Function at 0x100095fa
Capabilities:
Get common file path
Suspend thread

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1006b7af
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x890
push esi
push edi
mov dword [ebp - 0x7c], 0xbf8f
mov dword [ebp - 0x1b0], 0xfffffffc
mov dword [ebp - 0x178], 0
mov dword [ebp - 0x5ac], 0x3ba6aed1
mov byte [ebp - 0xb1], 0
movzx eax, byte [ebp - 0xb1]
test eax, eax
je 0x10009659
push 0
call dword [sym.imp.KERNEL32.dll_SuspendThread]
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x7c], eax
jge 0x1000966d
mov dword [ebp - 0x564], 1
jmp 0x10009674
and dword [ebp - 0x564], 0
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x838], eax
xor eax, eax
cmp eax, 0xd14c
jbe 0x10009692
mov dword [ebp - 0x3c4], 1
jmp 0x10009699
and dword [ebp - 0x3c4], 0
mov eax, dword [ebp - 0x7c]
cmp eax, dword [ebp - 0x3c4]
jle 0x100096b0
mov dword [ebp - 0x4f0], 1
jmp 0x100096b7
and dword [ebp - 0x4f0], 0
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x4f0], eax
je 0x100096ce
mov dword [ebp - 0x4f8], 1
jmp 0x100096d5
and dword [ebp - 0x4f8], 0
mov eax, dword [ebp - 0x4f8]
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 0xfffc
jae 0x10009700
push 3
pop eax
test eax, eax
je 0x10009700
mov dword [ebp - 0x500], 1
jmp 0x10009707
and dword [ebp - 0x500], 0
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x500], eax
jl 0x1000971e
mov dword [ebp - 0x5a4], 1
jmp 0x10009725
and dword [ebp - 0x5a4], 0
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x828], eax
mov dword [ebp - 0x178], 0xffffffff
cmp dword [ebp - 0x178], 0
je 0x10009748
cmp dword [ebp - 0x7c], 0
cmp dword [ebp - 0x1b0], 0xf43b
jne 0x10009760
mov dword [ebp - 0x508], 1
jmp 0x10009767
and dword [ebp - 0x508], 0
mov eax, dword [ebp - 0x508]
mov dword [ebp - 0x5ac], eax
mov dword [ebp - 0x80], 0xbf8f
mov dword [ebp - 0x1ac], 0xfffffffc
mov dword [ebp - 0x180], 0
mov dword [ebp - 0x5c4], 0x3ba6aed1
mov byte [ebp - 0x75], 0
movzx eax, byte [ebp - 0x75]
test eax, eax
je 0x100097ac
push 0
call dword [sym.imp.KERNEL32.dll_SuspendThread]
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0x80], eax
jge 0x100097c0
mov dword [ebp - 0x5b4], 1
jmp 0x100097c7
and dword [ebp - 0x5b4], 0
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x790], eax
xor eax, eax
cmp eax, 0xd14c
jbe 0x100097e5
mov dword [ebp - 0x510], 1
jmp 0x100097ec
and dword [ebp - 0x510], 0
mov eax, dword [ebp - 0x80]
cmp eax, dword [ebp - 0x510]
jle 0x10009803
mov dword [ebp - 0x51c], 1
jmp 0x1000980a
and dword [ebp - 0x51c], 0
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0x51c], eax
je 0x10009821
mov dword [ebp - 0x404], 1
jmp 0x10009828
and dword [ebp - 0x404], 0
mov eax, dword [ebp - 0x404]
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 0xfffc
jae 0x10009853
push 3
pop eax
test eax, eax
je 0x10009853
mov dword [ebp - 0x1f4], 1
jmp 0x1000985a
and dword [ebp - 0x1f4], 0
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0x1f4], eax
jl 0x10009871
mov dword [ebp - 0x5bc], 1
jmp 0x10009878
and dword [ebp - 0x5bc], 0
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x7e8], eax
mov dword [ebp - 0x180], 0xffffffff
cmp dword [ebp - 0x180], 0
je 0x1000989b
cmp dword [ebp - 0x80], 0
cmp dword [ebp - 0x1ac], 0xf43b
jne 0x100098b3
mov dword [ebp - 0x410], 1
jmp 0x100098ba
and dword [ebp - 0x410], 0
mov eax, dword [ebp - 0x410]
mov dword [ebp - 0x5c4], eax
mov dword [ebp - 0x20], 1
mov dword [ebp - 0x88], 0x52f3
mov dword [ebp - 0x160], 2
mov dword [ebp - 0xd8], 0xf36a5b5c
push 4
lea ecx, [ebp - 0x72c]
call fcn.1000e5bc
and dword [ebp - 4], 0
mov dword [ebp - 0x5d4], 0xffffffff
mov dword [ebp - 0x5dc], 0xfffffff9
mov dword [ebp - 0x120], 0
jmp 0x10009929
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 4
jge 0x1000994b
push dword [ebp - 0x120]
lea ecx, [ebp - 0x72c]
call fcn.1000e623
mov dword [eax], 0x78317d23
jmp 0x1000991c
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x798], eax
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x88], eax
jne 0x1000996b
mov dword [ebp - 0x1fc], 1
jmp 0x10009972
and dword [ebp - 0x1fc], 0
mov eax, dword [ebp - 0x88]
mov ecx, dword [ebp - 0x1fc]
sub ecx, dword [ebp - 0x20]
add eax, ecx
cmp eax, dword [ebp - 0x88]
jge 0x10009997
mov dword [ebp - 0x418], 1
jmp 0x1000999e
and dword [ebp - 0x418], 0
mov eax, dword [ebp - 0x418]
mov dword [ebp - 0x160], eax
mov eax, dword [ebp - 0x160]
cmp dword [ebp - 0x20], eax
jl 0x100099c1
mov dword [ebp - 0x204], 1
jmp 0x100099c8
and dword [ebp - 0x204], 0
cmp dword [ebp - 0x204], 0xffff
je 0x100099d9
or eax, 0xffffffff
jne 0x100099e8
cmp dword [ebp - 0x20], 0
jne 0x100099e8
and dword [ebp - 0x420], 0
jmp 0x100099f2
mov dword [ebp - 0x420], 1
cmp dword [ebp - 0x420], 0x3c57643
jle 0x10009a0a
mov dword [ebp - 0x5cc], 1
jmp 0x10009a11
and dword [ebp - 0x5cc], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x82c], eax
or eax, 0xffffffff
cmp eax, 0xa6d0811
jl 0x10009a30
mov dword [ebp - 0x20c], 1
jmp 0x10009a37
and dword [ebp - 0x20c], 0
imul eax, dword [ebp - 0x20c], 0xb0ca
cmp eax, dword [ebp - 0x88]
je 0x10009a55
mov dword [ebp - 0x428], 1
jmp 0x10009a5c
and dword [ebp - 0x428], 0
cmp dword [ebp - 0x428], 9
jg 0x10009a71
mov dword [ebp - 0x214], 1
jmp 0x10009a78
and dword [ebp - 0x214], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x214], eax
jl 0x10009a95
cmp dword [ebp - 0x20], 0
je 0x10009a95
mov dword [ebp - 0x430], 1
jmp 0x10009a9c
and dword [ebp - 0x430], 0
cmp dword [ebp - 0x430], 5
ja 0x10009ab1
mov dword [ebp - 0x21c], 1
jmp 0x10009ab8
and dword [ebp - 0x21c], 0
mov eax, dword [ebp - 0x21c]
add eax, 0x20796559
mov dword [ebp - 0xd8], eax
imul eax, dword [ebp - 0xd8], 0xca0b
test eax, eax
jne 0x10009b51
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0x7a0], eax
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 0
jne 0x10009b0a
cmp dword [ebp - 0x88], 0
jne 0x10009b0a
and dword [ebp - 0x438], 0
jmp 0x10009b14
mov dword [ebp - 0x438], 1
mov eax, dword [ebp - 0xd8]
cmp eax, dword [ebp - 0x438]
je 0x10009b2e
mov dword [ebp - 0x224], 1
jmp 0x10009b35
and dword [ebp - 0x224], 0
mov eax, dword [ebp - 0x224]
sub eax, dword [ebp - 0x88]
je 0x10009b48
or eax, 0xffffffff
jne 0x10009b51
and dword [ebp - 0x440], 0
jmp 0x10009b5b
mov dword [ebp - 0x440], 1
mov eax, dword [ebp - 0x440]
mov dword [ebp - 0xd8], eax
mov eax, 0x37f20bab
cmp eax, 0xffffffff
jae 0x10009b7d
mov dword [ebp - 0x22c], 1
jmp 0x10009b84
and dword [ebp - 0x22c], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x22c], eax
jne 0x10009b9b
mov dword [ebp - 0x188], 1
jmp 0x10009ba2
and dword [ebp - 0x188], 0
push 2
lea ecx, [ebp - 0x72c]
call fcn.1000e623
mov ecx, dword [ebp - 0x188]
mov dword [eax], ecx
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x188], eax
jne 0x10009bd4
mov eax, 0x3131ec8e
test eax, eax
jne 0x10009bd4
and dword [ebp - 0x448], 0
jmp 0x10009bde
mov dword [ebp - 0x448], 1
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x448]
cmp eax, dword [ebp - 0x5d4]
jle 0x10009bfc
mov dword [ebp - 0x234], 1
jmp 0x10009c03
and dword [ebp - 0x234], 0
mov eax, dword [ebp - 0x234]
mov dword [ebp - 0x5dc], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x72c]
call fcn.1000e61e
push 1
lea ecx, [ebp - 0x750]
call fcn.1000e5bc
mov dword [ebp - 4], 1
mov dword [ebp - 0xe4], 0x3c7730f9
mov dword [ebp - 0x128], 0
jmp 0x10009c55
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 1
jge 0x10009c74
push dword [ebp - 0x128]
lea ecx, [ebp - 0x750]
call fcn.1000e623
and dword [eax], 0
jmp 0x10009c48
mov byte [ebp - 0x91], 0
movzx eax, byte [ebp - 0x91]
test eax, eax
je 0x10009d96
mov dword [ebp - 0x5e4], 0x171d
cmp dword [ebp - 0x5e4], 0x577
jge 0x10009d86
mov byte [ebp - 0x10c], 0x52
mov byte [ebp - 0x10b], 0x4f
mov byte [ebp - 0x10a], 0x59
mov byte [ebp - 0x109], 0x47
mov byte [ebp - 0x108], 0x42
mov byte [ebp - 0x107], 0x49
mov byte [ebp - 0x106], 0x56
and dword [ebp - 0x450], 0
lea eax, [ebp - 0x450]
push eax
push 0x10007758
call fcn.100528eb
pop ecx
pop ecx
and dword [ebp - 0x148], 0
jmp 0x10009d05
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 3
jge 0x10009d2b
mov eax, dword [ebp - 0x148]
movsx eax, byte [ebp + eax - 0x10c]
push eax
push 0x1000779c
call fcn.10052b06
pop ecx
pop ecx
jmp 0x10009cf8
mov dword [ebp - 0x130], 3
jmp 0x10009d44
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
mov eax, dword [ebp - 0x130]
cmp eax, dword [ebp - 0x450]
jge 0x10009d7b
mov eax, dword [ebp - 0x130]
and eax, 0x80000003
jns 0x10009d64
dec eax
or eax, 0xfffffffc
inc eax
movsx eax, byte [ebp + eax - 0x109]
push eax
push 0x1000779c
call fcn.10052b06
pop ecx
pop ecx
jmp 0x10009d37
push 0x100076c5
call fcn.10052cc6
pop ecx
push 0x1f60
push 0x1324
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
mov dword [ebp - 0xe4], 0
jmp 0x10009daf
mov eax, dword [ebp - 0xe4]
dec eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0
jl 0x10009dd2
push dword [ebp - 0xe4]
lea ecx, [ebp - 0x750]
call fcn.1000e623
cmp dword [eax], 0
je 0x10009dd0
jmp 0x10009dd2
jmp 0x10009da2
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x750]
call fcn.1000e61e
mov dword [ebp - 0x28], 1
mov dword [ebp - 0x90], 0x52f3
mov dword [ebp - 0x138], 2
mov dword [ebp - 0xf4], 0xf36a5b5c
push 4
lea ecx, [ebp - 0x768]
call fcn.1000e5bc
mov dword [ebp - 4], 2
mov dword [ebp - 0x638], 0xffffffff
mov dword [ebp - 0x640], 0xfffffff9
mov dword [ebp - 0x158], 0
jmp 0x10009e47
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 4
jge 0x10009e69
push dword [ebp - 0x158]
lea ecx, [ebp - 0x768]
call fcn.1000e623
mov dword [eax], 0x78317d23
jmp 0x10009e3a
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x7f8], eax
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x90], eax
jne 0x10009e89
mov dword [ebp - 0x23c], 1
jmp 0x10009e90
and dword [ebp - 0x23c], 0
mov eax, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x23c]
sub ecx, dword [ebp - 0x28]
add eax, ecx
cmp eax, dword [ebp - 0x90]
jge 0x10009eb5
mov dword [ebp - 0x458], 1
jmp 0x10009ebc
and dword [ebp - 0x458], 0
mov eax, dword [ebp - 0x458]
mov dword [ebp - 0x138], eax
mov eax, dword [ebp - 0x138]
cmp dword [ebp - 0x28], eax
jl 0x10009edf
mov dword [ebp - 0x244], 1
jmp 0x10009ee6
and dword [ebp - 0x244], 0
cmp dword [ebp - 0x244], 0xffff
je 0x10009ef7
or eax, 0xffffffff
jne 0x10009f06
cmp dword [ebp - 0x28], 0
jne 0x10009f06
and dword [ebp - 0x460], 0
jmp 0x10009f10
mov dword [ebp - 0x460], 1
cmp dword [ebp - 0x460], 0x3c57643
jle 0x10009f28
mov dword [ebp - 0x630], 1
jmp 0x10009f2f
and dword [ebp - 0x630], 0
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x7a8], eax
or eax, 0xffffffff
cmp eax, 0xa6d0811
jl 0x10009f4e
mov dword [ebp - 0x24c], 1
jmp 0x10009f55
and dword [ebp - 0x24c], 0
imul eax, dword [ebp - 0x24c], 0xb0ca
cmp eax, dword [ebp - 0x90]
je 0x10009f73
mov dword [ebp - 0x468], 1
jmp 0x10009f7a
and dword [ebp - 0x468], 0
cmp dword [ebp - 0x468], 9
jg 0x10009f8f
mov dword [ebp - 0x254], 1
jmp 0x10009f96
and dword [ebp - 0x254], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x254], eax
jl 0x10009fb3
cmp dword [ebp - 0x28], 0
je 0x10009fb3
mov dword [ebp - 0x470], 1
jmp 0x10009fba
and dword [ebp - 0x470], 0
cmp dword [ebp - 0x470], 5
ja 0x10009fcf
mov dword [ebp - 0x25c], 1
jmp 0x10009fd6
and dword [ebp - 0x25c], 0
mov eax, dword [ebp - 0x25c]
add eax, 0x20796559
mov dword [ebp - 0xf4], eax
imul eax, dword [ebp - 0xf4], 0xca0b
test eax, eax
jne 0x1000a06f
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0x834], eax
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0
jne 0x1000a028
cmp dword [ebp - 0x90], 0
jne 0x1000a028
and dword [ebp - 0x478], 0
jmp 0x1000a032
mov dword [ebp - 0x478], 1
mov eax, dword [ebp - 0xf4]
cmp eax, dword [ebp - 0x478]
je 0x1000a04c
mov dword [ebp - 0x264], 1
jmp 0x1000a053
and dword [ebp - 0x264], 0
mov eax, dword [ebp - 0x264]
sub eax, dword [ebp - 0x90]
je 0x1000a066
or eax, 0xffffffff
jne 0x1000a06f
and dword [ebp - 0x480], 0
jmp 0x1000a079
mov dword [ebp - 0x480], 1
mov eax, dword [ebp - 0x480]
mov dword [ebp - 0xf4], eax
mov eax, 0x37f20bab
cmp eax, 0xffffffff
jae 0x1000a09b
mov dword [ebp - 0x26c], 1
jmp 0x1000a0a2
and dword [ebp - 0x26c], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x26c], eax
jne 0x1000a0b9
mov dword [ebp - 0x1c0], 1
jmp 0x1000a0c0
and dword [ebp - 0x1c0], 0
push 2
lea ecx, [ebp - 0x768]
call fcn.1000e623
mov ecx, dword [ebp - 0x1c0]
mov dword [eax], ecx
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x1c0], eax
jne 0x1000a0f2
mov eax, 0x3131ec8e
test eax, eax
jne 0x1000a0f2
and dword [ebp - 0x488], 0
jmp 0x1000a0fc
mov dword [ebp - 0x488], 1
mov eax, dword [ebp - 0x28]
imul eax, dword [ebp - 0x488]
cmp eax, dword [ebp - 0x638]
jle 0x1000a11a
mov dword [ebp - 0x274], 1
jmp 0x1000a121
and dword [ebp - 0x274], 0
mov eax, dword [ebp - 0x274]
mov dword [ebp - 0x640], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x768]
call fcn.1000e61e
movzx eax, byte [0x11087364]
test eax, eax
je 0x1000a15a
mov esi, 0x10071880
mov edi, dword [ebp + 8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 8]
jmp 0x1000d28b
mov dword [ebp - 0x38], 0x13dd33a4
mov dword [ebp - 0x648], 0xfffffffd
mov dword [ebp - 0x70], 3
mov dword [ebp - 0x38], 0xffffffeb
jmp 0x1000a182
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0xffffffe9
je 0x1000a585
mov dword [ebp - 0x100], 0
mov dword [ebp - 0x98], 1
mov dword [ebp - 0x4b8], 0x5c2f
mov dword [ebp - 0xec], 0x586fa66f
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x7b0], eax
cmp dword [ebp - 0x648], 0xa70051ef
jb 0x1000a1d8
mov dword [ebp - 0x490], 1
jmp 0x1000a1df
and dword [ebp - 0x490], 0
mov eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x490]
jl 0x1000a1f8
xor eax, eax
inc eax
jne 0x1000a1f8
and dword [ebp - 0x27c], 0
jmp 0x1000a202
mov dword [ebp - 0x27c], 1
mov eax, dword [ebp - 0x27c]
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
je 0x1000a223
cmp dword [ebp - 0x98], 0
jne 0x1000a223
and dword [ebp - 0x498], 0
jmp 0x1000a22d
mov dword [ebp - 0x498], 1
cmp dword [ebp - 0x498], 0xa0a5
jge 0x1000a245
mov dword [ebp - 0x284], 1
jmp 0x1000a24c
and dword [ebp - 0x284], 0
cmp dword [ebp - 0x284], 0xffff
jae 0x1000a264
mov dword [ebp - 0x4a0], 1
jmp 0x1000a26b
and dword [ebp - 0x4a0], 0
mov eax, dword [ebp - 0x98]
imul eax, dword [ebp - 0x4a0]
cmp dword [ebp - 0x38], eax
je 0x1000a289
mov dword [ebp - 0x28c], 1
jmp 0x1000a290
and dword [ebp - 0x28c], 0
mov eax, dword [ebp - 0x28c]
sub eax, dword [ebp - 0x38]
jne 0x1000a2a7
mov dword [ebp - 0x4a8], 1
jmp 0x1000a2ae
and dword [ebp - 0x4a8], 0
mov eax, dword [ebp - 0x100]
cmp dword [ebp - 0x4a8], eax
jge 0x1000a2c8
mov dword [ebp - 0x294], 1
jmp 0x1000a2cf
and dword [ebp - 0x294], 0
mov eax, dword [ebp - 0x100]
cmp dword [ebp - 0x294], eax
jl 0x1000a2e9
mov dword [ebp - 0x4b0], 1
jmp 0x1000a2f0
and dword [ebp - 0x4b0], 0
imul eax, dword [ebp - 0x4b0], 0xfffffffc
cmp eax, dword [ebp - 0x4b8]
jge 0x1000a30e
cmp dword [ebp - 0x70], 0
jne 0x1000a30e
and dword [ebp - 0x29c], 0
jmp 0x1000a318
mov dword [ebp - 0x29c], 1
mov eax, dword [ebp - 0x29c]
mov dword [ebp - 0xec], eax
mov eax, dword [ebp - 0x4b8]
cmp dword [ebp - 0xec], eax
jge 0x1000a33e
mov dword [ebp - 0x59c], 1
jmp 0x1000a345
and dword [ebp - 0x59c], 0
cmp dword [ebp - 0xec], 0
je 0x1000a35e
cmp dword [ebp - 0x70], 0
je 0x1000a359
jmp 0x1000a585
jmp 0x1000a580
mov dword [ebp - 0x4c0], 0x132c2674
mov dword [ebp - 0x67c], 0x58c0f86f
mov dword [ebp - 0x150], 0
jmp 0x1000a38b
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 2
jge 0x1000a3a7
mov eax, dword [ebp - 0x150]
mov dword [ebp + eax*4 - 0x1d0], 1
jmp 0x1000a37e
mov dword [ebp - 0x98], 0
jmp 0x1000a3c0
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 2
jge 0x1000a3dc
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0x1d0], 0xfffffff9
jmp 0x1000a3b3
cmp dword [ebp - 0x70], 0
jne 0x1000a3fb
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1d0], 0
jne 0x1000a3fb
and dword [ebp - 0x2b4], 0
jmp 0x1000a405
mov dword [ebp - 0x2b4], 1
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1d0], 0
jge 0x1000a421
mov dword [ebp - 0x2a4], 1
jmp 0x1000a428
and dword [ebp - 0x2a4], 0
mov eax, dword [ebp - 0x38]
add eax, dword [ebp - 0x2a4]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x1d0]
jge 0x1000a44c
mov dword [ebp - 0x570], 1
jmp 0x1000a453
and dword [ebp - 0x570], 0
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x7c0], eax
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x7b8], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x7c8], eax
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x840], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1d0]
mov dword [ebp - 0x4c0], eax
mov eax, dword [ebp - 0x4c0]
imul eax, dword [ebp - 0xec]
cmp eax, 0xe0855bbb
jae 0x1000a4b0
mov dword [ebp - 0x2ac], 1
jmp 0x1000a4b7
and dword [ebp - 0x2ac], 0
mov eax, dword [ebp - 0x2ac]
sub eax, 0x121a5e52
cmp dword [ebp - 0x70], eax
jle 0x1000a4d3
mov dword [ebp - 0x4c8], 1
jmp 0x1000a4da
and dword [ebp - 0x4c8], 0
mov eax, dword [ebp - 0x4c8]
sub eax, dword [ebp - 0x70]
cmp dword [ebp - 0x2b4], eax
jl 0x1000a4f7
mov dword [ebp - 0x4d0], 1
jmp 0x1000a4fe
and dword [ebp - 0x4d0], 0
cmp dword [ebp - 0x4d0], 1
jge 0x1000a517
xor eax, eax
je 0x1000a517
mov dword [ebp - 0x2bc], 1
jmp 0x1000a51e
and dword [ebp - 0x2bc], 0
mov eax, dword [ebp - 0x100]
cmp dword [ebp - 0x2bc], eax
jge 0x1000a53e
mov eax, 0x28b80bbe
test eax, eax
jne 0x1000a53e
and dword [ebp - 0x4d8], 0
jmp 0x1000a548
mov dword [ebp - 0x4d8], 1
mov eax, dword [ebp - 0x38]
imul eax, dword [ebp - 0x4d8]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x1d0]
jg 0x1000a56d
mov dword [ebp - 0x2c4], 1
jmp 0x1000a574
and dword [ebp - 0x2c4], 0
mov eax, dword [ebp - 0x2c4]
mov dword [ebp - 0x67c], eax
jmp 0x1000a17b
push 1
lea ecx, [ebp - 0x780]
call fcn.1000e5bc
mov dword [ebp - 4], 3
mov dword [ebp - 0xdc], 0x3c7730f9
mov dword [ebp - 0x118], 0
jmp 0x1000a5bc
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 1
jge 0x1000a5db
push dword [ebp - 0x118]
lea ecx, [ebp - 0x780]
call fcn.1000e623
and dword [eax], 0
jmp 0x1000a5af
mov byte [ebp - 0xb9], 0
movzx eax, byte [ebp - 0xb9]
test eax, eax
je 0x1000a5fd
push 0x1f60
push 0x1324
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
mov dword [ebp - 0xdc], 0
jmp 0x1000a616
mov eax, dword [ebp - 0xdc]
dec eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0
jl 0x1000a639
push dword [ebp - 0xdc]
lea ecx, [ebp - 0x780]
call fcn.1000e623
cmp dword [eax], 0
je 0x1000a637
jmp 0x1000a639
jmp 0x1000a609
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x780]
call fcn.1000e61e
push 1
lea ecx, [ebp - 0x560]
call fcn.1000e5bc
mov dword [ebp - 4], 4
mov dword [ebp - 0x30], 0xd8143836
mov dword [ebp - 0x6e0], 0x56cd
mov dword [ebp - 0x6dc], 0x56cd
mov dword [ebp - 0x6d8], 0x56cd
mov dword [ebp - 0x6d4], 0x56cd
lea ecx, [ebp - 0x165]
call fcn.1000e632
push eax
lea eax, [ebp - 0x6d0]
push eax
lea eax, [ebp - 0x6e0]
push eax
lea ecx, [ebp - 0x874]
call fcn.1000e635
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x7f4]
call fcn.1000e5f8
mov byte [ebp - 4], 5
mov dword [ebp - 0x134], 1
mov dword [ebp - 0xe0], 1
mov dword [ebp - 0x5c], 0
jmp 0x1000a6e8
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 2
jge 0x1000a6fe
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x1e8], 0xeee2
jmp 0x1000a6e1
mov dword [ebp - 0x578], 0x1c82
cmp dword [ebp - 0x578], 0x63d
jge 0x1000a83c
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x11c]
push eax
push 0x100077a0
call fcn.100528eb
add esp, 0xc
and dword [ebp - 0xa0], 0
lea eax, [ebp - 0xa0]
push eax
push 0x1000775c
call fcn.100528eb
pop ecx
pop ecx
and dword [ebp - 0x2c], 0
mov eax, dword [ebp - 0xa0]
cdq
push 6
pop ecx
idiv ecx
test edx, edx
jne 0x1000a775
mov eax, dword [ebp - 0x11c]
sub eax, dword [ebp - 0x124]
mov dword [ebp - 0x2c], eax
jmp 0x1000a809
mov eax, dword [ebp - 0xa0]
cdq
push 6
pop ecx
idiv ecx
cmp edx, 1
jne 0x1000a791
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x2c], eax
jmp 0x1000a809
mov eax, dword [ebp - 0xa0]
cdq
push 6
pop ecx
idiv ecx
cmp edx, 2
jne 0x1000a7ad
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0x2c], eax
jmp 0x1000a809
mov eax, dword [ebp - 0xa0]
cdq
push 6
pop ecx
idiv ecx
cmp edx, 3
jne 0x1000a7cf
mov eax, dword [ebp - 0x124]
sub eax, dword [ebp - 0x11c]
mov dword [ebp - 0x2c], eax
jmp 0x1000a809
mov eax, dword [ebp - 0xa0]
cdq
push 6
pop ecx
idiv ecx
cmp edx, 4
jne 0x1000a7ed
mov eax, dword [ebp - 0x11c]
neg eax
mov dword [ebp - 0x2c], eax
jmp 0x1000a809
mov eax, dword [ebp - 0xa0]
cdq
push 6
pop ecx
idiv ecx
cmp edx, 5
jne 0x1000a809
mov eax, dword [ebp - 0x124]
neg eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x7d0], 0xbf
cmp dword [ebp - 0x2c], 0
jge 0x1000a824
mov eax, dword [ebp - 0x2c]
add eax, 0x17e
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
cdq
mov ecx, 0xbf
idiv ecx
push edx
push 0x100077ac
call fcn.10052b06
pop ecx
pop ecx
mov dword [ebp - 0x5c], 0
jmp 0x1000a84c
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 1
jge 0x1000a868
push dword [ebp - 0x5c]
lea ecx, [ebp - 0x560]
call fcn.1000e623
mov dword [eax], 0x1d26
jmp 0x1000a845
mov dword [ebp - 0x614], 0x13c4
cmp dword [ebp - 0x614], 0x1192
jge 0x1000a89c
mov dword [ebp - 0x580], 4
push 0x42
push 0x43
push 0x41
push dword [ebp - 0x580]
call fcn.10009535
add esp, 0x10
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1e8]
mov dword [ebp - 0x818], eax
push 0
lea ecx, [ebp - 0x560]
call fcn.1000e623
cmp dword [eax], 0
jne 0x1000a949
push 0
lea ecx, [ebp - 0x560]
call fcn.1000e623
mov esi, eax
push 0
lea ecx, [ebp - 0x560]
call fcn.1000e623
mov ecx, dword [esi]
cmp ecx, dword [eax]
je 0x1000a8f3
mov dword [ebp - 0x4e0], 1
jmp 0x1000a8fa
and dword [ebp - 0x4e0], 0
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x1e8]
add ecx, dword [ebp - 0x4e0]
cmp dword [ebp + eax - 0x1e8], ecx
je 0x1000a928
mov dword [ebp - 0x644], 1
jmp 0x1000a92f
and dword [ebp - 0x644], 0
mov dword [ebp - 0x30], 0xfffffff6
mov eax, dword [ebp - 0x30]
neg eax
cmp eax, 0xfffffffd
jl 0x1000a949
and dword [ebp - 0x588], 0
jmp 0x1000a953
mov dword [ebp - 0x588], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1e8]
mov dword [ebp - 0x7d8], eax
push 0
lea ecx, [ebp - 0x560]
call fcn.1000e623
mov eax, 0xde57413
dec eax
cmp eax, 0xfffffff6
jl 0x1000a98a
mov dword [ebp - 0x4e8], 1
jmp 0x1000a991
and dword [ebp - 0x4e8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1e8]
cmp dword [ebp - 0x4e8], eax
je 0x1000a9b2
mov dword [ebp - 0x2d0], 1
jmp 0x1000a9b9
and dword [ebp - 0x2d0], 0
push 0
lea ecx, [ebp - 0x7f4]
call fcn.1000e623
mov ecx, dword [ebp - 0x2d0]
cmp ecx, dword [eax]
jle 0x1000a9e3
push 0xfffffffffffffffd
pop eax
test eax, eax
je 0x1000a9e3
mov dword [ebp - 0x2d4], 1
jmp 0x1000a9ea
and dword [ebp - 0x2d4], 0
mov eax, dword [ebp - 0x2d4]
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0
je 0x1000ab40
mov dword [ebp - 0x40c], 0x2f37
mov dword [ebp - 0x190], 1
push 4
lea ecx, [ebp - 0x714]
call fcn.1000e5bc
mov byte [ebp - 4], 6
mov dword [ebp - 0x12c], 0
jmp 0x1000aa41
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 4
jge 0x1000aa63
push dword [ebp - 0x12c]
lea ecx, [ebp - 0x714]
call fcn.1000e623
mov dword [eax], 0xeeda781b
jmp 0x1000aa34
mov eax, dword [ebp - 0x190]
cmp dword [ebp - 0xe0], eax
jle 0x1000aa7d
mov dword [ebp - 0x4ec], 1
jmp 0x1000aa84
and dword [ebp - 0x4ec], 0
cmp dword [ebp - 0x4ec], 0x6717b38e
jge 0x1000aa9c
mov dword [ebp - 0x2dc], 1
jmp 0x1000aaa3
and dword [ebp - 0x2dc], 0
mov eax, dword [ebp - 0x2dc]
mov dword [ebp - 0x134], eax
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x134], eax
jl 0x1000aac6
mov dword [ebp - 0x2e4], 1
jmp 0x1000aacd
and dword [ebp - 0x2e4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1e8]
sub eax, 0x846b
mov dword [ebp - 0x40c], eax
mov eax, dword [ebp - 0x40c]
add eax, 0x336
cmp eax, dword [ebp - 0x2e4]
jg 0x1000ab04
mov dword [ebp - 0x4a4], 1
jmp 0x1000ab0b
and dword [ebp - 0x4a4], 0
mov eax, dword [ebp - 0x4a4]
mov dword [ebp - 0x190], eax
mov esi, dword [ebp - 0x190]
push 0
lea ecx, [ebp - 0x714]
call fcn.1000e623
mov dword [eax], esi
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x714]
call fcn.1000e61e
jmp 0x1000ad61
mov dword [ebp - 0x414], 0
mov dword [ebp - 0x13c], 0
jmp 0x1000ab63
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 2
jge 0x1000ab7f
mov eax, dword [ebp - 0x13c]
mov dword [ebp + eax*4 - 0x6b0], 0xffffffff
jmp 0x1000ab56
mov dword [ebp - 0x61c], 0x2056
cmp dword [ebp - 0x61c], 0xdf9
jge 0x1000acfe
lea eax, [ebp - 0x6a8]
push eax
lea eax, [ebp - 0x540]
push eax
push 0x100077b4
call fcn.100528eb
add esp, 0xc
lea eax, [ebp - 0x1c8]
push eax
push 0x1000775c
call fcn.100528eb
pop ecx
pop ecx
and dword [ebp - 0x198], 0
mov eax, dword [ebp - 0x1c8]
mov dword [ebp - 0x590], eax
mov eax, dword [ebp - 0x1c8]
dec eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x590], 0
je 0x1000acec
lea eax, [ebp - 0x538]
push eax
lea eax, [ebp - 0x548]
push eax
lea eax, [ebp - 0x530]
push eax
push 0x100077bc
call fcn.100528eb
add esp, 0x10
movsd xmm0, qword [ebp - 0x530]
mulsd xmm0, qword [ebp - 0x530]
movsd xmm1, qword [ebp - 0x548]
mulsd xmm1, qword [ebp - 0x548]
addsd xmm0, xmm1
movsd xmm1, qword [ebp - 0x540]
subsd xmm1, qword [ebp - 0x6a8]
addsd xmm1, qword [ebp - 0x538]
movsd xmm2, qword [ebp - 0x540]
subsd xmm2, qword [ebp - 0x6a8]
addsd xmm2, qword [ebp - 0x538]
mulsd xmm1, xmm2
comisd xmm0, xmm1
jb 0x1000acce
movsd xmm0, qword [ebp - 0x530]
mulsd xmm0, qword [ebp - 0x530]
movsd xmm1, qword [ebp - 0x548]
mulsd xmm1, qword [ebp - 0x548]
addsd xmm0, xmm1
movsd xmm1, qword [ebp - 0x540]
subsd xmm1, qword [ebp - 0x538]
movsd xmm2, qword [ebp - 0x540]
subsd xmm2, qword [ebp - 0x538]
mulsd xmm1, xmm2
comisd xmm1, xmm0
jb 0x1000acce
mov dword [ebp - 0x2ec], 1
jmp 0x1000acd5
and dword [ebp - 0x2ec], 0
mov eax, dword [ebp - 0x198]
add eax, dword [ebp - 0x2ec]
mov dword [ebp - 0x198], eax
jmp 0x1000abce
push dword [ebp - 0x198]
push 0x100077ac
call fcn.10052b06
pop ecx
pop ecx
mov dword [ebp - 0xe0], 0x14
jmp 0x1000ad17
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0x23
jg 0x1000ad51
mov dword [ebp - 0x66c], 0xc553
mov eax, dword [ebp - 0x66c]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x414], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x414]
mov dword [ebp + eax - 0x6b0], ecx
jmp 0x1000ad0a
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x30]
mov dword [ebp + eax - 0x6b0], ecx
mov dword [ebp - 0x30], 0
jmp 0x1000ad71
mov eax, dword [ebp - 0x30]
dec eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0xffffffe9
jle 0x1000ae9d
mov dword [ebp - 0x64c], 0x9e520c3d
mov byte [ebp - 0xc9], 0
mov dword [ebp - 0x598], 0x254f
cmp dword [ebp - 0x598], 0xe1c
jge 0x1000ae75
lea eax, [ebp - 0x1c4]
push eax
push 0x1000775c
call fcn.100528eb
pop ecx
pop ecx
mov eax, dword [ebp - 0x1c4]
mov dword [ebp - 0x624], eax
mov eax, dword [ebp - 0x1c4]
dec eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x624], 0
je 0x1000ae75
lea eax, [ebp - 0x16c]
push eax
lea eax, [ebp - 0x5a0]
push eax
lea eax, [ebp - 0x514]
push eax
push 0x100077c8
call fcn.100528eb
add esp, 0x10
mov eax, dword [ebp - 0x16c]
cdq
idiv dword [ebp - 0x514]
mov eax, dword [ebp - 0x16c]
sub eax, edx
add eax, dword [ebp - 0x5a0]
mov dword [ebp - 0x110], eax
mov eax, dword [ebp - 0x110]
cmp eax, dword [ebp - 0x16c]
jle 0x1000ae3c
mov dword [ebp - 0x2f4], 1
jmp 0x1000ae43
and dword [ebp - 0x2f4], 0
mov eax, dword [ebp - 0x2f4]
imul eax, dword [ebp - 0x514]
mov ecx, dword [ebp - 0x110]
sub ecx, eax
mov dword [ebp - 0x110], ecx
push dword [ebp - 0x110]
push 0x100077ac
call fcn.10052b06
pop ecx
pop ecx
jmp 0x1000adb9
movzx eax, byte [ebp - 0xc9]
test eax, eax
je 0x1000ae8d
push 0
push 0x1f1
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
cmp dword [ebp - 0x64c], 0
je 0x1000ae98
jmp 0x1000ae9d
jmp 0x1000ad6a
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x7f4]
call fcn.1000e61e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x560]
call fcn.1000e61e
mov dword [ebp - 0x784], 0x10071880
push 3
lea ecx, [ebp - 0x1bc]
call fcn.1000e5bc
mov dword [ebp - 4], 7
mov dword [ebp - 0xe8], 0x66e58d02
mov dword [ebp - 0x5b0], 0xd2a6f9a4
mov dword [ebp - 0x40], 0
jmp 0x1000aefd
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 3
jge 0x1000af19
push dword [ebp - 0x40]
lea ecx, [ebp - 0x1bc]
call fcn.1000e623
mov dword [eax], 0xf40fc027
jmp 0x1000aef6
mov dword [ebp - 0x40], 0
jmp 0x1000af29
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 1
jge 0x1000af3f
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x62c], 0x69919c44
jmp 0x1000af22
push 1
lea ecx, [ebp - 0x1bc]
call fcn.1000e623
mov eax, dword [eax]
mov dword [ebp - 0xe8], eax
imul eax, dword [ebp - 0xe8], 3
test eax, eax
jne 0x1000b082
push 1
lea ecx, [ebp - 0x1bc]
call fcn.1000e623
cmp dword [eax], 0
je 0x1000b082
push 0
lea ecx, [ebp - 0x1bc]
call fcn.1000e623
mov esi, eax
push 1
lea ecx, [ebp - 0x1bc]
call fcn.1000e623
mov ecx, dword [esi]
cmp ecx, dword [eax]
jle 0x1000afa7
mov dword [ebp - 0x2fc], 1
jmp 0x1000afae
and dword [ebp - 0x2fc], 0
cmp dword [ebp - 0x2fc], 0xf5ebec5
jg 0x1000afc6
mov dword [ebp - 0x41c], 1
jmp 0x1000afcd
and dword [ebp - 0x41c], 0
push 1
lea ecx, [ebp - 0x1bc]
call fcn.1000e623
mov ecx, dword [ebp - 0x41c]
add ecx, dword [eax]
jns 0x1000aff9
cmp dword [ebp - 0xe8], 0
je 0x1000aff9
mov dword [ebp - 0x304], 1
jmp 0x1000b000
and dword [ebp - 0x304], 0
push 1
lea ecx, [ebp - 0x1bc]
call fcn.1000e623
mov eax, dword [eax]
cmp eax, dword [ebp - 0x304]
jle 0x1000b023
mov dword [ebp - 0x4ac], 1
jmp 0x1000b02a
and dword [ebp - 0x4ac], 0
mov eax, dword [ebp - 0x4ac]
sub eax, dword [ebp - 0xe8]
jne 0x1000b044
mov dword [ebp - 0x30c], 1
jmp 0x1000b04b
and dword [ebp - 0x30c], 0
cmp dword [ebp - 0x30c], 8
jg 0x1000b069
cmp dword [ebp - 0xe8], 0
je 0x1000b069
mov dword [ebp - 0x424], 1
jmp 0x1000b070
and dword [ebp - 0x424], 0
cmp dword [ebp - 0x424], 0
je 0x1000b082
and dword [ebp - 0x5a8], 0
jmp 0x1000b08c
mov dword [ebp - 0x5a8], 1
push 1
lea ecx, [ebp - 0x1bc]
call fcn.1000e623
push 4
pop eax
imul eax, eax, 0
lea eax, [ebp + eax - 0x62c]
mov dword [ebp - 0x314], eax
push 2
lea ecx, [ebp - 0x1bc]
call fcn.1000e623
mov ecx, dword [ebp - 0x314]
mov eax, dword [eax]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x1bc]
call fcn.1000e623
mov ecx, dword [ebp - 0x314]
mov ecx, dword [ecx]
cmp ecx, dword [eax]
jge 0x1000b0e8
mov dword [ebp - 0x4f4], 1
jmp 0x1000b0ef
and dword [ebp - 0x4f4], 0
mov eax, dword [ebp - 0x4f4]
mov dword [ebp - 0x5b0], eax
mov byte [ebp - 0xa9], 0
movzx eax, byte [ebp - 0xa9]
test eax, eax
je 0x1000b118
push 0x1cea
call dword [sym.imp.USER32.dll_IsWindow]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1bc]
call fcn.1000e61e
mov dword [ebp - 0x7e0], 0x10071884
push 3
lea ecx, [ebp - 0x804]
call fcn.1000e5bc
mov dword [ebp - 4], 8
mov dword [ebp - 0x788], 0xe6bacd79
mov dword [ebp - 0x708], 0xfffffff7
mov dword [ebp - 0x704], 0xfffffff7
mov dword [ebp - 0x700], 0xfffffff7
mov dword [ebp - 0x6fc], 0xfffffff7
lea ecx, [ebp - 0x19a]
call fcn.1000e632
push eax
lea eax, [ebp - 0x6f8]
push eax
lea eax, [ebp - 0x708]
push eax
lea ecx, [ebp - 0x864]
call fcn.1000e635
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x850]
call fcn.1000e5f8
mov byte [ebp - 4], 9
push 1
lea ecx, [ebp - 0x75c]
call fcn.1000e5bc
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x58], 0
jmp 0x1000b1d1
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 3
jge 0x1000b1ed
push dword [ebp - 0x58]
lea ecx, [ebp - 0x804]
call fcn.1000e623
mov dword [eax], 0x6579
jmp 0x1000b1ca
mov dword [ebp - 0x58], 0
jmp 0x1000b1fd
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 1
jge 0x1000b219
push dword [ebp - 0x58]
lea ecx, [ebp - 0x75c]
call fcn.1000e623
mov dword [eax], 0x13f1
jmp 0x1000b1f6
push 0
lea ecx, [ebp - 0x75c]
call fcn.1000e623
mov dword [ebp - 0x31c], eax
mov eax, dword [ebp - 0x31c]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x31c]
mov dword [ecx], eax
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x75c]
call fcn.1000e61e
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x850]
call fcn.1000e61e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x804]
call fcn.1000e61e
mov dword [ebp - 0x34], 0x13dd33a4
mov dword [ebp - 0x5ec], 0xfffffffd
mov dword [ebp - 0x6c], 3
mov dword [ebp - 0x34], 0xffffffeb
jmp 0x1000b292
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0xffffffe9
je 0x1000b695
mov dword [ebp - 0xfc], 0
mov dword [ebp - 0xa8], 1
mov dword [ebp - 0x4bc], 0x5c2f
mov dword [ebp - 0xf0], 0x586fa66f
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x78c], eax
cmp dword [ebp - 0x5ec], 0xa70051ef
jb 0x1000b2e8
mov dword [ebp - 0x42c], 1
jmp 0x1000b2ef
and dword [ebp - 0x42c], 0
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x42c]
jl 0x1000b308
xor eax, eax
inc eax
jne 0x1000b308
and dword [ebp - 0x324], 0
jmp 0x1000b312
mov dword [ebp - 0x324], 1
mov eax, dword [ebp - 0x324]
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
je 0x1000b333
cmp dword [ebp - 0xa8], 0
jne 0x1000b333
and dword [ebp - 0x4b4], 0
jmp 0x1000b33d
mov dword [ebp - 0x4b4], 1
cmp dword [ebp - 0x4b4], 0xa0a5
jge 0x1000b355
mov dword [ebp - 0x32c], 1
jmp 0x1000b35c
and dword [ebp - 0x32c], 0
cmp dword [ebp - 0x32c], 0xffff
jae 0x1000b374
mov dword [ebp - 0x434], 1
jmp 0x1000b37b
and dword [ebp - 0x434], 0
mov eax, dword [ebp - 0xa8]
imul eax, dword [ebp - 0x434]
cmp dword [ebp - 0x34], eax
je 0x1000b399
mov dword [ebp - 0x334], 1
jmp 0x1000b3a0
and dword [ebp - 0x334], 0
mov eax, dword [ebp - 0x334]
sub eax, dword [ebp - 0x34]
jne 0x1000b3b7
mov dword [ebp - 0x520], 1
jmp 0x1000b3be
and dword [ebp - 0x520], 0
mov eax, dword [ebp - 0xfc]
cmp dword [ebp - 0x520], eax
jge 0x1000b3d8
mov dword [ebp - 0x33c], 1
jmp 0x1000b3df
and dword [ebp - 0x33c], 0
mov eax, dword [ebp - 0xfc]
cmp dword [ebp - 0x33c], eax
jl 0x1000b3f9
mov dword [ebp - 0x43c], 1
jmp 0x1000b400
and dword [ebp - 0x43c], 0
imul eax, dword [ebp - 0x43c], 0xfffffffc
cmp eax, dword [ebp - 0x4bc]
jge 0x1000b41e
cmp dword [ebp - 0x6c], 0
jne 0x1000b41e
and dword [ebp - 0x344], 0
jmp 0x1000b428
mov dword [ebp - 0x344], 1
mov eax, dword [ebp - 0x344]
mov dword [ebp - 0xf0], eax
mov eax, dword [ebp - 0x4bc]
cmp dword [ebp - 0xf0], eax
jge 0x1000b44e
mov dword [ebp - 0x5b8], 1
jmp 0x1000b455
and dword [ebp - 0x5b8], 0
cmp dword [ebp - 0xf0], 0
je 0x1000b46e
cmp dword [ebp - 0x6c], 0
je 0x1000b469
jmp 0x1000b695
jmp 0x1000b690
mov dword [ebp - 0x444], 0x132c2674
mov dword [ebp - 0x5c0], 0x58c0f86f
mov dword [ebp - 0x144], 0
jmp 0x1000b49b
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 2
jge 0x1000b4b7
mov eax, dword [ebp - 0x144]
mov dword [ebp + eax*4 - 0x1e0], 1
jmp 0x1000b48e
mov dword [ebp - 0xa8], 0
jmp 0x1000b4d0
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 2
jge 0x1000b4ec
mov eax, dword [ebp - 0xa8]
mov dword [ebp + eax*4 - 0x1e0], 0xfffffff9
jmp 0x1000b4c3
cmp dword [ebp - 0x6c], 0
jne 0x1000b50b
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1e0], 0
jne 0x1000b50b
and dword [ebp - 0x35c], 0
jmp 0x1000b515
mov dword [ebp - 0x35c], 1
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1e0], 0
jge 0x1000b531
mov dword [ebp - 0x34c], 1
jmp 0x1000b538
and dword [ebp - 0x34c], 0
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x34c]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x1e0]
jge 0x1000b55c
mov dword [ebp - 0x5f0], 1
jmp 0x1000b563
and dword [ebp - 0x5f0], 0
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x794], eax
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x79c], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x7a4], eax
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x7ac], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1e0]
mov dword [ebp - 0x444], eax
mov eax, dword [ebp - 0x444]
imul eax, dword [ebp - 0xf0]
cmp eax, 0xe0855bbb
jae 0x1000b5c0
mov dword [ebp - 0x354], 1
jmp 0x1000b5c7
and dword [ebp - 0x354], 0
mov eax, dword [ebp - 0x354]
sub eax, 0x121a5e52
cmp dword [ebp - 0x6c], eax
jle 0x1000b5e3
mov dword [ebp - 0x4fc], 1
jmp 0x1000b5ea
and dword [ebp - 0x4fc], 0
mov eax, dword [ebp - 0x4fc]
sub eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x35c], eax
jl 0x1000b607
mov dword [ebp - 0x44c], 1
jmp 0x1000b60e
and dword [ebp - 0x44c], 0
cmp dword [ebp - 0x44c], 1
jge 0x1000b627
xor eax, eax
je 0x1000b627
mov dword [ebp - 0x364], 1
jmp 0x1000b62e
and dword [ebp - 0x364], 0
mov eax, dword [ebp - 0xfc]
cmp dword [ebp - 0x364], eax
jge 0x1000b64e
mov eax, 0x28b80bbe
test eax, eax
jne 0x1000b64e
and dword [ebp - 0x4c4], 0
jmp 0x1000b658
mov dword [ebp - 0x4c4], 1
mov eax, dword [ebp - 0x34]
imul eax, dword [ebp - 0x4c4]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x1e0]
jg 0x1000b67d
mov dword [ebp - 0x36c], 1
jmp 0x1000b684
and dword [ebp - 0x36c], 0
mov eax, dword [ebp - 0x36c]
mov dword [ebp - 0x5c0], eax
jmp 0x1000b28b
mov byte [0x11087364], 1
mov dword [ebp - 0x174], 0xbf5cd53b
mov dword [ebp - 0x74], 4
mov dword [ebp - 0x37c], 0x44401d1b
mov dword [ebp - 0x5c8], 0xffffffff
push 2
lea ecx, [ebp - 0x744]
call fcn.1000e5bc
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x14c], 0
jmp 0x1000b6ee
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 2
jge 0x1000b710
push dword [ebp - 0x14c]
lea ecx, [ebp - 0x744]
call fcn.1000e623
mov dword [eax], 0x4431fada
jmp 0x1000b6e1
cmp dword [ebp - 0x174], 0xffffffff
jne 0x1000b725
mov dword [ebp - 0x5f8], 1
jmp 0x1000b72c
and dword [ebp - 0x5f8], 0
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x7b4], eax
imul eax, dword [ebp - 0x74], 0
test eax, eax
jne 0x1000b749
mov dword [ebp - 0x454], 1
jmp 0x1000b750
and dword [ebp - 0x454], 0
mov eax, dword [ebp - 0x74]
add eax, dword [ebp - 0x454]
cmp eax, 0xfffffffe
jae 0x1000b76a
mov dword [ebp - 0x374], 1
jmp 0x1000b771
and dword [ebp - 0x374], 0
cmp dword [ebp - 0x374], 0x8f6c
jge 0x1000b789
mov dword [ebp - 0x528], 1
jmp 0x1000b790
and dword [ebp - 0x528], 0
mov eax, dword [ebp - 0x528]
mov dword [ebp - 0x37c], eax
mov eax, dword [ebp - 0x37c]
mov dword [ebp - 0x7bc], eax
mov eax, dword [ebp - 0x174]
imul eax, dword [ebp - 0x174]
mov dword [ebp - 0x5c8], eax
mov dword [ebp - 0x600], 0x1cdd
cmp dword [ebp - 0x600], 0xdca
jge 0x1000b87f
lea eax, [ebp - 0x17c]
push eax
push 0x1000775c
call fcn.100528eb
pop ecx
pop ecx
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x5d0], eax
mov eax, dword [ebp - 0x17c]
dec eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x5d0], 0
je 0x1000b87f
lea eax, [ebp - 0x45c]
push eax
lea eax, [ebp - 0x608]
push eax
push 0x100077d4
call fcn.100528eb
add esp, 0xc
mov eax, dword [ebp - 0x608]
cdq
idiv dword [ebp - 0x45c]
mov dword [ebp - 0x384], edx
cmp dword [ebp - 0x384], 0
jle 0x1000b855
mov eax, dword [ebp - 0x45c]
sub eax, dword [ebp - 0x384]
mov dword [ebp - 0x4cc], eax
jmp 0x1000b85c
and dword [ebp - 0x4cc], 0
mov eax, dword [ebp - 0x4cc]
mov dword [ebp - 0x5d8], eax
push dword [ebp - 0x5d8]
push 0x100077ac
call fcn.10052b06
pop ecx
pop ecx
jmp 0x1000b7e8
mov dword [ebp - 0x74], 1
jmp 0x1000b88f
mov eax, dword [ebp - 0x74]
dec eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0
jl 0x1000b8b7
mov dword [ebp - 0x610], 0xffffffff
push dword [ebp - 0x74]
lea ecx, [ebp - 0x744]
call fcn.1000e623
mov eax, dword [eax]
mov dword [ebp - 0x610], eax
jmp 0x1000b888
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x744]
call fcn.1000e61e
push 1
lea ecx, [ebp - 0x554]
call fcn.1000e5bc
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x3c], 0xd8143836
mov dword [ebp - 0x6f4], 0x56cd
mov dword [ebp - 0x6f0], 0x56cd
mov dword [ebp - 0x6ec], 0x56cd
mov dword [ebp - 0x6e8], 0x56cd
lea ecx, [ebp - 0x199]
call fcn.1000e632
push eax
lea eax, [ebp - 0x6e4]
push eax
lea eax, [ebp - 0x6f4]
push eax
lea ecx, [ebp - 0x87c]
call fcn.1000e635
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x814]
call fcn.1000e5f8
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x15c], 1
mov dword [ebp - 0x104], 1
mov dword [ebp - 0x50], 0
jmp 0x1000b966
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 2
jge 0x1000b97c
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x1d8], 0xeee2
jmp 0x1000b95f
mov dword [ebp - 0x50], 0
jmp 0x1000b98c
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 1
jge 0x1000b9a8
push dword [ebp - 0x50]
lea ecx, [ebp - 0x554]
call fcn.1000e623
mov dword [eax], 0x1d26
jmp 0x1000b985
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1d8]
mov dword [ebp - 0x7c4], eax
push 0
lea ecx, [ebp - 0x554]
call fcn.1000e623
cmp dword [eax], 0
jne 0x1000ba55
push 0
lea ecx, [ebp - 0x554]
call fcn.1000e623
mov esi, eax
push 0
lea ecx, [ebp - 0x554]
call fcn.1000e623
mov ecx, dword [esi]
cmp ecx, dword [eax]
je 0x1000b9ff
mov dword [ebp - 0x38c], 1
jmp 0x1000ba06
and dword [ebp - 0x38c], 0
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x1d8]
add ecx, dword [ebp - 0x38c]
cmp dword [ebp + eax - 0x1d8], ecx
je 0x1000ba34
mov dword [ebp - 0x5e0], 1
jmp 0x1000ba3b
and dword [ebp - 0x5e0], 0
mov dword [ebp - 0x3c], 0xfffffff6
mov eax, dword [ebp - 0x3c]
neg eax
cmp eax, 0xfffffffd
jl 0x1000ba55
and dword [ebp - 0x618], 0
jmp 0x1000ba5f
mov dword [ebp - 0x618], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1d8]
mov dword [ebp - 0x7cc], eax
push 0
lea ecx, [ebp - 0x554]
call fcn.1000e623
mov eax, 0xde57413
dec eax
cmp eax, 0xfffffff6
jl 0x1000ba96
mov dword [ebp - 0x464], 1
jmp 0x1000ba9d
and dword [ebp - 0x464], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1d8]
cmp dword [ebp - 0x464], eax
je 0x1000babe
mov dword [ebp - 0x394], 1
jmp 0x1000bac5
and dword [ebp - 0x394], 0
push 0
lea ecx, [ebp - 0x814]
call fcn.1000e623
mov ecx, dword [ebp - 0x394]
cmp ecx, dword [eax]
jle 0x1000baef
push 0xfffffffffffffffd
pop eax
test eax, eax
je 0x1000baef
mov dword [ebp - 0x504], 1
jmp 0x1000baf6
and dword [ebp - 0x504], 0
mov eax, dword [ebp - 0x504]
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 0
je 0x1000bc4c
mov dword [ebp - 0x3a4], 0x2f37
mov dword [ebp - 0x184], 1
push 4
lea ecx, [ebp - 0x774]
call fcn.1000e5bc
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x154], 0
jmp 0x1000bb4d
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 4
jge 0x1000bb6f
push dword [ebp - 0x154]
lea ecx, [ebp - 0x774]
call fcn.1000e623
mov dword [eax], 0xeeda781b
jmp 0x1000bb40
mov eax, dword [ebp - 0x184]
cmp dword [ebp - 0x104], eax
jle 0x1000bb89
mov dword [ebp - 0x39c], 1
jmp 0x1000bb90
and dword [ebp - 0x39c], 0
cmp dword [ebp - 0x39c], 0x6717b38e
jge 0x1000bba8
mov dword [ebp - 0x46c], 1
jmp 0x1000bbaf
and dword [ebp - 0x46c], 0
mov eax, dword [ebp - 0x46c]
mov dword [ebp - 0x15c], eax
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x15c], eax
jl 0x1000bbd2
mov dword [ebp - 0x4d4], 1
jmp 0x1000bbd9
and dword [ebp - 0x4d4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1d8]
sub eax, 0x846b
mov dword [ebp - 0x3a4], eax
mov eax, dword [ebp - 0x3a4]
add eax, 0x336
cmp eax, dword [ebp - 0x4d4]
jg 0x1000bc10
mov dword [ebp - 0x3ac], 1
jmp 0x1000bc17
and dword [ebp - 0x3ac], 0
mov eax, dword [ebp - 0x3ac]
mov dword [ebp - 0x184], eax
mov esi, dword [ebp - 0x184]
push 0
lea ecx, [ebp - 0x774]
call fcn.1000e623
mov dword [eax], esi
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x774]
call fcn.1000e61e
jmp 0x1000bcee
mov dword [ebp - 0x474], 0
mov dword [ebp - 0x164], 0
jmp 0x1000bc6f
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 2
jge 0x1000bc8b
mov eax, dword [ebp - 0x164]
mov dword [ebp + eax*4 - 0x6b8], 0xffffffff
jmp 0x1000bc62
mov dword [ebp - 0x104], 0x14
jmp 0x1000bca4
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0x23
jg 0x1000bcde
mov dword [ebp - 0x5e8], 0xc553
mov eax, dword [ebp - 0x5e8]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x474], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x474]
mov dword [ebp + eax - 0x6b8], ecx
jmp 0x1000bc97
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3c]
mov dword [ebp + eax - 0x6b8], ecx
mov dword [ebp - 0x3c], 0
jmp 0x1000bcfe
mov eax, dword [ebp - 0x3c]
dec eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0xffffffe9
jle 0x1000bd3a
mov dword [ebp - 0x620], 0x9e520c3d
mov byte [ebp - 0x81], 0
movzx eax, byte [ebp - 0x81]
test eax, eax
je 0x1000bd2d
push 0
push 0x1f1
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
cmp dword [ebp - 0x620], 0
je 0x1000bd38
jmp 0x1000bd3a
jmp 0x1000bcf7
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x814]
call fcn.1000e61e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x554]
call fcn.1000e61e
mov dword [ebp - 0x628], 0x1caf
cmp dword [ebp - 0x628], 0xe04
jge 0x1000be11
push 0x1065d294
push 0x1065d28c
push 0x1065d290
push 0x100077dc
call fcn.100528eb
add esp, 0x10
mov eax, dword [0x1065d290]
cdq
idiv dword [0x1065d28c]
imul eax, dword [0x1065d28c]
add eax, dword [0x1065d28c]
mov dword [ebp - 0x5f4], eax
mov byte [ebp - 0x21], 0
mov eax, dword [ebp - 0x5f4]
mov dword [ebp - 0x140], eax
jmp 0x1000bdd1
mov eax, dword [ebp - 0x140]
add eax, dword [0x1065d28c]
mov dword [ebp - 0x140], eax
mov eax, dword [ebp - 0x140]
cmp eax, dword [0x1065d294]
jg 0x1000bdfe
mov byte [ebp - 0x21], 1
mov eax, dword [ebp - 0x140]
sub eax, dword [0x1065d290]
push eax
push 0x100077e8
call fcn.10052b06
pop ecx
pop ecx
jmp 0x1000bdbf
movzx eax, byte [ebp - 0x21]
test eax, eax
jne 0x1000be11
push 0x100077ec
call fcn.10052cc6
pop ecx
push 3
lea ecx, [ebp - 0x658]
call fcn.1000e5bc
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x54], 0
jmp 0x1000be35
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 4
jge 0x1000be4b
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x89c], 0xc85f70ad
jmp 0x1000be2e
mov dword [ebp - 0x54], 0
jmp 0x1000be5b
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 3
jge 0x1000be77
push dword [ebp - 0x54]
lea ecx, [ebp - 0x658]
call fcn.1000e623
mov dword [eax], 0x20f89b5
jmp 0x1000be54
push 1
lea ecx, [ebp - 0x658]
call fcn.1000e623
and dword [eax], 0
jmp 0x1000bead
push 1
lea ecx, [ebp - 0x658]
call fcn.1000e623
cmp dword [eax], 3
jg 0x1000bef7
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret