Function at 0x100206ad
Capabilities:
Check for software breakpoints

Disassembly:
mov ecx, dword [ebp - 0x148]
add ecx, 0xb
mov dword [ebp - 0x148], ecx
mov edx, dword [ebp + 0xc]
add edx, 0x3b2
cmp dword [ebp - 0x148], edx
ja 0x10023306
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0x13f9
ja 0x100203a3
cmp dword [ebp - 0x114], 0x13f9
je 0x10020578
mov ecx, dword [ebp - 0x114]
sub ecx, 0x12f1
mov dword [ebp - 0x114], ecx
cmp dword [ebp - 0x114], 0xfd
ja case.0x1002043a.1
mov edx, dword [ebp - 0x114]
movzx eax, byte [edx + 0x10023384]
jmp dword [eax*4 + 0x10023320]
cmp dword [ebp - 0x114], 0x4a01
ja 0x100203f2
cmp dword [ebp - 0x114], 0x4a01
je 0x100204a8
mov ecx, dword [ebp - 0x114]
sub ecx, 0x1404
mov dword [ebp - 0x114], ecx
cmp dword [ebp - 0x114], 0x63
ja case.0x1002043a.1
mov edx, dword [ebp - 0x114]
movzx eax, byte [edx + 0x100234b0]
jmp dword [eax*4 + 0x10023484]
cmp dword [ebp - 0x114], 0x4a43
ja 0x10020441
cmp dword [ebp - 0x114], 0x4a43
je 0x1002050b
mov ecx, dword [ebp - 0x114]
sub ecx, 0x4a0c
mov dword [ebp - 0x114], ecx
cmp dword [ebp - 0x114], 0x2c
ja case.0x1002043a.1
mov edx, dword [ebp - 0x114]
movzx eax, byte [edx + 0x1002352c]
jmp dword [eax*4 + 0x10023514]
cmp dword [ebp - 0x114], 0x5987
ja 0x1002047a
cmp dword [ebp - 0x114], 0x5987
je 0x100205ea
cmp dword [ebp - 0x114], 0x4a4e
je 0x100204b4
cmp dword [ebp - 0x114], 0x597c
pop ecx
add byte [eax], al
je 0x100204d3
jmp case.0x1002043a.1
mov ecx, dword [ebp - 0x114]
mov dword [ebp - 0x1ac], ecx
sub dword [ebp - 0x1ac], 0x5992
je 0x10020818
sub dword [ebp - 0x1ac], 0xb
je 0x10020716
jmp case.0x1002043a.1
push 4
mov eax, 0x10020513
jmp case.0x1002043a.1
mov dword [ebp - 0x148], 0x4a4e
jle 0x10020470
add dl, byte [eax]
js 0x10020467
add dl, byte [eax]
invalid
mov dword [ebp - 0x3d4], 0
mov edx, dword [ebp - 0x3d4]
mov dword [ebp - 0x110], edx
jmp case.0x1002043a.1
push dword [str.Rock_for_Choice]
push 5
call dword [ebp - 4]
add esp, 0x10
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret
call fcn.10007d20
ret 8
je 0x100213e2
mov eax, dword [edi]
cmp eax, ebx
jmp case.0x1002043a.1
add byte [eax], al
add esp, 8
mov eax, dword [esi + 0xc]
mov eax, dword [eax + 0x4c]
cmp eax, ebx
je case.0x10021975.71
jmp case.0x1002043a.1
je 0x10022453
mov eax, dword [edi]
cmp eax, ebx
jmp case.0x1002043a.1
push 1
jmp case.0x1002043a.1
push eax
push edi
call fcn.1002b6e0
add esp, 8
mov ecx, dword [esi + 0xc]
mov eax, dword [ecx + 0x44]
cmp eax, ebx
jmp case.0x1002043a.1
aad 0xc0
in al, 0x5e
mov cl, 0x83
les eax, [ebx + ecx*4]
dec esi
sub al, 0x3b
retf
mov edx, dword [ecx]
mov eax, dword [edx]
push 1
call eax
mov eax, dword [esi + 0xc]
mov edi, dword [ebp + 8]
cmp eax, ebx
jmp case.0x1002043a.1
mov fs, word [ebx]
scasb al, byte es:[edi]
xor ebp, dword [edx - 0x7d]
les eax, [edi + edx*2]
mov dword [edi], ebx
mov dword [edi + 4], ebx
mov dword [edi + 8], ebx
call fcn.1002e8e0
add esp, 4
mov edi, dword [esi + 8]
cmp edi, ebx
jmp case.0x1002043a.1
push eax
call fcn.10007d20
jmp case.0x1002043a.1
mov eax, dword [ebp + 8]
mov ecx, dword [ebp + 0x10]
mov dword [eax + 0xc], ecx
jmp case.0x1002043a.1
mov edi, dword [esi + 4]
cmp edi, ebx
jmp case.0x1002043a.1
mov eax, dword [edi]
cmp eax, ebx
je case.0x10021975.142
push eax
jmp case.0x1002043a.1
pop esi
lea eax, [ebx + 5]
pop ebx
mov esp, ebp
pop ebp
ret
push eax
push edi
call fcn.100057c0
add esp, 8
mov ecx, dword [esi + 0xc]
push ecx
push edi
jmp case.0x1002043a.1
dec edx
xchg ebx, ecx
aas
inc edi
mov eax, dword [ebp + 0xc]
push dword [ebp + 8]
mov ecx, esi
mov dword [ebp - 4], edi
mov dword [esi], 0x100204b4
jmp case.0x1002043a.1
push dword [str.perfekt_hole_in_one]
push 5
mov dword [ebp + 8], ecx
mov dword [ebp - 4], eax
call eax
jmp case.0x1002043a.1
jmp 0x100218b7
add cl, ch
mov ch, byte [eax + eax]
add byte [edi], cl
je 0x100210a0
invalid
jg 0x100206ac
je 0x100210a0
jmp case.0x1002043a.1
add byte [eax], al
jne 0x10021276
jmp case.0x1002043a.1
mov eax, dword [eax + 0x38]
cmp eax, ebx
je case.0x1002039c.198
jmp case.0x1002043a.1
call fcn.100107c0
add esp, 4
push esi
push edi
call fcn.1000aa60
jmp case.0x1002043a.1
add byte [ebx + 9], dl
jae 0x10020671
push ebx
or dword [esi], esp
jae 0x10020671
call fcn.10048980
jmp case.0x1002043a.1
call fcn.1004ee90
add esp, 4
push edi
mov dword [edi], ebx
mov dword [edi + 4], ebx
mov dword [edi + 8], ebx
call fcn.10052e40
jmp case.0x1002043a.1
call fcn.10002b30
mov eax, esi
jmp case.0x1002043a.1
push eax
push edi
call fcn.1000de30
add esp, 8
mov edx, dword [esi + 0xc]
mov eax, dword [edx + 0x3c]
cmp eax, ebx
jmp case.0x1002043a.1
je 0x10022c63
jmp case.0x1002043a.1
je 0x100217d9
push eax
call fcn.10048070
jmp case.0x1002043a.1
mov edx, dword [ebp + 8]
cmp dword [edx], 0x63
jne 0x10020735
mov dword [ebp - 0x10c], 3
mov eax, dword [ebp - 0x10c]
jmp 0x1002330c
mov dword [ebp - 0x10c], 2
mov eax, dword [ebp - 0x10c]
jmp 0x1002330c
push eax
jmp case.0x1002043a.1
jmp 0x10022fe4
add esp, 4
push edi
mov dword [edi], ebx
mov dword [edi + 4], ebx
mov dword [edi + 8], ebx
call fcn.1002dac0
add esp, 4
mov ecx, dword [esi + 0x10]
cmp ecx, ebx
jmp case.0x1002043a.1
call fcn.1004fab0
add esp, 8
mov eax, dword [esi + 0x30]
cmp eax, ebx
je 0x1002050b
jmp case.0x1002043a.1
call fcn.10034f90
mov esi, ecx
mov dword [ebp - 0x10], esi
xor edi, edi
push edi
push 2
call fcn.100451a0
jmp case.0x1002043a.1
mov dword [esi + 0x44], edi
mov dword [esi + 0x4c], edi
mov dword [esi + 0x54], edi
mov dword [esi + 0x5c], edi
mov dword [esi + 0x60], eax
jmp case.0x1002043a.1
je 0x10021750
push eax
push edi
call fcn.10051f20
jmp case.0x1002043a.1
je case.0x10020c50.237
jmp case.0x1002043a.1
je 0x10020f59
jmp case.0x1002043a.1
mov dword [esi + 0x24], edi
mov dword [esi + 0x28], edi
mov dword [esi + 0x2c], edi
mov dword [esi + 0x34], edi
mov dword [esi + 0x3c], edi
jmp case.0x1002043a.1
mov edi, dword [esi + 0x14]
add esp, 8
cmp edi, ebx
jmp case.0x1002043a.1
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xc]
movsx edx, byte [ecx]
test edx, edx
je 0x100232d9
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov dword [ebp - 0x2a0], ecx
cmp dword [ebp - 0x2a0], 0x63
ja case.0x1002084e.10
mov edx, dword [ebp - 0x2a0]
movzx eax, byte [edx + 0x1002358c]
jmp dword [eax*4 + 0x1002355c]
mov ecx, dword [ebp + 8]
add ecx, 0x14
push ecx
push 0x6591
mov edx, dword [ebp + 8]
add edx, 0xc
push edx
mov eax, dword [ebp + 8]
add eax, 4
push eax
mov ecx, dword [ebp + 0x10]
push ecx
mov edx, dword [ebp + 8]
add edx, 8
push edx
call fcn.10023df0
add esp, 0x18
mov dword [ebp - 0x2cc], eax
mov eax, dword [ebp - 0x2cc]
mov dword [ebp - 0x2d0], eax
mov ecx, dword [ebp - 0x2d0]
mov dword [ebp - 0x14c], ecx
sub dword [ebp - 0x14c], 1
je 0x100208c7
sub dword [ebp - 0x14c], 4
je 0x100208b4
jmp 0x10020921
mov edx, dword [ebp + 8]
mov dword [edx], 1
jmp 0x1002099d
mov dword [ebp - 0x258], 0x4746
jmp 0x100208e2
mov eax, dword [ebp - 0x258]
add eax, 0x28
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 0x4746
ja 0x10020921
mov ecx, dword [ebp - 0x258]
mov dword [ebp - 0x2d4], ecx
cmp dword [ebp - 0x2d4], 0x4746
je 0x10020908
jmp 0x1002091f
mov dword [ebp - 0x10c], 4
mov eax, dword [ebp - 0x10c]
jmp 0x1002330c
jmp 0x100208d3
mov dword [ebp - 0x1e0], 0x6530
jmp 0x1002093c
mov edx, dword [ebp - 0x1e0]
add edx, 0x57
mov dword [ebp - 0x1e0], edx
cmp dword [ebp - 0x1e0], 0x65de
ja 0x1002099d
mov eax, dword [ebp - 0x1e0]
mov dword [ebp - 0x2d8], eax
mov ecx, dword [ebp - 0x2d8]
mov dword [ebp - 0x118], ecx
sub dword [ebp - 0x118], 0x6530
je 0x10020980
sub dword [ebp - 0x118], 0x57
je 0x1002098c
sub dword [ebp - 0x118], 0x57
je 0x10020997
jmp 0x1002099b
mov dword [ebp - 0x10c], 4
jmp 0x1002099b
mov eax, dword [ebp - 0x10c]
jmp 0x1002330c
jmp 0x1002099d
jmp 0x1002092d
jmp 0x100232ca
mov edx, dword [ebp + 8]
cmp dword [edx + 0x18], 0
jne 0x100209fe
push 0x2a6f
call fcn.1001ef70
add esp, 4
mov dword [ebp - 0x2dc], eax
mov eax, dword [ebp - 0x2dc]
mov dword [ebp - 0x2a4], eax
mov ecx, dword [ebp + 8]
mov edx, dword [ebp - 0x2a4]
mov dword [ecx + 0x18], edx
cmp dword [ebp - 0x2a4], 0
jne 0x100209f9
mov dword [ebp - 0x10c], 6
mov eax, dword [ebp - 0x10c]
jmp 0x1002330c
jmp 0x10020b04
mov dword [ebp - 0x1e4], 0x57c0
jmp 0x10020a19
mov eax, dword [ebp - 0x1e4]
add eax, 0x61
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 0x5882
ja 0x10020b04
mov ecx, dword [ebp - 0x1e4]
mov dword [ebp - 0x2e0], ecx
mov edx, dword [ebp - 0x2e0]
mov dword [ebp - 0x150], edx
sub dword [ebp - 0x150], 0x5821
je 0x10020a5f
sub dword [ebp - 0x150], 0x61
je 0x10020af5
jmp 0x10020aff
push 0x2a6f
call fcn.1001ef70
add esp, 4
mov dword [ebp - 0x2e4], eax
mov eax, dword [ebp - 0x2e4]
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0
jne 0x10020a9c
mov dword [ebp - 0x10c], 6
mov eax, dword [ebp - 0x10c]
jmp 0x1002330c
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x2e8], edx
mov eax, dword [ebp - 0x110]
push eax
mov ecx, dword [ebp - 0x2e8]
push ecx
push 0x5c9c
call fcn.10032220
add esp, 0xc
mov dword [ebp - 0x2ec], eax
cmp dword [ebp - 0x2ec], 1
je 0x10020ae7
mov dword [ebp - 0x10c], 0xa
mov eax, dword [ebp - 0x10c]
jmp 0x1002330c
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 0x110]
mov dword [edx + 0x18], eax
jmp 0x10020aff
mov dword [ebp - 0x110], 0
jmp 0x10020a0a
mov ecx, dword [ebp + 8]
mov dword [ecx], 2
jmp 0x100232ca
mov dword [ebp - 0x1c4], 0x5343
jmp 0x10020b32
mov edx, dword [ebp - 0x1c4]
add edx, 0x3a
mov dword [ebp - 0x1c4], edx
cmp dword [ebp - 0x1c4], 0x537d
ja 0x10020fc2
mov eax, dword [ebp - 0x1c4]
mov dword [ebp - 0x2f0], eax
mov ecx, dword [ebp - 0x2f0]
mov dword [ebp - 0x154], ecx
sub dword [ebp - 0x154], 0x5343
je 0x10020b83
sub dword [ebp - 0x154], 0x3a
je 0x10020b74
jmp 0x10020fbd
mov dword [ebp - 0x1c4], 0x537d
jmp 0x10020fbd
mov edx, dword [ebp + 8]
add edx, 0x14
push edx
push 0x6591
mov eax, dword [ebp + 8]
add eax, 0xc
push eax
mov ecx, dword [ebp + 8]
add ecx, 4
push ecx
mov edx, dword [ebp + 0x10]
push edx
mov eax, dword [ebp + 8]
add eax, 8
push eax
call fcn.10023df0
add esp, 0x18
mov dword [ebp - 0x2f4], eax
mov ecx, dword [ebp - 0x2f4]
mov dword [ebp - 0x29c], ecx
cmp dword [ebp - 0x29c], 0
je 0x10020eee
cmp dword [ebp - 0x29c], 6
je 0x10020d68
cmp dword [ebp - 0x29c], 0xb
je 0x10020bea
jmp 0x10020f60
mov dword [ebp - 0x1e8], 0x2a56
jmp 0x10020c05
mov edx, dword [ebp - 0x1e8]
add edx, 0x4f
mov dword [ebp - 0x1e8], edx
cmp dword [ebp - 0x1e8], 0x2b43
ja 0x10020d68
mov eax, dword [ebp - 0x1e8]
mov dword [ebp - 0x1ec], eax
mov ecx, dword [ebp - 0x1ec]
sub ecx, 0x2a56
mov dword [ebp - 0x1ec], ecx
cmp dword [ebp - 0x1ec], 0xed
ja case.0x10020c50.1
mov edx, dword [ebp - 0x1ec]
movzx eax, byte [edx + 0x10023604]
jmp dword [eax*4 + 0x100235f0]
jmp 0x10020b74
mov ecx, dword [ebp + 8]
mov edx, dword [ebp - 0x110]
mov dword [ecx + 0x18], edx
mov dword [ebp - 0x110], 0
mov eax, dword [ebp + 8]
mov dword [eax], 5
jmp case.0x10020c50.1
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x2f8], edx
push 0x6750
mov eax, dword [ebp - 0x2f8]
push eax
push 0
push 0
call fcn.100391c0
add esp, 0x10
mov dword [ebp - 0x2fc], eax
mov ecx, dword [ebp - 0x110]
mov edx, dword [ebp - 0x2fc]
mov dword [ecx + 4], edx
mov eax, dword [ebp + 8]
mov dword [eax + 8], 0
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x300], edx
mov eax, dword [ebp - 0x110]
push eax
mov ecx, dword [ebp - 0x300]
push ecx
push 0x5c9c
call fcn.10032220
add esp, 0xc
mov dword [ebp - 0x304], eax
cmp dword [ebp - 0x304], 1
je 0x10020d13
mov dword [ebp - 0x10c], 0xa
mov eax, dword [ebp - 0x10c]
jmp 0x1002330c
jmp case.0x10020c50.1
mov dword [ebp - 0x308], 0
push 0x5efb
lea edx, [ebp - 0x308]
push edx
call fcn.1002e8e0
add esp, 8
mov dword [ebp - 0x30c], eax
mov eax, dword [ebp - 0x30c]
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0
jne case.0x10020c50.1
mov dword [ebp - 0x10c], 6
mov eax, dword [ebp - 0x10c]
jmp 0x1002330c
jmp 0x10020bf6
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x18]
cmp dword [edx + 0x10], 0
jne 0x10020d82
mov eax, dword [ebp + 8]
mov dword [eax], 0x63
jmp 0x10020ee9
mov dword [ebp - 0x1b0], 0x1bf4
jmp 0x10020d9d
mov ecx, dword [ebp - 0x1b0]
add ecx, 0x13
mov dword [ebp - 0x1b0], ecx
cmp dword [ebp - 0x1b0], 0x1c07
ja 0x10020ee9
mov edx, dword [ebp - 0x1b0]
mov dword [ebp - 0x310], edx
mov eax, dword [ebp - 0x310]
mov dword [ebp - 0x158], eax
sub dword [ebp - 0x158], 0x1bf4
je 0x10020de3
sub dword [ebp - 0x158], 0x13
je 0x10020eda
jmp 0x10020ee4
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x18]
mov eax, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
mov dword [eax + 0x18], ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x18]
mov ecx, dword [eax]
mov dword [ebp - 0x2a8], ecx
cmp dword [ebp - 0x2a8], 0
je 0x10020e1b
cmp dword [ebp - 0x2a8], 3
je 0x10020eb6
jmp 0x10020ec3
mov dword [ebp - 0x1f0], 0x4f3a
jmp 0x10020e36
mov edx, dword [ebp - 0x1f0]
add edx, 0x11
mov dword [ebp - 0x1f0], edx
cmp dword [ebp - 0x1f0], 0x4f4b
ja 0x10020eb6
mov eax, dword [ebp - 0x1f0]
mov dword [ebp - 0x314], eax
mov ecx, dword [ebp - 0x314]
mov dword [ebp - 0x15c], ecx
sub dword [ebp - 0x15c], 0x4f3a
je 0x10020e71
sub dword [ebp - 0x15c], 0x11
je 0x10020e82
jmp 0x10020eb1
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x18]
mov ecx, dword [ebp + 8]
mov edx, dword [eax + 0x10]
mov dword [ecx + 0x18], edx
jmp 0x10020eb1
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x18]
cmp dword [ecx], 2
je 0x10020ea4
mov dword [ebp - 0x10c], 8
mov eax, dword [ebp - 0x10c]
jmp 0x1002330c
mov edx, dword [ebp + 8]
mov dword [edx], 3
jmp 0x10020eda
jmp 0x10020e27
mov eax, dword [ebp + 8]
mov dword [eax], 9
jmp 0x10020eda
mov dword [ebp - 0x10c], 8
mov eax, dword [ebp - 0x10c]
jmp 0x1002330c
mov dword [ebp - 0x1b0], 0x1c07
jmp 0x10020d8e
jmp 0x10020b74
mov dword [ebp - 0x1f4], 0x278f
jmp 0x10020f09
mov ecx, dword [ebp - 0x1f4]
add ecx, 0x48
mov dword [ebp - 0x1f4], ecx
cmp dword [ebp - 0x1f4], 0x27d7
ja 0x10020f60
mov edx, dword [ebp - 0x1f4]
mov dword [ebp - 0x318], edx
mov eax, dword [ebp - 0x318]
mov dword [ebp - 0x160], eax
sub dword [ebp - 0x160], 0x278f
je 0x10020f44
sub dword [ebp - 0x160], 0x48
je 0x10020f59
jmp 0x10020f5e
mov dword [ebp - 0x10c], 2
mov eax, dword [ebp - 0x10c]
jmp 0x1002330c
jmp 0x10020b74
jmp 0x10020efa
mov dword [ebp - 0x1f8], 0x41f2
jmp 0x10020f7b
mov ecx, dword [ebp - 0x1f8]
add ecx, 0x41
mov dword [ebp - 0x1f8], ecx
cmp dword [ebp - 0x1f8], 0x41f2
ja 0x10020fbd
mov edx, dword [ebp - 0x1f8]
mov dword [ebp - 0x31c], edx
cmp dword [ebp - 0x31c], 0x41f2
je 0x10020fa1
jmp 0x10020fbb
mov dword [ebp - 0x10c], 4
mov eax, dword [ebp - 0x10c]
jmp 0x1002330c
jmp 0x10020f6c
jmp 0x10020b23
jmp 0x100232ca
mov dword [ebp - 0x1b4], 0x2d05
jmp 0x10020fe7
mov eax, dword [ebp - 0x1b4]
add eax, 4
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 0x2d11
ja 0x100212f4
mov ecx, dword [ebp - 0x1b4]
mov dword [ebp - 0x320], ecx
mov edx, dword [ebp - 0x320]
mov dword [ebp - 0x164], edx
sub dword [ebp - 0x164], 0x2d0d
je 0x1002103d
sub dword [ebp - 0x164], 4
je 0x10021029
jmp 0x100212ef
mov dword [ebp - 0x1b4], 0x2d11
jmp 0x100212ef
mov eax, dword [ebp + 8]
add eax, 0x14
push eax
push 0x6591
mov ecx, dword [ebp + 8]
add ecx, 0xc
push ecx
mov edx, dword [ebp + 8]
add edx, 4
push edx
mov eax, dword [ebp + 0x10]
push eax
mov ecx, dword [ebp + 8]
add ecx, 8
push ecx
call fcn.10023df0
add esp, 0x18
mov dword [ebp - 0x324], eax
mov edx, dword [ebp - 0x324]
mov dword [ebp - 0x298], edx
cmp dword [ebp - 0x298], 0
je 0x10021235
cmp dword [ebp - 0x298], 6
je 0x100210ae
cmp dword [ebp - 0x298], 0xa
je 0x100210a0
jmp 0x10021292
mov eax, dword [ebp + 8]
mov dword [eax], 4
jmp 0x10021029
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x18]
cmp dword [edx + 0x10], 0
jne 0x100210c8
mov eax, dword [ebp + 8]
mov dword [eax], 0x63
jmp 0x10021230
mov dword [ebp - 0x1b8], 0x7164
jmp 0x100210e3
mov ecx, dword [ebp - 0x1b8]
add ecx, 0x55
mov dword [ebp - 0x1b8], ecx
cmp dword [ebp - 0x1b8], 0x71b9
ja 0x10021230
mov edx, dword [ebp - 0x1b8]
mov dword [ebp - 0x328], edx
mov eax, dword [ebp - 0x328]
mov dword [ebp - 0x168], eax
sub dword [ebp - 0x168], 0x7164
je 0x10021134
sub dword [ebp - 0x168], 0x55
je 0x10021125
jmp 0x1002122b
mov dword [ebp - 0x1b8], 0x71b9
jmp 0x1002122b
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x18]
mov eax, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
mov dword [eax + 0x18], ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x18]
mov ecx, dword [eax]
mov dword [ebp - 0x2ac], ecx
cmp dword [ebp - 0x2ac], 0
je 0x1002116c
cmp dword [ebp - 0x2ac], 3
je 0x10021208
jmp 0x10021216
mov dword [ebp - 0x1fc], 0x78db
jmp 0x10021187
mov edx, dword [ebp - 0x1fc]
add edx, 0x22
mov dword [ebp - 0x1fc], edx
cmp dword [ebp - 0x1fc], 0x78fd
ja 0x10021208
mov eax, dword [ebp - 0x1fc]
mov dword [ebp - 0x32c], eax
mov ecx, dword [ebp - 0x32c]
mov dword [ebp - 0x16c], ecx
sub dword [ebp - 0x16c], 0x78db
je 0x100211c2
sub dword [ebp - 0x16c], 0x22
je 0x100211fe
jmp 0x10021203
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x18]
mov ecx, dword [ebp + 8]
mov edx, dword [eax + 0x10]
mov dword [ecx + 0x18], edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x18]
cmp dword [ecx], 2
je 0x100211f3
mov dword [ebp - 0x10c], 8
mov eax, dword [ebp - 0x10c]
jmp 0x1002330c
mov edx, dword [ebp + 8]
mov dword [edx], 3
jmp 0x10021203
jmp 0x10021125
jmp 0x10021178
mov eax, dword [ebp + 8]
mov dword [eax], 9
jmp 0x10021125
mov dword [ebp - 0x10c], 8
mov eax, dword [ebp - 0x10c]
jmp 0x1002330c
jmp 0x100210d4
jmp 0x10021029
mov dword [ebp - 0x200], 0x48b
jmp 0x10021250
mov ecx, dword [ebp - 0x200]
add ecx, 0x3c
mov dword [ebp - 0x200], ecx
cmp dword [ebp - 0x200], 0x48b
ja 0x10021292
mov edx, dword [ebp - 0x200]
mov dword [ebp - 0x330], edx
cmp dword [ebp - 0x330], 0x48b
je 0x10021276
jmp 0x10021290
mov dword [ebp - 0x10c], 2
mov eax, dword [ebp - 0x10c]
jmp 0x1002330c
jmp 0x10021241
mov dword [ebp - 0x204], 0x8e9
jmp 0x100212ad
mov eax, dword [ebp - 0x204]
add eax, 0x2b
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 0x8e9
ja 0x100212ef
mov ecx, dword [ebp - 0x204]
mov dword [ebp - 0x334], ecx
cmp dword [ebp - 0x334], 0x8e9
je 0x100212d3
jmp 0x100212ed
mov dword [ebp - 0x10c], 4
mov eax, dword [ebp - 0x10c]
jmp 0x1002330c
jmp 0x1002129e
jmp 0x10020fd8
jmp 0x100232ca
mov dword [ebp - 0x1bc], 0x7587
jmp 0x10021319
mov edx, dword [ebp - 0x1bc]
add edx, 0x3e
mov dword [ebp - 0x1bc], edx
cmp dword [ebp - 0x1bc], 0x7603
ja 0x100216a8
mov eax, dword [ebp - 0x1bc]
mov dword [ebp - 0x338], eax
mov ecx, dword [ebp - 0x338]
mov dword [ebp - 0x170], ecx
sub dword [ebp - 0x170], 0x75c5
je 0x1002136f
sub dword [ebp - 0x170], 0x3e
je 0x1002135b
jmp 0x100216a3
mov dword [ebp - 0x1bc], 0x7603
jmp 0x100216a3
mov edx, dword [ebp + 8]
add edx, 0x14
push edx
push 0x6591
mov eax, dword [ebp + 8]
add eax, 0xc
push eax
mov ecx, dword [ebp + 8]
add ecx, 4
push ecx
mov edx, dword [ebp + 0x10]
push edx
mov eax, dword [ebp + 8]
add eax, 8
push eax
call fcn.10023df0
add esp, 0x18
mov dword [ebp - 0x33c], eax
mov ecx, dword [ebp - 0x33c]
mov dword [ebp - 0x340], ecx
mov edx, dword [ebp - 0x340]
mov dword [ebp - 0x11c], edx
cmp dword [ebp - 0x11c], 0
je 0x10021560
sub dword [ebp - 0x11c], 1
je 0x100215bd
sub dword [ebp - 0x11c], 0xa
je 0x100213e2
jmp 0x1002162f
mov dword [ebp - 0x208], 0x1fb4
jmp 0x100213fd
mov eax, dword [ebp - 0x208]
add eax, 0x4d
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 0x209b
ja 0x10021560
mov ecx, dword [ebp - 0x208]
mov dword [ebp - 0x20c], ecx
mov edx, dword [ebp - 0x20c]
sub edx, 0x1fb4
mov dword [ebp - 0x20c], edx
cmp dword [ebp - 0x20c], 0xe7
ja case.0x10021448.1
mov eax, dword [ebp - 0x20c]
movzx ecx, byte [eax + 0x10023708]
jmp dword [ecx*4 + 0x100236f4]
mov edx, dword [ebp + 8]
mov dword [edx], 5
jmp 0x1002135b
mov dword [ebp - 0x110], 0
jmp case.0x10021448.1
mov dword [ebp - 0x344], 0
push 0x5efb
lea eax, [ebp - 0x344]
push eax
call fcn.1002e8e0
add esp, 8
mov dword [ebp - 0x348], eax
mov ecx, dword [ebp - 0x348]
mov dword [ebp - 0x110], ecx
cmp dword [ebp - 0x110], 0
jne 0x100214bf
mov dword [ebp - 0x10c], 6
mov eax, dword [ebp - 0x10c]
jmp 0x1002330c
mov edx, dword [ebp + 8]
mov eax, dword [edx + 8]
mov dword [ebp - 0x34c], eax
push 0x6750
mov ecx, dword [ebp - 0x34c]
push ecx
push 0
push 0
call fcn.100391c0
add esp, 0x10
mov dword [ebp - 0x350], eax
mov edx, dword [ebp - 0x110]
mov eax, dword [ebp - 0x350]
mov dword [edx + 4], eax
mov ecx, dword [ebp + 8]
mov dword [ecx + 8], 0
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x18]
mov dword [ebp - 0x354], eax
mov ecx, dword [ebp - 0x110]
push ecx
mov edx, dword [ebp - 0x354]
push edx
push 0x5c9c
call fcn.10032220
add esp, 0xc
mov dword [ebp - 0x358], eax
cmp dword [ebp - 0x358], 1
je 0x1002154d
mov dword [ebp - 0x10c], 0xa
mov eax, dword [ebp - 0x10c]
jmp 0x1002330c
jmp case.0x10021448.1
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x110]
mov dword [eax + 0x18], ecx
jmp 0x100213ee
mov dword [ebp - 0x210], 0x12b4
jmp 0x1002157b
mov edx, dword [ebp - 0x210]
add edx, 0x17
mov dword [ebp - 0x210], edx
cmp dword [ebp - 0x210], 0x12b4
ja 0x100215bd
mov eax, dword [ebp - 0x210]
mov dword [ebp - 0x35c], eax
cmp dword [ebp - 0x35c], 0x12b4
je 0x100215a1
jmp 0x100215bb
mov dword [ebp - 0x10c], 2
mov eax, dword [ebp - 0x10c]
jmp 0x1002330c
jmp 0x1002156c
mov dword [ebp - 0x214], 0x7926
jmp 0x100215d8
mov ecx, dword [ebp - 0x214]
add ecx, 0x63
mov dword [ebp - 0x214], ecx
cmp dword [ebp - 0x214], 0x7989
ja 0x1002162f
mov edx, dword [ebp - 0x214]
mov dword [ebp - 0x360], edx
mov eax, dword [ebp - 0x360]
mov dword [ebp - 0x174], eax
sub dword [ebp - 0x174], 0x7926
je 0x10021613
sub dword [ebp - 0x174], 0x63
je 0x10021628
jmp 0x1002162d
mov dword [ebp - 0x10c], 7
mov eax, dword [ebp - 0x10c]
jmp 0x1002330c
jmp 0x1002135b
jmp 0x100215c9
mov dword [ebp - 0x218], 0x7316
jmp 0x1002164a
mov ecx, dword [ebp - 0x218]
add ecx, 7
mov dword [ebp - 0x218], ecx
cmp dword [ebp - 0x218], 0x731d
ja 0x100216a3
mov edx, dword [ebp - 0x218]
mov dword [ebp - 0x364], edx
mov eax, dword [ebp - 0x364]
mov dword [ebp - 0x178], eax
sub dword [ebp - 0x178], 0x7316
je 0x1002168c
sub dword [ebp - 0x178], 7
je 0x10021685
jmp 0x100216a1
jmp 0x1002135b
mov dword [ebp - 0x10c], 4
mov eax, dword [ebp - 0x10c]
jmp 0x1002330c
jmp 0x1002163b
jmp 0x1002130a
jmp 0x100232ca
mov dword [ebp - 0x1c0], 0x6ba
jmp 0x100216cd
mov ecx, dword [ebp - 0x1c0]
add ecx, 0x60
mov dword [ebp - 0x1c0], ecx
cmp dword [ebp - 0x1c0], 0x71a
ja 0x10021865
mov edx, dword [ebp - 0x1c0]
mov dword [ebp - 0x368], edx
cmp dword [ebp - 0x368], 0x71a
je 0x100216fa
jmp 0x10021860
mov eax, dword [ebp + 8]
add eax, 0x14
push eax
push 0x6591
mov ecx, dword [ebp + 8]
add ecx, 0xc
push ecx
mov edx, dword [ebp + 8]
add edx, 4
push edx
mov eax, dword [ebp + 0x10]
push eax
mov ecx, dword [ebp + 8]
add ecx, 8
push ecx
call fcn.10023df0
add esp, 0x18
mov dword [ebp - 0x36c], eax
mov edx, dword [ebp - 0x36c]
mov dword [ebp - 0x2b0], edx
cmp dword [ebp - 0x2b0], 0
je 0x10021763
cmp dword [ebp - 0x2b0], 9
je 0x10021750
jmp 0x100217e5
mov eax, dword [ebp + 8]
mov dword [eax], 6
jmp 0x10021856
mov dword [ebp - 0x21c], 0x2b7a
jmp 0x1002177e
mov ecx, dword [ebp - 0x21c]
add ecx, 6
mov dword [ebp - 0x21c], ecx
cmp dword [ebp - 0x21c], 0x2b86
ja 0x100217e5
mov edx, dword [ebp - 0x21c]
mov dword [ebp - 0x370], edx
mov eax, dword [ebp - 0x370]
mov dword [ebp - 0x120], eax
sub dword [ebp - 0x120], 0x2b7a
je 0x100217d9
sub dword [ebp - 0x120], 6
je 0x100217ce
sub dword [ebp - 0x120], 6
je 0x100217c2
jmp 0x100217e3
jmp 0x10021856
mov eax, dword [ebp - 0x10c]
jmp 0x1002330c
mov dword [ebp - 0x10c], 2
jmp 0x1002176f
mov dword [ebp - 0x220], 0x5772
jmp 0x10021800
mov ecx, dword [ebp - 0x220]
add ecx, 0x32
mov dword [ebp - 0x220], ecx
cmp dword [ebp - 0x220], 0x57a4
ja 0x10021856
mov edx, dword [ebp - 0x220]
mov dword [ebp - 0x374], edx
mov eax, dword [ebp - 0x374]
mov dword [ebp - 0x17c], eax
sub dword [ebp - 0x17c], 0x5772
je 0x1002183b
sub dword [ebp - 0x17c], 0x32
je 0x10021850
jmp 0x10021854
mov dword [ebp - 0x10c], 4
mov eax, dword [ebp - 0x10c]
jmp 0x1002330c
jmp 0x10021856
jmp 0x100217f1
mov dword [ebp - 0x1c0], 0x71a
jmp 0x100216be
jmp 0x100232ca
mov dword [ebp - 0x1dc], 0x31d7
jmp 0x1002188a
mov ecx, dword [ebp - 0x1dc]
add ecx, 0x63
mov dword [ebp - 0x1dc], ecx
cmp dword [ebp - 0x1dc], 0x323a
ja 0x1002226a
mov edx, dword [ebp - 0x1dc]
mov dword [ebp - 0x378], edx
cmp dword [ebp - 0x378], 0x323a
je 0x100218b7
jmp 0x10022265
mov eax, dword [ebp + 8]
add eax, 0x14
push eax
push 0x6591
mov ecx, dword [ebp + 8]
add ecx, 0xc
push ecx
mov edx, dword [ebp + 8]
add edx, 4
push edx
mov eax, dword [ebp + 0x10]
push eax
mov ecx, dword [ebp + 8]
add ecx, 8
push ecx
call fcn.10023df0
add esp, 0x18
mov dword [ebp - 0x37c], eax
mov edx, dword [ebp - 0x37c]
mov dword [ebp - 0x2b4], edx
cmp dword [ebp - 0x2b4], 0xe
ja case.0x10021909.6
mov eax, dword [ebp - 0x2b4]
jmp dword [eax*4 + 0x100237f0]
mov dword [ebp - 0x224], 0x3333
jmp 0x1002192b
mov ecx, dword [ebp - 0x224]
add ecx, 0x47
mov dword [ebp - 0x224], ecx
cmp dword [ebp - 0x224], 0x3408
ja case.0x10021909.12
mov edx, dword [ebp - 0x224]
mov dword [ebp - 0x228], edx
mov eax, dword [ebp - 0x228]
sub eax, 0x3333
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 0xd5
ja case.0x10021975.1
mov ecx, dword [ebp - 0x228]
movzx edx, byte [ecx + 0x10023840]
jmp dword [edx*4 + 0x1002382c]
mov dword [ebp - 0x380], 0
push 0x5efb
lea eax, [ebp - 0x380]
push eax
call fcn.1002e8e0
add esp, 8
mov dword [ebp - 0x384], eax
mov ecx, dword [ebp - 0x384]
mov dword [ebp - 0x110], ecx
cmp dword [ebp - 0x110], 0
jne 0x100219ca
mov dword [ebp - 0x10c], 6
mov eax, dword [ebp - 0x10c]
jmp 0x1002330c
mov edx, dword [ebp + 8]
mov eax, dword [edx + 8]
mov dword [ebp - 0x388], eax
push 0x6750
mov ecx, dword [ebp - 0x388]
push ecx
push 0
push 0
call fcn.100391c0
add esp, 0x10
mov dword [ebp - 0x38c], eax
mov edx, dword [ebp - 0x110]
mov eax, dword [ebp - 0x38c]
mov dword [edx + 4], eax
mov ecx, dword [ebp + 8]
mov dword [ecx + 8], 0
jmp case.0x10021975.1
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x18]
cmp dword [eax + 0x10], 0
jne 0x10021a29
mov ecx, dword [ebp + 8]
mov dword [ecx], 0x63
jmp 0x10021a38
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x18]
mov ecx, dword [ebp + 8]
mov edx, dword [eax + 0x10]
mov dword [ecx + 0x18], edx
mov dword [ebp - 0x110], 0
jmp case.0x10021975.1
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x390], ecx
mov edx, dword [ebp - 0x110]
push edx
mov eax, dword [ebp - 0x390]
push eax
push 0x5c9c
call fcn.10032220
add esp, 0xc
mov dword [ebp - 0x394], eax
cmp dword [ebp - 0x394], 1
je 0x10021a8f
mov dword [ebp - 0x10c], 0xa
mov eax, dword [ebp - 0x10c]
jmp 0x1002330c
jmp case.0x10021975.1
mov ecx, dword [ebp + 8]
mov dword [ecx], 3
jmp 0x1002225b
jmp 0x1002191c
mov dword [ebp - 0x22c], 0x2826
jmp 0x10021ac4
mov edx, dword [ebp - 0x22c]
add edx, 0x5b
mov dword [ebp - 0x22c], edx
cmp dword [ebp - 0x22c], 0x2992
ja case.0x10021909.2
mov eax, dword [ebp - 0x22c]
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0x28dc
ja 0x10021b26
cmp dword [ebp - 0x230], 0x28dc
je 0x10021c32
mov ecx, dword [ebp - 0x230]
mov dword [ebp - 0x180], ecx
sub dword [ebp - 0x180], 0x2826
je 0x10021b54
sub dword [ebp - 0x180], 0x5b
je 0x10021c55
jmp 0x10021c7b
mov edx, dword [ebp - 0x230]
mov dword [ebp - 0x184], edx
sub dword [ebp - 0x184], 0x2937
je 0x10021c4a
sub dword [ebp - 0x184], 0x5b
je 0x10021c3e
jmp 0x10021c7b
mov dword [ebp - 0x398], 1
push 0x5efb
lea eax, [ebp - 0x398]
push eax
call fcn.1002e8e0
add esp, 8
mov dword [ebp - 0x39c], eax
mov ecx, dword [ebp - 0x39c]
mov dword [ebp - 0x110], ecx
cmp dword [ebp - 0x110], 0
jne 0x10021ba2
mov dword [ebp - 0x10c], 6
mov eax, dword [ebp - 0x10c]
jmp 0x1002330c
mov edx, dword [ebp + 8]
mov eax, dword [edx + 8]
mov dword [ebp - 0x3a0], eax
push 0x6750
mov ecx, dword [ebp - 0x3a0]
push ecx
push 0
push 0
call fcn.100391c0
add esp, 0x10
mov dword [ebp - 0x3a4], eax
mov edx, dword [ebp - 0x110]
mov eax, dword [ebp - 0x3a4]
mov dword [edx + 4], eax
mov ecx, dword [ebp + 8]
mov dword [ecx + 8], 0
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x18]
mov dword [ebp - 0x3a8], eax
mov ecx, dword [ebp - 0x110]
push ecx
mov edx, dword [ebp - 0x3a8]
push edx
push 0x5c9c
call fcn.10032220
add esp, 0xc
mov dword [ebp - 0x3ac], eax
cmp dword [ebp - 0x3ac], 1
je 0x10021c30
mov dword [ebp - 0x10c], 0xa
mov eax, dword [ebp - 0x10c]
jmp 0x1002330c
jmp 0x10021c7b
mov dword [ebp - 0x110], 0
jmp 0x10021c7b
jmp 0x1002225b
mov eax, dword [ebp + 8]
mov dword [eax], 3
jmp 0x10021c7b
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x18]
cmp dword [edx + 0x10], 0
jne 0x10021c6c
mov eax, dword [ebp + 8]
mov dword [eax], 0x63
jmp 0x10021c7b
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x18]
mov eax, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
mov dword [eax + 0x18], ecx
jmp 0x10021ab5
mov dword [ebp - 0x234], 0x32ef
jmp 0x10021c9b
mov edx, dword [ebp - 0x234]
add edx, 0x44
mov dword [ebp - 0x234], edx
cmp dword [ebp - 0x234], 0x33bb
ja case.0x10021909.3
mov eax, dword [ebp - 0x234]
mov dword [ebp - 0x238], eax
mov ecx, dword [ebp - 0x238]
sub ecx, 0x32ef
mov dword [ebp - 0x238], ecx
cmp dword [ebp - 0x238], 0xcc
ja case.0x10021ce6.1
mov edx, dword [ebp - 0x238]
movzx eax, byte [edx + 0x1002392c]
jmp dword [eax*4 + 0x10023918]
mov ecx, dword [ebp + 8]
mov dword [ecx], 3
jmp 0x1002225b
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x18]
mov dword [ebp - 0x3b0], eax
mov ecx, dword [ebp - 0x110]
push ecx
mov edx, dword [ebp - 0x3b0]
push edx
push 0x5c9c
call fcn.10032220
add esp, 0xc
mov dword [ebp - 0x3b4], eax
cmp dword [ebp - 0x3b4], 1
je 0x10021d50
mov dword [ebp - 0x10c], 0xa
mov eax, dword [ebp - 0x10c]
jmp 0x1002330c
jmp case.0x10021ce6.1
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x18]
cmp dword [ecx + 0x10], 0
jne 0x10021d6c
mov edx, dword [ebp + 8]
mov dword [edx], 0x63
jmp 0x10021d7b
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x18]
mov edx, dword [ebp + 8]
mov eax, dword [ecx + 0x10]
mov dword [edx + 0x18], eax
mov dword [ebp - 0x110], 0
jmp case.0x10021ce6.1
mov dword [ebp - 0x3b8], 4
push 0x5efb
lea ecx, [ebp - 0x3b8]
push ecx
call fcn.1002e8e0
add esp, 8
mov dword [ebp - 0x3bc], eax
mov edx, dword [ebp - 0x3bc]
mov dword [ebp - 0x110], edx
cmp dword [ebp - 0x110], 0
jne case.0x10021ce6.1
mov dword [ebp - 0x10c], 6
mov eax, dword [ebp - 0x10c]
jmp 0x1002330c
jmp 0x10021c8c
mov dword [ebp - 0x23c], 0x2977
jmp 0x10021df5
mov eax, dword [ebp - 0x23c]
add eax, 0x1c
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 0x29af
ja case.0x10021909.4
mov ecx, dword [ebp - 0x23c]
mov dword [ebp - 0x3c0], ecx
mov edx, dword [ebp - 0x3c0]
mov dword [ebp - 0x124], edx
sub dword [ebp - 0x124], 0x2977
je 0x10021e8d
sub dword [ebp - 0x124], 0x1c
je 0x10021e58
sub dword [ebp - 0x124], 0x1c
je 0x10021e40
jmp 0x10021f26
mov eax, dword [ebp + 8]
mov dword [eax], 3
jmp 0x1002225b
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x18]
cmp dword [edx + 0x10], 0
jne 0x10021e6f
mov eax, dword [ebp + 8]
mov dword [eax], 0x63
jmp 0x10021e7e
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x18]
mov eax, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
mov dword [eax + 0x18], ecx
mov dword [ebp - 0x110], 0
jmp 0x10021f26
mov dword [ebp - 0x3c4], 5
push 0x5efb
lea edx, [ebp - 0x3c4]
push edx
call fcn.1002e8e0
add esp, 8
mov dword [ebp - 0x3c8], eax
mov eax, dword [ebp - 0x3c8]
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0
jne 0x10021edb
mov dword [ebp - 0x10c], 6
mov eax, dword [ebp - 0x10c]
jmp 0x1002330c
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x3cc], edx
mov eax, dword [ebp - 0x110]
push eax
mov ecx, dword [ebp - 0x3cc]
push ecx
push 0x5c9c
call fcn.10032220
add esp, 0xc
mov dword [ebp - 0x3d0], eax
cmp dword [ebp - 0x3d0], 1
je 0x10021f26
mov dword [ebp - 0x10c], 0xa
mov eax, dword [ebp - 0x10c]
jmp 0x1002330c
jmp 0x10021de6
mov dword [ebp - 0x240], 0x7d4d
jmp 0x10021f46
mov edx, dword [ebp - 0x240]
add edx, 0x2d
mov dword [ebp - 0x240], edx
cmp dword [ebp - 0x240], 0x7da7
ja case.0x10021909.5
mov eax, dword [ebp - 0x240]
mov dword [ebp - 0x44c], eax
mov ecx, dword [ebp - 0x44c]
mov dword [ebp - 0x128], ecx
sub dword [ebp - 0x128], 0x7d4d
je 0x10021f95
sub dword [ebp - 0x128], 0x2d
je 0x10021fe8
sub dword [ebp - 0x128], 0x2d
je 0x10022065
jmp 0x10022078
mov dword [ebp - 0x3d8], 6
push 0x5efb
lea edx, [ebp - 0x3d8]
push edx
call fcn.1002e8e0
add esp, 8
mov dword [ebp - 0x3dc], eax
mov eax, dword [ebp - 0x3dc]
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0
jne 0x10021fe3
mov dword [ebp - 0x10c], 6
mov eax, dword [ebp - 0x10c]
jmp 0x1002330c
jmp 0x10022078
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x3e0], edx
mov eax, dword [ebp - 0x110]
push eax
mov ecx, dword [ebp - 0x3e0]
push ecx
push 0x5c9c
call fcn.10032220
add esp, 0xc
mov dword [ebp - 0x3e4], eax
cmp dword [ebp - 0x3e4], 1
je 0x10022033
mov dword [ebp - 0x10c], 0xa
mov eax, dword [ebp - 0x10c]
jmp 0x1002330c
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x18]
cmp dword [eax + 0x10], 0
jne 0x1002204a
mov ecx, dword [ebp + 8]
mov dword [ecx], 0x63
jmp 0x10022059
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x18]
mov ecx, dword [ebp + 8]
mov edx, dword [eax + 0x10]
mov dword [ecx + 0x18], edx
mov dword [ebp - 0x110], 0
jmp 0x10022078
mov eax, dword [ebp + 8]
mov dword [eax], 3
jmp 0x1002225b
jmp 0x10021f37
mov ecx, dword [ebp + 8]
mov dword [ecx], 1
jmp 0x1002225b
mov edx, dword [ebp + 8]
mov dword [edx], 7
jmp 0x1002225b
mov dword [ebp - 0x244], 0x117a
jmp 0x100220be
mov eax, dword [ebp - 0x244]
add eax, 0x13
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 0x118d
ja case.0x10021909.14
mov ecx, dword [ebp - 0x244]
mov dword [ebp - 0x3e8], ecx
mov edx, dword [ebp - 0x3e8]
mov dword [ebp - 0x188], edx
sub dword [ebp - 0x188], 0x117a
je 0x10022105
sub dword [ebp - 0x188], 0x13
je 0x100220f9
jmp 0x1002211a
jmp 0x1002225b
mov dword [ebp - 0x10c], 2
mov eax, dword [ebp - 0x10c]
jmp 0x1002330c
jmp 0x100220af
mov dword [ebp - 0x248], 0x701c
jmp 0x10022137
mov eax, dword [ebp - 0x248]
add eax, 8
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 0x7024
ja case.0x10021909.1
mov ecx, dword [ebp - 0x248]
mov dword [ebp - 0x3ec], ecx
mov edx, dword [ebp - 0x3ec]
mov dword [ebp - 0x18c], edx
sub dword [ebp - 0x18c], 0x701c
je 0x10022172
sub dword [ebp - 0x18c], 8
je 0x1002217e
jmp 0x1002218e
mov dword [ebp - 0x10c], 6
jmp 0x1002218e
mov eax, dword [ebp - 0x10c]
jmp 0x1002330c
jmp 0x10022128
mov dword [ebp - 0x24c], 0x58ae
jmp 0x100221ab
mov eax, dword [ebp - 0x24c]
add eax, 0x34
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 0x58ae
ja case.0x10021909.6
mov ecx, dword [ebp - 0x24c]
mov dword [ebp - 0x3f0], ecx
cmp dword [ebp - 0x3f0], 0x58ae
je 0x100221d1
jmp 0x100221e8
mov dword [ebp - 0x10c], 7
mov eax, dword [ebp - 0x10c]
jmp 0x1002330c
jmp 0x1002219c
mov dword [ebp - 0x250], 0x7a06
jmp 0x10022205
mov edx, dword [ebp - 0x250]
add edx, 0xf
mov dword [ebp - 0x250], edx
cmp dword [ebp - 0x250], 0x7a15
ja 0x1002225b
mov eax, dword [ebp - 0x250]
mov dword [ebp - 0x3f4], eax
mov ecx, dword [ebp - 0x3f4]
mov dword [ebp - 0x190], ecx
sub dword [ebp - 0x190], 0x7a06
je 0x1002224f
sub dword [ebp - 0x190], 0xf
je 0x10022240
jmp 0x10022259
mov eax, dword [ebp - 0x10c]
jmp 0x1002330c
mov dword [ebp - 0x10c], 4
jmp 0x100221f6
mov dword [ebp - 0x1dc], 0x323a
jmp 0x1002187b
jmp 0x100232ca
mov edx, dword [ebp + 8]
cmp dword [edx + 0x18], 0
jne 0x100222cf
push 0
push 0
push 0x7fa3
call fcn.10038190
add esp, 0xc
mov dword [ebp - 0x3f8], eax
mov eax, dword [ebp - 0x3f8]
mov dword [ebp - 0x2b8], eax
mov ecx, dword [ebp + 8]
mov edx, dword [ebp - 0x2b8]
mov dword [ecx + 0x18], edx
cmp dword [ebp - 0x2b8], 0
jne 0x100222ca
mov dword [ebp - 0x10c], 6
mov eax, dword [ebp - 0x10c]
jmp 0x1002330c
jmp 0x100223e3
mov dword [ebp - 0x254], 0x6aa5
jmp 0x100222ea
mov eax, dword [ebp - 0x254]
add eax, 0x62
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 0x6b69
ja 0x100223e3
mov ecx, dword [ebp - 0x254]
mov dword [ebp - 0x3fc], ecx
mov edx, dword [ebp - 0x3fc]
mov dword [ebp - 0x12c], edx
sub dword [ebp - 0x12c], 0x6aa5
je 0x10022344
sub dword [ebp - 0x12c], 0x62
je 0x10022387
sub dword [ebp - 0x12c], 0x62
je 0x10022335
jmp 0x100223de
mov dword [ebp - 0x110], 0
jmp 0x100223de
push 0
push 0
push 0x7fa3
call fcn.10038190
add esp, 0xc
mov dword [ebp - 0x400], eax
mov eax, dword [ebp - 0x400]
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0
jne 0x10022385
mov dword [ebp - 0x10c], 6
mov eax, dword [ebp - 0x10c]
jmp 0x1002330c
jmp 0x100223de
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x404], edx
mov eax, dword [ebp - 0x110]
push eax
mov ecx, dword [ebp - 0x404]
push ecx
push 0x5c9c
call fcn.10032220
add esp, 0xc
mov dword [ebp - 0x408], eax
cmp dword [ebp - 0x408], 1
je 0x100223d2
mov dword [ebp - 0x10c], 0xa
mov eax, dword [ebp - 0x10c]
jmp 0x1002330c
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 0x110]
mov dword [edx + 0x18], eax
jmp 0x100222db
mov ecx, dword [ebp + 8]
mov dword [ecx], 8
jmp 0x100232ca
mov dword [ebp - 0x1c8], 0x12a6
jmp 0x10022411
mov edx, dword [ebp - 0x1c8]
add edx, 0x14
mov dword [ebp - 0x1c8], edx
cmp dword [ebp - 0x1c8], 0x12ce
ja 0x10022ded
mov eax, dword [ebp - 0x1c8]
mov dword [ebp - 0x40c], eax
mov ecx, dword [ebp - 0x40c]
mov dword [ebp - 0x194], ecx
sub dword [ebp - 0x194], 0x12ba
je 0x10022467
sub dword [ebp - 0x194], 0x14
je 0x10022458
jmp 0x10022de8
jmp 0x10022de8
mov dword [ebp - 0x1c8], 0x12ce
jmp 0x10022de8
mov edx, dword [ebp + 8]
add edx, 0x14
push edx
push 0x6591
mov eax, dword [ebp + 8]
add eax, 0xc
push eax
mov ecx, dword [ebp + 8]
add ecx, 4
push ecx
mov edx, dword [ebp + 0x10]
push edx
mov eax, dword [ebp + 8]
add eax, 8
push eax
call fcn.10023df0
add esp, 0x18
mov dword [ebp - 0x410], eax
mov ecx, dword [ebp - 0x410]
mov dword [ebp - 0x2bc], ecx
cmp dword [ebp - 0x2bc], 0xc
ja case.0x100224b9.6
mov edx, dword [ebp - 0x2bc]
jmp dword [edx*4 + 0x100239fc]
mov dword [ebp - 0x290], 0xfb9
jmp 0x100224db
mov eax, dword [ebp - 0x290]
add eax, 0x4a
mov dword [ebp - 0x290], eax
cmp dword [ebp - 0x290], 0x104d
ja case.0x100224b9.12
mov ecx, dword [ebp - 0x290]
mov dword [ebp - 0x414], ecx
mov edx, dword [ebp - 0x414]
mov dword [ebp - 0x130], edx
sub dword [ebp - 0x130], 0xfb9
je 0x10022548
sub dword [ebp - 0x130], 0x4a
je 0x10022539
sub dword [ebp - 0x130], 0x4a
je 0x10022526
jmp 0x10022624
mov eax, dword [ebp + 8]
mov dword [eax], 9
jmp 0x10022458
mov dword [ebp - 0x110], 0
jmp 0x10022624
mov dword [ebp - 0x418], 0
push 0x5efb
lea ecx, [ebp - 0x418]
push ecx
call fcn.1002e8e0
add esp, 8
mov dword [ebp - 0x41c], eax
mov edx, dword [ebp - 0x41c]
mov dword [ebp - 0x110], edx
cmp dword [ebp - 0x110], 0
jne 0x10022596
mov dword [ebp - 0x10c], 6
mov eax, dword [ebp - 0x10c]
jmp 0x1002330c
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x420], ecx
push 0x6750
mov edx, dword [ebp - 0x420]
push edx
push 0
push 0
call fcn.100391c0
add esp, 0x10
mov dword [ebp - 0x424], eax
mov eax, dword [ebp - 0x110]
mov ecx, dword [ebp - 0x424]
mov dword [eax + 4], ecx
mov edx, dword [ebp + 8]
mov dword [edx + 8], 0
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x428], ecx
mov edx, dword [ebp - 0x110]
push edx
mov eax, dword [ebp - 0x428]
push eax
push 0x5c9c
call fcn.10032220
add esp, 0xc
mov dword [ebp - 0x42c], eax
cmp dword [ebp - 0x42c], 1
je 0x10022624
mov dword [ebp - 0x10c], 0xa
mov eax, dword [ebp - 0x10c]
jmp 0x1002330c
jmp 0x100224cc
mov dword [ebp - 0x25c], 0x3a6
jmp 0x10022644
mov ecx, dword [ebp - 0x25c]
add ecx, 0x2f
mov dword [ebp - 0x25c], ecx
cmp dword [ebp - 0x25c], 0x433
ja case.0x100224b9.2
mov edx, dword [ebp - 0x25c]
mov dword [ebp - 0x260], edx
mov eax, dword [ebp - 0x260]
sub eax, 0x3a6
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 0x8d
ja case.0x1002268e.1
mov ecx, dword [ebp - 0x260]
movzx edx, byte [ecx + 0x10023a44]
jmp dword [edx*4 + 0x10023a30]
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x430], ecx
mov edx, dword [ebp - 0x110]
push edx
mov eax, dword [ebp - 0x430]
push eax
push 0x5c9c
call fcn.10032220
add esp, 0xc
mov dword [ebp - 0x434], eax
cmp dword [ebp - 0x434], 1
je 0x100226e0
mov dword [ebp - 0x10c], 0xa
mov eax, dword [ebp - 0x10c]
jmp 0x1002330c
jmp case.0x1002268e.1
jmp 0x10022458
mov dword [ebp - 0x110], 0
mov ecx, dword [ebp + 8]
mov dword [ecx], 9
jmp case.0x1002268e.1
mov dword [ebp - 0x438], 1
push 0x5efb
lea edx, [ebp - 0x438]
push edx
call fcn.1002e8e0
add esp, 8
mov dword [ebp - 0x43c], eax
mov eax, dword [ebp - 0x43c]
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0
jne 0x10022755
mov dword [ebp - 0x10c], 6
mov eax, dword [ebp - 0x10c]
jmp 0x1002330c
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
mov dword [ebp - 0x440], edx
push 0x6750
mov eax, dword [ebp - 0x440]
push eax
push 0
push 0
call fcn.100391c0
add esp, 0x10
mov dword [ebp - 0x444], eax
mov ecx, dword [ebp - 0x110]
mov edx, dword [ebp - 0x444]
mov dword [ecx + 4], edx
mov eax, dword [ebp + 8]
mov dword [eax + 8], 0
jmp 0x10022635
mov dword [ebp - 0x264], 0x41c2
jmp 0x100227b8
mov ecx, dword [ebp - 0x264]
add ecx, 0x52
mov dword [ebp - 0x264], ecx
cmp dword [ebp - 0x264], 0x4266
ja case.0x100224b9.3
mov edx, dword [ebp - 0x264]
mov dword [ebp - 0x448], edx
mov eax, dword [ebp - 0x448]
mov dword [ebp - 0x134], eax
sub dword [ebp - 0x134], 0x41c2
je 0x1002281b
sub dword [ebp - 0x134], 0x52
je 0x1002280d
sub dword [ebp - 0x134], 0x52
je 0x10022803
jmp 0x100228b4
jmp 0x10022458
mov ecx, dword [ebp + 8]
mov dword [ecx], 9
jmp 0x100228b4
mov dword [ebp - 0x4c4], 4
push 0x5efb
lea edx, [ebp - 0x4c4]
push edx
call fcn.1002e8e0
add esp, 8
mov dword [ebp - 0x450], eax
mov eax, dword [ebp - 0x450]
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0
jne 0x10022869
mov dword [ebp - 0x10c], 6
mov eax, dword [ebp - 0x10c]
jmp 0x1002330c
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x454], edx
mov eax, dword [ebp - 0x110]
push eax
mov ecx, dword [ebp - 0x454]
push ecx
push 0x5c9c
call fcn.10032220
add esp, 0xc
mov dword [ebp - 0x458], eax
cmp dword [ebp - 0x458], 1
je 0x100228b4
mov dword [ebp - 0x10c], 0xa
mov eax, dword [ebp - 0x10c]
jmp 0x1002330c
jmp 0x100227a9
mov dword [ebp - 0x268], 0x6178
jmp 0x100228d4
mov edx, dword [ebp - 0x268]
add edx, 8
mov dword [ebp - 0x268], edx
cmp dword [ebp - 0x268], 0x6180
ja case.0x100224b9.4
mov eax, dword [ebp - 0x268]
mov dword [ebp - 0x45c], eax
mov ecx, dword [ebp - 0x45c]
mov dword [ebp - 0x198], ecx
sub dword [ebp - 0x198], 0x6178
je 0x10022929
sub dword [ebp - 0x198], 8
je 0x10022916
jmp 0x100229c2
mov edx, dword [ebp + 8]
mov dword [edx], 9
jmp 0x10022458
mov dword [ebp - 0x460], 5
push 0x5efb
lea eax, [ebp - 0x460]
push eax
call fcn.1002e8e0
add esp, 8
mov dword [ebp - 0x464], eax
mov ecx, dword [ebp - 0x464]
mov dword [ebp - 0x110], ecx
cmp dword [ebp - 0x110], 0
jne 0x10022977
mov dword [ebp - 0x10c], 6
mov eax, dword [ebp - 0x10c]
jmp 0x1002330c
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x18]
mov dword [ebp - 0x468], eax
mov ecx, dword [ebp - 0x110]
push ecx
mov edx, dword [ebp - 0x468]
push edx
push 0x5c9c
call fcn.10032220
add esp, 0xc
mov dword [ebp - 0x46c], eax
cmp dword [ebp - 0x46c], 1
je 0x100229c2
mov dword [ebp - 0x10c], 0xa
mov eax, dword [ebp - 0x10c]
jmp 0x1002330c
jmp 0x100228c5
mov dword [ebp - 0x26c], 0x215e
jmp 0x100229e2
mov eax, dword [ebp - 0x26c]
add eax, 0xb
mov dword [ebp - 0x26c], eax
cmp dword [ebp - 0x26c], 0x2174
ja case.0x100224b9.7
mov ecx, dword [ebp - 0x26c]
mov dword [ebp - 0x470], ecx
mov edx, dword [ebp - 0x470]
mov dword [ebp - 0x138], edx
sub dword [ebp - 0x138], 0x215e
je 0x10022a3f
sub dword [ebp - 0x138], 0xb
je 0x10022a31
sub dword [ebp - 0x138], 0xb
je 0x10022ada
jmp 0x10022adf
mov eax, dword [ebp + 8]
mov dword [eax], 9
jmp 0x10022adf
mov dword [ebp - 0x474], 6
push 0x5efb
lea ecx, [ebp - 0x474]
push ecx
call fcn.1002e8e0
add esp, 8
mov dword [ebp - 0x478], eax
mov edx, dword [ebp - 0x478]
mov dword [ebp - 0x110], edx
cmp dword [ebp - 0x110], 0
jne 0x10022a8d
mov dword [ebp - 0x10c], 6
mov eax, dword [ebp - 0x10c]
jmp 0x1002330c
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x47c], ecx
mov edx, dword [ebp - 0x110]
push edx
mov eax, dword [ebp - 0x47c]
push eax
push 0x5c9c
call fcn.10032220
add esp, 0xc
mov dword [ebp - 0x480], eax
cmp dword [ebp - 0x480], 1
je 0x10022ad8
mov dword [ebp - 0x10c], 0xa
mov eax, dword [ebp - 0x10c]
jmp 0x1002330c
jmp 0x10022adf
jmp 0x10022458
jmp 0x100229d3
mov ecx, dword [ebp + 8]
mov dword [ecx], 7
jmp 0x10022458
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x18]
cmp dword [eax + 0x10], 0
jne 0x10022b0c
mov ecx, dword [ebp + 8]
mov dword [ecx], 0x63
jmp 0x10022c87
mov dword [ebp - 0x1cc], 0x1769
jmp 0x10022b27
mov edx, dword [ebp - 0x1cc]
add edx, 0x55
mov dword [ebp - 0x1cc], edx
cmp dword [ebp - 0x1cc], 0x1769
ja 0x10022c87
mov eax, dword [ebp - 0x1cc]
mov dword [ebp - 0x484], eax
cmp dword [ebp - 0x484], 0x1769
je 0x10022b54
jmp 0x10022c82
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x18]
mov eax, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
mov dword [eax + 0x18], ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x18]
mov ecx, dword [eax]
mov dword [ebp - 0x2c0], ecx
cmp dword [ebp - 0x2c0], 0
je 0x10022b8c
cmp dword [ebp - 0x2c0], 3
je 0x10022c56
jmp 0x10022c63
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x18]
cmp dword [eax + 0x10], 0
jne 0x10022bb2
mov dword [ebp - 0x10c], 8
mov eax, dword [ebp - 0x10c]
jmp 0x1002330c
mov dword [ebp - 0x270], 0x5bcc
jmp 0x10022bcd
mov ecx, dword [ebp - 0x270]
add ecx, 0x1c
mov dword [ebp - 0x270], ecx
cmp dword [ebp - 0x270], 0x5c04
ja 0x10022c52
mov edx, dword [ebp - 0x270]
mov dword [ebp - 0x488], edx
mov eax, dword [ebp - 0x488]
mov dword [ebp - 0x13c], eax
sub dword [ebp - 0x13c], 0x5bcc
je 0x10022c11
sub dword [ebp - 0x13c], 0x1c
je 0x10022c2d
sub dword [ebp - 0x13c], 0x1c
je 0x10022c22
jmp 0x10022c4d
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x18]
mov eax, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
mov dword [eax + 0x18], ecx
jmp 0x10022c4d
mov edx, dword [ebp + 8]
mov dword [edx], 3
jmp 0x10022c4d
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x18]
cmp dword [ecx], 2
je 0x10022c4d
mov dword [ebp - 0x10c], 8
mov eax, dword [ebp - 0x10c]
jmp 0x1002330c
jmp 0x10022bbe
jmp 0x10022c78
mov edx, dword [ebp + 8]
mov dword [edx], 9
jmp 0x10022c78
mov dword [ebp - 0x10c], 8
mov eax, dword [ebp - 0x10c]
jmp 0x1002330c
mov dword [ebp - 0x1cc], 0x1769
jmp 0x10022b18
jmp 0x10022458
mov eax, dword [ebp + 8]
mov dword [eax], 1
jmp 0x10022458
mov dword [ebp - 0x274], 0x5c18
jmp 0x10022cb5
mov ecx, dword [ebp - 0x274]
add ecx, 2
mov dword [ebp - 0x274], ecx
cmp dword [ebp - 0x274], 0x5c1a
ja case.0x100224b9.1
mov edx, dword [ebp - 0x274]
mov dword [ebp - 0x48c], edx
mov eax, dword [ebp - 0x48c]
mov dword [ebp - 0x19c], eax
sub dword [ebp - 0x19c], 0x5c18
je 0x10022cf0
sub dword [ebp - 0x19c], 2
je 0x10022d05
jmp 0x10022d0a
mov dword [ebp - 0x10c], 2
mov eax, dword [ebp - 0x10c]
jmp 0x1002330c
jmp 0x10022458
jmp 0x10022ca6
mov dword [ebp - 0x278], 0x5e28
jmp 0x10022d27
mov ecx, dword [ebp - 0x278]
add ecx, 0x17
mov dword [ebp - 0x278], ecx
cmp dword [ebp - 0x278], 0x5e56
ja case.0x100224b9.6
mov edx, dword [ebp - 0x278]
mov dword [ebp - 0x490], edx
mov eax, dword [ebp - 0x490]
mov dword [ebp - 0x140], eax
sub dword [ebp - 0x140], 0x5e28
je 0x10022d6b
sub dword [ebp - 0x140], 0x17
je 0x10022d7e
sub dword [ebp - 0x140], 0x17
je 0x10022d77
jmp 0x10022d89
mov dword [ebp - 0x10c], 7
jmp 0x10022d89
jmp 0x10022458
mov eax, dword [ebp - 0x10c]
jmp 0x1002330c
jmp 0x10022d18
mov dword [ebp - 0x27c], 0x21e3
jmp 0x10022da6
mov ecx, dword [ebp - 0x27c]
add ecx, 0xe
mov dword [ebp - 0x27c], ecx
cmp dword [ebp - 0x27c], 0x21e3
ja 0x10022de8
mov edx, dword [ebp - 0x27c]
mov dword [ebp - 0x494], edx
cmp dword [ebp - 0x494], 0x21e3
je 0x10022dcc
jmp 0x10022de6
mov dword [ebp - 0x10c], 4
mov eax, dword [ebp - 0x10c]
jmp 0x1002330c
jmp 0x10022d97
jmp 0x10022402
jmp 0x100232ca
mov dword [ebp - 0x1d4], 0x2e66
jmp 0x10022e12
mov eax, dword [ebp - 0x1d4]
add eax, 0x1b
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 0x2e66
ja 0x100230be
mov ecx, dword [ebp - 0x1d4]
mov dword [ebp - 0x498], ecx
cmp dword [ebp - 0x498], 0x2e66
je 0x10022e3f
jmp 0x100230b9
mov edx, dword [ebp + 8]
add edx, 0x14
push edx
push 0x6591
mov eax, dword [ebp + 8]
add eax, 0xc
push eax
mov ecx, dword [ebp + 8]
add ecx, 4
push ecx
mov edx, dword [ebp + 0x10]
push edx
mov eax, dword [ebp + 8]
add eax, 8
push eax
call fcn.10023df0
add esp, 0x18
mov dword [ebp - 0x49c], eax
mov ecx, dword [ebp - 0x49c]
mov dword [ebp - 0x4a0], ecx
mov edx, dword [ebp - 0x4a0]
mov dword [ebp - 0x144], edx
cmp dword [ebp - 0x144], 0
je 0x10022fe4
sub dword [ebp - 0x144], 8
je 0x10022ec1
sub dword [ebp - 0x144], 2
je 0x10022eae
jmp 0x10023055
mov eax, dword [ebp + 8]
mov dword [eax], 8
jmp 0x100230af
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x18]
cmp dword [edx + 0x10], 0
jne 0x10022edb
mov eax, dword [ebp + 8]
mov dword [eax], 0x63
jmp 0x10022fda
mov dword [ebp - 0x1d0], 0x3862
jmp 0x10022ef6
mov ecx, dword [ebp - 0x1d0]
add ecx, 0x35
mov dword [ebp - 0x1d0], ecx
cmp dword [ebp - 0x1d0], 0x3862
ja 0x10022fda
mov edx, dword [ebp - 0x1d0]
mov dword [ebp - 0x4a4], edx
cmp dword [ebp - 0x4a4], 0x3862
je 0x10022f23
jmp 0x10022fd5
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x18]
mov edx, dword [ebp + 8]
mov eax, dword [ecx + 0x10]
mov dword [edx + 0x18], eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x18]
mov eax, dword [edx]
mov dword [ebp - 0x2c4], eax
cmp dword [ebp - 0x2c4], 0
je 0x10022f54
cmp dword [ebp - 0x2c4], 3
je 0x10022fa9
jmp 0x10022fb6
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x18]
cmp dword [edx + 0x10], 0
jne 0x10022f6b
mov eax, dword [ebp + 8]
mov dword [eax], 0x63
jmp 0x10022fa5
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x18]
mov eax, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
mov dword [eax + 0x18], ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x18]
cmp dword [eax], 2
je 0x10022f9c
mov dword [ebp - 0x10c], 8
mov eax, dword [ebp - 0x10c]
jmp 0x1002330c
mov ecx, dword [ebp + 8]
mov dword [ecx], 3
jmp 0x10022fcb
mov edx, dword [ebp + 8]
mov dword [edx], 9
jmp 0x10022fcb
mov dword [ebp - 0x10c], 8
mov eax, dword [ebp - 0x10c]
jmp 0x1002330c
mov dword [ebp - 0x1d0], 0x3862
jmp 0x10022ee7
jmp 0x100230af
mov dword [ebp - 0x280], 0x3757
jmp 0x10022fff
mov eax, dword [ebp - 0x280]
add eax, 0x21
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 0x3778
ja 0x10023055
mov ecx, dword [ebp - 0x280]
mov dword [ebp - 0x4a8], ecx
mov edx, dword [ebp - 0x4a8]
mov dword [ebp - 0x1a0], edx
sub dword [ebp - 0x1a0], 0x3757
je 0x1002303a
sub dword [ebp - 0x1a0], 0x21
je 0x1002304f
jmp 0x10023053
mov dword [ebp - 0x10c], 2
mov eax, dword [ebp - 0x10c]
jmp 0x1002330c
jmp 0x100230af
jmp 0x10022ff0
mov dword [ebp - 0x284], 0x57e6
jmp 0x10023070
mov eax, dword [ebp - 0x284]
add eax, 0x57
mov dword [ebp - 0x284], eax
cmp dword [ebp - 0x284], 0x57e6
ja 0x100230af
mov ecx, dword [ebp - 0x284]
mov dword [ebp - 0x4ac], ecx
cmp dword [ebp - 0x4ac], 0x57e6
je 0x10023096
jmp 0x100230ad
mov dword [ebp - 0x10c], 4
mov eax, dword [ebp - 0x10c]
jmp 0x1002330c
jmp 0x10023061
mov dword [ebp - 0x1d4], 0x2e66
jmp 0x10022e03
jmp 0x100232ca
mov dword [ebp - 0x1d8], 0x4af3
jmp 0x100230e3
mov edx, dword [ebp - 0x1d8]
add edx, 0x1c
mov dword [ebp - 0x1d8], edx
cmp dword [ebp - 0x1d8], 0x4af3
ja 0x100232b4
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 0x4b0], eax
cmp dword [ebp - 0x4b0], 0x4af3
je 0x10023110
jmp 0x100232af
mov ecx, dword [ebp + 8]
add ecx, 0x14
push ecx
push 0x6591
mov edx, dword [ebp + 8]
add edx, 0xc
push edx
mov eax, dword [ebp + 8]
add eax, 4
push eax
mov ecx, dword [ebp + 0x10]
push ecx
mov edx, dword [ebp + 8]
add edx, 8
push edx
call fcn.10023df0
add esp, 0x18
mov dword [ebp - 0x4b4], eax
mov eax, dword [ebp - 0x4b4]
mov dword [ebp - 0x2c8], eax
cmp dword [ebp - 0x2c8], 0
je 0x10023166
cmp dword [ebp - 0x2c8], 0xe
je 0x100231dd
jmp 0x1002324e
mov dword [ebp - 0x288], 0x48b6
jmp 0x10023181
mov ecx, dword [ebp - 0x288]
add ecx, 8
mov dword [ebp - 0x288], ecx
cmp dword [ebp - 0x288], 0x48be
ja 0x100231dd
mov edx, dword [ebp - 0x288]
mov dword [ebp - 0x4b8], edx
mov eax, dword [ebp - 0x4b8]
mov dword [ebp - 0x1a4], eax
sub dword [ebp - 0x1a4], 0x48b6
je 0x100231bc
sub dword [ebp - 0x1a4], 8
je 0x100231d1
jmp 0x100231db
mov dword [ebp - 0x10c], 3
mov eax, dword [ebp - 0x10c]
jmp 0x1002330c
jmp 0x100232a5
jmp 0x10023172
mov dword [ebp - 0x28c], 0x934
jmp 0x100231f8
mov ecx, dword [ebp - 0x28c]
add ecx, 0xe
mov dword [ebp - 0x28c], ecx
cmp dword [ebp - 0x28c], 0x942
ja 0x1002324e
mov edx, dword [ebp - 0x28c]
mov dword [ebp - 0x4bc], edx
mov eax, dword [ebp - 0x4bc]
mov dword [ebp - 0x1a8], eax
sub dword [ebp - 0x1a8], 0x934
je 0x10023233
sub dword [ebp - 0x1a8], 0xe
je 0x10023248
jmp 0x1002324c
mov dword [ebp - 0x10c], 6
mov eax, dword [ebp - 0x10c]
jmp 0x1002330c
jmp 0x100232a5
jmp 0x100231e9
mov dword [ebp - 0x294], 0x210e
jmp 0x10023269
mov ecx, dword [ebp - 0x294]
add ecx, 0x52
mov dword [ebp - 0x294], ecx
cmp dword [ebp - 0x294], 0x210e
ja 0x100232a5
mov edx, dword [ebp - 0x294]
mov dword [ebp - 0x4c0], edx
cmp dword [ebp - 0x4c0], 0x210e
je 0x1002328f
jmp 0x100232a3
mov dword [ebp - 0x10c], 4
mov eax, dword [ebp - 0x10c]
jmp 0x1002330c
jmp 0x1002325a
mov dword [ebp - 0x1d8], 0x4af3
jmp 0x100230d4
jmp 0x100232ca
mov dword [ebp - 0x10c], 0xa
mov eax, dword [ebp - 0x10c]
jmp 0x1002330c
mov dword [ebp - 0x148], 0x5992
jmp 0x10020818
mov eax, dword [ebp + 8]
mov dword [eax + 0xc], 0
push 0x104
lea ecx, [ebp - 0x108]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemWindowsDirectoryA]
jmp case.0x1002043a.1
je 0x100204a8
jmp case.0x1002043a.1
cmp esi, ebx
jmp 0x10020321
mov eax, dword [ebp - 0x10c]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100685c5
mov esp, ebp
pop ebp
ret