Function at 0x100465d8
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10086d26
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x4d4
push esi
and dword [ebp - 0x234], 0
mov dword [ebp - 0x278], 0x2afe
mov dword [ebp - 0x1c], 0xfffffff8
mov dword [ebp - 0x18], 0x5c5735e4
mov dword [ebp - 0xc0], 0xd8a94b2a
mov dword [ebp - 0x23c], 0xffffffff
mov dword [ebp - 0x134], 2
mov dword [ebp - 0x2e4], 0xfffffffb
mov eax, dword [ebp - 0x278]
mov dword [ebp - 0x43c], eax
mov dword [ebp - 0x1c], 8
cmp dword [ebp - 0x1c], 0
je 0x10046696
xor eax, eax
jne 0x10046671
mov dword [ebp - 0x1c], 1
cmp dword [ebp - 0x1c], 0
jne 0x10046671
and dword [ebp - 0x164], 0
jmp 0x1004667b
mov dword [ebp - 0x164], 1
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
je 0x10046696
mov dword [ebp - 0x244], 1
jmp 0x1004669d
and dword [ebp - 0x244], 0
mov eax, dword [ebp - 0x244]
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0
je 0x10046882
mov dword [ebp - 0x274], 0xffffffff
mov dword [ebp - 0x9c], 0
jmp 0x100466d9
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 4
jge 0x100466f5
mov eax, dword [ebp - 0x9c]
mov dword [ebp + eax*4 - 0x30c], 1
jmp 0x100466cc
mov dword [ebp - 0x18], 0
jmp 0x10046705
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0x18
jne 0x1004671b
push 0x1e61
push 0
call fcn.10049c18
pop ecx
pop ecx
jmp 0x100466fe
or eax, 0xffffffff
je 0x10046754
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x30c]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x444], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x44c], eax
push 0xfffffffffffffff8
pop eax
dec eax
je 0x10046754
mov dword [ebp - 0x24c], 1
jmp 0x1004675b
and dword [ebp - 0x24c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x30c]
cmp dword [ebp - 0x24c], eax
jl 0x1004677c
mov dword [ebp - 0x254], 1
jmp 0x10046783
and dword [ebp - 0x254], 0
mov eax, dword [ebp - 0x254]
add eax, 9
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x30c]
cmp eax, 0xc36b
jg 0x100467ac
mov dword [ebp - 0x25c], 1
jmp 0x100467b3
and dword [ebp - 0x25c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x30c]
cmp dword [ebp - 0x25c], eax
je 0x100467d3
mov dword [ebp - 0x220], 1
jmp 0x100467da
and dword [ebp - 0x220], 0
mov eax, dword [ebp - 0x220]
mov dword [ebp - 0x23c], eax
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x23c]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x134]
cmp dword [ebp - 0x18], eax
jge 0x10046809
mov dword [ebp - 0x158], 1
jmp 0x10046810
and dword [ebp - 0x158], 0
mov eax, dword [ebp - 0x2e4]
cmp dword [ebp - 0x158], eax
jl 0x1004682a
mov dword [ebp - 0x1e0], 1
jmp 0x10046831
and dword [ebp - 0x1e0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x30c]
imul eax, dword [ebp - 0x1e0]
mov dword [ebp - 0xc0], eax
mov eax, dword [ebp - 0xc0]
sub eax, 0xcc0e
je 0x1004686d
cmp dword [ebp - 0x134], 0
je 0x1004686d
mov dword [ebp - 0x160], 1
jmp 0x10046874
and dword [ebp - 0x160], 0
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x274], eax
jmp 0x100468d5
mov dword [ebp - 0x1c], 0xd
jmp 0x10046892
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jg 0x100468d5
mov dword [ebp - 0x288], 0x32f82966
push 0x2c8e
lea eax, [ebp - 0x134]
push eax
lea eax, [ebp - 0x288]
push eax
push 0
call fcn.10048ea0
add esp, 0x10
mov byte [ebp - 0x35], 0
movzx eax, byte [ebp - 0x35]
test eax, eax
je 0x100468d3
push 0
call fcn.10048595
pop ecx
jmp 0x1004688b
push 1
lea ecx, [ebp - 0x2a8]
call fcn.1001740b
and dword [ebp - 4], 0
mov dword [ebp - 0xa4], 0
jmp 0x100468ff
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 1
jge 0x10046921
push dword [ebp - 0xa4]
lea ecx, [ebp - 0x2a8]
call fcn.100174a9
mov dword [eax], 0x97f6af11
jmp 0x100468f2
push 0
lea ecx, [ebp - 0x2a8]
call fcn.100174a9
mov dword [eax], 0xfffffffe
jmp 0x1004695a
push 0
lea ecx, [ebp - 0x2a8]
call fcn.100174a9
mov dword [ebp - 0x260], eax
mov eax, dword [ebp - 0x260]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x260]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x2a8]
call fcn.100174a9
cmp dword [eax], 0x1a
jge 0x100469f6
mov dword [ebp - 0xa8], 0xfa75c19c
mov byte [ebp - 0x33], 0
lea eax, [ebp - 0x33]
push eax
push 0
push 0x2ec0
call fcn.10049693
add esp, 0xc
mov dword [ebp - 0xa8], 0xffffffec
jmp 0x100469aa
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0x18
jg 0x100469f1
mov byte [ebp - 0x3e], 0
movzx eax, byte [ebp - 0x3e]
test eax, eax
je 0x100469d3
push 0x3753
push 0
push 0x774f
call fcn.1004a367
add esp, 0xc
mov byte [ebp - 0x3f], 0
push 0
push 0x32a8
push 0x347c
lea eax, [ebp - 0x3f]
push eax
call fcn.1004654a
add esp, 0x10
jmp 0x1004699d
jmp 0x10046936
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2a8]
call fcn.1001748d
mov byte [ebp - 0x120], 0x19
mov byte [ebp - 0x11f], 0x7d
mov byte [ebp - 0x11e], 7
mov byte [ebp - 0x11d], 0x12
mov byte [ebp - 0x11c], 0xd
mov byte [ebp - 0x11b], 6
mov byte [ebp - 0x11a], 9
mov byte [ebp - 0x119], 4
mov byte [ebp - 0x118], 0xa
mov byte [ebp - 0x117], 1
mov byte [ebp - 0x116], 0xb
mov byte [ebp - 0x115], 7
mov byte [ebp - 0x114], 0x17
mov byte [ebp - 0x113], 0x14
mov byte [ebp - 0x112], 0
mov byte [ebp - 0x111], 0x19
mov byte [ebp - 0x110], 0x18
mov byte [ebp - 0x10f], 0x18
mov byte [ebp - 0x10e], 0x10
mov byte [ebp - 0x10d], 8
mov byte [ebp - 0x10c], 5
mov byte [ebp - 0x10b], 0x17
mov byte [ebp - 0x10a], 0xf
mov byte [ebp - 0x109], 0x16
mov byte [ebp - 0x108], 0x11
mov byte [ebp - 0x107], 2
mov byte [ebp - 0x106], 0xc
mov byte [ebp - 0x105], 0x1f
mov byte [ebp - 0x104], 8
mov byte [ebp - 0x103], 4
mov byte [ebp - 0x102], 0x15
mov byte [ebp - 0x101], 0x1f
mov byte [ebp - 0x100], 2
mov byte [ebp - 0xff], 0x15
mov byte [ebp - 0xfe], 0x16
mov byte [ebp - 0xfd], 0x14
mov byte [ebp - 0xfc], 6
mov byte [ebp - 0xfb], 0x10
mov byte [ebp - 0xfa], 0x14
mov byte [ebp - 0xf9], 0x12
mov byte [ebp - 0xf8], 0x12
mov byte [ebp - 0xf7], 6
mov byte [ebp - 0xf6], 4
mov byte [ebp - 0xf5], 0x16
mov byte [ebp - 0xf4], 1
mov byte [ebp - 0xf3], 7
mov byte [ebp - 0xf2], 0xe
mov byte [ebp - 0xf1], 0xd
mov byte [ebp - 0xf0], 3
mov byte [ebp - 0xef], 0xb
mov byte [ebp - 0xee], 0x13
mov byte [ebp - 0xed], 0x10
mov byte [ebp - 0xec], 0xb
mov byte [ebp - 0xeb], 0xe6
mov byte [ebp - 0xea], 0xc5
mov byte [ebp - 0xe9], 0xb6
mov byte [ebp - 0xe8], 0xd7
mov byte [ebp - 0xe7], 0xfd
mov byte [ebp - 0xe6], 7
mov byte [ebp - 0xe5], 0x87
mov byte [ebp - 0xe4], 0x4f
mov byte [ebp - 0xe3], 0x76
mov byte [ebp - 0xe2], 0x2f
mov byte [ebp - 0xe1], 0xb3
and dword [ebp - 0x334], 0
and dword [ebp - 0x330], 0
and dword [ebp - 0x32c], 0
and dword [ebp - 0x328], 0
lea ecx, [ebp - 0x122]
call fcn.10008b33
push eax
lea eax, [ebp - 0x324]
push eax
lea eax, [ebp - 0x334]
push eax
lea ecx, [ebp - 0x49c]
call fcn.100174b8
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x2b8]
call fcn.10017467
mov dword [ebp - 4], 1
mov dword [ebp - 0xb0], 1
mov dword [ebp - 0x3fc], 0xffffffff
push 0
lea ecx, [ebp - 0x2b8]
call fcn.100174a9
and dword [eax], 0
jmp 0x10046c67
push 0
lea ecx, [ebp - 0x2b8]
call fcn.100174a9
mov dword [ebp - 0x168], eax
mov eax, dword [ebp - 0x168]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x168]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x2b8]
call fcn.100174a9
cmp dword [eax], 6
jne 0x10046d97
and dword [ebp - 0x348], 0
and dword [ebp - 0x344], 0
and dword [ebp - 0x340], 0
and dword [ebp - 0x33c], 0
lea ecx, [ebp - 0x123]
call fcn.10008b33
push eax
lea eax, [ebp - 0x338]
push eax
lea eax, [ebp - 0x348]
push eax
lea ecx, [ebp - 0x494]
call fcn.100174b8
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x37c]
call fcn.10017467
mov byte [ebp - 4], 2
mov dword [ebp - 0xac], 0
jmp 0x10046ceb
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 1
jge 0x10046d04
mov eax, dword [ebp - 0xac]
mov dword [ebp + eax*4 - 0x48], 0xd526d2e8
jmp 0x10046cde
push 0
lea ecx, [ebp - 0x2b8]
call fcn.100174a9
mov esi, eax
push 3
lea ecx, [ebp - 0x37c]
call fcn.100174a9
mov ecx, dword [esi]
mov dword [eax], ecx
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x48], 0
jmp 0x10046d49
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x48]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x48], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x48], 3
jg 0x10046d83
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x48]
lea ecx, [ebp - 0x37c]
call fcn.100174a9
cmp dword [eax], 0
je 0x10046d72
jmp 0x10046d83
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x48], 0
je 0x10046d81
jmp 0x10046d34
jmp 0x10046d34
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x37c]
call fcn.1001748d
jmp 0x10046c43
mov dword [ebp - 0xb0], 0
jmp 0x10046db0
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 3
jg 0x10046efc
mov dword [ebp - 0x8c], 7
mov dword [ebp - 0x424], 8
mov dword [ebp - 0xc8], 0
jmp 0x10046dea
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 3
jge 0x10046e06
mov eax, dword [ebp - 0xc8]
mov dword [ebp + eax*4 - 0x4b8], 0x7631615e
jmp 0x10046ddd
mov byte [ebp - 0x31], 0
movzx eax, byte [ebp - 0x31]
test eax, eax
je 0x10046e26
push 0x693a
push 0
push 0x63d9
call fcn.1004a2ad
add esp, 0xc
mov dword [ebp - 0x8c], 0
jmp 0x10046e3f
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 3
jg 0x10046ef7
push 1
lea ecx, [ebp - 0x40c]
call fcn.1001740b
mov byte [ebp - 4], 3
mov dword [ebp - 0x42c], 0x8d7cbae8
push 1
lea ecx, [ebp - 0x394]
call fcn.1001740b
mov byte [ebp - 4], 4
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x40c]
push eax
push 1
push 0x254f
call fcn.100464d8
add esp, 0x10
mov dword [ebp - 0x64], 0
jmp 0x10046ea2
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 1
jge 0x10046ebe
push dword [ebp - 0x64]
lea ecx, [ebp - 0x394]
call fcn.100174a9
mov dword [eax], 0xc7ba3f30
jmp 0x10046e9b
push 0x32be
lea eax, [ebp - 0x394]
push eax
push 0
call fcn.10049433
add esp, 0xc
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x394]
call fcn.1001748d
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x40c]
call fcn.1001748d
jmp 0x10046e32
jmp 0x10046da3
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2b8]
call fcn.1001748d
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x120]
or eax, 7
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x120]
and ecx, 7
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x120]
mov byte [ebp + ecx - 0x3d8], al
mov dword [ebp - 0x14], 0xfe0a8eac
push 2
lea ecx, [ebp - 0x26c]
call fcn.1001740b
mov dword [ebp - 4], 5
mov dword [ebp - 0x280], 0x3a67d62
push 0
lea eax, [ebp - 0x410]
push eax
lea eax, [ebp - 0x26c]
push eax
call fcn.10048e33
add esp, 0xc
mov dword [ebp - 0x14], 0x11
jmp 0x10046f91
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x1b
jg 0x10046fcd
mov dword [ebp - 0x290], 0x8876942a
push 0x435a
push 0x630c
push 0x3a4d
push 0
push 0x6bb0
push 0x238f
lea eax, [ebp - 0x290]
push eax
call fcn.1004955c
add esp, 0x1c
jmp 0x10046f8a
mov dword [ebp - 0x14], 0xfffffffe
jmp 0x10046fdd
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0xffffffee
jle 0x100473f0
push 3
lea ecx, [ebp - 0x148]
call fcn.1001740b
mov byte [ebp - 4], 6
push 3
lea ecx, [ebp - 0x88]
call fcn.1001740b
mov byte [ebp - 4], 7
mov dword [ebp - 0x2c0], 0xc98072f2
mov dword [ebp - 0x370], 1
mov dword [ebp - 0x36c], 1
mov dword [ebp - 0x368], 1
mov dword [ebp - 0x364], 1
lea ecx, [ebp - 0x124]
call fcn.10008b33
push eax
lea eax, [ebp - 0x360]
push eax
lea eax, [ebp - 0x370]
push eax
lea ecx, [ebp - 0x4a4]
call fcn.100174b8
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x41c]
call fcn.10017467
mov byte [ebp - 4], 8
push 1
lea eax, [ebp - 0x148]
push eax
lea eax, [ebp - 0x78]
push eax
push 0x7903
call fcn.1004654a
add esp, 0x10
mov dword [ebp - 0x78], 0
jmp 0x1004709e
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 3
jge 0x100470ba
push dword [ebp - 0x78]
lea ecx, [ebp - 0x88]
call fcn.100174a9
mov dword [eax], 0xfffffff6
jmp 0x10047097
push 0x3669
push 0
push 0x6350
call fcn.100491bd
add esp, 0xc
push 2
lea ecx, [ebp - 0x88]
call fcn.100174a9
and dword [eax], 0
jmp 0x10047104
push 2
lea ecx, [ebp - 0x88]
call fcn.100174a9
mov dword [ebp - 0x1e8], eax
mov eax, dword [ebp - 0x1e8]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x1e8]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0x88]
call fcn.100174a9
cmp dword [eax], 2
jg 0x100473be
mov dword [ebp - 0x298], 7
mov dword [ebp - 0x128], 0xfffd
push 2
lea ecx, [ebp - 0x88]
call fcn.100174a9
push dword [eax]
lea ecx, [ebp - 0x148]
call fcn.100174a9
mov esi, eax
push 2
lea ecx, [ebp - 0x88]
call fcn.100174a9
push dword [eax]
lea ecx, [ebp - 0x148]
call fcn.100174a9
mov ecx, dword [esi]
mov dword [eax], ecx
mov eax, 0xfffa
test eax, eax
je 0x1004717e
cmp dword [ebp - 0x298], 0
jne 0x100472c2
push 2
lea ecx, [ebp - 0x88]
call fcn.100174a9
push 2
lea ecx, [ebp - 0x88]
call fcn.100174a9
cmp dword [eax], 0
jne 0x10047281
cmp dword [ebp - 0x14], 0
jne 0x100471b3
mov dword [ebp - 0x170], 1
jmp 0x100471ba
and dword [ebp - 0x170], 0
imul eax, dword [ebp - 0x170], 0xffff
test eax, eax
je 0x100471e2
push 2
lea ecx, [ebp - 0x88]
call fcn.100174a9
push dword [eax]
lea ecx, [ebp - 0x148]
call fcn.100174a9
mov esi, dword [ebp - 0x14]
push 2
lea ecx, [ebp - 0x88]
call fcn.100174a9
push dword [eax]
lea ecx, [ebp - 0x148]
call fcn.100174a9
cmp esi, dword [eax]
jl 0x10047212
cmp dword [ebp - 0x14], 0
jne 0x10047212
and dword [ebp - 0x228], 0
jmp 0x1004721c
mov dword [ebp - 0x228], 1
push 2
lea ecx, [ebp - 0x88]
call fcn.100174a9
mov ecx, dword [ebp - 0x228]
imul ecx, dword [eax]
test ecx, ecx
je 0x10047248
cmp dword [ebp - 0x14], 0
je 0x10047248
mov dword [ebp - 0x178], 1
jmp 0x1004724f
and dword [ebp - 0x178], 0
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x128], eax
mov esi, dword [ebp - 0x128]
sub esi, dword [ebp - 0x2c0]
push 2
lea ecx, [ebp - 0x148]
call fcn.100174a9
cmp esi, dword [eax]
jne 0x10047281
and dword [ebp - 0x1f0], 0
jmp 0x1004728b
mov dword [ebp - 0x1f0], 1
push 0
lea ecx, [ebp - 0x26c]
call fcn.100174a9
mov ecx, dword [ebp - 0x1f0]
cmp ecx, dword [eax]
jge 0x100472ae
mov dword [ebp - 0x180], 1
jmp 0x100472b5
and dword [ebp - 0x180], 0
push 2
lea ecx, [ebp - 0x88]
call fcn.100174a9
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0x270], eax
push 3
lea ecx, [ebp - 0x41c]
call fcn.100174a9
mov ecx, dword [ebp - 0x270]
mov dword [eax], ecx
push 0
lea ecx, [ebp - 0x26c]
call fcn.100174a9
push 0
lea ecx, [ebp - 0x26c]
call fcn.100174a9
cmp dword [eax], 0
je 0x1004732a
push 2
lea ecx, [ebp - 0x88]
call fcn.100174a9
push dword [eax]
lea ecx, [ebp - 0x148]
call fcn.100174a9
cmp dword [eax], 0
jne 0x1004732a
and dword [ebp - 0x248], 0
jmp 0x10047334
mov dword [ebp - 0x248], 1
push 0
lea ecx, [ebp - 0x26c]
call fcn.100174a9
mov ecx, dword [ebp - 0x248]
cmp ecx, dword [eax]
jle 0x10047357
mov dword [ebp - 0x27c], 1
jmp 0x1004735e
and dword [ebp - 0x27c], 0
push 2
lea ecx, [ebp - 0x88]
call fcn.100174a9
push 2
lea ecx, [ebp - 0x88]
call fcn.100174a9
push dword [eax]
lea ecx, [ebp - 0x148]
call fcn.100174a9
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x438], eax
mov eax, 0xe65c
cmp eax, 0xf785
jg 0x100473a6
mov dword [ebp - 0x188], 1
jmp 0x100473ad
and dword [ebp - 0x188], 0
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x280], eax
jmp 0x100470e0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x41c]
call fcn.1001748d
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x88]
call fcn.1001748d
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x148]
call fcn.1001748d
jmp 0x10046fd6
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x26c]
call fcn.1001748d
mov dword [ebp - 0x10], 2
and dword [ebp - 0xa0], 0
jmp 0x10047417
mov eax, dword [ebp - 0x10]
inc eax
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0x40
jae 0x10047bb7
mov dword [ebp - 0x294], 1
mov dword [ebp - 0x28c], 1
mov dword [ebp - 0x2c8], 0
mov dword [ebp - 0x2d0], 1
mov dword [ebp - 0x1a8], 0
push 3
lea ecx, [ebp - 0x3ac]
call fcn.1001740b
mov dword [ebp - 4], 9
mov dword [ebp - 0x210], 0x8fe4de5a
lea eax, [ebp - 0x420]
push eax
push 0
lea eax, [ebp - 0x3ac]
push eax
call fcn.10048c62
add esp, 0xc
xor eax, eax
je 0x10047680
mov dword [ebp - 0x284], 9
mov dword [ebp - 0xb8], 0x3cfce294
mov dword [ebp - 0x258], 0xfffffffa
mov dword [ebp - 0x208], 0
mov dword [ebp - 0x2d8], 5
cmp dword [ebp - 0x284], 0
je 0x1004766b
mov eax, dword [ebp - 0xb8]
neg eax
jne 0x10047588
mov eax, dword [ebp - 0x2c8]
cmp dword [ebp - 0x28c], eax
jle 0x100474f8
mov dword [ebp - 0x1f8], 1
jmp 0x100474ff
and dword [ebp - 0x1f8], 0
mov eax, dword [ebp - 0x2d0]
imul eax, dword [ebp - 0x1f8]
cmp dword [ebp - 0x294], eax
jne 0x10047520
mov dword [ebp - 0x190], 1
jmp 0x10047527
and dword [ebp - 0x190], 0
cmp dword [ebp - 0x190], 0xb8ea
jge 0x1004753f
mov dword [ebp - 0x230], 1
jmp 0x10047546
and dword [ebp - 0x230], 0
mov eax, dword [ebp - 0x230]
add eax, 9
neg eax
jne 0x10047565
mov eax, 0xc7fffaa2
test eax, eax
jne 0x10047565
and dword [ebp - 0x198], 0
jmp 0x1004756f
mov dword [ebp - 0x198], 1
mov eax, dword [ebp - 0x198]
neg eax
cmp eax, dword [ebp - 0xb8]
jg 0x10047588
and dword [ebp - 0x200], 0
jmp 0x10047592
mov dword [ebp - 0x200], 1
cmp dword [ebp - 0x200], 0xfffffffd
jge 0x100475a7
mov dword [ebp - 0x1a0], 1
jmp 0x100475ae
and dword [ebp - 0x1a0], 0
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x258], eax
mov eax, dword [ebp - 0x258]
mov dword [ebp - 0x1a8], eax
mov eax, dword [ebp - 0x1a8]
mov dword [ebp - 0x208], eax
mov eax, dword [ebp - 0xb8]
cmp dword [ebp - 0x208], eax
jne 0x100475ec
mov dword [ebp - 0x1b0], 1
jmp 0x100475f3
and dword [ebp - 0x1b0], 0
mov eax, dword [ebp - 0x1b0]
sub eax, dword [ebp - 0xb8]
cmp eax, 1
jbe 0x10047610
mov dword [ebp - 0x238], 1
jmp 0x10047617
and dword [ebp - 0x238], 0
push 2
lea ecx, [ebp - 0x3ac]
call fcn.100174a9
mov ecx, dword [ebp - 0x238]
add ecx, dword [eax]
cmp ecx, 0xd15de05d
ja 0x10047640
mov dword [ebp - 0x1b8], 1
jmp 0x10047647
and dword [ebp - 0x1b8], 0
mov eax, dword [ebp - 0x1b8]
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 0x6f94
je 0x1004766b
mov dword [ebp - 0x1c0], 1
jmp 0x10047672
and dword [ebp - 0x1c0], 0
mov eax, dword [ebp - 0x1c0]
mov dword [ebp - 0x2d8], eax
jmp 0x10047694
mov byte [ebp - 0x3d], 0
movzx eax, byte [ebp - 0x3d]
test eax, eax
je 0x10047694
push 0
call fcn.10048e03
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3ac]
call fcn.1001748d
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x120]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x10], eax
jne 0x10047a05
mov eax, dword [ebp - 0x10]
movzx eax, byte [ebp + eax - 0x120]
inc eax
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x12c], 0xe19f23e5
mov dword [ebp - 0x94], 0
jmp 0x100476f3
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 1
jge 0x1004770c
mov eax, dword [ebp - 0x94]
mov dword [ebp + eax*4 - 0x20], 0xfffffff7
jmp 0x100476e6
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x20], 0
jmp 0x10047731
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x20], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x20], 0x1c
je 0x1004797a
mov dword [ebp - 0x24], 0xffffffff
xor eax, eax
inc eax
je 0x10047760
cmp dword [ebp - 0x24], 0
je 0x10047760
mov dword [ebp - 0x250], 1
jmp 0x10047767
and dword [ebp - 0x250], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20]
cmp eax, dword [ebp - 0x250]
jl 0x10047785
mov dword [ebp - 0x1d0], 1
jmp 0x1004778c
and dword [ebp - 0x1d0], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x24], eax
jge 0x100477a0
mov dword [ebp - 0x1c8], 1
jmp 0x100477a7
and dword [ebp - 0x1c8], 0
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x1c8]
je 0x100477be
mov dword [ebp - 0x218], 1
jmp 0x100477c5
and dword [ebp - 0x218], 0
cmp dword [ebp - 0x218], 0x3267e6aa
jg 0x100477dd
mov dword [ebp - 0x240], 1
jmp 0x100477e4
and dword [ebp - 0x240], 0
mov eax, dword [ebp - 0x1d0]
cmp eax, dword [ebp - 0x240]
jle 0x100477fe
mov dword [ebp - 0x1d8], 1
jmp 0x10047805
and dword [ebp - 0x1d8], 0
cmp dword [ebp - 0x1d8], 0x5420
jg 0x1004781d
mov dword [ebp - 0x150], 1
jmp 0x10047824
and dword [ebp - 0x150], 0
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x150]
cmp eax, 0xc975
jg 0x10047840
mov dword [ebp - 0x154], 1
jmp 0x10047847
and dword [ebp - 0x154], 0
cmp dword [ebp - 0x154], 0x8018d9dc
je 0x10047861
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x12c], eax
jmp 0x10047975
mov dword [ebp - 0x29c], 0xffffffff
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20]
mov dword [ebp - 0x448], eax
cmp dword [ebp - 0x29c], 0xffffffff
jne 0x10047890
mov dword [ebp - 0x15c], 1
jmp 0x10047897
and dword [ebp - 0x15c], 0
mov eax, 0xf4caa5d7
sub eax, dword [ebp - 0x15c]
add eax, 0xd50c
cmp eax, dword [ebp - 0x24]
jge 0x100478b8
mov dword [ebp - 0x2e0], 1
jmp 0x100478bf
and dword [ebp - 0x2e0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20]
mov dword [ebp - 0x428], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x20], 9
je 0x100478e8
mov dword [ebp - 0x14c], 1
jmp 0x100478ef
and dword [ebp - 0x14c], 0
mov eax, dword [ebp - 0x12c]
cmp dword [ebp - 0x14c], eax
jne 0x10047909
mov dword [ebp - 0x16c], 1
jmp 0x10047910
and dword [ebp - 0x16c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20]
cmp eax, dword [ebp - 0x16c]
jge 0x1004792e
mov dword [ebp - 0x174], 1
jmp 0x10047935
and dword [ebp - 0x174], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x174], eax
jle 0x1004794c
mov dword [ebp - 0x2ac], 1
jmp 0x10047953
and dword [ebp - 0x2ac], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20]
mov dword [ebp - 0x440], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x430], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x12c], eax
jmp 0x1004771c
mov eax, dword [ebp - 0x10]
movzx eax, byte [ebp + eax - 0x120]
mov ecx, dword [ebp - 0x10]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x54], 1
mov dword [ebp - 0x98], 0
jmp 0x100479af
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 2
jge 0x100479cb
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0x4ac], 0x8bbca631
jmp 0x100479a2
mov dword [ebp - 0x54], 1
jmp 0x100479db
mov eax, dword [ebp - 0x54]
dec eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0
jl 0x100479fa
mov dword [ebp - 0x17c], 2
mov eax, dword [ebp - 0x17c]
dec eax
mov dword [ebp - 0x17c], eax
jmp 0x100479d4
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x54], eax
jmp 0x1004740f
mov eax, dword [ebp - 0x10]
movzx eax, byte [ebp + eax - 0x11f]
mov ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 0xa0]
movzx ecx, byte [ebp + ecx - 0x122]
movsx ecx, byte [ebp + ecx - 0x3d8]
or eax, ecx
mov ecx, dword [ebp - 0x10]
movzx ecx, byte [ebp + ecx - 0x11f]
mov edx, dword [ebp - 0x10]
sub edx, dword [ebp - 0xa0]
movzx edx, byte [ebp + edx - 0x122]
movsx edx, byte [ebp + edx - 0x3d8]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x10]
movzx ecx, byte [ebp + ecx - 0x120]
mov byte [ebp + ecx - 0x3d8], al
mov dword [ebp - 0x3c], 0x5540d7f8
mov dword [ebp - 0x184], 5
mov dword [ebp - 0x3c], 0xfffffffb
jmp 0x10047a86
mov eax, dword [ebp - 0x3c]
dec eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0xfffffff0
jg 0x10047bab
mov dword [ebp - 0x28], 0
jmp 0x10047aa0
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jge 0x10047ab6
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x2fc], 1
jmp 0x10047a99
mov dword [ebp - 0x28], 0
jmp 0x10047ac6
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jge 0x10047adc
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x3e0], 0xf88039d6
jmp 0x10047abf
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2fc]
mov dword [ebp - 0x184], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2fc]
cmp dword [ebp - 0x184], eax
jne 0x10047b0f
mov dword [ebp - 0x18c], 1
jmp 0x10047b16
and dword [ebp - 0x18c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2fc]
cmp dword [ebp - 0x3c], eax
jge 0x10047b33
mov dword [ebp - 0x194], 1
jmp 0x10047b3a
and dword [ebp - 0x194], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x18c]
imul ecx, dword [ebp - 0x194]
cmp dword [ebp + eax - 0x2fc], ecx
jne 0x10047b62
mov dword [ebp - 0x19c], 1
jmp 0x10047b69
and dword [ebp - 0x19c], 0
mov eax, dword [ebp - 0x19c]
sub eax, dword [ebp - 0x3c]
add eax, dword [ebp - 0x3c]
je 0x10047b8c
mov eax, 0xf024
test eax, eax
je 0x10047b8c
mov dword [ebp - 0x1a4], 1
jmp 0x10047b93
and dword [ebp - 0x1a4], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1a4]
mov dword [ebp + eax - 0x3e0], ecx
jmp 0x10047a7f
and dword [ebp - 0xa0], 0
jmp 0x1004740f
xor eax, eax
inc eax
imul eax, eax, 0x1a
mov byte [ebp + eax - 0x3d8], 0
lea eax, [ebp - 0x3d8]
push eax
lea ecx, [ebp - 0x47c]
call fcn.10026067
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x60], 0x48aab564
mov dword [ebp - 0x58], 1
mov dword [ebp - 0x50], 0xb61943ec
mov dword [ebp - 0x90], 0
jmp 0x10047c0c
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 2
jge 0x10047c28
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0xdc], 0
jmp 0x10047bff
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xdc], 0xd
jmp 0x10047c56
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xdc]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xdc], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xdc], 0xffffffe4
jl 0x10047f5f
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0xb4], 0
jmp 0x10047c8a
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 4
jge 0x10047ca6
mov eax, dword [ebp - 0xb4]
mov dword [ebp + eax*4 - 0x3bc], 0xffffffff
jmp 0x10047c7d
mov dword [ebp - 0x30], 0
jmp 0x10047cb6
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jg 0x10047f5a
mov dword [ebp - 0x5c], 1
mov dword [ebp - 0x4c], 0x7f4a7d2a
mov dword [ebp - 0x5c], 3
jmp 0x10047cde
mov eax, dword [ebp - 0x5c]
dec eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0
jl 0x10047f41
mov dword [ebp - 0x70], 0x365653d4
mov dword [ebp - 0x70], 3
jmp 0x10047cff
mov eax, dword [ebp - 0x70]
dec eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
jl 0x10047f3c
mov dword [ebp - 0xbc], 0
jmp 0x10047d22
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 3
jge 0x10047d3e
mov eax, dword [ebp - 0xbc]
mov dword [ebp + eax*4 - 0x3ec], 0xb9567464
jmp 0x10047d15
mov eax, dword [ebp - 0x30]
cmp dword [ebp + eax*4 - 0x3bc], 0
jne 0x10047ddc
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 1
mov edx, 0x6974
sub edx, dword [ebp + ecx - 0x3bc]
cmp dword [ebp + eax - 0xdc], edx
jge 0x10047d7b
mov dword [ebp - 0x1b4], 1
jmp 0x10047d82
and dword [ebp - 0x1b4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xdc]
cmp dword [ebp - 0x30], eax
jle 0x10047da0
mov dword [ebp - 0x1ac], 1
jmp 0x10047da7
and dword [ebp - 0x1ac], 0
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x1ac], eax
jne 0x10047dbe
mov dword [ebp - 0x1bc], 1
jmp 0x10047dc5
and dword [ebp - 0x1bc], 0
mov eax, dword [ebp - 0x1b4]
sub eax, dword [ebp - 0x1bc]
jne 0x10047ddc
and dword [ebp - 0x1c4], 0
jmp 0x10047de6
mov dword [ebp - 0x1c4], 1
cmp dword [ebp - 0x1c4], 0x9953
jl 0x10047dfe
mov dword [ebp - 0x1cc], 1
jmp 0x10047e05
and dword [ebp - 0x1cc], 0
mov eax, dword [ebp - 0x1cc]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0x5169
jle 0x10047e29
mov dword [ebp - 0x1d4], 1
jmp 0x10047e30
and dword [ebp - 0x1d4], 0
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x1d4], eax
je 0x10047e47
mov dword [ebp - 0x1dc], 1
jmp 0x10047e4e
and dword [ebp - 0x1dc], 0
mov eax, dword [ebp - 0x1dc]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
sub eax, 0x1162d50c
mov ecx, dword [ebp - 0x30]
cmp eax, dword [ebp + ecx*4 - 0x3bc]
jge 0x10047e77
mov dword [ebp - 0x1e4], 1
jmp 0x10047e7e
and dword [ebp - 0x1e4], 0
mov eax, dword [ebp - 0x30]
imul eax, dword [ebp - 0x1e4]
push 4
pop ecx
shl ecx, 0
imul eax, dword [ebp + ecx - 0xdc]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], 0
jmp 0x10047ea9
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 3
jg 0x10047f37
mov dword [ebp - 0x400], 3
mov dword [ebp - 0x50], 0
jmp 0x10047ecd
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 4
jge 0x10047ee3
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x3bc], 0
jmp 0x10047ec6
mov dword [ebp - 0x58], 3
jmp 0x10047ef3
mov eax, dword [ebp - 0x58]
dec eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0
jl 0x10047f32
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3ec]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x3ec], eax
mov byte [ebp - 0x41], 0
lea eax, [ebp - 0x41]
push eax
push 0x280e
push 0
push 0x690b
call fcn.1004933c
add esp, 0x10
jmp 0x10047eec
jmp 0x10047ea2
jmp 0x10047cf8
jmp 0x10047cd7
mov byte [ebp - 0x40], 0
movzx eax, byte [ebp - 0x40]
test eax, eax
je 0x10047f55
push 0
call fcn.10048f2f
pop ecx
jmp 0x10047caf
jmp 0x10047c3b
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xdc], 1
jne 0x10047f7b
mov dword [ebp - 0x1ec], 1
jmp 0x10047f82
and dword [ebp - 0x1ec], 0
mov eax, dword [ebp - 0x60]
cmp eax, dword [ebp - 0x1ec]
jg 0x10047f99
mov dword [ebp - 0x2e8], 1
jmp 0x10047fa0
and dword [ebp - 0x2e8], 0
mov dword [ebp - 0x60], 0x7bb34e4a
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x60]
mov dword [ebp + eax - 0xdc], ecx
and dword [ebp - 0xc4], 0
jmp 0x10047fcd
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0x1b
jae 0x10047fe6
mov eax, dword [ebp - 0xc4]
mov byte [ebp + eax - 0x3d8], 0
jmp 0x10047fc0
push 0x10007a9a
lea ecx, [ebp - 0x464]
call fcn.10026067
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x464]
call fcn.10017834
cmp eax, dword [ebp + 0xc]
je 0x10048547
mov dword [ebp - 0x20c], 6
push 2
lea ecx, [ebp - 0x388]
call fcn.1001740b
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x35c], 0xe8588d0d
mov dword [ebp - 0x358], 0xe8588d0d
mov dword [ebp - 0x354], 0xe8588d0d
mov dword [ebp - 0x350], 0xe8588d0d
lea ecx, [ebp - 0x12d]
call fcn.10008b33
push eax
lea eax, [ebp - 0x34c]
push eax
lea eax, [ebp - 0x35c]
push eax
lea ecx, [ebp - 0x48c]
call fcn.100174b8
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x3a0]
call fcn.10017467
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x1f4], 0x5d3e9973
mov dword [ebp - 0x204], 7
mov dword [ebp - 0x1fc], 0
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x320], 1
mov dword [ebp - 0x31c], 1
mov dword [ebp - 0x318], 1
mov dword [ebp - 0x314], 1
lea ecx, [ebp - 0x121]
call fcn.10008b33
push eax
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x320]
push eax
lea ecx, [ebp - 0x484]
call fcn.100174b8
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x3f8]
call fcn.10017467
mov byte [ebp - 4], 0xe
mov dword [ebp - 0xcc], 0
jmp 0x10048129
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 2
jge 0x1004814b
push dword [ebp - 0xcc]
lea ecx, [ebp - 0x388]
call fcn.100174a9
mov dword [eax], 1
jmp 0x1004811c
lea eax, [ebp - 0x1fc]
push eax
push 0x78d2
lea eax, [ebp - 0x3a0]
push eax
lea eax, [ebp - 0x1f4]
push eax
lea eax, [ebp - 0x20c]
push eax
push 0x4c
lea eax, [ebp - 0x204]
push eax
push 0x2174
push 0x6bf2
lea eax, [ebp - 0x388]
push eax
push 0x6d30
lea eax, [ebp - 0x6c]
push eax
push 0x73b6
push 0
call fcn.10049c7d
add esp, 0x38
mov dword [ebp - 0x6c], 0
jmp 0x100481ae
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0x2a
jg 0x1004820c
mov dword [ebp - 0x2f0], 0xfffffff6
mov dword [ebp - 0x2bc], 0x39a53aa4
lea eax, [ebp - 0x3f8]
push eax
lea eax, [ebp - 0x1f4]
push eax
lea eax, [ebp - 0x3a0]
push eax
lea eax, [ebp - 0x1fc]
push eax
lea eax, [ebp - 0x204]
push eax
lea eax, [ebp - 0x2bc]
push eax
lea eax, [ebp - 0x20c]
push eax
push 0
lea eax, [ebp - 0x2f0]
push eax
call fcn.10048aec
add esp, 0x24
jmp 0x100481a7
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x3f8]
call fcn.1001748d
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x3a0]
call fcn.1001748d
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x388]
call fcn.1001748d
call fcn.1006e777
mov esi, eax
lea ecx, [ebp - 0x47c]
call fcn.10017834
mov ecx, eax
mov eax, esi
xor edx, edx
div ecx
mov dword [ebp - 0x2cc], edx
mov dword [ebp - 0x7c], 0xffffffff
mov dword [ebp - 0x2c], 0
jmp 0x10048270
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jge 0x10048286
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0xd4], 1
jmp 0x10048269
mov dword [ebp - 0x2c], 0
jmp 0x10048296
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 4
jge 0x100482ac
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x4e0], 0xfe6966ef
jmp 0x1004828f
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xd4], 0x14
jmp 0x100482da
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd4]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xd4], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xd4], 0x1d
jne 0x100484f2
mov dword [ebp - 0x74], 0xeede0b40
mov dword [ebp - 0xe0], 0
jmp 0x1004830e
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 1
jge 0x1004832a
mov eax, dword [ebp - 0xe0]
mov dword [ebp + eax*4 - 0x214], 0xf307d7c1
jmp 0x10048301
mov dword [ebp - 0x74], 0x16
jmp 0x1004833a
mov eax, dword [ebp - 0x74]
dec eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0xffffffef
je 0x100484ed
mov dword [ebp - 0x68], 0xfffffff6
mov dword [ebp - 0x68], 0xffffffff
jmp 0x1004835b
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0x1b
jne 0x100484e8
mov dword [ebp - 0x21c], 0x3418eb0b
mov dword [ebp - 0xd0], 0
jmp 0x10048388
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 2
jge 0x100483a4
mov eax, dword [ebp - 0xd0]
mov dword [ebp + eax*4 - 0x13c], 0xfffffffc
jmp 0x1004837b
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x13c], 0
jmp 0x100483d2
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x13c]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x13c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x13c], 0
jg 0x10048412
mov dword [ebp - 0x2c4], 0x23a266d2
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x13c]
mov eax, dword [ebp + eax*4 - 0x214]
mov dword [ebp - 0x434], eax
mov dword [ebp - 0x2c4], 0xb963ab1
jmp 0x100483b7
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x214]
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x74], 1
jle 0x1004849f
mov dword [ebp - 0x7c], 0xffffffee
jmp 0x10048438
mov eax, dword [ebp - 0x7c]
dec eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0xffffffe3
jl 0x1004849d
mov dword [ebp - 0x2dc], 0x3d975123
mov dword [ebp - 0x224], 0xffffffff
mov eax, dword [ebp - 0x2dc]
mov dword [ebp - 0x21c], eax
mov eax, dword [ebp - 0x21c]
mov dword [ebp - 0x224], eax
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0x224], eax
jle 0x10048481
mov dword [ebp - 0x22c], 1
jmp 0x10048488
and dword [ebp - 0x22c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x22c]
mov dword [ebp + eax - 0x13c], ecx
jmp 0x10048431
jmp 0x100484e3
mov byte [ebp - 0x32], 0
movzx eax, byte [ebp - 0x32]
test eax, eax
je 0x100484b3
push 0
call dword [sym.imp.USER32.dll_RegisterWindowMessageW]
mov byte [ebp - 0x34], 0
movzx eax, byte [ebp - 0x34]
test eax, eax
je 0x100484e3
push 0xbe7
push 0
push 0
push 0xce1
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_CreateDIBitmap]
jmp 0x10048354
jmp 0x10048333
jmp 0x100482bf
push 1
push dword [ebp - 0x2cc]
lea eax, [ebp - 0x4d0]
push eax
lea ecx, [ebp - 0x47c]
call fcn.100515fc
mov dword [ebp - 0x2ec], eax
mov eax, dword [ebp - 0x2ec]
mov dword [ebp - 0x2d4], eax
mov byte [ebp - 4], 0xf
push dword [ebp - 0x2d4]
lea ecx, [ebp - 0x464]
call fcn.10026096
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x4d0]
call fcn.1001736d
jmp 0x10047ffa
lea eax, [ebp - 0x464]
push eax
mov ecx, dword [ebp + 8]
call fcn.10017314
mov eax, dword [ebp - 0x234]
or eax, 1
mov dword [ebp - 0x234], eax
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x464]
call fcn.1001736d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x47c]
call fcn.1001736d
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret