Function at 0x1003f12e
Capabilities:
Contain obfuscated stackstrings
Enumerate pe sections
Parse pe header
Query environment variable
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1007be70
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xcb4
and dword [ebp - 0x18], 0
movzx eax, byte [ebp + 0xc]
test eax, eax
je 0x10044a02
mov eax, dword [ebp + 8]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x118], 4
mov dword [ebp - 0x244], 0
jmp 0x1003f185
mov eax, dword [ebp - 0x244]
inc eax
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 4
jge 0x1003f1a1
mov eax, dword [ebp - 0x244]
mov dword [ebp + eax*4 - 0xb9c], 1
jmp 0x1003f178
mov dword [ebp - 0x118], 0
jmp 0x1003f1ba
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 4
jge 0x1003f1d6
mov eax, dword [ebp - 0x118]
mov dword [ebp + eax*4 - 0xb9c], 0xfe7d
jmp 0x1003f1ad
mov byte [ebp - 0x97], 0
push 0
lea eax, [ebp - 0x97]
push eax
call fcn.1003e908
pop ecx
pop ecx
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x798], eax
mov dword [ebp - 0x174], 1
mov dword [ebp - 0x80], 0xfffffffa
mov dword [ebp - 0x54], 0
jmp 0x1003f217
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 2
jge 0x1003f22d
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0xa08], 0xffffffff
jmp 0x1003f210
mov dword [ebp - 0x54], 0
jmp 0x1003f23d
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 3
jge 0x1003f253
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0xb48], 0xfffffffc
jmp 0x1003f236
push 0x12db
push 0x35e2
push 1
push 0x751f
call fcn.1003e177
add esp, 0x10
cmp dword [ebp - 0x174], 0
je 0x1003f39b
cmp dword [ebp - 0x174], 0
je 0x1003f37d
cmp dword [ebp - 0x80], 0
jne 0x1003f33e
cmp dword [ebp - 0x80], 0xffffffff
jge 0x1003f2a2
mov dword [ebp - 0x5d8], 1
jmp 0x1003f2a9
and dword [ebp - 0x5d8], 0
mov eax, dword [ebp - 0x5d8]
sub eax, 6
cmp eax, dword [ebp - 0x80]
jle 0x1003f2c3
mov dword [ebp - 0x75c], 1
jmp 0x1003f2ca
and dword [ebp - 0x75c], 0
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0x174], eax
mov eax, dword [ebp - 0x174]
cmp eax, dword [ebp - 0x75c]
je 0x1003f2f4
xor eax, eax
je 0x1003f2f4
mov dword [ebp - 0x764], 1
jmp 0x1003f2fb
and dword [ebp - 0x764], 0
mov eax, dword [ebp - 0x764]
sub eax, 0xe2632c5
imul eax, eax, 0xfffffffe
test eax, eax
je 0x1003f31f
cmp dword [ebp - 0x80], 0
je 0x1003f31f
mov dword [ebp - 0x76c], 1
jmp 0x1003f326
and dword [ebp - 0x76c], 0
mov eax, dword [ebp - 0x80]
imul eax, dword [ebp - 0x76c]
sub eax, 7
jne 0x1003f33e
and dword [ebp - 0x774], 0
jmp 0x1003f348
mov dword [ebp - 0x774], 1
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0x774], eax
je 0x1003f35f
mov dword [ebp - 0x7b4], 1
jmp 0x1003f366
and dword [ebp - 0x7b4], 0
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0x7b4], eax
je 0x1003f37d
mov dword [ebp - 0x7a8], 1
jmp 0x1003f384
and dword [ebp - 0x7a8], 0
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0x7a8], eax
jl 0x1003f39b
mov dword [ebp - 0x350], 1
jmp 0x1003f3a2
and dword [ebp - 0x350], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x350]
mov dword [ebp + eax - 0xa08], ecx
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x350]
mov dword [ebp + eax - 0xb48], ecx
mov eax, dword [ebp - 0x798]
movzx eax, word [eax]
cmp eax, 0x5a4d
je 0x1003f3dd
jmp 0x10044a2f
mov eax, dword [ebp - 0x798]
mov ecx, dword [ebp - 0x38]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0xb0], ecx
mov eax, dword [ebp - 0xb0]
cmp dword [eax], 0x4550
je 0x1003f402
jmp 0x10044a2f
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x6f4], 0x65e790e8
mov dword [ebp - 0x254], 0
mov dword [ebp - 0x70c], 0x451f1e28
mov dword [ebp - 0x384], 0xf196
mov dword [ebp - 0x7e8], 0x3a7ef23e
mov dword [ebp - 0x24c], 0
jmp 0x1003f457
mov eax, dword [ebp - 0x24c]
inc eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 2
jge 0x1003f473
mov eax, dword [ebp - 0x24c]
mov dword [ebp + eax*4 - 0x8c8], 0x9fe57f6c
jmp 0x1003f44a
mov byte [ebp - 0xd6], 0
movzx eax, byte [ebp - 0xd6]
test eax, eax
je 0x1003f494
push 0x1ddd
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
mov eax, dword [ebp - 0xa0]
cmp dword [ebp - 0xa0], eax
je 0x1003f4ae
mov dword [ebp - 0x428], 1
jmp 0x1003f4b5
and dword [ebp - 0x428], 0
mov eax, dword [ebp - 0xa0]
cmp eax, dword [ebp - 0x428]
jl 0x1003f4cf
mov dword [ebp - 0x6fc], 1
jmp 0x1003f4d6
and dword [ebp - 0x6fc], 0
mov eax, dword [ebp - 0x384]
inc eax
mov dword [ebp - 0x384], eax
mov eax, dword [ebp - 0x384]
mov dword [ebp - 0xb30], eax
mov eax, dword [ebp - 0x254]
mov dword [ebp - 0x9b4], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x8c8]
imul eax, dword [ebp - 0x254]
cmp eax, 0x4e58
jge 0x1003f522
mov dword [ebp - 0x3c8], 1
jmp 0x1003f529
and dword [ebp - 0x3c8], 0
cmp dword [ebp - 0x3c8], 0xd7c3b7c3
je 0x1003f541
mov dword [ebp - 0x3d0], 1
jmp 0x1003f548
and dword [ebp - 0x3d0], 0
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x6f4], eax
mov eax, dword [ebp - 0x6f4]
add eax, dword [ebp - 0x3d0]
cmp dword [ebp - 0x6fc], eax
jne 0x1003f574
mov dword [ebp - 0x3d8], 1
jmp 0x1003f57b
and dword [ebp - 0x3d8], 0
mov eax, dword [ebp - 0x3d8]
mov dword [ebp - 0x254], eax
mov eax, dword [ebp - 0x254]
add eax, dword [ebp - 0x7e8]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x8c8]
jne 0x1003f5ae
mov dword [ebp - 0x704], 1
jmp 0x1003f5b5
and dword [ebp - 0x704], 0
mov eax, dword [ebp - 0x70c]
cmp dword [ebp - 0x704], eax
jl 0x1003f5cf
mov dword [ebp - 0x3e0], 1
jmp 0x1003f5d6
and dword [ebp - 0x3e0], 0
mov eax, dword [ebp - 0x3e0]
sub eax, dword [ebp - 0xa0]
mov dword [ebp - 0xa0], eax
jne 0x1003f5fc
cmp dword [ebp - 0x70c], 0
jne 0x1003f5fc
and dword [ebp - 0x3e8], 0
jmp 0x1003f606
mov dword [ebp - 0x3e8], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x3e8]
mov dword [ebp + eax - 0x8c8], ecx
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xb0]
lea eax, [ecx + eax + 0x78]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x9bc], 0xfffffffb
mov dword [ebp - 0x9c4], 0xffffffff
mov dword [ebp - 0x894], 0xad95e17c
mov dword [ebp - 0x9cc], 0xf390197f
mov dword [ebp - 0xe0], 0xd8530de9
mov dword [ebp - 0x88c], 0xffffffff
mov dword [ebp - 0x204], 0
jmp 0x1003f681
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 1
jge 0x1003f69d
mov eax, dword [ebp - 0x204]
mov dword [ebp + eax*4 - 0x9d4], 6
jmp 0x1003f674
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xe0], 0xffffffff
jmp 0x1003f6c3
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0x14
jg 0x1003f6f7
mov eax, dword [ebp - 0x88c]
mov dword [ebp - 0x894], eax
mov byte [ebp - 0xc9], 0
lea eax, [ebp - 0xc9]
push eax
push 0x121f
push 0
call fcn.1003e6e6
add esp, 0xc
jmp 0x1003f6b6
mov eax, dword [ebp - 0x48]
cmp dword [eax + 4], 0
jne 0x1003f705
jmp 0x10044a2f
mov dword [ebp - 0x84], 1
mov dword [ebp - 0x194], 0
jmp 0x1003f728
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 1
jge 0x1003f744
mov eax, dword [ebp - 0x194]
mov dword [ebp + eax*4 - 0x400], 0x2799ac78
jmp 0x1003f71b
mov dword [ebp - 0x84], 0
jmp 0x1003f75d
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0
jg 0x1003f850
mov dword [ebp - 0x38c], 0x62c9cc14
mov byte [ebp - 0x92], 0
lea eax, [ebp - 0x92]
push eax
push 0
push 0x70a3
call fcn.1003ee2c
add esp, 0xc
cmp dword [ebp - 0x38c], 1
je 0x1003f7a6
mov dword [ebp - 0x714], 1
jmp 0x1003f7ad
and dword [ebp - 0x714], 0
mov eax, dword [ebp - 0x84]
cmp dword [ebp - 0x714], eax
jge 0x1003f7c7
mov dword [ebp - 0x3f0], 1
jmp 0x1003f7ce
and dword [ebp - 0x3f0], 0
mov eax, dword [ebp - 0x84]
cmp dword [ebp - 0x3f0], eax
jle 0x1003f7e8
mov dword [ebp - 0x71c], 1
jmp 0x1003f7ef
and dword [ebp - 0x71c], 0
cmp dword [ebp - 0x71c], 0
je 0x1003f80d
cmp dword [ebp - 0x38c], 0
je 0x1003f80d
mov dword [ebp - 0x3f8], 1
jmp 0x1003f814
and dword [ebp - 0x3f8], 0
mov eax, dword [ebp - 0x38c]
cmp eax, dword [ebp - 0x3f8]
je 0x1003f82e
mov dword [ebp - 0x724], 1
jmp 0x1003f835
and dword [ebp - 0x724], 0
mov eax, dword [ebp - 0x724]
sub eax, 7
mov ecx, dword [ebp - 0x84]
mov dword [ebp + ecx*4 - 0x400], eax
jmp 0x1003f750
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x400], 0
jne 0x1003f86c
mov dword [ebp - 0x72c], 1
jmp 0x1003f873
and dword [ebp - 0x72c], 0
mov eax, dword [ebp - 0x72c]
mov dword [ebp - 0x84], eax
and dword [ebp - 0x34], 0
mov dword [ebp - 0x408], 0xd06c
mov dword [ebp - 0x9dc], 0x9aa810d2
mov dword [ebp - 0x1a4], 0xfffffffd
mov dword [ebp - 0x214], 0xee327439
mov dword [ebp - 0x8a4], 0xfc1da7bc
mov dword [ebp - 0x20c], 0
jmp 0x1003f8ce
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 4
jge 0x1003f8ea
mov eax, dword [ebp - 0x20c]
mov dword [ebp + eax*4 - 0xca0], 0xdb856137
jmp 0x1003f8c1
cmp dword [ebp - 0x408], 0
je 0x1003f917
mov dword [ebp - 0x89c], 0xffffffff
push 1
lea eax, [ebp - 0x89c]
push eax
lea eax, [ebp - 0x408]
push eax
call fcn.1003e220
add esp, 0xc
jmp 0x1003f966
mov dword [ebp - 0x9e4], 9
mov dword [ebp - 0x19c], 0
jmp 0x1003f93a
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 2
jge 0x1003f956
mov eax, dword [ebp - 0x19c]
mov dword [ebp + eax*4 - 0xb74], 0xffffffff
jmp 0x1003f92d
push 0
lea eax, [ebp - 0x8a4]
push eax
call fcn.1003e341
pop ecx
pop ecx
mov dword [ebp - 0x214], 0
jmp 0x1003f97f
mov eax, dword [ebp - 0x214]
dec eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 0xfffffff7
jge 0x1003f9e1
mov dword [ebp - 0x1a4], 0
jmp 0x1003f9a1
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 3
jg 0x1003f9c5
push 0x4c79
push 0x70b0
push 0
push 0x30f0
call fcn.1003e551
add esp, 0x10
jmp 0x1003f994
mov byte [ebp - 0x94], 0
movzx eax, byte [ebp - 0x94]
test eax, eax
je 0x1003f9df
push 1
call fcn.1003e28b
pop ecx
jmp 0x1003f972
mov eax, dword [ebp - 0xb0]
movzx eax, word [eax + 0x14]
mov ecx, dword [ebp - 0xb0]
lea eax, [ecx + eax + 0x18]
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0x924], 0xffffffff
mov dword [ebp - 0x920], 0xffffffff
mov dword [ebp - 0x91c], 0xffffffff
mov dword [ebp - 0x918], 0xffffffff
mov dword [ebp - 0x9ec], 0xfffffff9
mov dword [ebp - 0x9f4], 0x1ad67a4b
mov dword [ebp - 0x9fc], 0xe64e6dc6
mov dword [ebp - 0x430], 0x308f4727
mov dword [ebp - 0x21c], 0
jmp 0x1003fa64
mov eax, dword [ebp - 0x21c]
inc eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 2
jge 0x1003fa80
mov eax, dword [ebp - 0x21c]
mov dword [ebp + eax*4 - 0xa14], 0xcacff8ee
jmp 0x1003fa57
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x924], 0
jmp 0x1003faae
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x924]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x924], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x924], 0x16
je 0x1003fd2a
mov dword [ebp - 0x1ac], 0xa35f394
mov dword [ebp - 0xacc], 1
mov dword [ebp - 0x8ec], 0x2189f42c
mov dword [ebp - 0x39c], 0xfffffffd
mov dword [ebp - 0x8ac], 0xbed85728
mov dword [ebp - 0x8b4], 0x2095d7c1
mov dword [ebp - 0x1ac], 0x1c
jmp 0x1003fb17
mov eax, dword [ebp - 0x1ac]
dec eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 0xffffffec
jge 0x1003fd0e
mov dword [ebp - 0x394], 7
mov dword [ebp - 0x8bc], 0xf5ef889a
mov dword [ebp - 0xad4], 5
mov dword [ebp - 0xadc], 1
mov dword [ebp - 0x8f4], 0xfffe
cmp dword [ebp - 0x8ac], 0
je 0x1003fc10
mov eax, dword [ebp - 0x8b4]
mov dword [ebp - 0xae4], eax
cmp dword [ebp - 0x394], 0xfffffff6
jne 0x1003fb84
mov dword [ebp - 0x734], 1
jmp 0x1003fb8b
and dword [ebp - 0x734], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa14]
cmp dword [ebp - 0x734], eax
jg 0x1003fbac
mov dword [ebp - 0x410], 1
jmp 0x1003fbb3
and dword [ebp - 0x410], 0
mov eax, dword [ebp - 0x394]
cmp dword [ebp - 0x410], eax
je 0x1003fbcd
mov dword [ebp - 0x73c], 1
jmp 0x1003fbd4
and dword [ebp - 0x73c], 0
cmp dword [ebp - 0x73c], 7
jg 0x1003fbe9
mov dword [ebp - 0x418], 1
jmp 0x1003fbf0
and dword [ebp - 0x418], 0
mov eax, dword [ebp - 0x8bc]
add eax, dword [ebp - 0x418]
cmp eax, dword [ebp - 0x430]
jg 0x1003fc10
mov dword [ebp - 0x744], 1
jmp 0x1003fc17
and dword [ebp - 0x744], 0
mov eax, dword [ebp - 0x744]
add eax, 0xd49a
imul eax, eax, 0x85bb
cmp eax, 0x6a1241a5
jle 0x1003fc3b
mov dword [ebp - 0x420], 1
jmp 0x1003fc42
and dword [ebp - 0x420], 0
cmp dword [ebp - 0x420], 0xffffffff
jne 0x1003fc57
mov dword [ebp - 0x74c], 1
jmp 0x1003fc5e
and dword [ebp - 0x74c], 0
mov eax, dword [ebp - 0x394]
imul eax, dword [ebp - 0x74c]
cmp eax, 1
jne 0x1003fc7c
mov dword [ebp - 0x754], 1
jmp 0x1003fc83
and dword [ebp - 0x754], 0
mov eax, dword [ebp - 0x8ec]
cmp dword [ebp - 0x754], eax
jne 0x1003fc9d
mov dword [ebp - 0x6d8], 1
jmp 0x1003fca4
and dword [ebp - 0x6d8], 0
mov eax, dword [ebp - 0x6d8]
neg eax
cmp dword [ebp - 0x430], eax
je 0x1003fcc0
mov dword [ebp - 0x5f8], 1
jmp 0x1003fcc7
and dword [ebp - 0x5f8], 0
mov eax, dword [ebp - 0x39c]
dec eax
mov dword [ebp - 0x39c], eax
mov eax, dword [ebp - 0x39c]
cmp eax, dword [ebp - 0x5f8]
jg 0x1003fcee
mov dword [ebp - 0x438], 1
jmp 0x1003fcf5
and dword [ebp - 0x438], 0
mov eax, dword [ebp - 0x438]
mov dword [ebp - 0x8f4], eax
push 1
call fcn.1003e2d9
pop ecx
jmp 0x1003fb0a
mov byte [ebp - 0x96], 0
push 0
lea eax, [ebp - 0x96]
push eax
call fcn.1003e4b1
pop ecx
pop ecx
jmp 0x1003fa93
and dword [ebp - 0x3a4], 0
jmp 0x1003fd4f
mov eax, dword [ebp - 0x3a4]
inc eax
mov dword [ebp - 0x3a4], eax
mov eax, dword [ebp - 0xb8]
add eax, 0x28
mov dword [ebp - 0xb8], eax
mov eax, dword [ebp - 0xb0]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x3a4], eax
jge 0x1003fdcb
mov eax, dword [ebp - 0xb8]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x7ac], eax
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x7ac]
jb 0x1003fdc6
mov eax, dword [ebp - 0xb0]
push dword [eax + 0x38]
mov eax, dword [ebp - 0xb8]
push dword [eax + 8]
call fcn.1003df5a
pop ecx
pop ecx
add eax, dword [ebp - 0x7ac]
mov dword [ebp - 0x8fc], eax
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x8fc]
jae 0x1003fdc6
mov eax, dword [ebp - 0xb8]
mov ecx, dword [ebp - 0xb8]
mov eax, dword [eax + 0x14]
sub eax, dword [ecx + 0xc]
mov dword [ebp - 0x34], eax
jmp 0x1003fdcb
jmp 0x1003fd33
cmp dword [ebp - 0x34], 0
jne 0x1003fdd6
jmp 0x10044a2f
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x34]
add ecx, dword [eax]
add ecx, dword [ebp - 0x38]
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x110], 0x8470ed99
mov dword [ebp - 0x750], 0
mov dword [ebp - 0x460], 0x2a19820b
mov dword [ebp - 0x6e8], 0xfffffff8
mov dword [ebp - 0x64], 0
jmp 0x1003fe1c
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 2
jge 0x1003fe32
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x260], 0xfffffffa
jmp 0x1003fe15
mov dword [ebp - 0x64], 0
jmp 0x1003fe42
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 2
jge 0x1003fe58
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0xa20], 0x885b3d92
jmp 0x1003fe3b
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x260]
mov dword [ebp - 0xaec], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x260]
mov dword [ebp - 0xb0c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x260]
mov dword [ebp - 0xb14], eax
push 4
pop eax
shl eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x260]
cmp dword [ebp + eax - 0x260], ecx
jl 0x1003feb9
mov dword [ebp - 0x440], 1
jmp 0x1003fec0
and dword [ebp - 0x440], 0
mov eax, dword [ebp - 0x110]
cmp dword [ebp - 0x440], eax
jg 0x1003feda
mov dword [ebp - 0x600], 1
jmp 0x1003fee1
and dword [ebp - 0x600], 0
cmp dword [ebp - 0x600], 0x136dc992
je 0x1003fef9
mov dword [ebp - 0x448], 1
jmp 0x1003ff00
and dword [ebp - 0x448], 0
cmp dword [ebp - 0x448], 0x4365dea3
jge 0x1003ff18
mov dword [ebp - 0x6e0], 1
jmp 0x1003ff1f
and dword [ebp - 0x6e0], 0
cmp dword [ebp - 0x6e0], 0
jl 0x1003ff34
mov dword [ebp - 0x450], 1
jmp 0x1003ff3b
and dword [ebp - 0x450], 0
cmp dword [ebp - 0x450], 1
jae 0x1003ff50
mov dword [ebp - 0x608], 1
jmp 0x1003ff57
and dword [ebp - 0x608], 0
cmp dword [ebp - 0x608], 0xd4aa41a8
je 0x1003ff6f
mov dword [ebp - 0x458], 1
jmp 0x1003ff76
and dword [ebp - 0x458], 0
mov eax, dword [ebp - 0x458]
mov dword [ebp - 0x750], eax
cmp dword [ebp - 0x750], 0xbd55fd0a
jbe 0x1003ff9a
mov dword [ebp - 0x910], 1
jmp 0x1003ffa1
and dword [ebp - 0x910], 0
mov dword [ebp - 0x460], 0
mov eax, dword [ebp - 0x110]
cmp dword [ebp - 0x460], eax
jl 0x1003ffc5
mov dword [ebp - 0x610], 1
jmp 0x1003ffcc
and dword [ebp - 0x610], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x110]
imul ecx, dword [ebp - 0x610]
imul ecx, dword [ebp - 0x110]
cmp dword [ebp + eax - 0x260], ecx
jne 0x1003fffb
mov dword [ebp - 0x468], 1
jmp 0x10040002
and dword [ebp - 0x468], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x260]
cmp dword [ebp - 0x468], eax
jg 0x10040023
mov dword [ebp - 0x93c], 1
jmp 0x1004002a
and dword [ebp - 0x93c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x260]
mov dword [ebp - 0xb1c], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x260]
mov dword [ebp - 0x6e8], eax
cmp dword [ebp - 0x6e8], 0
je 0x1004006e
cmp dword [ebp - 0x110], 0
je 0x1004006e
mov dword [ebp - 0x470], 1
jmp 0x10040075
and dword [ebp - 0x470], 0
cmp dword [ebp - 0x470], 0xbf2b
jle 0x1004008d
mov dword [ebp - 0x618], 1
jmp 0x10040094
and dword [ebp - 0x618], 0
mov eax, dword [ebp - 0x618]
neg eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xa20], eax
xor ecx, ecx
call fcn.1002bc89
push eax
call fcn.10062a78
pop ecx
mov dword [ebp - 0x114], 0x8470ed99
mov dword [ebp - 0x628], 0
mov dword [ebp - 0x498], 0x2a19820b
mov dword [ebp - 0x630], 0xfffffff8
mov dword [ebp - 0x78], 0
jmp 0x100400ef
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 2
jge 0x10040105
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0x1d0], 0xfffffffa
jmp 0x100400e8
mov dword [ebp - 0x78], 0
jmp 0x10040115
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 2
jge 0x1004012b
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0xa2c], 0x885b3d92
jmp 0x1004010e
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1d0]
mov dword [ebp - 0xb24], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1d0]
mov dword [ebp - 0xb2c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1d0]
mov dword [ebp - 0xb34], eax
push 4
pop eax
shl eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x1d0]
cmp dword [ebp + eax - 0x1d0], ecx
jl 0x1004018c
mov dword [ebp - 0x478], 1
jmp 0x10040193
and dword [ebp - 0x478], 0
mov eax, dword [ebp - 0x114]
cmp dword [ebp - 0x478], eax
jg 0x100401ad
mov dword [ebp - 0x790], 1
jmp 0x100401b4
and dword [ebp - 0x790], 0
cmp dword [ebp - 0x790], 0x136dc992
je 0x100401cc
mov dword [ebp - 0x480], 1
jmp 0x100401d3
and dword [ebp - 0x480], 0
cmp dword [ebp - 0x480], 0x4365dea3
jge 0x100401eb
mov dword [ebp - 0x620], 1
jmp 0x100401f2
and dword [ebp - 0x620], 0
cmp dword [ebp - 0x620], 0
jl 0x10040207
mov dword [ebp - 0x488], 1
jmp 0x1004020e
and dword [ebp - 0x488], 0
cmp dword [ebp - 0x488], 1
jae 0x10040223
mov dword [ebp - 0x6f0], 1
jmp 0x1004022a
and dword [ebp - 0x6f0], 0
cmp dword [ebp - 0x6f0], 0xd4aa41a8
je 0x10040242
mov dword [ebp - 0x490], 1
jmp 0x10040249
and dword [ebp - 0x490], 0
mov eax, dword [ebp - 0x490]
mov dword [ebp - 0x628], eax
cmp dword [ebp - 0x628], 0xbd55fd0a
jbe 0x1004026d
mov dword [ebp - 0x900], 1
jmp 0x10040274
and dword [ebp - 0x900], 0
mov dword [ebp - 0x498], 0
mov eax, dword [ebp - 0x114]
cmp dword [ebp - 0x498], eax
jl 0x10040298
mov dword [ebp - 0x758], 1
jmp 0x1004029f
and dword [ebp - 0x758], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x114]
imul ecx, dword [ebp - 0x758]
imul ecx, dword [ebp - 0x114]
cmp dword [ebp + eax - 0x1d0], ecx
jne 0x100402ce
mov dword [ebp - 0x4a0], 1
jmp 0x100402d5
and dword [ebp - 0x4a0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1d0]
cmp dword [ebp - 0x4a0], eax
jg 0x100402f6
mov dword [ebp - 0x7f0], 1
jmp 0x100402fd
and dword [ebp - 0x7f0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1d0]
mov dword [ebp - 0xb3c], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1d0]
mov dword [ebp - 0x630], eax
cmp dword [ebp - 0x630], 0
je 0x10040341
cmp dword [ebp - 0x114], 0
je 0x10040341
mov dword [ebp - 0x4a8], 1
jmp 0x10040348
and dword [ebp - 0x4a8], 0
cmp dword [ebp - 0x4a8], 0xbf2b
jle 0x10040360
mov dword [ebp - 0x6f8], 1
jmp 0x10040367
and dword [ebp - 0x6f8], 0
mov eax, dword [ebp - 0x6f8]
neg eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xa2c], eax
mov byte [ebp - 0x2d8], 5
mov byte [ebp - 0x2d7], 0x8d
mov byte [ebp - 0x2d6], 4
mov byte [ebp - 0x2d5], 9
mov byte [ebp - 0x2d4], 8
mov byte [ebp - 0x2d3], 8
mov byte [ebp - 0x2d2], 2
mov byte [ebp - 0x2d1], 7
mov byte [ebp - 0x2d0], 7
mov byte [ebp - 0x2cf], 1
mov byte [ebp - 0x2ce], 3
mov byte [ebp - 0x2cd], 1
mov byte [ebp - 0x2cc], 0x29
mov byte [ebp - 0x2cb], 0xe3
mov byte [ebp - 0x2ca], 0x5c
mov byte [ebp - 0x2c9], 0x91
mov byte [ebp - 0x2c8], 0xf
mov byte [ebp - 0x2c7], 0x8b
mov byte [ebp - 0x2c6], 0x21
mov byte [ebp - 0x2c5], 0x52
mov byte [ebp - 0x2c4], 0x6c
mov byte [ebp - 0x2c3], 0x3a
mov byte [ebp - 0x2c2], 0x43
mov byte [ebp - 0x2c1], 0x3e
mov byte [ebp - 0x2c0], 0x91
mov byte [ebp - 0x2bf], 0x7c
mov byte [ebp - 0x2be], 0x28
mov byte [ebp - 0x2bd], 0x51
mov byte [ebp - 0x2bc], 0x3e
mov byte [ebp - 0x2bb], 0x32
mov byte [ebp - 0x2ba], 5
mov byte [ebp - 0x2b9], 0x2c
mov byte [ebp - 0x2b8], 0x1f
mov byte [ebp - 0x2b7], 0x6e
mov byte [ebp - 0x2b6], 0x96
mov byte [ebp - 0x2b5], 0xef
mov byte [ebp - 0x2b4], 0x86
mov byte [ebp - 0x2b3], 0xdb
mov byte [ebp - 0x2b2], 0xca
mov byte [ebp - 0x2b1], 0xd4
mov byte [ebp - 0x2b0], 0x7a
mov byte [ebp - 0x2af], 0x11
mov byte [ebp - 0x2ae], 0xfe
mov byte [ebp - 0x2ad], 0xa
mov byte [ebp - 0x2ac], 0xe6
mov byte [ebp - 0x2ab], 0xa7
mov byte [ebp - 0x2aa], 0x2a
mov byte [ebp - 0x2a9], 0x37
mov byte [ebp - 0x2a8], 0x65
mov byte [ebp - 0x2a7], 0xdd
mov byte [ebp - 0x2a6], 0xa9
mov byte [ebp - 0x2a5], 0x33
mov byte [ebp - 0x2a4], 0x6d
mov byte [ebp - 0x2a3], 0x9f
mov byte [ebp - 0x2a2], 1
mov byte [ebp - 0x2a1], 2
mov byte [ebp - 0x2a0], 9
mov byte [ebp - 0x29f], 5
mov byte [ebp - 0x29e], 0
mov byte [ebp - 0x29d], 1
mov byte [ebp - 0x29c], 6
mov byte [ebp - 0x29b], 0
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x2d8]
or eax, 0xbc
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x2d8]
and ecx, 0xbc
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x2d8]
mov byte [ebp + ecx - 0x7cc], al
mov dword [ebp - 0x3c], 2
and dword [ebp - 0x224], 0
jmp 0x10040584
mov eax, dword [ebp - 0x3c]
inc eax
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0x3e
jae 0x1004063a
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x2d8]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x3c], eax
jne 0x100405ce
mov eax, dword [ebp - 0x3c]
movzx eax, byte [ebp + eax - 0x2d8]
inc eax
mov dword [ebp - 0x224], eax
mov eax, dword [ebp - 0x3c]
movzx eax, byte [ebp + eax - 0x2d8]
mov ecx, dword [ebp - 0x3c]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x3c], eax
jmp 0x1004057c
mov eax, dword [ebp - 0x3c]
movzx eax, byte [ebp + eax - 0x2d7]
mov ecx, dword [ebp - 0x3c]
sub ecx, dword [ebp - 0x224]
movzx ecx, byte [ebp + ecx - 0x2da]
movsx ecx, byte [ebp + ecx - 0x7cc]
or eax, ecx
mov ecx, dword [ebp - 0x3c]
movzx ecx, byte [ebp + ecx - 0x2d7]
mov edx, dword [ebp - 0x3c]
sub edx, dword [ebp - 0x224]
movzx edx, byte [ebp + edx - 0x2da]
movsx edx, byte [ebp + edx - 0x7cc]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x3c]
movzx ecx, byte [ebp + ecx - 0x2d8]
mov byte [ebp + ecx - 0x7cc], al
and dword [ebp - 0x224], 0
jmp 0x1004057c
xor eax, eax
inc eax
imul eax, eax, 0xa
mov byte [ebp + eax - 0x7cc], 0
lea eax, [ebp - 0x7cc]
push eax
lea ecx, [ebp - 0xc0c]
call fcn.100224d8
mov dword [ebp - 0x884], eax
mov eax, dword [ebp - 0x884]
mov dword [ebp - 0x898], eax
and dword [ebp - 4], 0
push 0xa
xor edx, edx
mov ecx, dword [ebp - 0x898]
call fcn.1002bc4e
pop ecx
mov dword [ebp - 0x810], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc0c]
call fcn.10016823
mov dword [ebp - 0x148], 0xd06c
mov dword [ebp - 0xaf8], 0x9aa810d2
mov dword [ebp - 0x234], 0xfffffffd
mov dword [ebp - 0x1bc], 0xee327439
mov dword [ebp - 0x8f0], 0xfc1da7bc
mov dword [ebp - 0x1b4], 0
jmp 0x100406e0
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 4
jge 0x100406fc
mov eax, dword [ebp - 0x1b4]
mov dword [ebp + eax*4 - 0xcb0], 0xdb856137
jmp 0x100406d3
cmp dword [ebp - 0x148], 0
je 0x1004073f
mov dword [ebp - 0x7f8], 0xffffffff
mov dword [ebp - 0x148], 0
jmp 0x10040728
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 0x2a
jl 0x1004073d
mov dword [ebp - 0x7f8], 0xfffffffb
jmp 0x1004071b
jmp 0x1004078e
mov dword [ebp - 0xa80], 9
mov dword [ebp - 0x22c], 0
jmp 0x10040762
mov eax, dword [ebp - 0x22c]
inc eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 2
jge 0x1004077e
mov eax, dword [ebp - 0x22c]
mov dword [ebp + eax*4 - 0xbf4], 0xffffffff
jmp 0x10040755
push 0
lea eax, [ebp - 0x8f0]
push eax
call fcn.1003e481
pop ecx
pop ecx
mov dword [ebp - 0x1bc], 0
jmp 0x100407a7
mov eax, dword [ebp - 0x1bc]
dec eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 0xfffffff7
jge 0x1004080d
mov dword [ebp - 0x234], 0
jmp 0x100407c9
mov eax, dword [ebp - 0x234]
inc eax
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 3
jg 0x100407eb
mov byte [ebp - 0x98], 0
push 0
lea eax, [ebp - 0x98]
push eax
call fcn.1003e387
pop ecx
pop ecx
jmp 0x100407bc
mov byte [ebp - 0x9a], 0
movzx eax, byte [ebp - 0x9a]
test eax, eax
je 0x1004080b
push 0x224e
push 0
call fcn.1003ed43
pop ecx
pop ecx
jmp 0x1004079a
and dword [ebp - 0x23c], 0
jmp 0x10040823
mov eax, dword [ebp - 0x23c]
inc eax
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 0xb
jae 0x1004083c
mov eax, dword [ebp - 0x23c]
mov byte [ebp + eax - 0x7cc], 0
jmp 0x10040816
mov dword [ebp - 0x120], 1
mov dword [ebp - 0x88], 0xfffffffa
mov dword [ebp - 0x58], 0
jmp 0x10040860
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 2
jge 0x10040876
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0xa38], 0xffffffff
jmp 0x10040859
mov dword [ebp - 0x58], 0
jmp 0x10040886
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 3
jge 0x1004089c
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0xb54], 0xfffffffc
jmp 0x1004087f
push 1
push 0x4807
call fcn.1003e341
pop ecx
pop ecx
cmp dword [ebp - 0x120], 0
je 0x100409f1
cmp dword [ebp - 0x120], 0
je 0x100409d0
cmp dword [ebp - 0x88], 0
jne 0x1004098b
cmp dword [ebp - 0x88], 0xffffffff
jge 0x100408e6
mov dword [ebp - 0x4b0], 1
jmp 0x100408ed
and dword [ebp - 0x4b0], 0
mov eax, dword [ebp - 0x4b0]
sub eax, 6
cmp eax, dword [ebp - 0x88]
jle 0x1004090a
mov dword [ebp - 0x638], 1
jmp 0x10040911
and dword [ebp - 0x638], 0
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x120], eax
mov eax, dword [ebp - 0x120]
cmp eax, dword [ebp - 0x638]
je 0x1004093b
xor eax, eax
je 0x1004093b
mov dword [ebp - 0x4b8], 1
jmp 0x10040942
and dword [ebp - 0x4b8], 0
mov eax, dword [ebp - 0x4b8]
sub eax, 0xe2632c5
imul eax, eax, 0xfffffffe
test eax, eax
je 0x10040969
cmp dword [ebp - 0x88], 0
je 0x10040969
mov dword [ebp - 0x794], 1
jmp 0x10040970
and dword [ebp - 0x794], 0
mov eax, dword [ebp - 0x88]
imul eax, dword [ebp - 0x794]
sub eax, 7
jne 0x1004098b
and dword [ebp - 0x4c0], 0
jmp 0x10040995
mov dword [ebp - 0x4c0], 1
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0x4c0], eax
je 0x100409af
mov dword [ebp - 0x640], 1
jmp 0x100409b6
and dword [ebp - 0x640], 0
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0x640], eax
je 0x100409d0
mov dword [ebp - 0x4c8], 1
jmp 0x100409d7
and dword [ebp - 0x4c8], 0
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0x4c8], eax
jl 0x100409f1
mov dword [ebp - 0x3ac], 1
jmp 0x100409f8
and dword [ebp - 0x3ac], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x3ac]
mov dword [ebp + eax - 0xa38], ecx
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x3ac]
mov dword [ebp + eax - 0xb54], ecx
mov dword [ebp - 0xe8], 0xfffffff9
mov dword [ebp - 0xa8], 0xffffffff
mov dword [ebp - 0x648], 0xd6f1860e
mov dword [ebp - 0x800], 0x3cbfb41c
mov dword [ebp - 0x1c4], 0
jmp 0x10040a5f
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 1
jge 0x10040a7b
mov eax, dword [ebp - 0x1c4]
mov dword [ebp + eax*4 - 0x658], 1
jmp 0x10040a52
cmp dword [ebp - 0xa8], 0
jne 0x10040aa9
cmp dword [ebp - 0xa8], 0
cmp dword [ebp - 0xa8], 0
jne 0x10040aa9
cmp dword [ebp - 0x648], 0
jne 0x10040aa9
mov dword [ebp - 0x700], 1
jmp 0x10040ab0
and dword [ebp - 0x700], 0
mov dword [ebp - 0xe8], 2
mov eax, dword [ebp - 0xa8]
imul eax, dword [ebp - 0x700]
cmp dword [ebp - 0xe8], eax
jge 0x10040adb
mov dword [ebp - 0x4d0], 1
jmp 0x10040ae2
and dword [ebp - 0x4d0], 0
mov eax, dword [ebp - 0x4d0]
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0xe8], 0
jmp 0x10040b07
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0
jg 0x10040ce3
mov dword [ebp - 0x160], 0xfff9
mov dword [ebp - 0x4e0], 0x4dde9ab5
mov dword [ebp - 0x1c8], 0
jmp 0x10040b41
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 2
jge 0x10040b5d
mov eax, dword [ebp - 0x1c8]
mov dword [ebp + eax*4 - 0xa44], 0x7826243a
jmp 0x10040b34
mov eax, dword [ebp - 0x648]
mov dword [ebp - 0x9a0], eax
cmp dword [ebp - 0x160], 0xa9e
jle 0x10040b81
mov dword [ebp - 0x4d8], 1
jmp 0x10040b88
and dword [ebp - 0x4d8], 0
mov eax, dword [ebp - 0x160]
sub eax, dword [ebp - 0x4d8]
cmp eax, dword [ebp - 0x160]
jge 0x10040ba8
mov dword [ebp - 0x760], 1
jmp 0x10040baf
and dword [ebp - 0x760], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x658]
imul eax, dword [ebp - 0x760]
cmp eax, 1
jae 0x10040bd4
mov dword [ebp - 0x3b4], 1
jmp 0x10040bdb
and dword [ebp - 0x3b4], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x3b4]
mov dword [ebp + eax - 0xa44], ecx
mov eax, dword [ebp - 0xa8]
cmp dword [ebp - 0x3b4], eax
je 0x10040c08
mov dword [ebp - 0x650], 1
jmp 0x10040c0f
and dword [ebp - 0x650], 0
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x4e0], eax
mov eax, dword [ebp - 0x4e0]
cmp eax, dword [ebp - 0x650]
jge 0x10040c35
mov dword [ebp - 0x4e8], 1
jmp 0x10040c3c
and dword [ebp - 0x4e8], 0
mov eax, dword [ebp - 0x4e8]
neg eax
cmp eax, 0xffffffff
jle 0x10040c55
mov dword [ebp - 0x708], 1
jmp 0x10040c5c
and dword [ebp - 0x708], 0
cmp dword [ebp - 0x708], 0xd660
jle 0x10040c74
mov dword [ebp - 0x4f0], 1
jmp 0x10040c7b
and dword [ebp - 0x4f0], 0
mov eax, dword [ebp - 0x160]
cmp dword [ebp - 0x4f0], eax
je 0x10040c95
mov dword [ebp - 0x4f8], 1
jmp 0x10040c9c
and dword [ebp - 0x4f8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x658]
cmp dword [ebp - 0x4f8], eax
jne 0x10040cbd
mov dword [ebp - 0x79c], 1
jmp 0x10040cc4
and dword [ebp - 0x79c], 0
mov eax, dword [ebp - 0x79c]
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0x800], 0
je 0x10040cde
jmp 0x10040afa
jmp 0x10040afa
mov byte [ebp - 0x34c], 4
mov byte [ebp - 0x34b], 0x33
mov byte [ebp - 0x34a], 3
mov byte [ebp - 0x349], 6
mov byte [ebp - 0x348], 1
mov byte [ebp - 0x347], 4
mov byte [ebp - 0x346], 9
mov byte [ebp - 0x345], 6
mov byte [ebp - 0x344], 0
mov byte [ebp - 0x343], 1
mov byte [ebp - 0x342], 0x50
mov byte [ebp - 0x341], 0x68
mov byte [ebp - 0x340], 0xe9
mov byte [ebp - 0x33f], 0x15
mov byte [ebp - 0x33e], 0x6c
mov byte [ebp - 0x33d], 0x66
mov byte [ebp - 0x33c], 0x91
mov byte [ebp - 0x33b], 0xbc
mov byte [ebp - 0x33a], 2
mov byte [ebp - 0x339], 0xa0
mov byte [ebp - 0x338], 0xf8
mov byte [ebp - 0x337], 0x18
mov byte [ebp - 0x336], 0x38
mov byte [ebp - 0x335], 0xc3
mov byte [ebp - 0x334], 0xf5
mov byte [ebp - 0x333], 0x5d
mov byte [ebp - 0x332], 0x6a
mov byte [ebp - 0x331], 0x71
mov byte [ebp - 0x330], 0xae
mov byte [ebp - 0x32f], 0xa7
mov byte [ebp - 0x32e], pe_nt_image_headers32
mov byte [ebp - 0x32d], 0x6f
mov byte [ebp - 0x32c], 0x39
mov byte [ebp - 0x32b], 0xd3
mov byte [ebp - 0x32a], 0x90
mov byte [ebp - 0x329], 0x9a
mov byte [ebp - 0x328], 0x37
mov byte [ebp - 0x327], 5
mov byte [ebp - 0x326], 0x82
mov byte [ebp - 0x325], 0x26
mov byte [ebp - 0x324], 0x3a
mov byte [ebp - 0x323], 0x4c
mov byte [ebp - 0x322], 3
mov byte [ebp - 0x321], 0xb4
mov byte [ebp - 0x320], 0xfc
mov byte [ebp - 0x31f], 0x44
mov byte [ebp - 0x31e], 0xa7
mov byte [ebp - 0x31d], 0x3b
mov byte [ebp - 0x31c], 0xd7
mov byte [ebp - 0x31b], 0xc
mov byte [ebp - 0x31a], 0x59
mov byte [ebp - 0x319], 0xc8
mov byte [ebp - 0x318], 0xec
mov byte [ebp - 0x317], 0x88
mov byte [ebp - 0x316], 0xc4
mov byte [ebp - 0x315], 0x1e
mov byte [ebp - 0x314], 0xf8
mov byte [ebp - 0x313], 0x4e
mov byte [ebp - 0x312], 0x16
mov byte [ebp - 0x311], 0x35
mov byte [ebp - 0x310], 0xc5
mov byte [ebp - 0x30f], 0x8b
mov byte [ebp - 0x30e], 0x4e
mov byte [ebp - 0x30d], 0x21
mov byte [ebp - 0x30c], 0x26
mov byte [ebp - 0x30b], 0xf5
mov byte [ebp - 0x30a], 0x92
mov byte [ebp - 0x309], 0x61
mov byte [ebp - 0x308], 0xfd
mov byte [ebp - 0x307], 0xf2
mov byte [ebp - 0x306], 0x39
mov byte [ebp - 0x305], 0x98
mov byte [ebp - 0x304], 0xb5
mov byte [ebp - 0x303], 0x10
mov byte [ebp - 0x302], 0xfb
mov byte [ebp - 0x301], 0xbf
mov byte [ebp - 0x300], 0x30
mov byte [ebp - 0x2ff], 0x7d
mov byte [ebp - 0x2fe], 0xa
mov byte [ebp - 0x2fd], 0x43
mov byte [ebp - 0x2fc], 5
mov byte [ebp - 0x2fb], 0x22
mov byte [ebp - 0x2fa], 0xe9
mov byte [ebp - 0x2f9], 0xa5
mov byte [ebp - 0x2f8], 0x28
mov byte [ebp - 0x2f7], 0xf7
mov byte [ebp - 0x2f6], 0x66
mov byte [ebp - 0x2f5], 0xe
mov byte [ebp - 0x2f4], 0xc4
mov byte [ebp - 0x2f3], 0x4a
mov byte [ebp - 0x2f2], 0x72
mov byte [ebp - 0x2f1], 6
mov byte [ebp - 0x2f0], 8
mov byte [ebp - 0x2ef], 5
mov byte [ebp - 0x2ee], 8
mov byte [ebp - 0x2ed], 8
mov byte [ebp - 0x2ec], 1
mov byte [ebp - 0x2eb], 2
mov byte [ebp - 0x2ea], 7
mov byte [ebp - 0x2e9], 7
mov byte [ebp - 0x2e8], 1
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x34c]
or eax, 7
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x34c]
and ecx, 7
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x34c]
mov byte [ebp + ecx - 0x7c0], al
mov dword [ebp - 0x28], 2
and dword [ebp - 0x128], 0
jmp 0x10040ff7
mov eax, dword [ebp - 0x28]
inc eax
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0x65
jae 0x100410e4
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x34c]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x28], eax
jne 0x10041041
mov eax, dword [ebp - 0x28]
movzx eax, byte [ebp + eax - 0x34c]
inc eax
mov dword [ebp - 0x128], eax
mov eax, dword [ebp - 0x28]
movzx eax, byte [ebp + eax - 0x34c]
mov ecx, dword [ebp - 0x28]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x28], eax
jmp 0x10040fef
mov eax, dword [ebp - 0x28]
movzx eax, byte [ebp + eax - 0x34b]
mov ecx, dword [ebp - 0x28]
sub ecx, dword [ebp - 0x128]
movzx ecx, byte [ebp + ecx - 0x34e]
movsx ecx, byte [ebp + ecx - 0x7c0]
add eax, ecx
mov ecx, dword [ebp - 0x28]
movzx ecx, byte [ebp + ecx - 0x34b]
mov edx, dword [ebp - 0x28]
sub edx, dword [ebp - 0x128]
movzx edx, byte [ebp + edx - 0x34e]
movsx edx, byte [ebp + edx - 0x7c0]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x28]
movzx ecx, byte [ebp + ecx - 0x34b]
mov edx, dword [ebp - 0x28]
sub edx, dword [ebp - 0x128]
movzx edx, byte [ebp + edx - 0x34e]
movsx edx, byte [ebp + edx - 0x7c0]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x28]
movzx ecx, byte [ebp + ecx - 0x34c]
mov byte [ebp + ecx - 0x7c0], al
push 0x319e
lea eax, [ebp - 0x128]
push eax
push 0
call fcn.1003e829
add esp, 0xc
jmp 0x10040fef
xor eax, eax
inc eax
imul eax, eax, 0xa
mov byte [ebp + eax - 0x7c0], 0
lea eax, [ebp - 0x7c0]
push eax
lea ecx, [ebp - 0xc60]
call fcn.100224d8
mov dword [ebp - 0x8a0], eax
mov eax, dword [ebp - 0x8a0]
mov dword [ebp - 0x808], eax
mov dword [ebp - 4], 1
push 0xa
xor edx, edx
mov ecx, dword [ebp - 0x808]
call fcn.1002bc4e
pop ecx
mov dword [ebp - 0x928], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc60]
call fcn.10016823
mov dword [ebp - 0x218], 0
mov dword [ebp - 0x218], 0xffffffe9
jmp 0x10041165
mov eax, dword [ebp - 0x218]
inc eax
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 0x11
jg 0x100411be
mov dword [ebp - 0x1d8], 0
mov dword [ebp - 0x1d8], 0x16
jmp 0x10041191
mov eax, dword [ebp - 0x1d8]
dec eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 0xfffffff6
jg 0x100411bc
mov byte [ebp - 0x93], 0
movzx eax, byte [ebp - 0x93]
test eax, eax
je 0x100411ba
push 1
push 0x44f6
call fcn.1003e387
pop ecx
pop ecx
jmp 0x10041184
jmp 0x10041158
and dword [ebp - 0x258], 0
jmp 0x100411d4
mov eax, dword [ebp - 0x258]
inc eax
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 0xb
jae 0x100411ed
mov eax, dword [ebp - 0x258]
mov byte [ebp + eax - 0x7c0], 0
jmp 0x100411c7
push dword [ebp - 0x928]
push dword [ebp - 0x810]
call fcn.1003bf14
pop ecx
pop ecx
mov dword [ebp - 0x568], eax
mov dword [ebp - 0xf8], 0x75b57fd5
mov dword [ebp - 0x1e0], 0
jmp 0x10041229
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 1
jge 0x10041242
mov eax, dword [ebp - 0x1e0]
mov dword [ebp + eax*4 - 0x4c], 0xdf29855e
jmp 0x1004121c
mov dword [ebp - 0xf8], 0
jmp 0x1004125b
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0x10
jge 0x1004166f
mov dword [ebp - 0x2c], 9
mov dword [ebp - 0x6c], 7
mov dword [ebp - 0x220], 0x403ca955
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0xab0], eax
cmp dword [ebp - 0x2c], 1
jge 0x1004129b
mov dword [ebp - 0x660], 1
jmp 0x100412a2
and dword [ebp - 0x660], 0
mov eax, 0x95998aaf
test eax, eax
je 0x100412c0
cmp dword [ebp - 0xf8], 0
je 0x100412c0
mov dword [ebp - 0x500], 1
jmp 0x100412c7
and dword [ebp - 0x500], 0
cmp dword [ebp - 0x500], 0x68a9017c
je 0x100412df
mov dword [ebp - 0x508], 1
jmp 0x100412e6
and dword [ebp - 0x508], 0
mov eax, dword [ebp - 0x660]
cmp eax, dword [ebp - 0x508]
jl 0x10041300
mov dword [ebp - 0x710], 1
jmp 0x10041307
and dword [ebp - 0x710], 0
cmp dword [ebp - 0x710], 1
jbe 0x1004131c
mov dword [ebp - 0x510], 1
jmp 0x10041323
and dword [ebp - 0x510], 0
mov eax, dword [ebp - 0xf8]
add eax, dword [ebp - 0x510]
imul eax, dword [ebp - 0x2c]
test eax, eax
je 0x10041349
cmp dword [ebp - 0x2c], 0
je 0x10041349
mov dword [ebp - 0x668], 1
jmp 0x10041350
and dword [ebp - 0x668], 0
cmp dword [ebp - 0x668], 9
jg 0x10041365
mov dword [ebp - 0x518], 1
jmp 0x1004136c
and dword [ebp - 0x518], 0
mov eax, dword [ebp - 0x518]
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x220], eax
mov dword [ebp - 0x2c], 0
jmp 0x1004138e
cmp dword [ebp - 0x2c], 0
jg 0x1004166a
mov dword [ebp - 0x540], 0x7c2b42d2
mov dword [ebp - 0x548], 1
mov byte [ebp - 0xd8], 0
movzx eax, byte [ebp - 0xd8]
test eax, eax
je 0x100413c4
call dword [sym.imp.USER32.dll_ReleaseCapture]
mov eax, dword [ebp - 0x2c]
cmp dword [ebp + eax*4 - 0x4c], 0
jne 0x10041474
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x4c]
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x220], 0
jne 0x100413f8
push 3
pop eax
test eax, eax
jne 0x100413f8
and dword [ebp - 0x8a8], 0
jmp 0x10041402
mov dword [ebp - 0x8a8], 1
mov eax, dword [ebp - 0x220]
mov dword [ebp - 0xb00], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x4c]
mov dword [ebp - 0x9b0], eax
cmp dword [ebp - 0x220], 0x417f
jne 0x10041436
mov dword [ebp - 0x768], 1
jmp 0x1004143d
and dword [ebp - 0x768], 0
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x4c]
cmp dword [ebp - 0x768], eax
jne 0x10041458
mov dword [ebp - 0x520], 1
jmp 0x1004145f
and dword [ebp - 0x520], 0
cmp dword [ebp - 0x520], 0xd33b947
jl 0x10041474
and dword [ebp - 0x670], 0
jmp 0x1004147e
mov dword [ebp - 0x670], 1
cmp dword [ebp - 0x670], 0x2e7c650b
je 0x10041496
mov dword [ebp - 0x528], 1
jmp 0x1004149d
and dword [ebp - 0x528], 0
mov eax, dword [ebp - 0x2c]
imul ecx, dword [ebp - 0x528], 0x3090
push 4
pop edx
imul edx, edx, 0
imul ecx, dword [ebp + edx - 0x4c]
cmp dword [ebp + eax*4 - 0x4c], ecx
jg 0x100414f5
mov byte [ebp - 0x95], 0
movzx eax, byte [ebp - 0x95]
test eax, eax
je 0x100414f0
push 0x5643
push 0
push 0x76f0
push 0x2d28
push 0xf5c
push 0x1b7
call fcn.1003ed9f
add esp, 0x18
jmp 0x10041665
mov dword [ebp - 0x538], 0xcbc8
mov dword [ebp - 0x1e8], 0
jmp 0x10041518
cmp dword [ebp - 0x1e8], 4
jge 0x10041534
mov eax, dword [ebp - 0x1e8]
mov dword [ebp + eax*4 - 0xbdc], 3
jmp 0x1004150b
mov dword [ebp - 0x6c], 0
jmp 0x10041544
jmp 0x10041387
jmp 0x1004124e
mov eax, dword [ebp - 0xb0]
mov ecx, dword [ebp - 0x568]
mov dword [eax + 8], ecx
mov dword [ebp - 0x150], 1
mov dword [ebp - 0x90], 0xfffffffa
mov dword [ebp - 0x7c], 0
jmp 0x100416a2
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 2
jge 0x100416b8
mov eax, dword [ebp - 0x7c]
mov dword [ebp + eax*4 - 0xa50], 0xffffffff
jmp 0x1004169b
mov dword [ebp - 0x7c], 0
jmp 0x100416c8
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 3
jge 0x100416de
mov eax, dword [ebp - 0x7c]
mov dword [ebp + eax*4 - 0xb6c], 0xfffffffc
jmp 0x100416c1
mov byte [ebp - 0xd1], 0
movzx eax, byte [ebp - 0xd1]
test eax, eax
je 0x10041704
push 0
push 0x20fd
push 0x121e
call fcn.1003f05b
add esp, 0xc
cmp dword [ebp - 0x150], 0
je 0x1004184b
cmp dword [ebp - 0x150], 0
je 0x1004182a
cmp dword [ebp - 0x90], 0
jne 0x100417e5
cmp dword [ebp - 0x90], 0xffffffff
jge 0x10041740
mov dword [ebp - 0x720], 1
jmp 0x10041747
and dword [ebp - 0x720], 0
mov eax, dword [ebp - 0x720]
sub eax, 6
cmp eax, dword [ebp - 0x90]
jle 0x10041764
mov dword [ebp - 0x550], 1
jmp 0x1004176b
and dword [ebp - 0x550], 0
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x150], eax
mov eax, dword [ebp - 0x150]
cmp eax, dword [ebp - 0x550]
je 0x10041795
xor eax, eax
je 0x10041795
mov dword [ebp - 0x688], 1
jmp 0x1004179c
and dword [ebp - 0x688], 0
mov eax, dword [ebp - 0x688]
sub eax, 0xe2632c5
imul eax, eax, 0xfffffffe
test eax, eax
je 0x100417c3
cmp dword [ebp - 0x90], 0
je 0x100417c3
mov dword [ebp - 0x558], 1
jmp 0x100417ca
and dword [ebp - 0x558], 0
mov eax, dword [ebp - 0x90]
imul eax, dword [ebp - 0x558]
sub eax, 7
jne 0x100417e5
and dword [ebp - 0x770], 0
jmp 0x100417ef
mov dword [ebp - 0x770], 1
mov eax, dword [ebp - 0x90]
cmp dword [ebp - 0x770], eax
je 0x10041809
mov dword [ebp - 0x560], 1
jmp 0x10041810
and dword [ebp - 0x560], 0
mov eax, dword [ebp - 0x90]
cmp dword [ebp - 0x560], eax
je 0x1004182a
mov dword [ebp - 0x690], 1
jmp 0x10041831
and dword [ebp - 0x690], 0
mov eax, dword [ebp - 0x90]
cmp dword [ebp - 0x690], eax
jl 0x1004184b
mov dword [ebp - 0x3bc], 1
jmp 0x10041852
and dword [ebp - 0x3bc], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x3bc]
mov dword [ebp + eax - 0xa50], ecx
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x3bc]
mov dword [ebp + eax - 0xb6c], ecx
push 0xf
push 5
call fcn.1003bf14
pop ecx
pop ecx
add eax, dword [ebp - 0x568]
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 4], eax
mov dword [ebp - 0x130], 0xffffffff
mov dword [ebp - 0x170], 0xd32ffab8
mov dword [ebp - 0x240], 0
jmp 0x100418bc
mov eax, dword [ebp - 0x240]
inc eax
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 2
jge 0x100418d8
mov eax, dword [ebp - 0x240]
mov dword [ebp + eax*4 - 0x960], 0xa2fafd11
jmp 0x100418af
mov dword [ebp - 0x130], 0xfffffffe
jmp 0x100418f1
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0xa
je 0x1004198f
mov dword [ebp - 0x8f8], 0xde0369bd
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x170], eax
mov dword [ebp - 0x170], 0
jmp 0x1004192d
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 0x13
je 0x1004198a
mov dword [ebp - 0x138], 0xfffffff6
mov dword [ebp - 0x138], 0
jmp 0x10041959
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 2
jge 0x10041975
mov eax, dword [ebp - 0x138]
mov dword [ebp + eax*4 - 0x960], 0xa835a23e
jmp 0x1004194c
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x8f8]
mov dword [ebp + eax - 0x960], ecx
jmp 0x10041920
jmp 0x100418e4
and dword [ebp - 0x134], 0
mov dword [ebp - 0x158], 0xffffffff
mov dword [ebp - 0x140], 0xd32ffab8
mov dword [ebp - 0x1f0], 0
jmp 0x100419c3
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 2
jge 0x100419df
mov eax, dword [ebp - 0x1f0]
mov dword [ebp + eax*4 - 0x968], 0xa2fafd11
jmp 0x100419b6
mov dword [ebp - 0x158], 0xfffffffe
jmp 0x100419f8
cmp dword [ebp - 0x158], 0xa
je 0x10041a96
mov dword [ebp - 0x820], 0xde0369bd
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x140], eax
mov dword [ebp - 0x140], 0
jmp 0x10041a34
cmp dword [ebp - 0x140], 0x13
je 0x10041a91
lea eax, [ebp - 0x134]
push eax
lea eax, [ebp - 0x14]
push eax
push 0
call fcn.1003e5af
add esp, 0xc
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 0x1c]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 0x14]
sub eax, dword [ebp - 0x134]
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0x10c], 0xfffffff6
mov dword [ebp - 0x358], 0
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0xab8], eax
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x9b8], eax
cmp dword [ebp - 0x10c], 1
je 0x10041b07
mov dword [ebp - 0x728], 1
jmp 0x10041b0e
and dword [ebp - 0x728], 0
mov eax, dword [ebp - 0x728]
mov dword [ebp - 0x358], eax
mov eax, dword [ebp - 0x358]
sub eax, dword [ebp - 0x10c]
cmp eax, 0x8dc2
jge 0x10041b49
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
mov dword [ebp - 0x87c], eax
mov eax, dword [ebp - 0x87c]
movzx eax, byte [eax]
test eax, eax
je 0x10044a2f
push 0x24c8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret