Function at 0x10019e47
Capabilities:
Get common file path
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100706c4
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x720
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 0x1c]
test eax, eax
je 0x1001d51c
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x448], eax
lea eax, [ebp + 0x10]
mov dword [ebp - 0x404], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x4c8], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x4c0], eax
mov eax, dword [ebp - 0x404]
movzx eax, byte [eax]
test eax, eax
je 0x1001d4bd
mov eax, dword [ebp - 0x4c0]
mov dword [ebp - 0x1ac], eax
mov eax, dword [ebp - 0x4c8]
mov dword [ebp - 0x78], eax
and dword [ebp - 0x30], 0
mov dword [ebp - 0x84], 0x90ac204e
push 1
lea ecx, [ebp - 0x508]
call fcn.10021bd6
and dword [ebp - 4], 0
mov dword [ebp - 0x144], 0
jmp 0x10019efa
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 1
jge 0x10019f1c
push dword [ebp - 0x144]
lea ecx, [ebp - 0x508]
call fcn.10021c54
mov dword [eax], 0xa290be44
jmp 0x10019eed
lea eax, [ebp - 0x508]
push eax
push 0x60f3
lea eax, [ebp - 0x84]
push eax
push 1
push 0
call fcn.10018d1a
add esp, 0x14
mov dword [ebp - 0x84], 0
jmp 0x10019f54
mov eax, dword [ebp - 0x84]
dec eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0xffffffe9
jne 0x1001a05b
mov dword [ebp - 0xb4], 0x95aad853
push 1
lea ecx, [ebp - 0x59c]
call fcn.10021bd6
mov byte [ebp - 4], 1
mov dword [ebp - 0x100], 0
jmp 0x10019f95
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 1
jge 0x10019fb7
push dword [ebp - 0x100]
lea ecx, [ebp - 0x59c]
call fcn.10021c54
mov dword [eax], 0x105fa2ef
jmp 0x10019f88
mov dword [ebp - 0xb4], 0
jmp 0x10019fd0
mov eax, dword [ebp - 0xb4]
dec eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0
jl 0x1001a047
mov dword [ebp - 0x4d0], 9
mov dword [ebp - 0x4d8], 4
lea eax, [ebp - 0xb4]
push eax
push 0
push 0x1bc5
push 1
lea eax, [ebp - 0x508]
push eax
push 0x64ac
push 1
push 0x5722
lea eax, [ebp - 0x59c]
push eax
push 0x14d1
lea eax, [ebp - 0x4d0]
push eax
push 0x6ba7
lea eax, [ebp - 0x4d8]
push eax
call fcn.1001403b
add esp, 0x34
cmp dword [ebp - 0x84], 0
je 0x1001a042
jmp 0x10019fc3
jmp 0x10019fc3
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x59c]
call fcn.10021c38
jmp 0x10019f47
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x508]
call fcn.10021c38
mov dword [ebp - 0xd0], 0x7ce5
push 1
push 0x6683
push 0x5ea3
push 1
push 0x3f15
push 0x78ef
lea eax, [ebp - 0xd0]
push eax
push 0x6349
call fcn.10011b10
add esp, 0x20
mov dword [ebp - 0xd0], 0x12
jmp 0x1001a0b9
mov eax, dword [ebp - 0xd0]
dec eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0xffffffff
jne 0x1001a100
mov dword [ebp - 0x4f8], 0x248c66f5
cmp dword [ebp - 0x4f8], 0
je 0x1001a0e8
push 0x86a
push 1
push 1
call fcn.10016839
add esp, 0xc
jmp 0x1001a0fe
push 0x2778
push 1
push 0x31d1
push 0
call fcn.1001e5a8
add esp, 0x10
jmp 0x1001a0ac
push 0x24f7
push 1
push 1
push 0x343f
push 0x62a1
call fcn.10016903
add esp, 0x14
push 1
push 1
lea eax, [ebp - 0x1ac]
push eax
push 0x7cfd
lea eax, [ebp - 0x1a4]
push eax
push 1
push 0x5b50
push 0x55de
push 0x38db
push 0x37c3
call fcn.10016e1d
add esp, 0x28
mov eax, dword [ebp - 0x1a4]
movzx eax, word [eax]
cmp eax, 0x5a4d
je 0x1001a263
mov dword [ebp - 0x108], 0
mov dword [ebp - 0x140], 0
jmp 0x1001a187
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 4
jge 0x1001a1a3
mov eax, dword [ebp - 0x140]
mov dword [ebp + eax*4 - 0x730], 0xb2c21353
jmp 0x1001a17a
mov byte [ebp - 0x7b], 0
push 0x1ae7
push 1
lea eax, [ebp - 0x7b]
push eax
push 1
call fcn.10011ee1
add esp, 0x10
mov dword [ebp - 0x108], 0
jmp 0x1001a1d5
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 3
jg 0x1001a258
mov dword [ebp - 0x148], 0x17be1879
mov dword [ebp - 0x148], 0
jmp 0x1001a201
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 3
jg 0x1001a248
mov byte [ebp - 0x80], 0
push 0x6cf0
lea eax, [ebp - 0x80]
push eax
push 0x7893
push 0x1be
push 0x2309
push 0x6fff
push 0x19c0
push 0
push 0x3621
push 0x4fe0
push 1
call fcn.10018678
add esp, 0x2c
jmp 0x1001a1f4
push 1
push 1
call fcn.10017041
pop ecx
pop ecx
jmp 0x1001a1c8
mov eax, dword [ebp - 0x78]
and dword [eax], 0
jmp 0x1001d53f
mov dword [ebp - 0x28], 7
mov dword [ebp - 0x40], 1
mov dword [ebp - 0xbc], 0x1d84
push 2
lea ecx, [ebp - 0x590]
call fcn.10021bd6
mov dword [ebp - 4], 2
mov dword [ebp - 0x460], 0xfffffffc
push 0x4787
push 0x13e8
push 0x7d44
lea eax, [ebp - 0x590]
push eax
push 1
lea eax, [ebp - 0x610]
push eax
push 1
push 0x349c
push 0x344e
call fcn.1001209b
add esp, 0x24
mov eax, dword [ebp - 0x28]
sub eax, 0x7d3bb8a2
cmp eax, 0xfffc
jae 0x1001a2e7
mov dword [ebp - 0x258], 1
jmp 0x1001a2ee
and dword [ebp - 0x258], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x258], eax
jg 0x1001a305
mov dword [ebp - 0x3a4], 1
jmp 0x1001a30c
and dword [ebp - 0x3a4], 0
mov eax, dword [ebp - 0x28]
imul eax, dword [ebp - 0x3a4]
test eax, eax
jne 0x1001a329
cmp dword [ebp - 0x28], 0
jne 0x1001a329
and dword [ebp - 0x4ec], 0
jmp 0x1001a333
mov dword [ebp - 0x4ec], 1
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x680], eax
cmp dword [ebp - 0x28], 0
jne 0x1001a346
cmp dword [ebp - 0x40], 0
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x62c], eax
cmp dword [ebp - 0x28], 0x8700
jl 0x1001a364
mov dword [ebp - 0x3ac], 1
jmp 0x1001a36b
and dword [ebp - 0x3ac], 0
cmp dword [ebp - 0x3ac], 0xffff
jbe 0x1001a383
mov dword [ebp - 0x3b4], 1
jmp 0x1001a38a
and dword [ebp - 0x3b4], 0
cmp dword [ebp - 0x3b4], 0
je 0x1001a3a2
cmp dword [ebp - 0x28], 0
jne 0x1001a3a2
and dword [ebp - 0x388], 0
jmp 0x1001a3ac
mov dword [ebp - 0x388], 1
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x388]
jge 0x1001a3c3
mov dword [ebp - 0x39c], 1
jmp 0x1001a3ca
and dword [ebp - 0x39c], 0
cmp dword [ebp - 0x39c], 0xbc21
jg 0x1001a3e2
mov dword [ebp - 0x1e4], 1
jmp 0x1001a3e9
and dword [ebp - 0x1e4], 0
mov eax, dword [ebp - 0xbc]
imul eax, dword [ebp - 0x1e4]
cmp eax, 1
ja 0x1001a407
mov dword [ebp - 0x2d4], 1
jmp 0x1001a40e
and dword [ebp - 0x2d4], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x2d4], eax
jge 0x1001a425
mov dword [ebp - 0x1ec], 1
jmp 0x1001a42c
and dword [ebp - 0x1ec], 0
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x1ec]
lea eax, [ecx + eax - 0x28ad]
imul eax, dword [ebp - 0x40]
test eax, eax
je 0x1001a451
push 0
push 1
call fcn.1001794b
pop ecx
pop ecx
jmp 0x1001a4be
mov dword [ebp - 0x40], 0
jmp 0x1001a461
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 1
jg 0x1001a4be
push 1
lea eax, [ebp - 0x28]
push eax
push 1
call fcn.10012315
add esp, 0xc
mov dword [ebp - 0xbc], 0
jmp 0x1001a490
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 1
jg 0x1001a4bc
push 0x2a7d
push 1
lea eax, [ebp - 0x28]
push eax
push 0x4e2b
push 1
push 1
push 0x3131
call fcn.100170d1
add esp, 0x1c
jmp 0x1001a483
jmp 0x1001a45a
push 1
push 0x2fdb
lea eax, [ebp - 0x590]
push eax
lea eax, [ebp - 0x460]
push eax
push 0x6021
push 1
call fcn.1001728e
add esp, 0x18
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x590]
call fcn.10021c38
mov eax, dword [ebp - 0x1a4]
mov ecx, dword [ebp - 0x1ac]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0xb8], ecx
mov dword [ebp - 0xf4], 0
mov dword [ebp - 0xf0], 0
mov dword [ebp - 0xec], 0
mov dword [ebp - 0xe8], 0
mov dword [ebp - 0x9c], 0x7762406c
mov dword [ebp - 0x50], 6
mov dword [ebp - 0x3f4], 0x9d30cd94
mov dword [ebp - 0x364], 0x2d056b0c
push 3
lea ecx, [ebp - 0x4e8]
call fcn.10021bd6
mov dword [ebp - 4], 3
mov dword [ebp - 0xd4], 0
jmp 0x1001a580
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 4
jge 0x1001a59c
mov eax, dword [ebp - 0xd4]
mov dword [ebp + eax*4 - 0x3d4], 0xc85f70ad
jmp 0x1001a573
push 1
push 0x54cf
push 0x10cd
lea eax, [ebp - 0x4e8]
push eax
push 0
lea eax, [ebp - 0xd4]
push eax
push 0x4566
push 0x793c
call fcn.10017c45
add esp, 0x20
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0xf4], 3
jmp 0x1001a5f5
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xf4]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0xf4], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xf4], 0
jl 0x1001aee9
mov dword [ebp - 0x18c], 0x1978e60d
push 3
lea ecx, [ebp - 0x520]
call fcn.10021bd6
mov byte [ebp - 4], 4
mov dword [ebp - 0x1c4], 3
mov dword [ebp - 0x3c], 0
jmp 0x1001a63d
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 1
jge 0x1001a650
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x18], 0x70a77c87
jmp 0x1001a636
mov dword [ebp - 0x3c], 0
jmp 0x1001a660
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 3
jge 0x1001a67c
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x520]
call fcn.10021c54
mov dword [eax], 1
jmp 0x1001a659
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x18], 0
jmp 0x1001a6a1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x18], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x18], 3
jg 0x1001acc4
mov dword [ebp - 0x8c], 0xfffd
mov dword [ebp - 0xc4], 0xa90ef874
mov dword [ebp - 0x110], 1
or eax, 0xffffffff
je 0x1001a72f
mov eax, 0x1cd43096
test eax, eax
je 0x1001a71e
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xf4]
mov eax, dword [ebp + eax*4 - 0x3d4]
push 4
pop ecx
shl ecx, 1
imul eax, dword [ebp + ecx - 0xf4]
test eax, eax
je 0x1001a71e
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x3d4], 0
je 0x1001a71e
mov dword [ebp - 0x34c], 1
jmp 0x1001a725
and dword [ebp - 0x34c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18]
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xf4]
mov eax, dword [ebp + eax*4 - 0x3d4]
mov dword [ebp - 0x648], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xf4]
mov dword [ebp - 0x634], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x8c]
cmp dword [ebp + eax - 0xf4], ecx
jne 0x1001a787
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xf4], 0
jne 0x1001a787
and dword [ebp - 0x1f4], 0
jmp 0x1001a791
mov dword [ebp - 0x1f4], 1
cmp dword [ebp - 0x1f4], 0x442
jle 0x1001a7a9
mov dword [ebp - 0x2dc], 1
jmp 0x1001a7b0
and dword [ebp - 0x2dc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18]
cmp dword [ebp - 0x2dc], eax
je 0x1001a7ce
mov dword [ebp - 0x3e4], 1
jmp 0x1001a7d5
and dword [ebp - 0x3e4], 0
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x5d4], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xf4]
mov eax, dword [ebp + eax*4 - 0x3d4]
mov dword [ebp - 0x5d8], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0xf4]
cmp dword [ebp + eax - 0x18], ecx
jne 0x1001a81e
mov dword [ebp - 0x1fc], 1
jmp 0x1001a825
and dword [ebp - 0x1fc], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xf4]
mov eax, dword [ebp + eax*4 - 0x3d4]
cmp eax, dword [ebp - 0x1fc]
jne 0x1001a84c
mov dword [ebp - 0x384], 1
jmp 0x1001a853
and dword [ebp - 0x384], 0
mov eax, dword [ebp - 0x384]
mov dword [ebp - 0x18c], eax
mov dword [ebp - 0x8c], 0
jmp 0x1001a878
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 3
jg 0x1001acbf
push 4
lea ecx, [ebp - 0x3c4]
call fcn.10021bd6
mov byte [ebp - 4], 5
push 2
lea ecx, [ebp - 0x584]
call fcn.10021bd6
mov byte [ebp - 4], 6
push 0x53e6
push 0x484d
push 1
push 0x37dd
push 0x5747
lea eax, [ebp - 0x494]
push eax
push 1
push 0x35af
push 1
push 0x5aef
lea eax, [ebp - 0x3c4]
push eax
push 0x261a
push 0x48b5
call fcn.10017442
add esp, 0x34
push 1
lea eax, [ebp - 0x584]
push eax
push 0x19e6
lea eax, [ebp - 0x494]
push eax
push 0x7e49
push 1
push 0
push 0x4c7c
call fcn.10015de6
add esp, 0x20
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18]
mov dword [ebp - 0xc4], eax
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x5e0], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xf4]
mov dword [ebp - 0x5e8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3d4], 0xacc167df
ja 0x1001a96a
cmp dword [ebp - 0x18c], 0
jne 0x1001a96a
and dword [ebp - 0x204], 0
jmp 0x1001a974
mov dword [ebp - 0x204], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18]
add eax, dword [ebp - 0x204]
mov dword [ebp - 0x2e4], eax
push 2
lea ecx, [ebp - 0x3c4]
call fcn.10021c54
mov ecx, dword [ebp - 0x2e4]
mov dword [eax], ecx
mov eax, dword [ebp - 0x2e4]
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x9c]
cmp dword [ebp - 0xc4], eax
jg 0x1001a9c5
mov dword [ebp - 0x20c], 1
jmp 0x1001a9cc
and dword [ebp - 0x20c], 0
mov eax, dword [ebp - 0x20c]
mov dword [ebp - 0x110], eax
push 2
lea ecx, [ebp - 0x3c4]
call fcn.10021c54
cmp dword [eax], 0
je 0x1001ab46
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0xc4]
cmp dword [ebp - 0x50], eax
jl 0x1001aa0c
mov dword [ebp - 0x354], 1
jmp 0x1001aa13
and dword [ebp - 0x354], 0
mov eax, dword [ebp - 0x110]
cmp dword [ebp - 0x354], eax
jl 0x1001aa2d
mov dword [ebp - 0x2f4], 1
jmp 0x1001aa34
and dword [ebp - 0x2f4], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x18], 0
je 0x1001aa56
mov eax, 0x7135
test eax, eax
je 0x1001aa56
mov dword [ebp - 0x214], 1
jmp 0x1001aa5d
and dword [ebp - 0x214], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18]
cmp dword [ebp - 0x214], eax
jl 0x1001aa7b
mov dword [ebp - 0x2ec], 1
jmp 0x1001aa82
and dword [ebp - 0x2ec], 0
push 2
lea ecx, [ebp - 0x3c4]
call fcn.10021c54
mov eax, dword [eax]
mov ecx, dword [ebp - 0x2ec]
lea eax, [ecx + eax + 0x988a]
test eax, eax
jne 0x1001aab4
cmp dword [ebp - 0xc4], 0
jne 0x1001aab4
and dword [ebp - 0x21c], 0
jmp 0x1001aabe
mov dword [ebp - 0x21c], 1
cmp dword [ebp - 0x21c], 0x9f7c1ae2
jne 0x1001aad6
mov dword [ebp - 0x3b0], 1
jmp 0x1001aadd
and dword [ebp - 0x3b0], 0
mov esi, dword [ebp - 0x18c]
imul esi, dword [ebp - 0x3b0]
push 0
lea ecx, [ebp - 0x520]
call fcn.10021c54
cmp esi, dword [eax]
je 0x1001ab07
mov dword [ebp - 0x224], 1
jmp 0x1001ab0e
and dword [ebp - 0x224], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x224]
sub ecx, dword [ebp + eax - 0xf4]
imul ecx, dword [ebp - 0x2f4]
mov dword [ebp - 0x110], ecx
mov eax, dword [ebp - 0x110]
add eax, 0xffff
je 0x1001ab46
mov dword [ebp - 0x22c], 1
jmp 0x1001ab4d
and dword [ebp - 0x22c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xf4]
cmp dword [ebp - 0x22c], eax
jge 0x1001ab6d
mov dword [ebp - 0x35c], 1
jmp 0x1001ab74
and dword [ebp - 0x35c], 0
push 3
lea ecx, [ebp - 0x3c4]
call fcn.10021c54
mov ecx, dword [ebp - 0x35c]
cmp ecx, dword [eax]
je 0x1001ab97
mov dword [ebp - 0x234], 1
jmp 0x1001ab9e
and dword [ebp - 0x234], 0
cmp dword [ebp - 0x234], 0xffffffff
jne 0x1001abb3
mov dword [ebp - 0x2fc], 1
jmp 0x1001abba
and dword [ebp - 0x2fc], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xf4]
mov eax, dword [ebp + eax*4 - 0x3d4]
cmp dword [ebp - 0x2fc], eax
jne 0x1001abe1
mov dword [ebp - 0x23c], 1
jmp 0x1001abe8
and dword [ebp - 0x23c], 0
mov eax, dword [ebp - 0x23c]
add eax, 0xe871
jne 0x1001ac01
mov dword [ebp - 0x390], 1
jmp 0x1001ac08
and dword [ebp - 0x390], 0
push 2
lea ecx, [ebp - 0x3c4]
call fcn.10021c54
mov ecx, dword [ebp - 0x390]
cmp ecx, dword [eax]
je 0x1001ac2b
mov dword [ebp - 0x244], 1
jmp 0x1001ac32
and dword [ebp - 0x244], 0
push 2
lea ecx, [ebp - 0x3c4]
call fcn.10021c54
mov ecx, dword [ebp - 0x244]
cmp ecx, dword [eax]
jge 0x1001ac55
mov dword [ebp - 0x304], 1
jmp 0x1001ac5c
and dword [ebp - 0x304], 0
cmp dword [ebp - 0x304], 0xbf33464e
ja 0x1001ac74
mov dword [ebp - 0x24c], 1
jmp 0x1001ac7b
and dword [ebp - 0x24c], 0
mov eax, dword [ebp - 0x24c]
mov dword [ebp - 0x9c], eax
mov esi, dword [ebp - 0x9c]
push 0
lea ecx, [ebp - 0x584]
call fcn.10021c54
mov dword [eax], esi
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x584]
call fcn.10021c38
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x3c4]
call fcn.10021c38
jmp 0x1001a86b
jmp 0x1001a68c
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x18], 1
jbe 0x1001acdd
mov dword [ebp - 0x3ec], 1
jmp 0x1001ace4
and dword [ebp - 0x3ec], 0
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x5f0], eax
push 2
lea ecx, [ebp - 0x4e8]
call fcn.10021c54
mov dword [eax], 0xffff
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x18], 0xffff
jl 0x1001ad1c
mov dword [ebp - 0x4cc], 1
jmp 0x1001ad23
and dword [ebp - 0x4cc], 0
push 0
lea ecx, [ebp - 0x4e8]
call fcn.10021c54
push 0
lea ecx, [ebp - 0x4e8]
call fcn.10021c54
mov eax, dword [eax]
mov dword [ebp - 0x364], eax
mov eax, dword [ebp - 0x3f4]
cmp dword [ebp - 0x364], eax
jge 0x1001ad5f
mov dword [ebp - 0x254], 1
jmp 0x1001ad66
and dword [ebp - 0x254], 0
mov eax, dword [ebp - 0x1c4]
mov dword [ebp - 0x49c], eax
mov eax, dword [ebp - 0x254]
add eax, 0x4a103c28
mov dword [ebp - 0x3fc], eax
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
mov eax, dword [ebp - 0x49c]
cmp eax, dword [ebp - 0x3fc]
jl 0x1001adaa
mov dword [ebp - 0x30c], 1
jmp 0x1001adb1
and dword [ebp - 0x30c], 0
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x30c], eax
jne 0x1001adc8
mov dword [ebp - 0x25c], 1
jmp 0x1001adcf
and dword [ebp - 0x25c], 0
push 0
lea ecx, [ebp - 0x520]
call fcn.10021c54
mov ecx, dword [ebp - 0x25c]
add ecx, dword [eax]
cmp ecx, 0x46b2
jne 0x1001adf8
mov dword [ebp - 0x3a8], 1
jmp 0x1001adff
and dword [ebp - 0x3a8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18]
cmp dword [ebp - 0x3a8], eax
jge 0x1001ae1d
mov dword [ebp - 0x264], 1
jmp 0x1001ae24
and dword [ebp - 0x264], 0
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x264], eax
jne 0x1001ae3b
mov dword [ebp - 0x314], 1
jmp 0x1001ae42
and dword [ebp - 0x314], 0
cmp dword [ebp - 0x314], 0xfffffffd
jne 0x1001ae5a
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xf4], 0
je 0x1001ae6f
cmp dword [ebp - 0x9c], 0
je 0x1001ae6f
mov dword [ebp - 0x26c], 1
jmp 0x1001ae76
and dword [ebp - 0x26c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xf4]
mov eax, dword [ebp + eax*4 - 0x3d4]
imul eax, dword [ebp - 0x26c]
test eax, eax
jne 0x1001aea3
cmp dword [ebp - 0x50], 0
jne 0x1001aea3
and dword [ebp - 0x36c], 0
jmp 0x1001aead
mov dword [ebp - 0x36c], 1
cmp dword [ebp - 0x36c], 7
jle 0x1001aec2
mov dword [ebp - 0x274], 1
jmp 0x1001aec9
and dword [ebp - 0x274], 0
mov eax, dword [ebp - 0x274]
mov dword [ebp - 0x9c], eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x520]
call fcn.10021c38
jmp 0x1001a5dc
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4e8]
call fcn.10021c38
mov eax, dword [ebp - 0xb8]
cmp dword [eax], 0x4550
je 0x1001b4ca
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0x58], 6
mov dword [ebp - 0x2cc], 0x3403e1fe
mov dword [ebp - 0x1a0], 0xfffffff6
mov dword [ebp - 0x1c8], 0xffffffff
mov dword [ebp - 0x1a8], 0xd1edbcc7
mov dword [ebp - 0x4d4], 0x8f4f80cf
cmp dword [ebp - 0x14], 6
jne 0x1001af5c
mov dword [ebp - 0x294], 1
jmp 0x1001af63
and dword [ebp - 0x294], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x5f8], eax
cmp dword [ebp - 0x14], 0
je 0x1001af8a
cmp dword [ebp - 0x14], 0
je 0x1001af8a
cmp dword [ebp - 0x14], 0
je 0x1001af8a
mov dword [ebp - 0x31c], 1
jmp 0x1001af91
and dword [ebp - 0x31c], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x31c], eax
jle 0x1001afa8
mov dword [ebp - 0x27c], 1
jmp 0x1001afaf
and dword [ebp - 0x27c], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x27c], eax
je 0x1001afc6
mov dword [ebp - 0x398], 1
jmp 0x1001afcd
and dword [ebp - 0x398], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x398], eax
jne 0x1001afe4
mov dword [ebp - 0x284], 1
jmp 0x1001afeb
and dword [ebp - 0x284], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x284], eax
jge 0x1001b002
mov dword [ebp - 0x324], 1
jmp 0x1001b009
and dword [ebp - 0x324], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x324], eax
jle 0x1001b020
mov dword [ebp - 0x28c], 1
jmp 0x1001b027
and dword [ebp - 0x28c], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x28c], eax
jge 0x1001b03e
mov dword [ebp - 0x374], 1
jmp 0x1001b045
and dword [ebp - 0x374], 0
cmp dword [ebp - 0x374], 0x1c2e
je 0x1001b05d
mov dword [ebp - 0x32c], 1
jmp 0x1001b064
and dword [ebp - 0x32c], 0
mov eax, dword [ebp - 0x294]
imul eax, dword [ebp - 0x32c]
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 7
jl 0x1001b34c
mov dword [ebp - 0x94], 0xc164
mov dword [ebp - 0x4a4], 5
mov dword [ebp - 0x198], 0xbac41177
mov dword [ebp - 0x1c0], 1
mov dword [ebp - 0x1b0], 1
mov dword [ebp - 0x40c], 0xe148cb42
mov dword [ebp - 0x2c4], 0xfffffff6
cmp dword [ebp - 0x14], 0
je 0x1001b1bb
cmp dword [ebp - 0x14], 1
jb 0x1001b0e0
mov dword [ebp - 0x29c], 1
jmp 0x1001b0e7
and dword [ebp - 0x29c], 0
mov eax, dword [ebp - 0x29c]
sub eax, 0x90b8
cmp eax, dword [ebp - 0x14]
je 0x1001b103
mov dword [ebp - 0x3b8], 1
jmp 0x1001b10a
and dword [ebp - 0x3b8], 0
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x3b8], eax
jl 0x1001b121
mov dword [ebp - 0x4f4], 1
jmp 0x1001b128
and dword [ebp - 0x4f4], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x600], eax
cmp dword [ebp - 0x94], 0x82b5dfeb
jb 0x1001b149
mov dword [ebp - 0x3d8], 1
jmp 0x1001b150
and dword [ebp - 0x3d8], 0
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x608], eax
cmp dword [ebp - 0x94], 0x3380
je 0x1001b174
mov dword [ebp - 0x2a4], 1
jmp 0x1001b17b
and dword [ebp - 0x2a4], 0
mov eax, dword [ebp - 0x2a4]
mov dword [ebp - 0x2cc], eax
xor eax, eax
inc eax
imul eax, eax, 0x2c1
imul eax, dword [ebp - 0x94]
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 0
jne 0x1001b1af
cmp dword [ebp - 0x4a4], 0
je 0x1001b1bb
mov dword [ebp - 0x334], 1
jmp 0x1001b1c2
and dword [ebp - 0x334], 0
mov eax, dword [ebp - 0x334]
mov dword [ebp - 0x198], eax
mov eax, dword [ebp - 0x1c8]
cmp dword [ebp - 0x198], eax
jge 0x1001b1e8
mov dword [ebp - 0x2ac], 1
jmp 0x1001b1ef
and dword [ebp - 0x2ac], 0
cmp dword [ebp - 0x2ac], 0xe4d7
jle 0x1001b207
mov dword [ebp - 0x37c], 1
jmp 0x1001b20e
and dword [ebp - 0x37c], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x37c], eax
jg 0x1001b225
mov dword [ebp - 0x2b4], 1
jmp 0x1001b22c
and dword [ebp - 0x2b4], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x2b4], eax
jge 0x1001b243
mov dword [ebp - 0x33c], 1
jmp 0x1001b24a
and dword [ebp - 0x33c], 0
mov eax, dword [ebp - 0x33c]
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 0
jne 0x1001b26b
mov dword [ebp - 0x2bc], 1
jmp 0x1001b272
and dword [ebp - 0x2bc], 0
mov eax, dword [ebp - 0x2bc]
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 6
je 0x1001b293
mov dword [ebp - 0x3a0], 1
jmp 0x1001b29a
and dword [ebp - 0x3a0], 0
mov eax, dword [ebp - 0x3a0]
add eax, 8
mov dword [ebp - 0x40c], eax
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x5d0], eax
mov eax, dword [ebp - 0x1a8]
mov dword [ebp - 0x618], eax
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x2c4], eax
mov eax, dword [ebp - 0x58]
add eax, dword [ebp - 0x2c4]
sub eax, dword [ebp - 0x58]
cmp dword [ebp - 0x94], eax
jle 0x1001b2ed
mov dword [ebp - 0x344], 1
jmp 0x1001b2f4
and dword [ebp - 0x344], 0
mov eax, dword [ebp - 0x344]
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x198]
push eax
lea eax, [ebp - 0x2cc]
push eax
push 1
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x1c0]
push eax
push 0x36cb
push 1
lea eax, [ebp - 0x1c8]
push eax
push 0
lea eax, [ebp - 0x1a0]
push eax
push 0x6b7c
lea eax, [ebp - 0x1a8]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.10017442
add esp, 0x34
jmp 0x1001b4bf
mov dword [ebp - 0x1dc], 0xfffffffd
mov dword [ebp - 0x150], 0
jmp 0x1001b36f
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 3
jge 0x1001b38b
mov eax, dword [ebp - 0x150]
mov dword [ebp + eax*4 - 0x514], 0xcccf04a
jmp 0x1001b362
mov dword [ebp - 0x14], 0
jmp 0x1001b39b
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jg 0x1001b4bf
mov dword [ebp - 0x414], 1
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x514], 0
je 0x1001b446
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x514], 0
je 0x1001b446
mov eax, dword [ebp - 0x1dc]
mov ecx, dword [ebp - 0x14]
add eax, dword [ebp + ecx*4 - 0x514]
cmp eax, dword [ebp - 0x1dc]
jg 0x1001b3f3
mov dword [ebp - 0x1b8], 1
jmp 0x1001b3fa
and dword [ebp - 0x1b8], 0
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x1b8]
mov dword [ebp + eax*4 - 0x514], ecx
mov eax, dword [ebp - 0x1b8]
dec eax
cmp eax, dword [ebp - 0x4d4]
je 0x1001b425
mov dword [ebp - 0x1e0], 1
jmp 0x1001b42c
and dword [ebp - 0x1e0], 0
imul eax, dword [ebp - 0x1e0], 0x9921
test eax, eax
je 0x1001b446
mov dword [ebp - 0x1e8], 1
jmp 0x1001b44d
and dword [ebp - 0x1e8], 0
mov eax, dword [ebp - 0x414]
cmp dword [ebp - 0x1e8], eax
jle 0x1001b467
mov dword [ebp - 0x1f0], 1
jmp 0x1001b46e
and dword [ebp - 0x1f0], 0
cmp dword [ebp - 0x1f0], 0xebdd5e18
je 0x1001b486
mov dword [ebp - 0x1f8], 1
jmp 0x1001b48d
and dword [ebp - 0x1f8], 0
mov eax, dword [ebp - 0x1a8]
cmp dword [ebp - 0x1f8], eax
jl 0x1001b4a7
mov dword [ebp - 0x200], 1
jmp 0x1001b4ae
and dword [ebp - 0x200], 0
mov eax, dword [ebp - 0x200]
mov dword [ebp - 0x1c8], eax
jmp 0x1001b394
mov eax, dword [ebp - 0x78]
and dword [eax], 0
jmp 0x1001d53f
push 2
lea ecx, [ebp - 0x5cc]
call fcn.10021bd6
mov dword [ebp - 4], 7
mov dword [ebp - 0xd8], 0x2ee76f50
mov dword [ebp - 0x41c], 0xfffffffd
mov dword [ebp - 0x620], 0xfffffffe
lea eax, [ebp - 0x5cc]
push eax
push 0x6f27
lea eax, [ebp - 0x628]
push eax
push 0x6060
push 1
push 1
call fcn.100124f0
add esp, 0x18
mov dword [ebp - 0xd8], 0
jmp 0x1001b539
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 1
jg 0x1001b5f2
push 2
lea ecx, [ebp - 0x5b4]
call fcn.10021bd6
mov byte [ebp - 4], 8
mov dword [ebp - 0x630], 0x6f8c7b5c
mov dword [ebp - 0x4ac], 0x31e1
lea eax, [ebp - 0x5b4]
push eax
push 1
push 0x16a3
lea eax, [ebp - 0x638]
push eax
push 1
call fcn.10017676
add esp, 0x14
push 0x4ea2
lea eax, [ebp - 0x4ac]
push eax
push 0x2134
push 1
push 1
push 0xbb3
call fcn.1001773d
add esp, 0x18
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0x5cc]
push eax
push 0
push 0x182b
lea eax, [ebp - 0x41c]
push eax
lea eax, [ebp - 0x5b4]
push eax
push 0x5934
push 0
call fcn.10019b27
add esp, 0x20
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x5b4]
call fcn.10021c38
jmp 0x1001b52c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5cc]
call fcn.10021c38
push 1
push 0
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0x15c]
push eax
call fcn.100177cb
add esp, 0x10
push 2
lea ecx, [ebp - 0xa8]
call fcn.10021bd6
mov dword [ebp - 4], 9
mov dword [ebp - 0x424], 0xc9995890
mov dword [ebp - 0x4b4], 0xffffffff
mov dword [ebp - 0x60], 0xfffffffd
mov dword [ebp - 0x4dc], 3
mov dword [ebp - 0xcc], 0
jmp 0x1001b66d
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 1
jge 0x1001b689
mov eax, dword [ebp - 0xcc]
mov dword [ebp + eax*4 - 0x88], 0x4a8c6a53
jmp 0x1001b660
push 0x3a40
lea eax, [ebp - 0xa8]
push eax
push 1
push 0x2f92
lea eax, [ebp - 0xcc]
push eax
push 0
push 0x1d85
push 0x5c0e
push 0x5ff6
call fcn.10019175
add esp, 0x24
push 0
lea ecx, [ebp - 0xa8]
call fcn.10021c54
and dword [eax], 0
jmp 0x1001b6f2
push 0
lea ecx, [ebp - 0xa8]
call fcn.10021c54
mov dword [ebp - 0x208], eax
mov eax, dword [ebp - 0x208]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x208]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0xa8]
call fcn.10021c54
cmp dword [eax], 0
jg 0x1001b8f4
push 0
lea ecx, [ebp - 0xa8]
call fcn.10021c54
mov eax, dword [eax]
cmp dword [ebp + eax*4 - 0x88], 0
je 0x1001b73f
push 0
lea ecx, [ebp - 0xa8]
call fcn.10021c54
cmp dword [eax], 0
je 0x1001b73f
mov dword [ebp - 0x4fc], 1
jmp 0x1001b746
and dword [ebp - 0x4fc], 0
push 0
lea ecx, [ebp - 0xa8]
call fcn.10021c54
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x88]
mov dword [ebp - 0x424], eax
cmp dword [ebp - 0x4b4], 1
jl 0x1001b777
mov dword [ebp - 0x210], 1
jmp 0x1001b77e
and dword [ebp - 0x210], 0
mov esi, dword [ebp - 0x210]
inc esi
push 0
lea ecx, [ebp - 0xa8]
call fcn.10021c54
cmp esi, dword [eax]
jne 0x1001b7a2
mov dword [ebp - 0x218], 1
jmp 0x1001b7a9
and dword [ebp - 0x218], 0
push 0
lea ecx, [ebp - 0xa8]
call fcn.10021c54
imul ecx, dword [ebp - 0x218], 3
cmp dword [eax], ecx
jl 0x1001b7cd
mov dword [ebp - 0x220], 1
jmp 0x1001b7d4
and dword [ebp - 0x220], 0
push 0
lea ecx, [ebp - 0xa8]
call fcn.10021c54
mov ecx, dword [ebp - 0x220]
cmp ecx, dword [eax]
jge 0x1001b7f7
mov dword [ebp - 0x228], 1
jmp 0x1001b7fe
and dword [ebp - 0x228], 0
push 0
lea ecx, [ebp - 0xa8]
call fcn.10021c54
mov esi, dword [ebp - 0x228]
sub esi, dword [eax]
push 0
lea ecx, [ebp - 0xa8]
call fcn.10021c54
mov eax, dword [eax]
cmp esi, dword [ebp + eax*4 - 0x88]
jge 0x1001b837
mov dword [ebp - 0x230], 1
jmp 0x1001b83e
and dword [ebp - 0x230], 0
push 0
lea ecx, [ebp - 0xa8]
call fcn.10021c54
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x88]
cmp dword [ebp - 0x230], eax
jle 0x1001b868
mov dword [ebp - 0x238], 1
jmp 0x1001b86f
and dword [ebp - 0x238], 0
mov eax, dword [ebp - 0x238]
add eax, 0x2715
mov dword [ebp - 0x60], eax
mov esi, dword [ebp - 0x60]
push 0
lea ecx, [ebp - 0xa8]
call fcn.10021c54
add esi, dword [eax]
jne 0x1001b8b3
push 0
lea ecx, [ebp - 0xa8]
call fcn.10021c54
mov eax, dword [eax]
cmp dword [ebp + eax*4 - 0x88], 0
jne 0x1001b8b3
and dword [ebp - 0x42c], 0
jmp 0x1001b8bd
mov dword [ebp - 0x42c], 1
push 0
lea ecx, [ebp - 0xa8]
call fcn.10021c54
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x88]
mov dword [ebp - 0x4dc], eax
push 1
push 1
push 0x22e5
push 0x3bfe
call fcn.100177cb
add esp, 0x10
jmp 0x1001b6ce
mov dword [ebp - 0x60], 0
jmp 0x1001b904
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 2
jge 0x1001b92f
lea eax, [ebp - 0xa8]
push eax
push 1
push 0x71c
push 0x17d3
push 0
push 0
lea eax, [ebp - 0x60]
push eax
call fcn.100170d1
add esp, 0x1c
jmp 0x1001b8fd
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa8]
call fcn.10021c38
cmp dword [ebp - 0x15c], 0
jne 0x1001bc36
mov dword [ebp - 0x2c], 0x1f9c
push 2
lea ecx, [ebp - 0x1d4]
call fcn.10021bd6
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x538], 3
mov dword [ebp - 0x534], 3
mov dword [ebp - 0x530], 3
mov dword [ebp - 0x52c], 3
push 0x213f
push 1
lea eax, [ebp - 0x644]
push eax
push 1
lea eax, [ebp - 0x1d4]
push eax
push 1
push 0x6ee7
push 0x57c7
call fcn.100125c0
add esp, 0x20
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x2c], 0
jmp 0x1001b9d0
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jg 0x1001bc1c
mov dword [ebp - 0x664], 0xffffffff
mov dword [ebp - 0x1d8], 0xe9646b8d
mov dword [ebp - 0x4bc], 0x555145cc
mov dword [ebp - 0x66c], 0xfffffffd
mov dword [ebp - 0x694], 0xffffffff
mov dword [ebp - 0x69c], 0xffffffff
mov dword [ebp - 0x190], 0x1cb6a7f4
mov dword [ebp - 0x118], 0
jmp 0x1001ba39
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 1
jge 0x1001ba55
mov eax, dword [ebp - 0x118]
mov dword [ebp + eax*4 - 0x19c], 0x66e9f086
jmp 0x1001ba2c
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x1d4]
call fcn.10021c54
push 4
pop ecx
imul ecx, ecx, 0
mov eax, dword [eax]
mov dword [ebp + ecx - 0x538], eax
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x1d4]
call fcn.10021c54
mov eax, dword [ebp - 0x190]
mov ecx, dword [ebp - 0x190]
inc ecx
mov dword [ebp - 0x190], ecx
test eax, eax
jne 0x1001baad
push 1
lea ecx, [ebp - 0x1d4]
call fcn.10021c54
cmp dword [eax], 0
je 0x1001bb65
mov eax, 0x7ae9f903
test eax, eax
je 0x1001bac8
cmp dword [ebp - 0x2c], 0
je 0x1001bac8
mov dword [ebp - 0x240], 1
jmp 0x1001bacf
and dword [ebp - 0x240], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x538]
cmp dword [ebp - 0x240], eax
jg 0x1001baf0
mov dword [ebp - 0x248], 1
jmp 0x1001baf7
and dword [ebp - 0x248], 0
cmp dword [ebp - 0x248], 0xbbfad0d7
jbe 0x1001bb0f
mov dword [ebp - 0x250], 1
jmp 0x1001bb16
and dword [ebp - 0x250], 0
cmp dword [ebp - 0x250], 0x52bf
jl 0x1001bb2e
mov dword [ebp - 0x434], 1
jmp 0x1001bb35
and dword [ebp - 0x434], 0
mov eax, dword [ebp - 0x4bc]
mov dword [ebp - 0x6a4], eax
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x1d4]
call fcn.10021c54
imul eax, dword [eax], 0xf9e6
test eax, eax
je 0x1001bb65
mov dword [ebp - 0x194], 1
jmp 0x1001bb6c
and dword [ebp - 0x194], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x194]
mov dword [ebp + eax - 0x19c], ecx
push 0
lea ecx, [ebp - 0x1d4]
call fcn.10021c54
mov ecx, dword [ebp - 0x194]
cmp ecx, dword [eax]
jl 0x1001bba2
mov dword [ebp - 0x43c], 1
jmp 0x1001bba9
and dword [ebp - 0x43c], 0
push 1
lea ecx, [ebp - 0x1d4]
call fcn.10021c54
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 0x688], eax
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 0x64c], eax
push 4
pop eax
imul eax, eax, 0
mov esi, dword [ebp + eax - 0x19c]
push 1
lea ecx, [ebp - 0x1d4]
call fcn.10021c54
cmp esi, dword [eax]
jg 0x1001bbff
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x19c], 1
jmp 0x1001bc17
push 1
push 0x71c9
push 0x3685
push 1
push 1
call fcn.10017866
add esp, 0x14
jmp 0x1001b9c9
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1d4]
call fcn.10021c38
mov eax, dword [ebp - 0x78]
and dword [eax], 0
jmp 0x1001d53f
push 1
lea ecx, [ebp - 0x188]
call fcn.10021bd6
mov dword [ebp - 4], 0xb
mov dword [ebp - 0xb0], 0xffffffff
lea eax, [ebp - 0x188]
push eax
push 1
lea eax, [ebp - 0x65c]
push eax
push 0x5180
push 0x30b1
push 1
call fcn.100126ff
add esp, 0x18
mov byte [ebp - 0x51], 0
mov dword [ebp - 0x260], 0x7977
mov dword [ebp - 0x444], 0x10007fec
cmp dword [ebp - 0x260], 0x7c09
jle 0x1001bd40
and dword [ebp - 0x158], 0
jmp 0x1001bcb6
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 0x4e46
jge 0x1001bd40
and dword [ebp - 0x120], 0
jmp 0x1001bcd8
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0x172a
jge 0x1001bd3b
mov eax, dword [ebp - 0x158]
xor eax, dword [ebp - 0x120]
cdq
mov dword [ebp - 0x46c], eax
mov dword [ebp - 0x468], edx
push dword [ebp - 0x468]
push dword [ebp - 0x46c]
lea ecx, [ebp - 0x6e4]
call fcn.1000ab5a
pop ecx
pop ecx
mov dword [ebp - 0x4f0], eax
mov ecx, dword [ebp - 0x4f0]
call fcn.10021680
push eax
call fcn.10057a16
pop ecx
lea ecx, [ebp - 0x6e4]
call fcn.10021676
jmp 0x1001bccb
jmp 0x1001bca9
movzx eax, byte [ebp - 0x51]
test eax, eax
je 0x1001bd56
push 1
push 1
push 1
call fcn.10012a3a
add esp, 0xc
mov byte [ebp - 4], 0xc
cmp dword [ebp - 0x260], 0x75de
jge 0x1001bd72
push dword [ebp - 0x444]
call fcn.10057a16
pop ecx
jmp 0x1001bd8e
mov dword [ebp - 4], 0xb
jmp 0x1001bd9e
push 0
lea ecx, [ebp - 0x188]
call fcn.10021c54
mov dword [eax], 0xffffffe6
jmp 0x1001bdd7
push 0
lea ecx, [ebp - 0x188]
call fcn.10021c54
mov dword [ebp - 0x268], eax
mov eax, dword [ebp - 0x268]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x268]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x188]
call fcn.10021c54
cmp dword [eax], 0xffffffeb
jge 0x1001bfe5
mov dword [ebp - 0x24], 0x3eb60693
push 0
lea ecx, [ebp - 0x188]
call fcn.10021c54
cmp dword [eax], 0
jne 0x1001bece
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x5dc], eax
push 0
lea ecx, [ebp - 0x188]
call fcn.10021c54
mov eax, dword [eax]
sub eax, 5
jne 0x1001be37
push 0xfffffffffffffffb
pop eax
test eax, eax
jne 0x1001be37
and dword [ebp - 0x4c4], 0
jmp 0x1001be41
mov dword [ebp - 0x4c4], 1
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x684], eax
push 0
lea ecx, [ebp - 0x188]
call fcn.10021c54
mov ecx, dword [ebp - 0x24]
cmp dword [eax], ecx
jl 0x1001be6a
mov dword [ebp - 0x270], 1
jmp 0x1001be71
and dword [ebp - 0x270], 0
cmp dword [ebp - 0x270], 0x13244d51
jle 0x1001be89
mov dword [ebp - 0x278], 1
jmp 0x1001be90
and dword [ebp - 0x278], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x278], eax
jle 0x1001bea7
mov dword [ebp - 0x280], 1
jmp 0x1001beae
and dword [ebp - 0x280], 0
push 0
lea ecx, [ebp - 0x188]
call fcn.10021c54
mov ecx, dword [ebp - 0x280]
cmp ecx, dword [eax]
je 0x1001bece
and dword [ebp - 0x288], 0
jmp 0x1001bed8
mov dword [ebp - 0x288], 1
push 0
lea ecx, [ebp - 0x188]
call fcn.10021c54
mov ecx, dword [ebp - 0x288]
imul ecx, dword [eax]
test ecx, ecx
je 0x1001bf66
push 1
push 1
call fcn.10017bac
pop ecx
pop ecx
mov dword [ebp - 0x24], 0
jmp 0x1001bf0d
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xfffffff5
jge 0x1001bf64
mov byte [ebp - 0x7f], 0
push 1
push 0x7be1
push 0x3202
push 0x7c3b
push 1
push 0x6295
lea eax, [ebp - 0x7f]
push eax
push 0x1c18
call fcn.10017c45
add esp, 0x20
push 0x61aa
push 1
push 0x669f
push 0x5913
push 1
push 0
push 0x39e0
call fcn.100170d1
add esp, 0x1c
jmp 0x1001bf06
jmp 0x1001bf85
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0xb0]
push eax
push 1
push 0x3c89
push 0
call fcn.10019a78
add esp, 0x14
mov dword [ebp - 0x24], 0
jmp 0x1001bf95
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0x1a
jge 0x1001bfe0
mov dword [ebp - 0xb0], 0x13
jmp 0x1001bfb4
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0x13
jge 0x1001bfca
push 1
push 1
call fcn.100181ea
pop ecx
pop ecx
jmp 0x1001bfa7
push 0
lea ecx, [ebp - 0x188]
call fcn.10021c54
cmp dword [eax], 0
je 0x1001bfde
jmp 0x1001bf8e
jmp 0x1001bf8e
jmp 0x1001bdb3
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x188]
call fcn.10021c38
lea eax, [ebp - 0x5e4]
push eax
lea eax, [ebp - 0x15c]
push eax
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0x30]
push eax
push 0x2831
push 0xd0
push 1
push 1
lea eax, [ebp - 0x1a4]
push eax
push 0x3cb5
push 1
call fcn.10018273
add esp, 0x2c
mov dword [ebp - 0x128], 1
mov dword [ebp - 0x160], 0
jmp 0x1001c054
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 1
jge 0x1001c070
mov eax, dword [ebp - 0x160]
mov dword [ebp + eax*4 - 0x658], 0x8eac8b13
jmp 0x1001c047
mov dword [ebp - 0x128], 0
jmp 0x1001c089
mov eax, dword [ebp - 0x128]
dec eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0
jl 0x1001c0fc
mov dword [ebp - 0x44c], 5
mov dword [ebp - 0x5ec], 0x3d4210e1
mov dword [ebp - 0x168], 0
jmp 0x1001c0bf
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 3
jge 0x1001c0db
mov eax, dword [ebp - 0x168]
mov dword [ebp + eax*4 - 0x6f0], 0xe864896
jmp 0x1001c0b2
push 1
push 0
push 0x1295
push 0x32c9
push 1
lea eax, [ebp - 0x44c]
push eax
call fcn.1001e650
add esp, 0x18
jmp 0x1001c07c
mov byte [ebp - 0x59], 0
push 0x32cc
push 0x27c4
push 1
lea eax, [ebp - 0x59]
push eax
push 0x3b23
push 0
push 1
call fcn.100183e6
add esp, 0x1c
lea eax, [ebp - 0x30]
push eax
push 1
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0x1ac]
push eax
push 0x2e85
push 0x7a3f
push 0x442f
push 0
call fcn.10015c0e
add esp, 0x20
mov dword [ebp - 0x48c], 3
mov dword [ebp - 0x130], 0
jmp 0x1001c171
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 2
jge 0x1001c18d
mov eax, dword [ebp - 0x130]
mov dword [ebp + eax*4 - 0x654], 0x5d16df25
jmp 0x1001c164
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x48c]
mov dword [ebp + eax - 0x654], ecx
mov byte [ebp - 0x7d], 0
push 0x471b
lea eax, [ebp - 0x7d]
push eax
push 1
push 0x1f3f
push 0x5e22
push 1
push 1
call fcn.100183e6
add esp, 0x1c
mov eax, dword [ebp - 0xb8]
mov ecx, dword [ebp - 0x15c]
sub ecx, dword [eax + 0x34]
mov dword [ebp - 0x2d0], ecx
mov dword [ebp - 0x38], 0x469ad59e
mov dword [ebp - 0x170], 0
jmp 0x1001c1fa
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 1
jge 0x1001c216
mov eax, dword [ebp - 0x170]
mov dword [ebp + eax*4 - 0x290], 0
jmp 0x1001c1ed
mov dword [ebp - 0x38], 0
jmp 0x1001c226
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
jl 0x1001c23d
mov eax, dword [ebp - 0x38]
cmp dword [ebp + eax*4 - 0x290], 0
je 0x1001c23b
jmp 0x1001c23d
jmp 0x1001c21f
mov dword [ebp - 0x38], 0
jmp 0x1001c24d
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 1
jge 0x1001c263
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x290], 0xfffffff9
jmp 0x1001c246
cmp dword [ebp - 0x2d0], 0
je 0x1001c5d0
mov dword [ebp - 0x44], 0x5baf43b7
mov dword [ebp - 0x17c], 0
mov eax, dword [ebp - 0x44]
dec eax
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x44], 0
jmp 0x1001c298
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0x1a
jge 0x1001c441
mov dword [ebp - 0x138], 0xffffffff
mov dword [ebp - 0x2b0], 0
mov dword [ebp - 0x2c8], 0xa6b42be1
mov dword [ebp - 0x17c], 0x266d210e
cmp dword [ebp - 0x17c], 0
je 0x1001c2e4
or eax, 0xffffffff
je 0x1001c2e4
mov dword [ebp - 0x298], 1
jmp 0x1001c2eb
and dword [ebp - 0x298], 0
mov eax, dword [ebp - 0x138]
cmp dword [ebp - 0x44], eax
je 0x1001c302
mov dword [ebp - 0x2a0], 1
jmp 0x1001c309
and dword [ebp - 0x2a0], 0
mov eax, dword [ebp - 0x298]
cmp eax, dword [ebp - 0x2a0]
jl 0x1001c323
mov dword [ebp - 0x454], 1
jmp 0x1001c32a
and dword [ebp - 0x454], 0
mov eax, 0xfa1e
test eax, eax
jne 0x1001c345
mov eax, 0x1912
test eax, eax
jne 0x1001c345
and dword [ebp - 0x2a8], 0
jmp 0x1001c34f
mov dword [ebp - 0x2a8], 1
mov eax, dword [ebp - 0x138]
cmp dword [ebp - 0x2a8], eax
jg 0x1001c369
mov dword [ebp - 0x490], 1
jmp 0x1001c370
and dword [ebp - 0x490], 0
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x68c], eax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x5f4], eax
mov dword [ebp - 0x2b0], 0x946b
cmp dword [ebp - 0x2b0], 0x891c
jl 0x1001c3a7
mov dword [ebp - 0x2b8], 1
jmp 0x1001c3ae
and dword [ebp - 0x2b8], 0
mov eax, dword [ebp - 0x138]
cmp dword [ebp - 0x2b8], eax
jg 0x1001c3c8
mov dword [ebp - 0x2c0], 1
jmp 0x1001c3cf
and dword [ebp - 0x2c0], 0
mov eax, dword [ebp - 0x2c0]
mov dword [ebp - 0x2c8], eax
cmp dword [ebp - 0x2c8], 0x7c14
jl 0x1001c431
mov dword [ebp - 0x178], 0
jmp 0x1001c400
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 2
jge 0x1001c41c
mov eax, dword [ebp - 0x178]
mov dword [ebp + eax*4 - 0x640], 6
jmp 0x1001c3f3
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x17c]
mov dword [ebp + eax - 0x640], ecx
jmp 0x1001c43c
cmp dword [ebp - 0x17c], 0
je 0x1001c43c
jmp 0x1001c441
jmp 0x1001c291
mov dword [ebp - 0x2d8], 0x4891
mov dword [ebp - 0x498], 0x10008040
cmp dword [ebp - 0x2d8], 0x4b39
jle 0x1001c56e
and dword [ebp - 0x14c], 0
jmp 0x1001c47b
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 0x7552
jge 0x1001c56e
and dword [ebp - 0xf8], 0
jmp 0x1001c4a1
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0x6267
jge 0x1001c569
and dword [ebp - 0x164], 0
jmp 0x1001c4c7
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 0x15ac
jge 0x1001c564
and dword [ebp - 0x174], 0
jmp 0x1001c4ed
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 0x3bbd
jge 0x1001c55f
mov eax, dword [ebp - 0xf8]
cdq
idiv dword [ebp - 0x164]
mov eax, dword [ebp - 0x14c]
sub eax, edx
sub eax, dword [ebp - 0x174]
cdq
mov dword [ebp - 0x478], eax
mov dword [ebp - 0x474], edx
push dword [ebp - 0x474]
push dword [ebp - 0x478]
lea ecx, [ebp - 0x708]
call fcn.1000ab5a
pop ecx
pop ecx
mov dword [ebp - 0x45c], eax
mov ecx, dword [ebp - 0x45c]
call fcn.10021680
push eax
call fcn.10057a16
pop ecx
lea ecx, [ebp - 0x708]
call fcn.10021676
jmp 0x1001c4e0
jmp 0x1001c4ba
jmp 0x1001c494
jmp 0x1001c46e
push dword [ebp - 0x2d0]
push 0x1df8
push 0
push dword [ebp - 0x30]
push 0xe27
call fcn.1001ece4
add esp, 0x14
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0x2d8], 0x46bb
jge 0x1001c5aa
push dword [ebp - 0x498]
call fcn.10057a16
pop ecx
jmp 0x1001c5c6
or dword [ebp - 4], 0xffffffff
jmp 0x1001c5d0
push dword [ebp - 0x30]
call fcn.10010a14
pop ecx
test eax, eax
jne 0x1001c72d
push 2
lea ecx, [ebp - 0x56c]
call fcn.10021bd6
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x47c], 0x187b35f1
mov dword [ebp - 0x4a8], 0x2afe2499
mov dword [ebp - 0x4a0], 0x3cc9d6c8
push 4
lea ecx, [ebp - 0x5a8]
call fcn.10021bd6
mov byte [ebp - 4], 0x11
mov dword [ebp - 0xc0], 0x32a49e86
mov dword [ebp - 0x470], 6
push 1
lea eax, [ebp - 0x464]
push eax
push 0x477a
push 0x28ce
lea eax, [ebp - 0x56c]
push eax
push 0
call fcn.1001728e
add esp, 0x18
push 0x32d9
push 1
lea eax, [ebp - 0x464]
push eax
lea eax, [ebp - 0x5a8]
push eax
push 0
push 0x6dfc
call fcn.1001647a
add esp, 0x18
lea eax, [ebp - 0x56c]
push eax
push 0x4e67
lea eax, [ebp - 0xc0]
push eax
push 0x1b6b
lea eax, [ebp - 0x4a0]
push eax
lea eax, [ebp - 0x5a8]
push eax
lea eax, [ebp - 0x470]
push eax
push 1
lea eax, [ebp - 0x4a8]
push eax
lea eax, [ebp - 0x47c]
push eax
push 1
call fcn.10018678
add esp, 0x2c
mov dword [ebp - 0xc0], 0
jmp 0x1001c6e0
mov eax, dword [ebp - 0xc0]
dec eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0xffffffe3
je 0x1001c704
mov byte [ebp - 0x61], 0
push 1
push 0x5726
push 1
lea eax, [ebp - 0x61]
push eax
call fcn.10018b6a
add esp, 0x10
jmp 0x1001c6d3
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x5a8]
call fcn.10021c38
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x56c]
call fcn.10021c38
mov eax, dword [ebp - 0x78]
and dword [eax], 0
jmp 0x1001d53f
push 0x6af3
push 1
push 0x203f
push 1
push 0x36ee
push 0x17d1
push 1
push 0x6661
push 0xd37
lea eax, [ebp - 0x30]
push eax
push 0x40b3
push 0x7707
push 0x2dec
call fcn.1001403b
add esp, 0x34
mov eax, dword [ebp - 0x30]
mov eax, dword [eax]
cmp dword [eax + 0x28], 0
je 0x1001d490
mov dword [ebp - 0x70], 9
mov dword [ebp - 0x154], 0
jmp 0x1001c79b
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 1
jge 0x1001c7b4
mov eax, dword [ebp - 0x154]
mov dword [ebp + eax*4 - 0x68], 0xdd33
jmp 0x1001c78e
mov dword [ebp - 0x70], 0
jmp 0x1001c7c4
mov eax, dword [ebp - 0x70]
dec eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
jl 0x1001ca94
mov dword [ebp - 0x34], 8
mov dword [ebp - 0x48], 9
mov dword [ebp - 0x34], 0
jmp 0x1001c7ec
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jl 0x1001ca8f
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x4b0], 0xffffffff
mov byte [ebp - 0x71], 0
push 1
push 0x6c3a
push 0x5000
push 1
lea eax, [ebp - 0x71]
push eax
call fcn.10018c9e
add esp, 0x14
mov dword [ebp - 0x90], 0
jmp 0x1001c841
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0
jg 0x1001ca8a
mov dword [ebp - 0x16c], 1
mov dword [ebp - 0xc8], 1
mov dword [ebp - 0x488], 0xfffffffd
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp + eax*4 - 0x68]
imul eax, dword [ebp - 0x90]
test eax, eax
jne 0x1001c9a0
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp + eax*4 - 0x68]
mov dword [ebp - 0x660], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x5fc], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x68]
imul eax, dword [ebp - 0x48]
test eax, eax
je 0x1001c8bd
push 0xfffffffffffffffc
pop eax
test eax, eax
je 0x1001c8bd
mov dword [ebp - 0x2e0], 1
jmp 0x1001c8c4
and dword [ebp - 0x2e0], 0
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp + eax*4 - 0x68]
cmp dword [ebp - 0x2e0], eax
jge 0x1001c8df
mov dword [ebp - 0x2e8], 1
jmp 0x1001c8e6
and dword [ebp - 0x2e8], 0
mov eax, dword [ebp - 0x2e8]
sub eax, dword [ebp - 0x16c]
cmp eax, dword [ebp - 0xc8]
jl 0x1001c906
mov dword [ebp - 0x2f0], 1
jmp 0x1001c90d
and dword [ebp - 0x2f0], 0
mov eax, dword [ebp - 0x70]
imul eax, dword [ebp - 0x2f0]
test eax, eax
jne 0x1001c92a
cmp dword [ebp - 0x70], 0
jne 0x1001c92a
and dword [ebp - 0x2f8], 0
jmp 0x1001c934
mov dword [ebp - 0x2f8], 1
mov eax, dword [ebp - 0x90]
cmp dword [ebp - 0x2f8], eax
je 0x1001c94e
mov dword [ebp - 0x300], 1
jmp 0x1001c955
and dword [ebp - 0x300], 0
mov eax, dword [ebp - 0x300]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x698], eax
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0x604], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x668], eax
mov eax, dword [ebp - 0x16c]
add eax, dword [ebp - 0x16c]
jne 0x1001c9a0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x68], 0
jne 0x1001c9a0
and dword [ebp - 0x308], 0
jmp 0x1001c9aa
mov dword [ebp - 0x308], 1
cmp dword [ebp - 0x308], 8
jle 0x1001c9bf
mov dword [ebp - 0x310], 1
jmp 0x1001c9c6
and dword [ebp - 0x310], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x310], eax
jne 0x1001ca71
mov dword [ebp - 0xc8], 0
jmp 0x1001c9ee
mov eax, dword [ebp - 0xc8]
dec eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0
jl 0x1001ca6f
mov dword [ebp - 0x48], 0
jmp 0x1001ca07
mov eax, dword [ebp - 0x48]
dec eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
jl 0x1001ca47
mov eax, dword [ebp - 0x48]
cmp dword [ebp + eax*4 - 0x68], 0
je 0x1001ca19
jmp 0x1001ca47
push 1
push 0x9d0
push 0x3067
push 1
push 0x56ae
push 0x6022
push 1
push 0x57d3
push 0x6eed
call fcn.10018e50
add esp, 0x24
jmp 0x1001ca00
mov byte [ebp - 0x7c], 0
push 0x332e
push 0x6684
push 1
push 1
push 0x75f4
lea eax, [ebp - 0x7c]
push eax
call fcn.10015983
add esp, 0x18
jmp 0x1001c9e1
jmp 0x1001ca7b
mov dword [ebp - 0x4b0], 0xfffffffb
mov dword [ebp - 0x488], 0
jmp 0x1001c834
jmp 0x1001c7e5
jmp 0x1001c7bd
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x68]
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x15c]
add ecx, dword [eax + 0x28]
mov dword [ebp - 0x320], ecx
mov dword [ebp - 0x3e0], 1
mov dword [ebp - 0x60c], 5
mov dword [ebp - 0x690], 0x961c0f80
mov dword [ebp - 0x4b8], 0xb5ca9869
mov dword [ebp - 0x3dc], 1
mov dword [ebp - 0x560], 0x3cf95751
mov dword [ebp - 0x55c], 0x3cf95751
mov dword [ebp - 0x558], 0x3cf95751
mov dword [ebp - 0x554], 0x3cf95751
lea ecx, [ebp - 0x1b9]
call fcn.10021c63
push eax
lea eax, [ebp - 0x550]
push eax
lea eax, [ebp - 0x560]
push eax
lea ecx, [ebp - 0x6cc]
call fcn.10021c83
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x6b0]
call fcn.10021c12
mov dword [ebp - 4], 0x12
mov byte [ebp - 0x69], 0
push 0x3336
lea eax, [ebp - 0x69]
push eax
push 1
push 1
call fcn.100190df
add esp, 0x10
push 0x583e
lea eax, [ebp - 0x4b8]
push eax
push 1
push 0x68bb
lea eax, [ebp - 0x3dc]
push eax
push 0x847
lea eax, [ebp - 0x3e0]
push eax
push 1
call fcn.10015cf0
add esp, 0x20
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6b0]
call fcn.10021c38
cmp dword [ebp - 0x320], 0
jne 0x1001cda9
mov dword [ebp - 0xac], 0x3ae35568
mov dword [ebp - 0x3f0], 0xc9fa8bc0
mov dword [ebp - 0xac], 0xffffffe6
jmp 0x1001cbdd
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0xfffffff3
jge 0x1001ccb7
mov dword [ebp - 0xdc], 0x8c44
mov dword [ebp - 0x3e8], 6
push 4
lea ecx, [ebp - 0x67c]
call fcn.10021bd6
mov dword [ebp - 4], 0x13
push 1
push 0x242f
lea eax, [ebp - 0x614]
push eax
push 0x334f
push 0x201f
push 1
push 1
lea eax, [ebp - 0x67c]
push eax
call fcn.10015de6
add esp, 0x20
push 1
lea eax, [ebp - 0xdc]
push eax
push 0xec4
push 0x1b13
push 1
lea eax, [ebp - 0x3e8]
push eax
push 0x570a
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0xac]
push eax
call fcn.100193e9
add esp, 0x24
mov dword [ebp - 0xdc], 3
jmp 0x1001cc8d
mov eax, dword [ebp - 0xdc]
dec eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0
jl 0x1001cca3
push 1
push 0
call fcn.10017041
pop ecx
pop ecx
jmp 0x1001cc80
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x67c]
call fcn.10021c38
jmp 0x1001cbd0
mov dword [ebp - 0x408], 0x15a13695
mov dword [ebp - 0x400], 0xffff
push 1
lea ecx, [ebp - 0x5c0]
call fcn.10021bd6
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x3f8], 4
mov dword [ebp - 0x410], 0xece3051e
mov dword [ebp - 0x13c], 0
jmp 0x1001cd0c
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 1
jge 0x1001cd2e
push dword [ebp - 0x13c]
lea ecx, [ebp - 0x5c0]
call fcn.10021c54
mov dword [eax], 1
jmp 0x1001ccff
lea eax, [ebp - 0x3f8]
push eax
lea eax, [ebp - 0x5c0]
push eax
lea eax, [ebp - 0x400]
push eax
lea eax, [ebp - 0x408]
push eax
lea eax, [ebp - 0x410]
push eax
push 1
push 0x73d2
push 0x468e
push 0x2a9f
push 0x5d66
push 1
call fcn.10016102
add esp, 0x2c
mov byte [ebp - 0x7a], 0
push 0x72db
push 0x4d20
push 0
lea eax, [ebp - 0x7a]
push eax
push 1
call fcn.10019d91
add esp, 0x14
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5c0]
call fcn.10021c38
mov eax, dword [ebp - 0x78]
and dword [eax], 0
jmp 0x1001d53f
mov dword [ebp - 0x318], 0x488f
mov dword [ebp - 0x420], 0x100080a4
cmp dword [ebp - 0x318], 0x4c31
jle 0x1001ced5
and dword [ebp - 0xfc], 0
jmp 0x1001cde3
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0x751d
jge 0x1001ced5
and dword [ebp - 0x104], 0
jmp 0x1001ce09
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0x27b8
jge 0x1001ced0
and dword [ebp - 0x10c], 0
jmp 0x1001ce2f
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0x6435
jge 0x1001cecb
and dword [ebp - 0x114], 0
jmp 0x1001ce55
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0x6f04
jge 0x1001cec6
mov eax, dword [ebp - 0xfc]
add eax, dword [ebp - 0x104]
mov ecx, dword [ebp - 0x10c]
shl eax, cl
or eax, dword [ebp - 0x114]
cdq
mov dword [ebp - 0x484], eax
mov dword [ebp - 0x480], edx
push dword [ebp - 0x480]
push dword [ebp - 0x484]
lea ecx, [ebp - 0x720]
call fcn.1000ab5a
pop ecx
pop ecx
mov dword [ebp - 0x418], eax
mov ecx, dword [ebp - 0x418]
call fcn.10021680
push eax
call fcn.10057a16
pop ecx
lea ecx, [ebp - 0x720]
call fcn.10021676
jmp 0x1001ce48
jmp 0x1001ce22
jmp 0x1001cdfc
jmp 0x1001cdd6
mov dword [ebp - 0xe4], 1
mov dword [ebp - 0x54c], 0x6e871d97
mov dword [ebp - 0x548], 0x6e871d97
mov dword [ebp - 0x544], 0x6e871d97
mov dword [ebp - 0x540], 0x6e871d97
lea ecx, [ebp - 0x1b1]
call fcn.10021c63
push eax
lea eax, [ebp - 0x53c]
push eax
lea eax, [ebp - 0x54c]
push eax
lea ecx, [ebp - 0x6c4]
call fcn.10021c83
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x6bc]
call fcn.10021c12
mov dword [ebp - 4], 0x15
mov dword [ebp - 0xe4], 0
jmp 0x1001cf5c
mov eax, dword [ebp - 0xe4]
dec eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0xffffffea
jne 0x1001cfc7
mov dword [ebp - 0x11c], 0x2961c0f8
mov dword [ebp - 0x11c], 0
jmp 0x1001cf88
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 3
jg 0x1001cfc5
mov byte [ebp - 0x79], 0
push 0x6e2d
push 1
lea eax, [ebp - 0x79]
push eax
push 0x7043
push 0x31a8
push 0x2533
push 1
push 0x35d3
push 0x426f
call fcn.10019898
add esp, 0x24
jmp 0x1001cf7b
jmp 0x1001cf4f
push 1
push 0x7e80
lea eax, [ebp - 0xe4]
push eax
push 0x5dd7
push 1
push 0x5cb2
push 0x66e
call fcn.10016584
add esp, 0x1c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6bc]
call fcn.10021c38
mov dword [ebp - 4], 0x16
cmp dword [ebp - 0x318], 0x465b
jge 0x1001d01c
push dword [ebp - 0x420]
call fcn.10057a16
pop ecx
jmp 0x1001d038
or dword [ebp - 4], 0xffffffff
jmp 0x1001d042
push 0
push 1
push 0xdeadbeef
call dword [ebp - 0x320]
mov dword [ebp - 0x428], eax
mov dword [ebp - 0x670], 0xfffffffe
mov byte [ebp - 0x49], 0
push 0x229a
push 0x367e
push 1
lea eax, [ebp - 0x49]
push eax
push 1
call fcn.10019a78
add esp, 0x14
mov byte [ebp - 0x7e], 0
movzx eax, byte [ebp - 0x7e]
test eax, eax
je 0x1001d099
push 0x42a0
push 0
call fcn.10020208
pop ecx
pop ecx
cmp dword [ebp - 0x428], 0
jne 0x1001d1e7
mov dword [ebp - 0x98], 0x8e5ccc90
mov dword [ebp - 0xe0], 0x402e31d8
push 2
lea ecx, [ebp - 0x578]
call fcn.10021bd6
mov dword [ebp - 4], 0x18
mov dword [ebp - 0x430], 2
mov dword [ebp - 0x124], 0
jmp 0x1001d0f1
mov eax, dword [ebp - 0x124]
inc eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 2
jge 0x1001d113
push dword [ebp - 0x124]
lea ecx, [ebp - 0x578]
call fcn.10021c54
mov dword [eax], 0x3a11
jmp 0x1001d0e4
push 0x61b0
lea eax, [ebp - 0xe0]
push eax
push 1
lea eax, [ebp - 0x98]
push eax
push 1
call fcn.10016762
add esp, 0x14
mov dword [ebp - 0xe0], 1
jmp 0x1001d14b
mov eax, dword [ebp - 0xe0]
dec eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0
jl 0x1001d1cd
mov dword [ebp - 0x98], 0
jmp 0x1001d16d
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 1
jg 0x1001d1ad
push dword [ebp - 0x98]
lea ecx, [ebp - 0x578]
call fcn.10021c54
cmp dword [eax], 0
je 0x1001d18e
jmp 0x1001d1ad
push 0x6a82
push 1
lea eax, [ebp - 0x430]
push eax
push 1
push 0x4319
call fcn.10019cf2
add esp, 0x14
jmp 0x1001d160
push 0x4262
push 0x1158
push 1
push 0x5440
push 1
call fcn.10019d91
add esp, 0x14
jmp 0x1001d13e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x578]
call fcn.10021c38
mov eax, dword [ebp - 0x78]
and dword [eax], 0
jmp 0x1001d53f
mov dword [ebp - 0x1c], 1
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x378], 0xb300
mov dword [ebp - 0x12c], 0
jmp 0x1001d218
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 2
jge 0x1001d234
mov eax, dword [ebp - 0x12c]
mov dword [ebp + eax*4 - 0x528], 0xffffffff
jmp 0x1001d20b
xor eax, eax
inc eax
je 0x1001d36e
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x1001d29d
mov eax, dword [ebp - 0x20]
inc eax
cmp eax, dword [ebp - 0x20]
jg 0x1001d25e
mov dword [ebp - 0x328], 1
jmp 0x1001d265
and dword [ebp - 0x328], 0
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x328]
je 0x1001d27c
mov dword [ebp - 0x330], 1
jmp 0x1001d283
and dword [ebp - 0x330], 0
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x330]
test eax, eax
je 0x1001d29d
mov dword [ebp - 0x338], 1
jmp 0x1001d2a4
and dword [ebp - 0x338], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x338], eax
jl 0x1001d2bb
mov dword [ebp - 0x340], 1
jmp 0x1001d2c2
and dword [ebp - 0x340], 0
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x340]
sub eax, dword [ebp - 0x1c]
cmp eax, 0xc6d0
je 0x1001d2e2
mov dword [ebp - 0x348], 1
jmp 0x1001d2e9
and dword [ebp - 0x348], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x348], eax
jne 0x1001d300
mov dword [ebp - 0x350], 1
jmp 0x1001d307
and dword [ebp - 0x350], 0
mov eax, dword [ebp - 0x350]
dec eax
jne 0x1001d31f
cmp dword [ebp - 0x20], 0
jne 0x1001d31f
and dword [ebp - 0x358], 0
jmp 0x1001d329
mov dword [ebp - 0x358], 1
mov eax, dword [ebp - 0x358]
sub eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x1c]
jge 0x1001d343
mov dword [ebp - 0x438], 1
jmp 0x1001d34a
and dword [ebp - 0x438], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x61c], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x6a0], eax
cmp dword [ebp - 0x1c], 0xfffffffa
jne 0x1001d36e
mov dword [ebp - 0x360], 1
jmp 0x1001d375
and dword [ebp - 0x360], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x360], eax
jg 0x1001d38c
mov dword [ebp - 0x440], 1
jmp 0x1001d393
and dword [ebp - 0x440], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x624], eax
mov eax, dword [ebp - 0x20]
add eax, 4
cmp eax, dword [ebp - 0x378]
je 0x1001d3b6
mov dword [ebp - 0x368], 1
jmp 0x1001d3bd
and dword [ebp - 0x368], 0
cmp dword [ebp - 0x368], 0xfffb
je 0x1001d3d5
mov dword [ebp - 0x370], 1
jmp 0x1001d3dc
and dword [ebp - 0x370], 0
cmp dword [ebp - 0x370], 0xc2a9
je 0x1001d3f4
mov dword [ebp - 0x380], 1
jmp 0x1001d3fb
and dword [ebp - 0x380], 0
mov eax, dword [ebp - 0x378]
add eax, dword [ebp - 0x380]
je 0x1001d41b
cmp dword [ebp - 0x20], 0
je 0x1001d41b
mov dword [ebp - 0x38c], 1
jmp 0x1001d422
and dword [ebp - 0x38c], 0
imul eax, dword [ebp - 0x38c], 0
add eax, dword [ebp - 0x1c]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x528], eax
mov dword [ebp - 0x20], 0
jmp 0x1001d449
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 1
jg 0x1001d460
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0x528], 0
je 0x1001d45e
jmp 0x1001d460
jmp 0x1001d442
push 0
push 1
push 0x3e3b
push 0x1105
push 0x320c
push 1
push 0x2f4e
push 0x968
lea eax, [ebp - 0x30]
push eax
push 0x5aa8
call fcn.10016e1d
add esp, 0x28
mov eax, dword [ebp - 0x30]
cmp dword [eax + 0x10], 0
je 0x1001d4a4
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x394], eax
jmp 0x1001d4ab
and dword [ebp - 0x394], 0
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x394]
mov dword [eax], ecx
jmp 0x1001d53f
mov eax, dword [ebp - 0x448]
mov dword [ebp - 0x450], eax
mov eax, dword [ebp - 0x450]
mov dword [ebp - 0x134], eax
mov eax, dword [ebp - 0x134]
mov dword [eax], 0xfffffff5
jmp 0x1001d4f4
mov eax, dword [ebp - 0x134]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x134]
mov dword [ecx], eax
mov eax, dword [ebp - 0x134]
cmp dword [eax], 0xfffffff6
jl 0x1001d51a
mov byte [ebp - 0x4a], 0
movzx eax, byte [ebp - 0x4a]
test eax, eax
je 0x1001d518
push 0x8f3
push 0
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x1001d4e3
jmp 0x1001d53f
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x458], eax
push 0
push 0x8a2
push 0x77c4
push dword [ebp - 0x458]
call fcn.1001765b
add esp, 0x10
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret