Function at 0x10045e9e
Capabilities:
Contain obfuscated stackstrings
Create directory
Enumerate pe sections
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100868cd
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xaf0
and dword [ebp - 0x18], 0
movzx eax, byte [ebp + 8]
test eax, eax
je 0x1004ac0c
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x2bc], 0x6eb6
mov dword [ebp - 0x5e8], 0xad901516
mov dword [ebp - 0x40], 0
jmp 0x10045ef6
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 4
jge 0x10045f0c
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x7d0], 0x841b3c69
jmp 0x10045eef
mov dword [ebp - 0x40], 0
jmp 0x10045f1c
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 1
jge 0x10045f32
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x5c0], 0xe96f8f9e
jmp 0x10045f15
mov dword [ebp - 0x40], 0
jmp 0x10045f42
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 3
jge 0x10045f58
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x9b0], 0xd3cd3624
jmp 0x10045f3b
mov byte [ebp - 0xd3], 0
movzx eax, byte [ebp - 0xd3]
test eax, eax
je 0x10045f78
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumCalendarInfoW]
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x7d0], 0xfffffff4
jmp 0x10045fa3
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x7d0]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x7d0], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x7d0], 0xfffffff5
je 0x10046167
mov dword [ebp - 0x294], 0xffffffff
mov dword [ebp - 0x19c], 0x881826fb
mov eax, 0x9c1464f1
test eax, eax
je 0x1004610b
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x7d0], 0xfffb
jbe 0x10045ff6
mov dword [ebp - 0x3e8], 1
jmp 0x10045ffd
and dword [ebp - 0x3e8], 0
cmp dword [ebp - 0x3e8], 0xffffffff
jg 0x10046012
mov dword [ebp - 0x7a8], 1
jmp 0x10046019
and dword [ebp - 0x7a8], 0
cmp dword [ebp - 0x294], 0
jne 0x1004603b
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x5c0], 0
jne 0x1004603b
and dword [ebp - 0x5c8], 0
jmp 0x10046045
mov dword [ebp - 0x5c8], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5c0]
cmp dword [ebp - 0x5c8], eax
jg 0x1004606c
cmp dword [ebp - 0x294], 0
jne 0x1004606c
and dword [ebp - 0x5d0], 0
jmp 0x10046076
mov dword [ebp - 0x5d0], 1
cmp dword [ebp - 0x5d0], 8
jg 0x1004608b
mov dword [ebp - 0x5d8], 1
jmp 0x10046092
and dword [ebp - 0x5d8], 0
mov eax, dword [ebp - 0x5d8]
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 0
jne 0x100460b3
mov dword [ebp - 0x5e0], 1
jmp 0x100460ba
and dword [ebp - 0x5e0], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x7d0]
add eax, dword [ebp - 0x5e0]
mov dword [ebp - 0x5e8], eax
je 0x100460e9
cmp dword [ebp - 0x19c], 0
je 0x100460e9
mov dword [ebp - 0x608], 1
jmp 0x100460f0
and dword [ebp - 0x608], 0
mov eax, dword [ebp - 0x294]
cmp dword [ebp - 0x19c], 0
je 0x1004610b
mov dword [ebp - 0x610], 1
jmp 0x10046112
and dword [ebp - 0x610], 0
mov eax, dword [ebp - 0x2bc]
mov ecx, dword [ebp - 0x610]
mov edx, dword [ebp - 0x2bc]
inc edx
mov dword [ebp - 0x2bc], edx
cmp eax, ecx
jne 0x10046144
mov eax, 0xff06
test eax, eax
je 0x10046144
mov dword [ebp - 0x618], 1
jmp 0x1004614b
and dword [ebp - 0x618], 0
imul eax, dword [ebp - 0x618], 0x2b35
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x9b0], eax
jmp 0x10045f8a
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x620], eax
mov dword [ebp - 0x100], 0xfffffffa
mov dword [ebp - 0x6fc], 1
mov dword [ebp - 0x6ec], 3
mov dword [ebp - 0x6f4], 0x4ab462a7
mov dword [ebp - 0x100], 0
jmp 0x100461b1
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0x1a
jle 0x10046249
mov dword [ebp - 0x1f4], 0x29bf3901
mov dword [ebp - 0x1ec], 0
jmp 0x100461e1
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 2
jge 0x100461fd
mov eax, dword [ebp - 0x1ec]
mov dword [ebp + eax*4 - 0x9d0], 0x57ad
jmp 0x100461d4
mov dword [ebp - 0x1f4], 1
jmp 0x10046216
mov eax, dword [ebp - 0x1f4]
dec eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 0
jl 0x10046244
push 0x35e4
push 0x1e51
push 0
push 0x7ab1
push 0x3835
push 0x5e04
call fcn.10045a75
add esp, 0x18
jmp 0x10046209
jmp 0x100461a4
push 0x7389
lea eax, [ebp - 0x100]
push eax
push 0x6eb7
lea eax, [ebp - 0x6ec]
push eax
lea eax, [ebp - 0x6f4]
push eax
push 0
lea eax, [ebp - 0x6fc]
push eax
call fcn.10045c31
add esp, 0x1c
mov eax, dword [ebp - 0x620]
movzx eax, word [eax]
cmp eax, 0x5a4d
je 0x1004628e
jmp 0x1004ac16
mov dword [ebp - 0x88], 0
jmp 0x100462a7
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 1
jge 0x100462c3
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0x914], 0x5b57fd54
jmp 0x1004629a
mov dword [ebp - 0x88], 0
jmp 0x100462dc
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 1
jge 0x100462f8
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0x190], 6
jmp 0x100462cf
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x190], 0
jmp 0x10046326
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x190]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x190], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x190], 0
jg 0x1004636d
mov byte [ebp - 0xcf], 0
movzx eax, byte [ebp - 0xcf]
test eax, eax
je 0x1004636b
push 0x26af
push 1
push 0x3ea8
push 0x11db
push 0x3f06
push 0x493b
call fcn.10044a9e
add esp, 0x18
jmp 0x1004630b
mov eax, dword [ebp - 0x620]
mov ecx, dword [ebp - 0x4c]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0xb4], ecx
mov eax, dword [ebp - 0xb4]
cmp dword [eax], 0x4550
je 0x10046392
jmp 0x1004ac16
mov dword [ebp - 0x1dc], 0xffffffff
mov dword [ebp - 0x704], 0x37ad4351
mov byte [ebp - 0xce], 0
movzx eax, byte [ebp - 0xce]
test eax, eax
je 0x100463db
push 0x15c6
push 0x3828
push 0x55e0
push 0x4866
push 0x45a7
push 0
call fcn.10045b01
add esp, 0x18
mov dword [ebp - 0x1dc], 0xfffffff9
jmp 0x100463f4
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 0xd
jle 0x10046409
mov dword [ebp - 0x704], 0xdbed
jmp 0x100463e7
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xb4]
lea eax, [ecx + eax + 0x78]
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x68]
cmp dword [eax + 4], 0
jne 0x1004642a
jmp 0x1004ac16
and dword [ebp - 0x48], 0
mov eax, dword [ebp - 0xb4]
movzx eax, word [eax + 0x14]
mov ecx, dword [ebp - 0xb4]
lea eax, [ecx + eax + 0x18]
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0x950], 0xf3690f1d
mov dword [ebp - 0x8fc], 0xbd035c5
mov dword [ebp - 0x970], 0xfffffffd
mov dword [ebp - 0x82c], 0xffffffff
mov dword [ebp - 0x834], 0xeda58528
mov dword [ebp - 0x83c], 0xfffffff7
mov dword [ebp - 0x844], 0
mov dword [ebp - 0x84c], 0xb8c105a8
mov dword [ebp - 0x854], 0xfffffff6
mov dword [ebp - 0x38], 0
jmp 0x100464b2
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 4
jge 0x100464c8
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x824], 0xffffffff
jmp 0x100464ab
mov dword [ebp - 0x38], 0
jmp 0x100464d8
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 1
jge 0x100464ee
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x85c], 0xca7
jmp 0x100464d1
mov dword [ebp - 0x38], 0
jmp 0x100464fe
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 3
jge 0x10046514
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0xa84], 0
jmp 0x100464f7
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x824], 0xfffffff9
jmp 0x1004653f
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x824]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x824], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x824], 3
jl 0x100465e9
mov dword [ebp - 0x864], 0xa888
mov dword [ebp - 0x86c], 0
mov dword [ebp - 0x874], 1
mov dword [ebp - 0x8e0], 0x51d52aa0
mov dword [ebp - 0x8e8], 0xfffffffd
mov dword [ebp - 0x8f0], 0x62e65251
mov dword [ebp - 0x8f8], 0xd5fec46b
mov dword [ebp - 0x5f4], 0xf1fc
mov dword [ebp - 0x1e4], 0
jmp 0x100465bb
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 1
jge 0x100465d7
mov eax, dword [ebp - 0x1e4]
mov dword [ebp + eax*4 - 0x900], 1
jmp 0x100465ae
mov eax, dword [ebp - 0x5f4]
dec eax
mov dword [ebp - 0x5f4], eax
jmp 0x10046526
and dword [ebp - 0x2ac], 0
jmp 0x1004660e
mov eax, dword [ebp - 0x2ac]
inc eax
mov dword [ebp - 0x2ac], eax
mov eax, dword [ebp - 0xe0]
add eax, 0x28
mov dword [ebp - 0xe0], eax
mov eax, dword [ebp - 0xb4]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x2ac], eax
jge 0x1004668a
mov eax, dword [ebp - 0xe0]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x5cc], eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x5cc]
jb 0x10046685
mov eax, dword [ebp - 0xb4]
push dword [eax + 0x38]
mov eax, dword [ebp - 0xe0]
push dword [eax + 8]
call fcn.100448b8
pop ecx
pop ecx
add eax, dword [ebp - 0x5cc]
mov dword [ebp - 0x70c], eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x70c]
jae 0x10046685
lea eax, [ebp - 0xe0]
push eax
push 0
lea eax, [ebp - 0x48]
push eax
call fcn.10045169
add esp, 0xc
jmp 0x1004668a
jmp 0x100465f2
mov dword [ebp - 0x64], 0x3248c66
mov dword [ebp - 0x194], 0xffffffff
mov dword [ebp - 0xdc], 1
mov dword [ebp - 0x714], 0xfffffffd
mov dword [ebp - 0x74], 0
jmp 0x100466bf
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 2
jge 0x100466d5
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0x2d8], 0xc8210466
jmp 0x100466b8
mov dword [ebp - 0x74], 0
jmp 0x100466e5
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 2
jge 0x100466fb
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0x290], 0x5051dd2e
jmp 0x100466de
cmp dword [ebp - 0x64], 0
je 0x10046862
cmp dword [ebp - 0x64], 0xffffffff
jge 0x10046717
mov dword [ebp - 0x5b8], 1
jmp 0x1004671e
and dword [ebp - 0x5b8], 0
mov eax, dword [ebp - 0x5b8]
sub eax, dword [ebp - 0x64]
cmp eax, dword [ebp - 0x64]
jle 0x10046738
mov dword [ebp - 0x314], 1
jmp 0x1004673f
and dword [ebp - 0x314], 0
mov eax, dword [ebp - 0x314]
sub eax, dword [ebp - 0x64]
cmp eax, 0xca7b5cf1
jbe 0x1004675e
cmp dword [ebp - 0x64], 0
jne 0x1004675e
and dword [ebp - 0x4a4], 0
jmp 0x10046768
mov dword [ebp - 0x4a4], 1
cmp dword [ebp - 0x4a4], 0
ja 0x1004677d
mov dword [ebp - 0x31c], 1
jmp 0x10046784
and dword [ebp - 0x31c], 0
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x31c], eax
jg 0x1004679b
mov dword [ebp - 0x56c], 1
jmp 0x100467a2
and dword [ebp - 0x56c], 0
mov eax, dword [ebp - 0x64]
add eax, dword [ebp - 0x56c]
cmp eax, dword [ebp - 0x64]
je 0x100467bc
mov dword [ebp - 0x324], 1
jmp 0x100467c3
and dword [ebp - 0x324], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2d8]
add eax, dword [ebp - 0x324]
mov dword [ebp - 0x194], eax
mov eax, dword [ebp - 0x194]
push 4
pop ecx
shl ecx, 0
add eax, dword [ebp + ecx - 0x2d8]
je 0x10046802
or eax, 0xffffffff
je 0x10046802
mov dword [ebp - 0x4ac], 1
jmp 0x10046809
and dword [ebp - 0x4ac], 0
mov eax, dword [ebp - 0x64]
push 4
pop ecx
shl ecx, 0
mov edx, dword [ebp - 0x4ac]
sub edx, dword [ebp + ecx - 0x2d8]
imul eax, edx
cmp eax, 8
je 0x10046833
mov dword [ebp - 0x298], 1
jmp 0x1004683a
and dword [ebp - 0x298], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x298]
mov dword [ebp + eax - 0x290], ecx
cmp dword [ebp - 0x298], 0
je 0x10046862
mov dword [ebp - 0x32c], 1
jmp 0x10046869
and dword [ebp - 0x32c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2d8]
imul eax, dword [ebp - 0x32c]
mov ecx, 0xf43b
sub ecx, eax
mov dword [ebp - 0xdc], ecx
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x93c], eax
cmp dword [ebp - 0x194], 0x67268f57
jne 0x100468ae
mov dword [ebp - 0x61c], 1
jmp 0x100468b5
and dword [ebp - 0x61c], 0
mov eax, dword [ebp - 0xdc]
push 4
pop ecx
shl ecx, 0
add eax, dword [ebp + ecx - 0x290]
neg eax
cmp dword [ebp - 0x61c], eax
jle 0x100468de
mov dword [ebp - 0x334], 1
jmp 0x100468e5
and dword [ebp - 0x334], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x290]
imul eax, dword [ebp - 0x334]
cmp eax, 0xffffffff
je 0x1004690a
mov dword [ebp - 0x4b4], 1
jmp 0x10046911
and dword [ebp - 0x4b4], 0
cmp dword [ebp - 0x4b4], 0xcb06a9be
jbe 0x10046939
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2d8], 0
je 0x10046939
mov dword [ebp - 0x33c], 1
jmp 0x10046940
and dword [ebp - 0x33c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x290]
imul eax, dword [ebp - 0x33c]
mov dword [ebp - 0x194], eax
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0xdc], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x290]
cmp dword [ebp - 0xdc], eax
jne 0x10046987
mov dword [ebp - 0x574], 1
jmp 0x1004698e
and dword [ebp - 0x574], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x290]
cmp dword [ebp - 0x574], eax
jl 0x100469af
mov dword [ebp - 0x344], 1
jmp 0x100469b6
and dword [ebp - 0x344], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x290]
cmp eax, dword [ebp - 0x344]
jle 0x100469d9
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x290], 0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2d8], 0
jne 0x100469f8
cmp dword [ebp - 0x64], 0
jne 0x100469f8
and dword [ebp - 0x4bc], 0
jmp 0x10046a02
mov dword [ebp - 0x4bc], 1
mov eax, dword [ebp - 0x4bc]
mov dword [ebp - 0x714], eax
cmp dword [ebp - 0x48], 0
jne 0x10046a19
jmp 0x1004ac16
mov eax, dword [ebp - 0x68]
mov ecx, dword [ebp - 0x48]
add ecx, dword [eax]
add ecx, dword [ebp - 0x4c]
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x34c], 1
mov dword [ebp - 0x780], 5
mov dword [ebp - 0x788], 0xfffffffc
mov dword [ebp - 0x944], 0xed99ea7
mov dword [ebp - 0x98], 0
jmp 0x10046a68
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 1
jge 0x10046a84
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0x94c], 0x3fc4b03e
jmp 0x10046a5b
mov dword [ebp - 0x98], 0
jmp 0x10046a9d
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 1
jge 0x10046ab9
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0x1e8], 0xffff
jmp 0x10046a90
cmp dword [ebp - 0x34c], 0xffff
ja 0x10046ad1
mov dword [ebp - 0x5d4], 1
jmp 0x10046ad8
and dword [ebp - 0x5d4], 0
cmp dword [ebp - 0x34c], 0
je 0x10046b1c
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1e8]
sub eax, 6
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x1e8]
inc ecx
push 4
pop edx
imul edx, edx, 0
mov dword [ebp + edx - 0x1e8], ecx
test eax, eax
je 0x10046b1c
mov dword [ebp - 0x354], 1
jmp 0x10046b23
and dword [ebp - 0x354], 0
mov eax, dword [ebp - 0x5d4]
cmp eax, dword [ebp - 0x354]
jne 0x10046b3d
mov dword [ebp - 0x4c4], 1
jmp 0x10046b44
and dword [ebp - 0x4c4], 0
cmp dword [ebp - 0x4c4], 0xa9683648
ja 0x10046b5c
mov dword [ebp - 0x35c], 1
jmp 0x10046b63
and dword [ebp - 0x35c], 0
cmp dword [ebp - 0x35c], 0x885c6f1b
je 0x10046b7b
mov dword [ebp - 0x57c], 1
jmp 0x10046b82
and dword [ebp - 0x57c], 0
mov eax, dword [ebp - 0x780]
imul eax, dword [ebp - 0x57c]
test eax, eax
je 0x10046baf
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1e8], 0
je 0x10046baf
mov dword [ebp - 0x364], 1
jmp 0x10046bb6
and dword [ebp - 0x364], 0
mov eax, dword [ebp - 0x364]
mov dword [ebp - 0x788], eax
xor ecx, ecx
call fcn.100319d2
push eax
call fcn.1006bfb8
pop ecx
mov dword [ebp - 0xf0], 9
mov dword [ebp - 0xe8], 1
mov dword [ebp - 0x384], 9
mov dword [ebp - 0x10c], 0x136
mov dword [ebp - 0x30], 0x18bd2e84
mov dword [ebp - 0x2c], 0
jmp 0x10046c0f
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 4
jge 0x10046c25
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x658], 0x546158d3
jmp 0x10046c08
mov dword [ebp - 0x2c], 0
jmp 0x10046c35
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jge 0x10046c4b
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x72c], 1
jmp 0x10046c2e
mov dword [ebp - 0x2c], 0
jmp 0x10046c5b
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jge 0x10046c71
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x2e8], 0x6c0f1a0
jmp 0x10046c54
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x658]
push 4
pop ecx
imul ecx, ecx, 3
imul eax, dword [ebp + ecx - 0x658]
test eax, eax
jne 0x10046cb5
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x658], 0
jne 0x10046cb5
and dword [ebp - 0x4cc], 0
jmp 0x10046cbf
mov dword [ebp - 0x4cc], 1
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x658]
cmp dword [ebp - 0x4cc], eax
jle 0x10046ce0
mov dword [ebp - 0x36c], 1
jmp 0x10046ce7
and dword [ebp - 0x36c], 0
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x72c], 0
cmp dword [ebp - 0x36c], 0
jg 0x10046d0d
mov dword [ebp - 0x604], 1
jmp 0x10046d14
and dword [ebp - 0x604], 0
cmp dword [ebp - 0x604], 0xffffffff
jg 0x10046d29
mov dword [ebp - 0x374], 1
jmp 0x10046d30
and dword [ebp - 0x374], 0
mov eax, dword [ebp - 0x374]
mov dword [ebp - 0xe8], eax
mov eax, dword [ebp - 0xe8]
mov ecx, dword [ebp - 0x384]
lea eax, [eax + ecx + 0x705472dd]
cmp eax, dword [ebp - 0x10c]
jne 0x10046d63
mov dword [ebp - 0x4d4], 1
jmp 0x10046d6a
and dword [ebp - 0x4d4], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x658]
cmp eax, dword [ebp - 0x4d4]
jl 0x10046d8b
mov dword [ebp - 0x37c], 1
jmp 0x10046d92
and dword [ebp - 0x37c], 0
mov eax, dword [ebp - 0x10c]
cmp dword [ebp - 0x37c], eax
jle 0x10046dac
mov dword [ebp - 0x584], 1
jmp 0x10046db3
and dword [ebp - 0x584], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2e8]
imul eax, dword [ebp - 0x584]
imul eax, dword [ebp - 0x384]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x2e8]
jge 0x10046de9
mov dword [ebp - 0x2c8], 1
jmp 0x10046df0
and dword [ebp - 0x2c8], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x2c8]
mov dword [ebp + eax - 0x2e8], ecx
mov eax, dword [ebp - 0x2c8]
sub eax, dword [ebp - 0x10c]
mov dword [ebp - 0x30], eax
je 0x10046fad
mov dword [ebp - 0x130], 0xfffffff8
mov dword [ebp - 0x798], 0xceaa
mov dword [ebp - 0xf0], 0
jmp 0x10046e45
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 8
jle 0x10046fab
mov dword [ebp - 0x7a0], 0x59f7c1ae
mov dword [ebp - 0x198], 0
jmp 0x10046e75
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 2
jge 0x10046e91
mov eax, dword [ebp - 0x198]
mov dword [ebp + eax*4 - 0x720], 0xffffffff
jmp 0x10046e68
cmp dword [ebp - 0x130], 0
je 0x10046ebf
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x658], 0
je 0x10046ebf
cmp dword [ebp - 0x130], 0
je 0x10046ebf
mov dword [ebp - 0x790], 1
jmp 0x10046ec6
and dword [ebp - 0x790], 0
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x954], eax
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x95c], eax
mov eax, dword [ebp - 0x798]
mov dword [ebp - 0x964], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x720], 0
jne 0x10046f13
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x72c], 0
jne 0x10046f13
and dword [ebp - 0x4dc], 0
jmp 0x10046f1d
mov dword [ebp - 0x4dc], 1
cmp dword [ebp - 0x4dc], 0x74e6a83b
jne 0x10046f35
mov dword [ebp - 0x38c], 1
jmp 0x10046f3c
and dword [ebp - 0x38c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x720]
cmp eax, dword [ebp - 0x38c]
je 0x10046f5d
mov dword [ebp - 0x5dc], 1
jmp 0x10046f64
and dword [ebp - 0x5dc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x720]
cmp dword [ebp - 0x5dc], eax
je 0x10046f85
mov dword [ebp - 0x394], 1
jmp 0x10046f8c
and dword [ebp - 0x394], 0
mov eax, dword [ebp - 0x394]
mov dword [ebp - 0x7a0], eax
cmp dword [ebp - 0x130], 0
je 0x10046fa6
jmp 0x10046e38
jmp 0x10046e38
jmp 0x10046ff6
mov dword [ebp - 0x30], 0
jmp 0x10046fbd
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
je 0x10046ff6
mov dword [ebp - 0x65c], 0xf3d0097e
mov dword [ebp - 0x7b0], 0x1350d55f
lea eax, [ebp - 0x65c]
push eax
push 0x24f
push 0
lea eax, [ebp - 0x7b0]
push eax
call fcn.100457d2
add esp, 0x10
jmp 0x10046fb6
mov dword [ebp - 0x30], 0
jmp 0x10047006
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 1
jg 0x10047102
mov dword [ebp - 0xe8], 3
jmp 0x10047029
mov eax, dword [ebp - 0xe8]
dec eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0
jl 0x100470fd
mov dword [ebp - 0x7bc], 0xac96aae1
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0x2e8]
mov dword [ebp + ecx*4 - 0x2e8], eax
mov eax, dword [ebp - 0x30]
cmp dword [ebp + eax*4 - 0x658], 0xe87198b9
jbe 0x1004707a
mov eax, dword [ebp - 0x30]
cmp dword [ebp + eax*4 - 0x654], 0
jne 0x1004707a
and dword [ebp - 0x4e4], 0
jmp 0x10047084
mov dword [ebp - 0x4e4], 1
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x96c], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2e8]
mov dword [ebp - 0x974], eax
mov eax, dword [ebp - 0x10c]
cmp dword [ebp - 0x4e4], eax
je 0x100470bd
mov dword [ebp - 0x39c], 1
jmp 0x100470c4
and dword [ebp - 0x39c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x72c]
cmp dword [ebp - 0x39c], eax
jl 0x100470e5
mov dword [ebp - 0x58c], 1
jmp 0x100470ec
and dword [ebp - 0x58c], 0
mov eax, dword [ebp - 0x58c]
mov dword [ebp - 0x7bc], eax
jmp 0x1004701c
jmp 0x10046fff
mov byte [ebp - 0x17c], 8
mov byte [ebp - 0x17b], 0xb2
mov byte [ebp - 0x17a], 3
mov byte [ebp - 0x179], 7
mov byte [ebp - 0x178], 1
mov byte [ebp - 0x177], 2
mov byte [ebp - 0x176], 5
mov byte [ebp - 0x175], 4
mov byte [ebp - 0x174], 2
mov byte [ebp - 0x173], 6
mov byte [ebp - 0x172], 4
mov byte [ebp - 0x171], 0xf
mov byte [ebp - 0x170], 7
mov byte [ebp - 0x16f], 0xe
mov byte [ebp - 0x16e], 9
mov byte [ebp - 0x16d], 6
mov byte [ebp - 0x16c], 6
mov byte [ebp - 0x16b], 1
mov byte [ebp - 0x16a], 0x1e
mov byte [ebp - 0x169], 0x42
mov byte [ebp - 0x168], 0x13
mov byte [ebp - 0x167], 0x59
mov byte [ebp - 0x166], 0xe1
mov byte [ebp - 0x165], 0x68
mov byte [ebp - 0x164], 0xa7
mov byte [ebp - 0x163], 0x90
mov byte [ebp - 0x162], 0xbc
mov byte [ebp - 0x161], 0x23
mov byte [ebp - 0x160], 0x98
mov byte [ebp - 0x15f], 0xc2
mov byte [ebp - 0x15e], 0x51
mov byte [ebp - 0x15d], 0x3e
mov byte [ebp - 0x15c], 0x38
mov byte [ebp - 0x15b], 0xa6
mov byte [ebp - 0x15a], 0xae
mov byte [ebp - 0x159], 0x26
mov byte [ebp - 0x158], 0xae
mov byte [ebp - 0x157], 0xaa
mov byte [ebp - 0x156], 0xa
mov byte [ebp - 0x155], 0x79
mov byte [ebp - 0x154], 0xa6
mov byte [ebp - 0x153], 0x86
mov byte [ebp - 0x152], 0xd6
mov byte [ebp - 0x151], 0x53
mov byte [ebp - 0x150], 0x31
mov byte [ebp - 0x14f], 0xa3
mov byte [ebp - 0x14e], 0x5d
mov byte [ebp - 0x14d], 0x14
mov byte [ebp - 0x14c], 0xbd
mov byte [ebp - 0x14b], 0
mov byte [ebp - 0x14a], 0
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x17c]
or eax, 0x82
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x17c]
and ecx, 0x82
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x17c]
mov byte [ebp + ecx - 0x62c], al
mov dword [ebp - 0x28], 2
and dword [ebp - 0x124], 0
jmp 0x100472bd
mov eax, dword [ebp - 0x28]
inc eax
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0x33
jae 0x1004739b
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x17c]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x28], eax
jne 0x10047307
mov eax, dword [ebp - 0x28]
movzx eax, byte [ebp + eax - 0x17c]
inc eax
mov dword [ebp - 0x124], eax
mov eax, dword [ebp - 0x28]
movzx eax, byte [ebp + eax - 0x17c]
mov ecx, dword [ebp - 0x28]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x28], eax
jmp 0x100472b5
mov eax, dword [ebp - 0x28]
movzx eax, byte [ebp + eax - 0x17b]
mov ecx, dword [ebp - 0x28]
sub ecx, dword [ebp - 0x124]
movzx ecx, byte [ebp + ecx - 0x17e]
movsx ecx, byte [ebp + ecx - 0x62c]
add eax, ecx
mov ecx, dword [ebp - 0x28]
movzx ecx, byte [ebp + ecx - 0x17b]
mov edx, dword [ebp - 0x28]
sub edx, dword [ebp - 0x124]
movzx edx, byte [ebp + edx - 0x17e]
movsx edx, byte [ebp + edx - 0x62c]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x28]
movzx ecx, byte [ebp + ecx - 0x17b]
mov edx, dword [ebp - 0x28]
sub edx, dword [ebp - 0x124]
movzx edx, byte [ebp + edx - 0x17e]
movsx edx, byte [ebp + edx - 0x62c]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x28]
movzx ecx, byte [ebp + ecx - 0x17c]
mov byte [ebp + ecx - 0x62c], al
and dword [ebp - 0x124], 0
jmp 0x100472b5
xor eax, eax
inc eax
imul eax, eax, 0xa
mov byte [ebp + eax - 0x62c], 0
push 0
push 0x16c3
call fcn.1004589c
pop ecx
pop ecx
lea eax, [ebp - 0x62c]
push eax
lea ecx, [ebp - 0xa48]
call fcn.10024f32
mov dword [ebp - 0x7c0], eax
mov eax, dword [ebp - 0x7c0]
mov dword [ebp - 0x784], eax
and dword [ebp - 4], 0
push 0xa
xor edx, edx
mov ecx, dword [ebp - 0x784]
call fcn.10031992
pop ecx
mov dword [ebp - 0x680], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa48]
call fcn.100185f0
mov dword [ebp - 0x9a4], 0xdfa860b4
mov byte [ebp - 0xbd], 0
movzx eax, byte [ebp - 0xbd]
test eax, eax
je 0x10047428
push 0
call dword [sym.imp.COMDLG32.dll_GetOpenFileNameW]
mov byte [ebp - 0xcd], 0
lea eax, [ebp - 0xcd]
push eax
push 0
push 0x34ef
call fcn.10044e1a
add esp, 0xc
and dword [ebp - 0x1c8], 0
jmp 0x1004745b
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 0xb
jae 0x10047474
mov eax, dword [ebp - 0x1c8]
mov byte [ebp + eax - 0x62c], 0
jmp 0x1004744e
mov dword [ebp - 0xac], 0x63e8
mov dword [ebp - 0x614], 0xad9bacc5
mov dword [ebp - 0x594], 0x329e
mov dword [ebp - 0x668], 0xa28c7fff
mov dword [ebp - 0x34], 0
jmp 0x100474ac
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 4
jge 0x100474c2
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x814], 0x3f23e93d
jmp 0x100474a5
mov dword [ebp - 0x34], 0
jmp 0x100474d2
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 3
jge 0x100474e8
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x910], 0x60a22152
jmp 0x100474cb
mov dword [ebp - 0x34], 0
jmp 0x100474f8
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 4
jge 0x1004750e
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0xa18], 0
jmp 0x100474f1
mov dword [ebp - 0xac], 1
cmp dword [ebp - 0xac], 0xffffffff
jle 0x1004752d
mov dword [ebp - 0x3ac], 1
jmp 0x10047534
and dword [ebp - 0x3ac], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x814]
push 4
pop ecx
shl ecx, 1
add eax, dword [ebp + ecx - 0x910]
jne 0x10047565
mov eax, dword [ebp - 0x594]
sub eax, 0x426a7609
jne 0x10047565
and dword [ebp - 0x3a4], 0
jmp 0x1004756f
mov dword [ebp - 0x3a4], 1
mov eax, dword [ebp - 0x3a4]
neg eax
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x814]
jge 0x10047592
mov dword [ebp - 0x4ec], 1
jmp 0x10047599
and dword [ebp - 0x4ec], 0
cmp dword [ebp - 0x4ec], 0xe10e
jg 0x100475b1
mov dword [ebp - 0x3b4], 1
jmp 0x100475b8
and dword [ebp - 0x3b4], 0
mov eax, dword [ebp - 0x3ac]
mov dword [ebp - 0x614], eax
mov eax, dword [ebp - 0x614]
add eax, dword [ebp - 0x3b4]
je 0x100475e7
mov eax, 0x94ab
test eax, eax
je 0x100475e7
mov dword [ebp - 0x4f4], 1
jmp 0x100475ee
and dword [ebp - 0x4f4], 0
cmp dword [ebp - 0x4f4], 0
jb 0x10047603
mov dword [ebp - 0x3bc], 1
jmp 0x1004760a
and dword [ebp - 0x3bc], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x910]
cmp dword [ebp - 0x3bc], eax
je 0x1004762a
mov dword [ebp - 0x3c4], 1
jmp 0x10047631
and dword [ebp - 0x3c4], 0
mov eax, dword [ebp - 0x594]
cmp dword [ebp - 0x3c4], eax
jg 0x1004764b
mov dword [ebp - 0x4fc], 1
jmp 0x10047652
and dword [ebp - 0x4fc], 0
cmp dword [ebp - 0x4fc], 0x9a9b
jg 0x1004766a
mov dword [ebp - 0x6e4], 1
jmp 0x10047671
and dword [ebp - 0x6e4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x814]
mov dword [ebp - 0x98c], eax
cmp dword [ebp - 0xac], 0
je 0x10047697
push 0
call fcn.1004581f
pop ecx
jmp 0x10047712
mov dword [ebp - 0x718], 0x55f992db
mov eax, dword [ebp - 0x668]
mov dword [ebp - 0x3cc], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3cc]
mov dword [ebp + eax - 0x814], ecx
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x3cc]
mov dword [ebp + eax - 0xa18], ecx
mov dword [ebp - 0xac], 0x13
jmp 0x100476ec
mov eax, dword [ebp - 0xac]
dec eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0xc
jle 0x10047712
push 0
push 0x5b6c
push 0xa52
lea eax, [ebp - 0x718]
push eax
call fcn.10045a1e
add esp, 0x10
jmp 0x100476df
mov byte [ebp - 0x23c], 6
mov byte [ebp - 0x23b], 0xf5
mov byte [ebp - 0x23a], 9
mov byte [ebp - 0x239], 9
mov byte [ebp - 0x238], 2
mov byte [ebp - 0x237], 7
mov byte [ebp - 0x236], 0
mov byte [ebp - 0x235], 6
mov byte [ebp - 0x234], 7
mov byte [ebp - 0x233], 7
mov byte [ebp - 0x232], 4
mov byte [ebp - 0x231], 2
mov byte [ebp - 0x230], 5
mov byte [ebp - 0x22f], 5
mov byte [ebp - 0x22e], 0x30
mov byte [ebp - 0x22d], 0xcf
mov byte [ebp - 0x22c], 0x39
mov byte [ebp - 0x22b], 0xbb
mov byte [ebp - 0x22a], 0x5f
mov byte [ebp - 0x229], 0x86
mov byte [ebp - 0x228], 0x71
mov byte [ebp - 0x227], 0x14
mov byte [ebp - 0x226], 0x16
mov byte [ebp - 0x225], 0x4d
mov byte [ebp - 0x224], 0xce
mov byte [ebp - 0x223], 6
mov byte [ebp - 0x222], 0x61
mov byte [ebp - 0x221], 0xd5
mov byte [ebp - 0x220], 0xfe
mov byte [ebp - 0x21f], 0xec
mov byte [ebp - 0x21e], 0x34
mov byte [ebp - 0x21d], 0xfe
mov byte [ebp - 0x21c], 0x7b
mov byte [ebp - 0x21b], 0xef
mov byte [ebp - 0x21a], 0xa7
mov byte [ebp - 0x219], 0x89
mov byte [ebp - 0x218], 0xaa
mov byte [ebp - 0x217], 0x1c
mov byte [ebp - 0x216], 0x8b
mov byte [ebp - 0x215], 0xe2
mov byte [ebp - 0x214], 0x53
mov byte [ebp - 0x213], 0x27
mov byte [ebp - 0x212], 0xe1
mov byte [ebp - 0x211], 0x5c
mov byte [ebp - 0x210], 0xce
mov byte [ebp - 0x20f], 0x67
mov byte [ebp - 0x20e], 0x4d
mov byte [ebp - 0x20d], 0xda
mov byte [ebp - 0x20c], 0x44
mov byte [ebp - 0x20b], 0xa4
mov byte [ebp - 0x20a], 0xee
mov byte [ebp - 0x209], 0x54
mov byte [ebp - 0x208], 0xfd
mov byte [ebp - 0x207], 0xb9
mov byte [ebp - 0x206], 0x4b
mov byte [ebp - 0x205], 0xb6
mov byte [ebp - 0x204], 7
mov byte [ebp - 0x203], 0xc2
mov byte [ebp - 0x202], 0x19
mov byte [ebp - 0x201], 0x85
mov byte [ebp - 0x200], 0xa6
mov byte [ebp - 0x1ff], 0x40
mov byte [ebp - 0x1fe], 0xa1
mov byte [ebp - 0x1fd], 3
mov byte [ebp - 0x1fc], 3
mov byte [ebp - 0x1fb], 1
mov byte [ebp - 0x1fa], 4
mov byte [ebp - 0x1f9], 8
mov byte [ebp - 0x1f8], 6
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x23c]
or eax, 0xcc
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x23c]
and ecx, 0xcc
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x23c]
mov byte [ebp + ecx - 0x638], al
mov dword [ebp - 0x58], 2
and dword [ebp - 0x1a0], 0
jmp 0x1004794b
mov eax, dword [ebp - 0x58]
inc eax
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0x45
jae 0x10047a15
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x23c]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x58], eax
jne 0x10047995
mov eax, dword [ebp - 0x58]
movzx eax, byte [ebp + eax - 0x23c]
inc eax
mov dword [ebp - 0x1a0], eax
mov eax, dword [ebp - 0x58]
movzx eax, byte [ebp + eax - 0x23c]
mov ecx, dword [ebp - 0x58]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x58], eax
jmp 0x10047943
mov eax, dword [ebp - 0x58]
movzx eax, byte [ebp + eax - 0x23b]
mov ecx, dword [ebp - 0x58]
sub ecx, dword [ebp - 0x1a0]
movzx ecx, byte [ebp + ecx - 0x23e]
movsx ecx, byte [ebp + ecx - 0x638]
or eax, ecx
mov ecx, dword [ebp - 0x58]
movzx ecx, byte [ebp + ecx - 0x23b]
mov edx, dword [ebp - 0x58]
sub edx, dword [ebp - 0x1a0]
movzx edx, byte [ebp + edx - 0x23e]
movsx edx, byte [ebp + edx - 0x638]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x58]
movzx ecx, byte [ebp + ecx - 0x23c]
mov byte [ebp + ecx - 0x638], al
push 0
lea eax, [ebp - 0x1a0]
push eax
push 0x678
push 0x298b
call fcn.100452a6
add esp, 0x10
jmp 0x10047943
xor eax, eax
inc eax
imul eax, eax, 0xa
mov byte [ebp + eax - 0x638], 0
lea eax, [ebp - 0x638]
push eax
lea ecx, [ebp - 0xad8]
call fcn.10024f32
mov dword [ebp - 0x670], eax
mov eax, dword [ebp - 0x670]
mov dword [ebp - 0x7b8], eax
mov dword [ebp - 4], 1
push 0xa
xor edx, edx
mov ecx, dword [ebp - 0x7b8]
call fcn.10031992
pop ecx
mov dword [ebp - 0x724], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xad8]
call fcn.100185f0
mov dword [ebp - 0x1e0], 0xffffffff
mov dword [ebp - 0x928], 1
mov dword [ebp - 0x830], 0xfffffffe
mov dword [ebp - 0x988], 0xfffffffd
mov dword [ebp - 0x984], 0xfffffffd
mov dword [ebp - 0x980], 0xfffffffd
mov dword [ebp - 0x97c], 0xfffffffd
mov dword [ebp - 0x904], 0xb963ab1
mov dword [ebp - 0x1e0], 0xffffffeb
jmp 0x10047adc
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 0xffffffff
jge 0x10047b54
mov dword [ebp - 0x838], 0xffffffff
mov dword [ebp - 0x958], 1
mov dword [ebp - 0x840], 0xfffffff9
mov dword [ebp - 0x678], 0xfffffff6
mov dword [ebp - 0x1a8], 0
jmp 0x10047b26
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 3
jge 0x10047b42
mov eax, dword [ebp - 0x1a8]
mov dword [ebp + eax*4 - 0xafc], 0x88e17b84
jmp 0x10047b19
lea eax, [ebp - 0x678]
push eax
call fcn.10044bcb
pop ecx
jmp 0x10047acf
mov byte [ebp - 0xd5], 0
movzx eax, byte [ebp - 0xd5]
test eax, eax
je 0x10047b6e
push 1
call fcn.10044be4
pop ecx
and dword [ebp - 0x1d0], 0
jmp 0x10047b84
mov eax, dword [ebp - 0x1d0]
inc eax
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 0xb
jae 0x10047b9d
mov eax, dword [ebp - 0x1d0]
mov byte [ebp + eax - 0x638], 0
jmp 0x10047b77
push dword [ebp - 0x724]
push dword [ebp - 0x680]
call fcn.10042076
pop ecx
pop ecx
mov dword [ebp - 0x42c], eax
mov eax, dword [ebp - 0xb4]
mov ecx, dword [ebp - 0x42c]
mov dword [eax + 8], ecx
mov dword [ebp - 0x20], 0x94f37831
mov dword [ebp - 0x3e4], 0x5367
mov dword [ebp - 0x2d0], 0x7b3925b
mov dword [ebp - 0x414], 0x37a762a
mov dword [ebp - 0x7ac], 0xbb416c01
mov dword [ebp - 0x1b0], 0
jmp 0x10047c0d
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 3
jge 0x10047c29
mov eax, dword [ebp - 0x1b0]
mov dword [ebp + eax*4 - 0x2f4], 0x2e0cf572
jmp 0x10047c00
mov dword [ebp - 0x20], 2
jmp 0x10047c39
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jl 0x10048073
mov dword [ebp - 0x50], 0xfffffff7
mov dword [ebp - 0x51c], 0xbc9fc22f
mov dword [ebp - 0x424], 0xfffffff6
mov dword [ebp - 0x1f0], 0
jmp 0x10047c77
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 2
jge 0x10047c93
mov eax, dword [ebp - 0x1f0]
mov dword [ebp + eax*4 - 0x7e8], 8
jmp 0x10047c6a
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0x2f4], 0
je 0x10047ca5
jmp 0x10048073
mov byte [ebp - 0xd2], 0
movzx eax, byte [ebp - 0xd2]
test eax, eax
je 0x10047cbf
push 1
call fcn.10044dd4
pop ecx
mov dword [ebp - 0x50], 2
jmp 0x10047ccf
cmp dword [ebp - 0x50], 0
jl 0x1004806e
mov dword [ebp - 0x2cc], 0x8382bdb9
mov dword [ebp - 0x114], 0x2b82c447
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x2f4]
mov dword [ebp - 0x5e4], eax
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x5e4]
mov dword [ebp + eax*4 - 0x2f4], ecx
cmp dword [ebp - 0x5e4], 0
je 0x10047e3f
cmp dword [ebp - 0x50], 0
je 0x10047d2c
mov dword [ebp - 0x3d4], 1
jmp 0x10047d33
and dword [ebp - 0x3d4], 0
mov eax, dword [ebp - 0x3e4]
imul eax, dword [ebp - 0x3d4]
mov ecx, dword [ebp - 0x50]
cmp eax, dword [ebp + ecx*4 - 0x2f4]
jle 0x10047d58
mov dword [ebp - 0x504], 1
jmp 0x10047d5f
and dword [ebp - 0x504], 0
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x2f4]
imul eax, dword [ebp - 0x504]
cmp eax, dword [ebp - 0x50]
jle 0x10047d81
mov dword [ebp - 0x3dc], 1
jmp 0x10047d88
and dword [ebp - 0x3dc], 0
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x2f4]
cmp eax, dword [ebp - 0x3dc]
jl 0x10047da6
mov dword [ebp - 0x59c], 1
jmp 0x10047dad
and dword [ebp - 0x59c], 0
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x2f4]
imul eax, dword [ebp - 0x59c]
cmp eax, dword [ebp - 0x20]
jl 0x10047dcf
mov dword [ebp - 0x50c], 1
jmp 0x10047dd6
and dword [ebp - 0x50c], 0
mov eax, dword [ebp - 0x3e4]
cmp dword [ebp - 0x50c], eax
jl 0x10047df0
mov dword [ebp - 0x3ec], 1
jmp 0x10047df7
and dword [ebp - 0x3ec], 0
mov eax, dword [ebp - 0x3ec]
mov dword [ebp - 0x2d0], eax
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp + eax*4 - 0x2f4]
cmp dword [ebp - 0x2d0], eax
je 0x10047e21
mov dword [ebp - 0x5f0], 1
jmp 0x10047e28
and dword [ebp - 0x5f0], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x5f0], eax
jg 0x10047e3f
mov dword [ebp - 0x78c], 1
jmp 0x10047e46
and dword [ebp - 0x78c], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x828], eax
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0x2f4], 0
jne 0x10047e6e
cmp dword [ebp - 0x2d0], 0
jne 0x10047e6e
and dword [ebp - 0x3f4], 0
jmp 0x10047e78
mov dword [ebp - 0x3f4], 1
mov eax, dword [ebp - 0x114]
cmp dword [ebp - 0x3f4], eax
jge 0x10047e92
mov dword [ebp - 0x514], 1
jmp 0x10047e99
and dword [ebp - 0x514], 0
mov eax, dword [ebp - 0x114]
add eax, dword [ebp - 0x514]
imul eax, eax, 0x618e
cmp eax, dword [ebp - 0x50]
jle 0x10047ebc
mov dword [ebp - 0x3fc], 1
jmp 0x10047ec3
and dword [ebp - 0x3fc], 0
mov eax, dword [ebp - 0x3fc]
sub eax, 6
cmp eax, dword [ebp - 0x114]
jl 0x10047ee0
mov dword [ebp - 0x5a4], 1
jmp 0x10047ee7
and dword [ebp - 0x5a4], 0
cmp dword [ebp - 0x5a4], 0
je 0x10047efc
mov dword [ebp - 0x404], 1
jmp 0x10047f03
and dword [ebp - 0x404], 0
mov eax, dword [ebp - 0x50]
imul eax, dword [ebp - 0x404]
sub eax, 0x541ccca6
mov dword [ebp - 0x51c], eax
mov eax, dword [ebp - 0x51c]
mov dword [ebp - 0x40c], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x40c]
mov dword [ebp + eax - 0x7e8], ecx
mov eax, dword [ebp - 0x114]
cmp eax, dword [ebp - 0x40c]
jle 0x10047f51
mov dword [ebp - 0x5ec], 1
jmp 0x10047f58
and dword [ebp - 0x5ec], 0
mov eax, dword [ebp - 0x5ec]
mov dword [ebp - 0x414], eax
mov eax, dword [ebp - 0x2cc]
mov dword [ebp - 0x688], eax
mov eax, dword [ebp - 0x414]
mov dword [ebp - 0x730], eax
mov eax, dword [ebp - 0x2cc]
dec eax
mov dword [ebp - 0x2cc], eax
mov eax, dword [ebp - 0x688]
cmp eax, dword [ebp - 0x730]
jg 0x10047fa3
mov dword [ebp - 0x524], 1
jmp 0x10047faa
and dword [ebp - 0x524], 0
mov eax, dword [ebp - 0x524]
sub eax, dword [ebp - 0x20]
jne 0x10047fc7
mov eax, 0x2575
test eax, eax
jne 0x10047fc7
and dword [ebp - 0x41c], 0
jmp 0x10047fd1
mov dword [ebp - 0x41c], 1
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x41c], eax
je 0x10047fe8
mov dword [ebp - 0x5ac], 1
jmp 0x10047fef
and dword [ebp - 0x5ac], 0
mov eax, dword [ebp - 0x5ac]
mov dword [ebp - 0x424], eax
mov eax, dword [ebp - 0x424]
mov dword [ebp - 0x848], eax
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x894], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x114]
cmp dword [ebp + eax - 0x7e8], ecx
jl 0x10048031
mov dword [ebp - 0x52c], 1
jmp 0x10048038
and dword [ebp - 0x52c], 0
cmp dword [ebp - 0x52c], 0
jne 0x1004804d
jmp 0x10047c32
mov byte [ebp - 0xd0], 0
push 0x4252
push 1
lea eax, [ebp - 0xd0]
push eax
call fcn.10044e1a
add esp, 0xc
lea eax, [ebp - 0x14]
push eax
push 0xa96
push 0x29bd
push 0x14e3
push 0
lea eax, [ebp - 0x42c]
push eax
push 0x25a4
push 0x581f
call fcn.1004550e
add esp, 0x20
mov dword [ebp - 0x60], 0xfff7
mov dword [ebp - 0xa4], 1
mov dword [ebp - 0x6a8], 0
mov byte [ebp - 0xa6], 0
movzx eax, byte [ebp - 0xa6]
test eax, eax
je 0x1004810e
push 0x4b3b
push 0x4475
push 1
push 0x578d
push 0x9b0
push 0x6d58
call fcn.10044e83
add esp, 0x18
cmp dword [ebp - 0x60], 0
jne 0x100481fe
cmp dword [ebp - 0x60], 0x28f6
je 0x1004812d
mov dword [ebp - 0x43c], 1
jmp 0x10048134
and dword [ebp - 0x43c], 0
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x898], eax
cmp dword [ebp - 0x60], 0xfffd
je 0x10048152
mov dword [ebp - 0x5f8], 1
jmp 0x10048159
and dword [ebp - 0x5f8], 0
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0x5f8], eax
je 0x10048170
mov dword [ebp - 0x434], 1
jmp 0x10048177
and dword [ebp - 0x434], 0
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0x434], eax
jge 0x1004818e
mov dword [ebp - 0x534], 1
jmp 0x10048195
and dword [ebp - 0x534], 0
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0x534], eax
jle 0x100481ac
mov dword [ebp - 0x698], 1
jmp 0x100481b3
and dword [ebp - 0x698], 0
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0xa4], eax
mov eax, dword [ebp - 0xa4]
cmp dword [ebp - 0x43c], eax
jle 0x100481dc
cmp dword [ebp - 0xa4], 0
jne 0x100481dc
and dword [ebp - 0x73c], 0
jmp 0x100481e6
mov dword [ebp - 0x73c], 1
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x858], eax
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x8a0], eax
cmp dword [ebp - 0x60], 0
je 0x10048257
mov dword [ebp - 0x794], 0
mov dword [ebp - 0x6a0], 0x35f19716
push 0x51a5
push 0x6f2e
lea eax, [ebp - 0x6a0]
push eax
push 0x1a93
push 1
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0x794]
push eax
lea eax, [ebp - 0x6a8]
push eax
push 0x1deb
lea eax, [ebp - 0x60]
push eax
push 0x6ceb
call fcn.10044fd4
add esp, 0x2c
jmp 0x1004829b
mov dword [ebp - 0x5b4], 0xe12fd89d
mov dword [ebp - 0xa4], 0
jmp 0x1004827a
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0xf
jne 0x1004829b
cmp dword [ebp - 0x5b4], 0
je 0x1004828e
jmp 0x1004829b
cmp dword [ebp - 0x5b4], 0
je 0x10048299
jmp 0x1004826d
jmp 0x1004826d
and dword [ebp - 0x108], 0
mov dword [ebp - 0x860], 0xfffffffa
mov dword [ebp - 0x8a8], 0x73838a1f
mov dword [ebp - 0x868], 1
mov dword [ebp - 0x8b0], 0x3099cfe0
mov dword [ebp - 0x870], 0xfecafe8
mov dword [ebp - 0x748], 0x1fd9
mov dword [ebp - 0x90], 0
jmp 0x100482f7
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 2
jge 0x10048313
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0x9f0], 0x580849f8
jmp 0x100482ea
mov dword [ebp - 0x90], 0
jmp 0x1004832c
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 3
jge 0x10048348
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0xaf0], 0xbaef6e22
jmp 0x1004831f
push 0x2379
push 0x2b38
push 0xde4
push 0x6b5d
push 0
push 0x1785
lea eax, [ebp - 0x748]
push eax
call fcn.1004521d
add esp, 0x1c
mov byte [ebp - 0xa7], 0
movzx eax, byte [ebp - 0xa7]
test eax, eax
je 0x10048396
push 0x937
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowLongA]
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x18], 0
jbe 0x100483b4
mov eax, dword [ebp - 0x14]
push dword [eax + 0x18]
push 0
call fcn.10042076
pop ecx
pop ecx
mov dword [ebp - 0x108], eax
mov dword [ebp - 0x24], 0x60b4ffb8
mov dword [ebp - 0xf8], 0x854c3ebe
mov dword [ebp - 0x48c], 0x492233ff
mov dword [ebp - 0x6c0], 0x76f2a9e5
mov dword [ebp - 0x80], 0
jmp 0x100483e9
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 3
jge 0x100483ff
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0x148], 2
jmp 0x100483e2
mov dword [ebp - 0x80], 0
jmp 0x1004840f
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 1
jge 0x10048425
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0x6b8], 1
jmp 0x10048408
mov dword [ebp - 0x24], 2
jmp 0x10048435
cmp dword [ebp - 0x24], 0
jl 0x10048543
mov dword [ebp - 0x29c], 0xab72b21a
mov dword [ebp - 0x6b0], 0xffffffff
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x29c]
cmp dword [ebp + eax*4 - 0x148], ecx
jne 0x10048471
mov dword [ebp - 0x444], 1
jmp 0x10048478
and dword [ebp - 0x444], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x148]
mov dword [ebp - 0x8b8], eax
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x444], eax
je 0x100484a2
mov dword [ebp - 0x53c], 1
jmp 0x100484a9
and dword [ebp - 0x53c], 0
mov eax, dword [ebp - 0x29c]
cmp dword [ebp - 0x53c], eax
je 0x100484c3
cmp dword [ebp - 0x24], 0xe6bb
jne 0x10048558
mov dword [ebp - 0x45c], 1
jmp 0x1004855f
and dword [ebp - 0x45c], 0
cmp dword [ebp - 0x45c], 0xfd5d
jle 0x10048697
mov dword [ebp - 0x1b8], 0xffffffff
mov dword [ebp - 0x764], 4
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x148]
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 0
jne 0x100485b5
mov dword [ebp - 0x2b0], 0x663317a7
mov dword [ebp - 0x340], 1
mov dword [ebp - 0x350], 0xc15dc1c4
mov dword [ebp - 0x754], 8
mov dword [ebp - 0x1d8], 0
jmp 0x100486d8
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret