Function at 0x10037533
Capabilities:
Accept command line arguments
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10073b64
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x658
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 0x10]
test eax, eax
je 0x1003a6ef
lea eax, [ebp + 0x18]
mov dword [ebp - 0x470], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x46c], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x474], eax
mov eax, dword [ebp - 0x470]
movzx eax, byte [eax]
test eax, eax
je 0x100375a9
mov byte [ebp - 0x5a], 0
movzx eax, byte [ebp - 0x5a]
test eax, eax
je 0x100375a4
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegConnectRegistryW]
jmp 0x1003a6ed
mov eax, dword [ebp - 0x46c]
mov dword [ebp - 0x160], eax
mov eax, dword [ebp - 0x474]
mov dword [ebp - 0x6c], eax
and dword [ebp - 0x34], 0
mov dword [ebp - 0x18], 0x5baf43b
mov dword [ebp - 0x484], 0x758fc567
cmp dword [ebp - 0x18], 0
je 0x1003776f
mov dword [ebp - 0x47c], 0xfffffffa
mov dword [ebp - 0x100], 0
jmp 0x10037600
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 1
jge 0x1003761c
mov eax, dword [ebp - 0x100]
mov dword [ebp + eax*4 - 0x108], 0xffffffff
jmp 0x100375f3
mov dword [ebp - 0x18], 3
jmp 0x1003762c
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0xfffffff9
jg 0x1003768e
mov dword [ebp - 0xb8], 6
mov dword [ebp - 0xb8], 0xfffffff3
jmp 0x10037655
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0x16
jg 0x1003768c
push 0x1a3a
push 0x6741
push 0
push 1
push 0x53f3
push 0x19dc
push 0x1f06
push 1
push 0x5ad3
call fcn.10034213
add esp, 0x24
jmp 0x10037648
jmp 0x10037625
xor eax, eax
jne 0x100376a4
cmp dword [ebp - 0x18], 0x9598aaf0
jb 0x100376a4
and dword [ebp - 0x1e8], 0
jmp 0x100376ae
mov dword [ebp - 0x1e8], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x108]
cmp dword [ebp - 0x1e8], eax
je 0x100376cf
mov dword [ebp - 0x368], 1
jmp 0x100376d6
and dword [ebp - 0x368], 0
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x368]
cmp eax, 2
jg 0x100376f0
mov dword [ebp - 0x370], 1
jmp 0x100376f7
and dword [ebp - 0x370], 0
cmp dword [ebp - 0x370], 0xfad5befa
jbe 0x1003770f
mov dword [ebp - 0x360], 1
jmp 0x10037716
and dword [ebp - 0x360], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x108]
cmp eax, dword [ebp - 0x360]
jge 0x10037754
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x108], 0
jne 0x10037754
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x108], 0
jne 0x10037754
and dword [ebp - 0x1b4], 0
jmp 0x1003775e
mov dword [ebp - 0x1b4], 1
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x47c], eax
jmp 0x1003781e
push 4
lea ecx, [ebp - 0x4a0]
call fcn.10020382
and dword [ebp - 4], 0
mov dword [ebp - 0x48c], 0x5bb08661
push 1
push 0x18c8
push 0
lea eax, [ebp - 0x550]
push eax
lea eax, [ebp - 0x4a0]
push eax
call fcn.100334f8
add esp, 0x14
mov dword [ebp - 0x18], 0
jmp 0x100377b9
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jge 0x100377e2
push 0x4116
push 1
lea eax, [ebp - 0x18]
push eax
push 0x1577
push 1
lea eax, [ebp - 0x4a0]
push eax
call fcn.1003111d
add esp, 0x18
jmp 0x100377b2
push 0
push 0x61ec
push 0x349d
lea eax, [ebp - 0x484]
push eax
lea eax, [ebp - 0x4a0]
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x48c]
push eax
call fcn.1003af11
add esp, 0x1c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4a0]
call fcn.10020404
mov dword [ebp - 0x5f4], 0x2e0c
mov byte [ebp - 0x59], 0
push 0x2a62
push 0x787c
push 0x5f7c
push 0x1f7c
push 0x3545
lea eax, [ebp - 0x59]
push eax
push 0
call fcn.1003a96d
add esp, 0x1c
mov byte [ebp - 0x53], 0
push 0
push 0x4fd
push 0x46
push 0x7d18
push 1
push 0x1bf2
push 0x651
push 1
push 0x722e
lea eax, [ebp - 0x53]
push eax
push 0x2b79
call fcn.10036cc2
add esp, 0x2c
mov dword [ebp - 0x70], 0xd8c45cdb
mov dword [ebp - 0x398], 0xffffffff
mov dword [ebp - 0xcc], 0
jmp 0x100378b3
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 3
jge 0x100378cf
mov eax, dword [ebp - 0xcc]
mov dword [ebp + eax*4 - 0x60c], 0x9a9b8fa4
jmp 0x100378a6
mov dword [ebp - 0x70], 1
cmp dword [ebp - 0x70], 0
je 0x100378f5
mov dword [ebp - 0x3ec], 0xfffffffb
mov dword [ebp - 0x3ec], 0
jmp 0x10037a21
mov dword [ebp - 0x440], 0xfffd
mov dword [ebp - 0x43c], 0xfffd
mov dword [ebp - 0x438], 0xfffd
mov dword [ebp - 0x434], 0xfffd
mov dword [ebp - 0x1d4], 0x8e10e5e5
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x57c], eax
xor eax, eax
inc eax
je 0x100379fa
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x440]
cmp eax, dword [ebp - 0x70]
jle 0x10037957
mov dword [ebp - 0x1b8], 1
jmp 0x1003795e
and dword [ebp - 0x1b8], 0
cmp dword [ebp - 0x1b8], 1
jbe 0x10037973
mov dword [ebp - 0x29c], 1
jmp 0x1003797a
and dword [ebp - 0x29c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x440]
cmp dword [ebp - 0x29c], eax
jne 0x1003799b
mov dword [ebp - 0x1cc], 1
jmp 0x100379a2
and dword [ebp - 0x1cc], 0
mov eax, dword [ebp - 0x1cc]
mov dword [ebp - 0x398], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x440]
mov dword [ebp - 0x5d4], eax
cmp dword [ebp - 0x70], 0
je 0x100379dc
mov eax, 0x609f
test eax, eax
je 0x100379dc
mov dword [ebp - 0x33c], 1
jmp 0x100379e3
and dword [ebp - 0x33c], 0
mov eax, dword [ebp - 0x33c]
mov dword [ebp - 0x1d4], eax
mov eax, dword [ebp - 0x1d4]
cmp eax, dword [ebp - 0x70]
jg 0x10037a10
mov eax, 0xffff
test eax, eax
jne 0x10037a10
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x440], 0
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x60c], 2
mov byte [ebp - 0x5d], 0
push 0x3e95
push 1
push 0x3372
lea eax, [ebp - 0x5d]
push eax
push 0x530a
push 0x7813
push 1
call fcn.1002d4c2
add esp, 0x1c
lea eax, [ebp - 0x19c]
push eax
lea eax, [ebp - 0x160]
push eax
push 0
push 1
call fcn.100365e9
add esp, 0x10
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x98], 0x110e6b6c
mov dword [ebp - 0x14c], 0
jmp 0x10037a8d
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 1
jge 0x10037aa6
mov eax, dword [ebp - 0x14c]
mov dword [ebp + eax*4 - 0x14], 0x1dfe4b28
jmp 0x10037a80
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x14], 0
jne 0x10037abe
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x14], 0
push 4
pop eax
imul eax, eax, 0
push 0xfffffffffffffff9
pop ecx
sub ecx, dword [ebp + eax - 0x14]
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
add eax, ecx
push 4
pop ecx
imul ecx, ecx, 0
cmp dword [ebp + ecx - 0x14], eax
jg 0x10037aef
mov dword [ebp - 0x2a4], 1
jmp 0x10037af6
and dword [ebp - 0x2a4], 0
mov eax, dword [ebp - 0x2a4]
mov dword [ebp - 0x1c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1c]
cmp ecx, dword [ebp + eax - 0x14]
jl 0x10037b1a
mov dword [ebp - 0x1dc], 1
jmp 0x10037b21
and dword [ebp - 0x1dc], 0
cmp dword [ebp - 0x1dc], 0xb696
je 0x10037b39
mov dword [ebp - 0x30c], 1
jmp 0x10037b40
and dword [ebp - 0x30c], 0
cmp dword [ebp - 0x30c], 0xfff6
jb 0x10037b58
mov dword [ebp - 0x1e4], 1
jmp 0x10037b5f
and dword [ebp - 0x1e4], 0
mov eax, dword [ebp - 0x98]
cmp dword [ebp - 0x1e4], eax
jle 0x10037b79
mov dword [ebp - 0x2ac], 1
jmp 0x10037b80
and dword [ebp - 0x2ac], 0
cmp dword [ebp - 0x2ac], 0
jbe 0x10037bad
push 0
push 1
push 0x7e91
push 1
push 0x52dd
push 0x780a
push 0x76d2
call fcn.1003a73c
add esp, 0x1c
jmp 0x10037bc4
mov byte [ebp - 0x55], 0
push 0
push 0x1fa6
lea eax, [ebp - 0x55]
push eax
call fcn.1003a718
add esp, 0xc
mov dword [ebp - 0x98], 0
jmp 0x10037bdd
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0x10
jle 0x10037d6e
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x448], 0x1c73b017
mov dword [ebp - 0x1c], 0
jmp 0x10037c0b
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jg 0x10037d04
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x14]
mov dword [ebp - 0x584], eax
xor eax, eax
inc eax
jne 0x10037c2f
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x14], 0
push 3
pop eax
test eax, eax
je 0x10037c6a
cmp dword [ebp - 0x44], 0xea2ff3e1
ja 0x10037c4b
mov dword [ebp - 0x1ec], 1
jmp 0x10037c52
and dword [ebp - 0x1ec], 0
cmp dword [ebp - 0x1ec], 0x2ae4
je 0x10037c6a
mov dword [ebp - 0x364], 1
jmp 0x10037c71
and dword [ebp - 0x364], 0
cmp dword [ebp - 0x364], 0x3818
jl 0x10037c89
mov dword [ebp - 0x38c], 1
jmp 0x10037c90
and dword [ebp - 0x38c], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x14], 0
je 0x10037cab
xor eax, eax
inc eax
je 0x10037cab
mov dword [ebp - 0x3a0], 1
jmp 0x10037cb2
and dword [ebp - 0x3a0], 0
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x5e8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x14], 0
jne 0x10037cd7
cmp dword [ebp - 0x44], 0
jne 0x10037cd7
and dword [ebp - 0x1f4], 0
jmp 0x10037ce1
mov dword [ebp - 0x1f4], 1
mov eax, dword [ebp - 0x44]
add eax, dword [ebp - 0x1f4]
mov dword [ebp - 0x448], eax
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x14], 0
je 0x10037cff
jmp 0x10037c04
jmp 0x10037c04
mov dword [ebp - 0x44], 0
jmp 0x10037d14
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0
jg 0x10037d69
mov byte [ebp - 0x5b], 0
movzx eax, byte [ebp - 0x5b]
test eax, eax
je 0x10037d41
push 0xbb
push 0x4a10
push 0
push 1
push 0x6cf5
call fcn.100311aa
add esp, 0x14
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
mov dword [ebp - 0x2b4], eax
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x2b4]
mov dword [ebp + eax*4 - 0x14], ecx
mov eax, dword [ebp - 0x2b4]
mov dword [ebp - 0x1c], eax
jmp 0x10037d0d
jmp 0x10037bd0
mov eax, dword [ebp - 0x19c]
movzx eax, word [eax]
cmp eax, 0x5a4d
je 0x100383fc
mov dword [ebp - 0x58c], 1
mov dword [ebp - 0x4c8], 0x901f2c29
mov dword [ebp - 0x4c4], 0x901f2c29
mov dword [ebp - 0x4c0], 0x901f2c29
mov dword [ebp - 0x4bc], 0x901f2c29
lea ecx, [ebp - 0x195]
call fcn.1002042f
push eax
lea eax, [ebp - 0x4b8]
push eax
lea eax, [ebp - 0x4c8]
push eax
lea ecx, [ebp - 0x638]
call fcn.10020432
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x618]
call fcn.100203de
mov dword [ebp - 4], 1
mov dword [ebp - 0x1fc], 0x6d23
mov dword [ebp - 0xd4], 0
jmp 0x10037e13
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 1
jge 0x10037e2f
mov eax, dword [ebp - 0xd4]
mov dword [ebp + eax*4 - 0x5a0], 0xa012e1df
jmp 0x10037e06
mov eax, dword [ebp - 0x1fc]
dec eax
mov dword [ebp - 0x1fc], eax
push 1
push 1
push 0x4541
push 0x2065
push 1
push 0x540f
call fcn.10033422
add esp, 0x18
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x618]
call fcn.10020404
mov dword [ebp - 0x314], 0x1e9d
mov dword [ebp - 0x488], 0x1000863c
cmp dword [ebp - 0x314], 0x2008
jle 0x10037f61
and dword [ebp - 0x134], 0
jmp 0x10037ea2
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0x3061
jge 0x10037f61
and dword [ebp - 0x114], 0
jmp 0x10037ec8
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0x64f0
jge 0x10037f5c
and dword [ebp - 0xdc], 0
jmp 0x10037eee
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0x722e
jge 0x10037f57
mov eax, dword [ebp - 0x114]
and eax, dword [ebp - 0xdc]
xor eax, dword [ebp - 0x134]
cdq
mov dword [ebp - 0x3f8], eax
mov dword [ebp - 0x3f4], edx
push dword [ebp - 0x3f4]
push dword [ebp - 0x3f8]
lea ecx, [ebp - 0x650]
call fcn.1000a91f
pop ecx
pop ecx
mov dword [ebp - 0x3a8], eax
mov ecx, dword [ebp - 0x3a8]
call fcn.10020122
push eax
call fcn.1005a68f
pop ecx
lea ecx, [ebp - 0x650]
call fcn.10020118
jmp 0x10037ee1
jmp 0x10037ebb
jmp 0x10037e95
push 1
lea ecx, [ebp - 0x534]
call fcn.10020382
mov dword [ebp - 4], 2
mov byte [ebp - 4], 3
cmp dword [ebp - 0x314], 0x1c6d
jge 0x10037f91
push dword [ebp - 0x488]
call fcn.1005a68f
pop ecx
jmp 0x10037fad
mov dword [ebp - 4], 2
jmp 0x10037fbd
mov dword [ebp - 0x88], 1
mov dword [ebp - 0x144], 0xffffffff
mov dword [ebp - 0xf4], 0xc9ebf495
mov dword [ebp - 0x184], 1
mov dword [ebp - 0xe4], 0xfffffff7
push 2
lea ecx, [ebp - 0x388]
call fcn.10020382
mov byte [ebp - 4], 5
mov dword [ebp - 0xec], 0xac895352
mov dword [ebp - 0xa8], 0
jmp 0x10038023
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 1
jge 0x10038045
push dword [ebp - 0xa8]
lea ecx, [ebp - 0x534]
call fcn.10020420
mov dword [eax], 0xec2e
jmp 0x10038016
lea eax, [ebp - 0x388]
push eax
lea eax, [ebp - 0xa8]
push eax
push 0x6f8f
push 0x4b81
push 1
push 0
call fcn.1003629b
add esp, 0x18
push 1
lea eax, [ebp - 0x88]
push eax
push 1
push 0x5302
push 0x4c05
call fcn.100334f8
add esp, 0x14
cmp dword [ebp - 0x88], 0
jne 0x100380ba
mov eax, dword [ebp - 0xec]
dec eax
mov dword [ebp - 0xec], eax
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0
jne 0x100380ba
and dword [ebp - 0x20c], 0
jmp 0x100380c4
mov dword [ebp - 0x20c], 1
cmp dword [ebp - 0x184], 0xb07f
jle 0x100380dc
mov dword [ebp - 0x2bc], 1
jmp 0x100380e3
and dword [ebp - 0x2bc], 0
mov esi, dword [ebp - 0xe4]
push 0
lea ecx, [ebp - 0x388]
call fcn.10020420
cmp esi, dword [eax]
jle 0x10038106
mov dword [ebp - 0x204], 1
jmp 0x1003810d
and dword [ebp - 0x204], 0
mov eax, dword [ebp - 0x204]
add eax, 0xfff7
imul eax, dword [ebp - 0x2bc]
test eax, eax
jne 0x10038130
xor eax, eax
jne 0x10038130
and dword [ebp - 0x344], 0
jmp 0x1003813a
mov dword [ebp - 0x344], 1
mov eax, dword [ebp - 0x20c]
cmp eax, dword [ebp - 0x344]
jl 0x10038154
mov dword [ebp - 0x214], 1
jmp 0x1003815b
and dword [ebp - 0x214], 0
mov eax, dword [ebp - 0x144]
cmp dword [ebp - 0x214], eax
jge 0x10038175
mov dword [ebp - 0x164], 1
jmp 0x1003817c
and dword [ebp - 0x164], 0
push 1
lea ecx, [ebp - 0x388]
call fcn.10020420
mov ecx, dword [ebp - 0x164]
mov dword [eax], ecx
mov eax, dword [ebp - 0x88]
sub eax, dword [ebp - 0x164]
cmp eax, dword [ebp - 0x88]
jne 0x100381c3
push 0
lea ecx, [ebp - 0x534]
call fcn.10020420
cmp dword [eax], 0
je 0x100381c3
mov dword [ebp - 0x2c4], 1
jmp 0x100381ca
and dword [ebp - 0x2c4], 0
mov eax, dword [ebp - 0x144]
imul eax, dword [ebp - 0x2c4]
cmp eax, dword [ebp - 0xe4]
jne 0x100381eb
mov dword [ebp - 0x21c], 1
jmp 0x100381f2
and dword [ebp - 0x21c], 0
mov eax, dword [ebp - 0x21c]
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0
je 0x100383ae
mov dword [ebp - 0xa0], 0x5a02
mov dword [ebp - 0x11c], 0
jmp 0x1003822e
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 3
jge 0x1003824a
mov eax, dword [ebp - 0x11c]
mov dword [ebp + eax*4 - 0x630], 0xfffffffc
jmp 0x10038221
xor eax, eax
inc eax
je 0x10038288
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x5e4], eax
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x5a4], eax
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 0
je 0x10038288
mov dword [ebp - 0x3b0], 1
jmp 0x1003828f
and dword [ebp - 0x3b0], 0
mov eax, dword [ebp - 0xa0]
cmp eax, dword [ebp - 0xf4]
jl 0x100382a9
mov dword [ebp - 0x31c], 1
jmp 0x100382b0
and dword [ebp - 0x31c], 0
push 1
lea ecx, [ebp - 0x388]
call fcn.10020420
mov ecx, dword [ebp - 0x31c]
imul ecx, dword [eax]
mov dword [ebp - 0x224], ecx
push 1
lea ecx, [ebp - 0x388]
call fcn.10020420
mov ecx, dword [ebp - 0x224]
mov dword [eax], ecx
cmp dword [ebp - 0x224], 0
je 0x10038308
mov eax, 0xfffb
test eax, eax
je 0x10038308
cmp dword [ebp - 0xa0], 0
je 0x10038308
mov dword [ebp - 0x2cc], 1
jmp 0x1003830f
and dword [ebp - 0x2cc], 0
mov eax, dword [ebp - 0x2cc]
sub eax, dword [ebp - 0xa0]
cmp eax, dword [ebp - 0x184]
jne 0x1003832f
mov dword [ebp - 0x22c], 1
jmp 0x10038336
and dword [ebp - 0x22c], 0
cmp dword [ebp - 0x22c], 0xfffffff7
jae 0x1003834b
mov dword [ebp - 0x35c], 1
jmp 0x10038352
and dword [ebp - 0x35c], 0
mov eax, dword [ebp - 0x35c]
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xa0], 0xcad8e65d
jb 0x10038376
mov dword [ebp - 0x234], 1
jmp 0x1003837d
and dword [ebp - 0x234], 0
cmp dword [ebp - 0x234], 0xfffffff7
ja 0x10038392
mov dword [ebp - 0x2d4], 1
jmp 0x10038399
and dword [ebp - 0x2d4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2d4]
mov dword [ebp + eax - 0x630], ecx
jmp 0x100383d3
mov dword [ebp - 0x5f0], 0xffaef179
push 0x38b0
push 0
lea eax, [ebp - 0x184]
push eax
push 0x34d2
call fcn.1003b98b
add esp, 0x10
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x388]
call fcn.10020404
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x534]
call fcn.10020404
mov eax, dword [ebp - 0x6c]
and dword [eax], 0
jmp 0x1003a707
lea eax, [ebp - 0x19c]
push eax
push 1
lea eax, [ebp - 0x84]
push eax
push 0
push 0x3c3e
push 1
lea eax, [ebp - 0x160]
push eax
call fcn.1003021f
add esp, 0x1c
mov dword [ebp - 0x23c], 0xfffffff7
mov dword [ebp - 0x450], 0xfffffffe
cmp dword [ebp - 0x450], 1
jle 0x1003847d
mov dword [ebp - 0x3b8], 0xe6b
push 0x751c
push 0
push 0
push 1
lea eax, [ebp - 0x3b8]
push eax
call fcn.1003b690
add esp, 0x14
push 0x63aa
push 1
push 1
push 0x4bad
call fcn.100336b4
add esp, 0x10
jmp 0x100384c8
mov dword [ebp - 0x478], 0x8e55a441
mov byte [ebp - 0x57], 0
movzx eax, byte [ebp - 0x57]
test eax, eax
je 0x100384a9
push 1
push 0x347e
push 1
push 0x1740
call fcn.1002e640
add esp, 0x10
push 1
push 0x1bf2
lea eax, [ebp - 0x23c]
push eax
lea eax, [ebp - 0x478]
push eax
push 1
call fcn.1002e6b5
add esp, 0x14
push 0x4d06
push 1
lea eax, [ebp - 0x23c]
push eax
push 1
call fcn.100338c6
add esp, 0x10
mov eax, dword [ebp - 0x84]
cmp dword [eax], 0x4550
je 0x100387dd
mov dword [ebp - 0x90], 0x4e064826
mov byte [ebp - 0x65], 0
movzx eax, byte [ebp - 0x65]
test eax, eax
je 0x1003852d
push 0x1581
push 0x7fc
push 0x4b3c
push 0x3170
push 1
push 0x16fb
push 1
call fcn.10033952
add esp, 0x1c
mov dword [ebp - 0x90], 0
jmp 0x10038546
mov eax, dword [ebp - 0x90]
dec eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0xffffffe5
je 0x1003855c
cmp dword [ebp - 0x90], 0
je 0x1003855a
jmp 0x1003855c
jmp 0x10038539
mov dword [ebp - 0x38], 0xd4e06482
push 1
lea ecx, [ebp - 0x528]
call fcn.10020382
mov dword [ebp - 4], 6
push 0x7a0b
push 1
push 0x111
lea eax, [ebp - 0x528]
push eax
push 1
push 1
push 0x647b
push 0x13cd
push 0x73c8
push 0x19dc
lea eax, [ebp - 0x54c]
push eax
call fcn.1002e769
add esp, 0x2c
mov dword [ebp - 0x38], 0
jmp 0x100385c1
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0x17
jg 0x10038744
mov dword [ebp - 0x324], 0x2f2b
mov dword [ebp - 0x3c0], 0x1000869c
cmp dword [ebp - 0x324], 0x300f
jle 0x10038664
and dword [ebp - 0x124], 0
jmp 0x10038601
mov eax, dword [ebp - 0x124]
inc eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0x1171
jge 0x10038664
and dword [ebp - 0xfc], 0
jmp 0x10038623
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0x7b61
jge 0x10038662
mov eax, dword [ebp - 0x124]
mov ecx, dword [ebp - 0xfc]
sar eax, cl
cdq
mov dword [ebp - 0x404], eax
mov dword [ebp - 0x400], edx
push dword [ebp - 0x400]
push dword [ebp - 0x404]
mov ecx, 0x1061b298
call fcn.10020142
jmp 0x10038616
jmp 0x100385f4
mov byte [ebp - 4], 7
cmp dword [ebp - 0x324], 0x2cd8
jge 0x10038684
mov edx, dword [ebp - 0x3c0]
mov ecx, 0x1061b298
call fcn.10022fc2
jmp 0x100386a0
mov dword [ebp - 4], 6
jmp 0x100386b0
mov dword [ebp - 0x13c], 0
jmp 0x100386c9
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 1
jge 0x100386e5
mov eax, dword [ebp - 0x13c]
mov dword [ebp + eax*4 - 0xb0], 0xe1d925b0
jmp 0x100386bc
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xb0], 0x15
jmp 0x10038713
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb0]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xb0], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xb0], 5
jg 0x10038737
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xb0], 0
je 0x10038735
jmp 0x10038737
jmp 0x100386f8
cmp dword [ebp - 0x38], 0
je 0x1003873f
jmp 0x10038744
jmp 0x100385ba
mov dword [ebp - 0x38], 0
jmp 0x10038754
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0xfffffffa
jl 0x100387c3
mov dword [ebp - 0x7c], 1
mov dword [ebp - 0x244], 8
mov dword [ebp - 0x7c], 0
jmp 0x1003877b
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0
jg 0x100387c1
push 1
lea eax, [ebp - 0x244]
push eax
push 0
push 0x4055
push 0x6615
call fcn.1002ec7c
add esp, 0x14
push 0x5a56
push 0
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x528]
push eax
lea eax, [ebp - 0x7c]
push eax
call fcn.1003bf2f
add esp, 0x14
jmp 0x10038774
jmp 0x1003874d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x528]
call fcn.10020404
mov eax, dword [ebp - 0x6c]
and dword [eax], 0
jmp 0x1003a707
push 0x7af1
push 0x7bd8
push 1
push 1
push 0x353a
call fcn.1002ea82
add esp, 0x14
push 0x6ebd
push 0x12e9
lea eax, [ebp - 0x128]
push eax
push 1
push 0x58a4
push 0x6f17
push 0x13c2
push 1
lea eax, [ebp - 0x84]
push eax
push 0x6d32
call fcn.1002eb60
add esp, 0x28
cmp dword [ebp - 0x128], 0
jne 0x10038b51
mov dword [ebp - 0x16c], 5
mov dword [ebp - 0x548], 0x1c58bdfa
mov dword [ebp - 0x80], 0xffffffff
mov dword [ebp - 0x194], 0xfffffff7
mov dword [ebp - 0x104], 0
jmp 0x1003887b
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 3
jge 0x10038897
mov eax, dword [ebp - 0x104]
mov dword [ebp + eax*4 - 0x5c0], 0x6364
jmp 0x1003886e
cmp dword [ebp - 0x16c], 0
jne 0x100388b0
push 0xfffffffffffffffa
pop eax
test eax, eax
jne 0x100388b0
and dword [ebp - 0x2dc], 0
jmp 0x100388ba
mov dword [ebp - 0x2dc], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x5c0]
cmp dword [ebp - 0x2dc], eax
je 0x1003892c
cmp dword [ebp - 0x16c], 0
je 0x1003892c
mov dword [ebp - 0x12c], 0
jmp 0x100388f0
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 1
jge 0x1003890c
mov eax, dword [ebp - 0x12c]
mov dword [ebp + eax*4 - 0x24c], 0xffff
jmp 0x100388e3
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x24c]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x24c], eax
jmp 0x10038b46
mov dword [ebp - 0x32c], 0xa3d35555
push 0x45a1
push 0x195c
push 0x6de4
push 1
lea eax, [ebp - 0x194]
push eax
push 1
push 0
push 0x4cd3
push 0x28ff
call fcn.1002eff1
add esp, 0x24
mov dword [ebp - 0x80], 0xe
jmp 0x10038974
mov eax, dword [ebp - 0x80]
dec eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0xffffffeb
jl 0x10038b46
mov dword [ebp - 0x74], 0xfff6
mov dword [ebp - 0x174], 0xffffffff
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0
jne 0x10038a8f
mov dword [ebp - 0x194], 0xcb56
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x558], eax
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x560], eax
mov eax, 0xf2b5d06d
test eax, eax
jae 0x100389d6
mov dword [ebp - 0x34c], 1
jmp 0x100389dd
and dword [ebp - 0x34c], 0
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x34c], eax
jg 0x100389f4
mov dword [ebp - 0x254], 1
jmp 0x100389fb
and dword [ebp - 0x254], 0
cmp dword [ebp - 0x254], 0xfffffffe
jge 0x10038a10
mov dword [ebp - 0x2e4], 1
jmp 0x10038a17
and dword [ebp - 0x2e4], 0
mov eax, dword [ebp - 0x32c]
cmp dword [ebp - 0x2e4], eax
jne 0x10038a31
mov dword [ebp - 0x25c], 1
jmp 0x10038a38
and dword [ebp - 0x25c], 0
cmp dword [ebp - 0x25c], 0
jb 0x10038a4d
mov dword [ebp - 0x458], 1
jmp 0x10038a54
and dword [ebp - 0x458], 0
mov eax, dword [ebp - 0x32c]
mov dword [ebp - 0x568], eax
mov eax, dword [ebp - 0x74]
cmp eax, dword [ebp - 0x80]
je 0x10038a74
mov dword [ebp - 0x264], 1
jmp 0x10038a7b
and dword [ebp - 0x264], 0
mov eax, dword [ebp - 0x74]
cmp eax, dword [ebp - 0x264]
jne 0x10038a8f
and dword [ebp - 0x3c8], 0
jmp 0x10038a99
mov dword [ebp - 0x3c8], 1
push 0xfffffffffffffffb
pop eax
inc eax
cmp eax, dword [ebp - 0x174]
jg 0x10038ab1
mov dword [ebp - 0x2ec], 1
jmp 0x10038ab8
and dword [ebp - 0x2ec], 0
mov eax, dword [ebp - 0x174]
cmp dword [ebp - 0x2ec], eax
jne 0x10038ad2
mov dword [ebp - 0x26c], 1
jmp 0x10038ad9
and dword [ebp - 0x26c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x26c]
neg ecx
cmp ecx, dword [ebp + eax - 0x5c0]
jle 0x10038afc
mov dword [ebp - 0x36c], 1
jmp 0x10038b03
and dword [ebp - 0x36c], 0
cmp dword [ebp - 0x36c], 0xcedb1a73
jbe 0x10038b1b
mov dword [ebp - 0x274], 1
jmp 0x10038b22
and dword [ebp - 0x274], 0
mov eax, dword [ebp - 0x274]
mov dword [ebp - 0x174], eax
push 1
push 1
push 1
push 0x2e7e
call fcn.10033a71
add esp, 0x10
jmp 0x1003896d
mov eax, dword [ebp - 0x6c]
and dword [eax], 0
jmp 0x1003a707
mov dword [ebp - 0x24], 0x9807
mov dword [ebp - 0x28], 1
mov dword [ebp - 0x4c], 0xfffffffb
push 1
lea ecx, [ebp - 0x15c]
call fcn.10020382
mov dword [ebp - 4], 9
push 1
lea ecx, [ebp - 0x51c]
call fcn.10020382
mov byte [ebp - 4], 0xa
mov dword [ebp - 0xc4], 0x96bb6454
mov dword [ebp - 0x3e0], 0xf3bb579a
lea eax, [ebp - 0x15c]
push eax
push 0x6e56
push 0x1e9e
push 1
push 0x5163
push 1
push 1
push 0xbdc
lea eax, [ebp - 0x494]
push eax
call fcn.1002eff1
add esp, 0x24
push 0xd7c
lea eax, [ebp - 0x494]
push eax
lea eax, [ebp - 0x51c]
push eax
push 0x478f
push 0
push 0x6bb
call fcn.1003ab88
add esp, 0x18
push 0
lea ecx, [ebp - 0x15c]
call fcn.10020420
mov eax, dword [eax]
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x4c], 0
je 0x10038c20
cmp dword [ebp - 0x4c], 0
je 0x10038c20
mov dword [ebp - 0x2f4], 1
jmp 0x10038c27
and dword [ebp - 0x2f4], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x2f4], eax
jg 0x10038c3e
mov dword [ebp - 0x3d0], 1
jmp 0x10038c45
and dword [ebp - 0x3d0], 0
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x570], eax
push 0
lea ecx, [ebp - 0x15c]
call fcn.10020420
push 0
lea ecx, [ebp - 0x15c]
call fcn.10020420
cmp dword [eax], 0
je 0x10038c72
xor eax, eax
inc eax
jne 0x10038c78
cmp dword [ebp - 0x24], 0
je 0x10038c9c
push 0
lea ecx, [ebp - 0x15c]
call fcn.10020420
cmp dword [eax], 0
je 0x10038c9c
cmp dword [ebp - 0x24], 0
je 0x10038c9c
mov dword [ebp - 0x27c], 1
jmp 0x10038ca3
and dword [ebp - 0x27c], 0
push 0
lea ecx, [ebp - 0x15c]
call fcn.10020420
mov eax, dword [eax]
cmp eax, dword [ebp - 0x27c]
jle 0x10038cc6
mov dword [ebp - 0x334], 1
jmp 0x10038ccd
and dword [ebp - 0x334], 0
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x334]
jl 0x10038ce4
mov dword [ebp - 0x284], 1
jmp 0x10038ceb
and dword [ebp - 0x284], 0
push 0
lea ecx, [ebp - 0x51c]
call fcn.10020420
mov dword [ebp - 0x18c], eax
mov eax, dword [ebp - 0x18c]
mov eax, dword [eax]
sub eax, dword [ebp - 0x284]
mov dword [ebp - 0x2fc], eax
push 0
lea ecx, [ebp - 0x15c]
call fcn.10020420
mov ecx, dword [ebp - 0x2fc]
mov dword [eax], ecx
mov eax, dword [ebp - 0x2fc]
mov ecx, dword [ebp - 0x18c]
mov ecx, dword [ecx]
dec ecx
mov edx, dword [ebp - 0x18c]
mov dword [edx], ecx
test eax, eax
jne 0x10038d51
cmp dword [ebp - 0x4c], 0
jne 0x10038d51
and dword [ebp - 0x28c], 0
jmp 0x10038d5b
mov dword [ebp - 0x28c], 1
mov eax, dword [ebp - 0xc4]
cmp dword [ebp - 0x28c], eax
jg 0x10038d75
mov dword [ebp - 0x354], 1
jmp 0x10038d7c
and dword [ebp - 0x354], 0
mov eax, dword [ebp - 0xc4]
cmp dword [ebp - 0x354], eax
jle 0x10038d96
mov dword [ebp - 0x294], 1
jmp 0x10038d9d
and dword [ebp - 0x294], 0
mov eax, dword [ebp - 0xc4]
add eax, dword [ebp - 0x294]
jne 0x10038dba
cmp dword [ebp - 0x28], 0
jne 0x10038dba
and dword [ebp - 0x304], 0
jmp 0x10038dc4
mov dword [ebp - 0x304], 1
cmp dword [ebp - 0x304], 1
jb 0x10038dd9
mov dword [ebp - 0x1b0], 1
jmp 0x10038de0
and dword [ebp - 0x1b0], 0
cmp dword [ebp - 0x1b0], 0xfffffff9
jge 0x10038df5
mov dword [ebp - 0x1c8], 1
jmp 0x10038dfc
and dword [ebp - 0x1c8], 0
mov eax, dword [ebp - 0xc4]
cmp dword [ebp - 0x1c8], eax
je 0x10038e16
mov dword [ebp - 0x1d0], 1
jmp 0x10038e1d
and dword [ebp - 0x1d0], 0
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x1d0]
jle 0x10038e34
mov dword [ebp - 0x1d8], 1
jmp 0x10038e3b
and dword [ebp - 0x1d8], 0
mov eax, dword [ebp - 0x4c]
imul eax, dword [ebp - 0x1d8]
test eax, eax
je 0x10039031
mov dword [ebp - 0x1f0], 0x15bfeb1e
mov dword [ebp - 0x3c], 0
jmp 0x10038e67
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 3
jge 0x10038e7d
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x5d0], 0xa8b1460d
jmp 0x10038e60
mov dword [ebp - 0x3c], 0
jmp 0x10038e8d
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 2
jge 0x10038ea3
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x4b4], 0
jmp 0x10038e86
mov dword [ebp - 0x28], 0
jmp 0x10038eb3
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jl 0x1003902c
mov dword [ebp - 0x208], 0x24086237
mov byte [ebp - 0x52], 0
push 1
lea eax, [ebp - 0x52]
push eax
push 1
call fcn.10033b19
add esp, 0xc
mov dword [ebp - 0x24], 0
jmp 0x10038eeb
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jg 0x10039027
push dword [ebp - 0x24]
lea ecx, [ebp - 0x15c]
call fcn.10020420
cmp dword [eax], 0
jne 0x10038f52
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x5d0]
cmp eax, dword [ebp - 0x24]
jl 0x10038f26
mov dword [ebp - 0x17c], 1
jmp 0x10038f2d
and dword [ebp - 0x17c], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x17c]
mov dword [ebp + eax - 0x5d0], ecx
cmp dword [ebp - 0x17c], 0
jne 0x10038f52
and dword [ebp - 0x1e0], 0
jmp 0x10038f5c
mov dword [ebp - 0x1e0], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x4b4]
cmp dword [ebp - 0x1e0], eax
jle 0x10038f7d
mov dword [ebp - 0x1ac], 1
jmp 0x10038f84
and dword [ebp - 0x1ac], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x4b4]
cmp dword [ebp - 0x1ac], eax
je 0x10038fa5
mov dword [ebp - 0x1f8], 1
jmp 0x10038fac
and dword [ebp - 0x1f8], 0
mov dword [ebp - 0x4c], 0xb505
push dword [ebp - 0x28]
lea ecx, [ebp - 0x15c]
call fcn.10020420
mov eax, dword [eax]
mov dword [ebp - 0x1f0], eax
mov esi, dword [ebp - 0x1f0]
mov edi, dword [ebp - 0x4c]
push dword [ebp - 0x28]
lea ecx, [ebp - 0x15c]
call fcn.10020420
mov eax, dword [eax]
add eax, edi
sub eax, esi
cmp eax, dword [ebp - 0x1f8]
jne 0x10038ffa
mov dword [ebp - 0x200], 1
jmp 0x10039001
and dword [ebp - 0x200], 0
mov eax, dword [ebp - 0x200]
mov dword [ebp - 0x208], eax
mov esi, dword [ebp - 0x208]
push 0
lea ecx, [ebp - 0x15c]
call fcn.10020420
mov dword [eax], esi
jmp 0x10038ee4
jmp 0x10038eac
jmp 0x10039109
mov dword [ebp - 0x460], 0x8a84a000
push 2
lea ecx, [ebp - 0x4ec]
call fcn.10020382
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x480], 0xdb59fb14
mov dword [ebp - 0x3d8], 0xeb039226
push 0x9eb
push 0x2650
push 1
push 0x6f7b
lea eax, [ebp - 0x578]
push eax
push 1
lea eax, [ebp - 0x4ec]
push eax
call fcn.1002f351
add esp, 0x1c
push 0x5374
lea eax, [ebp - 0x28]
push eax
push 1
push 1
push 0x386a
call fcn.1002f547
add esp, 0x14
lea eax, [ebp - 0x460]
push eax
push 0x6a3a
lea eax, [ebp - 0x15c]
push eax
lea eax, [ebp - 0x28]
push eax
push 0x6223
lea eax, [ebp - 0x4ec]
push eax
push 1
push 0xe0d
push 0
push 0x2a1d
lea eax, [ebp - 0x3d8]
push eax
lea eax, [ebp - 0x480]
push eax
lea eax, [ebp - 0x3e0]
push eax
lea eax, [ebp - 0x4c]
push eax
push 0x42a3
call fcn.100306ac
add esp, 0x3c
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x4ec]
call fcn.10020404
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x51c]
call fcn.10020404
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x15c]
call fcn.10020404
push 0x6e94
push 0x7ae2
push 0x68dd
lea eax, [ebp - 0x19c]
push eax
push 0x2d36
push 0x7763
lea eax, [ebp - 0x580]
push eax
push 0x1f9d
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x128]
push eax
push 1
push 1
call fcn.10033cf7
add esp, 0x34
push 0xe41
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x160]
push eax
push 1
push 1
push 0x5bfd
push 0x2ddc
push 1
call fcn.1002f867
add esp, 0x24
push 0x4924
push 0x2d5b
push 1
push 1
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x128]
push eax
push 0x7bee
push 1
lea eax, [ebp - 0x290]
push eax
call fcn.10034213
add esp, 0x24
mov dword [ebp - 0x30], 0x91c5
mov dword [ebp - 0x170], 0xfffffff8
mov dword [ebp - 0x178], 0x535dd253
mov dword [ebp - 0x430], 0xff74
xor eax, eax
je 0x100393c4
mov dword [ebp - 0x240], 6
mov dword [ebp - 0x3e8], 0
mov dword [ebp - 0xc8], 0
jmp 0x1003922c
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 3
jge 0x10039248
mov eax, dword [ebp - 0xc8]
mov dword [ebp + eax*4 - 0x504], 0xffff
jmp 0x1003921f
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x588], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x504], 0xfffffff7
jg 0x1003926d
mov dword [ebp - 0x210], 1
jmp 0x10039274
and dword [ebp - 0x210], 0
mov eax, dword [ebp - 0x30]
add eax, dword [ebp - 0x210]
cmp eax, 0xfa1e1c5a
ja 0x100392a0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x504], 0
je 0x100392a0
mov dword [ebp - 0x218], 1
jmp 0x100392a7
and dword [ebp - 0x218], 0
mov eax, dword [ebp - 0x30]
imul eax, dword [ebp - 0x218]
test eax, eax
je 0x100392c8
push 8
pop eax
test eax, eax
je 0x100392c8
mov dword [ebp - 0x220], 1
jmp 0x100392cf
and dword [ebp - 0x220], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x30]
imul ecx, dword [ebp - 0x220]
cmp ecx, dword [ebp + eax - 0x504]
jne 0x100392f4
mov dword [ebp - 0x228], 1
jmp 0x100392fb
and dword [ebp - 0x228], 0
cmp dword [ebp - 0x228], 1
jbe 0x10039310
mov dword [ebp - 0x230], 1
jmp 0x10039317
and dword [ebp - 0x230], 0
cmp dword [ebp - 0x230], 0x42be197e
jge 0x1003932f
mov dword [ebp - 0x238], 1
jmp 0x10039336
and dword [ebp - 0x238], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x238], eax
jl 0x1003934d
mov dword [ebp - 0x468], 1
jmp 0x10039354
and dword [ebp - 0x468], 0
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x590], eax
mov dword [ebp - 0x240], 0x1dab
cmp dword [ebp - 0x240], 0x6712
jg 0x1003937f
mov dword [ebp - 0x248], 1
jmp 0x10039386
and dword [ebp - 0x248], 0
imul eax, dword [ebp - 0x248], 0xa8e9
mov dword [ebp - 0x3e8], eax
mov byte [ebp - 0x5c], 0
movzx eax, byte [ebp - 0x5c]
test eax, eax
je 0x100393bf
push 1
push 0
push 0x74bf
push 1
push 0x6e31
push 0x653d
call fcn.1003667d
add esp, 0x18
jmp 0x1003972e
mov dword [ebp - 0x50], 0x747c914a
mov dword [ebp - 0xf0], 0xc4b05ef1
mov dword [ebp - 0x168], 0xfffffffa
cmp dword [ebp - 0x30], 0
jne 0x10039492
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x5a8], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x5b0], eax
cmp dword [ebp - 0x50], 0x2fbf3f07
jle 0x10039410
mov dword [ebp - 0x250], 1
jmp 0x10039417
and dword [ebp - 0x250], 0
mov eax, dword [ebp - 0x250]
add eax, 0x991f
cmp eax, 0xafcb
jg 0x10039435
mov dword [ebp - 0x258], 1
jmp 0x1003943c
and dword [ebp - 0x258], 0
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0xf0], eax
mov eax, dword [ebp - 0xf0]
cmp eax, dword [ebp - 0x258]
jle 0x1003945f
mov dword [ebp - 0x260], 1
jmp 0x10039466
and dword [ebp - 0x260], 0
mov eax, dword [ebp - 0x168]
dec eax
mov dword [ebp - 0x168], eax
mov eax, dword [ebp - 0x260]
sub eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x168]
imul ecx, eax
test ecx, ecx
jne 0x10039492
and dword [ebp - 0x268], 0
jmp 0x1003949c
mov dword [ebp - 0x268], 1
mov eax, dword [ebp - 0x268]
mov dword [ebp - 0x178], eax
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x170], eax
mov eax, dword [ebp - 0x170]
cmp eax, dword [ebp - 0x50]
jl 0x100394cb
mov dword [ebp - 0x490], 1
jmp 0x100394d2
and dword [ebp - 0x490], 0
push 5
pop eax
cmp eax, 0xfffffffc
jg 0x100394e6
mov dword [ebp - 0x270], 1
jmp 0x100394ed
and dword [ebp - 0x270], 0
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x270], eax
jg 0x10039504
mov dword [ebp - 0x278], 1
jmp 0x1003950b
and dword [ebp - 0x278], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x278], eax
jl 0x10039522
mov dword [ebp - 0x280], 1
jmp 0x10039529
and dword [ebp - 0x280], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x280], eax
je 0x1003953e
cmp dword [ebp - 0x50], 0
je 0x100396cc
mov dword [ebp - 0x288], 0x2c6b
mov dword [ebp - 0x3f0], 0x100086e0
cmp dword [ebp - 0x288], 0x3002
jle 0x1003960a
and dword [ebp - 0xd0], 0
jmp 0x10039578
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0x6006
jge 0x1003960a
and dword [ebp - 0xd8], 0
jmp 0x1003959e
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0x3f2c
jge 0x10039605
and dword [ebp - 0xe0], 0
jmp 0x100395c0
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0xed3
jge 0x10039603
mov eax, dword [ebp - 0xd0]
and eax, dword [ebp - 0xd8]
xor eax, dword [ebp - 0xe0]
cdq
mov dword [ebp - 0x410], eax
mov dword [ebp - 0x40c], edx
push dword [ebp - 0x40c]
push dword [ebp - 0x410]
mov ecx, 0x1061b298
call fcn.10020142
jmp 0x100395b3
jmp 0x10039591
jmp 0x1003956b
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0x288], 0x2aa4
jge 0x1003962d
mov edx, dword [ebp - 0x3f0]
mov ecx, 0x1061b298
call fcn.10022fc2
jmp 0x10039649
or dword [ebp - 4], 0xffffffff
jmp 0x10039653
mov dword [ebp - 0xe8], 0
jmp 0x1003966c
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 1
jge 0x10039688
mov eax, dword [ebp - 0xe8]
mov dword [ebp + eax*4 - 0x600], 0x61f
jmp 0x1003965f
push 0xa1f
push 0x3426
push 1
push 1
push 1
push 0x5d84
lea eax, [ebp - 0x170]
push eax
push 0x8c2
push 0x2741
push 0x6b15
push 0x1580
push 0xef3
push 0x7aef
call fcn.10034476
add esp, 0x34
jmp 0x1003972e
mov dword [ebp - 0x5ec], 9
push 0x27e8
lea eax, [ebp - 0x430]
push eax
push 0
push 0
push 1
push 0x541f
push 0x2843
push 0x16e
push 0x446a
push 0x1686
push 0x7bfc
push 0x7714
push 0x2ccc
call fcn.10034476
add esp, 0x34
mov dword [ebp - 0xf0], 6
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x290], 0
je 0x1003986b
push 1
lea ecx, [ebp - 0x4e0]
call fcn.10020382
mov dword [ebp - 4], 0xe
push 2
lea ecx, [ebp - 0x4d4]
call fcn.10020382
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x59c], 0x31eb
mov dword [ebp - 0x5ac], 0xf6f49c23
mov dword [ebp - 0x3fc], 0xee91b76e
push 1
push 1
lea eax, [ebp - 0x4e0]
push eax
lea eax, [ebp - 0x2c]
push eax
push 1
push 0x524b
push 0xd36
push 0x66fe
push 0x3aac
call fcn.10035710
add esp, 0x24
mov dword [ebp - 0x2c], 0
jmp 0x100397bb
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jge 0x100397d7
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x4d4]
call fcn.10020420
mov dword [eax], 0x14c405b4
jmp 0x100397b4
mov dword [ebp - 0x2c], 0
jmp 0x100397e7
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jge 0x100397fd
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x554], 0x4794
jmp 0x100397e0
push 1
push 1
call fcn.1003600a
pop ecx
pop ecx
lea eax, [ebp - 0x4e0]
push eax
push 1
lea eax, [ebp - 0x4d4]
push eax
push 1
push 0x597
push 0x4a03
push 0x6af0
lea eax, [ebp - 0x3fc]
push eax
call fcn.10036086
add esp, 0x20
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x4d4]
call fcn.10020404
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4e0]
call fcn.10020404
lea eax, [ebp - 0x34]
push eax
push 1
lea eax, [ebp - 0x290]
push eax
call fcn.1002fc97
add esp, 0xc
mov dword [ebp - 0x48], 1
mov dword [ebp - 0xf8], 0
jmp 0x1003988b
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 3
jge 0x100398a7
mov eax, dword [ebp - 0xf8]
mov dword [ebp + eax*4 - 0x4ac], 5
jmp 0x1003987e
mov dword [ebp - 0x48], 2
jmp 0x100398b7
mov eax, dword [ebp - 0x48]
dec eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
jl 0x10039b3b
push 4
lea ecx, [ebp - 0x37c]
call fcn.10020382
mov dword [ebp - 4], 0x10
push 0x466c
lea eax, [ebp - 0x37c]
push eax
push 0x4913
push 0x74a1
push 0x5033
push 0
lea eax, [ebp - 0x8c]
push eax
push 0x7ac3
push 0x70c0
push 0x7fb
push 1
push 0x7054
call fcn.10033f3d
add esp, 0x30
mov dword [ebp - 0x8c], 0
jmp 0x10039930
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 1
jge 0x1003994c
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0x444], 0xffffffff
jmp 0x10039923
cmp dword [ebp - 0x48], 0
je 0x10039a4d
mov eax, dword [ebp - 0x48]
cmp dword [ebp + eax*4 - 0x4ac], 0
je 0x10039a20
mov esi, dword [ebp - 0x48]
push 0
lea ecx, [ebp - 0x37c]
call fcn.10020420
cmp esi, dword [eax]
jg 0x10039987
mov dword [ebp - 0x298], 1
jmp 0x1003998e
and dword [ebp - 0x298], 0
push 3
lea ecx, [ebp - 0x37c]
call fcn.10020420
mov ecx, dword [ebp - 0x298]
cmp ecx, dword [eax]
jge 0x100399b1
mov dword [ebp - 0x2a0], 1
jmp 0x100399b8
and dword [ebp - 0x2a0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x4ac]
cmp dword [ebp - 0x2a0], eax
jge 0x100399d9
mov dword [ebp - 0x2a8], 1
jmp 0x100399e0
and dword [ebp - 0x2a8], 0
cmp dword [ebp - 0x2a8], 0xdf2ef51a
jbe 0x100399f8
mov dword [ebp - 0x2b0], 1
jmp 0x100399ff
and dword [ebp - 0x2b0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x4ac]
cmp eax, dword [ebp - 0x2b0]
jl 0x10039a20
mov dword [ebp - 0x2b8], 1
jmp 0x10039a27
and dword [ebp - 0x2b8], 0
push 0
lea ecx, [ebp - 0x37c]
call fcn.10020420
mov ecx, dword [ebp - 0x2b8]
imul ecx, dword [eax]
test ecx, ecx
je 0x10039a4d
mov dword [ebp - 0x2c0], 1
jmp 0x10039a54
and dword [ebp - 0x2c0], 0
push 0
lea ecx, [ebp - 0x37c]
call fcn.10020420
mov ecx, dword [ebp - 0x2c0]
cmp ecx, dword [eax]
jl 0x10039a77
mov dword [ebp - 0x2c8], 1
jmp 0x10039a7e
and dword [ebp - 0x2c8], 0
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp + eax*4 - 0x4ac]
cmp eax, dword [ebp - 0x2c8]
jge 0x10039a9c
mov dword [ebp - 0x2d0], 1
jmp 0x10039aa3
and dword [ebp - 0x2d0], 0
cmp dword [ebp - 0x2d0], 0xb34c266d
je 0x10039abb
mov dword [ebp - 0x2d8], 1
jmp 0x10039ac2
and dword [ebp - 0x2d8], 0
push 0
lea ecx, [ebp - 0x37c]
call fcn.10020420
mov ecx, dword [ebp - 0x2d8]
cmp ecx, dword [eax]
jle 0x10039ae5
mov dword [ebp - 0x2e0], 1
jmp 0x10039aec
and dword [ebp - 0x2e0], 0
cmp dword [ebp - 0x2e0], 0xbed162c5
jbe 0x10039b0a
mov eax, 0xffff
test eax, eax
jne 0x10039b0a
and dword [ebp - 0x2e8], 0
jmp 0x10039b14
mov dword [ebp - 0x2e8], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2e8]
mov dword [ebp + eax - 0x444], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x37c]
call fcn.10020404
jmp 0x100398b0
push dword [ebp - 0x34]
call fcn.1002cf4c
pop ecx
test eax, eax
jne 0x10039b53
mov eax, dword [ebp - 0x6c]
and dword [eax], 0
jmp 0x1003a707
mov dword [ebp - 0x408], 0x1c91
cmp dword [ebp - 0x408], 0x9f6
jge 0x10039c4e
mov dword [ebp - 0x5f8], 9
mov byte [ebp - 0x1a8], 0
xor eax, eax
mov dword [ebp - 0x1a7], eax
mov dword [ebp - 0x1a3], eax
and dword [ebp - 0x64], 0
cmp dword [ebp - 0x64], 9
jge 0x10039be0
lea eax, [ebp - 0x1d]
push eax
push 0x10008774
call fcn.1005a45b
pop ecx
pop ecx
movsx eax, byte [ebp - 0x1d]
cmp eax, 0x58
jne 0x10039bc3
mov eax, dword [ebp - 0x64]
mov byte [ebp + eax - 0x1a8], 1
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
jmp 0x10039bde
movsx eax, byte [ebp - 0x1d]
cmp eax, 0x2e
jne 0x10039bde
mov eax, dword [ebp - 0x64]
mov byte [ebp + eax - 0x1a8], 0
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
jmp 0x10039b90
mov byte [ebp - 0x1e], 1
and dword [ebp - 0x94], 0
jmp 0x10039bfa
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 9
jge 0x10039c2e
push 8
pop eax
sub eax, dword [ebp - 0x94]
movzx eax, byte [ebp + eax - 0x1a8]
mov ecx, dword [ebp - 0x94]
movzx ecx, byte [ebp + ecx - 0x1a8]
cmp ecx, eax
je 0x10039c2c
mov byte [ebp - 0x1e], 0
jmp 0x10039c2e
jmp 0x10039bed
movzx eax, byte [ebp - 0x1e]
test eax, eax
je 0x10039c43
push 0x10008778
call fcn.1005a846
pop ecx
jmp 0x10039c4e
push 0x1000877c
call fcn.1005a846
pop ecx
mov dword [ebp - 0xa4], 1
mov dword [ebp - 0x9c], 0xc7730f94
push 2
lea ecx, [ebp - 0x5e0]
call fcn.10020382
mov dword [ebp - 4], 0x11
lea eax, [ebp - 0x5e0]
push eax
lea eax, [ebp - 0x55c]
push eax
push 0
call fcn.1003bba3
add esp, 0xc
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0x9c]
push eax
push 1
push 0x602
push 1
push 0x7e58
call fcn.1002fe6f
add esp, 0x18
mov dword [ebp - 0x9c], 1
jmp 0x10039ccb
mov eax, dword [ebp - 0x9c]
dec eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0
jl 0x10039d38
mov dword [ebp - 0xa4], 0
jmp 0x10039ced
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 1
jg 0x10039d13
mov byte [ebp - 0x51], 0
lea eax, [ebp - 0x51]
push eax
push 0
push 1
push 1
push 0x66c4
call fcn.1003b690
add esp, 0x14
jmp 0x10039ce0
mov byte [ebp - 0x54], 0
push 0x4c9b
push 0x611f
push 0x78eb
lea eax, [ebp - 0x54]
push eax
push 1
push 1
call fcn.1003629b
add esp, 0x18
jmp 0x10039cbe
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5e0]
call fcn.10020404
push 1
push 0x120b
push 1
lea eax, [ebp - 0x34]
push eax
push 0x3475
push 0x383f
push 0x28a2
call fcn.1002ff23
add esp, 0x1c
push 1
push 1
push 1
call fcn.10036366
add esp, 0xc
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
cmp dword [eax + 0x28], 0
je 0x1003a6c5
mov dword [ebp - 0x40], 0xfffffffb
mov dword [ebp - 0x2f0], 0x77d0
mov dword [ebp - 0x44c], 0x10008780
cmp dword [ebp - 0x2f0], 0x7a1a
jle 0x10039e65
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetExitCodeThread]
and dword [ebp - 0x110], 0
jmp 0x10039dd3
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0xd1a
jge 0x10039e65
and dword [ebp - 0xbc], 0
jmp 0x10039df9
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0x536e
jge 0x10039e60
and dword [ebp - 0xc0], 0
jmp 0x10039e1b
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0x3e07
jge 0x10039e5e
mov eax, dword [ebp - 0xbc]
sub eax, dword [ebp - 0xc0]
xor eax, dword [ebp - 0x110]
cdq
mov dword [ebp - 0x41c], eax
mov dword [ebp - 0x418], edx
push dword [ebp - 0x418]
push dword [ebp - 0x41c]
mov ecx, 0x1061b298
call fcn.10020142
jmp 0x10039e0e
jmp 0x10039dec
jmp 0x10039dc6
mov dword [ebp - 0x2f8], 0x5a5efa20
mov dword [ebp - 4], 0x12
cmp dword [ebp - 0x2f0], 0x758b
jge 0x10039e92
mov edx, dword [ebp - 0x44c]
mov ecx, 0x1061b298
call fcn.10022fc2
jmp 0x10039eae
or dword [ebp - 4], 0xffffffff
jmp 0x10039eb8
mov dword [ebp - 0x5b4], 0x2612
mov dword [ebp - 0x118], 0
jmp 0x10039edb
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 3
jge 0x10039ef7
mov eax, dword [ebp - 0x118]
mov dword [ebp + eax*4 - 0x624], 0x51c6076f
jmp 0x10039ece
mov dword [ebp - 0x40], 0
jmp 0x10039f07
mov eax, dword [ebp - 0x40]
dec eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0xfffffffb
jl 0x1003a000
mov dword [ebp - 0x120], 6
mov dword [ebp - 0x420], 0x2415fb57
mov byte [ebp - 0x56], 0
push 0x7731
push 1
push 0x16fe
push 1
lea eax, [ebp - 0x56]
push eax
push 1
push 0x4554
call fcn.1003021f
add esp, 0x1c
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x2f8], eax
mov eax, dword [ebp - 0x2f8]
cmp eax, dword [ebp - 0x40]
jge 0x10039f6d
mov dword [ebp - 0x414], 1
jmp 0x10039f74
and dword [ebp - 0x414], 0
mov eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0x40]
jg 0x10039f85
mov eax, 0xbc56
test eax, eax
je 0x10039f97
cmp dword [ebp - 0x40], 0
je 0x10039f97
mov dword [ebp - 0x180], 1
jmp 0x10039f9e
and dword [ebp - 0x180], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x180]
mov dword [ebp + eax - 0x624], ecx
mov eax, dword [ebp - 0x180]
dec eax
mov ecx, dword [ebp - 0x120]
imul ecx, eax
cmp ecx, dword [ebp - 0x120]
jle 0x10039fd5
mov dword [ebp - 0x454], 1
jmp 0x10039fdc
and dword [ebp - 0x454], 0
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x564], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x5fc], eax
mov dword [ebp - 0x420], 1
jmp 0x10039f00
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x128]
add ecx, dword [eax + 0x28]
mov dword [ebp - 0x328], ecx
mov dword [ebp - 0xac], 0xfffffffd
mov dword [ebp - 0x188], 0x3a34c865
mov dword [ebp - 0x310], 0xfffffffa
mov dword [ebp - 0x56c], 0
mov dword [ebp - 0x130], 0
jmp 0x1003a055
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 2
jge 0x1003a071
mov eax, dword [ebp - 0x130]
mov dword [ebp + eax*4 - 0x598], 0xb69b2e41
jmp 0x1003a048
cmp dword [ebp - 0xac], 0
je 0x1003a083
cmp dword [ebp - 0xac], 0
jne 0x1003a0b2
mov dword [ebp - 0x188], 0x1abbe
cmp dword [ebp - 0x188], 0x4f16
jl 0x1003a0a5
mov dword [ebp - 0x300], 1
jmp 0x1003a0ac
and dword [ebp - 0x300], 0
mov eax, dword [ebp - 0xac]
mov eax, dword [ebp - 0x188]
cmp eax, dword [ebp - 0xac]
jle 0x1003a0cc
mov dword [ebp - 0x308], 1
jmp 0x1003a0d3
and dword [ebp - 0x308], 0
mov eax, dword [ebp - 0x308]
mov dword [ebp - 0x310], eax
cmp dword [ebp - 0x310], 0
jbe 0x1003a0f4
mov dword [ebp - 0x318], 1
jmp 0x1003a0fb
and dword [ebp - 0x318], 0
mov eax, dword [ebp - 0xac]
cmp dword [ebp - 0x318], eax
jl 0x1003a115
mov dword [ebp - 0x320], 1
jmp 0x1003a11c
and dword [ebp - 0x320], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x320]
mov dword [ebp + eax - 0x598], ecx
push 0x2c32
push 0x4da3
push 1
push 1
call fcn.100365e9
add esp, 0x10
cmp dword [ebp - 0x328], 0
jne 0x1003a256
push 1
push 1
push 0x4d48
push 1
push 0x7fac
push 0x6abd
call fcn.1003667d
add esp, 0x18
mov dword [ebp - 0x45c], 0xacc5d9b4
mov dword [ebp - 0x464], 0xa3cfce29
mov dword [ebp - 0x394], 0x720348f4
mov dword [ebp - 0x42c], 0x88e1
push 1
lea ecx, [ebp - 0x4f8]
call fcn.10020382
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x390], 0x9d5b611f
mov dword [ebp - 0x138], 0
jmp 0x1003a1ce
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 1
jge 0x1003a1ed
push dword [ebp - 0x138]
lea ecx, [ebp - 0x4f8]
call fcn.10020420
or dword [eax], 0xffffffff
jmp 0x1003a1c1
lea eax, [ebp - 0x45c]
push eax
lea eax, [ebp - 0x42c]
push eax
lea eax, [ebp - 0x464]
push eax
push 0x2da4
lea eax, [ebp - 0x390]
push eax
lea eax, [ebp - 0x394]
push eax
push 0x2f74
lea eax, [ebp - 0x4f8]
push eax
push 0x73ef
push 0x3e4e
push 0x58c7
push 0
push 1
call fcn.10033cf7
add esp, 0x34
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4f8]
call fcn.10020404
mov eax, dword [ebp - 0x6c]
and dword [eax], 0
jmp 0x1003a707
mov dword [ebp - 0x3ac], 0xbf5c
mov dword [ebp - 0x39c], 0x7a00f47a
mov dword [ebp - 0x3b4], 0x6c74aa0d
mov dword [ebp - 0x3a4], 0xffffffff
push 0x7baf
push 0x20d0
push 1
push 1
push 0xaeb
push 0x7cc3
push 1
call fcn.10036836
add esp, 0x1c
lea eax, [ebp - 0x39c]
push eax
lea eax, [ebp - 0x3a4]
push eax
lea eax, [ebp - 0x3ac]
push eax
push 0
push 1
lea eax, [ebp - 0x3b4]
push eax
call fcn.1003baac
add esp, 0x18
push 0
push 1
push 0xdeadbeef
call dword [ebp - 0x328]
mov dword [ebp - 0x3bc], eax
cmp dword [ebp - 0x3bc], 0
jne 0x1003a4d1
mov dword [ebp - 0x330], 0x132d
mov dword [ebp - 0x3cc], 0x100087e8
cmp dword [ebp - 0x330], 0x14e6
jle 0x1003a3e3
and dword [ebp - 0x140], 0
jmp 0x1003a324
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 0x497d
jge 0x1003a3e3
and dword [ebp - 0x148], 0
jmp 0x1003a34a
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 0x40d4
jge 0x1003a3de
and dword [ebp - 0x150], 0
jmp 0x1003a370
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0x391d
jge 0x1003a3d9
mov eax, dword [ebp - 0x140]
and eax, dword [ebp - 0x148]
and eax, dword [ebp - 0x150]
cdq
mov dword [ebp - 0x428], eax
mov dword [ebp - 0x424], edx
push dword [ebp - 0x424]
push dword [ebp - 0x428]
lea ecx, [ebp - 0x668]
call fcn.1000a91f
pop ecx
pop ecx
mov dword [ebp - 0x3c4], eax
mov ecx, dword [ebp - 0x3c4]
call fcn.10020122
push eax
call fcn.1005a68f
pop ecx
lea ecx, [ebp - 0x668]
call fcn.10020118
jmp 0x1003a363
jmp 0x1003a33d
jmp 0x1003a317
mov dword [ebp - 0x78], 0x3d837bc7
mov dword [ebp - 4], 0x15
cmp dword [ebp - 0x330], 0x1208
jge 0x1003a409
push dword [ebp - 0x3cc]
call fcn.1005a68f
pop ecx
jmp 0x1003a425
or dword [ebp - 4], 0xffffffff
jmp 0x1003a42f
mov dword [ebp - 0x10c], 0
jmp 0x1003a448
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 3
jge 0x1003a464
mov eax, dword [ebp - 0x10c]
mov dword [ebp + eax*4 - 0x510], 0x624039b6
jmp 0x1003a43b
mov dword [ebp - 0x78], 0
jmp 0x1003a474
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 2
jg 0x1003a4a1
mov eax, dword [ebp - 0x78]
mov eax, dword [ebp + eax*4 - 0x510]
mov ecx, dword [ebp - 0x78]
mov dword [ebp + ecx*4 - 0x510], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x510], 0
je 0x1003a49f
jmp 0x1003a4a1
jmp 0x1003a46d
mov byte [ebp - 0x58], 0
movzx eax, byte [ebp - 0x58]
test eax, eax
je 0x1003a4b3
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
push 0x26
push 0x5d00
push 1
push 1
call fcn.100369bb
add esp, 0x10
mov eax, dword [ebp - 0x6c]
and dword [eax], 0
jmp 0x1003a707
mov dword [ebp - 0x338], 0
push 3
lea ecx, [ebp - 0x1c4]
call fcn.10020382
mov dword [ebp - 4], 0x17
mov dword [ebp - 0x544], 0xcc9ca319
mov dword [ebp - 0x540], 0xcc9ca319
mov dword [ebp - 0x53c], 0xcc9ca319
mov dword [ebp - 0x538], 0xcc9ca319
mov dword [ebp - 0xb4], 0
push 1
lea eax, [ebp - 0x5c4]
push eax
push 0x3d85
lea eax, [ebp - 0x1c4]
push eax
push 0x475b
push 1
call fcn.10030de9
add esp, 0x18
mov esi, dword [ebp - 0x338]
push 0
lea ecx, [ebp - 0x1c4]
call fcn.10020420
cmp esi, dword [eax]
jg 0x1003a56e
mov eax, 0x4210e164
test eax, eax
jne 0x1003a56e
and dword [ebp - 0x350], 0
jmp 0x1003a578
mov dword [ebp - 0x350], 1
push 2
lea ecx, [ebp - 0x1c4]
call fcn.10020420
mov eax, dword [ebp - 0x338]
mov dword [ebp - 0x574], eax
push 0
lea ecx, [ebp - 0x1c4]
call fcn.10020420
mov esi, 0xf7f3
sub esi, dword [eax]
push 0
lea ecx, [ebp - 0x1c4]
call fcn.10020420
cmp dword [eax], esi
jle 0x1003a5c2
mov dword [ebp - 0x340], 1
jmp 0x1003a5c9
and dword [ebp - 0x340], 0
cmp dword [ebp - 0x340], 0x4f4e7975
jl 0x1003a5e1
mov dword [ebp - 0x348], 1
jmp 0x1003a5e8
and dword [ebp - 0x348], 0
cmp dword [ebp - 0x348], 0xffffffff
jne 0x1003a5fd
mov dword [ebp - 0x190], 1
jmp 0x1003a604
and dword [ebp - 0x190], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x190]
mov dword [ebp + eax - 0x544], ecx
mov eax, dword [ebp - 0x350]
cmp eax, dword [ebp - 0x190]
jg 0x1003a631
mov dword [ebp - 0x3d4], 1
jmp 0x1003a638
and dword [ebp - 0x3d4], 0
push 2
lea ecx, [ebp - 0x1c4]
call fcn.10020420
push 2
lea ecx, [ebp - 0x1c4]
call fcn.10020420
mov dword [ebp - 0xb4], 0x23d4a1cf
mov dword [ebp - 0xb4], 0x10
jmp 0x1003a675
mov eax, dword [ebp - 0xb4]
dec eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0xfffffffe
jge 0x1003a6ac
mov dword [ebp - 0x3dc], 0xffffffff
push 0x64ed
push 1
push 0x30b0
lea eax, [ebp - 0x3dc]
push eax
push 0x5464
push 1
call fcn.10030ec1
add esp, 0x18
jmp 0x1003a668
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c4]
call fcn.10020404
mov eax, dword [ebp - 0x34]
mov dword [eax + 0x10], 1
mov eax, dword [ebp - 0x34]
cmp dword [eax + 0x10], 0
je 0x1003a6d9
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x358], eax
jmp 0x1003a6e0
and dword [ebp - 0x358], 0
mov eax, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x358]
mov dword [eax], ecx
jmp 0x1003a707
jmp 0x1003a707
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x3e4], eax
push dword [ebp - 0x3e4]
push 1
call fcn.10027d1c
pop ecx
pop ecx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret