Function at 0x1004d05e
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10084ff5
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x324
push esi
push edi
and dword [ebp - 0x70], 0
mov dword [ebp - 0x50], 0xb26bdde0
mov dword [ebp - 0x50], 0
jmp 0x1004d099
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0xa
je 0x1004d0bd
mov byte [ebp - 0x34], 0
movzx eax, byte [ebp - 0x34]
test eax, eax
je 0x1004d0b3
push 0
call fcn.10050459
pop ecx
cmp dword [ebp - 0x50], 0
je 0x1004d0bb
jmp 0x1004d0bd
jmp 0x1004d092
mov eax, dword [0x14b2179c]
and eax, 1
jne 0x1004d0f1
mov eax, dword [0x14b2179c]
or eax, 1
mov dword [0x14b2179c], eax
and dword [ebp - 4], 0
mov ecx, 0x14b2177c
call fcn.100524d6
push 0x10086326
call fcn.1006c5d6
pop ecx
or dword [ebp - 4], 0xffffffff
push 3
lea ecx, [ebp - 0x220]
call fcn.10025495
mov dword [ebp - 4], 1
mov dword [ebp - 0x6c], 0
jmp 0x1004d115
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 3
jge 0x1004d131
push dword [ebp - 0x6c]
lea ecx, [ebp - 0x220]
call fcn.10025506
mov dword [eax], 1
jmp 0x1004d10e
push 0xce9
push 0x1ba1
push 0
call fcn.100505e8
add esp, 0xc
lea eax, [ebp - 0x220]
push eax
push 1
push 0x7ce0
call fcn.1004cea1
add esp, 0xc
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x220]
call fcn.10025501
mov ecx, dword [ebp + 0xc]
call fcn.1004c55f
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x1c], 0x825e7a66
mov dword [ebp - 0x18], 0x13d
mov dword [ebp - 0x274], 0x54efd0e6
push 0x48b5
push 0x6433
push 0
push 0xea5
lea eax, [ebp - 0x18]
push eax
call fcn.100506c3
add esp, 0x14
mov dword [ebp - 0x18], 0xffffffe8
jmp 0x1004d1bd
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0x14
jl 0x1004d6c3
mov dword [ebp - 0x3c], 0xfffffff9
mov dword [ebp - 0x14], 0x7d38c461
mov dword [ebp - 0x64], 0
jmp 0x1004d1e5
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 2
jge 0x1004d1fb
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x15c], 1
jmp 0x1004d1de
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x240], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x15c]
mov dword [ebp - 0x244], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x18]
cmp dword [ebp + eax - 0x15c], ecx
jg 0x1004d235
mov dword [ebp - 0x120], 1
jmp 0x1004d23c
and dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x120]
jg 0x1004d253
mov dword [ebp - 0xa4], 1
jmp 0x1004d25a
and dword [ebp - 0xa4], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0xa4], eax
jl 0x1004d53c
mov dword [ebp - 0x10c], 0
mov dword [ebp - 0x1c8], 7
mov dword [ebp - 0x1c4], 7
mov dword [ebp - 0x1c0], 7
mov dword [ebp - 0x1bc], 7
mov dword [ebp - 0xb4], 0x12f69a01
mov dword [ebp - 0x1c], 0
jmp 0x1004d2b5
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0xffffffef
jne 0x1004d511
mov dword [ebp - 0x1e4], 0x1d67
mov dword [ebp - 0x1e0], 0x1d67
mov dword [ebp - 0x1dc], 0x1d67
mov dword [ebp - 0x1d8], 0x1d67
lea ecx, [ebp - 0x95]
call fcn.10008d2a
push eax
lea eax, [ebp - 0x1d4]
push eax
lea eax, [ebp - 0x1e4]
push eax
lea ecx, [ebp - 0x30c]
call fcn.10025515
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x238]
call fcn.100254d7
mov dword [ebp - 4], 2
mov dword [ebp - 0x19c], 0xfffffffc
push 3
pop eax
test eax, eax
je 0x1004d4e3
cmp dword [ebp - 0x18], 0x129b45e8
jg 0x1004d34d
mov dword [ebp - 0x150], 1
jmp 0x1004d354
and dword [ebp - 0x150], 0
cmp dword [ebp - 0x150], 0xfffa
jbe 0x1004d372
cmp dword [ebp - 0x18], 0
je 0x1004d372
mov dword [ebp - 0x12c], 1
jmp 0x1004d379
and dword [ebp - 0x12c], 0
mov eax, dword [ebp - 0x12c]
sub eax, 0xe487
cmp eax, 1
jne 0x1004d39e
mov eax, 0xc090
test eax, eax
je 0x1004d39e
mov dword [ebp - 0x16c], 1
jmp 0x1004d3a5
and dword [ebp - 0x16c], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xac], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xac]
mov dword [ebp + eax - 0x1c8], ecx
mov eax, dword [ebp - 0x10c]
cmp dword [ebp - 0xac], eax
jg 0x1004d3da
mov dword [ebp - 0x104], 1
jmp 0x1004d3e1
and dword [ebp - 0x104], 0
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 1
je 0x1004d402
mov dword [ebp - 0x144], 1
jmp 0x1004d409
and dword [ebp - 0x144], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x15c]
add eax, dword [ebp - 0x144]
cmp eax, 0x578
jne 0x1004d42f
mov dword [ebp - 0xbc], 1
jmp 0x1004d436
and dword [ebp - 0xbc], 0
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0xee6ee3e4
jne 0x1004d454
mov dword [ebp - 0x1a8], 1
jmp 0x1004d45b
and dword [ebp - 0x1a8], 0
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x27c], eax
push 1
lea ecx, [ebp - 0x238]
call fcn.10025506
push 1
lea ecx, [ebp - 0x238]
call fcn.10025506
imul eax, dword [eax], 0xfffffff9
neg eax
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x15c]
je 0x1004d4a1
mov dword [ebp - 0xc4], 1
jmp 0x1004d4a8
and dword [ebp - 0xc4], 0
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x14], eax
jg 0x1004d4c5
mov dword [ebp - 0x134], 1
jmp 0x1004d4cc
and dword [ebp - 0x134], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x134], eax
jg 0x1004d4e3
mov dword [ebp - 0x1a4], 1
jmp 0x1004d4ea
and dword [ebp - 0x1a4], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x1c8]
mov dword [ebp - 0x19c], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x238]
call fcn.10025501
jmp 0x1004d2ae
mov dword [ebp - 0x14], 1
jmp 0x1004d521
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jl 0x1004d537
push 0
push 0x4f91
call fcn.100508fa
pop ecx
pop ecx
jmp 0x1004d51a
jmp 0x1004d6be
mov dword [ebp - 0x184], 0xffffffff
mov dword [ebp - 0x74], 0
jmp 0x1004d556
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 2
jge 0x1004d56c
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0x1d0], 0
jmp 0x1004d54f
mov dword [ebp - 0x14], 0
jmp 0x1004d57c
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x10
jg 0x1004d663
mov dword [ebp - 0x58], 0xd727ab81
mov dword [ebp - 0x154], 1
mov dword [ebp - 0xdc], 0x8cafaca8
mov eax, dword [ebp - 0x58]
neg eax
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x15c]
jl 0x1004d5c1
mov dword [ebp - 0xcc], 1
jmp 0x1004d5c8
and dword [ebp - 0xcc], 0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1d0], 1
jne 0x1004d5e4
mov dword [ebp - 0x114], 1
jmp 0x1004d5eb
and dword [ebp - 0x114], 0
mov eax, dword [ebp - 0xcc]
add eax, 0x3430537
mov ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0x114]
sub ecx, dword [ebp - 0x58]
cmp eax, ecx
jg 0x1004d612
mov dword [ebp - 0xd4], 1
jmp 0x1004d619
and dword [ebp - 0xd4], 0
mov eax, dword [ebp - 0x58]
add eax, dword [ebp - 0xd4]
add eax, dword [ebp - 0x58]
mov dword [ebp - 0x154], eax
mov eax, dword [ebp - 0x154]
mov dword [ebp - 0xdc], eax
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0xdc], eax
jge 0x1004d64e
mov dword [ebp - 0x11c], 1
jmp 0x1004d655
and dword [ebp - 0x11c], 0
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x3c], eax
jmp 0x1004d575
mov dword [ebp - 0x1c], 0
jmp 0x1004d673
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0xfffffff4
jge 0x1004d6be
mov dword [ebp - 0x14], 0xffffffff
jmp 0x1004d689
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0xffffffee
jle 0x1004d6bc
mov dword [ebp - 0x3c], 0xfffffff0
jmp 0x1004d69f
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0x16
jge 0x1004d6ba
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1d0]
mov dword [ebp - 0x184], eax
jmp 0x1004d698
jmp 0x1004d682
jmp 0x1004d66c
jmp 0x1004d1b6
cmp dword [ebp - 0x90], 3
jae 0x1004dbcb
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x170], eax
lea eax, [ebp - 0x284]
push eax
mov ecx, 0x14b2177c
call fcn.10025976
push eax
lea eax, [ebp - 0x170]
push eax
lea eax, [ebp - 0x28c]
push eax
mov ecx, 0x14b2177c
call fcn.1003965e
mov ecx, eax
call fcn.10039679
movzx eax, al
test eax, eax
je 0x1004dbcb
mov dword [ebp - 0x28], 0x42c7
mov dword [ebp - 0x1a0], 0
mov dword [ebp - 0x294], 0xf27779e4
mov dword [ebp - 0x29c], 0xffffffff
mov dword [ebp - 0x2a4], 0xcbd72f54
mov dword [ebp - 0x94], 0xffffffff
mov dword [ebp - 0x24], 0
jmp 0x1004d75e
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 4
jge 0x1004d774
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x330], 1
jmp 0x1004d757
mov dword [ebp - 0x24], 0
jmp 0x1004d784
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jge 0x1004d79a
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x250], 0xa2b52f10
jmp 0x1004d77d
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x2ac], eax
imul eax, dword [ebp - 0x28], 0
test eax, eax
je 0x1004dac4
mov dword [ebp - 0x78], 0x93c1
mov dword [ebp - 0x194], 0xffff
mov dword [ebp - 0x14c], 0xb83de37d
mov byte [ebp - 0x2f], 0
movzx eax, byte [ebp - 0x2f]
test eax, eax
je 0x1004d7e4
push 0x6a5f
push 0
call fcn.1004e459
pop ecx
pop ecx
mov dword [ebp - 0x28], 0xffffffeb
jmp 0x1004d7f4
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0x32
jle 0x1004dabf
push 3
lea ecx, [ebp - 0x88]
call fcn.10025495
mov dword [ebp - 4], 3
mov dword [ebp - 0x7c], 0
jmp 0x1004d822
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 3
jge 0x1004d83e
push dword [ebp - 0x7c]
lea ecx, [ebp - 0x88]
call fcn.10025506
mov dword [eax], 0x67e307b5
jmp 0x1004d81b
push 0
lea ecx, [ebp - 0x88]
call fcn.10025506
and dword [eax], 0
jmp 0x1004d874
push 0
lea ecx, [ebp - 0x88]
call fcn.10025506
mov dword [ebp - 0xe4], eax
mov eax, dword [ebp - 0xe4]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xe4]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x88]
call fcn.10025506
cmp dword [eax], 8
jne 0x1004daab
mov dword [ebp - 0x198], 0xfffffff6
mov dword [ebp - 0x180], 0xffffffff
mov dword [ebp - 0xf4], 0xad11e758
mov dword [ebp - 0xb0], 0x41ce094b
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x2b4], eax
push 0
lea ecx, [ebp - 0x88]
call fcn.10025506
cmp dword [ebp - 0x194], 7
jbe 0x1004d8dd
mov dword [ebp - 0x178], 1
jmp 0x1004d8e4
and dword [ebp - 0x178], 0
push 0
lea ecx, [ebp - 0x88]
call fcn.10025506
cmp dword [ebp - 0x198], 0xa9e1a0e
jle 0x1004d909
mov dword [ebp - 0x13c], 1
jmp 0x1004d910
and dword [ebp - 0x13c], 0
push 0
lea ecx, [ebp - 0x88]
call fcn.10025506
mov ecx, dword [ebp - 0x13c]
cmp ecx, dword [eax]
jle 0x1004d936
cmp dword [ebp - 0x28], 0
jne 0x1004d936
and dword [ebp - 0xec], 0
jmp 0x1004d940
mov dword [ebp - 0xec], 1
mov eax, dword [ebp - 0x78]
cmp dword [ebp - 0xec], eax
jne 0x1004d957
mov dword [ebp - 0x124], 1
jmp 0x1004d95e
and dword [ebp - 0x124], 0
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0x180], eax
mov dword [ebp - 0xf4], 0xd341
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0x14c], eax
mov esi, dword [ebp - 0x14c]
push 0
lea ecx, [ebp - 0x88]
call fcn.10025506
sub esi, dword [eax]
cmp esi, 0xf0e26a25
jbe 0x1004d9a9
mov dword [ebp - 0xfc], 1
jmp 0x1004d9b0
and dword [ebp - 0xfc], 0
push 0
lea ecx, [ebp - 0x88]
call fcn.10025506
mov ecx, dword [ebp - 0xfc]
sub ecx, dword [eax]
cmp ecx, dword [ebp - 0xb0]
jg 0x1004d9d9
mov dword [ebp - 0xa0], 1
jmp 0x1004d9e0
and dword [ebp - 0xa0], 0
cmp dword [ebp - 0xa0], 0xffffffff
jge 0x1004d9f5
mov dword [ebp - 0xa8], 1
jmp 0x1004d9fc
and dword [ebp - 0xa8], 0
mov eax, dword [ebp - 0x28]
imul eax, dword [ebp - 0xa8]
imul eax, dword [ebp - 0x78]
cmp eax, dword [ebp - 0xb0]
jg 0x1004da1e
mov dword [ebp - 0xb8], 1
jmp 0x1004da25
and dword [ebp - 0xb8], 0
push 0
lea ecx, [ebp - 0x88]
call fcn.10025506
mov ecx, dword [ebp - 0xb8]
cmp ecx, dword [eax]
jl 0x1004da48
mov dword [ebp - 0xc0], 1
jmp 0x1004da4f
and dword [ebp - 0xc0], 0
mov eax, dword [ebp - 0xc0]
add eax, 5
je 0x1004da6f
mov eax, 0xaea381e1
test eax, eax
je 0x1004da6f
mov dword [ebp - 0xc8], 1
jmp 0x1004da76
and dword [ebp - 0xc8], 0
mov eax, dword [ebp - 0x78]
cmp dword [ebp - 0xc8], eax
jge 0x1004da90
cmp dword [ebp - 0x28], 0
jne 0x1004da90
and dword [ebp - 0xd0], 0
jmp 0x1004da9a
mov dword [ebp - 0xd0], 1
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0x1a0], eax
jmp 0x1004d850
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x88]
call fcn.10025501
jmp 0x1004d7ed
jmp 0x1004db72
mov dword [ebp - 0x2cc], 0xffffffff
mov dword [ebp - 0x2d4], 0x455d89f
mov dword [ebp - 0x260], 0x32f8
mov dword [ebp - 0x5c], 0
jmp 0x1004daf2
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 1
jge 0x1004db08
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x190], 0xcb0b9d62
jmp 0x1004daeb
push 0x5880
push 0
call fcn.1004cef2
pop ecx
pop ecx
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x250], 0xd177
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x188], eax
mov eax, dword [ebp - 0x94]
dec eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x188], 0xd177
jge 0x1004db58
mov dword [ebp - 0xd8], 1
jmp 0x1004db5f
and dword [ebp - 0xd8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xd8]
mov dword [ebp + eax - 0x190], ecx
mov byte [ebp - 0x33], 0
movzx eax, byte [ebp - 0x33]
test eax, eax
je 0x1004db97
push 0
push 0xe62
push 0x6b57
push 0x7afe
call fcn.1004e490
add esp, 0x10
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x168], eax
lea eax, [ebp - 0x168]
push eax
mov ecx, 0x14b2177c
call fcn.1005252a
push eax
mov ecx, dword [ebp + 8]
call fcn.1005244d
mov eax, dword [ebp - 0x70]
or eax, 1
mov dword [ebp - 0x70], eax
mov eax, dword [ebp + 8]
jmp 0x1004e37e
mov dword [ebp - 0x1b8], 1
mov dword [ebp - 0x1b4], 1
mov dword [ebp - 0x1b0], 1
mov dword [ebp - 0x1ac], 1
mov dword [ebp - 0x10], 0xffffffff
mov dword [ebp - 0x44], 0xbda73a15
mov dword [ebp - 0x25c], 8
mov dword [ebp - 0x10], 0
jmp 0x1004dc1b
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jg 0x1004de66
mov dword [ebp - 0x8c], 0
mov dword [ebp - 0x2c], 0xffffffff
mov byte [ebp - 0x31], 0
movzx eax, byte [ebp - 0x31]
test eax, eax
je 0x1004dc4a
push 0
call dword [sym.imp.USER32.dll_CharNextW]
cmp dword [ebp - 0x10], 0
je 0x1004dc82
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x10], eax
jg 0x1004dc64
mov dword [ebp - 0xe0], 1
jmp 0x1004dc6b
and dword [ebp - 0xe0], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0xe0], eax
jl 0x1004dc82
mov dword [ebp - 0xe8], 1
jmp 0x1004dc89
and dword [ebp - 0xe8], 0
cmp dword [ebp - 0xe8], 0
jne 0x1004dc9e
mov dword [ebp - 0xf0], 1
jmp 0x1004dca5
and dword [ebp - 0xf0], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0xf0], eax
jne 0x1004dcbc
mov dword [ebp - 0xf8], 1
jmp 0x1004dcc3
and dword [ebp - 0xf8], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0xf8], eax
jl 0x1004dce1
push 0xfffffffffffffff9
pop eax
test eax, eax
je 0x1004dce1
mov dword [ebp - 0x100], 1
jmp 0x1004dce8
and dword [ebp - 0x100], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x100], eax
jg 0x1004dcff
mov dword [ebp - 0x108], 1
jmp 0x1004dd06
and dword [ebp - 0x108], 0
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x108]
cmp eax, dword [ebp - 0x10]
jg 0x1004dd21
mov dword [ebp - 0x110], 1
jmp 0x1004dd28
and dword [ebp - 0x110], 0
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x110]
jge 0x1004dd3f
mov dword [ebp - 0x118], 1
jmp 0x1004dd46
and dword [ebp - 0x118], 0
mov dword [ebp - 0x8c], 1
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x9c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x9c]
mov dword [ebp + eax - 0x1b8], ecx
mov eax, dword [ebp - 0x118]
sub eax, dword [ebp - 0x10]
cmp dword [ebp - 0x9c], eax
je 0x1004dd8c
mov dword [ebp - 0x128], 1
jmp 0x1004dd93
and dword [ebp - 0x128], 0
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x128]
test eax, eax
je 0x1004ddbc
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1b8], 0
je 0x1004ddbc
mov dword [ebp - 0x130], 1
jmp 0x1004ddc3
and dword [ebp - 0x130], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x130], eax
jge 0x1004ddda
mov dword [ebp - 0x138], 1
jmp 0x1004dde1
and dword [ebp - 0x138], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x138], eax
jge 0x1004ddf8
mov dword [ebp - 0x140], 1
jmp 0x1004ddff
and dword [ebp - 0x140], 0
mov eax, dword [ebp - 0x140]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jne 0x1004de23
cmp dword [ebp - 0x8c], 0
jne 0x1004de23
mov dword [ebp - 0x160], 1
jmp 0x1004de2a
and dword [ebp - 0x160], 0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x248], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1b8], 0xc0e4
jge 0x1004de51
mov dword [ebp - 0x148], 1
jmp 0x1004de58
and dword [ebp - 0x148], 0
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0x44], eax
jmp 0x1004dc14
mov dword [ebp - 0x10], 0xffffffe4
jmp 0x1004de76
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xffffffff
je 0x1004deda
mov dword [ebp - 0x44], 0
jmp 0x1004de8c
mov eax, dword [ebp - 0x44]
dec eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0xffffffed
jg 0x1004ded8
mov dword [ebp - 0x60], 8
mov dword [ebp - 0x60], 3
jmp 0x1004dea9
mov eax, dword [ebp - 0x60]
dec eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0
jl 0x1004ded6
mov byte [ebp - 0x35], 0
movzx eax, byte [ebp - 0x35]
test eax, eax
je 0x1004dec3
push 0
call fcn.1004f055
pop ecx
mov byte [ebp - 0x2e], 0
lea eax, [ebp - 0x2e]
push eax
push 0
call fcn.10052190
pop ecx
pop ecx
jmp 0x1004dea2
jmp 0x1004de85
jmp 0x1004de6f
lea eax, [ebp - 0x320]
push eax
call fcn.100436d2
pop ecx
mov esi, eax
lea edi, [ebp - 0x304]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea esi, [ebp - 0x304]
lea edi, [ebp - 0x2f8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x4c], 0xe971
push 3
lea ecx, [ebp - 0x1fc]
call fcn.10025495
mov dword [ebp - 4], 4
mov dword [ebp - 0x258], 0x5bf2d3f5
mov dword [ebp - 0x68], 0
jmp 0x1004df36
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 3
jge 0x1004df4f
push dword [ebp - 0x68]
lea ecx, [ebp - 0x1fc]
call fcn.10025506
or dword [eax], 0xffffffff
jmp 0x1004df2f
mov esi, dword [ebp - 0x4c]
push 0
lea ecx, [ebp - 0x1fc]
call fcn.10025506
mov dword [eax], esi
mov dword [ebp - 0x4c], 0
jmp 0x1004df71
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 2
jg 0x1004e0b6
mov dword [ebp - 0x254], 0xffffffff
mov dword [ebp - 0x26c], 0
mov dword [ebp - 0x23c], 2
mov dword [ebp - 0x264], 0x6ce4a6f4
mov dword [ebp - 0x298], 0xa53061ec
mov dword [ebp - 0x268], 0xfffffffe
mov dword [ebp - 0x2c8], 0x4431fada
mov dword [ebp - 0x270], 1
mov dword [ebp - 0x2a0], 0x7779a7b4
mov dword [ebp - 0x278], 0x85dc1b6e
mov dword [ebp - 0x2b8], 2
mov dword [ebp - 0x280], 0xffffffff
push 1
lea ecx, [ebp - 0x2c4]
call fcn.10025495
mov byte [ebp - 4], 5
mov dword [ebp - 0x2a8], 7
mov dword [ebp - 0x174], 0x67dbf129
push 0x6de5
push 0
push 0x3cbf
push 0x7ccf
lea eax, [ebp - 0x2c4]
push eax
lea eax, [ebp - 0x20]
push eax
push 0x4f8a
push 0x7d95
call fcn.1004cf3a
add esp, 0x20
mov dword [ebp - 0x20], 0
jmp 0x1004e056
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jge 0x1004e06c
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x314], 0x261718bc
jmp 0x1004e04f
mov dword [ebp - 0x20], 0
jmp 0x1004e07c
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 1
jge 0x1004e092
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x288], 0x93cc9d6c
jmp 0x1004e075
lea eax, [ebp - 0x174]
push eax
push 1
call fcn.1004cef2
pop ecx
pop ecx
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2c4]
call fcn.10025501
jmp 0x1004df6a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1fc]
call fcn.10025501
mov ecx, dword [ebp + 0xc]
call fcn.1004c7a1
mov dword [ebp - 0x164], eax
push 3
lea ecx, [ebp - 0x1f0]
call fcn.10025495
mov dword [ebp - 4], 6
mov dword [ebp - 0x48], 0xffffffff
mov dword [ebp - 0x2d0], 0
push 0x7a5c
lea eax, [ebp - 0x290]
push eax
push 0x7885
push 0x75bd
push 0x2577
lea eax, [ebp - 0x1f0]
push eax
push 0
push 0xef
push 0x66ee
push 0x12fe
push 0x11e
call fcn.1005019b
add esp, 0x2c
mov dword [ebp - 0x48], 0
jmp 0x1004e148
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 2
jg 0x1004e22d
push 1
lea ecx, [ebp - 0x214]
call fcn.10025495
mov byte [ebp - 4], 7
mov dword [ebp - 0x17c], 0xe008fb0b
push 3
lea ecx, [ebp - 0x22c]
call fcn.10025495
mov byte [ebp - 4], 8
mov dword [ebp - 0x54], 0
jmp 0x1004e18e
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 1
jge 0x1004e1aa
push dword [ebp - 0x54]
lea ecx, [ebp - 0x214]
call fcn.10025506
mov dword [eax], 0x13e13a6c
jmp 0x1004e187
lea eax, [ebp - 0x22c]
push eax
lea eax, [ebp - 0x54]
push eax
push 0
call fcn.1004cfe2
add esp, 0xc
lea eax, [ebp - 0x1f0]
push eax
push 1
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0x214]
push eax
push 0x2ee5
push 0x22cc
lea eax, [ebp - 0x22c]
push eax
lea eax, [ebp - 0x48]
push eax
call fcn.1004cf3a
add esp, 0x20
mov byte [ebp - 0x30], 0
push 0x59fa
push 0
lea eax, [ebp - 0x30]
push eax
call fcn.1004e401
add esp, 0xc
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x22c]
call fcn.10025501
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x214]
call fcn.10025501
jmp 0x1004e141
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1f0]
call fcn.10025501
lea eax, [ebp - 0x2f8]
push eax
push dword [ebp - 0x164]
push dword [ebp - 0x90]
lea eax, [ebp - 0x2ec]
push eax
call fcn.1004c87e
add esp, 0x10
mov dword [ebp - 4], 9
cmp dword [ebp - 0x90], 3
jae 0x1004e292
push 0x14b2177c
lea eax, [ebp - 0x2ec]
push eax
push 0
lea eax, [ebp + 0xc]
push eax
push 0x1d8b
push 0x1856
call fcn.1004efd7
add esp, 0x18
push 3
lea ecx, [ebp - 0x208]
call fcn.10025495
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x40], 0xfffffffb
push 0
push 0xce
push 0x4703
lea eax, [ebp - 0x2b0]
push eax
push 0x2fde
push 0xb9c
lea eax, [ebp - 0x208]
push eax
call fcn.1004fcf4
add esp, 0x1c
mov byte [ebp - 0x32], 0
movzx eax, byte [ebp - 0x32]
test eax, eax
je 0x1004e2ea
push 0
call dword [sym.imp.KERNEL32.dll_LockResource]
mov dword [ebp - 0x40], 0
jmp 0x1004e2fa
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 2
jg 0x1004e345
mov dword [ebp - 0x18c], 0xbbef7d65
push dword [ebp - 0x40]
lea ecx, [ebp - 0x208]
call fcn.10025506
mov ecx, dword [ebp - 0x40]
add ecx, dword [eax]
mov dword [ebp - 0x18c], ecx
mov byte [ebp - 0x2d], 0
movzx eax, byte [ebp - 0x2d]
test eax, eax
je 0x1004e343
push 0x454
push 0x1889
push 1
call fcn.1004cfe2
add esp, 0xc
jmp 0x1004e2f3
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x208]
call fcn.10025501
lea eax, [ebp - 0x2ec]
push eax
mov ecx, dword [ebp + 8]
call fcn.1002539d
mov eax, dword [ebp - 0x70]
or eax, 1
mov dword [ebp - 0x70], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2ec]
call fcn.100253f6
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret