Function at 0x1003f4e0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10089e1f
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x6f8
push esi
and dword [ebp - 0x238], 0
mov dword [ebp - 0xa4], 0x4504cd45
mov eax, dword [ebp - 0xa4]
dec eax
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xa4], 3
jmp 0x1003f536
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0x13
je 0x1003f635
mov dword [ebp - 0x12c], 0xea983111
mov dword [ebp - 0x12c], 0xfffffffd
jmp 0x1003f566
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0x16
jne 0x1003f630
mov dword [ebp - 0x10c], 1
mov dword [ebp - 0xd4], 0
jmp 0x1003f596
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 3
jge 0x1003f5b2
mov eax, dword [ebp - 0xd4]
mov dword [ebp + eax*4 - 0x6c4], 0x3244d513
jmp 0x1003f589
push 0x14ca
push 0x3b08
push 0
push 0x2b6a
call fcn.1003f435
add esp, 0x10
mov dword [ebp - 0x10c], 0xffffffe6
jmp 0x1003f5e4
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0xffffffe7
jle 0x1003f62b
mov dword [ebp - 0xdc], 0x7dcd66a0
mov dword [ebp - 0xdc], 2
jmp 0x1003f610
mov eax, dword [ebp - 0xdc]
dec eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0
jl 0x1003f629
push 0
push 0x883
call fcn.1003f21d
pop ecx
pop ecx
jmp 0x1003f603
jmp 0x1003f5d7
jmp 0x1003f559
jmp 0x1003f529
mov dword [ebp - 0x4a4], 0xef6f0c3d
mov dword [ebp - 0x4ac], 0xa0197cbb
mov dword [ebp - 0x10], 0
jmp 0x1003f659
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x1003f66f
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x460], 0xf70ad6f2
jmp 0x1003f652
mov dword [ebp - 0x10], 0
jmp 0x1003f67f
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x1003f695
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x100], 1
jmp 0x1003f678
mov dword [ebp - 0x10], 0
jmp 0x1003f6a5
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 1
jge 0x1003f6bb
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x49c], 0xffffffff
jmp 0x1003f69e
mov dword [ebp - 0x10], 0
jmp 0x1003f6cb
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x1003f6e1
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x400], 0x2044653f
jmp 0x1003f6c4
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x100], 0
jmp 0x1003f70f
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x100]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x100], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x100], 2
jg 0x1003fa05
mov dword [ebp - 0xc8], 0xffffffff
mov dword [ebp - 0xc8], 0
jmp 0x1003f746
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 2
jg 0x1003f803
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x60], 2
jmp 0x1003f76a
mov eax, dword [ebp - 0x60]
dec eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0
jl 0x1003f78e
mov byte [ebp - 0x67], 0
push 0x44f8
lea eax, [ebp - 0x67]
push eax
push 0x5925
push 0
call fcn.10042cf8
add esp, 0x10
jmp 0x1003f763
mov dword [ebp - 0x60], 0
jmp 0x1003f79e
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 2
jg 0x1003f7fe
mov dword [ebp - 0xbc], 0xfffffff7
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x100]
cmp dword [ebp + eax*4 - 0x460], 0
je 0x1003f7c7
jmp 0x1003f7fe
mov dword [ebp - 0xbc], 0
jmp 0x1003f7e0
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 3
jge 0x1003f7fc
mov eax, dword [ebp - 0xbc]
mov dword [ebp + eax*4 - 0x460], 0x7e780ca9
jmp 0x1003f7d3
jmp 0x1003f797
jmp 0x1003f739
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x100]
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x400]
cmp dword [ebp + eax*4 - 0x460], ecx
jle 0x1003f832
mov dword [ebp - 0x318], 1
jmp 0x1003f839
and dword [ebp - 0x318], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x318]
inc ecx
cmp dword [ebp + eax - 0x400], ecx
jne 0x1003f85b
mov dword [ebp - 0x3ec], 1
jmp 0x1003f862
and dword [ebp - 0x3ec], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x460]
cmp dword [ebp - 0x3ec], eax
jl 0x1003f883
mov dword [ebp - 0x464], 1
jmp 0x1003f88a
and dword [ebp - 0x464], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x400]
mov dword [ebp - 0x564], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x400], 0
jne 0x1003f8cd
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x100]
cmp dword [ebp + eax*4 - 0x460], 0
jne 0x1003f8cd
and dword [ebp - 0x3f4], 0
jmp 0x1003f8d7
mov dword [ebp - 0x3f4], 1
cmp dword [ebp - 0x3f4], 0x334a
jge 0x1003f8ef
mov dword [ebp - 0x424], 1
jmp 0x1003f8f6
and dword [ebp - 0x424], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x100]
mov eax, dword [ebp + eax*4 - 0x460]
mov dword [ebp - 0x410], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x410]
mov dword [ebp + eax - 0x49c], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x100]
imul eax, dword [ebp - 0x424]
inc eax
mov ecx, dword [ebp - 0x410]
sub ecx, eax
je 0x1003f94b
mov eax, 0xb8d2
test eax, eax
jne 0x1003f95d
mov eax, 0x1210cbed
test eax, eax
jne 0x1003f95d
and dword [ebp - 0x3b8], 0
jmp 0x1003f967
mov dword [ebp - 0x3b8], 1
cmp dword [ebp - 0x3b8], 0xffffffff
jne 0x1003f97c
mov dword [ebp - 0x374], 1
jmp 0x1003f983
and dword [ebp - 0x374], 0
mov eax, dword [ebp - 0x4a4]
cmp dword [ebp - 0x374], eax
jne 0x1003f99d
mov dword [ebp - 0x1dc], 1
jmp 0x1003f9a4
and dword [ebp - 0x1dc], 0
cmp dword [ebp - 0x1dc], 0
jl 0x1003f9b9
mov dword [ebp - 0x37c], 1
jmp 0x1003f9c0
and dword [ebp - 0x37c], 0
mov eax, dword [ebp - 0xc8]
cmp dword [ebp - 0x37c], eax
jle 0x1003f9da
mov dword [ebp - 0x180], 1
jmp 0x1003f9e1
and dword [ebp - 0x180], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x180]
mov dword [ebp + eax - 0x400], ecx
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x4ac], eax
jmp 0x1003f6f4
mov dword [ebp - 0x18], 0xfffffffa
mov dword [ebp - 0x114], 0
jmp 0x1003fa25
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 3
jge 0x1003fa41
mov eax, dword [ebp - 0x114]
mov dword [ebp + eax*4 - 0x1b4], 0xfffffffa
jmp 0x1003fa18
mov dword [ebp - 0x18], 0
jmp 0x1003fa51
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jg 0x1003fa6f
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x1b4]
neg eax
mov ecx, dword [ebp - 0x18]
mov dword [ebp + ecx*4 - 0x1b4], eax
jmp 0x1003fa4a
mov dword [ebp - 0x18], 0
jmp 0x1003fa7f
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jg 0x1003fc0d
mov dword [ebp - 0x204], 0x9968cb66
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x18]
mov ecx, dword [ebp + ecx*4 - 0x1b4]
cmp dword [ebp + eax - 0x1b4], ecx
jne 0x1003fab7
mov dword [ebp - 0x1e4], 1
jmp 0x1003fabe
and dword [ebp - 0x1e4], 0
mov eax, dword [ebp - 0x1e4]
add eax, 0x93c1
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x1b4]
jge 0x1003fae3
mov dword [ebp - 0x384], 1
jmp 0x1003faea
and dword [ebp - 0x384], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x1b4]
cmp eax, dword [ebp - 0x384]
jle 0x1003fb08
mov dword [ebp - 0x1ec], 1
jmp 0x1003fb0f
and dword [ebp - 0x1ec], 0
cmp dword [ebp - 0x1ec], 0xb060
jle 0x1003fb27
mov dword [ebp - 0x38c], 1
jmp 0x1003fb2e
and dword [ebp - 0x38c], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x1b4]
cmp eax, dword [ebp - 0x38c]
je 0x1003fb4c
mov dword [ebp - 0x1f4], 1
jmp 0x1003fb53
and dword [ebp - 0x1f4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1b4]
add eax, dword [ebp - 0x1f4]
jne 0x1003fb7a
mov eax, 0x3b8a277e
test eax, eax
jne 0x1003fb7a
and dword [ebp - 0x394], 0
jmp 0x1003fb84
mov dword [ebp - 0x394], 1
cmp dword [ebp - 0x394], 0xffffffff
jle 0x1003fb99
mov dword [ebp - 0x1fc], 1
jmp 0x1003fba0
and dword [ebp - 0x1fc], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x1b4]
cmp eax, dword [ebp - 0x1fc]
jg 0x1003fbc4
cmp dword [ebp - 0x18], 0
je 0x1003fbc4
mov dword [ebp - 0x194], 1
jmp 0x1003fbcb
and dword [ebp - 0x194], 0
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x194]
mov dword [ebp + eax*4 - 0x1b4], ecx
mov eax, dword [ebp - 0x204]
cmp dword [ebp - 0x194], eax
je 0x1003fbf5
mov dword [ebp - 0x39c], 1
jmp 0x1003fbfc
and dword [ebp - 0x39c], 0
mov eax, dword [ebp - 0x39c]
mov dword [ebp - 0x204], eax
jmp 0x1003fa78
mov byte [ebp - 0x17c], 9
mov byte [ebp - 0x17b], 0x1d
mov byte [ebp - 0x17a], 0x11
mov byte [ebp - 0x179], 0x18
mov byte [ebp - 0x178], 4
mov byte [ebp - 0x177], 0x17
mov byte [ebp - 0x176], 0x18
mov byte [ebp - 0x175], 0x1c
mov byte [ebp - 0x174], 8
mov byte [ebp - 0x173], 0x10
mov byte [ebp - 0x172], 0x15
mov byte [ebp - 0x171], 0x1f
mov byte [ebp - 0x170], 0x10
mov byte [ebp - 0x16f], 7
mov byte [ebp - 0x16e], 0x17
mov byte [ebp - 0x16d], 9
mov byte [ebp - 0x16c], 0xe
mov byte [ebp - 0x16b], 0x17
mov byte [ebp - 0x16a], 0x19
mov byte [ebp - 0x169], 0x15
mov byte [ebp - 0x168], 0xf
mov byte [ebp - 0x167], 0xb5
mov byte [ebp - 0x166], 0xd6
mov byte [ebp - 0x165], 0xad
mov byte [ebp - 0x164], 0xd2
mov byte [ebp - 0x163], 0x87
mov byte [ebp - 0x162], 0xd8
mov byte [ebp - 0x161], 0x52
mov byte [ebp - 0x160], 0x3e
mov byte [ebp - 0x15f], 0x56
mov byte [ebp - 0x15e], 0xb
mov byte [ebp - 0x15d], 0x7f
mov byte [ebp - 0x15c], 0x73
mov byte [ebp - 0x15b], 0xbb
mov byte [ebp - 0x15a], 0x72
mov byte [ebp - 0x159], 0
mov byte [ebp - 0x158], 0xb
mov byte [ebp - 0x157], 0x16
mov byte [ebp - 0x156], 0xa
mov byte [ebp - 0x155], 7
mov byte [ebp - 0x154], 5
mov byte [ebp - 0x153], 0xd
mov byte [ebp - 0x152], 0x16
mov byte [ebp - 0x151], 0x11
mov byte [ebp - 0x150], 1
mov byte [ebp - 0x14f], 0x15
mov byte [ebp - 0x14e], 0x12
mov byte [ebp - 0x14d], 0x11
mov byte [ebp - 0x14c], 0xd
mov byte [ebp - 0x14b], 0x1d
mov byte [ebp - 0x14a], 0x14
mov byte [ebp - 0x149], 0x1b
mov byte [ebp - 0x148], 0x13
mov byte [ebp - 0x147], 1
mov byte [ebp - 0x146], 0xc
mov byte [ebp - 0x145], 0x19
mov byte [ebp - 0x144], 0xf
mov byte [ebp - 0x143], 0x1d
mov byte [ebp - 0x142], 6
mov byte [ebp - 0x141], 0x17
mov byte [ebp - 0x140], 2
mov byte [ebp - 0x13f], 4
mov byte [ebp - 0x13e], 7
mov byte [ebp - 0x13d], 0xb
mov byte [ebp - 0x13c], 3
mov byte [ebp - 0x13b], 0xc
mov byte [ebp - 0x13a], 0
mov byte [ebp - 0x139], 5
mov dword [ebp - 0x4ec], 0
mov dword [ebp - 0x4bc], 0xf3ccd246
mov dword [ebp - 0x4e4], 0x23b4709b
mov dword [ebp - 0x4dc], 0xc4e2bf5
mov dword [ebp - 0x4b4], 0xfffffff9
mov dword [ebp - 0x5e4], 0x77cccaea
mov dword [ebp - 0x5c4], 0x9a023703
mov dword [ebp - 0x538], 0
mov dword [ebp - 0x540], 0
mov dword [ebp - 0x548], 0x2c78ef8a
mov dword [ebp - 0x550], 0xfffffff6
mov dword [ebp - 0x558], 0xe5c7
mov dword [ebp - 0x560], 0xec253d5a
mov dword [ebp - 0x3a4], 0xfffffffb
mov dword [ebp - 0x38], 0
jmp 0x1003fe85
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 4
jge 0x1003fe9b
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x704], 4
jmp 0x1003fe7e
mov dword [ebp - 0x38], 0
jmp 0x1003feab
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 4
jge 0x1003fec1
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x6d4], 0xa3f0bde8
jmp 0x1003fea4
lea eax, [ebp - 0x4b4]
push eax
push 0
lea eax, [ebp - 0x4bc]
push eax
lea eax, [ebp - 0x4dc]
push eax
lea eax, [ebp - 0x4e4]
push eax
lea eax, [ebp - 0x4ec]
push eax
call fcn.1003f2af
add esp, 0x18
mov eax, dword [ebp - 0x3a4]
dec eax
mov dword [ebp - 0x3a4], eax
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x17c]
or eax, 0x77
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x17c]
and ecx, 0x77
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x17c]
mov byte [ebp + ecx - 0x530], al
mov dword [ebp - 0x1cc], 0xb4e1a362
mov dword [ebp - 0x1c8], 0xb4e1a362
mov dword [ebp - 0x1c4], 0xb4e1a362
mov dword [ebp - 0x1c0], 0xb4e1a362
mov dword [ebp - 0x2c], 0xfffffffc
mov dword [ebp - 0x21c], 0xa82e77e8
mov dword [ebp - 0x4c8], 1
mov dword [ebp - 0x4b8], 0
mov dword [ebp - 0x2c], 3
jmp 0x1003ff91
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jl 0x10040224
mov dword [ebp - 0x3dc], 0x189d
mov dword [ebp - 0x3d4], 0xc2a41b87
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x3dc]
cmp dword [ebp + eax*4 - 0x1cc], ecx
jle 0x1003ffcd
mov dword [ebp - 0x20c], 1
jmp 0x1003ffd4
and dword [ebp - 0x20c], 0
mov eax, dword [ebp - 0x3d4]
cmp dword [ebp - 0x20c], eax
jne 0x1003ffee
mov dword [ebp - 0x3ac], 1
jmp 0x1003fff5
and dword [ebp - 0x3ac], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x1cc]
cmp dword [ebp - 0x3ac], eax
jne 0x10040016
mov dword [ebp - 0x214], 1
jmp 0x1004001d
and dword [ebp - 0x214], 0
cmp dword [ebp - 0x214], 0xfffffff7
je 0x10040032
mov dword [ebp - 0x3b4], 1
jmp 0x10040039
and dword [ebp - 0x3b4], 0
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x1cc]
cmp dword [ebp - 0x3b4], eax
je 0x10040066
mov eax, 0xffff
test eax, eax
jne 0x10040066
mov eax, 0x5b45beac
test eax, eax
jne 0x10040066
and dword [ebp - 0x3bc], 0
jmp 0x10040070
mov dword [ebp - 0x3bc], 1
mov dword [ebp - 0x21c], 0
mov eax, dword [ebp - 0x21c]
cmp eax, dword [ebp - 0x3bc]
je 0x10040094
mov dword [ebp - 0x224], 1
jmp 0x1004009b
and dword [ebp - 0x224], 0
mov eax, dword [ebp - 0x2c]
imul eax, dword [ebp - 0x224]
test eax, eax
jne 0x100400b8
cmp dword [ebp - 0x2c], 0
jne 0x100400b8
and dword [ebp - 0x3c4], 0
jmp 0x100400c2
mov dword [ebp - 0x3c4], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1cc]
cmp dword [ebp - 0x3c4], eax
jle 0x100400e3
mov dword [ebp - 0x22c], 1
jmp 0x100400ea
and dword [ebp - 0x22c], 0
cmp dword [ebp - 0x22c], 0x7a23
je 0x10040102
mov dword [ebp - 0x3cc], 1
jmp 0x10040109
and dword [ebp - 0x3cc], 0
cmp dword [ebp - 0x3cc], 0xa6c9cd49
jbe 0x10040121
mov dword [ebp - 0x4f4], 1
jmp 0x10040128
and dword [ebp - 0x4f4], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x1cc]
mov dword [ebp - 0x568], eax
cmp dword [ebp - 0x4c8], 0x3b03c3fa
jl 0x10040160
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1cc], 0
jne 0x10040160
and dword [ebp - 0x234], 0
jmp 0x1004016a
mov dword [ebp - 0x234], 1
mov eax, dword [ebp - 0x234]
sub eax, dword [ebp - 0x4b8]
sub eax, dword [ebp - 0x3d4]
jne 0x10040197
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1cc], 0
jne 0x10040197
and dword [ebp - 0x23c], 0
jmp 0x100401a1
mov dword [ebp - 0x23c], 1
mov eax, dword [ebp - 0x23c]
sub eax, 0x56cd
cmp eax, dword [ebp - 0x3dc]
jg 0x100401c0
mov dword [ebp - 0x3e4], 1
jmp 0x100401c7
and dword [ebp - 0x3e4], 0
mov eax, dword [ebp - 0x3e4]
dec eax
dec eax
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x1cc]
jl 0x100401e9
mov dword [ebp - 0x248], 1
jmp 0x100401f0
and dword [ebp - 0x248], 0
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x1cc]
imul eax, dword [ebp - 0x248]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp + ecx*4 - 0x1cc], eax
mov byte [ebp - 0x6d], 0
movzx eax, byte [ebp - 0x6d]
test eax, eax
je 0x1004021f
push 0
call fcn.1003f1f7
pop ecx
jmp 0x1003ff8a
mov byte [ebp - 0x95], 0
movzx eax, byte [ebp - 0x95]
test eax, eax
je 0x1004024a
push 0x719e
push 0
push 0x5760
call fcn.100426f8
add esp, 0xc
mov dword [ebp - 0x1c], 2
and dword [ebp - 0xb4], 0
jmp 0x10040262
mov eax, dword [ebp - 0x1c]
inc eax
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x44
jae 0x100413c0
mov dword [ebp - 0x28], 0x2e91a049
mov dword [ebp - 0x360], 0
mov dword [ebp - 0xe4], 0
jmp 0x10040296
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 1
jge 0x100402b2
mov eax, dword [ebp - 0xe4]
mov dword [ebp + eax*4 - 0x470], 1
jmp 0x10040289
push 1
push 0x6e6a
call fcn.1003f19d
pop ecx
pop ecx
mov dword [ebp - 0x28], 0
jmp 0x100402d0
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xffffffec
jg 0x10040694
mov dword [ebp - 0x34], 0x2124f84b
mov dword [ebp - 0x3c0], 0
mov dword [ebp - 0x260], 0x92357994
mov dword [ebp - 0x290], 0xffffffff
mov dword [ebp - 0x404], 0x4384f3ac
mov dword [ebp - 0x11c], 0
jmp 0x10040322
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 2
jge 0x1004033e
mov eax, dword [ebp - 0x11c]
mov dword [ebp + eax*4 - 0x4fc], 9
jmp 0x10040315
mov dword [ebp - 0x34], 0xfffffff3
jmp 0x1004034e
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 3
jge 0x1004068f
mov dword [ebp - 0x6c], 0xe19f
mov dword [ebp - 0x19c], 0x1db95674
mov dword [ebp - 0x288], 0xfffffffa
mov eax, 0x8d5f
test eax, eax
je 0x100404a0
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x28]
jne 0x10040397
cmp dword [ebp - 0x6c], 0
jne 0x10040397
and dword [ebp - 0x340], 0
jmp 0x100403a1
mov dword [ebp - 0x340], 1
cmp dword [ebp - 0x340], 0xffffffff
jle 0x100403b6
mov dword [ebp - 0x250], 1
jmp 0x100403bd
and dword [ebp - 0x250], 0
cmp dword [ebp - 0x250], 0xc3e1b8d8
jne 0x100403d5
mov dword [ebp - 0x3f8], 1
jmp 0x100403dc
and dword [ebp - 0x3f8], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x3f8], eax
jge 0x100403f3
mov dword [ebp - 0x258], 1
jmp 0x100403fa
and dword [ebp - 0x258], 0
cmp dword [ebp - 0x258], 0xea1b1489
jbe 0x10040412
mov dword [ebp - 0x348], 1
jmp 0x10040419
and dword [ebp - 0x348], 0
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x3c0], eax
mov eax, dword [ebp - 0x348]
mov dword [ebp - 0x260], eax
mov eax, dword [ebp - 0x260]
cmp dword [ebp - 0x3c0], eax
jl 0x10040448
mov dword [ebp - 0x268], 1
jmp 0x1004044f
and dword [ebp - 0x268], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x268], eax
jge 0x10040466
mov dword [ebp - 0x350], 1
jmp 0x1004046d
and dword [ebp - 0x350], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x350], eax
jg 0x10040484
mov dword [ebp - 0x270], 1
jmp 0x1004048b
and dword [ebp - 0x270], 0
mov eax, dword [ebp - 0x270]
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 0
jne 0x100404af
cmp dword [ebp - 0x28], 0
jne 0x100404af
and dword [ebp - 0x408], 0
jmp 0x100404b9
mov dword [ebp - 0x408], 1
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x408], eax
jne 0x100404d9
cmp dword [ebp - 0x19c], 0
je 0x100404d9
mov dword [ebp - 0x278], 1
jmp 0x100404e0
and dword [ebp - 0x278], 0
cmp dword [ebp - 0x278], 0xf7d5
jle 0x100404f8
mov dword [ebp - 0x358], 1
jmp 0x100404ff
and dword [ebp - 0x358], 0
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x358]
cmp dword [ebp - 0x6c], eax
je 0x10040519
mov dword [ebp - 0x280], 1
jmp 0x10040520
and dword [ebp - 0x280], 0
mov eax, dword [ebp - 0x28]
imul eax, dword [ebp - 0x280]
cmp eax, dword [ebp - 0x6c]
jge 0x1004053b
mov dword [ebp - 0x3c8], 1
jmp 0x10040542
and dword [ebp - 0x3c8], 0
mov eax, dword [ebp - 0x3c8]
mov dword [ebp - 0x288], eax
mov eax, dword [ebp - 0x288]
mov dword [ebp - 0x360], eax
mov eax, dword [ebp - 0x360]
imul eax, dword [ebp - 0x28]
mov dword [ebp - 0x290], eax
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x290], eax
jge 0x10040581
mov dword [ebp - 0x188], 1
jmp 0x10040588
and dword [ebp - 0x188], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x188]
mov dword [ebp + eax - 0x4fc], ecx
mov eax, dword [ebp - 0x188]
sub eax, 0x1cf0b513
mov dword [ebp - 0x404], eax
mov eax, dword [ebp - 0x404]
sub eax, 0xffff
je 0x100405c5
mov dword [ebp - 0x298], 1
jmp 0x100405cc
and dword [ebp - 0x298], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x298], eax
jge 0x100405e3
mov dword [ebp - 0x368], 1
jmp 0x100405ea
and dword [ebp - 0x368], 0
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x368], eax
jle 0x10040601
mov dword [ebp - 0x2a0], 1
jmp 0x10040608
and dword [ebp - 0x2a0], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x2a0], eax
jle 0x1004062f
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x4fc], 0
je 0x1004062f
mov dword [ebp - 0x3d0], 1
jmp 0x10040636
and dword [ebp - 0x3d0], 0
cmp dword [ebp - 0x3d0], 0xc33490ce
jne 0x1004064e
mov dword [ebp - 0x2a8], 1
jmp 0x10040655
and dword [ebp - 0x2a8], 0
cmp dword [ebp - 0x2a8], 0xffffffff
jbe 0x1004066a
mov dword [ebp - 0x494], 1
jmp 0x10040671
and dword [ebp - 0x494], 0
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x5d0], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x6c]
mov dword [ebp + eax - 0x470], ecx
jmp 0x10040347
jmp 0x100402c9
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x17c]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x1c], eax
jne 0x10040ecf
mov dword [ebp - 0x74], 0xffffffff
mov dword [ebp - 0x124], 0xffffffff
mov dword [ebp - 0x74], 0
jmp 0x100406d0
mov eax, dword [ebp - 0x74]
dec eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0xffffffe4
jl 0x10040a14
mov dword [ebp - 0x14], 0xeec5
mov dword [ebp - 0x44c], 0x74aa0d72
mov dword [ebp - 0x448], 0x74aa0d72
mov dword [ebp - 0x444], 0x74aa0d72
mov dword [ebp - 0x440], 0x74aa0d72
cmp dword [ebp - 0x74], 0xd1b9849b
jae 0x1004071e
mov dword [ebp - 0x370], 1
jmp 0x10040725
and dword [ebp - 0x370], 0
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x370]
jne 0x1004073c
mov dword [ebp - 0x2b0], 1
jmp 0x10040743
and dword [ebp - 0x2b0], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x414], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x414]
mov dword [ebp + eax - 0x44c], ecx
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x2b0]
mov ecx, dword [ebp - 0x14]
add ecx, dword [ebp - 0x414]
sub ecx, eax
cmp ecx, 0xeea5
je 0x10040786
mov dword [ebp - 0x2b8], 1
jmp 0x1004078d
and dword [ebp - 0x2b8], 0
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x2b8], eax
jle 0x100409ca
mov dword [ebp - 0x30], 0xfffffffd
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x44c]
mov dword [ebp - 0x5d8], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x5e0], eax
or eax, 0xffffffff
sub eax, 0x5922
imul eax, eax, 0xf2d
imul eax, dword [ebp - 0x14]
test eax, eax
jae 0x100407e1
mov dword [ebp - 0x378], 1
jmp 0x100407e8
and dword [ebp - 0x378], 0
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x378]
jl 0x100407ff
mov dword [ebp - 0x2c0], 1
jmp 0x10040806
and dword [ebp - 0x2c0], 0
cmp dword [ebp - 0x2c0], 0x7c71
jle 0x1004081e
mov dword [ebp - 0x3d8], 1
jmp 0x10040825
and dword [ebp - 0x3d8], 0
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x3d8]
jg 0x10040864
mov dword [ebp - 0x4c4], 0x1718bc69
mov dword [ebp - 0x30], 0
jmp 0x1004084a
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jg 0x1004085f
lea eax, [ebp - 0x4c4]
push eax
call fcn.1003f1de
pop ecx
jmp 0x10040843
jmp 0x100408ed
mov dword [ebp - 0x30], 0
jmp 0x10040874
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jg 0x100408ed
mov dword [ebp - 0x14], 0
jmp 0x1004088a
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jg 0x100408cf
mov dword [ebp - 0xec], 0xf19716e2
mov dword [ebp - 0xec], 0
jmp 0x100408b3
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 3
jg 0x100408cd
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x44c], 0
je 0x100408cb
jmp 0x100408cd
jmp 0x100408a6
jmp 0x10040883
mov byte [ebp - 0x75], 0
push 0
lea eax, [ebp - 0x75]
push eax
push 0x3bca
push 0x6df8
call fcn.10042694
add esp, 0x10
jmp 0x1004086d
cmp dword [ebp - 0x124], 0
jne 0x10040963
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x124], eax
jne 0x1004090d
mov dword [ebp - 0x2c8], 1
jmp 0x10040914
and dword [ebp - 0x2c8], 0
cmp dword [ebp - 0x2c8], 0xb8f3be
jle 0x1004092c
mov dword [ebp - 0x380], 1
jmp 0x10040933
and dword [ebp - 0x380], 0
cmp dword [ebp - 0x380], 0xffffffff
je 0x10040948
mov dword [ebp - 0x2d0], 1
jmp 0x1004094f
and dword [ebp - 0x2d0], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x2d0], eax
je 0x10040963
and dword [ebp - 0x41c], 0
jmp 0x1004096d
mov dword [ebp - 0x41c], 1
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x44c]
cmp eax, dword [ebp - 0x41c]
jg 0x1004098e
mov dword [ebp - 0x2d8], 1
jmp 0x10040995
and dword [ebp - 0x2d8], 0
mov eax, dword [ebp - 0x124]
cmp dword [ebp - 0x2d8], eax
jge 0x100409af
mov dword [ebp - 0x388], 1
jmp 0x100409b6
and dword [ebp - 0x388], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x388]
mov dword [ebp + eax - 0x44c], ecx
jmp 0x100409e9
mov byte [ebp - 0x62], 0
movzx eax, byte [ebp - 0x62]
test eax, eax
je 0x100409de
push 0
call fcn.10042781
pop ecx
cmp dword [ebp - 0x124], 0
je 0x100409e9
jmp 0x10040a14
mov dword [ebp - 0x14], 0
jmp 0x100409f9
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 4
jge 0x10040a0f
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x44c], 0xffffffff
jmp 0x100409f2
jmp 0x100406c9
mov eax, dword [ebp - 0x1c]
movzx eax, byte [ebp + eax - 0x17c]
inc eax
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0x7c], 0xeaa32b1c
mov dword [ebp - 0x20], 0
jmp 0x10040a3d
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jge 0x10040a53
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x43c], 0xfffffffe
jmp 0x10040a36
mov dword [ebp - 0x20], 0
jmp 0x10040a63
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 4
jge 0x10040a79
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x69c], 5
jmp 0x10040a5c
mov dword [ebp - 0x20], 0
jmp 0x10040a89
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x10040a9f
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x578], 0x7cec
jmp 0x10040a82
mov dword [ebp - 0x7c], 0
jmp 0x10040aaf
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 1
jg 0x10040e3f
mov dword [ebp - 0x44], 0xabbf9acf
mov dword [ebp - 0x84], 4
mov dword [ebp - 0x480], 1
mov dword [ebp - 0x4c0], 0x66969e96
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x5e8], eax
mov eax, dword [ebp - 0x44]
sub eax, 0x52a5ae63
cmp eax, dword [ebp - 0x7c]
jl 0x10040b00
mov dword [ebp - 0x2e0], 1
jmp 0x10040b07
and dword [ebp - 0x2e0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x43c]
cmp dword [ebp - 0x2e0], eax
jne 0x10040b28
mov dword [ebp - 0x3e0], 1
jmp 0x10040b2f
and dword [ebp - 0x3e0], 0
mov eax, dword [ebp - 0x44]
imul eax, dword [ebp - 0x3e0]
cmp eax, 0xc1464f16
je 0x10040b4c
mov dword [ebp - 0x2e8], 1
jmp 0x10040b53
and dword [ebp - 0x2e8], 0
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x2e8], eax
jle 0x10040b6a
mov dword [ebp - 0x390], 1
jmp 0x10040b71
and dword [ebp - 0x390], 0
mov eax, dword [ebp - 0x390]
sub eax, 0x47d1afd0
je 0x10040b9a
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x43c], 0
je 0x10040b9a
mov dword [ebp - 0x2f0], 1
jmp 0x10040ba1
and dword [ebp - 0x2f0], 0
mov eax, dword [ebp - 0x2f0]
sub eax, dword [ebp - 0x7c]
dec eax
je 0x10040ca1
mov dword [ebp - 0x40c], 1
mov eax, dword [ebp - 0x40c]
mov dword [ebp - 0x60c], eax
cmp dword [ebp - 0x40c], 0xfffe
jne 0x10040be5
cmp dword [ebp - 0x44], 0
je 0x10040be5
mov dword [ebp - 0x2f8], 1
jmp 0x10040bec
and dword [ebp - 0x2f8], 0
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x2f8], eax
jl 0x10040c0f
cmp dword [ebp - 0x44], 0
je 0x10040c0f
cmp dword [ebp - 0x44], 0
je 0x10040c0f
mov dword [ebp - 0x398], 1
jmp 0x10040c16
and dword [ebp - 0x398], 0
mov dword [ebp - 0x84], 0x5290ce96
mov eax, dword [ebp - 0x84]
cmp eax, dword [ebp - 0x398]
jg 0x10040c3a
mov dword [ebp - 0x300], 1
jmp 0x10040c41
and dword [ebp - 0x300], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x43c]
cmp dword [ebp - 0x300], eax
jle 0x10040c6c
mov byte [ebp - 0x63], 0
movzx eax, byte [ebp - 0x63]
test eax, eax
je 0x10040c6a
push 1
call fcn.1003f1f7
pop ecx
jmp 0x10040c9c
mov dword [ebp - 0x478], 0x430688cd
lea eax, [ebp - 0x84]
push eax
push 0
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x478]
push eax
push 0x4a56
push 0x2dc7
call fcn.10042d51
add esp, 0x18
jmp 0x10040d29
mov dword [ebp - 0x594], 0xa227283a
mov dword [ebp - 0x53c], 1
mov dword [ebp - 0x5fc], 8
mov dword [ebp - 0x5f8], 8
mov dword [ebp - 0x5f4], 8
mov dword [ebp - 0x5f0], 8
mov dword [ebp - 0x3e8], 0x111919b1
mov dword [ebp - 0xf4], 0
jmp 0x10040d00
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 3
jge 0x10040d1c
mov eax, dword [ebp - 0xf4]
mov dword [ebp + eax*4 - 0x6b8], 0xade45a91
jmp 0x10040cf3
mov eax, dword [ebp - 0x3e8]
dec eax
mov dword [ebp - 0x3e8], eax
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x604], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x578], 0
je 0x10040dd5
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x43c], 0x4f7d9fd5
jl 0x10040d68
mov dword [ebp - 0x308], 1
jmp 0x10040d6f
and dword [ebp - 0x308], 0
mov eax, dword [ebp - 0x4c0]
cmp dword [ebp - 0x308], eax
jge 0x10040d89
mov dword [ebp - 0x3a0], 1
jmp 0x10040d90
and dword [ebp - 0x3a0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x578]
cmp dword [ebp - 0x3a0], eax
je 0x10040db1
mov dword [ebp - 0x310], 1
jmp 0x10040db8
and dword [ebp - 0x310], 0
mov eax, dword [ebp - 0x84]
imul eax, dword [ebp - 0x310]
test eax, eax
je 0x10040dd5
mov dword [ebp - 0x420], 1
jmp 0x10040ddc
and dword [ebp - 0x420], 0
mov eax, dword [ebp - 0x420]
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x84], eax
jg 0x10040dff
mov dword [ebp - 0x1d0], 1
jmp 0x10040e06
and dword [ebp - 0x1d0], 0
mov eax, dword [ebp - 0x480]
cmp eax, dword [ebp - 0x1d0]
jge 0x10040e20
mov dword [ebp - 0x3a8], 1
jmp 0x10040e27
and dword [ebp - 0x3a8], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x3a8]
mov dword [ebp + eax - 0x69c], ecx
jmp 0x10040aa8
mov eax, dword [ebp - 0x1c]
movzx eax, byte [ebp + eax - 0x17c]
mov ecx, dword [ebp - 0x1c]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x4cc], 0x327cb3f4
mov dword [ebp - 0x320], 2
mov eax, dword [ebp - 0x4cc]
mov dword [ebp - 0x320], eax
cmp dword [ebp - 0x320], 0
je 0x10040eaa
mov byte [ebp - 0x65], 0
push 1
lea eax, [ebp - 0x65]
push eax
call fcn.1003f21d
pop ecx
pop ecx
mov byte [ebp - 0x66], 0
movzx eax, byte [ebp - 0x66]
test eax, eax
je 0x10040ea8
push 0x5da4
push 0
call fcn.100427a7
pop ecx
pop ecx
jmp 0x10040eca
mov byte [ebp - 0x8d], 0
movzx eax, byte [ebp - 0x8d]
test eax, eax
je 0x10040eca
push 0
push 0x14f8
call fcn.1003f26c
pop ecx
pop ecx
jmp 0x1004025a
mov dword [ebp - 0x138], 0x1f7e2799
mov dword [ebp - 0x4d4], 0xfffffffe
mov dword [ebp - 0x3b0], 0xb7e280bf
mov dword [ebp - 0x130], 0
jmp 0x10040f06
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 3
jge 0x10040f22
mov eax, dword [ebp - 0x130]
mov dword [ebp + eax*4 - 0x640], 5
jmp 0x10040ef9
mov dword [ebp - 0x138], 0
jmp 0x10040f3b
mov eax, dword [ebp - 0x138]
dec eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0xffffffe2
jg 0x100411ec
mov dword [ebp - 0x8c], 0xffffffff
mov dword [ebp - 0x120], 0
jmp 0x10040f6b
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 1
jge 0x10040f87
mov eax, dword [ebp - 0x120]
mov dword [ebp + eax*4 - 0x1a0], 0x678e045
jmp 0x10040f5e
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x640]
mov dword [ebp - 0x3b0], eax
mov dword [ebp - 0x8c], 0xd
jmp 0x10040fb3
mov eax, dword [ebp - 0x8c]
dec eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0xffffffee
jne 0x100411e7
mov dword [ebp - 0x3c], 0
jmp 0x10040fd0
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 2
jge 0x10040fe6
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x1bc], 0x48214d2f
jmp 0x10040fc9
mov dword [ebp - 0x3c], 0
jmp 0x10040ff6
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 4
jge 0x1004100c
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x6ac], 1
jmp 0x10040fef
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1bc], 0
je 0x100411a3
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1bc], 0
jae 0x1004103c
mov dword [ebp - 0x3f0], 1
jmp 0x10041043
and dword [ebp - 0x3f0], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x8c]
cmp dword [ebp + eax - 0x1bc], ecx
jl 0x10041064
mov dword [ebp - 0x328], 1
jmp 0x1004106b
and dword [ebp - 0x328], 0
mov eax, dword [ebp - 0x3f0]
cmp eax, dword [ebp - 0x328]
jge 0x10041085
mov dword [ebp - 0x488], 1
jmp 0x1004108c
and dword [ebp - 0x488], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1bc]
mov dword [ebp - 0x544], eax
mov eax, dword [ebp - 0x3b0]
mov dword [ebp - 0x5cc], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1a0]
mov dword [ebp - 0x54c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1a0], 2
jle 0x100410da
mov dword [ebp - 0x330], 1
jmp 0x100410e1
and dword [ebp - 0x330], 0
cmp dword [ebp - 0x330], 0
jl 0x100410f6
mov dword [ebp - 0x418], 1
jmp 0x100410fd
and dword [ebp - 0x418], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1bc]
cmp dword [ebp - 0x418], eax
jg 0x1004111e
mov dword [ebp - 0x190], 1
jmp 0x10041125
and dword [ebp - 0x190], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x190]
mov dword [ebp + eax - 0x1a0], ecx
cmp dword [ebp - 0x190], 0xfffffffe
je 0x1004114d
mov dword [ebp - 0x338], 1
jmp 0x10041154
and dword [ebp - 0x338], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1bc]
cmp dword [ebp - 0x338], eax
jge 0x10041175
mov dword [ebp - 0x1a4], 1
jmp 0x1004117c
and dword [ebp - 0x1a4], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x1a4]
mov dword [ebp + eax - 0x6ac], ecx
cmp dword [ebp - 0x1a4], 0
je 0x100411a3
mov dword [ebp - 0x240], 1
jmp 0x100411aa
and dword [ebp - 0x240], 0
mov eax, dword [ebp - 0x8c]
cmp dword [ebp - 0x240], eax
jle 0x100411c4
mov dword [ebp - 0x244], 1
jmp 0x100411cb
and dword [ebp - 0x244], 0
mov eax, dword [ebp - 0x244]
mov dword [ebp - 0x4d4], eax
cmp dword [ebp - 0x8c], 0
je 0x100411e2
jmp 0x100411e7
jmp 0x10040fa6
jmp 0x10040f2e
mov eax, dword [ebp - 0x1c]
movzx eax, byte [ebp + eax - 0x17b]
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0xb4]
movzx ecx, byte [ebp + ecx - 0x17e]
movsx ecx, byte [ebp + ecx - 0x530]
add eax, ecx
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ebp + ecx - 0x17b]
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xb4]
movzx edx, byte [ebp + edx - 0x17e]
movsx edx, byte [ebp + edx - 0x530]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ebp + ecx - 0x17b]
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xb4]
movzx edx, byte [ebp + edx - 0x17e]
movsx edx, byte [ebp + edx - 0x530]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ebp + ecx - 0x17c]
mov byte [ebp + ecx - 0x530], al
mov dword [ebp - 0x108], 4
mov dword [ebp - 0x590], 0
mov dword [ebp - 0x554], 6
mov dword [ebp - 0x598], 0
mov dword [ebp - 0x55c], 0x8a11015a
mov dword [ebp - 0x5a0], 0xe4f1f13b
mov dword [ebp - 0x534], 6
mov dword [ebp - 0x5a8], 0xf97812a3
mov dword [ebp - 0x56c], 0x4e1c2e93
mov dword [ebp - 0x5b0], 0xffffffff
mov dword [ebp - 0x57c], 0x3af7806a
mov dword [ebp - 0x58], 0
jmp 0x100412f2
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 4
jge 0x10041308
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x6f4], 0
jmp 0x100412eb
mov dword [ebp - 0x58], 0
jmp 0x10041318
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 4
jge 0x1004132e
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x6e4], 0xfffffffd
jmp 0x10041311
mov dword [ebp - 0x108], 3
jmp 0x10041347
mov eax, dword [ebp - 0x108]
dec eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0
jl 0x100413ab
mov dword [ebp - 0x5b8], 0x696a485b
mov dword [ebp - 0x490], 0
mov dword [ebp - 0x134], 0
jmp 0x1004137d
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 1
jge 0x10041399
mov eax, dword [ebp - 0x134]
mov dword [ebp + eax*4 - 0x58c], 1
jmp 0x10041370
lea eax, [ebp - 0x490]
push eax
push 0
call fcn.1003f3fb
pop ecx
pop ecx
jmp 0x1004133a
push 1
lea eax, [ebp - 0xb4]
push eax
call fcn.1003f26c
pop ecx
pop ecx
jmp 0x1004025a
mov dword [ebp - 0x40], 0x801897a4
mov dword [ebp - 0x50], 0
jmp 0x100413d7
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 2
jge 0x100413ed
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x504], 0xffffffff
jmp 0x100413d0
mov dword [ebp - 0x50], 0
jmp 0x100413fd
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 3
jge 0x10041413
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x64c], 1
jmp 0x100413f6
push 0x3032
push 1
push 0x5fb1
push 0x804
push 0x259
push 0x6a21
call fcn.1003f2af
add esp, 0x18
mov dword [ebp - 0x40], 1
jmp 0x10041446
mov eax, dword [ebp - 0x40]
dec eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jl 0x100416ca
mov dword [ebp - 0x94], 0xffffffff
mov dword [ebp - 0x27c], 0
mov dword [ebp - 0x4e0], 0xffffffff
mov dword [ebp - 0x4d0], 0x483b
mov byte [ebp - 0x64], 0
movzx eax, byte [ebp - 0x64]
test eax, eax
je 0x1004148c
push 0
call fcn.1004263f
pop ecx
mov dword [ebp - 0x94], 0
jmp 0x100414a5
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 1
jg 0x100416c5
mov dword [ebp - 0x110], 0xb0fe2cf4
mov dword [ebp - 0x4f0], 0x9d012742
mov dword [ebp - 0x4e0], 4
mov eax, dword [ebp - 0x94]
cmp dword [ebp - 0x110], eax
je 0x100414ea
mov dword [ebp - 0x24c], 1
jmp 0x100414f1
and dword [ebp - 0x24c], 0
cmp dword [ebp - 0x24c], 0
je 0x10041506
mov dword [ebp - 0x498], 1
jmp 0x1004150d
and dword [ebp - 0x498], 0
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0x5c0], eax
cmp dword [ebp - 0x4d0], 0xfffffffb
je 0x1004152e
mov dword [ebp - 0x254], 1
jmp 0x10041535
and dword [ebp - 0x254], 0
mov eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0x254]
je 0x1004154c
mov dword [ebp - 0x25c], 1
jmp 0x10041553
and dword [ebp - 0x25c], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x25c], eax
jle 0x1004156a
mov dword [ebp - 0x4a0], 1
jmp 0x10041571
and dword [ebp - 0x4a0], 0
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0x5c8], eax
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0x5ec], eax
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x64c], 0x67bb
mov eax, 0x67bb
cmp eax, 0x1b55
jge 0x100415b1
mov dword [ebp - 0x264], 1
jmp 0x100415b8
and dword [ebp - 0x264], 0
mov eax, dword [ebp - 0x264]
sub eax, dword [ebp - 0x40]
cmp eax, 7
jae 0x100415d2
mov dword [ebp - 0x26c], 1
jmp 0x100415d9
and dword [ebp - 0x26c], 0
cmp dword [ebp - 0x26c], 0xc5c3c3ae
ja 0x100415f1
mov dword [ebp - 0x284], 1
jmp 0x100415f8
and dword [ebp - 0x284], 0
mov eax, dword [ebp - 0x94]
mov eax, dword [ebp + eax*4 - 0x504]
mov dword [ebp - 0x274], eax
mov eax, dword [ebp - 0x94]
mov ecx, dword [ebp - 0x274]
mov dword [ebp + eax*4 - 0x504], ecx
mov eax, dword [ebp - 0x274]
mov dword [ebp - 0x27c], eax
mov eax, dword [ebp - 0x27c]
cmp eax, dword [ebp - 0x284]
jge 0x10041644
mov dword [ebp - 0x28c], 1
jmp 0x1004164b
and dword [ebp - 0x28c], 0
mov eax, dword [ebp - 0x28c]
sub eax, 0xa164
cmp eax, 0x2b50
jne 0x10041669
mov dword [ebp - 0x294], 1
jmp 0x10041670
and dword [ebp - 0x294], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x294], eax
je 0x10041687
mov dword [ebp - 0x29c], 1
jmp 0x1004168e
and dword [ebp - 0x29c], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x29c], eax
jne 0x100416a5
mov dword [ebp - 0x2a4], 1
jmp 0x100416ac
and dword [ebp - 0x2a4], 0
mov eax, dword [ebp - 0x2a4]
mov dword [ebp - 0x4f0], eax
push 0
call fcn.10042490
pop ecx
jmp 0x10041498
jmp 0x1004143f
xor eax, eax
inc eax
imul eax, eax, 0x1a
mov byte [ebp + eax - 0x530], 0
mov dword [ebp - 0x59c], 0x720e
mov byte [ebp - 0x7d], 0
movzx eax, byte [ebp - 0x7d]
test eax, eax
je 0x100416fc
push 0
push 0x2d5
call fcn.100424dc
pop ecx
pop ecx
mov byte [ebp - 0x61], 0
movzx eax, byte [ebp - 0x61]
test eax, eax
je 0x10041716
push 0x46be
push 1
call fcn.1003f3fb
pop ecx
pop ecx
lea eax, [ebp - 0x530]
push eax
lea ecx, [ebp - 0x67c]
call fcn.10024cff
and dword [ebp - 4], 0
mov dword [ebp - 0xcc], 1
mov dword [ebp - 0x4c], 0
jmp 0x10041746
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 3
jge 0x1004175c
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x658], 0xffffffff
jmp 0x1004173f
mov dword [ebp - 0x4c], 0
jmp 0x1004176c
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 3
jge 0x10041782
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x588], 0xfffffff9
jmp 0x10041765
mov dword [ebp - 0xcc], 2
jmp 0x1004179b
mov eax, dword [ebp - 0xcc]
dec eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0
jl 0x1004197e
mov dword [ebp - 0x118], 0
jmp 0x100417c1
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 4
jge 0x100417dd
mov eax, dword [ebp - 0x118]
mov dword [ebp + eax*4 - 0x434], 0x5a654fdd
jmp 0x100417b4
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x434], 2
jmp 0x10041808
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x434]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x434], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x434], 0
jl 0x10041965
mov dword [ebp - 0x24], 0x449c9fb3
mov dword [ebp - 0x4a8], 4
mov dword [ebp - 0x24], 2
jmp 0x1004183c
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jl 0x10041874
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x434]
cmp dword [ebp + eax*4 - 0x658], 0
je 0x1004185a
jmp 0x10041874
push 4
pop eax
shl eax, 1
push 4
pop ecx
shl ecx, 1
mov eax, dword [ebp + eax - 0x434]
mov dword [ebp + ecx - 0x588], eax
jmp 0x10041835
mov dword [ebp - 0x24], 0
jmp 0x10041884
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jg 0x10041960
mov dword [ebp - 0x2bc], 0xffffffff
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x588]
mov dword [ebp - 0x5d4], eax
push 4
pop eax
shl eax, 1
imul eax, dword [ebp + eax - 0x434], 9
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x434]
jl 0x100418d2
mov dword [ebp - 0x2ac], 1
jmp 0x100418d9
and dword [ebp - 0x2ac], 0
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x2ac]
jne 0x100418f6
cmp dword [ebp - 0x24], 0
je 0x100418f6
mov dword [ebp - 0x2b4], 1
jmp 0x100418fd
and dword [ebp - 0x2b4], 0
imul eax, dword [ebp - 0x2b4], 0x8e48
sub eax, dword [ebp - 0x24]
jne 0x1004191f
cmp dword [ebp - 0x24], 0
jne 0x1004191f
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x434], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x434]
cmp dword [ebp - 0x2bc], eax
jl 0x10041945
cmp dword [ebp - 0x2bc], 0
jne 0x10041945
and dword [ebp - 0x2c4], 0
jmp 0x1004194f
mov dword [ebp - 0x2c4], 1
mov eax, dword [ebp - 0x2c4]
mov dword [ebp - 0x4a8], eax
jmp 0x1004187d
jmp 0x100417ef
mov byte [ebp - 0x68], 0
movzx eax, byte [ebp - 0x68]
test eax, eax
je 0x10041979
push 0
call fcn.10042be3
pop ecx
jmp 0x1004178e
and dword [ebp - 0xe0], 0
jmp 0x10041994
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0x1b
jae 0x10042011
mov dword [ebp - 0x128], 0xfffffffd
mov dword [ebp - 0x2ec], 5
mov dword [ebp - 0xc4], 0
mov dword [ebp - 0xd8], 0x373b2c57
mov dword [ebp - 0x9c], 1
mov dword [ebp - 0x4b0], 0x8444
mov dword [ebp - 0x4e8], 0xffffffff
mov dword [ebp - 0x54], 0
jmp 0x100419f7
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 4
jge 0x10041a0d
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x514], 6
jmp 0x100419f0
mov dword [ebp - 0x54], 0
jmp 0x10041a1d
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 4
jge 0x10041a33
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x68c], 1
jmp 0x10041a16
mov dword [ebp - 0x128], 0xffffffe7
jmp 0x10041a4c
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 5
je 0x10041ffe
mov dword [ebp - 0xa8], 0xba1a
mov dword [ebp - 0xf8], 0xffffffff
mov dword [ebp - 0xd0], 0x2b441a62
mov dword [ebp - 0x5c], 0
jmp 0x10041a87
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 1
jge 0x10041a9d
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x104], 0xa4ba31e4
jmp 0x10041a80
mov dword [ebp - 0x5c], 0
jmp 0x10041aad
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 4
jge 0x10041ac3
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x634], 0
jmp 0x10041aa6
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x104], 0
jne 0x10041b8a
imul eax, dword [ebp - 0xd8], 0xfff8
cmp eax, 0x9a67b9c5
jne 0x10041af4
mov dword [ebp - 0x2cc], 1
jmp 0x10041afb
and dword [ebp - 0x2cc], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x68c]
cmp dword [ebp - 0x2cc], eax
jl 0x10041b1c
mov dword [ebp - 0x2d4], 1
jmp 0x10041b23
and dword [ebp - 0x2d4], 0
mov eax, dword [ebp - 0x2d4]
mov dword [ebp - 0xc4], eax
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x5a4], eax
mov eax, dword [ebp - 0xc4]
add eax, dword [ebp - 0xa8]
imul eax, dword [ebp - 0xf8]
push 4
pop ecx
imul ecx, ecx, 0
add eax, dword [ebp + ecx - 0x104]
cmp eax, 7
ja 0x10041b6c
mov dword [ebp - 0x2dc], 1
jmp 0x10041b73
and dword [ebp - 0x2dc], 0
mov eax, dword [ebp - 0x9c]
cmp dword [ebp - 0x2dc], eax
jne 0x10041b8a
and dword [ebp - 0x4d8], 0
jmp 0x10041b94
mov dword [ebp - 0x4d8], 1
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0x2e4], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2e4]
mov dword [ebp + eax - 0x104], ecx
mov eax, dword [ebp - 0x2e4]
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x2ec], eax
cmp dword [ebp - 0x2ec], 0xfffffff8
jle 0x10041be0
mov dword [ebp - 0x2f4], 1
jmp 0x10041be7
and dword [ebp - 0x2f4], 0
mov eax, dword [ebp - 0xd0]
cmp dword [ebp - 0x2f4], eax
jge 0x10041c01
mov dword [ebp - 0x2fc], 1
jmp 0x10041c08
and dword [ebp - 0x2fc], 0
mov eax, dword [ebp - 0xd8]
cmp dword [ebp - 0x2fc], eax
jle 0x10041c22
mov dword [ebp - 0x304], 1
jmp 0x10041c29
and dword [ebp - 0x304], 0
cmp dword [ebp - 0x304], 2
jbe 0x10041c3e
mov dword [ebp - 0x30c], 1
jmp 0x10041c45
and dword [ebp - 0x30c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x514]
dec eax
mov dword [ebp - 0x314], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x314]
mov dword [ebp + eax - 0x514], ecx
mov eax, dword [ebp - 0x30c]
sub eax, 0xb4a1
mov ecx, dword [ebp - 0xa8]
imul ecx, dword [ebp - 0x314]
mov edx, dword [ebp - 0xa8]
sub edx, ecx
cmp edx, eax
jg 0x10041c9c
mov dword [ebp - 0x31c], 1
jmp 0x10041ca3
and dword [ebp - 0x31c], 0
cmp dword [ebp - 0x31c], 0x7638
jge 0x10041cbb
mov dword [ebp - 0x324], 1
jmp 0x10041cc2
and dword [ebp - 0x324], 0
mov eax, dword [ebp - 0x324]
mov dword [ebp - 0xf8], eax
mov eax, dword [ebp - 0xa8]
cmp dword [ebp - 0xf8], eax
jle 0x10041ce8
mov dword [ebp - 0x32c], 1
jmp 0x10041cef
and dword [ebp - 0x32c], 0
mov eax, dword [ebp - 0xd0]
imul eax, dword [ebp - 0x32c]
imul eax, eax, 0x85ca
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x634], eax
mov dword [ebp - 0x9c], 0xfffffffb
jmp 0x10041d28
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0x17
jl 0x10041ff9
mov dword [ebp - 0x198], 0x8aa1
mov dword [ebp - 0x334], 0xfcb277ce
mov dword [ebp - 0x36c], 0xd128b415
mov dword [ebp - 0xac], 0x49f72e73
mov dword [ebp - 0x1a8], 0xaa25
mov dword [ebp - 0x468], 2
cmp dword [ebp - 0x198], 0
jne 0x10041d9f
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x514]
mov dword [ebp - 0x334], eax
cmp dword [ebp - 0x334], 0
jne 0x10041d9f
and dword [ebp - 0x33c], 0
jmp 0x10041da9
mov dword [ebp - 0x33c], 1
mov eax, dword [ebp - 0xf8]
cmp eax, dword [ebp - 0x33c]
jle 0x10041dc3
mov dword [ebp - 0x344], 1
jmp 0x10041dca
and dword [ebp - 0x344], 0
cmp dword [ebp - 0x344], 0xfffffff9
jl 0x10041ddf
mov dword [ebp - 0x34c], 1
jmp 0x10041de6
and dword [ebp - 0x34c], 0
mov eax, dword [ebp - 0x198]
cmp dword [ebp - 0x34c], eax
jg 0x10041e00
mov dword [ebp - 0x354], 1
jmp 0x10041e07
and dword [ebp - 0x354], 0
mov eax, dword [ebp - 0xa8]
cmp dword [ebp - 0x354], eax
jge 0x10041e21
mov dword [ebp - 0x35c], 1
jmp 0x10041e28
and dword [ebp - 0x35c], 0
mov eax, dword [ebp - 0x35c]
mov dword [ebp - 0xc4], eax
mov eax, dword [ebp - 0xc4]
sub eax, 0xfffffff7
mov dword [ebp - 0x364], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x364]
mov dword [ebp + eax - 0x634], ecx
mov eax, dword [ebp - 0x364]
mov dword [ebp - 0x36c], eax
cmp dword [ebp - 0x36c], 0xe23848a6
jne 0x10041e79
mov dword [ebp - 0x1d4], 1
jmp 0x10041e80
and dword [ebp - 0x1d4], 0
cmp dword [ebp - 0x1d4], 0xe64c7c59
jb 0x10041e98
mov dword [ebp - 0x1d8], 1
jmp 0x10041e9f
and dword [ebp - 0x1d8], 0
mov eax, dword [ebp - 0xac]
add eax, dword [ebp - 0x1d8]
cmp eax, 0x8731485a
jbe 0x10041ebe
mov dword [ebp - 0x1e0], 1
jmp 0x10041ec5
and dword [ebp - 0x1e0], 0
mov eax, dword [ebp - 0x4b0]
cmp dword [ebp - 0x1e0], eax
jle 0x10041edf
mov dword [ebp - 0x1e8], 1
jmp 0x10041ee6
and dword [ebp - 0x1e8], 0
cmp dword [ebp - 0x1e8], 0
jb 0x10041efb
mov dword [ebp - 0x1f0], 1
jmp 0x10041f02
and dword [ebp - 0x1f0], 0
mov eax, dword [ebp - 0x1f0]
mov dword [ebp - 0x1a8], eax
mov eax, dword [ebp - 0x1a8]
mov dword [ebp - 0x608], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x104]
mov dword [ebp - 0x5ac], eax
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0x5dc], eax
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0x5b4], eax
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0x600], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x514]
mov dword [ebp - 0x5bc], eax
mov eax, dword [ebp - 0xac]
cmp dword [ebp - 0x4e8], eax
jge 0x10041f85
push 2
pop eax
test eax, eax
je 0x10041f85
mov dword [ebp - 0x1f8], 1
jmp 0x10041f8c
and dword [ebp - 0x1f8], 0
mov eax, dword [ebp - 0x1f8]
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0xffffffff
jne 0x10041fad
mov dword [ebp - 0x200], 1
jmp 0x10041fb4
and dword [ebp - 0x200], 0
mov dword [ebp - 0xd8], 0x4f7a324c
mov eax, dword [ebp - 0xd8]
cmp eax, dword [ebp - 0x200]
jl 0x10041fde
cmp dword [ebp - 0x1a8], 0
jne 0x10041fde
and dword [ebp - 0x208], 0
jmp 0x10041fe8
mov dword [ebp - 0x208], 1
mov eax, dword [ebp - 0x208]
mov dword [ebp - 0x468], eax
jmp 0x10041d1b
jmp 0x10041a3f
mov eax, dword [ebp - 0xe0]
mov byte [ebp + eax - 0x530], 0
jmp 0x10041987
mov dword [ebp - 0xb0], 0x860b4ffb
mov dword [ebp - 0xe8], 0
jmp 0x10042034
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 3
jge 0x10042050
mov eax, dword [ebp - 0xe8]
mov dword [ebp + eax*4 - 0x664], 0xffffffff
jmp 0x10042027
mov byte [ebp - 0x9d], 0
lea eax, [ebp - 0x9d]
push eax
push 0
call fcn.100425b9
pop ecx
pop ecx
mov dword [ebp - 0xb0], 0
jmp 0x10042080
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 2
jg 0x1004209d
mov eax, dword [ebp - 0xb0]
cmp dword [ebp + eax*4 - 0x664], 0
je 0x1004209b
jmp 0x1004209d
jmp 0x10042073
push 0x1000976a
lea ecx, [ebp - 0x624]
call fcn.10024cff
mov byte [ebp - 4], 1
mov dword [ebp - 0xf0], 0x75b57fd5
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0xf0], 0x10
jmp 0x100420de
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0x12
je 0x10042183
mov dword [ebp - 0x47c], 1
mov dword [ebp - 0x474], 0xf996f377
mov dword [ebp - 0x46c], 0
push 0
lea eax, [ebp - 0x46c]
push eax
push 0x471c
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0x474]
push eax
push 0x1794
push 0x19
lea eax, [ebp - 0x47c]
push eax
call fcn.10042a68
add esp, 0x20
mov dword [ebp - 0xb8], 0xe
jmp 0x10042154
mov eax, dword [ebp - 0xb8]
dec eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 5
jge 0x1004217e
mov dword [ebp - 0x210], 0x204795ed
push 0
call fcn.10042a26
pop ecx
mov eax, dword [ebp - 0x210]
dec eax
mov dword [ebp - 0x210], eax
jmp 0x10042147
jmp 0x100420d1
lea ecx, [ebp - 0x624]
call fcn.100185d8
cmp eax, dword [ebp + 0xc]
je 0x100421d4
call fcn.1006f917
mov esi, eax
lea ecx, [ebp - 0x67c]
call fcn.100185d8
mov ecx, eax
mov eax, esi
xor edx, edx
div ecx
mov dword [ebp - 0x484], edx
lea eax, [ebp - 0x624]
push eax
lea eax, [ebp - 0x484]
push eax
push 1
lea eax, [ebp - 0x67c]
push eax
call fcn.1003f435
add esp, 0x10
jmp 0x10042183
mov dword [ebp - 0x218], 0
mov dword [ebp - 0x48], 0
jmp 0x100421ee
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 2
jge 0x10042204
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x454], 0xffffffff
jmp 0x100421e7
mov dword [ebp - 0x48], 0
jmp 0x10042214
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 1
jge 0x1004222a
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x18c], 1
jmp 0x1004220d
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x454], 0
je 0x10042331
mov dword [ebp - 0xc0], 0x5ae649f6
mov dword [ebp - 0x48c], 0x3d6c1dfe
imul eax, dword [ebp - 0xc0], 0
cmp dword [ebp - 0xc0], eax
jle 0x1004226d
mov dword [ebp - 0x184], 1
jmp 0x10042274
and dword [ebp - 0x184], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x184]
mov dword [ebp + eax - 0x18c], ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x454]
imul eax, dword [ebp - 0x184]
mov dword [ebp - 0x218], eax
mov eax, dword [ebp - 0xc0]
cmp dword [ebp - 0x218], eax
jl 0x100422bb
mov dword [ebp - 0x220], 1
jmp 0x100422c2
and dword [ebp - 0x220], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x454]
imul eax, dword [ebp - 0x220]
mov dword [ebp - 0xc0], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xc0]
cmp dword [ebp + eax - 0x454], ecx
jl 0x100422fd
mov dword [ebp - 0x228], 1
jmp 0x10042304
and dword [ebp - 0x228], 0
cmp dword [ebp - 0x228], 0xcdf11bbb
jae 0x1004231c
mov dword [ebp - 0x230], 1
jmp 0x10042323
and dword [ebp - 0x230], 0
mov eax, dword [ebp - 0x230]
mov dword [ebp - 0x48c], eax
jmp 0x1004236a
mov byte [ebp - 0x85], 0
movzx eax, byte [ebp - 0x85]
test eax, eax
je 0x10042350
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetFocus]
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov eax, dword [ebp + eax - 0x18c]
mov dword [ebp + ecx - 0x18c], eax
lea eax, [ebp - 0x624]
push eax
mov ecx, dword [ebp + 8]
call fcn.100180d6
mov eax, dword [ebp - 0x238]
or eax, 1
mov dword [ebp - 0x238], eax
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x624]
call fcn.1001812f
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x67c]
call fcn.1001812f
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret