Function at 0x10045312
Capabilities:
Contain obfuscated stackstrings
Enumerate pe sections
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10084530
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xe04
and dword [ebp - 0x20], 0
movzx eax, byte [ebp + 0xc]
test eax, eax
je 0x1004b5f0
mov eax, dword [ebp + 8]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x118], 0xfffffff9
mov dword [ebp - 0x8fc], 0xfffffff7
mov dword [ebp - 0x248], 0
jmp 0x10045373
mov eax, dword [ebp - 0x248]
inc eax
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 4
jge 0x1004538f
mov eax, dword [ebp - 0x248]
mov dword [ebp + eax*4 - 0xa90], 0xc64a6847
jmp 0x10045366
mov dword [ebp - 0x118], 3
jmp 0x100453a8
mov eax, dword [ebp - 0x118]
dec eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0
jl 0x100454de
mov dword [ebp - 0x250], 0
jmp 0x100453ce
mov eax, dword [ebp - 0x250]
inc eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 2
jge 0x100453ea
mov eax, dword [ebp - 0x250]
mov dword [ebp + eax*4 - 0xa28], 0x86fd
jmp 0x100453c1
mov eax, dword [ebp - 0x118]
cmp dword [ebp + eax*4 - 0xa90], 1
jl 0x10045406
mov dword [ebp - 0x48c], 1
jmp 0x1004540d
and dword [ebp - 0x48c], 0
cmp dword [ebp - 0x48c], 0xffffffff
ja 0x10045422
mov dword [ebp - 0x324], 1
jmp 0x10045429
and dword [ebp - 0x324], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x324]
mov dword [ebp + eax - 0xa28], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa90]
add eax, dword [ebp - 0x324]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0xa90]
jge 0x1004546a
mov dword [ebp - 0x8f4], 1
jmp 0x10045471
and dword [ebp - 0x8f4], 0
mov eax, dword [ebp - 0x118]
mov eax, dword [ebp + eax*4 - 0xa90]
mov dword [ebp - 0xc48], eax
mov eax, 0x2703d9b9
test eax, eax
jne 0x100454a6
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xa28], 0
jne 0x100454a6
and dword [ebp - 0x78c], 0
jmp 0x100454b0
mov dword [ebp - 0x78c], 1
cmp dword [ebp - 0x78c], 0x33f2
jl 0x100454c8
mov dword [ebp - 0x824], 1
jmp 0x100454cf
and dword [ebp - 0x824], 0
mov dword [ebp - 0x8fc], 0
jmp 0x1004539b
mov byte [ebp - 0x10e], 0
movzx eax, byte [ebp - 0x10e]
test eax, eax
je 0x100454f8
push 0
call fcn.10044a63
pop ecx
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x3f0], eax
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 0x904], 0xe8e56f9b
mov dword [ebp - 0x90c], 0xfffffff7
mov dword [ebp - 0x258], 0
jmp 0x10045535
mov eax, dword [ebp - 0x258]
inc eax
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 2
jge 0x10045551
mov eax, dword [ebp - 0x258]
mov dword [ebp + eax*4 - 0x144], 0xffffffff
jmp 0x10045528
push 0x1814
push 0
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x904]
push eax
call fcn.10044f75
add esp, 0x10
mov dword [ebp - 0x34], 0
jmp 0x1004557b
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 1
jg 0x10045880
mov dword [ebp - 0x260], 0xffffffff
mov dword [ebp - 0xa78], 0x8a2b8ea2
mov dword [ebp - 0xa74], 0x8a2b8ea2
mov dword [ebp - 0xa70], 0x8a2b8ea2
mov dword [ebp - 0xa6c], 0x8a2b8ea2
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x260]
cmp dword [ebp + eax*4 - 0x144], ecx
je 0x100455d5
mov dword [ebp - 0x794], 1
jmp 0x100455dc
and dword [ebp - 0x794], 0
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x144]
cmp dword [ebp + eax - 0x144], ecx
jle 0x10045604
mov dword [ebp - 0x79c], 1
jmp 0x1004560b
and dword [ebp - 0x79c], 0
mov eax, dword [ebp - 0x794]
cmp eax, dword [ebp - 0x79c]
jl 0x10045625
mov dword [ebp - 0x7a4], 1
jmp 0x1004562c
and dword [ebp - 0x7a4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x144]
cmp dword [ebp - 0x7a4], eax
jle 0x1004564d
mov dword [ebp - 0x7ac], 1
jmp 0x10045654
and dword [ebp - 0x7ac], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x7ac], eax
jg 0x1004566b
mov dword [ebp - 0x7d8], 1
jmp 0x10045672
and dword [ebp - 0x7d8], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x7d8], eax
je 0x10045689
mov dword [ebp - 0x7e0], 1
jmp 0x10045690
and dword [ebp - 0x7e0], 0
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp + eax*4 - 0x144]
cmp eax, dword [ebp - 0x7e0]
jg 0x100456ae
mov dword [ebp - 0x7cc], 1
jmp 0x100456b5
and dword [ebp - 0x7cc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x144]
cmp dword [ebp - 0x7cc], eax
jl 0x100456d6
mov dword [ebp - 0x7d4], 1
jmp 0x100456dd
and dword [ebp - 0x7d4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x144]
cmp dword [ebp - 0x7d4], eax
je 0x10045704
mov eax, 0x24891023
test eax, eax
jne 0x10045704
and dword [ebp - 0x5e0], 0
jmp 0x1004570e
mov dword [ebp - 0x5e0], 1
cmp dword [ebp - 0x5e0], 0x8e1b8814
je 0x10045726
mov dword [ebp - 0x35c], 1
jmp 0x1004572d
and dword [ebp - 0x35c], 0
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x35c]
mov dword [ebp + eax*4 - 0x144], ecx
cmp dword [ebp - 0x35c], 0
jne 0x1004575c
mov eax, dword [ebp - 0x34]
cmp dword [ebp + eax*4 - 0x144], 0
jne 0x1004575c
and dword [ebp - 0x784], 0
jmp 0x10045766
mov dword [ebp - 0x784], 1
mov eax, dword [ebp - 0x784]
sub eax, 6
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xa78], eax
mov eax, dword [ebp - 0x260]
neg eax
neg eax
cmp eax, 0x6b86
je 0x10045799
mov dword [ebp - 0x3c8], 1
jmp 0x100457a0
and dword [ebp - 0x3c8], 0
mov eax, dword [ebp - 0x34]
imul eax, dword [ebp - 0x3c8]
cmp dword [ebp - 0x260], eax
je 0x100457be
mov dword [ebp - 0x6f0], 1
jmp 0x100457c5
and dword [ebp - 0x6f0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa78]
cmp dword [ebp - 0x6f0], eax
jge 0x100457e6
mov dword [ebp - 0x3d0], 1
jmp 0x100457ed
and dword [ebp - 0x3d0], 0
imul eax, dword [ebp - 0x3d0], 0x86a6
inc eax
cmp eax, 0xffffffff
jne 0x1004581f
mov eax, dword [ebp - 0x34]
cmp dword [ebp + eax*4 - 0x144], 0
je 0x1004581f
cmp dword [ebp - 0x260], 0
je 0x1004581f
mov dword [ebp - 0x5e8], 1
jmp 0x10045826
and dword [ebp - 0x5e8], 0
cmp dword [ebp - 0x5e8], 0xfff6
jae 0x1004583e
mov dword [ebp - 0x3d8], 1
jmp 0x10045845
and dword [ebp - 0x3d8], 0
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp + eax*4 - 0x144]
add eax, dword [ebp - 0x3d8]
cmp eax, 0x324015fb
jle 0x10045868
mov dword [ebp - 0x778], 1
jmp 0x1004586f
and dword [ebp - 0x778], 0
mov eax, dword [ebp - 0x778]
mov dword [ebp - 0x90c], eax
jmp 0x10045574
mov eax, dword [ebp - 0x3f0]
movzx eax, word [eax]
cmp eax, 0x5a4d
je 0x10045895
jmp 0x1004b614
mov dword [ebp - 0x25c], 0
mov dword [ebp - 0xbc4], 0xffffffff
mov dword [ebp - 0x78], 0
jmp 0x100458b9
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 3
jge 0x100458cf
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0x9d0], 0
jmp 0x100458b2
mov dword [ebp - 0x78], 0
jmp 0x100458df
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 2
jge 0x100458f5
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0xb04], 4
jmp 0x100458d8
mov dword [ebp - 0x25c], 2
jmp 0x1004590e
mov eax, dword [ebp - 0x25c]
dec eax
mov dword [ebp - 0x25c], eax
cmp dword [ebp - 0x25c], 0
jl 0x10045bd3
mov dword [ebp - 0x74], 0xa9ef72d4
mov dword [ebp - 0xc00], 6
mov dword [ebp - 0xc08], 0x1be360de
mov dword [ebp - 0xcc0], 0xf39c
mov dword [ebp - 0xbd4], 0x881dda8d
mov dword [ebp - 0xc34], 0xef2f37fc
mov dword [ebp - 0xbdc], 0x2e4a6b2c
mov dword [ebp - 0x1a4], 1
mov dword [ebp - 0x224], 0
jmp 0x10045981
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 3
jge 0x1004599d
mov eax, dword [ebp - 0x224]
mov dword [ebp + eax*4 - 0xce4], 0x717b38e5
jmp 0x10045974
mov dword [ebp - 0x74], 2
jmp 0x100459ad
mov eax, dword [ebp - 0x74]
dec eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0
jl 0x10045bce
mov dword [ebp - 0x914], 1
mov dword [ebp - 0xc7c], 2
mov dword [ebp - 0xbe4], 0xcff29c21
mov eax, dword [ebp - 0x74]
mov eax, dword [ebp + eax*4 - 0x9d0]
mov dword [ebp - 0xc3c], eax
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x74], eax
jne 0x100459f9
mov dword [ebp - 0x3e0], 1
jmp 0x10045a00
and dword [ebp - 0x3e0], 0
mov eax, dword [ebp - 0x74]
mov eax, dword [ebp + eax*4 - 0x9d0]
sub eax, dword [ebp - 0x3e0]
add eax, dword [ebp - 0x74]
cmp eax, 0x7c7
je 0x10045a26
mov dword [ebp - 0x5f0], 1
jmp 0x10045a2d
and dword [ebp - 0x5f0], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x5f0]
sub ecx, dword [ebp - 0x914]
cmp dword [ebp + eax - 0x9d0], ecx
jne 0x10045a53
mov dword [ebp - 0x3e8], 1
jmp 0x10045a5a
and dword [ebp - 0x3e8], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x9d0]
cmp dword [ebp - 0x3e8], eax
jg 0x10045a7a
mov dword [ebp - 0x6f8], 1
jmp 0x10045a81
and dword [ebp - 0x6f8], 0
mov eax, dword [ebp - 0x74]
mov eax, dword [ebp + eax*4 - 0x9d0]
sub eax, dword [ebp - 0x6f8]
je 0x10045b68
mov dword [ebp - 0x220], 0x74579933
mov dword [ebp - 0xac8], 0xffffffff
mov dword [ebp - 0xad0], 0xbbd4856c
mov dword [ebp - 0xad8], 1
mov dword [ebp - 0x91c], 0xfffffff9
mov dword [ebp - 0x19c], 0
jmp 0x10045ae2
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 4
jge 0x10045afe
mov eax, dword [ebp - 0x19c]
mov dword [ebp + eax*4 - 0xd64], 0x7bdd4840
jmp 0x10045ad5
push 0x300e
push 0x5dea
lea eax, [ebp - 0x91c]
push eax
push 0x58b7
push 0
push 0x41fb
push 0x495d
call fcn.10044af5
add esp, 0x1c
mov dword [ebp - 0x220], 0xfffffffa
jmp 0x10045b41
mov eax, dword [ebp - 0x220]
inc eax
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 0xb
jg 0x10045b66
push 4
pop eax
imul eax, eax, 3
push 4
pop ecx
shl ecx, 0
mov eax, dword [ebp + eax - 0xd64]
mov dword [ebp + ecx - 0xce4], eax
jmp 0x10045b34
jmp 0x10045b7a
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xb04], 0
je 0x10045b7a
jmp 0x10045bce
mov dword [ebp - 0x1a4], 2
jmp 0x10045b93
mov eax, dword [ebp - 0x1a4]
dec eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 0
jl 0x10045bc9
mov byte [ebp - 0xd4], 0
movzx eax, byte [ebp - 0xd4]
test eax, eax
je 0x10045bc7
push 0x7baa
push 0
push 0x2256
push 0x1198
call fcn.10044dad
add esp, 0x10
jmp 0x10045b86
jmp 0x100459a6
jmp 0x10045901
mov eax, dword [ebp - 0x3f0]
mov ecx, dword [ebp - 0x38]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0xf0], ecx
mov eax, dword [ebp - 0xf0]
cmp dword [eax], 0x4550
je 0x10045bf8
jmp 0x1004b614
mov dword [ebp - 0x228], 0
jmp 0x10045c11
mov eax, dword [ebp - 0x228]
inc eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 3
jge 0x10045c2d
mov eax, dword [ebp - 0x228]
mov dword [ebp + eax*4 - 0xa20], 0x75b57fd5
jmp 0x10045c04
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xa20], 0
jmp 0x10045c5b
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa20]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xa20], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xa20], 0x1b
jge 0x10045c87
mov byte [ebp - 0xd0], 0
movzx eax, byte [ebp - 0xd0]
test eax, eax
je 0x10045c85
push 0
call fcn.1004456a
pop ecx
jmp 0x10045c40
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xf0]
lea eax, [ecx + eax + 0x78]
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0xae0], 0x5baf43b7
push 0
push 0x5617
call fcn.10044d01
pop ecx
pop ecx
mov byte [ebp - 0x10d], 0
movzx eax, byte [ebp - 0x10d]
test eax, eax
je 0x10045cd2
push 0xab
push 1
call fcn.10044533
pop ecx
pop ecx
mov eax, dword [ebp - 0x5c]
cmp dword [eax + 4], 0
jne 0x10045ce0
jmp 0x1004b614
and dword [ebp - 0x30], 0
mov dword [ebp - 0x160], 0xffffffff
mov dword [ebp - 0xae8], 0
mov dword [ebp - 0x3f8], 0x5540fff0
mov dword [ebp - 0xaf0], 0x332e
mov dword [ebp - 0xa0], 0
jmp 0x10045d25
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 4
jge 0x10045d41
mov eax, dword [ebp - 0xa0]
mov dword [ebp + eax*4 - 0xc64], 0x9841
jmp 0x10045d18
mov dword [ebp - 0xa0], 0
jmp 0x10045d5a
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 1
jge 0x10045d76
mov eax, dword [ebp - 0xa0]
mov dword [ebp + eax*4 - 0xd8], 0xa32b1cec
jmp 0x10045d4d
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xd8], 3
jmp 0x10045da4
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd8]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xd8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xd8], 0
jl 0x10046047
mov dword [ebp - 0xaf8], 0x9cf7d164
mov dword [ebp - 0x92c], 0
mov dword [ebp - 0x1ac], 0
jmp 0x10045de5
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 3
jge 0x10045e01
mov eax, dword [ebp - 0x1ac]
mov dword [ebp + eax*4 - 0xb80], 0x43046b6e
jmp 0x10045dd8
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd8]
mov eax, dword [ebp + eax*4 - 0xc64]
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0xb80]
mov dword [ebp - 0x160], eax
mov dword [ebp - 0x160], 0
jmp 0x10045e41
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 3
jg 0x10046042
mov dword [ebp - 0x8c], 0
jmp 0x10045e67
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 1
jge 0x10045e83
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0x230], 2
jmp 0x10045e5a
mov dword [ebp - 0x8c], 0
jmp 0x10045e9c
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 3
jge 0x10045eb8
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0xb90], 0x430688cd
jmp 0x10045e8f
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x230], 1
je 0x10045ed4
mov dword [ebp - 0x5f8], 1
jmp 0x10045edb
and dword [ebp - 0x5f8], 0
mov eax, dword [ebp - 0x5f8]
mov dword [ebp - 0x3f8], eax
cmp dword [ebp - 0x3f8], 0x2b357f03
je 0x10045eff
mov dword [ebp - 0x7bc], 1
jmp 0x10045f06
and dword [ebp - 0x7bc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x230]
cmp dword [ebp - 0x7bc], eax
jl 0x10045f27
mov dword [ebp - 0x924], 1
jmp 0x10045f2e
and dword [ebp - 0x924], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xc64]
mov dword [ebp - 0xb30], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb90]
neg eax
jne 0x10045f72
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd8]
cmp dword [ebp + eax*4 - 0xc64], 0
jne 0x10045f72
and dword [ebp - 0x400], 0
jmp 0x10045f7c
mov dword [ebp - 0x400], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb80]
cmp eax, dword [ebp - 0x400]
jl 0x10045f9d
mov dword [ebp - 0x600], 1
jmp 0x10045fa4
and dword [ebp - 0x600], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd8]
cmp dword [ebp - 0x600], eax
jg 0x10045fd5
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x230], 0
je 0x10045fd5
mov dword [ebp - 0x408], 1
jmp 0x10045fdc
and dword [ebp - 0x408], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb90]
add eax, dword [ebp - 0x408]
cmp eax, 0x4d4
jge 0x10046002
mov dword [ebp - 0x700], 1
jmp 0x10046009
and dword [ebp - 0x700], 0
mov eax, dword [ebp - 0x92c]
cmp dword [ebp - 0x700], eax
jg 0x10046023
mov dword [ebp - 0x410], 1
jmp 0x1004602a
and dword [ebp - 0x410], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x410]
mov dword [ebp + eax - 0x230], ecx
jmp 0x10045e34
jmp 0x10045d89
mov eax, dword [ebp - 0xf0]
movzx eax, word [eax + 0x14]
mov ecx, dword [ebp - 0xf0]
lea eax, [ecx + eax + 0x18]
mov dword [ebp - 0xbc], eax
push 0
call fcn.10044b7e
pop ecx
and dword [ebp - 0x364], 0
jmp 0x1004608e
mov eax, dword [ebp - 0x364]
inc eax
mov dword [ebp - 0x364], eax
mov eax, dword [ebp - 0xbc]
add eax, 0x28
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0xf0]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x364], eax
jge 0x1004610f
mov eax, dword [ebp - 0xbc]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x608], eax
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x608]
jb 0x1004610a
mov eax, dword [ebp - 0xf0]
push dword [eax + 0x38]
mov eax, dword [ebp - 0xbc]
push dword [eax + 8]
call fcn.10044332
pop ecx
pop ecx
add eax, dword [ebp - 0x608]
mov dword [ebp - 0x9a8], eax
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x9a8]
jae 0x1004610a
push 0
lea eax, [ebp - 0xbc]
push eax
push 0x72bc
lea eax, [ebp - 0x30]
push eax
call fcn.100445a3
add esp, 0x10
jmp 0x1004610f
jmp 0x10046072
cmp dword [ebp - 0x30], 0
jne 0x1004611a
jmp 0x1004b614
mov dword [ebp - 0x3b8], 0xde9
mov dword [ebp - 0x3b4], 0xde9
mov dword [ebp - 0x3b0], 0xde9
mov dword [ebp - 0x3ac], 0xde9
mov dword [ebp - 0x418], 0x815898f0
mov dword [ebp - 0x438], 0x6cef3cf6
mov dword [ebp - 0x9b8], 1
mov dword [ebp - 0x374], 0xfffa
mov dword [ebp - 0x9c0], 0x1ec8e12b
mov dword [ebp - 0x168], 1
mov dword [ebp - 0x24], 0
jmp 0x1004618e
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x100461a4
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x9e0], 0x5fdc8dfb
jmp 0x10046187
mov dword [ebp - 0x24], 0
jmp 0x100461b4
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x100461ca
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xba0], 0xb1af9d66
jmp 0x100461ad
mov dword [ebp - 0x24], 0
jmp 0x100461da
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 4
jge 0x100461f0
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xd54], 0xa0c844fc
jmp 0x100461d3
mov dword [ebp - 0x24], 0
jmp 0x10046200
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jge 0x10046216
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xb10], 1
jmp 0x100461f9
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x3b8]
mov dword [ebp - 0x418], eax
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x9e0], 0xea38
imul eax, dword [ebp - 0x418], 0xea38
test eax, eax
jne 0x10046254
mov dword [ebp - 0x610], 1
jmp 0x1004625b
and dword [ebp - 0x610], 0
push 4
pop eax
shl eax, 1
mov ecx, 0x6dd2cc91
sub ecx, dword [ebp + eax - 0x3b8]
je 0x1004627c
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3b8], 0
push 4
pop eax
imul eax, eax, 3
push 4
pop ecx
imul ecx, ecx, 3
mov ecx, dword [ebp + ecx - 0x3b8]
cmp dword [ebp + eax - 0x3b8], ecx
jne 0x100462a4
mov dword [ebp - 0x9b0], 1
jmp 0x100462ab
and dword [ebp - 0x9b0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3b8]
mov dword [ebp - 0xb38], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3b8], 0x7b1b
jl 0x100462dd
mov dword [ebp - 0x36c], 1
jmp 0x100462e4
and dword [ebp - 0x36c], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x36c]
mov dword [ebp + eax - 0xba0], ecx
cmp dword [ebp - 0x36c], 0
jne 0x1004630d
xor eax, eax
inc eax
jne 0x1004630d
and dword [ebp - 0x780], 0
jmp 0x10046317
mov dword [ebp - 0x780], 1
mov eax, dword [ebp - 0x438]
cmp dword [ebp - 0x780], eax
jg 0x10046331
mov dword [ebp - 0x420], 1
jmp 0x10046338
and dword [ebp - 0x420], 0
mov eax, dword [ebp - 0x420]
mov ecx, dword [ebp - 0x610]
lea eax, [ecx + eax + 0x38bea122]
test eax, eax
je 0x10046358
mov eax, 0x7965
test eax, eax
jne 0x10046374
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x9e0], 0
je 0x10046374
mov dword [ebp - 0x428], 1
jmp 0x1004637b
and dword [ebp - 0x428], 0
mov eax, dword [ebp - 0x428]
sub eax, 0x834a
cmp eax, 0xc93e3288
jne 0x10046399
mov dword [ebp - 0x708], 1
jmp 0x100463a0
and dword [ebp - 0x708], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x3b8]
add eax, dword [ebp - 0x708]
mov dword [ebp - 0x9b8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd54]
mov dword [ebp - 0x430], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x430]
mov dword [ebp + eax - 0xba0], ecx
cmp dword [ebp - 0x430], 0x8029
jne 0x100463f6
mov dword [ebp - 0x7e4], 1
jmp 0x100463fd
and dword [ebp - 0x7e4], 0
mov eax, dword [ebp - 0x9c0]
mov dword [ebp - 0xb40], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x9e0], 0xbc79
jge 0x10046428
mov dword [ebp - 0x618], 1
jmp 0x1004642f
and dword [ebp - 0x618], 0
mov eax, dword [ebp - 0x618]
dec eax
dec eax
cmp eax, 0xfffffff6
je 0x1004644e
cmp dword [ebp - 0x438], 0
jne 0x1004644e
and dword [ebp - 0x440], 0
jmp 0x10046458
mov dword [ebp - 0x440], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x9e0]
sub eax, dword [ebp - 0x7e4]
cmp eax, dword [ebp - 0x440]
je 0x1004647f
mov dword [ebp - 0xa14], 1
jmp 0x10046486
and dword [ebp - 0xa14], 0
mov eax, dword [ebp - 0x168]
mov dword [ebp - 0xb48], eax
mov eax, 0xca8e1f91
test eax, eax
jne 0x100464b3
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x3b8], 0
jne 0x100464b3
and dword [ebp - 0x620], 0
jmp 0x100464bd
mov dword [ebp - 0x620], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x9e0]
cmp dword [ebp - 0x620], eax
jle 0x100464de
mov dword [ebp - 0x448], 1
jmp 0x100464e5
and dword [ebp - 0x448], 0
mov eax, dword [ebp - 0x374]
mov dword [ebp - 0xa10], eax
mov eax, dword [ebp - 0x448]
mov dword [ebp - 0x974], eax
mov eax, dword [ebp - 0x374]
inc eax
mov dword [ebp - 0x374], eax
mov eax, dword [ebp - 0xa10]
cmp eax, dword [ebp - 0x974]
jle 0x1004652b
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xb10], 0
jmp 0x1004655d
mov dword [ebp - 0x168], 3
jmp 0x10046544
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 0x26
jg 0x1004655d
push 0x3bb5
push 0
call fcn.100448f6
pop ecx
pop ecx
jmp 0x10046537
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x30]
add ecx, dword [eax]
add ecx, dword [ebp - 0x38]
mov dword [ebp - 0x18], ecx
xor ecx, ecx
call fcn.1002fe39
push eax
call fcn.1006b628
pop ecx
mov dword [ebp - 0x920], 0xfffffff9
cmp dword [ebp - 0x920], 0xfffd
jbe 0x100465b3
mov byte [ebp - 0xd2], 0
push 0xad
push 0x7f91
lea eax, [ebp - 0xd2]
push eax
push 0
call fcn.10044891
add esp, 0x10
jmp 0x100465cd
mov byte [ebp - 0x109], 0
movzx eax, byte [ebp - 0x109]
test eax, eax
je 0x100465cd
push 1
call fcn.1004456a
pop ecx
mov dword [ebp - 0x1b8], 0x38ec
mov dword [ebp - 0xa60], 0xffffffff
mov dword [ebp - 0xa5c], 0xffffffff
mov dword [ebp - 0xa58], 0xffffffff
mov dword [ebp - 0xa54], 0xffffffff
mov dword [ebp - 0x8ec], 1
mov dword [ebp - 0x9e4], 0xb37d0226
mov dword [ebp - 0x238], 0
jmp 0x1004662c
mov eax, dword [ebp - 0x238]
inc eax
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 2
jge 0x10046648
mov eax, dword [ebp - 0x238]
mov dword [ebp + eax*4 - 0xa68], 0xfffffffb
jmp 0x1004661f
mov eax, dword [ebp - 0x1b8]
add eax, 0x6c902db0
push 4
pop ecx
imul ecx, ecx, 3
cmp eax, dword [ebp + ecx - 0xa60]
jl 0x1004666e
mov dword [ebp - 0x710], 1
jmp 0x10046675
and dword [ebp - 0x710], 0
cmp dword [ebp - 0x710], 0xba7b
jle 0x1004668f
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xa68], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa68]
cmp dword [ebp - 0x8ec], eax
jle 0x100466b0
mov dword [ebp - 0x37c], 1
jmp 0x100466b7
and dword [ebp - 0x37c], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x37c]
mov dword [ebp + eax - 0xa60], ecx
mov eax, dword [ebp - 0x1b8]
cmp dword [ebp - 0x37c], eax
je 0x100466e4
mov dword [ebp - 0x450], 1
jmp 0x100466eb
and dword [ebp - 0x450], 0
mov eax, dword [ebp - 0x1b8]
cmp eax, dword [ebp - 0x450]
jge 0x10046705
mov dword [ebp - 0x830], 1
jmp 0x1004670c
and dword [ebp - 0x830], 0
mov eax, dword [ebp - 0x1b8]
mov dword [ebp - 0xb50], eax
cmp dword [ebp - 0x9e4], 0
je 0x10046737
mov dword [ebp - 0x838], 0x1966
mov dword [ebp - 0x838], 0xf8e3bf11
jmp 0x10046745
push 0
push 0x4599
call fcn.10045312
pop ecx
pop ecx
mov byte [ebp - 0x10f], 0
movzx eax, byte [ebp - 0x10f]
test eax, eax
je 0x1004677a
push 0x21be
push 0x337b
push 0x2257
push 0
push 0x313e
push 0x6299
call fcn.1004528a
add esp, 0x18
mov byte [ebp - 0x180], 0
mov byte [ebp - 0x17f], 0xad
mov byte [ebp - 0x17e], 2
mov byte [ebp - 0x17d], 0x79
mov byte [ebp - 0x17c], 0x64
mov byte [ebp - 0x17b], 3
mov byte [ebp - 0x17a], 6
mov byte [ebp - 0x179], 2
mov byte [ebp - 0x178], 0
mov byte [ebp - 0x177], 8
mov byte [ebp - 0x176], 7
mov byte [ebp - 0x175], 9
mov byte [ebp - 0x174], 0
mov byte [ebp - 0x173], 1
mov byte [ebp - 0x172], 5
mov byte [ebp - 0x171], 6
mov byte [ebp - 0x170], 4
mov byte [ebp - 0x16f], 4
mov byte [ebp - 0x16e], 9
mov byte [ebp - 0x16d], 5
mov byte [ebp - 0x16c], 9
mov byte [ebp - 0x16b], 7
mov byte [ebp - 0x16a], 7
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x180]
or eax, 0x9c
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x180]
and ecx, 0x9c
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x180]
mov byte [ebp + ecx - 0x7fc], al
mov dword [ebp - 0x44], 2
and dword [ebp - 0x214], 0
jmp 0x10046871
mov eax, dword [ebp - 0x44]
inc eax
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0x17
jae 0x1004693b
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x180]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x44], eax
jne 0x100468bb
mov eax, dword [ebp - 0x44]
movzx eax, byte [ebp + eax - 0x180]
inc eax
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x44]
movzx eax, byte [ebp + eax - 0x180]
mov ecx, dword [ebp - 0x44]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x44], eax
jmp 0x10046869
mov eax, dword [ebp - 0x44]
movzx eax, byte [ebp + eax - 0x17f]
mov ecx, dword [ebp - 0x44]
sub ecx, dword [ebp - 0x214]
movzx ecx, byte [ebp + ecx - 0x182]
movsx ecx, byte [ebp + ecx - 0x7fc]
or eax, ecx
mov ecx, dword [ebp - 0x44]
movzx ecx, byte [ebp + ecx - 0x17f]
mov edx, dword [ebp - 0x44]
sub edx, dword [ebp - 0x214]
movzx edx, byte [ebp + edx - 0x182]
movsx edx, byte [ebp + edx - 0x7fc]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x44]
movzx ecx, byte [ebp + ecx - 0x180]
mov byte [ebp + ecx - 0x7fc], al
push 1
push 0x6ffd
lea eax, [ebp - 0x214]
push eax
push 0x68de
call fcn.100445a3
add esp, 0x10
jmp 0x10046869
xor eax, eax
inc eax
imul eax, eax, 0xa
mov byte [ebp + eax - 0x7fc], 0
lea eax, [ebp - 0x7fc]
push eax
lea ecx, [ebp - 0xd7c]
call fcn.10024d3f
mov dword [ebp - 0x928], eax
mov eax, dword [ebp - 0x928]
mov dword [ebp - 0x840], eax
and dword [ebp - 4], 0
push 0xa
xor edx, edx
mov ecx, dword [ebp - 0x840]
call fcn.1002fdfe
pop ecx
mov dword [ebp - 0x880], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd7c]
call fcn.10017e85
and dword [ebp - 0x1c0], 0
jmp 0x100469ac
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 0xb
jae 0x100469c5
mov eax, dword [ebp - 0x1c0]
mov byte [ebp + eax - 0x7fc], 0
jmp 0x1004699f
mov dword [ebp - 0x94], 0
mov dword [ebp - 0xb4], 0
mov dword [ebp - 0x368], 9
mov dword [ebp - 0x384], 0xa37b187b
mov dword [ebp - 0x9c], 0
jmp 0x10046a06
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 3
jge 0x10046a22
mov eax, dword [ebp - 0x9c]
mov dword [ebp + eax*4 - 0x9f0], 0
jmp 0x100469f9
mov dword [ebp - 0x9c], 0
jmp 0x10046a3b
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 4
jge 0x10046a57
mov eax, dword [ebp - 0x9c]
mov dword [ebp + eax*4 - 0xaa0], 0x11521faf
jmp 0x10046a2e
mov eax, dword [ebp - 0x94]
mov ecx, dword [ebp - 0x94]
dec ecx
mov dword [ebp - 0x94], ecx
test eax, eax
jne 0x10046c08
cmp dword [ebp - 0x94], 0
je 0x10046a90
cmp dword [ebp - 0x368], 0
je 0x10046a90
mov dword [ebp - 0x9b4], 1
jmp 0x10046a97
and dword [ebp - 0x9b4], 0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xaa0], 1
jl 0x10046ab3
mov dword [ebp - 0x628], 1
jmp 0x10046aba
and dword [ebp - 0x628], 0
cmp dword [ebp - 0x628], 1
jb 0x10046acf
mov dword [ebp - 0x458], 1
jmp 0x10046ad6
and dword [ebp - 0x458], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xaa0]
cmp dword [ebp - 0x458], eax
jne 0x10046af7
mov dword [ebp - 0x788], 1
jmp 0x10046afe
and dword [ebp - 0x788], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x9f0]
cmp dword [ebp - 0x788], eax
jle 0x10046b1f
mov dword [ebp - 0x460], 1
jmp 0x10046b26
and dword [ebp - 0x460], 0
mov eax, dword [ebp - 0x460]
mov dword [ebp - 0x384], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x9f0]
cmp dword [ebp - 0x384], eax
jle 0x10046b53
mov dword [ebp - 0x630], 1
jmp 0x10046b5a
and dword [ebp - 0x630], 0
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp - 0xb4]
cmp eax, dword [ebp - 0x630]
jne 0x10046b88
push 2
pop eax
test eax, eax
je 0x10046b88
mov dword [ebp - 0x468], 1
jmp 0x10046b8f
and dword [ebp - 0x468], 0
mov eax, dword [ebp - 0x368]
cmp dword [ebp - 0x468], eax
jl 0x10046ba9
mov dword [ebp - 0x848], 1
jmp 0x10046bb0
and dword [ebp - 0x848], 0
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0xb58], eax
push 4
pop eax
shl eax, 1
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x9f0]
cmp dword [ebp + eax - 0x9f0], ecx
jl 0x10046bec
cmp dword [ebp - 0x384], 0
je 0x10046bec
mov dword [ebp - 0x930], 1
jmp 0x10046bf3
and dword [ebp - 0x930], 0
cmp dword [ebp - 0xb4], 0
je 0x10046c08
mov dword [ebp - 0x718], 1
jmp 0x10046c0f
and dword [ebp - 0x718], 0
cmp dword [ebp - 0x718], 1
jne 0x10046c24
mov dword [ebp - 0x39c], 1
jmp 0x10046c2b
and dword [ebp - 0x39c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x39c]
mov dword [ebp + eax - 0x9f0], ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xaa0]
cmp dword [ebp - 0x39c], eax
jg 0x10046c5f
mov dword [ebp - 0x390], 1
jmp 0x10046c66
and dword [ebp - 0x390], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x390]
mov dword [ebp + eax - 0xaa0], ecx
mov eax, dword [ebp - 0x390]
mov dword [ebp - 0x368], eax
mov dword [ebp - 0x94], 0
jmp 0x10046c9e
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 2
jg 0x10046d45
mov dword [ebp - 0xb60], 0xfffffffa
mov dword [ebp - 0xb68], 0x767dbf12
mov dword [ebp - 0xb4], 0
jmp 0x10046cd8
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 2
jg 0x10046d40
mov dword [ebp - 0xa38], 0xffffffff
mov dword [ebp - 0xa34], 0xffffffff
mov dword [ebp - 0xa30], 0xffffffff
mov dword [ebp - 0xa2c], 0xffffffff
mov byte [ebp - 0xd9], 0
movzx eax, byte [ebp - 0xd9]
test eax, eax
je 0x10046d23
push 0
call fcn.100445f6
pop ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa38]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xa38], eax
jmp 0x10046ccb
jmp 0x10046c91
mov byte [ebp - 0x320], 7
mov byte [ebp - 0x31f], 0xf7
mov byte [ebp - 0x31e], 2
mov byte [ebp - 0x31d], 1
mov byte [ebp - 0x31c], 9
mov byte [ebp - 0x31b], 7
mov byte [ebp - 0x31a], 8
mov byte [ebp - 0x319], 0
mov byte [ebp - 0x318], 0
mov byte [ebp - 0x317], 1
mov byte [ebp - 0x316], 3
mov byte [ebp - 0x315], 3
mov byte [ebp - 0x314], 4
mov byte [ebp - 0x313], 6
mov byte [ebp - 0x312], 1
mov byte [ebp - 0x311], 2
mov byte [ebp - 0x310], 0x55
mov byte [ebp - 0x30f], 0x4b
mov byte [ebp - 0x30e], 0x7c
mov byte [ebp - 0x30d], 0xea
mov byte [ebp - 0x30c], 0xa5
mov byte [ebp - 0x30b], 0x82
mov byte [ebp - 0x30a], 0xa5
mov byte [ebp - 0x309], 0x31
mov byte [ebp - 0x308], 0
mov byte [ebp - 0x307], 0x15
mov byte [ebp - 0x306], 0xa
mov byte [ebp - 0x305], 0xa7
mov byte [ebp - 0x304], 0xdb
mov byte [ebp - 0x303], 0x4f
mov byte [ebp - 0x302], 0xc8
mov byte [ebp - 0x301], 0x19
mov byte [ebp - 0x300], 0x14
mov byte [ebp - 0x2ff], 0xb5
mov byte [ebp - 0x2fe], 0x54
mov byte [ebp - 0x2fd], 0x74
mov byte [ebp - 0x2fc], 0x54
mov byte [ebp - 0x2fb], 0x9a
mov byte [ebp - 0x2fa], 0x7e
mov byte [ebp - 0x2f9], 0x2e
mov byte [ebp - 0x2f8], 0xc7
mov byte [ebp - 0x2f7], 0x14
mov byte [ebp - 0x2f6], 0xe5
mov byte [ebp - 0x2f5], 0x7f
mov byte [ebp - 0x2f4], 0xae
mov byte [ebp - 0x2f3], 0xe3
mov byte [ebp - 0x2f2], 0xe
mov byte [ebp - 0x2f1], 0xc1
mov byte [ebp - 0x2f0], 0xa1
mov byte [ebp - 0x2ef], 0x2b
mov byte [ebp - 0x2ee], 0x19
mov byte [ebp - 0x2ed], 0xc7
mov byte [ebp - 0x2ec], 0xbb
mov byte [ebp - 0x2eb], 0x79
mov byte [ebp - 0x2ea], 0x67
mov byte [ebp - 0x2e9], 6
mov byte [ebp - 0x2e8], 0x92
mov byte [ebp - 0x2e7], 6
mov byte [ebp - 0x2e6], 0xb3
mov byte [ebp - 0x2e5], 0x61
mov byte [ebp - 0x2e4], 9
mov byte [ebp - 0x2e3], 0xb8
mov byte [ebp - 0x2e2], 0xd4
mov byte [ebp - 0x2e1], 0x66
mov byte [ebp - 0x2e0], 0xf6
mov byte [ebp - 0x2df], 0x42
mov byte [ebp - 0x2de], 0xc1
mov byte [ebp - 0x2dd], 0xdd
mov byte [ebp - 0x2dc], 0x47
mov byte [ebp - 0x2db], 0xe3
mov byte [ebp - 0x2da], 7
mov byte [ebp - 0x2d9], 0xec
mov byte [ebp - 0x2d8], 0xde
mov byte [ebp - 0x2d7], 0x35
mov byte [ebp - 0x2d6], 0x47
mov byte [ebp - 0x2d5], 0xb4
mov byte [ebp - 0x2d4], 4
mov byte [ebp - 0x2d3], 2
mov byte [ebp - 0x2d2], 0x6f
mov byte [ebp - 0x2d1], 0xb4
mov byte [ebp - 0x2d0], 0x27
mov byte [ebp - 0x2cf], 0x8f
mov byte [ebp - 0x2ce], 0xc0
mov byte [ebp - 0x2cd], 0x45
mov byte [ebp - 0x2cc], 0xa4
mov byte [ebp - 0x2cb], 0xd4
mov byte [ebp - 0x2ca], 0xe1
mov byte [ebp - 0x2c9], 0x7a
mov byte [ebp - 0x2c8], 0x6f
mov byte [ebp - 0x2c7], 0x97
mov byte [ebp - 0x2c6], 0xf5
mov byte [ebp - 0x2c5], 0xdf
mov byte [ebp - 0x2c4], 0x45
mov byte [ebp - 0x2c3], 0x56
mov byte [ebp - 0x2c2], 0x15
mov byte [ebp - 0x2c1], 0x29
mov byte [ebp - 0x2c0], 0xce
mov byte [ebp - 0x2bf], 0x79
mov byte [ebp - 0x2be], 0x93
mov byte [ebp - 0x2bd], 0xeb
mov byte [ebp - 0x2bc], 0x54
mov byte [ebp - 0x2bb], 0xce
mov byte [ebp - 0x2ba], 6
mov byte [ebp - 0x2b9], 0xf
mov byte [ebp - 0x2b8], 5
mov byte [ebp - 0x2b7], 8
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x320]
or eax, 0xc1
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x320]
and ecx, 0xc1
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x320]
mov byte [ebp + ecx - 0x808], al
mov dword [ebp - 0x48], 2
and dword [ebp - 0x240], 0
jmp 0x10047081
mov eax, dword [ebp - 0x48]
inc eax
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0x6a
jae 0x10047137
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x320]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x48], eax
jne 0x100470cb
mov eax, dword [ebp - 0x48]
movzx eax, byte [ebp + eax - 0x320]
inc eax
mov dword [ebp - 0x240], eax
mov eax, dword [ebp - 0x48]
movzx eax, byte [ebp + eax - 0x320]
mov ecx, dword [ebp - 0x48]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x48], eax
jmp 0x10047079
mov eax, dword [ebp - 0x48]
movzx eax, byte [ebp + eax - 0x31f]
mov ecx, dword [ebp - 0x48]
sub ecx, dword [ebp - 0x240]
movzx ecx, byte [ebp + ecx - 0x322]
movsx ecx, byte [ebp + ecx - 0x808]
or eax, ecx
mov ecx, dword [ebp - 0x48]
movzx ecx, byte [ebp + ecx - 0x31f]
mov edx, dword [ebp - 0x48]
sub edx, dword [ebp - 0x240]
movzx edx, byte [ebp + edx - 0x322]
movsx edx, byte [ebp + edx - 0x808]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x48]
movzx ecx, byte [ebp + ecx - 0x320]
mov byte [ebp + ecx - 0x808], al
and dword [ebp - 0x240], 0
jmp 0x10047079
xor eax, eax
inc eax
imul eax, eax, 0xa
mov byte [ebp + eax - 0x808], 0
mov dword [ebp - 0xe0], 0x8901f2c
mov dword [ebp - 0x858], 0xd19fa553
mov dword [ebp - 0x650], 0xfffffff7
mov dword [ebp - 0x1c8], 0
jmp 0x1004717c
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 2
jge 0x10047198
mov eax, dword [ebp - 0x1c8]
mov dword [ebp + eax*4 - 0x938], 0xffffffff
jmp 0x1004716f
mov dword [ebp - 0xe0], 1
jmp 0x100471b1
mov eax, dword [ebp - 0xe0]
dec eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0
jl 0x10047477
mov dword [ebp - 0x58], 0xffffffff
mov dword [ebp - 0x490], 2
mov dword [ebp - 0x7c4], 4
mov dword [ebp - 0xa50], 0x13ce
mov dword [ebp - 0xa4c], 0x13ce
mov dword [ebp - 0xa48], 0x13ce
mov dword [ebp - 0xa44], 0x13ce
mov dword [ebp - 0x58], 1
jmp 0x10047211
mov eax, dword [ebp - 0x58]
dec eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0
jl 0x10047420
mov dword [ebp - 0x21c], 0x12fbb6bc
mov dword [ebp - 0x970], 0x3e8ce6fc
mov dword [ebp - 0xb70], 0x593f6a08
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x21c], eax
je 0x10047250
mov dword [ebp - 0x470], 1
jmp 0x10047257
and dword [ebp - 0x470], 0
mov eax, dword [ebp - 0x21c]
sub eax, dword [ebp - 0xe0]
cmp eax, 0x92fe7fe
jl 0x10047276
mov dword [ebp - 0x638], 1
jmp 0x1004727d
and dword [ebp - 0x638], 0
mov eax, dword [ebp - 0x470]
cmp eax, dword [ebp - 0x638]
jl 0x10047297
mov dword [ebp - 0x850], 1
jmp 0x1004729e
and dword [ebp - 0x850], 0
cmp dword [ebp - 0x58], 0xe76d238e
jne 0x100472b3
mov dword [ebp - 0x478], 1
jmp 0x100472ba
and dword [ebp - 0x478], 0
mov eax, dword [ebp - 0x478]
sub eax, 0x5145b2c2
mov ecx, dword [ebp - 0xe0]
mov dword [ebp + ecx*4 - 0x938], eax
mov dword [ebp - 0x7c4], 1
mov eax, dword [ebp - 0x7c4]
mov dword [ebp - 0x21c], eax
mov eax, dword [ebp - 0x21c]
imul eax, dword [ebp - 0x970]
cmp eax, dword [ebp - 0x58]
jle 0x10047306
mov dword [ebp - 0x480], 1
jmp 0x1004730d
and dword [ebp - 0x480], 0
cmp dword [ebp - 0x480], 0xf7cc
jge 0x10047325
mov dword [ebp - 0x640], 1
jmp 0x1004732c
and dword [ebp - 0x640], 0
mov eax, dword [ebp - 0x58]
cmp eax, dword [ebp - 0x640]
je 0x10047343
mov dword [ebp - 0x488], 1
jmp 0x1004734a
and dword [ebp - 0x488], 0
cmp dword [ebp - 0x488], 0xee49
je 0x10047362
mov dword [ebp - 0x720], 1
jmp 0x10047369
and dword [ebp - 0x720], 0
mov eax, dword [ebp - 0x720]
mov dword [ebp - 0x490], eax
cmp dword [ebp - 0x490], 0
jne 0x10047397
mov eax, dword [ebp - 0xe0]
cmp dword [ebp + eax*4 - 0x938], 0
jne 0x10047397
and dword [ebp - 0x498], 0
jmp 0x100473a1
mov dword [ebp - 0x498], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xa50]
inc eax
mov dword [ebp - 0x648], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x648]
mov dword [ebp + eax - 0xa50], ecx
mov eax, dword [ebp - 0x648]
cmp eax, dword [ebp - 0x498]
jne 0x100473e0
mov dword [ebp - 0x790], 1
jmp 0x100473e7
and dword [ebp - 0x790], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x938]
cmp eax, dword [ebp - 0x790]
jne 0x10047408
mov dword [ebp - 0x4a0], 1
jmp 0x1004740f
and dword [ebp - 0x4a0], 0
mov eax, dword [ebp - 0x4a0]
mov dword [ebp - 0x650], eax
jmp 0x1004720a
mov dword [ebp - 0x58], 1
jmp 0x10047430
mov eax, dword [ebp - 0x58]
dec eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0
jl 0x10047472
mov byte [ebp - 0x111], 0
movzx eax, byte [ebp - 0x111]
test eax, eax
je 0x10047450
push 1
call fcn.100445f6
pop ecx
mov byte [ebp - 0xe1], 0
movzx eax, byte [ebp - 0xe1]
test eax, eax
je 0x10047470
push 0x2875
push 0
call fcn.10045242
pop ecx
pop ecx
jmp 0x10047429
jmp 0x100471a4
push 1
lea eax, [ebp - 0x650]
push eax
push 0x4cae
push 0x781f
lea eax, [ebp - 0x858]
push eax
call fcn.1004461c
add esp, 0x14
lea eax, [ebp - 0x808]
push eax
lea ecx, [ebp - 0xdac]
call fcn.10024d3f
mov dword [ebp - 0x93c], eax
mov eax, dword [ebp - 0x93c]
mov dword [ebp - 0x860], eax
mov dword [ebp - 4], 1
push 0xa
xor edx, edx
mov ecx, dword [ebp - 0x860]
call fcn.1002fdfe
pop ecx
mov dword [ebp - 0x954], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xdac]
call fcn.10017e85
mov dword [ebp - 0x4c], 0xffff
mov dword [ebp - 0x244], 8
mov dword [ebp - 0x728], 0x28abf8b2
mov dword [ebp - 0x978], 0x35211521
mov dword [ebp - 0xc10], 0x698d
mov dword [ebp - 0x4c0], 0xffffffff
mov dword [ebp - 0x4c8], 0x9f41af53
mov dword [ebp - 0x1d0], 0
jmp 0x10047545
mov eax, dword [ebp - 0x1d0]
inc eax
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 2
jge 0x10047561
mov eax, dword [ebp - 0x1d0]
mov dword [ebp + eax*4 - 0xb1c], 0xfffffff8
jmp 0x10047538
mov eax, dword [ebp - 0x978]
mov dword [ebp - 0xc18], eax
mov eax, 0xeb927eed
sub eax, dword [ebp - 0x244]
sub eax, dword [ebp - 0x4c]
jne 0x10047589
mov dword [ebp - 0x4a8], 1
jmp 0x10047590
and dword [ebp - 0x4a8], 0
mov eax, dword [ebp - 0x4a8]
mov dword [ebp - 0x728], eax
mov eax, dword [ebp - 0x728]
sub eax, dword [ebp - 0x4c]
neg eax
inc eax
cmp eax, 0x12959af2
jl 0x100475bb
mov dword [ebp - 0x868], 1
jmp 0x100475c2
and dword [ebp - 0x868], 0
mov eax, dword [ebp - 0x244]
mov dword [ebp - 0xc20], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x244], eax
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x244], eax
je 0x100475ee
mov dword [ebp - 0x4b0], 1
jmp 0x100475f5
and dword [ebp - 0x4b0], 0
cmp dword [ebp - 0x4b0], 0x4f5f
je 0x1004760d
mov dword [ebp - 0x658], 1
jmp 0x10047614
and dword [ebp - 0x658], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x658], eax
jle 0x1004762b
mov dword [ebp - 0x4b8], 1
jmp 0x10047632
and dword [ebp - 0x4b8], 0
cmp dword [ebp - 0x4b8], 0x66941fc9
jg 0x1004764a
mov dword [ebp - 0x7c8], 1
jmp 0x10047651
and dword [ebp - 0x7c8], 0
mov eax, dword [ebp - 0x7c8]
sub eax, dword [ebp - 0x4c]
mov dword [ebp - 0x4c0], eax
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x4c0], eax
jne 0x10047677
mov dword [ebp - 0x660], 1
jmp 0x1004767e
and dword [ebp - 0x660], 0
mov eax, dword [ebp - 0x4c]
add eax, dword [ebp - 0x660]
mov dword [ebp - 0x4c8], eax
mov eax, dword [ebp - 0x4c8]
cmp dword [ebp - 0x4c], eax
jge 0x100476a4
mov dword [ebp - 0x730], 1
jmp 0x100476ab
and dword [ebp - 0x730], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x730], eax
jl 0x100476c2
mov dword [ebp - 0x4d0], 1
jmp 0x100476c9
and dword [ebp - 0x4d0], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x4d0], eax
jne 0x100476e0
mov dword [ebp - 0x668], 1
jmp 0x100476e7
and dword [ebp - 0x668], 0
mov eax, dword [ebp - 0x4c]
cmp eax, dword [ebp - 0x668]
jge 0x100476fe
mov dword [ebp - 0x4d8], 1
jmp 0x10047705
and dword [ebp - 0x4d8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x4d8]
mov dword [ebp + eax - 0xb1c], ecx
mov byte [ebp - 0x10c], 0
lea eax, [ebp - 0x10c]
push eax
push 0
call fcn.100451e8
pop ecx
pop ecx
and dword [ebp - 0x1d8], 0
jmp 0x10047745
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 0xb
jae 0x1004775e
mov eax, dword [ebp - 0x1d8]
mov byte [ebp + eax - 0x808], 0
jmp 0x10047738
mov dword [ebp - 0x1c], 8
mov dword [ebp - 0x4f8], 0xeb382e58
mov dword [ebp - 0x12c], 1
mov dword [ebp - 0x1dc], 0
jmp 0x10047792
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 1
jge 0x100477ae
mov eax, dword [ebp - 0x1dc]
mov dword [ebp + eax*4 - 0x1e4], 1
jmp 0x10047785
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x1c]
test eax, eax
je 0x100477cb
cmp dword [ebp - 0x1c], 0
je 0x100477cb
mov dword [ebp - 0x798], 1
jmp 0x100477d2
and dword [ebp - 0x798], 0
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x798]
cmp eax, dword [ebp - 0x1c]
jg 0x100477ec
mov dword [ebp - 0x4e0], 1
jmp 0x100477f3
and dword [ebp - 0x4e0], 0
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x4e0]
sub eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x1c]
jne 0x10047811
mov dword [ebp - 0x670], 1
jmp 0x10047818
and dword [ebp - 0x670], 0
mov eax, dword [ebp - 0x670]
neg eax
cmp eax, 0xb856
jne 0x10047833
mov dword [ebp - 0x948], 1
jmp 0x1004783a
and dword [ebp - 0x948], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0xc28], eax
cmp dword [ebp - 0x1c], 1
jl 0x10047855
mov dword [ebp - 0x4e8], 1
jmp 0x1004785c
and dword [ebp - 0x4e8], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x4e8], eax
je 0x10047873
mov dword [ebp - 0x738], 1
jmp 0x1004787a
and dword [ebp - 0x738], 0
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x738]
je 0x10047891
mov dword [ebp - 0x4f0], 1
jmp 0x10047898
and dword [ebp - 0x4f0], 0
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x4f0]
jg 0x100478af
mov dword [ebp - 0x678], 1
jmp 0x100478b6
and dword [ebp - 0x678], 0
mov eax, dword [ebp - 0x678]
mov dword [ebp - 0x4f8], eax
cmp dword [ebp - 0x4f8], 0
je 0x100478dd
cmp dword [ebp - 0x1c], 0
je 0x100478dd
mov dword [ebp - 0x7d0], 1
jmp 0x100478e4
and dword [ebp - 0x7d0], 0
cmp dword [ebp - 0x7d0], 0xf3938425
jbe 0x100478fc
mov dword [ebp - 0x500], 1
jmp 0x10047903
and dword [ebp - 0x500], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1e4]
cmp dword [ebp - 0x500], eax
jge 0x10047924
mov dword [ebp - 0x680], 1
jmp 0x1004792b
and dword [ebp - 0x680], 0
mov eax, dword [ebp - 0x680]
mov dword [ebp - 0x12c], eax
mov dword [ebp - 0x12c], 0
jmp 0x10047950
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0x2b
jne 0x10047ba9
mov dword [ebp - 0x130], 0
mov dword [ebp - 0x330], 0x4045
mov dword [ebp - 0x1e0], 0
jmp 0x1004798a
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 2
jge 0x100479a6
mov eax, dword [ebp - 0x1e0]
mov dword [ebp + eax*4 - 0xa80], 0x78c6aee3
jmp 0x1004797d
mov dword [ebp - 0x1c], 0
jmp 0x100479b6
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jg 0x100479f3
mov dword [ebp - 0x870], 0xffffffff
cmp dword [ebp - 0x870], 0
je 0x100479d1
jmp 0x100479f3
mov byte [ebp - 0xe9], 0
movzx eax, byte [ebp - 0xe9]
test eax, eax
je 0x100479f1
push 0x105
push 0
call fcn.1004514d
pop ecx
pop ecx
jmp 0x100479af
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1e4], 0
je 0x10047b8a
cmp dword [ebp - 0x130], 9
jae 0x10047a1c
mov dword [ebp - 0x508], 1
jmp 0x10047a23
and dword [ebp - 0x508], 0
mov eax, dword [ebp - 0x130]
cmp dword [ebp - 0x508], eax
jl 0x10047a3d
mov dword [ebp - 0x740], 1
jmp 0x10047a44
and dword [ebp - 0x740], 0
mov eax, dword [ebp - 0x130]
cmp eax, dword [ebp - 0x740]
jg 0x10047a5e
mov dword [ebp - 0x510], 1
jmp 0x10047a65
and dword [ebp - 0x510], 0
cmp dword [ebp - 0x510], 0x69a
jle 0x10047a7d
mov dword [ebp - 0x688], 1
jmp 0x10047a84
and dword [ebp - 0x688], 0
mov eax, dword [ebp - 0x688]
mov dword [ebp - 0x330], eax
mov eax, dword [ebp - 0x130]
add eax, dword [ebp - 0x330]
cmp eax, dword [ebp - 0x130]
je 0x10047ab0
and dword [ebp - 0x690], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x690]
mov dword [ebp + eax - 0xa80], ecx
jmp 0x10047943
push dword [ebp - 0x954]
push dword [ebp - 0x880]
call fcn.10041e72
pop ecx
pop ecx
mov dword [ebp - 0x6b8], eax
mov dword [ebp - 0x10], 0x2cb13638
mov dword [ebp - 0x540], 0x5ebae88b
mov dword [ebp - 0x54], 0x3dcdcbd5
mov dword [ebp - 0x7c], 0
jmp 0x10047bea
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 2
jge 0x10047bfd
mov eax, dword [ebp - 0x7c]
mov dword [ebp + eax*4 - 0x68], 0x3342eb9
jmp 0x10047be3
mov dword [ebp - 0x7c], 0
jmp 0x10047c0d
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 2
jge 0x10047c23
mov eax, dword [ebp - 0x7c]
mov dword [ebp + eax*4 - 0x944], 0x9980a6f8
jmp 0x10047c06
mov dword [ebp - 0x10], 1
jmp 0x10047c33
cmp dword [ebp - 0x10], 0
jl 0x10047d50
mov dword [ebp - 0x528], 0xffffffff
mov dword [ebp - 0x254], 0
jmp 0x10047c60
mov eax, dword [ebp - 0x254]
inc eax
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 1
jge 0x10047c7c
mov eax, dword [ebp - 0x254]
mov dword [ebp + eax*4 - 0x988], 0xa7b7e80d
jmp 0x10047c53
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x68], 7
je 0x10047c92
mov dword [ebp - 0x748], 1
jmp 0x10047c99
and dword [ebp - 0x748], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x68]
mov dword [ebp - 0x528], eax
mov eax, dword [ebp - 0x528]
cmp dword [ebp - 0x748], eax
jge 0x10047cd0
mov dword [ebp - 0x10], 0
jmp 0x10047d60
cmp dword [ebp - 0x10], 1
jg 0x100481d7
mov dword [ebp - 0xc4], 0
mov dword [ebp - 0x7a8], 0
mov dword [ebp - 0x990], 0xc2878486
mov dword [ebp - 0xac0], 0x9aa6b35e
mov dword [ebp - 0xabc], 0x9aa6b35e
mov dword [ebp - 0xab8], 0x9aa6b35e
mov dword [ebp - 0xab4], 0x9aa6b35e
mov dword [ebp - 0x96c], 0
mov dword [ebp - 0x1ec], 0
jmp 0x10047dd3
cmp dword [ebp - 0x1ec], 1
jge 0x10047def
mov eax, dword [ebp - 0xf0]
mov ecx, dword [ebp - 0x6b8]
mov dword [eax + 8], ecx
push 0xf
push 5
call fcn.10041e72
pop ecx
pop ecx
add eax, dword [ebp - 0x6b8]
mov ecx, dword [ebp - 0x18]
mov dword [ecx + 4], eax
and dword [ebp - 0x154], 0
mov dword [ebp - 0x340], 0x20d7
mov dword [ebp - 0x158], 0x1c234ac0
mov dword [ebp - 0x8a8], 0
mov dword [ebp - 0x3c], 0
jmp 0x10048232
cmp dword [ebp - 0x3c], 1
jge 0x10048248
mov byte [ebp - 0xc9], 0
movzx eax, byte [ebp - 0xc9]
test eax, eax
je 0x1004b614
push 0x25c5
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret