Function at 0x10041004
Capabilities:
Contain obfuscated stackstrings
Enumerate pe sections
Get file system object information
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1007c807
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xb84
and dword [ebp - 0x18], 0
movzx eax, byte [ebp + 8]
test eax, eax
je 0x10045fe4
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x94], 7
mov dword [ebp - 0x294], 0xb903cfcb
mov dword [ebp - 0x808], 0xa925f321
mov dword [ebp - 0x94], 0xfffffff3
jmp 0x1004106f
mov eax, dword [ebp - 0x94]
dec eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0xffffffed
jg 0x1004135a
mov dword [ebp - 0xd0], 0x39e63a5b
mov dword [ebp - 0x2a8], 6
mov dword [ebp - 0x208], 0
jmp 0x100410a9
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 3
jge 0x100410c5
mov eax, dword [ebp - 0x208]
mov dword [ebp + eax*4 - 0x2f4], 0xd8e5ccc9
jmp 0x1004109c
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x2f4], 0xfffffff3
jmp 0x100410f0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2f4]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x2f4], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x2f4], 0xfffffffa
jge 0x10041355
mov dword [ebp - 0x44], 0xffffffff
mov dword [ebp - 0x44], 0
jmp 0x1004111a
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 6
je 0x10041250
mov dword [ebp - 0x720], 0xd711e7bf
cmp dword [ebp - 0x44], 3
je 0x10041217
mov eax, dword [ebp - 0x720]
mov dword [ebp - 0xa38], eax
cmp dword [ebp - 0x44], 0x7a10dd66
jne 0x10041162
cmp dword [ebp - 0x94], 0
je 0x10041162
mov dword [ebp - 0x3c4], 1
jmp 0x10041169
and dword [ebp - 0x3c4], 0
mov eax, dword [ebp - 0x3c4]
sub eax, 0xffff
cmp eax, dword [ebp - 0x44]
jg 0x10041185
mov dword [ebp - 0x7f8], 1
jmp 0x1004118c
and dword [ebp - 0x7f8], 0
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x920], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2f4]
mov dword [ebp - 0x928], eax
cmp dword [ebp - 0xd0], 0x57289c08
jl 0x100411c5
cmp dword [ebp - 0xd0], 0
jne 0x100411c5
and dword [ebp - 0x67c], 0
jmp 0x100411cf
mov dword [ebp - 0x67c], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2f4]
cmp eax, dword [ebp - 0x67c]
je 0x100411ef
mov dword [ebp - 0x684], 1
jmp 0x100411f6
and dword [ebp - 0x684], 0
mov eax, dword [ebp - 0x684]
mov dword [ebp - 0x294], eax
cmp dword [ebp - 0xd0], 0
je 0x10041217
mov dword [ebp - 0x800], 1
jmp 0x1004121e
and dword [ebp - 0x800], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2f4]
mov dword [ebp - 0x930], eax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x808], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x2f4], 0
je 0x1004124b
jmp 0x10041250
jmp 0x10041113
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2f4]
mov dword [ebp - 0x938], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2f4]
mov ecx, dword [ebp - 0x94]
imul ecx, dword [ebp - 0x44]
sub eax, ecx
imul eax, eax, 0x4e81
cmp eax, dword [ebp - 0x2a8]
jl 0x10041294
mov dword [ebp - 0x810], 1
jmp 0x1004129b
and dword [ebp - 0x810], 0
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x940], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2f4]
mov dword [ebp - 0x948], eax
mov eax, dword [ebp - 0x2a8]
cmp dword [ebp - 0x44], eax
je 0x100412cd
mov dword [ebp - 0x68c], 1
jmp 0x100412d4
and dword [ebp - 0x68c], 0
cmp dword [ebp - 0x68c], 0x8db1
jg 0x100412ec
mov dword [ebp - 0x694], 1
jmp 0x100412f3
and dword [ebp - 0x694], 0
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0x950], eax
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0x958], eax
mov eax, dword [ebp - 0x694]
mov dword [ebp - 0x294], eax
mov eax, dword [ebp - 0x294]
mov dword [ebp - 0x960], eax
mov eax, dword [ebp - 0x2a8]
cmp dword [ebp - 0x94], eax
je 0x1004133d
mov dword [ebp - 0x69c], 1
jmp 0x10041344
and dword [ebp - 0x69c], 0
mov eax, dword [ebp - 0x69c]
mov dword [ebp - 0xd0], eax
jmp 0x100410d7
jmp 0x10041062
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x6a4], eax
mov dword [ebp - 0x12c], 0xe387fb0b
mov dword [ebp - 0x210], 0
jmp 0x10041386
mov eax, dword [ebp - 0x210]
inc eax
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 2
jge 0x100413a2
mov eax, dword [ebp - 0x210]
mov dword [ebp + eax*4 - 0x96c], 0xfffffff8
jmp 0x10041379
mov dword [ebp - 0x12c], 0
jmp 0x100413bb
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 2
jge 0x100413d7
mov eax, dword [ebp - 0x12c]
mov dword [ebp + eax*4 - 0x96c], 0x971c1ec2
jmp 0x100413ae
mov byte [ebp - 0x8c], 0
push 0x46ad
push 0x154a
lea eax, [ebp - 0x8c]
push eax
push 0x208f
push 1
push 0x3c3f
call fcn.1003ffef
add esp, 0x18
mov eax, dword [ebp - 0x6a4]
movzx eax, word [eax]
cmp eax, 0x5a4d
je 0x10041418
jmp 0x10045fee
mov eax, dword [ebp - 0x6a4]
mov ecx, dword [ebp - 0x30]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0x818], 0x6e871d97
mov dword [ebp - 0x218], 0
jmp 0x1004144d
mov eax, dword [ebp - 0x218]
inc eax
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 4
jge 0x10041469
mov eax, dword [ebp - 0x218]
mov dword [ebp + eax*4 - 0xaec], 0x42c70bb7
jmp 0x10041440
mov byte [ebp - 0xa5], 0
lea eax, [ebp - 0xa5]
push eax
push 0x164f
push 0
call fcn.10040b95
add esp, 0xc
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xaec]
mov dword [ebp - 0x818], eax
mov eax, dword [ebp - 0xbc]
cmp dword [eax], 0x4550
je 0x100414ac
jmp 0x10045fee
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xbc]
lea eax, [ecx + eax + 0x78]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x9c], 8
mov dword [ebp - 0x64], 0
jmp 0x100414d9
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 1
jge 0x100414ef
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x2b0], 1
jmp 0x100414d2
mov dword [ebp - 0x64], 0
jmp 0x100414ff
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 2
jge 0x10041515
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0xa7c], 0x6085e071
jmp 0x100414f8
mov dword [ebp - 0x9c], 0
jmp 0x1004152e
mov eax, dword [ebp - 0x9c]
dec eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0
jl 0x10041646
mov dword [ebp - 0x1e4], 0x1ded6804
mov dword [ebp - 0x820], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x9c]
cmp dword [ebp + eax - 0x2b0], ecx
jg 0x10041570
mov dword [ebp - 0x6d0], 1
jmp 0x10041577
and dword [ebp - 0x6d0], 0
mov eax, dword [ebp - 0x6d0]
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 0
je 0x1004162e
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2b0]
add eax, dword [ebp - 0x1e4]
mov dword [ebp - 0x6d8], eax
mov eax, dword [ebp - 0x9c]
mov ecx, dword [ebp - 0x6d8]
mov dword [ebp + eax*4 - 0x2b0], ecx
cmp dword [ebp - 0x6d8], 0xfffffffd
jae 0x100415d1
mov dword [ebp - 0x6e0], 1
jmp 0x100415d8
and dword [ebp - 0x6e0], 0
cmp dword [ebp - 0x6e0], 0xfffffff6
je 0x100415ed
mov dword [ebp - 0x6e8], 1
jmp 0x100415f4
and dword [ebp - 0x6e8], 0
mov eax, dword [ebp - 0x1e4]
cmp dword [ebp - 0x6e8], eax
jle 0x1004160e
mov dword [ebp - 0x6bc], 1
jmp 0x10041615
and dword [ebp - 0x6bc], 0
mov eax, 0x7df
sub eax, dword [ebp - 0x6bc]
je 0x1004162e
mov dword [ebp - 0x528], 1
jmp 0x10041635
and dword [ebp - 0x528], 0
mov eax, dword [ebp - 0x528]
mov dword [ebp - 0x820], eax
jmp 0x10041521
push 0x6163
push 0x1d35
push 0x69fe
push 0x36e9
push 0
push 0x6235
push 0x4b55
push 0x739
lea eax, [ebp - 0x9c]
push eax
call fcn.100400c1
add esp, 0x24
mov eax, dword [ebp - 0x48]
cmp dword [eax + 4], 0
jne 0x10041688
jmp 0x10045fee
mov dword [ebp - 0x828], 0xa9ac70c3
mov dword [ebp - 0x864], 0
mov dword [ebp - 0x854], 0xfffffffb
mov dword [ebp - 0x85c], 9
mov dword [ebp - 0x86c], 0x626a9d9e
mov dword [ebp - 0x9c8], 3
lea eax, [ebp - 0x828]
push eax
push 0
lea eax, [ebp - 0x854]
push eax
push 0x58d6
push 0x6626
lea eax, [ebp - 0x85c]
push eax
lea eax, [ebp - 0x864]
push eax
lea eax, [ebp - 0x86c]
push eax
call fcn.10040e17
add esp, 0x20
mov byte [ebp - 0xc5], 0
movzx eax, byte [ebp - 0xc5]
test eax, eax
je 0x1004171b
push 0
push 0x62b3
call fcn.10040c8c
pop ecx
pop ecx
and dword [ebp - 0x2c], 0
mov dword [ebp - 0xac], 0xfffffffe
mov dword [ebp - 0xa4], 0xfffffffd
mov dword [ebp - 0x87c], 0xfffa
mov dword [ebp - 0x89c], 0x51f0ef2f
mov dword [ebp - 0x7f0], 0xfffffffd
mov dword [ebp - 0x894], 0xfffffffd
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0x9d0], eax
cmp dword [ebp - 0xac], 0
jne 0x1004178c
mov eax, dword [ebp - 0xac]
sub eax, 0x3e81a3d8
mov dword [ebp - 0xa4], eax
jne 0x1004178c
and dword [ebp - 0x634], 0
jmp 0x10041796
mov dword [ebp - 0x634], 1
mov eax, dword [ebp - 0xac]
cmp eax, dword [ebp - 0x634]
jl 0x100417b0
mov dword [ebp - 0x874], 1
jmp 0x100417b7
and dword [ebp - 0x874], 0
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0x9d8], eax
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0x9e0], eax
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x87c], eax
mov dword [ebp - 0xa4], 0xfffffffe
jmp 0x100417f4
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0x11
jne 0x1004186b
mov dword [ebp - 0x324], 0xe76373a4
mov dword [ebp - 0x878], 0
mov dword [ebp - 0x868], 0x1e33
cmp dword [ebp - 0x324], 0
je 0x10041826
jmp 0x1004186b
lea eax, [ebp - 0xac]
push eax
lea eax, [ebp - 0x894]
push eax
lea eax, [ebp - 0x89c]
push eax
lea eax, [ebp - 0x868]
push eax
push 1
lea eax, [ebp - 0x324]
push eax
lea eax, [ebp - 0x878]
push eax
lea eax, [ebp - 0x7f0]
push eax
push 0x5bd3
call fcn.100400c1
add esp, 0x24
jmp 0x100417e7
mov eax, dword [ebp - 0xbc]
movzx eax, word [eax + 0x14]
mov ecx, dword [ebp - 0xbc]
lea eax, [ecx + eax + 0x18]
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x64c], 1
mov dword [ebp - 0x74], 0x41449c9f
mov dword [ebp - 0x644], 0
mov dword [ebp - 0x214], 0
jmp 0x100418b9
mov eax, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 2
jge 0x100418d5
mov eax, dword [ebp - 0x214]
mov dword [ebp + eax*4 - 0x8b8], 0xafa32fd2
jmp 0x100418ac
xor eax, eax
inc eax
je 0x10041968
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x9e8], eax
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x74], eax
je 0x100418fb
mov dword [ebp - 0x63c], 1
jmp 0x10041902
and dword [ebp - 0x63c], 0
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x63c], eax
jle 0x10041919
mov dword [ebp - 0x32c], 1
jmp 0x10041920
and dword [ebp - 0x32c], 0
mov eax, dword [ebp - 0x74]
imul eax, dword [ebp - 0x32c]
mov dword [ebp - 0x644], eax
mov eax, dword [ebp - 0x644]
cmp dword [ebp - 0x74], eax
jle 0x10041947
mov dword [ebp - 0x334], 1
jmp 0x1004194e
and dword [ebp - 0x334], 0
mov eax, dword [ebp - 0x74]
add eax, dword [ebp - 0x334]
mov dword [ebp - 0x74], eax
je 0x10041968
mov dword [ebp - 0x33c], 1
jmp 0x1004196f
and dword [ebp - 0x33c], 0
mov dword [ebp - 0x64c], 0xfffffffe
mov eax, dword [ebp - 0x64c]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x8b8]
add ecx, dword [ebp - 0x33c]
sub eax, ecx
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x8b8], eax
mov byte [ebp - 0x95], 0
movzx eax, byte [ebp - 0x95]
test eax, eax
je 0x100419bb
push 1
call fcn.10040238
pop ecx
and dword [ebp - 0x2b8], 0
jmp 0x100419e0
mov eax, dword [ebp - 0x2b8]
inc eax
mov dword [ebp - 0x2b8], eax
mov eax, dword [ebp - 0x88]
add eax, 0x28
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0xbc]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x2b8], eax
jge 0x10041a79
mov eax, dword [ebp - 0x88]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x654], eax
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x654]
jb 0x10041a74
mov eax, dword [ebp - 0xbc]
push dword [eax + 0x38]
mov eax, dword [ebp - 0x88]
push dword [eax + 8]
call fcn.1003ffc0
pop ecx
pop ecx
add eax, dword [ebp - 0x654]
mov dword [ebp - 0x72c], eax
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x72c]
jae 0x10041a74
push 0
lea eax, [ebp - 0x88]
push eax
push 0x3e60
push 0x4e03
push 0x1528
lea eax, [ebp - 0x2c]
push eax
push 0x3f74
push 0x41c0
call fcn.10040bdc
add esp, 0x20
jmp 0x10041a79
jmp 0x100419c4
mov dword [ebp - 0x9f0], 1
mov dword [ebp - 0x9f8], 0xa394643c
mov dword [ebp - 0xa10], 0x9c17633e
mov dword [ebp - 0xa18], 0xffffffff
mov dword [ebp - 0xa20], 0xffffffff
mov dword [ebp - 0x8e8], 0x8a973314
mov dword [ebp - 0x8e4], 0x8a973314
mov dword [ebp - 0x8e0], 0x8a973314
mov dword [ebp - 0x8dc], 0x8a973314
mov dword [ebp - 0x200], 0
jmp 0x10041aec
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 2
jge 0x10041b08
mov eax, dword [ebp - 0x200]
mov dword [ebp + eax*4 - 0xa84], 9
jmp 0x10041adf
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x8e8]
inc eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x8e8], eax
cmp dword [ebp - 0x2c], 0
jne 0x10041b2e
jmp 0x10045fee
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x2c]
add ecx, dword [eax]
add ecx, dword [ebp - 0x30]
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x128], 0xffffffff
mov dword [ebp - 0x7f4], 0
mov dword [ebp - 0x7fc], 0x39e63a5b
mov dword [ebp - 0x128], 0
jmp 0x10041b73
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0x11
jg 0x10041c0c
mov dword [ebp - 0x744], 1
mov dword [ebp - 0x858], 0x9f5954e3
mov dword [ebp - 0x734], 1
mov dword [ebp - 0x73c], 0x87a912e7
mov dword [ebp - 0x8a0], 7
lea eax, [ebp - 0x128]
push eax
lea eax, [ebp - 0x7f4]
push eax
lea eax, [ebp - 0x734]
push eax
lea eax, [ebp - 0x858]
push eax
push 0
lea eax, [ebp - 0x73c]
push eax
lea eax, [ebp - 0x7fc]
push eax
push 0x145c
push 0x782a
lea eax, [ebp - 0x744]
push eax
call fcn.10040464
add esp, 0x28
push 1
lea eax, [ebp - 0x8a0]
push eax
call fcn.1004025e
pop ecx
pop ecx
jmp 0x10041b66
xor ecx, ecx
call fcn.1002ec3c
push eax
call fcn.10061768
pop ecx
mov dword [ebp - 0x804], 0xb5c74600
mov dword [ebp - 0x34], 0
jmp 0x10041c34
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 2
jge 0x10041c4a
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x280], 6
jmp 0x10041c2d
mov dword [ebp - 0x34], 0
jmp 0x10041c5a
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 3
jge 0x10041c70
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0xf4], 8
jmp 0x10041c53
mov dword [ebp - 0x34], 0
jmp 0x10041c80
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 1
jge 0x10041c96
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x2c0], 8
jmp 0x10041c79
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xf4], 0
jmp 0x10041cc4
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf4]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xf4], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xf4], 1
jg 0x100420b6
mov dword [ebp - 0x188], 0
jmp 0x10041cf1
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 3
jge 0x10041d0d
mov eax, dword [ebp - 0x188]
mov dword [ebp + eax*4 - 0x71c], 0
jmp 0x10041ce4
mov byte [ebp - 0x9d], 0
movzx eax, byte [ebp - 0x9d]
test eax, eax
je 0x10041d2d
push 0x3cda
push 0
call fcn.100409fe
pop ecx
pop ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf4]
mov eax, dword [ebp + eax*4 - 0x280]
mov dword [ebp - 0x344], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x344]
mov dword [ebp + eax - 0x2c0], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf4]
cmp dword [ebp - 0x344], eax
jne 0x10041d7b
mov dword [ebp - 0x65c], 1
jmp 0x10041d82
and dword [ebp - 0x65c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf4]
mov ecx, dword [ebp - 0x65c]
sub ecx, dword [ebp + eax*4 - 0x280]
push 4
pop eax
imul eax, eax, 0
cmp ecx, dword [ebp + eax - 0xf4]
jg 0x10041db7
mov dword [ebp - 0x34c], 1
jmp 0x10041dbe
and dword [ebp - 0x34c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf4]
mov eax, dword [ebp + eax*4 - 0x280]
cmp dword [ebp - 0x34c], eax
jl 0x10041de6
mov dword [ebp - 0x664], 1
jmp 0x10041ded
and dword [ebp - 0x664], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf4]
push 4
pop ecx
imul ecx, ecx, 0
mov edx, dword [ebp - 0x664]
sub edx, dword [ebp + ecx - 0xf4]
cmp dword [ebp + eax*4 - 0x280], edx
jne 0x10041e22
mov dword [ebp - 0x354], 1
jmp 0x10041e29
and dword [ebp - 0x354], 0
cmp dword [ebp - 0x354], 0xc34ccbb2
jbe 0x10041e41
mov dword [ebp - 0x66c], 1
jmp 0x10041e48
and dword [ebp - 0x66c], 0
mov eax, dword [ebp - 0x66c]
add eax, 0x5f5c
je 0x10041e71
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xf4], 0
je 0x10041e71
mov dword [ebp - 0x674], 1
jmp 0x10041e78
and dword [ebp - 0x674], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf4]
mov eax, dword [ebp + eax*4 - 0x280]
cmp eax, dword [ebp - 0x674]
jl 0x10041ea5
or eax, 0xffffffff
je 0x10041ea5
mov dword [ebp - 0x360], 1
jmp 0x10041eac
and dword [ebp - 0x360], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xf4]
cmp dword [ebp - 0x360], eax
je 0x10041ecc
mov dword [ebp - 0x610], 1
jmp 0x10041ed3
and dword [ebp - 0x610], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf4]
mov eax, dword [ebp + eax*4 - 0x280]
cmp dword [ebp - 0x610], eax
jge 0x10041efb
mov dword [ebp - 0x74c], 1
jmp 0x10041f02
and dword [ebp - 0x74c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf4]
mov eax, dword [ebp + eax*4 - 0x280]
mov dword [ebp - 0xa28], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x71c]
cmp dword [ebp + eax - 0x2c0], ecx
jge 0x10041f43
mov dword [ebp - 0x368], 1
jmp 0x10041f4a
and dword [ebp - 0x368], 0
cmp dword [ebp - 0x368], 0x4ffdeabf
jg 0x10041f62
mov dword [ebp - 0x530], 1
jmp 0x10041f69
and dword [ebp - 0x530], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x71c]
cmp dword [ebp - 0x530], eax
jl 0x10041f89
mov dword [ebp - 0x370], 1
jmp 0x10041f90
and dword [ebp - 0x370], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x71c]
cmp dword [ebp - 0x370], eax
jle 0x10041fc0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x280], 0
je 0x10041fc0
mov dword [ebp - 0x6d4], 1
jmp 0x10041fc7
and dword [ebp - 0x6d4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xf4]
cmp dword [ebp - 0x6d4], eax
jg 0x10041fe8
mov dword [ebp - 0x378], 1
jmp 0x10041fef
and dword [ebp - 0x378], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x71c]
cmp dword [ebp - 0x378], eax
jne 0x10042010
mov dword [ebp - 0x538], 1
jmp 0x10042017
and dword [ebp - 0x538], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x71c]
cmp dword [ebp - 0x538], eax
je 0x10042045
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xf4], 0
jne 0x10042045
and dword [ebp - 0x380], 0
jmp 0x1004204f
mov dword [ebp - 0x380], 1
or eax, 0xffffffff
sub eax, dword [ebp - 0x380]
jne 0x10042073
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2c0], 0
jne 0x10042073
and dword [ebp - 0x618], 0
jmp 0x1004207d
mov dword [ebp - 0x618], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x71c]
cmp dword [ebp - 0x618], eax
jle 0x1004209d
mov dword [ebp - 0x388], 1
jmp 0x100420a4
and dword [ebp - 0x388], 0
mov eax, dword [ebp - 0x388]
dec eax
mov dword [ebp - 0x804], eax
jmp 0x10041ca9
mov dword [ebp - 0x2c8], 0
mov dword [ebp - 0x190], 0xc0f8067e
mov dword [ebp - 0x2e4], 0
mov dword [ebp - 0xe4], 0x73e7ed6f
mov dword [ebp - 0x1dc], 0xffffffff
mov dword [ebp - 0x2d0], 0xfffffffe
mov dword [ebp - 0x860], 1
mov dword [ebp - 0x75c], 0x4eb300a9
mov dword [ebp - 0x54], 0
jmp 0x10042116
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 2
jge 0x1004212c
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x314], 0x12dc
jmp 0x1004210f
mov dword [ebp - 0x54], 0
jmp 0x1004213c
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 4
jge 0x10042152
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0xa5c], 9
jmp 0x10042135
cmp dword [ebp - 0x2c8], 0
jne 0x10042174
mov eax, dword [ebp - 0x2c8]
neg eax
cmp eax, dword [ebp - 0x2c8]
jge 0x10042174
and dword [ebp - 0x3a8], 0
jmp 0x1004217e
mov dword [ebp - 0x3a8], 1
cmp dword [ebp - 0x1dc], 0
je 0x10042197
xor eax, eax
je 0x10042197
mov dword [ebp - 0x540], 1
jmp 0x1004219e
and dword [ebp - 0x540], 0
cmp dword [ebp - 0x540], 0xcb44
jge 0x100421b6
mov dword [ebp - 0x390], 1
jmp 0x100421bd
and dword [ebp - 0x390], 0
mov eax, dword [ebp - 0x1dc]
cmp dword [ebp - 0x390], eax
jl 0x100421d7
mov dword [ebp - 0x688], 1
jmp 0x100421de
and dword [ebp - 0x688], 0
mov eax, dword [ebp - 0x688]
sub eax, dword [ebp - 0x1dc]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x314]
je 0x10042205
mov dword [ebp - 0x398], 1
jmp 0x1004220c
and dword [ebp - 0x398], 0
mov eax, dword [ebp - 0x398]
mov dword [ebp - 0x2d0], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x314]
cmp dword [ebp - 0x2d0], eax
jne 0x10042239
mov dword [ebp - 0x754], 1
jmp 0x10042240
and dword [ebp - 0x754], 0
mov eax, dword [ebp - 0x2e4]
mov dword [ebp - 0xa30], eax
or eax, 0xffffffff
cmp eax, 0xe0b2
jg 0x10042262
mov dword [ebp - 0x548], 1
jmp 0x10042269
and dword [ebp - 0x548], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x314]
imul eax, dword [ebp - 0x548]
cmp eax, dword [ebp - 0x860]
jge 0x10042291
mov dword [ebp - 0x3a0], 1
jmp 0x10042298
and dword [ebp - 0x3a0], 0
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
mov eax, dword [ebp - 0xe4]
imul ecx, dword [ebp - 0x3a0], 0xe69
imul ecx, ecx, 0xfffe
imul eax, ecx
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0xa5c]
jne 0x100422d9
mov dword [ebp - 0x620], 1
jmp 0x100422e0
and dword [ebp - 0x620], 0
cmp dword [ebp - 0x620], 0x47aa2967
jl 0x100422fd
or eax, 0xffffffff
je 0x100422fd
mov dword [ebp - 0x550], 1
jmp 0x10042304
and dword [ebp - 0x550], 0
mov eax, dword [ebp - 0x3a8]
mov dword [ebp - 0x190], eax
mov eax, dword [ebp - 0x190]
cmp eax, dword [ebp - 0x550]
je 0x1004232a
mov dword [ebp - 0x3b0], 1
jmp 0x10042331
and dword [ebp - 0x3b0], 0
mov eax, dword [ebp - 0x3b0]
mov dword [ebp - 0x75c], eax
cmp dword [ebp - 0x1dc], 0
jne 0x10042352
mov dword [ebp - 0x6c4], 1
jmp 0x10042359
and dword [ebp - 0x6c4], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x314], 0
je 0x1004237e
mov eax, 0xe86d
test eax, eax
je 0x1004237e
mov dword [ebp - 0x3b8], 1
jmp 0x10042385
and dword [ebp - 0x3b8], 0
mov eax, dword [ebp - 0x6c4]
cmp eax, dword [ebp - 0x3b8]
jl 0x1004239f
mov dword [ebp - 0x558], 1
jmp 0x100423a6
and dword [ebp - 0x558], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x314]
imul eax, dword [ebp - 0x558]
test eax, eax
jne 0x100423c5
cmp dword [ebp - 0xe4], 0
push 8
pop eax
test eax, eax
je 0x100423e8
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x314], 0
je 0x100423e8
mov dword [ebp - 0x3c0], 1
jmp 0x100423ef
and dword [ebp - 0x3c0], 0
imul eax, dword [ebp - 0x3c0], 0x1e16
cmp eax, 0x25f8
je 0x10042415
cmp dword [ebp - 0xe4], 0
je 0x10042415
mov dword [ebp - 0x80c], 1
jmp 0x1004241c
and dword [ebp - 0x80c], 0
mov eax, dword [ebp - 0x2d0]
mov dword [ebp - 0x914], eax
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0xa40], eax
mov dword [ebp - 0x2e4], 1
cmp dword [ebp - 0x2e4], 0
je 0x1004245c
mov eax, 0x5b3b
test eax, eax
je 0x1004245c
mov dword [ebp - 0x764], 1
jmp 0x10042463
and dword [ebp - 0x764], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa5c]
mov dword [ebp - 0xa48], eax
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x190], eax
mov byte [ebp - 0x178], 5
mov byte [ebp - 0x177], 0x56
mov byte [ebp - 0x176], 3
mov byte [ebp - 0x175], 6
mov byte [ebp - 0x174], 0
mov byte [ebp - 0x173], 6
mov byte [ebp - 0x172], 7
mov byte [ebp - 0x171], 7
mov byte [ebp - 0x170], 2
mov byte [ebp - 0x16f], 1
mov byte [ebp - 0x16e], 9
mov byte [ebp - 0x16d], 7
mov byte [ebp - 0x16c], 0x16
mov byte [ebp - 0x16b], 0x2a
mov byte [ebp - 0x16a], 0xcf
mov byte [ebp - 0x169], 0x1d
mov byte [ebp - 0x168], 0x94
mov byte [ebp - 0x167], 0xc
mov byte [ebp - 0x166], 0xe6
mov byte [ebp - 0x165], 0xbc
mov byte [ebp - 0x164], 0x41
mov byte [ebp - 0x163], 0xa9
mov byte [ebp - 0x162], 0xa3
mov byte [ebp - 0x161], 0x9a
mov byte [ebp - 0x160], 0x5b
mov byte [ebp - 0x15f], 0x7e
mov byte [ebp - 0x15e], 0x2d
mov byte [ebp - 0x15d], 0xd1
mov byte [ebp - 0x15c], 0x1e
mov byte [ebp - 0x15b], 0xd1
mov byte [ebp - 0x15a], 0xc9
mov byte [ebp - 0x159], 0x51
mov byte [ebp - 0x158], 0x34
mov byte [ebp - 0x157], 0x90
mov byte [ebp - 0x156], 0xcf
mov byte [ebp - 0x155], 4
mov byte [ebp - 0x154], 8
mov byte [ebp - 0x153], 6
mov byte [ebp - 0x152], 9
mov byte [ebp - 0x151], 1
mov byte [ebp - 0x150], 4
mov byte [ebp - 0x14f], 8
mov byte [ebp - 0x14e], 5
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x178]
or eax, 0x67
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x178]
and ecx, 0x67
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x178]
mov byte [ebp + ecx - 0x6f4], al
mov dword [ebp - 0x20], 2
and dword [ebp - 0x118], 0
jmp 0x10042600
mov eax, dword [ebp - 0x20]
inc eax
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x2b
jae 0x100426e7
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x178]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x20], eax
jne 0x1004264a
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x178]
inc eax
mov dword [ebp - 0x118], eax
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x178]
mov ecx, dword [ebp - 0x20]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x20], eax
jmp 0x100425f8
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x177]
mov ecx, dword [ebp - 0x20]
sub ecx, dword [ebp - 0x118]
movzx ecx, byte [ebp + ecx - 0x17a]
movsx ecx, byte [ebp + ecx - 0x6f4]
add eax, ecx
mov ecx, dword [ebp - 0x20]
movzx ecx, byte [ebp + ecx - 0x177]
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x118]
movzx edx, byte [ebp + edx - 0x17a]
movsx edx, byte [ebp + edx - 0x6f4]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x20]
movzx ecx, byte [ebp + ecx - 0x177]
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x118]
movzx edx, byte [ebp + edx - 0x17a]
movsx edx, byte [ebp + edx - 0x6f4]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x20]
movzx ecx, byte [ebp + ecx - 0x178]
mov byte [ebp + ecx - 0x6f4], al
lea eax, [ebp - 0x118]
push eax
push 1
call fcn.100402ae
pop ecx
pop ecx
jmp 0x100425f8
xor eax, eax
inc eax
imul eax, eax, 0xa
mov byte [ebp + eax - 0x6f4], 0
mov dword [ebp - 0x6c], 0x25b9b55b
mov dword [ebp - 0x70], 1
mov dword [ebp - 0x30c], 0xad8ea5f3
mov dword [ebp - 0x6c], 0xfffffffc
jmp 0x1004271d
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0x16
jge 0x10042a53
mov dword [ebp - 0x78], 0x7f609b2b
mov dword [ebp - 0x198], 0x51aaf19
mov byte [ebp - 0xca], 0
movzx eax, byte [ebp - 0xca]
test eax, eax
je 0x10042752
push 0
call dword [sym.imp.COMDLG32.dll_GetOpenFileNameW]
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0xa04], eax
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x984], eax
cmp dword [ebp - 0x70], 0
jne 0x10042782
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x91c], eax
cmp dword [ebp - 0x6c], 0
jne 0x10042782
and dword [ebp - 0x628], 0
jmp 0x1004278c
mov dword [ebp - 0x628], 1
mov eax, dword [ebp - 0x628]
sub eax, dword [ebp - 0x78]
je 0x100427ac
mov eax, 0xde6f
test eax, eax
je 0x100427ac
mov dword [ebp - 0x3c8], 1
jmp 0x100427b3
and dword [ebp - 0x3c8], 0
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x3c8], eax
jne 0x100427ca
mov dword [ebp - 0x560], 1
jmp 0x100427d1
and dword [ebp - 0x560], 0
mov eax, dword [ebp - 0x30c]
cmp dword [ebp - 0x560], eax
jge 0x100427eb
mov dword [ebp - 0x3d0], 1
jmp 0x100427f2
and dword [ebp - 0x3d0], 0
mov eax, dword [ebp - 0x70]
add eax, dword [ebp - 0x3d0]
je 0x10042882
mov dword [ebp - 0x78], 0
jmp 0x10042811
mov eax, dword [ebp - 0x78]
dec eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0xfffffffe
jge 0x1004287d
mov dword [ebp - 0x1fc], 0
jmp 0x10042830
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 2
jge 0x1004284c
mov eax, dword [ebp - 0x1fc]
mov dword [ebp + eax*4 - 0xac4], 1
jmp 0x10042823
mov dword [ebp - 0x70], 0
jmp 0x1004285c
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 1
jg 0x1004287b
mov byte [ebp - 0xc8], 0
push 0
lea eax, [ebp - 0xc8]
push eax
call fcn.1004038f
pop ecx
pop ecx
jmp 0x10042855
jmp 0x1004280a
jmp 0x10042a4e
mov dword [ebp - 0x1ac], 0x870af03f
mov dword [ebp - 0x880], 0xffffffff
mov eax, 0xee72c34c
test eax, eax
je 0x1004299f
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0xa1c], eax
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x924], eax
cmp dword [ebp - 0x1ac], 0xfffd
jne 0x100428cd
mov dword [ebp - 0x690], 1
jmp 0x100428d4
and dword [ebp - 0x690], 0
mov eax, dword [ebp - 0x78]
cmp dword [ebp - 0x690], eax
jle 0x100428eb
mov dword [ebp - 0x3d8], 1
jmp 0x100428f2
and dword [ebp - 0x3d8], 0
cmp dword [ebp - 0x3d8], 0xbe18
jle 0x1004290a
mov dword [ebp - 0x568], 1
jmp 0x10042911
and dword [ebp - 0x568], 0
mov eax, dword [ebp - 0x568]
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0
jne 0x1004292e
or eax, 0xffffffff
jne 0x1004292e
and dword [ebp - 0x3e0], 0
jmp 0x10042938
mov dword [ebp - 0x3e0], 1
mov eax, dword [ebp - 0x198]
cmp dword [ebp - 0x3e0], eax
jge 0x10042952
mov dword [ebp - 0x630], 1
jmp 0x10042959
and dword [ebp - 0x630], 0
mov eax, dword [ebp - 0x630]
sub eax, 0x5c74
sub eax, dword [ebp - 0x70]
cmp eax, dword [ebp - 0x198]
jne 0x1004297b
mov dword [ebp - 0x3e8], 1
jmp 0x10042982
and dword [ebp - 0x3e8], 0
mov eax, dword [ebp - 0x1ac]
imul eax, dword [ebp - 0x3e8]
shl eax, 1
je 0x1004299f
mov dword [ebp - 0x570], 1
jmp 0x100429a6
and dword [ebp - 0x570], 0
mov eax, dword [ebp - 0x198]
cmp dword [ebp - 0x570], eax
jge 0x100429c0
mov dword [ebp - 0x3f0], 1
jmp 0x100429c7
and dword [ebp - 0x3f0], 0
mov eax, dword [ebp - 0x30c]
mov ecx, dword [ebp - 0x3f0]
lea eax, [ecx + eax - 6]
cmp eax, dword [ebp - 0x198]
jle 0x100429eb
mov dword [ebp - 0x6e4], 1
jmp 0x100429f2
and dword [ebp - 0x6e4], 0
mov eax, dword [ebp - 0x1ac]
cmp dword [ebp - 0x6e4], eax
je 0x10042a0c
mov dword [ebp - 0x3f8], 1
jmp 0x10042a13
and dword [ebp - 0x3f8], 0
mov eax, dword [ebp - 0x1ac]
cmp dword [ebp - 0x3f8], eax
je 0x10042a2d
mov dword [ebp - 0x578], 1
jmp 0x10042a34
and dword [ebp - 0x578], 0
mov eax, dword [ebp - 0x578]
mov dword [ebp - 0x880], eax
cmp dword [ebp - 0x30c], 0
je 0x10042a4e
jmp 0x10042716
jmp 0x10042716
lea eax, [ebp - 0x6f4]
push eax
lea ecx, [ebp - 0xb0c]
call fcn.10024a04
mov dword [ebp - 0x76c], eax
mov eax, dword [ebp - 0x76c]
mov dword [ebp - 0x814], eax
and dword [ebp - 4], 0
push 0xa
xor edx, edx
mov ecx, dword [ebp - 0x814]
call fcn.1002ebfc
pop ecx
mov dword [ebp - 0x7c4], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb0c]
call fcn.10017f9d
mov dword [ebp - 0xb4], 0xfffffffd
mov dword [ebp - 0x1b8], 1
mov dword [ebp - 0x410], 0x18ee85ec
mov dword [ebp - 0x784], 0xfff6
mov dword [ebp - 0x8d8], 9
mov dword [ebp - 0x8d4], 9
mov dword [ebp - 0x8d0], 9
mov dword [ebp - 0x8cc], 9
mov dword [ebp - 0x1a0], 0
jmp 0x10042b09
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 2
jge 0x10042b25
mov eax, dword [ebp - 0x1a0]
mov dword [ebp + eax*4 - 0x6b0], 0x5bed8572
jmp 0x10042afc
mov dword [ebp - 0xb4], 0x13
jmp 0x10042b3e
mov eax, dword [ebp - 0xb4]
dec eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 7
jne 0x10042f19
mov dword [ebp - 0x830], 0xffffffff
mov dword [ebp - 0x1a8], 0x14e76493
mov dword [ebp - 0x1b0], 0
jmp 0x10042b78
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 3
jge 0x10042b94
mov eax, dword [ebp - 0x1b0]
mov dword [ebp + eax*4 - 0x88c], 6
jmp 0x10042b6b
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xb4]
push 4
pop edx
shl edx, 1
sub ecx, dword [ebp + edx - 0x88c]
cmp dword [ebp + eax - 0x88c], ecx
jl 0x10042bc0
mov dword [ebp - 0x774], 1
jmp 0x10042bc7
and dword [ebp - 0x774], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x88c]
mov dword [ebp - 0x9e4], eax
cmp dword [ebp - 0x1b8], 0xfffffffa
je 0x10042be9
cmp dword [ebp - 0x1b8], 0
cmp dword [ebp - 0xb4], 0x5954
je 0x10042c01
mov dword [ebp - 0x400], 1
jmp 0x10042c08
and dword [ebp - 0x400], 0
mov eax, dword [ebp - 0x830]
cmp dword [ebp - 0x400], eax
jle 0x10042c22
mov dword [ebp - 0x638], 1
jmp 0x10042c29
and dword [ebp - 0x638], 0
cmp dword [ebp - 0x638], 0xfffffffa
jl 0x10042c3e
mov dword [ebp - 0x408], 1
jmp 0x10042c45
and dword [ebp - 0x408], 0
mov eax, dword [ebp - 0xb4]
cmp dword [ebp - 0x408], eax
je 0x10042c5f
mov dword [ebp - 0x580], 1
jmp 0x10042c66
and dword [ebp - 0x580], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x88c]
cmp dword [ebp - 0x580], eax
je 0x10042c86
mov dword [ebp - 0x77c], 1
jmp 0x10042c8d
and dword [ebp - 0x77c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x88c]
mov dword [ebp - 0x92c], eax
mov dword [ebp - 0x410], 0x46773196
mov eax, dword [ebp - 0x410]
add eax, 0x51acae7b
mov dword [ebp - 0x1a8], eax
mov eax, dword [ebp - 0x1a8]
mov dword [ebp - 0x698], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x698]
mov dword [ebp + eax - 0x6b0], ecx
cmp dword [ebp - 0x698], 0
je 0x10042d1d
mov dword [ebp - 0x81c], 0x6b903cfc
mov byte [ebp - 0xad], 0
lea eax, [ebp - 0xad]
push eax
push 0x72eb
push 0
call fcn.10040d7e
add esp, 0xc
cmp dword [ebp - 0x81c], 0
je 0x10042d18
jmp 0x10042b31
jmp 0x10042f14
mov dword [ebp - 0x428], 5
mov byte [ebp - 0xc6], 0
movzx eax, byte [ebp - 0xc6]
test eax, eax
je 0x10042d52
push 0x195e
push 0x18f8
push 0
push 0x106a
push 0
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov eax, dword [ebp - 0x1b8]
mov dword [ebp - 0xa44], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x6b0], 0xfffffffe
jl 0x10042d7a
mov dword [ebp - 0x418], 1
jmp 0x10042d81
and dword [ebp - 0x418], 0
mov eax, dword [ebp - 0x428]
cmp dword [ebp - 0x784], eax
jg 0x10042d9b
mov dword [ebp - 0x588], 1
jmp 0x10042da2
and dword [ebp - 0x588], 0
mov eax, dword [ebp - 0x418]
cmp eax, dword [ebp - 0x588]
jne 0x10042dbc
mov dword [ebp - 0x420], 1
jmp 0x10042dc3
and dword [ebp - 0x420], 0
cmp dword [ebp - 0x420], 0x72a6
jg 0x10042ddb
mov dword [ebp - 0x640], 1
jmp 0x10042de2
and dword [ebp - 0x640], 0
cmp dword [ebp - 0x640], 0xffffffff
je 0x10042df7
mov dword [ebp - 0x590], 1
jmp 0x10042dfe
and dword [ebp - 0x590], 0
mov eax, dword [ebp - 0x428]
cmp dword [ebp - 0x590], eax
jne 0x10042e18
mov dword [ebp - 0x430], 1
jmp 0x10042e1f
and dword [ebp - 0x430], 0
mov eax, dword [ebp - 0x430]
add eax, 0x31cdb17f
mov dword [ebp - 0x1a8], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1a8]
sub ecx, dword [ebp + eax - 0x6b0]
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x6b0], ecx
jg 0x10042e5e
mov dword [ebp - 0x6cc], 1
jmp 0x10042e65
and dword [ebp - 0x6cc], 0
cmp dword [ebp - 0x6cc], 0xe068
je 0x10042e7d
mov dword [ebp - 0x438], 1
jmp 0x10042e84
and dword [ebp - 0x438], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x8d8]
cmp dword [ebp - 0x438], eax
jge 0x10042ea5
mov dword [ebp - 0x308], 1
jmp 0x10042eac
and dword [ebp - 0x308], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x308]
mov dword [ebp + eax - 0x6b0], ecx
mov eax, dword [ebp - 0x308]
sub eax, 3
cmp eax, 0xfffffffb
ja 0x10042ed9
mov dword [ebp - 0x598], 1
jmp 0x10042ee0
and dword [ebp - 0x598], 0
mov eax, dword [ebp - 0x1b8]
cmp dword [ebp - 0x598], eax
jle 0x10042efa
mov dword [ebp - 0x440], 1
jmp 0x10042f01
and dword [ebp - 0x440], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x440]
mov dword [ebp + eax - 0x8d8], ecx
jmp 0x10042b31
and dword [ebp - 0x1c0], 0
jmp 0x10042f2f
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 0xb
jae 0x10042f48
mov eax, dword [ebp - 0x1c0]
mov byte [ebp + eax - 0x6f4], 0
jmp 0x10042f22
mov dword [ebp - 0x2a4], 0x2edc7555
mov dword [ebp - 0x1b4], 0xfe5a
mov dword [ebp - 0x29c], 0xfffffff8
mov dword [ebp - 0xdc], 0
mov dword [ebp - 0x2e8], 1
mov dword [ebp - 0x6a0], 0xc7e011b5
mov dword [ebp - 0x6dc], 0x56a42623
mov dword [ebp - 0x5b8], 5
mov dword [ebp - 0x78c], 0xd748
mov dword [ebp - 0x824], 0x1904e20e
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x29c], eax
cmp dword [ebp - 0xdc], 1
jle 0x10042fcd
mov dword [ebp - 0x648], 1
jmp 0x10042fd4
and dword [ebp - 0x648], 0
mov eax, dword [ebp - 0x648]
mov dword [ebp - 0x29c], eax
cmp dword [ebp - 0x29c], 0xfffffffa
jg 0x10042ff5
mov dword [ebp - 0x834], 1
jmp 0x10042ffc
and dword [ebp - 0x834], 0
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x934], eax
mov eax, dword [ebp - 0x2a4]
mov dword [ebp - 0x9ec], eax
xor eax, eax
add eax, 0xd3f
imul eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x2e8], eax
mov eax, dword [ebp - 0x1b4]
cmp dword [ebp - 0x2e8], eax
jle 0x10043042
mov dword [ebp - 0x448], 1
jmp 0x10043049
and dword [ebp - 0x448], 0
mov eax, dword [ebp - 0x448]
sub eax, dword [ebp - 0xdc]
cmp eax, dword [ebp - 0xdc]
jg 0x10043069
mov dword [ebp - 0x5a0], 1
jmp 0x10043070
and dword [ebp - 0x5a0], 0
mov eax, dword [ebp - 0x2a4]
cmp dword [ebp - 0x5a0], eax
jge 0x1004308a
mov dword [ebp - 0x450], 1
jmp 0x10043091
and dword [ebp - 0x450], 0
mov eax, dword [ebp - 0x450]
mov dword [ebp - 0x6a0], eax
cmp dword [ebp - 0x6a0], 1
jae 0x100430b2
mov dword [ebp - 0x458], 1
jmp 0x100430b9
and dword [ebp - 0x458], 0
mov eax, dword [ebp - 0x458]
sub eax, 0x46b8a476
cmp eax, 0x5071
jg 0x100430e0
cmp dword [ebp - 0x2e8], 0
je 0x100430e0
mov dword [ebp - 0x5a8], 1
jmp 0x100430e7
and dword [ebp - 0x5a8], 0
mov eax, dword [ebp - 0xdc]
cmp dword [ebp - 0x5a8], eax
je 0x10043101
mov dword [ebp - 0x460], 1
jmp 0x10043108
and dword [ebp - 0x460], 0
cmp dword [ebp - 0x460], 0x9892657c
jne 0x10043120
mov dword [ebp - 0x650], 1
jmp 0x10043127
and dword [ebp - 0x650], 0
mov eax, dword [ebp - 0xdc]
cmp dword [ebp - 0x650], eax
jl 0x10043141
mov dword [ebp - 0x468], 1
jmp 0x10043148
and dword [ebp - 0x468], 0
cmp dword [ebp - 0x468], 8
jbe 0x1004315d
mov dword [ebp - 0x5b0], 1
jmp 0x10043164
and dword [ebp - 0x5b0], 0
cmp dword [ebp - 0x5b0], 0x1bca
jl 0x1004317c
mov dword [ebp - 0x470], 1
jmp 0x10043183
and dword [ebp - 0x470], 0
mov eax, dword [ebp - 0x470]
mov dword [ebp - 0x6dc], eax
mov eax, dword [ebp - 0x2a4]
add eax, dword [ebp - 0x6dc]
je 0x100431b2
cmp dword [ebp - 0xdc], 0
je 0x100431b2
mov dword [ebp - 0x478], 1
jmp 0x100431b9
and dword [ebp - 0x478], 0
mov eax, dword [ebp - 0x478]
mov dword [ebp - 0x5b8], eax
mov eax, dword [ebp - 0x78c]
cmp dword [ebp - 0x5b8], eax
jle 0x100431df
mov dword [ebp - 0x480], 1
jmp 0x100431e6
and dword [ebp - 0x480], 0
mov eax, dword [ebp - 0x480]
mov dword [ebp - 0x824], eax
mov dword [ebp - 0x50], 0x9c63c407
mov dword [ebp - 0x4a8], 1
mov dword [ebp - 0x58], 0
jmp 0x10043213
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 2
jge 0x10043229
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x290], 3
jmp 0x1004320c
mov dword [ebp - 0x58], 0
jmp 0x10043239
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 2
jge 0x1004324f
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x978], 4
jmp 0x10043232
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x290]
cmp dword [ebp + eax - 0x290], ecx
jle 0x1004327b
xor eax, eax
je 0x1004327b
mov dword [ebp - 0x658], 1
jmp 0x10043282
and dword [ebp - 0x658], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x290], 0x31d26ec1
jl 0x100432a1
mov dword [ebp - 0x488], 1
jmp 0x100432a8
and dword [ebp - 0x488], 0
mov eax, dword [ebp - 0x658]
cmp eax, dword [ebp - 0x488]
jg 0x100432c2
mov dword [ebp - 0x5c0], 1
jmp 0x100432c9
and dword [ebp - 0x5c0], 0
mov eax, dword [ebp - 0x5c0]
sub eax, 0x56108d2c
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
add eax, 0x25b054db
imul eax, eax, 0x874
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x290]
jge 0x1004334a
mov dword [ebp - 0x8c8], 1
mov dword [ebp - 0x8c4], 1
mov dword [ebp - 0x8c0], 1
mov dword [ebp - 0x8bc], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x8c8]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x8c8], eax
push 0x77f8
push 1
call fcn.100402fb
pop ecx
pop ecx
jmp 0x100434b9
mov dword [ebp - 0x660], 2
mov dword [ebp - 0x20c], 0
jmp 0x1004336d
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 1
jge 0x10043389
mov eax, dword [ebp - 0x20c]
mov dword [ebp + eax*4 - 0x1bc], 0
jmp 0x10043360
xor eax, eax
inc eax
je 0x100433aa
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1bc], 0
je 0x100433aa
mov dword [ebp - 0x794], 1
jmp 0x100433b1
and dword [ebp - 0x794], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1bc], 0
je 0x10043456
cmp dword [ebp - 0x50], 0x1f0ef2f3
je 0x100433df
or eax, 0xffffffff
je 0x100433df
mov dword [ebp - 0x6a8], 1
jmp 0x100433e6
and dword [ebp - 0x6a8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1bc]
mov dword [ebp - 0x490], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x490]
mov dword [ebp + eax - 0x290], ecx
mov eax, dword [ebp - 0x490]
add eax, dword [ebp - 0x6a8]
js 0x10043426
mov dword [ebp - 0x498], 1
jmp 0x1004342d
and dword [ebp - 0x498], 0
mov eax, dword [ebp - 0x498]
add eax, 0xb2c4
je 0x10043456
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x290], 0
je 0x10043456
mov dword [ebp - 0x83c], 1
jmp 0x1004345d
and dword [ebp - 0x83c], 0
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x93c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1bc], 0xffff
jne 0x10043485
mov dword [ebp - 0x5c8], 1
jmp 0x1004348c
and dword [ebp - 0x5c8], 0
mov eax, dword [ebp - 0x660]
cmp dword [ebp - 0x5c8], eax
je 0x100434a6
mov dword [ebp - 0x4a0], 1
jmp 0x100434ad
and dword [ebp - 0x4a0], 0
mov eax, dword [ebp - 0x4a0]
mov dword [ebp - 0x660], eax
mov dword [ebp - 0x50], 0
jmp 0x100434c9
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 1
jg 0x10043624
mov dword [ebp - 0x79c], 8
mov dword [ebp - 0x4c0], 0
mov dword [ebp - 0x5d0], 0xc84a4e7
mov dword [ebp - 0x5d8], 0x19924203
cmp dword [ebp - 0x4a8], 0
jne 0x100435d8
mov eax, dword [ebp - 0x5d0]
add eax, 0x5894
je 0x1004352a
cmp dword [ebp - 0x4a8], 0
je 0x1004352a
mov dword [ebp - 0x4b0], 1
jmp 0x10043531
and dword [ebp - 0x4b0], 0
mov eax, dword [ebp - 0x5d0]
cmp dword [ebp - 0x4b0], eax
jle 0x1004354b
mov dword [ebp - 0x6b8], 1
jmp 0x10043552
and dword [ebp - 0x6b8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x290]
sub eax, dword [ebp - 0x6b8]
cmp eax, 0xa93f
jge 0x10043578
mov dword [ebp - 0x2d4], 1
jmp 0x1004357f
and dword [ebp - 0x2d4], 0
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x2d4]
mov dword [ebp + eax*4 - 0x290], ecx
cmp dword [ebp - 0x2d4], 0
je 0x100435b3
mov eax, 0xff6a
test eax, eax
je 0x100435b3
cmp dword [ebp - 0x50], 0
je 0x100435b3
mov dword [ebp - 0x4b8], 1
jmp 0x100435ba
and dword [ebp - 0x4b8], 0
mov eax, dword [ebp - 0x4b8]
mov dword [ebp - 0x5d8], eax
cmp dword [ebp - 0x5d8], 0
jne 0x100435d8
and dword [ebp - 0x668], 0
jmp 0x100435e2
mov dword [ebp - 0x668], 1
mov eax, dword [ebp - 0x79c]
mov dword [ebp - 0x4c0], eax
mov eax, dword [ebp - 0x4c0]
imul eax, dword [ebp - 0x668]
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x978], eax
mov byte [ebp - 0xb5], 0
lea eax, [ebp - 0xb5]
push eax
push 1
call fcn.1004033a
pop ecx
pop ecx
jmp 0x100434c2
mov byte [ebp - 0x144], 9
mov byte [ebp - 0x143], 0xbe
mov byte [ebp - 0x142], 6
mov byte [ebp - 0x141], 9
mov byte [ebp - 0x140], 4
mov byte [ebp - 0x13f], 0xd
mov byte [ebp - 0x13e], 1
mov byte [ebp - 0x13d], 2
mov byte [ebp - 0x13c], 8
mov byte [ebp - 0x13b], 6
mov byte [ebp - 0x13a], 3
mov byte [ebp - 0x139], 2
mov byte [ebp - 0x138], 7
mov byte [ebp - 0x137], 4
mov byte [ebp - 0x136], 5
mov byte [ebp - 0x135], 7
mov byte [ebp - 0x134], 0
mov byte [ebp - 0x133], 0
mov byte [ebp - 0x132], 2
mov byte [ebp - 0x131], 6
mov byte [ebp - 0x130], 3
mov byte [ebp - 0x12f], 0xb1
mov byte [ebp - 0x12e], 0x93
mov byte [ebp - 0x12d], 0x53
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x144]
or eax, 0x8e
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x144]
and ecx, 0x8e
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x144]
mov byte [ebp + ecx - 0x700], al
mov dword [ebp - 0x3c], 2
and dword [ebp - 0x1ec], 0
jmp 0x10043722
mov eax, dword [ebp - 0x3c]
inc eax
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0x18
jae 0x100437d8
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x144]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x3c], eax
jne 0x1004376c
mov eax, dword [ebp - 0x3c]
movzx eax, byte [ebp + eax - 0x144]
inc eax
mov dword [ebp - 0x1ec], eax
mov eax, dword [ebp - 0x3c]
movzx eax, byte [ebp + eax - 0x144]
mov ecx, dword [ebp - 0x3c]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x3c], eax
jmp 0x1004371a
mov eax, dword [ebp - 0x3c]
movzx eax, byte [ebp + eax - 0x143]
mov ecx, dword [ebp - 0x3c]
sub ecx, dword [ebp - 0x1ec]
movzx ecx, byte [ebp + ecx - 0x146]
movsx ecx, byte [ebp + ecx - 0x700]
or eax, ecx
mov ecx, dword [ebp - 0x3c]
movzx ecx, byte [ebp + ecx - 0x143]
mov edx, dword [ebp - 0x3c]
sub edx, dword [ebp - 0x1ec]
movzx edx, byte [ebp + edx - 0x146]
movsx edx, byte [ebp + edx - 0x700]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x3c]
movzx ecx, byte [ebp + ecx - 0x144]
mov byte [ebp + ecx - 0x700], al
and dword [ebp - 0x1ec], 0
jmp 0x1004371a
xor eax, eax
inc eax
imul eax, eax, 0xa
mov byte [ebp + eax - 0x700], 0
mov dword [ebp - 0x104], 0xf37831e4
mov dword [ebp - 0x6b4], 0x25a80e35
mov dword [ebp - 0x980], 1
mov dword [ebp - 0x944], 0xffffffff
mov dword [ebp - 0x988], 0xffffffff
mov dword [ebp - 0x844], 1
mov dword [ebp - 0x900], 0x9b3a00d0
mov dword [ebp - 0x8fc], 0x9b3a00d0
mov dword [ebp - 0x8f8], 0x9b3a00d0
mov dword [ebp - 0x8f4], 0x9b3a00d0
mov dword [ebp - 0x7ac], 0xffffffff
mov dword [ebp - 0x94c], 0xffffffff
mov dword [ebp - 0x2ac], 1
mov dword [ebp - 0x5e0], 0xfffffff8
mov dword [ebp - 0x84c], 0xfffffff6
mov dword [ebp - 0x990], 0
mov dword [ebp - 0x4e8], 0x4015e1b4
mov dword [ebp - 0x1c4], 0
jmp 0x100438a9
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 1
jge 0x100438c5
mov eax, dword [ebp - 0x1c4]
mov dword [ebp + eax*4 - 0x82c], 0xffffffff
jmp 0x1004389c
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x954], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x82c]
mov ecx, dword [ebp - 0x104]
lea eax, [eax + ecx + 1]
cmp eax, 0x11bd
je 0x100438fb
mov dword [ebp - 0x4c8], 1
jmp 0x10043902
and dword [ebp - 0x4c8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x900]
cmp eax, dword [ebp - 0x4c8]
jge 0x10043923
mov dword [ebp - 0x4d0], 1
jmp 0x1004392a
and dword [ebp - 0x4d0], 0
mov eax, dword [ebp - 0x2ac]
dec eax
mov dword [ebp - 0x2ac], eax
mov eax, dword [ebp - 0x2ac]
mov dword [ebp - 0x5e0], eax
mov eax, dword [ebp - 0x5e0]
cmp eax, dword [ebp - 0x4d0]
jl 0x1004395d
mov dword [ebp - 0x7a4], 1
jmp 0x10043964
and dword [ebp - 0x7a4], 0
mov eax, dword [ebp - 0x844]
mov dword [ebp - 0x998], eax
mov eax, dword [ebp - 0x7ac]
mov dword [ebp - 0x95c], eax
xor eax, eax
add eax, 0xffff9e01
jne 0x10043997
mov eax, 0xcc65ad6c
test eax, eax
jne 0x10043997
and dword [ebp - 0x4d8], 0
jmp 0x100439a1
mov dword [ebp - 0x4d8], 1
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x6b4], eax
mov eax, dword [ebp - 0x6b4]
imul eax, dword [ebp - 0x4d8]
cmp eax, 0x8e65dd4d
jne 0x100439cd
mov dword [ebp - 0x5e8], 1
jmp 0x100439d4
and dword [ebp - 0x5e8], 0
mov eax, dword [ebp - 0x104]
cmp dword [ebp - 0x5e8], eax
jne 0x100439ee
mov dword [ebp - 0x4e0], 1
jmp 0x100439f5
and dword [ebp - 0x4e0], 0
mov eax, dword [ebp - 0x104]
cmp eax, dword [ebp - 0x4e0]
jge 0x10043a0f
mov dword [ebp - 0x670], 1
jmp 0x10043a16
and dword [ebp - 0x670], 0
mov eax, dword [ebp - 0x670]
mov dword [ebp - 0x84c], eax
mov eax, dword [ebp - 0x4e8]
inc eax
mov dword [ebp - 0x4e8], eax
lea eax, [ebp - 0x700]
push eax
lea ecx, [ebp - 0xb90]
call fcn.10024a04
mov dword [ebp - 0x7b4], eax
mov eax, dword [ebp - 0x7b4]
mov dword [ebp - 0x838], eax
mov dword [ebp - 4], 1
push 0xa
xor edx, edx
mov ecx, dword [ebp - 0x838]
call fcn.1002ebfc
pop ecx
mov dword [ebp - 0x898], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb90]
call fcn.10017f9d
mov dword [ebp - 0x5c], 0x25b9b55b
mov dword [ebp - 0x60], 1
mov dword [ebp - 0x2d8], 0xad8ea5f3
mov dword [ebp - 0x5c], 0xfffffffc
jmp 0x10043aa7
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0x16
jge 0x10043dec
mov dword [ebp - 0x7c], 0x7f609b2b
mov dword [ebp - 0x1cc], 0x51aaf19
mov byte [ebp - 0xc7], 0
movzx eax, byte [ebp - 0xc7]
test eax, eax
je 0x10043ae2
push 1
push 0x2d02
call fcn.1004038f
pop ecx
pop ecx
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x9a0], eax
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x964], eax
cmp dword [ebp - 0x60], 0
jne 0x10043b12
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x5c], 0
jne 0x10043b12
and dword [ebp - 0x5f0], 0
jmp 0x10043b1c
mov dword [ebp - 0x5f0], 1
mov eax, dword [ebp - 0x5f0]
sub eax, dword [ebp - 0x7c]
je 0x10043b3c
mov eax, 0xde6f
test eax, eax
je 0x10043b3c
mov dword [ebp - 0x4f0], 1
jmp 0x10043b43
and dword [ebp - 0x4f0], 0
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x4f0], eax
jne 0x10043b5a
mov dword [ebp - 0x6c0], 1
jmp 0x10043b61
and dword [ebp - 0x6c0], 0
mov eax, dword [ebp - 0x2d8]
cmp dword [ebp - 0x6c0], eax
jge 0x10043b7b
mov dword [ebp - 0x4f8], 1
jmp 0x10043b82
and dword [ebp - 0x4f8], 0
mov eax, dword [ebp - 0x60]
add eax, dword [ebp - 0x4f8]
je 0x10043c1b
mov dword [ebp - 0x7c], 0
jmp 0x10043ba1
cmp dword [ebp - 0x7c], 0xfffffffe
jge 0x10043c16
mov dword [ebp - 0x204], 0
jmp 0x10043bc0
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 2
jge 0x10043bdc
mov eax, dword [ebp - 0x204]
mov dword [ebp + eax*4 - 0xaf4], 1
jmp 0x10043bb3
mov dword [ebp - 0x60], 0
jmp 0x10043bec
cmp dword [ebp - 0x60], 1
jg 0x10043c14
jmp 0x10043de7
mov dword [ebp - 0x1f4], 0x870af03f
mov dword [ebp - 0x7bc], 0xffffffff
mov eax, 0xee72c34c
test eax, eax
je 0x10043d38
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x970], eax
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x9b0], eax
cmp dword [ebp - 0x1f4], 0xfffd
jne 0x10043c66
mov dword [ebp - 0x5f8], 1
jmp 0x10043c6d
and dword [ebp - 0x5f8], 0
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x5f8], eax
jle 0x10043c84
mov dword [ebp - 0x500], 1
jmp 0x10043c8b
and dword [ebp - 0x500], 0
cmp dword [ebp - 0x500], 0xbe18
jle 0x10043ca3
mov dword [ebp - 0x678], 1
jmp 0x10043caa
and dword [ebp - 0x678], 0
mov eax, dword [ebp - 0x678]
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0
jne 0x10043cc7
or eax, 0xffffffff
jne 0x10043cc7
mov dword [ebp - 0x508], 1
mov eax, dword [ebp - 0x1cc]
cmp dword [ebp - 0x508], eax
jge 0x10043ceb
and dword [ebp - 0x6c8], 0
mov eax, dword [ebp - 0x1cc]
cmp dword [ebp - 0x6c8], eax
jge 0x10043d59
mov dword [ebp - 0x518], 1
jmp 0x10043d60
and dword [ebp - 0x518], 0
mov eax, dword [ebp - 0x2d8]
mov ecx, dword [ebp - 0x518]
lea eax, [ecx + eax - 6]
cmp eax, dword [ebp - 0x1cc]
jle 0x10043d84
mov dword [ebp - 0x608], 1
jmp 0x10043d8b
and dword [ebp - 0x608], 0
mov eax, dword [ebp - 0x1f4]
cmp dword [ebp - 0x608], eax
je 0x10043da5
mov dword [ebp - 0x520], 1
jmp 0x10043dac
and dword [ebp - 0x520], 0
mov eax, dword [ebp - 0x1f4]
cmp dword [ebp - 0x520], eax
je 0x10043dc6
mov dword [ebp - 0x680], 1
jmp 0x10043dcd
and dword [ebp - 0x680], 0
mov eax, dword [ebp - 0x680]
mov dword [ebp - 0x7bc], eax
cmp dword [ebp - 0x2d8], 0
je 0x10043de7
jmp 0x10043aa0
and dword [ebp - 0x1d4], 0
jmp 0x10043e02
mov eax, dword [ebp - 0x1d4]
inc eax
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 0xb
jae 0x10043e1b
mov eax, dword [ebp - 0x1d4]
mov byte [ebp + eax - 0x700], 0
jmp 0x10043df5
push dword [ebp - 0x898]
push dword [ebp - 0x7c4]
call fcn.1003dd56
pop ecx
pop ecx
mov dword [ebp - 0x358], eax
mov dword [ebp - 0x11c], 0xce125d16
mov dword [ebp - 0x180], 0
jmp 0x10043e57
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 1
jge 0x10043e73
mov eax, dword [ebp - 0x180]
mov dword [ebp + eax*4 - 0x840], 0
jmp 0x10043e4a
mov dword [ebp - 0x11c], 0
jmp 0x10043e8c
mov eax, dword [ebp - 0x11c]
dec eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0
jl 0x10043ea9
mov eax, dword [ebp - 0x11c]
cmp dword [ebp + eax*4 - 0x840], 0
je 0x10043ea7
jmp 0x10043ea9
jmp 0x10043e7f
mov byte [ebp - 0x8a], 0
push 1
lea eax, [ebp - 0x8a]
push eax
call fcn.100403e0
pop ecx
pop ecx
mov eax, dword [ebp - 0xbc]
mov ecx, dword [ebp - 0x358]
mov dword [eax + 8], ecx
lea eax, [ebp - 0x358]
push eax
lea eax, [ebp - 0x14]
push eax
push 0
push 0x53b6
call fcn.10040d23
add esp, 0x10
mov dword [ebp - 0x124], 0xd162c5d1
mov dword [ebp - 0xd4], 0x45d764ce
mov dword [ebp - 0x2b4], 0xbebf0a0c
mov dword [ebp - 0x2bc], 0xffffffff
mov dword [ebp - 0x10c], 0xfff6
mov dword [ebp - 0x7d4], 2
mov dword [ebp - 0x97c], 0x5df97f74
mov dword [ebp - 0x24], 0
jmp 0x10043f3f
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jge 0x10043f55
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x288], 0xe6f8
jmp 0x10043f38
mov dword [ebp - 0x24], 0
jmp 0x10043f65
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x10043f7b
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x384], 5
jmp 0x10043f5e
mov dword [ebp - 0x24], 0
jmp 0x10043f8b
cmp dword [ebp - 0x24], 1
jge 0x10043fa1
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FileTimeToLocalFileTime]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret