Function at 0x10024a4b
Capabilities:
Encode data using xor
Query environment variable
Set environment variable
Set registry value

Disassembly:
mov eax, 0x10062284
call fcn.10060e94
sub esp, 0x2e8
movdqa xmm0, xmmword [0x100703d0]
lea eax, [ebp - 0x25c]
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
xor ebx, ebx
mov dword [ebp - 0x6c], ecx
lea ecx, [ebp - 0xe4]
push dword [ebp - 0x6c]
mov dword [ebp - 0x34], edx
push eax
lea eax, [ebp - 0x26c]
mov dword [ebp - 0x1f8], ebx
push eax
push ebx
movdqu xmmword [ebp - 0x26c], xmm0
mov dword [ebp - 0xe4], ebx
mov dword [ebp - 0xe0], ebx
mov dword [ebp - 0xdc], ebx
call fcn.10001915
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x30], 0xc9eb
mov dword [ebp - 0x2c], 0x475ee4c2
mov dword [ebp - 0x20], ebx
jmp 0x10024ad9
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x29c], 0x2e0cf572
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x10024ac8
inc dword [ebp - 0x30]
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], 0x1d
push 2
jg 0x10024b32
mov edx, dword [ebp - 0xe4]
pop ecx
mov dword [ebp - 0x20], ebx
jmp 0x10024b0a
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x1dc], 0x33a79cc0
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ecx
jl 0x10024af9
mov eax, dword [ebp - 0x2c]
mov esi, 0xd0e75d5f
cmp esi, eax
sbb eax, eax
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [edx + 0xc], ebx
jne 0x10024b30
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0x1d
jle 0x10024af4
push 2
pop edi
lea ecx, [ebp - 0xe4]
call fcn.100014df
mov dword [ebp - 0x20], 0xba394643
mov dword [ebp - 0x2c], 0x58a60016
mov dword [ebp - 0x3c], 0xffffffff
mov dword [ebp - 0x20], ebx
jmp 0x10024b66
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x78], 0xc93
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 1
jl 0x10024b58
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], ebx
jg 0x10024d80
mov dword [ebp - 0x1c], 0xfc07e17f
mov dword [ebp - 0x30], 0xf84255eb
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], ebx
jg 0x10024d75
mov dword [ebp - 0x18], 0x6ec
cmp dword [ebp - 0x18], 0x7c6
jle 0x10024c0e
mov esi, ebx
mov eax, ebx
mov dword [ebp - 0x40], 0x7fa6
mov dword [ebp - 0x30], eax
cdq
lea ecx, [ebp - 0x290]
push edx
push eax
call fcn.10001301
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10024bc8
mov eax, dword [eax]
push eax
call fcn.10048570
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x290]
call fcn.1000162e
mov eax, dword [ebp - 0x30]
add eax, esi
dec dword [ebp - 0x40]
mov dword [ebp - 0x30], eax
jne 0x10024bb0
inc esi
cmp esi, 0x3bac
jl 0x10024ba4
push 0x1357
push 0x322
push 0x40c
push 0xc4a
push ebx
call dword [sym.imp.USER32.dll_CheckMenuRadioItem]
mov dword [ebp - 0x24], 0x8fb0
cmp dword [ebp - 0x18], 0x64a
jge 0x10024c29
push str.yhdgo_wgx_vryzrhpz_iqno_nooyor_ghunrlca_wgxsu_btmnwx_ncnudk_wfv
call fcn.10048570
pop ecx
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x1c]
cmp edi, eax
mov eax, dword [ebp - 0x1c]
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov eax, dword [ebp - 0x24]
setne dl
xor ecx, ecx
cmp eax, 0x4cf5
mov eax, dword [ebp - 0x78]
setl cl
sub ecx, edx
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov eax, dword [ebp - 0x24]
setne dl
xor ecx, ecx
cmp edx, eax
mov edx, dword [ebp - 0x20]
sete cl
sub edx, ecx
xor ecx, ecx
imul edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
cmp edx, eax
setle cl
mov dword [ebp - 0x30], ecx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x78]
imul eax, dword [ebp - 0x30]
neg eax
sub eax, dword [ebp - 0x2c]
neg eax
sbb eax, eax
inc eax
cmp eax, 0xfffffffb
sbb eax, eax
inc eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x3c], 0x2198
cmp dword [ebp - 0x3c], 0x7d2
jge 0x10024d6a
lea eax, [ebp - 0x58]
push eax
push 0x1006aad0
call fcn.10048a6a
mov eax, dword [ebp - 0x58]
pop ecx
pop ecx
test eax, eax
je 0x10024d66
dec eax
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x8c]
push eax
push 0x1006aad0
call fcn.10048a6a
cmp dword [ebp - 0x8c], 0
mov esi, ebx
pop ecx
pop ecx
mov dword [ebp - 0x3c], ebx
mov edi, ebx
jle 0x10024d4b
lea eax, [ebp - 0xe8]
push eax
push 0x1006aad0
call fcn.10048a6a
mov eax, dword [ebp - 0xe8]
pop ecx
pop ecx
and eax, 0x80000001
jns 0x10024d16
dec eax
or eax, 0xfffffffe
inc eax
mov ecx, edi
and ecx, 0x80000001
jns 0x10024d25
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp ecx, eax
jge 0x10024d2c
inc esi
jmp 0x10024d2f
jle 0x10024d2f
inc ebx
inc edi
cmp edi, dword [ebp - 0x8c]
jl 0x10024cf1
push 0
cmp esi, ebx
pop ebx
je 0x10024d4b
push 0x1006d608
call fcn.10049246
jmp 0x10024d57
push esi
push str._ld_n
call fcn.10048570
pop ecx
mov eax, dword [ebp - 0x58]
pop ecx
test eax, eax
jne 0x10024cca
push 2
pop edi
dec eax
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x24]
inc dword [ebp - 0x1c]
jmp 0x10024b89
mov eax, dword [ebp - 0x78]
inc dword [ebp - 0x20]
jmp 0x10024b6f
mov dword [ebp - 0x2c], 0x5872
cmp dword [ebp - 0x2c], 0x598f
jle 0x10024df5
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x30], 0x602
mov esi, dword [ebp - 0x24]
mov edi, ebx
mov ecx, edi
mov eax, esi
sar eax, cl
lea ecx, [ebp - 0x2b4]
cdq
push edx
push eax
call fcn.10001301
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10024dc0
mov eax, dword [eax]
push eax
call fcn.10048570
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x2b4]
call fcn.1000162e
inc edi
cmp edi, 0x3b32
jl 0x10024da2
mov esi, dword [ebp - 0x40]
add dword [ebp - 0x24], esi
dec dword [ebp - 0x30]
jne 0x10024d9d
inc esi
mov dword [ebp - 0x40], esi
cmp esi, 0x208
jl 0x10024d93
mov dword [ebp - 0x24], 0x6a9ef72d
lea ecx, [ebp - 0x98]
mov dword [ebp - 0x20], 9
push 4
call fcn.1000145c
mov dword [ebp - 4], 2
mov dword [ebp - 0x3c], 0xc17e5c28
mov dword [ebp - 0x30], 0x3ee76373
mov dword [ebp - 0x18], 0xfffffff6
mov dword [ebp - 0x20], ebx
jmp 0x10024e44
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x98]
mov dword [eax + ecx*4], 1
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x10024e31
cmp dword [ebp - 0x24], ebx
je 0x10024e59
dec dword [ebp - 0x30]
je 0x10024e59
xor esi, esi
inc esi
jmp 0x10024e5b
mov esi, ebx
mov eax, dword [ebp - 0x24]
dec eax
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x24]
je 0x10024e79
cmp dword [ebp - 0x18], ebx
je 0x10024e79
xor edx, edx
inc edx
jmp 0x10024e7b
mov edx, ebx
mov eax, dword [ebp - 0x18]
xor ecx, ecx
mov edi, dword [ebp - 0x98]
cmp edx, eax
sete cl
xor eax, eax
cmp ecx, 1
setle al
xor ecx, ecx
sub eax, dword [edi + 0xc]
cmp esi, eax
mov eax, dword [ebp - 0x18]
setg cl
imul eax, ecx
test eax, eax
je 0x10024fae
mov dword [ebp - 0x20], 0x63eeda78
mov dword [ebp - 0x1c], 0xf39f3c5a
push 3
mov dword [ebp - 0x40], 0x6c5533f2
pop esi
mov dword [ebp - 0x18], esi
cmp dword [ebp - 0x18], ebx
jl 0x10024edf
mov byte [ebp - 0x25], bl
cmp byte [ebp - 0x25], 0
je 0x10024eda
call dword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
dec dword [ebp - 0x18]
jns 0x10024ecb
mov ecx, dword [ebp - 0x1c]
xor edx, edx
mov eax, dword [ebp - 0x24]
cmp eax, ecx
setge dl
xor ecx, ecx
imul edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x3c]
cmp edx, eax
setg cl
xor eax, eax
cmp ecx, dword [edi + 0xc]
setge al
xor edx, edx
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x98]
cmp dword [eax], ecx
mov eax, dword [ebp - 0x1c]
setg dl
imul eax, edx
test eax, eax
je 0x10024f8e
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], esi
jg 0x10024f83
mov dword [ebp - 0x24], 0xffffffff
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x24]
mov esi, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x98]
mov eax, dword [ebp - 0x98]
mov eax, dword [eax + ecx*4]
mov ecx, 0x91a76a44
mov dword [edx + esi*4], eax
mov eax, dword [ebp - 0x30]
cmp ecx, eax
mov ecx, dword [edx + esi*4]
sbb eax, eax
inc eax
dec ecx
sub ecx, eax
neg ecx
sbb ecx, ecx
xor eax, eax
inc ecx
test ecx, ecx
setg al
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x20]
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jle 0x10024f2a
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x3c], eax
jmp 0x10025023
mov dword [ebp - 0x20], ebx
jmp 0x10024fa6
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x98]
mov dword [eax + ecx*4], 0x603f559c
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x10024f93
jmp 0x10025023
push dword [ebp - 0x6c]
movdqa xmm0, xmmword [0x10070380]
lea eax, [ebp - 0x24c]
push eax
lea eax, [ebp - 0x25c]
mov dword [ebp - 0x3c], 0x5767a0
push eax
push ebx
lea ecx, [ebp - 0xf4]
mov dword [ebp - 0xf4], ebx
movdqu xmmword [ebp - 0x25c], xmm0
mov dword [ebp - 0xf0], ebx
mov dword [ebp - 0xec], ebx
call fcn.10001915
mov dword [ebp - 0x20], 0xfffffffa
jmp 0x10025005
cmp dword [ebp - 0x24], ebx
jne 0x1002500b
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xfffffff8
jge 0x10024ffd
mov eax, dword [ebp - 0xf4]
lea ecx, [ebp - 0xf4]
mov dword [eax + 0xc], 0x7a16482
call fcn.100014df
lea ecx, [ebp - 0x98]
call fcn.100014df
cmp dword [ebp - 0x2c], 0x55d2
jge 0x10025042
push str.vim_grhzstod_frraitu_fzmyonxoq_sthsedyww_uqzrbp_xjulqypj_qaum
call fcn.10048570
pop ecx
or dword [ebp - 4], 0xffffffff
push 2
pop eax
push 0x62
pop ecx
push eax
mov word [ebp - 0x68], 0x1103
mov edi, eax
mov byte [ebp - 0x66], bl
mov dword [ebp - 0x65], 0x51b0625
mov word [ebp - 0x61], 0x430
mov byte [ebp - 0x5f], 0xd
mov byte [ebp - 0x5e], al
mov word [ebp - 0x5d], 0x10e
mov byte [ebp - 0x5b], 3
mov word [ebp - 0x142], cx
pop esi
movzx eax, byte [ebp + edi - 0x6a]
movzx ecx, byte [ebp + edi - 0x67]
movzx eax, word [ebp + eax*2 - 0x148]
mov edx, eax
and eax, ecx
or edx, ecx
sub edx, eax
movzx eax, byte [ebp + edi - 0x68]
add edi, esi
mov word [ebp + eax*2 - 0x148], dx
cmp edi, 0xe
jb 0x1002507e
mov dword [ebp - 0x20], 1
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x2c], 0x7f7b6fe6
mov dword [ebp - 0x2c], 9
cmp dword [ebp - 0x24], ebx
jne 0x10025107
cmp dword [ebp - 0x20], ebx
je 0x10025107
mov ecx, dword [ebp - 0x24]
xor edx, edx
mov eax, dword [ebp - 0x20]
cmp ecx, eax
mov ecx, 0x93c1de6f
setne dl
add edx, dword [ebp - 0x20]
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x20]
imul eax, eax, 0xbd01
sub eax, dword [ebp - 0x20]
cmp ecx, eax
sbb eax, eax
inc eax
sub eax, dword [ebp - 0x24]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x24]
imul eax, dword [ebp - 0x20]
dec eax
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x24], eax
mov byte [ebp - 0x25], bl
cmp byte [ebp - 0x25], 0
je 0x1002512c
push 0x1715
call dword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
xor eax, eax
mov dword [ebp - 0x220], 7
mov word [ebp - 0x13a], ax
lea ecx, [ebp - 0x234]
mov word [ebp - 0x234], ax
lea eax, [ebp - 0x148]
push eax
mov dword [ebp - 0x224], ebx
call fcn.10007d45
mov dword [ebp - 4], 5
lea ecx, [ebp - 0x1f4]
mov dword [ebp - 0x2c], 0x2db58e46
mov dword [ebp - 0x2c], 0x57ad95e1
mov dword [ebp - 0x2c], 0x9bf39019
push 3
call fcn.1000145c
push esi
lea ecx, [ebp - 0x204]
mov byte [ebp - 4], 6
call fcn.1000145c
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x154]
mov dword [ebp - 0x2c], 0x764361a6
push 4
call fcn.1000145c
mov dword [ebp - 0x18], ebx
jmp 0x100251c7
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1f4]
mov dword [eax + ecx*4], 0xbe4438b
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x100251b4
mov dword [ebp - 0x18], ebx
jmp 0x100251e5
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x204]
mov dword [eax + ecx*4], 0x17d72b90
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x100251d2
mov dword [ebp - 0x18], ebx
jmp 0x10025202
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x154]
mov dword [eax + ecx*4], 0xfb389fa1
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x100251ef
mov byte [ebp - 0x25], bl
cmp byte [ebp - 0x25], 0
je 0x10025219
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
mov eax, dword [ebp - 0x154]
lea ecx, [ebp - 0x154]
dec dword [eax + 4]
call fcn.100014df
lea ecx, [ebp - 0x204]
call fcn.100014df
lea ecx, [ebp - 0x1f4]
mov byte [ebp - 4], 5
call fcn.100014df
mov edi, ebx
push 3
lea ecx, [ebp - 0x100]
call fcn.1000145c
mov dword [ebp - 0x20], 0x4288a137
mov dword [ebp - 0x24], ebx
jmp 0x10025275
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x100]
mov dword [eax + ecx*4], 0x125d
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jl 0x10025262
mov eax, dword [ebp - 0x100]
inc dword [eax]
mov dword [ebp - 0x20], ebx
jmp 0x100252c3
mov dword [ebp - 0x24], ebx
jmp 0x1002529b
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x44], 0x1dfe4b28
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 1
jl 0x1002528d
mov dword [ebp - 0x44], ebx
jmp 0x100252bb
mov eax, dword [ebp - 0x44]
mov edx, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x100]
mov eax, dword [ecx + eax*4]
mov dword [ecx + edx*4], eax
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], esi
jle 0x100252a6
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 7
je 0x10025288
lea ecx, [ebp - 0x100]
call fcn.100014df
xor eax, eax
mov word [ebp + edi*2 - 0x148], ax
inc edi
cmp edi, 8
jb 0x10025249
push dword [ebp - 0x34]
lea ecx, [ebp - 0x24c]
call fcn.10007154
mov byte [ebp - 4], 8
mov dword [ebp - 0x30], 0x6aef
cmp dword [ebp - 0x30], 0x6d63
jle 0x1002535d
mov edi, ebx
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x2c], 0x5d9d
mov eax, edi
lea ecx, [ebp - 0x2e4]
cdq
push edx
push eax
call fcn.10001301
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10025333
mov eax, dword [eax]
push eax
call fcn.10048570
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x2e4]
call fcn.1000162e
dec edi
dec dword [ebp - 0x2c]
jne 0x10025319
mov edi, dword [ebp - 0x3c]
inc edi
mov dword [ebp - 0x3c], edi
cmp edi, 0x3024
jl 0x1002530f
cmp dword [ebp - 0x30], 0x6aba
jge 0x10025371
push str.pau_xtuw_gojgaww
call fcn.10048570
pop ecx
mov dword [ebp - 4], 8
lea ecx, [ebp - 0x1b8]
mov dword [ebp - 0x34], 0x2db58e46
mov dword [ebp - 0x34], 0x57ad95e1
mov dword [ebp - 0x34], 0x9bf39019
push 3
call fcn.1000145c
push esi
lea ecx, [ebp - 0x1c4]
mov byte [ebp - 4], 0xb
call fcn.1000145c
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x178]
mov dword [ebp - 0x34], 0x764361a6
push 4
call fcn.1000145c
mov dword [ebp - 0x18], ebx
jmp 0x100253da
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1b8]
mov dword [eax + ecx*4], 0xbe4438b
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x100253c7
mov dword [ebp - 0x18], ebx
jmp 0x100253f8
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c4]
mov dword [eax + ecx*4], 0x17d72b90
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x100253e5
mov dword [ebp - 0x18], ebx
jmp 0x10025415
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x178]
mov dword [eax + ecx*4], 0xfb389fa1
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x10025402
mov byte [ebp - 0x25], bl
cmp byte [ebp - 0x25], 0
je 0x1002542c
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
mov eax, dword [ebp - 0x178]
lea ecx, [ebp - 0x178]
dec dword [eax + 4]
call fcn.100014df
lea ecx, [ebp - 0x1c4]
call fcn.100014df
lea ecx, [ebp - 0x1b8]
mov byte [ebp - 4], 8
call fcn.100014df
mov dword [ebp - 0x2c], 0x7e8d
cmp dword [ebp - 0x2c], 0x7fde
jle 0x100254a3
mov esi, ebx
mov edi, ebx
mov eax, edi
mov ecx, 0x1007cfd8
xor eax, esi
cdq
push edx
push eax
call fcn.1000703f
inc edi
cmp edi, 0x91b
jl 0x1002546e
inc esi
cmp esi, 0x4b46
jl 0x1002546c
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyW]
mov byte [ebp - 4], 0xd
cmp dword [ebp - 0x2c], 0x7db4
jge 0x100254dd
mov edx, str.mefjgcma_dxr_gbnpt_kgqghusp_uyzw_zoswrmdcb_iimfkzoof_kzzpzb_rgqoh_darvllzip
mov ecx, 0x1007cfd8
call fcn.1000b30d
jmp 0x100254dd
mov dword [ebp - 4], 8
mov dword [ebp - 0x20], 0xba394643
mov dword [ebp - 0x34], 0x58a60016
push 2
mov dword [ebp - 0x2c], 0xffffffff
pop ecx
mov dword [ebp - 0x24], ebx
jmp 0x1002550f
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x7c], 0xc93
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 1
jl 0x10025501
mov dword [ebp - 0x20], ebx
jmp 0x100255c0
mov dword [ebp - 0x1c], 0xfc07e17f
mov dword [ebp - 0x2c], 0xf84255eb
mov dword [ebp - 0x1c], ebx
jmp 0x100255ae
mov dword [ebp - 0x30], 0x8fb0
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov eax, dword [ebp - 0x30]
push 2
setne dl
xor ecx, ecx
cmp eax, 0x4cf5
mov eax, dword [ebp - 0x7c]
setl cl
sub ecx, edx
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov eax, dword [ebp - 0x30]
setne dl
xor ecx, ecx
cmp edx, eax
mov edx, dword [ebp - 0x20]
sete cl
sub edx, ecx
xor ecx, ecx
imul edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
cmp edx, eax
setle cl
mov dword [ebp - 0x2c], ecx
mov eax, dword [ebp - 0x20]
pop ecx
mov eax, dword [ebp + eax*4 - 0x7c]
imul eax, dword [ebp - 0x2c]
neg eax
sub eax, dword [ebp - 0x34]
neg eax
sbb eax, eax
inc eax
cmp eax, 0xfffffffb
sbb eax, eax
inc eax
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x30]
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jle 0x10025530
mov eax, dword [ebp - 0x7c]
inc dword [ebp - 0x20]
push 2
pop ecx
cmp dword [ebp - 0x20], ebx
jle 0x1002551d
push 0x5c
mov byte [ebp - 0x4c], bl
mov word [ebp - 0x4b], 0x146
mov byte [ebp - 0x49], 0xed
pop eax
mov word [ebp - 0x50], ax
mov dword [ebp - 0x3c], 0xe7a66fe7
mov dword [ebp - 0x24], 0x13dce9d
mov dword [ebp - 0x2c], 0xc86695cd
push 3
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 0x18], ebx
pop ecx
jmp 0x1002560e
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x10c], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x10025601
mov dword [ebp - 0x18], ebx
jmp 0x10025625
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x118], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x10025618
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
add eax, 0x4af12a83
je 0x10025649
mov eax, dword [ebp - 0x110]
mov eax, dword [ebp - 0x108]
xor ecx, ecx
test eax, eax
mov eax, dword [ebp - 0x110]
setg cl
xor edx, edx
cmp ecx, eax
setg dl
sub edx, 0x161d
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, 0x9919
setne cl
xor eax, eax
cmp ecx, 3
setne al
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], ebx
jne 0x1002568f
mov eax, dword [ebp - 0x10c]
mov eax, dword [ebp - 0x110]
xor ecx, ecx
inc ecx
mov dword [ebp - 0x10c], ecx
cmp dword [ebp - 0x110], 4
jl 0x100256ae
cmp dword [ebp - 0x24], ebx
jne 0x100256ae
mov ecx, ebx
xor eax, eax
cmp ecx, 0x73ff82f
push 2
sete al
mov ecx, ebx
sub eax, dword [ebp - 0x3c]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x34], eax
pop eax
mov esi, eax
cmp esi, eax
jne 0x100256d8
mov ecx, eax
mov esi, eax
jmp 0x10025850
movzx edx, byte [ebp + esi - 0x4b]
mov eax, esi
sub eax, ecx
push 2
movzx eax, byte [ebp + eax - 0x4e]
movzx eax, word [ebp + eax*2 - 0x50]
mov ecx, eax
and eax, edx
or ecx, edx
sub ecx, eax
movzx eax, byte [ebp + esi - 0x4c]
mov word [ebp + eax*2 - 0x50], cx
lea ecx, [ebp - 0x190]
mov dword [ebp - 0x24], 0x45cdbe8e
call fcn.1000145c
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x18], ebx
jmp 0x1002572b
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xcc], 0xfffffffb
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1002571a
push 2
mov dword [ebp - 0x18], ebx
pop edx
jmp 0x1002574c
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x190]
mov dword [eax + ecx*4], 0xffaa2324
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x10025739
mov dword [ebp - 0x24], edx
cmp dword [ebp - 0x24], ebx
jl 0x1002583c
mov edi, dword [ebp - 0x190]
push edx
lea ecx, [ebp - 0x88]
call fcn.1000145c
push 2
mov dword [ebp - 0x18], ebx
pop edx
jmp 0x1002578a
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x88]
mov dword [eax + ecx*4], 0x99fb023e
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x10025777
mov dword [ebp - 0x18], ebx
jmp 0x100257a5
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x120], 1
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x10025794
mov eax, dword [ebp - 0x88]
mov dword [eax], ebx
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0xcc]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0xcc]
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
mov edx, dword [ebp + eax*4 - 0xcc]
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
sub edx, dword [ebp + eax*4 - 0xcc]
xor eax, eax
mov ecx, dword [ebp - 0x88]
cmp edx, dword [ecx]
setl al
mov dword [edi + 4], eax
mov eax, dword [ecx]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0xcc]
cmp eax, 0xf
mov eax, dword [ebp - 0x88]
setl cl
mov dword [ebp - 0x120], ecx
inc dword [eax]
cmp dword [eax], 2
jle 0x100257b2
cmp dword [ebp - 0x120], ebx
lea ecx, [ebp - 0x88]
call fcn.100014df
dec dword [ebp - 0x24]
push 2
pop edx
jns 0x10025763
lea ecx, [ebp - 0x190]
mov byte [ebp - 4], 8
call fcn.100014df
push 2
mov ecx, ebx
pop eax
add esi, eax
cmp esi, 4
jb 0x100256cb
xor ecx, ecx
inc ecx
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x2c], 0x17b844a7
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x20], ecx
lea ecx, [ebp - 0x1e8]
push 4
call fcn.1000145c
push 4
mov dword [ebp - 0x1c], ebx
pop edx
jmp 0x10025897
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x1d4], 0xfffffff7
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jl 0x10025886
mov dword [ebp - 0x1c], ebx
jmp 0x100258b4
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1e8]
mov dword [eax + ecx*4], 0x6798564d
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jl 0x100258a1
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp eax, 0x6aed1d25
setle cl
xor edx, edx
imul ecx, dword [ebp - 0x18]
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setl dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x18]
setge cl
mov dword [ebp - 0x34], ecx
xor ecx, ecx
cmp dword [ebp - 0x34], eax
setl cl
cmp ecx, 0xfff8
sbb eax, eax
inc eax
cmp eax, 0xca8c98aa
ja 0x10025905
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x1c], 0xcd49
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x18]
jne 0x10025923
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
xor edx, edx
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x20]
cmp eax, 1
mov eax, dword [ebp - 0x2c]
setge dl
xor ecx, ecx
cmp eax, edx
setle cl
sub ecx, dword [ebp - 0x18]
jne 0x1002594c
cmp dword [ebp - 0x24], ebx
jne 0x1002594c
mov ecx, ebx
jmp 0x1002594f
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x18]
xor edx, edx
imul eax, ecx
or edi, 0xffffffff
cmp eax, edi
mov eax, dword [ebp - 0x1d4]
setl dl
xor ecx, ecx
imul edx, eax
mov eax, dword [ebp - 0x20]
cmp edx, eax
sete cl
sub ecx, dword [ebp - 0x1d4]
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x1d4], ecx
mov dword [ebp - 0x1c], ebx
jmp 0x100259b3
mov dword [ebp - 0x2c], 0x8a2db637
mov dword [ebp - 0x20], 0x14
jmp 0x100259a7
mov dword [ebp - 0x34], 0x7c242ea6
cmp dword [ebp - 0x34], ebx
jne 0x100259ad
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0x15
jg 0x10025998
inc dword [ebp - 0x2c]
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 7
jge 0x10025988
lea ecx, [ebp - 0x1e8]
call fcn.100014df
xor eax, eax
mov word [ebp - 0x4e], ax
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x2c], 0x5fb26c4f
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x1c], ebx
jmp 0x100259ea
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x38], 0xbdde0bcd
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jl 0x100259dc
mov dword [ebp - 0x1c], ebx
jmp 0x10025a06
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x2f4], 0x1a7160c6
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x100259f5
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], ebx
jl 0x10025b54
push 0xfffffffffffffffd
pop esi
push 4
lea ecx, [ebp - 0x16c]
call fcn.1000145c
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x34], 0xfffffffa
mov dword [ebp - 0x2c], 1
mov dword [ebp - 0x24], ebx
jmp 0x10025a51
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x16c]
mov dword [eax + ecx*4], 0x88cdf8ab
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 4
jl 0x10025a3e
mov byte [ebp - 0x25], bl
cmp byte [ebp - 0x25], 0
je 0x10025a6e
push ebx
push 0x352
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_VerSetConditionMask]
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x38], ebx
jne 0x10025abc
mov dword [ebp - 0x2c], edi
xor ecx, ecx
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x16c]
mov dword [eax], edx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x38]
cmp edx, eax
setg cl
mov dword [ebp - 0x20], ecx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x38]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp + eax*4 - 0x38]
mov eax, dword [ebp - 0x18]
add ecx, dword [ebp + eax*4 - 0x38]
jne 0x10025ab9
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x38], ebx
je 0x10025abc
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x38]
xor ecx, ecx
cmp eax, 1
setge cl
cmp esi, ecx
mov ecx, dword [ebp - 0x38]
sbb eax, eax
neg eax
imul ecx, eax
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp + eax*4 - 0x38]
mov eax, dword [ebp - 0x18]
sub edx, ecx
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x38]
cmp edx, eax
setne cl
xor edx, edx
mov dword [ebp - 0x2c], ecx
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x38]
cmp ecx, eax
mov eax, dword [ebp - 0x38]
setge dl
imul eax, edx
test eax, eax
je 0x10025b0b
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x38]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x38]
cmp dword [ebp - 0x18], ebx
je 0x10025b20
cmp dword [ebp - 0x34], ebx
jne 0x10025b20
mov edx, ebx
jmp 0x10025b23
xor edx, edx
inc edx
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp edx, eax
push 6
setle cl
pop eax
cmp eax, ecx
mov eax, dword [ebp - 0x18]
sbb ecx, ecx
inc ecx
imul ecx, dword [ebp + eax*4 - 0x38]
mov dword [ebp - 0x2c], ecx
lea ecx, [ebp - 0x16c]
call fcn.100014df
dec dword [ebp - 0x18]
jns 0x10025a1b
mov dword [ebp - 0x20], ebx
jmp 0x10025b6a
mov dword [ebp - 0x34], 0xfffffff6
mov dword [ebp - 0x34], 9
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xfffffffc
jne 0x10025b59
xor eax, eax
mov dword [ebp - 0x124], 7
mov word [ebp - 0x138], ax
lea ecx, [ebp - 0x138]
lea eax, [ebp - 0x50]
mov dword [ebp - 0x128], ebx
push eax
call fcn.10007d45
mov byte [ebp - 4], 0x10
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x18], 0x2afe01bd
mov dword [ebp - 0x30], 0xfffffff9
mov dword [ebp - 0x24], ebx
jmp 0x10025bc3
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xb4], 0x3a4a9bdb
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 4
jl 0x10025bb2
mov dword [ebp - 0x18], 3
cmp dword [ebp - 0x18], ebx
jl 0x10025c9c
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x34], 0xffff
mov byte [ebp - 0x25], bl
cmp byte [ebp - 0x25], 0
je 0x10025c07
push 0x548
push ebx
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_PolyPolygon]
mov dword [ebp - 0x2c], 0x7c2d
cmp dword [ebp - 0x2c], 0x7d25
jle 0x10025c60
mov esi, ebx
mov edi, ebx
lea eax, [edi + esi]
cdq
lea ecx, [ebp - 0x2cc]
push edx
push eax
call fcn.10001301
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10025c36
mov eax, dword [eax]
push eax
call fcn.10048570
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x2cc]
call fcn.1000162e
inc edi
cmp edi, 0x6ec1
jl 0x10025c1b
inc esi
cmp esi, 0x3037
jl 0x10025c19
or edi, 0xffffffff
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x34]
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
setge cl
mov dword [ebp - 0xb4], ecx
cmp dword [ebp - 0x2c], 0x7880
jge 0x10025c8d
push str.fcebikv_ljnd_abp_mhshozj_jfnf_dlqdgvs_wkmabiaqi
call fcn.10048570
pop ecx
mov dword [ebp - 4], 0x10
dec dword [ebp - 0x18]
jmp 0x10025bd0
mov dword [ebp - 0x18], ebx
jmp 0x10025d74
mov dword [ebp - 0x1c], 1
mov dword [ebp - 0x1ac], edi
mov dword [ebp - 0x1a8], edi
mov dword [ebp - 0x1a4], edi
mov dword [ebp - 0x1a0], edi
mov byte [ebp - 0x25], bl
cmp byte [ebp - 0x25], 0
je 0x10025cd8
push ebx
push 0x54d
call dword [sym.imp.GDI32.dll_CreateHatchBrush]
mov dword [ebp - 0x1c], ebx
jmp 0x10025d67
mov dword [ebp - 0x34], 0xf9520128
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0xb4], ebx
je 0x10025d3d
mov eax, dword [ebp - 0xa8]
xor edx, edx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp + eax*4 - 0xb4]
mov eax, dword [ebp - 0xac]
cmp eax, ecx
setl dl
mov dword [ebp - 0x1a8], edx
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x30]
je 0x10025d29
cmp dword [ebp - 0xa8], ebx
jne 0x10025d33
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0xb4]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0xb4]
mov eax, dword [ebp - 0x1c]
mov ecx, 0xfffe
mov dword [ebp + eax*4 - 0xb4], ebx
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
sbb eax, eax
xor ecx, ecx
inc eax
cmp eax, 0x12ef
setge cl
mov dword [ebp - 0x34], ecx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jle 0x10025ce0
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
je 0x10025ca4
mov byte [ebp - 0x48], bl
mov word [ebp - 0x47], 0x194
mov byte [ebp - 0x45], 0xf1
mov dword [ebp - 0x34], 0x203e
cmp dword [ebp - 0x34], 0x11d8
jge 0x10025e54
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0x74]
push eax
push str._lld__lld
call fcn.10048a6a
mov eax, dword [ebp - 0x70]
add esp, 0xc
mov edi, dword [ebp - 0x74]
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x2c], eax
push 0xa
pop esi
push ebx
push esi
push eax
push edi
mov dword [ebp - 0x40], esi
call fcn.10060ec0
add eax, 1
push ebx
push esi
adc edx, ebx
push edx
push eax
call fcn.10060ec0
cmp edx, dword [ebp - 0xa0]
jg 0x10025e40
mov esi, dword [ebp - 0xa4]
jge 0x10025e3c
mov edi, dword [ebp - 0x74]
push ebx
push 0xa
push dword [ebp - 0x30]
sub edi, eax
mov eax, dword [ebp - 0x70]
push dword [ebp - 0x40]
sbb eax, edx
mov dword [ebp - 0x2c], eax
call fcn.1004c920
mov ecx, edx
mov dword [ebp - 0x40], eax
push ecx
push eax
push dword [ebp - 0x70]
mov dword [ebp - 0x30], ecx
push dword [ebp - 0x74]
call fcn.10060ec0
push dword [ebp - 0x30]
add eax, 1
push dword [ebp - 0x40]
adc edx, ebx
push edx
push eax
call fcn.10060ec0
cmp edx, dword [ebp - 0xa0]
jl 0x10025df0
jg 0x10025e40
cmp eax, esi
jbe 0x10025df0
push dword [ebp - 0x2c]
push edi
push str._lld_n
call fcn.10048570
add esp, 0xc
or edi, 0xffffffff
push 0x5f
pop eax
push 2
mov word [ebp - 0x54], ax
mov ecx, ebx
pop eax
mov esi, eax
cmp esi, eax
jne 0x10025e6c
mov ecx, eax
mov esi, eax
jmp 0x10025e98
movzx edx, byte [ebp + esi - 0x47]
mov eax, esi
sub eax, ecx
push 2
movzx eax, byte [ebp + eax - 0x4a]
movzx ecx, word [ebp + eax*2 - 0x54]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x48]
add ecx, edx
mov word [ebp + eax*2 - 0x54], cx
mov ecx, ebx
pop eax
add esi, eax
cmp esi, 4
jb 0x10025e62
xor eax, eax
lea ecx, [ebp - 0x19c]
push 3
mov word [ebp - 0x52], ax
call fcn.1000145c
push 3
mov dword [ebp - 0x1c], ebx
pop edx
jmp 0x10025ecb
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x278], 1
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jl 0x10025eba
mov dword [ebp - 0x1c], ebx
jmp 0x10025ee8