Function at 0x10069270
Capabilities:
Create pipe

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10087971
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x50c
push esi
mov dword [ebp - 0x70], 0xffffffff
mov dword [ebp - 0x24], 0xf98a59c1
push 4
lea ecx, [ebp - 0x440]
call fcn.1001ff2e
and dword [ebp - 4], 0
mov dword [ebp - 0x2a8], 0x3407
mov dword [ebp - 0x408], 0x5cec
push 3
lea ecx, [ebp - 0x458]
call fcn.1001ff2e
mov byte [ebp - 4], 1
push 0
push 0x4169
push 0x670d
lea eax, [ebp - 0x334]
push eax
push 0x6da8
push 0x1bf3
push 1
push 0x655d
lea eax, [ebp - 0x440]
push eax
push 0x6e6c
push 0x78f3
call fcn.10062427
add esp, 0x2c
push 0x3e83
lea eax, [ebp - 0x458]
push eax
push 0x16
push 0x12a9
lea eax, [ebp - 0x334]
push eax
push 0x2441
push 1
push 0x57d6
push 0x25be
push 1
call fcn.100617b3
add esp, 0x28
mov dword [ebp - 0x2a4], 0x7c0d
mov dword [ebp - 0x3f8], 0x1000f308
cmp dword [ebp - 0x2a4], 0x7fca
jle 0x100693df
and dword [ebp - 0xa8], 0
jmp 0x1006937b
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0x5543
jge 0x100693df
and dword [ebp - 0xe8], 0
jmp 0x1006939d
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0x6f64
jge 0x100693dd
mov eax, dword [ebp - 0xa8]
cdq
idiv dword [ebp - 0xe8]
mov eax, edx
cdq
mov dword [ebp - 0x390], eax
mov dword [ebp - 0x38c], edx
push dword [ebp - 0x38c]
push dword [ebp - 0x390]
mov ecx, 0x1008bbb8
call fcn.1001fc14
jmp 0x10069390
jmp 0x1006936e
cmp dword [ebp - 0x2a4], 0x78bd
jge 0x100693fb
mov edx, dword [ebp - 0x3f8]
mov ecx, 0x1008bbb8
call fcn.100228da
push 0x7997
lea eax, [ebp - 0x24]
push eax
push 0x3b2e
push 1
push 0x9d6
lea eax, [ebp - 0x70]
push eax
push 1
lea eax, [ebp - 0x440]
push eax
push 0x6418
push 0x5360
push 0x5684
push 0x2cb5
push 0x5555
push 0x8d2
push 0x3c3d
push 1
call fcn.10061c8f
add esp, 0x40
mov dword [ebp - 0x24], 0xfffffff6
jmp 0x1006945a
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xfffffffc
jne 0x1006977d
mov dword [ebp - 0x4c], 0xfffffff8
mov dword [ebp - 0x340], 0x57941993
mov dword [ebp - 0x170], 0xed293e35
mov dword [ebp - 0x3b8], 3
push 0x5938
push 0x2d8a
push 0x72b1
push 0x172b
push 1
lea eax, [ebp - 0x70]
push eax
push 1
push 0x2458
push 0xa30
push 0x70f3
push 0x7345
lea eax, [ebp - 0x24]
push eax
call fcn.100666c4
add esp, 0x30
cmp dword [ebp - 0x4c], 0
je 0x10069523
mov dword [ebp - 0x424], 0x5984
mov dword [ebp - 0x410], 0xc3b03c3f
push 1
lea eax, [ebp - 0x4c]
push eax
push 0x144f
push 0x52f8
lea eax, [ebp - 0x2a8]
push eax
lea eax, [ebp - 0x408]
push eax
push 1
lea eax, [ebp - 0x410]
push eax
push 0x1010
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x424]
push eax
call fcn.10062427
add esp, 0x2c
jmp 0x10069778
mov dword [ebp - 0x98], 0
jmp 0x1006953c
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 3
jge 0x10069558
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0x330], 1
jmp 0x1006952f
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x330], 0
jne 0x1006966b
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x330], 0
je 0x1006958e
cmp dword [ebp - 0x4c], 0
je 0x1006958e
mov dword [ebp - 0x148], 1
jmp 0x10069595
and dword [ebp - 0x148], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x330]
cmp dword [ebp - 0x148], eax
jg 0x100695b5
mov dword [ebp - 0x290], 1
jmp 0x100695bc
and dword [ebp - 0x290], 0
cmp dword [ebp - 0x290], 0xffffffff
jl 0x100695d1
mov dword [ebp - 0x114], 1
jmp 0x100695d8
and dword [ebp - 0x114], 0
push 1
lea ecx, [ebp - 0x458]
call fcn.1001ffcc
mov ecx, dword [ebp - 0x114]
mov dword [eax], ecx
push 2
lea ecx, [ebp - 0x440]
call fcn.1001ffcc
mov ecx, dword [ebp - 0x114]
cmp ecx, dword [eax]
jg 0x10069610
mov dword [ebp - 0x150], 1
jmp 0x10069617
and dword [ebp - 0x150], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x150], eax
je 0x1006962e
mov dword [ebp - 0x298], 1
jmp 0x10069635
and dword [ebp - 0x298], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x298], eax
jl 0x1006964c
mov dword [ebp - 0x158], 1
jmp 0x10069653
and dword [ebp - 0x158], 0
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
jne 0x1006966b
and dword [ebp - 0x384], 0
jmp 0x10069675
mov dword [ebp - 0x384], 1
mov eax, dword [ebp - 0x340]
mov dword [ebp - 0x484], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x24]
cmp dword [ebp + eax - 0x330], ecx
jg 0x1006969e
mov dword [ebp - 0x2a0], 1
jmp 0x100696a5
and dword [ebp - 0x2a0], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x330]
cmp dword [ebp - 0x2a0], eax
je 0x100696c5
mov dword [ebp - 0x160], 1
jmp 0x100696cc
and dword [ebp - 0x160], 0
mov eax, dword [ebp - 0x160]
sub eax, 0x1012106d
sub eax, dword [ebp - 0x4c]
jne 0x100696f3
xor eax, eax
inc eax
jne 0x100696f3
cmp dword [ebp - 0x2a8], 0
jne 0x100696f3
and dword [ebp - 0x168], 0
jmp 0x100696fd
mov dword [ebp - 0x168], 1
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x168]
add ecx, 0x2aaf
cmp dword [ebp + eax - 0x330], ecx
jg 0x1006971d
cmp dword [ebp - 0x70], 0
jne 0x1006972f
cmp dword [ebp - 0x4c], 0
je 0x1006972f
mov dword [ebp - 0x2b0], 1
jmp 0x10069736
and dword [ebp - 0x2b0], 0
mov eax, dword [ebp - 0x2b0]
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 0
jne 0x1006975d
mov eax, 0x12cb5dcf
test eax, eax
jne 0x1006975d
and dword [ebp - 0x2b8], 0
jmp 0x10069767
mov dword [ebp - 0x2b8], 1
mov eax, 0xe34f
sub eax, dword [ebp - 0x2b8]
mov dword [ebp - 0x3b8], eax
jmp 0x10069453
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x458]
call fcn.1001ffb0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x440]
call fcn.1001ffb0
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x54], 0xfffffffa
mov dword [ebp - 0x1b4], 0x8886a6c6
mov dword [ebp - 0x400], 0x33ba
mov dword [ebp - 0x110], 0
jmp 0x100697db
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 1
jge 0x100697f7
mov eax, dword [ebp - 0x110]
mov dword [ebp + eax*4 - 0x84], 0x95e1
jmp 0x100697ce
mov dword [ebp - 0x54], 0
jmp 0x10069807
mov eax, dword [ebp - 0x54]
dec eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0xffffffee
jge 0x10069bcc
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x2d0], 0x94d0e834
mov dword [ebp - 0x308], 0x32384b6d
mov dword [ebp - 0x3c4], 0xfffffffa
push 0x48e6
push 0x418f
push 0x47fd
push 0x5d70
push 1
push 1
call fcn.10066bda
add esp, 0x18
mov dword [ebp - 0x18], 0
jmp 0x10069866
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jg 0x10069bc7
mov dword [ebp - 0x178], 0x369f
mov dword [ebp - 0x348], 0x1000f320
cmp dword [ebp - 0x178], 0x36ec
jle 0x10069972
and dword [ebp - 0xa0], 0
jmp 0x100698aa
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0x4ac5
jge 0x10069972
and dword [ebp - 0x10c], 0
jmp 0x100698d0
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0x6184
jge 0x1006996d
and dword [ebp - 0x8c], 0
jmp 0x100698f6
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0x35f1
jge 0x10069968
and dword [ebp - 0xf4], 0
jmp 0x10069918
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0x2e1d
jge 0x10069966
mov eax, dword [ebp - 0xa0]
mov ecx, dword [ebp - 0x10c]
sar eax, cl
mov ecx, dword [ebp - 0x8c]
imul ecx, dword [ebp - 0xf4]
and eax, ecx
cdq
mov dword [ebp - 0x39c], eax
mov dword [ebp - 0x398], edx
push dword [ebp - 0x398]
push dword [ebp - 0x39c]
mov ecx, 0x1008bbb8
call fcn.1001fc14
jmp 0x1006990b
jmp 0x100698e9
jmp 0x100698c3
jmp 0x1006989d
mov dword [ebp - 0x6c], 0xfcb1
cmp dword [ebp - 0x178], 0x34ea
jge 0x10069995
mov edx, dword [ebp - 0x348]
mov ecx, 0x1008bbb8
call fcn.100228da
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x84]
mov dword [ebp - 0x4b4], eax
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x47c], eax
cmp dword [ebp - 0x18], 0
je 0x10069aa0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x4a4], eax
mov dword [ebp - 0x1b4], 0
mov eax, 0xb56cef3
cmp eax, 1
jle 0x100699e1
mov dword [ebp - 0x2c0], 1
jmp 0x100699e8
and dword [ebp - 0x2c0], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x84]
imul eax, dword [ebp - 0x2c0]
cmp eax, dword [ebp - 0x54]
je 0x10069a0a
mov dword [ebp - 0x180], 1
jmp 0x10069a11
and dword [ebp - 0x180], 0
cmp dword [ebp - 0x180], 0xffff
ja 0x10069a29
mov dword [ebp - 0x2c8], 1
jmp 0x10069a30
and dword [ebp - 0x2c8], 0
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x2c8], eax
jl 0x10069a47
mov dword [ebp - 0x188], 1
jmp 0x10069a4e
and dword [ebp - 0x188], 0
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x2d0], eax
cmp dword [ebp - 0x2d0], 0
jne 0x10069a6f
mov dword [ebp - 0x190], 1
jmp 0x10069a76
and dword [ebp - 0x190], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x84]
cmp dword [ebp - 0x190], eax
jle 0x10069a94
mov eax, 0x731e7bf5
test eax, eax
je 0x10069aa0
mov dword [ebp - 0x2d8], 1
jmp 0x10069aa7
and dword [ebp - 0x2d8], 0
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x2d8], eax
jg 0x10069ac1
cmp dword [ebp - 0x54], 0
jne 0x10069ac1
and dword [ebp - 0x198], 0
jmp 0x10069acb
mov dword [ebp - 0x198], 1
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x198], eax
jle 0x10069ae2
mov dword [ebp - 0x2e0], 1
jmp 0x10069ae9
and dword [ebp - 0x2e0], 0
mov eax, dword [ebp - 0x400]
cmp dword [ebp - 0x2e0], eax
jl 0x10069b03
mov dword [ebp - 0x1a0], 1
jmp 0x10069b0a
and dword [ebp - 0x1a0], 0
mov eax, dword [ebp - 0x6c]
add eax, dword [ebp - 0x1a0]
cmp eax, dword [ebp - 0x18]
jle 0x10069b24
mov dword [ebp - 0x2f8], 1
jmp 0x10069b2b
and dword [ebp - 0x2f8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x84]
cmp dword [ebp - 0x2f8], eax
jne 0x10069b4c
mov dword [ebp - 0x350], 1
jmp 0x10069b53
and dword [ebp - 0x350], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x45c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x84]
mov dword [ebp - 0x4b0], eax
cmp dword [ebp - 0x18], 0xffff
jbe 0x10069b84
mov dword [ebp - 0x1a8], 1
jmp 0x10069b8b
and dword [ebp - 0x1a8], 0
mov eax, dword [ebp - 0x1a8]
dec eax
cmp eax, dword [ebp - 0x6c]
jle 0x10069ba3
mov dword [ebp - 0x300], 1
jmp 0x10069baa
and dword [ebp - 0x300], 0
mov eax, dword [ebp - 0x300]
mov dword [ebp - 0x308], eax
mov eax, dword [ebp - 0x308]
mov dword [ebp - 0x3c4], eax
jmp 0x1006985f
jmp 0x10069800
push 1
push 0x2850
push 1
lea eax, [ebp - 0x1b4]
push eax
call fcn.10066eb2
add esp, 0x10
mov dword [ebp - 0x68], 0xfffffffa
mov dword [ebp - 0x1f4], 0x8886a6c6
mov dword [ebp - 0x360], 0x33ba
mov dword [ebp - 0x264], 0x7d0b
mov dword [ebp - 0x404], 0x1000f360
cmp dword [ebp - 0x264], 0x7d9f
jle 0x10069d32
and dword [ebp - 0xb0], 0
jmp 0x10069c39
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0x4a99
jge 0x10069d32
and dword [ebp - 0x104], 0
jmp 0x10069c5f
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0x754c
jge 0x10069d2d
and dword [ebp - 0xb8], 0
jmp 0x10069c85
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0x7d3b
jge 0x10069d28
and dword [ebp - 0xfc], 0
jmp 0x10069cab
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0x5b09
jge 0x10069d23
mov eax, dword [ebp - 0xb0]
mov ecx, dword [ebp - 0x104]
sar eax, cl
mov ecx, dword [ebp - 0xb8]
shl eax, cl
mov ecx, dword [ebp - 0xfc]
shl eax, cl
cdq
mov dword [ebp - 0x3a8], eax
mov dword [ebp - 0x3a4], edx
push dword [ebp - 0x3a4]
push dword [ebp - 0x3a8]
lea ecx, [ebp - 0x4d0]
call fcn.10010ffe
pop ecx
pop ecx
mov dword [ebp - 0x358], eax
mov ecx, dword [ebp - 0x358]
call fcn.1001fbf4
push eax
call fcn.100714f3
pop ecx
lea ecx, [ebp - 0x4d0]
call fcn.1001fbea
jmp 0x10069c9e
jmp 0x10069c78
jmp 0x10069c52
jmp 0x10069c2c
cmp dword [ebp - 0x264], 0x7cae
jge 0x10069d4a
push dword [ebp - 0x404]
call fcn.100714f3
pop ecx
mov dword [ebp - 0xc0], 0
jmp 0x10069d63
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 1
jge 0x10069d7c
mov eax, dword [ebp - 0xc0]
mov dword [ebp + eax*4 - 0x7c], 0x95e1
jmp 0x10069d56
mov dword [ebp - 0x68], 0
jmp 0x10069d8c
mov eax, dword [ebp - 0x68]
dec eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0xffffffee
jge 0x1006a042
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1cc], 0x94d0e834
mov dword [ebp - 0x2e8], 0x32384b6d
mov dword [ebp - 0x368], 0xfffffffa
mov byte [ebp - 0x39], 0
push 0x79f6
push 1
push 0x5ce6
push 1
push 0x20a
lea eax, [ebp - 0x39]
push eax
push 0x6ea
push 0x41b
push 1
push 0x7d4a
push 0x6eca
push 0x3720
call fcn.1006702c
add esp, 0x30
mov dword [ebp - 0x20], 0
jmp 0x10069e09
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jg 0x1006a03d
mov dword [ebp - 0x60], 0xfcb1
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x7c]
mov dword [ebp - 0x48c], eax
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x4ac], eax
cmp dword [ebp - 0x20], 0
je 0x10069f1c
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x494], eax
mov dword [ebp - 0x1f4], 0
mov eax, 0xb56cef3
cmp eax, 1
jle 0x10069e63
mov dword [ebp - 0x1bc], 1
jmp 0x10069e6a
and dword [ebp - 0x1bc], 0
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x7c]
imul eax, dword [ebp - 0x1bc]
cmp eax, dword [ebp - 0x68]
je 0x10069e89
mov dword [ebp - 0x2bc], 1
jmp 0x10069e90
and dword [ebp - 0x2bc], 0
cmp dword [ebp - 0x2bc], 0xffff
ja 0x10069ea8
mov dword [ebp - 0x1c4], 1
jmp 0x10069eaf
and dword [ebp - 0x1c4], 0
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0x1c4], eax
jl 0x10069ec6
mov dword [ebp - 0x26c], 1
jmp 0x10069ecd
and dword [ebp - 0x26c], 0
mov eax, dword [ebp - 0x26c]
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 0
jne 0x10069eee
mov dword [ebp - 0x2e4], 1
jmp 0x10069ef5
and dword [ebp - 0x2e4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7c]
cmp dword [ebp - 0x2e4], eax
jle 0x10069f10
mov eax, 0x731e7bf5
test eax, eax
je 0x10069f1c
mov dword [ebp - 0x1d4], 1
jmp 0x10069f23
and dword [ebp - 0x1d4], 0
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0x1d4], eax
jg 0x10069f3d
cmp dword [ebp - 0x68], 0
jne 0x10069f3d
and dword [ebp - 0x274], 0
jmp 0x10069f47
mov dword [ebp - 0x274], 1
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0x274], eax
jle 0x10069f5e
mov dword [ebp - 0x1dc], 1
jmp 0x10069f65
and dword [ebp - 0x1dc], 0
mov eax, dword [ebp - 0x360]
cmp dword [ebp - 0x1dc], eax
jl 0x10069f7f
mov dword [ebp - 0x2c4], 1
jmp 0x10069f86
and dword [ebp - 0x2c4], 0
mov eax, dword [ebp - 0x60]
add eax, dword [ebp - 0x2c4]
cmp eax, dword [ebp - 0x20]
jle 0x10069fa0
mov dword [ebp - 0x1e4], 1
jmp 0x10069fa7
and dword [ebp - 0x1e4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7c]
cmp dword [ebp - 0x1e4], eax
jne 0x10069fc5
mov dword [ebp - 0x3d0], 1
jmp 0x10069fcc
and dword [ebp - 0x3d0], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x460], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7c]
mov dword [ebp - 0x468], eax
cmp dword [ebp - 0x20], 0xffff
jbe 0x10069ffa
mov dword [ebp - 0x27c], 1
jmp 0x1006a001
and dword [ebp - 0x27c], 0
mov eax, dword [ebp - 0x27c]
dec eax
cmp eax, dword [ebp - 0x60]
jle 0x1006a019
mov dword [ebp - 0x1ec], 1
jmp 0x1006a020
and dword [ebp - 0x1ec], 0
mov eax, dword [ebp - 0x1ec]
mov dword [ebp - 0x2e8], eax
mov eax, dword [ebp - 0x2e8]
mov dword [ebp - 0x368], eax
jmp 0x10069e02
jmp 0x10069d85
lea eax, [ebp - 0x1f4]
push eax
push 0x32c6
push 1
push 1
call fcn.10067560
add esp, 0x10
mov eax, dword [ebp + 8]
mov eax, dword [eax]
push 8
pop ecx
imul ecx, ecx, 0
lea eax, [eax + ecx + 0x78]
mov dword [ebp - 0x218], eax
mov dword [ebp - 0x30], 0xba07e4fc
push 1
lea ecx, [ebp - 0x324]
call fcn.1001ff2e
mov dword [ebp - 4], 2
mov dword [ebp - 0x1fc], 4
mov dword [ebp - 0x118], 4
mov dword [ebp - 0x284], 0x6b73
mov dword [ebp - 0x414], 0x1000f3ac
cmp dword [ebp - 0x284], 0x6bc1
jle 0x1006a136
and dword [ebp - 0xec], 0
jmp 0x1006a0d4
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0x3d37
jge 0x1006a136
and dword [ebp - 0xc8], 0
jmp 0x1006a0f6
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0x59e
jge 0x1006a134
mov eax, dword [ebp - 0xec]
imul eax, dword [ebp - 0xc8]
cdq
mov dword [ebp - 0x3b4], eax
mov dword [ebp - 0x3b0], edx
push dword [ebp - 0x3b0]
push dword [ebp - 0x3b4]
mov ecx, 0x1008bbb8
call fcn.1001fc14
jmp 0x1006a0e9
jmp 0x1006a0c7
mov dword [ebp - 0x58], 0xf5f4
cmp dword [ebp - 0x284], 0x695e
jge 0x1006a159
mov edx, dword [ebp - 0x414]
mov ecx, 0x1008bbb8
call fcn.100228da
mov dword [ebp - 0x130], 0
mov dword [ebp - 0x20c], 0
mov dword [ebp - 0x214], 0xfffffff9
mov dword [ebp - 0x10], 1
mov dword [ebp - 0x128], 0xfffffffd
mov dword [ebp - 0xf0], 5
mov dword [ebp - 0x11c], 0x364fef53
push 1
push 1
push 0x56d7
push 1
lea eax, [ebp - 0x324]
push eax
lea eax, [ebp - 0x74]
push eax
call fcn.10062cb5
add esp, 0x18
mov dword [ebp - 0x74], 0
jmp 0x1006a1ca
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 3
jge 0x1006a1e0
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0x318], 0x3bd791f9
jmp 0x1006a1c3
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x470], eax
cmp dword [ebp - 0x30], 0
jne 0x1006a1fe
cmp dword [ebp - 0x30], 0
jne 0x1006a1fe
and dword [ebp - 0x138], 0
jmp 0x1006a208
mov dword [ebp - 0x138], 1
push 0
lea ecx, [ebp - 0x324]
call fcn.1001ffcc
mov ecx, dword [ebp - 0x138]
mov dword [eax], ecx
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x1fc], eax
mov eax, dword [ebp - 0x1fc]
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0xf4ea
jne 0x1006a24d
mov dword [ebp - 0x2cc], 1
jmp 0x1006a254
and dword [ebp - 0x2cc], 0
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x2cc], eax
jg 0x1006a271
cmp dword [ebp - 0x58], 0
je 0x1006a271
mov dword [ebp - 0x204], 1
jmp 0x1006a278
and dword [ebp - 0x204], 0
mov eax, dword [ebp - 0x204]
mov dword [ebp - 0x130], eax
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x478], eax
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x480], eax
mov esi, dword [ebp - 0x30]
push 0
lea ecx, [ebp - 0x324]
call fcn.1001ffcc
cmp esi, dword [eax]
jge 0x1006a2b9
mov dword [ebp - 0x28c], 1
jmp 0x1006a2c0
and dword [ebp - 0x28c], 0
mov eax, dword [ebp - 0x28c]
mov dword [ebp - 0x20c], eax
mov eax, dword [ebp - 0x20c]
imul eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x58]
jl 0x1006a2ed
mov eax, 0x9034e105
test eax, eax
jne 0x1006a2ed
and dword [ebp - 0x304], 0
jmp 0x1006a2f7
mov dword [ebp - 0x304], 1
mov eax, dword [ebp - 0x214]
cmp dword [ebp - 0x304], eax
jg 0x1006a31a
cmp dword [ebp - 0x214], 0
je 0x1006a31a
mov dword [ebp - 0x294], 1
jmp 0x1006a321
and dword [ebp - 0x294], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x294], eax
jne 0x1006a338
mov dword [ebp - 0x120], 1
jmp 0x1006a33f
and dword [ebp - 0x120], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x120]
mov dword [ebp + eax - 0x318], ecx
mov dword [ebp - 0x128], 0x4a276ac1
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x128], eax
jle 0x1006a372
mov dword [ebp - 0x21c], 1
jmp 0x1006a379
and dword [ebp - 0x21c], 0
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x21c]
jl 0x1006a390
mov dword [ebp - 0x370], 1
jmp 0x1006a397
and dword [ebp - 0x370], 0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x488], eax
mov eax, 0x5015e0c0
test eax, eax
jne 0x1006a3bb
cmp dword [ebp - 0x130], 0
jne 0x1006a3bb
and dword [ebp - 0x2d4], 0
jmp 0x1006a3c5
mov dword [ebp - 0x2d4], 1
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x2d4], eax
jne 0x1006a3df
cmp dword [ebp - 0x30], 0
jne 0x1006a3df
and dword [ebp - 0x224], 0
jmp 0x1006a3e9
mov dword [ebp - 0x224], 1
mov eax, dword [ebp - 0x224]
mov dword [ebp - 0xf0], eax
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0xf0], eax
je 0x1006a40c
mov dword [ebp - 0x29c], 1
jmp 0x1006a413
and dword [ebp - 0x29c], 0
mov eax, dword [ebp - 0x29c]
mov dword [ebp - 0x11c], eax
mov dword [ebp - 0x10], 0
jmp 0x1006a42f
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jg 0x1006a861
mov dword [ebp - 0x254], 9
mov dword [ebp - 0x380], 0x12d46fed
push 0x2e0b
push 1
push 0x621
push 1
push 0x5bc1
push 0x22ed
call fcn.10067699
add esp, 0x18
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x318], 0
jne 0x1006a4e9
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x318], 0x1e173482
jne 0x1006a496
mov dword [ebp - 0x22c], 1
jmp 0x1006a49d
and dword [ebp - 0x22c], 0
push 0
lea ecx, [ebp - 0x324]
call fcn.1001ffcc
mov eax, dword [eax]
imul eax, dword [ebp - 0x22c]
test eax, eax
jne 0x1006a4c3
mov dword [ebp - 0x2fc], 1
jmp 0x1006a4ca
and dword [ebp - 0x2fc], 0
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp + eax*4 - 0x318], 0xfff7
cmp dword [ebp - 0x2fc], eax
jg 0x1006a4e9
and dword [ebp - 0x234], 0
jmp 0x1006a4f3
mov dword [ebp - 0x234], 1
mov eax, dword [ebp - 0x11c]
cmp dword [ebp - 0x234], eax
jl 0x1006a50d
mov dword [ebp - 0x140], 1
jmp 0x1006a514
and dword [ebp - 0x140], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x318]
add eax, dword [ebp - 0x140]
mov dword [ebp - 0xf0], eax
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0xf0], eax
jg 0x1006a541
mov dword [ebp - 0x23c], 1
jmp 0x1006a548
and dword [ebp - 0x23c], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x318]
cmp dword [ebp - 0x23c], eax
jge 0x1006a566
mov dword [ebp - 0x2dc], 1
jmp 0x1006a56d
and dword [ebp - 0x2dc], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x318]
cmp dword [ebp - 0x2dc], eax
jne 0x1006a5bd
mov dword [ebp - 0x3dc], 1
cmp dword [ebp - 0x3dc], 0
je 0x1006a597
jmp 0x1006a861
push 1
lea eax, [ebp - 0x128]
push eax
push 0x67ba
push 1
push 1
lea eax, [ebp - 0x324]
push eax
call fcn.100635a9
add esp, 0x18
jmp 0x1006a85c
mov dword [ebp - 0x12c], 0xdfdc
push 3
lea ecx, [ebp - 0x434]
call fcn.1001ff2e
mov byte [ebp - 4], 3
mov dword [ebp - 0x24c], 1
mov dword [ebp - 0x3e8], 0xfffffff9
push 0x1a91
lea eax, [ebp - 0x434]
push eax
push 0x11cb
push 1
push 0x7526
push 0x6383
push 1
push 0x106f
push 1
push 0x4030
lea eax, [ebp - 0x490]
push eax
call fcn.10063872
add esp, 0x2c
mov dword [ebp - 0x244], 0x3fae
mov dword [ebp - 0x40c], 0x1000f3d8
cmp dword [ebp - 0x244], 0x3ff6
jle 0x1006a706
and dword [ebp - 0xd0], 0
jmp 0x1006a660
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0xd12
jge 0x1006a6f0
and dword [ebp - 0xf8], 0
jmp 0x1006a686
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0x2de1
jge 0x1006a6eb
mov eax, dword [ebp - 0xd0]
mov ecx, dword [ebp - 0xf8]
sar eax, cl
cdq
mov dword [ebp - 0x3c0], eax
mov dword [ebp - 0x3bc], edx
push dword [ebp - 0x3bc]
push dword [ebp - 0x3c0]
lea ecx, [ebp - 0x500]
call fcn.10010ffe
pop ecx
pop ecx
mov dword [ebp - 0x378], eax
mov ecx, dword [ebp - 0x378]
call fcn.1001fbf4
push eax
call fcn.100714f3
pop ecx
lea ecx, [ebp - 0x500]
call fcn.1001fbea
jmp 0x1006a679
jmp 0x1006a653
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateNamedPipeA]
mov byte [ebp - 0x31], 0
cmp dword [ebp - 0x244], 0x3e11
jge 0x1006a722
push dword [ebp - 0x40c]
call fcn.100714f3
pop ecx
lea eax, [ebp - 0x31]
push eax
push 0x55c3
push 1
push 0x561b
push 0x7f0
push 1
call fcn.100689e6
add esp, 0x18
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x118]
mov dword [ebp + eax*4 - 0x318], ecx
push 1
lea ecx, [ebp - 0x434]
call fcn.1001ffcc
cmp dword [eax], 0
jle 0x1006a76f
mov dword [ebp - 0x2ac], 1
jmp 0x1006a776
and dword [ebp - 0x2ac], 0
mov esi, dword [ebp - 0x12c]
push 0
lea ecx, [ebp - 0x434]
call fcn.1001ffcc
mov ecx, dword [ebp - 0x2ac]
sub ecx, dword [eax]
sub ecx, dword [ebp - 0x11c]
cmp esi, ecx
jg 0x1006a7a7
mov dword [ebp - 0x124], 1
jmp 0x1006a7ae
and dword [ebp - 0x124], 0
push 0
lea ecx, [ebp - 0x324]
call fcn.1001ffcc
mov ecx, dword [ebp - 0x124]
mov dword [eax], ecx
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0x24c], eax
mov eax, dword [ebp - 0x24c]
mov ecx, dword [ebp - 0x12c]
lea eax, [ecx + eax*2]
cmp eax, 0xffff
ja 0x1006a7f1
mov dword [ebp - 0x30c], 1
jmp 0x1006a7f8
and dword [ebp - 0x30c], 0
mov eax, dword [ebp - 0x30c]
mov dword [ebp - 0x254], eax
mov esi, dword [ebp - 0x254]
push 1
lea ecx, [ebp - 0x434]
call fcn.1001ffcc
add esi, dword [eax]
sub esi, dword [ebp - 0x12c]
mov eax, 0x19c8
sub eax, esi
cmp eax, dword [ebp - 0x380]
jge 0x1006a83a
mov dword [ebp - 0x2b4], 1
jmp 0x1006a841
and dword [ebp - 0x2b4], 0
mov eax, dword [ebp - 0x2b4]
mov dword [ebp - 0x3e8], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x434]
call fcn.1001ffb0
jmp 0x1006a428
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x324]
call fcn.1001ffb0
mov eax, dword [ebp - 0x218]
cmp dword [eax + 4], 0
jne 0x1006a887
mov eax, dword [ebp + 0x10]
and dword [eax], 0
jmp 0x1006b783
mov dword [ebp - 0x5c], 0xfffffffa
mov dword [ebp - 0x210], 0x8886a6c6
mov dword [ebp - 0x388], 0x33ba
mov dword [ebp - 0xd8], 0
jmp 0x1006a8bb
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 1
jge 0x1006a8d4
mov eax, dword [ebp - 0xd8]
mov dword [ebp + eax*4 - 0x78], 0x95e1
jmp 0x1006a8ae
mov dword [ebp - 0x5c], 0
jmp 0x1006a8e4
mov eax, dword [ebp - 0x5c]
dec eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0xffffffee
jge 0x1006ab79
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x1c0], 0x94d0e834
mov dword [ebp - 0x208], 0x32384b6d
mov dword [ebp - 0x394], 0xfffffffa
push 0x4b65
push 0x27fe
push 1
push 0x5849
push 1
push 1
call fcn.1006789c
add esp, 0x18
mov dword [ebp - 0x1c], 0
jmp 0x1006a940
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jg 0x1006ab74
mov dword [ebp - 0x64], 0xfcb1
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x78]
mov dword [ebp - 0x498], eax
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x4a0], eax
cmp dword [ebp - 0x1c], 0
je 0x1006aa53
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x4a8], eax
mov dword [ebp - 0x210], 0
mov eax, 0xb56cef3
cmp eax, 1
jle 0x1006a99a
mov dword [ebp - 0x25c], 1
jmp 0x1006a9a1
and dword [ebp - 0x25c], 0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x78]
imul eax, dword [ebp - 0x25c]
cmp eax, dword [ebp - 0x5c]
je 0x1006a9c0
mov dword [ebp - 0x1ac], 1
jmp 0x1006a9c7
and dword [ebp - 0x1ac], 0
cmp dword [ebp - 0x1ac], 0xffff
ja 0x1006a9df
mov dword [ebp - 0x1b0], 1
jmp 0x1006a9e6
and dword [ebp - 0x1b0], 0
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x1b0], eax
jl 0x1006a9fd
mov dword [ebp - 0x1b8], 1
jmp 0x1006aa04
and dword [ebp - 0x1b8], 0
mov eax, dword [ebp - 0x1b8]
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 0
jne 0x1006aa25
mov dword [ebp - 0x1c8], 1
jmp 0x1006aa2c
and dword [ebp - 0x1c8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x78]
cmp dword [ebp - 0x1c8], eax
jle 0x1006aa47
mov eax, 0x731e7bf5
test eax, eax
je 0x1006aa53
mov dword [ebp - 0x1d0], 1
jmp 0x1006aa5a
and dword [ebp - 0x1d0], 0
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x1d0], eax
jg 0x1006aa74
cmp dword [ebp - 0x5c], 0
jne 0x1006aa74
and dword [ebp - 0x1d8], 0
jmp 0x1006aa7e
mov dword [ebp - 0x1d8], 1
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x1d8], eax
jle 0x1006aa95
mov dword [ebp - 0x1e0], 1
jmp 0x1006aa9c
and dword [ebp - 0x1e0], 0
mov eax, dword [ebp - 0x388]
cmp dword [ebp - 0x1e0], eax
jl 0x1006aab6
mov dword [ebp - 0x1e8], 1
jmp 0x1006aabd
and dword [ebp - 0x1e8], 0
mov eax, dword [ebp - 0x64]
add eax, dword [ebp - 0x1e8]
cmp eax, dword [ebp - 0x1c]
jle 0x1006aad7
mov dword [ebp - 0x1f0], 1
jmp 0x1006aade
and dword [ebp - 0x1f0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x78]
cmp dword [ebp - 0x1f0], eax
jne 0x1006aafc
mov dword [ebp - 0x428], 1
jmp 0x1006ab03
and dword [ebp - 0x428], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x464], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x78]
mov dword [ebp - 0x4b8], eax
cmp dword [ebp - 0x1c], 0xffff
jbe 0x1006ab31
mov dword [ebp - 0x1f8], 1
jmp 0x1006ab38
and dword [ebp - 0x1f8], 0
mov eax, dword [ebp - 0x1f8]
dec eax
cmp eax, dword [ebp - 0x64]
jle 0x1006ab50
mov dword [ebp - 0x200], 1
jmp 0x1006ab57
and dword [ebp - 0x200], 0
mov eax, dword [ebp - 0x200]
mov dword [ebp - 0x208], eax
mov eax, dword [ebp - 0x208]
mov dword [ebp - 0x394], eax
jmp 0x1006a939
jmp 0x1006a8dd
push 0x4687
push 0x7ab2
lea eax, [ebp - 0x210]
push eax
push 1
push 1
call fcn.100641a4
add esp, 0x14
mov eax, dword [ebp - 0x218]
mov ecx, dword [ebp - 0x13c]
add ecx, dword [eax]
mov dword [ebp - 0x134], ecx
push 2
lea ecx, [ebp - 0x2f4]
call fcn.1001ff2e
mov dword [ebp - 4], 4
mov dword [ebp - 0x2c], 1
mov dword [ebp - 0x40], 8
mov dword [ebp - 0x3fc], 0x7649690b
push 1
lea eax, [ebp - 0x46c]
push eax
push 1
push 0xefb
push 0xa61
lea eax, [ebp - 0x2f4]
push eax
call fcn.10068b74
add esp, 0x18
mov dword [ebp - 0x2c], 1
jmp 0x1006ac0a
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jl 0x1006afcb
mov dword [ebp - 0x38], 0xfffffff6
mov dword [ebp - 0x220], 0x29df
mov dword [ebp - 0x3f4], 0x1000f430
cmp dword [ebp - 0x220], 0x2cf3
jle 0x1006acec
and dword [ebp - 0x108], 0
jmp 0x1006ac55
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0x729d
jge 0x1006acec
and dword [ebp - 0x100], 0
jmp 0x1006ac7b
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0x30fe
jge 0x1006ace7
and dword [ebp - 0xe0], 0
jmp 0x1006ac9d
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0x19c1
jge 0x1006ace5
mov eax, dword [ebp - 0x100]
cdq
idiv dword [ebp - 0xe0]
mov eax, dword [ebp - 0x108]
mov ecx, edx
sar eax, cl
cdq
mov dword [ebp - 0x3cc], eax
mov dword [ebp - 0x3c8], edx
push dword [ebp - 0x3c8]
push dword [ebp - 0x3cc]
mov ecx, 0x1008bbb8
call fcn.1001fc14
jmp 0x1006ac90
jmp 0x1006ac6e
jmp 0x1006ac48
cmp dword [ebp - 0x220], 0x270c
jge 0x1006ad08
mov edx, dword [ebp - 0x3f4]
mov ecx, 0x1008bbb8
call fcn.100228da
mov dword [ebp - 0x90], 0
jmp 0x1006ad21
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 3
jge 0x1006ad3d
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0x420], 0x7fe64fd9
jmp 0x1006ad14
mov dword [ebp - 0x38], 1
jmp 0x1006ad4d
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
jl 0x1006afb2
mov dword [ebp - 0x80], 0x921ded68
mov dword [ebp - 0x28], 0x33582f80
mov dword [ebp - 0x3a0], 0xfffffff9
mov dword [ebp - 0x80], 1
jmp 0x1006ad7f
mov eax, dword [ebp - 0x80]
dec eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0
jl 0x1006ade1
mov eax, dword [ebp - 0x40]
dec eax
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x28], 1
jmp 0x1006ad9c
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jl 0x1006addf
push 0x5ca5
push 0x4db5
push 1
push 0x44ca
push 0x13a8
push 0x6e7e
push 0x7e85
push 0x26ba
push 1
push 0x480b
push 1
push 0x4d78
call fcn.10067988
add esp, 0x30
jmp 0x1006ad95
jmp 0x1006ad78
mov dword [ebp - 0x28], 1
jmp 0x1006adf1
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jl 0x1006afad
mov dword [ebp - 0x268], 0x839bf5bf
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x420], 0
je 0x1006af0d
cmp dword [ebp - 0x38], 0
jne 0x1006ae91
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x2f4]
call fcn.1001ffcc
cmp dword [eax], 0
jne 0x1006ae54
mov eax, 0xbf3b8cff
test eax, eax
jne 0x1006ae54
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x420], 0
jne 0x1006ae54
and dword [ebp - 0x228], 0
jmp 0x1006ae5e
mov dword [ebp - 0x228], 1
mov eax, dword [ebp - 0x228]
mov dword [ebp - 0x3a0], eax
push 1
lea ecx, [ebp - 0x2f4]
call fcn.1001ffcc
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x420]
cmp dword [eax], ecx
je 0x1006ae91
and dword [ebp - 0x230], 0
jmp 0x1006ae9b
mov dword [ebp - 0x230], 1
mov eax, dword [ebp - 0x80]
cmp eax, dword [ebp - 0x230]
jge 0x1006aeb2
mov dword [ebp - 0x238], 1
jmp 0x1006aeb9
and dword [ebp - 0x238], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x238], eax
jg 0x1006aed0
mov dword [ebp - 0x240], 1
jmp 0x1006aed7
and dword [ebp - 0x240], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x420]
cmp dword [ebp - 0x240], eax
je 0x1006aef8
mov dword [ebp - 0x248], 1
jmp 0x1006aeff
and dword [ebp - 0x248], 0
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x2f4]
call fcn.1001ffcc
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x420], 0xa898cbdb
jae 0x1006af2c
mov dword [ebp - 0x250], 1
jmp 0x1006af33
and dword [ebp - 0x250], 0
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x2f4]
call fcn.1001ffcc
mov eax, dword [eax]
cmp eax, dword [ebp - 0x250]
jle 0x1006af57
mov dword [ebp - 0x258], 1
jmp 0x1006af5e
and dword [ebp - 0x258], 0
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x2f4]
call fcn.1001ffcc
mov ecx, dword [ebp - 0x258]
imul ecx, dword [eax]
sub ecx, dword [ebp - 0x38]
cmp ecx, 5
je 0x1006af89
mov dword [ebp - 0x260], 1
jmp 0x1006af90
and dword [ebp - 0x260], 0
mov eax, dword [ebp - 0x260]
mov dword [ebp - 0x268], eax
mov eax, dword [ebp - 0x268]
mov dword [ebp - 0x3fc], eax
jmp 0x1006adea
jmp 0x1006ad46
mov byte [ebp - 0x41], 0
push 1
lea eax, [ebp - 0x41]
push eax
push 1
call fcn.10068cdf
add esp, 0xc
jmp 0x1006ac03
mov dword [ebp - 0x40], 0
jmp 0x1006afdb
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 2
jge 0x1006b004
push 0x3fbe
push 0x7b3d
lea eax, [ebp - 0x40]
push eax
push 1
lea eax, [ebp - 0x2f4]
push eax
push 1
call fcn.100655e6
add esp, 0x18
jmp 0x1006afd4
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2f4]
call fcn.1001ffb0
mov eax, dword [ebp - 0x134]
cmp dword [eax + 0x14], 0
jne 0x1006b38f
mov dword [ebp - 0x3ac], 0x6a162c9c
mov dword [ebp - 0x280], 7
mov dword [ebp - 0x278], 0xddb74a71
mov dword [ebp - 0x50], 0x9b467bb1
mov dword [ebp - 0x288], 0x948214d2
push 0x2269
lea eax, [ebp - 0x3ac]
push eax
lea eax, [ebp - 0x50]
push eax
push 0x42d4
push 0
push 0x7e84
push 1
lea eax, [ebp - 0x280]
push eax
lea eax, [ebp - 0x278]
push eax
lea eax, [ebp - 0x288]
push eax
push 0x49a
push 0xb46
call fcn.100666c4
add esp, 0x30
mov dword [ebp - 0x144], 0x7fec
mov dword [ebp - 0x35c], 0x1000f468
cmp dword [ebp - 0x144], 0x836d
jle 0x1006b16d
push 0
push 0
call dword [sym.imp.GDI32.dll_EqualRgn]
and dword [ebp - 0xa4], 0
jmp 0x1006b0db
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0x1e30
jge 0x1006b16d
and dword [ebp - 0x94], 0
jmp 0x1006b101
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0x6fb7
jge 0x1006b168
and dword [ebp - 0x9c], 0
jmp 0x1006b123
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0xb1b
jge 0x1006b166
mov eax, dword [ebp - 0x94]
and eax, dword [ebp - 0x9c]
or eax, dword [ebp - 0xa4]
cdq
mov dword [ebp - 0x3d8], eax
mov dword [ebp - 0x3d4], edx
push dword [ebp - 0x3d4]
push dword [ebp - 0x3d8]
mov ecx, 0x1008bbb8
call fcn.1001fc14
jmp 0x1006b116
jmp 0x1006b0f4
jmp 0x1006b0ce
mov dword [ebp - 0x50], 0
jmp 0x1006b17d
mov eax, dword [ebp - 0x50]
dec eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0xfffffff6
jl 0x1006b368
mov dword [ebp - 0x344], 0x7758a8c
mov dword [ebp - 0x270], 0x2f48
mov dword [ebp - 0x33c], 0x1000f4b0
cmp dword [ebp - 0x270], 0x3098
jle 0x1006b28c
and dword [ebp - 0xbc], 0
jmp 0x1006b1cb
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0x4323
jge 0x1006b28c
and dword [ebp - 0xac], 0
jmp 0x1006b1f1
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0x7f50
jge 0x1006b287
and dword [ebp - 0xb4], 0
jmp 0x1006b217
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0x116d
jge 0x1006b282
mov ecx, dword [ebp - 0xac]
sub ecx, dword [ebp - 0xb4]
mov eax, dword [ebp - 0xbc]
shl eax, cl
cdq
mov dword [ebp - 0x3e4], eax
mov dword [ebp - 0x3e0], edx
push dword [ebp - 0x3e0]
push dword [ebp - 0x3e4]
lea ecx, [ebp - 0x4e8]
call fcn.10010ffe
pop ecx
pop ecx
mov dword [ebp - 0x338], eax
mov ecx, dword [ebp - 0x338]
call fcn.1001fbf4
push eax
call fcn.100714f3
pop ecx
lea ecx, [ebp - 0x4e8]
call fcn.1001fbea
jmp 0x1006b20a
jmp 0x1006b1e4
jmp 0x1006b1be
mov dword [ebp - 0x34c], 0
cmp dword [ebp - 0x270], 0x2de0
jge 0x1006b2ae
push dword [ebp - 0x33c]
call fcn.100714f3
pop ecx
mov dword [ebp - 0x354], 0x8cfb9963
push 3
lea ecx, [ebp - 0x44c]
call fcn.1001ff2e
mov dword [ebp - 4], 5
push 0x14e0
push 0xd3c
lea eax, [ebp - 0x49c]
push eax
push 0x773c
push 0x3166
push 0x34ff
push 0x7061
lea eax, [ebp - 0x44c]
push eax
push 1
push 1
push 0x36af
call fcn.10067d3a
add esp, 0x2c
push 0x3a2e
lea eax, [ebp - 0x344]
push eax
lea eax, [ebp - 0x34c]
push eax
lea eax, [ebp - 0x278]
push eax
lea eax, [ebp - 0x44c]
push eax
lea eax, [ebp - 0x280]
push eax
lea eax, [ebp - 0x288]
push eax
lea eax, [ebp - 0x354]
push eax
push 0x469c
push 1
push 1
lea eax, [ebp - 0x50]
push eax
call fcn.100656a0
add esp, 0x30
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x44c]
call fcn.1001ffb0
jmp 0x1006b176
cmp dword [ebp - 0x144], 0x7fb2
jge 0x1006b384
mov edx, dword [ebp - 0x35c]
mov ecx, 0x1008bbb8
call fcn.100228da
mov eax, dword [ebp + 0x10]
and dword [eax], 0
jmp 0x1006b783
mov eax, dword [ebp - 0x134]
mov ecx, dword [ebp + 0xc]
cmp ecx, dword [eax + 0x14]
jbe 0x1006b3c8
push 0x2d5f
push 1
push 0x1a08
push 1
push 0x13a1
push 0x711d
call fcn.100681da
add esp, 0x18
mov eax, dword [ebp + 0x10]
and dword [eax], 0
jmp 0x1006b783
mov dword [ebp - 0x14], 0xe76f5020
mov dword [ebp - 0x15c], 0x40ee1d45
mov dword [ebp - 0x364], 0x4333
mov dword [ebp - 0x194], 0xfffffff6
mov dword [ebp - 0x474], 0xc3da550
mov dword [ebp - 0xc4], 0
jmp 0x1006b410
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 1
jge 0x1006b42c
mov eax, dword [ebp - 0xc4]
mov dword [ebp + eax*4 - 0x88], 0xc85f
jmp 0x1006b403
mov dword [ebp - 0x14], 0
jmp 0x1006b43c
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jl 0x1006b600
mov dword [ebp - 0x48], 0
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x88]
mov dword [ebp + ecx*4 - 0x88], eax
mov dword [ebp - 0x48], 0
jmp 0x1006b471
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
jg 0x1006b5fb
mov dword [ebp - 0x19c], 0xffffffff
push 1
lea eax, [ebp - 0x19c]
push eax
push 0x4486
push 1
push 0x55b
push 0x539d
push 1
push 0x2097
push 0x4c18
call fcn.10068e58
add esp, 0x24
mov eax, dword [ebp - 0x48]
cmp dword [ebp + eax*4 - 0x88], 0x8b78
jne 0x1006b4cf
mov dword [ebp - 0x164], 1
jmp 0x1006b4d6
and dword [ebp - 0x164], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x88], 0
je 0x1006b4f8
mov eax, 0xf0442e11
test eax, eax
je 0x1006b4f8
mov dword [ebp - 0x14c], 1
jmp 0x1006b4ff
and dword [ebp - 0x14c], 0
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x14c], eax
jl 0x1006b516
mov dword [ebp - 0x154], 1
jmp 0x1006b51d
and dword [ebp - 0x154], 0
mov eax, dword [ebp - 0x154]
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 0
jne 0x1006b544
mov eax, 0xe60d
test eax, eax
jne 0x1006b544
and dword [ebp - 0x16c], 0
jmp 0x1006b54e
mov dword [ebp - 0x16c], 1
mov eax, dword [ebp - 0x164]
add eax, dword [ebp - 0x16c]
cmp eax, dword [ebp - 0x364]
jl 0x1006b56e
mov dword [ebp - 0x174], 1
jmp 0x1006b575
and dword [ebp - 0x174], 0
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x174], eax
jle 0x1006b58c
mov dword [ebp - 0x17c], 1
jmp 0x1006b593
and dword [ebp - 0x17c], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x17c], eax
jge 0x1006b5aa
mov dword [ebp - 0x184], 1
jmp 0x1006b5b1
and dword [ebp - 0x184], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x184], eax
jl 0x1006b5c8
mov dword [ebp - 0x18c], 1
jmp 0x1006b5cf
and dword [ebp - 0x18c], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x88]
mov ecx, dword [ebp - 0x18c]
sub ecx, dword [ebp - 0x14]
add eax, ecx
mov dword [ebp - 0x194], eax
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x19c], eax
jmp 0x1006b46a
jmp 0x1006b435
mov eax, dword [ebp - 0x134]
mov eax, dword [eax + 0x1c]
mov ecx, dword [ebp + 0xc]
lea eax, [eax + ecx*4 - 4]
mov dword [ebp - 0x36c], eax
mov eax, dword [ebp - 0x13c]
add eax, dword [ebp - 0x36c]
mov ecx, dword [ebp - 0x13c]
add ecx, dword [eax]
mov eax, dword [ebp + 0x10]
mov dword [eax], ecx
mov dword [ebp - 0x1a4], 0xb05
mov dword [ebp - 0x37c], 0x1000f4d0
cmp dword [ebp - 0x1a4], 0xe9d
jle 0x1006b769
and dword [ebp - 0xe4], 0
jmp 0x1006b669
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0x5ad9
jge 0x1006b75d
and dword [ebp - 0xcc], 0
jmp 0x1006b68f
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0x5838
jge 0x1006b758
and dword [ebp - 0xd4], 0
jmp 0x1006b6b5
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0x5668
jge 0x1006b753
and dword [ebp - 0xdc], 0
jmp 0x1006b6db
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0x52e0
jge 0x1006b74e
mov eax, dword [ebp - 0xcc]
mov ecx, dword [ebp - 0xd4]
sar eax, cl
mov ecx, dword [ebp - 0xdc]
sar eax, cl
and eax, dword [ebp - 0xe4]
cdq
mov dword [ebp - 0x3f0], eax
mov dword [ebp - 0x3ec], edx
push dword [ebp - 0x3ec]
push dword [ebp - 0x3f0]
lea ecx, [ebp - 0x518]
call fcn.10010ffe
pop ecx
pop ecx
mov dword [ebp - 0x374], eax
mov ecx, dword [ebp - 0x374]
call fcn.1001fbf4
push eax
call fcn.100714f3
pop ecx
lea ecx, [ebp - 0x518]
call fcn.1001fbea
jmp 0x1006b6ce
jmp 0x1006b6a8
jmp 0x1006b682
jmp 0x1006b65c
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_CopySid]
jmp 0x1006b783
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret