Function at 0x100529a9
Capabilities:
Contain obfuscated stackstrings
Encode data using base64
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1008e04b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xcd8
push esi
and dword [ebp - 0x14], 0
movzx eax, byte [ebp + 0x10]
test eax, eax
je 0x10058850
mov eax, dword [ebp + 8]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x3f0], eax
push 4
lea ecx, [ebp - 0x960]
call fcn.1001b10b
and dword [ebp - 4], 0
mov dword [ebp - 0xe4], 9
mov dword [ebp - 0x1e8], 0
jmp 0x10052a1b
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 4
jge 0x10052a3d
push dword [ebp - 0x1e8]
lea ecx, [ebp - 0x960]
call fcn.1001b178
mov dword [eax], 0xe57bf5cd
jmp 0x10052a0e
cmp dword [ebp - 0xe4], 0
jne 0x10052a79
cmp dword [ebp - 0xe4], 0xfffffffb
jle 0x10052a5b
mov dword [ebp - 0x42c], 1
jmp 0x10052a62
and dword [ebp - 0x42c], 0
mov eax, dword [ebp - 0xe4]
cmp eax, dword [ebp - 0x42c]
jle 0x10052a79
and dword [ebp - 0x6c4], 0
jmp 0x10052a83
mov dword [ebp - 0x6c4], 1
cmp dword [ebp - 0x6c4], 1
jbe 0x10052a98
mov dword [ebp - 0x6d4], 1
jmp 0x10052a9f
and dword [ebp - 0x6d4], 0
push 2
lea ecx, [ebp - 0x960]
call fcn.1001b178
mov dword [ebp - 0x6cc], eax
push 2
lea ecx, [ebp - 0x960]
call fcn.1001b178
mov ecx, dword [ebp - 0x6cc]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x6cc]
mov eax, dword [eax]
sub eax, dword [ebp - 0x6d4]
cmp eax, dword [ebp - 0xe4]
je 0x10052aeb
mov dword [ebp - 0x71c], 1
jmp 0x10052af2
and dword [ebp - 0x71c], 0
mov eax, dword [ebp - 0xe4]
cmp dword [ebp - 0x71c], eax
je 0x10052b0c
mov dword [ebp - 0x724], 1
jmp 0x10052b13
and dword [ebp - 0x724], 0
mov eax, dword [ebp - 0x724]
mov dword [ebp - 0xe4], eax
mov byte [ebp - 0xd7], 0
movzx eax, byte [ebp - 0xd7]
test eax, eax
je 0x10052b45
push 1
push 0x7121
push 0x6fa5
call fcn.10050963
add esp, 0xc
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x960]
call fcn.1001b173
mov eax, dword [ebp - 0x3f0]
movzx eax, word [eax]
cmp eax, 0x5a4d
je 0x10052b69
jmp 0x10058878
mov dword [ebp - 0x72c], 8
mov dword [ebp - 0x1f0], 1
mov dword [ebp - 0x184], 0xffff
mov dword [ebp - 0x344], 0xc0ec0dce
mov dword [ebp - 0x814], 0
mov dword [ebp - 0x5a8], 1
mov dword [ebp - 0x81c], 1
mov dword [ebp - 0x17c], 0
jmp 0x10052bc8
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 2
jge 0x10052be4
mov eax, dword [ebp - 0x17c]
mov dword [ebp + eax*4 - 0x114], 0x2971
jmp 0x10052bbb
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x114]
mov dword [ebp - 0xb08], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x114]
inc eax
jne 0x10052cad
push 4
pop eax
shl eax, 0
imul eax, dword [ebp + eax - 0x114], 0xb5b3
test eax, eax
jne 0x10052c39
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x114], 0
jne 0x10052c39
and dword [ebp - 0x888], 0
jmp 0x10052c43
mov dword [ebp - 0x888], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x114]
mov dword [ebp - 0xba8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x114]
mov dword [ebp - 0xabc], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x114]
mov dword [ebp - 0xae0], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x114]
mov dword [ebp - 0x72c], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x114]
cmp dword [ebp - 0x72c], eax
jg 0x10052cad
and dword [ebp - 0x734], 0
jmp 0x10052cb7
mov dword [ebp - 0x734], 1
mov eax, dword [ebp - 0x734]
sub eax, dword [ebp - 0x1f0]
cmp eax, dword [ebp - 0x184]
jle 0x10052cd7
mov dword [ebp - 0x73c], 1
jmp 0x10052cde
and dword [ebp - 0x73c], 0
imul eax, dword [ebp - 0x73c], 0x5116
cmp eax, 6
ja 0x10052cf9
mov dword [ebp - 0x708], 1
jmp 0x10052d00
and dword [ebp - 0x708], 0
mov eax, dword [ebp - 0x708]
mov dword [ebp - 0x344], eax
cmp dword [ebp - 0x344], 0
jne 0x10052d2e
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x114], 0
jne 0x10052d2e
and dword [ebp - 0x80c], 0
jmp 0x10052d38
mov dword [ebp - 0x80c], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x114]
mov dword [ebp - 0xac4], eax
mov eax, dword [ebp - 0x344]
mov dword [ebp - 0xae8], eax
mov eax, dword [ebp - 0x1f0]
mov dword [ebp - 0xacc], eax
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0xb64], eax
mov eax, dword [ebp - 0x1f0]
mov dword [ebp - 0xaec], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x114]
cmp dword [ebp - 0x814], eax
jne 0x10052d9c
mov dword [ebp - 0x720], 1
jmp 0x10052da3
and dword [ebp - 0x720], 0
mov eax, dword [ebp - 0x184]
cmp dword [ebp - 0x720], eax
jne 0x10052dbd
mov dword [ebp - 0x6f8], 1
jmp 0x10052dc4
and dword [ebp - 0x6f8], 0
mov eax, dword [ebp - 0x1f0]
cmp dword [ebp - 0x6f8], eax
jle 0x10052dde
mov dword [ebp - 0x6bc], 1
jmp 0x10052de5
and dword [ebp - 0x6bc], 0
cmp dword [ebp - 0x6bc], 0
jne 0x10052dfa
mov dword [ebp - 0x3e8], 1
jmp 0x10052e01
and dword [ebp - 0x3e8], 0
mov eax, dword [ebp - 0x3e8]
mov dword [ebp - 0x5a8], eax
mov eax, dword [ebp - 0x5a8]
sub eax, dword [ebp - 0x184]
mov dword [ebp - 0x81c], eax
mov eax, dword [ebp - 0x3f0]
mov ecx, dword [ebp - 0x34]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0xf0], ecx
mov eax, dword [ebp - 0xf0]
cmp dword [eax], 0x4550
je 0x10052e44
jmp 0x10058878
mov dword [ebp - 0x9e0], 1
mov dword [ebp - 0x9dc], 1
mov dword [ebp - 0x9d8], 1
mov dword [ebp - 0x9d4], 1
lea ecx, [ebp - 0x36d]
call fcn.1000a7d3
push eax
lea eax, [ebp - 0x9d0]
push eax
lea eax, [ebp - 0x9e0]
push eax
lea ecx, [ebp - 0xbf4]
call fcn.1001b187
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xbc8]
call fcn.1001b14d
mov dword [ebp - 4], 1
mov dword [ebp - 0xb8c], 0
mov dword [ebp - 0x1f8], 0
jmp 0x10052ecb
mov eax, dword [ebp - 0x1f8]
inc eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 1
jge 0x10052ee7
mov eax, dword [ebp - 0x1f8]
mov dword [ebp + eax*4 - 0x18c], 7
jmp 0x10052ebe
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x18c], 0
jmp 0x10052f15
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18c]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x18c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x18c], 3
jg 0x10052f47
mov dword [ebp - 0x824], 0
lea eax, [ebp - 0x824]
push eax
push 1
push 0xc71
call fcn.100509d4
add esp, 0xc
jmp 0x10052efa
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xbc8]
call fcn.1001b173
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xf0]
lea eax, [ecx + eax + 0x78]
mov dword [ebp - 0x58], eax
push 2
lea ecx, [ebp - 0x3cc]
call fcn.1001b10b
mov dword [ebp - 4], 2
mov dword [ebp - 0x54], 0x9bdba76a
mov dword [ebp - 0x6c], 0xfffffff9
mov dword [ebp - 0x200], 0
jmp 0x10052fa4
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 2
jge 0x10052fc6
push dword [ebp - 0x200]
lea ecx, [ebp - 0x3cc]
call fcn.1001b178
mov dword [eax], 1
jmp 0x10052f97
mov dword [ebp - 0x54], 1
jmp 0x10052fd6
mov eax, dword [ebp - 0x54]
dec eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0
jl 0x1005345e
push 4
lea ecx, [ebp - 0x3d8]
call fcn.1001b10b
mov byte [ebp - 4], 3
mov dword [ebp - 0xec], 0xfffffffc
mov dword [ebp - 0x194], 0
jmp 0x10053014
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 4
jge 0x10053036
push dword [ebp - 0x194]
lea ecx, [ebp - 0x3d8]
call fcn.1001b178
mov dword [eax], 0x88adae8c
jmp 0x10053007
push 1
lea ecx, [ebp - 0x3d8]
call fcn.1001b178
and dword [eax], 0
jmp 0x1005306c
push 1
lea ecx, [ebp - 0x3d8]
call fcn.1001b178
mov dword [ebp - 0x688], eax
mov eax, dword [ebp - 0x688]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x688]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x3d8]
call fcn.1001b178
cmp dword [eax], 1
jg 0x1005344a
push 1
lea ecx, [ebp - 0x388]
call fcn.1001b10b
mov byte [ebp - 4], 4
lea eax, [ebp - 0xaf8]
push eax
lea eax, [ebp - 0x388]
push eax
push 1
push 0x5897
call fcn.10050a20
add esp, 0x10
push 0
lea ecx, [ebp - 0x388]
call fcn.1001b178
mov dword [eax], 1
jmp 0x100530e9
push 0
lea ecx, [ebp - 0x388]
call fcn.1001b178
mov dword [ebp - 0x3f8], eax
mov eax, dword [ebp - 0x3f8]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x3f8]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x388]
call fcn.1001b178
cmp dword [eax], 0
jl 0x1005341c
push dword [ebp - 0x54]
lea ecx, [ebp - 0x3cc]
call fcn.1001b178
mov esi, eax
push 0
lea ecx, [ebp - 0x388]
call fcn.1001b178
push dword [eax]
lea ecx, [ebp - 0x3cc]
call fcn.1001b178
mov ecx, dword [esi]
cmp ecx, dword [eax]
jl 0x1005313b
mov dword [ebp - 0x5b0], 1
jmp 0x10053142
and dword [ebp - 0x5b0], 0
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x5b0], eax
jg 0x10053159
mov dword [ebp - 0x400], 1
jmp 0x10053160
and dword [ebp - 0x400], 0
push 2
lea ecx, [ebp - 0x3d8]
call fcn.1001b178
mov ecx, dword [ebp - 0x400]
cmp ecx, dword [eax]
je 0x10053183
mov dword [ebp - 0x704], 1
jmp 0x1005318a
and dword [ebp - 0x704], 0
push 0
lea ecx, [ebp - 0x388]
call fcn.1001b178
mov ecx, dword [ebp - 0x704]
cmp ecx, dword [eax]
je 0x100531ad
mov dword [ebp - 0x82c], 1
jmp 0x100531b4
and dword [ebp - 0x82c], 0
push dword [ebp - 0x54]
lea ecx, [ebp - 0x3cc]
call fcn.1001b178
mov esi, eax
push dword [ebp - 0x54]
lea ecx, [ebp - 0x3cc]
call fcn.1001b178
mov ecx, dword [esi]
cmp ecx, dword [eax]
jge 0x100531e4
mov dword [ebp - 0x408], 1
jmp 0x100531eb
and dword [ebp - 0x408], 0
push 1
lea ecx, [ebp - 0x3d8]
call fcn.1001b178
mov ecx, dword [ebp - 0x408]
cmp ecx, dword [eax]
jl 0x1005320f
push 0
lea ecx, [ebp - 0x3cc]
call fcn.1001b178
xor eax, eax
inc eax
cmp eax, 1
jbe 0x10053223
mov dword [ebp - 0x5b8], 1
jmp 0x1005322a
and dword [ebp - 0x5b8], 0
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x5b8], eax
je 0x10053241
mov dword [ebp - 0x410], 1
jmp 0x10053248
and dword [ebp - 0x410], 0
cmp dword [ebp - 0x410], 0xffff
jae 0x10053260
mov dword [ebp - 0x690], 1
jmp 0x10053267
and dword [ebp - 0x690], 0
mov eax, dword [ebp - 0x690]
inc eax
cmp eax, 0xfffffffb
jge 0x1005327f
mov dword [ebp - 0x418], 1
jmp 0x10053286
and dword [ebp - 0x418], 0
push 1
lea ecx, [ebp - 0x3d8]
call fcn.1001b178
mov ecx, dword [ebp - 0x418]
add ecx, dword [eax]
cmp ecx, dword [ebp - 0x6c]
je 0x100532ac
mov dword [ebp - 0x5c0], 1
jmp 0x100532b3
and dword [ebp - 0x5c0], 0
push 0
lea ecx, [ebp - 0x388]
call fcn.1001b178
push dword [eax]
lea ecx, [ebp - 0x3cc]
call fcn.1001b178
mov eax, dword [eax]
cmp eax, dword [ebp - 0x5c0]
jg 0x100532e3
mov dword [ebp - 0x420], 1
jmp 0x100532ea
and dword [ebp - 0x420], 0
push 0
lea ecx, [ebp - 0x388]
call fcn.1001b178
mov ecx, dword [ebp - 0x420]
cmp ecx, dword [eax]
je 0x1005330d
mov dword [ebp - 0x700], 1
jmp 0x10053314
and dword [ebp - 0x700], 0
cmp dword [ebp - 0x700], 0xfff8
jbe 0x10053331
or eax, 0xffffffff
je 0x10053331
mov dword [ebp - 0x428], 1
jmp 0x10053338
and dword [ebp - 0x428], 0
push dword [ebp - 0x54]
lea ecx, [ebp - 0x3cc]
call fcn.1001b178
mov eax, dword [eax]
imul eax, dword [ebp - 0x428]
mov dword [ebp - 0xec], eax
mov esi, dword [ebp - 0xec]
push 0
lea ecx, [ebp - 0x388]
call fcn.1001b178
sub esi, dword [eax]
je 0x100533df
mov dword [ebp - 0xec], 0
jmp 0x10053385
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 1
jg 0x100533dd
mov dword [ebp - 0x6c], 1
jmp 0x1005339e
mov eax, dword [ebp - 0x6c]
dec eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
jl 0x100533db
push 1
lea ecx, [ebp - 0x3d8]
call fcn.1001b178
push dword [eax]
lea ecx, [ebp - 0x3cc]
call fcn.1001b178
cmp dword [eax], 0
je 0x100533c5
jmp 0x100533db
push 0
lea ecx, [ebp - 0x388]
call fcn.1001b178
cmp dword [eax], 0
je 0x100533d9
jmp 0x100533db
jmp 0x10053397
jmp 0x10053378
jmp 0x10053417
mov dword [ebp - 0x6c], 1
jmp 0x100533ef
mov eax, dword [ebp - 0x6c]
dec eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
jl 0x10053417
mov byte [ebp - 0x84], 0
movzx eax, byte [ebp - 0x84]
test eax, eax
je 0x10053415
push 0x2f26
push 0
call fcn.10051d1b
pop ecx
pop ecx
jmp 0x100533e8
jmp 0x100530c5
mov byte [ebp - 0x86], 0
movzx eax, byte [ebp - 0x86]
test eax, eax
je 0x10053436
push 0
call fcn.1005213d
pop ecx
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x388]
call fcn.1001b173
jmp 0x10053048
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x3d8]
call fcn.1001b173
jmp 0x10052fcf
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3cc]
call fcn.1001b173
mov eax, dword [ebp - 0x58]
cmp dword [eax + 4], 0
jne 0x1005347b
jmp 0x10058878
push 1
lea ecx, [ebp - 0x794]
call fcn.1001b10b
mov dword [ebp - 4], 5
lea eax, [ebp - 0x794]
push eax
push 0
lea eax, [ebp - 0xb6c]
push eax
call fcn.10051d51
add esp, 0xc
push 0
lea ecx, [ebp - 0x794]
call fcn.1001b178
and dword [eax], 0
jmp 0x100534dd
push 0
lea ecx, [ebp - 0x794]
call fcn.1001b178
mov dword [ebp - 0x5c8], eax
mov eax, dword [ebp - 0x5c8]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x5c8]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x794]
call fcn.1001b178
cmp dword [eax], 0x12
jge 0x1005351c
mov byte [ebp - 0x83], 0
push 0
lea eax, [ebp - 0x83]
push eax
call fcn.1005141a
pop ecx
pop ecx
push 0
lea ecx, [ebp - 0x794]
call fcn.1001b178
cmp dword [eax], 0
je 0x1005351a
jmp 0x100534b9
jmp 0x100534b9
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x794]
call fcn.1001b173
and dword [ebp - 0x38], 0
mov dword [ebp - 0x10c], 0xfffffffd
mov dword [ebp - 0x19c], 0x5d09ea98
mov dword [ebp - 0x208], 0xffffffff
mov eax, dword [ebp - 0x10c]
dec eax
mov dword [ebp - 0x10c], eax
mov dword [ebp - 0x10c], 0xfffffffa
jmp 0x10053573
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0xa
jle 0x100536af
mov dword [ebp - 0xf4], 0x2e8588d0
mov eax, dword [ebp - 0xf4]
dec eax
mov dword [ebp - 0xf4], eax
mov dword [ebp - 0x208], 0x18
jmp 0x100535b0
mov eax, dword [ebp - 0x208]
dec eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 0xffffffe7
jg 0x100536aa
mov dword [ebp - 0x19c], 0
jmp 0x100535d6
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 2
jge 0x10053683
mov byte [ebp - 0xd5], 0
movzx eax, byte [ebp - 0xd5]
test eax, eax
je 0x10053607
push 0xda6
push 0
push 0xe65
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [ebp - 0xf4], 0
jmp 0x10053620
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0xf
jle 0x1005367e
mov dword [ebp - 0x210], 0xb4746a1c
mov dword [ebp - 0x870], 0
mov dword [ebp - 0x210], 0
jmp 0x10053656
mov eax, dword [ebp - 0x210]
inc eax
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 5
jne 0x1005367c
push 0x7312
lea eax, [ebp - 0x870]
push eax
push 1
push 0x14dc
call fcn.10050aa9
add esp, 0x10
jmp 0x10053649
jmp 0x10053613
jmp 0x100535c9
mov byte [ebp - 0x85], 0
push 1
lea eax, [ebp - 0x85]
push eax
push 0x22ea
push 0x1ba4
call fcn.10050b08
add esp, 0x10
jmp 0x100535a3
jmp 0x10053566
mov eax, dword [ebp - 0xf0]
movzx eax, word [eax + 0x14]
mov ecx, dword [ebp - 0xf0]
lea eax, [ecx + eax + 0x18]
mov dword [ebp - 0x1c4], eax
mov dword [ebp - 0x8c], 0xffffffff
mov dword [ebp - 0x898], 0xfffffff7
mov dword [ebp - 0x8c], 0
jmp 0x100536f6
mov eax, dword [ebp - 0x8c]
dec eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0xffffffff
jl 0x10053903
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x880], 0x77963f6d
mov dword [ebp - 0x7bc], 0x8c74c3ee
cmp dword [ebp - 0x8c], 0
je 0x1005379f
mov dword [ebp - 0x1a4], 0
jmp 0x10053743
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 2
jge 0x1005375f
mov eax, dword [ebp - 0x1a4]
mov dword [ebp + eax*4 - 0x9bc], 1
jmp 0x10053736
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x8c]
cmp dword [ebp + eax - 0x9bc], ecx
jne 0x10053780
mov dword [ebp - 0x430], 1
jmp 0x10053787
and dword [ebp - 0x430], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x430]
mov dword [ebp + eax - 0x9bc], ecx
jmp 0x1005382c
mov dword [ebp - 0x124], 0xfffffffc
mov dword [ebp - 0x124], 0
jmp 0x100537c2
mov eax, dword [ebp - 0x124]
dec eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0xffffffe6
je 0x100537f9
mov dword [ebp - 0x878], 0xa11015aa
lea eax, [ebp - 0x124]
push eax
push 0
push 0x7204
lea eax, [ebp - 0x878]
push eax
push 0x71e2
call fcn.10052664
add esp, 0x14
jmp 0x100537b5
cmp dword [ebp - 0x94], 0
je 0x10053812
cmp dword [ebp - 0x94], 0
je 0x10053810
jmp 0x10053903
jmp 0x1005382c
mov byte [ebp - 0xde], 0
movzx eax, byte [ebp - 0xde]
test eax, eax
je 0x1005382c
push 1
call fcn.10050b83
pop ecx
mov dword [ebp - 0x94], 0
jmp 0x10053845
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0x3a
jg 0x100538fe
mov dword [ebp - 0x8a0], 1
mov dword [ebp - 0x890], 0xfffffffe
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 0x880]
push eax
lea eax, [ebp - 0x7bc]
push eax
push 0x3797
lea eax, [ebp - 0x890]
push eax
push 0x173f
push 0x7177
lea eax, [ebp - 0x898]
push eax
push 0x68b
push 0
push 0x462f
lea eax, [ebp - 0x8a0]
push eax
lea eax, [ebp - 0x94]
push eax
push 0x4a5c
push 0x694
call fcn.100519c8
add esp, 0x3c
mov byte [ebp - 0x87], 0
movzx eax, byte [ebp - 0x87]
test eax, eax
je 0x100538f9
push 1
push 0x2a74
push 0xeb2
push 0x5379
push 0x5902
push 0x59a1
call fcn.10050bbc
add esp, 0x18
jmp 0x10053838
jmp 0x100536e9
lea eax, [ebp - 0x1c4]
push eax
push 0
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0xf0]
push eax
call fcn.1005206a
add esp, 0x14
mov dword [ebp - 0x3c], 0x1e559696
mov dword [ebp - 0xb9c], 5
mov dword [ebp - 0xb98], 5
mov dword [ebp - 0xb94], 5
mov dword [ebp - 0xb90], 5
mov dword [ebp - 0x218], 0
jmp 0x1005396b
mov eax, dword [ebp - 0x218]
inc eax
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 1
jge 0x10053987
mov eax, dword [ebp - 0x218]
mov dword [ebp + eax*4 - 0x378], 0xfffffff9
jmp 0x1005395e
mov dword [ebp - 0x3c], 0
jmp 0x10053997
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
jg 0x10053a2a
mov dword [ebp - 0x1ac], 0
jmp 0x100539ba
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 2
jge 0x100539d6
mov eax, dword [ebp - 0x1ac]
mov dword [ebp + eax*4 - 0x788], 0
jmp 0x100539ad
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x788], 0
jmp 0x10053a04
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x788]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x788], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x788], 0
jl 0x10053a25
mov eax, dword [ebp - 0x3c]
cmp dword [ebp + eax*4 - 0x378], 0
je 0x10053a23
jmp 0x10053a25
jmp 0x100539e9
jmp 0x10053990
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0xb04], eax
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x378], 0x49f6d4a0
mov eax, 0x49f6d4a0
test eax, eax
je 0x10053ac6
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x378], 0x78f4f823
jle 0x10053a6c
mov dword [ebp - 0x698], 1
jmp 0x10053a73
and dword [ebp - 0x698], 0
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x698], eax
je 0x10053a8a
mov dword [ebp - 0x438], 1
jmp 0x10053a91
and dword [ebp - 0x438], 0
mov eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x438]
jge 0x10053aa8
mov dword [ebp - 0x5d0], 1
jmp 0x10053aaf
and dword [ebp - 0x5d0], 0
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x5d0], eax
jle 0x10053ac6
mov dword [ebp - 0x440], 1
jmp 0x10053acd
and dword [ebp - 0x440], 0
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x440], eax
jl 0x10053ae4
mov dword [ebp - 0x70c], 1
jmp 0x10053aeb
and dword [ebp - 0x70c], 0
mov eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x70c]
je 0x10053b02
mov dword [ebp - 0x448], 1
jmp 0x10053b09
and dword [ebp - 0x448], 0
mov eax, dword [ebp - 0x3c]
add eax, dword [ebp - 0x448]
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x38], 0
jne 0x10053b20
jmp 0x10058878
mov eax, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x38]
add ecx, dword [eax]
add ecx, dword [ebp - 0x34]
mov dword [ebp - 0x10], ecx
xor ecx, ecx
call fcn.10037a1f
push eax
call fcn.10075018
pop ecx
mov dword [ebp - 0x9c], 0x25d16df2
mov dword [ebp - 0x228], 0xfffffff9
mov dword [ebp - 0x478], 0x8f1e
mov dword [ebp - 0x8a8], 0x96f3
mov eax, dword [ebp - 0x9c]
cmp dword [ebp - 0x9c], eax
jne 0x10053b7e
mov dword [ebp - 0x5d8], 1
jmp 0x10053b85
and dword [ebp - 0x5d8], 0
cmp dword [ebp - 0x5d8], 0
jg 0x10053ba3
mov eax, 0xfffc
test eax, eax
je 0x10053ba3
mov dword [ebp - 0x450], 1
jmp 0x10053baa
and dword [ebp - 0x450], 0
cmp dword [ebp - 0x450], 1
je 0x10053bbf
mov dword [ebp - 0x6a0], 1
jmp 0x10053bc6
and dword [ebp - 0x6a0], 0
mov eax, dword [ebp - 0x6a0]
mov dword [ebp - 0x228], eax
mov eax, dword [ebp - 0x228]
cmp dword [ebp - 0x9c], eax
jg 0x10053e95
mov dword [ebp - 0x64], 0xffffffff
mov dword [ebp - 0x1b4], 0
mov dword [ebp - 0x8c0], 0x75e6
mov dword [ebp - 0x8b8], 0x67aac3bc
push 1
lea ecx, [ebp - 0xa44]
call fcn.1001b10b
mov dword [ebp - 4], 6
mov dword [ebp - 0x220], 0
jmp 0x10053c36
mov eax, dword [ebp - 0x220]
inc eax
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 1
jge 0x10053c58
push dword [ebp - 0x220]
lea ecx, [ebp - 0xa44]
call fcn.1001b178
mov dword [eax], 0x31ac6914
jmp 0x10053c29
mov byte [ebp - 0xe0], 0
movzx eax, byte [ebp - 0xe0]
test eax, eax
je 0x10053c72
push 1
call fcn.10050c8f
pop ecx
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0xbb8], eax
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0xb0c], eax
xor eax, eax
inc eax
cmp eax, 1
jg 0x10053c9b
mov dword [ebp - 0x458], 1
jmp 0x10053ca2
and dword [ebp - 0x458], 0
mov eax, dword [ebp - 0x9c]
cmp dword [ebp - 0x458], eax
jl 0x10053cbc
mov dword [ebp - 0x5e0], 1
jmp 0x10053cc3
and dword [ebp - 0x5e0], 0
mov eax, dword [ebp - 0x64]
add eax, dword [ebp - 0x5e0]
imul eax, eax, 0x4ed3
imul eax, eax, 0xfff6
add eax, dword [ebp - 0x478]
mov dword [ebp - 0x1b4], eax
jne 0x10053cf2
mov dword [ebp - 0x460], 1
jmp 0x10053cf9
and dword [ebp - 0x460], 0
cmp dword [ebp - 0x460], 0xfffb
ja 0x10053d11
mov dword [ebp - 0x714], 1
jmp 0x10053d18
and dword [ebp - 0x714], 0
mov eax, dword [ebp - 0x714]
sub eax, 6
cmp eax, 1
jg 0x10053d32
mov dword [ebp - 0x468], 1
jmp 0x10053d39
and dword [ebp - 0x468], 0
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x468], eax
jl 0x10053d50
mov dword [ebp - 0x5e8], 1
jmp 0x10053d57
and dword [ebp - 0x5e8], 0
mov eax, dword [ebp - 0x64]
cmp eax, dword [ebp - 0x5e8]
jge 0x10053d6e
mov dword [ebp - 0x470], 1
jmp 0x10053d75
and dword [ebp - 0x470], 0
cmp dword [ebp - 0x470], 8
jne 0x10053d8a
mov dword [ebp - 0x6a8], 1
jmp 0x10053d91
and dword [ebp - 0x6a8], 0
mov eax, dword [ebp - 0x9c]
cmp dword [ebp - 0x6a8], eax
jl 0x10053da8
cmp dword [ebp - 0x8a8], 0
je 0x10053e03
mov dword [ebp - 0x64], 0
jmp 0x10053db8
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0x28
jl 0x10053de6
mov byte [ebp - 0x8d], 0
movzx eax, byte [ebp - 0x8d]
test eax, eax
je 0x10053de4
push 0
push 0x2bd
push 0x604f
call fcn.100514b9
add esp, 0xc
jmp 0x10053db1
lea eax, [ebp - 0x1b4]
push eax
push 0
lea eax, [ebp - 0x228]
push eax
call fcn.100511e8
add esp, 0xc
jmp 0x10053e84
mov dword [ebp - 0x8b0], 6
mov byte [ebp - 0xdf], 0
push 0
lea eax, [ebp - 0xdf]
push eax
push 0x509
call fcn.100529a9
add esp, 0xc
push 0x2a56
lea eax, [ebp - 0x8b0]
push eax
push 1
lea eax, [ebp - 0xa44]
push eax
push 0x7527
lea eax, [ebp - 0x1b4]
push eax
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x8b8]
push eax
push 0x3bdb
lea eax, [ebp - 0x8c0]
push eax
push 0x7e01
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x478]
push eax
lea eax, [ebp - 0x228]
push eax
call fcn.10050cba
add esp, 0x38
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa44]
call fcn.1001b173
jmp 0x10053eb5
mov byte [ebp - 0x95], 0
movzx eax, byte [ebp - 0x95]
test eax, eax
je 0x10053eb5
push 0
push 0x3ad5
call fcn.10051e81
pop ecx
pop ecx
mov dword [ebp - 0x8d0], 0xfffffffd
push 1
lea ecx, [ebp - 0xa20]
call fcn.1001b10b
mov dword [ebp - 4], 7
push 2
lea ecx, [ebp - 0x984]
call fcn.1001b10b
mov byte [ebp - 4], 8
mov dword [ebp - 0x104], 3
lea eax, [ebp - 0xa20]
push eax
push 0x4e8e
push 0x51aa
lea eax, [ebp - 0x8c8]
push eax
push 0x15d5
push 0
call fcn.100523d8
add esp, 0x18
push 0x7fe6
push 1
lea eax, [ebp - 0x8c8]
push eax
push 0x4a36
lea eax, [ebp - 0x984]
push eax
call fcn.10051017
add esp, 0x14
lea eax, [ebp - 0xa20]
push eax
lea eax, [ebp - 0x104]
push eax
push 1
lea eax, [ebp - 0x8d0]
push eax
lea eax, [ebp - 0x984]
push eax
call fcn.100510c1
add esp, 0x14
mov dword [ebp - 0x104], 0
jmp 0x10053f76
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 1
jg 0x10053fbf
mov byte [ebp - 0xdb], 0
movzx eax, byte [ebp - 0xdb]
test eax, eax
je 0x10053fa5
push 0xde1
push 1
push 0x6853
call fcn.100511e8
add esp, 0xc
push dword [ebp - 0x104]
lea ecx, [ebp - 0x984]
call fcn.1001b178
cmp dword [eax], 0
je 0x10053fbd
jmp 0x10053f69
jmp 0x10053f69
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x984]
call fcn.1001b173
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa20]
call fcn.1001b173
mov byte [ebp - 0x2d0], 3
mov byte [ebp - 0x2cf], 0x13
mov byte [ebp - 0x2ce], 4
mov byte [ebp - 0x2cd], 0xf
mov byte [ebp - 0x2cc], 8
mov byte [ebp - 0x2cb], 8
mov byte [ebp - 0x2ca], 5
mov byte [ebp - 0x2c9], 1
mov byte [ebp - 0x2c8], 0x4b
mov byte [ebp - 0x2c7], 3
mov byte [ebp - 0x2c6], 0x6a
mov byte [ebp - 0x2c5], pe_nt_image_headers32
mov byte [ebp - 0x2c4], 0xcb
mov byte [ebp - 0x2c3], 0xc9
mov byte [ebp - 0x2c2], 0x53
mov byte [ebp - 0x2c1], 0x7e
mov byte [ebp - 0x2c0], 0x7c
mov byte [ebp - 0x2bf], 0x4c
mov byte [ebp - 0x2be], 0x60
mov byte [ebp - 0x2bd], 0xa7
mov byte [ebp - 0x2bc], 0xdd
mov byte [ebp - 0x2bb], 0x93
mov byte [ebp - 0x2ba], 0xab
mov byte [ebp - 0x2b9], 0x39
mov byte [ebp - 0x2b8], 0x59
mov byte [ebp - 0x2b7], 0x88
mov byte [ebp - 0x2b6], 0xd6
mov byte [ebp - 0x2b5], 0xf0
mov byte [ebp - 0x2b4], 0x7e
mov byte [ebp - 0x2b3], 0xc3
mov byte [ebp - 0x2b2], 0x6f
mov byte [ebp - 0x2b1], 0xe2
mov byte [ebp - 0x2b0], 0xa5
mov byte [ebp - 0x2af], 0xc9
mov byte [ebp - 0x2ae], 0xb
mov byte [ebp - 0x2ad], 0xaa
mov byte [ebp - 0x2ac], 0x1f
mov byte [ebp - 0x2ab], 0x82
mov byte [ebp - 0x2aa], 0x27
mov byte [ebp - 0x2a9], 0x64
mov byte [ebp - 0x2a8], 0x1c
mov byte [ebp - 0x2a7], 0xd
mov byte [ebp - 0x2a6], 0xb
mov byte [ebp - 0x2a5], 0x17
mov byte [ebp - 0x2a4], 0xb8
mov byte [ebp - 0x2a3], 0xb6
mov byte [ebp - 0x2a2], 0xa9
mov byte [ebp - 0x2a1], 0x10
mov byte [ebp - 0x2a0], 0x45
mov byte [ebp - 0x29f], 0xac
mov byte [ebp - 0x29e], 0xde
mov byte [ebp - 0x29d], 0xd6
mov byte [ebp - 0x29c], 0x35
mov byte [ebp - 0x29b], 0xc4
mov byte [ebp - 0x29a], 0x6a
mov byte [ebp - 0x299], 0x32
mov byte [ebp - 0x298], 0xd3
mov byte [ebp - 0x297], 0x61
mov byte [ebp - 0x296], 6
mov byte [ebp - 0x295], 0x7e
mov byte [ebp - 0x294], 0xab
mov byte [ebp - 0x293], 0x57
mov byte [ebp - 0x292], 0x97
mov byte [ebp - 0x291], 0x2d
mov byte [ebp - 0x290], 0x3e
mov byte [ebp - 0x28f], 0xd4
mov byte [ebp - 0x28e], 0x37
mov byte [ebp - 0x28d], 0x41
mov byte [ebp - 0x28c], 0x6d
mov byte [ebp - 0x28b], 0x38
mov byte [ebp - 0x28a], 0x13
mov byte [ebp - 0x289], 0x28
mov byte [ebp - 0x288], 0xbf
mov byte [ebp - 0x287], 0xc5
mov byte [ebp - 0x286], 0x7f
mov byte [ebp - 0x285], 0xa6
mov byte [ebp - 0x284], 0xe4
mov byte [ebp - 0x283], 0x3d
mov byte [ebp - 0x282], 0xa7
mov byte [ebp - 0x281], 0xd1
mov byte [ebp - 0x280], 0x15
mov byte [ebp - 0x27f], 0xb7
mov byte [ebp - 0x27e], 0x28
mov byte [ebp - 0x27d], 0xcc
mov byte [ebp - 0x27c], 0
mov byte [ebp - 0x27b], 0
mov byte [ebp - 0x27a], 2
mov byte [ebp - 0x279], 6
mov byte [ebp - 0x278], 9
mov byte [ebp - 0x277], 7
mov byte [ebp - 0x276], 6
mov byte [ebp - 0x275], 1
mov byte [ebp - 0x274], 1
mov byte [ebp - 0x273], 4
mov byte [ebp - 0x272], 7
mov byte [ebp - 0x271], 3
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x2d0]
or eax, 0x24
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x2d0]
and ecx, 0x24
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x2d0]
mov byte [ebp + ecx - 0x758], al
mov dword [ebp - 0x20], 2
and dword [ebp - 0x144], 0
jmp 0x100542ce
mov eax, dword [ebp - 0x20]
inc eax
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x60
jae 0x100543ac
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x2d0]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x20], eax
jne 0x10054318
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x2d0]
inc eax
mov dword [ebp - 0x144], eax
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x2d0]
mov ecx, dword [ebp - 0x20]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x20], eax
jmp 0x100542c6
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x2cf]
mov ecx, dword [ebp - 0x20]
sub ecx, dword [ebp - 0x144]
movzx ecx, byte [ebp + ecx - 0x2d2]
movsx ecx, byte [ebp + ecx - 0x758]
add eax, ecx
mov ecx, dword [ebp - 0x20]
movzx ecx, byte [ebp + ecx - 0x2cf]
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x144]
movzx edx, byte [ebp + edx - 0x2d2]
movsx edx, byte [ebp + edx - 0x758]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x20]
movzx ecx, byte [ebp + ecx - 0x2cf]
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x144]
movzx edx, byte [ebp + edx - 0x2d2]
movsx edx, byte [ebp + edx - 0x758]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x20]
movzx ecx, byte [ebp + ecx - 0x2d0]
mov byte [ebp + ecx - 0x758], al
and dword [ebp - 0x144], 0
jmp 0x100542c6
xor eax, eax
inc eax
imul eax, eax, 0xa
mov byte [ebp + eax - 0x758], 0
mov dword [ebp - 0x1bc], 0xb9b55bb2
push 2
lea ecx, [ebp - 0x74c]
call fcn.1001b10b
mov dword [ebp - 4], 9
push 0
lea eax, [ebp - 0xb74]
push eax
push 0x56d1
lea eax, [ebp - 0x74c]
push eax
push 0x25ff
push 0x71e0
push 0x696b
push 0x2a16
call fcn.100525a8
add esp, 0x20
mov dword [ebp - 0x1bc], 0
jmp 0x10054422
mov eax, dword [ebp - 0x1bc]
dec eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 0xffffffe4
jl 0x1005491f
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x60], 0
jmp 0x10054446
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 1
jg 0x1005491a
mov dword [ebp - 0x50], 0x73d2d672
mov dword [ebp - 0x230], 0
jmp 0x10054470
mov eax, dword [ebp - 0x230]
inc eax
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 1
jge 0x1005448c
mov eax, dword [ebp - 0x230]
mov dword [ebp + eax*4 - 0x940], 0
jmp 0x10054463
mov dword [ebp - 0x50], 1
jmp 0x1005449c
mov eax, dword [ebp - 0x50]
dec eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
jl 0x100548f6
mov dword [ebp - 0x4c], 0xbc5021c3
mov dword [ebp - 0x4c], 1
jmp 0x100544bd
mov eax, dword [ebp - 0x4c]
dec eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jl 0x100548f1
mov dword [ebp - 0x12c], 1
mov dword [ebp - 0xfc], 0x663439fc
mov byte [ebp - 0x9d], 0
movzx eax, byte [ebp - 0x9d]
test eax, eax
je 0x10054510
push 0
push 0x57fe
push 0x6f9
push 0x3abc
push 0x6007
push 0x58b
call fcn.10052716
add esp, 0x18
mov dword [ebp - 0x12c], 0
jmp 0x10054529
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 1
jg 0x100548ec
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x1cc], 0
jmp 0x10054559
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 2
jge 0x10054575
mov eax, dword [ebp - 0x1cc]
mov dword [ebp + eax*4 - 0xaf4], 0xd229656d
jmp 0x1005454c
mov dword [ebp - 0x158], 0
jmp 0x1005458e
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 1
jg 0x1005485c
mov dword [ebp - 0x924], 0
push dword [ebp - 0x50]
lea ecx, [ebp - 0x74c]
call fcn.1001b178
cmp dword [eax], 0
jne 0x100545ca
cmp dword [ebp - 0x12c], 0
jne 0x100545ca
and dword [ebp - 0x5f0], 0
jmp 0x100545d4
mov dword [ebp - 0x5f0], 1
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0x5f0], eax
jl 0x100545eb
mov dword [ebp - 0x480], 1
jmp 0x100545f2
and dword [ebp - 0x480], 0
cmp dword [ebp - 0x480], 0xdc87
jle 0x1005460a
mov dword [ebp - 0x728], 1
jmp 0x10054611
and dword [ebp - 0x728], 0
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x728], eax
jge 0x10054628
mov dword [ebp - 0x488], 1
jmp 0x1005462f
and dword [ebp - 0x488], 0
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x488]
lea eax, [ecx + eax + 1]
cmp eax, dword [ebp - 0x50]
jge 0x10054650
cmp dword [ebp - 0x50], 0
jne 0x10054650
and dword [ebp - 0x5f8], 0
jmp 0x1005465a
mov dword [ebp - 0x5f8], 1
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x74c]
call fcn.1001b178
mov eax, dword [eax]
cmp eax, dword [ebp - 0x5f8]
jl 0x1005467e
mov dword [ebp - 0x490], 1
jmp 0x10054685
and dword [ebp - 0x490], 0
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x74c]
call fcn.1001b178
mov ecx, dword [ebp - 0x490]
cmp ecx, dword [eax]
jge 0x100546a9
mov dword [ebp - 0x6b0], 1
jmp 0x100546b0
and dword [ebp - 0x6b0], 0
mov eax, dword [ebp - 0x4c]
imul eax, dword [ebp - 0x6b0]
cmp eax, 0xffff
ja 0x100546cd
mov dword [ebp - 0x498], 1
jmp 0x100546d4
and dword [ebp - 0x498], 0
mov eax, dword [ebp - 0xfc]
cmp dword [ebp - 0x498], eax
jg 0x100546ee
mov dword [ebp - 0x600], 1
jmp 0x100546f5
and dword [ebp - 0x600], 0
cmp dword [ebp - 0x600], 0xfffffffe
jbe 0x1005470a
mov dword [ebp - 0x4a0], 1
jmp 0x10054711
and dword [ebp - 0x4a0], 0
cmp dword [ebp - 0x4a0], 0xbebf0a0c
ja 0x10054723
cmp dword [ebp - 0x60], 0
je 0x10054738
mov eax, 0x8e57
test eax, eax
je 0x10054738
mov dword [ebp - 0x710], 1
jmp 0x1005473f
and dword [ebp - 0x710], 0
mov eax, 0xd8ff8cd3
sub eax, dword [ebp - 0x710]
mov dword [ebp - 0x3c0], eax
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x74c]
call fcn.1001b178
mov ecx, dword [ebp - 0x3c0]
mov dword [eax], ecx
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3c0]
mov dword [ebp + eax - 0x940], ecx
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x3c0], eax
jge 0x10054790
mov dword [ebp - 0x91c], 1
jmp 0x10054797
and dword [ebp - 0x91c], 0
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0xb14], eax
mov eax, dword [ebp - 0x924]
cmp dword [ebp - 0x4c], eax
jge 0x100547b1
cmp dword [ebp - 0x4c], 0
je 0x100547c4
push 0xfffffffffffffff7
pop eax
test eax, eax
je 0x100547c4
mov dword [ebp - 0x914], 1
jmp 0x100547cb
and dword [ebp - 0x914], 0
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0xba0], eax
push 0
lea ecx, [ebp - 0x74c]
call fcn.1001b178
mov ecx, dword [ebp - 0x158]
cmp dword [eax], ecx
jle 0x100547f7
mov dword [ebp - 0x4a8], 1
jmp 0x100547fe
and dword [ebp - 0x4a8], 0
mov eax, dword [ebp - 0x4a8]
sub eax, dword [ebp - 0x50]
cmp eax, dword [ebp - 0x60]
jg 0x10054818
mov dword [ebp - 0x608], 1
jmp 0x1005481f
and dword [ebp - 0x608], 0
mov eax, dword [ebp - 0x60]
imul eax, dword [ebp - 0x608]
cmp eax, dword [ebp - 0xfc]
je 0x1005483d
mov dword [ebp - 0x4b0], 1
jmp 0x10054844
and dword [ebp - 0x4b0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x4b0]
mov dword [ebp + eax - 0xaf4], ecx
jmp 0x10054581
mov dword [ebp - 0xfc], 0x13
jmp 0x10054875
mov eax, dword [ebp - 0xfc]
dec eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0xffffffe3
jle 0x100548e7
mov dword [ebp - 0x1d0], 0
jmp 0x10054897
mov eax, dword [ebp - 0x1d0]
inc eax
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 2
jge 0x100548b3
mov eax, dword [ebp - 0x1d0]
mov dword [ebp + eax*4 - 0xad8], 0x855c71da
jmp 0x1005488a
mov byte [ebp - 0xd9], 0
movzx eax, byte [ebp - 0xd9]
test eax, eax
je 0x100548d3
push 0x1f19
push 0
call fcn.10052242
pop ecx
pop ecx
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xad8], 0
je 0x100548e5
jmp 0x100548e7
jmp 0x10054868
jmp 0x1005451c
jmp 0x100544b6
jmp 0x10054495
lea eax, [ebp - 0x74c]
push eax
push 0x11d0
lea eax, [ebp - 0x60]
push eax
push 0x36b8
push 0
call fcn.100515f9
add esp, 0x14
jmp 0x1005443f
jmp 0x10054415
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x74c]
call fcn.1001b173
lea eax, [ebp - 0x758]
push eax
lea ecx, [ebp - 0xcb4]
call fcn.1002b5c3
mov dword [ebp - 0x804], eax
mov eax, dword [ebp - 0x804]
mov dword [ebp - 0x7c8], eax
mov dword [ebp - 4], 0xa
push 0xa
xor edx, edx
mov ecx, dword [ebp - 0x7c8]
call fcn.100379df
pop ecx
mov dword [ebp - 0x840], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xcb4]
call fcn.1001b06d
push 3
lea ecx, [ebp - 0x99c]
call fcn.1001b10b
mov dword [ebp - 4], 0xb
mov dword [ebp - 0xe8], 0xfffffff8
mov dword [ebp - 0x930], 0xfffffffc
mov dword [ebp - 0x7d8], 0xfffffff7
and dword [ebp - 0xa08], 0
and dword [ebp - 0xa04], 0
and dword [ebp - 0xa00], 0
and dword [ebp - 0x9fc], 0
lea ecx, [ebp - 0x365]
call fcn.1000a7d3
push eax
lea eax, [ebp - 0x9f8]
push eax
lea eax, [ebp - 0xa08]
push eax
lea ecx, [ebp - 0xc54]
call fcn.1001b187
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xb28]
call fcn.1001b14d
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x7d0], 1
push 0x2769
lea eax, [ebp - 0xb1c]
push eax
push 0x48f
push 1
lea eax, [ebp - 0x99c]
push eax
call fcn.10051240
add esp, 0x14
mov dword [ebp - 0xe8], 2
jmp 0x10054a4a
mov eax, dword [ebp - 0xe8]
dec eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0
jl 0x10054c1c
mov dword [ebp - 0x224], 0xfffffffc
mov dword [ebp - 0xb7c], 0
mov dword [ebp - 0xb2c], 0x735e4b78
mov dword [ebp - 0xbb0], 0xfffffff6
mov dword [ebp - 0xa78], 1
mov dword [ebp - 0xa80], 0x5062d7bc
mov dword [ebp - 0xa88], 0x70051efd
mov dword [ebp - 0xa90], 1
mov dword [ebp - 0xa98], 0xffffffff
push 2
lea ecx, [ebp - 0xa50]
call fcn.1001b10b
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x8a4], 1
mov dword [ebp - 0x1c8], 0
jmp 0x10054ae5
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 2
jge 0x10054b07
push dword [ebp - 0x1c8]
lea ecx, [ebp - 0xa50]
call fcn.1001b178
mov dword [eax], 3
jmp 0x10054ad8
mov dword [ebp - 0x224], 0
jmp 0x10054b20
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 2
jg 0x10054bbc
mov dword [ebp - 0xaa0], 1
mov dword [ebp - 0xaa8], 1
mov dword [ebp - 0xab0], 0xffffffff
mov dword [ebp - 0x6b8], 0x636e
mov dword [ebp - 0x1d4], 0
jmp 0x10054b6e
mov eax, dword [ebp - 0x1d4]
inc eax
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 3
jge 0x10054b8a
mov eax, dword [ebp - 0x1d4]
mov dword [ebp + eax*4 - 0xbd4], 0xffffffff
jmp 0x10054b61
mov eax, dword [ebp - 0x6b8]
dec eax
mov dword [ebp - 0x6b8], eax
push dword [ebp - 0xe8]
lea ecx, [ebp - 0x99c]
call fcn.1001b178
push 4
pop ecx
shl ecx, 0
mov eax, dword [eax]
mov dword [ebp + ecx - 0xbd4], eax
jmp 0x10054b13
lea eax, [ebp - 0xb28]
push eax
lea eax, [ebp - 0xe8]
push eax
push 0x742d
lea eax, [ebp - 0x8a4]
push eax
lea eax, [ebp - 0x99c]
push eax
lea eax, [ebp - 0x7d0]
push eax
lea eax, [ebp - 0xa50]
push eax
push 0x19f7
lea eax, [ebp - 0x930]
push eax
lea eax, [ebp - 0x7d8]
push eax
push 1
call fcn.100512ea
add esp, 0x2c
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xa50]
call fcn.1001b173
jmp 0x10054a3d
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0xb28]
call fcn.1001b173
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x99c]
call fcn.1001b173
and dword [ebp - 0x204], 0
jmp 0x10054c50
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 0xb
jae 0x10054c69
mov eax, dword [ebp - 0x204]
mov byte [ebp + eax - 0x758], 0
jmp 0x10054c43
mov dword [ebp - 0x21c], 0xfffffffe
mov dword [ebp - 0x134], 0xffffffff
push 3
lea ecx, [ebp - 0x7a0]
call fcn.1001b10b
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x7f0], 0x9626
mov dword [ebp - 0x28], 0
jmp 0x10054cab
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jge 0x10054cc1
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x2d8], 0xfffffffd
jmp 0x10054ca4
mov dword [ebp - 0x28], 0
jmp 0x10054cd1
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 1
jge 0x10054ce4
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x2c], 0xffffffff
jmp 0x10054cca
mov dword [ebp - 0x28], 0
jmp 0x10054cf4
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jge 0x10054d10
push dword [ebp - 0x28]
lea ecx, [ebp - 0x7a0]
call fcn.1001b178
mov dword [eax], 0x7d86
jmp 0x10054ced
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x2c], 1
jmp 0x10054d35
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2c]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x2c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2c], 0
jl 0x10055340
mov dword [ebp - 0x354], 0xfffffffb
mov dword [ebp - 0x34c], 0xca4e
mov dword [ebp - 0x8ac], 6
mov dword [ebp - 0xa4], 0
mov dword [ebp - 0x1dc], 0xceffb91e
mov dword [ebp - 0x3b0], 0xffffffff
mov dword [ebp - 0x938], 0xffffffff
mov dword [ebp - 0x934], 0xffffffff
mov dword [ebp - 0x7f8], 1
cmp dword [ebp - 0x354], 0
je 0x10054dc5
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2d8], 0
je 0x10054dc5
mov dword [ebp - 0x610], 1
jmp 0x10054dcc
and dword [ebp - 0x610], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2c]
mov eax, dword [ebp + eax*4 - 0x2d8]
mov dword [ebp - 0xab8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2c]
cmp dword [ebp + eax*4 - 0x2d8], 0xfffffffd
jne 0x10054e03
mov dword [ebp - 0x4b8], 1
jmp 0x10054e0a
and dword [ebp - 0x4b8], 0
mov eax, dword [ebp - 0x8ac]
cmp dword [ebp - 0x4b8], eax
jge 0x10054e24
mov dword [ebp - 0x4c0], 1
jmp 0x10054e2b
and dword [ebp - 0x4c0], 0
mov eax, dword [ebp - 0x610]
mov dword [ebp - 0x21c], eax
mov eax, dword [ebp - 0x21c]
mov dword [ebp - 0x34c], eax
mov eax, dword [ebp - 0x34c]
cmp eax, dword [ebp - 0x4c0]
jne 0x10054e5d
mov dword [ebp - 0x738], 1
jmp 0x10054e64
and dword [ebp - 0x738], 0
cmp dword [ebp - 0x738], 0xfffffffa
jge 0x10054e79
mov dword [ebp - 0x4c8], 1
jmp 0x10054e80
and dword [ebp - 0x4c8], 0
mov eax, dword [ebp - 0x4c8]
mov dword [ebp - 0xa4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2c]
cmp eax, dword [ebp - 0xa4]
jne 0x10054eaa
mov dword [ebp - 0x618], 1
jmp 0x10054eb1
and dword [ebp - 0x618], 0
mov eax, dword [ebp - 0x618]
mov dword [ebp - 0x1dc], eax
mov eax, dword [ebp - 0x354]
cmp dword [ebp - 0x1dc], eax
je 0x10054ed7
mov dword [ebp - 0x4d0], 1
jmp 0x10054ede
and dword [ebp - 0x4d0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2c]
imul eax, dword [ebp - 0x4d0]
sub eax, 0x2426
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x2c]
jge 0x10054f0c
mov dword [ebp - 0x6c0], 1
jmp 0x10054f13
and dword [ebp - 0x6c0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2c]
push 4
pop ecx
imul ecx, ecx, 0
mov edx, dword [ebp - 0x6c0]
sub edx, dword [ebp + ecx - 0x2c]
cmp dword [ebp + eax*4 - 0x2d8], edx
je 0x10054f42
mov dword [ebp - 0x4d8], 1
jmp 0x10054f49
and dword [ebp - 0x4d8], 0
mov eax, dword [ebp - 0x4d8]
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0
je 0x10054f7b
mov dword [ebp - 0x7e0], 0xe6d54ec7
cmp dword [ebp - 0x7e0], 0
je 0x10054f76
jmp 0x10055340
jmp 0x100550b5
mov dword [ebp - 0x4e8], 6
mov eax, dword [ebp - 0x4e8]
mov dword [ebp - 0xac0], eax
xor eax, eax
jne 0x10054fa7
cmp dword [ebp - 0x134], 0
jne 0x10054fa7
and dword [ebp - 0x620], 0
jmp 0x10054fb1
mov dword [ebp - 0x620], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2c]
mov eax, dword [ebp + eax*4 - 0x2d8]
cmp eax, dword [ebp - 0x620]
jne 0x10054fd6
mov dword [ebp - 0x4e0], 1
jmp 0x10054fdd
and dword [ebp - 0x4e0], 0
mov dword [ebp - 0x1dc], 0x380d
mov eax, dword [ebp - 0x1dc]
cmp dword [ebp - 0x4e0], eax
jne 0x10055015
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2c]
cmp dword [ebp + eax*4 - 0x2d8], 0
je 0x10055015
mov dword [ebp - 0x718], 1
jmp 0x1005501c
and dword [ebp - 0x718], 0
cmp dword [ebp - 0x718], 0xffffffff
jg 0x10055031
mov dword [ebp - 0x628], 1
jmp 0x10055038
and dword [ebp - 0x628], 0
mov eax, dword [ebp - 0x4e8]
cmp dword [ebp - 0x628], eax
jge 0x10055052
mov dword [ebp - 0x4f0], 1
jmp 0x10055059
and dword [ebp - 0x4f0], 0
cmp dword [ebp - 0x4f0], 0
jge 0x1005506e
mov dword [ebp - 0x6c8], 1
jmp 0x10055075
and dword [ebp - 0x6c8], 0
cmp dword [ebp - 0x6c8], 0xa430
jl 0x1005508d
mov dword [ebp - 0x3b4], 1
jmp 0x10055094
and dword [ebp - 0x3b4], 0
push 0
lea ecx, [ebp - 0x7a0]
call fcn.1001b178
mov ecx, dword [ebp - 0x3b4]
mov dword [eax], ecx
mov eax, dword [ebp - 0x3b4]
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0xa4], 0
je 0x1005531b
cmp dword [ebp - 0x938], 0xe9bdccb4
jne 0x100550da
mov dword [ebp - 0x7e8], 1
jmp 0x100550e1
and dword [ebp - 0x7e8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2d8]
mov dword [ebp - 0xac8], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2d8]
cmp dword [ebp - 0xa4], eax
je 0x10055115
mov dword [ebp - 0x4f8], 1
jmp 0x1005511c
and dword [ebp - 0x4f8], 0
mov eax, dword [ebp - 0xa4]
cmp dword [ebp - 0x4f8], eax
jle 0x10055136
mov dword [ebp - 0x630], 1
jmp 0x1005513d
and dword [ebp - 0x630], 0
mov eax, dword [ebp - 0x630]
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0x8e0d3184
jb 0x10055161
mov dword [ebp - 0x8b4], 1
jmp 0x10055168
and dword [ebp - 0x8b4], 0
mov eax, dword [ebp - 0x7f0]
mov dword [ebp - 0xad0], eax
mov eax, dword [ebp - 0x34c]
mov dword [ebp - 0xadc], eax
cmp dword [ebp - 0x3b0], 0x47af
jl 0x10055198
mov dword [ebp - 0x500], 1
jmp 0x1005519f
and dword [ebp - 0x500], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2c]
cmp dword [ebp - 0x500], eax
jg 0x100551b8
push 0xfffffffffffffffb
pop eax
test eax, eax
jne 0x100551d6
push 0
lea ecx, [ebp - 0x7a0]
call fcn.1001b178
cmp dword [eax], 0
je 0x100551d6
mov dword [ebp - 0x730], 1
jmp 0x100551dd
and dword [ebp - 0x730], 0
mov eax, dword [ebp - 0x3b0]
imul eax, dword [ebp - 0x730]
cmp dword [ebp - 0x3b0], eax
jle 0x100551fe
mov dword [ebp - 0x508], 1
jmp 0x10055205
and dword [ebp - 0x508], 0
imul eax, dword [ebp - 0x508], 0xffff
cmp eax, dword [ebp - 0x934]
je 0x10055223
mov dword [ebp - 0x638], 1
jmp 0x1005522a
and dword [ebp - 0x638], 0
mov eax, dword [ebp - 0x7f8]
cmp dword [ebp - 0x638], eax
jl 0x10055244
mov dword [ebp - 0x510], 1
jmp 0x1005524b
and dword [ebp - 0x510], 0
mov eax, dword [ebp - 0x21c]
cmp dword [ebp - 0x510], eax
jle 0x10055265
mov dword [ebp - 0x6d0], 1
jmp 0x1005526c
and dword [ebp - 0x6d0], 0
mov eax, dword [ebp - 0x354]
cmp dword [ebp - 0x6d0], eax
jl 0x10055286
mov dword [ebp - 0x518], 1
jmp 0x1005528d
and dword [ebp - 0x518], 0
cmp dword [ebp - 0x518], 0xfffffff7
jae 0x100552a2
mov dword [ebp - 0x640], 1
jmp 0x100552a9
and dword [ebp - 0x640], 0
push 0
lea ecx, [ebp - 0x7a0]
call fcn.1001b178
mov ecx, dword [ebp - 0x640]
cmp ecx, dword [eax]
jl 0x100552cc
mov dword [ebp - 0x520], 1
jmp 0x100552d3
and dword [ebp - 0x520], 0
mov eax, dword [ebp - 0x520]
mov dword [ebp - 0xa4], eax
mov esi, dword [ebp - 0xa4]
push 2
lea ecx, [ebp - 0x7a0]
call fcn.1001b178
imul esi, dword [eax]
test esi, esi
je 0x1005531b
mov byte [ebp - 0xa5], 0
movzx eax, byte [ebp - 0xa5]
test eax, eax
je 0x10055319
push 0x7161
push 0
call fcn.1005256a
pop ecx
pop ecx
jmp 0x1005533b
mov byte [ebp - 0xdd], 0
movzx eax, byte [ebp - 0xdd]
test eax, eax
je 0x1005533b
push 1
push 0x397d
call fcn.1005141a
pop ecx
pop ecx
jmp 0x10054d20
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7a0]
call fcn.1001b173
mov byte [ebp - 0x270], 9
mov byte [ebp - 0x26f], 0xb3
mov byte [ebp - 0x26e], 7
mov byte [ebp - 0x26d], 6
mov byte [ebp - 0x26c], 2
mov byte [ebp - 0x26b], 1
mov byte [ebp - 0x26a], 8
mov byte [ebp - 0x269], 7
mov byte [ebp - 0x268], 5
mov byte [ebp - 0x267], 1
mov byte [ebp - 0x266], 6
mov byte [ebp - 0x265], 8
mov byte [ebp - 0x264], 4
mov byte [ebp - 0x263], 0xd
mov byte [ebp - 0x262], 0
mov byte [ebp - 0x261], 5
mov byte [ebp - 0x260], 3
mov byte [ebp - 0x25f], 3
mov byte [ebp - 0x25e], 1
mov byte [ebp - 0x25d], 4
mov byte [ebp - 0x25c], 0x2b
mov byte [ebp - 0x25b], 0x84
mov byte [ebp - 0x25a], 0x4d
mov byte [ebp - 0x259], 0xea
mov byte [ebp - 0x258], 0x70
mov byte [ebp - 0x257], 0x35
mov byte [ebp - 0x256], 0xc8
mov byte [ebp - 0x255], 0x71
mov byte [ebp - 0x254], 0xe0
mov byte [ebp - 0x253], 0xe1
mov byte [ebp - 0x252], 0x1f
mov byte [ebp - 0x251], 0x63
mov byte [ebp - 0x250], 0x37
mov byte [ebp - 0x24f], 0xe1
mov byte [ebp - 0x24e], 0x92
mov byte [ebp - 0x24d], 0x3f
mov byte [ebp - 0x24c], 0xbe
mov byte [ebp - 0x24b], 0x2a
mov byte [ebp - 0x24a], 0xf3
mov byte [ebp - 0x249], 0x52
mov byte [ebp - 0x248], 0xa6
mov byte [ebp - 0x247], 0x41
mov byte [ebp - 0x246], 0xca
mov byte [ebp - 0x245], 0x79
mov byte [ebp - 0x244], 0xb6
mov byte [ebp - 0x243], 0xd4
mov byte [ebp - 0x242], 0x1f
mov byte [ebp - 0x241], 0x19
mov byte [ebp - 0x240], 0x14
mov byte [ebp - 0x23f], 0x5c
mov byte [ebp - 0x23e], 0x35
mov byte [ebp - 0x23d], 0x37
mov byte [ebp - 0x23c], pe_nt_image_headers32
mov byte [ebp - 0x23b], 0x56
mov byte [ebp - 0x23a], 0xcd
mov byte [ebp - 0x239], 0x14
mov byte [ebp - 0x238], 0x3a
mov byte [ebp - 0x237], 0x22
mov byte [ebp - 0x236], 0x38
mov byte [ebp - 0x235], 0xb3
mov byte [ebp - 0x234], 0xd9
mov byte [ebp - 0x233], 2
mov byte [ebp - 0x232], 0x5d
mov byte [ebp - 0x231], 0xa1
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x270]
or eax, 0x83
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x270]
and ecx, 0x83
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x270]
mov byte [ebp + ecx - 0x764], al
mov dword [ebp - 0x24], 2
and dword [ebp - 0x150], 0
jmp 0x10055565
mov eax, dword [ebp - 0x24]
inc eax
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0x40
jae 0x10055657
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x270]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x24], eax
jne 0x100555af
mov eax, dword [ebp - 0x24]
movzx eax, byte [ebp + eax - 0x270]
inc eax
mov dword [ebp - 0x150], eax
mov eax, dword [ebp - 0x24]
movzx eax, byte [ebp + eax - 0x270]
mov ecx, dword [ebp - 0x24]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x24], eax
jmp 0x1005555d
mov eax, dword [ebp - 0x24]
movzx eax, byte [ebp + eax - 0x26f]
mov ecx, dword [ebp - 0x24]
sub ecx, dword [ebp - 0x150]
movzx ecx, byte [ebp + ecx - 0x272]
movsx ecx, byte [ebp + ecx - 0x764]
add eax, ecx
mov ecx, dword [ebp - 0x24]
movzx ecx, byte [ebp + ecx - 0x26f]
mov edx, dword [ebp - 0x24]
sub edx, dword [ebp - 0x150]
movzx edx, byte [ebp + edx - 0x272]
movsx edx, byte [ebp + edx - 0x764]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x24]
movzx ecx, byte [ebp + ecx - 0x26f]
mov edx, dword [ebp - 0x24]
sub edx, dword [ebp - 0x150]
movzx edx, byte [ebp + edx - 0x272]
movsx edx, byte [ebp + edx - 0x764]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x24]
movzx ecx, byte [ebp + ecx - 0x270]
mov byte [ebp + ecx - 0x764], al
push 0x7729
lea eax, [ebp - 0x150]
push eax
push 0
push 0x1e37
call fcn.10052793
add esp, 0x10
jmp 0x1005555d
xor eax, eax
inc eax
imul eax, eax, 0xa
mov byte [ebp + eax - 0x764], 0
lea eax, [ebp - 0x764]
push eax
lea ecx, [ebp - 0xc84]
call fcn.1002b5c3
mov dword [ebp - 0x8bc], eax
mov eax, dword [ebp - 0x8bc]
mov dword [ebp - 0x800], eax
mov dword [ebp - 4], 0xf
push 0xa
xor edx, edx
mov ecx, dword [ebp - 0x800]
call fcn.100379df
pop ecx
mov dword [ebp - 0x810], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc84]
call fcn.1001b06d
and dword [ebp - 0x1e4], 0
jmp 0x100556cb
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 0xb
jae 0x100556e4
mov eax, dword [ebp - 0x1e4]
mov byte [ebp + eax - 0x764], 0
jmp 0x100556be
mov dword [ebp - 0xac], 9
mov dword [ebp - 0x5c], 8
mov dword [ebp - 0x170], 3
mov dword [ebp - 0x650], 0xfffffffd
mov dword [ebp - 0x540], 0xededc87a
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0
je 0x10055a9e
push 4
lea ecx, [ebp - 0x7b8]
call fcn.1001b10b
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x658], 0xea3de81d
push 0x5b50
lea eax, [ebp - 0x7b8]
push eax
push 0x26e4
push 0x72fd
push 0x4634
push 0
lea eax, [ebp - 0xa74]
push eax
call fcn.100528aa
add esp, 0x1c
mov dword [ebp - 0xac], 3
jmp 0x10055789
mov eax, dword [ebp - 0xac]
dec eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0
jl 0x10055a8d
mov dword [ebp - 0x38c], 0xe434392f
mov dword [ebp - 0x808], 0xffffffff
mov dword [ebp - 0x5c], 0
jmp 0x100557ba
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 3
jg 0x10055a6e
mov dword [ebp - 0xb4], 8
mov dword [ebp - 0xb4], 0
jmp 0x100557e7
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 3
jg 0x1005595a
mov dword [ebp - 0x13c], 0xb4837182
mov dword [ebp - 0x13c], 0
jmp 0x10055817
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 3
jg 0x10055955
mov dword [ebp - 0x20c], 0
jmp 0x1005583d
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 3
jge 0x10055859
mov eax, dword [ebp - 0x20c]
mov dword [ebp + eax*4 - 0xbec], 0x96f8f9ed
jmp 0x10055830
push dword [ebp - 0x13c]
lea ecx, [ebp - 0x7b8]
call fcn.1001b178
cmp dword [eax], 0xa5a40f2f
jne 0x1005587e
mov dword [ebp - 0x530], 1
jmp 0x10055885
and dword [ebp - 0x530], 0
mov eax, dword [ebp - 0x38c]
mov dword [ebp - 0xb10], eax
push 1
lea ecx, [ebp - 0x7b8]
call fcn.1001b178
mov eax, dword [eax]
add eax, 0x20a6
cmp eax, dword [ebp - 0x38c]
jne 0x100558c5
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xbec], 0
jne 0x100558c5
and dword [ebp - 0x6e8], 0
jmp 0x100558cf
mov dword [ebp - 0x6e8], 1
mov eax, dword [ebp - 0x6e8]
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 0
jne 0x100558f0
mov dword [ebp - 0x528], 1
jmp 0x100558f7
and dword [ebp - 0x528], 0
mov eax, dword [ebp - 0xb4]
cmp eax, dword [ebp - 0x528]
jle 0x10055911
mov dword [ebp - 0x648], 1
jmp 0x10055918
and dword [ebp - 0x648], 0
cmp dword [ebp - 0x648], 1
jge 0x1005592d
mov dword [ebp - 0x834], 1
jmp 0x10055934
and dword [ebp - 0x834], 0
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0xb18], eax
imul eax, dword [ebp - 0x530], 0x649b
mov dword [ebp - 0x808], eax
jmp 0x1005580a
jmp 0x100557da
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0xb68], eax
mov eax, dword [ebp - 0x38c]
dec eax
cmp dword [ebp - 0x650], eax
jl 0x10055981
mov dword [ebp - 0x6d8], 1
jmp 0x10055988
and dword [ebp - 0x6d8], 0
mov eax, dword [ebp - 0x170]
cmp dword [ebp - 0x6d8], eax
jl 0x100559a2
mov dword [ebp - 0x538], 1
jmp 0x100559a9
and dword [ebp - 0x538], 0
push dword [ebp - 0xac]
lea ecx, [ebp - 0x7b8]
call fcn.1001b178
mov ecx, dword [ebp - 0x538]
cmp ecx, dword [eax]
je 0x100559d0
mov dword [ebp - 0x6ec], 1
jmp 0x100559d7
and dword [ebp - 0x6ec], 0
mov eax, dword [ebp - 0x650]
mov dword [ebp - 0x540], eax
mov eax, dword [ebp - 0x540]
cmp eax, dword [ebp - 0x6ec]
je 0x100559fd
mov dword [ebp - 0x548], 1
jmp 0x10055a04
and dword [ebp - 0x548], 0
push dword [ebp - 0xac]
lea ecx, [ebp - 0x7b8]
call fcn.1001b178
mov eax, dword [eax]
cmp eax, dword [ebp - 0x548]
jge 0x10055a2b
mov dword [ebp - 0x550], 1
jmp 0x10055a32
and dword [ebp - 0x550], 0
mov dword [ebp - 0x658], 0xfffffff7
mov eax, dword [ebp - 0x658]
cmp eax, dword [ebp - 0x550]
je 0x10055a56
mov dword [ebp - 0x6e4], 1
jmp 0x10055a5d
and dword [ebp - 0x6e4], 0
mov eax, dword [ebp - 0x6e4]
mov dword [ebp - 0xb4], eax
jmp 0x100557b3
mov byte [ebp - 0xad], 0
movzx eax, byte [ebp - 0xad]
test eax, eax
je 0x10055a88
push 1
call fcn.10051472
pop ecx
jmp 0x1005577c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7b8]
call fcn.1001b173
jmp 0x10055acb
mov dword [ebp - 0x838], 0xffffffff
mov dword [ebp - 0x5c], 0
jmp 0x10055ab8
mov eax, dword [ebp - 0x5c]
dec eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0xffffffff
jge 0x10055acb
cmp dword [ebp - 0x838], 0
je 0x10055ac9
jmp 0x10055acb
jmp 0x10055ab1
push dword [ebp - 0x810]
push dword [ebp - 0x840]
call fcn.1004d55a
pop ecx
pop ecx
mov dword [ebp - 0x670], eax
mov dword [ebp - 0x850], 0xfffffff9
mov dword [ebp - 0x1ec], 0x72159124
mov dword [ebp - 0x3b8], 6
mov dword [ebp - 0xb70], 0xc312fbb6
mov dword [ebp - 0x828], 0x3d4e7030
mov dword [ebp - 0x858], 5
mov dword [ebp - 0xb78], 0xfffffff8
mov dword [ebp - 0x35c], 0xffff
mov dword [ebp - 0x74], 0
jmp 0x10055b44
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 1
jge 0x10055b5a
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0x818], 0x49c9fb37
jmp 0x10055b3d
mov dword [ebp - 0x74], 0
jmp 0x10055b6a
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 2
jge 0x10055b80
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0xc44], 0x98cafa32
jmp 0x10055b63
mov eax, dword [ebp - 0x3b8]
mov dword [ebp - 0x1ec], eax
mov eax, dword [ebp - 0x1ec]
mov dword [ebp - 0x558], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x558]
mov dword [ebp + eax - 0x818], ecx
mov eax, dword [ebp - 0x35c]
inc eax
mov dword [ebp - 0x35c], eax
mov eax, dword [ebp - 0x558]
mov dword [ebp - 0x848], eax
mov eax, dword [ebp - 0x35c]
mov dword [ebp - 0x820], eax
mov eax, dword [ebp - 0x3b8]
dec eax
mov dword [ebp - 0x3b8], eax
mov eax, dword [ebp - 0x848]
cmp eax, dword [ebp - 0x820]
jl 0x10055bf7
mov dword [ebp - 0x660], 1
jmp 0x10055bfe
and dword [ebp - 0x660], 0
mov eax, dword [ebp - 0x850]
cmp eax, dword [ebp - 0x660]
jne 0x10055c2f
mov eax, dword [ebp - 0x828]
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 0
je 0x10055c26
xor eax, eax
inc eax
jne 0x10055c2f
and dword [ebp - 0x560], 0
jmp 0x10055c39
mov dword [ebp - 0x560], 1
mov eax, dword [ebp - 0x560]
mov dword [ebp - 0x858], eax
push 1
lea eax, [ebp - 0x670]
push eax
lea eax, [ebp - 0xf0]
push eax
call fcn.100514b9
add esp, 0xc
push 2
lea ecx, [ebp - 0x398]
call fcn.1001b10b
mov dword [ebp - 4], 0x11
push 3
lea ecx, [ebp - 0x8e0]
call fcn.1001b10b
mov byte [ebp - 4], 0x12
mov dword [ebp - 0xf8], 0xfffffff9
mov dword [ebp - 0x1c], 0
jmp 0x10055c9c
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x10055cb2
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x9b4], 0x6af1
jmp 0x10055c95
mov dword [ebp - 0x1c], 0
jmp 0x10055cc2
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x10055cde
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x398]
call fcn.1001b178
mov dword [eax], 0xfffffff7
jmp 0x10055cbb
mov dword [ebp - 0x1c], 0
jmp 0x10055cee
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x10055d0a
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x8e0]
call fcn.1001b178
mov dword [eax], 0xec326874
jmp 0x10055ce7
mov dword [ebp - 0x1c], 0
jmp 0x10055d1a
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jge 0x10055d30
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x83c], 0xffffffff
jmp 0x10055d13
push 0
lea ecx, [ebp - 0x398]
call fcn.1001b178
and dword [eax], 0
jmp 0x10055d66
push 0
lea ecx, [ebp - 0x398]
call fcn.1001b178
mov dword [ebp - 0x6f4], eax
mov eax, dword [ebp - 0x6f4]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x6f4]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x398]
call fcn.1001b178
cmp dword [eax], 2
jg 0x10055f61
mov dword [ebp - 0x364], 4
mov dword [ebp - 0x868], 7
push 2
lea ecx, [ebp - 0x8e0]
call fcn.1001b178
mov esi, eax
push 2
lea ecx, [ebp - 0x8e0]
call fcn.1001b178
mov eax, dword [eax]
inc eax
cmp dword [esi], eax
jge 0x10055dbf
mov dword [ebp - 0x568], 1
jmp 0x10055dc6
and dword [ebp - 0x568], 0
push 1
lea ecx, [ebp - 0x398]
call fcn.1001b178
mov eax, dword [eax]
sub eax, dword [ebp - 0x568]
je 0x10055ded
xor eax, eax
je 0x10055ded
mov dword [ebp - 0x830], 1
jmp 0x10055df4
and dword [ebp - 0x830], 0
mov dword [ebp - 0xf8], 0
cmp dword [ebp - 0xf8], 1
jb 0x10055e13
mov dword [ebp - 0x668], 1
jmp 0x10055e1a
and dword [ebp - 0x668], 0
push 0
lea ecx, [ebp - 0x398]
call fcn.1001b178
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x9b4]
cmp eax, dword [ebp - 0x668]
jl 0x10055e44
mov dword [ebp - 0x860], 1
jmp 0x10055e4b
and dword [ebp - 0x860], 0
push 2
lea ecx, [ebp - 0x8e0]
call fcn.1001b178
push 0
lea ecx, [ebp - 0x398]
call fcn.1001b178
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x9b4]
mov dword [ebp - 0xb80], eax
mov eax, dword [ebp - 0x364]
mov dword [ebp - 0xb88], eax
push 0
lea ecx, [ebp - 0x398]
call fcn.1001b178
mov ecx, dword [ebp - 0x364]
imul ecx, dword [eax]
sub ecx, 0xfbfd
cmp ecx, 0x279e56e6
jne 0x10055eb0
mov dword [ebp - 0x570], 1
jmp 0x10055eb7
and dword [ebp - 0x570], 0
mov eax, dword [ebp - 0x364]
cmp dword [ebp - 0x570], eax
jge 0x10055ed1
mov dword [ebp - 0x6fc], 1
jmp 0x10055ed8
and dword [ebp - 0x6fc], 0
mov eax, dword [ebp - 0x6fc]
mov dword [ebp - 0x868], eax
mov dword [ebp - 0xf8], 0
jmp 0x10055efd
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 2
jg 0x10055f5c
push 0
lea ecx, [ebp - 0x398]
call fcn.1001b178
mov esi, dword [eax]
push 0
lea ecx, [ebp - 0x398]
call fcn.1001b178
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x9b4]
cmp dword [ebp + esi*4 - 0x9b4], eax
jge 0x10055f40
mov dword [ebp - 0x578], 1
jmp 0x10055f47
and dword [ebp - 0x578], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x578]
mov dword [ebp + eax - 0x83c], ecx
jmp 0x10055ef0
jmp 0x10055d42
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x8e0]
call fcn.1001b173
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x398]
call fcn.1001b173
push 0x154e
push 0x789a
lea eax, [ebp - 0x10]
push eax
push 1
push 0x3701
lea eax, [ebp - 0x670]
push eax
push 0x6128
call fcn.100514fc
add esp, 0x1c
push 2
lea ecx, [ebp - 0x3a8]
call fcn.1001b10b
mov dword [ebp - 4], 0x13
push 3
lea ecx, [ebp - 0x8f0]
call fcn.1001b10b
mov byte [ebp - 4], 0x14
mov dword [ebp - 0x100], 0xfffffff9
mov dword [ebp - 0x48], 0
jmp 0x10055fe7
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 3
jge 0x10055ffd
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x978], 0x6af1
jmp 0x10055fe0
push 0x23de
lea eax, [ebp - 0x48]
push eax
push 0x7467
lea eax, [ebp - 0x3a8]
push eax
push 1
call fcn.100515f9
add esp, 0x14
lea eax, [ebp - 0x48]
push eax
push 1
lea eax, [ebp - 0x8f0]
push eax
call fcn.100516b7
add esp, 0xc
mov dword [ebp - 0x48], 0
jmp 0x10056041
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 1
jge 0x10056057
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x84c], 0xffffffff
jmp 0x1005603a
push 0
lea ecx, [ebp - 0x3a8]
call fcn.1001b178
and dword [eax], 0
jmp 0x1005608d
push 0
lea ecx, [ebp - 0x3a8]
call fcn.1001b178
mov dword [ebp - 0x580], eax
mov eax, dword [ebp - 0x580]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x580]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x3a8]
call fcn.1001b178
cmp dword [eax], 2
jg 0x10056288
mov dword [ebp - 0x39c], 4
mov dword [ebp - 0x944], 7
push 2
lea ecx, [ebp - 0x8f0]
call fcn.1001b178
mov esi, eax
push 2
lea ecx, [ebp - 0x8f0]
call fcn.1001b178
mov eax, dword [eax]
inc eax
cmp dword [esi], eax
jge 0x100560e6
mov dword [ebp - 0x6f0], 1
jmp 0x100560ed
and dword [ebp - 0x6f0], 0
push 1
lea ecx, [ebp - 0x3a8]
call fcn.1001b178
mov eax, dword [eax]
sub eax, dword [ebp - 0x6f0]
je 0x10056114
xor eax, eax
je 0x10056114
mov dword [ebp - 0x8c4], 1
jmp 0x1005611b
and dword [ebp - 0x8c4], 0
mov dword [ebp - 0x100], 0
cmp dword [ebp - 0x100], 1
jb 0x1005613a
mov dword [ebp - 0x588], 1
jmp 0x10056141
and dword [ebp - 0x588], 0
push 0
lea ecx, [ebp - 0x3a8]
call fcn.1001b178
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x978]
cmp eax, dword [ebp - 0x588]
jl 0x1005616b
mov dword [ebp - 0x844], 1
jmp 0x10056172
and dword [ebp - 0x844], 0
push 2
lea ecx, [ebp - 0x8f0]
call fcn.1001b178
push 0
lea ecx, [ebp - 0x3a8]
call fcn.1001b178
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x978]
mov dword [ebp - 0xba4], eax
mov eax, dword [ebp - 0x39c]
mov dword [ebp - 0xbac], eax
push 0
lea ecx, [ebp - 0x3a8]
call fcn.1001b178
mov ecx, dword [ebp - 0x39c]
imul ecx, dword [eax]
sub ecx, 0xfbfd
cmp ecx, 0x279e56e6
jne 0x100561d7
mov dword [ebp - 0x678], 1
jmp 0x100561de
and dword [ebp - 0x678], 0
mov eax, dword [ebp - 0x39c]
cmp dword [ebp - 0x678], eax
jge 0x100561f8
mov dword [ebp - 0x590], 1
jmp 0x100561ff
and dword [ebp - 0x590], 0
mov eax, dword [ebp - 0x590]
mov dword [ebp - 0x944], eax
mov dword [ebp - 0x100], 0
jmp 0x10056224
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 2
jg 0x10056283
push 0
lea ecx, [ebp - 0x3a8]
call fcn.1001b178
mov esi, dword [eax]
push 0
lea ecx, [ebp - 0x3a8]
call fcn.1001b178
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x978]
cmp dword [ebp + esi*4 - 0x978], eax
jge 0x10056267
mov dword [ebp - 0x740], 1
jmp 0x1005626e
and dword [ebp - 0x740], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x740]
mov dword [ebp + eax - 0x84c], ecx
jmp 0x10056217
jmp 0x10056069
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x8f0]
call fcn.1001b173
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3a8]
call fcn.1001b173
and dword [ebp - 0x14c], 0
mov eax, dword [ebp - 0x10]
cmp dword [eax + 0x18], 0
jbe 0x100562d5
push 0x4a57
push 0x5ba
push 0
lea eax, [ebp - 0x14c]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.100524c0
add esp, 0x14
mov dword [ebp - 0x160], 0x2c03342e
mov dword [ebp - 0x5a0], 0x205b
mov dword [ebp - 0x680], 0xa01c77dc
mov dword [ebp - 0x92c], 0x3ea3a722
mov dword [ebp - 0x854], 0xba7da828
mov dword [ebp - 0x85c], 0
push 1
lea ecx, [ebp - 0xa38]
call fcn.1001b10b
mov dword [ebp - 4], 0x15
mov dword [ebp - 0x22c], 0
jmp 0x1005633e
mov eax, dword [ebp - 0x22c]
inc eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 1
jge 0x10056360
push dword [ebp - 0x22c]
lea ecx, [ebp - 0xa38]
call fcn.1001b178
mov dword [eax], 0x83dc
jmp 0x10056331
mov dword [ebp - 0x160], 0
jmp 0x10056379
mov eax, dword [ebp - 0x160]
dec eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 0xfffffff3
jge 0x10056413
mov dword [ebp - 0x1f4], 0xfffffffa
mov dword [ebp - 0x8cc], 9
mov dword [ebp - 0x1f4], 0
jmp 0x100563b3
mov eax, dword [ebp - 0x1f4]
dec eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 0xfffffff2
jl 0x1005640e
mov dword [ebp - 0x598], 0x2eac4530
lea eax, [ebp - 0x680]
push eax
lea eax, [ebp - 0x598]
push eax
lea eax, [ebp - 0x5a0]
push eax
push 0x5272
push 1
call fcn.1005171c
add esp, 0x14
lea eax, [ebp - 0x8cc]
push eax
lea eax, [ebp - 0x598]
push eax
push 0x232e
push 0
push 0x75b2
call fcn.10051f5d
add esp, 0x14
jmp 0x100563a6
jmp 0x1005636c
lea eax, [ebp - 0x854]
push eax
lea eax, [ebp - 0x160]
push eax
push 0x429e
push 0x13e0
lea eax, [ebp - 0x680]
push eax
lea eax, [ebp - 0xa38]
push eax
push 1
lea eax, [ebp - 0x5a0]
push eax
lea eax, [ebp - 0x92c]
push eax
lea eax, [ebp - 0x85c]
push eax
call fcn.100517e8
add esp, 0x28
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa38]
call fcn.1001b173
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0x1c]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x11c], 0xd3df75dc
mov dword [ebp - 0x3bc], 0x46773196
mov dword [ebp - 0x1fc], 0xffffffff
mov dword [ebp - 0xbb4], 0xf769
mov dword [ebp - 0x214], 0
jmp 0x100564b1
mov eax, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 2
jge 0x100564cd
mov eax, dword [ebp - 0x214]
mov dword [ebp + eax*4 - 0xb00], 0xfffe
jmp 0x100564a4
mov dword [ebp - 0x11c], 0xfffffffe
jmp 0x100564e6
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0x1d
jl 0x100566e1
mov dword [ebp - 0x404], 0x35f394a2
mov dword [ebp - 0x36c], 0x3dcdf5ef
mov dword [ebp - 0x118], 0xfffffffd
mov dword [ebp - 0x8d4], 0x8f1fe3d2
push 0x7b28
push 0x1ab2
push 0x4307
lea eax, [ebp - 0x404]
push eax
push 0x1c1c
lea eax, [ebp - 0x36c]
push eax
lea eax, [ebp - 0x1fc]
push eax
push 0x5059
lea eax, [ebp - 0x118]
push eax
push 1
lea eax, [ebp - 0x8d4]
push eax
push 0x5564
push 0x7f93
lea eax, [ebp - 0x3bc]
push eax
lea eax, [ebp - 0x11c]
push eax
call fcn.100519c8
add esp, 0x3c
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0xbbc], eax
mov eax, dword [ebp - 0x36c]
dec eax
cmp dword [ebp - 0x118], eax
jl 0x100565a0
mov dword [ebp - 0x3e0], 1
jmp 0x100565a7
and dword [ebp - 0x3e0], 0
mov eax, dword [ebp - 0x118]
cmp dword [ebp - 0x3e0], eax
jl 0x100565c1
mov dword [ebp - 0x3e4], 1
jmp 0x100565c8
and dword [ebp - 0x3e4], 0
cmp dword [ebp - 0x3e4], 0x328d
jle 0x100565e0
mov dword [ebp - 0x3ec], 1
jmp 0x100565e7
and dword [ebp - 0x3ec], 0
mov eax, dword [ebp - 0x1fc]
imul eax, dword [ebp - 0x3ec]
cmp eax, 9
jae 0x10056605
mov dword [ebp - 0x3f4], 1
jmp 0x1005660c
and dword [ebp - 0x3f4], 0
cmp dword [ebp - 0x3f4], 0
ja 0x10056621
mov dword [ebp - 0x3fc], 1
jmp 0x10056628
and dword [ebp - 0x3fc], 0
mov eax, dword [ebp - 0x118]
add eax, dword [ebp - 0x3fc]
jne 0x10056648
mov eax, 0x7097
test eax, eax
jne 0x10056648
and dword [ebp - 0x40c], 0
jmp 0x10056652
mov dword [ebp - 0x40c], 1
mov eax, dword [ebp - 0x404]
cmp eax, dword [ebp - 0x40c]
je 0x1005666c
mov dword [ebp - 0x414], 1
jmp 0x10056673
and dword [ebp - 0x414], 0
imul eax, dword [ebp - 0x414], 0x67ba
mov dword [ebp - 0x1fc], eax
mov eax, dword [ebp - 0x1fc]
imul eax, dword [ebp - 0x3bc]
cmp eax, 0xd1afc438
jne 0x100566a3
mov dword [ebp - 0x41c], 1
jmp 0x100566aa
and dword [ebp - 0x41c], 0
mov eax, dword [ebp - 0x41c]
imul eax, dword [ebp - 0x36c]
mov dword [ebp - 0x424], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x424]
mov dword [ebp + eax - 0xb00], ecx
mov eax, dword [ebp - 0x424]
mov dword [ebp - 0x3bc], eax
jmp 0x100564d9
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0x14]
sub eax, dword [ebp - 0x14c]
mov dword [ebp - 0x108], eax
and dword [ebp - 0x120], 0
jmp 0x10056709
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
mov eax, dword [ebp - 0x120]
cmp eax, dword [ebp - 0x108]
jge 0x100567bb
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
mov eax, dword [eax + 0x14]
sub eax, dword [ecx + 0x18]
cmp dword [ebp - 0x120], eax
jae 0x1005676e
lea eax, [ebp - 0x3dc]
push eax
push 0x2ff7
push 0
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x120]
push eax
push 0x52e4
lea eax, [ebp - 0x34]
push eax
push 0x250e
push 0x3ed2
push 0x31e3
call fcn.10052161
add esp, 0x2c
jmp 0x10056797
mov eax, dword [ebp - 0x1c4]
mov eax, dword [eax + 0x14]
mov ecx, dword [ebp - 0x1c4]
add eax, dword [ecx + 0x10]
push eax
mov eax, dword [ebp - 0x1c4]
push dword [eax + 0x14]
call fcn.1004d55a
pop ecx
pop ecx
mov dword [ebp - 0x3dc], eax
mov eax, dword [ebp - 0x38]
add eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x3dc]
mov dword [ecx + eax], edx
lea eax, [ebp - 0x18]
push eax
push 1
call fcn.10051d1b
pop ecx
pop ecx
jmp 0x100566fc
mov dword [ebp - 0x954], 1
mov dword [ebp - 0x950], 1
mov dword [ebp - 0x94c], 1
mov dword [ebp - 0x948], 1
mov dword [ebp - 0x128], 0xc4530722
mov dword [ebp - 0x44c], 0xe3bf
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x954]
mov dword [ebp - 0x434], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x434]
mov dword [ebp + eax - 0x954], ecx
cmp dword [ebp - 0x434], 0
je 0x10056837
or eax, 0xffffffff
je 0x10056837
mov dword [ebp - 0x43c], 1
jmp 0x1005683e
and dword [ebp - 0x43c], 0
mov eax, dword [ebp - 0x43c]
mov dword [ebp - 0x128], eax
mov dword [ebp - 0x128], 0
jmp 0x10056863
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 3
jg 0x10056a9f
mov dword [ebp - 0x1c0], 0xfffffffb
mov dword [ebp - 0xb54], 0
mov dword [ebp - 0xae4], 0xfc42ff18
mov dword [ebp - 0xa7c], 1
mov dword [ebp - 0x1c0], 0
jmp 0x100568b1
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 3
jg 0x10056a9a
push 3
lea ecx, [ebp - 0x900]
call fcn.1001b10b
mov dword [ebp - 4], 0x16
mov dword [ebp - 0x68], 0
jmp 0x100568e2
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 3
jge 0x100568f8
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x9a8], 0x2f76ec75
jmp 0x100568db
mov dword [ebp - 0x68], 0
jmp 0x10056908
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 3
jge 0x10056924
push dword [ebp - 0x68]
lea ecx, [ebp - 0x900]
call fcn.1001b178
mov dword [eax], 0x884cb8f6
jmp 0x10056901
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x9a8], 0
jmp 0x1005694f
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x9a8]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x9a8], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x9a8], 3
jg 0x100569e3
mov dword [ebp - 0x1d8], 0xa7084bc
mov byte [ebp - 0x81], 0
movzx eax, byte [ebp - 0x81]
test eax, eax
je 0x10056994
push 0
push 0
push 0x1ee
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x1d8], 0
jmp 0x100569ad
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 3
jg 0x100569de
mov byte [ebp - 0xbd], 0
movzx eax, byte [ebp - 0xbd]
test eax, eax
je 0x100569dc
push 0x7b0f
push 1
push 0x6332
call fcn.10051d51
add esp, 0xc
jmp 0x100569a0
jmp 0x10056936
push 0
lea ecx, [ebp - 0x900]
call fcn.1001b178
and dword [eax], 0
jmp 0x10056a19
push 0
lea ecx, [ebp - 0x900]
call fcn.1001b178
mov dword [ebp - 0x444], eax
mov eax, dword [ebp - 0x444]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x444]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x900]
call fcn.1001b178
cmp dword [eax], 2
jg 0x10056a86
mov dword [ebp - 0x130], 0xfffffffa
mov dword [ebp - 0xb3c], 0x37d0
mov dword [ebp - 0x130], 2
jmp 0x10056a58
mov eax, dword [ebp - 0x130]
dec eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0
jl 0x10056a74
mov eax, dword [ebp - 0x130]
mov dword [ebp + eax*4 - 0x954], 0xb89bdd77
jmp 0x10056a4b
mov eax, dword [ebp - 0x44c]
dec eax
mov dword [ebp - 0x44c], eax
jmp 0x100569f5
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x900]
call fcn.1001b173
jmp 0x100568a4
jmp 0x10056856
push 0x49aa
lea eax, [ebp - 0x10]
push eax
push 0x2d10
lea eax, [ebp - 0x14c]
push eax
push 0
call fcn.10051fde
add esp, 0x14
mov dword [ebp - 0x80], 8
push 1
lea ecx, [ebp - 0x990]
call fcn.1001b10b
mov dword [ebp - 4], 0x17
mov dword [ebp - 0x47c], 1
mov dword [ebp - 0x4b4], 0xf27142b6
mov dword [ebp - 0x4c4], 1
mov dword [ebp - 0x4cc], 0xfffffff8
mov dword [ebp - 0x1e0], 0
jmp 0x10056b1a
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 1
jge 0x10056b3c
push dword [ebp - 0x1e0]
lea ecx, [ebp - 0x990]
call fcn.1001b178
mov dword [eax], 0xf97812a3
jmp 0x10056b0d
cmp dword [ebp - 0x80], 0
je 0x10056b75
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x454], eax
push 0
lea ecx, [ebp - 0x990]
call fcn.1001b178
mov ecx, dword [ebp - 0x454]
mov dword [eax], ecx
cmp dword [ebp - 0x454], 0
je 0x10056b75
mov dword [ebp - 0x45c], 1
jmp 0x10056b7c
and dword [ebp - 0x45c], 0
cmp dword [ebp - 0x45c], 0x21e1d82c
jle 0x10056b94
mov dword [ebp - 0x46c], 1
jmp 0x10056b9b
and dword [ebp - 0x46c], 0
cmp dword [ebp - 0x80], 3
jg 0x10056bad
mov dword [ebp - 0x464], 1
jmp 0x10056bb4
and dword [ebp - 0x464], 0
mov eax, dword [ebp - 0x80]
imul ecx, dword [ebp - 0x464], 0xf748
add eax, ecx
cmp dword [ebp - 0x46c], eax
jge 0x10056bd7
mov dword [ebp - 0x474], 1
jmp 0x10056bde
and dword [ebp - 0x474], 0
mov eax, dword [ebp - 0x474]
mov dword [ebp - 0x47c], eax
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0x47c], eax
jl 0x10056c01
mov dword [ebp - 0x484], 1
jmp 0x10056c08
and dword [ebp - 0x484], 0
mov eax, dword [ebp - 0x484]
sub eax, 0x33c017f2
cmp eax, dword [ebp - 0x80]
jle 0x10056c24
mov dword [ebp - 0x48c], 1
jmp 0x10056c2b
and dword [ebp - 0x48c], 0
cmp dword [ebp - 0x48c], 0
jle 0x10056c40
mov dword [ebp - 0x494], 1
jmp 0x10056c47
and dword [ebp - 0x494], 0
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0x494], eax
jg 0x10056c5e
mov dword [ebp - 0x49c], 1
jmp 0x10056c65
and dword [ebp - 0x49c], 0
cmp dword [ebp - 0x49c], 0x34e4
jne 0x10056c7a
mov eax, 0xd933
test eax, eax
jne 0x10056c8c
cmp dword [ebp - 0x4b4], 0
jne 0x10056c8c
and dword [ebp - 0x4a4], 0
jmp 0x10056c96
mov dword [ebp - 0x4a4], 1
cmp dword [ebp - 0x4a4], 0x7800ff6
jne 0x10056cae
mov dword [ebp - 0x4ac], 1
jmp 0x10056cb5
and dword [ebp - 0x4ac], 0
mov eax, dword [ebp - 0x4ac]
sub eax, 0x2161a56d
cmp eax, dword [ebp - 0x4b4]
jg 0x10056cd4
mov dword [ebp - 0x4bc], 1
jmp 0x10056cdb
and dword [ebp - 0x4bc], 0
mov eax, dword [ebp - 0x80]
imul eax, dword [ebp - 0x4bc]
mov dword [ebp - 0x4c4], eax
mov eax, dword [ebp - 0x4c4]
mov dword [ebp - 0x4cc], eax
push 0x3bc1
lea eax, [ebp - 0x4cc]
push eax
lea eax, [ebp - 0x990]
push eax
push 0xd12
push 1
call fcn.10051dcd
add esp, 0x14
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x990]
call fcn.1001b173
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0x18]
sub eax, dword [ebp - 0x14c]
mov dword [ebp - 0x108], eax
push 1
lea ecx, [ebp - 0x910]
call fcn.1001b10b
mov dword [ebp - 4], 0x18
mov dword [ebp - 0x174], 0
jmp 0x10056d67
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 1
jge 0x10056d89
push dword [ebp - 0x174]
lea ecx, [ebp - 0x910]
call fcn.1001b178
mov dword [eax], 0x1928c176
jmp 0x10056d5a
push 0
lea ecx, [ebp - 0x910]
call fcn.1001b178
and dword [eax], 0
jmp 0x10056dbf
push 0
lea ecx, [ebp - 0x910]
call fcn.1001b178
cmp dword [eax], 0xa
jl 0x10056e77
mov dword [ebp - 0xa60], 6
mov dword [ebp - 0xa5c], 6
mov dword [ebp - 0xa58], 6
mov dword [ebp - 0xa54], 6
mov dword [ebp - 0x70], 0x16580849
mov dword [ebp - 0x864], 8
mov dword [ebp - 0x70], 0
jmp 0x10056e1e
cmp dword [ebp - 0x70], 3
jg 0x10056e3d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x910]
call fcn.1001b173
push 1
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0x38]
push eax
push 0x65a4
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.10051ec9
add esp, 0x18
push 2
lea ecx, [ebp - 0x780]
call fcn.1001b10b
mov dword [ebp - 4], 0x19
mov dword [ebp - 0xc4], 0xfffffffd
mov dword [ebp - 0xbc], 1
mov dword [ebp - 0x514], 0xffffffff
push 0x4a16
push 0x1d05
lea eax, [ebp - 0x780]
push eax
push 1
lea eax, [ebp - 0x138]
push eax
call fcn.10051f5d
add esp, 0x14
mov dword [ebp - 0x138], 0
jmp 0x10056f15
cmp dword [ebp - 0x138], 1
jge 0x10056f31
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x7f4], eax
mov eax, dword [ebp - 0x7f4]
mov dword [ebp - 0x7fc], eax
mov eax, dword [ebp - 0x7fc]
movzx eax, byte [eax]
test eax, eax
je 0x10058878
call dword [sym.imp.KERNEL32.dll_GetOEMCP]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret