Function at 0x1002eb01
Capabilities:
Accept command line arguments
Delete directory
Set environment variable

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10068269
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x13dc
call fcn.10062f00
push esi
movzx eax, byte [ebp + 0x38]
test eax, eax
je 0x1002eb59
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0xb38], eax
mov eax, dword [ebp + 0x34]
mov dword [ebp - 0xb6c], eax
push dword [ebp - 0xb38]
push 0
push dword [ebp - 0xb6c]
call fcn.10039968
add esp, 0xc
jmp 0x100382b1
lea eax, [ebp + 0xc]
mov dword [ebp - 0xb74], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0xbac], eax
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 0xba4], eax
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0xb8c], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0xb9c], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0xc48], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xb7c], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0xb94], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0xb84], eax
mov eax, dword [ebp + 0x30]
mov dword [ebp - 0xbb4], eax
mov eax, dword [ebp - 0xb74]
movzx eax, byte [eax]
test eax, eax
je 0x1002ed7a
mov eax, dword [ebp - 0xb7c]
mov dword [ebp - 0x41c], eax
mov eax, dword [ebp - 0xb84]
mov dword [ebp - 0x390], eax
mov eax, dword [ebp - 0xb8c]
mov dword [ebp - 0x44c], eax
mov eax, dword [ebp - 0xb94]
mov dword [ebp - 0x238], eax
mov eax, dword [ebp - 0xb9c]
mov dword [ebp - 0x100], eax
push 0x14
push 0
push 0x2bc
push 0x298
call fcn.100462f1
pop ecx
pop ecx
call eax
push eax
push 0x2bc
push 0x304
call fcn.100462f1
pop ecx
pop ecx
call eax
mov ecx, dword [ebp - 0x100]
mov dword [ecx], eax
push 1
push 1
lea eax, [ebp - 0x100]
push eax
push 0x1326
push 0x34df
push 1
lea eax, [ebp - 0x238]
push eax
call fcn.1002d20b
add esp, 0x1c
push 1
lea eax, [ebp - 0x100]
push eax
push 0x10ff
push 1
call fcn.1002d2f4
add esp, 0x10
mov eax, dword [ebp - 0x100]
mov eax, dword [eax]
and dword [eax + 8], 0
mov eax, dword [ebp - 0x100]
mov eax, dword [eax]
and dword [eax + 0x10], 0
push 4
push 0x1000
mov eax, dword [ebp - 0x390]
push dword [eax + 0x50]
mov eax, dword [ebp - 0x238]
push dword [eax]
push 0x2bc
push 0x250
call fcn.100462f1
pop ecx
pop ecx
call eax
push 4
push 0x1000
mov eax, dword [ebp - 0x390]
push dword [eax + 0x54]
mov eax, dword [ebp - 0x238]
push dword [eax]
push 0x2bc
push 0x250
call fcn.100462f1
pop ecx
pop ecx
call eax
mov ecx, dword [ebp - 0x44c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x41c]
mov eax, dword [eax + 0x3c]
mov ecx, dword [ebp - 0x390]
add eax, dword [ecx + 0x54]
push eax
push dword [ebp - 0x41c]
mov eax, dword [ebp - 0x44c]
push dword [eax]
call fcn.100464c4
add esp, 0xc
push 1
lea eax, [ebp - 0x41c]
push eax
push 0x2f0b
push 0x1432
lea eax, [ebp - 0x44c]
push eax
push 1
push 0x14f1
push 0x51d5
lea eax, [ebp - 0x100]
push eax
push 1
push 0x6262
call fcn.1002d394
add esp, 0x2c
push 1
lea eax, [ebp - 0x238]
push eax
push 0x5c1b
push 0x5ac7
push 1
push 0x61e0
lea eax, [ebp - 0x100]
push eax
call fcn.1002d5e3
add esp, 0x1c
jmp 0x100382b1
mov eax, dword [ebp - 0xba4]
mov dword [ebp - 0xb28], eax
mov eax, dword [ebp - 0xbac]
mov dword [ebp - 0xd94], eax
mov eax, dword [ebp - 0xbb4]
mov dword [ebp - 0x998], eax
mov eax, dword [ebp - 0xc48]
mov dword [ebp - 0x3ec], eax
mov dword [ebp - 0x150], 0xe8cff0ea
mov dword [ebp - 0x9d8], 1
mov dword [ebp - 0x9e0], 0x856cd833
mov dword [ebp - 0x9d0], 1
mov dword [ebp - 0xc58], 0xf5d3cc11
mov dword [ebp - 0x126c], 0xd005
mov dword [ebp - 0x150], 0xffffffeb
jmp 0x1002edff
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 6
je 0x1002f00c
mov dword [ebp - 0x9a8], 0x779c63c4
mov dword [ebp - 0x454], 7
mov dword [ebp - 0x398], 6
mov dword [ebp - 0x198], 5
push 0x22f5
push 0x7898
push 0xf31
lea eax, [ebp - 0x454]
push eax
lea eax, [ebp - 0x9a8]
push eax
push 0
lea eax, [ebp - 0x9e0]
push eax
lea eax, [ebp - 0x198]
push eax
push 0x71f5
push 0x905
push 0x33f5
push 0x2f2d
lea eax, [ebp - 0x150]
push eax
lea eax, [ebp - 0x9d0]
push eax
push 0x5dbb
push 0x7049
lea eax, [ebp - 0x9d8]
push eax
push 1
lea eax, [ebp - 0x398]
push eax
call fcn.1002a492
add esp, 0x4c
mov dword [ebp - 0x198], 0
jmp 0x1002eebe
mov eax, dword [ebp - 0x198]
dec eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 0xffffffee
jl 0x1002f007
mov dword [ebp - 0xc50], 0
mov dword [ebp - 0x308], 0
jmp 0x1002eeee
mov eax, dword [ebp - 0x308]
inc eax
mov dword [ebp - 0x308], eax
cmp dword [ebp - 0x308], 3
jge 0x1002ef0a
mov eax, dword [ebp - 0x308]
mov dword [ebp + eax*4 - 0xd48], 1
jmp 0x1002eee1
mov eax, dword [ebp - 0x454]
mov dword [ebp - 0x454], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd48]
mov dword [ebp - 0x1254], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0xd48]
cmp dword [ebp + eax - 0xd48], ecx
jl 0x1002ef50
mov dword [ebp - 0x690], 1
jmp 0x1002ef57
and dword [ebp - 0x690], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd48]
cmp eax, dword [ebp - 0x690]
je 0x1002ef78
mov dword [ebp - 0x9b0], 1
jmp 0x1002ef7f
and dword [ebp - 0x9b0], 0
mov eax, dword [ebp - 0x9a8]
cmp dword [ebp - 0x9b0], eax
jne 0x1002ef99
mov dword [ebp - 0x9b8], 1
jmp 0x1002efa0
and dword [ebp - 0x9b8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd48]
imul eax, dword [ebp - 0x9b8]
test eax, eax
jl 0x1002efc4
mov dword [ebp - 0x9c0], 1
jmp 0x1002efcb
and dword [ebp - 0x9c0], 0
mov eax, dword [ebp - 0x9c0]
mov dword [ebp - 0x398], eax
cmp dword [ebp - 0x398], 0x52b3
je 0x1002efef
mov dword [ebp - 0x9c8], 1
jmp 0x1002eff6
and dword [ebp - 0x9c8], 0
mov eax, dword [ebp - 0x9c8]
mov dword [ebp - 0xc50], eax
jmp 0x1002eeb1
jmp 0x1002edf2
lea eax, [ebp - 0x9d0]
push eax
push 0x285e
lea eax, [ebp - 0xc58]
push eax
push 0
lea eax, [ebp - 0x150]
push eax
push 1
lea eax, [ebp - 0x9d8]
push eax
lea eax, [ebp - 0x9e0]
push eax
call fcn.1002aa5b
add esp, 0x20
mov dword [ebp - 0x1138], 0xfb0b0297
mov dword [ebp - 0x1230], 4
mov dword [ebp - 0x1140], 0
mov dword [ebp - 0x125c], 0xc0aa39ed
mov dword [ebp - 0xf88], 1
mov dword [ebp - 0xf8c], 0
mov dword [ebp - 0xf94], 4
mov dword [ebp - 0xf9c], 0x374b1b05
mov dword [ebp - 0xfa4], 0xffffffff
mov dword [ebp - 0xfac], 0xffffffff
mov dword [ebp - 0xfb4], 0xee21afa9
push 1
lea ecx, [ebp - 0x11dc]
call fcn.100166bf
and dword [ebp - 4], 0
mov dword [ebp - 0x9e8], 0x25db2b05
mov dword [ebp - 0x240], 0
jmp 0x1002f0e2
mov eax, dword [ebp - 0x240]
inc eax
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 1
jge 0x1002f104
push dword [ebp - 0x240]
lea ecx, [ebp - 0x11dc]
call fcn.100167c9
mov dword [eax], 7
jmp 0x1002f0d5
mov eax, dword [ebp - 0x9e8]
inc eax
mov dword [ebp - 0x9e8], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x11dc]
call fcn.100167a4
mov dword [ebp - 0xfbc], 0x47dfa860
mov dword [ebp - 0xfc4], 0xfffffffb
mov dword [ebp - 0xfcc], 0xffffffff
mov dword [ebp - 0xfd4], 1
mov dword [ebp - 0xfdc], 0xffffffff
mov dword [ebp - 0x1044], 0x4ab274bf
mov dword [ebp - 0x104c], 0xfffffffc
mov dword [ebp - 0x1054], 0xffffffff
mov dword [ebp - 0x105c], 9
mov dword [ebp - 0x1064], 0
mov dword [ebp - 0x106c], 0x95031536
mov dword [ebp - 0x1074], 0x2b21a35c
mov dword [ebp - 0x107c], 0x2a26f3f1
mov dword [ebp - 0x1084], 0xfffffff6
mov dword [ebp - 0x108c], 0x4a41637c
mov dword [ebp - 0x1094], 0xa32a17d0
mov dword [ebp - 0x109c], 0xfffffffd
mov dword [ebp - 0x10a4], 0
mov dword [ebp - 0x10ac], 0x5d70512a
mov dword [ebp - 0x10b4], 0xfd66c4a8
push 4
lea ecx, [ebp - 0x11ec]
call fcn.100166bf
mov dword [ebp - 4], 1
mov dword [ebp - 0x9f0], 0
mov dword [ebp - 0x9f8], 8
push 0
push 0x15b1
lea eax, [ebp - 0x11ec]
push eax
push 0x15cf
push 0x69fe
lea eax, [ebp - 0x10bc]
push eax
push 0
push 0x4464
call fcn.10029730
add esp, 0x20
mov eax, dword [ebp - 0x9f0]
dec eax
mov dword [ebp - 0x9f0], eax
mov eax, dword [ebp - 0x9f8]
dec eax
mov dword [ebp - 0x9f8], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x11ec]
call fcn.100167a4
mov dword [ebp - 0xac], 0xe8cff0ea
mov dword [ebp - 0x68], 0
jmp 0x1002f281
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 2
jge 0x1002f297
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0xe6c], 0
jmp 0x1002f27a
mov dword [ebp - 0x68], 0
jmp 0x1002f2a7
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 3
jge 0x1002f2bd
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0xab4], 0x1e87df2f
jmp 0x1002f2a0
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xab4], 1
jmp 0x1002f2eb
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xab4]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xab4], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xab4], 0
jl 0x1002f480
mov dword [ebp - 0x310], 0xc3eee2fd
mov dword [ebp - 0xc70], 0xffffffff
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xab4]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0xab4]
mov eax, dword [ebp + eax*4 - 0xe6c]
mov dword [ebp + ecx*4 - 0xe6c], eax
mov dword [ebp - 0x310], 0
jmp 0x1002f354
mov eax, dword [ebp - 0x310]
dec eax
mov dword [ebp - 0x310], eax
cmp dword [ebp - 0x310], 0xfffffff9
jg 0x1002f47b
mov dword [ebp - 0xc60], 0x1621
cmp dword [ebp - 0xc60], 0x8b6
jge 0x1002f43e
lea eax, [ebp - 0x430]
push eax
push 0x10007724
call fcn.1004edeb
pop ecx
pop ecx
mov eax, dword [ebp - 0x430]
mov dword [ebp - 0xc68], eax
mov eax, dword [ebp - 0x430]
dec eax
mov dword [ebp - 0x430], eax
cmp dword [ebp - 0xc68], 0
je 0x1002f43e
lea eax, [ebp - 0xa00]
push eax
push 0x10007724
call fcn.1004edeb
pop ecx
pop ecx
push 0x100079c0
call fcn.1004f7e7
pop ecx
mov eax, dword [ebp - 0xa00]
mov dword [ebp - 0x3a0], eax
mov eax, dword [ebp - 0xa00]
dec eax
mov dword [ebp - 0x1e0], eax
jmp 0x1002f3fa
mov eax, dword [ebp - 0x1e0]
dec eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 1
jl 0x1002f439
push dword [ebp - 0x3a0]
push dword [ebp - 0x1e0]
push 0x100077a4
call fcn.1004f4dc
add esp, 0xc
mov eax, dword [ebp - 0x1e0]
mov ecx, dword [ebp - 0x3a0]
lea eax, [ecx + eax + 1]
cdq
sub eax, edx
sar eax, 1
mov dword [ebp - 0x3a0], eax
jmp 0x1002f3ed
jmp 0x1002f38e
push 0
push 0x1acf
push 0x2622
lea eax, [ebp - 0xc70]
push eax
push 0x4e6e
push 1
push 0x14d3
push 0x3577
push 0x78ba
push 0
push 0x234a
call fcn.1002d394
add esp, 0x2c
jmp 0x1002f347
jmp 0x1002f2d0
mov dword [ebp - 0x288], 1
mov dword [ebp - 0x1a0], 0xfffffffc
mov dword [ebp - 0x10c4], 4
mov dword [ebp - 0x78], 0
jmp 0x1002f4ae
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 3
jge 0x1002f4c4
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0x1314], 2
jmp 0x1002f4a7
mov dword [ebp - 0x78], 0
jmp 0x1002f4d4
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 1
jge 0x1002f4ea
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0x10cc], 1
jmp 0x1002f4cd
mov dword [ebp - 0x1a0], 0
jmp 0x1002f503
mov eax, dword [ebp - 0x1a0]
dec eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 0xffffffe5
jl 0x1002f763
mov dword [ebp - 0x10d4], 0
mov dword [ebp - 0x10dc], 8
mov dword [ebp - 0x10e4], 0xfffffff6
mov dword [ebp - 0x10ec], 0x1720d700
mov dword [ebp - 0x10f4], 0xdbc1c234
mov dword [ebp - 0x10fc], 0x722abac8
mov dword [ebp - 0x1104], 0x4c7ba3f3
mov dword [ebp - 0x110c], 0x29a2a67f
mov dword [ebp - 0x1114], 0x83acdd71
mov dword [ebp - 0x111c], 0xa5659cde
mov dword [ebp - 0x4d0], 0xfffffff7
mov dword [ebp - 0x248], 0
jmp 0x1002f597
mov eax, dword [ebp - 0x248]
inc eax
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 1
jge 0x1002f5b3
mov eax, dword [ebp - 0x248]
mov dword [ebp + eax*4 - 0xa08], 0xd2e8
jmp 0x1002f58a
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa08]
mov dword [ebp - 0x1124], eax
mov eax, 0x3f7bf48c
sub eax, 0x3eb60693
jne 0x1002f5de
mov dword [ebp - 0x9a0], 1
jmp 0x1002f5e5
and dword [ebp - 0x9a0], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xa08], 0x7dcd66a0
jle 0x1002f604
mov dword [ebp - 0xa10], 1
jmp 0x1002f60b
and dword [ebp - 0xa10], 0
mov eax, dword [ebp - 0x1a0]
cmp eax, dword [ebp - 0xa10]
jle 0x1002f625
mov dword [ebp - 0x400], 1
jmp 0x1002f62c
and dword [ebp - 0x400], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x400]
mov dword [ebp + eax - 0x1314], ecx
mov eax, dword [ebp - 0x9a0]
sub eax, dword [ebp - 0x400]
cmp eax, 0xfffffff7
je 0x1002f6f6
mov dword [ebp - 0xc78], 0
mov dword [ebp - 0x112c], 0xb79ae4f7
mov dword [ebp - 0x1134], 0x213072c0
mov dword [ebp - 0x113c], 0x4b15d3e9
mov dword [ebp - 0x1144], 1
mov dword [ebp - 0x114c], 0xfffffffb
mov dword [ebp - 0x490], 0x6a1c
mov dword [ebp - 0x318], 0
jmp 0x1002f6b3
mov eax, dword [ebp - 0x318]
inc eax
mov dword [ebp - 0x318], eax
cmp dword [ebp - 0x318], 2
jge 0x1002f6cf
mov eax, dword [ebp - 0x318]
mov dword [ebp + eax*4 - 0x1370], 1
jmp 0x1002f6a6
push 1
push 0xb3d
lea eax, [ebp - 0xc78]
push eax
push 0
call fcn.1002d2f4
add esp, 0x10
mov eax, dword [ebp - 0x490]
dec eax
mov dword [ebp - 0x490], eax
jmp 0x1002f742
mov dword [ebp - 0x1154], 1
mov dword [ebp - 0x250], 0
jmp 0x1002f719
mov eax, dword [ebp - 0x250]
inc eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 3
jge 0x1002f735
mov eax, dword [ebp - 0x250]
mov dword [ebp + eax*4 - 0x13c0], 0xe2efe8e6
jmp 0x1002f70c
mov eax, dword [ebp - 0x4d0]
inc eax
mov dword [ebp - 0x4d0], eax
mov byte [ebp - 0xfa], 0
movzx eax, byte [ebp - 0xfa]
test eax, eax
je 0x1002f75e
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
jmp 0x1002f4f6
mov dword [ebp - 0x358], 0x856cd833
mov dword [ebp - 0x54], 0x47df
mov dword [ebp - 0x4b4], 0xac0faab3
mov dword [ebp - 0x115c], 0xffffffff
lea eax, [ebp - 0x54]
push eax
push 0x1a33
push 0
call fcn.10039749
add esp, 0xc
mov dword [ebp - 0x54], 0xffffffee
jmp 0x1002f7ab
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0x30
jg 0x1002f996
mov dword [ebp - 0x320], 0x9ecf
mov dword [ebp - 0xc80], 0x5610a143
mov dword [ebp - 0xc88], 0x5950
mov dword [ebp - 0xc90], 8
cmp dword [ebp - 0x54], 0xa4ccfd66
ja 0x1002f7f2
mov dword [ebp - 0x49c], 1
jmp 0x1002f7f9
and dword [ebp - 0x49c], 0
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x49c], eax
je 0x1002f810
mov dword [ebp - 0x8bc], 1
jmp 0x1002f817
and dword [ebp - 0x8bc], 0
mov eax, 0x13b2
sub eax, dword [ebp - 0x8bc]
cmp eax, 0xa17d0b0a
jne 0x1002f835
mov dword [ebp - 0x4a4], 1
jmp 0x1002f83c
and dword [ebp - 0x4a4], 0
mov eax, dword [ebp - 0x320]
cmp dword [ebp - 0x4a4], eax
jg 0x1002f856
mov dword [ebp - 0x764], 1
jmp 0x1002f85d
and dword [ebp - 0x764], 0
mov eax, dword [ebp - 0x320]
cmp eax, dword [ebp - 0x764]
jl 0x1002f877
mov dword [ebp - 0x4ac], 1
jmp 0x1002f87e
and dword [ebp - 0x4ac], 0
mov eax, dword [ebp - 0x4ac]
add eax, 7
jne 0x1002f89b
cmp dword [ebp - 0x320], 0
jne 0x1002f89b
and dword [ebp - 0x96c], 0
jmp 0x1002f8a5
mov dword [ebp - 0x96c], 1
mov eax, dword [ebp - 0x96c]
mov dword [ebp - 0x4b4], eax
cmp dword [ebp - 0x4b4], 0
jne 0x1002f8c8
xor eax, eax
inc eax
jne 0x1002f8c8
and dword [ebp - 0x76c], 0
jmp 0x1002f8d2
mov dword [ebp - 0x76c], 1
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x76c], eax
jle 0x1002f8e9
mov dword [ebp - 0x4bc], 1
jmp 0x1002f8f0
and dword [ebp - 0x4bc], 0
mov eax, dword [ebp - 0x320]
cmp dword [ebp - 0x4bc], eax
jne 0x1002f90a
mov dword [ebp - 0x8c4], 1
jmp 0x1002f911
and dword [ebp - 0x8c4], 0
cmp dword [ebp - 0x8c4], 0x9b780f88
je 0x1002f929
mov dword [ebp - 0x4c4], 1
jmp 0x1002f930
and dword [ebp - 0x4c4], 0
mov eax, dword [ebp - 0x4c4]
sub eax, dword [ebp - 0x54]
cmp eax, 1
jne 0x1002f947
cmp dword [ebp - 0xc80], 0
je 0x1002f94e
cmp dword [ebp - 0xc88], 0
cmp dword [ebp - 0x54], 5
jbe 0x1002f960
mov dword [ebp - 0x774], 1
jmp 0x1002f967
and dword [ebp - 0x774], 0
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x774], eax
jle 0x1002f97e
mov dword [ebp - 0x4cc], 1
jmp 0x1002f985
and dword [ebp - 0x4cc], 0
mov eax, dword [ebp - 0x4cc]
mov dword [ebp - 0xc90], eax
jmp 0x1002f7a4
mov dword [ebp - 0x9a4], 1
mov dword [ebp - 0x444], 0x488f4f3
mov dword [ebp - 0x3b0], 1
mov dword [ebp - 0x3a8], 0x1b9c6fec
mov dword [ebp - 0xc98], 1
mov dword [ebp - 0x8d4], 1
mov dword [ebp - 0xca0], 0xffffffff
mov dword [ebp - 0x6c], 0
jmp 0x1002f9ec
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 2
jge 0x1002fa02
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0x428], 0x6d44
jmp 0x1002f9e5
mov dword [ebp - 0x6c], 0
jmp 0x1002fa12
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 3
jge 0x1002fa28
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0x1368], 0x17ca4e86
jmp 0x1002fa0b
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x428]
mov dword [ebp - 0x1164], eax
imul eax, dword [ebp - 0x3b0], 0x19f8
mov dword [ebp - 0x9c4], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x9c4]
mov dword [ebp + eax - 0x1368], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x428]
imul eax, dword [ebp - 0x9c4]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x428]
je 0x1002fa8c
mov dword [ebp - 0x4d4], 1
jmp 0x1002fa93
and dword [ebp - 0x4d4], 0
cmp dword [ebp - 0x4d4], 0xffffffff
jle 0x1002faa8
mov dword [ebp - 0x77c], 1
jmp 0x1002faaf
and dword [ebp - 0x77c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x428]
cmp dword [ebp - 0x77c], eax
jge 0x1002fad0
mov dword [ebp - 0x4dc], 1
jmp 0x1002fad7
and dword [ebp - 0x4dc], 0
mov eax, dword [ebp - 0x444]
cmp dword [ebp - 0x4dc], eax
jne 0x1002faf1
mov dword [ebp - 0x8cc], 1
jmp 0x1002faf8
and dword [ebp - 0x8cc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x428]
cmp dword [ebp - 0x8cc], eax
jne 0x1002fb19
mov dword [ebp - 0x4e4], 1
jmp 0x1002fb20
and dword [ebp - 0x4e4], 0
imul eax, dword [ebp - 0x4e4], 0x4309
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x428]
push 3
pop ecx
sub ecx, eax
jne 0x1002fb51
mov eax, 0x869e7721
test eax, eax
jne 0x1002fb51
and dword [ebp - 0x784], 0
jmp 0x1002fb5b
mov dword [ebp - 0x784], 1
mov eax, dword [ebp - 0x3a8]
inc eax
mov dword [ebp - 0x3a8], eax
mov eax, dword [ebp - 0x3a8]
cmp eax, dword [ebp - 0x784]
jne 0x1002fb82
mov dword [ebp - 0x4ec], 1
jmp 0x1002fb89
and dword [ebp - 0x4ec], 0
imul eax, dword [ebp - 0x4ec], 0xfa2e
cmp eax, 0xe8a28d88
jne 0x1002fba6
mov dword [ebp - 0x974], 1
jmp 0x1002fbad
and dword [ebp - 0x974], 0
mov eax, dword [ebp - 0x974]
mov dword [ebp - 0x444], eax
mov eax, dword [ebp - 0x444]
mov dword [ebp - 0x116c], eax
cmp dword [ebp - 0xc98], 0x965da1f7
jae 0x1002fbdd
mov dword [ebp - 0x4f4], 1
jmp 0x1002fbe4
and dword [ebp - 0x4f4], 0
cmp dword [ebp - 0x4f4], 0x66ba0539
jge 0x1002fbfc
mov dword [ebp - 0x78c], 1
jmp 0x1002fc03
and dword [ebp - 0x78c], 0
mov eax, dword [ebp - 0x3b0]
cmp dword [ebp - 0x78c], eax
jne 0x1002fc1d
mov dword [ebp - 0x4fc], 1
jmp 0x1002fc24
and dword [ebp - 0x4fc], 0
mov eax, dword [ebp - 0x4fc]
mov dword [ebp - 0x8d4], eax
cmp dword [ebp - 0x8d4], 0
cmp dword [ebp - 0x3b0], 0x81f13d46
jb 0x1002fc4f
mov dword [ebp - 0x504], 1
jmp 0x1002fc56
and dword [ebp - 0x504], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x428]
cmp eax, dword [ebp - 0x504]
jl 0x1002fc77
mov dword [ebp - 0x794], 1
jmp 0x1002fc7e
and dword [ebp - 0x794], 0
mov eax, dword [ebp - 0x794]
mov dword [ebp - 0xca0], eax
mov dword [ebp - 0xc8c], 0xf5d3cc11
mov dword [ebp - 0x180], 0xfff8
push 3
lea ecx, [ebp - 0xe04]
call fcn.100166bf
mov dword [ebp - 4], 2
push 1
lea ecx, [ebp - 0xacc]
call fcn.100166bf
mov byte [ebp - 4], 3
mov dword [ebp - 0x408], 0xffff
mov dword [ebp - 0xca8], 0xbee6daba
lea eax, [ebp - 0xe04]
push eax
push 0x7704
lea eax, [ebp - 0x5c]
push eax
push 0x1128
push 0
call fcn.10038f5d
add esp, 0x14
mov dword [ebp - 0x5c], 0
jmp 0x1002fd06
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 4
jge 0x1002fd1c
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0xa30], 0xffffffff
jmp 0x1002fcff
mov dword [ebp - 0x5c], 0
jmp 0x1002fd2c
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 1
jge 0x1002fd45
push dword [ebp - 0x5c]
lea ecx, [ebp - 0xacc]
call fcn.100167c9
or dword [eax], 0xffffffff
jmp 0x1002fd25
push 1
lea eax, [ebp - 0x180]
push eax
push 0x64f8
push 0
push 0x7790
push 0x6d88
push 0x1443
push 0x3a85
push 0x23b9
push 0
call fcn.10038f8c
add esp, 0x28
cmp dword [ebp - 0x180], 0
je 0x1002fe1b
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xa30]
mov dword [ebp - 0x1174], eax
mov eax, dword [ebp - 0x408]
inc eax
mov dword [ebp - 0x408], eax
push 0
lea ecx, [ebp - 0xacc]
call fcn.100167c9
cmp dword [eax], 0x5610a143
jne 0x1002fdc6
mov dword [ebp - 0x50c], 1
jmp 0x1002fdcd
and dword [ebp - 0x50c], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xa30]
add eax, dword [ebp - 0x50c]
jne 0x1002fdef
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xa30], 0
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0xa30], 0
je 0x1002fe1b
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0xa30], 0
je 0x1002fe1b
mov dword [ebp - 0xa04], 1
jmp 0x1002fe22
and dword [ebp - 0xa04], 0
push 0
lea ecx, [ebp - 0xacc]
call fcn.100167c9
mov ecx, dword [ebp - 0xa04]
cmp ecx, dword [eax]
jle 0x1002fe45
mov dword [ebp - 0x514], 1
jmp 0x1002fe4c
and dword [ebp - 0x514], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xa30]
cmp dword [ebp - 0x514], eax
jl 0x1002fe6d
mov dword [ebp - 0x79c], 1
jmp 0x1002fe74
and dword [ebp - 0x79c], 0
mov eax, dword [ebp - 0x180]
cmp eax, dword [ebp - 0x79c]
jl 0x1002fe8e
mov dword [ebp - 0x51c], 1
jmp 0x1002fe95
and dword [ebp - 0x51c], 0
push 0
lea ecx, [ebp - 0xacc]
call fcn.100167c9
mov ecx, dword [ebp - 0x51c]
cmp ecx, dword [eax]
jl 0x1002feb8
mov dword [ebp - 0x8dc], 1
jmp 0x1002febf
and dword [ebp - 0x8dc], 0
cmp dword [ebp - 0x8dc], 0x76d9935f
jge 0x1002fed7
mov dword [ebp - 0x7a4], 1
jmp 0x1002fede
and dword [ebp - 0x7a4], 0
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x524], eax
push 1
lea ecx, [ebp - 0xe04]
call fcn.100167c9
mov ecx, dword [ebp - 0x524]
mov dword [eax], ecx
mov eax, dword [ebp - 0x524]
cmp eax, dword [ebp - 0x7a4]
jl 0x1002fffc
cmp dword [ebp - 0xca8], 0
je 0x1002fffc
mov dword [ebp - 0x258], 0x5265879a
cmp dword [ebp - 0x180], 0
jne 0x1002ffdb
mov eax, dword [ebp - 0x258]
sub eax, 0xfff6
je 0x1002ff64
mov eax, dword [ebp - 0x258]
inc eax
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0xa30]
je 0x1002ff64
mov dword [ebp - 0x52c], 1
jmp 0x1002ff6b
and dword [ebp - 0x52c], 0
cmp dword [ebp - 0x52c], 1
jne 0x1002ff80
mov dword [ebp - 0x97c], 1
jmp 0x1002ff87
and dword [ebp - 0x97c], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xa30]
add eax, dword [ebp - 0x97c]
jne 0x1002ffa5
cmp dword [ebp - 0x258], 0
je 0x1002ffbe
cmp dword [ebp - 0x258], 0
je 0x1002ffbe
xor eax, eax
je 0x1002ffbe
mov dword [ebp - 0x534], 1
jmp 0x1002ffc5
and dword [ebp - 0x534], 0
mov eax, dword [ebp - 0x534]
add eax, 0xcd8
jne 0x1002ffdb
and dword [ebp - 0x7ac], 0
jmp 0x1002ffe5
mov dword [ebp - 0x7ac], 1
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x7ac]
mov dword [ebp + eax - 0xa30], ecx
jmp 0x10030181
mov dword [ebp - 0x328], 0x174aa7fc
mov byte [ebp - 0x14a], 0
movzx eax, byte [ebp - 0x14a]
test eax, eax
je 0x1003002c
push 0
push 0x19a6
push 0x20dd
push 0
call dword [sym.imp.GDI32.dll_GetPaletteEntries]
cmp dword [ebp - 0x328], 1
jb 0x10030041
mov dword [ebp - 0x53c], 1
jmp 0x10030048
and dword [ebp - 0x53c], 0
mov eax, dword [ebp - 0x180]
cmp dword [ebp - 0x53c], eax
jg 0x10030067
or eax, 0xffffffff
je 0x10030067
mov dword [ebp - 0x8e4], 1
jmp 0x1003006e
and dword [ebp - 0x8e4], 0
mov eax, dword [ebp - 0x328]
cmp eax, dword [ebp - 0x8e4]
jg 0x10030088
mov dword [ebp - 0x544], 1
jmp 0x1003008f
and dword [ebp - 0x544], 0
cmp dword [ebp - 0x544], 1
jge 0x100300aa
cmp dword [ebp - 0x328], 0
jne 0x100300aa
and dword [ebp - 0x7b4], 0
jmp 0x100300b4
mov dword [ebp - 0x7b4], 1
push 0
lea ecx, [ebp - 0xe04]
call fcn.100167c9
mov esi, dword [eax]
dec esi
push 0
lea ecx, [ebp - 0xacc]
call fcn.100167c9
mov ecx, dword [ebp - 0x7b4]
imul ecx, dword [eax]
cmp esi, ecx
jg 0x100300ea
mov dword [ebp - 0x54c], 1
jmp 0x100300f1
and dword [ebp - 0x54c], 0
cmp dword [ebp - 0x54c], 0x41d4
je 0x10030109
mov dword [ebp - 0x9cc], 1
jmp 0x10030110
and dword [ebp - 0x9cc], 0
mov eax, dword [ebp - 0x408]
cmp dword [ebp - 0x9cc], eax
jl 0x1003012a
mov dword [ebp - 0x554], 1
jmp 0x10030131
and dword [ebp - 0x554], 0
mov eax, dword [ebp - 0x328]
cmp dword [ebp - 0x554], eax
jg 0x1003014b
mov dword [ebp - 0x7bc], 1
jmp 0x10030152
and dword [ebp - 0x7bc], 0
cmp dword [ebp - 0x7bc], 0
jl 0x10030167
mov dword [ebp - 0x55c], 1
jmp 0x1003016e
and dword [ebp - 0x55c], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x55c]
mov dword [ebp + eax - 0xa30], ecx
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xacc]
call fcn.100167a4
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe04]
call fcn.100167a4
mov dword [ebp - 0x117c], 0xd005
mov dword [ebp - 0xac], 0xffffffeb
jmp 0x100301c2
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 6
je 0x10031473
mov dword [ebp - 0x1a8], 0x779c63c4
push 0x5002
push 0
push 0x6d37
push 1
push 0x1511
call fcn.10021a1a
add esp, 0x14
mov dword [ebp - 0x128], 7
mov dword [ebp - 0x108], 0xf89b546
mov dword [ebp - 0x410], 0xfffffffb
mov dword [ebp - 0xa0], 0
jmp 0x1003022b
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 3
jge 0x10030247
mov eax, dword [ebp - 0xa0]
mov dword [ebp + eax*4 - 0x11fc], 0x85f70ad6
jmp 0x1003021e
mov dword [ebp - 0xa0], 0
jmp 0x10030260
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 2
jge 0x1003027c
mov eax, dword [ebp - 0xa0]
mov dword [ebp + eax*4 - 0xa74], 0xe6d058a8
jmp 0x10030253
mov dword [ebp - 0x108], 2
jmp 0x10030295
mov eax, dword [ebp - 0x108]
dec eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0
jl 0x1003060c
mov dword [ebp - 0xcb0], 0x203d
cmp dword [ebp - 0xcb0], 0xe8a
jge 0x10030375
lea eax, [ebp - 0xcb8]
push eax
push 0x10007730
call fcn.1004edeb
pop ecx
pop ecx
and dword [ebp - 0x434], 0
and dword [ebp - 0x3c0], 0
and dword [ebp - 0x3b8], 0
jmp 0x100302f3
mov eax, dword [ebp - 0x3b8]
inc eax
mov dword [ebp - 0x3b8], eax
mov eax, dword [ebp - 0x3b8]
cmp eax, dword [ebp - 0xcb8]
jge 0x10030366
lea eax, [ebp - 0x13b]
push eax
push 0x100077dc
call fcn.1004edeb
pop ecx
pop ecx
movsx eax, byte [ebp - 0x13b]
cmp eax, 0x28
jne 0x10030343
push dword [ebp - 0x434]
push 0x10007720
call fcn.1004f4dc
pop ecx
pop ecx
xor eax, eax
inc eax
sub eax, dword [ebp - 0x434]
mov dword [ebp - 0x434], eax
jmp 0x10030364
push dword [ebp - 0x3c0]
push 0x10007720
call fcn.1004f4dc
pop ecx
pop ecx
xor eax, eax
inc eax
sub eax, dword [ebp - 0x3c0]
mov dword [ebp - 0x3c0], eax
jmp 0x100302e6
push fcn.1001b109
mov ecx, 0x10659b98
call fcn.10016363
mov dword [ebp - 0xcc0], 0x4ea33a4d
mov dword [ebp - 0x260], 0
jmp 0x10030398
mov eax, dword [ebp - 0x260]
inc eax
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 4
jge 0x100303b4
mov eax, dword [ebp - 0x260]
mov dword [ebp + eax*4 - 0xdd4], 0xffffffff
jmp 0x1003038b
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0xdd4], 2
jmp 0x100303e2
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xdd4]
dec eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0xdd4], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0xdd4], 0
jl 0x10030465
mov dword [ebp - 0x1184], 0x3de0369b
push 0x3f4b
push 0
push 0x3544
lea eax, [ebp - 0x410]
push eax
push 0x34b7
push 0x1dcc
push 0x3a69
push 0x1aaa
push 0x3d08
push 1
push 1
push 0x13af
push 0x7e9
call fcn.10022019
add esp, 0x34
mov byte [ebp - 0xe7], 0
push 0
lea eax, [ebp - 0xe7]
push eax
push 0x64eb
push 0x22a6
call fcn.1003c205
add esp, 0x10
jmp 0x100303c7
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0xdd4], 0x4465
jl 0x10030484
mov dword [ebp - 0x8ec], 1
jmp 0x1003048b
and dword [ebp - 0x8ec], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa74]
cmp dword [ebp - 0x8ec], eax
jg 0x100304ac
mov dword [ebp - 0x564], 1
jmp 0x100304b3
and dword [ebp - 0x564], 0
imul eax, dword [ebp - 0x564], 0
cmp dword [ebp - 0xcc0], eax
jle 0x100304ce
mov dword [ebp - 0x7c4], 1
jmp 0x100304d5
and dword [ebp - 0x7c4], 0
cmp dword [ebp - 0x7c4], 0x1191
jle 0x100304f4
push 2
pop eax
test eax, eax
je 0x100304f4
mov dword [ebp - 0x56c], 1
jmp 0x100304fb
and dword [ebp - 0x56c], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xdd4]
cmp dword [ebp - 0x56c], eax
jg 0x1003051c
mov dword [ebp - 0x984], 1
jmp 0x10030523
and dword [ebp - 0x984], 0
mov eax, dword [ebp - 0x410]
cmp dword [ebp - 0x984], eax
je 0x1003053d
mov dword [ebp - 0x574], 1
jmp 0x10030544
and dword [ebp - 0x574], 0
mov eax, dword [ebp - 0x108]
mov eax, dword [ebp + eax*4 - 0x11fc]
add eax, dword [ebp - 0x574]
je 0x10030575
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xa74], 0
je 0x10030575
mov dword [ebp - 0x7cc], 1
jmp 0x1003057c
and dword [ebp - 0x7cc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa74]
cmp dword [ebp - 0x7cc], eax
jne 0x1003059d
mov dword [ebp - 0x57c], 1
jmp 0x100305a4
and dword [ebp - 0x57c], 0
mov eax, dword [ebp - 0x410]
cmp dword [ebp - 0x57c], eax
jg 0x100305be
mov dword [ebp - 0x8f4], 1
jmp 0x100305c5
and dword [ebp - 0x8f4], 0
mov eax, dword [ebp - 0x108]
cmp dword [ebp - 0x8f4], eax
jle 0x100305df
mov dword [ebp - 0x584], 1
jmp 0x100305e6
and dword [ebp - 0x584], 0
mov eax, dword [ebp - 0x108]
mov eax, dword [ebp + eax*4 - 0x11fc]
imul eax, dword [ebp - 0x584]
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xa74], eax
jmp 0x10030288
mov byte [ebp - 0x131], 0
movzx eax, byte [ebp - 0x131]
test eax, eax
je 0x10030629
push 0x16a3
call dword [sym.imp.GDI32.dll_RealizePalette]
mov dword [ebp - 0x1e8], 6
push 4
lea ecx, [ebp - 0xe1c]
call fcn.100166bf
mov dword [ebp - 4], 4
mov dword [ebp - 0xd08], 1
push 0x312b
push 0x1039
lea eax, [ebp - 0xe1c]
push eax
push 0
push 0x673e
lea eax, [ebp - 0x118c]
push eax
push 0x7fe
push 0x44e7
push 0x3a47
push 0x1196
call fcn.1003b68c
add esp, 0x28
mov byte [ebp - 0xe9], 0
lea eax, [ebp - 0xe9]
push eax
push 0
push 0x3d1d
push 0
push 0x54e
call fcn.10029475
add esp, 0x14
push 3
lea ecx, [ebp - 0xe1c]
call fcn.100167c9
cmp dword [eax], 0x3622ba39
jne 0x1003074c
mov dword [ebp - 0x330], 0x7f759609
mov dword [ebp - 0x330], 0
jmp 0x100306ec
mov eax, dword [ebp - 0x330]
dec eax
mov dword [ebp - 0x330], eax
cmp dword [ebp - 0x330], 0xffffffed
je 0x1003074a
mov byte [ebp - 0x144], 0
push 0x6a73
push 1
push 0x640d
push 0x5eac
push 0x6d7a
push 0
push 0xcdc
push 0x2c2e
push 0x1510
push 0x3fcd
push 0x521
push 0x59dc
lea eax, [ebp - 0x144]
push eax
push 0x4c3a
push 0
call fcn.1002d893
add esp, 0x3c
jmp 0x100306df
jmp 0x100307c0
mov dword [ebp - 0xd38], 0xfffffff8
mov dword [ebp - 0xd10], 0x8fb0b4
mov dword [ebp - 0xd28], 0x3bdf78b1
mov dword [ebp - 0xd30], 0xc5cecce0
lea eax, [ebp - 0xd08]
push eax
push 1
push 0x3e72
push 0x5c66
lea eax, [ebp - 0xd10]
push eax
lea eax, [ebp - 0xd28]
push eax
lea eax, [ebp - 0xe1c]
push eax
lea eax, [ebp - 0xd30]
push eax
push 0x6e66
push 0
push 0
push 0x8a6
lea eax, [ebp - 0xd38]
push eax
call fcn.10022019
add esp, 0x34
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe1c]
call fcn.100167a4
mov dword [ebp - 0x17c], 5
mov dword [ebp - 0x268], 0x97f6af11
mov dword [ebp - 0x268], 0xfffffffa
jmp 0x100307fc
mov eax, dword [ebp - 0x268]
dec eax
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 0xffffffe9
jne 0x10030865
mov dword [ebp - 0xd90], 0x75c19c5a
mov byte [ebp - 0xeb], 0
push 0x6d05
push 1
push 0x5cda
push 0x284
push 0x4de6
push 0x6b06
push 0x2f92
push 0x6aa0
push 0x6ca3
push 0
push 1
lea eax, [ebp - 0xeb]
push eax
push 0x4227
call fcn.10022019
add esp, 0x34
cmp dword [ebp - 0xd90], 0
je 0x10030863
jmp 0x10030865
jmp 0x100307ef
cmp dword [ebp - 0x1a8], 0
je 0x10030899
mov dword [ebp - 0x128], 0xc25b
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 0
je 0x10030899
mov dword [ebp - 0x7d4], 1
jmp 0x100308a0
and dword [ebp - 0x7d4], 0
mov eax, dword [ebp - 0x7d4]
neg eax
je 0x10030986
mov eax, dword [ebp - 0x288]
mov dword [ebp - 0x1194], eax
cmp dword [ebp - 0x358], 0xec58
jle 0x100308d2
mov dword [ebp - 0x58c], 1
jmp 0x100308d9
and dword [ebp - 0x58c], 0
mov eax, dword [ebp - 0x1a8]
cmp dword [ebp - 0x58c], eax
jg 0x100308f9
cmp dword [ebp - 0x1a8], 0
jne 0x100308f9
and dword [ebp - 0x9f4], 0
jmp 0x10030903
mov dword [ebp - 0x9f4], 1
mov eax, dword [ebp - 0x9f4]
mov dword [ebp - 0x358], eax
cmp dword [ebp - 0x358], 0xf7bd
jl 0x10030930
cmp dword [ebp - 0x1e8], 0
je 0x10030930
mov dword [ebp - 0x594], 1
jmp 0x10030937
and dword [ebp - 0x594], 0
mov eax, dword [ebp - 0x594]
mov dword [ebp - 0x128], eax
mov eax, dword [ebp - 0x128]
sub eax, 0x335900b
je 0x10030965
cmp dword [ebp - 0x128], 0
je 0x10030965
mov dword [ebp - 0x7dc], 1
jmp 0x1003096c
and dword [ebp - 0x7dc], 0
mov eax, dword [ebp - 0x7dc]
dec eax
cmp eax, 0xf2f37fc0
ja 0x10030986
mov dword [ebp - 0x59c], 1
jmp 0x1003098d
and dword [ebp - 0x59c], 0
cmp dword [ebp - 0x59c], 9
jle 0x100309a2
mov dword [ebp - 0x8fc], 1
jmp 0x100309a9
and dword [ebp - 0x8fc], 0
mov eax, dword [ebp - 0xac]
add eax, dword [ebp - 0x8fc]
cmp eax, dword [ebp - 0x1a8]
jl 0x100309c9
mov dword [ebp - 0x5a4], 1
jmp 0x100309d0
and dword [ebp - 0x5a4], 0
mov eax, dword [ebp - 0xac]
imul eax, dword [ebp - 0x5a4]
mov dword [ebp - 0x288], eax
mov eax, dword [ebp - 0xac]
cmp dword [ebp - 0x288], eax
jge 0x100309fd
mov dword [ebp - 0x7e4], 1
jmp 0x10030a04
and dword [ebp - 0x7e4], 0
mov eax, dword [ebp - 0x7e4]
mov dword [ebp - 0x17c], eax
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x9a4], eax
mov dword [ebp - 0x119c], 0
mov dword [ebp - 0x11a4], 1
mov dword [ebp - 0x11ac], 0xbc75286e
mov dword [ebp - 0x11b4], 0xff55e00f
mov dword [ebp - 0x11bc], 0x61c0f806
mov dword [ebp - 0x11c4], 0xffffffff
mov dword [ebp - 0xd98], 0xffffffff
mov dword [ebp - 0x338], 0
jmp 0x10030a7b
mov eax, dword [ebp - 0x338]
inc eax
mov dword [ebp - 0x338], eax
cmp dword [ebp - 0x338], 2
jge 0x10030a97
mov eax, dword [ebp - 0x338]
mov dword [ebp + eax*4 - 0x1380], 4
jmp 0x10030a6e
push 1
push 0x3472
lea eax, [ebp - 0xd98]
push eax
push 0
call fcn.10026dc4
add esp, 0x10
mov byte [ebp - 0x148], 0
movzx eax, byte [ebp - 0x148]
test eax, eax
je 0x10030ace
push 0
push 0x135c
call dword [sym.imp.USER32.dll_FlashWindow]
mov dword [ebp - 0x17c], 0
jmp 0x10030ae7
mov eax, dword [ebp - 0x17c]
dec eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 0xffffffee
jl 0x1003146e
push 0x2ebc
push 1
push 0
push 0x742a
push 0
push 0x28ea
call fcn.10028fa0
add esp, 0x18
mov dword [ebp - 0x11cc], 0x8b13eca4
mov dword [ebp - 0x127c], 0xbf34fda
mov dword [ebp - 0x1284], 1
mov dword [ebp - 0x128c], 0xfffffffe
push 4
lea ecx, [ebp - 0x120c]
call fcn.100166bf
mov dword [ebp - 4], 5
mov dword [ebp - 0x5ac], 1
mov dword [ebp - 0x270], 0
jmp 0x10030b70
mov eax, dword [ebp - 0x270]
inc eax
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 4
jge 0x10030b92
push dword [ebp - 0x270]
lea ecx, [ebp - 0x120c]
call fcn.100167c9
mov dword [eax], 0x708ef6b8
jmp 0x10030b63
mov eax, dword [ebp - 0x5ac]
dec eax
mov dword [ebp - 0x5ac], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x120c]
call fcn.100167a4
mov dword [ebp - 0xd14], 0
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x64], 0xa
jmp 0x10030bcf
mov eax, dword [ebp - 0x64]
dec eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0xfffffff4
jne 0x10030f01
push 2
lea ecx, [ebp - 0xa90]
call fcn.100166bf
mov dword [ebp - 4], 6
push 2
lea ecx, [ebp - 0x470]
call fcn.100166bf
mov byte [ebp - 4], 7
mov dword [ebp - 0xb64], 0xfffffff9
mov dword [ebp - 0x7fc], 0
mov dword [ebp - 0x200], 0
jmp 0x10030c2b
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 2
jge 0x10030c4d
push dword [ebp - 0x200]
lea ecx, [ebp - 0xa90]
call fcn.100167c9
mov dword [eax], 0xfffffff9
jmp 0x10030c1e
push 1
push 0
lea eax, [ebp - 0x200]
push eax
push 0x4135
push 0x684e
push 0
lea eax, [ebp - 0x470]
push eax
call fcn.100223da
add esp, 0x1c
push 1
lea ecx, [ebp - 0x470]
call fcn.100167c9
and dword [eax], 0
jmp 0x10030ca9
push 1
lea ecx, [ebp - 0x470]
call fcn.100167c9
mov dword [ebp - 0x98c], eax
mov eax, dword [ebp - 0x98c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x98c]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x470]
call fcn.100167c9
cmp dword [eax], 1
jg 0x10030ede
mov dword [ebp - 0x5dc], 3
mov dword [ebp - 0xc7c], 0x437f1bd5
push 0
lea ecx, [ebp - 0x470]
call fcn.100167c9
cmp dword [eax], 1
jne 0x10030cf1
mov dword [ebp - 0x5bc], 1
jmp 0x10030cf8
and dword [ebp - 0x5bc], 0
push 1
lea ecx, [ebp - 0xa90]
call fcn.100167c9
cmp dword [eax], 0xffffffff
je 0x10030d16
mov dword [ebp - 0x5b4], 1
jmp 0x10030d1d
and dword [ebp - 0x5b4], 0
mov eax, dword [ebp - 0xb64]
cmp dword [ebp - 0x5b4], eax
jne 0x10030d37
mov dword [ebp - 0x7ec], 1
jmp 0x10030d3e
and dword [ebp - 0x7ec], 0
cmp dword [ebp - 0x7ec], 0xe5809974
je 0x10030d56
mov dword [ebp - 0x904], 1
jmp 0x10030d5d
and dword [ebp - 0x904], 0
mov eax, dword [ebp - 0x5bc]
cmp eax, dword [ebp - 0x904]
jl 0x10030d77
mov dword [ebp - 0x5c4], 1
jmp 0x10030d7e
and dword [ebp - 0x5c4], 0
cmp dword [ebp - 0x5c4], 1
jne 0x10030d93
mov dword [ebp - 0xaf8], 1
jmp 0x10030d9a
and dword [ebp - 0xaf8], 0
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x1294], eax
cmp dword [ebp - 0x64], 0
je 0x10030dbf
cmp dword [ebp - 0x64], 0
je 0x10030dbf
xor eax, eax
je 0x10030dbf
mov dword [ebp - 0x7f4], 1
jmp 0x10030dc6
and dword [ebp - 0x7f4], 0
push 1
lea ecx, [ebp - 0x470]
call fcn.100167c9
push dword [eax]
lea ecx, [ebp - 0xa90]
call fcn.100167c9
mov esi, eax
push 1
lea ecx, [ebp - 0x470]
call fcn.100167c9
push dword [eax]
lea ecx, [ebp - 0xa90]
call fcn.100167c9
mov ecx, dword [ebp - 0x7f4]
imul ecx, dword [eax]
cmp dword [esi], ecx
jl 0x10030e15
mov dword [ebp - 0x5cc], 1
jmp 0x10030e1c
and dword [ebp - 0x5cc], 0
push 1
lea ecx, [ebp - 0x470]
call fcn.100167c9
mov ecx, dword [ebp - 0x5cc]
imul ecx, dword [eax]
imul eax, ecx, 0x7e0f
sub eax, dword [ebp - 0x64]
cmp eax, dword [ebp - 0x64]
jl 0x10030e4c
mov dword [ebp - 0x9d4], 1
jmp 0x10030e53
and dword [ebp - 0x9d4], 0
mov esi, dword [ebp - 0x9d4]
add esi, 0xb7be
push 1
lea ecx, [ebp - 0x470]
call fcn.100167c9
push dword [eax]
lea ecx, [ebp - 0xa90]
call fcn.100167c9
sub esi, dword [eax]
cmp esi, 0x81c5860b
jne 0x10030e8f
mov dword [ebp - 0x5d4], 1
jmp 0x10030e96
and dword [ebp - 0x5d4], 0
mov eax, dword [ebp - 0x5d4]
mov dword [ebp - 0x7fc], eax
mov eax, dword [ebp - 0x7fc]
mov dword [ebp - 0x5dc], eax
cmp dword [ebp - 0x5dc], 0xba00b6fb
je 0x10030ec6
mov dword [ebp - 0x90c], 1
jmp 0x10030ecd
and dword [ebp - 0x90c], 0
mov eax, dword [ebp - 0x90c]
mov dword [ebp - 0xc7c], eax
jmp 0x10030c85
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x470]
call fcn.100167a4
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa90]
call fcn.100167a4
jmp 0x10030bc8
lea eax, [ebp - 0x64]
push eax
push 1
push 0
call fcn.10029f16
add esp, 0xc
mov dword [ebp - 0x340], 0
jmp 0x10030f2a
mov eax, dword [ebp - 0x340]
inc eax
mov dword [ebp - 0x340], eax
cmp dword [ebp - 0x340], 3
jge 0x10030f46
mov eax, dword [ebp - 0x340]
mov dword [ebp + eax*4 - 0xd58], 1
jmp 0x10030f1d
push 4
lea ecx, [ebp - 0x484]
call fcn.100166bf
mov dword [ebp - 4], 8
lea eax, [ebp - 0x129c]
push eax
push 1
push 0
push 0
lea eax, [ebp - 0x484]
push eax
push 0x1995
push 0x1222
call fcn.10026a24
add esp, 0x1c
mov byte [ebp - 0x13d], 0
movzx eax, byte [ebp - 0x13d]
test eax, eax
je 0x10030f9d
push 0x13c
call dword [sym.imp.USER32.dll_MessageBeep]
push 3
lea ecx, [ebp - 0x484]
call fcn.100167c9
mov dword [eax], 0xfffffff8
jmp 0x10030fd6
push 3
lea ecx, [ebp - 0x484]
call fcn.100167c9
mov dword [ebp - 0x5e4], eax
mov eax, dword [ebp - 0x5e4]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x5e4]
mov dword [ecx], eax
push 3
lea ecx, [ebp - 0x484]
call fcn.100167c9
cmp dword [eax], 0xffffffff
jg 0x10031362
mov dword [ebp - 0x158], 1
mov dword [ebp - 0x118], 0x9dce
mov dword [ebp - 0xb00], 1
mov dword [ebp - 0x158], 0x17
jmp 0x10031023
mov eax, dword [ebp - 0x158]
dec eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 0x12
jl 0x1003135d
mov dword [ebp - 0x110], 0xffffffff
mov dword [ebp - 0x278], 0
jmp 0x10031053
mov eax, dword [ebp - 0x278]
inc eax
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x278], 2
jge 0x1003106f
mov eax, dword [ebp - 0x278]
mov dword [ebp + eax*4 - 0xfe8], 0x9f23e525
jmp 0x10031046
mov dword [ebp - 0x110], 0
jmp 0x10031088
mov eax, dword [ebp - 0x110]
dec eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0xffffffef
jl 0x10031358
mov dword [ebp - 0x120], 9
mov dword [ebp - 0x348], 0xffffffff
push 3
lea ecx, [ebp - 0x484]
call fcn.100167c9
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xfe8], 0
jne 0x100310fe
push 3
lea ecx, [ebp - 0x484]
call fcn.100167c9
push 3
lea ecx, [ebp - 0x484]
call fcn.100167c9
mov esi, eax
push 3
lea ecx, [ebp - 0x484]
call fcn.100167c9
mov ecx, dword [esi]
cmp ecx, dword [eax]
je 0x100310fe
and dword [ebp - 0x804], 0
jmp 0x10031108
mov dword [ebp - 0x804], 1
mov eax, dword [ebp - 0x118]
cmp eax, dword [ebp - 0x804]
jge 0x10031122
mov dword [ebp - 0x5ec], 1
jmp 0x10031129
and dword [ebp - 0x5ec], 0
mov eax, dword [ebp - 0x110]
add eax, dword [ebp - 0x5ec]
mov dword [ebp - 0x120], eax
mov eax, dword [ebp - 0x120]
sub eax, dword [ebp - 0x110]
imul eax, eax, 0xffff
cmp eax, dword [ebp - 0x118]
jne 0x10031161
mov dword [ebp - 0x994], 1
jmp 0x10031168
and dword [ebp - 0x994], 0
mov eax, dword [ebp - 0x110]
add eax, dword [ebp - 0x994]
cmp eax, 0xffffffff
jb 0x10031185
mov dword [ebp - 0x5f4], 1
jmp 0x1003118c
and dword [ebp - 0x5f4], 0
cmp dword [ebp - 0x5f4], 0
je 0x100311aa
cmp dword [ebp - 0x118], 0
je 0x100311aa
mov dword [ebp - 0x80c], 1
jmp 0x100311b1
and dword [ebp - 0x80c], 0
mov eax, dword [ebp - 0x348]
cmp dword [ebp - 0x80c], eax
jg 0x10031272
push 0xfffffffffffffffe
pop eax
test eax, eax
je 0x10031272
mov dword [ebp - 0x118], 0
jmp 0x100311e7
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0x23
jne 0x1003125f
mov dword [ebp - 0x120], 0
jmp 0x10031209
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0x3c
jle 0x10031246
mov byte [ebp - 0x139], 0
movzx eax, byte [ebp - 0x139]
test eax, eax
je 0x10031244
push 0
push 0x3a00
push 0x495f
push 0
push 0x6c65
push 0x30a2
call fcn.1002250b
add esp, 0x18
jmp 0x100311fc
push 0x2a42
push 0x6fa6
push 0
call fcn.1003966c
add esp, 0xc
jmp 0x100311da
cmp dword [ebp - 0x348], 0
je 0x1003126d
jmp 0x1003107b
jmp 0x10031353
mov dword [ebp - 0x814], 4
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x12a4], eax
mov eax, dword [ebp - 0x348]
mov dword [ebp - 0x12ac], eax
cmp dword [ebp - 0x120], 0x5674
jg 0x100312ac
mov dword [ebp - 0x5fc], 1
jmp 0x100312b3
and dword [ebp - 0x5fc], 0
cmp dword [ebp - 0x5fc], 0
jg 0x100312c8
mov dword [ebp - 0x914], 1
jmp 0x100312cf
and dword [ebp - 0x914], 0
mov eax, dword [ebp - 0x348]
cmp dword [ebp - 0x914], eax
jg 0x100312e9
mov dword [ebp - 0x604], 1
jmp 0x100312f0
and dword [ebp - 0x604], 0
mov eax, dword [ebp - 0x604]
mov dword [ebp - 0x814], eax
mov eax, dword [ebp - 0x158]
cmp dword [ebp - 0x814], eax
jne 0x10031316
mov dword [ebp - 0x60c], 1
jmp 0x1003131d
and dword [ebp - 0x60c], 0
imul eax, dword [ebp - 0x60c], 0x398e
test eax, eax
jne 0x1003133d
mov eax, 0xd1a6
test eax, eax
jne 0x1003133d
and dword [ebp - 0xa14], 0
jmp 0x10031347
mov dword [ebp - 0xa14], 1
mov eax, dword [ebp - 0xa14]
mov dword [ebp - 0xb00], eax
jmp 0x1003107b
jmp 0x10031016
jmp 0x10030fb2
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x484]
call fcn.100167a4
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0x128], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd58]
mov dword [ebp - 0x12e8], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0xd58]
cmp dword [ebp + eax - 0xd58], ecx
jl 0x100313b7
mov dword [ebp - 0x614], 1
jmp 0x100313be
and dword [ebp - 0x614], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd58]
cmp eax, dword [ebp - 0x614]
je 0x100313df
mov dword [ebp - 0x81c], 1
jmp 0x100313e6
and dword [ebp - 0x81c], 0
mov eax, dword [ebp - 0x1a8]
cmp dword [ebp - 0x81c], eax
jne 0x10031400
mov dword [ebp - 0x61c], 1
jmp 0x10031407
and dword [ebp - 0x61c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd58]
imul eax, dword [ebp - 0x61c]
test eax, eax
jl 0x1003142b
mov dword [ebp - 0x91c], 1
jmp 0x10031432
and dword [ebp - 0x91c], 0
mov eax, dword [ebp - 0x91c]
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 0x52b3
je 0x10031456
mov dword [ebp - 0x624], 1
jmp 0x1003145d
and dword [ebp - 0x624], 0
mov eax, dword [ebp - 0x624]
mov dword [ebp - 0xd14], eax
jmp 0x10030ada
jmp 0x100301b5
mov dword [ebp - 0x214], 3
mov dword [ebp - 0x350], 0xa72df200
mov dword [ebp - 0x1b8], 0xda77
push 3
lea ecx, [ebp - 0xa20]
call fcn.100166bf
mov dword [ebp - 4], 9
mov dword [ebp - 0x12f0], 0
mov dword [ebp - 0x1b0], 0
jmp 0x100314c8
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 2
jge 0x100314e4
mov eax, dword [ebp - 0x1b0]
mov dword [ebp + eax*4 - 0xe4], 2
jmp 0x100314bb
lea eax, [ebp - 0xa20]
push eax
push 0x5c6c
push 0
push 0
push 1
push 0x185a
lea eax, [ebp - 0x1b0]
push eax
call fcn.10025e52
add esp, 0x1c
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xe4], 0
jne 0x10031528
xor eax, eax
inc eax
jne 0x10031528
and dword [ebp - 0x824], 0
jmp 0x10031532
mov dword [ebp - 0x824], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe4]
cmp eax, dword [ebp - 0x824]
jl 0x10031553
mov dword [ebp - 0x62c], 1
jmp 0x1003155a
and dword [ebp - 0x62c], 0
cmp dword [ebp - 0x62c], 0xffff
je 0x10031572
mov dword [ebp - 0x99c], 1
jmp 0x10031579
and dword [ebp - 0x99c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe4]
imul eax, dword [ebp - 0x99c]
cmp eax, dword [ebp - 0x214]
jne 0x100315a1
mov dword [ebp - 0xb08], 1
jmp 0x100315a8
and dword [ebp - 0xb08], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe4]
mov dword [ebp - 0x12f8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe4]
mov dword [ebp - 0x12ec], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe4]
mov dword [ebp - 0x1258], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xe4]
mov dword [ebp - 0x1168], eax
cmp dword [ebp - 0x214], 0x3e52509e
je 0x1003160c
mov dword [ebp - 0x634], 1
jmp 0x10031613
and dword [ebp - 0x634], 0
cmp dword [ebp - 0x634], 0x6974
jle 0x10031645
mov byte [ebp - 0xed], 0
movzx eax, byte [ebp - 0xed]
test eax, eax
je 0x10031640
push 0x21e9
push 0
push 0
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
jmp 0x10031a58
mov dword [ebp - 0x280], 0xfffffffa
push 2
lea ecx, [ebp - 0xf34]
call fcn.100166bf
mov byte [ebp - 4], 0xa
push 3
lea ecx, [ebp - 0xe34]
call fcn.100166bf
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x64c], 0xfff9
mov dword [ebp - 0x644], 0xcf28
mov dword [ebp - 0x834], 0x12ea0fef
push 3
lea ecx, [ebp - 0xf4c]
call fcn.100166bf
mov byte [ebp - 4], 0xc
push 3
lea ecx, [ebp - 0xeec]
call fcn.100166bf
mov byte [ebp - 4], 0xd
lea eax, [ebp - 0xf34]
push eax
push 0
push 0
lea eax, [ebp - 0x48]
push eax
call fcn.1002a3a9
add esp, 0x10
push 0x7b45
lea eax, [ebp - 0xe34]
push eax
push 1
push 0
push 1
lea eax, [ebp - 0x48]
push eax
push 0x6ec2
call fcn.10025e52
add esp, 0x1c
mov dword [ebp - 0x48], 0
jmp 0x100316fb
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 3
jge 0x10031717
push dword [ebp - 0x48]
lea ecx, [ebp - 0xf4c]
call fcn.100167c9
mov dword [eax], 0xfffffffd
jmp 0x100316f4
mov dword [ebp - 0x48], 0
jmp 0x10031727
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 3
jge 0x10031743
push dword [ebp - 0x48]
lea ecx, [ebp - 0xeec]
call fcn.100167c9
mov dword [eax], 0x40293e9f
jmp 0x10031720
mov eax, dword [ebp - 0x644]
mov dword [ebp - 0x1148], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xe4], 1
je 0x1003176b
mov dword [ebp - 0x82c], 1
jmp 0x10031772
and dword [ebp - 0x82c], 0
mov eax, dword [ebp - 0x280]
mov ecx, dword [ebp - 0x82c]
lea eax, [ecx + eax + 0x713233df]
imul eax, eax, 0x86d6
cmp eax, 6
jl 0x1003179c
mov dword [ebp - 0x63c], 1
jmp 0x100317a3
and dword [ebp - 0x63c], 0
cmp dword [ebp - 0x63c], 0x372a7181
jl 0x100317bb
mov dword [ebp - 0x924], 1
jmp 0x100317c2
and dword [ebp - 0x924], 0
mov eax, dword [ebp - 0x924]
sub eax, dword [ebp - 0x644]
mov dword [ebp - 0x834], eax
mov eax, dword [ebp - 0x834]
mov dword [ebp - 0x350], eax
mov eax, dword [ebp - 0x280]
cmp dword [ebp - 0x350], eax
jne 0x100317fa
mov dword [ebp - 0xc84], 1
jmp 0x10031801
and dword [ebp - 0xc84], 0
mov eax, dword [ebp - 0x280]
mov dword [ebp - 0xf90], eax
mov eax, dword [ebp - 0x1b8]
mov dword [ebp - 0xb10], eax
push 1
lea ecx, [ebp - 0xf4c]
call fcn.100167c9
mov ecx, dword [ebp - 0xb10]
mov dword [eax], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe4]
mov dword [ebp - 0x64c], eax
mov eax, dword [ebp - 0x64c]
mov dword [ebp - 0x9dc], eax
push 0
lea ecx, [ebp - 0xf34]
call fcn.100167c9
mov ecx, dword [ebp - 0x9dc]
mov dword [eax], ecx
mov eax, dword [ebp - 0x214]
imul eax, dword [ebp - 0x1b8]
mov ecx, dword [ebp - 0x9dc]
sub ecx, eax
push 4
pop eax
imul eax, eax, 0
sub ecx, dword [ebp + eax - 0xe4]
je 0x1003189b
mov eax, 0x9934b93d
test eax, eax
je 0x1003189b
mov dword [ebp - 0x654], 1
jmp 0x100318a2
and dword [ebp - 0x654], 0
push 0
lea ecx, [ebp - 0xe34]
call fcn.100167c9
mov dword [ebp - 0x3c8], eax
mov eax, dword [ebp - 0x280]
add eax, dword [ebp - 0x654]
mov ecx, dword [ebp - 0x3c8]
imul eax, dword [ecx]
mov dword [ebp - 0xd8c], eax
mov eax, dword [ebp - 0x3c8]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x3c8]
mov dword [ecx], eax
cmp dword [ebp - 0xd8c], 0xdb1
jg 0x100318f9
mov dword [ebp - 0x83c], 1
jmp 0x10031900
and dword [ebp - 0x83c], 0
imul eax, dword [ebp - 0x83c], 0x2e7a
cmp eax, dword [ebp - 0x214]
jne 0x10031930
push 2
lea ecx, [ebp - 0xe34]
call fcn.100167c9
cmp dword [eax], 0
je 0x10031930
mov dword [ebp - 0x65c], 1
jmp 0x10031937
and dword [ebp - 0x65c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe4]
cmp dword [ebp - 0x65c], eax
jg 0x10031958
mov dword [ebp - 0xb18], 1
jmp 0x1003195f
and dword [ebp - 0xb18], 0
mov eax, dword [ebp - 0x1b8]
mov dword [ebp - 0x1240], eax
push 4
pop eax
shl eax, 0
mov esi, dword [ebp + eax - 0xe4]
push 1
lea ecx, [ebp - 0xeec]
call fcn.100167c9
cmp esi, dword [eax]
jg 0x10031995
mov dword [ebp - 0x92c], 1
jmp 0x1003199c
and dword [ebp - 0x92c], 0
mov eax, dword [ebp - 0x214]
imul eax, dword [ebp - 0x92c]
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xe4], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, 0x8d5f
sub ecx, dword [ebp + eax - 0xe4]
cmp ecx, dword [ebp - 0x1b8]
jl 0x100319dc
mov dword [ebp - 0x664], 1
jmp 0x100319e3
and dword [ebp - 0x664], 0
push 2
lea ecx, [ebp - 0xa20]
call fcn.100167c9
mov ecx, dword [ebp - 0x664]
mov dword [eax], ecx
push 0xf5c
push 1
push 0
push 1
push 0x731c
push 0x3e6
lea eax, [ebp - 0xa20]
push eax
call fcn.10026a24
add esp, 0x1c
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xeec]
call fcn.100167a4
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0xf4c]
call fcn.100167a4
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xe34]
call fcn.100167a4
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xf34]
call fcn.100167a4
or eax, 0xffffffff
je 0x10031a7b
push 2
lea ecx, [ebp - 0xa20]
call fcn.100167c9
cmp dword [eax], 0
je 0x10031a7b
mov dword [ebp - 0x450], 1
jmp 0x10031a82
and dword [ebp - 0x450], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x450]
mov dword [ebp + eax - 0xe4], ecx
cmp dword [ebp - 0x450], 0
jne 0x10031b12
push 0
lea ecx, [ebp - 0xa20]
call fcn.100167c9
push 1
lea ecx, [ebp - 0xa20]
call fcn.100167c9
or ecx, 0xffffffff
sub ecx, dword [eax]
mov dword [ebp - 0x350], ecx
mov eax, dword [ebp - 0x1b8]
cmp dword [ebp - 0x350], eax
jne 0x10031add
mov dword [ebp - 0x844], 1
jmp 0x10031ae4
and dword [ebp - 0x844], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xe4]
add eax, dword [ebp - 0x844]
jne 0x10031b12
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xe4], 0
jne 0x10031b12
and dword [ebp - 0x66c], 0
jmp 0x10031b1c
mov dword [ebp - 0x66c], 1
push 2
lea ecx, [ebp - 0xa20]
call fcn.100167c9
mov ecx, dword [ebp - 0x66c]
mov dword [eax], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa20]
call fcn.100167a4
push 0xb70
lea eax, [ebp - 0x9a4]
push eax
push 0
lea eax, [ebp - 0xc8c]
push eax
lea eax, [ebp - 0x288]
push eax
lea eax, [ebp - 0xac]
push eax
lea eax, [ebp - 0x358]
push eax
push 1
push 0x3489
call fcn.10029be4
add esp, 0x24
mov dword [ebp - 0xdac], 0xffffffff
mov dword [ebp - 0xda8], 0xffffffff
mov dword [ebp - 0xda4], 0xffffffff
mov dword [ebp - 0xda0], 0xffffffff
mov dword [ebp - 0x1f0], 0
mov dword [ebp - 0x684], 0x71b35d56
mov dword [ebp - 0xd2c], 0xf0ebf903
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xdac]
mov dword [ebp - 0x1f0], eax
mov dword [ebp - 0x1f0], 0x1c
jmp 0x10031beb
mov eax, dword [ebp - 0x1f0]
dec eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 0xffffffeb
jge 0x10031ce2
mov dword [ebp - 0x84c], 0xfffffff7
mov dword [ebp - 0x3d0], 0x97515801
cmp dword [ebp - 0x84c], 0
jge 0x10031c21
mov dword [ebp - 0x67c], 1
jmp 0x10031c28
and dword [ebp - 0x67c], 0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xdac], 0xfffffff9
jne 0x10031c41
mov eax, 0x4207
test eax, eax
jne 0x10031c59
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xdac], 0
jne 0x10031c59
and dword [ebp - 0x674], 0
jmp 0x10031c63
mov dword [ebp - 0x674], 1
mov eax, dword [ebp - 0x674]
mov dword [ebp - 0x3d0], eax
cmp dword [ebp - 0x3d0], 9
jne 0x10031c84
mov dword [ebp - 0xb20], 1
jmp 0x10031c8b
and dword [ebp - 0xb20], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xdac]
mov dword [ebp - 0xf98], eax
mov eax, dword [ebp - 0x3d0]
sub eax, dword [ebp - 0x84c]
cmp dword [ebp - 0x67c], eax
jne 0x10031cbe
mov dword [ebp - 0x934], 1
jmp 0x10031cc5
and dword [ebp - 0x934], 0
mov eax, dword [ebp - 0x934]
mov dword [ebp - 0x684], eax
mov eax, dword [ebp - 0x684]
mov dword [ebp - 0xd2c], eax
jmp 0x10031bde
mov eax, dword [ebp - 0xb28]
mov eax, dword [eax + 0x38]
mov dword [ebp - 0x3e4], eax
mov dword [ebp - 0x40], 1
mov dword [ebp - 0x1150], 0x1afd
mov dword [ebp - 0xc94], 0xfffffffe
mov dword [ebp - 0xcc4], 0x89ec0021
mov dword [ebp - 0x290], 0
jmp 0x10031d2f
mov eax, dword [ebp - 0x290]
inc eax
mov dword [ebp - 0x290], eax
cmp dword [ebp - 0x290], 3
jge 0x10031d4b
mov eax, dword [ebp - 0x290]
mov dword [ebp + eax*4 - 0xa48], 0x826fbd10
jmp 0x10031d22
cmp dword [ebp - 0x40], 1
jne 0x10031d66
cmp dword [ebp - 0xc94], 0
je 0x10031d66
mov dword [ebp - 0x854], 1
jmp 0x10031d6d
and dword [ebp - 0x854], 0
cmp dword [ebp - 0x854], 9
jb 0x10031d82
mov dword [ebp - 0x68c], 1
jmp 0x10031d89
and dword [ebp - 0x68c], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x68c], eax
jge 0x10031da0
mov dword [ebp - 0x9fc], 1
jmp 0x10031da7
and dword [ebp - 0x9fc], 0
mov eax, dword [ebp - 0x40]
sub eax, dword [ebp - 0x9fc]
je 0x10031e07
mov dword [ebp - 0x360], 0
jmp 0x10031dcb
mov eax, dword [ebp - 0x360]
inc eax
mov dword [ebp - 0x360], eax
cmp dword [ebp - 0x360], 1
jge 0x10031de7
mov eax, dword [ebp - 0x360]
mov dword [ebp + eax*4 - 0x694], 0x1649
jmp 0x10031dbe
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x694]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x694], eax
jmp 0x10031f4b
mov dword [ebp - 0xb30], 0x9be9
mov dword [ebp - 0x40], 0
jmp 0x10031e21
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 2
jg 0x10031f2a
mov dword [ebp - 0xaec], 0xfffffff6
mov eax, dword [ebp - 0x40]
cmp dword [ebp + eax*4 - 0xa48], 5
jg 0x10031e4e
mov dword [ebp - 0x85c], 1
jmp 0x10031e55
and dword [ebp - 0x85c], 0
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x85c]
sub ecx, dword [ebp + eax*4 - 0xa48]
je 0x10031ee3
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x40]
mov ecx, dword [ebp + ecx*4 - 0xa48]
cmp dword [ebp + eax*4 - 0xa48], ecx
jne 0x10031e89
mov dword [ebp - 0x69c], 1
jmp 0x10031e90
and dword [ebp - 0x69c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa48]
cmp dword [ebp - 0x69c], eax
jle 0x10031eb1
mov dword [ebp - 0x93c], 1
jmp 0x10031eb8
and dword [ebp - 0x93c], 0
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp + eax*4 - 0xa48]
cmp dword [ebp - 0x93c], eax
jle 0x10031ee3
mov eax, dword [ebp - 0x40]
cmp dword [ebp + eax*4 - 0xa48], 0
je 0x10031ee3
mov dword [ebp - 0x6a4], 1
jmp 0x10031eea
and dword [ebp - 0x6a4], 0
mov eax, dword [ebp - 0xb30]
cmp dword [ebp - 0x6a4], eax
jne 0x10031f04
mov dword [ebp - 0x864], 1
jmp 0x10031f0b
and dword [ebp - 0x864], 0
mov eax, dword [ebp - 0x864]
mov dword [ebp - 0xcc4], eax
cmp dword [ebp - 0xaec], 0
je 0x10031f25
jmp 0x10031e1a
jmp 0x10031e1a
mov byte [ebp - 0xf5], 0
movzx eax, byte [ebp - 0xf5]
test eax, eax
je 0x10031f4b
push 0x8aa
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov dword [ebp - 0x80], 0xac204e2d
mov dword [ebp - 0x80], 0
jmp 0x10031f62
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0x17
jle 0x10031fc8
mov dword [ebp - 0x418], 0x7f0a
mov dword [ebp - 0x418], 0xe17ca002
cmp dword [ebp - 0x418], 0
je 0x10031fbb
mov byte [ebp - 0xef], 0
movzx eax, byte [ebp - 0xef]
test eax, eax
je 0x10031fb9
push 1
push 1
push 0x54ae
push 0x27de
push 0x264a
push 0
push 0x1b33
call fcn.100223da
add esp, 0x1c
jmp 0x10031fc6
cmp dword [ebp - 0x418], 0
je 0x10031fc6
jmp 0x10031fc8
jmp 0x10031f5b
mov dword [ebp - 0x80], 0x1a
jmp 0x10031fd8
mov eax, dword [ebp - 0x80]
dec eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0xffffffe9
jle 0x10032035
mov dword [ebp - 0xb40], 0xffffffff
mov dword [ebp - 0xc9c], 0x3e95aad8
lea eax, [ebp - 0xc9c]
push eax
push 0x5804
lea eax, [ebp - 0xb40]
push eax
push 0x124c
lea eax, [ebp - 0x80]
push eax
push 0x561
push 0x580d
push 0
push 0x3501
push 0x7a0c
push 0
push 0x7b82
call fcn.1003baaa
add esp, 0x30
jmp 0x10031fd1
mov dword [ebp - 0x1c8], 0xe8cff0ea
mov dword [ebp - 0xcd8], 0xb51f
mov dword [ebp - 0xb48], 1
mov dword [ebp - 0xfa0], 0xfffffffc
mov dword [ebp - 0x1264], 0xd863e320
mov dword [ebp - 0xfa8], 1
mov dword [ebp - 0x1c8], 0
jmp 0x1003208a
mov eax, dword [ebp - 0x1c8]
dec eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 0xfffffffb
jne 0x10032730
mov dword [ebp - 0xb8], 0xfffffffe
push 4
lea ecx, [ebp - 0xf10]
call fcn.100166bf
mov dword [ebp - 4], 0xe
mov dword [ebp - 0xb58], 0xffffffff
mov dword [ebp - 0xb60], 0x4191
mov dword [ebp - 0x368], 0
jmp 0x100320e2
mov eax, dword [ebp - 0x368]
inc eax
mov dword [ebp - 0x368], eax
cmp dword [ebp - 0x368], 4
jge 0x10032104
push dword [ebp - 0x368]
lea ecx, [ebp - 0xf10]
call fcn.100167c9
mov dword [eax], 0xfffffff7
jmp 0x100320d5
mov dword [ebp - 0xb8], 0
jmp 0x1003211d
mov eax, dword [ebp - 0xb8]
dec eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0xffffffe6
jg 0x1003271c
push 1
lea ecx, [ebp - 0xa54]
call fcn.100166bf
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x20c], 0xbef7d651
push 4
lea ecx, [ebp - 0xef8]
call fcn.100166bf
mov byte [ebp - 4], 0x10
mov dword [ebp - 0x1c0], 0
jmp 0x1003216f
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 1
jge 0x1003218e
push dword [ebp - 0x1c0]
lea ecx, [ebp - 0xa54]
call fcn.100167c9
or dword [eax], 0xffffffff
jmp 0x10032162
push 0x3810
push 0x83d
lea eax, [ebp - 0x1c0]
push eax
push 0x2e6d
lea eax, [ebp - 0xef8]
push eax
push 0
push 0x54ce
push 0
call fcn.1002a1e2
add esp, 0x20
push 0
lea ecx, [ebp - 0xa54]
call fcn.100167c9
cmp dword [eax], 0
je 0x100321f1
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0xef8]
call fcn.100167a4
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0xa54]
call fcn.100167a4
jmp 0x1003271c
mov dword [ebp - 0x20c], 0
jmp 0x1003220a
mov eax, dword [ebp - 0x20c]
dec eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 0
jl 0x100326f9
mov dword [ebp - 0x1f8], 0xe5c285ce
mov dword [ebp - 0xb50], 0xf2a6add3
mov dword [ebp - 0x1158], 0xffffffff
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0xfb0], eax
mov eax, dword [ebp - 0x1f8]
mov dword [ebp - 0x1250], eax
push 0
lea ecx, [ebp - 0xa54]
call fcn.100167c9
or esi, 0xffffffff
sub esi, dword [eax]
push 0
lea ecx, [ebp - 0xa54]
call fcn.100167c9
cmp esi, dword [eax]
jl 0x1003227c
mov dword [ebp - 0x6ac], 1
jmp 0x10032283
and dword [ebp - 0x6ac], 0
push 0
lea ecx, [ebp - 0xa54]
call fcn.100167c9
mov ecx, dword [ebp - 0x6ac]
add ecx, dword [eax]
je 0x100322a6
mov dword [ebp - 0x9ac], 1
jmp 0x100322ad
and dword [ebp - 0x9ac], 0
mov eax, dword [ebp - 0x20c]
sub eax, dword [ebp - 0x9ac]
sub eax, dword [ebp - 0xb8]
jne 0x100322d3
cmp dword [ebp - 0xb8], 0
jne 0x100322d3
and dword [ebp - 0x6b4], 0
jmp 0x100322dd
mov dword [ebp - 0x6b4], 1
mov eax, dword [ebp - 0x1f8]
cmp dword [ebp - 0x6b4], eax
jg 0x100322f7
mov dword [ebp - 0x86c], 1
jmp 0x100322fe
and dword [ebp - 0x86c], 0
cmp dword [ebp - 0x86c], 0x407858f9
jge 0x10032316
mov dword [ebp - 0x6bc], 1
jmp 0x1003231d
and dword [ebp - 0x6bc], 0
mov eax, dword [ebp - 0x1f8]
cmp eax, dword [ebp - 0x6bc]
jne 0x100324bb
cmp dword [ebp - 0x1c8], 0
je 0x100324bb
push 2
lea ecx, [ebp - 0xe4c]
call fcn.100166bf
mov byte [ebp - 4], 0x11
mov dword [ebp - 0xce0], 0xfffffffc
push 0
push 0x4490
push 0x1a90
push 0x70
push 0x79e9
push 1
lea eax, [ebp - 0xfb8]
push eax
lea eax, [ebp - 0xe4c]
push eax
push 0x523a
push 1
push 0x63c1
call fcn.1002d394
add esp, 0x2c
cmp dword [ebp - 0xcd8], 0xb08
jl 0x100323a6
mov dword [ebp - 0x6cc], 1
jmp 0x100323ad
and dword [ebp - 0x6cc], 0
push 3
lea ecx, [ebp - 0xf10]
call fcn.100167c9
cmp dword [eax], 1
jbe 0x100323cb
mov dword [ebp - 0x6c4], 1
jmp 0x100323d2
and dword [ebp - 0x6c4], 0
push 0
lea ecx, [ebp - 0xe4c]
call fcn.100167c9
mov dword [eax], 1
xor eax, eax
inc eax
cmp eax, 0xb2a93f04
jae 0x100323fb
mov dword [ebp - 0x944], 1
jmp 0x10032402
and dword [ebp - 0x944], 0
mov eax, dword [ebp - 0xb48]
cmp dword [ebp - 0x944], eax
jg 0x1003241c
mov dword [ebp - 0x874], 1
jmp 0x10032423
and dword [ebp - 0x874], 0
mov eax, dword [ebp - 0x6c4]
mov dword [ebp - 0x1f8], eax
mov eax, dword [ebp - 0x1f8]
cmp eax, dword [ebp - 0x874]
je 0x1003245b
push 0
lea ecx, [ebp - 0xe4c]
call fcn.100167c9
cmp dword [eax], 0
je 0x1003245b
mov dword [ebp - 0xca4], 1
jmp 0x10032462
and dword [ebp - 0xca4], 0
mov eax, dword [ebp - 0xb50]
mov dword [ebp - 0x1160], eax
mov eax, dword [ebp - 0xce0]
mov dword [ebp - 0xfc0], eax
mov eax, dword [ebp - 0xb8]
cmp dword [ebp - 0x6cc], eax
je 0x10032494
mov dword [ebp - 0x9e4], 1
jmp 0x1003249b
and dword [ebp - 0x9e4], 0
mov eax, dword [ebp - 0x9e4]
mov dword [ebp - 0xb58], eax
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xe4c]
call fcn.100167a4
jmp 0x100326d7
mov dword [ebp - 0xcac], 0x1bd7
cmp dword [ebp - 0xcac], 0xe6c
jge 0x100326bb
lea ecx, [ebp - 0xdc4]
call fcn.10015ff5
mov byte [ebp - 4], 0x12
lea edx, [ebp - 0xdc4]
mov ecx, 0x10659c50
call fcn.10041c81
push 0
push 0x100079c4
lea ecx, [ebp - 0xdc4]
call fcn.10040e20
mov dword [ebp - 0x420], eax
push 0
push 0x100079c8
lea ecx, [ebp - 0xdc4]
call fcn.10040e20
mov dword [ebp - 0x6d4], eax
mov eax, dword [ebp - 0x420]
mov dword [ebp - 0x448], eax
mov eax, dword [ebp - 0x6d4]
sub eax, dword [ebp - 0x420]
dec eax
mov dword [ebp - 0x3e0], eax
lea ecx, [ebp - 0xdc4]
call fcn.10016639
sub eax, dword [ebp - 0x6d4]
dec eax
mov dword [ebp - 0x3d8], eax
mov eax, dword [ebp - 0x448]
add eax, dword [ebp - 0x3e0]
cmp dword [ebp - 0x3d8], eax
jne 0x10032590
push fcn.1001b109
lea edx, [ebp - 0xdc4]
mov ecx, 0x10659b98
call fcn.10041ae4
mov ecx, eax
call fcn.10016363
jmp 0x100326ac
mov eax, dword [ebp - 0x3e0]
mov ecx, dword [ebp - 0x448]
lea eax, [ecx + eax + 2]
cmp dword [ebp - 0x3d8], eax
jne 0x10032605
push 0x100079cc
call fcn.1004f4dc
pop ecx
and dword [ebp - 0x298], 0
jmp 0x100325c9
mov eax, dword [ebp - 0x298]
inc eax
mov dword [ebp - 0x298], eax
lea ecx, [ebp - 0xdc4]
call fcn.10016639
dec eax
cmp dword [ebp - 0x298], eax
jae 0x10032600
push dword [ebp - 0x298]
lea ecx, [ebp - 0xdc4]
call fcn.1001868a
movsx eax, byte [eax]
push eax
push 0x100077dc
call fcn.1004f4dc
pop ecx
pop ecx
jmp 0x100325bc
jmp 0x100326ac
mov eax, dword [ebp - 0x3d8]
inc eax
inc eax
mov ecx, dword [ebp - 0x448]
add ecx, dword [ebp - 0x3e0]
cmp eax, ecx
jne 0x100326a1
mov eax, dword [ebp - 0x420]
dec eax
mov dword [ebp - 0x3e8], eax
jne 0x1003263a
mov dword [ebp - 0x3e8], 2
and dword [ebp - 0x1d0], 0
jmp 0x10032650
mov eax, dword [ebp - 0x1d0]
inc eax
mov dword [ebp - 0x1d0], eax
lea ecx, [ebp - 0xdc4]
call fcn.10016639
cmp dword [ebp - 0x1d0], eax
jae 0x10032694
mov eax, dword [ebp - 0x1d0]
cmp eax, dword [ebp - 0x3e8]
je 0x10032692
push dword [ebp - 0x1d0]
lea ecx, [ebp - 0xdc4]
call fcn.1001868a
movsx eax, byte [eax]
push eax
push 0x100077dc
call fcn.1004f4dc
pop ecx
pop ecx
jmp 0x10032643
push 0x100079cc
call fcn.1004f7e7
pop ecx
jmp 0x100326ac
push 0x10007920
call fcn.1004f7e7
pop ecx
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xdc4]
call fcn.10016035
mov byte [ebp - 0x146], 0
movzx eax, byte [ebp - 0x146]
test eax, eax
je 0x100326d7
push 0
push 0x58
call dword [sym.imp.KERNEL32.dll_GetCPInfo]
push 0x1f0e
push 0
push 0
push 0x17cd
lea eax, [ebp - 0xb60]
push eax
call fcn.10026c50
add esp, 0x14
jmp 0x100321fd
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0xef8]
call fcn.100167a4
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0xa54]
call fcn.100167a4
jmp 0x10032110
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xf10]
call fcn.100167a4
jmp 0x1003207d
mov byte [ebp - 0xf1], 0
movzx eax, byte [ebp - 0xf1]
test eax, eax
je 0x10032762
push 1
push 0x32f7
push 0x64c5
push 0
push 0x159b
push 0x337d
call fcn.1002250b
add esp, 0x18
mov dword [ebp - 0xd24], 0xffffffff
mov dword [ebp - 0xd20], 0xffffffff
mov dword [ebp - 0xd1c], 0xffffffff
mov dword [ebp - 0xd18], 0xffffffff
mov dword [ebp - 0x194], 0
mov dword [ebp - 0xf84], 0x5720
mov byte [ebp - 0x143], 0
movzx eax, byte [ebp - 0x143]
test eax, eax
je 0x100327b8
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
mov byte [ebp - 0xf3], 0
movzx eax, byte [ebp - 0xf3]
test eax, eax
je 0x100327de
push 0x67aa
push 0x4036
push 0
call fcn.1002e2cc
add esp, 0xc
mov dword [ebp - 0x8ac], 0x71b35d56
mov dword [ebp - 0x21c], 0xc70bb743
mov dword [ebp - 0xcb4], 0
mov dword [ebp - 0x344], 0
jmp 0x10032815
mov eax, dword [ebp - 0x344]
inc eax
mov dword [ebp - 0x344], eax
cmp dword [ebp - 0x344], 1
jge 0x10032831
mov eax, dword [ebp - 0x344]
mov dword [ebp + eax*4 - 0x2ac], 0
jmp 0x10032808
mov dword [ebp - 0x21c], 0
jmp 0x1003284a
mov eax, dword [ebp - 0x21c]
inc eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 0
jg 0x10032a22
mov dword [ebp - 0x314], 9
mov dword [ebp - 0x50], 0x67e307b5
push 0x2fd0
push 0
push 0
push 0x1b27
lea eax, [ebp - 0x314]
push eax
push 0x5d42
call fcn.10038c6e
add esp, 0x18
mov dword [ebp - 0x50], 0
jmp 0x1003289a
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
jg 0x10032a1d
mov dword [ebp - 0xb68], 1
mov eax, dword [ebp - 0x50]
cmp dword [ebp + eax*4 - 0x2ac], 0
jne 0x10032932
mov eax, dword [ebp - 0x50]
add eax, dword [ebp - 0x21c]
cmp eax, 0x2947
jl 0x100328d7
mov dword [ebp - 0x87c], 1
jmp 0x100328de
and dword [ebp - 0x87c], 0
mov eax, dword [ebp - 0x50]
cmp dword [ebp + eax*4 - 0x2ac], 0x9968
jge 0x100328fa
mov dword [ebp - 0x6dc], 1
jmp 0x10032901
and dword [ebp - 0x6dc], 0
mov eax, dword [ebp - 0x87c]
cmp eax, dword [ebp - 0x6dc]
jne 0x1003291b
mov dword [ebp - 0xce8], 1
jmp 0x10032922
and dword [ebp - 0xce8], 0
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp + eax*4 - 0x2ac]
mov dword [ebp - 0xfc8], eax
mov eax, dword [ebp - 0x314]
mov ecx, dword [ebp - 0x50]
sub eax, dword [ebp + ecx*4 - 0x2ac]
cmp eax, dword [ebp - 0x50]
jg 0x1003295c
mov eax, 0xb42c
test eax, eax
je 0x1003295c
mov dword [ebp - 0x94c], 1
jmp 0x10032963
and dword [ebp - 0x94c], 0
mov eax, dword [ebp - 0x314]
cmp dword [ebp - 0x94c], eax
jg 0x1003297d
mov dword [ebp - 0x6e4], 1
jmp 0x10032984
and dword [ebp - 0x6e4], 0
mov eax, dword [ebp - 0x6e4]
sub eax, dword [ebp - 0x50]
cmp eax, dword [ebp - 0x314]
jle 0x100329a1
mov dword [ebp - 0x884], 1
jmp 0x100329a8
and dword [ebp - 0x884], 0
mov eax, dword [ebp - 0xb68]
cmp dword [ebp - 0x884], eax
jge 0x100329c2
mov dword [ebp - 0x6ec], 1
jmp 0x100329c9
and dword [ebp - 0x6ec], 0
mov eax, dword [ebp - 0x6ec]
mov dword [ebp - 0xcb4], eax
mov byte [ebp - 0x13f], 0
movzx eax, byte [ebp - 0x13f]
test eax, eax
je 0x10032a18
push 0x73c1
push 0x329f
push 0x472d
push 1
push 0
push 0x2016
push 0x67bd
push 0
push 0x7445
push 0x715
call fcn.10039fbc
add esp, 0x28
jmp 0x10032893
jmp 0x1003283d
push 0x712
push 0
push 0
push 0x6dfd
push 0x21c6
push 1
call fcn.1002162d
add esp, 0x18
mov dword [ebp - 0xba0], 0xf0ebf903
mov dword [ebp - 0x190], 1
mov dword [ebp - 0xb70], 0x1d69
cmp dword [ebp - 0xb70], 0xc6c
jge 0x10032d65
lea eax, [ebp - 0x458]
push eax
push 0x10007724
call fcn.1004edeb
pop ecx
pop ecx
mov eax, dword [ebp - 0x458]
mov dword [ebp - 0xcf0], eax
mov eax, dword [ebp - 0x458]
dec eax
mov dword [ebp - 0x458], eax
cmp dword [ebp - 0xcf0], 0
je 0x10032d65
lea eax, [ebp - 0xa8]
push eax
push 0x10007724
call fcn.1004edeb
pop ecx
pop ecx
push dword [ebp - 0xa8]
lea ecx, [ebp - 0xdf8]
call fcn.100166bf
mov dword [ebp - 4], 0x13
and dword [ebp - 0x2b4], 0
jmp 0x10032ae7
mov eax, dword [ebp - 0x2b4]
inc eax
mov dword [ebp - 0x2b4], eax
mov eax, dword [ebp - 0x2b4]
cmp eax, dword [ebp - 0xa8]
jge 0x10032b15
push dword [ebp - 0x2b4]
lea ecx, [ebp - 0xdf8]
call fcn.100167c9
push eax
push 0x10007724
call fcn.1004edeb
pop ecx
pop ecx
jmp 0x10032ada
and dword [ebp - 0xb78], 0
lea eax, [ebp - 0xb78]
push eax
push dword [ebp - 0xa8]
lea ecx, [ebp - 0xe28]
call fcn.100167ef
mov byte [ebp - 4], 0x14
and dword [ebp - 0xcbc], 0
lea eax, [ebp - 0xcbc]
push eax
push dword [ebp - 0xa8]
lea ecx, [ebp - 0xe64]
call fcn.100167ef
mov byte [ebp - 4], 0x15
and dword [ebp - 0xdc], 0
jmp 0x10032b71
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
mov eax, dword [ebp - 0xdc]
cmp eax, dword [ebp - 0xa8]
jge 0x10032bec
cmp dword [ebp - 0xdc], 0
je 0x10032ba0
mov eax, dword [ebp - 0xdc]
dec eax
push eax
lea ecx, [ebp - 0xe28]
call fcn.100167c9
cmp dword [eax], 0
je 0x10032bc7
push dword [ebp - 0xdc]
lea ecx, [ebp - 0xdf8]
call fcn.100167c9
mov eax, dword [eax]
cmp eax, dword [ebp - 0xdc]
jl 0x10032bc7
mov dword [ebp - 0x9b4], 1
jmp 0x10032bce
and dword [ebp - 0x9b4], 0
push dword [ebp - 0xdc]
lea ecx, [ebp - 0xe28]
call fcn.100167c9
mov ecx, dword [ebp - 0x9b4]
mov dword [eax], ecx
jmp 0x10032b64
mov eax, dword [ebp - 0xa8]
dec eax
mov dword [ebp - 0xc0], eax
jmp 0x10032c08
mov eax, dword [ebp - 0xc0]
dec eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0
jl 0x10032c8b
mov eax, dword [ebp - 0xa8]
dec eax
cmp dword [ebp - 0xc0], eax
je 0x10032c38
mov eax, dword [ebp - 0xc0]
inc eax
push eax
lea ecx, [ebp - 0xe64]
call fcn.100167c9
cmp dword [eax], 0
je 0x10032c66
push dword [ebp - 0xc0]
lea ecx, [ebp - 0xdf8]
call fcn.100167c9
mov ecx, dword [ebp - 0xa8]
dec ecx
sub ecx, dword [ebp - 0xc0]
cmp dword [eax], ecx
jl 0x10032c66
mov dword [ebp - 0x6f4], 1
jmp 0x10032c6d
and dword [ebp - 0x6f4], 0
push dword [ebp - 0xc0]
lea ecx, [ebp - 0xe64]
call fcn.100167c9
mov ecx, dword [ebp - 0x6f4]
mov dword [eax], ecx
jmp 0x10032bfb
mov byte [ebp - 0x19], 0
and dword [ebp - 0x1d8], 0
jmp 0x10032ca5
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
mov eax, dword [ebp - 0x1d8]
cmp eax, dword [ebp - 0xa8]
jge 0x10032d09
movzx eax, byte [ebp - 0x19]
test eax, eax
jne 0x10032d09
push dword [ebp - 0x1d8]
lea ecx, [ebp - 0xe28]
call fcn.100167c9
cmp dword [eax], 0
je 0x10032cf3
push dword [ebp - 0x1d8]
lea ecx, [ebp - 0xe64]
call fcn.100167c9
cmp dword [eax], 0
je 0x10032cf3
mov dword [ebp - 0x88c], 1
jmp 0x10032cfa
and dword [ebp - 0x88c], 0
movzx eax, byte [ebp - 0x19]
or eax, dword [ebp - 0x88c]
mov byte [ebp - 0x19], al
jmp 0x10032c98
movzx eax, byte [ebp - 0x19]
test eax, eax
je 0x10032d1d
mov dword [ebp - 0x6fc], 0x100079a0
jmp 0x10032d27
mov dword [ebp - 0x6fc], 0x100079a4
push dword [ebp - 0x6fc]
call fcn.1004f7e7
pop ecx
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0xe64]
call fcn.1001685b
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0xe28]
call fcn.1001685b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xdf8]
call fcn.1001685b
jmp 0x10032a80
mov dword [ebp - 0x36c], 0
jmp 0x10032d7e
mov eax, dword [ebp - 0x36c]
inc eax
mov dword [ebp - 0x36c], eax
cmp dword [ebp - 0x36c], 2
jge 0x10032d9a
mov eax, dword [ebp - 0x36c]
mov dword [ebp + eax*4 - 0xff4], 0xf6af
jmp 0x10032d71
mov dword [ebp - 0x190], 0
jmp 0x10032db3
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 2
jge 0x10032dcf
mov eax, dword [ebp - 0x190]
mov dword [ebp + eax*4 - 0xff4], 0xffff
jmp 0x10032da6
mov byte [ebp - 0x147], 0
movzx eax, byte [ebp - 0x147]
test eax, eax
je 0x10032dfc
push 0x306e
push 0
push 0x7272
push 0
push 0x6cc
call fcn.1003c7c1
add esp, 0x14
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xd24]
mov dword [ebp - 0x194], eax
mov dword [ebp - 0x170], 0x9ad59e57
mov dword [ebp - 0x2bc], 0
jmp 0x10032e32
mov eax, dword [ebp - 0x2bc]
inc eax
mov dword [ebp - 0x2bc], eax
cmp dword [ebp - 0x2bc], 3
jge 0x10032e4e
mov eax, dword [ebp - 0x2bc]
mov dword [ebp + eax*4 - 0x132c], 0xfffffffe
jmp 0x10032e25
mov dword [ebp - 0x170], 0
jmp 0x10032e67
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 2
jg 0x10032ed4
mov dword [ebp - 0x31c], 0xa290be4
mov dword [ebp - 0x31c], 2
jmp 0x10032e93
mov eax, dword [ebp - 0x31c]
dec eax
mov dword [ebp - 0x31c], eax
cmp dword [ebp - 0x31c], 0
jl 0x10032ec0
push 0x5d15
push 0x1d38
push 0x45af
push 0
push 0x3bad
push 1
push 0
call fcn.10039cc4
add esp, 0x1c
jmp 0x10032e86
mov eax, dword [ebp - 0x170]
cmp dword [ebp + eax*4 - 0x132c], 0
je 0x10032ed2
jmp 0x10032ed4
jmp 0x10032e5a
cmp dword [ebp - 0x170], 0
je 0x10032f13
mov byte [ebp - 0xf7], 0
movzx eax, byte [ebp - 0xf7]
test eax, eax
je 0x10032f11
push 0x51bb
push 0x4e0a
push 1
push 1
push 0
push 0x7e81
push 0x7598
call fcn.10025e52
add esp, 0x1c
jmp 0x10032f30
push 0x3e4b
push 1
push 1
push 0x41a9
push 0x7e09
push 0
call fcn.1002162d
add esp, 0x18
mov dword [ebp - 0x194], 0x1c
jmp 0x10032f49
cmp dword [ebp - 0x194], 0xffffffeb
jge 0x100334bc
mov dword [ebp - 0x72c], 0xfffffff7
mov dword [ebp - 0x160], 0
mov dword [ebp - 0x160], 0xa
jmp 0x10032f83
mov eax, dword [ebp - 0x160]
dec eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 0xfffffff4
jne 0x1003310b
push 2
lea ecx, [ebp - 0xf1c]
call fcn.100166bf
mov dword [ebp - 4], 0x16
push 2
lea ecx, [ebp - 0xa9c]
call fcn.100166bf
mov byte [ebp - 4], 0x17
mov dword [ebp - 0xb88], 0xfffffff9
mov dword [ebp - 0xbec], 0
push 1
push 0x2e20
lea eax, [ebp - 0xf1c]
push eax
push 0x36f9
push 0x7869
push 0
push 0x3b32
push 0x19
push 0x49b7
push 1
lea eax, [ebp - 0x19c]
push eax
call fcn.1002d394
add esp, 0x2c
mov dword [ebp - 0x19c], 0
jmp 0x10033019
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 2
jge 0x1003303b
push dword [ebp - 0x19c]
lea ecx, [ebp - 0xa9c]
call fcn.100167c9
mov dword [eax], 0x88a137b1
jmp 0x1003300c
push 1
lea ecx, [ebp - 0xa9c]
call fcn.100167c9
and dword [eax], 0
jmp 0x10033071
push 1
lea ecx, [ebp - 0xa9c]
call fcn.100167c9
mov dword [ebp - 0x954], eax
mov eax, dword [ebp - 0x954]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x954]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0xa9c]
call fcn.100167c9
cmp dword [eax], 1
jg 0x100330e8
mov dword [ebp - 0xcf8], 3
mov dword [ebp - 0xb80], 0x437f1bd5
push 0
push 0x58d7
lea eax, [ebp - 0xf1c]
push eax
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0xb80]
push eax
push 1
lea eax, [ebp - 0xcf8]
push eax
lea eax, [ebp - 0xb88]
push eax
push 0x16d1
lea eax, [ebp - 0xbec]
push eax
push 0x3543
lea eax, [ebp - 0xa9c]
push eax
call fcn.10028a97
add esp, 0x30
jmp 0x1003304d
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0xa9c]
call fcn.100167a4
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xf1c]
call fcn.100167a4
jmp 0x10032f76
push 0x29b8
push 0
push 1
push 0x4072
lea eax, [ebp - 0x160]
push eax
push 1
push 0x3a28
push 0x1033
push 0x3916
push 0x7df3
call fcn.10029d90
add esp, 0x28
mov dword [ebp - 0x42c], 0x97515801
mov dword [ebp - 0xd4], 0
mov dword [ebp - 0x1a4], 0xdf7cd95d
mov dword [ebp - 0x58], 0x9b2b534
mov dword [ebp - 0x1008], 0xffffffff
cmp dword [ebp - 0xd4], 0xac46
jle 0x10033185
mov dword [ebp - 0x704], 1
jmp 0x1003318c
and dword [ebp - 0x704], 0
mov eax, dword [ebp - 0xd4]
cmp dword [ebp - 0x704], eax
jle 0x100331a6
mov dword [ebp - 0x894], 1
jmp 0x100331ad
and dword [ebp - 0x894], 0
mov eax, dword [ebp - 0x894]
mov dword [ebp - 0xd4], eax
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0x1a4], eax
mov eax, dword [ebp - 0x1a4]
cmp dword [ebp - 0xd4], eax
jle 0x100331df
mov dword [ebp - 0x70c], 1
jmp 0x100331e6
and dword [ebp - 0x70c], 0
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x70c], eax
jne 0x100331fd
mov dword [ebp - 0xb90], 1
jmp 0x10033204
and dword [ebp - 0xb90], 0
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0xfd0], eax
imul eax, dword [ebp - 0x58], 0xfffffff7
add eax, 0x7689351f
cmp eax, dword [ebp - 0x58]
jne 0x10033227
mov dword [ebp - 0xa0c], 1
jmp 0x1003322e
and dword [ebp - 0xa0c], 0
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0xa0c], eax
jle 0x10033245
mov dword [ebp - 0xc00], 0x5e48d327
push 0x6324
push 0x32d9
push 0
push 0
call fcn.10028991
add esp, 0x10
push 0x35f5
push 0x49
push 0x3653
lea eax, [ebp - 0xc00]
push eax
push 0
call fcn.100399f8
add esp, 0x14
cmp dword [ebp - 0x3e4], 0
jle 0x100382b1
push 0
push 0x2253
push 1
call fcn.1002920a
add esp, 0xc
mov dword [ebp - 0x3c], 0xffffffff
mov dword [ebp - 0xf80], 7
mov dword [ebp - 0xf7c], 7
mov dword [ebp - 0xf78], 7
mov dword [ebp - 0xf74], 7
push 1
lea ecx, [ebp - 0xf28]
call fcn.100166bf
mov dword [ebp - 4], 0x18
mov dword [ebp - 0x34c], 0
jmp 0x10033573
mov eax, dword [ebp - 0x34c]
inc eax
mov dword [ebp - 0x34c], eax
cmp dword [ebp - 0x34c], 1
jge 0x10033595
push dword [ebp - 0x34c]
lea ecx, [ebp - 0xf28]
call fcn.100167c9
mov dword [eax], 0x3eb61943
jmp 0x10033566
cmp dword [ebp - 0x3c], 0x768c
je 0x100335aa
mov dword [ebp - 0x744], 1
jmp 0x100335b1
and dword [ebp - 0x744], 0
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x3c], eax
jle 0x100335c5
mov dword [ebp - 0x73c], 1
jmp 0x100335cc
and dword [ebp - 0x73c], 0
cmp dword [ebp - 0x73c], 0
jne 0x100335e1
mov dword [ebp - 0x964], 1
jmp 0x100335e8
and dword [ebp - 0x964], 0
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x964], eax
je 0x100335ff
mov dword [ebp - 0x8b4], 1
jmp 0x10033606
and dword [ebp - 0x8b4], 0
mov eax, dword [ebp - 0x744]
cmp eax, dword [ebp - 0x8b4]
je 0x1003361a
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret