Function at 0x100418dd
Capabilities:
Delete file
Enumerate pe sections
Get disk information
Inspect section memory permissions

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1006a928
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x1204
call fcn.10064de0
push ebx
push esi
push edi
movzx eax, byte [ebp + 0x2c]
test eax, eax
je 0x10044c48
lea eax, [ebp + 0x1c]
mov dword [ebp - 0xae0], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xa6c], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0xa64], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0xb14], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0xa74], eax
mov eax, dword [ebp - 0xae0]
movzx eax, byte [eax]
test eax, eax
je 0x100419af
mov eax, dword [ebp - 0xa64]
mov dword [ebp - 0xa7c], eax
mov eax, dword [ebp - 0xa6c]
mov dword [ebp - 0xa84], eax
mov eax, dword [ebp - 0xa74]
mov dword [ebp - 0xa8c], eax
mov eax, dword [ebp - 0xa7c]
mov dword [ebp - 0xaa4], eax
mov eax, dword [ebp - 0xa84]
mov dword [ebp - 0xa9c], eax
mov eax, dword [ebp - 0xa8c]
mov dword [ebp - 0xa94], eax
mov eax, dword [ebp - 0xa94]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xa9c]
mov ecx, dword [ecx]
add ecx, dword [eax]
mov eax, dword [ebp - 0xaa4]
mov dword [eax], ecx
jmp 0x10044c43
mov eax, dword [ebp - 0xb14]
mov dword [ebp - 0x22c], eax
mov dword [ebp - 0x858], 0x4c90d297
mov dword [ebp - 0xb4c], 0x836b16b
mov dword [ebp - 0x37c], 0xd947597a
mov dword [ebp - 0xb2c], 0xfffffff8
mov dword [ebp - 0xb1c], 7
mov dword [ebp - 0xda0], 1
mov dword [ebp - 0x24], 0
jmp 0x10041a07
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x10041a1d
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x620], 0x8ef6b8f3
jmp 0x10041a00
mov dword [ebp - 0x24], 0
jmp 0x10041a2d
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x10041a43
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xf1c], 0x90e86489
jmp 0x10041a26
mov dword [ebp - 0x24], 0
jmp 0x10041a53
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 4
jge 0x10041a69
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x10c4], 0xfff6
jmp 0x10041a4c
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x620]
mov dword [ebp - 0xd9c], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xf1c]
mov dword [ebp - 0xda4], eax
push 0xfffffffffffffff6
pop eax
sub eax, dword [ebp - 0x858]
add eax, dword [ebp - 0xb1c]
je 0x10041abc
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xf1c], 0
je 0x10041abc
mov dword [ebp - 0xb24], 1
jmp 0x10041ac3
and dword [ebp - 0xb24], 0
mov eax, dword [ebp - 0x37c]
mov dword [ebp - 0xdac], eax
cmp dword [ebp - 0xb2c], 0xb2d5
jl 0x10041ae7
mov dword [ebp - 0x848], 1
jmp 0x10041aee
and dword [ebp - 0x848], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x10c4]
mov dword [ebp - 0xb34], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x620]
imul eax, dword [ebp - 0x848]
mov dword [ebp - 0xb3c], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x10c4]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x10c4], eax
mov eax, dword [ebp - 0xb34]
cmp eax, dword [ebp - 0xb3c]
jge 0x10041b50
mov dword [ebp - 0x850], 1
jmp 0x10041b57
and dword [ebp - 0x850], 0
cmp dword [ebp - 0x850], 6
je 0x10041b6c
mov dword [ebp - 0xb44], 1
jmp 0x10041b73
and dword [ebp - 0xb44], 0
mov eax, dword [ebp - 0x37c]
mov dword [ebp - 0xdb4], eax
mov eax, dword [ebp - 0x858]
mov dword [ebp - 0xd64], eax
mov eax, dword [ebp - 0xb4c]
add eax, 0xca48
mov dword [ebp - 0x37c], eax
mov dword [ebp - 0xb54], 0x14e7
cmp dword [ebp - 0xb54], 0xd4a
jge 0x10041dba
push 0x11e2bd9c
push 0x11e266b4
mov ecx, 0x1065aef0
call fcn.1000b0f2
mov ecx, eax
call fcn.1000b0f2
and dword [ebp - 0x168], 0
jmp 0x10041be7
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
mov eax, dword [ebp - 0x168]
cmp eax, dword [0x11e266b4]
jge 0x10041c70
imul edx, dword [ebp - 0x168], 0x18
add edx, 0x12045738
mov ecx, 0x1065aef0
call fcn.1001f256
and dword [ebp - 0x10c], 0
jmp 0x10041c22
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
mov eax, dword [ebp - 0x10c]
cmp eax, dword [0x11e2bd9c]
jge 0x10041c6b
push dword [ebp - 0x10c]
imul ecx, dword [ebp - 0x168], 0x18
add ecx, 0x12045738
call fcn.1000b0c5
movsx eax, byte [eax]
mov ecx, dword [ebp - 0x10c]
mov ecx, dword [ecx*4 + 0x11e5cc50]
lea eax, [eax + ecx - 0x30]
mov ecx, dword [ebp - 0x10c]
mov dword [ecx*4 + 0x11e5cc50], eax
jmp 0x10041c15
jmp 0x10041bda
and dword [ebp - 0x1c0], 0
jmp 0x10041c86
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
mov eax, dword [ebp - 0x1c0]
cmp eax, dword [0x11e266b4]
jge 0x10041daf
and dword [ebp - 0x150], 0
jmp 0x10041cae
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
mov eax, dword [ebp - 0x150]
cmp eax, dword [0x11e2bd9c]
jge 0x10041cf8
push dword [ebp - 0x150]
imul ecx, dword [ebp - 0x1c0], 0x18
add ecx, 0x12045738
call fcn.1000b0c5
movsx eax, byte [eax]
sub eax, 0x30
mov ecx, dword [ebp - 0x150]
mov ecx, dword [ecx*4 + 0x11e5cc50]
sub ecx, eax
mov eax, dword [ebp - 0x150]
mov dword [eax*4 + 0x11e5cc50], ecx
jmp 0x10041ca1
mov byte [ebp - 0x49], 1
and dword [ebp - 0x1e4], 0
jmp 0x10041d12
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
mov eax, dword [ebp - 0x1e4]
cmp eax, dword [0x11e2bd9c]
jge 0x10041d38
mov eax, dword [ebp - 0x1e4]
cmp dword [eax*4 + 0x11e5cc50], 0
jne 0x10041d36
mov byte [ebp - 0x49], 0
jmp 0x10041d38
jmp 0x10041d05
movzx eax, byte [ebp - 0x49]
test eax, eax
je 0x10041d4b
push 0x10007958
call fcn.10053214
pop ecx
and dword [ebp - 0x158], 0
jmp 0x10041d61
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
mov eax, dword [ebp - 0x158]
cmp eax, dword [0x11e2bd9c]
jge 0x10041daa
push dword [ebp - 0x158]
imul ecx, dword [ebp - 0x1c0], 0x18
add ecx, 0x12045738
call fcn.1000b0c5
movsx eax, byte [eax]
mov ecx, dword [ebp - 0x158]
mov ecx, dword [ecx*4 + 0x11e5cc50]
lea eax, [eax + ecx - 0x30]
mov ecx, dword [ebp - 0x158]
mov dword [ecx*4 + 0x11e5cc50], eax
jmp 0x10041d54
jmp 0x10041c79
push 0x1000795c
call fcn.10053214
pop ecx
mov byte [ebp - 0x100], 0
push 0x44dd
push 0x3bc
lea eax, [ebp - 0x100]
push eax
push 0
push 1
call fcn.1002c4b5
add esp, 0x14
mov eax, dword [ebp - 0x22c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x22c]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 0x14]
lea eax, [eax + ecx + 0x18]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x254], 0x399841b3
push 1
lea ecx, [ebp - 0xf4c]
call fcn.1000b514
and dword [ebp - 4], 0
push 2
lea ecx, [ebp - 0xcf8]
call fcn.1000b514
mov byte [ebp - 4], 1
mov dword [ebp - 0x74], 0
jmp 0x10041e35
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 1
jge 0x10041e51
push dword [ebp - 0x74]
lea ecx, [ebp - 0xf4c]
call fcn.1000b57b
mov dword [eax], 0x9b69b2e4
jmp 0x10041e2e
mov dword [ebp - 0x74], 0
jmp 0x10041e61
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 2
jge 0x10041e7d
push dword [ebp - 0x74]
lea ecx, [ebp - 0xcf8]
call fcn.1000b57b
mov dword [eax], 0x6f9f
jmp 0x10041e5a
mov dword [ebp - 0x254], 0
jmp 0x10041e96
mov eax, dword [ebp - 0x254]
inc eax
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 0x1c
jg 0x1004213a
mov dword [ebp - 0x28c], 0x57102d14
mov dword [ebp - 0x1ec], 0
jmp 0x10041ec6
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 3
jge 0x10041ee2
mov eax, dword [ebp - 0x1ec]
mov dword [ebp + eax*4 - 0x11f0], 1
jmp 0x10041eb9
mov dword [ebp - 0x28c], 0
jmp 0x10041efb
mov eax, dword [ebp - 0x28c]
inc eax
mov dword [ebp - 0x28c], eax
cmp dword [ebp - 0x28c], 1
jne 0x10042135
push 3
lea ecx, [ebp - 0xf3c]
call fcn.1000b514
mov byte [ebp - 4], 2
mov dword [ebp - 0x25c], 0x46b6eb6b
mov dword [ebp - 0xde4], 9
mov dword [ebp - 0x1f4], 0
jmp 0x10041f46
mov eax, dword [ebp - 0x1f4]
inc eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 3
jge 0x10041f68
push dword [ebp - 0x1f4]
lea ecx, [ebp - 0xf3c]
call fcn.1000b57b
mov dword [eax], 9
jmp 0x10041f39
mov dword [ebp - 0x25c], 2
jmp 0x10041f81
mov eax, dword [ebp - 0x25c]
dec eax
mov dword [ebp - 0x25c], eax
cmp dword [ebp - 0x25c], 0
jl 0x100420f4
mov dword [ebp - 0xdec], 0
mov dword [ebp - 0xdf4], 0xfffffff7
mov dword [ebp - 0xdfc], 0xc865b49d
mov dword [ebp - 0xe04], 0
push 3
lea ecx, [ebp - 0xf2c]
call fcn.1000b514
mov byte [ebp - 4], 3
mov dword [ebp - 0xe0c], 1
push 3
lea ecx, [ebp - 0xd40]
call fcn.1000b514
mov byte [ebp - 4], 4
push 0x68cb
lea eax, [ebp - 0xf2c]
push eax
lea eax, [ebp - 0x114]
push eax
push 0
push 1
push 0x60f2
push 1
push 0x2512
push 0x57a6
push 0x37c4
call fcn.1002ad4c
add esp, 0x28
mov dword [ebp - 0x114], 0
jmp 0x10042030
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 2
jge 0x1004204c
mov eax, dword [ebp - 0x114]
mov dword [ebp + eax*4 - 0x1150], 0xfffffffe
jmp 0x10042023
lea eax, [ebp - 0x114]
push eax
push 0x7e96
push 0x41fc
push 0xe8f
push 0x6f77
push 0x27c0
push 1
lea eax, [ebp - 0xd40]
push eax
push 0x58fe
push 0
push 0x13bb
call fcn.1003bba4
add esp, 0x2c
push 1
lea ecx, [ebp - 0xcf8]
call fcn.1000b57b
mov dword [ebp - 0x860], eax
mov eax, dword [ebp - 0x860]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x860]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0xd40]
call fcn.1000b57b
mov dword [ebp - 0x868], eax
mov eax, dword [ebp - 0x868]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x868]
mov dword [ecx], eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xd40]
call fcn.1000b576
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xf2c]
call fcn.1000b576
jmp 0x10041f74
mov byte [ebp - 0xfa], 0
movzx eax, byte [ebp - 0xfa]
test eax, eax
je 0x10042121
push 0x3c2a
push 0x252b
push 0x4b97
push 0
push 1
call fcn.10037efa
add esp, 0x14
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xf3c]
call fcn.1000b576
jmp 0x10041eee
jmp 0x10041e89
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xcf8]
call fcn.1000b576
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xf4c]
call fcn.1000b576
and dword [ebp - 0x2e8], 0
jmp 0x10042177
mov eax, dword [ebp - 0x2e8]
inc eax
mov dword [ebp - 0x2e8], eax
mov eax, dword [ebp - 0x48]
add eax, 0x28
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x22c]
mov eax, dword [eax]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x2e8], eax
jge 0x10044c43
mov dword [ebp - 0xe14], 1
mov byte [ebp - 0x104], 0
push 1
push 0
push 0x74fa
push 0x5718
push 0xbf2
lea eax, [ebp - 0x104]
push eax
call fcn.10031017
add esp, 0x18
mov byte [ebp - 0xfc], 0
push 0x4652
lea eax, [ebp - 0xfc]
push eax
push 1
push 0
push 0xc9e
call fcn.10037e40
add esp, 0x14
push 3
lea ecx, [ebp - 0x148]
call fcn.1000b514
mov dword [ebp - 4], 5
mov dword [ebp - 0x134], 0xffffffff
mov dword [ebp - 0x7b4], 7
mov dword [ebp - 0xa5c], 0xd8d46d8d
mov dword [ebp - 0x170], 0
jmp 0x10042231
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 2
jge 0x1004224d
mov eax, dword [ebp - 0x170]
mov dword [ebp + eax*4 - 0x2c4], 0x6af1124f
jmp 0x10042224
lea eax, [ebp - 0x148]
push eax
push 0
push 1
push 0x5dc0
push 0x2bcf
lea eax, [ebp - 0x170]
push eax
call fcn.1003a30b
add esp, 0x18
push 1
lea ecx, [ebp - 0x148]
call fcn.1000b57b
mov dword [eax], 1
jmp 0x100422aa
push 1
lea ecx, [ebp - 0x148]
call fcn.1000b57b
mov dword [ebp - 0x870], eax
mov eax, dword [ebp - 0x870]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x870]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x148]
call fcn.1000b57b
cmp dword [eax], 0
jl 0x1004297f
mov dword [ebp - 0xc4], 0x26d8d38
mov dword [ebp - 0x380], 0x85b6478c
push 0
lea ecx, [ebp - 0x148]
call fcn.1000b57b
mov eax, dword [eax]
mov dword [ebp - 0xc4], eax
mov eax, 0xfff9
cmp eax, 0x8caf
je 0x10042301
mov dword [ebp - 0x878], 1
jmp 0x10042308
and dword [ebp - 0x878], 0
push 1
lea ecx, [ebp - 0x148]
call fcn.1000b57b
mov ecx, dword [ebp - 0x878]
add ecx, dword [eax]
cmp ecx, 1
jg 0x1004232e
mov dword [ebp - 0x880], 1
jmp 0x10042335
and dword [ebp - 0x880], 0
cmp dword [ebp - 0x880], 1
jne 0x1004234a
mov dword [ebp - 0x888], 1
jmp 0x10042351
and dword [ebp - 0x888], 0
cmp dword [ebp - 0x888], 0xffffffff
jb 0x10042366
mov dword [ebp - 0x890], 1
jmp 0x1004236d
and dword [ebp - 0x890], 0
mov eax, dword [ebp - 0x890]
mov dword [ebp - 0x380], eax
cmp dword [ebp - 0xc4], 0
je 0x1004273a
mov dword [ebp - 0x6c], 0xfb9a31c0
mov dword [ebp - 0x348], 0x21adf561
push 2
lea ecx, [ebp - 0x148]
call fcn.1000b57b
cmp dword [ebp - 0xc4], 0
je 0x100423bf
cmp dword [ebp - 0x6c], 0
je 0x100423bf
mov dword [ebp - 0x898], 1
jmp 0x100423c6
and dword [ebp - 0x898], 0
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x898], eax
jne 0x100423dd
mov dword [ebp - 0x3d4], 1
jmp 0x100423e4
and dword [ebp - 0x3d4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2c4]
cmp dword [ebp - 0x3d4], eax
jle 0x10042405
mov dword [ebp - 0x840], 1
jmp 0x1004240c
and dword [ebp - 0x840], 0
mov eax, dword [ebp - 0x840]
mov dword [ebp - 0x348], eax
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x348], eax
jg 0x1004242f
mov dword [ebp - 0x3d0], 1
jmp 0x10042436
and dword [ebp - 0x3d0], 0
push 1
lea ecx, [ebp - 0x148]
call fcn.1000b57b
mov ecx, dword [ebp - 0x3d0]
sub ecx, dword [eax]
cmp ecx, dword [ebp - 0x6c]
je 0x1004245c
mov dword [ebp - 0xb5c], 1
jmp 0x10042463
and dword [ebp - 0xb5c], 0
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0xe1c], eax
push 1
lea ecx, [ebp - 0x148]
call fcn.1000b57b
push 1
lea ecx, [ebp - 0x148]
call fcn.1000b57b
cmp dword [eax], 2
jne 0x10042497
mov dword [ebp - 0x65c], 1
jmp 0x1004249e
and dword [ebp - 0x65c], 0
cmp dword [ebp - 0x65c], 1
jb 0x100424b3
mov dword [ebp - 0xb64], 1
jmp 0x100424ba
and dword [ebp - 0xb64], 0
push 1
lea ecx, [ebp - 0x148]
call fcn.1000b57b
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0xe24], eax
push 1
lea ecx, [ebp - 0x148]
call fcn.1000b57b
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x2c4]
mov dword [ebp - 0xe2c], eax
push 4
pop eax
imul eax, eax, 0
mov esi, dword [ebp + eax - 0x2c4]
push 2
lea ecx, [ebp - 0x148]
call fcn.1000b57b
cmp esi, dword [eax]
jne 0x10042516
mov dword [ebp - 0x3dc], 1
jmp 0x1004251d
and dword [ebp - 0x3dc], 0
cmp dword [ebp - 0x3dc], 0xfffa
jae 0x10042535
mov dword [ebp - 0x8e4], 1
jmp 0x1004253c
and dword [ebp - 0x8e4], 0
mov eax, dword [ebp - 0x8e4]
mov dword [ebp - 0x134], eax
xor eax, eax
inc eax
jne 0x1004255c
cmp dword [ebp - 0x6c], 0
jne 0x1004255c
and dword [ebp - 0x3e4], 0
jmp 0x10042566
mov dword [ebp - 0x3e4], 1
push 1
lea ecx, [ebp - 0x148]
call fcn.1000b57b
mov ecx, dword [ebp - 0x3e4]
cmp ecx, dword [eax]
jne 0x10042589
mov dword [ebp - 0x664], 1
jmp 0x10042590
and dword [ebp - 0x664], 0
cmp dword [ebp - 0x664], 0xa5cd
jg 0x100425a8
mov dword [ebp - 0x3ec], 1
jmp 0x100425af
and dword [ebp - 0x3ec], 0
mov eax, dword [ebp - 0x6c]
cmp eax, dword [ebp - 0x3ec]
jge 0x100425c6
mov dword [ebp - 0x7a4], 1
jmp 0x100425cd
and dword [ebp - 0x7a4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2c4]
cmp dword [ebp - 0x7a4], eax
je 0x100425ee
mov dword [ebp - 0xb9c], 1
jmp 0x100425f5
and dword [ebp - 0xb9c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2c4]
mov dword [ebp - 0xe34], eax
cmp dword [ebp - 0x7b4], 0
jne 0x10042623
cmp dword [ebp - 0x348], 0
jne 0x10042623
and dword [ebp - 0xab0], 0
jmp 0x1004262d
mov dword [ebp - 0xab0], 1
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0xc4], eax
je 0x10042644
mov dword [ebp - 0x3f4], 1
jmp 0x1004264b
and dword [ebp - 0x3f4], 0
cmp dword [ebp - 0x3f4], 0x7cdedfc3
jl 0x10042663
mov dword [ebp - 0x66c], 1
jmp 0x1004266a
and dword [ebp - 0x66c], 0
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x66c], eax
jle 0x10042681
mov dword [ebp - 0x3fc], 1
jmp 0x10042688
and dword [ebp - 0x3fc], 0
push 2
lea ecx, [ebp - 0x148]
call fcn.1000b57b
mov eax, dword [eax]
cmp eax, dword [ebp - 0x3fc]
jl 0x100426ab
mov dword [ebp - 0x844], 1
jmp 0x100426b2
and dword [ebp - 0x844], 0
push 1
lea ecx, [ebp - 0x148]
call fcn.1000b57b
mov ecx, dword [ebp - 0x844]
cmp ecx, dword [eax]
jge 0x100426d5
mov dword [ebp - 0x404], 1
jmp 0x100426dc
and dword [ebp - 0x404], 0
cmp dword [ebp - 0x404], 1
jge 0x100426f1
mov dword [ebp - 0x674], 1
jmp 0x100426f8
and dword [ebp - 0x674], 0
push 1
lea ecx, [ebp - 0x148]
call fcn.1000b57b
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x2c4]
cmp dword [ebp - 0x674], eax
je 0x10042722
mov dword [ebp - 0x40c], 1
jmp 0x10042729
and dword [ebp - 0x40c], 0
mov eax, dword [ebp - 0x40c]
mov dword [ebp - 0xa5c], eax
jmp 0x1004297a
mov dword [ebp - 0x948], 0xe7be98b8
mov dword [ebp - 0x2f0], 0xd060950c
mov dword [ebp - 0xc78], 0xff67d69b
mov dword [ebp - 0xc74], 0xff67d69b
mov dword [ebp - 0xc70], 0xff67d69b
mov dword [ebp - 0xc6c], 0xff67d69b
lea ecx, [ebp - 0x385]
call fcn.1000b58a
push eax
lea eax, [ebp - 0xc68]
push eax
lea eax, [ebp - 0xc78]
push eax
lea ecx, [ebp - 0x11d0]
call fcn.1000b58d
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xf5c]
call fcn.1000b550
mov byte [ebp - 4], 6
mov dword [ebp - 0x68c], 1
mov dword [ebp - 0xb0c], 0xffffffff
push 0
lea ecx, [ebp - 0x148]
call fcn.1000b57b
mov eax, dword [eax]
mov dword [ebp - 0x2f0], eax
cmp dword [ebp - 0x2f0], 0
je 0x10042842
cmp dword [ebp - 0x2f0], 0x950c
je 0x100427f9
mov dword [ebp - 0x7ac], 1
jmp 0x10042800
and dword [ebp - 0x7ac], 0
mov eax, dword [ebp - 0x134]
cmp dword [ebp - 0x7ac], eax
jg 0x1004281a
mov dword [ebp - 0x414], 1
jmp 0x10042821
and dword [ebp - 0x414], 0
mov eax, dword [ebp - 0x414]
mov dword [ebp - 0x380], eax
cmp dword [ebp - 0x380], 0
je 0x10042842
mov dword [ebp - 0x67c], 1
jmp 0x10042849
and dword [ebp - 0x67c], 0
cmp dword [ebp - 0x67c], 0x7a21e2c2
je 0x10042861
mov dword [ebp - 0x41c], 1
jmp 0x10042868
and dword [ebp - 0x41c], 0
mov eax, dword [ebp - 0xc4]
sub eax, dword [ebp - 0x41c]
mov dword [ebp - 0x894], eax
push 3
lea ecx, [ebp - 0xf5c]
call fcn.1000b57b
mov ecx, dword [ebp - 0x894]
mov dword [eax], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2c4]
cmp dword [ebp - 0x894], eax
jge 0x100428b0
mov dword [ebp - 0x424], 1
jmp 0x100428b7
and dword [ebp - 0x424], 0
push 1
lea ecx, [ebp - 0x148]
call fcn.1000b57b
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x2c4]
cmp dword [ebp - 0x424], eax
jge 0x100428e1
mov dword [ebp - 0x684], 1
jmp 0x100428e8
and dword [ebp - 0x684], 0
mov eax, dword [ebp - 0x948]
add eax, 0x472f
cmp eax, dword [ebp - 0x684]
jg 0x10042907
mov dword [ebp - 0x42c], 1
jmp 0x1004290e
and dword [ebp - 0x42c], 0
mov eax, dword [ebp - 0xc4]
cmp dword [ebp - 0x42c], eax
je 0x10042928
mov dword [ebp - 0x434], 1
jmp 0x1004292f
and dword [ebp - 0x434], 0
mov eax, dword [ebp - 0x7b4]
add eax, dword [ebp - 0x434]
mov dword [ebp - 0x68c], eax
je 0x10042958
cmp dword [ebp - 0xc4], 0
je 0x10042958
mov dword [ebp - 0x43c], 1
jmp 0x1004295f
and dword [ebp - 0x43c], 0
mov eax, dword [ebp - 0x43c]
mov dword [ebp - 0xb0c], eax
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xf5c]
call fcn.1000b576
jmp 0x10042286
mov dword [ebp - 0x134], 0
jmp 0x10042998
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 3
jle 0x100429d5
mov byte [ebp - 0x102], 0
movzx eax, byte [ebp - 0x102]
test eax, eax
je 0x100429d3
push 0x4036
push 1
push 0x5408
push 0x5c70
push 0x58c2
push 0
call fcn.1002d292
add esp, 0x18
jmp 0x1004298b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x148]
call fcn.1000b576
mov eax, dword [ebp - 0x48]
mov eax, dword [eax + 0x24]
and eax, 0x20000000
je 0x100429fd
mov dword [ebp - 0x84c], 1
jmp 0x10042a04
and dword [ebp - 0x84c], 0
mov eax, dword [ebp - 0x84c]
mov dword [ebp - 0xae8], eax
mov eax, dword [ebp - 0x48]
mov eax, dword [eax + 0x24]
and eax, 0x40000000
je 0x10042a29
mov dword [ebp - 0x444], 1
jmp 0x10042a30
and dword [ebp - 0x444], 0
mov eax, dword [ebp - 0x444]
mov dword [ebp - 0x9c0], eax
mov dword [ebp - 0x30], 0x603fa75c
push 3
lea ecx, [ebp - 0xf6c]
call fcn.1000b514
mov dword [ebp - 4], 7
mov dword [ebp - 0xe3c], 0
mov dword [ebp - 0x88], 0
jmp 0x10042a7a
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 3
jge 0x10042a96
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0x2dc], 0x1c08901
jmp 0x10042a6d
mov dword [ebp - 0x88], 0
jmp 0x10042aaf
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 3
jge 0x10042ad1
push dword [ebp - 0x88]
lea ecx, [ebp - 0xf6c]
call fcn.1000b57b
mov dword [eax], 1
jmp 0x10042aa2
mov byte [ebp - 0xe6], 0
push 0
push 0x1cda
push 1
lea eax, [ebp - 0xe6]
push eax
push 0x236e
call fcn.1002d333
add esp, 0x14
mov dword [ebp - 0x30], 2
jmp 0x10042b05
mov eax, dword [ebp - 0x30]
dec eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
jl 0x10043053
mov dword [ebp - 0x69c], 0x13ce
mov dword [ebp - 0x1a0], 0xffffffff
mov dword [ebp - 0x980], 0
mov dword [ebp - 0xe44], 0
mov dword [ebp - 0xe4c], 4
mov dword [ebp - 0xe54], 0x69faa33f
mov dword [ebp - 0x950], 0x1ef7
cmp dword [ebp - 0x950], 0xbcf
jge 0x10042cc6
call fcn.10052884
push 0x20
pop ecx
imul ecx, ecx, 0
add eax, ecx
push eax
push 0x10007a78
push 0x10007a7c
call fcn.100531ee
add esp, 0xc
call fcn.10052884
push 0x20
pop ecx
shl ecx, 0
add eax, ecx
push eax
push 0x10007a84
push 0x10007a88
call fcn.100531ee
add esp, 0xc
lea eax, [ebp - 0xaac]
push eax
mov ecx, 0x1065aef0
call fcn.1000b0f2
and dword [ebp - 0x2f8], 0
jmp 0x10042bcc
mov eax, dword [ebp - 0x2f8]
inc eax
mov dword [ebp - 0x2f8], eax
mov eax, dword [ebp - 0x2f8]
cmp eax, dword [ebp - 0xaac]
jge 0x10042cc6
lea eax, [ebp - 0xac0]
push eax
lea eax, [ebp - 0xab8]
push eax
lea eax, [ebp - 0x970]
push eax
lea eax, [ebp - 0x960]
push eax
lea eax, [ebp - 0xb30]
push eax
lea eax, [ebp - 0xb68]
push eax
lea eax, [ebp - 0x968]
push eax
lea eax, [ebp - 0x958]
push eax
mov ecx, 0x1065aef0
call fcn.1000b0f2
mov ecx, eax
call fcn.1000b0f2
mov ecx, eax
call fcn.1000b0f2
mov ecx, eax
call fcn.1000b0f2
mov ecx, eax
call fcn.1000b0f2
mov ecx, eax
call fcn.1000b0f2
mov ecx, eax
call fcn.1000b0f2
mov ecx, eax
call fcn.1000b0f2
mov eax, dword [ebp - 0x958]
add eax, dword [ebp - 0xb68]
mov ecx, dword [ebp - 0x960]
add ecx, dword [ebp - 0xab8]
cmp eax, ecx
jne 0x10042ca6
mov eax, dword [ebp - 0x968]
add eax, dword [ebp - 0xb30]
mov ecx, dword [ebp - 0x970]
add ecx, dword [ebp - 0xac0]
cmp eax, ecx
jne 0x10042ca6
push fcn.1000eba4
mov edx, 0x10007b84
mov ecx, 0x1065ae38
call fcn.1000ebd6
mov ecx, eax
call fcn.1000b2e1
jmp 0x10042cc1
push fcn.1000eba4
mov edx, 0x10007b80
mov ecx, 0x1065ae38
call fcn.1000ebd6
mov ecx, eax
call fcn.1000b2e1
jmp 0x10042bbf
mov dword [ebp - 0x1fc], 0
jmp 0x10042cdf
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 1
jge 0x10042cfb
mov eax, dword [ebp - 0x1fc]
mov dword [ebp + eax*4 - 0xe5c], 6
jmp 0x10042cd2
mov eax, dword [ebp - 0x30]
cmp dword [ebp + eax*4 - 0x2dc], 0
jne 0x10042df7
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x2dc]
cmp dword [ebp + eax - 0x2dc], ecx
jge 0x10042d34
mov dword [ebp - 0x694], 1
jmp 0x10042d3b
and dword [ebp - 0x694], 0
cmp dword [ebp - 0x694], 0xffffffff
jne 0x10042d50
mov dword [ebp - 0x978], 1
jmp 0x10042d57
and dword [ebp - 0x978], 0
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0x2dc]
mov dword [ebp - 0xe64], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2dc]
mov dword [ebp - 0xe6c], eax
mov eax, dword [ebp - 0x30]
cmp dword [ebp + eax*4 - 0x2dc], 8
jbe 0x10042d93
mov dword [ebp - 0x44c], 1
jmp 0x10042d9a
and dword [ebp - 0x44c], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x44c], eax
jl 0x10042db1
mov dword [ebp - 0x7bc], 1
jmp 0x10042db8
and dword [ebp - 0x7bc], 0
cmp dword [ebp - 0x7bc], 0xfffffff9
ja 0x10042dcd
mov dword [ebp - 0x454], 1
jmp 0x10042dd4
and dword [ebp - 0x454], 0
mov eax, dword [ebp - 0x454]
add eax, 0xb333
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x2dc]
jne 0x10042df7
and dword [ebp - 0xb8c], 0
jmp 0x10042e01
mov dword [ebp - 0xb8c], 1
mov eax, dword [ebp - 0x69c]
mov dword [ebp - 0xe74], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2dc], 0
je 0x10042e32
cmp dword [ebp - 0x69c], 0
je 0x10042e32
mov dword [ebp - 0x45c], 1
jmp 0x10042e39
and dword [ebp - 0x45c], 0
mov eax, dword [ebp - 0x45c]
mov dword [ebp - 0x1a0], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0x2dc]
cmp dword [ebp - 0x1a0], eax
jl 0x10042e63
mov dword [ebp - 0x8dc], 1
jmp 0x10042e6a
and dword [ebp - 0x8dc], 0
mov eax, dword [ebp - 0x8dc]
mov dword [ebp - 0x980], eax
cmp dword [ebp - 0x30], 0
je 0x10042ef4
mov eax, dword [ebp - 0x30]
cmp dword [ebp + eax*4 - 0x2dc], 0
jne 0x10042e95
mov dword [ebp - 0x464], 1
jmp 0x10042e9c
and dword [ebp - 0x464], 0
mov eax, dword [ebp - 0x30]
imul eax, dword [ebp - 0x464]
test eax, eax
je 0x10042ed5
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x2dc], 0
je 0x10042ed5
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2dc], 0
je 0x10042ed5
mov dword [ebp - 0x6a4], 1
jmp 0x10042edc
and dword [ebp - 0x6a4], 0
cmp dword [ebp - 0x6a4], 0x7f7ffff9
je 0x10042ef4
mov dword [ebp - 0xac8], 1
jmp 0x10042efb
and dword [ebp - 0xac8], 0
cmp dword [ebp - 0x1a0], 0xca5eb5a4
je 0x10042f13
mov dword [ebp - 0x46c], 1
jmp 0x10042f1a
and dword [ebp - 0x46c], 0
imul eax, dword [ebp - 0x46c], 9
mov dword [ebp - 0x1a0], eax
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x1a0], eax
jg 0x10043009
mov dword [ebp - 0xe7c], 0xdb075aba
mov dword [ebp - 0xc50], 0xc25537
mov dword [ebp - 0xc4c], 0xc25537
mov dword [ebp - 0xc48], 0xc25537
mov dword [ebp - 0xc44], 0xc25537
lea ecx, [ebp - 0x38d]
call fcn.1000b58a
push eax
lea eax, [ebp - 0xc40]
push eax
lea eax, [ebp - 0xc50]
push eax
lea ecx, [ebp - 0x1168]
call fcn.1000b58d
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1100]
call fcn.1000b550
mov byte [ebp - 4], 8
mov dword [ebp - 0x7c4], 3
mov dword [ebp - 0xe84], 0x1d5e8e05
mov dword [ebp - 0xe8c], 0x172882c6
mov dword [ebp - 0x988], 0xa686
mov eax, dword [ebp - 0x7c4]
dec eax
mov dword [ebp - 0x7c4], eax
push 0
push 0x7c3e
push 0x5e71
push 0x2d2b
push 1
lea eax, [ebp - 0x988]
push eax
call fcn.1002dbc5
add esp, 0x18
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x1100]
call fcn.1000b576
jmp 0x1004304e
mov byte [ebp - 0xba], 0
push 0
push 0x2fbb
lea eax, [ebp - 0xba]
push eax
push 0x14d6
push 1
call fcn.1002bf59
add esp, 0x14
mov byte [ebp - 0xbc], 0
movzx eax, byte [ebp - 0xbc]
test eax, eax
je 0x1004304e
push 0x995
push 0
push 0
call dword [sym.imp.KERNEL32.dll_QueryDosDeviceW]
jmp 0x10042afe
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xf6c]
call fcn.1000b576
mov eax, dword [ebp - 0x48]
mov eax, dword [eax + 0x24]
and eax, 0x80000000
je 0x1004307b
mov dword [ebp - 0x474], 1
jmp 0x10043082
and dword [ebp - 0x474], 0
mov eax, dword [ebp - 0x474]
mov dword [ebp - 0x9c8], eax
mov dword [ebp - 0xc14], 0xf9b3198a
mov dword [ebp - 0xc10], 0xf9b3198a
mov dword [ebp - 0xc0c], 0xf9b3198a
mov dword [ebp - 0xc08], 0xf9b3198a
lea ecx, [ebp - 0x359]
call fcn.1000b58a
push eax
lea eax, [ebp - 0xc04]
push eax
lea eax, [ebp - 0xc14]
push eax
lea ecx, [ebp - 0x1170]
call fcn.1000b58d
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xf4]
call fcn.1000b550
mov dword [ebp - 4], 9
mov dword [ebp - 0x14], 0x18885c6f
mov dword [ebp - 0xac], 2
mov dword [ebp - 0x2a8], 0
jmp 0x1004311c
mov eax, dword [ebp - 0x2a8]
inc eax
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2a8], 1
jge 0x10043138
mov eax, dword [ebp - 0x2a8]
mov dword [ebp + eax*4 - 0x9a0], 6
jmp 0x1004310f
mov dword [ebp - 0x14], 0
jmp 0x10043148
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jg 0x10043b6c
mov dword [ebp - 0xcc], 0xfffffff9
mov dword [ebp - 0x4f4], 0x74473ca5
push dword [ebp - 0x14]
lea ecx, [ebp - 0xf4]
call fcn.1000b57b
cmp dword [eax], 0
je 0x100432ec
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0xe94], eax
push 1
lea ecx, [ebp - 0xf4]
call fcn.1000b57b
push 3
lea ecx, [ebp - 0xf4]
call fcn.1000b57b
mov eax, dword [eax]
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0
je 0x100431c9
cmp dword [ebp - 0xac], 0
je 0x100431c9
mov dword [ebp - 0xb38], 1
jmp 0x100431d0
and dword [ebp - 0xb38], 0
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0xe9c], eax
push 2
lea ecx, [ebp - 0xf4]
call fcn.1000b57b
cmp dword [eax], 1
jne 0x100431fa
mov dword [ebp - 0x6ac], 1
jmp 0x10043201
and dword [ebp - 0x6ac], 0
cmp dword [ebp - 0x6ac], 0xfffffff6
jbe 0x1004321c
cmp dword [ebp - 0xcc], 0
jne 0x1004321c
and dword [ebp - 0x47c], 0
jmp 0x10043226
mov dword [ebp - 0x47c], 1
mov eax, dword [ebp - 0x47c]
sub eax, 0xcf8b
neg eax
shl eax, 2
cmp eax, dword [ebp - 0x14]
jge 0x10043247
mov dword [ebp - 0x854], 1
jmp 0x1004324e
and dword [ebp - 0x854], 0
imul eax, dword [ebp - 0x854], 0xde2a
sub eax, dword [ebp - 0x14]
add eax, dword [ebp - 0xcc]
je 0x1004326f
mov dword [ebp - 0x484], 1
jmp 0x10043276
and dword [ebp - 0x484], 0
push 0
lea ecx, [ebp - 0xf4]
call fcn.1000b57b
mov ecx, dword [ebp - 0x484]
cmp ecx, dword [eax]
jge 0x10043299
mov dword [ebp - 0x6b4], 1
jmp 0x100432a0
and dword [ebp - 0x6b4], 0
push dword [ebp - 0x14]
lea ecx, [ebp - 0xf4]
call fcn.1000b57b
mov ecx, dword [ebp - 0x6b4]
cmp ecx, dword [eax]
jge 0x100432c4
mov dword [ebp - 0x48c], 1
jmp 0x100432cb
and dword [ebp - 0x48c], 0
push dword [ebp - 0x14]
lea ecx, [ebp - 0xf4]
call fcn.1000b57b
mov eax, dword [eax]
cmp eax, dword [ebp - 0x48c]
jge 0x100432ec
and dword [ebp - 0x7cc], 0
jmp 0x100432f6
mov dword [ebp - 0x7cc], 1
mov eax, dword [ebp - 0xcc]
cmp dword [ebp - 0x7cc], eax
je 0x10043310
mov dword [ebp - 0x494], 1
jmp 0x10043317
and dword [ebp - 0x494], 0
push dword [ebp - 0x14]
lea ecx, [ebp - 0xf4]
call fcn.1000b57b
mov esi, dword [ebp - 0x494]
sub esi, dword [eax]
push dword [ebp - 0x14]
lea ecx, [ebp - 0xf4]
call fcn.1000b57b
cmp esi, dword [eax]
jg 0x1004335e
push dword [ebp - 0x14]
lea ecx, [ebp - 0xf4]
call fcn.1000b57b
cmp dword [eax], 0
je 0x1004335e
mov dword [ebp - 0x6bc], 1
jmp 0x10043365
and dword [ebp - 0x6bc], 0
mov eax, dword [ebp - 0xcc]
add eax, dword [ebp - 0x6bc]
je 0x100435a8
mov dword [ebp - 0x11c], 0xbdbb389e
mov dword [ebp - 0x4ac], 0x11cd4ee3
push 2
lea ecx, [ebp - 0xbac]
call fcn.1000b514
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x204], 0
jmp 0x100433b5
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 2
jge 0x100433d7
push dword [ebp - 0x204]
lea ecx, [ebp - 0xbac]
call fcn.1000b57b
mov dword [eax], 8
jmp 0x100433a8
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0xea4], eax
mov eax, dword [ebp - 0x11c]
cmp dword [ebp - 0xac], eax
je 0x100433fd
mov dword [ebp - 0x990], 1
jmp 0x10043404
and dword [ebp - 0x990], 0
cmp dword [ebp - 0x11c], 0xa341
je 0x1004341c
mov dword [ebp - 0x49c], 1
jmp 0x10043423
and dword [ebp - 0x49c], 0
push 0
lea ecx, [ebp - 0xf4]
call fcn.1000b57b
mov eax, dword [eax]
cmp eax, dword [ebp - 0x49c]
jle 0x10043446
mov dword [ebp - 0x89c], 1
jmp 0x1004344d
and dword [ebp - 0x89c], 0
mov eax, dword [ebp - 0xac]
imul eax, dword [ebp - 0x89c]
cmp eax, dword [ebp - 0x11c]
jne 0x1004346e
mov dword [ebp - 0x4a4], 1
jmp 0x10043475
and dword [ebp - 0x4a4], 0
push dword [ebp - 0x14]
lea ecx, [ebp - 0xf4]
call fcn.1000b57b
mov ecx, dword [ebp - 0x4a4]
sub ecx, dword [eax]
imul ecx, dword [ebp - 0x11c]
test ecx, ecx
jne 0x100434b2
push dword [ebp - 0x14]
lea ecx, [ebp - 0xf4]
call fcn.1000b57b
cmp dword [eax], 0
jne 0x100434b2
and dword [ebp - 0x6c4], 0
jmp 0x100434bc
mov dword [ebp - 0x6c4], 1
mov eax, dword [ebp - 0x6c4]
mov dword [ebp - 0x4ac], eax
cmp dword [ebp - 0x4ac], 0
jne 0x100434e3
cmp dword [ebp - 0x11c], 0
jne 0x100434e3
and dword [ebp - 0x7d4], 0
jmp 0x100434ed
mov dword [ebp - 0x7d4], 1
push 2
lea ecx, [ebp - 0xf4]
call fcn.1000b57b
mov eax, dword [eax]
cmp eax, dword [ebp - 0x7d4]
jle 0x10043516
cmp dword [ebp - 0x14], 0
je 0x10043516
mov dword [ebp - 0x4b4], 1
jmp 0x1004351d
and dword [ebp - 0x4b4], 0
cmp dword [ebp - 0x4b4], 1
jne 0x10043532
mov dword [ebp - 0x6cc], 1
jmp 0x10043539
and dword [ebp - 0x6cc], 0
cmp dword [ebp - 0x6cc], 0x5806
je 0x10043551
mov dword [ebp - 0x4bc], 1
jmp 0x10043558
and dword [ebp - 0x4bc], 0
push 0
lea ecx, [ebp - 0xbac]
call fcn.1000b57b
mov ecx, dword [ebp - 0x4bc]
mov dword [eax], ecx
push dword [ebp - 0x14]
lea ecx, [ebp - 0xf4]
call fcn.1000b57b
cmp dword [eax], 0
je 0x10043594
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xbac]
call fcn.1000b576
jmp 0x10043b6c
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xbac]
call fcn.1000b576
jmp 0x10043b67
mov dword [ebp - 0x4e4], 1
mov dword [ebp - 0x178], 1
mov dword [ebp - 0xad8], 0xfff6
mov dword [ebp - 0xb40], 0xffffffff
mov dword [ebp - 0xad0], 0x2326
cmp dword [ebp - 0xad0], 0x11b1
jge 0x100438cb
lea eax, [ebp - 0x8ec]
push eax
lea eax, [ebp - 0x350]
push eax
push 0x10007b78
call fcn.1005274a
add esp, 0xc
lea eax, [ebp - 0x6d4]
push eax
lea eax, [ebp - 0x4c4]
push eax
lea eax, [ebp - 0x4cc]
push eax
push 0x10007960
call fcn.1005274a
add esp, 0x10
lea eax, [ebp - 0x6dc]
push eax
lea eax, [ebp - 0x4d4]
push eax
lea eax, [ebp - 0x4dc]
push eax
push 0x10007960
call fcn.1005274a
add esp, 0x10
mov eax, dword [ebp - 0x350]
cdq
push 8
pop ecx
shl ecx, 0
mov dword [ecx + 0x11f20548], eax
mov dword [ecx + 0x11f2054c], edx
mov dword [ebp - 0xa0], 1
mov dword [ebp - 0x300], 1
mov dword [ebp - 0x378], 1
mov eax, dword [ebp - 0x4cc]
imul eax, dword [ebp - 0x350]
cdq
idiv dword [ebp - 0x6d4]
add eax, dword [ebp - 0x4c4]
cdq
mov dword [ebp - 0x2b4], eax
mov dword [ebp - 0x2b0], edx
mov eax, dword [ebp - 0x4dc]
imul eax, dword [ebp - 0x350]
cdq
idiv dword [ebp - 0x6dc]
add eax, dword [ebp - 0x4d4]
cdq
mov dword [ebp - 0x2bc], eax
mov dword [ebp - 0x2b8], edx
mov eax, dword [ebp - 0xa0]
cmp eax, dword [ebp - 0x8ec]
je 0x100438aa
mov eax, dword [ebp - 0x2b0]
cmp eax, dword [ebp - 0x2b8]
jg 0x100437d8
jl 0x10043706
mov eax, dword [ebp - 0x2b4]
cmp eax, dword [ebp - 0x2bc]
jae 0x100437d8
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x85c], eax
mov eax, dword [ebp - 0x85c]
mov ecx, dword [ebp - 0x2b4]
cmp ecx, dword [eax*8 + 0x11f20548]
jne 0x1004373c
mov eax, dword [ebp - 0x85c]
mov ecx, dword [ebp - 0x2b0]
cmp ecx, dword [eax*8 + 0x11f2054c]
je 0x10043769
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0xa0]
mov ecx, dword [ebp - 0x2b4]
mov dword [eax*8 + 0x11f20548], ecx
mov ecx, dword [ebp - 0x2b0]
mov dword [eax*8 + 0x11f2054c], ecx
mov eax, dword [ebp - 0x300]
inc eax
mov dword [ebp - 0x300], eax
mov eax, dword [ebp - 0x4c4]
cdq
mov esi, eax
mov edi, edx
mov eax, dword [ebp - 0x6d4]
cdq
mov ebx, eax
mov eax, edx
mov dword [ebp - 0x998], eax
mov eax, dword [ebp - 0x4cc]
cdq
mov ecx, dword [ebp - 0x300]
push dword [ecx*8 + 0x11f2054c]
push dword [ecx*8 + 0x11f20548]
push edx
push eax
call fcn.100568b0
mov ecx, dword [ebp - 0x998]
push ecx
push ebx
push edx
push eax
call fcn.10068f30
add eax, esi
adc edx, edi
mov dword [ebp - 0x2b4], eax
mov dword [ebp - 0x2b0], edx
jmp 0x100438a5
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x7dc], eax
mov eax, dword [ebp - 0x7dc]
mov ecx, dword [ebp - 0x2bc]
cmp ecx, dword [eax*8 + 0x11f20548]
jne 0x1004380e
mov eax, dword [ebp - 0x7dc]
mov ecx, dword [ebp - 0x2b8]
cmp ecx, dword [eax*8 + 0x11f2054c]
je 0x1004383b
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0xa0]
mov ecx, dword [ebp - 0x2bc]
mov dword [eax*8 + 0x11f20548], ecx
mov ecx, dword [ebp - 0x2b8]
mov dword [eax*8 + 0x11f2054c], ecx
mov eax, dword [ebp - 0x378]
inc eax
mov dword [ebp - 0x378], eax
mov eax, dword [ebp - 0x4d4]
cdq
mov esi, eax
mov edi, edx
mov eax, dword [ebp - 0x6dc]
cdq
mov ebx, eax
mov eax, edx
mov dword [ebp - 0xb78], eax
mov eax, dword [ebp - 0x4dc]
cdq
mov ecx, dword [ebp - 0x378]
push dword [ecx*8 + 0x11f2054c]
push dword [ecx*8 + 0x11f20548]
push edx
push eax
call fcn.100568b0
mov ecx, dword [ebp - 0xb78]
push ecx
push ebx
push edx
push eax
call fcn.10068f30
add eax, esi
adc edx, edi
mov dword [ebp - 0x2bc], eax
mov dword [ebp - 0x2b8], edx
jmp 0x100436ce
mov eax, dword [ebp - 0x8ec]
push dword [eax*8 + 0x11f2054c]
push dword [eax*8 + 0x11f20548]
push 0x10007980
call fcn.10050d7d
add esp, 0xc
mov byte [ebp - 0xbe], 0
movzx eax, byte [ebp - 0xbe]
test eax, eax
je 0x1004390e
push 0xc0d
push 0x3248
push 0x7620
push 1
push 1
push 0x7b51
push 1
push 0x3674
push 0x5e01
push 0x16d3
call fcn.1002ad4c
add esp, 0x28
mov dword [ebp - 0x4e4], 0xedf21916
cmp dword [ebp - 0x4e4], 0x2215aca6
jg 0x10043930
mov dword [ebp - 0x6e4], 1
jmp 0x10043937
and dword [ebp - 0x6e4], 0
cmp dword [ebp - 0x178], 0x55a6f0ed
jl 0x1004394f
mov dword [ebp - 0x4ec], 1
jmp 0x10043956
and dword [ebp - 0x4ec], 0
mov eax, dword [ebp - 0x6e4]
cmp eax, dword [ebp - 0x4ec]
je 0x10043970
mov dword [ebp - 0x7e4], 1
jmp 0x10043977
and dword [ebp - 0x7e4], 0
mov eax, dword [ebp - 0x7e4]
mov dword [ebp - 0x4f4], eax
mov eax, dword [ebp - 0x4f4]
mov dword [ebp - 0xeac], eax
mov esi, dword [ebp - 0xac]
push dword [ebp - 0x14]
lea ecx, [ebp - 0xf4]
call fcn.1000b57b
cmp esi, dword [eax]
jne 0x100439b3
mov dword [ebp - 0x6ec], 1
jmp 0x100439ba
and dword [ebp - 0x6ec], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x9a0]
cmp dword [ebp - 0x6ec], eax
jl 0x100439db
mov dword [ebp - 0x4fc], 1
jmp 0x100439e2
and dword [ebp - 0x4fc], 0
mov eax, dword [ebp - 0xcc]
cmp eax, dword [ebp - 0x4fc]
jg 0x100439fc
mov dword [ebp - 0x864], 1
jmp 0x10043a03
and dword [ebp - 0x864], 0
mov eax, dword [ebp - 0xad8]
cmp dword [ebp - 0x864], eax
je 0x10043a2d
push dword [ebp - 0x14]
lea ecx, [ebp - 0xf4]
call fcn.1000b57b
cmp dword [eax], 0
jne 0x10043a2d
and dword [ebp - 0x504], 0
jmp 0x10043a37
mov dword [ebp - 0x504], 1
mov eax, dword [ebp - 0x178]
cmp dword [ebp - 0x504], eax
je 0x10043a61
push dword [ebp - 0x14]
lea ecx, [ebp - 0xf4]
call fcn.1000b57b
cmp dword [eax], 0
jne 0x10043a61
and dword [ebp - 0x6f4], 0
jmp 0x10043a6b
mov dword [ebp - 0x6f4], 1
push 2
lea ecx, [ebp - 0xf4]
call fcn.1000b57b
mov eax, dword [eax]
cmp eax, dword [ebp - 0x6f4]
jle 0x10043a8e
mov dword [ebp - 0x50c], 1
jmp 0x10043a95
and dword [ebp - 0x50c], 0
mov eax, dword [ebp - 0xac]
cmp dword [ebp - 0x50c], eax
jne 0x10043aaf
mov dword [ebp - 0x7ec], 1
jmp 0x10043ab6
and dword [ebp - 0x7ec], 0
mov esi, dword [ebp - 0x7ec]
dec esi
push dword [ebp - 0x14]
lea ecx, [ebp - 0xf4]
call fcn.1000b57b
cmp esi, dword [eax]
jge 0x10043adb
mov dword [ebp - 0x514], 1
jmp 0x10043ae2
and dword [ebp - 0x514], 0
mov eax, dword [ebp - 0x514]
mov dword [ebp - 0x178], eax
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0xeb4], eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0xf4]
call fcn.1000b57b
mov esi, eax
push 2
lea ecx, [ebp - 0xf4]
call fcn.1000b57b
mov ecx, dword [esi]
cmp ecx, dword [eax]
jg 0x10043b29
mov dword [ebp - 0x6fc], 1
jmp 0x10043b30
and dword [ebp - 0x6fc], 0
cmp dword [ebp - 0x6fc], 0xc7d0
jne 0x10043b48
mov dword [ebp - 0x9a8], 1
jmp 0x10043b4f
and dword [ebp - 0x9a8], 0
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0xebc], eax
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0xb40], eax
jmp 0x10043141
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xf4]
call fcn.1000b576
mov eax, dword [ebp - 0x48]
mov eax, dword [eax + 0x24]
and eax, 0x2000000
je 0x10043f0b
push 0x4000
mov eax, dword [ebp - 0x48]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x48]
push dword [eax + 8]
push 0x30dc
push 0x283f
call fcn.1002397e
pop ecx
pop ecx
call eax
mov dword [ebp - 0x264], 0x399841b3
push 1
lea ecx, [ebp - 0xf9c]
call fcn.1000b514
mov dword [ebp - 4], 0xb
push 2
lea ecx, [ebp - 0xd10]
call fcn.1000b514
mov byte [ebp - 4], 0xc
push 1
push 0x76a9
push 0x17a5
push 0x753a
lea eax, [ebp - 0xf9c]
push eax
push 0x6f37
push 0x102d
push 0x4ea1
push 0x4510
lea eax, [ebp - 0x1b8]
push eax
push 0x3433
push 0x329b
push 0x5f5d
push 0x308c
push 1
push 0x5f05
call fcn.1002aec0
add esp, 0x40
mov dword [ebp - 0x1b8], 0
jmp 0x10043c4e
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 2
jge 0x10043c70
push dword [ebp - 0x1b8]
lea ecx, [ebp - 0xd10]
call fcn.1000b57b
mov dword [eax], 0x6f9f
jmp 0x10043c41
mov dword [ebp - 0x264], 0
jmp 0x10043c89
mov eax, dword [ebp - 0x264]
inc eax
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 0x1c
jg 0x10043ee8
mov dword [ebp - 0x294], 0x57102d14
mov dword [ebp - 0x20c], 0
jmp 0x10043cb9
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 3
jge 0x10043cd5
mov eax, dword [ebp - 0x20c]
mov dword [ebp + eax*4 - 0x11e4], 1
jmp 0x10043cac
mov dword [ebp - 0x294], 0
jmp 0x10043cee
mov eax, dword [ebp - 0x294]
inc eax
mov dword [ebp - 0x294], eax
cmp dword [ebp - 0x294], 1
jne 0x10043ee3
push 3
lea ecx, [ebp - 0xf8c]
call fcn.1000b514
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x26c], 0x46b6eb6b
mov dword [ebp - 0xec4], 9
mov dword [ebp - 0x214], 0
jmp 0x10043d39
mov eax, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 3
jge 0x10043d5b
push dword [ebp - 0x214]
lea ecx, [ebp - 0xf8c]
call fcn.1000b57b
mov dword [eax], 9
jmp 0x10043d2c
mov dword [ebp - 0x26c], 2
jmp 0x10043d74
mov eax, dword [ebp - 0x26c]
dec eax
mov dword [ebp - 0x26c], eax
cmp dword [ebp - 0x26c], 0
jl 0x10043eac
mov dword [ebp - 0xecc], 0
mov dword [ebp - 0xed4], 0xfffffff7
mov dword [ebp - 0xedc], 0xc865b49d
mov dword [ebp - 0xee4], 0
push 3
lea ecx, [ebp - 0xf7c]
call fcn.1000b514
mov byte [ebp - 4], 0xe
mov dword [ebp - 0xeec], 1
push 3
lea ecx, [ebp - 0xca4]
call fcn.1000b514
mov byte [ebp - 4], 0xf
lea eax, [ebp - 0x64]
push eax
push 1
push 1
push 0x7ade
lea eax, [ebp - 0xf7c]
push eax
call fcn.1002b04d
add esp, 0x14
mov dword [ebp - 0x64], 0
jmp 0x10043e01
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 2
jge 0x10043e17
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x11b8], 0xfffffffe
jmp 0x10043dfa
mov dword [ebp - 0x64], 0
jmp 0x10043e27
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 3
jge 0x10043e43
push dword [ebp - 0x64]
lea ecx, [ebp - 0xca4]
call fcn.1000b57b
mov dword [eax], 0x96c9f93b
jmp 0x10043e20
push 0x20c8
lea eax, [ebp - 0xd10]
push eax
push 1
push 0x62dd
push 0
push 0x41cf
call fcn.1003b8b0
add esp, 0x18
push 0
lea ecx, [ebp - 0xca4]
call fcn.1000b57b
mov dword [ebp - 0x51c], eax
mov eax, dword [ebp - 0x51c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x51c]
mov dword [ecx], eax
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0xca4]
call fcn.1000b576
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0xf7c]
call fcn.1000b576
jmp 0x10043d67
mov byte [ebp - 0x107], 0
movzx eax, byte [ebp - 0x107]
test eax, eax
je 0x10043ecf
push 0
push 0
push 0x3ff
push 0
call dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xf8c]
call fcn.1000b576
jmp 0x10043ce1
jmp 0x10043c7c
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0xd10]
call fcn.1000b576
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xf9c]
call fcn.1000b576
jmp 0x10042161
mov dword [ebp - 0x9b0], 0
mov dword [ebp - 0x9b8], 0xfffffffa
mov dword [ebp - 0xb90], 0x294b58fe
mov dword [ebp - 0x93c], 0xfffffffa
push 1
lea ecx, [ebp - 0xfac]
call fcn.1000b514
mov dword [ebp - 4], 0x10
mov dword [ebp - 0xef4], 0x643c8f43
mov dword [ebp - 0xefc], 0xcfdef05d
mov dword [ebp - 0xf04], 0xb93b3bbb
mov dword [ebp - 0xf0c], 0x473ecfb8
mov dword [ebp - 0x1098], 0xfffffffa
mov dword [ebp - 0x10a0], 6
mov dword [ebp - 0x10a8], 0x3cc8c9f1
mov dword [ebp - 0x10b0], 0x98b42dcb
mov dword [ebp - 0x10cc], 0x2db22c08
mov dword [ebp - 0x10d4], 0xffffffff
mov dword [ebp - 0x10dc], 0x42c5acc8
mov dword [ebp - 0x8ac], 1
mov dword [ebp - 0x90], 0
jmp 0x10043fd8
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 1
jge 0x10043ffa
push dword [ebp - 0x90]
lea ecx, [ebp - 0xfac]
call fcn.1000b57b
mov dword [eax], 0xc444c9ca
jmp 0x10043fcb
mov dword [ebp - 0x90], 0
jmp 0x10044013
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 2
jge 0x1004402f
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0x1180], 0
jmp 0x10044006
push 0x6c10
lea eax, [ebp - 0x9b0]
push eax
push 1
lea eax, [ebp - 0x93c]
push eax
push 0x3981
push 0
push 1
lea eax, [ebp - 0x9b8]
push eax
push 0x3739
lea eax, [ebp - 0xb90]
push eax
push 0x553c
push 0x194e
call fcn.1002b71d
add esp, 0x30
mov eax, dword [ebp - 0x8ac]
inc eax
mov dword [ebp - 0x8ac], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xfac]
call fcn.1000b576
push 0x125f
lea eax, [ebp - 0x9c0]
push eax
push 0x1e13
lea eax, [ebp - 0xae8]
push eax
push 0x10eb
push 0x321c
lea eax, [ebp - 0x48]
push eax
push 1
lea eax, [ebp - 0x9c8]
push eax
lea eax, [ebp - 0x9f8]
push eax
push 0x171d
push 0x5cef
push 0x1b4e
push 1
push 0
push 0xccb
push 0x1ccb
push 0x3783
call fcn.100314a8
add esp, 0x48
push 2
lea ecx, [ebp - 0x8a8]
call fcn.1000b514
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x9e8], 0xfffffff8
mov dword [ebp - 0x10e4], 0x9f08664a
push 1
lea ecx, [ebp - 0xbb8]
call fcn.1000b514
mov byte [ebp - 4], 0x12
mov dword [ebp - 0xb48], 0x16ad
cmp dword [ebp - 0xb48], 0x8ec
jge 0x10044395
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x524]
push eax
mov ecx, 0x1065aef0
call fcn.1001d7f5
mov ecx, eax
call fcn.1001d7f5
mov ecx, eax
call fcn.1001d7f5
mov eax, dword [ebp - 0x21c]
imul eax, dword [ebp - 0x124]
cmp eax, dword [ebp - 0x524]
jge 0x1004418e
push 0x1000799c
call fcn.10053214
pop ecx
and dword [ebp - 0x9d0], 0
lea eax, [ebp - 0x9d0]
push eax
push dword [ebp - 0x124]
lea ecx, [ebp - 0x113c]
call fcn.1001dd0f
mov dword [ebp - 0xaf0], eax
mov eax, dword [ebp - 0xaf0]
mov dword [ebp - 0x9d8], eax
mov byte [ebp - 4], 0x13
push dword [ebp - 0x9d8]
push dword [ebp - 0x21c]
lea ecx, [ebp - 0xbdc]
call fcn.1001ddd0
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x113c]
call fcn.1000b576
and dword [ebp - 0x1a8], 0
and dword [ebp - 0x14c], 0
jmp 0x10044206
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
mov eax, dword [ebp - 0x14c]
cmp eax, dword [ebp - 0x21c]
jge 0x100442f2
and dword [ebp - 0x180], 0
jmp 0x1004422e
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
mov eax, dword [ebp - 0x180]
cmp eax, dword [ebp - 0x124]
jge 0x100442ed
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
mov eax, dword [ebp - 0x1a8]
cmp eax, dword [ebp - 0x524]
jle 0x10044265
jmp 0x100442ed
mov eax, dword [ebp - 0x124]
and eax, 0x80000001
jns 0x10044277
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
jne 0x100442c2
mov eax, dword [ebp - 0x14c]
and eax, 0x80000001
jns 0x1004428d
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x100442c2
mov eax, dword [ebp - 0x124]
dec eax
sub eax, dword [ebp - 0x180]
push eax
push dword [ebp - 0x14c]
lea ecx, [ebp - 0xbdc]
call fcn.1001ddf7
mov ecx, eax
call fcn.1000b57b
mov ecx, dword [ebp - 0x1a8]
mov dword [eax], ecx
jmp 0x100442e8
push dword [ebp - 0x180]
push dword [ebp - 0x14c]
lea ecx, [ebp - 0xbdc]
call fcn.1001ddf7
mov ecx, eax
call fcn.1000b57b
mov ecx, dword [ebp - 0x1a8]
mov dword [eax], ecx
jmp 0x10044221
jmp 0x100441f9
and dword [ebp - 0x224], 0
jmp 0x10044308
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
mov eax, dword [ebp - 0x224]
cmp eax, dword [ebp - 0x21c]
jge 0x10044386
and dword [ebp - 0x2ac], 0
jmp 0x1004432c
mov eax, dword [ebp - 0x2ac]
inc eax
mov dword [ebp - 0x2ac], eax
mov eax, dword [ebp - 0x2ac]
cmp eax, dword [ebp - 0x124]
jge 0x10044372
push dword [ebp - 0x2ac]
push dword [ebp - 0x224]
lea ecx, [ebp - 0xbdc]
call fcn.1001ddf7
mov ecx, eax
call fcn.1000b57b
push dword [eax]
mov ecx, 0x1065ae38
call fcn.1001da2d
mov edx, 0x10007a74
mov ecx, eax
call fcn.1000ebd6
jmp 0x1004431f
push fcn.1000eba4
mov ecx, 0x1065ae38
call fcn.1000b2e1
jmp 0x100442fb
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0xbdc]
call fcn.1001ddf2
mov dword [ebp - 0x18], 0
jmp 0x100443a5
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jge 0x100443bb
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x574], 0x648261f
jmp 0x1004439e
mov dword [ebp - 0x18], 0
jmp 0x100443cb
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x100443e7
push dword [ebp - 0x18]
lea ecx, [ebp - 0x8a8]
call fcn.1000b57b
mov dword [eax], 0xd29be1d9
jmp 0x100443c4
mov dword [ebp - 0x18], 0
jmp 0x100443f7
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x1004440d
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xfcc], 7
jmp 0x100443f0
push 0x240
push 1
push 0x6be9
lea eax, [ebp - 0xbb8]
push eax
push 0
push 0x7505
push 0x11db
lea eax, [ebp - 0x18]
push eax
push 0x1b8a
call fcn.1002cd5a
add esp, 0x24
push 0
lea ecx, [ebp - 0x8a8]
call fcn.1000b57b
and dword [eax], 0
jmp 0x10044473
push 0
lea ecx, [ebp - 0x8a8]
call fcn.1000b57b
mov dword [ebp - 0x704], eax
mov eax, dword [ebp - 0x704]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x704]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x8a8]
call fcn.1000b57b
cmp dword [eax], 0
jg 0x10044ad3
push 1
lea ecx, [ebp - 0x3b0]
call fcn.1000b514
mov byte [ebp - 4], 0x16
mov dword [ebp - 0x13c], 0xfffffffb
push 1
lea ecx, [ebp - 0x8f8]
call fcn.1000b514
mov byte [ebp - 4], 0x17
push 3
lea ecx, [ebp - 0xbd0]
call fcn.1000b514
mov byte [ebp - 4], 0x18
mov dword [ebp - 0x9e0], 0x3003
mov dword [ebp - 0xd5c], 0
mov dword [ebp - 0xd58], 0
mov dword [ebp - 0xd54], 0
mov dword [ebp - 0xd50], 0
mov dword [ebp - 0x28], 0
jmp 0x10044508
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 1
jge 0x10044524
push dword [ebp - 0x28]
lea ecx, [ebp - 0x3b0]
call fcn.1000b57b
mov dword [eax], 2
jmp 0x10044501
mov dword [ebp - 0x28], 0
jmp 0x10044534
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 1
jge 0x10044550
push dword [ebp - 0x28]
lea ecx, [ebp - 0x8f8]
call fcn.1000b57b
mov dword [eax], 0xf4c59cdc
jmp 0x1004452d
mov dword [ebp - 0x28], 0
jmp 0x10044560
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jge 0x1004457c
push dword [ebp - 0x28]
lea ecx, [ebp - 0xbd0]
call fcn.1000b57b
mov dword [eax], 6
jmp 0x10044559
push 0
lea ecx, [ebp - 0x3b0]
call fcn.1000b57b
and dword [eax], 0
jmp 0x100445b2
push 0
lea ecx, [ebp - 0x3b0]
call fcn.1000b57b
mov dword [ebp - 0x52c], eax
mov eax, dword [ebp - 0x52c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x52c]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x3b0]
call fcn.1000b57b
cmp dword [eax], 0
jg 0x10044963
mov dword [ebp - 0x7fc], 0xb5d1cb6a
push 3
lea ecx, [ebp - 0xfbc]
call fcn.1000b514
mov byte [ebp - 4], 0x19
mov dword [ebp - 0x274], 0
jmp 0x100445fc
mov eax, dword [ebp - 0x274]
inc eax
mov dword [ebp - 0x274], eax
cmp dword [ebp - 0x274], 3
jge 0x1004461e
push dword [ebp - 0x274]
lea ecx, [ebp - 0xfbc]
call fcn.1000b57b
mov dword [eax], 0x737e
jmp 0x100445ef
push 0
lea ecx, [ebp - 0x8a8]
call fcn.1000b57b
mov eax, dword [eax]
mov ecx, 0xfff7
sub ecx, dword [ebp + eax*4 - 0x574]
jne 0x10044656
push 0
lea ecx, [ebp - 0x3b0]
call fcn.1000b57b
cmp dword [eax], 0
jne 0x10044656
and dword [ebp - 0x7f4], 0
jmp 0x10044660
mov dword [ebp - 0x7f4], 1
mov eax, dword [ebp - 0x7f4]
mov dword [ebp - 0x13c], eax
mov esi, dword [ebp - 0x13c]
push 0
lea ecx, [ebp - 0x8f8]
call fcn.1000b57b
mov dword [eax], esi
mov dword [ebp - 0x13c], 0
jmp 0x1004469a
mov eax, dword [ebp - 0x13c]
dec eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0
jl 0x1004494f
mov dword [ebp - 0x10ec], 0xf3cc
mov dword [ebp - 0x70c], 0
mov dword [ebp - 0x358], 1
mov dword [ebp - 0x308], 9
mov dword [ebp - 0xb88], 0xfffffffd
mov dword [ebp - 0x10f4], 0x497140da
mov dword [ebp - 0xaf8], 0xffffffff
cmp dword [ebp - 0x70c], 0
jne 0x1004470e
mov eax, dword [ebp - 0x308]
inc eax
mov dword [ebp - 0x308], eax
jne 0x1004470e
and dword [ebp - 0x714], 0
jmp 0x10044718
mov dword [ebp - 0x714], 1
push 0
lea ecx, [ebp - 0x3b0]
call fcn.1000b57b
cmp dword [eax], 0
jne 0x10044738
xor eax, eax
inc eax
jne 0x10044738
and dword [ebp - 0x534], 0
jmp 0x10044742
mov dword [ebp - 0x534], 1
push 0
lea ecx, [ebp - 0x8f8]
call fcn.1000b57b
mov ecx, dword [ebp - 0x534]
cmp ecx, dword [eax]
jge 0x10044774
push 1
lea ecx, [ebp - 0xbd0]
call fcn.1000b57b
cmp dword [eax], 0
jne 0x10044774
and dword [ebp - 0x53c], 0
jmp 0x1004477e
mov dword [ebp - 0x53c], 1
mov eax, dword [ebp - 0x70c]
cmp dword [ebp - 0x53c], eax
jg 0x10044798
mov dword [ebp - 0x86c], 1
jmp 0x1004479f
and dword [ebp - 0x86c], 0
push 0
lea ecx, [ebp - 0x8a8]
call fcn.1000b57b
mov ecx, dword [ebp - 0x86c]
cmp ecx, dword [eax]
jge 0x100447c2
mov dword [ebp - 0x544], 1
jmp 0x100447c9
and dword [ebp - 0x544], 0
imul eax, dword [ebp - 0x544], 0xffff
cmp eax, dword [ebp - 0x7fc]
jl 0x100447e7
mov dword [ebp - 0x54c], 1
jmp 0x100447ee
and dword [ebp - 0x54c], 0
mov eax, dword [ebp - 0x714]
cmp eax, dword [ebp - 0x54c]
je 0x10044808
mov dword [ebp - 0x554], 1
jmp 0x1004480f
and dword [ebp - 0x554], 0
mov eax, dword [ebp - 0x7fc]
add eax, dword [ebp - 0x554]
je 0x10044826
cmp dword [ebp - 0xb88], 0
jne 0x10044841
push 0
lea ecx, [ebp - 0x8f8]
call fcn.1000b57b
cmp dword [eax], 0
jne 0x10044841
and dword [ebp - 0x71c], 0
jmp 0x1004484b
mov dword [ebp - 0x71c], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x71c]
sub ecx, dword [ebp + eax - 0xfcc]
jne 0x10044872
cmp dword [ebp - 0x9e0], 0
jne 0x10044872
and dword [ebp - 0x55c], 0
jmp 0x1004487c
mov dword [ebp - 0x55c], 1
cmp dword [ebp - 0x55c], 0x385fae11
jl 0x10044894
mov dword [ebp - 0x8e8], 1
jmp 0x1004489b
and dword [ebp - 0x8e8], 0
mov eax, dword [ebp - 0x358]
dec eax
mov dword [ebp - 0x358], eax
mov eax, dword [ebp - 0x358]
add eax, dword [ebp - 0x8e8]
cmp eax, 0xfffb
jne 0x100448c7
mov dword [ebp - 0x564], 1
jmp 0x100448ce
and dword [ebp - 0x564], 0
cmp dword [ebp - 0x564], 0xfffffffc
jne 0x100448e3
mov dword [ebp - 0x724], 1
jmp 0x100448ea
and dword [ebp - 0x724], 0
push 0
lea ecx, [ebp - 0x3b0]
call fcn.1000b57b
mov ecx, dword [ebp - 0x724]
cmp ecx, dword [eax]
jg 0x1004490d
mov dword [ebp - 0x56c], 1
jmp 0x10044914
and dword [ebp - 0x56c], 0
push 0
lea ecx, [ebp - 0xbd0]
call fcn.1000b57b
mov ecx, dword [ebp - 0x56c]
cmp ecx, dword [eax]
je 0x10044937
mov dword [ebp - 0x804], 1
jmp 0x1004493e
and dword [ebp - 0x804], 0
mov eax, dword [ebp - 0x804]
mov dword [ebp - 0xaf8], eax
jmp 0x1004468d
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0xfbc]
call fcn.1000b576
jmp 0x1004458e
push 0
lea ecx, [ebp - 0x8a8]
call fcn.1000b57b
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x574]
mov dword [ebp - 0x10d8], eax
xor eax, eax
inc eax
je 0x100449a2
push 0
lea ecx, [ebp - 0xbb8]
call fcn.1000b57b
cmp dword [eax], 0
je 0x100449a2
mov dword [ebp - 0x72c], 1
jmp 0x100449a9
and dword [ebp - 0x72c], 0
imul eax, dword [ebp - 0x72c], 0xfffffff6
neg eax
cmp eax, 3
jge 0x100449c3
mov dword [ebp - 0x57c], 1
jmp 0x100449ca
and dword [ebp - 0x57c], 0
push 0
lea ecx, [ebp - 0xbb8]
call fcn.1000b57b
mov ecx, dword [ebp - 0x57c]
imul ecx, dword [eax]
cmp ecx, dword [ebp - 0x9e8]
jne 0x100449f4
mov dword [ebp - 0x874], 1
jmp 0x100449fb
and dword [ebp - 0x874], 0
push 0
lea ecx, [ebp - 0x3b0]
call fcn.1000b57b
mov ecx, dword [ebp - 0x874]
cmp ecx, dword [eax]
jle 0x10044a30
push 0
lea ecx, [ebp - 0x3b0]
call fcn.1000b57b
cmp dword [eax], 0
je 0x10044a30
mov dword [ebp - 0x584], 1
jmp 0x10044a37
and dword [ebp - 0x584], 0
cmp dword [ebp - 0x584], 0
jl 0x10044a4c
mov dword [ebp - 0x310], 1
jmp 0x10044a53
and dword [ebp - 0x310], 0
push 0
lea ecx, [ebp - 0x8f8]
call fcn.1000b57b
mov ecx, dword [ebp - 0x310]
mov dword [eax], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd5c]
cmp dword [ebp - 0x310], eax
jle 0x10044a89
mov dword [ebp - 0xb50], 1
jmp 0x10044a90
and dword [ebp - 0xb50], 0
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xfcc], 1
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0xbd0]
call fcn.1000b576
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x8f8]
call fcn.1000b576
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x3b0]
call fcn.1000b576
jmp 0x1004444f
mov byte [ebp - 0xbb], 0
movzx eax, byte [ebp - 0xbb]
test eax, eax
je 0x10044af6
push 0x56a0
push 0
push 1
call fcn.10037a32
add esp, 0xc
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0xbb8]
call fcn.1000b576
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x8a8]
call fcn.1000b576
lea eax, [ebp - 0x734]
push eax
push 0x2ffc
push 1
push 0
push 0xfe7
lea eax, [ebp - 0x48]
push eax
push 0x1e8a
lea eax, [ebp - 0x22c]
push eax
push 0x7439
push 0x63f2
push 1
push 0x65e3
call fcn.1002fd00
add esp, 0x30
cmp dword [ebp - 0x734], 0
jbe 0x10044c3e
mov dword [ebp - 0xb00], 0x42eb90da
mov dword [ebp - 0x12c], 2
mov dword [ebp - 0x9f0], 0xfc42ff18
mov dword [ebp - 0x29c], 0
jmp 0x10044b96
mov eax, dword [ebp - 0x29c]
inc eax
mov dword [ebp - 0x29c], eax
cmp dword [ebp - 0x29c], 2
jge 0x10044bb2
mov eax, dword [ebp - 0x29c]
mov dword [ebp + eax*4 - 0xd70], 5
jmp 0x10044b89
lea eax, [ebp - 0x9f0]
push eax
push 0
push 0x13b3
push 0x4ae6
push 1
lea eax, [ebp - 0xb00]
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.1002c91e
add esp, 0x1c
mov dword [ebp - 0x12c], 0
jmp 0x10044bf6
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 2
jge 0x10044c12
mov eax, dword [ebp - 0x12c]
mov dword [ebp + eax*4 - 0xd70], 0x9c3997b
jmp 0x10044be9
lea eax, [ebp - 0x10ac]
push eax
push dword [ebp - 0x9f8]
push dword [ebp - 0x734]
mov eax, dword [ebp - 0x48]
push dword [eax + 8]
push 0x30dc
push 0x2dfd
call fcn.1002397e
pop ecx
pop ecx
call eax
jmp 0x10042161
jmp 0x10049708
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0xb08], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0xa08], eax
lea eax, [ebp + 0x28]
mov dword [ebp - 0xb98], eax
mov eax, dword [ebp + 0x30]
mov dword [ebp - 0xa00], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0xa44], eax
mov eax, dword [ebp - 0xb98]
movzx eax, byte [eax]
test eax, eax
je 0x100496d3
mov eax, dword [ebp - 0xa00]
mov dword [ebp - 0xa3c], eax
mov eax, dword [ebp - 0xb08]
mov dword [ebp - 0xa2c], eax
mov eax, dword [ebp - 0xa08]
mov dword [ebp - 0x2a0], eax
mov eax, dword [ebp - 0x2a0]
mov eax, dword [eax + 4]
mov dword [ebp - 0x838], eax
mov dword [ebp - 0x50], 8
mov dword [ebp - 0xd68], 0xb0f73838
mov dword [ebp - 0xdbc], 0xffffffff
mov dword [ebp - 0xd74], 0xc3099cf
mov dword [ebp - 0xdc4], 0
push 2
lea ecx, [ebp - 0xfdc]
call fcn.1000b514
mov dword [ebp - 4], 0x1a
mov dword [ebp - 0x58c], 0xffffffff
mov dword [ebp - 0x78], 0
jmp 0x10044d16
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 1
jge 0x10044d2c
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0xd80], 0x16580849
jmp 0x10044d0f
mov dword [ebp - 0x78], 0
jmp 0x10044d3c
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 2
jge 0x10044d58
push dword [ebp - 0x78]
lea ecx, [ebp - 0xfdc]
call fcn.1000b57b
mov dword [eax], 5
jmp 0x10044d35
mov byte [ebp - 0xf5], 0
movzx eax, byte [ebp - 0xf5]
test eax, eax
je 0x10044d82
push 0x7ced
push 0
push 0x2555
push 1
push 1
call fcn.1002a0af
add esp, 0x14
mov eax, dword [ebp - 0x58c]
inc eax
mov dword [ebp - 0x58c], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xfdc]
call fcn.1000b576
mov dword [ebp - 0x368], 0x266d8ff8
mov dword [ebp - 0x27c], 0x6fe7d8a8
mov dword [ebp - 0xdcc], 0x2ff40fc0
mov dword [ebp - 0x234], 0
jmp 0x10044dd5
mov eax, dword [ebp - 0x234]
inc eax
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 4
jge 0x10044df1
mov eax, dword [ebp - 0x234]
mov dword [ebp + eax*4 - 0x1200], 0x540d
jmp 0x10044dc8
mov dword [ebp - 0x27c], 3
jmp 0x10044e0a
mov eax, dword [ebp - 0x27c]
dec eax
mov dword [ebp - 0x27c], eax
cmp dword [ebp - 0x27c], 0
jl 0x10044e4c
mov dword [ebp - 0x80c], 1
mov eax, dword [ebp - 0x80c]
inc eax
mov dword [ebp - 0x80c], eax
mov byte [ebp - 0xbd], 0
movzx eax, byte [ebp - 0xbd]
test eax, eax
je 0x10044e4a
push 0x46ae
push 0
call fcn.1002acfc
pop ecx
pop ecx
jmp 0x10044dfd
mov dword [ebp - 0x488], 0x95ff79fa
push 4
lea ecx, [ebp - 0xcd4]
call fcn.1000b514
mov dword [ebp - 4], 0x1b
mov dword [ebp - 0xb4], 0
push 0x556f
push 0x4545
push 0
push 0x6165
lea eax, [ebp - 0xd8c]
push eax
push 0x1424
lea eax, [ebp - 0xcd4]
push eax
push 0x5b2f
push 0x10c3
call fcn.1002dd98
add esp, 0x24
mov dword [ebp - 0xb4], 3
jmp 0x10044ec3
mov eax, dword [ebp - 0xb4]
dec eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0
jl 0x10044efb
mov byte [ebp - 0xdd], 0
movzx eax, byte [ebp - 0xdd]
test eax, eax
je 0x10044ef9
push 0
push 0x7e1
push 0x6c0f
push 0x6e25
push 1
call fcn.1002a38f
add esp, 0x14
jmp 0x10044eb6
mov dword [ebp - 0xb4], 0xfffffff9
jmp 0x10044f14
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0x15
jl 0x10044f33
push 3
lea ecx, [ebp - 0xcd4]
call fcn.1000b57b
cmp dword [eax], 0
je 0x10044f31
jmp 0x10044f33
jmp 0x10044f07
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xcd4]
call fcn.1000b576
mov dword [ebp - 0xadc], 0x974498b9
mov dword [ebp - 0x40], 0x7f6af112
mov dword [ebp - 0x188], 0xfffffffc
push 2
lea ecx, [ebp - 0x8b8]
call fcn.1000b514
mov dword [ebp - 4], 0x1c
push 2
lea ecx, [ebp - 0xd04]
call fcn.1000b514
mov byte [ebp - 4], 0x1d
mov dword [ebp - 0x318], 1
push 0x4d99
push 0x4b5d
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x8b8]
push eax
push 0x5c4c
push 0
call fcn.1002d0da
add esp, 0x18
mov dword [ebp - 0x58], 0
jmp 0x10044fc0
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 2
jge 0x10044fd9
push dword [ebp - 0x58]
lea ecx, [ebp - 0xd04]
call fcn.1000b57b
and dword [eax], 0
jmp 0x10044fb9
mov dword [ebp - 0x58], 0
jmp 0x10044fe9
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 4
jge 0x10044fff
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x1198], 0x355b561d
jmp 0x10044fe2
mov dword [ebp - 0x40], 0
jmp 0x1004500f
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0x11
jle 0x100456d4
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x73c], 0xa553fc2f
mov dword [ebp - 0x938], 0xfffffffb
mov dword [ebp - 0x934], 0xfffffffb
mov dword [ebp - 0x930], 0xfffffffb
mov dword [ebp - 0x92c], 0xfffffffb
mov dword [ebp - 0x1c8], 0xffffffff
mov dword [ebp - 0x360], 0xcdffa870
mov dword [ebp - 0x38c], 0x2ee8b720
mov dword [ebp - 0xdd4], 0xaff7
mov dword [ebp - 0xddc], 0x821d2a6a
mov dword [ebp - 0x5e4], 0xfffffffb
mov dword [ebp - 0x23c], 0
jmp 0x100450a7
mov eax, dword [ebp - 0x23c]
inc eax
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 3
jge 0x100450c3
mov eax, dword [ebp - 0x23c]
mov dword [ebp + eax*4 - 0x91c], 0x880d0e10
jmp 0x1004509a
cmp dword [ebp - 0x40], 0xffffffff
jle 0x100450d5
mov dword [ebp - 0xb58], 1
jmp 0x100450dc
and dword [ebp - 0xb58], 0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0xd98], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0xef8], eax
cmp dword [ebp - 0x40], 0xd61f
je 0x10045103
mov dword [ebp - 0x594], 1
jmp 0x1004510a
and dword [ebp - 0x594], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x594]
mov dword [ebp + eax - 0x938], ecx
mov dword [ebp - 0x73c], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x73c], eax
jg 0x1004513e
mov dword [ebp - 0x59c], 1
jmp 0x10045145
and dword [ebp - 0x59c], 0
mov eax, dword [ebp - 0x59c]
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 0
jne 0x10045175
cmp dword [ebp - 0x1c8], 0
jne 0x10045175
mov eax, 0x9afc
test eax, eax
jne 0x10045175
and dword [ebp - 0x8bc], 0
jmp 0x1004517f
mov dword [ebp - 0x8bc], 1
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x8bc], eax
jne 0x10045196
mov dword [ebp - 0x5a4], 1
jmp 0x1004519d
and dword [ebp - 0x5a4], 0
mov eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0x5a4]
jg 0x100451b4
mov dword [ebp - 0x744], 1
jmp 0x100451bb
and dword [ebp - 0x744], 0
cmp dword [ebp - 0x744], 0xe5de2cae
ja 0x100451d3
mov dword [ebp - 0x5ac], 1
jmp 0x100451da
and dword [ebp - 0x5ac], 0
mov eax, dword [ebp - 0x40]
add eax, dword [ebp - 0x5ac]
jne 0x100451fd
cmp dword [ebp - 0x1c8], 0
jne 0x100451fd
cmp dword [ebp - 0x10], 0
jne 0x100451fd
and dword [ebp - 0x814], 0
jmp 0x10045207
mov dword [ebp - 0x814], 1
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x814], eax
jge 0x1004521e
mov dword [ebp - 0x5b4], 1
jmp 0x10045225
and dword [ebp - 0x5b4], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x5b4], eax
jg 0x1004523c
mov dword [ebp - 0x74c], 1
jmp 0x10045243
and dword [ebp - 0x74c], 0
mov eax, dword [ebp - 0x74c]
sub eax, 0xc10b
cmp eax, dword [ebp - 0x40]
jg 0x1004525f
mov dword [ebp - 0x5bc], 1
jmp 0x10045266
and dword [ebp - 0x5bc], 0
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x5bc]
imul eax, dword [ebp - 0x10]
cmp eax, 0x312fbb6b
jle 0x10045287
mov dword [ebp - 0x87c], 1
jmp 0x1004528e
and dword [ebp - 0x87c], 0
mov eax, dword [ebp - 0x87c]
mov dword [ebp - 0x188], eax
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x5c4], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x5c4]
mov dword [ebp + eax - 0x91c], ecx
mov eax, dword [ebp - 0x5c4]
mov dword [ebp - 0x360], eax
cmp dword [ebp - 0x360], 0xfffffffd
jb 0x100452d9
mov dword [ebp - 0x754], 1
jmp 0x100452e0
and dword [ebp - 0x754], 0
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x754]
jl 0x100452f7
mov dword [ebp - 0xa10], 1
jmp 0x100452fe
and dword [ebp - 0xa10], 0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0xd60], eax
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x188], eax
jg 0x1004531e
mov dword [ebp - 0x5cc], 1
jmp 0x10045325
and dword [ebp - 0x5cc], 0
mov eax, dword [ebp - 0x5cc]
mov dword [ebp - 0x38c], eax
mov esi, dword [ebp - 0x38c]
push 0
lea ecx, [ebp - 0x8b8]
call fcn.1000b57b
cmp esi, dword [eax]
jne 0x10045354
mov dword [ebp - 0x81c], 1
jmp 0x1004535b
and dword [ebp - 0x81c], 0
push 0
lea ecx, [ebp - 0xd04]
call fcn.1000b57b
mov ecx, dword [ebp - 0x81c]
mov dword [eax], ecx
mov dword [ebp - 0x10], 0
jmp 0x10045380
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jg 0x100456cf
mov dword [ebp - 0xba0], 1
mov dword [ebp - 0x320], 1
mov dword [ebp - 0xb18], 1
mov dword [ebp - 0x2a4], 0
jmp 0x100453c1
mov eax, dword [ebp - 0x2a4]
inc eax
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 3
jge 0x100453dd
mov eax, dword [ebp - 0x2a4]
mov dword [ebp + eax*4 - 0xcec], 0xffffffff
jmp 0x100453b4
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
mov ecx, dword [ebp + ecx*4 - 0x91c]
cmp dword [ebp + eax*4 - 0x934], ecx
jl 0x1004552d
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x91c]
sub eax, dword [ebp - 0x38c]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0xcec]
jne 0x10045421
mov dword [ebp - 0x5d4], 1
jmp 0x10045428
and dword [ebp - 0x5d4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x938]
cmp dword [ebp - 0x5d4], eax
jne 0x10045449
mov dword [ebp - 0x75c], 1
jmp 0x10045450
and dword [ebp - 0x75c], 0
imul esi, dword [ebp - 0x75c], 0xe686
push 0
lea ecx, [ebp - 0x8b8]
call fcn.1000b57b
imul esi, dword [eax]
mov eax, dword [ebp - 0x10]
cmp esi, dword [ebp + eax*4 - 0x91c]
jg 0x10045482
mov dword [ebp - 0xb10], 1
jmp 0x10045489
and dword [ebp - 0xb10], 0
mov eax, dword [ebp - 0x318]
dec eax
mov dword [ebp - 0x318], eax
mov eax, dword [ebp - 0x318]
mov dword [ebp - 0x1040], eax
push 1
lea ecx, [ebp - 0x8b8]
call fcn.1000b57b
push 1
lea ecx, [ebp - 0x8b8]
call fcn.1000b57b
mov ecx, dword [ebp - 0x10]
mov ecx, dword [ebp + ecx*4 - 0x91c]
cmp dword [eax], ecx
jne 0x100454d6
mov dword [ebp - 0xa18], 1
jmp 0x100454dd
and dword [ebp - 0xa18], 0
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0xda8], eax
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x934], 0
jne 0x10045505
cmp dword [ebp - 0xba0], 0
jne 0x10045505
and dword [ebp - 0x5dc], 0
jmp 0x1004550f
mov dword [ebp - 0x5dc], 1
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x91c]
cmp eax, dword [ebp - 0x5dc]
jl 0x1004552d
mov dword [ebp - 0x8e0], 1
jmp 0x10045534
and dword [ebp - 0x8e0], 0
imul eax, dword [ebp - 0x8e0], 0x89f1
mov dword [ebp - 0x360], eax
mov dword [ebp - 0x188], 0xffffffff
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x5e4], eax
mov eax, dword [ebp - 0x5e4]
mov dword [ebp - 0x764], eax
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x764]
mov dword [ebp + eax*4 - 0x934], ecx
cmp dword [ebp - 0x764], 3
jl 0x1004558b
mov dword [ebp - 0x5ec], 1
jmp 0x10045592
and dword [ebp - 0x5ec], 0
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x5ec]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0xcec]
jge 0x100455b7
mov dword [ebp - 0x824], 1
jmp 0x100455be
and dword [ebp - 0x824], 0
mov eax, dword [ebp - 0x824]
mov dword [ebp - 0x320], eax
cmp dword [ebp - 0x320], 0
jne 0x100455e3
push 4
pop eax
test eax, eax
jne 0x100455e3
and dword [ebp - 0xa20], 0
jmp 0x100455ed
mov dword [ebp - 0xa20], 1
mov esi, dword [ebp - 0x320]
push 1
lea ecx, [ebp - 0x8b8]
call fcn.1000b57b
cmp esi, dword [eax]
jne 0x10045610
mov dword [ebp - 0x5f4], 1
jmp 0x10045617
and dword [ebp - 0x5f4], 0
imul eax, dword [ebp - 0x5f4], 0xd0e4
add eax, 0x1b0
cmp dword [ebp - 0x1c8], eax
jle 0x1004563a
mov dword [ebp - 0x76c], 1
jmp 0x10045641
and dword [ebp - 0x76c], 0
push 1
lea ecx, [ebp - 0x8b8]
call fcn.1000b57b
mov eax, dword [eax]
cmp eax, dword [ebp - 0x76c]
jg 0x10045664
mov dword [ebp - 0x5fc], 1
jmp 0x1004566b
and dword [ebp - 0x5fc], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x5fc]
sub ecx, dword [ebp + eax - 0xcec]
neg ecx
cmp ecx, 0xffffffff
je 0x10045691
mov dword [ebp - 0x884], 1
jmp 0x10045698
and dword [ebp - 0x884], 0
mov eax, dword [ebp - 0xb18]
cmp dword [ebp - 0x884], eax
jge 0x100456b2
mov dword [ebp - 0xa28], 1
jmp 0x100456b9
and dword [ebp - 0xa28], 0
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x1198], 0x6b4e22dd
jmp 0x10045379
jmp 0x10045008
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0xd04]
call fcn.1000b576
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x8b8]
call fcn.1000b576
mov dword [ebp - 0xbec], 0x70cc321a
mov dword [ebp - 0xbe8], 0x70cc321a
mov dword [ebp - 0xbe4], 0x70cc321a
mov dword [ebp - 0xbe0], 0x70cc321a
mov dword [ebp - 0x60], 9
mov dword [ebp - 0xdc], 8
mov dword [ebp - 0x244], 0
jmp 0x10045744
mov eax, dword [ebp - 0x244]
inc eax
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 2
jge 0x10045760
mov eax, dword [ebp - 0x244]
mov dword [ebp + eax*4 - 0x3b8], 0x62fd41e5
jmp 0x10045737
mov dword [ebp - 0x60], 0
jmp 0x10045770
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 1
jg 0x10045cf1
mov dword [ebp - 0xa48], 0xf5ed9a92
mov dword [ebp - 0x384], 0
push 3
lea ecx, [ebp - 0x904]
call fcn.1000b514
mov dword [ebp - 4], 0x1e
mov dword [ebp - 0x604], 0
mov dword [ebp - 0xd4], 1
mov dword [ebp - 0xa38], 0x97867a7b
mov dword [ebp - 0xab4], 0xdeea39b
mov dword [ebp - 0xabc], 0x5bcd5918
mov dword [ebp - 0x284], 0
jmp 0x100457ed
mov eax, dword [ebp - 0x284]
inc eax
mov dword [ebp - 0x284], eax
cmp dword [ebp - 0x284], 3
jge 0x1004580f
push dword [ebp - 0x284]
lea ecx, [ebp - 0x904]
call fcn.1000b57b
mov dword [eax], 0xb95ae649
jmp 0x100457e0
lea eax, [ebp - 0x604]
push eax
push 0
push 0x312c
call fcn.1003aded
add esp, 0xc
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp + eax*4 - 0x3b8]
mov dword [ebp - 0xf00], eax
cmp dword [ebp - 0x60], 0xf5bf
jge 0x1004584a
mov dword [ebp - 0x61c], 1
jmp 0x10045851
and dword [ebp - 0x61c], 0
push 0
lea ecx, [ebp - 0x904]
call fcn.1000b57b
mov dword [ebp - 0xb60], eax
push 1
lea ecx, [ebp - 0x904]
call fcn.1000b57b
mov ecx, dword [ebp - 0xb60]
mov eax, dword [eax]
mov dword [ecx], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3b8]
mov dword [ebp - 0xdb0], eax
cmp dword [ebp - 0x604], 0xf355c0c8
jne 0x100458a6
mov dword [ebp - 0x774], 1
jmp 0x100458ad
and dword [ebp - 0x774], 0
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0xa30], eax
mov eax, dword [ebp - 0x774]
mov dword [ebp - 0xb20], eax
mov eax, dword [ebp - 0xd4]
dec eax
mov dword [ebp - 0xd4], eax
mov eax, dword [ebp - 0xa30]
cmp eax, dword [ebp - 0xb20]
jle 0x100458ec
mov dword [ebp - 0x60c], 1
jmp 0x100458f3
and dword [ebp - 0x60c], 0
cmp dword [ebp - 0x60c], 0xdaa0
jg 0x1004590b
mov dword [ebp - 0x82c], 1
jmp 0x10045912
and dword [ebp - 0x82c], 0
mov eax, dword [ebp - 0x82c]
mov dword [ebp - 0x384], eax
cmp dword [ebp - 0x384], 0
je 0x1004593c
cmp dword [ebp - 0xa38], 0
je 0x1004593c
mov dword [ebp - 0x614], 1
jmp 0x10045943
and dword [ebp - 0x614], 0
mov eax, dword [ebp - 0x614]
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0x6c2e
je 0x10045967
mov dword [ebp - 0x77c], 1
jmp 0x1004596e
and dword [ebp - 0x77c], 0
mov eax, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x77c]
sub ecx, dword [ebp + eax*4 - 0x3b8]
cmp dword [ebp - 0x61c], ecx
jl 0x100459ab
mov dword [ebp - 0xb94], 0
mov dword [ebp - 0xa40], 0xfffd
mov eax, dword [ebp - 0xb94]
mov dword [ebp - 0xa40], eax
jmp 0x10045cdd
mov dword [ebp - 0xb28], 0xffffffff
mov dword [ebp - 0x24c], 0xfffffffe
mov dword [ebp - 0xaa8], 0x710
mov dword [ebp - 0x62c], 0x67d5b449
mov dword [ebp - 0x834], 1
mov dword [ebp - 0xa60], 8
mov dword [ebp - 0xd4], 0
jmp 0x10045a00
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0x18
je 0x10045c9c
mov dword [ebp - 0x7c], 0xa5c1b09c
cmp dword [ebp - 0x60], 0
jne 0x10045ac3
mov esi, dword [ebp - 0xb28]
push 0
lea ecx, [ebp - 0x904]
call fcn.1000b57b
cmp esi, dword [eax]
jne 0x10045a41
mov dword [ebp - 0x8cc], 1
jmp 0x10045a48
and dword [ebp - 0x8cc], 0
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp + eax*4 - 0x3b8]
sub eax, dword [ebp - 0x8cc]
mov dword [ebp - 0x624], eax
push 0
lea ecx, [ebp - 0x904]
call fcn.1000b57b
mov ecx, dword [ebp - 0x624]
mov dword [eax], ecx
mov eax, dword [ebp - 0x624]
sub eax, dword [ebp - 0xa48]
mov dword [ebp - 0x24c], eax
je 0x10045a9c
cmp dword [ebp - 0xdc], 0
je 0x10045a9c
mov dword [ebp - 0x784], 1
jmp 0x10045aa3
and dword [ebp - 0x784], 0
mov eax, dword [ebp - 0x7c]
imul eax, dword [ebp - 0x784]
imul eax, dword [ebp - 0xaa8]
mov dword [ebp - 0x62c], eax
cmp dword [ebp - 0x62c], 0
je 0x10045ad5
cmp dword [ebp - 0x7c], 0
je 0x10045ad5
mov dword [ebp - 0xa50], 1
jmp 0x10045adc
and dword [ebp - 0xa50], 0
mov eax, dword [ebp - 0x384]
mov dword [ebp - 0x1074], eax
mov eax, dword [ebp - 0xab4]
mov dword [ebp - 0xdb8], eax
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x834], eax
mov eax, dword [ebp - 0x834]
mov ecx, dword [ebp - 0x60]
sub eax, dword [ebp + ecx*4 - 0x3b8]
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0x7c], 0
je 0x10045b93
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x24c], eax
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x24c], eax
jge 0x10045b39
mov dword [ebp - 0x634], 1
jmp 0x10045b40
and dword [ebp - 0x634], 0
cmp dword [ebp - 0x634], 0xfffd
ja 0x10045b58
mov dword [ebp - 0x78c], 1
jmp 0x10045b5f
and dword [ebp - 0x78c], 0
cmp dword [ebp - 0x78c], 0x8d58
jge 0x10045b77
mov dword [ebp - 0xa58], 1
jmp 0x10045b7e
and dword [ebp - 0xa58], 0
cmp dword [ebp - 0xdc], 0
je 0x10045b93
mov dword [ebp - 0x63c], 1
jmp 0x10045b9a
and dword [ebp - 0x63c], 0
cmp dword [ebp - 0x63c], 5
je 0x10045baf
mov dword [ebp - 0x88c], 1
jmp 0x10045bb6
and dword [ebp - 0x88c], 0
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x88c], eax
jg 0x10045bcd
mov dword [ebp - 0x644], 1
jmp 0x10045bd4
and dword [ebp - 0x644], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x644]
mov dword [ebp + eax - 0x3b8], ecx
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x7c], eax
jne 0x10045bfb
mov dword [ebp - 0x794], 1
jmp 0x10045c02
and dword [ebp - 0x794], 0
cmp dword [ebp - 0x794], 0xaf79
jne 0x10045c20
cmp dword [ebp - 0xdc], 0
jne 0x10045c20
and dword [ebp - 0x64c], 0
jmp 0x10045c2a
mov dword [ebp - 0x64c], 1
mov eax, dword [ebp - 0xabc]
cmp dword [ebp - 0x64c], eax
je 0x10045c44
mov dword [ebp - 0x83c], 1
jmp 0x10045c4b
and dword [ebp - 0x83c], 0
cmp dword [ebp - 0x83c], 0xe882
jg 0x10045c63
mov dword [ebp - 0x654], 1
jmp 0x10045c6a
and dword [ebp - 0x654], 0
mov eax, dword [ebp - 0xdc]
cmp dword [ebp - 0x654], eax
jne 0x10045c84
mov dword [ebp - 0x79c], 1
jmp 0x10045c8b
and dword [ebp - 0x79c], 0
mov eax, dword [ebp - 0x79c]
mov dword [ebp - 0xa60], eax
jmp 0x100459f3
mov byte [ebp - 0xf7], 0
movzx eax, byte [ebp - 0xf7]
test eax, eax
je 0x10045cdd
push 0x59c1
push 1
push 0
push 0x2835
push 0x68c7
push 0x7d33
push 0x10b5
push 0x5198
push 0x58e3
call fcn.10028e28
add esp, 0x24
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x904]
call fcn.1000b576
jmp 0x10045769
mov dword [ebp - 0x164], 0xfffffff8
mov dword [ebp - 0x154], 0xee76f502
mov dword [ebp - 0x410], 0xfffffffe
mov dword [ebp - 0x1dc], 0
jmp 0x10045d28
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 1
jge 0x10045d44
mov eax, dword [ebp - 0x1dc]
mov dword [ebp + eax*4 - 0x1e0], 1
jmp 0x10045d1b
mov dword [ebp - 0x154], 0
jmp 0x10045d5d
mov eax, dword [ebp - 0x154]
dec eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 0
jl 0x10045ef1
mov dword [ebp - 0x190], 3
mov dword [ebp - 0x3e0], 0x40e11a79
mov dword [ebp - 0x400], 0xfffffffe
mov dword [ebp - 0xa68], 0xfffffffa
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0xf08], eax
cmp dword [ebp - 0x154], 0
jbe 0x10045db3
mov dword [ebp - 0x3cc], 1
jmp 0x10045dba
and dword [ebp - 0x3cc], 0
cmp dword [ebp - 0x190], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x190]
cmp dword [ebp + eax - 0x1e0], ecx
jge 0x10045de2
mov dword [ebp - 0x3d8], 1
jmp 0x10045de9
and dword [ebp - 0x3d8], 0
mov eax, dword [ebp - 0x3cc]
cmp eax, dword [ebp - 0x3d8]
jl 0x10045e03
mov dword [ebp - 0xac4], 1
jmp 0x10045e0a
and dword [ebp - 0xac4], 0
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0xdc0], eax
mov dword [ebp - 0x3e0], 0
mov eax, dword [ebp - 0x3e0]
sub eax, 0x21462ccd
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x1e0]
jl 0x10045e4f
cmp dword [ebp - 0x190], 0
je 0x10045e4f
mov dword [ebp - 0x3e8], 1
jmp 0x10045e56
and dword [ebp - 0x3e8], 0
mov eax, dword [ebp - 0x154]
cmp eax, dword [ebp - 0x3e8]
jne 0x10045e70
mov dword [ebp - 0x3f0], 1
jmp 0x10045e77
and dword [ebp - 0x3f0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1e0]
cmp dword [ebp - 0x3f0], eax
jg 0x10045e98
mov dword [ebp - 0x3f8], 1
jmp 0x10045e9f
and dword [ebp - 0x3f8], 0
mov eax, dword [ebp - 0x3f8]
mov dword [ebp - 0x400], eax
mov eax, dword [ebp - 0xa68]
cmp dword [ebp - 0x400], eax
jne 0x10045ec5
mov dword [ebp - 0x408], 1
jmp 0x10045ecc
and dword [ebp - 0x408], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x408]
sub ecx, dword [ebp + eax - 0x1e0]
mov dword [ebp - 0x410], ecx
je 0x10045eec
jmp 0x10045d50
jmp 0x10045d50
mov dword [ebp - 0x4c8], 0xa1ee3199
mov dword [ebp - 0x3a4], 0x66fe7d8a
mov dword [ebp - 0x3a0], 0x66fe7d8a
mov dword [ebp - 0x39c], 0x66fe7d8a
mov dword [ebp - 0x398], 0x66fe7d8a
mov dword [ebp - 0x1050], 0xd303f024
mov dword [ebp - 0xad4], 7
mov dword [ebp - 0x1c], 0
jmp 0x10045f47
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jge 0x10045f5d
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x1b0], 0xfffffffd
jmp 0x10045f40
mov dword [ebp - 0x1c], 0
jmp 0x10045f6d
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x10045f83
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x1124], 1
jmp 0x10045f66
mov dword [ebp - 0x1c], 0
jmp 0x10045f93
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jge 0x10045fa9
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xdc8], 0xd4e2b79d
jmp 0x10045f8c
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x3a4], 0
jmp 0x10045fd4
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x3a4]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x3a4], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x3a4], 0
jl 0x10046341
mov dword [ebp - 0x1e8], 0xc0272a72
mov dword [ebp - 0xacc], 0x88039d6b
mov dword [ebp - 0x418], 0x4af12a83
push 2
lea ecx, [ebp - 0xffc]
call fcn.1000b514
mov dword [ebp - 4], 0x1f
mov dword [ebp - 0x328], 0
mov dword [ebp - 0x2c], 0
jmp 0x10046033
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jge 0x10046049
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0xf10], 0xffffffff
jmp 0x1004602c
mov dword [ebp - 0x2c], 0
jmp 0x10046059
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jge 0x10046075
push dword [ebp - 0x2c]
lea ecx, [ebp - 0xffc]
call fcn.1000b57b
mov dword [eax], 0xfffffffe
jmp 0x10046052
mov dword [ebp - 0x2c], 0
jmp 0x10046085
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 4
jge 0x1004609b
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x11b0], 5
jmp 0x1004607e
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x3a4]
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x3a4]
mov eax, dword [ebp + eax*4 - 0x1b0]
mov dword [ebp + ecx*4 - 0x1b0], eax
mov dword [ebp - 0x1e8], 0
jmp 0x100460da
mov eax, dword [ebp - 0x1e8]
dec eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 0
jl 0x1004632d
mov dword [ebp - 0xdd0], 0x945cb81e
mov dword [ebp - 0x1078], 0xc8a52b4b
mov dword [ebp - 0xdd8], 0xfffffffe
mov dword [ebp - 0xa78], 0xb4448110
mov dword [ebp - 0xf20], 1
mov dword [ebp - 0xde0], 1
mov dword [ebp - 0x1060], 1
mov dword [ebp - 0xa70], 1
mov dword [ebp - 0xde8], 0x1f433c8a
mov dword [ebp - 0xf30], 0xc8e4c12f
mov dword [ebp - 0xdf0], 0xffffffff
mov dword [ebp - 0x1080], 0xa259c42f
mov dword [ebp - 0xdf8], 0xfffffffa
mov dword [ebp - 0xf40], 0x46e1d67a
mov dword [ebp - 0xe00], 0x56a96dad
mov dword [ebp - 0x1070], 0x1a770aac
mov dword [ebp - 0xe08], 0x38c46158
mov dword [ebp - 0xf50], 1
mov dword [ebp - 0xe10], 0x5c8bb6af
or dword [ebp - 0xc3c], 0xffffffff
or dword [ebp - 0xc38], 0xffffffff
or dword [ebp - 0xc34], 0xffffffff
or dword [ebp - 0xc30], 0xffffffff
lea ecx, [ebp - 0x361]
call fcn.1000b58a
push eax
lea eax, [ebp - 0xc2c]
push eax
lea eax, [ebp - 0xc3c]
push eax
lea ecx, [ebp - 0x11c0]
call fcn.1000b58d
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xfec]
call fcn.1000b550
mov byte [ebp - 4], 0x20
mov eax, dword [ebp - 0x328]
dec eax
mov dword [ebp - 0x328], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3a4]
mov dword [ebp - 0x1088], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x3a4]
mov dword [ebp - 0xe18], eax
mov eax, dword [ebp - 0x418]
mov dword [ebp - 0xf60], eax
mov eax, dword [ebp - 0x328]
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x3a4]
sub eax, dword [ebp + ecx*4 - 0x1b0]
push 3
lea ecx, [ebp - 0xfec]
call fcn.1000b57b
mov eax, dword [eax]
mov dword [ebp - 0xacc], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x3a4]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x11b0]
imul ecx, dword [ebp - 0xa70]
push 4
pop edx
imul edx, edx, 0
sub ecx, dword [ebp + edx - 0x1124]
add ecx, dword [ebp - 0xad4]
cmp dword [ebp + eax*4 - 0x1b0], ecx
jl 0x100462ae
mov dword [ebp - 0x420], 1
jmp 0x100462b5
and dword [ebp - 0x420], 0
mov eax, dword [ebp - 0x418]
cmp dword [ebp - 0x420], eax
jl 0x100462cf
mov dword [ebp - 0x428], 1
jmp 0x100462d6
and dword [ebp - 0x428], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x3a4]
mov eax, dword [ebp + eax*4 - 0x1b0]
cmp dword [ebp - 0x428], eax
jne 0x10046303
mov eax, 0x3f78cafa
test eax, eax
jne 0x10046303
and dword [ebp - 0x430], 0
jmp 0x1004630d
mov dword [ebp - 0x430], 1
mov eax, dword [ebp - 0x430]
mov dword [ebp - 0xa78], eax
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0xfec]
call fcn.1000b576
jmp 0x100460cd
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xffc]
call fcn.1000b576
jmp 0x10045fbb
mov dword [ebp - 0xa80], 0xfffffff6
push 0x2df4
push 0x1dd
push 0x70d
push 0
call fcn.1002bd60
add esp, 0x10
mov dword [ebp - 0x68], 0x20f89b54
mov dword [ebp - 0xe20], 0xfd03b15a
mov dword [ebp - 0x1f0], 0
jmp 0x1004638e
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 3
jge 0x100463aa
mov eax, dword [ebp - 0x1f0]
mov dword [ebp + eax*4 - 0x910], 5
jmp 0x10046381
mov byte [ebp - 0xbf], 0
movzx eax, byte [ebp - 0xbf]
test eax, eax
je 0x100463d4
push 0x747c
push 1
push 0x394e
push 0
push 1
call fcn.1002a0af
add esp, 0x14
mov dword [ebp - 0x68], 0
jmp 0x100463e4
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 2
jg 0x10046584
mov dword [ebp - 0xb0], 0xd3b3152c
mov dword [ebp - 0x160], 0
mov dword [ebp - 0x468], 0xe119
mov dword [ebp - 0xb0], 0
jmp 0x10046425
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 2
jg 0x10046572
mov eax, dword [ebp - 0xb0]
sub eax, 0x6d21
cmp eax, 4
jle 0x1004644e
mov dword [ebp - 0x438], 1
jmp 0x10046455
and dword [ebp - 0x438], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x910]
cmp dword [ebp - 0x438], eax
je 0x10046476
mov dword [ebp - 0x440], 1
jmp 0x1004647d
and dword [ebp - 0x440], 0
mov eax, dword [ebp - 0x68]
mov ecx, dword [ebp - 0x440]
sub ecx, 0xaba6
cmp dword [ebp + eax*4 - 0x910], ecx
jg 0x100464a1
mov dword [ebp - 0x448], 1
jmp 0x100464a8
and dword [ebp - 0x448], 0
mov eax, dword [ebp - 0x448]
dec eax
mov ecx, dword [ebp - 0x68]
cmp eax, dword [ebp + ecx*4 - 0x910]
jl 0x100464c7
mov dword [ebp - 0x450], 1
jmp 0x100464ce
and dword [ebp - 0x450], 0
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp + eax*4 - 0x910]
add eax, dword [ebp - 0x450]
sub eax, dword [ebp - 0xb0]
mov ecx, dword [ebp - 0x68]
imul eax, dword [ebp + ecx*4 - 0x910]
cmp eax, dword [ebp - 0xb0]
jl 0x10046503
mov dword [ebp - 0x458], 1
jmp 0x1004650a
and dword [ebp - 0x458], 0
mov eax, dword [ebp - 0xb0]
add eax, dword [ebp - 0x458]
cmp eax, dword [ebp - 0x68]
jl 0x10046527
mov dword [ebp - 0x460], 1
jmp 0x1004652e
and dword [ebp - 0x460], 0
mov eax, dword [ebp - 0x460]
mov dword [ebp - 0x160], eax
mov dword [ebp - 0x160], 2
jmp 0x10046553
mov eax, dword [ebp - 0x160]
dec eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 0
jl 0x1004656d
mov eax, dword [ebp - 0x68]
cmp dword [ebp + eax*4 - 0x910], 0
je 0x1004656b
jmp 0x1004656d
jmp 0x10046546
jmp 0x10046418
mov eax, dword [ebp - 0x468]
inc eax
mov dword [ebp - 0x468], eax
jmp 0x100463dd
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x368], eax
mov eax, dword [ebp - 0x368]
imul eax, dword [ebp - 0x50]
test eax, eax
je 0x100465ad
cmp dword [ebp - 0x50], 0
je 0x100465ad
mov dword [ebp - 0x470], 1
jmp 0x100465b4
and dword [ebp - 0x470], 0
cmp dword [ebp - 0x470], 0xd764
jne 0x100465cc
mov dword [ebp - 0x478], 1
jmp 0x100465d3
and dword [ebp - 0x478], 0
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x478], eax
je 0x100465ea
mov dword [ebp - 0x480], 1
jmp 0x100465f1
and dword [ebp - 0x480], 0
mov eax, dword [ebp - 0x480]
mov dword [ebp - 0x488], eax
mov eax, dword [ebp - 0x488]
sub eax, 0x15a0cb43
cmp dword [ebp - 0x50], eax
jle 0x10046619
mov dword [ebp - 0x490], 1
jmp 0x10046620
and dword [ebp - 0x490], 0
mov eax, dword [ebp - 0x490]
mov dword [ebp - 0xadc], eax
cmp dword [ebp - 0x50], 0xfffb
jbe 0x1004664a
cmp dword [ebp - 0x368], 0
je 0x1004664a
mov dword [ebp - 0x330], 1
jmp 0x10046651
and dword [ebp - 0x330], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x330]
mov dword [ebp + eax - 0xbec], ecx
mov eax, dword [ebp - 0x164]
cmp dword [ebp - 0x330], eax
jge 0x1004667e
mov dword [ebp - 0x498], 1
jmp 0x10046685
and dword [ebp - 0x498], 0
mov eax, dword [ebp - 0x498]
sub eax, dword [ebp - 0x164]
cmp eax, dword [ebp - 0x164]
jle 0x100466a5
mov dword [ebp - 0x4a0], 1
jmp 0x100466ac
and dword [ebp - 0x4a0], 0
cmp dword [ebp - 0x4a0], 0x2afd
jg 0x100466d1
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xbec], 0
jne 0x100466d1
and dword [ebp - 0x4a8], 0
jmp 0x100466db
mov dword [ebp - 0x4a8], 1
mov eax, dword [ebp - 0x164]
cmp dword [ebp - 0x4a8], eax
jge 0x100466f5
mov dword [ebp - 0x4b0], 1
jmp 0x100466fc
and dword [ebp - 0x4b0], 0
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x4b0], eax
jne 0x10046713
mov dword [ebp - 0x4b8], 1
jmp 0x1004671a
and dword [ebp - 0x4b8], 0
mov eax, dword [ebp - 0x50]
imul eax, dword [ebp - 0x4b8]
cmp eax, dword [ebp - 0x164]
jne 0x10046738
mov dword [ebp - 0x4c0], 1
jmp 0x1004673f
and dword [ebp - 0x4c0], 0
mov eax, dword [ebp - 0x4c0]
mov dword [ebp - 0x4c8], eax
cmp dword [ebp - 0x4c8], 1
jne 0x10046760
mov dword [ebp - 0x4d0], 1
jmp 0x10046767
and dword [ebp - 0x4d0], 0
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x4d0], eax
jg 0x1004677e
mov dword [ebp - 0x4d8], 1
jmp 0x10046785
and dword [ebp - 0x4d8], 0
mov eax, dword [ebp - 0x50]
cmp eax, dword [ebp - 0x4d8]
jne 0x1004679c
mov dword [ebp - 0x4e0], 1
jmp 0x100467a3
and dword [ebp - 0x4e0], 0
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x4e0], eax
jl 0x100467ba
mov dword [ebp - 0x4e8], 1
jmp 0x100467c1
and dword [ebp - 0x4e8], 0
mov eax, dword [ebp - 0x4e8]
mov dword [ebp - 0xa80], eax
mov dword [ebp - 0xae4], 0xe53d
mov dword [ebp - 0xaec], 0
mov dword [ebp - 0xa88], 0xffffffff
mov dword [ebp - 0x1f8], 0
jmp 0x10046804
mov eax, dword [ebp - 0x1f8]
inc eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 2
jge 0x10046820
mov eax, dword [ebp - 0x1f8]
mov dword [ebp + eax*4 - 0x1178], 0xffffffff
jmp 0x100467f7
mov byte [ebp - 0x105], 0
push 0x4744
lea eax, [ebp - 0x105]
push eax
push 1
push 1
push 1
call fcn.10028cf4
add esp, 0x14
lea eax, [ebp - 0xae4]
push eax
push 0x1787
push 0
push 0x4930
lea eax, [ebp - 0xa88]
push eax
lea eax, [ebp - 0xaec]
push eax
call fcn.10037b4f
add esp, 0x18
mov dword [ebp - 0x1090], 0x70ad6f2e
mov dword [ebp - 0xe28], 0x20f89b54
mov dword [ebp - 0xf70], 1
mov dword [ebp - 0x110], 0xbe8e56f9
mov dword [ebp - 0x110], 0x6bdde0bc
mov dword [ebp - 0x110], 0
jmp 0x100468b5
mov eax, dword [ebp - 0x110]
dec eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0xfffffff6
jl 0x100469a0
mov dword [ebp - 0x16c], 0x999fb023
mov dword [ebp - 0xaf4], 0
mov dword [ebp - 0x16c], 7
jmp 0x100468ef
mov eax, dword [ebp - 0x16c]
dec eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 0xfffffffb
jl 0x1004699b
mov dword [ebp - 0xa90], 0xa28c7fff
push 2
lea ecx, [ebp - 0xd1c]
call fcn.1000b514
mov dword [ebp - 4], 0x21
mov dword [ebp - 0x200], 0
jmp 0x10046933
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 2
jge 0x10046955
push dword [ebp - 0x200]
lea ecx, [ebp - 0xd1c]
call fcn.1000b57b
mov dword [eax], 0xf944dcd6
jmp 0x10046926
push 0x3d3b
lea eax, [ebp - 0xa90]
push eax
lea eax, [ebp - 0xd1c]
push eax
push 0
lea eax, [ebp - 0x110]
push eax
lea eax, [ebp - 0xaf4]
push eax
lea eax, [ebp - 0x16c]
push eax
call fcn.1003be07
add esp, 0x1c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd1c]
call fcn.1000b576
jmp 0x100468e2
jmp 0x100468a8
mov dword [ebp - 0xe30], 0x152c58fb
mov dword [ebp - 0x107c], 0x8748afa2
mov dword [ebp - 0x508], 0xffffffff
mov dword [ebp - 0x17c], 0xb8f6c218
mov dword [ebp - 0x15c], 0x7e80d68f
mov dword [ebp - 0x174], 0xab89bdd7
push 3
lea ecx, [ebp - 0x928]
call fcn.1000b514
mov dword [ebp - 4], 0x22
mov dword [ebp - 0xa98], 0x4b7b8319
mov dword [ebp - 0xe38], 0
mov dword [ebp - 0xc64], 0xbac3f408
mov dword [ebp - 0xc60], 0xbac3f408
mov dword [ebp - 0xc5c], 0xbac3f408
mov dword [ebp - 0xc58], 0xbac3f408
lea ecx, [ebp - 0x369]
call fcn.1000b58a
push eax
lea eax, [ebp - 0xc54]
push eax
lea eax, [ebp - 0xc64]
push eax
lea ecx, [ebp - 0x1188]
call fcn.1000b58d
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x101c]
call fcn.1000b550
mov byte [ebp - 4], 0x23
lea eax, [ebp - 0x928]
push eax
lea eax, [ebp - 0xf80]
push eax
push 0
push 0x64a4
push 0x1485
call fcn.1002bdf7
add esp, 0x14
lea eax, [ebp - 0x508]
push eax
lea eax, [ebp - 0x15c]
push eax
lea eax, [ebp - 0xa98]
push eax
push 0
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0x174]
push eax
lea eax, [ebp - 0x928]
push eax
call fcn.1003c04b
add esp, 0x1c
mov dword [ebp - 0x15c], 0x19
jmp 0x10046ad4
mov eax, dword [ebp - 0x15c]
dec eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 0xffffffef
jg 0x10046f57
mov dword [ebp - 0x394], 0xaebb
mov dword [ebp - 0x338], 4
mov dword [ebp - 0xb04], 0xfffffff9
mov dword [ebp - 0x558], 1
mov dword [ebp - 0xe40], 0
mov dword [ebp - 0x208], 0
jmp 0x10046b2c
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 1
jge 0x10046b48
mov eax, dword [ebp - 0x208]
mov dword [ebp + eax*4 - 0x10b4], 0x36403ac4
jmp 0x10046b1f
mov dword [ebp - 0x174], 0
jmp 0x10046b61
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 0x3a
je 0x10046f3b
mov dword [ebp - 0x118], 0x63a47399
mov dword [ebp - 0xe48], 0xfffffff7
mov dword [ebp - 0xf90], 0xffffffff
push 1
lea ecx, [ebp - 0x100c]
call fcn.1000b514
mov byte [ebp - 4], 0x24
mov dword [ebp - 0x210], 0
jmp 0x10046bb6
mov eax, dword [ebp - 0x210]
inc eax
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 1
jge 0x10046bd8
push dword [ebp - 0x210]
lea ecx, [ebp - 0x100c]
call fcn.1000b57b
mov dword [eax], 0xe68bd5e5
jmp 0x10046ba9
mov dword [ebp - 0x17c], 0xfffffffb
jmp 0x10046bf1
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 4
jge 0x10046f0c
mov dword [ebp - 0x218], 2
push 1
lea ecx, [ebp - 0xb74]
call fcn.1000b514
mov byte [ebp - 4], 0x25
push 0x3743
lea eax, [ebp - 0xe50]
push eax
push 0x46ec
push 0x2358
push 0
push 1
lea eax, [ebp - 0xb74]
push eax
call fcn.1002b1df
add esp, 0x1c
cmp dword [ebp - 0x394], 0
je 0x10046c60
cmp dword [ebp - 0x218], 0
je 0x10046c60
mov dword [ebp - 0x540], 1
jmp 0x10046c67
and dword [ebp - 0x540], 0
cmp dword [ebp - 0x394], 0
jne 0x10046c7c
mov dword [ebp - 0x520], 1
jmp 0x10046c83
and dword [ebp - 0x520], 0
cmp dword [ebp - 0x218], 0
je 0x10046ca1
cmp dword [ebp - 0x394], 0
je 0x10046ca1
mov dword [ebp - 0x4f0], 1
jmp 0x10046ca8
and dword [ebp - 0x4f0], 0
mov eax, dword [ebp - 0x218]
cmp eax, dword [ebp - 0x4f0]
jle 0x10046cc2
mov dword [ebp - 0x4f8], 1
jmp 0x10046cc9
and dword [ebp - 0x4f8], 0
mov eax, dword [ebp - 0x4f8]
add eax, 0x2c9aa6f
cmp eax, dword [ebp - 0x118]
jge 0x10046cee
cmp dword [ebp - 0x118], 0
jne 0x10046cee
and dword [ebp - 0x500], 0
jmp 0x10046cf8
mov dword [ebp - 0x500], 1
mov eax, dword [ebp - 0x500]
sub eax, dword [ebp - 0x508]
cmp eax, dword [ebp - 0x338]
jge 0x10046d18
mov dword [ebp - 0x510], 1
jmp 0x10046d1f
and dword [ebp - 0x510], 0
push 1
lea ecx, [ebp - 0x928]
call fcn.1000b57b
mov ecx, dword [ebp - 0x510]
cmp ecx, dword [eax]
jl 0x10046d42
mov dword [ebp - 0x518], 1
jmp 0x10046d49
and dword [ebp - 0x518], 0
cmp dword [ebp - 0x518], 1
ja 0x10046d5e
mov dword [ebp - 0xafc], 1
jmp 0x10046d65
and dword [ebp - 0xafc], 0
mov eax, dword [ebp - 0x338]
mov dword [ebp - 0x1084], eax
cmp dword [ebp - 0x218], 0x6225
je 0x10046d89
mov dword [ebp - 0x528], 1
jmp 0x10046d90
and dword [ebp - 0x528], 0
mov eax, dword [ebp - 0x520]
imul eax, dword [ebp - 0x528]
cmp eax, dword [ebp - 0x118]
jg 0x10046db1
mov dword [ebp - 0xaa0], 1
jmp 0x10046db8
and dword [ebp - 0xaa0], 0
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0xe58], eax
push 0
lea ecx, [ebp - 0xb74]
call fcn.1000b57b
cmp dword [eax], 0x8784
jne 0x10046de5
mov dword [ebp - 0x530], 1
jmp 0x10046dec
and dword [ebp - 0x530], 0
mov esi, dword [ebp - 0x118]
add esi, dword [ebp - 0x530]
push 1
lea ecx, [ebp - 0x928]
call fcn.1000b57b
cmp esi, dword [eax]
jle 0x10046e15
mov dword [ebp - 0x538], 1
jmp 0x10046e1c
and dword [ebp - 0x538], 0
mov eax, dword [ebp - 0x118]
add eax, dword [ebp - 0x538]
cmp dword [ebp - 0x540], eax
jl 0x10046e3c
mov dword [ebp - 0x548], 1
jmp 0x10046e43
and dword [ebp - 0x548], 0
mov eax, dword [ebp - 0x548]
sub eax, dword [ebp - 0xb04]
cmp eax, dword [ebp - 0x338]
jl 0x10046e63
mov dword [ebp - 0x370], 1
jmp 0x10046e6a
and dword [ebp - 0x370], 0
push 0
lea ecx, [ebp - 0x928]
call fcn.1000b57b
mov ecx, dword [ebp - 0x370]
mov dword [eax], ecx
push 0
lea ecx, [ebp - 0xb74]
call fcn.1000b57b
mov ecx, dword [ebp - 0x370]
cmp ecx, dword [eax]
jl 0x10046ea2
mov dword [ebp - 0x550], 1
jmp 0x10046ea9
and dword [ebp - 0x550], 0
mov eax, dword [ebp - 0x550]
dec eax
mov dword [ebp - 0x558], eax
mov esi, dword [ebp - 0x558]
push 0
lea ecx, [ebp - 0xb74]
call fcn.1000b57b
mov dword [eax], esi
mov byte [ebp - 0xe5], 0
movzx eax, byte [ebp - 0xe5]
test eax, eax
je 0x10046ef8
push 0x6eb5
push 0x17a2
push 0x787b
push 1
push 1
call fcn.10028f23
add esp, 0x14
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0xb74]
call fcn.1000b576
jmp 0x10046be4
lea eax, [ebp - 0x101c]
push eax
push 0x4ed5
push 0x375f
push 0
call fcn.1002b597
add esp, 0x10
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x100c]
call fcn.1000b576
jmp 0x10046b54
mov byte [ebp - 0xc5], 0
push 0
lea eax, [ebp - 0xc5]
push eax
call fcn.100389c8
pop ecx
pop ecx
jmp 0x10046ac7
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x101c]
call fcn.1000b576
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x928]
call fcn.1000b576
mov dword [ebp - 0xfa0], 0xfffffffc
mov dword [ebp - 0xe60], 0x70ad6f2e
mov dword [ebp - 0x10e8], 0x20f89b54
mov dword [ebp - 0xe68], 1
mov dword [ebp - 0xfb0], 0x152c58fb
mov dword [ebp - 0xe70], 0x8748afa2
mov dword [ebp - 0x108c], 0xfffffffc
mov dword [ebp - 0xe78], 0xffffffff
push 3
lea ecx, [ebp - 0x102c]
call fcn.1000b514
mov dword [ebp - 4], 0x26
mov dword [ebp - 0x940], 0x9214a9ba
mov dword [ebp - 0x1d0], 0
jmp 0x10046ffc
mov eax, dword [ebp - 0x1d0]
inc eax
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 3
jge 0x1004701e
push dword [ebp - 0x1d0]
lea ecx, [ebp - 0x102c]
call fcn.1000b57b
mov dword [eax], 0x6f8c7b5c
jmp 0x10046fef
push 0x7a4e
lea eax, [ebp - 0x940]
push eax
push 0x2421
push 1
push 0
push 0x4d17
call fcn.1002a59c
add esp, 0x18
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x102c]
call fcn.1000b576
mov dword [ebp - 0xfc0], 0xffffffff
push 3
lea ecx, [ebp - 0x104c]
call fcn.1000b514
mov dword [ebp - 4], 0x27
mov dword [ebp - 0x944], 0xf43b
mov dword [ebp - 0xe80], 0xffffffff
mov dword [ebp - 0x10c8], 0xfffffff6
mov dword [ebp - 0xe88], 8
mov dword [ebp - 0xfd0], 0xfffffffd
mov dword [ebp - 0x560], 0xfffffffd
mov dword [ebp - 0x220], 0
jmp 0x100470c2
mov eax, dword [ebp - 0x220]
inc eax
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 1
jge 0x100470de
mov eax, dword [ebp - 0x220]
mov dword [ebp + eax*4 - 0xe90], 0xfffffffc
jmp 0x100470b5
push 0
push 1
push 0x6a67
lea eax, [ebp - 0x944]
push eax
push 0x6042
call fcn.1002bd82
add esp, 0x14
mov eax, dword [ebp - 0x560]
dec eax
mov dword [ebp - 0x560], eax
mov dword [ebp - 0x954], 0x9214a9ba
mov dword [ebp - 0x20], 0x82ff
mov dword [ebp - 0x578], 0xffffffff
mov dword [ebp - 0x568], 0xfffffffe
mov dword [ebp - 0x340], 0x244c3f4
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x20], eax
jge 0x1004714b
mov dword [ebp - 0x570], 1
jmp 0x10047152
and dword [ebp - 0x570], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x1094], eax
mov eax, dword [ebp - 0x568]
sub eax, dword [ebp - 0x568]
add eax, dword [ebp - 0x570]
cmp eax, 0xa9c2
jle 0x10047180
mov dword [ebp - 0x580], 1
jmp 0x10047187
and dword [ebp - 0x580], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x578], eax
mov eax, dword [ebp - 0x578]
cmp eax, dword [ebp - 0x580]
jle 0x100471aa
mov dword [ebp - 0x588], 1
jmp 0x100471b1
and dword [ebp - 0x588], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x588], eax
jne 0x100471d1
mov eax, 0xb969161d
test eax, eax
je 0x100471d1
mov dword [ebp - 0x590], 1
jmp 0x100471d8
and dword [ebp - 0x590], 0
imul eax, dword [ebp - 0x590], 0x357
cmp eax, 0x7ea0d018
je 0x100471f5
mov dword [ebp - 0x598], 1
jmp 0x100471fc
and dword [ebp - 0x598], 0
mov eax, dword [ebp - 0x598]
mov dword [ebp - 0x340], eax
cmp dword [ebp - 0x340], 0
je 0x100472cf
push 3
lea ecx, [ebp - 0xd34]
call fcn.1000b514
mov byte [ebp - 4], 0x28
mov dword [ebp - 0x228], 0
jmp 0x1004723f
mov eax, dword [ebp - 0x228]
inc eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 3
jge 0x1004725e
push dword [ebp - 0x228]
lea ecx, [ebp - 0xd34]
call fcn.1000b57b
or dword [eax], 0xffffffff
jmp 0x10047232
mov byte [ebp - 0xf9], 0
push 0
push 0x2ca2
lea eax, [ebp - 0xf9]
push eax
push 0x58f6
push 0x2183
push 0x181b
push 0
push 1
call fcn.1003791c
add esp, 0x20
mov dword [ebp - 0x20], 0
jmp 0x1004729e
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jg 0x100472bb
push dword [ebp - 0x20]
lea ecx, [ebp - 0xd34]
call fcn.1000b57b
cmp dword [eax], 0
je 0x100472b9
jmp 0x100472bb
jmp 0x10047297
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0xd34]
call fcn.1000b576
jmp 0x10047366
push 3
lea ecx, [ebp - 0xd4c]
call fcn.1000b514
mov byte [ebp - 4], 0x29
mov dword [ebp - 0x230], 0
jmp 0x100472f9
mov eax, dword [ebp - 0x230]
inc eax
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 3
jge 0x1004731b
push dword [ebp - 0x230]
lea ecx, [ebp - 0xd4c]
call fcn.1000b57b
mov dword [eax], 0xc8a52b4b
jmp 0x100472ec
mov dword [ebp - 0x20], 0xfffffff6
jmp 0x1004732b
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xfffffff4
je 0x10047357
push 0x82c
lea eax, [ebp - 0xd4c]
push eax
push 0x4202
push 1
push 1
lea eax, [ebp - 0x340]
push eax
call fcn.100292fd
add esp, 0x18
jmp 0x10047324
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0xd4c]
call fcn.1000b576
mov dword [ebp - 0x34], 0x1824a8c6
mov dword [ebp - 0xe4], 0x13717be9
mov dword [ebp - 0xc8c], 0xa9c1
mov dword [ebp - 0xc88], 0xa9c1
mov dword [ebp - 0xc84], 0xa9c1
mov dword [ebp - 0xc80], 0xa9c1
lea ecx, [ebp - 0x2dd]
call fcn.1000b58a
push eax
lea eax, [ebp - 0xc7c]
push eax
lea eax, [ebp - 0xc8c]
push eax
lea ecx, [ebp - 0x11a0]
call fcn.1000b58d
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x103c]
call fcn.1000b550
mov byte [ebp - 4], 0x2a
mov dword [ebp - 0x34], 0xffffffe7
jmp 0x100473e8
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0xfffffff1
jl 0x1004761d
mov dword [ebp - 0x184], 0x2250
mov dword [ebp - 0x2ec], 0xffffffff
mov dword [ebp - 0x374], 0x56e31bb0
mov dword [ebp - 0x5c0], 0xae45661c
mov dword [ebp - 0x5d8], 0xffffffff
mov dword [ebp - 0x9c], 0
jmp 0x1004743d
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 2
jge 0x10047459
mov eax, dword [ebp - 0x9c]
mov dword [ebp + eax*4 - 0xd7c], 0x3cea2ff3
jmp 0x10047430
mov dword [ebp - 0x9c], 0
jmp 0x10047472
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 4
jge 0x1004748e
mov eax, dword [ebp - 0x9c]
mov dword [ebp + eax*4 - 0x1160], 0xfffffffc
jmp 0x10047465
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x184]
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0x34], 0
je 0x100474bb
cmp dword [ebp - 0x34], 0
je 0x100474bb
cmp dword [ebp - 0x34], 0
je 0x100474bb
mov dword [ebp - 0x5a0], 1
jmp 0x100474c2
and dword [ebp - 0x5a0], 0
mov eax, dword [ebp - 0x2ec]
imul eax, dword [ebp - 0x5a0]
mov dword [ebp - 0x374], eax
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x374], eax
jge 0x100474ec
mov dword [ebp - 0x94c], 1
jmp 0x100474f3
and dword [ebp - 0x94c], 0
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0xe98], eax
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0xfe0], eax
mov eax, dword [ebp - 0x184]
cmp dword [ebp - 0x374], eax
jge 0x10047525
mov dword [ebp - 0x5a8], 1
jmp 0x1004752c
and dword [ebp - 0x5a8], 0
imul eax, dword [ebp - 0x5a8], 0x2d3d
sub eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x184]
jle 0x1004754d
mov dword [ebp - 0x2e4], 1
jmp 0x10047554
and dword [ebp - 0x2e4], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x2e4]
mov dword [ebp + eax - 0xd7c], ecx
mov eax, dword [ebp - 0x184]
add eax, dword [ebp - 0x2e4]
cmp eax, dword [ebp - 0x2ec]
jle 0x10047587
mov dword [ebp - 0x5b0], 1
jmp 0x1004758e
and dword [ebp - 0x5b0], 0
mov eax, dword [ebp - 0x2ec]
cmp dword [ebp - 0x5b0], eax
jle 0x100475a8
mov dword [ebp - 0x5b8], 1
jmp 0x100475af
and dword [ebp - 0x5b8], 0
mov eax, dword [ebp - 0x5b8]
mov dword [ebp - 0x5c0], eax
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x5c0], eax
je 0x100475d2
mov dword [ebp - 0x5c8], 1
jmp 0x100475d9
and dword [ebp - 0x5c8], 0
imul eax, dword [ebp - 0x5c8], 0
add eax, dword [ebp - 0x34]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x1160], eax
cmp dword [ebp - 0x5d8], 0xffffffff
jge 0x10047605
mov dword [ebp - 0x5d0], 1
jmp 0x1004760c
and dword [ebp - 0x5d0], 0
mov eax, dword [ebp - 0x5d0]
mov dword [ebp - 0x5d8], eax
jmp 0x100473e1
mov dword [ebp - 0xe4], 3
jmp 0x10047636
mov eax, dword [ebp - 0xe4]
dec eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0
jl 0x1004768a
mov byte [ebp - 0xcd], 0
movzx eax, byte [ebp - 0xcd]
test eax, eax
je 0x10047660
push 0x995
push 0
push 0
call dword [sym.imp.KERNEL32.dll_QueryDosDeviceW]
lea eax, [ebp - 0xe4]
push eax
push 0x7b17
push 1
push 1
push 0x193f
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x103c]
push eax
call fcn.100297b6
add esp, 0x1c
jmp 0x10047629
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x103c]
call fcn.1000b576
lea eax, [ebp - 0x104c]
push eax
push 0xb35
lea eax, [ebp - 0xea0]
push eax
push 1
push 0
call fcn.10039173
add esp, 0x14
push 0
push 0x2273
push 0x63c9
lea eax, [ebp - 0x954]
push eax
call fcn.1002c676
add esp, 0x10
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x104c]
call fcn.1000b576
mov dword [ebp - 0x2fc], 0xfa72c2
push 4
lea ecx, [ebp - 0xd28]
call fcn.1000b514
mov dword [ebp - 4], 0x2b
mov dword [ebp - 0x95c], 0x6bc3ec3d
mov dword [ebp - 0x5f0], 0xfffffffc
mov dword [ebp - 0x964], 1
mov dword [ebp - 0x98], 0
jmp 0x10047737
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 3
jge 0x10047753
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0x110c], 0
jmp 0x1004772a
mov dword [ebp - 0x98], 0
jmp 0x1004776c
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 4
jge 0x1004778e
push dword [ebp - 0x98]
lea ecx, [ebp - 0xd28]
call fcn.1000b57b
mov dword [eax], 0xf82d83d7
jmp 0x1004775f
mov eax, dword [ebp - 0x2fc]
mov dword [ebp - 0x5e0], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x5e0]
mov dword [ebp + eax - 0x110c], ecx
cmp dword [ebp - 0x5e0], 0xfffffffe
jb 0x100477c2
mov dword [ebp - 0x2f4], 1
jmp 0x100477c9
and dword [ebp - 0x2f4], 0
push 1
lea ecx, [ebp - 0xd28]
call fcn.1000b57b
mov ecx, dword [ebp - 0x2f4]
mov dword [eax], ecx
mov eax, dword [ebp - 0x95c]
cmp dword [ebp - 0x2f4], eax
jl 0x100477f8
mov dword [ebp - 0x5e8], 1
jmp 0x100477ff
and dword [ebp - 0x5e8], 0
mov eax, dword [ebp - 0x5e8]
mov dword [ebp - 0x5f0], eax
cmp dword [ebp - 0x5f0], 9
jg 0x10047820
mov dword [ebp - 0x5f8], 1
jmp 0x10047827
and dword [ebp - 0x5f8], 0
mov eax, dword [ebp - 0x2fc]
cmp dword [ebp - 0x5f8], eax
jle 0x10047841
mov dword [ebp - 0x600], 1
jmp 0x10047848
and dword [ebp - 0x600], 0
imul eax, dword [ebp - 0x600], 0
cmp eax, 0xfffa
jae 0x10047862
mov dword [ebp - 0x608], 1
jmp 0x10047869
and dword [ebp - 0x608], 0
mov eax, dword [ebp - 0x2fc]
cmp dword [ebp - 0x608], eax
jg 0x10047883
mov dword [ebp - 0x610], 1
jmp 0x1004788a
and dword [ebp - 0x610], 0
mov eax, dword [ebp - 0x610]
mov dword [ebp - 0x964], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd28]
call fcn.1000b576
mov eax, dword [ebp - 0x2a0]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x2a0]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 0x14]
lea eax, [eax + ecx + 0x18]
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x18c], 0xe8cff0ea
mov dword [ebp - 0x96c], 0x1dda8db8
mov dword [ebp - 0x97c], 0xfffffffd
mov dword [ebp - 0x974], 0x8dad4f6c
push 3
lea ecx, [ebp - 0xcbc]
call fcn.1000b514
mov dword [ebp - 4], 0x2c
push 0x3aa1
push 0x1a42
push 0x7e86
push 0xa7
push 1
push 0xabf
push 0x31ea
lea eax, [ebp - 0xcbc]
push eax
push 0
lea eax, [ebp - 0x10e0]
push eax
call fcn.1002ff55
add esp, 0x28
mov dword [ebp - 0x18c], 0
jmp 0x10047950
mov eax, dword [ebp - 0x18c]
dec eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0xfffffff7
jle 0x10047a4d
mov dword [ebp - 0x984], 0
mov dword [ebp - 0x99c], 0x216709e1
push 4
lea ecx, [ebp - 0xcb0]
call fcn.1000b514
mov byte [ebp - 4], 0x2d
mov dword [ebp - 0x994], 0x2a93
mov dword [ebp - 0x98c], 0xffffffff
mov dword [ebp - 0x238], 0
jmp 0x100479af
mov eax, dword [ebp - 0x238]
inc eax
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 4
jge 0x100479d1
push dword [ebp - 0x238]
lea ecx, [ebp - 0xcb0]
call fcn.1000b57b
mov dword [eax], 0x2a6add33
jmp 0x100479a2
lea eax, [ebp - 0x96c]
push eax
lea eax, [ebp - 0x974]
push eax
push 0x7314
lea eax, [ebp - 0x97c]
push eax
lea eax, [ebp - 0x984]
push eax
push 0x7894
push 0x7636
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0xcbc]
push eax
push 0x2ebe
lea eax, [ebp - 0x98c]
push eax
push 0
push 1
lea eax, [ebp - 0xcb0]
push eax
push 0
lea eax, [ebp - 0x994]
push eax
lea eax, [ebp - 0x99c]
push eax
call fcn.1003a670
add esp, 0x44
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0xcb0]
call fcn.1000b576
jmp 0x10047943
mov byte [ebp - 0xfb], 0
movzx eax, byte [ebp - 0xfb]
test eax, eax
je 0x10047a6d
push 0
push 0x34d1
call fcn.1002fb66
pop ecx
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xcbc]
call fcn.1000b576
or dword [ebp - 0xc28], 0xffffffff
or dword [ebp - 0xc24], 0xffffffff
or dword [ebp - 0xc20], 0xffffffff
or dword [ebp - 0xc1c], 0xffffffff
lea ecx, [ebp - 0x349]
call fcn.1000b58a
push eax
lea eax, [ebp - 0xc18]
push eax
lea eax, [ebp - 0xc28]
push eax
lea ecx, [ebp - 0x11c8]
call fcn.1000b58d
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x8d8]
call fcn.1000b550
mov dword [ebp - 4], 0x2e
push 4
lea ecx, [ebp - 0x3c4]
call fcn.1000b514
mov byte [ebp - 4], 0x2f
push 1
lea ecx, [ebp - 0x8c8]
call fcn.1000b514
mov byte [ebp - 4], 0x30
mov dword [ebp - 0xea8], 0x2fafd11d
mov dword [ebp - 0x9a4], 0x23e86f8c
mov dword [ebp - 0xff0], 0x3de0369b
mov dword [ebp - 0x80], 0
jmp 0x10047b24
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 4
jge 0x10047b40
push dword [ebp - 0x80]
lea ecx, [ebp - 0x3c4]
call fcn.1000b57b
mov dword [eax], 0xfff6
jmp 0x10047b1d
mov dword [ebp - 0x80], 0
jmp 0x10047b50
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 1
jge 0x10047b6c
push dword [ebp - 0x80]
lea ecx, [ebp - 0x8c8]
call fcn.1000b57b
mov dword [eax], 0xe76f5020
jmp 0x10047b49
push 0
lea ecx, [ebp - 0x8c8]
call fcn.1000b57b
mov dword [eax], 3
jmp 0x10047ba5
push 0
lea ecx, [ebp - 0x8c8]
call fcn.1000b57b
mov dword [ebp - 0x618], eax
mov eax, dword [ebp - 0x618]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x618]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x8c8]
call fcn.1000b57b
cmp dword [eax], 0
jl 0x10047ea2
mov dword [ebp - 0x3c], 0xfffffff9
mov dword [ebp - 0x194], 0xffffffff
mov dword [ebp - 0x240], 0
jmp 0x10047be5
mov eax, dword [ebp - 0x240]
inc eax
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 2
jge 0x10047c01
mov eax, dword [ebp - 0x240]
mov dword [ebp + eax*4 - 0xd88], 0x80ca9f8d
jmp 0x10047bd8
mov dword [ebp - 0x3c], 0
jmp 0x10047c11
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 3
jg 0x10047e64
mov dword [ebp - 0x3c8], 0xe843
push 1
lea ecx, [ebp - 0xcc8]
call fcn.1000b514
mov byte [ebp - 4], 0x31
mov dword [ebp - 0x248], 0
jmp 0x10047c4f
mov eax, dword [ebp - 0x248]
inc eax
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 1
jge 0x10047c71
push dword [ebp - 0x248]
lea ecx, [ebp - 0xcc8]
call fcn.1000b57b
mov dword [eax], 9
jmp 0x10047c42
push 0x6b67
push 0x6924
push 0
lea eax, [ebp - 0x3c8]
push eax
call fcn.1002ba54
add esp, 0x10
mov dword [ebp - 0x194], 0
jmp 0x10047ca5
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 1
jg 0x10047e50
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x3c4]
call fcn.1000b57b
mov ecx, dword [ebp - 0x3c8]
cmp dword [eax], ecx
jle 0x10047cd6
mov dword [ebp - 0x628], 1
jmp 0x10047cdd
and dword [ebp - 0x628], 0
push 2
lea ecx, [ebp - 0x3c4]
call fcn.1000b57b
mov ecx, dword [ebp - 0x628]
imul ecx, dword [eax]
test ecx, ecx
je 0x10047d0c
mov eax, 0xe712c519
test eax, eax
je 0x10047d0c
mov dword [ebp - 0x630], 1
jmp 0x10047d13
and dword [ebp - 0x630], 0
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x3c4]
call fcn.1000b57b
mov eax, dword [eax]
sub eax, dword [ebp - 0x630]
cmp eax, 0xfffffff8
jae 0x10047d3a
mov dword [ebp - 0x638], 1
jmp 0x10047d41
and dword [ebp - 0x638], 0
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x3c4]
call fcn.1000b57b
mov ecx, dword [ebp - 0x638]
add ecx, dword [eax]
cmp ecx, 0xcc09
jle 0x10047d6b
mov dword [ebp - 0x640], 1
jmp 0x10047d72
and dword [ebp - 0x640], 0
push 0
lea ecx, [ebp - 0x8c8]
call fcn.1000b57b
push dword [eax]
lea ecx, [ebp - 0x3c4]
call fcn.1000b57b
mov eax, dword [eax]
imul eax, dword [ebp - 0x640]
add eax, dword [ebp - 0x9a4]
mov dword [ebp - 0x648], eax
push 0
lea ecx, [ebp - 0xcc8]
call fcn.1000b57b
mov ecx, dword [ebp - 0x648]
mov dword [eax], ecx
cmp dword [ebp - 0x648], 0x2321210c
jle 0x10047dce
mov dword [ebp - 0x650], 1
jmp 0x10047dd5
and dword [ebp - 0x650], 0
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x3c4]
call fcn.1000b57b
mov esi, eax
push 0
lea ecx, [ebp - 0x8c8]
call fcn.1000b57b
mov ecx, dword [ebp - 0x650]
sub ecx, dword [eax]
sub ecx, 0x4acc
cmp dword [esi], ecx
jle 0x10047e10
mov dword [ebp - 0x658], 1
jmp 0x10047e17
and dword [ebp - 0x658], 0
mov eax, dword [ebp - 0x194]
mov ecx, dword [ebp - 0x658]
mov dword [ebp + eax*4 - 0xd88], ecx
mov byte [ebp - 0xd5], 0
lea eax, [ebp - 0xd5]
push eax
push 1
push 0x4ee6
push 1
push 1
call fcn.1002a0af
add esp, 0x14
jmp 0x10047c98
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0xcc8]
call fcn.1000b576
jmp 0x10047c0a
mov dword [ebp - 0x3c], 0
jmp 0x10047e74
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 3
jg 0x10047e9d
push 0
lea ecx, [ebp - 0x8c8]
call fcn.1000b57b
push dword [eax]
lea ecx, [ebp - 0x3c4]
call fcn.1000b57b
cmp dword [eax], 0
je 0x10047e9b
jmp 0x10047e9d
jmp 0x10047e6d
jmp 0x10047b81
mov byte [ebp - 0xfd], 0
movzx eax, byte [ebp - 0xfd]
test eax, eax
je 0x10047ee3
push 0x7225
push 0x6d37
push 0x5907
push 0x28ea
push 0x1bc4
push 0x41e4
push 0
push 0x3d0
push 1
call fcn.1002b41f
add esp, 0x24
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x8c8]
call fcn.1000b576
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x3c4]
call fcn.1000b576
mov dword [ebp - 0x54], 0xffffffff
mov dword [ebp - 0x70], 0xdb62b2fa
mov dword [ebp - 0x730], 0x38462c7d
mov dword [ebp - 0x9c4], 0x94933308
mov dword [ebp - 0x250], 0
jmp 0x10047f3c
mov eax, dword [ebp - 0x250]
inc eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 2
jge 0x10047f58
mov eax, dword [ebp - 0x250]
mov dword [ebp + eax*4 - 0xa8], 0xa48bbca6
jmp 0x10047f2f
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xa8], 0
jmp 0x10047f86
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa8]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xa8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xa8], 0xfffffff7
jg 0x10047fdb
mov dword [ebp - 0x304], 0x65ab
mov eax, dword [ebp - 0x304]
inc eax
mov dword [ebp - 0x304], eax
push 0
push 0x6548
push 0x1094
push 0
push 0x31d8
lea eax, [ebp - 0x304]
push eax
push 0x4746
push 0x5540
call fcn.1002a48e
add esp, 0x20
jmp 0x10047f6b
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0xa8]
cmp dword [ebp + eax - 0xa8], ecx
jl 0x10048003
mov dword [ebp - 0x660], 1
jmp 0x1004800a
and dword [ebp - 0x660], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa8]
add eax, 0x45c8100c
cmp dword [ebp - 0x660], eax
jle 0x1004803d
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xa8], 0
jne 0x1004803d
and dword [ebp - 0x668], 0
jmp 0x10048047
mov dword [ebp - 0x668], 1
push 4
pop eax
shl eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov edx, dword [ebp - 0x668]
sub edx, dword [ebp + ecx - 0xa8]
cmp dword [ebp + eax - 0xa8], edx
jle 0x10048075
mov dword [ebp - 0x670], 1
jmp 0x1004807c
and dword [ebp - 0x670], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa8]
cmp eax, dword [ebp - 0x670]
jle 0x100482b0
mov dword [ebp - 0xb8], 0xea4c5706
mov dword [ebp - 0x258], 0xffffffff
mov dword [ebp - 0x30c], 0x8de905f4
mov dword [ebp - 0x6a8], 0xe65fbc01
mov dword [ebp - 0x9b4], 0xffffffff
mov eax, dword [ebp - 0xb8]
cmp dword [ebp - 0xb8], eax
jle 0x100480e1
mov dword [ebp - 0x688], 1
jmp 0x100480e8
and dword [ebp - 0x688], 0
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0xeb0], eax
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0x678], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x678]
mov dword [ebp + eax - 0xa8], ecx
mov eax, dword [ebp - 0x678]
mov dword [ebp - 0x258], eax
mov eax, dword [ebp - 0x258]
imul eax, dword [ebp - 0x70]
test eax, eax
je 0x10048142
cmp dword [ebp - 0x258], 0
je 0x10048142
mov dword [ebp - 0x9ac], 1
jmp 0x10048149
and dword [ebp - 0x9ac], 0
cmp dword [ebp - 0xb8], 0
je 0x1004816e
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xa8], 0
je 0x1004816e
mov dword [ebp - 0x680], 1
jmp 0x10048175
and dword [ebp - 0x680], 0
xor eax, eax
sub eax, dword [ebp - 0x680]
jne 0x10048191
cmp dword [ebp - 0xb8], 0
jne 0x10048191
and dword [ebp - 0x690], 0
jmp 0x1004819b
mov dword [ebp - 0x690], 1
mov eax, dword [ebp - 0x688]
add eax, dword [ebp - 0x690]
mov dword [ebp - 0xb8], eax
mov eax, dword [ebp - 0x30c]
cmp dword [ebp - 0xb8], eax
jg 0x100481c7
mov dword [ebp - 0x698], 1
jmp 0x100481ce
and dword [ebp - 0x698], 0
mov eax, dword [ebp - 0x6a8]
cmp dword [ebp - 0x698], eax
jge 0x100481e8
mov dword [ebp - 0x6a0], 1
jmp 0x100481ef
and dword [ebp - 0x6a0], 0
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x6a0], eax
jg 0x10048213
cmp dword [ebp - 0x258], 0
je 0x10048213
cmp dword [ebp - 0x30c], 0
je 0x10048213
cmp dword [ebp - 0x6a8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa8]
mov dword [ebp - 0x109c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x30c]
cmp dword [ebp + eax - 0xa8], ecx
jge 0x10048247
mov dword [ebp - 0x6b0], 1
jmp 0x1004824e
and dword [ebp - 0x6b0], 0
mov eax, dword [ebp - 0x6b0]
mov dword [ebp - 0x70], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa8]
mov dword [ebp - 0x6b8], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x6b8]
mov dword [ebp + eax - 0xa8], ecx
mov eax, dword [ebp - 0x70]
cmp eax, dword [ebp - 0x6b8]
jle 0x10048294
mov dword [ebp - 0x6c0], 1
jmp 0x1004829b
and dword [ebp - 0x6c0], 0
mov eax, dword [ebp - 0x9b4]
imul eax, dword [ebp - 0x6c0]
mov dword [ebp - 0x70], eax
jmp 0x100485f5
mov dword [ebp - 0x128], 7
mov dword [ebp - 0x70], 0xffffffed
jmp 0x100482ca
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0x17
jge 0x100485f5
mov dword [ebp - 0x120], 0x2fafeceb
mov byte [ebp - 0xff], 0
movzx eax, byte [ebp - 0xff]
test eax, eax
je 0x10048344
push 0x6530
push 0xfd7
push 0x7632
push 0x4eb8
push 0x3133
push 0x22c2
push 0x3022
push 0x7319
push 0x5d94
push 0x67a9
push 0x51d5
push 1
push 1
push 0x50b6
push 0
push 0x3218
push 0x2b98
call fcn.1003a670
add esp, 0x44
mov dword [ebp - 0x120], 0
jmp 0x1004835d
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 1
jg 0x100485f0
mov dword [ebp - 0x84], 0xb545435d
mov dword [ebp - 0x314], 0x693cdb7c
mov dword [ebp - 0x84], 0
jmp 0x10048397
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 1
jg 0x100485eb
mov dword [ebp - 0x130], 0x2f47d66
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0xeb8], eax
mov eax, 0x7820eaad
test eax, eax
je 0x100485da
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0x6c8], eax
mov eax, dword [ebp - 0x84]
mov ecx, dword [ebp - 0x6c8]
mov dword [ebp + eax*4 - 0xa8], ecx
cmp dword [ebp - 0x6c8], 0
jne 0x100483ff
push 5
pop eax
test eax, eax
jne 0x100483ff
and dword [ebp - 0x6d0], 0
jmp 0x10048409
mov dword [ebp - 0x6d0], 1
mov eax, dword [ebp - 0x84]
cmp dword [ebp - 0x6d0], eax
je 0x10048429
cmp dword [ebp - 0x84], 0
jne 0x10048429
and dword [ebp - 0x6d8], 0
jmp 0x10048433
mov dword [ebp - 0x6d8], 1
mov eax, dword [ebp - 0x130]
cmp dword [ebp - 0x6d8], eax
jne 0x1004844d
mov dword [ebp - 0x9bc], 1
jmp 0x10048454
and dword [ebp - 0x9bc], 0
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x1000], eax
cmp dword [ebp - 0x120], 0xfffffff9
jb 0x10048472
mov dword [ebp - 0x6e0], 1
jmp 0x10048479
and dword [ebp - 0x6e0], 0
cmp dword [ebp - 0x6e0], 1
jbe 0x1004848e
mov dword [ebp - 0x6e8], 1
jmp 0x10048495
and dword [ebp - 0x6e8], 0
mov eax, dword [ebp - 0x6e8]
inc eax
neg eax
sub eax, dword [ebp - 0x130]
cmp eax, dword [ebp - 0x128]
jl 0x100484b8
mov dword [ebp - 0x6f0], 1
jmp 0x100484bf
and dword [ebp - 0x6f0], 0
mov eax, dword [ebp - 0x120]
cmp dword [ebp - 0x6f0], eax
je 0x100484d9
mov dword [ebp - 0x6f8], 1
jmp 0x100484e0
and dword [ebp - 0x6f8], 0
mov eax, dword [ebp - 0x6f8]
neg eax
add eax, dword [ebp - 0x130]
cmp eax, dword [ebp - 0x84]
jg 0x10048502
mov dword [ebp - 0x700], 1
jmp 0x10048509
and dword [ebp - 0x700], 0
mov eax, dword [ebp - 0x130]
cmp dword [ebp - 0x700], eax
jg 0x10048523
mov dword [ebp - 0x708], 1
jmp 0x1004852a
and dword [ebp - 0x708], 0
mov eax, dword [ebp - 0x128]
cmp dword [ebp - 0x708], eax
jle 0x10048544
mov dword [ebp - 0x710], 1
jmp 0x1004854b
and dword [ebp - 0x710], 0
mov eax, dword [ebp - 0x128]
cmp dword [ebp - 0x710], eax
jl 0x10048565
mov dword [ebp - 0x718], 1
jmp 0x1004856c
and dword [ebp - 0x718], 0
mov eax, dword [ebp - 0x718]
sub eax, dword [ebp - 0x128]
mov dword [ebp - 0x314], eax
mov eax, dword [ebp - 0x130]
cmp dword [ebp - 0x314], eax
jge 0x10048598
mov eax, dword [ebp - 0x314]
mov dword [ebp - 0x9c4], eax
jmp 0x1004838a
jmp 0x10048350
jmp 0x100482c3
mov dword [ebp - 0x19c], 0x2a4f402e
mov dword [ebp - 0x268], 0x8f4727c
mov dword [ebp - 0x31c], 0xffffffff
mov dword [ebp - 0x1a4], 0x97bc8b42
mov dword [ebp - 0x260], 0
jmp 0x10048636
mov eax, dword [ebp - 0x260]
inc eax
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 4
jge 0x10048652
mov eax, dword [ebp - 0x260]
mov dword [ebp + eax*4 - 0x1210], 0xffffffff
jmp 0x10048629
cmp dword [ebp - 0x19c], 0
jne 0x100486fa
mov dword [ebp - 0x268], 0x6dc6
cmp dword [ebp - 0x268], 0
jge 0x1004867e
mov dword [ebp - 0x738], 1
jmp 0x10048685
and dword [ebp - 0x738], 0
mov eax, dword [ebp - 0x738]
mov dword [ebp - 0x31c], eax
mov eax, dword [ebp - 0x19c]
cmp dword [ebp - 0x31c], eax
jge 0x100486b1
mov eax, 0x7a8c
test eax, eax
jne 0x100486b1
and dword [ebp - 0x740], 0
jmp 0x100486bb
mov dword [ebp - 0x740], 1
mov eax, dword [ebp - 0x19c]
cmp eax, dword [ebp - 0x740]
jne 0x100486d5
mov dword [ebp - 0x748], 1
jmp 0x100486dc
and dword [ebp - 0x748], 0
mov eax, dword [ebp - 0x19c]
imul eax, dword [ebp - 0x748]
add eax, dword [ebp - 0x19c]
jne 0x100486fa
and dword [ebp - 0x9cc], 0
jmp 0x10048704
mov dword [ebp - 0x9cc], 1
mov eax, dword [ebp - 0x1a4]
cmp dword [ebp - 0x268], eax
jg 0x10048741
mov dword [ebp - 0x268], 0xfc257a10
mov byte [ebp - 0xf6], 0
movzx eax, byte [ebp - 0xf6]
test eax, eax
je 0x1004873f
push 0x2545
push 1
push 1
call fcn.1002a1dd
add esp, 0xc
jmp 0x10048780
mov dword [ebp - 0x1a4], 0
jmp 0x1004875a
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 3
jg 0x10048780
push 0x6560
push 0
push 0x69c4
lea eax, [ebp - 0x31c]
push eax
call fcn.1002dc85
add esp, 0x10
jmp 0x1004874d
mov dword [ebp - 0x54], 0
jmp 0x10048790
cmp dword [ebp - 0x54], 3
jg 0x10049274
mov dword [ebp - 0x44], 0xffffffff
mov dword [ebp - 0x270], 0
jmp 0x100487ba
mov eax, dword [ebp - 0x270]
inc eax
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 1
jge 0x100487d6
mov eax, dword [ebp - 0x270]
mov dword [ebp + eax*4 - 0x278], 8
jmp 0x100487ad
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x278], 0
jmp 0x10048804
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x278]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x278], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x278], 9
jg 0x10048991
push 3
lea ecx, [ebp - 0xb84]
call fcn.1000b514
mov byte [ebp - 4], 0x32
mov dword [ebp - 0x280], 0
jmp 0x10048842
mov eax, dword [ebp - 0x280]
inc eax
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 3
jge 0x10048864
push dword [ebp - 0x280]
lea ecx, [ebp - 0xb84]
call fcn.1000b57b
mov dword [eax], 0x1d69f428
jmp 0x10048835
push 2
lea ecx, [ebp - 0xb84]
call fcn.1000b57b
mov dword [eax], 3
jmp 0x1004889d
push 2
lea ecx, [ebp - 0xb84]
call fcn.1000b57b
cmp dword [eax], 0x12
jl 0x1004897d
mov dword [ebp - 0x1d8], 0xe327439c
mov dword [ebp - 0x1d4], 0
jmp 0x100488d6
cmp dword [ebp - 0x1d4], 1
jge 0x100488f2
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0xb84]
call fcn.1000b576
jmp 0x100487e9
mov dword [ebp - 0x298], 0xd767
mov dword [ebp - 0x1c4], 0x1928c176
push 1
lea ecx, [ebp - 0xbc4]
call fcn.1000b514
mov byte [ebp - 4], 0x33
mov dword [ebp - 0x758], 0x90515466
lea eax, [ebp - 0x10d0]
push eax
lea eax, [ebp - 0xbc4]
push eax
push 0x2a83
push 0
call fcn.1002acba
add esp, 0x10
mov dword [ebp - 0x1c4], 0
jmp 0x100489f6
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 2
je 0x10048bb8
mov dword [ebp - 0x1ac], 0xffffffff
mov dword [ebp - 0x1bc], 5
mov dword [ebp - 0x1ac], 0xfffffffc
jmp 0x10048a30
cmp dword [ebp - 0x1ac], 0xfffffff2
je 0x10048bb3
mov dword [ebp - 0x138], 0
mov dword [ebp - 0x1b4], 3
mov dword [ebp - 0x768], 1
mov dword [ebp - 0x138], 0
jmp 0x10048a74
cmp dword [ebp - 0x138], 0
jl 0x10048bae
jmp 0x100489e9
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0xbc4]
call fcn.1000b576
mov dword [ebp - 0x38], 0x603fa75c
push 3
lea ecx, [ebp - 0x105c]
call fcn.1000b514
mov byte [ebp - 4], 0x34
mov dword [ebp - 0xec8], 0
mov dword [ebp - 0x8c], 0
jmp 0x10048c02
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 3
jge 0x10048c1e
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0x2d0], 0x1c08901
jmp 0x10048bf5
mov dword [ebp - 0x8c], 0
jmp 0x10048c37
cmp dword [ebp - 0x8c], 3
jge 0x10048c59
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x8d8]
call fcn.1000b576
and dword [ebp - 0x324], 0
jmp 0x100492a8
mov eax, dword [ebp - 0x2a0]
mov eax, dword [eax]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x324], eax
jge 0x100496d1
mov dword [ebp - 0x334], 0xfa72c2
push 4
lea ecx, [ebp - 0xc98]
call fcn.1000b514
mov dword [ebp - 4], 0x36
mov dword [ebp - 0xa1c], 0x6bc3ec3d
mov dword [ebp - 0x7f8], 0xfffffffc
mov dword [ebp - 0xa24], 1
mov dword [ebp - 0x198], 0
jmp 0x10049315
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 3
jge 0x10049331
mov eax, dword [ebp - 0x198]
mov dword [ebp + eax*4 - 0x1130], 0
jmp 0x10049308
push 0x496a
lea eax, [ebp - 0xc98]
push eax
lea eax, [ebp - 0x198]
push eax
push 0
push 0x581a
call fcn.10031451
add esp, 0x14
mov eax, dword [ebp - 0x334]
mov dword [ebp - 0x7e8], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x7e8]
mov dword [ebp + eax - 0x1130], ecx
cmp dword [ebp - 0x7e8], 0xfffffffe
jb 0x10049387
mov dword [ebp - 0x32c], 1
jmp 0x1004938e
and dword [ebp - 0x32c], 0
push 1
lea ecx, [ebp - 0xc98]
call fcn.1000b57b
mov ecx, dword [ebp - 0x32c]
mov dword [eax], ecx
mov eax, dword [ebp - 0xa1c]
cmp dword [ebp - 0x32c], eax
jl 0x100493bd
mov dword [ebp - 0x7f0], 1
jmp 0x100493c4
and dword [ebp - 0x7f0], 0
mov eax, dword [ebp - 0x7f0]
mov dword [ebp - 0x7f8], eax
cmp dword [ebp - 0x7f8], 9
jg 0x100493e5
mov dword [ebp - 0x800], 1
jmp 0x100493ec
and dword [ebp - 0x800], 0
mov eax, dword [ebp - 0x334]
cmp dword [ebp - 0x800], eax
jle 0x10049406
mov dword [ebp - 0x808], 1
jmp 0x1004940d
and dword [ebp - 0x808], 0
imul eax, dword [ebp - 0x808], 0
cmp eax, 0xfffa
jae 0x10049427
mov dword [ebp - 0x810], 1
jmp 0x1004942e
and dword [ebp - 0x810], 0
mov eax, dword [ebp - 0x334]
cmp dword [ebp - 0x810], eax
jg 0x10049448
jmp 0x10049708
mov eax, dword [ebp - 0xa44]
mov dword [ebp - 0xa4c], eax
mov eax, dword [ebp - 0xa4c]
mov dword [ebp - 0xa54], eax
mov eax, dword [ebp - 0xa54]
movzx eax, byte [eax]
test eax, eax
je 0x10049708
push 0xe44
push 0x11c5
call dword [sym.imp.GDI32.dll_SetMapMode]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret