Function at 0x100155d2
Capabilities:
Allocate thread local storage
Delete registry key

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1008a491
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x2b8
push esi
movzx eax, byte [ebp + 0x10]
test eax, eax
je 0x10015886
lea eax, [ebp + 8]
mov dword [ebp - 0x1bc], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x190], eax
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 0x154], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x134], eax
mov eax, dword [ebp - 0x1bc]
movzx eax, byte [eax]
test eax, eax
je 0x10015784
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x124], eax
mov eax, dword [ebp - 0x154]
mov dword [ebp - 0x15c], eax
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x12c], eax
mov dword [ebp - 0x100], 0x3c6e
mov dword [ebp - 0x164], 0x10007cdc
cmp dword [ebp - 0x100], 0x3db6
jle 0x1001572d
and dword [ebp - 0x50], 0
jmp 0x10015690
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0x1a06
jge 0x1001572d
and dword [ebp - 0x60], 0
jmp 0x100156aa
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0x1ab7
jge 0x10015728
and dword [ebp - 0x48], 0
jmp 0x100156c0
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0x26e6
jge 0x10015723
and dword [ebp - 0xa0], 0
jmp 0x100156df
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0x1143
jge 0x10015721
mov eax, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x48]
sar eax, cl
xor eax, dword [ebp - 0xa0]
or eax, dword [ebp - 0x50]
cdq
mov dword [ebp - 0x188], eax
mov dword [ebp - 0x184], edx
push dword [ebp - 0x184]
push dword [ebp - 0x188]
mov ecx, 0x1008fbf8
call fcn.100229ff
jmp 0x100156d2
jmp 0x100156b9
jmp 0x100156a3
jmp 0x10015689
mov eax, dword [ebp - 0x24]
mov dword [eax], 0
jmp 0x10015743
mov eax, dword [ebp - 0x24]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x24]
mov dword [ecx], eax
mov eax, dword [ebp - 0x24]
cmp dword [eax], 4
jge 0x10015763
mov eax, dword [ebp - 0x24]
push dword [eax]
mov ecx, dword [ebp - 0x12c]
call fcn.10022db7
mov dword [eax], 0x2b57e8b7
jmp 0x10015738
cmp dword [ebp - 0x100], 0x3b20
jge 0x1001577f
mov edx, dword [ebp - 0x164]
mov ecx, 0x1008fbf8
call fcn.1002574f
jmp 0x10015881
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0xbc], 0x2b08
mov dword [ebp - 0x174], 0x10007d10
cmp dword [ebp - 0xbc], 0x2e27
jle 0x10015844
and dword [ebp - 0x80], 0
jmp 0x100157c1
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0x1e57
jge 0x10015836
and dword [ebp - 0x58], 0
jmp 0x100157d7
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0x65a4
jge 0x10015834
mov eax, dword [ebp - 0x80]
cdq
idiv dword [ebp - 0x58]
mov eax, edx
cdq
mov dword [ebp - 0x1a0], eax
mov dword [ebp - 0x19c], edx
push dword [ebp - 0x19c]
push dword [ebp - 0x1a0]
lea ecx, [ebp - 0x288]
call fcn.100128ee
pop ecx
pop ecx
mov dword [ebp - 0x16c], eax
mov ecx, dword [ebp - 0x16c]
call fcn.100229df
push eax
call fcn.10074e83
pop ecx
lea ecx, [ebp - 0x288]
call fcn.100229d5
jmp 0x100157d0
jmp 0x100157ba
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_SetWinMetaFileBits]
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0xbc], 0x28e8
jge 0x10015868
push dword [ebp - 0x174]
call fcn.10074e83
pop ecx
mov eax, dword [ebp - 0x17c]
movzx eax, byte [eax]
test eax, eax
je 0x10015881
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_SetWindowRgn]
jmp 0x1001651c
lea eax, [ebp + 0xc]
mov dword [ebp - 0x150], eax
lea eax, [ebp + 0x28]
mov dword [ebp - 0x194], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x1c8], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x158], eax
lea eax, [ebp + 0x14]
mov dword [ebp - 0x148], eax
mov eax, dword [ebp - 0x148]
movzx eax, byte [eax]
test eax, eax
je 0x100164ec
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0xe8], eax
mov eax, dword [ebp - 0x1c8]
mov dword [ebp - 0xf0], eax
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x138], eax
lea ecx, [ebp - 0x220]
call fcn.10022b3c
and dword [ebp - 4], 0
mov dword [ebp - 0x14], 1
push 4
lea ecx, [ebp - 0x114]
call fcn.10022d19
mov byte [ebp - 4], 1
mov dword [ebp - 0x104], 0xffffffff
mov dword [ebp - 0x118], 0x263b0a6d
mov dword [ebp - 0xec], 0xffffffff
mov dword [ebp - 0xb8], 0x284d
mov dword [ebp - 0x160], 0x10007d60
cmp dword [ebp - 0xb8], 0x2a9c
jle 0x10015a4b
and dword [ebp - 0x68], 0
jmp 0x1001596a
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0x6c31
jge 0x10015a45
and dword [ebp - 0x98], 0
jmp 0x1001598d
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0x6a11
jge 0x10015a40
and dword [ebp - 0x40], 0
jmp 0x100159aa
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0x4787
jge 0x10015a3b
and dword [ebp - 0x88], 0
jmp 0x100159cd
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0x6292
jge 0x10015a36
mov eax, dword [ebp - 0x98]
add eax, dword [ebp - 0x40]
add eax, dword [ebp - 0x88]
or eax, dword [ebp - 0x68]
cdq
mov dword [ebp - 0x1ac], eax
mov dword [ebp - 0x1a8], edx
push dword [ebp - 0x1a8]
push dword [ebp - 0x1ac]
lea ecx, [ebp - 0x258]
call fcn.100128ee
pop ecx
pop ecx
mov dword [ebp - 0x198], eax
mov ecx, dword [ebp - 0x198]
call fcn.100229df
push eax
call fcn.10074e83
pop ecx
lea ecx, [ebp - 0x258]
call fcn.100229d5
jmp 0x100159c0
jmp 0x100159a3
jmp 0x10015980
jmp 0x10015963
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
mov dword [ebp - 0x1a4], 0xb56cef3c
cmp dword [ebp - 0xb8], 0x25e0
jge 0x10015a6d
push dword [ebp - 0x160]
call fcn.10074e83
pop ecx
mov dword [ebp - 0xfc], 0x92079655
mov dword [ebp - 0x170], 0xc1094d0e
lea eax, [ebp - 0x38]
push eax
push 0x2197
push 0x1c91
push 0
lea eax, [ebp - 0x114]
push eax
push 0x1b41
call fcn.10021481
add esp, 0x18
mov dword [ebp - 0x38], 0
jmp 0x10015ab5
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 3
jge 0x10015acb
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x240], 0
jmp 0x10015aae
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x204], eax
push 3
lea ecx, [ebp - 0x114]
call fcn.10022db7
mov dword [eax], 1
mov esi, dword [ebp - 0x14]
push 1
lea ecx, [ebp - 0x114]
call fcn.10022db7
cmp esi, dword [eax]
jge 0x10015b07
mov dword [ebp - 0xe4], 1
jmp 0x10015b0e
and dword [ebp - 0xe4], 0
mov eax, dword [ebp - 0xe4]
sub eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x14]
jge 0x10015b28
mov dword [ebp - 0xc4], 1
jmp 0x10015b2f
and dword [ebp - 0xc4], 0
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0
je 0x10015b62
push 3
lea ecx, [ebp - 0x114]
call fcn.10022db7
cmp dword [eax], 0
je 0x10015b62
mov dword [ebp - 0xa8], 1
jmp 0x10015b69
and dword [ebp - 0xa8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xa8]
mov dword [ebp + eax - 0x240], ecx
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x118], eax
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x14], eax
jne 0x10015b9c
mov dword [ebp - 0xcc], 1
jmp 0x10015ba3
and dword [ebp - 0xcc], 0
mov eax, dword [ebp - 0xcc]
sub eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x14]
jl 0x10015bbd
mov dword [ebp - 0x168], 1
jmp 0x10015bc4
and dword [ebp - 0x168], 0
push 2
lea ecx, [ebp - 0x114]
call fcn.10022db7
mov eax, dword [eax]
mov dword [ebp - 0xec], eax
mov eax, dword [ebp - 0x1a4]
cmp dword [ebp - 0xec], eax
je 0x10015bf3
mov dword [ebp - 0xd4], 1
jmp 0x10015bfa
and dword [ebp - 0xd4], 0
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0xfffffffd
je 0x10015c1b
mov dword [ebp - 0xdc], 1
jmp 0x10015c22
and dword [ebp - 0xdc], 0
imul eax, dword [ebp - 0xdc], 3
mov dword [ebp - 0x170], eax
mov byte [ebp - 0x16], 0
movzx eax, byte [ebp - 0x16]
test eax, eax
je 0x10015c4f
push 0
push 0x489c
push 0x38d6
call fcn.1001712c
add esp, 0xc
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x114]
call fcn.10022d9b
mov dword [ebp - 0xf4], 0x490b
mov dword [ebp - 0x178], 0x10007d80
cmp dword [ebp - 0xf4], 0x4bf5
jle 0x10015d56
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
and dword [ebp - 0xa4], 0
jmp 0x10015ca2
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0x63dc
jge 0x10015d56
and dword [ebp - 0x70], 0
jmp 0x10015cbf
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0x422c
jge 0x10015d51
and dword [ebp - 0x90], 0
jmp 0x10015ce2
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0x6f5e
jge 0x10015d4c
mov eax, dword [ebp - 0xa4]
mov ecx, dword [ebp - 0x70]
sar eax, cl
mov ecx, dword [ebp - 0x90]
shl eax, cl
cdq
mov dword [ebp - 0x1b8], eax
mov dword [ebp - 0x1b4], edx
push dword [ebp - 0x1b4]
push dword [ebp - 0x1b8]
lea ecx, [ebp - 0x270]
call fcn.100128ee
pop ecx
pop ecx
mov dword [ebp - 0x1d4], eax
mov ecx, dword [ebp - 0x1d4]
call fcn.100229df
push eax
call fcn.10074e83
pop ecx
lea ecx, [ebp - 0x270]
call fcn.100229d5
jmp 0x10015cd5
jmp 0x10015cb8
jmp 0x10015c95
push 1
lea eax, [ebp - 0x220]
push eax
push 0x1980
push 0
push dword [ebp - 0xb4]
call fcn.1001515c
add esp, 0x14
cmp dword [ebp - 0xf4], 0x465a
jge 0x10015d8c
push dword [ebp - 0x178]
call fcn.10074e83
pop ecx
and dword [ebp - 0x28], 0
mov eax, dword [ebp - 0xb4]
mov ecx, dword [ebp - 0x28]
cmp ecx, dword [eax]
jae 0x10016151
lea eax, [ebp - 0x14c]
mov dword [ebp - 0x180], eax
mov dword [ebp - 0x10], 0xfffffffe
push 1
lea ecx, [ebp - 0x1f4]
call fcn.10022d19
mov byte [ebp - 4], 2
mov dword [ebp - 0x30], 0
jmp 0x10015dd5
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 2
jge 0x10015deb
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x1dc], 0
jmp 0x10015dce
push 0
lea eax, [ebp - 0x30]
push eax
push 0x3ff4
push 0x1925
lea eax, [ebp - 0x1f4]
push eax
call fcn.1001e020
add esp, 0x14
mov dword [ebp - 0x10], 0xfffffff2
jmp 0x10015e1a
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0x1c
jne 0x10015e8f
mov dword [ebp - 0x78], 0xd16df251
mov dword [ebp - 0x230], 0
mov dword [ebp - 0x228], 0xffffffff
mov dword [ebp - 0x78], 0xffffffec
jmp 0x10015e4b
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0xfffffffb
jl 0x10015e8d
mov dword [ebp - 0x1c], 0x2250db85
push 0
lea eax, [ebp - 0x1c]
push eax
call fcn.10018c0c
pop ecx
pop ecx
mov dword [ebp - 0x1c], 0
jmp 0x10015e75
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x10015e8b
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x1dc], 0xe9fb1c03
jmp 0x10015e6e
jmp 0x10015e44
jmp 0x10015e13
mov dword [ebp - 0x10], 1
jmp 0x10015e9f
mov eax, dword [ebp - 0x10]
dec eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jl 0x10015fa4
mov dword [ebp - 0xc0], 0x68aa2d34
mov dword [ebp - 0xe0], 0xffffffff
mov dword [ebp - 0x1b0], 0
mov dword [ebp - 0x44], 0
jmp 0x10015ed7
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 1
jge 0x10015eed
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0xac], 0xffffffff
jmp 0x10015ed0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xac], 1
jl 0x10015f09
mov dword [ebp - 0xd0], 1
jmp 0x10015f10
and dword [ebp - 0xd0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xac]
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0xac]
mov dword [ebp - 0xc0], eax
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x1dc], 7
imul eax, dword [ebp - 0xc0], 7
mov dword [ebp - 0xc8], eax
push 0
lea ecx, [ebp - 0x1f4]
call fcn.10022db7
mov ecx, dword [ebp - 0xc8]
mov dword [eax], ecx
mov eax, dword [ebp - 0xc8]
cmp eax, dword [ebp - 0xd0]
jne 0x10015f7d
mov dword [ebp - 0xd8], 1
jmp 0x10015f84
and dword [ebp - 0xd8], 0
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0xe0], eax
mov eax, dword [ebp - 0xe0]
sub eax, dword [ebp - 0x10]
mov dword [ebp - 0x1b0], eax
jmp 0x10015e98
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1f4]
call fcn.10022d9b
and dword [ebp - 0x4c], 0
jmp 0x10015fc7
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x4c], 2
jae 0x10016016
mov eax, dword [ebp - 0xe8]
mov eax, dword [eax]
add eax, dword [ebp - 0x28]
xor edx, edx
div dword [0x1008f5e0]
mov eax, dword [ebp - 0xf0]
mov eax, dword [eax + 4]
movzx edx, byte [eax + edx]
mov eax, dword [ebp - 0xe8]
mov eax, dword [eax]
add eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0xf0]
mov ecx, dword [ecx]
movzx ecx, byte [ecx + eax]
call fcn.10012926
mov ecx, dword [ebp - 0x180]
add ecx, dword [ebp - 0x4c]
mov byte [ecx], al
jmp 0x10015fb9
mov dword [ebp - 0x34], 0x824a8c6a
mov dword [ebp - 0xf8], 0x39cb61d2
mov dword [ebp - 0x34], 0xffffffe5
jmp 0x10016037
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0xf
jle 0x100160b5
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x54], 0
jmp 0x10016054
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 1
jge 0x1001606a
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x18c], 0
jmp 0x1001604d
mov dword [ebp - 0x2c], 0
jmp 0x1001607a
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jg 0x100160b0
mov dword [ebp - 0x5c], 0x629aa810
mov dword [ebp - 0x5c], 0
jmp 0x10016097
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0
jg 0x100160ae
mov eax, dword [ebp - 0x2c]
cmp dword [ebp + eax*4 - 0x18c], 0
je 0x100160ac
jmp 0x100160ae
jmp 0x10016090
jmp 0x10016073
jmp 0x10016030
cmp dword [ebp - 0xf8], 0
je 0x100160d4
mov byte [ebp - 0x15], 0
push 1
lea eax, [ebp - 0x15]
push eax
push 1
call fcn.10014c00
add esp, 0xc
jmp 0x1001613b
mov dword [ebp - 0x144], 0xaa61fc2d
mov dword [ebp - 0x140], 0xd53d
push 0
push 0x689d
call fcn.10018bf0
pop ecx
pop ecx
push 0x685c
push 0x7789
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0xf8]
push eax
push 0x49a2
push 0xaeb
push 0
lea eax, [ebp - 0x140]
push eax
lea eax, [ebp - 0x144]
push eax
push 0x1e45
push 0x4bd5
push 1
push 1
call fcn.10016c6c
add esp, 0x34
push dword [ebp - 0x14c]
lea ecx, [ebp - 0x220]
call fcn.10022bd4
jmp 0x10015d90
push 1
lea ecx, [ebp - 0x1e8]
call fcn.10022d19
mov byte [ebp - 4], 3
mov dword [ebp - 0x3c], 0x901f2c29
mov dword [ebp - 0x208], 0x46721591
mov dword [ebp - 0x224], 0x9ea41449
mov dword [ebp - 0x22c], 0x714f98ca
push 3
lea ecx, [ebp - 0x200]
call fcn.10022d19
mov byte [ebp - 4], 4
push 0
lea eax, [ebp - 0x1e8]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.10019536
add esp, 0xc
mov dword [ebp - 0x20], 0
jmp 0x100161bd
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x100161d3
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x2ac], 0xb04800fa
jmp 0x100161b6
mov dword [ebp - 0xb0], 0x44a1
mov dword [ebp - 0x120], 0x10007dd0
cmp dword [ebp - 0xb0], 0x469a
jle 0x100162c0
and dword [ebp - 0x64], 0
jmp 0x10016204
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0x1f18
jge 0x100162c0
and dword [ebp - 0x6c], 0
jmp 0x1001621e
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0x3c12
jge 0x100162bb
and dword [ebp - 0x74], 0
jmp 0x10016238
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0x7bbf
jge 0x100162b6
and dword [ebp - 0x7c], 0
jmp 0x1001624e
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0x81b
jge 0x100162b1
mov eax, dword [ebp - 0x64]
sub eax, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x74]
imul ecx, dword [ebp - 0x7c]
xor eax, ecx
cdq
mov dword [ebp - 0x1c4], eax
mov dword [ebp - 0x1c0], edx
push dword [ebp - 0x1c0]
push dword [ebp - 0x1c4]
lea ecx, [ebp - 0x2a0]
call fcn.100128ee
pop ecx
pop ecx
mov dword [ebp - 0x11c], eax
mov ecx, dword [ebp - 0x11c]
call fcn.100229df
push eax
call fcn.10074e83
pop ecx
lea ecx, [ebp - 0x2a0]
call fcn.100229d5
jmp 0x10016247
jmp 0x10016231
jmp 0x10016217
jmp 0x100161fd
lea eax, [ebp - 0x200]
push eax
lea eax, [ebp - 0x20]
push eax
push 0
push 0x4ae3
push 0x4743
call fcn.100191f2
add esp, 0x14
cmp dword [ebp - 0xb0], 0x445f
jge 0x100162f7
push dword [ebp - 0x120]
call fcn.10074e83
pop ecx
mov dword [ebp - 0x108], 0x7b3
mov dword [ebp - 0x130], 0x10007e00
cmp dword [ebp - 0x108], 0x908
jle 0x10016422
and dword [ebp - 0x84], 0
jmp 0x10016331
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0x378e
jge 0x10016422
and dword [ebp - 0x8c], 0
jmp 0x10016357
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0x6a49
jge 0x1001641d
and dword [ebp - 0x94], 0
jmp 0x1001637d
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0x71f
jge 0x10016418
and dword [ebp - 0x9c], 0
jmp 0x100163a3
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0x6d7a
jge 0x10016413
mov eax, dword [ebp - 0x84]
imul eax, dword [ebp - 0x8c]
or eax, dword [ebp - 0x94]
or eax, dword [ebp - 0x9c]
cdq
mov dword [ebp - 0x1d0], eax
mov dword [ebp - 0x1cc], edx
push dword [ebp - 0x1cc]
push dword [ebp - 0x1d0]
lea ecx, [ebp - 0x2c4]
call fcn.100128ee
pop ecx
pop ecx
mov dword [ebp - 0x128], eax
mov ecx, dword [ebp - 0x128]
call fcn.100229df
push eax
call fcn.10074e83
pop ecx
lea ecx, [ebp - 0x2c4]
call fcn.100229d5
jmp 0x10016396
jmp 0x10016370
jmp 0x1001634a
jmp 0x10016324
mov dword [ebp - 0x3c], 0
jmp 0x10016432
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 1
jge 0x1001646c
lea eax, [ebp - 0x1e8]
push eax
push 0x526c
push 0x1da0
lea eax, [ebp - 0x3c]
push eax
push 0x22b3
push 0x38cf
push 0x5387
push 0
push 1
push 1
call fcn.10017752
add esp, 0x28
jmp 0x1001642b
cmp dword [ebp - 0x108], 0x6c5
jge 0x10016484
push dword [ebp - 0x130]
call fcn.10074e83
pop ecx
lea eax, [ebp - 0x200]
push eax
push 0x20ef
push 0
call fcn.100203ee
add esp, 0xc
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x200]
call fcn.10022d9b
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1e8]
call fcn.10022d9b
lea eax, [ebp - 0x220]
push eax
mov ecx, dword [ebp - 0x138]
call fcn.10022bb6
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x220]
call fcn.10022bac
jmp 0x1001651c
mov dword [ebp - 0x234], 0xffffffff
push 0
push 0x10dc
push 0x3868
push 0x1f94
push 0x6aba
call fcn.10019fed
add esp, 0x14
push 0
call fcn.10016b98
pop ecx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret