Function at 0x10022717
Capabilities:
Check os version
Create directory
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100655ae
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x105c
call fcn.10060310
push esi
movzx eax, byte [ebp + 0x10]
test eax, eax
je 0x1002277e
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x8fc], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x904], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x850], eax
push dword [ebp - 0x850]
push 1
push dword [ebp - 0x8fc]
push dword [ebp - 0x904]
call fcn.100291c4
add esp, 0x10
jmp 0x100291b5
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x984], eax
lea eax, [ebp + 0x14]
mov dword [ebp - 0x90c], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x974], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x97c], eax
mov eax, dword [ebp - 0x90c]
movzx eax, byte [eax]
test eax, eax
je 0x100227ca
mov byte [ebp - 0x7e], 0
movzx eax, byte [ebp - 0x7e]
test eax, eax
je 0x100227c5
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
jmp 0x100291b5
mov eax, dword [ebp - 0x974]
mov dword [ebp - 0x8cc], eax
mov eax, dword [ebp - 0x97c]
mov dword [ebp - 0x8a4], eax
mov eax, dword [ebp - 0x984]
mov dword [ebp - 0x1ec], eax
mov dword [ebp - 0x398], 6
mov dword [ebp - 0x1f8], 0x4a754320
mov dword [ebp - 0x104], 1
mov dword [ebp - 0x230], 0
mov dword [ebp - 0xe0c], 0x20b963ab
mov dword [ebp - 0xf8], 1
mov dword [ebp - 0xda8], 4
mov dword [ebp - 0x98c], 9
mov dword [ebp - 0x33c], 0x52568108
mov dword [ebp - 0x9ac], 6
mov dword [ebp - 0x9cc], 0xaf0a9b27
mov dword [ebp - 0x9c4], 0xffffffff
mov dword [ebp - 0x190], 0x1e1c5a3d
mov dword [ebp - 0x9bc], 0x530a9bca
mov dword [ebp - 0x3a0], 0xfffffffb
mov dword [ebp - 0x138], 0x717f4039
mov dword [ebp - 0x9b4], 0x88ed
mov dword [ebp - 0x3b0], 0x3e63d4d8
mov dword [ebp - 0x184], 0
jmp 0x100228bb
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 2
jge 0x100228d7
mov eax, dword [ebp - 0x184]
mov dword [ebp + eax*4 - 0x250], 0x3b7c7ce5
jmp 0x100228ae
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x250]
push 4
pop ecx
imul ecx, ecx, 0
add eax, dword [ebp + ecx - 0x250]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x250]
je 0x1002290c
mov dword [ebp - 0x734], 1
jmp 0x10022913
and dword [ebp - 0x734], 0
cmp dword [ebp - 0x98c], 0xfffffff7
jle 0x10022928
mov dword [ebp - 0x4ac], 1
jmp 0x1002292f
and dword [ebp - 0x4ac], 0
mov eax, dword [ebp - 0x138]
neg eax
mov dword [ebp - 0x994], eax
mov eax, dword [ebp - 0x4ac]
mov dword [ebp - 0x99c], eax
mov eax, dword [ebp - 0x138]
dec eax
mov dword [ebp - 0x138], eax
mov eax, dword [ebp - 0x994]
cmp eax, dword [ebp - 0x99c]
jge 0x10022970
mov dword [ebp - 0x72c], 1
jmp 0x10022977
and dword [ebp - 0x72c], 0
mov eax, dword [ebp - 0x104]
cmp dword [ebp - 0x72c], eax
jl 0x10022991
mov dword [ebp - 0x73c], 1
jmp 0x10022998
and dword [ebp - 0x73c], 0
mov eax, dword [ebp - 0x734]
cmp eax, dword [ebp - 0x73c]
jne 0x100229b2
mov dword [ebp - 0x744], 1
jmp 0x100229b9
and dword [ebp - 0x744], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x250]
add eax, dword [ebp - 0x744]
je 0x10022d68
mov dword [ebp - 0xc0], 0xfffffffb
mov dword [ebp - 0x6b0], 0
mov dword [ebp - 0x724], 0x5adf6f6d
mov dword [ebp - 0x188], 0
jmp 0x10022a09
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 3
jge 0x10022a25
mov eax, dword [ebp - 0x188]
mov dword [ebp + eax*4 - 0xe44], 0xf520f09d
jmp 0x100229fc
mov dword [ebp - 0xf8], 1
jmp 0x10022a3e
mov eax, dword [ebp - 0xf8]
dec eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0
jl 0x10022b42
mov dword [ebp - 0x1f8], 1
jmp 0x10022a64
mov eax, dword [ebp - 0x1f8]
dec eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 0
jl 0x10022b3d
mov byte [ebp - 0x91], 0
push 1
push 0x6bdb
push 0
push 0
push 0x4c8e
push 0x6b4d
lea eax, [ebp - 0x91]
push eax
push 0x731e
push 0x3539
push 0x5ddc
push 0x1b35
push 0x7d5
push 0x6a4c
call fcn.1001a2ef
add esp, 0x34
mov dword [ebp - 0x104], 1
jmp 0x10022ad3
mov eax, dword [ebp - 0x104]
dec eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0
jl 0x10022b38
mov byte [ebp - 0xad], 0
movzx eax, byte [ebp - 0xad]
test eax, eax
je 0x10022b36
push 0
push 0x2762
push 0
push 0x43af
push 0x52ed
push 0x1e1f
push 0x325a
push 0x78fe
push 0xd23
push 0xba8
push 0x2669
push 0x48ef
push 0x7b5e
push 0x736b
call fcn.1001ba26
add esp, 0x38
jmp 0x10022ac6
jmp 0x10022a57
jmp 0x10022a31
mov eax, dword [ebp - 0x230]
cmp dword [ebp - 0xc0], eax
jg 0x10022b5c
mov dword [ebp - 0x74c], 1
jmp 0x10022b63
and dword [ebp - 0x74c], 0
cmp dword [ebp - 0x74c], 0xc1731d4
je 0x10022b81
mov eax, 0xa6ae
test eax, eax
jne 0x10022b81
and dword [ebp - 0x9a4], 0
jmp 0x10022b8b
mov dword [ebp - 0x9a4], 1
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0xcd0], eax
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0xe08], eax
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0xcd8], eax
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0x9ac], eax
cmp dword [ebp - 0x230], 0xfffffffc
jge 0x10022bd0
mov dword [ebp - 0x754], 1
jmp 0x10022bd7
and dword [ebp - 0x754], 0
mov eax, dword [ebp - 0x754]
mov dword [ebp - 0x33c], eax
mov eax, dword [ebp - 0x33c]
mov dword [ebp - 0xd9c], eax
cmp dword [ebp - 0x6b0], 3
ja 0x10022c04
mov dword [ebp - 0x75c], 1
jmp 0x10022c0b
and dword [ebp - 0x75c], 0
cmp dword [ebp - 0x75c], 0xfffffffa
jg 0x10022c20
mov dword [ebp - 0x764], 1
jmp 0x10022c27
and dword [ebp - 0x764], 0
mov eax, dword [ebp - 0x724]
cmp dword [ebp - 0x764], eax
jle 0x10022c41
mov dword [ebp - 0x368], 1
jmp 0x10022c48
and dword [ebp - 0x368], 0
imul eax, dword [ebp - 0x368], 0
cmp eax, dword [ebp - 0x190]
jl 0x10022c63
mov dword [ebp - 0x598], 1
jmp 0x10022c6a
and dword [ebp - 0x598], 0
mov eax, dword [ebp - 0x724]
cmp dword [ebp - 0x598], eax
jge 0x10022c84
mov dword [ebp - 0x370], 1
jmp 0x10022c8b
and dword [ebp - 0x370], 0
mov eax, dword [ebp - 0x138]
cmp dword [ebp - 0x370], eax
je 0x10022ca5
mov dword [ebp - 0x378], 1
jmp 0x10022cac
and dword [ebp - 0x378], 0
mov eax, dword [ebp - 0x6b0]
cmp dword [ebp - 0x378], eax
jge 0x10022cc6
mov dword [ebp - 0x5a0], 1
jmp 0x10022ccd
and dword [ebp - 0x5a0], 0
mov eax, dword [ebp - 0x190]
cmp dword [ebp - 0x5a0], eax
je 0x10022cee
push 6
pop eax
test eax, eax
je 0x10022cee
mov dword [ebp - 0x380], 1
jmp 0x10022cf5
and dword [ebp - 0x380], 0
mov eax, dword [ebp - 0x380]
sub eax, dword [ebp - 0x230]
sub eax, dword [ebp - 0x9b4]
jne 0x10022d22
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x250], 0
jne 0x10022d22
and dword [ebp - 0x790], 0
jmp 0x10022d2c
mov dword [ebp - 0x790], 1
mov eax, dword [ebp - 0x3b0]
cmp dword [ebp - 0x790], eax
jl 0x10022d46
mov dword [ebp - 0x388], 1
jmp 0x10022d4d
and dword [ebp - 0x388], 0
mov eax, dword [ebp - 0xc0]
add eax, dword [ebp - 0x388]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xe44], eax
jmp 0x10022d72
mov dword [ebp - 0x9bc], 0x52e963e9
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x250], 0
jne 0x10022ea1
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x250], 0
jne 0x10022e97
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x250]
cmp dword [ebp - 0xf8], eax
jl 0x10022dbb
mov dword [ebp - 0x5a8], 1
jmp 0x10022dc2
and dword [ebp - 0x5a8], 0
mov eax, dword [ebp - 0x9c4]
imul eax, dword [ebp - 0x5a8]
sub eax, dword [ebp - 0x9cc]
sub eax, dword [ebp - 0x398]
je 0x10022df2
cmp dword [ebp - 0x3a0], 0
je 0x10022df2
mov dword [ebp - 0x390], 1
jmp 0x10022df9
and dword [ebp - 0x390], 0
mov eax, dword [ebp - 0x138]
cmp eax, dword [ebp - 0x390]
jg 0x10022e13
mov dword [ebp - 0x6b8], 1
jmp 0x10022e1a
and dword [ebp - 0x6b8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x250]
cmp dword [ebp - 0x6b8], eax
je 0x10022e3b
mov dword [ebp - 0x5b0], 1
jmp 0x10022e42
and dword [ebp - 0x5b0], 0
mov eax, dword [ebp - 0x398]
cmp dword [ebp - 0x5b0], eax
jne 0x10022e5c
mov dword [ebp - 0x740], 1
jmp 0x10022e63
and dword [ebp - 0x740], 0
mov eax, dword [ebp - 0x3a0]
cmp dword [ebp - 0x740], eax
jle 0x10022e7d
mov dword [ebp - 0x3a8], 1
jmp 0x10022e84
and dword [ebp - 0x3a8], 0
xor eax, eax
sub eax, dword [ebp - 0x3a8]
jne 0x10022e97
and dword [ebp - 0x5b8], 0
jmp 0x10022ea1
mov dword [ebp - 0x5b8], 1
imul eax, dword [ebp - 0x190], 0xb855
cmp eax, dword [ebp - 0x3b0]
jl 0x10022ebf
mov dword [ebp - 0x6c0], 1
jmp 0x10022ec6
and dword [ebp - 0x6c0], 0
mov eax, dword [ebp - 0x190]
cmp dword [ebp - 0x6c0], eax
jle 0x10022ee6
cmp dword [ebp - 0x33c], 0
jne 0x10022ee6
and dword [ebp - 0x3b8], 0
jmp 0x10022ef0
mov dword [ebp - 0x3b8], 1
mov eax, dword [ebp - 0x230]
cmp dword [ebp - 0x3b8], eax
jne 0x10022f0a
mov dword [ebp - 0x5c0], 1
jmp 0x10022f11
and dword [ebp - 0x5c0], 0
mov eax, dword [ebp - 0x5c0]
mov dword [ebp - 0xf8], eax
push 3
lea ecx, [ebp - 0x800]
call fcn.100099bf
and dword [ebp - 4], 0
mov dword [ebp - 0x9e4], 1
mov dword [ebp - 0x9dc], 1
mov dword [ebp - 0x9d4], 0x1e19
push 2
lea ecx, [ebp - 0xb30]
call fcn.100099bf
mov byte [ebp - 4], 1
mov dword [ebp - 0x9ec], 1
mov dword [ebp - 0x28], 0
jmp 0x10022f77
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jge 0x10022f93
push dword [ebp - 0x28]
lea ecx, [ebp - 0x800]
call fcn.10009a26
mov dword [eax], 0xdc85f70a
jmp 0x10022f70
mov dword [ebp - 0x28], 0
jmp 0x10022fa3
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 1
jge 0x10022fb9
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0xce0], 0xfffffffe
jmp 0x10022f9c
mov dword [ebp - 0x28], 0
jmp 0x10022fc9
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jge 0x10022fe5
push dword [ebp - 0x28]
lea ecx, [ebp - 0xb30]
call fcn.10009a26
mov dword [eax], 0xfffffff8
jmp 0x10022fc2
push 0
lea ecx, [ebp - 0x800]
call fcn.10009a26
mov dword [eax], 9
jmp 0x1002301e
push 0
lea ecx, [ebp - 0x800]
call fcn.10009a26
mov dword [ebp - 0x3c0], eax
mov eax, dword [ebp - 0x3c0]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x3c0]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x800]
call fcn.10009a26
cmp dword [eax], 0xffffffe4
je 0x100230ee
mov dword [ebp - 0x198], 0xffffffff
mov dword [ebp - 0xbfc], 1
mov dword [ebp - 0xc04], 0xffffffff
mov dword [ebp - 0x198], 0x11
jmp 0x1002306b
mov eax, dword [ebp - 0x198]
dec eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 4
jl 0x100230e9
push 2
lea ecx, [ebp - 0xd28]
call fcn.100099bf
mov byte [ebp - 4], 2
mov dword [ebp - 0xc0c], 0x58a835a2
lea eax, [ebp - 0xd28]
push eax
push 0xfe
lea eax, [ebp - 0xc14]
push eax
push 1
push 0x6b07
push 0
push 0x62e0
call fcn.1001b692
add esp, 0x1c
lea eax, [ebp - 0x9d4]
push eax
push 1
push 0x5ce2
push 0
push 0x5bde
call fcn.10014dc1
add esp, 0x14
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xd28]
call fcn.10009a21
jmp 0x1002305e
jmp 0x10022ffa
lea eax, [ebp - 0x800]
push eax
lea eax, [ebp - 0x9dc]
push eax
push 0x3ddb
lea eax, [ebp - 0xb30]
push eax
lea eax, [ebp - 0x9e4]
push eax
lea eax, [ebp - 0x9ec]
push eax
push 0
push 0x7f17
push 0
push 0x32a0
push 0x268b
call fcn.10022212
add esp, 0x2c
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xb30]
call fcn.10009a21
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x800]
call fcn.10009a21
mov dword [ebp - 0xc1c], 1
mov dword [ebp - 0xc24], 3
mov dword [ebp - 0xec], 0x4081c290
mov dword [ebp - 0xc2c], 0x1a93826a
mov dword [ebp - 0xa9c], 0xf4d39d98
mov dword [ebp - 0xa98], 0xf4d39d98
mov dword [ebp - 0xa94], 0xf4d39d98
mov dword [ebp - 0xa90], 0xf4d39d98
lea ecx, [ebp - 0x28d]
call fcn.10009a35
push eax
lea eax, [ebp - 0xa8c]
push eax
lea eax, [ebp - 0xa9c]
push eax
lea ecx, [ebp - 0xe98]
call fcn.10009a38
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xd38]
call fcn.100099fb
mov dword [ebp - 4], 3
mov dword [ebp - 0xba0], 1
mov dword [ebp - 0xb9c], 1
mov dword [ebp - 0xb98], 1
mov dword [ebp - 0xb94], 1
mov dword [ebp - 0x31c], 0x5e0e2bf3
mov dword [ebp - 0x200], 0
jmp 0x10023226
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 3
jge 0x10023242
mov eax, dword [ebp - 0x200]
mov dword [ebp + eax*4 - 0xe50], 0x3b91
jmp 0x10023219
mov dword [ebp - 0xec], 2
jmp 0x1002325b
mov eax, dword [ebp - 0xec]
dec eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0
jl 0x1002341d
mov dword [ebp - 0x1a0], 0xffffffff
push 3
lea ecx, [ebp - 0xb54]
call fcn.100099bf
mov byte [ebp - 4], 4
mov dword [ebp - 0xa08], 0xa30b9130
lea eax, [ebp - 0xc34]
push eax
push 0
lea eax, [ebp - 0xb54]
push eax
call fcn.1002d536
add esp, 0xc
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0xc3c], eax
cmp dword [ebp - 0xec], 0x1c9b
jne 0x100232d6
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xba0], 0
jne 0x100232d6
and dword [ebp - 0x7a0], 0
jmp 0x100232e0
mov dword [ebp - 0x7a0], 1
mov eax, dword [ebp - 0x31c]
dec eax
mov dword [ebp - 0x31c], eax
mov eax, dword [ebp - 0x31c]
cmp eax, dword [ebp - 0x7a0]
jne 0x10023307
mov dword [ebp - 0x3c8], 1
jmp 0x1002330e
and dword [ebp - 0x3c8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xe50]
add eax, 0x1392
cmp eax, dword [ebp - 0x3c8]
jle 0x10023334
mov dword [ebp - 0x5c8], 1
jmp 0x1002333b
and dword [ebp - 0x5c8], 0
mov eax, dword [ebp - 0x1a0]
cmp dword [ebp - 0x5c8], eax
jne 0x10023355
mov dword [ebp - 0x3d0], 1
jmp 0x1002335c
and dword [ebp - 0x3d0], 0
mov eax, dword [ebp - 0x1a0]
cmp dword [ebp - 0x3d0], eax
jge 0x10023376
mov dword [ebp - 0x6c8], 1
jmp 0x1002337d
and dword [ebp - 0x6c8], 0
mov eax, dword [ebp - 0x6c8]
add eax, 0x56a218f0
cmp eax, dword [ebp - 0x1a0]
jne 0x1002339c
mov dword [ebp - 0x3d8], 1
jmp 0x100233a3
and dword [ebp - 0x3d8], 0
mov esi, dword [ebp - 0xec]
add esi, dword [ebp - 0x3d8]
push 0
lea ecx, [ebp - 0xd38]
call fcn.10009a26
cmp esi, dword [eax]
je 0x100233cc
mov dword [ebp - 0x5d0], 1
jmp 0x100233d3
and dword [ebp - 0x5d0], 0
mov eax, dword [ebp - 0xa08]
cmp dword [ebp - 0x5d0], eax
jle 0x100233ed
mov dword [ebp - 0x3e0], 1
jmp 0x100233f4
and dword [ebp - 0x3e0], 0
push 2
lea ecx, [ebp - 0xb54]
call fcn.10009a26
mov ecx, dword [ebp - 0x3e0]
mov dword [eax], ecx
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xb54]
call fcn.10009a21
jmp 0x1002324e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd38]
call fcn.10009a21
mov dword [ebp - 0xc44], 0x5e17ca00
mov dword [ebp - 0x90], 0
mov dword [ebp - 0xcc], 0xfffffffa
push 0x6c8a
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0x90]
push eax
push 0
push 0xd03
call fcn.1002c9e2
add esp, 0x14
mov dword [ebp - 0x90], 0xfffffff5
jmp 0x10023485
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0x21
jge 0x100239d9
mov dword [ebp - 0x274], 0x2121f90e
mov dword [ebp - 0x270], 0x2121f90e
mov dword [ebp - 0x26c], 0x2121f90e
mov dword [ebp - 0x268], 0x2121f90e
mov dword [ebp - 0xcc], 3
jmp 0x100234d3
mov eax, dword [ebp - 0xcc]
dec eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0
jl 0x100239d4
mov dword [ebp - 0x110], 0xd7249aae
mov dword [ebp - 0x110], 0
jmp 0x10023503
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 3
jg 0x100239cf
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x29c], 1
mov dword [ebp - 0x9f4], 0xfffffffc
mov dword [ebp - 0x84], 0
jmp 0x10023547
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 3
jg 0x100239ca
mov dword [ebp - 0xab0], 0x52568108
mov dword [ebp - 0xaac], 0x52568108
mov dword [ebp - 0xaa8], 0x52568108
mov dword [ebp - 0xaa4], 0x52568108
lea ecx, [ebp - 0x305]
call fcn.10009a35
push eax
lea eax, [ebp - 0xaa0]
push eax
lea eax, [ebp - 0xab0]
push eax
lea ecx, [ebp - 0xee8]
call fcn.10009a38
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x170]
call fcn.100099fb
mov dword [ebp - 4], 5
push 1
lea ecx, [ebp - 0x170]
call fcn.10009a26
mov dword [eax], 3
jmp 0x100235f1
push 1
lea ecx, [ebp - 0x170]
call fcn.10009a26
mov dword [ebp - 0x748], eax
mov eax, dword [ebp - 0x748]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x748]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x170]
call fcn.10009a26
cmp dword [eax], 0
jl 0x100239b6
mov dword [ebp - 0x5e8], 0xf0790389
mov dword [ebp - 0x418], 0xfffffff8
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0xc4c], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x274]
push 4
pop ecx
shl ecx, 0
sub eax, dword [ebp + ecx - 0x274]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x274]
jl 0x1002365b
mov dword [ebp - 0x3e8], 1
jmp 0x10023662
and dword [ebp - 0x3e8], 0
mov eax, dword [ebp - 0x9f4]
cmp dword [ebp - 0x3e8], eax
jle 0x1002367c
mov dword [ebp - 0x5d8], 1
jmp 0x10023683
and dword [ebp - 0x5d8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x274]
cmp dword [ebp - 0x5d8], eax
jne 0x100236a4
mov dword [ebp - 0x8f4], 1
jmp 0x100236ab
and dword [ebp - 0x8f4], 0
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0xc54], eax
push 1
lea ecx, [ebp - 0x170]
call fcn.10009a26
mov eax, dword [eax]
cmp dword [ebp + eax*4 - 0x274], 0xffffffff
jne 0x100236dc
mov dword [ebp - 0x3f0], 1
jmp 0x100236e3
and dword [ebp - 0x3f0], 0
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x29c], eax
mov esi, dword [ebp - 0x29c]
push 1
lea ecx, [ebp - 0x170]
call fcn.10009a26
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x274]
sub eax, esi
cmp eax, dword [ebp - 0x3f0]
je 0x10023721
mov dword [ebp - 0x6d0], 1
jmp 0x10023728
and dword [ebp - 0x6d0], 0
push 1
lea ecx, [ebp - 0x170]
call fcn.10009a26
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x274]
cmp dword [ebp - 0x6d0], eax
je 0x10023752
mov dword [ebp - 0x3f8], 1
jmp 0x10023759
and dword [ebp - 0x3f8], 0
xor eax, eax
sub eax, dword [ebp - 0x3f8]
jne 0x1002376c
cmp dword [ebp - 0x84], 0
je 0x10023781
mov eax, 0xffff
test eax, eax
je 0x10023781
mov dword [ebp - 0x5e0], 1
jmp 0x10023788
and dword [ebp - 0x5e0], 0
push 1
lea ecx, [ebp - 0x170]
call fcn.10009a26
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x274]
cmp dword [ebp - 0x5e0], eax
jne 0x100237b2
mov dword [ebp - 0x400], 1
jmp 0x100237b9
and dword [ebp - 0x400], 0
mov eax, dword [ebp - 0x400]
neg eax
cmp eax, dword [ebp - 0x84]
jg 0x100237db
mov eax, 0xf57f
test eax, eax
jne 0x100237db
and dword [ebp - 0x798], 0
jmp 0x100237e5
mov dword [ebp - 0x798], 1
mov esi, dword [ebp - 0x798]
add esi, 0x54eff863
push 1
lea ecx, [ebp - 0x170]
call fcn.10009a26
mov eax, dword [eax]
cmp esi, dword [ebp + eax*4 - 0x274]
jge 0x10023815
mov dword [ebp - 0x408], 1
jmp 0x1002381c
and dword [ebp - 0x408], 0
push 1
lea ecx, [ebp - 0x170]
call fcn.10009a26
mov eax, dword [eax]
mov ecx, dword [ebp - 0x408]
sub ecx, dword [ebp + eax*4 - 0x274]
neg ecx
mov dword [ebp - 0x5e8], ecx
xor eax, eax
inc eax
je 0x1002386d
mov byte [ebp - 0xb2], 0
movzx eax, byte [ebp - 0xb2]
test eax, eax
je 0x10023868
push 1
push 0x340f
push 0
call fcn.1002cb43
add esp, 0xc
jmp 0x100239b1
mov dword [ebp - 0x834], 0x10b09edb
mov byte [ebp - 0xb1], 0
movzx eax, byte [ebp - 0xb1]
test eax, eax
je 0x1002389f
push 0x7bdc
push 0
push 0
push 0x2d43
call fcn.1002ac18
add esp, 0x10
push 0
lea ecx, [ebp - 0x170]
call fcn.10009a26
cmp dword [eax], 0
je 0x100238d7
mov eax, dword [ebp - 0x834]
mov dword [ebp - 0xc5c], eax
mov eax, dword [ebp - 0x110]
cmp dword [ebp - 0x90], eax
jge 0x100238d7
mov dword [ebp - 0x410], 1
jmp 0x100238de
and dword [ebp - 0x410], 0
mov esi, dword [ebp - 0x5e8]
push 1
lea ecx, [ebp - 0x170]
call fcn.10009a26
mov eax, dword [eax]
add esi, dword [ebp + eax*4 - 0x274]
push 1
lea ecx, [ebp - 0x170]
call fcn.10009a26
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x274]
imul eax, dword [ebp - 0x410]
cmp esi, eax
jg 0x10023937
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x274], 0
je 0x10023937
mov dword [ebp - 0x6d8], 1
jmp 0x1002393e
and dword [ebp - 0x6d8], 0
cmp dword [ebp - 0x6d8], 1
jne 0x10023953
mov dword [ebp - 0x838], 1
jmp 0x1002395a
and dword [ebp - 0x838], 0
push 1
lea ecx, [ebp - 0x170]
call fcn.10009a26
push 4
pop eax
shl eax, 0
mov esi, dword [ebp + eax - 0x274]
push 1
lea ecx, [ebp - 0x170]
call fcn.10009a26
mov eax, dword [eax]
add esi, dword [ebp + eax*4 - 0x274]
mov dword [ebp - 0x418], esi
je 0x1002399e
mov dword [ebp - 0x5f0], 1
jmp 0x100239a5
and dword [ebp - 0x5f0], 0
mov eax, dword [ebp - 0x5f0]
mov dword [ebp - 0x29c], eax
jmp 0x100235cd
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x170]
call fcn.10009a21
jmp 0x1002353a
jmp 0x100234f6
jmp 0x100234c6
jmp 0x10023478
mov dword [ebp - 0xc64], 0
push 2
lea ecx, [ebp - 0x7b8]
call fcn.100099bf
mov dword [ebp - 4], 6
mov dword [ebp - 0x2f4], 0xf1a0
mov dword [ebp - 0x248], 0
jmp 0x10023a1a
mov eax, dword [ebp - 0x248]
inc eax
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 2
jge 0x10023a3c
push dword [ebp - 0x248]
lea ecx, [ebp - 0x7b8]
call fcn.10009a26
mov dword [eax], 0x6e6bacd7
jmp 0x10023a0d
mov byte [ebp - 0xaf], 0
movzx eax, byte [ebp - 0xaf]
test eax, eax
je 0x10023a66
push 1
push 0x50d6
push 0
push 0
push 0x1f1e
call fcn.1001e56b
add esp, 0x14
cmp dword [ebp - 0x2f4], 0
je 0x10023ac3
push 1
lea ecx, [ebp - 0x7b8]
call fcn.10009a26
cmp dword [eax], 1
jg 0x10023a8d
mov dword [ebp - 0x420], 1
jmp 0x10023a94
and dword [ebp - 0x420], 0
mov esi, dword [ebp - 0x2f4]
push 1
lea ecx, [ebp - 0x7b8]
call fcn.10009a26
mov ecx, dword [ebp - 0x420]
imul ecx, dword [eax]
imul esi, ecx
test esi, esi
je 0x10023ac3
mov dword [ebp - 0x750], 1
jmp 0x10023aca
and dword [ebp - 0x750], 0
mov eax, dword [ebp - 0x2f4]
imul eax, dword [ebp - 0x750]
cmp eax, 4
jne 0x10023ae8
mov dword [ebp - 0x428], 1
jmp 0x10023aef
and dword [ebp - 0x428], 0
push 0
lea ecx, [ebp - 0x7b8]
call fcn.10009a26
mov ecx, dword [ebp - 0x428]
cmp ecx, dword [eax]
jne 0x10023b12
mov dword [ebp - 0x5f8], 1
jmp 0x10023b19
and dword [ebp - 0x5f8], 0
push 0
lea ecx, [ebp - 0x7b8]
call fcn.10009a26
mov esi, dword [eax]
imul esi, dword [ebp - 0x5f8]
push 0
lea ecx, [ebp - 0x7b8]
call fcn.10009a26
mov dword [eax], esi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7b8]
call fcn.10009a21
mov dword [ebp - 0xc6c], 0xe4438bea
mov dword [ebp - 0xc74], 1
push 2
lea ecx, [ebp - 0x818]
call fcn.100099bf
mov dword [ebp - 4], 7
mov dword [ebp - 0x840], 0x18ebdb8
mov dword [ebp - 0x58], 0
jmp 0x10023b8f
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 2
jge 0x10023bab
push dword [ebp - 0x58]
lea ecx, [ebp - 0x818]
call fcn.10009a26
mov dword [eax], 1
jmp 0x10023b88
mov dword [ebp - 0x58], 0
jmp 0x10023bbb
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 1
jge 0x10023bd1
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x150], 0xcd795364
jmp 0x10023bb4
push 0
lea ecx, [ebp - 0x818]
call fcn.10009a26
and dword [eax], 0
jmp 0x10023c07
push 0
lea ecx, [ebp - 0x818]
call fcn.10009a26
mov dword [ebp - 0x430], eax
mov eax, dword [ebp - 0x430]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x430]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x818]
call fcn.10009a26
cmp dword [eax], 0xfffffff0
je 0x10023e74
mov dword [ebp - 0x34], 0x5bf25cbd
mov dword [ebp - 0x34], 0
jmp 0x10023c34
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jg 0x10023e6f
mov dword [ebp - 0x1a8], 0
jmp 0x10023c57
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 2
jge 0x10023c73
mov eax, dword [ebp - 0x1a8]
mov dword [ebp + eax*4 - 0x324], 0
jmp 0x10023c4a
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x324], 0
jmp 0x10023ca1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x324]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x324], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x324], 0
jl 0x10023e6a
push 2
lea ecx, [ebp - 0xb18]
call fcn.100099bf
mov byte [ebp - 4], 8
mov dword [ebp - 0x960], 0x78ee3f2f
mov dword [ebp - 0x208], 0
jmp 0x10023ce9
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 2
jge 0x10023d0b
push dword [ebp - 0x208]
lea ecx, [ebp - 0xb18]
call fcn.10009a26
mov dword [eax], 0x6aa1c33c
jmp 0x10023cdc
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x34]
cmp dword [ebp + eax*4 - 0x150], ecx
jl 0x10023e20
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp + eax*4 - 0x150]
mov dword [ebp + ecx*4 - 0x150], eax
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x34]
mov ecx, dword [ebp + ecx*4 - 0x150]
cmp dword [ebp + eax*4 - 0x150], ecx
jl 0x10023d54
mov dword [ebp - 0x6e0], 1
jmp 0x10023d5b
and dword [ebp - 0x6e0], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x6e0]
sub ecx, dword [ebp - 0x34]
cmp dword [ebp + eax - 0x324], ecx
jge 0x10023d7f
mov dword [ebp - 0x438], 1
jmp 0x10023d86
and dword [ebp - 0x438], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x324]
cmp dword [ebp - 0x438], eax
jle 0x10023da7
mov dword [ebp - 0x600], 1
jmp 0x10023dae
and dword [ebp - 0x600], 0
push 0
lea ecx, [ebp - 0x818]
call fcn.10009a26
mov ecx, dword [ebp - 0x600]
cmp ecx, dword [eax]
jle 0x10023dd1
mov dword [ebp - 0x2a4], 1
jmp 0x10023dd8
and dword [ebp - 0x2a4], 0
push 0
lea ecx, [ebp - 0xb18]
call fcn.10009a26
mov ecx, dword [ebp - 0x2a4]
mov dword [eax], ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x324]
cmp dword [ebp - 0x2a4], eax
jg 0x10023e13
xor eax, eax
inc eax
je 0x10023e13
mov dword [ebp - 0x440], 1
jmp 0x10023e1a
and dword [ebp - 0x440], 0
mov eax, dword [ebp - 0x960]
cmp dword [ebp - 0x840], 0
je 0x10023e48
mov byte [ebp - 0x99], 0
lea eax, [ebp - 0x99]
push eax
push 0
push 0x7ef4
call fcn.1001e551
add esp, 0xc
jmp 0x10023e56
push 0
push 0x4ba1
call fcn.1001e972
pop ecx
pop ecx
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xb18]
call fcn.10009a21
jmp 0x10023c86
jmp 0x10023c2d
jmp 0x10023be3
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x818]
call fcn.10009a21
mov dword [ebp - 0xc7c], 1
mov dword [ebp - 0x118], 0
mov dword [ebp - 0xc84], 0xec0351a9
mov dword [ebp - 0x448], 1
mov dword [ebp - 0xc8c], 0xfffffff8
mov dword [ebp - 0x848], 0x69be5411
mov dword [ebp - 0xc94], 0x5c22c920
mov dword [ebp - 0xc9c], 0
mov dword [ebp - 0xca4], 0xa8d7d2a7
mov dword [ebp - 0xcac], 0xffffffff
push 2
lea ecx, [ebp - 0xb48]
call fcn.100099bf
mov dword [ebp - 4], 9
push 0
push 0
lea eax, [ebp - 0xcb4]
push eax
push 0x19ab
push 0x21c1
push 0x3fe7
lea eax, [ebp - 0xb48]
push eax
call fcn.1001a4eb
add esp, 0x1c
mov dword [ebp - 0x118], 0
jmp 0x10023f3d
mov eax, dword [ebp - 0x118]
dec eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0xfffffff1
jl 0x1002404e
mov dword [ebp - 0xa2c], 0x1b61bab5
mov dword [ebp - 0x7a8], 8
mov dword [ebp - 0xcbc], 0x44b0bf24
mov dword [ebp - 0xcc4], 0xffffffff
mov dword [ebp - 0xccc], 0x48abb75d
mov dword [ebp - 0x338], 2
mov dword [ebp - 0x1b0], 0
jmp 0x10023f9f
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 2
jge 0x10023fbb
mov eax, dword [ebp - 0x1b0]
mov dword [ebp + eax*4 - 0xdf0], 0xd9827359
jmp 0x10023f92
push 0x263f
push 0x374a
lea eax, [ebp - 0xa2c]
push eax
lea eax, [ebp - 0x118]
push eax
push 0
push 0
lea eax, [ebp - 0x7a8]
push eax
call fcn.1001acb5
add esp, 0x1c
mov esi, dword [ebp - 0x848]
push 0
lea ecx, [ebp - 0xb48]
call fcn.10009a26
cmp esi, dword [eax]
jg 0x10024009
mov dword [ebp - 0x608], 1
jmp 0x10024010
and dword [ebp - 0x608], 0
mov eax, dword [ebp - 0x338]
dec eax
mov dword [ebp - 0x338], eax
mov eax, dword [ebp - 0x338]
mov dword [ebp - 0x448], eax
mov eax, dword [ebp - 0x7a8]
add eax, dword [ebp - 0x448]
imul eax, dword [ebp - 0x608]
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xdf0], eax
jmp 0x10023f30
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb48]
call fcn.10009a21
push 3
lea ecx, [ebp - 0xd58]
call fcn.100099bf
mov dword [ebp - 4], 0xa
push 2
lea ecx, [ebp - 0xb60]
call fcn.100099bf
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x238], 0xb641b44a
mov dword [ebp - 0x828], 1
mov dword [ebp - 0x54], 0
jmp 0x100240a6
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 3
jge 0x100240bc
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x350], 0xb5f0b101
jmp 0x1002409f
push 0x28c8
push 1
push 0x6e76
lea eax, [ebp - 0x54]
push eax
push 1
lea eax, [ebp - 0xb60]
push eax
call fcn.10014ce9
add esp, 0x18
mov dword [ebp - 0x54], 0
jmp 0x100240ed
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 1
jge 0x10024103
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x9d0], 0xffffffff
jmp 0x100240e6
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x350], 0
jbe 0x1002411e
mov dword [ebp - 0x460], 1
jmp 0x10024125
and dword [ebp - 0x460], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x350]
mov dword [ebp - 0x450], eax
push 1
lea ecx, [ebp - 0xb60]
call fcn.10009a26
mov ecx, dword [ebp - 0x450]
mov dword [eax], ecx
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x350]
cmp dword [ebp - 0x450], eax
jl 0x1002416d
mov dword [ebp - 0x6e8], 1
jmp 0x10024174
and dword [ebp - 0x6e8], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x350]
cmp dword [ebp - 0x6e8], eax
jl 0x10024194
mov dword [ebp - 0x458], 1
jmp 0x1002419b
and dword [ebp - 0x458], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x350]
add eax, dword [ebp - 0x458]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x350]
jne 0x100241c9
mov dword [ebp - 0x610], 1
jmp 0x100241d0
and dword [ebp - 0x610], 0
mov eax, dword [ebp - 0x610]
mov dword [ebp - 0x238], eax
mov eax, dword [ebp - 0x238]
cmp dword [ebp - 0x460], eax
jg 0x100241f6
mov dword [ebp - 0x758], 1
jmp 0x100241fd
and dword [ebp - 0x758], 0
imul eax, dword [ebp - 0x758], 7
test eax, eax
je 0x10024224
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x350], 0
je 0x10024224
mov dword [ebp - 0x968], 1
jmp 0x1002422b
and dword [ebp - 0x968], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x350]
mov dword [ebp - 0xcd4], eax
mov eax, dword [ebp - 0x238]
mov dword [ebp - 0x828], eax
mov eax, dword [ebp - 0x238]
add eax, 0x31728
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x350]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x9d0], eax
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xb60]
call fcn.10009a21
mov dword [ebp - 0x78c], 0x8b081589
mov dword [ebp - 0x970], 1
mov dword [ebp - 0xad8], 9
mov dword [ebp - 0xad4], 9
mov dword [ebp - 0xad0], 9
mov dword [ebp - 0xacc], 9
lea ecx, [ebp - 0x30d]
call fcn.10009a35
push eax
lea eax, [ebp - 0xac8]
push eax
lea eax, [ebp - 0xad8]
push eax
lea ecx, [ebp - 0xec0]
call fcn.10009a38
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x774]
call fcn.100099fb
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x210], 0xffffffff
mov dword [ebp - 0x860], 0
mov dword [ebp - 0x1b8], 0
jmp 0x10024321
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 2
jge 0x1002433d
mov eax, dword [ebp - 0x1b8]
mov dword [ebp + eax*4 - 0xcec], 0x3df603fa
jmp 0x10024314
mov eax, 0xfffd
test eax, eax
je 0x10024374
push 1
lea ecx, [ebp - 0x774]
call fcn.10009a26
mov esi, eax
push 0
lea ecx, [ebp - 0x774]
call fcn.10009a26
mov ecx, dword [esi]
cmp ecx, dword [eax]
jl 0x10024374
mov dword [ebp - 0x468], 1
jmp 0x1002437b
and dword [ebp - 0x468], 0
cmp dword [ebp - 0x468], 0
jne 0x1002439f
push 0
lea ecx, [ebp - 0x774]
call fcn.10009a26
cmp dword [eax], 0
jne 0x1002439f
and dword [ebp - 0x618], 0
jmp 0x100243a9
mov dword [ebp - 0x618], 1
push 2
lea ecx, [ebp - 0x774]
call fcn.10009a26
mov eax, dword [eax]
cmp eax, dword [ebp - 0x618]
je 0x100243cc
mov dword [ebp - 0x470], 1
jmp 0x100243d3
and dword [ebp - 0x470], 0
cmp dword [ebp - 0x470], 0xd238e486
je 0x100243eb
mov dword [ebp - 0x858], 1
jmp 0x100243f2
and dword [ebp - 0x858], 0
push 0
lea ecx, [ebp - 0x774]
call fcn.10009a26
push 0
lea ecx, [ebp - 0x774]
call fcn.10009a26
cmp dword [eax], 0x356a0b34
jne 0x10024420
mov dword [ebp - 0x6f0], 1
jmp 0x10024427
and dword [ebp - 0x6f0], 0
mov eax, dword [ebp - 0x210]
inc eax
mov dword [ebp - 0x210], eax
mov esi, dword [ebp - 0x210]
push 0
lea ecx, [ebp - 0x774]
call fcn.10009a26
mov eax, dword [eax]
sub eax, esi
cmp eax, dword [ebp - 0x6f0]
jle 0x1002445f
mov dword [ebp - 0x620], 1
jmp 0x10024466
and dword [ebp - 0x620], 0
mov eax, dword [ebp - 0x970]
mov dword [ebp - 0x478], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x478]
mov dword [ebp + eax - 0xcec], ecx
mov eax, dword [ebp - 0x478]
cmp eax, dword [ebp - 0x620]
jl 0x1002449f
mov dword [ebp - 0x480], 1
jmp 0x100244a6
and dword [ebp - 0x480], 0
mov eax, dword [ebp - 0x480]
mov dword [ebp - 0x860], eax
push 0x300c
push 1
lea eax, [ebp - 0x210]
push eax
push 1
push 0x4fa4
call fcn.10014dc1
add esp, 0x14
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x774]
call fcn.10009a21
mov dword [ebp - 0x1c0], 0
jmp 0x100244f7
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 3
jge 0x10024519
push dword [ebp - 0x1c0]
lea ecx, [ebp - 0xd58]
call fcn.10009a26
mov dword [eax], 1
jmp 0x100244ea
mov eax, dword [ebp - 0x78c]
inc eax
mov dword [ebp - 0x78c], eax
mov dword [ebp - 0xa04], 0x222a
cmp dword [ebp - 0xa04], 0x86d
jge 0x100248df
mov dword [ebp - 0xbe0], 1
or dword [ebp - 0xbdc], 0xffffffff
and dword [ebp - 0xbd8], 0
and dword [ebp - 0xbd4], 0
mov dword [ebp - 0xbd0], 1
mov dword [ebp - 0xbcc], 1
or dword [ebp - 0xbc8], 0xffffffff
or dword [ebp - 0xbc4], 0xffffffff
and dword [ebp - 0xbc0], 0
and dword [ebp - 0xbbc], 0
mov dword [ebp - 0xbb8], 1
or dword [ebp - 0xbb4], 0xffffffff
mov dword [ebp - 0xbb0], 1
or dword [ebp - 0xbac], 0xffffffff
mov dword [ebp - 0xba8], 1
or dword [ebp - 0xba4], 0xffffffff
mov byte [ebp - 0x39], 0
lea eax, [ebp - 0x38]
push eax
push 0x10007758
call fcn.1004c09b
pop ecx
pop ecx
and dword [ebp - 0x260], 0
jmp 0x100245ec
mov eax, dword [ebp - 0x260]
inc eax
mov dword [ebp - 0x260], eax
mov eax, dword [ebp - 0x260]
cmp eax, dword [ebp - 0x38]
jge 0x10024614
imul eax, dword [ebp - 0x260], 0xb
lea eax, [ebp + eax - 0x1068]
push eax
push 0x10007828
call fcn.1004c09b
pop ecx
pop ecx
jmp 0x100245df
and dword [ebp - 0x1c8], 0
jmp 0x1002462a
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
mov eax, dword [ebp - 0x1c8]
cmp eax, dword [ebp - 0x38]
jge 0x10024652
imul eax, dword [ebp - 0x1c8], 0xb
lea eax, [ebp + eax - 0xf90]
push eax
push 0x10007828
call fcn.1004c09b
pop ecx
pop ecx
jmp 0x1002461d
and dword [ebp - 0x140], 0
jmp 0x10024668
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
mov eax, dword [ebp - 0x140]
cmp eax, dword [ebp - 0x38]
jge 0x100246d6
and dword [ebp - 0x120], 0
jmp 0x10024689
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
mov eax, dword [ebp - 0x120]
cmp eax, dword [ebp - 0x38]
jge 0x100246d4
imul eax, dword [ebp - 0x140], 0xb
lea eax, [ebp + eax - 0xf90]
mov ecx, dword [ebp - 0x120]
movsx eax, byte [eax + ecx]
cmp eax, 0x78
jne 0x100246d2
imul eax, dword [ebp - 0x140], 0xb
lea eax, [ebp + eax - 0x1068]
mov ecx, dword [ebp - 0x120]
movsx eax, byte [eax + ecx]
cmp eax, 0x2a
jne 0x100246d2
mov byte [ebp - 0x39], 1
jmp 0x1002467c
jmp 0x1002465b
movzx eax, byte [ebp - 0x39]
test eax, eax
je 0x10024759
and dword [ebp - 0x160], 0
jmp 0x100246f4
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
mov eax, dword [ebp - 0x160]
cmp eax, dword [ebp - 0x38]
jge 0x10024759
and dword [ebp - 0x128], 0
jmp 0x10024715
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
mov eax, dword [ebp - 0x128]
cmp eax, dword [ebp - 0x38]
jge 0x10024757
imul eax, dword [ebp - 0x160], 0xb
lea eax, [ebp + eax - 0x1068]
mov ecx, dword [ebp - 0x128]
movsx eax, byte [eax + ecx]
cmp eax, 0x2a
jne 0x10024755
imul eax, dword [ebp - 0x160], 0xb
lea eax, [ebp + eax - 0xf90]
mov ecx, dword [ebp - 0x128]
mov byte [eax + ecx], 0x2a
jmp 0x10024708
jmp 0x100246e7
and dword [ebp - 0xe4], 0
jmp 0x1002476f
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
mov eax, dword [ebp - 0xe4]
cmp eax, dword [ebp - 0x38]
jge 0x100248a1
and dword [ebp - 0xd4], 0
jmp 0x10024794
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
mov eax, dword [ebp - 0xd4]
cmp eax, dword [ebp - 0x38]
jge 0x1002489c
imul eax, dword [ebp - 0xe4], 0xb
lea eax, [ebp + eax - 0xf90]
mov ecx, dword [ebp - 0xd4]
movsx eax, byte [eax + ecx]
cmp eax, 0x78
jne 0x10024897
and dword [ebp - 0x2b4], 0
and dword [ebp - 0x148], 0
jmp 0x100247e1
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 8
jge 0x10024877
mov eax, dword [ebp - 0x148]
mov ecx, dword [ebp - 0xe4]
add ecx, dword [ebp + eax*4 - 0xbe0]
mov dword [ebp - 0x2ac], ecx
mov eax, dword [ebp - 0x148]
mov ecx, dword [ebp - 0xd4]
add ecx, dword [ebp + eax*4 - 0xbc0]
mov dword [ebp - 0x2fc], ecx
cmp dword [ebp - 0x2ac], 0
jl 0x10024872
mov eax, dword [ebp - 0x2ac]
cmp eax, dword [ebp - 0x38]
jge 0x10024872
cmp dword [ebp - 0x2fc], 0
jl 0x10024872
mov eax, dword [ebp - 0x2fc]
cmp eax, dword [ebp - 0x38]
jge 0x10024872
imul eax, dword [ebp - 0x2ac], 0xb
lea eax, [ebp + eax - 0x1068]
mov ecx, dword [ebp - 0x2fc]
movsx eax, byte [eax + ecx]
cmp eax, 0x2a
jne 0x10024872
mov eax, dword [ebp - 0x2b4]
inc eax
mov dword [ebp - 0x2b4], eax
jmp 0x100247d4
mov eax, dword [ebp - 0x2b4]
add eax, 0x30
imul ecx, dword [ebp - 0xe4], 0xb
lea ecx, [ebp + ecx - 0xf90]
mov edx, dword [ebp - 0xd4]
mov byte [ecx + edx], al
jmp 0x10024787
jmp 0x10024762
and dword [ebp - 0x218], 0
jmp 0x100248b7
mov eax, dword [ebp - 0x218]
inc eax
mov dword [ebp - 0x218], eax
mov eax, dword [ebp - 0x218]
cmp eax, dword [ebp - 0x38]
jge 0x100248df
imul eax, dword [ebp - 0x218], 0xb
lea eax, [ebp + eax - 0xf90]
push eax
push 0x1000782c
call fcn.1004c2b6
pop ecx
pop ecx
jmp 0x100248aa
push 1
lea ecx, [ebp - 0xd48]
call fcn.100099bf
mov byte [ebp - 4], 0xd
push 4
lea ecx, [ebp - 0xa18]
call fcn.100099bf
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x130], 0
jmp 0x1002491a
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 1
jge 0x1002493c
push dword [ebp - 0x130]
lea ecx, [ebp - 0xd48]
call fcn.10009a26
mov dword [eax], 0xe0bcd8c4
jmp 0x1002490d
push 0xdbd
push 1
lea eax, [ebp - 0xa18]
push eax
push 0
lea eax, [ebp - 0x130]
push eax
push 0x4a65
push 0xc09
push 0x2016
call fcn.1001a04d
add esp, 0x20
mov byte [ebp - 0x71], 0
movzx eax, byte [ebp - 0x71]
test eax, eax
je 0x1002498c
push 0x7504
push 0
push 1
push 0x32d3
call fcn.1002ac18
add esp, 0x10
push 1
lea ecx, [ebp - 0xa18]
call fcn.10009a26
and dword [eax], 0
jmp 0x100249c2
push 1
lea ecx, [ebp - 0xa18]
call fcn.10009a26
mov dword [ebp - 0x488], eax
mov eax, dword [ebp - 0x488]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x488]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0xa18]
call fcn.10009a26
cmp dword [eax], 0
jg 0x10024ae4
mov dword [ebp - 0x1d0], 0x23ed15de
mov dword [ebp - 0x1d0], 0
jmp 0x100249fb
mov eax, dword [ebp - 0x1d0]
inc eax
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 0
jg 0x10024aac
mov dword [ebp - 0x240], 0xfffffffd
mov dword [ebp - 0x240], 0
jmp 0x10024a2b
mov eax, dword [ebp - 0x240]
inc eax
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 0
jg 0x10024aa7
mov byte [ebp - 0xb3], 0
movzx eax, byte [ebp - 0xb3]
test eax, eax
je 0x10024a86
push 1
push 0x687a
push 0
push 1
push 0x6db7
push 0x2515
push 0x4be6
push 0x6769
push 0x6fab
push 0x3003
push 0x2392
push 0x3639
push 0x69dd
call fcn.1001a2ef
add esp, 0x34
mov byte [ebp - 0xab], 0
movzx eax, byte [ebp - 0xab]
test eax, eax
je 0x10024aa2
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
jmp 0x10024a1e
jmp 0x100249ee
mov byte [ebp - 0xa1], 0
push 0x7abb
lea eax, [ebp - 0xa1]
push eax
push 0x47c3
push 0x2879
push 0x4d8d
push 1
push 0
push 0x2914
call fcn.10015125
add esp, 0x20
jmp 0x1002499e
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0xa18]
call fcn.10009a21
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xd48]
call fcn.10009a21
mov byte [ebp - 0xb5], 0
mov dword [ebp - 0x628], 0
mov dword [ebp - 0x490], 0xfffffffe
mov dword [ebp - 0x868], 0xffffffff
mov dword [ebp - 0x978], 0x41b6ba00
push 0
lea eax, [ebp - 0x490]
push eax
push 0x747b
push 0x424b
lea eax, [ebp - 0x628]
push eax
call fcn.1001ed20
add esp, 0x14
lea eax, [ebp - 0x868]
push eax
push 0
push 0x3a1f
lea eax, [ebp - 0x628]
push eax
lea eax, [ebp - 0x490]
push eax
lea eax, [ebp - 0x978]
push eax
call fcn.1001ec93
add esp, 0x18
movzx eax, byte [ebp - 0xb5]
test eax, eax
je 0x10024bd5
mov dword [ebp - 0x878], 0x9fdf99ff
mov dword [ebp - 0x870], 0xfffffffb
mov dword [ebp - 0x9d8], 0xfffffffc
lea eax, [ebp - 0x870]
push eax
lea eax, [ebp - 0x9d8]
push eax
push 0
lea eax, [ebp - 0x878]
push eax
call fcn.1002d669
add esp, 0x10
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ClientToScreen]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd58]
call fcn.10009a21
mov dword [ebp - 0x1d8], 0xfffffffd
mov dword [ebp - 0x980], 0x94b2ab76
mov dword [ebp - 0xcdc], 0xc1031c36
mov dword [ebp - 0xce4], 0xfffffff7
mov dword [ebp - 0xcf0], 1
mov dword [ebp - 0xcf8], 0xc7756237
mov dword [ebp - 0xd00], 0x1871d0c0
mov dword [ebp - 0xd08], 0x8278b721
mov dword [ebp - 0xd10], 0xeebcb174
mov dword [ebp - 0x880], 2
mov dword [ebp - 0x64], 0
jmp 0x10024c58
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 3
jge 0x10024c6e
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0xe80], 4
jmp 0x10024c51
mov dword [ebp - 0x64], 0
jmp 0x10024c7e
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 3
jge 0x10024c94
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0xe68], 0xffffffff
jmp 0x10024c77
mov dword [ebp - 0x1d8], 0
jmp 0x10024cad
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 3
jl 0x10025096
mov dword [ebp - 0x158], 2
mov dword [ebp - 0x4b0], 0x52aa0a5d
mov dword [ebp - 0xd18], 2
mov dword [ebp - 0xdb0], 0xfffffffd
mov dword [ebp - 0xdb8], 0xfffffff7
mov dword [ebp - 0xdc0], 0xfffffff6
mov dword [ebp - 0xdf4], 0x25417612
mov dword [ebp - 0xdfc], 0
mov dword [ebp - 0xa1c], 1
mov dword [ebp - 0xe04], 0x9efec1a2
mov dword [ebp - 0x888], 0x6dfe535
push 1
lea ecx, [ebp - 0xb90]
call fcn.100099bf
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x328], 0
mov dword [ebp - 0x220], 0
jmp 0x10024d5f
mov eax, dword [ebp - 0x220]
inc eax
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 1
jge 0x10024d81
push dword [ebp - 0x220]
lea ecx, [ebp - 0xb90]
call fcn.10009a26
mov dword [eax], 0xec6f9132
jmp 0x10024d52
mov byte [ebp - 0xa9], 0
movzx eax, byte [ebp - 0xa9]
test eax, eax
je 0x10024da1
push 0x7909
push 0
call fcn.1002ab61
pop ecx
pop ecx
mov dword [ebp - 0x158], 2
jmp 0x10024dba
mov eax, dword [ebp - 0x158]
dec eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 0
jl 0x10025082
mov dword [ebp - 0x2bc], 0xffffffff
mov dword [ebp - 0x630], 0xfffffffa
mov dword [ebp - 0x988], 0
mov dword [ebp - 0xbe4], 7
mov dword [ebp - 0x1e0], 0
mov dword [ebp - 0x4b8], 0x67bbda73
push 4
lea ecx, [ebp - 0xb78]
call fcn.100099bf
mov byte [ebp - 4], 0x10
push 0x6bf6
push 0
push 0x3330
lea eax, [ebp - 0xb78]
push eax
lea eax, [ebp - 0xe14]
push eax
call fcn.1001e993
add esp, 0x14
mov byte [ebp - 0xb7], 0
movzx eax, byte [ebp - 0xb7]
test eax, eax
je 0x10024e90
push 0
push 0x4132
push 1
push 0x69b0
push 0x4101
push 0x70f5
push 0x748a
push 0x7ac0
push 0x151
push 0x6d0b
push 0x687
push 0x6d34
push 0x5dd7
push 0xed6
call fcn.1001ba26
add esp, 0x38
cmp dword [ebp - 0x980], 0
jne 0x1002502b
mov eax, dword [ebp - 0x328]
inc eax
mov dword [ebp - 0x328], eax
mov eax, dword [ebp - 0x328]
sub eax, dword [ebp - 0x880]
jne 0x10024eca
cmp dword [ebp - 0x1e0], 0
jne 0x10024eca
and dword [ebp - 0x498], 0
jmp 0x10024ed4
mov dword [ebp - 0x498], 1
push 0
lea ecx, [ebp - 0xb90]
call fcn.10009a26
cmp dword [eax], 0xffff
jbe 0x10024efb
cmp dword [ebp - 0xa1c], 0
jne 0x10024efb
and dword [ebp - 0x6f8], 0
jmp 0x10024f05
mov dword [ebp - 0x6f8], 1
mov eax, dword [ebp - 0x6f8]
mov dword [ebp - 0x630], eax
mov eax, dword [ebp - 0x498]
sub eax, dword [ebp - 0x630]
jne 0x10024f31
cmp dword [ebp - 0x1e0], 0
jne 0x10024f31
cmp dword [ebp - 0x4b8], 0
je 0x10024f46
cmp dword [ebp - 0x888], 0
je 0x10024f46
mov dword [ebp - 0x4a0], 1
jmp 0x10024f4d
and dword [ebp - 0x4a0], 0
cmp dword [ebp - 0x4a0], 0xfffffffd
jg 0x10024f62
mov dword [ebp - 0x760], 1
jmp 0x10024f69
and dword [ebp - 0x760], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x760]
sub ecx, dword [ebp + eax - 0xe68]
push 4
pop eax
shl eax, 1
imul ecx, dword [ebp + eax - 0xe80]
cmp dword [ebp - 0x158], ecx
je 0x10024f9c
mov dword [ebp - 0x4a8], 1
jmp 0x10024fa3
and dword [ebp - 0x4a8], 0
cmp dword [ebp - 0x4a8], 1
jb 0x10024fb8
mov dword [ebp - 0x638], 1
jmp 0x10024fbf
and dword [ebp - 0x638], 0
mov eax, dword [ebp - 0x2bc]
add eax, dword [ebp - 0x638]
mov dword [ebp - 0x4b0], eax
mov eax, dword [ebp - 0x4b0]
mov ecx, dword [ebp - 0x2bc]
dec ecx
mov dword [ebp - 0x2bc], ecx
test eax, eax
jne 0x10024ffa
mov eax, 0x128b80bb
test eax, eax
jne 0x10024ffa
and dword [ebp - 0x304], 0
jmp 0x10025004
mov dword [ebp - 0x304], 1
push 0
lea ecx, [ebp - 0xb78]
call fcn.10009a26
mov ecx, dword [ebp - 0x304]
mov dword [eax], ecx
cmp dword [ebp - 0x304], 0
jne 0x1002502b
and dword [ebp - 0x700], 0
jmp 0x10025035
mov dword [ebp - 0x700], 1
mov eax, dword [ebp - 0x700]
mov dword [ebp - 0x1e0], eax
mov eax, dword [ebp - 0x4b8]
cmp dword [ebp - 0x1e0], eax
jg 0x1002505b
mov dword [ebp - 0x640], 1
jmp 0x10025062
and dword [ebp - 0x640], 0
mov eax, dword [ebp - 0x640]
mov dword [ebp - 0x988], eax
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0xb78]
call fcn.10009a21
jmp 0x10024dad
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb90]
call fcn.10009a21
jmp 0x10024ca0
mov eax, dword [ebp - 0x1ec]
mov eax, dword [eax + 4]
mov dword [ebp - 0x694], eax
mov dword [ebp - 0x2c4], 0xf8256a9e
mov dword [ebp - 0x10c], 0
mov dword [ebp - 0x9f0], 0x4b541145
mov dword [ebp - 0x9e0], 0xd8143836
mov dword [ebp - 0x8a8], 0xfffffffd
mov dword [ebp - 0x708], 0x24b5e495
mov dword [ebp - 0x890], 0xde57413
mov dword [ebp - 0xdc], 0xb80ebbd4
mov dword [ebp - 0x2cc], 0xfffffff9
mov dword [ebp - 0xe1c], 4
mov dword [ebp - 0x30c], 9
mov dword [ebp - 0x898], 0xcee24b2e
mov dword [ebp - 0x8a0], 0
mov dword [ebp - 0xd94], 0x7374fd52
mov dword [ebp - 0xbf0], 0xfffffff6
mov dword [ebp - 0x990], 0xdda8db88
mov dword [ebp - 0x2d4], 0xf2f37fc0
mov dword [ebp - 0xbf4], 0x752e
mov dword [ebp - 0x4c0], 6
mov dword [ebp - 0xf4], 0xffffffff
mov dword [ebp - 0x8b0], 0xffff
mov eax, dword [ebp - 0x2c4]
mov dword [ebp - 0x10c], eax
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0xda4], eax
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
mov dword [ebp - 0x4c0], 0x7b38
mov eax, dword [ebp - 0xf4]
cmp dword [ebp - 0x4c0], eax
jne 0x100251c0
mov dword [ebp - 0x794], 1
jmp 0x100251c7
and dword [ebp - 0x794], 0
mov eax, dword [ebp - 0x794]
sub eax, dword [ebp - 0xdc]
je 0x100251ea
cmp dword [ebp - 0x30c], 0
je 0x100251ea
mov dword [ebp - 0x4c8], 1
jmp 0x100251f1
and dword [ebp - 0x4c8], 0
mov eax, dword [ebp - 0x4c8]
mov dword [ebp - 0x2cc], eax
mov eax, dword [ebp - 0x30c]
cmp dword [ebp - 0x2cc], eax
jg 0x10025217
mov dword [ebp - 0x648], 1
jmp 0x1002521e
and dword [ebp - 0x648], 0
cmp dword [ebp - 0x648], 0x36a77d77
jne 0x10025231
cmp dword [ebp - 0xdc], 0
xor eax, eax
inc eax
cmp eax, 0x4ac
jne 0x10025247
mov dword [ebp - 0x4d0], 1
jmp 0x1002524e
and dword [ebp - 0x4d0], 0
imul eax, dword [ebp - 0x4d0], 0xffff
mov dword [ebp - 0x708], eax
mov eax, dword [ebp - 0x890]
mov dword [ebp - 0xbf8], eax
mov eax, dword [ebp - 0x708]
cmp dword [ebp - 0x2c4], eax
jle 0x1002528d
cmp dword [ebp - 0x9e0], 0
je 0x1002528d
mov dword [ebp - 0x4d8], 1
jmp 0x10025294
and dword [ebp - 0x4d8], 0
mov eax, dword [ebp - 0x2c4]
imul eax, dword [ebp - 0x4d8]
test eax, eax
je 0x10025672
mov dword [ebp - 0x24], 0
push 2
lea ecx, [ebp - 0xa6c]
call fcn.100099bf
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x518], 0xc855
push 3
lea ecx, [ebp - 0xa78]
call fcn.100099bf
mov byte [ebp - 4], 0x12
lea eax, [ebp - 0xa6c]
push eax
push 0
lea eax, [ebp - 0x100]
push eax
call fcn.1002db79
add esp, 0xc
mov dword [ebp - 0x100], 0
jmp 0x10025310
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 3
jge 0x10025332
push dword [ebp - 0x100]
lea ecx, [ebp - 0xa78]
call fcn.10009a26
mov dword [eax], 0xc8a60b10
jmp 0x10025303
mov eax, dword [ebp - 0x898]
mov dword [ebp - 0xcf4], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0xc00], eax
mov eax, dword [ebp - 0x24]
imul eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x24]
jne 0x1002535f
mov dword [ebp - 0x650], 1
jmp 0x10025366
and dword [ebp - 0x650], 0
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x650]
jle 0x1002537d
mov dword [ebp - 0x4e0], 1
jmp 0x10025384
and dword [ebp - 0x4e0], 0
imul eax, dword [ebp - 0x4e0], 0x3df1
cmp eax, dword [ebp - 0x24]
jle 0x1002539f
mov dword [ebp - 0x344], 1
jmp 0x100253a6
and dword [ebp - 0x344], 0
push 0
lea ecx, [ebp - 0xa6c]
call fcn.10009a26
mov ecx, dword [ebp - 0x344]
mov dword [eax], ecx
mov eax, dword [ebp - 0x344]
sub eax, dword [ebp - 0x2d4]
cmp eax, dword [ebp - 0x990]
jge 0x100253db
mov dword [ebp - 0x768], 1
jmp 0x100253e2
and dword [ebp - 0x768], 0
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x768]
cmp eax, 0xffff
je 0x100253fe
mov dword [ebp - 0x4e8], 1
jmp 0x10025405
and dword [ebp - 0x4e8], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x4e8], eax
jl 0x1002541c
mov dword [ebp - 0x658], 1
jmp 0x10025423
and dword [ebp - 0x658], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x658], eax
jne 0x10025440
mov eax, 0x9f13
test eax, eax
jne 0x10025440
and dword [ebp - 0x4f0], 0
jmp 0x1002544a
mov dword [ebp - 0x4f0], 1
mov eax, dword [ebp - 0x24]
imul eax, dword [ebp - 0x4f0]
cmp eax, dword [ebp - 0x24]
jne 0x10025465
mov dword [ebp - 0x710], 1
jmp 0x1002546c
and dword [ebp - 0x710], 0
cmp dword [ebp - 0x710], 0xfff7
jne 0x10025484
mov dword [ebp - 0x4f8], 1
jmp 0x1002548b
and dword [ebp - 0x4f8], 0
mov eax, dword [ebp - 0x4f8]
add eax, 0x10003
jne 0x100254a4
mov dword [ebp - 0x660], 1
jmp 0x100254ab
and dword [ebp - 0x660], 0
cmp dword [ebp - 0x660], 0x739c36de
jge 0x100254c3
mov dword [ebp - 0x500], 1
jmp 0x100254ca
and dword [ebp - 0x500], 0
mov eax, dword [ebp - 0xf4]
cmp dword [ebp - 0x500], eax
je 0x100254ea
cmp dword [ebp - 0x8a0], 0
jne 0x100254ea
and dword [ebp - 0x79c], 0
jmp 0x100254f4
mov dword [ebp - 0x79c], 1
mov eax, dword [ebp - 0xdc]
cmp dword [ebp - 0x79c], eax
jle 0x1002550e
mov dword [ebp - 0x508], 1
jmp 0x10025515
and dword [ebp - 0x508], 0
mov eax, dword [ebp - 0x9f0]
cmp dword [ebp - 0x508], eax
jle 0x10025538
cmp dword [ebp - 0xf4], 0
je 0x10025538
mov dword [ebp - 0x668], 1
jmp 0x1002553f
and dword [ebp - 0x668], 0
mov eax, dword [ebp - 0x668]
neg eax
je 0x1002555e
mov eax, 0xffff
test eax, eax
je 0x1002555e
mov dword [ebp - 0x510], 1
jmp 0x10025565
and dword [ebp - 0x510], 0
mov eax, dword [ebp - 0x518]
cmp dword [ebp - 0x510], eax
je 0x1002557f
mov dword [ebp - 0x718], 1
jmp 0x10025586
and dword [ebp - 0x718], 0
mov eax, dword [ebp - 0x718]
mov dword [ebp - 0xdc], eax
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0xe18], eax
mov eax, dword [ebp - 0x8a8]
mov dword [ebp - 0xc08], eax
mov eax, dword [ebp - 0x518]
cmp dword [ebp - 0x2d4], eax
jne 0x100255c4
mov dword [ebp - 0x998], 1
jmp 0x100255cb
and dword [ebp - 0x998], 0
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0xcfc], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0xc10], eax
mov dword [ebp - 0x10c], 1
mov esi, dword [ebp - 0x10c]
imul esi, dword [ebp - 0x24]
push 0
lea ecx, [ebp - 0xa78]
call fcn.10009a26
mov dword [eax], esi
push 0
lea eax, [ebp - 0x8b0]
push eax
push 1
push 1
lea eax, [ebp - 0xa78]
push eax
lea eax, [ebp - 0x10c]
push eax
push 0xe56
lea eax, [ebp - 0x2cc]
push eax
lea eax, [ebp - 0xa6c]
push eax
lea eax, [ebp - 0x30c]
push eax
lea eax, [ebp - 0xf4]
push eax
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0x2d4]
push eax
call fcn.1001a2ef
add esp, 0x34
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0xa78]
call fcn.10009a21
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa6c]
call fcn.10009a21
jmp 0x10025692
mov dword [ebp - 0x9e8], 0x99d3
mov dword [ebp - 0x8b8], 0x87245417
mov eax, dword [ebp - 0x9e8]
mov dword [ebp - 0x8b8], eax
mov dword [ebp - 0x10], 0x1cecb457
mov dword [ebp - 0x36c], 0xfffffffe
mov dword [ebp - 0x48], 1
mov dword [ebp - 0x3ac], 0x8afbb1ca
mov dword [ebp - 0x314], 0x7cad959f
mov dword [ebp - 0xdac], 0x26e329cc
push 1
lea ecx, [ebp - 0xd78]
call fcn.100099bf
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x50], 0
jmp 0x100256ec
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 2
jge 0x10025702
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x8c], 6
jmp 0x100256e5
mov dword [ebp - 0x50], 0
jmp 0x10025712
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 2
jge 0x10025728
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0xa88], 0x891f
jmp 0x1002570b
push 1
push 0x23d9
push 0x4c0a
push 0x27a0
push 0x5f7
lea eax, [ebp - 0xd78]
push eax
lea eax, [ebp - 0x50]
push eax
push 0x5acd
push 1
call fcn.10014f20
add esp, 0x24
mov byte [ebp - 0xb9], 0
movzx eax, byte [ebp - 0xb9]
test eax, eax
je 0x10025772
push 0
call fcn.1001ecca
pop ecx
mov dword [ebp - 0x10], 0
jmp 0x10025782
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 1
jg 0x1002605c
mov dword [ebp - 0x114], 0xffff
push 1
lea ecx, [ebp - 0x7c4]
call fcn.100099bf
mov byte [ebp - 4], 0x14
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0x384], 0xfffffff8
mov dword [ebp - 0x2dc], 0xffff
mov dword [ebp - 0x9a8], 0xb83
mov dword [ebp - 0x258], 0
jmp 0x100257e8
mov eax, dword [ebp - 0x258]
inc eax
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 1
jge 0x1002580a
push dword [ebp - 0x258]
lea ecx, [ebp - 0x7c4]
call fcn.10009a26
mov dword [eax], 0xad479ea4
jmp 0x100257db
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x8c]
sub eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x114]
jg 0x10025848
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x8c], 0
jne 0x10025848
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x8c], 0
jne 0x10025848
and dword [ebp - 0x670], 0
jmp 0x10025852
mov dword [ebp - 0x670], 1
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x8c]
add eax, dword [ebp - 0x670]
jne 0x10025873
cmp dword [ebp - 0x10], 0
jne 0x10025873
and dword [ebp - 0x520], 0
jmp 0x1002587d
mov dword [ebp - 0x520], 1
mov eax, dword [ebp - 0x114]
cmp dword [ebp - 0x520], eax
jg 0x10025897
mov dword [ebp - 0x778], 1
jmp 0x1002589e
and dword [ebp - 0x778], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x8c]
add eax, dword [ebp - 0x778]
sub eax, dword [ebp - 0x114]
cmp eax, 0x6749
jge 0x100258ca
mov dword [ebp - 0x528], 1
jmp 0x100258d1
and dword [ebp - 0x528], 0
cmp dword [ebp - 0x528], 0x7a9b
jl 0x100258e9
mov dword [ebp - 0x678], 1
jmp 0x100258f0
and dword [ebp - 0x678], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x678], eax
je 0x10025907
mov dword [ebp - 0x530], 1
jmp 0x1002590e
and dword [ebp - 0x530], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x8c]
cmp dword [ebp - 0x530], eax
jle 0x1002592f
mov dword [ebp - 0x720], 1
jmp 0x10025936
and dword [ebp - 0x720], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x8c]
cmp dword [ebp - 0x720], eax
je 0x10025954
mov dword [ebp - 0x538], 1
jmp 0x1002595b
and dword [ebp - 0x538], 0
cmp dword [ebp - 0x538], 0xf961
jge 0x10025973
mov dword [ebp - 0x680], 1
jmp 0x1002597a
and dword [ebp - 0x680], 0
cmp dword [ebp - 0x680], 0
jae 0x1002598f
mov dword [ebp - 0x540], 1
jmp 0x10025996
and dword [ebp - 0x540], 0
cmp dword [ebp - 0x540], 0x5a51
jl 0x100259ae
mov dword [ebp - 0x9a0], 1
jmp 0x100259b5
and dword [ebp - 0x9a0], 0
mov eax, dword [ebp - 0x36c]
mov dword [ebp - 0xc18], eax
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x8c], 0
jne 0x100259da
mov dword [ebp - 0x7a4], 1
jmp 0x100259e1
and dword [ebp - 0x7a4], 0
cmp dword [ebp - 0x7a4], 1
jle 0x100259f6
mov dword [ebp - 0x548], 1
jmp 0x100259fd
and dword [ebp - 0x548], 0
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x548], eax
jg 0x10025a14
mov dword [ebp - 0x688], 1
jmp 0x10025a1b
and dword [ebp - 0x688], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x8c]
imul eax, dword [ebp - 0x688]
cmp eax, 0xfff8
jne 0x10025a3f
mov dword [ebp - 0x550], 1
jmp 0x10025a46
and dword [ebp - 0x550], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x8c]
cmp eax, dword [ebp - 0x550]
jle 0x10025a64
mov dword [ebp - 0x330], 1
jmp 0x10025a6b
and dword [ebp - 0x330], 0
push 0
lea ecx, [ebp - 0x7c4]
call fcn.10009a26
mov ecx, dword [ebp - 0x330]
mov dword [eax], ecx
cmp dword [ebp - 0x330], 8
jne 0x10025ac3
mov dword [ebp - 0x48], 0
jmp 0x10025a99
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 1
jg 0x10025abe
mov byte [ebp - 0xac], 0
movzx eax, byte [ebp - 0xac]
test eax, eax
je 0x10025abc
push 0
push 1
call fcn.1001adea
pop ecx
pop ecx
jmp 0x10025a92
jmp 0x10026031
mov dword [ebp - 0xc4], 0x56e
mov dword [ebp - 0x364], 0
mov dword [ebp - 0xd04], 0x725ea9b8
mov dword [ebp - 0xc20], 0x2d6847a7
mov dword [ebp - 0x8d0], 0xffffffff
or dword [ebp - 0xb00], 0xffffffff
or dword [ebp - 0xafc], 0xffffffff
or dword [ebp - 0xaf8], 0xffffffff
or dword [ebp - 0xaf4], 0xffffffff
lea ecx, [ebp - 0x331]
call fcn.10009a35
push eax
lea eax, [ebp - 0xaf0]
push eax
lea eax, [ebp - 0xb00]
push eax
lea ecx, [ebp - 0xea0]
call fcn.10009a38
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xd68]
call fcn.100099fb
mov byte [ebp - 4], 0x15
mov dword [ebp - 0x1e8], 0
jmp 0x10025b63
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 2
jge 0x10025b7f
mov eax, dword [ebp - 0x1e8]
mov dword [ebp + eax*4 - 0xa80], 1
jmp 0x10025b56
mov eax, 0xc911
test eax, eax
je 0x10025ba6
cmp dword [ebp - 0xc4], 0
je 0x10025ba6
mov eax, 0xfffb
test eax, eax
je 0x10025ba6
mov dword [ebp - 0x728], 1
jmp 0x10025bad
and dword [ebp - 0x728], 0
cmp dword [ebp - 0x728], 0xca2
jne 0x10025bc5
mov dword [ebp - 0x558], 1
jmp 0x10025bcc
and dword [ebp - 0x558], 0
mov eax, dword [ebp - 0x558]
mov dword [ebp - 0xc8], eax
mov eax, dword [ebp - 0xc8]
cmp dword [ebp - 0xc4], eax
jl 0x10025bf2
mov dword [ebp - 0x690], 1
jmp 0x10025bf9
and dword [ebp - 0x690], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x690], eax
jg 0x10025c10
mov dword [ebp - 0x560], 1
jmp 0x10025c17
and dword [ebp - 0x560], 0
mov eax, dword [ebp - 0xc4]
cmp dword [ebp - 0x560], eax
jge 0x10025c31
mov dword [ebp - 0x788], 1
jmp 0x10025c38
and dword [ebp - 0x788], 0
cmp dword [ebp - 0x788], 0xfffffffc
jl 0x10025c4d
mov dword [ebp - 0x8c0], 1
jmp 0x10025c54
and dword [ebp - 0x8c0], 0
or eax, 0xffffffff
jne 0x10025c6b
cmp dword [ebp - 0x114], 0
jne 0x10025c6b
and dword [ebp - 0x568], 0
jmp 0x10025c75
mov dword [ebp - 0x568], 1
mov eax, dword [ebp - 0x568]
sub eax, dword [ebp - 0xc4]
jne 0x10025c98
cmp dword [ebp - 0x384], 0
je 0x10025c98
mov dword [ebp - 0x9f8], 1
jmp 0x10025c9f
and dword [ebp - 0x9f8], 0
push 0
lea ecx, [ebp - 0x7c4]
call fcn.10009a26
push 0
lea ecx, [ebp - 0x7c4]
call fcn.10009a26
mov esi, eax
push 0
lea ecx, [ebp - 0x7c4]
call fcn.10009a26
mov ecx, dword [esi]
cmp ecx, dword [eax]
jle 0x10025cda
mov dword [ebp - 0x8c8], 1
jmp 0x10025ce1
and dword [ebp - 0x8c8], 0
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0xdf8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x8c]
mov dword [ebp - 0xc28], eax
cmp dword [ebp - 0xc8], 0
je 0x10025d1b
mov eax, 0x8526
test eax, eax
je 0x10025d1b
mov dword [ebp - 0x698], 1
jmp 0x10025d22
and dword [ebp - 0x698], 0
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x698], eax
jl 0x10025d39
mov dword [ebp - 0x570], 1
jmp 0x10025d40
and dword [ebp - 0x570], 0
cmp dword [ebp - 0x570], 0xd0f2
jg 0x10025d58
mov dword [ebp - 0x730], 1
jmp 0x10025d5f
and dword [ebp - 0x730], 0
mov eax, dword [ebp - 0x48]
add eax, dword [ebp - 0x730]
mov ecx, dword [ebp - 0x10]
cmp eax, dword [ebp + ecx*4 - 0x8c]
jg 0x10025d80
mov dword [ebp - 0x578], 1
jmp 0x10025d87
and dword [ebp - 0x578], 0
mov eax, dword [ebp - 0x3ac]
cmp dword [ebp - 0x578], eax
jge 0x10025da1
mov dword [ebp - 0x6a0], 1
jmp 0x10025da8
and dword [ebp - 0x6a0], 0
mov eax, dword [ebp - 0xc4]
cmp dword [ebp - 0x6a0], eax
je 0x10025dc2
mov dword [ebp - 0x580], 1
jmp 0x10025dc9
and dword [ebp - 0x580], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x8c]
cmp dword [ebp - 0x580], eax
jge 0x10025ded
cmp dword [ebp - 0xc4], 0
jne 0x10025ded
and dword [ebp - 0x7ac], 0
jmp 0x10025df7
mov dword [ebp - 0x7ac], 1
cmp dword [ebp - 0x7ac], 0xfffffffd
ja 0x10025e0c
mov dword [ebp - 0x588], 1
jmp 0x10025e13
and dword [ebp - 0x588], 0
mov eax, dword [ebp - 0x114]
imul eax, dword [ebp - 0x588]
mov dword [ebp - 0x314], eax
push 1
lea ecx, [ebp - 0xd68]
call fcn.10009a26
mov dword [ebp - 0x6a8], eax
mov eax, dword [ebp - 0x6a8]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x6a8]
mov dword [ecx], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa80]
mov dword [ebp - 0xd0c], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0xc30], eax
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x8c]
cmp dword [ebp - 0x48], eax
je 0x10025e81
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp + eax - 0xa88]
mov dword [ebp + ecx*4 - 0x8c], eax
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x7c4]
call fcn.10009a21
jmp 0x1002577b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd78]
call fcn.10009a21
mov dword [ebp - 0x228], 0xfffffff7
mov dword [ebp - 0x228], 6
jmp 0x1002608e
mov eax, dword [ebp - 0x228]
inc eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 6
je 0x10026138
mov dword [ebp - 0xd0], 0xb25b
mov dword [ebp - 0x920], 2
mov dword [ebp - 0x1f0], 0
jmp 0x100260c8
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 4
jge 0x100260e4
mov eax, dword [ebp - 0x1f0]
mov dword [ebp + eax*4 - 0xeb8], 0x2ff4
jmp 0x100260bb
push 0
push 0
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0x920]
push eax
call fcn.1002a974
add esp, 0x10
mov dword [ebp - 0xd0], 0
jmp 0x10026117
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 4
jge 0x10026133
mov eax, dword [ebp - 0xd0]
mov dword [ebp + eax*4 - 0xeb8], 0xa727
jmp 0x1002610a
jmp 0x10026081
mov dword [ebp - 0x180], 0x1a049fe3
mov dword [ebp - 0x180], 0x11
jmp 0x1002615b
mov eax, dword [ebp - 0x180]
dec eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 5
je 0x10026e12
push 2
lea ecx, [ebp - 0x7dc]
call fcn.100099bf
mov dword [ebp - 4], 0x16
mov dword [ebp - 0x11c], 0
push 0x12a7
push 0
push 0x2534
push 0x64c2
push 1
lea eax, [ebp - 0xc38]
push eax
lea eax, [ebp - 0x7dc]
push eax
call fcn.1002a295
add esp, 0x1c
mov byte [ebp - 0xb6], 0
push 0x2192
push 1
push 1
push 1
push 0x6d6a
push 0x4e5b
lea eax, [ebp - 0xb6]
push eax
push 0x68fc
call fcn.10019eb0
add esp, 0x20
mov dword [ebp - 0x11c], 0
jmp 0x100261f8
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 1
jg 0x1002650d
mov dword [ebp - 0xd8], 8
mov dword [ebp - 0x3fc], 0x4ab462a7
mov dword [ebp - 0x924], 0x3e32883e
mov dword [ebp - 0xd8], 0
jmp 0x1002623c
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 1
jg 0x10026508
push 1
lea ecx, [ebp - 0x28c]
call fcn.100099bf
mov byte [ebp - 4], 0x17
lea eax, [ebp - 0xd14]
push eax
lea eax, [ebp - 0x28c]
push eax
push 0
call fcn.10029da5
add esp, 0xc
push 0
lea ecx, [ebp - 0x28c]
call fcn.10009a26
mov dword [eax], 1
jmp 0x100262ab
push 0
lea ecx, [ebp - 0x28c]
call fcn.10009a26
mov dword [ebp - 0x3c4], eax
mov eax, dword [ebp - 0x3c4]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x3c4]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x28c]
call fcn.10009a26
cmp dword [eax], 0
jl 0x100264f4
mov dword [ebp - 0x18c], 0x43e95aad
mov dword [ebp - 0x2e4], 0x811fc80a
mov dword [ebp - 0x17c], 0
jmp 0x100262ee
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 4
jge 0x1002630a
mov eax, dword [ebp - 0x17c]
mov dword [ebp + eax*4 - 0xee0], 1
jmp 0x100262e1
mov byte [ebp - 0x72], 0
movzx eax, byte [ebp - 0x72]
test eax, eax
je 0x1002631e
push 0
call fcn.10029297
pop ecx
mov dword [ebp - 0x18c], 1
jmp 0x10026337
mov eax, dword [ebp - 0x18c]
dec eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0
jl 0x100264ef
push 0
lea ecx, [ebp - 0x28c]
call fcn.10009a26
push dword [eax]
lea ecx, [ebp - 0x7dc]
call fcn.10009a26
mov ecx, dword [ebp - 0xd8]
cmp dword [eax], ecx
jge 0x10026374
mov dword [ebp - 0x3cc], 1
jmp 0x1002637b
and dword [ebp - 0x3cc], 0
push 0
lea ecx, [ebp - 0x28c]
call fcn.10009a26
mov ecx, dword [ebp - 0x3cc]
add ecx, dword [eax]
mov dword [ebp - 0x2e4], ecx
mov esi, dword [ebp - 0x2e4]
push 0
lea ecx, [ebp - 0x7dc]
call fcn.10009a26
cmp esi, dword [eax]
jge 0x100263b9
mov dword [ebp - 0x3d4], 1
jmp 0x100263c0
and dword [ebp - 0x3d4], 0
mov eax, dword [ebp - 0x11c]
cmp dword [ebp - 0x3d4], eax
jle 0x100263da
mov dword [ebp - 0x3dc], 1
jmp 0x100263e1
and dword [ebp - 0x3dc], 0
push 0
lea ecx, [ebp - 0x28c]
call fcn.10009a26
mov ecx, dword [ebp - 0x3dc]
cmp ecx, dword [eax]
jne 0x10026404
mov dword [ebp - 0x3e4], 1
jmp 0x1002640b
and dword [ebp - 0x3e4], 0
mov eax, dword [ebp - 0xd8]
cmp dword [ebp - 0x3e4], eax
jl 0x10026425
mov dword [ebp - 0x3ec], 1
jmp 0x1002642c
and dword [ebp - 0x3ec], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x3ec]
sub ecx, dword [ebp + eax - 0xee0]
cmp ecx, 1
jbe 0x10026450
mov dword [ebp - 0x8d8], 1
jmp 0x10026457
and dword [ebp - 0x8d8], 0
push 0
lea ecx, [ebp - 0x28c]
call fcn.10009a26
push dword [eax]
lea ecx, [ebp - 0x7dc]
call fcn.10009a26
mov esi, eax
push 0
lea ecx, [ebp - 0x28c]
call fcn.10009a26
mov ecx, dword [ebp - 0x2e4]
add ecx, dword [eax]
cmp dword [esi], ecx
jg 0x100264b4
push 0
lea ecx, [ebp - 0x28c]
call fcn.10009a26
push dword [eax]
lea ecx, [ebp - 0x7dc]
call fcn.10009a26
cmp dword [eax], 0
jne 0x100264b4
and dword [ebp - 0x3f4], 0
jmp 0x100264be
mov dword [ebp - 0x3f4], 1
mov eax, dword [ebp - 0x3f4]
mov dword [ebp - 0x3fc], eax
mov eax, dword [ebp - 0x3fc]
mov dword [ebp - 0x924], eax
push 0
lea ecx, [ebp - 0x28c]
call fcn.10009a26
cmp dword [eax], 0
je 0x100264ea
jmp 0x100264ef
jmp 0x1002632a
jmp 0x10026287
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x28c]
call fcn.10009a21
jmp 0x1002622f
jmp 0x100261eb
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7dc]
call fcn.10009a21
mov dword [ebp - 0x20], 4
and dword [ebp - 0xaec], 0
and dword [ebp - 0xae8], 0
and dword [ebp - 0xae4], 0
and dword [ebp - 0xae0], 0
lea ecx, [ebp - 0x329]
call fcn.10009a35
push eax
lea eax, [ebp - 0xadc]
push eax
lea eax, [ebp - 0xaec]
push eax
lea ecx, [ebp - 0xec8]
call fcn.10009a38
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xb84]
call fcn.100099fb
mov dword [ebp - 4], 0x18
mov dword [ebp - 0x934], 1
cmp dword [ebp - 0x20], 0
jne 0x100266a2
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x20], eax
jg 0x100265a3
mov dword [ebp - 0x404], 1
jmp 0x100265aa
and dword [ebp - 0x404], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x404], eax
jl 0x100265c1
mov dword [ebp - 0x8e0], 1
jmp 0x100265c8
and dword [ebp - 0x8e0], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0xc40], eax
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x20], eax
jge 0x100265e5
mov dword [ebp - 0x40c], 1
jmp 0x100265ec
and dword [ebp - 0x40c], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x40c], eax
je 0x10026603
mov dword [ebp - 0x414], 1
jmp 0x1002660a
and dword [ebp - 0x414], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x414], eax
jne 0x10026621
mov dword [ebp - 0x41c], 1
jmp 0x10026628
and dword [ebp - 0x41c], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x41c], eax
je 0x1002663f
mov dword [ebp - 0x92c], 1
jmp 0x10026646
and dword [ebp - 0x92c], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x424], eax
push 2
lea ecx, [ebp - 0xb84]
call fcn.10009a26
mov ecx, dword [ebp - 0x424]
mov dword [eax], ecx
mov eax, dword [ebp - 0x424]
sub eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x20]
jle 0x1002667e
mov dword [ebp - 0x8e8], 1
jmp 0x10026685
and dword [ebp - 0x8e8], 0
push 2
lea ecx, [ebp - 0xb84]
call fcn.10009a26
mov ecx, dword [ebp - 0x20]
cmp dword [eax], ecx
je 0x100266a2
and dword [ebp - 0x42c], 0
jmp 0x100266ac
mov dword [ebp - 0x42c], 1
mov eax, dword [ebp - 0x42c]
sub eax, 0xe
cmp eax, 1
ja 0x100266c6
mov dword [ebp - 0x434], 1
jmp 0x100266cd
and dword [ebp - 0x434], 0
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x434]
mov dword [ebp - 0x934], eax
mov byte [ebp - 0x73], 0
movzx eax, byte [ebp - 0x73]
test eax, eax
je 0x10026702
push 0x2d72
push 0x3e8e
push 0x16b9
push 0
call fcn.10029efb
add esp, 0x10
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb84]
call fcn.10009a21
mov dword [ebp - 0x194], 0
jmp 0x1002672a
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 3
jge 0x10026746
mov eax, dword [ebp - 0x194]
mov dword [ebp + eax*4 - 0xe5c], 0xf84b8114
jmp 0x1002671d
mov dword [ebp - 0x5c], 0xfffffffb
mov dword [ebp - 0xa48], 7
mov dword [ebp - 0xa44], 7
mov dword [ebp - 0xa40], 7
mov dword [ebp - 0xa3c], 7
mov dword [ebp - 0x70], 0x373a4c92
push 4
lea ecx, [ebp - 0x7e8]
call fcn.100099bf
mov dword [ebp - 4], 0x19
mov dword [ebp - 0x93c], 0xacd6
mov dword [ebp - 0x19c], 0
jmp 0x100267b3
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 4
jge 0x100267d2
push dword [ebp - 0x19c]
lea ecx, [ebp - 0x7e8]
call fcn.10009a26
and dword [eax], 0
jmp 0x100267a6
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x5c], eax
jne 0x100267e6
mov dword [ebp - 0x43c], 1
jmp 0x100267ed
and dword [ebp - 0x43c], 0
mov eax, dword [ebp - 0x43c]
dec eax
cmp eax, dword [ebp - 0x5c]
jge 0x10026808
cmp dword [ebp - 0x5c], 0
je 0x10026808
and dword [ebp - 0x8f0], 0
jmp 0x10026812
mov dword [ebp - 0x8f0], 1
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0xe10], eax
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0xc48], eax
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x5c], eax
jl 0x10026838
mov dword [ebp - 0x340], 1
jmp 0x1002683f
and dword [ebp - 0x340], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x340]
mov dword [ebp + eax - 0xa48], ecx
cmp dword [ebp - 0x340], 0
jne 0x10026866
mov dword [ebp - 0x444], 1
jmp 0x1002686d
and dword [ebp - 0x444], 0
mov eax, dword [ebp - 0x444]
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 1
ja 0x10026888
mov dword [ebp - 0x44c], 1
jmp 0x1002688f
and dword [ebp - 0x44c], 0
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0xd1c], eax
push 1
lea ecx, [ebp - 0x7e8]
call fcn.10009a26
mov ecx, dword [ebp - 0x44c]
mov dword [eax], ecx
push 1
lea ecx, [ebp - 0x7e8]
call fcn.10009a26
cmp dword [eax], 0
je 0x10026985
mov dword [ebp - 0x8f8], 1
mov dword [ebp - 0x944], 0xfffffffd
mov dword [ebp - 0x908], 0xa97
mov dword [ebp - 0x70], 3
jmp 0x100268f1
mov eax, dword [ebp - 0x70]
dec eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
jl 0x10026980
mov dword [ebp - 0x94c], 0xf1fa6f63
mov dword [ebp - 0x900], 0x7fc7
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0xa48], 0
push 1
push 0xfd3
push 0
lea eax, [ebp - 0x93c]
push eax
lea eax, [ebp - 0x8f8]
push eax
push 0x4357
push 0x741a
lea eax, [ebp - 0x944]
push eax
lea eax, [ebp - 0x900]
push eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x94c]
push eax
lea eax, [ebp - 0x908]
push eax
push 1
push 0x173b
push 0x10d1
lea eax, [ebp - 0x7e8]
push eax
call fcn.1001a879
add esp, 0x40
jmp 0x100268ea
jmp 0x10026dec
mov dword [ebp - 0x124], 0xfffffff8
push 2
lea ecx, [ebp - 0xb24]
call fcn.100099bf
mov byte [ebp - 4], 0x1a
push 0x4a46
push 0x7b16
push 1
lea eax, [ebp - 0xb24]
push eax
push 1
push 0
push 0x6b4c
lea eax, [ebp - 0xc50]
push eax
push 0x7874
push 0x5f1b
call fcn.1002c75c
add esp, 0x28
cmp dword [ebp - 0x124], 0x982f
jne 0x100269ed
mov dword [ebp - 0x45c], 1
jmp 0x100269f4
and dword [ebp - 0x45c], 0
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0xdbc], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xa48], 0
jne 0x10026a18
mov dword [ebp - 0x454], 1
jmp 0x10026a1f
and dword [ebp - 0x454], 0
mov eax, dword [ebp - 0x454]
add eax, 0x93a
cmp dword [ebp - 0x45c], eax
jne 0x10026a3e
mov dword [ebp - 0x464], 1
jmp 0x10026a45
and dword [ebp - 0x464], 0
cmp dword [ebp - 0x464], 0
jle 0x10026a5a
mov dword [ebp - 0x46c], 1
jmp 0x10026a61
and dword [ebp - 0x46c], 0
push 1
lea ecx, [ebp - 0xb24]
call fcn.10009a26
mov ecx, dword [ebp - 0x46c]
mov dword [eax], ecx
push 1
lea ecx, [ebp - 0x7e8]
call fcn.10009a26
imul eax, dword [eax], 0x4203
test eax, eax
je 0x10026d4d
mov dword [ebp - 0x484], 0xfff9
mov dword [ebp - 0x954], 0x17b1
cmp dword [ebp - 0x954], 0xf1a
jge 0x10026d3b
lea eax, [ebp - 0x2ec]
push eax
push 0x10007ae8
call fcn.1004c09b
pop ecx
pop ecx
mov eax, dword [ebp - 0x2ec]
mov dword [ebp - 0x910], eax
mov eax, dword [ebp - 0x2ec]
dec eax
mov dword [ebp - 0x2ec], eax
cmp dword [ebp - 0x910], 0
je 0x10026d3b
lea eax, [ebp - 0x298]
push eax
lea eax, [ebp - 0x294]
push eax
push 0x10007aec
call fcn.1004c09b
add esp, 0xc
mov byte [ebp - 0x75], 1
lea eax, [ebp - 0x75]
push eax
push dword [ebp - 0x294]
lea ecx, [ebp - 0xde8]
call fcn.10012ac5
mov byte [ebp - 4], 0x1b
mov byte [ebp - 0x77], 1
lea eax, [ebp - 0x77]
push eax
push dword [ebp - 0x298]
lea ecx, [ebp - 0xdd4]
call fcn.10012ac5
mov byte [ebp - 4], 0x1c
and dword [ebp - 0x1a4], 0
jmp 0x10026b59
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
mov eax, dword [ebp - 0x1a4]
cmp eax, dword [ebp - 0x294]
jge 0x10026bf6
and dword [ebp - 0x1ac], 0
jmp 0x10026b81
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
mov eax, dword [ebp - 0x1ac]
cmp eax, dword [ebp - 0x298]
jge 0x10026bf1
lea eax, [ebp - 0x95c]
push eax
push 0x10007ae8
call fcn.1004c09b
pop ecx
pop ecx
cmp dword [ebp - 0x95c], 0
jne 0x10026bad
jmp 0x10026b74
push 0
push dword [ebp - 0x1a4]
lea eax, [ebp - 0xed0]
push eax
lea ecx, [ebp - 0xde8]
call fcn.10012b46
mov ecx, eax
call fcn.10012b65
push 0
push dword [ebp - 0x1ac]
lea eax, [ebp - 0xf00]
push eax
lea ecx, [ebp - 0xdd4]
call fcn.10012b46
mov ecx, eax
call fcn.10012b65
jmp 0x10026b74
jmp 0x10026b4c
and dword [ebp - 0x174], 0
and dword [ebp - 0x1b4], 0
jmp 0x10026c13
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
mov eax, dword [ebp - 0x1b4]
cmp eax, dword [ebp - 0x294]
jge 0x10026c51
push dword [ebp - 0x1b4]
lea eax, [ebp - 0xe90]
push eax
lea ecx, [ebp - 0xde8]
call fcn.10012b46
mov ecx, eax
call fcn.10012b8a
movzx eax, al
add eax, dword [ebp - 0x174]
mov dword [ebp - 0x174], eax
jmp 0x10026c06
and dword [ebp - 0x1c4], 0
and dword [ebp - 0x1bc], 0
jmp 0x10026c6e
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
mov eax, dword [ebp - 0x1bc]
cmp eax, dword [ebp - 0x298]
jge 0x10026cac
push dword [ebp - 0x1bc]
lea eax, [ebp - 0xe88]
push eax
lea ecx, [ebp - 0xdd4]
call fcn.10012b46
mov ecx, eax
call fcn.10012b8a
movzx eax, al
add eax, dword [ebp - 0x1c4]
mov dword [ebp - 0x1c4], eax
jmp 0x10026c61
mov eax, dword [ebp - 0x174]
cmp eax, dword [ebp - 0x1c4]
jge 0x10026cc8
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0x474], eax
jmp 0x10026cd4
mov eax, dword [ebp - 0x1c4]
mov dword [ebp - 0x474], eax
mov eax, dword [ebp - 0x474]
mov dword [ebp - 0x91c], eax
mov eax, dword [ebp - 0x91c]
and eax, 0x80000001
jns 0x10026cf2
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
je 0x10026d02
mov dword [ebp - 0x47c], 0x10007cc8
jmp 0x10026d0c
mov dword [ebp - 0x47c], 0x10007cd0
push dword [ebp - 0x47c]
call fcn.1004c476
pop ecx
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0xdd4]
call fcn.10012b26
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0xde8]
call fcn.10012b26
jmp 0x10026ac8
mov eax, dword [ebp - 0x484]
dec eax
mov dword [ebp - 0x484], eax
jmp 0x10026ddd
mov dword [ebp - 0x964], 0x8791b167
push 0x3155
lea eax, [ebp - 0x964]
push eax
push 0
push 0x7031
push 0x4fdf
push 0x708
push 0x40a1
push 1
push 0x2a65
push 0x1b71
push 0x79e1
push 1
call fcn.100223fe
add esp, 0x30
mov dword [ebp - 0x124], 0x14
jmp 0x10026dad
mov eax, dword [ebp - 0x124]
dec eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0xffffffe6
jge 0x10026ddd
mov byte [ebp - 0x79], 0
movzx eax, byte [ebp - 0x79]
test eax, eax
je 0x10026ddb
push 0
push 0x7449
push 0x513e
push 0x6ff2
call fcn.10029a84
add esp, 0x10
jmp 0x10026da0
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0xb24]
call fcn.10009a21
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7e8]
call fcn.10009a21
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xe5c], 0
je 0x10026e0d
jmp 0x10026e12
jmp 0x1002614e
mov dword [ebp - 0x4c], 0x24ec2e0c
push 1
lea ecx, [ebp - 0xb0c]
call fcn.100099bf
mov dword [ebp - 4], 0x1d
lea eax, [ebp - 0xc58]
push eax
lea eax, [ebp - 0xb0c]
push eax
push 0x71ce
push 0x6797
push 1
push 0x7819
push 0x7f66
push 0x3d96
push 0x15
push 0x1ece
push 0
push 0xf9
call fcn.1001cc2c
add esp, 0x30
mov dword [ebp - 0x4c], 0xfffffff3
jmp 0x10026e7c
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0x1d
jne 0x10026ec5
mov dword [ebp - 0x928], 0x23af
mov dword [ebp - 0x96c], 6
push 0
push 0x5118
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x96c]
push eax
push 0x2c4b
push 1
lea eax, [ebp - 0x928]
push eax
push 0x4aab
call fcn.1001ce74
add esp, 0x20
jmp 0x10026e75
mov dword [ebp - 0x4c], 0
jmp 0x10026ed5
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jg 0x10026f23
mov dword [ebp - 0x9b0], 0xdbea5223
push 0x2d92
push 0x3584
push 0x59e7
push 0
lea eax, [ebp - 0x9b0]
push eax
push 0xc51
push 0
call fcn.1001f6be
add esp, 0x1c
push dword [ebp - 0x4c]
lea ecx, [ebp - 0xb0c]
call fcn.10009a26
cmp dword [eax], 0
je 0x10026f21
jmp 0x10026f23
jmp 0x10026ece
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb0c]
call fcn.10009a21
mov eax, dword [ebp - 0x1ec]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x1ec]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 0x14]
lea eax, [eax + ecx + 0x18]
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x930], 0x26dd
cmp dword [ebp - 0x930], 0x5fd
jge 0x10027166
lea eax, [ebp - 0x2a0]
push eax
lea eax, [ebp - 0x1cc]
push eax
push 0x1000775c
call fcn.1004c09b
add esp, 0xc
mov dword [ebp - 0x12c], 1
mov dword [ebp - 0x134], 0x7d
mov eax, dword [ebp - 0x2a0]
mov dword [ebp - 0xa00], eax
mov eax, dword [ebp - 0x2a0]
dec eax
mov dword [ebp - 0x2a0], eax
cmp dword [ebp - 0xa00], 0
je 0x100270b7
lea eax, [ebp - 0x98]
push eax
lea eax, [ebp - 0xe0]
push eax
push 0x1000775c
call fcn.1004c09b
add esp, 0xc
mov eax, dword [ebp - 0xe0]
cdq
idiv dword [ebp - 0x98]
test edx, edx
jle 0x10026ff4
mov dword [ebp - 0x48c], 1
jmp 0x10026ffb
and dword [ebp - 0x48c], 0
mov eax, dword [ebp - 0xe0]
cdq
idiv dword [ebp - 0x98]
add eax, dword [ebp - 0x48c]
mov dword [ebp - 0x494], eax
mov eax, dword [ebp - 0x12c]
cmp eax, dword [ebp - 0x494]
jle 0x10027030
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0x49c], eax
jmp 0x1002703c
mov eax, dword [ebp - 0x494]
mov dword [ebp - 0x49c], eax
mov eax, dword [ebp - 0x49c]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x98]
dec eax
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0xe0]
dec eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0x98], 0
jg 0x10027070
jmp 0x10026f96
mov eax, dword [ebp - 0xe0]
cdq
idiv dword [ebp - 0x98]
cmp dword [ebp - 0x134], eax
jge 0x10027093
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x4a4], eax
jmp 0x100270a6
mov eax, dword [ebp - 0xe0]
cdq
idiv dword [ebp - 0x98]
mov dword [ebp - 0x4a4], eax
mov eax, dword [ebp - 0x4a4]
mov dword [ebp - 0x134], eax
jmp 0x10026f96
mov eax, dword [ebp - 0x1cc]
cdq
idiv dword [ebp - 0x12c]
test edx, edx
jle 0x100270d4
mov dword [ebp - 0x360], 1
jmp 0x100270db
and dword [ebp - 0x360], 0
mov eax, dword [ebp - 0x1cc]
cdq
idiv dword [ebp - 0x12c]
add eax, dword [ebp - 0x360]
mov dword [ebp - 0x4bc], eax
mov eax, dword [ebp - 0x1cc]
cdq
idiv dword [ebp - 0x134]
test edx, edx
jle 0x10027111
mov dword [ebp - 0x4b4], 1
jmp 0x10027118
and dword [ebp - 0x4b4], 0
mov eax, dword [ebp - 0x1cc]
cdq
idiv dword [ebp - 0x134]
add eax, dword [ebp - 0x4b4]
mov dword [ebp - 0x938], eax
mov eax, dword [ebp - 0x4bc]
cmp eax, dword [ebp - 0x938]
jne 0x1002714d
mov eax, dword [ebp - 0x4bc]
mov dword [ebp - 0x4c4], eax
jmp 0x10027154
or dword [ebp - 0x4c4], 0xffffffff
push dword [ebp - 0x4c4]
push 0x10007764
call fcn.1004c2b6
pop ecx
pop ecx
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x958], 1
mov dword [ebp - 0x9b8], 0x13e5
cmp dword [ebp - 0x9b8], 0xd9d
jge 0x100274fc
lea eax, [ebp - 0xa0]
push eax
push 0x10007ae8
call fcn.1004c09b
pop ecx
pop ecx
mov eax, dword [ebp - 0xa0]
inc eax
push eax
lea ecx, [ebp - 0xa38]
call fcn.100099bf
mov dword [ebp - 4], 0x1e
mov dword [ebp - 0x1d4], 1
jmp 0x100271d7
mov eax, dword [ebp - 0x1d4]
inc eax
mov dword [ebp - 0x1d4], eax
mov eax, dword [ebp - 0x1d4]
cmp eax, dword [ebp - 0xa0]
jg 0x10027205
push dword [ebp - 0x1d4]
lea ecx, [ebp - 0xa38]
call fcn.10009a26
push eax
push 0x10007ae8
call fcn.1004c09b
pop ecx
pop ecx
jmp 0x100271ca
and dword [ebp - 0x940], 0
lea eax, [ebp - 0x940]
push eax
mov eax, dword [ebp - 0xa0]
inc eax
push eax
lea ecx, [ebp - 0x7f4]
call fcn.100332ca
mov byte [ebp - 4], 0x1f
and dword [ebp - 0xa0c], 0
lea eax, [ebp - 0xa0c]
push eax
mov eax, dword [ebp - 0xa0]
inc eax
push eax
lea ecx, [ebp - 0xa28]
call fcn.100332ca
mov byte [ebp - 4], 0x20
and dword [ebp - 0x13c], 0
jmp 0x10027265
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
mov eax, dword [ebp - 0x13c]
cmp eax, dword [ebp - 0xa0]
jg 0x1002728e
push dword [ebp - 0x13c]
lea ecx, [ebp - 0xa28]
call fcn.10009a26
mov ecx, dword [ebp - 0x13c]
mov dword [eax], ecx
jmp 0x10027258
lea eax, [ebp - 0x2a8]
push eax
push 0x10007ae8
call fcn.1004c09b
pop ecx
pop ecx
mov eax, dword [ebp - 0x2a8]
mov dword [ebp - 0x948], eax
mov eax, dword [ebp - 0x2a8]
dec eax
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x948], 0
je 0x100274cf
lea eax, [ebp - 0x4d4]
push eax
push 0x10007758
call fcn.1004c09b
pop ecx
pop ecx
cmp dword [ebp - 0x4d4], 1
jne 0x1002748f
lea eax, [ebp - 0x144]
push eax
lea eax, [ebp - 0x9c0]
push eax
push 0x10007aec
call fcn.1004c09b
add esp, 0xc
lea ecx, [ebp - 0xa54]
call fcn.1001463b
mov byte [ebp - 4], 0x21
push dword [ebp - 0x9c0]
lea ecx, [ebp - 0xa28]
call fcn.10009a26
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0xa0]
jg 0x10027430
cmp dword [ebp - 0x144], 0
jle 0x10027430
push dword [ebp - 0x18]
lea ecx, [ebp - 0xa38]
call fcn.10009a26
mov esi, eax
push dword [ebp - 0x18]
lea ecx, [ebp - 0x7f4]
call fcn.10009a26
mov eax, dword [eax]
add eax, dword [ebp - 0x144]
cmp dword [esi], eax
jle 0x100273a1
push dword [ebp - 0x18]
lea ecx, [ebp - 0x7f4]
call fcn.10009a26
mov dword [ebp - 0x4cc], eax
mov eax, dword [ebp - 0x4cc]
mov eax, dword [eax]
add eax, dword [ebp - 0x144]
mov ecx, dword [ebp - 0x4cc]
mov dword [ecx], eax
jmp 0x10027430
push dword [ebp - 0x18]
lea ecx, [ebp - 0xa38]
call fcn.10009a26
mov esi, eax
push dword [ebp - 0x18]
lea ecx, [ebp - 0x7f4]
call fcn.10009a26
mov ecx, dword [esi]
sub ecx, dword [eax]
mov eax, dword [ebp - 0x144]
sub eax, ecx
mov dword [ebp - 0x144], eax
push dword [ebp - 0x18]
lea ecx, [ebp - 0xa38]
call fcn.10009a26
mov esi, eax
push dword [ebp - 0x18]
lea ecx, [ebp - 0x7f4]
call fcn.10009a26
mov ecx, dword [esi]
mov dword [eax], ecx
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0xa54]
call fcn.10012c27
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0xa0]
jg 0x10027429
push dword [ebp - 0x18]
lea ecx, [ebp - 0xa28]
call fcn.10009a26
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
jmp 0x1002742b
jmp 0x10027430
jmp 0x10027327
and dword [ebp - 0x1dc], 0
jmp 0x10027446
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
lea ecx, [ebp - 0xa54]
call fcn.1000da89
cmp dword [ebp - 0x1dc], eax
jae 0x1002747e
push dword [ebp - 0x1dc]
lea ecx, [ebp - 0xa54]
call fcn.10009a26
push dword [eax]
lea ecx, [ebp - 0xa28]
call fcn.10009a26
mov ecx, dword [ebp - 0x18]
mov dword [eax], ecx
jmp 0x10027439
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0xa54]
call fcn.10009a21
jmp 0x100274ca
cmp dword [ebp - 0x4d4], 2
jne 0x100274ca
lea eax, [ebp - 0x950]
push eax
push 0x10007ae8
call fcn.1004c09b
pop ecx
pop ecx
push dword [ebp - 0x950]
lea ecx, [ebp - 0x7f4]
call fcn.10009a26
push dword [eax]
push 0x10007b6c
call fcn.1004c2b6
pop ecx
pop ecx
jmp 0x100272a1
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0xa28]
call fcn.10009a21
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x7f4]
call fcn.10009a21
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa38]
call fcn.10009a21
mov dword [ebp - 0x1e4], 0
jmp 0x10027515
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 4
jge 0x10027531
mov eax, dword [ebp - 0x1e4]
mov dword [ebp + eax*4 - 0xef8], 0xfffffffb
jmp 0x10027508
mov dword [ebp - 0x30], 0xffffffed
jmp 0x10027541
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0xffffffef
jl 0x10027712
mov dword [ebp - 0x9fc], 0x6d6dbc1c
mov dword [ebp - 0x60], 0
jmp 0x10027565
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 2
jge 0x1002757b
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0xbec], 0xd7cbae8b
jmp 0x1002755e
mov dword [ebp - 0x60], 0
jmp 0x1002758b
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 1
jge 0x100275a1
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x9c8], 1
jmp 0x10027584
cmp dword [ebp - 0x30], 1
jge 0x100275b3
mov dword [ebp - 0x4dc], 1
jmp 0x100275ba
and dword [ebp - 0x4dc], 0
mov eax, dword [ebp - 0x4dc]
sub eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jl 0x100275d4
mov dword [ebp - 0x4e4], 1
jmp 0x100275db
and dword [ebp - 0x4e4], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x4e4], eax
jge 0x100275fb
cmp dword [ebp - 0x9fc], 0
je 0x100275fb
mov dword [ebp - 0x4ec], 1
jmp 0x10027602
and dword [ebp - 0x4ec], 0
mov eax, dword [ebp - 0x30]
sub eax, dword [ebp - 0x4ec]
cmp eax, 0xfffa
ja 0x1002761e
mov dword [ebp - 0x4fc], 1
jmp 0x10027625
and dword [ebp - 0x4fc], 0
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x4f4], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x4f4]
mov dword [ebp + eax - 0xef8], ecx
mov eax, dword [ebp - 0x4f4]
cmp eax, dword [ebp - 0x4fc]
jle 0x1002765b
mov dword [ebp - 0x504], 1
jmp 0x10027662
and dword [ebp - 0x504], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x504], eax
jg 0x10027679
mov dword [ebp - 0x2b0], 1
jmp 0x10027680
and dword [ebp - 0x2b0], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x2b0]
mov dword [ebp + eax - 0xbec], ecx
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x2b0], eax
jle 0x100276aa
mov dword [ebp - 0x50c], 1
jmp 0x100276b1
and dword [ebp - 0x50c], 0
cmp dword [ebp - 0x50c], 0x738a
jl 0x100276c9
mov dword [ebp - 0x514], 1
jmp 0x100276d0
and dword [ebp - 0x514], 0
cmp dword [ebp - 0x514], 3
ja 0x100276e5
mov dword [ebp - 0x51c], 1
jmp 0x100276ec
and dword [ebp - 0x51c], 0
mov eax, dword [ebp - 0x51c]
mov dword [ebp - 0x958], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x9c8], 0
je 0x1002770d
jmp 0x1002753a
jmp 0x1002753a
and dword [ebp - 0x2b8], 0
jmp 0x10027731
mov eax, dword [ebp - 0x1ec]
mov eax, dword [eax]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x2b8], eax
jge 0x100291b5
push 2
lea ecx, [ebp - 0xb3c]
call fcn.100099bf
mov dword [ebp - 4], 0x22
mov dword [ebp - 0x14c], 0xdf1febae
mov dword [ebp - 0x1f4], 0
jmp 0x10027780
mov eax, dword [ebp - 0x1f4]
inc eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 2
jge 0x100277a2
push dword [ebp - 0x1f4]
lea ecx, [ebp - 0xb3c]
call fcn.10009a26
mov dword [eax], 7
jmp 0x10027773
mov dword [ebp - 0x14c], 0
jmp 0x100277bb
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 1
jg 0x100277de
push dword [ebp - 0x14c]
lea ecx, [ebp - 0xb3c]
call fcn.10009a26
cmp dword [eax], 0
je 0x100277dc
jmp 0x100277de
jmp 0x100277ae
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb3c]
call fcn.10009a21
push 1
lea ecx, [ebp - 0x80c]
call fcn.100099bf
mov dword [ebp - 4], 0x23
mov dword [ebp - 0xe8], 0x8094a188
mov dword [ebp - 0x1fc], 0
jmp 0x10027824
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 1
jge 0x10027846
push dword [ebp - 0x1fc]
lea ecx, [ebp - 0x80c]
call fcn.10009a26
mov dword [eax], 0x9f9b3198
jmp 0x10027817
mov dword [ebp - 0xe8], 0
jmp 0x1002785f
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0
jg 0x10027a3c
mov dword [ebp - 0x20c], 0xf36f6dd8
push dword [ebp - 0xe8]
lea ecx, [ebp - 0x80c]
call fcn.10009a26
cmp dword [eax], 0
je 0x100278a7
mov dword [ebp - 0x830], 0x693
mov eax, dword [ebp - 0x20c]
mov dword [ebp - 0x830], eax
jmp 0x10027a37
mov dword [ebp - 0x204], 0
jmp 0x100278c0
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 2
jge 0x100278dc
mov eax, dword [ebp - 0x204]
mov dword [ebp + eax*4 - 0x918], 0xfd52a42b
jmp 0x100278b3
push 0
lea ecx, [ebp - 0x80c]
call fcn.10009a26
push 4
pop ecx
imul ecx, ecx, 0
xor edx, edx
sub edx, dword [ebp + ecx - 0x918]
cmp dword [eax], edx
jne 0x10027908
mov dword [ebp - 0x524], 1
jmp 0x1002790f
and dword [ebp - 0x524], 0
mov eax, dword [ebp - 0x20c]
cmp eax, dword [ebp - 0x524]
jl 0x10027929
mov dword [ebp - 0x52c], 1
jmp 0x10027930
and dword [ebp - 0x52c], 0
mov eax, dword [ebp - 0x20c]
imul eax, dword [ebp - 0x52c]
test eax, eax
je 0x10027948
cmp dword [ebp - 0x20c], 0
push 4
pop eax
imul eax, eax, 0
imul eax, dword [ebp + eax - 0x918], 0xd55f
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x918]
je 0x10027974
mov dword [ebp - 0x534], 1
jmp 0x1002797b
and dword [ebp - 0x534], 0
push 0
lea ecx, [ebp - 0x80c]
call fcn.10009a26
mov ecx, dword [ebp - 0x534]
cmp ecx, dword [eax]
je 0x1002799e
mov dword [ebp - 0x53c], 1
jmp 0x100279a5
and dword [ebp - 0x53c], 0
cmp dword [ebp - 0x53c], 0x1982
jne 0x100279bd
mov dword [ebp - 0x544], 1
jmp 0x100279c4
and dword [ebp - 0x544], 0
cmp dword [ebp - 0x544], 0xb4aad9dd
jae 0x100279dc
mov dword [ebp - 0x54c], 1
jmp 0x100279e3
and dword [ebp - 0x54c], 0
cmp dword [ebp - 0x54c], 0x20a2
jle 0x100279fb
mov dword [ebp - 0x554], 1
jmp 0x10027a02
and dword [ebp - 0x554], 0
cmp dword [ebp - 0x554], 0xfffffffa
jae 0x10027a17
mov dword [ebp - 0x55c], 1
jmp 0x10027a1e
and dword [ebp - 0x55c], 0
push dword [ebp - 0xe8]
lea ecx, [ebp - 0x80c]
call fcn.10009a26
mov ecx, dword [ebp - 0x55c]
mov dword [eax], ecx
jmp 0x10027852
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x80c]
call fcn.10009a21
mov dword [ebp - 0x14], 1
mov dword [ebp - 0x5a4], 0x193c1de6
mov dword [ebp - 0xd2c], 0
mov dword [ebp - 0xc60], 0x34cb4417
mov dword [ebp - 0xe00], 0xfffffffa
mov dword [ebp - 0xc68], 0x67684abf
mov dword [ebp - 0x84c], 0xfffffffb
mov dword [ebp - 0x214], 0
jmp 0x10027aa7
mov eax, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 3
jge 0x10027ac3
mov eax, dword [ebp - 0x214]
mov dword [ebp + eax*4 - 0xf14], 0x424b969b
jmp 0x10027a9a
cmp dword [ebp - 0x14], 0
je 0x10027afb
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x14], eax
jne 0x10027add
mov dword [ebp - 0x564], 1
jmp 0x10027ae4
and dword [ebp - 0x564], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x564], eax
jle 0x10027afb
mov dword [ebp - 0x56c], 1
jmp 0x10027b02
and dword [ebp - 0x56c], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x56c], eax
jle 0x10027b19
mov dword [ebp - 0x574], 1
jmp 0x10027b20
and dword [ebp - 0x574], 0
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x574]
cmp dword [ebp - 0x14], eax
jle 0x10027b3a
mov dword [ebp - 0x82c], 1
jmp 0x10027b41
and dword [ebp - 0x82c], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xd3c], eax
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x14], eax
jle 0x10027b5e
mov dword [ebp - 0x57c], 1
jmp 0x10027b65
and dword [ebp - 0x57c], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x57c], eax
je 0x10027b7c
mov dword [ebp - 0x584], 1
jmp 0x10027b83
and dword [ebp - 0x584], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x584], eax
jge 0x10027b9a
mov dword [ebp - 0x58c], 1
jmp 0x10027ba1
and dword [ebp - 0x58c], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x58c], eax
jne 0x10027bb8
mov dword [ebp - 0x594], 1
jmp 0x10027bbf
and dword [ebp - 0x594], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x594], eax
jl 0x10027bd6
mov dword [ebp - 0x59c], 1
jmp 0x10027bdd
and dword [ebp - 0x59c], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x59c], eax
jg 0x10027c40
mov dword [ebp - 0x83c], 0xde9ab5c2
lea eax, [ebp - 0x14]
push eax
push 0x6d9f
lea eax, [ebp - 0x5a4]
push eax
push 1
push 0x2848
push 0x1a45
push 0
call fcn.1001f6be
add esp, 0x1c
push 0
push 1
push 0x7694
lea eax, [ebp - 0x83c]
push eax
lea eax, [ebp - 0x14]
push eax
push 0x1d02
push 0x4f3b
call fcn.1001a4eb
add esp, 0x1c
jmp 0x10027ca2
mov dword [ebp - 0x844], 7
mov byte [ebp - 0x7b], 0
movzx eax, byte [ebp - 0x7b]
test eax, eax
je 0x10027c96
push 1
push 0x63a4
push 1
push 1
push 0x2e31
push 0x3d53
push 0x6961
push 0x3fb0
push 0x587d
push 0x37bf
push 0xca8
push 0x101
push 0x692
call fcn.1001a2ef
add esp, 0x34
mov eax, dword [ebp - 0x844]
mov dword [ebp - 0x5a4], eax
push 0x3727
push 0
push 0x7719
push 0x72fc
push 0x630f
push 0x55c9
push 1
push 0
lea eax, [ebp - 0x84c]
push eax
call fcn.1001ed4a
add esp, 0x24
mov dword [ebp - 0x85c], 0
mov dword [ebp - 0x40], 0x5d16df25
mov dword [ebp - 0xa8], 0xfffffff8
mov dword [ebp - 0xc70], 0xcc9f196e
mov dword [ebp - 0x21c], 0
jmp 0x10027d0e
cmp dword [ebp - 0x21c], 3
jge 0x10027d2a
mov eax, dword [ebp - 0x21c]
mov dword [ebp + eax*4 - 0xd88], 1
jmp 0x10027d01
mov dword [ebp - 0xa8], 0
jmp 0x10027d43
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret