Function at 0x1000c334
Capabilities:
Identify system language via api

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1006b530
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x18ec
call fcn.10066ab0
push esi
push edi
movzx eax, byte [ebp + 0x24]
test eax, eax
je 0x10016b3c
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0xd90], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0xdac], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0xdb4], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xd60], eax
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0xd98], eax
lea eax, [ebp + 0x18]
mov dword [ebp - 0xe2c], eax
mov eax, dword [ebp - 0xe2c]
movzx eax, byte [eax]
test eax, eax
je 0x10016af7
mov eax, dword [ebp - 0xd90]
mov dword [ebp - 0xc5c], eax
mov eax, dword [ebp - 0xd98]
mov dword [ebp - 0xcd8], eax
mov eax, dword [ebp - 0xdac]
mov dword [ebp - 0xaec], eax
mov eax, dword [ebp - 0xdb4]
mov dword [ebp - 0x528], eax
mov dword [ebp - 0x6c], 1
mov dword [ebp - 0x48], 0x7e0d1b71
mov dword [ebp - 0x1ac], 0x5a60915b
mov dword [ebp - 0x55c], 0x7fa6fbaa
mov dword [ebp - 0x8d0], 1
mov dword [ebp - 0x5dc], 0xf04a32a0
push 4
lea ecx, [ebp - 0x1080]
call fcn.1002a7d6
and dword [ebp - 4], 0
mov dword [ebp - 0xa4], 0
jmp 0x1000c43b
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 4
jge 0x1000c457
mov eax, dword [ebp - 0xa4]
mov dword [ebp + eax*4 - 0xb14], 0xfffffff6
jmp 0x1000c42e
mov dword [ebp - 0xa4], 0
jmp 0x1000c470
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 4
jge 0x1000c492
push dword [ebp - 0xa4]
lea ecx, [ebp - 0x1080]
call fcn.1002a8d8
mov dword [eax], 0xf905
jmp 0x1000c463
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x12ac], eax
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x1318], eax
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x6c], eax
je 0x1000c4b8
mov dword [ebp - 0xdbc], 1
jmp 0x1000c4bf
and dword [ebp - 0xdbc], 0
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x1238], eax
cmp dword [ebp - 0x6c], 0xc92ea21e
jb 0x1000c4dd
mov dword [ebp - 0x5f0], 1
jmp 0x1000c4e4
and dword [ebp - 0x5f0], 0
mov eax, dword [ebp - 0x5f0]
neg eax
neg eax
jne 0x1000c4f6
cmp dword [ebp - 0x6c], 0
je 0x1000c50b
mov eax, 0x8f1e0c86
test eax, eax
je 0x1000c50b
mov dword [ebp - 0xafc], 1
jmp 0x1000c512
and dword [ebp - 0xafc], 0
mov eax, dword [ebp - 0x6c]
imul eax, dword [ebp - 0xafc]
xor ecx, ecx
inc ecx
sub ecx, eax
mov dword [ebp - 0x48], ecx
cmp dword [ebp - 0x48], 0x2395e2de
je 0x1000c542
mov eax, 0x4f943af7
test eax, eax
je 0x1000c542
mov dword [ebp - 0xb30], 1
jmp 0x1000c549
and dword [ebp - 0xb30], 0
cmp dword [ebp - 0xb30], 0x6aa1c33c
jl 0x1000c561
mov dword [ebp - 0xb38], 1
jmp 0x1000c568
and dword [ebp - 0xb38], 0
mov eax, dword [ebp - 0xb38]
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 0
je 0x1000c775
mov dword [ebp - 0x230], 0x88ad
mov dword [ebp - 0xb48], 0xc18a
mov dword [ebp - 0xb68], 0x3e1fe01
mov dword [ebp - 0x48], 0
jmp 0x1000c5af
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 3
jg 0x1000c5e0
mov dword [ebp - 0xdc4], 5
mov eax, dword [ebp - 0x48]
cmp dword [ebp + eax*4 - 0xb14], 0
je 0x1000c5ce
jmp 0x1000c5e0
push 0
lea eax, [ebp - 0xdc4]
push eax
call fcn.10017bad
pop ecx
pop ecx
jmp 0x1000c5a8
mov eax, dword [ebp - 0x230]
neg eax
cmp eax, 0xb400
jge 0x1000c5fb
mov dword [ebp - 0xaf4], 1
jmp 0x1000c602
and dword [ebp - 0xaf4], 0
cmp dword [ebp - 0x230], 0
je 0x1000c711
cmp dword [ebp - 0x48], 0xbe49
je 0x1000c624
mov dword [ebp - 0xb40], 1
jmp 0x1000c62b
and dword [ebp - 0xb40], 0
mov eax, dword [ebp - 0x230]
cmp eax, dword [ebp - 0xb40]
jge 0x1000c645
mov dword [ebp - 0xdcc], 1
jmp 0x1000c64c
and dword [ebp - 0xdcc], 0
mov eax, dword [ebp - 0x230]
mov dword [ebp - 0x13b4], eax
mov eax, dword [ebp - 0x230]
add eax, dword [ebp - 0xb48]
je 0x1000c67b
cmp dword [ebp - 0xb48], 0
je 0x1000c67b
mov dword [ebp - 0xb50], 1
jmp 0x1000c682
and dword [ebp - 0xb50], 0
cmp dword [ebp - 0xb50], 0x96fcd4d3
jbe 0x1000c69a
mov dword [ebp - 0xb58], 1
jmp 0x1000c6a1
and dword [ebp - 0xb58], 0
cmp dword [ebp - 0xb58], 0
ja 0x1000c6b6
mov dword [ebp - 0xb60], 1
jmp 0x1000c6bd
and dword [ebp - 0xb60], 0
mov eax, dword [ebp - 0xb60]
mov dword [ebp - 0xb68], eax
mov eax, dword [ebp - 0x1ac]
cmp dword [ebp - 0xb68], eax
jle 0x1000c6e9
cmp dword [ebp - 0x6c], 0
je 0x1000c6e9
mov dword [ebp - 0xbb8], 1
jmp 0x1000c6f0
and dword [ebp - 0xbb8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb14]
cmp dword [ebp - 0xbb8], eax
jge 0x1000c711
mov dword [ebp - 0xba4], 1
jmp 0x1000c718
and dword [ebp - 0xba4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb14]
imul eax, dword [ebp - 0xba4]
cmp eax, 0xe8e23095
jae 0x1000c73f
mov dword [ebp - 0x5bc], 1
jmp 0x1000c746
and dword [ebp - 0x5bc], 0
mov eax, dword [ebp - 0xaf4]
cmp eax, dword [ebp - 0x5bc]
jle 0x1000c760
mov dword [ebp - 0xa40], 1
jmp 0x1000c767
and dword [ebp - 0xa40], 0
mov eax, dword [ebp - 0xa40]
mov dword [ebp - 0x48], eax
jmp 0x1000ca91
mov dword [ebp - 0x5f4], 0x86adb69c
mov dword [ebp - 0x388], 0
jmp 0x1000c798
mov eax, dword [ebp - 0x388]
inc eax
mov dword [ebp - 0x388], eax
cmp dword [ebp - 0x388], 3
jge 0x1000c7b4
mov eax, dword [ebp - 0x388]
mov dword [ebp + eax*4 - 0xf64], 0xffffffff
jmp 0x1000c78b
mov dword [ebp - 0x48], 0xfffffff8
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x1ac], eax
jg 0x1000c7d2
mov dword [ebp - 0x8e0], 1
jmp 0x1000c7d9
and dword [ebp - 0x8e0], 0
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0xb14], 0
jne 0x1000c7f5
mov dword [ebp - 0x5cc], 1
jmp 0x1000c7fc
and dword [ebp - 0x5cc], 0
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x1240], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xb14]
mov dword [ebp - 0x1350], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xf64]
mov dword [ebp - 0x1278], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xb14]
push 4
pop ecx
imul ecx, ecx, 3
add eax, dword [ebp + ecx - 0xb14]
cmp eax, 1
je 0x1000c854
mov dword [ebp - 0x5c4], 1
jmp 0x1000c85b
and dword [ebp - 0x5c4], 0
cmp dword [ebp - 0x5c4], 0
jne 0x1000c870
mov dword [ebp - 0x8c8], 1
jmp 0x1000c877
and dword [ebp - 0x8c8], 0
mov eax, dword [ebp - 0x8c8]
dec eax
cmp dword [ebp - 0x5cc], eax
jg 0x1000c892
mov dword [ebp - 0xb00], 1
jmp 0x1000c899
and dword [ebp - 0xb00], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xf64]
add eax, dword [ebp - 0xb00]
cmp eax, dword [ebp - 0x55c]
jg 0x1000c8bf
mov dword [ebp - 0x5d4], 1
jmp 0x1000c8c6
and dword [ebp - 0x5d4], 0
mov eax, dword [ebp - 0x5d4]
mov dword [ebp - 0x8d0], eax
mov eax, dword [ebp - 0x8d0]
mov dword [ebp - 0x5dc], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb14]
cmp dword [ebp - 0x5dc], eax
je 0x1000c8ff
mov dword [ebp - 0xa48], 1
jmp 0x1000c906
and dword [ebp - 0xa48], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xf64]
add eax, dword [ebp - 0xa48]
je 0x1000c92f
mov eax, 0x63ad
test eax, eax
je 0x1000c92f
mov dword [ebp - 0x5e4], 1
jmp 0x1000c936
and dword [ebp - 0x5e4], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xb14]
cmp dword [ebp - 0x5e4], eax
jge 0x1000c956
mov dword [ebp - 0x8d8], 1
jmp 0x1000c95d
and dword [ebp - 0x8d8], 0
mov eax, dword [ebp - 0x55c]
cmp dword [ebp - 0x8d8], eax
jle 0x1000c977
mov dword [ebp - 0x5ec], 1
jmp 0x1000c97e
and dword [ebp - 0x5ec], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x5ec]
sub ecx, dword [ebp + eax - 0xb14]
cmp ecx, dword [ebp - 0x1ac]
jne 0x1000c9b4
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xf64], 0
je 0x1000c9b4
mov dword [ebp - 0xb20], 1
jmp 0x1000c9bb
and dword [ebp - 0xb20], 0
mov eax, dword [ebp - 0xb20]
mov dword [ebp - 0x5f4], eax
cmp dword [ebp - 0x5f4], 0
jne 0x1000c9d7
push 0xfffffffffffffffb
pop eax
test eax, eax
je 0x1000c9f5
push 1
lea ecx, [ebp - 0x1080]
call fcn.1002a8d8
cmp dword [eax], 0
je 0x1000c9f5
mov dword [ebp - 0x5fc], 1
jmp 0x1000c9fc
and dword [ebp - 0x5fc], 0
mov eax, dword [ebp - 0x8e0]
cmp eax, dword [ebp - 0x5fc]
jge 0x1000ca16
mov dword [ebp - 0xa50], 1
jmp 0x1000ca1d
and dword [ebp - 0xa50], 0
cmp dword [ebp - 0xa50], 0x419813da
jl 0x1000ca35
mov dword [ebp - 0x604], 1
jmp 0x1000ca3c
and dword [ebp - 0x604], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb14]
cmp dword [ebp - 0x604], eax
jle 0x1000ca5d
mov dword [ebp - 0x8e8], 1
jmp 0x1000ca64
and dword [ebp - 0x8e8], 0
mov eax, dword [ebp - 0x55c]
cmp dword [ebp - 0x8e8], eax
jle 0x1000ca7e
mov dword [ebp - 0x60c], 1
jmp 0x1000ca85
and dword [ebp - 0x60c], 0
mov eax, dword [ebp - 0x60c]
mov dword [ebp - 0x1ac], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1080]
call fcn.1002a8ad
mov dword [ebp - 0x60], 1
mov dword [ebp - 0x3c4], 0xd313dd33
mov dword [ebp - 0x2e8], 0
jmp 0x1000caca
mov eax, dword [ebp - 0x2e8]
inc eax
mov dword [ebp - 0x2e8], eax
cmp dword [ebp - 0x2e8], 1
jge 0x1000cae6
mov eax, dword [ebp - 0x2e8]
mov dword [ebp + eax*4 - 0x1374], 0xbd97
jmp 0x1000cabd
mov dword [ebp - 0x3c4], 0x1a
jmp 0x1000caff
mov eax, dword [ebp - 0x3c4]
dec eax
mov dword [ebp - 0x3c4], eax
cmp dword [ebp - 0x3c4], 0xfffffff4
jg 0x1000cb53
mov dword [ebp - 0x2ec], 1
mov dword [ebp - 0x2ec], 0
jmp 0x1000cb2b
mov eax, dword [ebp - 0x2ec]
inc eax
mov dword [ebp - 0x2ec], eax
cmp dword [ebp - 0x2ec], 0
jg 0x1000cb51
push 1
push 0x1a13
push 0
push 0x12a8
push 0x16e6
call fcn.1000b05f
add esp, 0x14
jmp 0x1000cb1e
jmp 0x1000caf2
mov dword [ebp - 0x58], 0x7e0d1b71
mov dword [ebp - 0x1c0], 0x5a60915b
mov dword [ebp - 0x52c], 0x7fa6fbaa
mov dword [ebp - 0x27c], 1
mov dword [ebp - 0x434], 0
jmp 0x1000cb91
mov eax, dword [ebp - 0x434]
inc eax
mov dword [ebp - 0x434], eax
cmp dword [ebp - 0x434], 2
jge 0x1000cbad
mov eax, dword [ebp - 0x434]
mov dword [ebp + eax*4 - 0x132c], 0xb1cecb45
jmp 0x1000cb84
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x27c]
mov dword [ebp + eax - 0x132c], ecx
mov dword [ebp - 0x27c], 1
jmp 0x1000cbd9
mov eax, dword [ebp - 0x27c]
dec eax
mov dword [ebp - 0x27c], eax
cmp dword [ebp - 0x27c], 0
jl 0x1000cc1f
mov dword [ebp - 0xdd4], 0x8430
mov byte [ebp - 0x141], 0
movzx eax, byte [ebp - 0x141]
test eax, eax
je 0x1000cc12
push 0x88c
push 0x4aae
push 0
call fcn.1001750e
add esp, 0xc
cmp dword [ebp - 0xdd4], 0
je 0x1000cc1d
jmp 0x1000cbcc
jmp 0x1000cbcc
mov dword [ebp - 0x714], 1
mov dword [ebp - 0x970], 0xf04a32a0
push 4
lea ecx, [ebp - 0x1110]
call fcn.1002a7d6
mov dword [ebp - 4], 1
mov dword [ebp - 0x2f4], 0xe0a8eac8
mov dword [ebp - 0x2f4], 0
jmp 0x1000cc6a
mov eax, dword [ebp - 0x2f4]
dec eax
mov dword [ebp - 0x2f4], eax
cmp dword [ebp - 0x2f4], 0xffffffe7
jl 0x1000cc8f
mov dword [ebp - 0xddc], 0xf951fe77
push 0
lea eax, [ebp - 0xddc]
push eax
call fcn.10017361
pop ecx
pop ecx
jmp 0x1000cc5d
mov byte [ebp - 0x18e], 0
movzx eax, byte [ebp - 0x18e]
test eax, eax
je 0x1000ccb9
push 0x69f
push 0
push 0
push 1
push 0x5e8a
call fcn.100197c9
add esp, 0x14
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x23c], 8
mov dword [ebp - 0x3cc], 0
jmp 0x1000cce3
mov eax, dword [ebp - 0x3cc]
inc eax
mov dword [ebp - 0x3cc], eax
cmp dword [ebp - 0x3cc], 1
jge 0x1000ccff
mov eax, dword [ebp - 0x3cc]
mov dword [ebp + eax*4 - 0xf4], 0xe80031aa
jmp 0x1000ccd6
mov dword [ebp - 0x24], 0
jmp 0x1000cd0f
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xffffffec
jle 0x1000ce3e
mov dword [ebp - 0x194], 0
mov dword [ebp - 0xb28], 0xfffffff7
mov dword [ebp - 0x564], 0
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0xb28], eax
cmp dword [ebp - 0xb28], 1
jbe 0x1000cd58
mov dword [ebp - 0x8f0], 1
jmp 0x1000cd5f
and dword [ebp - 0x8f0], 0
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x564], eax
cmp dword [ebp - 0x564], 0
je 0x1000cd86
cmp dword [ebp - 0x194], 0
je 0x1000cd86
mov dword [ebp - 0x614], 1
jmp 0x1000cd8d
and dword [ebp - 0x614], 0
mov eax, dword [ebp - 0x194]
add eax, dword [ebp - 0x614]
cmp dword [ebp - 0x8f0], eax
je 0x1000cdad
mov dword [ebp - 0x61c], 1
jmp 0x1000cdb4
and dword [ebp - 0x61c], 0
mov eax, dword [ebp - 0x194]
cmp dword [ebp - 0x61c], eax
jle 0x1000cdce
mov dword [ebp - 0xde4], 1
jmp 0x1000cdd5
and dword [ebp - 0xde4], 0
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x1280], eax
mov eax, dword [ebp - 0x564]
sub eax, dword [ebp - 0x194]
sub eax, dword [ebp - 0x194]
mov dword [ebp - 0xa58], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xa58]
mov dword [ebp + eax - 0xf4], ecx
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0xa58]
je 0x1000ce26
mov dword [ebp - 0x624], 1
jmp 0x1000ce2d
and dword [ebp - 0x624], 0
mov eax, dword [ebp - 0x624]
mov dword [ebp - 0x23c], eax
jmp 0x1000cd08
mov dword [ebp - 0x24], 3
jmp 0x1000ce4e
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xffffffe7
jle 0x1000d1ac
mov dword [ebp - 0x46c], 0
mov dword [ebp - 0xdfc], 0x389d0e13
mov dword [ebp - 0x2fc], 0
jmp 0x1000ce85
mov eax, dword [ebp - 0x2fc]
inc eax
mov dword [ebp - 0x2fc], eax
cmp dword [ebp - 0x2fc], 1
jge 0x1000cea1
mov eax, dword [ebp - 0x2fc]
mov dword [ebp + eax*4 - 0xe8], 0x83d1f0df
jmp 0x1000ce78
mov eax, dword [ebp - 0x46c]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0xf4]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0xf4]
jg 0x1000ced0
mov dword [ebp - 0x8f8], 1
jmp 0x1000ced7
and dword [ebp - 0x8f8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe8]
cmp dword [ebp - 0x8f8], eax
jle 0x1000cef8
mov dword [ebp - 0x62c], 1
jmp 0x1000ceff
and dword [ebp - 0x62c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe8]
cmp dword [ebp - 0x62c], eax
jl 0x1000cf20
mov dword [ebp - 0xb64], 1
jmp 0x1000cf27
and dword [ebp - 0xb64], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf4]
cmp eax, dword [ebp - 0xb64]
jle 0x1000cf48
mov dword [ebp - 0x634], 1
jmp 0x1000cf4f
and dword [ebp - 0x634], 0
cmp dword [ebp - 0x634], 0x17530975
jl 0x1000cf67
mov dword [ebp - 0x900], 1
jmp 0x1000cf6e
and dword [ebp - 0x900], 0
mov eax, dword [ebp - 0x46c]
sub eax, dword [ebp - 0x46c]
imul ecx, dword [ebp - 0x900], 0x360e
cmp eax, ecx
je 0x1000cf94
mov dword [ebp - 0x63c], 1
jmp 0x1000cf9b
and dword [ebp - 0x63c], 0
mov eax, dword [ebp - 0x23c]
cmp dword [ebp - 0x63c], eax
jle 0x1000cfb5
mov dword [ebp - 0xdec], 1
jmp 0x1000cfbc
and dword [ebp - 0xdec], 0
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x1360], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xf4], 0
je 0x1000cff1
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xe8], 0
je 0x1000cff1
mov dword [ebp - 0xa60], 1
jmp 0x1000cff8
and dword [ebp - 0xa60], 0
cmp dword [ebp - 0xa60], 0xfffffffb
jne 0x1000d00d
mov dword [ebp - 0x644], 1
jmp 0x1000d014
and dword [ebp - 0x644], 0
cmp dword [ebp - 0x644], 0
jge 0x1000d029
mov dword [ebp - 0x908], 1
jmp 0x1000d030
and dword [ebp - 0x908], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x908], eax
jne 0x1000d047
mov dword [ebp - 0x64c], 1
jmp 0x1000d04e
and dword [ebp - 0x64c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe8]
imul eax, dword [ebp - 0x64c]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0xf4]
jg 0x1000d07d
mov dword [ebp - 0xb1c], 1
jmp 0x1000d084
and dword [ebp - 0xb1c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe8]
cmp dword [ebp - 0xb1c], eax
jge 0x1000d0a5
mov dword [ebp - 0x4d4], 1
jmp 0x1000d0ac
and dword [ebp - 0x4d4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x4d4]
mov dword [ebp + eax - 0xf4], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe8]
cmp dword [ebp - 0x4d4], eax
jge 0x1000d0e0
mov dword [ebp - 0x654], 1
jmp 0x1000d0e7
and dword [ebp - 0x654], 0
cmp dword [ebp - 0x654], 0x367afff1
jge 0x1000d0ff
mov dword [ebp - 0x910], 1
jmp 0x1000d106
and dword [ebp - 0x910], 0
mov eax, dword [ebp - 0x24]
imul eax, dword [ebp - 0x910]
cmp eax, dword [ebp - 0x46c]
je 0x1000d124
mov dword [ebp - 0x65c], 1
jmp 0x1000d12b
and dword [ebp - 0x65c], 0
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov edx, dword [ebp - 0x65c]
sub edx, dword [ebp + ecx - 0xe8]
cmp dword [ebp + eax - 0xe8], edx
jle 0x1000d159
mov dword [ebp - 0xdf4], 1
jmp 0x1000d160
and dword [ebp - 0xdf4], 0
mov eax, dword [ebp - 0x23c]
mov dword [ebp - 0x1288], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf4]
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 0
jne 0x1000d194
mov dword [ebp - 0xa68], 1
jmp 0x1000d19b
and dword [ebp - 0xa68], 0
mov eax, dword [ebp - 0xa68]
mov dword [ebp - 0xdfc], eax
jmp 0x1000ce47
mov dword [ebp - 0xc8], 0
jmp 0x1000d1c5
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 4
jge 0x1000d1e1
mov eax, dword [ebp - 0xc8]
mov dword [ebp + eax*4 - 0x8c0], 0xfffffff6
jmp 0x1000d1b8
push 0x5936
push 0
call fcn.10017036
pop ecx
pop ecx
mov dword [ebp - 0xc8], 0
jmp 0x1000d208
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 4
jge 0x1000d22a
push dword [ebp - 0xc8]
lea ecx, [ebp - 0x1110]
call fcn.1002a8d8
mov dword [eax], 0xf905
jmp 0x1000d1fb
mov dword [ebp - 0x7c], 1
mov dword [ebp - 0x664], 4
mov dword [ebp - 0x304], 0
jmp 0x1000d254
mov eax, dword [ebp - 0x304]
inc eax
mov dword [ebp - 0x304], eax
cmp dword [ebp - 0x304], 3
jge 0x1000d270
mov eax, dword [ebp - 0x304]
mov dword [ebp + eax*4 - 0xe54], 7
jmp 0x1000d247
mov dword [ebp - 0x7c], 0
jmp 0x1000d280
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 2
jg 0x1000d378
mov dword [ebp - 0x524], 0x552bf338
mov eax, dword [ebp - 0x7c]
mov ecx, dword [ebp - 0x7c]
mov eax, dword [ebp + eax*4 - 0xe54]
mov dword [ebp + ecx*4 - 0xe54], eax
mov dword [ebp - 0x664], 0xaa4
mov eax, dword [ebp - 0x664]
mov dword [ebp - 0x524], eax
cmp dword [ebp - 0x524], 1
jae 0x1000d2d3
mov dword [ebp - 0xe04], 1
jmp 0x1000d2da
and dword [ebp - 0xe04], 0
mov eax, dword [ebp - 0x7c]
mov eax, dword [ebp + eax*4 - 0xe54]
mov dword [ebp - 0x1378], eax
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x1290], eax
mov eax, dword [ebp - 0x524]
cmp dword [ebp - 0x7c], eax
jge 0x1000d30a
mov dword [ebp - 0x918], 1
jmp 0x1000d311
and dword [ebp - 0x918], 0
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x918], eax
jge 0x1000d328
mov dword [ebp - 0x66c], 1
jmp 0x1000d32f
and dword [ebp - 0x66c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xe54]
cmp dword [ebp - 0x66c], eax
jg 0x1000d356
mov eax, 0xa42
test eax, eax
jne 0x1000d356
and dword [ebp - 0xbb0], 0
jmp 0x1000d360
mov dword [ebp - 0xbb0], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xbb0]
mov dword [ebp + eax - 0xe54], ecx
jmp 0x1000d279
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x1370], eax
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x1298], eax
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0x60], eax
je 0x1000d39e
mov dword [ebp - 0xe0c], 1
jmp 0x1000d3a5
and dword [ebp - 0xe0c], 0
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x1380], eax
cmp dword [ebp - 0x60], 0xc92ea21e
jb 0x1000d3c3
mov dword [ebp - 0x674], 1
jmp 0x1000d3ca
and dword [ebp - 0x674], 0
mov eax, dword [ebp - 0x674]
neg eax
neg eax
jne 0x1000d3dc
cmp dword [ebp - 0x60], 0
je 0x1000d3f1
mov eax, 0x8f1e0c86
test eax, eax
je 0x1000d3f1
mov dword [ebp - 0x920], 1
jmp 0x1000d3f8
and dword [ebp - 0x920], 0
mov eax, dword [ebp - 0x60]
imul eax, dword [ebp - 0x920]
xor ecx, ecx
inc ecx
sub ecx, eax
mov dword [ebp - 0x58], ecx
cmp dword [ebp - 0x58], 0x2395e2de
je 0x1000d428
mov eax, 0x4f943af7
test eax, eax
je 0x1000d428
mov dword [ebp - 0x67c], 1
jmp 0x1000d42f
and dword [ebp - 0x67c], 0
cmp dword [ebp - 0x67c], 0x6aa1c33c
jl 0x1000d447
mov dword [ebp - 0xa70], 1
jmp 0x1000d44e
and dword [ebp - 0xa70], 0
mov eax, dword [ebp - 0xa70]
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 0
je 0x1000e022
mov dword [ebp - 0x3d4], 0xc93b4e1
mov dword [ebp - 0x3d4], 0
jmp 0x1000d48a
mov eax, dword [ebp - 0x3d4]
dec eax
mov dword [ebp - 0x3d4], eax
cmp dword [ebp - 0x3d4], 0xffffffe5
jne 0x1000d607
mov dword [ebp - 0x1198], 0xfffffff8
mov dword [ebp - 0x1194], 0xfffffff8
mov dword [ebp - 0x1190], 0xfffffff8
mov dword [ebp - 0x118c], 0xfffffff8
mov dword [ebp - 0x30c], 0x759609c3
mov byte [ebp - 0x149], 0
lea eax, [ebp - 0x149]
push eax
push 0x6530
push 0x1245
push 0
call fcn.1001f5f3
add esp, 0x10
mov dword [ebp - 0x30c], 0
jmp 0x1000d504
mov eax, dword [ebp - 0x30c]
inc eax
mov dword [ebp - 0x30c], eax
cmp dword [ebp - 0x30c], 3
jg 0x1000d602
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x43c], 0
jmp 0x1000d534
mov eax, dword [ebp - 0x43c]
inc eax
mov dword [ebp - 0x43c], eax
cmp dword [ebp - 0x43c], 3
jge 0x1000d550
mov eax, dword [ebp - 0x43c]
mov dword [ebp + eax*4 - 0x1448], 3
jmp 0x1000d527
mov dword [ebp - 0x94], 0
jmp 0x1000d569
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 4
jge 0x1000d585
mov eax, dword [ebp - 0x94]
mov dword [ebp + eax*4 - 0x1198], 0x22a149ce
jmp 0x1000d55c
mov dword [ebp - 0x94], 3
jmp 0x1000d59e
mov eax, dword [ebp - 0x94]
dec eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0
jl 0x1000d5fd
mov dword [ebp - 0x314], 0xadf1adb2
mov dword [ebp - 0x684], 0x25d2d915
mov dword [ebp - 0x314], 3
jmp 0x1000d5d4
mov eax, dword [ebp - 0x314]
dec eax
mov dword [ebp - 0x314], eax
cmp dword [ebp - 0x314], 0
jl 0x1000d5fb
mov dword [ebp - 0x684], 0xffffffff
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x684]
mov dword [ebp + eax - 0x1448], ecx
jmp 0x1000d5c7
jmp 0x1000d591
jmp 0x1000d4f7
jmp 0x1000d47d
mov dword [ebp - 0x2a4], 0x88ad
mov dword [ebp - 0x6ac], 0xc18a
mov dword [ebp - 0x6bc], 0x3e1fe01
mov dword [ebp - 0xe14], 0xffffffff
mov dword [ebp - 0x12a0], 0xfffffffc
mov dword [ebp - 0x1388], 0
mov dword [ebp - 0xe1c], 0x85faafe3
push 1
lea eax, [ebp - 0xe14]
push eax
push 0
call fcn.1000b110
add esp, 0xc
push 0
lea eax, [ebp - 0xe1c]
push eax
push 0x42b2
push 0x6c6d
call fcn.100229da
add esp, 0x10
mov dword [ebp - 0x58], 0
jmp 0x1000d68b
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 3
jg 0x1000de8d
mov dword [ebp - 0x12a8], 0xffffffff
mov dword [ebp - 0x137c], 0x4801897a
mov dword [ebp - 0x12b0], 0xffffffff
mov dword [ebp - 0x13c4], 0x914d2edc
push 3
lea ecx, [ebp - 0x1324]
call fcn.1002a7d6
mov byte [ebp - 4], 2
mov dword [ebp - 0x12b8], 0
mov dword [ebp - 0x1384], 0
mov dword [ebp - 0xe24], 0xe045
lea eax, [ebp - 0x2bc]
push eax
push 0
lea eax, [ebp - 0x1324]
push eax
call fcn.1002160f
add esp, 0xc
mov dword [ebp - 0x2bc], 0
jmp 0x1000d71d
mov eax, dword [ebp - 0x2bc]
inc eax
mov dword [ebp - 0x2bc], eax
cmp dword [ebp - 0x2bc], 1
jge 0x1000d739
mov eax, dword [ebp - 0x2bc]
mov dword [ebp + eax*4 - 0x12c0], 0xffffffff
jmp 0x1000d710
lea eax, [ebp - 0xe24]
push eax
push 1
push 0
push 0xc92
call fcn.100096e4
add esp, 0x10
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1324]
call fcn.1002a8ad
mov dword [ebp - 0xc78], 5
push 1
lea ecx, [ebp - 0x1098]
call fcn.1002a7d6
mov byte [ebp - 4], 3
mov dword [ebp - 0x24c], 0xfffffffe
mov dword [ebp - 0x3dc], 0
jmp 0x1000d79e
mov eax, dword [ebp - 0x3dc]
inc eax
mov dword [ebp - 0x3dc], eax
cmp dword [ebp - 0x3dc], 1
jge 0x1000d7bd
push dword [ebp - 0x3dc]
lea ecx, [ebp - 0x1098]
call fcn.1002a8d8
or dword [eax], 0xffffffff
jmp 0x1000d791
mov dword [ebp - 0x24c], 0
jmp 0x1000d7d6
mov eax, dword [ebp - 0x24c]
dec eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 0
jl 0x1000daa8
mov dword [ebp - 0x31c], 0x33992443
mov dword [ebp - 0x31c], 0
jmp 0x1000d806
mov eax, dword [ebp - 0x31c]
inc eax
mov dword [ebp - 0x31c], eax
cmp dword [ebp - 0x31c], 0
jg 0x1000daa3
mov dword [ebp - 0xc30], 0x1aa0
cmp dword [ebp - 0xc30], 0x11e1
jge 0x1000d9a8
lea eax, [ebp - 0x928]
push eax
lea eax, [ebp - 0x4dc]
push eax
push 0x1000785c
call fcn.100539eb
add esp, 0xc
and dword [ebp - 0x494], 0
jmp 0x1000d85e
mov eax, dword [ebp - 0x494]
inc eax
mov dword [ebp - 0x494], eax
mov eax, dword [ebp - 0x494]
cmp eax, dword [ebp - 0x928]
jge 0x1000d888
mov eax, dword [ebp - 0x494]
lea eax, [ebp + eax*4 - 0x18f8]
push eax
push 0x10007808
call fcn.100539eb
pop ecx
pop ecx
jmp 0x1000d851
mov byte [ebp - 0x195], 0
lea eax, [ebp - 0x195]
push eax
mov eax, dword [ebp - 0x4dc]
lea edx, [ebp + eax - 0x1643]
lea ecx, [ebp - 0x1644]
call fcn.1002f41b
pop ecx
xor eax, eax
inc eax
imul eax, eax, 0
mov byte [ebp + eax - 0x1644], 1
and dword [ebp - 0x244], 0
jmp 0x1000d8d3
mov eax, dword [ebp - 0x244]
inc eax
mov dword [ebp - 0x244], eax
mov eax, dword [ebp - 0x244]
cmp eax, dword [ebp - 0x928]
jge 0x1000d950
mov eax, dword [ebp - 0x244]
mov eax, dword [ebp + eax*4 - 0x18f8]
mov dword [ebp - 0x1e8], eax
jmp 0x1000d903
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1e8], eax
mov eax, dword [ebp - 0x1e8]
cmp eax, dword [ebp - 0x4dc]
jg 0x1000d94b
mov eax, dword [ebp - 0x1e8]
movzx eax, byte [ebp + eax - 0x1644]
mov ecx, dword [ebp - 0x244]
mov edx, dword [ebp - 0x1e8]
sub edx, dword [ebp + ecx*4 - 0x18f8]
movzx ecx, byte [ebp + edx - 0x1644]
or eax, ecx
mov ecx, dword [ebp - 0x1e8]
mov byte [ebp + ecx - 0x1644], al
jmp 0x1000d8f6
jmp 0x1000d8c6
mov eax, dword [ebp - 0x4dc]
mov dword [ebp - 0x284], eax
jmp 0x1000d96b
mov eax, dword [ebp - 0x284]
dec eax
mov dword [ebp - 0x284], eax
cmp dword [ebp - 0x284], 0
jl 0x1000d996
mov eax, dword [ebp - 0x284]
movzx eax, byte [ebp + eax - 0x1644]
test eax, eax
je 0x1000d994
mov eax, dword [ebp - 0x284]
mov dword [ebp - 0xe34], eax
jmp 0x1000d996
jmp 0x1000d95e
push dword [ebp - 0xe34]
push 0x10007848
call fcn.10053e49
pop ecx
pop ecx
mov dword [ebp - 0x324], 0
jmp 0x1000d9c1
mov eax, dword [ebp - 0x324]
inc eax
mov dword [ebp - 0x324], eax
cmp dword [ebp - 0x324], 1
jge 0x1000d9dd
mov eax, dword [ebp - 0x324]
mov dword [ebp + eax*4 - 0x3e4], 0xfffffff7
jmp 0x1000d9b4
push 0x150b
push 1
push 1
push 0x54c9
call fcn.100096e4
add esp, 0x10
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x3e4], 0
jmp 0x1000da21
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3e4]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x3e4], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3e4], 0
jg 0x1000da9e
mov dword [ebp - 0x32c], 7
mov dword [ebp - 0xe3c], 8
push dword [ebp - 0x24c]
lea ecx, [ebp - 0x1098]
call fcn.1002a8d8
cmp dword [eax], 0
je 0x1000da5d
jmp 0x1000da9e
mov dword [ebp - 0x32c], 0
jmp 0x1000da76
mov eax, dword [ebp - 0x32c]
inc eax
mov dword [ebp - 0x32c], eax
cmp dword [ebp - 0x32c], 0
jg 0x1000da99
push 0
lea eax, [ebp - 0xe3c]
push eax
push 0x49d6
push 0
call fcn.1001704b
add esp, 0x10
jmp 0x1000da69
jmp 0x1000da06
jmp 0x1000d7f9
jmp 0x1000d7c9
push 0
call fcn.1001729b
pop ecx
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1098]
call fcn.1002a8ad
mov dword [ebp - 0x1a0], 0
push 1
lea ecx, [ebp - 0x10c8]
call fcn.1002a7d6
mov byte [ebp - 4], 4
mov dword [ebp - 0xc44], 0xfffffff7
mov dword [ebp - 0x13f8], 0xb168f92
mov dword [ebp - 0xd00], 0x27a4129b
push 3
lea ecx, [ebp - 0x10b0]
call fcn.1002a7d6
mov byte [ebp - 4], 5
mov dword [ebp - 0xac], 0
jmp 0x1000db22
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 1
jge 0x1000db44
push dword [ebp - 0xac]
lea ecx, [ebp - 0x10c8]
call fcn.1002a8d8
mov dword [eax], 0x3638
jmp 0x1000db15
mov dword [ebp - 0xac], 0
jmp 0x1000db5d
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 3
jge 0x1000db7c
push dword [ebp - 0xac]
lea ecx, [ebp - 0x10b0]
call fcn.1002a8d8
or dword [eax], 0xffffffff
jmp 0x1000db50
push 0x3c53
push 0
push 0x5cb4
push 0x5715
push 0x561d
push 0x57fe
push 0x46f1
push 0x5fe0
push 0
push 0x3580
push 0x5bf8
call fcn.1001c45a
add esp, 0x2c
mov dword [ebp - 0x1a0], 5
jmp 0x1000dbce
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 0xa
jle 0x1000de51
mov dword [ebp - 0x1b8], 0xffffffff
mov dword [ebp - 0xf0c], 0x4ef66b17
mov dword [ebp - 0x6a4], 0xfffffff7
mov dword [ebp - 0xefc], 0xfffffffd
mov dword [ebp - 0x12c8], 0xe3bf118c
mov dword [ebp - 0x138c], 0xfffffff9
mov dword [ebp - 0x12d0], 0xfffffffd
mov dword [ebp - 0x550], 0
mov dword [ebp - 0xd88], 0xd900
mov dword [ebp - 0x444], 0
jmp 0x1000dc4e
mov eax, dword [ebp - 0x444]
inc eax
mov dword [ebp - 0x444], eax
cmp dword [ebp - 0x444], 1
jge 0x1000dc6a
mov eax, dword [ebp - 0x444]
mov dword [ebp + eax*4 - 0xf04], 0xe2718b96
jmp 0x1000dc41
mov dword [ebp - 0x1b8], 0
jmp 0x1000dc83
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 0
jg 0x1000de03
mov dword [ebp - 0x13cc], 1
mov dword [ebp - 0x334], 0
jmp 0x1000dcb3
mov eax, dword [ebp - 0x334]
inc eax
mov dword [ebp - 0x334], eax
cmp dword [ebp - 0x334], 1
jge 0x1000dccf
mov eax, dword [ebp - 0x334]
mov dword [ebp + eax*4 - 0xe44], 0xfffffff8
jmp 0x1000dca6
mov eax, dword [ebp - 0x550]
inc eax
mov dword [ebp - 0x550], eax
je 0x1000dcf1
push 5
pop eax
test eax, eax
je 0x1000dcf1
mov dword [ebp - 0x4e4], 1
jmp 0x1000dcf8
and dword [ebp - 0x4e4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x4e4]
mov dword [ebp + eax - 0xe44], ecx
mov eax, dword [ebp - 0x1a0]
cmp eax, dword [ebp - 0x4e4]
jl 0x1000dd25
mov dword [ebp - 0x68c], 1
jmp 0x1000dd2c
and dword [ebp - 0x68c], 0
mov eax, dword [ebp - 0x1a0]
cmp eax, dword [ebp - 0x68c]
jne 0x1000dd46
mov dword [ebp - 0xb24], 1
jmp 0x1000dd4d
and dword [ebp - 0xb24], 0
cmp dword [ebp - 0xb24], 0xfec1
je 0x1000dd65
mov dword [ebp - 0x694], 1
jmp 0x1000dd6c
and dword [ebp - 0x694], 0
cmp dword [ebp - 0x694], 0xa205
jle 0x1000dd84
mov dword [ebp - 0x930], 1
jmp 0x1000dd8b
and dword [ebp - 0x930], 0
imul eax, dword [ebp - 0x930], 0x83a0
cmp eax, dword [ebp - 0x6a4]
jne 0x1000dda9
mov dword [ebp - 0x69c], 1
jmp 0x1000ddb0
and dword [ebp - 0x69c], 0
push dword [ebp - 0x1b8]
lea ecx, [ebp - 0x10c8]
call fcn.1002a8d8
mov ecx, dword [ebp - 0xefc]
add ecx, dword [ebp - 0x69c]
mov eax, dword [eax]
sub eax, ecx
cmp eax, 0xb705
jge 0x1000dde4
mov dword [ebp - 0xa78], 1
jmp 0x1000ddeb
and dword [ebp - 0xa78], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xa78]
mov dword [ebp + eax - 0xf04], ecx
jmp 0x1000dc76
lea eax, [ebp - 0xf0c]
push eax
lea eax, [ebp - 0x6a4]
push eax
lea eax, [ebp - 0xc44]
push eax
lea eax, [ebp - 0xd88]
push eax
push 0
push 0
push 0x57b0
lea eax, [ebp - 0x1a0]
push eax
lea eax, [ebp - 0x1b8]
push eax
lea eax, [ebp - 0x10b0]
push eax
lea eax, [ebp - 0xd00]
push eax
call fcn.10021627
add esp, 0x2c
jmp 0x1000dbc1
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x10b0]
call fcn.1002a8ad
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x10c8]
call fcn.1002a8ad
mov eax, dword [ebp - 0x58]
cmp dword [ebp + eax*4 - 0x8c0], 0
je 0x1000de7e
jmp 0x1000de8d
mov dword [ebp - 0xc78], 0x8dcfd8f2
jmp 0x1000d684
mov eax, dword [ebp - 0x2a4]
neg eax
cmp eax, 0xb400
jge 0x1000dea8
mov dword [ebp - 0x948], 1
jmp 0x1000deaf
and dword [ebp - 0x948], 0
cmp dword [ebp - 0x2a4], 0
je 0x1000dfbe
cmp dword [ebp - 0x58], 0xbe49
je 0x1000ded1
mov dword [ebp - 0x938], 1
jmp 0x1000ded8
and dword [ebp - 0x938], 0
mov eax, dword [ebp - 0x2a4]
cmp eax, dword [ebp - 0x938]
jge 0x1000def2
mov dword [ebp - 0xc70], 1
jmp 0x1000def9
and dword [ebp - 0xc70], 0
mov eax, dword [ebp - 0x2a4]
mov dword [ebp - 0x11b0], eax
mov eax, dword [ebp - 0x2a4]
add eax, dword [ebp - 0x6ac]
je 0x1000df28
cmp dword [ebp - 0x6ac], 0
je 0x1000df28
mov dword [ebp - 0xb6c], 1
jmp 0x1000df2f
and dword [ebp - 0xb6c], 0
cmp dword [ebp - 0xb6c], 0x96fcd4d3
jbe 0x1000df47
mov dword [ebp - 0x6b4], 1
jmp 0x1000df4e
and dword [ebp - 0x6b4], 0
cmp dword [ebp - 0x6b4], 0
ja 0x1000df63
mov dword [ebp - 0x940], 1
jmp 0x1000df6a
and dword [ebp - 0x940], 0
mov eax, dword [ebp - 0x940]
mov dword [ebp - 0x6bc], eax
mov eax, dword [ebp - 0x1c0]
cmp dword [ebp - 0x6bc], eax
jle 0x1000df96
cmp dword [ebp - 0x60], 0
je 0x1000df96
mov dword [ebp - 0xa80], 1
jmp 0x1000df9d
and dword [ebp - 0xa80], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x8c0]
cmp dword [ebp - 0xa80], eax
jge 0x1000dfbe
mov dword [ebp - 0x6c4], 1
jmp 0x1000dfc5
and dword [ebp - 0x6c4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x8c0]
imul eax, dword [ebp - 0x6c4]
cmp eax, 0xe8e23095
jae 0x1000dfec
mov dword [ebp - 0x6cc], 1
jmp 0x1000dff3
and dword [ebp - 0x6cc], 0
mov eax, dword [ebp - 0x948]
cmp eax, dword [ebp - 0x6cc]
jle 0x1000e00d
mov dword [ebp - 0xb2c], 1
jmp 0x1000e014
and dword [ebp - 0xb2c], 0
mov eax, dword [ebp - 0xb2c]
mov dword [ebp - 0x58], eax
jmp 0x1000ec0b
mov dword [ebp - 0x254], 4
mov dword [ebp - 0x104], 4
mov dword [ebp - 0x3ec], 0
jmp 0x1000e04f
mov eax, dword [ebp - 0x3ec]
inc eax
mov dword [ebp - 0x3ec], eax
cmp dword [ebp - 0x3ec], 1
jge 0x1000e06b
mov eax, dword [ebp - 0x3ec]
mov dword [ebp + eax*4 - 0xbb4], 0x229e
jmp 0x1000e042
mov byte [ebp - 0x151], 0
mov dword [ebp - 0xd7c], 0x25a2
cmp dword [ebp - 0xd7c], 0xe1f
jge 0x1000e145
lea eax, [ebp - 0x184]
push eax
lea eax, [ebp - 0x180]
push eax
push 0x10007864
call fcn.100539eb
add esp, 0xc
push dword [ebp - 0x184]
push dword [ebp - 0x180]
call fcn.1000c1a9
pop ecx
pop ecx
mov dword [ebp - 0x6d4], eax
mov eax, dword [ebp - 0x180]
cdq
idiv dword [ebp - 0x6d4]
mov dword [ebp - 0x180], eax
mov eax, dword [ebp - 0x184]
cdq
idiv dword [ebp - 0x6d4]
mov dword [ebp - 0x184], eax
mov eax, dword [ebp - 0x184]
dec eax
cmp dword [ebp - 0x180], eax
je 0x1000e104
mov eax, dword [ebp - 0x180]
dec eax
cmp dword [ebp - 0x184], eax
jne 0x1000e111
push 0x1000786c
call fcn.100545b2
pop ecx
jmp 0x1000e145
mov eax, dword [ebp - 0x180]
cmp eax, dword [ebp - 0x184]
jge 0x1000e12c
push 0x10007874
call fcn.100545b2
pop ecx
jmp 0x1000e145
mov eax, dword [ebp - 0x180]
cmp eax, dword [ebp - 0x184]
jle 0x1000e145
push 0x1000787c
call fcn.100545b2
pop ecx
movzx eax, byte [ebp - 0x151]
test eax, eax
je 0x1000e15e
push 1
push 0
push 0
call fcn.100204fa
add esp, 0xc
mov dword [ebp - 0x254], 0xfffffff7
jmp 0x1000e177
mov eax, dword [ebp - 0x254]
inc eax
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 8
jle 0x1000e3a8
push 1
lea ecx, [ebp - 0xbc4]
call fcn.1002a7d6
mov byte [ebp - 4], 6
mov dword [ebp - 0x210], 0xffffffff
push 0x3855
push 0
push 0x47f5
lea eax, [ebp - 0xbc4]
push eax
push 0x4ede
push 0x1b98
lea eax, [ebp - 0x11b4]
push eax
push 0x67b1
push 0
push 0x5ba
call fcn.10018d93
add esp, 0x28
push 0
lea ecx, [ebp - 0xbc4]
call fcn.1002a8d8
mov eax, dword [eax]
mov dword [ebp - 0x104], eax
mov eax, 0xffff
test eax, eax
je 0x1000e21d
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xbb4]
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0
je 0x1000e21d
mov dword [ebp - 0x950], 1
jmp 0x1000e224
and dword [ebp - 0x950], 0
mov eax, dword [ebp - 0x950]
mov dword [ebp - 0x210], eax
mov esi, dword [ebp - 0x210]
push 0
lea ecx, [ebp - 0xbc4]
call fcn.1002a8d8
cmp esi, dword [eax]
jge 0x1000e253
mov dword [ebp - 0x6dc], 1
jmp 0x1000e25a
and dword [ebp - 0x6dc], 0
cmp dword [ebp - 0x6dc], 0xc3938dd4
jae 0x1000e272
mov dword [ebp - 0xa88], 1
jmp 0x1000e279
and dword [ebp - 0xa88], 0
push 0
lea ecx, [ebp - 0xbc4]
call fcn.1002a8d8
mov ecx, dword [ebp - 0xa88]
cmp ecx, dword [eax]
jge 0x1000e29c
mov dword [ebp - 0x6e4], 1
jmp 0x1000e2a3
and dword [ebp - 0x6e4], 0
push 0
lea ecx, [ebp - 0xbc4]
call fcn.1002a8d8
mov eax, dword [eax]
cmp eax, dword [ebp - 0x6e4]
jge 0x1000e2c6
mov dword [ebp - 0x958], 1
jmp 0x1000e2cd
and dword [ebp - 0x958], 0
push 0
lea ecx, [ebp - 0xbc4]
call fcn.1002a8d8
mov ecx, dword [ebp - 0x958]
add ecx, dword [eax]
cmp ecx, dword [ebp - 0x254]
jl 0x1000e2f6
mov dword [ebp - 0x6ec], 1
jmp 0x1000e2fd
and dword [ebp - 0x6ec], 0
cmp dword [ebp - 0x6ec], 0xf93bd5de
jne 0x1000e33b
push 0x2bb2
push 0
call fcn.100223e7
pop ecx
pop ecx
mov byte [ebp - 0x197], 0
movzx eax, byte [ebp - 0x197]
test eax, eax
je 0x1000e339
push 0x1d61
push 0x131f
call dword [sym.imp.USER32.dll_GetDlgItem]
jmp 0x1000e394
mov dword [ebp - 0x210], 0
jmp 0x1000e354
mov eax, dword [ebp - 0x210]
dec eax
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 0xfffffff9
je 0x1000e394
mov dword [ebp - 0x104], 0
jmp 0x1000e376
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 1
jge 0x1000e392
mov eax, dword [ebp - 0x104]
mov dword [ebp + eax*4 - 0xbb4], 0xcf5a
jmp 0x1000e369
jmp 0x1000e347
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xbc4]
call fcn.1002a8ad
jmp 0x1000e16a
push 2
lea ecx, [ebp - 0xe64]
call fcn.1002a7d6
mov byte [ebp - 4], 7
mov dword [ebp - 0xcc], 0
jmp 0x1000e3d2
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 2
jge 0x1000e3f4
push dword [ebp - 0xcc]
lea ecx, [ebp - 0xe64]
call fcn.1002a8d8
mov dword [eax], 1
jmp 0x1000e3c5
mov dword [ebp - 0xcc], 0
jmp 0x1000e40d
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 1
jge 0x1000e429
mov eax, dword [ebp - 0xcc]
mov dword [ebp + eax*4 - 0xc4c], 0x245f1dbe
jmp 0x1000e400
push 0
lea ecx, [ebp - 0xe64]
call fcn.1002a8d8
mov dword [eax], 0x1c
jmp 0x1000e462
push 0
lea ecx, [ebp - 0xe64]
call fcn.1002a8d8
mov dword [ebp - 0x6f4], eax
mov eax, dword [ebp - 0x6f4]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x6f4]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0xe64]
call fcn.1002a8d8
cmp dword [eax], 0xffffffef
jl 0x1000e4b5
mov dword [ebp - 0x28c], 0x2c0d37ad
mov dword [ebp - 0x28c], 0
jmp 0x1000e497
mov eax, dword [ebp - 0x28c]
inc eax
mov dword [ebp - 0x28c], eax
cmp dword [ebp - 0x28c], 1
jge 0x1000e4b3
mov eax, dword [ebp - 0x28c]
mov dword [ebp + eax*4 - 0xc4c], 0x51cdcb36
jmp 0x1000e48a
jmp 0x1000e43e
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xe64]
call fcn.1002a8ad
mov dword [ebp - 0xb7c], 0x86adb69c
mov dword [ebp - 0x474], 2
mov dword [ebp - 0x11bc], 0x9729cf30
mov dword [ebp - 0x6fc], 6
mov dword [ebp - 0x33c], 0
jmp 0x1000e505
mov eax, dword [ebp - 0x33c]
inc eax
mov dword [ebp - 0x33c], eax
cmp dword [ebp - 0x33c], 2
jge 0x1000e521
mov eax, dword [ebp - 0x33c]
mov dword [ebp + eax*4 - 0x124c], 0x3735b263
jmp 0x1000e4f8
mov dword [ebp - 0x474], 0
jmp 0x1000e53a
mov eax, dword [ebp - 0x474]
inc eax
mov dword [ebp - 0x474], eax
cmp dword [ebp - 0x474], 2
jge 0x1000e6df
mov dword [ebp - 0x3f4], 0xfffffffb
mov dword [ebp - 0x11c4], 0xfffffffd
mov dword [ebp - 0x11cc], 0x51af7f3
mov dword [ebp - 0x11d4], 2
mov dword [ebp - 0x11dc], 0x589fe57f
mov dword [ebp - 0x11e4], 0xbc43
mov dword [ebp - 0xfd4], 1
mov dword [ebp - 0xfd0], 1
mov dword [ebp - 0xfcc], 1
mov dword [ebp - 0xfc8], 1
mov dword [ebp - 0x344], 0
jmp 0x1000e5c4
mov eax, dword [ebp - 0x344]
inc eax
mov dword [ebp - 0x344], eax
cmp dword [ebp - 0x344], 3
jge 0x1000e5e0
mov eax, dword [ebp - 0x344]
mov dword [ebp + eax*4 - 0x14dc], 0
jmp 0x1000e5b7
mov dword [ebp - 0x3f4], 0xa
jmp 0x1000e5f9
mov eax, dword [ebp - 0x3f4]
inc eax
mov dword [ebp - 0x3f4], eax
cmp dword [ebp - 0x3f4], 0x18
jge 0x1000e6da
mov dword [ebp - 0x11ec], 0xfffffffd
mov dword [ebp - 0x11f4], 0xe790e864
mov dword [ebp - 0x11fc], 0
mov dword [ebp - 0x1204], 0
mov dword [ebp - 0x120c], 0x668451f1
mov dword [ebp - 0xb4], 0
jmp 0x1000e651
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 1
jge 0x1000e66d
mov eax, dword [ebp - 0xb4]
mov dword [ebp + eax*4 - 0x1214], 0x8ef6b8f3
jmp 0x1000e644
mov dword [ebp - 0xb4], 0
jmp 0x1000e686
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 1
jge 0x1000e6a2
mov eax, dword [ebp - 0xb4]
mov dword [ebp + eax*4 - 0x121c], 0x8cac31e1
jmp 0x1000e679
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xfd4]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0xfd4], eax
mov byte [ebp - 0x159], 0
movzx eax, byte [ebp - 0x159]
test eax, eax
je 0x1000e6d5
push 0
call dword [sym.imp.KERNEL32.dll_SetCommBreak]
jmp 0x1000e5ec
jmp 0x1000e52d
mov eax, dword [ebp - 0x6fc]
mov dword [ebp - 0x960], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x960]
mov dword [ebp + eax - 0x124c], ecx
mov eax, dword [ebp - 0x960]
mov dword [ebp - 0x6fc], eax
push 1
lea ecx, [ebp - 0x10e0]
call fcn.1002a7d6
mov byte [ebp - 4], 8
mov dword [ebp - 0x34c], 0xffffffff
push 0xf4d
push 0x5e12
lea eax, [ebp - 0x10e0]
push eax
push 0x370e
lea eax, [ebp - 0x1224]
push eax
push 0
call fcn.1001b9be
add esp, 0x18
mov dword [ebp - 0x34c], 0
jmp 0x1000e765
mov eax, dword [ebp - 0x34c]
dec eax
mov dword [ebp - 0x34c], eax
cmp dword [ebp - 0x34c], 0
jl 0x1000e80b
mov dword [ebp - 0x44c], 4
mov dword [ebp - 0x44c], 0
jmp 0x1000e795
mov eax, dword [ebp - 0x44c]
dec eax
mov dword [ebp - 0x44c], eax
cmp dword [ebp - 0x44c], 0
jl 0x1000e806
mov dword [ebp - 0x354], 0x67e307b
mov dword [ebp - 0x354], 0
jmp 0x1000e7c1
mov eax, dword [ebp - 0x354]
inc eax
mov dword [ebp - 0x354], eax
cmp dword [ebp - 0x354], 0
jg 0x1000e804
mov dword [ebp - 0xe88], 8
push 0x6913
push 0x680a
push 0
push 0
call fcn.1000ae94
add esp, 0x10
push 0
lea eax, [ebp - 0x10e0]
push eax
lea eax, [ebp - 0xe88]
push eax
call fcn.10020581
add esp, 0xc
jmp 0x1000e7b4
jmp 0x1000e788
jmp 0x1000e758
mov byte [ebp - 0x199], 0
push 0x2cf7
push 0x6024
push 0x5a36
push 0x5c8
push 1
push 0
lea eax, [ebp - 0x199]
push eax
push 0x7805
push 0x4e67
push 0x6c3
push 0x3986
call fcn.10021627
add esp, 0x2c
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x10e0]
call fcn.1002a8ad
mov dword [ebp - 0x3fc], 0
jmp 0x1000e875
mov eax, dword [ebp - 0x3fc]
inc eax
mov dword [ebp - 0x3fc], eax
cmp dword [ebp - 0x3fc], 3
jge 0x1000e891
mov eax, dword [ebp - 0x3fc]
mov dword [ebp + eax*4 - 0xf7c], 0xffffffff
jmp 0x1000e868
push 1
lea ecx, [ebp - 0x10f8]
call fcn.1002a7d6
mov byte [ebp - 4], 9
mov dword [ebp - 0xc54], 0xfffffffd
mov dword [ebp - 0x35c], 0
jmp 0x1000e8c5
mov eax, dword [ebp - 0x35c]
inc eax
mov dword [ebp - 0x35c], eax
cmp dword [ebp - 0x35c], 1
jge 0x1000e8e4
push dword [ebp - 0x35c]
lea ecx, [ebp - 0x10f8]
call fcn.1002a8d8
and dword [eax], 0
jmp 0x1000e8b8
push 0x683
push 0x1021
push 0x8e0
push 0x1f29
push 0
push 0x1190
lea eax, [ebp - 0xc54]
push eax
push 0x259e
push 0x1a84
lea eax, [ebp - 0x10f8]
push eax
call fcn.1001c556
add esp, 0x28
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x10f8]
call fcn.1002a8ad
mov dword [ebp - 0x58], 0xfffffff8
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x1c0], eax
jg 0x1000e94c
mov dword [ebp - 0x734], 1
jmp 0x1000e953
and dword [ebp - 0x734], 0
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x8c0], 0
jne 0x1000e96f
mov dword [ebp - 0x968], 1
jmp 0x1000e976
and dword [ebp - 0x968], 0
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x122c], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x8c0]
mov dword [ebp - 0x1234], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xf7c]
mov dword [ebp - 0x123c], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x8c0]
push 4
pop ecx
imul ecx, ecx, 3
add eax, dword [ebp + ecx - 0x8c0]
cmp eax, 1
je 0x1000e9ce
mov dword [ebp - 0xa90], 1
jmp 0x1000e9d5
and dword [ebp - 0xa90], 0
cmp dword [ebp - 0xa90], 0
jne 0x1000e9ea
mov dword [ebp - 0x704], 1
jmp 0x1000e9f1
and dword [ebp - 0x704], 0
mov eax, dword [ebp - 0x704]
dec eax
cmp dword [ebp - 0x968], eax
jg 0x1000ea0c
mov dword [ebp - 0x70c], 1
jmp 0x1000ea13
and dword [ebp - 0x70c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xf7c]
add eax, dword [ebp - 0x70c]
cmp eax, dword [ebp - 0x52c]
jg 0x1000ea39
mov dword [ebp - 0xb34], 1
jmp 0x1000ea40
and dword [ebp - 0xb34], 0
mov eax, dword [ebp - 0xb34]
mov dword [ebp - 0x714], eax
mov eax, dword [ebp - 0x714]
mov dword [ebp - 0x970], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x8c0]
cmp dword [ebp - 0x970], eax
je 0x1000ea79
mov dword [ebp - 0x71c], 1
jmp 0x1000ea80
and dword [ebp - 0x71c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xf7c]
add eax, dword [ebp - 0x71c]
je 0x1000eaa9
mov eax, 0x63ad
test eax, eax
je 0x1000eaa9
mov dword [ebp - 0xa98], 1
jmp 0x1000eab0
and dword [ebp - 0xa98], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x8c0]
cmp dword [ebp - 0xa98], eax
jge 0x1000ead0
mov dword [ebp - 0x724], 1
jmp 0x1000ead7
and dword [ebp - 0x724], 0
mov eax, dword [ebp - 0x52c]
cmp dword [ebp - 0x724], eax
jle 0x1000eaf1
mov dword [ebp - 0x978], 1
jmp 0x1000eaf8
and dword [ebp - 0x978], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x978]
sub ecx, dword [ebp + eax - 0x8c0]
cmp ecx, dword [ebp - 0x1c0]
jne 0x1000eb2e
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xf7c], 0
je 0x1000eb2e
mov dword [ebp - 0x72c], 1
jmp 0x1000eb35
and dword [ebp - 0x72c], 0
mov eax, dword [ebp - 0x72c]
mov dword [ebp - 0xb7c], eax
cmp dword [ebp - 0xb7c], 0
jne 0x1000eb51
push 0xfffffffffffffffb
pop eax
test eax, eax
je 0x1000eb6f
push 1
lea ecx, [ebp - 0x1110]
call fcn.1002a8d8
cmp dword [eax], 0
je 0x1000eb6f
mov dword [ebp - 0x980], 1
jmp 0x1000eb76
and dword [ebp - 0x980], 0
mov eax, dword [ebp - 0x734]
cmp eax, dword [ebp - 0x980]
jge 0x1000eb90
mov dword [ebp - 0x73c], 1
jmp 0x1000eb97
and dword [ebp - 0x73c], 0
cmp dword [ebp - 0x73c], 0x419813da
jl 0x1000ebaf
mov dword [ebp - 0xaa0], 1
jmp 0x1000ebb6
and dword [ebp - 0xaa0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x8c0]
cmp dword [ebp - 0xaa0], eax
jle 0x1000ebd7
mov dword [ebp - 0x744], 1
jmp 0x1000ebde
and dword [ebp - 0x744], 0
mov eax, dword [ebp - 0x52c]
cmp dword [ebp - 0x744], eax
jle 0x1000ebf8
mov dword [ebp - 0x988], 1
jmp 0x1000ebff
and dword [ebp - 0x988], 0
mov eax, dword [ebp - 0x988]
mov dword [ebp - 0x1c0], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1110]
call fcn.1002a8ad
mov dword [ebp - 0xd4], 0
jmp 0x1000ec33
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 1
jge 0x1000ec4f
mov eax, dword [ebp - 0xd4]
mov dword [ebp + eax*4 - 0x48c], 0xffffffff
jmp 0x1000ec26
mov dword [ebp - 0xd4], 0
jmp 0x1000ec68
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 2
jge 0x1000ec84
mov eax, dword [ebp - 0xd4]
mov dword [ebp + eax*4 - 0x13f4], 0x7102
jmp 0x1000ec5b
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x48c], 0
jmp 0x1000ecb2
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x48c]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x48c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x48c], 0xffffffe9
jle 0x1000f044
mov dword [ebp - 0xfc], 2
mov dword [ebp - 0xfc], 1
jmp 0x1000ece9
mov eax, dword [ebp - 0xfc]
dec eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0
jl 0x1000efd7
mov dword [ebp - 0x404], 0xc6338430
mov dword [ebp - 0xd84], 0x210a
cmp dword [ebp - 0xd84], 0x62d
jge 0x1000eef6
call fcn.10053b25
push 0x20
pop ecx
imul ecx, ecx, 0
add eax, ecx
push eax
push 0x1000782c
push 0x10007830
call fcn.10054477
add esp, 0xc
call fcn.10053b25
push 0x20
pop ecx
shl ecx, 0
add eax, ecx
push eax
push 0x10007838
push 0x1000783c
call fcn.10054477
add esp, 0xc
lea eax, [ebp - 0x364]
push eax
mov ecx, 0x1065cd10
call fcn.1002a06b
mov dword [ebp - 0x74c], eax
mov eax, dword [ebp - 0x74c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x74c]
add ecx, dword [eax + 4]
call fcn.10009551
movzx eax, al
test eax, eax
je 0x1000eef6
mov dword [ebp - 0x40], 1
mov dword [ebp - 0x8c], 1
mov eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0x364]
jge 0x1000edc9
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x40]
add eax, dword [ebp - 0x8c]
mov dword [ebp - 0x40], eax
jmp 0x1000eda3
mov eax, dword [ebp - 0x8c]
and eax, 0x80000001
jns 0x1000eddb
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
jne 0x1000ee3c
mov dword [ebp - 0x1c8], 1
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x1f0], eax
mov eax, dword [ebp - 0x8c]
dec eax
imul eax, dword [ebp - 0x8c]
cdq
sub eax, edx
sar eax, 1
inc eax
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0x364]
je 0x1000ee3a
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
mov eax, dword [ebp - 0x1f0]
dec eax
mov dword [ebp - 0x1f0], eax
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
jmp 0x1000ee0c
jmp 0x1000ee97
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x1c8], eax
mov dword [ebp - 0x1f0], 1
mov eax, dword [ebp - 0x8c]
dec eax
imul eax, dword [ebp - 0x8c]
cdq
sub eax, edx
sar eax, 1
inc eax
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0x364]
je 0x1000ee97
mov eax, dword [ebp - 0x1c8]
dec eax
mov dword [ebp - 0x1c8], eax
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
jmp 0x1000ee69
push fcn.1002f1f4
push dword [ebp - 0x1f0]
push dword [ebp - 0x1c8]
push dword [ebp - 0x364]
mov edx, 0x10007890
mov ecx, 0x1065cc58
call fcn.1002f244
mov ecx, eax
call fcn.1002a490
mov edx, 0x10007888
mov ecx, eax
call fcn.1002f244
mov ecx, eax
call fcn.1002a490
mov edx, 0x10007884
mov ecx, eax
call fcn.1002f244
mov ecx, eax
call fcn.1002a490
mov ecx, eax
call fcn.1002a484
jmp 0x1000ed5a
mov dword [ebp - 0x404], 0
jmp 0x1000ef0f
mov eax, dword [ebp - 0x404]
inc eax
mov dword [ebp - 0x404], eax
cmp dword [ebp - 0x404], 1
jg 0x1000efd2
mov dword [ebp - 0x36c], 0
jmp 0x1000ef35
mov eax, dword [ebp - 0x36c]
inc eax
mov dword [ebp - 0x36c], eax
cmp dword [ebp - 0x36c], 3
jge 0x1000ef51
mov eax, dword [ebp - 0x36c]
mov dword [ebp + eax*4 - 0xe74], 0x29c1464f
jmp 0x1000ef28
mov byte [ebp - 0x161], 0
push 0
lea eax, [ebp - 0x161]
push eax
push 0x7ef
push 1
push 0x15f9
call fcn.1000bda8
add esp, 0x14
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xe74], 0
jmp 0x1000efa3
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe74]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xe74], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xe74], 2
jge 0x1000efcd
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe74]
mov dword [ebp + eax*4 - 0x13f4], 0xffffffff
jmp 0x1000ef88
jmp 0x1000ef02
jmp 0x1000ecdc
mov dword [ebp - 0xfc], 0xffffffed
jmp 0x1000eff0
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0x17
jle 0x1000f03f
mov dword [ebp - 0x454], 0xc865b49d
mov dword [ebp - 0x454], 2
jmp 0x1000f01c
mov eax, dword [ebp - 0x454]
dec eax
mov dword [ebp - 0x454], eax
cmp dword [ebp - 0x454], 0xfffffffb
jle 0x1000f03d
push 0x228b
push 0x1b4d
push 0
push 1
call fcn.1000ae94
add esp, 0x10
jmp 0x1000f00f
jmp 0x1000efe3
jmp 0x1000ec97
mov eax, dword [ebp - 0xc5c]
mov eax, dword [eax + 0x38]
mov dword [ebp - 0x520], eax
mov dword [ebp - 0x208], 0x9b55bb2c
mov dword [ebp - 0x118], 0x2a8358bd
mov dword [ebp - 0x25c], 0
mov dword [ebp - 0x208], 0xb
jmp 0x1000f08a
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 0x11
jl 0x1000f1ed
mov dword [ebp - 0x374], 0x9351f200
mov dword [ebp - 0x374], 0xffffffe8
jmp 0x1000f0ba
mov eax, dword [ebp - 0x374]
dec eax
mov dword [ebp - 0x374], eax
cmp dword [ebp - 0x374], 0xffffffe3
jle 0x1000f1e8
mov dword [ebp - 0x40c], 0
jmp 0x1000f0e0
mov eax, dword [ebp - 0x40c]
inc eax
mov dword [ebp - 0x40c], eax
cmp dword [ebp - 0x40c], 1
jge 0x1000f0fc
mov eax, dword [ebp - 0x40c]
mov dword [ebp + eax*4 - 0xe20], 0xfffffffc
jmp 0x1000f0d3
push 1
push 0x6322
push 0
lea eax, [ebp - 0x208]
push eax
lea eax, [ebp - 0x118]
push eax
call fcn.1000bbc6
add esp, 0x14
cmp dword [ebp - 0x208], 0
je 0x1000f137
cmp dword [ebp - 0x25c], 0
je 0x1000f132
jmp 0x1000f1e8
jmp 0x1000f1e3
mov dword [ebp - 0x37c], 0
jmp 0x1000f150
mov eax, dword [ebp - 0x37c]
inc eax
mov dword [ebp - 0x37c], eax
cmp dword [ebp - 0x37c], 4
jge 0x1000f16c
mov eax, dword [ebp - 0x37c]
mov dword [ebp + eax*4 - 0x141c], 0x1a7ecc24
jmp 0x1000f143
mov dword [ebp - 0x25c], 3
jmp 0x1000f185
mov eax, dword [ebp - 0x25c]
dec eax
mov dword [ebp - 0x25c], eax
cmp dword [ebp - 0x25c], 0
jl 0x1000f1ce
mov dword [ebp - 0x118], 3
jmp 0x1000f1a7
mov eax, dword [ebp - 0x118]
dec eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0
jl 0x1000f1cc
mov eax, dword [ebp - 0x118]
mov ecx, dword [ebp - 0x118]
mov eax, dword [ebp + eax*4 - 0x141c]
mov dword [ebp + ecx*4 - 0x141c], eax
jmp 0x1000f19a
jmp 0x1000f178
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xe20], 0
je 0x1000f1e3
jmp 0x1000f0ad
jmp 0x1000f0ad
jmp 0x1000f07d
mov dword [ebp - 0x47c], 0xffffffff
mov dword [ebp - 0x47c], 0
jmp 0x1000f210
mov eax, dword [ebp - 0x47c]
inc eax
mov dword [ebp - 0x47c], eax
cmp dword [ebp - 0x47c], 4
jg 0x1000f247
mov dword [ebp - 0xd8c], 0xffffffff
mov dword [ebp - 0xc64], 1
push 0
lea eax, [ebp - 0xc64]
push eax
lea eax, [ebp - 0xd8c]
push eax
call fcn.100175bf
add esp, 0xc
jmp 0x1000f203
mov byte [ebp - 0x19b], 0
movzx eax, byte [ebp - 0x19b]
test eax, eax
je 0x1000f274
push 0x7175
push 0
push 0x5e6d
push 0
push 0x866
call fcn.1000bf99
add esp, 0x14
push 1
lea ecx, [ebp - 0xbfc]
call fcn.1002a7d6
mov dword [ebp - 4], 0xa
mov dword [ebp - 0xc74], 1
mov dword [ebp - 0xc6c], 6
push 3
lea ecx, [ebp - 0x1158]
call fcn.1002a7d6
mov byte [ebp - 4], 0xb
mov dword [ebp - 0xbc], 0
jmp 0x1000f2c6
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 1
jge 0x1000f2e8
push dword [ebp - 0xbc]
lea ecx, [ebp - 0xbfc]
call fcn.1002a8d8
mov dword [eax], 0xf6af1124
jmp 0x1000f2b9
mov dword [ebp - 0xbc], 0
jmp 0x1000f301
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 3
jge 0x1000f323
push dword [ebp - 0xbc]
lea ecx, [ebp - 0x1158]
call fcn.1002a8d8
mov dword [eax], 0x1e5de2ca
jmp 0x1000f2f4
push 0
lea ecx, [ebp - 0xbfc]
call fcn.1002a8d8
mov dword [eax], 0xe
jmp 0x1000f35c
push 0
lea ecx, [ebp - 0xbfc]
call fcn.1002a8d8
mov dword [ebp - 0xb3c], eax
mov eax, dword [ebp - 0xb3c]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0xb3c]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0xbfc]
call fcn.1002a8d8
cmp dword [eax], 3
jge 0x1000f431
mov dword [ebp - 0x754], 0x67215912
push 1
lea ecx, [ebp - 0x1164]
call fcn.1002a7d6
mov byte [ebp - 4], 0xc
mov dword [ebp - 0xed8], 0xfbfcc013
push 1
push 0x105e
lea eax, [ebp - 0x1164]
push eax
lea eax, [ebp - 0x1244]
push eax
push 0x1778
push 0
call fcn.1000af18
add esp, 0x18
mov dword [ebp - 0x754], 0x5c19c5a6
lea eax, [ebp - 0xc6c]
push eax
push 0x39e
lea eax, [ebp - 0x1158]
push eax
lea eax, [ebp - 0xbfc]
push eax
lea eax, [ebp - 0x754]
push eax
lea eax, [ebp - 0xed8]
push eax
lea eax, [ebp - 0xc74]
push eax
push 0
push 0x17aa
push 0xeeb
push 0x16ce
push 0x6e9b
push 1
lea eax, [ebp - 0x1164]
push eax
push 0
call fcn.10019f7b
add esp, 0x3c
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x1164]
call fcn.1002a8ad
jmp 0x1000f338
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x1158]
call fcn.1002a8ad
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xbfc]
call fcn.1002a8ad
push 0
call fcn.10016c60
pop ecx
mov dword [ebp - 0xd94], 0x13a3
cmp dword [ebp - 0xd94], 0xed8
jge 0x1000f68f
push 0x10e31628
push 0x10007808
call fcn.100539eb
pop ecx
pop ecx
and dword [ebp - 0x384], 0
jmp 0x1000f498
mov eax, dword [ebp - 0x384]
inc eax
mov dword [ebp - 0x384], eax
mov eax, dword [ebp - 0x384]
cmp eax, dword [0x10e31628]
jge 0x1000f4f2
and dword [ebp - 0x414], 0
jmp 0x1000f4bc
mov eax, dword [ebp - 0x414]
inc eax
mov dword [ebp - 0x414], eax
mov eax, dword [ebp - 0x414]
cmp eax, dword [0x10e31628]
jge 0x1000f4f0
imul eax, dword [ebp - 0x384], 0x228
mov ecx, dword [ebp - 0x414]
lea eax, [eax + ecx*4 + 0x106738a8]
push eax
push 0x10007808
call fcn.100539eb
pop ecx
pop ecx
jmp 0x1000f4af
jmp 0x1000f48b
and dword [ebp - 0x74], 0
jmp 0x1000f4ff
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x74]
cmp eax, dword [0x10e31628]
jge 0x1000f5e9
and dword [ebp - 0x84], 0
jmp 0x1000f524
mov eax, dword [ebp - 0x84]
cmp eax, dword [0x10e31628]
jge 0x1000f5e4
imul eax, dword [ebp - 0x74], 0x228
mov ecx, dword [ebp - 0x84]
cmp dword [eax + ecx*4 + 0x106738a8], 1
jne 0x1000f564
mov eax, dword [ebp - 0x74]
mov eax, dword [eax*4 + 0x10686238]
inc eax
mov ecx, dword [ebp - 0x74]
mov dword [ecx*4 + 0x10686238], eax
jmp 0x1000f5df
imul eax, dword [ebp - 0x74], 0x228
mov ecx, dword [ebp - 0x84]
cmp dword [eax + ecx*4 + 0x106738a8], 2
jne 0x1000f598
jmp 0x1000f4f8
and dword [ebp - 0x4ec], 0
and dword [ebp - 0x38c], 0
jmp 0x1000f606
mov eax, dword [ebp - 0x38c]
cmp eax, dword [0x10e31628]
jge 0x1000f633
mov eax, dword [ebp - 0x38c]
cmp dword [eax*4 + 0x10686238], 0
jne 0x1000f631
mov eax, dword [ebp - 0x4ec]
inc eax
mov dword [ebp - 0x4ec], eax
jmp 0x1000f5f9
push dword [ebp - 0x4ec]
push 0x10007848
call fcn.10053e49
pop ecx
pop ecx
and dword [ebp - 0x2b4], 0
jmp 0x1000f65b
mov eax, dword [ebp - 0x2b4]
cmp eax, dword [0x10e31628]
jge 0x1000f68f
push 2
lea ecx, [ebp - 0x1338]
call fcn.1002a7d6
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x45c], 0x490c4d8e
push 1
lea eax, [ebp - 0x1250]
push eax
push 0x24ba
push 0x2497
lea eax, [ebp - 0x1338]
push eax
push 1
call fcn.1000af18
add esp, 0x18
mov dword [ebp - 0x45c], 1
jmp 0x1000f6ea
mov eax, dword [ebp - 0x45c]
dec eax
mov dword [ebp - 0x45c], eax
cmp dword [ebp - 0x45c], 0
jl 0x1000f72d
mov byte [ebp - 0x169], 0
push 0x100f
push 1
push 0x6c06
push 0x7713
push 0
lea eax, [ebp - 0x169]
push eax
push 0x5bde
push 0x14ad
push 0x4be1
call fcn.1000c334
add esp, 0x24
jmp 0x1000f6dd
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1338]
call fcn.1002a8ad
mov dword [ebp - 0xdc], 0
jmp 0x1000f755
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 1
jge 0x1000f771
mov eax, dword [ebp - 0xdc]
mov dword [ebp + eax*4 - 0x41c], 0xffffffff
jmp 0x1000f748
mov dword [ebp - 0xdc], 0
jmp 0x1000f78a
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 2
jge 0x1000f7a6
mov eax, dword [ebp - 0xdc]
mov dword [ebp + eax*4 - 0x1258], 0x7102
jmp 0x1000f77d
mov dword [ebp - 0x30], 0
mov dword [ebp - 0xbac], 0x16488a97
mov dword [ebp - 0x774], 0xd580090a
mov dword [ebp - 0x394], 0
jmp 0x1000f7da
cmp dword [ebp - 0x394], 3
jge 0x1000f7f6
mov eax, dword [ebp - 0xd60]
mov dword [ebp - 0xd68], eax
mov eax, dword [ebp - 0xd68]
mov dword [ebp - 0xd70], eax
mov eax, dword [ebp - 0xd70]
movzx eax, byte [eax]
test eax, eax
je 0x10016b3a
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyW]
jmp 0x10016b87
mov eax, dword [ebp + 8]
mov dword [ebp - 0xd78], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0xd80], eax
push 0x1b4f
push 0x3b3a
push 0x27ec
push 0x3f08
push 0
push 0x2a8
push dword [ebp - 0xd78]
push 0x5b87
push 0x2762
push dword [ebp - 0xd80]
call fcn.1001c556
add esp, 0x28
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret