Function at 0x10024970
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10069fa6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x558
push esi
push edi
mov dword [ebp - 0x14], 0x6ccb0362
mov dword [ebp - 0x44], 0
push 1
lea ecx, [ebp - 0x41c]
call fcn.1000b514
and dword [ebp - 4], 0
mov dword [ebp - 0x124], 0x75a8055a
mov dword [ebp - 0x26c], 0x4feccdf4
mov dword [ebp - 0x324], 0
mov dword [ebp - 0x7c], 0
jmp 0x100249dd
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 1
jge 0x100249f9
push dword [ebp - 0x7c]
lea ecx, [ebp - 0x41c]
call fcn.1000b57b
mov dword [eax], 6
jmp 0x100249d6
cmp dword [ebp - 0x14], 0
jne 0x10024a71
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x14], eax
jl 0x10024a13
mov dword [ebp - 0x2fc], 1
jmp 0x10024a1a
and dword [ebp - 0x2fc], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x48c], eax
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x14], eax
jge 0x10024a37
mov dword [ebp - 0x1a0], 1
jmp 0x10024a3e
and dword [ebp - 0x1a0], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x1a0], eax
je 0x10024a55
mov dword [ebp - 0x108], 1
jmp 0x10024a5c
and dword [ebp - 0x108], 0
cmp dword [ebp - 0x108], 0xdb696893
je 0x10024a71
and dword [ebp - 0x2b0], 0
jmp 0x10024a7b
mov dword [ebp - 0x2b0], 1
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x2b0]
neg eax
jne 0x10024a9a
mov eax, 0xa3187110
test eax, eax
jne 0x10024a9a
and dword [ebp - 0x110], 0
jmp 0x10024aa4
mov dword [ebp - 0x110], 1
cmp dword [ebp - 0x110], 0x3563
je 0x10024abc
mov dword [ebp - 0x2b8], 1
jmp 0x10024ac3
and dword [ebp - 0x2b8], 0
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x2b8]
jl 0x10024ada
mov dword [ebp - 0x2c8], 1
jmp 0x10024ae1
and dword [ebp - 0x2c8], 0
cmp dword [ebp - 0x2c8], 0x168aa2d
jge 0x10024af9
mov dword [ebp - 0x11c], 1
jmp 0x10024b00
and dword [ebp - 0x11c], 0
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x7f8b
jge 0x10024b1e
mov dword [ebp - 0x1fc], 1
jmp 0x10024b25
and dword [ebp - 0x1fc], 0
imul eax, dword [ebp - 0x1fc], 0xfecb
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x44], 0
jmp 0x10024b42
mov eax, dword [ebp - 0x44]
dec eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0xfffffff5
jg 0x10024e76
mov dword [ebp - 0xa4], 0xffff
mov dword [ebp - 0xb8], 0xbaed967a
mov dword [ebp - 0x30c], 9
mov dword [ebp - 0x154], 0x7d717f6c
mov dword [ebp - 0x14], 0
jmp 0x10024b84
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x13
jl 0x10024e71
mov dword [ebp - 0x2c0], 0x9c1c
mov dword [ebp - 0x3b4], 0xffffffff
mov dword [ebp - 0x3bc], 0xffffffff
mov dword [ebp - 0x74], 0xb0c3e5f8
mov dword [ebp - 0x310], 0xfffffff9
mov dword [ebp - 0x368], 1
mov byte [ebp - 0x4c], 0
movzx eax, byte [ebp - 0x4c]
test eax, eax
je 0x10024bdb
push 0
call dword [sym.imp.COMDLG32.dll_GetSaveFileNameW]
cmp dword [ebp - 0x74], 0xc6aee34d
jae 0x10024bf0
mov dword [ebp - 0x3ac], 1
jmp 0x10024bf7
and dword [ebp - 0x3ac], 0
mov eax, dword [ebp - 0x3b4]
mov dword [ebp - 0x454], eax
mov eax, dword [ebp - 0x3bc]
mov dword [ebp - 0x124], eax
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0x26c], eax
cmp dword [ebp - 0x26c], 0xfffffffc
ja 0x10024c30
mov dword [ebp - 0x390], 1
jmp 0x10024c37
and dword [ebp - 0x390], 0
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x45c], eax
mov eax, dword [ebp - 0x2c0]
sub eax, 0x3635
cmp eax, dword [ebp - 0x74]
jg 0x10024c5f
mov dword [ebp - 0x12c], 1
jmp 0x10024c66
and dword [ebp - 0x12c], 0
mov eax, dword [ebp - 0xb8]
cmp dword [ebp - 0x12c], eax
je 0x10024c80
mov dword [ebp - 0x204], 1
jmp 0x10024c87
and dword [ebp - 0x204], 0
mov eax, dword [ebp - 0xa4]
cmp eax, dword [ebp - 0x204]
jge 0x10024ca1
mov dword [ebp - 0x3a4], 1
jmp 0x10024ca8
and dword [ebp - 0x3a4], 0
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x464], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x46c], eax
cmp dword [ebp - 0xa4], 0
je 0x10024cd5
cmp dword [ebp - 0x74], 0
je 0x10024cd5
mov dword [ebp - 0x134], 1
jmp 0x10024cdc
and dword [ebp - 0x134], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x134], eax
jne 0x10024cf3
mov dword [ebp - 0x2a4], 1
jmp 0x10024cfa
and dword [ebp - 0x2a4], 0
push 0
lea ecx, [ebp - 0x41c]
call fcn.1000b57b
mov dword [ebp - 0xd8], eax
mov eax, dword [ebp - 0xd8]
mov eax, dword [eax]
sub eax, dword [ebp - 0x2a4]
mov ecx, dword [ebp - 0xd8]
mov ecx, dword [ecx]
dec ecx
mov edx, dword [ebp - 0xd8]
mov dword [edx], ecx
test eax, eax
je 0x10024d43
push 2
pop eax
test eax, eax
je 0x10024d43
mov dword [ebp - 0x13c], 1
jmp 0x10024d4a
and dword [ebp - 0x13c], 0
mov eax, dword [ebp - 0x44]
sub eax, dword [ebp - 0x13c]
cmp eax, dword [ebp - 0xb8]
jge 0x10024d67
mov dword [ebp - 0x20c], 1
jmp 0x10024d6e
and dword [ebp - 0x20c], 0
cmp dword [ebp - 0x20c], 0xe7ff2b9a
je 0x10024d86
mov dword [ebp - 0x144], 1
jmp 0x10024d8d
and dword [ebp - 0x144], 0
mov eax, dword [ebp - 0x144]
mov dword [ebp - 0x324], eax
cmp dword [ebp - 0x30c], 0xfff6
jb 0x10024db1
mov dword [ebp - 0x274], 1
jmp 0x10024db8
and dword [ebp - 0x274], 0
mov eax, dword [ebp - 0xb8]
cmp dword [ebp - 0x274], eax
jge 0x10024dd2
mov dword [ebp - 0x14c], 1
jmp 0x10024dd9
and dword [ebp - 0x14c], 0
cmp dword [ebp - 0x14c], 0xfae2
jne 0x10024de9
cmp dword [ebp - 0x44], 0
imul eax, dword [ebp - 0x310], 0xb6ba
add eax, dword [ebp - 0x74]
cmp eax, 7
je 0x10024e07
mov dword [ebp - 0x214], 1
jmp 0x10024e0e
and dword [ebp - 0x214], 0
mov eax, dword [ebp - 0x214]
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 0x462e
jg 0x10024e32
mov dword [ebp - 0x15c], 1
jmp 0x10024e39
and dword [ebp - 0x15c], 0
mov eax, dword [ebp - 0x2c0]
imul eax, dword [ebp - 0x15c]
cmp eax, 0x4c1b2f08
jle 0x10024e59
mov dword [ebp - 0x21c], 1
jmp 0x10024e60
and dword [ebp - 0x21c], 0
mov eax, dword [ebp - 0x21c]
mov dword [ebp - 0x368], eax
jmp 0x10024b7d
jmp 0x10024b3b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x41c]
call fcn.1000b576
mov dword [ebp - 0x10], 0x6ccb0362
mov dword [ebp - 0x40], 0
push 1
lea ecx, [ebp - 0x428]
call fcn.1000b514
mov dword [ebp - 4], 1
mov dword [ebp - 0x184], 0x75a8055a
mov dword [ebp - 0x284], 0x4feccdf4
mov dword [ebp - 0x330], 0
mov dword [ebp - 0x84], 0
jmp 0x10024ede
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 1
jge 0x10024f00
push dword [ebp - 0x84]
lea ecx, [ebp - 0x428]
call fcn.1000b57b
mov dword [eax], 6
jmp 0x10024ed1
cmp dword [ebp - 0x10], 0
jne 0x10024f78
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x10], eax
jl 0x10024f1a
mov dword [ebp - 0x318], 1
jmp 0x10024f21
and dword [ebp - 0x318], 0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x474], eax
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x10], eax
jge 0x10024f3e
mov dword [ebp - 0x164], 1
jmp 0x10024f45
and dword [ebp - 0x164], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x164], eax
je 0x10024f5c
mov dword [ebp - 0x27c], 1
jmp 0x10024f63
and dword [ebp - 0x27c], 0
cmp dword [ebp - 0x27c], 0xdb696893
je 0x10024f78
and dword [ebp - 0x16c], 0
jmp 0x10024f82
mov dword [ebp - 0x16c], 1
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x16c]
neg eax
jne 0x10024fa1
mov eax, 0xa3187110
test eax, eax
jne 0x10024fa1
and dword [ebp - 0x224], 0
jmp 0x10024fab
mov dword [ebp - 0x224], 1
cmp dword [ebp - 0x224], 0x3563
je 0x10024fc3
mov dword [ebp - 0x174], 1
jmp 0x10024fca
and dword [ebp - 0x174], 0
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x174]
jl 0x10024fe1
mov dword [ebp - 0x2ac], 1
jmp 0x10024fe8
and dword [ebp - 0x2ac], 0
cmp dword [ebp - 0x2ac], 0x168aa2d
jge 0x10025000
mov dword [ebp - 0x17c], 1
jmp 0x10025007
and dword [ebp - 0x17c], 0
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0x7f8b
jge 0x10025025
mov dword [ebp - 0x22c], 1
jmp 0x1002502c
and dword [ebp - 0x22c], 0
imul eax, dword [ebp - 0x22c], 0xfecb
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x40], 0
jmp 0x10025049
mov eax, dword [ebp - 0x40]
dec eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0xfffffff5
jg 0x1002538c
mov dword [ebp - 0xf8], 0xffff
mov dword [ebp - 0xe0], 0xbaed967a
mov dword [ebp - 0x378], 9
mov dword [ebp - 0x1b4], 0x7d717f6c
mov dword [ebp - 0x10], 0
jmp 0x1002508b
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0x13
jl 0x10025387
mov dword [ebp - 0x2b4], 0x9c1c
mov dword [ebp - 0x320], 0xffffffff
mov dword [ebp - 0x370], 0xffffffff
mov dword [ebp - 0x94], 0xb0c3e5f8
mov dword [ebp - 0x338], 0xfffffff9
mov dword [ebp - 0x3b8], 1
mov byte [ebp - 0x47], 0
movzx eax, byte [ebp - 0x47]
test eax, eax
je 0x100250e5
push 0
call dword [sym.imp.COMDLG32.dll_GetSaveFileNameW]
cmp dword [ebp - 0x94], 0xc6aee34d
jae 0x100250fd
mov dword [ebp - 0x3a8], 1
jmp 0x10025104
and dword [ebp - 0x3a8], 0
mov eax, dword [ebp - 0x320]
mov dword [ebp - 0x47c], eax
mov eax, dword [ebp - 0x370]
mov dword [ebp - 0x184], eax
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x284], eax
cmp dword [ebp - 0x284], 0xfffffffc
ja 0x1002513d
mov dword [ebp - 0x328], 1
jmp 0x10025144
and dword [ebp - 0x328], 0
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x484], eax
mov eax, dword [ebp - 0x2b4]
sub eax, 0x3635
cmp eax, dword [ebp - 0x94]
jg 0x1002516f
mov dword [ebp - 0x18c], 1
jmp 0x10025176
and dword [ebp - 0x18c], 0
mov eax, dword [ebp - 0xe0]
cmp dword [ebp - 0x18c], eax
je 0x10025190
mov dword [ebp - 0x234], 1
jmp 0x10025197
and dword [ebp - 0x234], 0
mov eax, dword [ebp - 0xf8]
cmp eax, dword [ebp - 0x234]
jge 0x100251b1
mov dword [ebp - 0x398], 1
jmp 0x100251b8
and dword [ebp - 0x398], 0
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x444], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x494], eax
cmp dword [ebp - 0xf8], 0
je 0x100251e8
cmp dword [ebp - 0x94], 0
je 0x100251e8
mov dword [ebp - 0x194], 1
jmp 0x100251ef
and dword [ebp - 0x194], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x194], eax
jne 0x10025206
mov dword [ebp - 0x2c4], 1
jmp 0x1002520d
and dword [ebp - 0x2c4], 0
push 0
lea ecx, [ebp - 0x428]
call fcn.1000b57b
mov dword [ebp - 0xc0], eax
mov eax, dword [ebp - 0xc0]
mov eax, dword [eax]
sub eax, dword [ebp - 0x2c4]
mov ecx, dword [ebp - 0xc0]
mov ecx, dword [ecx]
dec ecx
mov edx, dword [ebp - 0xc0]
mov dword [edx], ecx
test eax, eax
je 0x10025256
push 2
pop eax
test eax, eax
je 0x10025256
mov dword [ebp - 0x19c], 1
jmp 0x1002525d
and dword [ebp - 0x19c], 0
mov eax, dword [ebp - 0x40]
sub eax, dword [ebp - 0x19c]
cmp eax, dword [ebp - 0xe0]
jge 0x1002527a
mov dword [ebp - 0x23c], 1
jmp 0x10025281
and dword [ebp - 0x23c], 0
cmp dword [ebp - 0x23c], 0xe7ff2b9a
je 0x10025299
mov dword [ebp - 0x1a4], 1
jmp 0x100252a0
and dword [ebp - 0x1a4], 0
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0x330], eax
cmp dword [ebp - 0x378], 0xfff6
jb 0x100252c4
mov dword [ebp - 0x28c], 1
jmp 0x100252cb
and dword [ebp - 0x28c], 0
mov eax, dword [ebp - 0xe0]
cmp dword [ebp - 0x28c], eax
jge 0x100252e5
mov dword [ebp - 0x1ac], 1
jmp 0x100252ec
and dword [ebp - 0x1ac], 0
cmp dword [ebp - 0x1ac], 0xfae2
jne 0x100252fc
cmp dword [ebp - 0x40], 0
imul eax, dword [ebp - 0x338], 0xb6ba
add eax, dword [ebp - 0x94]
cmp eax, 7
je 0x1002531d
mov dword [ebp - 0x244], 1
jmp 0x10025324
and dword [ebp - 0x244], 0
mov eax, dword [ebp - 0x244]
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 0x462e
jg 0x10025348
mov dword [ebp - 0x1bc], 1
jmp 0x1002534f
and dword [ebp - 0x1bc], 0
mov eax, dword [ebp - 0x2b4]
imul eax, dword [ebp - 0x1bc]
cmp eax, 0x4c1b2f08
jle 0x1002536f
mov dword [ebp - 0x24c], 1
jmp 0x10025376
and dword [ebp - 0x24c], 0
mov eax, dword [ebp - 0x24c]
mov dword [ebp - 0x3b8], eax
jmp 0x10025084
jmp 0x10025042
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x428]
call fcn.1000b576
movzx eax, byte [0x12045e1c]
test eax, eax
je 0x100253b9
mov esi, 0x1065a828
mov edi, dword [ebp + 8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 8]
jmp 0x10026b8a
mov dword [ebp - 0x4f0], 0x1065a828
push 2
lea ecx, [ebp - 0x2f8]
call fcn.1000b514
mov dword [ebp - 4], 2
mov dword [ebp - 0x64], 0x5c8094a
mov dword [ebp - 0x340], 0x1d08
cmp dword [ebp - 0x340], 0xa79
jge 0x10025467
lea eax, [ebp - 0xc8]
push eax
push 0x1000793c
call fcn.1005274a
pop ecx
pop ecx
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0x380], eax
mov eax, dword [ebp - 0xc8]
dec eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0x380], 0
je 0x10025467
lea eax, [ebp - 0x4f8]
push eax
lea eax, [ebp - 0x348]
push eax
push 0x10007b78
call fcn.1005274a
add esp, 0xc
cmp dword [ebp - 0x348], 0
jne 0x1002545a
push 0x10007b80
call fcn.10053214
pop ecx
jmp 0x10025465
push 0x10007b84
call fcn.10053214
pop ecx
jmp 0x10025407
mov dword [ebp - 0x8c], 0
jmp 0x10025480
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 2
jge 0x100254a2
push dword [ebp - 0x8c]
lea ecx, [ebp - 0x2f8]
call fcn.1000b57b
mov dword [eax], 0x9f9b
jmp 0x10025473
mov dword [ebp - 0x64], 0
jmp 0x100254b2
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 1
jg 0x1002554b
mov dword [ebp - 0x50], 1
mov dword [ebp - 0x50], 1
jmp 0x100254d3
mov eax, dword [ebp - 0x50]
dec eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
jl 0x10025546
mov dword [ebp - 0x5c], 0xfffffffb
mov dword [ebp - 0x5c], 0
jmp 0x100254f0
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 1
jg 0x1002552f
push dword [ebp - 0x64]
lea ecx, [ebp - 0x2f8]
call fcn.1000b57b
mov esi, eax
push dword [ebp - 0x5c]
lea ecx, [ebp - 0x2f8]
call fcn.1000b57b
mov ecx, dword [esi]
mov dword [eax], ecx
push dword [ebp - 0x50]
lea ecx, [ebp - 0x2f8]
call fcn.1000b57b
cmp dword [eax], 0
je 0x1002552d
jmp 0x100254e9
jmp 0x100254e9
push dword [ebp - 0x50]
lea ecx, [ebp - 0x2f8]
call fcn.1000b57b
cmp dword [eax], 0
je 0x10025544
jmp 0x10025546
jmp 0x100254cc
jmp 0x100254ab
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2f8]
call fcn.1000b576
mov dword [ebp - 0x4f4], 0x1065a82c
push 2
lea ecx, [ebp - 0x2ec]
call fcn.1000b514
mov dword [ebp - 4], 3
mov dword [ebp - 0x60], 0x5c8094a
mov dword [ebp - 0x78], 0
jmp 0x1002558f
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 2
jge 0x100255ab
push dword [ebp - 0x78]
lea ecx, [ebp - 0x2ec]
call fcn.1000b57b
mov dword [eax], 0x9f9b
jmp 0x10025588
mov dword [ebp - 0x60], 0
jmp 0x100255bb
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 1
jg 0x10025654
mov dword [ebp - 0x54], 1
mov dword [ebp - 0x54], 1
jmp 0x100255dc
mov eax, dword [ebp - 0x54]
dec eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0
jl 0x1002564f
mov dword [ebp - 0x68], 0xfffffffb
mov dword [ebp - 0x68], 0
jmp 0x100255f9
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 1
jg 0x10025638
push dword [ebp - 0x60]
lea ecx, [ebp - 0x2ec]
call fcn.1000b57b
mov esi, eax
push dword [ebp - 0x68]
lea ecx, [ebp - 0x2ec]
call fcn.1000b57b
mov ecx, dword [esi]
mov dword [eax], ecx
push dword [ebp - 0x54]
lea ecx, [ebp - 0x2ec]
call fcn.1000b57b
cmp dword [eax], 0
je 0x10025636
jmp 0x100255f2
jmp 0x100255f2
push dword [ebp - 0x54]
lea ecx, [ebp - 0x2ec]
call fcn.1000b57b
cmp dword [eax], 0
je 0x1002564d
jmp 0x1002564f
jmp 0x100255d5
jmp 0x100255b4
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2ec]
call fcn.1000b576
mov dword [ebp - 0x2c], 8
mov dword [ebp - 0xf0], 0x266d8ff8
mov dword [ebp - 0x254], 0x95ff79fa
mov dword [ebp - 0x3a0], 0x974498b9
mov dword [ebp - 0x3dc], 0x70cc321a
mov dword [ebp - 0x3d8], 0x70cc321a
mov dword [ebp - 0x3d4], 0x70cc321a
mov dword [ebp - 0x3d0], 0x70cc321a
mov dword [ebp - 0x70], 0xfffffff8
mov dword [ebp - 0x264], 0xa1ee3199
mov dword [ebp - 0x350], 0xfffffff6
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0xf0], eax
mov eax, dword [ebp - 0xf0]
imul eax, dword [ebp - 0x2c]
test eax, eax
je 0x100256f4
cmp dword [ebp - 0x2c], 0
je 0x100256f4
mov dword [ebp - 0x1c4], 1
jmp 0x100256fb
and dword [ebp - 0x1c4], 0
cmp dword [ebp - 0x1c4], 0xd764
jne 0x10025713
mov dword [ebp - 0x294], 1
jmp 0x1002571a
and dword [ebp - 0x294], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x294], eax
je 0x10025731
mov dword [ebp - 0x1cc], 1
jmp 0x10025738
and dword [ebp - 0x1cc], 0
mov eax, dword [ebp - 0x1cc]
mov dword [ebp - 0x254], eax
mov eax, dword [ebp - 0x254]
sub eax, 0x15a0cb43
cmp dword [ebp - 0x2c], eax
jle 0x10025760
mov dword [ebp - 0x1d4], 1
jmp 0x10025767
and dword [ebp - 0x1d4], 0
mov eax, dword [ebp - 0x1d4]
mov dword [ebp - 0x3a0], eax
cmp dword [ebp - 0x2c], 0xfffb
jbe 0x10025791
cmp dword [ebp - 0xf0], 0
je 0x10025791
mov dword [ebp - 0xd0], 1
jmp 0x10025798
and dword [ebp - 0xd0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xd0]
mov dword [ebp + eax - 0x3dc], ecx
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0xd0], eax
jge 0x100257c2
mov dword [ebp - 0x2bc], 1
jmp 0x100257c9
and dword [ebp - 0x2bc], 0
mov eax, dword [ebp - 0x2bc]
sub eax, dword [ebp - 0x70]
cmp eax, dword [ebp - 0x70]
jle 0x100257e3
mov dword [ebp - 0x1dc], 1
jmp 0x100257ea
and dword [ebp - 0x1dc], 0
cmp dword [ebp - 0x1dc], 0x2afd
jg 0x1002580f
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x3dc], 0
jne 0x1002580f
and dword [ebp - 0x25c], 0
jmp 0x10025819
mov dword [ebp - 0x25c], 1
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x25c], eax
jge 0x10025830
mov dword [ebp - 0x1e4], 1
jmp 0x10025837
and dword [ebp - 0x1e4], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x1e4], eax
jne 0x1002584e
mov dword [ebp - 0x29c], 1
jmp 0x10025855
and dword [ebp - 0x29c], 0
mov eax, dword [ebp - 0x2c]
imul eax, dword [ebp - 0x29c]
cmp eax, dword [ebp - 0x70]
jne 0x10025870
mov dword [ebp - 0x1ec], 1
jmp 0x10025877
and dword [ebp - 0x1ec], 0
mov eax, dword [ebp - 0x1ec]
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 1
jne 0x10025898
mov dword [ebp - 0x1f4], 1
jmp 0x1002589f
and dword [ebp - 0x1f4], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x1f4], eax
jg 0x100258b6
mov dword [ebp - 0x114], 1
jmp 0x100258bd
and dword [ebp - 0x114], 0
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x114]
jne 0x100258d4
mov dword [ebp - 0x118], 1
jmp 0x100258db
and dword [ebp - 0x118], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x118], eax
jl 0x100258f2
mov dword [ebp - 0x120], 1
jmp 0x100258f9
and dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x350], eax
mov byte [0x12045e1c], 1
mov dword [ebp - 0x4a8], 0x70ad6f2e
mov dword [ebp - 0x44c], 0x20f89b54
mov dword [ebp - 0x450], 1
mov dword [ebp - 0x4ec], 0x152c58fb
mov dword [ebp - 0x458], 0x8748afa2
mov dword [ebp - 0x4b8], 0xfffffffc
mov dword [ebp - 0x460], 0xffffffff
push 3
lea ecx, [ebp - 0x4a4]
call fcn.1000b514
mov dword [ebp - 4], 4
mov dword [ebp - 0x128], 0x9214a9ba
mov dword [ebp - 0x80], 0
jmp 0x10025980
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 3
jge 0x1002599c
push dword [ebp - 0x80]
lea ecx, [ebp - 0x4a4]
call fcn.1000b57b
mov dword [eax], 0x6f8c7b5c
jmp 0x10025979
mov eax, dword [ebp - 0x128]
dec eax
mov dword [ebp - 0x128], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4a4]
call fcn.1000b576
xor eax, eax
inc eax
imul eax, eax, 0x148
add eax, 0x1065a618
mov dword [ebp - 0x260], eax
or dword [ebp - 0x404], 0xffffffff
or dword [ebp - 0x400], 0xffffffff
or dword [ebp - 0x3fc], 0xffffffff
or dword [ebp - 0x3f8], 0xffffffff
lea ecx, [ebp - 0xe5]
call fcn.1000b58a
push eax
lea eax, [ebp - 0x3f4]
push eax
lea eax, [ebp - 0x404]
push eax
lea ecx, [ebp - 0x564]
call fcn.1000b58d
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x2e0]
call fcn.1000b550
mov dword [ebp - 4], 5
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x30], 0
jmp 0x10025a3b
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jg 0x10025c0e
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x88], 0xd767
mov dword [ebp - 0x20], 3
jmp 0x10025a66
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jl 0x10025aa6
push dword [ebp - 0x20]
lea ecx, [ebp - 0x2e0]
call fcn.1000b57b
mov esi, eax
push dword [ebp - 0x30]
lea ecx, [ebp - 0x2e0]
call fcn.1000b57b
mov ecx, dword [esi]
mov dword [eax], ecx
mov esi, dword [ebp - 0x88]
push dword [ebp - 0x20]
lea ecx, [ebp - 0x2e0]
call fcn.1000b57b
mov dword [eax], esi
jmp 0x10025a5f
push 2
lea ecx, [ebp - 0x2e0]
call fcn.1000b57b
mov ecx, dword [ebp - 0x20]
cmp dword [eax], ecx
jl 0x10025ac6
mov dword [ebp - 0x130], 1
jmp 0x10025acd
and dword [ebp - 0x130], 0
push dword [ebp - 0x30]
lea ecx, [ebp - 0x2e0]
call fcn.1000b57b
mov ecx, dword [ebp - 0x130]
cmp ecx, dword [eax]
jne 0x10025af7
mov eax, 0x71c097bc
test eax, eax
jne 0x10025af7
and dword [ebp - 0x138], 0
jmp 0x10025b01
mov dword [ebp - 0x138], 1
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x138], eax
jne 0x10025b18
mov dword [ebp - 0x140], 1
jmp 0x10025b1f
and dword [ebp - 0x140], 0
mov eax, dword [ebp - 0x88]
cmp eax, dword [ebp - 0x140]
jg 0x10025b39
mov dword [ebp - 0x148], 1
jmp 0x10025b40
and dword [ebp - 0x148], 0
push dword [ebp - 0x30]
lea ecx, [ebp - 0x2e0]
call fcn.1000b57b
mov esi, dword [eax]
sub esi, 0x52828ee2
push dword [ebp - 0x30]
lea ecx, [ebp - 0x2e0]
call fcn.1000b57b
mov eax, dword [eax]
add eax, dword [ebp - 0x148]
cmp esi, eax
je 0x10025b82
cmp dword [ebp - 0x30], 0
je 0x10025b82
mov dword [ebp - 0x150], 1
jmp 0x10025b89
and dword [ebp - 0x150], 0
mov eax, dword [ebp - 0x88]
add eax, dword [ebp - 0x150]
je 0x10025be9
mov dword [ebp - 0x20], 0
jmp 0x10025ba7
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jg 0x10025be7
mov byte [ebp - 0x4b], 0
movzx eax, byte [ebp - 0x4b]
test eax, eax
je 0x10025be5
push 0x1735
push 0x104c
push 0x1bd9
push 0x1525
push 0x1100
push 0
push 0
push 0
push 0
push 0x22e8
call dword [sym.imp.USER32.dll_DrawStateW]
jmp 0x10025ba0
jmp 0x10025c09
mov dword [ebp - 0x388], 0x51acae7b
cmp dword [ebp - 0x388], 0
je 0x10025bfe
jmp 0x10025c0e
cmp dword [ebp - 0x88], 0
je 0x10025c09
jmp 0x10025c0e
jmp 0x10025a34
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2e0]
call fcn.1000b576
mov dword [ebp - 0x24], 8
mov dword [ebp - 0xa8], 0x266d8ff8
mov dword [ebp - 0x170], 0x95ff79fa
mov dword [ebp - 0x358], 0x974498b9
mov dword [ebp - 0x3cc], 0x70cc321a
mov dword [ebp - 0x3c8], 0x70cc321a
mov dword [ebp - 0x3c4], 0x70cc321a
mov dword [ebp - 0x3c0], 0x70cc321a
mov dword [ebp - 0x6c], 0xfffffff8
mov dword [ebp - 0x1b0], 0xa1ee3199
mov dword [ebp - 0x3b0], 0xfffffff6
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 0xa8]
imul eax, dword [ebp - 0x24]
test eax, eax
je 0x10025cae
cmp dword [ebp - 0x24], 0
je 0x10025cae
mov dword [ebp - 0x158], 1
jmp 0x10025cb5
and dword [ebp - 0x158], 0
cmp dword [ebp - 0x158], 0xd764
jne 0x10025ccd
mov dword [ebp - 0x160], 1
jmp 0x10025cd4
and dword [ebp - 0x160], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x160], eax
je 0x10025ceb
mov dword [ebp - 0x168], 1
jmp 0x10025cf2
and dword [ebp - 0x168], 0
mov eax, dword [ebp - 0x168]
mov dword [ebp - 0x170], eax
mov eax, dword [ebp - 0x170]
sub eax, 0x15a0cb43
cmp dword [ebp - 0x24], eax
jle 0x10025d1a
mov dword [ebp - 0x178], 1
jmp 0x10025d21
and dword [ebp - 0x178], 0
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x358], eax
cmp dword [ebp - 0x24], 0xfffb
jbe 0x10025d4b
cmp dword [ebp - 0xa8], 0
je 0x10025d4b
mov dword [ebp - 0xac], 1
jmp 0x10025d52
and dword [ebp - 0xac], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xac]
mov dword [ebp + eax - 0x3cc], ecx
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0xac], eax
jge 0x10025d7c
mov dword [ebp - 0x180], 1
jmp 0x10025d83
and dword [ebp - 0x180], 0
mov eax, dword [ebp - 0x180]
sub eax, dword [ebp - 0x6c]
cmp eax, dword [ebp - 0x6c]
jle 0x10025d9d
mov dword [ebp - 0x188], 1
jmp 0x10025da4
and dword [ebp - 0x188], 0
cmp dword [ebp - 0x188], 0x2afd
jg 0x10025dc9
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x3cc], 0
jne 0x10025dc9
and dword [ebp - 0x190], 0
jmp 0x10025dd3
mov dword [ebp - 0x190], 1
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x190], eax
jge 0x10025dea
mov dword [ebp - 0x198], 1
jmp 0x10025df1
and dword [ebp - 0x198], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x198], eax
jne 0x10025e08
mov dword [ebp - 0x100], 1
jmp 0x10025e0f
and dword [ebp - 0x100], 0
mov eax, dword [ebp - 0x24]
imul eax, dword [ebp - 0x100]
cmp eax, dword [ebp - 0x6c]
jne 0x10025e2a
mov dword [ebp - 0x1a8], 1
jmp 0x10025e31
and dword [ebp - 0x1a8], 0
mov eax, dword [ebp - 0x1a8]
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 1
jne 0x10025e52
mov dword [ebp - 0x1b8], 1
jmp 0x10025e59
and dword [ebp - 0x1b8], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x1b8], eax
jg 0x10025e70
mov dword [ebp - 0x1c0], 1
jmp 0x10025e77
and dword [ebp - 0x1c0], 0
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x1c0]
jne 0x10025e8e
mov dword [ebp - 0x1c8], 1
jmp 0x10025e95
and dword [ebp - 0x1c8], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x1c8], eax
jl 0x10025eac
mov dword [ebp - 0x1d0], 1
jmp 0x10025eb3
and dword [ebp - 0x1d0], 0
mov eax, dword [ebp - 0x1d0]
mov dword [ebp - 0x3b0], eax
xor eax, eax
inc eax
imul eax, eax, 0x1c
add eax, 0x1065a618
mov dword [ebp - 0xfc], eax
mov dword [ebp - 0xbc], 0xfa72c2
push 4
lea ecx, [ebp - 0x434]
call fcn.1000b514
mov dword [ebp - 4], 6
mov dword [ebp - 0x360], 0x6bc3ec3d
mov dword [ebp - 0x1e8], 0xfffffffc
mov dword [ebp - 0x308], 1
mov dword [ebp - 0x38], 0
jmp 0x10025f1c
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 3
jge 0x10025f32
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x52c], 0
jmp 0x10025f15
mov dword [ebp - 0x38], 0
jmp 0x10025f42
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 4
jge 0x10025f5e
push dword [ebp - 0x38]
lea ecx, [ebp - 0x434]
call fcn.1000b57b
mov dword [eax], 0xf82d83d7
jmp 0x10025f3b
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0x1d8], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1d8]
mov dword [ebp + eax - 0x52c], ecx
cmp dword [ebp - 0x1d8], 0xfffffffe
jb 0x10025f92
mov dword [ebp - 0xb4], 1
jmp 0x10025f99
and dword [ebp - 0xb4], 0
push 1
lea ecx, [ebp - 0x434]
call fcn.1000b57b
mov ecx, dword [ebp - 0xb4]
mov dword [eax], ecx
mov eax, dword [ebp - 0x360]
cmp dword [ebp - 0xb4], eax
jl 0x10025fc8
mov dword [ebp - 0x1e0], 1
jmp 0x10025fcf
and dword [ebp - 0x1e0], 0
mov eax, dword [ebp - 0x1e0]
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 9
jg 0x10025ff0
mov dword [ebp - 0x1f0], 1
jmp 0x10025ff7
and dword [ebp - 0x1f0], 0
mov eax, dword [ebp - 0xbc]
cmp dword [ebp - 0x1f0], eax
jle 0x10026011
mov dword [ebp - 0x1f8], 1
jmp 0x10026018
and dword [ebp - 0x1f8], 0
imul eax, dword [ebp - 0x1f8], 0
cmp eax, 0xfffa
jae 0x10026032
mov dword [ebp - 0x200], 1
jmp 0x10026039
and dword [ebp - 0x200], 0
mov eax, dword [ebp - 0xbc]
cmp dword [ebp - 0x200], eax
jg 0x10026053
mov dword [ebp - 0x208], 1
jmp 0x1002605a
and dword [ebp - 0x208], 0
mov eax, dword [ebp - 0x208]
mov dword [ebp - 0x308], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x434]
call fcn.1000b576
mov dword [ebp - 0x4fc], 0x70ad6f2e
mov dword [ebp - 0x468], 0x20f89b54
mov dword [ebp - 0x4c8], 1
mov dword [ebp - 0x470], 0x152c58fb
mov dword [ebp - 0x4dc], 0x8748afa2
mov dword [ebp - 0x478], 0xfffffffc
mov dword [ebp - 0x4d8], 0xffffffff
push 3
lea ecx, [ebp - 0x4b4]
call fcn.1000b514
mov dword [ebp - 4], 7
mov dword [ebp - 0x210], 0x9214a9ba
mov dword [ebp - 0x90], 0
jmp 0x100260f2
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 3
jge 0x10026114
push dword [ebp - 0x90]
lea ecx, [ebp - 0x4b4]
call fcn.1000b57b
mov dword [eax], 0x6f8c7b5c
jmp 0x100260e5
mov eax, dword [ebp - 0x210]
dec eax
mov dword [ebp - 0x210], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4b4]
call fcn.1000b576
mov eax, dword [ebp - 0x260]
mov dword [0x1065a828], eax
mov dword [ebp - 0x220], 0
mov dword [ebp - 0xc4], 4
push 1
lea ecx, [ebp - 0x440]
call fcn.1000b514
mov dword [ebp - 4], 8
mov dword [ebp - 0x1c], 0
jmp 0x10026173
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x10026189
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x544], 1
jmp 0x1002616c
mov dword [ebp - 0x1c], 0
jmp 0x10026199
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x100261af
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x4c4], 3
jmp 0x10026192
mov dword [ebp - 0x1c], 0
jmp 0x100261bf
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jge 0x100261db
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x440]
call fcn.1000b57b
mov dword [eax], 0xfffffff6
jmp 0x100261b8
mov eax, dword [ebp - 0x220]
mov dword [ebp - 0x218], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x218]
mov dword [ebp + eax - 0x544], ecx
mov eax, dword [ebp - 0xc4]
cmp dword [ebp - 0x218], eax
jg 0x10026214
mov dword [ebp - 0x228], 1
jmp 0x1002621b
and dword [ebp - 0x228], 0
mov eax, dword [ebp - 0x220]
push 4
pop ecx
imul ecx, ecx, 0
mov edx, dword [ebp - 0x228]
sub edx, dword [ebp + ecx - 0x4c4]
add edx, dword [ebp - 0xc4]
add eax, edx
mov ecx, 0xffab
sub ecx, eax
cmp ecx, 0xf89
jle 0x10026257
mov dword [ebp - 0x304], 1
jmp 0x1002625e
and dword [ebp - 0x304], 0
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x480], eax
push 4
pop eax
imul eax, eax, 0
mov esi, dword [ebp + eax - 0x4c4]
push 0
lea ecx, [ebp - 0x440]
call fcn.1000b57b
mov dword [eax], esi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x440]
call fcn.1000b576
or dword [ebp - 0x3f0], 0xffffffff
or dword [ebp - 0x3ec], 0xffffffff
or dword [ebp - 0x3e8], 0xffffffff
or dword [ebp - 0x3e4], 0xffffffff
lea ecx, [ebp - 0xad]
call fcn.1000b58a
push eax
lea eax, [ebp - 0x3e0]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea ecx, [ebp - 0x54c]
call fcn.1000b58d
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x2d4]
call fcn.1000b550
mov dword [ebp - 4], 9
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 0x34], 0
jmp 0x10026304
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 3
jg 0x100264d7
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x98], 0xd767
mov dword [ebp - 0x28], 3
jmp 0x1002632f
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jl 0x1002636f
push dword [ebp - 0x28]
lea ecx, [ebp - 0x2d4]
call fcn.1000b57b
mov esi, eax
push dword [ebp - 0x34]
lea ecx, [ebp - 0x2d4]
call fcn.1000b57b
mov ecx, dword [esi]
mov dword [eax], ecx
mov esi, dword [ebp - 0x98]
push dword [ebp - 0x28]
lea ecx, [ebp - 0x2d4]
call fcn.1000b57b
mov dword [eax], esi
jmp 0x10026328
push 2
lea ecx, [ebp - 0x2d4]
call fcn.1000b57b
mov ecx, dword [ebp - 0x28]
cmp dword [eax], ecx
jl 0x1002638f
mov dword [ebp - 0x230], 1
jmp 0x10026396
and dword [ebp - 0x230], 0
push dword [ebp - 0x34]
lea ecx, [ebp - 0x2d4]
call fcn.1000b57b
mov ecx, dword [ebp - 0x230]
cmp ecx, dword [eax]
jne 0x100263c0
mov eax, 0x71c097bc
test eax, eax
jne 0x100263c0
and dword [ebp - 0x238], 0
jmp 0x100263ca
mov dword [ebp - 0x238], 1
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x238], eax
jne 0x100263e1
mov dword [ebp - 0x240], 1
jmp 0x100263e8
and dword [ebp - 0x240], 0
mov eax, dword [ebp - 0x98]
cmp eax, dword [ebp - 0x240]
jg 0x10026402
mov dword [ebp - 0x248], 1
jmp 0x10026409
and dword [ebp - 0x248], 0
push dword [ebp - 0x34]
lea ecx, [ebp - 0x2d4]
call fcn.1000b57b
mov esi, dword [eax]
sub esi, 0x52828ee2
push dword [ebp - 0x34]
lea ecx, [ebp - 0x2d4]
call fcn.1000b57b
mov eax, dword [eax]
add eax, dword [ebp - 0x248]
cmp esi, eax
je 0x1002644b
cmp dword [ebp - 0x34], 0
je 0x1002644b
mov dword [ebp - 0x250], 1
jmp 0x10026452
and dword [ebp - 0x250], 0
mov eax, dword [ebp - 0x98]
add eax, dword [ebp - 0x250]
je 0x100264b2
mov dword [ebp - 0x28], 0
jmp 0x10026470
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jg 0x100264b0
mov byte [ebp - 0x48], 0
movzx eax, byte [ebp - 0x48]
test eax, eax
je 0x100264ae
push 0x1735
push 0x104c
push 0x1bd9
push 0x1525
push 0x1100
push 0
push 0
push 0
push 0
push 0x22e8
call dword [sym.imp.USER32.dll_DrawStateW]
jmp 0x10026469
jmp 0x100264d2
mov dword [ebp - 0x314], 0x51acae7b
cmp dword [ebp - 0x314], 0
je 0x100264c7
jmp 0x100264d7
cmp dword [ebp - 0x98], 0
je 0x100264d2
jmp 0x100264d7
jmp 0x100262fd
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2d4]
call fcn.1000b576
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0xa0], 0xffffffe7
jmp 0x10026509
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0xfffffff8
jle 0x10026562
mov dword [ebp - 0x9c], 0x53aa9ac7
mov dword [ebp - 0x300], 0x2b3b7bed
mov dword [ebp - 0x9c], 0xfffffffe
jmp 0x1002653f
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0x15
jle 0x10026560
mov dword [ebp - 0x31c], 0x11f07b4b
mov eax, dword [ebp - 0x31c]
mov dword [ebp - 0x300], eax
jmp 0x10026532
jmp 0x100264fc
mov eax, dword [ebp - 0xfc]
mov dword [0x1065a82c], eax
mov dword [ebp - 0x32c], 0x2487
cmp dword [ebp - 0x32c], 0x7f0
jge 0x100266e9
mov dword [ebp - 0x4e0], 0x5d
lea eax, [ebp - 0xcc]
push eax
push 0x10007940
call fcn.1005274a
pop ecx
pop ecx
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0x334], eax
mov eax, dword [ebp - 0xcc]
dec eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0x334], 0
je 0x100266e9
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0x33c]
push eax
push 0x100079cc
call fcn.1005274a
add esp, 0xc
mov byte [ebp - 0x49], 0
lea eax, [ebp - 0x49]
push eax
push 0x5d
lea ecx, [ebp - 0x50c]
call fcn.1001dc62
mov dword [ebp - 4], 0xa
and dword [ebp - 0xd4], 0
jmp 0x10026617
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
mov eax, dword [ebp - 0xd4]
cmp eax, dword [ebp - 0x33c]
jge 0x1002665b
lea eax, [ebp - 0x344]
push eax
push 0x10007940
call fcn.1005274a
pop ecx
pop ecx
push 1
push dword [ebp - 0x344]
lea eax, [ebp - 0x55c]
push eax
lea ecx, [ebp - 0x50c]
call fcn.1001dce3
mov ecx, eax
call fcn.1001de59
jmp 0x1002660a
and dword [ebp - 0x258], 0
mov dword [ebp - 0x58], 1
jmp 0x10026672
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0x5d
jge 0x100266c3
push dword [ebp - 0x58]
lea eax, [ebp - 0x554]
push eax
lea ecx, [ebp - 0x50c]
call fcn.1001dce3
mov ecx, eax
call fcn.1001de7e
movzx eax, al
test eax, eax
je 0x1002669d
jmp 0x1002666b
cmp dword [ebp - 0xdc], 0
jle 0x100266b5
mov eax, dword [ebp - 0xdc]
dec eax
mov dword [ebp - 0xdc], eax
jmp 0x100266c1
mov eax, dword [ebp - 0x58]
dec eax
mov dword [ebp - 0x258], eax
jmp 0x100266c3
jmp 0x1002666b
push dword [ebp - 0x258]
push 0x100079c4
call fcn.10050d7d
pop ecx
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x50c]
call fcn.1001dcc3
jmp 0x100265a4
mov dword [ebp - 0x488], 0xec0a
mov byte [ebp - 0x45], 0
movzx eax, byte [ebp - 0x45]
test eax, eax
je 0x10026707
push 0
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov byte [ebp - 0x4a], 0
movzx eax, byte [ebp - 0x4a]
test eax, eax
je 0x1002671e
push 0x9db
call dword [sym.imp.USER32.dll_IsWindow]
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov edx, dword [ebp - 0xfc]
mov edx, dword [edx + eax]
mov eax, dword [ebp - 0x260]
mov ecx, dword [eax + ecx]
call fcn.100248a7
mov dword [ebp - 0x39c], eax
mov dword [ebp - 0x34c], 0x1e62
cmp dword [ebp - 0x34c], 0xad8
jge 0x100267c3
call fcn.10052884
push 0x20
pop ecx
imul ecx, ecx, 0
add eax, ecx
push eax
push 0x10007a78
push 0x10007b88
call fcn.100531ee
add esp, 0xc
push 0x119f52d8
push 0x1000793c
call fcn.1005274a
pop ecx
pop ecx
push 0x3d0904
push 0xffffffffffffffff
push 0x119f7228
call fcn.10023b06
add esp, 0xc
push dword [0x119f52d8]
call fcn.100248e8
pop ecx
cdq
mov ecx, 0x3b9aca07
idiv ecx
push edx
push 0x1000796c
call fcn.10050d7d
pop ecx
pop ecx
mov dword [ebp - 0x280], 0x4c90d297
mov dword [ebp - 0x384], 0x836b16b
mov dword [ebp - 0xe4], 0xd947597a
mov dword [ebp - 0x364], 0xfffffff8
mov dword [ebp - 0x354], 7
mov dword [ebp - 0x4e8], 1
mov dword [ebp - 0x18], 0
jmp 0x1002680f
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jge 0x10026825
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x268], 0x8ef6b8f3
jmp 0x10026808
mov dword [ebp - 0x18], 0
jmp 0x10026835
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x1002684b
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x4d4], 0x90e86489
jmp 0x1002682e
mov dword [ebp - 0x18], 0
jmp 0x1002685b
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jge 0x10026871
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x520], 0xfff6
jmp 0x10026854
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x268]
mov dword [ebp - 0x490], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x4d4]
mov dword [ebp - 0x4e4], eax
push 0xfffffffffffffff6
pop eax
sub eax, dword [ebp - 0x280]
add eax, dword [ebp - 0x354]
je 0x100268c4
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x4d4], 0
je 0x100268c4
mov dword [ebp - 0x35c], 1
jmp 0x100268cb
and dword [ebp - 0x35c], 0
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x498], eax
cmp dword [ebp - 0x364], 0xb2d5
jl 0x100268ef
mov dword [ebp - 0x270], 1
jmp 0x100268f6
and dword [ebp - 0x270], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x520]
mov dword [ebp - 0x36c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x268]
imul eax, dword [ebp - 0x270]
mov dword [ebp - 0x374], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x520]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x520], eax
mov eax, dword [ebp - 0x36c]
cmp eax, dword [ebp - 0x374]
jge 0x10026958
mov dword [ebp - 0x278], 1
jmp 0x1002695f
and dword [ebp - 0x278], 0
cmp dword [ebp - 0x278], 6
je 0x10026974
mov dword [ebp - 0x37c], 1
jmp 0x1002697b
and dword [ebp - 0x37c], 0
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x510], eax
mov eax, dword [ebp - 0x280]
mov dword [ebp - 0x448], eax
mov eax, dword [ebp - 0x384]
add eax, 0xca48
mov dword [ebp - 0xe4], eax
mov byte [ebp - 0x46], 0
movzx eax, byte [ebp - 0x46]
test eax, eax
je 0x100269c0
push 0xe44
push 0x11c5
call dword [sym.imp.GDI32.dll_SetMapMode]
mov dword [ebp - 0xf4], 0xfa72c2
push 4
lea ecx, [ebp - 0x410]
call fcn.1000b514
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x38c], 0x6bc3ec3d
mov dword [ebp - 0x298], 0xfffffffc
mov dword [ebp - 0x394], 1
mov dword [ebp - 0x3c], 0
jmp 0x10026a0c
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 3
jge 0x10026a22
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x538], 0
jmp 0x10026a05
mov dword [ebp - 0x3c], 0
jmp 0x10026a32
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 4
jge 0x10026a4e
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x410]
call fcn.1000b57b
mov dword [eax], 0xf82d83d7
jmp 0x10026a2b
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0x288], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x288]
mov dword [ebp + eax - 0x538], ecx
cmp dword [ebp - 0x288], 0xfffffffe
jb 0x10026a82
mov dword [ebp - 0xec], 1
jmp 0x10026a89
and dword [ebp - 0xec], 0
push 1
lea ecx, [ebp - 0x410]
call fcn.1000b57b
mov ecx, dword [ebp - 0xec]
mov dword [eax], ecx
mov eax, dword [ebp - 0x38c]
cmp dword [ebp - 0xec], eax
jl 0x10026ab8
mov dword [ebp - 0x290], 1
jmp 0x10026abf
and dword [ebp - 0x290], 0
mov eax, dword [ebp - 0x290]
mov dword [ebp - 0x298], eax
cmp dword [ebp - 0x298], 9
jg 0x10026ae0
mov dword [ebp - 0x2a0], 1
jmp 0x10026ae7
and dword [ebp - 0x2a0], 0
mov eax, dword [ebp - 0xf4]
cmp dword [ebp - 0x2a0], eax
jle 0x10026b01
mov dword [ebp - 0x2a8], 1
jmp 0x10026b08
and dword [ebp - 0x2a8], 0
imul eax, dword [ebp - 0x2a8], 0
cmp eax, 0xfffa
jae 0x10026b22
mov dword [ebp - 0x104], 1
jmp 0x10026b29
and dword [ebp - 0x104], 0
mov eax, dword [ebp - 0xf4]
cmp dword [ebp - 0x104], eax
jg 0x10026b43
mov dword [ebp - 0x10c], 1
jmp 0x10026b4a
and dword [ebp - 0x10c], 0
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x394], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x410]
call fcn.1000b576
push dword [ebp - 0xfc]
mov edx, 0x1065a5c4
mov ecx, dword [ebp - 0x39c]
call fcn.100248b3
pop ecx
mov esi, 0x1065a828
mov edi, dword [ebp + 8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret