Function at 0x100542bd
Capabilities:
Delete file
Delete registry key
Get common file path
Get disk size
Query environment variable
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x142c
call fcn.1008bc80
push esi
push edi
mov dword [ebp - 0x84], 6
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x39c], 0x86d6dbc1
mov dword [ebp - 0x330], 0
jmp 0x10054300
mov eax, dword [ebp - 0x330]
inc eax
mov dword [ebp - 0x330], eax
cmp dword [ebp - 0x330], 1
jge 0x1005431c
mov eax, dword [ebp - 0x330]
mov dword [ebp + eax*4 - 0x134], 0x5568
jmp 0x100542f3
mov dword [ebp - 0x60], 0
jmp 0x1005432c
mov eax, dword [ebp - 0x60]
dec eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0
jl 0x1005467e
mov dword [ebp - 0xf30], 0xffffffff
mov dword [ebp - 0xf2c], 0xffffffff
mov dword [ebp - 0xf28], 0xffffffff
mov dword [ebp - 0xf24], 0xffffffff
mov dword [ebp - 0x3a0], 9
mov dword [ebp - 0xe7c], 0x85e13cd4
mov dword [ebp - 0xe84], 0xffffffff
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xf30], 0
jmp 0x100543aa
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf30]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xf30], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xf30], 0
jl 0x10054667
mov dword [ebp - 0x1bc], 0x88d0d3f7
mov dword [ebp - 0x91c], 0xcbae
mov dword [ebp - 0xd58], 0x62a4b15
mov dword [ebp - 0xe6c], 0xda5659cd
mov dword [ebp - 0x1bc], 0
jmp 0x100543ff
mov eax, dword [ebp - 0x1bc]
dec eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 0
jl 0x1005453d
mov dword [ebp - 0x38c], 0x45625132
mov dword [ebp - 0x38c], 0
jmp 0x1005442f
mov eax, dword [ebp - 0x38c]
dec eax
mov dword [ebp - 0x38c], eax
cmp dword [ebp - 0x38c], 0
jl 0x100544a2
mov dword [ebp - 0x394], 0
jmp 0x10054451
mov eax, dword [ebp - 0x394]
inc eax
mov dword [ebp - 0x394], eax
cmp dword [ebp - 0x394], 1
jge 0x1005446d
mov eax, dword [ebp - 0x394]
mov dword [ebp + eax*4 - 0xcdc], 1
jmp 0x10054444
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xcdc]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xcdc], eax
mov byte [ebp - 0x1b8], 0
movzx eax, byte [ebp - 0x1b8]
test eax, eax
je 0x100544a0
call dword [sym.imp.KERNEL32.dll_GetACP]
jmp 0x10054422
mov eax, dword [ebp - 0x60]
add eax, dword [ebp - 0x60]
mov dword [ebp - 0x39c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x134]
cmp dword [ebp - 0x39c], eax
jge 0x100544cf
mov dword [ebp - 0xd00], 1
jmp 0x100544d6
and dword [ebp - 0xd00], 0
mov eax, dword [ebp - 0x1bc]
cmp dword [ebp - 0xd00], eax
jl 0x100544f0
mov dword [ebp - 0xd08], 1
jmp 0x100544f7
and dword [ebp - 0xd08], 0
mov eax, dword [ebp - 0x91c]
cmp dword [ebp - 0xd08], eax
jl 0x10054511
mov dword [ebp - 0xd10], 1
jmp 0x10054518
and dword [ebp - 0xd10], 0
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp + eax*4 - 0x134]
imul eax, dword [ebp - 0x1bc]
mov ecx, dword [ebp - 0xd10]
dec ecx
sub eax, ecx
mov dword [ebp - 0xd58], eax
jmp 0x100543f2
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp + eax*4 - 0x134]
mov dword [ebp - 0x10a0], eax
mov eax, dword [ebp - 0x39c]
cmp dword [ebp - 0xe6c], eax
je 0x10054567
mov dword [ebp - 0xd18], 1
jmp 0x1005456e
and dword [ebp - 0xd18], 0
cmp dword [ebp - 0xd18], 0x86ff5291
jae 0x10054586
mov dword [ebp - 0xe74], 1
jmp 0x1005458d
and dword [ebp - 0xe74], 0
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp + eax*4 - 0x134]
mov dword [ebp - 0x108c], eax
mov eax, dword [ebp - 0xe7c]
cmp dword [ebp - 0x3a0], eax
jl 0x100545b7
mov dword [ebp - 0x460], 1
jmp 0x100545be
and dword [ebp - 0x460], 0
mov eax, dword [ebp - 0x91c]
cmp eax, dword [ebp - 0x460]
jl 0x100545d8
mov dword [ebp - 0x924], 1
jmp 0x100545df
and dword [ebp - 0x924], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x134]
cmp dword [ebp - 0x924], eax
je 0x10054600
mov dword [ebp - 0x468], 1
jmp 0x10054607
and dword [ebp - 0x468], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x134]
imul eax, dword [ebp - 0x468]
cmp eax, 0xaec
jge 0x1005462e
mov dword [ebp - 0x92c], 1
jmp 0x10054635
and dword [ebp - 0x92c], 0
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x1094], eax
mov eax, dword [ebp - 0x92c]
mov dword [ebp - 0x3a0], eax
mov eax, dword [ebp - 0x3a0]
mov dword [ebp - 0x109c], eax
mov eax, dword [ebp - 0x39c]
mov dword [ebp - 0xe84], eax
jmp 0x1005438f
mov eax, dword [ebp - 0x60]
cmp dword [ebp + eax*4 - 0x134], 0
je 0x10054679
jmp 0x10054325
jmp 0x10054325
mov dword [ebp - 0x144], 0x2c5b641b
mov dword [ebp - 4], 0xeaa32b1c
mov dword [ebp - 0x210], 0
mov dword [ebp - 0x4d8], 9
mov dword [ebp - 0x438], 0xfffffff7
mov dword [ebp - 0x4c0], 0xfffffff9
mov dword [ebp - 0x10a4], 0x71da
mov dword [ebp - 0x338], 0
jmp 0x100546da
mov eax, dword [ebp - 0x338]
inc eax
mov dword [ebp - 0x338], eax
cmp dword [ebp - 0x338], 2
jge 0x100546f6
mov eax, dword [ebp - 0x338]
mov dword [ebp + eax*4 - 0xa8], 0xfffffff6
jmp 0x100546cd
mov dword [ebp - 4], 0
jmp 0x10054706
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 1
jg 0x10054d8f
mov dword [ebp - 0x14], 0x8f69f7fd
mov dword [ebp - 0xd8], 0
mov dword [ebp - 0x1e8], 0x8d46758e
mov dword [ebp - 0xfc4], 0x99c4
mov dword [ebp - 0xfc0], 0x99c4
mov dword [ebp - 0xfbc], 0x99c4
mov dword [ebp - 0xfb8], 0x99c4
mov dword [ebp - 0x14], 1
jmp 0x10054763
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jl 0x10054abb
mov dword [ebp - 0xe94], 0xa9a26275
mov dword [ebp - 0x32c], 0
jmp 0x10054790
mov eax, dword [ebp - 0x32c]
inc eax
mov dword [ebp - 0x32c], eax
cmp dword [ebp - 0x32c], 4
jge 0x100547ac
mov eax, dword [ebp - 0x32c]
mov dword [ebp + eax*4 - 0x1308], 0x11e69d08
jmp 0x10054783
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0xa8], 0x837182ab
jbe 0x100547c8
mov dword [ebp - 0x470], 1
jmp 0x100547cf
and dword [ebp - 0x470], 0
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0xa8]
cmp dword [ebp - 0x470], eax
jge 0x100547ed
mov dword [ebp - 0xe8c], 1
jmp 0x100547f4
and dword [ebp - 0xe8c], 0
mov eax, dword [ebp - 0x14]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0xa8]
cmp dword [ebp + eax*4 - 0xa8], ecx
jge 0x1005481a
xor eax, eax
jne 0x1005481a
and dword [ebp - 0x934], 0
jmp 0x10054824
mov dword [ebp - 0x934], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa8]
add eax, dword [ebp - 0x934]
cmp eax, 0x2065
jle 0x1005484a
mov dword [ebp - 0x478], 1
jmp 0x10054851
and dword [ebp - 0x478], 0
cmp dword [ebp - 0x478], 3
jbe 0x10054866
mov dword [ebp - 0x93c], 1
jmp 0x1005486d
and dword [ebp - 0x93c], 0
mov eax, dword [ebp - 0x93c]
mov dword [ebp - 0xd8], eax
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0x1e8], eax
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0xa8], 0xfffffff7
je 0x1005489e
mov dword [ebp - 0x95c], 1
jmp 0x100548a5
and dword [ebp - 0x95c], 0
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0xa8]
mov dword [ebp - 0x10ac], eax
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0xa8], 0xc280563a
jne 0x100548d1
mov dword [ebp - 0x480], 1
jmp 0x100548d8
and dword [ebp - 0x480], 0
mov eax, dword [ebp - 0x480]
sub eax, 0x2c2e8b5a
mov dword [ebp - 0x944], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x944]
mov dword [ebp + eax - 0x1308], ecx
mov eax, dword [ebp - 0xd8]
cmp dword [ebp - 0x944], eax
jg 0x1005491c
cmp dword [ebp - 0x14], 0
je 0x1005491c
mov dword [ebp - 0x488], 1
jmp 0x10054923
and dword [ebp - 0x488], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0xa8]
imul eax, dword [ebp - 0x488]
test eax, eax
je 0x10054954
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1308], 0
je 0x10054954
mov dword [ebp - 0x94c], 1
jmp 0x1005495b
and dword [ebp - 0x94c], 0
mov eax, dword [ebp - 0x94c]
mov dword [ebp - 0x210], eax
mov eax, dword [ebp - 0x210]
add eax, dword [ebp - 0xd8]
je 0x1005498a
or eax, 0xffffffff
je 0x1005498a
xor eax, eax
je 0x1005498a
mov dword [ebp - 0x490], 1
jmp 0x10054991
and dword [ebp - 0x490], 0
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0xa8]
cmp dword [ebp - 0x490], eax
jg 0x100549af
mov dword [ebp - 0x954], 1
jmp 0x100549b6
and dword [ebp - 0x954], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x1e8], eax
mov eax, dword [ebp - 0x1e8]
cmp eax, dword [ebp - 0x954]
jl 0x100549d9
mov dword [ebp - 0x498], 1
jmp 0x100549e0
and dword [ebp - 0x498], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0xa8]
cmp dword [ebp - 0x498], eax
jne 0x100549fe
mov dword [ebp - 0x4a0], 1
jmp 0x10054a05
and dword [ebp - 0x4a0], 0
mov eax, dword [ebp - 0x95c]
add eax, dword [ebp - 0x4a0]
je 0x10054a28
mov eax, 0xffff
test eax, eax
je 0x10054a28
mov dword [ebp - 0x964], 1
jmp 0x10054a2f
and dword [ebp - 0x964], 0
mov eax, dword [ebp - 0x964]
sub eax, dword [ebp - 0xd8]
mov dword [ebp - 0xd8], eax
mov eax, dword [ebp - 4]
cmp dword [ebp - 0xd8], eax
je 0x10054a58
mov dword [ebp - 0x4a8], 1
jmp 0x10054a5f
and dword [ebp - 0x4a8], 0
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0x4a8]
mov dword [ebp - 0xe94], eax
cmp dword [ebp - 0xd8], 0xfffffffc
jge 0x10054a83
mov dword [ebp - 0x96c], 1
jmp 0x10054a8a
and dword [ebp - 0x96c], 0
mov eax, dword [ebp - 0x96c]
sub eax, 0x5e4b438f
jne 0x10054aa3
mov dword [ebp - 0x4b0], 1
jmp 0x10054aaa
and dword [ebp - 0x4b0], 0
mov eax, dword [ebp - 0x4b0]
mov dword [ebp - 0x4d8], eax
jmp 0x1005475c
push 4
pop eax
test eax, eax
je 0x10054c16
cmp dword [ebp - 0x210], 0
jne 0x10054ad5
cmp dword [ebp - 0x14], 0
je 0x10054adc
cmp dword [ebp - 0x438], 0
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0xa8]
mov dword [ebp - 0x438], eax
mov eax, dword [ebp - 0x438]
mov dword [ebp - 0x10b4], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xfc4]
imul eax, dword [ebp - 0x1e8]
cmp eax, dword [ebp - 0x1e8]
je 0x10054b1f
mov dword [ebp - 0x974], 1
jmp 0x10054b26
and dword [ebp - 0x974], 0
mov eax, dword [ebp - 0x974]
mov dword [ebp - 0x210], eax
mov eax, dword [ebp - 0x210]
push 4
pop ecx
shl ecx, 1
add eax, dword [ebp + ecx - 0xfc4]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0xa8]
jle 0x10054b5f
mov dword [ebp - 0x4b8], 1
jmp 0x10054b66
and dword [ebp - 0x4b8], 0
mov eax, dword [ebp - 0x4b8]
sub eax, dword [ebp - 4]
je 0x10054b8d
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xa8], 0
je 0x10054b8d
mov dword [ebp - 0x97c], 1
jmp 0x10054b94
and dword [ebp - 0x97c], 0
mov eax, dword [ebp - 0x97c]
mov dword [ebp - 0x4c0], eax
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x4c0], eax
jle 0x10054bc4
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xa8], 0
jne 0x10054bc4
and dword [ebp - 0x984], 0
jmp 0x10054bce
mov dword [ebp - 0x984], 1
mov eax, dword [ebp - 0x984]
mov dword [ebp - 0x1e8], eax
mov eax, dword [ebp - 4]
cmp dword [ebp + eax*4 - 0xa8], 0
jne 0x10054bf6
cmp dword [ebp - 4], 0
jne 0x10054bf6
and dword [ebp - 0x4c8], 0
jmp 0x10054c00
mov dword [ebp - 0x4c8], 1
mov eax, dword [ebp - 0x4c8]
neg eax
je 0x10054c16
mov dword [ebp - 0x98c], 1
jmp 0x10054c1d
and dword [ebp - 0x98c], 0
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x98c]
cmp eax, dword [ebp - 4]
jge 0x10054c38
mov dword [ebp - 0x4d0], 1
jmp 0x10054c3f
and dword [ebp - 0x4d0], 0
mov eax, dword [ebp - 0xd8]
cmp dword [ebp - 0x4d0], eax
jle 0x10054c59
mov dword [ebp - 0x994], 1
jmp 0x10054c60
and dword [ebp - 0x994], 0
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0xa8]
cmp dword [ebp - 0x994], eax
jl 0x10054c7e
mov dword [ebp - 0x99c], 1
jmp 0x10054c85
and dword [ebp - 0x99c], 0
mov eax, dword [ebp - 0x4d8]
cmp dword [ebp - 0x99c], eax
jge 0x10054c9f
mov dword [ebp - 0x4e0], 1
jmp 0x10054ca6
and dword [ebp - 0x4e0], 0
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0xa8]
add eax, dword [ebp - 0x4e0]
cmp eax, dword [ebp - 4]
jne 0x10054cc7
mov dword [ebp - 0x9a4], 1
jmp 0x10054cce
and dword [ebp - 0x9a4], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x9a4], eax
jg 0x10054ce5
mov dword [ebp - 0x4e8], 1
jmp 0x10054cec
and dword [ebp - 0x4e8], 0
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0xa8]
cmp dword [ebp - 0x4e8], eax
jge 0x10054d0a
mov dword [ebp - 0x9ac], 1
jmp 0x10054d11
and dword [ebp - 0x9ac], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x9ac], eax
je 0x10054d28
mov dword [ebp - 0x4f0], 1
jmp 0x10054d2f
and dword [ebp - 0x4f0], 0
cmp dword [ebp - 0x4f0], 0xfffa
jb 0x10054d47
mov dword [ebp - 0x9b4], 1
jmp 0x10054d4e
and dword [ebp - 0x9b4], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x9b4], eax
jle 0x10054d65
mov dword [ebp - 0x4f8], 1
jmp 0x10054d6c
and dword [ebp - 0x4f8], 0
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0xa8]
imul eax, dword [ebp - 0x4f8]
mov ecx, dword [ebp - 4]
add eax, dword [ebp + ecx*4 - 0xa8]
mov dword [ebp - 0x14], eax
jmp 0x100546ff
mov dword [ebp - 0x5d0], 0
mov dword [ebp - 0x1f0], 1
mov dword [ebp - 0xd44], 0x13dce9d0
mov dword [ebp - 0xd40], 0x13dce9d0
mov dword [ebp - 0xd3c], 0x13dce9d0
mov dword [ebp - 0xd38], 0x13dce9d0
mov dword [ebp - 0x1f0], 0
jmp 0x10054de4
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 0x12
jl 0x10055027
mov dword [ebp - 0x50], 0xfffffff6
mov dword [ebp - 0x264], 5
mov dword [ebp - 0x50], 3
jmp 0x10054e12
mov eax, dword [ebp - 0x50]
dec eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
jl 0x10055003
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x50]
cmp dword [ebp + eax*4 - 0xd44], ecx
jle 0x10054e41
mov eax, dword [ebp - 0x50]
cmp dword [ebp + eax*4 - 0xd44], 0
jne 0x10054e41
and dword [ebp - 0x9c4], 0
jmp 0x10054e4b
mov dword [ebp - 0x9c4], 1
mov eax, dword [ebp - 0x1f0]
mov dword [ebp - 0x10bc], eax
cmp dword [ebp - 0x50], 0
jne 0x10054e6f
cmp dword [ebp - 0x1f0], 0
jne 0x10054e6f
and dword [ebp - 0x9bc], 0
jmp 0x10054e79
mov dword [ebp - 0x9bc], 1
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x9bc]
sub ecx, 0x37b75a88
cmp dword [ebp + eax*4 - 0xd44], ecx
jg 0x10054e9d
mov dword [ebp - 0x500], 1
jmp 0x10054ea4
and dword [ebp - 0x500], 0
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x500]
sub ecx, dword [ebp + eax*4 - 0xd44]
push 4
pop eax
shl eax, 0
sub ecx, dword [ebp + eax - 0xd44]
cmp dword [ebp - 0x9c4], ecx
jg 0x10054ed5
mov dword [ebp - 0x508], 1
jmp 0x10054edc
and dword [ebp - 0x508], 0
mov eax, dword [ebp - 0x508]
mov dword [ebp - 0x264], eax
mov dword [ebp - 0x264], 0
jmp 0x10054f01
mov eax, dword [ebp - 0x264]
dec eax
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 0xffffffe2
jg 0x10054ffe
mov dword [ebp - 0x284], 0
jmp 0x10054f27
mov eax, dword [ebp - 0x284]
inc eax
mov dword [ebp - 0x284], eax
cmp dword [ebp - 0x284], 1
jge 0x10054f43
mov eax, dword [ebp - 0x284]
mov dword [ebp + eax*4 - 0x334], 8
jmp 0x10054f1a
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x334], 0
jmp 0x10054f71
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x334]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x334], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x334], 0x13
jle 0x10054ff9
mov dword [ebp - 0x26c], 0xfffffffa
mov dword [ebp - 0x26c], 0
jmp 0x10054fa4
mov eax, dword [ebp - 0x26c]
inc eax
mov dword [ebp - 0x26c], eax
cmp dword [ebp - 0x26c], 3
jg 0x10054ff4
mov dword [ebp - 0x28c], 0x695cd1d2
mov dword [ebp - 0x28c], 3
jmp 0x10054fd0
mov eax, dword [ebp - 0x28c]
dec eax
mov dword [ebp - 0x28c], eax
cmp dword [ebp - 0x28c], 0
jl 0x10054ff2
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x26c]
mov eax, dword [ebp + eax*4 - 0xd44]
mov dword [ebp + ecx*4 - 0xd44], eax
jmp 0x10054fc3
jmp 0x10054f97
jmp 0x10054f56
jmp 0x10054ef4
jmp 0x10054e0b
mov byte [ebp - 0x130], 0
movzx eax, byte [ebp - 0x130]
test eax, eax
je 0x10055022
push 0x293
push 0
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
jmp 0x10054dd7
mov dword [ebp - 0x120], 0xffff
mov dword [ebp - 0xd88], 0xa8b742d6
mov dword [ebp - 0x1c4], 0xf94f378
mov dword [ebp - 0x274], 0xffff
mov dword [ebp - 0x9e4], 0
mov dword [ebp - 0x9ec], 0xfffffffb
mov dword [ebp - 0xea4], 0xffffffff
mov byte [ebp - 0x1a9], 0
movzx eax, byte [ebp - 0x1a9]
test eax, eax
je 0x1005508e
push 0x1d73
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
mov eax, dword [ebp - 0x1c4]
mov dword [ebp - 0x10c4], eax
imul eax, dword [ebp - 0x274], 0xfffd
add eax, dword [ebp - 0x274]
je 0x100550c1
cmp dword [ebp - 0x274], 0
je 0x100550c1
mov dword [ebp - 0x9cc], 1
jmp 0x100550c8
and dword [ebp - 0x9cc], 0
mov eax, dword [ebp - 0x9cc]
neg eax
je 0x100550e7
mov eax, 0x14055248
test eax, eax
je 0x100550e7
mov dword [ebp - 0x510], 1
jmp 0x100550ee
and dword [ebp - 0x510], 0
mov eax, dword [ebp - 0x510]
inc eax
sub eax, dword [ebp - 0x1c4]
cmp dword [ebp - 0x1c4], eax
jge 0x10055115
cmp dword [ebp - 0x274], 0
jne 0x10055115
and dword [ebp - 0xe9c], 0
jmp 0x1005511f
mov dword [ebp - 0xe9c], 1
mov eax, dword [ebp - 0x1c4]
mov dword [ebp - 0x10cc], eax
mov eax, 0xe81de98
cmp eax, 0xcbc21b07
jb 0x1005514c
cmp dword [ebp - 0x274], 0
je 0x1005514c
mov dword [ebp - 0x9d4], 1
jmp 0x10055153
and dword [ebp - 0x9d4], 0
cmp dword [ebp - 0x9d4], 0
jle 0x10055168
mov dword [ebp - 0x518], 1
jmp 0x1005516f
and dword [ebp - 0x518], 0
cmp dword [ebp - 0x518], 0xd847
je 0x10055187
mov dword [ebp - 0x9dc], 1
jmp 0x1005518e
and dword [ebp - 0x9dc], 0
cmp dword [ebp - 0x9dc], 0x7eb23672
jge 0x100551a6
mov dword [ebp - 0x520], 1
jmp 0x100551ad
and dword [ebp - 0x520], 0
mov eax, dword [ebp - 0x520]
mov dword [ebp - 0x9e4], eax
cmp dword [ebp - 0x9e4], 0xfffffff7
jbe 0x100551ce
mov dword [ebp - 0x528], 1
jmp 0x100551d5
and dword [ebp - 0x528], 0
mov eax, dword [ebp - 0x528]
mov dword [ebp - 0x9ec], eax
mov eax, dword [ebp - 0x1c4]
cmp dword [ebp - 0x9ec], eax
jge 0x100551fb
mov dword [ebp - 0x530], 1
jmp 0x10055202
and dword [ebp - 0x530], 0
mov eax, dword [ebp - 0x1c4]
add eax, dword [ebp - 0x530]
mov dword [ebp - 0xea4], eax
mov dword [ebp - 0xe80], 0x4fc7bc07
mov dword [ebp - 0x84], 1
mov dword [ebp - 0xc4], 0
mov dword [ebp - 0x448], 0
mov dword [ebp - 0x13c], 0x2349124c
mov dword [ebp - 0x10d4], 1
xor eax, eax
je 0x100557c5
mov dword [ebp - 0x294], 0xfffffffc
mov dword [ebp - 0x33c], 0
jmp 0x1005527b
mov eax, dword [ebp - 0x33c]
inc eax
mov dword [ebp - 0x33c], eax
cmp dword [ebp - 0x33c], 2
jge 0x10055297
mov eax, dword [ebp - 0x33c]
mov dword [ebp + eax*4 - 0x1f8], 0x3df603fa
jmp 0x1005526e
mov byte [ebp - 0x1b2], 0
movzx eax, byte [ebp - 0x1b2]
test eax, eax
je 0x100552ce
push 0x1b89
push 0x4ec
push 0x581
push 0x5f
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_Ellipse]
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x1f8], 0xfffffff7
jmp 0x100552fc
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1f8]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x1f8], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1f8], 0x10
jne 0x100557c3
mov dword [ebp - 0x9f4], 0x969a22db
mov dword [ebp - 0xe4], 0
jmp 0x10055333
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 1
jge 0x1005534f
mov eax, dword [ebp - 0xe4]
mov dword [ebp + eax*4 - 0x1dc], 0xec93
jmp 0x10055326
mov dword [ebp - 0xe4], 0
jmp 0x10055368
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 1
jge 0x10055384
mov eax, dword [ebp - 0xe4]
mov dword [ebp + eax*4 - 0xe64], 0x81cdffa8
jmp 0x1005535b
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1f8]
mov dword [ebp - 0x10dc], eax
cmp dword [ebp - 0x9f4], 5
jne 0x100553ac
mov dword [ebp - 0xf08], 1
jmp 0x100553b3
and dword [ebp - 0xf08], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1f8], 0
je 0x100553d8
cmp dword [ebp - 0x9f4], 0
je 0x100553d8
mov dword [ebp - 0xf10], 1
jmp 0x100553df
and dword [ebp - 0xf10], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1dc]
mov dword [ebp - 0x10e4], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1f8]
mov dword [ebp - 0x10ec], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1dc], 0
je 0x10055431
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1dc], 0
je 0x10055431
mov dword [ebp - 0x538], 1
jmp 0x10055438
and dword [ebp - 0x538], 0
cmp dword [ebp - 0x538], 1
jg 0x1005544d
mov dword [ebp - 0x9fc], 1
jmp 0x10055454
and dword [ebp - 0x9fc], 0
cmp dword [ebp - 0x9fc], 0x47cd
jl 0x1005546c
mov dword [ebp - 0x540], 1
jmp 0x10055473
and dword [ebp - 0x540], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1f8]
cmp eax, dword [ebp - 0x540]
jle 0x100554a4
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1f8], 0
je 0x100554a4
mov dword [ebp - 0xa04], 1
jmp 0x100554ab
and dword [ebp - 0xa04], 0
mov eax, dword [ebp - 0xa04]
neg eax
mov dword [ebp - 0x294], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1f8], 0
je 0x100555cd
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xc4]
cmp dword [ebp + eax - 0x1dc], ecx
je 0x100554ee
mov dword [ebp - 0x548], 1
jmp 0x100554f5
and dword [ebp - 0x548], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1f8]
cmp dword [ebp - 0x548], eax
jge 0x10055516
mov dword [ebp - 0xa0c], 1
jmp 0x1005551d
and dword [ebp - 0xa0c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xa0c]
add ecx, 0x76f45a1
cmp dword [ebp + eax - 0x1dc], ecx
jg 0x10055544
mov dword [ebp - 0x550], 1
jmp 0x1005554b
and dword [ebp - 0x550], 0
mov eax, dword [ebp - 0xc4]
add eax, dword [ebp - 0x550]
cmp eax, 0x8c6a8663
jae 0x1005556a
mov dword [ebp - 0xa14], 1
jmp 0x10055571
and dword [ebp - 0xa14], 0
mov eax, dword [ebp - 0x294]
cmp dword [ebp - 0xa14], eax
jl 0x1005558b
mov dword [ebp - 0x558], 1
jmp 0x10055592
and dword [ebp - 0x558], 0
mov eax, dword [ebp - 0xc4]
cmp dword [ebp - 0x558], eax
jl 0x100555ac
mov dword [ebp - 0xa1c], 1
jmp 0x100555b3
and dword [ebp - 0xa1c], 0
mov eax, dword [ebp - 0xc4]
cmp eax, dword [ebp - 0xa1c]
jl 0x100555cd
mov dword [ebp - 0x560], 1
jmp 0x100555d4
and dword [ebp - 0x560], 0
mov eax, dword [ebp - 0x560]
mov dword [ebp - 0x448], eax
mov eax, dword [ebp - 0xc4]
cmp dword [ebp - 0x448], eax
je 0x100555fa
mov dword [ebp - 0xa24], 1
jmp 0x10055601
and dword [ebp - 0xa24], 0
imul eax, dword [ebp - 0xa24], 0xef33
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x1f8]
je 0x10055626
mov dword [ebp - 0x568], 1
jmp 0x1005562d
and dword [ebp - 0x568], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe64]
cmp dword [ebp - 0x568], eax
jl 0x1005564e
mov dword [ebp - 0xa2c], 1
jmp 0x10055655
and dword [ebp - 0xa2c], 0
mov eax, dword [ebp - 0x13c]
cmp dword [ebp - 0xa2c], eax
je 0x1005576d
mov dword [ebp - 0x440], 0x9dda4adc
cmp dword [ebp - 0x440], 0
jne 0x100556ed
cmp dword [ebp - 0x13c], 0xb075aba8
je 0x10055692
mov dword [ebp - 0xd64], 1
jmp 0x10055699
and dword [ebp - 0xd64], 0
mov eax, dword [ebp - 0x294]
cmp dword [ebp - 0x440], eax
jle 0x100556b3
mov dword [ebp - 0x570], 1
jmp 0x100556ba
and dword [ebp - 0x570], 0
mov eax, dword [ebp - 0x13c]
cmp dword [ebp - 0x570], eax
jne 0x100556d4
mov dword [ebp - 0xd68], 1
jmp 0x100556db
and dword [ebp - 0xd68], 0
cmp dword [ebp - 0x440], 0
jne 0x100556ed
and dword [ebp - 0xa34], 0
jmp 0x100556f7
mov dword [ebp - 0xa34], 1
cmp dword [ebp - 0xa34], 0xccf75bae
jne 0x1005570f
mov dword [ebp - 0xe70], 1
jmp 0x10055716
and dword [ebp - 0xe70], 0
cmp dword [ebp - 0x294], 0
jne 0x1005572d
xor eax, eax
inc eax
jne 0x1005572d
and dword [ebp - 0x578], 0
jmp 0x10055737
mov dword [ebp - 0x578], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1dc]
cmp dword [ebp - 0x578], eax
jle 0x10055758
mov dword [ebp - 0xa3c], 1
jmp 0x1005575f
and dword [ebp - 0xa3c], 0
mov eax, dword [ebp - 0xa3c]
mov dword [ebp - 0x448], eax
jmp 0x100557be
mov dword [ebp - 0x13c], 0
jmp 0x10055786
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0x14
jl 0x100557be
mov byte [ebp - 0x12d], 0
movzx eax, byte [ebp - 0x12d]
test eax, eax
je 0x100557bc
push 0
push 0
push 0x7f7
push 0x1fa7
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SendDlgItemMessageW]
jmp 0x10055779
jmp 0x100552e1
jmp 0x100557fe
mov dword [ebp - 0xc4], 0xb
jmp 0x100557de
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0x35
jl 0x100557fe
mov dword [ebp - 0xd70], 0xba5cd23e
cmp dword [ebp - 0xd70], 0
je 0x100557fc
jmp 0x100557fe
jmp 0x100557d1
mov dword [ebp - 0x84], 0xffffffea
jmp 0x10055817
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0x13
je 0x100561f3
mov dword [ebp - 0x3fc], 0xffffffff
mov dword [ebp - 0x104], 1
mov dword [ebp - 0xa4c], 1
mov dword [ebp - 0x344], 0
jmp 0x1005585b
mov eax, dword [ebp - 0x344]
inc eax
mov dword [ebp - 0x344], eax
cmp dword [ebp - 0x344], 2
jge 0x10055877
mov eax, dword [ebp - 0x344]
mov dword [ebp + eax*4 - 0xd24], 0x9b55bb2c
jmp 0x1005584e
mov dword [ebp - 0x104], 0
jmp 0x10055890
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 1
jg 0x100559f8
mov dword [ebp - 0xa44], 1
mov dword [ebp - 0x1064], 7
mov dword [ebp - 0x1060], 7
mov dword [ebp - 0x105c], 7
mov dword [ebp - 0x1058], 7
mov eax, dword [ebp - 0xa4c]
cmp dword [ebp - 0x104], eax
je 0x100558e9
mov dword [ebp - 0x588], 1
jmp 0x100558f0
and dword [ebp - 0x588], 0
mov eax, dword [ebp - 0x104]
cmp dword [ebp + eax*4 - 0xd24], 0
je 0x10055913
push 2
pop eax
test eax, eax
je 0x10055913
mov dword [ebp - 0x580], 1
jmp 0x1005591a
and dword [ebp - 0x580], 0
mov eax, dword [ebp - 0x580]
mov dword [ebp - 0xa44], eax
mov eax, dword [ebp - 0xa44]
add eax, dword [ebp - 0x588]
test eax, eax
jle 0x10055942
mov dword [ebp - 0xeac], 1
jmp 0x10055949
and dword [ebp - 0xeac], 0
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x10f4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd24]
mov dword [ebp - 0x10fc], eax
mov eax, dword [ebp - 0x104]
mov ecx, dword [ebp - 0xa4c]
cmp dword [ebp + eax*4 - 0xd24], ecx
jge 0x10055989
mov dword [ebp - 0x590], 1
jmp 0x10055990
and dword [ebp - 0x590], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xd24]
cmp dword [ebp - 0x590], eax
jl 0x100559b1
mov dword [ebp - 0xa54], 1
jmp 0x100559b8
and dword [ebp - 0xa54], 0
mov eax, dword [ebp - 0x104]
mov eax, dword [ebp + eax*4 - 0xd24]
cmp dword [ebp - 0xa54], eax
jne 0x100559d9
mov dword [ebp - 0x598], 1
jmp 0x100559e0
and dword [ebp - 0x598], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x598]
mov dword [ebp + eax - 0x1064], ecx
jmp 0x10055883
mov dword [ebp - 0x35c], 0x173bf38c
mov dword [ebp - 0xeb0], 0xfffffff7
mov dword [ebp - 0x34c], 1
mov dword [ebp - 0xa5c], 0xfffffffe
mov dword [ebp - 0x29c], 0
jmp 0x10055a39
mov eax, dword [ebp - 0x29c]
inc eax
mov dword [ebp - 0x29c], eax
cmp dword [ebp - 0x29c], 4
jge 0x10055a55
mov eax, dword [ebp - 0x29c]
mov dword [ebp + eax*4 - 0x141c], 1
jmp 0x10055a2c
mov dword [ebp - 0x34c], 0
jmp 0x10055a6e
mov eax, dword [ebp - 0x34c]
inc eax
mov dword [ebp - 0x34c], eax
cmp dword [ebp - 0x34c], 0x1a
jge 0x10055b5f
mov dword [ebp - 0x354], 0
mov dword [ebp - 0xd78], 1
mov dword [ebp - 0x2a4], 0
jmp 0x10055aa8
mov eax, dword [ebp - 0x2a4]
inc eax
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 3
jge 0x10055ac4
mov eax, dword [ebp - 0x2a4]
mov dword [ebp + eax*4 - 0x1324], 0xffffffff
jmp 0x10055a9b
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1324], 0
je 0x10055ad8
jmp 0x10055b5f
mov dword [ebp - 0x354], 0xc
jmp 0x10055af1
mov eax, dword [ebp - 0x354]
dec eax
mov dword [ebp - 0x354], eax
cmp dword [ebp - 0x354], 0xffffffef
jne 0x10055b5a
mov dword [ebp - 0x2ac], 0x328f6c74
mov dword [ebp - 0x2ac], 0xfffffff4
jmp 0x10055b1d
mov eax, dword [ebp - 0x2ac]
dec eax
mov dword [ebp - 0x2ac], eax
cmp dword [ebp - 0x2ac], 0xffffffe6
jg 0x10055b58
mov byte [ebp - 0x16d], 0
movzx eax, byte [ebp - 0x16d]
test eax, eax
je 0x10055b4b
push 0
push 0
push 0x1be7
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
cmp dword [ebp - 0xd78], 0
je 0x10055b56
jmp 0x10055b58
jmp 0x10055b10
jmp 0x10055ae4
jmp 0x10055a61
mov eax, dword [ebp - 0xa5c]
dec eax
mov dword [ebp - 0xa5c], eax
mov dword [ebp - 0xaa4], 0xffffffff
mov dword [ebp - 0x240], 0x70bb
mov dword [ebp - 0x450], 0x8cf5a8
mov dword [ebp - 0xcc], 0
jmp 0x10055ba3
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 3
jge 0x10055bbf
mov eax, dword [ebp - 0xcc]
mov dword [ebp + eax*4 - 0xf6c], 1
jmp 0x10055b96
mov dword [ebp - 0xcc], 0
jmp 0x10055bd8
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 3
jge 0x10055bf4
mov eax, dword [ebp - 0xcc]
mov dword [ebp + eax*4 - 0x1360], 1
jmp 0x10055bcb
cmp dword [ebp - 0x240], 0
je 0x10055c12
cmp dword [ebp - 0x240], 0
je 0x10055c12
mov dword [ebp - 0x5a0], 1
jmp 0x10055c19
and dword [ebp - 0x5a0], 0
cmp dword [ebp - 0x5a0], 0x1c306a92
jne 0x10055c31
mov dword [ebp - 0xe78], 1
jmp 0x10055c38
and dword [ebp - 0xe78], 0
mov eax, dword [ebp - 0x240]
mov dword [ebp - 0x1104], eax
cmp dword [ebp - 0x240], 0xffffffff
jg 0x10055c59
mov dword [ebp - 0xa64], 1
jmp 0x10055c60
and dword [ebp - 0xa64], 0
mov eax, dword [ebp - 0xa64]
mov dword [ebp - 0x450], eax
cmp dword [ebp - 0x450], 0
je 0x10055d0a
push 4
pop eax
shl eax, 1
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0xf6c]
cmp dword [ebp + eax - 0xf6c], ecx
jle 0x10055c9f
mov dword [ebp - 0x5a8], 1
jmp 0x10055ca6
and dword [ebp - 0x5a8], 0
mov eax, dword [ebp - 0x450]
mov dword [ebp - 0x110c], eax
mov eax, dword [ebp - 0x240]
imul eax, dword [ebp - 0x5a8]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0xf6c]
jg 0x10055cdf
mov eax, 0x9968
test eax, eax
jne 0x10055cdf
and dword [ebp - 0xa6c], 0
jmp 0x10055ce9
mov dword [ebp - 0xa6c], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xf6c]
cmp dword [ebp - 0xa6c], eax
je 0x10055d0a
mov dword [ebp - 0x5b0], 1
jmp 0x10055d11
and dword [ebp - 0x5b0], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x5b0]
mov dword [ebp + eax - 0x1360], ecx
mov dword [ebp - 0xa7c], 0x14ba09a1
mov dword [ebp - 0x1114], 0xfffffff6
mov byte [ebp - 0x1b4], 0
movzx eax, byte [ebp - 0x1b4]
test eax, eax
je 0x10055d56
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_LookupPrivilegeValueW]
mov byte [ebp - 0x135], 0
movzx eax, byte [ebp - 0x135]
test eax, eax
je 0x10055d73
push 0xd42
call dword [sym.imp.KERNEL32.dll_ExitThread]
cmp dword [ebp - 0x3fc], 0x19570a50
jg 0x10055d8b
mov dword [ebp - 0xa74], 1
jmp 0x10055d92
and dword [ebp - 0xa74], 0
mov eax, dword [ebp - 0x84]
add eax, dword [ebp - 0xa74]
cmp dword [ebp - 0x35c], eax
jle 0x10055db2
mov dword [ebp - 0x5b8], 1
jmp 0x10055db9
and dword [ebp - 0x5b8], 0
mov eax, dword [ebp - 0x3fc]
cmp eax, dword [ebp - 0x5b8]
jne 0x10056029
mov dword [ebp - 0xfdc], 2
mov dword [ebp - 0xfd8], 2
mov dword [ebp - 0xfd4], 2
mov dword [ebp - 0xfd0], 2
mov dword [ebp - 0x25c], 0x4d2fc5c3
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xfdc]
mov dword [ebp - 0x11b8], eax
cmp dword [ebp - 0x84], 0
jne 0x10055ead
mov eax, dword [ebp - 0xa7c]
inc eax
mov dword [ebp - 0xa7c], eax
mov eax, dword [ebp - 0x84]
add eax, 0xa
cmp eax, 1
jne 0x10055e43
mov dword [ebp - 0x5c0], 1
jmp 0x10055e4a
and dword [ebp - 0x5c0], 0
mov eax, dword [ebp - 0x5c0]
neg eax
cmp eax, dword [ebp - 0x35c]
je 0x10055e66
mov dword [ebp - 0xa84], 1
jmp 0x10055e6d
and dword [ebp - 0xa84], 0
imul eax, dword [ebp - 0xa84], 0x6232
cmp eax, dword [ebp - 0xaa4]
jge 0x10055e91
cmp dword [ebp - 0x25c], 0
jne 0x10055e91
and dword [ebp - 0x5c8], 0
jmp 0x10055e9b
mov dword [ebp - 0x5c8], 1
cmp dword [ebp - 0x5c8], 0xffffffff
jge 0x10055ead
and dword [ebp - 0xa8c], 0
jmp 0x10055eb7
mov dword [ebp - 0xa8c], 1
mov eax, dword [ebp - 0x25c]
imul eax, dword [ebp - 0xa8c]
push 4
pop ecx
shl ecx, 1
imul eax, dword [ebp + ecx - 0xfdc]
mov dword [ebp - 0x5d0], eax
mov eax, dword [ebp - 0x5d0]
mov dword [ebp - 0x25c], eax
cmp dword [ebp - 0x25c], 0
jne 0x10055efe
cmp dword [ebp - 0x25c], 0
jne 0x10055efe
and dword [ebp - 0xd80], 0
jmp 0x10055f08
mov dword [ebp - 0xd80], 1
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x11c0], eax
mov eax, dword [ebp - 0x3fc]
add eax, dword [ebp - 0x120]
cmp eax, 2
jae 0x10055f31
mov dword [ebp - 0xa94], 1
jmp 0x10055f38
and dword [ebp - 0xa94], 0
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x144], eax
mov eax, dword [ebp - 0x144]
cmp eax, dword [ebp - 0xa94]
je 0x10055f5e
mov dword [ebp - 0x5d8], 1
jmp 0x10055f65
and dword [ebp - 0x5d8], 0
mov eax, dword [ebp - 0x120]
cmp dword [ebp - 0x5d8], eax
jge 0x10055f7f
mov dword [ebp - 0xa9c], 1
jmp 0x10055f86
and dword [ebp - 0xa9c], 0
cmp dword [ebp - 0xa9c], 0xb0f4
jge 0x10055f9e
mov dword [ebp - 0x5e0], 1
jmp 0x10055fa5
and dword [ebp - 0x5e0], 0
mov eax, dword [ebp - 0x5e0]
mov dword [ebp - 0xeb0], eax
cmp dword [ebp - 0xaa4], 0xfffffff7
jle 0x10055fc6
mov dword [ebp - 0x5e8], 1
jmp 0x10055fcd
and dword [ebp - 0x5e8], 0
mov eax, dword [ebp - 0x35c]
cmp dword [ebp - 0x5e8], eax
jle 0x10055fe7
mov dword [ebp - 0xab0], 1
jmp 0x10055fee
and dword [ebp - 0xab0], 0
cmp dword [ebp - 0xab0], 0
jae 0x10056003
mov dword [ebp - 0x5f0], 1
jmp 0x1005600a
and dword [ebp - 0x5f0], 0
mov eax, dword [ebp - 0x5f0]
mov dword [ebp - 0xd88], eax
cmp dword [ebp - 0x144], 0
je 0x10056024
jmp 0x100561f3
jmp 0x100561ee
mov dword [ebp - 0xec], 0
jmp 0x10056042
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 2
jge 0x1005605e
mov eax, dword [ebp - 0xec]
mov dword [ebp + eax*4 - 0xf8c], 0xfffffff8
jmp 0x10056035
mov dword [ebp - 0xec], 0
jmp 0x10056077
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 3
jge 0x10056093
mov eax, dword [ebp - 0xec]
mov dword [ebp + eax*4 - 0x1378], 0xffffffff
jmp 0x1005606a
mov dword [ebp - 0x120], 0
jmp 0x100560ac
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 1
jg 0x100561ee
mov dword [ebp - 0xac8], 0x44bf8e16
mov dword [ebp - 0x610], 0xffffffff
mov dword [ebp - 0x144], 1
jmp 0x100560e6
mov eax, dword [ebp - 0x144]
dec eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 0
jl 0x100561e9
or eax, 0xffffffff
je 0x100561d1
mov eax, dword [ebp - 0x120]
cmp dword [ebp + eax*4 - 0xf8c], 0x447f
jne 0x1005611b
mov dword [ebp - 0xab8], 1
jmp 0x10056122
and dword [ebp - 0xab8], 0
mov eax, dword [ebp - 0xab8]
add eax, dword [ebp - 0x35c]
mov dword [ebp - 0x5f8], eax
mov eax, dword [ebp - 0x120]
mov ecx, dword [ebp - 0x5f8]
mov dword [ebp + eax*4 - 0xf8c], ecx
cmp dword [ebp - 0x5f8], 0xfffffff7
jbe 0x1005615c
mov dword [ebp - 0xac0], 1
jmp 0x10056163
and dword [ebp - 0xac0], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1378]
cmp dword [ebp - 0xac0], eax
jl 0x10056183
mov dword [ebp - 0x600], 1
jmp 0x1005618a
and dword [ebp - 0x600], 0
mov eax, dword [ebp - 0x600]
mov dword [ebp - 0xac8], eax
mov eax, dword [ebp - 0xe80]
cmp dword [ebp - 0xac8], eax
jge 0x100561b0
mov dword [ebp - 0x608], 1
jmp 0x100561b7
and dword [ebp - 0x608], 0
mov eax, dword [ebp - 0x610]
add eax, dword [ebp - 0x608]
je 0x100561d1
mov dword [ebp - 0xad0], 1
jmp 0x100561d8
and dword [ebp - 0xad0], 0
mov eax, dword [ebp - 0xad0]
mov dword [ebp - 0x610], eax
jmp 0x100560d9
jmp 0x1005609f
jmp 0x1005580a
mov dword [ebp - 0x20], 0x960f57a7
mov dword [ebp - 0xeb8], 0x60813c27
mov dword [ebp - 0x2b4], 0
jmp 0x1005621d
mov eax, dword [ebp - 0x2b4]
inc eax
mov dword [ebp - 0x2b4], eax
cmp dword [ebp - 0x2b4], 1
jge 0x10056239
mov eax, dword [ebp - 0x2b4]
mov dword [ebp + eax*4 - 0x94], 0x862f
jmp 0x10056210
mov dword [ebp - 0x20], 0
jmp 0x10056249
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jl 0x10056596
mov dword [ebp - 0xd90], 0x5ed9a924
mov dword [ebp - 0x404], 0
mov dword [ebp - 0xd98], 0xffffffff
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x94]
mov dword [ebp + ecx*4 - 0x94], eax
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0xd90]
cmp dword [ebp + eax*4 - 0x94], ecx
jne 0x100562f0
mov dword [ebp - 0x3ac], 0xffffffff
mov eax, dword [ebp - 0x3ac]
mov dword [ebp - 0x11c8], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x94]
mov dword [ebp - 0x1238], eax
cmp dword [ebp - 0x3ac], 0
je 0x100562d8
cmp dword [ebp - 0x20], 0
je 0x100562d8
mov dword [ebp - 0xad8], 1
jmp 0x100562df
and dword [ebp - 0xad8], 0
mov eax, dword [ebp - 0xad8]
mov dword [ebp - 0x3ac], eax
jmp 0x10056591
mov dword [ebp - 0x3b4], 4
mov dword [ebp - 0x618], 0xac3d6c1d
mov dword [ebp - 0xb00], 0x402be2ff
mov dword [ebp - 0xd4], 0
jmp 0x10056327
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 2
jge 0x10056343
mov eax, dword [ebp - 0xd4]
mov dword [ebp + eax*4 - 0x1120], 4
jmp 0x1005631a
mov dword [ebp - 0xd4], 0
jmp 0x1005635c
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 3
jge 0x10056378
mov eax, dword [ebp - 0xd4]
mov dword [ebp + eax*4 - 0x1390], 0
jmp 0x1005634f
mov eax, dword [ebp - 0x3b4]
mov dword [ebp - 0x404], eax
mov eax, dword [ebp - 0x404]
mov dword [ebp - 0x618], eax
mov eax, dword [ebp - 0x618]
mov dword [ebp - 0xae0], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xae0]
mov dword [ebp + eax - 0x1120], ecx
cmp dword [ebp - 0xae0], 0xebfb2c41
ja 0x100563c7
mov dword [ebp - 0x620], 1
jmp 0x100563ce
and dword [ebp - 0x620], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0x94], 0
je 0x100563f7
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x94], 0
je 0x100563f7
mov dword [ebp - 0xae8], 1
jmp 0x100563fe
and dword [ebp - 0xae8], 0
mov eax, dword [ebp - 0x620]
cmp eax, dword [ebp - 0xae8]
je 0x10056418
mov dword [ebp - 0x628], 1
jmp 0x1005641f
and dword [ebp - 0x628], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x628], eax
jg 0x10056436
mov dword [ebp - 0x43c], 1
jmp 0x1005643d
and dword [ebp - 0x43c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x43c]
mov dword [ebp + eax - 0x1390], ecx
cmp dword [ebp - 0x43c], 0x4df7b146
jne 0x10056468
mov dword [ebp - 0xaf0], 1
jmp 0x1005646f
and dword [ebp - 0xaf0], 0
cmp dword [ebp - 0xaf0], 0xd38d
jne 0x10056487
mov dword [ebp - 0x630], 1
jmp 0x1005648e
and dword [ebp - 0x630], 0
mov eax, dword [ebp - 0x630]
mov dword [ebp - 0xeb8], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x94]
mov dword [ebp - 0x1240], eax
mov eax, dword [ebp - 0x3b4]
mov dword [ebp - 0x1248], eax
cmp dword [ebp - 0x3b4], 0
jne 0x100564ca
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0x94], 0
cmp dword [ebp - 0xb00], 0x4f57b17b
jl 0x100564e2
mov dword [ebp - 0xaf8], 1
jmp 0x100564e9
and dword [ebp - 0xaf8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x94]
cmp dword [ebp - 0xaf8], eax
jle 0x1005650a
mov dword [ebp - 0x638], 1
jmp 0x10056511
and dword [ebp - 0x638], 0
imul eax, dword [ebp - 0x638], 0xa9ef
add eax, dword [ebp - 0xb00]
mov ecx, dword [ebp - 0x20]
cmp eax, dword [ebp + ecx*4 - 0x94]
jle 0x1005653d
xor eax, eax
je 0x1005653d
mov dword [ebp - 0x640], 1
jmp 0x10056544
and dword [ebp - 0x640], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x640], eax
jne 0x1005655b
mov dword [ebp - 0xb08], 1
jmp 0x10056562
and dword [ebp - 0xb08], 0
mov eax, dword [ebp - 0xd98]
cmp dword [ebp - 0xb08], eax
jle 0x1005657c
mov dword [ebp - 0x648], 1
jmp 0x10056583
and dword [ebp - 0x648], 0
mov eax, dword [ebp - 0x648]
neg eax
mov dword [ebp - 0x404], eax
jmp 0x10056242
mov dword [ebp - 0x24], 0xfffffffa
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x1cc], 0xcd4431fa
mov dword [ebp - 0x14c], 0x9c4ddb84
mov dword [ebp - 0x3bc], 0xfffffffc
mov dword [ebp - 0x364], 0xffffffff
cmp dword [ebp - 0x24], 0
je 0x1005661c
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x1250], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
add eax, 0x1454bcd7
cmp dword [ebp - 0x24], eax
jge 0x100565fa
mov dword [ebp - 0xe88], 1
jmp 0x10056601
and dword [ebp - 0xe88], 0
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x1258], eax
cmp dword [ebp - 0x24], 0
je 0x1005661c
mov dword [ebp - 0xb10], 1
jmp 0x10056623
and dword [ebp - 0xb10], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0xb10], eax
jge 0x1005663a
mov dword [ebp - 0x650], 1
jmp 0x10056641
and dword [ebp - 0x650], 0
push 3
pop eax
sub eax, dword [ebp - 0x650]
cmp eax, 0x3061ece3
jle 0x1005665d
mov dword [ebp - 0xb18], 1
jmp 0x10056664
and dword [ebp - 0xb18], 0
cmp dword [ebp - 0xb18], 1
jae 0x10056679
mov dword [ebp - 0x658], 1
jmp 0x10056680
and dword [ebp - 0x658], 0
mov eax, dword [ebp - 0x658]
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x14c], 0
je 0x1005671c
cmp dword [ebp - 0x1cc], 0
je 0x1005671c
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x28], eax
jge 0x100566b6
mov dword [ebp - 0xb20], 1
jmp 0x100566bd
and dword [ebp - 0xb20], 0
mov eax, dword [ebp - 0x14c]
cmp dword [ebp - 0xb20], eax
jge 0x100566dd
cmp dword [ebp - 0x28], 0
je 0x100566dd
mov dword [ebp - 0x660], 1
jmp 0x100566e4
and dword [ebp - 0x660], 0
mov eax, dword [ebp - 0x660]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x3bc], eax
mov eax, dword [ebp - 0x3bc]
add eax, dword [ebp - 0x1cc]
cmp dword [ebp - 0x14c], eax
jle 0x1005671c
cmp dword [ebp - 0x24], 0
je 0x1005671c
mov dword [ebp - 0xb28], 1
jmp 0x10056723
and dword [ebp - 0xb28], 0
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0xb28]
jl 0x1005673a
mov dword [ebp - 0x668], 1
jmp 0x10056741
and dword [ebp - 0x668], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x668], eax
jl 0x10056758
mov dword [ebp - 0xda0], 1
jmp 0x1005675f
and dword [ebp - 0xda0], 0
mov eax, dword [ebp - 0x1cc]
mov dword [ebp - 0x1260], eax
cmp dword [ebp - 0x24], 0
je 0x10056783
cmp dword [ebp - 0x24], 0
je 0x10056783
mov dword [ebp - 0xb30], 1
jmp 0x1005678a
and dword [ebp - 0xb30], 0
mov eax, dword [ebp - 0xb30]
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 0xf7673ed1
jbe 0x100567ae
mov dword [ebp - 0x670], 1
jmp 0x100567b5
and dword [ebp - 0x670], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x670], eax
jne 0x100567ef
mov byte [ebp - 0x1b6], 0
movzx eax, byte [ebp - 0x1b6]
test eax, eax
je 0x100567ea
push 0x209a
push 0
push 0
push 0
push 0x936
push 0
call dword [sym.imp.KERNEL32.dll_GetDateFormatW]
jmp 0x10056ca6
mov dword [ebp - 0x34], 0xae22781
mov dword [ebp - 0x3c], 0x4bab92a1
mov dword [ebp - 0xdb0], 0x8797
mov eax, 0xffff
test eax, eax
je 0x10056849
cmp dword [ebp - 0x28], 0
je 0x10056828
cmp dword [ebp - 0x28], 0
je 0x10056828
mov dword [ebp - 0xb38], 1
jmp 0x1005682f
and dword [ebp - 0xb38], 0
mov eax, dword [ebp - 0x34]
imul eax, dword [ebp - 0xb38]
test eax, eax
je 0x10056849
mov dword [ebp - 0x678], 1
jmp 0x10056850
and dword [ebp - 0x678], 0
mov eax, dword [ebp - 0x678]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x1268], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x1270], eax
cmp dword [ebp - 0x34], 0
jne 0x10056880
cmp dword [ebp - 0x3c], 0
jne 0x10056880
and dword [ebp - 0xb40], 0
jmp 0x1005688a
mov dword [ebp - 0xb40], 1
mov eax, dword [ebp - 0xb40]
neg eax
je 0x100568ba
mov byte [ebp - 0x13d], 0
movzx eax, byte [ebp - 0x13d]
test eax, eax
je 0x100568b5
push 0
push 0x738
push 0
call dword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x10056ca6
mov dword [ebp - 0x204], 0xc717898a
mov dword [ebp - 0x42c], 1
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x1278], eax
mov eax, dword [ebp - 0x204]
mov dword [ebp - 0x1280], eax
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x14c], eax
jl 0x100568fa
mov dword [ebp - 0x680], 1
jmp 0x10056901
and dword [ebp - 0x680], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x680], eax
jl 0x10056918
mov dword [ebp - 0xb48], 1
jmp 0x1005691f
and dword [ebp - 0xb48], 0
mov eax, dword [ebp - 0x364]
cmp dword [ebp - 0xb48], eax
jg 0x10056939
mov dword [ebp - 0x688], 1
jmp 0x10056940
and dword [ebp - 0x688], 0
mov eax, dword [ebp - 0x364]
cmp dword [ebp - 0x688], eax
jne 0x1005695a
mov dword [ebp - 0xb50], 1
jmp 0x10056961
and dword [ebp - 0xb50], 0
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0xb50]
cmp eax, dword [ebp - 0x3c]
jl 0x1005697b
mov dword [ebp - 0x690], 1
jmp 0x10056982
and dword [ebp - 0x690], 0
cmp dword [ebp - 0x690], 0xfffffffd
jle 0x10056997
mov dword [ebp - 0xb58], 1
jmp 0x1005699e
and dword [ebp - 0xb58], 0
cmp dword [ebp - 0xb58], 9
je 0x100569b3
mov dword [ebp - 0x698], 1
jmp 0x100569ba
and dword [ebp - 0x698], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x698], eax
jg 0x10056b28
mov dword [ebp - 0x6a0], 0x8bb1b5b3
mov dword [ebp - 0x268], 0x71ce904c
mov eax, dword [ebp - 0x204]
cmp dword [ebp - 0x3c], eax
jg 0x100569f4
mov dword [ebp - 0xec0], 1
jmp 0x100569fb
and dword [ebp - 0xec0], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x204], eax
jg 0x10056a12
mov dword [ebp - 0xb60], 1
jmp 0x10056a19
and dword [ebp - 0xb60], 0
mov eax, dword [ebp - 0xb60]
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
je 0x10056a3a
cmp dword [ebp - 0x34], 0
je 0x10056a3a
mov dword [ebp - 0xb68], 1
jmp 0x10056a41
and dword [ebp - 0xb68], 0
mov eax, dword [ebp - 0x6a0]
mov ecx, dword [ebp - 0x6a0]
imul ecx, dword [ebp - 0xb68]
imul eax, ecx
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x268]
imul eax, dword [ebp - 0x268]
cmp dword [ebp - 0x28], eax
jl 0x10056a78
mov dword [ebp - 0x6b0], 1
jmp 0x10056a7f
and dword [ebp - 0x6b0], 0
cmp dword [ebp - 0x204], 0
jne 0x10056abf
mov eax, dword [ebp - 0x204]
imul eax, dword [ebp - 0x268]
cmp eax, 9
jge 0x10056aa6
mov dword [ebp - 0x6a8], 1
jmp 0x10056aad
and dword [ebp - 0x6a8], 0
cmp dword [ebp - 0x6a8], 0xffffffff
jle 0x10056abf
and dword [ebp - 0xb70], 0
jmp 0x10056ac9
mov dword [ebp - 0xb70], 1
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0xb70], eax
jle 0x10056ae0
mov dword [ebp - 0xb78], 1
jmp 0x10056ae7
and dword [ebp - 0xb78], 0
mov eax, dword [ebp - 0x6b0]
sub eax, dword [ebp - 0xb78]
cmp eax, dword [ebp - 0x268]
jg 0x10056b10
cmp dword [ebp - 0x268], 0
je 0x10056b10
mov dword [ebp - 0x6b8], 1
jmp 0x10056b17
and dword [ebp - 0x6b8], 0
mov eax, dword [ebp - 0x6b8]
mov dword [ebp - 0x42c], eax
jmp 0x10056ca6
mov dword [ebp - 0xe90], 0x5446388d
mov byte [ebp - 0x1b1], 0
movzx eax, byte [ebp - 0x1b1]
test eax, eax
je 0x10056b4e
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetExitCodeThread]
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x1288], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x1290], eax
mov eax, dword [ebp - 0x3bc]
mov dword [ebp - 0x12a4], eax
mov eax, dword [ebp - 0x364]
imul eax, dword [ebp - 0x3c]
imul eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x3c]
jge 0x10056b8b
mov dword [ebp - 0xb80], 1
jmp 0x10056b92
and dword [ebp - 0xb80], 0
mov eax, dword [ebp - 0xb80]
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x364], 0xfffffffc
jbe 0x10056bb0
mov dword [ebp - 0x6c0], 1
jmp 0x10056bb7
and dword [ebp - 0x6c0], 0
imul eax, dword [ebp - 0x6c0], 0xcc56
cmp eax, dword [ebp - 0x14c]
jne 0x10056bd8
cmp dword [ebp - 0x28], 0
jne 0x10056bd8
and dword [ebp - 0xda8], 0
jmp 0x10056be2
mov dword [ebp - 0xda8], 1
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x12ac], eax
mov eax, 0x7bb50bb1
test eax, eax
je 0x10056c0c
cmp dword [ebp - 0xe90], 0
je 0x10056c0c
mov dword [ebp - 0xb88], 1
jmp 0x10056c13
and dword [ebp - 0xb88], 0
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0xb88]
jle 0x10056c2a
mov dword [ebp - 0x6c8], 1
jmp 0x10056c31
and dword [ebp - 0x6c8], 0
mov eax, dword [ebp - 0x42c]
cmp dword [ebp - 0x6c8], eax
jl 0x10056c4b
mov dword [ebp - 0xb90], 1
jmp 0x10056c52
and dword [ebp - 0xb90], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0xb90], eax
je 0x10056c69
mov dword [ebp - 0x6d0], 1
jmp 0x10056c70
and dword [ebp - 0x6d0], 0
mov eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0x6d0]
sub eax, dword [ebp - 0xdb0]
cmp eax, dword [ebp - 0x14c]
jle 0x10056c93
mov dword [ebp - 0xb98], 1
jmp 0x10056c9a
and dword [ebp - 0xb98], 0
mov eax, dword [ebp - 0xb98]
mov dword [ebp - 0x42c], eax
mov dword [ebp - 0x54], 0x8905154
mov dword [ebp - 0x1c], 0x960f57a7
mov dword [ebp - 0xdb8], 0x60813c27
mov dword [ebp - 0x2bc], 0
jmp 0x10056cd7
mov eax, dword [ebp - 0x2bc]
inc eax
mov dword [ebp - 0x2bc], eax
cmp dword [ebp - 0x2bc], 1
jge 0x10056cf3
mov eax, dword [ebp - 0x2bc]
mov dword [ebp + eax*4 - 0x8c], 0x862f
jmp 0x10056cca
mov dword [ebp - 0x1c], 0
jmp 0x10056d03
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jl 0x10057050
mov dword [ebp - 0xec8], 0x5ed9a924
mov dword [ebp - 0x44c], 0
mov dword [ebp - 0xe98], 0xffffffff
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x8c]
mov dword [ebp + ecx*4 - 0x8c], eax
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0xec8]
cmp dword [ebp + eax*4 - 0x8c], ecx
jne 0x10056daa
mov dword [ebp - 0x3c4], 0xffffffff
mov eax, dword [ebp - 0x3c4]
mov dword [ebp - 0x12b4], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x8c]
mov dword [ebp - 0x12bc], eax
cmp dword [ebp - 0x3c4], 0
je 0x10056d92
cmp dword [ebp - 0x1c], 0
je 0x10056d92
mov dword [ebp - 0x6d8], 1
jmp 0x10056d99
and dword [ebp - 0x6d8], 0
mov eax, dword [ebp - 0x6d8]
mov dword [ebp - 0x3c4], eax
jmp 0x1005704b
mov dword [ebp - 0x3cc], 4
mov dword [ebp - 0xba0], 0xac3d6c1d
mov dword [ebp - 0x700], 0x402be2ff
mov dword [ebp - 0xfc], 0
jmp 0x10056de1
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 2
jge 0x10056dfd
mov eax, dword [ebp - 0xfc]
mov dword [ebp + eax*4 - 0x112c], 4
jmp 0x10056dd4
mov dword [ebp - 0xfc], 0
jmp 0x10056e16
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 3
jge 0x10056e32
mov eax, dword [ebp - 0xfc]
mov dword [ebp + eax*4 - 0x13a8], 0
jmp 0x10056e09
mov eax, dword [ebp - 0x3cc]
mov dword [ebp - 0x44c], eax
mov eax, dword [ebp - 0x44c]
mov dword [ebp - 0xba0], eax
mov eax, dword [ebp - 0xba0]
mov dword [ebp - 0x6e0], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x6e0]
mov dword [ebp + eax - 0x112c], ecx
cmp dword [ebp - 0x6e0], 0xebfb2c41
ja 0x10056e81
mov dword [ebp - 0xba8], 1
jmp 0x10056e88
and dword [ebp - 0xba8], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x8c], 0
je 0x10056eb1
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x8c], 0
je 0x10056eb1
mov dword [ebp - 0x6e8], 1
jmp 0x10056eb8
and dword [ebp - 0x6e8], 0
mov eax, dword [ebp - 0xba8]
cmp eax, dword [ebp - 0x6e8]
je 0x10056ed2
mov dword [ebp - 0xbb0], 1
jmp 0x10056ed9
and dword [ebp - 0xbb0], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0xbb0], eax
jg 0x10056ef0
mov dword [ebp - 0x40c], 1
jmp 0x10056ef7
and dword [ebp - 0x40c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x40c]
mov dword [ebp + eax - 0x13a8], ecx
cmp dword [ebp - 0x40c], 0x4df7b146
jne 0x10056f22
mov dword [ebp - 0x6f0], 1
jmp 0x10056f29
and dword [ebp - 0x6f0], 0
cmp dword [ebp - 0x6f0], 0xd38d
jne 0x10056f41
mov dword [ebp - 0xbb8], 1
jmp 0x10056f48
and dword [ebp - 0xbb8], 0
mov eax, dword [ebp - 0xbb8]
mov dword [ebp - 0xdb8], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x8c]
mov dword [ebp - 0x1070], eax
mov eax, dword [ebp - 0x3cc]
mov dword [ebp - 0x11ec], eax
cmp dword [ebp - 0x3cc], 0
jne 0x10056f84
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x8c], 0
cmp dword [ebp - 0x700], 0x4f57b17b
jl 0x10056f9c
mov dword [ebp - 0x6f8], 1
jmp 0x10056fa3
and dword [ebp - 0x6f8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x8c]
cmp dword [ebp - 0x6f8], eax
jle 0x10056fc4
mov dword [ebp - 0xbc0], 1
jmp 0x10056fcb
and dword [ebp - 0xbc0], 0
imul eax, dword [ebp - 0xbc0], 0xa9ef
add eax, dword [ebp - 0x700]
mov ecx, dword [ebp - 0x1c]
cmp eax, dword [ebp + ecx*4 - 0x8c]
jle 0x10056ff7
xor eax, eax
je 0x10056ff7
mov dword [ebp - 0xbc8], 1
jmp 0x10056ffe
and dword [ebp - 0xbc8], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0xbc8], eax
jne 0x10057015
mov dword [ebp - 0x708], 1
jmp 0x1005701c
and dword [ebp - 0x708], 0
mov eax, dword [ebp - 0xe98]
cmp dword [ebp - 0x708], eax
jle 0x10057036
mov dword [ebp - 0xbd0], 1
jmp 0x1005703d
and dword [ebp - 0xbd0], 0
mov eax, dword [ebp - 0xbd0]
neg eax
mov dword [ebp - 0x44c], eax
jmp 0x10056cfc
mov dword [ebp - 0x218], 0x57a7c203
mov dword [ebp - 0x36c], 0
jmp 0x10057073
mov eax, dword [ebp - 0x36c]
inc eax
mov dword [ebp - 0x36c], eax
cmp dword [ebp - 0x36c], 2
jge 0x1005708f
mov eax, dword [ebp - 0x36c]
mov dword [ebp + eax*4 - 0x1138], 0x62fd41e5
jmp 0x10057066
mov byte [ebp - 0x145], 0
movzx eax, byte [ebp - 0x145]
test eax, eax
je 0x100570a9
push 0
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov dword [ebp - 0x218], 0
jmp 0x100570c2
mov eax, dword [ebp - 0x218]
inc eax
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 2
jge 0x100570de
mov eax, dword [ebp - 0x218]
mov dword [ebp + eax*4 - 0x1138], 0x70ade21
jmp 0x100570b5
mov dword [ebp - 0x30], 0xfffffffa
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x1ec], 0xcd4431fa
mov dword [ebp - 0x154], 0x9c4ddb84
mov dword [ebp - 0x3d4], 0xfffffffc
mov dword [ebp - 0x2c4], 0xffffffff
cmp dword [ebp - 0x30], 0
je 0x10057164
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x1078], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
add eax, 0x1454bcd7
cmp dword [ebp - 0x30], eax
jge 0x10057142
mov dword [ebp - 0xdc0], 1
jmp 0x10057149
and dword [ebp - 0xdc0], 0
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x1228], eax
cmp dword [ebp - 0x30], 0
je 0x10057164
mov dword [ebp - 0x710], 1
jmp 0x1005716b
and dword [ebp - 0x710], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x710], eax
jge 0x10057182
mov dword [ebp - 0xbd8], 1
jmp 0x10057189
and dword [ebp - 0xbd8], 0
push 3
pop eax
sub eax, dword [ebp - 0xbd8]
cmp eax, 0x3061ece3
jle 0x100571a5
mov dword [ebp - 0x718], 1
jmp 0x100571ac
and dword [ebp - 0x718], 0
cmp dword [ebp - 0x718], 1
jae 0x100571c1
mov dword [ebp - 0xbe0], 1
jmp 0x100571c8
and dword [ebp - 0xbe0], 0
mov eax, dword [ebp - 0xbe0]
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x154], 0
je 0x10057264
cmp dword [ebp - 0x1ec], 0
je 0x10057264
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x2c], eax
jge 0x100571fe
mov dword [ebp - 0x720], 1
jmp 0x10057205
and dword [ebp - 0x720], 0
mov eax, dword [ebp - 0x154]
cmp dword [ebp - 0x720], eax
jge 0x10057225
cmp dword [ebp - 0x2c], 0
je 0x10057225
mov dword [ebp - 0xbe8], 1
jmp 0x1005722c
and dword [ebp - 0xbe8], 0
mov eax, dword [ebp - 0xbe8]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x3d4], eax
mov eax, dword [ebp - 0x3d4]
add eax, dword [ebp - 0x1ec]
cmp dword [ebp - 0x154], eax
jle 0x10057264
cmp dword [ebp - 0x30], 0
je 0x10057264
mov dword [ebp - 0x728], 1
jmp 0x1005726b
and dword [ebp - 0x728], 0
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x728]
jl 0x10057282
mov dword [ebp - 0xbf0], 1
jmp 0x10057289
and dword [ebp - 0xbf0], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0xbf0], eax
jl 0x100572a0
mov dword [ebp - 0xed0], 1
jmp 0x100572a7
and dword [ebp - 0xed0], 0
mov eax, dword [ebp - 0x1ec]
mov dword [ebp - 0x1080], eax
cmp dword [ebp - 0x30], 0
je 0x100572cb
cmp dword [ebp - 0x30], 0
je 0x100572cb
mov dword [ebp - 0x730], 1
jmp 0x100572d2
and dword [ebp - 0x730], 0
mov eax, dword [ebp - 0x730]
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 0xf7673ed1
jbe 0x100572f6
mov dword [ebp - 0xbf8], 1
jmp 0x100572fd
and dword [ebp - 0xbf8], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0xbf8], eax
jne 0x10057337
mov byte [ebp - 0x1ab], 0
movzx eax, byte [ebp - 0x1ab]
test eax, eax
je 0x10057332
push 0x209a
push 0
push 0
push 0
push 0x936
push 0
call dword [sym.imp.KERNEL32.dll_GetDateFormatW]
jmp 0x100577ee
mov dword [ebp - 0x40], 0xae22781
mov dword [ebp - 0x38], 0x4bab92a1
mov dword [ebp - 0xed8], 0x8797
mov eax, 0xffff
test eax, eax
je 0x10057391
cmp dword [ebp - 0x2c], 0
je 0x10057370
cmp dword [ebp - 0x2c], 0
je 0x10057370
mov dword [ebp - 0x738], 1
jmp 0x10057377
and dword [ebp - 0x738], 0
mov eax, dword [ebp - 0x40]
imul eax, dword [ebp - 0x738]
test eax, eax
je 0x10057391
mov dword [ebp - 0xc00], 1
jmp 0x10057398
and dword [ebp - 0xc00], 0
mov eax, dword [ebp - 0xc00]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x1230], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x1088], eax
cmp dword [ebp - 0x40], 0
jne 0x100573c8
cmp dword [ebp - 0x38], 0
jne 0x100573c8
and dword [ebp - 0x740], 0
jmp 0x100573d2
mov dword [ebp - 0x740], 1
mov eax, dword [ebp - 0x740]
neg eax
je 0x10057402
mov byte [ebp - 0x14d], 0
movzx eax, byte [ebp - 0x14d]
test eax, eax
je 0x100573fd
push 0
push 0x738
push 0
call dword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x100577ee
mov dword [ebp - 0x248], 0xc717898a
mov dword [ebp - 0x414], 1
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x11f4], eax
mov eax, dword [ebp - 0x248]
mov dword [ebp - 0x1090], eax
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x154], eax
jl 0x10057442
mov dword [ebp - 0xc08], 1
jmp 0x10057449
and dword [ebp - 0xc08], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0xc08], eax
jl 0x10057460
mov dword [ebp - 0x748], 1
jmp 0x10057467
and dword [ebp - 0x748], 0
mov eax, dword [ebp - 0x2c4]
cmp dword [ebp - 0x748], eax
jg 0x10057481
mov dword [ebp - 0xc10], 1
jmp 0x10057488
and dword [ebp - 0xc10], 0
mov eax, dword [ebp - 0x2c4]
cmp dword [ebp - 0xc10], eax
jne 0x100574a2
mov dword [ebp - 0x750], 1
jmp 0x100574a9
and dword [ebp - 0x750], 0
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x750]
cmp eax, dword [ebp - 0x38]
jl 0x100574c3
mov dword [ebp - 0xc18], 1
jmp 0x100574ca
and dword [ebp - 0xc18], 0
cmp dword [ebp - 0xc18], 0xfffffffd
jle 0x100574df
mov dword [ebp - 0x758], 1
jmp 0x100574e6
and dword [ebp - 0x758], 0
cmp dword [ebp - 0x758], 9
je 0x100574fb
mov dword [ebp - 0xc20], 1
jmp 0x10057502
and dword [ebp - 0xc20], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0xc20], eax
jg 0x10057670
mov dword [ebp - 0xc28], 0x8bb1b5b3
mov dword [ebp - 0x220], 0x71ce904c
mov eax, dword [ebp - 0x248]
cmp dword [ebp - 0x38], eax
jg 0x1005753c
mov dword [ebp - 0xdc8], 1
jmp 0x10057543
and dword [ebp - 0xdc8], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x248], eax
jg 0x1005755a
mov dword [ebp - 0x760], 1
jmp 0x10057561
and dword [ebp - 0x760], 0
mov eax, dword [ebp - 0x760]
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
je 0x10057582
cmp dword [ebp - 0x40], 0
je 0x10057582
mov dword [ebp - 0x768], 1
jmp 0x10057589
and dword [ebp - 0x768], 0
mov eax, dword [ebp - 0xc28]
mov ecx, dword [ebp - 0xc28]
imul ecx, dword [ebp - 0x768]
imul eax, ecx
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x220]
imul eax, dword [ebp - 0x220]
cmp dword [ebp - 0x2c], eax
jl 0x100575c0
mov dword [ebp - 0xc38], 1
jmp 0x100575c7
and dword [ebp - 0xc38], 0
cmp dword [ebp - 0x248], 0
jne 0x10057607
mov eax, dword [ebp - 0x248]
imul eax, dword [ebp - 0x220]
cmp eax, 9
jge 0x100575ee
mov dword [ebp - 0xc30], 1
jmp 0x100575f5
and dword [ebp - 0xc30], 0
cmp dword [ebp - 0xc30], 0xffffffff
jle 0x10057607
and dword [ebp - 0x770], 0
jmp 0x10057611
mov dword [ebp - 0x770], 1
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x770], eax
jle 0x10057628
mov dword [ebp - 0x778], 1
jmp 0x1005762f
and dword [ebp - 0x778], 0
mov eax, dword [ebp - 0xc38]
sub eax, dword [ebp - 0x778]
cmp eax, dword [ebp - 0x220]
jg 0x10057658
cmp dword [ebp - 0x220], 0
je 0x10057658
mov dword [ebp - 0xc40], 1
jmp 0x1005765f
and dword [ebp - 0xc40], 0
mov eax, dword [ebp - 0xc40]
mov dword [ebp - 0x414], eax
jmp 0x100577ee
mov dword [ebp - 0xdd0], 0x5446388d
mov byte [ebp - 0x1b5], 0
movzx eax, byte [ebp - 0x1b5]
test eax, eax
je 0x10057696
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetExitCodeThread]
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x11fc], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x1098], eax
mov eax, dword [ebp - 0x3d4]
mov dword [ebp - 0x1264], eax
mov eax, dword [ebp - 0x2c4]
imul eax, dword [ebp - 0x38]
imul eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x38]
jge 0x100576d3
mov dword [ebp - 0x780], 1
jmp 0x100576da
and dword [ebp - 0x780], 0
mov eax, dword [ebp - 0x780]
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x2c4], 0xfffffffc
jbe 0x100576f8
mov dword [ebp - 0xc48], 1
jmp 0x100576ff
and dword [ebp - 0xc48], 0
imul eax, dword [ebp - 0xc48], 0xcc56
cmp eax, dword [ebp - 0x154]
jne 0x10057720
cmp dword [ebp - 0x2c], 0
jne 0x10057720
and dword [ebp - 0xea0], 0
jmp 0x1005772a
mov dword [ebp - 0xea0], 1
mov eax, dword [ebp - 0x154]
mov dword [ebp - 0x1068], eax
mov eax, 0x7bb50bb1
test eax, eax
je 0x10057754
cmp dword [ebp - 0xdd0], 0
je 0x10057754
mov dword [ebp - 0x788], 1
jmp 0x1005775b
and dword [ebp - 0x788], 0
mov eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0x788]
jle 0x10057772
mov dword [ebp - 0xc50], 1
jmp 0x10057779
and dword [ebp - 0xc50], 0
mov eax, dword [ebp - 0x414]
cmp dword [ebp - 0xc50], eax
jl 0x10057793
mov dword [ebp - 0x790], 1
jmp 0x1005779a
and dword [ebp - 0x790], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x790], eax
je 0x100577b1
mov dword [ebp - 0xc58], 1
jmp 0x100577b8
and dword [ebp - 0xc58], 0
mov eax, dword [ebp - 0x40]
sub eax, dword [ebp - 0xc58]
sub eax, dword [ebp - 0xed8]
cmp eax, dword [ebp - 0x154]
jle 0x100577db
mov dword [ebp - 0x798], 1
jmp 0x100577e2
and dword [ebp - 0x798], 0
mov eax, dword [ebp - 0x798]
mov dword [ebp - 0x414], eax
mov dword [ebp - 0x70], 0x82eac453
mov dword [ebp - 0x260], 0x37b30477
mov dword [ebp - 0x2cc], 0x3a72
mov dword [ebp - 0x7c8], 0xfffffff7
mov dword [ebp - 0x7a8], 0xfffffff8
mov dword [ebp - 0x3dc], 7
mov dword [ebp - 0x434], 0xe11771b7
mov dword [ebp - 0x3e4], 2
mov dword [ebp - 0xee0], 1
mov dword [ebp - 0x374], 0
jmp 0x1005785e
mov eax, dword [ebp - 0x374]
inc eax
mov dword [ebp - 0x374], eax
cmp dword [ebp - 0x374], 3
jge 0x1005787a
mov eax, dword [ebp - 0x374]
mov dword [ebp + eax*4 - 0x13c0], 0x70055833
jmp 0x10057851
cmp dword [ebp - 0x70], 0
jne 0x100579cb
mov dword [ebp - 0x260], 1
cmp dword [ebp - 0x260], 0
jne 0x100578a3
mov dword [ebp - 0xc60], 1
jmp 0x100578aa
and dword [ebp - 0xc60], 0
mov eax, dword [ebp - 0xc60]
neg eax
cmp eax, 0xf4e55b65
jbe 0x100578c5
mov dword [ebp - 0x7a0], 1
jmp 0x100578cc
and dword [ebp - 0x7a0], 0
cmp dword [ebp - 0x7a0], 0x258d0336
jge 0x100578e4
mov dword [ebp - 0xdd8], 1
jmp 0x100578eb
and dword [ebp - 0xdd8], 0
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x1204], eax
cmp dword [ebp - 0x260], 0
je 0x1005790f
cmp dword [ebp - 0x70], 0
je 0x1005790f
mov dword [ebp - 0xea8], 1
jmp 0x10057916
and dword [ebp - 0xea8], 0
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x10a8], eax
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x12d4], eax
mov eax, dword [ebp - 0x2cc]
cmp dword [ebp - 0x2cc], eax
jl 0x10057942
mov dword [ebp - 0xde0], 1
jmp 0x10057949
and dword [ebp - 0xde0], 0
mov eax, dword [ebp - 0x2cc]
mov dword [ebp - 0x10b0], eax
cmp dword [ebp - 0x7c8], 0x9e8
jge 0x10057972
or eax, 0xffffffff
je 0x10057972
mov dword [ebp - 0xc68], 1
jmp 0x10057979
and dword [ebp - 0xc68], 0
mov eax, dword [ebp - 0xc68]
mov dword [ebp - 0x7a8], eax
mov eax, dword [ebp - 0x7a8]
mov dword [ebp - 0x3dc], eax
mov eax, dword [ebp - 0x3dc]
mov dword [ebp - 0x434], eax
cmp dword [ebp - 0x434], 7
jne 0x100579b2
mov dword [ebp - 0xc70], 1
jmp 0x100579b9
and dword [ebp - 0xc70], 0
cmp dword [ebp - 0xc70], 0
jne 0x100579e9
cmp dword [ebp - 0x260], 0
je 0x100579e9
cmp dword [ebp - 0x260], 0
je 0x100579e9
cmp dword [ebp - 0x3dc], 0
je 0x100579e9
mov dword [ebp - 0x7b0], 1
jmp 0x100579f0
and dword [ebp - 0x7b0], 0
mov eax, dword [ebp - 0x7b0]
mov dword [ebp - 0x3e4], eax
cmp dword [ebp - 0x3e4], 0
jne 0x10057a17
cmp dword [ebp - 0x434], 0
jne 0x10057a17
and dword [ebp - 0xc78], 0
jmp 0x10057a21
mov dword [ebp - 0xc78], 1
mov eax, dword [ebp - 0x2cc]
imul eax, dword [ebp - 0xc78]
cmp eax, dword [ebp - 0x70]
je 0x10057a3f
mov dword [ebp - 0x7b8], 1
jmp 0x10057a46
and dword [ebp - 0x7b8], 0
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x7b8], eax
jge 0x10057a66
cmp dword [ebp - 0x3e4], 0
je 0x10057a66
mov dword [ebp - 0xc80], 1
jmp 0x10057a6d
and dword [ebp - 0xc80], 0
mov eax, dword [ebp - 0xc80]
sub eax, 0xffff
jne 0x10057a8c
mov eax, 0x54c3
test eax, eax
jne 0x10057a8c
and dword [ebp - 0x7c0], 0
jmp 0x10057a96
mov dword [ebp - 0x7c0], 1
mov eax, dword [ebp - 0x7c0]
shl eax, 2
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x13c0], eax
cmp dword [ebp - 0x70], 0xfffffffe
jae 0x10057abe
mov dword [ebp - 0xc88], 1
jmp 0x10057ac5
and dword [ebp - 0xc88], 0
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0xc88], eax
jne 0x10057adc
mov dword [ebp - 0xc90], 1
jmp 0x10057ae3
and dword [ebp - 0xc90], 0
mov eax, dword [ebp - 0x7c8]
cmp dword [ebp - 0xc90], eax
je 0x10057afd
mov dword [ebp - 0x7d0], 1
jmp 0x10057b04
and dword [ebp - 0x7d0], 0
mov eax, dword [ebp - 0x7d0]
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0xee0], eax
mov dword [ebp - 0xe30], 0xfff9
mov dword [ebp - 0x228], 0xfe387fb0
mov dword [ebp - 0x44], 0xec2db221
mov dword [ebp - 0x15c], 0x14768c0a
mov dword [ebp - 0xac], 0xcd509978
mov dword [ebp - 0x2d8], 0xea2a3b3f
mov dword [ebp - 0x250], 0xfffffffd
mov dword [ebp - 0x384], 0xffffffff
mov dword [ebp - 0xffc], 0x2a103abe
mov dword [ebp - 0xff8], 0x2a103abe
mov dword [ebp - 0xff4], 0x2a103abe
mov dword [ebp - 0xff0], 0x2a103abe
mov dword [ebp - 0x270], 6
mov dword [ebp - 0xdc], 0
jmp 0x10057bae
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 1
jge 0x10057bc7
mov eax, dword [ebp - 0xdc]
mov dword [ebp + eax*4 - 0x78], 0xd42374b1
jmp 0x10057ba1
mov dword [ebp - 0xdc], 0
jmp 0x10057be0
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 3
jge 0x10057bfc
mov eax, dword [ebp - 0xdc]
mov dword [ebp + eax*4 - 0x13d8], 0xfffffff7
jmp 0x10057bd3
mov eax, dword [ebp - 0x250]
inc eax
mov dword [ebp - 0x250], eax
mov eax, 0x5674
sub eax, dword [ebp - 0x15c]
neg eax
cmp dword [ebp - 0x228], eax
jge 0x10057c2a
mov dword [ebp - 0xc98], 1
jmp 0x10057c31
and dword [ebp - 0xc98], 0
mov eax, dword [ebp - 0xc98]
mov dword [ebp - 0x384], eax
mov eax, dword [ebp - 0x384]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x78]
cmp eax, 0xfffe
jne 0x10057c61
mov dword [ebp - 0x7d8], 1
jmp 0x10057c68
and dword [ebp - 0x7d8], 0
mov eax, dword [ebp - 0x250]
add eax, dword [ebp - 0x7d8]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x78]
jge 0x10057c8c
mov dword [ebp - 0xca0], 1
jmp 0x10057c93
and dword [ebp - 0xca0], 0
cmp dword [ebp - 0xca0], 0xfffffffa
jle 0x10057ca8
mov dword [ebp - 0x7e0], 1
jmp 0x10057caf
and dword [ebp - 0x7e0], 0
mov eax, dword [ebp - 0xac]
cmp eax, dword [ebp - 0x7e0]
jl 0x10057cc9
mov dword [ebp - 0x41c], 1
jmp 0x10057cd0
and dword [ebp - 0x41c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x41c]
mov dword [ebp + eax - 0x78], ecx
cmp dword [ebp - 0x41c], 0
jne 0x10057cff
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x78], 0
jne 0x10057cff
and dword [ebp - 0xca8], 0
jmp 0x10057d09
mov dword [ebp - 0xca8], 1
mov eax, dword [ebp - 0xca8]
mov dword [ebp - 0x2d8], eax
cmp dword [ebp - 0x2d8], 0xd47c
jge 0x10057d2d
mov dword [ebp - 0x7e8], 1
jmp 0x10057d34
and dword [ebp - 0x7e8], 0
mov eax, dword [ebp - 0x7e8]
mov dword [ebp - 0x15c], eax
mov eax, dword [ebp - 0x250]
cmp dword [ebp - 0x384], eax
jne 0x10057d5a
mov dword [ebp - 0xcb0], 1
jmp 0x10057d61
and dword [ebp - 0xcb0], 0
mov eax, dword [ebp - 0xac]
cmp dword [ebp - 0xcb0], eax
jge 0x10057d7b
mov dword [ebp - 0x7f0], 1
jmp 0x10057d82
and dword [ebp - 0x7f0], 0
cmp dword [ebp - 0x7f0], 1
jg 0x10057d97
mov dword [ebp - 0xcb8], 1
jmp 0x10057d9e
and dword [ebp - 0xcb8], 0
cmp dword [ebp - 0xcb8], 0xffff
jae 0x10057db6
mov dword [ebp - 0x7f8], 1
jmp 0x10057dbd
and dword [ebp - 0x7f8], 0
mov eax, dword [ebp - 0xac]
imul eax, dword [ebp - 0x7f8]
imul eax, dword [ebp - 0x44]
cmp eax, 1
jne 0x10057ddf
mov dword [ebp - 0xcc0], 1
jmp 0x10057de6
and dword [ebp - 0xcc0], 0
mov eax, dword [ebp - 0x228]
cmp dword [ebp - 0xcc0], eax
jl 0x10057e00
mov dword [ebp - 0x800], 1
jmp 0x10057e07
and dword [ebp - 0x800], 0
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x800], eax
jle 0x10057e1e
mov dword [ebp - 0xcc8], 1
jmp 0x10057e25
and dword [ebp - 0xcc8], 0
cmp dword [ebp - 0xcc8], 0x490ce61f
jle 0x10057e3d
mov dword [ebp - 0xde8], 1
jmp 0x10057e44
and dword [ebp - 0xde8], 0
mov eax, dword [ebp - 0x228]
mov ecx, dword [ebp - 0xac]
lea eax, [eax + ecx + 0x3e8a]
cmp eax, dword [ebp - 0x228]
jle 0x10057e6b