Function at 0x10009524
Capabilities:
Delete file
Delete registry key
Get common file path
Get disk size
Query environment variable
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1974
call fcn.1008bc80
push esi
push edi
mov dword [ebp - 8], 0xeaa32b1c
mov dword [ebp - 0x2b0], 0
mov dword [ebp - 0x5fc], 9
mov dword [ebp - 0x4a4], 0xfffffff7
mov dword [ebp - 0x5e4], 0xfffffff9
mov dword [ebp - 0x14e8], 0x71da
mov dword [ebp - 0x390], 0
jmp 0x10009585
mov eax, dword [ebp - 0x390]
inc eax
mov dword [ebp - 0x390], eax
cmp dword [ebp - 0x390], 2
jge 0x100095a1
mov eax, dword [ebp - 0x390]
mov dword [ebp + eax*4 - 0xdc], 0xfffffff6
jmp 0x10009578
mov dword [ebp - 8], 0
jmp 0x100095b1
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 1
jg 0x10009c3a
mov dword [ebp - 0x1c], 0x8f69f7fd
mov dword [ebp - 0x11c], 0
mov dword [ebp - 0x240], 0x8d46758e
mov dword [ebp - 0x13cc], 0x99c4
mov dword [ebp - 0x13c8], 0x99c4
mov dword [ebp - 0x13c4], 0x99c4
mov dword [ebp - 0x13c0], 0x99c4
mov dword [ebp - 0x1c], 1
jmp 0x1000960e
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jl 0x10009966
mov dword [ebp - 0x124c], 0xa9a26275
mov dword [ebp - 0x490], 0
jmp 0x1000963b
mov eax, dword [ebp - 0x490]
inc eax
mov dword [ebp - 0x490], eax
cmp dword [ebp - 0x490], 4
jge 0x10009657
mov eax, dword [ebp - 0x490]
mov dword [ebp + eax*4 - 0x1834], 0x11e69d08
jmp 0x1000962e
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0xdc], 0x837182ab
jbe 0x10009673
mov dword [ebp - 0xb44], 1
jmp 0x1000967a
and dword [ebp - 0xb44], 0
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0xdc]
cmp dword [ebp - 0xb44], eax
jge 0x10009698
mov dword [ebp - 0x10d8], 1
jmp 0x1000969f
and dword [ebp - 0x10d8], 0
mov eax, dword [ebp - 0x1c]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0xdc]
cmp dword [ebp + eax*4 - 0xdc], ecx
jge 0x100096c5
xor eax, eax
jne 0x100096c5
and dword [ebp - 0x1078], 0
jmp 0x100096cf
mov dword [ebp - 0x1078], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xdc]
add eax, dword [ebp - 0x1078]
cmp eax, 0x2065
jle 0x100096f5
mov dword [ebp - 0x1080], 1
jmp 0x100096fc
and dword [ebp - 0x1080], 0
cmp dword [ebp - 0x1080], 3
jbe 0x10009711
mov dword [ebp - 0x1088], 1
jmp 0x10009718
and dword [ebp - 0x1088], 0
mov eax, dword [ebp - 0x1088]
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x240], eax
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0xdc], 0xfffffff7
je 0x10009749
mov dword [ebp - 0xbe8], 1
jmp 0x10009750
and dword [ebp - 0xbe8], 0
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0xdc]
mov dword [ebp - 0x1504], eax
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0xdc], 0xc280563a
jne 0x1000977c
mov dword [ebp - 0x1090], 1
jmp 0x10009783
and dword [ebp - 0x1090], 0
mov eax, dword [ebp - 0x1090]
sub eax, 0x2c2e8b5a
mov dword [ebp - 0xbd0], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0xbd0]
mov dword [ebp + eax - 0x1834], ecx
mov eax, dword [ebp - 0x11c]
cmp dword [ebp - 0xbd0], eax
jg 0x100097c7
cmp dword [ebp - 0x1c], 0
je 0x100097c7
mov dword [ebp - 0x5ac], 1
jmp 0x100097ce
and dword [ebp - 0x5ac], 0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0xdc]
imul eax, dword [ebp - 0x5ac]
test eax, eax
je 0x100097ff
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1834], 0
je 0x100097ff
mov dword [ebp - 0xbd8], 1
jmp 0x10009806
and dword [ebp - 0xbd8], 0
mov eax, dword [ebp - 0xbd8]
mov dword [ebp - 0x2b0], eax
mov eax, dword [ebp - 0x2b0]
add eax, dword [ebp - 0x11c]
je 0x10009835
or eax, 0xffffffff
je 0x10009835
xor eax, eax
je 0x10009835
mov dword [ebp - 0x5b4], 1
jmp 0x1000983c
and dword [ebp - 0x5b4], 0
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0xdc]
cmp dword [ebp - 0x5b4], eax
jg 0x1000985a
mov dword [ebp - 0xbe0], 1
jmp 0x10009861
and dword [ebp - 0xbe0], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x240], eax
mov eax, dword [ebp - 0x240]
cmp eax, dword [ebp - 0xbe0]
jl 0x10009884
mov dword [ebp - 0x5bc], 1
jmp 0x1000988b
and dword [ebp - 0x5bc], 0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0xdc]
cmp dword [ebp - 0x5bc], eax
jne 0x100098a9
mov dword [ebp - 0x5c4], 1
jmp 0x100098b0
and dword [ebp - 0x5c4], 0
mov eax, dword [ebp - 0xbe8]
add eax, dword [ebp - 0x5c4]
je 0x100098d3
mov eax, 0xffff
test eax, eax
je 0x100098d3
mov dword [ebp - 0xbf0], 1
jmp 0x100098da
and dword [ebp - 0xbf0], 0
mov eax, dword [ebp - 0xbf0]
sub eax, dword [ebp - 0x11c]
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x11c], eax
je 0x10009903
mov dword [ebp - 0x5cc], 1
jmp 0x1000990a
and dword [ebp - 0x5cc], 0
mov eax, dword [ebp - 8]
add eax, dword [ebp - 0x5cc]
mov dword [ebp - 0x124c], eax
cmp dword [ebp - 0x11c], 0xfffffffc
jge 0x1000992e
mov dword [ebp - 0xbf8], 1
jmp 0x10009935
and dword [ebp - 0xbf8], 0
mov eax, dword [ebp - 0xbf8]
sub eax, 0x5e4b438f
jne 0x1000994e
mov dword [ebp - 0x5d4], 1
jmp 0x10009955
and dword [ebp - 0x5d4], 0
mov eax, dword [ebp - 0x5d4]
mov dword [ebp - 0x5fc], eax
jmp 0x10009607
push 4
pop eax
test eax, eax
je 0x10009ac1
cmp dword [ebp - 0x2b0], 0
jne 0x10009980
cmp dword [ebp - 0x1c], 0
je 0x10009987
cmp dword [ebp - 0x4a4], 0
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0xdc]
mov dword [ebp - 0x4a4], eax
mov eax, dword [ebp - 0x4a4]
mov dword [ebp - 0x150c], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x13cc]
imul eax, dword [ebp - 0x240]
cmp eax, dword [ebp - 0x240]
je 0x100099ca
mov dword [ebp - 0xc00], 1
jmp 0x100099d1
and dword [ebp - 0xc00], 0
mov eax, dword [ebp - 0xc00]
mov dword [ebp - 0x2b0], eax
mov eax, dword [ebp - 0x2b0]
push 4
pop ecx
shl ecx, 1
add eax, dword [ebp + ecx - 0x13cc]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0xdc]
jle 0x10009a0a
mov dword [ebp - 0x5dc], 1
jmp 0x10009a11
and dword [ebp - 0x5dc], 0
mov eax, dword [ebp - 0x5dc]
sub eax, dword [ebp - 8]
je 0x10009a38
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xdc], 0
je 0x10009a38
mov dword [ebp - 0xc08], 1
jmp 0x10009a3f
and dword [ebp - 0xc08], 0
mov eax, dword [ebp - 0xc08]
mov dword [ebp - 0x5e4], eax
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x5e4], eax
jle 0x10009a6f
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xdc], 0
jne 0x10009a6f
and dword [ebp - 0xc10], 0
jmp 0x10009a79
mov dword [ebp - 0xc10], 1
mov eax, dword [ebp - 0xc10]
mov dword [ebp - 0x240], eax
mov eax, dword [ebp - 8]
cmp dword [ebp + eax*4 - 0xdc], 0
jne 0x10009aa1
cmp dword [ebp - 8], 0
jne 0x10009aa1
and dword [ebp - 0x5ec], 0
jmp 0x10009aab
mov dword [ebp - 0x5ec], 1
mov eax, dword [ebp - 0x5ec]
neg eax
je 0x10009ac1
mov dword [ebp - 0xc18], 1
jmp 0x10009ac8
and dword [ebp - 0xc18], 0
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0xc18]
cmp eax, dword [ebp - 8]
jge 0x10009ae3
mov dword [ebp - 0x5f4], 1
jmp 0x10009aea
and dword [ebp - 0x5f4], 0
mov eax, dword [ebp - 0x11c]
cmp dword [ebp - 0x5f4], eax
jle 0x10009b04
mov dword [ebp - 0xc20], 1
jmp 0x10009b0b
and dword [ebp - 0xc20], 0
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0xdc]
cmp dword [ebp - 0xc20], eax
jl 0x10009b29
mov dword [ebp - 0xc28], 1
jmp 0x10009b30
and dword [ebp - 0xc28], 0
mov eax, dword [ebp - 0x5fc]
cmp dword [ebp - 0xc28], eax
jge 0x10009b4a
mov dword [ebp - 0x604], 1
jmp 0x10009b51
and dword [ebp - 0x604], 0
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0xdc]
add eax, dword [ebp - 0x604]
cmp eax, dword [ebp - 8]
jne 0x10009b72
mov dword [ebp - 0xc30], 1
jmp 0x10009b79
and dword [ebp - 0xc30], 0
mov eax, dword [ebp - 8]
cmp dword [ebp - 0xc30], eax
jg 0x10009b90
mov dword [ebp - 0x60c], 1
jmp 0x10009b97
and dword [ebp - 0x60c], 0
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0xdc]
cmp dword [ebp - 0x60c], eax
jge 0x10009bb5
mov dword [ebp - 0xc38], 1
jmp 0x10009bbc
and dword [ebp - 0xc38], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0xc38], eax
je 0x10009bd3
mov dword [ebp - 0x614], 1
jmp 0x10009bda
and dword [ebp - 0x614], 0
cmp dword [ebp - 0x614], 0xfffa
jb 0x10009bf2
mov dword [ebp - 0xc40], 1
jmp 0x10009bf9
and dword [ebp - 0xc40], 0
mov eax, dword [ebp - 8]
cmp dword [ebp - 0xc40], eax
jle 0x10009c10
mov dword [ebp - 0x61c], 1
jmp 0x10009c17
and dword [ebp - 0x61c], 0
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0xdc]
imul eax, dword [ebp - 0x61c]
mov ecx, dword [ebp - 8]
add eax, dword [ebp + ecx*4 - 0xdc]
mov dword [ebp - 0x1c], eax
jmp 0x100095aa
mov dword [ebp - 0x278], 1
mov dword [ebp - 0x10bc], 0x13dce9d0
mov dword [ebp - 0x10b8], 0x13dce9d0
mov dword [ebp - 0x10b4], 0x13dce9d0
mov dword [ebp - 0x10b0], 0x13dce9d0
mov dword [ebp - 0x278], 0
jmp 0x10009c85
mov eax, dword [ebp - 0x278]
inc eax
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x278], 0x12
jl 0x10009ec8
mov dword [ebp - 0x80], 0xfffffff6
mov dword [ebp - 0x314], 5
mov dword [ebp - 0x80], 3
jmp 0x10009cb3
mov eax, dword [ebp - 0x80]
dec eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0
jl 0x10009ea4
mov eax, dword [ebp - 0x80]
mov ecx, dword [ebp - 0x80]
cmp dword [ebp + eax*4 - 0x10bc], ecx
jle 0x10009ce2
mov eax, dword [ebp - 0x80]
cmp dword [ebp + eax*4 - 0x10bc], 0
jne 0x10009ce2
and dword [ebp - 0xc50], 0
jmp 0x10009cec
mov dword [ebp - 0xc50], 1
mov eax, dword [ebp - 0x278]
mov dword [ebp - 0x1514], eax
cmp dword [ebp - 0x80], 0
jne 0x10009d10
cmp dword [ebp - 0x278], 0
jne 0x10009d10
and dword [ebp - 0xc48], 0
jmp 0x10009d1a
mov dword [ebp - 0xc48], 1
mov eax, dword [ebp - 0x80]
mov ecx, dword [ebp - 0xc48]
sub ecx, 0x37b75a88
cmp dword [ebp + eax*4 - 0x10bc], ecx
jg 0x10009d3e
mov dword [ebp - 0x624], 1
jmp 0x10009d45
and dword [ebp - 0x624], 0
mov eax, dword [ebp - 0x80]
mov ecx, dword [ebp - 0x624]
sub ecx, dword [ebp + eax*4 - 0x10bc]
push 4
pop eax
shl eax, 0
sub ecx, dword [ebp + eax - 0x10bc]
cmp dword [ebp - 0xc50], ecx
jg 0x10009d76
mov dword [ebp - 0x62c], 1
jmp 0x10009d7d
and dword [ebp - 0x62c], 0
mov eax, dword [ebp - 0x62c]
mov dword [ebp - 0x314], eax
mov dword [ebp - 0x314], 0
jmp 0x10009da2
mov eax, dword [ebp - 0x314]
dec eax
mov dword [ebp - 0x314], eax
cmp dword [ebp - 0x314], 0xffffffe2
jg 0x10009e9f
mov dword [ebp - 0x498], 0
jmp 0x10009dc8
mov eax, dword [ebp - 0x498]
inc eax
mov dword [ebp - 0x498], eax
cmp dword [ebp - 0x498], 1
jge 0x10009de4
mov eax, dword [ebp - 0x498]
mov dword [ebp + eax*4 - 0x4a0], 8
jmp 0x10009dbb
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x4a0], 0
jmp 0x10009e12
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x4a0]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x4a0], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x4a0], 0x13
jle 0x10009e9a
mov dword [ebp - 0x31c], 0xfffffffa
mov dword [ebp - 0x31c], 0
jmp 0x10009e45
mov eax, dword [ebp - 0x31c]
inc eax
mov dword [ebp - 0x31c], eax
cmp dword [ebp - 0x31c], 3
jg 0x10009e95
mov dword [ebp - 0x45c], 0x695cd1d2
mov dword [ebp - 0x45c], 3
jmp 0x10009e71
mov eax, dword [ebp - 0x45c]
dec eax
mov dword [ebp - 0x45c], eax
cmp dword [ebp - 0x45c], 0
jl 0x10009e93
mov eax, dword [ebp - 0x80]
mov ecx, dword [ebp - 0x31c]
mov eax, dword [ebp + eax*4 - 0x10bc]
mov dword [ebp + ecx*4 - 0x10bc], eax
jmp 0x10009e64
jmp 0x10009e38
jmp 0x10009df7
jmp 0x10009d95
jmp 0x10009cac
mov byte [ebp - 0x239], 0
movzx eax, byte [ebp - 0x239]
test eax, eax
je 0x10009ec3
push 0x293
push 0
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
jmp 0x10009c78
mov dword [ebp - 0x68], 0x8905154
mov dword [ebp - 0x280], 0xf94f378
mov dword [ebp - 0x324], 0xffff
mov dword [ebp - 0xc70], 0
mov dword [ebp - 0xc78], 0xfffffffb
mov dword [ebp - 0x125c], 0xffffffff
mov byte [ebp - 0x184], 0
movzx eax, byte [ebp - 0x184]
test eax, eax
je 0x10009f22
push 0x1d73
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
mov eax, dword [ebp - 0x280]
mov dword [ebp - 0x151c], eax
imul eax, dword [ebp - 0x324], 0xfffd
add eax, dword [ebp - 0x324]
je 0x10009f55
cmp dword [ebp - 0x324], 0
je 0x10009f55
mov dword [ebp - 0xc58], 1
jmp 0x10009f5c
and dword [ebp - 0xc58], 0
mov eax, dword [ebp - 0xc58]
neg eax
je 0x10009f7b
mov eax, 0x14055248
test eax, eax
je 0x10009f7b
mov dword [ebp - 0x634], 1
jmp 0x10009f82
and dword [ebp - 0x634], 0
mov eax, dword [ebp - 0x634]
inc eax
sub eax, dword [ebp - 0x280]
cmp dword [ebp - 0x280], eax
jge 0x10009fa9
cmp dword [ebp - 0x324], 0
jne 0x10009fa9
and dword [ebp - 0x1254], 0
jmp 0x10009fb3
mov dword [ebp - 0x1254], 1
mov eax, dword [ebp - 0x280]
mov dword [ebp - 0x1524], eax
mov eax, 0xe81de98
cmp eax, 0xcbc21b07
jb 0x10009fe0
cmp dword [ebp - 0x324], 0
je 0x10009fe0
mov dword [ebp - 0xc60], 1
jmp 0x10009fe7
and dword [ebp - 0xc60], 0
cmp dword [ebp - 0xc60], 0
jle 0x10009ffc
mov dword [ebp - 0x63c], 1
jmp 0x1000a003
and dword [ebp - 0x63c], 0
cmp dword [ebp - 0x63c], 0xd847
je 0x1000a01b
mov dword [ebp - 0xc68], 1
jmp 0x1000a022
and dword [ebp - 0xc68], 0
cmp dword [ebp - 0xc68], 0x7eb23672
jge 0x1000a03a
mov dword [ebp - 0x644], 1
jmp 0x1000a041
and dword [ebp - 0x644], 0
mov eax, dword [ebp - 0x644]
mov dword [ebp - 0xc70], eax
cmp dword [ebp - 0xc70], 0xfffffff7
jbe 0x1000a062
mov dword [ebp - 0x64c], 1
jmp 0x1000a069
and dword [ebp - 0x64c], 0
mov eax, dword [ebp - 0x64c]
mov dword [ebp - 0xc78], eax
mov eax, dword [ebp - 0x280]
cmp dword [ebp - 0xc78], eax
jge 0x1000a08f
mov dword [ebp - 0x654], 1
jmp 0x1000a096
and dword [ebp - 0x654], 0
mov eax, dword [ebp - 0x280]
add eax, dword [ebp - 0x654]
mov dword [ebp - 0x125c], eax
mov dword [ebp - 0x1230], 0xfff9
mov dword [ebp - 0x10f0], 3
mov dword [ebp - 0x138], 0
mov dword [ebp - 0x58c], 0
mov dword [ebp - 0x18c], 0x2349124c
mov dword [ebp - 0x152c], 1
xor eax, eax
je 0x1000a659
mov dword [ebp - 0x428], 0xfffffffc
mov dword [ebp - 0x330], 0
jmp 0x1000a10f
mov eax, dword [ebp - 0x330]
inc eax
mov dword [ebp - 0x330], eax
cmp dword [ebp - 0x330], 2
jge 0x1000a12b
mov eax, dword [ebp - 0x330]
mov dword [ebp + eax*4 - 0x288], 0x3df603fa
jmp 0x1000a102
mov byte [ebp - 0x21d], 0
movzx eax, byte [ebp - 0x21d]
test eax, eax
je 0x1000a162
push 0x1b89
push 0x4ec
push 0x581
push 0x5f
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_Ellipse]
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x288], 0xfffffff7
jmp 0x1000a190
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x288]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x288], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x288], 0x10
jne 0x1000a657
mov dword [ebp - 0xc80], 0x969a22db
mov dword [ebp - 0xf8], 0
jmp 0x1000a1c7
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 1
jge 0x1000a1e3
mov eax, dword [ebp - 0xf8]
mov dword [ebp + eax*4 - 0x264], 0xec93
jmp 0x1000a1ba
mov dword [ebp - 0xf8], 0
jmp 0x1000a1fc
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 1
jge 0x1000a218
mov eax, dword [ebp - 0xf8]
mov dword [ebp + eax*4 - 0x1274], 0x81cdffa8
jmp 0x1000a1ef
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x288]
mov dword [ebp - 0x1534], eax
cmp dword [ebp - 0xc80], 5
jne 0x1000a240
mov dword [ebp - 0x1264], 1
jmp 0x1000a247
and dword [ebp - 0x1264], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x288], 0
je 0x1000a26c
cmp dword [ebp - 0xc80], 0
je 0x1000a26c
mov dword [ebp - 0x126c], 1
jmp 0x1000a273
and dword [ebp - 0x126c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x264]
mov dword [ebp - 0x153c], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x288]
mov dword [ebp - 0x1544], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x264], 0
je 0x1000a2c5
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x264], 0
je 0x1000a2c5
mov dword [ebp - 0x65c], 1
jmp 0x1000a2cc
and dword [ebp - 0x65c], 0
cmp dword [ebp - 0x65c], 1
jg 0x1000a2e1
mov dword [ebp - 0xc88], 1
jmp 0x1000a2e8
and dword [ebp - 0xc88], 0
cmp dword [ebp - 0xc88], 0x47cd
jl 0x1000a300
mov dword [ebp - 0x664], 1
jmp 0x1000a307
and dword [ebp - 0x664], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x288]
cmp eax, dword [ebp - 0x664]
jle 0x1000a338
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x288], 0
je 0x1000a338
mov dword [ebp - 0xc90], 1
jmp 0x1000a33f
and dword [ebp - 0xc90], 0
mov eax, dword [ebp - 0xc90]
neg eax
mov dword [ebp - 0x428], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x288], 0
je 0x1000a461
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x138]
cmp dword [ebp + eax - 0x264], ecx
je 0x1000a382
mov dword [ebp - 0x66c], 1
jmp 0x1000a389
and dword [ebp - 0x66c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x288]
cmp dword [ebp - 0x66c], eax
jge 0x1000a3aa
mov dword [ebp - 0xc98], 1
jmp 0x1000a3b1
and dword [ebp - 0xc98], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xc98]
add ecx, 0x76f45a1
cmp dword [ebp + eax - 0x264], ecx
jg 0x1000a3d8
mov dword [ebp - 0x674], 1
jmp 0x1000a3df
and dword [ebp - 0x674], 0
mov eax, dword [ebp - 0x138]
add eax, dword [ebp - 0x674]
cmp eax, 0x8c6a8663
jae 0x1000a3fe
mov dword [ebp - 0xca0], 1
jmp 0x1000a405
and dword [ebp - 0xca0], 0
mov eax, dword [ebp - 0x428]
cmp dword [ebp - 0xca0], eax
jl 0x1000a41f
mov dword [ebp - 0x67c], 1
jmp 0x1000a426
and dword [ebp - 0x67c], 0
mov eax, dword [ebp - 0x138]
cmp dword [ebp - 0x67c], eax
jl 0x1000a440
mov dword [ebp - 0xca8], 1
jmp 0x1000a447
and dword [ebp - 0xca8], 0
mov eax, dword [ebp - 0x138]
cmp eax, dword [ebp - 0xca8]
jl 0x1000a461
mov dword [ebp - 0x684], 1
jmp 0x1000a468
and dword [ebp - 0x684], 0
mov eax, dword [ebp - 0x684]
mov dword [ebp - 0x58c], eax
mov eax, dword [ebp - 0x138]
cmp dword [ebp - 0x58c], eax
je 0x1000a48e
mov dword [ebp - 0xcb0], 1
jmp 0x1000a495
and dword [ebp - 0xcb0], 0
imul eax, dword [ebp - 0xcb0], 0xef33
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x288]
je 0x1000a4ba
mov dword [ebp - 0x68c], 1
jmp 0x1000a4c1
and dword [ebp - 0x68c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1274]
cmp dword [ebp - 0x68c], eax
jl 0x1000a4e2
mov dword [ebp - 0xcb8], 1
jmp 0x1000a4e9
and dword [ebp - 0xcb8], 0
mov eax, dword [ebp - 0x18c]
cmp dword [ebp - 0xcb8], eax
je 0x1000a601
mov dword [ebp - 0x584], 0x9dda4adc
cmp dword [ebp - 0x584], 0
jne 0x1000a581
cmp dword [ebp - 0x18c], 0xb075aba8
je 0x1000a526
mov dword [ebp - 0x127c], 1
jmp 0x1000a52d
and dword [ebp - 0x127c], 0
mov eax, dword [ebp - 0x428]
cmp dword [ebp - 0x584], eax
jle 0x1000a547
mov dword [ebp - 0x694], 1
jmp 0x1000a54e
and dword [ebp - 0x694], 0
mov eax, dword [ebp - 0x18c]
cmp dword [ebp - 0x694], eax
jne 0x1000a568
mov dword [ebp - 0x1284], 1
jmp 0x1000a56f
and dword [ebp - 0x1284], 0
cmp dword [ebp - 0x584], 0
jne 0x1000a581
and dword [ebp - 0xcc0], 0
jmp 0x1000a58b
mov dword [ebp - 0xcc0], 1
cmp dword [ebp - 0xcc0], 0xccf75bae
jne 0x1000a5a3
mov dword [ebp - 0x128c], 1
jmp 0x1000a5aa
and dword [ebp - 0x128c], 0
cmp dword [ebp - 0x428], 0
jne 0x1000a5c1
xor eax, eax
inc eax
jne 0x1000a5c1
and dword [ebp - 0x69c], 0
jmp 0x1000a5cb
mov dword [ebp - 0x69c], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x264]
cmp dword [ebp - 0x69c], eax
jle 0x1000a5ec
mov dword [ebp - 0xcc8], 1
jmp 0x1000a5f3
and dword [ebp - 0xcc8], 0
mov eax, dword [ebp - 0xcc8]
mov dword [ebp - 0x58c], eax
jmp 0x1000a652
mov dword [ebp - 0x18c], 0
jmp 0x1000a61a
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0x14
jl 0x1000a652
mov byte [ebp - 0x230], 0
movzx eax, byte [ebp - 0x230]
test eax, eax
je 0x1000a650
push 0
push 0
push 0x7f7
push 0x1fa7
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SendDlgItemMessageW]
jmp 0x1000a60d
jmp 0x1000a175
jmp 0x1000a692
mov dword [ebp - 0x138], 0xb
jmp 0x1000a672
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0x35
jl 0x1000a692
mov dword [ebp - 0x1304], 0xba5cd23e
cmp dword [ebp - 0x1304], 0
je 0x1000a690
jmp 0x1000a692
jmp 0x1000a665
mov dword [ebp - 0x10f8], 0xcf455dbf
mov dword [ebp - 0x100], 1
mov dword [ebp - 0xcd8], 1
mov dword [ebp - 0x338], 0
jmp 0x1000a6c9
mov eax, dword [ebp - 0x338]
inc eax
mov dword [ebp - 0x338], eax
cmp dword [ebp - 0x338], 2
jge 0x1000a6e5
mov eax, dword [ebp - 0x338]
mov dword [ebp + eax*4 - 0x109c], 0x9b55bb2c
jmp 0x1000a6bc
mov dword [ebp - 0x100], 0
jmp 0x1000a6fe
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 1
jg 0x1000a866
mov dword [ebp - 0xcd0], 1
mov dword [ebp - 0x147c], 7
mov dword [ebp - 0x1478], 7
mov dword [ebp - 0x1474], 7
mov dword [ebp - 0x1470], 7
mov eax, dword [ebp - 0xcd8]
cmp dword [ebp - 0x100], eax
je 0x1000a757
mov dword [ebp - 0x6ac], 1
jmp 0x1000a75e
and dword [ebp - 0x6ac], 0
mov eax, dword [ebp - 0x100]
cmp dword [ebp + eax*4 - 0x109c], 0
je 0x1000a781
push 2
pop eax
test eax, eax
je 0x1000a781
mov dword [ebp - 0x6a4], 1
jmp 0x1000a788
and dword [ebp - 0x6a4], 0
mov eax, dword [ebp - 0x6a4]
mov dword [ebp - 0xcd0], eax
mov eax, dword [ebp - 0xcd0]
add eax, dword [ebp - 0x6ac]
test eax, eax
jle 0x1000a7b0
mov dword [ebp - 0x130c], 1
jmp 0x1000a7b7
and dword [ebp - 0x130c], 0
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x154c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x109c]
mov dword [ebp - 0x1554], eax
mov eax, dword [ebp - 0x100]
mov ecx, dword [ebp - 0xcd8]
cmp dword [ebp + eax*4 - 0x109c], ecx
jge 0x1000a7f7
mov dword [ebp - 0x6b4], 1
jmp 0x1000a7fe
and dword [ebp - 0x6b4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x109c]
cmp dword [ebp - 0x6b4], eax
jl 0x1000a81f
mov dword [ebp - 0xce0], 1
jmp 0x1000a826
and dword [ebp - 0xce0], 0
mov eax, dword [ebp - 0x100]
mov eax, dword [ebp + eax*4 - 0x109c]
cmp dword [ebp - 0xce0], eax
jne 0x1000a847
mov dword [ebp - 0x6bc], 1
jmp 0x1000a84e
and dword [ebp - 0x6bc], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x6bc]
mov dword [ebp + eax - 0x147c], ecx
jmp 0x1000a6f1
mov dword [ebp - 0x350], 0xfffffff7
mov dword [ebp - 0x340], 1
mov dword [ebp - 0xce8], 0xfffffffe
mov dword [ebp - 0x430], 0
jmp 0x1000a89d
mov eax, dword [ebp - 0x430]
inc eax
mov dword [ebp - 0x430], eax
cmp dword [ebp - 0x430], 4
jge 0x1000a8b9
mov eax, dword [ebp - 0x430]
mov dword [ebp + eax*4 - 0x1964], 1
jmp 0x1000a890
mov dword [ebp - 0x340], 0
jmp 0x1000a8d2
mov eax, dword [ebp - 0x340]
inc eax
mov dword [ebp - 0x340], eax
cmp dword [ebp - 0x340], 0x1a
jge 0x1000a9c3
mov dword [ebp - 0x348], 0
mov dword [ebp - 0x1244], 1
mov dword [ebp - 0x438], 0
jmp 0x1000a90c
mov eax, dword [ebp - 0x438]
inc eax
mov dword [ebp - 0x438], eax
cmp dword [ebp - 0x438], 3
jge 0x1000a928
mov eax, dword [ebp - 0x438]
mov dword [ebp + eax*4 - 0x18a0], 0xffffffff
jmp 0x1000a8ff
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x18a0], 0
je 0x1000a93c
jmp 0x1000a9c3
mov dword [ebp - 0x348], 0xc
jmp 0x1000a955
mov eax, dword [ebp - 0x348]
dec eax
mov dword [ebp - 0x348], eax
cmp dword [ebp - 0x348], 0xffffffef
jne 0x1000a9be
mov dword [ebp - 0x440], 0x328f6c74
mov dword [ebp - 0x440], 0xfffffff4
jmp 0x1000a981
mov eax, dword [ebp - 0x440]
dec eax
mov dword [ebp - 0x440], eax
cmp dword [ebp - 0x440], 0xffffffe6
jg 0x1000a9bc
mov byte [ebp - 0x22f], 0
movzx eax, byte [ebp - 0x22f]
test eax, eax
je 0x1000a9af
push 0
push 0
push 0x1be7
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
cmp dword [ebp - 0x1244], 0
je 0x1000a9ba
jmp 0x1000a9bc
jmp 0x1000a974
jmp 0x1000a948
jmp 0x1000a8c5
mov eax, dword [ebp - 0xce8]
dec eax
mov dword [ebp - 0xce8], eax
mov dword [ebp - 0x108], 0
jmp 0x1000a9e9
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 4
jge 0x1000aa05
mov eax, dword [ebp - 0x108]
mov dword [ebp + eax*4 - 0x1364], 0xffffffff
jmp 0x1000a9dc
mov dword [ebp - 0x2e0], 0x70bb
mov dword [ebp - 0x594], 0x8cf5a8
mov dword [ebp - 0x128], 0
jmp 0x1000aa32
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 3
jge 0x1000aa4e
mov eax, dword [ebp - 0x128]
mov dword [ebp + eax*4 - 0x1370], 1
jmp 0x1000aa25
mov dword [ebp - 0x128], 0
jmp 0x1000aa67
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 3
jge 0x1000aa83
mov eax, dword [ebp - 0x128]
mov dword [ebp + eax*4 - 0x18b8], 1
jmp 0x1000aa5a
cmp dword [ebp - 0x2e0], 0
je 0x1000aaa1
cmp dword [ebp - 0x2e0], 0
je 0x1000aaa1
mov dword [ebp - 0x6c4], 1
jmp 0x1000aaa8
and dword [ebp - 0x6c4], 0
cmp dword [ebp - 0x6c4], 0x1c306a92
jne 0x1000aac0
mov dword [ebp - 0x10e4], 1
jmp 0x1000aac7
and dword [ebp - 0x10e4], 0
mov eax, dword [ebp - 0x2e0]
mov dword [ebp - 0x155c], eax
cmp dword [ebp - 0x2e0], 0xffffffff
jg 0x1000aae8
mov dword [ebp - 0xcf0], 1
jmp 0x1000aaef
and dword [ebp - 0xcf0], 0
mov eax, dword [ebp - 0xcf0]
mov dword [ebp - 0x594], eax
cmp dword [ebp - 0x594], 0
je 0x1000ab99
push 4
pop eax
shl eax, 1
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x1370]
cmp dword [ebp + eax - 0x1370], ecx
jle 0x1000ab2e
mov dword [ebp - 0x6cc], 1
jmp 0x1000ab35
and dword [ebp - 0x6cc], 0
mov eax, dword [ebp - 0x594]
mov dword [ebp - 0x1564], eax
mov eax, dword [ebp - 0x2e0]
imul eax, dword [ebp - 0x6cc]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x1370]
jg 0x1000ab6e
mov eax, 0x9968
test eax, eax
jne 0x1000ab6e
and dword [ebp - 0xcf8], 0
jmp 0x1000ab78
mov dword [ebp - 0xcf8], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1370]
cmp dword [ebp - 0xcf8], eax
je 0x1000ab99
mov dword [ebp - 0x6d4], 1
jmp 0x1000aba0
and dword [ebp - 0x6d4], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x6d4]
mov dword [ebp + eax - 0x18b8], ecx
mov dword [ebp - 0x108], 0
jmp 0x1000abcc
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 2
jge 0x1000abe8
mov eax, dword [ebp - 0x108]
mov dword [ebp + eax*4 - 0x1384], 0xdcb0c7b2
jmp 0x1000abbf
mov dword [ebp - 0x156c], 0xfffffff6
mov byte [ebp - 0x1c5], 0
movzx eax, byte [ebp - 0x1c5]
test eax, eax
je 0x1000ac10
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_LookupPrivilegeValueW]
mov byte [ebp - 0x17d], 0
movzx eax, byte [ebp - 0x17d]
test eax, eax
je 0x1000ac2d
push 0xd42
call dword [sym.imp.KERNEL32.dll_ExitThread]
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0x68], eax
jne 0x1000ac41
mov dword [ebp - 0xd00], 1
jmp 0x1000ac48
and dword [ebp - 0xd00], 0
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0xd00], eax
je 0x1000ac5f
mov dword [ebp - 0x6f4], 1
jmp 0x1000ac66
and dword [ebp - 0x6f4], 0
cmp dword [ebp - 0x68], 0
jl 0x1000ac78
mov dword [ebp - 0x6dc], 1
jmp 0x1000ac7f
and dword [ebp - 0x6dc], 0
mov eax, dword [ebp - 0x6dc]
sub eax, dword [ebp - 0x68]
cmp eax, dword [ebp - 0x68]
je 0x1000ac99
mov dword [ebp - 0xd08], 1
jmp 0x1000aca0
and dword [ebp - 0xd08], 0
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0xd08], eax
jne 0x1000acb7
mov dword [ebp - 0x6e4], 1
jmp 0x1000acbe
and dword [ebp - 0x6e4], 0
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0x6e4], eax
je 0x1000acd5
mov dword [ebp - 0xd10], 1
jmp 0x1000acdc
and dword [ebp - 0xd10], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1364]
cmp dword [ebp - 0xd10], eax
jl 0x1000acfc
mov dword [ebp - 0x6ec], 1
jmp 0x1000ad03
and dword [ebp - 0x6ec], 0
mov eax, dword [ebp - 0x68]
add eax, dword [ebp - 0x6ec]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x1364]
jne 0x1000ad26
mov dword [ebp - 0xd18], 1
jmp 0x1000ad2d
and dword [ebp - 0xd18], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x1364]
cmp dword [ebp - 0xd18], eax
jne 0x1000ad4e
mov dword [ebp - 0xd20], 1
jmp 0x1000ad55
and dword [ebp - 0xd20], 0
mov eax, dword [ebp - 0x6f4]
cmp eax, dword [ebp - 0xd20]
jge 0x1000ad72
cmp dword [ebp - 0x68], 0
jne 0x1000ad72
and dword [ebp - 0x10e8], 0
jmp 0x1000ad7c
mov dword [ebp - 0x10e8], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1364]
sub eax, 0xee350e2
je 0x1000ada1
cmp dword [ebp - 0x68], 0
je 0x1000ada1
mov dword [ebp - 0x6fc], 1
jmp 0x1000ada8
and dword [ebp - 0x6fc], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1364]
cmp dword [ebp - 0x6fc], eax
jg 0x1000adc8
mov dword [ebp - 0xd28], 1
jmp 0x1000adcf
and dword [ebp - 0xd28], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1364]
cmp dword [ebp - 0xd28], eax
jg 0x1000adf0
mov dword [ebp - 0x704], 1
jmp 0x1000adf7
and dword [ebp - 0x704], 0
cmp dword [ebp - 0x704], 0xc7f
jl 0x1000ae0f
mov dword [ebp - 0xd30], 1
jmp 0x1000ae16
and dword [ebp - 0xd30], 0
cmp dword [ebp - 0xd30], 0xb4763523
jbe 0x1000ae2e
mov dword [ebp - 0x70c], 1
jmp 0x1000ae35
and dword [ebp - 0x70c], 0
mov eax, dword [ebp - 0x1230]
add eax, dword [ebp - 0x70c]
je 0x1000ae56
push 0xfffffffffffffffc
pop eax
test eax, eax
je 0x1000ae56
mov dword [ebp - 0xd38], 1
jmp 0x1000ae5d
and dword [ebp - 0xd38], 0
mov eax, dword [ebp - 0x10f0]
cmp dword [ebp - 0xd38], eax
jl 0x1000ae77
mov dword [ebp - 0x1324], 1
jmp 0x1000ae7e
and dword [ebp - 0x1324], 0
mov eax, dword [ebp - 0x10f8]
mov dword [ebp - 0x1574], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1384], 0
jne 0x1000aeb5
mov eax, 0x38e0
test eax, eax
jne 0x1000aeb5
cmp dword [ebp - 0x350], 0
jne 0x1000aeb5
and dword [ebp - 0x714], 0
jmp 0x1000aebf
mov dword [ebp - 0x714], 1
mov eax, dword [ebp - 0x714]
mov dword [ebp - 0x350], eax
cmp dword [ebp - 0x350], 0
jne 0x1000aee6
cmp dword [ebp - 0x350], 0
jne 0x1000aee6
and dword [ebp - 0xd40], 0
jmp 0x1000aef0
mov dword [ebp - 0xd40], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xd40]
mov dword [ebp + eax - 0x1384], ecx
mov dword [ebp - 0x90], 0x8905154
mov dword [ebp - 0x1100], 0xfff9
mov dword [ebp - 0x12e0], 3
mov dword [ebp - 0x1240], 0xcf455dbf
mov dword [ebp - 0x448], 0xfffffff7
mov dword [ebp - 0x148], 0
jmp 0x1000af4e
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 4
jge 0x1000af6a
mov eax, dword [ebp - 0x148]
mov dword [ebp + eax*4 - 0x1354], 0xffffffff
jmp 0x1000af41
mov dword [ebp - 0x148], 0
jmp 0x1000af83
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 2
jge 0x1000af9f
mov eax, dword [ebp - 0x148]
mov dword [ebp + eax*4 - 0x1404], 0xdcb0c7b2
jmp 0x1000af76
mov eax, dword [ebp - 0x90]
cmp dword [ebp - 0x90], eax
jne 0x1000afb9
mov dword [ebp - 0x71c], 1
jmp 0x1000afc0
and dword [ebp - 0x71c], 0
mov eax, dword [ebp - 0x90]
cmp dword [ebp - 0x71c], eax
je 0x1000afda
mov dword [ebp - 0xd60], 1
jmp 0x1000afe1
and dword [ebp - 0xd60], 0
cmp dword [ebp - 0x90], 0
jl 0x1000aff6
mov dword [ebp - 0xd48], 1
jmp 0x1000affd
and dword [ebp - 0xd48], 0
mov eax, dword [ebp - 0xd48]
sub eax, dword [ebp - 0x90]
cmp eax, dword [ebp - 0x90]
je 0x1000b01d
mov dword [ebp - 0x724], 1
jmp 0x1000b024
and dword [ebp - 0x724], 0
mov eax, dword [ebp - 0x90]
cmp dword [ebp - 0x724], eax
jne 0x1000b03e
mov dword [ebp - 0xd50], 1
jmp 0x1000b045
and dword [ebp - 0xd50], 0
mov eax, dword [ebp - 0x90]
cmp dword [ebp - 0xd50], eax
je 0x1000b05f
mov dword [ebp - 0x72c], 1
jmp 0x1000b066
and dword [ebp - 0x72c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1354]
cmp dword [ebp - 0x72c], eax
jl 0x1000b086
mov dword [ebp - 0xd58], 1
jmp 0x1000b08d
and dword [ebp - 0xd58], 0
mov eax, dword [ebp - 0x90]
add eax, dword [ebp - 0xd58]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x1354]
jne 0x1000b0b3
mov dword [ebp - 0x734], 1
jmp 0x1000b0ba
and dword [ebp - 0x734], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x1354]
cmp dword [ebp - 0x734], eax
jne 0x1000b0db
mov dword [ebp - 0x73c], 1
jmp 0x1000b0e2
and dword [ebp - 0x73c], 0
mov eax, dword [ebp - 0xd60]
cmp eax, dword [ebp - 0x73c]
jge 0x1000b102
cmp dword [ebp - 0x90], 0
jne 0x1000b102
and dword [ebp - 0x1238], 0
jmp 0x1000b10c
mov dword [ebp - 0x1238], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1354]
sub eax, 0xee350e2
je 0x1000b134
cmp dword [ebp - 0x90], 0
je 0x1000b134
mov dword [ebp - 0xd68], 1
jmp 0x1000b13b
and dword [ebp - 0xd68], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1354]
cmp dword [ebp - 0xd68], eax
jg 0x1000b15b
mov dword [ebp - 0x744], 1
jmp 0x1000b162
and dword [ebp - 0x744], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1354]
cmp dword [ebp - 0x744], eax
jg 0x1000b183
mov dword [ebp - 0xd70], 1
jmp 0x1000b18a
and dword [ebp - 0xd70], 0
cmp dword [ebp - 0xd70], 0xc7f
jl 0x1000b1a2
mov dword [ebp - 0x74c], 1
jmp 0x1000b1a9
and dword [ebp - 0x74c], 0
cmp dword [ebp - 0x74c], 0xb4763523
jbe 0x1000b1c1
mov dword [ebp - 0xd78], 1
jmp 0x1000b1c8
and dword [ebp - 0xd78], 0
mov eax, dword [ebp - 0x1100]
add eax, dword [ebp - 0xd78]
je 0x1000b1e9
push 0xfffffffffffffffc
pop eax
test eax, eax
je 0x1000b1e9
mov dword [ebp - 0x754], 1
jmp 0x1000b1f0
and dword [ebp - 0x754], 0
mov eax, dword [ebp - 0x12e0]
cmp dword [ebp - 0x754], eax
jl 0x1000b20a
mov dword [ebp - 0x1108], 1
jmp 0x1000b211
and dword [ebp - 0x1108], 0
mov eax, dword [ebp - 0x1240]
mov dword [ebp - 0x157c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1404], 0
jne 0x1000b248
mov eax, 0x38e0
test eax, eax
jne 0x1000b248
cmp dword [ebp - 0x448], 0
jne 0x1000b248
and dword [ebp - 0xd80], 0
jmp 0x1000b252
mov dword [ebp - 0xd80], 1
mov eax, dword [ebp - 0xd80]
mov dword [ebp - 0x448], eax
cmp dword [ebp - 0x448], 0
jne 0x1000b279
cmp dword [ebp - 0x448], 0
jne 0x1000b279
and dword [ebp - 0x75c], 0
jmp 0x1000b283
mov dword [ebp - 0x75c], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x75c]
mov dword [ebp + eax - 0x1404], ecx
mov dword [ebp - 0x70], 0x8905154
mov dword [ebp - 0x1298], 0xfff9
mov dword [ebp - 0x1118], 3
mov dword [ebp - 0x1120], 0xcf455dbf
mov dword [ebp - 0x358], 0xfffffff7
mov dword [ebp - 0x110], 0
jmp 0x1000b2de
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 4
jge 0x1000b2fa
mov eax, dword [ebp - 0x110]
mov dword [ebp + eax*4 - 0x1344], 0xffffffff
jmp 0x1000b2d1
mov dword [ebp - 0x110], 0
jmp 0x1000b313
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 2
jge 0x1000b32f
mov eax, dword [ebp - 0x110]
mov dword [ebp + eax*4 - 0x13bc], 0xdcb0c7b2
jmp 0x1000b306
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x70], eax
jne 0x1000b343
mov dword [ebp - 0xd88], 1
jmp 0x1000b34a
and dword [ebp - 0xd88], 0
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0xd88], eax
je 0x1000b361
mov dword [ebp - 0x77c], 1
jmp 0x1000b368
and dword [ebp - 0x77c], 0
cmp dword [ebp - 0x70], 0
jl 0x1000b37a
mov dword [ebp - 0x764], 1
jmp 0x1000b381
and dword [ebp - 0x764], 0
mov eax, dword [ebp - 0x764]
sub eax, dword [ebp - 0x70]
cmp eax, dword [ebp - 0x70]
je 0x1000b39b
mov dword [ebp - 0xd90], 1
jmp 0x1000b3a2
and dword [ebp - 0xd90], 0
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0xd90], eax
jne 0x1000b3b9
mov dword [ebp - 0x76c], 1
jmp 0x1000b3c0
and dword [ebp - 0x76c], 0
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x76c], eax
je 0x1000b3d7
mov dword [ebp - 0xd98], 1
jmp 0x1000b3de
and dword [ebp - 0xd98], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1344]
cmp dword [ebp - 0xd98], eax
jl 0x1000b3fe
mov dword [ebp - 0x774], 1
jmp 0x1000b405
and dword [ebp - 0x774], 0
mov eax, dword [ebp - 0x70]
add eax, dword [ebp - 0x774]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x1344]
jne 0x1000b428
mov dword [ebp - 0xda0], 1
jmp 0x1000b42f
and dword [ebp - 0xda0], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x1344]
cmp dword [ebp - 0xda0], eax
jne 0x1000b450
mov dword [ebp - 0xda8], 1
jmp 0x1000b457
and dword [ebp - 0xda8], 0
mov eax, dword [ebp - 0x77c]
cmp eax, dword [ebp - 0xda8]
jge 0x1000b474
cmp dword [ebp - 0x70], 0
jne 0x1000b474
and dword [ebp - 0x1110], 0
jmp 0x1000b47e
mov dword [ebp - 0x1110], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1344]
sub eax, 0xee350e2
je 0x1000b4a3
cmp dword [ebp - 0x70], 0
je 0x1000b4a3
mov dword [ebp - 0x784], 1
jmp 0x1000b4aa
and dword [ebp - 0x784], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1344]
cmp dword [ebp - 0x784], eax
jg 0x1000b4ca
mov dword [ebp - 0xdb0], 1
jmp 0x1000b4d1
and dword [ebp - 0xdb0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1344]
cmp dword [ebp - 0xdb0], eax
jg 0x1000b4f2
mov dword [ebp - 0x78c], 1
jmp 0x1000b4f9
and dword [ebp - 0x78c], 0
cmp dword [ebp - 0x78c], 0xc7f
jl 0x1000b511
mov dword [ebp - 0xdb8], 1
jmp 0x1000b518
and dword [ebp - 0xdb8], 0
cmp dword [ebp - 0xdb8], 0xb4763523
jbe 0x1000b530
mov dword [ebp - 0x794], 1
jmp 0x1000b537
and dword [ebp - 0x794], 0
mov eax, dword [ebp - 0x1298]
add eax, dword [ebp - 0x794]
je 0x1000b558
push 0xfffffffffffffffc
pop eax
test eax, eax
je 0x1000b558
mov dword [ebp - 0xdc0], 1
jmp 0x1000b55f
and dword [ebp - 0xdc0], 0
mov eax, dword [ebp - 0x1118]
cmp dword [ebp - 0xdc0], eax
jl 0x1000b579
mov dword [ebp - 0x1248], 1
jmp 0x1000b580
and dword [ebp - 0x1248], 0
mov eax, dword [ebp - 0x1120]
mov dword [ebp - 0x1584], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x13bc], 0
jne 0x1000b5b7
mov eax, 0x38e0
test eax, eax
jne 0x1000b5b7
cmp dword [ebp - 0x358], 0
jne 0x1000b5b7
and dword [ebp - 0x79c], 0
jmp 0x1000b5c1
mov dword [ebp - 0x79c], 1
mov eax, dword [ebp - 0x79c]
mov dword [ebp - 0x358], eax
cmp dword [ebp - 0x358], 0
jne 0x1000b5e8
cmp dword [ebp - 0x358], 0
jne 0x1000b5e8
and dword [ebp - 0xdc8], 0
jmp 0x1000b5f2
mov dword [ebp - 0xdc8], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xdc8]
mov dword [ebp + eax - 0x13bc], ecx
mov dword [ebp - 0xc4], 6
mov dword [ebp - 0x194], 0x2c5b641b
mov dword [ebp - 0xde8], 0
mov dword [ebp - 0x158], 0xffff
mov dword [ebp - 0x1250], 0xa8b742d6
mov dword [ebp - 0x1130], 0x4fc7bc07
mov dword [ebp - 0xc4], 1
mov dword [ebp - 0xc4], 0xffffffea
jmp 0x1000b664
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0x13
je 0x1000bb23
mov dword [ebp - 0x59c], 0xffffffff
mov dword [ebp - 0x450], 0x173bf38c
mov dword [ebp - 0x1128], 0xfffffff7
mov dword [ebp - 0x7d4], 0xffffffff
mov dword [ebp - 0x7ac], 0x14ba09a1
cmp dword [ebp - 0x59c], 0x19570a50
jg 0x1000b6bb
mov dword [ebp - 0x7a4], 1
jmp 0x1000b6c2
and dword [ebp - 0x7a4], 0
mov eax, dword [ebp - 0xc4]
add eax, dword [ebp - 0x7a4]
cmp dword [ebp - 0x450], eax
jle 0x1000b6e2
mov dword [ebp - 0xdd0], 1
jmp 0x1000b6e9
and dword [ebp - 0xdd0], 0
mov eax, dword [ebp - 0x59c]
cmp eax, dword [ebp - 0xdd0]
jne 0x1000b959
mov dword [ebp - 0x13e4], 2
mov dword [ebp - 0x13e0], 2
mov dword [ebp - 0x13dc], 2
mov dword [ebp - 0x13d8], 2
mov dword [ebp - 0x30c], 0x4d2fc5c3
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x13e4]
mov dword [ebp - 0x158c], eax
cmp dword [ebp - 0xc4], 0
jne 0x1000b7dd
mov eax, dword [ebp - 0x7ac]
inc eax
mov dword [ebp - 0x7ac], eax
mov eax, dword [ebp - 0xc4]
add eax, 0xa
cmp eax, 1
jne 0x1000b773
mov dword [ebp - 0xdd8], 1
jmp 0x1000b77a
and dword [ebp - 0xdd8], 0
mov eax, dword [ebp - 0xdd8]
neg eax
cmp eax, dword [ebp - 0x450]
je 0x1000b796
mov dword [ebp - 0x7b4], 1
jmp 0x1000b79d
and dword [ebp - 0x7b4], 0
imul eax, dword [ebp - 0x7b4], 0x6232
cmp eax, dword [ebp - 0x7d4]
jge 0x1000b7c1
cmp dword [ebp - 0x30c], 0
jne 0x1000b7c1
and dword [ebp - 0xde0], 0
jmp 0x1000b7cb
mov dword [ebp - 0xde0], 1
cmp dword [ebp - 0xde0], 0xffffffff
jge 0x1000b7dd
and dword [ebp - 0x7bc], 0
jmp 0x1000b7e7
mov dword [ebp - 0x7bc], 1
mov eax, dword [ebp - 0x30c]
imul eax, dword [ebp - 0x7bc]
push 4
pop ecx
shl ecx, 1
imul eax, dword [ebp + ecx - 0x13e4]
mov dword [ebp - 0xde8], eax
mov eax, dword [ebp - 0xde8]
mov dword [ebp - 0x30c], eax
cmp dword [ebp - 0x30c], 0
jne 0x1000b82e
cmp dword [ebp - 0x30c], 0
jne 0x1000b82e
and dword [ebp - 0x12ac], 0
jmp 0x1000b838
mov dword [ebp - 0x12ac], 1
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x1594], eax
mov eax, dword [ebp - 0x59c]
add eax, dword [ebp - 0x158]
cmp eax, 2
jae 0x1000b861
mov dword [ebp - 0x7c4], 1
jmp 0x1000b868
and dword [ebp - 0x7c4], 0
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x194], eax
mov eax, dword [ebp - 0x194]
cmp eax, dword [ebp - 0x7c4]
je 0x1000b88e
mov dword [ebp - 0xdf0], 1
jmp 0x1000b895
and dword [ebp - 0xdf0], 0
mov eax, dword [ebp - 0x158]
cmp dword [ebp - 0xdf0], eax
jge 0x1000b8af
mov dword [ebp - 0x7cc], 1
jmp 0x1000b8b6
and dword [ebp - 0x7cc], 0
cmp dword [ebp - 0x7cc], 0xb0f4
jge 0x1000b8ce
mov dword [ebp - 0xdf8], 1
jmp 0x1000b8d5
and dword [ebp - 0xdf8], 0
mov eax, dword [ebp - 0xdf8]
mov dword [ebp - 0x1128], eax
cmp dword [ebp - 0x7d4], 0xfffffff7
jle 0x1000b8f6
mov dword [ebp - 0xe00], 1
jmp 0x1000b8fd
and dword [ebp - 0xe00], 0
mov eax, dword [ebp - 0x450]
cmp dword [ebp - 0xe00], eax
jle 0x1000b917
mov dword [ebp - 0x7dc], 1
jmp 0x1000b91e
and dword [ebp - 0x7dc], 0
cmp dword [ebp - 0x7dc], 0
jae 0x1000b933
mov dword [ebp - 0xe08], 1
jmp 0x1000b93a
and dword [ebp - 0xe08], 0
mov eax, dword [ebp - 0xe08]
mov dword [ebp - 0x1250], eax
cmp dword [ebp - 0x194], 0
je 0x1000b954
jmp 0x1000bb23
jmp 0x1000bb1e
mov dword [ebp - 0x130], 0
jmp 0x1000b972
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 2
jge 0x1000b98e
mov eax, dword [ebp - 0x130]
mov dword [ebp + eax*4 - 0x1434], 0xfffffff8
jmp 0x1000b965
mov dword [ebp - 0x130], 0
jmp 0x1000b9a7
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 3
jge 0x1000b9c3
mov eax, dword [ebp - 0x130]
mov dword [ebp + eax*4 - 0x18d0], 0xffffffff
jmp 0x1000b99a
mov dword [ebp - 0x158], 0
jmp 0x1000b9dc
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 1
jg 0x1000bb1e
mov dword [ebp - 0x7f4], 0x44bf8e16
mov dword [ebp - 0xe28], 0xffffffff
mov dword [ebp - 0x194], 1
jmp 0x1000ba16
mov eax, dword [ebp - 0x194]
dec eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 0
jl 0x1000bb19
or eax, 0xffffffff
je 0x1000bb01
mov eax, dword [ebp - 0x158]
cmp dword [ebp + eax*4 - 0x1434], 0x447f
jne 0x1000ba4b
mov dword [ebp - 0x7e4], 1
jmp 0x1000ba52
and dword [ebp - 0x7e4], 0
mov eax, dword [ebp - 0x7e4]
add eax, dword [ebp - 0x450]
mov dword [ebp - 0xe10], eax
mov eax, dword [ebp - 0x158]
mov ecx, dword [ebp - 0xe10]
mov dword [ebp + eax*4 - 0x1434], ecx
cmp dword [ebp - 0xe10], 0xfffffff7
jbe 0x1000ba8c
mov dword [ebp - 0x7ec], 1
jmp 0x1000ba93
and dword [ebp - 0x7ec], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x18d0]
cmp dword [ebp - 0x7ec], eax
jl 0x1000bab3
mov dword [ebp - 0xe18], 1
jmp 0x1000baba
and dword [ebp - 0xe18], 0
mov eax, dword [ebp - 0xe18]
mov dword [ebp - 0x7f4], eax
mov eax, dword [ebp - 0x1130]
cmp dword [ebp - 0x7f4], eax
jge 0x1000bae0
mov dword [ebp - 0xe20], 1
jmp 0x1000bae7
and dword [ebp - 0xe20], 0
mov eax, dword [ebp - 0xe28]
add eax, dword [ebp - 0xe20]
je 0x1000bb01
mov dword [ebp - 0x7fc], 1
jmp 0x1000bb08
and dword [ebp - 0x7fc], 0
mov eax, dword [ebp - 0x7fc]
mov dword [ebp - 0xe28], eax
jmp 0x1000ba09
jmp 0x1000b9cf
jmp 0x1000b657
mov dword [ebp - 0xa0], 6
mov dword [ebp - 0x19c], 0x2c5b641b
mov dword [ebp - 0xe48], 0
mov dword [ebp - 0x178], 0xffff
mov dword [ebp - 0x1258], 0xa8b742d6
mov dword [ebp - 0x1140], 0x4fc7bc07
mov dword [ebp - 0xa0], 1
mov dword [ebp - 0xa0], 0xffffffea
jmp 0x1000bb82
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0x13
je 0x1000c041
mov dword [ebp - 0x560], 0xffffffff
mov dword [ebp - 0x360], 0x173bf38c
mov dword [ebp - 0x1138], 0xfffffff7
mov dword [ebp - 0x834], 0xffffffff
mov dword [ebp - 0x80c], 0x14ba09a1
cmp dword [ebp - 0x560], 0x19570a50
jg 0x1000bbd9
mov dword [ebp - 0x804], 1
jmp 0x1000bbe0
and dword [ebp - 0x804], 0
mov eax, dword [ebp - 0xa0]
add eax, dword [ebp - 0x804]
cmp dword [ebp - 0x360], eax
jle 0x1000bc00
mov dword [ebp - 0xe30], 1
jmp 0x1000bc07
and dword [ebp - 0xe30], 0
mov eax, dword [ebp - 0x560]
cmp eax, dword [ebp - 0xe30]
jne 0x1000be77
mov dword [ebp - 0x13fc], 2
mov dword [ebp - 0x13f8], 2
mov dword [ebp - 0x13f4], 2
mov dword [ebp - 0x13f0], 2
mov dword [ebp - 0x2a0], 0x4d2fc5c3
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x13fc]
mov dword [ebp - 0x159c], eax
cmp dword [ebp - 0xa0], 0
jne 0x1000bcfb
mov eax, dword [ebp - 0x80c]
inc eax
mov dword [ebp - 0x80c], eax
mov eax, dword [ebp - 0xa0]
add eax, 0xa
cmp eax, 1
jne 0x1000bc91
mov dword [ebp - 0xe38], 1
jmp 0x1000bc98
and dword [ebp - 0xe38], 0
mov eax, dword [ebp - 0xe38]
neg eax
cmp eax, dword [ebp - 0x360]
je 0x1000bcb4
mov dword [ebp - 0x814], 1
jmp 0x1000bcbb
and dword [ebp - 0x814], 0
imul eax, dword [ebp - 0x814], 0x6232
cmp eax, dword [ebp - 0x834]
jge 0x1000bcdf
cmp dword [ebp - 0x2a0], 0
jne 0x1000bcdf
and dword [ebp - 0xe40], 0
jmp 0x1000bce9
mov dword [ebp - 0xe40], 1
cmp dword [ebp - 0xe40], 0xffffffff
jge 0x1000bcfb
and dword [ebp - 0x81c], 0
jmp 0x1000bd05
mov dword [ebp - 0x81c], 1
mov eax, dword [ebp - 0x2a0]
imul eax, dword [ebp - 0x81c]
push 4
pop ecx
shl ecx, 1
imul eax, dword [ebp + ecx - 0x13fc]
mov dword [ebp - 0xe48], eax
mov eax, dword [ebp - 0xe48]
mov dword [ebp - 0x2a0], eax
cmp dword [ebp - 0x2a0], 0
jne 0x1000bd4c
cmp dword [ebp - 0x2a0], 0
jne 0x1000bd4c
and dword [ebp - 0x1294], 0
jmp 0x1000bd56
mov dword [ebp - 0x1294], 1
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x15a4], eax
mov eax, dword [ebp - 0x560]
add eax, dword [ebp - 0x178]
cmp eax, 2
jae 0x1000bd7f
mov dword [ebp - 0x824], 1
jmp 0x1000bd86
and dword [ebp - 0x824], 0
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x19c], eax
mov eax, dword [ebp - 0x19c]
cmp eax, dword [ebp - 0x824]
je 0x1000bdac
mov dword [ebp - 0xe50], 1
jmp 0x1000bdb3
and dword [ebp - 0xe50], 0
mov eax, dword [ebp - 0x178]
cmp dword [ebp - 0xe50], eax
jge 0x1000bdcd
mov dword [ebp - 0x82c], 1
jmp 0x1000bdd4
and dword [ebp - 0x82c], 0
cmp dword [ebp - 0x82c], 0xb0f4
jge 0x1000bdec
mov dword [ebp - 0xe58], 1
jmp 0x1000bdf3
and dword [ebp - 0xe58], 0
mov eax, dword [ebp - 0xe58]
mov dword [ebp - 0x1138], eax
cmp dword [ebp - 0x834], 0xfffffff7
jle 0x1000be14
mov dword [ebp - 0xe60], 1
jmp 0x1000be1b
and dword [ebp - 0xe60], 0
mov eax, dword [ebp - 0x360]
cmp dword [ebp - 0xe60], eax
jle 0x1000be35
mov dword [ebp - 0x83c], 1
jmp 0x1000be3c
and dword [ebp - 0x83c], 0
cmp dword [ebp - 0x83c], 0
jae 0x1000be51
mov dword [ebp - 0xe68], 1
jmp 0x1000be58
and dword [ebp - 0xe68], 0
mov eax, dword [ebp - 0xe68]
mov dword [ebp - 0x1258], eax
cmp dword [ebp - 0x19c], 0
je 0x1000be72
jmp 0x1000c041
jmp 0x1000c03c
mov dword [ebp - 0xe0], 0
jmp 0x1000be90
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 2
jge 0x1000beac
mov eax, dword [ebp - 0xe0]
mov dword [ebp + eax*4 - 0x13d4], 0xfffffff8
jmp 0x1000be83
mov dword [ebp - 0xe0], 0
jmp 0x1000bec5
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 3
jge 0x1000bee1
mov eax, dword [ebp - 0xe0]
mov dword [ebp + eax*4 - 0x18e8], 0xffffffff
jmp 0x1000beb8
mov dword [ebp - 0x178], 0
jmp 0x1000befa
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 1
jg 0x1000c03c
mov dword [ebp - 0x854], 0x44bf8e16
mov dword [ebp - 0xe88], 0xffffffff
mov dword [ebp - 0x19c], 1
jmp 0x1000bf34
mov eax, dword [ebp - 0x19c]
dec eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 0
jl 0x1000c037
or eax, 0xffffffff
je 0x1000c01f
mov eax, dword [ebp - 0x178]
cmp dword [ebp + eax*4 - 0x13d4], 0x447f
jne 0x1000bf69
mov dword [ebp - 0x844], 1
jmp 0x1000bf70
and dword [ebp - 0x844], 0
mov eax, dword [ebp - 0x844]
add eax, dword [ebp - 0x360]
mov dword [ebp - 0xe70], eax
mov eax, dword [ebp - 0x178]
mov ecx, dword [ebp - 0xe70]
mov dword [ebp + eax*4 - 0x13d4], ecx
cmp dword [ebp - 0xe70], 0xfffffff7
jbe 0x1000bfaa
mov dword [ebp - 0x84c], 1
jmp 0x1000bfb1
and dword [ebp - 0x84c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x18e8]
cmp dword [ebp - 0x84c], eax
jl 0x1000bfd1
mov dword [ebp - 0xe78], 1
jmp 0x1000bfd8
and dword [ebp - 0xe78], 0
mov eax, dword [ebp - 0xe78]
mov dword [ebp - 0x854], eax
mov eax, dword [ebp - 0x1140]
cmp dword [ebp - 0x854], eax
jge 0x1000bffe
mov dword [ebp - 0xe80], 1
jmp 0x1000c005
and dword [ebp - 0xe80], 0
mov eax, dword [ebp - 0xe88]
add eax, dword [ebp - 0xe80]
je 0x1000c01f
mov dword [ebp - 0x85c], 1
jmp 0x1000c026
and dword [ebp - 0x85c], 0
mov eax, dword [ebp - 0x85c]
mov dword [ebp - 0xe88], eax
jmp 0x1000bf27
jmp 0x1000beed
jmp 0x1000bb75
mov dword [ebp - 0xb4], 6
mov dword [ebp - 0x1a4], 0x2c5b641b
mov dword [ebp - 0xea8], 0
mov dword [ebp - 0x160], 0xffff
mov dword [ebp - 0x1260], 0xa8b742d6
mov dword [ebp - 0x1150], 0x4fc7bc07
mov dword [ebp - 0xb4], 1
mov dword [ebp - 0xb4], 0xffffffea
jmp 0x1000c0a0
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0x13
je 0x1000c55f
mov dword [ebp - 0x4b0], 0xffffffff
mov dword [ebp - 0x458], 0x173bf38c
mov dword [ebp - 0x1148], 0xfffffff7
mov dword [ebp - 0x894], 0xffffffff
mov dword [ebp - 0x86c], 0x14ba09a1
cmp dword [ebp - 0x4b0], 0x19570a50
jg 0x1000c0f7
mov dword [ebp - 0x864], 1
jmp 0x1000c0fe
and dword [ebp - 0x864], 0
mov eax, dword [ebp - 0xb4]
add eax, dword [ebp - 0x864]
cmp dword [ebp - 0x458], eax
jle 0x1000c11e
mov dword [ebp - 0xe90], 1
jmp 0x1000c125
and dword [ebp - 0xe90], 0
mov eax, dword [ebp - 0x4b0]
cmp eax, dword [ebp - 0xe90]
jne 0x1000c395
mov dword [ebp - 0x1414], 2
mov dword [ebp - 0x1410], 2
mov dword [ebp - 0x140c], 2
mov dword [ebp - 0x1408], 2
mov dword [ebp - 0x320], 0x4d2fc5c3
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1414]
mov dword [ebp - 0x16e8], eax
cmp dword [ebp - 0xb4], 0
jne 0x1000c219
mov eax, dword [ebp - 0x86c]
inc eax
mov dword [ebp - 0x86c], eax
mov eax, dword [ebp - 0xb4]
add eax, 0xa
cmp eax, 1
jne 0x1000c1af
mov dword [ebp - 0xe98], 1
jmp 0x1000c1b6
and dword [ebp - 0xe98], 0
mov eax, dword [ebp - 0xe98]
neg eax
cmp eax, dword [ebp - 0x458]
je 0x1000c1d2
mov dword [ebp - 0x874], 1
jmp 0x1000c1d9
and dword [ebp - 0x874], 0
imul eax, dword [ebp - 0x874], 0x6232
cmp eax, dword [ebp - 0x894]
jge 0x1000c1fd
cmp dword [ebp - 0x320], 0
jne 0x1000c1fd
and dword [ebp - 0xea0], 0
jmp 0x1000c207
mov dword [ebp - 0xea0], 1
cmp dword [ebp - 0xea0], 0xffffffff
jge 0x1000c219
and dword [ebp - 0x87c], 0
jmp 0x1000c223
mov dword [ebp - 0x87c], 1
mov eax, dword [ebp - 0x320]
imul eax, dword [ebp - 0x87c]
push 4
pop ecx
shl ecx, 1
imul eax, dword [ebp + ecx - 0x1414]
mov dword [ebp - 0xea8], eax
mov eax, dword [ebp - 0xea8]
mov dword [ebp - 0x320], eax
cmp dword [ebp - 0x320], 0
jne 0x1000c26a
cmp dword [ebp - 0x320], 0
jne 0x1000c26a
and dword [ebp - 0x12bc], 0
jmp 0x1000c274
mov dword [ebp - 0x12bc], 1
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0x16f0], eax
mov eax, dword [ebp - 0x4b0]
add eax, dword [ebp - 0x160]
cmp eax, 2
jae 0x1000c29d
mov dword [ebp - 0x884], 1
jmp 0x1000c2a4
and dword [ebp - 0x884], 0
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0x1a4], eax
mov eax, dword [ebp - 0x1a4]
cmp eax, dword [ebp - 0x884]
je 0x1000c2ca
mov dword [ebp - 0xeb0], 1
jmp 0x1000c2d1
and dword [ebp - 0xeb0], 0
mov eax, dword [ebp - 0x160]
cmp dword [ebp - 0xeb0], eax
jge 0x1000c2eb
mov dword [ebp - 0x88c], 1
jmp 0x1000c2f2
and dword [ebp - 0x88c], 0
cmp dword [ebp - 0x88c], 0xb0f4
jge 0x1000c30a
mov dword [ebp - 0xeb8], 1
jmp 0x1000c311
and dword [ebp - 0xeb8], 0
mov eax, dword [ebp - 0xeb8]
mov dword [ebp - 0x1148], eax
cmp dword [ebp - 0x894], 0xfffffff7
jle 0x1000c332
mov dword [ebp - 0xec0], 1
jmp 0x1000c339
and dword [ebp - 0xec0], 0
mov eax, dword [ebp - 0x458]
cmp dword [ebp - 0xec0], eax
jle 0x1000c353
mov dword [ebp - 0x89c], 1
jmp 0x1000c35a
and dword [ebp - 0x89c], 0
cmp dword [ebp - 0x89c], 0
jae 0x1000c36f
mov dword [ebp - 0xec8], 1
jmp 0x1000c376
and dword [ebp - 0xec8], 0
mov eax, dword [ebp - 0xec8]
mov dword [ebp - 0x1260], eax
cmp dword [ebp - 0x1a4], 0
je 0x1000c390
jmp 0x1000c55f
jmp 0x1000c55a
mov dword [ebp - 0x118], 0
jmp 0x1000c3ae
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 2
jge 0x1000c3ca
mov eax, dword [ebp - 0x118]
mov dword [ebp + eax*4 - 0x141c], 0xfffffff8
jmp 0x1000c3a1
mov dword [ebp - 0x118], 0
jmp 0x1000c3e3
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 3
jge 0x1000c3ff
mov eax, dword [ebp - 0x118]
mov dword [ebp + eax*4 - 0x1900], 0xffffffff
jmp 0x1000c3d6
mov dword [ebp - 0x160], 0
jmp 0x1000c418
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 1
jg 0x1000c55a
mov dword [ebp - 0x8b4], 0x44bf8e16
mov dword [ebp - 0xee8], 0xffffffff
mov dword [ebp - 0x1a4], 1
jmp 0x1000c452
mov eax, dword [ebp - 0x1a4]
dec eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 0
jl 0x1000c555
or eax, 0xffffffff
je 0x1000c53d
mov eax, dword [ebp - 0x160]
cmp dword [ebp + eax*4 - 0x141c], 0x447f
jne 0x1000c487
mov dword [ebp - 0x8a4], 1
jmp 0x1000c48e
and dword [ebp - 0x8a4], 0
mov eax, dword [ebp - 0x8a4]
add eax, dword [ebp - 0x458]
mov dword [ebp - 0xed0], eax
mov eax, dword [ebp - 0x160]
mov ecx, dword [ebp - 0xed0]
mov dword [ebp + eax*4 - 0x141c], ecx
cmp dword [ebp - 0xed0], 0xfffffff7
jbe 0x1000c4c8
mov dword [ebp - 0x8ac], 1
jmp 0x1000c4cf
and dword [ebp - 0x8ac], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1900]
cmp dword [ebp - 0x8ac], eax
jl 0x1000c4ef
mov dword [ebp - 0xed8], 1
jmp 0x1000c4f6
and dword [ebp - 0xed8], 0
mov eax, dword [ebp - 0xed8]
mov dword [ebp - 0x8b4], eax
mov eax, dword [ebp - 0x1150]
cmp dword [ebp - 0x8b4], eax
jge 0x1000c51c
mov dword [ebp - 0xee0], 1
jmp 0x1000c523
and dword [ebp - 0xee0], 0
mov eax, dword [ebp - 0xee8]
add eax, dword [ebp - 0xee0]
je 0x1000c53d
and dword [ebp - 0x8bc], 0
mov eax, dword [ebp - 0x8bc]
mov dword [ebp - 0xee8], eax
jmp 0x1000c445
jmp 0x1000c40b
jmp 0x1000c093
mov dword [ebp - 0x24], 0x960f57a7
mov dword [ebp - 0x1158], 0x60813c27
mov dword [ebp - 0x368], 0
jmp 0x1000c589
mov eax, dword [ebp - 0x368]
inc eax
mov dword [ebp - 0x368], eax
cmp dword [ebp - 0x368], 1
jge 0x1000c5a5
mov eax, dword [ebp - 0x368]
mov dword [ebp + eax*4 - 0xd4], 0x862f
jmp 0x1000c57c
mov dword [ebp - 0x24], 0
jmp 0x1000c5b5
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jl 0x1000c902
mov dword [ebp - 0x12c4], 0x5ed9a924
mov dword [ebp - 0x4c0], 0
mov dword [ebp - 0x1268], 0xffffffff
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0xd4]
mov dword [ebp + ecx*4 - 0xd4], eax
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x12c4]
cmp dword [ebp + eax*4 - 0xd4], ecx
jne 0x1000c65c
mov dword [ebp - 0x528], 0xffffffff
mov eax, dword [ebp - 0x528]
mov dword [ebp - 0x1728], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0xd4]
mov dword [ebp - 0x1730], eax
cmp dword [ebp - 0x528], 0
je 0x1000c644
cmp dword [ebp - 0x24], 0
je 0x1000c644
mov dword [ebp - 0x8c4], 1
jmp 0x1000c64b
and dword [ebp - 0x8c4], 0
mov eax, dword [ebp - 0x8c4]
mov dword [ebp - 0x528], eax
jmp 0x1000c8fd
mov dword [ebp - 0x580], 4
mov dword [ebp - 0xef0], 0xac3d6c1d
mov dword [ebp - 0x8ec], 0x402be2ff
mov dword [ebp - 0x140], 0
jmp 0x1000c693
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 2
jge 0x1000c6af
mov eax, dword [ebp - 0x140]
mov dword [ebp + eax*4 - 0x15b0], 4
jmp 0x1000c686
mov dword [ebp - 0x140], 0
jmp 0x1000c6c8
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 3
jge 0x1000c6e4
mov eax, dword [ebp - 0x140]
mov dword [ebp + eax*4 - 0x18ac], 0
jmp 0x1000c6bb
mov eax, dword [ebp - 0x580]
mov dword [ebp - 0x4c0], eax
mov eax, dword [ebp - 0x4c0]
mov dword [ebp - 0xef0], eax
mov eax, dword [ebp - 0xef0]
mov dword [ebp - 0x8cc], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x8cc]
mov dword [ebp + eax - 0x15b0], ecx
cmp dword [ebp - 0x8cc], 0xebfb2c41
ja 0x1000c733
mov dword [ebp - 0xef8], 1
jmp 0x1000c73a
and dword [ebp - 0xef8], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0xd4], 0
je 0x1000c763
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xd4], 0
je 0x1000c763
mov dword [ebp - 0x8d4], 1
jmp 0x1000c76a
and dword [ebp - 0x8d4], 0
mov eax, dword [ebp - 0xef8]
cmp eax, dword [ebp - 0x8d4]
je 0x1000c784
mov dword [ebp - 0xf00], 1
jmp 0x1000c78b
and dword [ebp - 0xf00], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0xf00], eax
jg 0x1000c7a2
mov dword [ebp - 0x4b8], 1
jmp 0x1000c7a9
and dword [ebp - 0x4b8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x4b8]
mov dword [ebp + eax - 0x18ac], ecx
cmp dword [ebp - 0x4b8], 0x4df7b146
jne 0x1000c7d4
mov dword [ebp - 0x8dc], 1
jmp 0x1000c7db
and dword [ebp - 0x8dc], 0
cmp dword [ebp - 0x8dc], 0xd38d
jne 0x1000c7f3
mov dword [ebp - 0xf08], 1
jmp 0x1000c7fa
and dword [ebp - 0xf08], 0
mov eax, dword [ebp - 0xf08]
mov dword [ebp - 0x1158], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0xd4]
mov dword [ebp - 0x1738], eax
mov eax, dword [ebp - 0x580]
mov dword [ebp - 0x1740], eax
cmp dword [ebp - 0x580], 0
jne 0x1000c836
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0xd4], 0
cmp dword [ebp - 0x8ec], 0x4f57b17b
jl 0x1000c84e
jmp 0x1000c5ae
mov dword [ebp - 0x28], 0x960f57a7
mov dword [ebp - 0x12cc], 0x60813c27
mov dword [ebp - 0x460], 0
jmp 0x1000c92c
mov eax, dword [ebp - 0x460]
inc eax
mov dword [ebp - 0x460], eax
cmp dword [ebp - 0x460], 1
jge 0x1000c948
mov eax, dword [ebp - 0x460]
mov dword [ebp + eax*4 - 0xbc], 0x862f
jmp 0x1000c91f
mov dword [ebp - 0x28], 0
jmp 0x1000c958
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jl 0x1000cca5
mov dword [ebp - 0x1160], 0x5ed9a924
mov dword [ebp - 0x4d0], 0
mov dword [ebp - 0x1168], 0xffffffff
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0xbc]
mov dword [ebp + ecx*4 - 0xbc], eax
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x1160]
cmp dword [ebp + eax*4 - 0xbc], ecx
jne 0x1000c9ff
mov dword [ebp - 0x530], 0xffffffff
mov eax, dword [ebp - 0x530]
mov dword [ebp - 0x1748], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0xbc]
mov dword [ebp - 0x1750], eax
cmp dword [ebp - 0x530], 0
je 0x1000c9e7
cmp dword [ebp - 0x28], 0
je 0x1000c9e7
mov dword [ebp - 0x8fc], 1
jmp 0x1000c9ee
and dword [ebp - 0x8fc], 0
mov eax, dword [ebp - 0x8fc]
mov dword [ebp - 0x530], eax
jmp 0x1000cca0
mov dword [ebp - 0x568], 4
mov dword [ebp - 0xf28], 0xac3d6c1d
mov dword [ebp - 0x924], 0x402be2ff
mov dword [ebp - 0xf0], 0
jmp 0x1000ca36
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 2
jge 0x1000ca52
mov eax, dword [ebp - 0xf0]
mov dword [ebp + eax*4 - 0x15bc], 4
jmp 0x1000ca29
mov dword [ebp - 0xf0], 0
jmp 0x1000ca6b
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 3
jge 0x1000ca87
mov eax, dword [ebp - 0xf0]
mov dword [ebp + eax*4 - 0x1918], 0
jmp 0x1000ca5e
mov eax, dword [ebp - 0x568]
mov dword [ebp - 0x4d0], eax
mov eax, dword [ebp - 0x4d0]
mov dword [ebp - 0xf28], eax
mov eax, dword [ebp - 0xf28]
mov dword [ebp - 0x904], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x904]
mov dword [ebp + eax - 0x15bc], ecx
cmp dword [ebp - 0x904], 0xebfb2c41
ja 0x1000cad6
mov dword [ebp - 0xf30], 1
jmp 0x1000cadd
and dword [ebp - 0xf30], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp + eax*4 - 0xbc], 0
je 0x1000cb06
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xbc], 0
je 0x1000cb06
mov dword [ebp - 0x90c], 1
jmp 0x1000cb0d
and dword [ebp - 0x90c], 0
mov eax, dword [ebp - 0xf30]
cmp eax, dword [ebp - 0x90c]
je 0x1000cb27
mov dword [ebp - 0xf38], 1
jmp 0x1000cb2e
and dword [ebp - 0xf38], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0xf38], eax
jg 0x1000cb45
jmp 0x1000c951
mov dword [ebp - 0x2c], 0xfffffffa
mov dword [ebp - 0x3c], 0xffffffff
mov dword [ebp - 0x24c], 0xcd4431fa
mov dword [ebp - 0x1ac], 0x9c4ddb84
mov dword [ebp - 0x538], 0xfffffffc
mov dword [ebp - 0x370], 0xffffffff
cmp dword [ebp - 0x2c], 0
je 0x1000cd2b
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x1768], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
add eax, 0x1454bcd7
cmp dword [ebp - 0x2c], eax
jge 0x1000cd09
mov dword [ebp - 0x1270], 1
jmp 0x1000cd10
and dword [ebp - 0x1270], 0
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x1770], eax
cmp dword [ebp - 0x2c], 0
je 0x1000cd2b
mov dword [ebp - 0x934], 1
jmp 0x1000cd32
and dword [ebp - 0x934], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x934], eax
jge 0x1000cd49
mov dword [ebp - 0xf60], 1
jmp 0x1000cd50
and dword [ebp - 0xf60], 0
push 3
pop eax
sub eax, dword [ebp - 0xf60]
cmp eax, 0x3061ece3
jle 0x1000cd6c
mov dword [ebp - 0x93c], 1
jmp 0x1000cd73
and dword [ebp - 0x93c], 0
cmp dword [ebp - 0x93c], 1
jae 0x1000cd88
mov dword [ebp - 0xf68], 1
jmp 0x1000cd8f
and dword [ebp - 0xf68], 0
mov eax, dword [ebp - 0xf68]
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x1ac], 0
je 0x1000ce2b
cmp dword [ebp - 0x24c], 0
je 0x1000ce2b
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x3c], eax
jge 0x1000cdc5
mov dword [ebp - 0x944], 1
jmp 0x1000cdcc
and dword [ebp - 0x944], 0
mov eax, dword [ebp - 0x1ac]
cmp dword [ebp - 0x944], eax
jge 0x1000cdec
cmp dword [ebp - 0x3c], 0
je 0x1000cdec
and dword [ebp - 0xf70], 0
mov eax, dword [ebp - 0xf70]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x538], eax
mov eax, dword [ebp - 0x538]
add eax, dword [ebp - 0x24c]
cmp dword [ebp - 0x1ac], eax
jle 0x1000ce2b
and dword [ebp - 0x94c], 0
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x94c]
jl 0x1000ce49
mov dword [ebp - 0xf78], 1
jmp 0x1000ce50
and dword [ebp - 0xf78], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0xf78], eax
jl 0x1000ce67
mov dword [ebp - 0x1170], 1
jmp 0x1000ce6e
and dword [ebp - 0x1170], 0
mov eax, dword [ebp - 0x24c]
mov dword [ebp - 0x1778], eax
cmp dword [ebp - 0x2c], 0
je 0x1000ce92
cmp dword [ebp - 0x2c], 0
je 0x1000ce92
and dword [ebp - 0x954], 0
mov eax, dword [ebp - 0x954]
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 0xf7673ed1
jbe 0x1000cebd