Function at 0x1002fe22
Capabilities:
Inspect section memory permissions

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1006787f
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x428
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 8]
test eax, eax
je 0x1002fe68
push 1
push 0x761a
push 0x3673
call fcn.100318fa
add esp, 0xc
jmp 0x100318e9
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x238], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x228], eax
lea eax, [ebp + 0x14]
mov dword [ebp - 0x218], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x20c], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x2a0], eax
mov eax, dword [ebp - 0x218]
movzx eax, byte [eax]
test eax, eax
je 0x1003187a
mov eax, dword [ebp - 0x2a0]
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0xb8], 7
mov dword [ebp - 0x2b0], 0xffffffff
mov dword [ebp - 0xb0], 0
push 1
lea ecx, [ebp - 0x204]
call fcn.10019f2a
and dword [ebp - 4], 0
mov dword [ebp - 0xa8], 0xa6d0811
push 3
lea ecx, [ebp - 0x2cc]
call fcn.10019f2a
mov byte [ebp - 4], 1
mov dword [ebp - 0x1a0], 0xf7935db5
mov dword [ebp - 0xf0], 0
mov dword [ebp - 0x160], 0
lea eax, [ebp - 0x204]
push eax
push 0
lea eax, [ebp - 0x2a8]
push eax
call fcn.1003a7f7
add esp, 0xc
lea eax, [ebp - 0x2cc]
push eax
push 0
push 0
lea eax, [ebp - 0x2a8]
push eax
push 1
push 0xe8f
push 0x5af
call fcn.1003b2f0
add esp, 0x1c
mov dword [ebp - 0x14c], 0x1e26
mov dword [ebp - 0x268], 0x10009f70
cmp dword [ebp - 0x14c], 0x1f29
jle 0x10030026
push 0xf1f
call dword [sym.imp.USER32.dll_IsIconic]
and dword [ebp - 0x70], 0
jmp 0x1002ff91
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0x5725
jge 0x10030008
and dword [ebp - 0x94], 0
jmp 0x1002ffb0
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0x6076
jge 0x10030006
and dword [ebp - 0x5c], 0
jmp 0x1002ffc9
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0x1cc4
jge 0x10030004
mov eax, dword [ebp - 0x70]
imul eax, dword [ebp - 0x94]
or eax, dword [ebp - 0x5c]
cdq
mov dword [ebp - 0x274], eax
mov dword [ebp - 0x270], edx
push dword [ebp - 0x270]
push dword [ebp - 0x274]
mov ecx, 0x10610418
call fcn.10019cf9
jmp 0x1002ffc2
jmp 0x1002ffa3
jmp 0x1002ff8a
push 0x1ea8
push 0x13f7
push 0
push 0
push 0x568
push 0x1703
call dword [sym.imp.USER32.dll_ToUnicode]
push 0x22e3
lea eax, [ebp - 0x204]
push eax
lea eax, [ebp - 0xb8]
push eax
push 0x5462
push 0x295c
lea eax, [ebp - 0x2cc]
push eax
push 0
push 0x2772
push 1
push 1
lea eax, [ebp - 0xb0]
push eax
lea eax, [ebp - 0x2b0]
push eax
lea eax, [ebp - 0xa8]
push eax
lea eax, [ebp - 0x1a0]
push eax
push 0x2442
call fcn.1004a29e
add esp, 0x3c
mov byte [ebp - 4], 2
cmp dword [ebp - 0x14c], 0x1bd0
jge 0x1003009e
mov edx, dword [ebp - 0x268]
mov ecx, 0x10610418
call fcn.1001c204
jmp 0x100300ba
mov dword [ebp - 4], 1
jmp 0x100300ca
cmp dword [ebp - 0x160], 0xec76
jl 0x100300e2
mov dword [ebp - 0x1a4], 1
jmp 0x100300e9
and dword [ebp - 0x1a4], 0
push 0
lea ecx, [ebp - 0x204]
call fcn.10019fc8
mov ecx, dword [ebp - 0x1a4]
cmp ecx, dword [eax]
jl 0x1003010c
mov dword [ebp - 0xd4], 1
jmp 0x10030113
and dword [ebp - 0xd4], 0
mov eax, dword [ebp - 0xf0]
imul eax, dword [ebp - 0xd4]
cmp eax, 8
jbe 0x10030131
mov dword [ebp - 0xd8], 1
jmp 0x10030138
and dword [ebp - 0xd8], 0
push 2
lea ecx, [ebp - 0x2cc]
call fcn.10019fc8
mov eax, dword [eax]
cmp eax, dword [ebp - 0xd8]
je 0x1003015b
mov dword [ebp - 0xe0], 1
jmp 0x10030162
and dword [ebp - 0xe0], 0
mov eax, dword [ebp - 0x160]
cmp dword [ebp - 0xe0], eax
jg 0x1003017c
mov dword [ebp - 0xe8], 1
jmp 0x10030183
and dword [ebp - 0xe8], 0
mov eax, dword [ebp - 0x1a0]
cmp dword [ebp - 0xe8], eax
jge 0x1003019d
mov dword [ebp - 0x168], 1
jmp 0x100301a4
and dword [ebp - 0x168], 0
mov eax, dword [ebp - 0xa8]
cmp dword [ebp - 0x168], eax
jl 0x100301be
mov dword [ebp - 0x230], 1
jmp 0x100301c5
and dword [ebp - 0x230], 0
push 0
lea ecx, [ebp - 0x2cc]
call fcn.10019fc8
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0x384], eax
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x38c], eax
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x3b0], eax
mov esi, dword [ebp - 0xb0]
push 0
lea ecx, [ebp - 0x204]
call fcn.10019fc8
mov edi, dword [eax]
neg edi
push 0
lea ecx, [ebp - 0x204]
call fcn.10019fc8
add edi, dword [eax]
imul edi, esi
cmp dword [ebp - 0xb8], edi
jne 0x10030233
mov dword [ebp - 0x1c4], 1
jmp 0x1003023a
and dword [ebp - 0x1c4], 0
imul eax, dword [ebp - 0x1c4], 0x505c
mov dword [ebp - 0xb0], eax
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2cc]
call fcn.10019fac
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x204]
call fcn.10019fac
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax]
movzx eax, word [eax + 0x14]
mov ecx, dword [ebp - 0x4c]
mov ecx, dword [ecx]
lea eax, [ecx + eax + 0x18]
mov dword [ebp - 0x20], eax
push 4
lea ecx, [ebp - 0x2dc]
call fcn.10019f2a
mov dword [ebp - 4], 4
mov dword [ebp - 0x3b4], 0xeb32a831
push 0x46d7
lea eax, [ebp - 0x2dc]
push eax
lea eax, [ebp - 0x3a0]
push eax
push 0xd61
push 0x228c
push 0x1527
push 0x4b55
push 1
push 0x3a6a
push 0x61f6
push 0x1962
push 1
push 0x2a96
push 0x48a0
call fcn.1002d6ff
add esp, 0x38
push 1
lea ecx, [ebp - 0x2dc]
call fcn.10019fc8
and dword [eax], 0
jmp 0x1003031d
push 1
lea ecx, [ebp - 0x2dc]
call fcn.10019fc8
mov dword [ebp - 0xf8], eax
mov eax, dword [ebp - 0xf8]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xf8]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x2dc]
call fcn.10019fc8
cmp dword [eax], 7
jg 0x10030390
mov dword [ebp - 0x7c], 0x8f8256a9
mov dword [ebp - 0x370], 0xf7d65121
mov dword [ebp - 0x7c], 9
jmp 0x10030350
mov eax, dword [ebp - 0x7c]
dec eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 1
jne 0x1003036f
mov dword [ebp - 0x170], 6
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
jmp 0x10030349
mov byte [ebp - 0x2d], 0
push 0
push 0x73d8
push 0xb96
lea eax, [ebp - 0x2d]
push eax
call fcn.1003386e
add esp, 0x10
jmp 0x100302f9
mov byte [ebp - 0x2a], 0
push 0x25d9
push 0x6444
lea eax, [ebp - 0x2a]
push eax
push 0
call fcn.1002fc9e
add esp, 0x10
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2dc]
call fcn.10019fac
and dword [ebp - 0xa0], 0
jmp 0x100303da
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0x20]
add eax, 0x28
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax]
movzx eax, word [eax + 6]
cmp dword [ebp - 0xa0], eax
jge 0x10031878
mov dword [ebp - 0x100], 0x70de
mov dword [ebp - 0x21c], 0x10009fe8
cmp dword [ebp - 0x100], 0x7129
jle 0x100304eb
and dword [ebp - 0x8c], 0
jmp 0x10030429
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0x6e51
jge 0x100304eb
and dword [ebp - 0x6c], 0
jmp 0x10030446
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0x5958
jge 0x100304e6
and dword [ebp - 0x64], 0
jmp 0x10030460
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0x5fc2
jge 0x100304e1
and dword [ebp - 0x48], 0
jmp 0x10030476
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0x12b5
jge 0x100304dc
mov ecx, dword [ebp - 0x64]
add ecx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x8c]
imul eax, dword [ebp - 0x6c]
shl eax, cl
cdq
mov dword [ebp - 0x280], eax
mov dword [ebp - 0x27c], edx
push dword [ebp - 0x27c]
push dword [ebp - 0x280]
lea ecx, [ebp - 0x3f8]
call fcn.1000d08a
pop ecx
pop ecx
mov dword [ebp - 0x208], eax
mov ecx, dword [ebp - 0x208]
call fcn.10019cd9
push eax
call fcn.10051966
pop ecx
lea ecx, [ebp - 0x3f8]
call fcn.10019ccf
jmp 0x1003046f
jmp 0x10030459
jmp 0x1003043f
jmp 0x1003041c
mov dword [ebp - 0x328], 0xfffffffd
mov dword [ebp - 0x324], 0xfffffffd
mov dword [ebp - 0x320], 0xfffffffd
mov dword [ebp - 0x31c], 0xfffffffd
lea ecx, [ebp - 0x99]
call fcn.10019fd7
push eax
lea eax, [ebp - 0x318]
push eax
lea eax, [ebp - 0x328]
push eax
lea ecx, [ebp - 0x3e0]
call fcn.10019fda
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x2e8]
call fcn.10019f86
mov dword [ebp - 4], 5
mov byte [ebp - 4], 6
cmp dword [ebp - 0x100], 0x6faa
jge 0x1003056b
push dword [ebp - 0x21c]
call fcn.10051966
pop ecx
jmp 0x10030587
mov dword [ebp - 4], 5
jmp 0x10030597
mov dword [ebp - 0x24], 0x184c506d
mov dword [ebp - 0x84], 0x11b9c6fe
mov dword [ebp - 0x1b4], 0xfffffffa
mov dword [ebp - 0x368], 0
mov dword [ebp - 0x24], 3
jmp 0x100305cc
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jl 0x10030816
push 1
lea ecx, [ebp - 0x34c]
call fcn.10019f2a
mov byte [ebp - 4], 8
mov dword [ebp - 0x18], 0
jmp 0x100305f7
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x1003060d
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x39c], 0xfffffff6
jmp 0x100305f0
mov dword [ebp - 0x18], 0
jmp 0x1003061d
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x10030633
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x300], 0x74adf298
jmp 0x10030616
mov dword [ebp - 0x18], 0
jmp 0x10030643
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jge 0x1003065f
push dword [ebp - 0x18]
lea ecx, [ebp - 0x34c]
call fcn.10019fc8
mov dword [eax], 1
jmp 0x1003063c
push dword [ebp - 0x24]
lea ecx, [ebp - 0x2e8]
call fcn.10019fc8
cmp dword [eax], 0
je 0x1003067f
mov eax, 0x7d670012
test eax, eax
jne 0x1003070f
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x300]
mov dword [ebp - 0x380], eax
cmp dword [ebp - 0x24], 0xb8ce
jle 0x100306a7
mov dword [ebp - 0x1ac], 1
jmp 0x100306ae
and dword [ebp - 0x1ac], 0
push dword [ebp - 0x24]
lea ecx, [ebp - 0x2e8]
call fcn.10019fc8
mov dword [ebp - 0x108], eax
push 2
lea ecx, [ebp - 0x2e8]
call fcn.10019fc8
mov ecx, dword [ebp - 0x108]
mov eax, dword [eax]
mov dword [ecx], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1ac]
sub ecx, dword [ebp + eax - 0x300]
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x39c]
imul eax, ecx
mov ecx, dword [ebp - 0x108]
cmp dword [ecx], eax
jne 0x1003070f
and dword [ebp - 0x178], 0
jmp 0x10030719
mov dword [ebp - 0x178], 1
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x178], eax
jle 0x10030737
push 6
pop eax
test eax, eax
je 0x10030737
mov dword [ebp - 0x110], 1
jmp 0x1003073e
and dword [ebp - 0x110], 0
mov eax, dword [ebp - 0x84]
cmp dword [ebp - 0x110], eax
jg 0x10030758
mov dword [ebp - 0x1d4], 1
jmp 0x1003075f
and dword [ebp - 0x1d4], 0
mov eax, dword [ebp - 0x84]
cmp dword [ebp - 0x1d4], eax
jg 0x10030779
mov dword [ebp - 0x118], 1
jmp 0x10030780
and dword [ebp - 0x118], 0
push 0
lea ecx, [ebp - 0x34c]
call fcn.10019fc8
mov ecx, dword [ebp - 0x118]
imul ecx, dword [eax]
test ecx, ecx
jae 0x100307ac
cmp dword [ebp - 0x24], 0
je 0x100307ac
mov dword [ebp - 0x180], 1
jmp 0x100307b3
and dword [ebp - 0x180], 0
imul eax, dword [ebp - 0x180], 0x421a
add eax, 0xffff
jne 0x100307d0
mov dword [ebp - 0x120], 1
jmp 0x100307d7
and dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x1b4], eax
mov eax, dword [ebp - 0x1b4]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x39c], eax
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x34c]
call fcn.10019fac
jmp 0x100305c5
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2e8]
call fcn.10019fac
mov dword [ebp - 0x34], 0xfffffff9
mov dword [ebp - 0x74], 0
jmp 0x1003083c
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 3
jge 0x10030852
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0x3d0], 0xfffb
jmp 0x10030835
mov dword [ebp - 0x34], 0
jmp 0x10030862
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 2
jg 0x10030879
mov eax, dword [ebp - 0x34]
cmp dword [ebp + eax*4 - 0x3d0], 0
je 0x10030877
jmp 0x10030879
jmp 0x1003085b
mov dword [ebp - 0x34], 0x8fc558ba
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x24]
and eax, 0x20000000
je 0x10030899
mov dword [ebp - 0x128], 1
jmp 0x100308a0
and dword [ebp - 0x128], 0
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0x284], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x24]
and eax, 0x40000000
je 0x100308c5
mov dword [ebp - 0x188], 1
jmp 0x100308cc
and dword [ebp - 0x188], 0
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x2b4], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x24]
and eax, 0x80000000
je 0x100308f1
mov dword [ebp - 0x130], 1
jmp 0x100308f8
and dword [ebp - 0x130], 0
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x23c], eax
mov dword [ebp - 0x3a4], 0xffffffff
mov dword [ebp - 0x224], 3
mov dword [ebp - 0x1cc], 0xffffffff
mov dword [ebp - 0x388], 0
mov dword [ebp - 0x2f8], 6
mov dword [ebp - 0x2f4], 6
mov dword [ebp - 0x2f0], 6
mov dword [ebp - 0x2ec], 6
mov dword [ebp - 0x50], 0
jmp 0x10030964
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 4
jge 0x1003097a
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x438], 0x5db34e6d
jmp 0x1003095d
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x2f8]
inc eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x2f8], eax
mov dword [ebp - 0x138], 0x33c3
mov dword [ebp - 0x2a4], 0x1000a040
cmp dword [ebp - 0x138], 0x3408
jle 0x10030a3b
and dword [ebp - 0x58], 0
jmp 0x100309c6
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0x2369
jge 0x10030a3b
and dword [ebp - 0x60], 0
jmp 0x100309dc
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0x3c74
jge 0x10030a39
mov eax, dword [ebp - 0x58]
cdq
idiv dword [ebp - 0x60]
mov eax, edx
cdq
mov dword [ebp - 0x28c], eax
mov dword [ebp - 0x288], edx
push dword [ebp - 0x288]
push dword [ebp - 0x28c]
lea ecx, [ebp - 0x410]
call fcn.1000d08a
pop ecx
pop ecx
mov dword [ebp - 0x26c], eax
mov ecx, dword [ebp - 0x26c]
call fcn.10019cd9
push eax
call fcn.10051966
pop ecx
lea ecx, [ebp - 0x410]
call fcn.10019ccf
jmp 0x100309d5
jmp 0x100309bf
mov dword [ebp - 0x1cc], 0xc345fe46
mov eax, dword [ebp - 0x1cc]
mov dword [ebp - 0x224], eax
mov dword [ebp - 4], 9
cmp dword [ebp - 0x138], 0x3185
jge 0x10030a70
push dword [ebp - 0x2a4]
call fcn.10051966
pop ecx
jmp 0x10030a8c
or dword [ebp - 4], 0xffffffff
jmp 0x10030a96
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x24]
and eax, 0x2000000
je 0x10030acc
push 0x4000
mov eax, dword [ebp - 0x20]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x20]
push dword [eax + 8]
push 0xa56
push 0x846
call fcn.1002a886
pop ecx
pop ecx
call eax
jmp 0x100303c4
mov dword [ebp - 0xa4], 0xf3c34eea
push 2
lea ecx, [ebp - 0x1f8]
call fcn.10019f2a
mov dword [ebp - 4], 0xb
or dword [ebp - 0x314], 0xffffffff
or dword [ebp - 0x310], 0xffffffff
or dword [ebp - 0x30c], 0xffffffff
or dword [ebp - 0x308], 0xffffffff
lea ecx, [ebp - 0xbd]
call fcn.10019fd7
push eax
lea eax, [ebp - 0x304]
push eax
lea eax, [ebp - 0x314]
push eax
lea ecx, [ebp - 0x3d8]
call fcn.10019fda
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1ec]
call fcn.10019f86
mov byte [ebp - 4], 0xc
mov dword [ebp - 0xbc], 0xffffffff
mov dword [ebp - 0x104], 0xcc21d2cf
mov dword [ebp - 0x234], 0x8394
mov dword [ebp - 0x28], 0
jmp 0x10030b6d
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jge 0x10030b89
push dword [ebp - 0x28]
lea ecx, [ebp - 0x1f8]
call fcn.10019fc8
mov dword [eax], 0x8716
jmp 0x10030b66
mov dword [ebp - 0x28], 0
jmp 0x10030b99
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 4
jge 0x10030baf
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x3c4], 0xffffffff
jmp 0x10030b92
lea eax, [ebp - 0x1f8]
push eax
lea eax, [ebp - 0xbc]
push eax
push 0
push 0x45e2
lea eax, [ebp - 0x1ec]
push eax
push 0x60b8
lea eax, [ebp - 0xa4]
push eax
call fcn.1002ed3f
add esp, 0x1c
push 0
lea ecx, [ebp - 0x1f8]
call fcn.10019fc8
cmp dword [eax], 0
je 0x10030faa
mov dword [ebp - 0x1c], 0xd1a6
mov dword [ebp - 0x68], 0xb8fba323
mov dword [ebp - 0xd0], 0x6c34309e
mov dword [ebp - 0xb4], 0
push 3
lea ecx, [ebp - 0x2c0]
call fcn.10019f2a
mov byte [ebp - 4], 0xd
push 0x454
push 0x3fb
lea eax, [ebp - 0x3a8]
push eax
push 1
push 0x707c
lea eax, [ebp - 0x2c0]
push eax
push 0
push 0x48a6
call fcn.100340c7
add esp, 0x20
cmp dword [ebp - 0xa4], 0
je 0x10030c74
mov eax, 0xfa7bb34e
test eax, eax
je 0x10030c74
mov dword [ebp - 0x190], 1
jmp 0x10030c7b
and dword [ebp - 0x190], 0
mov eax, dword [ebp - 0xa4]
cmp dword [ebp - 0x190], eax
jle 0x10030c95
mov dword [ebp - 0x140], 1
jmp 0x10030c9c
and dword [ebp - 0x140], 0
push 3
lea ecx, [ebp - 0x1ec]
call fcn.10019fc8
mov eax, dword [eax]
imul eax, dword [ebp - 0x140]
test eax, eax
je 0x10030cd4
push 0
lea ecx, [ebp - 0x1ec]
call fcn.10019fc8
cmp dword [eax], 0
je 0x10030cd4
mov dword [ebp - 0x1bc], 1
jmp 0x10030cdb
and dword [ebp - 0x1bc], 0
mov eax, dword [ebp - 0x1bc]
sub eax, dword [ebp - 0x1c]
jne 0x10030d01
push 0
lea ecx, [ebp - 0x1ec]
call fcn.10019fc8
cmp dword [eax], 0
jne 0x10030d01
and dword [ebp - 0x148], 0
jmp 0x10030d0b
mov dword [ebp - 0x148], 1
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x148]
jg 0x10030d22
mov dword [ebp - 0x198], 1
jmp 0x10030d29
and dword [ebp - 0x198], 0
mov esi, dword [ebp - 0x198]
sub esi, dword [ebp - 0x1c]
push 1
lea ecx, [ebp - 0x1f8]
call fcn.10019fc8
cmp esi, dword [eax]
jle 0x10030d4f
mov dword [ebp - 0xac], 1
jmp 0x10030d56
and dword [ebp - 0xac], 0
push 3
lea ecx, [ebp - 0x1ec]
call fcn.10019fc8
mov ecx, dword [ebp - 0xac]
mov dword [eax], ecx
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0xac], eax
jle 0x10030d82
mov dword [ebp - 0x150], 1
jmp 0x10030d89
and dword [ebp - 0x150], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3c4]
cmp dword [ebp - 0x150], eax
jle 0x10030daa
mov dword [ebp - 0x1dc], 1
jmp 0x10030db1
and dword [ebp - 0x1dc], 0
mov eax, dword [ebp - 0x1dc]
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0xfffffffc
je 0x10030dcc
mov dword [ebp - 0x158], 1
jmp 0x10030dd3
and dword [ebp - 0x158], 0
mov eax, dword [ebp - 0xbc]
cmp dword [ebp - 0x158], eax
jle 0x10030ded
mov dword [ebp - 0x22c], 1
jmp 0x10030df4
and dword [ebp - 0x22c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3c4]
mov dword [ebp - 0x390], eax
mov eax, dword [ebp - 0x104]
inc eax
inc eax
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0xd0]
cmp eax, dword [ebp - 0x1c]
jle 0x10030e2c
mov dword [ebp - 0xcc], 1
jmp 0x10030e33
and dword [ebp - 0xcc], 0
push 0
lea ecx, [ebp - 0x1f8]
call fcn.10019fc8
mov eax, dword [eax]
cmp eax, dword [ebp - 0xcc]
jne 0x10030e5c
cmp dword [ebp - 0x1c], 0
je 0x10030e5c
mov dword [ebp - 0xdc], 1
jmp 0x10030e63
and dword [ebp - 0xdc], 0
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0xfefe6b3e
je 0x10030e87
mov dword [ebp - 0xe4], 1
jmp 0x10030e8e
and dword [ebp - 0xe4], 0
push 0
lea ecx, [ebp - 0x2c0]
call fcn.10019fc8
mov ecx, dword [ebp - 0xe4]
add ecx, dword [eax]
cmp ecx, 0xffff
jae 0x10030eb7
mov dword [ebp - 0xec], 1
jmp 0x10030ebe
and dword [ebp - 0xec], 0
push 1
lea ecx, [ebp - 0x2c0]
call fcn.10019fc8
mov esi, dword [ebp - 0xec]
add esi, dword [eax]
push 0
lea ecx, [ebp - 0x2c0]
call fcn.10019fc8
cmp esi, dword [eax]
jle 0x10030f1d
mov dword [ebp - 0xfc], 0x4aeca2a4
mov eax, dword [ebp - 0xfc]
cmp eax, dword [ebp - 0xb4]
jge 0x10030f08
mov dword [ebp - 0xf4], 1
jmp 0x10030f0f
and dword [ebp - 0xf4], 0
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0xfc], eax
jmp 0x10030f99
mov dword [ebp - 0x278], 4
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x278]
push eax
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x234]
push eax
push 0x4c16
lea eax, [ebp - 0xbc]
push eax
push 0
push 0x3605
call fcn.1004950e
add esp, 0x20
mov dword [ebp - 0x1c], 0xfffffffe
jmp 0x10030f68
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0xfffffff7
jl 0x10030f99
cmp dword [ebp - 0x68], 0
je 0x10030f76
jmp 0x10030f99
mov byte [ebp - 0x2e], 0
push 0x413d
push 0x38a
push 0
push 0x746c
lea eax, [ebp - 0x2e]
push eax
call fcn.1003211b
add esp, 0x14
jmp 0x10030f61
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x2c0]
call fcn.10019fac
jmp 0x10030ff3
push 0x3b3c
push 1
lea eax, [ebp - 0x104]
push eax
push 1
lea eax, [ebp - 0x1ec]
push eax
push 0x4f88
push 1
call fcn.1002e02f
add esp, 0x1c
mov byte [ebp - 0x2b], 0
push 1
push 0x619c
push 1
push 0xb90
lea eax, [ebp - 0x2b]
push eax
push 0x34b3
call fcn.1002e58a
add esp, 0x18
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x1ec]
call fcn.10019fac
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1f8]
call fcn.10019fac
push 0x424f
push 0x1b0e
push dword [ebp - 0x2b4]
push dword [ebp - 0x23c]
push dword [ebp - 0x284]
lea eax, [ebp - 0x220]
push eax
push 1
push 1
push dword [ebp - 0x20]
call fcn.1002d149
add esp, 0x24
mov dword [ebp - 0x290], 6
push 3
lea ecx, [ebp - 0x364]
call fcn.10019f2a
mov dword [ebp - 4], 0xe
push 2
lea ecx, [ebp - 0x358]
call fcn.10019f2a
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x24c], 0xa72d50fa
mov dword [ebp - 0x2ac], 0x6d7d0454
mov dword [ebp - 0x244], 0
mov dword [ebp - 0x40], 0
jmp 0x100310a0
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 3
jge 0x100310bc
push dword [ebp - 0x40]
lea ecx, [ebp - 0x364]
call fcn.10019fc8
mov dword [eax], 7
jmp 0x10031099
lea eax, [ebp - 0x40]
push eax
push 0
lea eax, [ebp - 0x358]
push eax
push 1
push 0x2791
push 0x72c0
call fcn.10031917
add esp, 0x18
lea eax, [ebp - 0x244]
push eax
push 0x7b02
lea eax, [ebp - 0x2ac]
push eax
lea eax, [ebp - 0x24c]
push eax
push 0x7abf
lea eax, [ebp - 0x364]
push eax
push 0x22c0
push 0
lea eax, [ebp - 0x290]
push eax
lea eax, [ebp - 0x358]
push eax
call fcn.1004e477
add esp, 0x28
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x358]
call fcn.10019fac
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x364]
call fcn.10019fac
push 0x632
lea eax, [ebp - 0x1d8]
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x4c]
push eax
push 0x430c
push 0
call fcn.10032d5b
add esp, 0x18
mov dword [ebp - 0x14], 0xf89b546
mov dword [ebp - 0x2d0], 0xffffffff
mov dword [ebp - 0x78], 0
jmp 0x10031182
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 1
jge 0x10031195
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0x38], 0
jmp 0x1003117b
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x3ac], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x38]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x38], eax
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x14]
cmp eax, 0x697e780c
jl 0x100311cc
mov dword [ebp - 0x10c], 1
jmp 0x100311d3
and dword [ebp - 0x10c], 0
cmp dword [ebp - 0x10c], 0x8d19
jle 0x100311eb
mov dword [ebp - 0x114], 1
jmp 0x100311f2
and dword [ebp - 0x114], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x114], eax
jne 0x10031209
mov dword [ebp - 0x11c], 1
jmp 0x10031210
and dword [ebp - 0x11c], 0
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x11c]
jge 0x10031227
mov dword [ebp - 0x124], 1
jmp 0x1003122e
and dword [ebp - 0x124], 0
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x14], 0xfffffff9
jmp 0x10031247
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x1c
jl 0x1003154d
mov dword [ebp - 0x3c], 0x78e60d74
mov dword [ebp - 0xc4], 1
mov dword [ebp - 0x16c], 0x8bfa0855
mov dword [ebp - 0x254], 0
mov dword [ebp - 0x17c], 0xfffffffb
push 2
lea ecx, [ebp - 0x334]
call fcn.10019f2a
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x80], 0
jmp 0x100312a4
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 2
jge 0x100312c0
push dword [ebp - 0x80]
lea ecx, [ebp - 0x334]
call fcn.10019fc8
mov dword [eax], 4
jmp 0x1003129d
cmp dword [ebp - 0x3c], 0
jne 0x100312ec
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x378], eax
xor eax, eax
inc eax
neg eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0x90ef874a
je 0x100312ec
mov dword [ebp - 0x12c], 1
jmp 0x100312f3
and dword [ebp - 0x12c], 0
mov eax, dword [ebp - 0xc4]
imul eax, dword [ebp - 0x12c]
test eax, eax
jne 0x1003130a
cmp dword [ebp - 0x3c], 0
je 0x1003131c
cmp dword [ebp - 0x14], 0
je 0x1003131c
mov dword [ebp - 0x134], 1
jmp 0x10031323
and dword [ebp - 0x134], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x134], eax
jl 0x1003133d
cmp dword [ebp - 0x14], 0
jne 0x1003133d
and dword [ebp - 0x13c], 0
jmp 0x10031347
mov dword [ebp - 0x13c], 1
cmp dword [ebp - 0x13c], 0xffffffff
jae 0x1003135c
mov dword [ebp - 0x144], 1
jmp 0x10031363
and dword [ebp - 0x144], 0
mov eax, dword [ebp - 0x144]
mov dword [ebp - 0xc4], eax
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0xc4]
jl 0x1003138c
mov eax, 0xf0b56fe1
test eax, eax
jne 0x1003138c
and dword [ebp - 0x154], 0
jmp 0x10031396
mov dword [ebp - 0x154], 1
push 4
pop eax
imul eax, eax, 0
imul eax, dword [ebp + eax - 0x38], 0x79a2
mov dword [ebp - 0xc8], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xc8]
mov dword [ebp + eax - 0x38], ecx
mov eax, dword [ebp - 0xc8]
cmp eax, dword [ebp - 0x154]
jg 0x100313d4
mov dword [ebp - 0x15c], 1
jmp 0x100313db
and dword [ebp - 0x15c], 0
cmp dword [ebp - 0x15c], 1
jle 0x100313f0
mov dword [ebp - 0x164], 1
jmp 0x100313f7
and dword [ebp - 0x164], 0
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x164]
sub eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x14]
mov dword [ebp - 0x16c], eax
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x17c], 0x4ce9d061
je 0x10031432
mov dword [ebp - 0x18c], 1
jmp 0x10031439
and dword [ebp - 0x18c], 0
cmp dword [ebp - 0x2d0], 0x2544b987
je 0x1003145a
mov eax, 0xae46
test eax, eax
je 0x1003145a
mov dword [ebp - 0x174], 1
jmp 0x10031461
and dword [ebp - 0x174], 0
cmp dword [ebp - 0x174], 2
jl 0x10031476
mov dword [ebp - 0x184], 1
jmp 0x1003147d
and dword [ebp - 0x184], 0
mov eax, dword [ebp - 0x17c]
add eax, dword [ebp - 0x184]
mov ecx, dword [ebp - 0x18c]
add ecx, eax
mov dword [ebp - 0x194], ecx
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x194]
mov dword [ebp + eax - 0x38], ecx
imul eax, dword [ebp - 0x194], 0xc1ae
cmp dword [ebp - 0x14], eax
jge 0x100314bf
mov eax, 0xdad2da0d
test eax, eax
je 0x100314e6
mov dword [ebp - 0x25c], 0x431bb57c
mov byte [ebp - 0x29], 0
movzx eax, byte [ebp - 0x29]
test eax, eax
je 0x100314db
call dword [sym.imp.KERNEL32.dll_GetOEMCP]
mov eax, dword [ebp - 0x25c]
mov dword [ebp - 0x3c], eax
jmp 0x10031539
mov dword [ebp - 0x37c], 0xfffffff6
push 0x649c
push 1
push 0x4573
push 1
lea eax, [ebp - 0x334]
push eax
call fcn.1002e653
add esp, 0x14
mov byte [ebp - 0x2c], 0
movzx eax, byte [ebp - 0x2c]
test eax, eax
je 0x10031539
push 0x33ba
push 1
push 0x5ad3
push 0x16c1
push 0x29c1
push 1
call fcn.1002e6ca
add esp, 0x18
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x334]
call fcn.10019fac
jmp 0x10031240
cmp dword [ebp - 0x1d8], 0
jbe 0x10031873
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x1a8], 0x97e780ca
push 2
lea ecx, [ebp - 0x340]
call fcn.10019f2a
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x210], 0
push 0x4d3b
push 1
push 0
push 0x5c2a
push 1
lea eax, [ebp - 0x36c]
push eax
lea eax, [ebp - 0x340]
push eax
call fcn.1003b2f0
add esp, 0x1c
mov dword [ebp - 0x19c], 0x7e08
mov dword [ebp - 0x264], 0x1000a080
cmp dword [ebp - 0x19c], 0x7f90
jle 0x100316cd
and dword [ebp - 0x54], 0
jmp 0x100315e0
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0x6c08
jge 0x100316cd
and dword [ebp - 0x98], 0
jmp 0x10031603
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0x492
jge 0x100316c8
and dword [ebp - 0x88], 0
jmp 0x10031629
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0x3243
jge 0x100316c3
and dword [ebp - 0x90], 0
jmp 0x1003164f
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0x1ab2
jge 0x100316be
mov ecx, dword [ebp - 0x88]
imul ecx, dword [ebp - 0x90]
mov eax, dword [ebp - 0x98]
shl eax, cl
or eax, dword [ebp - 0x54]
cdq
mov dword [ebp - 0x298], eax
mov dword [ebp - 0x294], edx
push dword [ebp - 0x294]
push dword [ebp - 0x298]
lea ecx, [ebp - 0x428]
call fcn.1000d08a
pop ecx
pop ecx
mov dword [ebp - 0x29c], eax
mov ecx, dword [ebp - 0x29c]
call fcn.10019cd9
push eax
call fcn.10051966
pop ecx
lea ecx, [ebp - 0x428]
call fcn.10019ccf
jmp 0x10031642
jmp 0x1003161c
jmp 0x100315f6
jmp 0x100315d9
mov byte [ebp - 4], 0x12
cmp dword [ebp - 0x19c], 0x7a61
jge 0x100316e9
push dword [ebp - 0x264]
call fcn.10051966
pop ecx
jmp 0x10031705
mov dword [ebp - 4], 0x11
jmp 0x10031715
push 0x2c73
push 0x33c9
push 1
push 0x26a1
push 1
push 0x121e
push 0x36a2
push 0x165d
push 0x2b06
push 1
push 0x311
push 0x579d
push 0x22df
push 0x5323
push 0xceb
call fcn.1002e7dd
add esp, 0x3c
cmp dword [ebp - 0x44], 0
je 0x10031809
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 0xf8c7b5c6
ja 0x1003178a
mov dword [ebp - 0x1b0], 1
jmp 0x10031791
and dword [ebp - 0x1b0], 0
cmp dword [ebp - 0x1b0], 0xfffffffb
jge 0x100317a6
mov dword [ebp - 0x1b8], 1
jmp 0x100317ad
and dword [ebp - 0x1b8], 0
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x1b8], eax
jne 0x100317c4
mov dword [ebp - 0x1c0], 1
jmp 0x100317cb
and dword [ebp - 0x1c0], 0
mov eax, dword [ebp - 0x44]
add eax, dword [ebp - 0x1c0]
sub eax, 0x31e19e95
mov dword [ebp - 0x1c8], eax
push 0
lea ecx, [ebp - 0x340]
call fcn.10019fc8
mov ecx, dword [ebp - 0x1c8]
mov dword [eax], ecx
cmp dword [ebp - 0x1c8], 0
je 0x10031809
mov dword [ebp - 0x214], 1
jmp 0x10031810
and dword [ebp - 0x214], 0
cmp dword [ebp - 0x44], 0x8acc4b7c
jae 0x10031825
mov dword [ebp - 0x1d0], 1
jmp 0x1003182c
and dword [ebp - 0x1d0], 0
mov eax, dword [ebp - 0x1d0]
mov dword [ebp - 0x210], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x340]
call fcn.10019fac
lea eax, [ebp - 0x374]
push eax
push dword [ebp - 0x220]
push dword [ebp - 0x1d8]
mov eax, dword [ebp - 0x20]
push dword [eax + 8]
push 0xa56
push 0x4d6
call fcn.1002a886
pop ecx
pop ecx
call eax
jmp 0x100303c4
jmp 0x100318e9
mov eax, dword [ebp - 0x228]
mov dword [ebp - 0x240], eax
mov eax, dword [ebp - 0x20c]
mov dword [ebp - 0x248], eax
mov eax, dword [ebp - 0x238]
mov dword [ebp - 0x250], eax
mov eax, dword [ebp - 0x240]
mov dword [ebp - 0x260], eax
mov eax, dword [ebp - 0x248]
mov dword [ebp - 0x1e0], eax
mov eax, dword [ebp - 0x250]
mov dword [ebp - 0x258], eax
mov eax, dword [ebp - 0x1e0]
mov ecx, dword [ebp - 0x258]
mov ecx, dword [ecx]
mov dword [eax], ecx
mov eax, dword [ebp - 0x1e0]
mov esi, dword [eax]
push 0
mov ecx, dword [ebp - 0x260]
call fcn.10019fc8
mov dword [eax], esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret