Function at 0x1001c98b
Capabilities:
Set environment variable

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10067c9c
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x6f4
push esi
push edi
mov dword [ebp - 0x24], 0xe8cff0ea
mov dword [ebp - 0x5c], 1
mov dword [ebp - 0x94], 0x856cd833
mov dword [ebp - 0x7c], 1
mov dword [ebp - 0xf8], 0xf5d3cc11
mov dword [ebp - 0x5f8], 0xd005
mov dword [ebp - 0x24], 0xffffffeb
jmp 0x1001c9ee
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 6
je 0x1001ccea
mov dword [ebp - 0x74], 0x779c63c4
mov dword [ebp - 0x4c], 7
mov dword [ebp - 0x98], 6
mov dword [ebp - 0x54], 5
cmp dword [ebp - 0x74], 0
je 0x1001ca42
mov dword [ebp - 0x4c], 0xc25b
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0
je 0x1001ca42
mov dword [ebp - 0x2d8], 1
jmp 0x1001ca49
and dword [ebp - 0x2d8], 0
mov eax, dword [ebp - 0x2d8]
neg eax
je 0x1001cb1d
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x5c8], eax
cmp dword [ebp - 0x94], 0xec58
jle 0x1001ca78
mov dword [ebp - 0x368], 1
jmp 0x1001ca7f
and dword [ebp - 0x368], 0
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x368], eax
jg 0x1001ca99
cmp dword [ebp - 0x74], 0
jne 0x1001ca99
and dword [ebp - 0x2e4], 0
jmp 0x1001caa3
mov dword [ebp - 0x2e4], 1
mov eax, dword [ebp - 0x2e4]
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0xf7bd
jl 0x1001cad0
cmp dword [ebp - 0x98], 0
je 0x1001cad0
mov dword [ebp - 0x360], 1
jmp 0x1001cad7
and dword [ebp - 0x360], 0
mov eax, dword [ebp - 0x360]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
sub eax, 0x335900b
je 0x1001cafc
cmp dword [ebp - 0x4c], 0
je 0x1001cafc
mov dword [ebp - 0x148], 1
jmp 0x1001cb03
and dword [ebp - 0x148], 0
mov eax, dword [ebp - 0x148]
dec eax
cmp eax, 0xf2f37fc0
ja 0x1001cb1d
mov dword [ebp - 0x14c], 1
jmp 0x1001cb24
and dword [ebp - 0x14c], 0
cmp dword [ebp - 0x14c], 9
jle 0x1001cb39
mov dword [ebp - 0x260], 1
jmp 0x1001cb40
and dword [ebp - 0x260], 0
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x260]
cmp eax, dword [ebp - 0x74]
jl 0x1001cb5a
mov dword [ebp - 0x154], 1
jmp 0x1001cb61
and dword [ebp - 0x154], 0
mov eax, dword [ebp - 0x24]
imul eax, dword [ebp - 0x154]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x5c], eax
jge 0x1001cb82
mov dword [ebp - 0x264], 1
jmp 0x1001cb89
and dword [ebp - 0x264], 0
mov eax, dword [ebp - 0x264]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x54], 0
jmp 0x1001cba8
mov eax, dword [ebp - 0x54]
dec eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0xffffffee
jl 0x1001cce5
mov dword [ebp - 0x3ec], 0
mov dword [ebp - 0xe8], 0
jmp 0x1001cbd5
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 3
jge 0x1001cbf1
mov eax, dword [ebp - 0xe8]
mov dword [ebp + eax*4 - 0x448], 1
jmp 0x1001cbc8
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x4c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x448]
mov dword [ebp - 0x5d0], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x448]
cmp dword [ebp + eax - 0x448], ecx
jl 0x1001cc31
mov dword [ebp - 0x15c], 1
jmp 0x1001cc38
and dword [ebp - 0x15c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x448]
cmp eax, dword [ebp - 0x15c]
je 0x1001cc59
mov dword [ebp - 0x364], 1
jmp 0x1001cc60
and dword [ebp - 0x364], 0
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x364], eax
jne 0x1001cc77
mov dword [ebp - 0x164], 1
jmp 0x1001cc7e
and dword [ebp - 0x164], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x448]
imul eax, dword [ebp - 0x164]
test eax, eax
jl 0x1001cca2
mov dword [ebp - 0x26c], 1
jmp 0x1001cca9
and dword [ebp - 0x26c], 0
mov eax, dword [ebp - 0x26c]
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0x52b3
je 0x1001cccd
mov dword [ebp - 0x16c], 1
jmp 0x1001ccd4
and dword [ebp - 0x16c], 0
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0x3ec], eax
jmp 0x1001cba1
jmp 0x1001c9e7
mov eax, dword [ebp - 0x5c]
add eax, dword [ebp - 0xf8]
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x7c]
imul eax, dword [ebp - 0x24]
cmp eax, 7
je 0x1001cd17
cmp dword [ebp - 0xf8], 0
jne 0x1001cd17
and dword [ebp - 0x3f0], 0
jmp 0x1001cd21
mov dword [ebp - 0x3f0], 1
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x5d8], eax
mov eax, dword [ebp - 0x7c]
sub eax, 0x3c1d
jne 0x1001cd41
xor eax, eax
jne 0x1001cd41
and dword [ebp - 0x2ec], 0
jmp 0x1001cd4b
mov dword [ebp - 0x2ec], 1
mov eax, dword [ebp - 0x2ec]
inc eax
cmp dword [ebp - 0x94], eax
jne 0x1001cd66
mov dword [ebp - 0x174], 1
jmp 0x1001cd6d
and dword [ebp - 0x174], 0
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
imul eax, dword [ebp - 0x5c]
cmp eax, dword [ebp - 0xf8]
jge 0x1001cd91
mov dword [ebp - 0x274], 1
jmp 0x1001cd98
and dword [ebp - 0x274], 0
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x274], eax
jne 0x1001cdaf
mov dword [ebp - 0x17c], 1
jmp 0x1001cdb6
and dword [ebp - 0x17c], 0
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x20], 0xe8cff0ea
mov dword [ebp - 0x58], 1
mov dword [ebp - 0x70], 0x856cd833
mov dword [ebp - 0x78], 1
mov dword [ebp - 0x124], 0xf5d3cc11
mov dword [ebp - 0x5e0], 0xd005
mov dword [ebp - 0x20], 0xffffffeb
jmp 0x1001cdff
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 6
je 0x1001d104
mov dword [ebp - 0x8c], 0x779c63c4
mov dword [ebp - 0x44], 7
mov dword [ebp - 0x84], 6
mov dword [ebp - 0x64], 5
cmp dword [ebp - 0x8c], 0
je 0x1001ce59
mov dword [ebp - 0x44], 0xc25b
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0
je 0x1001ce59
mov dword [ebp - 0x32c], 1
jmp 0x1001ce60
and dword [ebp - 0x32c], 0
mov eax, dword [ebp - 0x32c]
neg eax
je 0x1001cf31
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x5e8], eax
cmp dword [ebp - 0x70], 0xec58
jle 0x1001ce8c
mov dword [ebp - 0x184], 1
jmp 0x1001ce93
and dword [ebp - 0x184], 0
mov eax, dword [ebp - 0x8c]
cmp dword [ebp - 0x184], eax
jg 0x1001ceb3
cmp dword [ebp - 0x8c], 0
jne 0x1001ceb3
and dword [ebp - 0x27c], 0
jmp 0x1001cebd
mov dword [ebp - 0x27c], 1
mov eax, dword [ebp - 0x27c]
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0xf7bd
jl 0x1001cee4
cmp dword [ebp - 0x84], 0
je 0x1001cee4
mov dword [ebp - 0x18c], 1
jmp 0x1001ceeb
and dword [ebp - 0x18c], 0
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
sub eax, 0x335900b
je 0x1001cf10
cmp dword [ebp - 0x44], 0
je 0x1001cf10
mov dword [ebp - 0x2f4], 1
jmp 0x1001cf17
and dword [ebp - 0x2f4], 0
mov eax, dword [ebp - 0x2f4]
dec eax
cmp eax, 0xf2f37fc0
ja 0x1001cf31
mov dword [ebp - 0x194], 1
jmp 0x1001cf38
and dword [ebp - 0x194], 0
cmp dword [ebp - 0x194], 9
jle 0x1001cf4d
mov dword [ebp - 0x284], 1
jmp 0x1001cf54
and dword [ebp - 0x284], 0
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x284]
cmp eax, dword [ebp - 0x8c]
jl 0x1001cf71
mov dword [ebp - 0x19c], 1
jmp 0x1001cf78
and dword [ebp - 0x19c], 0
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x19c]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x58], eax
jge 0x1001cf99
mov dword [ebp - 0x34c], 1
jmp 0x1001cfa0
and dword [ebp - 0x34c], 0
mov eax, dword [ebp - 0x34c]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x64], 0
jmp 0x1001cfbf
mov eax, dword [ebp - 0x64]
dec eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0xffffffee
jl 0x1001d0ff
mov dword [ebp - 0x3f8], 0
mov dword [ebp - 0xa4], 0
jmp 0x1001cfec
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 3
jge 0x1001d008
mov eax, dword [ebp - 0xa4]
mov dword [ebp + eax*4 - 0x458], 1
jmp 0x1001cfdf
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x44], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x458]
mov dword [ebp - 0x620], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x458]
cmp dword [ebp + eax - 0x458], ecx
jl 0x1001d048
mov dword [ebp - 0x1a4], 1
jmp 0x1001d04f
and dword [ebp - 0x1a4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x458]
cmp eax, dword [ebp - 0x1a4]
je 0x1001d070
mov dword [ebp - 0x28c], 1
jmp 0x1001d077
and dword [ebp - 0x28c], 0
mov eax, dword [ebp - 0x8c]
cmp dword [ebp - 0x28c], eax
jne 0x1001d091
mov dword [ebp - 0x1ac], 1
jmp 0x1001d098
and dword [ebp - 0x1ac], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x458]
imul eax, dword [ebp - 0x1ac]
test eax, eax
jl 0x1001d0bc
mov dword [ebp - 0x2fc], 1
jmp 0x1001d0c3
and dword [ebp - 0x2fc], 0
mov eax, dword [ebp - 0x2fc]
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0x52b3
je 0x1001d0e7
mov dword [ebp - 0x1b4], 1
jmp 0x1001d0ee
and dword [ebp - 0x1b4], 0
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x3f8], eax
jmp 0x1001cfb8
jmp 0x1001cdf8
mov eax, dword [ebp - 0x58]
add eax, dword [ebp - 0x124]
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x78]
imul eax, dword [ebp - 0x20]
cmp eax, 7
je 0x1001d12e
cmp dword [ebp - 0x124], 0
jne 0x1001d12e
and dword [ebp - 0x414], 0
jmp 0x1001d138
mov dword [ebp - 0x414], 1
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x628], eax
mov eax, dword [ebp - 0x78]
sub eax, 0x3c1d
jne 0x1001d158
xor eax, eax
jne 0x1001d158
and dword [ebp - 0x294], 0
jmp 0x1001d162
mov dword [ebp - 0x294], 1
mov eax, dword [ebp - 0x294]
inc eax
cmp dword [ebp - 0x70], eax
jne 0x1001d17a
mov dword [ebp - 0x1bc], 1
jmp 0x1001d181
and dword [ebp - 0x1bc], 0
mov eax, dword [ebp - 0x1bc]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x58]
cmp eax, dword [ebp - 0x124]
jge 0x1001d1a5
mov dword [ebp - 0x334], 1
jmp 0x1001d1ac
and dword [ebp - 0x334], 0
mov eax, dword [ebp - 0x78]
cmp dword [ebp - 0x334], eax
jne 0x1001d1c3
mov dword [ebp - 0x1c4], 1
jmp 0x1001d1ca
and dword [ebp - 0x1c4], 0
mov eax, dword [ebp - 0x1c4]
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x42c], 0xffffffff
mov dword [ebp - 0x428], 0xffffffff
mov dword [ebp - 0x424], 0xffffffff
mov dword [ebp - 0x420], 0xffffffff
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x1dc], 0x71b35d56
mov dword [ebp - 0x41c], 0x19fe
cmp dword [ebp - 0x41c], 0x542
jge 0x1001d360
xor eax, eax
inc eax
imul eax, eax, 0
mov byte [eax + 0x1065c458], 1
xor eax, eax
inc eax
shl eax, 0
mov byte [eax + 0x1065c458], 0
call fcn.1001c843
lea ecx, [ebp - 0x488]
call fcn.10015ff5
and dword [ebp - 4], 0
and dword [ebp - 0x68], 0
lea edx, [ebp - 0x488]
mov ecx, 0x10659c50
call fcn.10020798
mov dword [ebp - 0x29c], eax
mov eax, dword [ebp - 0x29c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x29c]
add ecx, dword [eax + 4]
call fcn.1000918b
movzx eax, al
test eax, eax
je 0x1001d351
and dword [ebp - 0x68], 0
and dword [ebp - 0x60], 0
jmp 0x1001d2a0
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
lea ecx, [ebp - 0x488]
call fcn.10016639
cmp dword [ebp - 0x60], eax
jae 0x1001d306
push dword [ebp - 0x60]
lea ecx, [ebp - 0x488]
call fcn.1001868a
movsx eax, byte [eax]
push eax
call fcn.1004fccf
pop ecx
test eax, eax
je 0x1001d2e9
push dword [ebp - 0x60]
lea ecx, [ebp - 0x488]
call fcn.1001868a
movsx eax, byte [eax]
mov ecx, dword [ebp - 0x68]
lea eax, [ecx + eax - 0x26]
mov dword [ebp - 0x68], eax
jmp 0x1001d304
push dword [ebp - 0x60]
lea ecx, [ebp - 0x488]
call fcn.1001868a
movsx eax, byte [eax]
mov ecx, dword [ebp - 0x68]
lea eax, [ecx + eax - 0x60]
mov dword [ebp - 0x68], eax
jmp 0x1001d299
mov eax, dword [ebp - 0x68]
movzx eax, byte [eax + 0x1065c458]
test eax, eax
jne 0x1001d331
push fcn.1001b109
mov edx, 0x100078cc
mov ecx, 0x10659b98
call fcn.1001af32
mov ecx, eax
call fcn.10016363
jmp 0x1001d34c
push fcn.1001b109
mov edx, 0x100078e0
mov ecx, 0x10659b98
call fcn.1001af32
mov ecx, eax
call fcn.10016363
jmp 0x1001d258
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x488]
call fcn.10016035
mov dword [ebp - 0x438], 0xf0ebf903
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x42c]
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x80], 0x1c
jmp 0x1001d38a
mov eax, dword [ebp - 0x80]
dec eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0xffffffeb
jge 0x1001d47e
mov dword [ebp - 0x304], 0xfffffff7
mov dword [ebp - 0x104], 0x97515801
cmp dword [ebp - 0x304], 0
jge 0x1001d3bd
mov dword [ebp - 0x1d4], 1
jmp 0x1001d3c4
and dword [ebp - 0x1d4], 0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x42c], 0xfffffff9
jne 0x1001d3dd
mov eax, 0x4207
test eax, eax
jne 0x1001d3f5
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x42c], 0
jne 0x1001d3f5
and dword [ebp - 0x1cc], 0
jmp 0x1001d3ff
mov dword [ebp - 0x1cc], 1
mov eax, dword [ebp - 0x1cc]
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 9
jne 0x1001d420
mov dword [ebp - 0x430], 1
jmp 0x1001d427
and dword [ebp - 0x430], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x42c]
mov dword [ebp - 0x630], eax
mov eax, dword [ebp - 0x104]
sub eax, dword [ebp - 0x304]
cmp dword [ebp - 0x1d4], eax
jne 0x1001d45a
mov dword [ebp - 0x2a4], 1
jmp 0x1001d461
and dword [ebp - 0x2a4], 0
mov eax, dword [ebp - 0x2a4]
mov dword [ebp - 0x1dc], eax
mov eax, dword [ebp - 0x1dc]
mov dword [ebp - 0x438], eax
jmp 0x1001d383
mov dword [ebp - 0x14], 1
mov dword [ebp - 0x638], 0x1afd
mov dword [ebp - 0x3e8], 0xfffffffe
mov dword [ebp - 0x404], 0x89ec0021
mov dword [ebp - 0xd4], 0
jmp 0x1001d4bc
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 3
jge 0x1001d4d8
mov eax, dword [ebp - 0xd4]
mov dword [ebp + eax*4 - 0x380], 0x826fbd10
jmp 0x1001d4af
cmp dword [ebp - 0x14], 1
jne 0x1001d4f3
cmp dword [ebp - 0x3e8], 0
je 0x1001d4f3
mov dword [ebp - 0x35c], 1
jmp 0x1001d4fa
and dword [ebp - 0x35c], 0
cmp dword [ebp - 0x35c], 9
jb 0x1001d50f
mov dword [ebp - 0x1e4], 1
jmp 0x1001d516
and dword [ebp - 0x1e4], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x1e4], eax
jge 0x1001d52d
mov dword [ebp - 0x2ac], 1
jmp 0x1001d534
and dword [ebp - 0x2ac], 0
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x2ac]
je 0x1001d594
mov dword [ebp - 0xac], 0
jmp 0x1001d558
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 1
jge 0x1001d574
mov eax, dword [ebp - 0xac]
mov dword [ebp + eax*4 - 0x1ec], 0x1649
jmp 0x1001d54b
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1ec]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x1ec], eax
jmp 0x1001d6d2
mov dword [ebp - 0x3a4], 0x9be9
mov dword [ebp - 0x14], 0
jmp 0x1001d5ae
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jg 0x1001d6b7
mov dword [ebp - 0x3bc], 0xfffffff6
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x380], 5
jg 0x1001d5db
mov dword [ebp - 0x30c], 1
jmp 0x1001d5e2
and dword [ebp - 0x30c], 0
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x30c]
sub ecx, dword [ebp + eax*4 - 0x380]
je 0x1001d670
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
mov ecx, dword [ebp + ecx*4 - 0x380]
cmp dword [ebp + eax*4 - 0x380], ecx
jne 0x1001d616
mov dword [ebp - 0x1f4], 1
jmp 0x1001d61d
and dword [ebp - 0x1f4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x380]
cmp dword [ebp - 0x1f4], eax
jle 0x1001d63e
mov dword [ebp - 0x2b4], 1
jmp 0x1001d645
and dword [ebp - 0x2b4], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x380]
cmp dword [ebp - 0x2b4], eax
jle 0x1001d670
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x380], 0
je 0x1001d670
mov dword [ebp - 0x1fc], 1
jmp 0x1001d677
and dword [ebp - 0x1fc], 0
mov eax, dword [ebp - 0x3a4]
cmp dword [ebp - 0x1fc], eax
jne 0x1001d691
mov dword [ebp - 0x33c], 1
jmp 0x1001d698
and dword [ebp - 0x33c], 0
mov eax, dword [ebp - 0x33c]
mov dword [ebp - 0x404], eax
cmp dword [ebp - 0x3bc], 0
je 0x1001d6b2
jmp 0x1001d5a7
jmp 0x1001d5a7
mov byte [ebp - 0x46], 0
movzx eax, byte [ebp - 0x46]
test eax, eax
je 0x1001d6d2
push 0x8aa
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov dword [ebp - 0x3b4], 0xffffffff
mov dword [ebp - 0x3b0], 0xffffffff
mov dword [ebp - 0x3ac], 0xffffffff
mov dword [ebp - 0x3a8], 0xffffffff
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x214], 0x71b35d56
mov dword [ebp - 0x3c4], 0xf0ebf903
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x3b4]
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x88], 0x1c
jmp 0x1001d744
mov eax, dword [ebp - 0x88]
dec eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0xffffffeb
jge 0x1001d83b
mov dword [ebp - 0x2bc], 0xfffffff7
mov dword [ebp - 0x11c], 0x97515801
cmp dword [ebp - 0x2bc], 0
jge 0x1001d77a
mov dword [ebp - 0x20c], 1
jmp 0x1001d781
and dword [ebp - 0x20c], 0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x3b4], 0xfffffff9
jne 0x1001d79a
mov eax, 0x4207
test eax, eax
jne 0x1001d7b2
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x3b4], 0
jne 0x1001d7b2
and dword [ebp - 0x204], 0
jmp 0x1001d7bc
mov dword [ebp - 0x204], 1
mov eax, dword [ebp - 0x204]
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 9
jne 0x1001d7dd
mov dword [ebp - 0x40c], 1
jmp 0x1001d7e4
and dword [ebp - 0x40c], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x3b4]
mov dword [ebp - 0x640], eax
mov eax, dword [ebp - 0x11c]
sub eax, dword [ebp - 0x2bc]
cmp dword [ebp - 0x20c], eax
jne 0x1001d817
mov dword [ebp - 0x314], 1
jmp 0x1001d81e
and dword [ebp - 0x314], 0
mov eax, dword [ebp - 0x314]
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
mov dword [ebp - 0x3c4], eax
jmp 0x1001d737
mov dword [ebp - 0xdc], 0x5e48d327
mov byte [ebp - 0x47], 0
movzx eax, byte [ebp - 0x47]
test eax, eax
je 0x1001d866
push 0
push 0
push 0xfbc
push 0
push 1
push 0
call dword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
mov dword [ebp - 0xdc], 0
jmp 0x1001d87f
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0x19
je 0x1001d89f
mov dword [ebp - 0x408], 0
cmp dword [ebp - 0x408], 0
je 0x1001d89d
jmp 0x1001d89f
jmp 0x1001d872
mov dword [ebp - 0x10], 1
mov dword [ebp - 0x648], 0x1afd
mov dword [ebp - 0x3cc], 0xfffffffe
mov dword [ebp - 0x3d4], 0x89ec0021
mov dword [ebp - 0xb4], 0
jmp 0x1001d8dd
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 3
jge 0x1001d8f9
mov eax, dword [ebp - 0xb4]
mov dword [ebp + eax*4 - 0x374], 0x826fbd10
jmp 0x1001d8d0
cmp dword [ebp - 0x10], 1
jne 0x1001d914
cmp dword [ebp - 0x3cc], 0
je 0x1001d914
mov dword [ebp - 0x2c4], 1
jmp 0x1001d91b
and dword [ebp - 0x2c4], 0
cmp dword [ebp - 0x2c4], 9
jb 0x1001d930
mov dword [ebp - 0x21c], 1
jmp 0x1001d937
and dword [ebp - 0x21c], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x21c], eax
jge 0x1001d94e
mov dword [ebp - 0x354], 1
jmp 0x1001d955
and dword [ebp - 0x354], 0
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x354]
je 0x1001d9b5
mov dword [ebp - 0xe4], 0
jmp 0x1001d979
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 1
jge 0x1001d995
mov eax, dword [ebp - 0xe4]
mov dword [ebp + eax*4 - 0x224], 0x1649
jmp 0x1001d96c
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x224]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x224], eax
jmp 0x1001daf3
mov dword [ebp - 0x43c], 0x9be9
mov dword [ebp - 0x10], 0
jmp 0x1001d9cf
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jg 0x1001dad8
mov dword [ebp - 0x410], 0xfffffff6
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x374], 5
jg 0x1001d9fc
mov dword [ebp - 0x2cc], 1
jmp 0x1001da03
and dword [ebp - 0x2cc], 0
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x2cc]
sub ecx, dword [ebp + eax*4 - 0x374]
je 0x1001da91
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
mov ecx, dword [ebp + ecx*4 - 0x374]
cmp dword [ebp + eax*4 - 0x374], ecx
jne 0x1001da37
mov dword [ebp - 0x22c], 1
jmp 0x1001da3e
and dword [ebp - 0x22c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x374]
cmp dword [ebp - 0x22c], eax
jle 0x1001da5f
mov dword [ebp - 0x31c], 1
jmp 0x1001da66
and dword [ebp - 0x31c], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x374]
cmp dword [ebp - 0x31c], eax
jle 0x1001da91
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x374], 0
je 0x1001da91
mov dword [ebp - 0x234], 1
jmp 0x1001da98
and dword [ebp - 0x234], 0
mov eax, dword [ebp - 0x43c]
cmp dword [ebp - 0x234], eax
jne 0x1001dab2
mov dword [ebp - 0x2d4], 1
jmp 0x1001dab9
and dword [ebp - 0x2d4], 0
mov eax, dword [ebp - 0x2d4]
mov dword [ebp - 0x3d4], eax
cmp dword [ebp - 0x410], 0
je 0x1001dad3
jmp 0x1001d9c8
jmp 0x1001d9c8
mov byte [ebp - 0x3d], 0
movzx eax, byte [ebp - 0x3d]
test eax, eax
je 0x1001daf3
push 0x8aa
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov dword [ebp - 0x6a8], 0xfb0b0297
mov dword [ebp - 0x694], 4
mov dword [ebp - 0x60c], 0
mov dword [ebp - 0x494], 0xc0aa39ed
mov dword [ebp - 0x59c], 1
mov dword [ebp - 0x49c], 0
mov dword [ebp - 0x69c], 4
mov dword [ebp - 0x4a4], 0x374b1b05
mov dword [ebp - 0x5a4], 0xffffffff
mov dword [ebp - 0x4ac], 0xffffffff
mov dword [ebp - 0x62c], 0xee21afa9
push 1
lea ecx, [ebp - 0x658]
call fcn.100166bf
mov dword [ebp - 4], 1
mov dword [ebp - 0x23c], 0x25db2b05
mov dword [ebp - 0xbc], 0
jmp 0x1001db98
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 1
jge 0x1001dbba
push dword [ebp - 0xbc]
lea ecx, [ebp - 0x658]
call fcn.100167c9
mov dword [eax], 7
jmp 0x1001db8b
mov eax, dword [ebp - 0x23c]
inc eax
mov dword [ebp - 0x23c], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x658]
call fcn.100167a4
mov dword [ebp - 0xec], 0x5e48d327
mov byte [ebp - 0x4d], 0
movzx eax, byte [ebp - 0x4d]
test eax, eax
je 0x1001dc01
push 0
push 0
push 0xfbc
push 0
push 1
push 0
call dword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
mov dword [ebp - 0xec], 0
jmp 0x1001dc1a
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0x19
je 0x1001dc3a
mov dword [ebp - 0x3dc], 0
cmp dword [ebp - 0x3dc], 0
je 0x1001dc38
jmp 0x1001dc3a
jmp 0x1001dc0d
mov dword [ebp - 0x4b4], 0x47dfa860
mov dword [ebp - 0x5ac], 0xfffffffb
mov dword [ebp - 0x4bc], 0xffffffff
mov dword [ebp - 0x67c], 1
mov dword [ebp - 0x4c4], 0xffffffff
mov dword [ebp - 0x5b4], 0x4ab274bf
mov dword [ebp - 0x4cc], 0xfffffffc
mov dword [ebp - 0x634], 0xffffffff
mov dword [ebp - 0x4d4], 9
mov dword [ebp - 0x5bc], 0
mov dword [ebp - 0x4dc], 0x95031536
mov dword [ebp - 0x690], 0x2b21a35c
mov dword [ebp - 0x4e4], 0x2a26f3f1
mov dword [ebp - 0x5c4], 0xfffffff6
mov dword [ebp - 0x4ec], 0x4a41637c
mov dword [ebp - 0x63c], 0xa32a17d0
mov dword [ebp - 0x4f4], 0xfffffffd
mov dword [ebp - 0x5cc], 0
mov dword [ebp - 0x434], 0x1bd9
cmp dword [ebp - 0x434], 0xfc5
jge 0x1001dd68
push 0x10b141b0
push 0x10b141ac
push 0x10b141b8
push 0x10b141b4
push 0x100078f8
call fcn.1004edeb
add esp, 0x14
push 0x4b5644
push 0xffffffffffffffff
push 0x1065eb68
call fcn.10046701
add esp, 0xc
push fcn.1001b109
push 0
push 0
push 0
push 0
call fcn.1001c8a2
add esp, 0x10
cdq
mov ecx, 0x5f5e100
idiv ecx
push edx
mov ecx, 0x10659b98
call fcn.1001636f
mov ecx, eax
call fcn.10016363
mov dword [ebp - 0x4fc], 0x5d70512a
mov dword [ebp - 0x68c], 0xfd66c4a8
push 4
lea ecx, [ebp - 0x668]
call fcn.100166bf
mov dword [ebp - 4], 2
mov dword [ebp - 0x344], 0
mov dword [ebp - 0x244], 8
mov dword [ebp - 0xf4], 0
jmp 0x1001ddbd
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 4
jge 0x1001dddf
push dword [ebp - 0xf4]
lea ecx, [ebp - 0x668]
call fcn.100167c9
mov dword [eax], 0x1448112d
jmp 0x1001ddb0
mov eax, dword [ebp - 0x344]
dec eax
mov dword [ebp - 0x344], eax
mov eax, dword [ebp - 0x244]
dec eax
mov dword [ebp - 0x244], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x668]
call fcn.100167a4
movzx eax, byte [0x10b62844]
test eax, eax
je 0x1001de26
mov esi, 0x10659308
mov edi, dword [ebp + 8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 8]
jmp 0x1001f340
mov dword [ebp - 0x28], 0
jmp 0x1001de36
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jge 0x1001de4c
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x460], 0
jmp 0x1001de2f
mov dword [ebp - 0x28], 0
jmp 0x1001de5c
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jge 0x1001de72
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x398], 0x1e87df2f
jmp 0x1001de55
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x398], 1
jmp 0x1001dea0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x398]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x398], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x398], 0
jl 0x1001df1f
mov dword [ebp - 0xc8], 0xc3eee2fd
mov dword [ebp - 0x3e4], 0xffffffff
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x398]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x398]
mov eax, dword [ebp + eax*4 - 0x460]
mov dword [ebp + ecx*4 - 0x460], eax
mov dword [ebp - 0xc8], 0
jmp 0x1001df05
mov eax, dword [ebp - 0xc8]
dec eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0xfffffff9
jg 0x1001df1a
mov dword [ebp - 0x3e4], 0
jmp 0x1001def8
jmp 0x1001de85
mov dword [ebp - 0x504], 0x10659308
mov dword [ebp - 0x90], 0xfffffffc
mov dword [ebp - 0x5d4], 4
mov dword [ebp - 0x30], 0
jmp 0x1001df4d
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jge 0x1001df63
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x6b4], 2
jmp 0x1001df46
mov dword [ebp - 0x30], 0
jmp 0x1001df73
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 1
jge 0x1001df89
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x50c], 1
jmp 0x1001df6c
mov dword [ebp - 0x90], 0
jmp 0x1001dfa2
mov eax, dword [ebp - 0x90]
dec eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0xffffffe5
jl 0x1001e1f1
mov dword [ebp - 0x644], 0
mov dword [ebp - 0x514], 8
mov dword [ebp - 0x5dc], 0xfffffff6
mov dword [ebp - 0x51c], 0x1720d700
mov dword [ebp - 0x698], 0xdbc1c234
mov dword [ebp - 0x524], 0x722abac8
mov dword [ebp - 0x5e4], 0x4c7ba3f3
mov dword [ebp - 0x52c], 0x29a2a67f
mov dword [ebp - 0x64c], 0x83acdd71
mov dword [ebp - 0x534], 0xa5659cde
mov dword [ebp - 0x144], 0xfffffff7
mov dword [ebp - 0xe0], 0
jmp 0x1001e036
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 1
jge 0x1001e052
mov eax, dword [ebp - 0xe0]
mov dword [ebp + eax*4 - 0x2dc], 0xd2e8
jmp 0x1001e029
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2dc]
mov dword [ebp - 0x5ec], eax
mov eax, 0x3f7bf48c
sub eax, 0x3eb60693
jne 0x1001e07d
mov dword [ebp - 0x324], 1
jmp 0x1001e084
and dword [ebp - 0x324], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2dc], 0x7dcd66a0
jle 0x1001e0a3
mov dword [ebp - 0x24c], 1
jmp 0x1001e0aa
and dword [ebp - 0x24c], 0
mov eax, dword [ebp - 0x90]
cmp eax, dword [ebp - 0x24c]
jle 0x1001e0c4
mov dword [ebp - 0x10c], 1
jmp 0x1001e0cb
and dword [ebp - 0x10c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x10c]
mov dword [ebp + eax - 0x6b4], ecx
mov eax, dword [ebp - 0x324]
sub eax, dword [ebp - 0x10c]
cmp eax, 0xfffffff7
je 0x1001e18a
mov dword [ebp - 0x254], 0
mov dword [ebp - 0x53c], 0xb79ae4f7
mov dword [ebp - 0x6a0], 0x213072c0
mov dword [ebp - 0x544], 0x4b15d3e9
mov dword [ebp - 0x48c], 1
mov dword [ebp - 0x54c], 0xfffffffb
mov dword [ebp - 0x25c], 0x6a1c
mov dword [ebp - 0xd0], 0
jmp 0x1001e152
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 2
jge 0x1001e16e
mov eax, dword [ebp - 0xd0]
mov dword [ebp + eax*4 - 0x6e0], 1
jmp 0x1001e145
mov eax, dword [ebp - 0x254]
dec eax
mov dword [ebp - 0x254], eax
mov eax, dword [ebp - 0x25c]
dec eax
mov dword [ebp - 0x25c], eax
jmp 0x1001e1d6
mov dword [ebp - 0x608], 1
mov dword [ebp - 0x9c], 0
jmp 0x1001e1ad
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 3
jge 0x1001e1c9
mov eax, dword [ebp - 0x9c]
mov dword [ebp + eax*4 - 0x6f4], 0xe2efe8e6
jmp 0x1001e1a0
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
mov byte [ebp - 0x45], 0
movzx eax, byte [ebp - 0x45]
test eax, eax
je 0x1001e1ec
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
jmp 0x1001df95
mov dword [ebp - 0x554], 0x1065930c
mov dword [ebp - 0x604], 0xfb0b0297
mov dword [ebp - 0x55c], 4
mov dword [ebp - 0x610], 0
mov dword [ebp - 0x564], 0xc0aa39ed
mov dword [ebp - 0x618], 1
mov dword [ebp - 0x56c], 0
mov dword [ebp - 0x65c], 4
mov dword [ebp - 0x574], 0x374b1b05
mov dword [ebp - 0x614], 0xffffffff
mov dword [ebp - 0x57c], 0xffffffff
mov dword [ebp - 0x6a4], 0xee21afa9
push 1
lea ecx, [ebp - 0x678]
call fcn.100166bf
mov dword [ebp - 4], 3
mov dword [ebp - 0x140], 0x25db2b05
mov dword [ebp - 0xf0], 0
jmp 0x1001e2a0
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 1
jge 0x1001e2c2
push dword [ebp - 0xf0]
lea ecx, [ebp - 0x678]
call fcn.100167c9
mov dword [eax], 7
jmp 0x1001e293
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x678]
call fcn.100167a4
mov dword [ebp - 0x18], 0x47df
mov dword [ebp - 0x180], 0xac0faab3
mov dword [ebp - 0x584], 0xffffffff
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x18], 0xffffffee
jmp 0x1001e310
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0x30
jg 0x1001e5bc
mov dword [ebp - 0xc0], 0x9ecf
mov dword [ebp - 0x39c], 0x5610a143
mov dword [ebp - 0x418], 0x15cd
cmp dword [ebp - 0x418], 0xe84
jge 0x1001e3ef
lea eax, [ebp - 0x600]
push eax
lea eax, [ebp - 0x470]
push eax
push 0x10007904
call fcn.1004edeb
add esp, 0xc
mov dword [ebp - 0xd8], 1
jmp 0x1001e37c
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cvtsi2sd xmm0, dword [ebp - 0xd8]
movsd xmm1, qword [ebp - 0x470]
comisd xmm1, xmm0
jbe 0x1001e3e4
cvtsi2sd xmm0, dword [ebp - 0xd8]
mulsd xmm0, qword [0x10007c60]
divsd xmm0, qword [ebp - 0x470]
push ecx
push ecx
movsd qword [esp], xmm0
call fcn.1004e444
pop ecx
pop ecx
fstp qword [ebp - 0x5f4]
movsd xmm0, qword [ebp - 0x5f4]
mulsd xmm0, qword [ebp - 0x600]
push ecx
push ecx
movsd qword [esp], xmm0
push 0x1000790c
call fcn.1004f4dc
add esp, 0xc
jmp 0x1001e36f
push 0x1000768d
call fcn.1004f7e7
pop ecx
mov dword [ebp - 0x44c], 0x5950
mov dword [ebp - 0x3f4], 8
cmp dword [ebp - 0x18], 0xa4ccfd66
ja 0x1001e418
mov dword [ebp - 0x150], 1
jmp 0x1001e41f
and dword [ebp - 0x150], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x150], eax
je 0x1001e436
mov dword [ebp - 0x158], 1
jmp 0x1001e43d
and dword [ebp - 0x158], 0
mov eax, 0x13b2
sub eax, dword [ebp - 0x158]
cmp eax, 0xa17d0b0a
jne 0x1001e45b
mov dword [ebp - 0x160], 1
jmp 0x1001e462
and dword [ebp - 0x160], 0
mov eax, dword [ebp - 0xc0]
cmp dword [ebp - 0x160], eax
jg 0x1001e47c
mov dword [ebp - 0x168], 1
jmp 0x1001e483
and dword [ebp - 0x168], 0
mov eax, dword [ebp - 0xc0]
cmp eax, dword [ebp - 0x168]
jl 0x1001e49d
mov dword [ebp - 0x170], 1
jmp 0x1001e4a4
and dword [ebp - 0x170], 0
mov eax, dword [ebp - 0x170]
add eax, 7
jne 0x1001e4c1
cmp dword [ebp - 0xc0], 0
jne 0x1001e4c1
and dword [ebp - 0x178], 0
jmp 0x1001e4cb
mov dword [ebp - 0x178], 1
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 0
jne 0x1001e4ee
xor eax, eax
inc eax
jne 0x1001e4ee
and dword [ebp - 0x188], 0
jmp 0x1001e4f8
mov dword [ebp - 0x188], 1
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x188], eax
jle 0x1001e50f
mov dword [ebp - 0x190], 1
jmp 0x1001e516
and dword [ebp - 0x190], 0
mov eax, dword [ebp - 0xc0]
cmp dword [ebp - 0x190], eax
jne 0x1001e530
mov dword [ebp - 0x198], 1
jmp 0x1001e537
and dword [ebp - 0x198], 0
cmp dword [ebp - 0x198], 0x9b780f88
je 0x1001e54f
mov dword [ebp - 0x1a0], 1
jmp 0x1001e556
and dword [ebp - 0x1a0], 0
mov eax, dword [ebp - 0x1a0]
sub eax, dword [ebp - 0x18]
cmp eax, 1
jne 0x1001e56d
cmp dword [ebp - 0x39c], 0
je 0x1001e574
cmp dword [ebp - 0x44c], 0
cmp dword [ebp - 0x18], 5
jbe 0x1001e586
mov dword [ebp - 0x1a8], 1
jmp 0x1001e58d
and dword [ebp - 0x1a8], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x1a8], eax
jle 0x1001e5a4
mov dword [ebp - 0x1b0], 1
jmp 0x1001e5ab
and dword [ebp - 0x1b0], 0
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x3f4], eax
jmp 0x1001e309
mov byte [0x10b62844], 1
mov dword [ebp - 0x61c], 0x47dfa860
mov dword [ebp - 0x58c], 0xfffffffb
mov dword [ebp - 0x66c], 0xffffffff
mov dword [ebp - 0x594], 1
mov dword [ebp - 0x624], 0xffffffff
mov dword [ebp - 0x490], 0x4ab274bf
mov dword [ebp - 0x498], 0xfffffffc
mov dword [ebp - 0x4a0], 0xffffffff
mov dword [ebp - 0x4a8], 9
mov dword [ebp - 0x4b0], 0
mov dword [ebp - 0x4b8], 0x95031536
mov dword [ebp - 0x4c0], 0x2b21a35c
mov dword [ebp - 0x4c8], 0x2a26f3f1
mov dword [ebp - 0x4d0], 0xfffffff6
mov dword [ebp - 0x4d8], 0x4a41637c
mov dword [ebp - 0x4e0], 0xa32a17d0
mov dword [ebp - 0x4e8], 0xfffffffd
mov dword [ebp - 0x4f0], 0
mov dword [ebp - 0x4f8], 0x5d70512a
mov dword [ebp - 0x500], 0xfd66c4a8
push 4
lea ecx, [ebp - 0x688]
call fcn.100166bf
mov dword [ebp - 4], 4
mov dword [ebp - 0x1b8], 0
mov dword [ebp - 0x1c0], 8
mov dword [ebp - 0xc4], 0
jmp 0x1001e6cc
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 4
jge 0x1001e6ee
push dword [ebp - 0xc4]
lea ecx, [ebp - 0x688]
call fcn.100167c9
mov dword [eax], 0x1448112d
jmp 0x1001e6bf
mov eax, dword [ebp - 0x1b8]
dec eax
mov dword [ebp - 0x1b8], eax
mov eax, dword [ebp - 0x1c0]
dec eax
mov dword [ebp - 0x1c0], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x688]
call fcn.100167a4
mov dword [ebp - 0x114], 0x488f4f3
mov dword [ebp - 0xfc], 1
mov dword [ebp - 0x130], 0x1b9c6fec
mov dword [ebp - 0x400], 1
mov dword [ebp - 0x228], 1
mov dword [ebp - 0x3fc], 0xffffffff
mov dword [ebp - 0x34], 0
jmp 0x1001e763
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 2
jge 0x1001e779
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x138], 0x6d44
jmp 0x1001e75c
mov dword [ebp - 0x34], 0
jmp 0x1001e789
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 3
jge 0x1001e79f
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x6c0], 0x17ca4e86
jmp 0x1001e782
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x138]
mov dword [ebp - 0x508], eax
imul eax, dword [ebp - 0xfc], 0x19f8
mov dword [ebp - 0x1c8], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x1c8]
mov dword [ebp + eax - 0x6c0], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x138]
imul eax, dword [ebp - 0x1c8]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x138]
je 0x1001e803
mov dword [ebp - 0x1d0], 1
jmp 0x1001e80a
and dword [ebp - 0x1d0], 0
cmp dword [ebp - 0x1d0], 0xffffffff
jle 0x1001e81f
mov dword [ebp - 0x1d8], 1
jmp 0x1001e826
and dword [ebp - 0x1d8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x138]
cmp dword [ebp - 0x1d8], eax
jge 0x1001e847
mov dword [ebp - 0x1e0], 1
jmp 0x1001e84e
and dword [ebp - 0x1e0], 0
mov eax, dword [ebp - 0x114]
cmp dword [ebp - 0x1e0], eax
jne 0x1001e868
mov dword [ebp - 0x1e8], 1
jmp 0x1001e86f
and dword [ebp - 0x1e8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x138]
cmp dword [ebp - 0x1e8], eax
jne 0x1001e890
mov dword [ebp - 0x1f0], 1
jmp 0x1001e897
and dword [ebp - 0x1f0], 0
imul eax, dword [ebp - 0x1f0], 0x4309
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x138]
push 3
pop ecx
sub ecx, eax
jne 0x1001e8c8
mov eax, 0x869e7721
test eax, eax
jne 0x1001e8c8
and dword [ebp - 0x1f8], 0
jmp 0x1001e8d2
mov dword [ebp - 0x1f8], 1
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
mov eax, dword [ebp - 0x130]
cmp eax, dword [ebp - 0x1f8]
jne 0x1001e8f9
mov dword [ebp - 0x200], 1
jmp 0x1001e900
and dword [ebp - 0x200], 0
imul eax, dword [ebp - 0x200], 0xfa2e
cmp eax, 0xe8a28d88
jne 0x1001e91d
mov dword [ebp - 0x208], 1
jmp 0x1001e924
and dword [ebp - 0x208], 0
mov eax, dword [ebp - 0x208]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x510], eax
cmp dword [ebp - 0x400], 0x965da1f7
jae 0x1001e954
mov dword [ebp - 0x210], 1
jmp 0x1001e95b
and dword [ebp - 0x210], 0
cmp dword [ebp - 0x210], 0x66ba0539
jge 0x1001e973
mov dword [ebp - 0x218], 1
jmp 0x1001e97a
and dword [ebp - 0x218], 0
mov eax, dword [ebp - 0xfc]
cmp dword [ebp - 0x218], eax
jne 0x1001e994
mov dword [ebp - 0x220], 1
jmp 0x1001e99b
and dword [ebp - 0x220], 0
mov eax, dword [ebp - 0x220]
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 0
cmp dword [ebp - 0xfc], 0x81f13d46
jb 0x1001e9c6
mov dword [ebp - 0x230], 1
jmp 0x1001e9cd
and dword [ebp - 0x230], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x138]
cmp eax, dword [ebp - 0x230]
jl 0x1001e9ee
mov dword [ebp - 0x238], 1
jmp 0x1001e9f5
and dword [ebp - 0x238], 0
mov eax, dword [ebp - 0x238]
mov dword [ebp - 0x3fc], eax
xor eax, eax
inc eax
imul eax, eax, 0x148
add eax, 0x10659318
mov dword [ebp - 0x2e0], eax
mov dword [ebp - 0x3c], 0
jmp 0x1001ea25
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 2
jge 0x1001ea3b
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x468], 0
jmp 0x1001ea1e
mov dword [ebp - 0x3c], 0
jmp 0x1001ea4b
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 3
jge 0x1001ea61
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x38c], 0x1e87df2f
jmp 0x1001ea44
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x38c], 1
jmp 0x1001ea8f
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x38c]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x38c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x38c], 0
jl 0x1001eb0e
mov dword [ebp - 0xcc], 0xc3eee2fd
mov dword [ebp - 0x3a0], 0xffffffff
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x38c]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x38c]
mov eax, dword [ebp + eax*4 - 0x468]
mov dword [ebp + ecx*4 - 0x468], eax
mov dword [ebp - 0xcc], 0
jmp 0x1001eaf4
mov eax, dword [ebp - 0xcc]
dec eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0xfffffff9
jg 0x1001eb09
mov dword [ebp - 0x3a0], 0
jmp 0x1001eae7
jmp 0x1001ea74
xor eax, eax
inc eax
imul eax, eax, 0x1c
add eax, 0x10659318
mov dword [ebp - 0x108], eax
mov dword [ebp - 0x6c], 0xfffffffc
mov dword [ebp - 0x518], 4
mov dword [ebp - 0x2c], 0
jmp 0x1001eb40
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x1001eb56
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x6d8], 2
jmp 0x1001eb39
mov dword [ebp - 0x2c], 0
jmp 0x1001eb66
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jge 0x1001eb7c
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x520], 1
jmp 0x1001eb5f
mov dword [ebp - 0x6c], 0
jmp 0x1001eb8c
mov eax, dword [ebp - 0x6c]
dec eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0xffffffe5
jl 0x1001edd5
mov dword [ebp - 0x528], 0
mov dword [ebp - 0x530], 8
mov dword [ebp - 0x538], 0xfffffff6
mov dword [ebp - 0x540], 0x1720d700
mov dword [ebp - 0x548], 0xdbc1c234
mov dword [ebp - 0x550], 0x722abac8
mov dword [ebp - 0x558], 0x4c7ba3f3
mov dword [ebp - 0x560], 0x29a2a67f
mov dword [ebp - 0x568], 0x83acdd71
mov dword [ebp - 0x570], 0xa5659cde
mov dword [ebp - 0x270], 0xfffffff7
mov dword [ebp - 0xa0], 0
jmp 0x1001ec1d
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 1
jge 0x1001ec39
mov eax, dword [ebp - 0xa0]
mov dword [ebp + eax*4 - 0x240], 0xd2e8
jmp 0x1001ec10
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x240]
mov dword [ebp - 0x578], eax
mov eax, 0x3f7bf48c
sub eax, 0x3eb60693
jne 0x1001ec64
mov dword [ebp - 0x250], 1
jmp 0x1001ec6b
and dword [ebp - 0x250], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x240], 0x7dcd66a0
jle 0x1001ec8a
mov dword [ebp - 0x248], 1
jmp 0x1001ec91
and dword [ebp - 0x248], 0
mov eax, dword [ebp - 0x6c]
cmp eax, dword [ebp - 0x248]
jle 0x1001eca8
mov dword [ebp - 0x100], 1
jmp 0x1001ecaf
and dword [ebp - 0x100], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x100]
mov dword [ebp + eax - 0x6d8], ecx
mov eax, dword [ebp - 0x250]
sub eax, dword [ebp - 0x100]
cmp eax, 0xfffffff7
je 0x1001ed6e
mov dword [ebp - 0x258], 0
mov dword [ebp - 0x580], 0xb79ae4f7
mov dword [ebp - 0x588], 0x213072c0
mov dword [ebp - 0x590], 0x4b15d3e9
mov dword [ebp - 0x598], 1
mov dword [ebp - 0x5a0], 0xfffffffb
mov dword [ebp - 0x268], 0x6a1c
mov dword [ebp - 0xa8], 0
jmp 0x1001ed36
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 2
jge 0x1001ed52
mov eax, dword [ebp - 0xa8]
mov dword [ebp + eax*4 - 0x6e8], 1
jmp 0x1001ed29
mov eax, dword [ebp - 0x258]
dec eax
mov dword [ebp - 0x258], eax
mov eax, dword [ebp - 0x268]
dec eax
mov dword [ebp - 0x268], eax
jmp 0x1001edba
mov dword [ebp - 0x5a8], 1
mov dword [ebp - 0xb0], 0
jmp 0x1001ed91
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 3
jge 0x1001edad
mov eax, dword [ebp - 0xb0]
mov dword [ebp + eax*4 - 0x700], 0xe2efe8e6
jmp 0x1001ed84
mov eax, dword [ebp - 0x270]
inc eax
mov dword [ebp - 0x270], eax
mov byte [ebp - 0x4e], 0
movzx eax, byte [ebp - 0x4e]
test eax, eax
je 0x1001edd0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
jmp 0x1001eb85
mov eax, dword [ebp - 0x2e0]
mov dword [0x10659308], eax
mov eax, dword [ebp - 0x108]
mov dword [0x1065930c], eax
mov dword [ebp - 0x1c], 0x47df
mov dword [ebp - 0x2a8], 0xac0faab3
mov dword [ebp - 0x5b0], 0xffffffff
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1c], 0xffffffee
jmp 0x1001ee1d
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x30
jg 0x1001f008
mov dword [ebp - 0xb8], 0x9ecf
mov dword [ebp - 0x3b8], 0x5610a143
mov dword [ebp - 0x3c0], 0x5950
mov dword [ebp - 0x3c8], 8
cmp dword [ebp - 0x1c], 0xa4ccfd66
ja 0x1001ee64
mov dword [ebp - 0x278], 1
jmp 0x1001ee6b
and dword [ebp - 0x278], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x278], eax
je 0x1001ee82
mov dword [ebp - 0x280], 1
jmp 0x1001ee89
and dword [ebp - 0x280], 0
mov eax, 0x13b2
sub eax, dword [ebp - 0x280]
cmp eax, 0xa17d0b0a
jne 0x1001eea7
mov dword [ebp - 0x288], 1
jmp 0x1001eeae
and dword [ebp - 0x288], 0
mov eax, dword [ebp - 0xb8]
cmp dword [ebp - 0x288], eax
jg 0x1001eec8
mov dword [ebp - 0x290], 1
jmp 0x1001eecf
and dword [ebp - 0x290], 0
mov eax, dword [ebp - 0xb8]
cmp eax, dword [ebp - 0x290]
jl 0x1001eee9
mov dword [ebp - 0x298], 1
jmp 0x1001eef0
and dword [ebp - 0x298], 0
mov eax, dword [ebp - 0x298]
add eax, 7
jne 0x1001ef0d
cmp dword [ebp - 0xb8], 0
jne 0x1001ef0d
and dword [ebp - 0x2a0], 0
jmp 0x1001ef17
mov dword [ebp - 0x2a0], 1
mov eax, dword [ebp - 0x2a0]
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2a8], 0
jne 0x1001ef3a
xor eax, eax
inc eax
jne 0x1001ef3a
and dword [ebp - 0x2b0], 0
jmp 0x1001ef44
mov dword [ebp - 0x2b0], 1
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x2b0], eax
jle 0x1001ef5b
mov dword [ebp - 0x2b8], 1
jmp 0x1001ef62
and dword [ebp - 0x2b8], 0
mov eax, dword [ebp - 0xb8]
cmp dword [ebp - 0x2b8], eax
jne 0x1001ef7c
mov dword [ebp - 0x2c0], 1
jmp 0x1001ef83
and dword [ebp - 0x2c0], 0
cmp dword [ebp - 0x2c0], 0x9b780f88
je 0x1001ef9b
mov dword [ebp - 0x2c8], 1
jmp 0x1001efa2
and dword [ebp - 0x2c8], 0
mov eax, dword [ebp - 0x2c8]
sub eax, dword [ebp - 0x1c]
cmp eax, 1
jne 0x1001efb9
cmp dword [ebp - 0x3b8], 0
je 0x1001efc0
cmp dword [ebp - 0x3c0], 0
cmp dword [ebp - 0x1c], 5
jbe 0x1001efd2
mov dword [ebp - 0x2d0], 1
jmp 0x1001efd9
and dword [ebp - 0x2d0], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x2d0], eax
jle 0x1001eff0
mov dword [ebp - 0x13c], 1
jmp 0x1001eff7
and dword [ebp - 0x13c], 0
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x3c8], eax
jmp 0x1001ee16
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov edx, dword [ebp - 0x108]
mov edx, dword [edx + eax]
mov eax, dword [ebp - 0x2e0]
mov ecx, dword [eax + ecx]
call fcn.1001c802
mov dword [ebp - 0x3d0], eax
push dword [ebp - 0x108]
mov edx, 0x10659544
mov ecx, dword [ebp - 0x3d0]
call fcn.1001c80e
pop ecx
mov dword [ebp - 0x118], 0x488f4f3
mov dword [ebp - 0x120], 1
mov dword [ebp - 0x110], 0x1b9c6fec
mov dword [ebp - 0x3d8], 1
mov dword [ebp - 0x348], 1
mov dword [ebp - 0x3e0], 0xffffffff
mov dword [ebp - 0x38], 0
jmp 0x1001f094
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 2
jge 0x1001f0aa
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x12c], 0x6d44
jmp 0x1001f08d
mov dword [ebp - 0x38], 0
jmp 0x1001f0ba
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 3
jge 0x1001f0d0
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x6cc], 0x17ca4e86
jmp 0x1001f0b3
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x12c]
mov dword [ebp - 0x5b8], eax
imul eax, dword [ebp - 0x120], 0x19f8
mov dword [ebp - 0x2e8], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x2e8]
mov dword [ebp + eax - 0x6cc], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x12c]
imul eax, dword [ebp - 0x2e8]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x12c]
je 0x1001f134
mov dword [ebp - 0x2f0], 1
jmp 0x1001f13b
and dword [ebp - 0x2f0], 0
cmp dword [ebp - 0x2f0], 0xffffffff
jle 0x1001f150
mov dword [ebp - 0x2f8], 1
jmp 0x1001f157
and dword [ebp - 0x2f8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x12c]
cmp dword [ebp - 0x2f8], eax
jge 0x1001f178
mov dword [ebp - 0x300], 1
jmp 0x1001f17f
and dword [ebp - 0x300], 0
mov eax, dword [ebp - 0x118]
cmp dword [ebp - 0x300], eax
jne 0x1001f199
mov dword [ebp - 0x308], 1
jmp 0x1001f1a0
and dword [ebp - 0x308], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x12c]
cmp dword [ebp - 0x308], eax
jne 0x1001f1c1
mov dword [ebp - 0x310], 1
jmp 0x1001f1c8
and dword [ebp - 0x310], 0
imul eax, dword [ebp - 0x310], 0x4309
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x12c]
push 3
pop ecx
sub ecx, eax
jne 0x1001f1f9
mov eax, 0x869e7721
test eax, eax
jne 0x1001f1f9
and dword [ebp - 0x318], 0
jmp 0x1001f203
mov dword [ebp - 0x318], 1
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
mov eax, dword [ebp - 0x110]
cmp eax, dword [ebp - 0x318]
jne 0x1001f22a
mov dword [ebp - 0x320], 1
jmp 0x1001f231
and dword [ebp - 0x320], 0
imul eax, dword [ebp - 0x320], 0xfa2e
cmp eax, 0xe8a28d88
jne 0x1001f24e
mov dword [ebp - 0x328], 1
jmp 0x1001f255
and dword [ebp - 0x328], 0
mov eax, dword [ebp - 0x328]
mov dword [ebp - 0x118], eax
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x5c0], eax
cmp dword [ebp - 0x3d8], 0x965da1f7
jae 0x1001f285
mov dword [ebp - 0x330], 1
jmp 0x1001f28c
and dword [ebp - 0x330], 0
cmp dword [ebp - 0x330], 0x66ba0539
jge 0x1001f2a4
mov dword [ebp - 0x338], 1
jmp 0x1001f2ab
and dword [ebp - 0x338], 0
mov eax, dword [ebp - 0x120]
cmp dword [ebp - 0x338], eax
jne 0x1001f2c5
mov dword [ebp - 0x340], 1
jmp 0x1001f2cc
and dword [ebp - 0x340], 0
mov eax, dword [ebp - 0x340]
mov dword [ebp - 0x348], eax
cmp dword [ebp - 0x348], 0
cmp dword [ebp - 0x120], 0x81f13d46
jb 0x1001f2f7
mov dword [ebp - 0x350], 1
jmp 0x1001f2fe
and dword [ebp - 0x350], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x12c]
cmp eax, dword [ebp - 0x350]
jl 0x1001f31f
mov dword [ebp - 0x358], 1
jmp 0x1001f326
and dword [ebp - 0x358], 0
mov eax, dword [ebp - 0x358]
mov dword [ebp - 0x3e0], eax
mov esi, 0x10659308
mov edi, dword [ebp + 8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret