Function at 0x10020659
Capabilities:
Contain obfuscated stackstrings
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10084c85
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xa14
push esi
mov dword [ebp - 0xd0], 0
mov dword [ebp - 0x644], 0xffffffff
mov dword [ebp - 0x654], 0x30498d20
push 3
lea ecx, [ebp - 0x80c]
call fcn.10018221
and dword [ebp - 4], 0
lea eax, [ebp - 0x80c]
push eax
push 1
lea eax, [ebp - 0x8b8]
push eax
push 0x596a
push 0x3c51
call fcn.1001e23c
add esp, 0x14
mov dword [ebp - 0xd0], 0xffffffef
jmp 0x100206e2
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0xfffffff1
jl 0x10020785
mov dword [ebp - 0x65c], 0
mov dword [ebp - 0x5c8], 0xfffffffe
mov dword [ebp - 0x5e4], 0xfffffffe
mov dword [ebp - 0x64c], 0xffffffff
push 1
lea eax, [ebp - 0x5c8]
push eax
lea eax, [ebp - 0x80c]
push eax
lea eax, [ebp - 0x5e4]
push eax
push 0x4dfc
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0x644]
push eax
lea eax, [ebp - 0x64c]
push eax
lea eax, [ebp - 0x654]
push eax
lea eax, [ebp - 0x65c]
push eax
call fcn.1001e2d3
add esp, 0x28
mov byte [ebp - 0xa0], 0
push 1
push 0x1133
push 0x5408
lea eax, [ebp - 0xa0]
push eax
call fcn.1001e441
add esp, 0x10
jmp 0x100206d5
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x80c]
call fcn.100182a6
mov dword [ebp - 0xe0], 0xdf99ff60
mov dword [ebp - 0x674], 0x1e4f1f13
mov dword [ebp - 0xfc], 0
jmp 0x100207c1
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 1
jge 0x100207dd
mov eax, dword [ebp - 0xfc]
mov dword [ebp + eax*4 - 0x664], 0x9536
jmp 0x100207b4
mov dword [ebp - 0xe0], 0xfffffffb
jmp 0x100207f6
mov eax, dword [ebp - 0xe0]
dec eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0xfffffff9
jl 0x100208ce
mov dword [ebp - 0x56c], 7
mov dword [ebp - 0x568], 7
mov dword [ebp - 0x564], 7
mov dword [ebp - 0x560], 7
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x56c], 0
jmp 0x10020859
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x56c]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x56c], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x56c], 0
jl 0x100208c9
mov dword [ebp - 0x66c], 9
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x56c]
cmp dword [ebp + eax*4 - 0x664], 0
je 0x1002088c
jmp 0x100208c9
push 0x60af
lea eax, [ebp - 0x66c]
push eax
lea eax, [ebp - 0xe0]
push eax
push 0x205
lea eax, [ebp - 0x674]
push eax
push 1
push 0x606a
push 0x1e70
push 0x2b63
call fcn.1001e4be
add esp, 0x24
jmp 0x1002083e
jmp 0x100207e9
mov eax, dword [0x11187f00]
and eax, 1
jne 0x10020905
mov eax, dword [0x11187f00]
or eax, 1
mov dword [0x11187f00], eax
mov dword [ebp - 4], 1
mov ecx, 0x11187ec0
call fcn.100183bb
push 0x10086dae
call fcn.1006d066
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x170], 0x3c692bea
mov dword [ebp - 0x170], 0
jmp 0x10020928
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 0x11
jle 0x10020a46
mov dword [ebp - 0x740], 0xf7fd1e81
mov dword [ebp - 0x73c], 0xf7fd1e81
mov dword [ebp - 0x738], 0xf7fd1e81
mov dword [ebp - 0x734], 0xf7fd1e81
lea ecx, [ebp - 0x28d]
call fcn.10008e33
push eax
lea eax, [ebp - 0x730]
push eax
lea eax, [ebp - 0x740]
push eax
lea ecx, [ebp - 0x9dc]
call fcn.100182ba
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x69c]
call fcn.10018280
mov dword [ebp - 4], 2
mov dword [ebp - 0x108], 0
jmp 0x100209b2
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 4
jge 0x100209ce
mov eax, dword [ebp - 0x108]
mov dword [ebp + eax*4 - 0x9f4], 0xfebb
jmp 0x100209a5
push 3
lea ecx, [ebp - 0x69c]
call fcn.100182ab
and dword [eax], 0
jmp 0x10020a04
push 3
lea ecx, [ebp - 0x69c]
call fcn.100182ab
mov dword [ebp - 0x3a0], eax
mov eax, dword [ebp - 0x3a0]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x3a0]
mov dword [ecx], eax
push 3
lea ecx, [ebp - 0x69c]
call fcn.100182ab
cmp dword [eax], 4
jge 0x10020a32
push 3
lea ecx, [ebp - 0x69c]
call fcn.100182ab
mov eax, dword [eax]
mov dword [ebp + eax*4 - 0x9f4], 0xfffffffd
jmp 0x100209e0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x69c]
call fcn.100182a6
jmp 0x1002091b
mov byte [ebp - 0x72], 0
movzx eax, byte [ebp - 0x72]
test eax, eax
je 0x10020a5a
push 1
call fcn.1001e5eb
pop ecx
push dword [ebp + 8]
lea ecx, [ebp - 0x800]
call fcn.10017fd6
mov dword [ebp - 4], 3
push 0
call fcn.1001e9f2
pop ecx
lea eax, [ebp - 0x8bc]
push eax
lea ecx, [ebp - 0x800]
call fcn.1001878b
push dword [eax]
lea eax, [ebp - 0x8a8]
push eax
lea ecx, [ebp - 0x800]
call fcn.1001879f
push dword [eax]
lea eax, [ebp - 0x8c0]
push eax
lea ecx, [ebp - 0x800]
call fcn.1001878b
push dword [eax]
mov edx, 0x1001b75c
lea ecx, [ebp - 0x8c4]
call fcn.10026cf7
add esp, 0xc
mov dword [ebp - 0x754], 0xfffffffe
mov dword [ebp - 0x750], 0xfffffffe
mov dword [ebp - 0x74c], 0xfffffffe
mov dword [ebp - 0x748], 0xfffffffe
lea ecx, [ebp - 0x296]
call fcn.10008e33
push eax
lea eax, [ebp - 0x744]
push eax
lea eax, [ebp - 0x754]
push eax
lea ecx, [ebp - 0x9bc]
call fcn.100182ba
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x6e0]
call fcn.10018280
mov byte [ebp - 4], 4
mov dword [ebp - 0x67c], 0xc8953526
mov dword [ebp - 0x684], 1
mov dword [ebp - 0x150], 0
jmp 0x10020b54
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 3
jge 0x10020b70
mov eax, dword [ebp - 0x150]
mov dword [ebp + eax*4 - 0x2a4], 0xf94f3783
jmp 0x10020b47
mov byte [ebp - 0x6b], 0
lea eax, [ebp - 0x6b]
push eax
push 1
call fcn.1001e611
pop ecx
pop ecx
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x2a4], 0
jmp 0x10020baf
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2a4]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x2a4], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2a4], 3
jg 0x10020dc2
mov dword [ebp - 0x28], 1
mov dword [ebp - 0x110], 0xfffffff9
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x2a4]
lea ecx, [ebp - 0x6e0]
call fcn.100182ab
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2a4]
mov dword [ebp - 0x96c], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x8cc], eax
xor eax, eax
inc eax
je 0x10020c29
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2a4], 0
je 0x10020c29
mov dword [ebp - 0x4ac], 1
jmp 0x10020c30
and dword [ebp - 0x4ac], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x4ac], eax
jl 0x10020c47
mov dword [ebp - 0x508], 1
jmp 0x10020c4e
and dword [ebp - 0x508], 0
mov eax, dword [ebp - 0x508]
mov dword [ebp - 0x67c], eax
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x28], eax
jle 0x10020c6e
mov dword [ebp - 0x3dc], 1
jmp 0x10020c75
and dword [ebp - 0x3dc], 0
imul eax, dword [ebp - 0x3dc], 0xc0e0
sub eax, dword [ebp - 0x28]
neg eax
mov dword [ebp - 0x28], eax
je 0x10020c9e
cmp dword [ebp - 0x110], 0
je 0x10020c9e
mov dword [ebp - 0x498], 1
jmp 0x10020ca5
and dword [ebp - 0x498], 0
mov eax, dword [ebp - 0x684]
cmp dword [ebp - 0x498], eax
jge 0x10020cce
mov eax, 0xad64de8c
test eax, eax
jne 0x10020cce
mov eax, 0x3585
test eax, eax
jne 0x10020cce
and dword [ebp - 0x474], 0
jmp 0x10020cd8
mov dword [ebp - 0x474], 1
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x2a4]
lea ecx, [ebp - 0x6e0]
call fcn.100182ab
mov dword [ebp - 0x2b4], eax
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x2a4]
lea ecx, [ebp - 0x6e0]
call fcn.100182ab
mov ecx, dword [ebp - 0x2b4]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x2b4]
mov eax, dword [eax]
add eax, dword [ebp - 0x474]
cmp eax, dword [ebp - 0x110]
jne 0x10020d3a
mov dword [ebp - 0x2bc], 1
jmp 0x10020d41
and dword [ebp - 0x2bc], 0
mov eax, dword [ebp - 0x110]
cmp dword [ebp - 0x2bc], eax
je 0x10020d5b
mov dword [ebp - 0x3e4], 1
jmp 0x10020d62
and dword [ebp - 0x3e4], 0
mov eax, dword [ebp - 0x3e4]
mov dword [ebp - 0x110], eax
mov dword [ebp - 0x28], 3
jmp 0x10020d7e
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jl 0x10020dbd
mov byte [ebp - 0x9e], 0
movzx eax, byte [ebp - 0x9e]
test eax, eax
je 0x10020da4
push 0x1604
push 0
call fcn.1001e65e
pop ecx
pop ecx
mov byte [ebp - 0x6d], 0
push 0
push 0xfa0
lea eax, [ebp - 0x6d]
push eax
call fcn.1002060e
add esp, 0xc
jmp 0x10020d77
jmp 0x10020b94
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x6e0]
call fcn.100182a6
lea ecx, [ebp - 0x800]
call fcn.1001b6e7
mov dword [ebp - 0x488], eax
mov dword [ebp - 0xa4], 0xe1757117
mov dword [ebp - 0x34], 0xfffffffb
mov dword [ebp - 0x158], 0x37ad4351
push 4
lea ecx, [ebp - 0x4bc]
call fcn.10018221
mov byte [ebp - 4], 5
mov dword [ebp - 0x190], 0
jmp 0x10020e27
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 4
jge 0x10020e49
push dword [ebp - 0x190]
lea ecx, [ebp - 0x4bc]
call fcn.100182ab
mov dword [eax], 0xfffffffb
jmp 0x10020e1a
mov dword [ebp - 0xa4], 0
jmp 0x10020e62
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0x1a
jge 0x100212a6
mov dword [ebp - 0x120], 4
mov dword [ebp - 0x30], 0xfffffffe
mov dword [ebp - 0x34], 0xfba1a4d6
mov eax, dword [ebp - 0x30]
add eax, dword [ebp - 0x34]
mov dword [ebp - 0x68c], eax
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x68c], 0
je 0x10020fc7
mov dword [ebp - 0x118], 8
cmp dword [ebp - 0x118], 0
jle 0x10020ec6
mov dword [ebp - 0x510], 1
jmp 0x10020ecd
and dword [ebp - 0x510], 0
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x940], eax
cmp dword [ebp - 0x118], 0x4495231f
jg 0x10020ef1
mov dword [ebp - 0x2c4], 1
jmp 0x10020ef8
and dword [ebp - 0x2c4], 0
push 1
lea ecx, [ebp - 0x4bc]
call fcn.100182ab
mov ecx, dword [ebp - 0x2c4]
cmp ecx, dword [eax]
jge 0x10020f1b
mov dword [ebp - 0x6d4], 1
jmp 0x10020f22
and dword [ebp - 0x6d4], 0
cmp dword [ebp - 0x510], 0x1cb2
jle 0x10020f3a
mov dword [ebp - 0x2cc], 1
jmp 0x10020f41
and dword [ebp - 0x2cc], 0
cmp dword [ebp - 0x2cc], 0xffff
jb 0x10020f59
mov dword [ebp - 0x6b8], 1
jmp 0x10020f60
and dword [ebp - 0x6b8], 0
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x8d4], eax
cmp dword [ebp - 0x118], 0
je 0x10020fab
mov dword [ebp - 0x5f0], 0xffff
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x3ec], eax
push 0
lea ecx, [ebp - 0x4bc]
call fcn.100182ab
mov ecx, dword [ebp - 0x3ec]
mov dword [eax], ecx
mov eax, dword [ebp - 0x3ec]
mov dword [ebp - 0x5f0], eax
jmp 0x10020fc2
mov byte [ebp - 0x99], 0
lea eax, [ebp - 0x99]
push eax
push 1
call fcn.1001e65e
pop ecx
pop ecx
jmp 0x1002125c
mov dword [ebp - 0x26c], 0
push 4
lea ecx, [ebp - 0x528]
call fcn.10018221
mov byte [ebp - 4], 6
mov dword [ebp - 0x5dc], 1
push 0x599a
lea eax, [ebp - 0x98c]
push eax
push 0
lea eax, [ebp - 0x528]
push eax
push 0x7dde
call fcn.1001edc1
add esp, 0x14
cmp dword [ebp - 0x34], 0
je 0x10021028
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x528]
call fcn.100182a6
jmp 0x100212a6
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x8dc], eax
push 3
lea ecx, [ebp - 0x528]
call fcn.100182ab
imul ecx, dword [ebp - 0x158], 0xfffffffc
cmp dword [eax], ecx
jg 0x10021058
mov dword [ebp - 0x284], 1
jmp 0x1002105f
and dword [ebp - 0x284], 0
push 2
lea ecx, [ebp - 0x528]
call fcn.100182ab
mov ecx, dword [ebp - 0x284]
mov dword [eax], ecx
cmp dword [ebp - 0x284], 4
jae 0x10021089
mov dword [ebp - 0x578], 1
jmp 0x10021090
and dword [ebp - 0x578], 0
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x948], eax
push 2
lea ecx, [ebp - 0x528]
call fcn.100182ab
mov eax, dword [eax]
mov dword [ebp - 0x120], eax
mov eax, dword [ebp - 0x120]
add eax, 7
imul eax, eax, 0xfffd
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 0
jne 0x100210e7
push 2
lea ecx, [ebp - 0x528]
call fcn.100182ab
cmp dword [eax], 0
jne 0x100210e7
and dword [ebp - 0x2d4], 0
jmp 0x100210f1
mov dword [ebp - 0x2d4], 1
push 1
lea ecx, [ebp - 0x4bc]
call fcn.100182ab
mov eax, dword [eax]
cmp eax, dword [ebp - 0x2d4]
jne 0x10021114
mov dword [ebp - 0x47c], 1
jmp 0x1002111b
and dword [ebp - 0x47c], 0
mov eax, dword [ebp - 0xa4]
cmp dword [ebp - 0x47c], eax
jne 0x1002113e
cmp dword [ebp - 0x120], 0
je 0x1002113e
mov dword [ebp - 0x2dc], 1
jmp 0x10021145
and dword [ebp - 0x2dc], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x2dc], eax
jge 0x1002115c
mov dword [ebp - 0x3f4], 1
jmp 0x10021163
and dword [ebp - 0x3f4], 0
mov eax, dword [ebp - 0x5dc]
imul eax, dword [ebp - 0x3f4]
test eax, eax
jne 0x10021186
mov eax, 0xb1b57606
test eax, eax
jne 0x10021186
and dword [ebp - 0x2e4], 0
jmp 0x10021190
mov dword [ebp - 0x2e4], 1
push 1
lea ecx, [ebp - 0x4bc]
call fcn.100182ab
mov ecx, dword [ebp - 0x2e4]
sub ecx, dword [eax]
cmp ecx, dword [ebp - 0xa4]
jge 0x100211bf
mov eax, 0xfbc9
test eax, eax
jne 0x100211bf
and dword [ebp - 0x4e0], 0
jmp 0x100211c9
mov dword [ebp - 0x4e0], 1
mov eax, dword [ebp - 0x26c]
mov dword [ebp - 0x6a0], eax
mov eax, dword [ebp - 0x4e0]
mov dword [ebp - 0x580], eax
mov eax, dword [ebp - 0x26c]
inc eax
mov dword [ebp - 0x26c], eax
mov eax, dword [ebp - 0x6a0]
cmp eax, dword [ebp - 0x580]
jl 0x10021208
mov dword [ebp - 0x2ec], 1
jmp 0x1002120f
and dword [ebp - 0x2ec], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x2ec], eax
jge 0x10021226
mov dword [ebp - 0x3fc], 1
jmp 0x1002122d
and dword [ebp - 0x3fc], 0
mov eax, dword [ebp - 0x3fc]
sub eax, 0x3a0aeb04
mov dword [ebp - 0x34], eax
mov esi, dword [ebp - 0x34]
push 3
lea ecx, [ebp - 0x4bc]
call fcn.100182ab
mov dword [eax], esi
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x528]
call fcn.100182a6
mov dword [ebp - 0x34], 0
jmp 0x1002126c
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 3
jg 0x100212a1
mov dword [ebp - 0x30], 0
jmp 0x10021282
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jg 0x1002129f
lea eax, [ebp - 0x4bc]
push eax
lea eax, [ebp - 0x30]
push eax
push 0
call fcn.1001e995
add esp, 0xc
jmp 0x1002127b
jmp 0x10021265
jmp 0x10020e55
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x4bc]
call fcn.100182a6
movzx eax, byte [0x11187df1]
test eax, eax
je 0x1002133b
mov ecx, 0x11187ec0
call fcn.100269c5
movzx eax, al
test eax, eax
jne 0x1002133b
lea eax, [ebp - 0x488]
push eax
lea eax, [ebp - 0x2f4]
push eax
mov ecx, 0x11187ec0
call fcn.10018393
lea eax, [ebp - 0x8e4]
push eax
mov ecx, 0x11187ec0
call fcn.10018385
push eax
lea ecx, [ebp - 0x2f4]
call fcn.100183a8
movzx eax, al
test eax, eax
je 0x1002133b
lea ecx, [ebp - 0x2f4]
call fcn.100269ce
mov eax, dword [eax + 4]
mov dword [ebp - 0x658], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x800]
call fcn.1001805b
mov eax, dword [ebp - 0x658]
jmp 0x10024d12
mov dword [ebp - 0x54], 0x4e064826
mov dword [ebp - 0x77c], 0x5b0e446d
mov dword [ebp - 0x778], 0x5b0e446d
mov dword [ebp - 0x774], 0x5b0e446d
mov dword [ebp - 0x770], 0x5b0e446d
lea ecx, [ebp - 0x295]
call fcn.10008e33
push eax
lea eax, [ebp - 0x76c]
push eax
lea eax, [ebp - 0x77c]
push eax
lea ecx, [ebp - 0x9e4]
call fcn.100182ba
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x8f8]
call fcn.10018280
mov byte [ebp - 4], 7
mov dword [ebp - 0x54], 0
jmp 0x100213b3
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 1
je 0x100213eb
mov byte [ebp - 0x6f], 0
lea eax, [ebp - 0x6f]
push eax
push 0x266c
push 0x50c7
push 0x275c
push 1
push 0x1e5f
push 0x6844
push 0x64f6
call fcn.1001e6c5
add esp, 0x20
jmp 0x100213ac
mov dword [ebp - 0x54], 0
jmp 0x100213fb
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 4
jge 0x10021427
lea eax, [ebp - 0x54]
push eax
push 0
push 0x3464
push 0x560
push 0xa6f
lea eax, [ebp - 0x8f8]
push eax
call fcn.10026744
add esp, 0x18
jmp 0x100213f4
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x8f8]
call fcn.100182a6
and dword [ebp - 0xc0], 0
lea eax, [ebp - 0x800]
push eax
call fcn.1001c53e
pop ecx
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0
jne 0x1002497c
mov dword [ebp - 0x14], 0xffffffff
push 2
lea ecx, [ebp - 0x55c]
call fcn.10018221
mov byte [ebp - 4], 8
mov dword [ebp - 0x31c], 0x579d
mov dword [ebp - 0x974], 0xdcc3592e
push 0x59af
push 1
lea eax, [ebp - 0x848]
push eax
lea eax, [ebp - 0x55c]
push eax
call fcn.1001e7d9
add esp, 0x10
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x84c], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x854], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x85c], eax
push 1
lea ecx, [ebp - 0x55c]
call fcn.100182ab
or dword [eax], 0xffffffff
mov eax, dword [ebp - 0x14]
dec eax
cmp dword [ebp - 0x14], eax
jge 0x100214e6
mov dword [ebp - 0x484], 1
jmp 0x100214ed
and dword [ebp - 0x484], 0
mov eax, dword [ebp - 0x484]
sub eax, dword [ebp - 0x14]
jne 0x1002150d
mov eax, 0x270f9e3d
test eax, eax
je 0x1002150d
mov dword [ebp - 0x2fc], 1
jmp 0x10021514
and dword [ebp - 0x2fc], 0
cmp dword [ebp - 0x2fc], 0xfffffff6
jb 0x10021529
mov dword [ebp - 0x588], 1
jmp 0x10021530
and dword [ebp - 0x588], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x864], eax
cmp dword [ebp - 0x14], 0x270e
je 0x1002154e
mov dword [ebp - 0x404], 1
jmp 0x10021555
and dword [ebp - 0x404], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x404], eax
je 0x1002156c
mov dword [ebp - 0x304], 1
jmp 0x10021573
and dword [ebp - 0x304], 0
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x304]
test eax, eax
je 0x100216ff
mov dword [ebp - 0x504], 0x385d
mov dword [ebp - 0x274], 2
mov dword [ebp - 0x6bc], 0xffffffff
mov dword [ebp - 0x14], 0
jmp 0x100215b3
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jg 0x100215d9
push 0x5faa
push 0x7342
push 0x400f
push 0
push 0x600c
call fcn.1001f4a2
add esp, 0x14
jmp 0x100215ac
mov dword [ebp - 0x14], 0
jmp 0x100215e9
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 8
jg 0x100216fd
mov dword [ebp - 0x294], 0xdfe9f48
mov eax, dword [ebp - 0x294]
mov dword [ebp - 0x86c], eax
cmp dword [ebp - 0x294], 0
je 0x10021625
push 0xfffffffffffffffc
pop eax
test eax, eax
je 0x10021625
mov dword [ebp - 0x30c], 1
jmp 0x1002162c
and dword [ebp - 0x30c], 0
mov dword [ebp - 0x504], 0x509
mov eax, dword [ebp - 0x504]
cmp dword [ebp - 0x30c], eax
jge 0x10021650
mov dword [ebp - 0x40c], 1
jmp 0x10021657
and dword [ebp - 0x40c], 0
mov eax, dword [ebp - 0x294]
imul eax, dword [ebp - 0x40c]
cmp eax, dword [ebp - 0x274]
jg 0x10021678
mov dword [ebp - 0x314], 1
jmp 0x1002167f
and dword [ebp - 0x314], 0
cmp dword [ebp - 0x314], 0x1abdf11c
jne 0x10021697
mov dword [ebp - 0x48c], 1
jmp 0x1002169e
and dword [ebp - 0x48c], 0
cmp dword [ebp - 0x48c], 0xfffffffe
jne 0x100216c2
mov byte [ebp - 0x73], 0
movzx eax, byte [ebp - 0x73]
test eax, eax
je 0x100216c0
push 0x89e
push 0
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
jmp 0x100216f8
mov esi, dword [ebp - 0x6bc]
push 1
lea ecx, [ebp - 0x55c]
call fcn.100182ab
mov dword [eax], esi
push 1
lea ecx, [ebp - 0x55c]
call fcn.100182ab
mov eax, dword [eax]
mov dword [ebp - 0x274], eax
mov eax, dword [ebp - 0x274]
mov dword [ebp - 0x31c], eax
jmp 0x100215e2
jmp 0x10021717
lea eax, [ebp - 0x55c]
push eax
lea eax, [ebp - 0x31c]
push eax
push 0
call fcn.1001ffb8
add esp, 0xc
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x55c]
call fcn.100182a6
cmp dword [0x11187dfc], 0
jne 0x100247ea
mov dword [ebp - 0x2c], 8
push 4
lea ecx, [ebp - 0x4cc]
call fcn.10018221
mov byte [ebp - 4], 9
mov dword [ebp - 0x130], 0x6c7a88ff
mov dword [ebp - 0x33c], 1
mov dword [ebp - 0x42c], 0
mov dword [ebp - 0x598], 0xb3dfa8e8
mov dword [ebp - 0x6b0], 1
mov dword [ebp - 0x10], 0
jmp 0x1002178d
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 1
jge 0x100217a0
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x68], 0x8ec0ae97
jmp 0x10021786
push 1
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x4cc]
push eax
call fcn.1001e867
add esp, 0xc
mov dword [ebp - 0x10], 0
jmp 0x100217c5
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x100217db
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x4a4], 0x6f2c0e84
jmp 0x100217be
mov dword [ebp - 0x10], 0
jmp 0x100217eb
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x10021801
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x908], 0xe98c5348
jmp 0x100217e4
mov dword [ebp - 0x10], 0
jmp 0x10021811
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 1
jge 0x10021827
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x5a0], 0xfffffffa
jmp 0x1002180a
mov dword [ebp - 0x2c], 0
jmp 0x10021837
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jl 0x10021c03
mov dword [ebp - 0x27c], 0xea53061e
mov dword [ebp - 0x4f0], 0x1ebf0ddd
mov dword [ebp - 0x25c], 0xffffffff
mov dword [ebp - 0x590], 0x3e75cb55
mov dword [ebp - 0x160], 0x79a7b445
mov dword [ebp - 0x28c], 1
mov dword [ebp - 0x424], 1
push 1
lea ecx, [ebp - 0x818]
call fcn.10018221
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x178], 0
jmp 0x100218b1
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 1
jge 0x100218d3
push dword [ebp - 0x178]
lea ecx, [ebp - 0x818]
call fcn.100182ab
mov dword [eax], 0xd85d5fca
jmp 0x100218a4
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x2c]
mov ecx, dword [ebp + ecx*4 - 0x68]
cmp dword [ebp + eax*4 - 0x68], ecx
jne 0x100218ef
mov dword [ebp - 0x49c], 1
jmp 0x100218f6
and dword [ebp - 0x49c], 0
mov eax, dword [ebp - 0x28c]
inc eax
mov dword [ebp - 0x28c], eax
je 0x10021b10
mov eax, dword [ebp - 0x160]
cmp dword [ebp - 0x130], eax
jne 0x10021929
mov eax, 0x2c7e12fd
test eax, eax
jne 0x10021929
and dword [ebp - 0x414], 0
jmp 0x10021933
mov dword [ebp - 0x414], 1
push 0
lea ecx, [ebp - 0x4cc]
call fcn.100182ab
mov ecx, dword [ebp - 0x414]
cmp ecx, dword [eax]
jge 0x10021956
mov dword [ebp - 0x324], 1
jmp 0x1002195d
and dword [ebp - 0x324], 0
mov eax, dword [ebp - 0x324]
mov dword [ebp - 0x4f0], eax
mov eax, dword [ebp - 0x424]
cmp dword [ebp - 0x4f0], eax
jle 0x10021983
mov dword [ebp - 0x32c], 1
jmp 0x1002198a
and dword [ebp - 0x32c], 0
mov eax, dword [ebp - 0x590]
cmp dword [ebp - 0x32c], eax
jle 0x100219a4
mov dword [ebp - 0x41c], 1
jmp 0x100219ab
and dword [ebp - 0x41c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x41c]
sub ecx, dword [ebp + eax - 0x68]
cmp dword [ebp - 0x27c], ecx
jne 0x100219cf
mov dword [ebp - 0x334], 1
jmp 0x100219d6
and dword [ebp - 0x334], 0
push 2
lea ecx, [ebp - 0x4cc]
call fcn.100182ab
mov ecx, dword [ebp - 0x334]
cmp ecx, dword [eax]
jge 0x100219f9
mov dword [ebp - 0x494], 1
jmp 0x10021a00
and dword [ebp - 0x494], 0
mov eax, dword [ebp - 0x494]
mov dword [ebp - 0x33c], eax
mov eax, dword [ebp - 0x33c]
neg eax
cmp eax, dword [ebp - 0x25c]
jge 0x10021a28
mov dword [ebp - 0x660], 1
jmp 0x10021a2f
and dword [ebp - 0x660], 0
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x874], eax
push 0
lea ecx, [ebp - 0x4cc]
call fcn.100182ab
xor ecx, ecx
neg ecx
imul ecx, dword [ebp - 0x424]
cmp dword [eax], ecx
jne 0x10021a60
mov dword [ebp - 0x344], 1
jmp 0x10021a67
and dword [ebp - 0x344], 0
mov eax, dword [ebp - 0x160]
cmp dword [ebp - 0x344], eax
jle 0x10021a87
mov eax, 0x2c67
test eax, eax
jne 0x10021a87
and dword [ebp - 0x50c], 0
jmp 0x10021a91
mov dword [ebp - 0x50c], 1
mov eax, dword [ebp - 0x50c]
mov dword [ebp - 0x27c], eax
mov eax, dword [ebp - 0x27c]
add eax, 7
imul eax, eax, 0x946c
mov ecx, dword [ebp - 0x2c]
cmp eax, dword [ebp + ecx*4 - 0x68]
jle 0x10021ac1
mov dword [ebp - 0x128], 1
jmp 0x10021ac8
and dword [ebp - 0x128], 0
push 0
lea ecx, [ebp - 0x4cc]
call fcn.100182ab
mov ecx, dword [ebp - 0x128]
mov dword [eax], ecx
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x128]
mov dword [ebp + eax - 0x4a4], ecx
mov eax, dword [ebp - 0x128]
neg eax
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x68]
jl 0x10021b10
mov dword [ebp - 0x34c], 1
jmp 0x10021b17
and dword [ebp - 0x34c], 0
mov eax, dword [ebp - 0x34c]
mov dword [ebp - 0x160], eax
mov eax, dword [ebp - 0x160]
add eax, dword [ebp - 0x130]
mov dword [ebp - 0x25c], eax
mov eax, dword [ebp - 0x25c]
mov dword [ebp - 0x42c], eax
mov eax, dword [ebp - 0x42c]
mov dword [ebp - 0x87c], eax
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x884], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x68]
sub eax, dword [ebp - 0x130]
jne 0x10021b75
xor eax, eax
jne 0x10021b75
and dword [ebp - 0x354], 0
jmp 0x10021b7f
mov dword [ebp - 0x354], 1
push 0
lea ecx, [ebp - 0x818]
call fcn.100182ab
mov ecx, dword [ebp - 0x354]
cmp ecx, dword [eax]
jg 0x10021ba2
mov dword [ebp - 0x35c], 1
jmp 0x10021ba9
and dword [ebp - 0x35c], 0
mov eax, dword [ebp - 0x49c]
cmp eax, dword [ebp - 0x35c]
jge 0x10021bd2
push 1
lea ecx, [ebp - 0x4cc]
call fcn.100182ab
cmp dword [eax], 0
jne 0x10021bd2
and dword [ebp - 0x434], 0
jmp 0x10021bdc
mov dword [ebp - 0x434], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x434]
mov dword [ebp + eax - 0x908], ecx
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x818]
call fcn.100182a6
jmp 0x10021830
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x4a4]
mov dword [ebp - 0x88c], eax
mov eax, dword [ebp - 0x598]
mov dword [ebp - 0x894], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x68], 0
jne 0x10021c33
xor eax, eax
je 0x10021c43
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x4a4], 0
jne 0x10021c5e
push 0
lea ecx, [ebp - 0x4cc]
call fcn.100182ab
cmp dword [eax], 0
jne 0x10021c5e
and dword [ebp - 0x364], 0
jmp 0x10021c68
mov dword [ebp - 0x364], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x364]
sub ecx, dword [ebp + eax - 0x68]
push 4
pop eax
imul eax, eax, 0
cmp ecx, dword [ebp + eax - 0x4a4]
jle 0x10021c93
mov dword [ebp - 0x500], 1
jmp 0x10021c9a
and dword [ebp - 0x500], 0
cmp dword [ebp - 0x500], 0x2973452c
jg 0x10021cb2
mov dword [ebp - 0x36c], 1
jmp 0x10021cb9
and dword [ebp - 0x36c], 0
cmp dword [ebp - 0x36c], 0
je 0x10021cde
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x908], 0
je 0x10021cde
mov dword [ebp - 0x43c], 1
jmp 0x10021ce5
and dword [ebp - 0x43c], 0
cmp dword [ebp - 0x43c], 0
jl 0x10021cfa
mov dword [ebp - 0x374], 1
jmp 0x10021d01
and dword [ebp - 0x374], 0
mov eax, dword [ebp - 0x6b0]
cmp dword [ebp - 0x374], eax
jne 0x10021d1b
mov dword [ebp - 0x4a8], 1
jmp 0x10021d22
and dword [ebp - 0x4a8], 0
cmp dword [ebp - 0x4a8], 0x599618de
jl 0x10021d3a
mov dword [ebp - 0x37c], 1
jmp 0x10021d41
and dword [ebp - 0x37c], 0
cmp dword [ebp - 0x37c], 0xbf6b
jl 0x10021d59
mov dword [ebp - 0x444], 1
jmp 0x10021d60
and dword [ebp - 0x444], 0
cmp dword [ebp - 0x444], 0xd933
jl 0x10021d78
mov dword [ebp - 0x384], 1
jmp 0x10021d7f
and dword [ebp - 0x384], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5a0]
cmp eax, dword [ebp - 0x384]
jg 0x10021da0
mov dword [ebp - 0x514], 1
jmp 0x10021da7
and dword [ebp - 0x514], 0
mov dword [ebp - 0x2c], 0x1c18
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x514]
jg 0x10021dc5
mov dword [ebp - 0x38c], 1
jmp 0x10021dcc
and dword [ebp - 0x38c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x38c]
mov dword [ebp + eax - 0x4a4], ecx
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x4cc]
call fcn.100182a6
mov dword [ebp - 0xc4], 0xffffffff
push 1
lea ecx, [ebp - 0x7d0]
call fcn.10018221
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x5ec], 1
mov dword [ebp - 0x5b0], 0x58163090
push 0x3f2d
push 0x76ed
lea eax, [ebp - 0x89c]
push eax
push 0
lea eax, [ebp - 0x7d0]
push eax
call fcn.1002010a
add esp, 0x14
mov dword [ebp - 0xc4], 0
jmp 0x10021e58
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 4
jg 0x10021f8e
mov dword [ebp - 0xd8], 0x10b999fb
mov dword [ebp - 0x5a8], 0xffffffff
mov dword [ebp - 0x5fc], 0
mov dword [ebp - 0xd8], 0
jmp 0x10021e9c
mov eax, dword [ebp - 0xd8]
dec eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0
jl 0x10021f89
mov dword [ebp - 0x5b8], 0xffffffff
mov dword [ebp - 0x5f4], 0xead9bacc
push 1
lea ecx, [ebp - 0x824]
call fcn.10018221
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x188], 0
jmp 0x10021ee7
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 1
jge 0x10021f09
push dword [ebp - 0x188]
lea ecx, [ebp - 0x824]
call fcn.100182ab
mov dword [eax], 0xfffaa232
jmp 0x10021eda
lea eax, [ebp - 0x5ec]
push eax
lea eax, [ebp - 0xc4]
push eax
lea eax, [ebp - 0x824]
push eax
push 0
lea eax, [ebp - 0x5a8]
push eax
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0x7d0]
push eax
lea eax, [ebp - 0x5f4]
push eax
lea eax, [ebp - 0x5b0]
push eax
lea eax, [ebp - 0x5fc]
push eax
lea eax, [ebp - 0x5b8]
push eax
call fcn.1001fcc8
add esp, 0x2c
mov byte [ebp - 0x71], 0
lea eax, [ebp - 0x71]
push eax
push 1
push 0xc2b
push 0x57bb
call fcn.1001e8d8
add esp, 0x10
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x824]
call fcn.100182a6
jmp 0x10021e8f
jmp 0x10021e4b
mov byte [ebp - 0x9b], 0
push 0x1079
push 0
lea eax, [ebp - 0x9b]
push eax
call fcn.10020021
add esp, 0xc
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x7d0]
call fcn.100182a6
mov dword [ebp - 0x3c], 0xb029
mov dword [ebp - 0x168], 0xa969ac54
mov dword [ebp - 0x604], 0x58018d9d
mov dword [ebp - 0x140], 0xffffffff
mov dword [ebp - 0x3b4], 0x9ab8
mov dword [ebp - 0x138], 0
jmp 0x10022002
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 2
jge 0x1002201e
mov eax, dword [ebp - 0x138]
mov dword [ebp + eax*4 - 0x724], 6
jmp 0x10021ff5
xor eax, eax
inc eax
je 0x10022172
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x168], eax
mov eax, dword [ebp - 0x168]
mov dword [ebp - 0x604], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x8a4], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x8ac], eax
xor eax, eax
inc eax
cmp eax, 1
jne 0x10022062
mov dword [ebp - 0x44c], 1
jmp 0x10022069
and dword [ebp - 0x44c], 0
mov eax, dword [ebp - 0x168]
cmp dword [ebp - 0x44c], eax
je 0x10022083
mov dword [ebp - 0x394], 1
jmp 0x1002208a
and dword [ebp - 0x394], 0
cmp dword [ebp - 0x394], 0xfff8
jbe 0x100220a2
mov dword [ebp - 0x4b0], 1
jmp 0x100220a9
and dword [ebp - 0x4b0], 0
mov eax, dword [ebp - 0x168]
cmp dword [ebp - 0x4b0], eax
jg 0x100220cc
cmp dword [ebp - 0x3c], 0
jne 0x100220cc
cmp dword [ebp - 0x3c], 0
jne 0x100220cc
and dword [ebp - 0x39c], 0
jmp 0x100220d6
mov dword [ebp - 0x39c], 1
mov eax, dword [ebp - 0x39c]
neg eax
cmp eax, dword [ebp - 0x140]
je 0x100220f2
mov dword [ebp - 0x454], 1
jmp 0x100220f9
and dword [ebp - 0x454], 0
mov eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x454]
je 0x10022110
mov dword [ebp - 0x3a4], 1
jmp 0x10022117
and dword [ebp - 0x3a4], 0
cmp dword [ebp - 0x3a4], 0xf4a7
jg 0x1002212f
mov dword [ebp - 0x51c], 1
jmp 0x10022136
and dword [ebp - 0x51c], 0
mov eax, dword [ebp - 0x140]
cmp dword [ebp - 0x51c], eax
jl 0x10022150
mov dword [ebp - 0x3ac], 1
jmp 0x10022157
and dword [ebp - 0x3ac], 0
mov eax, dword [ebp - 0x3ac]
neg eax
cmp eax, 0xa094
jl 0x10022172
mov dword [ebp - 0x5c0], 1
jmp 0x10022179
and dword [ebp - 0x5c0], 0
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x844], eax
mov eax, dword [ebp - 0x140]
cmp dword [ebp - 0x3c], eax
jg 0x10022199
mov dword [ebp - 0x45c], 1
jmp 0x100221a0
and dword [ebp - 0x45c], 0
mov eax, dword [ebp - 0x45c]
mov dword [ebp - 0x3b4], eax
mov eax, dword [ebp - 0x140]
cmp dword [ebp - 0x3b4], eax
jge 0x100221c6
mov dword [ebp - 0x60c], 1
jmp 0x100221cd
and dword [ebp - 0x60c], 0
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x8c8], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x724]
cmp dword [ebp - 0x3c], eax
jg 0x100221f4
mov dword [ebp - 0x4c0], 1
jmp 0x100221fb
and dword [ebp - 0x4c0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x4c0]
mov dword [ebp + eax - 0x724], ecx
mov byte [ebp - 0x258], 0xa
mov byte [ebp - 0x257], 0x36
mov byte [ebp - 0x256], 2
mov byte [ebp - 0x255], 0x1e
mov byte [ebp - 0x254], 0xb
mov byte [ebp - 0x253], 0x1e
mov byte [ebp - 0x252], 8
mov byte [ebp - 0x251], 0x42
mov byte [ebp - 0x250], 3
mov byte [ebp - 0x24f], 0x40
mov byte [ebp - 0x24e], 6
mov byte [ebp - 0x24d], 0x5d
mov byte [ebp - 0x24c], 0
mov byte [ebp - 0x24b], 0x78
mov byte [ebp - 0x24a], 4
mov byte [ebp - 0x249], 0x2e
mov byte [ebp - 0x248], 9
mov byte [ebp - 0x247], 1
mov byte [ebp - 0x246], 5
mov byte [ebp - 0x245], 8
mov byte [ebp - 0x244], 1
mov byte [ebp - 0x243], 9
mov byte [ebp - 0x242], 0x5b
mov byte [ebp - 0x241], 0xe2
mov byte [ebp - 0x240], 0xf5
mov byte [ebp - 0x23f], 0xb1
mov byte [ebp - 0x23e], 0xef
mov byte [ebp - 0x23d], 0x1c
mov byte [ebp - 0x23c], 0x75
mov byte [ebp - 0x23b], 0x5a
mov byte [ebp - 0x23a], 0x82
mov byte [ebp - 0x239], 0x43
mov byte [ebp - 0x238], 0x4e
mov byte [ebp - 0x237], 0xa
mov byte [ebp - 0x236], 0x30
mov byte [ebp - 0x235], 0xab
mov byte [ebp - 0x234], 0x4a
mov byte [ebp - 0x233], 0x71
mov byte [ebp - 0x232], 0x13
mov byte [ebp - 0x231], 0xcd
mov byte [ebp - 0x230], 0x5f
mov byte [ebp - 0x22f], 0x38
mov byte [ebp - 0x22e], 0xc5
mov byte [ebp - 0x22d], 0x4e
mov byte [ebp - 0x22c], 0xfe
mov byte [ebp - 0x22b], 0x2d
mov byte [ebp - 0x22a], 0xb9
mov byte [ebp - 0x229], 0x8a
mov byte [ebp - 0x228], 0x3e
mov byte [ebp - 0x227], 0x57
mov byte [ebp - 0x226], 0xc6
mov byte [ebp - 0x225], 0x80
mov byte [ebp - 0x224], 0x5e
mov byte [ebp - 0x223], pe_nt_image_headers32
mov byte [ebp - 0x222], 0x86
mov byte [ebp - 0x221], 0x39
mov byte [ebp - 0x220], 0x75
mov byte [ebp - 0x21f], 0x76
mov byte [ebp - 0x21e], 0x80
mov byte [ebp - 0x21d], 0x68
mov byte [ebp - 0x21c], 0x42
mov byte [ebp - 0x21b], 0xc0
mov byte [ebp - 0x21a], 0xa8
mov byte [ebp - 0x219], 0xfe
mov byte [ebp - 0x218], 0xe9
mov byte [ebp - 0x217], 0x5d
mov byte [ebp - 0x216], 0xa6
mov byte [ebp - 0x215], 0x53
mov byte [ebp - 0x214], 0xa4
mov byte [ebp - 0x213], 0x96
mov byte [ebp - 0x212], 0xa
mov byte [ebp - 0x211], 0x29
mov byte [ebp - 0x210], 0x1a
mov byte [ebp - 0x20f], 0xe4
mov byte [ebp - 0x20e], 0x48
mov byte [ebp - 0x20d], 0x3d
mov byte [ebp - 0x20c], 0xfd
mov byte [ebp - 0x20b], 0xbb
mov byte [ebp - 0x20a], 0x2f
mov byte [ebp - 0x209], 4
mov byte [ebp - 0x208], 0x9e
mov byte [ebp - 0x207], 0xdc
mov byte [ebp - 0x206], 0x25
mov byte [ebp - 0x205], 0x6c
mov byte [ebp - 0x204], 0x77
mov byte [ebp - 0x203], 0xb9
mov byte [ebp - 0x202], 0xec
mov byte [ebp - 0x201], 0x34
mov byte [ebp - 0x200], 0x87
mov byte [ebp - 0x1ff], 0x80
mov byte [ebp - 0x1fe], 0x42
mov byte [ebp - 0x1fd], 0x1e
mov byte [ebp - 0x1fc], 0x6a
mov byte [ebp - 0x1fb], 0x59
mov byte [ebp - 0x1fa], 0x70
mov byte [ebp - 0x1f9], 0xb2
mov byte [ebp - 0x1f8], 3
mov byte [ebp - 0x1f7], 0xfe
mov byte [ebp - 0x1f6], 0x5c
mov byte [ebp - 0x1f5], 0xbe
mov byte [ebp - 0x1f4], 0xb1
mov byte [ebp - 0x1f3], 0x2d
mov byte [ebp - 0x1f2], 0xc
mov byte [ebp - 0x1f1], 0x49
mov byte [ebp - 0x1f0], 0xd9
mov byte [ebp - 0x1ef], 0x12
mov byte [ebp - 0x1ee], 0xa1
mov byte [ebp - 0x1ed], 0xb3
mov byte [ebp - 0x1ec], 0xc9
mov byte [ebp - 0x1eb], 0x37
mov byte [ebp - 0x1ea], 0x63
mov byte [ebp - 0x1e9], 0xa9
mov byte [ebp - 0x1e8], 0xb0
mov byte [ebp - 0x1e7], 0x23
mov byte [ebp - 0x1e6], 7
mov byte [ebp - 0x1e5], 0x57
mov dword [ebp - 0x48], 0xc64a6847
mov dword [ebp - 0x104], 0xbe1552b9
mov dword [ebp - 0x180], 0
jmp 0x10022564
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 1
jge 0x10022580
mov eax, dword [ebp - 0x180]
mov dword [ebp + eax*4 - 0x614], 0x738f5859
jmp 0x10022557
mov dword [ebp - 0x48], 5
jmp 0x10022590
mov eax, dword [ebp - 0x48]
dec eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
jne 0x1002286d
mov dword [ebp - 0x78], 0xffffffff
mov dword [ebp - 0x3cc], 0xbc9b780f
mov dword [ebp - 0x8d0], 0xd976d993
mov dword [ebp - 0x8d8], 0xfffffffe
mov dword [ebp - 0x8e0], 0xfffffff9
mov dword [ebp - 0x8e8], 0xffffffff
mov dword [ebp - 0x944], 0
mov dword [ebp - 0x78], 9
jmp 0x100225ed
mov eax, dword [ebp - 0x78]
dec eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0xffffffe5
jg 0x10022868
mov dword [ebp - 0x3c4], 5
push 3
lea ecx, [ebp - 0x704]
call fcn.10018221
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x148], 0
jmp 0x1002262b
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 3
jge 0x1002264d
push dword [ebp - 0x148]
lea ecx, [ebp - 0x704]
call fcn.100182ab
mov dword [eax], 0xb2f14481
jmp 0x1002261e
push 2
lea ecx, [ebp - 0x704]
call fcn.100182ab
cmp dword [eax], 1
je 0x1002266b
mov dword [ebp - 0x3bc], 1
jmp 0x10022672
and dword [ebp - 0x3bc], 0
mov eax, dword [ebp - 0x48]
cmp eax, dword [ebp - 0x3bc]
jne 0x10022689
mov dword [ebp - 0x570], 1
jmp 0x10022690
and dword [ebp - 0x570], 0
cmp dword [ebp - 0x48], 0x39e2
jge 0x100226a5
mov dword [ebp - 0x464], 1
jmp 0x100226ac
and dword [ebp - 0x464], 0
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x3c4], eax
mov eax, dword [ebp - 0x3cc]
imul eax, dword [ebp - 0x464]
cmp dword [ebp - 0x3c4], eax
jge 0x100226d6
mov dword [ebp - 0x518], 1
jmp 0x100226dd
and dword [ebp - 0x518], 0
mov eax, dword [ebp - 0x48]
cmp eax, dword [ebp - 0x518]
jne 0x100226f4
mov dword [ebp - 0x46c], 1
jmp 0x100226fb
and dword [ebp - 0x46c], 0
mov eax, dword [ebp - 0x3cc]
cmp dword [ebp - 0x46c], eax
je 0x10022715
mov dword [ebp - 0x3d4], 1
jmp 0x1002271c
and dword [ebp - 0x3d4], 0
mov esi, dword [ebp - 0x3d4]
sub esi, dword [ebp - 0x48]
push 1
lea ecx, [ebp - 0x704]
call fcn.100182ab
cmp esi, dword [eax]
jg 0x10022748
cmp dword [ebp - 0x78], 0
je 0x10022748
mov dword [ebp - 0x260], 1
jmp 0x1002274f
and dword [ebp - 0x260], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x260]
mov dword [ebp + eax - 0x614], ecx
mov eax, dword [ebp - 0x78]
sub eax, dword [ebp - 0x260]
jne 0x1002277c
cmp dword [ebp - 0x48], 0
jne 0x1002277c
and dword [ebp - 0x4d0], 0
jmp 0x10022786
mov dword [ebp - 0x4d0], 1
cmp dword [ebp - 0x4d0], 0x63abefa0
je 0x1002279e
mov dword [ebp - 0x2ac], 1
jmp 0x100227a5
and dword [ebp - 0x2ac], 0
cmp dword [ebp - 0x2ac], 0
je 0x100227c7
mov byte [ebp - 0x69], 0
movzx eax, byte [ebp - 0x69]
test eax, eax
je 0x100227c2
push 1
call fcn.1001e955
pop ecx
jmp 0x10022854
mov dword [ebp - 0x94c], 0xfffffff6
mov dword [ebp - 0x968], 0xa885c82f
mov dword [ebp - 0x970], 0x80254f8d
push 3
lea ecx, [ebp - 0x918]
call fcn.10018221
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x2b0], 0xfff8
mov dword [ebp - 0xf8], 0
jmp 0x10022819
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 3
jge 0x10022838
push dword [ebp - 0xf8]
lea ecx, [ebp - 0x918]
call fcn.100182ab
or dword [eax], 0xffffffff
jmp 0x1002280c
mov eax, dword [ebp - 0x2b0]
inc eax
mov dword [ebp - 0x2b0], eax
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x918]
call fcn.100182a6
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x704]
call fcn.100182a6
jmp 0x100225e6
jmp 0x10022589
mov dword [ebp - 0x104], 0
jmp 0x10022886
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0x19
je 0x100228bc
mov byte [ebp - 0x79], 0
lea eax, [ebp - 0x79]
push eax
push 0
push 0x649f
push 0xb34
push 0x24d6
push 0x5abe
push 0x531e
call fcn.1001f6f4
add esp, 0x1c
jmp 0x10022879
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x258]
or eax, 0x5a
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x258]
and ecx, 0x5a
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x258]
mov word [ebp + ecx*2 - 0x840], ax
push 1
lea ecx, [ebp - 0x4ec]
call fcn.10018221
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x24], 0
jmp 0x1002291e
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x10022937
push dword [ebp - 0x24]
lea ecx, [ebp - 0x4ec]
call fcn.100182ab
or dword [eax], 0xffffffff
jmp 0x10022917
mov dword [ebp - 0x24], 0
jmp 0x10022947
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x1002295d
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x4dc], 0x39d6b9c2
jmp 0x10022940
mov dword [ebp - 0x24], 0
jmp 0x1002296d
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x10022983
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x5e8], 0x268d9a6
jmp 0x10022966
push 0
lea ecx, [ebp - 0x4ec]
call fcn.100182ab
mov dword [eax], 0xffffffe6
jmp 0x100229bc
push 0
lea ecx, [ebp - 0x4ec]
call fcn.100182ab
mov dword [ebp - 0x2b8], eax
mov eax, dword [ebp - 0x2b8]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x2b8]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x4ec]
call fcn.100182ab
cmp dword [eax], 0xffffffe4
je 0x10022b2d
mov dword [ebp - 0x2e0], 0
mov dword [ebp - 0x5d0], 0x7257ea0d
mov dword [ebp - 0x5d8], 0xca6c8490
mov dword [ebp - 0x624], 0xfffffffe
cmp dword [ebp - 0x5d0], 0xffffffff
je 0x10022a0f
mov dword [ebp - 0x2c0], 1
jmp 0x10022a16
and dword [ebp - 0x2c0], 0
cmp dword [ebp - 0x2c0], 0xc213
jg 0x10022a2e
mov dword [ebp - 0x2c8], 1
jmp 0x10022a35
and dword [ebp - 0x2c8], 0
cmp dword [ebp - 0x2c8], 0
jne 0x10022a4a
mov dword [ebp - 0x2d0], 1
jmp 0x10022a51
and dword [ebp - 0x2d0], 0
cmp dword [ebp - 0x2d0], 0xfffa
jae 0x10022a69
mov dword [ebp - 0x268], 1
jmp 0x10022a70
and dword [ebp - 0x268], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x268]
mov dword [ebp + eax - 0x4dc], ecx
push 0
lea ecx, [ebp - 0x4ec]
call fcn.100182ab
mov ecx, dword [ebp - 0x268]
cmp ecx, dword [eax]
jl 0x10022aa6
mov dword [ebp - 0x2d8], 1
jmp 0x10022aad
and dword [ebp - 0x2d8], 0
cmp dword [ebp - 0x2d8], 0xbd2
jl 0x10022ac5
mov dword [ebp - 0x2e8], 1
jmp 0x10022acc
and dword [ebp - 0x2e8], 0
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x2e0], eax
mov eax, dword [ebp - 0x2e0]
cmp eax, dword [ebp - 0x2e8]
jl 0x10022aef
mov dword [ebp - 0x2f0], 1
jmp 0x10022af6
and dword [ebp - 0x2f0], 0
cmp dword [ebp - 0x2f0], 0xffffffff
je 0x10022b0b
mov dword [ebp - 0x61c], 1
jmp 0x10022b12
and dword [ebp - 0x61c], 0
mov eax, dword [ebp - 0x5d8]
mov dword [ebp - 0x978], eax
mov dword [ebp - 0x624], 0x12a83a0f
jmp 0x10022998
mov dword [ebp - 0x58], 0
jmp 0x10022b3d
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 2
jg 0x10022d2e
mov dword [ebp - 0x38], 0xffffffff
mov dword [ebp - 0x5e0], 9
mov dword [ebp - 0x300], 0xf81a770a
mov dword [ebp - 0x310], 0xffffffff
mov byte [ebp - 0x9f], 0
movzx eax, byte [ebp - 0x9f]
test eax, eax
je 0x10022b92
push 0x5b47
push 0x6b16
push 1
call fcn.1001e995
add esp, 0xc
mov dword [ebp - 0x38], 0
jmp 0x10022ba2
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 2
jg 0x10022d29
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0x62c], 0x3d58e56a
mov dword [ebp - 0xc8], 0
jmp 0x10022bd9
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 2
jg 0x10022bec
push 1
call fcn.1001e9f2
pop ecx
jmp 0x10022bcc
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x980], eax
push 0
lea ecx, [ebp - 0x4ec]
call fcn.100182ab
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp + eax*4 - 0x4dc]
mov dword [ebp - 0xc8], eax
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp + eax*4 - 0x4dc]
neg eax
cmp eax, dword [ebp - 0x38]
je 0x10022c2f
mov dword [ebp - 0x2f8], 1
jmp 0x10022c36
and dword [ebp - 0x2f8], 0
mov eax, dword [ebp - 0x5e0]
cmp dword [ebp - 0x2f8], eax
jl 0x10022c50
mov dword [ebp - 0x270], 1
jmp 0x10022c57
and dword [ebp - 0x270], 0
push 0
lea ecx, [ebp - 0x4ec]
call fcn.100182ab
mov ecx, dword [ebp - 0x270]
mov dword [eax], ecx
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x62c]
imul ecx, dword [ebp - 0x270]
mov edx, dword [ebp - 0x38]
sub edx, ecx
sub edx, dword [ebp + eax*4 - 0x4dc]
mov dword [ebp - 0x300], edx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x4dc]
cmp eax, dword [ebp - 0x300]
jle 0x10022caf
mov dword [ebp - 0x308], 1
jmp 0x10022cb6
and dword [ebp - 0x308], 0
mov eax, dword [ebp - 0x38]
add eax, dword [ebp - 0x308]
mov dword [ebp - 0x310], eax
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp + eax*4 - 0x4dc]
cmp dword [ebp - 0x310], eax
jge 0x10022ce3
mov dword [ebp - 0x318], 1
jmp 0x10022cea
and dword [ebp - 0x318], 0
mov eax, dword [ebp - 0x318]
inc eax
mov dword [ebp - 0x320], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x320]
mov dword [ebp + eax - 0x5e8], ecx
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp + eax*4 - 0x4dc]
add eax, dword [ebp - 0x320]
mov ecx, dword [ebp - 0x38]
mov dword [ebp + ecx*4 - 0x4dc], eax
jmp 0x10022b9b
jmp 0x10022b36
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x4ec]
call fcn.100182a6
mov dword [ebp - 0x18], 2
and dword [ebp - 0xdc], 0
jmp 0x10022d55
mov eax, dword [ebp - 0x18]
inc eax
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0x74
jae 0x100236ee
push 1
lea ecx, [ebp - 0x550]
call fcn.10018221
mov byte [ebp - 4], 0x10
mov dword [ebp - 0x64], 0xfffffff8
mov dword [ebp - 0x328], 0xd26ec17e
lea eax, [ebp - 0xcc]
push eax
push 0x303f
push 1
push 0x206c
lea eax, [ebp - 0x550]
push eax
call fcn.1001edc1
add esp, 0x14
mov dword [ebp - 0xcc], 0
jmp 0x10022dbc
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 3
jge 0x10022dd8
mov eax, dword [ebp - 0xcc]
mov dword [ebp + eax*4 - 0x99c], 0xb054dbbe
jmp 0x10022daf
mov dword [ebp - 0x64], 0
jmp 0x10022de8
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0
jg 0x10022ec1
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x328], eax
cmp dword [ebp - 0x328], 0xffffffff
jle 0x10022e10
mov dword [ebp - 0x330], 1
jmp 0x10022e17
and dword [ebp - 0x330], 0
push dword [ebp - 0x64]
lea ecx, [ebp - 0x550]
call fcn.100182ab
mov ecx, dword [ebp - 0x330]
add ecx, 0xffff
cmp dword [eax], ecx
jle 0x10022e41
mov dword [ebp - 0x338], 1
jmp 0x10022e48
and dword [ebp - 0x338], 0
push dword [ebp - 0x64]
lea ecx, [ebp - 0x550]
call fcn.100182ab
mov ecx, dword [ebp - 0x338]
imul ecx, dword [eax]
mov dword [ebp - 0x340], ecx
push 0
lea ecx, [ebp - 0x550]
call fcn.100182ab
mov ecx, dword [ebp - 0x340]
mov dword [eax], ecx
cmp dword [ebp - 0x340], 0
je 0x10022ea2
push dword [ebp - 0x64]
lea ecx, [ebp - 0x550]
call fcn.100182ab
cmp dword [eax], 0
je 0x10022ea2
mov dword [ebp - 0x348], 1
jmp 0x10022ea9
and dword [ebp - 0x348], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x348]
mov dword [ebp + eax - 0x99c], ecx
jmp 0x10022de1
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x550]
call fcn.100182a6
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x258]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x18], eax
jne 0x100234fe
push 3
lea ecx, [ebp - 0x6ac]
call fcn.10018221
mov byte [ebp - 4], 0x11
mov dword [ebp - 0xf0], 0
push 4
lea ecx, [ebp - 0x71c]
call fcn.10018221
mov byte [ebp - 4], 0x12
push 2
lea ecx, [ebp - 0x794]
call fcn.10018221
mov byte [ebp - 4], 0x13
mov dword [ebp - 0x634], 0xc105
mov dword [ebp - 0x368], 1
mov dword [ebp - 0x63c], 5
mov dword [ebp - 0x20], 0
jmp 0x10022f56
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x10022f72
push dword [ebp - 0x20]
lea ecx, [ebp - 0x6ac]
call fcn.100182ab
mov dword [eax], 1
jmp 0x10022f4f
mov dword [ebp - 0x20], 0
jmp 0x10022f82
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 4
jge 0x10022f9b
push dword [ebp - 0x20]
lea ecx, [ebp - 0x71c]
call fcn.100182ab
and dword [eax], 0
jmp 0x10022f7b
mov dword [ebp - 0x20], 0
jmp 0x10022fab
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jge 0x10022fc7
push dword [ebp - 0x20]
lea ecx, [ebp - 0x794]
call fcn.100182ab
mov dword [eax], 0x1efdb7b2
jmp 0x10022fa4
push 1
lea ecx, [ebp - 0x6ac]
call fcn.100182ab
cmp dword [eax], 0
jne 0x1002309d
push 1
lea ecx, [ebp - 0x6ac]
call fcn.100182ab
mov ecx, dword [ebp - 0xf0]
imul ecx, dword [eax]
cmp ecx, dword [ebp - 0xf0]
jg 0x10023007
mov dword [ebp - 0x350], 1
jmp 0x1002300e
and dword [ebp - 0x350], 0
mov esi, 0xd62e65
sub esi, dword [ebp - 0xf0]
push 3
lea ecx, [ebp - 0x71c]
call fcn.100182ab
sub esi, dword [eax]
jne 0x1002303c
cmp dword [ebp - 0xf0], 0
jne 0x1002303c
and dword [ebp - 0x358], 0
jmp 0x10023046
mov dword [ebp - 0x358], 1
mov eax, dword [ebp - 0x350]
cmp eax, dword [ebp - 0x358]
je 0x10023060
mov dword [ebp - 0x278], 1
jmp 0x10023067
and dword [ebp - 0x278], 0
push 1
lea ecx, [ebp - 0x794]
call fcn.100182ab
mov ecx, dword [ebp - 0x278]
mov dword [eax], ecx
mov eax, dword [ebp - 0x634]
cmp dword [ebp - 0x278], eax
jge 0x10023096
mov dword [ebp - 0x360], 1
jmp 0x1002309d
and dword [ebp - 0x360], 0
push 0
lea ecx, [ebp - 0x6ac]
call fcn.100182ab
mov eax, dword [eax]
mov dword [ebp - 0x368], eax
imul eax, dword [ebp - 0x368], 0xcd5f
test eax, eax
je 0x100230d3
push 0xfffffffffffffffd
pop eax
test eax, eax
je 0x100230d3
mov dword [ebp - 0x370], 1
jmp 0x100230da
and dword [ebp - 0x370], 0
push 3
lea ecx, [ebp - 0x71c]
call fcn.100182ab
mov ecx, dword [ebp - 0x370]
cmp ecx, dword [eax]
jne 0x100230fd
mov dword [ebp - 0x378], 1
jmp 0x10023104
and dword [ebp - 0x378], 0
mov eax, dword [ebp - 0x378]
mov dword [ebp - 0x63c], eax
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x794]
call fcn.100182a6
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x71c]
call fcn.100182a6
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x6ac]
call fcn.100182a6
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0x258]
inc eax
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0x44], 2
mov dword [ebp - 0x4c], 0x3fe6
mov dword [ebp - 0x670], 0
mov dword [ebp - 0x3b0], 0xbfad0d72
mov dword [ebp - 0x2a8], 0x22d800f4
mov dword [ebp - 0x3a8], 8
mov dword [ebp - 0x44], 0xfffffffe
jmp 0x10023195
mov eax, dword [ebp - 0x44]
dec eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0xfffffff6
jle 0x100231cb
mov dword [ebp - 0x668], 0xd45db34e
mov dword [ebp - 0x5f8], 0xffffffff
mov dword [ebp - 0x668], 0xffff4f1c
lea eax, [ebp - 0x5f8]
push eax
push 1
call fcn.1001ee6b
pop ecx
pop ecx
jmp 0x1002318e
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x988], eax
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x44], eax
jl 0x100231e8
mov dword [ebp - 0x380], 1
jmp 0x100231ef
and dword [ebp - 0x380], 0
mov eax, dword [ebp - 0x4c]
imul eax, dword [ebp - 0x380]
cmp eax, dword [ebp - 0x44]
jl 0x1002320a
mov dword [ebp - 0x388], 1
jmp 0x10023211
and dword [ebp - 0x388], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x388], eax
jg 0x10023228
mov dword [ebp - 0x390], 1
jmp 0x1002322f
and dword [ebp - 0x390], 0
cmp dword [ebp - 0x390], 0xe30f5872
jb 0x10023247
mov dword [ebp - 0x398], 1
jmp 0x1002324e
and dword [ebp - 0x398], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x398], eax
je 0x10023284
mov dword [ebp - 0x6c4], 0xfffffff6
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x990], eax
mov eax, dword [ebp - 0x6c4]
mov dword [ebp - 0x97c], eax
mov dword [ebp - 0x44], 0
jmp 0x100233e8
push 2
lea ecx, [ebp - 0x6f8]
call fcn.10018221
mov byte [ebp - 4], 0x14
mov dword [ebp - 0x600], 0xefb659ba
mov dword [ebp - 0x3b8], 0x9a75015e
mov dword [ebp - 0x608], 0xfffffff6
lea eax, [ebp - 0x6f8]
push eax
push 0x1ef6
push 0x519b
push 0x587f
lea eax, [ebp - 0x938]
push eax
push 1
push 0x4550
call fcn.1001eea6
add esp, 0x1c
mov dword [ebp - 0x4c], 1
jmp 0x100232ef
mov eax, dword [ebp - 0x4c]
dec eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jl 0x100233d9
push 3
lea ecx, [ebp - 0x7ac]
call fcn.10018221
mov byte [ebp - 4], 0x15
mov dword [ebp - 0x6cc], 0xfffffffd
lea eax, [ebp - 0x7ac]
push eax
push 0x1992
lea eax, [ebp - 0x8ec]
push eax
push 1
call fcn.1001f120
add esp, 0x10
push 0x4e07
lea eax, [ebp - 0x6f8]
push eax
lea eax, [ebp - 0x600]
push eax
lea eax, [ebp - 0x3b8]
push eax
push 0x253e
push 1
lea eax, [ebp - 0x670]
push eax
lea eax, [ebp - 0x3a8]
push eax
lea eax, [ebp - 0x3b0]
push eax
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x2a8]
push eax
lea eax, [ebp - 0x4c]
push eax
call fcn.1001f194
add esp, 0x30
lea eax, [ebp - 0x608]
push eax
push 1
lea eax, [ebp - 0x6f8]
push eax
lea eax, [ebp - 0x2a8]
push eax
lea eax, [ebp - 0x3a8]
push eax
lea eax, [ebp - 0x3b0]
push eax
lea eax, [ebp - 0x3b8]
push eax
lea eax, [ebp - 0x7ac]
push eax
push 0x16ae
lea eax, [ebp - 0x6cc]
push eax
call fcn.1001f322
add esp, 0x28
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x7ac]
call fcn.100182a6
jmp 0x100232e8
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x6f8]
call fcn.100182a6
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0x258]
mov ecx, dword [ebp - 0x18]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x610], 0x2dd78f4f
mov dword [ebp - 0x10c], 0
jmp 0x10023427
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 2
jge 0x10023443
mov eax, dword [ebp - 0x10c]
mov dword [ebp + eax*4 - 0x8b4], 8
jmp 0x1002341a
mov dword [ebp - 0x80], 0
jmp 0x10023453
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 1
jg 0x100234e5
mov dword [ebp - 0x3c0], 0x9a924c00
mov eax, dword [ebp - 0x3c0]
mov dword [ebp - 0x850], eax
cmp dword [ebp - 0x80], 0
je 0x100234c2
cmp dword [ebp - 0x80], 0
jne 0x10023491
cmp dword [ebp - 0x3c0], 0
jne 0x10023491
and dword [ebp - 0x3c8], 0
jmp 0x1002349b
mov dword [ebp - 0x3c8], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x8b4]
cmp dword [ebp - 0x3c8], eax
jge 0x100234c2
cmp dword [ebp - 0x80], 0
je 0x100234c2
mov dword [ebp - 0x3d0], 1
jmp 0x100234c9
and dword [ebp - 0x3d0], 0
mov eax, dword [ebp - 0x3d0]
sub eax, 0x23acc922
imul eax, eax, 0xfc3
mov dword [ebp - 0x610], eax
jmp 0x1002344c
push 0x196
push 1
push 0x2c39
call fcn.1001f42d
add esp, 0xc
jmp 0x10022d4d
mov dword [ebp - 0xd4], 0x99841b3c
mov dword [ebp - 0x678], 0x9d58
mov dword [ebp - 0xd4], 0x13
jmp 0x1002352b
mov eax, dword [ebp - 0xd4]
dec eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0x10
jl 0x10023570
mov dword [ebp - 0x618], 0x102d149f
mov dword [ebp - 0x6c8], 8
lea eax, [ebp - 0x678]
push eax
lea eax, [ebp - 0x618]
push eax
lea eax, [ebp - 0xd4]
push eax
push 1
lea eax, [ebp - 0x6c8]
push eax
call fcn.1001f4a2
add esp, 0x14
jmp 0x1002351e
mov byte [ebp - 0x9d], 0
push 0x79e2
push 0x1c2d
push 1
lea eax, [ebp - 0x9d]
push eax
call fcn.1001f5e5
add esp, 0x10
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0x257]
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0xdc]
movzx ecx, byte [ebp + ecx - 0x25a]
movzx ecx, word [ebp + ecx*2 - 0x840]
add eax, ecx
mov ecx, dword [ebp - 0x18]
movzx ecx, byte [ebp + ecx - 0x257]
mov edx, dword [ebp - 0x18]
sub edx, dword [ebp - 0xdc]
movzx edx, byte [ebp + edx - 0x25a]
movzx edx, word [ebp + edx*2 - 0x840]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x18]
movzx ecx, byte [ebp + ecx - 0x257]
mov edx, dword [ebp - 0x18]
sub edx, dword [ebp - 0xdc]
movzx edx, byte [ebp + edx - 0x25a]
movzx edx, word [ebp + edx*2 - 0x840]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x18]
movzx ecx, byte [ebp + ecx - 0x258]
mov word [ebp + ecx*2 - 0x840], ax
mov dword [ebp - 0x950], 0x6318
mov dword [ebp - 0x858], 0xda439beb
mov dword [ebp - 0x8fc], 5
mov dword [ebp - 0x860], 9
mov dword [ebp - 0x984], 0xfffffff6
mov dword [ebp - 0x868], 0xffffffff
mov dword [ebp - 0x90c], 0x921ded68
mov dword [ebp - 0x870], 0xffffffff
mov dword [ebp - 0x964], 0xe4d9edbd
mov dword [ebp - 0x878], 0x7e4a9061
mov dword [ebp - 0x620], 0xc7c44d99
mov dword [ebp - 0x114], 0
jmp 0x100236a2
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 3
jge 0x100236be
mov eax, dword [ebp - 0x114]
mov dword [ebp + eax*4 - 0xa20], 0xfffffffb
jmp 0x10023695
push 1
lea eax, [ebp - 0x620]
push eax
call fcn.1001f64e
pop ecx
pop ecx
push 1
push 0x11e9
lea eax, [ebp - 0xdc]
push eax
push 0x6ea
call fcn.1001f683
add esp, 0x10
jmp 0x10022d4d
push 2
lea ecx, [ebp - 0x710]
call fcn.10018221
mov byte [ebp - 4], 0x16
mov dword [ebp - 0xac], 0xffffffff
mov dword [ebp - 0x6c0], 0
mov dword [ebp - 0x680], 0xa44198d7
mov dword [ebp - 0x628], 0xfffffffd
lea eax, [ebp - 0x710]
push eax
push 0
lea eax, [ebp - 0x91c]
push eax
call fcn.1001f867
add esp, 0xc
mov dword [ebp - 0xac], 1
jmp 0x10023758
mov eax, dword [ebp - 0xac]
dec eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0
jl 0x100237ab
mov byte [ebp - 0x81], 0
movzx eax, byte [ebp - 0x81]
test eax, eax
je 0x10023791
push 0x2359
push 0x38c
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetPixel]
push dword [ebp - 0xac]
lea ecx, [ebp - 0x710]
call fcn.100182ab
cmp dword [eax], 0
je 0x100237a9
jmp 0x1002374b
jmp 0x1002374b
push 0x7233
push 1
lea eax, [ebp - 0x680]
push eax
lea eax, [ebp - 0x710]
push eax
lea eax, [ebp - 0x628]
push eax
lea eax, [ebp - 0x6c0]
push eax
lea eax, [ebp - 0xac]
push eax
call fcn.1001f6f4
add esp, 0x1c
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x710]
call fcn.100182a6
push 2
pop eax
imul eax, eax, 0xc
xor ecx, ecx
mov word [ebp + eax - 0x840], cx
mov dword [ebp - 0x88], 0xf0ea75c9
mov dword [ebp - 0x400], 0xfffffffe
mov dword [ebp - 0x630], 0xffffffff
mov dword [ebp - 0x88], 0
jmp 0x10023833
mov eax, dword [ebp - 0x88]
dec eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0xffffffef
jg 0x10023976
mov dword [ebp - 0x11c], 0xffffffff
mov dword [ebp - 0x11c], 0xc
jmp 0x10023863
mov eax, dword [ebp - 0x11c]
dec eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0xfffffff3
jge 0x10023945
mov dword [ebp - 0x3d8], 0x21f1eb32
mov dword [ebp - 0x124], 0xfffffffa
mov eax, dword [ebp - 0x124]
cmp dword [ebp - 0x124], eax
je 0x1002389e
mov dword [ebp - 0x3e0], 1
jmp 0x100238a5
and dword [ebp - 0x3e0], 0
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x3d8], eax
mov eax, dword [ebp - 0x3d8]
add eax, dword [ebp - 0x124]
cmp eax, dword [ebp - 0x3e0]
jl 0x100238d1
mov dword [ebp - 0x3f0], 1
jmp 0x100238d8
and dword [ebp - 0x3f0], 0
imul eax, dword [ebp - 0x124], 0x70ab
cmp eax, dword [ebp - 0x88]
jg 0x100238fc
cmp dword [ebp - 0x88], 0
jne 0x100238fc
and dword [ebp - 0x3e8], 0
jmp 0x10023906
mov dword [ebp - 0x3e8], 1
cmp dword [ebp - 0x3e8], 0
jle 0x1002391b
mov dword [ebp - 0x3f8], 1
jmp 0x10023922
and dword [ebp - 0x3f8], 0
mov eax, dword [ebp - 0x3f0]
sub eax, dword [ebp - 0x3f8]
mov dword [ebp - 0x400], eax
mov eax, dword [ebp - 0x400]
mov dword [ebp - 0x630], eax
jmp 0x10023856
mov byte [ebp - 0x9a], 0
lea eax, [ebp - 0x9a]
push eax
push 0x7629
push 0
push 0x6268
push 0x2990
push 0x4a62
call fcn.1001fab5
add esp, 0x18
jmp 0x10023826
lea eax, [ebp - 0x840]
push eax
lea ecx, [ebp - 0xa14]
call fcn.10026917
mov dword [ebp - 0x688], eax
mov eax, dword [ebp - 0x688]
mov dword [ebp - 0x638], eax
mov byte [ebp - 4], 0x17
push dword [ebp - 0x638]
call fcn.1001c53e
pop ecx
mov dword [ebp - 0x468], eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xa14]
call fcn.1001805b
push 0x4a17
push 1
push 0xc36
call fcn.1001f867
add esp, 0xc
and dword [ebp - 0x144], 0
jmp 0x100239e9
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 0xd
jae 0x10023cf1
mov dword [ebp - 0x60], 0x6dd1e1e8
mov dword [ebp - 0x134], 0xfc3eee2f
mov dword [ebp - 0x12c], 0xf7d65121
mov dword [ebp - 0xf4], 0xffffffff
mov dword [ebp - 0xbc], 0xde57413
mov dword [ebp - 0x50], 0
jmp 0x10023a35
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 3
jge 0x10023a4b
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x9a8], 0x8cff
jmp 0x10023a2e
mov dword [ebp - 0x50], 0
jmp 0x10023a5b
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 2
jge 0x10023a71
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x72c], 6
jmp 0x10023a54
mov dword [ebp - 0x60], 0
jmp 0x10023a81
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 3
jge 0x10023a97
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x9a8], 8
jmp 0x10023a7a
mov dword [ebp - 0x60], 3
jmp 0x10023aa7
mov eax, dword [ebp - 0x60]
dec eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0xfffffff2
jle 0x10023cdc
mov dword [ebp - 0x768], 0x1f1eb32a
mov dword [ebp - 0x764], 0x1f1eb32a
mov dword [ebp - 0x760], 0x1f1eb32a
mov dword [ebp - 0x75c], 0x1f1eb32a
lea ecx, [ebp - 0x261]
call fcn.10008e33
push eax
lea eax, [ebp - 0x758]
push eax
lea eax, [ebp - 0x768]
push eax
lea ecx, [ebp - 0x9fc]
call fcn.100182ba
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x9b4]
call fcn.10018280
mov byte [ebp - 4], 0x18
mov dword [ebp - 0x6d0], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x72c]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x72c], eax
mov dword [ebp - 0x12c], 0
jmp 0x10023b50
mov eax, dword [ebp - 0x12c]
dec eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0xffffffe2
jne 0x10023cc8
mov dword [ebp - 0xf4], 0xfffffff3
jmp 0x10023b76
mov eax, dword [ebp - 0xf4]
dec eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0xffffffe9
je 0x10023ca1
mov dword [ebp - 0x134], 0
jmp 0x10023b9c
mov eax, dword [ebp - 0x134]
dec eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0xffffffef
jl 0x10023c9c
push 2
lea ecx, [ebp - 0x7c4]
call fcn.10018221
mov byte [ebp - 4], 0x19
mov dword [ebp - 0xe4], 0xfffffff7
mov dword [ebp - 0x13c], 0
jmp 0x10023bdd
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 2
jge 0x10023bff
push dword [ebp - 0x13c]
lea ecx, [ebp - 0x7c4]
call fcn.100182ab
mov dword [eax], 5
jmp 0x10023bd0
lea eax, [ebp - 0xe4]
push eax
lea eax, [ebp - 0xbc]
push eax
push 1
lea eax, [ebp - 0x7c4]
push eax
call fcn.1001f99c
add esp, 0x10
mov dword [ebp - 0xe4], 0
jmp 0x10023c37
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0x12
je 0x10023c88
mov dword [ebp - 0xbc], 0
jmp 0x10023c59
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 1
jg 0x10023c86
mov byte [ebp - 0x89], 0
push 1
push 0x1151
push 0x55f4
lea eax, [ebp - 0x89]
push eax
call fcn.1001fa2e
add esp, 0x10
jmp 0x10023c4c
jmp 0x10023c2a
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x7c4]
call fcn.100182a6
jmp 0x10023b8f
jmp 0x10023b69
push 0
push 0x6086
lea eax, [ebp - 0x6d0]
push eax
push 0x28a4
lea eax, [ebp - 0xbc]
push eax
call fcn.1001fec1
add esp, 0x14
jmp 0x10023b43
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x9b4]
call fcn.100182a6
jmp 0x10023aa0
xor eax, eax
mov ecx, dword [ebp - 0x144]
mov word [ebp + ecx*2 - 0x840], ax
jmp 0x100239dc
push 3
lea ecx, [ebp - 0x6ec]
call fcn.10018221
mov byte [ebp - 4], 0x1a
mov dword [ebp - 0xb4], 0x7df2f4a8
push 3
lea ecx, [ebp - 0x7dc]
call fcn.10018221
mov byte [ebp - 4], 0x1b
mov dword [ebp - 0x640], 0x9e149cff
mov dword [ebp - 0x5c], 0
jmp 0x10023d37
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 3
jge 0x10023d53
push dword [ebp - 0x5c]
lea ecx, [ebp - 0x6ec]
call fcn.100182ab
mov dword [eax], 0xff0ea75c
jmp 0x10023d30
mov dword [ebp - 0x5c], 0
jmp 0x10023d63
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 3
jge 0x10023d7f
push dword [ebp - 0x5c]
lea ecx, [ebp - 0x7dc]
call fcn.100182ab
mov dword [eax], 0x4b2e809b
jmp 0x10023d5c
mov dword [ebp - 0xb4], 0
jmp 0x10023d98
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 2
jg 0x10023df0
lea eax, [ebp - 0xb4]
push eax
push 0x6349
push 0
lea eax, [ebp - 0x6ec]
push eax
push 0x3e3d
call fcn.100201b1
add esp, 0x14
push 0x6f05
lea eax, [ebp - 0xb4]
push eax
push 1
lea eax, [ebp - 0x7dc]
push eax
lea eax, [ebp - 0x6ec]
push eax
lea eax, [ebp - 0x640]
push eax
call fcn.1001fab5
add esp, 0x18
jmp 0x10023d8b
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x7dc]
call fcn.100182a6
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x6ec]
call fcn.100182a6
cmp dword [ebp - 0x468], 0
je 0x100247ea
mov dword [ebp - 0xa8], 0xe1757117
mov dword [ebp - 0x40], 0xfffffffb
mov dword [ebp - 0x164], 0x37ad4351
push 4
lea ecx, [ebp - 0x4fc]
call fcn.10018221
mov byte [ebp - 4], 0x1c
mov dword [ebp - 0x14c], 0
jmp 0x10023e60
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 4
jge 0x10023e82
push dword [ebp - 0x14c]
lea ecx, [ebp - 0x4fc]
call fcn.100182ab
mov dword [eax], 0xfffffffb
jmp 0x10023e53
mov dword [ebp - 0xa8], 0
jmp 0x10023e9b
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0x1a
jge 0x10024339
mov dword [ebp - 0x16c], 4
mov dword [ebp - 0x90], 0xfffffffe
mov dword [ebp - 0x40], 0xfba1a4d6
mov eax, dword [ebp - 0x90]
add eax, dword [ebp - 0x40]
mov dword [ebp - 0x690], eax
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x690], 0
je 0x10024046
mov dword [ebp - 0x154], 8
cmp dword [ebp - 0x154], 0
jle 0x10023f0b
mov dword [ebp - 0x410], 1
jmp 0x10023f12
and dword [ebp - 0x410], 0
mov eax, dword [ebp - 0x154]
mov dword [ebp - 0x880], eax
cmp dword [ebp - 0x154], 0x4495231f
jg 0x10023f36
mov dword [ebp - 0x408], 1
jmp 0x10023f3d
and dword [ebp - 0x408], 0
push 1
lea ecx, [ebp - 0x4fc]
call fcn.100182ab
mov ecx, dword [ebp - 0x408]
cmp ecx, dword [eax]
jge 0x10023f60
mov dword [ebp - 0x648], 1
jmp 0x10023f67
and dword [ebp - 0x648], 0
cmp dword [ebp - 0x410], 0x1cb2
jle 0x10023f7f
mov dword [ebp - 0x418], 1
jmp 0x10023f86
and dword [ebp - 0x418], 0
cmp dword [ebp - 0x418], 0xffff
jb 0x10023f9e
mov dword [ebp - 0x6b4], 1
jmp 0x10023fa5
and dword [ebp - 0x6b4], 0
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0x930], eax
cmp dword [ebp - 0x154], 0
je 0x10023ff3
mov dword [ebp - 0x650], 0xffff
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x420], eax
push 0
lea ecx, [ebp - 0x4fc]
call fcn.100182ab
mov ecx, dword [ebp - 0x420]
mov dword [eax], ecx
mov eax, dword [ebp - 0x420]
mov dword [ebp - 0x650], eax
jmp 0x10024041
mov byte [ebp - 0x9c], 0
movzx eax, byte [ebp - 0x9c]
test eax, eax
je 0x10024041
push 0x6d09
push 0x5874
push 0x5b37
push 1
push 0x5fbe
push 0x552c
push 0x6d3
push 0x650c
push 0x740
push 0x3118
push 0x419c
call fcn.1001fcc8
add esp, 0x2c
jmp 0x100242fa
mov dword [ebp - 0x288], 0
push 4
lea ecx, [ebp - 0x534]
call fcn.10018221
mov byte [ebp - 4], 0x1d
mov dword [ebp - 0x57c], 1
mov dword [ebp - 0x15c], 0
jmp 0x10024084
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 4
jge 0x100240a6
push dword [ebp - 0x15c]
lea ecx, [ebp - 0x534]
call fcn.100182ab
mov dword [eax], 0x5d518144
jmp 0x10024077
cmp dword [ebp - 0x40], 0
je 0x100240c0
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x534]
call fcn.100182a6
jmp 0x10024339
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0x888], eax
push 3
lea ecx, [ebp - 0x534]
call fcn.100182ab
imul ecx, dword [ebp - 0x164], 0xfffffffc
cmp dword [eax], ecx
jg 0x100240f0
mov dword [ebp - 0x280], 1
jmp 0x100240f7
and dword [ebp - 0x280], 0
push 2
lea ecx, [ebp - 0x534]
call fcn.100182ab
mov ecx, dword [ebp - 0x280]
mov dword [eax], ecx
cmp dword [ebp - 0x280], 4
jae 0x10024121
mov dword [ebp - 0x574], 1
jmp 0x10024128
and dword [ebp - 0x574], 0
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x92c], eax
push 2
lea ecx, [ebp - 0x534]
call fcn.100182ab
mov eax, dword [eax]
mov dword [ebp - 0x16c], eax
mov eax, dword [ebp - 0x16c]
add eax, 7
imul eax, eax, 0xfffd
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 0
jne 0x10024182
push 2
lea ecx, [ebp - 0x534]
call fcn.100182ab
cmp dword [eax], 0
jne 0x10024182
and dword [ebp - 0x428], 0
jmp 0x1002418c
mov dword [ebp - 0x428], 1
push 1
lea ecx, [ebp - 0x4fc]
call fcn.100182ab
mov eax, dword [eax]
cmp eax, dword [ebp - 0x428]
jne 0x100241af
mov dword [ebp - 0x430], 1
jmp 0x100241b6
and dword [ebp - 0x430], 0
mov eax, dword [ebp - 0xa8]
cmp dword [ebp - 0x430], eax
jne 0x100241d9
cmp dword [ebp - 0x16c], 0
je 0x100241d9
mov dword [ebp - 0x438], 1
jmp 0x100241e0
and dword [ebp - 0x438], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x438], eax
jge 0x100241f7
mov dword [ebp - 0x440], 1
jmp 0x100241fe
and dword [ebp - 0x440], 0
mov eax, dword [ebp - 0x57c]
imul eax, dword [ebp - 0x440]
test eax, eax
jne 0x10024221
mov eax, 0xb1b57606
test eax, eax
jne 0x10024221
and dword [ebp - 0x448], 0
jmp 0x1002422b
mov dword [ebp - 0x448], 1
push 1
lea ecx, [ebp - 0x4fc]
call fcn.100182ab
mov ecx, dword [ebp - 0x448]
sub ecx, dword [eax]
cmp ecx, dword [ebp - 0xa8]
jge 0x1002425a
mov eax, 0xfbc9
test eax, eax
jne 0x1002425a
and dword [ebp - 0x450], 0
jmp 0x10024264
mov dword [ebp - 0x450], 1
mov eax, dword [ebp - 0x288]
mov dword [ebp - 0x584], eax
mov eax, dword [ebp - 0x450]
mov dword [ebp - 0x58c], eax
mov eax, dword [ebp - 0x288]
inc eax
mov dword [ebp - 0x288], eax
mov eax, dword [ebp - 0x584]
cmp eax, dword [ebp - 0x58c]
jl 0x100242a3
mov dword [ebp - 0x458], 1
jmp 0x100242aa
and dword [ebp - 0x458], 0
mov eax, dword [ebp - 0x90]
cmp dword [ebp - 0x458], eax
jge 0x100242c4
mov dword [ebp - 0x460], 1
jmp 0x100242cb
and dword [ebp - 0x460], 0
mov eax, dword [ebp - 0x460]
sub eax, 0x3a0aeb04
mov dword [ebp - 0x40], eax
mov esi, dword [ebp - 0x40]
push 3
lea ecx, [ebp - 0x4fc]
call fcn.100182ab
mov dword [eax], esi
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x534]
call fcn.100182a6
mov dword [ebp - 0x40], 0
jmp 0x1002430a
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 3
jg 0x10024334
push 1
lea eax, [ebp - 0x4fc]
push eax
push 0x1273
lea eax, [ebp - 0x90]
push eax
push 0xd41
call fcn.1001fec1
add esp, 0x14
jmp 0x10024303
jmp 0x10023e8e
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x4fc]
call fcn.100182a6
push 2
lea ecx, [ebp - 0x928]
call fcn.10018221
mov byte [ebp - 4], 0x1e
mov dword [ebp - 0x174], 0x490c4d8e
lea eax, [ebp - 0x928]
push eax
push 1
lea eax, [ebp - 0x890]
push eax
call fcn.1001ff51
add esp, 0xc
mov dword [ebp - 0x174], 0
jmp 0x10024394
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 1
jg 0x100243c5
mov byte [ebp - 0x91], 0
movzx eax, byte [ebp - 0x91]
test eax, eax
je 0x100243c3
push 0x3459
push 0x3226
push 1
call fcn.1001ffb8
add esp, 0xc
jmp 0x10024387
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x928]
call fcn.100182a6
mov byte [ebp - 0x1e4], 4
mov byte [ebp - 0x1e3], 0x14
mov byte [ebp - 0x1e2], 0xb
mov byte [ebp - 0x1e1], 0x1b
mov byte [ebp - 0x1e0], 5
mov byte [ebp - 0x1df], 0x3e
mov byte [ebp - 0x1de], 0xa
mov byte [ebp - 0x1dd], 0x10
mov byte [ebp - 0x1dc], 0
mov byte [ebp - 0x1db], 0x35
mov byte [ebp - 0x1da], 0x36
mov byte [ebp - 0x1d9], 0x9f
mov byte [ebp - 0x1d8], 0xb6
mov byte [ebp - 0x1d7], 0x69
mov byte [ebp - 0x1d6], 6
mov byte [ebp - 0x1d5], 1
mov byte [ebp - 0x1d4], 0xfe
mov byte [ebp - 0x1d3], 0x42
mov byte [ebp - 0x1d2], 0x69
mov byte [ebp - 0x1d1], 0x7e
mov byte [ebp - 0x1d0], 0xbf
mov byte [ebp - 0x1cf], 0xcd
mov byte [ebp - 0x1ce], 0x85
mov byte [ebp - 0x1cd], 0xef
mov byte [ebp - 0x1cc], 0x92
mov byte [ebp - 0x1cb], 0x83
mov byte [ebp - 0x1ca], 0xdd
mov byte [ebp - 0x1c9], 0x4e
mov byte [ebp - 0x1c8], 0xbd
mov byte [ebp - 0x1c7], 0x51
mov byte [ebp - 0x1c6], 0x43
mov byte [ebp - 0x1c5], 0xa4
mov byte [ebp - 0x1c4], 0xdc
mov byte [ebp - 0x1c3], 0xd3
mov byte [ebp - 0x1c2], 0x29
mov byte [ebp - 0x1c1], 0xe3
mov byte [ebp - 0x1c0], 8
mov byte [ebp - 0x1bf], 0xd4
mov byte [ebp - 0x1be], 0xd8
mov byte [ebp - 0x1bd], 0x91
mov byte [ebp - 0x1bc], 0xce
mov byte [ebp - 0x1bb], 0x8f
mov byte [ebp - 0x1ba], 0x9d
mov byte [ebp - 0x1b9], 0x16
mov byte [ebp - 0x1b8], 0xd2
mov byte [ebp - 0x1b7], 0x3b
mov byte [ebp - 0x1b6], 0xb3
mov byte [ebp - 0x1b5], 0x3d
mov byte [ebp - 0x1b4], 0x66
mov byte [ebp - 0x1b3], 0x7c
mov byte [ebp - 0x1b2], 0x9a
mov byte [ebp - 0x1b1], 0x19
mov byte [ebp - 0x1b0], 0x71
mov byte [ebp - 0x1af], 0x10
mov byte [ebp - 0x1ae], 0xf
mov byte [ebp - 0x1ad], 0x56
mov byte [ebp - 0x1ac], 0xfd
mov byte [ebp - 0x1ab], 0x65
mov byte [ebp - 0x1aa], 0xcf
mov byte [ebp - 0x1a9], 0x44
mov byte [ebp - 0x1a8], 0x32
mov byte [ebp - 0x1a7], 8
mov byte [ebp - 0x1a6], 0x7c
mov byte [ebp - 0x1a5], 0x14
mov byte [ebp - 0x1a4], 0xa5
mov byte [ebp - 0x1a3], 7
mov byte [ebp - 0x1a2], 0x3e
mov byte [ebp - 0x1a1], 9
mov byte [ebp - 0x1a0], 0
mov byte [ebp - 0x19f], 1
mov byte [ebp - 0x19e], 0x1d
mov byte [ebp - 0x19d], 8
mov byte [ebp - 0x19c], 0xe
mov byte [ebp - 0x19b], 2
mov byte [ebp - 0x19a], 0
mov byte [ebp - 0x199], 3
mov byte [ebp - 0x198], 5
mov byte [ebp - 0x197], 6
mov byte [ebp - 0x196], 6
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x1e4]
or eax, 0x58
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x1e4]
and ecx, 0x58
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x1e4]
mov byte [ebp + ecx - 0x544], al
mov dword [ebp - 0x1c], 2
and dword [ebp - 0xec], 0
jmp 0x1002464e
mov eax, dword [ebp - 0x1c]
inc eax
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x4f
jae 0x1002473b
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x1e4]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x1c], eax
jne 0x10024698
mov eax, dword [ebp - 0x1c]
movzx eax, byte [ebp + eax - 0x1e4]
inc eax
mov dword [ebp - 0xec], eax
mov eax, dword [ebp - 0x1c]
movzx eax, byte [ebp + eax - 0x1e4]
mov ecx, dword [ebp - 0x1c]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x1c], eax
jmp 0x10024646
mov eax, dword [ebp - 0x1c]
movzx eax, byte [ebp + eax - 0x1e3]
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0xec]
movzx ecx, byte [ebp + ecx - 0x1e6]
movsx ecx, byte [ebp + ecx - 0x544]
add eax, ecx
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ebp + ecx - 0x1e3]
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xec]
movzx edx, byte [ebp + edx - 0x1e6]
movsx edx, byte [ebp + edx - 0x544]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ebp + ecx - 0x1e3]
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xec]
movzx edx, byte [ebp + edx - 0x1e6]
movsx edx, byte [ebp + edx - 0x544]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ebp + ecx - 0x1e4]
mov byte [ebp + ecx - 0x544], al
lea eax, [ebp - 0xec]
push eax
push 1
push 0x2b05
call fcn.10020021
add esp, 0xc
jmp 0x10024646
xor eax, eax
inc eax
imul eax, eax, 0xc
mov byte [ebp + eax - 0x544], 0
mov dword [ebp - 0x934], 7
push 0xe3e
push 1
push 0x32
call fcn.1002006f
add esp, 0xc
mov byte [ebp - 0x6a], 0
movzx eax, byte [ebp - 0x6a]
test eax, eax
je 0x10024778
push 1
call fcn.100200dd
pop ecx
lea eax, [ebp - 0x544]
push eax
lea ecx, [ebp - 0x9d4]
call fcn.10026947
mov byte [ebp - 4], 0x1f
and dword [ebp - 0x17c], 0
jmp 0x100247a4
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 0xd
jae 0x100247bd
mov eax, dword [ebp - 0x17c]
mov byte [ebp + eax - 0x544], 0
jmp 0x10024797
push 0
push 0
lea eax, [ebp - 0x9d4]
push eax
push dword [ebp - 0x468]
call fcn.100256a9
add esp, 0x10
mov dword [0x11187dfc], eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x9d4]
call fcn.10018183
push 3
lea ecx, [ebp - 0x7b8]
call fcn.10018221
mov byte [ebp - 4], 0x20
mov dword [ebp - 0x5ac], 0
push 4
lea ecx, [ebp - 0x7e8]
call fcn.10018221
mov byte [ebp - 4], 0x21
push 2
lea ecx, [ebp - 0x7a0]
call fcn.10018221
mov byte [ebp - 4], 0x22
mov dword [ebp - 0x59c], 0xc105
mov dword [ebp - 0x5a4], 1
mov dword [ebp - 0x594], 5
mov dword [ebp - 0xb0], 0
jmp 0x1002485e
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 3
jge 0x10024880
push dword [ebp - 0xb0]
lea ecx, [ebp - 0x7b8]
call fcn.100182ab
mov dword [eax], 1
jmp 0x10024851
lea eax, [ebp - 0x7e8]
push eax
lea eax, [ebp - 0xb0]
push eax
push 0x9ab
push 1
push 0x5023
call fcn.1002010a
add esp, 0x14
push 0x314c
lea eax, [ebp - 0x7a0]
push eax
push 1
push 0x58e2
lea eax, [ebp - 0xb0]
push eax
call fcn.100201b1
add esp, 0x14
push 0x109d
push 0x751b
push 0x5e8f
push 0x705
lea eax, [ebp - 0x594]
push eax
push 0x3f0f
push 0x3afd
lea eax, [ebp - 0x59c]
push eax
push 1
push 0x2140
lea eax, [ebp - 0x7a0]
push eax
lea eax, [ebp - 0x5a4]
push eax
push 0x6219
push 0x229f
lea eax, [ebp - 0x7e8]
push eax
lea eax, [ebp - 0x5ac]
push eax
lea eax, [ebp - 0x7b8]
push eax
push 0x3aa1
call fcn.1002024a
add esp, 0x48
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x7a0]
call fcn.100182a6
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x7e8]
call fcn.100182a6
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x7b8]
call fcn.100182a6
cmp dword [0x11187dfc], 0
je 0x1002497c
mov ecx, dword [ebp + 8]
call fcn.1002693c
push eax
call dword [0x11187dfc]
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x5c4], 0x9f23e525
mov dword [ebp - 0x5cc], 0xfffffffa
mov dword [ebp - 0x184], 0
jmp 0x100249b3
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 4
jge 0x100249cf
mov eax, dword [ebp - 0x184]
mov dword [ebp + eax*4 - 0x960], 0x8eb98764
jmp 0x100249a6
mov byte [ebp - 0x6c], 0
movzx eax, byte [ebp - 0x6c]
test eax, eax
je 0x100249f4
push 0x2486
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x898], eax
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x93c], eax
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x8a0], eax
cmp dword [ebp - 0x98], 0xffffffff
jne 0x10024a2d
mov dword [ebp - 0x5b4], 1
jmp 0x10024a34
and dword [ebp - 0x5b4], 0
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x5bc], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x5bc]
mov dword [ebp + eax - 0x960], ecx
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x960], 9
jg 0x10024a6f
mov dword [ebp - 0x470], 1
jmp 0x10024a76
and dword [ebp - 0x470], 0
mov eax, dword [ebp - 0x98]
cmp dword [ebp - 0x470], eax
jge 0x10024a90
mov dword [ebp - 0x478], 1
jmp 0x10024a97
and dword [ebp - 0x478], 0
mov eax, dword [ebp - 0x98]
cmp dword [ebp - 0x478], eax
jle 0x10024abe
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x960], 0
jne 0x10024abe
and dword [ebp - 0x480], 0
jmp 0x10024ac8
mov dword [ebp - 0x480], 1
mov eax, dword [ebp - 0x480]
add eax, 0x5157
mov dword [ebp - 0x5c4], eax
mov dword [ebp - 0x5cc], 0x56974edf
cmp dword [ebp - 0xc0], 0
je 0x10024b35
movzx eax, byte [0x11187df1]
test eax, eax
je 0x10024b08
mov ecx, 0x11187ec0
call fcn.100269c5
movzx eax, al
test eax, eax
jne 0x10024b35
lea eax, [ebp - 0x488]
push eax
mov ecx, 0x11187ec0
call fcn.10026987
mov ecx, dword [ebp - 0xc0]
mov dword [eax], ecx
push 1
push 0x11187df1
push 0x70b5
call fcn.1002060e
add esp, 0xc
push 2
lea ecx, [ebp - 0x788]
call fcn.10018221
mov byte [ebp - 4], 0x23
mov dword [ebp - 0x194], 0x57976326
mov dword [ebp - 0xe8], 0xf1a0
mov dword [ebp - 0x18c], 0
jmp 0x10024b73
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 2
jge 0x10024b95
push dword [ebp - 0x18c]
lea ecx, [ebp - 0x788]
call fcn.100182ab
mov dword [eax], 7
jmp 0x10024b66
mov dword [ebp - 0x194], 1
jmp 0x10024bae
mov eax, dword [ebp - 0x194]
dec eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 0
jl 0x10024ce2
mov dword [ebp - 0x100], 0
jmp 0x10024bd4
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 1
jge 0x10024bf0
mov eax, dword [ebp - 0x100]
mov dword [ebp + eax*4 - 0xb8], 8
jmp 0x10024bc7
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xb8], 0
jmp 0x10024c1e
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb8]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xb8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xb8], 1
jg 0x10024cdd
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0xb8]
lea ecx, [ebp - 0x788]
call fcn.100182ab
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0xb8]
cmp dword [eax], ecx
jl 0x10024c67
mov dword [ebp - 0x490], 1
jmp 0x10024c6e
and dword [ebp - 0x490], 0
mov eax, dword [ebp - 0x490]
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0xe8], 0xffffffee
jmp 0x10024c93
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0x24
jne 0x10024cd8
mov byte [ebp - 0x6e], 0
movzx eax, byte [ebp - 0x6e]
test eax, eax
je 0x10024cbf
push 0x181c
push 0
push 0xf16
push 0x1be0
call dword [sym.imp.USER32.dll_SystemParametersInfoA]
mov byte [ebp - 0x70], 0
push 0
push 0x48ea
lea eax, [ebp - 0x70]
push eax
call fcn.10024e2c
add esp, 0xc
jmp 0x10024c86
jmp 0x10024c03
jmp 0x10024ba1
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x788]
call fcn.100182a6
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0x5d4], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x800]
call fcn.1001805b
mov eax, dword [ebp - 0x5d4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret