Function at 0x1002160c
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10064ef1
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x6d4
push esi
push 3
lea ecx, [ebp - 0x43c]
call fcn.100248e9
and dword [ebp - 4], 0
mov dword [ebp - 0x70], 5
mov dword [ebp - 0xa4], 0
jmp 0x1002165c
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 3
jge 0x1002167e
push dword [ebp - 0xa4]
lea ecx, [ebp - 0x43c]
call fcn.10024a46
mov dword [eax], 0x2e91a049
jmp 0x1002164f
mov dword [ebp - 0x70], 0
jmp 0x1002168e
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 3
jge 0x100216c8
push 0x1e32
push 0x4fee
push 1
push 0x55f
push 1
lea eax, [ebp - 0x43c]
push eax
lea eax, [ebp - 0x70]
push eax
push 0x5909
push 0
push 0x1ccd
call fcn.1001e6b6
add esp, 0x28
jmp 0x10021687
call fcn.10020725
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x43c]
call fcn.100249c2
mov dword [ebp - 0x370], 0x17d4
cmp dword [ebp - 0x370], 0x1282
jge 0x100218a5
lea eax, [ebp - 0x64]
push eax
push 0x100080d8
call fcn.1004cd7b
pop ecx
pop ecx
push dword [ebp - 0x64]
lea ecx, [ebp - 0x28c]
call fcn.100248e9
mov dword [ebp - 4], 1
push dword [ebp - 0x64]
lea ecx, [ebp - 0x384]
call fcn.100248e9
mov byte [ebp - 4], 2
and dword [ebp - 0x90], 0
jmp 0x10021743
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x90]
cmp eax, dword [ebp - 0x64]
jge 0x10021781
push dword [ebp - 0x90]
lea ecx, [ebp - 0x384]
call fcn.10024a46
push eax
push dword [ebp - 0x90]
lea ecx, [ebp - 0x28c]
call fcn.10024a46
push eax
push 0x100080f8
call fcn.1004cd7b
add esp, 0xc
jmp 0x10021736
cmp dword [ebp - 0x64], 1
jne 0x10021793
mov dword [ebp - 0x1dc], 1
jmp 0x1002179d
mov dword [ebp - 0x1dc], 2
mov eax, dword [ebp - 0x1dc]
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x24], 1
jmp 0x100217b6
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x64]
dec eax
cmp dword [ebp - 0x24], eax
jge 0x10021878
push dword [ebp - 0x24]
lea ecx, [ebp - 0x28c]
call fcn.10024a46
mov esi, eax
mov eax, dword [ebp - 0x24]
dec eax
push eax
lea ecx, [ebp - 0x28c]
call fcn.10024a46
mov esi, dword [esi]
sub esi, dword [eax]
push dword [ebp - 0x24]
lea ecx, [ebp - 0x384]
call fcn.10024a46
cmp esi, dword [eax]
jle 0x10021802
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
jmp 0x10021873
mov eax, dword [ebp - 0x24]
inc eax
push eax
lea ecx, [ebp - 0x28c]
call fcn.10024a46
mov esi, eax
push dword [ebp - 0x24]
lea ecx, [ebp - 0x28c]
call fcn.10024a46
mov esi, dword [esi]
sub esi, dword [eax]
push dword [ebp - 0x24]
lea ecx, [ebp - 0x384]
call fcn.10024a46
cmp esi, dword [eax]
jle 0x10021873
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
push dword [ebp - 0x24]
lea ecx, [ebp - 0x28c]
call fcn.10024a46
mov dword [ebp - 0x26c], eax
push dword [ebp - 0x24]
lea ecx, [ebp - 0x384]
call fcn.10024a46
mov ecx, dword [ebp - 0x26c]
mov ecx, dword [ecx]
add ecx, dword [eax]
mov eax, dword [ebp - 0x26c]
mov dword [eax], ecx
jmp 0x100217af
push dword [ebp - 0x78]
push 0x100080d8
call fcn.1004d1c8
pop ecx
pop ecx
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x384]
call fcn.10024a9b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28c]
call fcn.10024a9b
and dword [ebp - 0x38], 0
call fcn.10020763
mov dword [ebp - 0x104], 0xfffffffb
mov dword [ebp - 0x12c], 0xffffffff
mov dword [ebp - 0xd4], 0xffffffff
mov dword [ebp - 0x314], 0xffffffff
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x5d4], eax
mov eax, 0x42c70bb7
test eax, eax
je 0x10021939
mov dword [ebp - 0x304], 0xe1ca2961
mov dword [ebp - 0x30c], 0xffffffff
push 0x2eca
push 0x5b9a
push 1
lea eax, [ebp - 0x304]
push eax
push 0
push 0x7b73
push 0x551a
lea eax, [ebp - 0x30c]
push eax
push 1
push 0x4070
call fcn.1001e6b6
add esp, 0x28
jmp 0x100219e7
mov dword [ebp - 0x660], 0
mov dword [ebp - 0x65c], 0
mov dword [ebp - 0x658], 0
mov dword [ebp - 0x654], 0
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0xe3cf9575
jbe 0x10021986
mov dword [ebp - 0x274], 1
jmp 0x1002198d
and dword [ebp - 0x274], 0
xor eax, eax
inc eax
je 0x100219a7
cmp dword [ebp - 0x104], 0
je 0x100219a7
mov dword [ebp - 0x128], 1
jmp 0x100219ae
and dword [ebp - 0x128], 0
mov eax, dword [ebp - 0x274]
imul eax, dword [ebp - 0x128]
test eax, eax
jne 0x100219d1
cmp dword [ebp - 0x314], 0
jne 0x100219d1
and dword [ebp - 0x264], 0
jmp 0x100219db
mov dword [ebp - 0x264], 1
mov eax, dword [ebp - 0x264]
mov dword [ebp - 0x12c], eax
push 1
lea eax, [ebp - 0x12c]
push eax
lea eax, [ebp - 0x104]
push eax
push 0
push 0x43c7
call fcn.1001d8af
add esp, 0x14
push 3
lea ecx, [ebp - 0x5e4]
call fcn.100248e9
mov dword [ebp - 4], 3
mov dword [ebp - 0xc8], 0x6aabecba
lea eax, [ebp - 0x5e4]
push eax
lea eax, [ebp - 0x5c8]
push eax
call fcn.100208bb
pop ecx
pop ecx
mov dword [ebp - 0xc8], 2
jmp 0x10021a52
mov eax, dword [ebp - 0xc8]
dec eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0
jl 0x10021aab
mov dword [ebp - 0xac], 0xe8c9f369
push 0x946
push 0x4151
push 1
push 1
push 0x53a4
call fcn.1001b716
add esp, 0x14
mov dword [ebp - 0xac], 2
jmp 0x10021a99
mov eax, dword [ebp - 0xac]
dec eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0
jl 0x10021aa9
call fcn.10020903
jmp 0x10021a8c
jmp 0x10021a45
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5e4]
call fcn.100249c2
mov dword [ebp - 0x98], 1
mov dword [ebp - 0xf4], 0xa12afd77
mov dword [ebp - 0x130], 0xe40c8830
mov dword [ebp - 0xd0], 0
jmp 0x10021af1
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 2
jge 0x10021b0a
mov eax, dword [ebp - 0xd0]
mov dword [ebp + eax*4 - 0x48], 0xe0648261
jmp 0x10021ae4
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x48], 0xffffffe3
jmp 0x10021b2f
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x48]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x48], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x48], 0xffffffe8
jg 0x10021d2c
mov dword [ebp - 0x35c], 0xffffffff
mov dword [ebp - 0xc4], 7
mov dword [ebp - 0x644], 0x9f08664a
mov dword [ebp - 0x5d0], 0xd5493e62
mov dword [ebp - 0x3ec], 0x9ba87a5e
mov dword [ebp - 0x3e8], 0x9ba87a5e
mov dword [ebp - 0x3e4], 0x9ba87a5e
mov dword [ebp - 0x3e0], 0x9ba87a5e
lea ecx, [ebp - 0xfd]
call fcn.10024a62
push eax
lea eax, [ebp - 0x3dc]
push eax
lea eax, [ebp - 0x3ec]
push eax
lea ecx, [ebp - 0x6bc]
call fcn.10024a65
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x5f8]
call fcn.1002499c
mov dword [ebp - 4], 4
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x48], 0
je 0x10021bfd
mov dword [ebp - 0x354], 0
lea eax, [ebp - 0x354]
push eax
lea eax, [ebp - 0x35c]
push eax
call fcn.10020929
pop ecx
pop ecx
jmp 0x10021ce1
mov dword [ebp - 0x2fc], 0xd43ddca2
mov dword [ebp - 0x374], 0xfffffffd
mov dword [ebp - 0xb4], 0
jmp 0x10021c2a
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 1
jge 0x10021c46
mov eax, dword [ebp - 0xb4]
mov dword [ebp + eax*4 - 0xec], 1
jmp 0x10021c1d
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xec], 0xdc34
jne 0x10021c65
mov dword [ebp - 0x364], 1
jmp 0x10021c6c
and dword [ebp - 0x364], 0
push 4
pop eax
imul eax, eax, 0
mov esi, dword [ebp + eax - 0xec]
push 2
lea ecx, [ebp - 0x5f8]
call fcn.10024a46
cmp esi, dword [eax]
je 0x10021c96
mov dword [ebp - 0x36c], 1
jmp 0x10021c9d
and dword [ebp - 0x36c], 0
mov eax, dword [ebp - 0x374]
mov dword [ebp - 0x5e8], eax
cmp dword [ebp - 0x98], 0x37ae9f90
jge 0x10021cc1
mov dword [ebp - 0x124], 1
jmp 0x10021cc8
and dword [ebp - 0x124], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x124]
sub ecx, dword [ebp + eax - 0xec]
mov dword [ebp - 0x2fc], ecx
mov dword [ebp - 0xc4], 0xfffffff0
jmp 0x10021cfa
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0x15
jne 0x10021d18
call fcn.10020948
mov byte [ebp - 0x57], 0
lea eax, [ebp - 0x57]
push eax
call fcn.1002097c
pop ecx
jmp 0x10021ced
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5f8]
call fcn.100249c2
jmp 0x10021b1a
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x48]
mov dword [ebp - 0x5d8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x48]
mov dword [ebp - 0x648], eax
or eax, 0xffffffff
inc eax
inc eax
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x48]
jle 0x10021d69
mov dword [ebp - 0x228], 1
jmp 0x10021d70
and dword [ebp - 0x228], 0
mov eax, dword [ebp - 0x228]
mov dword [ebp - 0x130], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x48]
cmp dword [ebp - 0x130], eax
jge 0x10021d9a
mov dword [ebp - 0x1d8], 1
jmp 0x10021da1
and dword [ebp - 0x1d8], 0
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x98]
cmp eax, dword [ebp - 0x1d8]
jne 0x10021dc7
mov dword [ebp - 0x138], 1
jmp 0x10021dce
and dword [ebp - 0x138], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x48]
cmp eax, dword [ebp - 0x138]
je 0x10021dec
mov dword [ebp - 0x268], 1
jmp 0x10021df3
and dword [ebp - 0x268], 0
cmp dword [ebp - 0x268], 3
jae 0x10021e08
mov dword [ebp - 0x140], 1
jmp 0x10021e0f
and dword [ebp - 0x140], 0
mov eax, 0x122d800f
sub eax, dword [ebp - 0x140]
cmp eax, 0x5b16
jne 0x10021e2d
mov dword [ebp - 0x1e0], 1
jmp 0x10021e34
and dword [ebp - 0x1e0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x48]
cmp dword [ebp - 0x1e0], eax
jge 0x10021e59
mov byte [ebp - 0x4b], 0
lea eax, [ebp - 0x4b]
push eax
call fcn.100209c1
pop ecx
jmp 0x10022085
mov dword [ebp - 0x3bc], 0x826a
mov dword [ebp - 0x3b8], 0x826a
mov dword [ebp - 0x3b4], 0x826a
mov dword [ebp - 0x3b0], 0x826a
or dword [ebp - 0x400], 0xffffffff
or dword [ebp - 0x3fc], 0xffffffff
or dword [ebp - 0x3f8], 0xffffffff
or dword [ebp - 0x3f4], 0xffffffff
lea ecx, [ebp - 0x105]
call fcn.10024a62
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x400]
push eax
lea ecx, [ebp - 0x6b4]
call fcn.10024a65
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x394]
call fcn.1002499c
mov dword [ebp - 4], 5
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x48], 0
jne 0x10021ef2
mov dword [ebp - 0xfc], 1
jmp 0x10021ef9
and dword [ebp - 0xfc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x48]
mov dword [ebp - 0x5fc], eax
push 2
lea ecx, [ebp - 0x394]
call fcn.10024a46
cmp dword [eax], 0
je 0x10021f2c
or eax, 0xffffffff
je 0x10021f2c
mov dword [ebp - 0x148], 1
jmp 0x10021f33
and dword [ebp - 0x148], 0
cmp dword [ebp - 0x148], 0
jle 0x10021f51
cmp dword [ebp - 0xf4], 0
je 0x10021f51
mov dword [ebp - 0x230], 1
jmp 0x10021f58
and dword [ebp - 0x230], 0
mov eax, dword [ebp - 0x98]
cmp dword [ebp - 0x230], eax
jg 0x10021f72
mov dword [ebp - 0x150], 1
jmp 0x10021f79
and dword [ebp - 0x150], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x48]
cmp dword [ebp - 0x150], eax
je 0x10021fa9
push 2
lea ecx, [ebp - 0x394]
call fcn.10024a46
cmp dword [eax], 0
je 0x10021fa9
mov dword [ebp - 0x1e8], 1
jmp 0x10021fb0
and dword [ebp - 0x1e8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xfc]
mov dword [ebp + eax - 0x3bc], ecx
mov eax, dword [ebp - 0xfc]
cmp eax, dword [ebp - 0x1e8]
jg 0x10021fdd
mov dword [ebp - 0x2c0], 1
jmp 0x10021fe4
and dword [ebp - 0x2c0], 0
push 2
lea ecx, [ebp - 0x394]
call fcn.10024a46
push 4
pop eax
imul eax, eax, 0
push 0xfffffffffffffff7
pop esi
sub esi, dword [ebp + eax - 0x48]
push 1
lea ecx, [ebp - 0x394]
call fcn.10024a46
cmp esi, dword [eax]
jl 0x1002201b
mov dword [ebp - 0x158], 1
jmp 0x10022022
and dword [ebp - 0x158], 0
cmp dword [ebp - 0x158], 0
je 0x10022037
mov dword [ebp - 0x340], 1
jmp 0x1002203e
and dword [ebp - 0x340], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3bc]
cmp dword [ebp - 0xf4], eax
jle 0x1002205f
mov dword [ebp - 0x258], 1
jmp 0x10022066
and dword [ebp - 0x258], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x258]
mov dword [ebp + eax - 0x48], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x394]
call fcn.100249c2
mov dword [ebp - 0x670], 0x4e2d
mov byte [ebp - 0x53], 0
lea eax, [ebp - 0x53]
push eax
call fcn.10020a0a
pop ecx
mov byte [ebp - 0x4d], 0
lea eax, [ebp - 0x4d]
push eax
call fcn.10020a42
pop ecx
lea eax, [ebp + 8]
push eax
lea eax, [ebp - 0xf8]
push eax
call fcn.10020929
pop ecx
pop ecx
mov dword [ebp - 0x3d8], 1
mov dword [ebp - 0x3d4], 1
mov dword [ebp - 0x3d0], 1
mov dword [ebp - 0x3cc], 1
lea ecx, [ebp - 0xd9]
call fcn.10024a62
push eax
lea eax, [ebp - 0x3c8]
push eax
lea eax, [ebp - 0x3d8]
push eax
lea ecx, [ebp - 0x6c4]
call fcn.10024a65
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x2a4]
call fcn.1002499c
mov dword [ebp - 4], 6
mov dword [ebp - 0x68], 7
mov dword [ebp - 0x200], 0xbe74fd57
mov dword [ebp - 0x368], 0xba43090
mov dword [ebp - 0x2d0], 6
mov dword [ebp - 0x588], 0xe0133d49
mov dword [ebp - 0x58c], 0x45a32319
mov dword [ebp - 0x594], 0x392614f5
mov dword [ebp - 0x68], 3
jmp 0x10022174
mov eax, dword [ebp - 0x68]
dec eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
jl 0x10022493
mov dword [ebp - 0x1c], 0x6b950ba1
mov dword [ebp - 0x59c], 0xf7a2d47e
mov dword [ebp - 0x1c], 0
jmp 0x1002219f
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jg 0x1002248e
mov dword [ebp - 0x28], 0
push 3
lea ecx, [ebp - 0x608]
call fcn.100248e9
mov byte [ebp - 4], 7
lea eax, [ebp - 0x608]
push eax
lea eax, [ebp - 0x88]
push eax
call fcn.10020a75
pop ecx
pop ecx
mov dword [ebp - 0x88], 0
jmp 0x100221ef
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 1
jge 0x1002220b
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0x208], 0xfffffffe
jmp 0x100221e2
mov dword [ebp - 0x28], 3
jmp 0x1002221b
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jl 0x1002245f
mov dword [ebp - 0x188], 0x70012af0
mov dword [ebp - 0x178], 0xffffffff
mov dword [ebp - 0x5a4], 0x5769
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x2a4]
call fcn.10024a46
push dword [ebp - 0x28]
lea ecx, [ebp - 0x2a4]
call fcn.10024a46
mov dword [ebp - 0x160], eax
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x2a4]
call fcn.10024a46
mov ecx, dword [ebp - 0x160]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x160]
cmp dword [eax], 0
jne 0x100222df
cmp dword [ebp - 0x1c], 0
jne 0x100222a0
mov eax, 0x26f3
test eax, eax
jne 0x100222a0
and dword [ebp - 0x1f0], 0
jmp 0x100222aa
mov dword [ebp - 0x1f0], 1
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x1f0], eax
jge 0x100222c1
mov dword [ebp - 0x168], 1
jmp 0x100222c8
and dword [ebp - 0x168], 0
mov eax, dword [ebp - 0x178]
cmp dword [ebp - 0x168], eax
je 0x100222df
and dword [ebp - 0x238], 0
jmp 0x100222e9
mov dword [ebp - 0x238], 1
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x238], eax
jle 0x10022300
mov dword [ebp - 0x170], 1
jmp 0x10022307
and dword [ebp - 0x170], 0
cmp dword [ebp - 0x170], 0xffffffff
je 0x1002231c
mov dword [ebp - 0x1f8], 1
jmp 0x10022323
and dword [ebp - 0x1f8], 0
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x1f8]
cmp eax, 0x7976
jge 0x1002233f
mov dword [ebp - 0x278], 1
jmp 0x10022346
and dword [ebp - 0x278], 0
mov eax, dword [ebp - 0x178]
imul eax, dword [ebp - 0x278]
test eax, eax
jne 0x1002238b
cmp dword [ebp - 0x68], 0
jne 0x1002238b
push 0
lea ecx, [ebp - 0x2a4]
call fcn.10024a46
cmp dword [eax], 0
jne 0x1002238b
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x2a4]
call fcn.10024a46
cmp dword [eax], 0
jne 0x1002238b
and dword [ebp - 0x180], 0
jmp 0x10022395
mov dword [ebp - 0x180], 1
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 0
je 0x100223bb
xor eax, eax
inc eax
je 0x100223bb
mov dword [ebp - 0x240], 1
jmp 0x100223c2
and dword [ebp - 0x240], 0
mov dword [ebp - 0x188], 0x95998ab5
mov eax, dword [ebp - 0x188]
cmp eax, dword [ebp - 0x240]
jge 0x100223e6
mov dword [ebp - 0x190], 1
jmp 0x100223ed
and dword [ebp - 0x190], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x190], eax
jg 0x10022407
cmp dword [ebp - 0x1c], 0
jne 0x10022407
and dword [ebp - 0x2c8], 0
jmp 0x10022411
mov dword [ebp - 0x2c8], 1
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x5ac], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x5b4], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x368], eax
push 0x61fd
lea eax, [ebp - 0x2d0]
push eax
push 0xeb3
push 0x282
push 1
push 1
push 0x4ecf
push 0x353e
push 0
call fcn.1001c61e
add esp, 0x24
jmp 0x10022214
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x208]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x208], eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x608]
call fcn.100249c2
jmp 0x10022198
jmp 0x1002216d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2a4]
call fcn.100249c2
mov eax, dword [ebp - 0xf8]
movzx eax, word [eax]
cmp eax, 0x5a4d
je 0x10022658
push 2
lea ecx, [ebp - 0x3a4]
call fcn.100248e9
mov dword [ebp - 4], 8
mov dword [ebp - 0x398], 0xffffffff
mov dword [ebp - 0x6c], 0
jmp 0x100224e4
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 2
jge 0x100224fa
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0x3ac], 0x477862fd
jmp 0x100224dd
lea eax, [ebp - 0x6c]
push eax
push 1
lea eax, [ebp - 0x3a4]
push eax
push 1
push 0x2088
push 0x44f9
call fcn.1001bd8f
add esp, 0x18
push 1
lea ecx, [ebp - 0x3a4]
call fcn.10024a46
mov dword [eax], 1
jmp 0x10022554
push 1
lea ecx, [ebp - 0x3a4]
call fcn.10024a46
mov dword [ebp - 0x198], eax
mov eax, dword [ebp - 0x198]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x198]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x3a4]
call fcn.10024a46
cmp dword [eax], 0
jl 0x10022634
mov dword [ebp - 0xd8], 0xa095a979
mov dword [ebp - 0x348], 0x4c8f
mov byte [ebp - 0x58], 0
movzx eax, byte [ebp - 0x58]
test eax, eax
je 0x100225a5
push 1
push 0x2cde
push 0x6318
push 0x2c0c
push 1
call fcn.1001be77
add esp, 0x14
mov eax, dword [ebp - 0xd8]
add eax, dword [ebp - 0x348]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x3ac]
jge 0x100225cc
mov dword [ebp - 0x2d8], 1
jmp 0x100225d3
and dword [ebp - 0x2d8], 0
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0x5bc], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3ac]
cmp dword [ebp - 0xd8], eax
jg 0x10022600
mov dword [ebp - 0x260], 1
jmp 0x10022607
and dword [ebp - 0x260], 0
cmp dword [ebp - 0x260], 0
jbe 0x1002261c
mov dword [ebp - 0x1a0], 1
jmp 0x10022623
and dword [ebp - 0x1a0], 0
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x398], eax
jmp 0x10022530
mov byte [ebp - 0x4f], 0
lea eax, [ebp - 0x4f]
push eax
call fcn.10020abd
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3a4]
call fcn.100249c2
xor eax, eax
jmp 0x10023fda
lea eax, [ebp - 0xf8]
push eax
lea eax, [ebp + 8]
push eax
lea eax, [ebp - 0x84]
push eax
call fcn.10020afc
add esp, 0xc
mov dword [ebp - 0x5c4], 0xfffffff7
mov dword [ebp - 0x2e8], 1
mov dword [ebp - 0x5cc], 0x13fe662d
mov dword [ebp - 0x584], 0x8d963785
mov dword [ebp - 0x2b4], 0xfffffffa
mov dword [ebp - 0x2f0], 0xffffffff
push 3
lea ecx, [ebp - 0x618]
call fcn.100248e9
mov dword [ebp - 4], 9
mov dword [ebp - 0x350], 0x9ba87a5
push 4
lea ecx, [ebp - 0x418]
call fcn.100248e9
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x64c], 0xfffffffa
mov dword [ebp - 0x5c], 0
jmp 0x100226f7
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 4
jge 0x1002270d
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x6e0], 0xffffffff
jmp 0x100226f0
lea eax, [ebp - 0x618]
push eax
lea eax, [ebp - 0x5c]
push eax
call fcn.10020b2a
pop ecx
pop ecx
mov dword [ebp - 0x2e0], 0x159f
cmp dword [ebp - 0x2e0], 0x103c
jge 0x100228e0
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x3c]
push eax
push 0x10008214
call fcn.1004cd7b
add esp, 0x14
mov eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x2c]
jne 0x100227b8
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x34]
jle 0x10022774
mov eax, dword [ebp - 0x30]
sub eax, dword [ebp - 0x34]
mov dword [ebp - 0x210], eax
jmp 0x10022780
mov eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0x30]
mov dword [ebp - 0x210], eax
mov eax, dword [ebp - 0x210]
mov dword [ebp - 0x1a8], eax
push dword [ebp - 0x34]
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x1a8]
push eax
push dword [ebp - 0x30]
mov eax, dword [ebp - 0x3c]
add eax, dword [ebp - 0x1a8]
push eax
push 0x10008214
call fcn.1004d1c8
add esp, 0x14
jmp 0x100228e0
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x34]
jne 0x1002281a
mov eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x2c]
jle 0x100227d6
mov eax, dword [ebp - 0x3c]
sub eax, dword [ebp - 0x2c]
mov dword [ebp - 0x248], eax
jmp 0x100227e2
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x3c]
mov dword [ebp - 0x248], eax
mov eax, dword [ebp - 0x248]
mov dword [ebp - 0x1b0], eax
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x1b0]
push eax
push dword [ebp - 0x2c]
mov eax, dword [ebp - 0x30]
add eax, dword [ebp - 0x1b0]
push eax
push dword [ebp - 0x3c]
push 0x10008214
call fcn.1004d1c8
add esp, 0x14
jmp 0x100228e0
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x2c]
sub ecx, dword [ebp - 0x3c]
imul eax, ecx
mov ecx, dword [ebp - 0x34]
sub ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x34]
sub edx, dword [ebp - 0x30]
imul ecx, edx
add eax, ecx
mov dword [ebp - 0x1b8], eax
mov eax, dword [ebp - 0x1b8]
cdq
sub eax, edx
sar eax, 1
mov ecx, eax
call fcn.100289bb
cvttsd2si eax, xmm0
mov dword [ebp - 0x218], eax
mov eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
sub ecx, dword [ebp - 0x3c]
cdq
idiv ecx
cvtsi2sd xmm0, eax
movsd qword [ebp - 0x3c4], xmm0
movsd xmm0, qword [ebp - 0x3c4]
ucomisd xmm0, qword [0x10008760]
lahf
test ah, 0x44
jnp 0x100228a3
movsd xmm0, qword [ebp - 0x3c4]
ucomisd xmm0, qword [0x10008798]
lahf
test ah, 0x44
jp 0x100228ba
mov eax, dword [ebp - 0x218]
shl eax, 1
imul eax, dword [ebp - 0x218]
cmp eax, dword [ebp - 0x1b8]
je 0x100228c7
push 0x100080c0
call fcn.1004d431
pop ecx
jmp 0x100228e0
push dword [ebp - 0x30]
push dword [ebp - 0x2c]
push dword [ebp - 0x34]
push dword [ebp - 0x3c]
push 0x10008214
call fcn.1004d1c8
add esp, 0x14
push 1
push 1
push 0x43ff
push 0x74ab
lea eax, [ebp - 0x418]
push eax
lea eax, [ebp - 0x5c]
push eax
call fcn.1001c279
add esp, 0x18
mov esi, dword [ebp - 0x350]
push 3
lea ecx, [ebp - 0x418]
call fcn.10024a46
mov dword [eax], esi
lea eax, [ebp - 0x2e8]
push eax
push 1
push 0x7586
lea eax, [ebp - 0x2b4]
push eax
push 1
lea eax, [ebp - 0x2f0]
push eax
push 0x7c6
push 0x61ac
call fcn.1001c41e
add esp, 0x20
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x418]
call fcn.100249c2
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x618]
call fcn.100249c2
mov eax, dword [ebp - 0x84]
cmp dword [eax], 0x4550
je 0x10022e13
mov dword [ebp - 0x20], 0xfffffffa
mov dword [ebp - 0x220], 1
mov dword [ebp - 0x144], 0xfffffff6
mov dword [ebp - 0x358], 0x269f
cmp dword [ebp - 0x358], 0x11ad
jge 0x10022b79
lea eax, [ebp - 0x270]
push eax
mov ecx, 0x10655530
call fcn.10024266
mov dword [ebp - 0xbc], 1
jmp 0x100229d5
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0xbc]
cmp eax, dword [ebp - 0x270]
jg 0x100229fd
mov eax, dword [ebp - 0xbc]
lea eax, [eax*4 + 0x1071fc50]
push eax
mov ecx, 0x10655530
call fcn.10024266
jmp 0x100229c8
lea ecx, [ebp - 0x690]
call fcn.10024085
mov dword [ebp - 4], 0xb
lea edx, [ebp - 0x690]
mov ecx, 0x10655530
call fcn.100287aa
push 4
pop eax
imul eax, eax, 0
and dword [eax + 0x10656b10], 0
mov dword [ebp - 0x60], 1
jmp 0x10022a3c
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
lea ecx, [ebp - 0x690]
call fcn.100241a4
cmp dword [ebp - 0x60], eax
ja 0x10022a79
mov eax, dword [ebp - 0x60]
dec eax
push eax
lea ecx, [ebp - 0x690]
call fcn.10024185
movsx eax, byte [eax]
mov ecx, dword [ebp - 0x60]
mov ecx, dword [ecx*4 + 0x10656b0c]
lea eax, [eax + ecx - 0x30]
mov ecx, dword [ebp - 0x60]
mov dword [ecx*4 + 0x10656b10], eax
jmp 0x10022a35
mov dword [ebp - 0x14], 1
jmp 0x10022a89
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x270]
jg 0x10022b4f
mov eax, dword [ebp - 0x14]
mov eax, dword [eax*4 + 0x1071fc50]
cmp eax, dword [ebp - 0x14]
je 0x10022b4a
mov eax, dword [ebp - 0x14]
mov eax, dword [eax*4 + 0x1071fc50]
cmp eax, dword [ebp - 0x14]
jge 0x10022b03
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
sub ecx, dword [eax*4 + 0x1071fc50]
mov eax, dword [ebp - 0x14]
mov eax, dword [eax*4 + 0x1071fc50]
mov edx, dword [ebp - 0x14]
mov edx, dword [edx*4 + 0x10656b0c]
sub edx, dword [eax*4 + 0x10656b0c]
cmp ecx, edx
je 0x10022b01
push fcn.100287b2
mov edx, 0x10008170
mov ecx, 0x10655478
call fcn.100287e4
mov ecx, eax
call fcn.1002456a
jmp 0x10022b4a
mov eax, dword [ebp - 0x14]
mov eax, dword [eax*4 + 0x1071fc50]
sub eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
mov ecx, dword [ecx*4 + 0x1071fc50]
mov edx, dword [ebp - 0x14]
mov ecx, dword [ecx*4 + 0x10656b0c]
sub ecx, dword [edx*4 + 0x10656b0c]
cmp eax, ecx
je 0x10022b4a
push fcn.100287b2
mov edx, 0x10008170
mov ecx, 0x10655478
call fcn.100287e4
mov ecx, eax
call fcn.1002456a
jmp 0x10022a82
push fcn.100287b2
mov edx, 0x1000816c
mov ecx, 0x10655478
call fcn.100287e4
mov ecx, eax
call fcn.1002456a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x690]
call fcn.100240e8
mov dword [ebp - 0x14c], 0x3d478254
mov dword [ebp - 0x300], 0x1b6ba00b
mov dword [ebp - 0xcc], 0
jmp 0x10022ba6
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 2
jge 0x10022bc2
mov eax, dword [ebp - 0xcc]
mov dword [ebp + eax*4 - 0x280], 2
jmp 0x10022b99
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x20]
cmp eax, 0xffffffff
jle 0x10022bd9
mov dword [ebp - 0x1c0], 1
jmp 0x10022be0
and dword [ebp - 0x1c0], 0
mov eax, dword [ebp - 0x1c0]
mov dword [ebp - 0x220], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x280]
cmp dword [ebp - 0x220], eax
jg 0x10022c0d
mov dword [ebp - 0x1c8], 1
jmp 0x10022c14
and dword [ebp - 0x1c8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x280]
cmp dword [ebp - 0x1c8], eax
jl 0x10022c35
mov dword [ebp - 0x2f8], 1
jmp 0x10022c3c
and dword [ebp - 0x2f8], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x678], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x280]
sub eax, 0x2013416e
imul eax, dword [ebp - 0x144]
cmp dword [ebp - 0x20], eax
jle 0x10022c6f
mov dword [ebp - 0x250], 1
jmp 0x10022c76
and dword [ebp - 0x250], 0
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x250]
jne 0x10022c93
cmp dword [ebp - 0x20], 0
je 0x10022c93
mov dword [ebp - 0x1d0], 1
jmp 0x10022c9a
and dword [ebp - 0x1d0], 0
mov eax, dword [ebp - 0x1d0]
sub eax, 0x9271
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x280]
je 0x10022cc0
mov dword [ebp - 0x120], 1
jmp 0x10022cc7
and dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x120], eax
jge 0x10022cde
mov dword [ebp - 0x11c], 1
jmp 0x10022ce5
and dword [ebp - 0x11c], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x11c], eax
je 0x10022cfc
mov dword [ebp - 0x31c], 1
jmp 0x10022d03
and dword [ebp - 0x31c], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x280], 1
jge 0x10022d1f
mov dword [ebp - 0x134], 1
jmp 0x10022d26
and dword [ebp - 0x134], 0
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x134]
jl 0x10022d3d
mov dword [ebp - 0x13c], 1
jmp 0x10022d44
and dword [ebp - 0x13c], 0
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x14c], eax
mov eax, dword [ebp - 0x144]
cmp dword [ebp - 0x14c], eax
jge 0x10022d70
mov dword [ebp - 0x154], 1
jmp 0x10022d77
and dword [ebp - 0x154], 0
mov eax, dword [ebp - 0x154]
mov dword [ebp - 0x300], eax
mov byte [ebp - 0x55], 0
lea eax, [ebp - 0x55]
push eax
call fcn.10020b72
pop ecx
mov dword [ebp - 0x32c], 0xce125d16
mov dword [ebp - 0xb0], 0
jmp 0x10022db4
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 3
jge 0x10022dd0
mov eax, dword [ebp - 0xb0]
mov dword [ebp + eax*4 - 0x6d0], 0xfffffff6
jmp 0x10022da7
mov byte [ebp - 0x51], 0
push 0x3131
push 0x56f1
push 0xe73
lea eax, [ebp - 0x51]
push eax
push 1
push 1
push 0x7de8
push 0x19fb
push 1
call fcn.1001c61e
add esp, 0x24
lea eax, [ebp - 0x32c]
push eax
call fcn.10020ba2
pop ecx
xor eax, eax
jmp 0x10023fda
push 2
lea ecx, [ebp - 0x430]
call fcn.100248e9
mov dword [ebp - 4], 0xc
push 1
lea ecx, [ebp - 0x2b0]
call fcn.100248e9
mov byte [ebp - 4], 0xd
push 0x7087
push 1
push 0x5274
lea eax, [ebp - 0x430]
push eax
push 0x6ba
push 1
push 0x9be
push 0x1f58
lea eax, [ebp - 0x308]
push eax
push 0x495d
push 0x48
push 0
push 0x6360
push 0x4ab5
call fcn.1001f271
add esp, 0x38
push 0x537d
lea eax, [ebp - 0x308]
push eax
push 1
push 0
lea eax, [ebp - 0x2b0]
push eax
call fcn.1001e99c
add esp, 0x14
push 0
lea ecx, [ebp - 0x2b0]
call fcn.10024a46
and dword [eax], 0
jmp 0x10022ed3
push 0
lea ecx, [ebp - 0x2b0]
call fcn.10024a46
mov dword [ebp - 0x15c], eax
mov eax, dword [ebp - 0x15c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x15c]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x2b0]
call fcn.10024a46
cmp dword [eax], 1
jg 0x10022f20
push 1
push 1
push 1
push 0x63b8
push 0x778f
call fcn.1001cf18
add esp, 0x14
push 0
lea ecx, [ebp - 0x2b0]
call fcn.10024a46
push dword [eax]
lea ecx, [ebp - 0x430]
call fcn.10024a46
cmp dword [eax], 0
je 0x10022f1e
jmp 0x10022eaf
jmp 0x10022eaf
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x2b0]
call fcn.100249c2
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x430]
call fcn.100249c2
push 0x64
push 0x66f4
lea eax, [ebp - 0x84]
push eax
push 1
push 1
push 0x762f
push 0x5788
push 0x6da4
push 0x6175
lea eax, [ebp - 0xa0]
push eax
call fcn.1001d0ac
add esp, 0x28
call fcn.10020bef
cmp dword [ebp - 0xa0], 0
jne 0x1002323a
mov dword [ebp - 0x10], 0xffffffff
mov dword [ebp - 0xe8], 1
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x10], eax
jle 0x10022fea
cmp dword [ebp - 0x10], 0x37bb
jne 0x10022fbc
mov eax, 0xb4456e34
test eax, eax
je 0x10022fbc
mov dword [ebp - 0x164], 1
jmp 0x10022fc3
and dword [ebp - 0x164], 0
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x164]
mov dword [ebp - 0xe8], eax
mov eax, dword [ebp - 0xe8]
add eax, dword [ebp - 0x10]
je 0x10022fea
mov dword [ebp - 0x334], 1
jmp 0x10022ff1
and dword [ebp - 0x334], 0
cmp dword [ebp - 0x10], 0xffff
je 0x10023006
mov dword [ebp - 0x16c], 1
jmp 0x1002300d
and dword [ebp - 0x16c], 0
cmp dword [ebp - 0x16c], 0
jg 0x10023022
mov dword [ebp - 0x174], 1
jmp 0x10023029
and dword [ebp - 0x174], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x174], eax
jle 0x10023040
mov dword [ebp - 0x17c], 1
jmp 0x10023047
and dword [ebp - 0x17c], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x17c], eax
je 0x1002305e
mov dword [ebp - 0x184], 1
jmp 0x10023065
and dword [ebp - 0x184], 0
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x184]
jle 0x100230aa
mov dword [ebp - 0x33c], 0xc0233fd5
mov dword [ebp - 0x310], 0x38d10fbf
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x33c]
push eax
lea eax, [ebp - 0xe8]
push eax
call fcn.10020efa
add esp, 0x10
jmp 0x10023233
mov dword [ebp - 0x74], 0x618b2576
mov dword [ebp - 0x344], 1
call fcn.10020f86
mov dword [ebp - 0x10], 0
jmp 0x100230d0
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xe
jg 0x10023233
mov dword [ebp - 0xf0], 1
mov dword [ebp - 0x318], 0x85e0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0
jne 0x100231e1
cmp dword [ebp - 0xf0], 0
je 0x100231e1
xor eax, eax
jne 0x1002312f
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x66c], eax
imul eax, dword [ebp - 0x10], 3
neg eax
jne 0x1002312f
and dword [ebp - 0x18c], 0
jmp 0x10023139
mov dword [ebp - 0x18c], 1
imul eax, dword [ebp - 0x18c], 0xcd4e
cmp eax, 0xb430
jl 0x1002315c
cmp dword [ebp - 0x74], 0
je 0x1002315c
mov dword [ebp - 0x194], 1
jmp 0x10023163
and dword [ebp - 0x194], 0
mov eax, dword [ebp - 0x74]
add eax, dword [ebp - 0x194]
cmp eax, dword [ebp - 0x318]
je 0x10023180
mov dword [ebp - 0x19c], 1
jmp 0x10023187
and dword [ebp - 0x19c], 0
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0xb06f
jge 0x100231a5
mov dword [ebp - 0x1a4], 1
jmp 0x100231ac
and dword [ebp - 0x1a4], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x1a4], eax
jle 0x100231c3
mov dword [ebp - 0x1ac], 1
jmp 0x100231ca
and dword [ebp - 0x1ac], 0
mov eax, dword [ebp - 0x344]
cmp dword [ebp - 0x1ac], eax
je 0x100231e1
and dword [ebp - 0x1b4], 0
jmp 0x100231eb
mov dword [ebp - 0x1b4], 1
cmp dword [ebp - 0x1b4], 0
je 0x1002320c
mov byte [ebp - 0x56], 0
movzx eax, byte [ebp - 0x56]
test eax, eax
je 0x10023205
call fcn.10020fa2
call fcn.10020fbb
jmp 0x1002321d
push 1
push 0
push 0x4301
call fcn.10020612
add esp, 0xc
mov byte [ebp - 0x4a], 0
movzx eax, byte [ebp - 0x4a]
test eax, eax
je 0x1002322e
call fcn.10020fe5
jmp 0x100230c9
xor eax, eax
jmp 0x10023fda
push dword [ebp - 0x84]
lea eax, [ebp - 0x38]
push eax
push 0x1e6e
lea eax, [ebp - 0xa0]
push eax
push 0
push 0x317b
lea eax, [ebp - 0x668]
push eax
push 0xb31
push 1
push dword [ebp - 0xf8]
push 0x6182
call fcn.1001e01f
add esp, 0x2c
mov dword [ebp - 0x18], 0xfffffff7
mov dword [ebp - 0x1e4], 1
cmp dword [ebp - 0x18], 0
je 0x100234c3
mov dword [ebp - 0x40], 0xa727
mov dword [ebp - 0x1f4], 0xffffffff
mov dword [ebp - 0x34c], 0
mov dword [ebp - 0xb8], 0
jmp 0x100232c7
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 3
jge 0x100232e3
mov eax, dword [ebp - 0xb8]
mov dword [ebp + eax*4 - 0x6ac], 0x3e70
jmp 0x100232ba
cmp dword [ebp - 0x40], 0
je 0x10023462
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x5ec], eax
xor eax, eax
jne 0x10023309
cmp dword [ebp - 0x18], 0
jne 0x10023309
and dword [ebp - 0x1bc], 0
jmp 0x10023313
mov dword [ebp - 0x1bc], 1
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x1bc]
cmp eax, 0xcea4
jle 0x1002332f
mov dword [ebp - 0x1c4], 1
jmp 0x10023336
and dword [ebp - 0x1c4], 0
mov eax, dword [ebp - 0x1c4]
sub eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0x40]
jg 0x10023354
mov dword [ebp - 0x1cc], 1
jmp 0x1002335b
and dword [ebp - 0x1cc], 0
mov eax, dword [ebp - 0x1cc]
sub eax, 0x6991
sub eax, dword [ebp - 0x18]
je 0x1002337d
cmp dword [ebp - 0x18], 0
je 0x1002337d
mov dword [ebp - 0x1d4], 1
jmp 0x10023384
and dword [ebp - 0x1d4], 0
cmp dword [ebp - 0x1d4], 0xf9a4d91f
jne 0x1002339c
mov dword [ebp - 0x118], 1
jmp 0x100233a3
and dword [ebp - 0x118], 0
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x60c], eax
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x1e4], eax
mov eax, dword [ebp - 0x1e4]
mov dword [ebp - 0x590], eax
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x40]
cmp eax, 0xffffffff
jg 0x100233db
mov dword [ebp - 0x1ec], 1
jmp 0x100233e2
and dword [ebp - 0x1ec], 0
mov eax, dword [ebp - 0x1ec]
mov dword [ebp - 0x1f4], eax
mov eax, dword [ebp - 0x1f4]
cmp dword [ebp - 0x18], eax
jne 0x10023405
mov dword [ebp - 0x1fc], 1
jmp 0x1002340c
and dword [ebp - 0x1fc], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x1fc], eax
jle 0x10023423
mov dword [ebp - 0x204], 1
jmp 0x1002342a
and dword [ebp - 0x204], 0
mov eax, dword [ebp - 0x40]
add eax, dword [ebp - 0x204]
cmp eax, 1
je 0x10023444
mov dword [ebp - 0x20c], 1
jmp 0x1002344b
and dword [ebp - 0x20c], 0
mov eax, dword [ebp - 0x20c]
sub eax, dword [ebp - 0x40]
je 0x10023462
mov dword [ebp - 0x214], 1
jmp 0x10023469
and dword [ebp - 0x214], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x214], eax
jne 0x10023480
mov dword [ebp - 0x21c], 1
jmp 0x10023487
and dword [ebp - 0x21c], 0
cmp dword [ebp - 0x21c], 1
je 0x100234a8
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x6ac], 0
jne 0x100234a8
and dword [ebp - 0x224], 0
jmp 0x100234b2
mov dword [ebp - 0x224], 1
mov eax, dword [ebp - 0x224]
mov dword [ebp - 0x34c], eax
jmp 0x1002356f
mov dword [ebp - 0x650], 0xfeac8e4c
call fcn.10020ff2
mov dword [ebp - 0x18], 0xffffffea
jmp 0x100234e2
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0xe
jle 0x1002356f
push 3
lea ecx, [ebp - 0x628]
call fcn.100248e9
mov dword [ebp - 4], 0xe
push 1
push 0x2fec
lea eax, [ebp - 0x628]
push eax
lea eax, [ebp - 0x7c]
push eax
push 0
call fcn.10020053
add esp, 0x14
mov dword [ebp - 0x7c], 0
jmp 0x1002352c
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 4
jge 0x10023542
mov eax, dword [ebp - 0x7c]
mov dword [ebp + eax*4 - 0x6a0], 0xfffffffb
jmp 0x10023525
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x6a0]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x6a0], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x628]
call fcn.100249c2
jmp 0x100234db
push 1
push 0x5f1e
push dword [ebp - 0x84]
push 1
push dword [ebp - 0x38]
push dword [ebp + 8]
push 1
push 0x622c
call fcn.1000aa4e
add esp, 0x20
mov dword [ebp - 0x388], 0x5286e871
mov dword [ebp - 0x338], 0xfffffffe
mov dword [ebp - 0x360], 0x4dd
mov dword [ebp - 0x330], 3
mov byte [ebp - 0x4c], 0
lea eax, [ebp - 0x4c]
push eax
call fcn.10021035
pop ecx
push 0x1f93
push 0x5068
lea eax, [ebp - 0x388]
push eax
push 0x3e35
push 1
lea eax, [ebp - 0x330]
push eax
push 0x34cd
lea eax, [ebp - 0x360]
push eax
push 1
push 0x6d5
lea eax, [ebp - 0x338]
push eax
call fcn.1001e01f
add esp, 0x2c
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x84]
push eax
push 1
push 0x118c
push 1
push 0x2f3d
push 0x49f4
push 0x4353
push 1
lea eax, [ebp - 0x22c]
push eax
call fcn.1001e6b6
add esp, 0x28
cmp dword [ebp - 0x22c], 0
je 0x100236c4
mov dword [ebp - 0xc0], 0xc68ec0ae
mov byte [ebp - 0x4e], 0
lea eax, [ebp - 0x4e]
push eax
call fcn.10021068
pop ecx
mov dword [ebp - 0xc0], 0x19
jmp 0x1002367b
mov eax, dword [ebp - 0xc0]
dec eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0xffffffe7
jge 0x10023694
mov byte [ebp - 0x50], 0
lea eax, [ebp - 0x50]
push eax
call fcn.100210a2
pop ecx
jmp 0x1002366e
push 0x343c
push 1
push 0x5b9e
push 0x61cd
push 1
push dword [ebp - 0x22c]
push 0x7c96
push 0x22bd
push 1
push dword [ebp - 0x38]
call fcn.10014048
add esp, 0x28
push 1
lea ecx, [ebp - 0x328]
call fcn.100248e9
mov dword [ebp - 4], 0xf
lea eax, [ebp - 0x328]
push eax
lea eax, [ebp - 0x598]
push eax
call fcn.100210d5
pop ecx
pop ecx
push 0
lea ecx, [ebp - 0x328]
call fcn.10024a46
and dword [eax], 0
jmp 0x10023723
push 0
lea ecx, [ebp - 0x328]
call fcn.10024a46
mov dword [ebp - 0x234], eax
mov eax, dword [ebp - 0x234]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x234]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x328]
call fcn.10024a46
cmp dword [eax], 0xffffffea
je 0x100237ec
push 2
lea ecx, [ebp - 0x40c]
call fcn.100248e9
mov byte [ebp - 4], 0x10
mov dword [ebp - 0x8c], 0xfffffff6
push 0x3a67
lea eax, [ebp - 0x61c]
push eax
push 0x4c8
push 0x3e1c
push 0xcf4
push 0x66c1
push 1
push 1
push 0x3a24
push 0x42fe
lea eax, [ebp - 0x40c]
push eax
call fcn.1001ec77
add esp, 0x2c
lea eax, [ebp - 0x40c]
push eax
lea eax, [ebp - 0x8c]
push eax
call fcn.1002111d
pop ecx
pop ecx
mov dword [ebp - 0x8c], 0
jmp 0x100237bf
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 1
jne 0x100237d8
mov byte [ebp - 0x52], 0
lea eax, [ebp - 0x52]
push eax
call fcn.1002116e
pop ecx
jmp 0x100237b2
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x40c]
call fcn.100249c2
jmp 0x100236ff
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x328]
call fcn.100249c2
push dword [ebp - 0x38]
call fcn.1001566c
pop ecx
test eax, eax
jne 0x10023a19
push 2
lea ecx, [ebp - 0x114]
call fcn.100248e9
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x2bc], 1
mov dword [ebp - 0x94], 0
jmp 0x10023843
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 2
jge 0x1002385f
mov eax, dword [ebp - 0x94]
mov dword [ebp + eax*4 - 0xe4], 0x124f01c0
jmp 0x10023836
push 1
lea eax, [ebp - 0x114]
push eax
push 0x24df
push 0x1614
push 1
push 0x5a38
lea eax, [ebp - 0x94]
push eax
push 0x7df7
call fcn.1001f070
add esp, 0x20
push 0
lea ecx, [ebp - 0x114]
call fcn.10024a46
and dword [eax], 0
jmp 0x100238c3
push 0
lea ecx, [ebp - 0x114]
call fcn.10024a46
mov dword [ebp - 0x23c], eax
mov eax, dword [ebp - 0x23c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x23c]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x114]
call fcn.10024a46
cmp dword [eax], 1
jg 0x10023905
mov dword [ebp - 0x80], 0xd3f46721
mov dword [ebp - 0x80], 1
jmp 0x100238ec
mov eax, dword [ebp - 0x80]
dec eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0
jl 0x10023903
mov eax, dword [ebp - 0x80]
cmp dword [ebp + eax*4 - 0xe4], 0
je 0x10023901
jmp 0x10023903
jmp 0x100238e5
jmp 0x1002389f
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xe4]
mov dword [ebp - 0x5a0], eax
push 0
lea ecx, [ebp - 0x114]
call fcn.10024a46
mov dword [eax], 0x22db785b
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xe4], 0x22db785b
jl 0x1002396c
push 1
lea ecx, [ebp - 0x114]
call fcn.10024a46
mov dword [eax], 1
push 0
lea ecx, [ebp - 0x114]
call fcn.10024a46
cmp dword [eax], 1
jae 0x1002396c
and dword [ebp - 0x244], 0
jmp 0x10023976
mov dword [ebp - 0x244], 1
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov edx, dword [ebp - 0x244]
sub edx, dword [ebp + ecx - 0xe4]
cmp dword [ebp + eax - 0xe4], edx
jl 0x100239a4
mov dword [ebp - 0x378], 1
jmp 0x100239ab
and dword [ebp - 0x378], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe4]
mov dword [ebp - 0x674], eax
push 1
lea ecx, [ebp - 0x114]
call fcn.10024a46
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xe4], 5
je 0x100239e7
mov dword [ebp - 0x2b8], 1
jmp 0x100239ee
and dword [ebp - 0x2b8], 0
push 0
lea ecx, [ebp - 0x114]
call fcn.10024a46
mov eax, dword [eax]
mov dword [ebp - 0x2bc], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x114]
call fcn.100249c2
xor eax, eax
jmp 0x10023fda
push 1
push 1
push dword [ebp - 0x38]
call fcn.10010d7a
add esp, 0xc
mov dword [ebp - 0x9c], 0xc68ec0ae
mov byte [ebp - 0x54], 0
lea eax, [ebp - 0x54]
push eax
call fcn.100211b0
pop ecx
mov dword [ebp - 0x9c], 0x19
jmp 0x10023a59
mov eax, dword [ebp - 0x9c]
dec eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0xffffffe7
jle 0x10023a79
mov dword [ebp - 0x2c4], 0x6cce57bf
cmp dword [ebp - 0x2c4], 0
je 0x10023a77
jmp 0x10023a79
jmp 0x10023a4c
mov eax, dword [ebp - 0x38]
mov eax, dword [eax]
cmp dword [eax + 0x28], 0
je 0x10023ecb
push 2
lea ecx, [ebp - 0x424]
call fcn.100248e9
mov dword [ebp - 4], 0x12
push 1
lea ecx, [ebp - 0x298]
call fcn.100248e9
mov byte [ebp - 4], 0x13
lea eax, [ebp - 0x424]
push eax
lea eax, [ebp - 0x2cc]
push eax
call fcn.100211de
pop ecx
pop ecx
push 0x6b2c
push 1
push 0x1eb9
push 0x5cfe
push 0x6fc1
push 1
push 0x5915
push 0x7b86
push 0x4ee7
lea eax, [ebp - 0x298]
push eax
push 0x760a
push 1
push 0x17a
lea eax, [ebp - 0x2cc]
push eax
call fcn.1001f271
add esp, 0x38
push 0
lea ecx, [ebp - 0x298]
call fcn.10024a46
and dword [eax], 0
jmp 0x10023b41
push 0
lea ecx, [ebp - 0x298]
call fcn.10024a46
mov dword [ebp - 0x24c], eax
mov eax, dword [ebp - 0x24c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x24c]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x298]
call fcn.10024a46
cmp dword [eax], 1
jg 0x10023b84
mov byte [ebp - 0x49], 0
lea eax, [ebp - 0x49]
push eax
call fcn.10021226
pop ecx
push 0
lea ecx, [ebp - 0x298]
call fcn.10024a46
push dword [eax]
lea ecx, [ebp - 0x424]
call fcn.10024a46
cmp dword [eax], 0
je 0x10023b82
jmp 0x10023b1d
jmp 0x10023b1d
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x298]
call fcn.100249c2
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x424]
call fcn.100249c2
mov dword [ebp - 0x2d4], 0x2498
cmp dword [ebp - 0x2d4], 0x694
jge 0x10023e57
and dword [ebp - 0x580], 0
mov dword [ebp - 0x57c], 4
and dword [ebp - 0x578], 0
and dword [ebp - 0x574], 0
and dword [ebp - 0x570], 0
and dword [ebp - 0x56c], 0
and dword [ebp - 0x568], 0
mov dword [ebp - 0x564], 8
and dword [ebp - 0x560], 0
mov dword [ebp - 0x55c], 4
and dword [ebp - 0x558], 0
mov dword [ebp - 0x554], 8
and dword [ebp - 0x550], 0
and dword [ebp - 0x54c], 0
and dword [ebp - 0x548], 0
and dword [ebp - 0x544], 0
mov dword [ebp - 0x540], 0xb
and dword [ebp - 0x53c], 0
and dword [ebp - 0x538], 0
mov dword [ebp - 0x534], 8
and dword [ebp - 0x530], 0
mov dword [ebp - 0x52c], 7
and dword [ebp - 0x528], 0
mov dword [ebp - 0x524], 4
and dword [ebp - 0x520], 0
and dword [ebp - 0x51c], 0
mov dword [ebp - 0x518], 2
and dword [ebp - 0x514], 0
and dword [ebp - 0x510], 0
mov dword [ebp - 0x50c], 7
and dword [ebp - 0x508], 0
mov dword [ebp - 0x504], 9
mov dword [ebp - 0x500], 0xe
and dword [ebp - 0x4fc], 0
and dword [ebp - 0x4f8], 0
and dword [ebp - 0x4f4], 0
and dword [ebp - 0x4f0], 0
and dword [ebp - 0x4ec], 0
and dword [ebp - 0x4e8], 0
mov dword [ebp - 0x4e4], 9
and dword [ebp - 0x4e0], 0
mov dword [ebp - 0x4dc], 0xa
and dword [ebp - 0x4d8], 0
and dword [ebp - 0x4d4], 0
and dword [ebp - 0x4d0], 0
and dword [ebp - 0x4cc], 0
and dword [ebp - 0x4c8], 0
mov dword [ebp - 0x4c4], 4
and dword [ebp - 0x4c0], 0
mov dword [ebp - 0x4bc], 0xa
and dword [ebp - 0x4b8], 0
mov dword [ebp - 0x4b4], 2
and dword [ebp - 0x4b0], 0
and dword [ebp - 0x4ac], 0
and dword [ebp - 0x4a8], 0
and dword [ebp - 0x4a4], 0
and dword [ebp - 0x4a0], 0
mov dword [ebp - 0x49c], 0xe
and dword [ebp - 0x498], 0
mov dword [ebp - 0x494], 2
and dword [ebp - 0x490], 0
mov dword [ebp - 0x48c], 1
mov dword [ebp - 0x488], 6
mov dword [ebp - 0x484], 8
mov dword [ebp - 0x480], 0xb
and dword [ebp - 0x47c], 0
and dword [ebp - 0x478], 0
and dword [ebp - 0x474], 0
and dword [ebp - 0x470], 0
mov dword [ebp - 0x46c], 1
and dword [ebp - 0x468], 0
mov dword [ebp - 0x464], 7
and dword [ebp - 0x460], 0
and dword [ebp - 0x45c], 0
mov dword [ebp - 0x458], 2
and dword [ebp - 0x454], 0
and dword [ebp - 0x450], 0
and dword [ebp - 0x44c], 0
mov dword [ebp - 0x448], 6
mov dword [ebp - 0x444], 7
and dword [ebp - 0x440], 0
push 0
lea eax, [ebp - 0x580]
push eax
call fcn.1002151c
pop ecx
pop ecx
mov eax, dword [ebp - 0x38]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xa0]
add ecx, dword [eax + 0x28]
mov dword [ebp - 0x254], ecx
push 0x6c85
push 0x3a36
push 1
push 0x6d1c
push 1
call fcn.1001f6ff
add esp, 0x14
cmp dword [ebp - 0x254], 0
jne 0x10023e96
xor eax, eax
jmp 0x10023fda
push 0
push 1
push 0xdeadbeef
call dword [ebp - 0x254]
mov dword [ebp - 0x2dc], eax
cmp dword [ebp - 0x2dc], 0
jne 0x10023ebb
xor eax, eax
jmp 0x10023fda
push 1
push 1
lea eax, [ebp - 0x38]
push eax
call fcn.100203ad
add esp, 0xc
mov dword [ebp - 0x2ec], 0xfffffffc
mov dword [ebp - 0x5a8], 0xfffffffb
mov dword [ebp - 0x62c], 0xfffffffe
mov dword [ebp - 0x5b0], 0x5fcc
mov dword [ebp - 0x664], 0xe1dfe009
push 3
lea ecx, [ebp - 0x638]
call fcn.100248e9
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x5b8], 0x9a22db78
mov dword [ebp - 0x63c], 0xeba4d3ec
mov dword [ebp - 0x5c0], 1
mov dword [ebp - 0x640], 0xfffffffe
mov dword [ebp - 0x2e4], 0x2c6eb81f
mov dword [ebp - 0x2f4], 0x7a501900
mov dword [ebp - 0xa8], 0
jmp 0x10023f66
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 3
jge 0x10023f88
push dword [ebp - 0xa8]
lea ecx, [ebp - 0x638]
call fcn.10024a46
mov dword [eax], 0x3d4e7030
jmp 0x10023f59
lea eax, [ebp - 0x2e4]
push eax
lea eax, [ebp - 0x2ec]
push eax
call fcn.10021249
pop ecx
pop ecx
lea eax, [ebp - 0x2f4]
push eax
call fcn.1002146a
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x638]
call fcn.100249c2
mov eax, dword [ebp - 0x38]
cmp dword [eax + 0x10], 0
je 0x10023fcd
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x25c], eax
jmp 0x10023fd4
and dword [ebp - 0x25c], 0
mov eax, dword [ebp - 0x25c]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret