Function at 0x10047dcd
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10066077
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x38c
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
and dword [ebp - 0x1a4], 0
mov byte [ebp - 0xe4], 4
mov byte [ebp - 0xe3], 0xf8
mov byte [ebp - 0xe2], 0xc
mov byte [ebp - 0xe1], 8
mov byte [ebp - 0xe0], 6
mov byte [ebp - 0xdf], 0xa
mov byte [ebp - 0xde], 0x17
mov byte [ebp - 0xdd], 0x1f
mov byte [ebp - 0xdc], 9
mov byte [ebp - 0xdb], 0x12
mov byte [ebp - 0xda], 0x25
mov byte [ebp - 0xd9], 0x5c
mov byte [ebp - 0xd8], 0x6c
mov byte [ebp - 0xd7], 0x59
mov byte [ebp - 0xd6], 0xf2
mov byte [ebp - 0xd5], 9
mov byte [ebp - 0xd4], 0x55
mov byte [ebp - 0xd3], 0xec
mov byte [ebp - 0xd2], 8
mov byte [ebp - 0xd1], 0x49
mov byte [ebp - 0xd0], 0x52
mov byte [ebp - 0xcf], 7
mov byte [ebp - 0xce], 0x9e
mov byte [ebp - 0xcd], 0x1f
mov byte [ebp - 0xcc], 0xc8
mov byte [ebp - 0xcb], 0x83
mov byte [ebp - 0xca], 0xbc
mov byte [ebp - 0xc9], 0x59
mov byte [ebp - 0xc8], 0x62
mov byte [ebp - 0xc7], 0xd2
mov byte [ebp - 0xc6], 0x93
mov byte [ebp - 0xc5], 0x2b
mov byte [ebp - 0xc4], 0x67
mov byte [ebp - 0xc3], 0xbc
mov byte [ebp - 0xc2], 0xb5
mov byte [ebp - 0xc1], 0x66
mov byte [ebp - 0xc0], 0x1b
mov byte [ebp - 0xbf], 0xd
mov byte [ebp - 0xbe], 0x21
mov byte [ebp - 0xbd], 0x9c
mov byte [ebp - 0xbc], 0x62
mov byte [ebp - 0xbb], 0x89
mov byte [ebp - 0xba], 0xfd
mov byte [ebp - 0xb9], 0x37
mov byte [ebp - 0xb8], 0x12
mov byte [ebp - 0xb7], 0xc3
mov byte [ebp - 0xb6], 0x24
mov byte [ebp - 0xb5], 0x3e
mov byte [ebp - 0xb4], 2
mov byte [ebp - 0xb3], 9
mov byte [ebp - 0xb2], 8
mov byte [ebp - 0xb1], 0xa
mov byte [ebp - 0xb0], 0x10
mov byte [ebp - 0xaf], 0x18
mov byte [ebp - 0xae], 0x18
mov byte [ebp - 0xad], 8
mov byte [ebp - 0xac], 7
mov byte [ebp - 0xab], 0x11
mov byte [ebp - 0xaa], 0xb
mov byte [ebp - 0xa9], 4
mov byte [ebp - 0xa8], 0x13
mov byte [ebp - 0xa7], 0x18
mov byte [ebp - 0xa6], 0x15
mov byte [ebp - 0xa5], 2
mov byte [ebp - 0xa4], 0xd
mov byte [ebp - 0xa3], 0x18
mov byte [ebp - 0xa2], 3
mov byte [ebp - 0xa1], 0xa
mov byte [ebp - 0xa0], 0
mov byte [ebp - 0x9f], 5
mov byte [ebp - 0x9e], 0x12
mov byte [ebp - 0x9d], 0x12
mov byte [ebp - 0x9c], 0xa
mov byte [ebp - 0x9b], 0x18
mov byte [ebp - 0x9a], 0x14
mov byte [ebp - 0x99], 0x1e
mov byte [ebp - 0x98], 0x19
mov byte [ebp - 0x97], 0xf
mov byte [ebp - 0x96], 0x16
mov byte [ebp - 0x95], 0xd
mov byte [ebp - 0x94], 0xe
mov byte [ebp - 0x93], 0x18
mov byte [ebp - 0x92], 0x11
mov byte [ebp - 0x91], 0x1d
mov byte [ebp - 0x90], 0xf
mov byte [ebp - 0x8f], 2
mov byte [ebp - 0x8e], 1
mov byte [ebp - 0x8d], 0x12
mov byte [ebp - 0x8c], 5
mov byte [ebp - 0x8b], 4
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0xe4]
and eax, 0x9d
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0xe4]
or ecx, 0x9d
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0xe4]
mov byte [ebp + eax - 0x274], cl
mov dword [ebp - 0x18], 2
and dword [ebp - 0x88], 0
jmp 0x100480c5
mov eax, dword [ebp - 0x18]
inc eax
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0x5a
jae 0x10048876
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0xe4]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x18], eax
jne 0x100484aa
mov dword [ebp - 0x1c], 1
mov dword [ebp - 0x30], 1
mov dword [ebp - 0x14], 5
mov dword [ebp - 0x2c], 0x9ec6ea3d
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
je 0x10048256
cmp dword [ebp - 0x30], 1
jne 0x1004812b
cmp dword [ebp - 0x30], 0
jne 0x1004812b
and dword [ebp - 0x194], 0
jmp 0x10048135
mov dword [ebp - 0x194], 1
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x340], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x2a0], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
inc eax
cmp eax, dword [ebp - 0x1c]
jle 0x1004816b
mov dword [ebp - 0x1b4], 1
jmp 0x10048172
and dword [ebp - 0x1b4], 0
cmp dword [ebp - 0x1b4], 0xfffffff8
jb 0x10048187
mov dword [ebp - 0x228], 1
jmp 0x1004818e
and dword [ebp - 0x228], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x2a8], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x2b0], eax
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x1c]
jg 0x100481b4
mov dword [ebp - 0x1f8], 1
jmp 0x100481bb
and dword [ebp - 0x1f8], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x2b8], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x2cc], eax
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x1c]
jne 0x100481e1
mov dword [ebp - 0x160], 1
jmp 0x100481e8
and dword [ebp - 0x160], 0
mov eax, dword [ebp - 0x160]
sub eax, dword [ebp - 0x1c]
cmp eax, 9
jg 0x10048202
mov dword [ebp - 0x1ac], 1
jmp 0x10048209
and dword [ebp - 0x1ac], 0
cmp dword [ebp - 0x1ac], 0xfffffffd
jne 0x1004821e
mov dword [ebp - 0x108], 1
jmp 0x10048225
and dword [ebp - 0x108], 0
cmp dword [ebp - 0x108], 0x6d8f
jle 0x1004823d
mov dword [ebp - 0x190], 1
jmp 0x10048244
and dword [ebp - 0x190], 0
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x2d4], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x2dc], eax
cmp dword [ebp - 0x2c], 0
je 0x1004828b
mov dword [ebp - 0x224], 0xc0266d99
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.10012e95
add esp, 0xc
jmp 0x1004847e
mov dword [ebp - 0x1f0], 0x2f7f1c74
mov dword [ebp - 0x50], 0
jmp 0x100482a5
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 2
jge 0x100482bb
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0xf8], 0x73ee
jmp 0x1004829e
mov dword [ebp - 0x2c], 0
jmp 0x100482cb
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0xffffffe3
jge 0x1004847e
mov dword [ebp - 0x170], 0xe6047311
mov dword [ebp - 0x14], 1
jmp 0x100482ef
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jl 0x10048479
mov dword [ebp - 0x208], 0xcc37069e
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0xf8], 0
je 0x10048328
xor eax, eax
inc eax
je 0x10048328
mov byte [ebp - 0x35], 0
lea eax, [ebp - 0x35]
push eax
call fcn.10047ab6
pop ecx
jmp 0x10048474
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0xf8]
mov ecx, dword [ebp - 0x14]
mov dword [ebp + ecx*4 - 0xf8], eax
mov eax, 0x36c8609
test eax, eax
je 0x10048394
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x2e4], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xf8], 0
jne 0x10048370
mov eax, 0x3ccf
test eax, eax
jne 0x10048370
and dword [ebp - 0x110], 0
jmp 0x1004837a
mov dword [ebp - 0x110], 1
mov eax, dword [ebp - 0x170]
cmp eax, dword [ebp - 0x110]
jg 0x10048394
mov dword [ebp - 0x168], 1
jmp 0x1004839b
and dword [ebp - 0x168], 0
cmp dword [ebp - 0x168], 8
jne 0x100483b0
mov dword [ebp - 0x118], 1
jmp 0x100483b7
and dword [ebp - 0x118], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0xf8]
cmp dword [ebp - 0x118], eax
jg 0x100483d5
mov dword [ebp - 0x1a8], 1
jmp 0x100483dc
and dword [ebp - 0x1a8], 0
mov eax, dword [ebp - 0x1a8]
neg eax
cmp eax, 0x9dda
jle 0x100483f7
mov dword [ebp - 0x120], 1
jmp 0x100483fe
and dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0xf8]
cmp dword [ebp - 0x120], eax
je 0x1004841c
mov dword [ebp - 0x128], 1
jmp 0x10048423
and dword [ebp - 0x128], 0
mov eax, dword [ebp - 0x170]
add eax, dword [ebp - 0x128]
cmp eax, dword [ebp - 0x208]
jle 0x10048450
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0xf8], 0
je 0x10048450
mov dword [ebp - 0x198], 1
jmp 0x10048457
and dword [ebp - 0x198], 0
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0x1f0], eax
mov byte [ebp - 0x33], 0
movzx eax, byte [ebp - 0x33]
test eax, eax
je 0x10048474
call fcn.1001b5a4
jmp 0x100482e8
jmp 0x100482c4
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0xe4]
inc eax
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0xe4]
mov ecx, dword [ebp - 0x18]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x18], eax
jmp 0x100480bd
mov dword [ebp - 0x130], 0
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0xe8], 0xf2d6273
mov dword [ebp - 0xec], 0x229a275f
mov dword [ebp - 0x344], 0xffffffff
mov dword [ebp - 0x58], 0
jmp 0x100484e9
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 3
jge 0x100484ff
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x36c], 0x9e885dc1
jmp 0x100484e2
mov dword [ebp - 0x130], 0x8f6c
mov eax, dword [ebp - 0x130]
cmp eax, dword [ebp - 0x28]
jge 0x10048520
mov dword [ebp - 0x150], 1
jmp 0x10048527
and dword [ebp - 0x150], 0
cmp dword [ebp - 0x28], 0xdacd
jle 0x1004853c
mov dword [ebp - 0x178], 1
jmp 0x10048543
and dword [ebp - 0x178], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x178], eax
jle 0x1004855a
mov dword [ebp - 0x138], 1
jmp 0x10048561
and dword [ebp - 0x138], 0
cmp dword [ebp - 0x138], 0xa017779a
jae 0x10048579
mov dword [ebp - 0x1b8], 1
jmp 0x10048580
and dword [ebp - 0x1b8], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x1b8], eax
je 0x10048597
mov dword [ebp - 0x140], 1
jmp 0x1004859e
and dword [ebp - 0x140], 0
cmp dword [ebp - 0x140], 0
je 0x100485b3
mov dword [ebp - 0x180], 1
jmp 0x100485ba
and dword [ebp - 0x180], 0
mov eax, dword [ebp - 0x180]
sub eax, dword [ebp - 0x28]
mov dword [ebp - 0x148], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x148]
mov dword [ebp + eax - 0x36c], ecx
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0xe8], eax
mov eax, dword [ebp - 0xe8]
cmp eax, dword [ebp - 0x28]
jle 0x100485ff
mov dword [ebp - 0x1a0], 1
jmp 0x10048606
and dword [ebp - 0x1a0], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x1a0], eax
jne 0x1004861d
mov dword [ebp - 0x188], 1
jmp 0x10048624
and dword [ebp - 0x188], 0
mov eax, dword [ebp - 0x150]
cmp eax, dword [ebp - 0x188]
jge 0x1004863e
mov dword [ebp - 0x158], 1
jmp 0x10048645
and dword [ebp - 0x158], 0
cmp dword [ebp - 0x158], 1
jae 0x1004865a
mov dword [ebp - 0x1b0], 1
jmp 0x10048661
and dword [ebp - 0x1b0], 0
imul eax, dword [ebp - 0x1b0], 0xffff
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x348], eax
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x328], eax
cmp dword [ebp - 0xe8], 0xffff
je 0x1004869b
mov dword [ebp - 0x100], 1
jmp 0x100486a2
and dword [ebp - 0x100], 0
mov eax, dword [ebp - 0xec]
imul eax, dword [ebp - 0x100]
mov dword [ebp - 0xec], eax
lea eax, [ebp - 0x28]
push eax
call fcn.10012e7e
pop ecx
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x88]
movzx eax, byte [ebp + eax - 0xe6]
movsx eax, byte [ebp + eax - 0x274]
mov ecx, dword [ebp - 0x18]
movzx ecx, byte [ebp + ecx - 0xe3]
and ecx, eax
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x88]
movzx eax, byte [ebp + eax - 0xe6]
movsx eax, byte [ebp + eax - 0x274]
mov edx, dword [ebp - 0x18]
movzx edx, byte [ebp + edx - 0xe3]
or edx, eax
sub edx, ecx
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0xe4]
mov byte [ebp + eax - 0x274], dl
mov dword [ebp - 0x284], 0x4e1a3622
mov dword [ebp - 0x2e0], 0x43cdf98a
mov dword [ebp - 0x28c], 1
mov dword [ebp - 0x324], 0xffffffff
mov dword [ebp - 0x214], 0x3fbb4ebb
mov dword [ebp - 0x294], 0xe63e3155
mov dword [ebp - 0x1d4], 1
mov dword [ebp - 0x2e8], 0x8fb0b44
mov dword [ebp - 0x29c], 0xffffffff
mov dword [ebp - 0x278], 0x874da862
push 3
lea ecx, [ebp - 0x2f4]
call fcn.1000f886
and dword [ebp - 4], 0
mov dword [ebp - 0xf0], 0x3147f59e
mov dword [ebp - 0x48], 0
jmp 0x100487ae
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 2
jge 0x100487c4
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x2c4], 0xffffffff
jmp 0x100487a7
lea eax, [ebp - 0x2f4]
push eax
lea eax, [ebp - 0x48]
push eax
call fcn.1001b514
pop ecx
pop ecx
lea eax, [ebp - 0x1d4]
push eax
call fcn.1001b55c
pop ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2c4]
mov dword [ebp - 0x234], eax
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x1dc], eax
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
mov eax, dword [ebp - 0x234]
cmp eax, dword [ebp - 0x1dc]
jne 0x10048829
mov dword [ebp - 0x104], 1
jmp 0x10048830
and dword [ebp - 0x104], 0
cmp dword [ebp - 0x104], 0x2d2c87a7
je 0x10048848
mov dword [ebp - 0x10c], 1
jmp 0x1004884f
and dword [ebp - 0x10c], 0
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x214], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2f4]
call fcn.1000f8e2
and dword [ebp - 0x88], 0
jmp 0x100480bd
mov dword [ebp - 0x20], 0xfffffffd
mov dword [ebp - 0x3c], 0xca27289f
mov dword [ebp - 0x124], 0
mov dword [ebp - 0x154], 1
mov dword [ebp - 0x1ec], 0x74f0e4f
mov dword [ebp - 0x114], 0x1a99
mov dword [ebp - 0x1e4], 0x1000bf30
cmp dword [ebp - 0x114], 0x1c32
jle 0x1004894b
and dword [ebp - 0x68], 0
jmp 0x100488d3
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0x5502
jge 0x1004894b
and dword [ebp - 0x60], 0
jmp 0x100488e9
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0x2d0
jge 0x10048949
and dword [ebp - 0x84], 0
jmp 0x10048908
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0x6095
jge 0x10048947
mov eax, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x84]
shl eax, cl
or eax, dword [ebp - 0x68]
cdq
mov dword [ebp - 0x204], eax
mov dword [ebp - 0x200], edx
push dword [ebp - 0x200]
push dword [ebp - 0x204]
mov ecx, 0x1060f718
call fcn.1000f771
jmp 0x100488fb
jmp 0x100488e2
jmp 0x100488cc
mov byte [ebp - 0x34], 0
mov dword [ebp - 4], 1
cmp dword [ebp - 0x114], 0x18cc
jge 0x10048972
mov edx, dword [ebp - 0x1e4]
mov ecx, 0x1060f718
call fcn.100111e1
jmp 0x1004898e
or dword [ebp - 4], 0xffffffff
jmp 0x10048998
lea eax, [ebp - 0x34]
push eax
call fcn.10047ae9
pop ecx
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x3c]
je 0x100489d4
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x2a4], eax
imul eax, dword [ebp - 0x3c], 0
mov ecx, dword [ebp - 0x3c]
imul ecx, eax
cmp ecx, 0xa7f4
jne 0x100489d4
and dword [ebp - 0x11c], 0
jmp 0x100489de
mov dword [ebp - 0x11c], 1
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x124], eax
mov eax, dword [ebp - 0x124]
cmp eax, dword [ebp - 0x20]
je 0x10048a01
mov dword [ebp - 0x12c], 1
jmp 0x10048a08
and dword [ebp - 0x12c], 0
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x12c]
test eax, eax
jne 0x10048a28
mov eax, 0xfffa
test eax, eax
jne 0x10048a28
and dword [ebp - 0x230], 0
jmp 0x10048a32
mov dword [ebp - 0x230], 1
mov eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x20]
jle 0x10048a46
mov dword [ebp - 0x134], 1
jmp 0x10048a4d
and dword [ebp - 0x134], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x134], eax
jle 0x10048a64
mov dword [ebp - 0x13c], 1
jmp 0x10048a6b
and dword [ebp - 0x13c], 0
cmp dword [ebp - 0x13c], 0
jne 0x10048a80
mov dword [ebp - 0x144], 1
jmp 0x10048a87
and dword [ebp - 0x144], 0
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x144]
imul eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x20]
jl 0x10048aa5
mov dword [ebp - 0x14c], 1
jmp 0x10048aac
and dword [ebp - 0x14c], 0
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x154], eax
mov eax, dword [ebp - 0x154]
cmp eax, dword [ebp - 0x20]
jne 0x10048acf
mov dword [ebp - 0x15c], 1
jmp 0x10048ad6
and dword [ebp - 0x15c], 0
cmp dword [ebp - 0x15c], 0
jle 0x10048afa
cmp dword [ebp - 0x20], 0
je 0x10048afa
mov eax, 0xf4d4
test eax, eax
je 0x10048afa
mov dword [ebp - 0x164], 1
jmp 0x10048b01
and dword [ebp - 0x164], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x164], eax
jl 0x10048b1e
mov eax, 0xa276
test eax, eax
jne 0x10048b1e
and dword [ebp - 0x16c], 0
jmp 0x10048b28
mov dword [ebp - 0x16c], 1
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0x1ec], eax
xor eax, eax
inc eax
imul eax, eax, 0x1a
mov byte [ebp + eax - 0x274], 0
lea eax, [ebp - 0x274]
push eax
lea ecx, [ebp - 0x384]
call fcn.10017399
mov dword [ebp - 4], 3
push 2
lea ecx, [ebp - 0x304]
call fcn.1000f886
mov byte [ebp - 4], 4
push 2
lea ecx, [ebp - 0x258]
call fcn.1000f886
mov byte [ebp - 4], 5
lea eax, [ebp - 0x304]
push eax
lea eax, [ebp - 0x40]
push eax
call fcn.10047b0c
pop ecx
pop ecx
mov dword [ebp - 0x40], 0
jmp 0x10048b9f
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 2
jge 0x10048bbb
push dword [ebp - 0x40]
lea ecx, [ebp - 0x258]
call fcn.1000f8fe
mov dword [eax], 0xde19d29b
jmp 0x10048b98
mov byte [ebp - 0x31], 0
movzx eax, byte [ebp - 0x31]
test eax, eax
je 0x10048bcc
call fcn.10047b54
lea eax, [ebp - 0x258]
push eax
call fcn.10047b68
pop ecx
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x258]
call fcn.1000f8e2
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x304]
call fcn.1000f8e2
and dword [ebp - 0x80], 0
jmp 0x10048c04
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0x1b
jae 0x10048c17
mov eax, dword [ebp - 0x80]
mov byte [ebp + eax - 0x274], 0
jmp 0x10048bfd
push 3
lea ecx, [ebp - 0x24c]
call fcn.1000f886
mov byte [ebp - 4], 6
mov dword [ebp - 0x174], 0xf07
mov dword [ebp - 0x1f4], 0x1000bfb0
cmp dword [ebp - 0x174], 0x1258
jle 0x10048cd8
push 0
push 0x231f
call dword [0x10612024]
and dword [ebp - 0x70], 0
jmp 0x10048c66
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0x7ba3
jge 0x10048cd8
and dword [ebp - 0x7c], 0
jmp 0x10048c7c
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0x36a8
jge 0x10048cd6
mov eax, dword [ebp - 0x70]
sub eax, dword [ebp - 0x7c]
cdq
mov dword [ebp - 0x210], eax
mov dword [ebp - 0x20c], edx
push dword [ebp - 0x20c]
push dword [ebp - 0x210]
lea ecx, [ebp - 0x39c]
call fcn.1000d740
pop ecx
pop ecx
mov dword [ebp - 0x220], eax
mov ecx, dword [ebp - 0x220]
call fcn.1000f751
push eax
call fcn.1004f9c6
pop ecx
lea ecx, [ebp - 0x39c]
call fcn.1000f747
jmp 0x10048c75
jmp 0x10048c5f
mov dword [ebp - 0x44], 0x5020f89b
mov byte [ebp - 4], 7
cmp dword [ebp - 0x174], 0xbd1
jge 0x10048cfb
push dword [ebp - 0x1f4]
call fcn.1004f9c6
pop ecx
jmp 0x10048d17
mov dword [ebp - 4], 6
jmp 0x10048d27
lea eax, [ebp - 0x24c]
push eax
lea eax, [ebp - 0x2f8]
push eax
call fcn.10047bc1
pop ecx
pop ecx
mov dword [ebp - 0x44], 2
jmp 0x10048d4c
mov eax, dword [ebp - 0x44]
dec eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0
jl 0x10048f8a
mov dword [ebp - 0x78], 0xd3b3152c
mov dword [ebp - 0x2ac], 0xa9bacde9
mov dword [ebp - 0x32c], 0xe95d1c58
mov dword [ebp - 0x2b4], 0xfffffffd
mov dword [ebp - 0x308], 0x14a5ea96
mov dword [ebp - 0x2bc], 0xd21cd430
mov dword [ebp - 0x31c], 0xe11a796d
mov dword [ebp - 0x78], 0
jmp 0x10048da9
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 2
jg 0x10048e9b
mov dword [ebp - 0x54], 0xfd11d962
mov dword [ebp - 0x2c8], 0x18ab9c27
mov dword [ebp - 0x318], 9
mov dword [ebp - 0x2d0], 9
mov dword [ebp - 0x320], 0xd2044653
mov dword [ebp - 0x22c], 0x2e11914c
mov dword [ebp - 0x54], 0
jmp 0x10048dfc
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 2
jg 0x10048e7e
mov dword [ebp - 0x2d8], 0xeff3de03
mov dword [ebp - 0x27c], 0x7e780ca9
mov dword [ebp - 0x280], 0
push 3
lea ecx, [ebp - 0x314]
call fcn.1000f886
mov byte [ebp - 4], 9
mov dword [ebp - 0x5c], 0
jmp 0x10048e41
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 3
jge 0x10048e5d
push dword [ebp - 0x5c]
lea ecx, [ebp - 0x314]
call fcn.1000f8fe
mov dword [eax], 1
jmp 0x10048e3a
lea eax, [ebp - 0x22c]
push eax
call fcn.1002b0eb
pop ecx
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x314]
call fcn.1000f8e2
jmp 0x10048df5
push dword [ebp - 0x44]
lea ecx, [ebp - 0x24c]
call fcn.1000f8fe
cmp dword [eax], 0
je 0x10048e96
jmp 0x10048da2
jmp 0x10048da2
mov byte [ebp - 0x32], 0
movzx eax, byte [ebp - 0x32]
test eax, eax
je 0x10048f85
call fcn.10047c09
mov dword [ebp - 0x17c], 0x6b3b
mov dword [ebp - 0x1fc], 0x1000c038
cmp dword [ebp - 0x17c], 0x6d9c
jle 0x10048f39
push 0x11f0
push 0
push 0
call dword [section..idata]
and dword [ebp - 0x64], 0
jmp 0x10048eec
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0x7506
jge 0x10048f39
and dword [ebp - 0x6c], 0
jmp 0x10048f02
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0x5a42
jge 0x10048f37
mov eax, dword [ebp - 0x64]
imul eax, dword [ebp - 0x6c]
cdq
mov dword [ebp - 0x21c], eax
mov dword [ebp - 0x218], edx
push dword [ebp - 0x218]
push dword [ebp - 0x21c]
mov ecx, 0x1060f718
call fcn.1000f771
jmp 0x10048efb
jmp 0x10048ee5
mov byte [ebp - 4], 0xa
cmp dword [ebp - 0x17c], 0x69e3
jge 0x10048f59
mov edx, dword [ebp - 0x1fc]
mov ecx, 0x1060f718
call fcn.100111e1
jmp 0x10048f75
mov dword [ebp - 4], 6
jmp 0x10048f85
jmp 0x10048d45
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x24c]
call fcn.1000f8e2
push 0x100075d9
lea ecx, [ebp - 0x360]
call fcn.10017399
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x360]
call fcn.10017414
cmp eax, dword [ebp + 0xc]
je 0x10048fff
lea ecx, [ebp - 0x384]
call fcn.10017414
mov esi, eax
call fcn.10050046
xor edx, edx
div esi
mov dword [ebp - 0x1c8], edx
lea eax, [ebp - 0x1c8]
push eax
lea eax, [ebp - 0x384]
push eax
push 0
push 0x2155
lea eax, [ebp - 0x360]
push eax
call fcn.100492b4
add esp, 0x14
jmp 0x10048fad
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x74], 0
push 2
lea ecx, [ebp - 0x1c4]
call fcn.1000f886
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x1e0], 0
push 1
lea ecx, [ebp - 0x240]
call fcn.1000f886
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x1e8], 0xfffffff8
mov dword [ebp - 0x33c], 0
mov dword [ebp - 0x338], 0
mov dword [ebp - 0x334], 0
mov dword [ebp - 0x330], 0
mov dword [ebp - 0x4c], 0
jmp 0x1004907b
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 2
jge 0x10049094
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x1c4]
call fcn.1000f8fe
and dword [eax], 0
jmp 0x10049074
lea eax, [ebp - 0x240]
push eax
lea eax, [ebp - 0x4c]
push eax
call fcn.10012ca1
pop ecx
pop ecx
mov eax, 0xfffb
test eax, eax
je 0x10049149
imul eax, dword [ebp - 0x24], 0
cmp eax, dword [ebp - 0x24]
jge 0x100490cb
cmp dword [ebp - 0x24], 0
jne 0x100490cb
and dword [ebp - 0x1cc], 0
jmp 0x100490d5
mov dword [ebp - 0x1cc], 1
cmp dword [ebp - 0x24], 0
jne 0x100490ea
cmp dword [ebp - 0x24], 0
jne 0x100490ea
and dword [ebp - 0x184], 0
jmp 0x100490f4
mov dword [ebp - 0x184], 1
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x184], eax
jg 0x1004910b
mov dword [ebp - 0x18c], 1
jmp 0x10049112
and dword [ebp - 0x18c], 0
cmp dword [ebp - 0x18c], 1
jb 0x10049127
mov dword [ebp - 0x1d0], 1
jmp 0x1004912e
and dword [ebp - 0x1d0], 0
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x288], eax
cmp dword [ebp - 0x24], 0
je 0x10049149
mov dword [ebp - 0xfc], 1
jmp 0x10049150
and dword [ebp - 0xfc], 0
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0xd972c40a
jb 0x1004916e
mov dword [ebp - 0x1d8], 1
jmp 0x10049175
and dword [ebp - 0x1d8], 0
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x290], eax
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x298], eax
push 0
lea ecx, [ebp - 0x1c4]
call fcn.1000f8fe
push 0
lea ecx, [ebp - 0x1c4]
call fcn.1000f8fe
push 0
lea ecx, [ebp - 0x1c4]
call fcn.1000f8fe
mov eax, dword [ebp - 0x1e0]
mov dword [ebp - 0x19c], eax
push 0
lea ecx, [ebp - 0x1c4]
call fcn.1000f8fe
mov ecx, dword [ebp - 0x19c]
mov dword [eax], ecx
push 0
lea ecx, [ebp - 0x240]
call fcn.1000f8fe
mov ecx, dword [ebp - 0x19c]
mov dword [eax], ecx
lea eax, [ebp - 0x1e8]
push eax
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x1c4]
push eax
lea eax, [ebp - 0x240]
push eax
call fcn.10047c4b
add esp, 0x14
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x240]
call fcn.1000f8e2
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x1c4]
call fcn.1000f8e2
lea eax, [ebp - 0x360]
push eax
mov ecx, dword [ebp + 8]
call fcn.1001ce24
mov eax, dword [ebp - 0x1a4]
or eax, 1
mov dword [ebp - 0x1a4], eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x360]
call fcn.100173c8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x384]
call fcn.100173c8
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret