Function at 0x10034f5c
Capabilities:
Accept command line arguments
Check http status code
Encrypt data using speck
Get disk information
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100654be
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x1974
call fcn.10060d00
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 0x38]
test eax, eax
je 0x10040c75
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0xe50], eax
mov eax, dword [ebp + 0x3c]
mov dword [ebp - 0x1038], eax
lea eax, [ebp + 0x14]
mov dword [ebp - 0xd3c], eax
mov eax, dword [ebp + 0x34]
mov dword [ebp - 0x1040], eax
mov eax, dword [ebp + 0x30]
mov dword [ebp - 0x1104], eax
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 0xe58], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x1030], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0xe48], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x1028], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0xcf4], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0xe40], eax
mov eax, dword [ebp - 0xd3c]
movzx eax, byte [eax]
test eax, eax
je 0x10035223
mov eax, dword [ebp - 0xe48]
mov dword [ebp - 0x1048], eax
mov eax, dword [ebp - 0xe50]
mov dword [ebp - 0x1050], eax
mov eax, dword [ebp - 0xe58]
mov dword [ebp - 0x1058], eax
mov eax, dword [ebp - 0x1028]
mov dword [ebp - 0x1060], eax
mov eax, dword [ebp - 0x1030]
mov dword [ebp - 0x1068], eax
mov eax, dword [ebp - 0x1038]
mov dword [ebp - 0x1070], eax
mov eax, dword [ebp - 0x1040]
mov dword [ebp - 0x1078], eax
mov eax, dword [ebp - 0x1048]
mov dword [ebp - 0x1098], eax
mov eax, dword [ebp - 0x1050]
mov dword [ebp - 0x380], eax
mov eax, dword [ebp - 0x1058]
mov dword [ebp - 0x178], eax
mov eax, dword [ebp - 0x1060]
mov dword [ebp - 0x1090], eax
mov eax, dword [ebp - 0x1068]
mov dword [ebp - 0x4f8], eax
mov eax, dword [ebp - 0x1070]
mov dword [ebp - 0x1080], eax
mov eax, dword [ebp - 0x1078]
mov dword [ebp - 0x1088], eax
push 0
mov ecx, dword [ebp - 0x178]
call fcn.1001ab3d
mov esi, eax
push 0
mov ecx, dword [ebp - 0x380]
call fcn.1001ab3d
mov eax, dword [eax]
cmp eax, dword [esi]
jge 0x100350db
mov dword [ebp - 0xc58], 1
jmp 0x100350e2
and dword [ebp - 0xc58], 0
mov eax, dword [ebp - 0x4f8]
mov esi, dword [eax]
push 3
mov ecx, dword [ebp - 0x380]
call fcn.1001ab3d
sub esi, dword [eax]
push 1
mov ecx, dword [ebp - 0x178]
call fcn.1001ab3d
imul esi, dword [eax]
mov eax, dword [ebp - 0x4f8]
cmp dword [eax], esi
jl 0x1003511f
mov dword [ebp - 0x7b4], 1
jmp 0x10035126
and dword [ebp - 0x7b4], 0
push 0
mov ecx, dword [ebp - 0x380]
call fcn.1001ab3d
mov ecx, dword [ebp - 0x7b4]
sub ecx, dword [eax]
inc ecx
inc ecx
jne 0x10035148
mov eax, dword [ebp - 0x4f8]
cmp dword [eax], 0
push 3
mov ecx, dword [ebp - 0x178]
call fcn.1001ab3d
cmp dword [eax], 0xfffffffe
jbe 0x10035166
mov dword [ebp - 0xc14], 1
jmp 0x1003516d
and dword [ebp - 0xc14], 0
push 0
mov ecx, dword [ebp - 0x380]
call fcn.1001ab3d
mov ecx, dword [ebp - 0xc14]
cmp ecx, dword [eax]
je 0x10035198
push 5
pop eax
test eax, eax
jne 0x10035198
push 2
mov ecx, dword [ebp - 0x178]
call fcn.1001ab3d
push 0
mov ecx, dword [ebp - 0x1080]
call fcn.1001ab3d
cmp dword [eax], 0x10d32de9
jle 0x100351b9
mov dword [ebp - 0xc50], 1
jmp 0x100351c0
and dword [ebp - 0xc50], 0
mov eax, dword [ebp - 0x1088]
mov eax, dword [eax]
imul eax, dword [ebp - 0xc50]
mov ecx, dword [ebp - 0x1090]
mov dword [ecx], eax
push 3
mov ecx, dword [ebp - 0x178]
call fcn.1001ab3d
mov esi, dword [ebp - 0xc58]
add esi, dword [eax]
push 3
mov ecx, dword [ebp - 0x178]
call fcn.1001ab3d
cmp esi, dword [eax]
jne 0x10035209
mov dword [ebp - 0xc60], 1
jmp 0x10035210
and dword [ebp - 0xc60], 0
mov eax, dword [ebp - 0x1098]
mov ecx, dword [ebp - 0xc60]
mov dword [eax], ecx
jmp 0x10040c73
mov eax, dword [ebp - 0x1104]
mov dword [ebp - 0xe18], eax
mov eax, dword [ebp - 0xe40]
mov dword [ebp - 0xde0], eax
mov eax, dword [ebp - 0xcf4]
mov dword [ebp - 0x464], eax
mov eax, dword [ebp - 0x464]
mov eax, dword [eax + 4]
mov dword [ebp - 0xc04], eax
mov dword [ebp - 0x58], 0xb0f73838
mov dword [ebp - 0x11c0], 0x3aa9ac70
mov dword [ebp - 0x11bc], 0x3aa9ac70
mov dword [ebp - 0x11b8], 0x3aa9ac70
mov dword [ebp - 0x11b4], 0x3aa9ac70
mov dword [ebp - 0xc68], 5
mov dword [ebp - 0x1418], 0xc995f762
mov dword [ebp - 0x278], 0
jmp 0x100352b2
mov eax, dword [ebp - 0x278]
inc eax
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x278], 3
jge 0x100352ce
mov eax, dword [ebp - 0x278]
mov dword [ebp + eax*4 - 0x196c], 0xfffffff7
jmp 0x100352a5
cmp dword [ebp - 0x58], 0
je 0x10035317
push 0x866
push 0
push 0x2c98
push 0x351
push 0x5002
push 0x37d
push 0x279c
push 0x7fa5
push 0
push 0x2e41
push 0x477b
push 0x4044
call fcn.1003235c
add esp, 0x30
jmp 0x1003551f
mov dword [ebp - 0xfac], 0xecf7921e
mov dword [ebp - 0x149c], 0x5de1fc65
push 1
lea ecx, [ebp - 0x157c]
call fcn.1001aa9f
and dword [ebp - 4], 0
push 1
lea ecx, [ebp - 0x1314]
call fcn.1001aa9f
mov byte [ebp - 4], 1
mov dword [ebp - 0x1ec], 0
jmp 0x10035366
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 1
jge 0x10035388
push dword [ebp - 0x1ec]
lea ecx, [ebp - 0x157c]
call fcn.1001ab3d
mov dword [eax], 0xfffffffd
jmp 0x10035359
push 1
push 0
push 0x4a30
push 0x6871
push 0x4b68
push 0
lea eax, [ebp - 0x1ec]
push eax
lea eax, [ebp - 0x1314]
push eax
call fcn.10025573
add esp, 0x20
mov dword [ebp - 0x58], 3
jmp 0x100353c3
mov eax, dword [ebp - 0x58]
dec eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0
jl 0x100354de
mov dword [ebp - 0x1010], 0xffffffff
push 3
lea ecx, [ebp - 0x1530]
call fcn.1001aa9f
mov byte [ebp - 4], 2
lea eax, [ebp - 0x1630]
push eax
push 0
push 0
lea eax, [ebp - 0x1530]
push eax
call fcn.10024474
add esp, 0x10
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp + eax*4 - 0x11c0]
mov dword [ebp - 0xc68], eax
cmp dword [ebp - 0xc68], 0xffffffff
jbe 0x10035427
mov dword [ebp - 0xc78], 1
jmp 0x1003542e
and dword [ebp - 0xc78], 0
mov eax, dword [ebp - 0xfac]
cmp dword [ebp - 0xc78], eax
jne 0x10035448
mov dword [ebp - 0xc80], 1
jmp 0x1003544f
and dword [ebp - 0xc80], 0
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp + eax*4 - 0x11c0]
add eax, dword [ebp - 0xc80]
cmp eax, dword [ebp - 0x58]
je 0x10035470
mov dword [ebp - 0xc88], 1
jmp 0x10035477
and dword [ebp - 0xc88], 0
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp + eax*4 - 0x11c0]
cmp eax, dword [ebp - 0xc88]
je 0x10035495
mov dword [ebp - 0xcfc], 1
jmp 0x1003549c
and dword [ebp - 0xcfc], 0
mov dword [ebp - 0x1010], 0xffffffff
push 0
lea ecx, [ebp - 0x1314]
call fcn.1001ab3d
mov dword [ebp - 0x918], eax
mov eax, dword [ebp - 0x918]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x918]
mov dword [ecx], eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1530]
call fcn.1001ab21
jmp 0x100353bc
mov byte [ebp - 0xef], 0
movzx eax, byte [ebp - 0xef]
test eax, eax
je 0x10035501
push 0x48eb
push 0
push 0
call fcn.100297f4
add esp, 0xc
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1314]
call fcn.1001ab21
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x157c]
call fcn.1001ab21
push 0x23b2
push 0
push 0x3f90
lea eax, [ebp - 0x58]
push eax
push 0x68aa
push 1
push 0x436c
call fcn.10034c3e
add esp, 0x1c
mov dword [ebp - 0x12cc], 1
mov dword [ebp - 0x12c8], 1
mov dword [ebp - 0x12c4], 1
mov dword [ebp - 0x12c0], 1
lea ecx, [ebp - 0x49d]
call fcn.1001ab4c
push eax
lea eax, [ebp - 0x12bc]
push eax
lea eax, [ebp - 0x12cc]
push eax
lea ecx, [ebp - 0x179c]
call fcn.1001ab4f
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x270]
call fcn.1001aafb
mov dword [ebp - 4], 3
mov dword [ebp - 0x4a8], 0x7e80d68f
mov dword [ebp - 0x408], 0
jmp 0x100355ca
mov eax, dword [ebp - 0x408]
inc eax
mov dword [ebp - 0x408], eax
cmp dword [ebp - 0x408], 2
jge 0x100355e6
mov eax, dword [ebp - 0x408]
mov dword [ebp + eax*4 - 0x490], 0xfffffff8
jmp 0x100355bd
push 2
lea ecx, [ebp - 0x270]
call fcn.1001ab3d
and dword [eax], 0
jmp 0x1003561c
push 2
lea ecx, [ebp - 0x270]
call fcn.1001ab3d
mov dword [ebp - 0xc0c], eax
mov eax, dword [ebp - 0xc0c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xc0c]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0x270]
call fcn.1001ab3d
cmp dword [eax], 1
jg 0x10035968
mov dword [ebp - 0x520], 0
mov dword [ebp - 0x5a0], 0x5833
mov dword [ebp - 0xd0c], 0xffffffff
mov dword [ebp - 0x1018], 0x30477ae2
mov dword [ebp - 0x598], 0x34fb
mov dword [ebp - 0xfb8], 0x1000a6c0
cmp dword [ebp - 0x598], 0x3647
jle 0x10035729
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetCommState]
and dword [ebp - 0x25c], 0
jmp 0x1003569e
mov eax, dword [ebp - 0x25c]
inc eax
mov dword [ebp - 0x25c], eax
cmp dword [ebp - 0x25c], 0x35e9
jge 0x10035729
and dword [ebp - 0x280], 0
jmp 0x100356c0
mov eax, dword [ebp - 0x280]
inc eax
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 0x6200
jge 0x10035724
mov eax, dword [ebp - 0x25c]
imul eax, dword [ebp - 0x280]
cdq
mov dword [ebp - 0xe64], eax
mov dword [ebp - 0xe60], edx
push dword [ebp - 0xe60]
push dword [ebp - 0xe64]
lea ecx, [ebp - 0x18f4]
call fcn.1000d25a
pop ecx
pop ecx
mov dword [ebp - 0xd04], eax
mov ecx, dword [ebp - 0xd04]
call fcn.1001a84e
push eax
call fcn.1004f3d6
pop ecx
lea ecx, [ebp - 0x18f4]
call fcn.1001a844
jmp 0x100356b3
jmp 0x10035691
mov byte [ebp - 0xfd], 0
push 0x1bdf
lea eax, [ebp - 0xfd]
push eax
push 0x6586
push 0x4e5c
push 0
push 0
call fcn.10025260
add esp, 0x18
mov byte [ebp - 4], 4
cmp dword [ebp - 0x598], 0x32f1
jge 0x1003576e
push dword [ebp - 0xfb8]
call fcn.1004f3d6
pop ecx
jmp 0x1003578a
mov dword [ebp - 4], 3
jmp 0x1003579a
push 2
lea ecx, [ebp - 0x270]
call fcn.1001ab3d
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x490]
mov dword [ebp - 0xc30], eax
push 2
lea ecx, [ebp - 0x270]
call fcn.1001ab3d
mov eax, dword [eax]
mov ecx, dword [ebp - 0xc30]
mov dword [ebp + eax*4 - 0x490], ecx
cmp dword [ebp - 0xc30], 0
jne 0x100358f8
mov dword [ebp - 0x520], 0xffff
push 2
lea ecx, [ebp - 0x270]
call fcn.1001ab3d
mov eax, dword [eax]
mov ecx, dword [ebp - 0x520]
cmp ecx, dword [ebp + eax*4 - 0x490]
jne 0x10035829
push 2
lea ecx, [ebp - 0x270]
call fcn.1001ab3d
mov eax, dword [eax]
cmp dword [ebp + eax*4 - 0x490], 0
jne 0x10035829
and dword [ebp - 0x5a8], 0
jmp 0x10035833
mov dword [ebp - 0x5a8], 1
mov eax, dword [ebp - 0x5a0]
inc eax
mov dword [ebp - 0x5a0], eax
push 2
lea ecx, [ebp - 0x270]
call fcn.1001ab3d
mov eax, dword [eax]
mov esi, dword [ebp + eax*4 - 0x490]
push 3
lea ecx, [ebp - 0x270]
call fcn.1001ab3d
cmp esi, dword [eax]
jne 0x10035873
mov dword [ebp - 0x920], 1
jmp 0x1003587a
and dword [ebp - 0x920], 0
mov eax, dword [ebp - 0x920]
mov dword [ebp - 0x4a8], eax
push 2
lea ecx, [ebp - 0x270]
call fcn.1001ab3d
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4a8]
cmp ecx, dword [ebp + eax*4 - 0x490]
jge 0x100358b0
mov dword [ebp - 0xae0], 1
jmp 0x100358b7
and dword [ebp - 0xae0], 0
push 2
lea ecx, [ebp - 0x270]
call fcn.1001ab3d
mov eax, dword [eax]
mov ecx, dword [ebp - 0x5a8]
imul ecx, dword [ebp - 0xae0]
imul ecx, dword [ebp + eax*4 - 0x490]
test ecx, ecx
je 0x100358e6
cmp dword [ebp - 0x4a8], 0
cmp dword [ebp - 0x520], 0
jne 0x100358f8
and dword [ebp - 0x5b0], 0
jmp 0x10035902
mov dword [ebp - 0x5b0], 1
cmp dword [ebp - 0x5b0], 0xb37d0226
jae 0x1003591a
mov dword [ebp - 0x928], 1
jmp 0x10035921
and dword [ebp - 0x928], 0
mov eax, dword [ebp - 0x928]
add eax, 0xffff
mov dword [ebp - 0xd0c], eax
push 2
lea ecx, [ebp - 0x270]
call fcn.1001ab3d
mov eax, dword [eax]
mov esi, dword [ebp + eax*4 - 0x490]
push 1
lea ecx, [ebp - 0x270]
call fcn.1001ab3d
sub esi, dword [eax]
imul eax, esi, 0xf953
mov dword [ebp - 0x1018], eax
jmp 0x100355f8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x270]
call fcn.1001ab21
mov dword [ebp - 0x1c], 0xe00f6802
mov dword [ebp - 0x104], 1
mov dword [ebp - 0x5c8], 2
push 2
lea ecx, [ebp - 0x122c]
call fcn.1001aa9f
mov dword [ebp - 4], 6
mov dword [ebp - 0x390], 0
push 0x6613
push 1
lea eax, [ebp - 0x122c]
push eax
lea eax, [ebp - 0x14a4]
push eax
push 0x7758
push 0x3828
push 0
call fcn.1002b0b3
add esp, 0x1c
mov dword [ebp - 0x5f0], 0x7f60
mov dword [ebp - 0xd14], 0x1000a724
cmp dword [ebp - 0x5f0], 0x832d
jle 0x10035ad9
and dword [ebp - 0x290], 0
jmp 0x10035a13
mov eax, dword [ebp - 0x290]
inc eax
mov dword [ebp - 0x290], eax
cmp dword [ebp - 0x290], 0x4536
jge 0x10035ad9
and dword [ebp - 0x388], 0
jmp 0x10035a39
mov eax, dword [ebp - 0x388]
inc eax
mov dword [ebp - 0x388], eax
cmp dword [ebp - 0x388], 0x3978
jge 0x10035ad4
and dword [ebp - 0x288], 0
jmp 0x10035a5f
mov eax, dword [ebp - 0x288]
inc eax
mov dword [ebp - 0x288], eax
cmp dword [ebp - 0x288], 0x4674
jge 0x10035acf
and dword [ebp - 0x488], 0
jmp 0x10035a81
mov eax, dword [ebp - 0x488]
inc eax
mov dword [ebp - 0x488], eax
cmp dword [ebp - 0x488], 0x28e9
jge 0x10035acd
mov ecx, dword [ebp - 0x388]
imul ecx, dword [ebp - 0x288]
add ecx, dword [ebp - 0x488]
mov eax, dword [ebp - 0x290]
shl eax, cl
cdq
mov dword [ebp - 0xe70], eax
mov dword [ebp - 0xe6c], edx
push dword [ebp - 0xe6c]
push dword [ebp - 0xe70]
mov ecx, 0x1060def8
call fcn.1001a86e
jmp 0x10035a74
jmp 0x10035a52
jmp 0x10035a2c
jmp 0x10035a06
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1664], eax
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x1c]
jne 0x10035af6
mov dword [ebp - 0x5b8], 1
jmp 0x10035afd
and dword [ebp - 0x5b8], 0
mov eax, dword [ebp - 0x5b8]
sub eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x1c]
cmp eax, 0xffff
jbe 0x10035b1c
mov dword [ebp - 0xbc0], 1
jmp 0x10035b23
and dword [ebp - 0xbc0], 0
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0xbc0]
cmp eax, 0x7c694a61
jl 0x10035b40
mov dword [ebp - 0x5c0], 1
jmp 0x10035b47
and dword [ebp - 0x5c0], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x5c0], eax
jg 0x10035b5e
mov dword [ebp - 0x930], 1
jmp 0x10035b65
and dword [ebp - 0x930], 0
mov eax, dword [ebp - 0x930]
mov dword [ebp - 0x104], eax
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x5c8], eax
imul eax, dword [ebp - 0x5c8], 0
cmp eax, dword [ebp - 0x1c]
jle 0x10035b95
mov dword [ebp - 0xae8], 1
jmp 0x10035b9c
and dword [ebp - 0xae8], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0xae8], eax
jne 0x10035bb3
mov dword [ebp - 0x5d0], 1
jmp 0x10035bba
and dword [ebp - 0x5d0], 0
mov eax, dword [ebp - 0x5d0]
sub eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x1c]
jle 0x10035bd4
mov dword [ebp - 0x938], 1
jmp 0x10035bdb
and dword [ebp - 0x938], 0
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x938]
cmp eax, dword [ebp - 0x1c]
jle 0x10035bf5
mov dword [ebp - 0x5d8], 1
jmp 0x10035bfc
and dword [ebp - 0x5d8], 0
mov eax, dword [ebp - 0x5d8]
mov dword [ebp - 0x1c], eax
mov esi, dword [ebp - 0x1c]
push 1
lea ecx, [ebp - 0x122c]
call fcn.1001ab3d
cmp esi, dword [eax]
je 0x10035c25
mov dword [ebp - 0x4b0], 1
jmp 0x10035c2c
and dword [ebp - 0x4b0], 0
push 1
lea ecx, [ebp - 0x122c]
call fcn.1001ab3d
mov ecx, dword [ebp - 0x4b0]
mov dword [eax], ecx
cmp dword [ebp - 0x4b0], 0xffffc9c1
jge 0x10035c59
mov dword [ebp - 0xc34], 1
jmp 0x10035c60
and dword [ebp - 0xc34], 0
cmp dword [ebp - 0xc34], 0x34f1d4b0
jge 0x10035c78
mov dword [ebp - 0x5e0], 1
jmp 0x10035c7f
and dword [ebp - 0x5e0], 0
mov eax, dword [ebp - 0x390]
cmp dword [ebp - 0x5e0], eax
jl 0x10035c99
mov dword [ebp - 0x940], 1
jmp 0x10035ca0
and dword [ebp - 0x940], 0
mov eax, dword [ebp - 0x390]
cmp dword [ebp - 0x940], eax
jg 0x10035cba
mov dword [ebp - 0x5e8], 1
jmp 0x10035cc1
and dword [ebp - 0x5e8], 0
mov eax, dword [ebp - 0x390]
cmp dword [ebp - 0x5e8], eax
jne 0x10035ce4
cmp dword [ebp - 0x104], 0
je 0x10035ce4
mov dword [ebp - 0xaf0], 1
jmp 0x10035ceb
and dword [ebp - 0xaf0], 0
mov eax, dword [ebp - 0xaf0]
mov dword [ebp - 0x390], eax
mov byte [ebp - 4], 7
cmp dword [ebp - 0x5f0], 0x7d44
jge 0x10035d17
mov edx, dword [ebp - 0xd14]
mov ecx, 0x1060def8
call fcn.1001cd79
jmp 0x10035d33
mov dword [ebp - 4], 6
jmp 0x10035d43
mov dword [ebp - 0x948], 0x6481
mov dword [ebp - 0xd1c], 0x1000a758
cmp dword [ebp - 0x948], 0x652f
jle 0x10035e46
push 0
call dword [sym.imp.KERNEL32.dll_InitializeSListHead]
and dword [ebp - 0x2a0], 0
jmp 0x10035d85
mov eax, dword [ebp - 0x2a0]
inc eax
mov dword [ebp - 0x2a0], eax
cmp dword [ebp - 0x2a0], 0x71d9
jge 0x10035e46
and dword [ebp - 0x298], 0
jmp 0x10035dab
mov eax, dword [ebp - 0x298]
inc eax
mov dword [ebp - 0x298], eax
cmp dword [ebp - 0x298], 0x7224
jge 0x10035e41
and dword [ebp - 0x410], 0
jmp 0x10035dd1
mov eax, dword [ebp - 0x410]
inc eax
mov dword [ebp - 0x410], eax
cmp dword [ebp - 0x410], 0x7f3b
jge 0x10035e3c
mov ecx, dword [ebp - 0x298]
sub ecx, dword [ebp - 0x410]
mov eax, dword [ebp - 0x2a0]
shl eax, cl
cdq
mov dword [ebp - 0xe7c], eax
mov dword [ebp - 0xe78], edx
push dword [ebp - 0xe78]
push dword [ebp - 0xe7c]
lea ecx, [ebp - 0x1864]
call fcn.1000d25a
pop ecx
pop ecx
mov dword [ebp - 0x1020], eax
mov ecx, dword [ebp - 0x1020]
call fcn.1001a84e
push eax
call fcn.1004f3d6
pop ecx
lea ecx, [ebp - 0x1864]
call fcn.1001a844
jmp 0x10035dc4
jmp 0x10035d9e
jmp 0x10035d78
mov dword [ebp - 0x104], 1
jmp 0x10035e5f
mov eax, dword [ebp - 0x104]
dec eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0
jl 0x10035e9d
mov dword [ebp - 0x1c], 1
jmp 0x10035e78
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jl 0x10035e9b
push 0x3255
push 1
push 0x147f
push 0
push 0x1a53
call fcn.10028d1c
add esp, 0x14
jmp 0x10035e71
jmp 0x10035e52
mov byte [ebp - 4], 9
cmp dword [ebp - 0x948], 0x6274
jge 0x10035eb9
push dword [ebp - 0xd1c]
call fcn.1004f3d6
pop ecx
jmp 0x10035ed5
mov dword [ebp - 4], 6
jmp 0x10035ee5
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x122c]
call fcn.1001ab21
mov dword [ebp - 0x34], 0xb0f73838
mov dword [ebp - 0x11d0], 0x3aa9ac70
mov dword [ebp - 0x11cc], 0x3aa9ac70
mov dword [ebp - 0x11c8], 0x3aa9ac70
mov dword [ebp - 0x11c4], 0x3aa9ac70
push 1
lea ecx, [ebp - 0x10a8]
call fcn.1001aa9f
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x600], 1
mov dword [ebp - 0x180], 0xcdead9ba
mov dword [ebp - 0x10f0], 0x329ef4a0
mov dword [ebp - 0xfc4], 0x91023f12
push 0x679c
push 0
push 0x6d02
lea eax, [ebp - 0x14ac]
push eax
lea eax, [ebp - 0x10a8]
push eax
push 1
push 0x5f30
push 0x4005
call fcn.1002a679
add esp, 0x20
push 0
lea ecx, [ebp - 0x10a8]
call fcn.1001ab3d
mov esi, dword [ebp - 0x600]
push 0
lea ecx, [ebp - 0x10a8]
call fcn.1001ab3d
mov eax, dword [eax]
neg eax
cmp eax, esi
jg 0x10035fc1
mov dword [ebp - 0x5f8], 1
jmp 0x10035fc8
and dword [ebp - 0x5f8], 0
cmp dword [ebp - 0x5f8], 0xb99
jle 0x10035fe0
mov dword [ebp - 0xbc8], 1
jmp 0x10035fe7
and dword [ebp - 0xbc8], 0
mov eax, dword [ebp - 0xbc8]
mov dword [ebp - 0x180], eax
mov dword [ebp - 0x180], 0
jmp 0x1003600c
mov eax, dword [ebp - 0x180]
dec eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 0xffffffe7
jl 0x10036061
mov dword [ebp - 0xd24], 0xfffffffe
lea eax, [ebp - 0xfc4]
push eax
push 0x3e0c
push 1
lea eax, [ebp - 0xd24]
push eax
push 0x63c9
lea eax, [ebp - 0x180]
push eax
lea eax, [ebp - 0x10f0]
push eax
lea eax, [ebp - 0x10a8]
push eax
push 0
lea eax, [ebp - 0x600]
push eax
call fcn.1002a0bc
add esp, 0x28
jmp 0x10035fff
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10a8]
call fcn.1001ab21
mov dword [ebp - 0xa00], 5
mov dword [ebp - 0xaf8], 0x7f45
mov dword [ebp - 0xce8], 0x1000a790
cmp dword [ebp - 0xaf8], 0x82f3
jle 0x100361a8
and dword [ebp - 0x398], 0
jmp 0x100360b4
mov eax, dword [ebp - 0x398]
inc eax
mov dword [ebp - 0x398], eax
cmp dword [ebp - 0x398], 0x42cc
jge 0x100361a8
and dword [ebp - 0x2a8], 0
jmp 0x100360da
mov eax, dword [ebp - 0x2a8]
inc eax
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2a8], 0x23a
jge 0x100361a3
and dword [ebp - 0x450], 0
jmp 0x10036100
mov eax, dword [ebp - 0x450]
inc eax
mov dword [ebp - 0x450], eax
cmp dword [ebp - 0x450], 0x5454
jge 0x1003619e
and dword [ebp - 0x2b0], 0
jmp 0x10036126
mov eax, dword [ebp - 0x2b0]
inc eax
mov dword [ebp - 0x2b0], eax
cmp dword [ebp - 0x2b0], 0xc8
jge 0x10036199
mov eax, dword [ebp - 0x398]
cdq
idiv dword [ebp - 0x2a8]
imul edx, dword [ebp - 0x450]
or edx, dword [ebp - 0x2b0]
mov eax, edx
cdq
mov dword [ebp - 0xe88], eax
mov dword [ebp - 0xe84], edx
push dword [ebp - 0xe84]
push dword [ebp - 0xe88]
lea ecx, [ebp - 0x17ec]
call fcn.1000d25a
pop ecx
pop ecx
mov dword [ebp - 0xd2c], eax
mov ecx, dword [ebp - 0xd2c]
call fcn.1001a84e
push eax
call fcn.1004f3d6
pop ecx
lea ecx, [ebp - 0x17ec]
call fcn.1001a844
jmp 0x10036119
jmp 0x100360f3
jmp 0x100360cd
jmp 0x100360a7
mov dword [ebp - 0xb8], 0x4e064826
mov dword [ebp - 0x10c], 0xfffffffa
mov dword [ebp - 0xb8], 0
jmp 0x100361d5
mov eax, dword [ebp - 0xb8]
dec eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0xffffffe9
jg 0x100362bd
mov dword [ebp - 0x4b8], 1
mov dword [ebp - 0x950], 0
mov dword [ebp - 0x13c0], 0x55145ccb
mov dword [ebp - 0x13bc], 0x55145ccb
mov dword [ebp - 0x13b8], 0x55145ccb
mov dword [ebp - 0x13b4], 0x55145ccb
cmp dword [ebp - 0x4b8], 0
jne 0x10036230
cmp dword [ebp - 0xb8], 0
je 0x1003628c
mov eax, dword [ebp - 0x4b8]
mov dword [ebp - 0x950], eax
cmp dword [ebp - 0x950], 9
jl 0x10036268
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0x1640], eax
xor eax, eax
inc eax
je 0x1003625f
mov eax, 0xdb8e
test eax, eax
jne 0x10036268
and dword [ebp - 0x608], 0
jmp 0x10036272
mov dword [ebp - 0x608], 1
mov eax, dword [ebp - 0xb8]
cmp dword [ebp - 0x608], eax
jge 0x1003628c
mov dword [ebp - 0x500], 1
jmp 0x10036293
and dword [ebp - 0x500], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x500]
mov dword [ebp + eax - 0x13c0], ecx
mov eax, dword [ebp - 0x500]
sub eax, dword [ebp - 0x4b8]
mov dword [ebp - 0x10c], eax
jmp 0x100361c8
mov dword [ebp - 0x10c], 0
jmp 0x100362d6
mov eax, dword [ebp - 0x10c]
dec eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0xffffffe9
jl 0x10036350
mov dword [ebp - 0x10b4], 1
mov dword [ebp - 0xd34], 0x9e6a0122
mov dword [ebp - 0xfcc], 0xffffffff
push 0x6b7d
push 0x421b
lea eax, [ebp - 0xfcc]
push eax
lea eax, [ebp - 0x10c]
push eax
lea eax, [ebp - 0xd34]
push eax
push 0
push 0x4a9a
lea eax, [ebp - 0x10b4]
push eax
push 0
lea eax, [ebp - 0xb8]
push eax
push 0x6de6
call fcn.10023bab
add esp, 0x2c
cmp dword [ebp - 0x10c], 0
je 0x1003634b
jmp 0x10036350
jmp 0x100362c9
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0xaf8], 0x7cec
jge 0x1003636f
push dword [ebp - 0xce8]
call fcn.1004f3d6
pop ecx
jmp 0x1003638b
or dword [ebp - 4], 0xffffffff
jmp 0x10036395
mov dword [ebp - 0x14b4], 0xc995f762
push 3
lea ecx, [ebp - 0x1238]
call fcn.1001aa9f
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x1a8], 0xfffffff7
push 0x5dfd
lea eax, [ebp - 0x1668]
push eax
push 0
push 0x2e28
lea eax, [ebp - 0x1238]
push eax
call fcn.10040cb8
add esp, 0x14
mov dword [ebp - 0x1a8], 0
jmp 0x100363f8
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 2
jg 0x100364c4
mov dword [ebp - 0x3a0], 0
jmp 0x1003641e
mov eax, dword [ebp - 0x3a0]
inc eax
mov dword [ebp - 0x3a0], eax
cmp dword [ebp - 0x3a0], 3
jge 0x1003643a
mov eax, dword [ebp - 0x3a0]
mov dword [ebp + eax*4 - 0x174c], 1
jmp 0x10036411
push 0x7711
push 0
push 0x3b6b
push 0x6645
push 1
push 0x3343
push 0x6d91
push 0
push 0xeef
call fcn.10025cd5
add esp, 0x24
push dword [ebp - 0x1a8]
lea ecx, [ebp - 0x1238]
call fcn.1001ab3d
cmp dword [eax], 0
jne 0x100364a0
push dword [ebp - 0x1a8]
lea ecx, [ebp - 0x1238]
call fcn.1001ab3d
imul eax, dword [eax], 0x810d
test eax, eax
jne 0x100364a0
and dword [ebp - 0x610], 0
jmp 0x100364aa
mov dword [ebp - 0x610], 1
mov eax, dword [ebp - 0x610]
neg eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x174c], eax
jmp 0x100363eb
mov byte [ebp - 0xff], 0
movzx eax, byte [ebp - 0xff]
test eax, eax
je 0x100364e0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetCommTimeouts]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1238]
call fcn.1001ab21
mov dword [ebp - 0x14bc], 1
mov dword [ebp - 0x1650], 0xa4f833fc
mov dword [ebp - 0x14c4], 0xfffffff9
mov dword [ebp - 0x958], 0x64caf14c
mov dword [ebp - 0x2b8], 0
jmp 0x10036530
mov eax, dword [ebp - 0x2b8]
inc eax
mov dword [ebp - 0x2b8], eax
cmp dword [ebp - 0x2b8], 1
jge 0x1003654c
mov eax, dword [ebp - 0x2b8]
mov dword [ebp + eax*4 - 0xfd4], 1
jmp 0x10036523
push 0
lea eax, [ebp - 0x958]
push eax
push 0
push 0x7286
push 0x1557
push 0x6e5e
call fcn.1002f464
add esp, 0x18
mov eax, dword [ebp - 0x958]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xfd4], eax
mov dword [ebp - 0x418], 0
jmp 0x1003659a
mov eax, dword [ebp - 0x418]
inc eax
mov dword [ebp - 0x418], eax
cmp dword [ebp - 0x418], 3
jge 0x100365b6
mov eax, dword [ebp - 0x418]
mov dword [ebp + eax*4 - 0x1834], 0xfffffff7
jmp 0x1003658d
cmp dword [ebp - 0x34], 0
je 0x10036f32
mov dword [ebp - 0x188], 0x4e1a3622
mov dword [ebp - 0x20c], 0xbb4ebb0c
mov dword [ebp - 0x14], 0xbce008fb
mov dword [ebp - 0x3a8], 0xfffffff7
push 3
lea ecx, [ebp - 0x538]
call fcn.1001aa9f
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x528], 0xb1a7
push 0x62cc
lea eax, [ebp - 0x538]
push eax
push 0x27eb
push 0x403c
push 0x2ad3
push 0x5546
push 0x50e3
push 0
lea eax, [ebp - 0x1670]
push eax
push 0
call fcn.1003305a
add esp, 0x28
push 0x224b
push 1
lea eax, [ebp - 0x20c]
push eax
push 0
lea eax, [ebp - 0x188]
push eax
call fcn.10026665
add esp, 0x14
mov eax, dword [ebp - 0x20c]
mov dword [ebp - 0x14cc], eax
cmp dword [ebp - 0x14], 0
jne 0x10036687
push 2
lea ecx, [ebp - 0x538]
call fcn.1001ab3d
cmp dword [eax], 0
jne 0x10036687
and dword [ebp - 0x618], 0
jmp 0x10036691
mov dword [ebp - 0x618], 1
mov eax, dword [ebp - 0x528]
dec eax
mov dword [ebp - 0x528], eax
mov eax, dword [ebp - 0x618]
add eax, 0x164
cmp dword [ebp - 0x528], eax
jge 0x100366bd
mov dword [ebp - 0xc5c], 1
jmp 0x100366c4
and dword [ebp - 0xc5c], 0
imul eax, dword [ebp - 0x188], 0xfffd
mov dword [ebp - 0x188], eax
mov eax, dword [ebp - 0x188]
cmp eax, dword [ebp - 0xc5c]
jne 0x100366ee
mov dword [ebp - 0x620], 1
jmp 0x100366f5
and dword [ebp - 0x620], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x620], eax
je 0x1003670c
mov dword [ebp - 0x960], 1
jmp 0x10036713
and dword [ebp - 0x960], 0
mov eax, dword [ebp - 0x20c]
sub eax, dword [ebp - 0x960]
je 0x10036734
push 0xfffffffffffffffe
pop eax
test eax, eax
je 0x10036734
mov dword [ebp - 0x628], 1
jmp 0x1003673b
and dword [ebp - 0x628], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x628], eax
jle 0x10036752
mov dword [ebp - 0xb00], 1
jmp 0x10036759
and dword [ebp - 0xb00], 0
mov eax, dword [ebp - 0x20c]
add eax, dword [ebp - 0xb00]
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0xffffffff
jae 0x10036798
push 0x7b3f
push 0
push 0
push 0x348c
push 0x3db9
push 0xd67
push 0x287f
call fcn.10025fb7
add esp, 0x1c
jmp 0x10036c6a
mov dword [ebp - 0x1c4], 0x2b0402ad
mov dword [ebp - 0x658], 0xf9703980
mov dword [ebp - 0x14], 2
jmp 0x100367bc
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jl 0x10036c42
mov dword [ebp - 0x640], 4
push 2
lea ecx, [ebp - 0x1100]
call fcn.1001aa9f
mov byte [ebp - 4], 0x10
mov dword [ebp - 0x2c0], 0
jmp 0x100367fa
mov eax, dword [ebp - 0x2c0]
inc eax
mov dword [ebp - 0x2c0], eax
cmp dword [ebp - 0x2c0], 2
jge 0x1003681c
push dword [ebp - 0x2c0]
lea ecx, [ebp - 0x1100]
call fcn.1001ab3d
mov dword [eax], 0x14a59e47
jmp 0x100367ed
cmp dword [ebp - 0x1c4], 0
jne 0x10036837
cmp dword [ebp - 0x3a8], 0
jne 0x10036837
and dword [ebp - 0x630], 0
jmp 0x10036841
mov dword [ebp - 0x630], 1
push dword [ebp - 0x14]
lea ecx, [ebp - 0x538]
call fcn.1001ab3d
mov ecx, dword [ebp - 0x630]
cmp ecx, dword [eax]
je 0x10036865
mov dword [ebp - 0x968], 1
jmp 0x1003686c
and dword [ebp - 0x968], 0
push dword [ebp - 0x14]
lea ecx, [ebp - 0x538]
call fcn.1001ab3d
mov ecx, dword [ebp - 0x968]
imul ecx, dword [eax]
test ecx, ecx
jne 0x100368a3
push dword [ebp - 0x14]
lea ecx, [ebp - 0x538]
call fcn.1001ab3d
cmp dword [eax], 0
jne 0x100368a3
and dword [ebp - 0x638], 0
jmp 0x100368ad
mov dword [ebp - 0x638], 1
mov eax, dword [ebp - 0x1c4]
cmp dword [ebp - 0x638], eax
jne 0x100368c7
mov dword [ebp - 0xbd0], 1
jmp 0x100368ce
and dword [ebp - 0xbd0], 0
mov eax, dword [ebp - 0xbd0]
mov dword [ebp - 0x640], eax
mov eax, dword [ebp - 0x640]
cmp eax, dword [ebp - 0x14]
je 0x100368f7
push 0
lea ecx, [ebp - 0x1100]
call fcn.1001ab3d
cmp dword [eax], 0
jne 0x10036909
cmp dword [ebp - 0x3a8], 0
jne 0x10036909
and dword [ebp - 0x970], 0
jmp 0x10036913
mov dword [ebp - 0x970], 1
push dword [ebp - 0x14]
lea ecx, [ebp - 0x538]
call fcn.1001ab3d
mov esi, eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x538]
call fcn.1001ab3d
mov eax, dword [eax]
sub eax, dword [esi]
cmp eax, dword [ebp - 0x970]
jl 0x10036949
mov dword [ebp - 0x648], 1
jmp 0x10036950
and dword [ebp - 0x648], 0
cmp dword [ebp - 0x648], 0x212
jle 0x10036968
mov dword [ebp - 0xb08], 1
jmp 0x1003696f
and dword [ebp - 0xb08], 0
mov eax, dword [ebp - 0xb08]
mov dword [ebp - 0x1c4], eax
mov eax, dword [ebp - 0x1c4]
neg eax
cmp eax, 0xffff
je 0x10036996
mov dword [ebp - 0x650], 1
jmp 0x1003699d
and dword [ebp - 0x650], 0
mov dword [ebp - 0x188], 0x3cb8
mov eax, dword [ebp - 0x188]
imul eax, dword [ebp - 0x650]
cmp eax, 0x464f
jg 0x100369c7
mov dword [ebp - 0x978], 1
jmp 0x100369ce
and dword [ebp - 0x978], 0
mov eax, dword [ebp - 0x658]
cmp dword [ebp - 0x978], eax
jl 0x100369e5
cmp dword [ebp - 0x3a8], 0
jne 0x100369ea
or eax, 0xffffffff
je 0x10036a13
push dword [ebp - 0x14]
lea ecx, [ebp - 0x538]
call fcn.1001ab3d
cmp dword [eax], 0
je 0x10036a11
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x1100]
call fcn.1001ab21
jmp 0x10036c42
jmp 0x10036a30
cmp dword [ebp - 0x3a8], 0
je 0x10036a30
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x1100]
call fcn.1001ab21
jmp 0x10036c42
mov dword [ebp - 0x980], 0x3e5e
mov dword [ebp - 0x1154], 0x1000a828
cmp dword [ebp - 0x980], 0x4089
jle 0x10036b66
and dword [ebp - 0x2c8], 0
jmp 0x10036a6a
mov eax, dword [ebp - 0x2c8]
inc eax
mov dword [ebp - 0x2c8], eax
cmp dword [ebp - 0x2c8], 0x30e5
jge 0x10036b29
and dword [ebp - 0x470], 0
jmp 0x10036a90
mov eax, dword [ebp - 0x470]
inc eax
mov dword [ebp - 0x470], eax
cmp dword [ebp - 0x470], 0x7206
jge 0x10036b24
and dword [ebp - 0x2d0], 0
jmp 0x10036ab6
mov eax, dword [ebp - 0x2d0]
inc eax
mov dword [ebp - 0x2d0], eax
cmp dword [ebp - 0x2d0], 0xa52
jge 0x10036b1f
mov eax, dword [ebp - 0x2c8]
add eax, dword [ebp - 0x470]
or eax, dword [ebp - 0x2d0]
cdq
mov dword [ebp - 0xe94], eax
mov dword [ebp - 0xe90], edx
push dword [ebp - 0xe90]
push dword [ebp - 0xe94]
lea ecx, [ebp - 0x1894]
call fcn.1000d25a
pop ecx
pop ecx
mov dword [ebp - 0xd44], eax
mov ecx, dword [ebp - 0xd44]
call fcn.1001a84e
push eax
call fcn.1004f3d6
pop ecx
lea ecx, [ebp - 0x1894]
call fcn.1001a844
jmp 0x10036aa9
jmp 0x10036a83
jmp 0x10036a5d
push 0xeab
push 0xeb4
push 0x4b3
push 0x6a8
push 0xc5f
push 0x228e
push 0x1701
push 0x7cf
push 0x1954
push 0x1ee6
push 0x1013
call dword [sym.imp.GDI32.dll_StretchBlt]
cmp dword [ebp - 0x20c], 0
je 0x10036ba8
cmp dword [ebp - 0x658], 0
je 0x10036ba8
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x1660], eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x538]
call fcn.1001ab3d
imul eax, dword [eax], 0x79b6
sub eax, 0x4995
je 0x10036ba8
mov dword [ebp - 0xc3c], 1
jmp 0x10036baf
and dword [ebp - 0xc3c], 0
push dword [ebp - 0x14]
lea ecx, [ebp - 0x538]
call fcn.1001ab3d
mov eax, dword [eax]
cmp eax, dword [ebp - 0xc3c]
jg 0x10036bd3
mov dword [ebp - 0x660], 1
jmp 0x10036bda
and dword [ebp - 0x660], 0
mov eax, dword [ebp - 0x660]
mov dword [ebp - 0x1c4], eax
mov byte [ebp - 4], 0x11
cmp dword [ebp - 0x980], 0x3c5f
jge 0x10036c02
push dword [ebp - 0x1154]
call fcn.1004f3d6
pop ecx
jmp 0x10036c1e
mov dword [ebp - 4], 0x10
jmp 0x10036c2e
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x1100]
call fcn.1001ab21
jmp 0x100367b5
mov byte [ebp - 0xd5], 0
movzx eax, byte [ebp - 0xd5]
test eax, eax
je 0x10036c6a
push 0x39c5
push 0
push 1
push 0x4bb3
call fcn.10024474
add esp, 0x10
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x538]
call fcn.1001ab21
mov byte [ebp - 0xdd], 0
mov dword [ebp - 0x234], 0x3d78
mov dword [ebp - 0x678], 0
mov dword [ebp - 0xbd8], 0x4292978d
mov dword [ebp - 0xd54], 0xffffffff
mov dword [ebp - 0x8c], 0
jmp 0x10036cc1
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 2
jge 0x10036cdd
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0x1294], 0x93876a47
jmp 0x10036cb4
mov dword [ebp - 0x8c], 0
jmp 0x10036cf6
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 3
jge 0x10036d12
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0x1794], 0xb333ee6
jmp 0x10036ce9
mov byte [ebp - 0x16e], 0
push 0x5688
push 0
push 0
push 0x85f
lea eax, [ebp - 0x16e]
push eax
call fcn.10029d16
add esp, 0x14
mov eax, dword [ebp - 0x234]
mov dword [ebp - 0x14d4], eax
cmp dword [ebp - 0x234], 0
je 0x10036d60
cmp dword [ebp - 0x234], 0
je 0x10036d60
mov dword [ebp - 0x668], 1
jmp 0x10036d67
and dword [ebp - 0x668], 0
cmp dword [ebp - 0x668], 0x3ec3d4e7
jl 0x10036d7f
mov dword [ebp - 0xb10], 1
jmp 0x10036d86
and dword [ebp - 0xb10], 0
mov eax, dword [ebp - 0x678]
cmp dword [ebp - 0xb10], eax
jle 0x10036da0
mov dword [ebp - 0x670], 1
jmp 0x10036da7
and dword [ebp - 0x670], 0
mov eax, dword [ebp - 0x234]
cmp dword [ebp - 0x670], eax
jne 0x10036dc1
mov dword [ebp - 0x988], 1
jmp 0x10036dc8
and dword [ebp - 0x988], 0
mov eax, dword [ebp - 0x234]
cmp dword [ebp - 0x988], eax
jle 0x10036de2
mov dword [ebp - 0xd4c], 1
jmp 0x10036de9
and dword [ebp - 0xd4c], 0
mov eax, dword [ebp - 0xbd8]
mov dword [ebp - 0x1678], eax
mov eax, 0x29ea
cmp eax, 0xf068
jne 0x10036e0d
mov dword [ebp - 0xfdc], 1
jmp 0x10036e14
and dword [ebp - 0xfdc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1294]
mov dword [ebp - 0x14dc], eax
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x1294], 0xce6f
mov eax, 0xce6f
dec eax
sub eax, dword [ebp - 0x678]
mov dword [ebp - 0x680], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x680]
mov dword [ebp + eax - 0x1794], ecx
mov eax, dword [ebp - 0xbd8]
cmp dword [ebp - 0x680], eax
jl 0x10036e80
mov eax, 0xcc01
test eax, eax
je 0x10036e80
mov dword [ebp - 0x990], 1
jmp 0x10036e87
and dword [ebp - 0x990], 0
mov eax, dword [ebp - 0x990]
mov dword [ebp - 0xd54], eax
movzx eax, byte [ebp - 0xdd]
test eax, eax
je 0x10036f2d
mov dword [ebp - 0x3b0], 0xffffffff
mov dword [ebp - 0x3b0], 0
jmp 0x10036ec5
mov eax, dword [ebp - 0x3b0]
inc eax
mov dword [ebp - 0x3b0], eax
cmp dword [ebp - 0x3b0], 0x19
jg 0x10036f25
mov dword [ebp - 0x688], 0xffffffff
mov eax, dword [ebp - 0x688]
dec eax
mov dword [ebp - 0x688], eax
mov byte [ebp - 0x170], 0
movzx eax, byte [ebp - 0x170]
test eax, eax
je 0x10036f23
push 0x175c
push 0x7c42
push 0
push 0x79ed
push 0x39e8
push 0x4c27
push 0x4c57
push 1
push 0x38
call fcn.100335ac
add esp, 0x24
jmp 0x10036eb8
push 0
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
jmp 0x1003989b
mov dword [ebp - 0xde4], 0xecf7921e
mov dword [ebp - 0xd5c], 1
mov dword [ebp - 0x10bc], 2
push 4
lea ecx, [ebp - 0x1338]
call fcn.1001aa9f
mov dword [ebp - 4], 0x13
push 4
lea ecx, [ebp - 0x158c]
call fcn.1001aa9f
mov byte [ebp - 4], 0x14
lea eax, [ebp - 0x1338]
push eax
push 0x58c8
push 0x109
push 0x4248
push 0x21f1
push 0
push 0x3031
push 0x73f
push 1
push 0x721f
lea eax, [ebp - 0x1cc]
push eax
call fcn.10023bab
add esp, 0x2c
mov dword [ebp - 0x1cc], 0
jmp 0x10036fcb
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 4
jge 0x10036fed
push dword [ebp - 0x1cc]
lea ecx, [ebp - 0x158c]
call fcn.1001ab3d
mov dword [eax], 0x2afd
jmp 0x10036fbe
push 0x7f84
push 0
lea eax, [ebp - 0x10bc]
push eax
lea eax, [ebp - 0xd5c]
push eax
push 0x5af0
push 0
push 0x6fa5
push 0xd3d
lea eax, [ebp - 0x1338]
push eax
call fcn.1002343e
add esp, 0x24
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x158c]
call fcn.1001ab21
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1338]
call fcn.1001ab21
mov dword [ebp - 0x1680], 0x5de1fc65
push 1
lea ecx, [ebp - 0x15ec]
call fcn.1001aa9f
mov dword [ebp - 4], 0x15
mov dword [ebp - 0xb18], 0x7895
mov dword [ebp - 0xd6c], 0x1000a860
cmp dword [ebp - 0xb18], 0x79d6
jle 0x10037157
and dword [ebp - 0x2e0], 0
jmp 0x10037098
mov eax, dword [ebp - 0x2e0]
inc eax
mov dword [ebp - 0x2e0], eax
cmp dword [ebp - 0x2e0], 0x4c49
jge 0x10037157
and dword [ebp - 0x2d8], 0
jmp 0x100370be
mov eax, dword [ebp - 0x2d8]
inc eax
mov dword [ebp - 0x2d8], eax
cmp dword [ebp - 0x2d8], 0x200a
jge 0x10037152
and dword [ebp - 0x420], 0
jmp 0x100370e4
mov eax, dword [ebp - 0x420]
inc eax
mov dword [ebp - 0x420], eax
cmp dword [ebp - 0x420], 0x1b19
jge 0x1003714d
mov eax, dword [ebp - 0x2d8]
xor eax, dword [ebp - 0x420]
or eax, dword [ebp - 0x2e0]
cdq
mov dword [ebp - 0xea0], eax
mov dword [ebp - 0xe9c], edx
push dword [ebp - 0xe9c]
push dword [ebp - 0xea0]
lea ecx, [ebp - 0x1924]
call fcn.1000d25a
pop ecx
pop ecx
mov dword [ebp - 0xfe4], eax
mov ecx, dword [ebp - 0xfe4]
call fcn.1001a84e
push eax
call fcn.1004f3d6
pop ecx
lea ecx, [ebp - 0x1924]
call fcn.1001a844
jmp 0x100370d7
jmp 0x100370b1
jmp 0x1003708b
mov dword [ebp - 0x214], 0xfffffffc
mov dword [ebp - 0x14e4], 0xf6b8f3d4
mov dword [ebp - 0x166c], 1
mov dword [ebp - 0x1114], 0
mov dword [ebp - 0x14ec], 7
mov dword [ebp - 0x3b8], 0
jmp 0x100371a2
mov eax, dword [ebp - 0x3b8]
inc eax
mov dword [ebp - 0x3b8], eax
cmp dword [ebp - 0x3b8], 3
jge 0x100371be
mov eax, dword [ebp - 0x3b8]
mov dword [ebp + eax*4 - 0x1788], 0xffff
jmp 0x10037195
mov dword [ebp - 0x214], 0
jmp 0x100371d7
mov eax, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 2
jg 0x100371ff
mov dword [ebp - 0xd64], 0xffffffff
mov eax, dword [ebp - 0x214]
mov eax, dword [ebp + eax*4 - 0x1788]
mov dword [ebp - 0xd64], eax
jmp 0x100371ca
push 0x79e8
push 0x1bb
push 0x686d
push 0x15e
lea eax, [ebp - 0x1114]
push eax
push 0x5dca
push 0x6de4
push 1
push 0
push 0x461d
push 0x3494
push 0
push 0x3d06
call fcn.10040cf6
add esp, 0x34
mov byte [ebp - 4], 0x16
cmp dword [ebp - 0xb18], 0x77f6
jge 0x1003725d
push dword [ebp - 0xd6c]
call fcn.1004f3d6
pop ecx
jmp 0x10037279
mov dword [ebp - 4], 0x15
jmp 0x10037289
push 1
lea ecx, [ebp - 0x135c]
call fcn.1001aa9f
mov byte [ebp - 4], 0x18
mov dword [ebp - 0x78], 0xb26bdde0
mov dword [ebp - 0x1a0], 0xc39d
mov dword [ebp - 0x52c], 6
mov dword [ebp - 0x6b8], 0xaa473ecf
mov dword [ebp - 0x6c0], 0x4bae914
mov dword [ebp - 0x10c4], 0x698b42d
mov dword [ebp - 0x2e8], 0
jmp 0x100372ec
mov eax, dword [ebp - 0x2e8]
inc eax
mov dword [ebp - 0x2e8], eax
cmp dword [ebp - 0x2e8], 3
jge 0x10037308
mov eax, dword [ebp - 0x2e8]
mov dword [ebp + eax*4 - 0x1110], 0x4891023f
jmp 0x100372df
mov dword [ebp - 0x78], 0x1a
jmp 0x10037318
mov eax, dword [ebp - 0x78]
dec eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0xffffffe3
jle 0x100375f0
push 1
lea ecx, [ebp - 0xcc0]
call fcn.1001aa9f
mov byte [ebp - 4], 0x19
mov dword [ebp - 0xd0], 0xfffffffa
mov dword [ebp - 0x4c8], 7
mov dword [ebp - 0x508], 0
push 1
lea eax, [ebp - 0xcc0]
push eax
push 0
push 0x31b3
push 0x6980
push 0x2199
push 0x5509
push 1
lea eax, [ebp - 0x1534]
push eax
push 0x4d65
call fcn.10025e80
add esp, 0x28
mov dword [ebp - 0xd0], 0
jmp 0x1003739f
mov eax, dword [ebp - 0xd0]
dec eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0
jl 0x10037476
mov dword [ebp - 0x4c0], 0xffffffff
mov eax, dword [ebp - 0x4c0]
mov dword [ebp - 0x14f4], eax
mov eax, dword [ebp - 0x4c0]
mov dword [ebp - 0x4c8], eax
cmp dword [ebp - 0x4c8], 4
jl 0x100373e3
mov dword [ebp - 0xfec], 1
jmp 0x100373ea
and dword [ebp - 0xfec], 0
mov eax, dword [ebp - 0x4c0]
mov dword [ebp - 0x1538], eax
push dword [ebp - 0xd0]
lea ecx, [ebp - 0xcc0]
call fcn.1001ab3d
imul eax, dword [eax], 0xffff
sub eax, 0x4172
cmp eax, 0xf4a8fe24
jbe 0x10037425
mov dword [ebp - 0x690], 1
jmp 0x1003742c
and dword [ebp - 0x690], 0
mov eax, dword [ebp - 0x690]
mov dword [ebp - 0x508], eax
mov byte [ebp - 0xe5], 0
movzx eax, byte [ebp - 0xe5]
test eax, eax
je 0x10037471
push 0x5da9
push 0x6633
push 1
push 1
push 0xe38
push 0x3941
push 0xf98
push 0
call fcn.1002e6e0
add esp, 0x20
jmp 0x10037392
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1110]
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0
jne 0x1003749e
mov dword [ebp - 0x998], 1
jmp 0x100374a5
and dword [ebp - 0x998], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1110]
cmp dword [ebp - 0x998], eax
jle 0x100374c6
mov dword [ebp - 0x9a0], 1
jmp 0x100374cd
and dword [ebp - 0x9a0], 0
push 0
lea ecx, [ebp - 0xcc0]
call fcn.1001ab3d
mov esi, eax
push 0
lea ecx, [ebp - 0xcc0]
call fcn.1001ab3d
mov eax, dword [eax]
cmp eax, dword [esi]
je 0x100374fb
mov dword [ebp - 0x698], 1
jmp 0x10037502
and dword [ebp - 0x698], 0
cmp dword [ebp - 0x698], 0x58fe
jg 0x1003751a
mov dword [ebp - 0xc84], 1
jmp 0x10037521
and dword [ebp - 0xc84], 0
mov dword [ebp - 0x508], 4
mov eax, dword [ebp - 0xc84]
sub eax, 0x1a57d591
mov ecx, dword [ebp - 0x508]
add ecx, eax
cmp ecx, dword [ebp - 0x4c8]
jge 0x10037552
mov dword [ebp - 0xd74], 1
jmp 0x10037559
and dword [ebp - 0xd74], 0
push 0
lea ecx, [ebp - 0xcc0]
call fcn.1001ab3d
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1a0]
cmp ecx, dword [ebp + eax - 0x1110]
jle 0x10037587
mov dword [ebp - 0x6a0], 1
jmp 0x1003758e
and dword [ebp - 0x6a0], 0
mov eax, dword [ebp - 0x1a0]
cmp eax, dword [ebp - 0x6a0]
jne 0x100375a8
mov dword [ebp - 0x6a8], 1
jmp 0x100375af
and dword [ebp - 0x6a8], 0
mov eax, dword [ebp - 0x9a0]
cmp eax, dword [ebp - 0x6a8]
jl 0x100375c9
mov dword [ebp - 0xb20], 1
jmp 0x100375d0
and dword [ebp - 0xb20], 0
mov eax, dword [ebp - 0xb20]
mov dword [ebp - 0x52c], eax
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0xcc0]
call fcn.1001ab21
jmp 0x10037311
cmp dword [ebp - 0x78], 0
jne 0x10037695
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1110], 0xffffffff
jg 0x10037616
mov dword [ebp - 0x6b0], 1
jmp 0x1003761d
and dword [ebp - 0x6b0], 0
mov eax, dword [ebp - 0x6b0]
mov dword [ebp - 0x52c], eax
mov eax, dword [ebp - 0x52c]
cmp eax, dword [ebp - 0x1a0]
jl 0x10037643
mov dword [ebp - 0x9a8], 1
jmp 0x1003764a
and dword [ebp - 0x9a8], 0
mov eax, dword [ebp - 0x9a8]
mov dword [ebp - 0x6b8], eax
mov eax, dword [ebp - 0x6b8]
cmp eax, dword [ebp - 0x1a0]
jne 0x10037670
mov dword [ebp - 0xbe0], 1
jmp 0x10037677
and dword [ebp - 0xbe0], 0
mov eax, dword [ebp - 0xbe0]
mov dword [ebp - 0x6c0], eax
cmp dword [ebp - 0x6c0], 0
jne 0x10037695
and dword [ebp - 0x9b0], 0
jmp 0x1003769f
mov dword [ebp - 0x9b0], 1
mov eax, dword [ebp - 0x1a0]
cmp dword [ebp - 0x9b0], eax
jge 0x100376b9
mov dword [ebp - 0x6c8], 1
jmp 0x100376c0
and dword [ebp - 0x6c8], 0
mov eax, dword [ebp - 0x78]
cmp eax, dword [ebp - 0x6c8]
je 0x100376d7
mov dword [ebp - 0xb28], 1
jmp 0x100376de
and dword [ebp - 0xb28], 0
mov eax, dword [ebp - 0x78]
add eax, dword [ebp - 0xb28]
imul eax, dword [ebp - 0x1a0]
push 4
pop ecx
shl ecx, 0
cmp dword [ebp + ecx - 0x1110], eax
jle 0x10037709
mov dword [ebp - 0x6d0], 1
jmp 0x10037710
and dword [ebp - 0x6d0], 0
mov eax, dword [ebp - 0x6d0]
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x10c4], eax
push 0x3d45
lea eax, [ebp - 0xd94]
push eax
push 0
push 0x7ae8
push 0x9a
push 0
push 1
lea eax, [ebp - 0x15ec]
push eax
push 0x6a12
call fcn.1003272d
add esp, 0x24
mov dword [ebp - 0x114], 0xfffffff6
mov dword [ebp - 0x13f0], 0xffff
mov dword [ebp - 0x13ec], 0xffff
mov dword [ebp - 0x13e8], 0xffff
mov dword [ebp - 0x13e4], 0xffff
mov dword [ebp - 0x4d0], 0
push 1
lea ecx, [ebp - 0x1244]
call fcn.1001aa9f
mov byte [ebp - 4], 0x1a
mov dword [ebp - 0x510], 1
push 0
push 0x5697
lea eax, [ebp - 0x1244]
push eax
lea eax, [ebp - 0x1d4]
push eax
push 0x7e25
push 1
call fcn.1002afed
add esp, 0x18
mov dword [ebp - 0x1d4], 0
jmp 0x100377e6
mov eax, dword [ebp - 0x1d4]
inc eax
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 3
jge 0x10037802
mov eax, dword [ebp - 0x1d4]
mov dword [ebp + eax*4 - 0x159c], 0xcbdb62b2
jmp 0x100377d9
mov byte [ebp - 0x172], 0
push 1
push 0x3a16
push 0x43f8
push 0x77f
push 0x7dc
push 0x612a
push 0x6e5e
push 0
lea eax, [ebp - 0x172]
push eax
push 0x4190
push 0x4fc
push 1
call fcn.10024199
add esp, 0x30
mov dword [ebp - 0x708], 0x854
mov dword [ebp - 0xffc], 0x1000a8d0
cmp dword [ebp - 0x708], 0xa98
jle 0x10037945
and dword [ebp - 0x2f8], 0
jmp 0x10037880
mov eax, dword [ebp - 0x2f8]
inc eax
mov dword [ebp - 0x2f8], eax
cmp dword [ebp - 0x2f8], 0x23b3
jge 0x10037945
and dword [ebp - 0x3c0], 0
jmp 0x100378a6
mov eax, dword [ebp - 0x3c0]
inc eax
mov dword [ebp - 0x3c0], eax
cmp dword [ebp - 0x3c0], 0x545f
jge 0x10037940
and dword [ebp - 0x458], 0
jmp 0x100378cc
mov eax, dword [ebp - 0x458]
inc eax
mov dword [ebp - 0x458], eax
cmp dword [ebp - 0x458], 0x962
jge 0x1003793b
and dword [ebp - 0x2f0], 0
jmp 0x100378ee
mov eax, dword [ebp - 0x2f0]
inc eax
mov dword [ebp - 0x2f0], eax
cmp dword [ebp - 0x2f0], 0xf2
jge 0x10037939
mov ecx, dword [ebp - 0x458]
sub ecx, dword [ebp - 0x2f0]
mov eax, dword [ebp - 0x3c0]
sar eax, cl
or eax, dword [ebp - 0x2f8]
cdq
mov dword [ebp - 0xeac], eax
mov dword [ebp - 0xea8], edx
push dword [ebp - 0xea8]
push dword [ebp - 0xeac]
mov ecx, 0x1060def8
call fcn.1001a86e
jmp 0x100378e1
jmp 0x100378bf
jmp 0x10037899
jmp 0x10037873
mov dword [ebp - 0x114], 0
jmp 0x1003795e
mov eax, dword [ebp - 0x114]
dec eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0xffffffe9
jge 0x10037c1d
mov dword [ebp - 0x254], 0x3a18e418
mov dword [ebp - 0x1dc], 1
mov dword [ebp - 0x6e0], 0x9904
mov dword [ebp - 0x1194], 0xe526954e
mov dword [ebp - 0xd8c], 1
cmp dword [ebp - 0x114], 0
je 0x10037ac5
cmp dword [ebp - 0x254], 0x2733582f
jg 0x100379c2
mov dword [ebp - 0x9c0], 1
jmp 0x100379c9
and dword [ebp - 0x9c0], 0
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x13f0], 0x1355fff6
cmp dword [ebp - 0x254], 0x1355fff6
je 0x100379f2
mov dword [ebp - 0x9b8], 1
jmp 0x100379f9
and dword [ebp - 0x9b8], 0
mov eax, dword [ebp - 0x9b8]
neg eax
cmp eax, 0x5452fa81
jne 0x10037a14
mov dword [ebp - 0x6d8], 1
jmp 0x10037a1b
and dword [ebp - 0x6d8], 0
mov eax, dword [ebp - 0x6d8]
mov dword [ebp - 0x1dc], eax
mov eax, dword [ebp - 0x254]
cmp eax, dword [ebp - 0x1dc]
jle 0x10037a41
mov dword [ebp - 0xc44], 1
jmp 0x10037a48
and dword [ebp - 0xc44], 0
mov eax, dword [ebp - 0x6e0]
add eax, dword [ebp - 0xc44]
je 0x10037a6b
cmp dword [ebp - 0x254], 0
je 0x10037a6b
mov dword [ebp - 0xd7c], 1
jmp 0x10037a72
and dword [ebp - 0xd7c], 0
mov eax, dword [ebp - 0x6e0]
mov dword [ebp - 0x14fc], eax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x1540], eax
mov eax, dword [ebp - 0x254]
cmp dword [ebp - 0x9c0], eax
jg 0x10037aa4
mov dword [ebp - 0x6e8], 1
jmp 0x10037aab
and dword [ebp - 0x6e8], 0
mov eax, dword [ebp - 0x4d0]
cmp dword [ebp - 0x6e8], eax
jle 0x10037ac5
mov dword [ebp - 0xb30], 1
jmp 0x10037acc
and dword [ebp - 0xb30], 0
mov eax, dword [ebp - 0x114]
cmp dword [ebp - 0xb30], eax
jle 0x10037ae6
mov dword [ebp - 0x6f0], 1
jmp 0x10037aed
and dword [ebp - 0x6f0], 0
push 0
lea ecx, [ebp - 0x1244]
call fcn.1001ab3d
mov ecx, dword [ebp - 0x6f0]
cmp ecx, dword [eax]
jge 0x10037b10
mov dword [ebp - 0x9c8], 1
jmp 0x10037b17
and dword [ebp - 0x9c8], 0
mov eax, dword [ebp - 0x4d0]
imul eax, dword [ebp - 0x9c8]
imul esi, eax, 0
push 0
lea ecx, [ebp - 0x1244]
call fcn.1001ab3d
add esi, dword [eax]
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x159c], esi
cmp dword [ebp - 0x4d0], 0
jne 0x10037c02
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x159c]
mov dword [ebp - 0x1504], eax
mov eax, dword [ebp - 0x510]
mov dword [ebp - 0xff4], eax
mov eax, dword [ebp - 0x1dc]
mov dword [ebp - 0xd84], eax
mov eax, dword [ebp - 0x510]
dec eax
mov dword [ebp - 0x510], eax
mov eax, dword [ebp - 0xff4]
cmp eax, dword [ebp - 0xd84]
je 0x10037ba1
mov dword [ebp - 0x6f8], 1
jmp 0x10037ba8
and dword [ebp - 0x6f8], 0
cmp dword [ebp - 0x6f8], 0xfffffff9
je 0x10037bbd
mov dword [ebp - 0xbe8], 1
jmp 0x10037bc4
and dword [ebp - 0xbe8], 0
mov eax, dword [ebp - 0x1dc]
add eax, dword [ebp - 0xbe8]
cmp eax, dword [ebp - 0x1194]
jl 0x10037be4
mov dword [ebp - 0x700], 1
jmp 0x10037beb
and dword [ebp - 0x700], 0
mov eax, dword [ebp - 0x1dc]
cmp dword [ebp - 0x700], eax
je 0x10037c02
and dword [ebp - 0x9d0], 0
jmp 0x10037c0c
mov dword [ebp - 0x9d0], 1
mov eax, dword [ebp - 0x9d0]
mov dword [ebp - 0xd8c], eax
jmp 0x10037951
mov byte [ebp - 4], 0x1b
cmp dword [ebp - 0x708], 0x67f
jge 0x10037c3d
mov edx, dword [ebp - 0xffc]
mov ecx, 0x1060def8
call fcn.1001cd79
jmp 0x10037c59
mov dword [ebp - 4], 0x1a
jmp 0x10037c69
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x1244]
call fcn.1001ab21
push 0x5cb6
push 0x4e53
push 0x4605
lea eax, [ebp - 0x135c]
push eax
push 0
push 0x73b6
lea eax, [ebp - 0xd94]
push eax
push 0
call fcn.1002ee08
add esp, 0x20
push 3
lea ecx, [ebp - 0x15ac]
call fcn.1001aa9f
mov byte [ebp - 4], 0x1d
mov dword [ebp - 0x710], 0xdf3d37a5
push 0x2b67
lea eax, [ebp - 0x15ac]
push eax
push 0
lea eax, [ebp - 0x21c]
push eax
push 0x485a
push 0
push 0x6ee7
call fcn.1002dc42
add esp, 0x1c
mov dword [ebp - 0x21c], 0
jmp 0x10037d03
mov eax, dword [ebp - 0x21c]
inc eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 1
jge 0x10037d1f
mov eax, dword [ebp - 0x21c]
mov dword [ebp + eax*4 - 0x428], 0x9be1d925
jmp 0x10037cf6
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x428], 0
jmp 0x10037d4d
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x428]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x428], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x428], 2
jg 0x10037e87
mov dword [ebp - 0x10cc], 0xf2e5
mov dword [ebp - 0xb38], 0x2ba
mov dword [ebp - 0xd9c], 0x1000a8fc
cmp dword [ebp - 0xb38], 0x3d3
jle 0x10037e02
and dword [ebp - 0x300], 0
jmp 0x10037da1
mov eax, dword [ebp - 0x300]
inc eax
mov dword [ebp - 0x300], eax
cmp dword [ebp - 0x300], 0x58fc
jge 0x10037e02
and dword [ebp - 0x3c8], 0
jmp 0x10037dc3
mov eax, dword [ebp - 0x3c8]
inc eax
mov dword [ebp - 0x3c8], eax
cmp dword [ebp - 0x3c8], 0x4bc6
jge 0x10037e00
mov eax, dword [ebp - 0x300]
xor eax, dword [ebp - 0x3c8]
cdq
mov dword [ebp - 0xeb8], eax
mov dword [ebp - 0xeb4], edx
push dword [ebp - 0xeb4]
push dword [ebp - 0xeb8]
mov ecx, 0x1060def8
call fcn.1001a86e
jmp 0x10037db6
jmp 0x10037d94
push 0
push 0x5450
push 1
lea eax, [ebp - 0x10cc]
push eax
push 0x680c
push 0x7b
push 0x4c0b
call fcn.10022fc5
add esp, 0x1c
mov byte [ebp - 4], 0x1e
cmp dword [ebp - 0xb38], 0xffffffe0
jge 0x10037e43
mov edx, dword [ebp - 0xd9c]
mov ecx, 0x1060def8
call fcn.1001cd79
jmp 0x10037e5f
mov dword [ebp - 4], 0x1d
jmp 0x10037e6f
push 1
push 0
push 1
push 0x6fda
call fcn.10031d4e
add esp, 0x10
jmp 0x10037d32
mov eax, dword [ebp - 0x710]
dec eax
mov dword [ebp - 0x710], eax
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x15ac]
call fcn.1001ab21
mov dword [ebp - 0x34], 3
jmp 0x10037eb3
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jl 0x10038d57
mov dword [ebp - 0xc8], 0xe87df2f4
push 2
lea ecx, [ebp - 0x550]
call fcn.1001aa9f
mov byte [ebp - 4], 0x20
mov dword [ebp - 0x9e8], 0x3ee76373
mov dword [ebp - 0x430], 0x81438367
mov dword [ebp - 0x1548], 0x17b38e51
mov dword [ebp - 0xdc4], 0xfffffffe
mov dword [ebp - 0x308], 0
jmp 0x10037f19
mov eax, dword [ebp - 0x308]
inc eax
mov dword [ebp - 0x308], eax
cmp dword [ebp - 0x308], 2
jge 0x10037f38
push dword [ebp - 0x308]
lea ecx, [ebp - 0x550]
call fcn.1001ab3d
or dword [eax], 0xffffffff
jmp 0x10037f0c
push 1
lea ecx, [ebp - 0x550]
call fcn.1001ab3d
mov esi, eax
push 1
lea ecx, [ebp - 0x550]
call fcn.1001ab3d
mov edi, dword [eax]
add edi, dword [esi]
push 1
lea ecx, [ebp - 0x550]
call fcn.1001ab3d
cmp dword [eax], edi
je 0x10037f75
mov dword [ebp - 0x720], 1
jmp 0x10037f7c
and dword [ebp - 0x720], 0
push 0
lea ecx, [ebp - 0x550]
call fcn.1001ab3d
mov esi, dword [eax]
add esi, 0x74b2
push 0
lea ecx, [ebp - 0x550]
call fcn.1001ab3d
cmp esi, dword [eax]
jg 0x10037fb7
mov eax, 0xc70a
test eax, eax
je 0x10037fb7
mov dword [ebp - 0x9d8], 1
jmp 0x10037fbe
and dword [ebp - 0x9d8], 0
mov eax, dword [ebp - 0x9d8]
mov dword [ebp - 0x9e8], eax
mov esi, dword [ebp - 0x430]
push 1
lea ecx, [ebp - 0x550]
call fcn.1001ab3d
cmp dword [eax], esi
je 0x10037fed
mov dword [ebp - 0x718], 1
jmp 0x10037ff4
and dword [ebp - 0x718], 0
push 1
lea ecx, [ebp - 0x550]
call fcn.1001ab3d
mov eax, dword [eax]
neg eax
cmp eax, dword [ebp - 0x718]
je 0x10038019
mov dword [ebp - 0xc64], 1
jmp 0x10038020
and dword [ebp - 0xc64], 0
mov eax, dword [ebp - 0xc64]
neg eax
cmp dword [ebp - 0x720], eax
je 0x1003803c
mov dword [ebp - 0x9e0], 1
jmp 0x10038043
and dword [ebp - 0x9e0], 0
mov esi, dword [ebp - 0x430]
push 1
lea ecx, [ebp - 0x550]
call fcn.1001ab3d
mov ecx, dword [ebp - 0x9e0]
sub ecx, dword [eax]
cmp ecx, esi
jg 0x1003806e
mov dword [ebp - 0x728], 1
jmp 0x10038075
and dword [ebp - 0x728], 0
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0x1004], eax
mov eax, dword [ebp - 0x728]
mov dword [ebp - 0xda4], eax
mov eax, dword [ebp - 0xc8]
dec eax
mov dword [ebp - 0xc8], eax
mov eax, dword [ebp - 0x1004]
cmp eax, dword [ebp - 0xda4]
jle 0x100380e0
mov dword [ebp - 0x1124], 0x311e2db8
push 0x472e
lea eax, [ebp - 0x1124]
push eax
push 0
lea eax, [ebp - 0x430]
push eax
push 0x6a02
push 0x376
push 1
call fcn.10022ec2
add esp, 0x1c
jmp 0x1003843c
mov dword [ebp - 0xb40], 0x2447
mov dword [ebp - 0x100c], 0x1000a944
cmp dword [ebp - 0xb40], 0x27f7
jle 0x1003820c
and dword [ebp - 0x318], 0
jmp 0x1003811a
mov eax, dword [ebp - 0x318]
inc eax
mov dword [ebp - 0x318], eax
cmp dword [ebp - 0x318], 0x6740
jge 0x1003820c
and dword [ebp - 0x3d0], 0
jmp 0x10038140
mov eax, dword [ebp - 0x3d0]
inc eax
mov dword [ebp - 0x3d0], eax
cmp dword [ebp - 0x3d0], 0x49d0
jge 0x10038207
and dword [ebp - 0x480], 0
jmp 0x10038166
mov eax, dword [ebp - 0x480]
inc eax
mov dword [ebp - 0x480], eax
cmp dword [ebp - 0x480], 0x5876
jge 0x10038202
and dword [ebp - 0x310], 0
jmp 0x1003818c
mov eax, dword [ebp - 0x310]
inc eax
mov dword [ebp - 0x310], eax
cmp dword [ebp - 0x310], 0x7672
jge 0x100381fd
mov eax, dword [ebp - 0x480]
mov ecx, dword [ebp - 0x310]
shl eax, cl
and eax, dword [ebp - 0x3d0]
xor eax, dword [ebp - 0x318]
cdq
mov dword [ebp - 0xec4], eax
mov dword [ebp - 0xec0], edx
push dword [ebp - 0xec0]
push dword [ebp - 0xec4]
lea ecx, [ebp - 0x18c4]
call fcn.1000d25a
pop ecx
pop ecx
mov dword [ebp - 0xdac], eax
mov ecx, dword [ebp - 0xdac]
call fcn.1001a84e
push eax
call fcn.1004f3d6
pop ecx
lea ecx, [ebp - 0x18c4]
call fcn.1001a844
jmp 0x1003817f
jmp 0x10038159
jmp 0x10038133
jmp 0x1003810d
mov dword [ebp - 0x730], 0
mov byte [ebp - 4], 0x21
cmp dword [ebp - 0xb40], 0x2384
jge 0x10038232
push dword [ebp - 0x100c]
call fcn.1004f3d6
pop ecx
jmp 0x1003824e
mov dword [ebp - 4], 0x20
jmp 0x1003825e
mov dword [ebp - 0x12e0], 0x6b51f0ef
mov dword [ebp - 0x12dc], 0x6b51f0ef
mov dword [ebp - 0x12d8], 0x6b51f0ef
mov dword [ebp - 0x12d4], 0x6b51f0ef
lea ecx, [ebp - 0x519]
call fcn.1001ab4c
push eax
lea eax, [ebp - 0x12d0]
push eax
lea eax, [ebp - 0x12e0]
push eax
lea ecx, [ebp - 0x17d4]
call fcn.1001ab4f
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x15bc]
call fcn.1001aafb
mov byte [ebp - 4], 0x23
mov dword [ebp - 0x1014], 0xda781b5f
mov dword [ebp - 0x4d8], 0xc0c8
mov dword [ebp - 0xdbc], 0x887e981c
cmp dword [ebp - 0x730], 0
je 0x100383a7
mov dword [ebp - 0xdb4], 0
mov dword [ebp - 0x1308], 0x4fd52280
mov dword [ebp - 0x1304], 0x4fd52280
mov dword [ebp - 0x1300], 0x4fd52280
mov dword [ebp - 0x12fc], 0x4fd52280
lea ecx, [ebp - 0x511]
call fcn.1001ab4c
push eax
lea eax, [ebp - 0x12f8]
push eax
lea eax, [ebp - 0x1308]
push eax
lea ecx, [ebp - 0x17ac]
call fcn.1001ab4f
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1770]
call fcn.1001aafb
mov dword [ebp - 0x150c], 0
mov dword [ebp - 0xc8], 0xffffffe9
jmp 0x10038374
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0xb
jle 0x1003838a
cmp dword [ebp - 0xdb4], 0
je 0x10038388
jmp 0x1003838a
jmp 0x10038367
mov eax, dword [ebp - 0x4d8]
inc eax
mov dword [ebp - 0x4d8], eax
lea ecx, [ebp - 0x1770]
call fcn.1001ab21
jmp 0x1003842d
mov dword [ebp - 0x10d4], 0xffffffff
lea eax, [ebp - 0x10d4]
push eax
push 0x2f1
push 1
push 0x4484
lea eax, [ebp - 0x430]
push eax
lea eax, [ebp - 0xdbc]
push eax
lea eax, [ebp - 0x1014]
push eax
push 0x3ca0
push 0x2bf0
push 0x7c04
lea eax, [ebp - 0xc8]
push eax
lea eax, [ebp - 0xdc4]
push eax
lea eax, [ebp - 0x4d8]
push eax
lea eax, [ebp - 0x730]
push eax
push 0
push 0x199b
push 0x1292
lea eax, [ebp - 0x9e8]
push eax
lea eax, [ebp - 0x15bc]
push eax
lea eax, [ebp - 0x550]
push eax
call fcn.10030ca0
add esp, 0x50
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x15bc]
call fcn.1001ab21
mov byte [ebp - 0xed], 0
push 0x18fc
push 1
lea eax, [ebp - 0xed]
push eax
push 0
push 0x48dc
push 0x17f2
call fcn.10028c41
add esp, 0x18
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x550]
call fcn.1001ab21
mov dword [ebp - 0xdec], 0xffffffff
mov dword [ebp - 0xa0], 0xf6af1124
mov dword [ebp - 0xa0], 0xfffffff2
jmp 0x100384a1
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0x1b
jne 0x10038930
push 4
lea ecx, [ebp - 0xcd8]
call fcn.1001aa9f
mov byte [ebp - 4], 0x24
mov dword [ebp - 0x11c], 4
push 0x1c54
lea eax, [ebp - 0xcd8]
push eax
push 0
lea eax, [ebp - 0x1e4]
push eax
push 1
push 0x2d6f
call fcn.10029f70
add esp, 0x18
mov dword [ebp - 0x1e4], 0
jmp 0x10038506
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 3
jge 0x10038522
mov eax, dword [ebp - 0x1e4]
mov dword [ebp + eax*4 - 0x1758], 0xffffffff
jmp 0x100384f9
mov dword [ebp - 0x11c], 0
jmp 0x1003853b
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 3
jg 0x100388e4
mov dword [ebp - 0xc0], 0
mov dword [ebp - 0xdd4], 6
mov dword [ebp - 0xc0], 3
jmp 0x10038575
mov eax, dword [ebp - 0xc0]
dec eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0
jl 0x10038742
mov dword [ebp - 0xbf0], 0x4f98cafa
lea eax, [ebp - 0xcd8]
push eax
push 1
push 0x4cf3
lea eax, [ebp - 0xc0]
push eax
push 0
push 0x6bc6
lea eax, [ebp - 0x11c]
push eax
push 1
lea eax, [ebp - 0xbf0]
push eax
call fcn.10025cd5
add esp, 0x24
mov dword [ebp - 0x738], 0x6b37
mov dword [ebp - 0xdcc], 0x1000a9a0
cmp dword [ebp - 0x738], 0x6ef2
jle 0x100386ea
and dword [ebp - 0x460], 0
jmp 0x100385fa
mov eax, dword [ebp - 0x460]
inc eax
mov dword [ebp - 0x460], eax
cmp dword [ebp - 0x460], 0x349a
jge 0x100386ea
and dword [ebp - 0x320], 0
jmp 0x10038620
mov eax, dword [ebp - 0x320]
inc eax
mov dword [ebp - 0x320], eax
cmp dword [ebp - 0x320], 0x76c6
jge 0x100386e5
and dword [ebp - 0x3d8], 0
jmp 0x10038646
mov eax, dword [ebp - 0x3d8]
inc eax
mov dword [ebp - 0x3d8], eax
cmp dword [ebp - 0x3d8], 0x883
jge 0x100386e0
and dword [ebp - 0x328], 0
jmp 0x1003866c
mov eax, dword [ebp - 0x328]
inc eax
mov dword [ebp - 0x328], eax
cmp dword [ebp - 0x328], 0x5f7a
jge 0x100386db
mov eax, dword [ebp - 0x320]
add eax, dword [ebp - 0x3d8]
add eax, dword [ebp - 0x328]
or eax, dword [ebp - 0x460]
cdq
mov dword [ebp - 0xed0], eax
mov dword [ebp - 0xecc], edx
push dword [ebp - 0xecc]
push dword [ebp - 0xed0]
lea ecx, [ebp - 0x1804]
call fcn.1000d25a
pop ecx
pop ecx
mov dword [ebp - 0x1164], eax
mov ecx, dword [ebp - 0x1164]
call fcn.1001a84e
push eax
call fcn.1004f3d6
pop ecx
lea ecx, [ebp - 0x1804]
call fcn.1001a844
jmp 0x1003865f
jmp 0x10038639
jmp 0x10038613
jmp 0x100385ed
mov byte [ebp - 4], 0x25
cmp dword [ebp - 0x738], 0x684b
jge 0x10038706
push dword [ebp - 0xdcc]
call fcn.1004f3d6
pop ecx
jmp 0x10038722
mov dword [ebp - 4], 0x24
jmp 0x10038732
cmp dword [ebp - 0xbf0], 0
je 0x1003873d
jmp 0x10038742
jmp 0x10038568
push 3
lea ecx, [ebp - 0xcd8]
call fcn.1001ab3d
cmp dword [eax], 0
je 0x10038862
mov esi, dword [ebp - 0xc0]
push 3
lea ecx, [ebp - 0xcd8]
call fcn.1001ab3d
cmp esi, dword [eax]
jle 0x1003877b
mov dword [ebp - 0x740], 1
jmp 0x10038782
and dword [ebp - 0x740], 0
mov eax, dword [ebp - 0x11c]
imul eax, dword [ebp - 0x740]
mov dword [ebp - 0x9f0], eax
push 2
lea ecx, [ebp - 0xcd8]
call fcn.1001ab3d
mov ecx, dword [ebp - 0x9f0]
mov dword [eax], ecx
cmp dword [ebp - 0x9f0], 0
jne 0x100387bf
mov dword [ebp - 0x748], 1
jmp 0x100387c6
and dword [ebp - 0x748], 0
mov eax, dword [ebp - 0xa0]
cmp dword [ebp - 0x748], eax
jle 0x100387e0
mov dword [ebp - 0xb48], 1
jmp 0x100387e7
and dword [ebp - 0xb48], 0
mov eax, dword [ebp - 0x11c]
cmp eax, dword [ebp - 0xb48]
jl 0x10038807
cmp dword [ebp - 0xa0], 0
jne 0x10038807
and dword [ebp - 0x750], 0
jmp 0x10038811
mov dword [ebp - 0x750], 1
cmp dword [ebp - 0x750], 0xaedf
jge 0x10038829
mov dword [ebp - 0x101c], 1
jmp 0x10038830
and dword [ebp - 0x101c], 0
cmp dword [ebp - 0xa0], 0xca862934
jne 0x10038848
mov dword [ebp - 0x554], 1
jmp 0x1003884f
and dword [ebp - 0x554], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x554]
mov dword [ebp + eax - 0x1758], ecx
mov eax, 0x4a2c6eb8
test eax, eax
je 0x10038880
cmp dword [ebp - 0xa0], 0
je 0x10038880
mov dword [ebp - 0x9f8], 1
jmp 0x10038887
and dword [ebp - 0x9f8], 0
mov eax, dword [ebp - 0x9f8]
mov dword [ebp - 0xc0], eax
mov eax, dword [ebp - 0xc0]
cmp eax, dword [ebp - 0xa0]
je 0x100388ad
mov dword [ebp - 0x758], 1
jmp 0x100388b4
and dword [ebp - 0x758], 0
cmp dword [ebp - 0x758], 0x8d8ef068
je 0x100388cc
mov dword [ebp - 0xc4c], 1
jmp 0x100388d3
and dword [ebp - 0xc4c], 0
mov eax, dword [ebp - 0xc4c]
mov dword [ebp - 0xdd4], eax
jmp 0x1003852e
push 0
push 0x5120
push 0x6131
push 0x48
push 0x334a
push 0x1bee
push 0x62d8
push 1
push 0x7fe5
push 0x3d78
push 0x2b5a
push 0
call fcn.10024199
add esp, 0x30
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0xcd8]
call fcn.1001ab21
jmp 0x10038494
push 3
lea ecx, [ebp - 0x15dc]
call fcn.1001aa9f
mov byte [ebp - 4], 0x27
mov dword [ebp - 0x330], 0
jmp 0x1003895a
mov eax, dword [ebp - 0x330]
inc eax
mov dword [ebp - 0x330], eax
cmp dword [ebp - 0x330], 3
jge 0x10038979
push dword [ebp - 0x330]
lea ecx, [ebp - 0x15dc]
call fcn.1001ab3d
or dword [eax], 0xffffffff
jmp 0x1003894d
mov dword [ebp - 0xddc], 0x2cb5
mov dword [ebp - 0x1024], 1
mov dword [ebp - 0x10dc], 0xffffffff
mov dword [ebp - 0x1550], 0xffffffff
mov dword [ebp - 0x1514], 0xddac0faa
mov dword [ebp - 0x1558], 3
push 4
lea ecx, [ebp - 0x15cc]
call fcn.1001aa9f
mov byte [ebp - 4], 0x28
mov dword [ebp - 0x760], 0
mov dword [ebp - 0x3e0], 0
jmp 0x100389e9
mov eax, dword [ebp - 0x3e0]
inc eax
mov dword [ebp - 0x3e0], eax
cmp dword [ebp - 0x3e0], 4
jge 0x10038a0b
push dword [ebp - 0x3e0]
lea ecx, [ebp - 0x15cc]
call fcn.1001ab3d
mov dword [eax], 0xfffffffa
jmp 0x100389dc
push 1
push 0x3965
lea eax, [ebp - 0x10dc]
push eax
push 0x6b82
push 0
lea eax, [ebp - 0xddc]
push eax
lea eax, [ebp - 0x1024]
push eax
push 0x6dd2
call fcn.10029a45
add esp, 0x20
mov eax, dword [ebp - 0x760]
dec eax
mov dword [ebp - 0x760], eax
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x15cc]
call fcn.1001ab21
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp + eax*4 - 0x11d0]
mov dword [ebp - 0xa00], eax
cmp dword [ebp - 0xa00], 0xffffffff
jbe 0x10038a7c
mov dword [ebp - 0x768], 1
jmp 0x10038a83
and dword [ebp - 0x768], 0
mov eax, dword [ebp - 0xde4]
cmp dword [ebp - 0x768], eax
jne 0x10038a9d
mov dword [ebp - 0xb50], 1
jmp 0x10038aa4
and dword [ebp - 0xb50], 0
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp + eax*4 - 0x11d0]
add eax, dword [ebp - 0xb50]
cmp eax, dword [ebp - 0x34]
je 0x10038ac5
mov dword [ebp - 0x770], 1
jmp 0x10038acc
and dword [ebp - 0x770], 0
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp + eax*4 - 0x11d0]
cmp eax, dword [ebp - 0x770]
je 0x10038aea
mov dword [ebp - 0x1134], 1
jmp 0x10038af1
and dword [ebp - 0x1134], 0
mov dword [ebp - 0xdec], 0xffffffff
mov dword [ebp - 0x438], 0x6de713a4
mov dword [ebp - 0x338], 0
jmp 0x10038b1e
mov eax, dword [ebp - 0x338]
inc eax
mov dword [ebp - 0x338], eax
cmp dword [ebp - 0x338], 1
jge 0x10038b3a
mov eax, dword [ebp - 0x338]
mov dword [ebp + eax*4 - 0x151c], 0x35568345
jmp 0x10038b11
push 0
push 1
push 0
push 0x30fe
call fcn.10031d4e
add esp, 0x10
mov dword [ebp - 0x438], 0
jmp 0x10038b66
mov eax, dword [ebp - 0x438]
inc eax
mov dword [ebp - 0x438], eax
cmp dword [ebp - 0x438], 0
jg 0x10038d1f
push 2
lea ecx, [ebp - 0x1120]
call fcn.1001aa9f
mov byte [ebp - 4], 0x29
mov dword [ebp - 0xa08], 0x18c1
mov dword [ebp - 0x102c], 0x1000a9f4
cmp dword [ebp - 0xa08], 0x1a77
jle 0x10038c1c
and dword [ebp - 0x340], 0
jmp 0x10038bba
mov eax, dword [ebp - 0x340]
inc eax
mov dword [ebp - 0x340], eax
cmp dword [ebp - 0x340], 0x3ea3
jge 0x10038c1c
and dword [ebp - 0x3e8], 0
jmp 0x10038bdc
mov eax, dword [ebp - 0x3e8]
inc eax
mov dword [ebp - 0x3e8], eax
cmp dword [ebp - 0x3e8], 0x6d15
jge 0x10038c1a
mov eax, dword [ebp - 0x340]
imul eax, dword [ebp - 0x3e8]
cdq
mov dword [ebp - 0xedc], eax
mov dword [ebp - 0xed8], edx
push dword [ebp - 0xed8]
push dword [ebp - 0xedc]
mov ecx, 0x1060def8
call fcn.1001a86e
jmp 0x10038bcf
jmp 0x10038bad
push 0x650a
lea eax, [ebp - 0x1120]
push eax
push 0xaa5
push 0x4365
push 0x306e
lea eax, [ebp - 0x1560]
push eax
push 0x1203
push 1
push 0x40c
push 0
call fcn.100256cc
add esp, 0x28
mov byte [ebp - 4], 0x2a
cmp dword [ebp - 0xa08], 0x1617
jge 0x10038c74
mov edx, dword [ebp - 0x102c]
mov ecx, 0x1060def8
call fcn.1001cd79
jmp 0x10038c90
mov dword [ebp - 4], 0x29
jmp 0x10038ca0
push 0
lea ecx, [ebp - 0x1120]
call fcn.1001ab3d
and dword [eax], 0
jmp 0x10038cd6
push 0
lea ecx, [ebp - 0x1120]
call fcn.1001ab3d
mov dword [ebp - 0x778], eax
mov eax, dword [ebp - 0x778]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x778]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x1120]
call fcn.1001ab3d
cmp dword [eax], 0
jg 0x10038d0b
mov byte [ebp - 0x174], 0
movzx eax, byte [ebp - 0x174]
test eax, eax
je 0x10038d09
push 0x18a3
push 0
push 0
call dword [sym.imp.GDI32.dll_TranslateCharsetInfo]
jmp 0x10038cb2
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x1120]
call fcn.1001ab21
jmp 0x10038b59
push 0
lea ecx, [ebp - 0x135c]
call fcn.1001ab3d
mov dword [ebp - 0xbf8], eax
mov eax, dword [ebp - 0xbf8]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xbf8]
mov dword [ecx], eax
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x15dc]
call fcn.1001ab21
jmp 0x10037eac
mov dword [ebp - 0x190], 0xdb3ae355
mov dword [ebp - 0x23c], 0xfaf07207
mov dword [ebp - 0x1034], 0xa2e71cc
mov dword [ebp - 0x190], 6
jmp 0x10038d8e
mov eax, dword [ebp - 0x190]
dec eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 1
jge 0x1003904a
push 2
lea ecx, [ebp - 0x1130]
call fcn.1001aa9f
mov byte [ebp - 4], 0x2c
mov dword [ebp - 0x588], 0x83111738
mov dword [ebp - 0x584], 0x83111738
mov dword [ebp - 0x580], 0x83111738
mov dword [ebp - 0x57c], 0x83111738
mov dword [ebp - 0x13d0], 0xed09eb81
mov dword [ebp - 0x13cc], 0xed09eb81
mov dword [ebp - 0x13c8], 0xed09eb81
mov dword [ebp - 0x13c4], 0xed09eb81
lea eax, [ebp - 0x1130]
push eax
push 0
push 0x47ff
push 0x7279
push 1
lea eax, [ebp - 0x1524]
push eax
push 0x2081
call fcn.1003044a
add esp, 0x1c
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x588], 1
jmp 0x10038e53
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x588]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x588], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x588], 0
jl 0x10038ece
mov dword [ebp - 0xdf4], 0x9ce456
lea eax, [ebp - 0xdf4]
push eax
push 1
push 0
lea eax, [ebp - 0x1130]
push eax
push 0x2fb9
call fcn.10029d16
add esp, 0x14
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x588]
lea ecx, [ebp - 0x1130]
call fcn.1001ab3d
mov eax, dword [eax]
neg eax
jne 0x10038eb6
mov dword [ebp - 0x780], 1
jmp 0x10038ebd
and dword [ebp - 0x780], 0
mov eax, dword [ebp - 0x780]
mov dword [ebp - 0x23c], eax
jmp 0x10038e38
mov eax, dword [ebp - 0x23c]
mov dword [ebp - 0x153c], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x588], 3
jb 0x10038ef6
mov dword [ebp - 0xa18], 1
jmp 0x10038efd
and dword [ebp - 0xa18], 0
push 4
pop eax
shl eax, 0
imul eax, dword [ebp + eax - 0x588], 0x3063
test eax, eax
jne 0x10038f1e
mov dword [ebp - 0xa10], 1
jmp 0x10038f25
and dword [ebp - 0xa10], 0
mov eax, dword [ebp - 0xa10]
sub eax, dword [ebp - 0x190]
imul eax, eax, 0x7772
cmp eax, 1
jbe 0x10038f48
mov dword [ebp - 0x10e4], 1
jmp 0x10038f4f
and dword [ebp - 0x10e4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x588]
mov dword [ebp - 0x1674], eax
cmp dword [ebp - 0x190], 0x3f300457
jl 0x10038f7a
mov dword [ebp - 0x788], 1
jmp 0x10038f81
and dword [ebp - 0x788], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x588]
cmp dword [ebp - 0x788], eax
jg 0x10038fa2
mov dword [ebp - 0xb58], 1
jmp 0x10038fa9
and dword [ebp - 0xb58], 0
cmp dword [ebp - 0xb58], 3
jbe 0x10038fbe
mov dword [ebp - 0xdfc], 1
jmp 0x10038fc5
and dword [ebp - 0xdfc], 0
mov eax, dword [ebp - 0x23c]
mov dword [ebp - 0x1544], eax
push 4
pop eax
imul eax, eax, 0
lea eax, [ebp + eax - 0x13d0]
mov dword [ebp - 0x790], eax
push 1
lea ecx, [ebp - 0x1130]
call fcn.1001ab3d
mov ecx, dword [ebp - 0x790]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x790]
mov ecx, dword [ebp - 0xa18]
cmp ecx, dword [eax]
jge 0x10039017
mov dword [ebp - 0x798], 1
jmp 0x1003901e
and dword [ebp - 0x798], 0
mov eax, dword [ebp - 0x798]
mov dword [ebp - 0x23c], eax
mov eax, dword [ebp - 0x23c]
mov dword [ebp - 0x1034], eax
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x1130]
call fcn.1001ab21
jmp 0x10038d81
mov dword [ebp - 0x64], 0xd2e8
mov dword [ebp - 0x4c], 0xfffffff6
push 4
lea ecx, [ebp - 0x125c]
call fcn.1001aa9f
mov byte [ebp - 4], 0x2d
push 3
lea ecx, [ebp - 0xcb4]
call fcn.1001aa9f
mov byte [ebp - 4], 0x2e
push 1
lea ecx, [ebp - 0x1320]
call fcn.1001aa9f
mov byte [ebp - 4], 0x2f
mov dword [ebp - 0x16c4], 0xd293d0ae
mov dword [ebp - 0x5c], 0
jmp 0x100390a5
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 4
jge 0x100390c1
push dword [ebp - 0x5c]
lea ecx, [ebp - 0x125c]
call fcn.1001ab3d
mov dword [eax], 0xe92f9e84
jmp 0x1003909e
mov dword [ebp - 0x5c], 0
jmp 0x100390d1
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 3
jge 0x100390ea
push dword [ebp - 0x5c]
lea ecx, [ebp - 0xcb4]
call fcn.1001ab3d
or dword [eax], 0xffffffff
jmp 0x100390ca
lea eax, [ebp - 0x5c]
push eax
push 0x2ce6
push 0
push 0x27b2
push 0x2cd5
push 0x6ac6
push 0
push 0x5067
push 0x7e3a
push 0x6ded
push 0x5369
lea eax, [ebp - 0x1320]
push eax
call fcn.10023901
add esp, 0x30
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x154c], eax
cmp dword [ebp - 0x64], 0
jne 0x10039146
xor eax, eax
inc eax
jne 0x10039146
and dword [ebp - 0xe04], 0
jmp 0x10039150
mov dword [ebp - 0xe04], 1
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x167c], eax
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x1554], eax
cmp dword [ebp - 0x4c], 0
je 0x1003917a
cmp dword [ebp - 0x4c], 0
je 0x1003917a
mov dword [ebp - 0xc7c], 1
jmp 0x10039181
and dword [ebp - 0xc7c], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0xc7c], eax
jne 0x100391a1
mov eax, 0x291260e2
test eax, eax
je 0x100391a1
mov dword [ebp - 0x1184], 1
jmp 0x100391a8
and dword [ebp - 0x1184], 0
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x1704], eax
mov eax, 0xf78d7cba
cmp eax, 0xd385e13c
jne 0x100391c9
mov dword [ebp - 0x7a0], 1
jmp 0x100391d0
and dword [ebp - 0x7a0], 0
imul eax, dword [ebp - 0x7a0], 0
inc eax
jne 0x100391e9
cmp dword [ebp - 0x4c], 0
jne 0x100391e9
and dword [ebp - 0xa20], 0
jmp 0x100391f3
mov dword [ebp - 0xa20], 1
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0xa20], eax
jne 0x1003920d
cmp dword [ebp - 0x64], 0
jne 0x1003920d
and dword [ebp - 0xe0c], 0
jmp 0x10039217
mov dword [ebp - 0xe0c], 1
mov eax, dword [ebp - 0x64]
cmp eax, dword [ebp - 0x4c]
jne 0x1003922b
mov dword [ebp - 0x7a8], 1
jmp 0x10039232
and dword [ebp - 0x7a8], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x7a8], eax
jne 0x10039249
mov dword [ebp - 0xb60], 1
jmp 0x10039250
and dword [ebp - 0xb60], 0
cmp dword [ebp - 0xb60], 0
jle 0x10039265
mov dword [ebp - 0x7b0], 1
jmp 0x1003926c
and dword [ebp - 0x7b0], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x7b0], eax
jle 0x10039283
mov dword [ebp - 0xa28], 1
jmp 0x1003928a
and dword [ebp - 0xa28], 0
cmp dword [ebp - 0xa28], 0x60131b3b
jg 0x100392a2
mov dword [ebp - 0x103c], 1
jmp 0x100392a9
and dword [ebp - 0x103c], 0
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x155c], eax
push 0
lea ecx, [ebp - 0x125c]
call fcn.1001ab3d
mov dword [eax], 0x622c
mov eax, 0x622c
test eax, eax
je 0x100392e0
cmp dword [ebp - 0x4c], 0
je 0x100392e0
mov dword [ebp - 0x7b8], 1
jmp 0x100392e7
and dword [ebp - 0x7b8], 0
cmp dword [ebp - 0x7b8], 0xffffffff
jle 0x100392fc
mov dword [ebp - 0xc00], 1
jmp 0x10039303
and dword [ebp - 0xc00], 0
cmp dword [ebp - 0xc00], 0xfffffffb
je 0x1003931d
xor eax, eax
inc eax
je 0x1003931d
mov dword [ebp - 0x7c0], 1
jmp 0x10039324
and dword [ebp - 0x7c0], 0
cmp dword [ebp - 0x7c0], 0xfffffffd
jl 0x10039339
mov dword [ebp - 0xa30], 1
jmp 0x10039340
and dword [ebp - 0xa30], 0
push 0
lea ecx, [ebp - 0xcb4]
call fcn.1001ab3d
mov ecx, dword [ebp - 0xa30]
mov dword [eax], ecx
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0xe14], eax
push 0
lea ecx, [ebp - 0x1320]
call fcn.1001ab3d
mov ecx, dword [ebp - 0xe14]
mov dword [eax], ecx
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x1684], eax
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x1564], eax
mov esi, dword [ebp - 0x4c]
push 0
lea ecx, [ebp - 0xcb4]
call fcn.1001ab3d
add esi, dword [eax]
cmp esi, 0xdd2a
jg 0x100393ab
mov dword [ebp - 0x10ec], 1
jmp 0x100393b2
and dword [ebp - 0x10ec], 0
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x16cc], eax
push 2
lea ecx, [ebp - 0xcb4]
call fcn.1001ab3d
cmp dword [eax], 0
je 0x10039409
mov byte [ebp - 0x11d], 0
movzx eax, byte [ebp - 0x11d]
test eax, eax
je 0x10039404
push 0
push 1
push 0x227b
push 0x3902
push 0x340c
push 0x24e7
push 0x63d9
call fcn.10024f24
add esp, 0x1c
jmp 0x100394b9
mov dword [ebp - 0x1b8], 0xb9fe29f1
mov esi, dword [ebp - 0x1b8]
push 0
lea ecx, [ebp - 0xcb4]
call fcn.1001ab3d
cmp esi, dword [eax]
jle 0x10039436
mov dword [ebp - 0x7c8], 1
jmp 0x1003943d
and dword [ebp - 0x7c8], 0
push 3
lea ecx, [ebp - 0x125c]
call fcn.1001ab3d
mov ecx, dword [ebp - 0x7c8]
mov dword [eax], ecx
mov dword [ebp - 0x1b8], 0
jmp 0x1003946b
mov eax, dword [ebp - 0x1b8]
dec eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 0
jl 0x100394b9
push 0x1a16
push 1
push 0x51cd
push 0x74c6
push 0
push 0x27ef
push 0x54a1
push 0x6ee8
push 0x26b5
push 0x3a78
push 0x4387
push 0x64ae
push 0x10e1
call fcn.10031a67
add esp, 0x34
jmp 0x1003945e
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x1320]
call fcn.1001ab21
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0xcb4]
call fcn.1001ab21
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x125c]
call fcn.1001ab21
mov dword [ebp - 0xb68], 0x47d9
mov dword [ebp - 0xe1c], 0x1000aa2c
cmp dword [ebp - 0xb68], 0x4a71
jle 0x100395ed
and dword [ebp - 0x348], 0
jmp 0x10039520
mov eax, dword [ebp - 0x348]
inc eax
mov dword [ebp - 0x348], eax
cmp dword [ebp - 0x348], 0x2739
jge 0x100395ed
and dword [ebp - 0x478], 0
jmp 0x10039546
mov eax, dword [ebp - 0x478]
inc eax
mov dword [ebp - 0x478], eax
cmp dword [ebp - 0x478], 0x1ac9
jge 0x100395e8
and dword [ebp - 0x350], 0
jmp 0x1003956c
mov eax, dword [ebp - 0x350]
inc eax
mov dword [ebp - 0x350], eax
cmp dword [ebp - 0x350], 0x18f6
jge 0x100395e3
and dword [ebp - 0x3f0], 0
jmp 0x1003958e
mov eax, dword [ebp - 0x3f0]
inc eax
mov dword [ebp - 0x3f0], eax
cmp dword [ebp - 0x3f0], 0x2885
jge 0x100395de
mov eax, dword [ebp - 0x348]
cdq
idiv dword [ebp - 0x478]
imul edx, dword [ebp - 0x350]
mov eax, edx
cdq
idiv dword [ebp - 0x3f0]
mov eax, edx
cdq
mov dword [ebp - 0xee8], eax
mov dword [ebp - 0xee4], edx
push dword [ebp - 0xee4]
push dword [ebp - 0xee8]
mov ecx, 0x1060def8
call fcn.1001a86e
jmp 0x10039581
jmp 0x1003955f
jmp 0x10039539
jmp 0x10039513
mov byte [ebp - 0xf0], 0
mov byte [ebp - 4], 0x30
cmp dword [ebp - 0xb68], 0x468a
jge 0x10039614
mov edx, dword [ebp - 0xe1c]
mov ecx, 0x1060def8
call fcn.1001cd79
jmp 0x10039630
mov dword [ebp - 4], 0x18
jmp 0x10039640
mov dword [ebp - 0x1044], 7
push 0x64a7
push 0xa93
lea eax, [ebp - 0x1044]
push eax
push 0x2834
push 1
push 0
call fcn.10025260
add esp, 0x18
movzx eax, byte [ebp - 0xf0]
test eax, eax
je 0x1003987d
mov dword [ebp - 0x1b0], 1
mov dword [ebp - 0x7d8], 0xef9a8551
mov dword [ebp - 0xc54], 7
mov dword [ebp - 0x224], 1
mov dword [ebp - 0x358], 0
jmp 0x100396bc
mov eax, dword [ebp - 0x358]
inc eax
mov dword [ebp - 0x358], eax
cmp dword [ebp - 0x358], 3
jge 0x100396d8
mov eax, dword [ebp - 0x358]
mov dword [ebp + eax*4 - 0x578], 0x7822
jmp 0x100396af
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x578], 0
xor eax, eax
jne 0x100397c8
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x578]
cmp ecx, dword [ebp + eax - 0x578]
jne 0x1003971e
mov eax, 0x2278213a
test eax, eax
jne 0x1003971e
and dword [ebp - 0xe24], 0
jmp 0x10039728
mov dword [ebp - 0xe24], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x578]
mov dword [ebp - 0x1570], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x578]
mov dword [ebp - 0x168c], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x578]
mov dword [ebp - 0x1580], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x578]
mov dword [ebp - 0x173c], eax
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x1590], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x578], 0
je 0x100397a1
cmp dword [ebp - 0x1b0], 0
je 0x100397a1
mov dword [ebp - 0x7d0], 1
jmp 0x100397a8
and dword [ebp - 0x7d0], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x578]
imul eax, dword [ebp - 0x7d0]
test eax, eax
jne 0x100397c8
and dword [ebp - 0xa38], 0
jmp 0x100397d2
mov dword [ebp - 0xa38], 1
mov eax, dword [ebp - 0x1b0]
cmp dword [ebp - 0xa38], eax
jge 0x100397ec
mov dword [ebp - 0x1144], 1
jmp 0x100397f3
and dword [ebp - 0x1144], 0
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x1694], eax
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x1408], eax
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x1410], eax
mov dword [ebp - 0x7d8], 0xdd972c40
mov eax, dword [ebp - 0x7d8]
mov dword [ebp - 0xc54], eax
mov eax, dword [ebp - 0xc54]
mov dword [ebp - 0x224], eax
mov dword [ebp - 0x224], 2
jmp 0x10039852
cmp dword [ebp - 0x224], 0
jl 0x10039875
mov byte [ebp - 0x155], 0
movzx eax, byte [ebp - 0x155]
test eax, eax
je 0x10039873
call dword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
jmp 0x10039845
push 0
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x135c]
call fcn.1001ab21
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x15ec]
call fcn.1001ab21
mov dword [ebp - 0x48], 1
mov dword [ebp - 0xb70], 2
push 4
lea ecx, [ebp - 0x138c]
call fcn.1001aa9f
mov dword [ebp - 4], 0x32
push 4
lea ecx, [ebp - 0x15fc]
call fcn.1001aa9f
mov byte [ebp - 4], 0x33
mov dword [ebp - 0x80], 0
jmp 0x100398e1
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 4
jge 0x100398fd
push dword [ebp - 0x80]
lea ecx, [ebp - 0x138c]
call fcn.1001ab3d
mov dword [eax], 7
jmp 0x100398da
mov dword [ebp - 0x80], 0
jmp 0x1003990d
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 4
jge 0x10039929
push dword [ebp - 0x80]
lea ecx, [ebp - 0x15fc]
call fcn.1001ab3d
mov dword [eax], 0x2afd
jmp 0x10039906
cmp dword [ebp - 0x48], 0
je 0x10039aee
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x1404], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x1420], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x1428], eax
mov eax, dword [ebp - 0x48]
cmp eax, dword [ebp - 0x48]
jl 0x10039962
mov dword [ebp - 0x7e0], 1
jmp 0x10039969
and dword [ebp - 0x7e0], 0
cmp dword [ebp - 0x7e0], 0x2c5d177c
jne 0x10039981
mov dword [ebp - 0xa40], 1
jmp 0x10039988
and dword [ebp - 0xa40], 0
mov eax, dword [ebp - 0xa40]
sub eax, dword [ebp - 0x48]
cmp eax, 0x4aaf
jle 0x100399a4
and dword [ebp - 0x810], 0
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x810], eax
jne 0x10039b0c
mov dword [ebp - 0xa58], 1
jmp 0x10039b13
and dword [ebp - 0xa58], 0
push 1
lea ecx, [ebp - 0x138c]
call fcn.1001ab3d
mov ecx, dword [ebp - 0xa58]
mov dword [eax], ecx
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x15fc]
call fcn.1001ab21
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x138c]
call fcn.1001ab21
mov dword [ebp - 0xb80], 0x43b2
mov dword [ebp - 0x105c], 0x1000aa8c
cmp dword [ebp - 0xb80], 0x467a
jle 0x10039c43
and dword [ebp - 0x368], 0
jmp 0x10039b80
mov dword [ebp - 0x34], 0xb
jmp 0x10039c53
jmp 0x10040ca7
mov eax, dword [ebp + 8]
mov dword [ebp - 0xe30], eax
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0xe38], eax
push 0x2c20
push 1
push dword [ebp - 0xe30]
push dword [ebp - 0xe38]
push 0x6d6d
call fcn.1002a237
add esp, 0x14
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret