Function at 0x1004232a
Capabilities:
Contain obfuscated stackstrings
Enumerate pe sections
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1007960b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x974
push esi
and dword [ebp - 0x18], 0
movzx eax, byte [ebp + 8]
test eax, eax
je 0x10046402
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x354], 1
mov dword [ebp - 0x52c], 0xfffffff9
mov dword [ebp - 0x534], 1
mov dword [ebp - 0x38], 0
jmp 0x1004238d
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 2
jge 0x100423a3
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x244], 0xc69a
jmp 0x10042386
mov dword [ebp - 0x38], 0
jmp 0x100423b3
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 3
jge 0x100423c9
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x844], 0x7d02268f
jmp 0x100423ac
mov dword [ebp - 0x38], 0
jmp 0x100423d9
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 3
jge 0x100423ef
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x85c], 0x44f4cc51
jmp 0x100423d2
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x244], 0x82eac453
ja 0x1004240e
mov dword [ebp - 0x558], 1
jmp 0x10042415
and dword [ebp - 0x558], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x244]
mov dword [ebp - 0x7f8], eax
mov dword [ebp - 0x354], 0x7b722ba7
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x244]
cmp dword [ebp - 0x354], eax
jle 0x10042453
mov dword [ebp - 0x424], 1
jmp 0x1004245a
and dword [ebp - 0x424], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x244]
cmp dword [ebp - 0x424], eax
jg 0x1004247b
mov dword [ebp - 0x42c], 1
jmp 0x10042482
and dword [ebp - 0x42c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x244]
cmp dword [ebp - 0x42c], eax
jne 0x100424a3
mov dword [ebp - 0x460], 1
jmp 0x100424aa
and dword [ebp - 0x460], 0
cmp dword [ebp - 0x460], 0x28d9ba5f
jl 0x100424c2
mov dword [ebp - 0x468], 1
jmp 0x100424c9
and dword [ebp - 0x468], 0
cmp dword [ebp - 0x468], 4
jne 0x100424de
mov dword [ebp - 0x524], 1
jmp 0x100424e5
and dword [ebp - 0x524], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x244]
mov dword [ebp - 0x740], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x244]
mov dword [ebp - 0x78c], eax
mov eax, 0x5261fc42
test eax, eax
je 0x10042529
cmp dword [ebp - 0x52c], 0
je 0x10042529
mov dword [ebp - 0x44c], 1
jmp 0x10042530
and dword [ebp - 0x44c], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x44c]
mov dword [ebp + eax - 0x844], ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x244]
add eax, 0x1966
mov dword [ebp - 0x464], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x464]
mov dword [ebp + eax - 0x85c], ecx
cmp dword [ebp - 0x464], 0
jne 0x10042587
mov eax, 0x53423637
test eax, eax
jne 0x10042587
and dword [ebp - 0x2a8], 0
jmp 0x10042591
mov dword [ebp - 0x2a8], 1
cmp dword [ebp - 0x2a8], 0xffffffff
jge 0x1004260d
mov dword [ebp - 0x750], 0x6082f4e5
mov dword [ebp - 0x794], 1
mov dword [ebp - 0x760], 0xfffffffb
push 3
lea ecx, [ebp - 0x74c]
call fcn.10015dbf
and dword [ebp - 4], 0
lea eax, [ebp - 0x79c]
push eax
push 1
lea eax, [ebp - 0x74c]
push eax
call fcn.10040c47
add esp, 0xc
push 0
lea eax, [ebp - 0x534]
push eax
push 0x736c
push 0x189d
call fcn.10041833
add esp, 0x10
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x74c]
call fcn.10015e27
jmp 0x10042627
mov byte [ebp - 0x83], 0
movzx eax, byte [ebp - 0x83]
test eax, eax
je 0x10042627
push 0
call fcn.10041bcb
pop ecx
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x398], eax
mov dword [ebp - 0x188], 0xac64a684
push 1
call fcn.10040cae
pop ecx
mov dword [ebp - 0x188], 0
jmp 0x1004265b
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 0x13
jl 0x100426ba
mov dword [ebp - 0x158], 0xb51dba33
mov dword [ebp - 0x158], 0xffffffe3
jmp 0x10042687
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 0xfffffff8
jle 0x100426b8
mov byte [ebp - 0x89], 0
movzx eax, byte [ebp - 0x89]
test eax, eax
je 0x100426b6
push 1
push 0x50fa
push 0x4d1e
call fcn.10040cdc
add esp, 0xc
jmp 0x1004267a
jmp 0x1004264e
mov eax, dword [ebp - 0x398]
movzx eax, word [eax]
cmp eax, 0x5a4d
je 0x100426cf
jmp 0x1004646e
mov dword [ebp - 0x53c], 0xfffffffa
mov dword [ebp - 0x41c], 0xfffffffe
mov dword [ebp - 0x778], 0
mov dword [ebp - 0x580], 0xf63069be
mov dword [ebp - 0x6c], 0
jmp 0x10042707
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 2
jge 0x1004271d
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0x640], 0xd4e793
jmp 0x10042700
mov dword [ebp - 0x6c], 0
jmp 0x1004272d
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 3
jge 0x10042743
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0x75c], 0xfffffffe
jmp 0x10042726
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x75c]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x75c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x640]
mov dword [ebp - 0x41c], eax
imul eax, dword [ebp - 0x53c], 0xbf4d
cmp eax, dword [ebp - 0x41c]
jne 0x1004278f
mov dword [ebp - 0x248], 1
jmp 0x10042796
and dword [ebp - 0x248], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x248]
mov dword [ebp + eax - 0x640], ecx
mov eax, dword [ebp - 0x248]
mov dword [ebp - 0x580], eax
mov eax, dword [ebp - 0x398]
mov ecx, dword [ebp - 0x24]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0x88], ecx
mov dword [ebp - 0x65c], 0x743d
mov dword [ebp - 0x658], 0x743d
mov dword [ebp - 0x654], 0x743d
mov dword [ebp - 0x650], 0x743d
lea ecx, [ebp - 0x259]
call fcn.10008dd3
push eax
lea eax, [ebp - 0x64c]
push eax
lea eax, [ebp - 0x65c]
push eax
lea ecx, [ebp - 0x864]
call fcn.10015e3b
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x76c]
call fcn.10015e01
mov dword [ebp - 4], 1
push 2
lea ecx, [ebp - 0x694]
call fcn.10015dbf
mov byte [ebp - 4], 2
mov dword [ebp - 0x194], 0xb5ca9869
mov dword [ebp - 0x64], 0
jmp 0x10042856
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 2
jge 0x10042872
push dword [ebp - 0x64]
lea ecx, [ebp - 0x694]
call fcn.10015e2c
mov dword [eax], 5
jmp 0x1004284f
mov dword [ebp - 0x64], 0
jmp 0x10042882
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 1
jge 0x10042898
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x588], 0xa2961c0f
jmp 0x1004287b
push 2
lea ecx, [ebp - 0x76c]
call fcn.10015e2c
cmp dword [eax], 0
jne 0x100428c5
push 0
lea ecx, [ebp - 0x694]
call fcn.10015e2c
cmp dword [eax], 0
jne 0x100428c5
and dword [ebp - 0x2b0], 0
jmp 0x100428cf
mov dword [ebp - 0x2b0], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2b0]
mov dword [ebp + eax - 0x588], ecx
mov dword [ebp - 0x194], 0xa
jmp 0x100428fb
mov eax, dword [ebp - 0x194]
dec eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 2
jge 0x10042999
mov dword [ebp - 0x7e8], 1
mov dword [ebp - 0x780], 1
mov dword [ebp - 0x590], 0xfffffff6
mov dword [ebp - 0x160], 0
jmp 0x1004293f
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 2
jge 0x1004295b
mov eax, dword [ebp - 0x160]
mov dword [ebp + eax*4 - 0x8cc], 9
jmp 0x10042932
push 0x1686
push 0xe72
push 0
push 0x2795
push 0xf72
push 0x3482
call fcn.100414f6
add esp, 0x18
push 0
lea eax, [ebp - 0x590]
push eax
push 0x6533
call fcn.10041bfb
add esp, 0xc
jmp 0x100428ee
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x694]
call fcn.10015e27
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x76c]
call fcn.10015e27
mov eax, dword [ebp - 0x88]
cmp dword [eax], 0x4550
je 0x100429ca
jmp 0x1004646e
mov dword [ebp - 0x7f0], 0
mov dword [ebp - 0x788], 3
mov dword [ebp - 0x7ec], 0x9a3df603
mov dword [ebp - 0x790], 0xfffffffa
mov dword [ebp - 0x82c], 0xfffffffb
push 2
lea ecx, [ebp - 0x7ac]
call fcn.10015dbf
mov dword [ebp - 4], 3
mov dword [ebp - 0x798], 0x5fcc
mov dword [ebp - 0x410], 1
mov dword [ebp - 0x19c], 0
jmp 0x10042a3d
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 2
jge 0x10042a5f
push dword [ebp - 0x19c]
lea ecx, [ebp - 0x7ac]
call fcn.10015e2c
mov dword [eax], 0xfffffffb
jmp 0x10042a30
mov eax, dword [ebp - 0x410]
dec eax
mov dword [ebp - 0x410], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7ac]
call fcn.10015e27
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x88]
lea eax, [ecx + eax + 0x78]
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x168], 1
mov dword [ebp - 0x7f4], 1
push 3
lea ecx, [ebp - 0x7cc]
call fcn.10015dbf
mov dword [ebp - 4], 4
mov dword [ebp - 0x7a0], 0
push 3
lea ecx, [ebp - 0x7bc]
call fcn.10015dbf
mov byte [ebp - 4], 5
mov dword [ebp - 0x80c], 0xed09
mov dword [ebp - 0x808], 0xed09
mov dword [ebp - 0x804], 0xed09
mov dword [ebp - 0x800], 0xed09
mov dword [ebp - 0x6e8], 0
mov dword [ebp - 0x2c], 0
jmp 0x10042b13
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x10042b2f
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x7cc]
call fcn.10015e2c
mov dword [eax], 0xde713a47
jmp 0x10042b0c
mov dword [ebp - 0x2c], 0
jmp 0x10042b3f
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x10042b58
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x7bc]
call fcn.10015e2c
or dword [eax], 0xffffffff
jmp 0x10042b38
mov dword [ebp - 0x2c], 0
jmp 0x10042b68
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jge 0x10042b7e
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x2b8], 0x33ec
jmp 0x10042b61
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2b8]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x2b8], eax
mov dword [ebp - 0x168], 0xf
jmp 0x10042bb2
mov eax, dword [ebp - 0x168]
dec eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 6
jle 0x10042bf2
mov byte [ebp - 0xa4], 0
movzx eax, byte [ebp - 0xa4]
test eax, eax
je 0x10042bf0
push 0x43d8
push 0x506f
push 0x798d
push 0x6260
push 0x7afd
push 0
call fcn.10041ecd
add esp, 0x18
jmp 0x10042ba5
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x7bc]
call fcn.10015e27
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7cc]
call fcn.10015e27
mov eax, dword [ebp - 0x4c]
cmp dword [eax + 4], 0
jne 0x10042c1e
jmp 0x1004646e
push 0x55ee
push 0
call fcn.100419d2
pop ecx
pop ecx
and dword [ebp - 0x34], 0
mov dword [ebp - 0x170], 0
mov dword [ebp - 0x1a4], 0
jmp 0x10042c53
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 3
jge 0x10042c6f
mov eax, dword [ebp - 0x1a4]
mov dword [ebp + eax*4 - 0x980], 6
jmp 0x10042c46
mov dword [ebp - 0x170], 2
jmp 0x10042c88
mov eax, dword [ebp - 0x170]
dec eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 0
jl 0x10042cad
mov byte [ebp - 0x7a], 0
movzx eax, byte [ebp - 0x7a]
test eax, eax
je 0x10042cab
push 0
push 0x78f
call fcn.10040ead
pop ecx
pop ecx
jmp 0x10042c7b
mov byte [ebp - 0x7b], 0
push 0
push 0x58d6
lea eax, [ebp - 0x7b]
push eax
call fcn.10041935
add esp, 0xc
mov eax, dword [ebp - 0x88]
movzx eax, word [eax + 0x14]
mov ecx, dword [ebp - 0x88]
lea eax, [ecx + eax + 0x18]
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0xf4], 0xfffffff8
mov dword [ebp - 0xcc], 0xffffffff
mov dword [ebp - 0x6ec], 1
mov dword [ebp - 0xf4], 0xfffffff1
jmp 0x10042d15
mov eax, dword [ebp - 0xf4]
dec eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0xffffffe7
je 0x10042dd6
mov dword [ebp - 0x598], 1
mov dword [ebp - 0x5a0], 0xfffffffc
push 3
lea ecx, [ebp - 0x6c4]
call fcn.10015dbf
mov dword [ebp - 4], 6
mov dword [ebp - 0x1ac], 0
jmp 0x10042d63
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 3
jge 0x10042d85
push dword [ebp - 0x1ac]
lea ecx, [ebp - 0x6c4]
call fcn.10015e2c
mov dword [eax], 0x9d19ac19
jmp 0x10042d56
mov eax, dword [ebp - 0x598]
mov dword [ebp - 0x5a0], eax
push 0
push 0x59d8
push 0x6959
lea eax, [ebp - 0xcc]
push eax
push 0x6e6f
push 0xdc
lea eax, [ebp - 0x6c4]
push eax
push 0x7382
call fcn.100420a1
add esp, 0x20
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6c4]
call fcn.10015e27
jmp 0x10042d08
mov dword [ebp - 0xcc], 0x19
jmp 0x10042def
mov eax, dword [ebp - 0xcc]
dec eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0xfffffffd
jle 0x10042e62
push 1
lea ecx, [ebp - 0x608]
call fcn.10015dbf
mov dword [ebp - 4], 7
push 0x41cc
lea eax, [ebp - 0x6f4]
push eax
push 0x24
push 0
lea eax, [ebp - 0x608]
push eax
call fcn.100421fe
add esp, 0x14
push 0
lea ecx, [ebp - 0x608]
call fcn.10015e2c
mov esi, eax
push 0
lea ecx, [ebp - 0x608]
call fcn.10015e2c
mov ecx, dword [esi]
sub ecx, dword [eax]
mov dword [ebp - 0xf4], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x608]
call fcn.10015e27
jmp 0x10042de2
and dword [ebp - 0x26c], 0
jmp 0x10042e87
mov eax, dword [ebp - 0x26c]
inc eax
mov dword [ebp - 0x26c], eax
mov eax, dword [ebp - 0xb0]
add eax, 0x28
mov dword [ebp - 0xb0], eax
mov eax, dword [ebp - 0x88]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x26c], eax
jge 0x10042f0d
mov eax, dword [ebp - 0xb0]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x3a0], eax
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x3a0]
jb 0x10042f08
mov eax, dword [ebp - 0x88]
push dword [eax + 0x38]
mov eax, dword [ebp - 0xb0]
push dword [eax + 8]
call fcn.100409f7
pop ecx
pop ecx
add eax, dword [ebp - 0x3a0]
mov dword [ebp - 0x5a8], eax
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x5a8]
jae 0x10042f08
push 1
lea eax, [ebp - 0x34]
push eax
push 0x15f5
lea eax, [ebp - 0xb0]
push eax
push 0x5836
call fcn.10040d3e
add esp, 0x14
jmp 0x10042f0d
jmp 0x10042e6b
cmp dword [ebp - 0x34], 0
jne 0x10042f18
jmp 0x1004646e
mov dword [ebp - 0xd4], 0xffff
mov dword [ebp - 0x6fc], 0xfffffffe
push 0x2158
lea eax, [ebp - 0xd4]
push eax
push 0x4553
push 1
call fcn.10040daa
add esp, 0x10
mov dword [ebp - 0xd4], 0
jmp 0x10042f60
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0x1d
jl 0x10042fe5
mov dword [ebp - 0x1b4], 0x2a1e9487
mov dword [ebp - 0x178], 0
jmp 0x10042f8c
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 3
jge 0x10042fa8
mov eax, dword [ebp - 0x178]
mov dword [ebp + eax*4 - 0x938], 0xffffffff
jmp 0x10042f7f
mov dword [ebp - 0x1b4], 0
jmp 0x10042fc1
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 2
jg 0x10042fe0
mov byte [ebp - 0x79], 0
movzx eax, byte [ebp - 0x79]
test eax, eax
je 0x10042fde
push 0
call fcn.100412cd
pop ecx
jmp 0x10042fb4
jmp 0x10042f53
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x34]
add ecx, dword [eax]
add ecx, dword [ebp - 0x24]
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x58], 0xc3099cf
mov dword [ebp - 0x30], 0
mov dword [ebp - 0xdc], 0xfffffff6
mov byte [ebp - 0xa2], 0
push 0x6d7b
push 0x5f35
lea eax, [ebp - 0xa2]
push eax
push 0
push 0x6f63
push 0x7c8
push 0x1f28
call fcn.10041cd0
add esp, 0x1c
cmp dword [ebp - 0x58], 0
je 0x100430a5
mov dword [ebp - 0x58], 0x11484
mov eax, dword [ebp - 0x58]
sub eax, dword [ebp - 0x30]
mov dword [ebp - 0x30], eax
je 0x10043092
cmp dword [ebp - 0xdc], 0xfecf7921
jae 0x10043072
cmp dword [ebp - 0xdc], 0
jne 0x10043072
and dword [ebp - 0x2c0], 0
jmp 0x1004307c
mov dword [ebp - 0x2c0], 1
mov eax, dword [ebp - 0x2c0]
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
je 0x10043092
cmp dword [ebp - 0xdc], 0
cmp dword [ebp - 0x30], 0
jne 0x100430a5
mov eax, 0x816f
test eax, eax
jne 0x100430a5
cmp dword [ebp - 0x30], 0
cmp dword [ebp - 0x30], 5
ja 0x10043396
mov dword [ebp - 0x284], 0xd840dfe9
mov dword [ebp - 0x5f8], 0x90538e0e
mov dword [ebp - 0x5f0], 0xa57a880e
mov dword [ebp - 0x30], 0x1b
jmp 0x100430dd
mov eax, dword [ebp - 0x30]
dec eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0xfffffff5
jg 0x10043391
mov dword [ebp - 0x418], 0xc0c7
mov dword [ebp - 0x278], 0x87c2657a
push 3
lea ecx, [ebp - 0x638]
call fcn.10015dbf
mov dword [ebp - 4], 8
mov dword [ebp - 0x51c], 0x3b61
push 0x6994
push 0
lea eax, [ebp - 0x638]
push eax
push 0x6369
lea eax, [ebp - 0x704]
push eax
call fcn.10041c44
add esp, 0x14
mov dword [ebp - 0x58], 0
jmp 0x1004314b
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 5
jle 0x1004337d
mov dword [ebp - 0x104], 0x6f6
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x70c], eax
cmp dword [ebp - 0x104], 0
je 0x100431c7
cmp dword [ebp - 0x58], 0
je 0x1004318a
push 4
pop eax
test eax, eax
je 0x1004318a
mov dword [ebp - 0x458], 1
jmp 0x10043191
and dword [ebp - 0x458], 0
cmp dword [ebp - 0x458], 1
jl 0x100431a6
mov dword [ebp - 0x2c8], 1
jmp 0x100431ad
and dword [ebp - 0x2c8], 0
mov eax, dword [ebp - 0x30]
imul eax, dword [ebp - 0x2c8]
test eax, eax
je 0x100431c7
mov dword [ebp - 0x3a8], 1
jmp 0x100431ce
and dword [ebp - 0x3a8], 0
mov eax, dword [ebp - 0x284]
cmp eax, dword [ebp - 0x3a8]
jge 0x100431e8
mov dword [ebp - 0x5b0], 1
jmp 0x100431ef
and dword [ebp - 0x5b0], 0
mov eax, dword [ebp - 0x418]
mov dword [ebp - 0x714], eax
imul eax, dword [ebp - 0x284], 0xfffffff9
cmp eax, dword [ebp - 0x104]
jne 0x10043216
mov dword [ebp - 0x2d0], 1
jmp 0x1004321d
and dword [ebp - 0x2d0], 0
mov eax, dword [ebp - 0x2d0]
sub eax, dword [ebp - 0x418]
imul eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x104]
je 0x10043241
mov dword [ebp - 0x2d8], 1
jmp 0x10043248
and dword [ebp - 0x2d8], 0
mov eax, dword [ebp - 0x2d8]
mov dword [ebp - 0x278], eax
mov eax, dword [ebp - 0x5f8]
cmp dword [ebp - 0x278], eax
jne 0x1004326e
mov dword [ebp - 0x3b0], 1
jmp 0x10043275
and dword [ebp - 0x3b0], 0
push 0
lea ecx, [ebp - 0x638]
call fcn.10015e2c
mov ecx, dword [ebp - 0x3b0]
mov dword [eax], ecx
mov eax, dword [ebp - 0x104]
neg eax
cmp eax, 0x8169b2b2
je 0x100432a5
mov dword [ebp - 0x5e4], 1
jmp 0x100432ac
and dword [ebp - 0x5e4], 0
cmp dword [ebp - 0xdc], 0xffffffff
je 0x100432c1
mov dword [ebp - 0x2e0], 1
jmp 0x100432c8
and dword [ebp - 0x2e0], 0
cmp dword [ebp - 0x2e0], 0
jb 0x100432dd
mov dword [ebp - 0x45c], 1
jmp 0x100432e4
and dword [ebp - 0x45c], 0
cmp dword [ebp - 0x45c], 0xee04
jl 0x100432fc
mov dword [ebp - 0x4c0], 1
jmp 0x10043303
and dword [ebp - 0x4c0], 0
push 1
lea ecx, [ebp - 0x638]
call fcn.10015e2c
mov eax, dword [ebp - 0x284]
cmp dword [ebp - 0x278], eax
jl 0x10043325
cmp dword [ebp - 0x104], 0
cmp dword [ebp - 0xdc], 0x8161dbfa
jbe 0x10043344
push 2
pop eax
test eax, eax
je 0x10043344
mov dword [ebp - 0x2e8], 1
jmp 0x1004334b
and dword [ebp - 0x2e8], 0
mov eax, dword [ebp - 0x51c]
cmp dword [ebp - 0x2e8], eax
jle 0x10043365
mov dword [ebp - 0x3b8], 1
jmp 0x1004336c
and dword [ebp - 0x3b8], 0
mov eax, dword [ebp - 0x3b8]
mov dword [ebp - 0x5f0], eax
jmp 0x10043144
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x638]
call fcn.10015e27
jmp 0x100430d6
jmp 0x10043429
mov dword [ebp - 0x6e0], 0xfffffffd
mov dword [ebp - 0x6dc], 0xfffffffd
mov dword [ebp - 0x6d8], 0xfffffffd
mov dword [ebp - 0x6d4], 0xfffffffd
mov dword [ebp - 0x180], 0
jmp 0x100433d7
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 1
jge 0x100433f3
mov eax, dword [ebp - 0x180]
mov dword [ebp + eax*4 - 0x4c8], 0xffffffff
jmp 0x100433ca
push 4
pop eax
shl eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov eax, dword [ebp + eax - 0x6e0]
mov dword [ebp + ecx - 0x4c8], eax
mov byte [ebp - 0x7d], 0
push 0x1033
push 0x6514
push 1
lea eax, [ebp - 0x7d]
push eax
call fcn.10040e1d
add esp, 0x10
xor ecx, ecx
call fcn.1002c386
push eax
call fcn.1005f4e8
pop ecx
mov byte [ebp - 0x14c], 7
mov byte [ebp - 0x14b], 0xbb
mov byte [ebp - 0x14a], 5
mov byte [ebp - 0x149], 7
mov byte [ebp - 0x148], 3
mov byte [ebp - 0x147], 6
mov byte [ebp - 0x146], 1
mov byte [ebp - 0x145], 2
mov byte [ebp - 0x144], 0
mov byte [ebp - 0x143], 4
mov byte [ebp - 0x142], 2
mov byte [ebp - 0x141], 6
mov byte [ebp - 0x140], 9
mov byte [ebp - 0x13f], 7
mov byte [ebp - 0x13e], 8
mov byte [ebp - 0x13d], 0
mov byte [ebp - 0x13c], 0x1d
mov byte [ebp - 0x13b], 0xaf
mov byte [ebp - 0x13a], 0xf4
mov byte [ebp - 0x139], 0x25
mov byte [ebp - 0x138], 0x4d
mov byte [ebp - 0x137], 0x40
mov byte [ebp - 0x136], 0x28
mov byte [ebp - 0x135], 0xdf
mov byte [ebp - 0x134], 0x1d
mov byte [ebp - 0x133], 0xf0
mov byte [ebp - 0x132], 0x61
mov byte [ebp - 0x131], 0xd9
mov byte [ebp - 0x130], 0xa6
mov byte [ebp - 0x12f], 0x2b
mov byte [ebp - 0x12e], 0xe7
mov byte [ebp - 0x12d], 0x75
mov byte [ebp - 0x12c], 0x64
mov byte [ebp - 0x12b], 0x6c
mov byte [ebp - 0x12a], 0xcc
mov byte [ebp - 0x129], 0x9a
mov byte [ebp - 0x128], 0x89
mov byte [ebp - 0x127], 0x86
mov byte [ebp - 0x126], 0
mov byte [ebp - 0x125], 0xa
mov byte [ebp - 0x124], 0xe4
mov byte [ebp - 0x123], 0x23
mov byte [ebp - 0x122], 0x98
mov byte [ebp - 0x121], 0x95
mov byte [ebp - 0x120], 0x82
mov byte [ebp - 0x11f], 0xd9
mov byte [ebp - 0x11e], 4
mov byte [ebp - 0x11d], 8
mov byte [ebp - 0x11c], 6
mov byte [ebp - 0x11b], 9
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x14c]
or eax, 0x8d
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x14c]
and ecx, 0x8d
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x14c]
mov byte [ebp + ecx - 0x474], al
mov dword [ebp - 0x1c], 2
and dword [ebp - 0xfc], 0
jmp 0x100435eb
mov eax, dword [ebp - 0x1c]
inc eax
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x32
jae 0x100436d2
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x14c]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x1c], eax
jne 0x10043635
mov eax, dword [ebp - 0x1c]
movzx eax, byte [ebp + eax - 0x14c]
inc eax
mov dword [ebp - 0xfc], eax
mov eax, dword [ebp - 0x1c]
movzx eax, byte [ebp + eax - 0x14c]
mov ecx, dword [ebp - 0x1c]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x1c], eax
jmp 0x100435e3
mov eax, dword [ebp - 0x1c]
movzx eax, byte [ebp + eax - 0x14b]
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0xfc]
movzx ecx, byte [ebp + ecx - 0x14e]
movsx ecx, byte [ebp + ecx - 0x474]
add eax, ecx
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ebp + ecx - 0x14b]
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xfc]
movzx edx, byte [ebp + edx - 0x14e]
movsx edx, byte [ebp + edx - 0x474]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ebp + ecx - 0x14b]
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xfc]
movzx edx, byte [ebp + edx - 0x14e]
movsx edx, byte [ebp + edx - 0x474]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ebp + ecx - 0x14c]
mov byte [ebp + ecx - 0x474], al
push 1
lea eax, [ebp - 0xfc]
push eax
call fcn.10040ead
pop ecx
pop ecx
jmp 0x100435e3
xor eax, eax
inc eax
imul eax, eax, 0xa
mov byte [ebp + eax - 0x474], 0
mov dword [ebp - 0x150], 0xf25cbd94
mov dword [ebp - 0x71c], 1
mov dword [ebp - 0x1c4], 0xab9737e0
mov dword [ebp - 0x250], 0x33bd
mov dword [ebp - 0x1c8], 5
mov dword [ebp - 0x4d0], 8
mov dword [ebp - 0x1bc], 0
jmp 0x10043735
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 3
jge 0x10043751
mov eax, dword [ebp - 0x1bc]
mov dword [ebp + eax*4 - 0x850], 0xe85c68ab
jmp 0x10043728
mov eax, dword [ebp - 0x1c4]
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x1c4], 1
je 0x10043772
mov dword [ebp - 0x2f0], 1
jmp 0x10043779
and dword [ebp - 0x2f0], 0
mov eax, dword [ebp - 0x2f0]
sub eax, dword [ebp - 0x250]
cmp eax, 0x4d41bd43
jge 0x10043798
mov dword [ebp - 0x420], 1
jmp 0x1004379f
and dword [ebp - 0x420], 0
mov eax, dword [ebp - 0x420]
mov dword [ebp - 0x1c4], eax
mov eax, dword [ebp - 0x1c4]
add eax, dword [ebp - 0x1c8]
cmp eax, 1
jne 0x100437c8
mov dword [ebp - 0x2f8], 1
jmp 0x100437cf
and dword [ebp - 0x2f8], 0
mov eax, dword [ebp - 0x1c8]
cmp dword [ebp - 0x2f8], eax
jge 0x100437e9
mov dword [ebp - 0x57c], 1
jmp 0x100437f0
and dword [ebp - 0x57c], 0
mov eax, dword [ebp - 0x1c8]
mov dword [ebp - 0x724], eax
mov eax, dword [ebp - 0x250]
add eax, dword [ebp - 0x4d0]
mov ecx, 0xb607800f
sub ecx, eax
sub ecx, dword [ebp - 0x1c8]
je 0x1004382c
mov eax, 0x97a0
test eax, eax
je 0x1004382c
mov dword [ebp - 0x3c0], 1
jmp 0x10043833
and dword [ebp - 0x3c0], 0
mov eax, dword [ebp - 0x250]
cmp eax, dword [ebp - 0x3c0]
jg 0x1004384d
mov dword [ebp - 0x300], 1
jmp 0x10043854
and dword [ebp - 0x300], 0
cmp dword [ebp - 0x300], 0xffffffff
jl 0x10043869
mov dword [ebp - 0x454], 1
jmp 0x10043870
and dword [ebp - 0x454], 0
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x150], eax
mov eax, dword [ebp - 0x150]
imul eax, dword [ebp - 0x454]
cmp eax, 0xfffffff9
jge 0x1004389a
mov dword [ebp - 0x308], 1
jmp 0x100438a1
and dword [ebp - 0x308], 0
mov eax, dword [ebp - 0x308]
sub eax, 0xd558783
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x850], eax
lea eax, [ebp - 0x474]
push eax
lea ecx, [ebp - 0x95c]
call fcn.10022ac4
mov dword [ebp - 0x5c4], eax
mov eax, dword [ebp - 0x5c4]
mov dword [ebp - 0x4d8], eax
mov dword [ebp - 4], 9
push 0xa
xor edx, edx
mov ecx, dword [ebp - 0x4d8]
call fcn.1002c34b
pop ecx
mov dword [ebp - 0x550], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x95c]
call fcn.10015d21
and dword [ebp - 0x190], 0
jmp 0x1004391f
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 0xb
jae 0x10043938
mov eax, dword [ebp - 0x190]
mov byte [ebp + eax - 0x474], 0
jmp 0x10043912
mov dword [ebp - 0x20], 0x9aed23b6
mov dword [ebp - 0x270], 0x168f928d
mov dword [ebp - 0x310], 0xfffffff9
mov dword [ebp - 0x318], 0x11ec
push 3
lea ecx, [ebp - 0x62c]
call fcn.10015dbf
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x4e0], 0
lea eax, [ebp - 0x72c]
push eax
push 0x4616
push 0
push 0x31aa
lea eax, [ebp - 0x62c]
push eax
call fcn.100411d6
add esp, 0x14
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x20], eax
jle 0x10043a1f
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x734], eax
mov dword [ebp - 0x270], 0xfffffffd
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x270], eax
jne 0x100439cf
mov dword [ebp - 0x3c8], 1
jmp 0x100439d6
and dword [ebp - 0x3c8], 0
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x20]
imul ecx, dword [ebp - 0x3c8]
add eax, ecx
mov dword [ebp - 0x310], eax
mov eax, dword [ebp - 0x310]
inc eax
cmp eax, 1
jg 0x10043a03
mov dword [ebp - 0x584], 1
jmp 0x10043a0a
and dword [ebp - 0x584], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x73c], eax
cmp dword [ebp - 0x270], 0x7b831966
jle 0x10043a34
cmp dword [ebp - 0x318], 0
je 0x10043a34
mov dword [ebp - 0x428], 1
jmp 0x10043a3b
and dword [ebp - 0x428], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x428], eax
je 0x10043a5b
cmp dword [ebp - 0x318], 0
je 0x10043a5b
mov dword [ebp - 0x3d0], 1
jmp 0x10043a62
and dword [ebp - 0x3d0], 0
cmp dword [ebp - 0x3d0], 0x637b
jge 0x10043a7a
mov dword [ebp - 0x320], 1
jmp 0x10043a81
and dword [ebp - 0x320], 0
mov eax, dword [ebp - 0x320]
neg eax
sub eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x20]
cmp dword [ebp - 0x20], eax
jle 0x10043aa1
mov dword [ebp - 0x258], 1
jmp 0x10043aa8
and dword [ebp - 0x258], 0
push 0
lea ecx, [ebp - 0x62c]
call fcn.10015e2c
mov ecx, dword [ebp - 0x258]
mov dword [eax], ecx
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x258], eax
je 0x10043ad4
mov dword [ebp - 0x434], 1
jmp 0x10043adb
and dword [ebp - 0x434], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x434], eax
jne 0x10043af2
mov dword [ebp - 0x328], 1
jmp 0x10043af9
and dword [ebp - 0x328], 0
mov eax, dword [ebp - 0x328]
mov dword [ebp - 0x4e0], eax
mov esi, dword [ebp - 0x20]
push 2
lea ecx, [ebp - 0x62c]
call fcn.10015e2c
mov dword [eax], esi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x62c]
call fcn.10015e27
mov dword [ebp - 0xe4], 0
mov dword [ebp - 0x5e8], 0xfffffff8
mov dword [ebp - 0xe4], 0xfffffff3
jmp 0x10043b53
mov eax, dword [ebp - 0xe4]
dec eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0xffffffe5
jg 0x10043bc2
mov dword [ebp - 0x58c], 0x28fb
mov dword [ebp - 0x4e8], 0xa0193208
mov byte [ebp - 0x7f], 0
movzx eax, byte [ebp - 0x7f]
test eax, eax
je 0x10043b90
push 1
push 0x206a
push 0x21e3
call fcn.10040eda
add esp, 0xc
lea eax, [ebp - 0xe4]
push eax
lea eax, [ebp - 0x5e8]
push eax
push 0x6adb
lea eax, [ebp - 0x4e8]
push eax
push 0
lea eax, [ebp - 0x58c]
push eax
push 0x1284
call fcn.10040f3f
add esp, 0x1c
jmp 0x10043b46
mov byte [ebp - 0x23c], 3
mov byte [ebp - 0x23b], 0x30
mov byte [ebp - 0x23a], 0
mov byte [ebp - 0x239], 3
mov byte [ebp - 0x238], 9
mov byte [ebp - 0x237], 1
mov byte [ebp - 0x236], 6
mov byte [ebp - 0x235], 9
mov byte [ebp - 0x234], 0x29
mov byte [ebp - 0x233], 0xa1
mov byte [ebp - 0x232], 0xce
mov byte [ebp - 0x231], 0x10
mov byte [ebp - 0x230], 0xf1
mov byte [ebp - 0x22f], 0xb
mov byte [ebp - 0x22e], 0x24
mov byte [ebp - 0x22d], 8
mov byte [ebp - 0x22c], 0x7e
mov byte [ebp - 0x22b], 0x72
mov byte [ebp - 0x22a], 0x8f
mov byte [ebp - 0x229], 0x8b
mov byte [ebp - 0x228], 0xa1
mov byte [ebp - 0x227], 0x79
mov byte [ebp - 0x226], 0xae
mov byte [ebp - 0x225], 0xef
mov byte [ebp - 0x224], 0x92
mov byte [ebp - 0x223], 0x9d
mov byte [ebp - 0x222], 0x74
mov byte [ebp - 0x221], 0x5c
mov byte [ebp - 0x220], 0x20
mov byte [ebp - 0x21f], 0xdf
mov byte [ebp - 0x21e], 0xbe
mov byte [ebp - 0x21d], 0xd3
mov byte [ebp - 0x21c], 0x21
mov byte [ebp - 0x21b], 0x5e
mov byte [ebp - 0x21a], 0x94
mov byte [ebp - 0x219], 0xd3
mov byte [ebp - 0x218], 0x2c
mov byte [ebp - 0x217], 0xeb
mov byte [ebp - 0x216], 0xfb
mov byte [ebp - 0x215], 0x9d
mov byte [ebp - 0x214], 0x46
mov byte [ebp - 0x213], 0xd9
mov byte [ebp - 0x212], 0x9d
mov byte [ebp - 0x211], 0x99
mov byte [ebp - 0x210], 0x4d
mov byte [ebp - 0x20f], 0x89
mov byte [ebp - 0x20e], 0x2b
mov byte [ebp - 0x20d], 0xf2
mov byte [ebp - 0x20c], 0x36
mov byte [ebp - 0x20b], 0x78
mov byte [ebp - 0x20a], 5
mov byte [ebp - 0x209], 8
mov byte [ebp - 0x208], 2
mov byte [ebp - 0x207], 6
mov byte [ebp - 0x206], 1
mov byte [ebp - 0x205], 1
mov byte [ebp - 0x204], 4
mov byte [ebp - 0x203], 2
mov byte [ebp - 0x202], 7
mov byte [ebp - 0x201], 2
mov byte [ebp - 0x200], 8
mov byte [ebp - 0x1ff], 6
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x23c]
or eax, 2
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x23c]
and ecx, 2
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x23c]
mov byte [ebp + ecx - 0x498], al
mov dword [ebp - 0x44], 2
and dword [ebp - 0x1b8], 0
jmp 0x10043dc5
mov eax, dword [ebp - 0x44]
inc eax
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0x3e
jae 0x10043e7b
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x23c]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x44], eax
jne 0x10043e0f
mov eax, dword [ebp - 0x44]
movzx eax, byte [ebp + eax - 0x23c]
inc eax
mov dword [ebp - 0x1b8], eax
mov eax, dword [ebp - 0x44]
movzx eax, byte [ebp + eax - 0x23c]
mov ecx, dword [ebp - 0x44]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x44], eax
jmp 0x10043dbd
mov eax, dword [ebp - 0x44]
movzx eax, byte [ebp + eax - 0x23b]
mov ecx, dword [ebp - 0x44]
sub ecx, dword [ebp - 0x1b8]
movzx ecx, byte [ebp + ecx - 0x23e]
movsx ecx, byte [ebp + ecx - 0x498]
or eax, ecx
mov ecx, dword [ebp - 0x44]
movzx ecx, byte [ebp + ecx - 0x23b]
mov edx, dword [ebp - 0x44]
sub edx, dword [ebp - 0x1b8]
movzx edx, byte [ebp + edx - 0x23e]
movsx edx, byte [ebp + edx - 0x498]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x44]
movzx ecx, byte [ebp + ecx - 0x23c]
mov byte [ebp + ecx - 0x498], al
and dword [ebp - 0x1b8], 0
jmp 0x10043dbd
xor eax, eax
inc eax
imul eax, eax, 0xa
mov byte [ebp + eax - 0x498], 0
mov dword [ebp - 0x108], 0x90c4d8e5
mov dword [ebp - 0x338], 1
mov dword [ebp - 0x198], 0
jmp 0x10043eb6
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 2
jge 0x10043ed2
mov eax, dword [ebp - 0x198]
mov dword [ebp + eax*4 - 0x4a0], 0xfffffff9
jmp 0x10043ea9
mov dword [ebp - 0x108], 0
jmp 0x10043eeb
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 1
jg 0x100440db
mov dword [ebp - 0x78], 0xf402e31d
mov dword [ebp - 0x78], 1
jmp 0x10043f0f
mov eax, dword [ebp - 0x78]
dec eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0
jl 0x100440d6
mov dword [ebp - 0x4f0], 0x4bedcc59
push 2
lea ecx, [ebp - 0x5c0]
call fcn.10015dbf
mov dword [ebp - 4], 0xb
push 0x7e61
push 0x3670
lea eax, [ebp - 0x6e4]
push eax
push 0xbe5
push 1
push 0x59f9
lea eax, [ebp - 0x5c0]
push eax
call fcn.10040f3f
add esp, 0x1c
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x338]
cmp dword [ebp + eax*4 - 0x4a0], ecx
jle 0x10043f81
mov dword [ebp - 0x3d8], 1
jmp 0x10043f88
and dword [ebp - 0x3d8], 0
mov eax, dword [ebp - 0x3d8]
mov dword [ebp - 0x4f0], eax
push 1
lea ecx, [ebp - 0x5c0]
call fcn.10015e2c
mov dword [eax], 0x4e6dc660
mov eax, 0xcdf5ef88
test eax, eax
je 0x10043fe8
mov eax, dword [ebp - 0x78]
mov eax, dword [ebp + eax*4 - 0x4a0]
mov dword [ebp - 0x330], eax
mov eax, dword [ebp - 0x108]
mov ecx, dword [ebp - 0x330]
mov dword [ebp + eax*4 - 0x4a0], ecx
cmp dword [ebp - 0x330], 0
je 0x10043fe8
mov dword [ebp - 0x5d4], 1
jmp 0x10043fef
and dword [ebp - 0x5d4], 0
cmp dword [ebp - 0x78], 0xc097
jg 0x10044004
mov dword [ebp - 0x430], 1
jmp 0x1004400b
and dword [ebp - 0x430], 0
mov eax, dword [ebp - 0x78]
cmp dword [ebp - 0x430], eax
jne 0x10044022
mov dword [ebp - 0x4f8], 1
jmp 0x10044029
and dword [ebp - 0x4f8], 0
mov eax, dword [ebp - 0x338]
mov dword [ebp - 0x828], eax
push 1
lea ecx, [ebp - 0x5c0]
call fcn.10015e2c
cmp dword [eax], 0x12e75507
je 0x10044056
mov dword [ebp - 0x594], 1
jmp 0x1004405d
and dword [ebp - 0x594], 0
push 1
lea ecx, [ebp - 0x5c0]
call fcn.10015e2c
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x4a0], 0
je 0x100440a2
mov byte [ebp - 0x81], 0
movzx eax, byte [ebp - 0x81]
test eax, eax
je 0x100440a0
push 0
push 0x76a3
push 0x600d
call fcn.10041e86
add esp, 0xc
jmp 0x100440c2
mov byte [ebp - 0x91], 0
movzx eax, byte [ebp - 0x91]
test eax, eax
je 0x100440c2
push 0x9d4
push 1
call fcn.100410e1
pop ecx
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5c0]
call fcn.10015e27
jmp 0x10043f08
jmp 0x10043ede
lea eax, [ebp - 0x498]
push eax
lea ecx, [ebp - 0x8e4]
call fcn.10022ac4
mov dword [ebp - 0x500], eax
mov eax, dword [ebp - 0x500]
mov dword [ebp - 0x5ec], eax
mov dword [ebp - 4], 0xc
push 0xa
xor edx, edx
mov ecx, dword [ebp - 0x5ec]
call fcn.1002c34b
pop ecx
mov dword [ebp - 0x520], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x8e4]
call fcn.10015d21
mov dword [ebp - 0xac], 5
push 1
lea ecx, [ebp - 0x6a0]
call fcn.10015dbf
mov dword [ebp - 4], 0xd
push 0x6ecd
push 1
push 0x2246
lea eax, [ebp - 0x830]
push eax
lea eax, [ebp - 0x6a0]
push eax
call fcn.1004112f
add esp, 0x14
mov dword [ebp - 0xac], 0
jmp 0x10044184
mov eax, dword [ebp - 0xac]
dec eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0xfffffff5
je 0x1004432e
mov dword [ebp - 0xc0], 0xffffffff
mov dword [ebp - 0x1a0], 0xffffffff
mov dword [ebp - 0x838], 0xfffffffc
mov dword [ebp - 0x518], 0xb6cd
mov dword [ebp - 0x810], 0x56a218f0
mov dword [ebp - 0xc0], 2
jmp 0x100441dc
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0xe
jg 0x10044329
mov dword [ebp - 0x508], 0x5e1abe8f
mov dword [ebp - 0x510], 0xffffffff
mov dword [ebp - 0x544], 0xbf35dd75
mov dword [ebp - 0x1cc], 0
jmp 0x10044220
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 4
jge 0x1004423c
mov eax, dword [ebp - 0x1cc]
mov dword [ebp + eax*4 - 0x8bc], 0xfffffff8
jmp 0x10044213
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0x7e0], eax
push 0xfffffffffffffffc
pop eax
inc eax
neg eax
push 4
pop ecx
imul ecx, ecx, 0
add eax, dword [ebp + ecx - 0x8bc]
cmp dword [ebp - 0x508], eax
jne 0x1004426f
mov dword [ebp - 0x59c], 1
jmp 0x10044276
and dword [ebp - 0x59c], 0
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0x824], eax
mov eax, dword [ebp - 0x510]
mov dword [ebp - 0x6f0], eax
mov eax, 0xd562b994
test eax, eax
je 0x100442f4
mov dword [ebp - 0x1a0], 0
jmp 0x100442b0
mov eax, dword [ebp - 0x1a0]
dec eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 0xffffffed
jl 0x100442dd
push 0x49bb
lea eax, [ebp - 0x544]
push eax
push 1
lea eax, [ebp - 0xac]
push eax
push 0x388f
call fcn.100411d6
add esp, 0x14
jmp 0x100442a3
mov esi, dword [ebp - 0x518]
push 0
lea ecx, [ebp - 0x6a0]
call fcn.10015e2c
mov dword [eax], esi
jmp 0x10044324
mov dword [ebp - 0x3e0], 1
push 1
push 0x11c8
lea eax, [ebp - 0x3e0]
push eax
push 0x6767
call fcn.10041257
add esp, 0x10
cmp dword [ebp - 0x3e0], 0
je 0x10044324
jmp 0x10044329
jmp 0x100441cf
jmp 0x10044177
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6a0]
call fcn.10015e27
and dword [ebp - 0x1c0], 0
jmp 0x10044353
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 0xb
jae 0x1004436c
mov eax, dword [ebp - 0x1c0]
mov byte [ebp + eax - 0x498], 0
jmp 0x10044346
mov dword [ebp - 0x54], 0xfffffffd
mov dword [ebp - 0x1a8], 0
jmp 0x1004438c
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 1
jge 0x100443a5
mov eax, dword [ebp - 0x1a8]
mov dword [ebp + eax*4 - 0x40], 0x184c506d
jmp 0x1004437f
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x40]
mov dword [ebp - 0x7b0], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x40]
cmp dword [ebp + eax - 0x40], ecx
jge 0x100443d7
mov dword [ebp - 0x340], 1
jmp 0x100443de
and dword [ebp - 0x340], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x40]
add eax, dword [ebp - 0x340]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x40]
jg 0x10044413
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x40], 0
je 0x10044413
mov dword [ebp - 0x438], 1
jmp 0x1004441a
and dword [ebp - 0x438], 0
cmp dword [ebp - 0x438], 2
jge 0x1004442f
mov dword [ebp - 0x348], 1
jmp 0x10044436
and dword [ebp - 0x348], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x40]
cmp dword [ebp - 0x348], eax
je 0x10044454
mov dword [ebp - 0x3e8], 1
jmp 0x1004445b
and dword [ebp - 0x3e8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x40]
cmp dword [ebp - 0x3e8], eax
jne 0x10044479
mov dword [ebp - 0x350], 1
jmp 0x10044480
and dword [ebp - 0x350], 0
mov eax, dword [ebp - 0x350]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x40]
cmp eax, 0x2f3817d1
jl 0x100444a9
mov dword [ebp - 0x440], 1
jmp 0x100444b0
and dword [ebp - 0x440], 0
cmp dword [ebp - 0x440], 0
jle 0x100444c5
mov dword [ebp - 0x548], 1
jmp 0x100444cc
and dword [ebp - 0x548], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x40]
mov dword [ebp - 0x6f8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x40], 0x1f34
jge 0x10044543
mov dword [ebp - 0x54], 0
jmp 0x100444fc
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0
jg 0x10044541
mov dword [ebp - 0xec], 0xffffffff
mov dword [ebp - 0xec], 0
jmp 0x10044525
mov eax, dword [ebp - 0xec]
dec eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0
jl 0x1004453f
mov eax, dword [ebp - 0xec]
cmp dword [ebp + eax*4 - 0x40], 0
je 0x1004453d
jmp 0x1004453f
jmp 0x10044518
jmp 0x100444f5
jmp 0x10044566
mov dword [ebp - 0x54], 0
jmp 0x10044553
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 1
jge 0x10044566
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x40], 0
jmp 0x1004454c
push dword [ebp - 0x520]
push dword [ebp - 0x550]
call fcn.1003dcd2
pop ecx
pop ecx
mov dword [ebp - 0x2c4], eax
push 2
lea ecx, [ebp - 0x290]
call fcn.10015dbf
mov dword [ebp - 4], 0xe
mov dword [ebp - 0xc4], 0
mov dword [ebp - 0x1fc], 0
jmp 0x100445b6
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 2
jge 0x100445d8
push dword [ebp - 0x1fc]
lea ecx, [ebp - 0x290]
call fcn.10015e2c
mov dword [eax], 0x9b55bb2c
jmp 0x100445a9
push 1
lea ecx, [ebp - 0x290]
call fcn.10015e2c
mov dword [eax], 0xd
jmp 0x10044611
push 1
lea ecx, [ebp - 0x290]
call fcn.10015e2c
mov dword [ebp - 0x358], eax
mov eax, dword [ebp - 0x358]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x358]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x290]
call fcn.10015e2c
cmp dword [eax], 0xfffffff0
jle 0x10044833
mov dword [ebp - 0x5c], 0xfffffff8
mov dword [ebp - 0x528], 0xffffffff
push 1
lea ecx, [ebp - 0x290]
call fcn.10015e2c
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x7fc], eax
mov eax, dword [ebp - 0xc4]
cmp dword [ebp - 0x5c], eax
jg 0x10044665
mov dword [ebp - 0x3f0], 1
jmp 0x1004466c
and dword [ebp - 0x3f0], 0
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x3f0], eax
jge 0x10044683
mov dword [ebp - 0x360], 1
jmp 0x1004468a
and dword [ebp - 0x360], 0
cmp dword [ebp - 0x360], 0
je 0x1004469f
mov dword [ebp - 0x43c], 1
jmp 0x100446a6
and dword [ebp - 0x43c], 0
mov eax, dword [ebp - 0x5c]
cmp eax, dword [ebp - 0x43c]
jge 0x100446bd
mov dword [ebp - 0x368], 1
jmp 0x100446c4
and dword [ebp - 0x368], 0
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x368], eax
jl 0x100446db
mov dword [ebp - 0x3f8], 1
jmp 0x100446e2
and dword [ebp - 0x3f8], 0
push 1
lea ecx, [ebp - 0x290]
call fcn.10015e2c
mov ecx, dword [ebp - 0x3f8]
sub ecx, dword [eax]
cmp ecx, dword [ebp - 0x5c]
jl 0x10044708
mov dword [ebp - 0x370], 1
jmp 0x1004470f
and dword [ebp - 0x370], 0
push 1
lea ecx, [ebp - 0x290]
call fcn.10015e2c
mov eax, dword [eax]
cmp eax, dword [ebp - 0x370]
jg 0x10044732
mov dword [ebp - 0x448], 1
jmp 0x10044739
and dword [ebp - 0x448], 0
cmp dword [ebp - 0x448], 0
jne 0x1004474e
mov dword [ebp - 0x378], 1
jmp 0x10044755
and dword [ebp - 0x378], 0
xor eax, eax
inc eax
sub eax, dword [ebp - 0x378]
cmp eax, 0x66d8
jg 0x10044771
mov dword [ebp - 0x400], 1
jmp 0x10044778
and dword [ebp - 0x400], 0
cmp dword [ebp - 0x400], 0xbed1
jg 0x10044790
mov dword [ebp - 0x380], 1
jmp 0x10044797
and dword [ebp - 0x380], 0
mov eax, dword [ebp - 0x380]
neg eax
je 0x100447bf
push 1
lea ecx, [ebp - 0x290]
call fcn.10015e2c
cmp dword [eax], 0
je 0x100447bf
mov dword [ebp - 0x444], 1
jmp 0x100447c6
and dword [ebp - 0x444], 0
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x444], eax
je 0x100447dd
mov dword [ebp - 0x388], 1
jmp 0x100447e4
and dword [ebp - 0x388], 0
mov eax, dword [ebp - 0x388]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x528], eax
mov dword [ebp - 0xc4], 0x16
jmp 0x1004480f
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0x30
jne 0x1004482e
mov byte [ebp - 0x7c], 0
movzx eax, byte [ebp - 0x7c]
test eax, eax
je 0x1004482c
push 1
call fcn.100412cd
pop ecx
jmp 0x10044802
jmp 0x100445ed
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x290]
call fcn.10015e27
mov eax, dword [ebp - 0x88]
mov ecx, dword [ebp - 0x2c4]
mov dword [eax + 8], ecx
push 1
lea ecx, [ebp - 0x29c]
call fcn.10015dbf
mov dword [ebp - 4], 0xf
push 4
lea ecx, [ebp - 0x6d0]
call fcn.10015dbf
mov byte [ebp - 4], 0x10
push 3
lea ecx, [ebp - 0x6b8]
call fcn.10015dbf
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x260], 0x76a
mov dword [ebp - 0x2ac], 0xb79ae4f7
mov dword [ebp - 0x560], 0xffffffff
lea eax, [ebp - 0x29c]
push eax
lea eax, [ebp - 0x50]
push eax
push 0x4289
push 0
call fcn.1004232a
add esp, 0x10
push 1
push 0x4873
lea eax, [ebp - 0x6d0]
push eax
lea eax, [ebp - 0x50]
push eax
call fcn.100412ee
add esp, 0x10
mov dword [ebp - 0x50], 0
jmp 0x100448e9
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 2
jge 0x100448ff
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x648], 0xffffffff
jmp 0x100448e2
mov dword [ebp - 0x50], 0
jmp 0x1004490f
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 3
jge 0x1004492b
push dword [ebp - 0x50]
lea ecx, [ebp - 0x6b8]
call fcn.10015e2c
mov dword [eax], 0x7c7747bb
jmp 0x10044908
mov eax, 0x473e
test eax, eax
je 0x10044a93
push 0
lea ecx, [ebp - 0x29c]
call fcn.10015e2c
mov esi, eax
push 0
lea ecx, [ebp - 0x29c]
call fcn.10015e2c
mov ecx, dword [esi]
add ecx, dword [eax]
jne 0x10044a7c
mov esi, dword [ebp - 0x260]
push 0
lea ecx, [ebp - 0x29c]
call fcn.10015e2c
add esi, dword [eax]
push 0
lea ecx, [ebp - 0x29c]
call fcn.10015e2c
add esi, dword [eax]
cmp esi, 0x8172
jl 0x10044996
mov dword [ebp - 0x390], 1
jmp 0x1004499d
and dword [ebp - 0x390], 0
push 0
lea ecx, [ebp - 0x6b8]
call fcn.10015e2c
mov dword [ebp - 0x274], eax
push 3
lea ecx, [ebp - 0x6d0]
call fcn.10015e2c
mov dword [ebp - 0x408], eax
mov eax, dword [ebp - 0x408]
mov ecx, dword [ebp - 0x274]
mov ecx, dword [ecx]
mov dword [eax], ecx
mov eax, dword [ebp - 0x408]
mov eax, dword [eax]
mov dword [ebp - 0x4b8], eax
mov eax, dword [ebp - 0x390]
mov dword [ebp - 0x530], eax
mov eax, dword [ebp - 0x274]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x274]
mov dword [ecx], eax
mov eax, dword [ebp - 0x4b8]
cmp eax, dword [ebp - 0x530]
jne 0x10044a18
mov dword [ebp - 0x450], 1
jmp 0x10044a1f
and dword [ebp - 0x450], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x648]
cmp dword [ebp - 0x450], eax
jl 0x10044a4f
push 0
lea ecx, [ebp - 0x29c]
call fcn.10015e2c
cmp dword [eax], 0
jne 0x10044a4f
and dword [ebp - 0x2a4], 0
jmp 0x10044a59
mov dword [ebp - 0x2a4], 1
mov eax, dword [ebp - 0x2a4]
mov dword [ebp - 0x2ac], eax
mov eax, dword [ebp - 0x260]
cmp dword [ebp - 0x2ac], eax
jg 0x10044a7c
and dword [ebp - 0x2b4], 0
jmp 0x10044a86
mov dword [ebp - 0x2b4], 1
push 0
lea ecx, [ebp - 0x29c]
call fcn.10015e2c
push 0
lea ecx, [ebp - 0x29c]
call fcn.10015e2c
mov ecx, dword [ebp - 0x260]
cmp dword [eax], ecx
jne 0x10044ab6
mov dword [ebp - 0x2bc], 1
jmp 0x10044abd
and dword [ebp - 0x2bc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x648]
imul eax, dword [ebp - 0x2bc]
mov dword [ebp - 0x560], eax
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x6b8]
call fcn.10015e27
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x6d0]
call fcn.10015e27
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x29c]
call fcn.10015e27
lea eax, [ebp - 0x2c4]
push eax
push 1
lea eax, [ebp - 0x10]
push eax
call fcn.10041361
add esp, 0xc
or dword [ebp - 0x670], 0xffffffff
or dword [ebp - 0x66c], 0xffffffff
or dword [ebp - 0x668], 0xffffffff
or dword [ebp - 0x664], 0xffffffff
lea ecx, [ebp - 0x261]
call fcn.10008dd3
push eax
lea eax, [ebp - 0x660]
push eax
lea eax, [ebp - 0x670]
push eax
lea ecx, [ebp - 0x8c4]
call fcn.10015e3b
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x4b4]
call fcn.10015e01
mov dword [ebp - 4], 0x12
push 4
lea ecx, [ebp - 0x614]
call fcn.10015dbf
mov byte [ebp - 4], 0x13
mov dword [ebp - 0x568], 0xf495e3b3
mov dword [ebp - 0xc8], 0
jmp 0x10044ba5
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 3
jge 0x10044bc1
mov eax, dword [ebp - 0xc8]
mov dword [ebp + eax*4 - 0x688], 0x2e0cf572
jmp 0x10044b98
lea eax, [ebp - 0x614]
push eax
push 0x4cd6
lea eax, [ebp - 0xc8]
push eax
push 1
call fcn.100413bc
add esp, 0x10
push 2
lea ecx, [ebp - 0x4b4]
call fcn.10015e2c
mov dword [eax], 2
jmp 0x10044c17
push 2
lea ecx, [ebp - 0x4b4]
call fcn.10015e2c
mov dword [ebp - 0x2cc], eax
mov eax, dword [ebp - 0x2cc]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x2cc]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0x4b4]
call fcn.10015e2c
cmp dword [eax], 0
jl 0x10044d15
mov dword [ebp - 0x60], 0xad86e52d
mov dword [ebp - 0x538], 0x647c
mov dword [ebp - 0x60], 0
jmp 0x10044c4e
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 2
jg 0x10044c82
push 2
lea ecx, [ebp - 0x4b4]
call fcn.10015e2c
mov esi, dword [eax]
push 2
lea ecx, [ebp - 0x4b4]
call fcn.10015e2c
mov eax, dword [eax]
mov ecx, dword [ebp + esi*4 - 0x688]
mov dword [ebp + eax*4 - 0x688], ecx
jmp 0x10044c47
mov dword [ebp - 0x60], 0
jmp 0x10044c92
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 2
jg 0x10044d10
mov eax, dword [ebp - 0x60]
cmp dword [ebp + eax*4 - 0x688], 0
je 0x10044cba
push 3
lea ecx, [ebp - 0x614]
call fcn.10015e2c
mov dword [eax], 1
jmp 0x10044cff
mov dword [ebp - 0xd0], 0xca8cda2a
mov dword [ebp - 0xd0], 0
jmp 0x10044cdd
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 4
jge 0x10044cff
push dword [ebp - 0xd0]
lea ecx, [ebp - 0x614]
call fcn.10015e2c
mov dword [eax], 1
jmp 0x10044cd0
mov eax, dword [ebp - 0x538]
mov dword [ebp - 0x568], eax
jmp 0x10044c8b
jmp 0x10044bf3
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x614]
call fcn.10015e27
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4b4]
call fcn.10015e27
and dword [ebp - 0xf0], 0
mov eax, dword [ebp - 0x10]
cmp dword [eax + 0x18], 0
jbe 0x10044d58
mov eax, dword [ebp - 0x10]
push dword [eax + 0x18]
push 0
call fcn.1003dcd2
pop ecx
pop ecx
mov dword [ebp - 0xf0], eax
mov dword [ebp - 0xd8], 0x90c4d8e5
mov dword [ebp - 0x2ec], 1
mov dword [ebp - 0x1b0], 0
jmp 0x10044d85
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 2
jge 0x10044da1
mov eax, dword [ebp - 0x1b0]
mov dword [ebp + eax*4 - 0x4a8], 0xfffffff9
jmp 0x10044d78
mov dword [ebp - 0xd8], 0
jmp 0x10044dba
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 1
jg 0x10044f8e
mov dword [ebp - 0x74], 0xf402e31d
mov dword [ebp - 0x74], 1
jmp 0x10044dde
cmp dword [ebp - 0x74], 0
jl 0x10044f89
mov dword [ebp - 0x540], 0x4bedcc59
push 2
lea ecx, [ebp - 0x5d0]
call fcn.10015dbf
mov dword [ebp - 4], 0x14
lea eax, [ebp - 0x5d0]
push eax
push 1
lea eax, [ebp - 0x700]
push eax
push 0x750c
push 0x158e
call fcn.10041432
add esp, 0x14
mov eax, dword [ebp - 0x74]
mov ecx, dword [ebp - 0x2ec]
cmp dword [ebp + eax*4 - 0x4a8], ecx
jle 0x10044e46
mov dword [ebp - 0x2d4], 1
jmp 0x10044e4d
and dword [ebp - 0x2d4], 0
mov eax, dword [ebp - 0x2d4]
mov dword [ebp - 0x540], eax
push 1
lea ecx, [ebp - 0x5d0]
call fcn.10015e2c
mov dword [eax], 0x4e6dc660
mov eax, 0xcdf5ef88
test eax, eax
je 0x10044ead
jmp 0x10044dad
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0x1c]
mov dword [ebp - 0x14], eax
push 4
lea ecx, [ebp - 0x67c]
call fcn.10015dbf
mov dword [ebp - 4], 0x15
mov dword [ebp - 0xb8], 0x4a18885c
mov dword [ebp - 0x2fc], 0xafbd13d
mov dword [ebp - 0x27c], 0x99220c43
mov dword [ebp - 0x554], 0xe458c458
push 0
lea eax, [ebp - 0x67c]
push eax
lea eax, [ebp - 0x708]
push eax
push 0x3d64
push 0x3035
call fcn.1004188b
add esp, 0x14
mov dword [ebp - 0xb8], 0
jmp 0x1004500e
cmp dword [ebp - 0xb8], 3
jg 0x100451ff
mov dword [ebp - 0x344], 0x3205f5a2
mov dword [ebp - 0x184], 0
jmp 0x1004503e
cmp dword [ebp - 0x184], 3
jge 0x1004505a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x67c]
call fcn.10015e27
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0x14]
sub eax, dword [ebp - 0xf0]
mov dword [ebp - 0xbc], eax
and dword [ebp - 0xe0], 0
jmp 0x10045236
mov eax, dword [ebp - 0xe0]
cmp eax, dword [ebp - 0xbc]
jge 0x100452ec
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x504], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x50c], eax
mov eax, dword [ebp - 0x504]
mov dword [ebp - 0x10c], eax
mov eax, dword [ebp - 0x50c]
mov dword [ebp - 0x514], eax
mov eax, dword [ebp - 0x10c]
mov dword [eax], 0
jmp 0x1004644b
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x10c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x10c]
cmp dword [eax], 1
jge 0x1004646e
mov eax, dword [ebp - 0x10c]
push dword [eax]
mov ecx, dword [ebp - 0x514]
call fcn.10015e2c
and dword [eax], 0
jmp 0x1004643a
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret