Function at 0x1003200a
Capabilities:
Check os version
Contain obfuscated stackstrings
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100822b4
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xc7c
push esi
push edi
and dword [ebp - 0x18], 0
movzx eax, byte [ebp + 8]
test eax, eax
je 0x10037341
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x75c], 0x5b8b78a
mov dword [ebp - 0x930], 0xffffffff
mov dword [ebp - 0x484], 0x68fab8d2
mov dword [ebp - 0x5e4], 0x874acc01
mov dword [ebp - 0x764], 0x84818a88
mov dword [ebp - 0x178], 0
jmp 0x1003208b
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 1
jge 0x100320a7
mov eax, dword [ebp - 0x178]
mov dword [ebp + eax*4 - 0x790], 0xb15a8df0
jmp 0x1003207e
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x790], 0
mov dword [ebp - 0x484], 0
mov eax, dword [ebp - 0x484]
sub eax, 0x210cbedf
mov dword [ebp - 0x5e4], eax
cmp dword [ebp - 0x5e4], 0x3da550e8
jle 0x100320f1
cmp dword [ebp - 0x75c], 0
jne 0x100320f1
and dword [ebp - 0x5ec], 0
jmp 0x100320fb
mov dword [ebp - 0x5ec], 1
mov eax, dword [ebp - 0x5ec]
sub eax, dword [ebp - 0x764]
je 0x10032122
mov dword [ebp - 0x618], 0
mov eax, dword [ebp - 0x618]
inc eax
mov dword [ebp - 0x618], eax
jmp 0x10032148
mov byte [ebp - 0xaf], 0
movzx eax, byte [ebp - 0xaf]
test eax, eax
je 0x10032148
push 0x2987
push 0x636c
push 0
call fcn.100318fc
add esp, 0xc
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x598], eax
push 2
lea ecx, [ebp - 0x1f8]
call fcn.10008f33
and dword [ebp - 4], 0
or dword [ebp - 0x874], 0xffffffff
or dword [ebp - 0x870], 0xffffffff
or dword [ebp - 0x86c], 0xffffffff
or dword [ebp - 0x868], 0xffffffff
lea ecx, [ebp - 0x2ad]
call fcn.10009065
push eax
lea eax, [ebp - 0x864]
push eax
lea eax, [ebp - 0x874]
push eax
lea ecx, [ebp - 0xb58]
call fcn.10014b5a
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x264]
call fcn.10014b34
mov byte [ebp - 4], 1
mov dword [ebp - 0x68], 1
push 3
lea ecx, [ebp - 0x8ec]
call fcn.10008f33
mov byte [ebp - 4], 2
mov dword [ebp - 0x4d0], 0xfff6
mov dword [ebp - 0x5c], 0
jmp 0x100321e9
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 2
jge 0x10032205
push dword [ebp - 0x5c]
lea ecx, [ebp - 0x1f8]
call fcn.10008f7a
mov dword [eax], 1
jmp 0x100321e2
mov dword [ebp - 0x5c], 0
jmp 0x10032215
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 1
jge 0x1003222b
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x2bc], 0xe5885267
jmp 0x1003220e
lea eax, [ebp - 0x8ec]
push eax
push 0x2549
lea eax, [ebp - 0x5c]
push eax
push 0
push 0xaeb
call fcn.100312dc
add esp, 0x14
push 0
lea ecx, [ebp - 0x1f8]
call fcn.10008f7a
push 0
lea ecx, [ebp - 0x1f8]
call fcn.10008f7a
cmp dword [eax], 0
jne 0x1003228d
push 0
lea ecx, [ebp - 0x1f8]
call fcn.10008f7a
cmp dword [eax], 0
jne 0x1003228d
mov eax, 0x2314af1
test eax, eax
jne 0x1003228d
and dword [ebp - 0x620], 0
jmp 0x10032297
mov dword [ebp - 0x620], 1
push 2
lea ecx, [ebp - 0x264]
call fcn.10008f7a
mov esi, eax
push 0
lea ecx, [ebp - 0x1f8]
call fcn.10008f7a
mov esi, dword [esi]
imul esi, dword [eax]
sub esi, dword [ebp - 0x620]
push 2
lea ecx, [ebp - 0x264]
call fcn.10008f7a
cmp esi, dword [eax]
jge 0x100322db
mov dword [ebp - 0x76c], 1
jmp 0x100322e2
and dword [ebp - 0x76c], 0
mov eax, dword [ebp - 0x68]
dec eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0x992f1e5c
je 0x100322fe
mov dword [ebp - 0x628], 1
jmp 0x10032305
and dword [ebp - 0x628], 0
cmp dword [ebp - 0x628], 0x9cea445a
ja 0x1003231d
mov dword [ebp - 0x630], 1
jmp 0x10032324
and dword [ebp - 0x630], 0
push 0
lea ecx, [ebp - 0x1f8]
call fcn.10008f7a
mov eax, dword [eax]
imul eax, dword [ebp - 0x630]
test eax, eax
je 0x100325df
push 3
lea ecx, [ebp - 0xa04]
call fcn.10008f33
mov byte [ebp - 4], 3
mov dword [ebp - 0x784], 0xffffffff
mov dword [ebp - 0x154], 0x31b54653
mov dword [ebp - 0x580], 0xf74462d1
mov dword [ebp - 0x5dc], 0xfffffffc
mov dword [ebp - 0x2f8], 0xdf47b588
push 1
lea ecx, [ebp - 0x694]
call fcn.10008f33
mov byte [ebp - 4], 4
mov dword [ebp - 0x78c], 0xc8eca74b
mov dword [ebp - 0x100], 0
jmp 0x100323b9
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 3
jge 0x100323db
push dword [ebp - 0x100]
lea ecx, [ebp - 0xa04]
call fcn.10008f7a
mov dword [eax], 0x4846e1d6
jmp 0x100323ac
lea eax, [ebp - 0x694]
push eax
push 1
lea eax, [ebp - 0x100]
push eax
call fcn.100301c0
add esp, 0xc
mov eax, 0xfffb
test eax, eax
je 0x100324a5
push 2
lea ecx, [ebp - 0x264]
call fcn.10008f7a
xor ecx, ecx
sub ecx, dword [eax]
add ecx, dword [ebp - 0x154]
cmp ecx, dword [ebp - 0x154]
je 0x1003242b
mov dword [ebp - 0x648], 1
jmp 0x10032432
and dword [ebp - 0x648], 0
push 0
lea ecx, [ebp - 0x264]
call fcn.10008f7a
mov ecx, dword [ebp - 0x648]
cmp ecx, dword [eax]
jne 0x10032455
mov dword [ebp - 0x61c], 1
jmp 0x1003245c
and dword [ebp - 0x61c], 0
mov eax, dword [ebp - 0x61c]
mov dword [ebp - 0x154], eax
mov esi, dword [ebp - 0x154]
push 0
lea ecx, [ebp - 0x1f8]
call fcn.10008f7a
imul esi, dword [eax]
mov dword [ebp - 0x580], esi
mov eax, dword [ebp - 0x580]
mov dword [ebp - 0x5dc], eax
mov eax, dword [ebp - 0x5dc]
dec eax
je 0x100324a5
mov dword [ebp - 0x774], 1
jmp 0x100324ac
and dword [ebp - 0x774], 0
push 1
lea ecx, [ebp - 0x264]
call fcn.10008f7a
mov dword [ebp - 0x2f0], eax
push 2
lea ecx, [ebp - 0x264]
call fcn.10008f7a
mov ecx, dword [ebp - 0x2f0]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x2f0]
cmp dword [eax], 1
jne 0x100324ed
mov dword [ebp - 0x4a8], 1
jmp 0x100324f4
and dword [ebp - 0x4a8], 0
mov eax, dword [ebp - 0x4a8]
mov dword [ebp - 0x2f8], eax
cmp dword [ebp - 0x2f8], 0
jne 0x1003251b
mov eax, 0xc987
test eax, eax
jne 0x1003251b
and dword [ebp - 0x77c], 0
jmp 0x10032525
mov dword [ebp - 0x77c], 1
push 0
lea ecx, [ebp - 0x694]
call fcn.10008f7a
push 0
lea ecx, [ebp - 0x1f8]
call fcn.10008f7a
mov esi, eax
push 0
lea ecx, [ebp - 0x694]
call fcn.10008f7a
mov ecx, dword [esi]
cmp ecx, dword [eax]
je 0x10032560
mov dword [ebp - 0x5f0], 1
jmp 0x10032567
and dword [ebp - 0x5f0], 0
mov esi, dword [ebp - 0x5f0]
inc esi
push 0
lea ecx, [ebp - 0x694]
call fcn.10008f7a
cmp esi, dword [eax]
je 0x10032591
cmp dword [ebp - 0x784], 0
jne 0x10032591
and dword [ebp - 0x268], 0
jmp 0x1003259b
mov dword [ebp - 0x268], 1
push 0
lea ecx, [ebp - 0x694]
call fcn.10008f7a
mov ecx, dword [ebp - 0x268]
mov dword [eax], ecx
mov eax, dword [ebp - 0x268]
mov dword [ebp - 0x78c], eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x694]
call fcn.10008f75
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xa04]
call fcn.10008f75
jmp 0x10032930
push 4
lea ecx, [ebp - 0x6a0]
call fcn.10008f33
mov byte [ebp - 4], 5
mov dword [ebp - 0xf8], 0
jmp 0x10032609
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 1
jge 0x10032625
mov eax, dword [ebp - 0xf8]
mov dword [ebp + eax*4 - 0x90], 1
jmp 0x100325fc
push 0x3ed8
push 1
push 0x1328
push 0x701b
lea eax, [ebp - 0xf8]
push eax
push 0xf49
push 0x690d
lea eax, [ebp - 0x6a0]
push eax
call fcn.10030231
add esp, 0x20
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x90]
cmp dword [ebp - 0x68], eax
jg 0x10032674
mov dword [ebp - 0x300], 1
jmp 0x1003267b
and dword [ebp - 0x300], 0
cmp dword [ebp - 0x300], 1
jae 0x10032690
mov dword [ebp - 0x4b0], 1
jmp 0x10032697
and dword [ebp - 0x4b0], 0
cmp dword [ebp - 0x4b0], 0x75fc
je 0x100326af
mov dword [ebp - 0x308], 1
jmp 0x100326b6
and dword [ebp - 0x308], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x90]
cmp dword [ebp - 0x308], eax
jl 0x100326d7
mov dword [ebp - 0x588], 1
jmp 0x100326de
and dword [ebp - 0x588], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x90]
cmp dword [ebp - 0x588], eax
jge 0x100326ff
mov dword [ebp - 0x310], 1
jmp 0x10032706
and dword [ebp - 0x310], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x90]
cmp dword [ebp - 0x310], eax
jne 0x10032727
mov dword [ebp - 0x4b8], 1
jmp 0x1003272e
and dword [ebp - 0x4b8], 0
push 2
lea ecx, [ebp - 0x6a0]
call fcn.10008f7a
mov ecx, dword [ebp - 0x4b8]
cmp ecx, dword [eax]
jg 0x10032751
mov dword [ebp - 0x318], 1
jmp 0x10032758
and dword [ebp - 0x318], 0
push 3
lea ecx, [ebp - 0x6a0]
call fcn.10008f7a
mov ecx, dword [ebp - 0x318]
cmp ecx, dword [eax]
jl 0x1003278d
push 0
lea ecx, [ebp - 0x6a0]
call fcn.10008f7a
cmp dword [eax], 0
je 0x1003278d
mov dword [ebp - 0x794], 1
jmp 0x10032794
and dword [ebp - 0x794], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x90], 0
je 0x100327b4
xor eax, eax
je 0x100327b4
mov dword [ebp - 0x608], 1
jmp 0x100327bb
and dword [ebp - 0x608], 0
push 1
lea ecx, [ebp - 0x264]
call fcn.10008f7a
mov ecx, dword [ebp - 0x608]
cmp ecx, dword [eax]
je 0x100327de
mov dword [ebp - 0x79c], 1
jmp 0x100327e5
and dword [ebp - 0x79c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x90]
mov dword [ebp - 0x93c], eax
push 2
lea ecx, [ebp - 0x264]
call fcn.10008f7a
push 4
pop ecx
imul ecx, ecx, 0
mov esi, dword [ebp + ecx - 0x90]
add esi, dword [eax]
push 2
lea ecx, [ebp - 0x264]
call fcn.10008f7a
mov dword [eax], esi
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x944], eax
push 2
lea ecx, [ebp - 0x264]
call fcn.10008f7a
cmp dword [eax], 0xd9679ff5
jae 0x1003284d
mov dword [ebp - 0x320], 1
jmp 0x10032854
and dword [ebp - 0x320], 0
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x4c0], eax
push 0
lea ecx, [ebp - 0x1f8]
call fcn.10008f7a
mov ecx, dword [ebp - 0x4c0]
mov dword [eax], ecx
mov eax, dword [ebp - 0x320]
sub eax, dword [ebp - 0x68]
mov ecx, dword [ebp - 0x4c0]
sub ecx, eax
je 0x100328a3
push 1
lea ecx, [ebp - 0x6a0]
call fcn.10008f7a
cmp dword [eax], 0
je 0x100328a3
mov dword [ebp - 0x328], 1
jmp 0x100328aa
and dword [ebp - 0x328], 0
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0x328], eax
jne 0x100328c1
mov dword [ebp - 0x590], 1
jmp 0x100328c8
and dword [ebp - 0x590], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x90]
cmp dword [ebp - 0x590], eax
je 0x100328e9
mov dword [ebp - 0x330], 1
jmp 0x100328f0
and dword [ebp - 0x330], 0
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0x330], eax
jle 0x10032907
mov dword [ebp - 0x4c8], 1
jmp 0x1003290e
and dword [ebp - 0x4c8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x4c8]
mov dword [ebp + eax - 0x2bc], ecx
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x6a0]
call fcn.10008f75
push 1
lea ecx, [ebp - 0x1f8]
call fcn.10008f7a
cmp dword [eax], 0xe62
jl 0x10032951
mov dword [ebp - 0x2b8], 1
jmp 0x10032958
and dword [ebp - 0x2b8], 0
push 1
lea ecx, [ebp - 0x8ec]
call fcn.10008f7a
mov ecx, dword [ebp - 0x2b8]
mov dword [eax], ecx
cmp dword [ebp - 0x2b8], 0x5c9b65fe
jge 0x10032985
mov dword [ebp - 0x338], 1
jmp 0x1003298c
and dword [ebp - 0x338], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2bc]
cmp eax, dword [ebp - 0x338]
jge 0x100329ad
mov dword [ebp - 0x610], 1
jmp 0x100329b4
and dword [ebp - 0x610], 0
push 0
lea ecx, [ebp - 0x1f8]
call fcn.10008f7a
mov eax, dword [eax]
dec eax
mov dword [ebp - 0x340], eax
push 0
lea ecx, [ebp - 0x264]
call fcn.10008f7a
mov ecx, dword [ebp - 0x340]
mov dword [eax], ecx
mov eax, dword [ebp - 0x610]
mov dword [ebp - 0x4d0], eax
push 4
pop eax
imul eax, eax, 0
imul ecx, dword [ebp - 0x340], 0xb304
add ecx, dword [ebp - 0x4d0]
cmp ecx, dword [ebp + eax - 0x2bc]
jge 0x10032a16
mov dword [ebp - 0x348], 1
jmp 0x10032a1d
and dword [ebp - 0x348], 0
push 0
lea ecx, [ebp - 0x1f8]
call fcn.10008f7a
mov ecx, dword [ebp - 0x348]
mov dword [eax], ecx
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x8ec]
call fcn.10008f75
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x264]
call fcn.10008f75
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1f8]
call fcn.10008f75
mov eax, dword [ebp - 0x598]
movzx eax, word [eax]
cmp eax, 0x5a4d
je 0x10032a74
jmp 0x10037373
mov eax, dword [ebp - 0x598]
mov ecx, dword [ebp - 0x2c]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0xc8], ecx
mov dword [ebp - 0xc4], 0xfffffffa
mov dword [ebp - 0x150], 0xfffffffc
mov dword [ebp - 0xbc], 1
mov dword [ebp - 0x4e0], 0xffffffff
mov dword [ebp - 0x370], 0x9786
mov dword [ebp - 0x954], 0xffffffff
mov dword [ebp - 0x7c], 0
jmp 0x10032ad2
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 1
jge 0x10032ae8
mov eax, dword [ebp - 0x7c]
mov dword [ebp + eax*4 - 0x7ac], 0xfbfc75da
jmp 0x10032acb
mov dword [ebp - 0x7c], 0
jmp 0x10032af8
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 1
jge 0x10032b0e
mov eax, dword [ebp - 0x7c]
mov dword [ebp + eax*4 - 0x2a8], 0xfda6c2e3
jmp 0x10032af1
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0
jne 0x10032bef
mov eax, dword [ebp - 0xbc]
sub eax, 0x444b0a54
cmp eax, dword [ebp - 0xbc]
je 0x10032b46
mov dword [ebp - 0x350], 1
jmp 0x10032b4d
and dword [ebp - 0x350], 0
cmp dword [ebp - 0x350], 0xfff8
je 0x10032b65
mov dword [ebp - 0x4d8], 1
jmp 0x10032b6c
and dword [ebp - 0x4d8], 0
cmp dword [ebp - 0x4d8], 1
jg 0x10032b81
mov dword [ebp - 0x358], 1
jmp 0x10032b88
and dword [ebp - 0x358], 0
mov eax, dword [ebp - 0x358]
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0xbc]
neg eax
cmp eax, dword [ebp - 0xc4]
jge 0x10032bb0
mov dword [ebp - 0x5fc], 1
jmp 0x10032bb7
and dword [ebp - 0x5fc], 0
mov eax, dword [ebp - 0x5fc]
add eax, 0x79cca3f3
cmp eax, dword [ebp - 0xc4]
jge 0x10032bd6
mov dword [ebp - 0x360], 1
jmp 0x10032bdd
and dword [ebp - 0x360], 0
cmp dword [ebp - 0x360], 0xffffffff
jge 0x10032bef
and dword [ebp - 0x7a4], 0
jmp 0x10032bf9
mov dword [ebp - 0x7a4], 1
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x150], eax
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x95c], eax
mov dword [ebp - 0x4e0], 0x7ddbf4df
push 6
pop eax
test eax, eax
je 0x10032c37
cmp dword [ebp - 0x4e0], 0
je 0x10032c37
mov dword [ebp - 0x270], 1
jmp 0x10032c3e
and dword [ebp - 0x270], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x270]
mov dword [ebp + eax - 0x7ac], ecx
cmp dword [ebp - 0x270], 0xfffffff8
jg 0x10032c66
mov dword [ebp - 0x368], 1
jmp 0x10032c6d
and dword [ebp - 0x368], 0
mov eax, dword [ebp - 0xc4]
add eax, dword [ebp - 0x368]
cmp eax, dword [ebp - 0xc4]
jl 0x10032c93
cmp dword [ebp - 0x370], 0
jne 0x10032c93
and dword [ebp - 0x5a0], 0
jmp 0x10032c9d
mov dword [ebp - 0x5a0], 1
mov eax, dword [ebp - 0x5a0]
sub eax, dword [ebp - 0x370]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x2a8], eax
mov dword [ebp - 0x150], 1
push 4
pop eax
imul eax, eax, 0
imul eax, dword [ebp + eax - 0x2a8], 0xffff
cmp dword [ebp - 0x150], eax
jl 0x10032ce5
mov dword [ebp - 0x4e8], 1
jmp 0x10032cec
and dword [ebp - 0x4e8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x4e8]
mov dword [ebp + eax - 0x2a8], ecx
mov eax, dword [ebp - 0xc8]
cmp dword [eax], 0x4550
je 0x10032d12
jmp 0x10037373
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xc8]
lea eax, [ecx + eax + 0x78]
mov dword [ebp - 0x54], eax
push 3
lea ecx, [ebp - 0xa34]
call fcn.10008f33
mov dword [ebp - 4], 6
mov dword [ebp - 0x964], 0xbecba2af
mov dword [ebp - 0x96c], 8
mov dword [ebp - 0x974], 2
mov dword [ebp - 0x97c], 0
push 1
lea ecx, [ebp - 0xa24]
call fcn.10008f33
mov byte [ebp - 4], 7
mov dword [ebp - 0x984], 0xfda0246c
mov dword [ebp - 0x98c], 0x8f3b8c10
push 1
lea ecx, [ebp - 0xa14]
call fcn.10008f33
mov byte [ebp - 4], 8
mov dword [ebp - 0x994], 0xfa66
mov dword [ebp - 0x7b4], 0x5bb5a275
lea eax, [ebp - 0xa34]
push eax
push 0x178d
lea eax, [ebp - 0x58]
push eax
push 1
push 0x1947
call fcn.100303e8
add esp, 0x14
push 0x68e0
lea eax, [ebp - 0x58]
push eax
push 0x15f0
push 0x248f
push 0x677e
lea eax, [ebp - 0xa24]
push eax
push 1
push 0x3589
push 0x50c5
push 0x306f
call fcn.10030492
add esp, 0x28
mov dword [ebp - 0x58], 0
jmp 0x10032e12
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 1
jge 0x10032e2e
push dword [ebp - 0x58]
lea ecx, [ebp - 0xa14]
call fcn.10008f7a
mov dword [eax], 0xfffffffe
jmp 0x10032e0b
mov dword [ebp - 0x58], 0
jmp 0x10032e3e
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 4
jge 0x10032e54
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0xc88], 0x3053
jmp 0x10032e37
push 0
lea eax, [ebp - 0x7b4]
push eax
push 0x2a5d
push 0x1f46
call fcn.10031d83
add esp, 0x10
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xa14]
call fcn.10008f75
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xa24]
call fcn.10008f75
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa34]
call fcn.10008f75
mov eax, dword [ebp - 0x54]
cmp dword [eax + 4], 0
jne 0x10032eaa
jmp 0x10037373
push 2
lea ecx, [ebp - 0xa44]
call fcn.10008f33
mov dword [ebp - 4], 9
mov dword [ebp - 0x190], 0x94a18885
mov dword [ebp - 0x99c], 0
mov dword [ebp - 0x9a4], 0x7a98815c
mov dword [ebp - 0x9ac], 1
mov dword [ebp - 0x9b4], 0x2cb3a3fc
mov dword [ebp - 0x888], 0x869393dd
mov dword [ebp - 0x884], 0x869393dd
mov dword [ebp - 0x880], 0x869393dd
mov dword [ebp - 0x87c], 0x869393dd
lea ecx, [ebp - 0x291]
call fcn.10009065
push eax
lea eax, [ebp - 0x878]
push eax
lea eax, [ebp - 0x888]
push eax
lea ecx, [ebp - 0xb98]
call fcn.10014b5a
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xb14]
call fcn.10014b34
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x9bc], 0x6dc99220
mov dword [ebp - 0x78], 0
jmp 0x10032f6b
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 2
jge 0x10032f87
push dword [ebp - 0x78]
lea ecx, [ebp - 0xa44]
call fcn.10008f7a
mov dword [eax], 0x9b3198a8
jmp 0x10032f64
mov dword [ebp - 0x78], 0
jmp 0x10032f97
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 3
jge 0x10032fad
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0xbcc], 0x21b0ae28
jmp 0x10032f90
mov dword [ebp - 0x190], 1
jmp 0x10032fc6
mov eax, dword [ebp - 0x190]
dec eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 0
jl 0x1003303e
mov dword [ebp - 0x9c4], 0
mov dword [ebp - 0x9cc], 0x693e932
mov dword [ebp - 0x9d4], 1
mov dword [ebp - 0x378], 0x5378470e
mov dword [ebp - 0x158], 0
jmp 0x10033010
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 2
jge 0x1003302c
mov eax, dword [ebp - 0x158]
mov dword [ebp + eax*4 - 0xba8], 1
jmp 0x10033003
mov eax, dword [ebp - 0x378]
dec eax
mov dword [ebp - 0x378], eax
jmp 0x10032fb9
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xb14]
call fcn.10008f75
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa44]
call fcn.10008f75
and dword [ebp - 0x28], 0
mov eax, dword [ebp - 0xc8]
movzx eax, word [eax + 0x14]
mov ecx, dword [ebp - 0xc8]
lea eax, [ecx + eax + 0x18]
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x9dc], 7
mov dword [ebp - 0x9e4], 0x872fa4ad
mov dword [ebp - 0x9ec], 7
mov dword [ebp - 0x7bc], 0xb8bffbef
mov dword [ebp - 0x180], 0
jmp 0x100330bb
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 1
jge 0x100330d7
mov eax, dword [ebp - 0x180]
mov dword [ebp + eax*4 - 0x644], 0xffffffff
jmp 0x100330ae
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x644], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x7bc]
mov dword [ebp + eax - 0x644], ecx
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0xc8]
push eax
lea eax, [ebp - 0x28]
push eax
push 0x965
lea eax, [ebp - 0x13c]
push eax
push 1
push 0x458d
push 0x7b0
call fcn.100305ee
add esp, 0x20
mov dword [ebp - 0x9f4], 1
mov byte [ebp - 0xb3], 0
movzx eax, byte [ebp - 0xb3]
test eax, eax
je 0x1003314c
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov byte [ebp - 0xb1], 0
movzx eax, byte [ebp - 0xb1]
test eax, eax
je 0x10033186
push 0
push 0x1d68
push 0x5631
push 0x2632
push 0x1da1
push 0x4459
push 0x4781
call fcn.100310cc
add esp, 0x1c
cmp dword [ebp - 0x28], 0
jne 0x10033191
jmp 0x10037373
mov dword [ebp - 0x160], 0x2b165808
push 2
lea ecx, [ebp - 0x2d4]
call fcn.10008f33
mov dword [ebp - 4], 0xb
push 3
lea ecx, [ebp - 0x7cc]
call fcn.10008f33
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x4f8], 0x260d
mov dword [ebp - 0xabc], 0xfbc3
mov dword [ebp - 0x80], 0
jmp 0x100331e4
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 2
jge 0x100331fd
push dword [ebp - 0x80]
lea ecx, [ebp - 0x2d4]
call fcn.10008f7a
or dword [eax], 0xffffffff
jmp 0x100331dd
mov dword [ebp - 0x80], 0
jmp 0x1003320d
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 3
jge 0x10033229
push dword [ebp - 0x80]
lea ecx, [ebp - 0x7cc]
call fcn.10008f7a
mov dword [eax], 1
jmp 0x10033206
push 0
lea ecx, [ebp - 0x7cc]
call fcn.10008f7a
mov dword [ebp - 0x278], eax
mov eax, dword [ebp - 0x278]
mov eax, dword [eax]
mov dword [ebp - 0x820], eax
push 0
lea ecx, [ebp - 0x2d4]
call fcn.10008f7a
mov eax, dword [eax]
mov dword [ebp - 0x83c], eax
mov eax, dword [ebp - 0x278]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x278]
mov dword [ecx], eax
mov eax, dword [ebp - 0x820]
cmp eax, dword [ebp - 0x83c]
je 0x1003328a
mov dword [ebp - 0x380], 1
jmp 0x10033291
and dword [ebp - 0x380], 0
cmp dword [ebp - 0x380], 0x5d7
jge 0x100332a9
mov dword [ebp - 0x4f0], 1
jmp 0x100332b0
and dword [ebp - 0x4f0], 0
push 1
lea ecx, [ebp - 0x2d4]
call fcn.10008f7a
mov ecx, dword [ebp - 0x4f0]
add ecx, dword [eax]
je 0x100332d4
push 0
lea ecx, [ebp - 0x2d4]
call fcn.10008f7a
mov eax, 0xef6e229e
sub eax, 0xd96711db
je 0x100332f5
mov eax, 0x223
test eax, eax
je 0x100332f5
mov dword [ebp - 0x388], 1
jmp 0x100332fc
and dword [ebp - 0x388], 0
push 1
lea ecx, [ebp - 0x2d4]
call fcn.10008f7a
mov ecx, dword [ebp - 0x388]
cmp ecx, dword [eax]
jg 0x10033331
push 1
lea ecx, [ebp - 0x2d4]
call fcn.10008f7a
cmp dword [eax], 0
je 0x10033331
mov dword [ebp - 0x5a8], 1
jmp 0x10033338
and dword [ebp - 0x5a8], 0
cmp dword [ebp - 0x5a8], 0xfecafe8
jge 0x10033350
mov dword [ebp - 0x390], 1
jmp 0x10033357
and dword [ebp - 0x390], 0
push 1
lea ecx, [ebp - 0x2d4]
call fcn.10008f7a
mov ecx, dword [ebp - 0x390]
mov dword [eax], ecx
mov eax, dword [ebp - 0x4f8]
cmp dword [ebp - 0x160], eax
jl 0x10033398
push 0
lea ecx, [ebp - 0x7cc]
call fcn.10008f7a
cmp dword [eax], 0
je 0x10033398
mov dword [ebp - 0x80c], 1
jmp 0x1003339f
and dword [ebp - 0x80c], 0
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0xac4], eax
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0xacc], eax
cmp dword [ebp - 0x160], 0
je 0x100333eb
mov byte [ebp - 0x96], 0
movzx eax, byte [ebp - 0x96]
test eax, eax
je 0x100333e6
push 0
push 0x78e7
push 0x6442
call fcn.10030e5f
add esp, 0xc
jmp 0x100334d2
mov dword [ebp - 0x780], 0xf1e2
and dword [ebp - 0x8b0], 0
and dword [ebp - 0x8ac], 0
and dword [ebp - 0x8a8], 0
and dword [ebp - 0x8a4], 0
lea ecx, [ebp - 0x289]
call fcn.10009065
push eax
lea eax, [ebp - 0x8a0]
push eax
lea eax, [ebp - 0x8b0]
push eax
lea ecx, [ebp - 0xb90]
call fcn.10014b5a
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xb2c]
call fcn.10014b34
mov byte [ebp - 4], 0xd
mov dword [ebp - 0xae8], 0xfffffffd
mov dword [ebp - 0x6b0], 0xfffffff7
mov dword [ebp - 0x754], 0
mov byte [ebp - 0x97], 0
push 0x6abf
lea eax, [ebp - 0x97]
push eax
push 0
push 0x2ce2
call fcn.10031c17
add esp, 0x10
push 1
lea eax, [ebp - 0x7cc]
push eax
lea eax, [ebp - 0x780]
push eax
lea eax, [ebp - 0x754]
push eax
lea eax, [ebp - 0x2d4]
push eax
push 0x55fc
lea eax, [ebp - 0x4f8]
push eax
lea eax, [ebp - 0x6b0]
push eax
call fcn.10030824
add esp, 0x20
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xb2c]
call fcn.10008f75
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x7cc]
call fcn.10008f75
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2d4]
call fcn.10008f75
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x28]
add ecx, dword [eax]
add ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0xd4], 0x28ea3888
mov dword [ebp - 0x9c], 0xfffffffe
mov dword [ebp - 0x2a4], 1
mov dword [ebp - 0x168], 9
mov dword [ebp - 0x88], 0xa6c6
mov dword [ebp - 0x824], 6
push 1
lea ecx, [ebp - 0x848]
call fcn.10008f33
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x520], 0xfffffff9
mov dword [ebp - 0xaf0], 0xdaf7
push 0x6c69
lea eax, [ebp - 0xaf8]
push eax
push 0x28a6
push 0x209f
lea eax, [ebp - 0x848]
push eax
push 0
call fcn.10031a44
add esp, 0x18
mov eax, dword [ebp - 0x9c]
sub eax, 4
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0xd4]
cmp dword [ebp - 0x88], eax
jge 0x100335b2
mov dword [ebp - 0x398], 1
jmp 0x100335b9
and dword [ebp - 0x398], 0
cmp dword [ebp - 0x398], 0xcef3
jne 0x100335d1
mov dword [ebp - 0x604], 1
jmp 0x100335d8
and dword [ebp - 0x604], 0
mov eax, dword [ebp - 0xd4]
cmp dword [ebp - 0x604], eax
jg 0x100335f2
mov dword [ebp - 0x3a0], 1
jmp 0x100335f9
and dword [ebp - 0x3a0], 0
cmp dword [ebp - 0x3a0], 0x796
jne 0x10033611
mov dword [ebp - 0x500], 1
jmp 0x10033618
and dword [ebp - 0x500], 0
mov eax, dword [ebp - 0xd4]
cmp dword [ebp - 0x500], eax
jg 0x10033632
mov dword [ebp - 0x3a8], 1
jmp 0x10033639
and dword [ebp - 0x3a8], 0
mov eax, dword [ebp - 0xd4]
add eax, dword [ebp - 0x3a8]
je 0x100336df
mov dword [ebp - 0x7fc], 3
mov dword [ebp - 0x788], 0xfffffff9
mov dword [ebp - 0x6b8], 0x4e266bc5
lea eax, [ebp - 0x7fc]
push eax
push 0x72b3
push 1
lea eax, [ebp - 0x2a4]
push eax
lea eax, [ebp - 0x6b8]
push eax
lea eax, [ebp - 0x788]
push eax
lea eax, [ebp - 0x168]
push eax
lea eax, [ebp - 0xd4]
push eax
lea eax, [ebp - 0x9c]
push eax
call fcn.1003096a
add esp, 0x24
mov byte [ebp - 0xb5], 0
lea eax, [ebp - 0xb5]
push eax
push 0x1267
push 0x912
push 0x780d
push 1
push 0x2c08
push 0x678
call fcn.10030b1a
add esp, 0x1c
jmp 0x10033873
mov dword [ebp - 0xcc], 0x1afd208d
mov dword [ebp - 0x3c0], 0x7e48ffc8
mov dword [ebp - 0x1a0], 0
jmp 0x1003370c
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 3
jge 0x10033728
mov eax, dword [ebp - 0x1a0]
mov dword [ebp + eax*4 - 0xb44], 0xfa0b5bcd
jmp 0x100336ff
cmp dword [ebp - 0xcc], 0
je 0x10033860
cmp dword [ebp - 0xcc], 0xfffffffd
jle 0x1003374a
mov dword [ebp - 0x5b0], 1
jmp 0x10033751
and dword [ebp - 0x5b0], 0
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xb44], 0xd4b
cmp dword [ebp - 0x5b0], 0xd4b
jle 0x1003377a
mov dword [ebp - 0x508], 1
jmp 0x10033781
and dword [ebp - 0x508], 0
mov eax, dword [ebp - 0x88]
mov ecx, dword [ebp - 0xcc]
lea eax, [eax + ecx + 0x2446b8cc]
sub eax, dword [ebp - 0xcc]
cmp eax, dword [ebp - 0xcc]
jle 0x100337ae
mov dword [ebp - 0x3b0], 1
jmp 0x100337b5
and dword [ebp - 0x3b0], 0
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0x3b0], eax
jge 0x100337cf
mov dword [ebp - 0x6c0], 1
jmp 0x100337d6
and dword [ebp - 0x6c0], 0
mov eax, dword [ebp - 0x168]
mov dword [ebp - 0xb00], eax
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0x168], eax
jge 0x10033802
cmp dword [ebp - 0xd4], 0
jne 0x10033802
and dword [ebp - 0x3b8], 0
jmp 0x1003380c
mov dword [ebp - 0x3b8], 1
mov eax, dword [ebp - 0x508]
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x9c]
sub eax, dword [ebp - 0x3b8]
cmp eax, dword [ebp - 0xcc]
jg 0x10033838
mov dword [ebp - 0x624], 1
jmp 0x1003383f
and dword [ebp - 0x624], 0
mov eax, dword [ebp - 0x624]
mov dword [ebp - 0x3c0], eax
cmp dword [ebp - 0x3c0], 0
je 0x10033860
mov dword [ebp - 0x510], 1
jmp 0x10033867
and dword [ebp - 0x510], 0
mov eax, dword [ebp - 0x510]
mov dword [ebp - 0x2a4], eax
mov eax, dword [ebp - 0x2a4]
neg eax
cmp eax, dword [ebp - 0x9c]
jne 0x1003388f
mov dword [ebp - 0x3c8], 1
jmp 0x10033896
and dword [ebp - 0x3c8], 0
mov eax, dword [ebp - 0x9c]
cmp dword [ebp - 0x3c8], eax
je 0x100338b0
mov dword [ebp - 0x5b8], 1
jmp 0x100338b7
and dword [ebp - 0x5b8], 0
push 0
lea ecx, [ebp - 0x848]
call fcn.10008f7a
mov ecx, dword [ebp - 0x5b8]
cmp ecx, dword [eax]
jl 0x100338da
mov dword [ebp - 0x3d0], 1
jmp 0x100338e1
and dword [ebp - 0x3d0], 0
mov eax, dword [ebp - 0x824]
mov ecx, 0xde48
sub ecx, dword [ebp - 0x3d0]
sub eax, ecx
neg eax
cmp eax, dword [ebp - 0x9c]
jge 0x1003390a
mov dword [ebp - 0x518], 1
jmp 0x10033911
and dword [ebp - 0x518], 0
push 0
lea ecx, [ebp - 0x848]
call fcn.10008f7a
mov ecx, dword [ebp - 0x518]
cmp ecx, dword [eax]
jle 0x10033934
mov dword [ebp - 0x3d8], 1
jmp 0x1003393b
and dword [ebp - 0x3d8], 0
cmp dword [ebp - 0x3d8], 0x89ae
jle 0x10033953
mov dword [ebp - 0x60c], 1
jmp 0x1003395a
and dword [ebp - 0x60c], 0
mov eax, dword [ebp - 0x88]
cmp eax, dword [ebp - 0x60c]
jg 0x10033974
mov dword [ebp - 0x3e0], 1
jmp 0x1003397b
and dword [ebp - 0x3e0], 0
mov eax, dword [ebp - 0x3e0]
mov dword [ebp - 0x520], eax
mov eax, dword [ebp - 0x520]
cmp dword [ebp - 0x88], eax
jge 0x100339a1
mov dword [ebp - 0x3e8], 1
jmp 0x100339a8
and dword [ebp - 0x3e8], 0
cmp dword [ebp - 0x3e8], 0
je 0x100339bd
mov dword [ebp - 0x5c0], 1
jmp 0x100339c4
and dword [ebp - 0x5c0], 0
cmp dword [ebp - 0x5c0], 0x58b4
jle 0x100339dc
mov dword [ebp - 0x3f0], 1
jmp 0x100339e3
and dword [ebp - 0x3f0], 0
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0x3f0], eax
jne 0x100339fd
mov dword [ebp - 0x528], 1
jmp 0x10033a04
and dword [ebp - 0x528], 0
mov eax, dword [ebp - 0x528]
mov dword [ebp - 0x168], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x848]
call fcn.10008f75
xor ecx, ecx
call fcn.10018074
push eax
call fcn.1006a2ea
pop ecx
mov dword [ebp - 0xb08], 0xb743
mov dword [ebp - 0x6c8], 0xc75286e8
mov dword [ebp - 0x6e0], 0xff55e00f
mov dword [ebp - 0x280], 0x961c0f80
mov dword [ebp - 0xaa0], 5
mov dword [ebp - 0x908], 0x9ec4279c
mov dword [ebp - 0x6a4], 0
push 3
lea ecx, [ebp - 0x688]
call fcn.10008f33
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x538], 0xa8b060d2
mov dword [ebp - 0x188], 0xd39c7c6f
mov dword [ebp - 0x3f8], 0x6fc6088b
mov dword [ebp - 0x94c], 0xffffffff
mov dword [ebp - 0x6d0], 0xfffffffd
mov dword [ebp - 0x6d8], 0
mov dword [ebp - 0x798], 0xb92b2c22
mov dword [ebp - 0x6c], 0
jmp 0x10033add
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 3
jge 0x10033af9
push dword [ebp - 0x6c]
lea ecx, [ebp - 0x688]
call fcn.10008f7a
mov dword [eax], 1
jmp 0x10033ad6
mov dword [ebp - 0x6c], 0
jmp 0x10033b09
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 2
jge 0x10033b1f
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0x2c8], 0xfffffffe
jmp 0x10033b02
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2c8]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x2c8], eax
mov dword [ebp - 0x3f8], 0x142b
cmp dword [ebp - 0x3f8], 0
jne 0x10033b59
mov dword [ebp - 0x634], 1
jmp 0x10033b60
and dword [ebp - 0x634], 0
mov eax, dword [ebp - 0x188]
dec eax
mov dword [ebp - 0x188], eax
mov eax, dword [ebp - 0x188]
cmp eax, dword [ebp - 0x634]
jge 0x10033b87
mov dword [ebp - 0x400], 1
jmp 0x10033b8e
and dword [ebp - 0x400], 0
mov eax, dword [ebp - 0x400]
mov dword [ebp - 0x6c8], eax
push 1
lea ecx, [ebp - 0x688]
call fcn.10008f7a
cmp dword [eax], 0
je 0x10033d44
cmp dword [ebp - 0x538], 0
jne 0x10033d27
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2c8]
mov dword [ebp - 0x6a4], eax
push 1
lea ecx, [ebp - 0x688]
call fcn.10008f7a
mov esi, eax
push 1
lea ecx, [ebp - 0x688]
call fcn.10008f7a
mov ecx, dword [esi]
sub ecx, dword [eax]
cmp ecx, dword [ebp - 0x188]
je 0x10033c04
mov dword [ebp - 0x530], 1
jmp 0x10033c0b
and dword [ebp - 0x530], 0
cmp dword [ebp - 0x530], 0x98fe831e
ja 0x10033c23
mov dword [ebp - 0x408], 1
jmp 0x10033c2a
and dword [ebp - 0x408], 0
mov eax, dword [ebp - 0x280]
cmp dword [ebp - 0x408], eax
jle 0x10033c44
mov dword [ebp - 0x5c8], 1
jmp 0x10033c4b
and dword [ebp - 0x5c8], 0
mov eax, dword [ebp - 0x5c8]
mov dword [ebp - 0x280], eax
mov eax, dword [ebp - 0x6d0]
cmp dword [ebp - 0x280], eax
jne 0x10033c71
mov dword [ebp - 0x804], 1
jmp 0x10033c78
and dword [ebp - 0x804], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2c8], 0xfffffff9
jl 0x10033c94
mov dword [ebp - 0x410], 1
jmp 0x10033c9b
and dword [ebp - 0x410], 0
cmp dword [ebp - 0x410], 8
jbe 0x10033cb0
mov dword [ebp - 0x418], 1
jmp 0x10033cb7
and dword [ebp - 0x418], 0
mov eax, dword [ebp - 0x538]
cmp dword [ebp - 0x418], eax
jl 0x10033cd1
mov dword [ebp - 0x614], 1
jmp 0x10033cd8
and dword [ebp - 0x614], 0
cmp dword [ebp - 0x614], 0x52f1
je 0x10033cf6
cmp dword [ebp - 0x6d8], 0
jne 0x10033cf6
and dword [ebp - 0x2b4], 0
jmp 0x10033d00
mov dword [ebp - 0x2b4], 1
push 1
lea ecx, [ebp - 0x688]
call fcn.10008f7a
mov ecx, dword [ebp - 0x2b4]
mov dword [eax], ecx
cmp dword [ebp - 0x2b4], 8
jne 0x10033d27
and dword [ebp - 0x420], 0
jmp 0x10033d31
mov dword [ebp - 0x420], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x420]
sub ecx, dword [ebp + eax - 0x2c8]
cmp dword [ebp - 0x798], 0
je 0x10033d5d
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2c8], 0
jne 0x10033d6a
xor eax, eax
jne 0x10033d6a
and dword [ebp - 0x540], 0
jmp 0x10033d74
mov dword [ebp - 0x540], 1
mov eax, dword [ebp - 0x540]
mov dword [ebp - 0x6e0], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x688]
call fcn.10008f75
push 1
lea ecx, [ebp - 0x2e0]
call fcn.10008f33
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x11c], 0x9b467bb1
mov dword [ebp - 0x460], 0xb2d3f577
mov dword [ebp - 0x38], 0
jmp 0x10033dce
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 1
jge 0x10033dea
push dword [ebp - 0x38]
lea ecx, [ebp - 0x2e0]
call fcn.10008f7a
mov dword [eax], 0x2799
jmp 0x10033dc7
mov dword [ebp - 0x38], 0
jmp 0x10033dfa
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 4
jge 0x10033e10
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x67c], 1
jmp 0x10033df3
mov dword [ebp - 0x38], 0
jmp 0x10033e20
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 3
jge 0x10033e36
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0xbf0], 7
jmp 0x10033e19
mov dword [ebp - 0x24], 0
jmp 0x10033e46
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jl 0x10034087
mov dword [ebp - 0x64], 0x914d2edc
mov dword [ebp - 0x81c], 0x948214d2
mov byte [ebp - 0x98], 0
movzx eax, byte [ebp - 0x98]
test eax, eax
je 0x10033e7b
push 0
call dword [sym.imp.USER32.dll_CharNextW]
mov byte [ebp - 0xae], 0
push 0
push 0x4f5a
lea eax, [ebp - 0xae]
push eax
call fcn.10030d16
add esp, 0xc
mov dword [ebp - 0x64], 0
jmp 0x10033ea8
mov eax, dword [ebp - 0x64]
dec eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0
jl 0x10034082
mov dword [ebp - 0x4c], 1
mov dword [ebp - 0x4c], 0
jmp 0x10033ec9
mov eax, dword [ebp - 0x4c]
dec eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jl 0x10033f08
push 0x2498
push 0
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x11c]
push eax
lea eax, [ebp - 0x2e0]
push eax
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x81c]
push eax
call fcn.10031e6b
add esp, 0x1c
cmp dword [ebp - 0x11c], 0
je 0x10033f06
jmp 0x10033ec2
jmp 0x10033ec2
mov dword [ebp - 0x4c], 0
jmp 0x10033f18
mov eax, dword [ebp - 0x4c]
dec eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jl 0x1003407d
mov dword [ebp - 0x7a0], 0
push 3
lea ecx, [ebp - 0x8c8]
call fcn.10008f33
mov byte [ebp - 4], 0x11
push 0xe49
lea eax, [ebp - 0x8c8]
push eax
lea eax, [ebp - 0x9e8]
push eax
push 0
call fcn.10031056
add esp, 0x10
cmp dword [ebp - 0x64], 0
je 0x10033f75
cmp dword [ebp - 0x11c], 0
je 0x10033f75
mov dword [ebp - 0x428], 1
jmp 0x10033f7c
and dword [ebp - 0x428], 0
push dword [ebp - 0x64]
lea ecx, [ebp - 0x2e0]
call fcn.10008f7a
xor eax, eax
inc eax
sub eax, dword [ebp - 0x428]
mov dword [ebp - 0x6e8], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x6e8]
mov dword [ebp + eax - 0x67c], ecx
push dword [ebp - 0x64]
lea ecx, [ebp - 0x2e0]
call fcn.10008f7a
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x4c], eax
jl 0x10033fce
mov dword [ebp - 0x5d0], 1
jmp 0x10033fd5
and dword [ebp - 0x5d0], 0
push dword [ebp - 0x64]
lea ecx, [ebp - 0x2e0]
call fcn.10008f7a
mov ecx, dword [ebp - 0x5d0]
imul ecx, dword [eax]
cmp ecx, dword [ebp - 0x7a0]
je 0x10034000
mov dword [ebp - 0x430], 1
jmp 0x10034007
and dword [ebp - 0x430], 0
cmp dword [ebp - 0x430], 0xbca3396d
ja 0x1003401f
mov dword [ebp - 0x548], 1
jmp 0x10034026
and dword [ebp - 0x548], 0
mov esi, dword [ebp - 0x548]
sub esi, dword [ebp - 0x4c]
push dword [ebp - 0x64]
lea ecx, [ebp - 0x2e0]
call fcn.10008f7a
cmp esi, dword [eax]
je 0x1003404d
mov dword [ebp - 0x438], 1
jmp 0x10034054
and dword [ebp - 0x438], 0
push 0
lea ecx, [ebp - 0x8c8]
call fcn.10008f7a
mov ecx, dword [ebp - 0x438]
mov dword [eax], ecx
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x8c8]
call fcn.10008f75
jmp 0x10033f11
jmp 0x10033ea1
jmp 0x10033e3f
mov dword [ebp - 0x24], 3
jmp 0x10034097
cmp dword [ebp - 0x24], 0
jl 0x100342e1
mov dword [ebp - 0x288], 0
mov byte [ebp - 0xad], 0
movzx eax, byte [ebp - 0xad]
test eax, eax
je 0x100340d1
push 1
push 0x5040
push 0x6c99
call fcn.10030ca4
add esp, 0xc
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x288]
cmp dword [ebp + eax*4 - 0x67c], ecx
jle 0x100340ef
mov dword [ebp - 0x62c], 1
jmp 0x100340f6
and dword [ebp - 0x62c], 0
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x67c]
cmp dword [ebp - 0x62c], eax
jne 0x10034114
mov dword [ebp - 0x6f0], 1
jmp 0x1003411b
and dword [ebp - 0x6f0], 0
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x67c]
mov dword [ebp - 0x910], eax
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0xaa8], eax
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x460]
cmp dword [ebp + eax*4 - 0x67c], ecx
jne 0x10034155
mov dword [ebp - 0x440], 1
jmp 0x1003415c
and dword [ebp - 0x440], 0
cmp dword [ebp - 0x440], 0xfffffff9
jne 0x10034171
mov dword [ebp - 0x550], 1
jmp 0x10034178
and dword [ebp - 0x550], 0
cmp dword [ebp - 0x550], 1
jne 0x1003419a
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0x67c], 0
je 0x1003419a
mov dword [ebp - 0x448], 1
jmp 0x100341a1
and dword [ebp - 0x448], 0
push 0
lea ecx, [ebp - 0x2e0]
call fcn.10008f7a
mov ecx, dword [ebp - 0x448]
cmp ecx, dword [eax]
jg 0x100341c4
mov dword [ebp - 0x5d8], 1
jmp 0x100341cb
and dword [ebp - 0x5d8], 0
push 0
lea ecx, [ebp - 0x2e0]
call fcn.10008f7a
mov ecx, dword [ebp - 0x5d8]
cmp ecx, dword [eax]
je 0x100341ee
mov dword [ebp - 0x450], 1
jmp 0x100341f5
and dword [ebp - 0x450], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x67c]
cmp dword [ebp - 0x450], eax
jle 0x1003421e
mov eax, 0xb55e
test eax, eax
je 0x1003421e
mov dword [ebp - 0x558], 1
jmp 0x10034225
and dword [ebp - 0x558], 0
mov eax, dword [ebp - 0x11c]
cmp dword [ebp - 0x558], eax
je 0x1003423f
mov dword [ebp - 0x458], 1
jmp 0x10034246
and dword [ebp - 0x458], 0
mov eax, dword [ebp - 0x288]
cmp dword [ebp - 0x458], eax
jl 0x10034260
mov dword [ebp - 0x5f4], 1
jmp 0x10034267
and dword [ebp - 0x5f4], 0
cmp dword [ebp - 0x5f4], 0x6302082
je 0x1003427f
mov dword [ebp - 0x7e4], 1
jmp 0x10034286
and dword [ebp - 0x7e4], 0
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x460]
cmp dword [ebp + eax*4 - 0x67c], ecx
jle 0x100342a4
mov dword [ebp - 0x560], 1
jmp 0x100342ab
and dword [ebp - 0x560], 0
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x67c]
cmp dword [ebp - 0x560], eax
je 0x100342c9
mov dword [ebp - 0x468], 1
jmp 0x100342d0
and dword [ebp - 0x468], 0
mov eax, dword [ebp - 0x468]
mov dword [ebp - 0x288], eax
jmp 0x10034090
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2e0]
call fcn.10008f75
mov byte [ebp - 0x258], 8
mov byte [ebp - 0x257], 0xcc
mov byte [ebp - 0x256], 3
mov byte [ebp - 0x255], 7
mov byte [ebp - 0x254], 0
mov byte [ebp - 0x253], 6
mov byte [ebp - 0x252], 9
mov byte [ebp - 0x251], 1
mov byte [ebp - 0x250], 6
mov byte [ebp - 0x24f], 1
mov byte [ebp - 0x24e], 1
mov byte [ebp - 0x24d], 4
mov byte [ebp - 0x24c], 2
mov byte [ebp - 0x24b], 2
mov byte [ebp - 0x24a], 7
mov byte [ebp - 0x249], 1
mov byte [ebp - 0x248], 4
mov byte [ebp - 0x247], 0xe
mov byte [ebp - 0x246], 0x4b
mov byte [ebp - 0x245], 0x25
mov byte [ebp - 0x244], 0xf7
mov byte [ebp - 0x243], 0x2e
mov byte [ebp - 0x242], 0x88
mov byte [ebp - 0x241], 0xb3
mov byte [ebp - 0x240], 0x38
mov byte [ebp - 0x23f], 0xbe
mov byte [ebp - 0x23e], 0xb8
mov byte [ebp - 0x23d], 0xfd
mov byte [ebp - 0x23c], 0xc6
mov byte [ebp - 0x23b], 0xce
mov byte [ebp - 0x23a], 0xd2
mov byte [ebp - 0x239], 0x67
mov byte [ebp - 0x238], 0x24
mov byte [ebp - 0x237], 0x15
mov byte [ebp - 0x236], 0x3d
mov byte [ebp - 0x235], 0x55
mov byte [ebp - 0x234], 0x98
mov byte [ebp - 0x233], 0xaa
mov byte [ebp - 0x232], 0xa9
mov byte [ebp - 0x231], 8
mov byte [ebp - 0x230], 0xa4
mov byte [ebp - 0x22f], 0x77
mov byte [ebp - 0x22e], 0xd2
mov byte [ebp - 0x22d], 0xa8
mov byte [ebp - 0x22c], 0x79
mov byte [ebp - 0x22b], 0x2a
mov byte [ebp - 0x22a], 0xb3
mov byte [ebp - 0x229], 0x80
mov byte [ebp - 0x228], 0xda
mov byte [ebp - 0x227], 0xd3
mov byte [ebp - 0x226], 0xb8
mov byte [ebp - 0x225], 0xa3
mov byte [ebp - 0x224], 0xaf
mov byte [ebp - 0x223], 0x13
mov byte [ebp - 0x222], 0x54
mov byte [ebp - 0x221], 0x17
mov byte [ebp - 0x220], 0x25
mov byte [ebp - 0x21f], 0xef
mov byte [ebp - 0x21e], 0xf3
mov byte [ebp - 0x21d], 0xab
mov byte [ebp - 0x21c], 0x26
mov byte [ebp - 0x21b], 0xd0
mov byte [ebp - 0x21a], 0xc2
mov byte [ebp - 0x219], 0x20
mov byte [ebp - 0x218], 0xf
mov byte [ebp - 0x217], 0x21
mov byte [ebp - 0x216], 0xb2
mov byte [ebp - 0x215], 0x3b
mov byte [ebp - 0x214], 0x5e
mov byte [ebp - 0x213], 0x18
mov byte [ebp - 0x212], 0xb9
mov byte [ebp - 0x211], 0xfa
mov byte [ebp - 0x210], 0x4c
mov byte [ebp - 0x20f], 0x49
mov byte [ebp - 0x20e], 0xc1
mov byte [ebp - 0x20d], 4
mov byte [ebp - 0x20c], 0xfb
mov byte [ebp - 0x20b], 0xc9
mov byte [ebp - 0x20a], 0x30
mov byte [ebp - 0x209], 0xe3
mov byte [ebp - 0x208], 0xc9
mov byte [ebp - 0x207], 0x32
mov byte [ebp - 0x206], 0x8c
mov byte [ebp - 0x205], 0x6c
mov byte [ebp - 0x204], 0x57
mov byte [ebp - 0x203], 0xb9
mov byte [ebp - 0x202], 0x21
mov byte [ebp - 0x201], 0x97
mov byte [ebp - 0x200], 0xce
mov byte [ebp - 0x1ff], 0xb1
mov byte [ebp - 0x1fe], 0xac
mov byte [ebp - 0x1fd], 0x58
mov byte [ebp - 0x1fc], 0xa3
mov byte [ebp - 0x1fb], 0x32
mov byte [ebp - 0x1fa], 5
mov byte [ebp - 0x1f9], 9
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x258]
or eax, 0xfc
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x258]
and ecx, 0xfc
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x258]
mov byte [ebp + ecx - 0x654], al
mov dword [ebp - 0x30], 2
and dword [ebp - 0x10c], 0
jmp 0x100345e6
mov eax, dword [ebp - 0x30]
inc eax
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0x60
jae 0x100346c4
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x258]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x30], eax
jne 0x10034630
mov eax, dword [ebp - 0x30]
movzx eax, byte [ebp + eax - 0x258]
inc eax
mov dword [ebp - 0x10c], eax
mov eax, dword [ebp - 0x30]
movzx eax, byte [ebp + eax - 0x258]
mov ecx, dword [ebp - 0x30]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x30], eax
jmp 0x100345de
mov eax, dword [ebp - 0x30]
movzx eax, byte [ebp + eax - 0x257]
mov ecx, dword [ebp - 0x30]
sub ecx, dword [ebp - 0x10c]
movzx ecx, byte [ebp + ecx - 0x25a]
movsx ecx, byte [ebp + ecx - 0x654]
add eax, ecx
mov ecx, dword [ebp - 0x30]
movzx ecx, byte [ebp + ecx - 0x257]
mov edx, dword [ebp - 0x30]
sub edx, dword [ebp - 0x10c]
movzx edx, byte [ebp + edx - 0x25a]
movsx edx, byte [ebp + edx - 0x654]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x30]
movzx ecx, byte [ebp + ecx - 0x257]
mov edx, dword [ebp - 0x30]
sub edx, dword [ebp - 0x10c]
movzx edx, byte [ebp + edx - 0x25a]
movsx edx, byte [ebp + edx - 0x654]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x30]
movzx ecx, byte [ebp + ecx - 0x258]
mov byte [ebp + ecx - 0x654], al
and dword [ebp - 0x10c], 0
jmp 0x100345de
xor eax, eax
inc eax
imul eax, eax, 0xa
mov byte [ebp + eax - 0x654], 0
lea eax, [ebp - 0x654]
push eax
lea ecx, [ebp - 0xc50]
call fcn.1003794d
mov dword [ebp - 0x6f8], eax
mov eax, dword [ebp - 0x6f8]
mov dword [ebp - 0x7a8], eax
mov dword [ebp - 4], 0x12
push 0xa
xor edx, edx
mov ecx, dword [ebp - 0x7a8]
call fcn.10018034
pop ecx
mov dword [ebp - 0x750], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc50]
call fcn.100379d5
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x170], 1
mov dword [ebp - 0x488], 0
push 1
lea ecx, [ebp - 0x8bc]
call fcn.10008f33
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x70], 0
jmp 0x10034761
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 1
jge 0x10034774
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0x50], 0
jmp 0x1003475a
mov dword [ebp - 0x70], 0
jmp 0x10034784
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 1
jge 0x1003479d
push dword [ebp - 0x70]
lea ecx, [ebp - 0x8bc]
call fcn.10008f7a
or dword [eax], 0xffffffff
jmp 0x1003477d
mov byte [ebp - 0x95], 0
push 1
lea eax, [ebp - 0x95]
push eax
push 0xf36
call fcn.10030d16
add esp, 0xc
mov dword [ebp - 0x3c], 0
jmp 0x100347ca
cmp dword [ebp - 0x3c], 0
jl 0x10034a4a
push 4
lea ecx, [ebp - 0x860]
call fcn.10008f33
mov byte [ebp - 4], 0x14
mov dword [ebp - 0x7e8], 0x48e6bae0
push 0xeae
push 0x65a8
push 0x62f7
push 1
push 0x2e97
lea eax, [ebp - 0x860]
push eax
lea eax, [ebp - 0x918]
push eax
push 0x5a3c
call fcn.10030d72
add esp, 0x20
mov eax, 0xfff7
test eax, eax
je 0x1003486f
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp + eax*4 - 0x50]
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 0x92e3f915
je 0x1003484e
mov dword [ebp - 0x5e0], 1
jmp 0x10034855
and dword [ebp - 0x5e0], 0
imul eax, dword [ebp - 0x5e0], 0xb382
test eax, eax
je 0x1003486f
mov dword [ebp - 0x470], 1
jmp 0x10034876
and dword [ebp - 0x470], 0
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x3c]
mov ecx, dword [ebp + ecx*4 - 0x50]
add ecx, dword [ebp - 0x470]
cmp dword [ebp + eax*4 - 0x50], ecx
jg 0x10034898
mov dword [ebp - 0x568], 1
jmp 0x1003489f
and dword [ebp - 0x568], 0
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp + eax*4 - 0x50]
imul eax, dword [ebp - 0x568]
mov ecx, dword [ebp - 0x3c]
cmp eax, dword [ebp + ecx*4 - 0x50]
je 0x100348c2
mov dword [ebp - 0x478], 1
jmp 0x100348c9
and dword [ebp - 0x478], 0
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp + eax*4 - 0x50]
add eax, dword [ebp - 0x478]
cmp eax, 0xe2e4ed
jge 0x100348e9
mov dword [ebp - 0x5f8], 1
jmp 0x100348f0
and dword [ebp - 0x5f8], 0
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp + eax*4 - 0x50]
cmp eax, dword [ebp - 0x5f8]
jl 0x10034915
mov eax, dword [ebp - 0x3c]
cmp dword [ebp + eax*4 - 0x50], 0
je 0x10034915
mov dword [ebp - 0x480], 1
jmp 0x1003491c
and dword [ebp - 0x480], 0
mov eax, dword [ebp - 0x480]
sub eax, 0x7b46
mov ecx, dword [ebp - 0x3c]
cmp eax, dword [ebp + ecx*4 - 0x50]
jl 0x1003493c
mov dword [ebp - 0x700], 1
jmp 0x10034943
and dword [ebp - 0x700], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x50]
dec eax
cmp eax, 0x8254981c
jb 0x10034961
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x8bc]
call fcn.10008f75
and dword [ebp - 0x198], 0
jmp 0x10034a6f
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 0xb
jae 0x10034a88
mov eax, dword [ebp - 0x198]
mov byte [ebp + eax - 0x654], 0
jmp 0x10034a62
mov dword [ebp - 0x48], 0x76f5020f
mov dword [ebp - 0x710], 0
mov dword [ebp - 0x148], 0
jmp 0x10034ab2
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 4
jge 0x10034ace
mov eax, dword [ebp - 0x148]
mov dword [ebp + eax*4 - 0x834], 7
jmp 0x10034aa5
mov dword [ebp - 0x48], 3
jmp 0x10034ade
cmp dword [ebp - 0x48], 0
jl 0x10034b11
mov dword [ebp - 0x498], 0x2c58fb77
mov eax, dword [ebp - 0x498]
dec eax
mov dword [ebp - 0x498], eax
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x48]
mov eax, dword [ebp + eax*4 - 0x834]
mov dword [ebp + ecx*4 - 0x834], eax
jmp 0x10034ad7
cmp dword [ebp - 0x48], 0
je 0x10034b82
mov byte [ebp - 0x9d], 0
movzx eax, byte [ebp - 0x9d]
test eax, eax
je 0x10037373
push 0
push 0xb0a
push 0x1633
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetCharABCWidthsW]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret