Function at 0x100457d0
Capabilities:
Contain obfuscated stackstrings
Enumerate pe sections
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1007e08d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xe6c
push esi
and dword [ebp - 0x18], 0
movzx eax, byte [ebp + 8]
test eax, eax
je 0x1004c02f
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x80], 0xfffffffc
mov dword [ebp - 0x9e0], 0x19fa4a60
mov dword [ebp - 0xa8], 0
jmp 0x1004582f
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 2
jge 0x1004584b
mov eax, dword [ebp - 0xa8]
mov dword [ebp + eax*4 - 0x3a0], 6
jmp 0x10045822
mov dword [ebp - 0xa8], 0
jmp 0x10045864
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 3
jge 0x10045880
mov eax, dword [ebp - 0xa8]
mov dword [ebp + eax*4 - 0xd20], 0xffffffff
jmp 0x10045857
mov dword [ebp - 0x80], 1
jmp 0x10045890
mov eax, dword [ebp - 0x80]
dec eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0
jl 0x10045bc7
mov dword [ebp - 0x868], 0x1e9942c3
mov dword [ebp - 0x2c8], 0
jmp 0x100458bd
mov eax, dword [ebp - 0x2c8]
inc eax
mov dword [ebp - 0x2c8], eax
cmp dword [ebp - 0x2c8], 1
jge 0x100458d6
mov eax, dword [ebp - 0x2c8]
mov dword [ebp + eax*4 - 0x58], 0x9c17633e
jmp 0x100458b0
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x58], 1
jmp 0x100458fb
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x58]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x58], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x58], 0
jl 0x10045920
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x58]
cmp dword [ebp + eax*4 - 0x3a0], 0
je 0x1004591e
jmp 0x10045920
jmp 0x100458e6
cmp dword [ebp - 0x80], 0
jne 0x10045933
xor eax, eax
jne 0x10045933
and dword [ebp - 0x924], 0
jmp 0x1004593d
mov dword [ebp - 0x924], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3a0]
mov dword [ebp - 0xb4c], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3a0]
mov dword [ebp - 0xc28], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3a0]
mov dword [ebp - 0xcec], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x58]
sub eax, 0xa
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x58]
jl 0x1004599b
mov dword [ebp - 0x848], 1
jmp 0x100459a2
and dword [ebp - 0x848], 0
mov eax, dword [ebp - 0x80]
cmp eax, dword [ebp - 0x848]
jg 0x100459b9
mov dword [ebp - 0x86c], 1
jmp 0x100459c0
and dword [ebp - 0x86c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x58]
cmp dword [ebp - 0x86c], eax
jl 0x100459de
mov dword [ebp - 0x874], 1
jmp 0x100459e5
and dword [ebp - 0x874], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x58]
cmp dword [ebp - 0x874], eax
je 0x10045a03
mov dword [ebp - 0x87c], 1
jmp 0x10045a0a
and dword [ebp - 0x87c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x58]
cmp eax, dword [ebp - 0x87c]
jle 0x10045a28
mov dword [ebp - 0x884], 1
jmp 0x10045a2f
and dword [ebp - 0x884], 0
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0x884], eax
jne 0x10045a46
mov dword [ebp - 0x8ac], 1
jmp 0x10045a4d
and dword [ebp - 0x8ac], 0
cmp dword [ebp - 0x8ac], 0xfffffff6
jne 0x10045a62
mov dword [ebp - 0x8b4], 1
jmp 0x10045a69
and dword [ebp - 0x8b4], 0
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0x8b4], eax
je 0x10045a80
mov dword [ebp - 0x8bc], 1
jmp 0x10045a87
and dword [ebp - 0x8bc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3a0]
cmp dword [ebp - 0x8bc], eax
jl 0x10045aa8
mov dword [ebp - 0x8a0], 1
jmp 0x10045aaf
and dword [ebp - 0x8a0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x8a0]
sub ecx, dword [ebp + eax - 0x3a0]
push 4
pop eax
imul eax, eax, 0
cmp ecx, dword [ebp + eax - 0x58]
jg 0x10045ada
mov dword [ebp - 0x890], 1
jmp 0x10045ae1
and dword [ebp - 0x890], 0
mov eax, dword [ebp - 0x890]
mov dword [ebp - 0x868], eax
cmp dword [ebp - 0x868], 0x15d0
je 0x10045b1b
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3a0], 0
je 0x10045b1b
cmp dword [ebp - 0x80], 0
je 0x10045b1b
mov dword [ebp - 0x9d8], 1
jmp 0x10045b22
and dword [ebp - 0x9d8], 0
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x58]
cmp dword [ebp + eax - 0x58], ecx
jg 0x10045b44
mov dword [ebp - 0x3e4], 1
jmp 0x10045b4b
and dword [ebp - 0x3e4], 0
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0x3e4], eax
jge 0x10045b62
mov dword [ebp - 0x37c], 1
jmp 0x10045b69
and dword [ebp - 0x37c], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x37c]
mov dword [ebp + eax - 0xd20], ecx
cmp dword [ebp - 0x37c], 1
jbe 0x10045b90
mov dword [ebp - 0x744], 1
jmp 0x10045b97
and dword [ebp - 0x744], 0
cmp dword [ebp - 0x744], 0x4a08deb2
jne 0x10045baf
mov dword [ebp - 0x3ec], 1
jmp 0x10045bb6
and dword [ebp - 0x3ec], 0
mov eax, dword [ebp - 0x3ec]
mov dword [ebp - 0x9e0], eax
jmp 0x10045889
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x414], eax
mov dword [ebp - 0x9c], 0x5d6c05ba
mov dword [ebp - 0x2d8], 0xfffffffb
mov dword [ebp - 0x9c], 0
jmp 0x10045bfd
mov eax, dword [ebp - 0x9c]
dec eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0xffffffe6
jl 0x10045e88
mov dword [ebp - 0x2d0], 0
jmp 0x10045c23
mov eax, dword [ebp - 0x2d0]
inc eax
mov dword [ebp - 0x2d0], eax
cmp dword [ebp - 0x2d0], 3
jge 0x10045c3f
mov eax, dword [ebp - 0x2d0]
mov dword [ebp + eax*4 - 0x3cc], 0x3c6fe23a
jmp 0x10045c16
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3cc]
mov dword [ebp - 0xc30], eax
cmp dword [ebp - 0x9c], 0
jne 0x10045c9f
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x3cc], 0xd495
jg 0x10045c7a
mov dword [ebp - 0x74c], 1
jmp 0x10045c81
and dword [ebp - 0x74c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3cc]
cmp dword [ebp - 0x74c], eax
je 0x10045c9f
and dword [ebp - 0x9e8], 0
jmp 0x10045ca9
mov dword [ebp - 0x9e8], 1
mov dword [ebp - 0x2d8], 8
mov eax, dword [ebp - 0x2d8]
mov dword [ebp - 0xc80], eax
push 4
pop eax
shl eax, 1
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x3cc]
cmp dword [ebp + eax - 0x3cc], ecx
jg 0x10045ce6
mov dword [ebp - 0x3f4], 1
jmp 0x10045ced
and dword [ebp - 0x3f4], 0
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0x3f4]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x3cc]
jg 0x10045d14
mov dword [ebp - 0x754], 1
jmp 0x10045d1b
and dword [ebp - 0x754], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3cc]
cmp dword [ebp - 0x754], eax
je 0x10045d3c
mov dword [ebp - 0x3fc], 1
jmp 0x10045d43
and dword [ebp - 0x3fc], 0
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0x3fc]
jne 0x10045d63
mov eax, 0xfffa
test eax, eax
jne 0x10045d63
and dword [ebp - 0x75c], 0
jmp 0x10045d6d
mov dword [ebp - 0x75c], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3cc]
cmp dword [ebp - 0x75c], eax
jg 0x10045e71
mov dword [ebp - 0x320], 0x2d50fa8f
mov dword [ebp - 0x9f8], 0x550e3526
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x3cc], 0xbb08
cmp dword [ebp - 0x9c], 0
je 0x10045dc9
cmp dword [ebp - 0x9c], 0
je 0x10045dc9
mov dword [ebp - 0x404], 1
jmp 0x10045dd0
and dword [ebp - 0x404], 0
cmp dword [ebp - 0x2d8], 0xf758
je 0x10045de8
mov dword [ebp - 0x9f0], 1
jmp 0x10045def
and dword [ebp - 0x9f0], 0
mov eax, dword [ebp - 0x320]
inc eax
cmp eax, dword [ebp - 0x320]
jne 0x10045e0a
mov dword [ebp - 0x764], 1
jmp 0x10045e11
and dword [ebp - 0x764], 0
mov eax, dword [ebp - 0x404]
cmp eax, dword [ebp - 0x764]
jg 0x10045e38
cmp dword [ebp - 0x2d8], 0
jne 0x10045e38
push 6
pop eax
test eax, eax
jne 0x10045e38
and dword [ebp - 0x40c], 0
jmp 0x10045e42
mov dword [ebp - 0x40c], 1
mov eax, dword [ebp - 0x320]
cmp dword [ebp - 0x40c], eax
jle 0x10045e5c
mov dword [ebp - 0x76c], 1
jmp 0x10045e63
and dword [ebp - 0x76c], 0
mov eax, dword [ebp - 0x76c]
mov dword [ebp - 0x9f8], eax
jmp 0x10045e83
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x3cc], 0
je 0x10045e83
jmp 0x10045e88
jmp 0x10045bf0
mov byte [ebp - 0x128], 0
movzx eax, byte [ebp - 0x128]
test eax, eax
je 0x10045ebd
push 0x15e2
push 0x30c2
push 0x5f8f
push 0xa1f
push 0
push 0xa14
call fcn.10045151
add esp, 0x18
mov eax, dword [ebp - 0x414]
movzx eax, word [eax]
cmp eax, 0x5a4d
je 0x10045ed2
jmp 0x1004c03e
mov eax, dword [ebp - 0x414]
mov ecx, dword [ebp - 0x38]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0xf0], ecx
mov dword [ebp - 0x12c], 0xac204e2d
mov dword [ebp - 0x1a4], 0xffffffff
lea eax, [ebp - 0x1a4]
push eax
push 1
lea eax, [ebp - 0x12c]
push eax
call fcn.10044c6f
add esp, 0xc
mov dword [ebp - 0x1a4], 0
jmp 0x10045f29
mov eax, dword [ebp - 0x1a4]
dec eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 0xffffffed
jle 0x10045fe5
mov dword [ebp - 0x2e0], 0
jmp 0x10045f4f
mov eax, dword [ebp - 0x2e0]
inc eax
mov dword [ebp - 0x2e0], eax
cmp dword [ebp - 0x2e0], 3
jge 0x10045f6b
mov eax, dword [ebp - 0x2e0]
mov dword [ebp + eax*4 - 0xbe0], 0xb1af9d66
jmp 0x10045f42
mov dword [ebp - 0x12c], 2
jmp 0x10045f84
mov eax, dword [ebp - 0x12c]
dec eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0
jl 0x10045fe0
mov dword [ebp - 0x1ac], 0xcef3cf68
mov dword [ebp - 0x1ac], 0
jmp 0x10045fb0
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 3
jge 0x10045fcc
mov eax, dword [ebp - 0x1ac]
mov dword [ebp + eax*4 - 0xbe0], 0x92079655
jmp 0x10045fa3
mov eax, dword [ebp - 0x12c]
cmp dword [ebp + eax*4 - 0xbe0], 0
je 0x10045fde
jmp 0x10045fe0
jmp 0x10045f77
jmp 0x10045f1c
mov eax, dword [ebp - 0xf0]
cmp dword [eax], 0x4550
je 0x10045ff8
jmp 0x1004c03e
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xf0]
lea eax, [ecx + eax + 0x78]
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x2e8], 0x9841b3c6
mov byte [ebp - 0x123], 0
movzx eax, byte [ebp - 0x123]
test eax, eax
je 0x10046035
push 0x6cd8
push 0
call fcn.10045301
pop ecx
pop ecx
mov dword [ebp - 0x2e8], 0
jmp 0x1004604e
mov eax, dword [ebp - 0x2e8]
inc eax
mov dword [ebp - 0x2e8], eax
cmp dword [ebp - 0x2e8], 0x18
je 0x10046126
mov dword [ebp - 0x158], 1
mov dword [ebp - 0x2cc], 0
jmp 0x1004607e
mov eax, dword [ebp - 0x2cc]
inc eax
mov dword [ebp - 0x2cc], eax
cmp dword [ebp - 0x2cc], 4
jge 0x1004609a
mov eax, dword [ebp - 0x2cc]
mov dword [ebp + eax*4 - 0xd04], 0xd149febb
jmp 0x10046071
mov dword [ebp - 0x158], 0
jmp 0x100460b3
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 3
jg 0x10046121
mov dword [ebp - 0xa00], 0x1464f16e
mov byte [ebp - 0x11f], 0
lea eax, [ebp - 0x11f]
push eax
push 0
push 0xad6
push 0x1493
push 0x531f
call fcn.100454c2
add esp, 0x14
mov eax, dword [ebp - 0x158]
mov eax, dword [ebp + eax*4 - 0xd04]
mov dword [ebp - 0x774], eax
mov eax, dword [ebp - 0x158]
mov ecx, dword [ebp - 0x774]
mov dword [ebp + eax*4 - 0xd04], ecx
mov eax, dword [ebp - 0x774]
mov dword [ebp - 0xa00], eax
jmp 0x100460a6
jmp 0x10046041
mov eax, dword [ebp - 0x60]
cmp dword [eax + 4], 0
jne 0x10046134
jmp 0x1004c03e
and dword [ebp - 0x28], 0
mov dword [ebp - 0x42c], 0xccc9
mov dword [ebp - 0x78c], 0xc590f023
mov dword [ebp - 0xa2c], 0x7c
mov dword [ebp - 0x384], 0xfff6
mov dword [ebp - 0xa34], 1
mov dword [ebp - 0x44], 0
jmp 0x1004617a
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 2
jge 0x10046190
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0xaf4], 1
jmp 0x10046173
mov dword [ebp - 0x44], 0
jmp 0x100461a0
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 2
jge 0x100461b6
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0xb1c], 1
jmp 0x10046199
mov dword [ebp - 0x44], 0
jmp 0x100461c6
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 1
jge 0x100461dc
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x38c], 0x903c
jmp 0x100461bf
cmp dword [ebp - 0x42c], 0
je 0x100462e8
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x38c]
cmp dword [ebp + eax - 0xaf4], ecx
jge 0x10046211
mov dword [ebp - 0x41c], 1
jmp 0x10046218
and dword [ebp - 0x41c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb1c]
imul eax, dword [ebp - 0x41c]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0xaf4]
jle 0x10046247
mov dword [ebp - 0x77c], 1
jmp 0x1004624e
and dword [ebp - 0x77c], 0
mov eax, dword [ebp - 0xa2c]
cmp dword [ebp - 0x77c], eax
jl 0x10046268
mov dword [ebp - 0x424], 1
jmp 0x1004626f
and dword [ebp - 0x424], 0
cmp dword [ebp - 0x424], 0xfffffffb
jg 0x10046284
mov dword [ebp - 0x784], 1
jmp 0x1004628b
and dword [ebp - 0x784], 0
mov eax, dword [ebp - 0x384]
inc eax
mov dword [ebp - 0x384], eax
push 4
pop eax
shl eax, 0
push 4
pop ecx
imul ecx, ecx, 0
push 4
pop edx
imul edx, edx, 0
mov esi, dword [ebp - 0x384]
add esi, dword [ebp - 0x784]
sub esi, dword [ebp + edx - 0x38c]
imul esi, dword [ebp + ecx - 0x38c]
mov ecx, dword [ebp - 0x42c]
sub ecx, esi
sub ecx, dword [ebp - 0x78c]
cmp ecx, dword [ebp + eax - 0xb1c]
jle 0x100462e8
mov dword [ebp - 0x434], 1
jmp 0x100462ef
and dword [ebp - 0x434], 0
mov eax, dword [ebp - 0x78c]
cmp dword [ebp - 0x434], eax
jne 0x10046309
mov dword [ebp - 0x794], 1
jmp 0x10046310
and dword [ebp - 0x794], 0
mov eax, dword [ebp - 0x794]
mov dword [ebp - 0xa34], eax
mov eax, dword [ebp - 0xf0]
movzx eax, word [eax + 0x14]
mov ecx, dword [ebp - 0xf0]
lea eax, [ecx + eax + 0x18]
mov dword [ebp - 0x108], eax
mov dword [ebp - 0xb4], 0
jmp 0x1004634f
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 4
jge 0x1004636b
mov eax, dword [ebp - 0xb4]
mov dword [ebp + eax*4 - 0x8d0], 0x176b0f73
jmp 0x10046342
mov dword [ebp - 0xb4], 0
jmp 0x10046384
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 2
jge 0x100463a0
mov eax, dword [ebp - 0xb4]
mov dword [ebp + eax*4 - 0xd0], 0xa9ac70c3
jmp 0x10046377
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x8d0]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x8d0], eax
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xd0], 3
jmp 0x100463e9
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xd0]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xd0], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xd0], 0
jl 0x1004685c
mov dword [ebp - 0x2dc], 0x1230b63e
mov dword [ebp - 0x1c], 0
jmp 0x10046417
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 4
jge 0x1004642d
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xca0], 0xffffffff
jmp 0x10046410
mov dword [ebp - 0x1c], 0
jmp 0x1004643d
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x10046453
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xa5c], 1
jmp 0x10046436
mov dword [ebp - 0x1c], 0
jmp 0x10046463
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x10046479
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xb6c], 0
jmp 0x1004645c
mov dword [ebp - 0x1c], 0
jmp 0x10046489
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jge 0x1004649f
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xa4c], 0x9f33d48a
jmp 0x10046482
mov byte [ebp - 0x127], 0
movzx eax, byte [ebp - 0x127]
test eax, eax
je 0x100464b9
push 0
call fcn.10044ff7
pop ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xd0]
cmp dword [ebp + eax*4 - 0x8d0], 0
jb 0x10046629
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xd0]
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0xd0]
mov ecx, dword [ebp + ecx*4 - 0x8d0]
cmp dword [ebp + eax*4 - 0x8d0], ecx
je 0x1004650a
mov dword [ebp - 0x43c], 1
jmp 0x10046511
and dword [ebp - 0x43c], 0
cmp dword [ebp - 0x43c], 0xe3d3
jle 0x10046529
mov dword [ebp - 0x79c], 1
jmp 0x10046530
and dword [ebp - 0x79c], 0
cmp dword [ebp - 0x79c], 0xaa05
jg 0x10046548
mov dword [ebp - 0x444], 1
jmp 0x1004654f
and dword [ebp - 0x444], 0
cmp dword [ebp - 0x444], 1
jg 0x1004656b
push 9
pop eax
test eax, eax
je 0x1004656b
mov dword [ebp - 0x394], 1
jmp 0x10046572
and dword [ebp - 0x394], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x394]
mov dword [ebp + eax - 0xca0], ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x8d0]
add eax, dword [ebp - 0x394]
je 0x100465ac
mov eax, 0xf762
test eax, eax
je 0x100465ac
and dword [ebp - 0x7a4], 0
jmp 0x100465b6
mov dword [ebp - 0x7a4], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xd0]
mov eax, dword [ebp + eax*4 - 0x8d0]
imul eax, dword [ebp - 0x7a4]
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0xd0]
sub eax, dword [ebp + ecx*4 - 0x8d0]
cmp eax, 1
jae 0x1004660d
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xd0]
cmp dword [ebp + eax*4 - 0x8d0], 0
je 0x1004660d
mov dword [ebp - 0x44c], 1
jmp 0x10046614
and dword [ebp - 0x44c], 0
cmp dword [ebp - 0x44c], 0xd5fba252
jae 0x10046629
and dword [ebp - 0x7ac], 0
jmp 0x10046633
mov dword [ebp - 0x7ac], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x7ac]
sub ecx, dword [ebp + eax - 0xa5c]
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xd0]
cmp ecx, dword [ebp + eax*4 - 0x8d0]
jge 0x10046668
mov dword [ebp - 0x454], 1
jmp 0x1004666f
and dword [ebp - 0x454], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa5c]
cmp dword [ebp - 0x454], eax
jl 0x10046690
mov dword [ebp - 0x7b4], 1
jmp 0x10046697
and dword [ebp - 0x7b4], 0
mov eax, dword [ebp - 0x7b4]
inc eax
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xa5c], eax
mov dword [ebp - 0x2dc], 3
jmp 0x100466c5
mov eax, dword [ebp - 0x2dc]
dec eax
mov dword [ebp - 0x2dc], eax
cmp dword [ebp - 0x2dc], 0
jl 0x10046857
mov dword [ebp - 0x45c], 3
mov dword [ebp - 0xa44], 0xfff9
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xca0], 0
je 0x10046810
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xd0]
mov dword [ebp - 0xc38], eax
imul eax, dword [ebp - 0x45c], 0xfff7
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0xa5c]
mov dword [ebp - 0x7bc], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x7bc]
mov dword [ebp + eax - 0xca0], ecx
mov eax, dword [ebp - 0x45c]
cmp eax, dword [ebp - 0x7bc]
jg 0x1004675c
mov eax, 0x115
test eax, eax
jne 0x1004675c
and dword [ebp - 0xa3c], 0
jmp 0x10046766
mov dword [ebp - 0xa3c], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xd0]
mov dword [ebp - 0xb3c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd0]
mov dword [ebp - 0x464], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x464]
mov dword [ebp + eax - 0xa5c], ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xd0]
cmp dword [ebp - 0x464], eax
jge 0x100467c0
mov dword [ebp - 0x7c4], 1
jmp 0x100467c7
and dword [ebp - 0x7c4], 0
imul eax, dword [ebp - 0x7c4], 0xffff
push 4
pop ecx
shl ecx, 0
sub eax, dword [ebp + ecx - 0xd0]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0xb6c]
jg 0x100467f4
cmp dword [ebp - 0xa44], 0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x8d0], 0
je 0x10046810
mov dword [ebp - 0x46c], 1
jmp 0x10046817
and dword [ebp - 0x46c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xd0]
cmp dword [ebp - 0x46c], eax
jne 0x10046838
mov dword [ebp - 0x7cc], 1
jmp 0x1004683f
and dword [ebp - 0x7cc], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x7cc]
mov dword [ebp + eax - 0xa4c], ecx
jmp 0x100466b8
jmp 0x100463ce
and dword [ebp - 0x3a8], 0
jmp 0x10046881
mov eax, dword [ebp - 0x3a8]
inc eax
mov dword [ebp - 0x3a8], eax
mov eax, dword [ebp - 0x108]
add eax, 0x28
mov dword [ebp - 0x108], eax
mov eax, dword [ebp - 0xf0]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x3a8], eax
jge 0x100468fd
mov eax, dword [ebp - 0x108]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x474], eax
mov eax, dword [ebp - 0x60]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x474]
jb 0x100468f8
mov eax, dword [ebp - 0xf0]
push dword [eax + 0x38]
mov eax, dword [ebp - 0x108]
push dword [eax + 8]
call fcn.10044b67
pop ecx
pop ecx
add eax, dword [ebp - 0x474]
mov dword [ebp - 0xa84], eax
mov eax, dword [ebp - 0x60]
mov eax, dword [eax]
cmp eax, dword [ebp - 0xa84]
jae 0x100468f8
mov eax, dword [ebp - 0x108]
mov ecx, dword [ebp - 0x108]
mov eax, dword [eax + 0x14]
sub eax, dword [ecx + 0xc]
mov dword [ebp - 0x28], eax
jmp 0x100468fd
jmp 0x10046865
mov dword [ebp - 0x7ec], 0xfffffff7
mov dword [ebp - 0x47c], 0
mov dword [ebp - 0xa8c], 0x8aac
mov dword [ebp - 0x228], 0xbadcab39
mov dword [ebp - 0xab8], 0
mov dword [ebp - 0x2c0], 0
jmp 0x10046948
mov eax, dword [ebp - 0x2c0]
inc eax
mov dword [ebp - 0x2c0], eax
cmp dword [ebp - 0x2c0], 1
jge 0x10046964
mov eax, dword [ebp - 0x2c0]
mov dword [ebp + eax*4 - 0xc4], 0x5d6c05ba
jmp 0x1004693b
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xc4], 0
jmp 0x10046992
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc4]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xc4], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc4], 0xfffffff6
jl 0x10046c18
mov dword [ebp - 0xa60], 0x966ef3b0
mov dword [ebp - 0xa4], 0
jmp 0x100469c9
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 1
jge 0x100469e5
mov eax, dword [ebp - 0xa4]
mov dword [ebp + eax*4 - 0x110], 4
jmp 0x100469bc
mov dword [ebp - 0xa4], 0
jmp 0x100469fe
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 2
jge 0x10046a1a
mov eax, dword [ebp - 0xa4]
mov dword [ebp + eax*4 - 0xb0c], 9
jmp 0x100469f1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc4]
mov dword [ebp - 0xb40], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc4]
mov dword [ebp - 0xb48], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x110], 0
jge 0x10046a5c
mov dword [ebp - 0x7d4], 1
jmp 0x10046a63
and dword [ebp - 0x7d4], 0
mov eax, dword [ebp - 0x7d4]
mov dword [ebp - 0x47c], eax
mov eax, dword [ebp - 0x47c]
push 4
pop ecx
imul ecx, ecx, 0
add eax, dword [ebp + ecx - 0x110]
mov dword [ebp - 0xa8c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x110], 0xf75
jl 0x10046aa7
mov dword [ebp - 0x7dc], 1
jmp 0x10046aae
and dword [ebp - 0x7dc], 0
cmp dword [ebp - 0x7dc], 0x2d50fa8f
jl 0x10046ac6
mov dword [ebp - 0x484], 1
jmp 0x10046acd
and dword [ebp - 0x484], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc4]
mov eax, dword [ebp - 0x7ec]
mov dword [ebp - 0xb50], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x110]
mov dword [ebp - 0xb58], eax
or eax, 0xffffffff
imul eax, eax, 0xe35
mov dword [ebp - 0x7e4], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x7e4]
mov dword [ebp + eax - 0xb0c], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc4]
add eax, dword [ebp - 0x7e4]
cmp eax, 9
je 0x10046b3f
mov dword [ebp - 0x48c], 1
jmp 0x10046b46
and dword [ebp - 0x48c], 0
mov eax, dword [ebp - 0x48c]
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 0xfffffffb
jne 0x10046b67
mov dword [ebp - 0xa94], 1
jmp 0x10046b6e
and dword [ebp - 0xa94], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x110]
mov dword [ebp - 0xb60], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc4]
push 4
pop ecx
imul ecx, ecx, 0
add eax, dword [ebp + ecx - 0x110]
imul eax, eax, 0x79
sub eax, dword [ebp - 0x7ec]
jne 0x10046bb6
push 5
pop eax
test eax, eax
jne 0x10046bb6
and dword [ebp - 0x494], 0
jmp 0x10046bc0
mov dword [ebp - 0x494], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x110]
cmp dword [ebp - 0x494], eax
je 0x10046be1
mov dword [ebp - 0x7f4], 1
jmp 0x10046be8
and dword [ebp - 0x7f4], 0
mov eax, dword [ebp - 0x7f4]
mov dword [ebp - 0xab8], eax
mov eax, dword [ebp - 0xa60]
mov dword [ebp - 0x228], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x228]
mov dword [ebp + eax - 0xb0c], ecx
jmp 0x10046977
cmp dword [ebp - 0x28], 0
jne 0x10046c23
jmp 0x1004c03e
mov dword [ebp - 0x230], 6
mov dword [ebp - 0x28c], 0
jmp 0x10046c46
mov eax, dword [ebp - 0x28c]
inc eax
mov dword [ebp - 0x28c], eax
cmp dword [ebp - 0x28c], 1
jge 0x10046c62
mov eax, dword [ebp - 0x28c]
mov dword [ebp + eax*4 - 0xb98], 0xac78
jmp 0x10046c39
push 0x63ca
push 0
call fcn.10044e06
pop ecx
pop ecx
mov dword [ebp - 0x230], 0
jmp 0x10046c89
mov eax, dword [ebp - 0x230]
dec eax
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0
jl 0x10046d3e
mov dword [ebp - 0xd8], 0x4d2edc75
mov dword [ebp - 0x92c], 0x744d0289
mov dword [ebp - 0xd8], 0
jmp 0x10046cc3
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0
jg 0x10046d05
mov byte [ebp - 0x121], 0
lea eax, [ebp - 0x121]
push eax
push 1
push 0x4cec
call fcn.10044daf
add esp, 0xc
mov byte [ebp - 0x11e], 0
movzx eax, byte [ebp - 0x11e]
test eax, eax
je 0x10046d03
push 0
call fcn.10045283
pop ecx
jmp 0x10046cb6
mov dword [ebp - 0xd8], 0
jmp 0x10046d1e
mov eax, dword [ebp - 0xd8]
dec eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0
jl 0x10046d39
lea eax, [ebp - 0x92c]
push eax
push 1
call fcn.10044e06
pop ecx
pop ecx
jmp 0x10046d11
jmp 0x10046c7c
mov eax, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x28]
add ecx, dword [eax]
add ecx, dword [ebp - 0x38]
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x2bc], 0x5c68ec0a
mov dword [ebp - 0x2bc], 0xffffffe7
jmp 0x10046d6f
mov eax, dword [ebp - 0x2bc]
inc eax
mov dword [ebp - 0x2bc], eax
cmp dword [ebp - 0x2bc], 1
jl 0x10046d9a
mov byte [ebp - 0xf1], 0
movzx eax, byte [ebp - 0xf1]
test eax, eax
je 0x10046d98
push 0x749c
push 0
call fcn.10044f3c
pop ecx
pop ecx
jmp 0x10046d62
mov byte [ebp - 0x120], 0
movzx eax, byte [ebp - 0x120]
test eax, eax
je 0x10046db4
push 0
call fcn.10044f8a
pop ecx
xor ecx, ecx
call fcn.10032c12
push eax
call fcn.100663a8
pop ecx
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x9d0], 0xfffffff9
mov dword [ebp - 0x804], 0x61a6520
mov dword [ebp - 0x3b4], 0xdd5d
mov dword [ebp - 0x3c0], 0x901516ea
mov dword [ebp - 0x7fc], 0x40fff069
mov dword [ebp - 0x8f8], 0xca4b38b4
mov dword [ebp - 0x8f4], 0xca4b38b4
mov dword [ebp - 0x8f0], 0xca4b38b4
mov dword [ebp - 0x8ec], 0xca4b38b4
mov dword [ebp - 0x4c4], 0x4468
mov dword [ebp - 0x24], 0x563ade4
mov dword [ebp - 0xba0], 0xea989989
mov dword [ebp - 0x74], 0
jmp 0x10046e4e
mov eax, dword [ebp - 0x74]
dec eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0xffffffeb
jl 0x100471c7
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0x15c], 0xfffffffe
mov dword [ebp - 0x294], 0xfffffff8
mov dword [ebp - 0x238], 0
jmp 0x10046e8f
mov eax, dword [ebp - 0x238]
inc eax
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 2
jge 0x10046eab
mov eax, dword [ebp - 0x238]
mov dword [ebp + eax*4 - 0x918], 0xfffffff8
jmp 0x10046e82
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0xba8], eax
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0xbb0], eax
mov eax, dword [ebp - 0x3b4]
neg eax
cmp eax, dword [ebp - 0x74]
jne 0x10046edc
mov dword [ebp - 0x49c], 1
jmp 0x10046ee3
and dword [ebp - 0x49c], 0
mov eax, dword [ebp - 0x15c]
imul eax, dword [ebp - 0x49c]
mov dword [ebp - 0x3c0], eax
mov eax, dword [ebp - 0x3c0]
sub eax, dword [ebp - 0x15c]
sub eax, dword [ebp - 0xe0]
mov dword [ebp - 0x7fc], eax
cmp dword [ebp - 0x7fc], 0xf039d3cd
jbe 0x10046f26
mov dword [ebp - 0x4a4], 1
jmp 0x10046f2d
and dword [ebp - 0x4a4], 0
mov eax, dword [ebp - 0x4a4]
sub eax, 0x10121238
mov dword [ebp - 0x15c], eax
mov eax, dword [ebp - 0x9d0]
mov dword [ebp - 0x804], eax
mov eax, dword [ebp - 0xe0]
cmp dword [ebp - 0x804], eax
jne 0x10046f6d
cmp dword [ebp - 0x3c0], 0
je 0x10046f6d
mov dword [ebp - 0x4ac], 1
jmp 0x10046f74
and dword [ebp - 0x4ac], 0
mov eax, dword [ebp - 0xe0]
cmp dword [ebp - 0x4ac], eax
jne 0x10046f8e
mov dword [ebp - 0x80c], 1
jmp 0x10046f95
and dword [ebp - 0x80c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x80c]
mov dword [ebp + eax - 0x8f8], ecx
cmp dword [ebp - 0x3b4], 0
jne 0x10046fbf
xor eax, eax
inc eax
jne 0x10046fbf
and dword [ebp - 0x4b4], 0
jmp 0x10046fc9
mov dword [ebp - 0x4b4], 1
mov eax, dword [ebp - 0x4c4]
cmp dword [ebp - 0x4b4], eax
jle 0x10046fea
push 5
pop eax
test eax, eax
je 0x10046fea
mov dword [ebp - 0x814], 1
jmp 0x10046ff1
and dword [ebp - 0x814], 0
mov eax, dword [ebp - 0xe0]
cmp dword [ebp - 0x814], eax
jle 0x1004700b
mov dword [ebp - 0x4bc], 1
jmp 0x10047012
and dword [ebp - 0x4bc], 0
cmp dword [ebp - 0x4bc], 0x4087b332
jle 0x1004702a
mov dword [ebp - 0x81c], 1
jmp 0x10047031
and dword [ebp - 0x81c], 0
mov eax, dword [ebp - 0xe0]
imul eax, dword [ebp - 0x81c]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x24], eax
je 0x10047058
cmp dword [ebp - 0x74], 0
jne 0x10047058
and dword [ebp - 0xa0c], 0
jmp 0x10047062
mov dword [ebp - 0xa0c], 1
mov eax, dword [ebp - 0x4c4]
mov dword [ebp - 0xbb8], eax
mov eax, dword [ebp - 0x74]
imul eax, dword [ebp - 0xe0]
sub eax, dword [ebp - 0x74]
mov dword [ebp - 0x294], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x294]
mov dword [ebp + eax - 0x918], ecx
mov dword [ebp - 0x24], 0
jmp 0x100470a4
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jg 0x100471c2
push 0xfffffffffffffff8
pop eax
test eax, eax
je 0x100470c0
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0x918], 0
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x918]
mov dword [ebp - 0xbc0], eax
mov dword [ebp - 0x294], 0xfffb
mov eax, dword [ebp - 0x294]
mov dword [ebp - 0x824], eax
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x824]
mov dword [ebp + eax*4 - 0x918], ecx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x8f8]
imul eax, dword [ebp - 0x824]
mov ecx, dword [ebp - 0x24]
cmp eax, dword [ebp + ecx*4 - 0x8f8]
jge 0x10047128
cmp dword [ebp - 0xe0], 0
je 0x10047128
mov dword [ebp - 0x4cc], 1
jmp 0x1004712f
and dword [ebp - 0x4cc], 0
mov eax, dword [ebp - 0x15c]
cmp dword [ebp - 0x4cc], eax
jg 0x10047149
mov dword [ebp - 0x82c], 1
jmp 0x10047150
and dword [ebp - 0x82c], 0
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x8f8]
cmp dword [ebp - 0x82c], eax
jge 0x1004716e
mov dword [ebp - 0x4d4], 1
jmp 0x10047175
and dword [ebp - 0x4d4], 0
mov eax, dword [ebp - 0x15c]
cmp dword [ebp - 0x4d4], eax
jle 0x1004718f
mov dword [ebp - 0x834], 1
jmp 0x10047196
and dword [ebp - 0x834], 0
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x834]
sub ecx, dword [ebp + eax*4 - 0x8f8]
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x8f8], ecx
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x8f0], ecx
jmp 0x1004709d
jmp 0x10046e47
imul eax, dword [ebp - 0x3b4], 0xca2
mov dword [ebp - 0x74], eax
mov byte [ebp - 0x31c], 4
mov byte [ebp - 0x31b], 0x48
mov byte [ebp - 0x31a], 9
mov byte [ebp - 0x319], 8
mov byte [ebp - 0x318], 1
mov byte [ebp - 0x317], 5
mov byte [ebp - 0x316], 7
mov byte [ebp - 0x315], 3
mov byte [ebp - 0x314], 6
mov byte [ebp - 0x313], 7
mov byte [ebp - 0x312], 0x1e
mov byte [ebp - 0x311], 0x1f
mov byte [ebp - 0x310], 0x71
mov byte [ebp - 0x30f], 0xe2
mov byte [ebp - 0x30e], 0x12
mov byte [ebp - 0x30d], 5
mov byte [ebp - 0x30c], 0xc1
mov byte [ebp - 0x30b], 0x43
mov byte [ebp - 0x30a], 0xf6
mov byte [ebp - 0x309], 0x45
mov byte [ebp - 0x308], 0x16
mov byte [ebp - 0x307], 0xca
mov byte [ebp - 0x306], 0x6e
mov byte [ebp - 0x305], 0xcf
mov byte [ebp - 0x304], 0x4f
mov byte [ebp - 0x303], 0x90
mov byte [ebp - 0x302], 0xd1
mov byte [ebp - 0x301], 0xfa
mov byte [ebp - 0x300], 1
mov byte [ebp - 0x2ff], 0x5e
mov byte [ebp - 0x2fe], 0xec
mov byte [ebp - 0x2fd], 0xa1
mov byte [ebp - 0x2fc], 0x1a
mov byte [ebp - 0x2fb], 0x8c
mov byte [ebp - 0x2fa], 3
mov byte [ebp - 0x2f9], 0xe0
mov byte [ebp - 0x2f8], 0x57
mov byte [ebp - 0x2f7], 0x81
mov byte [ebp - 0x2f6], 0x50
mov byte [ebp - 0x2f5], 0xde
mov byte [ebp - 0x2f4], 0xe5
mov byte [ebp - 0x2f3], 2
mov byte [ebp - 0x2f2], 6
mov byte [ebp - 0x2f1], 3
mov byte [ebp - 0x2f0], 0
mov byte [ebp - 0x2ef], 5
mov byte [ebp - 0x2ee], 6
mov byte [ebp - 0x2ed], 8
mov byte [ebp - 0x2ec], 1
mov byte [ebp - 0x2eb], 0
mov byte [ebp - 0x2ea], 1
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x31c]
or eax, 0x70
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x31c]
and ecx, 0x70
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x31c]
mov byte [ebp + ecx - 0x904], al
mov dword [ebp - 0x4c], 2
and dword [ebp - 0x240], 0
jmp 0x1004738a
mov eax, dword [ebp - 0x4c]
inc eax
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0x33
jae 0x10047449
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x31c]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x4c], eax
jne 0x100473d4
mov eax, dword [ebp - 0x4c]
movzx eax, byte [ebp + eax - 0x31c]
inc eax
mov dword [ebp - 0x240], eax
mov eax, dword [ebp - 0x4c]
movzx eax, byte [ebp + eax - 0x31c]
mov ecx, dword [ebp - 0x4c]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x4c], eax
jmp 0x10047382
mov eax, dword [ebp - 0x4c]
movzx eax, byte [ebp + eax - 0x31b]
mov ecx, dword [ebp - 0x4c]
sub ecx, dword [ebp - 0x240]
movzx ecx, byte [ebp + ecx - 0x31e]
movsx ecx, byte [ebp + ecx - 0x904]
or eax, ecx
mov ecx, dword [ebp - 0x4c]
movzx ecx, byte [ebp + ecx - 0x31b]
mov edx, dword [ebp - 0x4c]
sub edx, dword [ebp - 0x240]
movzx edx, byte [ebp + edx - 0x31e]
movsx edx, byte [ebp + edx - 0x904]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x4c]
movzx ecx, byte [ebp + ecx - 0x31c]
mov byte [ebp + ecx - 0x904], al
lea eax, [ebp - 0x240]
push eax
push 1
call fcn.10044e56
pop ecx
pop ecx
jmp 0x10047382
xor eax, eax
inc eax
imul eax, eax, 0xa
mov byte [ebp + eax - 0x904], 0
mov dword [ebp - 0x1b4], 0x7cb3f4f4
mov dword [ebp - 0xd4], 0x52061f66
mov dword [ebp - 0xac], 0x4e76
mov dword [ebp - 0x2d4], 0
jmp 0x1004748e
mov eax, dword [ebp - 0x2d4]
inc eax
mov dword [ebp - 0x2d4], eax
cmp dword [ebp - 0x2d4], 4
jge 0x100474aa
mov eax, dword [ebp - 0x2d4]
mov dword [ebp + eax*4 - 0xe78], 0xef10dec5
jmp 0x10047481
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0x1b4], 0x971867b8
jne 0x100474ce
mov dword [ebp - 0x934], 1
jmp 0x100474d5
and dword [ebp - 0x934], 0
mov eax, dword [ebp - 0x1b4]
cmp dword [ebp - 0xd4], eax
jg 0x100474ef
mov dword [ebp - 0x4dc], 1
jmp 0x100474f6
and dword [ebp - 0x4dc], 0
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0xbc8], eax
mov eax, dword [ebp - 0xac]
imul eax, dword [ebp - 0x4dc]
cmp eax, 0x5edade09
je 0x10047522
mov dword [ebp - 0x9fc], 1
jmp 0x10047529
and dword [ebp - 0x9fc], 0
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0xd4], eax
imul eax, dword [ebp - 0xd4], 0xf72b
test eax, eax
jne 0x10047555
cmp dword [ebp - 0xd4], 0
jne 0x10047555
and dword [ebp - 0x83c], 0
jmp 0x1004755f
mov dword [ebp - 0x83c], 1
mov eax, dword [ebp - 0xac]
cmp dword [ebp - 0x83c], eax
je 0x100477a2
mov dword [ebp - 0x138], 0x6f49c23e
mov dword [ebp - 0x29c], 0
mov dword [ebp - 0x854], 0xfffffff6
mov dword [ebp - 0x508], 0xfffffffe
mov dword [ebp - 0x248], 0
jmp 0x100475b2
mov eax, dword [ebp - 0x248]
inc eax
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 4
jge 0x100475ce
mov eax, dword [ebp - 0x248]
mov dword [ebp + eax*4 - 0xdac], 0
jmp 0x100475a5
mov byte [ebp - 0x101], 0
push 0x805
push 1
lea eax, [ebp - 0x101]
push eax
push 0x7ad5
call fcn.10044e83
add esp, 0x10
cmp dword [ebp - 0x138], 0xffff3e6d
jge 0x10047608
mov dword [ebp - 0x864], 1
jmp 0x1004760f
and dword [ebp - 0x864], 0
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0xbd0], eax
mov dword [ebp - 0x29c], 1
cmp dword [ebp - 0x29c], 0xd86b
jl 0x1004763d
mov dword [ebp - 0x4e4], 1
jmp 0x10047644
and dword [ebp - 0x4e4], 0
mov eax, dword [ebp - 0xac]
cmp dword [ebp - 0x4e4], eax
jl 0x10047664
cmp dword [ebp - 0x29c], 0
jne 0x10047664
and dword [ebp - 0x93c], 0
jmp 0x1004766e
mov dword [ebp - 0x93c], 1
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0xc4c], eax
mov eax, dword [ebp - 0xd4]
cmp dword [ebp - 0x138], eax
jle 0x1004769d
cmp dword [ebp - 0x1b4], 0
je 0x1004769d
mov dword [ebp - 0x844], 1
jmp 0x100476a4
and dword [ebp - 0x844], 0
mov eax, dword [ebp - 0xd4]
cmp dword [ebp - 0x844], eax
jg 0x100476c7
cmp dword [ebp - 0x29c], 0
je 0x100476c7
mov dword [ebp - 0x4ec], 1
jmp 0x100476ce
and dword [ebp - 0x4ec], 0
mov eax, dword [ebp - 0x138]
cmp eax, dword [ebp - 0x4ec]
jge 0x100476e8
mov dword [ebp - 0x84c], 1
jmp 0x100476ef
and dword [ebp - 0x84c], 0
cmp dword [ebp - 0x84c], 0x7032
je 0x10047707
mov dword [ebp - 0x4f4], 1
jmp 0x1004770e
and dword [ebp - 0x4f4], 0
mov eax, dword [ebp - 0x138]
imul eax, dword [ebp - 0x4f4]
mov dword [ebp - 0x854], eax
cmp dword [ebp - 0x854], 2
jle 0x10047736
mov dword [ebp - 0x4fc], 1
jmp 0x1004773d
and dword [ebp - 0x4fc], 0
mov eax, dword [ebp - 0x4fc]
add eax, 0x6659
cmp eax, dword [ebp - 0x138]
jle 0x1004775c
mov dword [ebp - 0x85c], 1
jmp 0x10047763
and dword [ebp - 0x85c], 0
mov eax, dword [ebp - 0x85c]
mov dword [ebp - 0x508], eax
mov eax, dword [ebp - 0x864]
sub eax, dword [ebp - 0x508]
mov dword [ebp - 0x6f8], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x6f8]
mov dword [ebp + eax - 0xdac], ecx
mov eax, dword [ebp - 0x6f8]
mov dword [ebp - 0xd4], eax
jmp 0x10047801
mov dword [ebp - 0xac], 0xffffffed
jmp 0x100477bb
mov eax, dword [ebp - 0xac]
dec eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0xffffffe5
jge 0x10047801
mov dword [ebp - 0x944], 1
mov dword [ebp - 0xa14], 1
lea eax, [ebp - 0xa14]
push eax
lea eax, [ebp - 0x944]
push eax
push 0xb02
push 0
push 0x399b
push 0x69e2
call fcn.1004553a
add esp, 0x18
jmp 0x100477ae
lea eax, [ebp - 0x904]
push eax
lea ecx, [ebp - 0xdf4]
call fcn.100273a1
mov dword [ebp - 0xa04], eax
mov eax, dword [ebp - 0xa04]
mov dword [ebp - 0x94c], eax
and dword [ebp - 4], 0
push 0xa
xor edx, edx
mov ecx, dword [ebp - 0x94c]
call fcn.10032bd7
pop ecx
mov dword [ebp - 0x994], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xdf4]
call fcn.10018dc3
mov dword [ebp - 0x34], 1
mov dword [ebp - 0x11c], 0xffffffff
mov dword [ebp - 0x140], 0xfff6
mov dword [ebp - 0x150], 0xe13f5e3
mov dword [ebp - 0x520], 0xf9034e10
mov dword [ebp - 0x114], 1
mov dword [ebp - 0x5c], 9
mov dword [ebp - 0x94], 0
jmp 0x100478a7
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 2
jge 0x100478c3
mov eax, dword [ebp - 0x94]
mov dword [ebp + eax*4 - 0x164], 0x4bda
jmp 0x1004789a
mov dword [ebp - 0x94], 0
jmp 0x100478dc
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 2
jge 0x100478f8
mov eax, dword [ebp - 0x94]
mov dword [ebp + eax*4 - 0xb78], 0x16ff
jmp 0x100478cf
cmp dword [ebp - 0x34], 0
je 0x100479cd
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0xc54], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0
jne 0x1004792f
cmp dword [ebp - 0x150], 0
jne 0x1004792f
and dword [ebp - 0x510], 0
jmp 0x10047939
mov dword [ebp - 0x510], 1
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x510], eax
jge 0x10047950
mov dword [ebp - 0x7f0], 1
jmp 0x10047957
and dword [ebp - 0x7f0], 0
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x7f0]
jne 0x1004796e
mov dword [ebp - 0x518], 1
jmp 0x10047975
and dword [ebp - 0x518], 0
cmp dword [ebp - 0x518], 0
jne 0x10047997
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x164], 0
jne 0x10047997
and dword [ebp - 0x700], 0
jmp 0x100479a1
mov dword [ebp - 0x700], 1
mov eax, dword [ebp - 0x700]
neg eax
mov dword [ebp - 0x520], eax
je 0x100479cd
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x164], 0
je 0x100479cd
mov dword [ebp - 0x8a8], 1
jmp 0x100479d4
and dword [ebp - 0x8a8], 0
imul eax, dword [ebp - 0x8a8], 0x6cc7
cmp dword [ebp - 0x34], eax
jge 0x100479ef
mov dword [ebp - 0x528], 1
jmp 0x100479f6
and dword [ebp - 0x528], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x164]
cmp dword [ebp - 0x528], eax
jg 0x10047a17
mov dword [ebp - 0x708], 1
jmp 0x10047a1e
and dword [ebp - 0x708], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x708], eax
je 0x10047a35
mov dword [ebp - 0x530], 1
jmp 0x10047a3c
and dword [ebp - 0x530], 0
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x140], eax
mov eax, dword [ebp - 0x140]
cmp eax, dword [ebp - 0x530]
jne 0x10047a6b
mov dword [ebp - 0x7f8], 1
jmp 0x10047a72
and dword [ebp - 0x7f8], 0
mov eax, dword [ebp - 0x34]
imul eax, dword [ebp - 0x7f8]
cmp dword [ebp - 0x34], eax
jge 0x10047a94
push 0xfffffffffffffffc
pop eax
test eax, eax
je 0x10047a94
mov dword [ebp - 0x538], 1
jmp 0x10047a9b
and dword [ebp - 0x538], 0
mov eax, dword [ebp - 0x538]
neg eax
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x164]
jle 0x10047abe
mov dword [ebp - 0xa1c], 1
jmp 0x10047ac5
and dword [ebp - 0xa1c], 0
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0xc5c], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0xc64], eax
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x140], eax
jge 0x10047aee
mov dword [ebp - 0x710], 1
jmp 0x10047af5
and dword [ebp - 0x710], 0
mov eax, dword [ebp - 0x710]
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0
jne 0x10047b1c
cmp dword [ebp - 0x114], 0
jne 0x10047b1c
and dword [ebp - 0x540], 0
jmp 0x10047b26
mov dword [ebp - 0x540], 1
mov eax, dword [ebp - 0x540]
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x5c], 1
jmp 0x10047b3f
mov eax, dword [ebp - 0x5c]
dec eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0
jl 0x100480b5
mov dword [ebp - 0x98], 0x2fc3c737
mov dword [ebp - 0x250], 0
mov dword [ebp - 0x378], 1
mov dword [ebp - 0x328], 0xc6211ee1
mov dword [ebp - 0x808], 0xffffffff
mov dword [ebp - 0xa10], 0xd72a
mov dword [ebp - 0xc6c], 0x2ee8ffc0
mov dword [ebp - 0x964], 0
cmp dword [ebp - 0x11c], 0
je 0x10047d6e
mov eax, dword [ebp - 0x98]
cmp dword [ebp - 0x114], eax
jge 0x10047bc0
mov dword [ebp - 0x870], 1
jmp 0x10047bc7
and dword [ebp - 0x870], 0
mov eax, dword [ebp - 0x98]
cmp dword [ebp - 0x870], eax
je 0x10047be7
mov eax, 0x40da8f9e
test eax, eax
jne 0x10047be7
and dword [ebp - 0x548], 0
jmp 0x10047bf1
mov dword [ebp - 0x548], 1
mov eax, dword [ebp - 0x250]
add eax, dword [ebp - 0x548]
imul eax, dword [ebp - 0x98]
sub eax, 0xc5de
cmp eax, 0xdbc0
jg 0x10047c1c
mov dword [ebp - 0x718], 1
jmp 0x10047c23
and dword [ebp - 0x718], 0
mov eax, dword [ebp - 0x718]
add eax, 0x15c4418b
jne 0x10047c42
cmp dword [ebp - 0x11c], 0
jne 0x10047c42
and dword [ebp - 0x550], 0
jmp 0x10047c4c
mov dword [ebp - 0x550], 1
mov eax, dword [ebp - 0x550]
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0
jne 0x10047c68
cmp dword [ebp - 0x114], 0
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x34]
imul ecx, dword [ebp - 0x140]
cmp dword [ebp + eax*4 - 0x164], ecx
jg 0x10047c8a
mov dword [ebp - 0x954], 1
jmp 0x10047c91
and dword [ebp - 0x954], 0
mov eax, dword [ebp - 0x250]
mov dword [ebp - 0xc74], eax
imul eax, dword [ebp - 0x378], 0x93d3
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0
jne 0x10047cc2
mov dword [ebp - 0x800], 1
jmp 0x10047cc9
and dword [ebp - 0x800], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb78]
cmp dword [ebp - 0x800], eax
jge 0x10047cea
mov dword [ebp - 0x558], 1
jmp 0x10047cf1
and dword [ebp - 0x558], 0
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp + eax*4 - 0x164]
imul eax, dword [ebp - 0x558]
test eax, eax
jne 0x10047d18
cmp dword [ebp - 0x98], 0
jne 0x10047d18
and dword [ebp - 0x720], 0
jmp 0x10047d22
mov dword [ebp - 0x720], 1
mov eax, dword [ebp - 0x720]
sub eax, 0xfffc
cmp eax, dword [ebp - 0x98]
je 0x10047d41
mov dword [ebp - 0x560], 1
jmp 0x10047d48
and dword [ebp - 0x560], 0
mov eax, dword [ebp - 0x560]
mov dword [ebp - 0x328], eax
push 8
pop eax
test eax, eax
je 0x10047d62
push 9
pop eax
test eax, eax
jne 0x10047d6e
mov dword [ebp - 0x8c0], 1
jmp 0x10047d75
and dword [ebp - 0x8c0], 0
mov eax, dword [ebp - 0x140]
cmp dword [ebp - 0x8c0], eax
jg 0x10047d8f
mov dword [ebp - 0x568], 1
jmp 0x10047d96
and dword [ebp - 0x568], 0
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp + eax*4 - 0x164]
cmp eax, dword [ebp - 0x568]
je 0x10047db4
mov dword [ebp - 0x728], 1
jmp 0x10047dbb
and dword [ebp - 0x728], 0
mov eax, dword [ebp - 0x728]
mov dword [ebp - 0x11c], eax
mov dword [ebp - 0x98], 0
jmp 0x10047de0
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 1
jg 0x100480b0
mov dword [ebp - 0x738], 0xb6fe
mov dword [ebp - 0x2c4], 0x5f082010
mov dword [ebp - 0xc7c], 3
mov dword [ebp - 0xc84], 0x9b8bcb0f
mov dword [ebp - 0xc8c], 5
mov eax, dword [ebp - 0x2c4]
cmp dword [ebp - 0x250], eax
je 0x10047e39
mov dword [ebp - 0x570], 1
jmp 0x10047e40
and dword [ebp - 0x570], 0
mov eax, dword [ebp - 0x250]
cmp dword [ebp - 0x570], eax
jne 0x10047e5a
mov dword [ebp - 0xa24], 1
jmp 0x10047e61
and dword [ebp - 0xa24], 0
mov eax, dword [ebp - 0x378]
mov dword [ebp - 0x808], eax
mov eax, dword [ebp - 0x2c4]
cmp dword [ebp - 0x808], eax
jle 0x10047e87
mov dword [ebp - 0x578], 1
jmp 0x10047e8e
and dword [ebp - 0x578], 0
mov eax, dword [ebp - 0x2c4]
cmp dword [ebp - 0x578], eax
jl 0x10047ea8
mov dword [ebp - 0x730], 1
jmp 0x10047eaf
and dword [ebp - 0x730], 0
cmp dword [ebp - 0x730], 0xfffd
jb 0x10047ed0
mov eax, 0xce68
test eax, eax
je 0x10047ed0
mov dword [ebp - 0x580], 1
jmp 0x10047ed7
and dword [ebp - 0x580], 0
mov eax, dword [ebp - 0x150]
cmp dword [ebp - 0x580], eax
je 0x10047ef1
mov dword [ebp - 0x878], 1
jmp 0x10047ef8
and dword [ebp - 0x878], 0
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp + eax*4 - 0x164]
cmp dword [ebp - 0x878], eax
je 0x10047f23
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x164], 0
jne 0x10047f23
and dword [ebp - 0x588], 0
jmp 0x10047f2d
mov dword [ebp - 0x588], 1
mov eax, dword [ebp - 0x328]
cmp dword [ebp - 0x588], eax
jg 0x10047f47
mov dword [ebp - 0x590], 1
jmp 0x10047f4e
and dword [ebp - 0x590], 0
mov dword [ebp - 0x738], 0xfffffffc
mov eax, dword [ebp - 0x738]
cmp eax, dword [ebp - 0x590]
je 0x10047f72
mov dword [ebp - 0x810], 1
jmp 0x10047f79
and dword [ebp - 0x810], 0
cmp dword [ebp - 0x810], 0xffff
jbe 0x10047f91
mov dword [ebp - 0x598], 1
jmp 0x10047f98
and dword [ebp - 0x598], 0
cmp dword [ebp - 0x598], 1
jb 0x10047fb6
cmp dword [ebp - 0x2c4], 0
je 0x10047fb6
mov dword [ebp - 0x740], 1
jmp 0x10047fbd
and dword [ebp - 0x740], 0
mov eax, dword [ebp - 0x740]
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0x11c]
mov ecx, dword [ebp - 0x5c]
add eax, dword [ebp + ecx*4 - 0x164]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x164]
jge 0x10047ff4
mov dword [ebp - 0x95c], 1
jmp 0x10047ffb
and dword [ebp - 0x95c], 0
mov eax, dword [ebp - 0x328]
mov dword [ebp - 0xcf4], eax
mov eax, dword [ebp - 0x5c]
add eax, 3
sub eax, dword [ebp - 0x140]
cmp eax, dword [ebp - 0x5c]
je 0x10048024
mov dword [ebp - 0x5a0], 1
jmp 0x1004802b
and dword [ebp - 0x5a0], 0
mov eax, dword [ebp - 0x378]
cmp dword [ebp - 0x5a0], eax
jl 0x10048045
mov dword [ebp - 0x8b0], 1
jmp 0x1004804c
and dword [ebp - 0x8b0], 0
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp + eax*4 - 0x164]
cmp dword [ebp - 0x8b0], eax
jg 0x1004806a
mov dword [ebp - 0x5a8], 1
jmp 0x10048071
and dword [ebp - 0x5a8], 0
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x5a8]
jge 0x10048088
mov dword [ebp - 0x748], 1
jmp 0x1004808f
and dword [ebp - 0x748], 0
mov eax, dword [ebp - 0x748]
mov dword [ebp - 0xa10], eax
push 1
lea eax, [ebp - 0x964]
push eax
call fcn.10044edc
pop ecx
pop ecx
jmp 0x10047dd3
jmp 0x10047b38
and dword [ebp - 0x258], 0
jmp 0x100480cb
mov eax, dword [ebp - 0x258]
inc eax
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 0xb
jae 0x100480e4
mov eax, dword [ebp - 0x258]
mov byte [ebp + eax - 0x904], 0
jmp 0x100480be
mov dword [ebp - 0x1bc], 0
mov dword [ebp - 0xce8], 6
mov dword [ebp - 0xca4], 0x5119
mov dword [ebp - 0xa98], 0xe9b8a514
mov dword [ebp - 0x5d8], 0x146df800
mov dword [ebp - 0x880], 0x3c076a5d
mov dword [ebp - 0x2a4], 0
jmp 0x10048139
mov eax, dword [ebp - 0x2a4]
inc eax
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 4
jge 0x10048155
mov eax, dword [ebp - 0x2a4]
mov dword [ebp + eax*4 - 0xb04], 0x5772
jmp 0x1004812c
mov byte [ebp - 0xf9], 0
movzx eax, byte [ebp - 0xf9]
test eax, eax
je 0x10048175
push 0
push 0x77a
call fcn.10045486
pop ecx
pop ecx
cmp dword [ebp - 0x1bc], 1
jle 0x1004818a
mov dword [ebp - 0x5b0], 1
jmp 0x10048191
and dword [ebp - 0x5b0], 0
mov eax, dword [ebp - 0xa98]
cmp dword [ebp - 0x5b0], eax
je 0x100481ab
mov dword [ebp - 0x818], 1
jmp 0x100481b2
and dword [ebp - 0x818], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xb04]
cmp dword [ebp - 0x818], eax
jle 0x100481d3
mov dword [ebp - 0x5b8], 1
jmp 0x100481da
and dword [ebp - 0x5b8], 0
mov eax, dword [ebp - 0x1bc]
cmp dword [ebp - 0x5b8], eax
jle 0x100481f4
mov dword [ebp - 0x750], 1
jmp 0x100481fb
and dword [ebp - 0x750], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xb04]
imul eax, dword [ebp - 0x750]
test eax, eax
je 0x10048226
push 9
pop eax
test eax, eax
je 0x10048226
mov dword [ebp - 0x5c0], 1
jmp 0x1004822d
and dword [ebp - 0x5c0], 0
mov eax, dword [ebp - 0x5c0]
mov dword [ebp - 0x880], eax
cmp dword [ebp - 0x880], 0x9ad5
je 0x1004825a
cmp dword [ebp - 0x1bc], 0
je 0x1004825a
mov dword [ebp - 0x5c8], 1
jmp 0x10048261
and dword [ebp - 0x5c8], 0
mov eax, dword [ebp - 0x1bc]
cmp dword [ebp - 0x5c8], eax
je 0x1004827b
mov dword [ebp - 0x758], 1
jmp 0x10048282
and dword [ebp - 0x758], 0
cmp dword [ebp - 0x758], 0xdbc1
jg 0x1004829a
mov dword [ebp - 0x5d0], 1
jmp 0x100482a1
and dword [ebp - 0x5d0], 0
mov eax, dword [ebp - 0x1bc]
cmp eax, dword [ebp - 0x5d0]
jge 0x100482bb
mov dword [ebp - 0x820], 1
jmp 0x100482c2
and dword [ebp - 0x820], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x820]
sub ecx, dword [ebp + eax - 0xb04]
push 4
pop eax
shl eax, 0
imul ecx, dword [ebp + eax - 0xb04]
test ecx, ecx
je 0x10048309
mov dword [ebp - 0x96c], 2
mov dword [ebp - 0x5d8], 6
mov eax, dword [ebp - 0x5d8]
mov dword [ebp - 0x96c], eax
jmp 0x10048346
mov dword [ebp - 0xa18], 9
mov byte [ebp - 0x122], 0
movzx eax, byte [ebp - 0x122]
test eax, eax
je 0x10048333
push 0x60ec
push 0
call fcn.100457d0
pop ecx
pop ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb04]
mov dword [ebp - 0xa18], eax
mov dword [ebp - 0x84], 0xe0648261
mov dword [ebp - 0x84], 0
jmp 0x10048369
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 3
jle 0x10048799
mov dword [ebp - 0xdc], 0xd45db34e
mov dword [ebp - 0xec], 0
mov dword [ebp - 0xa0], 0
jmp 0x100483a3
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 1
jge 0x100483bc
mov eax, dword [ebp - 0xa0]
mov dword [ebp + eax*4 - 0x7c], 0x25b0
jmp 0x10048396
mov dword [ebp - 0xa0], 0
jmp 0x100483d5
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 4
jge 0x100483f1
mov eax, dword [ebp - 0xa0]
mov dword [ebp + eax*4 - 0xacc], 1
jmp 0x100483c8
mov dword [ebp - 0xdc], 0
jmp 0x1004840a
mov eax, dword [ebp - 0xdc]
dec eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0
jl 0x10048794
mov dword [ebp - 0x6c], 0xed9ba07e
mov dword [ebp - 0x6c], 0
jmp 0x1004842e
mov eax, dword [ebp - 0x6c]
dec eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
jl 0x1004878f
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7c]
mov dword [ebp - 0x760], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x760]
mov dword [ebp + eax - 0xacc], ecx
mov eax, dword [ebp - 0x6c]
mov eax, dword [ebp + eax*4 - 0x7c]
cmp eax, dword [ebp - 0x760]
jg 0x1004847f
mov eax, 0x466e
test eax, eax
je 0x1004847f
mov dword [ebp - 0x5e0], 1
jmp 0x10048486
and dword [ebp - 0x5e0], 0
cmp dword [ebp - 0x5e0], 0xa7170f1a
jle 0x1004849e
mov dword [ebp - 0x8e8], 1
jmp 0x100484a5
and dword [ebp - 0x8e8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7c]
imul eax, dword [ebp - 0x8e8]
cmp eax, dword [ebp - 0x6c]
je 0x100484c9
or eax, 0xffffffff
jne 0x100484c9
and dword [ebp - 0x5e8], 0
jmp 0x100484d3
mov dword [ebp - 0x5e8], 1
mov eax, dword [ebp - 0x6c]
imul eax, dword [ebp - 0x5e8]
cmp eax, 0xfffffffe
je 0x100484ee
mov dword [ebp - 0x768], 1
jmp 0x100484f5
and dword [ebp - 0x768], 0
cmp dword [ebp - 0x768], 0xffffffff
jg 0x1004850a
mov dword [ebp - 0x5f0], 1
jmp 0x10048511
and dword [ebp - 0x5f0], 0
mov eax, dword [ebp - 0xdc]
mov eax, dword [ebp + eax*4 - 0x7c]
cmp dword [ebp - 0x5f0], eax
jl 0x1004852f
mov dword [ebp - 0x828], 1
jmp 0x10048536
and dword [ebp - 0x828], 0
mov eax, dword [ebp - 0xec]
cmp dword [ebp - 0x828], eax
jle 0x10048550
mov dword [ebp - 0x5f8], 1
jmp 0x10048557
and dword [ebp - 0x5f8], 0
mov eax, dword [ebp - 0xdc]
mov eax, dword [ebp + eax*4 - 0x7c]
add eax, dword [ebp - 0x5f8]
je 0x10048588
mov byte [ebp - 0x124], 0
movzx eax, byte [ebp - 0x124]
test eax, eax
je 0x10048583
push 1
call fcn.10044f1f
pop ecx
jmp 0x1004875f
mov dword [ebp - 0xa70], 1
mov dword [ebp - 0xec], 3
jmp 0x100485ab
mov eax, dword [ebp - 0xec]
dec eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0
jl 0x1004875f
mov dword [ebp - 0x260], 0
jmp 0x100485d1
mov eax, dword [ebp - 0x260]
inc eax
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 3
jge 0x100485ed
mov eax, dword [ebp - 0x260]
mov dword [ebp + eax*4 - 0xd44], 0xfc6a3f0b
jmp 0x100485c4
mov eax, dword [ebp - 0x6c]
cmp dword [ebp + eax*4 - 0x7c], 0x116e074f
jne 0x10048606
mov dword [ebp - 0x770], 1
jmp 0x1004860d
and dword [ebp - 0x770], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xacc]
cmp dword [ebp - 0x770], eax
jge 0x1004862e
mov dword [ebp - 0x600], 1
jmp 0x10048635
and dword [ebp - 0x600], 0
mov eax, dword [ebp - 0xdc]
mov eax, dword [ebp + eax*4 - 0x7c]
cmp eax, dword [ebp - 0x600]
jne 0x10048653
mov dword [ebp - 0x888], 1
jmp 0x1004865a
and dword [ebp - 0x888], 0
cmp dword [ebp - 0x888], 0xefb6
jl 0x10048672
mov dword [ebp - 0x974], 1
jmp 0x10048679
and dword [ebp - 0x974], 0
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x84], eax
jle 0x10048690
mov dword [ebp - 0x330], 1
jmp 0x10048697
and dword [ebp - 0x330], 0
mov eax, dword [ebp - 0xec]
mov ecx, dword [ebp - 0x330]
mov dword [ebp + eax*4 - 0xacc], ecx
mov eax, dword [ebp - 0x6c]
mov eax, dword [ebp + eax*4 - 0x7c]
sub eax, dword [ebp - 0x330]
je 0x10048740
mov eax, 0xf21ddbc7
test eax, eax
je 0x100486e2
mov eax, dword [ebp - 0xec]
cmp dword [ebp + eax*4 - 0xacc], 0
je 0x100486e2
mov dword [ebp - 0x608], 1
jmp 0x100486e9
and dword [ebp - 0x608], 0
mov eax, dword [ebp - 0x84]
mov ecx, dword [ebp - 0xdc]
mov ecx, dword [ebp + ecx*4 - 0x7c]
imul ecx, dword [ebp - 0xa70]
imul eax, ecx
mov ecx, dword [ebp - 0x6c]
mov edx, dword [ebp - 0x608]
sub edx, dword [ebp + ecx*4 - 0x7c]
cmp eax, edx
jl 0x10048720
mov dword [ebp - 0x778], 1
jmp 0x10048727
and dword [ebp - 0x778], 0
imul eax, dword [ebp - 0x778], 0x7520
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xacc], eax
jmp 0x1004875a
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 0
mov eax, dword [ebp + eax - 0xd44]
mov dword [ebp + ecx - 0xacc], eax
jmp 0x1004859e
mov byte [ebp - 0x109], 0
movzx eax, byte [ebp - 0x109]
test eax, eax
je 0x1004878a
push 0x22f8
push 0x1f2b
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
push 0
call dword [sym.imp.USER32.dll_GetMessageA]
jmp 0x10048427
jmp 0x100483fd
jmp 0x1004835c
mov dword [ebp - 0x84], 0
jmp 0x100487b2
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0x1d
je 0x100487d4
mov byte [ebp - 0x115], 0
lea eax, [ebp - 0x115]
push eax
push 1
call fcn.10044f3c
pop ecx
pop ecx
jmp 0x100487a5
mov byte [ebp - 0x218], 8
mov byte [ebp - 0x217], 0xcd
mov byte [ebp - 0x216], 4
mov byte [ebp - 0x215], 4
mov byte [ebp - 0x214], 9
mov byte [ebp - 0x213], 4
mov byte [ebp - 0x212], 7
mov byte [ebp - 0x211], 6
mov byte [ebp - 0x210], 2
mov byte [ebp - 0x20f], 1
mov byte [ebp - 0x20e], 0
mov byte [ebp - 0x20d], 6
mov byte [ebp - 0x20c], 1
mov byte [ebp - 0x20b], 7
mov byte [ebp - 0x20a], 3
mov byte [ebp - 0x209], 4
mov byte [ebp - 0x208], 6
mov byte [ebp - 0x207], 0xb
mov byte [ebp - 0x206], 0x16
mov byte [ebp - 0x205], 5
mov byte [ebp - 0x204], 8
mov byte [ebp - 0x203], 0x6f
mov byte [ebp - 0x202], 0x71
mov byte [ebp - 0x201], 0xec
mov byte [ebp - 0x200], 0x45
mov byte [ebp - 0x1ff], 0xa3
mov byte [ebp - 0x1fe], 0x3d
mov byte [ebp - 0x1fd], 0x55
mov byte [ebp - 0x1fc], 0x89
mov byte [ebp - 0x1fb], 0x3c
mov byte [ebp - 0x1fa], 0x2b
mov byte [ebp - 0x1f9], 0x27
mov byte [ebp - 0x1f8], 0x86
mov byte [ebp - 0x1f7], 0x1f
mov byte [ebp - 0x1f6], 0xe6
mov byte [ebp - 0x1f5], 0x74
mov byte [ebp - 0x1f4], 0x82
mov byte [ebp - 0x1f3], 0xc0
mov byte [ebp - 0x1f2], 0x6e
mov byte [ebp - 0x1f1], 0
mov byte [ebp - 0x1f0], 0xcd
mov byte [ebp - 0x1ef], 5
mov byte [ebp - 0x1ee], 8
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x218]
or eax, 0xfd
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x218]
and ecx, 0xfd
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x218]
mov byte [ebp + ecx - 0x910], al
mov dword [ebp - 0x50], 2
and dword [ebp - 0x2e4], 0
jmp 0x10048957
mov eax, dword [ebp - 0x50]
inc eax
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0x2b
jae 0x10048a0d
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x218]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x50], eax
jne 0x100489a1
mov eax, dword [ebp - 0x50]
movzx eax, byte [ebp + eax - 0x218]
inc eax
mov dword [ebp - 0x2e4], eax
mov eax, dword [ebp - 0x50]
movzx eax, byte [ebp + eax - 0x218]
mov ecx, dword [ebp - 0x50]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x50], eax
jmp 0x1004894f
mov eax, dword [ebp - 0x50]
movzx eax, byte [ebp + eax - 0x217]
mov ecx, dword [ebp - 0x50]
sub ecx, dword [ebp - 0x2e4]
movzx ecx, byte [ebp + ecx - 0x21a]
movsx ecx, byte [ebp + ecx - 0x910]
or eax, ecx
mov ecx, dword [ebp - 0x50]
movzx ecx, byte [ebp + ecx - 0x217]
mov edx, dword [ebp - 0x50]
sub edx, dword [ebp - 0x2e4]
movzx edx, byte [ebp + edx - 0x21a]
movsx edx, byte [ebp + edx - 0x910]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x50]
movzx ecx, byte [ebp + ecx - 0x218]
mov byte [ebp + ecx - 0x910], al
and dword [ebp - 0x2e4], 0
jmp 0x1004894f
xor eax, eax
inc eax
imul eax, eax, 0xa
mov byte [ebp + eax - 0x910], 0
mov dword [ebp - 0x618], 3
mov dword [ebp - 0x97c], 1
mov dword [ebp - 0x650], 2
mov dword [ebp - 0x268], 0x1c19cd89
mov dword [ebp - 0x90], 0
jmp 0x10048a5c
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 3
jge 0x10048a78
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0x3d8], 0xffffffff
jmp 0x10048a4f
mov dword [ebp - 0x90], 0
jmp 0x10048a91
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 3
jge 0x10048aad
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0x1a0], 1
jmp 0x10048a84
mov byte [ebp - 0xe5], 0
movzx eax, byte [ebp - 0xe5]
test eax, eax
je 0x10048ace
push 0
push 0xca0
push 0
call dword [sym.imp.GDI32.dll_GetBitmapBits]
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x1a0], 2
jmp 0x10048afc
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1a0]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x1a0], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1a0], 0
jl 0x10048ecc
mov dword [ebp - 0xb0], 0x182eac45
mov dword [ebp - 0x3a4], 0xe8e548e0
mov dword [ebp - 0xccc], 0x1dc630de
mov dword [ebp - 0xb0], 2
jmp 0x10048b47
mov eax, dword [ebp - 0xb0]
dec eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0
jl 0x10048b64
mov eax, dword [ebp - 0xb0]
cmp dword [ebp + eax*4 - 0x3d8], 0
je 0x10048b62
jmp 0x10048b64
jmp 0x10048b3a
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1a0], 0xfffd
jne 0x10048b83
mov dword [ebp - 0x780], 1
jmp 0x10048b8a
and dword [ebp - 0x780], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1a0], 0xcc51
je 0x10048ba9
mov dword [ebp - 0x610], 1
jmp 0x10048bb0
and dword [ebp - 0x610], 0
imul eax, dword [ebp - 0x610], 0xcc8a
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x1a0]
cmp eax, dword [ebp + ecx*4 - 0x3d8]
jle 0x10048bdc
mov dword [ebp - 0x830], 1
jmp 0x10048be3
and dword [ebp - 0x830], 0
mov eax, dword [ebp - 0x830]
mov dword [ebp - 0x618], eax
cmp dword [ebp - 0x618], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1a0]
mov eax, dword [ebp + eax*4 - 0x3d8]
add eax, 0xfffe
cmp dword [ebp - 0x780], eax
je 0x10048c23
mov dword [ebp - 0x620], 1
jmp 0x10048c2a
and dword [ebp - 0x620], 0
mov eax, dword [ebp - 0xb0]
cmp dword [ebp - 0x620], eax
jle 0x10048c54
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1a0], 0
je 0x10048c54
mov dword [ebp - 0x88c], 1
jmp 0x10048c5b
and dword [ebp - 0x88c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1a0]
mov eax, dword [ebp + eax*4 - 0x3d8]
cmp eax, dword [ebp - 0x88c]
jl 0x10048c83
mov dword [ebp - 0x628], 1
jmp 0x10048c8a
and dword [ebp - 0x628], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1a0]
cmp dword [ebp - 0x628], eax
jg 0x10048cab
mov dword [ebp - 0x788], 1
jmp 0x10048cb2
and dword [ebp - 0x788], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1a0]
cmp dword [ebp - 0x788], eax
jl 0x10048cd3
mov dword [ebp - 0x630], 1
jmp 0x10048cda
and dword [ebp - 0x630], 0
cmp dword [ebp - 0x630], 0xa3a7221e
jb 0x10048cf2
mov dword [ebp - 0x838], 1
jmp 0x10048cf9
and dword [ebp - 0x838], 0
mov eax, dword [ebp - 0xb0]
cmp dword [ebp - 0x838], eax
jg 0x10048d13
mov dword [ebp - 0x638], 1
jmp 0x10048d1a
and dword [ebp - 0x638], 0
cmp dword [ebp - 0x638], 0x1bb30b13
jg 0x10048d32
mov dword [ebp - 0x790], 1
jmp 0x10048d39
and dword [ebp - 0x790], 0
mov eax, dword [ebp - 0x790]
mov dword [ebp - 0x3a4], eax
cmp dword [ebp - 0x3a4], 0xfec1e183
jb 0x10048d5d
mov dword [ebp - 0x640], 1
jmp 0x10048d64
and dword [ebp - 0x640], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1a0]
mov eax, dword [ebp + eax*4 - 0x3d8]
imul eax, dword [ebp - 0x640]
cmp eax, 8
jge 0x10048d90
mov dword [ebp - 0x894], 1
jmp 0x10048d97
and dword [ebp - 0x894], 0
mov eax, dword [ebp - 0x894]
mov dword [ebp - 0xb0], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1a0]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x1a0]
mov ecx, dword [ebp + ecx*4 - 0x3d8]
add ecx, dword [ebp - 0xb0]
cmp ecx, dword [ebp + eax*4 - 0x3d8]
jne 0x10048dee
mov eax, 0x8d7c
test eax, eax
jne 0x10048dee
cmp dword [ebp - 0x3a4], 0
jne 0x10048dee
and dword [ebp - 0x648], 0
jmp 0x10048df8
mov dword [ebp - 0x648], 1
mov eax, dword [ebp - 0x97c]
cmp dword [ebp - 0x648], eax
je 0x10048e12
mov dword [ebp - 0x798], 1
jmp 0x10048e19
and dword [ebp - 0x798], 0
mov eax, dword [ebp - 0x798]
mov dword [ebp - 0x650], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1a0]
mov eax, dword [ebp + eax*4 - 0x3d8]
cmp dword [ebp - 0x650], eax
jg 0x10048e4d
mov dword [ebp - 0x840], 1
jmp 0x10048e54
and dword [ebp - 0x840], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1a0]
mov eax, dword [ebp + eax*4 - 0x3d8]
cmp dword [ebp - 0x840], eax
jl 0x10048e89
mov dword [ebp - 0x658], 1
mov eax, dword [ebp - 0x658]
inc eax
mov dword [ebp - 0x658], eax
jmp 0x10048ec7
mov dword [ebp - 0x268], 0x16
jmp 0x10048ea2
mov eax, dword [ebp - 0x268]
dec eax
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 0xfffffff2
jle 0x10048ec7
mov byte [ebp - 0x126], 0
movzx eax, byte [ebp - 0x126]
test eax, eax
je 0x10048ec5
push 1
call fcn.10044f8a
pop ecx
jmp 0x10048e95
jmp 0x10048ae1
lea eax, [ebp - 0x910]
push eax
lea ecx, [ebp - 0xdc4]
call fcn.100273a1
mov dword [ebp - 0xa20], eax
mov eax, dword [ebp - 0xa20]
mov dword [ebp - 0x984], eax
mov dword [ebp - 4], 1
push 0xa
xor edx, edx
mov ecx, dword [ebp - 0x984]
call fcn.10032bd7
pop ecx
mov dword [ebp - 0xa28], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xdc4]
call fcn.10018dc3
mov dword [ebp - 0x338], 0
mov dword [ebp - 0x7b0], 0xf76e
mov dword [ebp - 0xab0], 0x2906c902
mov dword [ebp - 0x3dc], 7
mov dword [ebp - 0x690], 0xae2718b9
mov dword [ebp - 0xb34], 0xfffffff7
mov dword [ebp - 0xb30], 0xfffffff7
mov dword [ebp - 0xb2c], 0xfffffff7
mov dword [ebp - 0xb28], 0xfffffff7
mov dword [ebp - 0x40], 0
jmp 0x10048f86
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 1
jge 0x10048f9c
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x678], 0x1a9565e0
jmp 0x10048f7f
mov dword [ebp - 0x40], 0
jmp 0x10048fac
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 1
jge 0x10048fc2
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x8b8], 1
jmp 0x10048fa5
mov dword [ebp - 0x40], 0
jmp 0x10048fd2
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 4
jge 0x10048fe8
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0xcb4], 1
jmp 0x10048fcb
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xcb4]
inc eax
mov dword [ebp - 0x7a0], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x7a0]
mov dword [ebp + eax - 0xcb4], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x678]
cmp eax, dword [ebp - 0x7a0]
jg 0x10049030
mov dword [ebp - 0x660], 1
jmp 0x10049037
and dword [ebp - 0x660], 0
mov eax, dword [ebp - 0x338]
cmp dword [ebp - 0x660], eax
jne 0x10049051
mov dword [ebp - 0x668], 1
jmp 0x10049058
and dword [ebp - 0x668], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x8b8]
mov dword [ebp - 0x7a8], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x7a8]
mov dword [ebp + eax - 0x8b8], ecx
mov eax, dword [ebp - 0x668]
cmp eax, dword [ebp - 0x7a8]
jg 0x10049098
mov dword [ebp - 0x670], 1
jmp 0x1004909f
and dword [ebp - 0x670], 0
mov eax, dword [ebp - 0x670]
mov dword [ebp - 0x3dc], eax
mov eax, dword [ebp - 0xab0]
cmp dword [ebp - 0x3dc], eax
je 0x100490c5
mov dword [ebp - 0x898], 1
jmp 0x100490cc
and dword [ebp - 0x898], 0
mov eax, dword [ebp - 0x7b0]
mov dword [ebp - 0xb44], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x678]
mov dword [ebp - 0xc40], eax
mov eax, dword [ebp - 0x338]
mov dword [ebp - 0xb38], eax
cmp dword [ebp - 0x338], 0xfcc8
je 0x1004910f
mov dword [ebp - 0x680], 1
jmp 0x10049116
and dword [ebp - 0x680], 0
mov eax, dword [ebp - 0x7b0]
cmp dword [ebp - 0x680], eax
je 0x10049130
mov dword [ebp - 0x688], 1
jmp 0x10049137
and dword [ebp - 0x688], 0
mov eax, dword [ebp - 0x898]
cmp eax, dword [ebp - 0x688]
jge 0x1004915e
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0xcb4], 0
jne 0x1004915e
and dword [ebp - 0x7b8], 0
jmp 0x10049168
mov dword [ebp - 0x7b8], 1
mov eax, dword [ebp - 0x7b8]
mov dword [ebp - 0x690], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x690]
mov dword [ebp + eax - 0xb34], ecx
and dword [ebp - 0x2ac], 0
jmp 0x1004919d
mov eax, dword [ebp - 0x2ac]
inc eax
mov dword [ebp - 0x2ac], eax
cmp dword [ebp - 0x2ac], 0xb
jae 0x100491b6
mov eax, dword [ebp - 0x2ac]
mov byte [ebp + eax - 0x910], 0
jmp 0x10049190
mov dword [ebp - 0xaa8], 0x469ad59e
mov dword [ebp - 0xaa4], 0x469ad59e
mov dword [ebp - 0xaa0], 0x469ad59e
mov dword [ebp - 0xa9c], 0x469ad59e
mov dword [ebp - 0x270], 0
jmp 0x100491f7
mov eax, dword [ebp - 0x270]
inc eax
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 1
jge 0x10049213
mov eax, dword [ebp - 0x270]
mov dword [ebp + eax*4 - 0x98c], 0
jmp 0x100491ea
push 1
call fcn.10044fae
pop ecx
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xaa8], 0
jmp 0x10049249
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xaa8]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xaa8], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xaa8], 0
jl 0x1004929a
mov dword [ebp - 0x194], 0
mov dword [ebp - 0x194], 0
jmp 0x1004927c
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 1
jge 0x10049298
mov eax, dword [ebp - 0x194]
mov dword [ebp + eax*4 - 0x98c], 0xbe44
jmp 0x1004926f
jmp 0x1004922e
push dword [ebp - 0xa28]
push dword [ebp - 0x994]
call fcn.100425b8
pop ecx
pop ecx
mov dword [ebp - 0x564], eax
mov dword [ebp - 0x380], 0xd1b7
mov dword [ebp - 0x858], 0xe23095c3
mov dword [ebp - 0x348], 0x66da
mov dword [ebp - 0x9a4], 0x8b5f6e56
mov dword [ebp - 0x274], 0
jmp 0x100492f4
mov eax, dword [ebp - 0x274]
inc eax
mov dword [ebp - 0x274], eax
cmp dword [ebp - 0x274], 2
jge 0x10049310
mov eax, dword [ebp - 0x274]
mov dword [ebp + eax*4 - 0xb14], 0xd3380d42
jmp 0x100492e7
xor eax, eax
inc eax
je 0x10049334
mov byte [ebp - 0x125], 0
movzx eax, byte [ebp - 0x125]
test eax, eax
je 0x1004932f
push 1
call fcn.10044ff7
pop ecx
jmp 0x1004974c
mov dword [ebp - 0x88], 0
jmp 0x1004934d
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 4
jge 0x10049369
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0x8e4], 4
jmp 0x10049340
mov dword [ebp - 0x88], 0
jmp 0x10049382
cmp dword [ebp - 0x88], 1
jge 0x1004939e
mov eax, dword [ebp - 0xf0]
mov ecx, dword [ebp - 0x564]
mov dword [eax + 8], ecx
mov dword [ebp - 0x360], 0x1020
mov dword [ebp - 0x27c], 6
mov dword [ebp - 0x70], 1
mov dword [ebp - 0x3ac], 0xffffffff
mov dword [ebp - 0x390], 0x651162f6
mov dword [ebp - 0x9b4], 0
mov dword [ebp - 0x278], 0
jmp 0x100497ad
cmp dword [ebp - 0x278], 4
jge 0x100497c9
push 0
push 0
push 0x9ec
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret