Function at 0x10050f45
Capabilities:
Contain obfuscated stackstrings
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1009136c
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xbe8
push esi
and dword [ebp - 0x1c], 0
movzx eax, byte [ebp + 0x14]
test eax, eax
je 0x1005621b
mov eax, dword [ebp + 8]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0xe4], 0x8e41
mov dword [ebp - 0x31c], 0xfffffff8
mov dword [ebp - 0x2ac], 0
mov dword [ebp - 0x1e8], 0
jmp 0x10050fb1
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 4
jge 0x10050fcd
mov eax, dword [ebp - 0x1e8]
mov dword [ebp + eax*4 - 0xb64], 0x30dfddae
jmp 0x10050fa4
mov byte [ebp - 0x8c], 0
movzx eax, byte [ebp - 0x8c]
test eax, eax
je 0x10050fed
push 0x79e7
push 1
call fcn.1004e8e4
pop ecx
pop ecx
cmp dword [ebp - 0xe4], 1
jl 0x1005100b
mov eax, 0xffff
test eax, eax
je 0x1005100b
mov dword [ebp - 0x3b8], 1
jmp 0x10051012
and dword [ebp - 0x3b8], 0
mov eax, dword [ebp - 0xe4]
cmp eax, dword [ebp - 0x3b8]
jge 0x1005102c
mov dword [ebp - 0x5c8], 1
jmp 0x10051033
and dword [ebp - 0x5c8], 0
mov eax, dword [ebp - 0xe4]
cmp dword [ebp - 0x5c8], eax
jg 0x1005104d
mov dword [ebp - 0x5f8], 1
jmp 0x10051054
and dword [ebp - 0x5f8], 0
mov eax, dword [ebp - 0x31c]
cmp dword [ebp - 0x5f8], eax
jg 0x1005106e
mov dword [ebp - 0x610], 1
jmp 0x10051075
and dword [ebp - 0x610], 0
mov eax, dword [ebp - 0x610]
mov dword [ebp - 0x2ac], eax
mov eax, dword [ebp - 0x2ac]
sub eax, 0x32f3
cmp eax, 1
jl 0x1005109d
mov dword [ebp - 0x5f4], 1
jmp 0x100510a4
and dword [ebp - 0x5f4], 0
cmp dword [ebp - 0x5f4], 1
jae 0x100510b9
mov dword [ebp - 0x67c], 1
jmp 0x100510c0
and dword [ebp - 0x67c], 0
mov eax, dword [ebp - 0x31c]
mov dword [ebp - 0xa8c], eax
mov eax, dword [ebp - 0x2ac]
mov dword [ebp - 0x998], eax
mov eax, dword [ebp - 0xe4]
add eax, 0x1355fff
neg eax
je 0x100510f0
mov eax, 0xe071
test eax, eax
jne 0x10051102
cmp dword [ebp - 0xe4], 0
jne 0x10051102
and dword [ebp - 0x5c0], 0
jmp 0x1005110c
mov dword [ebp - 0x5c0], 1
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x5c0]
mov dword [ebp + eax - 0xb64], ecx
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x334], eax
mov dword [ebp - 0x644], 0x7f6af112
mov dword [ebp - 0x640], 0x7f6af112
mov dword [ebp - 0x63c], 0x7f6af112
mov dword [ebp - 0x638], 0x7f6af112
mov dword [ebp - 0x3c], 0xffffffff
mov dword [ebp - 0x740], 0xffffffff
mov dword [ebp - 0x2b4], 0xfffffff8
mov dword [ebp - 0x300], 0xd8ef068c
push 3
lea ecx, [ebp - 0x880]
call fcn.1001b24b
and dword [ebp - 4], 0
lea eax, [ebp - 0x9ec]
push eax
push 1
lea eax, [ebp - 0x880]
push eax
call fcn.1004e918
add esp, 0xc
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x644], 0
jmp 0x100511c8
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x644]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x644], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x644], 0x1c
je 0x100512fc
push 1
lea ecx, [ebp - 0x898]
call fcn.1001b24b
mov byte [ebp - 4], 1
mov dword [ebp - 0x70], 0
jmp 0x100511fc
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 1
jge 0x10051218
push dword [ebp - 0x70]
lea ecx, [ebp - 0x898]
call fcn.1001b2e9
mov dword [eax], 0xd83d
jmp 0x100511f5
mov dword [ebp - 0x70], 0
jmp 0x10051228
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 1
jge 0x1005123e
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0x6e8], 1
jmp 0x10051221
cmp dword [ebp - 0x3c], 0
je 0x100512d7
mov dword [ebp - 0x3c], 0x19
jmp 0x10051258
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0x2b
je 0x100512a3
mov dword [ebp - 0x1a8], 0xfffffff6
mov dword [ebp - 0x1a8], 0
jmp 0x10051281
mov eax, dword [ebp - 0x1a8]
dec eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 0xfffffff7
jne 0x100512a1
mov dword [ebp - 0x6e0], 0xffffffff
cmp dword [ebp - 0x6e0], 0
je 0x1005129f
jmp 0x100512a1
jmp 0x10051274
jmp 0x10051251
mov dword [ebp - 0x3c], 0
jmp 0x100512b3
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 1
jge 0x100512d5
push 0
lea eax, [ebp - 0x898]
push eax
push 0x783d
lea eax, [ebp - 0x3c]
push eax
call fcn.1004ed2a
add esp, 0x10
jmp 0x100512ac
jmp 0x100512e8
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x6e8], 0xffffffff
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x898]
call fcn.1001b2cd
jmp 0x100511af
mov eax, dword [ebp - 0x300]
mov dword [ebp - 0x738], eax
mov eax, dword [ebp - 0x300]
dec eax
mov dword [ebp - 0x300], eax
cmp dword [ebp - 0x738], 0xfffffff8
je 0x1005132a
mov dword [ebp - 0x324], 1
jmp 0x10051331
and dword [ebp - 0x324], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x644]
mov dword [ebp - 0x49c], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x49c]
mov dword [ebp + eax - 0x644], ecx
mov eax, dword [ebp - 0x3c]
add eax, dword [ebp - 0x49c]
add eax, dword [ebp - 0x324]
cmp eax, dword [ebp - 0x3c]
jne 0x10051377
mov dword [ebp - 0x32c], 1
jmp 0x1005137e
and dword [ebp - 0x32c], 0
mov eax, dword [ebp - 0x2b4]
cmp dword [ebp - 0x3c], eax
je 0x10051395
mov dword [ebp - 0x55c], 1
jmp 0x1005139c
and dword [ebp - 0x55c], 0
mov eax, dword [ebp - 0x55c]
mov dword [ebp - 0x2b4], eax
mov eax, dword [ebp - 0x2b4]
mov dword [ebp - 0x9a8], eax
mov eax, dword [ebp - 0x740]
cmp dword [ebp - 0x32c], eax
jge 0x100513ce
mov dword [ebp - 0x4a4], 1
jmp 0x100513d5
and dword [ebp - 0x4a4], 0
push 0
lea ecx, [ebp - 0x880]
call fcn.1001b2e9
mov ecx, dword [ebp - 0x4a4]
mov dword [eax], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x880]
call fcn.1001b2cd
mov eax, dword [ebp - 0x334]
movzx eax, word [eax]
cmp eax, 0x5a4d
je 0x1005140e
jmp 0x1005628a
mov dword [ebp - 0xe8], 0x75c9
push 1
lea ecx, [ebp - 0x8d4]
call fcn.1001b24b
mov dword [ebp - 4], 2
mov dword [ebp - 0x204], 0
jmp 0x10051445
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 1
jge 0x10051467
push dword [ebp - 0x204]
lea ecx, [ebp - 0x8d4]
call fcn.1001b2e9
mov dword [eax], 0xe87df2f4
jmp 0x10051438
push 0x5de
push 0
lea eax, [ebp - 0x8d4]
push eax
lea eax, [ebp - 0xe8]
push eax
call fcn.1004f0ef
add esp, 0x10
mov dword [ebp - 0xe8], 0xfffffffd
jmp 0x1005149d
mov eax, dword [ebp - 0xe8]
dec eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0xffffffe6
jge 0x100514c8
mov byte [ebp - 0x88], 0
movzx eax, byte [ebp - 0x88]
test eax, eax
je 0x100514c6
push 0
push 0x6c3f
call fcn.100503f3
pop ecx
pop ecx
jmp 0x10051490
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x8d4]
call fcn.1001b2cd
mov eax, dword [ebp - 0x334]
mov ecx, dword [ebp - 0x38]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0xd0], ecx
mov eax, dword [ebp - 0xd0]
cmp dword [eax], 0x4550
je 0x100514fc
jmp 0x1005628a
push 1
call fcn.1004e983
pop ecx
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xd0]
lea eax, [ecx + eax + 0x78]
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x20c], 0xa7ef5d87
mov dword [ebp - 0x2f4], 0
mov dword [ebp - 0xb0], 0x6f32
mov dword [ebp - 0x4cc], 0xfffffff8
mov dword [ebp - 0x5c4], 6
mov dword [ebp - 0x134], 0x86d6a6c3
mov dword [ebp - 0x4c4], 0xffffffff
mov dword [ebp - 0x64], 0
jmp 0x10051574
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 1
jge 0x10051587
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x4c], 1
jmp 0x1005156d
mov dword [ebp - 0x64], 0
jmp 0x10051597
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 1
jge 0x100515ad
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x7e4], 0xfffffffe
jmp 0x10051590
mov dword [ebp - 0x40], 0
jmp 0x100515bd
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jg 0x10051934
mov dword [ebp - 0x118], 0
mov dword [ebp - 0x1b0], 0x19f23e52
mov dword [ebp - 0x33c], 0x5d56974e
mov dword [ebp - 0x748], 0xfff7
mov dword [ebp - 0x758], 0xcdd5376e
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x9f4], eax
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp + eax*4 - 0x4c]
cmp dword [ebp - 0x118], eax
je 0x10051619
mov eax, dword [ebp - 0x40]
cmp dword [ebp + eax*4 - 0x4c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x4c]
mov dword [ebp - 0x20c], eax
mov eax, dword [ebp - 0x118]
cmp dword [ebp - 0x20c], eax
jl 0x10051643
mov dword [ebp - 0x5bc], 1
jmp 0x1005164a
and dword [ebp - 0x5bc], 0
mov eax, dword [ebp - 0x5bc]
sub eax, dword [ebp - 0x40]
mov dword [ebp - 0x1b0], eax
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x33c], eax
cmp dword [ebp - 0x33c], 0
jne 0x10051680
mov eax, 0x90350d8a
test eax, eax
jne 0x10051680
and dword [ebp - 0x4ac], 0
jmp 0x1005168a
mov dword [ebp - 0x4ac], 1
mov eax, dword [ebp - 0x118]
cmp eax, dword [ebp - 0x4ac]
jg 0x100516a4
mov dword [ebp - 0x344], 1
jmp 0x100516ab
and dword [ebp - 0x344], 0
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp + eax*4 - 0x4c]
cmp dword [ebp - 0x344], eax
jne 0x100516c6
mov dword [ebp - 0x564], 1
jmp 0x100516cd
and dword [ebp - 0x564], 0
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp + eax*4 - 0x4c]
cmp eax, dword [ebp - 0x564]
jge 0x100516e8
mov dword [ebp - 0x34c], 1
jmp 0x100516ef
and dword [ebp - 0x34c], 0
mov eax, dword [ebp - 0x34c]
mov dword [ebp - 0x2f4], eax
mov eax, dword [ebp - 0x118]
imul eax, dword [ebp - 0x118]
mov ecx, dword [ebp - 0x40]
sub eax, dword [ebp + ecx*4 - 0x4c]
je 0x10051893
mov dword [ebp - 0xf0], 0xfffffff7
mov dword [ebp - 0x4b4], 0xb0d58e7e
mov dword [ebp - 0x760], 0xfffffffe
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x1b0], eax
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x4b4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x4c]
cmp dword [ebp - 0x4b4], eax
jne 0x10051769
mov dword [ebp - 0x4bc], 1
jmp 0x10051770
and dword [ebp - 0x4bc], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x748]
cmp dword [ebp + eax - 0x4c], ecx
jg 0x1005178e
mov dword [ebp - 0x354], 1
jmp 0x10051795
and dword [ebp - 0x354], 0
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp + eax*4 - 0x4c]
cmp eax, dword [ebp - 0x354]
jl 0x100517b0
mov dword [ebp - 0x5fc], 1
jmp 0x100517b7
and dword [ebp - 0x5fc], 0
cmp dword [ebp - 0x5fc], 7
je 0x100517d5
cmp dword [ebp - 0xf0], 0
je 0x100517d5
mov dword [ebp - 0x35c], 1
jmp 0x100517dc
and dword [ebp - 0x35c], 0
mov eax, dword [ebp - 0xf0]
cmp dword [ebp - 0x35c], eax
je 0x100517f6
mov dword [ebp - 0x364], 1
jmp 0x100517fd
and dword [ebp - 0x364], 0
mov eax, dword [ebp - 0x4bc]
cmp eax, dword [ebp - 0x364]
jne 0x10051817
mov dword [ebp - 0x56c], 1
jmp 0x1005181e
and dword [ebp - 0x56c], 0
mov eax, dword [ebp - 0xb0]
cmp dword [ebp - 0x56c], eax
je 0x10051838
mov dword [ebp - 0x750], 1
jmp 0x1005183f
and dword [ebp - 0x750], 0
mov eax, dword [ebp - 0xf0]
add eax, dword [ebp - 0x758]
neg eax
mov dword [ebp - 0x20c], eax
mov eax, dword [ebp - 0x20c]
add eax, dword [ebp - 0xf0]
jne 0x1005186d
mov dword [ebp - 0x36c], 1
jmp 0x10051874
and dword [ebp - 0x36c], 0
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp + eax*4 - 0x4c]
mov ecx, dword [ebp - 0x36c]
lea eax, [ecx + eax - 0x5c901b]
mov dword [ebp - 0x760], eax
jmp 0x1005192f
mov dword [ebp - 0x7cc], 0x453
mov dword [ebp - 0xa68], 0x8a597fb6
mov dword [ebp - 0x9d8], 0xac6aa04d
mov dword [ebp - 0xa48], 0xde333b8f
mov dword [ebp - 0x9e0], 0xfffffff7
mov dword [ebp - 0xb0], 0
jmp 0x100518de
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0xe
jge 0x10051922
mov dword [ebp - 0xa88], 0xaabdc9a8
mov dword [ebp - 0x9e8], 0xfffffff6
mov dword [ebp - 0x8f8], 1
push 1
push 0x657e
lea eax, [ebp - 0x7cc]
push eax
push 0x62a
call fcn.1004ed2a
add esp, 0x10
jmp 0x100518d1
mov eax, dword [ebp - 0x134]
dec eax
mov dword [ebp - 0x134], eax
jmp 0x100515b6
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x7e4], 0x955
cmp dword [ebp - 0x4cc], 0x955
jg 0x1005195d
mov dword [ebp - 0x6f4], 1
jmp 0x10051964
and dword [ebp - 0x6f4], 0
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0x4c4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x4c]
cmp dword [ebp - 0x4c4], eax
jge 0x1005198e
mov dword [ebp - 0x374], 1
jmp 0x10051995
and dword [ebp - 0x374], 0
mov eax, dword [ebp - 0x374]
mov dword [ebp - 0x5c4], eax
mov eax, dword [ebp - 0x134]
cmp dword [ebp - 0x5c4], eax
jge 0x100519bb
mov dword [ebp - 0x37c], 1
jmp 0x100519c2
and dword [ebp - 0x37c], 0
mov eax, dword [ebp - 0x134]
cmp dword [ebp - 0x37c], eax
jge 0x100519dc
mov dword [ebp - 0x65c], 1
jmp 0x100519e3
and dword [ebp - 0x65c], 0
imul eax, dword [ebp - 0x2f4], 0x2e7a
sub eax, 0x1bbcb567
je 0x10051a09
cmp dword [ebp - 0x4cc], 0
je 0x10051a09
mov dword [ebp - 0x384], 1
jmp 0x10051a10
and dword [ebp - 0x384], 0
mov eax, dword [ebp - 0x384]
sub eax, dword [ebp - 0x134]
mov dword [ebp - 0x2f4], eax
mov eax, dword [ebp - 0x60]
cmp dword [eax + 4], 0
jne 0x10051a30
jmp 0x1005628a
push 2
lea ecx, [ebp - 0x984]
call fcn.1001b24b
mov dword [ebp - 4], 3
mov dword [ebp - 0x214], 0xfffffffe
mov dword [ebp - 0x1b8], 0
jmp 0x10051a67
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 2
jge 0x10051a86
push dword [ebp - 0x1b8]
lea ecx, [ebp - 0x984]
call fcn.1001b2e9
and dword [eax], 0
jmp 0x10051a5a
mov dword [ebp - 0x214], 1
jmp 0x10051a9f
mov eax, dword [ebp - 0x214]
dec eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 0
jl 0x10051aca
mov byte [ebp - 0xa1], 0
movzx eax, byte [ebp - 0xa1]
test eax, eax
je 0x10051ac8
push 0
push 0x55e6
call fcn.10050693
pop ecx
pop ecx
jmp 0x10051a92
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x984]
call fcn.1001b2cd
and dword [ebp - 0x34], 0
mov dword [ebp - 0x10], 6
mov dword [ebp - 0x2bc], 0xffffffff
mov dword [ebp - 0x21c], 0xfffffff9
mov dword [ebp - 0x80], 0xfffffffe
mov dword [ebp - 0x734], 0x9060
mov dword [ebp - 0x1c0], 0
jmp 0x10051b22
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 3
jge 0x10051b3e
mov eax, dword [ebp - 0x1c0]
mov dword [ebp + eax*4 - 0x994], 1
jmp 0x10051b15
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x10], eax
jl 0x10051b52
mov dword [ebp - 0x574], 1
jmp 0x10051b59
and dword [ebp - 0x574], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x574], eax
jge 0x10051b70
mov dword [ebp - 0x38c], 1
jmp 0x10051b77
and dword [ebp - 0x38c], 0
mov eax, dword [ebp - 0x38c]
sub eax, dword [ebp - 0x10]
je 0x10051b86
cmp dword [ebp - 0x10], 0
cmp dword [ebp - 0x10], 0x598a
je 0x10051b9b
mov dword [ebp - 0x4d4], 1
jmp 0x10051ba2
and dword [ebp - 0x4d4], 0
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x4d4]
sub eax, dword [ebp - 0x10]
jmp 0x10051bbc
and dword [ebp - 0x394], 0
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x394]
jle 0x10051bda
mov dword [ebp - 0x6d8], 1
jmp 0x10051be1
and dword [ebp - 0x6d8], 0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x8fc], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x904], eax
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x10], eax
je 0x10051c07
mov dword [ebp - 0x5dc], 1
jmp 0x10051c0e
and dword [ebp - 0x5dc], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x5dc], eax
jne 0x10051c25
mov dword [ebp - 0x39c], 1
jmp 0x10051c2c
and dword [ebp - 0x39c], 0
mov eax, dword [ebp - 0x39c]
mov dword [ebp - 0x2bc], eax
mov eax, dword [ebp - 0x2bc]
mov dword [ebp - 0x90c], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x914], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x91c], eax
cmp dword [ebp - 0x10], 0
je 0x10051c6f
push 2
pop eax
test eax, eax
je 0x10051c6f
mov dword [ebp - 0x4dc], 1
jmp 0x10051c76
and dword [ebp - 0x4dc], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x4dc], eax
jne 0x10051c88
cmp dword [ebp - 0x2bc], 0
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x994], 0xfffffffd
mov eax, dword [ebp - 0x21c]
sub eax, 3
cmp eax, dword [ebp - 0x21c]
jle 0x10051cb6
mov dword [ebp - 0x3a4], 1
jmp 0x10051cbd
and dword [ebp - 0x3a4], 0
mov eax, dword [ebp - 0x3a4]
neg eax
cmp eax, dword [ebp - 0x21c]
jg 0x10051cd9
mov dword [ebp - 0x57c], 1
jmp 0x10051ce0
and dword [ebp - 0x57c], 0
mov eax, dword [ebp - 0x21c]
imul eax, dword [ebp - 0x57c]
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0
je 0x10051d3f
mov dword [ebp - 0x10], 0
jmp 0x10051d06
mov eax, dword [ebp - 0x10]
dec eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xffffffe2
jne 0x10051d3a
mov dword [ebp - 0x7d0], 0xd535dd25
mov byte [ebp - 0x8a], 0
lea eax, [ebp - 0x8a]
push eax
push 1
call fcn.1004ed7d
pop ecx
pop ecx
cmp dword [ebp - 0x7d0], 0
je 0x10051d38
jmp 0x10051cff
jmp 0x10051cff
jmp 0x10051e08
mov dword [ebp - 0x66c], 0xb06a9beb
mov dword [ebp - 0x664], 0
mov dword [ebp - 0x80], 2
jmp 0x10051d63
mov eax, dword [ebp - 0x80]
dec eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0
jl 0x10051ddb
mov byte [ebp - 0x8e], 0
push 0
lea eax, [ebp - 0x8e]
push eax
call fcn.1004f2f8
pop ecx
pop ecx
mov dword [ebp - 0x10], 2
jmp 0x10051d90
mov eax, dword [ebp - 0x10]
dec eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jl 0x10051dd9
mov byte [ebp - 0xaa], 0
movzx eax, byte [ebp - 0xaa]
test eax, eax
je 0x10051dc8
push 0
push 0x101a
push 0x2f6
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetWindowExtEx]
mov eax, dword [ebp - 0x80]
cmp dword [ebp + eax*4 - 0x994], 0
je 0x10051dd7
jmp 0x10051dd9
jmp 0x10051d89
jmp 0x10051d5c
push 0
lea eax, [ebp - 0x664]
push eax
push 0x5bb6
push 0x4ff1
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x734]
push eax
lea eax, [ebp - 0x66c]
push eax
call fcn.10050433
add esp, 0x1c
mov eax, dword [ebp - 0xd0]
movzx eax, word [eax + 0x14]
mov ecx, dword [ebp - 0xd0]
lea eax, [ecx + eax + 0x18]
mov dword [ebp - 0x228], eax
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0x228]
push eax
push 0
lea eax, [ebp - 0x34]
push eax
push 0x5474
call fcn.1004ee70
add esp, 0x18
mov dword [ebp - 0x3b4], 0xeab1d6a5
mov dword [ebp - 0x4e4], 0xc0549ec7
mov dword [ebp - 0x3cc], 0xc8951bb3
mov dword [ebp - 0x3d4], 0
mov dword [ebp - 0x794], 0xffffffff
mov dword [ebp - 0x1c8], 0
jmp 0x10051e92
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 2
jge 0x10051eae
mov eax, dword [ebp - 0x1c8]
mov dword [ebp + eax*4 - 0x5d4], 0x979b3895
jmp 0x10051e85
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x5d4], 0
jne 0x10051ed0
cmp dword [ebp - 0x3b4], 0
jne 0x10051ed0
and dword [ebp - 0x3ac], 0
jmp 0x10051eda
mov dword [ebp - 0x3ac], 1
mov eax, dword [ebp - 0x3ac]
mov dword [ebp - 0x4e4], eax
cmp dword [ebp - 0x4e4], 0xf08e
jg 0x10051f14
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x5d4], 0
jne 0x10051f14
cmp dword [ebp - 0x3b4], 0
jne 0x10051f14
and dword [ebp - 0x5cc], 0
jmp 0x10051f1e
mov dword [ebp - 0x5cc], 1
cmp dword [ebp - 0x5cc], 0x441a62a9
jne 0x10051f36
mov dword [ebp - 0x3bc], 1
jmp 0x10051f3d
and dword [ebp - 0x3bc], 0
cmp dword [ebp - 0x3bc], 0x3388a019
je 0x10051f55
mov dword [ebp - 0x4ec], 1
jmp 0x10051f5c
and dword [ebp - 0x4ec], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5d4]
cmp eax, dword [ebp - 0x4ec]
jle 0x10051f7d
mov dword [ebp - 0x3c4], 1
jmp 0x10051f84
and dword [ebp - 0x3c4], 0
cmp dword [ebp - 0x3c4], 0x8af066b7
jae 0x10051f9c
mov dword [ebp - 0x584], 1
jmp 0x10051fa3
and dword [ebp - 0x584], 0
mov eax, dword [ebp - 0x584]
mov dword [ebp - 0x3cc], eax
cmp dword [ebp - 0x3cc], 0
je 0x10051fd4
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x5d4], 0
je 0x10051fd4
mov dword [ebp - 0x4f4], 1
jmp 0x10051fdb
and dword [ebp - 0x4f4], 0
mov eax, dword [ebp - 0x4f4]
add eax, 0x53005475
mov dword [ebp - 0x3d4], eax
cmp dword [ebp - 0x3d4], 0x8877
je 0x10052004
mov dword [ebp - 0x5e0], 1
jmp 0x1005200b
and dword [ebp - 0x5e0], 0
imul eax, dword [ebp - 0x5e0], 0x6985
cmp eax, 3
jbe 0x10052026
mov dword [ebp - 0x3dc], 1
jmp 0x1005202d
and dword [ebp - 0x3dc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x5d4]
cmp dword [ebp - 0x3dc], eax
jg 0x10052057
mov eax, 0xd6c34f1d
test eax, eax
je 0x10052057
mov dword [ebp - 0x4fc], 1
jmp 0x1005205e
and dword [ebp - 0x4fc], 0
cmp dword [ebp - 0x4fc], 0xfffffff6
je 0x10052073
mov dword [ebp - 0x3e4], 1
jmp 0x1005207a
and dword [ebp - 0x3e4], 0
mov eax, dword [ebp - 0x3e4]
sub eax, 0x2b000250
cmp eax, 0xffff
jne 0x10052098
mov dword [ebp - 0x58c], 1
jmp 0x1005209f
and dword [ebp - 0x58c], 0
mov eax, dword [ebp - 0x58c]
mov dword [ebp - 0x794], eax
cmp dword [ebp - 0x34], 0
jne 0x100520b6
jmp 0x1005628a
mov dword [ebp - 0xf8], 0x69fdf99f
mov dword [ebp - 0x3ec], 0x43beb716
mov dword [ebp - 0x924], 0x5eb20068
mov dword [ebp - 0x92c], 0x11015aa9
mov dword [ebp - 0xf8], 0xfffffff8
jmp 0x100520f7
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 6
jle 0x10052185
cmp dword [ebp - 0xf8], 0
je 0x10052125
mov dword [ebp - 0x674], 0xa485bf25
mov eax, dword [ebp - 0x674]
mov dword [ebp - 0x3ec], eax
jmp 0x10052165
mov byte [ebp - 0xa3], 0
movzx eax, byte [ebp - 0xa3]
test eax, eax
je 0x10052145
push 1
push 0
push 1
push 0
call dword [sym.imp.ADVAPI32.dll_SetSecurityDescriptorDacl]
mov byte [ebp - 0xa7], 0
movzx eax, byte [ebp - 0xa7]
test eax, eax
je 0x10052165
push 0x17ae
push 1
call fcn.1004edbb
pop ecx
pop ecx
push 0x36f7
push 1
push 0x29fc
lea eax, [ebp - 0x3ec]
push eax
call fcn.1004ede8
add esp, 0x10
jmp 0x100520ea
mov eax, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x34]
add ecx, dword [eax]
add ecx, dword [ebp - 0x38]
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0xb8], 0xb3ae3556
mov dword [ebp - 0x73c], 0
mov dword [ebp - 0x830], 0
mov dword [ebp - 0x82c], 0
mov dword [ebp - 0x828], 0
mov dword [ebp - 0x824], 0
mov dword [ebp - 0xb8], 0xfffffff9
jmp 0x100521e8
mov eax, dword [ebp - 0xb8]
dec eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0xfffffff6
je 0x100522d7
mov dword [ebp - 0xc8], 1
cmp dword [ebp - 0xc8], 0
je 0x10052226
cmp dword [ebp - 0xc8], 0
je 0x10052226
cmp dword [ebp - 0xc8], 0
je 0x10052226
mov dword [ebp - 0x3f4], 1
jmp 0x1005222d
and dword [ebp - 0x3f4], 0
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0x934], eax
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0x93c], eax
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0x944], eax
mov eax, dword [ebp - 0x73c]
mov dword [ebp - 0x94c], eax
cmp dword [ebp - 0xc8], 0x7631
je 0x1005227c
push 9
pop eax
test eax, eax
je 0x1005227c
mov dword [ebp - 0x504], 1
jmp 0x10052283
and dword [ebp - 0x504], 0
imul eax, dword [ebp - 0x504], 0
cmp dword [ebp - 0x3f4], eax
jg 0x100522a7
mov eax, 0xfffa
test eax, eax
je 0x100522a7
mov dword [ebp - 0x5d8], 1
jmp 0x100522ae
and dword [ebp - 0x5d8], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x5d8]
mov dword [ebp + eax - 0x830], ecx
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xc8]
mov dword [ebp + eax - 0x830], ecx
jmp 0x100521db
xor ecx, ecx
call fcn.10037239
push eax
call fcn.10076b48
pop ecx
mov dword [ebp - 0x84], 0x97f6af11
mov dword [ebp - 0x404], 0x7cdedfc3
mov dword [ebp - 0x84], 0xfffffffa
jmp 0x10052312
mov eax, dword [ebp - 0x84]
dec eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0xfffffff5
jle 0x1005242c
mov dword [ebp - 0x50c], 0xfa32fd2d
mov dword [ebp - 0x3fc], 0x8ef068cd
mov eax, dword [ebp - 0x84]
add eax, dword [ebp - 0x84]
je 0x100523b4
mov dword [ebp - 0x224], 0xddd3f467
mov byte [ebp - 0x85], 0
lea eax, [ebp - 0x85]
push eax
push 0
call fcn.1005024d
pop ecx
pop ecx
mov dword [ebp - 0x224], 0x17
jmp 0x1005237b
mov eax, dword [ebp - 0x224]
dec eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 0xfffffff7
je 0x100523b2
mov byte [ebp - 0x90], 0
push 0x6a3d
push 0x6231
push 0x74e
push 1
push 0x9cd
lea eax, [ebp - 0x90]
push eax
call fcn.1004ee70
add esp, 0x18
jmp 0x1005236e
jmp 0x10052419
mov dword [ebp - 0x654], 0xfffffffe
lea eax, [ebp - 0x3fc]
push eax
push 0
lea eax, [ebp - 0x50c]
push eax
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x654]
push eax
lea eax, [ebp - 0x404]
push eax
push 0x55ff
call fcn.10050a74
add esp, 0x1c
lea eax, [ebp - 0x3fc]
push eax
push 0x43d5
push 1
lea eax, [ebp - 0x50c]
push eax
lea eax, [ebp - 0x404]
push eax
push 0x1c1
call fcn.1004ef56
add esp, 0x18
cmp dword [ebp - 0x84], 0
je 0x10052427
jmp 0x10052305
jmp 0x10052305
push 3
lea ecx, [ebp - 0x8e0]
call fcn.1001b24b
mov dword [ebp - 4], 4
mov dword [ebp - 0x1d0], 0
jmp 0x10052459
mov eax, dword [ebp - 0x1d0]
inc eax
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 3
jge 0x1005247b
push dword [ebp - 0x1d0]
lea ecx, [ebp - 0x8e0]
call fcn.1001b2e9
mov dword [eax], 0x4cd4536
jmp 0x1005244c
push 1
lea ecx, [ebp - 0x8e0]
call fcn.1001b2e9
and dword [eax], 0
mov byte [ebp - 0xa5], 0
lea eax, [ebp - 0xa5]
push eax
push 1
push 0x3473
push 0x132f
call fcn.1004f0ef
add esp, 0x10
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x8e0]
call fcn.1001b2cd
mov byte [ebp - 0x2a8], 0
mov byte [ebp - 0x2a7], 4
mov byte [ebp - 0x2a6], 0x53
mov byte [ebp - 0x2a5], 0x97
mov byte [ebp - 0x2a4], 0x30
mov byte [ebp - 0x2a3], 0x73
mov byte [ebp - 0x2a2], 0x56
mov byte [ebp - 0x2a1], 0xfd
mov byte [ebp - 0x2a0], 0x5c
mov byte [ebp - 0x29f], 0x19
mov byte [ebp - 0x29e], 2
mov byte [ebp - 0x29d], 0xc6
mov byte [ebp - 0x29c], 0x2c
mov byte [ebp - 0x29b], 0x7d
mov byte [ebp - 0x29a], 0x6a
mov byte [ebp - 0x299], 0x13
mov byte [ebp - 0x298], 0x60
mov byte [ebp - 0x297], 0xae
mov byte [ebp - 0x296], 0xb7
mov byte [ebp - 0x295], 0x36
mov byte [ebp - 0x294], 0xc8
mov byte [ebp - 0x293], 0x8e
mov byte [ebp - 0x292], 3
mov byte [ebp - 0x291], 0xe4
mov byte [ebp - 0x290], 0x96
mov byte [ebp - 0x28f], 0x77
mov byte [ebp - 0x28e], 0xbd
mov byte [ebp - 0x28d], 5
mov byte [ebp - 0x28c], 0x22
mov byte [ebp - 0x28b], 0xee
mov byte [ebp - 0x28a], 0x6e
mov byte [ebp - 0x289], 0xc
mov byte [ebp - 0x288], 0x37
mov byte [ebp - 0x287], 0x54
mov byte [ebp - 0x286], 0xe6
mov byte [ebp - 0x285], 0x66
mov byte [ebp - 0x284], 0x22
mov byte [ebp - 0x283], 0x4d
mov byte [ebp - 0x282], 0xdb
mov byte [ebp - 0x281], 0x4e
mov byte [ebp - 0x280], 0x81
mov byte [ebp - 0x27f], 0x59
mov byte [ebp - 0x27e], 0xf1
mov byte [ebp - 0x27d], 0x18
mov byte [ebp - 0x27c], 0x29
mov byte [ebp - 0x27b], 0x44
mov byte [ebp - 0x27a], 0x44
mov byte [ebp - 0x279], 0x57
mov byte [ebp - 0x278], 0x8d
mov byte [ebp - 0x277], 0x65
mov byte [ebp - 0x276], 0x5e
mov byte [ebp - 0x275], 0x60
mov byte [ebp - 0x274], 0x87
mov byte [ebp - 0x273], 0xef
mov byte [ebp - 0x272], 0x30
mov byte [ebp - 0x271], 0x86
mov byte [ebp - 0x270], 0x6c
mov byte [ebp - 0x26f], 0x34
mov byte [ebp - 0x26e], 0x92
mov byte [ebp - 0x26d], 0xa4
mov byte [ebp - 0x26c], 0x45
mov byte [ebp - 0x26b], 0x94
mov byte [ebp - 0x26a], 0x3b
mov byte [ebp - 0x269], 0xc6
mov byte [ebp - 0x268], 0x1b
mov byte [ebp - 0x267], 0x18
mov byte [ebp - 0x266], 0x50
mov byte [ebp - 0x265], 9
mov byte [ebp - 0x264], 0xb9
mov byte [ebp - 0x263], 0x56
mov byte [ebp - 0x262], 0x74
mov byte [ebp - 0x261], 0xfb
mov byte [ebp - 0x260], 0xc0
mov byte [ebp - 0x25f], 0x30
mov byte [ebp - 0x25e], 0x77
mov byte [ebp - 0x25d], 0x26
mov byte [ebp - 0x25c], 0x76
mov byte [ebp - 0x25b], 0x7f
mov byte [ebp - 0x25a], 0x8a
mov byte [ebp - 0x259], 0x78
mov byte [ebp - 0x258], 0xbd
mov byte [ebp - 0x257], 0x3d
mov byte [ebp - 0x256], 0x9c
mov byte [ebp - 0x255], 0xc5
mov byte [ebp - 0x254], 0x7f
mov byte [ebp - 0x253], 0x53
mov byte [ebp - 0x252], 3
mov byte [ebp - 0x251], 6
mov byte [ebp - 0x250], 8
mov byte [ebp - 0x24f], 7
mov byte [ebp - 0x24e], 9
mov byte [ebp - 0x24d], 0
mov byte [ebp - 0x24c], 6
mov byte [ebp - 0x24b], 1
mov byte [ebp - 0x24a], 4
mov byte [ebp - 0x249], 9
mov byte [ebp - 0x248], 2
mov byte [ebp - 0x247], 0xf
mov byte [ebp - 0x246], 5
mov byte [ebp - 0x245], 6
mov byte [ebp - 0x244], 7
mov byte [ebp - 0x243], 7
mov byte [ebp - 0x242], 1
mov byte [ebp - 0x241], 3
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x2a8]
or eax, 0x35
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x2a8]
and ecx, 0x35
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x2a8]
mov byte [ebp + ecx - 0x61c], al
mov dword [ebp - 0x2c], 2
and dword [ebp - 0x124], 0
jmp 0x100527e5
mov eax, dword [ebp - 0x2c]
inc eax
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0x68
jae 0x100528c3
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x2a8]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x2c], eax
jne 0x1005282f
mov eax, dword [ebp - 0x2c]
movzx eax, byte [ebp + eax - 0x2a8]
inc eax
mov dword [ebp - 0x124], eax
mov eax, dword [ebp - 0x2c]
movzx eax, byte [ebp + eax - 0x2a8]
mov ecx, dword [ebp - 0x2c]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x2c], eax
jmp 0x100527dd
mov eax, dword [ebp - 0x2c]
movzx eax, byte [ebp + eax - 0x2a7]
mov ecx, dword [ebp - 0x2c]
sub ecx, dword [ebp - 0x124]
movzx ecx, byte [ebp + ecx - 0x2aa]
movsx ecx, byte [ebp + ecx - 0x61c]
add eax, ecx
mov ecx, dword [ebp - 0x2c]
movzx ecx, byte [ebp + ecx - 0x2a7]
mov edx, dword [ebp - 0x2c]
sub edx, dword [ebp - 0x124]
movzx edx, byte [ebp + edx - 0x2aa]
movsx edx, byte [ebp + edx - 0x61c]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x2c]
movzx ecx, byte [ebp + ecx - 0x2a7]
mov edx, dword [ebp - 0x2c]
sub edx, dword [ebp - 0x124]
movzx edx, byte [ebp + edx - 0x2aa]
movsx edx, byte [ebp + edx - 0x61c]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x2c]
movzx ecx, byte [ebp + ecx - 0x2a8]
mov byte [ebp + ecx - 0x61c], al
and dword [ebp - 0x124], 0
jmp 0x100527dd
xor eax, eax
inc eax
imul eax, eax, 0xa
mov byte [ebp + eax - 0x61c], 0
mov dword [ebp - 0x24], 0xfff6
mov dword [ebp - 0x5c], 0xb2b534de
mov dword [ebp - 0x100], 1
mov dword [ebp - 0x22c], 0
jmp 0x10052902
mov eax, dword [ebp - 0x22c]
inc eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 1
jge 0x1005291e
mov eax, dword [ebp - 0x22c]
mov dword [ebp + eax*4 - 0x694], 1
jmp 0x100528f5
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x24]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x24]
cmp dword [ebp - 0x24], eax
jg 0x1005293e
mov dword [ebp - 0x594], 1
jmp 0x10052945
and dword [ebp - 0x594], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x594], eax
jl 0x1005295c
mov dword [ebp - 0x40c], 1
jmp 0x10052963
and dword [ebp - 0x40c], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x40c], eax
jl 0x1005297a
mov dword [ebp - 0x514], 1
jmp 0x10052981
and dword [ebp - 0x514], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x514], eax
jge 0x10052998
mov dword [ebp - 0x414], 1
jmp 0x1005299f
and dword [ebp - 0x414], 0
mov eax, dword [ebp - 0x414]
sub eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x24]
je 0x100529bc
mov dword [ebp - 0x5e8], 1
jmp 0x100529c3
and dword [ebp - 0x5e8], 0
mov eax, dword [ebp - 0x24]
imul eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x5e8]
jl 0x100529de
mov dword [ebp - 0x41c], 1
jmp 0x100529e5
and dword [ebp - 0x41c], 0
cmp dword [ebp - 0x41c], 0x5bb2
jl 0x10052b9c
mov dword [ebp - 0x51c], 0x62c5
mov dword [ebp - 0x1d8], 0
jmp 0x10052a18
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 2
jge 0x10052a34
mov eax, dword [ebp - 0x1d8]
mov dword [ebp + eax*4 - 0x820], 0x34ffdeab
jmp 0x10052a0b
mov dword [ebp - 0x24], 0
jmp 0x10052a44
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0x36
jg 0x10052adb
mov dword [ebp - 0x744], 1
mov dword [ebp - 0x684], 1
mov dword [ebp - 0x5c], 0xffffffe7
jmp 0x10052a72
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0xfffffff0
jne 0x10052ab9
mov dword [ebp - 0x7c8], 0x321a
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x51c]
push eax
lea eax, [ebp - 0x7c8]
push eax
lea eax, [ebp - 0x100]
push eax
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x684]
push eax
lea eax, [ebp - 0x744]
push eax
push 1
call fcn.1004f15f
add esp, 0x20
jmp 0x10052a6b
mov byte [ebp - 0x92], 0
push 0x5160
lea eax, [ebp - 0x92]
push eax
push 0
call fcn.1004f6ec
add esp, 0xc
jmp 0x10052a3d
cmp dword [ebp - 0x24], 0
je 0x10052b00
mov eax, dword [ebp - 0x51c]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x5c]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x820], eax
jmp 0x10052b9a
mov dword [ebp - 0x68c], 1
mov dword [ebp - 0x2e4], 0x70a1ee31
push 0x7c0e
lea eax, [ebp - 0x2e4]
push eax
push 1
lea eax, [ebp - 0x68c]
push eax
call fcn.1004f218
add esp, 0x10
mov dword [ebp - 0x100], 0
jmp 0x10052b4a
mov eax, dword [ebp - 0x100]
dec eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0xfffffffc
jl 0x10052b9a
mov dword [ebp - 0x7a4], 0xffffffff
mov dword [ebp - 0x5c], 0xfffffffe
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x2e4], eax
mov eax, dword [ebp - 0x7a4]
add eax, dword [ebp - 0x2e4]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x820], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x694], 0
je 0x10052b98
jmp 0x10052b3d
jmp 0x10052b3d
jmp 0x10052bbe
mov byte [ebp - 0xa9], 0
push 0x175a
push 0x3983
lea eax, [ebp - 0xa9]
push eax
push 1
call fcn.1004f26a
add esp, 0x10
lea eax, [ebp - 0x61c]
push eax
lea ecx, [ebp - 0xb7c]
call fcn.1002a6f6
mov dword [ebp - 0x74c], eax
mov eax, dword [ebp - 0x74c]
mov dword [ebp - 0x69c], eax
mov dword [ebp - 4], 5
push 0xa
xor edx, edx
mov ecx, dword [ebp - 0x69c]
call fcn.100371fe
pop ecx
mov dword [ebp - 0x708], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb7c]
call fcn.1001b1ad
mov dword [ebp - 0x7c], 0xd925b0e4
mov dword [ebp - 0x78], 0xfffffffc
mov dword [ebp - 0x54], 0x8555145c
mov dword [ebp - 0x454], 0
mov dword [ebp - 0xc0], 0xb5d1cb6a
mov dword [ebp - 0x6a4], 0xfffffff9
mov dword [ebp - 0x234], 0
jmp 0x10052c5a
mov eax, dword [ebp - 0x234]
inc eax
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 3
jge 0x10052c76
mov eax, dword [ebp - 0x234]
mov dword [ebp + eax*4 - 0x8c8], 0xf69a7501
jmp 0x10052c4d
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 7
jg 0x10052c8e
mov dword [ebp - 0x42c], 1
jmp 0x10052c95
and dword [ebp - 0x42c], 0
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x954], eax
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x54], eax
jne 0x10052cb8
mov dword [ebp - 0x424], 1
jmp 0x10052cbf
and dword [ebp - 0x424], 0
imul eax, dword [ebp - 0x424], 0x5f5b
test eax, eax
je 0x10052ce2
cmp dword [ebp - 0x454], 0
je 0x10052ce2
mov dword [ebp - 0x59c], 1
jmp 0x10052ce9
and dword [ebp - 0x59c], 0
cmp dword [ebp - 0x59c], 0x7d8cf4c5
jg 0x10052d01
mov dword [ebp - 0x7b8], 1
jmp 0x10052d08
and dword [ebp - 0x7b8], 0
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x42c], eax
je 0x10052d25
cmp dword [ebp - 0x54], 0
je 0x10052d25
mov dword [ebp - 0x524], 1
jmp 0x10052d2c
and dword [ebp - 0x524], 0
cmp dword [ebp - 0x524], 0xe623
jle 0x10052d44
mov dword [ebp - 0x434], 1
jmp 0x10052d4b
and dword [ebp - 0x434], 0
mov eax, dword [ebp - 0x7c]
cmp eax, dword [ebp - 0x434]
jl 0x10052d62
mov dword [ebp - 0x5f0], 1
jmp 0x10052d69
and dword [ebp - 0x5f0], 0
mov eax, dword [ebp - 0xc0]
cmp dword [ebp - 0x5f0], eax
je 0x10052db3
mov byte [ebp - 0x94], 0
movzx eax, byte [ebp - 0x94]
test eax, eax
je 0x10052d8e
call fcn.1004f2e4
mov byte [ebp - 0xa2], 0
movzx eax, byte [ebp - 0xa2]
test eax, eax
je 0x10052dae
push 1
push 0x6240
call fcn.1004f2f8
pop ecx
pop ecx
jmp 0x100531ff
mov dword [ebp - 0x5a4], 0x54d
mov dword [ebp - 0x7e0], 0xffffffff
mov dword [ebp - 0x7dc], 0xffffffff
mov dword [ebp - 0x7d8], 0xffffffff
mov dword [ebp - 0x7d4], 0xffffffff
mov dword [ebp - 0x1e0], 0
jmp 0x10052dfe
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 3
jge 0x10052e1a
mov eax, dword [ebp - 0x1e0]
mov dword [ebp + eax*4 - 0x770], 0x116e074f
jmp 0x10052df1
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x7e0], 7
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x43c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x43c]
mov dword [ebp + eax - 0x770], ecx
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x7e0]
cmp dword [ebp - 0x43c], eax
jle 0x10052e68
mov dword [ebp - 0x52c], 1
jmp 0x10052e6f
and dword [ebp - 0x52c], 0
mov eax, dword [ebp - 0xc0]
cmp eax, dword [ebp - 0x52c]
jl 0x10052e89
mov dword [ebp - 0x444], 1
jmp 0x10052e90
and dword [ebp - 0x444], 0
mov eax, dword [ebp - 0x5a4]
cmp dword [ebp - 0x444], eax
je 0x10052eaa
mov dword [ebp - 0x44c], 1
jmp 0x10052eb1
and dword [ebp - 0x44c], 0
mov eax, dword [ebp - 0x5a4]
cmp eax, dword [ebp - 0x44c]
jl 0x10052ecb
mov dword [ebp - 0x2c4], 1
jmp 0x10052ed2
and dword [ebp - 0x2c4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2c4]
mov dword [ebp + eax - 0x8c8], ecx
cmp dword [ebp - 0x2c4], 0x1af6
jne 0x10052efd
mov dword [ebp - 0x534], 1
jmp 0x10052f04
and dword [ebp - 0x534], 0
mov eax, dword [ebp - 0x534]
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x78], eax
jle 0x10052f21
mov dword [ebp - 0x5e4], 1
jmp 0x10052f28
and dword [ebp - 0x5e4], 0
mov eax, dword [ebp - 0x454]
cmp eax, dword [ebp - 0x5e4]
je 0x10052f42
mov dword [ebp - 0x45c], 1
jmp 0x10052f49
and dword [ebp - 0x45c], 0
mov eax, dword [ebp - 0x45c]
mov dword [ebp - 0x6a4], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x770], 0
je 0x10052f69
cmp dword [ebp - 0x7c], 0
xor eax, eax
cmp eax, 0xef5379a1
jbe 0x10052f7e
mov dword [ebp - 0x53c], 1
jmp 0x10052f85
and dword [ebp - 0x53c], 0
mov eax, dword [ebp - 0x53c]
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x54], 0
jmp 0x10052f9e
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0xb
jg 0x100531ff
push 2
lea ecx, [ebp - 0x780]
call fcn.1001b24b
mov dword [ebp - 4], 6
mov dword [ebp - 0x754], 0xfc007dfd
mov dword [ebp - 0x6ac], 0xe7dfbf73
push 0x7bea
lea eax, [ebp - 0x95c]
push eax
push 1
lea eax, [ebp - 0x780]
push eax
call fcn.1004f33e
add esp, 0x10
push 4
pop eax
shl eax, 1
imul eax, dword [ebp + eax - 0x8c8], 0x7326
cmp dword [ebp - 0x7c], eax
jne 0x1005300e
mov dword [ebp - 0x464], 1
jmp 0x10053015
and dword [ebp - 0x464], 0
cmp dword [ebp - 0x464], 0x418f
jne 0x1005302d
mov dword [ebp - 0x5ac], 1
jmp 0x10053034
and dword [ebp - 0x5ac], 0
mov eax, dword [ebp - 0x78]
cmp dword [ebp - 0x5ac], eax
jne 0x1005304b
mov dword [ebp - 0x46c], 1
jmp 0x10053052
and dword [ebp - 0x46c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x770]
cmp eax, dword [ebp - 0x46c]
je 0x10053073
mov dword [ebp - 0x544], 1
jmp 0x1005307a
and dword [ebp - 0x544], 0
cmp dword [ebp - 0x544], 0xe4f9f010
ja 0x10053092
mov dword [ebp - 0x474], 1
jmp 0x10053099
and dword [ebp - 0x474], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x7e0]
cmp eax, dword [ebp - 0x474]
jne 0x100530bf
push 0
lea ecx, [ebp - 0x780]
call fcn.1001b2e9
cmp dword [eax], 0
jne 0x100530d8
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x8c8], 0
jne 0x100530d8
and dword [ebp - 0x60c], 0
jmp 0x100530e2
mov dword [ebp - 0x60c], 1
push 4
pop eax
imul eax, eax, 3
mov esi, dword [ebp + eax - 0x7e0]
push 0
lea ecx, [ebp - 0x780]
call fcn.1001b2e9
mov ecx, dword [ebp - 0x60c]
add ecx, dword [eax]
cmp esi, ecx
jge 0x10053114
mov dword [ebp - 0x47c], 1
jmp 0x1005311b
and dword [ebp - 0x47c], 0
mov eax, dword [ebp - 0x47c]
sub eax, 0x7140da8f
je 0x1005313b
push 6
pop eax
test eax, eax
je 0x1005313b
mov dword [ebp - 0x54c], 1
jmp 0x10053142
and dword [ebp - 0x54c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x770]
cmp dword [ebp - 0x54c], eax
jl 0x1005316f
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x770], 0
jne 0x1005316f
and dword [ebp - 0x484], 0
jmp 0x10053179
mov dword [ebp - 0x484], 1
mov eax, dword [ebp - 0x754]
cmp dword [ebp - 0x484], eax
jge 0x10053193
mov dword [ebp - 0x5b4], 1
jmp 0x1005319a
and dword [ebp - 0x5b4], 0
push 1
lea ecx, [ebp - 0x780]
call fcn.1001b2e9
mov ecx, dword [ebp - 0x5b4]
sub ecx, dword [eax]
mov dword [ebp - 0x6ac], ecx
mov dword [ebp - 0x78], 0xffffffec
jmp 0x100531c5
cmp dword [ebp - 0x78], 8
jne 0x100531eb
mov byte [ebp - 0x96], 0
movzx eax, byte [ebp - 0x96]
test eax, eax
je 0x100531e9
push 1
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_SetSecurityDescriptorOwner]
jmp 0x100531be
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x780]
call fcn.1001b2cd
jmp 0x10052f97
mov dword [ebp - 0xc0], 0
jmp 0x10053218
mov eax, dword [ebp - 0xc0]
dec eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0xffffffe9
jl 0x10053240
mov byte [ebp - 0xa4], 0
push 0
lea eax, [ebp - 0xa4]
push eax
push 0x10ad
call fcn.10050168
add esp, 0xc
jmp 0x1005320b
and dword [ebp - 0x23c], 0
jmp 0x10053256
mov eax, dword [ebp - 0x23c]
inc eax
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 0xb
jae 0x1005326f
mov eax, dword [ebp - 0x23c]
mov byte [ebp + eax - 0x61c], 0
jmp 0x10053249
mov dword [ebp - 0x68], 0xe0648261
push 3
lea ecx, [ebp - 0x9b4]
call fcn.1001b24b
mov dword [ebp - 4], 7
mov dword [ebp - 0x48c], 0xfffb
mov dword [ebp - 0x1a0], 0
jmp 0x100532ad
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 3
jge 0x100532cf
push dword [ebp - 0x1a0]
lea ecx, [ebp - 0x9b4]
call fcn.1001b2e9
mov dword [eax], 0x2e5664dc
jmp 0x100532a0
mov dword [ebp - 0x68], 7
jmp 0x100532df
mov eax, dword [ebp - 0x68]
dec eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0xfffffffa
jne 0x1005330f
mov byte [ebp - 0x98], 0
movzx eax, byte [ebp - 0x98]
test eax, eax
je 0x10053305
push 1
push 0x5592
call fcn.1004f3be
pop ecx
pop ecx
cmp dword [ebp - 0x68], 0
je 0x1005330d
jmp 0x1005330f
jmp 0x100532d8
mov dword [ebp - 0x68], 0x12
jmp 0x1005331f
mov eax, dword [ebp - 0x68]
dec eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0xfffffff2
jne 0x100533f8
push 2
lea ecx, [ebp - 0x9a4]
call fcn.1001b24b
mov byte [ebp - 4], 8
mov dword [ebp - 0x964], 0x2df3d37a
mov dword [ebp - 0x96c], 1
mov dword [ebp - 0x974], 0xe46c2e7c
mov dword [ebp - 0xa4c], 0xfffffff6
mov dword [ebp - 0xa54], 0x9646b8d9
mov dword [ebp - 0xa5c], 0xfffffffe
mov dword [ebp - 0xa64], 0xfd43
lea eax, [ebp - 0x144]
push eax
push 0
lea eax, [ebp - 0x9a4]
push eax
push 0x7516
push 0x4168
call fcn.10050327
add esp, 0x14
mov dword [ebp - 0x144], 0
jmp 0x100533bb
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 2
jge 0x100533d7
mov eax, dword [ebp - 0x144]
mov dword [ebp + eax*4 - 0xb44], 1
jmp 0x100533ae
mov eax, dword [ebp - 0x48c]
dec eax
mov dword [ebp - 0x48c], eax
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x9a4]
call fcn.1001b2cd
jmp 0x10053318
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9b4]
call fcn.1001b2cd
mov byte [ebp - 0x178], 4
mov byte [ebp - 0x177], 0x9e
mov byte [ebp - 0x176], 0
mov byte [ebp - 0x175], 5
mov byte [ebp - 0x174], 2
mov byte [ebp - 0x173], 6
mov byte [ebp - 0x172], 9
mov byte [ebp - 0x171], 7
mov byte [ebp - 0x170], 3
mov byte [ebp - 0x16f], 2
mov byte [ebp - 0x16e], 0x10
mov byte [ebp - 0x16d], 0x55
mov byte [ebp - 0x16c], 0x59
mov byte [ebp - 0x16b], 0x4c
mov byte [ebp - 0x16a], 0x9a
mov byte [ebp - 0x169], 0x14
mov byte [ebp - 0x168], 0xad
mov byte [ebp - 0x167], 0x71
mov byte [ebp - 0x166], 0x45
mov byte [ebp - 0x165], 0xbc
mov byte [ebp - 0x164], 0x5a
mov byte [ebp - 0x163], 0x22
mov byte [ebp - 0x162], 0x97
mov byte [ebp - 0x161], 5
mov byte [ebp - 0x160], 5
mov byte [ebp - 0x15f], 0xd0
mov byte [ebp - 0x15e], 0x4f
mov byte [ebp - 0x15d], 7
mov byte [ebp - 0x15c], 4
mov byte [ebp - 0x15b], 5
mov byte [ebp - 0x15a], 7
mov byte [ebp - 0x159], 1
mov byte [ebp - 0x158], 7
mov byte [ebp - 0x157], 6
mov byte [ebp - 0x156], 0xf
mov byte [ebp - 0x155], 8
mov byte [ebp - 0x154], 9
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x178]
or eax, 0xaa
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x178]
and ecx, 0xaa
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x178]
mov byte [ebp + ecx - 0x628], al
mov dword [ebp - 0x30], 2
and dword [ebp - 0xd8], 0
jmp 0x10053560
mov eax, dword [ebp - 0x30]
inc eax
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0x25
jae 0x1005363e
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x178]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x30], eax
jne 0x100535aa
mov eax, dword [ebp - 0x30]
movzx eax, byte [ebp + eax - 0x178]
inc eax
mov dword [ebp - 0xd8], eax
mov eax, dword [ebp - 0x30]
movzx eax, byte [ebp + eax - 0x178]
mov ecx, dword [ebp - 0x30]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x30], eax
jmp 0x10053558
mov eax, dword [ebp - 0x30]
movzx eax, byte [ebp + eax - 0x177]
mov ecx, dword [ebp - 0x30]
sub ecx, dword [ebp - 0xd8]
movzx ecx, byte [ebp + ecx - 0x17a]
movsx ecx, byte [ebp + ecx - 0x628]
add eax, ecx
mov ecx, dword [ebp - 0x30]
movzx ecx, byte [ebp + ecx - 0x177]
mov edx, dword [ebp - 0x30]
sub edx, dword [ebp - 0xd8]
movzx edx, byte [ebp + edx - 0x17a]
movsx edx, byte [ebp + edx - 0x628]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x30]
movzx ecx, byte [ebp + ecx - 0x177]
mov edx, dword [ebp - 0x30]
sub edx, dword [ebp - 0xd8]
movzx edx, byte [ebp + edx - 0x17a]
movsx edx, byte [ebp + edx - 0x628]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x30]
movzx ecx, byte [ebp + ecx - 0x178]
mov byte [ebp + ecx - 0x628], al
and dword [ebp - 0xd8], 0
jmp 0x10053558
xor eax, eax
inc eax
imul eax, eax, 0xa
mov byte [ebp + eax - 0x628], 0
mov dword [ebp - 0x108], 0xe0648261
push 3
lea ecx, [ebp - 0xa04]
call fcn.1001b24b
mov dword [ebp - 4], 9
mov dword [ebp - 0x554], 0xfffb
mov dword [ebp - 0x218], 0
jmp 0x1005368d
cmp dword [ebp - 0x218], 3
jge 0x100536af
push dword [ebp - 0x218]
lea ecx, [ebp - 0xa04]
call fcn.1001b2e9
mov dword [eax], 0x2e5664dc
jmp 0x10053680
push 1
lea eax, [ebp - 0x108]
push eax
call fcn.1004f3ec
pop ecx
pop ecx
mov dword [ebp - 0x108], 0x12
jmp 0x100536d8
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x6c0], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x6c8], eax
mov eax, dword [ebp - 0x6c0]
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0x6c8]
mov dword [ebp - 0x6d0], eax
mov eax, dword [ebp - 0x11c]
mov dword [eax], 0
jmp 0x10056264
mov eax, dword [ebp - 0x11c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x11c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x11c]
cmp dword [eax], 2
jge 0x1005628a
mov eax, dword [ebp - 0x11c]
push dword [eax]
mov ecx, dword [ebp - 0x6d0]
call fcn.1001b2e9
mov dword [eax], 0x915bb002
jmp 0x10056253
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret