Function at 0x10043c2a
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1007dadd
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x538
and dword [ebp - 0x178], 0
mov dword [ebp - 0x54], 0x5020f89b
mov dword [ebp - 0x80], 0x4309642e
mov dword [ebp - 0x2b0], 7
mov dword [ebp - 0x348], 0xcc5c6a3f
mov dword [ebp - 0xac], 0
jmp 0x10043c8a
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 3
jge 0x10043ca6
mov eax, dword [ebp - 0xac]
mov dword [ebp + eax*4 - 0x3d0], 0xdc85f70a
jmp 0x10043c7d
mov dword [ebp - 0x54], 0
jmp 0x10043cb6
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 2
jg 0x10043e29
mov dword [ebp - 0x184], 4
mov dword [ebp - 0x340], 0xdfadf628
mov dword [ebp - 0x14c], 0xb8b78acc
mov dword [ebp - 0x42c], 0xffffffff
mov dword [ebp - 0x40c], 0xffffffff
mov dword [ebp - 0xc0], 0
jmp 0x10043d0b
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 3
jge 0x10043d27
mov eax, dword [ebp - 0xc0]
mov dword [ebp + eax*4 - 0x544], 1
jmp 0x10043cfe
mov eax, dword [ebp - 0x54]
cmp dword [ebp + eax*4 - 0x3d0], 0
jae 0x10043d40
mov dword [ebp - 0x198], 1
jmp 0x10043d47
and dword [ebp - 0x198], 0
cmp dword [ebp - 0x198], 0xfa2fafd1
jb 0x10043d5f
mov dword [ebp - 0x2f0], 1
jmp 0x10043d66
and dword [ebp - 0x2f0], 0
mov eax, dword [ebp - 0x2f0]
mov dword [ebp - 0x184], eax
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
js 0x10043d87
mov dword [ebp - 0x320], 1
jmp 0x10043d8e
and dword [ebp - 0x320], 0
mov eax, dword [ebp - 0x2b0]
mov dword [ebp - 0x410], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3d0]
mov dword [ebp - 0x418], eax
mov eax, dword [ebp - 0x340]
mov dword [ebp - 0x420], eax
mov eax, dword [ebp - 0x348]
mov dword [ebp - 0x428], eax
mov eax, dword [ebp - 0x184]
add eax, 7
cmp eax, 0xe60d
jne 0x10043de1
mov dword [ebp - 0x2a8], 1
jmp 0x10043de8
and dword [ebp - 0x2a8], 0
mov eax, dword [ebp - 0x2a8]
mov dword [ebp - 0x14c], eax
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x430], eax
mov eax, dword [ebp - 0x2b0]
mov dword [ebp - 0x438], eax
mov eax, dword [ebp - 0x80]
sub eax, 0x47d17017
imul eax, eax, 0xfab8
mov ecx, dword [ebp - 0x54]
mov dword [ebp + ecx*4 - 0x3d0], eax
jmp 0x10043caf
mov dword [ebp - 0x38c], 4
mov dword [ebp - 0x46c], 0xb7d8cf4c
mov dword [ebp - 0x474], 0x959310c1
mov dword [ebp - 0x394], 4
mov dword [ebp - 0x47c], 6
mov dword [ebp - 0x74], 0
jmp 0x10043e6b
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 2
jge 0x10043e81
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0x3ac], 0xfffc
jmp 0x10043e64
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3ac], 0
je 0x10043f9f
mov dword [ebp - 0x88], 0x9d29be1d
mov dword [ebp - 0x484], 0xfffffff6
mov dword [ebp - 0x48c], 0x45fe46c2
mov dword [ebp - 0x30], 0
jmp 0x10043ec3
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 1
jge 0x10043ed9
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x494], 0x5ccb9725
jmp 0x10043ebc
mov dword [ebp - 0x30], 0
jmp 0x10043ee9
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 2
jge 0x10043eff
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x3c4], 0x64a11600
jmp 0x10043ee2
mov dword [ebp - 0x88], 0x14
jmp 0x10043f18
mov eax, dword [ebp - 0x88]
dec eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0xfffffff7
jl 0x10043f9d
mov dword [ebp - 0x49c], 0xafe30f58
mov dword [ebp - 0x4a8], 0x1c97412d
mov dword [ebp - 0xb4], 0
jmp 0x10043f4e
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 2
jge 0x10043f6a
mov eax, dword [ebp - 0xb4]
mov dword [ebp + eax*4 - 0x508], 0x8e9646b8
jmp 0x10043f41
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3ac]
mov dword [ebp - 0x38c], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3c4]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x3c4], eax
jmp 0x10043f0b
jmp 0x10043fb6
mov byte [ebp - 0x4a], 0
push 0
lea eax, [ebp - 0x4a]
push eax
push 0x5cdf
call fcn.1004635c
add esp, 0xc
lea eax, [ebp - 0x394]
push eax
push 0
push 0x472d
push 0x7e95
call fcn.100460f4
add esp, 0x10
mov dword [ebp - 0x18], 2
mov dword [ebp - 0x194], 0xffff
mov dword [ebp - 0x2ac], 7
mov dword [ebp - 0x398], 8
mov dword [ebp - 0x334], 0
mov dword [ebp - 0x450], 0xa67d
mov dword [ebp - 0x90], 0
jmp 0x10044023
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 1
jge 0x1004403c
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0x38], 0xa8e
jmp 0x10044016
mov dword [ebp - 0x18], 0
jmp 0x1004404c
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jl 0x10044317
mov dword [ebp - 0x300], 0xd947597a
mov dword [ebp - 0x110], 0xc9d94031
mov dword [ebp - 0x98], 0x4186
mov dword [ebp - 0x2c8], 0x9b8842b4
mov dword [ebp - 0xbc], 0
jmp 0x10044097
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 1
jge 0x100440b3
mov eax, dword [ebp - 0xbc]
mov dword [ebp + eax*4 - 0x378], 0xa4d9a54e
jmp 0x1004408a
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x38], 0
jne 0x100440c9
mov dword [ebp - 0x2e8], 1
jmp 0x100440d0
and dword [ebp - 0x2e8], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x38]
sub eax, 0xcac3
mov dword [ebp - 0x154], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x154]
mov dword [ebp + eax - 0x378], ecx
mov eax, dword [ebp - 0x110]
cmp dword [ebp - 0x154], eax
jg 0x1004410f
mov dword [ebp - 0x2b8], 1
jmp 0x10044116
and dword [ebp - 0x2b8], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x38]
cmp dword [ebp - 0x2b8], eax
jg 0x10044131
mov dword [ebp - 0x15c], 1
jmp 0x10044138
and dword [ebp - 0x15c], 0
mov eax, dword [ebp - 0x15c]
neg eax
imul eax, eax, 0x4692
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x38]
jle 0x1004415e
mov dword [ebp - 0x2c0], 1
jmp 0x10044165
and dword [ebp - 0x2c0], 0
mov eax, dword [ebp - 0x98]
add eax, dword [ebp - 0x2c0]
jne 0x1004418a
or eax, 0xffffffff
jne 0x1004418a
cmp dword [ebp - 0x110], 0
jne 0x1004418a
and dword [ebp - 0x164], 0
jmp 0x10044194
mov dword [ebp - 0x164], 1
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0x2c8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x38]
cmp dword [ebp - 0x2c8], eax
jle 0x100441be
mov dword [ebp - 0x16c], 1
jmp 0x100441c5
and dword [ebp - 0x16c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x38]
cmp dword [ebp - 0x16c], eax
je 0x100441e3
mov dword [ebp - 0x2d0], 1
jmp 0x100441ea
and dword [ebp - 0x2d0], 0
cmp dword [ebp - 0x2d0], 0xffff
jb 0x10044202
mov dword [ebp - 0x174], 1
jmp 0x10044209
and dword [ebp - 0x174], 0
mov eax, dword [ebp - 0x174]
add eax, 9
cmp eax, dword [ebp - 0x18]
jle 0x1004422c
mov eax, 0x6983
test eax, eax
je 0x1004422c
mov dword [ebp - 0x2d8], 1
jmp 0x10044233
and dword [ebp - 0x2d8], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x38]
cmp eax, dword [ebp - 0x2d8]
je 0x10044257
cmp dword [ebp - 0x98], 0
je 0x10044257
mov dword [ebp - 0x17c], 1
jmp 0x1004425e
and dword [ebp - 0x17c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x38]
cmp dword [ebp - 0x17c], eax
jge 0x1004427c
mov dword [ebp - 0x2e0], 1
jmp 0x10044283
and dword [ebp - 0x2e0], 0
mov eax, dword [ebp - 0x98]
add eax, dword [ebp - 0x2e0]
cmp eax, dword [ebp - 0x110]
je 0x100442a3
mov dword [ebp - 0x18c], 1
jmp 0x100442aa
and dword [ebp - 0x18c], 0
mov eax, dword [ebp - 0x2e8]
mov dword [ebp - 0x300], eax
mov eax, dword [ebp - 0x300]
sub eax, dword [ebp - 0x18c]
cmp eax, 0x30b5
jge 0x100442d5
mov dword [ebp - 0x338], 1
jmp 0x100442dc
and dword [ebp - 0x338], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x478], eax
mov eax, dword [ebp - 0x98]
cmp dword [ebp - 0x194], eax
jne 0x100442ff
mov dword [ebp - 0x24c], 1
jmp 0x10044306
and dword [ebp - 0x24c], 0
mov eax, dword [ebp - 0x24c]
mov dword [ebp - 0x2ac], eax
jmp 0x10044045
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x414], eax
mov eax, 0x463028ec
sub eax, dword [ebp - 0x2ac]
js 0x1004433c
mov dword [ebp - 0x19c], 1
jmp 0x10044343
and dword [ebp - 0x19c], 0
cmp dword [ebp - 0x19c], 1
ja 0x10044358
mov dword [ebp - 0x32c], 1
jmp 0x1004435f
and dword [ebp - 0x32c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x38]
mov dword [ebp - 0x4a0], eax
mov eax, dword [ebp - 0x398]
mov dword [ebp - 0x41c], eax
imul eax, dword [ebp - 0x334], 0xf2b6
cmp eax, 0xbccb
jne 0x10044398
mov dword [ebp - 0x254], 1
jmp 0x1004439f
and dword [ebp - 0x254], 0
mov eax, dword [ebp - 0x254]
mov dword [ebp - 0x18], eax
mov byte [ebp - 0x10c], 0x15
mov byte [ebp - 0x10b], 0x7a
mov byte [ebp - 0x10a], 0x12
mov byte [ebp - 0x109], 5
mov byte [ebp - 0x108], 0x14
mov byte [ebp - 0x107], 6
mov byte [ebp - 0x106], 4
mov byte [ebp - 0x105], 0x10
mov byte [ebp - 0x104], 0x11
mov byte [ebp - 0x103], 0x17
mov byte [ebp - 0x102], 0x10
mov byte [ebp - 0x101], 3
mov byte [ebp - 0x100], 0x17
mov byte [ebp - 0xff], 9
mov byte [ebp - 0xfe], 6
mov byte [ebp - 0xfd], 0x1f
mov byte [ebp - 0xfc], 7
mov byte [ebp - 0xfb], 0xf
mov byte [ebp - 0xfa], 0xf
mov byte [ebp - 0xf9], 0x18
mov byte [ebp - 0xf8], 0x19
mov byte [ebp - 0xf7], 0xa
mov byte [ebp - 0xf6], 0
mov byte [ebp - 0xf5], 0x1b
mov byte [ebp - 0xf4], 0x13
mov byte [ebp - 0xf3], 0x15
mov byte [ebp - 0xf2], 1
mov byte [ebp - 0xf1], 0x16
mov byte [ebp - 0xf0], 0x16
mov byte [ebp - 0xef], 0x15
mov byte [ebp - 0xee], 2
mov byte [ebp - 0xed], 0x14
mov byte [ebp - 0xec], 0xe
mov byte [ebp - 0xeb], 0xc
mov byte [ebp - 0xea], 0xb
mov byte [ebp - 0xe9], 3
mov byte [ebp - 0xe8], 0xa
mov byte [ebp - 0xe7], 7
mov byte [ebp - 0xe6], 5
mov byte [ebp - 0xe5], 0xd
mov byte [ebp - 0xe4], 9
mov byte [ebp - 0xe3], 0xc
mov byte [ebp - 0xe2], 0xd
mov byte [ebp - 0xe1], 4
mov byte [ebp - 0xe0], 2
mov byte [ebp - 0xdf], 0xe8
mov byte [ebp - 0xde], 0x82
mov byte [ebp - 0xdd], 3
mov byte [ebp - 0xdc], 0xa
mov byte [ebp - 0xdb], 0xc
mov byte [ebp - 0xda], 9
mov byte [ebp - 0xd9], 0x18
mov byte [ebp - 0xd8], 0x14
mov byte [ebp - 0xd7], 8
mov byte [ebp - 0xd6], 0x10
mov dword [ebp - 0x14], 0xe76f5020
mov dword [ebp - 0x28], 0xd4309642
mov dword [ebp - 0x6c], 0xfffffffa
mov dword [ebp - 0x1ec], 0xffffffff
mov dword [ebp - 0x34c], 8
mov dword [ebp - 0xc4], 0
jmp 0x1004456b
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 4
jge 0x10044587
mov eax, dword [ebp - 0xc4]
mov dword [ebp + eax*4 - 0x4c0], 0xdc85
jmp 0x1004455e
mov dword [ebp - 0x14], 0
jmp 0x10044597
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jg 0x100449e2
mov dword [ebp - 0x58], 1
mov dword [ebp - 0x50], 0xffffffff
mov dword [ebp - 0x380], 0x79a20b28
mov dword [ebp - 0x344], 1
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x480], eax
cmp dword [ebp - 0x58], 0
je 0x100445e4
cmp dword [ebp - 0x58], 0
je 0x100445e4
mov dword [ebp - 0x1a4], 1
jmp 0x100445eb
and dword [ebp - 0x1a4], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x1a4], eax
jl 0x10044602
mov dword [ebp - 0x2dc], 1
jmp 0x10044609
and dword [ebp - 0x2dc], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x4c0]
cmp dword [ebp - 0x2dc], eax
je 0x1004462a
mov dword [ebp - 0x1ac], 1
jmp 0x10044631
and dword [ebp - 0x1ac], 0
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x1ac], eax
jl 0x10044648
mov dword [ebp - 0x25c], 1
jmp 0x1004464f
and dword [ebp - 0x25c], 0
cmp dword [ebp - 0x25c], 0
je 0x10044664
mov dword [ebp - 0x1b4], 1
jmp 0x1004466b
and dword [ebp - 0x1b4], 0
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x50], eax
jne 0x10044688
mov dword [ebp - 0x2b4], 1
jmp 0x1004468f
and dword [ebp - 0x2b4], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x2b4], eax
jne 0x100446a6
mov dword [ebp - 0x1bc], 1
jmp 0x100446ad
and dword [ebp - 0x1bc], 0
mov eax, dword [ebp - 0x1bc]
mov dword [ebp - 0x380], eax
cmp dword [ebp - 0x28], 0
jne 0x100446d0
mov dword [ebp - 0x50], 5
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x4c0], 0x1540
mov eax, 0x1540
test eax, eax
jne 0x1004471c
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x58], eax
jl 0x100446fb
mov dword [ebp - 0x264], 1
jmp 0x10044702
and dword [ebp - 0x264], 0
mov eax, dword [ebp - 0x264]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x50]
jne 0x1004471c
and dword [ebp - 0x1c4], 0
jmp 0x10044726
mov dword [ebp - 0x1c4], 1
mov eax, dword [ebp - 0x58]
sub eax, dword [ebp - 0x1c4]
sub eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x6c]
test eax, eax
je 0x1004487c
mov dword [ebp - 0x33c], 1
mov dword [ebp - 0x2f4], 0xd06de21e
mov dword [ebp - 0x274], 4
mov eax, dword [ebp - 0x33c]
mov dword [ebp - 0x2f4], eax
mov eax, dword [ebp - 0x2f4]
cmp dword [ebp - 0x28], eax
jle 0x1004477f
mov dword [ebp - 0x1cc], 1
jmp 0x10044786
and dword [ebp - 0x1cc], 0
cmp dword [ebp - 0x1cc], 0
jl 0x1004479b
mov dword [ebp - 0x26c], 1
jmp 0x100447a2
and dword [ebp - 0x26c], 0
mov eax, dword [ebp - 0x50]
sub eax, dword [ebp - 0x26c]
imul eax, dword [ebp - 0x14]
test eax, eax
jb 0x100447bf
mov dword [ebp - 0x1d4], 1
jmp 0x100447c6
and dword [ebp - 0x1d4], 0
mov eax, dword [ebp - 0x1d4]
sub eax, 6
cmp eax, 7
jge 0x100447e0
mov dword [ebp - 0x2bc], 1
jmp 0x100447e7
and dword [ebp - 0x2bc], 0
cmp dword [ebp - 0x2bc], 0x70bb
jne 0x100447ff
mov dword [ebp - 0x1dc], 1
jmp 0x10044806
and dword [ebp - 0x1dc], 0
mov eax, dword [ebp - 0x1dc]
mov dword [ebp - 0x274], eax
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x274], eax
jle 0x10044829
mov dword [ebp - 0x35c], 1
jmp 0x10044830
and dword [ebp - 0x35c], 0
mov eax, 0xb1a73b02
cmp eax, 0xffffffff
ja 0x10044846
mov dword [ebp - 0x1e4], 1
jmp 0x1004484d
and dword [ebp - 0x1e4], 0
mov eax, dword [ebp - 0x1ec]
cmp dword [ebp - 0x1e4], eax
jne 0x10044867
mov dword [ebp - 0x2e4], 1
jmp 0x1004486e
and dword [ebp - 0x2e4], 0
mov eax, dword [ebp - 0x2e4]
mov dword [ebp - 0x28], eax
jmp 0x100449dd
mov dword [ebp - 0xa0], 0
jmp 0x10044895
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 2
jge 0x100448b1
mov eax, dword [ebp - 0xa0]
mov dword [ebp + eax*4 - 0x3bc], 0xfffffffb
jmp 0x10044888
push 0xa60
push 1
call fcn.10043b4e
pop ecx
pop ecx
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x3bc], 0
jne 0x1004495e
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x6c], eax
je 0x100448ed
cmp dword [ebp - 0x344], 0
jne 0x100448ed
and dword [ebp - 0x27c], 0
jmp 0x100448f7
mov dword [ebp - 0x27c], 1
mov eax, dword [ebp - 0x1ec]
cmp dword [ebp - 0x27c], eax
jl 0x10044911
mov dword [ebp - 0x1f4], 1
jmp 0x10044918
and dword [ebp - 0x1f4], 0
mov eax, dword [ebp - 0x1f4]
add eax, 3
cmp eax, dword [ebp - 0x50]
jle 0x10044932
mov dword [ebp - 0x36c], 1
jmp 0x10044939
and dword [ebp - 0x36c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3bc]
mov dword [ebp - 0x424], eax
mov eax, 0x2a1bf334
test eax, eax
jne 0x1004495e
and dword [ebp - 0x2c4], 0
jmp 0x10044968
mov dword [ebp - 0x2c4], 1
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x4c0]
cmp eax, dword [ebp - 0x2c4]
jle 0x10044986
mov dword [ebp - 0x1fc], 1
jmp 0x1004498d
and dword [ebp - 0x1fc], 0
mov eax, dword [ebp - 0x6c]
imul eax, dword [ebp - 0x1fc]
cmp eax, 5
je 0x100449a8
mov dword [ebp - 0x284], 1
jmp 0x100449af
and dword [ebp - 0x284], 0
imul eax, dword [ebp - 0x34c], 0xf7c1
cmp eax, dword [ebp - 0x284]
jge 0x100449cd
mov dword [ebp - 0x204], 1
jmp 0x100449d4
and dword [ebp - 0x204], 0
mov eax, dword [ebp - 0x204]
mov dword [ebp - 0x6c], eax
jmp 0x10044590
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x10c]
or eax, 0xc
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x10c]
and ecx, 0xc
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x10c]
mov byte [ebp + ecx - 0x404], al
mov dword [ebp - 0x10], 2
and dword [ebp - 0xcc], 0
jmp 0x10044a33
mov eax, dword [ebp - 0x10]
inc eax
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0x37
jae 0x10044d75
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x10c]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x10], eax
jne 0x10044c8f
mov eax, dword [ebp - 0x10]
movzx eax, byte [ebp + eax - 0x10c]
inc eax
mov dword [ebp - 0xcc], eax
mov eax, dword [ebp - 0x10]
movzx eax, byte [ebp + eax - 0x10c]
mov ecx, dword [ebp - 0x10]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x2c], 0
jmp 0x10044a96
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x10044aac
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x3a4], 0xfffffff6
jmp 0x10044a8f
mov dword [ebp - 0x2c], 0
jmp 0x10044abc
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 4
jge 0x10044ad2
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x530], 0xfffffff9
jmp 0x10044ab5
mov byte [ebp - 0x48], 0
lea eax, [ebp - 0x48]
push eax
push 0
call fcn.10046296
pop ecx
pop ecx
mov dword [ebp - 0x1c], 0
jmp 0x10044af3
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jg 0x10044c8a
mov dword [ebp - 0x2ec], 0xcadfb1a
mov byte [ebp - 0x47], 0
movzx eax, byte [ebp - 0x47]
test eax, eax
je 0x10044b20
push 0
push 0x15e3
call dword [sym.imp.KERNEL32.dll_GetCPInfo]
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x3a4], 0
je 0x10044c73
mov dword [ebp - 0x2cc], 0
mov dword [ebp - 0x20c], 0x52027495
mov dword [ebp - 0x214], 0x22a5bc42
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x3a4], 0xfffc
je 0x10044b6b
mov dword [ebp - 0x304], 1
jmp 0x10044b72
and dword [ebp - 0x304], 0
cmp dword [ebp - 0x304], 0x986e
jl 0x10044b8b
xor eax, eax
jne 0x10044b8b
and dword [ebp - 0x28c], 0
jmp 0x10044b95
mov dword [ebp - 0x28c], 1
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
imul eax, dword [ebp + ecx*4 - 0x3a4]
mov dword [ebp - 0x20c], eax
mov eax, dword [ebp - 0x20c]
sub eax, dword [ebp - 0x28c]
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 0
cmp dword [ebp - 0x2cc], 0
je 0x10044be0
mov eax, 0x1a6b
test eax, eax
je 0x10044be0
mov dword [ebp - 0x21c], 1
jmp 0x10044be7
and dword [ebp - 0x21c], 0
mov eax, dword [ebp - 0x2cc]
cmp eax, dword [ebp - 0x21c]
jne 0x10044c01
mov dword [ebp - 0x294], 1
jmp 0x10044c08
and dword [ebp - 0x294], 0
cmp dword [ebp - 0x294], 0xffff
jb 0x10044c20
mov dword [ebp - 0x130], 1
jmp 0x10044c27
and dword [ebp - 0x130], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x130]
mov dword [ebp + eax - 0x3a4], ecx
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x130], eax
jge 0x10044c51
mov dword [ebp - 0x224], 1
jmp 0x10044c58
and dword [ebp - 0x224], 0
mov eax, dword [ebp - 0x224]
sub eax, dword [ebp - 0x2ec]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x530], eax
jmp 0x10044c85
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x3a4]
mov dword [ebp - 0x2ec], eax
jmp 0x10044aec
jmp 0x10044a2b
mov eax, dword [ebp - 0x10]
movzx eax, byte [ebp + eax - 0x10b]
mov ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 0xcc]
movzx ecx, byte [ebp + ecx - 0x10e]
movsx ecx, byte [ebp + ecx - 0x404]
or eax, ecx
mov ecx, dword [ebp - 0x10]
movzx ecx, byte [ebp + ecx - 0x10b]
mov edx, dword [ebp - 0x10]
sub edx, dword [ebp - 0xcc]
movzx edx, byte [ebp + edx - 0x10e]
movsx edx, byte [ebp + edx - 0x404]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x10]
movzx ecx, byte [ebp + ecx - 0x10c]
mov byte [ebp + ecx - 0x404], al
mov dword [ebp - 0x22c], 0xcd53bc6e
mov dword [ebp - 0x34], 0
jmp 0x10044d09
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 1
jge 0x10044d1f
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x4a4], 0xc0ae9714
jmp 0x10044d02
mov dword [ebp - 0x34], 0
jmp 0x10044d2f
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 2
jge 0x10044d45
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x538], 0xfffffffb
jmp 0x10044d28
mov eax, dword [ebp - 0x22c]
dec eax
mov dword [ebp - 0x22c], eax
push 0
call fcn.100462d1
pop ecx
lea eax, [ebp - 0xcc]
push eax
push 0x31bc
push 0
call fcn.10046243
add esp, 0xc
jmp 0x10044a2b
mov dword [ebp - 0x44], 0x92758e92
mov dword [ebp - 0x11c], 0xfffffff6
mov dword [ebp - 0x1e8], 0x88a9
mov dword [ebp - 0x12c], 8
mov dword [ebp - 0x200], 0xffffffff
mov dword [ebp - 0x218], 0
mov dword [ebp - 0x408], 1
mov dword [ebp - 0x488], 0xb4ff
mov dword [ebp - 0x1f8], 0xfffffffe
mov dword [ebp - 0x20], 0
jmp 0x10044ddc
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x10044df2
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x310], 0x4e1a
jmp 0x10044dd5
mov dword [ebp - 0x20], 0
jmp 0x10044e02
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x10044e18
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x368], 0
jmp 0x10044dfb
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x310], 0
je 0x10044ff9
mov dword [ebp - 0x180], 1
mov dword [ebp - 0xa8], 0
jmp 0x10044e4f
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 3
jge 0x10044e6b
mov eax, dword [ebp - 0xa8]
mov dword [ebp + eax*4 - 0x3e8], 0x8edfe012
jmp 0x10044e42
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x310]
mov dword [ebp - 0x434], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x310]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
add eax, 6
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x310]
jl 0x10044eaf
mov dword [ebp - 0x29c], 1
jmp 0x10044eb6
and dword [ebp - 0x29c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x310]
cmp dword [ebp - 0x29c], eax
je 0x10044ed7
mov dword [ebp - 0x234], 1
jmp 0x10044ede
and dword [ebp - 0x234], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3e8]
cmp dword [ebp - 0x234], eax
jne 0x10044eff
mov dword [ebp - 0x2d4], 1
jmp 0x10044f06
and dword [ebp - 0x2d4], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x3e8]
cmp eax, dword [ebp - 0x2d4]
je 0x10044f26
mov dword [ebp - 0x23c], 1
jmp 0x10044f2d
and dword [ebp - 0x23c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3e8]
cmp dword [ebp - 0x23c], eax
jge 0x10044f52
push 6
pop eax
test eax, eax
jne 0x10044f52
and dword [ebp - 0x2a4], 0
jmp 0x10044f5c
mov dword [ebp - 0x2a4], 1
mov eax, dword [ebp - 0x2a4]
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0x180]
cmp dword [ebp - 0x11c], eax
je 0x10044f82
mov dword [ebp - 0x244], 1
jmp 0x10044f89
and dword [ebp - 0x244], 0
cmp dword [ebp - 0x244], 0xda62
je 0x10044faa
cmp dword [ebp - 0x180], 0
je 0x10044faa
mov dword [ebp - 0x188], 1
jmp 0x10044fb1
and dword [ebp - 0x188], 0
cmp dword [ebp - 0x188], 0
jae 0x10044fc6
mov dword [ebp - 0x374], 1
jmp 0x10044fcd
and dword [ebp - 0x374], 0
mov eax, dword [ebp - 0x1e8]
mov dword [ebp - 0x44c], eax
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x368], 1
mov dword [ebp - 0x12c], 1
jmp 0x10045357
mov dword [ebp - 0x134], 9
mov dword [ebp - 0x1b0], 0x941993e3
mov dword [ebp - 0xd0], 0x120b879b
mov dword [ebp - 0xb0], 0xffffffff
mov dword [ebp - 0x124], 1
mov dword [ebp - 0x1f0], 6
mov dword [ebp - 0x210], 1
mov dword [ebp - 0x44], 2
jmp 0x1004504f
mov eax, dword [ebp - 0x44]
dec eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0
jl 0x10045357
mov dword [ebp - 0xd4], 0
jmp 0x10045072
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 2
jge 0x1004508e
mov eax, dword [ebp - 0xd4]
mov dword [ebp + eax*4 - 0x13c], 0xffffffff
jmp 0x10045065
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x43c], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x310]
mov dword [ebp - 0x454], eax
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x310]
mov dword [ebp - 0x448], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x13c], 0xfffffff9
jge 0x100450e8
mov dword [ebp - 0x190], 1
jmp 0x100450ef
and dword [ebp - 0x190], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x13c]
cmp dword [ebp - 0x190], eax
jne 0x10045119
mov eax, 0x8de61175
test eax, eax
je 0x10045119
mov dword [ebp - 0x140], 1
jmp 0x10045120
and dword [ebp - 0x140], 0
mov eax, dword [ebp - 0x12c]
cmp dword [ebp - 0x140], eax
jle 0x1004513a
mov dword [ebp - 0x1a0], 1
jmp 0x10045141
and dword [ebp - 0x1a0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x13c]
cmp dword [ebp - 0x1a0], eax
jl 0x10045162
mov dword [ebp - 0x1a8], 1
jmp 0x10045169
and dword [ebp - 0x1a8], 0
mov eax, dword [ebp - 0x1a8]
mov dword [ebp - 0x1b0], eax
mov eax, dword [ebp - 0xd0]
cmp dword [ebp - 0x1b0], eax
jne 0x1004518f
mov dword [ebp - 0x1b8], 1
jmp 0x10045196
and dword [ebp - 0x1b8], 0
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x368], 0xe1580eb6
mov eax, dword [ebp - 0x1b8]
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0x11c]
imul eax, dword [ebp - 0xd0]
cmp eax, 0xe1580eb6
jne 0x100451d0
mov dword [ebp - 0x1c0], 1
jmp 0x100451d7
and dword [ebp - 0x1c0], 0
mov eax, dword [ebp - 0xb0]
cmp dword [ebp - 0x1c0], eax
jl 0x100451fe
mov eax, dword [ebp - 0x44]
cmp dword [ebp + eax*4 - 0x368], 0
je 0x100451fe
mov dword [ebp - 0x1c8], 1
jmp 0x10045205
and dword [ebp - 0x1c8], 0
mov eax, dword [ebp - 0xb0]
add eax, dword [ebp - 0x1c8]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x13c]
jle 0x1004522c
mov dword [ebp - 0x1d0], 1
jmp 0x10045233
and dword [ebp - 0x1d0], 0
mov eax, dword [ebp - 0x1d0]
neg eax
mov dword [ebp - 0xb0], eax
mov eax, dword [ebp - 0x218]
cmp dword [ebp - 0xb0], eax
jne 0x1004525b
mov dword [ebp - 0x1d8], 1
jmp 0x10045262
and dword [ebp - 0x1d8], 0
mov eax, dword [ebp - 0x1d8]
dec eax
cmp eax, dword [ebp - 0x12c]
je 0x10045299
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x368], 0
jne 0x10045299
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x368], 0
jne 0x10045299
and dword [ebp - 0x1e0], 0
jmp 0x100452a3
mov dword [ebp - 0x1e0], 1
mov eax, dword [ebp - 0x124]
add eax, dword [ebp - 0x1e0]
mov dword [ebp - 0x124], eax
mov eax, dword [ebp - 0x124]
add eax, dword [ebp - 0x1e8]
mov dword [ebp - 0x1f0], eax
mov eax, dword [ebp - 0x1f0]
mov dword [ebp - 0x1f8], eax
mov eax, dword [ebp - 0x1f8]
mov dword [ebp - 0x200], eax
mov eax, dword [ebp - 0x210]
cmp dword [ebp - 0x200], eax
jl 0x100452f9
mov dword [ebp - 0x358], 1
jmp 0x10045300
and dword [ebp - 0x358], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x13c]
mov dword [ebp - 0x45c], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x13c]
cmp dword [ebp - 0xd0], eax
jle 0x10045334
mov dword [ebp - 0x208], 1
jmp 0x1004533b
and dword [ebp - 0x208], 0
mov eax, dword [ebp - 0x208]
sub eax, dword [ebp - 0x210]
sub eax, 0x18828597
mov dword [ebp - 0x218], eax
jmp 0x10045048
xor eax, eax
inc eax
imul eax, eax, 0x1a
mov byte [ebp + eax - 0x404], 0
mov dword [ebp - 0xc8], 8
mov dword [ebp - 0x37c], 0x981ff29a
mov dword [ebp - 0xb8], 0
jmp 0x10045392
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 3
jge 0x100453ae
mov eax, dword [ebp - 0xb8]
mov dword [ebp + eax*4 - 0x4e8], 0xfffffffe
jmp 0x10045385
mov dword [ebp - 0xc8], 0
jmp 0x100453c7
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 2
jg 0x100454fd
mov dword [ebp - 0x78], 0x3c69aed2
mov dword [ebp - 0x78], 2
jmp 0x100453eb
mov eax, dword [ebp - 0x78]
dec eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0
jl 0x100454f8
mov dword [ebp - 0x24], 0
jmp 0x10045405
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jge 0x1004541b
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x2fc], 0xffffffff
jmp 0x100453fe
mov dword [ebp - 0x24], 0
jmp 0x1004542b
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jge 0x10045441
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x3b4], 0xfffffffd
jmp 0x10045424
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x2fc], 2
jmp 0x1004546f
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2fc]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x2fc], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2fc], 0
jl 0x100454e0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2fc]
cmp dword [ebp + eax*4 - 0x4e8], 0xc751
jl 0x100454a5
mov dword [ebp - 0x220], 1
jmp 0x100454ac
and dword [ebp - 0x220], 0
cmp dword [ebp - 0x220], 0
jl 0x100454c1
mov dword [ebp - 0x228], 1
jmp 0x100454c8
and dword [ebp - 0x228], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x228]
mov dword [ebp + eax - 0x3b4], ecx
jmp 0x10045454
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3b4]
mov dword [ebp - 0x37c], eax
jmp 0x100453e4
jmp 0x100453ba
lea eax, [ebp - 0x404]
push eax
lea ecx, [ebp - 0x500]
call fcn.100278e1
and dword [ebp - 4], 0
and dword [ebp - 0x84], 0
jmp 0x10045529
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0x1b
jae 0x1004573c
mov dword [ebp - 0x5c], 0xce9d05ba
mov dword [ebp - 0x114], 0x60cbeb96
cmp dword [ebp - 0x5c], 0x84217059
jb 0x1004555c
mov dword [ebp - 0x230], 1
jmp 0x10045563
and dword [ebp - 0x230], 0
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x230], eax
jle 0x1004557a
mov dword [ebp - 0x238], 1
jmp 0x10045581
and dword [ebp - 0x238], 0
mov eax, dword [ebp - 0x238]
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 7
jae 0x100455a2
mov dword [ebp - 0x240], 1
jmp 0x100455a9
and dword [ebp - 0x240], 0
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x240], eax
jle 0x100455c0
mov dword [ebp - 0x248], 1
jmp 0x100455c7
and dword [ebp - 0x248], 0
mov eax, dword [ebp - 0x248]
sub eax, 0x15f2fe73
cmp eax, 1
jae 0x100455e3
mov dword [ebp - 0x250], 1
jmp 0x100455ea
and dword [ebp - 0x250], 0
mov eax, dword [ebp - 0x5c]
cmp eax, dword [ebp - 0x250]
jne 0x10045601
mov dword [ebp - 0x258], 1
jmp 0x10045608
and dword [ebp - 0x258], 0
cmp dword [ebp - 0x258], 1
jl 0x1004561d
mov dword [ebp - 0x260], 1
jmp 0x10045624
and dword [ebp - 0x260], 0
mov eax, dword [ebp - 0x5c]
imul eax, dword [ebp - 0x5c]
cmp eax, dword [ebp - 0x260]
jl 0x100456f8
mov dword [ebp - 0x7c], 0
jmp 0x10045647
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 3
jge 0x1004565d
mov eax, dword [ebp - 0x7c]
mov dword [ebp + eax*4 - 0x3dc], 1
jmp 0x10045640
mov byte [ebp - 0x46], 0
movzx eax, byte [ebp - 0x46]
test eax, eax
je 0x10045673
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3dc], 0
jne 0x1004568f
mov dword [ebp - 0x268], 1
jmp 0x10045696
and dword [ebp - 0x268], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3dc]
cmp eax, dword [ebp - 0x268]
jg 0x100456b7
mov dword [ebp - 0x270], 1
jmp 0x100456be
and dword [ebp - 0x270], 0
cmp dword [ebp - 0x270], 0x45cb
jle 0x100456d6
mov dword [ebp - 0x278], 1
jmp 0x100456dd
and dword [ebp - 0x278], 0
mov eax, dword [ebp - 0x114]
add eax, dword [ebp - 0x278]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x3dc], eax
jmp 0x10045729
mov dword [ebp - 0x390], 0xfff8
mov dword [ebp - 0x384], 0xccedb775
push 0
push 0x6d1d
lea eax, [ebp - 0x384]
push eax
lea eax, [ebp - 0x390]
push eax
call fcn.10046ce2
add esp, 0x10
mov eax, dword [ebp - 0x84]
mov byte [ebp + eax - 0x404], 0
jmp 0x1004551c
push 0x10007c6a
lea ecx, [ebp - 0x4dc]
call fcn.100278e1
mov byte [ebp - 4], 1
mov dword [ebp - 0x60], 9
mov dword [ebp - 0x8c], 0
jmp 0x10045770
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 4
jge 0x1004578c
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0x520], 0xb9b5
jmp 0x10045763
mov dword [ebp - 0x60], 0
jmp 0x1004579c
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 3
jg 0x100457b3
mov eax, dword [ebp - 0x60]
cmp dword [ebp + eax*4 - 0x520], 0
je 0x100457b1
jmp 0x100457b3
jmp 0x10045795
lea ecx, [ebp - 0x4dc]
call fcn.1001a23c
cmp eax, dword [ebp + 0xc]
je 0x10045a68
mov dword [ebp - 0x64], 0xc85f70ad
mov dword [ebp - 0x370], 0x5e314a5e
mov dword [ebp - 0x464], 0x90c6d21c
mov dword [ebp - 0x4ac], 0
mov dword [ebp - 0x458], 0
mov dword [ebp - 0x388], 0xfffffff8
mov dword [ebp - 0x118], 0xfd03b15a
mov dword [ebp - 0x40], 0
jmp 0x1004581a
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 2
jge 0x10045830
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x444], 0xe780ca9f
jmp 0x10045813
mov dword [ebp - 0x40], 0
jmp 0x10045840
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 2
jge 0x10045856
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x510], 0
jmp 0x10045839
mov dword [ebp - 0x64], 0
jmp 0x10045866
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 1
jne 0x10045a1d
mov dword [ebp - 0x68], 0x58d32ffa
mov dword [ebp - 0x490], 0xb28787d
mov dword [ebp - 0x120], 0xffffffff
mov dword [ebp - 0x128], 0x1462ccd2
mov dword [ebp - 0x68], 0xfffffff6
jmp 0x100458a5
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 2
je 0x1004590c
mov dword [ebp - 0x94], 0xfffffffa
mov dword [ebp - 0x94], 0x1d
jmp 0x100458ce
mov eax, dword [ebp - 0x94]
dec eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0
jle 0x100458f0
mov byte [ebp - 0x4b], 0
push 0x609f
push 0
lea eax, [ebp - 0x4b]
push eax
call fcn.1004615f
add esp, 0xc
jmp 0x100458c1
mov byte [ebp - 0x45], 0
movzx eax, byte [ebp - 0x45]
test eax, eax
je 0x1004590a
push 1
push 0x58ac
call fcn.10043ba4
pop ecx
pop ecx
jmp 0x1004589e
cmp dword [ebp - 0x64], 7
jne 0x1004591e
mov dword [ebp - 0x298], 1
jmp 0x10045925
and dword [ebp - 0x298], 0
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x460], eax
mov eax, dword [ebp - 0x128]
cmp dword [ebp - 0x128], eax
jl 0x10045948
mov dword [ebp - 0x280], 1
jmp 0x1004594f
and dword [ebp - 0x280], 0
mov eax, dword [ebp - 0x280]
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x370], 0xffffffff
jge 0x10045970
mov dword [ebp - 0x288], 1
jmp 0x10045977
and dword [ebp - 0x288], 0
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
imul eax, dword [ebp - 0x288], 0xfffd
cmp dword [ebp - 0x118], eax
jle 0x100459a2
mov dword [ebp - 0x290], 1
jmp 0x100459a9
and dword [ebp - 0x290], 0
cmp dword [ebp - 0x290], 1
jne 0x100459c7
cmp dword [ebp - 0x120], 0
je 0x100459c7
mov dword [ebp - 0x2a0], 1
jmp 0x100459ce
and dword [ebp - 0x2a0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x298]
add ecx, dword [ebp - 0x2a0]
cmp dword [ebp + eax - 0x444], ecx
jg 0x100459f0
cmp dword [ebp - 0x388], 0
cmp dword [ebp - 0x120], 0xfffffff9
jb 0x10045a05
mov dword [ebp - 0x144], 1
jmp 0x10045a0c
and dword [ebp - 0x144], 0
mov eax, dword [ebp - 0x144]
mov dword [ebp - 0x128], eax
jmp 0x1004585f
push 1
lea eax, [ebp - 0x500]
push eax
lea eax, [ebp - 0x324]
push eax
call fcn.10043bd8
add esp, 0xc
push 0x760
lea eax, [ebp - 0x500]
push eax
push 0x4442
lea eax, [ebp - 0x324]
push eax
lea eax, [ebp - 0x4dc]
push eax
push 0
push 0xff9
call fcn.100465d1
add esp, 0x1c
jmp 0x100457b3
mov dword [ebp - 0x3c], 0x8901f2c
mov dword [ebp - 0x9c], 0
jmp 0x10045a88
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 2
jge 0x10045aa4
mov eax, dword [ebp - 0x9c]
mov dword [ebp + eax*4 - 0x354], 1
jmp 0x10045a7b
mov dword [ebp - 0x3c], 1
jmp 0x10045ab4
mov eax, dword [ebp - 0x3c]
dec eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
jl 0x10045ca5
mov dword [ebp - 0x70], 0xfffffffc
mov dword [ebp - 0xa4], 0
jmp 0x10045ade
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 3
jge 0x10045afa
mov eax, dword [ebp - 0xa4]
mov dword [ebp + eax*4 - 0x31c], 0xffffffff
jmp 0x10045ad1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x31c]
mov dword [ebp - 0x4c4], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x354]
mov dword [ebp - 0x468], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x31c]
mov dword [ebp - 0x498], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x354]
cmp dword [ebp - 0x3c], eax
jg 0x10045b51
mov dword [ebp - 0x148], 1
jmp 0x10045b58
and dword [ebp - 0x148], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x31c]
cmp dword [ebp - 0x148], eax
jg 0x10045b79
mov dword [ebp - 0x150], 1
jmp 0x10045b80
and dword [ebp - 0x150], 0
cmp dword [ebp - 0x150], 0xc254
jge 0x10045b98
mov dword [ebp - 0x328], 1
jmp 0x10045b9f
and dword [ebp - 0x328], 0
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x470], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x31c], 0
je 0x10045bd4
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x31c], 0
je 0x10045bd4
mov dword [ebp - 0x158], 1
jmp 0x10045bdb
and dword [ebp - 0x158], 0
mov eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x158]
jge 0x10045bf2
mov dword [ebp - 0x160], 1
jmp 0x10045bf9
and dword [ebp - 0x160], 0
cmp dword [ebp - 0x160], 0xb3493876
jbe 0x10045c11
mov dword [ebp - 0x330], 1
jmp 0x10045c18
and dword [ebp - 0x330], 0
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x4b0], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x354]
cmp dword [ebp - 0x3c], eax
jge 0x10045c3f
mov dword [ebp - 0x168], 1
jmp 0x10045c46
and dword [ebp - 0x168], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x31c]
cmp dword [ebp - 0x168], eax
jle 0x10045c67
mov dword [ebp - 0x170], 1
jmp 0x10045c6e
and dword [ebp - 0x170], 0
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x70], 1
jmp 0x10045c87
mov eax, dword [ebp - 0x70]
dec eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
jl 0x10045ca0
mov byte [ebp - 0x49], 0
lea eax, [ebp - 0x49]
push eax
push 0
call fcn.10046316
pop ecx
pop ecx
jmp 0x10045c80
jmp 0x10045aad
lea eax, [ebp - 0x4dc]
push eax
mov ecx, dword [ebp + 8]
call fcn.10019cdd
mov eax, dword [ebp - 0x178]
or eax, 1
mov dword [ebp - 0x178], eax
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4dc]
call fcn.10019d36
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x500]
call fcn.10019d36
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret