Function at 0x100527fd
Capabilities:
Clear file content
Contain obfuscated stackstrings
Encode data using base64
Enumerate pe sections
Identify system language via api
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1008d43f
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xbf0
push esi
push edi
and dword [ebp - 0x18], 0
movzx eax, byte [ebp + 0xc]
test eax, eax
je 0x10057b9f
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x34], eax
or dword [ebp - 0x8a0], 0xffffffff
or dword [ebp - 0x89c], 0xffffffff
or dword [ebp - 0x898], 0xffffffff
or dword [ebp - 0x894], 0xffffffff
lea ecx, [ebp - 0x315]
call fcn.1000959b
push eax
lea eax, [ebp - 0x890]
push eax
lea eax, [ebp - 0x8a0]
push eax
lea ecx, [ebp - 0xad8]
call fcn.1001acc6
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x358]
call fcn.1001ac75
and dword [ebp - 4], 0
mov dword [ebp - 0xd4], 0xc2076acb
mov dword [ebp - 0x10c], 0x198ab79a
push 0
lea ecx, [ebp - 0x358]
call fcn.1001acb7
mov dword [eax], 6
jmp 0x100528d5
push 0
lea ecx, [ebp - 0x358]
call fcn.1001acb7
mov dword [ebp - 0x498], eax
mov eax, dword [ebp - 0x498]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x498]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x358]
call fcn.1001acb7
cmp dword [eax], 0xe
jne 0x10052c93
mov dword [ebp - 0x504], 1
mov dword [ebp - 0x158], 0
jmp 0x1005290e
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 2
jge 0x1005292a
mov eax, dword [ebp - 0x158]
mov dword [ebp + eax*4 - 0x67c], 0x244d513c
jmp 0x10052901
push 0
lea ecx, [ebp - 0x358]
call fcn.1001acb7
mov esi, eax
push 2
lea ecx, [ebp - 0x358]
call fcn.1001acb7
mov ecx, dword [esi]
cmp ecx, dword [eax]
jne 0x10052958
mov dword [ebp - 0x5f8], 1
jmp 0x1005295f
and dword [ebp - 0x5f8], 0
xor esi, esi
inc esi
sub esi, dword [ebp - 0x5f8]
push 0
lea ecx, [ebp - 0x358]
call fcn.1001acb7
cmp esi, dword [eax]
jl 0x10052985
mov dword [ebp - 0x600], 1
jmp 0x1005298c
and dword [ebp - 0x600], 0
xor eax, eax
inc eax
sub eax, dword [ebp - 0x600]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x67c]
je 0x100529b0
mov dword [ebp - 0x608], 1
jmp 0x100529b7
and dword [ebp - 0x608], 0
mov eax, dword [ebp - 0x608]
mov dword [ebp - 0xd4], eax
push 4
pop eax
shl eax, 0
mov esi, 0x693009c
sub esi, dword [ebp + eax - 0x67c]
add esi, dword [ebp - 0xd4]
push 0
lea ecx, [ebp - 0x358]
call fcn.1001acb7
cmp esi, dword [eax]
je 0x100529f8
mov dword [ebp - 0x634], 1
jmp 0x100529ff
and dword [ebp - 0x634], 0
cmp dword [ebp - 0x634], 0x2fe81720
jle 0x10052a17
mov dword [ebp - 0x63c], 1
jmp 0x10052a1e
and dword [ebp - 0x63c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x67c]
cmp dword [ebp - 0x63c], eax
jl 0x10052a3f
mov dword [ebp - 0x644], 1
jmp 0x10052a46
and dword [ebp - 0x644], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x67c]
cmp dword [ebp - 0x644], eax
jne 0x10052a67
mov dword [ebp - 0x64c], 1
jmp 0x10052a6e
and dword [ebp - 0x64c], 0
mov eax, dword [ebp - 0x64c]
mov dword [ebp - 0x10c], eax
mov eax, dword [ebp - 0x504]
mov dword [ebp - 0x954], eax
cmp dword [ebp - 0x10c], 0
jne 0x10052aa4
mov eax, 0xffff
test eax, eax
jne 0x10052aa4
mov dword [ebp - 0x654], 1
jmp 0x10052aab
and dword [ebp - 0x654], 0
cmp dword [ebp - 0x654], 0xde75
jne 0x10052ac3
mov dword [ebp - 0x65c], 1
jmp 0x10052aca
and dword [ebp - 0x65c], 0
cmp dword [ebp - 0x65c], 0xbac89d73
jb 0x10052ae2
mov dword [ebp - 0x628], 1
jmp 0x10052ae9
and dword [ebp - 0x628], 0
cmp dword [ebp - 0x628], 0xffffffff
jle 0x10052afe
mov dword [ebp - 0x658], 1
jmp 0x10052b05
and dword [ebp - 0x658], 0
mov eax, dword [ebp - 0x658]
dec eax
cmp eax, dword [ebp - 0x10c]
jge 0x10052b20
mov dword [ebp - 0x394], 1
jmp 0x10052b27
and dword [ebp - 0x394], 0
push 0
lea ecx, [ebp - 0x358]
call fcn.1001acb7
mov ecx, dword [ebp - 0x394]
cmp ecx, dword [eax]
jl 0x10052b4a
mov dword [ebp - 0x5f0], 1
jmp 0x10052b51
and dword [ebp - 0x5f0], 0
cmp dword [ebp - 0x5f0], 0xfffffffa
jae 0x10052b90
mov byte [ebp - 0xbd], 0
push 0x5c31
push 0x4387
push 0x7218
lea eax, [ebp - 0xbd]
push eax
push 0
push 0x3ac
push 0x1ae5
call fcn.10050e4f
add esp, 0x1c
jmp 0x10052c8e
mov dword [ebp - 0x730], 1
mov dword [ebp - 0xd4], 0
jmp 0x10052bb3
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0x18
je 0x10052c8e
mov dword [ebp - 0x728], 0x3ca5435
push 1
lea ecx, [ebp - 0x8cc]
call fcn.1001ac19
mov byte [ebp - 4], 1
mov dword [ebp - 0x6ec], 0x3b9fe2
push 0x4eda
push 1
lea eax, [ebp - 0x92c]
push eax
push 0x7765
lea eax, [ebp - 0x8cc]
push eax
call fcn.1005097d
add esp, 0x14
push 0
lea eax, [ebp - 0xd4]
push eax
lea eax, [ebp - 0x504]
push eax
lea eax, [ebp - 0x10c]
push eax
lea eax, [ebp - 0x358]
push eax
call fcn.100514e4
add esp, 0x14
push 0x50c6
lea eax, [ebp - 0x6ec]
push eax
lea eax, [ebp - 0x728]
push eax
push 0x2288
lea eax, [ebp - 0x730]
push eax
lea eax, [ebp - 0x358]
push eax
push 0x2499
push 0x3dba
push 0x6a5d
push 0
lea eax, [ebp - 0x8cc]
push eax
lea eax, [ebp - 0x10c]
push eax
call fcn.10051e55
add esp, 0x30
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x8cc]
call fcn.1001ac9b
jmp 0x10052ba6
jmp 0x100528b1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x358]
call fcn.1001ac9b
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x3cc], eax
mov dword [ebp - 0x28], 0xfffffffd
mov dword [ebp - 0x768], 0
mov dword [ebp - 0x1e0], 0
jmp 0x10052cd5
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 3
jge 0x10052cf1
mov eax, dword [ebp - 0x1e0]
mov dword [ebp + eax*4 - 0x1f8], 0xfffb
jmp 0x10052cc8
mov dword [ebp - 0x28], 0
jmp 0x10052d01
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jg 0x10052f75
mov dword [ebp - 0x50], 0xfffffff7
mov dword [ebp - 0x2fc], 0xab56411d
mov dword [ebp - 0x3c4], 0x43a64e78
mov dword [ebp - 0x50], 0
jmp 0x10052d36
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 2
jg 0x10052f70
mov dword [ebp - 0x740], 0xd594484f
mov eax, dword [ebp - 0x50]
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x1f8]
cmp dword [ebp + eax*4 - 0x1f8], ecx
je 0x10052d6e
mov dword [ebp - 0x3ac], 1
jmp 0x10052d75
and dword [ebp - 0x3ac], 0
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp + eax*4 - 0x1f8]
mov dword [ebp - 0x934], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1f8], 0
jne 0x10052da4
cmp dword [ebp - 0x28], 0
jne 0x10052da4
and dword [ebp - 0x39c], 0
jmp 0x10052dae
mov dword [ebp - 0x39c], 1
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp + eax*4 - 0x1f8]
cmp dword [ebp - 0x39c], eax
jle 0x10052dcc
mov dword [ebp - 0x5bc], 1
jmp 0x10052dd3
and dword [ebp - 0x5bc], 0
mov eax, dword [ebp - 0x5bc]
mov dword [ebp - 0x2fc], eax
cmp dword [ebp - 0x2fc], 0xfffffff6
jb 0x10052df4
mov dword [ebp - 0x738], 1
jmp 0x10052dfb
and dword [ebp - 0x738], 0
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp + eax*4 - 0x1f8]
mov dword [ebp - 0x93c], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x944], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x94c], eax
imul eax, dword [ebp - 0x50], 0xffff
cmp eax, 0x7617
jne 0x10052e37
mov dword [ebp - 0x3a4], 1
jmp 0x10052e3e
and dword [ebp - 0x3a4], 0
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp + eax*4 - 0x1f8]
cmp eax, dword [ebp - 0x3a4]
jl 0x10052e5c
mov dword [ebp - 0x50c], 1
jmp 0x10052e63
and dword [ebp - 0x50c], 0
mov eax, dword [ebp - 0x50c]
add eax, 0x5243b9c1
cmp eax, 0xfffffff9
jge 0x10052e7a
cmp dword [ebp - 0x2fc], 0
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp + eax*4 - 0x1f8]
cmp dword [ebp - 0x3ac], eax
jl 0x10052e98
mov dword [ebp - 0x618], 1
jmp 0x10052e9f
and dword [ebp - 0x618], 0
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x618], eax
jge 0x10052ec3
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1f8], 0
jne 0x10052ec3
and dword [ebp - 0x3b4], 0
jmp 0x10052ecd
mov dword [ebp - 0x3b4], 1
mov eax, dword [ebp - 0x3b4]
sub eax, 0x1b14898d
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x1f8]
jle 0x10052ef2
mov dword [ebp - 0x514], 1
jmp 0x10052ef9
and dword [ebp - 0x514], 0
cmp dword [ebp - 0x514], 0xffffffff
jbe 0x10052f0e
mov dword [ebp - 0x3bc], 1
jmp 0x10052f15
and dword [ebp - 0x3bc], 0
cmp dword [ebp - 0x3bc], 0x450c1979
jne 0x10052f2d
mov dword [ebp - 0x5c4], 1
jmp 0x10052f34
and dword [ebp - 0x5c4], 0
mov eax, dword [ebp - 0x5c4]
mov dword [ebp - 0x3c4], eax
cmp dword [ebp - 0x3c4], 0xf4fe
jne 0x10052f58
mov dword [ebp - 0x51c], 1
jmp 0x10052f5f
and dword [ebp - 0x51c], 0
mov eax, dword [ebp - 0x51c]
mov dword [ebp - 0x740], eax
jmp 0x10052d2f
jmp 0x10052cfa
mov dword [ebp - 0x28], 0
jmp 0x10052f85
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jg 0x10053022
mov dword [ebp - 0x64], 0xffffffff
mov dword [ebp - 0x64], 0
jmp 0x10052fa6
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 2
jg 0x10052fc2
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x64]
mov eax, dword [ebp + eax*4 - 0x1f8]
mov dword [ebp + ecx*4 - 0x1f8], eax
jmp 0x10052f9f
mov dword [ebp - 0x64], 0
jmp 0x10052fd2
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 2
jg 0x1005301d
mov eax, dword [ebp - 0x28]
cmp dword [ebp + eax*4 - 0x1f8], 0
jne 0x10052ff8
mov eax, 0xf28d0d4b
sub eax, dword [ebp - 0x28]
jne 0x10052ff8
and dword [ebp - 0x760], 0
jmp 0x10053002
mov dword [ebp - 0x760], 1
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0x1f8]
mov dword [ebp - 0x910], eax
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x768], eax
jmp 0x10052fcb
jmp 0x10052f7e
mov eax, dword [ebp - 0x3cc]
movzx eax, word [eax]
cmp eax, 0x5a4d
je 0x10053037
jmp 0x10057bc7
push 0
push 0x2180
push 0x25b3
call fcn.10050f0e
add esp, 0xc
mov eax, dword [ebp - 0x3cc]
mov ecx, dword [ebp - 0x34]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0xac], ecx
mov eax, dword [ebp - 0xac]
cmp dword [eax], 0x4550
je 0x10053070
jmp 0x10057bc7
mov dword [ebp - 0x1e8], 0x48261f9c
mov dword [ebp - 0x964], 0x9ba07e4f
mov dword [ebp - 0x96c], 0xfffffffc
mov dword [ebp - 0x974], 1
mov dword [ebp - 0x97c], 0x2e7ccc89
mov dword [ebp - 0x984], 0xffffffff
mov dword [ebp - 0x98c], 0
mov dword [ebp - 0x994], 0x5b1b6fd4
mov dword [ebp - 0x99c], 4
mov dword [ebp - 0x9a4], 0
mov dword [ebp - 0x9ac], 0xffffffff
mov dword [ebp - 0x778], 0xa87a5eaf
mov dword [ebp - 0x1e8], 0xffffffe2
jmp 0x10053101
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 4
jg 0x100531bd
mov dword [ebp - 0x770], 0
mov dword [ebp - 0x9b4], 6
mov dword [ebp - 0x9bc], 8
mov dword [ebp - 0x9c4], 0xd9ee1c97
push 1
lea ecx, [ebp - 0xa4c]
call fcn.1001ac19
mov dword [ebp - 4], 2
mov dword [ebp - 0x9cc], 0
mov dword [ebp - 0x16c], 0
jmp 0x1005316d
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 1
jge 0x1005318f
push dword [ebp - 0x16c]
lea ecx, [ebp - 0xa4c]
call fcn.1001acb7
mov dword [eax], 0x8cf4c59c
jmp 0x10053160
mov dword [ebp - 0x770], 0xfffffffa
push 1
lea eax, [ebp - 0x778]
push eax
call fcn.10050a27
pop ecx
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa4c]
call fcn.1001ac9b
jmp 0x100530f4
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xac]
lea eax, [ecx + eax + 0x78]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x30], 0xfffffffd
mov dword [ebp - 0x798], 0
mov dword [ebp - 0x168], 0
jmp 0x100531fa
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 3
jge 0x10053216
mov eax, dword [ebp - 0x168]
mov dword [ebp + eax*4 - 0x208], 0xfffb
jmp 0x100531ed
mov dword [ebp - 0x30], 0
jmp 0x10053226
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 2
jg 0x1005349a
mov dword [ebp - 0x4c], 0xfffffff7
mov dword [ebp - 0x328], 0xab56411d
mov dword [ebp - 0x534], 0x43a64e78
mov dword [ebp - 0x4c], 0
jmp 0x1005325b
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 2
jg 0x10053495
mov dword [ebp - 0x788], 0xd594484f
mov eax, dword [ebp - 0x4c]
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x208]
cmp dword [ebp + eax*4 - 0x208], ecx
je 0x10053293
mov dword [ebp - 0x5cc], 1
jmp 0x1005329a
and dword [ebp - 0x5cc], 0
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp + eax*4 - 0x208]
mov dword [ebp - 0x9d4], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x208], 0
jne 0x100532c9
cmp dword [ebp - 0x30], 0
jne 0x100532c9
and dword [ebp - 0x640], 0
jmp 0x100532d3
mov dword [ebp - 0x640], 1
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp + eax*4 - 0x208]
cmp dword [ebp - 0x640], eax
jle 0x100532f1
mov dword [ebp - 0x3d4], 1
jmp 0x100532f8
and dword [ebp - 0x3d4], 0
mov eax, dword [ebp - 0x3d4]
mov dword [ebp - 0x328], eax
cmp dword [ebp - 0x328], 0xfffffff6
jb 0x10053319
mov dword [ebp - 0x780], 1
jmp 0x10053320
and dword [ebp - 0x780], 0
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp + eax*4 - 0x208]
mov dword [ebp - 0x9dc], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x9e4], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x9ec], eax
imul eax, dword [ebp - 0x4c], 0xffff
cmp eax, 0x7617
jne 0x1005335c
mov dword [ebp - 0x524], 1
jmp 0x10053363
and dword [ebp - 0x524], 0
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp + eax*4 - 0x208]
cmp eax, dword [ebp - 0x524]
jl 0x10053381
mov dword [ebp - 0x3dc], 1
jmp 0x10053388
and dword [ebp - 0x3dc], 0
mov eax, dword [ebp - 0x3dc]
add eax, 0x5243b9c1
cmp eax, 0xfffffff9
jge 0x1005339f
cmp dword [ebp - 0x328], 0
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp + eax*4 - 0x208]
cmp dword [ebp - 0x5cc], eax
jl 0x100533bd
mov dword [ebp - 0x3e4], 1
jmp 0x100533c4
and dword [ebp - 0x3e4], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x3e4], eax
jge 0x100533e8
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x208], 0
jne 0x100533e8
and dword [ebp - 0x52c], 0
jmp 0x100533f2
mov dword [ebp - 0x52c], 1
mov eax, dword [ebp - 0x52c]
sub eax, 0x1b14898d
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x208]
jle 0x10053417
mov dword [ebp - 0x3ec], 1
jmp 0x1005341e
and dword [ebp - 0x3ec], 0
cmp dword [ebp - 0x3ec], 0xffffffff
jbe 0x10053433
mov dword [ebp - 0x620], 1
jmp 0x1005343a
and dword [ebp - 0x620], 0
cmp dword [ebp - 0x620], 0x450c1979
jne 0x10053452
mov dword [ebp - 0x3f4], 1
jmp 0x10053459
and dword [ebp - 0x3f4], 0
mov eax, dword [ebp - 0x3f4]
mov dword [ebp - 0x534], eax
cmp dword [ebp - 0x534], 0xf4fe
jne 0x1005347d
mov dword [ebp - 0x3fc], 1
jmp 0x10053484
and dword [ebp - 0x3fc], 0
mov eax, dword [ebp - 0x3fc]
mov dword [ebp - 0x788], eax
jmp 0x10053254
jmp 0x1005321f
mov dword [ebp - 0x30], 0
jmp 0x100534aa
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 2
jg 0x10053547
mov dword [ebp - 0x5c], 0xffffffff
mov dword [ebp - 0x5c], 0
jmp 0x100534cb
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 2
jg 0x100534e7
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x5c]
mov eax, dword [ebp + eax*4 - 0x208]
mov dword [ebp + ecx*4 - 0x208], eax
jmp 0x100534c4
mov dword [ebp - 0x5c], 0
jmp 0x100534f7
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 2
jg 0x10053542
mov eax, dword [ebp - 0x30]
cmp dword [ebp + eax*4 - 0x208], 0
jne 0x1005351d
mov eax, 0xf28d0d4b
sub eax, dword [ebp - 0x30]
jne 0x1005351d
and dword [ebp - 0x790], 0
jmp 0x10053527
mov dword [ebp - 0x790], 1
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0x208]
mov dword [ebp - 0x9f4], eax
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x798], eax
jmp 0x100534f0
jmp 0x100534a3
mov eax, dword [ebp - 0x48]
cmp dword [eax + 4], 0
jne 0x10053555
jmp 0x10057bc7
mov dword [ebp - 0x338], 0
mov dword [ebp - 0x170], 0x668451f1
push 3
lea ecx, [ebp - 0x880]
call fcn.1001ac19
mov dword [ebp - 4], 3
mov dword [ebp - 0xa4], 0
mov dword [ebp - 0x330], 0xffffffff
mov dword [ebp - 0x1b0], 0x58d3b3e2
mov dword [ebp - 0x1d0], 6
mov dword [ebp - 0x7a0], 0x5fa7
mov dword [ebp - 0x424], 0x3370
mov dword [ebp - 0x60], 0
jmp 0x100535c9
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 2
jge 0x100535df
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x298], 0xefb6f65e
jmp 0x100535c2
push 0x4878
push 0x3eb5
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp - 0x880]
push eax
push 0
call fcn.100515ff
add esp, 0x14
mov dword [ebp - 0x60], 0
jmp 0x1005360e
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 3
jge 0x10053624
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x820], 0xfddca65d
jmp 0x10053607
push 4
pop eax
imul eax, eax, 0
mov esi, dword [ebp + eax - 0x298]
push 0
lea ecx, [ebp - 0x880]
call fcn.1001acb7
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x298], 0xaf14
je 0x1005365d
mov dword [ebp - 0x5d4], 1
jmp 0x10053664
and dword [ebp - 0x5d4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x298]
add eax, dword [ebp - 0x5d4]
mov dword [ebp - 0xa4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x298]
mov dword [ebp - 0x9fc], eax
mov eax, dword [ebp - 0x1b0]
mov ecx, dword [ebp - 0x1b0]
dec ecx
mov dword [ebp - 0x1b0], ecx
cmp eax, 0xe2e5
jne 0x1005373a
cmp dword [ebp - 0x330], 0
jne 0x100536d0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x298], 0
jb 0x100536d0
and dword [ebp - 0x404], 0
jmp 0x100536da
mov dword [ebp - 0x404], 1
mov eax, dword [ebp - 0x330]
cmp dword [ebp - 0x404], eax
jle 0x100536ef
cmp dword [ebp - 0x338], 0
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0xa04], eax
mov eax, dword [ebp - 0xa4]
cmp dword [ebp - 0x1b0], eax
je 0x10053715
mov dword [ebp - 0x53c], 1
jmp 0x1005371c
and dword [ebp - 0x53c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x298]
cmp dword [ebp - 0x53c], eax
jle 0x1005373a
and dword [ebp - 0x40c], 0
jmp 0x10053744
mov dword [ebp - 0x40c], 1
cmp dword [ebp - 0x40c], 0xbf4d
jne 0x10053757
cmp dword [ebp - 0x1d0], 0
mov eax, dword [ebp - 0xa4]
add eax, dword [ebp - 0x7a0]
add eax, dword [ebp - 0xa4]
cmp eax, dword [ebp - 0x170]
jl 0x1005377d
mov dword [ebp - 0x624], 1
jmp 0x10053784
and dword [ebp - 0x624], 0
mov eax, dword [ebp - 0x624]
mov dword [ebp - 0x170], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x298]
cmp dword [ebp - 0x170], eax
jl 0x100537b1
mov dword [ebp - 0x414], 1
jmp 0x100537b8
and dword [ebp - 0x414], 0
mov eax, dword [ebp - 0x338]
cmp dword [ebp - 0x414], eax
jl 0x100537d2
mov dword [ebp - 0x7a8], 1
jmp 0x100537d9
and dword [ebp - 0x7a8], 0
mov eax, dword [ebp - 0x1d0]
mov dword [ebp - 0xa0c], eax
mov eax, dword [ebp - 0x424]
cmp dword [ebp - 0xa4], eax
jle 0x100537ff
mov dword [ebp - 0x814], 1
jmp 0x10053806
and dword [ebp - 0x814], 0
push 1
lea ecx, [ebp - 0x880]
call fcn.1001acb7
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x820]
cmp dword [ebp + eax - 0x298], ecx
jge 0x1005383b
mov dword [ebp - 0x544], 1
jmp 0x10053842
and dword [ebp - 0x544], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x820]
cmp dword [ebp - 0x544], eax
jl 0x1005386a
push 0xfffffffffffffff7
pop eax
test eax, eax
je 0x1005386a
mov dword [ebp - 0x41c], 1
jmp 0x10053871
and dword [ebp - 0x41c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x820]
imul eax, dword [ebp - 0x41c]
mov dword [ebp - 0xa4], eax
mov eax, dword [ebp - 0x330]
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 0xfbcb
jge 0x100538af
mov dword [ebp - 0x5dc], 1
jmp 0x100538b6
and dword [ebp - 0x5dc], 0
mov eax, dword [ebp - 0x338]
cmp dword [ebp - 0x5dc], eax
jne 0x100538d0
mov dword [ebp - 0x800], 1
jmp 0x100538d7
and dword [ebp - 0x800], 0
mov eax, dword [ebp - 0x424]
mov dword [ebp - 0xa14], eax
mov eax, dword [ebp - 0xa4]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x820], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x880]
call fcn.1001ac9b
and dword [ebp - 0x2c], 0
mov dword [ebp - 0x138], 2
mov dword [ebp - 0x54c], 0xfffffffc
push 2
lea ecx, [ebp - 0x8c0]
call fcn.1001ac19
mov dword [ebp - 4], 4
mov dword [ebp - 0x7cc], 0
mov dword [ebp - 0x178], 0
jmp 0x10053955
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 2
jge 0x10053977
push dword [ebp - 0x178]
lea ecx, [ebp - 0x8c0]
call fcn.1001acb7
mov dword [eax], 0x8dee21af
jmp 0x10053948
push 1
lea eax, [ebp - 0x8c0]
push eax
lea eax, [ebp - 0x7cc]
push eax
lea eax, [ebp - 0x54c]
push eax
lea eax, [ebp - 0x138]
push eax
call fcn.10050a59
add esp, 0x14
mov dword [ebp - 0x138], 0
jmp 0x100539b6
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0x17
jne 0x100539d7
push 0
push 0x4a6
lea eax, [ebp - 0x54c]
push eax
call fcn.10050b36
add esp, 0xc
jmp 0x100539a9
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x8c0]
call fcn.1001ac9b
mov eax, dword [ebp - 0xac]
movzx eax, word [eax + 0x14]
mov ecx, dword [ebp - 0xac]
lea eax, [ecx + eax + 0x18]
mov dword [ebp - 0xf8], eax
mov dword [ebp - 0x40], 0xfffffffe
mov dword [ebp - 0xe0], 0x8905b8b7
mov dword [ebp - 0x1b8], 0
jmp 0x10053a2a
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 3
jge 0x10053a46
mov eax, dword [ebp - 0x1b8]
mov dword [ebp + eax*4 - 0x388], 0x85f70ad6
jmp 0x10053a1d
mov dword [ebp - 0x40], 0
jmp 0x10053a56
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 2
jg 0x10053bbe
mov dword [ebp - 0x6a4], 0x279a20b2
mov byte [ebp - 0x9d], 0
push 1
lea eax, [ebp - 0x9d]
push eax
push 0x6e2
call fcn.10050b36
add esp, 0xc
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp + eax*4 - 0x388]
mov dword [ebp - 0xa1c], eax
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp + eax*4 - 0x388]
mov dword [ebp - 0xa24], eax
mov eax, dword [ebp - 0x40]
cmp dword [ebp + eax*4 - 0x388], 0xfffffffc
jg 0x10053ac0
mov dword [ebp - 0x720], 1
jmp 0x10053ac7
and dword [ebp - 0x720], 0
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x40]
mov ecx, dword [ebp + ecx*4 - 0x388]
cmp dword [ebp + eax*4 - 0x388], ecx
jg 0x10053ae9
mov dword [ebp - 0x42c], 1
jmp 0x10053af0
and dword [ebp - 0x42c], 0
mov eax, dword [ebp - 0x42c]
mov dword [ebp - 0xe0], eax
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0xa2c], eax
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp + eax*4 - 0x388]
dec eax
mov ecx, dword [ebp - 0x40]
cmp eax, dword [ebp + ecx*4 - 0x388]
je 0x10053b2b
mov dword [ebp - 0x62c], 1
jmp 0x10053b32
and dword [ebp - 0x62c], 0
mov eax, dword [ebp - 0x62c]
add eax, 4
mov ecx, dword [ebp - 0x40]
imul eax, dword [ebp + ecx*4 - 0x388]
cmp eax, 4
jb 0x10053b57
mov dword [ebp - 0x434], 1
jmp 0x10053b5e
and dword [ebp - 0x434], 0
cmp dword [ebp - 0x434], 0xffffffff
jge 0x10053b73
mov dword [ebp - 0x554], 1
jmp 0x10053b7a
and dword [ebp - 0x554], 0
mov eax, dword [ebp - 0x554]
mov dword [ebp - 0x6a4], eax
mov dword [ebp - 0xe0], 0
jmp 0x10053b9f
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 2
jg 0x10053bb9
mov eax, dword [ebp - 0x40]
cmp dword [ebp + eax*4 - 0x388], 0
je 0x10053bb7
jmp 0x10053bb9
jmp 0x10053b92
jmp 0x10053a4f
and dword [ebp - 0x340], 0
jmp 0x10053be3
mov eax, dword [ebp - 0x340]
inc eax
mov dword [ebp - 0x340], eax
mov eax, dword [ebp - 0xf8]
add eax, 0x28
mov dword [ebp - 0xf8], eax
mov eax, dword [ebp - 0xac]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x340], eax
jge 0x10053c5f
mov eax, dword [ebp - 0xf8]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x43c], eax
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x43c]
jb 0x10053c5a
mov eax, dword [ebp - 0xac]
push dword [eax + 0x38]
mov eax, dword [ebp - 0xf8]
push dword [eax + 8]
call fcn.1005070e
pop ecx
pop ecx
add eax, dword [ebp - 0x43c]
mov dword [ebp - 0x784], eax
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x784]
jae 0x10053c5a
lea eax, [ebp - 0xf8]
push eax
lea eax, [ebp - 0x2c]
push eax
push 1
call fcn.10050baf
add esp, 0xc
jmp 0x10053c5f
jmp 0x10053bc7
mov dword [ebp - 0x5e4], 0xf30cc2fd
mov dword [ebp - 0x348], 0xd5fac122
mov dword [ebp - 0x37c], 8
mov dword [ebp - 0x7d4], 0xfffffff9
mov dword [ebp - 0xa34], 0xd2b5f791
mov dword [ebp - 0x378], 0x1342f3d4
mov dword [ebp - 0x6ac], 0xffffffff
mov dword [ebp - 0xa3c], 0x7c8b166c
mov dword [ebp - 0xaa8], 0x3691
mov dword [ebp - 0x474], 0xc23edb39
push 3
lea ecx, [ebp - 0x838]
call fcn.1001ac19
mov dword [ebp - 4], 5
mov dword [ebp - 0xab0], 0
mov dword [ebp - 0x6b4], 0x213633e7
mov dword [ebp - 0x38], 0
jmp 0x10053cfb
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 1
jge 0x10053d11
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0xf4], 0xf46db505
jmp 0x10053cf4
mov dword [ebp - 0x38], 0
jmp 0x10053d21
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 3
jge 0x10053d3d
push dword [ebp - 0x38]
lea ecx, [ebp - 0x838]
call fcn.1001acb7
mov dword [eax], 0x2c40a98c
jmp 0x10053d1a
mov dword [ebp - 0x38], 0
jmp 0x10053d4d
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 2
jge 0x10053d63
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x74c], 0
jmp 0x10053d46
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf4]
mov dword [ebp - 0x5e4], eax
imul eax, dword [ebp - 0x5e4], 0xffff
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0xf4]
jg 0x10053d9b
mov dword [ebp - 0x444], 1
jmp 0x10053da2
and dword [ebp - 0x444], 0
mov eax, dword [ebp - 0x444]
mov dword [ebp - 0x348], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf4]
imul eax, dword [ebp - 0x348]
test eax, eax
ja 0x10053dd2
mov dword [ebp - 0x55c], 1
jmp 0x10053dd9
and dword [ebp - 0x55c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf4]
cmp eax, dword [ebp - 0x55c]
jl 0x10053dfa
mov dword [ebp - 0x44c], 1
jmp 0x10053e01
and dword [ebp - 0x44c], 0
mov eax, dword [ebp - 0x44c]
mov dword [ebp - 0x37c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xf4], 0
je 0x10053e32
cmp dword [ebp - 0x37c], 0
je 0x10053e32
mov dword [ebp - 0x464], 1
jmp 0x10053e39
and dword [ebp - 0x464], 0
push 0xfffffffffffffffe
pop eax
test eax, eax
je 0x10053edc
mov dword [ebp - 0x6ac], 1
cmp dword [ebp - 0x348], 0xffffffff
jne 0x10053e63
mov dword [ebp - 0x650], 1
jmp 0x10053e6a
and dword [ebp - 0x650], 0
mov eax, dword [ebp - 0x474]
add eax, dword [ebp - 0x650]
cmp eax, dword [ebp - 0x378]
jl 0x10053e9a
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xf4], 0
je 0x10053e9a
mov dword [ebp - 0x454], 1
jmp 0x10053ea1
and dword [ebp - 0x454], 0
mov eax, dword [ebp - 0x37c]
cmp dword [ebp - 0x454], eax
jg 0x10053ebb
mov dword [ebp - 0x564], 1
jmp 0x10053ec2
and dword [ebp - 0x564], 0
mov eax, dword [ebp - 0x564]
mov dword [ebp - 0x378], eax
mov eax, dword [ebp - 0x7d4]
cmp dword [ebp - 0x378], eax
jne 0x10053eec
push 0xfffffffffffffff9
pop eax
test eax, eax
jne 0x10053eec
and dword [ebp - 0x45c], 0
jmp 0x10053ef6
mov dword [ebp - 0x45c], 1
push 1
lea ecx, [ebp - 0x838]
call fcn.1001acb7
mov ecx, dword [ebp - 0x45c]
cmp ecx, dword [eax]
jge 0x10053f19
mov dword [ebp - 0x5ec], 1
jmp 0x10053f20
and dword [ebp - 0x5ec], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x74c]
mov ecx, dword [ebp - 0x5ec]
push 4
pop edx
imul edx, edx, 0
mov edx, dword [ebp + edx - 0x74c]
inc edx
push 4
pop esi
imul esi, esi, 0
mov dword [ebp + esi - 0x74c], edx
cmp eax, ecx
jl 0x10053f70
push 1
lea ecx, [ebp - 0x838]
call fcn.1001acb7
cmp dword [eax], 0
je 0x10053f70
mov dword [ebp - 0x56c], 1
jmp 0x10053f77
and dword [ebp - 0x56c], 0
mov eax, dword [ebp - 0x464]
cmp eax, dword [ebp - 0x56c]
jg 0x10053f91
mov dword [ebp - 0x46c], 1
jmp 0x10053f98
and dword [ebp - 0x46c], 0
mov eax, dword [ebp - 0x6b4]
cmp dword [ebp - 0x46c], eax
jl 0x10053fb2
mov dword [ebp - 0x630], 1
jmp 0x10053fb9
and dword [ebp - 0x630], 0
mov eax, dword [ebp - 0x630]
mov dword [ebp - 0x474], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x838]
call fcn.1001ac9b
cmp dword [ebp - 0x2c], 0
jne 0x10053fdf
jmp 0x10057bc7
push 4
lea ecx, [ebp - 0x7b8]
call fcn.1001ac19
mov dword [ebp - 4], 6
mov dword [ebp - 0x9c], 0x66fe7d8a
mov dword [ebp - 0x180], 0
jmp 0x10054016
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 4
jge 0x10054038
push dword [ebp - 0x180]
lea ecx, [ebp - 0x7b8]
call fcn.1001acb7
mov dword [eax], 0xfffffffe
jmp 0x10054009
mov dword [ebp - 0x9c], 3
jmp 0x10054051
mov eax, dword [ebp - 0x9c]
dec eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0
jl 0x100542da
mov dword [ebp - 0xfc], 0x4b25b3b9
push 1
lea ecx, [ebp - 0x8d8]
call fcn.1001ac19
mov byte [ebp - 4], 7
push 0
lea eax, [ebp - 0x8d8]
push eax
lea eax, [ebp - 0xab8]
push eax
call fcn.1005175c
add esp, 0xc
mov byte [ebp - 0xd7], 0
movzx eax, byte [ebp - 0xd7]
test eax, eax
je 0x100540b5
push 0xdd3
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindow]
mov dword [ebp - 0xfc], 0
jmp 0x100540ce
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 3
jg 0x100542c6
mov dword [ebp - 0xec], 0x1ea66e58
mov dword [ebp - 0x7dc], 0x31b54653
mov dword [ebp - 0xec], 3
jmp 0x10054108
mov eax, dword [ebp - 0xec]
dec eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0
jl 0x10054299
mov dword [ebp - 0x88], 0xd4e677b5
mov dword [ebp - 0x88], 0
jmp 0x10054138
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 3
jg 0x100541c7
mov dword [ebp - 0x78c], 0
mov dword [ebp - 0x6bc], 0xffffffff
push 1
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0x78c]
push eax
lea eax, [ebp - 0x8d8]
push eax
lea eax, [ebp - 0xfc]
push eax
push 0xe2a
lea eax, [ebp - 0x7b8]
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x6bc]
push eax
lea eax, [ebp - 0x88]
push eax
call fcn.10050bfd
add esp, 0x28
mov byte [ebp - 0xad], 0
push 0
lea eax, [ebp - 0xad]
push eax
push 0x640
push 0x1b99
call fcn.10051a68
add esp, 0x10
jmp 0x1005412b
mov dword [ebp - 0x88], 0
jmp 0x100541e0
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 3
jg 0x10054294
mov dword [ebp - 0x8b4], 0xfffffff7
mov dword [ebp - 0x8b0], 0xfffffff7
mov dword [ebp - 0x8ac], 0xfffffff7
mov dword [ebp - 0x8a8], 0xfffffff7
lea ecx, [ebp - 0x31d]
call fcn.1000959b
push eax
lea eax, [ebp - 0x8a4]
push eax
lea eax, [ebp - 0x8b4]
push eax
lea ecx, [ebp - 0xb18]
call fcn.1001acc6
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xa5c]
call fcn.1001ac75
mov byte [ebp - 4], 8
lea eax, [ebp - 0x7dc]
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0xa5c]
push eax
push 0x3f0f
push 1
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0xfc]
push eax
call fcn.10050e4f
add esp, 0x1c
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xa5c]
call fcn.1001ac9b
jmp 0x100541d3
jmp 0x100540fb
push dword [ebp - 0x9c]
lea ecx, [ebp - 0x7b8]
call fcn.1001acb7
mov esi, eax
push dword [ebp - 0x9c]
lea ecx, [ebp - 0x7b8]
call fcn.1001acb7
mov ecx, dword [esi]
mov dword [eax], ecx
jmp 0x100540c1
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x8d8]
call fcn.1001ac9b
jmp 0x10054044
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7b8]
call fcn.1001ac9b
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x2c]
add ecx, dword [eax]
add ecx, dword [ebp - 0x34]
mov dword [ebp - 0x14], ecx
push 1
lea ecx, [ebp - 0x1dc]
call fcn.1001ac19
mov dword [ebp - 4], 9
mov dword [ebp - 0x1c], 0xc4d8e5cc
mov dword [ebp - 0x188], 0xf1fe3d2f
push 1
lea eax, [ebp - 0xa88]
push eax
lea eax, [ebp - 0x1dc]
push eax
call fcn.10050f0e
add esp, 0xc
mov dword [ebp - 0x1c], 0
jmp 0x10054344
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jg 0x1005460f
mov dword [ebp - 0x1ec], 0xffffffff
push 0
lea ecx, [ebp - 0x1dc]
call fcn.1001acb7
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x1dc]
call fcn.1001acb7
push 0xfffffffffffffffd
pop ecx
sub ecx, dword [eax]
jne 0x10054396
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x1dc]
call fcn.1001acb7
cmp dword [eax], 0
jne 0x10054396
and dword [ebp - 0x574], 0
jmp 0x100543a0
mov dword [ebp - 0x574], 1
cmp dword [ebp - 0x574], 0xbf19
jge 0x100543b8
mov dword [ebp - 0x47c], 1
jmp 0x100543bf
and dword [ebp - 0x47c], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x47c], eax
jl 0x100543d6
mov dword [ebp - 0x5f4], 1
jmp 0x100543dd
and dword [ebp - 0x5f4], 0
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x1dc]
call fcn.1001acb7
mov esi, eax
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x1dc]
call fcn.1001acb7
mov ecx, dword [ebp - 0x5f4]
add ecx, dword [eax]
cmp dword [esi], ecx
jg 0x10054415
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x1dc]
call fcn.1001acb7
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 0
jne 0x10054439
cmp dword [ebp - 0x188], 0
jne 0x10054439
and dword [ebp - 0x484], 0
jmp 0x10054443
mov dword [ebp - 0x484], 1
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x484], eax
je 0x1005445a
mov dword [ebp - 0x57c], 1
jmp 0x10054461
and dword [ebp - 0x57c], 0
mov eax, dword [ebp - 0x57c]
sub eax, dword [ebp - 0x1c]
add eax, 3
jne 0x1005447b
mov dword [ebp - 0x48c], 1
jmp 0x10054482
and dword [ebp - 0x48c], 0
cmp dword [ebp - 0x48c], 0xe836
jg 0x1005449a
mov dword [ebp - 0x6c4], 1
jmp 0x100544a1
and dword [ebp - 0x6c4], 0
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x1dc]
call fcn.1001acb7
push 0
lea ecx, [ebp - 0x1dc]
call fcn.1001acb7
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x1dc]
call fcn.1001acb7
cmp dword [eax], 0
je 0x100544e4
cmp dword [ebp - 0x1ec], 0
je 0x100544e4
mov dword [ebp - 0x648], 1
jmp 0x100544eb
and dword [ebp - 0x648], 0
cmp dword [ebp - 0x648], 0xabaf1ba1
jb 0x10054503
mov dword [ebp - 0x494], 1
jmp 0x1005450a
and dword [ebp - 0x494], 0
push 0
lea ecx, [ebp - 0x1dc]
call fcn.1001acb7
mov ecx, dword [ebp - 0x494]
cmp ecx, dword [eax]
jne 0x1005452d
mov dword [ebp - 0x584], 1
jmp 0x10054534
and dword [ebp - 0x584], 0
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x1dc]
call fcn.1001acb7
mov eax, dword [eax]
add eax, dword [ebp - 0x584]
je 0x1005455d
mov eax, dword [ebp - 0x1ec]
mov dword [ebp - 0x1ec], eax
jmp 0x1005460a
push 4
lea ecx, [ebp - 0x8f0]
call fcn.1001ac19
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x794], 0xfffffff8
push 0x4772
lea eax, [ebp - 0x8f0]
push eax
lea eax, [ebp - 0x9d8]
push eax
push 1
push 0x60e0
call fcn.100512b7
add esp, 0x14
lea eax, [ebp - 0x1ec]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0x1dc]
push eax
push 1
lea eax, [ebp - 0x794]
push eax
lea eax, [ebp - 0x8f0]
push eax
call fcn.1005135e
add esp, 0x1c
mov byte [ebp - 0xce], 0
movzx eax, byte [ebp - 0xce]
test eax, eax
je 0x100545fb
push 1
push 0x6303
push 0x20f3
push 0x70ae
push 0x61f6
call fcn.100514e4
add esp, 0x14
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x8f0]
call fcn.1001ac9b
jmp 0x1005433d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1dc]
call fcn.1001ac9b
xor ecx, ecx
call fcn.10036d03
push eax
call fcn.10073198
pop ecx
mov dword [ebp - 0x1c0], 0xd3df75dc
mov dword [ebp - 0x1c0], 0xe
jmp 0x1005464f
mov eax, dword [ebp - 0x1c0]
dec eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 5
jl 0x100546f7
mov dword [ebp - 0x190], 1
mov dword [ebp - 0x190], 0x1d
jmp 0x1005467f
mov eax, dword [ebp - 0x190]
dec eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 7
jge 0x100546d0
mov byte [ebp - 0xb5], 0
movzx eax, byte [ebp - 0xb5]
test eax, eax
je 0x100546a8
push 0
push 0x27cd
call fcn.1005272e
pop ecx
pop ecx
mov byte [ebp - 0xcf], 0
movzx eax, byte [ebp - 0xcf]
test eax, eax
je 0x100546ce
push 0x7681
push 0
push 0x30f1
call fcn.100516ee
add esp, 0xc
jmp 0x10054672
mov byte [ebp - 0xd5], 0
lea eax, [ebp - 0xd5]
push eax
push 0x3395
push 0x716d
push 1
call fcn.10051588
add esp, 0x10
jmp 0x10054642
mov byte [ebp - 0x23c], 8
mov byte [ebp - 0x23b], 0x78
mov byte [ebp - 0x23a], 7
mov byte [ebp - 0x239], 6
mov byte [ebp - 0x238], 1
mov byte [ebp - 0x237], 3
mov byte [ebp - 0x236], 6
mov byte [ebp - 0x235], 4
mov byte [ebp - 0x234], 3
mov byte [ebp - 0x233], 6
mov byte [ebp - 0x232], 0
mov byte [ebp - 0x231], 6
mov byte [ebp - 0x230], 5
mov byte [ebp - 0x22f], 0
mov byte [ebp - 0x22e], 9
mov byte [ebp - 0x22d], 1
mov byte [ebp - 0x22c], 4
mov byte [ebp - 0x22b], 8
mov byte [ebp - 0x22a], 0x1e
mov byte [ebp - 0x229], 0x81
mov byte [ebp - 0x228], 0x1e
mov byte [ebp - 0x227], 0x59
mov byte [ebp - 0x226], 0x7a
mov byte [ebp - 0x225], 0x54
mov byte [ebp - 0x224], 0x3b
mov byte [ebp - 0x223], 0x6f
mov byte [ebp - 0x222], 0x7a
mov byte [ebp - 0x221], 0xea
mov byte [ebp - 0x220], 0xa
mov byte [ebp - 0x21f], 0xb5
mov byte [ebp - 0x21e], 0x4c
mov byte [ebp - 0x21d], 0x50
mov byte [ebp - 0x21c], 0
mov byte [ebp - 0x21b], 0x52
mov byte [ebp - 0x21a], 0xb3
mov byte [ebp - 0x219], 0x4d
mov byte [ebp - 0x218], 0x2f
mov byte [ebp - 0x217], 2
mov byte [ebp - 0x216], 0xd0
mov byte [ebp - 0x215], 0xbd
mov byte [ebp - 0x214], 0x9d
mov byte [ebp - 0x213], 0x34
mov byte [ebp - 0x212], 0x1d
mov byte [ebp - 0x211], 0x9b
mov byte [ebp - 0x210], 0x67
mov byte [ebp - 0x20f], 0x22
mov byte [ebp - 0x20e], 0x7c
mov byte [ebp - 0x20d], 0x5b
mov byte [ebp - 0x20c], 0xc
mov byte [ebp - 0x20b], 2
mov byte [ebp - 0x20a], 0xf
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x23c]
or eax, 0x48
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x23c]
and ecx, 0x48
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x23c]
mov byte [ebp + ecx - 0x674], al
mov dword [ebp - 0x44], 2
and dword [ebp - 0x1e4], 0
jmp 0x100548ad
mov eax, dword [ebp - 0x44]
inc eax
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0x33
jae 0x10054963
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x23c]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x44], eax
jne 0x100548f7
mov eax, dword [ebp - 0x44]
movzx eax, byte [ebp + eax - 0x23c]
inc eax
mov dword [ebp - 0x1e4], eax
mov eax, dword [ebp - 0x44]
movzx eax, byte [ebp + eax - 0x23c]
mov ecx, dword [ebp - 0x44]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x44], eax
jmp 0x100548a5
mov eax, dword [ebp - 0x44]
movzx eax, byte [ebp + eax - 0x23b]
mov ecx, dword [ebp - 0x44]
sub ecx, dword [ebp - 0x1e4]
movzx ecx, byte [ebp + ecx - 0x23e]
movsx ecx, byte [ebp + ecx - 0x674]
or eax, ecx
mov ecx, dword [ebp - 0x44]
movzx ecx, byte [ebp + ecx - 0x23b]
mov edx, dword [ebp - 0x44]
sub edx, dword [ebp - 0x1e4]
movzx edx, byte [ebp + edx - 0x23e]
movsx edx, byte [ebp + edx - 0x674]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x44]
movzx ecx, byte [ebp + ecx - 0x23c]
mov byte [ebp + ecx - 0x674], al
and dword [ebp - 0x1e4], 0
jmp 0x100548a5
xor eax, eax
inc eax
imul eax, eax, 0xa
mov byte [ebp + eax - 0x674], 0
mov dword [ebp - 0x638], 0xfffc
push 4
lea ecx, [ebp - 0x85c]
call fcn.1001ac19
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x30c], 0x10dd013d
mov dword [ebp - 0x7e4], 0xd0f4f230
mov dword [ebp - 0x6cc], 0
mov dword [ebp - 0x33c], 1
mov dword [ebp - 0x80], 0xffffffff
lea eax, [ebp - 0x85c]
push eax
lea eax, [ebp - 0x914]
push eax
push 0x3a62
push 0x7b4d
push 1
call fcn.100515ff
add esp, 0x14
push 0x2042
push 0x4dcc
lea eax, [ebp - 0x6cc]
push eax
lea eax, [ebp - 0x33c]
push eax
push 0x4981
push 0
push 0x5847
push 0x6ba3
push 0x3595
push 0x2934
push 0x51a2
lea eax, [ebp - 0x85c]
push eax
lea eax, [ebp - 0x7e4]
push eax
lea eax, [ebp - 0x30c]
push eax
lea eax, [ebp - 0x80]
push eax
push 0x397c
lea eax, [ebp - 0x638]
push eax
push 0x7955
call fcn.10051b41
add esp, 0x48
mov dword [ebp - 0x80], 0
jmp 0x10054a5a
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 3
jg 0x10054e4f
push 2
lea ecx, [ebp - 0x368]
call fcn.1001ac19
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x74], 0xfffffffb
mov dword [ebp - 0x68], 0xd942
mov dword [ebp - 0x198], 0
jmp 0x10054a9c
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 2
jge 0x10054abe
push dword [ebp - 0x198]
lea ecx, [ebp - 0x368]
call fcn.1001acb7
mov dword [eax], 0x933b839b
jmp 0x10054a8f
cmp dword [ebp - 0x80], 0
je 0x10054afa
mov dword [ebp - 0x6d4], 0xc653ddb2
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x368]
push eax
push 0
lea eax, [ebp - 0x85c]
push eax
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x6d4]
push eax
call fcn.1005247c
add esp, 0x18
jmp 0x10054e1b
mov dword [ebp - 0x304], 0
mov dword [ebp - 0x374], 9
mov dword [ebp - 0x7a4], 8
mov dword [ebp - 0x7f4], 0xffffffff
mov dword [ebp - 0x90], 0
jmp 0x10054b3b
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 3
jge 0x10054b57
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0x688], 1
jmp 0x10054b2e
mov dword [ebp - 0x90], 0
jmp 0x10054b70
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 1
jge 0x10054b8c
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0x698], 0xa36b4e13
jmp 0x10054b63
cmp dword [ebp - 0x74], 0
je 0x10054d07
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x688], 0
je 0x10054bfa
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x688]
mov dword [ebp - 0x90c], eax
push 4
pop eax
shl eax, 1
lea eax, [ebp + eax - 0x688]
mov dword [ebp - 0x49c], eax
push 0
lea ecx, [ebp - 0x368]
call fcn.1001acb7
mov ecx, dword [ebp - 0x49c]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x49c]
cmp dword [eax], 0
jne 0x10054c1a
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x688], 0
jne 0x10054c1a
or eax, 0xffffffff
jne 0x10054c1a
push 0
lea ecx, [ebp - 0x368]
call fcn.1001acb7
cmp dword [eax], 0
jne 0x10054c1a
and dword [ebp - 0x5fc], 0
jmp 0x10054c24
mov dword [ebp - 0x5fc], 1
mov esi, dword [ebp - 0x304]
mov edi, dword [ebp - 0x33c]
push 0
lea ecx, [ebp - 0x368]
call fcn.1001acb7
mov eax, dword [eax]
add eax, dword [ebp - 0x5fc]
sub edi, eax
inc edi
inc edi
add esi, edi
mov dword [ebp - 0x79c], esi
mov eax, dword [ebp - 0x30c]
mov dword [ebp - 0x6dc], eax
mov eax, dword [ebp - 0x304]
dec eax
mov dword [ebp - 0x304], eax
mov eax, dword [ebp - 0x79c]
cmp eax, dword [ebp - 0x6dc]
je 0x10054c84
mov dword [ebp - 0x4a4], 1
jmp 0x10054c8b
and dword [ebp - 0x4a4], 0
push 0
lea ecx, [ebp - 0x368]
call fcn.1001acb7
mov ecx, dword [ebp - 0x4a4]
cmp ecx, dword [eax]
jg 0x10054cae
mov dword [ebp - 0x58c], 1
jmp 0x10054cb5
and dword [ebp - 0x58c], 0
mov eax, dword [ebp - 0x58c]
mov dword [ebp - 0x68], eax
mov esi, dword [ebp - 0x68]
push 0
lea ecx, [ebp - 0x368]
call fcn.1001acb7
imul esi, dword [eax]
mov dword [ebp - 0x374], esi
mov eax, dword [ebp - 0x374]
mov dword [ebp - 0x95c], eax
push 1
lea ecx, [ebp - 0x368]
call fcn.1001acb7
cmp dword [eax], 0
je 0x10054d07
cmp dword [ebp - 0x80], 0
je 0x10054d07
mov dword [ebp - 0x4ac], 1
jmp 0x10054d0e
and dword [ebp - 0x4ac], 0
cmp dword [ebp - 0x4ac], 6
je 0x10054d23
mov dword [ebp - 0x7ec], 1
jmp 0x10054d2a
and dword [ebp - 0x7ec], 0
push 0
lea ecx, [ebp - 0x368]
call fcn.1001acb7
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x80], eax
jle 0x10054d48
cmp dword [ebp - 0x33c], 0
jne 0x10054d57
cmp dword [ebp - 0x74], 0
jne 0x10054d57
and dword [ebp - 0x6e4], 0
jmp 0x10054d61
mov dword [ebp - 0x6e4], 1
mov eax, dword [ebp - 0x638]
mov dword [ebp - 0x7a4], eax
mov dword [ebp - 0x74], 0
jmp 0x10054d7d
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 2
jg 0x10054e1b
mov dword [ebp - 0x68], 0
jmp 0x10054d97
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 2
jg 0x10054e16
mov eax, dword [ebp - 0x74]
mov eax, dword [ebp + eax*4 - 0x688]
mov dword [ebp - 0x4b4], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x4b4]
mov dword [ebp + eax - 0x688], ecx
push 0
lea ecx, [ebp - 0x368]
call fcn.1001acb7
mov ecx, dword [ebp - 0x4b4]
cmp ecx, dword [eax]
jne 0x10054de8
cmp dword [ebp - 0x30c], 0
jne 0x10054de8
and dword [ebp - 0x594], 0
jmp 0x10054df2
mov dword [ebp - 0x594], 1
mov eax, dword [ebp - 0x594]
mov dword [ebp - 0x374], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x698]
mov dword [ebp - 0x7f4], eax
jmp 0x10054d90
jmp 0x10054d76
mov dword [ebp - 0x68], 0
jmp 0x10054e2b
mov eax, dword [ebp - 0x68]
dec eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0xffffffef
jg 0x10054e3b
push 1
call fcn.100516a3
pop ecx
jmp 0x10054e24
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x368]
call fcn.1001ac9b
jmp 0x10054a53
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x85c]
call fcn.1001ac9b
lea eax, [ebp - 0x674]
push eax
lea ecx, [ebp - 0xb58]
call fcn.1002a4f7
mov dword [ebp - 0x6f4], eax
mov eax, dword [ebp - 0x6f4]
mov dword [ebp - 0x7ac], eax
mov dword [ebp - 4], 0xd
push 0xa
xor edx, edx
mov ecx, dword [ebp - 0x7ac]
call fcn.10036cc8
pop ecx
mov dword [ebp - 0x714], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb58]
call fcn.1001ab7b
and dword [ebp - 0x1c8], 0
jmp 0x10054ec4
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 0xb
jae 0x10054edd
mov eax, dword [ebp - 0x1c8]
mov byte [ebp + eax - 0x674], 0
jmp 0x10054eb7
mov dword [ebp - 0xe4], 9
mov dword [ebp - 0x314], 0xfffffffe
push 4
lea ecx, [ebp - 0x874]
call fcn.1001ac19
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x610], 0x607800ff
mov dword [ebp - 0x60c], 0x11378331
push 3
lea ecx, [ebp - 0x908]
call fcn.1001ac19
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x24], 0
jmp 0x10054f3a
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x10054f4d
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x54], 0x99ff
jmp 0x10054f33
mov dword [ebp - 0x24], 0
jmp 0x10054f5d
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 4
jge 0x10054f76
push dword [ebp - 0x24]
lea ecx, [ebp - 0x874]
call fcn.1001acb7
and dword [eax], 0
jmp 0x10054f56
mov dword [ebp - 0x24], 0
jmp 0x10054f86
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x10054f9c
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xac4], 1
jmp 0x10054f7f
lea eax, [ebp - 0x908]
push eax
push 1
lea eax, [ebp - 0x24]
push eax
call fcn.100516ee
add esp, 0xc
mov dword [ebp - 0xe4], 0
jmp 0x10054fca
mov eax, dword [ebp - 0xe4]
dec eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0
jl 0x10054fe9
push 1
push 0x2df2
push 0x29a7
call fcn.1005175c
add esp, 0xc
jmp 0x10054fbd
mov dword [ebp - 0xe4], 0x92c5
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x54]
add ecx, dword [ebp - 0xe4]
cmp ecx, dword [ebp + eax - 0x54]
jge 0x1005501b
mov dword [ebp - 0x5ac], 1
jmp 0x10055022
and dword [ebp - 0x5ac], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x54]
mov dword [ebp - 0x920], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x54]
cmp dword [ebp + eax - 0x54], ecx
jl 0x10055054
mov dword [ebp - 0x4bc], 1
jmp 0x1005505b
and dword [ebp - 0x4bc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x54]
cmp dword [ebp - 0x4bc], eax
je 0x10055079
mov dword [ebp - 0x604], 1
jmp 0x10055080
and dword [ebp - 0x604], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x54]
cmp dword [ebp - 0x604], eax
jl 0x1005509e
mov dword [ebp - 0x4c4], 1
jmp 0x100550a5
and dword [ebp - 0x4c4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x54]
add eax, dword [ebp - 0x4c4]
mov dword [ebp - 0x314], eax
mov eax, dword [ebp - 0x314]
mov dword [ebp - 0x59c], eax
push 3
lea ecx, [ebp - 0x874]
call fcn.1001acb7
mov ecx, dword [ebp - 0x59c]
mov dword [eax], ecx
cmp dword [ebp - 0x59c], 0
jne 0x100550f7
mov eax, 0xffff
test eax, eax
jne 0x100550f7
and dword [ebp - 0x4cc], 0
jmp 0x10055101
mov dword [ebp - 0x4cc], 1
mov eax, dword [ebp - 0x4cc]
mov dword [ebp - 0x610], eax
cmp dword [ebp - 0x610], 0
je 0x1005511f
cmp dword [ebp - 0x314], 0
jne 0x1005512f
xor eax, eax
jne 0x1005512f
mov dword [ebp - 0x6fc], 1
jmp 0x10055136
and dword [ebp - 0x6fc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x54]
mov dword [ebp - 0xa38], eax
push 1
lea ecx, [ebp - 0x874]
call fcn.1001acb7
cmp dword [eax], 9
jg 0x10055164
mov dword [ebp - 0x4d4], 1
jmp 0x1005516b
and dword [ebp - 0x4d4], 0
imul eax, dword [ebp - 0x4d4], 0x963f
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x54]
jl 0x1005518d
mov dword [ebp - 0x5a4], 1
jmp 0x10055194
and dword [ebp - 0x5a4], 0
cmp dword [ebp - 0x5a4], 0
je 0x100551a9
mov dword [ebp - 0x4dc], 1
jmp 0x100551b0
and dword [ebp - 0x4dc], 0
mov eax, dword [ebp - 0x4dc]
mov dword [ebp - 0x60c], eax
cmp dword [ebp - 0x60c], 0xf314
jle 0x100551d4
mov dword [ebp - 0x4e4], 1
jmp 0x100551db
and dword [ebp - 0x4e4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x54]
cmp dword [ebp - 0x4e4], eax
jg 0x100551f9
mov dword [ebp - 0x344], 1
jmp 0x10055200
and dword [ebp - 0x344], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x344]
mov dword [ebp + eax - 0xac4], ecx
mov eax, dword [ebp - 0x5ac]
cmp eax, dword [ebp - 0x344]
jge 0x1005522c
mov dword [ebp - 0x4ec], 1
jmp 0x10055233
and dword [ebp - 0x4ec], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x4ec]
sub ecx, dword [ebp + eax - 0x54]
sub ecx, 7
cmp ecx, 0xede5c489
jae 0x1005525a
mov dword [ebp - 0x614], 1
jmp 0x10055261
and dword [ebp - 0x614], 0
push 0
lea ecx, [ebp - 0x908]
call fcn.1001acb7
mov ecx, dword [ebp - 0x614]
mov dword [eax], ecx
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x908]
call fcn.1001ac9b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x874]
call fcn.1001ac9b
mov byte [ebp - 0x288], 3
mov byte [ebp - 0x287], 0xf2
mov byte [ebp - 0x286], 7
mov byte [ebp - 0x285], 4
mov byte [ebp - 0x284], 1
mov byte [ebp - 0x283], 0
mov byte [ebp - 0x282], 9
mov byte [ebp - 0x281], 6
mov byte [ebp - 0x280], 0x36
mov byte [ebp - 0x27f], 0x31
mov byte [ebp - 0x27e], 0x3e
mov byte [ebp - 0x27d], 0x18
mov byte [ebp - 0x27c], 0xe1
mov byte [ebp - 0x27b], 0x3d
mov byte [ebp - 0x27a], 0x13
mov byte [ebp - 0x279], 0x50
mov byte [ebp - 0x278], 0x30
mov byte [ebp - 0x277], 0x12
mov byte [ebp - 0x276], 0x54
mov byte [ebp - 0x275], 0x54
mov byte [ebp - 0x274], 0x3e
mov byte [ebp - 0x273], 0x49
mov byte [ebp - 0x272], 0x7a
mov byte [ebp - 0x271], 0xa5
mov byte [ebp - 0x270], 2
mov byte [ebp - 0x26f], 0xc8
mov byte [ebp - 0x26e], 0x3d
mov byte [ebp - 0x26d], 0xa6
mov byte [ebp - 0x26c], 0x7b
mov byte [ebp - 0x26b], 0xdf
mov byte [ebp - 0x26a], 8
mov byte [ebp - 0x269], 0xc9
mov byte [ebp - 0x268], pe_nt_image_headers32
mov byte [ebp - 0x267], 0x1f
mov byte [ebp - 0x266], 0x41
mov byte [ebp - 0x265], 0x51
mov byte [ebp - 0x264], 4
mov byte [ebp - 0x263], 0x21
mov byte [ebp - 0x262], 0xc2
mov byte [ebp - 0x261], 0x6a
mov byte [ebp - 0x260], 0xb1
mov byte [ebp - 0x25f], 0x33
mov byte [ebp - 0x25e], 0xb4
mov byte [ebp - 0x25d], 0x3e
mov byte [ebp - 0x25c], 0x65
mov byte [ebp - 0x25b], 0x13
mov byte [ebp - 0x25a], 0x18
mov byte [ebp - 0x259], 0x4f
mov byte [ebp - 0x258], 0xbc
mov byte [ebp - 0x257], 0x39
mov byte [ebp - 0x256], 0x40
mov byte [ebp - 0x255], 0x2d
mov byte [ebp - 0x254], 0x37
mov byte [ebp - 0x253], 0x62
mov byte [ebp - 0x252], 0x87
mov byte [ebp - 0x251], 0x57
mov byte [ebp - 0x250], 0xd3
mov byte [ebp - 0x24f], 0x46
mov byte [ebp - 0x24e], 0xf3
mov byte [ebp - 0x24d], 0xf2
mov byte [ebp - 0x24c], 0xdb
mov byte [ebp - 0x24b], 0x3c
mov byte [ebp - 0x24a], 0xa2
mov byte [ebp - 0x249], 5
mov byte [ebp - 0x248], 1
mov byte [ebp - 0x247], 2
mov byte [ebp - 0x246], 6
mov byte [ebp - 0x245], 8
mov byte [ebp - 0x244], 7
mov byte [ebp - 0x243], 0
mov byte [ebp - 0x242], 1
mov byte [ebp - 0x241], 6
mov byte [ebp - 0x240], 8
mov byte [ebp - 0x23f], 4
mov byte [ebp - 0x23e], 0xd
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x288]
or eax, 0xc0
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x288]
and ecx, 0xc0
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x288]
mov byte [ebp + ecx - 0x668], al
mov dword [ebp - 0x20], 2
and dword [ebp - 0x118], 0
jmp 0x100554f7
mov eax, dword [ebp - 0x20]
inc eax
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x4b
jae 0x100555de
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x288]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x20], eax
jne 0x10055541
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x288]
inc eax
mov dword [ebp - 0x118], eax
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x288]
mov ecx, dword [ebp - 0x20]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x20], eax
jmp 0x100554ef
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x287]
mov ecx, dword [ebp - 0x20]
sub ecx, dword [ebp - 0x118]
movzx ecx, byte [ebp + ecx - 0x28a]
movsx ecx, byte [ebp + ecx - 0x668]
add eax, ecx
mov ecx, dword [ebp - 0x20]
movzx ecx, byte [ebp + ecx - 0x287]
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x118]
movzx edx, byte [ebp + edx - 0x28a]
movsx edx, byte [ebp + edx - 0x668]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x20]
movzx ecx, byte [ebp + ecx - 0x287]
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x118]
movzx edx, byte [ebp + edx - 0x28a]
movsx edx, byte [ebp + edx - 0x668]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x20]
movzx ecx, byte [ebp + ecx - 0x288]
mov byte [ebp + ecx - 0x668], al
push 0
lea eax, [ebp - 0x118]
push eax
call fcn.100517d8
pop ecx
pop ecx
jmp 0x100554ef
xor eax, eax
inc eax
imul eax, eax, 0xa
mov byte [ebp + eax - 0x668], 0
mov dword [ebp - 0x130], 0xffffffff
mov dword [ebp - 0x1fc], 0xcbad86e5
mov dword [ebp - 0x704], 0
mov dword [ebp - 0x928], 0
mov dword [ebp - 0x1a0], 0
jmp 0x1005562d
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 1
jge 0x10055649
mov eax, dword [ebp - 0x1a0]
mov dword [ebp + eax*4 - 0x9e0], 0x82c4475e
jmp 0x10055620
mov dword [ebp - 0x130], 0
jmp 0x10055662
mov eax, dword [ebp - 0x130]
dec eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0xfffffffa
jge 0x100557db
mov dword [ebp - 0x930], 1
mov dword [ebp - 0xa8c], 1
mov dword [ebp - 0x390], 1
cmp dword [ebp - 0x1fc], 1
je 0x100556a2
mov dword [ebp - 0x4f4], 1
jmp 0x100556a9
and dword [ebp - 0x4f4], 0
mov eax, dword [ebp - 0x1fc]
cmp dword [ebp - 0x4f4], eax
je 0x100556c3
mov dword [ebp - 0x7fc], 1
jmp 0x100556ca
and dword [ebp - 0x7fc], 0
mov eax, 0xcc19583e
neg eax
cmp eax, dword [ebp - 0x130]
jle 0x100556e5
mov dword [ebp - 0x5b4], 1
jmp 0x100556ec
and dword [ebp - 0x5b4], 0
mov eax, dword [ebp - 0x390]
cmp dword [ebp - 0x5b4], eax
jl 0x10055706
mov dword [ebp - 0x4fc], 1
jmp 0x1005570d
and dword [ebp - 0x4fc], 0
cmp dword [ebp - 0x4fc], 0xdfcc86f8
jae 0x10055725
mov dword [ebp - 0x61c], 1
jmp 0x1005572c
and dword [ebp - 0x61c], 0
mov eax, dword [ebp - 0x1fc]
cmp dword [ebp - 0x61c], eax
jle 0x10055746
mov dword [ebp - 0x398], 1
jmp 0x1005574d
and dword [ebp - 0x398], 0
mov eax, dword [ebp - 0x390]
cmp dword [ebp - 0x398], eax
jg 0x10055767
mov dword [ebp - 0x3a0], 1
jmp 0x1005576e
and dword [ebp - 0x3a0], 0
cmp dword [ebp - 0x3a0], 0xd40a7fc
jl 0x10055786
mov dword [ebp - 0x3a8], 1
jmp 0x1005578d
and dword [ebp - 0x3a8], 0
cmp dword [ebp - 0x3a8], 0xfffffff8
jg 0x100557a2
mov dword [ebp - 0x3b0], 1
jmp 0x100557a9
and dword [ebp - 0x3b0], 0
mov eax, dword [ebp - 0x1fc]
cmp eax, dword [ebp - 0x3b0]
jg 0x100557c3
mov dword [ebp - 0x3b8], 1
jmp 0x100557ca
and dword [ebp - 0x3b8], 0
mov eax, dword [ebp - 0x3b8]
mov dword [ebp - 0x704], eax
jmp 0x10055655
mov byte [ebp - 0xcd], 0
movzx eax, byte [ebp - 0xcd]
test eax, eax
je 0x10055801
push 0x409e
push 0
push 0x5f79
call fcn.10051aee
add esp, 0xc
lea eax, [ebp - 0x668]
push eax
lea ecx, [ebp - 0xbdc]
call fcn.1002a4f7
mov dword [ebp - 0x7bc], eax
mov eax, dword [ebp - 0x7bc]
mov dword [ebp - 0x70c], eax
mov dword [ebp - 4], 0x10
push 0xa
xor edx, edx
mov ecx, dword [ebp - 0x70c]
call fcn.10036cc8
pop ecx
mov dword [ebp - 0x804], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xbdc]
call fcn.1001ab7b
and dword [ebp - 0x1a8], 0
jmp 0x10055867
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 0xb
jae 0x10055880
mov eax, dword [ebp - 0x1a8]
mov byte [ebp + eax - 0x668], 0
jmp 0x1005585a
push dword [ebp - 0x804]
push dword [ebp - 0x714]
call fcn.1004c668
pop ecx
pop ecx
mov dword [ebp - 0x3e8], eax
push 4
lea ecx, [ebp - 0x850]
call fcn.1001ac19
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x3d0], 0xffffffff
mov dword [ebp - 0x31c], 0x7e307b5c
mov dword [ebp - 0x938], 0x9c7c6f1f
mov dword [ebp - 0x3e0], 0x9dffbe58
mov dword [ebp - 0x80c], 0x67f5aee0
mov dword [ebp - 0x84], 0
jmp 0x100558f8
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 4
jge 0x1005591a
push dword [ebp - 0x84]
lea ecx, [ebp - 0x850]
call fcn.1001acb7
mov dword [eax], 1
jmp 0x100558eb
mov dword [ebp - 0x84], 0
jmp 0x10055933
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 1
jge 0x1005594f
mov eax, dword [ebp - 0x84]
mov dword [ebp + eax*4 - 0x3c0], 1
jmp 0x10055926
mov dword [ebp - 0x31c], 0xfe1ca29
push 0
lea ecx, [ebp - 0x850]
call fcn.1001acb7
mov eax, dword [eax]
neg eax
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x3c0]
jl 0x10055989
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3c0], 0
jne 0x1005599b
mov eax, 0xd004
test eax, eax
jne 0x1005599b
and dword [ebp - 0x3c8], 0
jmp 0x100559a5
mov dword [ebp - 0x3c8], 1
push 0
lea ecx, [ebp - 0x850]
call fcn.1001acb7
mov eax, dword [eax]
mov dword [ebp - 0x3d0], eax
mov eax, dword [ebp - 0x3c8]
mov dword [ebp - 0x31c], eax
mov eax, dword [ebp - 0x31c]
cmp dword [ebp - 0x3d0], eax
jl 0x100559e0
mov dword [ebp - 0x3d8], 1
jmp 0x100559e7
and dword [ebp - 0x3d8], 0
mov eax, dword [ebp - 0x3d8]
mov dword [ebp - 0x3e0], eax
mov eax, dword [ebp - 0x3e0]
mov dword [ebp - 0x80c], eax
mov byte [ebp - 0xd9], 0
movzx eax, byte [ebp - 0xd9]
test eax, eax
je 0x10055a1f
push 1
push 0x6576
call fcn.100517d8
pop ecx
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x850]
call fcn.1001ac9b
mov eax, dword [ebp - 0xac]
mov ecx, dword [ebp - 0x3e8]
mov dword [eax + 8], ecx
mov dword [ebp - 0xe8], 0x68ec0ae9
mov dword [ebp - 0x120], 0xf0ddd9cd
mov dword [ebp - 0x71c], 0
mov dword [ebp - 0x160], 0
jmp 0x10055a74
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 3
jge 0x10055a90
mov eax, dword [ebp - 0x160]
mov dword [ebp + eax*4 - 0xbc4], 2
jmp 0x10055a67
mov dword [ebp - 0xe8], 0
jmp 0x10055aa9
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0x13
jge 0x10055af5
mov dword [ebp - 0x724], 0xc74aa0d7
mov dword [ebp - 0x7c8], 0xf2d6273d
lea eax, [ebp - 0x71c]
push eax
lea eax, [ebp - 0x7c8]
push eax
push 1
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0x724]
push eax
call fcn.1005181a
add esp, 0x18
jmp 0x10055a9c
mov dword [ebp - 0x120], 0xffffffe8
jmp 0x10055b0e
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0xffffffe9
je 0x10055b45
mov dword [ebp - 0x7f0], 1
push 0x1690
push 0x1be9
lea eax, [ebp - 0x7f0]
push eax
lea eax, [ebp - 0xe8]
push eax
push 1
call fcn.10051958
add esp, 0x14
jmp 0x10055b01
lea eax, [ebp - 0x14]
push eax
push 1
push 0x2622
push 0x3d3d
lea eax, [ebp - 0x3e8]
push eax
call fcn.100519d9
add esp, 0x14
mov dword [ebp - 0x734], 0x1763
push 3
lea ecx, [ebp - 0x8fc]
call fcn.1001ac19
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x810], 0xfffffffa
mov dword [ebp - 0x744], 0xfffffff7
mov dword [ebp - 0x73c], 0xeac3efc1
mov dword [ebp - 0x72c], 0x8c5cecce
mov dword [ebp - 0x7d0], 0x131e34f9
mov dword [ebp - 0x7d8], 0xe4c996e1
mov dword [ebp - 0x164], 0
jmp 0x10055bd7
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 3
jge 0x10055bf9
push dword [ebp - 0x164]
lea ecx, [ebp - 0x8fc]
call fcn.1001acb7
mov dword [eax], 1
jmp 0x10055bca
lea eax, [ebp - 0x72c]
push eax
lea eax, [ebp - 0x7d0]
push eax
lea eax, [ebp - 0x734]
push eax
lea eax, [ebp - 0x810]
push eax
lea eax, [ebp - 0x73c]
push eax
lea eax, [ebp - 0x7d8]
push eax
push 0x20a4
lea eax, [ebp - 0x744]
push eax
push 0
lea eax, [ebp - 0x8fc]
push eax
call fcn.100520d3
add esp, 0x28
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x8fc]
call fcn.1001ac9b
and dword [ebp - 0x12c], 0
mov dword [ebp - 0x324], 0
mov dword [ebp - 0x174], 0x668451f1
push 3
lea ecx, [ebp - 0x868]
call fcn.1001ac19
mov dword [ebp - 4], 0x13
mov dword [ebp - 0xb4], 0
mov dword [ebp - 0x36c], 0xffffffff
mov dword [ebp - 0x15c], 0x58d3b3e2
mov dword [ebp - 0x17c], 6
mov dword [ebp - 0x7f8], 0x5fa7
mov dword [ebp - 0x438], 0x3370
mov dword [ebp - 0x70], 0
jmp 0x10055cca
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 2
jge 0x10055ce0
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0x290], 0xefb6f65e
jmp 0x10055cc3
push 1
push 0x51be
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x868]
push eax
call fcn.10051a68
add esp, 0x10
mov dword [ebp - 0x70], 0
jmp 0x10055d0a
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 3
jge 0x10055d20
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0x88c], 0xfddca65d
jmp 0x10055d03
push 4
pop eax
imul eax, eax, 0
mov esi, dword [ebp + eax - 0x290]
push 0
lea ecx, [ebp - 0x868]
call fcn.1001acb7
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x290], 0xaf14
je 0x10055d59
mov dword [ebp - 0x3f0], 1
jmp 0x10055d60
and dword [ebp - 0x3f0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x290]
add eax, dword [ebp - 0x3f0]
mov dword [ebp - 0xb4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x290]
mov dword [ebp - 0x9e8], eax
mov eax, dword [ebp - 0x15c]
mov ecx, dword [ebp - 0x15c]
dec ecx
mov dword [ebp - 0x15c], ecx
cmp eax, 0xe2e5
jne 0x10055e36
mov eax, dword [ebp + 8]
mov dword [ebp - 0x710], eax
mov eax, dword [ebp - 0x710]
mov dword [ebp - 0x718], eax
mov eax, dword [ebp - 0x718]
movzx eax, byte [eax]
test eax, eax
je 0x10057bc7
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultUILanguage]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret