Function at 0x10025c70
Capabilities:
Clear file content

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10059487
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x55c
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 0x18]
test eax, eax
je 0x10027f31
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x27c], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x2b8], eax
lea eax, [ebp + 0x28]
mov dword [ebp - 0x274], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x34c], eax
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 0x2b4], eax
mov eax, dword [ebp - 0x274]
movzx eax, byte [eax]
test eax, eax
je 0x10027ec9
mov eax, dword [ebp - 0x27c]
mov dword [ebp - 0x1a0], eax
mov eax, dword [ebp - 0x2b4]
mov dword [ebp - 0x1c8], eax
mov eax, dword [0x10076bc8]
and eax, 1
jne 0x10025d2b
mov eax, dword [0x10076bc8]
or eax, 1
mov dword [0x10076bc8], eax
and dword [ebp - 4], 0
mov ecx, 0x10076c64
call fcn.1001badd
push 0x10059d63
call fcn.1003fee4
pop ecx
or dword [ebp - 4], 0xffffffff
push dword [ebp - 0x1a0]
lea ecx, [ebp - 0x38c]
call fcn.10001388
mov dword [ebp - 4], 1
mov dword [ebp - 0x18], 0x60477862
mov dword [ebp - 0xb8], 0xfb49a5c1
mov dword [ebp - 0x1c4], 0xfffb
mov dword [ebp - 0x318], 0
mov dword [ebp - 0x238], 0xffffffff
mov dword [ebp - 0x8c], 0
jmp 0x10025d8b
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 1
jge 0x10025da7
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0xec], 0xfffffffb
jmp 0x10025d7e
mov dword [ebp - 0x18], 3
jmp 0x10025db7
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0xffffffee
jl 0x10026039
mov dword [ebp - 0xdc], 3
mov dword [ebp - 0x3a0], 0x3d97867a
mov dword [ebp - 0x39c], 0x3d97867a
mov dword [ebp - 0x398], 0x3d97867a
mov dword [ebp - 0x394], 0x3d97867a
lea ecx, [ebp - 0xd1]
call fcn.10001770
push eax
lea eax, [ebp - 0x390]
push eax
lea eax, [ebp - 0x3a0]
push eax
lea ecx, [ebp - 0x528]
call fcn.100042f2
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x374]
call fcn.100042cc
mov byte [ebp - 4], 2
push 2
lea ecx, [ebp - 0x35c]
call fcn.100013fd
mov byte [ebp - 4], 3
mov dword [ebp - 0x50], 1
push 0x24ff
push 0x59dc
push 0x3952
push 1
push 0x3891
lea eax, [ebp - 0x35c]
push eax
lea eax, [ebp - 0x4b0]
push eax
push 0x665d
push 0x682
push 0x6775
push 0
push 0x2360
call fcn.10023dfe
add esp, 0x30
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x470], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x424], eax
cmp dword [ebp - 0xdc], 1
jge 0x10025f20
mov dword [ebp - 0x334], 0x3d6c
mov dword [ebp - 0x348], 1
mov dword [ebp - 0x2bc], 0x5487972e
mov dword [ebp - 0x350], 0xfffffff9
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x35c]
push eax
lea eax, [ebp - 0x374]
push eax
lea eax, [ebp - 0x2bc]
push eax
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0x348]
push eax
push 0x17fd
lea eax, [ebp - 0x350]
push eax
lea eax, [ebp - 0x334]
push eax
push 1
push 0x5dd5
push 1
call fcn.10020ac5
add esp, 0x34
jmp 0x10025fe7
cmp dword [ebp - 0xb8], 0
je 0x10025f4c
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x35c]
call fcn.10001439
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x374]
call fcn.10001439
jmp 0x10026039
mov dword [ebp - 0x50], 0
jmp 0x10025f5c
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 3
jg 0x10025fe7
mov dword [ebp - 0x230], 0x84b505d0
lea eax, [ebp - 0x374]
push eax
push 0xfc9
lea eax, [ebp - 0x230]
push eax
push 1
push 0x61a2
push 0x50fc
push 0x75c8
push 0x1fd3
lea eax, [ebp - 0xb8]
push eax
push 0x6911
push 0x50f9
push 0x80d
push 1
push 0x131d
push 0
push 0x10cc
push 0x5199
push 0x1dcd
call fcn.100244db
add esp, 0x48
push 0x5388
push 1
push 1
push 1
call fcn.10021717
add esp, 0x10
jmp 0x10025f55
mov byte [ebp - 0x32], 0
push 1
lea eax, [ebp - 0x32]
push eax
push 0x70fa
push 1
push 0x51bb
push 0
push 0x1226
push 0x227f
push 0x7b2f
call fcn.1002140a
add esp, 0x24
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x35c]
call fcn.10001439
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x374]
call fcn.10001439
jmp 0x10025db0
mov dword [ebp - 0x18], 0
jmp 0x10026049
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jl 0x1002620d
push 2
lea ecx, [ebp - 0x2cc]
call fcn.100013fd
mov byte [ebp - 4], 4
mov dword [ebp - 0x22c], 0x6cb
lea eax, [ebp - 0x2cc]
push eax
push 0x73ee
push 0x5a2e
push 0
push 0x2f2d
push 0x1660
lea eax, [ebp - 0x4c0]
push eax
call fcn.10032135
add esp, 0x1c
push 1
lea ecx, [ebp - 0x2cc]
call fcn.10001455
mov esi, eax
push 1
lea ecx, [ebp - 0x2cc]
call fcn.10001455
mov eax, dword [eax]
cmp eax, dword [esi]
jne 0x100260c8
mov dword [ebp - 0x1e0], 1
jmp 0x100260cf
and dword [ebp - 0x1e0], 0
mov eax, dword [ebp - 0xb8]
cmp eax, dword [ebp - 0xb8]
jne 0x100260e9
mov dword [ebp - 0x11c], 1
jmp 0x100260f0
and dword [ebp - 0x11c], 0
cmp dword [ebp - 0x11c], 0x96b49548
jbe 0x10026108
mov dword [ebp - 0x1d0], 1
jmp 0x1002610f
and dword [ebp - 0x1d0], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x1d0], eax
jg 0x10026126
mov dword [ebp - 0x1f0], 1
jmp 0x1002612d
and dword [ebp - 0x1f0], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0xec]
mov dword [ebp - 0x1d8], eax
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1d8]
mov dword [ebp + eax*4 - 0xec], ecx
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 0x1c4], eax
mov eax, dword [ebp - 0x1e0]
add eax, dword [ebp - 0x1f0]
cmp dword [ebp - 0x1c4], eax
jg 0x10026179
mov dword [ebp - 0x224], 1
jmp 0x10026180
and dword [ebp - 0x224], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x434], eax
mov eax, dword [ebp - 0x22c]
sub eax, 0x1030c6a8
mov dword [ebp - 0x318], eax
mov eax, 0x51f4
test eax, eax
jne 0x100261b9
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0xec], 0
jne 0x100261b9
and dword [ebp - 0x114], 0
jmp 0x100261c3
mov dword [ebp - 0x114], 1
push 1
lea ecx, [ebp - 0x2cc]
call fcn.10001455
mov ecx, dword [ebp - 0x114]
cmp ecx, dword [eax]
jge 0x100261e6
mov dword [ebp - 0x18c], 1
jmp 0x100261ed
and dword [ebp - 0x18c], 0
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0x238], eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x2cc]
call fcn.10001439
jmp 0x10026042
lea eax, [ebp - 0x46c]
push eax
lea ecx, [ebp - 0x38c]
call fcn.100016ab
push dword [eax]
lea eax, [ebp - 0x4e8]
push eax
lea ecx, [ebp - 0x38c]
call fcn.100016bf
push dword [eax]
lea eax, [ebp - 0x47c]
push eax
lea ecx, [ebp - 0x38c]
call fcn.100016ab
push dword [eax]
mov edx, 0x1002081b
lea ecx, [ebp - 0x4c8]
call fcn.10033df0
add esp, 0xc
mov dword [ebp - 0x30], 0
mov byte [ebp - 0x35], 0
push 0x556c
push 0xc16
push 1
lea eax, [ebp - 0x35]
push eax
push 0x5809
push 0
push 0x77a0
push 0x3989
push 1
call fcn.10024ee9
add esp, 0x24
mov dword [ebp - 0x30], 0x1a
jmp 0x100262a2
mov eax, dword [ebp - 0x30]
dec eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0xe
jl 0x100263c2
mov dword [ebp - 0x124], 0xfffffffd
mov dword [ebp - 0x108], 0xffffffff
mov dword [ebp - 0x9c], 0
jmp 0x100262d9
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 2
jge 0x100262f5
mov eax, dword [ebp - 0x9c]
mov dword [ebp + eax*4 - 0x448], 0xffffffff
jmp 0x100262cc
cmp dword [ebp - 0x124], 0
jne 0x10026319
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0
jne 0x10026319
and dword [ebp - 0x1e4], 0
jmp 0x10026323
mov dword [ebp - 0x1e4], 1
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x1e4], eax
jg 0x1002633a
mov dword [ebp - 0x12c], 1
jmp 0x10026341
and dword [ebp - 0x12c], 0
mov eax, dword [ebp - 0x124]
inc eax
cmp eax, 0xecf7
jge 0x1002635b
mov dword [ebp - 0x194], 1
jmp 0x10026362
and dword [ebp - 0x194], 0
mov eax, dword [ebp - 0x30]
add eax, dword [ebp - 0x194]
je 0x10026382
mov eax, 0xe124
test eax, eax
je 0x10026382
mov dword [ebp - 0x1cc], 1
jmp 0x10026389
and dword [ebp - 0x1cc], 0
mov eax, dword [ebp - 0x12c]
cmp eax, dword [ebp - 0x1cc]
je 0x100263a3
mov dword [ebp - 0x134], 1
jmp 0x100263aa
and dword [ebp - 0x134], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x134]
mov dword [ebp + eax - 0x448], ecx
jmp 0x1002629b
lea ecx, [ebp - 0x38c]
call fcn.10020700
mov dword [ebp - 0x1c0], eax
movzx eax, byte [0x10075763]
test eax, eax
je 0x1002669b
mov ecx, 0x10076c64
call fcn.100337f6
movzx eax, al
test eax, eax
jne 0x1002669b
lea eax, [ebp - 0x1c0]
push eax
lea eax, [ebp - 0x19c]
push eax
mov ecx, 0x10076c64
call fcn.1001b982
lea eax, [ebp - 0x48c]
push eax
mov ecx, 0x10076c64
call fcn.1001b8ae
push eax
lea ecx, [ebp - 0x19c]
call fcn.1001bb94
movzx eax, al
test eax, eax
je 0x1002669b
push 2
lea ecx, [ebp - 0x468]
call fcn.100013fd
mov byte [ebp - 4], 5
mov dword [ebp - 0x210], 0
mov dword [ebp - 0x20c], 0
mov dword [ebp - 0x208], 0
mov dword [ebp - 0x204], 0
mov dword [ebp - 0x4e0], 0xc7af5af8
mov dword [ebp - 0x49c], 0xae7b79f6
mov dword [ebp - 0x4d0], 0xbdb979cd
mov dword [ebp - 0x4ac], 0x2b82c447
push 3
lea ecx, [ebp - 0x454]
call fcn.100013fd
mov byte [ebp - 4], 6
mov dword [ebp - 0x3c8], 1
mov dword [ebp - 0x3c4], 1
mov dword [ebp - 0x3c0], 1
mov dword [ebp - 0x3bc], 1
lea ecx, [ebp - 0xdd]
call fcn.10001770
push eax
lea eax, [ebp - 0x3b8]
push eax
lea eax, [ebp - 0x3c8]
push eax
lea ecx, [ebp - 0x508]
call fcn.100042f2
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x440]
call fcn.100042cc
mov byte [ebp - 4], 7
push 0x2db7
lea eax, [ebp - 0x468]
push eax
lea eax, [ebp - 0x2e0]
push eax
push 0
call fcn.10032cca
add esp, 0x10
lea eax, [ebp - 0x2e0]
push eax
push 1
push 0
lea eax, [ebp - 0x454]
push eax
push 0x6e5a
call fcn.10021917
add esp, 0x14
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x210], 1
jmp 0x10026574
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x210]
dec eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x210], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x210], 0
jl 0x10026633
mov dword [ebp - 0x240], 0xccbad86e
mov dword [ebp - 0x41c], 0xfffffffb
mov dword [ebp - 0x4b4], 0xa92bd42c
push 1
lea ecx, [ebp - 0x430]
call fcn.100013fd
mov byte [ebp - 4], 8
push 1
push 1
push 0x69b
lea eax, [ebp - 0x430]
push eax
lea eax, [ebp - 0x4b8]
push eax
push 0x29cd
call fcn.10020ef9
add esp, 0x18
lea eax, [ebp - 0x240]
push eax
push 0
push 0x5e29
push 0x24ef
call fcn.100283d9
add esp, 0x10
push 0x2cc9
push 0x2021
push 0
push 1
push 1
lea eax, [ebp - 0x440]
push eax
push 0x2f64
push 0x27b3
call fcn.10028400
add esp, 0x20
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x430]
call fcn.10001439
jmp 0x10026559
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x210], 0x752570e
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x440]
call fcn.10001439
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x454]
call fcn.10001439
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x468]
call fcn.10001439
lea ecx, [ebp - 0x19c]
call fcn.100337ff
mov ecx, dword [ebp - 0x1c8]
mov eax, dword [eax + 4]
mov dword [ecx], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x38c]
call fcn.100013e8
jmp 0x10028011
mov dword [ebp - 0x70], 0
push 4
lea ecx, [ebp - 0x2dc]
call fcn.100013fd
mov byte [ebp - 4], 9
mov dword [ebp - 0x4d8], 4
push 0x6808
push 0x11c4
push 0x6ec3
lea eax, [ebp - 0x2dc]
push eax
push 1
push 0x5480
push 0x288d
lea eax, [ebp - 0x420]
push eax
push 1
push 0x4b9c
push 0x1160
call fcn.100219d3
add esp, 0x2c
mov byte [ebp - 0x33], 0
movzx eax, byte [ebp - 0x33]
test eax, eax
je 0x10026719
push 0x9b2
push 1
push 0
push 1
call fcn.10021717
add esp, 0x10
mov dword [ebp - 0x70], 0
jmp 0x10026729
mov eax, dword [ebp - 0x70]
dec eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0xfffffff7
je 0x10026955
mov dword [ebp - 0x24], 0xfffffffd
mov dword [ebp - 0xc4], 0
jmp 0x10026753
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 3
jge 0x1002676f
mov eax, dword [ebp - 0xc4]
mov dword [ebp + eax*4 - 0x500], 0x14af12a8
jmp 0x10026746
mov dword [ebp - 0x24], 0
jmp 0x1002677f
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jg 0x1002690b
mov byte [ebp - 0x34], 0
push 0x40ac
push 1
push 0x7ea7
push 0x5fc0
push 0x3586
push 0
lea eax, [ebp - 0x34]
push eax
push 1
push 0x3eb5
push 0x6e68
call fcn.10025c70
add esp, 0x28
push dword [ebp - 0x24]
lea ecx, [ebp - 0x2dc]
call fcn.10001455
cmp dword [eax], 0x3f02
jl 0x100267df
mov dword [ebp - 0x13c], 1
jmp 0x100267e6
and dword [ebp - 0x13c], 0
cmp dword [ebp - 0x13c], 6
jne 0x100267fb
mov dword [ebp - 0x1ec], 1
jmp 0x10026802
and dword [ebp - 0x1ec], 0
mov eax, dword [ebp - 0x24]
add eax, 0x9691
cmp eax, dword [ebp - 0x1ec]
jg 0x1002681e
mov dword [ebp - 0x144], 1
jmp 0x10026825
and dword [ebp - 0x144], 0
cmp dword [ebp - 0x144], 1
jb 0x1002683a
mov dword [ebp - 0x1a4], 1
jmp 0x10026841
and dword [ebp - 0x1a4], 0
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x1a4], eax
jg 0x10026858
mov dword [ebp - 0x14c], 1
jmp 0x1002685f
and dword [ebp - 0x14c], 0
cmp dword [ebp - 0x14c], 0xfffffffd
je 0x10026874
mov dword [ebp - 0x1d4], 1
jmp 0x1002687b
and dword [ebp - 0x1d4], 0
push dword [ebp - 0x24]
lea ecx, [ebp - 0x2dc]
call fcn.10001455
mov ecx, dword [ebp - 0x1d4]
cmp ecx, dword [eax]
jge 0x1002689f
mov dword [ebp - 0x154], 1
jmp 0x100268a6
and dword [ebp - 0x154], 0
mov esi, dword [ebp - 0x24]
push dword [ebp - 0x24]
lea ecx, [ebp - 0x2dc]
call fcn.10001455
mov eax, dword [eax]
sub eax, dword [ebp - 0x154]
cmp eax, esi
jne 0x100268cf
mov dword [ebp - 0x1ac], 1
jmp 0x100268d6
and dword [ebp - 0x1ac], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x1ac], eax
je 0x100268ed
mov dword [ebp - 0x15c], 1
jmp 0x100268f4
and dword [ebp - 0x15c], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x15c]
mov dword [ebp + eax - 0x500], ecx
jmp 0x10026778
mov dword [ebp - 0x24], 0
jmp 0x1002691b
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xfffffff9
jle 0x10026950
mov byte [ebp - 0x37], 0
push 0x4ed2
push 1
push 0x25ce
push 1
push 0xd01
lea eax, [ebp - 0x37]
push eax
push 0x4e36
push 0x725e
call fcn.10022349
add esp, 0x20
jmp 0x10026914
jmp 0x10026722
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x2dc]
call fcn.10001439
and dword [ebp - 0x40], 0
mov dword [ebp - 0x250], 9
mov dword [ebp - 0x248], 0x77b568be
mov dword [ebp - 0x320], 1
mov dword [ebp - 0x2f0], 0xffff
push 3
lea ecx, [ebp - 0x3ec]
call fcn.100013fd
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x328], 0x9cea445a
lea eax, [ebp - 0x3ec]
push eax
push 1
push 1
lea eax, [ebp - 0x4bc]
push eax
call fcn.10023b1e
add esp, 0x10
lea eax, [ebp - 0x320]
push eax
push 0x529e
lea eax, [ebp - 0x248]
push eax
push 0x23bf
push 1
push 0x5e47
lea eax, [ebp - 0x2f0]
push eax
lea eax, [ebp - 0x250]
push eax
lea eax, [ebp - 0x3ec]
push eax
push 1
lea eax, [ebp - 0x328]
push eax
call fcn.1002405f
add esp, 0x2c
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x3ec]
call fcn.10001439
lea eax, [ebp - 0x38c]
push eax
call fcn.10020a9d
pop ecx
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jne 0x10027aaa
mov dword [ebp - 0x258], 0xfffffffe
mov dword [ebp - 0x28], 0
jmp 0x10026a4d
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 1
jge 0x10026a63
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x4c4], 0x13b9
jmp 0x10026a46
mov dword [ebp - 0x28], 0
jmp 0x10026a73
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jge 0x10026a89
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x554], 0xe838
jmp 0x10026a6c
push 0x5738
push 0x3b8d
push 0x56b6
push 0x1283
push 0
lea eax, [ebp - 0x258]
push eax
push 0x6339
push 0x42ce
push 0x4b8
push 1
push 0x7cb5
call fcn.1002405f
add esp, 0x2c
mov dword [ebp - 0x310], 0x2604
mov dword [ebp - 0x260], 0xbd6c3f0b
mov dword [ebp - 0x4cc], 0xc3a23fe5
mov dword [ebp - 0x330], 0xecc2443a
mov dword [ebp - 0x1b4], 0xcd16652d
mov dword [ebp - 0x338], 0xdf7cd95d
mov dword [ebp - 0x1bc], 0xb7f609b2
mov dword [ebp - 0x270], 0
mov dword [ebp - 0x17c], 0
mov dword [ebp - 0x3fc], 1
mov dword [ebp - 0x3f8], 1
mov dword [ebp - 0x3f4], 1
mov dword [ebp - 0x3f0], 1
mov dword [ebp - 0x4d4], 0xc842
push 3
lea ecx, [ebp - 0x3e0]
call fcn.100013fd
mov byte [ebp - 4], 0xb
push 1
lea ecx, [ebp - 0x488]
call fcn.100013fd
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x3c], 0
jmp 0x10026b82
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 3
jge 0x10026b98
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x3d4], 0xffffffff
jmp 0x10026b7b
push 0x196b
lea eax, [ebp - 0x3e0]
push eax
push 0x4ffd
push 1
push 0
push 0xc2a
lea eax, [ebp - 0x3c]
push eax
call fcn.10024ce7
add esp, 0x1c
mov dword [ebp - 0x1f4], 0x263
mov dword [ebp - 0x300], str.urxb_rahcb_oof_hsmuwc_bgfksfmj_upxhgj_yslyjulx_kfdzucn_jgjtjpc_ejifsmd_kgtfa
cmp dword [ebp - 0x1f4], 0x5e8
jle 0x10026c5d
and dword [ebp - 0xa4], 0
jmp 0x10026bf4
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0x511
jge 0x10026c55
and dword [ebp - 0xbc], 0
jmp 0x10026c16
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0x2db3
jge 0x10026c53
mov eax, dword [ebp - 0xa4]
add eax, dword [ebp - 0xbc]
cdq
mov dword [ebp - 0x288], eax
mov dword [ebp - 0x284], edx
push dword [ebp - 0x284]
push dword [ebp - 0x288]
mov ecx, 0x10073b38
call fcn.10004192
jmp 0x10026c09
jmp 0x10026be7
push 0
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
lea eax, [ebp - 0x488]
push eax
lea eax, [ebp - 0x3c]
push eax
push 0x717d
push 0
push 0x5fb1
push 0
push 0x4cd7
call fcn.10021eab
add esp, 0x1c
mov byte [ebp - 4], 0xd
cmp dword [ebp - 0x1f4], 0x96
jge 0x10026ca3
mov edx, dword [ebp - 0x300]
mov ecx, 0x10073b38
call fcn.10005a51
jmp 0x10026cbf
mov dword [ebp - 4], 0xc
jmp 0x10026ccf
push 2
lea ecx, [ebp - 0x3e0]
call fcn.10001455
mov dword [ebp - 0x164], eax
mov eax, dword [ebp - 0x164]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x164]
mov dword [ecx], eax
mov eax, 0xed162c5d
test eax, eax
je 0x10026d17
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x3d4], 0
je 0x10026d17
mov dword [ebp - 0x174], 1
jmp 0x10026d1e
and dword [ebp - 0x174], 0
cmp dword [ebp - 0x260], 0
je 0x10026d74
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x1b4], eax
imul eax, dword [ebp - 0x1b4], 6
cmp eax, 0x518f4c6f
jne 0x10026d4d
mov dword [ebp - 0x16c], 1
jmp 0x10026d54
and dword [ebp - 0x16c], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x16c]
sub ecx, dword [ebp + eax - 0x3d4]
je 0x10026d74
mov dword [ebp - 0x1dc], 1
jmp 0x10026d7b
and dword [ebp - 0x1dc], 0
imul eax, dword [ebp - 0x1dc], 0xef33
mov dword [ebp - 0x330], eax
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0x1bc], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1bc]
cmp ecx, dword [ebp + eax - 0x3d4]
jl 0x10026db8
mov dword [ebp - 0x268], 1
jmp 0x10026dbf
and dword [ebp - 0x268], 0
mov eax, dword [ebp - 0x310]
mov dword [ebp - 0x4dc], eax
cmp dword [ebp - 0x17c], 0x8faa83fb
jne 0x10026dec
cmp dword [ebp - 0x270], 0
je 0x10026dec
mov dword [ebp - 0xe4], 1
jmp 0x10026df3
and dword [ebp - 0xe4], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xe4]
mov dword [ebp + eax - 0x3fc], ecx
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x338], eax
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x488]
call fcn.10001439
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x3e0]
call fcn.10001439
cmp dword [0x10075774], 0
jne 0x10027a8c
mov dword [ebp - 0x1e8], 0x2609
mov dword [ebp - 0x340], str.dnb_ulez_wtmzrqli_zqdeknooq_wycqbf_rmq_eumspb_nzeq_khxkxu_dxrtg_iji_ecdfbsdpe_coppgiqjr_ikm
cmp dword [ebp - 0x1e8], 0x2912
jle 0x10026f00
and dword [ebp - 0xac], 0
jmp 0x10026e76
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0x72a8
jge 0x10026f00
and dword [ebp - 0xcc], 0
jmp 0x10026e98
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0x4083
jge 0x10026efb
mov eax, dword [ebp - 0xac]
or eax, dword [ebp - 0xcc]
cdq
mov dword [ebp - 0x294], eax
mov dword [ebp - 0x290], edx
push dword [ebp - 0x290]
push dword [ebp - 0x294]
lea ecx, [ebp - 0x548]
call fcn.10002811
pop ecx
pop ecx
mov dword [ebp - 0x278], eax
mov ecx, dword [ebp - 0x278]
call fcn.10004172
push eax
call fcn.100402ca
pop ecx
lea ecx, [ebp - 0x548]
call fcn.1000137e
jmp 0x10026e8b
jmp 0x10026e69
push 2
lea ecx, [ebp - 0x368]
call fcn.100013fd
mov byte [ebp - 4], 0xf
mov byte [ebp - 4], 0x10
cmp dword [ebp - 0x1e8], 0x25c7
jge 0x10026f2d
push dword [ebp - 0x340]
call fcn.100402ca
pop ecx
jmp 0x10026f49
mov dword [ebp - 4], 0xf
jmp 0x10026f59
mov dword [ebp - 0x4e4], 0x779a7b44
push 2
lea ecx, [ebp - 0x2ec]
call fcn.100013fd
mov byte [ebp - 4], 0x12
mov dword [ebp - 0x20], 0
jmp 0x10026f84
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jge 0x10026fa0
push dword [ebp - 0x20]
lea ecx, [ebp - 0x368]
call fcn.10001455
mov dword [eax], 0xec0a
jmp 0x10026f7d
mov dword [ebp - 0x20], 0
jmp 0x10026fb0
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jge 0x10026fc6
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xf4], 0x915a1369
jmp 0x10026fa9
mov dword [ebp - 0x20], 0
jmp 0x10026fd6
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jge 0x10026ff2
push dword [ebp - 0x20]
lea ecx, [ebp - 0x2ec]
call fcn.10001455
mov dword [eax], 0x61780eec
jmp 0x10026fcf
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xf4], 0
jmp 0x10027020
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xf4]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xf4], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xf4], 1
jg 0x10027209
mov dword [ebp - 0x344], 0xffffffff
mov dword [ebp - 0x118], 0xcd4431fa
mov dword [ebp - 0xf8], 1
mov dword [ebp - 0x31c], 0xffffffff
mov dword [ebp - 0x28c], 1
mov dword [ebp - 0x94], 0
jmp 0x1002707f
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 1
jge 0x1002709b
mov eax, dword [ebp - 0x94]
mov dword [ebp + eax*4 - 0x120], 0x93e75cb5
jmp 0x10027072
mov eax, dword [ebp - 0xf8]
mov ecx, dword [ebp - 0xf8]
dec ecx
mov dword [ebp - 0xf8], ecx
test eax, eax
jne 0x100270c0
or eax, 0xffffffff
jne 0x100270c0
and dword [ebp - 0x280], 0
jmp 0x100270ca
mov dword [ebp - 0x280], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf4]
mov dword [ebp - 0x4ec], eax
push 0
lea ecx, [ebp - 0x2ec]
call fcn.10001455
mov eax, dword [ebp - 0x31c]
mov dword [ebp - 0x4f4], eax
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0xf4]
lea ecx, [ebp - 0x368]
call fcn.10001455
mov dword [ebp - 0x184], eax
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0xf4]
lea ecx, [ebp - 0x368]
call fcn.10001455
mov ecx, dword [ebp - 0x184]
mov eax, dword [eax]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x2ec]
call fcn.10001455
mov ecx, dword [ebp - 0x184]
mov ecx, dword [ecx]
cmp ecx, dword [eax]
jl 0x1002715b
mov dword [ebp - 0x10c], 1
jmp 0x10027162
and dword [ebp - 0x10c], 0
cmp dword [ebp - 0x10c], 0xd7c869b7
jb 0x1002717a
mov dword [ebp - 0x110], 1
jmp 0x10027181
and dword [ebp - 0x110], 0
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0x118], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x118]
add ecx, dword [ebp + eax - 0x120]
je 0x100271be
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x120], 0
je 0x100271be
mov dword [ebp - 0x128], 1
jmp 0x100271c5
and dword [ebp - 0x128], 0
mov eax, dword [ebp - 0x128]
sub eax, dword [ebp - 0x28c]
je 0x100271f1
push 0
lea ecx, [ebp - 0x2ec]
call fcn.10001455
cmp dword [eax], 0
je 0x100271f1
mov dword [ebp - 0x130], 1
jmp 0x100271f8
and dword [ebp - 0x130], 0
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x344], eax
jmp 0x10027005
mov byte [ebp - 0x31], 0
movzx eax, byte [ebp - 0x31]
test eax, eax
je 0x10027226
push 0x455c
push 0
push 1
call fcn.10032a8b
add esp, 0xc
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x2ec]
call fcn.10001439
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x368]
call fcn.10001439
mov byte [ebp - 0x6c], 4
mov byte [ebp - 0x6b], 0x99
mov byte [ebp - 0x6a], 8
mov byte [ebp - 0x69], 0x4b
mov byte [ebp - 0x68], 3
mov byte [ebp - 0x67], 0x40
mov byte [ebp - 0x66], 0xb
mov byte [ebp - 0x65], 2
mov byte [ebp - 0x64], 6
mov byte [ebp - 0x63], 0x5f
mov byte [ebp - 0x62], 1
mov byte [ebp - 0x61], 0xa5
mov byte [ebp - 0x60], 0xa
mov byte [ebp - 0x5f], 0x5f
mov byte [ebp - 0x5e], 7
mov byte [ebp - 0x5d], 0x5e
mov byte [ebp - 0x5c], 9
mov byte [ebp - 0x5b], 0x56
mov byte [ebp - 0x5a], 2
mov byte [ebp - 0x59], 0x16
mov byte [ebp - 0x58], 5
mov byte [ebp - 0x57], 0x1e
mov byte [ebp - 0x56], 0
mov byte [ebp - 0x55], 0x27
mov byte [ebp - 0x54], 1
mov byte [ebp - 0x53], 0x2e
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x6c]
and eax, 0xfc
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x6c]
or ecx, 0xfc
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x6c]
mov word [ebp + eax*2 - 0x418], cx
mov dword [ebp - 0x14], 2
and dword [ebp - 0x44], 0
jmp 0x100272f7
mov eax, dword [ebp - 0x14]
inc eax
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x1a
jae 0x100273ba
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x6c]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x14], eax
jne 0x10027335
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0x6c]
inc eax
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0x6c]
mov ecx, dword [ebp - 0x14]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x14], eax
jmp 0x100272ef
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x44]
movzx eax, byte [ebp + eax - 0x6e]
movzx eax, word [ebp + eax*2 - 0x418]
mov ecx, dword [ebp - 0x14]
movzx ecx, byte [ebp + ecx - 0x6b]
and ecx, eax
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x44]
movzx eax, byte [ebp + eax - 0x6e]
movzx eax, word [ebp + eax*2 - 0x418]
mov edx, dword [ebp - 0x14]
movzx edx, byte [ebp + edx - 0x6b]
and edx, eax
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x44]
movzx eax, byte [ebp + eax - 0x6e]
movzx eax, word [ebp + eax*2 - 0x418]
mov esi, dword [ebp - 0x14]
movzx esi, byte [ebp + esi - 0x6b]
add esi, eax
sub esi, edx
sub esi, ecx
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0x6c]
mov word [ebp + eax*2 - 0x418], si
push 1
lea eax, [ebp - 0x44]
push eax
push 1
push 0x3535
call fcn.10021277
add esp, 0x10
jmp 0x100272ef
push 2
pop eax
imul eax, eax, 0xc
xor ecx, ecx
mov word [ebp + eax - 0x418], cx
mov dword [ebp - 0x3b4], 0xf9b3198a
mov dword [ebp - 0x3b0], 0xf9b3198a
mov dword [ebp - 0x3ac], 0xf9b3198a
mov dword [ebp - 0x3a8], 0xf9b3198a
lea ecx, [ebp - 0xe5]
call fcn.10001770
push eax
lea eax, [ebp - 0x3a4]
push eax
lea eax, [ebp - 0x3b4]
push eax
lea ecx, [ebp - 0x530]
call fcn.100042f2
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x200]
call fcn.100042cc
mov byte [ebp - 4], 0x13
push 2
lea ecx, [ebp - 0x104]
call fcn.100013fd
mov byte [ebp - 4], 0x14
mov dword [ebp - 0x138], 0xf25
mov dword [ebp - 0x298], str.hqo_nlnalaiot_qke_mhmf_jfciuh
cmp dword [ebp - 0x138], 0x12c8
jle 0x100274d3
and dword [ebp - 0x98], 0
jmp 0x10027472
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0x4c69
jge 0x100274d3
and dword [ebp - 0xa0], 0
jmp 0x10027494
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0x74fa
jge 0x100274d1
mov eax, dword [ebp - 0x98]
xor eax, dword [ebp - 0xa0]
cdq
mov dword [ebp - 0x2a0], eax
mov dword [ebp - 0x29c], edx
push dword [ebp - 0x29c]
push dword [ebp - 0x2a0]
mov ecx, 0x10073b38
call fcn.10004192
jmp 0x10027487
jmp 0x10027465
mov byte [ebp - 4], 0x15
cmp dword [ebp - 0x138], 0xd2d
jge 0x100274f3
mov edx, dword [ebp - 0x298]
mov ecx, 0x10073b38
call fcn.10005a51
jmp 0x1002750f
mov dword [ebp - 4], 0x14
jmp 0x1002751f
mov dword [ebp - 0x1c], 0
jmp 0x1002752f
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x1002754b
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x104]
call fcn.10001455
mov dword [eax], 0xa18885c6
jmp 0x10027528
mov dword [ebp - 0x1c], 0
jmp 0x1002755b
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x10027571
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x478], 0xffffffff
jmp 0x10027554
mov dword [ebp - 0x1c], 0
jmp 0x10027581
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x10027597
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x498], 7
jmp 0x1002757a
push 1
lea ecx, [ebp - 0x104]
call fcn.10001455
mov dword [eax], 3
jmp 0x100275d0
push 1
lea ecx, [ebp - 0x104]
call fcn.10001455
mov dword [ebp - 0x140], eax
mov eax, dword [ebp - 0x140]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x140]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x104]
call fcn.10001455
cmp dword [eax], 0
jl 0x10027836
mov dword [ebp - 0x150], 0xfffffff8
mov dword [ebp - 0xd8], 0x38d10fbf
mov dword [ebp - 0xa8], 0
jmp 0x10027613
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 2
jge 0x1002762f
mov eax, dword [ebp - 0xa8]
mov dword [ebp + eax*4 - 0x45c], 0
jmp 0x10027606
push 1
lea ecx, [ebp - 0x104]
call fcn.10001455
push dword [eax]
lea ecx, [ebp - 0x200]
call fcn.10001455
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x478], 1
mov esi, dword [ebp - 0x150]
push 3
lea ecx, [ebp - 0x200]
call fcn.10001455
xor ecx, ecx
inc ecx
sub ecx, dword [eax]
cmp ecx, esi
jne 0x10027682
mov dword [ebp - 0x148], 1
jmp 0x10027689
and dword [ebp - 0x148], 0
push 1
lea ecx, [ebp - 0x104]
call fcn.10001455
push dword [eax]
lea ecx, [ebp - 0x200]
call fcn.10001455
mov ecx, dword [ebp - 0x148]
sub ecx, dword [eax]
neg ecx
cmp ecx, 1
jne 0x100276be
mov dword [ebp - 0x158], 1
jmp 0x100276c5
and dword [ebp - 0x158], 0
mov eax, dword [ebp - 0x150]
cmp dword [ebp - 0x158], eax
je 0x100276df
mov dword [ebp - 0x160], 1
jmp 0x100276e6
and dword [ebp - 0x160], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x498]
cmp dword [ebp - 0x160], eax
jg 0x10027707
mov dword [ebp - 0x168], 1
jmp 0x1002770e
and dword [ebp - 0x168], 0
imul eax, dword [ebp - 0x168], 0x5e1b
test eax, eax
je 0x10027731
mov eax, 0xca0c
test eax, eax
je 0x10027731
mov dword [ebp - 0x170], 1
jmp 0x10027738
and dword [ebp - 0x170], 0
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0xd8], eax
mov esi, dword [ebp - 0xd8]
push 3
lea ecx, [ebp - 0x200]
call fcn.10001455
cmp esi, dword [eax]
je 0x10027767
mov dword [ebp - 0x178], 1
jmp 0x1002776e
and dword [ebp - 0x178], 0
cmp dword [ebp - 0x178], 0xd3c095b6
jne 0x10027786
mov dword [ebp - 0x324], 1
jmp 0x1002778d
and dword [ebp - 0x324], 0
push 0
lea ecx, [ebp - 0x104]
call fcn.10001455
cmp dword [eax], 1
jne 0x100277ab
mov dword [ebp - 0x180], 1
jmp 0x100277b2
and dword [ebp - 0x180], 0
push 1
lea ecx, [ebp - 0x104]
call fcn.10001455
push dword [eax]
lea ecx, [ebp - 0x200]
call fcn.10001455
mov eax, dword [eax]
cmp eax, dword [ebp - 0x180]
jle 0x100277e2
mov dword [ebp - 0x188], 1
jmp 0x100277e9
and dword [ebp - 0x188], 0
push 4
pop eax
shl eax, 1
mov esi, dword [ebp + eax - 0x498]
push 1
lea ecx, [ebp - 0x104]
call fcn.10001455
push dword [eax]
lea ecx, [ebp - 0x200]
call fcn.10001455
mov ecx, dword [ebp - 0x188]
sub ecx, dword [eax]
imul ecx, esi
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x45c], ecx
mov dword [ebp - 0xd8], 4
jmp 0x100275ac
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x104]
call fcn.10001439
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x200]
call fcn.10001439
lea eax, [ebp - 0x418]
push eax
lea ecx, [ebp - 0x56c]
call fcn.100042a7
mov dword [ebp - 0x2a4], eax
mov eax, dword [ebp - 0x2a4]
mov dword [ebp - 0x33c], eax
mov byte [ebp - 4], 0x17
push dword [ebp - 0x33c]
call fcn.10020a9d
pop ecx
mov dword [ebp - 0x198], eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x56c]
call fcn.100013e8
and dword [ebp - 0xb0], 0
jmp 0x100278b3
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0xd
jae 0x100278ce
xor eax, eax
mov ecx, dword [ebp - 0xb0]
mov word [ebp + ecx*2 - 0x418], ax
jmp 0x100278a6
cmp dword [ebp - 0x198], 0
je 0x10027a8c
mov byte [ebp - 0x88], 7
mov byte [ebp - 0x87], 0x7d
mov byte [ebp - 0x86], 0xa
mov byte [ebp - 0x85], 0xb
mov byte [ebp - 0x84], 0xb
mov byte [ebp - 0x83], 0x2e
mov byte [ebp - 0x82], 0
mov byte [ebp - 0x81], 0x1b
mov byte [ebp - 0x80], 9
mov byte [ebp - 0x7f], 0x3e
mov byte [ebp - 0x7e], 2
mov byte [ebp - 0x7d], 0x13
mov byte [ebp - 0x7c], 3
mov byte [ebp - 0x7b], 5
mov byte [ebp - 0x7a], 1
mov byte [ebp - 0x79], 0xb
mov byte [ebp - 0x78], 5
mov byte [ebp - 0x77], 6
mov byte [ebp - 0x76], 4
mov byte [ebp - 0x75], 0x25
mov byte [ebp - 0x74], 6
mov byte [ebp - 0x73], 0x2e
mov byte [ebp - 0x72], 8
mov byte [ebp - 0x71], 3
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x88]
and eax, 0xf
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x88]
or ecx, 0xf
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x88]
mov byte [ebp + eax - 0x220], cl
mov dword [ebp - 0x2c], 2
and dword [ebp - 0x190], 0
jmp 0x100279a4
mov eax, dword [ebp - 0x2c]
inc eax
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0x18
jae 0x10027a0c
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x190]
movzx eax, byte [ebp + eax - 0x8a]
movsx eax, byte [ebp + eax - 0x220]
mov ecx, dword [ebp - 0x2c]
movzx ecx, byte [ebp + ecx - 0x87]
and ecx, eax
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x190]
movzx eax, byte [ebp + eax - 0x8a]
movsx eax, byte [ebp + eax - 0x220]
mov edx, dword [ebp - 0x2c]
movzx edx, byte [ebp + edx - 0x87]
or edx, eax
sub edx, ecx
mov eax, dword [ebp - 0x2c]
movzx eax, byte [ebp + eax - 0x88]
mov byte [ebp + eax - 0x220], dl
jmp 0x1002799c
xor eax, eax
inc eax
imul eax, eax, 0xc
mov byte [ebp + eax - 0x220], 0
lea eax, [ebp - 0x220]
push eax
lea ecx, [ebp - 0x520]
call fcn.1003376a
mov byte [ebp - 4], 0x18
and dword [ebp - 0x90], 0
jmp 0x10027a46
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0xd
jae 0x10027a5f
mov eax, dword [ebp - 0x90]
mov byte [ebp + eax - 0x220], 0
jmp 0x10027a39
push 0
push 0
lea eax, [ebp - 0x520]
push eax
push dword [ebp - 0x198]
call fcn.1002efe0
add esp, 0x10
mov dword [0x10075774], eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x520]
call fcn.10009102
cmp dword [0x10075774], 0
je 0x10027aaa
mov ecx, dword [ebp - 0x1a0]
call fcn.100013f2
push eax
call dword [0x10075774]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0xc0], 0xe91a049f
mov dword [ebp - 0xc0], 0xffffffe9
jmp 0x10027acd
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0xe
jg 0x10027e14
push 1
lea ecx, [ebp - 0x30c]
call fcn.100013fd
mov byte [ebp - 4], 0x19
push 2
lea ecx, [ebp - 0x4a8]
call fcn.100013fd
mov byte [ebp - 4], 0x1a
push 0xa22
push 0x606a
push 0x340
push 1
push 0x4251
push 0x601d
push 0x5b2
push 0x60f9
push 0x11ca
push 0x3b3a
lea eax, [ebp - 0x30c]
push eax
push 0x116c
push 1
lea eax, [ebp - 0x2b0]
push eax
push 1
push 0x57d0
push 0x6181
push 0x6900
call fcn.100244db
add esp, 0x48
push 1
lea eax, [ebp - 0x4a8]
push eax
push 0x26e7
push 1
push 1
lea eax, [ebp - 0x2b0]
push eax
push 0x6279
push 0x6612
push 0x49e5
call fcn.100248c9
add esp, 0x24
push 0
lea ecx, [ebp - 0x30c]
call fcn.10001455
mov dword [eax], 0xffffffed
jmp 0x10027bc2
push 0
lea ecx, [ebp - 0x30c]
call fcn.10001455
mov dword [ebp - 0x1a8], eax
mov eax, dword [ebp - 0x1a8]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x1a8]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x30c]
call fcn.10001455
cmp dword [eax], 0xc
jge 0x10027df1
push 2
lea ecx, [ebp - 0x2fc]
call fcn.100013fd
mov byte [ebp - 4], 0x1b
push 1
push 0x21d9
lea eax, [ebp - 0x4f0]
push eax
push 1
lea eax, [ebp - 0x2fc]
push eax
push 1
push 0x1371
push 0x4afc
push 0x39a8
call fcn.1002140a
add esp, 0x24
push 1
lea ecx, [ebp - 0x2fc]
call fcn.10001455
and dword [eax], 0
jmp 0x10027c4f
push 1
lea ecx, [ebp - 0x2fc]
call fcn.10001455
mov dword [ebp - 0x1b0], eax
mov eax, dword [ebp - 0x1b0]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x1b0]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x2fc]
call fcn.10001455
cmp dword [eax], 0x19
jne 0x10027ddd
mov dword [ebp - 0xc8], 0x88eb9876
mov dword [ebp - 0xc8], 1
jmp 0x10027c88
mov eax, dword [ebp - 0xc8]
dec eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0
jl 0x10027cc2
mov byte [ebp - 0x38], 0
push 0x13f1
push 0x62d3
push 0
push 0x821
push 0x59df
push 1
push 0x6e8d
lea eax, [ebp - 0x38]
push eax
push 1
call fcn.10024ee9
add esp, 0x24
jmp 0x10027c7b
mov dword [ebp - 0x1b8], 0x126
mov dword [ebp - 0x32c], str.bun_xct_cfblro_eynmm_nxp_hpyyk
cmp dword [ebp - 0x1b8], 0x14b
jle 0x10027d67
and dword [ebp - 0xd0], 0
jmp 0x10027cfc
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0xa5b
jge 0x10027d5d
and dword [ebp - 0xb4], 0
jmp 0x10027d1e
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0x1392
jge 0x10027d5b
mov eax, dword [ebp - 0xd0]
add eax, dword [ebp - 0xb4]
cdq
mov dword [ebp - 0x2ac], eax
mov dword [ebp - 0x2a8], edx
push dword [ebp - 0x2a8]
push dword [ebp - 0x2ac]
mov ecx, 0x10073b38
call fcn.10004192
jmp 0x10027d11
jmp 0x10027cef
push 0
push 0
call dword [sym.imp.GDI32.dll_GetRgnBox]
mov byte [ebp - 0x36], 0
push 0x4a7c
push 0x60af
lea eax, [ebp - 0x36]
push eax
push 1
push 1
push 0x67ae
push 0x37ec
call fcn.10024ce7
add esp, 0x1c
mov byte [ebp - 4], 0x1c
cmp dword [ebp - 0x1b8], 0x18
jge 0x10027dac
mov edx, dword [ebp - 0x32c]
mov ecx, 0x10073b38
call fcn.10005a51
jmp 0x10027dc8
mov dword [ebp - 4], 0x1b
jmp 0x10027dd8
jmp 0x10027c2b
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x2fc]
call fcn.10001439
jmp 0x10027b9e
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x4a8]
call fcn.10001439
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x30c]
call fcn.10001439
jmp 0x10027ac0
cmp dword [ebp - 0x40], 0
je 0x10027e7e
movzx eax, byte [0x10075763]
test eax, eax
je 0x10027e36
mov ecx, 0x10076c64
call fcn.100337f6
movzx eax, al
test eax, eax
jne 0x10027e7e
push 0x10076c64
lea eax, [ebp - 0x1c0]
push eax
push 1
push 1
lea eax, [ebp - 0x40]
push eax
call fcn.10021542
add esp, 0x14
push 0x4e09
push 0x10075763
push 1
push 0x880
push 0xabb
push 1
push 0x26ac
push 0x2621
push 1
call fcn.10024ee9
add esp, 0x24
push 0x6258
push 1
push 0x65b5
push 0x288a
push 1
call fcn.100259d8
add esp, 0x14
mov eax, dword [ebp - 0x1c8]
mov ecx, dword [ebp - 0x40]
mov dword [eax], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x38c]
call fcn.100013e8
jmp 0x10028011
mov eax, dword [ebp - 0x2b8]
mov dword [ebp - 0x2c0], eax
mov eax, dword [ebp - 0x34c]
mov dword [ebp - 0x314], eax
mov eax, dword [ebp - 0x2c0]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x314]
mov dword [ebp - 0x2d0], eax
mov eax, dword [ebp - 0x48]
mov dword [eax], 0
jmp 0x10027f0c
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x48]
mov dword [ecx], eax
mov eax, dword [ebp - 0x48]
cmp dword [eax], 2
jge 0x10027f2c
mov eax, dword [ebp - 0x48]
push dword [eax]
mov ecx, dword [ebp - 0x2d0]
call fcn.10001455
mov dword [eax], 0xfffffffe
jmp 0x10027f01
jmp 0x10028011
mov eax, dword [ebp + 8]
mov dword [ebp - 0x254], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x234], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x24c], eax
lea eax, [ebp + 0x10]
mov dword [ebp - 0x228], eax
mov eax, dword [ebp - 0x228]
movzx eax, byte [eax]
test eax, eax
je 0x10027fae
mov eax, dword [ebp - 0x234]
mov dword [ebp - 0x23c], eax
mov eax, dword [ebp - 0x23c]
mov dword [ebp - 0x244], eax
mov eax, dword [ebp - 0x244]
movzx eax, byte [eax]
test eax, eax
je 0x10027fac
push 0x925
push 0x1ccb
push 0x21b2
push 0x1f0e
push 1
push 0x6fc0
push 1
call fcn.100210d8
add esp, 0x1c
jmp 0x10028011
mov eax, dword [ebp - 0x24c]
mov dword [ebp - 0x25c], eax
mov eax, dword [ebp - 0x254]
mov dword [ebp - 0x264], eax
mov eax, dword [ebp - 0x25c]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x264]
mov dword [ebp - 0x26c], eax
mov eax, dword [ebp - 0x4c]
mov dword [eax], 0
jmp 0x10027ff1
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x4c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x4c]
cmp dword [eax], 2
jge 0x10028011
mov eax, dword [ebp - 0x4c]
push dword [eax]
mov ecx, dword [ebp - 0x26c]
call fcn.10001455
mov dword [eax], 1
jmp 0x10027fe6
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret