Function at 0x10040a79
Capabilities:
Contain obfuscated stackstrings
Enumerate pe sections
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10080fa0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xf40
and dword [ebp - 0x18], 0
movzx eax, byte [ebp + 8]
test eax, eax
je 0x10047908
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], 0xfffffff8
mov dword [ebp - 0x44], 0xfffffff6
mov dword [ebp - 0x8c], 0
jmp 0x10040ad4
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 2
jge 0x10040af0
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0x974], 0xffffffff
jmp 0x10040ac7
mov dword [ebp - 0x8c], 0
jmp 0x10040b09
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 2
jge 0x10040b25
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0x328], 0x11d7feae
jmp 0x10040afc
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0xc04], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0xbd0], eax
mov eax, 0xc54c9751
test eax, eax
je 0x10040b52
cmp dword [ebp - 0x20], 0
je 0x10040b52
mov dword [ebp - 0x83c], 1
jmp 0x10040b59
and dword [ebp - 0x83c], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x83c], eax
je 0x10040b70
mov dword [ebp - 0x8d8], 1
jmp 0x10040b77
and dword [ebp - 0x8d8], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x8d8], eax
jle 0x10040b8e
mov dword [ebp - 0x8e0], 1
jmp 0x10040b95
and dword [ebp - 0x8e0], 0
mov eax, dword [ebp - 0x8e0]
sub eax, dword [ebp - 0x20]
cmp eax, 1
jb 0x10040baf
mov dword [ebp - 0x8e8], 1
jmp 0x10040bb6
and dword [ebp - 0x8e8], 0
mov eax, dword [ebp - 0x8e8]
add eax, 0x19f23e52
cmp eax, dword [ebp - 0x20]
jg 0x10040bd2
mov dword [ebp - 0x8f0], 1
jmp 0x10040bd9
and dword [ebp - 0x8f0], 0
mov eax, dword [ebp - 0x8f0]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x44], eax
jle 0x10040bf6
mov dword [ebp - 0x8f8], 1
jmp 0x10040bfd
and dword [ebp - 0x8f8], 0
mov eax, dword [ebp - 0x8f8]
sub eax, 0x716b
cmp eax, dword [ebp - 0x20]
jl 0x10040c19
mov dword [ebp - 0x900], 1
jmp 0x10040c20
and dword [ebp - 0x900], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x900], eax
jl 0x10040c3e
push 0xfffffffffffffffc
pop eax
test eax, eax
je 0x10040c3e
mov dword [ebp - 0x908], 1
jmp 0x10040c45
and dword [ebp - 0x908], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x908], eax
jg 0x10040c5c
mov dword [ebp - 0x3dc], 1
jmp 0x10040c63
and dword [ebp - 0x3dc], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x3dc]
mov dword [ebp + eax - 0x974], ecx
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x3dc], eax
jg 0x10040c8d
mov dword [ebp - 0x910], 1
jmp 0x10040c94
and dword [ebp - 0x910], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x328]
cmp dword [ebp - 0x910], eax
je 0x10040cb5
mov dword [ebp - 0x94c], 1
jmp 0x10040cbc
and dword [ebp - 0x94c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x328]
cmp dword [ebp - 0x94c], eax
je 0x10040cdd
mov dword [ebp - 0x954], 1
jmp 0x10040ce4
and dword [ebp - 0x954], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x954]
mov dword [ebp + eax - 0x328], ecx
mov dword [ebp - 0x20], 0x14
jmp 0x10040d07
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xd
je 0x10040e7e
mov dword [ebp - 0x9a8], 5
mov dword [ebp - 0x44], 1
jmp 0x10040d2b
mov eax, dword [ebp - 0x44]
dec eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0
jl 0x10040e79
mov dword [ebp - 0x1b4], 0x5243b9c3
mov dword [ebp - 0xa48], 1
mov dword [ebp - 0x1b4], 1
jmp 0x10040d62
mov eax, dword [ebp - 0x1b4]
dec eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 0
jl 0x10040e65
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp + eax*4 - 0x328]
mov dword [ebp - 0xbd8], eax
mov eax, dword [ebp - 0x44]
cmp dword [ebp + eax*4 - 0x974], 0
je 0x10040de2
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp + eax*4 - 0x328]
mov dword [ebp - 0xbe0], eax
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp + eax*4 - 0x328]
mov dword [ebp - 0xbe8], eax
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0xbf0], eax
mov eax, dword [ebp - 0x9a8]
mov dword [ebp - 0xbf8], eax
mov eax, 0x63f
test eax, eax
je 0x10040de2
mov eax, 0x34bd
test eax, eax
je 0x10040de2
mov dword [ebp - 0x940], 1
jmp 0x10040de9
and dword [ebp - 0x940], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x940]
sub ecx, dword [ebp + eax - 0x974]
push 4
pop eax
shl eax, 0
cmp ecx, dword [ebp + eax - 0x974]
jle 0x10040e17
mov dword [ebp - 0x93c], 1
jmp 0x10040e1e
and dword [ebp - 0x93c], 0
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp + eax*4 - 0x328]
imul eax, dword [ebp - 0x93c]
cmp eax, dword [ebp - 0xa48]
jle 0x10040e43
mov dword [ebp - 0x51c], 1
jmp 0x10040e4a
and dword [ebp - 0x51c], 0
mov eax, dword [ebp - 0x51c]
sub eax, dword [ebp - 0x1b4]
mov ecx, dword [ebp - 0x44]
mov dword [ebp + ecx*4 - 0x328], eax
jmp 0x10040d55
mov eax, dword [ebp - 0x44]
cmp dword [ebp + eax*4 - 0x328], 0
je 0x10040e74
jmp 0x10040e79
jmp 0x10040d24
jmp 0x10040d00
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x838], eax
mov dword [ebp - 0xcc], 0xca4f833f
mov dword [ebp - 0x198], 0x6f65e790
mov dword [ebp - 0x2b8], 0xf0dfbc43
mov dword [ebp - 0xa8], 0
jmp 0x10040ebe
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 3
jge 0x10040eda
mov eax, dword [ebp - 0xa8]
mov dword [ebp + eax*4 - 0xb50], 0xffffffff
jmp 0x10040eb1
mov dword [ebp - 0xa8], 0
jmp 0x10040ef3
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 1
jge 0x10040f0f
mov eax, dword [ebp - 0xa8]
mov dword [ebp + eax*4 - 0xa58], 1
jmp 0x10040ee6
mov dword [ebp - 0xcc], 0
jmp 0x10040f28
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 2
jg 0x10040f58
mov dword [ebp - 0xa50], 1
lea eax, [ebp - 0xa50]
push eax
push 0x6c05
push 0x397f
push 0
call fcn.1004075f
add esp, 0x10
jmp 0x10040f1b
cmp dword [ebp - 0xcc], 9
jb 0x10040fb9
mov eax, 0x3083
test eax, eax
je 0x10040fb9
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xb50]
neg eax
jne 0x10040f93
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xb50], 0
jne 0x10040f93
and dword [ebp - 0x45c], 0
jmp 0x10040f9d
mov dword [ebp - 0x45c], 1
mov dword [ebp - 0x198], 1
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0xcc], eax
mov eax, dword [ebp - 0xcc]
mov eax, 0xaf7f3e76
test eax, eax
je 0x10040fe7
mov byte [ebp - 0x18a], 0
movzx eax, byte [ebp - 0x18a]
test eax, eax
je 0x10040fe2
push 0x3e93
push 0
call fcn.10040a79
pop ecx
pop ecx
jmp 0x1004128a
mov dword [ebp - 0x314], 0
mov dword [ebp - 0x818], 0x3a7ef23e
mov dword [ebp - 0x2fc], 0
jmp 0x10041014
mov eax, dword [ebp - 0x2fc]
inc eax
mov dword [ebp - 0x2fc], eax
cmp dword [ebp - 0x2fc], 1
jge 0x10041030
mov eax, dword [ebp - 0x2fc]
mov dword [ebp + eax*4 - 0x30c], 0xffffffff
jmp 0x10041007
mov byte [ebp - 0xf1], 0
push 0x447b
push 0x1672
push 0
push 0x43bb
lea eax, [ebp - 0xf1]
push eax
call fcn.100403a6
add esp, 0x14
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x30c]
mov dword [ebp - 0xc00], eax
cmp dword [ebp - 0xcc], 0
je 0x1004107c
cmp dword [ebp - 0x2b8], 0
jne 0x1004108c
push 3
pop eax
test eax, eax
jne 0x1004108c
and dword [ebp - 0x810], 0
jmp 0x10041096
mov dword [ebp - 0x810], 1
mov eax, dword [ebp - 0x810]
mov dword [ebp - 0x198], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x198]
sub ecx, dword [ebp + eax - 0x30c]
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x30c], ecx
jge 0x100410d6
mov eax, 0xa4d9a54e
test eax, eax
jne 0x100410d6
and dword [ebp - 0x464], 0
jmp 0x100410e0
mov dword [ebp - 0x464], 1
mov eax, dword [ebp - 0x464]
mov dword [ebp - 0x2b8], eax
mov eax, dword [ebp - 0x2b8]
mov dword [ebp - 0x314], eax
mov eax, dword [ebp - 0x314]
mov dword [ebp - 0x818], eax
mov eax, dword [ebp - 0x818]
sub eax, 8
mov ecx, 0x89fe
sub ecx, eax
je 0x10041134
push 0x2cab
push 0x3f18
push 0
push 0x67b5
call fcn.1004011f
add esp, 0x10
jmp 0x1004128a
mov dword [ebp - 0xa60], 1
mov dword [ebp - 0x304], 0
jmp 0x10041157
mov eax, dword [ebp - 0x304]
inc eax
mov dword [ebp - 0x304], eax
cmp dword [ebp - 0x304], 3
jge 0x10041173
mov eax, dword [ebp - 0x304]
mov dword [ebp + eax*4 - 0xd1c], 1
jmp 0x1004114a
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xd1c]
mov dword [ebp - 0xc08], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x30c]
mov dword [ebp - 0x198], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa58]
cmp eax, dword [ebp - 0x198]
jge 0x100411b9
mov dword [ebp - 0x828], 1
jmp 0x100411c0
and dword [ebp - 0x828], 0
push 4
pop eax
shl eax, 1
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0xb50]
cmp dword [ebp + eax - 0xb50], ecx
je 0x100411e6
mov dword [ebp - 0x46c], 1
jmp 0x100411ed
and dword [ebp - 0x46c], 0
mov eax, dword [ebp - 0x314]
cmp dword [ebp - 0x46c], eax
jl 0x10041207
mov dword [ebp - 0x820], 1
jmp 0x1004120e
and dword [ebp - 0x820], 0
mov eax, dword [ebp - 0x314]
cmp dword [ebp - 0x820], eax
jne 0x10041228
mov dword [ebp - 0x474], 1
jmp 0x1004122f
and dword [ebp - 0x474], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xd1c]
cmp dword [ebp - 0x474], eax
jge 0x1004124f
mov dword [ebp - 0x47c], 1
jmp 0x10041256
and dword [ebp - 0x47c], 0
mov eax, dword [ebp - 0x828]
cmp eax, dword [ebp - 0x47c]
jg 0x10041270
mov dword [ebp - 0x830], 1
jmp 0x10041277
and dword [ebp - 0x830], 0
mov eax, dword [ebp - 0x2b8]
imul eax, dword [ebp - 0x830]
mov dword [ebp - 0xa60], eax
mov eax, dword [ebp - 0x838]
movzx eax, word [eax]
cmp eax, 0x5a4d
je 0x1004129f
jmp 0x10047923
mov dword [ebp - 0xc10], 0x845d811f
mov dword [ebp - 0xc18], 0xffffffff
mov dword [ebp - 0xc20], 0x4006310f
mov dword [ebp - 0x90], 0
jmp 0x100412d6
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 3
jge 0x100412f2
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0xb5c], 0xa61928c1
jmp 0x100412c9
mov dword [ebp - 0x90], 0
jmp 0x1004130b
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 4
jge 0x10041327
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0xf3c], 0
jmp 0x100412fe
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0xb5c], 0x15
jmp 0x10041352
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xb5c]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0xb5c], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xb5c], 0xfffffff6
jl 0x10041411
mov dword [ebp - 0x258], 0xfffffffe
mov dword [ebp - 0xc28], 0
mov dword [ebp - 0xc30], 5
mov dword [ebp - 0x484], 0x718bd850
mov dword [ebp - 0x2c4], 0
jmp 0x100413a6
mov eax, dword [ebp - 0x2c4]
inc eax
mov dword [ebp - 0x2c4], eax
cmp dword [ebp - 0x2c4], 3
jge 0x100413c2
mov eax, dword [ebp - 0x2c4]
mov dword [ebp + eax*4 - 0xefc], 0xd193e05
jmp 0x10041399
mov dword [ebp - 0x258], 0xffffffee
jmp 0x100413db
mov eax, dword [ebp - 0x258]
dec eax
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 0xffffffee
jl 0x100413ff
push 0
push 0x74e2
push 0x673d
push 0x495
call fcn.100406a1
add esp, 0x10
jmp 0x100413ce
mov eax, dword [ebp - 0x484]
inc eax
mov dword [ebp - 0x484], eax
jmp 0x10041339
mov eax, dword [ebp - 0x838]
mov ecx, dword [ebp - 0x30]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0x130], ecx
mov dword [ebp - 0x260], 0xe1d925b0
mov dword [ebp - 0x2d4], 0x9ba87a5e
mov dword [ebp - 0x3e4], 0xea0a9f4f
mov dword [ebp - 0xa78], 0xfffffffd
mov dword [ebp - 0x4b4], 5
mov dword [ebp - 0x2cc], 0
jmp 0x1004146e
mov eax, dword [ebp - 0x2cc]
inc eax
mov dword [ebp - 0x2cc], eax
cmp dword [ebp - 0x2cc], 1
jge 0x10041487
mov eax, dword [ebp - 0x2cc]
mov dword [ebp + eax*4 - 0x64], 1
jmp 0x10041461
cmp dword [ebp - 0x260], 0
je 0x10041623
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x64]
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x64]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x64]
jne 0x100414c0
mov dword [ebp - 0x48c], 1
jmp 0x100414c7
and dword [ebp - 0x48c], 0
mov eax, dword [ebp - 0x48c]
mov dword [ebp - 0x2d4], eax
mov eax, dword [ebp - 0x2d4]
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x64]
jne 0x100414fb
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x64], 0
jne 0x100414fb
and dword [ebp - 0xa68], 0
jmp 0x10041505
mov dword [ebp - 0xa68], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x64]
mov dword [ebp - 0xc38], eax
mov eax, dword [ebp - 0x260]
mov dword [ebp - 0xc40], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x64], 0
je 0x10041543
mov eax, 0x5e3d
test eax, eax
je 0x10041543
mov dword [ebp - 0x840], 1
jmp 0x1004154a
and dword [ebp - 0x840], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x64]
cmp eax, dword [ebp - 0x840]
jle 0x10041568
mov dword [ebp - 0x494], 1
jmp 0x1004156f
and dword [ebp - 0x494], 0
mov eax, dword [ebp - 0x3e4]
cmp dword [ebp - 0x494], eax
je 0x10041589
mov dword [ebp - 0xa70], 1
jmp 0x10041590
and dword [ebp - 0xa70], 0
mov eax, dword [ebp - 0x3e4]
mov dword [ebp - 0xcec], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x64]
mov dword [ebp - 0xcf4], eax
cmp dword [ebp - 0x260], 0xbda9
jg 0x100415c4
mov dword [ebp - 0x848], 1
jmp 0x100415cb
and dword [ebp - 0x848], 0
cmp dword [ebp - 0x848], 0x72737ae9
je 0x100415e3
mov dword [ebp - 0x49c], 1
jmp 0x100415ea
and dword [ebp - 0x49c], 0
mov eax, dword [ebp - 0x260]
cmp dword [ebp - 0x49c], eax
jl 0x10041604
mov dword [ebp - 0x850], 1
jmp 0x1004160b
and dword [ebp - 0x850], 0
cmp dword [ebp - 0x850], 0x42c7
je 0x10041623
mov dword [ebp - 0x4a4], 1
jmp 0x1004162a
and dword [ebp - 0x4a4], 0
mov eax, dword [ebp - 0x4a4]
mov dword [ebp - 0xa78], eax
mov dword [ebp - 0x4b4], 0xad0d7276
mov dword [ebp - 0x2d4], 0
mov eax, dword [ebp - 0x2d4]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x64]
add ecx, 0x7cd3e5c7
add eax, ecx
jne 0x10041674
push 0xfffffffffffffff6
pop eax
test eax, eax
jne 0x10041674
and dword [ebp - 0x858], 0
jmp 0x1004167e
mov dword [ebp - 0x858], 1
cmp dword [ebp - 0x858], 0xc46d767c
je 0x10041696
mov dword [ebp - 0x4ac], 1
jmp 0x1004169d
and dword [ebp - 0x4ac], 0
mov eax, dword [ebp - 0x3e4]
cmp dword [ebp - 0x4ac], eax
jg 0x100416b7
mov dword [ebp - 0x860], 1
jmp 0x100416be
and dword [ebp - 0x860], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x64]
sub eax, dword [ebp - 0x860]
mov dword [ebp - 0x4b4], eax
mov eax, dword [ebp - 0x130]
cmp dword [eax], 0x4550
je 0x100416e7
jmp 0x10047923
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x130]
lea eax, [ecx + eax + 0x78]
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x6c]
cmp dword [eax + 4], 0
jne 0x10041708
jmp 0x10047923
and dword [ebp - 0x34], 0
mov dword [ebp - 0x74], 0xfffffff8
mov dword [ebp - 0x3ec], 1
mov dword [ebp - 0x2dc], 0x23cb8e00
mov dword [ebp - 0x4dc], 0x2cf3e4c9
mov dword [ebp - 0xa80], 0xffffffff
mov dword [ebp - 0xa88], 3
mov dword [ebp - 0x268], 0
jmp 0x1004175e
mov eax, dword [ebp - 0x268]
inc eax
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 1
jge 0x1004177a
mov eax, dword [ebp - 0x268]
mov dword [ebp + eax*4 - 0x4bc], 0xfffffffd
jmp 0x10041751
mov dword [ebp - 0x74], 0
jmp 0x1004178a
mov eax, dword [ebp - 0x74]
dec eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0
jl 0x100417df
mov byte [ebp - 0x169], 0
lea eax, [ebp - 0x169]
push eax
push 0
push 0x52cb
call fcn.1003fd24
add esp, 0xc
mov eax, dword [ebp - 0x74]
cmp dword [ebp + eax*4 - 0x4bc], 0
jl 0x100417c6
mov dword [ebp - 0x868], 1
jmp 0x100417cd
and dword [ebp - 0x868], 0
mov eax, dword [ebp - 0x74]
mov ecx, dword [ebp - 0x868]
mov dword [ebp + eax*4 - 0x4bc], ecx
jmp 0x10041783
imul eax, dword [ebp - 0x74], 0
cmp eax, dword [ebp - 0x74]
jg 0x100417f4
mov dword [ebp - 0x870], 1
jmp 0x100417fb
and dword [ebp - 0x870], 0
mov eax, dword [ebp - 0x2dc]
cmp dword [ebp - 0x870], eax
je 0x10041815
mov dword [ebp - 0x4c4], 1
jmp 0x1004181c
and dword [ebp - 0x4c4], 0
cmp dword [ebp - 0x4c4], 5
jge 0x10041831
mov dword [ebp - 0x878], 1
jmp 0x10041838
and dword [ebp - 0x878], 0
cmp dword [ebp - 0x878], 0x1131
jle 0x10041850
mov dword [ebp - 0x4cc], 1
jmp 0x10041857
and dword [ebp - 0x4cc], 0
mov eax, dword [ebp - 0x2dc]
imul eax, dword [ebp - 0x4cc]
test eax, eax
jne 0x1004187a
cmp dword [ebp - 0x3ec], 0
jne 0x1004187a
and dword [ebp - 0x880], 0
jmp 0x10041884
mov dword [ebp - 0x880], 1
cmp dword [ebp - 0x880], 0x3bba
jl 0x1004189c
mov dword [ebp - 0x4d4], 1
jmp 0x100418a3
and dword [ebp - 0x4d4], 0
mov eax, dword [ebp - 0x3ec]
cmp dword [ebp - 0x4d4], eax
jg 0x100418bd
mov dword [ebp - 0x888], 1
jmp 0x100418c4
and dword [ebp - 0x888], 0
mov eax, dword [ebp - 0x888]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x3ec]
mov dword [ebp - 0x4dc], eax
mov eax, dword [ebp - 0xa80]
cmp dword [ebp - 0x4dc], eax
je 0x100418f3
mov dword [ebp - 0x890], 1
jmp 0x100418fa
and dword [ebp - 0x890], 0
mov eax, dword [ebp - 0x2dc]
cmp dword [ebp - 0x890], eax
jge 0x10041914
mov dword [ebp - 0x4e4], 1
jmp 0x1004191b
and dword [ebp - 0x4e4], 0
mov eax, dword [ebp - 0x2dc]
cmp dword [ebp - 0x4e4], eax
jne 0x10041935
mov dword [ebp - 0x898], 1
jmp 0x1004193c
and dword [ebp - 0x898], 0
mov eax, dword [ebp - 0x898]
mov dword [ebp - 0xa88], eax
mov eax, dword [ebp - 0x130]
movzx eax, word [eax + 0x14]
mov ecx, dword [ebp - 0x130]
lea eax, [ecx + eax + 0x18]
mov dword [ebp - 0xa4], eax
and dword [ebp - 0x3f4], 0
jmp 0x10041987
mov eax, dword [ebp - 0x3f4]
inc eax
mov dword [ebp - 0x3f4], eax
mov eax, dword [ebp - 0xa4]
add eax, 0x28
mov dword [ebp - 0xa4], eax
mov eax, dword [ebp - 0x130]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x3f4], eax
jge 0x10041a03
mov eax, dword [ebp - 0xa4]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x4ec], eax
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x4ec]
jb 0x100419fe
mov eax, dword [ebp - 0x130]
push dword [eax + 0x38]
mov eax, dword [ebp - 0xa4]
push dword [eax + 8]
call fcn.1003fcbc
pop ecx
pop ecx
add eax, dword [ebp - 0x4ec]
mov dword [ebp - 0xa90], eax
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
cmp eax, dword [ebp - 0xa90]
jae 0x100419fe
mov eax, dword [ebp - 0xa4]
mov ecx, dword [ebp - 0xa4]
mov eax, dword [eax + 0x14]
sub eax, dword [ecx + 0xc]
mov dword [ebp - 0x34], eax
jmp 0x10041a03
jmp 0x1004196b
cmp dword [ebp - 0x34], 0
jne 0x10041a0e
jmp 0x10047923
mov dword [ebp - 0xcfc], 0xffffffff
mov dword [ebp - 0x38], 0
jmp 0x10041a28
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 4
jge 0x10041a3e
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0xe68], 0xecb4
jmp 0x10041a21
mov dword [ebp - 0x38], 0
jmp 0x10041a4e
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 2
jge 0x10041a64
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0xe00], 3
jmp 0x10041a47
mov dword [ebp - 0x38], 0
jmp 0x10041a74
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 1
jge 0x10041a8a
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x4f4], 0x24b6
jmp 0x10041a6d
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xe68], 0xc692
jg 0x10041b76
mov dword [ebp - 0x270], 1
mov dword [ebp - 0xd04], 0x3843046b
mov dword [ebp - 0xb8], 0
jmp 0x10041acd
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 1
jge 0x10041ae9
mov eax, dword [ebp - 0xb8]
mov dword [ebp + eax*4 - 0xd0c], 0xffffffff
jmp 0x10041ac0
mov dword [ebp - 0xb8], 0
jmp 0x10041b02
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 3
jge 0x10041b1e
mov eax, dword [ebp - 0xb8]
mov dword [ebp + eax*4 - 0xd2c], 0
jmp 0x10041af5
mov dword [ebp - 0x270], 0
jmp 0x10041b37
mov eax, dword [ebp - 0x270]
inc eax
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 8
je 0x10041b59
mov dword [ebp - 0x8a0], 0xbbf9acf2
mov eax, dword [ebp - 0x8a0]
dec eax
mov dword [ebp - 0x8a0], eax
jmp 0x10041b2a
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xd2c]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xd2c], eax
jmp 0x10041bbc
mov dword [ebp - 0x2e4], 0
jmp 0x10041b8f
mov eax, dword [ebp - 0x2e4]
inc eax
mov dword [ebp - 0x2e4], eax
cmp dword [ebp - 0x2e4], 4
jge 0x10041bab
mov eax, dword [ebp - 0x2e4]
mov dword [ebp + eax*4 - 0xe78], 0x3439
jmp 0x10041b82
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xe78], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x4f4]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x4f4], eax
mov eax, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x34]
add ecx, dword [eax]
add ecx, dword [ebp - 0x30]
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x40c], 0xf0ed1ad6
mov dword [ebp - 0x8a8], 0x4e3f1571
mov dword [ebp - 0x404], 0x199314e7
mov dword [ebp - 0x1ac], 0x89c089ce
mov dword [ebp - 0xab0], 0xa0e40209
mov dword [ebp - 0x524], 0xaf1ba137
mov dword [ebp - 0xab8], 0xffffffff
mov dword [ebp - 0x98], 0
jmp 0x10041c44
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 1
jge 0x10041c60
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0x3fc], 0
jmp 0x10041c37
mov dword [ebp - 0x98], 0
jmp 0x10041c79
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 2
jge 0x10041c95
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0xc4c], 4
jmp 0x10041c6c
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3fc], 0x78c0
jle 0x10041cb4
mov dword [ebp - 0xa98], 1
jmp 0x10041cbb
and dword [ebp - 0xa98], 0
mov dword [ebp - 0x8a8], 0
cmp dword [ebp - 0x8a8], 0x97bc8b42
jae 0x10041cdd
mov dword [ebp - 0xaa0], 1
jmp 0x10041ce4
and dword [ebp - 0xaa0], 0
mov eax, 0xd2eb2fc2
test eax, eax
je 0x10041d09
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3fc], 0
je 0x10041d09
mov dword [ebp - 0x4fc], 1
jmp 0x10041d10
and dword [ebp - 0x4fc], 0
cmp dword [ebp - 0x4fc], 8
jl 0x10041d25
mov dword [ebp - 0x8b0], 1
jmp 0x10041d2c
and dword [ebp - 0x8b0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x8b0]
mov dword [ebp + eax - 0x3fc], ecx
xor eax, eax
add eax, 0xe86ff18f
cmp eax, dword [ebp - 0x404]
je 0x10041d5a
mov dword [ebp - 0x504], 1
jmp 0x10041d61
and dword [ebp - 0x504], 0
mov eax, dword [ebp - 0x1ac]
cmp dword [ebp - 0x504], eax
jle 0x10041d7b
mov dword [ebp - 0x8b8], 1
jmp 0x10041d82
and dword [ebp - 0x8b8], 0
mov eax, dword [ebp - 0x8b8]
mov dword [ebp - 0x404], eax
mov eax, dword [ebp - 0x40c]
sub eax, dword [ebp - 0x404]
mov dword [ebp - 0xaa8], eax
mov eax, dword [ebp - 0x40c]
inc eax
mov dword [ebp - 0x40c], eax
cmp dword [ebp - 0xaa8], 0xffff
jae 0x10041dc5
mov dword [ebp - 0x50c], 1
jmp 0x10041dcc
and dword [ebp - 0x50c], 0
mov eax, dword [ebp - 0x1ac]
cmp dword [ebp - 0x50c], eax
jl 0x10041de6
mov dword [ebp - 0x8c0], 1
jmp 0x10041ded
and dword [ebp - 0x8c0], 0
mov eax, dword [ebp - 0x1ac]
cmp dword [ebp - 0x8c0], eax
jge 0x10041e07
mov dword [ebp - 0x514], 1
jmp 0x10041e0e
and dword [ebp - 0x514], 0
mov eax, dword [ebp - 0x1ac]
cmp dword [ebp - 0x514], eax
jle 0x10041e28
mov dword [ebp - 0x8c8], 1
jmp 0x10041e2f
and dword [ebp - 0x8c8], 0
mov eax, dword [ebp - 0x1ac]
cmp dword [ebp - 0x8c8], eax
je 0x10041e49
mov dword [ebp - 0x8d0], 1
jmp 0x10041e50
and dword [ebp - 0x8d0], 0
mov eax, dword [ebp - 0x1ac]
cmp dword [ebp - 0x8d0], eax
jne 0x10041e6a
mov dword [ebp - 0x74c], 1
jmp 0x10041e71
and dword [ebp - 0x74c], 0
mov eax, dword [ebp - 0x74c]
mov dword [ebp - 0xab0], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc4c]
mov dword [ebp - 0x524], eax
mov eax, dword [ebp - 0x524]
mov dword [ebp - 0xab8], eax
xor ecx, ecx
call fcn.1002ea57
push eax
call fcn.10069a18
pop ecx
mov dword [ebp - 0x1b8], 0xf4f46db5
mov dword [ebp - 0x200], 0xdb39523d
mov dword [ebp - 0xf8], 0xa8551b32
mov dword [ebp - 0x564], 0x3e7a3298
mov dword [ebp - 0xad0], 0x53ebff78
mov dword [ebp - 0xd48], 0xc489
mov dword [ebp - 0x278], 0
jmp 0x10041eff
mov eax, dword [ebp - 0x278]
inc eax
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x278], 1
jge 0x10041f1b
mov eax, dword [ebp - 0x278]
mov dword [ebp + eax*4 - 0x86c], 0xf665
jmp 0x10041ef2
mov dword [ebp - 0x1b8], 0
mov dword [ebp - 0x1b8], 0
jmp 0x10041f3e
mov eax, dword [ebp - 0x1b8]
dec eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 0
jl 0x10042305
mov dword [ebp - 0x208], 0xfffffffe
mov dword [ebp - 0x414], 0
mov dword [ebp - 0xf0], 1
mov dword [ebp - 0x54c], 0x8eb16e2c
mov dword [ebp - 0x208], 0
jmp 0x10041f8c
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 0
jg 0x10042300
mov dword [ebp - 0xe8], 5
mov dword [ebp - 0xe8], 0
jmp 0x10041fbc
mov eax, dword [ebp - 0xe8]
dec eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0
jl 0x100421ef
mov dword [ebp - 0xac0], 0xffffffff
mov dword [ebp - 0x414], 8
cmp dword [ebp - 0x414], 0
jne 0x10041fff
mov eax, dword [ebp - 0xe8]
cmp dword [ebp + eax*4 - 0x86c], 0
jne 0x10041fff
and dword [ebp - 0x948], 0
jmp 0x10042009
mov dword [ebp - 0x948], 1
cmp dword [ebp - 0x1b8], 0
je 0x100420ca
cmp dword [ebp - 0xe8], 0
jne 0x1004205d
mov dword [ebp - 0xf0], 0x5f7919ad
cmp dword [ebp - 0xf0], 0x47941ce3
jle 0x10042041
mov dword [ebp - 0x864], 1
jmp 0x10042048
and dword [ebp - 0x864], 0
cmp dword [ebp - 0x864], 0xc8b166c1
jne 0x1004205d
and dword [ebp - 0x52c], 0
jmp 0x10042067
mov dword [ebp - 0x52c], 1
cmp dword [ebp - 0x52c], 0
jne 0x1004207c
mov dword [ebp - 0x754], 1
jmp 0x10042083
and dword [ebp - 0x754], 0
mov eax, dword [ebp - 0x754]
sub eax, dword [ebp - 0x200]
jne 0x100420a3
cmp dword [ebp - 0xf8], 0
jne 0x100420a3
and dword [ebp - 0x534], 0
jmp 0x100420ad
mov dword [ebp - 0x534], 1
mov eax, dword [ebp - 0xe8]
imul eax, dword [ebp - 0x534]
test eax, eax
je 0x100420ca
mov dword [ebp - 0x53c], 1
jmp 0x100420d1
and dword [ebp - 0x53c], 0
mov eax, dword [ebp - 0x948]
cmp eax, dword [ebp - 0x53c]
jge 0x100420eb
mov dword [ebp - 0x75c], 1
jmp 0x100420f2
and dword [ebp - 0x75c], 0
mov eax, dword [ebp - 0x54c]
cmp dword [ebp - 0x75c], eax
jl 0x1004210c
mov dword [ebp - 0x544], 1
jmp 0x10042113
and dword [ebp - 0x544], 0
mov eax, dword [ebp - 0x544]
mov dword [ebp - 0xac0], eax
mov dword [ebp - 0xf8], 0
jmp 0x10042138
mov eax, dword [ebp - 0xf8]
dec eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0
jl 0x100421ea
mov byte [ebp - 0x101], 0
movzx eax, byte [ebp - 0x101]
test eax, eax
je 0x10042165
push 0
push 0x7031
call fcn.1003ff61
pop ecx
pop ecx
mov dword [ebp - 0xf0], 0
jmp 0x1004217e
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0
jg 0x100421e5
mov dword [ebp - 0x200], 0
jmp 0x100421a0
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 0
jg 0x100421e3
mov byte [ebp - 0x149], 0
movzx eax, byte [ebp - 0x149]
test eax, eax
je 0x100421c9
push 0x6e2a
push 1
call fcn.1003fceb
pop ecx
pop ecx
mov byte [ebp - 0x109], 0
movzx eax, byte [ebp - 0x109]
test eax, eax
je 0x100421e1
call dword [sym.imp.USER32.dll_ReleaseCapture]
jmp 0x10042193
jmp 0x10042171
jmp 0x1004212b
jmp 0x10041faf
cmp dword [ebp - 0xf8], 0
jne 0x10042204
mov dword [ebp - 0x764], 1
jmp 0x1004220b
and dword [ebp - 0x764], 0
mov eax, dword [ebp - 0x414]
mov dword [ebp - 0xd50], eax
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0xd58], eax
mov eax, dword [ebp - 0x564]
mov dword [ebp - 0xd60], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x208]
cmp dword [ebp + eax - 0x86c], ecx
je 0x10042250
mov dword [ebp - 0xac8], 1
jmp 0x10042257
and dword [ebp - 0xac8], 0
cmp dword [ebp - 0x54c], 0
jne 0x10042272
cmp dword [ebp - 0xf8], 0
jne 0x10042272
and dword [ebp - 0x554], 0
jmp 0x1004227c
mov dword [ebp - 0x554], 1
mov eax, dword [ebp - 0x764]
sub eax, dword [ebp - 0x554]
add eax, 0xec53
jne 0x100422a1
mov eax, 0x2a7f
test eax, eax
jne 0x100422a1
and dword [ebp - 0x8f4], 0
jmp 0x100422ab
mov dword [ebp - 0x8f4], 1
cmp dword [ebp - 0x8f4], 0xdc14
je 0x100422c3
mov dword [ebp - 0x55c], 1
jmp 0x100422ca
and dword [ebp - 0x55c], 0
cmp dword [ebp - 0x55c], 0
je 0x100422e8
cmp dword [ebp - 0xad0], 0
je 0x100422e8
mov dword [ebp - 0x76c], 1
jmp 0x100422ef
and dword [ebp - 0x76c], 0
mov eax, dword [ebp - 0x76c]
mov dword [ebp - 0x564], eax
jmp 0x10041f7f
jmp 0x10041f31
mov dword [ebp - 0x100], 0xcf5720e
mov dword [ebp - 0xadc], 0xffffffff
mov dword [ebp - 0xaf8], 2
mov dword [ebp - 0xa40], 0x3b372ba2
mov byte [ebp - 0x189], 0
movzx eax, byte [ebp - 0x189]
test eax, eax
je 0x10042353
push 0
push 0x3fad
push 0x43b3
call fcn.10040659
add esp, 0xc
cmp dword [ebp - 0x100], 0
je 0x100423ca
mov dword [ebp - 0x100], 0
jmp 0x10042375
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0x15
je 0x100423c8
mov dword [ebp - 0x2ec], 0
jmp 0x10042397
mov eax, dword [ebp - 0x2ec]
inc eax
mov dword [ebp - 0x2ec], eax
cmp dword [ebp - 0x2ec], 2
jge 0x100423b3
mov eax, dword [ebp - 0x2ec]
mov dword [ebp + eax*4 - 0xc58], 0x86e5
jmp 0x1004238a
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x100]
mov dword [ebp + eax - 0xc58], ecx
jmp 0x10042368
jmp 0x10042432
mov dword [ebp - 0xb00], 0x1d8b
mov dword [ebp - 0xd68], 0x2ca8cda2
mov dword [ebp - 0xb20], 0
mov dword [ebp - 0x9b4], 0
lea eax, [ebp - 0x100]
push eax
push 0
lea eax, [ebp - 0xb00]
push eax
push 0x28d
lea eax, [ebp - 0xb20]
push eax
lea eax, [ebp - 0xadc]
push eax
lea eax, [ebp - 0xaf8]
push eax
lea eax, [ebp - 0xa40]
push eax
lea eax, [ebp - 0x9b4]
push eax
call fcn.10040852
add esp, 0x24
mov byte [ebp - 0x3c0], 9
mov byte [ebp - 0x3bf], 0xc8
mov byte [ebp - 0x3be], 7
mov byte [ebp - 0x3bd], 6
mov byte [ebp - 0x3bc], 2
mov byte [ebp - 0x3bb], 1
mov byte [ebp - 0x3ba], 6
mov byte [ebp - 0x3b9], 6
mov byte [ebp - 0x3b8], 8
mov byte [ebp - 0x3b7], 1
mov byte [ebp - 0x3b6], 4
mov byte [ebp - 0x3b5], 8
mov byte [ebp - 0x3b4], 5
mov byte [ebp - 0x3b3], 9
mov byte [ebp - 0x3b2], 1
mov byte [ebp - 0x3b1], 4
mov byte [ebp - 0x3b0], 3
mov byte [ebp - 0x3af], 2
mov byte [ebp - 0x3ae], 0
mov byte [ebp - 0x3ad], 6
mov byte [ebp - 0x3ac], 0x39
mov byte [ebp - 0x3ab], 0x51
mov byte [ebp - 0x3aa], 0xca
mov byte [ebp - 0x3a9], 0xcb
mov byte [ebp - 0x3a8], 0xd5
mov byte [ebp - 0x3a7], 0x67
mov byte [ebp - 0x3a6], 0x64
mov byte [ebp - 0x3a5], 0xcf
mov byte [ebp - 0x3a4], 0x38
mov byte [ebp - 0x3a3], 0x4a
mov byte [ebp - 0x3a2], 0x8a
mov byte [ebp - 0x3a1], 0x92
mov byte [ebp - 0x3a0], 0x69
mov byte [ebp - 0x39f], 7
mov byte [ebp - 0x39e], 0x2d
mov byte [ebp - 0x39d], 0x4b
mov byte [ebp - 0x39c], 0x67
mov byte [ebp - 0x39b], 0x72
mov byte [ebp - 0x39a], 0x96
mov byte [ebp - 0x399], pe_nt_image_headers32
mov byte [ebp - 0x398], 0x5d
mov byte [ebp - 0x397], 0xdb
mov byte [ebp - 0x396], 0xaa
mov byte [ebp - 0x395], 0x33
mov byte [ebp - 0x394], 0x7a
mov byte [ebp - 0x393], 0x10
mov byte [ebp - 0x392], 0x36
mov byte [ebp - 0x391], 0x4d
mov byte [ebp - 0x390], 0x57
mov byte [ebp - 0x38f], 0x39
mov byte [ebp - 0x38e], 0x8e
mov byte [ebp - 0x38d], 6
mov byte [ebp - 0x38c], 0xca
mov byte [ebp - 0x38b], 0xfd
mov byte [ebp - 0x38a], 0x8b
mov byte [ebp - 0x389], 0x23
mov byte [ebp - 0x388], 0x46
mov byte [ebp - 0x387], 0xed
mov byte [ebp - 0x386], 0x9d
mov byte [ebp - 0x385], 0xcb
mov byte [ebp - 0x384], 0x2f
mov byte [ebp - 0x383], 3
mov byte [ebp - 0x382], 0x80
mov byte [ebp - 0x381], 0xfa
mov byte [ebp - 0x380], 0x50
mov byte [ebp - 0x37f], 0x69
mov byte [ebp - 0x37e], 0x50
mov byte [ebp - 0x37d], 0xca
mov byte [ebp - 0x37c], 0xcb
mov byte [ebp - 0x37b], 0x3c
mov byte [ebp - 0x37a], 0xb
mov byte [ebp - 0x379], 0xa
mov byte [ebp - 0x378], 0x9f
mov byte [ebp - 0x377], 0x6e
mov byte [ebp - 0x376], 0xb6
mov byte [ebp - 0x375], 0xcf
mov byte [ebp - 0x374], 0x46
mov byte [ebp - 0x373], 0x99
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x3c0]
or eax, 0xf8
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x3c0]
and ecx, 0xf8
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x3c0]
mov byte [ebp + ecx - 0x960], al
mov dword [ebp - 0x48], 2
and dword [ebp - 0x2f4], 0
jmp 0x100426aa
mov eax, dword [ebp - 0x48]
inc eax
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0x4e
jae 0x1004276f
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x3c0]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x48], eax
jne 0x100426f4
mov eax, dword [ebp - 0x48]
movzx eax, byte [ebp + eax - 0x3c0]
inc eax
mov dword [ebp - 0x2f4], eax
mov eax, dword [ebp - 0x48]
movzx eax, byte [ebp + eax - 0x3c0]
mov ecx, dword [ebp - 0x48]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x48], eax
jmp 0x100426a2
mov eax, dword [ebp - 0x48]
movzx eax, byte [ebp + eax - 0x3bf]
mov ecx, dword [ebp - 0x48]
sub ecx, dword [ebp - 0x2f4]
movzx ecx, byte [ebp + ecx - 0x3c2]
movsx ecx, byte [ebp + ecx - 0x960]
or eax, ecx
mov ecx, dword [ebp - 0x48]
movzx ecx, byte [ebp + ecx - 0x3bf]
mov edx, dword [ebp - 0x48]
sub edx, dword [ebp - 0x2f4]
movzx edx, byte [ebp + edx - 0x3c2]
movsx edx, byte [ebp + edx - 0x960]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x48]
movzx ecx, byte [ebp + ecx - 0x3c0]
mov byte [ebp + ecx - 0x960], al
push 0x7e3d
push 1
lea eax, [ebp - 0x2f4]
push eax
call fcn.1003fd24
add esp, 0xc
jmp 0x100426a2
xor eax, eax
inc eax
imul eax, eax, 0xa
mov byte [ebp + eax - 0x960], 0
mov dword [ebp - 0x28], 4
mov dword [ebp - 0x3d8], 0xf8b8ae50
mov dword [ebp - 0x3d4], 0xf8b8ae50
mov dword [ebp - 0x3d0], 0xf8b8ae50
mov dword [ebp - 0x3cc], 0xf8b8ae50
mov dword [ebp - 0x210], 9
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0xd70], eax
mov eax, 0x9cc14173
test eax, eax
je 0x100427fe
cmp dword [ebp - 0x28], 0
je 0x100427e0
cmp dword [ebp - 0x28], 0
je 0x100427e0
mov dword [ebp - 0x874], 1
jmp 0x100427e7
and dword [ebp - 0x874], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x874], eax
jge 0x100427fe
mov dword [ebp - 0xa7c], 1
jmp 0x10042805
and dword [ebp - 0xa7c], 0
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0xd78], eax
mov eax, 0x12b57e8b
cmp eax, 0x101aae4b
jge 0x10042826
mov dword [ebp - 0x56c], 1
jmp 0x1004282d
and dword [ebp - 0x56c], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x56c], eax
je 0x10042844
mov dword [ebp - 0x774], 1
jmp 0x1004284b
and dword [ebp - 0x774], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x774]
mov dword [ebp + eax - 0x3d8], ecx
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x3d8], 0
je 0x10042910
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3d8]
add eax, 0x68ced46c
jne 0x100428a7
cmp dword [ebp - 0x210], 0
jne 0x100428a7
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x3d8], 0
jne 0x100428a7
and dword [ebp - 0x574], 0
jmp 0x100428b1
mov dword [ebp - 0x574], 1
mov eax, dword [ebp - 0x574]
add eax, 0x67bb
cmp eax, dword [ebp - 0x28]
jge 0x100428cd
mov dword [ebp - 0x9bc], 1
jmp 0x100428d4
and dword [ebp - 0x9bc], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x3d8]
mov dword [ebp - 0xd80], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x28]
cmp dword [ebp + eax - 0x3d8], ecx
jg 0x10042910
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x3d8], 0
jne 0x10042910
and dword [ebp - 0x938], 0
jmp 0x1004291a
mov dword [ebp - 0x938], 1
mov eax, dword [ebp - 0x938]
sub eax, 0x232c2a4e
cmp eax, 1
jge 0x10042936
mov dword [ebp - 0x57c], 1
jmp 0x1004293d
and dword [ebp - 0x57c], 0
mov eax, dword [ebp - 0x57c]
sub eax, 0xcf71
push 4
pop ecx
imul ecx, ecx, 3
cmp eax, dword [ebp + ecx - 0x3d8]
jle 0x10042963
mov dword [ebp - 0x77c], 1
jmp 0x1004296a
and dword [ebp - 0x77c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3d8]
cmp eax, dword [ebp - 0x77c]
jge 0x1004298b
mov dword [ebp - 0x584], 1
jmp 0x10042992
and dword [ebp - 0x584], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x3d8]
imul eax, dword [ebp - 0x584]
cmp dword [ebp - 0x28], eax
jg 0x100429b7
mov dword [ebp - 0x87c], 1
jmp 0x100429be
and dword [ebp - 0x87c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3d8]
imul eax, dword [ebp - 0x87c]
neg eax
je 0x10042a36
mov byte [ebp - 0x111], 0
push 0x631
lea eax, [ebp - 0x111]
push eax
push 1
call fcn.1003fd75
add esp, 0xc
mov dword [ebp - 0x28], 0
jmp 0x10042a03
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jg 0x10042a31
mov byte [ebp - 0x151], 0
movzx eax, byte [ebp - 0x151]
test eax, eax
je 0x10042a2f
push 0
push 0x455c
push 0x7450
call fcn.10040094
add esp, 0xc
jmp 0x100429fc
jmp 0x10042c15
mov dword [ebp - 0x59c], 3
mov dword [ebp - 0x210], 0x10
jmp 0x10042a59
mov eax, dword [ebp - 0x210]
dec eax
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 3
jg 0x10042c15
mov dword [ebp - 0x2e0], 0xf4f2d89
mov dword [ebp - 0x58c], 0
mov dword [ebp - 0x594], 1
mov dword [ebp - 0xa84], 0xc132d45a
mov dword [ebp - 0x284], 0
jmp 0x10042aa7
mov eax, dword [ebp - 0x284]
inc eax
mov dword [ebp - 0x284], eax
cmp dword [ebp - 0x284], 2
jge 0x10042ac3
mov eax, dword [ebp - 0x284]
mov dword [ebp + eax*4 - 0xc64], 0xf116e8cf
jmp 0x10042a9a
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x3d8], 0
jne 0x10042bfa
mov eax, dword [ebp - 0x2e0]
mov dword [ebp - 0x58c], eax
cmp dword [ebp - 0x58c], 0
jne 0x10042bbe
mov eax, dword [ebp - 0x2e0]
mov dword [ebp - 0xb1c], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xb1c]
mov dword [ebp + eax - 0xc64], ecx
mov eax, dword [ebp - 0x594]
mov dword [ebp - 0xd88], eax
cmp dword [ebp - 0x28], 0
jne 0x10042b33
cmp dword [ebp - 0x59c], 0
jne 0x10042b33
and dword [ebp - 0x784], 0
jmp 0x10042b3d
mov dword [ebp - 0x784], 1
mov eax, dword [ebp - 0x784]
sub eax, dword [ebp - 0x594]
sub eax, 9
cmp eax, 0x5ab2
jne 0x10042b5f
mov dword [ebp - 0x8fc], 1
jmp 0x10042b66
and dword [ebp - 0x8fc], 0
mov eax, dword [ebp - 0x2e0]
sub eax, dword [ebp - 0x8fc]
mov dword [ebp - 0x78c], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x78c]
mov dword [ebp + eax - 0x3d8], ecx
mov eax, dword [ebp - 0x59c]
cmp dword [ebp - 0x78c], eax
jne 0x10042ba5
mov dword [ebp - 0x5a4], 1
jmp 0x10042bac
and dword [ebp - 0x5a4], 0
cmp dword [ebp - 0x5a4], 1
jle 0x10042bbe
and dword [ebp - 0x9c4], 0
jmp 0x10042bc8
mov dword [ebp - 0x9c4], 1
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x28], eax
jle 0x10042bdc
mov dword [ebp - 0x884], 1
jmp 0x10042be3
and dword [ebp - 0x884], 0
mov eax, dword [ebp - 0x2e0]
cmp eax, dword [ebp - 0x884]
je 0x10042bfa
and dword [ebp - 0x5ac], 0
jmp 0x10042c04
mov dword [ebp - 0x5ac], 1
mov eax, dword [ebp - 0x5ac]
mov dword [ebp - 0xa84], eax
jmp 0x10042a4c
lea eax, [ebp - 0x960]
push eax
lea ecx, [ebp - 0xea8]
call fcn.10024b90
mov dword [ebp - 0x9cc], eax
mov eax, dword [ebp - 0x9cc]
mov dword [ebp - 0xae4], eax
and dword [ebp - 4], 0
push 0xa
xor edx, edx
mov ecx, dword [ebp - 0xae4]
call fcn.1002ea17
pop ecx
mov dword [ebp - 0xaf4], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xea8]
call fcn.10016c65
mov dword [ebp - 0x218], 6
mov dword [ebp - 0x1cc], 0xf07c70ab
mov dword [ebp - 0xd0], 0xb5411457
mov dword [ebp - 0x108], 1
mov dword [ebp - 0x308], 0
mov byte [ebp - 0x119], 0
movzx eax, byte [ebp - 0x119]
test eax, eax
je 0x10042cba
push 0x7912
push 0
push 0x1c11
call fcn.10040a22
add esp, 0xc
mov eax, dword [ebp - 0x218]
neg eax
imul eax, dword [ebp - 0x218]
test eax, eax
je 0x10042ce2
mov eax, 0xe2bbef7d
test eax, eax
je 0x10042ce2
mov dword [ebp - 0x794], 1
jmp 0x10042ce9
and dword [ebp - 0x794], 0
mov eax, dword [ebp - 0x218]
cmp dword [ebp - 0x794], eax
jl 0x10042d03
mov dword [ebp - 0x79c], 1
jmp 0x10042d0a
and dword [ebp - 0x79c], 0
mov eax, dword [ebp - 0x1cc]
cmp dword [ebp - 0x1cc], eax
jge 0x10042d24
mov dword [ebp - 0x5b4], 1
jmp 0x10042d2b
and dword [ebp - 0x5b4], 0
mov eax, dword [ebp - 0x5b4]
mov dword [ebp - 0x1cc], eax
mov eax, dword [ebp - 0xd0]
cmp dword [ebp - 0x1cc], eax
je 0x10042d51
mov dword [ebp - 0x918], 1
jmp 0x10042d58
and dword [ebp - 0x918], 0
mov eax, dword [ebp - 0xd0]
cmp dword [ebp - 0x918], eax
jne 0x10042d72
mov dword [ebp - 0x5bc], 1
jmp 0x10042d79
and dword [ebp - 0x5bc], 0
mov eax, dword [ebp - 0x5bc]
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0xd0]
sub eax, dword [ebp - 0x108]
mov dword [ebp - 0x108], eax
mov eax, dword [ebp - 0x308]
cmp dword [ebp - 0x108], eax
jg 0x10042db1
mov dword [ebp - 0x9d4], 1
jmp 0x10042db8
and dword [ebp - 0x9d4], 0
mov eax, dword [ebp - 0x79c]
mov dword [ebp - 0x218], eax
mov eax, dword [ebp - 0xd0]
sub eax, dword [ebp - 0x308]
cmp dword [ebp - 0x218], eax
je 0x10042f78
mov dword [ebp - 0x9dc], 0x93f0
mov dword [ebp - 0x28c], 0
jmp 0x10042dff
mov eax, dword [ebp - 0x28c]
inc eax
mov dword [ebp - 0x28c], eax
cmp dword [ebp - 0x28c], 2
jge 0x10042e1b
mov eax, dword [ebp - 0x28c]
mov dword [ebp + eax*4 - 0x99c], 0xfffffffc
jmp 0x10042df2
mov eax, dword [ebp - 0x308]
cmp dword [ebp - 0x108], eax
je 0x10042e35
mov dword [ebp - 0x88c], 1
jmp 0x10042e3c
and dword [ebp - 0x88c], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x99c], 0
je 0x10042e55
mov byte [ebp - 0x171], 0
movzx eax, byte [ebp - 0x171]
test eax, eax
je 0x10042f98
push 0x3a1a
push 0
call fcn.1003fdd6
pop ecx
pop ecx
mov byte [ebp - 0x121], 0
lea eax, [ebp - 0x121]
push eax
push 1
call fcn.1003fdd6
pop ecx
pop ecx
and dword [ebp - 0x294], 0
jmp 0x10042fc5
cmp dword [ebp - 0x294], 0xb
jae 0x10042fde
mov eax, dword [ebp - 0x294]
mov byte [ebp + eax - 0x960], 0
jmp 0x10042fb8
mov dword [ebp - 0x29c], 0xffffffff
mov dword [ebp - 0x9e4], 1
mov dword [ebp - 0x41c], 4
mov dword [ebp - 0x110], 0
mov dword [ebp - 0x894], 0x658d83f7
mov dword [ebp - 0x5ec], 1
mov dword [ebp - 0x5f4], 6
mov dword [ebp - 0xa94], 0xfffffff8
mov dword [ebp - 0x9ec], 0xd127
mov dword [ebp - 0x2e8], 0
jmp 0x10043051
push 0
push 0x24c
push 0
push 0
push 0x288
push 0x1332
call dword [sym.imp.USER32.dll_ToAsciiEx]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret