Function at 0x1000a230
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1004607e
mov eax, dword fs:[0]
push eax
sub esp, 0xb8c
mov eax, dword [0x10156054]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0xab4], ecx
mov dword [ebp - 4], 0
mov al, byte [0x10054240]
mov dword [ebp - 0x550], 0
mov dword [ebp - 0x53c], 0xf
mov dword [ebp - 0x540], 1
mov byte [ebp - 0x550], al
mov byte [ebp - 0x54f], 0
mov byte [ebp - 4], 1
lea esi, [ebp - 0x2cb]
mov ebx, 0x68
nop word [eax + eax]
mov eax, 0xcccccccd
dec esi
mul ebx
shr edx, 3
mov al, dl
shl al, 2
lea ecx, [eax + edx]
add cl, cl
sub bl, cl
add bl, 0x30
mov byte [esi], bl
mov ebx, edx
test ebx, ebx
jne 0x1000a2b0
lea eax, [ebp - 0x2cb]
mov dword [ebp - 0x5b0], edx
mov dword [ebp - 0x5a0], edx
mov dword [ebp - 0x59c], 0xf
cmp esi, eax
je 0x1000a301
sub eax, esi
lea ecx, [ebp - 0x5b0]
push eax
push esi
call fcn.1001fd70
call fcn.1002fa49
cmp dword [ebp - 0x59c], 0x10
lea esi, [ebp - 0x5b0]
mov edi, eax
lea eax, [ebp - 0xb20]
cmovae esi, dword [ebp - 0x5b0]
push 0xa
push eax
push esi
mov dword [edi], 0
call fcn.1002ddd0
add esp, 0xc
xor ebx, ebx
cmp esi, dword [ebp - 0xb20]
je 0x1000a344
cmp dword [edi], 0x22
cmovne ebx, eax
mov edx, dword [ebp - 0x59c]
mov dword [ebp - 0xab0], ebx
cmp edx, 0x10
jb 0x1000a384
mov ecx, dword [ebp - 0x5b0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1000a37a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000dac5
push edx
push ecx
call fcn.10024b33
add esp, 8
mov edx, dword [ebp - 0x53c]
mov ecx, Ordinal_2
mov esi, dword [ebp - 0x540]
mov dword [ebp - 0x5a0], 0
mov dword [ebp - 0x59c], 0xf
mov byte [ebp - 0x5b0], 0
mov dword [ebp - 0xaac], edx
cmp esi, edx
jae 0x1000a3e0
lea eax, [esi + 1]
cmp edx, 0x10
mov dword [ebp - 0x540], eax
lea eax, [ebp - 0x550]
cmovae eax, dword [ebp - 0x550]
mov byte [eax + esi], bl
mov byte [eax + esi + 1], 0
jmp 0x1000a4b0
mov eax, ecx
sub eax, esi
cmp eax, 1
jb 0x1000daa7
lea edi, [esi + 1]
or edi, 0xf
cmp edi, ecx
jbe 0x1000a3fb
mov edi, ecx
jmp 0x1000a413
mov ebx, edx
mov eax, ecx
shr ebx, 1
sub eax, ebx
cmp edx, eax
jbe 0x1000a40b
mov edi, ecx
jmp 0x1000a413
lea eax, [ebx + edx]
cmp edi, eax
cmovb edi, eax
lea eax, [edi + 1]
push eax
lea ecx, [ebp - 0x550]
call fcn.1001ffd0
cmp dword [ebp - 0xaac], 0x10
mov ebx, eax
lea eax, [esi + 1]
mov dword [ebp - 0x53c], edi
mov dword [ebp - 0x540], eax
push esi
jb 0x1000a48c
mov edi, dword [ebp - 0x550]
push edi
push ebx
call fcn.10025f10
mov ecx, dword [ebp - 0xaac]
add esp, 0xc
mov eax, dword [ebp - 0xab0]
inc ecx
mov byte [ebx + esi], al
mov byte [esi + ebx + 1], 0
cmp ecx, 0x1000
jb 0x1000a480
mov edx, dword [edi - 4]
add ecx, 0x23
sub edi, edx
lea eax, [edi - 4]
cmp eax, 0x1f
ja 0x1000dac5
mov edi, edx
push ecx
push edi
call fcn.10024b33
add esp, 8
jmp 0x1000a4aa
lea eax, [ebp - 0x550]
push eax
push ebx
call fcn.10025f10
mov eax, dword [ebp - 0xab0]
add esp, 0xc
mov byte [ebx + esi], al
mov byte [esi + ebx + 1], 0
mov dword [ebp - 0x550], ebx
lea esi, [ebp - 0x2b3]
mov ebx, 0x69
nop dword [eax + eax]
mov eax, 0xcccccccd
dec esi
mul ebx
shr edx, 3
mov al, dl
shl al, 2
lea ecx, [eax + edx]
add cl, cl
sub bl, cl
add bl, 0x30
mov byte [esi], bl
mov ebx, edx
test ebx, ebx
jne 0x1000a4c0
lea eax, [ebp - 0x2b3]
mov dword [ebp - 0x5c8], edx
mov dword [ebp - 0x5b8], edx
mov dword [ebp - 0x5b4], 0xf
cmp esi, eax
je 0x1000a511
sub eax, esi
lea ecx, [ebp - 0x5c8]
push eax
push esi
call fcn.1001fd70
call fcn.1002fa49
cmp dword [ebp - 0x5b4], 0x10
lea esi, [ebp - 0x5c8]
mov edi, eax
lea eax, [ebp - 0xb1c]
cmovae esi, dword [ebp - 0x5c8]
push 0xa
push eax
push esi
mov dword [edi], 0
call fcn.1002ddd0
add esp, 0xc
xor ebx, ebx
cmp esi, dword [ebp - 0xb1c]
je 0x1000a554
cmp dword [edi], 0x22
cmovne ebx, eax
mov edx, dword [ebp - 0x5b4]
mov dword [ebp - 0xab0], ebx
cmp edx, 0x10
jb 0x1000a594
mov ecx, dword [ebp - 0x5c8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1000a58a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000dac5
push edx
push ecx
call fcn.10024b33
add esp, 8
mov edx, dword [ebp - 0x53c]
mov esi, dword [ebp - 0x540]
mov dword [ebp - 0x5b8], 0
mov dword [ebp - 0x5b4], 0xf
mov byte [ebp - 0x5c8], 0
mov dword [ebp - 0xaac], edx
cmp esi, edx
jae 0x1000a5eb
lea eax, [esi + 1]
cmp edx, 0x10
mov dword [ebp - 0x540], eax
lea eax, [ebp - 0x550]
cmovae eax, dword [ebp - 0x550]
mov byte [eax + esi], bl
mov byte [eax + esi + 1], 0
jmp 0x1000a6c0
mov ecx, Ordinal_2
mov eax, ecx
sub eax, esi
cmp eax, 1
jb 0x1000daac
lea edi, [esi + 1]
or edi, 0xf
cmp edi, ecx
jbe 0x1000a60b
mov edi, ecx
jmp 0x1000a623
mov ebx, edx
mov eax, ecx
shr ebx, 1
sub eax, ebx
cmp edx, eax
jbe 0x1000a61b
mov edi, ecx
jmp 0x1000a623
lea eax, [edx + ebx]
cmp edi, eax
cmovb edi, eax
lea eax, [edi + 1]
push eax
lea ecx, [ebp - 0x550]
call fcn.1001ffd0
cmp dword [ebp - 0xaac], 0x10
mov ebx, eax
lea eax, [esi + 1]
mov dword [ebp - 0x53c], edi
mov dword [ebp - 0x540], eax
push esi
jb 0x1000a69c
mov edi, dword [ebp - 0x550]
push edi
push ebx
call fcn.10025f10
mov ecx, dword [ebp - 0xaac]
add esp, 0xc
mov eax, dword [ebp - 0xab0]
inc ecx
mov byte [ebx + esi], al
mov byte [ebx + esi + 1], 0
cmp ecx, 0x1000
jb 0x1000a690
mov edx, dword [edi - 4]
add ecx, 0x23
sub edi, edx
lea eax, [edi - 4]
cmp eax, 0x1f
ja 0x1000dac5
mov edi, edx
push ecx
push edi
call fcn.10024b33
add esp, 8
jmp 0x1000a6ba
lea eax, [ebp - 0x550]
push eax
push ebx
call fcn.10025f10
mov eax, dword [ebp - 0xab0]
add esp, 0xc
mov byte [ebx + esi], al
mov byte [ebx + esi + 1], 0
mov dword [ebp - 0x550], ebx
lea esi, [ebp - 0x29b]
mov ebx, 0x73
nop dword [eax + eax]
mov eax, 0xcccccccd
dec esi
mul ebx
shr edx, 3
mov al, dl
shl al, 2
lea ecx, [eax + edx]
add cl, cl
sub bl, cl
add bl, 0x30
mov byte [esi], bl
mov ebx, edx
test ebx, ebx
jne 0x1000a6d0
lea eax, [ebp - 0x29b]
mov dword [ebp - 0x5e0], edx
mov dword [ebp - 0x5d0], edx
mov dword [ebp - 0x5cc], 0xf
cmp esi, eax
je 0x1000a721
sub eax, esi
lea ecx, [ebp - 0x5e0]
push eax
push esi
call fcn.1001fd70
call fcn.1002fa49
cmp dword [ebp - 0x5cc], 0x10
lea esi, [ebp - 0x5e0]
mov edi, eax
lea eax, [ebp - 0xb18]
cmovae esi, dword [ebp - 0x5e0]
push 0xa
push eax
push esi
mov dword [edi], 0
call fcn.1002ddd0
add esp, 0xc
xor ebx, ebx
cmp esi, dword [ebp - 0xb18]
je 0x1000a764
cmp dword [edi], 0x22
cmovne ebx, eax
mov edx, dword [ebp - 0x5cc]
mov dword [ebp - 0xab0], ebx
cmp edx, 0x10
jb 0x1000a7a4
mov ecx, dword [ebp - 0x5e0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1000a79a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000dac5
push edx
push ecx
call fcn.10024b33
add esp, 8
mov edx, dword [ebp - 0x53c]
mov esi, dword [ebp - 0x540]
mov dword [ebp - 0x5d0], 0
mov dword [ebp - 0x5cc], 0xf
mov byte [ebp - 0x5e0], 0
mov dword [ebp - 0xaac], edx
cmp esi, edx
jae 0x1000a7fb
lea eax, [esi + 1]
cmp edx, 0x10
mov dword [ebp - 0x540], eax
lea eax, [ebp - 0x550]
cmovae eax, dword [ebp - 0x550]
mov byte [eax + esi], bl
mov byte [eax + esi + 1], 0
jmp 0x1000a8d0
mov ecx, Ordinal_2
mov eax, ecx
sub eax, esi
cmp eax, 1
jb 0x1000dab1
lea edi, [esi + 1]
or edi, 0xf
cmp edi, ecx
jbe 0x1000a81b
mov edi, ecx
jmp 0x1000a833
mov ebx, edx
mov eax, ecx
shr ebx, 1
sub eax, ebx
cmp edx, eax
jbe 0x1000a82b
mov edi, ecx
jmp 0x1000a833
lea eax, [ebx + edx]
cmp edi, eax
cmovb edi, eax
lea eax, [edi + 1]
push eax
lea ecx, [ebp - 0x550]
call fcn.1001ffd0
cmp dword [ebp - 0xaac], 0x10
mov ebx, eax
lea eax, [esi + 1]
mov dword [ebp - 0x53c], edi
mov dword [ebp - 0x540], eax
push esi
jb 0x1000a8ac
mov edi, dword [ebp - 0x550]
push edi
push ebx
call fcn.10025f10
mov ecx, dword [ebp - 0xaac]
add esp, 0xc
mov eax, dword [ebp - 0xab0]
inc ecx
mov byte [ebx + esi], al
mov byte [ebx + esi + 1], 0
cmp ecx, 0x1000
jb 0x1000a8a0
mov edx, dword [edi - 4]
add ecx, 0x23
sub edi, edx
lea eax, [edi - 4]
cmp eax, 0x1f
ja 0x1000dac5
mov edi, edx
push ecx
push edi
call fcn.10024b33
add esp, 8
jmp 0x1000a8ca
lea eax, [ebp - 0x550]
push eax
push ebx
call fcn.10025f10
mov eax, dword [ebp - 0xab0]
add esp, 0xc
mov byte [ebx + esi], al
mov byte [ebx + esi + 1], 0
mov dword [ebp - 0x550], ebx
lea esi, [ebp - 0x283]
mov ebx, 0x20
nop dword [eax + eax]
mov eax, 0xcccccccd
dec esi
mul ebx
shr edx, 3
mov al, dl
shl al, 2
lea ecx, [eax + edx]
add cl, cl
sub bl, cl
add bl, 0x30
mov byte [esi], bl
mov ebx, edx
test ebx, ebx
jne 0x1000a8e0
lea eax, [ebp - 0x283]
mov dword [ebp - 0x5f8], edx
mov dword [ebp - 0x5e8], edx
mov dword [ebp - 0x5e4], 0xf
cmp esi, eax
je 0x1000a931
sub eax, esi
lea ecx, [ebp - 0x5f8]
push eax
push esi
call fcn.1001fd70
call fcn.1002fa49
cmp dword [ebp - 0x5e4], 0x10
lea esi, [ebp - 0x5f8]
mov edi, eax
lea eax, [ebp - 0xb14]
cmovae esi, dword [ebp - 0x5f8]
push 0xa
push eax
push esi
mov dword [edi], 0
call fcn.1002ddd0
add esp, 0xc
xor ebx, ebx
cmp esi, dword [ebp - 0xb14]
je 0x1000a974
cmp dword [edi], 0x22
cmovne ebx, eax
mov edx, dword [ebp - 0x5e4]
mov dword [ebp - 0xab0], ebx
cmp edx, 0x10
jb 0x1000a9b4
mov ecx, dword [ebp - 0x5f8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1000a9aa
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000dac5
push edx
push ecx
call fcn.10024b33
add esp, 8
mov edx, dword [ebp - 0x53c]
mov esi, dword [ebp - 0x540]
mov dword [ebp - 0x5e8], 0
mov dword [ebp - 0x5e4], 0xf
mov byte [ebp - 0x5f8], 0
mov dword [ebp - 0xaac], edx
cmp esi, edx
jae 0x1000aa0b
lea eax, [esi + 1]
cmp edx, 0x10
mov dword [ebp - 0x540], eax
lea eax, [ebp - 0x550]
cmovae eax, dword [ebp - 0x550]
mov byte [eax + esi], bl
mov byte [eax + esi + 1], 0
jmp 0x1000aae0
mov ecx, Ordinal_2
mov eax, ecx
sub eax, esi
cmp eax, 1
jb 0x1000dab6
lea edi, [esi + 1]
or edi, 0xf
cmp edi, ecx
jbe 0x1000aa2b
mov edi, ecx
jmp 0x1000aa43
mov ebx, edx
mov eax, ecx
shr ebx, 1
sub eax, ebx
cmp edx, eax
jbe 0x1000aa3b
mov edi, ecx
jmp 0x1000aa43
lea eax, [ebx + edx]
cmp edi, eax
cmovb edi, eax
lea eax, [edi + 1]
push eax
lea ecx, [ebp - 0x550]
call fcn.1001ffd0
cmp dword [ebp - 0xaac], 0x10
mov ebx, eax
lea eax, [esi + 1]
mov dword [ebp - 0x53c], edi
mov dword [ebp - 0x540], eax
push esi
jb 0x1000aabc
mov edi, dword [ebp - 0x550]
push edi
push ebx
call fcn.10025f10
mov ecx, dword [ebp - 0xaac]
add esp, 0xc
mov eax, dword [ebp - 0xab0]
inc ecx
mov byte [esi + ebx], al
mov byte [esi + ebx + 1], 0
cmp ecx, 0x1000
jb 0x1000aab0
mov edx, dword [edi - 4]
add ecx, 0x23
sub edi, edx
lea eax, [edi - 4]
cmp eax, 0x1f
ja 0x1000dac5
mov edi, edx
push ecx
push edi
call fcn.10024b33
add esp, 8
jmp 0x1000aada
lea eax, [ebp - 0x550]
push eax
push ebx
call fcn.10025f10
mov eax, dword [ebp - 0xab0]
add esp, 0xc
mov byte [esi + ebx], al
mov byte [esi + ebx + 1], 0
mov dword [ebp - 0x550], ebx
lea esi, [ebp - 0x26b]
mov ebx, 0x77
nop dword [eax + eax]
mov eax, 0xcccccccd
dec esi
mul ebx
shr edx, 3
mov al, dl
shl al, 2
lea ecx, [eax + edx]
add cl, cl
sub bl, cl
add bl, 0x30
mov byte [esi], bl
mov ebx, edx
test ebx, ebx
jne 0x1000aaf0
lea eax, [ebp - 0x26b]
mov dword [ebp - 0x610], edx
mov dword [ebp - 0x600], edx
mov dword [ebp - 0x5fc], 0xf
cmp esi, eax
je 0x1000ab41
sub eax, esi
lea ecx, [ebp - 0x610]
push eax
push esi
call fcn.1001fd70
call fcn.1002fa49
cmp dword [ebp - 0x5fc], 0x10
lea esi, [ebp - 0x610]
mov edi, eax
lea eax, [ebp - 0xb10]
cmovae esi, dword [ebp - 0x610]
push 0xa
push eax
push esi
mov dword [edi], 0
call fcn.1002ddd0
add esp, 0xc
xor ebx, ebx
cmp esi, dword [ebp - 0xb10]
je 0x1000ab84
cmp dword [edi], 0x22
cmovne ebx, eax
mov edx, dword [ebp - 0x5fc]
mov dword [ebp - 0xab0], ebx
cmp edx, 0x10
jb 0x1000abc4
mov ecx, dword [ebp - 0x610]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1000abba
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000dac5
push edx
push ecx
call fcn.10024b33
add esp, 8
mov edx, dword [ebp - 0x53c]
mov esi, dword [ebp - 0x540]
mov dword [ebp - 0x600], 0
mov dword [ebp - 0x5fc], 0xf
mov byte [ebp - 0x610], 0
mov dword [ebp - 0xaac], edx
cmp esi, edx
jae 0x1000ac1b
lea eax, [esi + 1]
cmp edx, 0x10
mov dword [ebp - 0x540], eax
lea eax, [ebp - 0x550]
cmovae eax, dword [ebp - 0x550]
mov byte [eax + esi], bl
mov byte [eax + esi + 1], 0
jmp 0x1000acf0
mov ecx, Ordinal_2
mov eax, ecx
sub eax, esi
cmp eax, 1
jb 0x1000dabb
lea edi, [esi + 1]
or edi, 0xf
cmp edi, ecx
jbe 0x1000ac3b
mov edi, ecx
jmp 0x1000ac53
mov ebx, edx
mov eax, ecx
shr ebx, 1
sub eax, ebx
cmp edx, eax
jbe 0x1000ac4b
mov edi, ecx
jmp 0x1000ac53
lea eax, [ebx + edx]
cmp edi, eax
cmovb edi, eax
lea eax, [edi + 1]
push eax
lea ecx, [ebp - 0x550]
call fcn.1001ffd0
cmp dword [ebp - 0xaac], 0x10
mov ebx, eax
lea eax, [esi + 1]
mov dword [ebp - 0x53c], edi
mov dword [ebp - 0x540], eax
push esi
jb 0x1000accc
mov edi, dword [ebp - 0x550]
push edi
push ebx
call fcn.10025f10
mov ecx, dword [ebp - 0xaac]
add esp, 0xc
mov eax, dword [ebp - 0xab0]
inc ecx
mov byte [esi + ebx], al
mov byte [esi + ebx + 1], 0
cmp ecx, 0x1000
jb 0x1000acc0
mov edx, dword [edi - 4]
add ecx, 0x23
sub edi, edx
lea eax, [edi - 4]
cmp eax, 0x1f
ja 0x1000dac5
mov edi, edx
push ecx
push edi
call fcn.10024b33
add esp, 8
jmp 0x1000acea
lea eax, [ebp - 0x550]
push eax
push ebx
call fcn.10025f10
mov eax, dword [ebp - 0xab0]
add esp, 0xc
mov byte [esi + ebx], al
mov byte [esi + ebx + 1], 0
mov dword [ebp - 0x550], ebx
lea esi, [ebp - 0x253]
mov ebx, 0x69
nop dword [eax + eax]
mov eax, 0xcccccccd
dec esi
mul ebx
shr edx, 3
mov al, dl
shl al, 2
lea ecx, [eax + edx]
add cl, cl
sub bl, cl
add bl, 0x30
mov byte [esi], bl
mov ebx, edx
test ebx, ebx
jne 0x1000ad00
lea eax, [ebp - 0x253]
mov dword [ebp - 0x628], edx
mov dword [ebp - 0x618], edx
mov dword [ebp - 0x614], 0xf
cmp esi, eax
je 0x1000ad51
sub eax, esi
lea ecx, [ebp - 0x628]
push eax
push esi
call fcn.1001fd70
call fcn.1002fa49
cmp dword [ebp - 0x614], 0x10
lea esi, [ebp - 0x628]
mov edi, eax
lea eax, [ebp - 0xb0c]
cmovae esi, dword [ebp - 0x628]
push 0xa
push eax
push esi
mov dword [edi], 0
call fcn.1002ddd0
add esp, 0xc
xor ebx, ebx
cmp esi, dword [ebp - 0xb0c]
je 0x1000ad94
cmp dword [edi], 0x22
cmovne ebx, eax
mov edx, dword [ebp - 0x614]
mov dword [ebp - 0xab0], ebx
cmp edx, 0x10
jb 0x1000add4
mov ecx, dword [ebp - 0x628]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1000adca
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000dac5
push edx
push ecx
call fcn.10024b33
add esp, 8
mov edx, dword [ebp - 0x53c]
mov esi, dword [ebp - 0x540]
mov dword [ebp - 0x618], 0
mov dword [ebp - 0x614], 0xf
mov byte [ebp - 0x628], 0
mov dword [ebp - 0xaac], edx
cmp esi, edx
jae 0x1000ae2b
lea eax, [esi + 1]
cmp edx, 0x10
mov dword [ebp - 0x540], eax
lea eax, [ebp - 0x550]
cmovae eax, dword [ebp - 0x550]
mov byte [eax + esi], bl
mov byte [eax + esi + 1], 0
jmp 0x1000af00
mov ecx, Ordinal_2
mov eax, ecx
sub eax, esi
cmp eax, 1
jb 0x1000dac0
lea edi, [esi + 1]
or edi, 0xf
cmp edi, ecx
jbe 0x1000ae4b
mov edi, ecx
jmp 0x1000ae63
mov eax, edx
shr eax, 1
sub ecx, eax
cmp edx, ecx
jbe 0x1000ae5c
mov edi, Ordinal_2
jmp 0x1000ae63
add eax, edx
cmp edi, eax
cmovb edi, eax
lea eax, [edi + 1]
push eax
lea ecx, [ebp - 0x550]
call fcn.1001ffd0
cmp dword [ebp - 0xaac], 0x10
mov ebx, eax
lea eax, [esi + 1]
mov dword [ebp - 0x53c], edi
mov dword [ebp - 0x540], eax
push esi
jb 0x1000aedc
mov edi, dword [ebp - 0x550]
push edi
push ebx
call fcn.10025f10
mov ecx, dword [ebp - 0xaac]
add esp, 0xc
mov eax, dword [ebp - 0xab0]
inc ecx
mov byte [esi + ebx], al
mov byte [esi + ebx + 1], 0
cmp ecx, 0x1000
jb 0x1000aed0
mov edx, dword [edi - 4]
add ecx, 0x23
sub edi, edx
lea eax, [edi - 4]
cmp eax, 0x1f
ja 0x1000dac5
mov edi, edx
push ecx
push edi
call fcn.10024b33
add esp, 8
jmp 0x1000aefa
lea eax, [ebp - 0x550]
push eax
push ebx
call fcn.10025f10
mov eax, dword [ebp - 0xab0]
add esp, 0xc
mov byte [esi + ebx], al
mov byte [esi + ebx + 1], 0
mov dword [ebp - 0x550], ebx
lea esi, [ebp - 0x23b]
mov ebx, 0x6c
nop dword [eax + eax]
mov eax, 0xcccccccd
dec esi
mul ebx
shr edx, 3
mov al, dl
shl al, 2
lea ecx, [eax + edx]
add cl, cl
sub bl, cl
add bl, 0x30
mov byte [esi], bl
mov ebx, edx
test ebx, ebx
jne 0x1000af10
lea eax, [ebp - 0x23b]
mov dword [ebp - 0x640], edx
mov dword [ebp - 0x630], edx
mov dword [ebp - 0x62c], 0xf
cmp esi, eax
je 0x1000af61
sub eax, esi
lea ecx, [ebp - 0x640]
push eax
push esi
call fcn.1001fd70
call fcn.1002fa49
cmp dword [ebp - 0x62c], 0x10
lea esi, [ebp - 0x640]
mov edi, eax
lea eax, [ebp - 0xb08]
cmovae esi, dword [ebp - 0x640]
push 0xa
push eax
push esi
mov dword [edi], 0
call fcn.1002ddd0
mov ecx, eax
add esp, 0xc
xor eax, eax
cmp esi, dword [ebp - 0xb08]
je 0x1000afa6
cmp dword [edi], 0x22
cmovne eax, ecx
mov edx, dword [ebp - 0x62c]
mov byte [ebp - 0xaac], al
cmp edx, 0x10
jb 0x1000afe6
mov ecx, dword [ebp - 0x640]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1000afdc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000dac5
push edx
push ecx
call fcn.10024b33
add esp, 8
push dword [ebp - 0xaac]
lea ecx, [ebp - 0x550]
mov dword [ebp - 0x630], 0
mov dword [ebp - 0x62c], 0xf
mov byte [ebp - 0x640], 0
call fcn.1001fc60
lea esi, [ebp - 0x223]
mov ebx, 0x6c
nop dword [eax]
mov eax, 0xcccccccd
dec esi
mul ebx
shr edx, 3
mov al, dl
shl al, 2
lea ecx, [eax + edx]
add cl, cl
sub bl, cl
add bl, 0x30
mov byte [esi], bl
mov ebx, edx
test ebx, ebx
jne 0x1000b020
lea eax, [ebp - 0x223]
mov dword [ebp - 0x658], edx
mov dword [ebp - 0x648], edx
mov dword [ebp - 0x644], 0xf
cmp esi, eax
je 0x1000b071
sub eax, esi
lea ecx, [ebp - 0x658]
push eax
push esi
call fcn.1001fd70
call fcn.1002fa49
cmp dword [ebp - 0x644], 0x10
lea esi, [ebp - 0x658]
mov edi, eax
lea eax, [ebp - 0xb04]
cmovae esi, dword [ebp - 0x658]
push 0xa
push eax
push esi
mov dword [edi], 0
call fcn.1002ddd0
mov ecx, eax
add esp, 0xc
xor eax, eax
cmp esi, dword [ebp - 0xb04]
je 0x1000b0b6
cmp dword [edi], 0x22
cmovne eax, ecx
mov edx, dword [ebp - 0x644]
mov byte [ebp - 0xaac], al
cmp edx, 0x10
jb 0x1000b0f6
mov ecx, dword [ebp - 0x658]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1000b0ec
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000daca
push edx
push ecx
call fcn.10024b33
add esp, 8
push dword [ebp - 0xaac]
lea ecx, [ebp - 0x550]
mov dword [ebp - 0x648], 0
mov dword [ebp - 0x644], 0xf
mov byte [ebp - 0x658], 0
call fcn.1001fc60
lea esi, [ebp - 0x1f3]
mov ebx, 0x20
nop dword [eax]
mov eax, 0xcccccccd
dec esi
mul ebx
shr edx, 3
mov al, dl
shl al, 2
lea ecx, [eax + edx]
add cl, cl
sub bl, cl
add bl, 0x30
mov byte [esi], bl
mov ebx, edx
test ebx, ebx
jne 0x1000b130
lea eax, [ebp - 0x1f3]
mov dword [ebp - 0x670], edx
mov dword [ebp - 0x660], edx
mov dword [ebp - 0x65c], 0xf
cmp esi, eax
je 0x1000b181
sub eax, esi
lea ecx, [ebp - 0x670]
push eax
push esi
call fcn.1001fd70
call fcn.1002fa49
cmp dword [ebp - 0x65c], 0x10
lea esi, [ebp - 0x670]
mov edi, eax
lea eax, [ebp - 0xb00]
cmovae esi, dword [ebp - 0x670]
push 0xa
push eax
push esi
mov dword [edi], 0
call fcn.1002ddd0
mov ecx, eax
add esp, 0xc
xor eax, eax
cmp esi, dword [ebp - 0xb00]
je 0x1000b1c6
cmp dword [edi], 0x22
cmovne eax, ecx
mov edx, dword [ebp - 0x65c]
mov byte [ebp - 0xaac], al
cmp edx, 0x10
jb 0x1000b206
mov ecx, dword [ebp - 0x670]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1000b1fc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000dacf
push edx
push ecx
call fcn.10024b33
add esp, 8
push dword [ebp - 0xaac]
lea ecx, [ebp - 0x550]
mov dword [ebp - 0x660], 0
mov dword [ebp - 0x65c], 0xf
mov byte [ebp - 0x670], 0
call fcn.1001fc60
lea esi, [ebp - 0x1db]
mov ebx, 0x6f
nop dword [eax]
mov eax, 0xcccccccd
dec esi
mul ebx
shr edx, 3
mov al, dl
shl al, 2
lea ecx, [eax + edx]
add cl, cl
sub bl, cl
add bl, 0x30
mov byte [esi], bl
mov ebx, edx
test ebx, ebx
jne 0x1000b240
lea eax, [ebp - 0x1db]
mov dword [ebp - 0x688], edx
mov dword [ebp - 0x678], edx
mov dword [ebp - 0x674], 0xf
cmp esi, eax
je 0x1000b291
sub eax, esi
lea ecx, [ebp - 0x688]
push eax
push esi
call fcn.1001fd70
call fcn.1002fa49
cmp dword [ebp - 0x674], 0x10
lea esi, [ebp - 0x688]
mov edi, eax
lea eax, [ebp - 0xafc]
cmovae esi, dword [ebp - 0x688]
push 0xa
push eax
push esi
mov dword [edi], 0
call fcn.1002ddd0
mov ecx, eax
add esp, 0xc
xor eax, eax
cmp esi, dword [ebp - 0xafc]
je 0x1000b2d6
cmp dword [edi], 0x22
cmovne eax, ecx
mov edx, dword [ebp - 0x674]
mov byte [ebp - 0xaac], al
cmp edx, 0x10
jb 0x1000b316
mov ecx, dword [ebp - 0x688]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1000b30c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000dad4
push edx
push ecx
call fcn.10024b33
add esp, 8
push dword [ebp - 0xaac]
lea ecx, [ebp - 0x550]
mov dword [ebp - 0x678], 0
mov dword [ebp - 0x674], 0xf
mov byte [ebp - 0x688], 0
call fcn.1001fc60
lea esi, [ebp - 0x1c3]
mov ebx, 0x70
nop dword [eax]
mov eax, 0xcccccccd
dec esi
mul ebx
shr edx, 3
mov al, dl
shl al, 2
lea ecx, [eax + edx]
add cl, cl
sub bl, cl
add bl, 0x30
mov byte [esi], bl
mov ebx, edx
test ebx, ebx
jne 0x1000b350
lea eax, [ebp - 0x1c3]
mov dword [ebp - 0x6a0], edx
mov dword [ebp - 0x690], edx
mov dword [ebp - 0x68c], 0xf
cmp esi, eax
je 0x1000b3a1
sub eax, esi
lea ecx, [ebp - 0x6a0]
push eax
push esi
call fcn.1001fd70
call fcn.1002fa49
cmp dword [ebp - 0x68c], 0x10
lea esi, [ebp - 0x6a0]
mov edi, eax
lea eax, [ebp - 0xaf8]
cmovae esi, dword [ebp - 0x6a0]
push 0xa
push eax
push esi
mov dword [edi], 0
call fcn.1002ddd0
mov ecx, eax
add esp, 0xc
xor eax, eax
cmp esi, dword [ebp - 0xaf8]
je 0x1000b3e6
cmp dword [edi], 0x22
cmovne eax, ecx
mov edx, dword [ebp - 0x68c]
mov byte [ebp - 0xaac], al
cmp edx, 0x10
jb 0x1000b426
mov ecx, dword [ebp - 0x6a0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1000b41c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000dad9
push edx
push ecx
call fcn.10024b33
add esp, 8
push dword [ebp - 0xaac]
lea ecx, [ebp - 0x550]
mov dword [ebp - 0x690], 0
mov dword [ebp - 0x68c], 0xf
mov byte [ebp - 0x6a0], 0
call fcn.1001fc60
lea esi, [ebp - 0x1ab]
mov ebx, 0x65
nop dword [eax]
mov eax, 0xcccccccd
dec esi
mul ebx
shr edx, 3
mov al, dl
shl al, 2
lea ecx, [eax + edx]
add cl, cl
sub bl, cl
add bl, 0x30
mov byte [esi], bl
mov ebx, edx
test ebx, ebx
jne 0x1000b460
lea eax, [ebp - 0x1ab]
mov dword [ebp - 0x6b8], edx
mov dword [ebp - 0x6a8], edx
mov dword [ebp - 0x6a4], 0xf
cmp esi, eax
je 0x1000b4b1
sub eax, esi
lea ecx, [ebp - 0x6b8]
push eax
push esi
call fcn.1001fd70
call fcn.1002fa49
cmp dword [ebp - 0x6a4], 0x10
lea esi, [ebp - 0x6b8]
mov edi, eax
lea eax, [ebp - 0xaf4]
cmovae esi, dword [ebp - 0x6b8]
push 0xa
push eax
push esi
mov dword [edi], 0
call fcn.1002ddd0
mov ecx, eax
add esp, 0xc
xor eax, eax
cmp esi, dword [ebp - 0xaf4]
je 0x1000b4f6
cmp dword [edi], 0x22
cmovne eax, ecx
mov edx, dword [ebp - 0x6a4]
mov byte [ebp - 0xaac], al
cmp edx, 0x10
jb 0x1000b536
mov ecx, dword [ebp - 0x6b8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1000b52c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000dade
push edx
push ecx
call fcn.10024b33
add esp, 8
push dword [ebp - 0xaac]
lea ecx, [ebp - 0x550]
mov dword [ebp - 0x6a8], 0
mov dword [ebp - 0x6a4], 0xf
mov byte [ebp - 0x6b8], 0
call fcn.1001fc60
lea esi, [ebp - 0x193]
mov ebx, 0x6e
nop dword [eax]
mov eax, 0xcccccccd
dec esi
mul ebx
shr edx, 3
mov al, dl
shl al, 2
lea ecx, [eax + edx]
add cl, cl
sub bl, cl
add bl, 0x30
mov byte [esi], bl
mov ebx, edx
test ebx, ebx
jne 0x1000b570
lea eax, [ebp - 0x193]
mov dword [ebp - 0x6d0], edx
mov dword [ebp - 0x6c0], edx
mov dword [ebp - 0x6bc], 0xf
cmp esi, eax
je 0x1000b5c1
sub eax, esi
lea ecx, [ebp - 0x6d0]
push eax
push esi
call fcn.1001fd70
call fcn.1002fa49
cmp dword [ebp - 0x6bc], 0x10
lea esi, [ebp - 0x6d0]
mov edi, eax
lea eax, [ebp - 0xaf0]
cmovae esi, dword [ebp - 0x6d0]
push 0xa
push eax
push esi
mov dword [edi], 0
call fcn.1002ddd0
mov ecx, eax
add esp, 0xc
xor eax, eax
cmp esi, dword [ebp - 0xaf0]
je 0x1000b606
cmp dword [edi], 0x22
cmovne eax, ecx
mov edx, dword [ebp - 0x6bc]
mov byte [ebp - 0xaac], al
cmp edx, 0x10
jb 0x1000b646
mov ecx, dword [ebp - 0x6d0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1000b63c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000dae3
push edx
push ecx
call fcn.10024b33
add esp, 8
push dword [ebp - 0xaac]
lea ecx, [ebp - 0x550]
mov dword [ebp - 0x6c0], 0
mov dword [ebp - 0x6bc], 0xf
mov byte [ebp - 0x6d0], 0
call fcn.1001fc60
lea esi, [ebp - 0x17b]
mov ebx, 0x20
nop dword [eax]
mov eax, 0xcccccccd
dec esi
mul ebx
shr edx, 3
mov al, dl
shl al, 2
lea ecx, [eax + edx]
add cl, cl
sub bl, cl
add bl, 0x30
mov byte [esi], bl
mov ebx, edx
test ebx, ebx
jne 0x1000b680
lea eax, [ebp - 0x17b]
mov dword [ebp - 0x6e8], edx
mov dword [ebp - 0x6d8], edx
mov dword [ebp - 0x6d4], 0xf
cmp esi, eax
je 0x1000b6d1
sub eax, esi
lea ecx, [ebp - 0x6e8]
push eax
push esi
call fcn.1001fd70
call fcn.1002fa49
cmp dword [ebp - 0x6d4], 0x10
lea esi, [ebp - 0x6e8]
mov edi, eax
lea eax, [ebp - 0xaec]
cmovae esi, dword [ebp - 0x6e8]
push 0xa
push eax
push esi
mov dword [edi], 0
call fcn.1002ddd0
mov ecx, eax
add esp, 0xc
xor eax, eax
cmp esi, dword [ebp - 0xaec]
je 0x1000b716
cmp dword [edi], 0x22
cmovne eax, ecx
mov edx, dword [ebp - 0x6d4]
mov byte [ebp - 0xaac], al
cmp edx, 0x10
jb 0x1000b756
mov ecx, dword [ebp - 0x6e8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1000b74c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000dae8
push edx
push ecx
call fcn.10024b33
add esp, 8
push dword [ebp - 0xaac]
lea ecx, [ebp - 0x550]
mov dword [ebp - 0x6d8], 0
mov dword [ebp - 0x6d4], 0xf
mov byte [ebp - 0x6e8], 0
call fcn.1001fc60
lea esi, [ebp - 0x163]
mov ebx, 0x61
nop dword [eax]
mov eax, 0xcccccccd
dec esi
mul ebx
shr edx, 3
mov al, dl
shl al, 2
lea ecx, [eax + edx]
add cl, cl
sub bl, cl
add bl, 0x30
mov byte [esi], bl
mov ebx, edx
test ebx, ebx
jne 0x1000b790
lea eax, [ebp - 0x163]
mov dword [ebp - 0x700], edx
mov dword [ebp - 0x6f0], edx
mov dword [ebp - 0x6ec], 0xf
cmp esi, eax
je 0x1000b7e1
sub eax, esi
lea ecx, [ebp - 0x700]
push eax
push esi
call fcn.1001fd70
call fcn.1002fa49
cmp dword [ebp - 0x6ec], 0x10
lea esi, [ebp - 0x700]
mov edi, eax
lea eax, [ebp - 0xae8]
cmovae esi, dword [ebp - 0x700]
push 0xa
push eax
push esi
mov dword [edi], 0
call fcn.1002ddd0
mov ecx, eax
add esp, 0xc
xor eax, eax
cmp esi, dword [ebp - 0xae8]
je 0x1000b826
cmp dword [edi], 0x22
cmovne eax, ecx
mov edx, dword [ebp - 0x6ec]
mov byte [ebp - 0xaac], al
cmp edx, 0x10
jb 0x1000b866
mov ecx, dword [ebp - 0x700]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1000b85c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000daed
push edx
push ecx
call fcn.10024b33
add esp, 8
push dword [ebp - 0xaac]
lea ecx, [ebp - 0x550]
mov dword [ebp - 0x6f0], 0
mov dword [ebp - 0x6ec], 0xf
mov byte [ebp - 0x700], 0
call fcn.1001fc60
lea esi, [ebp - 0x14b]
mov ebx, 0x20
nop dword [eax]
mov eax, 0xcccccccd
dec esi
mul ebx
shr edx, 3
mov al, dl
shl al, 2
lea ecx, [eax + edx]
add cl, cl
sub bl, cl
add bl, 0x30
mov byte [esi], bl
mov ebx, edx
test ebx, ebx
jne 0x1000b8a0
lea eax, [ebp - 0x14b]
mov dword [ebp - 0x718], edx
mov dword [ebp - 0x708], edx
mov dword [ebp - 0x704], 0xf
cmp esi, eax
je 0x1000b8f1
sub eax, esi
lea ecx, [ebp - 0x718]
push eax
push esi
call fcn.1001fd70
call fcn.1002fa49
cmp dword [ebp - 0x704], 0x10
lea esi, [ebp - 0x718]
mov edi, eax
lea eax, [ebp - 0xae4]
cmovae esi, dword [ebp - 0x718]
push 0xa
push eax
push esi
mov dword [edi], 0
call fcn.1002ddd0
mov ecx, eax
add esp, 0xc
xor eax, eax
cmp esi, dword [ebp - 0xae4]
je 0x1000b936
cmp dword [edi], 0x22
cmovne eax, ecx
mov edx, dword [ebp - 0x704]
mov byte [ebp - 0xaac], al
cmp edx, 0x10
jb 0x1000b976
mov ecx, dword [ebp - 0x718]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1000b96c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000daf2
push edx
push ecx
call fcn.10024b33
add esp, 8
push dword [ebp - 0xaac]
lea ecx, [ebp - 0x550]
mov dword [ebp - 0x708], 0
mov dword [ebp - 0x704], 0xf
mov byte [ebp - 0x718], 0
call fcn.1001fc60
lea esi, [ebp - 0x133]
mov ebx, 0x62
nop dword [eax]
mov eax, 0xcccccccd
dec esi
mul ebx
shr edx, 3
mov al, dl
shl al, 2
lea ecx, [eax + edx]
add cl, cl
sub bl, cl
add bl, 0x30
mov byte [esi], bl
mov ebx, edx
test ebx, ebx
jne 0x1000b9b0
lea eax, [ebp - 0x133]
mov dword [ebp - 0x730], edx
mov dword [ebp - 0x720], edx
mov dword [ebp - 0x71c], 0xf
cmp esi, eax
je 0x1000ba01
sub eax, esi
lea ecx, [ebp - 0x730]
push eax
push esi
call fcn.1001fd70
call fcn.1002fa49
cmp dword [ebp - 0x71c], 0x10
lea esi, [ebp - 0x730]
mov edi, eax
lea eax, [ebp - 0xae0]
cmovae esi, dword [ebp - 0x730]
push 0xa
push eax
push esi
mov dword [edi], 0
call fcn.1002ddd0
mov ecx, eax
add esp, 0xc
xor eax, eax
cmp esi, dword [ebp - 0xae0]
je 0x1000ba46
cmp dword [edi], 0x22
cmovne eax, ecx
mov edx, dword [ebp - 0x71c]
mov byte [ebp - 0xaac], al
cmp edx, 0x10
jb 0x1000ba86
mov ecx, dword [ebp - 0x730]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1000ba7c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000daf7
push edx
push ecx
call fcn.10024b33
add esp, 8
push dword [ebp - 0xaac]
lea ecx, [ebp - 0x550]
mov dword [ebp - 0x720], 0
mov dword [ebp - 0x71c], 0xf
mov byte [ebp - 0x730], 0
call fcn.1001fc60
lea esi, [ebp - 0x11b]
mov ebx, 0x72
nop dword [eax]
mov eax, 0xcccccccd
dec esi
mul ebx
shr edx, 3
mov al, dl
shl al, 2
lea ecx, [eax + edx]
add cl, cl
sub bl, cl
add bl, 0x30
mov byte [esi], bl
mov ebx, edx
test ebx, ebx
jne 0x1000bac0
lea eax, [ebp - 0x11b]
mov dword [ebp - 0x748], edx
mov dword [ebp - 0x738], edx
mov dword [ebp - 0x734], 0xf
cmp esi, eax
je 0x1000bb11
sub eax, esi
lea ecx, [ebp - 0x748]
push eax
push esi
call fcn.1001fd70
call fcn.1002fa49
cmp dword [ebp - 0x734], 0x10
lea esi, [ebp - 0x748]
mov edi, eax
lea eax, [ebp - 0xadc]
cmovae esi, dword [ebp - 0x748]
push 0xa
push eax
push esi
mov dword [edi], 0
call fcn.1002ddd0
mov ecx, eax
add esp, 0xc
xor eax, eax
cmp esi, dword [ebp - 0xadc]
je 0x1000bb56
cmp dword [edi], 0x22
cmovne eax, ecx
mov edx, dword [ebp - 0x734]
mov byte [ebp - 0xaac], al
cmp edx, 0x10
jb 0x1000bb96
mov ecx, dword [ebp - 0x748]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1000bb8c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000dafc
push edx
push ecx
call fcn.10024b33
add esp, 8
push dword [ebp - 0xaac]
lea ecx, [ebp - 0x550]
mov dword [ebp - 0x738], 0
mov dword [ebp - 0x734], 0xf
mov byte [ebp - 0x748], 0
call fcn.1001fc60
lea esi, [ebp - 0x103]
mov ebx, 0x6f
nop dword [eax]
mov eax, 0xcccccccd
dec esi
mul ebx
shr edx, 3
mov al, dl
shl al, 2
lea ecx, [eax + edx]
add cl, cl
sub bl, cl
add bl, 0x30
mov byte [esi], bl
mov ebx, edx
test ebx, ebx
jne 0x1000bbd0
lea eax, [ebp - 0x103]
mov dword [ebp - 0x760], edx
mov dword [ebp - 0x750], edx
mov dword [ebp - 0x74c], 0xf
cmp esi, eax
je 0x1000bc21
sub eax, esi
lea ecx, [ebp - 0x760]
push eax
push esi
call fcn.1001fd70
call fcn.1002fa49
cmp dword [ebp - 0x74c], 0x10
lea esi, [ebp - 0x760]
mov edi, eax
lea eax, [ebp - 0xad8]
cmovae esi, dword [ebp - 0x760]
push 0xa
push eax
push esi
mov dword [edi], 0
call fcn.1002ddd0
mov ecx, eax
add esp, 0xc
xor eax, eax
cmp esi, dword [ebp - 0xad8]
je 0x1000bc66
cmp dword [edi], 0x22
cmovne eax, ecx
mov edx, dword [ebp - 0x74c]
mov byte [ebp - 0xaac], al
cmp edx, 0x10
jb 0x1000bca6
mov ecx, dword [ebp - 0x760]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1000bc9c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000db01
push edx
push ecx
call fcn.10024b33
add esp, 8
push dword [ebp - 0xaac]
lea ecx, [ebp - 0x550]
mov dword [ebp - 0x750], 0
mov dword [ebp - 0x74c], 0xf
mov byte [ebp - 0x760], 0
call fcn.1001fc60
lea esi, [ebp - 0xeb]
mov ebx, 0x77
nop dword [eax]
mov eax, 0xcccccccd
dec esi
mul ebx
shr edx, 3
mov al, dl
shl al, 2
lea ecx, [eax + edx]
add cl, cl
sub bl, cl
add bl, 0x30
mov byte [esi], bl
mov ebx, edx
test ebx, ebx
jne 0x1000bce0
lea eax, [ebp - 0xeb]
mov dword [ebp - 0x778], edx
mov dword [ebp - 0x768], edx
mov dword [ebp - 0x764], 0xf
cmp esi, eax
je 0x1000bd31
sub eax, esi
lea ecx, [ebp - 0x778]
push eax
push esi
call fcn.1001fd70
call fcn.1002fa49
cmp dword [ebp - 0x764], 0x10
lea esi, [ebp - 0x778]
mov edi, eax
lea eax, [ebp - 0xb40]
cmovae esi, dword [ebp - 0x778]
push 0xa
push eax
push esi
mov dword [edi], 0
call fcn.1002ddd0
mov ecx, eax
add esp, 0xc
xor eax, eax
cmp esi, dword [ebp - 0xb40]
je 0x1000bd76
cmp dword [edi], 0x22
cmovne eax, ecx
mov edx, dword [ebp - 0x764]
mov byte [ebp - 0xaac], al
cmp edx, 0x10
jb 0x1000bdb6
mov ecx, dword [ebp - 0x778]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1000bdac
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000db06
push edx
push ecx
call fcn.10024b33
add esp, 8
push dword [ebp - 0xaac]
lea ecx, [ebp - 0x550]
mov dword [ebp - 0x768], 0
mov dword [ebp - 0x764], 0xf
mov byte [ebp - 0x778], 0
call fcn.1001fc60
lea esi, [ebp - 0xd3]
mov ebx, 0x73
nop dword [eax]
mov eax, 0xcccccccd
dec esi
mul ebx
shr edx, 3
mov al, dl
shl al, 2
lea ecx, [eax + edx]
add cl, cl
sub bl, cl
add bl, 0x30
mov byte [esi], bl
mov ebx, edx
test ebx, ebx
jne 0x1000bdf0
lea eax, [ebp - 0xd3]
mov dword [ebp - 0x790], edx
mov dword [ebp - 0x780], edx
mov dword [ebp - 0x77c], 0xf
cmp esi, eax
je 0x1000be41
sub eax, esi
lea ecx, [ebp - 0x790]
push eax
push esi
call fcn.1001fd70
call fcn.1002fa49
cmp dword [ebp - 0x77c], 0x10
lea esi, [ebp - 0x790]
mov edi, eax
lea eax, [ebp - 0xad4]
cmovae esi, dword [ebp - 0x790]
push 0xa
push eax
push esi
mov dword [edi], 0
call fcn.1002ddd0
mov ecx, eax
add esp, 0xc
xor eax, eax
cmp esi, dword [ebp - 0xad4]
je 0x1000be86
cmp dword [edi], 0x22
cmovne eax, ecx
mov edx, dword [ebp - 0x77c]
mov byte [ebp - 0xaac], al
cmp edx, 0x10
jb 0x1000bec6
mov ecx, dword [ebp - 0x790]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1000bebc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000db0b
push edx
push ecx
call fcn.10024b33
add esp, 8
push dword [ebp - 0xaac]
lea ecx, [ebp - 0x550]
mov dword [ebp - 0x780], 0
mov dword [ebp - 0x77c], 0xf
mov byte [ebp - 0x790], 0
call fcn.1001fc60
lea esi, [ebp - 0xbb]
mov ebx, 0x65
nop dword [eax]
mov eax, 0xcccccccd
dec esi
mul ebx
shr edx, 3
mov al, dl
shl al, 2
lea ecx, [eax + edx]
add cl, cl
sub bl, cl
add bl, 0x30
mov byte [esi], bl
mov ebx, edx
test ebx, ebx
jne 0x1000bf00
lea eax, [ebp - 0xbb]
mov dword [ebp - 0x7a8], edx
mov dword [ebp - 0x798], edx
mov dword [ebp - 0x794], 0xf
cmp esi, eax
je 0x1000bf51
sub eax, esi
lea ecx, [ebp - 0x7a8]
push eax
push esi
call fcn.1001fd70
call fcn.1002fa49
cmp dword [ebp - 0x794], 0x10
lea esi, [ebp - 0x7a8]
mov edi, eax
lea eax, [ebp - 0xad0]
cmovae esi, dword [ebp - 0x7a8]
push 0xa
push eax
push esi
mov dword [edi], 0
call fcn.1002ddd0
mov ecx, eax
add esp, 0xc
xor eax, eax
cmp esi, dword [ebp - 0xad0]
je 0x1000bf96
cmp dword [edi], 0x22
cmovne eax, ecx
mov edx, dword [ebp - 0x794]
mov byte [ebp - 0xaac], al
cmp edx, 0x10
jb 0x1000bfd6
mov ecx, dword [ebp - 0x7a8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1000bfcc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000db10
push edx
push ecx
call fcn.10024b33
add esp, 8
push dword [ebp - 0xaac]
lea ecx, [ebp - 0x550]
mov dword [ebp - 0x798], 0
mov dword [ebp - 0x794], 0xf
mov byte [ebp - 0x7a8], 0
call fcn.1001fc60
lea esi, [ebp - 0xa3]
mov ebx, 0x72
nop dword [eax]
mov eax, 0xcccccccd
dec esi
mul ebx
shr edx, 3
mov al, dl
shl al, 2
lea ecx, [eax + edx]
add cl, cl
sub bl, cl
add bl, 0x30
mov byte [esi], bl
mov ebx, edx
test ebx, ebx
jne 0x1000c010
lea eax, [ebp - 0xa3]
mov dword [ebp - 0x7c0], edx
mov dword [ebp - 0x7b0], edx
mov dword [ebp - 0x7ac], 0xf
cmp esi, eax
je 0x1000c061
sub eax, esi
lea ecx, [ebp - 0x7c0]
push eax
push esi
call fcn.1001fd70
call fcn.1002fa49
cmp dword [ebp - 0x7ac], 0x10
lea esi, [ebp - 0x7c0]
mov edi, eax
lea eax, [ebp - 0xacc]
cmovae esi, dword [ebp - 0x7c0]
push 0xa
push eax
push esi
mov dword [edi], 0
call fcn.1002ddd0
mov ecx, eax
add esp, 0xc
xor eax, eax
cmp esi, dword [ebp - 0xacc]
je 0x1000c0a6
cmp dword [edi], 0x22
cmovne eax, ecx
mov edx, dword [ebp - 0x7ac]
mov byte [ebp - 0xaac], al
cmp edx, 0x10
jb 0x1000c0e6
mov ecx, dword [ebp - 0x7c0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1000c0dc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000db15
push edx
push ecx
call fcn.10024b33
add esp, 8
push dword [ebp - 0xaac]
lea ecx, [ebp - 0x550]
mov dword [ebp - 0x7b0], 0
mov dword [ebp - 0x7ac], 0xf
mov byte [ebp - 0x7c0], 0
call fcn.1001fc60
lea esi, [ebp - 0x8b]
mov ebx, 0x20
nop dword [eax]
mov eax, 0xcccccccd
dec esi
mul ebx
shr edx, 3
mov al, dl
shl al, 2
lea ecx, [eax + edx]
add cl, cl
sub bl, cl
add bl, 0x30
mov byte [esi], bl
mov ebx, edx
test ebx, ebx
jne 0x1000c120
lea eax, [ebp - 0x8b]
mov dword [ebp - 0x7d8], edx
mov dword [ebp - 0x7c8], edx
mov dword [ebp - 0x7c4], 0xf
cmp esi, eax
je 0x1000c171
sub eax, esi
lea ecx, [ebp - 0x7d8]
push eax
push esi
call fcn.1001fd70
call fcn.1002fa49
cmp dword [ebp - 0x7c4], 0x10
lea esi, [ebp - 0x7d8]
mov edi, eax
lea eax, [ebp - 0xac8]
cmovae esi, dword [ebp - 0x7d8]
push 0xa
push eax
push esi
mov dword [edi], 0
call fcn.1002ddd0
mov ecx, eax
add esp, 0xc
xor eax, eax
cmp esi, dword [ebp - 0xac8]
je 0x1000c1b6
cmp dword [edi], 0x22
cmovne eax, ecx
mov edx, dword [ebp - 0x7c4]
mov byte [ebp - 0xaac], al
cmp edx, 0x10
jb 0x1000c1f6
mov ecx, dword [ebp - 0x7d8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1000c1ec
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000db1a
push edx
push ecx
call fcn.10024b33
add esp, 8
push dword [ebp - 0xaac]
lea ecx, [ebp - 0x550]
mov dword [ebp - 0x7c8], 0
mov dword [ebp - 0x7c4], 0xf
mov byte [ebp - 0x7d8], 0
call fcn.1001fc60
lea esi, [ebp - 0x73]
mov ebx, 0x77
nop word [eax + eax]
mov eax, 0xcccccccd
dec esi
mul ebx
shr edx, 3
mov al, dl
shl al, 2
lea ecx, [eax + edx]
add cl, cl
sub bl, cl
add bl, 0x30
mov byte [esi], bl
mov ebx, edx
test ebx, ebx
jne 0x1000c230
lea eax, [ebp - 0x73]
mov dword [ebp - 0x7f0], edx
mov dword [ebp - 0x7e0], edx
mov dword [ebp - 0x7dc], 0xf
cmp esi, eax
je 0x1000c27e
sub eax, esi
lea ecx, [ebp - 0x7f0]
push eax
push esi
call fcn.1001fd70
call fcn.1002fa49
cmp dword [ebp - 0x7dc], 0x10
lea esi, [ebp - 0x7f0]
mov edi, eax
lea eax, [ebp - 0xac4]
cmovae esi, dword [ebp - 0x7f0]
push 0xa
push eax
push esi
mov dword [edi], 0
call fcn.1002ddd0
mov ecx, eax
add esp, 0xc
xor eax, eax
cmp esi, dword [ebp - 0xac4]
je 0x1000c2c3
call fcn.10008300
call fcn.10008300
call fcn.10008300
call fcn.10008300
call fcn.10008300
call fcn.10008300
call fcn.10030a00
call fcn.10030a00
call fcn.10030a00
call fcn.10030a00
call fcn.10030a00
call fcn.10030a00
call fcn.10030a00
call fcn.10030a00
call fcn.10030a00
call fcn.10030a00
call fcn.10030a00
call fcn.10030a00
call fcn.10030a00
call fcn.10030a00
call fcn.10030a00
call fcn.10030a00
call fcn.10030a00
call fcn.10030a00
call fcn.10030a00
call fcn.10030a00
call fcn.10030a00
call fcn.10030a00
call fcn.10030a00
call fcn.10030a00
int3