Function at 0x10033322
Capabilities:
Query service status

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1005fb26
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0xef0
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 0x10]
test eax, eax
je 0x1003353b
lea eax, [ebp + 8]
mov dword [ebp - 0x800], eax
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 0x8f4], eax
mov eax, dword [ebp + 0x40]
mov dword [ebp - 0x7c8], eax
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0x904], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x8fc], eax
mov eax, dword [ebp + 0x34]
mov dword [ebp - 0x7d0], eax
mov eax, dword [ebp + 0x38]
mov dword [ebp - 0x8ec], eax
mov eax, dword [ebp - 0x800]
movzx eax, byte [eax]
test eax, eax
je 0x10033419
mov eax, dword [ebp - 0x7c8]
mov dword [ebp - 0x7d8], eax
mov eax, dword [ebp - 0x7d0]
mov dword [ebp - 0x8dc], eax
mov eax, dword [ebp - 0x7d8]
mov dword [ebp - 0x120], eax
mov eax, dword [ebp - 0x8dc]
mov dword [ebp - 0x8e4], eax
mov eax, dword [ebp - 0x120]
mov dword [eax], 0
jmp 0x100333ee
mov eax, dword [ebp - 0x120]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x120]
mov dword [ecx], eax
mov eax, dword [ebp - 0x120]
cmp dword [eax], 3
jge 0x10033414
mov eax, dword [ebp - 0x120]
push dword [eax]
mov ecx, dword [ebp - 0x8e4]
call fcn.1001abab
mov dword [eax], 0xa4b38b4b
jmp 0x100333dd
jmp 0x10033536
mov eax, dword [ebp - 0x8ec]
mov dword [ebp - 0x90c], eax
mov eax, dword [ebp - 0x8f4]
mov dword [ebp - 0x914], eax
mov eax, dword [ebp - 0x8fc]
mov dword [ebp - 0x91c], eax
mov eax, dword [ebp - 0x904]
mov dword [ebp - 0x924], eax
mov eax, dword [ebp - 0x90c]
mov dword [ebp - 0x168], eax
mov eax, dword [ebp - 0x914]
mov dword [ebp - 0x1d0], eax
mov eax, dword [ebp - 0x91c]
mov dword [ebp - 0x330], eax
mov eax, dword [ebp - 0x924]
mov dword [ebp - 0x4e0], eax
mov eax, dword [ebp - 0x1d0]
mov eax, dword [eax]
inc eax
inc eax
push eax
mov ecx, dword [ebp - 0x168]
call fcn.1001abab
push 2
mov ecx, dword [ebp - 0x330]
call fcn.1001abab
mov eax, dword [ebp - 0x1d0]
mov eax, dword [eax]
mov dword [ebp - 0xd5c], eax
push 2
mov ecx, dword [ebp - 0x330]
call fcn.1001abab
mov eax, dword [ebp - 0x1d0]
mov eax, dword [eax]
inc eax
inc eax
push eax
mov ecx, dword [ebp - 0x168]
call fcn.1001abab
push 2
mov ecx, dword [ebp - 0x330]
call fcn.1001abab
mov ecx, dword [ebp - 0x4e0]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x4e0]
mov eax, dword [eax]
mov dword [ebp - 0xd48], eax
push 0
mov ecx, dword [ebp - 0x168]
call fcn.1001abab
cmp dword [eax], 0xd786ff52
je 0x10033513
mov dword [ebp - 0x92c], 1
jmp 0x1003351a
and dword [ebp - 0x92c], 0
mov eax, dword [ebp - 0x1d0]
mov eax, dword [eax]
inc eax
inc eax
push eax
mov ecx, dword [ebp - 0x168]
call fcn.1001abab
mov dword [eax], 5
jmp 0x10039e70
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x7c0], eax
mov eax, dword [ebp + 0x30]
mov dword [ebp - 0x944], eax
mov eax, dword [ebp + 0x3c]
mov dword [ebp - 0x8b8], eax
lea eax, [ebp + 0x20]
mov dword [ebp - 0x934], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x744], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x928], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x93c], eax
mov eax, dword [ebp - 0x934]
movzx eax, byte [eax]
test eax, eax
je 0x10033601
mov eax, dword [ebp - 0x93c]
mov dword [ebp - 0x94c], eax
mov eax, dword [ebp - 0x944]
mov dword [ebp - 0x954], eax
mov eax, dword [ebp - 0x94c]
mov dword [ebp - 0x158], eax
mov eax, dword [ebp - 0x954]
mov dword [ebp - 0x968], eax
mov eax, dword [ebp - 0x158]
mov dword [eax], 0
jmp 0x100335d6
mov eax, dword [ebp - 0x158]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x158]
mov dword [ecx], eax
mov eax, dword [ebp - 0x158]
cmp dword [eax], 3
jge 0x100335fc
mov eax, dword [ebp - 0x158]
push dword [eax]
mov ecx, dword [ebp - 0x968]
call fcn.1001abab
mov dword [eax], 7
jmp 0x100335c5
jmp 0x10039e70
mov eax, dword [ebp - 0x7c0]
mov dword [ebp - 0x79c], eax
mov eax, dword [ebp - 0x744]
mov dword [ebp - 0x9b0], eax
mov eax, dword [ebp - 0x928]
mov dword [ebp - 0x650], eax
mov dword [ebp - 0x684], 0x7c6e
mov dword [ebp - 0x754], 0x1000b1f0
cmp dword [ebp - 0x684], 0x7f87
jle 0x10033752
and dword [ebp - 0x178], 0
jmp 0x1003365f
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 0xe1a
jge 0x10033752
and dword [ebp - 0x17c], 0
jmp 0x10033685
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 0x6e36
jge 0x1003374d
and dword [ebp - 0x2b4], 0
jmp 0x100336ab
mov eax, dword [ebp - 0x2b4]
inc eax
mov dword [ebp - 0x2b4], eax
cmp dword [ebp - 0x2b4], 0x6365
jge 0x10033748
and dword [ebp - 0x184], 0
jmp 0x100336d1
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 0x243e
jge 0x10033743
mov eax, dword [ebp - 0x178]
cdq
idiv dword [ebp - 0x17c]
and edx, dword [ebp - 0x2b4]
and edx, dword [ebp - 0x184]
mov eax, edx
cdq
mov dword [ebp - 0x7e4], eax
mov dword [ebp - 0x7e0], edx
push dword [ebp - 0x7e0]
push dword [ebp - 0x7e4]
lea ecx, [ebp - 0xe88]
call fcn.1000d6fa
pop ecx
pop ecx
mov dword [ebp - 0x74c], eax
mov ecx, dword [ebp - 0x74c]
call fcn.1001a8bc
push eax
call fcn.10049b86
pop ecx
lea ecx, [ebp - 0xe88]
call fcn.1001a8b2
jmp 0x100336c4
jmp 0x1003369e
jmp 0x10033678
jmp 0x10033652
mov eax, dword [ebp - 0x8b8]
mov dword [ebp - 0x30c], eax
and dword [ebp - 4], 0
cmp dword [ebp - 0x684], 0x794e
jge 0x1003377a
push dword [ebp - 0x754]
call fcn.10049b86
pop ecx
jmp 0x10033796
or dword [ebp - 4], 0xffffffff
jmp 0x100337a0
push 3
lea ecx, [ebp - 0x978]
call fcn.1001ab0d
mov dword [ebp - 4], 2
push 0
push 0
push 0x3844
lea eax, [ebp - 0x114]
push eax
lea eax, [ebp - 0x978]
push eax
call fcn.10020c4d
add esp, 0x14
mov dword [ebp - 0x114], 0
jmp 0x100337ec
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 1
jge 0x10033808
mov eax, dword [ebp - 0x114]
mov dword [ebp + eax*4 - 0x75c], 0xbb4ebb0c
jmp 0x100337df
push 1
lea ecx, [ebp - 0x978]
call fcn.1001abab
mov dword [eax], 0xfffffff4
jmp 0x10033841
push 1
lea ecx, [ebp - 0x978]
call fcn.1001abab
mov dword [ebp - 0x68c], eax
mov eax, dword [ebp - 0x68c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x68c]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x978]
call fcn.1001abab
cmp dword [eax], 0x1c
jl 0x10033872
mov dword [ebp - 0x9ac], 0x7596
mov eax, dword [ebp - 0x9ac]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x75c], eax
jmp 0x1003381d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x978]
call fcn.1001ab8f
mov dword [ebp - 0xc8], 0x8876
mov dword [ebp - 0xdc], 8
mov dword [ebp - 0x318], 0x63588c55
mov dword [ebp - 0x694], 1
mov dword [ebp - 0x334], 0xe0c23782
mov dword [ebp - 0x524], 0x73d4c46
mov dword [ebp - 0x37c], 0
mov dword [ebp - 0x764], 0xffffffff
mov dword [ebp - 0x668], 0
mov dword [ebp - 0x930], 0xffffffff
mov dword [ebp - 0x22c], 0
jmp 0x100338fe
mov eax, dword [ebp - 0x22c]
inc eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 2
jge 0x1003391a
mov eax, dword [ebp - 0x22c]
mov dword [ebp + eax*4 - 0x9f4], 0x88216928
jmp 0x100338f1
imul eax, dword [ebp - 0xc8], 0x4e58
mov dword [ebp - 0x694], eax
mov eax, dword [ebp - 0x694]
add eax, 0x469209a4
je 0x1003394c
cmp dword [ebp - 0xdc], 0
je 0x1003394c
mov dword [ebp - 0x6a8], 1
jmp 0x10033953
and dword [ebp - 0x6a8], 0
cmp dword [ebp - 0x6a8], 0
jne 0x1003396c
push 5
pop eax
test eax, eax
jne 0x1003396c
and dword [ebp - 0x6b0], 0
jmp 0x10033976
mov dword [ebp - 0x6b0], 1
mov eax, dword [ebp - 0xdc]
cmp dword [ebp - 0x6b0], eax
jg 0x10033990
mov dword [ebp - 0x6b8], 1
jmp 0x10033997
and dword [ebp - 0x6b8], 0
mov eax, dword [ebp - 0x334]
cmp dword [ebp - 0x6b8], eax
jl 0x100339b1
mov dword [ebp - 0x6c0], 1
jmp 0x100339b8
and dword [ebp - 0x6c0], 0
mov eax, dword [ebp - 0x6c0]
mov dword [ebp - 0x334], eax
mov eax, dword [ebp - 0x334]
mov dword [ebp - 0x658], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x658]
mov dword [ebp + eax - 0x9f4], ecx
mov eax, dword [ebp - 0x318]
cmp eax, dword [ebp - 0x658]
jg 0x100339fd
mov dword [ebp - 0x36c], 1
jmp 0x10033a04
and dword [ebp - 0x36c], 0
mov eax, dword [ebp - 0x36c]
mov dword [ebp - 0x524], eax
cmp dword [ebp - 0x524], 0
je 0x10033a29
xor eax, eax
je 0x10033a29
mov dword [ebp - 0x374], 1
jmp 0x10033a30
and dword [ebp - 0x374], 0
mov eax, dword [ebp - 0xc8]
cmp eax, dword [ebp - 0x374]
je 0x10033a4a
mov dword [ebp - 0x610], 1
jmp 0x10033a51
and dword [ebp - 0x610], 0
mov eax, dword [ebp - 0x610]
mov dword [ebp - 0x37c], eax
mov eax, dword [ebp - 0x37c]
mov dword [ebp - 0xc08], eax
mov eax, dword [ebp - 0xdc]
cmp eax, dword [ebp - 0xc8]
jne 0x10033a83
mov dword [ebp - 0x52c], 1
jmp 0x10033a8a
and dword [ebp - 0x52c], 0
mov eax, dword [ebp - 0xdc]
cmp dword [ebp - 0x52c], eax
jg 0x10033aa4
mov dword [ebp - 0x8c0], 1
jmp 0x10033aab
and dword [ebp - 0x8c0], 0
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0xcf0], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x9f4]
add eax, 7
imul eax, dword [ebp - 0x318]
sub eax, dword [ebp - 0xc8]
sub eax, 6
cmp eax, dword [ebp - 0xc8]
jne 0x10033aeb
mov dword [ebp - 0x384], 1
jmp 0x10033af2
and dword [ebp - 0x384], 0
cmp dword [ebp - 0x384], 0x3097
jne 0x10033b0a
mov dword [ebp - 0x604], 1
jmp 0x10033b11
and dword [ebp - 0x604], 0
mov eax, dword [ebp - 0x318]
cmp dword [ebp - 0x604], eax
jne 0x10033b2b
mov dword [ebp - 0x38c], 1
jmp 0x10033b32
and dword [ebp - 0x38c], 0
cmp dword [ebp - 0x38c], 6
jl 0x10033b47
mov dword [ebp - 0x534], 1
jmp 0x10033b4e
and dword [ebp - 0x534], 0
mov eax, dword [ebp - 0xdc]
add eax, dword [ebp - 0x534]
cmp dword [ebp - 0xc8], eax
jge 0x10033b6e
mov dword [ebp - 0x394], 1
jmp 0x10033b75
and dword [ebp - 0x394], 0
mov eax, dword [ebp - 0x394]
sub eax, 0x262
imul eax, dword [ebp - 0x764]
mov dword [ebp - 0x668], eax
mov eax, dword [ebp - 0x668]
cmp eax, dword [ebp - 0xc8]
jg 0x10033ba7
mov dword [ebp - 0x39c], 1
jmp 0x10033bae
and dword [ebp - 0x39c], 0
mov eax, dword [ebp - 0x39c]
mov dword [ebp - 0x930], eax
mov byte [ebp - 0xc2], 0
lea eax, [ebp - 0xc2]
push eax
push 0x5fbc
push 0
push 0x5bd2
push 0x48f1
push 0
push 0x4164
call fcn.10020b2b
add esp, 0x1c
mov dword [ebp - 0xe4], 0x2b29949d
push 3
lea ecx, [ebp - 0x350]
call fcn.1001ab0d
mov dword [ebp - 4], 3
mov dword [ebp - 0x34], 0
jmp 0x10033c16
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 3
jge 0x10033c32
push dword [ebp - 0x34]
lea ecx, [ebp - 0x350]
call fcn.1001abab
mov dword [eax], 1
jmp 0x10033c0f
mov dword [ebp - 0x34], 0
jmp 0x10033c42
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 2
jge 0x10033c58
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0xa04], 0xffffffff
jmp 0x10033c3b
mov dword [ebp - 0x34], 0
jmp 0x10033c68
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 1
jge 0x10033c7e
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x8c8], 0x6f37911b
jmp 0x10033c61
push 2
lea ecx, [ebp - 0x350]
call fcn.1001abab
cmp dword [eax], 0
je 0x10033caa
push 1
lea ecx, [ebp - 0x350]
call fcn.1001abab
push 2
lea ecx, [ebp - 0x350]
call fcn.1001abab
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0xc10], eax
push 2
lea ecx, [ebp - 0x350]
call fcn.1001abab
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0xd04], eax
mov esi, dword [ebp - 0xe4]
push 0
lea ecx, [ebp - 0x350]
call fcn.1001abab
cmp dword [eax], esi
jge 0x10033cf2
mov dword [ebp - 0x53c], 1
jmp 0x10033cf9
and dword [ebp - 0x53c], 0
mov esi, dword [ebp - 0x53c]
neg esi
push 2
lea ecx, [ebp - 0x350]
call fcn.1001abab
cmp esi, dword [eax]
jge 0x10033d27
cmp dword [ebp - 0xe4], 0
je 0x10033d27
mov dword [ebp - 0x76c], 1
jmp 0x10033d2e
and dword [ebp - 0x76c], 0
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0xc18], eax
cmp dword [ebp - 0xe4], 0x19a6fdd8
je 0x10033d52
mov dword [ebp - 0x3a4], 1
jmp 0x10033d59
and dword [ebp - 0x3a4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3a4]
imul ecx, dword [ebp + eax - 0xa04]
mov dword [ebp - 0x60c], ecx
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x60c]
mov dword [ebp + eax - 0x8c8], ecx
cmp dword [ebp - 0x60c], 0xd3650dfa
je 0x10033d9e
mov dword [ebp - 0x3ac], 1
jmp 0x10033da5
and dword [ebp - 0x3ac], 0
push 2
lea ecx, [ebp - 0x350]
call fcn.1001abab
mov ecx, dword [ebp - 0x3ac]
cmp ecx, dword [eax]
jg 0x10033dc8
mov dword [ebp - 0x544], 1
jmp 0x10033dcf
and dword [ebp - 0x544], 0
push 1
lea ecx, [ebp - 0x350]
call fcn.1001abab
mov ecx, dword [ebp - 0x544]
sub ecx, dword [eax]
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xa04], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x350]
call fcn.1001ab8f
push 3
lea ecx, [ebp - 0x988]
call fcn.1001ab0d
mov dword [ebp - 4], 4
mov dword [ebp - 0x70], 0
jmp 0x10033e24
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 3
jge 0x10033e40
push dword [ebp - 0x70]
lea ecx, [ebp - 0x988]
call fcn.1001abab
mov dword [eax], 0xb110c93b
jmp 0x10033e1d
push 3
lea ecx, [ebp - 0x710]
call fcn.1001ab0d
mov byte [ebp - 4], 5
mov dword [ebp - 0x8c], 0xfffffffd
mov dword [ebp - 0x3b4], 1
push 0
push 0x8f
lea eax, [ebp - 0x710]
push eax
push 0
push 0x16fa
lea eax, [ebp - 0x140]
push eax
call fcn.1002138a
add esp, 0x18
mov dword [ebp - 0x140], 0
jmp 0x10033ea2
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 2
jge 0x10033ebe
mov eax, dword [ebp - 0x140]
mov dword [ebp + eax*4 - 0x7f0], 0xffffffff
jmp 0x10033e95
mov dword [ebp - 0x8c], 2
jmp 0x10033ed7
mov eax, dword [ebp - 0x8c]
dec eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0
jl 0x10034122
mov dword [ebp - 0xfc], 0xfffffffd
mov dword [ebp - 0x774], 5
mov dword [ebp - 0x18c], 0
jmp 0x10033f11
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 1
jge 0x10033f2d
mov eax, dword [ebp - 0x18c]
mov dword [ebp + eax*4 - 0x97c], 0x3196
jmp 0x10033f04
mov dword [ebp - 0xfc], 0
jmp 0x10033f46
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 2
jg 0x10033fa7
mov byte [ebp - 0xa9], 0
push 0x2180
push 0x512f
push 0
lea eax, [ebp - 0xa9]
push eax
call fcn.10021356
add esp, 0x10
mov byte [ebp - 0xd2], 0
movzx eax, byte [ebp - 0xd2]
test eax, eax
je 0x10033fa5
push 0
push 1
push 0x501e
push 0x4ee4
push 0x6f4e
push 0
push 0x668f
call fcn.1002e390
add esp, 0x1c
jmp 0x10033f39
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x7f0], 1
jg 0x10033fc3
mov dword [ebp - 0x698], 1
jmp 0x10033fca
and dword [ebp - 0x698], 0
push dword [ebp - 0x8c]
lea ecx, [ebp - 0x710]
call fcn.1001abab
mov esi, eax
push 1
lea ecx, [ebp - 0x710]
call fcn.1001abab
mov eax, dword [eax]
imul eax, dword [esi]
mov dword [ebp - 0x3b4], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x3b4]
imul ecx, dword [ebp - 0x698]
cmp ecx, dword [ebp + eax - 0x7f0]
jge 0x1003401d
mov dword [ebp - 0x3bc], 1
jmp 0x10034024
and dword [ebp - 0x3bc], 0
mov eax, dword [ebp - 0x8c]
cmp dword [ebp - 0x3bc], eax
jge 0x1003403e
mov dword [ebp - 0x54c], 1
jmp 0x10034045
and dword [ebp - 0x54c], 0
cmp dword [ebp - 0x54c], 0xffffffff
jge 0x1003405a
mov dword [ebp - 0x3c4], 1
jmp 0x10034061
and dword [ebp - 0x3c4], 0
mov eax, dword [ebp - 0x774]
cmp dword [ebp - 0x3c4], eax
je 0x1003407b
mov dword [ebp - 0x614], 1
jmp 0x10034082
and dword [ebp - 0x614], 0
push dword [ebp - 0x8c]
lea ecx, [ebp - 0x710]
call fcn.1001abab
mov esi, dword [eax]
add esi, dword [ebp - 0x614]
push 2
lea ecx, [ebp - 0x710]
call fcn.1001abab
imul esi, dword [eax]
test esi, esi
jne 0x100340c8
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x97c], 0
jne 0x100340c8
and dword [ebp - 0x77c], 0
jmp 0x100340d2
mov dword [ebp - 0x77c], 1
cmp dword [ebp - 0xfc], 0xec1f
jl 0x100340ea
mov dword [ebp - 0x3cc], 1
jmp 0x100340f1
and dword [ebp - 0x3cc], 0
imul eax, dword [ebp - 0x3cc], 0
mov dword [ebp - 0x554], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x554]
mov dword [ebp + eax - 0x7f0], ecx
mov eax, dword [ebp - 0x554]
mov dword [ebp - 0xfc], eax
jmp 0x10033eca
mov byte [ebp - 0xb1], 0
movzx eax, byte [ebp - 0xb1]
test eax, eax
je 0x10034148
push 0x1fab
push 0x6ede
push 0
call fcn.100235e5
add esp, 0xc
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x710]
call fcn.1001ab8f
mov dword [ebp - 0x70], 0
jmp 0x10034167
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 1
jge 0x1003417d
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0x794], 0xbb4ebb0c
jmp 0x10034160
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x27c], 0x17b844a7
push 1
lea ecx, [ebp - 0x728]
call fcn.1001ab0d
mov byte [ebp - 4], 6
mov dword [ebp - 0x3e4], 0xfffffffe
mov dword [ebp - 0x674], 0x6d7d0454
mov dword [ebp - 0x784], 0x6a9bebb
push 0x4485
lea eax, [ebp - 0x728]
push eax
lea eax, [ebp - 0xd00]
push eax
push 0
push 0
push 0x3d66
push 0x2ece
call fcn.10020e0c
add esp, 0x1c
push 0
lea eax, [ebp - 0x128]
push eax
lea eax, [ebp - 0x27c]
push eax
push 0x42b5
lea eax, [ebp - 0x728]
push eax
push 0x367f
call fcn.1002d905
add esp, 0x18
mov dword [ebp - 0x27c], 1
cmp dword [ebp - 0x27c], 0
je 0x1003423a
cmp dword [ebp - 0x27c], 0
je 0x1003423a
mov dword [ebp - 0x3d4], 1
jmp 0x10034241
and dword [ebp - 0x3d4], 0
mov eax, dword [ebp - 0x3d4]
mov dword [ebp - 0x674], eax
mov eax, dword [ebp - 0x674]
mov dword [ebp - 0xc20], eax
mov eax, 0xd253d975
cmp eax, 1
jne 0x10034278
cmp dword [ebp - 0x128], 0
je 0x10034278
mov dword [ebp - 0x8d0], 1
jmp 0x1003427f
and dword [ebp - 0x8d0], 0
push 0
lea ecx, [ebp - 0x728]
call fcn.1001abab
cmp dword [eax], 0x19bd12f8
je 0x100342a0
mov dword [ebp - 0x3dc], 1
jmp 0x100342a7
and dword [ebp - 0x3dc], 0
mov eax, dword [ebp - 0x3e4]
cmp dword [ebp - 0x3dc], eax
jge 0x100342c1
mov dword [ebp - 0x55c], 1
jmp 0x100342c8
and dword [ebp - 0x55c], 0
mov eax, dword [ebp - 0x128]
cmp dword [ebp - 0x55c], eax
jle 0x100342e6
xor eax, eax
je 0x100342e6
mov dword [ebp - 0x61c], 1
jmp 0x100342ed
and dword [ebp - 0x61c], 0
mov esi, dword [ebp - 0x128]
mov edi, dword [ebp - 0x3e4]
push 0
lea ecx, [ebp - 0x728]
call fcn.1001abab
mov ecx, dword [ebp - 0x61c]
add ecx, dword [eax]
sub ecx, edi
cmp ecx, esi
jne 0x10034320
mov dword [ebp - 0x3ec], 1
jmp 0x10034327
and dword [ebp - 0x3ec], 0
mov eax, dword [ebp - 0x128]
cmp dword [ebp - 0x3ec], eax
jg 0x10034341
mov dword [ebp - 0x564], 1
jmp 0x10034348
and dword [ebp - 0x564], 0
push 0
lea ecx, [ebp - 0x728]
call fcn.1001abab
mov ecx, dword [ebp - 0x564]
cmp ecx, dword [eax]
jge 0x1003436b
mov dword [ebp - 0x3f4], 1
jmp 0x10034372
and dword [ebp - 0x3f4], 0
mov eax, dword [ebp - 0x3f4]
mov dword [ebp - 0x784], eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x728]
call fcn.1001ab8f
push 1
lea ecx, [ebp - 0x988]
call fcn.1001abab
mov dword [eax], 0xfffffff4
jmp 0x100343c6
push 1
lea ecx, [ebp - 0x988]
call fcn.1001abab
mov dword [ebp - 0x678], eax
mov eax, dword [ebp - 0x678]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x678]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x988]
call fcn.1001abab
cmp dword [eax], 0x1c
jl 0x100346cb
mov dword [ebp - 0x8d8], 0x7596
mov dword [ebp - 0x19c], 0
push 1
lea ecx, [ebp - 0xab4]
call fcn.1001ab0d
mov byte [ebp - 4], 7
mov dword [ebp - 0x404], 0x11151
push 0x1100
push 0
lea eax, [ebp - 0xd0c]
push eax
push 0x30e
lea eax, [ebp - 0xab4]
push eax
push 0
call fcn.100307d3
add esp, 0x18
mov dword [ebp - 0x56c], 0xe2c
mov dword [ebp - 0x78c], 0x1000b268
cmp dword [ebp - 0x56c], 0xfd0
jle 0x100344f3
and dword [ebp - 0x194], 0
jmp 0x10034469
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 0x5513
jge 0x100344f3
and dword [ebp - 0x234], 0
jmp 0x1003448b
mov eax, dword [ebp - 0x234]
inc eax
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 0x45d4
jge 0x100344ee
mov eax, dword [ebp - 0x194]
and eax, dword [ebp - 0x234]
cdq
mov dword [ebp - 0x7fc], eax
mov dword [ebp - 0x7f8], edx
push dword [ebp - 0x7f8]
push dword [ebp - 0x7fc]
lea ecx, [ebp - 0xeb8]
call fcn.1000d6fa
pop ecx
pop ecx
mov dword [ebp - 0x938], eax
mov ecx, dword [ebp - 0x938]
call fcn.1001a8bc
push eax
call fcn.10049b86
pop ecx
lea ecx, [ebp - 0xeb8]
call fcn.1001a8b2
jmp 0x1003447e
jmp 0x1003445c
mov dword [ebp - 0x19c], 0xfffffff1
jmp 0x1003450c
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 0xfffffffd
jle 0x1003464f
push 3
lea ecx, [ebp - 0x704]
call fcn.1001ab0d
mov byte [ebp - 4], 8
mov dword [ebp - 0x2a4], 0
jmp 0x10034543
mov eax, dword [ebp - 0x2a4]
inc eax
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 3
jge 0x10034565
push dword [ebp - 0x2a4]
lea ecx, [ebp - 0x704]
call fcn.1001abab
mov dword [eax], 7
jmp 0x10034536
push 2
lea ecx, [ebp - 0x704]
call fcn.1001abab
and dword [eax], 0
jmp 0x1003459b
push 2
lea ecx, [ebp - 0x704]
call fcn.1001abab
mov dword [ebp - 0x3fc], eax
mov eax, dword [ebp - 0x3fc]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x3fc]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0x704]
call fcn.1001abab
cmp dword [eax], 0
jl 0x100345fc
mov byte [ebp - 0xd4], 0
movzx eax, byte [ebp - 0xd4]
test eax, eax
je 0x100345d5
push 0x4dcd
push 0
push 0x5a22
push 0
call fcn.1002ef8a
add esp, 0x10
push 0x2f3d
lea eax, [ebp - 0xab4]
push eax
push 0x6dd4
push 0
lea eax, [ebp - 0x704]
push eax
call fcn.10021107
add esp, 0x14
jmp 0x10034577
mov byte [ebp - 0xd6], 0
push 0
push 0xb0f
push 0x68fe
push 0x52ca
push 0x3f95
push 0
lea eax, [ebp - 0xd6]
push eax
push 0x5cc6
push 0x3c4f
push 0x73fa
push 1
call fcn.1002a91c
add esp, 0x2c
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x704]
call fcn.1001ab8f
jmp 0x100344ff
mov byte [ebp - 4], 9
cmp dword [ebp - 0x56c], 0xdb2
jge 0x1003466b
push dword [ebp - 0x78c]
call fcn.10049b86
pop ecx
jmp 0x10034687
mov dword [ebp - 4], 7
jmp 0x10034697
mov eax, dword [ebp - 0x404]
dec eax
mov dword [ebp - 0x404], eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xab4]
call fcn.1001ab8f
mov eax, dword [ebp - 0x8d8]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x794], eax
jmp 0x100343a2
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x988]
call fcn.1001ab8f
push 3
lea ecx, [ebp - 0x998]
call fcn.1001ab0d
mov dword [ebp - 4], 0xb
mov dword [ebp - 0xec], 0xfffffff7
push 0
push 0x76c3
push 0x47b3
lea eax, [ebp - 0x150]
push eax
push 0
push 5
push 1
lea eax, [ebp - 0x998]
push eax
push 0x345b
push 0x7b5d
call fcn.1002f8b0
add esp, 0x28
mov dword [ebp - 0x150], 0
jmp 0x10034743
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 2
jge 0x1003475f
mov eax, dword [ebp - 0x150]
mov dword [ebp + eax*4 - 0xb48], 0xed3c15d
jmp 0x10034736
mov dword [ebp - 0xec], 0
jmp 0x10034778
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 2
jg 0x100347e4
mov dword [ebp - 0x1a4], 0
jmp 0x1003479a
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 1
jge 0x100347b6
mov eax, dword [ebp - 0x1a4]
mov dword [ebp + eax*4 - 0x9b4], 0xbb4ebb0c
jmp 0x1003478d
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x9b4], 0xefc07e17
push 0x5986
push 0x3d02
push 0x706a
push 1
push 0
call fcn.1002044b
add esp, 0x14
jmp 0x1003476b
push 2
lea ecx, [ebp - 0x998]
call fcn.1001abab
mov eax, dword [eax]
mov dword [ebp - 0xec], eax
mov esi, dword [ebp - 0xec]
push 1
lea ecx, [ebp - 0x998]
call fcn.1001abab
cmp dword [eax], esi
jne 0x1003481c
mov dword [ebp - 0x624], 1
jmp 0x10034823
and dword [ebp - 0x624], 0
push 0
lea ecx, [ebp - 0x998]
call fcn.1001abab
mov ecx, dword [ebp - 0x624]
cmp ecx, dword [eax]
je 0x10034846
mov dword [ebp - 0x40c], 1
jmp 0x1003484d
and dword [ebp - 0x40c], 0
mov eax, dword [ebp - 0x40c]
neg eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xb48], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x998]
call fcn.1001ab8f
mov eax, dword [ebp - 0x79c]
mov eax, dword [eax + 0x38]
mov dword [ebp - 0x304], eax
mov dword [ebp - 0xc28], 0x33a4
mov dword [ebp - 0x574], 0x39b4
mov dword [ebp - 0x7a4], 0x1000b2e0
cmp dword [ebp - 0x574], 0x3af5
jle 0x1003495c
and dword [ebp - 0x23c], 0
jmp 0x100348c4
mov eax, dword [ebp - 0x23c]
inc eax
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 0x4def
jge 0x1003494e
and dword [ebp - 0x1ac], 0
jmp 0x100348e6
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 0x218a
jge 0x10034949
mov eax, dword [ebp - 0x23c]
add eax, dword [ebp - 0x1ac]
cdq
mov dword [ebp - 0x808], eax
mov dword [ebp - 0x804], edx
push dword [ebp - 0x804]
push dword [ebp - 0x808]
lea ecx, [ebp - 0xe40]
call fcn.1000d6fa
pop ecx
pop ecx
mov dword [ebp - 0x8e0], eax
mov ecx, dword [ebp - 0x8e0]
call fcn.1001a8bc
push eax
call fcn.10049b86
pop ecx
lea ecx, [ebp - 0xe40]
call fcn.1001a8b2
jmp 0x100348d9
jmp 0x100348b7
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov byte [ebp - 0xb4], 0
movzx eax, byte [ebp - 0xb4]
test eax, eax
je 0x10034987
push 0x30b4
push 0
push 0x5a60
push 0x288e
call fcn.10023593
add esp, 0x10
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0x574], 0x36d3
jge 0x100349a6
push dword [ebp - 0x7a4]
call fcn.10049b86
pop ecx
jmp 0x100349c2
or dword [ebp - 4], 0xffffffff
jmp 0x100349cc
mov byte [ebp - 0xcf], 0
movzx eax, byte [ebp - 0xcf]
test eax, eax
je 0x100349e9
push 0x1d5d
call dword [sym.imp.KERNEL32.dll_IsValidCodePage]
and dword [ebp - 0xa60], 0
and dword [ebp - 0xa5c], 0
and dword [ebp - 0xa58], 0
and dword [ebp - 0xa54], 0
lea ecx, [ebp - 0x319]
call fcn.1001abba
push eax
lea eax, [ebp - 0xa50]
push eax
lea eax, [ebp - 0xa60]
push eax
lea ecx, [ebp - 0xe00]
call fcn.1001abbd
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xc7c]
call fcn.1001ab69
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x284], 0x5c8094a1
mov dword [ebp - 0xd14], 0xffffffff
mov dword [ebp - 0x67c], 0x648bd921
mov dword [ebp - 0x284], 3
jmp 0x10034a78
mov eax, dword [ebp - 0x284]
dec eax
mov dword [ebp - 0x284], eax
cmp dword [ebp - 0x284], 0
jl 0x10034c46
mov dword [ebp - 0x1b4], 0xffffffff
mov dword [ebp - 0xc30], 0x23607a98
mov dword [ebp - 0xdc4], 0xffffffff
mov dword [ebp - 0xc38], 2
mov dword [ebp - 0xd10], 1
mov dword [ebp - 0x1b4], 0
jmp 0x10034ad0
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 3
jg 0x10034c41
mov dword [ebp - 0x130], 0x13034d00
mov dword [ebp - 0xc40], 0x4b03e386
mov dword [ebp - 0xd50], 0xbb00868b
mov dword [ebp - 0xb2c], 0xdcef989b
mov dword [ebp - 0x414], 0x4ce4
mov dword [ebp - 0x940], 0x1000b328
cmp dword [ebp - 0x414], 0x4ea8
jle 0x10034b9d
and dword [ebp - 0x244], 0
jmp 0x10034b3b
mov eax, dword [ebp - 0x244]
inc eax
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 0x734b
jge 0x10034b9d
and dword [ebp - 0x1bc], 0
jmp 0x10034b5d
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 0x62b
jge 0x10034b9b
mov eax, dword [ebp - 0x244]
imul eax, dword [ebp - 0x1bc]
cdq
mov dword [ebp - 0x814], eax
mov dword [ebp - 0x810], edx
push dword [ebp - 0x810]
push dword [ebp - 0x814]
mov ecx, 0x106086b8
call fcn.1001a8dc
jmp 0x10034b50
jmp 0x10034b2e
mov dword [ebp - 0xb34], 1
mov byte [ebp - 4], 0xf
cmp dword [ebp - 0x414], 0x4aa3
jge 0x10034bc7
mov edx, dword [ebp - 0x940]
mov ecx, 0x106086b8
call fcn.1001cde7
jmp 0x10034be3
mov dword [ebp - 4], 0xe
jmp 0x10034bf3
mov dword [ebp - 0x130], 0
jmp 0x10034c0c
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 4
jge 0x10034c2f
lea eax, [ebp - 0x130]
push eax
lea eax, [ebp - 0xc7c]
push eax
push 0
call fcn.10026415
add esp, 0xc
jmp 0x10034bff
mov eax, dword [ebp - 0x67c]
dec eax
mov dword [ebp - 0x67c], eax
jmp 0x10034ac3
jmp 0x10034a6b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc7c]
call fcn.1001ab8f
push 3
lea ecx, [ebp - 0x9a8]
call fcn.1001ab0d
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x1c4], 0xfffffff7
mov dword [ebp - 0x28], 0
jmp 0x10034c83
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jge 0x10034c99
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x664], 0xa6318529
jmp 0x10034c7c
mov dword [ebp - 0x28], 0
jmp 0x10034ca9
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 1
jge 0x10034cbf
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x8e8], 4
jmp 0x10034ca2
mov dword [ebp - 0x28], 0
jmp 0x10034ccf
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jge 0x10034ce5
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x9fc], 0xb2fa
jmp 0x10034cc8
mov byte [ebp - 0xb6], 0
movzx eax, byte [ebp - 0xb6]
test eax, eax
je 0x10034d0d
push 0
push 0x1c53
push 0x60e1
push 0
call fcn.10020757
add esp, 0x10
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x664], 0
jmp 0x10034d3b
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x664]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x664], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x664], 0xfffffff9
jl 0x10034f17
mov dword [ebp - 0x2f0], 0xb3e90a62
mov dword [ebp - 0x7ac], 9
mov dword [ebp - 0x41c], 0xca779041
mov dword [ebp - 0x57c], 0xf30b
mov dword [ebp - 0x2c4], 0
jmp 0x10034d90
mov eax, dword [ebp - 0x2c4]
inc eax
mov dword [ebp - 0x2c4], eax
cmp dword [ebp - 0x2c4], 2
jge 0x10034dac
mov eax, dword [ebp - 0x2c4]
mov dword [ebp + eax*4 - 0xb54], 1
jmp 0x10034d83
push 0
push 0
push 0x162b
lea eax, [ebp - 0x1c4]
push eax
push 0x7196
lea eax, [ebp - 0x2f0]
push eax
call fcn.1001f56f
add esp, 0x18
cmp dword [ebp - 0x2f0], 0
je 0x10034dee
cmp dword [ebp - 0x7ac], 0
je 0x10034dee
mov dword [ebp - 0x42c], 1
jmp 0x10034df5
and dword [ebp - 0x42c], 0
mov dword [ebp - 0x41c], 0
mov eax, dword [ebp - 0x41c]
mov dword [ebp - 0xb3c], eax
mov eax, dword [ebp - 0x1c4]
mov dword [ebp - 0xb74], eax
mov eax, dword [ebp - 0x1c4]
mov dword [ebp - 0xb7c], eax
mov eax, dword [ebp - 0x57c]
mov dword [ebp - 0xb84], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x664]
mov dword [ebp - 0xb8c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x8e8]
sub eax, 0x9744
sub eax, dword [ebp - 0x57c]
cmp eax, 0x6af9031e
jl 0x10034e6d
mov dword [ebp - 0x424], 1
jmp 0x10034e74
and dword [ebp - 0x424], 0
cmp dword [ebp - 0x424], 5
jl 0x10034e92
cmp dword [ebp - 0x1c4], 0
je 0x10034e92
mov dword [ebp - 0x62c], 1
jmp 0x10034e99
and dword [ebp - 0x62c], 0
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 0
imul edx, dword [ebp - 0x62c], 0xbe58
mov esi, dword [ebp - 0x42c]
sub esi, edx
sub esi, dword [ebp + ecx - 0xb54]
cmp esi, dword [ebp + eax - 0x9fc]
je 0x10034ed3
mov dword [ebp - 0x584], 1
jmp 0x10034eda
and dword [ebp - 0x584], 0
cmp dword [ebp - 0x584], 0xffffffff
jne 0x10034efc
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x9fc], 0
jne 0x10034efc
and dword [ebp - 0x434], 0
jmp 0x10034f06
mov dword [ebp - 0x434], 1
mov eax, dword [ebp - 0x434]
mov dword [ebp - 0x2f0], eax
jmp 0x10034d20
mov dword [ebp - 0xe8], 0xfffffff7
mov dword [ebp - 0x90], 0xc75b57fd
mov dword [ebp - 0x7b4], 0xeec80f21
mov dword [ebp - 0xb94], 0x8fb8
mov dword [ebp - 0x90], 0xa
jmp 0x10034f58
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0x18
jle 0x100350c0
mov dword [ebp - 0x9c4], 0x7c8a6b95
mov dword [ebp - 0x9c0], 0x7c8a6b95
mov dword [ebp - 0x9bc], 0x7c8a6b95
mov dword [ebp - 0x9b8], 0x7c8a6b95
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x9c4], 1
cmp dword [ebp - 0x90], 0x8abc
je 0x10034fb6
mov dword [ebp - 0x634], 1
jmp 0x10034fbd
and dword [ebp - 0x634], 0
cmp dword [ebp - 0x90], 0
je 0x10034fdf
mov eax, dword [ebp - 0x90]
sub eax, 0x6fe835b2
je 0x10034fdf
mov dword [ebp - 0x680], 1
jmp 0x10034fe6
and dword [ebp - 0x680], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x9c4]
imul eax, dword [ebp - 0x680]
test eax, eax
je 0x10035013
mov eax, 0xe49a2f38
test eax, eax
je 0x10035013
mov dword [ebp - 0x43c], 1
jmp 0x1003501a
and dword [ebp - 0x43c], 0
mov eax, dword [ebp - 0x43c]
neg eax
mov dword [ebp - 0x58c], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x58c]
mov dword [ebp + eax - 0x9c4], ecx
cmp dword [ebp - 0x58c], 0
je 0x10035060
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x9c4], 0
je 0x10035060
mov dword [ebp - 0x444], 1
jmp 0x10035067
and dword [ebp - 0x444], 0
cmp dword [ebp - 0x444], 0x1f3403ca
jg 0x1003507f
mov dword [ebp - 0x44c], 1
jmp 0x10035086
and dword [ebp - 0x44c], 0
push 0xfffffffffffffffa
pop eax
sub eax, dword [ebp - 0x634]
cmp eax, dword [ebp - 0x44c]
jne 0x100350a3
mov dword [ebp - 0x594], 1
jmp 0x100350aa
and dword [ebp - 0x594], 0
mov eax, dword [ebp - 0x594]
sub eax, 0x63a74adf
mov dword [ebp - 0x7b4], eax
jmp 0x10034f4b
push 1
lea ecx, [ebp - 0x2e0]
call fcn.1001ab0d
mov byte [ebp - 4], 0x12
mov dword [ebp - 0x24], 1
lea eax, [ebp - 0xb9c]
push eax
push 0x5e29
push 0
lea eax, [ebp - 0x2e0]
push eax
call fcn.100325fa
add esp, 0x10
mov dword [ebp - 0x24], 0
jmp 0x10035105
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jl 0x1003522f
mov dword [ebp - 0x148], 0xf84b8114
push dword [ebp - 0x24]
lea ecx, [ebp - 0x2e0]
call fcn.1001abab
cmp dword [eax], 0
je 0x10035131
jmp 0x1003522f
mov dword [ebp - 0x148], 0
jmp 0x1003514a
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 0
jg 0x1003522a
push 2
lea ecx, [ebp - 0x71c]
call fcn.1001ab0d
mov byte [ebp - 4], 0x13
mov dword [ebp - 0x24c], 0
jmp 0x10035181
mov eax, dword [ebp - 0x24c]
inc eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 2
jge 0x100351a3
push dword [ebp - 0x24c]
lea ecx, [ebp - 0x71c]
call fcn.1001abab
mov dword [eax], 0xfffffffa
jmp 0x10035174
push 1
lea ecx, [ebp - 0x71c]
call fcn.1001abab
and dword [eax], 0
jmp 0x100351d9
push 1
lea ecx, [ebp - 0x71c]
call fcn.1001abab
mov dword [ebp - 0x454], eax
mov eax, dword [ebp - 0x454]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x454]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x71c]
call fcn.1001abab
cmp dword [eax], 0
jg 0x10035216
lea eax, [ebp - 0x148]
push eax
lea eax, [ebp - 0x2e0]
push eax
push 0x737c
push 0
push 0x6c9b
lea eax, [ebp - 0x71c]
push eax
call fcn.1002a699
add esp, 0x18
jmp 0x100351b5
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x71c]
call fcn.1001ab8f
jmp 0x1003513d
jmp 0x100350fe
mov dword [ebp - 0x24], 0
jmp 0x1003523f
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jl 0x10035490
mov dword [ebp - 0x98], 0xfffffffc
mov dword [ebp - 0x138], 0x62d50c85
mov dword [ebp - 0x1cc], 0
jmp 0x10035276
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 3
jge 0x10035292
mov eax, dword [ebp - 0x1cc]
mov dword [ebp + eax*4 - 0xdd4], 0xfff9
jmp 0x10035269
push dword [ebp - 0x24]
lea ecx, [ebp - 0x2e0]
call fcn.1001abab
cmp dword [eax], 0
jne 0x10035417
push 0
lea ecx, [ebp - 0x2e0]
call fcn.1001abab
cmp dword [eax], 0
jne 0x100352c7
mov dword [ebp - 0x63c], 1
jmp 0x100352ce
and dword [ebp - 0x63c], 0
push dword [ebp - 0x24]
lea ecx, [ebp - 0x2e0]
call fcn.1001abab
mov esi, eax
push 0
lea ecx, [ebp - 0x2e0]
call fcn.1001abab
mov eax, dword [eax]
cmp eax, dword [esi]
jne 0x100352fd
mov dword [ebp - 0x6ac], 1
jmp 0x10035304
and dword [ebp - 0x6ac], 0
cmp dword [ebp - 0x6ac], 0xd5feaf86
jne 0x1003531c
mov dword [ebp - 0x45c], 1
jmp 0x10035323
and dword [ebp - 0x45c], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x45c], eax
je 0x1003534a
push dword [ebp - 0x24]
lea ecx, [ebp - 0x2e0]
call fcn.1001abab
cmp dword [eax], 0
jne 0x1003534a
and dword [ebp - 0x59c], 0
jmp 0x10035354
mov dword [ebp - 0x59c], 1
cmp dword [ebp - 0x59c], 5
jle 0x10035369
mov dword [ebp - 0x464], 1
jmp 0x10035370
and dword [ebp - 0x464], 0
push 0
lea ecx, [ebp - 0x2e0]
call fcn.1001abab
mov ecx, dword [ebp - 0x464]
cmp ecx, dword [eax]
je 0x10035393
mov dword [ebp - 0x338], 1
jmp 0x1003539a
and dword [ebp - 0x338], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x338]
mov dword [ebp + eax - 0xdd4], ecx
mov eax, dword [ebp - 0x63c]
cmp eax, dword [ebp - 0x338]
jle 0x100353c7
mov dword [ebp - 0x46c], 1
jmp 0x100353ce
and dword [ebp - 0x46c], 0
push dword [ebp - 0x24]
lea ecx, [ebp - 0x2e0]
call fcn.1001abab
mov ecx, dword [ebp - 0x46c]
add ecx, dword [eax]
mov dword [ebp - 0x98], ecx
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0xba4], eax
push 0
lea ecx, [ebp - 0x2e0]
call fcn.1001abab
mov eax, dword [ebp - 0x98]
cmp eax, dword [ebp - 0x24]
jne 0x10035417
and dword [ebp - 0x5a4], 0
jmp 0x10035421
mov dword [ebp - 0x5a4], 1
mov eax, dword [ebp - 0x5a4]
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x98], 0
jmp 0x10035446
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0
jg 0x1003548b
mov dword [ebp - 0x138], 0
jmp 0x10035468
mov eax, dword [ebp - 0x138]
dec eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0
jl 0x10035489
push 0
push 0x73a8
push 0x171b
push 0
call fcn.100208f4
add esp, 0x10
jmp 0x1003545b
jmp 0x10035439
jmp 0x10035238
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x2e0]
call fcn.1001ab8f
mov dword [ebp - 0x68], 0
jmp 0x100354af
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 3
jge 0x100354cb
push dword [ebp - 0x68]
lea ecx, [ebp - 0x9a8]
call fcn.1001abab
mov dword [eax], 0xc93b
jmp 0x100354a8
mov dword [ebp - 0x118], 0xffffffff
push 3
lea ecx, [ebp - 0x35c]
call fcn.1001ab0d
mov byte [ebp - 4], 0x14
mov dword [ebp - 0x5ac], 0xfffffff6
mov dword [ebp - 0xbac], 5
mov dword [ebp - 0x28c], 0
jmp 0x10035513
mov eax, dword [ebp - 0x28c]
inc eax
mov dword [ebp - 0x28c], eax
cmp dword [ebp - 0x28c], 3
jge 0x10035535
push dword [ebp - 0x28c]
lea ecx, [ebp - 0x35c]
call fcn.1001abab
mov dword [eax], 0x4571
jmp 0x10035506
mov dword [ebp - 0x118], 0
jmp 0x1003554e
mov eax, dword [ebp - 0x118]
dec eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0xffffffea
jle 0x100357da
mov dword [ebp - 0x10c], 0xfffffff9
push 3
lea ecx, [ebp - 0x9d4]
call fcn.1001ab0d
mov byte [ebp - 4], 0x15
mov dword [ebp - 0x74], 0
jmp 0x10035586
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 3
jge 0x100355a2
push dword [ebp - 0x74]
lea ecx, [ebp - 0x9d4]
call fcn.1001abab
mov dword [eax], 0xa4b38b4b
jmp 0x1003557f
mov dword [ebp - 0x74], 0
jmp 0x100355b2
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 1
jge 0x100355c8
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0x11c], 0xffffffff
jmp 0x100355ab
mov dword [ebp - 0x10c], 2
jmp 0x100355e1
mov eax, dword [ebp - 0x10c]
dec eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0
jl 0x1003562f
mov dword [ebp - 0x98c], 0
push 0x683a
push 1
lea eax, [ebp - 0x35c]
push eax
lea eax, [ebp - 0x5ac]
push eax
lea eax, [ebp - 0x98c]
push eax
lea eax, [ebp - 0x10c]
push eax
push 0x503b
push 0
lea eax, [ebp - 0x118]
push eax
call fcn.100209b4
add esp, 0x24
jmp 0x100355d4
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0xbb4], eax
xor eax, eax
inc eax
je 0x10035670
push 0
lea ecx, [ebp - 0x35c]
call fcn.1001abab
cmp dword [eax], 0
je 0x10035670
push 1
lea ecx, [ebp - 0x9d4]
call fcn.1001abab
cmp dword [eax], 0
je 0x10035670
mov dword [ebp - 0x474], 1
jmp 0x10035677
and dword [ebp - 0x474], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x11c]
cmp dword [ebp - 0x474], eax
jl 0x10035698
mov dword [ebp - 0x688], 1
jmp 0x1003569f
and dword [ebp - 0x688], 0
cmp dword [ebp - 0x688], 0xfffffffa
jne 0x100356b4
mov dword [ebp - 0x47c], 1
jmp 0x100356bb
and dword [ebp - 0x47c], 0
push 1
lea ecx, [ebp - 0x35c]
call fcn.1001abab
mov ecx, dword [ebp - 0x47c]
cmp ecx, dword [eax]
jg 0x100356e4
cmp dword [ebp - 0x5ac], 0
jne 0x100356e4
and dword [ebp - 0x484], 0
jmp 0x100356ee
mov dword [ebp - 0x484], 1
push 0
lea ecx, [ebp - 0x35c]
call fcn.1001abab
mov eax, dword [eax]
cmp eax, dword [ebp - 0x484]
jle 0x10035711
mov dword [ebp - 0x644], 1
jmp 0x10035718
and dword [ebp - 0x644], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x11c]
cmp dword [ebp - 0x644], eax
jle 0x10035739
mov dword [ebp - 0x7bc], 1
jmp 0x10035740
and dword [ebp - 0x7bc], 0
push 2
lea ecx, [ebp - 0x35c]
call fcn.1001abab
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x11c], 0
jne 0x1003576b
xor eax, eax
inc eax
jne 0x1003576b
and dword [ebp - 0x48c], 0
jmp 0x10035775
mov dword [ebp - 0x48c], 1
push 1
lea ecx, [ebp - 0x9d4]
call fcn.1001abab
mov ecx, dword [ebp - 0x48c]
mov dword [eax], ecx
push 0
lea ecx, [ebp - 0x35c]
call fcn.1001abab
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x11c]
mov dword [ebp - 0xbbc], eax
push 4
pop eax
imul esi, eax, 0
push 1
lea ecx, [ebp - 0x35c]
call fcn.1001abab
mov eax, dword [eax]
mov dword [ebp + esi - 0x11c], eax
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x9d4]
call fcn.1001ab8f
jmp 0x10035541
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x35c]
call fcn.1001ab8f
mov dword [ebp - 0x68], 0
jmp 0x100357f9
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 2
jge 0x1003580f
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0xb24], 0xed3c15d
jmp 0x100357f2
mov dword [ebp - 0x124], 0xffffffff
mov dword [ebp - 0x3c], 1
mov dword [ebp - 0x12c], 0x53494abc
mov dword [ebp - 0x948], 0xdb756fd8
mov dword [ebp - 0x54], 0x6552ded1
mov dword [ebp - 0x5b4], 0x3c52
mov dword [ebp - 0x7c4], 0x1000b358
cmp dword [ebp - 0x5b4], 0x3e6f
jle 0x10035966
and dword [ebp - 0x1dc], 0
jmp 0x10035875
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 0x10db
jge 0x10035966
and dword [ebp - 0x1d4], 0
jmp 0x1003589b
mov eax, dword [ebp - 0x1d4]
inc eax
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 0x5416
jge 0x10035961
and dword [ebp - 0x254], 0
jmp 0x100358c1
mov eax, dword [ebp - 0x254]
inc eax
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 0x7c63
jge 0x1003595c
and dword [ebp - 0x2ac], 0
jmp 0x100358e7
mov eax, dword [ebp - 0x2ac]
inc eax
mov dword [ebp - 0x2ac], eax
cmp dword [ebp - 0x2ac], 0x3a70
jge 0x10035957
mov eax, dword [ebp - 0x1d4]
imul eax, dword [ebp - 0x254]
or eax, dword [ebp - 0x1dc]
or eax, dword [ebp - 0x2ac]
cdq
mov dword [ebp - 0x820], eax
mov dword [ebp - 0x81c], edx
push dword [ebp - 0x81c]
push dword [ebp - 0x820]
lea ecx, [ebp - 0xee8]
call fcn.1000d6fa
pop ecx
pop ecx
mov dword [ebp - 0x8f0], eax
mov ecx, dword [ebp - 0x8f0]
call fcn.1001a8bc
push eax
call fcn.10049b86
pop ecx
lea ecx, [ebp - 0xee8]
call fcn.1001a8b2
jmp 0x100358da
jmp 0x100358b4
jmp 0x1003588e
jmp 0x10035868
mov byte [ebp - 4], 0x16
cmp dword [ebp - 0x5b4], 0x3b93
jge 0x10035982
push dword [ebp - 0x7c4]
call fcn.10049b86
pop ecx
jmp 0x1003599e
mov dword [ebp - 4], 0x11
jmp 0x100359ae
mov dword [ebp - 0x1e4], 0
jmp 0x100359c7
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 1
jge 0x100359e3
mov eax, dword [ebp - 0x1e4]
mov dword [ebp + eax*4 - 0xbc4], 0x444c
jmp 0x100359ba
push 0
push 0x12e9
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x124]
push eax
push 0x2f06
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x948]
push eax
lea eax, [ebp - 0x12c]
push eax
push 0x3675
call fcn.100256de
add esp, 0x24
mov dword [ebp - 0x3c], 0x42e5f0e7
cmp dword [ebp - 0x3c], 0
je 0x10035bd1
mov dword [ebp - 0xad0], 0
mov dword [ebp - 0xacc], 0
mov dword [ebp - 0xac8], 0
mov dword [ebp - 0xac4], 0
mov dword [ebp - 0x494], 0x457
mov dword [ebp - 0x7cc], 0x1000b3c8
cmp dword [ebp - 0x494], 0x5e0
jle 0x10035aef
call dword [sym.imp.KERNEL32.dll_GetConsoleCP]
and dword [ebp - 0x25c], 0
jmp 0x10035a8e
mov eax, dword [ebp - 0x25c]
inc eax
mov dword [ebp - 0x25c], eax
cmp dword [ebp - 0x25c], 0x6649
jge 0x10035aef
and dword [ebp - 0x1ec], 0
jmp 0x10035ab0
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 0x3ba1
jge 0x10035aed
mov eax, dword [ebp - 0x25c]
add eax, dword [ebp - 0x1ec]
cdq
mov dword [ebp - 0x82c], eax
mov dword [ebp - 0x828], edx
push dword [ebp - 0x828]
push dword [ebp - 0x82c]
mov ecx, 0x106086b8
call fcn.1001a8dc
jmp 0x10035aa3
jmp 0x10035a81
mov dword [ebp - 0xbcc], 0xe74bb9ce
mov byte [ebp - 4], 0x18
cmp dword [ebp - 0x494], 0x84
jge 0x10035b19
mov edx, dword [ebp - 0x7cc]
mov ecx, 0x106086b8
call fcn.1001cde7
jmp 0x10035b35
mov dword [ebp - 4], 0x11
jmp 0x10035b45
mov dword [ebp - 0x3c], 0
jmp 0x10035b55
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0x1c
jne 0x10035bcc
mov dword [ebp - 0x8f8], 3
mov dword [ebp - 0x124], 3
jmp 0x10035b7e
mov eax, dword [ebp - 0x124]
dec eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0
jl 0x10035ba4
push 0x1ce0
lea eax, [ebp - 0x8f8]
push eax
push 0
push 0x2ab1
call fcn.100331fa
add esp, 0x10
jmp 0x10035b71
mov dword [ebp - 0x54], 0
jmp 0x10035bb4
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 4
jge 0x10035bca
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0xad0], 0
jmp 0x10035bad
jmp 0x10035b4e
jmp 0x10035c52
mov dword [ebp - 0x12c], 0
jmp 0x10035bea
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0
jg 0x10035c52
mov dword [ebp - 0x54], 0
jmp 0x10035c03
mov eax, dword [ebp - 0x54]
dec eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0
jl 0x10035c50
mov dword [ebp - 0x3c], 0
jmp 0x10035c19
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
jg 0x10035c4e
mov byte [ebp - 0xc9], 0
movzx eax, byte [ebp - 0xc9]
test eax, eax
je 0x10035c4c
push 0
push 0
push 0x4592
push 0x15d8
push 0x11a1
call fcn.1002e665
add esp, 0x14
jmp 0x10035c12
jmp 0x10035bfc
jmp 0x10035bdd
mov dword [ebp - 0xe8], 0
jmp 0x10035c6b
cmp dword [ebp - 0xe8], 2
jg 0x10036bf5
push 2
lea ecx, [ebp - 0x6d8]
call fcn.1001ab0d
mov byte [ebp - 4], 0x1a
mov dword [ebp - 0xf4], 1
mov dword [ebp - 0x4a4], 1
mov dword [ebp - 0xa4c], 0x4486cae8
mov dword [ebp - 0xa48], 0x4486cae8
mov dword [ebp - 0xa44], 0x4486cae8
mov dword [ebp - 0xa40], 0x4486cae8
lea ecx, [ebp - 0x2e1]
call fcn.1001abba
push eax
lea eax, [ebp - 0xa3c]
push eax
lea eax, [ebp - 0xa4c]
push eax
lea ecx, [ebp - 0xe10]
call fcn.1001abbd
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xa9c]
call fcn.1001ab69
mov byte [ebp - 4], 0x1b
mov dword [ebp - 0xaf0], 0
mov dword [ebp - 0xaec], 0
mov dword [ebp - 0xae8], 0
mov dword [ebp - 0xae4], 0
push 1
push 0x3527
lea eax, [ebp - 0xbd4]
push eax
push 0xf99
push 0
lea eax, [ebp - 0x6d8]
push eax
push 1
push 0x3fd9
push 0x63f5
push 0x3145
call fcn.1002f8b0
add esp, 0x28
mov dword [ebp - 0xf4], 0
jmp 0x10035d74
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 1
jg 0x10036007
mov dword [ebp - 0x64], 0xf2000252
mov dword [ebp - 0x104], 0xfffffff7
mov dword [ebp - 0x294], 0
jmp 0x10035dab
mov eax, dword [ebp - 0x294]
inc eax
mov dword [ebp - 0x294], eax
cmp dword [ebp - 0x294], 1
jge 0x10035dc7
mov eax, dword [ebp - 0x294]
mov dword [ebp + eax*4 - 0x9c8], 0x94e8fe75
jmp 0x10035d9e
mov dword [ebp - 0x64], 1
jmp 0x10035dd7
mov eax, dword [ebp - 0x64]
dec eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0
jl 0x10036002
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x48], 1
jmp 0x10035df8
mov eax, dword [ebp - 0x48]
dec eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
jl 0x10035fbc
push dword [ebp - 0x64]
lea ecx, [ebp - 0x6d8]
call fcn.1001abab
cmp dword [eax], 0xd177cce4
jne 0x10035e24
mov dword [ebp - 0x6bc], 1
jmp 0x10035e2b
and dword [ebp - 0x6bc], 0
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x6bc], eax
jge 0x10035e42
mov dword [ebp - 0x49c], 1
jmp 0x10035e49
and dword [ebp - 0x49c], 0
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x49c], eax
jne 0x10035e60
mov dword [ebp - 0x5bc], 1
jmp 0x10035e67
and dword [ebp - 0x5bc], 0
mov eax, dword [ebp - 0x5bc]
mov dword [ebp - 0x4a4], eax
mov eax, dword [ebp - 0x4a4]
sub eax, 0x18d3cb34
je 0x10035e9f
push dword [ebp - 0x48]
lea ecx, [ebp - 0x6d8]
call fcn.1001abab
cmp dword [eax], 0
je 0x10035e9f
mov dword [ebp - 0x64c], 1
jmp 0x10035ea6
and dword [ebp - 0x64c], 0
mov eax, dword [ebp - 0x64c]
sub eax, dword [ebp - 0x64]
jne 0x10035ec3
cmp dword [ebp - 0xf4], 0
jne 0x10035ec3
and dword [ebp - 0x7d4], 0
jmp 0x10035ecd
mov dword [ebp - 0x7d4], 1
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0xbdc], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x4ac], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x4ac]
mov dword [ebp + eax - 0x9c8], ecx
push dword [ebp - 0x48]
lea ecx, [ebp - 0x6d8]
call fcn.1001abab
mov ecx, dword [ebp - 0x4ac]
add ecx, dword [eax]
cmp ecx, 4
jl 0x10035f19
mov dword [ebp - 0x5c4], 1
jmp 0x10035f20
and dword [ebp - 0x5c4], 0
push dword [ebp - 0x64]
lea ecx, [ebp - 0x6d8]
call fcn.1001abab
mov eax, dword [eax]
mov dword [ebp - 0x104], eax
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0xbe4], eax
push 1
lea ecx, [ebp - 0xa9c]
call fcn.1001abab
mov ecx, dword [ebp - 0x5c4]
mov dword [eax], ecx
push dword [ebp - 0x48]
lea ecx, [ebp - 0x6d8]
call fcn.1001abab
push 1
lea ecx, [ebp - 0xa9c]
call fcn.1001abab
mov esi, eax
push dword [ebp - 0x48]
lea ecx, [ebp - 0x6d8]
call fcn.1001abab
mov eax, dword [eax]
cmp eax, dword [esi]
jne 0x10035f9a
cmp dword [ebp - 0xf4], 0
jne 0x10035f9a
and dword [ebp - 0x4b4], 0
jmp 0x10035fa4
mov dword [ebp - 0x4b4], 1
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x4b4]
mov dword [ebp + eax - 0xaf0], ecx
jmp 0x10035df1
mov dword [ebp - 0x104], 0
jmp 0x10035fd5
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0xa
jne 0x10035ffd
push 0
push 0x587e
push 0x71df
push 1
push 0
push 0x3c35
call fcn.1002ec5f
add esp, 0x18
jmp 0x10035fc8
jmp 0x10035dd0
jmp 0x10035d67
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0xa9c]
call fcn.1001ab8f
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x6d8]
call fcn.1001ab8f
mov dword [ebp - 0x1f4], 0
jmp 0x1003603e
mov eax, dword [ebp - 0x1f4]
inc eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 1
jge 0x1003605a
mov eax, dword [ebp - 0x1f4]
mov dword [ebp + eax*4 - 0x7dc], 0xbb4ebb0c
jmp 0x10036031
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x7dc], 0xefc07e17
mov dword [ebp - 0x80], 0
mov dword [ebp - 0xbec], 0
mov dword [ebp - 0xbf4], 0xe294b58f
push 1
lea ecx, [ebp - 0xc8c]
call fcn.1001ab0d
mov byte [ebp - 4], 0x1c
mov dword [ebp - 0x99c], 0xa4b1f059
mov dword [ebp - 0x2c], 0
jmp 0x100360b1
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x100360c7
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x6a4], 0
jmp 0x100360aa
mov dword [ebp - 0x2c], 0
jmp 0x100360d7
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jge 0x100360ed
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0xb1c], 0x9b03be46
jmp 0x100360d0
mov dword [ebp - 0x2c], 0
jmp 0x100360fd
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jge 0x10036119
push dword [ebp - 0x2c]
lea ecx, [ebp - 0xc8c]
call fcn.1001abab
mov dword [eax], 2
jmp 0x100360f6
mov dword [ebp - 0x80], 0
jmp 0x10036129
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 2
jg 0x100364d9
mov dword [ebp - 0x14], 1
mov dword [ebp - 0x264], 0
jmp 0x10036153
mov eax, dword [ebp - 0x264]
inc eax
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 3
jge 0x1003616f
mov eax, dword [ebp - 0x264]
mov dword [ebp + eax*4 - 0xdf8], 0x611fb8eb
jmp 0x10036146
mov dword [ebp - 0x14], 0
jmp 0x1003617f
cmp dword [ebp - 0x14], 2
jg 0x100364c4
mov dword [ebp - 0xd70], 0xfffffff8
mov dword [ebp - 0xd6c], 0xfffffff8
mov dword [ebp - 0xd68], 0xfffffff8
mov dword [ebp - 0xd64], 0xfffffff8
mov dword [ebp - 0x690], 0x567e
mov dword [ebp - 0x7e8], 0x1000b444
cmp dword [ebp - 0x690], 0x59ff
jle 0x100362b9
and dword [ebp - 0x204], 0
jmp 0x100361eb
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 0x7383
jge 0x100362af
and dword [ebp - 0x1fc], 0
jmp 0x10036211
cmp dword [ebp - 0x1fc], 0x4a10
jge 0x100362aa
and dword [ebp - 0x2bc], 0
jmp 0x10036237
cmp dword [ebp - 0x2bc], 0x4c8e
jge 0x100362a5
jmp 0x100361de
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
mov byte [ebp - 0xb8], 0
mov byte [ebp - 4], 0x1d
cmp dword [ebp - 0x690], 0x5389
jge 0x100362dc
push dword [ebp - 0x7e8]
call fcn.10049b86
pop ecx
jmp 0x100362f8
mov dword [ebp - 4], 0x1c
jmp 0x10036308
push 1
push 0x5cdd
push 0x2a40
push 0
lea eax, [ebp - 0xb8]
push eax
push 0x44cc
call fcn.1002138a
add esp, 0x18
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
mov ecx, dword [ebp + ecx*4 - 0x6a4]
cmp ecx, dword [ebp + eax*4 - 0x6a4]
jne 0x1003634c
mov dword [ebp - 0x950], 1
jmp 0x10036353
and dword [ebp - 0x950], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x6a4], 0
jne 0x1003636f
cmp dword [ebp - 0x14], 0
jne 0x1003636f
mov dword [ebp - 0x7f4], 1
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
cmp ecx, dword [ebp + eax*4 - 0x6a4]
jne 0x10036394
mov eax, dword [ebp - 0x14]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xb1c], eax
jmp 0x10036122
mov dword [ebp - 0x80], 8
jmp 0x100364e9
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0x1c
jl 0x10036533
push 0x47a7
push 0
push 0x54dc
push 0x70ac
push 0x2015
push 0x39c4
push 0x13bf
push 0x347f
push 1
push 0x64b7
push 0
push 0x902
lea eax, [ebp - 0x99c]
push eax
call fcn.1002ce2e
add esp, 0x34
jmp 0x100364e2
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0xc8c]
call fcn.1001ab8f
mov dword [ebp - 0x84], 5
mov dword [ebp - 0x26c], 0
jmp 0x10036565
mov eax, dword [ebp - 0x26c]
inc eax
mov dword [ebp - 0x26c], eax
cmp dword [ebp - 0x26c], 1
jge 0x10036581
mov eax, dword [ebp - 0x26c]
mov dword [ebp + eax*4 - 0x80c], 1
jmp 0x10036558
mov dword [ebp - 0x84], 0
jmp 0x1003659a
cmp dword [ebp - 0x84], 0
jl 0x1003673f
mov dword [ebp - 0x20c], 0
jmp 0x100365c0
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 1
jge 0x100365dc
mov eax, dword [ebp - 0x20c]
mov dword [ebp + eax*4 - 0x134], 0x4074dd03
jmp 0x100365b3
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x134], 0
jmp 0x1003660a
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x134], 0
jl 0x1003673a
mov dword [ebp - 0x29c], 8
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x134]
cmp dword [ebp + eax*4 - 0x80c], 0
je 0x10036644
jmp 0x1003658d
mov dword [ebp - 0x84], 0
jmp 0x10036758
cmp dword [ebp - 0x84], 0
jl 0x100367ea
mov dword [ebp - 0x174], 0x3ab1943c
mov dword [ebp - 0x174], 0
jmp 0x10036788
cmp dword [ebp - 0x174], 0
jl 0x100367b3
mov byte [ebp - 0xb5], 0
movzx eax, byte [ebp - 0xb5]
test eax, eax
je 0x100367b1
mov byte [ebp - 0xcb], 0
movzx eax, byte [ebp - 0xcb]
test eax, eax
je 0x100367e5
mov byte [ebp - 0xd1], 0
push 3
lea ecx, [ebp - 0x6cc]
call fcn.1001ab0d
mov byte [ebp - 4], 0x1f
mov dword [ebp - 0x320], 0x246c3825
mov dword [ebp - 0xe0], 0
lea eax, [ebp - 0x6cc]
push eax
push 0
lea eax, [ebp - 0x50]
push eax
call fcn.1002a3d6
add esp, 0xc
mov dword [ebp - 0x50], 0
jmp 0x1003683b
cmp dword [ebp - 0x50], 1
jge 0x10036851
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x2f8], 0xfffd
jmp 0x10036834
mov dword [ebp - 0x50], 0
jmp 0x10036861
push 2
lea ecx, [ebp - 0x9a8]
call fcn.1001abab
mov eax, dword [eax]
mov dword [ebp - 0xe8], eax
mov esi, dword [ebp - 0xe8]
push 1
lea ecx, [ebp - 0x9a8]
call fcn.1001abab
cmp dword [eax], esi
jne 0x10036c2d
mov dword [ebp - 0x4e4], 1
jmp 0x10036c34
and dword [ebp - 0x4e4], 0
push 0
lea ecx, [ebp - 0x9a8]
call fcn.1001abab
mov ecx, dword [ebp - 0x4e4]
cmp ecx, dword [eax]
je 0x10036c57
mov dword [ebp - 0x65c], 1
jmp 0x10036c5e
and dword [ebp - 0x65c], 0
mov eax, dword [ebp - 0x65c]
neg eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xb24], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9a8]
call fcn.1001ab8f
mov dword [ebp - 0xc54], 6
mov dword [ebp - 0x888], 0xb7c7ce53
mov dword [ebp - 0xc5c], 0xfffffffd
mov dword [ebp - 0xc64], 9
mov dword [ebp - 0xc6c], 7
mov dword [ebp - 0xd1c], 0xd3c891c5
mov dword [ebp - 0xd24], 0xfffffff6
mov dword [ebp - 0xd84], 1
mov dword [ebp - 0xd80], 1
mov dword [ebp - 0xd7c], 1
mov dword [ebp - 0xd78], 1
mov dword [ebp - 0x4ec], 0x7c1188e1
mov eax, dword [ebp - 0x4ec]
dec eax
mov dword [ebp - 0x4ec], eax
mov dword [ebp - 0x888], 9
cmp dword [ebp - 0x304], 0
jle 0x10039e70
mov dword [ebp - 0xd2c], 0xffff
mov byte [ebp - 0x85], 0
movzx eax, byte [ebp - 0x85]
test eax, eax
je 0x10036d5a
push 0x44fc
push 0x6f8a
push 0
push 0x7a00
push 0x225f
push 0
call fcn.1001f98e
add esp, 0x18
mov byte [ebp - 0xbb], 0
movzx eax, byte [ebp - 0xbb]
test eax, eax
je 0x10036d85
push 0x6035
push 0x13d7
push 0
push 0x2211
call fcn.1002dd04
add esp, 0x10
push 4
lea ecx, [ebp - 0xa78]
call fcn.1001ab0d
mov dword [ebp - 4], 0x21
mov dword [ebp - 0x300], 0xe13a6c9c
mov dword [ebp - 0x5e4], 0xb44c
mov dword [ebp - 0x4fc], 1
mov dword [ebp - 0x308], 5
mov dword [ebp - 0x30], 0
jmp 0x10036dd1
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jge 0x10036de7
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x344], 0x9cec79e6
jmp 0x10036dca
mov dword [ebp - 0x30], 0
jmp 0x10036df7
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 4
jge 0x10036e13
push dword [ebp - 0x30]
lea ecx, [ebp - 0xa78]
call fcn.1001abab
mov dword [eax], 0x3371247a
jmp 0x10036df0
mov dword [ebp - 0x30], 0
jmp 0x10036e23
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 1
jge 0x10036e39
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x830], 0
jmp 0x10036e1c
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x344]
mov dword [ebp - 0x824], eax
mov eax, dword [ebp - 0x300]
mov dword [ebp - 0x88c], eax
mov eax, dword [ebp - 0x300]
dec eax
mov dword [ebp - 0x300], eax
mov eax, dword [ebp - 0x824]
cmp eax, dword [ebp - 0x88c]
jg 0x10036e7f
mov dword [ebp - 0x324], 1
jmp 0x10036e86
and dword [ebp - 0x324], 0
push 1
lea ecx, [ebp - 0xa78]
call fcn.1001abab
mov ecx, dword [ebp - 0x324]
mov dword [eax], ecx
mov eax, dword [ebp - 0x324]
mov dword [ebp - 0x5e4], eax
cmp dword [ebp - 0x5e4], 0
jne 0x10036ebc
mov dword [ebp - 0x4f4], 1
jmp 0x10036ec3
and dword [ebp - 0x4f4], 0
cmp dword [ebp - 0x4f4], 5
jge 0x10036ed8
mov dword [ebp - 0x600], 1
jmp 0x10036edf
and dword [ebp - 0x600], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x344]
mov dword [ebp - 0xd34], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x344]
mov dword [ebp - 0xd3c], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x344]
cmp ecx, dword [ebp + eax - 0x344]
jg 0x10036f2d
mov dword [ebp - 0x5fc], 1
jmp 0x10036f34
and dword [ebp - 0x5fc], 0
mov eax, dword [ebp - 0x5fc]
mov dword [ebp - 0x4fc], eax
mov eax, dword [ebp - 0x4fc]
mov dword [ebp - 0xd44], eax
mov eax, dword [ebp - 0x308]
mov dword [ebp - 0xd4c], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x344], 0xb15b45be
jb 0x10036f76
mov dword [ebp - 0x5ec], 1
jmp 0x10036f7d
and dword [ebp - 0x5ec], 0
mov eax, dword [ebp - 0x5ec]
sub eax, dword [ebp - 0x308]
push 4
pop ecx
imul ecx, ecx, 0
cmp dword [ebp + ecx - 0x344], eax
je 0x10036fa4
mov dword [ebp - 0x504], 1
jmp 0x10036fab
and dword [ebp - 0x504], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x504]
add ecx, dword [ebp + eax - 0x344]
mov dword [ebp - 0x50c], ecx
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x50c]
mov dword [ebp + eax - 0x830], ecx
mov eax, dword [ebp - 0x600]
imul eax, dword [ebp - 0x50c]
cmp eax, dword [ebp - 0x308]
jg 0x10036ff8
mov dword [ebp - 0x894], 1
jmp 0x10036fff
and dword [ebp - 0x894], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x344]
mov dword [ebp - 0xd54], eax
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x344], 0x4a0435e4
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa78]
call fcn.1001ab8f
push 1
lea ecx, [ebp - 0x164]
call fcn.1001ab0d
mov dword [ebp - 4], 0x22
push 3
lea ecx, [ebp - 0x734]
call fcn.1001ab0d
mov byte [ebp - 4], 0x23
mov dword [ebp - 0x190], 0xce404d4
mov dword [ebp - 0xb14], 0x1191
push 0x564a
lea eax, [ebp - 0x164]
push eax
push 0x420d
push 0x6fdf
push 0x4770
push 1
push 0x207b
push 0
lea eax, [ebp - 0x44]
push eax
call fcn.1001fd5d
add esp, 0x24
mov dword [ebp - 0x44], 0
jmp 0x100370aa
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 3
jge 0x100370c6
push dword [ebp - 0x44]
lea ecx, [ebp - 0x734]
call fcn.1001abab
mov dword [eax], 0x30688cdf
jmp 0x100370a3
mov dword [ebp - 0x44], 0
jmp 0x100370d6
cmp dword [ebp - 0x44], 2
jge 0x100370ec
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x6ec], 0x96bc712b
jmp 0x100370cf
push 0
lea ecx, [ebp - 0x164]
call fcn.1001abab
push 0
lea ecx, [ebp - 0x164]
call fcn.1001abab
mov esi, eax
push 0
lea ecx, [ebp - 0x164]
call fcn.1001abab
mov edi, dword [eax]
add edi, dword [esi]
push 0
lea ecx, [ebp - 0x164]
call fcn.1001abab
cmp dword [eax], edi
jne 0x10037136
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret