Function at 0x10021fd4
Capabilities:
Check os version
Contain obfuscated stackstrings
Encode data using base64
Enumerate pe sections
Get disk size
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1007c9e9
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xc68
push esi
push edi
and dword [ebp - 0x18], 0
movzx eax, byte [ebp + 8]
test eax, eax
je 0x10027773
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x28], eax
push 3
lea ecx, [ebp - 0x988]
call fcn.1000c1f9
and dword [ebp - 4], 0
mov dword [ebp - 0x90c], 0x432a2768
mov dword [ebp - 0x908], 0x432a2768
mov dword [ebp - 0x904], 0x432a2768
mov dword [ebp - 0x900], 0x432a2768
lea ecx, [ebp - 0x335]
call fcn.1000c2a6
push eax
lea eax, [ebp - 0x8fc]
push eax
lea eax, [ebp - 0x90c]
push eax
lea ecx, [ebp - 0xba4]
call fcn.1000c2a9
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x85c]
call fcn.1000c255
mov byte [ebp - 4], 1
push 2
lea ecx, [ebp - 0xa24]
call fcn.1000c1f9
mov byte [ebp - 4], 2
lea eax, [ebp - 0x988]
push eax
push 0x21d1
lea eax, [ebp - 0x108]
push eax
push 0
call fcn.1002138f
add esp, 0x10
mov dword [ebp - 0x108], 0
jmp 0x100220c3
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 2
jge 0x100220e5
push dword [ebp - 0x108]
lea ecx, [ebp - 0xa24]
call fcn.1000c297
mov dword [eax], 0xbdbdf7c
jmp 0x100220b6
push 0
lea ecx, [ebp - 0x85c]
call fcn.1000c297
mov dword [eax], 2
jmp 0x1002211e
push 0
lea ecx, [ebp - 0x85c]
call fcn.1000c297
mov dword [ebp - 0x424], eax
mov eax, dword [ebp - 0x424]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x424]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x85c]
call fcn.1000c297
cmp dword [eax], 0
jl 0x10022236
push 3
lea ecx, [ebp - 0x720]
call fcn.1000c1f9
mov byte [ebp - 4], 3
mov dword [ebp - 0x178], 0
jmp 0x1002215e
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 3
jge 0x10022180
push dword [ebp - 0x178]
lea ecx, [ebp - 0x720]
call fcn.1000c297
mov dword [eax], 0x10f7a73
jmp 0x10022151
push 0
lea ecx, [ebp - 0x720]
call fcn.1000c297
and dword [eax], 0
jmp 0x100221b6
push 0
lea ecx, [ebp - 0x720]
call fcn.1000c297
mov dword [ebp - 0x66c], eax
mov eax, dword [ebp - 0x66c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x66c]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x720]
call fcn.1000c297
cmp dword [eax], 2
jg 0x100221ef
mov dword [ebp - 0x82c], 0x43ac
push 0x46ec
lea eax, [ebp - 0x82c]
push eax
push 1
push 0x387b
call fcn.100201d8
add esp, 0x10
jmp 0x10022192
push 0
lea ecx, [ebp - 0x85c]
call fcn.1000c297
push dword [eax]
lea ecx, [ebp - 0x988]
call fcn.1000c297
cmp dword [eax], 0
je 0x10022222
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x720]
call fcn.1000c27b
jmp 0x100220fa
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x720]
call fcn.1000c27b
jmp 0x100220fa
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xa24]
call fcn.1000c27b
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x85c]
call fcn.1000c27b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x988]
call fcn.1000c27b
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x3d8], eax
mov dword [ebp - 0x70], 0x6ff5
mov dword [ebp - 0x138], 0x6fc6088b
mov dword [ebp - 0x540], 0xffffffff
mov dword [ebp - 0x7a0], 0x32955f1b
mov dword [ebp - 0x1dc], 0
jmp 0x100222aa
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 1
jge 0x100222c6
mov eax, dword [ebp - 0x1dc]
mov dword [ebp + eax*4 - 0x798], 0xb6ce1a81
jmp 0x1002229d
cmp dword [ebp - 0x70], 0xb5ca9869
je 0x100222db
mov dword [ebp - 0x664], 1
jmp 0x100222e2
and dword [ebp - 0x664], 0
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0xa14], eax
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0xa08], eax
cmp dword [ebp - 0x70], 0
jl 0x10022309
mov dword [ebp - 0x674], 1
jmp 0x10022310
and dword [ebp - 0x674], 0
cmp dword [ebp - 0x674], 0xdde9ab5c
je 0x10022328
mov dword [ebp - 0x6ac], 1
jmp 0x1002232f
and dword [ebp - 0x6ac], 0
mov eax, dword [ebp - 0x138]
add eax, dword [ebp - 0x6ac]
sub eax, dword [ebp - 0x138]
cmp eax, dword [ebp - 0x70]
jl 0x10022358
mov eax, 0x9785734c
test eax, eax
jne 0x10022358
and dword [ebp - 0x6b4], 0
jmp 0x10022362
mov dword [ebp - 0x6b4], 1
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x6b4], eax
jne 0x10022379
mov dword [ebp - 0x6bc], 1
jmp 0x10022380
and dword [ebp - 0x6bc], 0
mov eax, dword [ebp - 0x540]
cmp dword [ebp - 0x6bc], eax
jl 0x1002239a
mov dword [ebp - 0x6c4], 1
jmp 0x100223a1
and dword [ebp - 0x6c4], 0
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x6c4], eax
jle 0x100223b8
mov dword [ebp - 0x6cc], 1
jmp 0x100223bf
and dword [ebp - 0x6cc], 0
mov eax, dword [ebp - 0x70]
cmp eax, dword [ebp - 0x6cc]
jge 0x100223d6
mov dword [ebp - 0x6c8], 1
jmp 0x100223dd
and dword [ebp - 0x6c8], 0
mov eax, dword [ebp - 0x138]
cmp dword [ebp - 0x6c8], eax
jl 0x100223f7
mov dword [ebp - 0x390], 1
jmp 0x100223fe
and dword [ebp - 0x390], 0
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x390], eax
jg 0x10022415
mov dword [ebp - 0x610], 1
jmp 0x1002241c
and dword [ebp - 0x610], 0
mov eax, dword [ebp - 0x664]
imul eax, dword [ebp - 0x610]
mov dword [ebp - 0x398], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x398]
mov dword [ebp + eax - 0x798], ecx
mov eax, dword [ebp - 0x70]
add eax, dword [ebp - 0x398]
cmp eax, dword [ebp - 0x138]
jle 0x10022465
cmp dword [ebp - 0x540], 0
jne 0x10022465
and dword [ebp - 0x3a0], 0
jmp 0x1002246f
mov dword [ebp - 0x3a0], 1
mov eax, dword [ebp - 0x3a0]
mov dword [ebp - 0x7a0], eax
mov byte [ebp - 0x8d], 0
push 0x57a7
lea eax, [ebp - 0x8d]
push eax
push 0x556
push 0x129c
push 0
call fcn.1002127c
add esp, 0x14
mov eax, dword [ebp - 0x3d8]
movzx eax, word [eax]
cmp eax, 0x5a4d
je 0x1002271d
mov dword [ebp - 0x180], 1
mov dword [ebp - 0xa44], 4
mov dword [ebp - 0xa10], 0xffffffff
mov dword [ebp - 0x824], 0xddd1d8f8
mov dword [ebp - 0x3a8], 0x5165352f
mov dword [ebp - 0x694], 0x516a205b
mov dword [ebp - 0xa4c], 0xffffffff
mov dword [ebp - 0x110], 0xffffffff
mov dword [ebp - 0xa18], 0x9c3d069f
mov dword [ebp - 0xaec], 0xffffffff
mov dword [ebp - 0x814], 0xffffffff
mov dword [ebp - 0xa48], 0x6c21
mov dword [ebp - 0x7a8], 0xffffffff
push 2
lea ecx, [ebp - 0xa38]
call fcn.1000c1f9
mov dword [ebp - 4], 4
mov dword [ebp - 0x80c], 0
mov dword [ebp - 0x548], 5
mov dword [ebp - 0x324], 0xffffffff
mov dword [ebp - 0x804], 0x1dc6
lea eax, [ebp - 0xae8]
push eax
lea eax, [ebp - 0xa38]
push eax
push 1
call fcn.10020249
add esp, 0xc
mov dword [ebp - 0x180], 0x19
jmp 0x100225a5
mov eax, dword [ebp - 0x180]
dec eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 0xffffffe9
jge 0x100225f9
mov byte [ebp - 0xbd], 0
movzx eax, byte [ebp - 0xbd]
test eax, eax
je 0x100225d4
push 0x16f8
push 0
push 0
push 0x1f09
call dword [sym.imp.USER32.dll_SetWindowsHookExA]
push 0x701e
push 0x36da
push 0x4ced
push 0x4f3f
push 0
push 0xdf5
call fcn.10021abd
add esp, 0x18
jmp 0x10022598
mov eax, dword [ebp - 0x548]
mov dword [ebp - 0x694], eax
mov eax, dword [ebp - 0x694]
mov dword [ebp - 0x3a8], eax
mov eax, dword [ebp - 0x110]
imul eax, dword [ebp - 0x7a8]
cmp dword [ebp - 0x3a8], eax
jne 0x10022640
mov eax, dword [ebp - 0x804]
cmp dword [ebp - 0x548], eax
je 0x10022640
mov dword [ebp - 0x3b0], 1
jmp 0x10022647
and dword [ebp - 0x3b0], 0
mov eax, dword [ebp - 0x80c]
cmp dword [ebp - 0x3b0], eax
jle 0x1002266a
cmp dword [ebp - 0x814], 0
je 0x1002266a
mov dword [ebp - 0x81c], 1
jmp 0x10022671
and dword [ebp - 0x81c], 0
mov eax, dword [ebp - 0x324]
inc eax
mov dword [ebp - 0x324], eax
mov eax, dword [ebp - 0x324]
mov dword [ebp - 0xa50], eax
mov eax, dword [ebp - 0x824]
sub eax, 0x281c3dc7
cmp eax, 0xd5eb
je 0x100226e7
mov dword [ebp - 0x724], 0xfffffff7
mov dword [ebp - 0x110], 0x15
jmp 0x100226bf
mov eax, dword [ebp - 0x110]
dec eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0xfffffff3
jne 0x100226e5
lea eax, [ebp - 0x724]
push eax
push 0x1cfd
push 0x548e
push 0
call fcn.100206a3
add esp, 0x10
jmp 0x100226b2
jmp 0x10022709
mov byte [ebp - 0xc8], 0
push 0
push 0x6cdb
lea eax, [ebp - 0xc8]
push eax
push 0x393f
call fcn.10021300
add esp, 0x10
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa38]
call fcn.1000c27b
jmp 0x100277e3
push 4
lea ecx, [ebp - 0x320]
call fcn.1000c1f9
mov dword [ebp - 4], 5
mov dword [ebp - 0xcc], 0xd952
mov dword [ebp - 0xd4], 0xfffffffa
mov dword [ebp - 0x834], 0x6ff6
mov dword [ebp - 0x844], 0xfff8
mov dword [ebp - 0x84c], 0xa9172c2e
mov dword [ebp - 0x54], 0
jmp 0x10022773
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 4
jge 0x1002278f
push dword [ebp - 0x54]
lea ecx, [ebp - 0x320]
call fcn.1000c297
mov dword [eax], 1
jmp 0x1002276c
mov dword [ebp - 0x54], 0
jmp 0x1002279f
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 4
jge 0x100227b5
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0xbe4], 0xfffffff9
jmp 0x10022798
push 2
lea ecx, [ebp - 0x320]
call fcn.1000c297
push 2
lea ecx, [ebp - 0x320]
call fcn.1000c297
cmp dword [eax], 0
je 0x100227fb
push 2
lea ecx, [ebp - 0x320]
call fcn.1000c297
push 0
lea ecx, [ebp - 0x320]
call fcn.1000c297
push 0
lea ecx, [ebp - 0x320]
call fcn.1000c297
mov esi, dword [ebp - 0xcc]
mov edi, dword [ebp - 0xcc]
sub edi, dword [ebp - 0xcc]
push 2
lea ecx, [ebp - 0x320]
call fcn.1000c297
add edi, dword [eax]
add esi, edi
cmp esi, dword [ebp - 0xcc]
je 0x10022832
mov dword [ebp - 0x618], 1
jmp 0x10022839
and dword [ebp - 0x618], 0
mov eax, dword [ebp - 0x618]
mov dword [ebp - 0xd4], eax
mov eax, dword [ebp - 0xcc]
cmp dword [ebp - 0xd4], eax
jle 0x10022a20
mov dword [ebp - 0x1e4], 0xfffffff7
mov dword [ebp - 0x7c], 0
push 0x2453
push 0x5a7
push 0
lea eax, [ebp - 0xd4]
push eax
push 0x2e70
lea eax, [ebp - 0x1e4]
push eax
push 0x4da3
call fcn.10020a93
add esp, 0x1c
mov eax, dword [ebp - 0x834]
mov dword [ebp - 0xb10], eax
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0xa5c], eax
cmp dword [ebp - 0xd4], 0
je 0x100228d9
push 2
lea ecx, [ebp - 0x320]
call fcn.1000c297
cmp dword [eax], 0
je 0x100228d9
mov dword [ebp - 0x3b8], 1
jmp 0x100228e0
and dword [ebp - 0x3b8], 0
mov eax, dword [ebp - 0x1e4]
cmp dword [ebp - 0x3b8], eax
jg 0x100228fa
mov dword [ebp - 0x83c], 1
jmp 0x10022901
and dword [ebp - 0x83c], 0
cmp dword [ebp - 0x1e4], 0x8b4b72b4
jne 0x10022922
cmp dword [ebp - 0x1e4], 0
je 0x10022922
mov dword [ebp - 0x550], 1
jmp 0x10022929
and dword [ebp - 0x550], 0
mov eax, dword [ebp - 0x550]
mov dword [ebp - 0xd4], eax
mov esi, dword [ebp - 0xd4]
push 3
lea ecx, [ebp - 0x320]
call fcn.1000c297
cmp dword [eax], esi
jge 0x10022958
mov dword [ebp - 0x3c0], 1
jmp 0x1002295f
and dword [ebp - 0x3c0], 0
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x3c0], eax
jg 0x10022976
mov dword [ebp - 0x684], 1
jmp 0x1002297d
and dword [ebp - 0x684], 0
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x684], eax
jne 0x10022994
mov dword [ebp - 0x3c8], 1
jmp 0x1002299b
and dword [ebp - 0x3c8], 0
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x3c8], eax
jle 0x100229b2
mov dword [ebp - 0x558], 1
jmp 0x100229b9
and dword [ebp - 0x558], 0
cmp dword [ebp - 0x558], 0xad47
jg 0x100229d1
mov dword [ebp - 0x3d0], 1
jmp 0x100229d8
and dword [ebp - 0x3d0], 0
mov esi, dword [ebp - 0x844]
imul esi, dword [ebp - 0x3d0]
push 2
lea ecx, [ebp - 0x320]
call fcn.1000c297
imul esi, dword [eax]
mov dword [ebp - 0x7c], esi
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x84c], eax
push 2
lea ecx, [ebp - 0x320]
call fcn.1000c297
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x7c]
mov dword [ebp + eax - 0xbe4], ecx
jmp 0x10022a37
mov dword [ebp - 0x620], 0xfffffff7
mov eax, dword [ebp - 0x620]
dec eax
mov dword [ebp - 0x620], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x320]
call fcn.1000c27b
mov eax, dword [ebp - 0x3d8]
mov ecx, dword [ebp - 0x28]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0x94], ecx
mov dword [ebp - 0xf4], 0x960f57a7
mov dword [ebp - 0x89c], 0x11151
mov dword [ebp - 0x188], 0
jmp 0x10022a85
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 2
jge 0x10022aa1
mov eax, dword [ebp - 0x188]
mov dword [ebp + eax*4 - 0xa58], 0x477862fd
jmp 0x10022a78
mov dword [ebp - 0xf4], 0
jmp 0x10022aba
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 2
jge 0x10022ad6
mov eax, dword [ebp - 0xf4]
mov dword [ebp + eax*4 - 0xa58], 0x398070a
jmp 0x10022aad
lea eax, [ebp - 0xf4]
push eax
push 0x745b
push 0
push 0x7c54
lea eax, [ebp - 0x89c]
push eax
call fcn.100219b1
add esp, 0x14
mov eax, dword [ebp - 0x94]
cmp dword [eax], 0x4550
je 0x10022c6c
push 4
lea ecx, [ebp - 0x940]
call fcn.1000c1f9
mov dword [ebp - 4], 6
mov dword [ebp - 0x150], 0x8da8e97e
mov dword [ebp - 0x1ec], 0
jmp 0x10022b41
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 4
jge 0x10022b63
push dword [ebp - 0x1ec]
lea ecx, [ebp - 0x940]
call fcn.1000c297
mov dword [eax], 0x6c05baf4
jmp 0x10022b34
mov dword [ebp - 0x150], 3
jmp 0x10022b7c
mov eax, dword [ebp - 0x150]
dec eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0
jl 0x10022c35
mov dword [ebp - 0xfc], 7
mov dword [ebp - 0x7c0], 0x943c6fe2
mov dword [ebp - 0xfc], 0
jmp 0x10022bb6
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 3
jg 0x10022c30
mov dword [ebp - 0x888], 0xca7b5cf1
mov byte [ebp - 0xbf], 0
movzx eax, byte [ebp - 0xbf]
test eax, eax
je 0x10022bef
push 0x2d1b
push 0x36e5
push 0
call fcn.10021f85
add esp, 0xc
lea eax, [ebp - 0x150]
push eax
lea eax, [ebp - 0x940]
push eax
push 0x10de
push 0x600b
lea eax, [ebp - 0x888]
push eax
lea eax, [ebp - 0x7c0]
push eax
push 0x5bfe
lea eax, [ebp - 0xfc]
push eax
push 0
call fcn.10021bdb
add esp, 0x24
jmp 0x10022ba9
jmp 0x10022b6f
mov byte [ebp - 0x82], 0
movzx eax, byte [ebp - 0x82]
test eax, eax
je 0x10022c58
push 0
push 0x209e
push 0
push 0
call dword [sym.imp.KERNEL32.dll_VerSetConditionMask]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x940]
call fcn.1000c27b
jmp 0x100277e3
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x94]
lea eax, [ecx + eax + 0x78]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
cmp dword [eax + 4], 0
jne 0x10022c8d
jmp 0x100277e3
mov dword [ebp - 0xaf0], 8
mov byte [ebp - 0x83], 0
movzx eax, byte [ebp - 0x83]
test eax, eax
je 0x10022cb1
push 0
call fcn.100208af
pop ecx
mov byte [ebp - 0x85], 0
movzx eax, byte [ebp - 0x85]
test eax, eax
je 0x10022cd4
push 0
push 0x1aef
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SignalObjectAndWait]
and dword [ebp - 0x2c], 0
mov dword [ebp - 0x72c], 0xea6801fc
mov dword [ebp - 0xa6c], 0xde2bbef7
mov dword [ebp - 0x190], 0
jmp 0x10022d05
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 2
jge 0x10022d21
mov eax, dword [ebp - 0x190]
mov dword [ebp + eax*4 - 0x680], 0xcff0ea75
jmp 0x10022cf8
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x680], 0xffffffec
jmp 0x10022d4f
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x680]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x680], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x680], 0x1b
jle 0x10022d74
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x680]
mov dword [ebp - 0x72c], eax
jmp 0x10022d34
mov eax, dword [ebp - 0x94]
movzx eax, word [eax + 0x14]
mov ecx, dword [ebp - 0x94]
lea eax, [ecx + eax + 0x18]
mov dword [ebp - 0xec], eax
mov dword [ebp - 0x1fc], 0xffffffff
push 2
lea ecx, [ebp - 0xa68]
call fcn.1000c1f9
mov dword [ebp - 4], 7
mov dword [ebp - 0x808], 0xfffffff7
mov dword [ebp - 0x1f4], 0
jmp 0x10022dcf
mov eax, dword [ebp - 0x1f4]
inc eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 2
jge 0x10022df1
push dword [ebp - 0x1f4]
lea ecx, [ebp - 0xa68]
call fcn.1000c297
mov dword [eax], 0xe1d9
jmp 0x10022dc2
mov byte [ebp - 0xc7], 0
movzx eax, byte [ebp - 0xc7]
test eax, eax
je 0x10022e11
push 1
push 0xb32
call fcn.100202c3
pop ecx
pop ecx
mov dword [ebp - 0x1fc], 0
jmp 0x10022e2a
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 0x12
jne 0x10022e94
mov dword [ebp - 0x118], 1
mov dword [ebp - 0x118], 1
jmp 0x10022e56
mov eax, dword [ebp - 0x118]
dec eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0
jl 0x10022e86
mov dword [ebp - 0x790], 0x2e5664dc
lea eax, [ebp - 0x790]
push eax
push 0
push 0x77cc
push 0x4f62
call fcn.10021d6d
add esp, 0x10
jmp 0x10022e49
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x808], eax
jmp 0x10022e1d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa68]
call fcn.1000c27b
and dword [ebp - 0x35c], 0
jmp 0x10022ec8
mov eax, dword [ebp - 0x35c]
inc eax
mov dword [ebp - 0x35c], eax
mov eax, dword [ebp - 0xec]
add eax, 0x28
mov dword [ebp - 0xec], eax
mov eax, dword [ebp - 0x94]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x35c], eax
jge 0x10022f4e
mov eax, dword [ebp - 0xec]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x560], eax
mov eax, dword [ebp - 0x40]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x560]
jb 0x10022f49
mov eax, dword [ebp - 0x94]
push dword [eax + 0x38]
mov eax, dword [ebp - 0xec]
push dword [eax + 8]
call fcn.100200b7
pop ecx
pop ecx
add eax, dword [ebp - 0x560]
mov dword [ebp - 0x734], eax
mov eax, dword [ebp - 0x40]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x734]
jae 0x10022f49
push 0x57b7
push 1
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0xec]
push eax
push 0x1711
call fcn.100202ff
add esp, 0x14
jmp 0x10022f4e
jmp 0x10022eac
mov dword [ebp - 0x890], 0x90be
mov dword [ebp - 0x3e0], 0xea122098
mov dword [ebp - 0x3e8], 0x6c3a0b8e
mov dword [ebp - 0x568], 3
push 2
lea ecx, [ebp - 0x9ac]
call fcn.1000c1f9
mov dword [ebp - 4], 8
mov dword [ebp - 0x1a4], 0
jmp 0x10022fa3
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 2
jge 0x10022fc5
push dword [ebp - 0x1a4]
lea ecx, [ebp - 0x9ac]
call fcn.1000c297
mov dword [eax], 7
jmp 0x10022f96
mov byte [ebp - 0x84], 0
movzx eax, byte [ebp - 0x84]
test eax, eax
je 0x10022ffa
push 0x6e4b
push 0x4045
push 0x7d34
push 0x596c
push 0x11bb
push 0
call fcn.100211ca
add esp, 0x18
mov eax, dword [ebp - 0x890]
mov dword [ebp - 0x3e0], eax
cmp dword [ebp - 0x3e0], 0xffffffff
jne 0x1002301b
mov dword [ebp - 0x69c], 1
jmp 0x10023022
and dword [ebp - 0x69c], 0
or eax, 0xffffffff
sub eax, dword [ebp - 0x69c]
mov dword [ebp - 0x3e8], eax
mov dword [ebp - 0x568], 0x6baf
mov esi, dword [ebp - 0x3e8]
add esi, dword [ebp - 0x568]
push 1
lea ecx, [ebp - 0x9ac]
call fcn.1000c297
mov dword [eax], esi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9ac]
call fcn.1000c27b
cmp dword [ebp - 0x2c], 0
jne 0x10023070
jmp 0x100277e3
push 4
lea ecx, [ebp - 0x958]
call fcn.1000c1f9
mov dword [ebp - 4], 9
push 1
lea ecx, [ebp - 0x714]
call fcn.1000c1f9
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x744], 1
mov dword [ebp - 0x74c], 0xfffffff7
mov dword [ebp - 0xb3c], 0xffffffff
mov dword [ebp - 0x818], 0xfffffffe
mov dword [ebp - 0x24], 0
jmp 0x100230cd
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 4
jge 0x100230e6
push dword [ebp - 0x24]
lea ecx, [ebp - 0x958]
call fcn.1000c297
or dword [eax], 0xffffffff
jmp 0x100230c6
mov dword [ebp - 0x24], 0
jmp 0x100230f6
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x10023112
push dword [ebp - 0x24]
lea ecx, [ebp - 0x714]
call fcn.1000c297
mov dword [eax], 0x6fe7d8a8
jmp 0x100230ef
mov dword [ebp - 0x24], 0
jmp 0x10023122
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jge 0x10023138
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xb6c], 1
jmp 0x1002311b
push 0
lea ecx, [ebp - 0x714]
call fcn.1000c297
and dword [eax], 0
jmp 0x1002316e
push 0
lea ecx, [ebp - 0x714]
call fcn.1000c297
mov dword [ebp - 0x3f0], eax
mov eax, dword [ebp - 0x3f0]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x3f0]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x714]
call fcn.1000c297
cmp dword [eax], 3
jg 0x10023281
mov dword [ebp - 0x73c], 0xfffb
mov dword [ebp - 0x810], 0x45cb81ec
mov dword [ebp - 0x860], 1
mov dword [ebp - 0x934], 2
mov dword [ebp - 0x930], 2
mov dword [ebp - 0x92c], 2
mov dword [ebp - 0x928], 2
lea ecx, [ebp - 0x351]
call fcn.1000c2a6
push eax
lea eax, [ebp - 0x924]
push eax
lea eax, [ebp - 0x934]
push eax
lea ecx, [ebp - 0xbbc]
call fcn.1000c2a9
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xb4c]
call fcn.1000c255
mov byte [ebp - 4], 0xb
lea eax, [ebp - 0x73c]
push eax
push 0x4fab
push 0x683a
lea eax, [ebp - 0x714]
push eax
push 0x7c59
push 0x7f55
push 0
push 0x7188
lea eax, [ebp - 0x810]
push eax
lea eax, [ebp - 0x744]
push eax
lea eax, [ebp - 0x860]
push eax
lea eax, [ebp - 0x74c]
push eax
lea eax, [ebp - 0x958]
push eax
call fcn.10021746
add esp, 0x34
lea eax, [ebp - 0x818]
push eax
push 1
push 0x4097
call fcn.1002038b
add esp, 0xc
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xb4c]
call fcn.1000c27b
jmp 0x1002314a
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x714]
call fcn.1000c27b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x958]
call fcn.1000c27b
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x2c]
add ecx, dword [eax]
add ecx, dword [ebp - 0x28]
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x34], 0x1f7e2799
mov dword [ebp - 0x400], 8
mov dword [ebp - 0x8a0], 0xfffffffc
mov dword [ebp - 0xa7c], 0x8a514227
mov dword [ebp - 0xaf8], 0x38fd2320
mov dword [ebp - 0x1a0], 0
jmp 0x100232f5
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 1
jge 0x10023311
mov eax, dword [ebp - 0x1a0]
mov dword [ebp + eax*4 - 0xa8c], 6
jmp 0x100232e8
mov dword [ebp - 0x34], 0
jmp 0x10023321
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0xffffffea
jl 0x10023620
mov dword [ebp - 0x1a8], 0
mov dword [ebp - 0x140], 0
mov dword [ebp - 0x418], 0x7a0211e9
mov dword [ebp - 0x580], 0xffff
mov dword [ebp - 0x690], 0xffffffff
mov dword [ebp - 0xb24], 0
or dword [ebp - 0x920], 0xffffffff
or dword [ebp - 0x91c], 0xffffffff
or dword [ebp - 0x918], 0xffffffff
or dword [ebp - 0x914], 0xffffffff
lea ecx, [ebp - 0x33d]
call fcn.1000c2a6
push eax
lea eax, [ebp - 0x910]
push eax
lea eax, [ebp - 0x920]
push eax
lea ecx, [ebp - 0xbac]
call fcn.1000c2a9
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xa78]
call fcn.1000c255
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x1c8], 0
jmp 0x100233d8
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 2
jge 0x100233f4
mov eax, dword [ebp - 0x1c8]
mov dword [ebp + eax*4 - 0xbb4], 0xf2d89188
jmp 0x100233cb
cmp dword [ebp - 0x34], 0
je 0x100234f4
mov eax, dword [ebp - 0x1a8]
cmp dword [ebp - 0x34], eax
jne 0x10023415
mov dword [ebp - 0x6a4], 1
jmp 0x1002341c
and dword [ebp - 0x6a4], 0
mov eax, dword [ebp - 0x140]
sub eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x140]
je 0x10023439
mov dword [ebp - 0x628], 1
jmp 0x10023440
and dword [ebp - 0x628], 0
mov eax, dword [ebp - 0x140]
cmp dword [ebp - 0x628], eax
jne 0x1002345a
mov dword [ebp - 0x3f8], 1
jmp 0x10023461
and dword [ebp - 0x3f8], 0
mov eax, dword [ebp - 0x140]
cmp eax, dword [ebp - 0x3f8]
jne 0x1002347b
mov dword [ebp - 0x570], 1
jmp 0x10023482
and dword [ebp - 0x570], 0
mov eax, dword [ebp - 0x570]
mov dword [ebp - 0x400], eax
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x400], eax
jne 0x100234a0
cmp dword [ebp - 0x1a8], 0
cmp dword [ebp - 0x34], 1
jge 0x100234b2
mov dword [ebp - 0x408], 1
jmp 0x100234b9
and dword [ebp - 0x408], 0
mov eax, dword [ebp - 0x6a4]
cmp eax, dword [ebp - 0x408]
jne 0x100234d3
mov dword [ebp - 0x578], 1
jmp 0x100234da
and dword [ebp - 0x578], 0
mov eax, dword [ebp - 0x578]
sub eax, 0xa
cmp eax, 1
ja 0x100234f4
mov dword [ebp - 0x410], 1
jmp 0x100234fb
and dword [ebp - 0x410], 0
mov eax, dword [ebp - 0x410]
add eax, 0x3c3c51b0
imul eax, eax, 0xba09
imul eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x1a8]
jge 0x10023524
mov dword [ebp - 0x630], 1
jmp 0x1002352b
and dword [ebp - 0x630], 0
mov eax, dword [ebp - 0x630]
mov dword [ebp - 0x418], eax
mov eax, dword [ebp - 0x418]
mov dword [ebp - 0x580], eax
cmp dword [ebp - 0x580], 1
jle 0x10023558
mov dword [ebp - 0x420], 1
jmp 0x1002355f
and dword [ebp - 0x420], 0
mov eax, dword [ebp - 0x420]
mov dword [ebp - 0x690], eax
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x690], eax
jg 0x10023582
mov dword [ebp - 0x754], 1
jmp 0x10023589
and dword [ebp - 0x754], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x1a8], eax
jg 0x100235a0
mov dword [ebp - 0x428], 1
jmp 0x100235a7
and dword [ebp - 0x428], 0
cmp dword [ebp - 0x428], 0
jle 0x100235bc
mov dword [ebp - 0x588], 1
jmp 0x100235c3
and dword [ebp - 0x588], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x588], eax
je 0x100235e3
cmp dword [ebp - 0x140], 0
je 0x100235e3
mov dword [ebp - 0x430], 1
jmp 0x100235ea
and dword [ebp - 0x430], 0
mov eax, dword [ebp - 0x430]
mov dword [ebp - 0x8a0], eax
push 1
push 0x4f25
lea eax, [ebp - 0xa78]
push eax
call fcn.100203cc
add esp, 0xc
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa78]
call fcn.1000c27b
jmp 0x1002331a
xor ecx, ecx
call fcn.1000ceb0
push eax
call fcn.10062e4f
pop ecx
mov byte [ebp - 0x308], 9
mov byte [ebp - 0x307], 0x8e
mov byte [ebp - 0x306], 4
mov byte [ebp - 0x305], 8
mov byte [ebp - 0x304], 1
mov byte [ebp - 0x303], 0xd
mov byte [ebp - 0x302], 2
mov byte [ebp - 0x301], 2
mov byte [ebp - 0x300], 3
mov byte [ebp - 0x2ff], 0
mov byte [ebp - 0x2fe], 8
mov byte [ebp - 0x2fd], 7
mov byte [ebp - 0x2fc], 6
mov byte [ebp - 0x2fb], 1
mov byte [ebp - 0x2fa], 0
mov byte [ebp - 0x2f9], 0
mov byte [ebp - 0x2f8], 5
mov byte [ebp - 0x2f7], 0
mov byte [ebp - 0x2f6], 7
mov byte [ebp - 0x2f5], 7
mov byte [ebp - 0x2f4], 0x56
mov byte [ebp - 0x2f3], 0xbe
mov byte [ebp - 0x2f2], 0x8e
mov byte [ebp - 0x2f1], 0x7c
mov byte [ebp - 0x2f0], 9
mov byte [ebp - 0x2ef], 0xd8
mov byte [ebp - 0x2ee], 0xd1
mov byte [ebp - 0x2ed], 0x91
mov byte [ebp - 0x2ec], 0xfa
mov byte [ebp - 0x2eb], 0x10
mov byte [ebp - 0x2ea], 0x37
mov byte [ebp - 0x2e9], 0xb1
mov byte [ebp - 0x2e8], 0x44
mov byte [ebp - 0x2e7], 0x50
mov byte [ebp - 0x2e6], 0xc0
mov byte [ebp - 0x2e5], 0xcf
mov byte [ebp - 0x2e4], 0xe7
mov byte [ebp - 0x2e3], 0x4a
mov byte [ebp - 0x2e2], 0x7f
mov byte [ebp - 0x2e1], 0x90
mov byte [ebp - 0x2e0], 0xbe
mov byte [ebp - 0x2df], 0xe8
mov byte [ebp - 0x2de], 2
mov byte [ebp - 0x2dd], 0x85
mov byte [ebp - 0x2dc], 0x89
mov byte [ebp - 0x2db], 0x36
mov byte [ebp - 0x2da], 8
mov byte [ebp - 0x2d9], 0xad
mov byte [ebp - 0x2d8], 0xd0
mov byte [ebp - 0x2d7], 0x51
mov byte [ebp - 0x2d6], 0xd8
mov byte [ebp - 0x2d5], 1
mov byte [ebp - 0x2d4], 0x88
mov byte [ebp - 0x2d3], 0x82
mov byte [ebp - 0x2d2], 0xdf
mov byte [ebp - 0x2d1], 0xa2
mov byte [ebp - 0x2d0], 0x52
mov byte [ebp - 0x2cf], 0x13
mov byte [ebp - 0x2ce], 0
mov byte [ebp - 0x2cd], 5
mov byte [ebp - 0x2cc], 0x52
mov byte [ebp - 0x2cb], 0x59
mov byte [ebp - 0x2ca], 0xa9
mov byte [ebp - 0x2c9], 0xa4
mov byte [ebp - 0x2c8], 0x5d
mov byte [ebp - 0x2c7], 0xbc
mov byte [ebp - 0x2c6], 0xb5
mov byte [ebp - 0x2c5], 0x19
mov byte [ebp - 0x2c4], 0xb
mov byte [ebp - 0x2c3], 0x13
mov byte [ebp - 0x2c2], 0xd
mov byte [ebp - 0x2c1], 0xa2
mov byte [ebp - 0x2c0], 0xe6
mov byte [ebp - 0x2bf], 0x98
mov byte [ebp - 0x2be], 0x95
mov byte [ebp - 0x2bd], 0xf9
mov byte [ebp - 0x2bc], 0x4c
mov byte [ebp - 0x2bb], 0xf4
mov byte [ebp - 0x2ba], 0x7c
mov byte [ebp - 0x2b9], 0xfc
mov byte [ebp - 0x2b8], 0x2a
mov byte [ebp - 0x2b7], 0xf3
mov byte [ebp - 0x2b6], 0xc6
mov byte [ebp - 0x2b5], 0x90
mov byte [ebp - 0x2b4], 0x39
mov byte [ebp - 0x2b3], 0xfd
mov byte [ebp - 0x2b2], 0x4c
mov byte [ebp - 0x2b1], 0x41
mov byte [ebp - 0x2b0], 0xdf
mov byte [ebp - 0x2af], 0xef
mov byte [ebp - 0x2ae], 0xf9
mov byte [ebp - 0x2ad], 0
mov byte [ebp - 0x2ac], 0xd9
mov byte [ebp - 0x2ab], 0x49
mov byte [ebp - 0x2aa], 0x92
mov byte [ebp - 0x2a9], 0x83
mov byte [ebp - 0x2a8], 0xc6
mov byte [ebp - 0x2a7], 0xef
mov byte [ebp - 0x2a6], 0x33
mov byte [ebp - 0x2a5], 0xba
mov byte [ebp - 0x2a4], 0xce
mov byte [ebp - 0x2a3], 0xf4
mov byte [ebp - 0x2a2], 0xde
mov byte [ebp - 0x2a1], 0x3d
mov byte [ebp - 0x2a0], 0x79
mov byte [ebp - 0x29f], 0xb
mov byte [ebp - 0x29e], 0xe4
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x308]
or eax, 0xbe
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x308]
and ecx, 0xbe
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x308]
mov byte [ebp + ecx - 0x708], al
mov dword [ebp - 0x38], 2
and dword [ebp - 0x1f8], 0
jmp 0x10023971
mov eax, dword [ebp - 0x38]
inc eax
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0x6b
jae 0x10023a27
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x308]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x38], eax
jne 0x100239bb
mov eax, dword [ebp - 0x38]
movzx eax, byte [ebp + eax - 0x308]
inc eax
mov dword [ebp - 0x1f8], eax
mov eax, dword [ebp - 0x38]
movzx eax, byte [ebp + eax - 0x308]
mov ecx, dword [ebp - 0x38]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x38], eax
jmp 0x10023969
mov eax, dword [ebp - 0x38]
movzx eax, byte [ebp + eax - 0x307]
mov ecx, dword [ebp - 0x38]
sub ecx, dword [ebp - 0x1f8]
movzx ecx, byte [ebp + ecx - 0x30a]
movsx ecx, byte [ebp + ecx - 0x708]
or eax, ecx
mov ecx, dword [ebp - 0x38]
movzx ecx, byte [ebp + ecx - 0x307]
mov edx, dword [ebp - 0x38]
sub edx, dword [ebp - 0x1f8]
movzx edx, byte [ebp + edx - 0x30a]
movsx edx, byte [ebp + edx - 0x708]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x38]
movzx ecx, byte [ebp + ecx - 0x308]
mov byte [ebp + ecx - 0x708], al
and dword [ebp - 0x1f8], 0
jmp 0x10023969
xor eax, eax
inc eax
imul eax, eax, 0xa
mov byte [ebp + eax - 0x708], 0
mov dword [ebp - 0x120], 5
mov dword [ebp - 0x820], 7
push 2
lea ecx, [ebp - 0x9a0]
call fcn.1000c1f9
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x1b0], 0
jmp 0x10023a76
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 2
jge 0x10023a95
push dword [ebp - 0x1b0]
lea ecx, [ebp - 0x9a0]
call fcn.1000c297
and dword [eax], 0
jmp 0x10023a69
mov dword [ebp - 0x120], 0
jmp 0x10023aae
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0x11
je 0x10023c1d
mov dword [ebp - 0x64], 0xfffffffe
mov dword [ebp - 0x158], 0xd76df3e2
mov dword [ebp - 0x64], 0
jmp 0x10023adc
mov eax, dword [ebp - 0x64]
dec eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0xfffffff2
jne 0x10023b06
mov byte [ebp - 0xc0], 0
push 0x33af
lea eax, [ebp - 0xc0]
push eax
push 0x1b7b
push 1
call fcn.1002041b
add esp, 0x10
jmp 0x10023ad5
mov dword [ebp - 0x64], 0
jmp 0x10023b16
mov eax, dword [ebp - 0x64]
dec eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0xffffffe2
jne 0x10023c18
push 2
lea ecx, [ebp - 0x970]
call fcn.1000c1f9
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x75c], 0x922a1982
mov dword [ebp - 0x16c], 0
jmp 0x10023b54
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 2
jge 0x10023b73
push dword [ebp - 0x16c]
lea ecx, [ebp - 0x970]
call fcn.1000c297
and dword [eax], 0
jmp 0x10023b47
lea eax, [ebp - 0x75c]
push eax
lea eax, [ebp - 0x158]
push eax
lea eax, [ebp - 0x9a0]
push eax
lea eax, [ebp - 0x820]
push eax
lea eax, [ebp - 0x120]
push eax
push 0
lea eax, [ebp - 0x970]
push eax
push 0x1952
lea eax, [ebp - 0x64]
push eax
call fcn.1002156c
add esp, 0x24
mov dword [ebp - 0x158], 0
jmp 0x10023bc9
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 2
je 0x10023c04
mov byte [ebp - 0xc1], 0
movzx eax, byte [ebp - 0xc1]
test eax, eax
je 0x10023c02
push 0x2b0
push 0x5906
push 0x3e1f
push 1
push 0x5e69
call fcn.100204a4
add esp, 0x14
jmp 0x10023bbc
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x970]
call fcn.1000c27b
jmp 0x10023b0f
jmp 0x10023aa1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9a0]
call fcn.1000c27b
lea eax, [ebp - 0x708]
push eax
lea ecx, [ebp - 0xc14]
call fcn.10027c13
mov dword [ebp - 0x764], eax
mov eax, dword [ebp - 0x764]
mov dword [ebp - 0x870], eax
mov dword [ebp - 4], 0xf
push 0xa
xor edx, edx
mov ecx, dword [ebp - 0x870]
call fcn.1000ce70
pop ecx
mov dword [ebp - 0x7c4], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc14]
call fcn.10027c9b
push 4
lea ecx, [ebp - 0x964]
call fcn.1000c1f9
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x128], 0x8da8e97e
push 0x62c7
lea eax, [ebp - 0xa9c]
push eax
lea eax, [ebp - 0x964]
push eax
push 1
call fcn.100206a3
add esp, 0x10
mov dword [ebp - 0x128], 3
jmp 0x10023cd0
mov eax, dword [ebp - 0x128]
dec eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0
jl 0x10023d75
mov dword [ebp - 0x148], 7
mov dword [ebp - 0x828], 0x943c6fe2
mov dword [ebp - 0x148], 0
jmp 0x10023d0a
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 3
jg 0x10023d70
mov dword [ebp - 0x76c], 0xca7b5cf1
mov byte [ebp - 0x86], 0
movzx eax, byte [ebp - 0x86]
test eax, eax
je 0x10023d37
push 1
call fcn.10020718
pop ecx
push 0x755d
lea eax, [ebp - 0x128]
push eax
lea eax, [ebp - 0x148]
push eax
lea eax, [ebp - 0x76c]
push eax
push 0x59c2
lea eax, [ebp - 0x964]
push eax
lea eax, [ebp - 0x828]
push eax
push 1
call fcn.10020748
add esp, 0x20
jmp 0x10023cfd
jmp 0x10023cc3
mov byte [ebp - 0xc5], 0
movzx eax, byte [ebp - 0xc5]
test eax, eax
je 0x10023d98
push 0
push 0x209e
push 0
push 0
call dword [sym.imp.KERNEL32.dll_VerSetConditionMask]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x964]
call fcn.1000c27b
and dword [ebp - 0x1e0], 0
jmp 0x10023dbd
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 0xb
jae 0x10023dd6
mov eax, dword [ebp - 0x1e0]
mov byte [ebp + eax - 0x708], 0
jmp 0x10023db0
mov byte [ebp - 0x240], 8
mov byte [ebp - 0x23f], 0xdd
mov byte [ebp - 0x23e], 0
mov byte [ebp - 0x23d], 1
mov byte [ebp - 0x23c], 5
mov byte [ebp - 0x23b], 0
mov byte [ebp - 0x23a], 2
mov byte [ebp - 0x239], 6
mov byte [ebp - 0x238], 6
mov byte [ebp - 0x237], 0xe
mov byte [ebp - 0x236], 3
mov byte [ebp - 0x235], 0xb
mov byte [ebp - 0x234], 4
mov byte [ebp - 0x233], 6
mov byte [ebp - 0x232], 7
mov byte [ebp - 0x231], 2
mov byte [ebp - 0x230], 1
mov byte [ebp - 0x22f], 0
mov byte [ebp - 0x22e], 0x2f
mov byte [ebp - 0x22d], 0xbc
mov byte [ebp - 0x22c], 0xd5
mov byte [ebp - 0x22b], 0xc6
mov byte [ebp - 0x22a], 0x96
mov byte [ebp - 0x229], 0xfc
mov byte [ebp - 0x228], 0xc6
mov byte [ebp - 0x227], 0x2e
mov byte [ebp - 0x226], 0x31
mov byte [ebp - 0x225], 0xa5
mov byte [ebp - 0x224], 0x9c
mov byte [ebp - 0x223], 0x96
mov byte [ebp - 0x222], 0x3d
mov byte [ebp - 0x221], 0xc5
mov byte [ebp - 0x220], 0x42
mov byte [ebp - 0x21f], 0x31
mov byte [ebp - 0x21e], pe_nt_image_headers32
mov byte [ebp - 0x21d], 0xe8
mov byte [ebp - 0x21c], 0x71
mov byte [ebp - 0x21b], 0xf2
mov byte [ebp - 0x21a], 0xe3
mov byte [ebp - 0x219], 0xa9
mov byte [ebp - 0x218], 0xda
mov byte [ebp - 0x217], 0x9f
mov byte [ebp - 0x216], 0x7b
mov byte [ebp - 0x215], 9
mov byte [ebp - 0x214], 0xd6
mov byte [ebp - 0x213], 0xc3
mov byte [ebp - 0x212], 0x8c
mov byte [ebp - 0x211], 0x7c
mov byte [ebp - 0x210], 0xa0
mov byte [ebp - 0x20f], 0x9d
mov byte [ebp - 0x20e], 0xd2
mov byte [ebp - 0x20d], 0x31
mov byte [ebp - 0x20c], 0xd8
mov byte [ebp - 0x20b], 0x23
mov byte [ebp - 0x20a], 0x36
mov byte [ebp - 0x209], 0x5f
mov byte [ebp - 0x208], 0xd2
mov byte [ebp - 0x207], 0x97
mov byte [ebp - 0x206], 0x4d
mov byte [ebp - 0x205], 0x41
mov byte [ebp - 0x204], 0x85
mov byte [ebp - 0x203], 0x6e
mov byte [ebp - 0x202], 0x9c
mov byte [ebp - 0x201], 9
mov byte [ebp - 0x200], 0xfb
mov byte [ebp - 0x1ff], 0xdf
mov byte [ebp - 0x1fe], 9
mov byte [ebp - 0x1fd], 6
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x240]
or eax, 0xed
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x240]
and ecx, 0xed
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x240]
mov byte [ebp + ecx - 0x6d8], al
mov dword [ebp - 0x20], 2
and dword [ebp - 0x130], 0
jmp 0x10024008
mov eax, dword [ebp - 0x20]
inc eax
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x44
jae 0x100240e6
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x240]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x20], eax
jne 0x10024052
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x240]
inc eax
mov dword [ebp - 0x130], eax
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x240]
mov ecx, dword [ebp - 0x20]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x20], eax
jmp 0x10024000
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x23f]
mov ecx, dword [ebp - 0x20]
sub ecx, dword [ebp - 0x130]
movzx ecx, byte [ebp + ecx - 0x242]
movsx ecx, byte [ebp + ecx - 0x6d8]
add eax, ecx
mov ecx, dword [ebp - 0x20]
movzx ecx, byte [ebp + ecx - 0x23f]
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x130]
movzx edx, byte [ebp + edx - 0x242]
movsx edx, byte [ebp + edx - 0x6d8]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x20]
movzx ecx, byte [ebp + ecx - 0x23f]
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x130]
movzx edx, byte [ebp + edx - 0x242]
movsx edx, byte [ebp + edx - 0x6d8]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x20]
movzx ecx, byte [ebp + ecx - 0x240]
mov byte [ebp + ecx - 0x6d8], al
and dword [ebp - 0x130], 0
jmp 0x10024000
xor eax, eax
inc eax
imul eax, eax, 0xa
mov byte [ebp + eax - 0x6d8], 0
lea eax, [ebp - 0x6d8]
push eax
lea ecx, [ebp - 0xbfc]
call fcn.10027c13
mov dword [ebp - 0x774], eax
mov eax, dword [ebp - 0x774]
mov dword [ebp - 0x884], eax
mov dword [ebp - 4], 0x11
push 0xa
xor edx, edx
mov ecx, dword [ebp - 0x884]
call fcn.1000ce70
pop ecx
mov dword [ebp - 0x784], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xbfc]
call fcn.10027c9b
and dword [ebp - 0x1b8], 0
jmp 0x1002415a
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 0xb
jae 0x10024173
mov eax, dword [ebp - 0x1b8]
mov byte [ebp + eax - 0x6d8], 0
jmp 0x1002414d
mov dword [ebp - 0x8c], 0x5596960f
mov dword [ebp - 0x638], 0xffffffff
mov dword [ebp - 0x100], 0
mov dword [ebp - 0x438], 0x3dc99cdf
mov dword [ebp - 0x7bc], 0xffffffff
mov dword [ebp - 0xb00], 0x856dfc9b
push 1
lea ecx, [ebp - 0xa98]
call fcn.1000c1f9
mov dword [ebp - 4], 0x12
push 1
lea ecx, [ebp - 0xa88]
call fcn.1000c1f9
mov byte [ebp - 4], 0x13
mov dword [ebp - 0x6b0], 0xef9f3b06
mov dword [ebp - 0x48], 0
jmp 0x100241ee
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 3
jge 0x10024204
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x8bc], 0
jmp 0x100241e7
mov dword [ebp - 0x48], 0
jmp 0x10024214
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 1
jge 0x10024230
push dword [ebp - 0x48]
lea ecx, [ebp - 0xa98]
call fcn.1000c297
mov dword [eax], 0x86335c0d
jmp 0x1002420d
push 0x6031
push 0
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0xa88]
push eax
push 0x5ce8
call fcn.100208da
add esp, 0x14
mov dword [ebp - 0x8c], 0
jmp 0x10024268
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 2
jg 0x100243a8
mov dword [ebp - 0xaac], 0xac3a6081
mov dword [ebp - 0x9c4], 0x55c0c8fb
mov dword [ebp - 0x9cc], 0x205300ce
mov dword [ebp - 0x9d4], 1
mov dword [ebp - 0x9dc], 0x5cfda6c2
mov dword [ebp - 0x9e4], 0xffffffff
mov eax, dword [ebp - 0x8c]
mov eax, dword [ebp + eax*4 - 0x8bc]
mov dword [ebp - 0x638], eax
mov eax, dword [ebp - 0x8c]
mov eax, dword [ebp + eax*4 - 0x8bc]
cmp eax, dword [ebp - 0x638]
jle 0x100242f2
mov eax, dword [ebp - 0x8c]
cmp dword [ebp + eax*4 - 0x8bc], 0
jne 0x100242f2
and dword [ebp - 0x77c], 0
jmp 0x100242fc
mov dword [ebp - 0x77c], 1
mov dword [ebp - 0x100], 0
mov dword [ebp - 0x100], 0
jmp 0x1002431f
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0x3a
jge 0x100243a3
mov dword [ebp - 0x590], 3
mov dword [ebp - 0x9ec], 0xb64d07dd
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x8bc], 0
je 0x1002437e
xor eax, eax
inc eax
je 0x1002437e
mov eax, dword [ebp - 0x438]
mov dword [ebp - 0x9f4], eax
mov eax, dword [ebp - 0x438]
mov dword [ebp - 0x590], eax
cmp dword [ebp - 0x590], 0
je 0x1002437e
mov dword [ebp - 0x440], 1
jmp 0x10024385
and dword [ebp - 0x440], 0
mov eax, dword [ebp - 0x440]
mov dword [ebp - 0x7bc], eax
mov eax, dword [ebp - 0x6b0]
dec eax
mov dword [ebp - 0x6b0], eax
jmp 0x10024312
jmp 0x1002425b
mov byte [ebp - 0xc3], 0
movzx eax, byte [ebp - 0xc3]
test eax, eax
je 0x100243c2
push 1
call fcn.100208af
pop ecx
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0xa88]
call fcn.1000c27b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa98]
call fcn.1000c27b
push dword [ebp - 0x784]
push dword [ebp - 0x7c4]
call fcn.1001e4b0
pop ecx
pop ecx
mov dword [ebp - 0x448], eax
mov dword [ebp - 0xdc], 2
mov dword [ebp - 0x1f0], 0
jmp 0x1002441c
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 3
jge 0x10024438
mov eax, dword [ebp - 0x1f0]
mov dword [ebp + eax*4 - 0xaa8], 0x20624039
jmp 0x1002440f
mov dword [ebp - 0xdc], 0
jmp 0x10024451
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 2
jg 0x10024476
mov eax, dword [ebp - 0xdc]
mov ecx, dword [ebp - 0xdc]
mov eax, dword [ebp + eax*4 - 0xaa8]
mov dword [ebp + ecx*4 - 0xaa8], eax
jmp 0x10024444
mov byte [ebp - 0xc2], 0
movzx eax, byte [ebp - 0xc2]
test eax, eax
je 0x100244a1
push 0
push 0x2801
push 0x5029
push 0x3b85
call fcn.10020d0e
add esp, 0x10
push 0
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0x448]
push eax
call fcn.1002146f
add esp, 0xc
push 0xf
push 5
call fcn.1001e4b0
pop ecx
pop ecx
add eax, dword [ebp - 0x448]
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 4], eax
mov dword [ebp - 0x370], 1
mov dword [ebp - 0x470], 0xea6edad9
mov dword [ebp - 0x78c], 1
mov dword [ebp - 0x9fc], 0xd20b50f6
mov dword [ebp - 0xa04], 0x6d8ff8cd
mov dword [ebp - 0xa0c], 0xfffffff8
mov dword [ebp - 0x7cc], 5
mov dword [ebp - 0x10c], 0xafbebf0a
mov dword [ebp - 0x7d4], 6
cmp dword [ebp - 0x370], 0
jbe 0x1002453f
mov dword [ebp - 0x598], 1
jmp 0x10024546
and dword [ebp - 0x598], 0
mov eax, dword [ebp - 0x370]
cmp dword [ebp - 0x598], eax
jge 0x1002475f
push 3
lea ecx, [ebp - 0x97c]
call fcn.1000c1f9
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x450], 0x528ace4b
mov dword [ebp - 0x9c0], 0xa5f34bda
mov dword [ebp - 0xaf4], 0
push 0
push 0x75bb
push 0x1bf5
lea eax, [ebp - 0x97c]
push eax
push 0x32e1
push 0x2ac0
lea eax, [ebp - 0x104]
push eax
push 0x6f5f
call fcn.10020967
add esp, 0x20
mov dword [ebp - 0x104], 0
jmp 0x100245d4
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 3
jge 0x100245f0
mov eax, dword [ebp - 0x104]
mov dword [ebp + eax*4 - 0xab8], 0xf2ef51ae
jmp 0x100245c7
mov eax, dword [ebp - 0x370]
mov dword [ebp - 0xafc], eax
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x450], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x450]
mov dword [ebp + eax - 0xab8], ecx
cmp dword [ebp - 0x10c], 0
je 0x10024652
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xab8]
cmp dword [ebp - 0x10c], eax
jle 0x10024652
mov dword [ebp - 0x640], 1
jmp 0x10024659
and dword [ebp - 0x640], 0
push 0
lea ecx, [ebp - 0x97c]
call fcn.1000c297
mov eax, dword [eax]
cmp eax, dword [ebp - 0x640]
jge 0x1002467c
mov dword [ebp - 0x458], 1
jmp 0x10024683
and dword [ebp - 0x458], 0
mov eax, dword [ebp - 0x78c]
cmp dword [ebp - 0x458], eax
jle 0x1002469d
mov dword [ebp - 0x5a0], 1
jmp 0x100246a4
and dword [ebp - 0x5a0], 0
imul eax, dword [ebp - 0x5a0], 0xfffffffb
cmp eax, 0x70cc321a
jge 0x100246be
mov dword [ebp - 0x460], 1
jmp 0x100246c5
and dword [ebp - 0x460], 0
cmp dword [ebp - 0x460], 0x3518f4c6
jne 0x100246dd
mov dword [ebp - 0x698], 1
jmp 0x100246e4
and dword [ebp - 0x698], 0
mov eax, dword [ebp - 0x7cc]
cmp dword [ebp - 0x698], eax
jl 0x100246fe
mov dword [ebp - 0x468], 1
jmp 0x10024705
and dword [ebp - 0x468], 0
mov eax, dword [ebp - 0x468]
neg eax
cmp eax, dword [ebp - 0x470]
jl 0x10024721
mov dword [ebp - 0x5a8], 1
jmp 0x10024728
and dword [ebp - 0x5a8], 0
cmp dword [ebp - 0x5a8], 7
ja 0x1002473d
mov dword [ebp - 0x794], 1
jmp 0x10024744
and dword [ebp - 0x794], 0
mov dword [ebp - 0x470], 0x9d945ad3
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x97c]
call fcn.1000c27b
jmp 0x1002479a
mov byte [ebp - 0x95], 0
movzx eax, byte [ebp - 0x95]
test eax, eax
je 0x1002477f
push 0x6975
push 0
call fcn.10021d2d
pop ecx
pop ecx
push 0
push 0x277
lea eax, [ebp - 0x7d4]
push eax
push 0x29c3
call fcn.10021f13
add esp, 0x10
and dword [ebp - 0x12c], 0
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x18], 0
jbe 0x100247c9
lea eax, [ebp - 0x12c]
push eax
push 1
push 0xacd
push 0x5c98
lea eax, [ebp - 0x14]
push eax
call fcn.100208da
add esp, 0x14
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 0x1c]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x378], 0xb029
mov dword [ebp - 0x1c0], 0
mov dword [ebp - 0x6c0], 0xffffffff
mov dword [ebp - 0x114], 0x88eb9876
mov dword [ebp - 0xb04], 1
mov dword [ebp - 0x480], 1
mov dword [ebp - 0x8f8], 0
mov dword [ebp - 0x8f4], 0
mov dword [ebp - 0x8f0], 0
mov dword [ebp - 0x8ec], 0
mov dword [ebp - 0x58], 0
jmp 0x10024846
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 4
jge 0x1002485c
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x9bc], 1
jmp 0x1002483f
mov dword [ebp - 0x58], 0
jmp 0x1002486c
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 2
jge 0x10024882
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x7b4], 0
jmp 0x10024865
cmp dword [ebp - 0x378], 0xeea2
jle 0x1002489a
mov dword [ebp - 0x648], 1
jmp 0x100248a1
and dword [ebp - 0x648], 0
mov eax, dword [ebp - 0x1c0]
add eax, dword [ebp - 0x648]
je 0x10024907
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x8f8]
inc eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x8f8], eax
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x114]
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x7b4]
imul ecx, dword [ebp - 0x6c0]
sub eax, ecx
cmp eax, dword [ebp - 0x1c0]
jl 0x10024907
mov dword [ebp - 0x478], 1
jmp 0x1002490e
and dword [ebp - 0x478], 0
mov eax, dword [ebp - 0x378]
cmp eax, dword [ebp - 0x478]
jne 0x10024928
mov dword [ebp - 0x5b0], 1
jmp 0x1002492f
and dword [ebp - 0x5b0], 0
mov eax, dword [ebp - 0x5b0]
mov dword [ebp - 0x480], eax
mov eax, dword [ebp - 0x480]
cmp dword [ebp - 0x6c0], eax
jne 0x10024955
mov dword [ebp - 0x488], 1
jmp 0x1002495c
and dword [ebp - 0x488], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x7b4]
add eax, dword [ebp - 0x488]
sub eax, dword [ebp - 0x114]
cmp eax, 0xfffa
ja 0x10024985
mov eax, 0x490ce61f
test eax, eax
je 0x1002499a
mov eax, 0xbb34e4a5
test eax, eax
je 0x1002499a
mov dword [ebp - 0x5b8], 1
jmp 0x100249a1
and dword [ebp - 0x5b8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x7b4]
cmp dword [ebp - 0x5b8], eax
jge 0x100249c2
mov dword [ebp - 0x490], 1
jmp 0x100249c9
and dword [ebp - 0x490], 0
mov eax, dword [ebp - 0x378]
cmp dword [ebp - 0x490], eax
jl 0x100249e3
mov dword [ebp - 0x650], 1
jmp 0x100249ea
and dword [ebp - 0x650], 0
mov eax, dword [ebp - 0x1c0]
cmp dword [ebp - 0x650], eax
jle 0x10024a16
cmp dword [ebp - 0x114], 0
je 0x10024a16
cmp dword [ebp - 0x1c0], 0
je 0x10024a16
mov dword [ebp - 0x498], 1
jmp 0x10024a1d
and dword [ebp - 0x498], 0
imul eax, dword [ebp - 0x498], 0xfff9
push 4
pop ecx
imul ecx, ecx, 3
imul eax, dword [ebp + ecx - 0x9bc]
cmp eax, 1
jge 0x10024a46
mov dword [ebp - 0x5c0], 1
jmp 0x10024a4d
and dword [ebp - 0x5c0], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x9bc]
cmp dword [ebp - 0x5c0], eax
jge 0x10024a6d
mov dword [ebp - 0x4a0], 1
jmp 0x10024a74
and dword [ebp - 0x4a0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x9bc]
cmp eax, dword [ebp - 0x4a0]
jg 0x10024a95
mov dword [ebp - 0x6a0], 1
jmp 0x10024a9c
and dword [ebp - 0x6a0], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x6a0]
mov dword [ebp + eax - 0x9bc], ecx
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 0x14]
sub eax, dword [ebp - 0x12c]
mov dword [ebp - 0xd8], eax
and dword [ebp - 0x11c], 0
jmp 0x10024ad7
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0x11c]
cmp eax, dword [ebp - 0xd8]
jge 0x10024b7f
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
mov eax, dword [eax + 0x14]
sub eax, dword [ecx + 0x18]
cmp dword [ebp - 0x11c], eax
jae 0x10024b2d
push 1
lea eax, [ebp - 0x4a8]
push eax
lea eax, [ebp - 0x11c]
push eax
push 0x3212
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x28]
push eax
push 0x2685
lea eax, [ebp - 0x14]
push eax
call fcn.10020967
add esp, 0x20
jmp 0x10024b4a
push 1
lea eax, [ebp - 0x4a8]
push eax
push 0x2cf0
lea eax, [ebp - 0xec]
push eax
call fcn.10020a24
add esp, 0x10
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x10]
push eax
push 1
push 0x368a
lea eax, [ebp - 0x4a8]
push eax
push 0x3e44
lea eax, [ebp - 0x2c]
push eax
call fcn.10020a93
add esp, 0x1c
mov eax, dword [ebp - 0x10]
add eax, 4
mov dword [ebp - 0x10], eax
jmp 0x10024aca
mov dword [ebp - 0x1e8], 0
push 1
lea ecx, [ebp - 0x6f0]
call fcn.1000c1f9
mov dword [ebp - 4], 0x15
mov dword [ebp - 0x7ac], 0
mov dword [ebp - 0xb0c], 0xfffffffd
push 1
lea eax, [ebp - 0xb28]
push eax
lea eax, [ebp - 0x6f0]
push eax
call fcn.10020b18
add esp, 0xc
mov byte [ebp - 0xbe], 0
movzx eax, byte [ebp - 0xbe]
test eax, eax
je 0x10024bef
push 0x37f8
push 1
push 0x58c7
call fcn.10020b97
add esp, 0xc
mov dword [ebp - 0x1e8], 5
jmp 0x10024c08
mov eax, dword [ebp - 0x1e8]
dec eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 0xffffffeb
jle 0x10024ec7
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x79c], 0
mov dword [ebp - 0x374], 0xfffffffe
mov dword [ebp - 0x5c], 0
jmp 0x10024c40
cmp dword [ebp - 0x5c], 0
jl 0x10024ec2
mov dword [ebp - 0x5d0], 0xaebb1bb3
mov dword [ebp - 0x5d8], 0xfffffff9
mov dword [ebp - 0x4d0], 0xa8d1d9d6
mov dword [ebp - 0x198], 0
jmp 0x10024c81
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 4
jge 0x10024c9d
mov eax, dword [ebp - 0x198]
mov dword [ebp + eax*4 - 0x8b0], 0x5352
jmp 0x10024c74
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x8b0]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x8b0], eax
push dword [ebp - 0x5c]
lea ecx, [ebp - 0x6f0]
call fcn.1000c297
mov eax, dword [ebp - 0x79c]
mov dword [ebp - 0xb30], eax
push 0xfffffffffffffffd
pop eax
test eax, eax
jne 0x10024ce5
mov dword [ebp - 0x5c8], 1
jmp 0x10024cec
and dword [ebp - 0x5c8], 0
cmp dword [ebp - 0x5c8], 0x9628
je 0x10024d04
mov dword [ebp - 0x7dc], 1
jmp 0x10024d0b
and dword [ebp - 0x7dc], 0
cmp dword [ebp - 0x374], 0x55b65ab4
jg 0x10024d23
mov dword [ebp - 0x4b0], 1
jmp 0x10024d2a
and dword [ebp - 0x4b0], 0
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x4b0], eax
jl 0x10024d41
mov dword [ebp - 0x658], 1
jmp 0x10024d48
and dword [ebp - 0x658], 0
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x658], eax
jl 0x10024d5f
mov dword [ebp - 0x7a4], 1
jmp 0x10024d66
and dword [ebp - 0x7a4], 0
mov eax, dword [ebp - 0x374]
mov dword [ebp - 0xb38], eax
push dword [ebp - 0x5c]
lea ecx, [ebp - 0x6f0]
call fcn.1000c297
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x8b0]
add ecx, dword [eax]
cmp ecx, dword [ebp - 0x374]
jle 0x10024da3
mov dword [ebp - 0x4b8], 1
jmp 0x10024daa
and dword [ebp - 0x4b8], 0
mov eax, dword [ebp - 0x4b8]
mov dword [ebp - 0x5d0], eax
xor esi, esi
inc esi
sub esi, dword [ebp - 0x5d0]
push 0
lea ecx, [ebp - 0x6f0]
call fcn.1000c297
cmp esi, dword [eax]
jle 0x10024ddc
mov dword [ebp - 0x4c0], 1
jmp 0x10024de3
and dword [ebp - 0x4c0], 0
cmp dword [ebp - 0x4c0], 0x548e
jg 0x10024dfb
mov dword [ebp - 0x7e4], 1
jmp 0x10024e02
and dword [ebp - 0x7e4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x8b0]
mov dword [ebp - 0xb40], eax
push dword [ebp - 0x5c]
lea ecx, [ebp - 0x6f0]
call fcn.1000c297
imul esi, dword [eax], 0x9773
push 0
lea ecx, [ebp - 0x6f0]
call fcn.1000c297
add esi, dword [eax]
cmp esi, 2
jne 0x10024e49
mov dword [ebp - 0x6b8], 1
jmp 0x10024e50
and dword [ebp - 0x6b8], 0
cmp dword [ebp - 0x6b8], 0x553a81f6
jg 0x10024e68
mov dword [ebp - 0x4c8], 1
jmp 0x10024e6f
and dword [ebp - 0x4c8], 0
mov eax, dword [ebp - 0x4c8]
mov dword [ebp - 0x5d8], eax
mov eax, dword [ebp - 0x5d8]
mov dword [ebp - 0x4d0], eax
mov eax, dword [ebp - 0x4d0]
mov dword [ebp - 0xb2c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x8b0]
mov dword [ebp - 0xa40], eax
push 4
pop eax
imul eax, eax, 0
imul eax, dword [ebp + eax - 0x8b0], 0xc19c
mov dword [ebp - 0x7ac], eax
jmp 0x10024c39
jmp 0x10024bfb
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6f0]
call fcn.1000c27b
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 0x14]
sub eax, dword [ebp - 0x12c]
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 0x14], eax
push 4
lea ecx, [ebp - 0x86c]
call fcn.1000c1f9
mov dword [ebp - 4], 0x16
mov dword [ebp - 0x9c8], 1
mov dword [ebp - 0x19c], 0
jmp 0x10024f1f
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 4
jge 0x10024f3e
push dword [ebp - 0x19c]
lea ecx, [ebp - 0x86c]
call fcn.1000c297
or dword [eax], 0xffffffff
jmp 0x10024f12
mov byte [ebp - 0x9d], 0
movzx eax, byte [ebp - 0x9d]
test eax, eax
je 0x10024f60
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceW]
push 2
lea ecx, [ebp - 0x86c]
call fcn.1000c297
and dword [eax], 0
jmp 0x10024f96
push 2
lea ecx, [ebp - 0x86c]
call fcn.1000c297
mov dword [ebp - 0x660], eax
mov eax, dword [ebp - 0x660]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x660]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0x86c]
call fcn.1000c297
cmp dword [eax], 0xfffffff4
je 0x1002505a
push 1
lea ecx, [ebp - 0x994]
call fcn.1000c1f9
mov byte [ebp - 4], 0x17
mov dword [ebp - 0x124], 0xefc07e17
push 0x142a
push 1
lea eax, [ebp - 0x994]
push eax
lea eax, [ebp - 0xb34]
push eax
call fcn.10020c08
add esp, 0x10
mov dword [ebp - 0x124], 0
jmp 0x10024ffd
mov eax, dword [ebp - 0x124]
inc eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0
jg 0x10025046
mov byte [ebp - 0xc4], 0
movzx eax, byte [ebp - 0xc4]
test eax, eax
je 0x1002502c
push 0
push 0x4f00
push 0xee7
call fcn.1002195f
add esp, 0xc
push dword [ebp - 0x124]
lea ecx, [ebp - 0x994]
call fcn.1000c297
cmp dword [eax], 0
je 0x10025044
jmp 0x10025046
jmp 0x10024ff0
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x994]
call fcn.1000c27b
jmp 0x10024f72
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x86c]
call fcn.1000c27b
push 0x35bd
lea eax, [ebp - 0x14]
push eax
push 0x4eef
push 1
lea eax, [ebp - 0x12c]
push eax
lea eax, [ebp - 0xd8]
push eax
call fcn.10020c79
add esp, 0x18
mov dword [ebp - 0x1d8], 0x256915a
mov dword [ebp - 0x1d4], 0x256915a
mov dword [ebp - 0x1d0], 0x256915a
mov dword [ebp - 0x1cc], 0x256915a
mov dword [ebp - 0x4e8], 0xf2d6273
mov dword [ebp - 0x194], 0
jmp 0x100250da
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 3
jge 0x100250f6
mov eax, dword [ebp - 0x194]
mov dword [ebp + eax*4 - 0x384], 0xfffe
jmp 0x100250cd
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x1d8], 2
jmp 0x10025121
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1d8], 0
jl 0x100252bf
mov dword [ebp - 0x7b8], 0x8abf8b24
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1d8]
cmp dword [ebp + eax*4 - 0x384], 4
jbe 0x10025160
mov dword [ebp - 0x4d8], 1
jmp 0x10025167
and dword [ebp - 0x4d8], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1d8]
mov eax, dword [ebp + eax*4 - 0x384]
cmp dword [ebp - 0x4d8], eax
jne 0x100251a4
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1d8]
cmp dword [ebp + eax*4 - 0x384], 0
je 0x100251a4
mov dword [ebp - 0x7ec], 1
jmp 0x100251ab
and dword [ebp - 0x7ec], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1d8]
mov dword [ebp - 0x9d0], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1d8]
push 4
pop ecx
shl ecx, 0
imul ecx, dword [ebp + ecx - 0x384], 0
cmp dword [ebp + eax*4 - 0x384], ecx
jge 0x100251ec
mov dword [ebp - 0x5e0], 1
jmp 0x100251f3
and dword [ebp - 0x5e0], 0
mov eax, dword [ebp - 0x5e0]
sub eax, dword [ebp - 0x4e8]
add eax, 0x43e2
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x1d8]
jl 0x1002521e
mov dword [ebp - 0x4e0], 1
jmp 0x10025225
and dword [ebp - 0x4e0], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1d8]
cmp dword [ebp - 0x4e0], eax
je 0x10025245
mov dword [ebp - 0x6a8], 1
jmp 0x1002524c
and dword [ebp - 0x6a8], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1d8]
mov eax, dword [ebp + eax*4 - 0x384]
cmp eax, dword [ebp - 0x6a8]
jg 0x10025273
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x384]
cmp dword [ebp + eax - 0x384], ecx
je 0x100252e7
mov dword [ebp - 0x668], 1
jmp 0x100252ee
and dword [ebp - 0x668], 0
cmp dword [ebp - 0x668], 0
jg 0x10025303
mov dword [ebp - 0x4f8], 1
jmp 0x1002530a
and dword [ebp - 0x4f8], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1d8]
imul eax, dword [ebp - 0x4f8]
cmp eax, 0xb927eed0
jb 0x10025330
mov dword [ebp - 0x5f0], 1
jmp 0x10025337
and dword [ebp - 0x5f0], 0
cmp dword [ebp - 0x5f0], 0
jle 0x1002534c
mov dword [ebp - 0x500], 1
jmp 0x10025353
and dword [ebp - 0x500], 0
cmp dword [ebp - 0x500], 0
je 0x10025368
mov dword [ebp - 0x688], 1
jmp 0x1002536f
and dword [ebp - 0x688], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x1d8]
cmp dword [ebp - 0x688], eax
jge 0x10025390
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x778], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x780], eax
mov eax, dword [ebp - 0x778]
mov dword [ebp - 0x15c], eax
mov eax, dword [ebp - 0x780]
mov dword [ebp - 0x788], eax
mov eax, dword [ebp - 0x15c]
mov dword [eax], 1
jmp 0x100277bc
mov eax, dword [ebp - 0x15c]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x15c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x15c]
cmp dword [eax], 0
jl 0x100277e3
mov eax, dword [ebp - 0x15c]
push dword [eax]
mov ecx, dword [ebp - 0x788]
call fcn.1000c297
cmp dword [eax], 0
je 0x100277e1
jmp 0x100277e3
jmp 0x100277ab
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret