Function at 0x100222af
Capabilities:
Query or enumerate registry value
Set thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x604
mov dword [ebp - 0x3c], 0xfffffff6
mov dword [ebp - 0xc0], 0
jmp 0x100222d8
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 1
jge 0x100222f4
mov eax, dword [ebp - 0xc0]
mov dword [ebp + eax*4 - 0x114], 0xb34e6d4f
jmp 0x100222cb
mov dword [ebp - 0x3c], 0x12
jmp 0x10022304
mov eax, dword [ebp - 0x3c]
dec eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0x10
jge 0x10022323
mov dword [ebp - 0x2d0], 0xe1d925b0
mov eax, dword [ebp - 0x2d0]
dec eax
mov dword [ebp - 0x2d0], eax
jmp 0x100222fd
mov dword [ebp - 0x3c], 0
jmp 0x10022333
mov eax, dword [ebp - 0x3c]
dec eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
jl 0x100223a6
mov dword [ebp - 0xcc], 1
mov dword [ebp - 0xcc], 0
jmp 0x1002235c
mov eax, dword [ebp - 0xcc]
dec eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0
jl 0x10022390
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp + eax*4 - 0x114]
mov dword [ebp - 0x5b8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x114]
neg eax
mov ecx, dword [ebp - 0x3c]
mov dword [ebp + ecx*4 - 0x114], eax
jmp 0x1002234f
mov byte [ebp - 0x59], 0
movzx eax, byte [ebp - 0x59]
test eax, eax
je 0x100223a4
push 0
call dword [sym.imp.KERNEL32.dll_SetCommBreak]
jmp 0x1002232c
movzx eax, byte [ebp + 0xc]
test eax, eax
je 0x10024cf8
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x438], eax
mov dword [ebp - 0x8c], 0xfffffffd
mov dword [ebp - 0x54], 0x1cecb457
mov dword [ebp - 0xb8], 0x87a9b65c
mov dword [ebp - 0x304], 0xfffffffe
mov dword [ebp - 0x464], 1
mov dword [ebp - 0xa0], 0
jmp 0x10022403
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 3
jge 0x1002241f
mov eax, dword [ebp - 0xa0]
mov dword [ebp + eax*4 - 0x47c], 0x7e434392
jmp 0x100223f6
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x540], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x8c]
cmp dword [ebp + eax - 0x47c], ecx
jge 0x10022455
mov dword [ebp - 0x3d0], 1
jmp 0x1002245c
and dword [ebp - 0x3d0], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x47c]
cmp dword [ebp - 0x3d0], eax
jne 0x1002247c
mov dword [ebp - 0x218], 1
jmp 0x10022483
and dword [ebp - 0x218], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x47c]
cmp dword [ebp - 0x218], eax
jg 0x100224a3
mov dword [ebp - 0x140], 1
jmp 0x100224aa
and dword [ebp - 0x140], 0
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x140], eax
jge 0x100224ca
mov eax, 0x21f
test eax, eax
je 0x100224ca
mov dword [ebp - 0x2ec], 1
jmp 0x100224d1
and dword [ebp - 0x2ec], 0
mov eax, dword [ebp - 0x54]
sub eax, dword [ebp - 0x8c]
cmp eax, dword [ebp - 0x2ec]
jne 0x100224ee
mov dword [ebp - 0x148], 1
jmp 0x100224f5
and dword [ebp - 0x148], 0
cmp dword [ebp - 0x148], 0xdd5d
jle 0x1002250d
mov dword [ebp - 0x2f4], 1
jmp 0x10022514
and dword [ebp - 0x2f4], 0
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x2f4], eax
jne 0x1002252b
mov dword [ebp - 0x3e8], 1
jmp 0x10022532
and dword [ebp - 0x3e8], 0
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x548], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x47c]
mov dword [ebp - 0x550], eax
mov eax, dword [ebp - 0x54]
dec eax
dec eax
cmp eax, dword [ebp - 0x8c]
je 0x10022574
mov eax, 0x982b
test eax, eax
jne 0x10022574
push 6
pop eax
test eax, eax
jne 0x10022574
and dword [ebp - 0x150], 0
jmp 0x1002257e
mov dword [ebp - 0x150], 1
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x54], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x47c]
cmp dword [ebp - 0x54], eax
je 0x100225a4
mov dword [ebp - 0x2fc], 1
jmp 0x100225ab
and dword [ebp - 0x2fc], 0
mov eax, dword [ebp - 0x8c]
cmp dword [ebp - 0x2fc], eax
jne 0x100225c5
mov dword [ebp - 0x158], 1
jmp 0x100225cc
and dword [ebp - 0x158], 0
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0xb8], eax
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0x304], eax
mov eax, dword [ebp - 0x304]
mov dword [ebp - 0x574], eax
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0x590], eax
mov eax, 0x2b416c28
test eax, eax
je 0x1002261a
cmp dword [ebp - 0xb8], 0
je 0x1002261a
mov dword [ebp - 0x160], 1
jmp 0x10022621
and dword [ebp - 0x160], 0
mov eax, dword [ebp - 0x160]
neg eax
mov dword [ebp - 0x464], eax
lea eax, [ebp + 0x10]
mov dword [ebp - 0x3f0], eax
mov dword [ebp - 0x598], 7
mov dword [ebp - 0x5a0], 0xb7d8
mov dword [ebp - 0x30c], 0x4a276ac1
mov dword [ebp - 0x14], 0
jmp 0x10022666
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x1002267c
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x5f4], 0x261f9c28
jmp 0x1002265f
mov dword [ebp - 0x14], 0
jmp 0x1002268c
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 4
jge 0x100226a2
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x604], 4
jmp 0x10022685
mov dword [ebp - 0x14], 0
jmp 0x100226b2
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x100226c8
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x4ac], 0xccc8
jmp 0x100226ab
mov dword [ebp - 0x14], 0
jmp 0x100226d8
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jge 0x100226ee
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x5b4], 0x4e10
jmp 0x100226d1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x4ac]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x4ac], eax
mov eax, dword [ebp - 0x30c]
inc eax
mov dword [ebp - 0x30c], eax
lea eax, [ebp + 0x14]
mov dword [ebp - 0x3f8], eax
mov dword [ebp - 0x30], 0xa5273358
mov dword [ebp - 0x46c], 0
mov dword [ebp - 0x180], 0x58aae07e
mov dword [ebp - 0x32c], 5
mov dword [ebp - 0x190], 0x97440271
mov dword [ebp - 0x484], 1
mov dword [ebp - 0x584], 0xd3ed23c5
mov dword [ebp - 0x4bc], 0
mov dword [ebp - 0x53c], 1
mov dword [ebp - 0x4c4], 0xa1d2
mov dword [ebp - 0x59c], 0x98cbdb62
mov dword [ebp - 0x4cc], 0
mov dword [ebp - 0x5c8], 0x954eb856
mov dword [ebp - 0x5c4], 0x954eb856
mov dword [ebp - 0x5c0], 0x954eb856
mov dword [ebp - 0x5bc], 0x954eb856
mov dword [ebp - 0x33c], 0xb4ab
mov dword [ebp - 0xa8], 0
jmp 0x100227df
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 1
jge 0x100227fb
mov eax, dword [ebp - 0xa8]
mov dword [ebp + eax*4 - 0x544], 0x634d71b3
jmp 0x100227d2
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x30], eax
jl 0x1002280f
mov dword [ebp - 0x168], 1
jmp 0x10022816
and dword [ebp - 0x168], 0
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x168]
jle 0x1002282d
mov dword [ebp - 0x170], 1
jmp 0x10022834
and dword [ebp - 0x170], 0
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x4d4], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x58c], eax
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x30], eax
jl 0x1002285a
mov dword [ebp - 0x314], 1
jmp 0x10022861
and dword [ebp - 0x314], 0
mov eax, dword [ebp - 0x314]
mov dword [ebp - 0x46c], eax
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x170], eax
jl 0x1002288a
cmp dword [ebp - 0x30], 0
je 0x1002288a
mov dword [ebp - 0x31c], 1
jmp 0x10022891
and dword [ebp - 0x31c], 0
cmp dword [ebp - 0x31c], 0xdfd
jl 0x100228ac
cmp dword [ebp - 0x30], 0
jne 0x100228ac
and dword [ebp - 0x178], 0
jmp 0x100228b6
mov dword [ebp - 0x178], 1
mov eax, dword [ebp - 0x178]
sub eax, dword [ebp - 0x30]
imul eax, eax, 0x11f3
cmp eax, 0xfffffffb
jne 0x100228d6
mov dword [ebp - 0x324], 1
jmp 0x100228dd
and dword [ebp - 0x324], 0
mov eax, dword [ebp - 0x324]
mov dword [ebp - 0x180], eax
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x32c], eax
cmp dword [ebp - 0x32c], 0xb91ee4cf
jb 0x1002290e
mov dword [ebp - 0x188], 1
jmp 0x10022915
and dword [ebp - 0x188], 0
mov eax, dword [ebp - 0x188]
sub eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jge 0x1002292f
mov dword [ebp - 0x334], 1
jmp 0x10022936
and dword [ebp - 0x334], 0
mov eax, dword [ebp - 0x334]
mov dword [ebp - 0x190], eax
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x484], eax
mov eax, dword [ebp - 0x33c]
dec eax
mov dword [ebp - 0x33c], eax
lea eax, [ebp + 0x18]
mov dword [ebp - 0x400], eax
mov dword [ebp - 0x28], 0
jmp 0x10022974
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 1
jge 0x10022987
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x1c], 0xb26bdde0
jmp 0x1002296d
mov dword [ebp - 0x28], 0
jmp 0x10022997
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 1
jge 0x100229ad
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0xe8], 0xffffffff
jmp 0x10022990
mov dword [ebp - 0x28], 0
jmp 0x100229bd
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 4
jge 0x100229d3
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x5b0], 0xc3167647
jmp 0x100229b6
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x1c], 0xa
jmp 0x100229f8
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1c]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x1c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1c], 0x13
jge 0x10022ffa
mov dword [ebp - 0xb0], 0x56fd8c65
mov dword [ebp - 0x38c], 0xffffffff
mov dword [ebp - 0x1e0], 0x3c25
mov dword [ebp - 0xc8], 0
jmp 0x10022a40
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 1
jge 0x10022a59
mov eax, dword [ebp - 0xc8]
mov dword [ebp + eax*4 - 0x10], 0xffffffff
jmp 0x10022a33
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x10], 0xf
jmp 0x10022a7e
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x10]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x10], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x10], 4
jne 0x10022b6f
mov dword [ebp - 0x198], 0xffffffff
mov dword [ebp - 0x440], 0xd60a2215
mov byte [ebp - 0x5b], 0
movzx eax, byte [ebp - 0x5b]
test eax, eax
je 0x10022ac1
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1c]
mov dword [ebp - 0x4dc], eax
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0x54c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x10]
mov dword [ebp - 0x4e4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x10]
mov dword [ebp - 0x4b0], eax
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0x4ec], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1c]
mov dword [ebp - 0x554], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x10]
cmp dword [ebp + eax - 0x10], ecx
je 0x10022b3b
mov dword [ebp - 0x344], 1
jmp 0x10022b42
and dword [ebp - 0x344], 0
cmp dword [ebp - 0x344], 5
ja 0x10022b57
mov dword [ebp - 0x1a0], 1
jmp 0x10022b5e
and dword [ebp - 0x1a0], 0
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x440], eax
jmp 0x10022a69
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xb0]
cmp dword [ebp + eax - 0x10], ecx
jge 0x10022b8d
mov dword [ebp - 0x34c], 1
jmp 0x10022b94
and dword [ebp - 0x34c], 0
cmp dword [ebp - 0x34c], 0x90707e2
je 0x10022bac
mov dword [ebp - 0x1a8], 1
jmp 0x10022bb3
and dword [ebp - 0x1a8], 0
cmp dword [ebp - 0x1a8], 0x8fe4
jl 0x10022bcb
mov dword [ebp - 0x354], 1
jmp 0x10022bd2
and dword [ebp - 0x354], 0
cmp dword [ebp - 0x354], 0x6f94
jg 0x10022bfd
mov eax, 0x9b03be46
test eax, eax
jne 0x10022bfd
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1c], 0
jne 0x10022bfd
and dword [ebp - 0x1b0], 0
jmp 0x10022c07
mov dword [ebp - 0x1b0], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1c]
cmp dword [ebp - 0x1b0], eax
jne 0x10022c25
mov dword [ebp - 0x35c], 1
jmp 0x10022c2c
and dword [ebp - 0x35c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x10]
sub eax, 4
cmp eax, dword [ebp - 0x35c]
jne 0x10022c4d
mov dword [ebp - 0x1b8], 1
jmp 0x10022c54
and dword [ebp - 0x1b8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x10]
cmp eax, dword [ebp - 0x1b8]
jle 0x10022c72
mov dword [ebp - 0x364], 1
jmp 0x10022c79
and dword [ebp - 0x364], 0
mov eax, dword [ebp - 0x364]
inc eax
imul eax, eax, 6
test eax, eax
je 0x10022ca0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1c], 0
je 0x10022ca0
mov dword [ebp - 0x1c0], 1
jmp 0x10022ca7
and dword [ebp - 0x1c0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1c]
cmp dword [ebp - 0x1c0], eax
je 0x10022cc5
mov dword [ebp - 0x36c], 1
jmp 0x10022ccc
and dword [ebp - 0x36c], 0
cmp dword [ebp - 0x36c], 0x6e82a74
jg 0x10022ce4
mov dword [ebp - 0x1c8], 1
jmp 0x10022ceb
and dword [ebp - 0x1c8], 0
mov eax, dword [ebp - 0x1c8]
sub eax, 0x3b5b0d6
mov dword [ebp - 0x374], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x374]
mov dword [ebp + eax - 0x10], ecx
mov eax, dword [ebp - 0xb0]
cmp dword [ebp - 0x374], eax
jle 0x10022e4c
mov dword [ebp - 0xd8], 0xffff
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1c]
mov dword [ebp - 0x4f4], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x10], 0
jne 0x10022d51
mov dword [ebp - 0xd0], 1
jmp 0x10022d58
and dword [ebp - 0xd0], 0
mov eax, dword [ebp - 0xd8]
push 4
pop ecx
imul ecx, ecx, 0
add eax, dword [ebp + ecx - 0x10]
cmp eax, dword [ebp - 0xd8]
jle 0x10022d7c
mov dword [ebp - 0x1d0], 1
jmp 0x10022d83
and dword [ebp - 0x1d0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x10]
cmp dword [ebp - 0x1d0], eax
je 0x10022da0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x10], 0
mov eax, dword [ebp - 0xd8]
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x1c]
cmp eax, dword [ebp - 0xb0]
jle 0x10022dc4
mov dword [ebp - 0x37c], 1
jmp 0x10022dcb
and dword [ebp - 0x37c], 0
mov eax, dword [ebp - 0x38c]
cmp dword [ebp - 0x37c], eax
jge 0x10022de5
mov dword [ebp - 0x1d8], 1
jmp 0x10022dec
and dword [ebp - 0x1d8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xd0]
mov dword [ebp + eax - 0xe8], ecx
mov eax, dword [ebp - 0xd0]
cmp eax, dword [ebp - 0x1d8]
jle 0x10022e19
mov dword [ebp - 0x384], 1
jmp 0x10022e20
and dword [ebp - 0x384], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x384]
mov dword [ebp + eax - 0x5b0], ecx
mov byte [ebp - 0x6d], 0
movzx eax, byte [ebp - 0x6d]
test eax, eax
je 0x10022e47
push 0
call dword [sym.imp.KERNEL32.dll_GetTimeZoneInformation]
jmp 0x10022ff5
mov dword [ebp - 0x100], 0x936bb358
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x1e0], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1c]
sub eax, dword [ebp - 0x1e0]
jne 0x10022f56
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x5b0], 0xf1c2
jle 0x10022e97
mov dword [ebp - 0xe0], 1
jmp 0x10022e9e
and dword [ebp - 0xe0], 0
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0x558], eax
cmp dword [ebp - 0x38c], 0
je 0x10022ecc
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x10], 0
je 0x10022ecc
mov dword [ebp - 0x1e8], 1
jmp 0x10022ed3
and dword [ebp - 0x1e8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xe0]
mov dword [ebp + eax - 0x5b0], ecx
mov eax, dword [ebp - 0xe0]
sub eax, dword [ebp - 0x1e8]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x10]
je 0x10022f0a
mov dword [ebp - 0x394], 1
jmp 0x10022f11
and dword [ebp - 0x394], 0
mov eax, dword [ebp - 0x394]
sub eax, 0x464d06d0
je 0x10022f37
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1c], 0
je 0x10022f37
mov dword [ebp - 0x1f0], 1
jmp 0x10022f3e
and dword [ebp - 0x1f0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1f0]
sub ecx, dword [ebp + eax - 0x10]
add ecx, dword [ebp - 0x100]
je 0x10022f69
push 4
pop eax
test eax, eax
je 0x10022f69
mov dword [ebp - 0x39c], 1
jmp 0x10022f70
and dword [ebp - 0x39c], 0
cmp dword [ebp - 0x39c], 0xfffffffb
ja 0x10022f85
mov dword [ebp - 0x1f8], 1
jmp 0x10022f8c
and dword [ebp - 0x1f8], 0
mov eax, dword [ebp - 0x100]
cmp dword [ebp - 0x1f8], eax
jl 0x10022fa6
mov dword [ebp - 0x3a4], 1
jmp 0x10022fad
and dword [ebp - 0x3a4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3a4]
sub ecx, dword [ebp + eax - 0xe8]
je 0x10022fdb
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x10], 0
je 0x10022fdb
mov dword [ebp - 0x200], 1
jmp 0x10022fe2
and dword [ebp - 0x200], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x200]
mov dword [ebp + eax - 0xe8], ecx
jmp 0x100229e3
mov eax, dword [ebp + 8]
mov dword [ebp - 0x10c], eax
mov dword [ebp - 0x3f4], 0xffffffff
mov dword [ebp - 0x24], 0
jmp 0x1002301d
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x10023033
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x90], 1
jmp 0x10023016
mov dword [ebp - 0x24], 0
jmp 0x10023043
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x10023059
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x110], 0x3690f1d8
jmp 0x1002303c
mov dword [ebp - 0x24], 0
jmp 0x10023069
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x1002307f
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x5d4], 2
jmp 0x10023062
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov eax, dword [ebp + eax - 0x90]
mov dword [ebp + ecx - 0x110], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x90]
push 4
pop edx
imul edx, edx, 0
imul edx, dword [ebp + edx - 0x110], 0
add ecx, edx
cmp dword [ebp + eax - 0x90], ecx
jne 0x100230d1
mov dword [ebp - 0x3ac], 1
jmp 0x100230d8
and dword [ebp - 0x3ac], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x90]
cmp dword [ebp - 0x3ac], eax
jg 0x100230f9
mov dword [ebp - 0x45c], 1
jmp 0x10023100
and dword [ebp - 0x45c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x90]
mov dword [ebp - 0x4fc], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x90]
mov dword [ebp - 0x56c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5d4]
mov dword [ebp - 0x504], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x110]
neg eax
cmp eax, 0x9bdba76a
jne 0x1002315b
mov dword [ebp - 0x208], 1
jmp 0x10023162
and dword [ebp - 0x208], 0
mov eax, dword [ebp - 0x208]
mov dword [ebp - 0x3f4], eax
mov dword [ebp - 0x84], 0x5b9b55bb
mov dword [ebp - 0x3bc], 0xedad94e8
mov dword [ebp - 0x84], 0
jmp 0x1002319b
mov eax, dword [ebp - 0x84]
dec eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0xfffffff2
jge 0x100232e9
mov dword [ebp - 0x98], 0
jmp 0x100231c1
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 2
jge 0x100231dd
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0x3dc], 0xbdbdf7c
jmp 0x100231b4
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x594], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3dc], 0x82d5
jle 0x10023208
mov dword [ebp - 0x3b4], 1
jmp 0x1002320f
and dword [ebp - 0x3b4], 0
cmp dword [ebp - 0x3b4], 0
jl 0x10023224
mov dword [ebp - 0x210], 1
jmp 0x1002322b
and dword [ebp - 0x210], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3dc]
cmp dword [ebp - 0x210], eax
jl 0x1002324e
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x3dc], 0
mov dword [ebp - 0x3bc], 0xfffffffd
cmp dword [ebp - 0x3bc], 0xfffffff7
je 0x1002326d
mov dword [ebp - 0x3c4], 1
jmp 0x10023274
and dword [ebp - 0x3c4], 0
cmp dword [ebp - 0x3c4], 0xa5f34bda
je 0x1002328c
mov dword [ebp - 0x3c0], 1
jmp 0x10023293
and dword [ebp - 0x3c0], 0
mov eax, dword [ebp - 0x84]
cmp dword [ebp - 0x3c0], eax
jne 0x100232af
or eax, 0xffffffff
jne 0x100232af
and dword [ebp - 0x220], 0
jmp 0x100232b9
mov dword [ebp - 0x220], 1
imul eax, dword [ebp - 0x220], 0x9d73
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x3dc], eax
mov byte [ebp - 0x5c], 0
movzx eax, byte [ebp - 0x5c]
test eax, eax
je 0x100232e4
push 0
call dword [sym.imp.GDI32.dll_CreatePenIndirect]
jmp 0x1002318e
mov dword [ebp - 0x9c], 0
jmp 0x10023302
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 2
jge 0x1002331e
mov eax, dword [ebp - 0x9c]
mov dword [ebp + eax*4 - 0x3e4], 0x68206240
jmp 0x100232f5
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x3e4], 0xffffffee
jmp 0x1002334c
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3e4]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x3e4], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3e4], 0x15
jne 0x1002337c
mov byte [ebp - 0x65], 0
movzx eax, byte [ebp - 0x65]
test eax, eax
je 0x1002337a
push 0x9f3
push 0x1501
push 0
call dword [sym.imp.USER32.dll_CheckMenuItem]
jmp 0x10023331
mov byte [ebp - 0x5d], 0
movzx eax, byte [ebp - 0x5d]
test eax, eax
je 0x10023395
push 0
push 0x22f6
call dword [sym.imp.KERNEL32.dll_TlsSetValue]
mov dword [ebp - 0x18], 0
jmp 0x100233a5
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jge 0x100233b8
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x2c], 0xb26bdde0
jmp 0x1002339e
mov dword [ebp - 0x18], 0
jmp 0x100233c8
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jge 0x100233de
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xec], 0xffffffff
jmp 0x100233c1
mov dword [ebp - 0x18], 0
jmp 0x100233ee
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jge 0x10023404
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x568], 0xc3167647
jmp 0x100233e7
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x2c], 0xa
jmp 0x10023429
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2c]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x2c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2c], 0x13
jge 0x1002407e
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x228], 0
mov dword [ebp - 0x3fc], 0xfffffff7
mov dword [ebp - 0x378], 0
mov dword [ebp - 0x460], 6
mov dword [ebp - 0x40], 0
jmp 0x10023479
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 1
jge 0x1002348f
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x444], 0xb78acc4b
jmp 0x10023472
mov dword [ebp - 0x40], 0
jmp 0x1002349f
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 1
jge 0x100234b5
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0xf0], 0x4a90c6d2
jmp 0x10023498
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x50c], eax
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x300], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x300]
mov dword [ebp + eax - 0x444], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf0]
add eax, dword [ebp - 0x300]
mov dword [ebp - 0x228], eax
mov eax, dword [ebp - 0x228]
cmp dword [ebp - 0x7c], eax
je 0x10023511
mov dword [ebp - 0x370], 1
jmp 0x10023518
and dword [ebp - 0x370], 0
mov eax, dword [ebp - 0x7c]
push 0xfffffffffffffffc
pop eax
test eax, eax
jne 0x10023534
mov eax, 0x8787d636
test eax, eax
jne 0x10023534
and dword [ebp - 0x230], 0
jmp 0x1002353e
mov dword [ebp - 0x230], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x230]
sub ecx, dword [ebp + eax - 0xf0]
cmp ecx, 0x3e86
jle 0x10023565
mov dword [ebp - 0x308], 1
jmp 0x1002356c
and dword [ebp - 0x308], 0
cmp dword [ebp - 0x308], 0xfffffffb
je 0x10023581
mov dword [ebp - 0x238], 1
jmp 0x10023588
and dword [ebp - 0x238], 0
cmp dword [ebp - 0x238], 0x40e1
je 0x100235a0
mov dword [ebp - 0x3a8], 1
jmp 0x100235a7
and dword [ebp - 0x3a8], 0
cmp dword [ebp - 0x3a8], 0xa3c3d214
jne 0x100235bf
mov dword [ebp - 0x240], 1
jmp 0x100235c6
and dword [ebp - 0x240], 0
cmp dword [ebp - 0x240], 0xccd20446
jbe 0x100235de
mov dword [ebp - 0x310], 1
jmp 0x100235e5
and dword [ebp - 0x310], 0
mov eax, dword [ebp - 0x3fc]
cmp dword [ebp - 0x310], eax
jge 0x100235ff
mov dword [ebp - 0x248], 1
jmp 0x10023606
and dword [ebp - 0x248], 0
mov eax, dword [ebp - 0x248]
mov dword [ebp - 0x378], eax
mov eax, dword [ebp - 0x378]
push 4
pop ecx
imul ecx, ecx, 0
add eax, dword [ebp + ecx - 0xf0]
cmp eax, 0x78e6
jg 0x10023638
mov dword [ebp - 0x250], 1
jmp 0x1002363f
and dword [ebp - 0x250], 0
mov eax, dword [ebp - 0x250]
mov dword [ebp - 0x460], eax
mov dword [ebp - 0x108], 0x61f9c28a
mov dword [ebp - 0x58], 0x1d925b0e
mov dword [ebp - 0x44], 1
mov dword [ebp - 0x414], 0x7d3d
mov eax, dword [ebp - 0x44]
dec eax
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x58], 0xffffffe2
jmp 0x10023684
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0xffffffe6
jg 0x1002390b
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x470], 0x27a4ef21
mov dword [ebp - 0xa4], 0
jmp 0x100236b8
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 3
jge 0x100236d4
mov eax, dword [ebp - 0xa4]
mov dword [ebp + eax*4 - 0x5e0], 0xfffffffa
jmp 0x100236ab
cmp dword [ebp - 0x58], 0
je 0x1002380d
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x34], eax
jl 0x100236f2
mov dword [ebp - 0x318], 1
jmp 0x100236f9
and dword [ebp - 0x318], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x318], eax
jne 0x10023710
mov dword [ebp - 0x404], 1
jmp 0x10023717
and dword [ebp - 0x404], 0
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x570], eax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x514], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x57c], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0xfffffffa
jl 0x10023750
mov dword [ebp - 0x258], 1
jmp 0x10023757
and dword [ebp - 0x258], 0
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x258], eax
jl 0x1002376e
mov dword [ebp - 0x448], 1
jmp 0x10023775
and dword [ebp - 0x448], 0
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x51c], eax
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x44], eax
jle 0x10023792
mov dword [ebp - 0x3d4], 1
jmp 0x10023799
and dword [ebp - 0x3d4], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x3d4], eax
jne 0x100237b0
mov dword [ebp - 0x260], 1
jmp 0x100237b7
and dword [ebp - 0x260], 0
mov eax, dword [ebp - 0x260]
sub eax, dword [ebp - 0x44]
cmp eax, 5
jge 0x100237d1
mov dword [ebp - 0x320], 1
jmp 0x100237d8
and dword [ebp - 0x320], 0
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x320], eax
jge 0x100237ef
mov dword [ebp - 0x268], 1
jmp 0x100237f6
and dword [ebp - 0x268], 0
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x268], eax
jle 0x1002380d
mov dword [ebp - 0x380], 1
jmp 0x10023814
and dword [ebp - 0x380], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x380], eax
je 0x1002382e
cmp dword [ebp - 0x34], 0
jne 0x1002382e
and dword [ebp - 0x270], 0
jmp 0x10023838
mov dword [ebp - 0x270], 1
mov eax, dword [ebp - 0x270]
sub eax, dword [ebp - 0x44]
cmp eax, 1
jb 0x10023852
mov dword [ebp - 0x328], 1
jmp 0x10023859
and dword [ebp - 0x328], 0
mov eax, dword [ebp - 0x44]
imul eax, dword [ebp - 0x328]
test eax, eax
je 0x10023876
cmp dword [ebp - 0x58], 0
je 0x10023876
and dword [ebp - 0x40c], 0
jmp 0x10023880
mov dword [ebp - 0x40c], 1
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x578], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x470], eax
cmp dword [ebp - 0x414], 0
je 0x100238b0
cmp dword [ebp - 0x108], 0
je 0x100238b0
mov dword [ebp - 0x278], 1
jmp 0x100238b7
and dword [ebp - 0x278], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x278], eax
jl 0x100238ce
mov dword [ebp - 0x3b0], 1
jmp 0x100238d5
and dword [ebp - 0x3b0], 0
cmp dword [ebp - 0x3b0], 0x5faafe30
jle 0x100238ed
mov dword [ebp - 0x280], 1
jmp 0x100238f4
and dword [ebp - 0x280], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x280]
mov dword [ebp + eax - 0x5e0], ecx
jmp 0x1002367d
mov dword [ebp - 0xbc], 0x56fd8c65
mov dword [ebp - 0x360], 0xffffffff
mov dword [ebp - 0x2e0], 0x3c25
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x468], 0x31ea062
mov dword [ebp - 0x38], 0
jmp 0x1002394a
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0xfffffff1
je 0x10023a69
mov dword [ebp - 0xac], 8
mov dword [ebp - 0x330], 5
mov dword [ebp - 0x524], 0xffffffff
mov dword [ebp - 0x580], 0xdfddae9
mov dword [ebp - 0x290], 0x94ff5452
cmp dword [ebp - 0xac], 0
je 0x10023994
jmp 0x10023a69
mov dword [ebp - 0x330], 2
mov eax, dword [ebp - 0xac]
cmp dword [ebp - 0x330], eax
jle 0x100239b8
mov dword [ebp - 0x338], 1
jmp 0x100239bf
and dword [ebp - 0x338], 0
mov eax, dword [ebp - 0x290]
mov dword [ebp - 0x52c], eax
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0xac], eax
je 0x100239e2
mov dword [ebp - 0x288], 1
jmp 0x100239e9
and dword [ebp - 0x288], 0
mov eax, dword [ebp - 0x288]
dec eax
cmp eax, dword [ebp - 0x38]
jl 0x10023a01
mov dword [ebp - 0x388], 1
jmp 0x10023a08
and dword [ebp - 0x388], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x388], eax
jle 0x10023a25
cmp dword [ebp - 0x290], 0
jne 0x10023a25
and dword [ebp - 0x450], 0
jmp 0x10023a2f
mov dword [ebp - 0x450], 1
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0x588], eax
mov eax, dword [ebp - 0x338]
add eax, 0x3bb2669c
jne 0x10023a54
mov dword [ebp - 0x41c], 1
jmp 0x10023a5b
and dword [ebp - 0x41c], 0
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x468], eax
jmp 0x10023943
mov dword [ebp - 0x38], 0xffffffe4
jmp 0x10023a79
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0xffffffe9
jle 0x10023aa1
mov dword [ebp - 0x424], 0xf23d37f4
mov dword [ebp - 0x458], 0xaffa898c
mov eax, dword [ebp - 0x424]
mov dword [ebp - 0x458], eax
jmp 0x10023a72
mov dword [ebp - 0xb4], 0
jmp 0x10023aba
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 1
jge 0x10023ad3
mov eax, dword [ebp - 0xb4]
mov dword [ebp + eax*4 - 0xc], 0xffffffff
jmp 0x10023aad
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xc], 0xf
jmp 0x10023af8
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xc], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc], 4
jne 0x10023bf0
mov dword [ebp - 0x298], 0xffffffff
mov dword [ebp - 0x42c], 0xd60a2215
mov byte [ebp - 0x5e], 0
movzx eax, byte [ebp - 0x5e]
test eax, eax
je 0x10023b42
push 0x3435
push 0x127a
push 0x6d97
push 0
call fcn.1002769c
add esp, 0x10
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2c]
mov dword [ebp - 0x534], eax
mov eax, dword [ebp - 0x298]
mov dword [ebp - 0x4b4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc]
mov dword [ebp - 0x4b8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc]
mov dword [ebp - 0x4c0], eax
mov eax, dword [ebp - 0x298]
mov dword [ebp - 0x4c8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2c]
mov dword [ebp - 0x4d0], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0xc]
cmp dword [ebp + eax - 0xc], ecx
je 0x10023bbc
mov dword [ebp - 0x3c8], 1
jmp 0x10023bc3
and dword [ebp - 0x3c8], 0
cmp dword [ebp - 0x3c8], 5
ja 0x10023bd8
mov dword [ebp - 0x2a0], 1
jmp 0x10023bdf
and dword [ebp - 0x2a0], 0
mov eax, dword [ebp - 0x2a0]
mov dword [ebp - 0x42c], eax
jmp 0x10023ae3
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xbc]
cmp dword [ebp + eax - 0xc], ecx
jge 0x10023c0e
mov dword [ebp - 0x340], 1
jmp 0x10023c15
and dword [ebp - 0x340], 0
cmp dword [ebp - 0x340], 0x90707e2
je 0x10023c2d
mov dword [ebp - 0x2a8], 1
jmp 0x10023c34
and dword [ebp - 0x2a8], 0
cmp dword [ebp - 0x2a8], 0x8fe4
jl 0x10023c4c
mov dword [ebp - 0x390], 1
jmp 0x10023c53
and dword [ebp - 0x390], 0
cmp dword [ebp - 0x390], 0x6f94
jg 0x10023c7e
mov eax, 0x9b03be46
test eax, eax
jne 0x10023c7e
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2c], 0
jne 0x10023c7e
and dword [ebp - 0x2b0], 0
jmp 0x10023c88
mov dword [ebp - 0x2b0], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2c]
cmp dword [ebp - 0x2b0], eax
jne 0x10023ca6
mov dword [ebp - 0x348], 1
jmp 0x10023cad
and dword [ebp - 0x348], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc]
sub eax, 4
cmp eax, dword [ebp - 0x348]
jne 0x10023cce
mov dword [ebp - 0x2b8], 1
jmp 0x10023cd5
and dword [ebp - 0x2b8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc]
cmp eax, dword [ebp - 0x2b8]
jle 0x10023cf3
mov dword [ebp - 0x3b8], 1
jmp 0x10023cfa
and dword [ebp - 0x3b8], 0
mov eax, dword [ebp - 0x3b8]
inc eax
imul eax, eax, 6
test eax, eax
je 0x10023d21
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2c], 0
je 0x10023d21
mov dword [ebp - 0x2c0], 1
jmp 0x10023d28
and dword [ebp - 0x2c0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2c]
cmp dword [ebp - 0x2c0], eax
je 0x10023d46
mov dword [ebp - 0x350], 1
jmp 0x10023d4d
and dword [ebp - 0x350], 0
cmp dword [ebp - 0x350], 0x6e82a74
jg 0x10023d65
mov dword [ebp - 0x2c8], 1
jmp 0x10023d6c
and dword [ebp - 0x2c8], 0
mov eax, dword [ebp - 0x2c8]
sub eax, 0x3b5b0d6
mov dword [ebp - 0x398], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x398]
mov dword [ebp + eax - 0xc], ecx
mov eax, dword [ebp - 0xbc]
cmp dword [ebp - 0x398], eax
jle 0x10023ed0
mov dword [ebp - 0xf8], 0xffff
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2c]
mov dword [ebp - 0x4d8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc], 0
jne 0x10023dd2
mov dword [ebp - 0xd4], 1
jmp 0x10023dd9
and dword [ebp - 0xd4], 0
mov eax, dword [ebp - 0xf8]
push 4
pop ecx
imul ecx, ecx, 0
add eax, dword [ebp + ecx - 0xc]
cmp eax, dword [ebp - 0xf8]
jle 0x10023dfd
mov dword [ebp - 0x138], 1
jmp 0x10023e04
and dword [ebp - 0x138], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc]
cmp dword [ebp - 0x138], eax
je 0x10023e21
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc], 0
mov eax, dword [ebp - 0xf8]
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x2c]
cmp eax, dword [ebp - 0xbc]
jle 0x10023e45
mov dword [ebp - 0x358], 1
jmp 0x10023e4c
and dword [ebp - 0x358], 0
mov eax, dword [ebp - 0x360]
cmp dword [ebp - 0x358], eax
jge 0x10023e66
mov dword [ebp - 0x2d8], 1
jmp 0x10023e6d
and dword [ebp - 0x2d8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xd4]
mov dword [ebp + eax - 0xec], ecx
mov eax, dword [ebp - 0xd4]
cmp eax, dword [ebp - 0x2d8]
jle 0x10023e9a
mov dword [ebp - 0x3cc], 1
jmp 0x10023ea1
and dword [ebp - 0x3cc], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3cc]
mov dword [ebp + eax - 0x568], ecx
mov byte [ebp - 0x5a], 0
push 0
lea eax, [ebp - 0x5a]
push eax
push 0xf78
call fcn.100256d4
add esp, 0xc
jmp 0x10024079
mov dword [ebp - 0xe4], 0x936bb358
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x2e0], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2c]
sub eax, dword [ebp - 0x2e0]
jne 0x10023fda
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x568], 0xf1c2
jle 0x10023f1b
mov dword [ebp - 0xdc], 1
jmp 0x10023f22
and dword [ebp - 0xdc], 0
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0x4e0], eax
cmp dword [ebp - 0x360], 0
je 0x10023f50
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc], 0
je 0x10023f50
mov dword [ebp - 0x2e8], 1
jmp 0x10023f57
and dword [ebp - 0x2e8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xdc]
mov dword [ebp + eax - 0x568], ecx
mov eax, dword [ebp - 0xdc]
sub eax, dword [ebp - 0x2e8]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0xc]
je 0x10023f8e
mov dword [ebp - 0x3a0], 1
jmp 0x10023f95
and dword [ebp - 0x3a0], 0
mov eax, dword [ebp - 0x3a0]
sub eax, 0x464d06d0
je 0x10023fbb
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2c], 0
je 0x10023fbb
mov dword [ebp - 0x2f0], 1
jmp 0x10023fc2
and dword [ebp - 0x2f0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2f0]
sub ecx, dword [ebp + eax - 0xc]
add ecx, dword [ebp - 0xe4]
je 0x10023fed
push 4
pop eax
test eax, eax
je 0x10023fed
mov dword [ebp - 0x368], 1
jmp 0x10023ff4
and dword [ebp - 0x368], 0
cmp dword [ebp - 0x368], 0xfffffffb
ja 0x10024009
mov dword [ebp - 0x2f8], 1
jmp 0x10024010
and dword [ebp - 0x2f8], 0
mov eax, dword [ebp - 0xe4]
cmp dword [ebp - 0x2f8], eax
jl 0x1002402a
mov dword [ebp - 0x214], 1
jmp 0x10024031
and dword [ebp - 0x214], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x214]
sub ecx, dword [ebp + eax - 0xec]
je 0x1002405f
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc], 0
je 0x1002405f
mov dword [ebp - 0x21c], 1
jmp 0x10024066
and dword [ebp - 0x21c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x21c]
mov dword [ebp + eax - 0xec], ecx
jmp 0x10023414
mov dword [ebp - 0x64], 0x73ff82f
mov dword [ebp - 0x23c], 0x20bd2ab
mov dword [ebp - 0xf4], 6
mov dword [ebp - 0x224], 0xec2184e5
mov dword [ebp - 0x4c], 0
jmp 0x100240b3
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 1
jge 0x100240c9
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x24c], 0x969161d5
jmp 0x100240ac
mov dword [ebp - 0x4c], 0
jmp 0x100240d9
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 1
jge 0x100240ef
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x434], 1
jmp 0x100240d2
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x24c], 0
mov eax, dword [ebp - 0x64]
neg eax
add eax, dword [ebp - 0x64]
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0xf4], eax
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 0
jne 0x10024132
mov dword [ebp - 0x22c], 1
jmp 0x10024139
and dword [ebp - 0x22c], 0
cmp dword [ebp - 0x22c], 0x5cb8
jne 0x10024151
mov dword [ebp - 0x234], 1
jmp 0x10024158
and dword [ebp - 0x234], 0
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x234], eax
je 0x1002416f
mov dword [ebp - 0x244], 1
jmp 0x10024176
and dword [ebp - 0x244], 0
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x23c], eax
mov eax, dword [ebp - 0x23c]
cmp eax, dword [ebp - 0x244]
jg 0x10024199
mov dword [ebp - 0x480], 1
jmp 0x100241a0
and dword [ebp - 0x480], 0
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x4e8], eax
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x4f0], eax
push 0xfffffffffffffffa
pop eax
add eax, 8
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x434], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xf4]
mov dword [ebp + eax - 0x24c], ecx
mov dword [ebp - 0x6c], 0x73ff82f
mov dword [ebp - 0x26c], 0x20bd2ab
mov dword [ebp - 0xfc], 6
mov dword [ebp - 0x254], 0xec2184e5
mov dword [ebp - 0x48], 0
jmp 0x1002420d
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 1
jge 0x10024223
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x27c], 0x969161d5
jmp 0x10024206
mov dword [ebp - 0x48], 0
jmp 0x10024233
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 1
jge 0x10024249
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x3ec], 1
jmp 0x1002422c
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x27c], 0
mov eax, dword [ebp - 0x6c]
neg eax
add eax, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0xfc], eax
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 0
jne 0x1002428c
mov dword [ebp - 0x25c], 1
jmp 0x10024293
and dword [ebp - 0x25c], 0
cmp dword [ebp - 0x25c], 0x5cb8
jne 0x100242ab
mov dword [ebp - 0x264], 1
jmp 0x100242b2
and dword [ebp - 0x264], 0
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x264], eax
je 0x100242c9
mov dword [ebp - 0x274], 1
jmp 0x100242d0
and dword [ebp - 0x274], 0
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x26c], eax
mov eax, dword [ebp - 0x26c]
cmp eax, dword [ebp - 0x274]
jg 0x100242f3
mov dword [ebp - 0x43c], 1
jmp 0x100242fa
and dword [ebp - 0x43c], 0
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x4f8], eax
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x500], eax
push 0xfffffffffffffffa
pop eax
add eax, 8
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x3ec], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xfc]
mov dword [ebp + eax - 0x27c], ecx
mov eax, dword [ebp - 0x3f0]
mov eax, dword [eax]
shl eax, 4
mov ecx, dword [ebp - 0x3f8]
mov ecx, dword [ecx]
lea eax, [eax + ecx*8 + 0x10081848]
mov ecx, dword [ebp - 0x400]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x10c]
mov eax, dword [eax + ecx*4]
mov dword [edx], eax
mov dword [ebp - 0x50], 0xc176b0f7
mov dword [ebp - 0x4a4], 0xbc657e3b
mov dword [ebp - 0x4a0], 0xbc657e3b
mov dword [ebp - 0x49c], 0xbc657e3b
mov dword [ebp - 0x498], 0xbc657e3b
mov dword [ebp - 0x2e4], 1
mov dword [ebp - 0x13c], 0x4bbc1846
mov dword [ebp - 0x418], 0xffffffff
mov dword [ebp - 0xc4], 0
jmp 0x100243c5
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 4
jge 0x100243e1
mov eax, dword [ebp - 0xc4]
mov dword [ebp + eax*4 - 0x134], 0xfffffffc
jmp 0x100243b8
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x50], 0
jmp 0x100243f8
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 3
jg 0x10024758
mov dword [ebp - 8], 7
mov dword [ebp - 0x78], 0x14b81230
mov dword [ebp - 8], 0
jmp 0x10024420
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 3
jg 0x10024753
mov dword [ebp - 0x15c], 0x24e228c5
mov eax, dword [ebp - 8]
cmp dword [ebp + eax*4 - 0x134], 0
jne 0x1002444d
mov dword [ebp - 0x294], 1
jmp 0x10024454
and dword [ebp - 0x294], 0
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 8]
cmp dword [ebp + eax*4 - 0x134], ecx
jne 0x1002446f
mov dword [ebp - 0x408], 1
jmp 0x10024476
and dword [ebp - 0x408], 0
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x134]
mov dword [ebp - 0x508], eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0x510], eax
mov eax, dword [ebp - 8]
cmp dword [ebp + eax*4 - 0x134], 0
jg 0x100244a8
mov dword [ebp - 0x284], 1
jmp 0x100244af
and dword [ebp - 0x284], 0
mov eax, dword [ebp - 0x284]
sub eax, 4
je 0x100244cc
cmp dword [ebp - 8], 0
je 0x100244cc
mov dword [ebp - 0x28c], 1
jmp 0x100244d3
and dword [ebp - 0x28c], 0
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x4a4], 0x110bc03d
mov eax, dword [ebp - 0x28c]
mov ecx, dword [ebp - 0x294]
lea eax, [ecx + eax - 0x110bc03d]
cmp eax, dword [ebp - 0x50]
jle 0x10024508
mov dword [ebp - 0x29c], 1
jmp 0x1002450f
and dword [ebp - 0x29c], 0
mov eax, dword [ebp - 8]
imul eax, dword [ebp - 0x29c]
test eax, eax
je 0x10024530
push 0xfffffffffffffffe
pop eax
test eax, eax
je 0x10024530
mov dword [ebp - 0x2a4], 1
jmp 0x10024537
and dword [ebp - 0x2a4], 0
cmp dword [ebp - 0x2a4], 0xfe9f4864
je 0x1002454f
mov dword [ebp - 0x2ac], 1
jmp 0x10024556
and dword [ebp - 0x2ac], 0
cmp dword [ebp - 0x2ac], 6
jbe 0x1002456b
mov dword [ebp - 0x2b4], 1
jmp 0x10024572
and dword [ebp - 0x2b4], 0
mov eax, dword [ebp - 0x2b4]
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x78]
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x134]
cmp eax, dword [ebp - 8]
jl 0x1002459c
mov dword [ebp - 0x2bc], 1
jmp 0x100245a3
and dword [ebp - 0x2bc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x134]
add eax, dword [ebp - 0x2bc]
mov ecx, dword [ebp - 8]
mov dword [ebp + ecx*4 - 0x134], eax
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x2c4], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x2c4]
mov dword [ebp + eax - 0x4a4], ecx
cmp dword [ebp - 0x2c4], 0xdcb0c7b2
jae 0x100245fa
cmp dword [ebp - 8], 0
je 0x100245fa
mov dword [ebp - 0x2cc], 1
jmp 0x10024601
and dword [ebp - 0x2cc], 0
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x2cc], eax
jle 0x10024625
mov eax, dword [ebp - 8]
cmp dword [ebp + eax*4 - 0x134], 0
je 0x10024625
mov dword [ebp - 0x2d4], 1
jmp 0x1002462c
and dword [ebp - 0x2d4], 0
cmp dword [ebp - 0x2d4], 0x5412
jne 0x10024644
mov dword [ebp - 0x2dc], 1
jmp 0x1002464b
and dword [ebp - 0x2dc], 0
mov eax, dword [ebp - 0x2dc]
mov dword [ebp - 0x2e4], eax
mov eax, dword [ebp - 0x2e4]
mov dword [ebp - 0x13c], eax
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x13c], eax
je 0x10024680
cmp dword [ebp - 0x78], 0
je 0x10024680
mov dword [ebp - 0x410], 1
jmp 0x10024687
and dword [ebp - 0x410], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x134]
cmp dword [ebp - 0x78], eax
jle 0x100246a5
mov dword [ebp - 0x144], 1
jmp 0x100246ac
and dword [ebp - 0x144], 0
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x134]
cmp dword [ebp - 0x144], eax
jle 0x100246ca
mov dword [ebp - 0x14c], 1
jmp 0x100246d1
and dword [ebp - 0x14c], 0
mov eax, dword [ebp - 0x50]
cmp eax, dword [ebp - 0x14c]
je 0x100246e8
mov dword [ebp - 0x154], 1
jmp 0x100246ef
and dword [ebp - 0x154], 0
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x134]
sub eax, dword [ebp - 0x154]
mov dword [ebp - 0x418], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x4a4]
mov dword [ebp - 0x15c], eax
mov eax, dword [ebp - 0x15c]
sub eax, dword [ebp - 8]
cmp eax, 0xb307
jg 0x10024734
mov dword [ebp - 0x164], 1
jmp 0x1002473b
and dword [ebp - 0x164], 0
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x134]
add eax, dword [ebp - 0x164]
mov dword [ebp - 0x78], eax
jmp 0x10024419
jmp 0x100243f1
mov dword [ebp - 0x74], 0xc176b0f7
mov dword [ebp - 0x494], 0xbc657e3b
mov dword [ebp - 0x490], 0xbc657e3b
mov dword [ebp - 0x48c], 0xbc657e3b
mov dword [ebp - 0x488], 0xbc657e3b
mov dword [ebp - 0x1cc], 1
mov dword [ebp - 0x1d4], 0x4bbc1846
mov dword [ebp - 0x430], 0xffffffff
mov dword [ebp - 0x94], 0
jmp 0x100247be
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 4
jge 0x100247da
mov eax, dword [ebp - 0x94]
mov dword [ebp + eax*4 - 0x124], 0xfffffffc
jmp 0x100247b1
push 0x26d7
lea eax, [ebp - 0x74]
push eax
push 0x398b
push 0
call fcn.10026a91
add esp, 0x10
mov dword [ebp - 0x74], 0
jmp 0x10024802
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 3
jg 0x10024b62
mov dword [ebp - 4], 7
mov dword [ebp - 0x80], 0x14b81230
mov dword [ebp - 4], 0
jmp 0x1002482a
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 3
jg 0x10024b5d
mov dword [ebp - 0x1f4], 0x24e228c5
mov eax, dword [ebp - 4]
cmp dword [ebp + eax*4 - 0x124], 0
jne 0x10024857
mov dword [ebp - 0x17c], 1
jmp 0x1002485e
and dword [ebp - 0x17c], 0
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 4]
cmp dword [ebp + eax*4 - 0x124], ecx
jne 0x10024879
mov dword [ebp - 0x420], 1
jmp 0x10024880
and dword [ebp - 0x420], 0
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x124]
mov dword [ebp - 0x518], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x520], eax
mov eax, dword [ebp - 4]
cmp dword [ebp + eax*4 - 0x124], 0
jg 0x100248b2
mov dword [ebp - 0x16c], 1
jmp 0x100248b9
and dword [ebp - 0x16c], 0
mov eax, dword [ebp - 0x16c]
sub eax, 4
je 0x100248d6
cmp dword [ebp - 4], 0
je 0x100248d6
mov dword [ebp - 0x174], 1
jmp 0x100248dd
and dword [ebp - 0x174], 0
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x494], 0x110bc03d
mov eax, dword [ebp - 0x174]
mov ecx, dword [ebp - 0x17c]
lea eax, [ecx + eax - 0x110bc03d]
cmp eax, dword [ebp - 0x74]
jle 0x10024912
mov dword [ebp - 0x184], 1
jmp 0x10024919
and dword [ebp - 0x184], 0
mov eax, dword [ebp - 4]
imul eax, dword [ebp - 0x184]
test eax, eax
je 0x1002493a
push 0xfffffffffffffffe
pop eax
test eax, eax
je 0x1002493a
mov dword [ebp - 0x18c], 1
jmp 0x10024941
and dword [ebp - 0x18c], 0
cmp dword [ebp - 0x18c], 0xfe9f4864
je 0x10024959
mov dword [ebp - 0x194], 1
jmp 0x10024960
and dword [ebp - 0x194], 0
cmp dword [ebp - 0x194], 6
jbe 0x10024975
mov dword [ebp - 0x19c], 1
jmp 0x1002497c
and dword [ebp - 0x19c], 0
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x80]
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x124]
cmp eax, dword [ebp - 4]
jl 0x100249a6
mov dword [ebp - 0x1a4], 1
jmp 0x100249ad
and dword [ebp - 0x1a4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x124]
add eax, dword [ebp - 0x1a4]
mov ecx, dword [ebp - 4]
mov dword [ebp + ecx*4 - 0x124], eax
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x1ac], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x1ac]
mov dword [ebp + eax - 0x494], ecx
cmp dword [ebp - 0x1ac], 0xdcb0c7b2
jae 0x10024a04
cmp dword [ebp - 4], 0
je 0x10024a04
mov dword [ebp - 0x1b4], 1
jmp 0x10024a0b
and dword [ebp - 0x1b4], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x1b4], eax
jle 0x10024a2f
mov eax, dword [ebp - 4]
cmp dword [ebp + eax*4 - 0x124], 0
je 0x10024a2f
mov dword [ebp - 0x1bc], 1
jmp 0x10024a36
and dword [ebp - 0x1bc], 0
cmp dword [ebp - 0x1bc], 0x5412
jne 0x10024a4e
mov dword [ebp - 0x1c4], 1
jmp 0x10024a55
and dword [ebp - 0x1c4], 0
mov eax, dword [ebp - 0x1c4]
mov dword [ebp - 0x1cc], eax
mov eax, dword [ebp - 0x1cc]
mov dword [ebp - 0x1d4], eax
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x1d4], eax
je 0x10024a8a
cmp dword [ebp - 0x80], 0
je 0x10024a8a
mov dword [ebp - 0x428], 1
jmp 0x10024a91
and dword [ebp - 0x428], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x124]
cmp dword [ebp - 0x80], eax
jle 0x10024aaf
mov dword [ebp - 0x1dc], 1
jmp 0x10024ab6
and dword [ebp - 0x1dc], 0
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x124]
cmp dword [ebp - 0x1dc], eax
jle 0x10024ad4
mov dword [ebp - 0x1e4], 1
jmp 0x10024adb
and dword [ebp - 0x1e4], 0
mov eax, dword [ebp - 0x74]
cmp eax, dword [ebp - 0x1e4]
je 0x10024af2
mov dword [ebp - 0x1ec], 1
jmp 0x10024af9
and dword [ebp - 0x1ec], 0
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x124]
sub eax, dword [ebp - 0x1ec]
mov dword [ebp - 0x430], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x494]
mov dword [ebp - 0x1f4], eax
mov eax, dword [ebp - 0x1f4]
sub eax, dword [ebp - 4]
cmp eax, 0xb307
jg 0x10024b3e
mov dword [ebp - 0x1fc], 1
jmp 0x10024b45
and dword [ebp - 0x1fc], 0
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x124]
add eax, dword [ebp - 0x1fc]
mov dword [ebp - 0x80], eax
jmp 0x10024823
jmp 0x100247fb
mov eax, dword [ebp - 0x438]
mov eax, dword [eax + 0x24]
and eax, 0x4000000
je 0x10024cf6
mov dword [ebp - 0x454], 0xffffffff
mov dword [ebp - 0x20], 0
jmp 0x10024b90
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 1
jge 0x10024ba6
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x88], 1
jmp 0x10024b89
mov dword [ebp - 0x20], 0
jmp 0x10024bb6
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 1
jge 0x10024bcc
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x104], 0x3690f1d8
jmp 0x10024baf
mov dword [ebp - 0x20], 0
jmp 0x10024bdc
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x10024bf2
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x5ec], 2
jmp 0x10024bd5
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov eax, dword [ebp + eax - 0x88]
mov dword [ebp + ecx - 0x104], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x88]
push 4
pop edx
imul edx, edx, 0
imul edx, dword [ebp + edx - 0x104], 0
add ecx, edx
cmp dword [ebp + eax - 0x88], ecx
jne 0x10024c44
mov dword [ebp - 0x204], 1
jmp 0x10024c4b
and dword [ebp - 0x204], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x88]
cmp dword [ebp - 0x204], eax
jg 0x10024c6c
mov dword [ebp - 0x44c], 1
jmp 0x10024c73
and dword [ebp - 0x44c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x88]
mov dword [ebp - 0x528], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x88]
mov dword [ebp - 0x530], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5ec]
mov dword [ebp - 0x538], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x104]
neg eax
cmp eax, 0x9bdba76a
jne 0x10024cce
mov dword [ebp - 0x20c], 1
jmp 0x10024cd5
and dword [ebp - 0x20c], 0
mov eax, dword [ebp - 0x20c]
mov dword [ebp - 0x454], eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax]
or eax, 0x200
mov ecx, dword [ebp - 0x10c]
mov dword [ecx], eax
jmp 0x10024d05
push 0
push 0xac5
call dword [sym.imp.KERNEL32.dll_GetCPInfo]
mov esp, ebp
pop ebp
ret