, dword [ebp - 0x77c]
lea eax, [ecx + eax + 0xe595]
cmp eax, 0xfffe
jne 0x10046309
mov dword [ebp - 0x534], 1
jmp 0x10046310
and dword [ebp - 0x534], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x7c4]
cmp dword [ebp - 0x534], eax
jl 0x10046331
mov dword [ebp - 0x684], 1
jmp 0x10046338
and dword [ebp - 0x684], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x7c4]
mov eax, dword [ebp + eax*4 - 0x92c]
imul eax, dword [ebp - 0x684]
cmp eax, 0xfc4b664f
ja 0x10046366
mov dword [ebp - 0x53c], 1
jmp 0x1004636d
and dword [ebp - 0x53c], 0
imul eax, dword [ebp - 0x53c], 0xfffe
test eax, eax
je 0x10046397
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x7c4], 0
je 0x10046397
mov dword [ebp - 0x72c], 1
jmp 0x1004639e
and dword [ebp - 0x72c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x7f8]
mov dword [ebp - 0x848], eax
mov eax, dword [ebp - 0x72c]
mov dword [ebp - 0x8e8], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x7f8]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x7f8], eax
mov eax, dword [ebp - 0x848]
cmp eax, dword [ebp - 0x8e8]
je 0x100463f2
mov dword [ebp - 0x850], 1
jmp 0x100463f9
and dword [ebp - 0x850], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x800], 0x3c6b
jl 0x10046418
mov dword [ebp - 0x544], 1
jmp 0x1004641f
and dword [ebp - 0x544], 0
mov eax, dword [ebp - 0x930]
add eax, dword [ebp - 0x544]
cmp eax, 0x2320
jge 0x1004644b
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x7f8], 0
jne 0x1004644b
and dword [ebp - 0x68c], 0
jmp 0x10046455
mov dword [ebp - 0x68c], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x800]
cmp dword [ebp - 0x68c], eax
je 0x10046476
mov dword [ebp - 0x54c], 1
jmp 0x1004647d
and dword [ebp - 0x54c], 0
mov eax, dword [ebp - 0x858]
add eax, dword [ebp - 0x54c]
mov dword [ebp - 0x340], 1
jmp 0x1004649c
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x340]
mov dword [ebp + eax - 0x92c], ecx
cmp dword [ebp - 0x340], 0x72a6
jge 0x100464d0
mov eax, 0xfff8
test eax, eax
je 0x100464d0
mov dword [ebp - 0x780], 1
jmp 0x100464d7
and dword [ebp - 0x780], 0
cmp dword [ebp - 0x780], 0x24a1329
jg 0x100464ef
mov dword [ebp - 0x554], 1
jmp 0x100464f6
and dword [ebp - 0x554], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x554]
mov dword [ebp + eax - 0x800], ecx
jmp 0x1004615c
push 0
push 0x116c
call fcn.1004370b
pop ecx
pop ecx
and dword [ebp - 0x270], 0
jmp 0x10046532
mov eax, dword [ebp - 0x270]
inc eax
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 0xb
jae 0x1004654b
mov eax, dword [ebp - 0x270]
mov byte [ebp + eax - 0x7e4], 0
jmp 0x10046525
mov dword [ebp - 0x114], 0xf5540d7f
mov dword [ebp - 0x860], 0xb79d
mov dword [ebp - 0x398], 0x47160372
mov dword [ebp - 0x114], 0x18
jmp 0x10046582
mov eax, dword [ebp - 0x114]
dec eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0xffffffeb
jle 0x1004691f
mov dword [ebp - 0x7d8], 0x13dce9d0
mov dword [ebp - 0x7d4], 0x13dce9d0
mov dword [ebp - 0x7d0], 0x13dce9d0
mov dword [ebp - 0x7cc], 0x13dce9d0
mov dword [ebp - 0x788], 0x38c46158
mov dword [ebp - 0x868], 6
mov dword [ebp - 0x8f8], 2
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x7d8], 0
jmp 0x10046603
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7d8]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x7d8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x7d8], 1
jne 0x1004691a
mov dword [ebp - 0x118], 6
mov dword [ebp - 0x148], 0x8110
mov dword [ebp - 0x934], 0xfffffffc
mov dword [ebp - 0x574], 0xfffffffd
mov dword [ebp - 0x1f8], 0
jmp 0x10046658
mov eax, dword [ebp - 0x1f8]
inc eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 2
jge 0x10046674
mov eax, dword [ebp - 0x1f8]
mov dword [ebp + eax*4 - 0x9b4], 0
jmp 0x1004664b
cmp dword [ebp - 0x114], 0
je 0x1004669b
cmp dword [ebp - 0x114], 0
je 0x1004669b
cmp dword [ebp - 0x118], 0
je 0x1004669b
mov dword [ebp - 0x694], 1
jmp 0x100466a2
and dword [ebp - 0x694], 0
cmp dword [ebp - 0x694], 0xd2ab60e7
je 0x100467a3
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7d8]
push 4
pop ecx
imul ecx, ecx, 0
add eax, dword [ebp + ecx - 0x9b4]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x7d8]
jle 0x100466e7
mov dword [ebp - 0x8f0], 1
jmp 0x100466ee
and dword [ebp - 0x8f0], 0
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0xa18], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x7d8], 0
je 0x1004671c
cmp dword [ebp - 0x860], 0
jne 0x1004671c
and dword [ebp - 0x55c], 0
jmp 0x10046726
mov dword [ebp - 0x55c], 1
imul eax, dword [ebp - 0x55c], 0x1d2a
cmp eax, dword [ebp - 0x148]
jl 0x10046749
xor eax, eax
inc eax
je 0x10046749
mov dword [ebp - 0x734], 1
jmp 0x10046750
and dword [ebp - 0x734], 0
cmp dword [ebp - 0x734], 9
jae 0x10046765
mov dword [ebp - 0x564], 1
jmp 0x1004676c
and dword [ebp - 0x564], 0
cmp dword [ebp - 0x564], 0xffff
jb 0x10046784
mov dword [ebp - 0x69c], 1
jmp 0x1004678b
and dword [ebp - 0x69c], 0
cmp dword [ebp - 0x69c], 0x72305ab
jge 0x100467a3
mov dword [ebp - 0x56c], 1
jmp 0x100467aa
and dword [ebp - 0x56c], 0
mov eax, dword [ebp - 0x56c]
mov dword [ebp - 0x934], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x7d8], 0
je 0x1004680b
mov dword [ebp - 0x148], 8
jmp 0x100467df
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 0x17
je 0x10046806
mov byte [ebp - 0xf5], 0
movzx eax, byte [ebp - 0xf5]
test eax, eax
je 0x10046804
push 0
push 0x1e
call dword [sym.imp.KERNEL32.dll_TlsSetValue]
jmp 0x100467d2
jmp 0x10046915
mov dword [ebp - 0x348], 0x2b5bddd
mov dword [ebp - 0x398], 0x69a0165d
mov eax, dword [ebp - 0x398]
mov dword [ebp - 0xb28], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x9b4]
mov dword [ebp - 0xa24], eax
cmp dword [ebp - 0x398], 0xfffffff6
jg 0x10046853
mov dword [ebp - 0x6a4], 1
jmp 0x1004685a
and dword [ebp - 0x6a4], 0
mov eax, dword [ebp - 0x118]
sub eax, 0x6e9f
mov dword [ebp - 0x348], eax
mov eax, dword [ebp - 0x348]
mov dword [ebp - 0x788], eax
cmp dword [ebp - 0x788], 0
je 0x10046887
cmp dword [ebp - 0x118], 0
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x574], eax
mov eax, dword [ebp - 0x574]
cmp dword [ebp - 0x6a4], eax
je 0x100468b3
cmp dword [ebp - 0x348], 0
jne 0x100468b3
and dword [ebp - 0x57c], 0
jmp 0x100468bd
mov dword [ebp - 0x57c], 1
cmp dword [ebp - 0x57c], 0x656e2e31
jl 0x100468d5
mov dword [ebp - 0x73c], 1
jmp 0x100468dc
and dword [ebp - 0x73c], 0
mov eax, dword [ebp - 0x73c]
sub eax, dword [ebp - 0x868]
imul eax, dword [ebp - 0x118]
mov dword [ebp - 0x8f8], eax
mov byte [ebp - 0xbe], 0
movzx eax, byte [ebp - 0xbe]
test eax, eax
je 0x10046915
push 0x4fb5
push 1
call fcn.10043357
pop ecx
pop ecx
jmp 0x100465e8
jmp 0x10046575
mov byte [ebp - 0x30c], 6
mov byte [ebp - 0x30b], 0x22
mov byte [ebp - 0x30a], 1
mov byte [ebp - 0x309], 0xf
mov byte [ebp - 0x308], 2
mov byte [ebp - 0x307], 1
mov byte [ebp - 0x306], 0
mov byte [ebp - 0x305], 6
mov byte [ebp - 0x304], 3
mov byte [ebp - 0x303], 3
mov byte [ebp - 0x302], 4
mov byte [ebp - 0x301], 6
mov byte [ebp - 0x300], 5
mov byte [ebp - 0x2ff], 5
mov byte [ebp - 0x2fe], 0x3e
mov byte [ebp - 0x2fd], 0x52
mov byte [ebp - 0x2fc], 0xb0
mov byte [ebp - 0x2fb], 0xc3
mov byte [ebp - 0x2fa], 0xd
mov byte [ebp - 0x2f9], 0xcc
mov byte [ebp - 0x2f8], 0x1a
mov byte [ebp - 0x2f7], 0x2b
mov byte [ebp - 0x2f6], 0x6f
mov byte [ebp - 0x2f5], 0xd4
mov byte [ebp - 0x2f4], 0x7f
mov byte [ebp - 0x2f3], 0xe2
mov byte [ebp - 0x2f2], 0x74
mov byte [ebp - 0x2f1], 0x10
mov byte [ebp - 0x2f0], 0x79
mov byte [ebp - 0x2ef], 0xc0
mov byte [ebp - 0x2ee], 0x7e
mov byte [ebp - 0x2ed], 0x70
mov byte [ebp - 0x2ec], 0x33
mov byte [ebp - 0x2eb], 5
mov byte [ebp - 0x2ea], 0xca
mov byte [ebp - 0x2e9], 0xf7
mov byte [ebp - 0x2e8], 0x2d
mov byte [ebp - 0x2e7], 0xdd
mov byte [ebp - 0x2e6], 0xfd
mov byte [ebp - 0x2e5], 0x73
mov byte [ebp - 0x2e4], 0x9d
mov byte [ebp - 0x2e3], 0x1b
mov byte [ebp - 0x2e2], 0x13
mov byte [ebp - 0x2e1], 0x6d
mov byte [ebp - 0x2e0], 0x9b
mov byte [ebp - 0x2df], 0xf5
mov byte [ebp - 0x2de], 0x91
mov byte [ebp - 0x2dd], 0x6b
mov byte [ebp - 0x2dc], 0x91
mov byte [ebp - 0x2db], 0x1a
mov byte [ebp - 0x2da], 0x95
mov byte [ebp - 0x2d9], 0xa0
mov byte [ebp - 0x2d8], 0x9e
mov byte [ebp - 0x2d7], 0x3b
mov byte [ebp - 0x2d6], 0x79
mov byte [ebp - 0x2d5], 0xaf
mov byte [ebp - 0x2d4], 0xe6
mov byte [ebp - 0x2d3], 2
mov byte [ebp - 0x2d2], 0xcc
mov byte [ebp - 0x2d1], 0x36
mov byte [ebp - 0x2d0], 5
mov byte [ebp - 0x2cf], 0x88
mov byte [ebp - 0x2ce], 0x46
mov byte [ebp - 0x2cd], 0xa7
mov byte [ebp - 0x2cc], 4
mov byte [ebp - 0x2cb], 0xaf
mov byte [ebp - 0x2ca], 0xeb
mov byte [ebp - 0x2c9], 0x3d
mov byte [ebp - 0x2c8], 0xac
mov byte [ebp - 0x2c7], 0x1c
mov byte [ebp - 0x2c6], 0xa7
mov byte [ebp - 0x2c5], 0xf4
mov byte [ebp - 0x2c4], 0
mov byte [ebp - 0x2c3], 1
mov byte [ebp - 0x2c2], 0xee
mov byte [ebp - 0x2c1], pe_nt_image_headers32
mov byte [ebp - 0x2c0], 0xa8
mov byte [ebp - 0x2bf], 8
mov byte [ebp - 0x2be], 1
mov byte [ebp - 0x2bd], 7
mov byte [ebp - 0x2bc], 6
mov byte [ebp - 0x2bb], 9
mov byte [ebp - 0x2ba], 6
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x30c]
or eax, 0x1b
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x30c]
and ecx, 0x1b
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x30c]
mov byte [ebp + ecx - 0x7f0], al
mov dword [ebp - 0x40], 2
and dword [ebp - 0x238], 0
jmp 0x10046bb5
mov eax, dword [ebp - 0x40]
inc eax
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0x53
jae 0x10046c7a
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x30c]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x40], eax
jne 0x10046bff
mov eax, dword [ebp - 0x40]
movzx eax, byte [ebp + eax - 0x30c]
inc eax
mov dword [ebp - 0x238], eax
mov eax, dword [ebp - 0x40]
movzx eax, byte [ebp + eax - 0x30c]
mov ecx, dword [ebp - 0x40]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x40], eax
jmp 0x10046bad
mov eax, dword [ebp - 0x40]
movzx eax, byte [ebp + eax - 0x30b]
mov ecx, dword [ebp - 0x40]
sub ecx, dword [ebp - 0x238]
movzx ecx, byte [ebp + ecx - 0x30e]
movsx ecx, byte [ebp + ecx - 0x7f0]
or eax, ecx
mov ecx, dword [ebp - 0x40]
movzx ecx, byte [ebp + ecx - 0x30b]
mov edx, dword [ebp - 0x40]
sub edx, dword [ebp - 0x238]
movzx edx, byte [ebp + edx - 0x30e]
movsx edx, byte [ebp + edx - 0x7f0]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x40]
movzx ecx, byte [ebp + ecx - 0x30c]
mov byte [ebp + ecx - 0x7f0], al
push 0x4cf1
push 1
lea eax, [ebp - 0x238]
push eax
call fcn.100433a3
add esp, 0xc
jmp 0x10046bad
xor eax, eax
inc eax
imul eax, eax, 0xa
mov byte [ebp + eax - 0x7f0], 0
mov dword [ebp - 0xb4], 1
mov dword [ebp - 0x200], 0
jmp 0x10046cab
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 3
jge 0x10046cc7
mov eax, dword [ebp - 0x200]
mov dword [ebp + eax*4 - 0xb8c], 0xfffffff9
jmp 0x10046c9e
mov dword [ebp - 0xb4], 2
jmp 0x10046ce0
mov eax, dword [ebp - 0xb4]
dec eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0
jl 0x10046d5b
mov dword [ebp - 0x258], 0xe1265ab3
mov dword [ebp - 0x258], 0
jmp 0x10046d0c
mov eax, dword [ebp - 0x258]
inc eax
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 2
jg 0x10046d56
mov dword [ebp - 0x170], 0xffffffff
mov dword [ebp - 0x170], 0
jmp 0x10046d38
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 3
jge 0x10046d54
mov eax, dword [ebp - 0x170]
mov dword [ebp + eax*4 - 0xb8c], 0xfffffffb
jmp 0x10046d2b
jmp 0x10046cff
jmp 0x10046cd3
mov dword [ebp - 0xb4], 0
jmp 0x10046d74
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 2
jg 0x10046db0
mov byte [ebp - 0xbf], 0
lea eax, [ebp - 0xbf]
push eax
push 0
push 0x67c7
push 0x69fd
push 0x41b7
push 0x5f40
push 0x4be8
call fcn.10043873
add esp, 0x1c
jmp 0x10046d67
lea eax, [ebp - 0x7f0]
push eax
lea ecx, [ebp - 0xc9c]
call fcn.10026693
mov dword [ebp - 0x870], eax
mov eax, dword [ebp - 0x870]
mov dword [ebp - 0x93c], eax
mov dword [ebp - 4], 1
push 0xa
xor edx, edx
mov ecx, dword [ebp - 0x93c]
call fcn.100303b6
pop ecx
mov dword [ebp - 0x908], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc9c]
call fcn.100193f3
mov dword [ebp - 0x240], 0xffffffff
mov dword [ebp - 0xacc], 0xffffffff
mov dword [ebp - 0x950], 0xfffffffa
mov dword [ebp - 0xb38], 0
mov dword [ebp - 0xb34], 0
mov dword [ebp - 0xb30], 0
mov dword [ebp - 0xb2c], 0
mov dword [ebp - 0x208], 0
jmp 0x10046e5f
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 3
jge 0x10046e7b
mov eax, dword [ebp - 0x208]
mov dword [ebp + eax*4 - 0x988], 3
jmp 0x10046e52
mov dword [ebp - 0x240], 0x11
jmp 0x10046e94
mov eax, dword [ebp - 0x240]
dec eax
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 0xffffffe3
jl 0x10047170
mov dword [ebp - 0xdc], 0xb57e8b72
mov dword [ebp - 0xa30], 1
mov dword [ebp - 0xb4c], 0x46e74a6e
mov dword [ebp - 0xb48], 0x46e74a6e
mov dword [ebp - 0xb44], 0x46e74a6e
mov dword [ebp - 0xb40], 0x46e74a6e
mov dword [ebp - 0xb04], 0xa164e62b
mov dword [ebp - 0x878], 0xf717
mov dword [ebp - 0x210], 0
jmp 0x10046f0a
mov eax, dword [ebp - 0x210]
inc eax
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 3
jge 0x10046f26
mov eax, dword [ebp - 0x210]
mov dword [ebp + eax*4 - 0x9c8], 1
jmp 0x10046efd
mov byte [ebp - 0x107], 0
push 0x689f
push 1
lea eax, [ebp - 0x107]
push eax
call fcn.100433db
add esp, 0xc
mov dword [ebp - 0xdc], 0
jmp 0x10046f5c
mov eax, dword [ebp - 0xdc]
dec eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0xfffffff7
jge 0x1004716b
mov dword [ebp - 0x900], 0xe12aa53f
mov dword [ebp - 0xa3c], 0x41b44adc
mov dword [ebp - 0x880], 1
mov dword [ebp - 0x378], 0xe20eeb49
mov dword [ebp - 0x888], 0xffffffff
mov dword [ebp - 0x268], 0
jmp 0x10046fb4
mov eax, dword [ebp - 0x268]
inc eax
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 4
jge 0x10046fd0
mov eax, dword [ebp - 0x268]
mov dword [ebp + eax*4 - 0xb68], 0x4489b467
jmp 0x10046fa7
cmp dword [ebp - 0xdc], 0
je 0x10046fee
cmp dword [ebp - 0xdc], 0
je 0x10046fee
mov dword [ebp - 0x6ac], 1
jmp 0x10046ff5
and dword [ebp - 0x6ac], 0
xor eax, eax
inc eax
je 0x1004701e
cmp dword [ebp - 0x878], 0
je 0x1004701e
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x988], 0
je 0x1004701e
mov dword [ebp - 0x584], 1
jmp 0x10047025
and dword [ebp - 0x584], 0
mov eax, dword [ebp - 0x378]
inc eax
mov dword [ebp - 0x378], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x378]
imul ecx, dword [ebp - 0x584]
mov edx, dword [ebp - 0x900]
imul edx, ecx
cmp edx, dword [ebp + eax - 0xb68]
je 0x10047065
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x9c8], 0
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x988]
cmp dword [ebp + eax - 0x9c8], ecx
jge 0x1004708c
mov dword [ebp - 0x58c], 1
jmp 0x10047093
and dword [ebp - 0x58c], 0
mov eax, dword [ebp - 0x6ac]
sub eax, dword [ebp - 0xdc]
cmp eax, dword [ebp - 0x58c]
jg 0x100470b3
mov dword [ebp - 0x7b4], 1
jmp 0x100470ba
and dword [ebp - 0x7b4], 0
mov eax, dword [ebp - 0x880]
cmp dword [ebp - 0x7b4], eax
jle 0x100470d4
mov dword [ebp - 0x594], 1
jmp 0x100470db
and dword [ebp - 0x594], 0
mov eax, dword [ebp - 0x594]
sub eax, dword [ebp - 0x950]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x9c8]
cmp eax, dword [ebp - 0x888]
je 0x10047109
mov dword [ebp - 0x6b4], 1
jmp 0x10047110
and dword [ebp - 0x6b4], 0
cmp dword [ebp - 0x6b4], 1
je 0x10047125
mov dword [ebp - 0x350], 1
jmp 0x1004712c
and dword [ebp - 0x350], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x350]
mov dword [ebp + eax - 0x988], ecx
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x350]
mov dword [ebp + eax - 0xb68], ecx
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x988], 0
je 0x10047166
jmp 0x10046f4f
jmp 0x10046f4f
jmp 0x10046e87
and dword [ebp - 0x218], 0
jmp 0x10047186
mov eax, dword [ebp - 0x218]
inc eax
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 0xb
jae 0x1004719f
mov eax, dword [ebp - 0x218]
mov byte [ebp + eax - 0x7f0], 0
jmp 0x10047179
push dword [ebp - 0x908]
push dword [ebp - 0x890]
call fcn.100407c1
pop ecx
pop ecx
mov dword [ebp - 0x5a4], eax
mov dword [ebp - 0x68], 0xd4081c29
mov dword [ebp - 0x898], 0x3c225155
mov dword [ebp - 0x248], 0
jmp 0x100471e2
mov eax, dword [ebp - 0x248]
inc eax
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 1
jge 0x100471fe
mov eax, dword [ebp - 0x248]
mov dword [ebp + eax*4 - 0x37c], 7
jmp 0x100471d5
mov dword [ebp - 0x68], 0
jmp 0x1004720e
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
jg 0x1004725c
mov dword [ebp - 0x220], 0
jmp 0x1004722d
mov eax, dword [ebp - 0x220]
inc eax
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 1
jge 0x10047249
mov eax, dword [ebp - 0x220]
mov dword [ebp + eax*4 - 0x940], 0xffffffff
jmp 0x10047220
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x940], 0x462751c7
jmp 0x10047207
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x37c]
cmp dword [ebp - 0x68], eax
je 0x1004727a
mov dword [ebp - 0x59c], 1
jmp 0x10047281
and dword [ebp - 0x59c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x37c]
cmp dword [ebp - 0x59c], eax
jg 0x100472c9
mov dword [ebp - 0x68], 0
jmp 0x100472a6
mov eax, dword [ebp - 0x68]
dec eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
jl 0x100472c7
mov eax, dword [ebp - 0x68]
cmp dword [ebp + eax*4 - 0x37c], 0
je 0x100472bb
jmp 0x100472c7
mov dword [ebp - 0x898], 0xffffffff
jmp 0x1004729f
jmp 0x10047317
mov dword [ebp - 0x260], 0
jmp 0x100472e2
mov eax, dword [ebp - 0x260]
inc eax
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 3
jge 0x100472fe
mov eax, dword [ebp - 0x260]
mov dword [ebp + eax*4 - 0xa9c], 1
jmp 0x100472d5
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xa9c]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0xa9c], eax
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0x5a4]
mov dword [eax + 8], ecx
mov dword [ebp - 0x120], 6
mov dword [ebp - 0x8c], 0
jmp 0x10047349
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 2
jge 0x10047365
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0xa2c], 4
jmp 0x1004733c
mov dword [ebp - 0x8c], 0
jmp 0x1004737e
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 3
jge 0x1004739a
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0xba4], 0xeac45307
jmp 0x10047371
push 0x23fa
lea eax, [ebp - 0x120]
push eax
push 0x2d31
push 0
call fcn.1004352f
add esp, 0x10
mov dword [ebp - 0x120], 0x12
jmp 0x100473ce
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0x1a
je 0x10047414
mov dword [ebp - 0x744], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xba4]
mov dword [ebp - 0x744], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x744]
mov dword [ebp + eax - 0xa2c], ecx
cmp dword [ebp - 0x120], 0
je 0x10047412
jmp 0x10047414
jmp 0x100473c1
push 0xf
push 5
call fcn.100407c1
pop ecx
pop ecx
add eax, dword [ebp - 0x5a4]
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 4], eax
mov dword [ebp - 0x9c], 0xfffffffe
mov dword [ebp - 0x228], 0
jmp 0x1004744e
mov eax, dword [ebp - 0x228]
inc eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 3
jge 0x1004746a
mov eax, dword [ebp - 0x228]
mov dword [ebp + eax*4 - 0x32c], 0x30722263
jmp 0x10047441
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x32c], 1
mov dword [ebp - 0x9c], 2
jmp 0x10047494
cmp dword [ebp - 0x9c], 0
jl 0x10047759
mov dword [ebp - 0x5c], 0x65352f76
mov dword [ebp - 0x8a0], 0xd734895c
mov dword [ebp - 0x5c], 0
jmp 0x100474c2
and dword [ebp - 0x14c], 0
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x78], 0
jmp 0x10047777
push 0
call dword [sym.imp.KERNEL32.dll_ResetEvent]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret