Function at 0x10043041
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1007018e
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x6f8
push esi
mov dword [ebp - 0x29c], 0x98a59c17
mov dword [ebp - 0x14c], 0xe012d2c8
mov dword [ebp - 0x538], 0xffffffff
mov dword [ebp - 0x164], 0x9cf13e13
mov dword [ebp - 0x484], 0x88a97331
mov dword [ebp - 0x480], 0x88a97331
mov dword [ebp - 0x47c], 0x88a97331
mov dword [ebp - 0x478], 0x88a97331
lea ecx, [ebp - 0x125]
call fcn.1000f10c
push eax
lea eax, [ebp - 0x474]
push eax
lea eax, [ebp - 0x484]
push eax
lea ecx, [ebp - 0x6ac]
call fcn.1000f10f
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x450]
call fcn.1000f0d2
and dword [ebp - 4], 0
push 2
lea ecx, [ebp - 0x414]
call fcn.1000f096
mov byte [ebp - 4], 1
mov dword [ebp - 0x388], 1
mov dword [ebp - 0x3c4], 0xffff
mov dword [ebp - 0x2c], 0
jmp 0x1004311e
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jge 0x10043134
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0xf0], 0x49fcfbce
jmp 0x10043117
mov dword [ebp - 0x2c], 0
jmp 0x10043144
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jge 0x1004315a
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x2f0], 0xfffffffe
jmp 0x1004313d
lea eax, [ebp - 0x414]
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.1003b19b
pop ecx
pop ecx
push 1
lea ecx, [ebp - 0x414]
call fcn.1000f0fd
mov dword [ebp - 0xe4], eax
mov eax, dword [ebp - 0xe4]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xe4]
mov dword [ecx], eax
mov eax, dword [ebp - 0xe4]
imul eax, dword [eax], 0xbda1
test eax, eax
jne 0x100431d6
push 3
lea ecx, [ebp - 0x450]
call fcn.1000f0fd
mov ecx, dword [ebp - 0x388]
add ecx, 0x2130
cmp dword [eax], ecx
je 0x100431cd
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2f0], 0
jne 0x100431d6
and dword [ebp - 0x2a8], 0
jmp 0x100431e0
mov dword [ebp - 0x2a8], 1
mov eax, dword [ebp - 0x164]
cmp dword [ebp - 0x2a8], eax
jl 0x100431fa
mov dword [ebp - 0x2e8], 1
jmp 0x10043201
and dword [ebp - 0x2e8], 0
cmp dword [ebp - 0x2e8], 0xfffffffd
jbe 0x10043216
mov dword [ebp - 0x144], 1
jmp 0x1004321d
and dword [ebp - 0x144], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2f0]
cmp dword [ebp - 0x144], eax
jge 0x1004323e
mov dword [ebp - 0x2e0], 1
jmp 0x10043245
and dword [ebp - 0x2e0], 0
imul eax, dword [ebp - 0x2e0], 9
mov dword [ebp - 0x2ec], eax
push 2
lea ecx, [ebp - 0x450]
call fcn.1000f0fd
mov ecx, dword [ebp - 0x2ec]
mov dword [eax], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf0]
mov dword [ebp - 0x14c], eax
imul eax, dword [ebp - 0x14c], 0xde61
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0xf0]
dec ecx
push 4
pop edx
imul edx, edx, 0
mov dword [ebp + edx - 0xf0], ecx
test eax, eax
je 0x100432c7
mov eax, 0x5c875ff9
test eax, eax
je 0x100432c7
push 1
lea ecx, [ebp - 0x450]
call fcn.1000f0fd
cmp dword [eax], 0
jne 0x100432c7
and dword [ebp - 0x22c], 0
jmp 0x100432d1
mov dword [ebp - 0x22c], 1
cmp dword [ebp - 0x22c], 0xb5794199
jae 0x100432e9
mov dword [ebp - 0x154], 1
jmp 0x100432f0
and dword [ebp - 0x154], 0
mov eax, dword [ebp - 0x29c]
cmp dword [ebp - 0x154], eax
jl 0x1004330a
mov dword [ebp - 0x3a4], 1
jmp 0x10043311
and dword [ebp - 0x3a4], 0
push 1
lea ecx, [ebp - 0x414]
call fcn.1000f0fd
cmp dword [eax], 0
jne 0x10043335
cmp dword [ebp - 0x3c4], 0
jne 0x10043335
and dword [ebp - 0x15c], 0
jmp 0x1004333f
mov dword [ebp - 0x15c], 1
mov eax, dword [ebp - 0x29c]
add eax, dword [ebp - 0x15c]
cmp eax, 0x9369
jl 0x1004335e
mov dword [ebp - 0x234], 1
jmp 0x10043365
and dword [ebp - 0x234], 0
mov eax, dword [ebp - 0x234]
mov dword [ebp - 0x164], eax
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x414]
call fcn.1000f0f8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x450]
call fcn.1000f0f8
and dword [ebp - 0x34], 0
push 2
lea ecx, [ebp - 0x438]
call fcn.1000f096
mov dword [ebp - 4], 2
mov dword [ebp - 0x84], 1
push 4
lea ecx, [ebp - 0x4e8]
call fcn.1000f096
mov byte [ebp - 4], 3
push 0x432e
push 1
lea eax, [ebp - 0x3cc]
push eax
push 1
lea eax, [ebp - 0x438]
push eax
call fcn.1003d765
add esp, 0x14
push 0x1af9
push 0x7d0b
lea eax, [ebp - 0x4e8]
push eax
push 1
push 0
push 0x6a52
push 0x2017
lea eax, [ebp - 0x3cc]
push eax
call fcn.1003f927
add esp, 0x20
mov dword [ebp - 0x84], 1
jmp 0x10043428
mov eax, dword [ebp - 0x84]
dec eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0
jl 0x100434c5
mov dword [ebp - 0x5c], 0xbeccce1e
mov dword [ebp - 0x5c], 0
jmp 0x1004344c
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 1
jg 0x100434c0
mov dword [ebp - 0x7c], 1
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x5c]
push eax
push 0x761d
lea eax, [ebp - 0x438]
push eax
lea eax, [ebp - 0x7c]
push eax
push 0
push 0x3814
lea eax, [ebp - 0x4e8]
push eax
push 1
call fcn.1003d98d
add esp, 0x24
mov dword [ebp - 0x7c], 0
jmp 0x1004349c
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0x10
jle 0x100434be
call fcn.10042911
push dword [ebp - 0x5c]
lea ecx, [ebp - 0x438]
call fcn.1000f0fd
cmp dword [eax], 0
je 0x100434bc
jmp 0x100434be
jmp 0x10043495
jmp 0x10043445
jmp 0x1004341b
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x4e8]
call fcn.1000f0f8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x438]
call fcn.1000f0f8
mov dword [ebp - 0x2d4], 0xffffffff
mov dword [ebp - 0x54], 0x4aa4
mov dword [ebp - 0x2a4], 0xb676bd76
mov dword [ebp - 0x184], 0xffffffff
mov dword [ebp - 0x39c], 0xfffffffa
mov dword [ebp - 0x4ac], 0x18da91e5
mov dword [ebp - 0x4a8], 0x18da91e5
mov dword [ebp - 0x4a4], 0x18da91e5
mov dword [ebp - 0x4a0], 0x18da91e5
lea ecx, [ebp - 0xf1]
call fcn.1000f10c
push eax
lea eax, [ebp - 0x49c]
push eax
lea eax, [ebp - 0x4ac]
push eax
lea ecx, [ebp - 0x6c4]
call fcn.1000f10f
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x5f4]
call fcn.1000f0d2
mov dword [ebp - 4], 4
mov dword [ebp - 0x14], 0
jmp 0x10043586
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jge 0x10043599
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x30], 0xef989b1a
jmp 0x1004357f
mov dword [ebp - 0x14], 0
jmp 0x100435a9
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x100435bf
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x3b0], 0x9eb11de2
jmp 0x100435a2
mov dword [ebp - 0x14], 0
jmp 0x100435cf
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x100435e5
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x528], 0x9d1f
jmp 0x100435c8
mov dword [ebp - 0x14], 0
jmp 0x100435f5
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 4
jge 0x1004360b
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x68c], 0x158f
jmp 0x100435ee
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x30]
mov dword [ebp - 0x2d4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x30]
cmp dword [ebp - 0x2d4], eax
jl 0x10043639
mov dword [ebp - 0x174], 1
jmp 0x10043640
and dword [ebp - 0x174], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x30]
mov dword [ebp - 0x50c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x30]
cmp dword [ebp - 0x54], eax
jl 0x1004366b
mov dword [ebp - 0x3d4], 1
jmp 0x10043672
and dword [ebp - 0x3d4], 0
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x514], eax
mov eax, 0x205f5a2f
test eax, eax
je 0x10043696
cmp dword [ebp - 0x54], 0
je 0x10043696
mov dword [ebp - 0x16c], 1
jmp 0x1004369d
and dword [ebp - 0x16c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x30]
cmp eax, dword [ebp - 0x16c]
jle 0x100436bb
mov dword [ebp - 0x23c], 1
jmp 0x100436c2
and dword [ebp - 0x23c], 0
cmp dword [ebp - 0x23c], 0xffffffff
jne 0x100436d7
mov dword [ebp - 0x3dc], 1
jmp 0x100436de
and dword [ebp - 0x3dc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x30]
mov dword [ebp - 0x51c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x54]
cmp dword [ebp + eax - 0x30], ecx
jle 0x10043709
mov dword [ebp - 0x114], 1
jmp 0x10043710
and dword [ebp - 0x114], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x114]
mov dword [ebp + eax - 0x3b0], ecx
mov eax, dword [ebp - 0x174]
imul eax, dword [ebp - 0x114]
cmp eax, dword [ebp - 0x54]
je 0x10043741
mov dword [ebp - 0x330], 1
jmp 0x10043748
and dword [ebp - 0x330], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x30]
mov dword [ebp - 0x55c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3b0]
mov dword [ebp - 0x2a4], eax
mov eax, dword [ebp - 0x2a4]
mov dword [ebp - 0x17c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x17c]
mov dword [ebp + eax - 0x528], ecx
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x17c], eax
jle 0x100437a1
mov dword [ebp - 0xfc], 1
jmp 0x100437a8
and dword [ebp - 0xfc], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xfc]
mov dword [ebp + eax - 0x68c], ecx
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0xfc], eax
jge 0x100437db
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x30], 0
jne 0x100437db
and dword [ebp - 0x244], 0
jmp 0x100437e5
mov dword [ebp - 0x244], 1
mov eax, dword [ebp - 0x244]
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 0
jne 0x10043812
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x68c], 0
jne 0x10043812
and dword [ebp - 0x2f8], 0
jmp 0x1004381c
mov dword [ebp - 0x2f8], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2f8]
sub ecx, dword [ebp + eax - 0x30]
je 0x1004384a
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3b0], 0
je 0x1004384a
mov dword [ebp - 0x18c], 1
jmp 0x10043851
and dword [ebp - 0x18c], 0
mov eax, dword [ebp - 0x39c]
cmp dword [ebp - 0x18c], eax
jne 0x1004386b
mov dword [ebp - 0x24c], 1
jmp 0x10043872
and dword [ebp - 0x24c], 0
mov esi, dword [ebp - 0x24c]
neg esi
push 1
lea ecx, [ebp - 0x5f4]
call fcn.1000f0fd
mov dword [eax], esi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5f4]
call fcn.1000f0f8
mov dword [ebp - 0x348], 0x53b26bdd
push 3
lea ecx, [ebp - 0x4c4]
call fcn.1000f096
mov dword [ebp - 4], 5
mov dword [ebp - 0x3f0], 0xffffffff
mov dword [ebp - 0x340], 0x2455f992
mov dword [ebp - 0x354], 0x2176
cmp dword [ebp - 0x354], 0xdbd
jge 0x100439a7
lea eax, [ebp - 0x124]
push eax
mov ecx, 0x10663e50
call fcn.1000ed89
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0x400], eax
mov eax, dword [ebp - 0x124]
dec eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x400], 0
je 0x100439a7
lea eax, [ebp - 0x2ac]
push eax
lea eax, [ebp - 0x194]
push eax
mov ecx, 0x10663e50
call fcn.1000ed89
mov ecx, eax
call fcn.1000ed89
mov eax, dword [ebp - 0x194]
cmp eax, dword [ebp - 0x2ac]
jle 0x10043962
push fcn.10012ad7
mov dl, 0x3e
mov ecx, 0x10663d98
call fcn.10020c54
mov ecx, eax
call fcn.1000ef78
jmp 0x100439a2
mov eax, dword [ebp - 0x194]
cmp eax, dword [ebp - 0x2ac]
jge 0x1004398a
push fcn.10012ad7
mov dl, 0x3c
mov ecx, 0x10663d98
call fcn.10020c54
mov ecx, eax
call fcn.1000ef78
jmp 0x100439a2
push fcn.10012ad7
mov dl, 0x3d
mov ecx, 0x10663d98
call fcn.10020c54
mov ecx, eax
call fcn.1000ef78
jmp 0x100438f5
mov dword [ebp - 0x3a8], 0
mov dword [ebp - 0x338], 0
lea eax, [ebp - 0x4c4]
push eax
lea eax, [ebp - 0x564]
push eax
push 0x5157
push 0x78a5
push 1
push 0x1347
push 0x68e4
push 0x3285
push 1
push 0x2c7c
push 0x5fe1
push 1
push 0x2f1f
push 0x2c94
call fcn.1003e4dd
add esp, 0x38
lea eax, [ebp - 0x338]
push eax
lea eax, [ebp - 0x3a8]
push eax
lea eax, [ebp - 0x4c4]
push eax
lea eax, [ebp - 0x340]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x348]
push eax
call fcn.10042965
add esp, 0x18
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4c4]
call fcn.1000f0f8
mov eax, dword [ebp + 8]
mov dword [ebp - 0xec], eax
mov dword [ebp - 0x3b4], 0xb4ebb0cb
mov dword [ebp - 0x1ac], 1
mov dword [ebp - 0x19c], 0xcec79e67
mov dword [ebp - 0x25c], 0xbf90a233
mov dword [ebp - 0x11c], 0xffffffff
push 3
lea ecx, [ebp - 0x42c]
call fcn.1000f096
mov dword [ebp - 4], 6
mov dword [ebp - 0x56c], 0x758e
push 1
lea ecx, [ebp - 0x3ec]
call fcn.1000f096
mov byte [ebp - 4], 7
mov dword [ebp - 0x64], 0
jmp 0x10043abf
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 3
jge 0x10043ad5
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x698], 0x93b4e1a3
jmp 0x10043ab8
lea eax, [ebp - 0x42c]
push eax
lea eax, [ebp - 0x64]
push eax
call fcn.10042aed
pop ecx
pop ecx
push 0x2bec
push 1
push 0x73b4
lea eax, [ebp - 0x3ec]
push eax
lea eax, [ebp - 0x64]
push eax
push 1
push 0x78a8
call fcn.1003ef5a
add esp, 0x1c
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x698], 0
je 0x10043ca1
mov dword [ebp - 0x574], 0xffffffff
push 3
lea ecx, [ebp - 0x420]
call fcn.1000f096
mov byte [ebp - 4], 8
push 0x25f6
push 0x2b1c
push 0
lea eax, [ebp - 0x57c]
push eax
push 0x18f9
push 0x3c3a
push 0x681c
lea eax, [ebp - 0x420]
push eax
push 1
call fcn.1003f302
add esp, 0x24
push 0x874
push 1
push 0x84a
push 0x791f
lea eax, [ebp - 0x3ec]
push eax
push 1
call fcn.1003f15a
add esp, 0x18
push 0
lea ecx, [ebp - 0x3ec]
call fcn.1000f0fd
push 0
lea ecx, [ebp - 0x3ec]
call fcn.1000f0fd
mov ecx, dword [ebp - 0x19c]
cmp dword [eax], ecx
jl 0x10043bc1
mov dword [ebp - 0x254], 1
jmp 0x10043bc8
and dword [ebp - 0x254], 0
mov eax, dword [ebp - 0x19c]
cmp dword [ebp - 0x254], eax
jne 0x10043be2
mov dword [ebp - 0x1a4], 1
jmp 0x10043be9
and dword [ebp - 0x1a4], 0
push 0
lea ecx, [ebp - 0x420]
call fcn.1000f0fd
mov eax, dword [ebp - 0x3b4]
mov dword [ebp - 0x584], eax
push 0
lea ecx, [ebp - 0x420]
call fcn.1000f0fd
cmp dword [eax], 0x56095dbc
je 0x10043c23
mov dword [ebp - 0x104], 1
jmp 0x10043c2a
and dword [ebp - 0x104], 0
push 2
lea ecx, [ebp - 0x42c]
call fcn.1000f0fd
mov ecx, dword [ebp - 0x104]
mov dword [eax], ecx
mov eax, dword [ebp - 0x104]
sub eax, 0xffff
cmp dword [ebp - 0x1a4], eax
jge 0x10043c5e
mov dword [ebp - 0x2dc], 1
jmp 0x10043c65
and dword [ebp - 0x2dc], 0
mov eax, dword [ebp - 0x25c]
imul eax, dword [ebp - 0x2dc]
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x1ac], eax
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x25c], eax
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x420]
call fcn.1000f0f8
jmp 0x10043d1f
mov dword [ebp - 0x8c], 0xfffffffe
lea eax, [ebp - 0x42c]
push eax
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 0x11c]
push eax
call fcn.10042b35
add esp, 0xc
mov dword [ebp - 0x8c], 8
jmp 0x10043ce1
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0x29
jg 0x10043d1f
mov byte [ebp - 0x4d], 0
movzx eax, byte [ebp - 0x4d]
test eax, eax
je 0x10043d1d
push 0x5d5a
push 1
push 0x18f0
push 0x3f37
push 0x2788
push 0x11f2
push 1
push 0
call fcn.1004068c
add esp, 0x20
jmp 0x10043cd4
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x3ec]
call fcn.1000f0f8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x42c]
call fcn.1000f0f8
mov eax, dword [ebp - 0xec]
movzx eax, word [eax]
cmp eax, 0x5a4d
je 0x10044015
mov dword [ebp - 0xa0], 0
jmp 0x10043d6a
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 3
jge 0x10043d86
mov eax, dword [ebp - 0xa0]
mov dword [ebp + eax*4 - 0x444], 0xfd3df75d
jmp 0x10043d5d
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x444], 0
jmp 0x10043db1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x444]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x444], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x444], 0xb
jge 0x10043dc7
call fcn.10042b7e
jmp 0x10043d98
mov dword [ebp - 0x28], 0x4a8b108f
mov dword [ebp - 0x408], 0xb541
mov dword [ebp - 0x2b4], 1
mov dword [ebp - 0x1dc], 3
mov dword [ebp - 0xd0], 0
jmp 0x10043e05
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 2
jge 0x10043e21
mov eax, dword [ebp - 0xd0]
mov dword [ebp + eax*4 - 0xe0], 0x75c96dd1
jmp 0x10043df8
mov dword [ebp - 0x28], 1
jmp 0x10043e31
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jl 0x1004400e
mov dword [ebp - 0x24], 9
mov dword [ebp - 0x24], 0
jmp 0x10043e52
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jg 0x10043f2a
mov dword [ebp - 0x350], 1
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0xe0]
mov dword [ebp - 0x1b4], eax
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x1b4]
mov dword [ebp + eax*4 - 0xe0], ecx
cmp dword [ebp - 0x1b4], 0xfffffff9
jne 0x10043e9b
mov dword [ebp - 0x1bc], 1
jmp 0x10043ea2
and dword [ebp - 0x1bc], 0
mov eax, dword [ebp - 0x2b4]
mov dword [ebp - 0x58c], eax
mov eax, dword [ebp - 0x2b4]
cmp dword [ebp - 0x350], eax
je 0x10043ec8
mov dword [ebp - 0x264], 1
jmp 0x10043ecf
and dword [ebp - 0x264], 0
mov eax, dword [ebp - 0x1bc]
cmp eax, dword [ebp - 0x264]
jl 0x10043ee9
mov dword [ebp - 0x1c4], 1
jmp 0x10043ef0
and dword [ebp - 0x1c4], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x1c4], eax
jge 0x10043f07
mov dword [ebp - 0x2f4], 1
jmp 0x10043f0e
and dword [ebp - 0x2f4], 0
mov eax, dword [ebp - 0x2f4]
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x24], 0
je 0x10043f25
jmp 0x10043e4b
jmp 0x10043e4b
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0xe0]
mov dword [ebp - 0x594], eax
mov eax, dword [ebp - 0x408]
mov dword [ebp - 0x59c], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0xe0]
mov dword [ebp - 0x5a4], eax
mov eax, dword [ebp - 0x28]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0xe0]
cmp dword [ebp + eax*4 - 0xe0], ecx
jge 0x10043f7b
mov dword [ebp - 0x1cc], 1
jmp 0x10043f82
and dword [ebp - 0x1cc], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x1cc], eax
jge 0x10043f9f
cmp dword [ebp - 0x24], 0
je 0x10043f9f
mov dword [ebp - 0x26c], 1
jmp 0x10043fa6
and dword [ebp - 0x26c], 0
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0xe0]
cmp eax, dword [ebp - 0x26c]
jle 0x10043fc4
mov dword [ebp - 0x1d4], 1
jmp 0x10043fcb
and dword [ebp - 0x1d4], 0
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0xe0]
add eax, dword [ebp - 0x1d4]
sub eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
cmp eax, dword [ebp + ecx*4 - 0xe0]
je 0x10043ff6
mov dword [ebp - 0x2bc], 1
jmp 0x10043ffd
and dword [ebp - 0x2bc], 0
mov eax, dword [ebp - 0x2bc]
mov dword [ebp - 0x1dc], eax
jmp 0x10043e2a
xor eax, eax
jmp 0x10045cee
push 1
push 0x86f
push 0x2abe
push 0x4fe
push 1
call fcn.1003f3e8
add esp, 0x14
lea eax, [ebp - 0xec]
push eax
push 0x78a2
push 0x59a3
lea eax, [ebp + 8]
push eax
push 0x67dd
push 0x3824
push 0x77a7
push 1
lea eax, [ebp - 0x70]
push eax
push 1
call fcn.1003f501
add esp, 0x28
mov eax, dword [ebp - 0x70]
cmp dword [eax], 0x4550
je 0x1004432e
mov dword [ebp - 0x4c], 9
mov dword [ebp - 0x1f4], 0x223b16aa
mov dword [ebp - 0x274], 0x752
mov dword [ebp - 0x28c], 0x1ac7eb23
mov dword [ebp - 0x60], 0x24067bc6
mov dword [ebp - 0x404], 0xc4b6369d
mov dword [ebp - 0xa8], 0
jmp 0x100440c2
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 3
jge 0x100440de
mov eax, dword [ebp - 0xa8]
mov dword [ebp + eax*4 - 0x314], 0x2e0cf572
jmp 0x100440b5
mov dword [ebp - 0x4c], 0
jmp 0x100440ee
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 2
jg 0x10044301
mov dword [ebp - 0x5ac], 0xfffffffe
mov dword [ebp - 0x358], 0xfffffffa
mov dword [ebp - 0xc8], 0x6c715341
mov dword [ebp - 0x20c], 9
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp + eax*4 - 0x314]
mov dword [ebp - 0x5b4], eax
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp + eax*4 - 0x314]
mov dword [ebp - 0x5bc], eax
mov eax, dword [ebp - 0x274]
inc eax
mov dword [ebp - 0x274], eax
cmp dword [ebp - 0xc8], 0
jne 0x10044162
mov dword [ebp - 0x1e4], 1
jmp 0x10044169
and dword [ebp - 0x1e4], 0
mov eax, dword [ebp - 0x20c]
cmp dword [ebp - 0x1e4], eax
jle 0x10044183
mov dword [ebp - 0x2e4], 1
jmp 0x1004418a
and dword [ebp - 0x2e4], 0
mov eax, dword [ebp - 0x1f4]
cmp dword [ebp - 0x2e4], eax
jne 0x100441ad
cmp dword [ebp - 0x28c], 0
je 0x100441ad
mov dword [ebp - 0x1ec], 1
jmp 0x100441b4
and dword [ebp - 0x1ec], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x314]
cmp dword [ebp - 0x1ec], eax
jl 0x100441d4
mov dword [ebp - 0x27c], 1
jmp 0x100441db
and dword [ebp - 0x27c], 0
mov eax, dword [ebp - 0xc8]
cmp dword [ebp - 0x27c], eax
jle 0x100441f5
mov dword [ebp - 0x2c4], 1
jmp 0x100441fc
and dword [ebp - 0x2c4], 0
mov eax, dword [ebp - 0x1f4]
cmp dword [ebp - 0x2c4], eax
jg 0x10044216
mov dword [ebp - 0x1fc], 1
jmp 0x1004421d
and dword [ebp - 0x1fc], 0
cmp dword [ebp - 0x1fc], 0x951f
jne 0x10044235
mov dword [ebp - 0x284], 1
jmp 0x1004423c
and dword [ebp - 0x284], 0
mov eax, dword [ebp - 0x358]
cmp dword [ebp - 0x284], eax
jle 0x10044256
mov dword [ebp - 0x204], 1
jmp 0x1004425d
and dword [ebp - 0x204], 0
mov eax, dword [ebp - 0xc8]
cmp dword [ebp - 0x204], eax
jle 0x10044277
mov dword [ebp - 0x2fc], 1
jmp 0x1004427e
and dword [ebp - 0x2fc], 0
cmp dword [ebp - 0x2fc], 0xfffffffe
jb 0x10044293
mov dword [ebp - 0x3c0], 1
jmp 0x1004429a
and dword [ebp - 0x3c0], 0
cmp dword [ebp - 0x60], 0
jne 0x100442b0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x314], 0
je 0x100442c1
xor eax, eax
inc eax
je 0x100442c1
mov dword [ebp - 0x360], 1
jmp 0x100442c8
and dword [ebp - 0x360], 0
mov eax, dword [ebp - 0x20c]
mov dword [ebp - 0x5c4], eax
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp + eax*4 - 0x314]
mov dword [ebp - 0x5cc], eax
mov eax, dword [ebp - 0x28c]
mov dword [ebp - 0x5d4], eax
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0x404], eax
jmp 0x100440e7
mov dword [ebp - 0x60], 2
jmp 0x10044311
mov eax, dword [ebp - 0x60]
dec eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0
jl 0x10044327
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x314], 0xaed0f12a
jmp 0x1004430a
xor eax, eax
jmp 0x10045cee
push 1
lea eax, [ebp - 0x98]
push eax
push 0x6368
push 1
push 0x3340
push 0x7836
push 0x796d
push dword [ebp - 0x70]
call fcn.1003b819
add esp, 0x20
mov dword [ebp - 0x368], 0x245d
cmp dword [ebp - 0x368], 0xc88
jge 0x1004443c
lea eax, [ebp - 0x370]
push eax
lea eax, [ebp - 0x10c]
push eax
mov ecx, 0x10663e50
call fcn.1000ed89
mov ecx, eax
call fcn.1000ed89
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x3c8], eax
mov eax, dword [ebp - 0x10c]
dec eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x3c8], 0
je 0x10044421
and dword [ebp - 0xe8], 0
jmp 0x100443c9
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
mov eax, dword [ebp - 0xe8]
cmp eax, dword [ebp - 0x370]
jge 0x1004441c
lea edx, [ebp - 0x1d]
mov ecx, 0x10663e50
call fcn.10020e0a
movsx eax, byte [ebp - 0x1d]
cmp eax, 0x43
je 0x100443ff
movsx eax, byte [ebp - 0x1d]
cmp eax, 0x4d
je 0x100443ff
movsx eax, byte [ebp - 0x1d]
cmp eax, 0x59
jne 0x1004441a
push fcn.10012ad7
mov edx, 0x1000cd08
mov ecx, 0x10663d98
call fcn.10012900
mov ecx, eax
call fcn.1000ef78
jmp 0x100443bc
jmp 0x10044391
push fcn.10012ad7
mov edx, 0x1000cd10
mov ecx, 0x10663d98
call fcn.10012900
mov ecx, eax
call fcn.1000ef78
call fcn.10042bc1
cmp dword [ebp - 0x98], 0
jne 0x100444da
push 1
lea ecx, [ebp - 0x45c]
call fcn.1000f096
mov dword [ebp - 4], 9
mov dword [ebp - 0x214], 3
lea eax, [ebp - 0x45c]
push eax
lea eax, [ebp - 0x5dc]
push eax
call fcn.1001af3a
pop ecx
pop ecx
push 0x49a9
lea eax, [ebp - 0x45c]
push eax
push 0x7c89
push 1
push 1
lea eax, [ebp - 0x214]
push eax
push 0xae3
push 0x77b
call fcn.1003f927
add esp, 0x20
lea eax, [ebp - 0x45c]
push eax
lea eax, [ebp - 0x214]
push eax
call fcn.10042c35
pop ecx
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x45c]
call fcn.1000f0f8
xor eax, eax
jmp 0x10045cee
push 0x6171
lea eax, [ebp - 0x34]
push eax
push 0x2cbc
push 0x59c6
push 1
lea eax, [ebp - 0x98]
push eax
lea eax, [ebp - 0x5e4]
push eax
push 1
push dword [ebp - 0x70]
push dword [ebp - 0xec]
push 0x2a0f
call fcn.1003d535
add esp, 0x2c
mov dword [ebp - 0x64c], 0xb4e1a362
mov dword [ebp - 0x654], 0xfffffff6
mov dword [ebp - 0x67c], 1
mov dword [ebp - 0x678], 0x3efc07e1
mov dword [ebp - 0x640], 0x9c3fbb4e
mov dword [ebp - 0x658], 0xce3e63e3
mov dword [ebp - 0x510], 0
mov dword [ebp - 0x534], 6
push 1
lea ecx, [ebp - 0x604]
call fcn.1000f096
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x518], 0xfffffffd
mov dword [ebp - 0x3fc], 0
push 1
push 0x35a6
push 0xaaa
push 0x2f6
push 1
lea eax, [ebp - 0x53c]
push eax
lea eax, [ebp - 0x604]
push eax
call fcn.1003fb70
add esp, 0x1c
lea eax, [ebp - 0x3fc]
push eax
call fcn.10042c8d
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x604]
call fcn.1000f0f8
push 1
push 0xfc9
push 0x48f5
push dword [ebp + 8]
push 0x1bf5
push 0
push dword [ebp - 0x70]
push dword [ebp - 0x34]
call fcn.100373cc
add esp, 0x20
push 0x333e
lea eax, [ebp - 0x70]
push eax
push 1
push 1
push 0x3cfe
push 0x42a0
push 0x5574
push 0x6456
push 0x6993
lea eax, [ebp - 0x160]
push eax
push 1
lea eax, [ebp - 0x98]
push eax
push 0x6112
call fcn.100402aa
add esp, 0x34
cmp dword [ebp - 0x160], 0
je 0x100448b6
mov dword [ebp - 0x2cc], 0
mov dword [ebp - 0x520], 0xfffffffa
mov dword [ebp - 0x324], 1
mov dword [ebp - 0x544], 0x6db6d037
mov dword [ebp - 0x224], 0x5af8b513
mov dword [ebp - 0x52c], 0xffffffff
mov dword [ebp - 0x380], 1
mov dword [ebp - 0x3f4], 0xca8cda2a
mov dword [ebp - 0x3d8], 1
mov dword [ebp - 0x54c], 0xc8953526
mov dword [ebp - 0x554], 0
mov dword [ebp - 0x508], 0xbc6200d4
mov dword [ebp - 0xb0], 0xffff
push 3
lea ecx, [ebp - 0x4dc]
call fcn.1000f096
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x44], 0
jmp 0x100446ec
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 3
jge 0x10044702
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x614], 0
jmp 0x100446e5
mov dword [ebp - 0x44], 0
jmp 0x10044712
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 3
jge 0x1004472e
push dword [ebp - 0x44]
lea ecx, [ebp - 0x4dc]
call fcn.1000f0fd
mov dword [eax], 7
jmp 0x1004470b
mov eax, dword [ebp - 0x2cc]
mov dword [ebp - 0x5c8], eax
mov eax, dword [ebp - 0x2cc]
mov dword [ebp - 0x540], eax
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0x378], eax
mov eax, dword [ebp - 0xb0]
dec eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0x378], 9
jg 0x10044774
mov dword [ebp - 0x3d0], 1
jmp 0x1004477b
and dword [ebp - 0x3d0], 0
mov eax, dword [ebp - 0x224]
mov dword [ebp - 0x638], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x614], 0
jge 0x100447a2
mov dword [ebp - 0x21c], 1
jmp 0x100447a9
and dword [ebp - 0x21c], 0
mov eax, dword [ebp - 0xb0]
cmp dword [ebp - 0x21c], eax
jle 0x100447cc
mov eax, 0x7b70
test eax, eax
je 0x100447cc
mov dword [ebp - 0x294], 1
jmp 0x100447d3
and dword [ebp - 0x294], 0
mov eax, dword [ebp - 0x294]
sub eax, dword [ebp - 0x224]
neg eax
je 0x100447ef
mov dword [ebp - 0x140], 1
jmp 0x100447f6
and dword [ebp - 0x140], 0
mov eax, dword [ebp - 0x380]
cmp dword [ebp - 0x140], eax
jl 0x10044810
mov dword [ebp - 0x148], 1
jmp 0x10044817
and dword [ebp - 0x148], 0
mov eax, dword [ebp - 0x3f4]
cmp dword [ebp - 0x148], eax
jne 0x10044831
mov dword [ebp - 0x150], 1
jmp 0x10044838
and dword [ebp - 0x150], 0
mov eax, dword [ebp - 0x324]
cmp dword [ebp - 0x150], eax
jge 0x10044852
mov dword [ebp - 0x158], 1
jmp 0x10044859
and dword [ebp - 0x158], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x158]
mov dword [ebp + eax - 0x614], ecx
push 1
lea ecx, [ebp - 0x4dc]
call fcn.1000f0fd
mov eax, dword [eax]
mov dword [ebp - 0x3d8], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4dc]
call fcn.1000f0f8
push 0x2d37
lea eax, [ebp - 0x160]
push eax
push 0x7204
push 0
push 0x39b0
push 1
lea eax, [ebp - 0x34]
push eax
call fcn.100462d2
add esp, 0x1c
push 2
lea ecx, [ebp - 0x308]
call fcn.1000f096
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x138], 0
mov dword [ebp - 0x134], 0
mov dword [ebp - 0x130], 0
mov dword [ebp - 0x12c], 0
mov dword [ebp - 0x504], 7
mov dword [ebp - 0x500], 7
mov dword [ebp - 0x4fc], 7
mov dword [ebp - 0x4f8], 7
mov dword [ebp - 0x170], 0xa3ea
push 3
lea ecx, [ebp - 0x4f4]
call fcn.1000f096
mov byte [ebp - 4], 0xd
push 0x1f86
push 0x4f84
push 1
push 1
push 0x6dfc
push 0x7c34
push 0x1eae
lea eax, [ebp - 0x78]
push eax
push 0x18f8
push 0x6c5c
lea eax, [ebp - 0x308]
push eax
push 0x5f48
call fcn.1004047a
add esp, 0x30
mov dword [ebp - 0x78], 0
jmp 0x10044984
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 3
jge 0x100449a0
push dword [ebp - 0x78]
lea ecx, [ebp - 0x4f4]
call fcn.1000f0fd
mov dword [eax], 0xe06985ba
jmp 0x1004497d
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x138], 0
jmp 0x100449ce
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x138]
inc eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x138], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x138], 1
jg 0x10044c1d
mov dword [ebp - 0x198], 0xfffffff7
mov dword [ebp - 0x190], 0x4b082b00
mov dword [ebp - 0x390], 0xeb7e5950
mov dword [ebp - 0x3c], 0
jmp 0x10044a10
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 4
jge 0x10044a26
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x704], 0x9d2e819d
jmp 0x10044a09
mov dword [ebp - 0x3c], 0
jmp 0x10044a36
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 4
jge 0x10044a4c
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x6dc], 0xc8951bb3
jmp 0x10044a2f
mov byte [ebp - 0x55], 0
lea eax, [ebp - 0x55]
push eax
call fcn.10042ca6
pop ecx
push 4
pop eax
imul eax, eax, 3
push dword [ebp + eax - 0x138]
lea ecx, [ebp - 0x308]
call fcn.1000f0fd
push 1
lea ecx, [ebp - 0x308]
call fcn.1000f0fd
cmp dword [eax], 0
jle 0x10044a90
mov dword [ebp - 0x168], 1
jmp 0x10044a97
and dword [ebp - 0x168], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x168]
mov dword [ebp + eax - 0x6dc], ecx
push 1
lea ecx, [ebp - 0x308]
call fcn.1000f0fd
mov eax, dword [eax]
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 0xfffffff9
jbe 0x10044ad4
mov dword [ebp - 0x178], 1
jmp 0x10044adb
and dword [ebp - 0x178], 0
push 4
pop eax
imul eax, eax, 3
push dword [ebp + eax - 0x138]
lea ecx, [ebp - 0x308]
call fcn.1000f0fd
mov eax, dword [eax]
cmp eax, dword [ebp - 0x178]
jge 0x10044b09
mov dword [ebp - 0xf8], 1
jmp 0x10044b10
and dword [ebp - 0xf8], 0
push 2
lea ecx, [ebp - 0x4f4]
call fcn.1000f0fd
mov ecx, dword [ebp - 0xf8]
mov dword [eax], ecx
push 4
pop eax
imul eax, eax, 3
push dword [ebp + eax - 0x138]
lea ecx, [ebp - 0x308]
call fcn.1000f0fd
mov ecx, dword [ebp - 0xf8]
sub ecx, dword [eax]
push 4
pop eax
imul eax, eax, 3
cmp ecx, dword [ebp + eax - 0x138]
je 0x10044b60
mov dword [ebp - 0x180], 1
jmp 0x10044b67
and dword [ebp - 0x180], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x504]
cmp dword [ebp - 0x180], eax
je 0x10044b88
mov dword [ebp - 0x188], 1
jmp 0x10044b8f
and dword [ebp - 0x188], 0
mov dword [ebp - 0x198], 0x781c
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x190], eax
mov eax, dword [ebp - 0x190]
cmp dword [ebp - 0x198], eax
jg 0x10044bbf
mov dword [ebp - 0x1a0], 1
jmp 0x10044bc6
and dword [ebp - 0x1a0], 0
imul eax, dword [ebp - 0x1a0], 0x42
neg eax
jne 0x10044bdd
mov dword [ebp - 0x1a8], 1
jmp 0x10044be4
and dword [ebp - 0x1a8], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x138]
cmp dword [ebp - 0x1a8], eax
jl 0x10044c05
mov dword [ebp - 0x1b0], 1
jmp 0x10044c0c
and dword [ebp - 0x1b0], 0
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x390], eax
jmp 0x100449b3
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x4f4]
call fcn.1000f0f8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x308]
call fcn.1000f0f8
push dword [ebp - 0x34]
call section..vdfui_1
pop ecx
test eax, eax
jne 0x10044c4f
xor eax, eax
jmp 0x10045cee
or dword [ebp - 0x498], 0xffffffff
or dword [ebp - 0x494], 0xffffffff
or dword [ebp - 0x490], 0xffffffff
or dword [ebp - 0x48c], 0xffffffff
lea ecx, [ebp - 0x127]
call fcn.1000f10c
push eax
lea eax, [ebp - 0x488]
push eax
lea eax, [ebp - 0x498]
push eax
lea ecx, [ebp - 0x6cc]
call fcn.1000f10f
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x624]
call fcn.1000f0d2
mov dword [ebp - 4], 0xe
push 1
lea ecx, [ebp - 0x320]
call fcn.1000f096
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x1c0], 0
push 3
lea ecx, [ebp - 0x4b8]
call fcn.1000f096
mov byte [ebp - 4], 0x10
mov dword [ebp - 0x3e0], 0xffffffff
mov dword [ebp - 0x1d0], 0xfffffff6
mov dword [ebp - 0x3a0], 0xd2bab91e
push 0x100f
push 1
lea eax, [ebp - 0x3f8]
push eax
push 0xf34
lea eax, [ebp - 0x320]
push eax
push 0x4284
push 1
push 1
call fcn.1004068c
add esp, 0x20
lea eax, [ebp - 0x4b8]
push eax
push 1
push 1
lea eax, [ebp - 0x3f8]
push eax
push 1
push 0x6e8f
push 0x390e
push 0x3053
push 0x10a8
push 0x7dd6
call fcn.10040993
add esp, 0x28
push 0
lea ecx, [ebp - 0x320]
call fcn.1000f0fd
and dword [eax], 0
jmp 0x10044d87
push 0
lea ecx, [ebp - 0x320]
call fcn.1000f0fd
mov dword [ebp - 0x1b8], eax
mov eax, dword [ebp - 0x1b8]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x1b8]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x320]
call fcn.1000f0fd
cmp dword [eax], 3
jg 0x10044eae
mov dword [ebp - 0x1c8], 0x2a4f402e
mov dword [ebp - 0x548], 0xd2eb2fc2
mov dword [ebp - 0x398], 0xffffffff
mov dword [ebp - 0x334], 0x57289c08
mov dword [ebp - 0x5d0], 0
mov dword [ebp - 0x32c], 0xcfcb8f1f
mov dword [ebp - 0x550], 0xca925f32
push 1
lea ecx, [ebp - 0x4d0]
call fcn.1000f096
mov byte [ebp - 4], 0x11
lea eax, [ebp - 0x4d0]
push eax
lea eax, [ebp - 0x63c]
push eax
call fcn.10042cc6
pop ecx
pop ecx
lea eax, [ebp - 0x320]
push eax
lea eax, [ebp - 0x1d0]
push eax
lea eax, [ebp - 0x398]
push eax
lea eax, [ebp - 0x3e0]
push eax
lea eax, [ebp - 0x1c0]
push eax
lea eax, [ebp - 0x624]
push eax
lea eax, [ebp - 0x3a0]
push eax
lea eax, [ebp - 0x1c8]
push eax
call fcn.10042d0e
add esp, 0x20
push 0x23e8
lea eax, [ebp - 0x32c]
push eax
push 0x6cd6
lea eax, [ebp - 0x334]
push eax
push 1
push 1
push 0x462f
lea eax, [ebp - 0x1c0]
push eax
lea eax, [ebp - 0x4b8]
push eax
lea eax, [ebp - 0x1c8]
push eax
lea eax, [ebp - 0x1d0]
push eax
push 0x382e
lea eax, [ebp - 0x4d0]
push eax
call fcn.10040fe2
add esp, 0x34
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x4d0]
call fcn.1000f0f8
jmp 0x10044d63
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x4b8]
call fcn.1000f0f8
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x320]
call fcn.1000f0f8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x624]
call fcn.1000f0f8
push 0x3e61
push dword [ebp - 0x34]
push 1
push 0x1801
push 0x31c
push 0
call fcn.1003b936
add esp, 0x18
mov dword [ebp - 0x558], 0xb4e1a362
mov dword [ebp - 0x5d8], 0xfffffff6
mov dword [ebp - 0x560], 1
mov dword [ebp - 0x644], 0x3efc07e1
mov dword [ebp - 0x568], 0x9c3fbb4e
mov dword [ebp - 0x5e0], 0xce3e63e3
mov dword [ebp - 0x570], 0
mov dword [ebp - 0x674], 6
push 1
lea ecx, [ebp - 0x634]
call fcn.1000f096
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x578], 0xfffffffd
mov dword [ebp - 0x1d8], 0
mov dword [ebp - 0xd8], 0
jmp 0x10044f8a
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 1
jge 0x10044fa9
push dword [ebp - 0xd8]
lea ecx, [ebp - 0x634]
call fcn.1000f0fd
and dword [eax], 0
jmp 0x10044f7d
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x634]
call fcn.1000f0f8
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
cmp dword [eax + 0x28], 0
je 0x100456c1
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x98]
add ecx, dword [eax + 0x28]
mov dword [ebp - 0x238], ecx
jne 0x100451bd
mov dword [ebp - 0x38], 0xac204e2d
mov dword [ebp - 0x9c], 0
jmp 0x1004500e
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 2
jge 0x1004502a
mov eax, dword [ebp - 0x9c]
mov dword [ebp + eax*4 - 0x3bc], 1
jmp 0x10045001
mov dword [ebp - 0x38], 3
jmp 0x1004503a
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0xfffffffe
jne 0x1004516c
mov dword [ebp - 0x470], 0xfffffffb
mov dword [ebp - 0x46c], 0xfffffffb
mov dword [ebp - 0x468], 0xfffffffb
mov dword [ebp - 0x464], 0xfffffffb
lea ecx, [ebp - 0x126]
call fcn.1000f10c
push eax
lea eax, [ebp - 0x460]
push eax
lea eax, [ebp - 0x470]
push eax
lea ecx, [ebp - 0x6bc]
call fcn.1000f10f
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x6a4]
call fcn.1000f0d2
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x5e8], 0xa0b8
mov dword [ebp - 0x580], 0
mov dword [ebp - 0x648], 0xfffffff7
mov dword [ebp - 0x588], 0xde9bf9f
mov dword [ebp - 0x5f8], 0x8b081589
mov dword [ebp - 0x590], 0xc8dfba22
mov dword [ebp - 0x668], 0
mov dword [ebp - 0x664], 0
mov dword [ebp - 0x660], 0
mov dword [ebp - 0x65c], 0
mov dword [ebp - 0x33c], 4
lea eax, [ebp - 0x33c]
push eax
push 0x31b4
push 0x247d
push 0x3edf
push 0x3bb2
push 0x4d13
push 0x2673
push 1
push 1
call fcn.100411d1
add esp, 0x24
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x3bc], 0xde6b9338
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6a4]
call fcn.1000f0f8
jmp 0x10045033
mov dword [ebp - 0x38], 0
jmp 0x1004517c
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 1
jg 0x100451b6
mov eax, dword [ebp - 0x38]
cmp dword [ebp + eax*4 - 0x3bc], 0xffffffff
ja 0x1004519b
mov dword [ebp - 0x1e0], 1
jmp 0x100451a2
and dword [ebp - 0x1e0], 0
mov eax, dword [ebp - 0x1e0]
neg eax
mov ecx, dword [ebp - 0x38]
mov dword [ebp + ecx*4 - 0x3bc], eax
jmp 0x10045175
xor eax, eax
jmp 0x10045cee
mov dword [ebp - 0x48], 0xfe
mov dword [ebp - 0xac], 0xfdbd0176
mov dword [ebp - 0x100], 0x791e6e40
mov dword [ebp - 0x68], 0x1e214356
mov dword [ebp - 0x80], 0xffff
mov dword [ebp - 0xa4], 0
jmp 0x100451ff
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 3
jge 0x1004521b
mov eax, dword [ebp - 0xa4]
mov dword [ebp + eax*4 - 0x6e8], 6
jmp 0x100451f2
cmp dword [ebp - 0x48], 0
je 0x100452cc
cmp dword [ebp - 0x48], 0x8cf5a8b0
je 0x1004523a
mov dword [ebp - 0x1e8], 1
jmp 0x10045241
and dword [ebp - 0x1e8], 0
mov eax, dword [ebp - 0x48]
cmp eax, dword [ebp - 0x1e8]
jg 0x10045258
mov dword [ebp - 0x1f0], 1
jmp 0x1004525f
and dword [ebp - 0x1f0], 0
cmp dword [ebp - 0x1f0], 1
je 0x10045274
mov dword [ebp - 0x1f8], 1
jmp 0x1004527b
and dword [ebp - 0x1f8], 0
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x1f8], eax
jne 0x10045292
mov dword [ebp - 0x200], 1
jmp 0x10045299
and dword [ebp - 0x200], 0
cmp dword [ebp - 0x200], 3
jle 0x100452ae
mov dword [ebp - 0x208], 1
jmp 0x100452b5
and dword [ebp - 0x208], 0
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x208], eax
jl 0x100452cc
mov dword [ebp - 0x210], 1
jmp 0x100452d3
and dword [ebp - 0x210], 0
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x210], eax
jge 0x100452ea
mov dword [ebp - 0x218], 1
jmp 0x100452f1
and dword [ebp - 0x218], 0
mov eax, dword [ebp - 0x218]
mov dword [ebp - 0xac], eax
mov eax, dword [ebp - 0xac]
dec eax
je 0x1004538d
mov dword [ebp - 0x344], 0xfbe5
mov dword [ebp - 0x34c], 0xab6ce1a8
push 0x170e
lea eax, [ebp - 0xac]
push eax
push 0x6427
push 0x608b
push 0x460d
push 0x7eef
push 0x7cb7
push 0x2e63
lea eax, [ebp - 0x344]
push eax
push 1
lea eax, [ebp - 0x100]
push eax
lea eax, [ebp - 0x34c]
push eax
push 0x5472
push 1
push 1
push 0x4a14
lea eax, [ebp - 0x48]
push eax
push 0x368e
push 0x2d81
push 0x490b
call fcn.1004138e
add esp, 0x50
jmp 0x10045433
mov dword [ebp - 0x228], 0x826243a5
mov dword [ebp - 0x220], 0x55069097
mov dword [ebp - 0x230], 0xf7d69fdb
mov dword [ebp - 0x328], 9
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x228]
push eax
lea eax, [ebp - 0x100]
push eax
lea eax, [ebp - 0xac]
push eax
lea eax, [ebp - 0x220]
push eax
lea eax, [ebp - 0x230]
push eax
call fcn.10042f14
add esp, 0x18
push 1
lea eax, [ebp - 0x220]
push eax
lea eax, [ebp - 0x48]
push eax
push 0x1872
lea eax, [ebp - 0x100]
push eax
lea eax, [ebp - 0x328]
push eax
push 0x2045
lea eax, [ebp - 0x228]
push eax
lea eax, [ebp - 0x230]
push eax
push 0x241e
push 1
lea eax, [ebp - 0x68]
push eax
push 0x4c8a
lea eax, [ebp - 0x80]
push eax
call fcn.10041953
add esp, 0x38
mov dword [ebp - 0x80], 0
jmp 0x10045443
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 2
jg 0x10045471
mov dword [ebp - 0x68], 0
jmp 0x10045459
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 2
jg 0x1004546f
mov byte [ebp - 0x56], 0
lea eax, [ebp - 0x56]
push eax
call fcn.10042fd2
pop ecx
jmp 0x10045452
jmp 0x1004543c
push 0
push 1
push 0xdeadbeef
call dword [ebp - 0x238]
mov dword [ebp - 0x364], eax
mov dword [ebp - 0x35c], 0x251e
cmp dword [ebp - 0x35c], 0x656
jge 0x10045607
and dword [ebp - 0x10], 0
and dword [ebp - 0x40], 0
and dword [ebp - 0x18], 0
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x10]
push eax
push 0x1000cfc4
call fcn.10054a3b
add esp, 0x10
or dword [ebp - 0x88], 0xffffffff
cmp dword [ebp - 0x18], 0
jle 0x10045501
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x10]
jge 0x10045501
mov eax, dword [ebp - 0x10]
neg eax
mov ecx, dword [ebp - 0x40]
shl ecx, 1
cmp eax, ecx
jge 0x100454fc
mov eax, dword [ebp - 0x40]
shl eax, 1
cmp eax, dword [ebp - 0x10]
jge 0x100454fc
mov dword [ebp - 0x88], 1
jmp 0x100455f5
mov eax, dword [ebp - 0x18]
cdq
idiv dword [ebp - 0x10]
and eax, 0x80000001
jns 0x10045514
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
jne 0x10045552
mov eax, dword [ebp - 0x18]
cdq
idiv dword [ebp - 0x10]
imul eax, dword [ebp - 0x10]
cmp dword [ebp - 0x18], eax
jle 0x10045552
mov eax, dword [ebp - 0x10]
neg eax
cmp eax, dword [ebp - 0x40]
jge 0x10045552
cmp dword [ebp - 0x40], 0
jge 0x10045552
mov eax, dword [ebp - 0x18]
cdq
idiv dword [ebp - 0x10]
imul eax, eax, 3
cdq
sub eax, edx
sar eax, 1
mov dword [ebp - 0x88], eax
jmp 0x100455f5
mov eax, dword [ebp - 0x18]
cdq
idiv dword [ebp - 0x10]
and eax, 0x80000001
jns 0x10045565
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
jne 0x1004559f
mov eax, dword [ebp - 0x18]
cdq
idiv dword [ebp - 0x10]
imul eax, dword [ebp - 0x10]
cmp dword [ebp - 0x18], eax
jle 0x1004559f
cmp dword [ebp - 0x40], 0
jle 0x1004559f
mov eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0x10]
jge 0x1004559f
mov eax, dword [ebp - 0x18]
cdq
idiv dword [ebp - 0x10]
imul eax, eax, 3
cdq
sub eax, edx
sar eax, 1
inc eax
mov dword [ebp - 0x88], eax
jmp 0x100455f5
mov eax, dword [ebp - 0x18]
cdq
idiv dword [ebp - 0x10]
and eax, 0x80000001
jns 0x100455b2
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x100455f5
mov eax, dword [ebp - 0x18]
cdq
idiv dword [ebp - 0x10]
imul eax, dword [ebp - 0x10]
cmp dword [ebp - 0x18], eax
jle 0x100455f5
mov eax, dword [ebp - 0x10]
neg eax
mov ecx, dword [ebp - 0x40]
shl ecx, 1
cmp eax, ecx
jge 0x100455f5
mov eax, dword [ebp - 0x40]
shl eax, 1
cmp eax, dword [ebp - 0x10]
jge 0x100455f5
mov eax, dword [ebp - 0x18]
cdq
idiv dword [ebp - 0x10]
imul eax, eax, 3
inc eax
cdq
sub eax, edx
sar eax, 1
mov dword [ebp - 0x88], eax
push dword [ebp - 0x88]
push 0x1000cb5c
call fcn.10054dcc
pop ecx
pop ecx
cmp dword [ebp - 0x364], 0
jne 0x10045617
xor eax, eax
jmp 0x10045cee
mov dword [ebp - 0x94], 0xffffffff
mov dword [ebp - 0x374], 0x443eb606
mov dword [ebp - 0x94], 0
jmp 0x10045644
mov eax, dword [ebp - 0x94]
dec eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0xffffffe5
jl 0x100456b7
mov dword [ebp - 0x6c], 0xffffffff
mov dword [ebp - 0x6c], 0xfffffff9
jmp 0x10045664
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0x10
jne 0x10045683
mov dword [ebp - 0x36c], 0x1738ab65
lea eax, [ebp - 0x36c]
push eax
call fcn.10043005
pop ecx
jmp 0x1004565d
push 0x2fe
push 0x10a5
push 0x6907
push 1
push 1
push 0x6c13
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp - 0x374]
push eax
push 0x3bbd
push 1
call fcn.10041ec1
add esp, 0x28
jmp 0x10045637
mov eax, dword [ebp - 0x34]
mov dword [eax + 0x10], 1
push 3
lea ecx, [ebp - 0xc0]
call fcn.1000f096
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x110], 0x9e3d3b0c
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x108], 0xf7626a9d
mov dword [ebp - 0x120], 0x3e91cb64
mov dword [ebp - 0x74], 0xa4792d8c
mov dword [ebp - 0x38c], 6
mov dword [ebp - 0x66c], 0
mov dword [ebp - 0x598], 0x1179d740
mov dword [ebp - 0x608], 1
mov dword [ebp - 0x394], 0x1fa8bf40
push 0x1b86
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0xc0]
push eax
push 1
push 0x7ace
push 0x36ea
push 0x669
push 1
push 0x5d89
push 0x508f
call fcn.1004202d
add esp, 0x28
mov dword [ebp - 0x90], 0
jmp 0x10045784
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 2
jge 0x100457a0
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0x6b4], 5
jmp 0x10045777
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0xc0]
push eax
push 0x826
lea eax, [ebp - 0x1c]
push eax
push 1
push 0x5a1f
push 1
lea eax, [ebp - 0x110]
push eax
call fcn.100424ef
add esp, 0x20
mov dword [ebp - 0x1c], 0
jmp 0x100457df
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jg 0x10045cbe
mov dword [ebp - 0x118], 0x68169b2b
mov dword [ebp - 0x5a0], 0xa031552a
mov dword [ebp - 0x650], 0x5e4941ae
mov dword [ebp - 0xb4], 0
jmp 0x10045820
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 1
jge 0x1004583c
mov eax, dword [ebp - 0xb4]
mov dword [ebp + eax*4 - 0xd4], 0
jmp 0x10045813
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x5a8], eax
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xc0]
call fcn.1000f0fd
mov eax, 0xfd90538e
add eax, 0xb0c7b249
cmp eax, dword [ebp - 0x110]
jle 0x10045871
mov dword [ebp - 0x240], 1
jmp 0x10045878
and dword [ebp - 0x240], 0
mov eax, dword [ebp - 0x240]
neg eax
js 0x1004588e
mov dword [ebp - 0x248], 1
jmp 0x10045895
and dword [ebp - 0x248], 0
cmp dword [ebp - 0x248], 0xa9b2
jge 0x100458ad
mov dword [ebp - 0x250], 1
jmp 0x100458b4
and dword [ebp - 0x250], 0
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xc0]
call fcn.1000f0fd
mov ecx, dword [ebp - 0x250]
cmp ecx, dword [eax]
je 0x100458d8
mov dword [ebp - 0x258], 1
jmp 0x100458df
and dword [ebp - 0x258], 0
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x258]
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xc0]
call fcn.1000f0fd
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xc0]
call fcn.1000f0fd
mov esi, eax
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xc0]
call fcn.1000f0fd
mov ecx, dword [esi]
imul ecx, dword [eax]
cmp ecx, dword [ebp - 0x118]
je 0x1004593a
mov dword [ebp - 0x260], 1
jmp 0x10045941
and dword [ebp - 0x260], 0
mov eax, dword [ebp - 0x118]
cmp dword [ebp - 0x260], eax
jl 0x1004595b
mov dword [ebp - 0x37c], 1
jmp 0x10045962
and dword [ebp - 0x37c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd4]
mov dword [ebp - 0x618], eax
push 4
pop eax
imul eax, eax, 0
mov esi, dword [ebp + eax - 0xd4]
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xc0]
call fcn.1000f0fd
mov eax, dword [eax]
lea eax, [esi + eax + 0xab2b]
cmp eax, 4
jl 0x100459ba
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xd4], 0
je 0x100459ba
mov dword [ebp - 0x268], 1
jmp 0x100459c1
and dword [ebp - 0x268], 0
cmp dword [ebp - 0x268], 1
je 0x100459d6
mov dword [ebp - 0x270], 1
jmp 0x100459dd
and dword [ebp - 0x270], 0
mov eax, dword [ebp - 0x120]
cmp eax, dword [ebp - 0x270]
jne 0x100459f7
mov dword [ebp - 0x278], 1
jmp 0x100459fe
and dword [ebp - 0x278], 0
push 0
lea ecx, [ebp - 0xc0]
call fcn.1000f0fd
mov ecx, dword [ebp - 0x278]
cmp ecx, dword [eax]
jg 0x10045a21
mov dword [ebp - 0x280], 1
jmp 0x10045a28
and dword [ebp - 0x280], 0
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xc0]
call fcn.1000f0fd
mov eax, dword [eax]
cmp eax, dword [ebp - 0x280]
jg 0x10045a4c
mov dword [ebp - 0x288], 1
jmp 0x10045a53
and dword [ebp - 0x288], 0
mov eax, dword [ebp - 0x110]
cmp dword [ebp - 0x288], eax
jg 0x10045a6d
mov dword [ebp - 0x290], 1
jmp 0x10045a74
and dword [ebp - 0x290], 0
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x290], eax
jge 0x10045a8b
mov dword [ebp - 0x298], 1
jmp 0x10045a92
and dword [ebp - 0x298], 0
mov eax, dword [ebp - 0x298]
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x74], 0
jmp 0x10045aae
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 2
jg 0x10045cb9
mov dword [ebp - 0xcc], 0xf2db
mov dword [ebp - 0x5b0], 0
mov dword [ebp - 0x670], 7
mov dword [ebp - 0x5b8], 0x52d5f2ab
mov dword [ebp - 0x628], 4
mov dword [ebp - 0x5c0], 0
mov dword [ebp - 0xc4], 0
jmp 0x10045b0d
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 3
jge 0x10045b29
mov eax, dword [ebp - 0xc4]
mov dword [ebp + eax*4 - 0x6f4], 0xfffffffe
jmp 0x10045b00
push 0
lea ecx, [ebp - 0xc0]
call fcn.1000f0fd
cmp dword [eax], 0x676e
jge 0x10045b4a
mov dword [ebp - 0x2c8], 1
jmp 0x10045b51
and dword [ebp - 0x2c8], 0
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x530], eax
cmp dword [ebp - 0xcc], 1
je 0x10045b72
mov dword [ebp - 0x2a0], 1
jmp 0x10045b79
and dword [ebp - 0x2a0], 0
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xc0]
call fcn.1000f0fd
mov ecx, dword [ebp - 0x2a0]
cmp ecx, dword [eax]
jl 0x10045ba6
cmp dword [ebp - 0xcc], 0
je 0x10045ba6
mov dword [ebp - 0x13c], 1
jmp 0x10045bad
and dword [ebp - 0x13c], 0
mov eax, dword [ebp - 0xcc]
mov ecx, dword [ebp - 0x13c]
lea eax, [ecx + eax + 0x70b1cb45]
test eax, eax
jne 0x10045bd6
mov eax, 0xdaee1d35
test eax, eax
jne 0x10045bd6
and dword [ebp - 0x2b0], 0
jmp 0x10045be0
mov dword [ebp - 0x2b0], 1
cmp dword [ebp - 0x2b0], 0xa534c8a1
jae 0x10045bf8
mov dword [ebp - 0x384], 1
jmp 0x10045bff
and dword [ebp - 0x384], 0
push 0
lea ecx, [ebp - 0xc0]
call fcn.1000f0fd
cmp dword [ebp - 0x38c], 5
jle 0x10045c21
mov dword [ebp - 0x2b8], 1
jmp 0x10045c28
and dword [ebp - 0x2b8], 0
mov eax, dword [ebp - 0xcc]
cmp dword [ebp - 0x2b8], eax
jne 0x10045c42
mov dword [ebp - 0x2c0], 1
jmp 0x10045c49
and dword [ebp - 0x2c0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd4]
cmp dword [ebp - 0x2c0], eax
jl 0x10045c6a
mov dword [ebp - 0x2d0], 1
jmp 0x10045c71
and dword [ebp - 0x2d0], 0
mov eax, dword [ebp - 0x2c8]
add eax, dword [ebp - 0x2d0]
mov dword [ebp - 0x120], eax
push 1
push 1
push 0x5b41
push 0x2dc2
push 0x43fc
lea eax, [ebp - 0x394]
push eax
push 0x7ad9
push 0x7396
push 0x6f9b
call fcn.100427b3
add esp, 0x24
jmp 0x10045aa7
jmp 0x100457d8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc0]
call fcn.1000f0f8
mov eax, dword [ebp - 0x34]
cmp dword [eax + 0x10], 0
je 0x10045ce1
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x2d8], eax
jmp 0x10045ce8
and dword [ebp - 0x2d8], 0
mov eax, dword [ebp - 0x2d8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret