Function at 0x1003faed
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1007a1e8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x664
push esi
and dword [ebp - 0x39c], 0
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x24c], 0x72ca3c0b
mov dword [ebp - 0x114], 0
jmp 0x1003fb40
mov eax, dword [ebp - 0x114]
dec eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0xfffffffb
jl 0x1003fc2d
mov dword [ebp - 0x9c], 2
mov dword [ebp - 0x50c], 2
push 0x1833
lea eax, [ebp - 0x9c]
push eax
push 0
call fcn.1004311b
add esp, 0xc
mov dword [ebp - 0x9c], 7
jmp 0x1003fb90
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0x24
jg 0x1003fc28
mov dword [ebp - 0x468], 0x63e31551
mov dword [ebp - 0x500], 0xffffffff
mov dword [ebp - 0x24], 0
jmp 0x1003fbc1
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jge 0x1003fbd7
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x61c], 0xfffffffb
jmp 0x1003fbba
mov dword [ebp - 0x24], 0
jmp 0x1003fbe7
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x1003fbfd
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x590], 0xffffffff
jmp 0x1003fbe0
cmp dword [ebp - 0x468], 0
je 0x1003fc08
jmp 0x1003fc28
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x590]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x590], eax
jmp 0x1003fb83
jmp 0x1003fb33
cmp dword [ebp - 0x24c], 0
je 0x1003fc42
mov dword [ebp - 0x24c], 0x509cf13e
jmp 0x1003fc56
mov byte [ebp - 0x4f], 0
movzx eax, byte [ebp - 0x4f]
test eax, eax
je 0x1003fc56
push 0
call fcn.10042794
pop ecx
mov dword [ebp - 0xa8], 1
mov dword [ebp - 0xb4], 0
jmp 0x1003fc79
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 1
jge 0x1003fc95
mov eax, dword [ebp - 0xb4]
mov dword [ebp + eax*4 - 0x460], 0x526d2e85
jmp 0x1003fc6c
mov dword [ebp - 0xa8], 0
jmp 0x1003fcae
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 9
jg 0x1003fce7
mov dword [ebp - 0x3ac], 0x111738ab
cmp dword [ebp - 0xa8], 0
je 0x1003fccc
jmp 0x1003fce7
mov eax, dword [ebp - 0x3ac]
add eax, dword [ebp - 0x3ac]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x460], eax
jmp 0x1003fca1
mov dword [ebp - 0x40], 0xd8a87013
mov dword [ebp - 0x470], 0xd018d30
mov dword [ebp - 0x508], 3
mov dword [ebp - 0x38], 0
jmp 0x1003fd12
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 3
jge 0x1003fd28
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x3f0], 0x540d7f82
jmp 0x1003fd0b
mov dword [ebp - 0x38], 0
jmp 0x1003fd38
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 2
jge 0x1003fd4e
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x51c], 0xffffffff
jmp 0x1003fd31
mov dword [ebp - 0x40], 0
jmp 0x1003fd5e
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 2
jg 0x1003fef6
mov dword [ebp - 0x94], 0x4d073ff8
mov dword [ebp - 0x510], 0
mov dword [ebp - 0x558], 0
mov dword [ebp - 0x1c0], 0xf5eb
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x40]
mov eax, dword [ebp + eax*4 - 0x3f0]
mov dword [ebp + ecx*4 - 0x3f0], eax
mov dword [ebp - 0x94], 2
jmp 0x1003fdbd
mov eax, dword [ebp - 0x94]
dec eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0
jl 0x1003fef1
mov dword [ebp - 0x480], 0xb81eca6c
mov byte [ebp - 0x61], 0
push 0
lea eax, [ebp - 0x61]
push eax
call fcn.1003fa07
pop ecx
pop ecx
mov eax, dword [ebp - 0x94]
mov ecx, dword [ebp - 0x40]
mov ecx, dword [ebp + ecx*4 - 0x3f0]
cmp dword [ebp + eax*4 - 0x3f0], ecx
jne 0x1003fe0a
mov dword [ebp - 0x3b4], 1
jmp 0x1003fe11
and dword [ebp - 0x3b4], 0
cmp dword [ebp - 0x3b4], 0x704f3d4e
jle 0x1003fe29
mov dword [ebp - 0x3f4], 1
jmp 0x1003fe30
and dword [ebp - 0x3f4], 0
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp + eax*4 - 0x3f0]
cmp dword [ebp - 0x1c0], eax
jl 0x1003fe5b
mov dword [ebp - 0x3c8], 1
jmp 0x1003fe62
and dword [ebp - 0x3c8], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x470], eax
jle 0x1003fe79
mov dword [ebp - 0x3d0], 1
jmp 0x1003fe80
and dword [ebp - 0x3d0], 0
mov eax, dword [ebp - 0x3c8]
cmp eax, dword [ebp - 0x3d0]
je 0x1003fea0
mov eax, 0xa9ce
test eax, eax
jne 0x1003fea0
and dword [ebp - 0x3d8], 0
jmp 0x1003feaa
mov dword [ebp - 0x3d8], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x51c]
cmp dword [ebp - 0x3d8], eax
jg 0x1003fedb
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x3f0], 0
je 0x1003fedb
mov dword [ebp - 0x478], 1
jmp 0x1003fee2
and dword [ebp - 0x478], 0
mov dword [ebp - 0x480], 1
jmp 0x1003fdb0
jmp 0x1003fd57
mov byte [ebp - 0x1bc], 1
mov byte [ebp - 0x1bb], 0xd8
mov byte [ebp - 0x1ba], 0x10
mov byte [ebp - 0x1b9], 0x13
mov byte [ebp - 0x1b8], 0x47
mov byte [ebp - 0x1b7], 0xb2
mov byte [ebp - 0x1b6], 0x67
mov byte [ebp - 0x1b5], 0x4c
mov byte [ebp - 0x1b4], 0xc9
mov byte [ebp - 0x1b3], 0x79
mov byte [ebp - 0x1b2], 0xaa
mov byte [ebp - 0x1b1], 0x77
mov byte [ebp - 0x1b0], 0x54
mov byte [ebp - 0x1af], 0xfb
mov byte [ebp - 0x1ae], 0xee
mov byte [ebp - 0x1ad], 0x2e
mov byte [ebp - 0x1ac], 0xf5
mov byte [ebp - 0x1ab], 0x5f
mov byte [ebp - 0x1aa], 0x24
mov byte [ebp - 0x1a9], 0x47
mov byte [ebp - 0x1a8], 0x70
mov byte [ebp - 0x1a7], 0x4b
mov byte [ebp - 0x1a6], 0xc5
mov byte [ebp - 0x1a5], 0x3a
mov byte [ebp - 0x1a4], 0xdf
mov byte [ebp - 0x1a3], 0x27
mov byte [ebp - 0x1a2], 0xb5
mov byte [ebp - 0x1a1], 0x5f
mov byte [ebp - 0x1a0], 8
mov byte [ebp - 0x19f], 0xf6
mov byte [ebp - 0x19e], 0x36
mov byte [ebp - 0x19d], 0xca
mov byte [ebp - 0x19c], 0xdc
mov byte [ebp - 0x19b], 0x96
mov byte [ebp - 0x19a], 0x3f
mov byte [ebp - 0x199], 0x9f
mov byte [ebp - 0x198], 0x11
mov byte [ebp - 0x197], 0xe4
mov byte [ebp - 0x196], 0x9e
mov byte [ebp - 0x195], 0x85
mov byte [ebp - 0x194], 0xbd
mov byte [ebp - 0x193], 0x11
mov byte [ebp - 0x192], 0x8d
mov byte [ebp - 0x191], 0x2b
mov byte [ebp - 0x190], 0x7e
mov byte [ebp - 0x18f], 0x9f
mov byte [ebp - 0x18e], 0xc4
mov byte [ebp - 0x18d], 0xe5
mov byte [ebp - 0x18c], 0x11
mov byte [ebp - 0x18b], 0xd6
mov byte [ebp - 0x18a], 0x30
mov byte [ebp - 0x189], 0xea
mov byte [ebp - 0x188], 0x46
mov byte [ebp - 0x187], 0xb3
mov byte [ebp - 0x186], 0x37
mov byte [ebp - 0x185], 0x2c
mov byte [ebp - 0x184], 0x70
mov byte [ebp - 0x183], 8
mov byte [ebp - 0x182], 0x61
mov byte [ebp - 0x181], 0x59
mov byte [ebp - 0x180], 0xfc
mov byte [ebp - 0x17f], 0xe3
mov byte [ebp - 0x17e], 0x33
mov byte [ebp - 0x17d], 0x8b
mov byte [ebp - 0x17c], 0xed
mov byte [ebp - 0x17b], 0x7e
mov byte [ebp - 0x17a], 0
mov byte [ebp - 0x179], 0x9b
mov byte [ebp - 0x178], 0xfe
mov byte [ebp - 0x177], 0xa5
mov byte [ebp - 0x176], 0xac
mov byte [ebp - 0x175], 0x30
mov byte [ebp - 0x174], 0xfa
mov byte [ebp - 0x173], 0x78
mov byte [ebp - 0x172], 0x8c
mov byte [ebp - 0x171], 0xf2
mov byte [ebp - 0x170], 7
mov byte [ebp - 0x16f], 0x19
mov byte [ebp - 0x16e], 0x11
mov byte [ebp - 0x16d], 0x1a
mov byte [ebp - 0x16c], 0xf
mov byte [ebp - 0x16b], 2
mov byte [ebp - 0x16a], 0x18
mov byte [ebp - 0x169], 9
mov byte [ebp - 0x168], 0xa
mov byte [ebp - 0x167], 0x12
mov byte [ebp - 0x166], 5
mov byte [ebp - 0x165], 0xd
mov byte [ebp - 0x164], 0x17
mov byte [ebp - 0x163], 0x1e
mov byte [ebp - 0x162], 0xe
mov byte [ebp - 0x161], 0x17
mov byte [ebp - 0x160], 0xc
mov byte [ebp - 0x15f], 2
mov byte [ebp - 0x15e], 0xb
mov byte [ebp - 0x15d], 1
mov byte [ebp - 0x15c], 8
mov byte [ebp - 0x15b], 5
mov byte [ebp - 0x15a], 4
mov byte [ebp - 0x159], 0xc
mov byte [ebp - 0x158], 0x14
mov byte [ebp - 0x157], 0x10
mov byte [ebp - 0x156], 9
mov byte [ebp - 0x155], 0x1f
mov byte [ebp - 0x154], 0x16
mov byte [ebp - 0x153], 0x1d
mov byte [ebp - 0x152], 0x15
mov byte [ebp - 0x151], 1
mov byte [ebp - 0x150], 3
mov byte [ebp - 0x14f], 0x12
mov byte [ebp - 0x14e], 0x12
mov byte [ebp - 0x14d], 0x17
mov byte [ebp - 0x14c], 0x13
mov byte [ebp - 0x14b], 7
mov byte [ebp - 0x14a], 2
mov byte [ebp - 0x149], 0x17
mov byte [ebp - 0x148], 0xd
mov byte [ebp - 0x147], 0xd
mov byte [ebp - 0x146], 6
mov byte [ebp - 0x145], 9
mov byte [ebp - 0x144], 0
mov byte [ebp - 0x143], 6
mov byte [ebp - 0x142], 0x19
mov byte [ebp - 0x141], 0x1b
mov dword [ebp - 0x74], 0x5b9b55bb
mov dword [ebp - 0xec], 0xa0bdbdf7
mov dword [ebp - 0x1c4], 0xa83f
mov dword [ebp - 0x490], 0
mov dword [ebp - 0x4c4], 0xffffffff
mov dword [ebp - 0x4c0], 0xffffffff
mov dword [ebp - 0x4bc], 0xffffffff
mov dword [ebp - 0x4b8], 0xffffffff
mov dword [ebp - 0x3cc], 0xffffffff
mov dword [ebp - 0xe4], 0
jmp 0x100402ca
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 2
jge 0x100402e6
mov eax, dword [ebp - 0xe4]
mov dword [ebp + eax*4 - 0x120], 0x7689
jmp 0x100402bd
mov dword [ebp - 0x74], 0
jmp 0x100402f6
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0x1a
jge 0x10040626
mov dword [ebp - 0x1c], 8
mov dword [ebp - 0x3fc], 0xebe6634
mov dword [ebp - 0xbc], 0
jmp 0x1004032a
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 2
jge 0x10040346
mov eax, dword [ebp - 0xbc]
mov dword [ebp + eax*4 - 0x140], 0x9fe9a5a1
jmp 0x1004031d
mov dword [ebp - 0x1c], 1
jmp 0x10040356
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jl 0x10040381
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x120]
mov dword [ebp + ecx*4 - 0x120], eax
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x120], 0
je 0x1004037f
jmp 0x1004034f
jmp 0x1004034f
mov eax, dword [ebp - 0xec]
dec eax
mov dword [ebp - 0xec], eax
mov eax, dword [ebp - 0xec]
imul eax, dword [ebp - 0x74]
test eax, eax
jne 0x100405a8
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x140]
cmp dword [ebp + eax - 0x120], ecx
jge 0x100403c8
mov dword [ebp - 0x3e0], 1
jmp 0x100403cf
and dword [ebp - 0x3e0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x120]
cmp eax, dword [ebp - 0x3e0]
jge 0x100403f0
mov dword [ebp - 0x488], 1
jmp 0x100403f7
and dword [ebp - 0x488], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x140]
mov dword [ebp - 0x560], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x120], 0
je 0x1004042a
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x120], 0
jne 0x1004043c
cmp dword [ebp - 0xec], 0
jne 0x1004043c
and dword [ebp - 0x3a8], 0
jmp 0x10040446
mov dword [ebp - 0x3a8], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x140]
cmp dword [ebp - 0x3a8], eax
jg 0x10040467
mov dword [ebp - 0x3a4], 1
jmp 0x1004046e
and dword [ebp - 0x3a4], 0
imul eax, dword [ebp - 0x3a4], 0xfb29
cmp eax, dword [ebp - 0x1c]
jg 0x10040489
mov dword [ebp - 0x208], 1
jmp 0x10040490
and dword [ebp - 0x208], 0
mov eax, dword [ebp - 0x208]
mov dword [ebp - 0x1c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x140]
cmp dword [ebp - 0x1c], eax
jg 0x100404b7
mov dword [ebp - 0x2f8], 1
jmp 0x100404be
and dword [ebp - 0x2f8], 0
mov eax, dword [ebp - 0x1c4]
cmp dword [ebp - 0x2f8], eax
jg 0x100404d8
mov dword [ebp - 0x210], 1
jmp 0x100404df
and dword [ebp - 0x210], 0
mov eax, dword [ebp - 0x210]
sub eax, dword [ebp - 0x490]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x140]
je 0x10040506
mov dword [ebp - 0x498], 1
jmp 0x1004050d
and dword [ebp - 0x498], 0
mov eax, dword [ebp - 0x1c4]
mov dword [ebp - 0x568], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 1
mov eax, dword [ebp + eax - 0x140]
mov dword [ebp + ecx - 0x4c4], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1c]
cmp dword [ebp + eax - 0x120], ecx
jge 0x10040550
mov dword [ebp - 0x370], 1
jmp 0x10040557
and dword [ebp - 0x370], 0
cmp dword [ebp - 0x370], 0xffffffff
ja 0x1004056c
mov dword [ebp - 0x218], 1
jmp 0x10040573
and dword [ebp - 0x218], 0
mov eax, dword [ebp - 0x3fc]
cmp dword [ebp - 0x218], eax
jne 0x1004058d
mov dword [ebp - 0x300], 1
jmp 0x10040594
and dword [ebp - 0x300], 0
mov eax, dword [ebp - 0x300]
sub eax, 6
jne 0x100405a8
and dword [ebp - 0x220], 0
jmp 0x100405b2
mov dword [ebp - 0x220], 1
mov eax, dword [ebp - 0x220]
mov dword [ebp - 0x3cc], eax
mov eax, dword [ebp - 0x3cc]
mov dword [ebp - 0x570], eax
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x578], eax
mov eax, dword [ebp - 0x1c4]
mov dword [ebp - 0x580], eax
push 4
pop eax
shl eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x120]
cmp dword [ebp + eax - 0x140], ecx
jle 0x10040607
mov dword [ebp - 0x228], 1
jmp 0x1004060e
and dword [ebp - 0x228], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x228]
mov dword [ebp + eax - 0x140], ecx
jmp 0x100402ef
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x1bc]
or eax, 0xba
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x1bc]
and ecx, 0xba
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x1bc]
mov byte [ebp + ecx - 0x4f0], al
mov dword [ebp - 0x14], 2
and dword [ebp - 0xe0], 0
jmp 0x1004067c
mov eax, dword [ebp - 0x14]
inc eax
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x7c
jae 0x1004122d
mov dword [ebp - 0x308], 1
mov dword [ebp - 0x28], 0
jmp 0x100406a0
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jge 0x100406b6
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x138], 8
jmp 0x10040699
mov dword [ebp - 0x28], 0
jmp 0x100406c6
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 1
jge 0x100406dc
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x1d0], 0
jmp 0x100406bf
mov dword [ebp - 0x308], 0xfffffffa
cmp dword [ebp - 0x308], 0x44b0bf2
jle 0x100406fe
mov dword [ebp - 0x378], 1
jmp 0x10040705
and dword [ebp - 0x378], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x138]
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x138]
lea eax, [eax + ecx + 6]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x138]
jle 0x1004073b
mov dword [ebp - 0x230], 1
jmp 0x10040742
and dword [ebp - 0x230], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x138]
imul eax, dword [ebp - 0x230]
cmp dword [ebp - 0x378], eax
jge 0x10040769
mov dword [ebp - 0x238], 1
jmp 0x10040770
and dword [ebp - 0x238], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x138]
add eax, dword [ebp - 0x238]
je 0x100407a3
xor eax, eax
je 0x100407a3
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x138], 0
je 0x100407a3
mov dword [ebp - 0x310], 1
jmp 0x100407aa
and dword [ebp - 0x310], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x138]
cmp dword [ebp - 0x310], eax
jge 0x100407cb
mov dword [ebp - 0x240], 1
jmp 0x100407d2
and dword [ebp - 0x240], 0
cmp dword [ebp - 0x240], 0x582ba8d7
jge 0x100407ea
mov dword [ebp - 0x3b0], 1
jmp 0x100407f1
and dword [ebp - 0x3b0], 0
push 4
pop eax
shl eax, 1
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x138]
sub ecx, dword [ebp - 0x3b0]
cmp dword [ebp + eax - 0x138], ecx
jle 0x1004081d
mov dword [ebp - 0x248], 1
jmp 0x10040824
and dword [ebp - 0x248], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x138]
cmp dword [ebp - 0x248], eax
jl 0x10040844
mov dword [ebp - 0x318], 1
jmp 0x1004084b
and dword [ebp - 0x318], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x138]
cmp dword [ebp - 0x318], eax
jg 0x1004086c
mov dword [ebp - 0x1c8], 1
jmp 0x10040873
and dword [ebp - 0x1c8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1c8]
mov dword [ebp + eax - 0x1d0], ecx
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x138]
add eax, dword [ebp - 0x1c8]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x138]
jg 0x100408b3
mov dword [ebp - 0x250], 1
jmp 0x100408ba
and dword [ebp - 0x250], 0
mov eax, dword [ebp - 0x250]
add eax, 0x6937
jne 0x100408e0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1d0], 0
jne 0x100408e0
and dword [ebp - 0x380], 0
jmp 0x100408ea
mov dword [ebp - 0x380], 1
cmp dword [ebp - 0x380], 0x2c7a
jl 0x10040921
mov eax, 0x4284
test eax, eax
je 0x10040921
mov byte [ebp - 0x6b], 0
movzx eax, byte [ebp - 0x6b]
test eax, eax
je 0x1004091f
push 0x4cb1
push 0x69ef
push 0
call fcn.10042972
add esp, 0xc
jmp 0x10040958
mov dword [ebp - 0x458], 0xd3b5
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1d0]
mov dword [ebp - 0x458], eax
mov byte [ebp - 0x69], 0
movzx eax, byte [ebp - 0x69]
test eax, eax
je 0x10040958
push 0x52bb
push 0
call fcn.1003faa6
pop ecx
pop ecx
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x1bc]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x14], eax
jne 0x10040d4a
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0x1bc]
inc eax
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0x4c], 1
mov dword [ebp - 0xd0], 0
mov dword [ebp - 0x78], 4
mov dword [ebp - 0xc4], 0
jmp 0x100409b6
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 2
jge 0x100409d2
mov eax, dword [ebp - 0xc4]
mov dword [ebp + eax*4 - 0x3c0], 0x9ac78948
jmp 0x100409a9
mov dword [ebp - 0x4c], 1
jmp 0x100409e2
mov eax, dword [ebp - 0x4c]
dec eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jl 0x10040c5c
mov dword [ebp - 0x80], 1
mov dword [ebp - 0xf4], 0
jmp 0x10040a0c
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 1
jge 0x10040a28
mov eax, dword [ebp - 0xf4]
mov dword [ebp + eax*4 - 0x1d8], 0xfffffff7
jmp 0x100409ff
mov byte [ebp - 0x4e], 0
push 0
lea eax, [ebp - 0x4e]
push eax
call fcn.1003fa43
pop ecx
pop ecx
mov eax, dword [ebp - 0x4c]
cmp dword [ebp + eax*4 - 0x3c0], 0xc196
je 0x10040a55
mov dword [ebp - 0x270], 1
jmp 0x10040a5c
and dword [ebp - 0x270], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x4c]
mov ecx, dword [ebp + ecx*4 - 0x3c0]
cmp dword [ebp + eax - 0x1d8], ecx
jge 0x10040a81
mov dword [ebp - 0x45c], 1
jmp 0x10040a88
and dword [ebp - 0x45c], 0
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x5b8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1d8]
mov dword [ebp - 0x258], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x258]
mov dword [ebp + eax - 0x1d8], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3c0]
cmp dword [ebp - 0x258], eax
jge 0x10040ad8
mov dword [ebp - 0x320], 1
jmp 0x10040adf
and dword [ebp - 0x320], 0
cmp dword [ebp - 0x320], 0x272b
jge 0x10040af7
mov dword [ebp - 0x260], 1
jmp 0x10040afe
and dword [ebp - 0x260], 0
cmp dword [ebp - 0x260], 0xfffffff8
jbe 0x10040b13
mov dword [ebp - 0x3dc], 1
jmp 0x10040b1a
and dword [ebp - 0x3dc], 0
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0x3dc], eax
je 0x10040b31
mov dword [ebp - 0x268], 1
jmp 0x10040b38
and dword [ebp - 0x268], 0
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp + eax*4 - 0x3c0]
cmp dword [ebp - 0x268], eax
jg 0x10040b56
mov dword [ebp - 0x328], 1
jmp 0x10040b5d
and dword [ebp - 0x328], 0
cmp dword [ebp - 0x328], 0
je 0x10040b72
mov dword [ebp - 0x404], 1
jmp 0x10040b79
and dword [ebp - 0x404], 0
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x5c0], eax
mov dword [ebp - 0xd0], 0xffffffff
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0x5ac], eax
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp + eax*4 - 0x3c0]
mov dword [ebp - 0x534], eax
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0x270], eax
jle 0x10040be3
mov byte [ebp - 0x50], 0
movzx eax, byte [ebp - 0x50]
test eax, eax
je 0x10040bd3
push 0x3387
push 0
push 0x649b
call fcn.10043537
add esp, 0xc
cmp dword [ebp - 0xd0], 0
je 0x10040be1
jmp 0x100409db
jmp 0x10040c57
mov dword [ebp - 0x104], 0
jmp 0x10040bfc
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 2
jge 0x10040c18
mov eax, dword [ebp - 0x104]
mov dword [ebp + eax*4 - 0x528], 0x7312b948
jmp 0x10040bef
mov dword [ebp - 0x80], 0
jmp 0x10040c28
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 1
jg 0x10040c43
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x528]
mov dword [ebp - 0xd0], eax
jmp 0x10040c21
mov byte [ebp - 0x6c], 0
movzx eax, byte [ebp - 0x6c]
test eax, eax
je 0x10040c57
push 0
call fcn.100432ee
pop ecx
jmp 0x100409db
mov dword [ebp - 0x78], 0
jmp 0x10040c6c
mov eax, dword [ebp - 0x78]
dec eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0xffffffeb
jne 0x10040c8e
mov byte [ebp - 0x4d], 0
movzx eax, byte [ebp - 0x4d]
test eax, eax
je 0x10040c8c
push 1
push 0x3552
call fcn.1003fa07
pop ecx
pop ecx
jmp 0x10040c65
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0x1bc]
mov ecx, dword [ebp - 0x14]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0xa4], 0x68ec0ae9
mov dword [ebp - 0x464], 0x885d
mov dword [ebp - 0x40c], 0xdb84c6a3
push 1
push 0x79e2
call fcn.1003fa43
pop ecx
pop ecx
mov dword [ebp - 0xa4], 0
jmp 0x10040ce8
mov eax, dword [ebp - 0xa4]
dec eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0xfffffff7
jge 0x10040d45
mov dword [ebp - 0x414], 0x76eea530
mov dword [ebp - 0x4ac], 0x9a7b445a
mov dword [ebp - 0x48c], 0
push 0
lea eax, [ebp - 0x48c]
push eax
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0x40c]
push eax
lea eax, [ebp - 0x464]
push eax
lea eax, [ebp - 0x414]
push eax
lea eax, [ebp - 0x4ac]
push eax
call fcn.100427e1
add esp, 0x1c
jmp 0x10040cdb
jmp 0x10040674
mov dword [ebp - 0x1e0], 5
mov dword [ebp - 0x388], 0xc8fc558b
mov dword [ebp - 0x278], 0xedad
mov dword [ebp - 0xfc], 0
jmp 0x10040d81
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 2
jge 0x10040d9d
mov eax, dword [ebp - 0xfc]
mov dword [ebp + eax*4 - 0x624], 0
jmp 0x10040d74
cmp dword [ebp - 0x1e0], 0
jne 0x10040dad
push 9
pop eax
test eax, eax
je 0x10040e04
mov dword [ebp - 0x41c], 0xfffffffb
lea eax, [ebp - 0x1e0]
push eax
lea eax, [ebp - 0x388]
push eax
push 0x7581
push 0
push 0x4f7f
call fcn.10042b81
add esp, 0x14
lea eax, [ebp - 0x41c]
push eax
push 0x695e
lea eax, [ebp - 0x388]
push eax
push 0
push 0x31b4
lea eax, [ebp - 0x1e0]
push eax
call fcn.10042b0c
add esp, 0x18
jmp 0x10040e6e
mov dword [ebp - 0x4fc], 0x69
mov dword [ebp - 0x5c8], 0xa86ba47c
mov dword [ebp - 0xd8], 0
jmp 0x10040e31
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 3
jge 0x10040e4d
mov eax, dword [ebp - 0xd8]
mov dword [ebp + eax*4 - 0x658], 0xfffffff8
jmp 0x10040e24
mov eax, dword [ebp - 0x278]
inc eax
mov dword [ebp - 0x278], eax
mov byte [ebp - 0x59], 0
movzx eax, byte [ebp - 0x59]
test eax, eax
je 0x10040e6e
push 0
call dword [sym.imp.USER32.dll_CreateIconIndirect]
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0x1bb]
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0xe0]
movzx ecx, byte [ebp + ecx - 0x1be]
movsx ecx, byte [ebp + ecx - 0x4f0]
or eax, ecx
mov ecx, dword [ebp - 0x14]
movzx ecx, byte [ebp + ecx - 0x1bb]
mov edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0xe0]
movzx edx, byte [ebp + edx - 0x1be]
movsx edx, byte [ebp + edx - 0x4f0]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x14]
movzx ecx, byte [ebp + ecx - 0x1bc]
mov byte [ebp + ecx - 0x4f0], al
mov dword [ebp - 0x504], 0x2384b6d7
mov dword [ebp - 0x57c], 9
mov dword [ebp - 0x434], 0
mov dword [ebp - 0x2c], 0
jmp 0x10040efc
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x10040f12
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x110], 1
jmp 0x10040ef5
mov dword [ebp - 0x2c], 0
jmp 0x10040f22
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jge 0x10040f38
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x4f4], 0xffffffff
jmp 0x10040f1b
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x110], 0
jmp 0x10040f63
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x110]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x110], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x110], 0xfffffff7
je 0x1004120f
mov dword [ebp - 0x58], 0xe95aad85
mov dword [ebp - 0x424], 0xffffffff
mov dword [ebp - 0x494], 0xbecc
mov dword [ebp - 0x42c], 0xc6dcff2f
mov dword [ebp - 0x474], 1
mov dword [ebp - 0x530], 0x4d2570d9
mov dword [ebp - 0x514], 0xbab1f356
mov dword [ebp - 0x538], 0
mov dword [ebp - 0x3d4], 1
mov dword [ebp - 0x100], 0
jmp 0x10040fe6
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 2
jge 0x10041002
mov eax, dword [ebp - 0x100]
mov dword [ebp + eax*4 - 0x64c], 0xfffffffb
jmp 0x10040fd9
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x110]
mov dword [ebp - 0x520], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x58]
cmp dword [ebp + eax - 0x110], ecx
je 0x10041033
mov dword [ebp - 0x330], 1
jmp 0x1004103a
and dword [ebp - 0x330], 0
mov eax, dword [ebp - 0x330]
add eax, 0x4e4fb1d0
je 0x1004104c
xor eax, eax
inc eax
jne 0x10041064
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x110], 0
jne 0x10041064
and dword [ebp - 0x280], 0
jmp 0x1004106e
mov dword [ebp - 0x280], 1
cmp dword [ebp - 0x280], 0xfffa
ja 0x10041093
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x110], 0
jne 0x10041093
and dword [ebp - 0x3b8], 0
jmp 0x1004109d
mov dword [ebp - 0x3b8], 1
cmp dword [ebp - 0x3b8], 0
jne 0x100410b2
mov dword [ebp - 0x288], 1
jmp 0x100410b9
and dword [ebp - 0x288], 0
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x288], eax
jne 0x100410d0
mov dword [ebp - 0x338], 1
jmp 0x100410d7
and dword [ebp - 0x338], 0
mov eax, dword [ebp - 0x58]
add eax, dword [ebp - 0x338]
cmp dword [ebp - 0x58], eax
jne 0x100410f1
mov dword [ebp - 0x290], 1
jmp 0x100410f8
and dword [ebp - 0x290], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x110]
cmp dword [ebp - 0x290], eax
jle 0x10041118
mov dword [ebp - 0x390], 1
jmp 0x1004111f
and dword [ebp - 0x390], 0
mov eax, dword [ebp - 0x58]
imul eax, dword [ebp - 0x390]
cmp eax, 0x9c93
jle 0x1004113c
mov dword [ebp - 0x298], 1
jmp 0x10041143
and dword [ebp - 0x298], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x110]
imul eax, dword [ebp - 0x298]
cmp eax, dword [ebp - 0x58]
jne 0x10041167
mov dword [ebp - 0x46c], 1
jmp 0x1004116e
and dword [ebp - 0x46c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x110]
mov dword [ebp - 0x540], eax
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x52c], eax
mov eax, dword [ebp - 0x424]
mov dword [ebp - 0x548], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x110], 0xcdee
jne 0x100411b4
mov dword [ebp - 0x340], 1
jmp 0x100411bb
and dword [ebp - 0x340], 0
cmp dword [ebp - 0x340], 0xffffffff
jge 0x100411d0
mov dword [ebp - 0x2a0], 1
jmp 0x100411d7
and dword [ebp - 0x2a0], 0
mov eax, dword [ebp - 0x494]
imul eax, dword [ebp - 0x2a0]
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x110]
add eax, dword [ebp - 0x42c]
mov dword [ebp - 0x474], eax
mov eax, dword [ebp - 0x3d4]
dec eax
mov dword [ebp - 0x3d4], eax
jmp 0x10040f4a
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x434]
mov dword [ebp + eax - 0x110], ecx
and dword [ebp - 0xe0], 0
jmp 0x10040674
mov dword [ebp - 0x20], 0x4e064826
mov dword [ebp - 0x60], 0xfff8
mov dword [ebp - 0x30], 0
jmp 0x1004124b
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 1
jge 0x1004125e
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x68], 0xfaafe30f
jmp 0x10041244
mov dword [ebp - 0x30], 0
jmp 0x1004126e
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 4
jge 0x10041284
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x644], 0
jmp 0x10041267
mov dword [ebp - 0x20], 0
jmp 0x10041294
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 9
jg 0x100414f2
mov dword [ebp - 0x398], 0xfffffffb
mov dword [ebp - 0x43c], 0xffffffff
mov dword [ebp - 0x118], 0
jmp 0x100412cb
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 4
jge 0x100412e7
mov eax, dword [ebp - 0x118]
mov dword [ebp + eax*4 - 0x4d4], 0xfffc
jmp 0x100412be
cmp dword [ebp - 0x20], 0
jne 0x10041306
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x4d4], 0
jne 0x10041306
and dword [ebp - 0x1e8], 0
jmp 0x10041310
mov dword [ebp - 0x1e8], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1e8]
mov dword [ebp + eax - 0x68], ecx
cmp dword [ebp - 0x1e8], 0
je 0x100414be
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x4d4]
mov dword [ebp - 0x550], eax
mov eax, 0x1aa12afd
sub eax, 0xa9f4f9a0
jne 0x1004135e
mov eax, 0x3acb6d64
test eax, eax
jne 0x1004135e
and dword [ebp - 0x2a8], 0
jmp 0x10041368
mov dword [ebp - 0x2a8], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x68]
cmp dword [ebp - 0x2a8], eax
jg 0x10041386
mov dword [ebp - 0x348], 1
jmp 0x1004138d
and dword [ebp - 0x348], 0
cmp dword [ebp - 0x348], 0xfffffff9
je 0x100413a2
mov dword [ebp - 0x2b0], 1
jmp 0x100413a9
and dword [ebp - 0x2b0], 0
mov eax, dword [ebp - 0x2b0]
mov dword [ebp - 0x398], eax
cmp dword [ebp - 0x398], 0
jne 0x100413c2
cmp dword [ebp - 0x20], 0
cmp dword [ebp - 0x20], 0
jne 0x100413e1
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x4d4], 0
jne 0x100413e1
and dword [ebp - 0x4b4], 0
jmp 0x100413eb
mov dword [ebp - 0x4b4], 1
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x4d4]
mov dword [ebp - 0x5b4], eax
mov eax, 0x1f9e6a01
sub eax, dword [ebp - 0x20]
mov dword [ebp - 0x2b8], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2b8]
mov dword [ebp + eax - 0x68], ecx
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x2b8]
cmp eax, dword [ebp - 0x60]
jge 0x10041437
mov dword [ebp - 0x350], 1
jmp 0x1004143e
and dword [ebp - 0x350], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x350], eax
jl 0x10041455
mov dword [ebp - 0x2c0], 1
jmp 0x1004145c
and dword [ebp - 0x2c0], 0
cmp dword [ebp - 0x2c0], 0x77fe
jne 0x10041478
xor eax, eax
je 0x10041478
mov dword [ebp - 0x3c4], 1
jmp 0x1004147f
and dword [ebp - 0x3c4], 0
cmp dword [ebp - 0x3c4], 0
jne 0x10041495
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x68], 0
je 0x100414ae
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x68], 0
je 0x100414ae
mov dword [ebp - 0x2c8], 1
jmp 0x100414b5
and dword [ebp - 0x2c8], 0
cmp dword [ebp - 0x2c8], 1
jg 0x100414d7
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x644], 0
jne 0x100414d7
and dword [ebp - 0x358], 0
jmp 0x100414e1
mov dword [ebp - 0x358], 1
mov eax, dword [ebp - 0x358]
mov dword [ebp - 0x43c], eax
jmp 0x1004128d
mov dword [ebp - 0x60], 0
jmp 0x10041502
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0
jg 0x10041564
mov dword [ebp - 0x2d0], 1
mov dword [ebp - 0xe8], 0
jmp 0x1004152b
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 2
jge 0x10041547
mov eax, dword [ebp - 0xe8]
mov dword [ebp + eax*4 - 0x62c], 0xfffffffc
jmp 0x1004151e
mov eax, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x60]
mov eax, dword [ebp + eax*4 - 0x68]
mov dword [ebp + ecx*4 - 0x68], eax
mov eax, dword [ebp - 0x2d0]
inc eax
mov dword [ebp - 0x2d0], eax
jmp 0x100414fb
xor eax, eax
inc eax
imul eax, eax, 0x1a
mov byte [ebp + eax - 0x4f0], 0
mov dword [ebp - 0x8c], 1
mov dword [ebp - 0x2d8], 0
mov dword [ebp - 0xf8], 0x7e4a9061
mov dword [ebp - 0x34], 0
jmp 0x100415a0
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 3
jge 0x100415b6
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x4a8], 0xfffffffd
jmp 0x10041599
mov dword [ebp - 0x34], 0
jmp 0x100415c6
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 4
jge 0x100415dc
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x5f0], 2
jmp 0x100415bf
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x53c], eax
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x584], eax
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x544], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x4a8]
sub eax, dword [ebp - 0xf8]
imul eax, dword [ebp - 0xf8]
cmp eax, 0xffffffff
jne 0x1004162b
mov dword [ebp - 0x3a0], 1
jmp 0x10041632
and dword [ebp - 0x3a0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x4a8]
cmp dword [ebp - 0x3a0], eax
je 0x10041653
mov dword [ebp - 0x360], 1
jmp 0x1004165a
and dword [ebp - 0x360], 0
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x2d8], eax
mov eax, dword [ebp - 0x2d8]
mov ecx, dword [ebp - 0x8c]
add ecx, dword [ebp - 0x360]
imul eax, ecx
push 4
pop ecx
shl ecx, 0
imul eax, dword [ebp + ecx - 0x4a8]
cmp eax, dword [ebp - 0x8c]
jg 0x100416a3
cmp dword [ebp - 0xf8], 0
jne 0x100416a3
and dword [ebp - 0x2e0], 0
jmp 0x100416ad
mov dword [ebp - 0x2e0], 1
imul eax, dword [ebp - 0x2e0], 0
test eax, eax
je 0x100416d4
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x4a8], 0
je 0x100416d4
mov dword [ebp - 0x3e4], 1
jmp 0x100416db
and dword [ebp - 0x3e4], 0
cmp dword [ebp - 0x3e4], 0x974ca779
jne 0x100416f3
mov dword [ebp - 0x2e8], 1
jmp 0x100416fa
and dword [ebp - 0x2e8], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x2e8]
mov dword [ebp + eax - 0x5f0], ecx
push 4
pop eax
shl eax, 1
push 4
pop ecx
imul ecx, ecx, 3
mov eax, dword [ebp + eax - 0x4a8]
mov dword [ebp + ecx - 0x5f0], eax
lea eax, [ebp - 0x4f0]
push eax
lea ecx, [ebp - 0x614]
call fcn.1002402a
and dword [ebp - 4], 0
mov dword [ebp - 0x10], 0xfffffffe
mov dword [ebp - 0x49c], 0x5a0349b8
mov dword [ebp - 0x3c], 0
jmp 0x1004175d
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 3
jge 0x10041773
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x12c], 0xdc85f70a
jmp 0x10041756
mov dword [ebp - 0x3c], 0
jmp 0x10041783
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 1
jge 0x10041799
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x444], 0x55d5df5b
jmp 0x1004177c
mov dword [ebp - 0x10], 0
jmp 0x100417a9
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jg 0x10041af4
mov dword [ebp - 0x1dc], 0x762406c4
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x12c], 0
jne 0x100417d6
mov dword [ebp - 0x368], 1
jmp 0x100417dd
and dword [ebp - 0x368], 0
cmp dword [ebp - 0x368], 1
jge 0x100417f2
mov dword [ebp - 0x2f0], 1
jmp 0x100417f9
and dword [ebp - 0x2f0], 0
cmp dword [ebp - 0x2f0], 0
jbe 0x1004180e
mov dword [ebp - 0x200], 1
jmp 0x10041815
and dword [ebp - 0x200], 0
cmp dword [ebp - 0x200], 0x4d64
jle 0x1004182d
mov dword [ebp - 0x204], 1
jmp 0x10041834
and dword [ebp - 0x204], 0
mov eax, 0xb78a
sub eax, dword [ebp - 0x204]
mov ecx, dword [ebp - 0x10]
cmp eax, dword [ebp + ecx*4 - 0x12c]
jne 0x10041857
mov dword [ebp - 0x20c], 1
jmp 0x1004185e
and dword [ebp - 0x20c], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x12c]
cmp dword [ebp - 0x20c], eax
jle 0x1004187c
mov dword [ebp - 0x214], 1
jmp 0x10041883
and dword [ebp - 0x214], 0
cmp dword [ebp - 0x214], 0x4363
jle 0x100418a8
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x12c], 0
je 0x100418a8
mov dword [ebp - 0x47c], 1
jmp 0x100418af
and dword [ebp - 0x47c], 0
cmp dword [ebp - 0x10], 0x2146
jge 0x100418c4
mov dword [ebp - 0x21c], 1
jmp 0x100418cb
and dword [ebp - 0x21c], 0
cmp dword [ebp - 0x21c], 0xfffffff6
je 0x100418ea
mov eax, 0xfd03
test eax, eax
jne 0x100418ea
xor eax, eax
jne 0x100418ea
and dword [ebp - 0x224], 0
jmp 0x100418f4
mov dword [ebp - 0x224], 1
mov eax, dword [ebp - 0x224]
add eax, 4
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x12c]
jg 0x10041924
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x12c], 0
jne 0x10041924
and dword [ebp - 0x22c], 0
jmp 0x1004192e
mov dword [ebp - 0x22c], 1
cmp dword [ebp - 0x22c], 6
jge 0x10041943
mov dword [ebp - 0x234], 1
jmp 0x1004194a
and dword [ebp - 0x234], 0
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x234]
sub ecx, dword [ebp + eax*4 - 0x12c]
cmp ecx, 0x2e712c51
jle 0x10041a4c
mov dword [ebp - 0x264], 0x6fe18bd2
push 0
call fcn.10042c36
pop ecx
mov eax, 0x6c0f
test eax, eax
je 0x100419a0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x5c4], eax
xor eax, eax
sub eax, dword [ebp - 0x264]
je 0x100419a0
mov dword [ebp - 0x23c], 1
jmp 0x100419a7
and dword [ebp - 0x23c], 0
mov eax, 0x50e8
sub eax, dword [ebp - 0x23c]
imul eax, dword [ebp - 0x1dc]
test eax, eax
jne 0x100419cf
mov eax, 0xfff6
test eax, eax
jne 0x100419cf
and dword [ebp - 0x244], 0
jmp 0x100419d9
mov dword [ebp - 0x244], 1
cmp dword [ebp - 0x244], 0xfffffff8
jge 0x100419ee
mov dword [ebp - 0x1fc], 1
jmp 0x100419f5
and dword [ebp - 0x1fc], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x12c]
mov dword [ebp - 0x254], eax
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x254]
mov dword [ebp + eax*4 - 0x12c], ecx
mov eax, dword [ebp - 0x1fc]
add eax, 0x7aad52ec
cmp dword [ebp - 0x254], eax
jge 0x10041a34
mov dword [ebp - 0x25c], 1
jmp 0x10041a3b
and dword [ebp - 0x25c], 0
push 0xfffffffffffffff9
pop eax
sub eax, dword [ebp - 0x25c]
mov dword [ebp - 0x264], eax
jmp 0x10041ac7
mov dword [ebp - 0x26c], 0xffffffff
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x12c]
mov dword [ebp - 0x54c], eax
mov eax, dword [ebp - 0x26c]
mov dword [ebp - 0x594], eax
mov eax, dword [ebp - 0x10]
push 4
pop ecx
shl ecx, 0
mov eax, dword [ebp + eax*4 - 0x12c]
mov dword [ebp + ecx - 0x12c], eax
mov eax, dword [ebp - 0x26c]
mov dword [ebp - 0x274], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x274]
mov dword [ebp + eax - 0x444], ecx
mov eax, dword [ebp - 0x274]
mov dword [ebp - 0x49c], eax
mov byte [ebp - 0x6d], 0
lea eax, [ebp - 0x6d]
push eax
push 1
call fcn.1003faa6
pop ecx
pop ecx
mov eax, dword [ebp - 0x1dc]
mov dword [ebp - 0x27c], eax
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x27c]
mov dword [ebp + eax*4 - 0x12c], ecx
mov eax, dword [ebp - 0x27c]
mov dword [ebp - 0x1dc], eax
jmp 0x100417a2
and dword [ebp - 0xd4], 0
jmp 0x10041b0a
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0x1b
jae 0x10041efe
mov dword [ebp - 0x7c], 0x831713b9
mov dword [ebp - 0x44c], 0
mov dword [ebp - 0x1cc], 4
mov dword [ebp - 0xf0], 0
jmp 0x10041b4b
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 1
jge 0x10041b67
mov eax, dword [ebp - 0xf0]
mov dword [ebp + eax*4 - 0x2b4], 0xfffffff8
jmp 0x10041b3e
mov dword [ebp - 0x7c], 0
jmp 0x10041b77
mov eax, dword [ebp - 0x7c]
dec eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0xffffffea
jle 0x10041eeb
mov dword [ebp - 0xac], 0x88e1b61b
mov dword [ebp - 0x284], 0xffffffff
mov dword [ebp - 0xc8], 0xfffffffb
mov dword [ebp - 0xcc], 7
mov dword [ebp - 0x1ec], 0xb504dbf0
mov dword [ebp - 0x454], 0x3ad
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0x554], eax
mov dword [ebp - 0x284], 0
cmp dword [ebp - 0x284], 0
jne 0x10041be8
mov dword [ebp - 0x28c], 1
jmp 0x10041bef
and dword [ebp - 0x28c], 0
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x5bc], eax
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0xc8], eax
mov eax, dword [ebp - 0xc8]
imul eax, dword [ebp - 0xac]
imul eax, eax, 0x421e
mov dword [ebp - 0xcc], eax
mov eax, dword [ebp - 0xcc]
cmp dword [ebp - 0x28c], eax
je 0x10041c37
mov dword [ebp - 0x294], 1
jmp 0x10041c3e
and dword [ebp - 0x294], 0
imul eax, dword [ebp - 0x294], 0x39d9
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 0
jne 0x10041c69
cmp dword [ebp - 0xc8], 0
jne 0x10041c69
and dword [ebp - 0x29c], 0
jmp 0x10041c73
mov dword [ebp - 0x29c], 1
mov eax, dword [ebp - 0xac]
imul eax, dword [ebp - 0x29c]
test eax, eax
je 0x10041c97
push 0xfffffffffffffffc
pop eax
test eax, eax
je 0x10041c97
mov dword [ebp - 0x2a4], 1
jmp 0x10041c9e
and dword [ebp - 0x2a4], 0
mov eax, dword [ebp - 0x7c]
cmp eax, dword [ebp - 0x2a4]
jge 0x10041cb5
mov dword [ebp - 0x2ac], 1
jmp 0x10041cbc
and dword [ebp - 0x2ac], 0
cmp dword [ebp - 0x2ac], 1
je 0x10041cdf
mov eax, dword [ebp - 0x1cc]
dec eax
mov dword [ebp - 0x1cc], eax
push 0
call fcn.10042e60
pop ecx
jmp 0x10041ee6
mov dword [ebp - 0x90], 6
mov dword [ebp - 0x4b0], 0x945c66b3
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xc8], eax
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x55c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2b4]
mov dword [ebp - 0x2bc], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2bc]
mov dword [ebp + eax - 0x2b4], ecx
cmp dword [ebp - 0x2bc], 0
jne 0x10041db7
cmp dword [ebp - 0x90], 0xb6ea
jne 0x10041d52
mov dword [ebp - 0x2c4], 1
jmp 0x10041d59
and dword [ebp - 0x2c4], 0
mov eax, dword [ebp - 0x44c]
cmp dword [ebp - 0x2c4], eax
jge 0x10041d73
mov dword [ebp - 0x2cc], 1
jmp 0x10041d7a
and dword [ebp - 0x2cc], 0
cmp dword [ebp - 0x2cc], 0x4c1a1fd2
jg 0x10041d92
mov dword [ebp - 0x2d4], 1
jmp 0x10041d99
and dword [ebp - 0x2d4], 0
mov eax, dword [ebp - 0x2d4]
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0
jne 0x10041db7
and dword [ebp - 0x2dc], 0
jmp 0x10041dc1
mov dword [ebp - 0x2dc], 1
cmp dword [ebp - 0x2dc], 1
je 0x10041dd6
mov dword [ebp - 0x2e4], 1
jmp 0x10041ddd
and dword [ebp - 0x2e4], 0
imul eax, dword [ebp - 0x2e4], 0xa424
imul eax, dword [ebp - 0x1cc]
cmp eax, 0x2196
jne 0x10041e01
mov dword [ebp - 0x2ec], 1
jmp 0x10041e08
and dword [ebp - 0x2ec], 0
mov eax, dword [ebp - 0x90]
cmp dword [ebp - 0x2ec], eax
jne 0x10041e22
mov dword [ebp - 0x484], 1
jmp 0x10041e29
and dword [ebp - 0x484], 0
mov eax, dword [ebp - 0x1ec]
mov dword [ebp - 0x5a4], eax
push 9
pop eax
test eax, eax
jne 0x10041e4f
push 4
pop eax
test eax, eax
jne 0x10041e4f
mov dword [ebp - 0x2f4], 1
jmp 0x10041e56
and dword [ebp - 0x2f4], 0
mov eax, dword [ebp - 0x454]
cmp dword [ebp - 0x2f4], eax
jge 0x10041e70
mov dword [ebp - 0x2fc], 1
jmp 0x10041e77
and dword [ebp - 0x2fc], 0
mov eax, dword [ebp - 0x2fc]
neg eax
jne 0x10041e8d
mov dword [ebp - 0x304], 1
jmp 0x10041e94
and dword [ebp - 0x304], 0
mov eax, dword [ebp - 0x90]
cmp dword [ebp - 0x304], eax
jne 0x10041eae
mov dword [ebp - 0x30c], 1
jmp 0x10041eb5
and dword [ebp - 0x30c], 0
xor eax, eax
sub eax, dword [ebp - 0x30c]
cmp eax, 0x20c5
jle 0x10041ed0
mov dword [ebp - 0x314], 1
jmp 0x10041ed7
and dword [ebp - 0x314], 0
mov eax, dword [ebp - 0x314]
add eax, 6
mov dword [ebp - 0x4b0], eax
jmp 0x10041b70
mov eax, dword [ebp - 0xd4]
mov byte [ebp + eax - 0x4f0], 0
jmp 0x10041afd
mov dword [ebp - 0xdc], 0
mov dword [ebp - 0x31c], 0x72ca3c0b
mov dword [ebp - 0xdc], 0
jmp 0x10041f2b
mov eax, dword [ebp - 0xdc]
dec eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0xfffffffb
jl 0x1004202c
mov dword [ebp - 0x98], 2
mov dword [ebp - 0x564], 2
push 0x2cb1
push 0
lea eax, [ebp - 0x98]
push eax
push 0x6b8b
push 0x3b55
push 0x5ad6
push 0x61b9
call fcn.10042dd9
add esp, 0x1c
mov dword [ebp - 0x98], 7
jmp 0x10041f8f
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0x24
jg 0x10042027
mov dword [ebp - 0x3f8], 0x63e31551
mov dword [ebp - 0x5a8], 0xffffffff
mov dword [ebp - 0x48], 0
jmp 0x10041fc0
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 2
jge 0x10041fd6
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x634], 0xfffffffb
jmp 0x10041fb9
mov dword [ebp - 0x48], 0
jmp 0x10041fe6
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 3
jge 0x10041ffc
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x5a0], 0xffffffff
jmp 0x10041fdf
cmp dword [ebp - 0x3f8], 0
je 0x10042007
jmp 0x10042027
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5a0]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x5a0], eax
jmp 0x10041f82
jmp 0x10041f1e
cmp dword [ebp - 0x31c], 0
je 0x1004204d
push 0x1f30
lea eax, [ebp - 0x31c]
push eax
push 0
call fcn.1004331d
add esp, 0xc
jmp 0x10042061
mov byte [ebp - 0x51], 0
movzx eax, byte [ebp - 0x51]
test eax, eax
je 0x10042061
push 0
call fcn.1004264f
pop ecx
push 0x100081ca
lea ecx, [ebp - 0x5e0]
call fcn.1002402a
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x5e0]
call fcn.100176fc
cmp eax, dword [ebp + 0xc]
je 0x100425da
mov dword [ebp - 0xa0], 0xffffffff
mov dword [ebp - 0x324], 0x992f1e5c
mov dword [ebp - 0x334], 0xa9cea445
mov dword [ebp - 0x33c], 0xdb7758b3
mov dword [ebp - 0x34c], 1
mov dword [ebp - 0x410], 0x254e
mov dword [ebp - 0x418], 0xfffffff9
mov dword [ebp - 0x44], 0
jmp 0x100420df
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 1
jge 0x100420f5
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0xb0], 0
jmp 0x100420d8
mov dword [ebp - 0x44], 0
jmp 0x10042105
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 3
jge 0x1004211b
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x5fc], 0x5ebec5ec
jmp 0x100420fe
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xb0], 0
jmp 0x10042149
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb0]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xb0], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xb0], 2
jge 0x1004218a
mov byte [ebp - 0x6a], 0
movzx eax, byte [ebp - 0x6a]
test eax, eax
je 0x10042188
push 0
push 0x3ace
push 0x223f
push 0x35ff
push 0x6bef
push 0x36a5
call fcn.100433ad
add esp, 0x18
jmp 0x1004212e
cmp dword [ebp - 0xa0], 0
jne 0x100421a7
xor eax, eax
inc eax
sub eax, dword [ebp - 0xa0]
jne 0x100421a7
and dword [ebp - 0x1d4], 0
jmp 0x100421b1
mov dword [ebp - 0x1d4], 1
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x1d4]
mov dword [ebp + eax - 0x5fc], ecx
mov eax, dword [ebp - 0x1d4]
mov dword [ebp - 0x324], eax
mov eax, dword [ebp - 0xa0]
cmp dword [ebp - 0x324], eax
jl 0x100421e9
mov dword [ebp - 0x32c], 1
jmp 0x100421f0
and dword [ebp - 0x32c], 0
mov eax, dword [ebp - 0x32c]
mov dword [ebp - 0x334], eax
mov eax, dword [ebp - 0x334]
mov dword [ebp - 0x33c], eax
cmp dword [ebp - 0x33c], 0
jne 0x1004221d
mov dword [ebp - 0x344], 1
jmp 0x10042224
and dword [ebp - 0x344], 0
cmp dword [ebp - 0x344], 0x578
jl 0x1004223c
mov dword [ebp - 0x400], 1
jmp 0x10042243
and dword [ebp - 0x400], 0
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x56c], eax
push 0xfffffffffffffff7
pop eax
add eax, 0xe2b79dc8
mov dword [ebp - 0x34c], eax
mov eax, dword [ebp - 0xa0]
cmp dword [ebp - 0x34c], eax
jg 0x10042277
mov dword [ebp - 0x408], 1
jmp 0x1004227e
and dword [ebp - 0x408], 0
mov eax, dword [ebp - 0x410]
mov dword [ebp - 0x5b0], eax
mov dword [ebp - 0x418], 0xcf59f89f
call fcn.10063077
mov esi, eax
lea ecx, [ebp - 0x614]
call fcn.100176fc
mov ecx, eax
mov eax, esi
xor edx, edx
div ecx
mov dword [ebp - 0x440], edx
mov dword [ebp - 0x18], 6
mov dword [ebp - 0x84], 1
mov dword [ebp - 0x88], 0xffff
mov dword [ebp - 0x394], 0xfffffff7
mov dword [ebp - 0xb8], 0
jmp 0x100422f2
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 3
jge 0x1004230e
mov eax, dword [ebp - 0xb8]
mov dword [ebp + eax*4 - 0x1f8], 0x540d7f82
jmp 0x100422e5
mov dword [ebp - 0x18], 0
jmp 0x1004231e
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jg 0x10042585
mov dword [ebp - 0x364], 8
mov dword [ebp - 0xc0], 1
mov dword [ebp - 0x430], 0xffffffff
cmp dword [ebp - 0x18], 0
jne 0x10042362
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x1f8], 0
jne 0x10042362
and dword [ebp - 0x354], 0
jmp 0x1004236c
mov dword [ebp - 0x354], 1
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x1f8]
add eax, dword [ebp - 0x354]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x1f8]
jge 0x10042397
mov dword [ebp - 0x35c], 1
jmp 0x1004239e
and dword [ebp - 0x35c], 0
mov eax, dword [ebp - 0x35c]
mov dword [ebp - 0x364], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x1f8]
cmp eax, dword [ebp - 0x364]
jle 0x100423c8
mov dword [ebp - 0x36c], 1
jmp 0x100423cf
and dword [ebp - 0x36c], 0
mov eax, dword [ebp - 0x36c]
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0xc0]
cmp dword [ebp - 0x84], eax
jne 0x100423f5
mov dword [ebp - 0x374], 1
jmp 0x100423fc
and dword [ebp - 0x374], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1f8]
cmp dword [ebp - 0xc0], 0x8669
jg 0x10042421
mov dword [ebp - 0x420], 1
jmp 0x10042428
and dword [ebp - 0x420], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x1f8]
mov dword [ebp - 0x574], eax
cmp dword [ebp - 0x88], 8
jg 0x1004244d
mov dword [ebp - 0x37c], 1
jmp 0x10042454
and dword [ebp - 0x37c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1f8]
imul eax, dword [ebp - 0x37c]
cmp eax, 0xf59f89f2
jae 0x1004247b
mov dword [ebp - 0x384], 1
jmp 0x10042482
and dword [ebp - 0x384], 0
cmp dword [ebp - 0x384], 0
jbe 0x10042497
mov dword [ebp - 0x38c], 1
jmp 0x1004249e
and dword [ebp - 0x38c], 0
mov eax, dword [ebp - 0xc0]
cmp dword [ebp - 0x38c], eax
jl 0x100424c2
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x1f8], 0
jne 0x100424c2
and dword [ebp - 0x1e4], 0
jmp 0x100424cc
mov dword [ebp - 0x1e4], 1
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x1e4]
mov dword [ebp + eax - 0x1f8], ecx
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x1e4], eax
jne 0x100424f5
mov dword [ebp - 0x428], 1
jmp 0x100424fc
and dword [ebp - 0x428], 0
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0x4f8], eax
mov dword [ebp - 0x394], 0xfffffffe
mov eax, dword [ebp - 0x394]
mov dword [ebp - 0x430], eax
mov dword [ebp - 0x88], 0
jmp 0x10042537
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0x32
jge 0x10042580
mov dword [ebp - 0x84], 0
jmp 0x10042559
mov eax, dword [ebp - 0x84]
dec eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0xfffffff1
je 0x1004257e
mov dword [ebp - 0x438], 0x1603
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x438]
mov dword [ebp + eax*4 - 0x1f8], ecx
jmp 0x1004254c
jmp 0x1004252a
jmp 0x10042317
push 1
push dword [ebp - 0x440]
lea eax, [ebp - 0x670]
push eax
lea ecx, [ebp - 0x614]
call fcn.1004922a
mov dword [ebp - 0x448], eax
mov eax, dword [ebp - 0x448]
mov dword [ebp - 0x450], eax
mov byte [ebp - 4], 2
push dword [ebp - 0x450]
lea ecx, [ebp - 0x5e0]
call fcn.10024059
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x670]
call fcn.10017253
jmp 0x10042075
push 0
push 0x66c2
push 0x1732
push 0x69d5
call fcn.10042f75
add esp, 0x10
lea eax, [ebp - 0x5e0]
push eax
mov ecx, dword [ebp + 8]
call fcn.100171fa
mov eax, dword [ebp - 0x39c]
or eax, 1
mov dword [ebp - 0x39c], eax
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x5e0]
call fcn.10017253
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x614]
call fcn.10017253
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret